last executing test programs: 8m17.540194981s ago: executing program 0 (id=609): bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x6a, &(0x7f00000004c0)={@broadcast, @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x88a8, 0x0, 0x0, [0x0]}, {0x0, 0x0, 0x0, 0x0, 0x11}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [0x4]}, {0x8, 0x88be, 0x0, {{}, 0x1, {0x4000000}}}}}}}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$rds(0x15, 0x5, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000300)={0x0, 0x2, 0xffffffffffffffff, 0x7ff}) read(0xffffffffffffffff, 0x0, 0x2) write$char_usb(0xffffffffffffffff, &(0x7f0000000040), 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x22180, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000140)) socket$inet_smc(0x2b, 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/vmallocinfo\x00', 0x0, 0x0) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, 0x0) read$hiddev(r2, &(0x7f00000000c0)=""/4092, 0xffc) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x0, 0x100000000}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000140)={&(0x7f0000000100), 0x0, 0x80000}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x1, 0x9, 0x8, 0x4, 0x5, 0x6}) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r4, &(0x7f00000000c0)=0x10001, 0x12) getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, 0x0, &(0x7f0000000080)) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) 8m16.939907549s ago: executing program 0 (id=613): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) getsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000000c0), &(0x7f0000000100)=0x8) write$UHID_CREATE2(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB=';'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000040)={0x5f, "6925c9ef5639daa15e67a870f7f2b43107b985d9cb54598b2eeaed2934913847", 0x2, 0x1}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x10060, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x80, 0x23456}) r6 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x1, 0x0) fchdir(r7) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x103a42, 0x44) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) r8 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r8, &(0x7f0000000a80)={&(0x7f0000000200)={0xa, 0x4e22, 0x6, @ipv4={'\x00', '\xff\xff', @empty}, 0x3}, 0x1c, 0x0, 0x0, &(0x7f00000002c0)=ANY=[], 0x40}, 0x6048090) 8m15.703880974s ago: executing program 0 (id=616): socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_trace_dev_match', 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0xffffd000) read$FUSE(r2, &(0x7f00000034c0)={0x2020}, 0x2020) 8m13.600985609s ago: executing program 0 (id=626): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r0, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) getsockname$unix(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000240)=0x6e) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="183f0000000000000000000003000000950000000000000095"], &(0x7f00000003c0)='GPL\x00', 0x2, 0x1007, &(0x7f00000005c0)=""/4103, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0xc0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) move_mount(r2, 0x0, r1, 0x0, 0x46) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r5}, 0x10) recvmmsg(r3, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}, 0x3ff}, {{0x0, 0x0, 0x0}, 0xed7}], 0x2, 0x42, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYRES64=0x0], 0x0) 8m10.517894539s ago: executing program 0 (id=636): socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_trace_dev_match', 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0xffffd000) read$FUSE(r2, &(0x7f00000034c0)={0x2020}, 0x2020) 8m9.837966601s ago: executing program 0 (id=642): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) (async) r3 = syz_io_uring_setup(0x952, &(0x7f0000000400)={0x0, 0x537, 0x2, 0x1, 0x3d5}, &(0x7f0000000040), &(0x7f0000000240)) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r3, 0x12, 0x0, 0x700) r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r4, 0x88, 0x68, &(0x7f0000000080), 0x4) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r8 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc)=0x0) timer_settime(r9, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async, rerun: 64) sendmsg$inet(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000009c0)='m ', 0x2}], 0x1}, 0x4000005) (async, rerun: 64) recvmsg$unix(r6, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x10002) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x70bd25, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x30, 0x80, 0x1d, 0x0, 0xee01}}}, 0xb8}}, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f00000000c0)={0x87, 0x2, '\x00', [@generic={0x6, 0x15, "a3f3e5029f379a4b84b9ac1ac74297cb737cd664b7"}]}, 0x20) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x880}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@delchain={0x24, 0x64, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x9, 0xffe0}, {0x10, 0xffff}, {0xffe0}}}, 0x24}}, 0x0) 8m9.213119907s ago: executing program 32 (id=642): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) (async) r3 = syz_io_uring_setup(0x952, &(0x7f0000000400)={0x0, 0x537, 0x2, 0x1, 0x3d5}, &(0x7f0000000040), &(0x7f0000000240)) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r3, 0x12, 0x0, 0x700) r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r4, 0x88, 0x68, &(0x7f0000000080), 0x4) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r8 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc)=0x0) timer_settime(r9, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async, rerun: 64) sendmsg$inet(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000009c0)='m ', 0x2}], 0x1}, 0x4000005) (async, rerun: 64) recvmsg$unix(r6, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x10002) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x70bd25, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x30, 0x80, 0x1d, 0x0, 0xee01}}}, 0xb8}}, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f00000000c0)={0x87, 0x2, '\x00', [@generic={0x6, 0x15, "a3f3e5029f379a4b84b9ac1ac74297cb737cd664b7"}]}, 0x20) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x880}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@delchain={0x24, 0x64, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x9, 0xffe0}, {0x10, 0xffff}, {0xffe0}}}, 0x24}}, 0x0) 3m6.711801095s ago: executing program 1 (id=1936): r0 = socket$packet(0x11, 0x3, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000800)="39000000140081ae10003c000500018311001f9f660fcf066505acb612f691f3bd3508abca1be6eeb89c44ebb37358582bdbb7d553b4e92155", 0x39}], 0x1}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) syz_emit_ethernet(0x8a, &(0x7f0000000000)={@broadcast, @multicast, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x3, 0x2, 0x0, @broadcast=0x1000000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @empty, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@remote, 0x4e210000}]}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@multicast1}, {}, {@dev}, {@private}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@dev}]}]}}}}}}}, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10) sendmmsg$unix(r5, &(0x7f000000e480)=[{{0x0, 0x0, &(0x7f000000e400)=[{&(0x7f000000e300)="cf8ce2ce29bc73d51bc808819f11b222de4b0a67f6be1c4669569a98222a382602c3f7c734daa5ade10ba0856fdcad13", 0x30}], 0x1, 0x0, 0x0, 0x1}}], 0x1, 0x0) acct(0x0) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f00000002c0)={0x1040, r6, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x1014, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "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"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7ffd}, @ETHTOOL_A_BITSET_MASK={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}]}, 0x1040}}, 0x40) 3m6.711490297s ago: executing program 1 (id=1937): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendfile(r0, r1, &(0x7f00000001c0), 0xfffffffffffffff7) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0) add_key(&(0x7f00000000c0)='pkcs7_test\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) r2 = socket$can_bcm(0x1d, 0x2, 0x2) close_range(r2, r2, 0x0) io_setup(0x9, &(0x7f0000000240)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000280)=@gcm_256={{0x304}, "80f54d84b9271f0e", "6298859a9efb2a3b9e8b9fc2250bdf78320f4b4c2915f73fb3902773504fe0ce", "8d8a4773", "00060000001800"}, 0x38) setsockopt$sock_int(r4, 0x1, 0xa, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000240)='n', 0x1}], 0x1}, 0x0) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) io_submit(r3, 0x1, &(0x7f0000000100)=[&(0x7f00000002c0)={0x400000, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f0000000200)="05", 0x1}]) 3m5.50839418s ago: executing program 1 (id=1942): bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f00000009c0)=ANY=[@ANYBLOB="8500"], &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x94) madvise(&(0x7f0000289000/0x2000)=nil, 0x2000, 0x63) 3m5.439815277s ago: executing program 1 (id=1943): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x100) io_uring_setup(0x2277, &(0x7f0000001840)={0x0, 0x0, 0x0, 0x0, 0x1f7}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[]) r2 = syz_open_dev$radio(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r2, 0xc0945662, &(0x7f0000000080)={0xcd9a, 0x0, '\x00', {0x0, @bt={0x7, 0x6, 0x1, 0x3, 0x2, 0x2, 0xb59, 0x5c, 0x9, 0x4, 0x3, 0xffff, 0xc59, 0x4e7, 0x1, 0x10, {0xfffffffe, 0x4}, 0x6, 0x9}}}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) capset(0x0, &(0x7f0000000140)) madvise(&(0x7f0000358000/0xe000)=nil, 0xe000, 0x19) 3m5.437393805s ago: executing program 1 (id=1944): read$eventfd(0xffffffffffffffff, &(0x7f0000000340), 0x8) r0 = getpid() rt_tgsigqueueinfo(r0, 0x0, 0x5, &(0x7f0000000140)={0x2, 0xffffffff}) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) set_mempolicy(0x4003, &(0x7f0000000200)=0x4, 0x9) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f00000001c0)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) add_key(0x0, 0x0, &(0x7f0000000100)="305c0605e182d1447ad1ad83700398d1c7d7982b8f57fb20a3adc9", 0x1b, 0xfffffffffffffffe) r5 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d77f", 0x7, 0xfffffffffffffffe) r6 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xffffffffffffff02, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = dup(r8) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r8, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) writev(r4, 0x0, 0x0) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x80) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r11 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r11, 0x10e, 0xc, &(0x7f0000000000)={0xfffffff8, 0x0, 0x400}, 0x10) 3m5.180134822s ago: executing program 1 (id=1945): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff, 0xffffffffffffffff}) (async) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000040)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0x10408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) (async) syz_fuse_handle_req(r4, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_fuse_handle_req(r4, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0xfeffffffffffffff, 0x0, 0x0, {0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3966, 0x1, 0x8000, 0x0, r6, r7, 0x3, 0x800}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32) r8 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) (rerun: 32) write$tcp_congestion(r8, &(0x7f00000000c0)='lp\x00', 0xfffffdef) (async, rerun: 32) dup2(r8, r4) (rerun: 32) landlock_create_ruleset(0x0, 0x0, 0x0) (async) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0x541b, &(0x7f0000000000)={0xffffffffffffffff}) close_range(r9, 0xffffffffffffffff, 0x0) r10 = dup(r2) ioctl$KVM_SET_MSRS(r10, 0xc008ae88, &(0x7f00000000c0)=ANY=[@ANYBLOB="8200000000000000b1000040"]) (async) syz_usb_connect(0x3, 0x1b, &(0x7f0000000100)=ANY=[@ANYBLOB="12010002c2bae310c00900023c5801029a620902090000060780ff"], 0xfffffffffffffffe) 3m4.940146707s ago: executing program 33 (id=1945): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff, 0xffffffffffffffff}) (async) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000040)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0x10408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) (async) syz_fuse_handle_req(r4, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_fuse_handle_req(r4, &(0x7f0000004200)="a28096c80abf3543ecde7564abff5085d2227ebcb0f164ae92706ad0b083a3f469a3efd15b4921e9c3063b98b3082068e7c31950dde842eac55df0f991453cad62a6956b0b6f7b8cf49b506a3060fe1127eca99663ade8efa89ee189acb5f3b92f6bc4c46621c803eed0d0bb5f32384870ed08f89d4f74445762fb99715e083c4c92a8878be19ffacc30d0f2da64f971cd40563163adc15670ecf25cd3ad96138967c4b53ad9d04b5193ab5fb674aa0030a9d703d1baf810ce897f969121f142161919e583c275671b999e7f363891dfdfdf3556d01b86ee29eca8fccbfeaf1771395148706cc6e6be7ce29fc9ffef061b5420950c1a525bf75ad06edec51538d1c5bbc77da72dc90fd9998936fffdda2427e5a68966c7e2208f76304680182ec73007e482f034195712af922db2726195d997708734db9e7825a864be00b2a4f800881fc0363f5e618398454f35b148b4ccb88d418269fac868a8ba4a2d5b4f06a1ac01b5ad158b842e05adca22c7372585bf4ce95560b6c1e021a3ed2ff7bd3b6b3c7734c3b66d7e4c460096312082f89b16baa6e73814aa60925780cd92cd65087e260ec046fc363264366a9df2c849c0644911303946adad544521ceb469a3e193ecc9a7876403fac461a4a70d6193b2451189a5c5120b3535e9edf619108af7f517b58abd3fa7fb1ab832213430d2e6901076fba9c9e1acc6c6f48ff0e419bbc45589745a176f52a7407ad5e3dd49acb31b47862806f47077dda04905e45a80a12cbcd4d2dd9fe66c2d1f99394fed8ec60961cd2dc7115a96ece432fac86d51bebb08b95f447a83792fe80291fca7b298c9043ef2c26f0f7e42798d3f54c84b94c24c76c555d83ecc53b99bb22d71845e5cf21a5ba7fbeffeb6306e1730db14561b950a3f24bcfd78d4ab0d97de8054bb1a6077ae7cca6e45d846d3df82298d07212922742cb0facac3b77edfbab90e9ee2d4f7b0ee9b17bb11ec5e5721340d84cb6bd93428167e69b47759172557acda313c3decdfc6fe9336bfade459f43b39d0f2289f9142db280f4ee668e650e12858c577e12e2b9a57ee66c834be97979bcbe94747fa5d8d0b7d3a9f8f218df1bf960f828429a1efe838616b18faf6629236ddbded43a093efae163228e5c38fd7714743c2fcca47e3382bcfb1ab893fd7377527b4ec43f3fa60ebd338161d8de7cad65b15579e4af258f5fe3a63c2637a15703207029b0899b5427767647baef11e291358e6e54f6f13d3d2ca7a5e7969e04d2733b3b9ab822c69a3cfac097384de5071a9b74a656136d55eb1000008747b509fd610ff62b4950ef71c934fe21a48a4931d3d9458b415f112cee65c660f5490e982341da1c58634b3967ca6f3596d20cc90f508382156e36f16539093240ef5f2aa6a2c0dff2a67df30dcf50bf6e0b82a3d49f2d532a8dde1b3ceefcf0837190b74186090d1c18b59917d7efce1adfb238ef4a7b1d22c4cef09320221de883e97e6882466508de06fcdabad3b741bdca2cff879d57ddda52f42b3dcb8a78cfc05826af7e4ff155960ff8491194f4d321ef195990abaeeefdcb852d1e1e3703f317385a9458b6c2dd9db830f757ec29c9939fc7313e639fe485bc1e41ddaaef3fbf1f7cc527c8fad0d21b8082482caad7bee440e5097665f636c3dfec82f8c98afb6243bc3944939675a594277d278ba4361461f7da52e224e4ce5dee4a467bf6ae9f67b61ac6eb0a440406abac2016eec907e241c57f5f44be47290fd0fef785ff04df3810ccd637b4d97a84bae8486a36f75d872e645fe46625969fc2d1f032c56ed44bd98ea27bd9b6ddc8eb2dc2ec9f90f2f1ca1bd20e37ac58b03c84c872f4ba47310654986641460dfdd531ac62a76ad87b89c103ac5c9c2e7e70c66447b3412d4a1e5cbc30e16939505116c04de33ae054ed366de8d1f971c2de439957a194e22a488f58d7efd46439177f3f3c45a1475927eecd846d3d2e6a2ab5c7f8addd99062c2fc6b272d1f51bb8f22f1b6f8bb3faf8aa85e5eb9abf7df5cf8f26267323808b0833a987989cbe59205e7ad06556e2d1b8a4873ca1cbcbc8d43abc145fd4eb832e7a58ab2c793d003ce7b1850ce45eb7480417a1e9eb9d39a1028a2a04a2aa649c098c4f8eee514db5f6021173bb254b8e22b150b2ca01dc7ff235db46ed78d07f43d1adab13b8445d1b32069eb45f9d389fcf5a3f7d3ebe243c5b1fe17b1f5a3d571b65f21b9e471e818172554dc956749b99cb7a5f303ec480d7194a2ba86e204f06aa1becdddc8c49082c527e7064ac2ad77dc05639d3d2a7778f6943ed6105ebf6f0b9e94fddbe05c236ec000f4d1d4e496b10068211ab68ada4c7f7ac61f5f5ba5f1810d5bbe87ff4f8356af0d3f682baedb0ad8f8488b277421f0a03fc5e3095ee34bc4472d8f17e3f7013cf2f79f5ff3ea4b6bae56d1365a33b09bfa9a496323f7da923b7e29dce4beb80035f13130004c96e56d7ef6ca6c101d20c27a218e623227c33c9e488b17e7ae9ac20da8240501f7b614a1730f164553fe479ef149866e4ea47296814284a3d3eb7cbb294289ffb996e0eb053b9c16e54cf267832e3d360eb196ed51305630223309ea97215628f01ec9d3ea48096418d5e962cac5063460f0a18772ec7ce66d14a1cce14b52c40bbbfafccbf1e76f09e57ff0718048e5b993157a6cf4718826b1e09430413a3596a15c4a620fa8c8e1d1663e5739f9f790ddbb3be0e00187d43717d659242467d8681ac10303346157f894d9037641417010e9654c6a5b22383e73a5a37128f50078a980c30930321aa5c5e7851d5d392ddce3a14a96916fa8421ae6728f37f5de7c3e98feb4babd4e1bd2315d595e209d52748f70adc2284fcdaa6ad880470d2a071f3490aaf3491fb64b4547419e8eccdc491a8921156cb4811ad1e66514a32b0b31b641438881f28c1e6461b4f451938999af671e8c6a5cd0c072a9fe4cdbefe24ca616f3d0a15ac97cca835b1a440e04fa28340c6044176c8ecc8ee0d033d47db8a0aacfa0eabdfa1c9509fc2604008f01cbafeb5bd2b503b809ed672340b9a576593f1ef388391b54b605e7a15bef7b1345627a34fca57738b0f8f4f19eea93c903495274a4425a1a1cc6c4c6e335b631df5185c95b485a4257867b5347a40e4e14dcc560f061fd4fd265137dc68afd548adde778f1330f769acb1ccf5da14ff6992c24e210ea6e6179421881b803393bc6974e37106c5b5b3b5d0b3469f8969bffb7e4ceb2c98e928e74366492d27235ae4c74a2f48511aeeaa53a2beafa7a331b50e454c507af1b63350a5cef35668a5b9325014192277e509561008b3601088f79d42eaa8b1e4ae2000b31749e2b8094312ddb7f3c1cd625ef885c11fa22a66e374b52b3425e0b8016154e1fd8471339e32e7373d63ab646d893fbe09ae07b06074c01401ea76b3c382a9d32f24f93c789964e16bc4206ecd75c10917ab84ffd8d6cdf4cd28fd90375ff28518f8c1a3befc538e1b9e427fb671988d29f2fb2fcd039f4d341c84eb4d7cf600ddaba88bb094e4d87a1419180149f491368e648b69985b05ac39a4ecdd3c5135f3a5c8ad7792dacb6470144bb9e67805a211efb3ec9ccaf8e0901345fb19e4da579e1fbe86a1207f4f13c3436009c2c640b7cf3f8b77ca7bd994bf93308027359c6dd1b7db1e153fc0821968ef36c003b6c73fe890f4de24f5c6458dbaaf3819edeaa91783c3cfc7e773689236248195c7bbd60113f2476fa3687621d668d1728ee433d2f8f4db707345d30f1e52ab87a2a0afd547c6bb06500f59f17facde48f693490e22494b75d11df1a143b85068d143ef6a9bb5937a9df380c8948f1a01e9675e18409edb0f6b9605b68e34632fcce472dc50b90b0f6dcd57931f78e1e8861a0fb62e72b0baad6f9d23c1cfb0f19b25013c8d9fcd786a2f6f79768b5fb398f7b2baa31ce8156d1fc4a46c1c463fdf30360d42aeed2ef11611d0b7f654bb51052fd4dc39328f8ec4c58bbda05e6f1b3c8f6d8adca0268f2410e9a4a7d63b6616006d0e02f6edacc10e5c54fd85f15a8bd7648a293f23d6a699bd9a675250475a73a96d7475e4fabb89fb5e7de5d7a3479aa485c0befc60d0ac4fd5ac6dbecceb06cad86e219fc0ce4720758917811a3215f8d13e413bfb64fc065fc421aede0b56691797dac428c7e463479fa591b9072c309b7533e427c5cc11a1f6cf9a5b995d328d796d874c5b55dfc12a5039b413ce319cf5ba1f355c4e0717d32650b43e18010f37f048731931c52c4f36eb969dda702afe96c2a5241350a67ba2d026946189c5e281293c9a8e2cff3784776f1de78b917101b54e5ab00c045ea15f28a0e3f509962cf8bd3385d85250737eae5c34ece86b86669c13b00308a3b13c0ac3c83ff26fb52a4aa83c1233a9490cb9ca917a056908931751bddb88a62379a713395f0764e4a393faf253a4026d0472270e6036287d56850df1751543484d65b3062155b6300e0024241c59a862ae769c1a9232a2d9fb24705177a09cceb3eefbf9f106f67e01be14cdeb4d2fc7d8661df3e75de5ccd09a7e559f028fb9837c621ea0045b4d1b679067f246339c974631aa7134d4e910efb28d3c48929cef1df7e6c73668762d55086b6c59c36ac90154135fd7ca4e4047dd0aa161fa982d8edf9c0cb9666477e096c55718f6e4742415fefd4f696d1f1ccd6322bc19496ddebd36282a7c707d5b44113e30678e6e33ab7d34be04a59ac614d6a54134490998be02636fa91633d6294781c2b9a54c611c0045cfcfe81f49aa21b29d835cd2047c854486fd8e65a2ebf629f7ced602b9dd107bfde483e5c9b5cbba4a08cdce09920bda9978b7fc2b4a89bf1573a26389e52090fdf5dccf22111dc8c42fd3c8c477092895398086cc22cca665269e193fc650742a361a44b857d258429f701f22e9b7615bc3dab78c1479a41cf8575cdb17169470b347adfc03e03daea3e269725cfc72df5664b9df36d2f2b55013b71133e0b80577a47182511ebb308b6248d457bd2af7b28e77182c305241178c4124ab102771fd5a8c3dacb8775de881301d71587c76bcf0a97a72ad244d0c42fd71aceec32dd48bb5c9a95b391166c832ac5bac8c7cae4d18b3f7d9f2e4782fdf97732e3d51f67bbb57f989ee0d7589dbd0c2a5c63840e914b9d7d720fa120acbffebf816b588b2ccc052e7fa78992e0ea39dd21a122add41195f8e2e1acd777c1a4e8ef4362fef441feb4d9252c6bfbd2742152300a32027776e3341620d3c8d9365e10e81adcca7d87a0e555c98a0353c692557d90ee9be3fbaab766abf93e2462149fd99c92a5fc58d899ee75535cd1fe1386c5ab0b157c2102039d6015258f59cef3f15b951893a30ae839f740402a30b34e7be73796286403c5beb0853d856d83f1b00b48328f56dcb32e1faab08a3435b1482bf18b21c95aefeaafa7fd761c7f28d416fcde06bf7aee5c6e9eb50e55874253ba3f1d0ce2505b4fc7c3fc996bfbb8446bafe84f5bea94bfd7ca5aeaf237fe793b66e5c521d4092e4e1f9bde1dfcfe53fa55005d21cfa833a338fd9792614129336060e10d1911862070761aa20c2902eb7c5a355eff4cf6253d7102a2ca1fead4c53b57d576d104c081310d92797e4e2e8c269d19910d0d4cedf30fa28ba680c00137f83de940624229b6a125ce5233c6cf4a3640b74f58f288dad8451fbe37641c5559a5f3caf1299c8bfb230723652278fe378efd8e459b9da26cffeb58468a6301dbc06d713ba2d8d43d9038f5f2dc8b831ba58a88eeb5b1786b21e398aeeeb7c1f3d6f01d82b3947862fb9e7cbd7da5d04c5fcd34da28d53e2246e3ac1e3a619ad174efa6435eaa0fc94d610799ce0158421dce046306eb5042143daa336d52206b12610ea6389cdda49bf5af1d4ee42ac090a94ae7b7612073f3a5c36a2245eda887f41478f7d20f18667f941f71eebcfa76c1ab28f2a49a3bd56bd3f4e6bd079ab3fe2d94782236e83585a03e52907abaef7456a95d5d3f3d37efdc035dbfd7c41b8ba0af2df8adf1cf24f7ff0beccd3d26bc91caf42314ef7e466f74e19ae0df2e2298fc2f694a7ec134632035585d530e7e19f65c256f001d75382d9825ef741bc213af186377d9ca10d3722354e1897ca5c23ac6a52c9ad0e6b686e1776f7ec65df033e8f4d5db80c1bc354093b319cb70df93d610667675816328c99322f14e636b95f04e6497f139d508b453f53ddb5c289d849fd5407c9bdcefd1642abd46e28cb4e94371bdc606eeb67c9fe17747c68f2d50e82711da4d3edb0eda06f41b7f93fa8fb4d83cf21c79da67000bac2275508217ade1659fa8d24e5f8efb9f4bd21073ebef3d06368eb03fa3cf0d638448bd055ed20d292033ffdba538559c8ff9a2a5c8f83b5c393643d6585d1df994c3be43e72b8f3f53114d2a5f6bcedb573842b23b6a3eb7fca8495bf03bd03fde7b19bd39a16cec49e01f38e671af33cae082d9788e3202799bc466babec2080528d0609c0b731964719093735b4c1e73bd0705637c47516922197c552baeaf3516b5e3bbc2cd1afa3ef8215196ed580d9561092f620b897e98e786a0c7cbb0eedda8063292ba6482497f5f6bb62fb5ab4c97cb7658dc6579718eb97b547fcf47ced1426561af93a15fb4dc6d3d93b868644943c2c94b23b0570bbb81df2666c24f5abccfcdd71e209f3bb43c01d17f9bc8b9af2c26762fc6a741a150b7d1186e4f35175f3c315243e1c11e92c43a1fc492eef5a13c77a81fcf514ebfd0f8e645dae15a07e86b2f01fda065db4505a5eea83cb616f744f6bee731be191c65449c02603556d5a51422cf9c2f19f8d6843e0c1091e0708aa271e91f71c8602b9fa72189e036b7cb6af1569f21269283de94a6d7fe5849fd433d5b719c80419873db0587fc29786cc598d896fb16360bddd2ce12e54d05418f4f5e5f2d7aafe9fcd6268cbe2e9e6329ffb6c67fab8f3ce673028cc06aaa6b857556bba3b44d3fab5b6e875e70a2f3ad4b2ff76f31ead3462d3801ba373b3c2f545e94f57021575e2947f81f53283fc0a5137fd44fa3d074c92de54a0a3465c858f5a7ef08313faddbc3663e4e0167f3cba39612057a7518fbfb031f5ad0f9f75831973ebd733b82e554bf3fdec84e51f65dab6028c6c51366d9d4700fdf255e4c7bd70766e7f2281b3f2a5363f85ce49f9135904d14bcb117ad754c2594dcdca2d30e40ff265b5accfb116f64ed99aad570c4c5a91efdbb984ac651d8721405a0342cf77f448c17a152eabf29e88950558a86d0074e1cefab1eb7c366682f686ee1338737e675ea58eb8b4c86b9f28a6f6e96459f29e3b4dc59ff044c61a0dcc5c31d803e6e98420e446229ccdec3d0f705e92ffe016bb3696373eadab7f35ccf65ab4d9be09a085ce21bbd7c0555376e4d7fe68b5e7a64f48b5127825fb2be598d991f9c1a54bf52713417dcc599e812d85513a537e6eafa738edc972b67e065595d11678449bce6cd3d69800a649b560d0e057c502ca3e72e97820829ecfea801192c3f4e2c8763c095a43ee6fe45fe8730130937668df1d4ee577ada28238be03286481f2d2a004cc4d48856e71fbd64f1a0043a4520ecbbf1b3abdc96b87a27be8495a20542967aa4cd3a44a11502419a083d84e97abfde0901b66dde48388649a0ed6d93b9f20c530e990c7c52370a114d800d6ab3f6687d6bbc105b63738fe05fa6cac98ad6663936bb18cb923264e4c921012b68a26a70977446b8f15f9d62467d8b356560c183a6bd6cd76ec868c3bd94a595cd7bf996755a508a814980c5e588b275200c45afd900c8c2de329ec2484b0e3ecd7b0960e5e3425881d1ff7f8bd8b20f5cc98ffc3acb77f5e88775a4bd3ab9f9eb027e27d3af55ebdf4eebab48ea911128d668d00fc3f5b5480aa0d9a4af563ba577384448e5425157133d59e1cef3c722f33700bd372825046b1fa5824e405154a3af1440bc2b75acfbd07cf92e8c162587e74b5ab66b1c6aeab3ad5fa3ee91da4900ef30ad04baea326df912517dd96e1696b4a91faa66675978a375e81f25464a1073dc6737af08d7e25956bb31d438548a7da38662d49db812a8cf1d6cc65f5c63879fd9ee7fd2a66ca3fc1a768cb239aab88c87206470b4c60592afeb6d69ed97a8f990155862ba4e22b64804142c131a23792937aa8a8696e165c24d7692a04bb4471b0f0d2507fe7c8618421428fc7a0acc984ca5cc6bacb772e8a717bbaa646f9643275910a6037afaf5a80678d18edda138a4e13d06d04a5d06431eab48738225cf1567e960e765728dc12e91b91c6f2b33dfb6e033aa68c1c2334d24335abc4a7a1df5636dec29091da54d5f5a1fff41e4a35a0c2f04f968f7d78e2f51c73577e2192bb20f289aaba5a175c2ed533855bd9ed9a842ad482136dd5e0cf45eb5e2d31ff62a3be1cf8a94a58316e74f4ab9fc54f3a0bb83beef0f355993bdea2c83e61cdc796bf2564ae51fae616799e8711998cd88d35cd9824452fdd65226174b46792cb87f4dd282e4e6f67eb66da413ad877ed6ce775f7e19bc93f48bb9e5ec04009de3c042aeacf7f4b25ad6b30e017303f64fe07ac79e8744aab6926d117f13513d0469cef335fe1d0d787c2d0b2c031a9521786ac10e9f8b768271680337f2c3262abdccb5d3107c632bf1f74c83ee91f49988222fb080cc8faa9b1a02526d8b6087e0b2354173d29016b3309587c16f057dd812aa63c3169150de81f3af97d082a8f8da4ce4f909ff649821d7f96d97613552e8cc4902e046ecfa329b1d980ff5ece69b8f1615fdff5244f41cec0af924624ae1641ecae5fa26c5fb9006e57100ee71377ced7c255ae17a0845e2ee0287c62c1852f93877f9f86157ca9675d383fff5cd6f2b001ec0136c07cf37f5ace1853122c2baa1092d418e2a490c4a5c8f56b828ce1bafeef4e77f095d6b4ed99d56f66812cb19be540ebe5d52e7eff2d69cbb8477e11514f7e3604bf9999f78c2f1ca6f60a2216b87fa0f25269c425b7d50709b200912b3b7899c95e12d6e9c4dacc19e327721860e0477a53e6793fbb7fb9704a848f395f48c24a6e79b9e1358cc3497251de88b8d3a7b22c6d8af1a7fab81530d9f0cc98f62debb222b54780d89794238532717b447d71b46a60ed481c21db85b590b31720009695ecffd4ef029964e5d5149622233ac013e960a005c924f73ea82c318455546c53d74aa3f7e2ff26aa074c40a55aba8b08027fc19b596eec6c4f89bae39e74b9aad88344f7cc5ad3eefa5095f2ab47222e9a357ecd71c6700ac576025201490d9e446603dfd4bda7617dd500981b2d2ab8c43882a5208494cb3f8ebc720bca8a7cf6c80bd7aaaf89507bb3412ea490a78973f12cc30413e9df1458917ea3d68b438d424c1314bc8d01939c5a5a842438281e62d0c800dee704b2a6cd3e1e4b885a6b26b894a98765fa3308c9e4b87f93625faecdb17c29a27cd243bf6030a67874ec9f2443cf8154261ac2a834c01cbe1f314ee7aa3ca552e1648cf8b42a63f249e3538026e09e44d69dc259adb0d1a0cbccb5a5dd5d0dccc90d023da79d5634188ff060f7e35a5f9d7ad99546824d63975d4452de876093f4e997dc46eedcd80a9eebf5e4f077fbb10c7d9e19a3419e7b845972a3b62613c5404a209b16fa88e0ff49d7b4f21fecc1f773c5b4be61021e0cab8602c6e8257649303aaeafcbb178e7a460ff07f219c46eb6fe5bf8113723e454003bd707767c107daf4255751daaf8decf35262640058924eb6587868b2c08230b317e97396ebc928ba8d274ca0eed0bfcb637676003c64e8c1e1a0420b6c96a44226061ced41b8448382abd2f3d0c472afcde231fbc9ee90c2f1132f8e2391246f95ad93354c7460e20de996ad0f61b13b27646887a637cede90b94b7d8c3130f0fe060e8d955c711a2700b302a75bdeb32a0a6802ea795cb114f5f82a1a381a86bbff88b299e47728b746dff964c94c52b661b9429376b1320b46081426b7c340206dc0da151bf84be2a49e78b6b5938753d2b1be8d9e67c43c5d70e72519f5f90d0500e84ee38f82b191ac4d968b0a37901fd923cb289d585693ac3c3f8a94fca6df45e694e199a9cd0b1bc1fa7394bcc96aae670dca6605a998793b7e067ac410ba631057b8b76fcbe9524df820c02efef1608b743cd2aa6d60d3d8e476fa12d3acc329f8272b087d89471177ed531fec1f9c24a975ca2fcd8c246a33e291a3f00b7f234052067a0059c86762475256bb5e7dac6f121a0925506b18933c6e314915d4b3b2130aafc2483ef22ff8bb7b887565b1bd22fabca22037d8fc9437f675c5313526266f60bb7c7c47f30c7d567ed142ea5ec367c4298328d20e5344f01c0c90cf8a6302f4d84b6ba7495fba314a05ba29b63bb6d458fdb05a4411136958309f418fb178e19aa09ff9e62b29732fb2986c96e738f7a688cb2122dbb8f2ad9a5f28bc49ec0c462413552afee8e403259b55ad6dc334dde7f2d306929dd01f2aa6036cafd41874522689301b81c9e50e86828894140356db0a3317b081ed9d8148c41e77e6bda6287762532b86eb91f5480915680deb8a91fb8656b7f0109064865d2b846af0861f67d3f720d6e306540cd7b68f095ef3690b88ea93fb6a402ff5697597cda83171f159e85307d1a8c01611189bd4eb4f0453ab88d43ae181a562a76902a67c687514079d6f4304d9a7c0fa24b6e86074ea0a9fd8187c120312078f5ebfa674adc0303734bf8f6b5585943706594192ad64c9f7d9794fb83758924f862855ddd50bff58b522c43d73c03289baec628cd693cab93101b1e473b76532510e10f03e86812fea6f2d6f5467dcf29e6d7cf8524f383a0ded3f0951c3ffb171a6b8a6d97b5fa8899a19f1a3d0e934a1d4741076e4394ba225158f697bf7d5651717c6950229a0be22e8120d76a414edbcd03d505264b7ede8272ccbd6dbdcebaf11daf6a652f6f9eb74ba7a3ecc942892891388005ae5d971e4e79d696564906dffd44845b704a9abc2fa5ba1bb69a548423a08044ad6d0e365db7e6bea0f3844a452759716cb98dcf326001ec90c1c343174098cdf47ea2e13341058ca014d2a30e9ba3c526de72a6e387181bf76a278c9cbc518d8c374a3f1d9802a39464a100903dbec16f8f095f5d82d9d09507281e4f7fe0ce4fbeced193902a5f658af2a4c1d0952dabdc6ae5830b6b5a2c3f5b8d33a73665990822e5f4a7ce5366755a1615543bdf78299c71e890e0bedb6ec277b10a389d6a3ba9c037221421279e51ab50fb115de2076cc99444202e88ebd9d0fbe4e60234b7b761495ac6c9e615ddac8176164a88fb6d6cc2b52672c8949afe3efc1e87a598896bc93e421423844fcaafe65af898a015b3bcaf623ebeef9a57155af5278ceb52b995f7ca466d9e18b05e86380679e0257cff6d0c6750078462f2ee4701d6d8289ed848b877cf5918625b7937060d667c11119881c30809056892352c6c53c01e395af6866ea350e6f21fa3db772c1177c759999973b51e11ffc590800", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0xfeffffffffffffff, 0x0, 0x0, {0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3966, 0x1, 0x8000, 0x0, r6, r7, 0x3, 0x800}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32) r8 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) (rerun: 32) write$tcp_congestion(r8, &(0x7f00000000c0)='lp\x00', 0xfffffdef) (async, rerun: 32) dup2(r8, r4) (rerun: 32) landlock_create_ruleset(0x0, 0x0, 0x0) (async) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0x541b, &(0x7f0000000000)={0xffffffffffffffff}) close_range(r9, 0xffffffffffffffff, 0x0) r10 = dup(r2) ioctl$KVM_SET_MSRS(r10, 0xc008ae88, &(0x7f00000000c0)=ANY=[@ANYBLOB="8200000000000000b1000040"]) (async) syz_usb_connect(0x3, 0x1b, &(0x7f0000000100)=ANY=[@ANYBLOB="12010002c2bae310c00900023c5801029a620902090000060780ff"], 0xfffffffffffffffe) 2m41.300669705s ago: executing program 6 (id=2048): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x13) syz_usb_connect(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) (async) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) ptrace(0x4206, r0) (async) ptrace(0x4206, r0) ptrace$pokeuser(0x6, r0, 0x8, 0x2) openat2(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)={0x103002, 0x100, 0x38}, 0x18) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000200)={0x6, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b405000000000000711035000000000015000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4000000, 0xc3, &(0x7f0000000240)=""/195, 0x0, 0x3, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x2}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x3}, 0x10, r1}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b405000000000000711035000000000015000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4000000, 0xc3, &(0x7f0000000240)=""/195, 0x0, 0x3, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x2}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x3}, 0x10, r1}, 0x94) 2m39.46377321s ago: executing program 6 (id=2057): socket(0x10, 0x803, 0x0) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x6005) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r2, 0xc01064bd, &(0x7f0000000300)={&(0x7f0000000040)='}i', 0x2, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r2, 0xc01864ba, &(0x7f0000000340)={0x8, 0x0, r3, 0xe0e0e0e0}) ioctl$sock_SIOCGIFBR(r1, 0x8940, &(0x7f0000001540)=@get={0x1, &(0x7f0000001480)=""/191, 0x368b8bd2}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) mknod$loop(0x0, 0x2, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f0000000180)=0x7a, 0x4) bind$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001500add427323b472545b4560a117fff0b0082001b59000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee0000000000000000020000", 0x56}, {&(0x7f00000001c0)="ee64", 0x2}], 0x2) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140)={0x0, &(0x7f0000000280)}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000040)={'ip6gre0\x00', &(0x7f0000000200)={'syztnl1\x00', 0x0, 0x2f, 0xfe, 0x3, 0xfffffffe, 0x40, @private2, @mcast1, 0x10, 0x700, 0x1, 0x9}}) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x401) syz_clone3(&(0x7f0000001340)={0x80, &(0x7f0000000080), &(0x7f0000001440), 0x0, {0x23}, &(0x7f0000000140)=""/226, 0xe2, &(0x7f0000000280)=""/4096, 0x0}, 0x58) socket$nl_route(0x10, 0x3, 0x0) 2m38.041056559s ago: executing program 6 (id=2061): openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) prctl$PR_GET_THP_DISABLE(0x2a) (async) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000200)={0x0, &(0x7f0000000840)=[@code={0x1, 0x51, {"660f388239f3430fc7350200000064440f22033e81080000000066b8e2000f00d866ba4300b8f6ff0000ef36660fd4f8450f0ff10d450f00ddc441bdf67ca900"}}], 0x51}) (async) syz_kvm_add_vcpu$x86(0x0, &(0x7f00000001c0)={0x0, &(0x7f0000000840)=ANY=[], 0x5e}) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000840), 0xca800, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000010400002200"]) (async, rerun: 32) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (rerun: 32) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x4000, 0x2000, &(0x7f0000001000/0x2000)=nil}) (async) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x4c8100, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000100)={0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="000000000000000018000000000000000500000000000000010000000000000085000000000700000000000000b8a2992d438e0f21f8350400f0000f23f848b866373fdf2a3145320f23d00f21f835100000030f23f8460f"], 0x9d}) (async, rerun: 32) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) (rerun: 32) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, &(0x7f00000001c0)="fb4149dd033be3ac2cc4a22332a77b23b08986814d7bb14c94a6ab8031d1dfd92f00000000010000005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa7fc869d22627e7", 0x0, 0x48) (async, rerun: 64) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 64) ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000000380)={0x2, 0x34000, 0x1}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) 2m36.996261926s ago: executing program 6 (id=2063): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000040)={0x2710, 0x3, 0x0, 0x1000, &(0x7f0000fe6000/0x1000)=nil}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x7, 0x0, 0x7fff0006}]}) syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009980708b5192100c7980000000109021b00012000ac000904"], 0x0) close_range(r1, 0xffffffffffffffff, 0x0) syz_usb_connect(0x3, 0x4a, &(0x7f0000000040)=ANY=[], 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'gre0\x00', &(0x7f0000000340)={'syztnl1\x00', 0x0, 0x20, 0x8000, 0x2, 0x3da, {{0x5, 0x4, 0x0, 0x8, 0x14, 0x68, 0x0, 0x80, 0x4, 0x0, @multicast2, @broadcast}}}}) r2 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00') ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000480)={0x1ff, 0x100200, 0x2, {0x6, @pix={0x6, 0x8, 0x34565559, 0x5, 0x800000, 0xfffffff3, 0x5, 0x983e, 0x1, 0x3, 0x2}}, 0x9}) 2m34.239835142s ago: executing program 6 (id=2073): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5543, 0x47, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x4, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x19, 0x10, 0x79, 0x8, 0x4e8, 0x6889, 0x2bcd, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0xff, 0x10, 0x2, [{{0x9, 0x4, 0x41, 0x8b, 0x0, 0xff, 0xff, 0xff, 0x4}}]}}]}}, &(0x7f00000003c0)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x310, 0xa, 0x1, 0x8, 0x40, 0x18}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000380)={0x40, 0xc, 0x5, {0x5, 0x11, "028ce0"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 2m34.086027649s ago: executing program 6 (id=2076): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$PTP_PIN_SETFUNC(r2, 0x40603d07, &(0x7f0000000040)={'\x00', 0x8, 0x0, 0x6}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000080)={0x0, 0x1, 0x0, &(0x7f00000009c0)=""/251, 0x0, 0x4000}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(0xffffffffffffffff, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x100000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0xfffffffc, 0x0, 0x70, 0x0, 0xf2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x2, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8f1, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6d1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe02e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xcf, 0x0, 0xc844, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x4, 0x7, 0x800, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4000000, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x200000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0xd, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x789], 0x1, 0x400}) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06464ce, &(0x7f00000000c0)={0x0, 0x800, 0x8, 0xfffffffb, 0x1, [], [0x40000000, 0xd386, 0x401, 0xfff], [0x8, 0x5], [0xffffffffffff7fff, 0x200000000003, 0x5, 0x9]}) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000240)={[0x5836, 0x5, 0x7, 0xe51, 0x1, 0x5479, 0x103d, 0x6, 0x0, 0x32a, 0xfffffffffffffffe, 0xffffffff, 0x1, 0x40000000009, 0x5, 0x6a], 0x2000, 0x808d6}) write$rfkill(0xffffffffffffffff, &(0x7f0000000000)={0x3, 0x2, 0x0, 0x0, 0x1}, 0x8) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000013c0)={0xffffffffffffffff, 0xa, {0x0, 0x0, 0x0, 0x5, 0x8000, 0x0, 0x4, 0x1f, 0x10, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "143939c787a16c1ca43f80026d1a8554fe581b59dee430e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d200", "24431a1e77a68e17000000040008000000000000000000e5e900", [0x83]}}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 2m33.883837455s ago: executing program 34 (id=2076): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$PTP_PIN_SETFUNC(r2, 0x40603d07, &(0x7f0000000040)={'\x00', 0x8, 0x0, 0x6}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000080)={0x0, 0x1, 0x0, &(0x7f00000009c0)=""/251, 0x0, 0x4000}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(0xffffffffffffffff, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x100000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0xfffffffc, 0x0, 0x70, 0x0, 0xf2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x2, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8f1, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6d1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe02e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xcf, 0x0, 0xc844, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x4, 0x7, 0x800, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4000000, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x200000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0xd, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x789], 0x1, 0x400}) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06464ce, &(0x7f00000000c0)={0x0, 0x800, 0x8, 0xfffffffb, 0x1, [], [0x40000000, 0xd386, 0x401, 0xfff], [0x8, 0x5], [0xffffffffffff7fff, 0x200000000003, 0x5, 0x9]}) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000240)={[0x5836, 0x5, 0x7, 0xe51, 0x1, 0x5479, 0x103d, 0x6, 0x0, 0x32a, 0xfffffffffffffffe, 0xffffffff, 0x1, 0x40000000009, 0x5, 0x6a], 0x2000, 0x808d6}) write$rfkill(0xffffffffffffffff, &(0x7f0000000000)={0x3, 0x2, 0x0, 0x0, 0x1}, 0x8) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000013c0)={0xffffffffffffffff, 0xa, {0x0, 0x0, 0x0, 0x5, 0x8000, 0x0, 0x4, 0x1f, 0x10, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "143939c787a16c1ca43f80026d1a8554fe581b59dee430e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d200", "24431a1e77a68e17000000040008000000000000000000e5e900", [0x83]}}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1m14.774966529s ago: executing program 2 (id=2398): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) (async, rerun: 32) r5 = socket$unix(0x1, 0x1, 0x0) (rerun: 32) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f00000001c0)=0x5) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0x2, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x7, 0x2f, 0xfffffffd, 0x1, 0x1, 0xe, 0x32, 0x8001}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) (async, rerun: 64) r8 = openat$kvm(0xffffffffffffff9c, 0x0, 0x2200, 0x0) (rerun: 64) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1m14.635752261s ago: executing program 2 (id=2399): openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x181942, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1002}}) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0}, 0x2020) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x15, 0xf, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x9, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @sk_reuseport, 0x0, 0x8300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000300000001000000000000010000000000000000000000000000000105000000100000000000000000000003000000000100000002"], 0x0, 0x53}, 0x20) r3 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x890b, &(0x7f0000000000)) syz_fuse_handle_req(r0, &(0x7f0000002300)="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", 0x2000, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)={0x130, 0x0, 0x3, {0x0, 0x7, 0x0, '\x00', {0x1, 0x8, 0x4, 0x2, r2, 0xffffffffffffffff, 0xa000, '\x00', 0x1, 0x80000000, 0xb4e7, 0x2, {0x8003, 0x8}, {0x6, 0x10001}, {0x0, 0x7}, {0x9, 0xa80}, 0x8000, 0xb, 0x0, 0x5}}}}) write$FUSE_INIT(r0, &(0x7f0000001200)={0x50, 0x0, r1}, 0x50) r4 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904000000cafb0000"], 0x0) syz_usb_control_io$uac1(r4, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000700)={0x20, 0x11, 0x1, "ce"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r4, &(0x7f0000000100)={0x14, &(0x7f0000000200)={0x40, 0xe, 0xd1, {0xd1, 0x22, "492a4cb6d97a4119f2cdd390017804b7219fc9297f631a3c3945d3e9396867aff669322734091883680679ba3e1e835a2e04718c55fe517fdd9b68e084e37606c31b506a1864389cc5e2db531868d40a24a1383504b79ccddac92ed1374902e0cd729dde7ca122212c5816123ec2a5bdf40fe75318be82b2794061ee986c64336d243ee37345e8614c46d70a6440540f83fc5991db38deb31059a0c27f9ca3b6686c279dfcd7760458ad2f6060bcdfa3d893fb0d6ec4eae9d1ca4e6ed0d757fbbad17d38a77f5bdf2a90ede47ddf11"}}, &(0x7f0000000040)={0x0, 0x3, 0xb, @string={0xb, 0x3, "57c72d3bfb05af05e6"}}}, &(0x7f0000000640)={0x44, &(0x7f0000000300)={0x40, 0xc, 0xa5, "a99e12b853e8e3ea7dfa5b7317df24bfd72515af9e15709d28bf98a1f16484e681b4a53aeaafca6ddfb143e5552ee225de90440bc8377a578dd02cea252a335e37fdc803d3667d1f29ff151ae411c85c09a1796f6c7f625a0e5d73628944ad66d8fd4348c5a54f54884d0f2901b2bffaa24575e0596f6eb005499f0e92a17f7da04fbaf2fcce0ee601b0278eafdbeaea717d78f02d6ee0409fafd8498c145d5f04dec5d06d"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x3}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000400)={0x20, 0x81, 0x1, "da"}, &(0x7f0000000440)={0x20, 0x82, 0x2, '3.'}, &(0x7f0000000480)={0x20, 0x83, 0x2, "fcd9"}, &(0x7f00000004c0)={0x20, 0x84, 0x3, "de5a15"}, &(0x7f0000000500)={0x20, 0x85, 0x3, "fde956"}}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) r5 = gettid() rt_sigaction(0x16, &(0x7f0000000080)={0x0, 0x90000000, 0x0}, 0x0, 0x8, &(0x7f0000000200)) tkill(r5, 0x16) r6 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_PEC(r6, 0x708, 0x7) ioctl$I2C_SMBUS(r6, 0x720, &(0x7f0000000080)={0x0, 0xf8, 0x1, 0x0}) 1m11.347713677s ago: executing program 2 (id=2413): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$vicodec0(0xffffff9c, &(0x7f0000000100), 0x2, 0x0) syz_usb_connect(0x1, 0x24, &(0x7f0000000140)=ANY=[], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = fsopen(&(0x7f0000000000)='erofs\x00', 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$netlink(0x10, 0x3, 0x4) socket$netlink(0x10, 0x3, 0x10) socket$inet6(0xa, 0x2, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000380)=ANY=[@ANYRESHEX=r2, @ANYRES16=r6, @ANYRESOCT, @ANYRES16=r4, @ANYRES64=r0, @ANYRESDEC=0x0, @ANYRESDEC=r1, @ANYRES8, @ANYRESDEC=r2, @ANYRES8=r4], 0x5c}, 0x1, 0x0, 0x0, 0x4004814}, 0x140cc054) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRES32=r2, @ANYBLOB=',rootmode=0000000020000000040000,user_id=', @ANYRESOCT=r3, @ANYRES32=0x0, @ANYRESDEC=0x0]) read$FUSE(r7, &(0x7f00000021c0)={0x2020}, 0x2020) symlink(&(0x7f0000000080)='./file0/../file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00') getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000040), 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x202, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f00001ba000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x1a, 0x0, 0x0) syz_kvm_setup_cpu$x86(r9, 0xffffffffffffffff, &(0x7f00001b0000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000200)="b8ce5d00000f23d00f21f835300000000f23f8670f01cfd33b662c070f01dfc4c27d17c866ba420066edea050000009900c4e221459493240000000f20c035000001000f22c0", 0x46}], 0x1, 0x9f6a364b3fac2a66, 0x0, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) 1m8.138952012s ago: executing program 2 (id=2424): ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000f80)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) r2 = openat$userfaultfd(0xffffffffffffff9c, &(0x7f0000000fc0), 0x1, 0x0) close_range(r1, r2, 0x2) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x28, 0x5, 0x6, 0x401, 0x0, 0x0, {0x7, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x50}, 0x40) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001540)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0x3}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x5, 0x1, {0x0, 0xb, 0x5}}}}]}, 0x40}}, 0x0) r6 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r6, 0x80045530, &(0x7f00000000c0)=""/111) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) getsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, &(0x7f0000001000), &(0x7f0000001040)=0x4) move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x9801) move_mount(r8, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./file0/file0\x00', 0x0) r9 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001581c2908570b2085396d0102030109021b00010001000b0904c80201030102030905fbff"], 0x0) syz_usb_control_io(r9, &(0x7f0000000200)={0x2c, &(0x7f0000000080)={0x20, 0x23, 0x8e, {0x8e, 0x22, "b2b9e80c045e5d1fd868a3d67464cd5898082eb91373b9f7239725c7f4f745bd80bd9df66a3fc86a4acdbc031e817b5440acd8b8b2a1d06aa2dfd0f40f0845dd072239982b63b0a0adde58d7361c2e9f678835ae4df97da7a61d858c7ac584a1586fe349ec72abc0b05dc668c5967c7315c3c5ff3404d730346fc86fe613789d22841274adf14b9107f9db2c"}}, &(0x7f0000000000)=ANY=[@ANYBLOB="0003440000de03030900"], &(0x7f0000000740)=ANY=[@ANYBLOB="000f27000000050f270004071002810e157100248a7a5e0b10010c5089f9020000020b1001027b000a150e00030c238a8d13cf4890fa8540391c175545c2badeb84bd267"], &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0x6, 0x2, 0x4, 0x0, '\x00\x00BM', "514dfce0"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x9, 0x18, 0x86, 0xb, 0x9, 0x8, 0x8000}}}, &(0x7f0000000680)={0x84, &(0x7f0000000240)={0x0, 0xf, 0x53, "f17ea3b3052f07ee8ef787dbba518d6ea797ba84dde018181178eca02afed0d205f66d2875084fb8ad472fbc097e635d1fd150a71fb49026abead295d6e7879fef87af6088bc57518cc17a3fbb8183b4717bc8"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x80}, &(0x7f0000000340)={0x20, 0x0, 0x4, {0x1, 0x4}}, &(0x7f0000000380)={0x20, 0x0, 0x8, {0x100, 0x80, [0xf00]}}, &(0x7f00000003c0)={0x40, 0x7, 0x2, 0x6}, &(0x7f0000000400)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000000440)={0x40, 0xb, 0x2, "c2ac"}, &(0x7f0000000480)={0x40, 0xf, 0x2, 0x7}, &(0x7f00000004c0)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000500)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}}, &(0x7f0000000540)={0x40, 0x19, 0x2, "c6d0"}, &(0x7f0000000580)={0x40, 0x1a, 0x2, 0x9c9c}, &(0x7f00000005c0)={0x40, 0x1c, 0x1, 0x6}, &(0x7f0000000600)={0x40, 0x1e, 0x1, 0x6}, &(0x7f0000000640)={0x40, 0x21, 0x1, 0x1a}}) syz_usb_control_io(r9, &(0x7f00000009c0)={0x2c, &(0x7f0000000800)={0x40, 0x8, 0xe8, {0xe8, 0x24, "1233af7063b9892f4ac51c3d1a98b026f3709b286b24c4f6790bf6feab4502f2d9c16c56c128d3a4cdc194906697c0baa2e01831345c05f534e20a151315c444cc810e985159a4ef9f0f4ec98c9fb568f5d2b8c34d0a00297206b5ae2e9188c8fe3e9c382e75e470d7b2f8c9076c1f17c1ad9da46041baa798d851a2fc6f57fe48cd6992ec1f03f332549cb8b5f36e8368d7fa017985728f4993b117cbe5d98120aaae54b50b70ef72c03e6c5251965e2a1b75a300715479f9beb8a88f0155be8a8d7becb1fde15572bb88102db88f4d63da30c163671057be4f3db1008b86cd7dc16c9019bb"}}, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x280a}}, &(0x7f0000000900)={0x0, 0xf, 0x24, {0x5, 0xf, 0x24, 0x4, [@wireless={0xb, 0x10, 0x1, 0x4, 0x40, 0xf, 0x7, 0x2, 0x4}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x2, 0x6, 0xfffc}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x2, 0x2}]}}, &(0x7f0000000940)={0x20, 0x29, 0xf, {0xf, 0x29, 0x6, 0x4, 0x2, 0x1, "d7a9f75b", "9a2ccf16"}}, &(0x7f0000000980)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xb, 0x80, 0x1d, 0xb, 0x6, 0x5, 0x80}}}, &(0x7f0000000ec0)={0x84, &(0x7f0000000a00)={0x0, 0x7, 0xd1, "44513126cd36c8342759be1d0022540c70549b012635309d000b1c82b9f4e7e59de8614f5ac0db0611d1401b131a65be287166f7942fbeb9817d6b13fdd0af0088a9e861f8163b32b36db47a8baa594ae5dd76fdc6b60f7c3c43c63c0343acd7ea49da3139e93cd9072563d4a8c2494f8e9b03ca9354dd41e5518634c74b3a7b9107777f447ccbb77cece1c63176ea2eabb75a20c4be10126eedc6ef81a6bf2817393c31908fec0c2214476396b590fd33ab275826ad9119f7571f5ed57d3deab58b7135008440f53174303e7b464ddf80"}, &(0x7f0000000b00)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000b40)={0x0, 0x8, 0x1}, &(0x7f0000000b80)={0x20, 0x0, 0x4, {0x1}}, &(0x7f0000000bc0)={0x20, 0x0, 0x8, {0x1000, 0x4, [0xf0f0]}}, &(0x7f0000000c00)={0x40, 0x7, 0x2, 0x1}, &(0x7f0000000c40)={0x40, 0x9, 0x1}, &(0x7f0000000c80)={0x40, 0xb, 0x2, "8dc2"}, &(0x7f0000000cc0)={0x40, 0xf, 0x2, 0x1}, &(0x7f0000000d00)={0x40, 0x13, 0x6, @local}, &(0x7f0000000d40)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000d80)={0x40, 0x19, 0x2, "ae9b"}, &(0x7f0000000dc0)={0x40, 0x1a, 0x2, 0xc}, &(0x7f0000000e00)={0x40, 0x1c, 0x1, 0x2}, &(0x7f0000000e40)={0x40, 0x1e, 0x1, 0x2}, &(0x7f0000000e80)={0x40, 0x21, 0x1, 0x8}}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000f80)={{0x1, 0x1, 0x18}, './file0\x00'}) (async) openat$userfaultfd(0xffffffffffffff9c, &(0x7f0000000fc0), 0x1, 0x0) (async) close_range(r1, r2, 0x2) (async) socket(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00'}) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_RENAME(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x28, 0x5, 0x6, 0x401, 0x0, 0x0, {0x7, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x50}, 0x40) (async) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001540)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0x3}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x5, 0x1, {0x0, 0xb, 0x5}}}}]}, 0x40}}, 0x0) (async) syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) (async) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r6, 0x80045530, &(0x7f00000000c0)=""/111) (async) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) (async) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) (async) getsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, &(0x7f0000001000), &(0x7f0000001040)=0x4) (async) move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) (async) open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x9801) (async) move_mount(r8, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./file0/file0\x00', 0x0) (async) syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001581c2908570b2085396d0102030109021b00010001000b0904c80201030102030905fbff"], 0x0) (async) syz_usb_control_io(r9, &(0x7f0000000200)={0x2c, &(0x7f0000000080)={0x20, 0x23, 0x8e, {0x8e, 0x22, "b2b9e80c045e5d1fd868a3d67464cd5898082eb91373b9f7239725c7f4f745bd80bd9df66a3fc86a4acdbc031e817b5440acd8b8b2a1d06aa2dfd0f40f0845dd072239982b63b0a0adde58d7361c2e9f678835ae4df97da7a61d858c7ac584a1586fe349ec72abc0b05dc668c5967c7315c3c5ff3404d730346fc86fe613789d22841274adf14b9107f9db2c"}}, &(0x7f0000000000)=ANY=[@ANYBLOB="0003440000de03030900"], &(0x7f0000000740)=ANY=[@ANYBLOB="000f27000000050f270004071002810e157100248a7a5e0b10010c5089f9020000020b1001027b000a150e00030c238a8d13cf4890fa8540391c175545c2badeb84bd267"], &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0x6, 0x2, 0x4, 0x0, '\x00\x00BM', "514dfce0"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x9, 0x18, 0x86, 0xb, 0x9, 0x8, 0x8000}}}, &(0x7f0000000680)={0x84, &(0x7f0000000240)={0x0, 0xf, 0x53, "f17ea3b3052f07ee8ef787dbba518d6ea797ba84dde018181178eca02afed0d205f66d2875084fb8ad472fbc097e635d1fd150a71fb49026abead295d6e7879fef87af6088bc57518cc17a3fbb8183b4717bc8"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x80}, &(0x7f0000000340)={0x20, 0x0, 0x4, {0x1, 0x4}}, &(0x7f0000000380)={0x20, 0x0, 0x8, {0x100, 0x80, [0xf00]}}, &(0x7f00000003c0)={0x40, 0x7, 0x2, 0x6}, &(0x7f0000000400)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000000440)={0x40, 0xb, 0x2, "c2ac"}, &(0x7f0000000480)={0x40, 0xf, 0x2, 0x7}, &(0x7f00000004c0)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000500)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}}, &(0x7f0000000540)={0x40, 0x19, 0x2, "c6d0"}, &(0x7f0000000580)={0x40, 0x1a, 0x2, 0x9c9c}, &(0x7f00000005c0)={0x40, 0x1c, 0x1, 0x6}, &(0x7f0000000600)={0x40, 0x1e, 0x1, 0x6}, &(0x7f0000000640)={0x40, 0x21, 0x1, 0x1a}}) (async) syz_usb_control_io(r9, &(0x7f00000009c0)={0x2c, &(0x7f0000000800)={0x40, 0x8, 0xe8, {0xe8, 0x24, "1233af7063b9892f4ac51c3d1a98b026f3709b286b24c4f6790bf6feab4502f2d9c16c56c128d3a4cdc194906697c0baa2e01831345c05f534e20a151315c444cc810e985159a4ef9f0f4ec98c9fb568f5d2b8c34d0a00297206b5ae2e9188c8fe3e9c382e75e470d7b2f8c9076c1f17c1ad9da46041baa798d851a2fc6f57fe48cd6992ec1f03f332549cb8b5f36e8368d7fa017985728f4993b117cbe5d98120aaae54b50b70ef72c03e6c5251965e2a1b75a300715479f9beb8a88f0155be8a8d7becb1fde15572bb88102db88f4d63da30c163671057be4f3db1008b86cd7dc16c9019bb"}}, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x280a}}, &(0x7f0000000900)={0x0, 0xf, 0x24, {0x5, 0xf, 0x24, 0x4, [@wireless={0xb, 0x10, 0x1, 0x4, 0x40, 0xf, 0x7, 0x2, 0x4}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x2, 0x6, 0xfffc}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x2, 0x2}]}}, &(0x7f0000000940)={0x20, 0x29, 0xf, {0xf, 0x29, 0x6, 0x4, 0x2, 0x1, "d7a9f75b", "9a2ccf16"}}, &(0x7f0000000980)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xb, 0x80, 0x1d, 0xb, 0x6, 0x5, 0x80}}}, &(0x7f0000000ec0)={0x84, &(0x7f0000000a00)={0x0, 0x7, 0xd1, "44513126cd36c8342759be1d0022540c70549b012635309d000b1c82b9f4e7e59de8614f5ac0db0611d1401b131a65be287166f7942fbeb9817d6b13fdd0af0088a9e861f8163b32b36db47a8baa594ae5dd76fdc6b60f7c3c43c63c0343acd7ea49da3139e93cd9072563d4a8c2494f8e9b03ca9354dd41e5518634c74b3a7b9107777f447ccbb77cece1c63176ea2eabb75a20c4be10126eedc6ef81a6bf2817393c31908fec0c2214476396b590fd33ab275826ad9119f7571f5ed57d3deab58b7135008440f53174303e7b464ddf80"}, &(0x7f0000000b00)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000b40)={0x0, 0x8, 0x1}, &(0x7f0000000b80)={0x20, 0x0, 0x4, {0x1}}, &(0x7f0000000bc0)={0x20, 0x0, 0x8, {0x1000, 0x4, [0xf0f0]}}, &(0x7f0000000c00)={0x40, 0x7, 0x2, 0x1}, &(0x7f0000000c40)={0x40, 0x9, 0x1}, &(0x7f0000000c80)={0x40, 0xb, 0x2, "8dc2"}, &(0x7f0000000cc0)={0x40, 0xf, 0x2, 0x1}, &(0x7f0000000d00)={0x40, 0x13, 0x6, @local}, &(0x7f0000000d40)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000d80)={0x40, 0x19, 0x2, "ae9b"}, &(0x7f0000000dc0)={0x40, 0x1a, 0x2, 0xc}, &(0x7f0000000e00)={0x40, 0x1c, 0x1, 0x2}, &(0x7f0000000e40)={0x40, 0x1e, 0x1, 0x2}, &(0x7f0000000e80)={0x40, 0x21, 0x1, 0x8}}) (async) 1m6.511866739s ago: executing program 2 (id=2434): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) open$dir(&(0x7f0000000140)='./file1\x00', 0x840, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc, 0x3}, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) socket$netlink(0x10, 0x3, 0xa) socket$inet_icmp_raw(0x2, 0x3, 0x1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000580)={0xffffffffffffffff}) dup(r2) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'wlan0\x00', 0xfffffffe}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000730132000000000095"], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x18000000, 0x27, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb30f}, 0x90) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, 0x0, 0x0) r4 = open(&(0x7f0000000040)='./file1\x00', 0x1850c2, 0x14c) writev(r3, &(0x7f00000002c0)=[{&(0x7f0000000400)="ec9bd6803a98a02ef9647e9688f5f3b659008b3d1a2b1d0f418f6fa73df387f85fe434aa3b91fb967f26d27988362d05e0ba4342785c65d3473c312cd1ee47e8024393acbfa4daf40fee07e415957fb2465687c2f3790e286d1273bd", 0x5c}, {&(0x7f0000000500)="922a35c0ba11e3689b7a89fa83215a702aaa0da45ce5862c4a7eaa9fcb19dcca723d42ded2e80a723706371701b9126f83ef2bba64e91ef3c6c721cbe23ed6ed7e5695f58801725642a2e060aa", 0x4d}], 0x2) ftruncate(r4, 0x200004) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x3a, 0x8, &(0x7f00000001c0)="b80000050000000048c5a8b9a8cd9053bd287b887f676f7d8a55410bba8bd2291b5b8dcd24bf1b675bf79c2a2433a126455c3b4c850752b3b49e", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m6.097843064s ago: executing program 2 (id=2436): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$pppoe(0x18, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-generic\x00'}, 0x58) r5 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x10, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r5, 0x1, &(0x7f0000000280)={0x100}, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001180)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}], 0x1, 0x1) setsockopt$MRT_DEL_VIF(0xffffffffffffffff, 0x0, 0xcb, &(0x7f0000000f80)={0x1, 0x8, 0x4d, 0x34000000, @vifc_lcl_addr=@multicast1, @multicast2}, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000fc0)=[@text64={0x40, &(0x7f0000001000)="c46179c5eef92e3ef30fb80366ba410066b8562666ef420f07f33e0f23e2b9260300000f32660f383c541b08b8010000000f01d966b8df000f00d866baf80cb822ee6186ef66bafc0cb000ee", 0x4c}], 0x1, 0x4f, 0x0, 0x0) getsockopt$sock_buf(r2, 0x1, 0x1f, 0x0, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000300), 0xd37, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f0000004b40)={0x1, @sliced={0x400, [0x5, 0x1, 0x2, 0x3f, 0x4, 0x3, 0x80, 0x5, 0xc00, 0x3, 0x1, 0xb49, 0x3, 0x4, 0x8, 0x1, 0x3, 0x92, 0x8000, 0xff97, 0x3, 0x599b, 0x7ff, 0x3, 0xfa9, 0xfffe, 0x140, 0x7, 0x6c, 0xfe10, 0x7, 0x3, 0xb73, 0x5, 0x800, 0x2, 0x1000, 0x84, 0x2, 0x0, 0x9, 0x5, 0x2, 0x6, 0xaaf1, 0x1, 0x6, 0x5], 0x3}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) socket$alg(0x26, 0x5, 0x0) r7 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x1) ioctl$SCSI_IOCTL_SEND_COMMAND(r7, 0x1, &(0x7f0000000f40)=ANY=[@ANYBLOB="00000000000000000a00000073d02c4bdb2e04feb9819bc8406c5ac9a241cb67940386cb59b9ae178eed29df"]) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="009adb656de18c753fcd92a014aa1d66e40cc88d8b868359c21bbd80ad543d3e7dfb7c42bebb4d0cb5c9804fbfd4e24c1677a6017d69069c9ffc1f886b46038f0a59604eacfb68bb5265ae8023729ae643043a8726bfa0ee60cc99be3c7cbb478d933754353085bee2081fc97ff5d5a30ebbb10716bcbca2d4397c2a9296667d07dacc7fd5989441a734ca47f3e66ed974c8aa4d2f0d60c5252f4a6d1726ad", @ANYRESOCT, @ANYRESOCT=r0], 0x1004) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r8 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r8, 0x0, 0xd2, &(0x7f0000000040)={@multicast2, @multicast1, 0x2, "4f6fb4d1af0f724e6118ecd4ac1100843af297baebb0efcdf5a284da144a011a"}, 0x3c) setsockopt$MRT_DEL_MFC_PROXY(r8, 0x0, 0xd3, &(0x7f00000000c0)={@multicast2, @multicast1, 0x2, "c6cfe6ec8355b5dc4e305886d95f0867070e5a036900", 0x0, 0x0, 0x0, 0xfffffffd}, 0x3c) 1m5.524805827s ago: executing program 35 (id=2436): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$pppoe(0x18, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-generic\x00'}, 0x58) r5 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x10, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r5, 0x1, &(0x7f0000000280)={0x100}, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001180)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}], 0x1, 0x1) setsockopt$MRT_DEL_VIF(0xffffffffffffffff, 0x0, 0xcb, &(0x7f0000000f80)={0x1, 0x8, 0x4d, 0x34000000, @vifc_lcl_addr=@multicast1, @multicast2}, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000fc0)=[@text64={0x40, &(0x7f0000001000)="c46179c5eef92e3ef30fb80366ba410066b8562666ef420f07f33e0f23e2b9260300000f32660f383c541b08b8010000000f01d966b8df000f00d866baf80cb822ee6186ef66bafc0cb000ee", 0x4c}], 0x1, 0x4f, 0x0, 0x0) getsockopt$sock_buf(r2, 0x1, 0x1f, 0x0, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000300), 0xd37, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f0000004b40)={0x1, @sliced={0x400, [0x5, 0x1, 0x2, 0x3f, 0x4, 0x3, 0x80, 0x5, 0xc00, 0x3, 0x1, 0xb49, 0x3, 0x4, 0x8, 0x1, 0x3, 0x92, 0x8000, 0xff97, 0x3, 0x599b, 0x7ff, 0x3, 0xfa9, 0xfffe, 0x140, 0x7, 0x6c, 0xfe10, 0x7, 0x3, 0xb73, 0x5, 0x800, 0x2, 0x1000, 0x84, 0x2, 0x0, 0x9, 0x5, 0x2, 0x6, 0xaaf1, 0x1, 0x6, 0x5], 0x3}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) socket$alg(0x26, 0x5, 0x0) r7 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x1) ioctl$SCSI_IOCTL_SEND_COMMAND(r7, 0x1, &(0x7f0000000f40)=ANY=[@ANYBLOB="00000000000000000a00000073d02c4bdb2e04feb9819bc8406c5ac9a241cb67940386cb59b9ae178eed29df"]) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="009adb656de18c753fcd92a014aa1d66e40cc88d8b868359c21bbd80ad543d3e7dfb7c42bebb4d0cb5c9804fbfd4e24c1677a6017d69069c9ffc1f886b46038f0a59604eacfb68bb5265ae8023729ae643043a8726bfa0ee60cc99be3c7cbb478d933754353085bee2081fc97ff5d5a30ebbb10716bcbca2d4397c2a9296667d07dacc7fd5989441a734ca47f3e66ed974c8aa4d2f0d60c5252f4a6d1726ad", @ANYRESOCT, @ANYRESOCT=r0], 0x1004) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r8 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r8, 0x0, 0xd2, &(0x7f0000000040)={@multicast2, @multicast1, 0x2, "4f6fb4d1af0f724e6118ecd4ac1100843af297baebb0efcdf5a284da144a011a"}, 0x3c) setsockopt$MRT_DEL_MFC_PROXY(r8, 0x0, 0xd3, &(0x7f00000000c0)={@multicast2, @multicast1, 0x2, "c6cfe6ec8355b5dc4e305886d95f0867070e5a036900", 0x0, 0x0, 0x0, 0xfffffffd}, 0x3c) 10.071846318s ago: executing program 8 (id=2679): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000240)={0x0, 0x5}, &(0x7f0000000400)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={r1, 0x10, &(0x7f0000000440)=[@in={0x2, 0x4e22, @broadcast}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000640)={r2, @in={{0x2, 0x4e24, @private=0xa010101}}}, 0x84) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_CONTINUE(r3, 0x8010aa02, &(0x7f0000000000)={{&(0x7f000016e000/0x4000)=nil, 0x7ffffffff000}}) keyctl$reject(0x13, 0x0, 0x75, 0x0, 0x0) r4 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r4, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r5 = syz_io_uring_setup(0x497, &(0x7f0000000540)={0x0, 0x4660, 0x40, 0x3, 0x285}, &(0x7f00000004c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r4, 0x0, 0x0}) syz_io_uring_submit(0x0, r7, 0x0) io_uring_enter(r5, 0x40f9, 0x217, 0xa5, 0x0, 0xf5) r8 = syz_open_dev$loop(&(0x7f0000000480), 0xd76, 0x181400) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r9, &(0x7f0000000400)=ANY=[], 0x1df) write$binfmt_misc(r9, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r8, 0x4c0a, &(0x7f00000002c0)={r9, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x800000000, 0x0, 0x0, 0x18, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) bind$inet(r9, &(0x7f00000001c0)={0x2, 0x4e21, @remote}, 0x10) r10 = socket$netlink(0x10, 0x3, 0x4) r11 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r11, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x2, 0x10, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x8, 0x8, 0x0, "04"}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev}}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast1}}]}, 0x80}, 0x1, 0x7}, 0x0) bind$netlink(r10, &(0x7f0000514ff4)={0x10, 0x0, 0x4, 0x2ffffffff}, 0x2e) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000000)=0x6, 0x4) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904000001a7a00f00090582", @ANYRESDEC], 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000005c0)={r2, 0x10, &(0x7f0000000500)=[@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f0000000600)=0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="b702000000000000260000000000000085000000c4000000950017000000000099b540d922f0b21eead8eecedfc8c63ba4743235c432559a7c36147649571f829cfdfef2630b0d7560c75b559d3b3f8c7122a816630e0d087ebc"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xb579, &(0x7f000000cf3d)=""/195}, 0x23) 8.381022782s ago: executing program 8 (id=2687): setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000100)="b1", 0x1) r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0) open$dir(&(0x7f00000003c0)='./file0\x00', 0x0, 0x88) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @local=@item_4={0x3, 0x2, 0x0, "53743ff6"}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8}, @global=@item_4={0x3, 0x1, 0x5, "a90da1f6"}, @local=@item_4={0x3, 0x2, 0x0, "00000400"}]}}, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0xa0000) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000100)=""/101) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000380)='freezer.parent_freezing\x00', 0x0, 0x0) preadv2(r4, &(0x7f0000000040)=[{&(0x7f0000000100)=""/65, 0x41}], 0x1, 0x2, 0x0, 0x1) ioctl$UI_SET_PROPBIT(r2, 0x4004556e, 0x2) 7.599860674s ago: executing program 7 (id=2689): creat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000100)={@host}) r1 = syz_open_dev$video(&(0x7f0000000000), 0x101, 0xab02) ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f0000000180)=0x1) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x79, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0, 0x81, 0x1080a422012f758f}) r4 = syz_io_uring_setup(0x17dc, &(0x7f0000000240)={0x0, 0x5bc4, 0x100, 0x80000ffc, 0x5cc}, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0xffffffffffffff0e) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x4, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81800, 0x1}) io_uring_enter(r4, 0x749f, 0x4, 0x0, 0x0, 0xfffffffffffffef5) r7 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0) fcntl$setlease(r7, 0x400, 0x0) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) fcntl$setlease(r8, 0x400, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/4\x00') preadv(r9, &(0x7f0000000340)=[{&(0x7f00000008c0)=""/201, 0xc9}], 0x1, 0x0, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r2, 0x4018f50b, 0x0) 7.440625241s ago: executing program 7 (id=2690): r0 = accept$unix(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000040)=0x6e) sendmmsg$unix(r0, 0x0, 0x0, 0x0) r1 = socket(0xa, 0x3, 0x3a) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000340)={'pim6reg\x00', 0x2}) timer_create(0x3, 0x0, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f0000000080), 0x0) unshare(0x40000000) setitimer(0x1, &(0x7f0000000000)={{0x0, 0x2710}, {0x0, 0xea60}}, 0x0) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x1, 0x4}, 0xc) 6.899411705s ago: executing program 7 (id=2696): socket(0x25, 0xa, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ioctl$VIDIOC_G_OUTPUT(0xffffffffffffffff, 0x8004562e, 0x0) creat(0x0, 0x43) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB='\x00']) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x20c02) r3 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$binfmt_register(r3, 0x0, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x1) read(r2, &(0x7f0000001400)=""/4076, 0xfffffeea) r4 = socket$inet_udp(0x2, 0x2, 0x0) futex_waitv(&(0x7f00000027c0), 0x0, 0x0, &(0x7f0000002d40), 0x1) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, 0x0, 0x0) r5 = io_uring_setup(0x4822, &(0x7f0000000180)) syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000cc1ef420890b070064ef000000010902120001000000000904"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) r6 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r6, &(0x7f0000000040)={0x1d, r7, 0x1, {0x2, 0xff, 0x1}}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r6, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="200000000d14000128bd7000fedbdf2508003e00190000000800030004000000e22b7b59c338d16ae9f929463e84ace5c0c3330c8ac079ec117c3cb049d0e95d0e4813e9f452f7fb3bf02a1bf78af472a82b822140126642c279717f8c96a59724091341e353be515df6227e5044fbcd90ed83fc1c2a08bec428664a4067b6629ab0b1c3b8a24fc211bbb4fb99a7206c6ed3e8f244528edf1394073a8e85b197c2c0e4a58724f25a52021eaeb2594d7a6e8458088ced42de5d21270851158c4182fbf1efb8e01196f5e3863caa8675a5046165ce3e65f6d95f3a5d6d3a66cb958e20dbcffe89"], 0x20}, 0x1, 0x0, 0x0, 0x40015}, 0x80) 6.476222493s ago: executing program 3 (id=2697): prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, &(0x7f0000000040)='}\x00') (async) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x1000)=nil, 0x1000, &(0x7f0000000000)='tunl0\x00') r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x21, 0x0, 0x0) (async) setsockopt$inet_int(r0, 0x0, 0x18, &(0x7f0000000000)=0x1004, 0x4) (async) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) ioctl$AUTOFS_IOC_FAIL(r1, 0x4c80, 0xfffff) (async) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, &(0x7f0000000240)='}\x00') 6.43274167s ago: executing program 8 (id=2698): r0 = socket(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x22042, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x1000, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) ptrace$poke(0x4, 0x0, &(0x7f00000000c0), 0x7ff) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0xd7) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000140), 0x4) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r4 = socket$kcm(0x2, 0x3, 0x2) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r6, 0x11, 0x1, &(0x7f0000000000)=0x507, 0x4) sendmmsg$inet(r6, &(0x7f0000005d40)=[{{&(0x7f0000000600)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="10000000000000000000c0"], 0x10}}], 0x1, 0x400c0) sendfile(r6, r5, 0x0, 0x20000023893) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000200)={'bond0\x00', &(0x7f0000000640)=@ethtool_per_queue_op={0x4b, 0xf, [0x4, 0x8, 0xfffffff1, 0x8, 0x0, 0x1, 0x3e9, 0x5, 0x9, 0x6, 0x5, 0x6, 0x7ff, 0x4, 0x4, 0x3ff, 0x4, 0x8, 0x2, 0x4, 0x9, 0x4, 0x8, 0x1, 0xfffffa0d, 0x7, 0x8, 0x9be, 0x3, 0x3ff, 0x6, 0x14dc, 0x147, 0x9, 0x1, 0x3, 0x1, 0x0, 0x9, 0x6, 0x7, 0x5, 0x4, 0xfffffffb, 0x8, 0x80000000, 0x9, 0x100, 0x5, 0x19dd, 0x7, 0x35, 0x586, 0x6, 0xf667, 0xfffffffc, 0x7, 0x8, 0x7f, 0x6, 0xc8, 0x6, 0x0, 0xc3, 0x4, 0x10, 0xffffffa8, 0x1, 0x9, 0x1, 0x1, 0x83, 0xe39, 0xcf, 0x10, 0x401, 0x7, 0x7, 0x2a, 0x71c9, 0x1, 0x321, 0xfffffeff, 0x7f, 0x66, 0x1c24, 0xff, 0x9, 0x4, 0x2, 0x3, 0xff, 0x100, 0x126, 0x6, 0x8, 0x40000000, 0xc, 0x4, 0x8, 0xffffffc0, 0x4, 0x10001, 0x5, 0x74a000, 0x404e27, 0x3ff, 0x0, 0x8356, 0x0, 0x6, 0x9b7, 0x4, 0x80000001, 0x7f, 0xea, 0x6, 0x80000000, 0xff, 0x7, 0x4da8e6f3, 0x5, 0x10001, 0x8, 0x69e4, 0x80000001, 0xfffffff4, 0x100]}}) socket$inet_smc(0x2b, 0x1, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x48000000, 0x0, 0x0, 0x0, 0x0, 0x0) 6.271832945s ago: executing program 3 (id=2699): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000000c0)={0x3, &(0x7f00000001c0)=[{0xada7, 0xb, 0xff, 0x3}, {0x9, 0x65, 0x6, 0x3ff}, {0xa, 0x40, 0x80, 0x1ff}]}) clock_adjtime(0x0, &(0x7f0000000000)={0x66b8, 0x80000001, 0x7, 0x2, 0x0, 0x2, 0x0, 0xfffffffffffffffa, 0x0, 0x100008, 0x2, 0x248a, 0x9, 0x7, 0x0, 0x0, 0x3ff, 0xf, 0x0, 0x4, 0x5999, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0, 0x2be, 0xffffffffffffffff}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x2c, 0x2e, 0x5, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xc, 0xc}, {0x0, 0xfff1}, {0xfff3, 0x2}}, [{0x8, 0xb, 0x7ff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40800}, 0x4041080) 5.408778074s ago: executing program 5 (id=2700): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x432803, 0x0) lseek(r0, 0xff, 0x2) (async) ioctl$SNDCTL_DSP_GETIPTR(0xffffffffffffffff, 0x800c5011, &(0x7f0000000040)) (async) prctl$PR_SET_TSC(0x1a, 0x2) prctl$PR_SET_TSC(0x1a, 0x0) (async, rerun: 32) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0x5, [@fwd={0x1}, @func={0x4, 0x0, 0x0, 0xc, 0x2}, @typedef={0xb, 0x0, 0x0, 0x8, 0x5}, @var={0xe, 0x0, 0x0, 0xe, 0x2}, @decl_tag={0x6, 0x0, 0x0, 0x11, 0x5, 0x2}, @typedef={0x4, 0x0, 0x0, 0x8, 0x2}, @var={0x5, 0x0, 0x0, 0xe, 0x5, 0x1}, @var={0x8, 0x0, 0x0, 0xe, 0x1, 0x2}, @fwd={0x9}]}, {0x0, [0x0, 0x5f, 0x61]}}, &(0x7f00000002c0)=""/115, 0x99, 0x73, 0x1, 0x3, 0x10000}, 0x28) (async, rerun: 32) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0x20, &(0x7f0000000480)={&(0x7f0000000400)=""/29, 0x1d, 0x0, &(0x7f0000000440)=""/61, 0x3d}}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x10, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x94, 0x0, 0x0, 0x0, 0xfffffffd}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @btf_id={0x18, 0x51ac927fae3a5932, 0x3, 0x0, 0x2}, @ringbuf_query, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}]}, &(0x7f0000000140)='syzkaller\x00', 0x4, 0x59, &(0x7f0000000180)=""/89, 0x41100, 0x40, '\x00', 0x0, @sk_msg, r1, 0x8, &(0x7f0000000380)={0xa, 0x2}, 0x8, 0x10, &(0x7f00000003c0)={0x5, 0x7, 0x4, 0x9b9}, 0x10, r2, 0xffffffffffffffff, 0xa, 0x0, &(0x7f0000000500)=[{0x3, 0x5, 0xc, 0x5}, {0x4, 0x5, 0xf, 0x7}, {0x1, 0x5, 0xd}, {0x1, 0x3, 0x10, 0x4}, {0x4, 0x2, 0x6}, {0x0, 0xffffffff, 0x10, 0x5}, {0x3, 0x3, 0x0, 0x8}, {0x5, 0x3, 0xc, 0x8}, {0x3, 0x1, 0x7}, {0x4, 0x3, 0xa, 0x4}]}, 0x94) (async) prctl$PR_SET_TSC(0x1a, 0x3) (async) r4 = accept$inet(0xffffffffffffffff, &(0x7f0000000680)={0x2, 0x0, @empty}, &(0x7f00000006c0)=0x10) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000002900)={'syztnl1\x00', &(0x7f0000002880)={'syztnl2\x00', 0x0, 0x4, 0xb8, 0x7, 0x6, 0x14, @loopback, @remote, 0x40, 0x0, 0x3, 0x5}}) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000029c0)={0x1, 0x58, &(0x7f0000002940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000002a00)={'batadv_slave_1\x00', 0x0}) sendmmsg$inet(r4, &(0x7f0000002b00)=[{{&(0x7f0000000700)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000001740)=[{&(0x7f0000000740)="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", 0x1000}], 0x1}}, {{&(0x7f0000001780)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000002840)=[{&(0x7f00000017c0)="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", 0x1000}, {&(0x7f00000027c0)="6c9c293d0876d2ced4e711b48bccfba5fc519d2fc03138783d685f32ae", 0x1d}, {&(0x7f0000002800)="d4", 0x1}], 0x3, &(0x7f0000002a40)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @local, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x78f}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @local, @empty}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8000}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x66}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @remote, @rand_addr=0x64010102}}}], 0xa8}}], 0x2, 0x8040) setsockopt$MRT6_DEL_MFC_PROXY(r3, 0x29, 0xd3, &(0x7f0000002b80)={{0xa, 0x4e22, 0x5, @dev={0xfe, 0x80, '\x00', 0xb}, 0x2d}, {0xa, 0x4e20, 0x9, @remote, 0x5c5}, 0x0, {[0x9, 0x3, 0x100, 0x7, 0x7, 0x2, 0x2, 0x7]}}, 0x5c) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000004cc0)=@base={0x8, 0xa2d, 0x9, 0x5, 0x0, 0x1, 0x9, '\x00', r7, r1, 0x3, 0x4, 0x2}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000004d40)={&(0x7f0000002c00)="a2f82f48e772a3b5a65087f3bc", &(0x7f0000002c40)=""/4096, &(0x7f0000003c40)="4018868f49b38f86650e06de527d191195e1752622cdc1e386d4f73bd07847b6f8040b0380e6208101595fb923ab20805595a05e989c5864f541ed71c202debe867af53e43a7a0fe29931cb70e52ee1e0f3dbf15f64e4e869d3b869620edd56f968840b34676c6c2c7f795c8df071b9e15dde53c1dacb9193e403cf3a0009b42e5fb2e97d5c5ff4f4c521c50d696165ccf49f4da60861568637da091cc283a2d54ee4474516c33dad84887ea92f5ef6cddd73061c3f6b90397552bfc83634c17f1b14c4b1cc64248867b54224ac7ce46f64b00faf422377c074171eecc4bd5690a098e1d6ef9047209856555a2f7b85dce30e8df7ba595b782c305a6b7592ba8d78b9d364457dc0f140d86c6372d3b247aacb5b0cc512a61543af51892dd4a15b691331256e3fff95bc43c576d7f3920b8ccf101fe98b19e07f1d62153b31d9be54c9cf5d787819a62c42f9624b6e43c62eab773e39893b8b3796b62eafdecf5fea67857b6bf7982f6e567e7a2bc8cbe84550f90506a4341fb75b052fa566ab062b4bcab86f65986d282ae16181125855653b9c9a87537e23af0d4e7881865838d129b03b409faa3248add1a2d6a275f41943f941fa1fefb63ab1cf30d5d27823f6e4309b1713008d7bd61ffe04d055dfe44b811586f0cd649547e736c2e9d872f9840413d4efb92d3c9e517918af69bae0b677a89d62ad9eb673f8e9fd625c5a5efcface49058a9a1e1383e39d0875e2780211e957e05196ce119b8c1120a123ce40612d66d8ccc757526f1d5065c6f3f4e87f56ffd313f94650f79d0fd7b1e951aac0f5ba13b66b639c0e4c44be3658358f0529c270f7456a15878395a132455e97a0027721ef8c6b957bde0040f81d773cd9b2477a2ff56ed21375fea7385c390598f7770ec449b5a2ed3fe1bd6c04502135547df5a4ec8c0f37119f7cfacff4b91fd704874617557a8e239763674c14c289252038f97deaa21fd0802d9bde88247850ae663c5f3f873fcfb29fc3d6024ab61b56a8b6e4813b102007c90ea592ddc8ed757bf582966a4540a828a6cd02372a1c753b75e10735ab140ccb74b8af280b8e7bdb102217251d1838f43029cd55092a39d94effecddebba285e8780f73cb3ee4d8c78c94c10363808f58005e3ddffa350eea940ee664f33dab6f6679ce6cf5ef746f3bc4fabab271885a4a4f7efa28b4f158be29bcdf783deff3baf1208f34a978372481dc678fa5747f8dd10a99465152d47333bcd1ea9a2a19c6130b86237f2371fec493448fb6990a2b51b5925828290ff336727c81871bb7bc0de2f8eaddc979bc13f7561827fd333197b6bf7595040027dae1b993e0266c341b39a3de52cb85857c4592c3ba95c15e13f71398f04e275f3ba34b6e5265d95ef11cd031570ff15df1f629c9132601e63d13f684040e3af948fd4d2c6c6f06177e6c2727aac1f6dbe9ed8e871b672cf9dfc9879f5ae5b914ae3e665f2eab118271e0de0204d3a66bad60ccbf09a7e3e7bdc88424adf0ae11e012356f921d1687989e7e1c4931a1be5df3fef67e34461d71e048f6cc1a4d5aa203885a88964eff391e2bdeb90c9afaa061fb1848c44d1b3a133e25b3af91a4059b9528a1af87bb72d71d70b4de1e49e95aada7f0f69a58149a01f621b1620663d30d158c32b8a046fec4eef9638fc62cf65640cd6b813a15fd359411ec3dd05e6b7090723a22891a11b6e7e8b4fcc6e1319e9a97efa744a8e8d5c856f5cbdc739e7df1ad2d1a84ef6d868a09dc93c2ba69774a8929261f6005711811b25eb91ee46743c0e3d20032cf1067cc786fb050f0e087a3a2e4c764a6fe792a3959d4860beb968af525147c274e9285beaaac0d213a61882ae971a71d42946c9041ee7f5e63cd3c9a923d1499575b7c6d49d77785673ff21c8ae7ab0b40466f0090b131b8a43ec2357fd010f19830b37d1d6fcdf3d40ceacb99ebd58ab0cf7c4dfc99c77f1d9d9e313d5d8f065123fd7b3b266509ff15b8fab0e5f851d1537f9e732d304d4deb525f5c13268090f06a90ec27001e867e9de67c071f402678df5222b8820c6e9430c125725ba432df0c4910bfacc6fa1604f1c7f493b457083abc273082b21c39c4b0b5ba4f2f0c54ecc7f38f6fb82d338bb8586c3981c5aeb318d0c93537ebff6541e5330158ef4fe18b6f71b174fd8f40f41569b6f144a56bcd9f4a910a83c0ad10d7000107855045afbfd61a18cea52c4b54390c8fc03ee0ad1ee650598f8dc76189db8e774f9aa45eed32e5a82876f33d80cf500b1e5b6ab76691d4c5b1d3aff8340853d333ea0865dc7a9fbf3fc0a6ee2f5f9a9791f3156d92cbae335203b7fc4e0acbb38cb5a222b9a9f9943e27458218fa26132bff14ac8c1c389b799133cf824884776d1a84215cd1202f43cb1f997dcef36f765d0bb8eb8e2b89790f14ece6b5254a1fdf85794dc21a7d25b7597ddc608599c9e68e9eed155a42ef9cc68cad39cbb1250ce65906118a305a0c305e09ca5551262d054fce57637ccdb96643599f6afe70bf1242dffdc08b77b96ae77bfa3137ec013b1e5bcddc22046fc9637e307a6dd82c596893807b2fa41bb0555480e9d7d0db45108b3274970a7cd346d044a69319c91b7370d84fc7a319b7ed81e9e0008f604c02170c174debe95ac53eb39f6072ebd4d967b782b54d557694c098af524d5d24613a63858b56cab6cb03ab87e92917b1c01aa0ece995db2ea06df5280e48f945e41138085c617ac1d8bf2d947d6fa76d5d8304a19fdb6badbdb62d54c4bddd1b14d38e89c46d06019f6a8dc08b9f2ada2928b882ff9563daadd7bb3fd6199c2d82121441371bc4e896da6b67d7bdc661cac5531e5957a7967671a58b9d04a5ab5a86365fd71bad6c8d712f4ae64190bef276cf75eafa6ba0e24a78df91764f1134fa61092f1fa77a8f59d79f6317f94a4bdd0894d7390961915712e4d27513e981981633986969cb650fa4b0f52bbca339a0fbeba1cb96352cb209c66c42cce2eb3da50f3bc6095a9d208341cf4f70ecbb74c98014dc2cde6f2ff5a4e306ddb87323f8c20675fb654e95c1a034a3930de337557b533182150a040f3a472809c5cfa66af97c775d3db77bfc6d77a8ed573317f6e131d355b842a81038b2d9da5ed3ef58ca53738a64e2c60a0187aec543f88e724ec98413f530ff0424517eb5976df4d6ecd5034c5f29b8a26fcc8bbcbee72b0ca9805e61460191007f92d7d172ede7fdee98ea8b7718bff51df8b888c6082ba665a3a33b46ea5b659fc1434d49a980a158eef90f57869870c3ff71fcc85ef714df2fe7792557efdf716849a6973761374a8374ff950ecb23c30adf5c6cef9222478ea499c8d42f65f5d623310c71900378b95a31da8ecb1d07362b540ec1e8fe3187f430f1d69851ba2dd18a8f478951eb8584a6905c9fa9627d1060454cf49f2866212550bacf7e98700fe9a39916abec86d004c9e54faba25311437d35a8f6319d952e4abea05bfcfcd7f5ef6f3f2e43cd1a2e1af7f54770ab9dadb4c68b720d17a9ea1f257a755c4fe4d3267e5b13fda5933adff8db87ee4e693075b20de1bf82b032edcd1ee0b0b8c6d1a1d02034690bfb2039062e267eef3a442ef6f1889dc90498482e4613badad6d39d9996b46bd3a9a5dab1771bf03feb1d76716203a1ed51d4bc2e42d846dc9b9f7edb73384cfbf3cf0f00c357b72e2faa705d8a8091a22b0a7607b456c0c8b08ab6f226f2fa623b11263a047a4b3766e224824006ed7324fb132406abaf7e853c890923f22d502f6ec04bad37b5d1261bd66c501e28258fe637e76e847cd890f9e1dd63283891d0ed8b605f7f74c42db3224495014cb71c05307cef1517e420f32fbadbb731f8a7efcb6b41e22b4c6dc3b06439c04320faf99e49ed992b77885621d8bf4d7983120e39b4e71baa00e2f2b65dd3d7672e27a945e40815cf16582eff1b1c075d37dfede969c98c5759a51d05b8c602653d60b362e11667d857c999181d4ebbdc1154687b0f38489b69a019cb2b0ce57defe79ed5dab69c6d6ff4838b6b484ed8a53ab0fd74d1b1a4d2995a86aae71db9ab5c3ad1a10043e98effa298575a79187c2ea22336fdd14f78507692e2988b959d9e82fb829fa33b8e85b08ba52498f5e7827c82ac94c9aa207b4e9b801e022214c954c6b02a1e9fff77be5338a49ba19d2525f5030a328f5b34fde97400aab6dd2b98c1bbc5555597f63924b3480dbaa7e9f693fb99f74c42392fb418b80c3f252998c563bdfc10fcd7fd0b3ab52546c8c68a553ef350173cd7cea21578e8b49aa863c90833808bbae9868bcc09bf5d3733f18f958fab69e059d564a7114ea5f36529ac8ac4c6892f4e958d45e70acf806b7bab5728871276047e5fa38f5cd385fb748ef5859597803cc697263f0a8a112ac697b161a4ebd69f6a35984c08d089d7277e1c5582696aa33a2aa7de5128b4cb954000c77f3223d32e9889e0f8421c1577d06a4ab7ac254bee102996035f3f437833739e8fe326acfb21eea8c68646bb3eabc484dba646bff9290fb96bfe15e4d9558907e24ccea9e81bdeb8353ecda89c2daa5acbfa3fe5ebef0f66fa0df1ee51d2c535118cbc791abc64b93580dfa3fd1b9aa64876d17fc338d70be65d6f94e9e3729a72cd3718ae695c58de4ad6affe72c4c37028a835b9ac053eb079858834c42988a744b96d0cca21ce55777a3d636d7eaba79089d389903f5f43464ce23095ed6df012f6f3fff9c6052b2bca7909c498f154ff9bcc26561ff108dfe694342875112f957972f2246afda739b2ba70aba0c730ba43059f8651a0aa3faf77c19047a8acdc0f88a8f2f1a9448e89682d775767a0d6fcbdeb4be745bc099785908609b2e5204c3f17191c0e14f346de1952ea100bffd8aa3766693c816bc0f7b8b37c7529ad40a146a4112c72165a50b67b55ccf0704c7042407657d1b26c6fcbd22a7ca9434bb678cd889bfc97ab74ead47269709f116d05bfe1fdae1d025b25a9b0635169f1201b4457da2dfb27c45b990e913a7145f56ce60ef7fa7b6ffba5027df652cc5da51f2eacb0f48da51d49ef8a7edd3f3bf292bf122e89fd6071d05f0676f7e9c9b888a1494b9f6970e4a89352e97dedeaf3fe39afeb4cf3f254ce48b8e80990d6696f3bce07a5a388495d3d5cf59cea7f00febf2d2a5bde6ca34a053b4b31101418694797a0459ea4d9234c550e31db2aa415edd9fc79c4fa041385a0de7a16db7a1c8fdb431841050b13860b9e4a665d13d63e592699251e0d75cab48efbe29f42dfd0b3710d0a43e775d508ffdf93517accee83625526e1f091b642d4ff14447a09cb216f9aedc7e340351de229cf8f39c6a1648cfa3bdb24a75e72024d974c0d8ef368a783f5d84006e92d8b0a9729ea492afdc2d843df0019e5a0f0dd091b2e114a9e4435c7230b294f5c48f092b249942e94a6bde67cf7f00f249b0b9ab856aff77948ae68a05e8c6b064fecc9698df15fac2fa80efe59c81b2ec4b7b406985d5a928d3522a3f1c7930b2811b1c69016757a7e812a2cbc0e86c5033956588bca1f8d83a2d51cd010c9b0e2dbbae39da8a8a7dbe79180d46e10b9462028ce299ddcf30427433e04c9ac76f4dd15e301d03b80e423ffd63a3488973b34c4d84f38413c005f4be08eb81592e4493fe73fc831705eb1bd810578bd7db5dbee1cf96dbd98c7f0df8e0f67e81ee3abfcd12fc5f011dd78317357694ae80303750ea653e3af787f4119f476926f7e0125428474f830e91343ed91f4835f5639", &(0x7f0000004c40)="8e5b5770d83393957c6fb19161297a5d6e88a170f6a137efdd54cc068b3b482a161dc9913e685a66cb6279953b1d07be1590f42865b1c3c6073dcf57b9dde984d1493ad92acfd259f3d6ac6936fdaa727e6c528c09a41e48f344895df56f56e5bec2256e0b264875ab9805a3427548ea", 0x80, r8, 0x4}, 0x38) (async) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000004ec0)={r8, &(0x7f0000004d80)="89e5e4ac0a489e9e4e8ebe2a206b60a1682154276a3ef3572b6366fc823fea8ac5055e11bdad97ba23244bbf44b1a5a5a3832990f73b5ebd847825fb36f5d51a750fcb7aa9c4cc198c02c53e64c62d872a96b27e38781e3ef2caaf35c9d9efe2", &(0x7f0000004e00)=""/175, 0x4}, 0x20) (async) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000004f40), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MCAST_RATE(r3, &(0x7f0000005000)={&(0x7f0000004f00)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000004fc0)={&(0x7f0000004f80)={0x24, r9, 0x300, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xf0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3c}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x20008804) (async, rerun: 32) prctl$PR_SET_TSC(0x1a, 0x2) (rerun: 32) r10 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$KDMKTONE(r10, 0x4b30, 0x2) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000005080)={0x0, 0x10, &(0x7f0000005040)=[@in={0x2, 0x4e22, @broadcast}]}, &(0x7f00000050c0)=0x10) (async, rerun: 32) r11 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) sendmsg$NL80211_CMD_GET_REG(r11, &(0x7f0000005200)={&(0x7f0000005100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000051c0)={&(0x7f0000005140)={0x4c, r9, 0x10, 0x70bd27, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x5a}, @NL80211_ATTR_DFS_REGION={0x5}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0xf9}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x2d}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x7f}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0xfe}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) (async) syz_open_dev$tty20(0xc, 0x4, 0x0) (async, rerun: 32) r12 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000005240), 0x2, 0x0) (rerun: 32) ioctl$VHOST_VSOCK_SET_RUNNING(r12, 0x4004af61, &(0x7f0000005280)=0x1) prctl$PR_SET_TSC(0x1a, 0x5) 5.368927667s ago: executing program 3 (id=2701): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$peeksig(0x4212, r0, 0x0, &(0x7f0000000fc0)) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$FUSE_NOTIFY_DELETE(r1, &(0x7f0000001fc0)=ANY=[@ANYBLOB="4500000003"], 0x45) r2 = socket(0x10, 0x803, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socket$vsock_stream(0x28, 0x1, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$TIOCCBRK(0xffffffffffffffff, 0x5428) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r4, 0x80585414, &(0x7f0000000440)) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x7}, {0xffff, 0xffff}, {0x0, 0xd}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x43}}}]}, 0x38}}, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x94, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x5, 0xfff3}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x6fe2}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0xb380, 0x4, 0x0, 0xd87, 0x6}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0xab, 0x8e}}]}, 0x94}, 0x1, 0x0, 0x0, 0x10}, 0x0) r10 = syz_usb_connect(0x2, 0x24, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000d972a440b72040155ab7010203010902120001000000000904800000ff"], 0x0) syz_usb_control_io(r10, 0x0, 0x0) r11 = syz_io_uring_setup(0x4aa, &(0x7f0000000380)={0x0, 0xfffffffc, 0x10100, 0x10000000, 0x13a}, &(0x7f0000000000)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r12, r13, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8126}}) io_uring_enter(r11, 0x38c5, 0x2000000, 0x0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r10, 0x0, &(0x7f00000009c0)={0x1c, &(0x7f0000000840)={0x0, 0x5, 0x2, "e16b"}, 0x0, 0x0}) 5.283908619s ago: executing program 5 (id=2702): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="52010000b1bd2f087d0403508c2f010203010902120001000000000904"], 0x0) close(0x3) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000140)={0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="87665ab3eaa76c90"], 0x0, 0x0, 0x0}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r0) r4 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x100000e, 0x4018831, 0xffffffffffffffff, 0x0) r5 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) r6 = syz_io_uring_setup(0x72ae, &(0x7f0000000280)={0x0, 0x0, 0x10100, 0x0, 0x36}, &(0x7f0000000500), &(0x7f0000000000)=0x0) r8 = syz_io_uring_setup(0x228a, &(0x7f0000000200)={0x0, 0x6e79, 0x2, 0x1000001, 0x1}, &(0x7f00000004c0)=0x0, &(0x7f0000001540)) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) syz_io_uring_submit(r9, r7, &(0x7f00000001c0)=@IORING_OP_SYMLINKAT={0x26, 0x2, 0x0, r0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000640)='./file0\x00', 0x0, 0x0, 0x1, {0x0, r10}}) io_uring_enter(r6, 0x184c, 0x0, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r4, 0x20, &(0x7f0000000180)="5e73663bf4082f7c6c9ecbf09d6dd7be5a06dfd645630500c1a303434a36bfc45a7badc8faed24bb77c848723a43602d1fe0d236c062e105ec77ffdc0fb243c3111dda42112650cc", 0x0, 0x48) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x38) 4.956502363s ago: executing program 4 (id=2703): r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x24101, 0x0) readv(r0, &(0x7f0000000440)=[{&(0x7f00000000c0)=""/4, 0x4}], 0x1) 4.883782891s ago: executing program 4 (id=2704): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x6, 0x8, 0x0, 0x3}, 0x0) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x1000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000380)={0x7c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x244}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xc0}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0xdb4}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x9}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x6}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x8}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x7c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x54, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x401}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e20}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0), 0x4) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet6_int(r4, 0x29, 0x13, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r6 = syz_open_dev$video(&(0x7f0000000000), 0x75, 0x100) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r6, 0xc034564b, &(0x7f0000000040)={0xfdfd, 0x34343452, 0x140, 0xb4, 0x3, @stepwise={{0x1ff, 0x6}, {0x3, 0x200}, {0x7ff, 0x81}}}) bpf$MAP_CREATE(0x0, 0x0, 0x0) r7 = fsmount(0xffffffffffffffff, 0x0, 0x80) fsmount(r5, 0x0, 0x79) socket(0x2b, 0x1, 0x1) r8 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000fc96d5c6fbc858e7814f5134ae2863c30b"], 0x14}, 0x1, 0x0, 0x0, 0x4001}, 0x4000) fchdir(r7) 4.507661278s ago: executing program 8 (id=2705): socket$netlink(0x10, 0x3, 0x8) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) accept4$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000300)=0x1c, 0x800) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x4, &(0x7f00000000c0)=[{0x0, 0x1, 0x2}, {0x64}, {0x81}, {0x6, 0x0, 0xfd, 0x7a1f}]}) socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r6, 0x0, 0x2e, &(0x7f0000000140)={0x24, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @local}}}, 0x108) close(0x3) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x8, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x4) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r3, 0x5a00, 0xbc03, 0x6, &(0x7f00000000c0)={[0x10000]}, 0x8) io_uring_enter(r3, 0x847ba, 0x0, 0xe, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x503}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MAX_AGE={0x8, 0x3, 0x40a}, @IFLA_BR_AGEING_TIME={0x8, 0x4, 0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(0xffffffffffffffff, 0xc0505510, &(0x7f0000000140)={0x3, 0x3f, 0x10, 0x9, &(0x7f0000001600)=[{}]}) 3.315025344s ago: executing program 4 (id=2706): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0xff, 0x0, 0x0, 0x7fff0000}]}) r0 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x48, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_GC_INTERVAL={0x0, 0xc, 0x1, 0x0, 0xde}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1c}, @NFTA_SET_ID={0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x40}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x6}]}, @NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xdc}}, 0x0) r3 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) readv(r3, &(0x7f0000000080)=[{&(0x7f0000001540)=""/4094, 0xffe}, {&(0x7f0000000100)=""/100, 0x64}], 0x2) symlinkat(&(0x7f0000000000)='.\x00', r1, &(0x7f0000000140)='./file0\x00') 3.190295408s ago: executing program 7 (id=2707): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000f00)={'dummy0\x00', &(0x7f0000000000)=@ethtool_perm_addr={0x4b, 0x23, "4372070000000000476fb2940acfbe4c3f9725f0f2bf568d62c050e400000000000000"}}) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0xe}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) 2.282659199s ago: executing program 3 (id=2708): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_io_uring_setup(0x4172, &(0x7f0000000780)={0x0, 0x4f5e, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r4, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x1}) io_uring_enter(r1, 0x567, 0x0, 0x0, 0x0, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x2, 0xa, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, [@sadb_x_filter={0x5, 0x1a, @in6=@mcast2, @in=@remote, 0x0, 0x0, 0x90132adf0ecb33e3}]}, 0x38}}, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r6, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r6, &(0x7f0000000040)={0x50, 0x0, r7, {0x7, 0x1f, 0x0, 0x10408, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r6, &(0x7f00000021c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x383, 0x1ac) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x541b, &(0x7f0000000000)={0xffffffffffffffff}) close_range(r8, 0xffffffffffffffff, 0x0) 2.08786955s ago: executing program 7 (id=2709): socket$netlink(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0xfffffffc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000007c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000800)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000180)={0x34, r4, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0xc010}, 0x40) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x44, r4, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x9}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xffffffff}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x961}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x400c014}, 0x20000801) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) socket(0x3, 0xa, 0xfffffffd) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x2, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004366b408c70b0800c84f0102030109022d00010000000009040000032eb47d000905f9ffffff00000009050f47"], 0x0) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000240)="2c385aa3d49100dc6626c892b6bc436ab6eb0ecdb4f51e2fd40000000000000d6481be489817bd09ef0e87fd6415443bf8da0679b9d4e4fc09ef2142d5aba433fc87e22131fa7c82f7ba05666f1510aaa62dff978fd81d9c9e261125ee29c076c61cc6", 0x63) r9 = accept4(r8, 0x0, 0x0, 0x0) sendto$inet6(r9, &(0x7f00000003c0)="a4677dfc2133806eecf49820871b9e6af2e2", 0x12, 0x1, 0x0, 0x0) recvmmsg$unix(r9, &(0x7f00000056c0)=[{{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000680)=""/1, 0x1}, {&(0x7f00000007c0)=""/87, 0x57}], 0x2}}], 0x1, 0x2002, 0x0) socket(0x1, 0x803, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000003bc0)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000003b80)={&(0x7f0000003640)={0x14, 0x29, 0x1, 0x70bd27, 0x25dfdbfe, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r11], 0x54}}, 0x0) 2.087253044s ago: executing program 4 (id=2710): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000180)={'gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x2000, 0xab00, 0x0, 0x7, {{0x5, 0x4, 0x0, 0x13, 0x14, 0x20, 0x0, 0x2b, 0x2f, 0x0, @empty=0x2f, @multicast1}}}}) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_RUN(r1, 0xae80, 0x0) 1.955432271s ago: executing program 3 (id=2711): syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b1000905827931"], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r3, 0x80015b1a, 0x0) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@mpls_getroute={0x1c, 0x1a, 0x1, 0x0, 0x25dfdbfb, {0x1c, 0x0, 0x10, 0xe6, 0xfc, 0x0, 0x0, 0xe, 0x900}}, 0x1c}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r5, 0x4080aebf, &(0x7f0000005700)={{0x0, 0x0, 0xfffffffffffffe9a, {0xd000, 0x80a0000}}, "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", "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"}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000000)="66b82348da7a0f23c80f21f86635000090000f23f826660fc7b007000f001a0f791e4e000f28d80fc77700f30f093e260f00d4e1ea0f0172b7", 0x39}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1.925689223s ago: executing program 4 (id=2712): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220f"], 0x0}, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000200)={0x1, @sliced={0x0, [0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff]}}) r2 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) r3 = dup(r2) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={&(0x7f0000000080)="7bdcaf", &(0x7f0000000100)=""/127, &(0x7f0000000180)="7a14921277a6f71ef418cf9ce7bb7fdb4e8a16d2654eb8cc5527fcfd43b98d98bac7e964555c88d42ded27e288549ab956893f9a8b4a2e93bb9f148ebf00694d36916d057046fcd13d355bdd591b5901ee488a856e26ddf68e9a16139d309a85f23ff4b4fe2ef5af34fb757ba83df23931c2578619b5df13d63c5838cac392c7686e9790baeed5a7ab5d57d5839b867c79ee95525e1ca2166a0ea9eb5841c604ef04ddddd982f8ed4ae04142c265a327477d6c426f7c71dd8c7de88b0a0801a0f64eb2f015c1b5caf9425af59fe3c0434d0752fea45f425974276bc3e8306fd93cd37e30994f0888076507f9a3cb141bcc5022", &(0x7f0000000580)="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", 0x800, r3}, 0x38) ioctl$HIDIOCGUCODE(r2, 0xc018480d, &(0x7f00000000c0)={0x2, 0x3, 0x0, 0x10000, 0x40, 0x80000000}) 1.719887469s ago: executing program 5 (id=2713): mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x8) (async) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x82) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)="273eebfecb7c0e923301b61c42cb1d11f41d00bdab2a3d983b065a56", 0x1c}, {&(0x7f0000000140)="10eba9", 0x3}], 0x2) (async) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0) (async) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) (async) r2 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x800, 0x80000000}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) (async) r5 = io_uring_setup(0x36dc, &(0x7f00000001c0)) close_range(r5, 0xffffffffffffffff, 0x0) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x1}) (async) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x0) io_uring_enter(r2, 0x47ba, 0x1000000, 0x0, 0x0, 0x0) (async) creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) (async) socket$packet(0x11, 0x2, 0x300) socket$netlink(0x10, 0x3, 0x0) (async) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) socket$can_raw(0x1d, 0x3, 0x1) (async) socket$unix(0x1, 0x1, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) syz_io_uring_setup(0x4169, &(0x7f00000003c0)={0x0, 0xd490, 0x10100, 0x1}, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000001f0000540000000e0001"], 0x34}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) syz_io_uring_setup(0xa94, &(0x7f0000000280)={0x0, 0x44c2, 0x0, 0x2, 0xfffffffd}, 0x0, 0x0) 1.639821971s ago: executing program 5 (id=2714): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = fcntl$getown(r1, 0x9) sched_getattr(r2, &(0x7f00000000c0)={0x38}, 0x38, 0x0) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000100)=r2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) fanotify_mark(0xffffffffffffffff, 0x530, 0x29, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, 0x0, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) r6 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x20c00) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r6, 0x80dc5521, &(0x7f00000011c0)=""/230) getsockopt$IP_VS_SO_GET_DESTS(r5, 0x0, 0x484, &(0x7f0000000000)=""/108, &(0x7f0000000080)=0x18) syz_open_dev$tty1(0xc, 0x4, 0x4) socket$nl_generic(0x10, 0x3, 0x10) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async) fcntl$getown(r1, 0x9) (async) sched_getattr(r2, &(0x7f00000000c0)={0x38}, 0x38, 0x0) (async) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000100)=r2) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) (async) fanotify_mark(0xffffffffffffffff, 0x530, 0x29, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r4, 0x0, 0x0) (async) socket$inet_smc(0x2b, 0x1, 0x0) (async) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x20c00) (async) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r6, 0x80dc5521, &(0x7f00000011c0)=""/230) (async) getsockopt$IP_VS_SO_GET_DESTS(r5, 0x0, 0x484, &(0x7f0000000000)=""/108, &(0x7f0000000080)=0x18) (async) syz_open_dev$tty1(0xc, 0x4, 0x4) (async) 1.336994938s ago: executing program 5 (id=2715): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c46fdc30003070000000000000002000300030000000903000038000000fcffffff0e0000000000200001000500000000000000000003"], 0x58) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x4) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x1, 0x0, &(0x7f0000000600)=""/52, 0x0, 0xffff1000}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, 0x0, &(0x7f00000000c0)=""/117, 0x0, 0xdddd1000}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000180)={0x10}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) close(r0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x4, 0x3, 0x3, 0x0, 0x4}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c00000000010104000000000000000002000000240002801400018008000100e000000108000200e00000010c0002800500010000000000080008400000000814000580080001"], 0x5c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="6c000000020100"/17, @ANYRES32=0x0, @ANYBLOB="1e000500761000004c0012800e00010069703667726574617000000038000280050017000000000006000f000000000014000700ff020000000000000000000000000001060011004e220000060010004e240000"], 0x6c}, 0x1, 0x0, 0x0, 0x4090}, 0x2000000) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000, 0x30, r4, 0xe8ba2000) 1.335314526s ago: executing program 8 (id=2716): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) writev(r1, &(0x7f00000004c0)=[{&(0x7f0000000440)='\'V', 0x2}], 0x1) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) close(r2) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xa, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0xb86}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x1, 0x81, 0x7, 0x8, 0x8}, {0x6, 0x1, 0xd, 0x6, 0x6, 0xfb8e000}, 0x6, 0x4, 0x111e}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x24000011}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0x2, 0xb}, {0xd, 0xfff3}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.115712254s ago: executing program 7 (id=2717): ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x20, 0x0, 0x0) r2 = syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB='\b\x00'], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r3, 0x29, 0x15, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0xfe, 0x0}}, 0x14) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000040)={'tunl0\x00', 0x0}) setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000840), &(0x7f0000000880)="22cff58056ac", 0xffd7, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRES32=0x0, @ANYRES16=r0], 0x48) r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r4, 0x4018aee3, &(0x7f0000000000)) setxattr$incfs_metadata(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r5, &(0x7f00000009c0)={&(0x7f00000000c0)={0x2, 0x4001, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x20044818) close(r5) waitid(0x2, 0x0, 0x0, 0x4, 0x0) r6 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) 1.061878499s ago: executing program 5 (id=2718): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYRESDEC=r0, @ANYRES16=r1, @ANYRESDEC=r2, @ANYRES32=r2, @ANYBLOB="08009e"], 0x24}, 0x1, 0x0, 0x0, 0x4014001}, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000000)={0x1, 0x4, 0x0, 0x8, 0x3e, 0x9, 0xe8, 0xa0, 0x4, 0x3, 0x0, 0x3, 0x6, 0x1}, 0xe) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r5 = accept4$alg(r4, 0x0, 0x0, 0x0) sendmmsg(r5, &(0x7f0000001700)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001500)="a76e3ba7f87ed94e8b20c3d2ebc535d943", 0x11}], 0x1}}], 0x1, 0x4008854) read$alg(r5, &(0x7f0000002300)=""/4128, 0x1020) sendmmsg$alg(r5, &(0x7f0000007e40)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}], 0x1, 0x20040894) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e1f, @local}]}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000240)={r6, 0x7}, 0x8) r7 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r7, 0x0, &(0x7f00000010c0)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="00000100000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r7, 0x0, 0x0) r8 = syz_open_dev$mouse(&(0x7f0000000680), 0x2, 0x543201) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r8, 0xc0984124, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) syz_usb_control_io$cdc_ecm(r7, 0x0, &(0x7f0000000280)={0x1c, &(0x7f0000000140)={0x40, 0x7, 0x49, "2a4e22f5c5196e03ba8bebf15b08cd0649fed85d8ccbb74527e74636849e944f932f50821243b8106afba1842d46ec710cb202fb49d1771543d1939ff4a29127c4798a0dee6e9ae5cf"}, 0x0, 0x0}) syz_usb_connect$printer(0x6, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x2, 0x10, 0x4, [{{0x9, 0x4, 0x0, 0x9, 0x1, 0x7, 0x1, 0x3, 0xe, "", {{{0x9, 0x5, 0x1, 0x2, 0x3ff, 0x9, 0x1, 0x1}}}}}]}}]}}, &(0x7f0000000600)={0xa, &(0x7f0000000340)={0xa, 0x6, 0x300, 0xf9, 0xf, 0x80, 0x8, 0x3}, 0x13, &(0x7f0000000380)={0x5, 0xf, 0x13, 0x2, [@wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x34, 0xe, 0x0, 0x5c}, @ptm_cap={0x3}]}, 0x5, [{0xb0, &(0x7f00000003c0)=@string={0xb0, 0x3, "861492608c3523ab7fb446e3bcf18c5faf396de0203a0667743ab9d5852ff9f51a8404ed2eaa8ceea366ad3cce70514b3c59b3c4cd4c8f62fb36bad6472529af86967b44e5c8aff529278e834a31d396c4f53b798b05a398a26758b4b9d3b2952f38de7dc09990699d8c707063d5d48fae36efa096cc2ee8ed548d8a117cedb97d7e168b027a81c2da3fd7b7cf907a84b17a353c3ee17eb29e7d4a9208fd76e8fd586dc8c346661d66ddb10fc892"}}, {0xb0, &(0x7f0000000480)=@string={0xb0, 0x3, "b7638b1e4e481fa4ea45dffaa0a550720b4e51946056c10585b60be597112b31862929665447295cd262dc2c69874f3531a67e22b04490c3faec0e66ccffa1f85fae827d8c725187b3948525c9529bb2ecac172dbd753c8dd5742e6d72e24e65cb0d55ef00f7865f217758a41966cce4712cf361ddc47f7aecffc26ab354e881bb64cd853c497b92a554d8925438910d69f495c4b20685199420635a287a09ccbbd7da862197d48bc4da579b72f3"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x40c}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x401}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x3401}}]}) 999.562928ms ago: executing program 8 (id=2719): syz_usb_connect(0x2, 0x2d, &(0x7f0000000a80)={{0x12, 0x1, 0x201, 0x1, 0xe4, 0x41, 0x20, 0x4b8, 0x202, 0x33b7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x2, 0xc, 0x61, 0x10, 0x7, [{{0x9, 0x4, 0xad, 0x4, 0x0, 0xa7, 0xaf, 0xde, 0xd}}, {{0x9, 0x4, 0xad, 0x6, 0x0, 0xe, 0xfa, 0xf0, 0xff}}]}}]}}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000e8000000000040d900008500000023000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000140)='mm_page_alloc\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r2, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000040)="f4000900062b2c25ff02000000000000dc8b850f2384e258ef7758ede5f266cc00007a000000ad6e911b51818462b400", 0x30}], 0x1}, 0x0) syz_usb_connect(0x0, 0x10e, &(0x7f0000000380)=ANY=[@ANYBLOB="120100006a249f08ec1888323a3f010203010902fc0001870000000904e600030e01000006240600011005240008000d240f01000000000000a0010606241a0000000c241b000000000000ff01000424020c90"], 0x0) syz_usb_connect$printer(0x4, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x2, 0x1c0, 0x6, [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x7, 0x1, 0x1, 0x1, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x9, 0x3, 0x8}}, [{{0x9, 0x5, 0x82, 0x2, 0x40, 0xb5, 0xb, 0x4}}]}}}]}}]}}, &(0x7f0000000640)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x110, 0x8, 0x89, 0x6, 0x8, 0x4e}, 0x145, &(0x7f0000000080)={0x5, 0xf, 0x145, 0x6, [@generic={0xeb, 0x10, 0x3, "142645212b339ed9d4856d23176428fa4e03f47be1370a20689665b403c06840c622395fdaa707fbdcf8db276a7dfcfeaa8febe0738f7a582121e0d3cf15ce3e3ce998806b4b67ca13bf5df5b2b1311ee34cc0a1f1cc832ec156bf14c8607d0ebb562c40664091986d988d9570ce25fbad5043e72da7e7eb534fb3962a30826abcde29aa2a55b95aa7aa355d236a9e6557cabeb76b50b90438923f10518783285cbe05ec573b3b5687826435e4d96b6b038f5a419bfee26999ab7c90101bcc6230b4a403b3050fa28d3538810bd3a9103bd9a15f306c99eb77b1a0a4f24283ab8ae5c78025511316"}, @ptm_cap={0x3}, @generic={0x28, 0x10, 0x3, "55d2991bffc6187b5b646a2de07baccbb3287bec66f43684dbff0223a91dffff91b0b6eebb"}, @ext_cap={0x7, 0x10, 0x2, 0x11, 0x5, 0x7, 0x4}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x9, 0x3, 0x40}, @ssp_cap={0x1c, 0x10, 0xa, 0x1, 0x4, 0x7f, 0x0, 0x308, [0xc000, 0xf, 0xffcf, 0x30]}]}, 0x8, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x427}}, {0xd1, &(0x7f0000000280)=@string={0xd1, 0x3, "a0c982eeb49f835792533828e89c6ffe64fca72c551aa715ecca4549ea6145608d8f48f53cb86afe53aad19496b0fae1afac086be5b48a42b87cf0acae050e5c9acf13ff0799df8453564bfed3f6b36d17dc5e4d13922635236472abd7bc87dda39cce71222781f8fd554117df7e9552e5aaf282a27fe2b2342ddaf9f075bd3ac65651ec48bf37ac93420117eeaa8d207103f3b543488c8e1d066c5da3576de8119855ceb591eb948cfb7bbdaa33df5357443f68e14b06b8e8643b3ade27bda6c0607343c3e67188cc746daf9f68a7"}}, {0x47, &(0x7f0000000380)=@string={0x47, 0x3, "3fa427214f715930fa5473171e2a5573006704d32396b7d137672ca4f50b02cd5d3f2e126d682028574939f81d2392065de0d78dd481cbe705aeace46a616b73bb38ce45ae"}}, {0x95, &(0x7f0000000400)=@string={0x95, 0x3, "ab2b55913d0d6ce7b214ad7a60b517105cf2b1d176769d24a3bd4d0740fcc4191bb6c0d85732c09f0e32ecedd913174d6a652758877e50c09d171693669d85571f0f2b1dc8b6884ee9adb78899578543278b6cfdde696f05901aa479e55132ace1c50789aea688b2216fe76dafe6cd9a86f81468b68159e2aaae5e34e7f3597255170639841806565f9911f5d92b50a5c8e73e"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0xc09}}, {0x1b, &(0x7f0000000500)=@string={0x1b, 0x3, "9e25dfab077fc02bced5818a94e8665fe3fc26bc37711761fe"}}, {0x8d, &(0x7f0000000540)=@string={0x8d, 0x3, "8ec5fdb4c7db2b1a29b68097e192a4d2b3e97e3bce714d56c3c8ca0073ff016981a0fb85a89a0d2d378a4c663c630512e2d6b1e9e4534a35b3da9d1127dfd86bbb0c945026fc9df868067a74f0daeadc8c5333da619c21eeea9d1662126ea51434cbe411757c150b9e3b4d8e702c0ba648bcf6814ca6c75aebd03f3ab43208214257a1186a0b2fa9473c1d"}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x848}}]}) 43.663363ms ago: executing program 4 (id=2720): r0 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x17ef, 0x60b5, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x0, [{{0x9, 0x4, 0x0, 0xfc, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0xffff, 0x6, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0xb, 0x0, 0xfd}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f00000012c0)={0x40, 0x3, 0x5, {0x5, 0x4, "26ed60"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) get_mempolicy(&(0x7f00000000c0), &(0x7f0000000100), 0x47368f3d, &(0x7f0000ffd000/0x3000)=nil, 0x2) 0s ago: executing program 3 (id=2721): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r4 = socket(0x10, 0x800, 0x0) write(r1, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000000000000000800040001000000", 0x24) unshare(0x20000400) r5 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x281, 0x0) ppoll(&(0x7f0000000100)=[{r5, 0x8}], 0x1, &(0x7f0000000140)={0x0, 0x3938700}, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) syz_emit_ethernet(0x12, &(0x7f0000000000)=ANY=[@ANYBLOB="910418166421b54fa0aaaa050004424203"], 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYRES64=r0, @ANYRESDEC=r5, @ANYRES16=r6, @ANYRES16=r1, @ANYBLOB="4e710a8a5f44b7dae3e4392bdf5b8d863e2061f4d578ab5b533e0fcdb42849fa9513d9257b3e9104ce033d4aabf2fc7a04d707b9680f3174ee89ed4ac90a504ebd66aa822a1071a30daad2473a2a5163234367b898caf1f495a2d12566c5d0672c6b2d42fb18fadeb60d02177b833a1ab4bb2c25db2cd0fe9ec06bd72465d383b1ad9b0636653bcda40493269e6ebbdbe7b47313002af2ef484ed032569f7fa01971ecc5f4243f6ffb3200f49e9350ce4ce88a22ad"], 0x34}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xa) r7 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r7, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r7, 0x7a0, &(0x7f0000000140)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r7, 0x7a8, &(0x7f0000000000)={{@my=0x1, 0xffffffff}, @any, 0x0, 0x0, 0x8000000, 0x0, 0x6}) r8 = syz_usb_connect(0x3, 0x64, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000cb8be7406d04230848390102030109025200010000000009044000000e0100000a240608000b020102000600040007000300390c2402050302", @ANYRESOCT=0x0], 0x0) syz_usb_control_io(r8, &(0x7f0000000540)={0x2c, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0003090000000203"], 0x0, 0x0, 0x0}, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f00000004c0), 0x4000) kernel console output (not intermixed with test programs): 623.840585][ T2153] usb 5-1: Manufacturer: syz [ 623.845395][ T2153] usb 5-1: SerialNumber: syz [ 623.860813][ T2153] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 623.882410][ T9] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 623.933432][ C1] usblp0: nonzero write bulk status received: -71 [ 623.934682][ T2153] usb 6-1: USB disconnect, device number 16 [ 623.954932][ T2153] usblp0: removed [ 624.086503][T15758] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 624.097150][T15758] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 624.318914][ T2153] usb 5-1: USB disconnect, device number 26 [ 624.346032][ T5861] Bluetooth: hci2: command 0x0c1a tx timeout [ 624.347978][T13681] Bluetooth: hci4: command 0x0c1a tx timeout [ 624.505687][ C1] syz_tun: tun_net_xmit 70 [ 624.608079][ T44] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 624.665897][T13540] usb 3-1: Failed to submit usb control message: -110 [ 624.672893][T13540] usb 3-1: unable to send the bmi data to the device: -110 [ 624.680943][T13540] usb 3-1: unable to get target info from device [ 624.687986][T13540] usb 3-1: could not get target info (-110) [ 624.694061][T13540] usb 3-1: could not probe fw (-110) [ 624.777490][ T44] usb 4-1: too many endpoints for config 0 interface 0 altsetting 138: 127, using maximum allowed: 30 [ 624.788913][ T44] usb 4-1: config 0 interface 0 altsetting 138 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 624.800155][ T44] usb 4-1: config 0 interface 0 altsetting 138 endpoint 0x81 has invalid wMaxPacketSize 0 [ 624.810177][ T44] usb 4-1: config 0 interface 0 altsetting 138 has 1 endpoint descriptor, different from the interface descriptor's value: 127 [ 624.823940][ T5930] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 624.831661][ T44] usb 4-1: config 0 interface 0 has no altsetting 0 [ 624.838414][ T44] usb 4-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.80 [ 624.847981][ T44] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 624.858147][ T44] usb 4-1: config 0 descriptor?? [ 624.900146][T15772] loop4: detected capacity change from 0 to 7 [ 624.912781][ T6231] Dev loop4: unable to read RDB block 7 [ 624.920651][ T6231] loop4: unable to read partition table [ 624.928136][ T6231] loop4: partition table beyond EOD, truncated [ 624.936999][T15772] Dev loop4: unable to read RDB block 7 [ 624.942962][T15772] loop4: unable to read partition table [ 624.949698][T15772] loop4: partition table beyond EOD, truncated [ 624.958037][T15772] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 625.005919][ T5930] usb 6-1: Using ep0 maxpacket: 32 [ 625.013498][ T5930] usb 6-1: config 0 interface 0 has no altsetting 0 [ 625.023451][ T5930] usb 6-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 625.033070][ T5930] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 625.041769][ T5930] usb 6-1: Product: syz [ 625.046906][ T5930] usb 6-1: Manufacturer: syz [ 625.051568][ T5930] usb 6-1: SerialNumber: syz [ 625.058448][ T5930] usb 6-1: config 0 descriptor?? [ 625.145899][ T9] usb 5-1: Service connection timeout for: 256 [ 625.156552][ T9] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services [ 625.165040][ T9] ath9k_htc: Failed to initialize the device [ 625.189731][ T2153] usb 5-1: ath9k_htc: USB layer deinitialized [ 625.476216][ T5930] gs_usb 6-1:0.0: Configuring for 1 interfaces [ 625.701335][ T5930] gs_usb 6-1:0.0: Couldn't get bit timing const for channel 0 (-EPROTO) [ 625.714866][ T5930] gs_usb 6-1:0.0: probe with driver gs_usb failed with error -71 [ 625.727630][ T5930] usb 6-1: USB disconnect, device number 17 [ 625.907151][ T9] usb 3-1: USB disconnect, device number 41 [ 626.126114][ T5930] usb 6-1: new low-speed USB device number 18 using dummy_hcd [ 626.227587][T15805] netlink: 'syz.4.2329': attribute type 5 has an invalid length. [ 626.286030][ T5930] usb 6-1: device descriptor read/64, error -71 [ 626.426032][ T5861] Bluetooth: hci2: command 0x0c1a tx timeout [ 626.475630][ T9] usb 3-1: new full-speed USB device number 42 using dummy_hcd [ 626.525607][ T5930] usb 6-1: new low-speed USB device number 19 using dummy_hcd [ 626.655595][ T5930] usb 6-1: device descriptor read/64, error -71 [ 626.657082][ T9] usb 3-1: config index 0 descriptor too short (expected 539, got 27) [ 626.674827][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 626.718174][ T9] usb 3-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 626.730479][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 626.739337][ T9] usb 3-1: Product: syz [ 626.743612][ T9] usb 3-1: Manufacturer: syz [ 626.749652][ T9] usb 3-1: SerialNumber: syz [ 626.756759][ T9] usb 3-1: config 0 descriptor?? [ 626.763555][ T9] hub 3-1:0.0: bad descriptor, ignoring hub [ 626.771135][ T9] hub 3-1:0.0: probe with driver hub failed with error -5 [ 626.781377][ T9] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input72 [ 626.791157][ T5930] usb usb6-port1: attempt power cycle [ 626.820132][ T9] usbtouchscreen 3-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -8 [ 627.277270][ T9] usbtouchscreen 3-1:0.0: probe with driver usbtouchscreen failed with error -8 [ 627.375927][ T5930] usb 6-1: new low-speed USB device number 20 using dummy_hcd [ 627.405936][T15818] loop4: detected capacity change from 0 to 7 [ 627.431060][ T44] usbhid 4-1:0.0: can't add hid device: -71 [ 627.445037][T15818] Dev loop4: unable to read RDB block 7 [ 627.463972][ T5930] usb 6-1: device descriptor read/8, error -71 [ 627.476318][ T44] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 627.479151][T15818] loop4: unable to read partition table [ 627.522019][ T44] usb 4-1: USB disconnect, device number 29 [ 627.533340][T15818] loop4: partition table beyond EOD, truncated [ 627.573384][T15818] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 627.736285][ T5930] usb 6-1: new low-speed USB device number 21 using dummy_hcd [ 627.755866][T13962] usb 3-1: USB disconnect, device number 42 [ 627.780592][ T5930] usb 6-1: device descriptor read/8, error -71 [ 627.889020][T15830] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2341'. [ 627.898771][T15832] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2341'. [ 627.908059][ T5930] usb usb6-port1: unable to enumerate USB device [ 628.025795][ T44] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 628.178812][ T44] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 628.190213][ T44] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 628.201322][ T44] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 628.214474][ T44] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 628.224109][ T44] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 628.234666][ T44] usb 4-1: config 0 descriptor?? [ 628.506536][ T5861] Bluetooth: hci2: command 0x0c1a tx timeout [ 628.710182][ T44] plantronics 0003:047F:FFFF.0031: reserved main item tag 0xd [ 628.773772][ T44] plantronics 0003:047F:FFFF.0031: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 628.848977][T15849] openvswitch: netlink: Message has 4 unknown bytes. [ 629.062759][ T44] usb 4-1: USB disconnect, device number 30 [ 629.096520][T15856] netlink: 'syz.5.2348': attribute type 15 has an invalid length. [ 629.104518][T15856] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2348'. [ 629.186027][ T9] usb 3-1: new full-speed USB device number 43 using dummy_hcd [ 629.389278][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 1024, setting to 64 [ 629.402392][ T9] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 629.414516][ T9] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 629.430796][ T9] usb 3-1: Product: syz [ 629.449331][ T9] usb 3-1: Manufacturer: syz [ 629.460648][ T9] usb 3-1: SerialNumber: syz [ 629.477119][ T9] usb 3-1: config 0 descriptor?? [ 629.483134][T15852] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 629.493047][ T9] hub 3-1:0.0: bad descriptor, ignoring hub [ 629.500663][ T9] hub 3-1:0.0: probe with driver hub failed with error -5 [ 629.631614][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 629.644978][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 629.670953][T15858] netlink: 'syz.3.2349': attribute type 1 has an invalid length. [ 629.837906][ T9] usb 3-1: USB disconnect, device number 43 [ 629.927590][T15863] loop4: detected capacity change from 0 to 7 [ 629.934537][T15863] Dev loop4: unable to read RDB block 7 [ 629.941478][T15863] loop4: unable to read partition table [ 629.947837][T15863] loop4: partition table beyond EOD, truncated [ 629.963530][T15863] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 630.049259][T15867] kvm: vcpu 0: requested 1664 ns lapic timer period limited to 200000 ns [ 630.189818][T15871] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 630.200459][T15871] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 630.216887][T15871] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 630.227330][T15872] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 630.228050][ T44] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 630.238962][T15872] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 630.244276][T15871] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 630.344193][T15875] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2355'. [ 630.395566][ T44] usb 6-1: device descriptor read/64, error -71 [ 630.425897][ T9] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 630.600725][ T9] usb 5-1: New USB device found, idVendor=0d81, idProduct=1900, bcdDevice=eb.c6 [ 630.610055][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 630.618436][ T9] usb 5-1: Product: syz [ 630.622681][ T9] usb 5-1: Manufacturer: syz [ 630.627367][ T9] usb 5-1: SerialNumber: syz [ 630.636348][ T44] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 630.766570][ T44] usb 6-1: device descriptor read/64, error -71 [ 630.866723][ T9] pwc: Visionite VCS-UC300 USB webcam detected. [ 630.874739][ T9] pwc: Failed to set LED on/off time (-71) [ 630.884354][ T9] pwc: send_video_command error -71 [ 630.886032][ T44] usb usb6-port1: attempt power cycle [ 630.890191][ T9] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 630.903518][ T9] Philips webcam 5-1:5.0: probe with driver Philips webcam failed with error -71 [ 630.919882][ T9] usb 5-1: USB disconnect, device number 27 [ 631.245872][ T44] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 631.266408][ T44] usb 6-1: device descriptor read/8, error -71 [ 631.508087][ T44] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 631.556169][ T44] usb 6-1: device descriptor read/8, error -71 [ 631.666675][ T44] usb usb6-port1: unable to enumerate USB device [ 631.947573][T15901] wireguard0: entered allmulticast mode [ 631.982287][T15903] wireguard1: entered allmulticast mode [ 632.480599][T15920] fuse: Bad value for 'fd' [ 632.662790][T15927] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2368'. [ 632.684797][T15927] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2368'. [ 632.695746][T15927] 8021q: adding VLAN 0 to HW filter on device bond6 [ 632.936425][T15912] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 632.942510][T15912] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 632.949011][T15912] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 632.955055][T15912] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 633.182036][T15943] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2370'. [ 633.228037][ T5930] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 633.395961][ T5930] usb 5-1: Using ep0 maxpacket: 8 [ 633.405784][ T5930] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 633.442427][ T5930] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 633.463866][ T5930] usb 5-1: Product: syz [ 633.481970][ T5930] usb 5-1: Manufacturer: syz [ 633.498499][ T5930] usb 5-1: SerialNumber: syz [ 633.528891][ T5930] usb 5-1: config 0 descriptor?? [ 633.593826][T15952] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2375'. [ 633.605182][T15952] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2375'. [ 633.619089][ T2153] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 633.631354][T15954] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2375'. [ 633.640531][T15954] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2375'. [ 633.750470][ T5930] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 633.755911][ T2153] usb 4-1: device descriptor read/64, error -71 [ 634.005704][ T2153] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 634.145722][ T2153] usb 4-1: device descriptor read/64, error -71 [ 634.265695][ T5861] Bluetooth: hci1: command 0x0406 tx timeout [ 634.273121][ T2153] usb usb4-port1: attempt power cycle [ 634.535707][ T44] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 634.635877][ T2153] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 634.674658][ T2153] usb 4-1: device descriptor read/8, error -71 [ 634.690601][ T44] usb 3-1: Using ep0 maxpacket: 16 [ 634.697719][ T44] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 634.706903][ T44] usb 3-1: config 0 has no interface number 0 [ 634.713145][ T44] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 32, changing to 9 [ 634.724501][ T44] usb 3-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 634.734015][ T44] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 634.753619][ T44] usb 3-1: config 0 descriptor?? [ 634.915854][ T2153] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 634.946561][ T2153] usb 4-1: device descriptor read/8, error -71 [ 634.985763][ T5861] Bluetooth: hci2: command 0x0c1a tx timeout [ 634.986039][T13681] Bluetooth: hci4: command 0x0c1a tx timeout [ 634.991974][ T5861] Bluetooth: hci3: command 0x0406 tx timeout [ 635.029613][ T5944] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 635.078675][ T2153] usb usb4-port1: unable to enumerate USB device [ 635.175525][T15965] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 635.184525][T15965] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 635.201598][T15931] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 635.210341][T15931] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 635.228801][ T44] usbhid 3-1:0.1: can't add hid device: -71 [ 635.242985][ T5944] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 635.251997][ T44] usbhid 3-1:0.1: probe with driver usbhid failed with error -71 [ 635.278607][ T44] usb 3-1: USB disconnect, device number 44 [ 635.301867][ T5930] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 635.312117][ T5944] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 635.352439][ T5930] usb 5-1: USB disconnect, device number 28 [ 635.387868][ T5944] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 635.476206][ T5944] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 635.518072][ T5944] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 635.527225][ T5944] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 635.536012][ T5944] usb 6-1: Manufacturer: syz [ 635.550103][ T5944] usb 6-1: config 0 descriptor?? [ 635.773554][T15982] netlink: 'syz.2.2383': attribute type 21 has an invalid length. [ 635.782145][T15982] netlink: 'syz.2.2383': attribute type 1 has an invalid length. [ 635.793301][T15982] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2383'. [ 635.967943][T15971] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2380'. [ 635.982700][T15971] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 635.992467][T15971] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 636.255879][ T5930] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 636.285356][T15987] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2384'. [ 636.415575][ T5930] usb 5-1: Using ep0 maxpacket: 8 [ 636.431162][ T5930] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 636.440633][ T5930] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 636.451604][ T5930] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 636.462824][ T5930] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 636.473388][ T5930] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 636.485070][ T5930] usb 5-1: Manufacturer: à³µä¾»î«´à¨™È¯ïº¨â•¹æ²›ê‹ [ 636.701988][T15985] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 636.711131][T15985] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 636.775729][ T9] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 636.785602][ T44] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 636.925571][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 636.935673][ T44] usb 3-1: Using ep0 maxpacket: 8 [ 636.943218][ T9] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0038, bcdDevice=99.03 [ 636.944772][ T44] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 636.953214][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 636.965762][ T44] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 636.970875][ T9] usb 4-1: Product: syz [ 636.982911][ T44] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 636.984881][ T9] usb 4-1: Manufacturer: syz [ 636.994434][ T44] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 636.999436][ T9] usb 4-1: SerialNumber: syz [ 637.003586][ T9] usb 4-1: config 0 descriptor?? [ 637.016658][ T44] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 637.039399][ T9] dvb-usb: found a 'TerraTec/qanu USB2.0 Highspeed DVB-T Receiver' in warm state. [ 637.048866][ T44] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 637.057592][ T9] dvb-usb: bulk message failed: -22 (2/0) [ 637.063399][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 637.073868][ T9] dvbdev: DVB: registering new adapter (TerraTec/qanu USB2.0 Highspeed DVB-T Receiver) [ 637.083726][ T9] usb 4-1: media controller created [ 637.102563][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 637.120625][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 637.126506][ T9] dvb-usb: no frontend was attached by 'TerraTec/qanu USB2.0 Highspeed DVB-T Receiver' [ 637.138983][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input74 [ 637.154089][ T9] dvb-usb: schedule remote query interval to 50 msecs. [ 637.161150][ T9] dvb-usb: bulk message failed: -22 (2/0) [ 637.168106][ T9] dvb-usb: TerraTec/qanu USB2.0 Highspeed DVB-T Receiver successfully initialized and connected. [ 637.215707][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 637.221719][ T9] dvb-usb: error while querying for an remote control event. [ 637.280904][ T44] usb 3-1: GET_CAPABILITIES returned 0 [ 637.290587][ T44] usbtmc 3-1:16.0: can't read capabilities [ 637.296943][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 637.302830][ T9] dvb-usb: error while querying for an remote control event. [ 637.304496][ T5950] usb 4-1: USB disconnect, device number 35 [ 637.359614][ T5950] dvb-usb: TerraTec/qanu USB2.0 Highspeed DVB-T Re successfully deinitialized and disconnected. [ 637.488715][ T44] usb 3-1: USB disconnect, device number 45 [ 637.730022][ T5944] usbhid 6-1:0.0: can't add hid device: -71 [ 637.738790][ T5944] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 637.757437][ T5944] usb 6-1: USB disconnect, device number 26 [ 637.826857][T15997] tipc: Enabled bearer , priority 0 [ 637.834489][T15997] syzkaller0: entered promiscuous mode [ 637.840242][T15997] syzkaller0: entered allmulticast mode [ 637.851493][T15997] tipc: Resetting bearer [ 637.860720][T15996] tipc: Resetting bearer [ 637.868087][T15996] tipc: Disabling bearer [ 638.237417][T16007] netlink: 'syz.5.2391': attribute type 1 has an invalid length. [ 638.245300][ T9] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 638.256480][T16007] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2391'. [ 638.405558][ T5944] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 638.416995][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 638.428479][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 638.444409][ T9] usb 4-1: New USB device found, idVendor=0499, idProduct=103e, bcdDevice=4e.18 [ 638.453949][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 638.463195][ T9] usb 4-1: Product: syz [ 638.467724][ T9] usb 4-1: Manufacturer: syz [ 638.472543][ T9] usb 4-1: SerialNumber: syz [ 638.491139][ T9] usb 4-1: config 0 descriptor?? [ 638.555610][ T5944] usb 3-1: Using ep0 maxpacket: 32 [ 638.562577][ T5944] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 638.587467][ T5944] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 638.599587][ T5944] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 638.613401][ T5944] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 638.624434][ T5944] usb 3-1: config 0 descriptor?? [ 638.994728][ T5930] usb 5-1: 0:2 : does not exist [ 639.009932][ T5930] usb 5-1: USB disconnect, device number 29 [ 639.073166][ T5944] ft260 0003:0403:6030.0032: unknown main item tag 0x7 [ 639.273695][ T5944] ft260 0003:0403:6030.0032: chip code: 6424 8183 [ 639.481731][ T5944] ft260 0003:0403:6030.0032: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.2-1/input0 [ 639.683046][ T5944] ft260 0003:0403:6030.0032: failed to retrieve status: -32, no wakeup [ 639.757610][T16019] netlink: 124 bytes leftover after parsing attributes in process `syz.5.2396'. [ 639.767623][T16019] openvswitch: netlink: Flow key attr not present in new flow. [ 640.055770][ T5950] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 640.097946][ T44] usb 3-1: USB disconnect, device number 46 [ 640.205639][ T5950] usb 6-1: Using ep0 maxpacket: 8 [ 640.212532][ T5950] usb 6-1: config 0 has an invalid interface number: 185 but max is 0 [ 640.220882][ T5950] usb 6-1: config 0 has no interface number 0 [ 640.227461][ T5950] usb 6-1: config 0 interface 185 has no altsetting 0 [ 640.236826][ T5950] usb 6-1: New USB device found, idVendor=1435, idProduct=0828, bcdDevice=e1.b0 [ 640.246056][ T5950] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 640.254087][ T5950] usb 6-1: Product: syz [ 640.258624][ T5950] usb 6-1: Manufacturer: syz [ 640.263387][ T5950] usb 6-1: SerialNumber: syz [ 640.269884][ T5950] usb 6-1: config 0 descriptor?? [ 640.483871][T16021] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 640.492817][T16021] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 640.554020][ T5950] usb 6-1: Could not find all expected endpoints [ 640.565702][ T5950] usb 6-1: USB disconnect, device number 27 [ 640.642095][T16025] tipc: Enabled bearer , priority 0 [ 640.665116][T16025] tipc: Disabling bearer [ 640.990898][ T9] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 641.017433][ T9] usb 4-1: USB disconnect, device number 36 [ 641.030112][ T5950] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 641.075314][T14089] udevd[14089]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 641.195581][ T5950] usb 3-1: Using ep0 maxpacket: 32 [ 641.203795][ T5950] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 641.224856][ T5950] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 641.237118][ T5950] usb 3-1: config 0 descriptor?? [ 641.307805][ T5930] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 641.444595][ T5950] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 641.462180][ T5950] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 641.475127][ T5950] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 641.485027][ T5950] usb 3-1: media controller created [ 641.522569][ T5930] usb 5-1: config 0 has no interfaces? [ 641.544785][ T5930] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 641.556012][ T5950] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 641.564418][ T5930] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 641.580734][ T5930] usb 5-1: Product: syz [ 641.587788][ T5930] usb 5-1: Manufacturer: syz [ 641.608915][ T5930] usb 5-1: SerialNumber: syz [ 641.641085][ T5930] usb 5-1: config 0 descriptor?? [ 641.887400][T16015] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2394'. [ 641.897626][T16015] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 641.908299][T16015] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 641.920922][ T5930] usb 5-1: USB disconnect, device number 30 [ 642.290942][T16053] netlink: 'syz.3.2405': attribute type 1 has an invalid length. [ 642.308741][T16053] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2405'. [ 643.708679][ T5950] az6027: usb out operation failed. (-110) [ 643.714848][ T5950] stb0899_attach: Driver disabled by Kconfig [ 643.723854][ T5950] az6027: no front-end attached [ 643.723854][ T5950] [ 643.766049][ T5950] az6027: usb out operation failed. (-32) [ 643.772074][ T5950] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 643.952304][T16075] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2411'. [ 644.078540][T16078] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 644.096872][ T5950] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input75 [ 644.111037][ T5950] dvb-usb: schedule remote query interval to 400 msecs. [ 644.119164][ T5950] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 644.138482][ T5950] usb 3-1: USB disconnect, device number 47 [ 644.238929][ T5950] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 644.585722][ T5950] usb 3-1: new low-speed USB device number 48 using dummy_hcd [ 644.735731][ T5950] usb 3-1: device descriptor read/64, error -71 [ 644.840707][T16087] FAULT_INJECTION: forcing a failure. [ 644.840707][T16087] name failslab, interval 1, probability 0, space 0, times 0 [ 644.853785][T16087] CPU: 0 UID: 0 PID: 16087 Comm: syz.4.2415 Not tainted syzkaller #0 PREEMPT(full) [ 644.853807][T16087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 644.853818][T16087] Call Trace: [ 644.853824][T16087] [ 644.853831][T16087] dump_stack_lvl+0x189/0x250 [ 644.853856][T16087] ? __pfx____ratelimit+0x10/0x10 [ 644.853878][T16087] ? __pfx_dump_stack_lvl+0x10/0x10 [ 644.853896][T16087] ? __pfx__printk+0x10/0x10 [ 644.853918][T16087] ? __ip_dev_find+0x444/0x4e0 [ 644.853942][T16087] ? __ip_dev_find+0xa2/0x4e0 [ 644.853965][T16087] should_fail_ex+0x414/0x560 [ 644.853987][T16087] should_failslab+0xa8/0x100 [ 644.854010][T16087] kmem_cache_alloc_noprof+0x73/0x3c0 [ 644.854029][T16087] ? dst_alloc+0x105/0x170 [ 644.854046][T16087] ? snprintf+0xda/0x120 [ 644.854063][T16087] dst_alloc+0x105/0x170 [ 644.854081][T16087] ip_route_output_key_hash_rcu+0x14e1/0x23d0 [ 644.854108][T16087] ? ip_route_output_key_hash+0xde/0x2e0 [ 644.854126][T16087] ip_route_output_key_hash+0x1b9/0x2e0 [ 644.854143][T16087] ? tomoyo_check_inet_address+0x275/0x8c0 [ 644.854158][T16087] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 644.854178][T16087] ? __pfx___might_resched+0x10/0x10 [ 644.854196][T16087] ip_route_output_flow+0x2a/0x150 [ 644.854210][T16087] ? security_sk_classify_flow+0x70/0x180 [ 644.854230][T16087] __ip4_datagram_connect+0x9a5/0x1270 [ 644.854252][T16087] udp_connect+0x33/0x1f0 [ 644.854276][T16087] __sys_connect+0x313/0x440 [ 644.854298][T16087] ? __fget_files+0x3a0/0x420 [ 644.854322][T16087] ? __pfx___sys_connect+0x10/0x10 [ 644.854348][T16087] ? __pfx_ksys_write+0x10/0x10 [ 644.854367][T16087] ? rcu_is_watching+0x15/0xb0 [ 644.854384][T16087] __x64_sys_connect+0x7a/0x90 [ 644.854406][T16087] do_syscall_64+0xfa/0x3b0 [ 644.854429][T16087] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 644.854443][T16087] ? clear_bhb_loop+0x60/0xb0 [ 644.854460][T16087] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 644.854475][T16087] RIP: 0033:0x7f222dd8ebe9 [ 644.854489][T16087] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 644.854503][T16087] RSP: 002b:00007f222ebd0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 644.854520][T16087] RAX: ffffffffffffffda RBX: 00007f222dfb5fa0 RCX: 00007f222dd8ebe9 [ 644.854532][T16087] RDX: 0000000000000010 RSI: 0000200000000280 RDI: 0000000000000003 [ 644.854542][T16087] RBP: 00007f222ebd0090 R08: 0000000000000000 R09: 0000000000000000 [ 644.854552][T16087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 644.854561][T16087] R13: 00007f222dfb6038 R14: 00007f222dfb5fa0 R15: 00007f222e0dfa28 [ 644.854578][T16087] [ 644.975684][ T5950] usb 3-1: new low-speed USB device number 49 using dummy_hcd [ 644.988736][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 645.431579][ T5950] usb 3-1: device descriptor read/64, error -71 [ 645.533280][T16099] netlink: 'syz.5.2417': attribute type 1 has an invalid length. [ 645.535595][ T5930] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 645.550538][ T5950] usb usb3-port1: attempt power cycle [ 645.573121][T16099] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2417'. [ 645.708048][ T5930] usb 5-1: Using ep0 maxpacket: 32 [ 645.723677][ T5930] usb 5-1: config 0 has an invalid interface number: 145 but max is 1 [ 645.733506][ T5930] usb 5-1: config 0 has an invalid interface number: 43 but max is 1 [ 645.752192][ T5930] usb 5-1: config 0 has no interface number 0 [ 645.781325][ T5930] usb 5-1: config 0 has no interface number 1 [ 645.800375][ T5930] usb 5-1: config 0 interface 43 altsetting 250 bulk endpoint 0xF has invalid maxpacket 1023 [ 645.818669][ T5930] usb 5-1: config 0 interface 43 altsetting 250 has a duplicate endpoint with address 0x2, skipping [ 645.830323][ T5930] usb 5-1: config 0 interface 43 altsetting 250 has an endpoint descriptor with address 0xCE, changing to 0x8E [ 645.896175][ T5950] usb 3-1: new low-speed USB device number 50 using dummy_hcd [ 645.929359][ T5950] usb 3-1: device descriptor read/8, error -71 [ 645.959806][ T5930] usb 5-1: config 0 interface 43 altsetting 250 endpoint 0x8E has an invalid bInterval 180, changing to 11 [ 645.978204][ T5930] usb 5-1: config 0 interface 43 altsetting 250 endpoint 0x8E has invalid maxpacket 16902, setting to 1024 [ 645.989908][ T5930] usb 5-1: config 0 interface 43 altsetting 250 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 646.003841][ T5930] usb 5-1: config 0 interface 145 has no altsetting 0 [ 646.011066][ T5930] usb 5-1: config 0 interface 43 has no altsetting 0 [ 646.019978][ T5930] usb 5-1: New USB device found, idVendor=06cd, idProduct=0104, bcdDevice=c8.6a [ 646.033897][ T5930] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 646.053435][ T5930] usb 5-1: Product: syz [ 646.059239][ T5930] usb 5-1: Manufacturer: syz [ 646.065187][ T5930] usb 5-1: SerialNumber: syz [ 646.074372][ T5930] usb 5-1: config 0 descriptor?? [ 646.190562][ T5950] usb 3-1: new low-speed USB device number 51 using dummy_hcd [ 646.227921][ T5950] usb 3-1: device descriptor read/8, error -71 [ 646.291856][T16094] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 646.300941][T16094] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 646.319088][T16094] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2418'. [ 647.074772][T16094] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 647.132860][T16094] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 647.181022][ T5930] keyspan_pda 5-1:0.145: required endpoints missing [ 647.271182][ T5930] keyspan_pda 5-1:0.43: Keyspan PDA converter detected [ 647.278280][ T5950] usb usb3-port1: unable to enumerate USB device [ 647.298940][ T5930] usb 5-1: Keyspan PDA converter now attached to ttyUSB0 [ 647.338656][ T5930] usb 5-1: USB disconnect, device number 31 [ 647.408372][ T5930] keyspan_pda ttyUSB0: Keyspan PDA converter now disconnected from ttyUSB0 [ 647.426391][ T5930] keyspan_pda 5-1:0.43: device disconnected [ 647.670889][T16137] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2426'. [ 647.705798][ T5944] usb 3-1: new full-speed USB device number 52 using dummy_hcd [ 647.845127][T16142] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 647.887334][ T5944] usb 3-1: config 0 has an invalid interface number: 200 but max is 0 [ 647.908602][ T5944] usb 3-1: config 0 has no interface number 0 [ 647.932322][ T5944] usb 3-1: config 0 interface 200 altsetting 2 has an endpoint descriptor with address 0xFB, changing to 0x8B [ 647.962824][ T5944] usb 3-1: config 0 interface 200 altsetting 2 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 647.976187][ T5944] usb 3-1: config 0 interface 200 altsetting 2 endpoint 0x8B has invalid wMaxPacketSize 0 [ 647.986529][ T5944] usb 3-1: config 0 interface 200 has no altsetting 0 [ 647.996498][ T5944] usb 3-1: New USB device found, idVendor=0b57, idProduct=8520, bcdDevice=6d.39 [ 648.006034][ T5944] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 648.022691][ T5944] usb 3-1: Product: syz [ 648.033993][ T5944] usb 3-1: Manufacturer: syz [ 648.045097][ T5944] usb 3-1: SerialNumber: syz [ 648.079980][ T5944] usb 3-1: config 0 descriptor?? [ 648.090883][T11921] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 648.250629][T11921] usb 6-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 648.260223][T11921] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 648.269774][T16152] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2427'. [ 648.280270][T16152] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 648.295145][T16152] : entered promiscuous mode [ 648.324811][T11921] usb 6-1: Product: syz [ 648.343573][T11921] usb 6-1: Manufacturer: syz [ 648.351244][T11921] usb 6-1: SerialNumber: syz [ 648.363004][T11921] usb 6-1: config 0 descriptor?? [ 648.375299][T11921] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 648.798019][ T5930] usb 6-1: USB disconnect, device number 28 [ 648.825308][ T5944] usb 3-1: USB disconnect, device number 52 [ 649.150001][T16162] netlink: 224 bytes leftover after parsing attributes in process `syz.7.2433'. [ 649.159265][T16162] lo: entered promiscuous mode [ 649.169683][T16162] tunl0: entered promiscuous mode [ 649.179635][T16162] gre0: entered promiscuous mode [ 649.185292][T16162] gretap0: entered promiscuous mode [ 649.191578][T16162] erspan0: entered promiscuous mode [ 649.197587][T16162] ip_vti0: entered promiscuous mode [ 649.221342][T16162] ip6_vti0: entered promiscuous mode [ 649.227599][T16162] sit0: entered promiscuous mode [ 649.233239][T16162] ip6tnl0: entered promiscuous mode [ 649.239522][T16162] ip6gre0: entered promiscuous mode [ 649.245748][T16162] syz_tun: entered promiscuous mode [ 649.252002][T16162] ip6gretap0: entered promiscuous mode [ 649.258444][T16162] bridge0: entered promiscuous mode [ 649.264815][T16162] bond0: entered promiscuous mode [ 649.310948][T16165] netlink: 'syz.4.2435': attribute type 10 has an invalid length. [ 649.332522][T16162] bond_slave_0: entered promiscuous mode [ 649.342203][T16162] bond_slave_1: entered promiscuous mode [ 649.351557][T16162] team0: entered promiscuous mode [ 649.356711][T16162] team_slave_0: entered promiscuous mode [ 649.362695][T16162] team_slave_1: entered promiscuous mode [ 649.369516][T16162] dummy0: entered promiscuous mode [ 649.376121][T16162] nlmon0: entered promiscuous mode [ 649.529649][T16162] caif0: entered promiscuous mode [ 649.534953][T16162] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 649.963560][T16178] FAULT_INJECTION: forcing a failure. [ 649.963560][T16178] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 649.997956][T16178] CPU: 0 UID: 0 PID: 16178 Comm: syz.7.2439 Not tainted syzkaller #0 PREEMPT(full) [ 649.997987][T16178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 649.998001][T16178] Call Trace: [ 649.998010][T16178] [ 649.998020][T16178] dump_stack_lvl+0x189/0x250 [ 649.998052][T16178] ? __pfx____ratelimit+0x10/0x10 [ 649.998080][T16178] ? __pfx_dump_stack_lvl+0x10/0x10 [ 649.998106][T16178] ? __pfx__printk+0x10/0x10 [ 649.998137][T16178] ? rcu_is_watching+0x15/0xb0 [ 649.998160][T16178] should_fail_ex+0x414/0x560 [ 649.998191][T16178] _copy_to_user+0x31/0xb0 [ 649.998215][T16178] simple_read_from_buffer+0xe1/0x170 [ 649.998248][T16178] proc_fail_nth_read+0x1b3/0x220 [ 649.998274][T16178] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 649.998300][T16178] ? rw_verify_area+0x2a6/0x4d0 [ 649.998327][T16178] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 649.998352][T16178] vfs_read+0x200/0xa30 [ 649.998378][T16178] ? fdget_pos+0x247/0x320 [ 649.998399][T16178] ? __pfx___mutex_lock+0x10/0x10 [ 649.998430][T16178] ? __pfx_vfs_read+0x10/0x10 [ 649.998461][T16178] ? __fget_files+0x3a0/0x420 [ 649.998491][T16178] ? __fget_files+0x2a/0x420 [ 649.998525][T16178] ksys_read+0x145/0x250 [ 649.998551][T16178] ? __pfx_ksys_read+0x10/0x10 [ 649.998576][T16178] ? rcu_is_watching+0x15/0xb0 [ 649.998606][T16178] ? rcu_is_watching+0x15/0xb0 [ 649.998626][T16178] do_syscall_64+0xfa/0x3b0 [ 649.998655][T16178] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 649.998686][T16178] ? clear_bhb_loop+0x60/0xb0 [ 649.998709][T16178] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 649.998729][T16178] RIP: 0033:0x7f5afdf8d5fc [ 649.998749][T16178] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 649.998766][T16178] RSP: 002b:00007f5afee9e030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 649.998790][T16178] RAX: ffffffffffffffda RBX: 00007f5afe1b5fa0 RCX: 00007f5afdf8d5fc [ 649.998807][T16178] RDX: 000000000000000f RSI: 00007f5afee9e0a0 RDI: 0000000000000004 [ 649.998820][T16178] RBP: 00007f5afee9e090 R08: 0000000000000000 R09: 0000000000000000 [ 649.998834][T16178] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 649.998846][T16178] R13: 00007f5afe1b6038 R14: 00007f5afe1b5fa0 R15: 00007f5afe2dfa28 [ 649.998868][T16178] [ 650.493041][T16182] fuse: Bad value for 'fd' [ 650.509832][T16174] ptrace attach of "./syz-executor exec"[8611] was attempted by "./syz-executor exec"[16174] [ 650.601349][ T5859] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 650.612558][ T5859] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 650.620217][ T5859] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 650.637031][ T5859] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 650.644539][ T5859] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 650.964277][T16188] chnl_net:caif_netlink_parms(): no params data found [ 651.005767][ T5944] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 651.185938][ T5944] usb 5-1: Using ep0 maxpacket: 8 [ 651.197450][ T5944] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 651.199989][T16188] bridge0: port 1(bridge_slave_0) entered blocking state [ 651.214946][ T5944] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 651.221367][T16188] bridge0: port 1(bridge_slave_0) entered disabled state [ 651.233645][T16188] bridge_slave_0: entered allmulticast mode [ 651.241052][T16188] bridge_slave_0: entered promiscuous mode [ 651.244131][ T5944] usb 5-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 651.260177][ T5944] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 651.260722][T16188] bridge0: port 2(bridge_slave_1) entered blocking state [ 651.268658][ T5944] usb 5-1: Product: syz [ 651.316628][ T5944] usb 5-1: Manufacturer: syz [ 651.324519][ T5944] usb 5-1: SerialNumber: syz [ 651.415792][T16188] bridge0: port 2(bridge_slave_1) entered disabled state [ 651.423322][T16188] bridge_slave_1: entered allmulticast mode [ 651.433192][T16188] bridge_slave_1: entered promiscuous mode [ 651.433373][ T5944] usb 5-1: config 0 descriptor?? [ 651.440930][T16209] ipvlan0: mtu less than device minimum [ 651.584883][T16209] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2447'. [ 651.599555][T16188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 651.631011][T16210] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2447'. [ 651.644616][T16188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 651.697210][T16188] team0: Port device team_slave_0 added [ 651.709012][ T5944] usb 5-1: USB disconnect, device number 32 [ 651.711498][T16188] team0: Port device team_slave_1 added [ 651.813844][T16188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 651.820944][T16188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 651.893890][T16188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 651.930099][T16188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 651.971127][T16188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 652.085856][T16188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 652.232269][T16188] hsr_slave_0: entered promiscuous mode [ 652.263026][T16188] hsr_slave_1: entered promiscuous mode [ 652.283288][T16188] debugfs: 'hsr0' already exists in 'hsr' [ 652.294385][T16188] Cannot create hsr debugfs directory [ 652.615639][ T5930] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 652.666324][T15977] Bluetooth: hci3: command tx timeout [ 652.685587][T11921] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 652.730879][T16188] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 652.745179][T16188] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 652.761331][T16188] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 652.795612][ T5930] usb 5-1: Using ep0 maxpacket: 32 [ 652.807165][ T5930] usb 5-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 652.808697][T16188] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 652.865298][ T5930] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 652.869654][T11921] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 652.883361][T11921] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 652.920751][T11921] usb 6-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 652.945637][T11921] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 652.952241][ T5930] usb 5-1: config 0 descriptor?? [ 652.965223][ T5930] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 652.972293][T11921] usb 6-1: config 0 descriptor?? [ 653.056365][T16188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 653.077316][T16188] 8021q: adding VLAN 0 to HW filter on device team0 [ 653.091728][ T2981] bridge0: port 1(bridge_slave_0) entered blocking state [ 653.099007][ T2981] bridge0: port 1(bridge_slave_0) entered forwarding state [ 653.113849][T13530] bridge0: port 2(bridge_slave_1) entered blocking state [ 653.121171][T13530] bridge0: port 2(bridge_slave_1) entered forwarding state [ 653.174249][T16188] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 653.215266][T16188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 653.262423][T16188] veth0_vlan: entered promiscuous mode [ 653.274943][T16188] veth1_vlan: entered promiscuous mode [ 653.305652][T16188] veth0_macvtap: entered promiscuous mode [ 653.317588][T16188] veth1_macvtap: entered promiscuous mode [ 653.339055][T16188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 653.353635][T16188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 653.369669][ T12] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 653.379938][ T12] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 653.398352][ T12] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 653.408687][ T12] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 653.432979][T11921] input: HID 054c:03d5 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:054C:03D5.0033/input/input77 [ 653.484137][T13540] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 653.500952][T13540] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 653.515431][T11921] sony 0003:054C:03D5.0033: input,hidraw0: USB HID v40.00 Joystick [HID 054c:03d5] on usb-dummy_hcd.5-1/input0 [ 653.574258][T13540] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 653.614367][T13540] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 653.625243][T11921] usb 6-1: USB disconnect, device number 29 [ 653.661833][T16229] fuse: Bad value for 'fd' [ 653.667809][T16227] fido_id[16227]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 653.671799][T16229] IPVS: set_ctl: invalid protocol: 53227 100.1.1.0:20002 [ 653.766510][T16218] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 653.775270][T16218] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 653.847192][T16234] tipc: Started in network mode [ 653.852241][T16234] tipc: Node identity ae89fa21de75, cluster identity 4711 [ 653.860026][T16234] tipc: Enabled bearer , priority 0 [ 653.870353][T16234] syzkaller0: entered promiscuous mode [ 653.876628][T16234] syzkaller0: entered allmulticast mode [ 653.889256][T16234] tipc: Resetting bearer [ 653.900234][T16233] tipc: Resetting bearer [ 653.909259][T16233] tipc: Disabling bearer [ 654.225849][T11921] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 654.395774][T11921] usb 9-1: Using ep0 maxpacket: 16 [ 654.401648][ T5930] gspca_nw80x: reg_w err -71 [ 654.406432][ T2153] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 654.417504][T11921] usb 9-1: config 8 has an invalid interface number: 39 but max is 0 [ 654.418561][ T5930] nw80x 5-1:0.0: probe with driver nw80x failed with error -71 [ 654.426462][T11921] usb 9-1: config 8 has no interface number 0 [ 654.439946][T11921] usb 9-1: config 8 interface 39 altsetting 1 has an endpoint descriptor with address 0xDF, changing to 0x8F [ 654.452985][T11921] usb 9-1: config 8 interface 39 altsetting 1 endpoint 0x8F has invalid wMaxPacketSize 0 [ 654.465086][ T5930] usb 5-1: USB disconnect, device number 33 [ 654.475396][T11921] usb 9-1: config 8 interface 39 altsetting 1 bulk endpoint 0x8F has invalid maxpacket 0 [ 654.488145][T11921] usb 9-1: config 8 interface 39 has no altsetting 0 [ 654.498241][T11921] usb 9-1: New USB device found, idVendor=05ac, idProduct=c704, bcdDevice=62.77 [ 654.508159][ T5944] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 654.528069][T11921] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 654.538539][T11921] usb 9-1: Product: syz [ 654.542812][T11921] usb 9-1: Manufacturer: syz [ 654.547894][T11921] usb 9-1: SerialNumber: syz [ 654.568227][ T2153] usb 6-1: Using ep0 maxpacket: 32 [ 654.580748][ T2153] usb 6-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 654.590362][ T2153] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 654.599178][ T2153] usb 6-1: Product: syz [ 654.603487][ T2153] usb 6-1: Manufacturer: syz [ 654.612342][ T2153] usb 6-1: SerialNumber: syz [ 654.621808][ T2153] usb 6-1: config 0 descriptor?? [ 654.629904][ T2153] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 654.657314][ T5944] usb 4-1: device descriptor read/64, error -71 [ 654.745887][T15977] Bluetooth: hci3: command tx timeout [ 654.831933][T16249] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 654.842403][T16249] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 654.895676][ T5944] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 654.930443][T16253] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 654.940188][T16253] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 654.950739][T16253] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2459'. [ 654.994857][T16255] sch_fq: defrate 4294967292 ignored. [ 655.025963][ T5944] usb 4-1: device descriptor read/64, error -71 [ 655.135856][ T5944] usb usb4-port1: attempt power cycle [ 655.164257][T11921] ipheth 9-1:8.39: ipheth_enable_ncm: usb_control_msg: -71 [ 655.180121][T11921] ipheth 9-1:8.39: Apple iPhone USB Ethernet device attached [ 655.190169][T11921] usb 9-1: USB disconnect, device number 2 [ 655.248428][T11921] ipheth 9-1:8.39: Apple iPhone USB Ethernet now disconnected [ 655.475974][ T5944] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 655.496250][ T5944] usb 4-1: device descriptor read/8, error -71 [ 655.884629][ T5944] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 655.885119][ T30] audit: type=1326 audit(1755720998.119:1057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16267 comm="syz.7.2463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5afdf8ebe9 code=0x7ffc0000 [ 655.934126][T13962] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 655.951458][ T5944] usb 4-1: device descriptor read/8, error -71 [ 655.968115][ T30] audit: type=1326 audit(1755720998.119:1058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16267 comm="syz.7.2463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=327 compat=0 ip=0x7f5afdf8ebe9 code=0x7ffc0000 [ 656.028295][ T30] audit: type=1326 audit(1755720998.119:1059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16267 comm="syz.7.2463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5afdf8ebe9 code=0x7ffc0000 [ 656.054785][ T30] audit: type=1326 audit(1755720998.119:1060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16267 comm="syz.7.2463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5afdf8ebe9 code=0x7ffc0000 [ 656.067161][ T5944] usb usb4-port1: unable to enumerate USB device [ 656.098988][T13962] usb 5-1: device descriptor read/64, error -71 [ 656.274762][ T30] audit: type=1326 audit(1755720998.119:1061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16267 comm="syz.7.2463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5afdf8ebe9 code=0x7ffc0000 [ 656.349028][ T30] audit: type=1326 audit(1755720998.119:1062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16267 comm="syz.7.2463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5afdf8ebe9 code=0x7ffc0000 [ 656.395619][T13962] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 656.505237][ T30] audit: type=1326 audit(1755720998.119:1063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16267 comm="syz.7.2463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5afdf8ebe9 code=0x7ffc0000 [ 656.528099][T13962] usb 5-1: device descriptor read/64, error -71 [ 656.588496][ T30] audit: type=1326 audit(1755720998.119:1064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16267 comm="syz.7.2463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f5afdf8ebe9 code=0x7ffc0000 [ 656.636383][T13962] usb usb5-port1: attempt power cycle [ 656.654974][ T30] audit: type=1326 audit(1755720998.119:1065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16267 comm="syz.7.2463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5afdf8ebe9 code=0x7ffc0000 [ 656.692324][ T30] audit: type=1326 audit(1755720998.119:1066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16267 comm="syz.7.2463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f5afdf8ebe9 code=0x7ffc0000 [ 656.768932][ T2153] gspca_stk1135: reg_w 0x203 err -71 [ 656.775425][ T2153] gspca_stk1135: serial bus timeout: status=0x00 [ 656.794480][ T2153] gspca_stk1135: Sensor write failed [ 656.825856][T15977] Bluetooth: hci3: command tx timeout [ 656.845328][ T2153] gspca_stk1135: serial bus timeout: status=0x00 [ 656.866005][ T2153] gspca_stk1135: Sensor write failed [ 656.877033][ T2153] gspca_stk1135: serial bus timeout: status=0x00 [ 656.883404][ T2153] gspca_stk1135: Sensor read failed [ 656.888829][ T2153] gspca_stk1135: serial bus timeout: status=0x00 [ 656.896208][ T2153] gspca_stk1135: Sensor read failed [ 656.901969][ T2153] gspca_stk1135: Detected sensor type unknown (0x0) [ 656.928890][ T2153] gspca_stk1135: serial bus timeout: status=0x00 [ 656.935795][ T2153] gspca_stk1135: Sensor read failed [ 656.941440][ T2153] gspca_stk1135: serial bus timeout: status=0x00 [ 656.948349][ T2153] gspca_stk1135: Sensor read failed [ 656.953629][ T2153] gspca_stk1135: serial bus timeout: status=0x00 [ 656.961393][ T2153] gspca_stk1135: Sensor write failed [ 656.971870][ T2153] gspca_stk1135: serial bus timeout: status=0x00 [ 656.978604][ T2153] gspca_stk1135: Sensor write failed [ 656.984192][ T2153] stk1135 6-1:0.0: probe with driver stk1135 failed with error -71 [ 656.996685][T13962] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 657.003930][ T2153] usb 6-1: USB disconnect, device number 30 [ 657.010541][T16292] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 657.012084][T16292] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 657.038281][T13962] usb 5-1: device descriptor read/8, error -71 [ 657.275587][T13962] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 657.306538][T13962] usb 5-1: device descriptor read/8, error -71 [ 657.425736][T13962] usb usb5-port1: unable to enumerate USB device [ 657.485415][T16298] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 657.596105][T16300] ptrace attach of "./syz-executor exec"[8722] was attempted by "./syz-executor exec"[16300] [ 657.630924][T16302] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2473'. [ 657.642208][T16305] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 657.642727][T16302] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2473'. [ 657.681500][T16305] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 657.820131][T16315] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.2476'. [ 657.955555][T13962] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 658.029637][T16322] input: syz1 as /devices/virtual/input/input78 [ 658.068611][T16322] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2478'. [ 658.105833][T13962] usb 9-1: Using ep0 maxpacket: 16 [ 658.122754][T13962] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 658.143079][T13962] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 658.154196][T13962] usb 9-1: New USB device found, idVendor=0b05, idProduct=17e0, bcdDevice= 0.00 [ 658.229994][T13962] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 658.376763][T13962] usb 9-1: config 0 descriptor?? [ 658.555862][ T2153] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 658.581898][T16332] syzkaller0: entered promiscuous mode [ 658.684385][T16332] syzkaller0: entered allmulticast mode [ 658.745915][ T2153] usb 4-1: device descriptor read/64, error -71 [ 658.959144][T15977] Bluetooth: hci3: command tx timeout [ 658.971809][T13962] asus 0003:0B05:17E0.0034: unknown main item tag 0x0 [ 659.020588][T13962] asus 0003:0B05:17E0.0034: unknown main item tag 0x0 [ 659.070902][T13962] asus 0003:0B05:17E0.0034: unknown main item tag 0x0 [ 659.121051][ T2153] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 659.129114][T13962] asus 0003:0B05:17E0.0034: unknown main item tag 0x0 [ 659.176357][T13962] asus 0003:0B05:17E0.0034: unknown main item tag 0x0 [ 659.190279][T16337] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 659.204992][T13962] asus 0003:0B05:17E0.0034: hidraw0: USB HID v0.00 Device [HID 0b05:17e0] on usb-dummy_hcd.8-1/input0 [ 659.237336][T13962] asus 0003:0B05:17E0.0034: Asus input not registered [ 659.270687][T13962] asus 0003:0B05:17E0.0034: probe with driver asus failed with error -12 [ 659.284656][T16311] tipc: New replicast peer: 255.255.255.255 [ 659.297068][ T2153] usb 4-1: device descriptor read/64, error -71 [ 659.318958][T16311] tipc: Enabled bearer , priority 10 [ 659.416231][ T2153] usb usb4-port1: attempt power cycle [ 659.830850][ T24] usb 9-1: USB disconnect, device number 3 [ 659.855215][ T2153] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 659.886229][ T2153] usb 4-1: device descriptor read/8, error -71 [ 660.135868][ T2153] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 660.156427][ T2153] usb 4-1: device descriptor read/8, error -71 [ 660.163145][T16354] loop4: detected capacity change from 0 to 7 [ 660.170217][T16354] Dev loop4: unable to read RDB block 7 [ 660.190072][T16354] loop4: unable to read partition table [ 660.200784][T16354] loop4: partition table beyond EOD, truncated [ 660.216508][T16354] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 660.291164][T16355] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2483'. [ 660.302575][T16355] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 660.345024][ T2153] usb usb4-port1: unable to enumerate USB device [ 660.435602][ T24] tipc: Node number set to 1895627297 [ 661.035545][ T2153] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 661.248266][ T2153] usb 9-1: Using ep0 maxpacket: 32 [ 661.292611][ T2153] usb 9-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 661.355700][ T2153] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 661.396696][T16365] tipc: Enabled bearer , priority 0 [ 661.410130][T16365] tipc: Resetting bearer [ 661.416701][ T2153] usb 9-1: Product: syz [ 661.418072][T16365] netlink: 'syz.5.2488': attribute type 10 has an invalid length. [ 661.420924][ T2153] usb 9-1: Manufacturer: syz [ 661.456783][T16365] veth0_vlan: left promiscuous mode [ 661.482834][T16365] veth0_vlan: entered promiscuous mode [ 661.501415][T16365] team0: Device veth0_vlan failed to register rx_handler [ 661.605674][ T2153] usb 9-1: SerialNumber: syz [ 661.624367][ T2153] usb 9-1: config 0 descriptor?? [ 661.660765][ T2153] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 661.689644][T16364] tipc: Disabling bearer [ 661.737993][ T30] kauditd_printk_skb: 41 callbacks suppressed [ 661.738014][ T30] audit: type=1326 audit(1755721003.989:1108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16372 comm="syz.4.2490" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f222dd8ebe9 code=0x0 [ 662.155981][ T5944] usb 4-1: new full-speed USB device number 45 using dummy_hcd [ 662.272147][T16387] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 662.282294][T16387] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 662.320824][ T5944] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 662.349440][ T5944] usb 4-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 662.362065][ T5944] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 662.379902][ T5944] usb 4-1: config 0 descriptor?? [ 663.625820][ T2153] gspca_ov534_9: reg_r err -110 [ 664.015630][ T2153] gspca_ov534_9: Unknown sensor 0000 [ 664.015713][ T2153] ov534_9 9-1:0.0: probe with driver ov534_9 failed with error -22 [ 664.049571][ T2153] usb 9-1: USB disconnect, device number 4 [ 664.231504][T16414] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2498'. [ 665.221566][ T5944] usbhid 4-1:0.0: can't add hid device: -71 [ 665.332462][ T5944] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 665.377763][ T5944] usb 4-1: USB disconnect, device number 45 [ 665.517887][T16436] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2504'. [ 665.611279][T16436] 8021q: adding VLAN 0 to HW filter on device bond5 [ 665.656767][T16441] kAFS: unable to lookup cell '(/c¾ûL' [ 665.665599][T16441] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2503'. [ 665.727125][T16436] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 665.833915][T16436] vlan2: entered allmulticast mode [ 665.854461][T16436] veth1: entered allmulticast mode [ 666.132359][T16448] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2505'. [ 666.405815][T13962] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 666.559870][T13962] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 666.588358][T13962] usb 5-1: config 0 interface 0 has no altsetting 0 [ 666.596704][T13962] usb 5-1: New USB device found, idVendor=0463, idProduct=1215, bcdDevice= 0.00 [ 666.629136][T13962] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 666.656363][T13962] usb 5-1: config 0 descriptor?? [ 666.673516][T16459] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 666.683678][T16459] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 666.692864][T16459] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 666.702071][T16459] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 666.717374][T16459] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 666.727810][T16459] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 666.994700][T16468] tipc: Enabled bearer , priority 0 [ 667.005349][T16468] syzkaller0: entered promiscuous mode [ 667.011166][T16468] syzkaller0: entered allmulticast mode [ 667.022696][T16468] tipc: Resetting bearer [ 667.029938][T16467] tipc: Resetting bearer [ 667.038262][T16467] tipc: Disabling bearer [ 667.071355][T13962] hid-generic 0003:0463:1215.0035: hidraw0: USB HID v0.04 Device [HID 0463:1215] on usb-dummy_hcd.4-1/input0 [ 667.175697][ T5944] usb 4-1: new full-speed USB device number 46 using dummy_hcd [ 667.270792][ T2153] usb 5-1: USB disconnect, device number 38 [ 667.280296][T16473] usb usb8: usbfs: process 16473 (syz.7.2514) did not claim interface 0 before use [ 667.293429][T16473] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 667.303831][T16473] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 667.317563][ T5944] usb 4-1: device descriptor read/64, error -71 [ 667.386287][ T5945] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 667.547042][ T5945] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 667.561920][ T5944] usb 4-1: new full-speed USB device number 47 using dummy_hcd [ 667.586267][ T5945] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 667.618716][ T5945] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 667.639965][ T5945] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 667.653392][ T5945] usb 9-1: config 0 descriptor?? [ 667.725892][ T5944] usb 4-1: device descriptor read/64, error -71 [ 667.878133][ T5944] usb usb4-port1: attempt power cycle [ 667.920909][T16487] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 668.135697][ T2153] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 668.225827][ T5944] usb 4-1: new full-speed USB device number 48 using dummy_hcd [ 668.257797][ T5944] usb 4-1: device descriptor read/8, error -71 [ 668.427943][ T2153] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 668.443337][ T2153] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 668.470787][ T2153] usb 5-1: New USB device found, idVendor=06cb, idProduct=2968, bcdDevice= 0.00 [ 668.483681][ T5945] pyra 0003:1E7D:2CF6.0036: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.8-1/input0 [ 668.516961][ T2153] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 668.525581][ T5944] usb 4-1: new full-speed USB device number 49 using dummy_hcd [ 668.553038][ T2153] usb 5-1: config 0 descriptor?? [ 668.595950][ T5944] usb 4-1: device descriptor read/8, error -71 [ 668.685904][T16492] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2513'. [ 668.695627][T16492] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2513'. [ 668.706444][ T5944] usb usb4-port1: unable to enumerate USB device [ 668.734590][ T5945] pyra 0003:1E7D:2CF6.0036: couldn't init struct pyra_device [ 668.750825][ T5945] pyra 0003:1E7D:2CF6.0036: couldn't install mouse [ 668.761487][ T5945] pyra 0003:1E7D:2CF6.0036: probe with driver pyra failed with error -71 [ 668.778374][ T5945] usb 9-1: USB disconnect, device number 5 [ 669.075168][T16499] tipc: Enabling of bearer rejected, failed to enable media [ 669.091794][ T2153] itetech 0003:06CB:2968.0037: hidraw0: USB HID v0.00 Device [HID 06cb:2968] on usb-dummy_hcd.4-1/input0 [ 669.105222][T16499] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 669.123021][T16499] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 669.278711][T13962] usb 5-1: USB disconnect, device number 39 [ 669.569860][T16506] netlink: 'syz.5.2519': attribute type 4 has an invalid length. [ 669.845819][ T24] usb 9-1: new full-speed USB device number 6 using dummy_hcd [ 670.010229][ T24] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 670.022048][ T24] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 670.050519][ T24] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 670.136065][ T24] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 670.255832][ T24] usb 9-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 670.322558][ T24] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 670.332273][ T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 670.373932][ T24] usb 9-1: Product: syz [ 670.391975][ T24] usb 9-1: Manufacturer: syz [ 670.405219][ T24] usb 9-1: SerialNumber: syz [ 670.429974][T16508] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 670.501561][ T24] cdc_mbim 9-1:1.0: skipping garbage [ 671.126113][T16526] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2525'. [ 671.135289][T16526] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2525'. [ 671.385901][ T2153] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 671.505577][ T5945] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 671.535135][T16542] vivid-000: disconnect [ 671.545984][ T2153] usb 4-1: Using ep0 maxpacket: 16 [ 671.561624][ T2153] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 671.572995][ T2153] usb 4-1: config 0 has no interface number 0 [ 671.579273][ T2153] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 208, changing to 11 [ 671.591326][ T2153] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 25296, setting to 1024 [ 671.612735][ T2153] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 671.623129][ T2153] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 671.631869][ T2153] usb 4-1: Product: syz [ 671.636272][ T2153] usb 4-1: SerialNumber: syz [ 671.643105][ T2153] usb 4-1: config 0 descriptor?? [ 671.663641][ T2153] cm109 4-1:0.8: invalid payload size 1024, expected 4 [ 671.672815][ T5945] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 671.683030][ T2153] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input79 [ 671.693603][ T5945] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 671.722383][ T5945] usb 6-1: config 0 descriptor?? [ 671.729072][T16541] vivid-000: reconnect [ 671.745743][ T5945] cp210x 6-1:0.0: cp210x converter detected [ 671.832268][T16545] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 671.847424][T16545] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 672.351254][ T5945] cp210x 6-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 672.359895][ T5945] cp210x 6-1:0.0: GPIO initialisation failed: -71 [ 672.372134][ T5945] usb 6-1: cp210x converter now attached to ttyUSB0 [ 672.393861][ T5945] usb 6-1: USB disconnect, device number 31 [ 672.409813][ T5945] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 672.431755][ T5945] cp210x 6-1:0.0: device disconnected [ 672.511696][T16548] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 672.523892][T16548] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 672.587684][ T24] cdc_mbim 9-1:1.0: bind() failure [ 672.602175][ T24] cdc_ncm 9-1:1.1: probe with driver cdc_ncm failed with error -71 [ 672.618045][ T24] cdc_mbim 9-1:1.1: probe with driver cdc_mbim failed with error -71 [ 672.639742][ T24] usbtest 9-1:1.1: probe with driver usbtest failed with error -71 [ 672.653995][ T24] usb 9-1: USB disconnect, device number 6 [ 672.937417][T16555] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2534'. [ 672.950039][T16556] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2534'. [ 673.093472][ T30] audit: type=1326 audit(1755721015.339:1109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16558 comm="syz.7.2535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5afdf8ebe9 code=0x7ffc0000 [ 673.162835][ T30] audit: type=1326 audit(1755721015.339:1110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16558 comm="syz.7.2535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5afdf8ebe9 code=0x7ffc0000 [ 673.399188][T16567] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 673.410472][T16566] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 673.432852][T16567] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 673.504372][T16566] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 674.223007][ C0] cm109 4-1:0.8: cm109_urb_irq_callback: urb status -71 [ 674.230345][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 674.237513][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 674.244703][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 674.251921][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 674.259118][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 674.266365][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 674.273536][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 674.280793][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 674.287984][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 674.295153][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 674.298866][T16588] tipc: Enabled bearer , priority 0 [ 674.303052][ T5945] usb 4-1: USB disconnect, device number 50 [ 674.308826][ C0] cm109 4-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 674.358766][T16588] syzkaller0: entered promiscuous mode [ 674.364291][T16588] syzkaller0: entered allmulticast mode [ 674.423969][T16593] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 674.438410][ T5945] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 674.500601][T16587] tipc: Resetting bearer [ 674.547575][T16587] tipc: Disabling bearer [ 674.635726][ T2153] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 674.829534][ T2153] usb 9-1: Using ep0 maxpacket: 16 [ 674.881483][ T2153] usb 9-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice=38.b7 [ 674.890933][ T2153] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 674.899310][ T2153] usb 9-1: Product: syz [ 674.903809][ T2153] usb 9-1: Manufacturer: syz [ 674.909414][ T2153] usb 9-1: SerialNumber: syz [ 674.917636][ T2153] usb 9-1: config 0 descriptor?? [ 674.926600][ T2153] hub 9-1:0.0: bad descriptor, ignoring hub [ 674.933569][ T2153] hub 9-1:0.0: probe with driver hub failed with error -5 [ 675.050099][T16606] fuse: Unknown parameter 'gršcÁšâ00000000000000000000' [ 675.105697][ T5950] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 675.136556][T16591] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2543'. [ 675.148378][T16591] netlink: 'syz.8.2543': attribute type 1 has an invalid length. [ 675.215602][ T24] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 675.255614][ T5950] usb 6-1: Using ep0 maxpacket: 16 [ 675.264712][ T5950] usb 6-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 675.274534][ T5950] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 675.282729][ T5950] usb 6-1: Product: syz [ 675.287644][ T5950] usb 6-1: Manufacturer: syz [ 675.292411][ T5950] usb 6-1: SerialNumber: syz [ 675.299600][ T5950] usb 6-1: config 0 descriptor?? [ 675.308097][ T2153] usb 9-1: USB disconnect, device number 7 [ 675.313857][ T5950] visor 6-1:0.0: Sony Clie 3.5 converter detected [ 675.365709][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 675.372198][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 675.382504][ T24] usb 5-1: config 0 has no interfaces? [ 675.388513][ T24] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 675.398432][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 675.408484][ T24] usb 5-1: config 0 descriptor?? [ 675.567388][ T5950] usb 6-1: clie_3_5_startup: get config number bad return length: 0 [ 675.577159][ T5950] visor 6-1:0.0: probe with driver visor failed with error -5 [ 675.712413][T16620] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 675.772995][T16620] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 675.913469][ T24] usb 6-1: USB disconnect, device number 32 [ 676.564214][ T30] audit: type=1326 audit(1755721018.719:1111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16630 comm="syz.7.2555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5afdf8ebe9 code=0x7ffc0000 [ 676.597216][ T30] audit: type=1326 audit(1755721018.719:1112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16630 comm="syz.7.2555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=37 compat=0 ip=0x7f5afdf8ebe9 code=0x7ffc0000 [ 676.622055][ T30] audit: type=1326 audit(1755721018.719:1113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16630 comm="syz.7.2555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5afdf8ebe9 code=0x7ffc0000 [ 676.687985][ T30] audit: type=1326 audit(1755721018.719:1114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16630 comm="syz.7.2555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5afdf8ebe9 code=0x7ffc0000 [ 676.758012][ T30] audit: type=1326 audit(1755721018.719:1115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16630 comm="syz.7.2555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f5afdf8ebe9 code=0x7ffc0000 [ 676.835694][ T30] audit: type=1326 audit(1755721018.719:1116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16630 comm="syz.7.2555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5afdf8ebe9 code=0x7ffc0000 [ 676.858842][ T30] audit: type=1326 audit(1755721018.719:1117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16630 comm="syz.7.2555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5afdf8ebe9 code=0x7ffc0000 [ 676.947365][ T30] audit: type=1326 audit(1755721018.719:1118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16630 comm="syz.7.2555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f5afdf8ebe9 code=0x7ffc0000 [ 677.112109][T16645] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 677.165852][T16645] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 677.175863][ T24] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 677.349683][T16650] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2556'. [ 677.367518][ T24] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 677.378710][T16650] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 677.388216][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 677.399383][ T24] usb 6-1: Product: syz [ 677.404813][ T24] usb 6-1: Manufacturer: syz [ 677.409653][ T24] usb 6-1: SerialNumber: syz [ 677.423445][ T24] usb 6-1: config 0 descriptor?? [ 677.434710][T16650] : entered promiscuous mode [ 677.555570][ T5950] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 677.705660][ T5950] usb 4-1: Using ep0 maxpacket: 16 [ 677.713085][ T5950] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 677.754344][ T5950] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 677.782482][ T5950] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 677.825121][ T5950] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 677.851655][ T5950] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 677.892435][ T5950] usb 4-1: config 0 descriptor?? [ 677.916540][T16641] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 677.940143][T16641] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 678.010199][T13962] usb 5-1: USB disconnect, device number 40 [ 678.102124][ T24] usb 6-1: Firmware: major: 0, minor: 97, hardware type: UNKNOWN (111) [ 678.328206][ T5950] microsoft 0003:045E:07DA.0038: ignoring exceeding usage max [ 678.455447][ T5950] microsoft 0003:045E:07DA.0038: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 678.514752][ T5950] microsoft 0003:045E:07DA.0038: no inputs found [ 678.521527][ T5950] microsoft 0003:045E:07DA.0038: could not initialize ff, continuing anyway [ 678.532142][T16649] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 678.541128][T16649] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 679.146046][ T24] usb 6-1: failed to fetch extended address, random address set [ 679.163099][ T24] usb 6-1: atusb_probe: initialization failed, error = -524 [ 679.183546][ T24] atusb 6-1:0.0: probe with driver atusb failed with error -524 [ 679.680745][T16685] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2567'. [ 679.692082][T16685] fuse: Unknown parameter 'Fd' [ 680.037573][ T5950] usb 6-1: USB disconnect, device number 33 [ 680.226022][ T5945] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 680.385989][ T5945] usb 9-1: Using ep0 maxpacket: 32 [ 680.392724][ T5945] usb 9-1: config 0 has an invalid interface number: 51 but max is 0 [ 680.401175][ T5945] usb 9-1: config 0 has no interface number 0 [ 680.409983][ T5945] usb 9-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 680.427004][ T5945] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 680.435586][T16688] netdevsim netdevsim7 netdevsim0: entered allmulticast mode [ 680.445777][T16688] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 680.463325][ T5945] usb 9-1: Product: syz [ 680.467813][ T5945] usb 9-1: Manufacturer: syz [ 680.475741][T16688] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 680.485606][ T5945] usb 9-1: SerialNumber: syz [ 680.499024][ T5945] usb 9-1: config 0 descriptor?? [ 680.504166][T16688] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 680.515773][ T5945] quatech2 9-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 680.717972][T16689] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 680.730603][T16700] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 680.732336][T16689] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 680.756140][T16700] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 680.779376][T16689] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 680.792487][T16700] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 680.792774][T16689] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 680.802150][T16700] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 680.818820][T16689] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2568'. [ 680.911562][ T5945] usb 9-1: qt2_attach - failed to power on unit: -71 [ 680.930658][ T5945] quatech2 9-1:0.51: probe with driver quatech2 failed with error -71 [ 680.967831][ T5945] usb 9-1: USB disconnect, device number 8 [ 681.227307][T16713] netlink: 4200 bytes leftover after parsing attributes in process `syz.8.2573'. [ 681.260376][T16713] openvswitch: netlink: Flow key attr not present in new flow. [ 681.345692][ T24] usb 4-1: USB disconnect, device number 51 [ 681.673110][T16722] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2574'. [ 681.733443][T16722] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 681.838959][T16726] macsec1: entered promiscuous mode [ 682.116252][T16726] macsec1: entered allmulticast mode [ 682.122852][T16726] team0: entered allmulticast mode [ 682.614045][T16726] team_slave_0: entered allmulticast mode [ 682.633801][T16726] team_slave_1: entered allmulticast mode [ 682.705133][T16726] team0: Device macsec1 is already an upper device of the team interface [ 682.881174][T16726] team0: left allmulticast mode [ 682.916968][T16726] team_slave_0: left allmulticast mode [ 682.922645][T16726] team_slave_1: left allmulticast mode [ 683.035621][ T5950] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 683.057092][T16736] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 683.225261][ T5950] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 683.241986][ T5950] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 683.420653][ T5950] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 683.483695][ T5950] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 683.493294][ T5950] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 683.556020][ T5950] usb 5-1: Product: syz [ 683.562577][ T5950] usb 5-1: Manufacturer: syz [ 683.570253][ T5950] usb 5-1: SerialNumber: syz [ 683.593653][ T5950] usb 5-1: config 0 descriptor?? [ 683.608032][T16734] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 683.615631][T16734] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 683.632979][ T5950] usb 5-1: ucan: probing device on interface #0 [ 683.700491][T16746] netlink: 27 bytes leftover after parsing attributes in process `syz.8.2583'. [ 683.717838][T16746] netlink: 27 bytes leftover after parsing attributes in process `syz.8.2583'. [ 683.841238][ T5950] usb 5-1: ucan: device protocol version 0 is not supported [ 683.853342][ T5950] usb 5-1: ucan: probe failed; try to update the device firmware [ 684.049105][T16752] netlink: 'syz.5.2585': attribute type 2 has an invalid length. [ 684.069538][ T5950] usb 5-1: USB disconnect, device number 41 [ 684.455030][T16764] syzkaller1: entered promiscuous mode [ 684.470806][T16764] syzkaller1: entered allmulticast mode [ 684.610597][T16767] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 684.636469][T16767] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 684.733449][T16771] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2591'. [ 684.735576][ T5930] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 684.906326][ T5930] usb 9-1: Using ep0 maxpacket: 8 [ 684.918090][ T5930] usb 9-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 684.931438][ T5930] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 684.935584][ T5944] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 684.940682][ T5930] usb 9-1: Product: syz [ 684.954206][ T5930] usb 9-1: Manufacturer: syz [ 684.962237][ T5930] usb 9-1: SerialNumber: syz [ 684.974494][ T5930] usb 9-1: config 0 descriptor?? [ 684.987643][ T5930] radio-usb-si4713 9-1:0.0: Si4713 development board discovered: (10C4:8244) [ 685.110692][ T5944] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 685.131253][ T5944] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 685.176857][ T5944] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 685.275544][ T5944] usb 5-1: config 0 descriptor?? [ 685.840321][ T5930] radio-usb-si4713 9-1:0.0: probe with driver radio-usb-si4713 failed with error -71 [ 685.860748][ T5930] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 685.868440][ T5944] pwc: Askey VC010 type 2 USB webcam detected. [ 685.932147][ T5930] usb 9-1: USB disconnect, device number 9 [ 686.468941][ T5944] pwc: recv_control_msg error -32 req 02 val 2b00 [ 686.476685][ T5944] pwc: recv_control_msg error -32 req 02 val 2700 [ 686.685598][T16769] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 686.694331][T16769] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 686.703845][ T5944] pwc: recv_control_msg error -71 req 04 val 1000 [ 686.711872][ T5944] pwc: recv_control_msg error -71 req 04 val 1300 [ 686.740131][ T5944] pwc: recv_control_msg error -71 req 04 val 1400 [ 686.796033][ T5944] pwc: recv_control_msg error -71 req 02 val 2000 [ 686.804506][ T5944] pwc: recv_control_msg error -71 req 02 val 2100 [ 686.830388][T16800] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2594'. [ 686.840831][T16800] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 687.001149][T16805] bridge0: port 1(bridge_slave_0) entered disabled state [ 687.025888][ T5944] pwc: recv_control_msg error -71 req 04 val 1500 [ 687.037805][ T5944] pwc: recv_control_msg error -71 req 02 val 2500 [ 687.079637][ T5944] pwc: recv_control_msg error -71 req 02 val 2400 [ 687.139558][ T5944] pwc: recv_control_msg error -71 req 02 val 2600 [ 687.173975][ T5944] pwc: recv_control_msg error -71 req 02 val 2900 [ 687.200754][ T5944] pwc: recv_control_msg error -71 req 02 val 2800 [ 687.221634][ T5944] pwc: recv_control_msg error -71 req 04 val 1100 [ 687.249418][ T5944] pwc: recv_control_msg error -71 req 04 val 1200 [ 687.317082][ T5944] pwc: Registered as video103. [ 687.354906][ T5944] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input82 [ 687.421689][T16811] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2601'. [ 687.441296][ T5944] usb 5-1: USB disconnect, device number 42 [ 687.625328][T16811] 8021q: adding VLAN 0 to HW filter on device bond7 [ 687.683519][T16815] tipc: Started in network mode [ 687.690291][T16815] tipc: Node identity d2f8ae866a3a, cluster identity 4711 [ 687.700744][T16815] tipc: Enabled bearer , priority 0 [ 687.711375][T16815] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 687.728135][T16815] tipc: Resetting bearer [ 687.741530][T16814] tipc: Disabling bearer [ 688.095993][T16829] loop6: detected capacity change from 0 to 524287999 [ 688.541384][T16839] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 688.563052][T16839] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 688.577091][T16839] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 688.593038][T16839] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 688.645617][T16845] netlink: 'syz.3.2607': attribute type 2 has an invalid length. [ 688.653656][T16845] netlink: 'syz.3.2607': attribute type 8 has an invalid length. [ 688.662153][T16845] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2607'. [ 689.045421][T16845] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2607'. [ 689.103887][T16854] sctp: [Deprecated]: syz.4.2610 (pid 16854) Use of int in max_burst socket option. [ 689.103887][T16854] Use struct sctp_assoc_value instead [ 689.675605][ T24] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 689.749186][T16869] IPVS: length: 4096 != 8 [ 689.875599][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 689.891233][ T24] usb 5-1: too many configurations: 249, using maximum allowed: 8 [ 689.913352][ T24] usb 5-1: New USB device found, idVendor=055f, idProduct=a800, bcdDevice=b3.ff [ 689.922551][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=2 [ 689.930664][ T24] usb 5-1: Product: syz [ 689.935230][ T24] usb 5-1: Manufacturer: syz [ 689.940492][ T24] usb 5-1: SerialNumber: syz [ 689.976785][ T24] usb 5-1: config 0 descriptor?? [ 690.608261][T16882] loop4: detected capacity change from 0 to 7 [ 690.619851][T16882] Dev loop4: unable to read RDB block 7 [ 690.628366][T16882] loop4: unable to read partition table [ 690.634806][T16882] loop4: partition table beyond EOD, truncated [ 690.651447][T16882] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 691.068604][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 691.080980][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 691.427936][T16902] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2616'. [ 691.441821][T16902] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 691.513234][ T5930] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 691.959388][ T5930] usb 6-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 691.969068][ T5930] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 692.000473][ T5930] usb 6-1: config 0 descriptor?? [ 692.029648][ T5930] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 692.229291][T16897] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 692.244767][T16897] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 692.269147][T16897] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 692.324275][T16897] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 692.380353][T16897] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 692.423157][T16897] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 692.479544][T16897] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 692.514824][T16897] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 692.569569][T16897] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 692.619199][T16897] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 692.788500][ T5930] gspca_stv06xx: I2C: Read error writing address: -71 [ 692.815227][ T5930] usb 6-1: USB disconnect, device number 34 [ 693.272357][T13962] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 693.506615][ T24] mdc800 5-1:0.0: probe fails -> wrong Number of Configuration [ 693.517380][ T24] usb 5-1: USB disconnect, device number 43 [ 693.559884][T16928] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2629'. [ 693.569965][T16928] team1 (uninitialized): Failed to send options change via netlink (err -105) [ 693.597156][T16928] team1: entered promiscuous mode [ 693.602294][T16928] team1: entered allmulticast mode [ 693.635979][T13962] usb 9-1: Using ep0 maxpacket: 8 [ 693.643384][T13962] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 693.667684][T13962] usb 9-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 693.705845][T13962] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 693.749430][T13962] usb 9-1: config 0 descriptor?? [ 693.773795][T13962] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 694.540347][T13962] gspca_vc032x: reg_w err -110 [ 694.545253][T13962] vc032x 9-1:0.0: probe with driver vc032x failed with error -110 [ 694.546181][ T2153] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 694.682700][T16935] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 694.689967][T16935] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 694.697224][T16935] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 694.734979][T16935] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 694.742482][T16935] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 694.750070][T16935] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 694.759713][T16935] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 694.767175][T16935] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 694.825678][ T2153] usb 6-1: Using ep0 maxpacket: 32 [ 694.858840][ T2153] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 694.874280][ T2153] usb 6-1: config 0 has no interface number 0 [ 694.891499][ T2153] usb 6-1: config 0 interface 184 has no altsetting 0 [ 694.903316][ T2153] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 694.912762][ T2153] usb 6-1: New USB device strings: Mfr=227, Product=1, SerialNumber=3 [ 694.943194][ T2153] usb 6-1: Product: syz [ 694.947691][ T2153] usb 6-1: Manufacturer: syz [ 694.952318][ T2153] usb 6-1: SerialNumber: syz [ 694.994868][ T2153] usb 6-1: config 0 descriptor?? [ 695.024431][ T2153] smsc75xx v1.0.0 [ 695.291053][ T2153] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 695.342233][ T2153] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 695.350976][T16950] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2635'. [ 695.389151][ T2153] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 695.414498][ T2153] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -71 [ 695.452082][ T2153] usb 6-1: USB disconnect, device number 35 [ 695.759524][T16956] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2637'. [ 695.842108][T16962] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 695.889633][T16962] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 695.951481][T16962] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 695.984089][T16962] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 696.526059][ T5944] usb 9-1: USB disconnect, device number 10 [ 697.035578][ T5944] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 697.255891][ T5944] usb 9-1: Using ep0 maxpacket: 32 [ 697.291907][ T5944] usb 9-1: config 0 has an invalid interface number: 51 but max is 0 [ 697.408599][ T5944] usb 9-1: config 0 has no interface number 0 [ 697.424486][ T5944] usb 9-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 697.450785][ T5944] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 697.473179][ T5944] usb 9-1: Product: syz [ 697.497700][ T5944] usb 9-1: Manufacturer: syz [ 697.525697][ T5944] usb 9-1: SerialNumber: syz [ 697.540701][ T5944] usb 9-1: config 0 descriptor?? [ 697.554103][ T5944] quatech2 9-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 697.856707][ T5944] usb 9-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 697.900807][ T5944] usb 9-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 698.157447][ C0] usb 9-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 698.165793][ T5944] usb 9-1: USB disconnect, device number 11 [ 698.179533][ T5944] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 698.222799][ T5944] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 698.335596][ T5945] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 698.447353][ T5944] quatech2 9-1:0.51: device disconnected [ 698.602706][ T5945] usb 5-1: Using ep0 maxpacket: 16 [ 698.640729][ T5945] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 698.653452][ T5945] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 698.664954][ T5945] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 698.700183][ T5945] usb 5-1: Product: syz [ 698.728651][ T5945] usb 5-1: Manufacturer: syz [ 698.865037][ T5945] usb 5-1: SerialNumber: syz [ 698.894359][ T5945] usb 5-1: config 0 descriptor?? [ 698.905538][ T5944] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 698.941880][ T5945] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 698.976343][ T5945] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 699.057574][ T5944] usb 9-1: Using ep0 maxpacket: 8 [ 699.064327][ T5944] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 699.088991][ T5944] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 699.122919][ T5944] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 699.187926][ T5944] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 699.239948][ T5944] usb 9-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 699.280460][ T5944] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 699.342967][ T5944] hub 9-1:1.0: bad descriptor, ignoring hub [ 699.356512][T17025] fuse: Unknown parameter 'g2oupÃid' [ 699.372140][ T5944] hub 9-1:1.0: probe with driver hub failed with error -5 [ 699.395777][ T5944] cdc_wdm 9-1:1.0: skipping garbage [ 699.401012][ T5944] cdc_wdm 9-1:1.0: skipping garbage [ 699.433566][ T5944] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 699.463736][ T5944] cdc_wdm 9-1:1.0: Unknown control protocol [ 699.563118][T17015] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 699.606135][T17015] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 699.663532][ T5945] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 699.735059][T17036] vlan0: entered promiscuous mode [ 699.837277][T17039] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 699.908665][T17039] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 700.163311][ T5945] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 700.185561][ T5945] em28xx 5-1:0.0: board has no eeprom [ 700.246432][T17021] usb 9-1: reset high-speed USB device number 12 using dummy_hcd [ 700.455665][ T5945] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 700.463695][ T5945] em28xx 5-1:0.0: dvb set to bulk mode. [ 700.471637][T11921] em28xx 5-1:0.0: Binding DVB extension [ 700.490331][ T5945] usb 5-1: USB disconnect, device number 44 [ 700.514644][ T5945] em28xx 5-1:0.0: Disconnecting em28xx [ 700.535638][ T5944] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 700.597575][T11921] em28xx 5-1:0.0: Registering input extension [ 700.604681][ T5945] em28xx 5-1:0.0: Closing input extension [ 700.612039][T17039] netlink: 'syz.7.2654': attribute type 3 has an invalid length. [ 700.672920][ T5945] em28xx 5-1:0.0: Freeing device [ 700.695533][ T5944] usb 6-1: Using ep0 maxpacket: 16 [ 700.702535][ T5944] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 700.717360][ T5944] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 700.818608][ T5944] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 700.886111][ T5944] usb 6-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 700.927450][ T5944] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 700.963559][ T5944] usb 6-1: config 0 descriptor?? [ 701.394142][ T5944] sony 0003:054C:0268.0039: unknown main item tag 0x0 [ 701.401971][ T5944] sony 0003:054C:0268.0039: unknown main item tag 0x0 [ 701.405526][T13962] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 701.468910][T17021] cdc_wdm 9-1:1.0: Error autopm - -16 [ 701.474619][ T24] usb 9-1: USB disconnect, device number 12 [ 701.555756][ T5944] sony 0003:054C:0268.0039: hiddev0,hidraw0: USB HID v80.00 Device [HID 054c:0268] on usb-dummy_hcd.5-1/input0 [ 701.584743][T13962] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 701.622898][ T5944] sony 0003:054C:0268.0039: failed to claim input [ 701.623172][T13962] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 701.691331][T13962] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 701.704889][T13962] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 701.762201][ T24] usb 6-1: USB disconnect, device number 36 [ 701.768671][T17052] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 701.779483][T13962] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 701.874542][T17061] fido_id[17061]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 701.984401][T17052] fuse: Unknown parameter 'fd0x0000000000000009' [ 702.231334][ T5944] usb 5-1: USB disconnect, device number 45 [ 702.490627][ T24] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 702.690503][ T24] usb 6-1: config 0 has an invalid interface number: 98 but max is 0 [ 702.701421][ T24] usb 6-1: config 0 has no interface number 0 [ 702.756081][ T24] usb 6-1: config 0 interface 98 has no altsetting 0 [ 702.780377][ T24] usb 6-1: New USB device found, idVendor=1110, idProduct=9024, bcdDevice=db.24 [ 702.789544][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 702.797952][ T24] usb 6-1: Product: syz [ 702.802158][ T24] usb 6-1: Manufacturer: syz [ 702.822941][ T24] usb 6-1: SerialNumber: syz [ 702.840205][ T24] usb 6-1: config 0 descriptor?? [ 703.093299][T17077] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2663'. [ 703.132109][ T24] usb 6-1: [ueagle-atm] ADSL device founded vid (0X1110) pid (0X9024) Rev (0XDB24): Eagle II [ 703.456377][T11921] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 703.636061][ T24] usb 6-1: reset high-speed USB device number 37 using dummy_hcd [ 703.705632][T11921] usb 5-1: Using ep0 maxpacket: 16 [ 703.731270][T11921] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 703.751986][T11921] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 703.825629][ T24] usb 6-1: device descriptor read/64, error -71 [ 703.850327][T17106] overlayfs: missing 'lowerdir' [ 703.897546][T11921] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 703.965175][T11921] usb 5-1: Product: syz [ 703.996154][T17108] macvlan2: entered allmulticast mode [ 704.001730][T17108] hsr0: entered allmulticast mode [ 704.007192][T17108] hsr_slave_0: entered allmulticast mode [ 704.012859][T17108] hsr_slave_1: entered allmulticast mode [ 704.022054][T17108] hsr0: left allmulticast mode [ 704.028291][T17108] hsr_slave_0: left allmulticast mode [ 704.034412][T17108] hsr_slave_1: left allmulticast mode [ 704.035781][T11921] usb 5-1: Manufacturer: syz [ 704.055305][T11921] usb 5-1: SerialNumber: syz [ 704.086313][ T24] usb 6-1: reset high-speed USB device number 37 using dummy_hcd [ 704.159572][T11921] usb 5-1: config 0 descriptor?? [ 704.188983][T11921] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 704.195207][T17111] loop4: detected capacity change from 0 to 7 [ 704.213638][ T5867] Dev loop4: unable to read RDB block 7 [ 704.219360][ T5867] loop4: unable to read partition table [ 704.225265][ T5867] loop4: partition table beyond EOD, truncated [ 704.231596][ T24] usb 6-1: device descriptor read/64, error -71 [ 704.240989][T17111] Dev loop4: unable to read RDB block 7 [ 704.261206][T17111] loop4: unable to read partition table [ 704.268198][T17111] loop4: partition table beyond EOD, truncated [ 704.281526][T17111] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 704.286324][T11921] usb 5-1: Detected FT232R [ 704.423252][T11921] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 704.505957][ T24] usb 6-1: reset high-speed USB device number 37 using dummy_hcd [ 704.526300][ T24] usb 6-1: device descriptor read/8, error -71 [ 704.691746][T11921] ftdi_sio 5-1:0.0: GPIO initialisation failed: -5 [ 704.716019][T11921] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 704.765563][ T24] usb 6-1: reset high-speed USB device number 37 using dummy_hcd [ 704.820573][ T24] usb 6-1: device descriptor read/8, error -71 [ 704.947594][ T24] usb 6-1: [ueagle-atm] pre-firmware device, uploading firmware [ 705.054731][ T24] usb 6-1: [ueagle-atm] loading firmware ueagle-atm/eagleII.fw [ 705.062916][T13962] usb 6-1: Direct firmware load for ueagle-atm/eagleII.fw failed with error -2 [ 705.072708][T13962] usb 6-1: Falling back to sysfs fallback for: ueagle-atm/eagleII.fw [ 705.138713][ T24] usb 6-1: USB disconnect, device number 37 [ 705.404135][T17133] loop6: detected capacity change from 0 to 7 [ 705.413170][T17132] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 705.426746][T17133] Dev loop6: unable to read RDB block 7 [ 705.433339][T17133] loop6: unable to read partition table [ 705.444632][T17133] loop6: partition table beyond EOD, truncated [ 705.467677][T17132] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 705.490553][T17133] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 705.747472][T11921] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 706.030661][T11921] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 52, changing to 7 [ 706.069468][T11921] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 9272, setting to 1024 [ 706.085902][T11921] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 706.096805][T11921] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 706.116015][T11921] usb 9-1: config 0 descriptor?? [ 706.420100][T11921] ath6kl: Failed to submit usb control message: -71 [ 706.427578][T11921] ath6kl: unable to send the bmi data to the device: -71 [ 706.437251][T11921] ath6kl: Unable to send get target info: -71 [ 706.443649][T11921] ath6kl: Failed to init ath6kl core: -71 [ 706.450411][T11921] ath6kl_usb 9-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 706.463205][T11921] usb 9-1: USB disconnect, device number 13 [ 706.479895][T17155] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2685'. [ 706.604180][T17157] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 706.615848][T17157] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 706.657276][T17157] netlink: 'syz.7.2686': attribute type 10 has an invalid length. [ 706.666617][T17157] bridge0: left promiscuous mode [ 706.678070][T17157] bridge0: entered promiscuous mode [ 706.686530][T17157] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 706.700016][T17157] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2686'. [ 706.709313][T17157] bridge_slave_1: left allmulticast mode [ 706.715136][T17157] bridge_slave_1: left promiscuous mode [ 706.765503][ T5945] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 706.776489][T17157] bridge0: port 2(bridge_slave_1) entered disabled state [ 706.799095][T17157] bridge_slave_0: left allmulticast mode [ 706.811945][T17157] bridge_slave_0: left promiscuous mode [ 706.820536][T17157] bridge0: port 1(bridge_slave_0) entered disabled state [ 706.847647][T17157] bond0: (slave bridge0): Releasing backup interface [ 706.878205][T17157] bridge0 (unregistering): left promiscuous mode [ 706.925538][ T5945] usb 6-1: Using ep0 maxpacket: 8 [ 706.934393][ T5945] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 706.946702][ T5945] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 706.959233][ T5945] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 706.972809][ T5945] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 706.987314][ T5945] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 706.996654][ T5945] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 707.103042][ T24] usb 5-1: USB disconnect, device number 46 [ 707.110842][ T24] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 707.151760][ T24] ftdi_sio 5-1:0.0: device disconnected [ 707.221943][ T5945] usb 6-1: GET_CAPABILITIES returned 0 [ 707.235210][ T5945] usbtmc 6-1:16.0: can't read capabilities [ 707.285687][T11921] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 707.430313][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 707.439417][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 707.448609][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 707.457706][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 707.466800][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 707.486486][T11921] usb 9-1: Using ep0 maxpacket: 16 [ 707.487704][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 707.494126][T11921] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 707.500829][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 707.511999][T11921] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 707.521009][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 707.530812][T11921] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 707.539834][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 707.553161][T11921] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 707.561945][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 707.570793][T11921] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 707.580052][ C1] vkms_vblank_simulate: vblank timer overrun [ 707.614521][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 707.623625][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 707.632710][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 707.641789][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 707.650874][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 707.659946][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -2 [ 707.674211][T11921] usb 9-1: config 0 descriptor?? [ 707.683562][ T5945] usb 6-1: USB disconnect, device number 39 [ 708.141496][T11921] HID 045e:07da: Invalid code 65791 type 1 [ 708.175250][T11921] input: HID 045e:07da as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:045E:07DA.003A/input/input85 [ 708.244657][T11921] microsoft 0003:045E:07DA.003A: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.8-1/input0 [ 708.373557][T11921] usb 9-1: USB disconnect, device number 14 [ 708.409036][T17188] fido_id[17188]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/9-1/report_descriptor': No such file or directory [ 708.623894][T17200] A link change request failed with some changes committed already. Interface ip6gre0 may have been left with an inconsistent configuration, please check. [ 708.696054][ T5950] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 708.723094][T17202] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 708.732199][T17202] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 708.887311][ T5950] usb 6-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 708.899523][ T5950] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 708.916031][ T5950] usb 6-1: config 0 descriptor?? [ 708.929586][ T5950] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 709.943157][ T5950] gspca_stv06xx: I2C: Read error writing address: -71 [ 709.956940][ T5950] usb 6-1: USB disconnect, device number 40 [ 710.365887][ T5930] usb 4-1: new full-speed USB device number 52 using dummy_hcd [ 710.557878][ T5950] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 710.748693][ T5930] usb 4-1: config 0 has an invalid interface number: 128 but max is 0 [ 710.836147][ T5930] usb 4-1: config 0 has no interface number 0 [ 710.863211][ T5930] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 710.896044][ T5930] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 710.909366][ T5930] usb 4-1: Product: syz [ 710.944926][ T5950] usb 6-1: Using ep0 maxpacket: 8 [ 711.009237][ T5930] usb 4-1: Manufacturer: syz [ 711.014119][ T5930] usb 4-1: SerialNumber: syz [ 711.037674][ T5930] usb 4-1: config 0 descriptor?? [ 711.045047][ T5950] usb 6-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 711.054193][ T5950] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 711.066429][ T5950] usb 6-1: Product: syz [ 711.070871][ T5950] usb 6-1: Manufacturer: syz [ 711.075720][ T5950] usb 6-1: SerialNumber: syz [ 711.213583][ T5950] usb 6-1: config 0 descriptor?? [ 711.445581][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 711.445605][ T30] audit: type=1326 audit(1755721053.529:1130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17233 comm="syz.8.2705" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff2e458ebe9 code=0x0 [ 711.473650][ C0] vkms_vblank_simulate: vblank timer overrun [ 711.556641][ T5950] gspca_main: se401-2.14.0 probing 047d:5003 [ 711.558906][T17226] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 711.897080][T17226] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 711.949125][ T5930] usb 4-1: Firmware version (0.0) predates our first public release. [ 711.980300][ T5930] usb 4-1: Please update to version 0.2 or newer [ 712.097339][ T5930] usb 4-1: USB disconnect, device number 52 [ 712.238890][T17244] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2706'. [ 712.278643][T17244] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2706'. [ 712.999181][ T5950] gspca_se401: write req failed req 0x57 val 0x00 error -110 [ 713.006846][ T5950] se401 6-1:0.0: probe with driver se401 failed with error -110 [ 713.341969][T17253] netlink: 'syz.7.2709': attribute type 1 has an invalid length. [ 713.378437][ T5944] usb 6-1: USB disconnect, device number 41 [ 713.384873][T17253] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 713.433765][ T30] audit: type=1800 audit(1755721055.669:1131): pid=17256 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2708" name="/" dev="fuse" ino=1 res=0 errno=0 [ 713.490576][T17253] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 713.715052][T17236] bridge1: entered promiscuous mode [ 713.785905][ T5950] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 713.896863][ T5930] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 713.956904][ T5950] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 713.979538][ T5950] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 714.015881][ T5950] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 714.038051][ T5950] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 714.068482][ T5950] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 714.077037][ T5930] usb 4-1: Using ep0 maxpacket: 32 [ 714.087327][ T5930] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 714.101861][ T5950] usb 5-1: config 0 descriptor?? [ 714.114729][ T5930] usb 4-1: config 0 has no interface number 0 [ 714.132622][ T5930] usb 4-1: config 0 interface 132 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 714.148587][T17273] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2715'. [ 714.166122][T17274] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 714.187772][ T5930] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 714.206009][T17273] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2715'. [ 714.218785][ T5930] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 714.278359][ T5930] usb 4-1: Product: syz [ 714.313426][ T5930] usb 4-1: Manufacturer: syz [ 714.318697][ T5930] usb 4-1: SerialNumber: syz [ 714.338049][ T5930] usb 4-1: config 0 descriptor?? [ 714.352515][ T5930] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 714.375406][ T5930] em28xx 4-1:0.132: Video interface 132 found: isoc [ 714.549936][ T5950] plantronics 0003:047F:FFFF.003B: unknown main item tag 0x0 [ 714.559394][T17260] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 714.568860][T17260] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 714.595115][ T5950] plantronics 0003:047F:FFFF.003B: unknown main item tag 0x0 [ 714.662666][ T5950] plantronics 0003:047F:FFFF.003B: unknown main item tag 0x0 [ 714.675936][ T5950] plantronics 0003:047F:FFFF.003B: unknown main item tag 0x0 [ 714.686105][ T5950] plantronics 0003:047F:FFFF.003B: unknown main item tag 0x0 [ 714.695663][ T24] usb 9-1: new full-speed USB device number 15 using dummy_hcd [ 714.704116][ T5950] plantronics 0003:047F:FFFF.003B: unknown main item tag 0x0 [ 714.712599][ T5950] plantronics 0003:047F:FFFF.003B: unknown main item tag 0x0 [ 714.715636][ T5944] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 714.722284][ T5950] plantronics 0003:047F:FFFF.003B: unknown main item tag 0x0 [ 714.778990][ T5950] plantronics 0003:047F:FFFF.003B: unknown main item tag 0x0 [ 714.825778][ T5950] plantronics 0003:047F:FFFF.003B: unknown main item tag 0x0 [ 714.873302][ T5950] plantronics 0003:047F:FFFF.003B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 714.893940][ T24] usb 9-1: unable to get BOS descriptor or descriptor too short [ 714.906275][ T24] usb 9-1: not running at top speed; connect to a high speed hub [ 714.907379][ T5944] usb 6-1: config 0 has an invalid interface number: 101 but max is 0 [ 714.918252][ T5950] usb 5-1: USB disconnect, device number 47 [ 714.929870][ T5930] em28xx 4-1:0.132: unknown em28xx chip ID (0) [ 714.938542][ T5944] usb 6-1: config 0 has no interface number 0 [ 714.944243][ T24] usb 9-1: config 12 has an invalid interface number: 173 but max is 1 [ 714.962828][ T24] usb 9-1: config 12 has an invalid interface number: 173 but max is 1 [ 714.975008][ T5944] usb 6-1: too many endpoints for config 0 interface 101 altsetting 115: 41, using maximum allowed: 30 [ 714.976525][ T24] usb 9-1: config 12 has 1 interface, different from the descriptor's value: 2 [ 714.999624][ T24] usb 9-1: config 12 has no interface number 0 [ 715.007785][ T24] usb 9-1: config 12 interface 173 has no altsetting 0 [ 715.014924][ T24] usb 9-1: config 12 interface 173 has no altsetting 1 [ 715.024921][ T5930] em28xx 4-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 715.034743][ T5930] em28xx 4-1:0.132: board has no eeprom [ 715.037434][ T5944] usb 6-1: config 0 interface 101 altsetting 115 has 0 endpoint descriptors, different from the interface descriptor's value: 41 [ 715.044994][T17291] fido_id[17291]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 715.076014][ T24] usb 9-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice=33.b7 [ 715.091455][ T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 715.101306][ T5930] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 715.104696][ T5944] usb 6-1: config 0 interface 101 has no altsetting 0 [ 715.119245][ T5944] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 715.129097][ T5930] em28xx 4-1:0.132: analog set to isoc mode. [ 715.129108][ T5944] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 715.135158][ T44] em28xx 4-1:0.132: Registering V4L2 extension [ 715.148955][ T5944] usb 6-1: config 0 descriptor?? [ 715.154889][ T24] usb 9-1: Product: syz [ 715.159241][ T5944] cp210x 6-1:0.101: cp210x converter detected [ 715.177773][ T24] usb 9-1: Manufacturer: syz [ 715.198000][ T5930] usb 4-1: USB disconnect, device number 53 [ 715.208429][ T24] usb 9-1: SerialNumber: syz [ 715.261789][ T44] em28xx 4-1:0.132: failed to trigger read from i2c address 0x4a (error=-19) [ 715.280096][ T5930] em28xx 4-1:0.132: Disconnecting em28xx [ 715.502891][ T44] em28xx 4-1:0.132: Config register raw data: 0xffffffed [ 715.522651][T17283] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 715.533278][T17283] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 715.592718][ T24] usb 9-1: USB disconnect, device number 15 [ 715.605705][ T5950] usb 5-1: new low-speed USB device number 48 using dummy_hcd [ 715.609524][ T5944] cp210x 6-1:0.101: failed to get vendor val 0x000e size 3: -32 [ 715.624033][ T44] em28xx 4-1:0.132: AC97 chip type couldn't be determined [ 715.633143][ T44] em28xx 4-1:0.132: No AC97 audio processor [ 715.662238][ T44] usb 4-1: Decoder not found [ 715.670232][ T5944] usb 6-1: cp210x converter now attached to ttyUSB0 [ 715.677285][ T44] em28xx 4-1:0.132: failed to create media graph [ 715.683716][ T44] em28xx 4-1:0.132: V4L2 device video103 deregistered [ 715.797593][ T5950] usb 5-1: config 0 interface 0 altsetting 252 endpoint 0x81 has invalid maxpacket 64, setting to 8 [ 715.819408][ T44] em28xx 4-1:0.132: Remote control support is not available for this card. [ 715.819590][T17302] ================================================================== [ 715.831253][ T5950] usb 5-1: config 0 interface 0 has no altsetting 0 [ 715.836148][T17302] BUG: KASAN: slab-use-after-free in v4l2_fh_open+0xc7/0x430 [ 715.850149][T17302] Read of size 8 at addr ffff888032b44740 by task v4l_id/17302 [ 715.857811][T17302] [ 715.860162][T17302] CPU: 0 UID: 0 PID: 17302 Comm: v4l_id Not tainted syzkaller #0 PREEMPT(full) [ 715.860189][T17302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 715.860204][T17302] Call Trace: [ 715.860213][T17302] [ 715.860225][T17302] dump_stack_lvl+0x189/0x250 [ 715.860256][T17302] ? rcu_is_watching+0x15/0xb0 [ 715.860281][T17302] ? __pfx_dump_stack_lvl+0x10/0x10 [ 715.860307][T17302] ? rcu_is_watching+0x15/0xb0 [ 715.860329][T17302] ? lock_release+0x4b/0x3e0 [ 715.860365][T17302] ? __virt_addr_valid+0x1c8/0x5c0 [ 715.860394][T17302] ? __virt_addr_valid+0x4a5/0x5c0 [ 715.860424][T17302] print_report+0xca/0x240 [ 715.860452][T17302] ? v4l2_fh_open+0xc7/0x430 [ 715.860484][T17302] kasan_report+0x118/0x150 [ 715.860518][T17302] ? v4l2_fh_open+0xc7/0x430 [ 715.860554][T17302] v4l2_fh_open+0xc7/0x430 [ 715.860589][T17302] em28xx_v4l2_open+0x157/0x9a0 [ 715.860624][T17302] v4l2_open+0x20c/0x360 [ 715.860660][T17302] chrdev_open+0x4c9/0x5e0 [ 715.860696][T17302] ? __pfx_chrdev_open+0x10/0x10 [ 715.860730][T17302] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 715.860768][T17302] ? __pfx_chrdev_open+0x10/0x10 [ 715.860801][T17302] do_dentry_open+0x950/0x13f0 [ 715.860832][T17302] vfs_open+0x3b/0x340 [ 715.860853][T17302] ? path_openat+0x2ecd/0x3830 [ 715.860881][T17302] path_openat+0x2ee5/0x3830 [ 715.860906][T17302] ? arch_stack_walk+0xfc/0x150 [ 715.860942][T17302] ? stack_depot_save_flags+0x40/0x860 [ 715.860979][T17302] ? __pfx_path_openat+0x10/0x10 [ 715.861006][T17302] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 715.861039][T17302] do_filp_open+0x1fa/0x410 [ 715.861067][T17302] ? __pfx_do_filp_open+0x10/0x10 [ 715.861105][T17302] ? _raw_spin_unlock+0x28/0x50 [ 715.861132][T17302] ? alloc_fd+0x64c/0x6c0 [ 715.861169][T17302] do_sys_openat2+0x121/0x1c0 [ 715.861195][T17302] ? __pfx_do_sys_openat2+0x10/0x10 [ 715.861218][T17302] ? lock_release+0x4b/0x3e0 [ 715.861253][T17302] ? do_user_addr_fault+0xc8a/0x1390 [ 715.861289][T17302] __x64_sys_openat+0x138/0x170 [ 715.861316][T17302] do_syscall_64+0xfa/0x3b0 [ 715.861350][T17302] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 715.861372][T17302] ? clear_bhb_loop+0x60/0xb0 [ 715.861397][T17302] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 715.861420][T17302] RIP: 0033:0x7f0d7fea7407 [ 715.861441][T17302] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 715.861468][T17302] RSP: 002b:00007ffd9645d310 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 715.861492][T17302] RAX: ffffffffffffffda RBX: 00007f0d8065c880 RCX: 00007f0d7fea7407 [ 715.861509][T17302] RDX: 0000000000000000 RSI: 00007ffd9645df1b RDI: ffffffffffffff9c [ 715.861526][T17302] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 715.861539][T17302] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 715.861553][T17302] R13: 00007ffd9645d560 R14: 00007f0d807c3000 R15: 000055c3625844d8 [ 715.861578][T17302] [ 715.861586][T17302] [ 716.155075][T17302] Allocated by task 44: [ 716.159233][T17302] kasan_save_track+0x3e/0x80 [ 716.163922][T17302] __kasan_kmalloc+0x93/0xb0 [ 716.168525][T17302] __kmalloc_cache_noprof+0x230/0x3d0 [ 716.173912][T17302] em28xx_v4l2_init+0x10b/0x2e70 [ 716.178855][T17302] em28xx_init_extension+0x11d/0x1c0 [ 716.184146][T17302] process_scheduled_works+0xae1/0x17b0 [ 716.189697][T17302] worker_thread+0x8a0/0xda0 [ 716.194309][T17302] kthread+0x70e/0x8a0 [ 716.198468][T17302] ret_from_fork+0x3f9/0x770 [ 716.203069][T17302] ret_from_fork_asm+0x1a/0x30 [ 716.207839][T17302] [ 716.210192][T17302] Freed by task 44: [ 716.213995][T17302] kasan_save_track+0x3e/0x80 [ 716.218705][T17302] kasan_save_free_info+0x46/0x50 [ 716.223735][T17302] __kasan_slab_free+0x5b/0x80 [ 716.228546][T17302] kfree+0x18e/0x440 [ 716.232449][T17302] em28xx_v4l2_init+0x1683/0x2e70 [ 716.237500][T17302] em28xx_init_extension+0x11d/0x1c0 [ 716.242809][T17302] process_scheduled_works+0xae1/0x17b0 [ 716.248363][T17302] worker_thread+0x8a0/0xda0 [ 716.253021][T17302] kthread+0x70e/0x8a0 [ 716.257103][T17302] ret_from_fork+0x3f9/0x770 [ 716.261761][T17302] ret_from_fork_asm+0x1a/0x30 [ 716.266538][T17302] [ 716.268886][T17302] The buggy address belongs to the object at ffff888032b44000 [ 716.268886][T17302] which belongs to the cache kmalloc-8k of size 8192 [ 716.282942][T17302] The buggy address is located 1856 bytes inside of [ 716.282942][T17302] freed 8192-byte region [ffff888032b44000, ffff888032b46000) [ 716.296931][T17302] [ 716.299277][T17302] The buggy address belongs to the physical page: [ 716.305710][T17302] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x32b40 [ 716.314478][T17302] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 716.323771][T17302] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 716.331417][T17302] page_type: f5(slab) [ 716.335505][T17302] raw: 00fff00000000040 ffff88801a442280 ffffea00009cf800 dead000000000004 [ 716.344103][T17302] raw: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000 [ 716.352687][T17302] head: 00fff00000000040 ffff88801a442280 ffffea00009cf800 dead000000000004 [ 716.361538][T17302] head: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000 [ 716.370229][T17302] head: 00fff00000000003 ffffea0000cad001 00000000ffffffff 00000000ffffffff [ 716.378897][T17302] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 716.387560][T17302] page dumped because: kasan: bad access detected [ 716.393981][T17302] page_owner tracks the page as allocated [ 716.399690][T17302] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x528c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_NORETRY|__GFP_COMP), pid 8295, tgid 8293 (syz.4.550), ts 206399717784, free_ts 206248681299 [ 716.419586][T17302] post_alloc_hook+0x240/0x2a0 [ 716.424390][T17302] get_page_from_freelist+0x21e4/0x22c0 [ 716.429950][T17302] __alloc_frozen_pages_noprof+0x181/0x370 [ 716.435778][T17302] alloc_pages_mpol+0x232/0x4a0 [ 716.440645][T17302] allocate_slab+0x8a/0x370 [ 716.445154][T17302] ___slab_alloc+0xbeb/0x1410 [ 716.449852][T17302] __kvmalloc_node_noprof+0x429/0x5f0 [ 716.455229][T17302] snd_pcm_plugin_alloc+0x19c/0x780 [ 716.460443][T17302] snd_pcm_plug_alloc+0x154/0x280 [ 716.465498][T17302] snd_pcm_oss_change_params_locked+0x2aed/0x3e40 [ 716.471962][T17302] snd_pcm_oss_make_ready+0x11b/0x340 [ 716.477359][T17302] snd_pcm_oss_set_trigger+0x95/0x740 [ 716.482832][T17302] snd_pcm_oss_ioctl+0xbb3/0xdd0 [ 716.487789][T17302] __se_sys_ioctl+0xfc/0x170 [ 716.492428][T17302] do_syscall_64+0xfa/0x3b0 [ 716.496969][T17302] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 716.502890][T17302] page last free pid 5234 tgid 5234 stack trace: [ 716.509217][T17302] __free_frozen_pages+0xbc4/0xd30 [ 716.514348][T17302] __slab_free+0x303/0x3c0 [ 716.518800][T17302] qlist_free_all+0x97/0x140 [ 716.523459][T17302] kasan_quarantine_reduce+0x148/0x160 [ 716.528925][T17302] __kasan_slab_alloc+0x22/0x80 [ 716.533792][T17302] __kmalloc_noprof+0x224/0x4f0 [ 716.538663][T17302] tomoyo_realpath_from_path+0xe3/0x5d0 [ 716.544241][T17302] tomoyo_path_perm+0x213/0x4b0 [ 716.549106][T17302] security_inode_getattr+0x12f/0x330 [ 716.554484][T17302] __x64_sys_newfstat+0xfc/0x200 [ 716.559431][T17302] do_syscall_64+0xfa/0x3b0 [ 716.563950][T17302] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 716.569851][T17302] [ 716.572179][T17302] Memory state around the buggy address: [ 716.577806][T17302] ffff888032b44600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 716.585863][T17302] ffff888032b44680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 716.593932][T17302] >ffff888032b44700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 716.601999][T17302] ^ [ 716.608172][T17302] ffff888032b44780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 716.616236][T17302] ffff888032b44800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 716.624295][T17302] ================================================================== [ 716.636155][ T5930] em28xx 4-1:0.132: Closing input extension [ 716.642168][ T5950] usb 5-1: New USB device found, idVendor=17ef, idProduct=60b5, bcdDevice= 0.00 [ 716.654831][ T5950] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 716.672933][ T5950] usb 5-1: config 0 descriptor?? [ 716.687426][T17302] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 716.694691][T17302] CPU: 0 UID: 0 PID: 17302 Comm: v4l_id Not tainted syzkaller #0 PREEMPT(full) [ 716.703737][T17302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 716.713900][T17302] Call Trace: [ 716.717205][T17302] [ 716.720160][T17302] dump_stack_lvl+0x99/0x250 [ 716.724785][T17302] ? __asan_memcpy+0x40/0x70 [ 716.729482][T17302] ? __pfx_dump_stack_lvl+0x10/0x10 [ 716.734775][T17302] ? __pfx__printk+0x10/0x10 [ 716.739398][T17302] vpanic+0x281/0x750 [ 716.743437][T17302] ? preempt_schedule+0xae/0xc0 [ 716.748307][T17302] ? __pfx_vpanic+0x10/0x10 [ 716.752823][T17302] ? preempt_schedule_common+0x83/0xd0 [ 716.758301][T17302] ? preempt_schedule+0xae/0xc0 [ 716.763165][T17302] ? __pfx_preempt_schedule+0x10/0x10 [ 716.768552][T17302] panic+0xb9/0xc0 [ 716.772286][T17302] ? __pfx_panic+0x10/0x10 [ 716.776712][T17302] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 716.782618][T17302] ? v4l2_fh_open+0xc7/0x430 [ 716.787222][T17302] check_panic_on_warn+0x89/0xb0 [ 716.792172][T17302] ? v4l2_fh_open+0xc7/0x430 [ 716.796771][T17302] end_report+0x78/0x160 [ 716.801021][T17302] kasan_report+0x129/0x150 [ 716.805532][T17302] ? v4l2_fh_open+0xc7/0x430 [ 716.810162][T17302] v4l2_fh_open+0xc7/0x430 [ 716.814593][T17302] em28xx_v4l2_open+0x157/0x9a0 [ 716.819459][T17302] v4l2_open+0x20c/0x360 [ 716.823714][T17302] chrdev_open+0x4c9/0x5e0 [ 716.828143][T17302] ? __pfx_chrdev_open+0x10/0x10 [ 716.833093][T17302] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 716.839436][T17302] ? __pfx_chrdev_open+0x10/0x10 [ 716.844418][T17302] do_dentry_open+0x950/0x13f0 [ 716.849191][T17302] vfs_open+0x3b/0x340 [ 716.853272][T17302] ? path_openat+0x2ecd/0x3830 [ 716.858148][T17302] path_openat+0x2ee5/0x3830 [ 716.862757][T17302] ? arch_stack_walk+0xfc/0x150 [ 716.867724][T17302] ? stack_depot_save_flags+0x40/0x860 [ 716.873203][T17302] ? __pfx_path_openat+0x10/0x10 [ 716.878153][T17302] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 716.884255][T17302] do_filp_open+0x1fa/0x410 [ 716.888772][T17302] ? __pfx_do_filp_open+0x10/0x10 [ 716.893814][T17302] ? _raw_spin_unlock+0x28/0x50 [ 716.898681][T17302] ? alloc_fd+0x64c/0x6c0 [ 716.903057][T17302] do_sys_openat2+0x121/0x1c0 [ 716.907743][T17302] ? __pfx_do_sys_openat2+0x10/0x10 [ 716.912948][T17302] ? lock_release+0x4b/0x3e0 [ 716.917557][T17302] ? do_user_addr_fault+0xc8a/0x1390 [ 716.922878][T17302] __x64_sys_openat+0x138/0x170 [ 716.927737][T17302] do_syscall_64+0xfa/0x3b0 [ 716.932262][T17302] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 716.938345][T17302] ? clear_bhb_loop+0x60/0xb0 [ 716.943040][T17302] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 716.948975][T17302] RIP: 0033:0x7f0d7fea7407 [ 716.953421][T17302] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 716.973120][T17302] RSP: 002b:00007ffd9645d310 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 716.981541][T17302] RAX: ffffffffffffffda RBX: 00007f0d8065c880 RCX: 00007f0d7fea7407 [ 716.989534][T17302] RDX: 0000000000000000 RSI: 00007ffd9645df1b RDI: ffffffffffffff9c [ 716.997522][T17302] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 717.005587][T17302] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 717.013565][T17302] R13: 00007ffd9645d560 R14: 00007f0d807c3000 R15: 000055c3625844d8 [ 717.021545][T17302] [ 717.024759][T17302] Kernel Offset: disabled [ 717.029177][T17302] Rebooting in 86400 seconds..