last executing test programs: 4m25.508788514s ago: executing program 1 (id=293): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r2 = landlock_create_ruleset(&(0x7f0000000040)={0x3800, 0x3}, 0x18, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x8) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0xa) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x1c0) pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r4 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r3, 0x3) mkdirat(r3, &(0x7f0000000000)='./file0\x00', 0x80) r5 = landlock_create_ruleset(&(0x7f00000000c0)={0x100, 0x0, 0x4}, 0x18, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r5, 0x1, &(0x7f0000000140)={0x100, r6}, 0x0) fadvise64(0xffffffffffffffff, 0x78a7f050, 0x0, 0x3) landlock_restrict_self(r5, 0x4) r7 = landlock_create_ruleset(&(0x7f0000000240)={0x20}, 0x18, 0x0) landlock_restrict_self(r7, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0/file0/file0\x00', 0x81c0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000340)='./file0/file0/file0\x00', 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)=ANY=[@ANYBLOB="30000000eb41f3e2ba73ae1c5894d5c33f5c37628d62bd3ba7d6320471e8685af9eb0ca6ad0cd3c050446b30f7475b21be59174ab1e385", @ANYRES16=r1, @ANYBLOB="0002000000000000010000000000000000000141000000140017000000000000040169623a7767310000"], 0x30}}, 0x40000c4) 4m25.353214064s ago: executing program 1 (id=295): sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="90000000051405012cbd7000fbdbdf0100000000000800030000000015fd00012ce379552fc285"], 0x90}, 0x1, 0x0, 0x0, 0x20040081}, 0x40010) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0xfffffffffffffffd) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cb, 0xf170, 0xa1d, 0x8, 0x5, 0x0, 0x3, 0x2, 0x0, 0xfffffffffffffffc], 0x10000, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0x5000, 0x60000, 0x0, 0x6, 0x8, 0x5, 0x0, 0x3, 0x0, 0x8, 0x6, 0x3}, {0xffff1000, 0x10000, 0xd, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7, 0xff}, {0xeeee0000, 0x8080000, 0xb, 0x4, 0x7, 0xc4, 0x0, 0x0, 0x8, 0x3, 0x0, 0xfd}, {0x0, 0xdddd0000, 0x18592cbc7c573fc6, 0x9, 0x70, 0x0, 0x9, 0x0, 0x8, 0x0, 0x4, 0x2}, {0x200000, 0x6000, 0x8, 0x3, 0x8, 0x4, 0x0, 0x0, 0x0, 0x3c}, {0x100000, 0xeeee0000, 0xe, 0x2, 0xa, 0x1, 0x2, 0x0, 0x0, 0xff, 0x1}, {0x2000, 0xa000, 0xa, 0x4, 0x8, 0x0, 0xa1, 0x20, 0x0, 0xff, 0x8, 0x40}, {0x7000, 0x6000, 0xc, 0x0, 0x0, 0x7, 0x8, 0x40, 0x26, 0x0, 0x5, 0x2}, {0x80a0000, 0x8cc}, {0xdddd1000}, 0x8, 0x0, 0x54000, 0x110, 0xc, 0xf800, 0x0, [0x8000000000000001, 0x10000000000, 0xffffffffffffffff, 0x1]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4m25.254298583s ago: executing program 1 (id=296): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x5, 0x4}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000080)={{{@in=@initdev, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@dev}}, &(0x7f0000000180)=0xe8) setreuid(r1, 0xee01) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) stat(&(0x7f0000000300)='./bus/file0\x00', &(0x7f0000000600)) fcntl$lock(r0, 0x26, &(0x7f00000031c0)={0x1}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000340)={@in={{0x2, 0x4e20, @local}}, 0x0, 0x0, 0x22, 0x0, "cebd7ceedb7b0ad952e966bbe242b92b746b023df2cb59e32e10366456deac64e782206bd4aee372005a52a40b7161161a8b2749fe184fb0d08bc63f90010a1ed2bf603d2c3fcc250c01006f9ef2ef8b"}, 0xd8) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) r3 = socket(0xa, 0x3, 0x3a) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000640)={'ip6tnl0\x00', &(0x7f00000005c0)={'ip6tnl0\x00', 0x0, 0x29, 0x7, 0x80, 0x7, 0x2, @empty, @empty, 0x8000, 0x8, 0x3, 0xe}}) recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) fcntl$lock(r0, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3}) 4m24.225232453s ago: executing program 1 (id=299): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x80) umount2(&(0x7f0000000380)='./file0\x00', 0x0) 4m24.101590902s ago: executing program 1 (id=302): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r1) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000001c0)=0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000001440)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101142, 0x0) ioctl$FICLONERANGE(r4, 0x4020940d, &(0x7f00000000c0)={{r4}, 0x0, 0xffffffffffffffa1, 0x100000}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000200)=0x0) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r7) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r9], 0x1c}}, 0xc854) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000280)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000300)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000340)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000540)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0x64, r2, 0x8, 0x70bd2c, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r13}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r14}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000004}, 0x10) r15 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r16 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_LISTDEF(r15, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r16, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_CLPDOI={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20020000}, 0x8000) r17 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000380), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000580)={0x44, r17, 0x1, 0x0, 0x1, {0x4}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @loopback}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'hsr0\x00'}]}, 0x44}}, 0x0) 4m23.740761586s ago: executing program 1 (id=306): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000100)="89f707d7589ecdc1b7885546bb3a09aead0295b2a06d907b63817b157d2c318403b439a48c6754a1877a0d0666499564261dd50b49e852af8c0c", 0x3a}, {&(0x7f0000000200)="5d19520f6c0fa83bf45a177009e856f77a05c0cf558bf61c2a5312eced1f9718219dc181932d5b4ed65327ad6cc284cb9dfcf2e1b13aa718ab450fd6b29671b75cf46cfdabc62c980da370ffeca376858d5969f123c8c51a3875bc7124536af7cd", 0x61}], 0x2) 4m23.082879295s ago: executing program 32 (id=306): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000100)="89f707d7589ecdc1b7885546bb3a09aead0295b2a06d907b63817b157d2c318403b439a48c6754a1877a0d0666499564261dd50b49e852af8c0c", 0x3a}, {&(0x7f0000000200)="5d19520f6c0fa83bf45a177009e856f77a05c0cf558bf61c2a5312eced1f9718219dc181932d5b4ed65327ad6cc284cb9dfcf2e1b13aa718ab450fd6b29671b75cf46cfdabc62c980da370ffeca376858d5969f123c8c51a3875bc7124536af7cd", 0x61}], 0x2) 3m26.777333301s ago: executing program 2 (id=729): socket$inet6_mptcp(0xa, 0x1, 0x106) socket$netlink(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6(0xa, 0x80001, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) eventfd2(0x7fffffff, 0x800) socket$nl_netfilter(0x10, 0x3, 0xc) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)=[0x7fffffff], 0x0, 0x1}) 3m26.712078358s ago: executing program 2 (id=731): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000580), 0x185082, 0x0) fallocate(r0, 0x0, 0x3, 0x140000804000003) syz_usb_connect(0x0, 0x5a, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000ec13b2106d04f308280b0102030109024800010000000009046900000e0100002b41"], 0x0) 3m25.18841061s ago: executing program 2 (id=745): write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x2d, 0x0, 0x20001000, 0x0, 0xfffc, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0x50) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000000e000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f00000000c0)="440f78bdb20000003e64460f78b49d0060000065400f841b000000650fc77674dd0166baf80cb85cb2f38cefb800000000efc442a3f5f0c44105d3a100400000b9800000c00f3235000100000f3066baf80cb84a88638aef66bafc0cb017ee", 0x5f}], 0x1, 0x30, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000009780)=[{{&(0x7f0000000000)={0x2, 0x4e21, @remote}, 0x10, 0x0}}], 0x1, 0xc0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000005700)=@vmx={0x0, 0x0, 0x2080, {0x0, 0xf000}, {"0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e2ff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003548000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fff800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4ffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400", "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a5f2000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe00"}}) ioctl$KVM_RUN(r2, 0xae80, 0x3000000) 3m25.038606037s ago: executing program 2 (id=748): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', 0x0, 0x0, 0x2a05404, 0x0) mount$bind(0x0, 0x0, 0x0, 0x100000, 0x0) mount$bind(&(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x2b5b093, 0x0) mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x80000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 3m24.932663851s ago: executing program 2 (id=749): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000080)={@rand_addr=0x64010101, @empty}, 0xc) 3m24.701839623s ago: executing program 2 (id=752): write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x2d, 0x0, 0x20001000, 0x0, 0xfffc, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0x50) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="00000100000005"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_GET_SREGS(r3, 0x8138ae83, &(0x7f0000000440)) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f000000e000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f00000000c0)="440f78bdb20000003e64460f78b49d0060000065400f841b000000650fc77674dd0166baf80cb85cb2f38cefb800000000efc442a3f5f0c44105d3a100400000b9800000c00f3235000100000f3066baf80cb84a88638aef66bafc0cb017ee", 0x5f}], 0x1, 0x30, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000009780)=[{{&(0x7f0000000000)={0x2, 0x4e21, @remote}, 0x10, 0x0}}], 0x1, 0xc0) close_range(r2, r3, 0x2) ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000005700)=@vmx={0x0, 0x0, 0x2080, {0x0, 0xf000}, {"0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e2ff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003548000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fff800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4ffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400", "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a5f2000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe00"}}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3m24.520775177s ago: executing program 33 (id=752): write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x2d, 0x0, 0x20001000, 0x0, 0xfffc, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0x50) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="00000100000005"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_GET_SREGS(r3, 0x8138ae83, &(0x7f0000000440)) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f000000e000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f00000000c0)="440f78bdb20000003e64460f78b49d0060000065400f841b000000650fc77674dd0166baf80cb85cb2f38cefb800000000efc442a3f5f0c44105d3a100400000b9800000c00f3235000100000f3066baf80cb84a88638aef66bafc0cb017ee", 0x5f}], 0x1, 0x30, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000009780)=[{{&(0x7f0000000000)={0x2, 0x4e21, @remote}, 0x10, 0x0}}], 0x1, 0xc0) close_range(r2, r3, 0x2) ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000005700)=@vmx={0x0, 0x0, 0x2080, {0x0, 0xf000}, {"0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e2ff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003548000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fff800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4ffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400", "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a5f2000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe00"}}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3m18.216272164s ago: executing program 4 (id=784): syslog(0x4, &(0x7f00000001c0)=""/211, 0xd3) (fail_nth: 5) syslog(0x3, 0x0, 0x0) 3m17.444811003s ago: executing program 4 (id=788): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000040)={0x0}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000180)={0xa0, 0xb, 0x0, {{0x3, 0x3, 0x100000001, 0x2, 0x5, 0x40, {0xc00000001, 0x180, 0x900000, 0x9, 0x8b, 0xd614, 0xfffffffd, 0x80000041, 0xfffffffe, 0x6000, 0x2, 0x0, 0x0, 0x3ff, 0x1}}, {0x0, 0x1a}}}, 0xffffffffffffff2d) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x9a) fcntl$setlease(r4, 0x400, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setlease(r4, 0x400, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r6, @ANYBLOB="0c00990000000000000000000800a115ffff0000080026008d03000008009f"], 0x40}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a09040000000000000000020000000900010073797a30000000000900020073797a320000000038000000080a050000000000000000000200000a0c00034000000000000000420900020073797a32000000000900010073797a30"], 0x8c}}, 0x0) 3m17.063691388s ago: executing program 4 (id=791): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000840)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000800)={&(0x7f00000005c0)=ANY=[@ANYBLOB="24020000", @ANYRES16=0x0, @ANYBLOB="02002bbd7000fcdbdf251700000008000300", @ANYRES32=r1, @ANYBLOB="840030800500020070000000050002000f000000240003005727d0ee641b9bb46ff08b3df630ddf626e0f4e18d122380634c105744a9e07a1400040098f263e4ef4332fb0d969e08519c7a80240003001b67868ee7fc93ffb55d436178e9aec9bde43adfb62f01d618de22625331fc5f1400040031d714536d910748c8a007bad2dab748f6291ade1dba00000000000008000300", @ANYRES32=r2, @ANYBLOB="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"], 0x224}, 0x1, 0x0, 0x0, 0x400c4}, 0xa000) r3 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100000b529708410e42416ed401020301090224000100000000090400020221f768000905013d000401ff070905021008"], 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) syz_usb_control_io$printer(r3, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000008c0)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000980)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x30, 0x0, 0x4, 0x70bd2d, 0x7fff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000000) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r5, 0x8208ae63, &(0x7f0000000280)={0x1, 0x0, @ioapic={0x65e20f0bf7ee5018, 0x5, 0x2, 0xb, 0x0, [{0x7, 0x5c, 0x6, '\x00', 0x10}, {0xf, 0x7, 0x7, '\x00', 0x21}, {0x6, 0x1, 0x1, '\x00', 0xa2}, {0x7, 0x35, 0x3, '\x00', 0x5}, {0x3, 0x7f, 0x3, '\x00', 0x8}, {0x8, 0x9e, 0x3, '\x00', 0x9}, {0x48, 0x0, 0x2, '\x00', 0xd}, {0x7a, 0x2, 0x3, '\x00', 0x6}, {0x7, 0x7, 0xc, '\x00', 0x2}, {0x9, 0x23, 0x3, '\x00', 0x7}, {0x80, 0xe2, 0x9, '\x00', 0x7}, {0x3, 0xa, 0x72, '\x00', 0x3}, {0x0, 0x7, 0x1, '\x00', 0x8}, {0x7, 0x81, 0x40, '\x00', 0x2}, {0x9, 0xca, 0xf9, '\x00', 0x10}, {0x3, 0x0, 0x8, '\x00', 0xff}, {0x40, 0x0, 0x2c, '\x00', 0x9}, {0x9, 0x6, 0x41, '\x00', 0x7}, {0x0, 0x0, 0xd, '\x00', 0x3}, {0x6, 0x1, 0x23, '\x00', 0x8}, {0x0, 0xa, 0xf7, '\x00', 0x8}, {0xac, 0xb, 0x81, '\x00', 0x1}, {0x5a, 0x5, 0xa1, '\x00', 0x4}, {0x4f, 0x3, 0xb, '\x00', 0x4}]}}) r8 = openat2(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x600000, 0x100, 0x20}, 0x18) ioctl$KVM_SET_ONE_REG(r8, 0x4010aeac, &(0x7f0000000880)=@arm64_extra={0x603000000013c03d, &(0x7f0000000180)=0x5}) syz_usb_control_io$printer(r3, &(0x7f0000000a80)={0x14, &(0x7f00000009c0)={0x40, 0x0, 0x3e, {0x3e, 0x19, "8095e04c062e73ecc3567fcd0a6371c42bb0cf4374a16fa20c284b21206fa1eaabb09e70e73934e20ace462dfe1d51f4065e66fad2538f3b70924bb6"}}, &(0x7f0000000a40)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x402}}}, &(0x7f0000000d00)={0x34, &(0x7f0000000ac0)={0x20, 0x16, 0x3d, "745e40ff772ba62529687eba05e9d89ca5c228d52c1ca67c9b08de7dfd327eaba094fae1dec0927b7855273be4a5bb3c4dd1ddab7cb293d15dbf4a3b89"}, &(0x7f0000000b40)={0x0, 0xa, 0x1}, &(0x7f0000000b80)={0x0, 0x8, 0x1}, &(0x7f0000000bc0)={0x20, 0x0, 0xa2, {0xa0, "ea214d7d045fd6a40f1513e3f6a18ac218e7385b5ad43547367685efd93fd861e1d42ac420ca3c2e02d8ad91c4c7ed7fa3609000520279648a9656cc9f9382f3fe5e8a82711e9bf80eeef5e542a11622c277edac2f74c00ab4a4596e0513e00975bef86016b2f033c61ed71ce8174fd3995efb697881e34b6cab9b2235971ebdcfd857b455f926c89dbc2aee830cfb8483cf441830d8dec35cbe9a49232f736a"}}, &(0x7f0000000c80)={0x20, 0x1, 0x1, 0x7}, &(0x7f0000000cc0)={0x20, 0x0, 0x1, 0x3}}) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f00000000c0)={0x1fd, 0x0, 0xcfeeb595f2efd644, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x0, 0x20, 0x3, 0x1, 0x106e, 0xc, 0x8000000000000, 0x80000004000080, 0x0, 0xfffffffffffffff9, 0x4, 0x4, 0x4, 0x7ffd], 0x41000, 0x3c4210}) syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_SET_PIT(r8, 0x8048ae66, &(0x7f00000004c0)={[{0x7f, 0xc, 0x37, 0x7, 0x7f, 0x6, 0x8, 0x2, 0x4, 0x0, 0x3, 0x7, 0x7}, {0x10001, 0x1, 0x55, 0x8, 0x4, 0x3, 0x9, 0x7, 0x7, 0x14, 0x7, 0x9, 0xe00000}, {0x6, 0xec, 0x2, 0x8, 0x7, 0x6a, 0x5, 0x3, 0x4, 0xa6, 0x42, 0x40, 0x1}], 0x9}) 3m13.916661025s ago: executing program 4 (id=815): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000d00)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffc}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000400)="b8", 0x1}], 0x1}}], 0x1, 0x0) shutdown(r0, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r1) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x4c27e, 0x2) fallocate(r3, 0x0, 0x0, 0x1000f4) ftruncate(r3, 0x5) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ppoll(&(0x7f0000000740)=[{r5, 0x104}], 0x1, 0x0, 0x0, 0x0) ioctl$VT_DISALLOCATE(r4, 0x5608) mkdir(&(0x7f0000000080)='./file0\x00', 0x15d) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='proc\x00', 0x810c03, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0) r6 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x20400, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, &(0x7f0000000180)={'pcl726\x00', [0xa3fb, 0xff, 0x29, 0x4, 0xb4, 0xcc5, 0x8, 0x68d, 0x8, 0xe, 0x7ff, 0xffffffff, 0x1, 0x1, 0x9, 0x80, 0x7, 0x3, 0x9, 0xb13285ce, 0x8b, 0xcaa9, 0x0, 0x20001e58, 0x4bd, 0x1, 0x3b, 0x8, 0x100006, 0xf7fffff7, 0xfffffff8]}) chroot(&(0x7f0000000000)='./file0/../file0\x00') pivot_root(&(0x7f0000000280)='./file0\x00', &(0x7f0000000180)='./file0/../file0\x00') socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="5c010000", @ANYRES16=r2, @ANYBLOB="010026bd7000fedbdf253900000008000300", @ANYRES32, @ANYBLOB="40015a80740000800500020003000000140005200000050072000000030000000500090005000600"], 0x15c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) 3m13.556360757s ago: executing program 4 (id=817): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000002500010324bd5502ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x20004888}, 0x0) recvmsg(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000600)=""/244, 0xf4}, {&(0x7f0000000040)=""/222, 0xde}, {&(0x7f0000000800)=""/222, 0xde}, {&(0x7f0000000b80)=""/184, 0xb8}, {&(0x7f0000002bc0)=""/4096, 0x1000}, {&(0x7f0000000240)=""/171, 0xab}], 0x6}, 0x22120) recvmmsg(r0, &(0x7f0000001940)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x4}], 0x2, 0x0, 0x0) 3m13.288399164s ago: executing program 4 (id=818): openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000000c0)='proc\x00', 0x2800005, 0x0) syz_open_procfs(0x0, &(0x7f0000019080)='net/udp\x00') r1 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101001, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f0000000300)={'comedi_bond\x00', [0x3, 0x5, 0x7fffffff, 0x4, 0x3b7, 0x2003, 0x40000007, 0x400008, 0x80ff6, 0x5, 0x8, 0x8500, 0x1, 0x1000004, 0xf, 0xff800000, 0x32, 0x7ffffffd, 0x1ff, 0x9ea, 0x9, 0x40000, 0x8, 0x7, 0x6, 0x48, 0x42c1, 0x4, 0x9, 0x4, 0x7ffd, 0x8b]}) (async) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f0000000300)={'comedi_bond\x00', [0x3, 0x5, 0x7fffffff, 0x4, 0x3b7, 0x2003, 0x40000007, 0x400008, 0x80ff6, 0x5, 0x8, 0x8500, 0x1, 0x1000004, 0xf, 0xff800000, 0x32, 0x7ffffffd, 0x1ff, 0x9ea, 0x9, 0x40000, 0x8, 0x7, 0x6, 0x48, 0x42c1, 0x4, 0x9, 0x4, 0x7ffd, 0x8b]}) syz_open_procfs(0x0, &(0x7f0000000280)='net/sctp\x00') 3m12.786945216s ago: executing program 34 (id=818): openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000000c0)='proc\x00', 0x2800005, 0x0) syz_open_procfs(0x0, &(0x7f0000019080)='net/udp\x00') r1 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101001, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f0000000300)={'comedi_bond\x00', [0x3, 0x5, 0x7fffffff, 0x4, 0x3b7, 0x2003, 0x40000007, 0x400008, 0x80ff6, 0x5, 0x8, 0x8500, 0x1, 0x1000004, 0xf, 0xff800000, 0x32, 0x7ffffffd, 0x1ff, 0x9ea, 0x9, 0x40000, 0x8, 0x7, 0x6, 0x48, 0x42c1, 0x4, 0x9, 0x4, 0x7ffd, 0x8b]}) (async) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f0000000300)={'comedi_bond\x00', [0x3, 0x5, 0x7fffffff, 0x4, 0x3b7, 0x2003, 0x40000007, 0x400008, 0x80ff6, 0x5, 0x8, 0x8500, 0x1, 0x1000004, 0xf, 0xff800000, 0x32, 0x7ffffffd, 0x1ff, 0x9ea, 0x9, 0x40000, 0x8, 0x7, 0x6, 0x48, 0x42c1, 0x4, 0x9, 0x4, 0x7ffd, 0x8b]}) syz_open_procfs(0x0, &(0x7f0000000280)='net/sctp\x00') 3m10.891210334s ago: executing program 0 (id=832): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x6, 0x8201) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_all\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62458c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b", 0x87}], 0x1}, 0x0) socket$inet(0x2, 0xa, 0xb) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000000100)={0x4, [0x7, 0x6, 0x5, 0x0]}, &(0x7f0000000140)=0xc) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="040e07042d0c"], 0xa) syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xfb}, "a2df20051d95da5f8753f9f9952b2fb5806df31fe1476b76fe46ca20cd2db313e94057bf5374eac6f2953c6a7a62d656e36e23dab880d2fbdee710afc990ba09eb35957639c3afd6a7f077c99d56131c8bfa89ffb5a498c0b5085a947945c7cf0dc9b43aa2f64cfbb3f73bf94d897e2077afa99388d699ad0281e0f7837e59398b5e0c37a26c84f5e16ab3e782d36b91905ae39245b71d5d7b69b445650f137720ae32fe52b34b6130b84b658cba5fb1fe95e729e85ab33555be1d91167d661bf682c0ec632e5e6d28aa40c3dbdf4098826af2a8066f9c4ec499000bcd666f4e98bc57fc32689b3117d37e1b1b64e5b47b5dbff86a0b82b514562a"}, 0xff) 3m10.677253945s ago: executing program 0 (id=833): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x7}, [@NFTA_RULE_HANDLE={0x0, 0x3, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN_ID={0x0, 0xb, 0x1, 0x0, 0x4}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x68}}, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x3f, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYRES64=r1], 0x20}], 0x1, 0x0, 0x0, 0x22008085}, 0x0) 3m10.573866802s ago: executing program 0 (id=835): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc0585611, &(0x7f0000000580)={0x0, 0x5, 0x0, {0x0, @raw_data="6d14610dfd30a74fe3b78e024184e4445939547ded0fdd1cd48ea83e06b3f9f9ca2ed9714abbeda901e196ac9163388168d67da8c2b20765e9332541ea5125e7f65b4ebdb2ea015b3499f8275f875e4ff4c6aa5d6548240de4b0312e0a41220762b49254c5a49ac78bc50ff43adfe77c4f629cf7e3b3203dd6c5dc0bb3816190c14ec0ae695502a6f3ba41fa55120f9bf94ab597f3a9c9af0c4b473fa3122a90650d581ed4563f3760d8df6907d47c3c6e8747fc280733f97e4432318b096699480ab4fda870ff47"}}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000200), 0x4, r1}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000500)={0x0, 0x1, &(0x7f0000000180)=[r3], &(0x7f00000000c0)=[0x2], &(0x7f0000000580)=[r2], &(0x7f0000000040), 0x0, 0x2000}) 3m10.424083515s ago: executing program 0 (id=837): openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x4, 0x4, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000001500)=[{{0x0, 0x0, &(0x7f0000000300)=[{0x0}, {0x0}, {&(0x7f00000005c0)="f2", 0x1}], 0x3}}, {{&(0x7f0000000600)=@can, 0x80, &(0x7f0000000680)=[{&(0x7f0000000980)="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", 0xfc}, {&(0x7f0000000780)="92bdcafd7ac9e21583ea71b9eb5feeb69b7eeb919260393d59069611e6d460fd38481da64e5ad543477ed7b768b1a06c0a5d60edf6c5610c123e3572a7c3bd74b7bd876c6f1c54709ef06cb9187fa5ddecc04cdc8fd3e74782c0aa0579531662e6d5fcdddc53becdd0b8a59c3a97fe428e75e7707525647bd822", 0x7a}, {&(0x7f0000000580)="49a6cc7e52cf0644e1fb10e13cb6893bd19afc65f2af20dd1746a881eb4dabcaf163ce54133d2499c296320937b805f1880adf0cb1507df75aaf", 0x3a}, {&(0x7f0000000a80)="190e431aa3b287c28be2f5404c8034cc87b917c381ccff6f8d431e872be3df64fee6c95001ceff12f2e942df6a8738cd4ad9ef7ad532fd0c824bf8d36d616e99807b3be837b3145efe65f7c6b66b9813e122d9be7799ebf0160d4bd329ac230e639a58a6538ec01e2de41722469556b03344f32eac19", 0x76}], 0x4, &(0x7f0000000b40)=[@timestamping={{0x14, 0x1, 0x25, 0x2d}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0xc}}], 0x60}}, {{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000bc0)="e7bc2f4799fe560c31cf5a20a1b22fb77ce7f19e605b6a8d2645af02e63f9a9d7ba31907ccc0f4aa71ec0762b3a8e3332fe3603b4624ac6a578ccd9a27b381a8dad12b3e3de940a99238945935184cd93dd174b70ecb9c3c99d2df9dd0cbef6a9e230f7dd8367384f034a7a011388990e94cd43e9f80ec3358dc596926960604b9f051", 0x83}, {&(0x7f0000000c80)="6c3e28dcd5c7eb9bc39a4bbc398357f3ad842b38a95863911bbd6e6afd9641d356257181e43b6e60349f69ec5f529734f76708a6c5eccb57005c1a513d8030d12c65", 0x42}, {&(0x7f0000000d00)="dc6e94ac2db166801ffce85f6f44f2cb071c6b5113bc6bbf2f503d468253693a01102fcb8157c6e8a2b5620efa5d22400147cce896821150f95c0c69fa587a1f99fcb28cfeb09f45cb836f0ff891be10bb209dc04adc202ef866f27b74faa5ad3a2e5d40ebd6785c4e4a97ac13238c746d1109d12af5446c4e84591f121a494251e43bed18f6269bdd2e56f9c211dd7145f664286911b8bb3acf76a1b5ece94183a6c8cc47f2e1dd4e91dc10be8732e92e8620fa060fb15016c2dc9b6da18325e778660d499aec6215b0f9f679fa76d22cdd4ae3776203e2054240594f1c9b77ad77cf3f5631012fa0788c5b17f98cc34720b0", 0xf3}, {&(0x7f0000000e00)="9bf1660e4e05ab224977738ee2e2515a9dbeb4fd58e67d16a0a9f34cfbd7cab4dd4a5f83facf29bf45c0ca1a0f5594f327f3f8fd9a1736fc299b380d937bc354c427563c36dd49e294d554604531e05d387de80c3d2e42b8d0140b8912c0d8d2da4b69d9e70a689fe44cd0da4e82d86d23b685a89a366fa3a6bfd52771630570ee1b5f7eb8caf61e4be800be9605c7cdf6c008bb2ebc10b721882ae06722aa473ebf99333a87c91d317f2475ade1105ab01917a45c9ce764efcf811e43447061f9ae9d43", 0xc4}, {&(0x7f0000000fc0)="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", 0xfc}, {&(0x7f00000010c0)="978d1129fddf5e2f1be8be48f935ef4f71893a57f79be3e44522d3987ccee23f4e717d8c8e14573937040fb658a24f1c9e0c7f98a24fa1209a6ea754e1244234c715713d120b6929614443fd6b4223bc04c3a8c9241ccbb6a8b0bb19fe4eedae48642a74e97588dc36bf06a4c1fb17b47b39240a6a8e9b5daa97e63d777e665841a349c52022252eafc1c129e154ab390624dd7fb8ac1e44c203140d6aab524f61cd8642ee0f380ebb21dc9267a8fbefa6eec89ff97e7800f44f89b17d43206217941c34067892c0546538", 0xcb}, {&(0x7f0000000800)="b56380b7487ff3b0cd079ed795bdeeb3ad75fe878a", 0x15}, {&(0x7f00000011c0)="fc5a4366e1", 0x5}, {0x0}, {0x0}], 0xa, &(0x7f00000014c0)}}], 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f7b01acfe2222d", 0x11}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000f80)=[{{&(0x7f0000000340)={0xa, 0x4e20, 0x80000000, @empty, 0x7}, 0x1c, &(0x7f0000000f00)=[{&(0x7f0000000880)="562f2edb8e8c8229195820c788783ff270fb0f06936fe49376e5519e3fa8f998387d7011fc5d8c9f5fc8e0e1663c9f6919128a8941ae935aaba3f683642630f5a74535b0e1f886ea2807f04d3a68ff4285f2bf581674a033cb5ecf8c756e8df3968c959df5326ed67c09d8b72eceeb87023f6188e15cb258cd8c85be3eddaac311ee4cb17a08ef47157753606ce7996162ea4b18214763730e2b944b468575927829842ee7f6f8a3603a7a522025c55284c9ca0ab899626f86c9336ead2278445733db5e643e10fa93339be48ff1592bc6bcf2b68b4536951c600a0e6d1b5d5b0cdbdf85122560b431", 0xe9}, {&(0x7f0000000540)}, {&(0x7f00000006c0)="58b327f21946add0e0c31b173119ac7b4ceda64bbfbc8159462a8686f4303aeee1d7c9b54c4bd660fe192582950eb09a8bae632fb4e7313e3828773c09fec9b010373ca7be0ccc91233fffcfe03f287a50f2b4a970278097aed06e61a0f2da47b0bd02fcb45bf35e78c15cc4c5d6d163a6eaf921d8afc7d8376e847f403535371a24ce2a19c3898aca95be", 0x8b}, {0x0}, {0x0}, {0x0}], 0x6}}], 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl(r6, 0x8b2c, &(0x7f0000000040)) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x4, 0x3, 0xf1, 0x5, 0xfa, 0xd4, 0x5, 0x0, 0x4, 0x7, 0x4f}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x8, 0xb, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0xffff1000, 0x9000, 0xb, 0x1, 0xff, 0x7, 0x4, 0x4, 0x81, 0x0, 0x6, 0x5}, {0xeeee8000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x2, 0xd, 0x6, 0xf3, 0x8, 0x9}, {0x100000, 0x4000, 0x9, 0x9, 0x3, 0x9, 0xd, 0x6, 0x5, 0x9, 0xc, 0x4b}, {0x6000, 0x0, 0x4, 0x4, 0x3, 0x7d, 0x1, 0xfe, 0x4, 0x90, 0x1, 0xfc}, {0x8000000, 0x4000, 0x0, 0x9d, 0x3, 0x0, 0x0, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0x8000000, 0x0, 0x5, 0x7, 0x3, 0xa, 0x9, 0x54, 0x1, 0x2, 0x7}, {0xdddd1000, 0x5}, {0x2000, 0x9}, 0x40030000, 0x0, 0x80a0000, 0x300, 0x1, 0xa901, 0xe6e70c00, [0x3, 0x401, 0x7, 0xc4]}) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r7 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) sendmsg(r4, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000003940)=[{&(0x7f0000001200)="3e6b6ab06d78385c84f07eb8af372478711381e10a0155b15d291e54c4deb54d0a97ecc9dc6d42c787eccb83a910a7157e17593cfb6f0765f345a6a4bc9269086fcc666e248a00b39e1d75d9bc11abd35180bc7b10b0b9760bedb28ca5f1da1c48502563686fd800bdab2c5149f33e2365d7f9cc90f243cc2f5fabb6bd5e5e1dc8504719803e8ac66decfe2370b1c1a7", 0x90}, {&(0x7f0000002840)="49b2a6f81bf0f43136b32eb866ad6cebdf1dfe808185cb1fea4c1adc0f942118e62f9b0dde818704ced10e9ab3bd44eea9bf015d291471824d52729b7f5b379fdad017830d956f06e929a9f33eb0da450bb872bd07077c514871120ce6d198b36ab4979fd97d8b2e73c311b101f62f9a5efa08143afcd0f0b97c7c95e75ceefdc1ac4e35ae01ae19f055c6159a4247422fbe879d0b094bf47f8fa34166e63fe460e9aab0a9d33bc2367122f49ee2855ac70f62790b5f0de303731d8710112c5d15c0dbcff670014c277b3583b89a02c178b5f29833ac1d2f3edcdacd8765ce15b83bff42177e029b0c78b662fe54fd075f166e02fc00ae13f132796a19c5ffca679fcde8555eb9cf73e2dabead3a34cbdf01baf3660fa2ba8176548211c54f3ccba7641e9986ececccb05fe66156edb64df429f98e0458ceebe57136403c50c9615b466c47467ee318d675997854c498ef6a437c90e84727e27ca5af27e264916f453204144bb962b3f970e69f5e552fc28691411034e5f6967de70061df0e0e6715e82c457c455f01a656f5f778f0f443caf3aac5c86fa6560b70426581b692a301387745940bb4a67367a3da5a1d34fa6a9685bd678843e3b79424d8f723eeb107cb4dfb85c41916747badc57b7bdcca8ef83754e7eeb9fc5fa0adf5cc1be3cc790aa3f55ccb71f31c9127d81f5197f2257ec6c9034986441c1fcce016ae3903ce1ed4f642a752d0849b82d9e62c6deff2a0808773d3928b848eae0f2df7b0db8fbb30ff54c12e5f725070ca62ebb3a53a8064dc45b33e36bfef824b3950b9473f37f629eeb00e8c49438eff91836a499fe50dda3344a254c9971d2d17b10e4b95635e6c851a7dda11340c5d94ce44ae6dc5b48adf6ba4aeced5807ac1773c5f5d9370c29738b4c8a4189bbda6cdb7ce69721141b6ff93b17342d5512f18cac55a4e004035ce58cf00ffaef23fc6c14b15bf3f7fc1e65325b9804e74720e88e9920a70034895fc07f568951a079182e8ba1c054acb757e96920a630ab4793c8918c3a7390200df0ec2743aef3c0e4ba2541716ac41514a01965ef80e1704b2819cd6279905c680f76711bdae66717648664829330425abc6ed0cab930643422ecac196f089bffa0ec008464811ef7065cd27efdd1c83ff0b3a40d8d59977a3eea47c98e2dfe0bfb6ec21eed74940afcfb54234f6d702a24006b45d54ff5beb0a17883b6c9302b7842f87445862e390100589c96e0e3f9cf32e9346d1acd099ec128c5f3a76cc37540eb437d66878c431895722751b66239939db59d70e702f1215d5ba58bf991869260dba2a15c8073508d6dfe9875cb0d475af279057d036067d1ad38b38249a4c969f20accaa2d00e7ad31aa4e83f2b79eff5ca752816f997d0e76182902a7725ec8702dbfaa9bc077dc3896fa8a857ea7f04d9bca6cfb24cdacb5dabb7f5f7be683938532c4cfe1c1722948f2249a9378b8be9b5d254237d13b443aef81d3c20429bd1270ee30dd02602157ddf42bb59af6efd1364f5bbea6f711d4ca88d761c9d6219f726306ac86d6b469b2c6525dcd5b802048582447eed8a39779e2ad226dc888d43816d4bddaa9710ae3f268e3c13dd96724f13bf1fcb36881d2f3d9f0f449f5ea8bc6076d36d7768a4edb402f7449000702621bf04687f81102529f26dddc8daea5b79bacef823afed9c61eee101443ad2db24139d98674364040536c209810cbb5e9c7fa3cc32a4b2f6dcd36822161ae12306022ea1ea95b1dd9d08cf918ab37043e0e5620ae228178223dceb67c2d931f4c56f17567e03be3d017857e92df71883681ac80c1a4a1f910a1bb13eb6aeaa61b43590268825dd241e509fa021a5f146543cdd9a19fe0f2477b3ce2aa5a686a14b6c2694cd3b187ebe517eceea5e3a21af971001861d5f9df38f0c7a957131fcd8b2079f94054c61ad5c8ced93676876fbcaabc617bd3d9d49f0c032881b9487c39b169f4088996d39354e445925a861c0788c47ba13a4a02f49da501c75f7205f4e1b4f055a4785ad6aef19326749b1d5f175479d765812c76af8213b1cd9464683d157338f43f054e51d68469c9db56b34182762d552a4a0f965554f53b98cf789922f2b6c1b7e2e31e11d59ec825ae8378b86c35fb018003641aaeb62c2e172f3fa38c43ae7b19a8d02f822eceff9fbfa78ed35688b1beed6ed0711be4ee9b96f98e2dfa683432c56b1505e63784d32c2b063412c0e1c509740956b96ce083fec0dc5fc9c8e399c9ca0562d81a12f5d53eaea1d3ce4c1d6a9d082a8a60409d4fc72db5e31d45595b1f746b3e99d7efaf5ca29332327950be5e818d7483abd9979de5f09c6b65bd969335c04b02a779593c118b5be68db2893e4bd426c8a9d1daae8fd6507bc32174be63c69149b288a28bc8696a186adab8940a81b36edccf654dfff80151482e4ed4781af7f9e4692242d6967e1ce6a7e90f8faffb8ecb0748b004eaf80058f43af3d05b4f7101903cbf60998d05ad0812575711eca13a419eda00b07d484da0a6e140a85d5bd3b9b40ec1de8b2d7489f7c8e4733f4c8130d9992df319a6c9052b0df6f14cc1ceb685c3bca87919c5f169478c76b40877f4f60649af9f30aab242029ca49dcd9afeda2f7f0ed141fb2168703632f5e75669f74a968eddc7ae5392d93fd7ac02a6c249c088c267dc3df7046f0adf45e4a52b48b1c524f104846e6ab860abdc88f8ff97714f85e18eb2d0fa794d8028a5176e4bb278f53cd3d272ca761ce1b7d8e39352dac6e1bc4a4afc124c67cad9b1074da91c7518ce202340a3876d41084ace997a11af6bdbeb25e73a520d09d430661e1a8c36ef1004f089fcdd5521fa71aac2901d3bb62542134d91dff597aac176f681e1bfb63e056073a703ea7d9687be8958f343e815fe64b45038f4f275e1c04bf6c9720ad2ca22b2ebde5d4e3d1aa334825c0f5b5833e0d8ab8062ec2cd591474fa8c6736a310cb90f7b2d2b4ed9a70b7dae628faaa0b0ae266cb142d0bbd4ca3e8dbbc2ad5c5ba3f188026501e5871601762dfd079f768bc2635a4bbc8aae3dbbc7fe732a9c1ef3522974f116dab7d1564ee5d7f5d2d99de2641f1a18cd1cf7b073c1094ed5287c9b0fec15aa3baaec9cea645cc378e13d0fd29097520866236a7090aa0ef193961b86a79654b190a6aa5bbfb74b4770e1af2504e1d4a414663750024bd731a8cc7a6012580c7ba9bf4a3c0782d5adb789c838a18bfaa45385612ff39c21e863880bf5a696d16d4a29824a5b19cea8d01907b185adec634713d748eb55396e1cb398d843fcec5a5ae28edd5ff017c9620bc27b7e48dcf821ebf49747075ba1382bcc7bdba26d2e75ce06a042437907391f00669d09cc792b45d57e6edfc7e841679f67050eaea47588d8f05c36e021e6536ce5fb41a1832650bf3f7937a3d0a4a199b954971d8b4134017860679cf08d883aeea028f98ecfbdd7affe851890952b907f18ace7b3bbe7173f72924b49f680fcd132d20cf09592373379322461dc74163fba4ca9f8daafe3e342f8863cf8a7f52665fd8b09ece9686f80b0cbdfa5ebaa0fd0d17acda3bbd776d5e3da8a129345c7e03b0d13e9e571c3213466a81081ffe52a5954ee37a6602811afe67ce485c463b08047e8baf34607531939f1e9739075029de8bb0cb13586b4c7406f455705a5d2182d5268656ec5cc7ff518535ed927ad78ca87cab209304d6c496efeca0bc2137663d424f7afb6667058d98ae012fae423818b027439295684ce3caca1a084697af07ef07c424afb3f0112e4c221ba34385c54c7a8bcbe8ad17b84a94021fca5817caed280ecc7ebda9899a99cf36809ef02908a3d6c3a2f9925c94ecb9851c1e968bc7dea64d2f22feea6edf8190f4644b79406a718653080d1aafd9ee7607b76d758269677d2666d84a5204ad17a177cd832db33384e477693957d885fb929e9ae87c5642f988024b8f306bda321dd9a76b80086dfd62fe4ad47d52064907c8c61cb01a21700d210a18a13000c6c0a1531e89f554ef5beae60bae388a89556d731fd11341137c28c08f92bcfb717fdde93c701b2a17658921dbc921b978aa3981d1e0d3be1fccc7f54ace6facfa258f4e3be0db741fac0352928f28291a898c096d8aed9cd148e9fe2eae04579f47145c54b518f49924b12f8632ea74da00301307e30cc4003c5e682a3b075bbfd9f02afe26cd9312f1b64e1c1b8ba039061d6682dd65fbbcb19f7817730de229d60709dee3546eac119e241c50a4ade1440e7c7edf4c5e681acd451764c87483bf798f2188c380ed84a036e122d6b39719300fb97f0b2e326d3501728c11e076856019d5a7eec93a22acb7ebf84038ee5f3ea8b1c5a47ba4918445679cbfb501edd26853c7af59559f9684d9a2218267269852f1ed1f7c4cfb68a8e16a68d987976d1a4e5a8f8baf72b9d161b9c6197a7530ae27dbc8375c2aabf3a3e4e81f0c1e4088654c47d53f3aca2fc3922bb6e8022a0dd9ea143bea5140a37129c83079446718ba389d45071ebdeff3841f5eb4c0cae982db0c0450612302b4bc207cefb18cd88fb3039fc8d700f45717dbc37df7402e6d4ea1c9fa7af644e6ca1dba4e7c3f3616aa20f89124fe8243e18d1629c1850ef9e5a8791d6001b0526973c05025cad4c9f96a174715318690ac66e73fdcd7437d4a978fffaa2e2ad17bf20c34360a5a185d55ced02cff92955e4596fc951bece0b44e3bf95c219725ca79d02c52abb7e91b362acfad9e9ff4418a35bdb85a48ebbc2e2d7fbc78e0d7de4f3823dff31c80a520a361c464a1ffbaef636b26315596a49d8813b1be4902cc93f837531c9b2f2f48c5995a757f71f5ea3127d5e45c397f6eb7e36044e2d0f393f27689564996cf3f0497d5384c51a9b45186e7b887eace79b1c230de4c81b07f91de91aa075a9d05236ada82fecbd576982729325eb96271236c90cc4bc3c6c3d5e90c457b0e48c2c175fdcc89d30ff43744db86acc00446f2407a232d3147392c5e3e1ddac411da429dcf8f88e23dde4dc08138d1b7d5bd6b53a57e5bc2970825c12f07d56a4adeaa81b5f94b455c1b2b13519c8c377e5911806fa51606a3416f6c049ef9d03522fb4c97813ee8ca785b153bcf2a9735799f449df3b603bcb60ef536487bd1ae3d1cb220f35a02ad91e75154efad9c8bd4531097c5d72e109a66e9cc3f06fd846dd7abc069a9414305815875fccd60d3abed571ea0dd1c30abeb1efa3d3823e8d8c3567ae51e85f176fb180fdc4736b54c8cffff7d19b6ba833be9f30106e1795928237b023f0548c9fa060f40d2e222d5614e15cd26e2b3f583b767b197aa0038b05d37bf90deee7dabd814191f662284ad13b6a03db29c406e7bacf340e55e4a4e10fd6917b150a6eded2828a0b5d1162ba3c0d1444402bacdff4d59c885bb758642549ad5729d5b851d025d74240b13d82478f9df15621769a75287b3375876ea367ef2e9f893b96b30f21297df78ae405b4d47d4a75b8ac980df0f9823014dc1b57523836269a4f5eacc7ac5c5683d3cc7e04ac4d5f5b9c51d5bae070bf15aa580102a5b3573a797fb05b820bb4bbf6634cd588e73bb1332d4042de5e996fd7b9af6bd941ea66669a4794228f452165880cf5bbcfdd5299ada0b2c5ced5759ad5163a17dd3a61eef611a4998aa7e026ddae1c4050c9841004d22aa6f022be86fbcc3953f1bcde51d589bc4ea1718b71c11a2198f8372e0f4352e5dafefa6271c824b03f2e766edc6553433de0e5f0f0c7f", 0x1000}, {&(0x7f00000012c0)="c731e1857f982f823ebbf5800526bf9d1abb9be2f632ac122af6dfe1160e9f5e9c36734591627e6cbde6cd89d6f101cdef0a9a5c452eff48b87e4bb76459ab233131c018a94dcdd6a9b9bb4c0febd52a1185a94b4ab8b1c76ee06ca16633d1e51b6b8f6625f2a2e410a312bff2c02b8f20f020cd17bae8e6856403da15252630fe77e2149b9aff8855dd470cfeb50b4058ec16296da32ec41b633642188dacc151d4b55ca0ecf413d6316ec97873295e6a8ebc7aeec9b9c8e7c2aa6a44163acf8e6e0c07bba120471d1756ae2e438b0648111a9a764af00a42ad183f8e5ca1b16fc7b8041795d3e8d3efdc", 0xeb}, {&(0x7f00000015c0)="c19f80fa6df903117694643b33261c0065b9ac6ba2d7ba573a155868883388812e4f34912be794c06a12a5131d4395d34da2510f3e524aa7ca561263a73d18d69e7e4d19e14c59aa82e58f4294e040772fb4692f781608386ee4a602cc5bb5ce705d73d71fae40d1ee83a7bfe55f0ce12f1a2dcb53a999a4813683e366aff50108448377f0ac688266c6f0247c3737ec9f41f1385ac81f9f6d1f3ffc4f3958070f1fc4b7e21207ad31de01041ea2594689b39ce3b597087d3c52c66824ebb73c110f2bf6caa0281ab2ba7c146e35a9c237ff532454d9d69dd0c4ba41672a7a6e7170433506070d74c1dc92dd7e8a7b86d2ffc15c43ef9f", 0xf7}, {&(0x7f00000016c0)="a14028b2354cf1bf58d6305d7d59bdc83ae9475dddf1b4be74aa944705306d64ebbde8848abd7d395fca5a04f104f0e4935ad662154d863ae87592790a3f306c3d8e83d9072a12686f362c96ee0e91e16fca7fb9e0326622f02e0d167ab759718bb65e162c4369161b57f5ce4a3b177d43b60f4c4affba388e555d9e4670542d3e9c40eb85cc7e49d5c8ae49db45b6ab2c62c47dbe955fa57af7bc810fe7ef24adbdae522838b98e4b8b949ff61fe7269d8ab3b392042a405085d08c60d484db98bd502e8e2f709b38462fff4fb945ab32330a8b1e89222c7a", 0xd9}, {&(0x7f0000003840)="92cbfec25e8ed360f5d55258f074f16b93bf845629bd1b7c50a19f6fe8254aa1a10cfc17badae97c4086c72bebd885b192ce684b3cd7824140e20d43940d32d049726d93faa8b3bfd1074f1e4d30258211bef9542696282d9bc58d0ca76cd215a5124b0dfbea0804a6a153cf4b030f08c3fa49721a55ce1136a8dc8230283b442bc2f765d04cd816b1a1d1e71c5d271127f14cbeacbfdd7a1792fd1682bd2eb02584516fe5ccea98ce794eeec9ba3cf25fb183fa405be0d6bed36fd059131bf8f1a59cc90fd4a0dc535d13acbe5b43152c92cc7e66419eeec957ed23bec4a19dd865048e296ae6688203619e186f33", 0xef}, {&(0x7f00000017c0)="572c9a7d1c5d10bd499d678cefc9a3d1efc98e98e2008c27cda5a36a67c572f992efe6dbc50b4c951743914a3c100b01dec35278f6748360c06327cb38514fd3ebfe1cd87d43c3ca39640fa16f8d2f", 0x4f}], 0x7}, 0xd0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) ioctl$FS_IOC_GETVERSION(r5, 0x80087601, &(0x7f0000000540)) r8 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 3m9.317064504s ago: executing program 0 (id=841): mkdir(&(0x7f0000000380)='./file1\x00', 0xa) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180), 0x28800, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0/../file0\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x2101091, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000140)={{0x1, 0x1, 0x1018, r0}, './file0\x00'}) 3m9.189905698s ago: executing program 0 (id=843): syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000002500010324bd5502ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x20004888}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000600)=""/244, 0xf4}, {&(0x7f0000000040)=""/222, 0xde}, {&(0x7f0000000800)=""/222, 0xde}, {&(0x7f0000000b80)=""/184, 0xb8}, {&(0x7f0000002bc0)=""/4096, 0x1000}, {&(0x7f0000000240)=""/171, 0xab}], 0x6}, 0x22120) recvmmsg(0xffffffffffffffff, &(0x7f0000001940)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x4}], 0x2, 0x0, 0x0) 2m54.143893208s ago: executing program 35 (id=843): syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000002500010324bd5502ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x20004888}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000600)=""/244, 0xf4}, {&(0x7f0000000040)=""/222, 0xde}, {&(0x7f0000000800)=""/222, 0xde}, {&(0x7f0000000b80)=""/184, 0xb8}, {&(0x7f0000002bc0)=""/4096, 0x1000}, {&(0x7f0000000240)=""/171, 0xab}], 0x6}, 0x22120) recvmmsg(0xffffffffffffffff, &(0x7f0000001940)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x4}], 0x2, 0x0, 0x0) 6.380591989s ago: executing program 7 (id=1902): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f000014f000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x8, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f00000000c0)=@vmx={0x4, 0x0, 0x2080, {0x4000, 0x6a000, {}, 0x0, 0x3}, {"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", "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"}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) r4 = socket$kcm(0x11, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14}}, 0x68}}, 0x800) sendmsg$NFT_BATCH(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWFLOWTABLE={0x30, 0x16, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x4}]}], {0x14}}, 0x58}}, 0x24040884) sendmsg$kcm(r4, &(0x7f0000000700)={&(0x7f0000000080)=@phonet={0x23, 0x8, 0x0, 0x4}, 0x80, 0x0}, 0x8000) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) chdir(&(0x7f0000000140)='./file0\x00') r6 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r6, 0x0, 0xf, &(0x7f00000000c0)=0x4, 0x4) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) 6.277298633s ago: executing program 7 (id=1904): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x40000000015, 0x5, 0x0) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) recvmmsg$unix(r1, &(0x7f00000077c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x63, 0x0) sendmsg$nl_generic(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001080)=ANY=[@ANYBLOB="140000002100010326bd7078fadbdf2505"], 0x14}}, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x40200, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(r3, 0x3b88, &(0x7f0000000040)={0xc, 0x0, 0x1, 0x204}) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040), 0x400000, 0x0) close(r1) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f00000001c0)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x4, 0x2, 0x0, 0x1, 0x1, 0x8}, 0x20) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000b40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r6, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000a80)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000d8e7976564c9c53808000300", @ANYRES32=r8], 0x30}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000080)={'macvlan1\x00'}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f00000002c0)={'macvlan1\x00', @multicast}) close(r4) ioctl(r2, 0x8001, &(0x7f00000010c0)="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") r11 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r11, 0xc004500a, &(0x7f00000000c0)=0x6) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), r12) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000000800)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMKSA(r12, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000840)={0x1c, r13, 0x1, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r14}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8051}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x88, r13, 0x100, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_STA_WME={0x44, 0x81, [@NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x1}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x1}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x5}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x1}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0xba}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0xe}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x29}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x5}]}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x8}]}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x22, 0xac, "9bc69199850fde469db12e37aab4bcef8fa6eb688aea50f1e6543035ef94"}]}, 0x88}, 0x1, 0x0, 0x0, 0x44050}, 0xc800) 6.103919655s ago: executing program 7 (id=1907): r0 = socket$inet(0xa, 0x801, 0x84) r1 = socket$inet(0xa, 0x801, 0x84) listen(r1, 0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x14, r3, 0x1, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x840) listen(r0, 0xfffffffd) r4 = socket$inet(0xa, 0x801, 0x84) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f0000000040)=[@in6={0xa, 0x4e21, 0x6, @local, 0xf}]}, &(0x7f0000000140)=0x10) r6 = socket$inet(0xa, 0x801, 0x84) listen(r6, 0x8) listen(r4, 0x1) r7 = socket$netlink(0x10, 0x3, 0x4) syz_usb_connect(0x3, 0x8c6, &(0x7f0000000180)=ANY=[@ANYBLOB="1201500236e47e2082055c2955d4010203010902b408048006a00309047f0e01ff2dde700a2401010080020102081305052f"], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x54, &(0x7f00000001c0)=ANY=[@ANYBLOB="5403ed5cc6"]}]}) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r8, 0x3) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r7) writev(r7, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) 5.048317814s ago: executing program 6 (id=1912): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @empty, 0x4000006}, 0x1c) listen(r1, 0x6) r2 = open(&(0x7f0000000040)='./file0\x00', 0x400000, 0x80) ioctl$SIOCAX25DELUID(r2, 0x89e2, &(0x7f0000000100)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0xee01}) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$FUSE_DIRENT(r5, &(0x7f0000002540)=ANY=[@ANYBLOB='X\x00\x00\x00\x00\x00\x00\x00', @ANYRES64, @ANYBLOB="07000000ff"], 0x58) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000140)={r0}) close_range(r6, r3, 0x0) write$FUSE_IOCTL(r4, 0x0, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000200)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) r9 = dup(r8) write$UHID_INPUT(r9, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) bind$bt_hci(r7, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r10 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x42000) ioctl$NBD_SET_SIZE_BLOCKS(r10, 0xab07, 0x8000000000000000) accept(r0, 0x0, 0x0) 4.166365259s ago: executing program 6 (id=1919): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x101042, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r3, &(0x7f0000000040), 0xc) r4 = socket$qrtr(0x2a, 0x2, 0x0) read(r3, &(0x7f0000000180)=""/119, 0x77) connect$qrtr(r4, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) writev(r4, &(0x7f0000000340)=[{&(0x7f0000000380)='Q', 0x1}], 0x1) ioctl$KVM_CAP_DISABLE_QUIRKS(r2, 0x4068aea3, &(0x7f0000000140)={0x74, 0x0, 0xa328fa6779ef7f62}) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @empty, 0x3}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) shutdown(r0, 0x2) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000880)={@in={{0x2, 0x4e21, @private=0xa010102}}, 0x0, 0x0, 0x1, 0x0, "bb353738cb473fc7c9f1cf53b6a7b4e24740bd4c0b42a21d7214bf92594925208a0e2f964e654dc534a6324d4993fcf19b2df3ee818a118a7c49462189316d556d2ccd00"}, 0xd8) sendto$inet6(r0, &(0x7f0000000000)="e9", 0x1, 0x20008045, &(0x7f00000001c0)={0xa, 0x2, 0x40, @empty}, 0x1c) 3.186889445s ago: executing program 6 (id=1928): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$inet_tcp(0x2, 0x1, 0x0) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000280)={0xa, 0x4e22, 0xd, @loopback, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) shmat(0x0, &(0x7f0000001000/0x3000)=nil, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$inet6_int(r1, 0x29, 0xb, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) mmap$dsp(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x13, r2, 0x0) close(r1) r3 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) copy_file_range(r3, 0x0, r3, &(0x7f0000001200)=0xffffffffffff6f95, 0xa00, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) write$cgroup_pid(r4, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x9, 0x0, 0x0) shutdown(r1, 0x2) 3.051140573s ago: executing program 7 (id=1921): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, &(0x7f0000000300)={0x40, 0xd, 0x37, "4191ad4d0603782e57ebbe7f351eaed6925a162e8d1965df2a8cbd64877b62527a334f1c16d714336fc536c4dea176a8393c5924fa1120"}, 0x0, &(0x7f0000000440)={0x0, 0x8, 0x1}, &(0x7f0000000480)={0x20, 0x1, 0x6f, "8916fb773afd8afc2e4272002978927e0df3bfb99dd470d4a5974baa8c8163e2e499d10104a1ade2e555ae762c95a4903aec9b519409421723f608e0c91b0052c74daf81cc1d15607005df4b21d69838c27914f2b1367249b5f3e7cd788501683b63975bf7b0176cefa7464d5a22cc"}, &(0x7f0000000500)={0x20, 0x3, 0x1, 0x3}}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001c00)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="dce16a7da073bd6d70bc"], 0x0, 0x0, 0x0, 0x0}) 2.496679068s ago: executing program 7 (id=1929): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x181041, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r1, 0x3b85, &(0x7f0000000100)={0x28, 0x6, r2, 0x0, &(0x7f0000000440)="d9", 0x1, 0xe}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f00000002c0)={0x28, 0x2, r2, 0x0, &(0x7f000000b000/0x4000)=nil, 0x4000, 0x3}) ioctl$IOMMU_IOAS_MAP(r1, 0x3b85, &(0x7f0000000040)={0x28, 0x2, r2, 0x0, &(0x7f0000000140)="e6", 0x1, 0x4a}) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000002e00090026bd7000ec7dffff04000000"], 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x0) 2.378684929s ago: executing program 7 (id=1931): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000540)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e22, @private=0xa010102}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r2, 0x84, 0x78, &(0x7f00000001c0)=r4, 0x4) pipe2$watch_queue(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r8 = timerfd_create(0x0, 0x0) timerfd_settime(r8, 0x3, &(0x7f0000000000)={{}, {0x77359400}}, 0x0) flistxattr(r7, 0x0, 0x0) read$watch_queue(r5, &(0x7f00000003c0)=""/189, 0xbd) r9 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io$printer(r9, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r9, 0x0, &(0x7f0000000080)={0x1c, &(0x7f00000000c0)=ANY=[], 0x0, 0x0}) r10 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x6) ioctl$KVM_SET_SREGS2(r10, 0x4140aecd, &(0x7f0000000240)={{0x0, 0xf7f8a000, 0x9, 0xa, 0x80, 0xf8, 0x4, 0x8, 0x6f, 0x40, 0x80, 0xb6}, {0x0, 0xeeef0000, 0xd, 0xfc, 0x4, 0x58, 0xd, 0x4, 0x2, 0x3, 0x80, 0x2b}, {0x9000, 0x25000, 0xf, 0x7, 0xe6, 0x8, 0xf2, 0x0, 0xe, 0x3, 0x8, 0x80}, {0x100000, 0x41000, 0x3, 0x2, 0x5, 0x8, 0x4, 0xaa, 0x5, 0x7, 0x1}, {0xeeee8000, 0x0, 0xd, 0x7f, 0x0, 0x2, 0x0, 0x0, 0x9, 0x4, 0x29, 0xf9}, {0x10000, 0x7000, 0x8, 0xb5, 0x6, 0x3, 0x0, 0x3, 0x0, 0x80, 0x7}, {0x9000, 0x1, 0xe, 0x10, 0xfe, 0x3, 0x8, 0xd6, 0x1, 0x5, 0x47, 0x8}, {0x200000, 0xe000, 0xf, 0x3, 0x1, 0x3e, 0xa, 0x1c, 0x9, 0x7, 0x7, 0x4}, {0x25000, 0x400}, {0xffff1000, 0x3}, 0x0, 0x0, 0x54000, 0x400a2, 0xe, 0xa000, 0xffff1000, 0x1, [0x1, 0x8a, 0xfffffffffffffff7, 0x4]}) ioctl$KVM_SET_XCRS(r10, 0x4188aea7, &(0x7f0000000040)={0x6, 0x7, [{0xabfe, 0x0, 0x9}, {0x6, 0x0, 0x8}, {0x200, 0x0, 0x2}, {0xe2}, {0x738a, 0x0, 0x9}, {0x3d, 0x0, 0x9}, {0x8000, 0x0, 0x6}, {0xfffffff7}, {0x10001, 0x0, 0x2}, {0x6, 0x0, 0x5}, {0x9, 0x0, 0xfffffffffffffffe}, {0x4, 0x0, 0x1}, {0x2, 0x0, 0x8}, {0x2, 0x0, 0x5}, {0xfff, 0x0, 0x9e}, {0x5, 0x0, 0xf}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r6, 0xc0f85403, &(0x7f0000000580)={{0x1, 0x3, 0xff, 0x2, 0x80}, 0x0, 0x0, 'id0\x00', 'timer1\x00', 0x0, 0x1, 0xb4, 0x9, 0x8}) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r12 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r11, &(0x7f00000011c0)={@val={0x8, 0x800}, @val={0x4, 0x1, 0x0, 0xc7b6, 0x9, 0x2}, @ipv4=@igmp={{0x5, 0x4, 0x0, 0x26, 0x28, 0x67, 0x0, 0x38, 0x2, 0x0, @rand_addr=0x64010102, @multicast1}, {0x12, 0xf, 0x0, @broadcast, "c0cb8b513b813b2528581496"}}}, 0x36) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000200), 0x1000810, &(0x7f0000000300)=ANY=[@ANYBLOB=',msize=0']) ioctl$XFS_IOC_DIOINFO(r0, 0x800c581e, &(0x7f0000000200)) 2.272546758s ago: executing program 6 (id=1933): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r2, 0xc040aed5, &(0x7f0000000240)={0x0, 0x107000}) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) pipe2$watch_queue(&(0x7f0000000180), 0x80) ioctl$SNDCTL_DSP_SETTRIGGER(r4, 0x40045010, &(0x7f0000000080)=0xffff8001) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) r6 = openat2$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x8000, 0x14, 0x3}, 0x18) ioctl$NILFS_IOCTL_GET_SUINFO(r6, 0x80186e84, &(0x7f0000000280)={&(0x7f0000000300)=[{0x5, 0x10}, {0x9, 0x8, 0x1}, {0x5, 0x0, 0x1}, {0x7, 0x1b5d}, {0x7, 0x5}, {0x3, 0x2, 0x2}, {0x7fffffffffffffff, 0x0, 0x1}, {0x9, 0x3}], 0x8, 0x10, 0x1, 0x1}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r5}) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000000)={0x10002, 0x0, &(0x7f0000000000/0x1000)=nil}) 2.136880206s ago: executing program 6 (id=1935): syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000040)={0x0, &(0x7f0000000100)=[@wrmsr={0x65, 0x20, {0x29f}}], 0x20}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)=[@code={0x1, 0x81, {"0f22e5c744240060420000c744240233d8cecbc7442406000000000f011c24668f38896810c4027958b20000000064449966baf80cb83284af80ef66bafc0c66ed66baf80cb8cc07ff8aef66bafc0cb8d4000000ef48b8f8000000000000000f23c00f2135030009000f23f8450f2244"}}], 0x81}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e20, 0xeb, @remote, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000580), 0x3) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) sendmsg$inet(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000b80)='n', 0x1}], 0x1}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x9, 0x7a8, 0x6}, 0x14) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x304}, "080200", "8a36c47a9c625dfaf08ace81c500", '\x00', "362d3017f069109d"}, 0x28) syz_genetlink_get_family_id$fou(&(0x7f00000011c0), r3) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0xc45, 0x9, 0xfffffffffffffffd, 0x10000000, 0x8, 0x3, 0x4002004c2, 0x3, 0x9, 0x0, 0x4, 0x80, 0x89, 0x0, 0x8, 0x8d], 0x100000, 0x240046}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.193458675s ago: executing program 6 (id=1939): r0 = syz_usb_connect$uac3(0x5, 0x8c, &(0x7f0000000140)=ANY=[@ANYBLOB="12015002000000086d04f00840000102030109027a000301ff4007080b0001012430020904"], &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0}) r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x12ba, 0x100, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xe8, 0x1, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x7ffd, 0x0, 0x1, {0x22, 0xeb}}, {{{0x9, 0x5, 0x81, 0x3, 0x200}}}}}]}}]}}, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000200)={{0x100000, 0x26000, 0x9, 0x8, 0x81, 0xfa, 0x0, 0x1, 0x9, 0x7, 0x10, 0x8}, {0x8000000, 0x25000, 0xc, 0x9, 0x7, 0x1, 0xfb, 0x5, 0x5, 0xc, 0x9c, 0xc}, {0x2, 0x40000, 0x9, 0xe, 0x0, 0x8, 0x4, 0x3, 0x6, 0x8, 0x4, 0x5}, {0x4, 0x1000, 0x8, 0xb8, 0x2, 0x6, 0x3a, 0xc, 0x6, 0x2, 0x1, 0xbf}, {0x8080000, 0x10000, 0x8, 0x4, 0x1, 0x4, 0x7, 0x0, 0xc7, 0xd, 0x0, 0xc}, {0xb000, 0x7000, 0x10, 0xcd, 0x2, 0x9, 0x3, 0x5, 0x7, 0xf3, 0x9, 0x2}, {0x41000, 0x60000, 0xc, 0xe, 0xa7, 0x40, 0x4, 0x2, 0x5, 0x8, 0x1, 0xff}, {0x1000, 0xeeef4000, 0x1d, 0x80, 0x1, 0x4, 0x3, 0x29, 0x1, 0xf4, 0x9, 0x3}, {0x58000, 0x5}, {0x80a0000, 0x11d8}, 0x40010000, 0x0, 0x60000, 0x10000, 0x5, 0x2001, 0x4, [0x598, 0x7, 0x0, 0x1]}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_usb_connect(0x2, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000001300)=ANY=[@ANYBLOB="0015f700000004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$sierra_net(r2, 0x0, &(0x7f0000000400)={0x1c, &(0x7f0000000100)={0x40, 0x31, 0xd, "91088f7006dc47b9a31e9a0eeb"}, 0x0, 0x0}) syz_usb_control_io$uac3(r2, &(0x7f0000000a80)={0x14, &(0x7f00000008c0)={0x20, 0x8, 0x91, {0x91, 0x3, "dc0260834e2fc993689fc87485d824fb66e1e05f47c149b7b8fe57c915d3609fd103aba30ec8401bf5f6cfa863f3b3aa4211a622c762ca150612cdc4e06ae086996a7dd68947eca5c5f56dda14fbd05d9845f7c261efa5fd7a5d1b2179f9ef5a794a5bda7082378292e2cae7dde76a0882e4da6b9c8cdf222b55627e9d995e64c4ca4ab291bd5465dd88b6c3547a78"}}, &(0x7f0000000980)={0x0, 0x3, 0xe5, @string={0xe5, 0x3, "de18d4be22d4619091d164645a2d343cfca55763b275c22d16acf36918606ddc30c95c56424e36498d26fdabe67f5c38f62bde5fb9073a422567cb784e85ef4db9d87d32d5c05a66f1b023439faddec1374c650d34c979ea4d640a391997a3f4cb1814c08d815f76fa877e1116778cc866d674f53016389ed830a78e4185540ec644dde54471df42dd2b75b9ca97b6288d91ac76697bc69faf872c9111b4a4e0b0bd8e7674c9789f90ceb1dd9f0854eabcb17eeafe621370ca7f768333b7ee7421274a908896c3dfb5e3c1338af8c9bb6237e4e5c1634603ff5a3e00b8828762d03cd9"}}}, &(0x7f0000000d80)={0x44, &(0x7f0000000ac0)={0x40, 0x1, 0xfa, "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"}, &(0x7f0000000bc0)={0x0, 0xa, 0x1, 0x81}, &(0x7f0000000c00)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000c40)={0x20, 0x81, 0x2, "c0fa"}, &(0x7f0000000c80)={0x20, 0x82, 0x2, "2f83"}, &(0x7f0000000cc0)={0x20, 0x83, 0x3, "aa16d0"}, &(0x7f0000000d00)={0x20, 0x84, 0x3, "bd7ca3"}, &(0x7f0000000d40)={0x20, 0x85, 0x3, 'mU\f'}}) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2e) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) r4 = syz_usb_connect$uac3(0x2, 0xe0, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x499, 0x102b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xce, 0x3, 0x1, 0x80, 0x0, 0x2, {0x8, 0xb, 0x1, 0x1, 0x1, 0x23}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x7, 0x51, 0x200}, [@processing_unit={0x5, 0x24, 0x9, 0x4, 0x1}, @source_unit={0xc, 0x24, 0xb, 0xb2, 0x2, 0x7, 0x9, 0x8f75}, @selector_unit={0x9, 0x24, 0xc, 0x1c, 0x4, "e243c327"}, @input_terminal={0x14, 0x24, 0x2, 0x5, 0x204, 0x2, 0x3b, 0x9cfe, 0x5000, 0xf, 0xfd53, 0x969e}, @processing_unit={0x19, 0x24, 0x9, 0x3, 0x1, [0x1, 0x3, 0x0, 0x2, 0x3]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x2}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x4, 0x7f}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x5, 0x0, 0x8, {0xa, 0x25, 0x25, 0x7, 0xb, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x1, 0x2, 0x7, 0x8c, "6212a1", "2105"}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x8d, 0x9, 0x9, {0xa, 0x25, 0x25, 0x2000000, 0x0, 0x4}}}}}}}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x250, 0x9, 0x6, 0x8, 0x20, 0x2}, 0x145, &(0x7f0000001000)={0x5, 0xf, 0x145, 0x3, [@generic={0xa7, 0x10, 0x2, "04f38f6652c251f0988adfdd676ce9eb20f4d811180abb66abe7057aedd0ef6e82a48d4827a2ffba333701189ce3f671ab1c3e7c6104381e9a31b5250298b3398fa245f8815f80940eeb84d4c05e417c2142da359c08ba78b700408a0f9939a424517e2af0bce4b823d379c5d59873a48a39cbc4370f4850fcc84b366a294381d9290dca211c982ec35829d6c85ce349c1ee402b52cfec380e78f5e071de372f1ad8d9a3"}, @generic={0x85, 0x10, 0x2, "b89a7b5ee5f0006f551230ba58482977b81f7453c45e1cedf4ee3d16f431e133a3b1268f9a5d206e27eb835cf509f4c63a518627b38661f4996336511c5bcf052fd775c4f82f6a5bccb8c20b24bee3cf50d9f86ed1e4cb60cb40beeae6c0007496c11bd051375b3d72ddab1e90babac2b41780b8b52f6bb67b9526885ec869940250"}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "a68d88a863e549226696d50980581529"}]}, 0x1, [{0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x4c0a}}]}) syz_usb_control_io$uac3(r4, &(0x7f0000000480)={0x14, &(0x7f0000000340)={0x20, 0x9, 0xf6, {0xf6, 0x0, "1d648aa832f34f4bdbab71916913e1c9a2fc329ed3b5371db862a70c5891fb21962767de9c05767b6c106f23c91400def4dc56d3858eeb058c624a0ff7e37feec7f214f8ab1434fcc8edba482496f5f5b72ffef185d44432fdfb06da0dca09cf3b7e881724719474e27ddd26ad63733cad096fda1a95c153d93587f09969329d97ad3b3ecdd90afd3d47f516a2ff8dac23e2df0b81097b1224d200a2e013f231e7b4674a8aeb716c4103577d24af636a63971bf8f99dd41f5bbbf66d7e7b074f1dd7a8cf850089343f06738ae13f989fa976e92487a0800bb06eb2bfb9d4251f39cbf10a16f60adc3f51f5fcbfb4b70e3ee375ad"}}, &(0x7f0000000440)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc0a}}}, &(0x7f0000000840)={0x44, &(0x7f00000004c0)={0x0, 0x1, 0xea, "27b1bf4f20b68be96544580ae5cd373148222838f22e6cd7ec530295aa65c51a6a684a80003fd4ff4e2e3490d11875e0a574f0c1a69b189c3449806f08998a817a6cde249bff8f6d5fcb2e5efde4cb090c0ee0f875afd07d0470a4ffee600879d27a249d059441020ae8d7627e88d08ed3f04482154548942862b0a22214a937064c5b950785a855b772570b7dbbef1be532d950b08f5a00cd37337b18afa65a9a566cd4b7bf5d14aacb62124c3b8a5bc77f72bdafc54e271b8ad7ebdf57158bc80e98d1eb9e60aeab014466422da56fb11fc2626994d605d3f12f9d9cabe8941a6ee6bfcf1a89da55f7"}, &(0x7f00000005c0)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000600)={0x0, 0x8, 0x1, 0xa}, &(0x7f0000000640)={0x20, 0x81, 0x2, '7R'}, &(0x7f0000000680)={0x20, 0x82, 0x1, "98"}, &(0x7f0000000780)={0x20, 0x83, 0x1, "f2"}, &(0x7f00000007c0)={0x20, 0x84, 0x4, "bda8b736"}, &(0x7f0000000800)={0x20, 0x85, 0x3, "5cdddf"}}) syz_usb_control_io$uac3(r0, &(0x7f0000000740)={0x14, 0x0, &(0x7f00000006c0)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) write$uinput_user_dev(r5, &(0x7f0000000b00)={'syz0\x00', {0x5, 0x7, 0x3, 0x7}, 0x3e, [0x2, 0x9, 0x0, 0x1, 0xc, 0xea45, 0xd, 0x1, 0x0, 0x0, 0x800008, 0xc, 0x3, 0x0, 0x1, 0xb, 0x93f, 0x7fffffff, 0x51, 0x5, 0x803, 0xfffffffa, 0x3ff, 0x2, 0x9, 0xffffffff, 0x3, 0x1, 0x8, 0x6, 0x9, 0x7, 0x9, 0x4, 0x8000, 0x1, 0x5, 0x4, 0x10000, 0x4, 0xa, 0x8, 0x0, 0x8, 0x0, 0x2, 0xffff, 0x6, 0x939, 0x5, 0x4, 0x2, 0x4f, 0x40004, 0xfffffff7, 0x7fff, 0x6, 0x5, 0x2, 0x56f00ca9, 0x5, 0x2a, 0x1, 0x22], [0x1, 0x9, 0x9, 0x1, 0x5, 0xe, 0x800, 0xc, 0xfffffffa, 0x2329, 0xfd8, 0x1, 0x5, 0x5, 0x0, 0x24e, 0x1, 0xfffffff7, 0x2, 0x3, 0x5, 0x9, 0x82, 0x4000008, 0x1, 0x40, 0xa3, 0x8, 0xffffffff, 0x5, 0x10000, 0x1, 0xffffff00, 0x7ff, 0x26, 0x7, 0x0, 0xa9, 0x101, 0x10, 0x2, 0x7, 0x7, 0x8, 0x5, 0x8000, 0x800, 0x5, 0xc5, 0x6, 0x1, 0x9, 0x8, 0x3, 0xfffffff7, 0x3, 0x24b, 0x1fd, 0x2a0, 0x5, 0x6, 0x8, 0x7, 0x80000007], [0x2, 0x9, 0x1a9e1bfa, 0xfffffffc, 0x8, 0x6, 0x5, 0x8005, 0x0, 0x1, 0x2, 0x7fffffff, 0x8000, 0x4, 0x1, 0x5, 0x4, 0x2, 0x2b0, 0x5, 0x97f82544, 0x8, 0x0, 0x9, 0x5, 0x5, 0x4, 0x9, 0xc93, 0xffffff3c, 0x8b2, 0x7, 0x0, 0xff, 0x8, 0x2, 0x4, 0xb, 0x9, 0x6, 0x4007, 0x7c13, 0x9, 0x1, 0x7, 0xff, 0xe, 0xf3, 0x4, 0x8, 0x0, 0xffffff00, 0x100, 0x7, 0x2, 0x0, 0x9, 0xdd, 0xfe83, 0x9, 0xc3, 0x7751c64, 0x800007a3], [0xb, 0x3889, 0xffff9a7f, 0x200, 0x3, 0x2, 0x3, 0x1, 0x5, 0x4, 0x3, 0x1f, 0x3, 0x6, 0x6, 0x2, 0x9, 0x7, 0x2, 0x66608000, 0x9, 0x807ff, 0x6, 0x5, 0xa476, 0x5, 0x0, 0xffff, 0xd, 0x0, 0xfff7ff81, 0x5, 0x10001, 0x61, 0x10, 0x1000, 0x8, 0x100, 0x1, 0x20000000, 0x8, 0x1d, 0x4000b329, 0xec000000, 0x2, 0x1904, 0x4, 0x9, 0x8, 0x7ff, 0x80, 0x5, 0xfffffffb, 0x7, 0x6e79, 0x8, 0x10000, 0x9371, 0x4f89, 0x7, 0x580, 0x10001, 0x80, 0x8]}, 0x45c) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r5, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmmsg$inet6(r6, &(0x7f0000019680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20004855) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000f80)={{0x1, 0x1, 0x18, r5, {0xaef}}, './file0\x00'}) setsockopt$inet6_tcp_int(r7, 0x6, 0x24, &(0x7f0000000fc0)=0x7e, 0x4) syz_open_dev$hidraw(&(0x7f0000000e00), 0x7, 0x200100) 971.640955ms ago: executing program 5 (id=1942): r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x4e20, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000e0ff00000000000000bd0000000000000000001300e4ec010000000040000000000000000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000067ff0000000000000005"], 0x310) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x321}}}, 0x108) r1 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000600)=""/128, 0x80}], 0x1, 0x111, 0xf5ffffff) 970.9547ms ago: executing program 5 (id=1943): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff}, 0x800) close(r2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000540)={0x1fd, 0x0, 0x58000, 0x2000, &(0x7f0000fde000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000002c0)=[@text16={0x10, &(0x7f0000000080)="360f7883b81e2626660fc7350ff4650666b95c0300000f32f4656df30f09650f01cfc6f8000f0d35", 0x28}], 0x1, 0x2, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fd9000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0xa, 0x0, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000003680)=@vmx={0x0, 0x0, 0x2080, {}, {'\x00', "00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008bc584c800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f6f38740000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a4900"}}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 934.481949ms ago: executing program 5 (id=1944): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000300)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4e25, 0xcc, @rand_addr=' \x01\x00', 0x2}, {0xa, 0x4e23, 0x8ae5, @empty, 0x1}, 0xffffffffffffffff, 0x8}}, 0x48) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000040)={0x70001, 0x0, {[0x40000002, 0x100000000, 0x0, 0x2, 0x1, 0x8, 0x73, 0x80000000]}}) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x8c, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_USERDATA={0x6d, 0xc, "6a0f114433255f48038b1d1bc5edbbfbcdd8000be216f2d4cdb312d4b4c7d7f04631ba4882cd7ed5149fd7c326d6e4af1469678abfffdecd5c26d4d3adc131759147102fc5b2eab7c426380077d6a8fbb18d5763970c4516e03e34b4bf12d0fea2b918cbe8b4304d91"}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffc}]}, @NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x12}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x2}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xd}}}, 0x144}}, 0x0) setsockopt$sock_int(r3, 0x29, 0x1f, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0x80087601, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 896.813643ms ago: executing program 5 (id=1945): r0 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="0000080015"], 0x3e0}}, 0x20010000) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r0, 0x1) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x9, 0x30}, &(0x7f0000000180)=0xc) openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x6400, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r4, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f0000000080)=[r5], 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$EXT4_IOC_MIGRATE(r2, 0x6609) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$inet_sctp(r0, &(0x7f0000000500)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000300)="db120888c3eb3c0b9d69a26e6a898a1b0206cd43000a0bd88f28b2218070894223a8f7f0451dad0c61a49c8851a982a837d29ab2adc20236b1c0b7aa9d8f6158f1f8dcab835499cbf3f0442c735e758c037bb60d270560b2603651c4437804dea15808259eac4b6ca8fe1576ae2a2c6042e1af2afe23cb7a4114b985f5e414142cb37e6e2f930ed72c8286c49918dfa11677bd98d1c9104462e2685c72c440aaafb4ef234b83cf6ed11634919bc2f0d006dd3244b8fa8de3d91f4cb2f62a5bac58a15d0210ffc4ad6e4167b508767a4725f8bea2fc2f1af2a20faee3aedd5189", 0xe0}, {&(0x7f0000000440)="b6f96f8a6b6d79", 0x7}], 0x2, &(0x7f00000004c0), 0x0, 0x8040}, 0x1) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x46, 0x0, "2431d0edd9b36cb74d7df7671eacf04be3b08353efa3641776f56c7556fd3713097bd0072577bc6fefb4cdc9e94e420b0ea4fbc5b07a32056eff5e6c42784b46ddab72b1b8fc87f208ad6db80d8dfe25"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, "aeb81d8ee3a82d67eea9e5bdf2247481041a5b9cddbc936efc471c56ae3d5f6945d296a285858a891a3b4e7bff572ef69992da867f406182d70f47773434b8349435f2ad628d62a3b45bb98872fb1900"}, 0xd8) r8 = syz_init_net_socket$ax25(0x3, 0x3, 0xcf) ioctl$sock_inet_SIOCGIFBRDADDR(r8, 0x8919, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r6, 0xc040aed5, &(0x7f0000000240)={0x0, 0x107000}) ioctl$KVM_GET_DIRTY_LOG(r3, 0x4010ae42, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000/0x3000)=nil}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) syz_open_dev$evdev(&(0x7f00000004c0), 0x3, 0x331702) 677.317811ms ago: executing program 5 (id=1946): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x1, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000280), 0x3) getsockopt$bt_hci(r0, 0x11a, 0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) inotify_init() syz_open_dev$tty1(0xc, 0x4, 0x4) r1 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r1, &(0x7f0000000100)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @broadcast}}, 0x24) bind$rxrpc(r1, &(0x7f0000000180)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e22, @multicast1}}, 0x24) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x723080, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000017c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r2, @ANYBLOB='\a'], 0x0) 281.41796ms ago: executing program 3 (id=1949): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000001c0)={"5fbcdbfb555ab7b6da2c492fe4db90aeaf8e5347c79716e75fe060d73e9de531ef8085f88b3a09f05bf084c593b4dab8756600000000077eebf9940a0b60f02d333a2c2aa407522edaabb8cfccecb9d7e0cfd915c17f32bc1ac7e430af977b671ede8605c7c72a5d1397639fd21bf848190fbdbfaeb7e166205def53caa18404ba077c2b5713acbc3d125aea78dfd962dd250511376c3a3b5732114cc92d27be04c7c146cedcc9081a8435f9c67a0c5174df503a84dc11d1d98a2473fbd39de5d9c56ffa28098914b4d47ea99e8134deb75f944afd0df95136c08e057e4d839936c0755318e58ae63dd46f7009df574d263f87508d7e496efb29de0496d4018e8d6c6f7d016752a1d10bb1df8b406bb488dbb43ffd11eb1eb9b36d57cee3b9e4e2e72e97a8059bb8e8120bf04b1d0b929692cc3e5508293bb205beba29259f18213a602dde8a8a19dd2a16b26476ca4f24e86b84ee76d86aacc862c59e154e6bec6ec6e86eb3d9dd50c4ecf6de82c2419674da3b885ac6abaea4765d256727d8560fb55d0bee0c11b1e8a05d4b932254673e8f67abfca2f184a23839164b15e021bff742605fbeb628ab93803e90954074762487b0afc90eec0e31e75dda865693dd655a190f16dbdf7ce7693d27aaf31758d97e25ab40fc44dbc911639d99b592dd0c660b820a46b8374f7e8030031c39768fb9361164f5dad133cf0d5d66c617d3d62b1f0b80e9f88ffc872df05fb5822601dfe4b39179ace0a4f6808b39bad72a80a9a9bd579d0f9a104191ef6e708083218053d3daf8211dff0a87568b7c734ab79b26cf2a65d66b00f2c2f0d3ffd5fc35b58795406446275afb8df4247add7730331b045d384b0c9fa06284463eec7167512277a435ced48980aab83b37a85b7a33ce8fd8b2a543af82bd15955b12833a59645e1de6bd6ab86c4a046a0323415351e6ddb9bcb869d2e7d092b234bfa8c5be098abcd24d8b4a659b36d8af4f3136d23f9115ea6bdc62fb89e2de415e0f08bd6ec5cc53ee3a666049168a88191c6911ea5fe7972f5627923e8b5b9e7c5323da43d48b25caee3016f88c8178fb8ab1149547e33d7fff442fa3ab42408c87cdfe35a82034bd77399a0861ce16141670ffecde05c7393ae522430425707a4c7d988f34a494727e0b1920e93c95af07d3affe9d41bb82d59ff2149705bb782c9d85e53320268fb57096c6c47e616c457a371dda361170f706e53bf9a9ac5692b72d44072217ecb8646e841b6929251a080f56be308c47dac5d59db54bd1ca7499cf3bf7cb8bb763fed9a75d2eb69573b118e3ee78fb11d41c1ce314538fec8fc542c7bf4865841a2e71fc1efd9fa385903372e3670d96398128e75d786f242a6dbf2c053dc48ee2398763b1ba3550136c14ac7ad77d3c8e97b2f36b6af200"}) ioctl$KVM_RUN(r2, 0xae80, 0x800000000000000) 278.78406ms ago: executing program 3 (id=1950): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000005700), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x121900, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000000)="89e7ee3c6ccad9b4b47380c988ca", 0xe}], 0x1) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d006a10000000e8fe55a118001500060014b9c3600e1209000a", 0x2b}], 0x1}, 0x4) r4 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000080)=ANY=[], 0xfe33) 233.724387ms ago: executing program 3 (id=1951): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="0203fe020c00000000000000000000000300060000000000020000000000000000000000000000000200010000000000000009107fffffff030005003c00000002000000ac1414aa0000000000000000020008000800"], 0x60}, 0x1, 0x7}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x2c, 0x40, 0x107, 0x70bd2b, 0x25dfdbfe, {0x3, 0x7c}, [@nested={0x4, 0x1c2}, @nested={0x10, 0x1, 0x0, 0x1, [@nested={0xc, 0x10, 0x0, 0x1, [@typed={0x8, 0xb, 0x0, 0x0, @ipv4=@private=0xa010102}]}]}, @typed={0x4, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) memfd_create(&(0x7f0000000140)='/dev/kvm\x00', 0x5) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x23) listen(r0, 0x1) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, 0x0) 183.718713ms ago: executing program 3 (id=1952): r0 = semget$private(0x0, 0x207, 0x53) semctl$GETALL(r0, 0x0, 0xd, &(0x7f0000000040)=""/4) r1 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f00000001c0)=[@code={0xa, 0x75, {"f326460f019f00200000420f01c5470f01c248b8f61e0000000000000f23c80f21f835080030000f23f8c462bd9791040000000f07c7442400e3420000c744240264000000c7442406000000000f011c24c421e3d040000f009f082c000066660f388000"}}], 0x75}) semctl$GETZCNT(r0, 0x0, 0xf, &(0x7f0000000280)=""/130) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = syz_open_dev$video4linux(&(0x7f0000000000), 0x8f, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r5, 0xc0585605, &(0x7f0000000100)={0x0, 0x0, {0x0, 0x3, 0x3010, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x1, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000200, 0x0, 0x2004cb, 0x0, 0xa1d, 0x68ff, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r6 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000240), 0x103100, 0x0) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_RW(r7, 0x3ba0, &(0x7f0000000ac0)={0x48, 0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}) close_range(r4, r6, 0x0) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f0000000100)={{0xd000, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x3, 0x0, 0x8, 0x6, 0x44}, {0xffffffff, 0x10000, 0x3, 0x3, 0x2, 0x0, 0x0, 0x0, 0x7, 0xff}, {0x2000, 0x6000, 0xc, 0x0, 0x7, 0xc4, 0x0, 0x0, 0x48, 0x3, 0x0, 0xfc}, {0x26000, 0x33331000, 0xa, 0x0, 0x1, 0xc, 0x9, 0x0, 0x8, 0xfe, 0x4, 0x4}, {0xeeee0000, 0xffff1000, 0xe, 0x0, 0x0, 0x4, 0x0, 0x9, 0x0, 0xb}, {0x23004, 0xffff1000, 0xb, 0x78, 0x5, 0x80, 0x0, 0x0, 0x3, 0xff, 0x1}, {0x54000, 0xeeee0000, 0xa, 0x4, 0x0, 0x0, 0xa1, 0x20, 0x0, 0x0, 0x8}, {0x60000, 0xc000, 0xc, 0x0, 0x0, 0x7, 0x8, 0x40, 0x26, 0x0, 0x0, 0x2}, {0x80a0000, 0x1}, {0xdddd1000}, 0x40000000, 0x0, 0x7000, 0x134, 0x0, 0xf801, 0x0, [0x80000001, 0x0, 0x1]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r8 = syz_open_dev$sg(&(0x7f0000000080), 0x100000001, 0x84c00) ioctl$SG_SET_KEEP_ORPHAN(r8, 0x2287, &(0x7f00000000c0)=0x2) 114.181464ms ago: executing program 5 (id=1953): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), r1) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)={0x30, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0xc, 0x2, 0x0, 0x1, [@nested={0x4, 0x14}, @nested={0x4, 0x29}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'macvlan1\x00', 0x0}) sendto$packet(r2, &(0x7f00000001c0)="330520000a00160006007ef52f555f2ab34eb67eab0800000000000000997bea54fefe7117599e7dae76", 0x2a, 0x801, &(0x7f00000005c0)={0x11, 0x3, r3, 0x1, 0x5f, 0x6, @local}, 0x14) r4 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x40000, 0x0) getsockopt$bt_BT_POWER(r4, 0x112, 0x9, &(0x7f0000000240)=0x47, &(0x7f00000002c0)=0x1) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x32, 0x0, &(0x7f0000000300)="8bc474a3fd91df6339159fbd69eefe1eb44d71e0aa0f46941673946fa48d8a81b663eb7d873b8ffe203b9b55b2a60f0794a3"}) r5 = syz_open_dev$radio(&(0x7f00000000c0), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r5, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x98f903, 0xd, '\x00', @ptr=0x7fffffffffffffff}}) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000280)=ANY=[@ANYBLOB="c0000000190001"], 0xc0}, 0x1, 0x0, 0x0, 0x80}, 0x0) 99.942323ms ago: executing program 3 (id=1954): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0xa, 0x1, 0x0) r2 = socket$inet(0xa, 0x801, 0x84) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="020d000010000000000000000000000008001200020002000000000020000000300033ffffffffffffffff000000000010003300000000000000000000000000fc020000000000000000000000000097030005000000000002000000ac1414aa0000000000000000030006000000000002"], 0x80}}, 0x0) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r4 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x3}, 0x8) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x3}, 0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000080), &(0x7f00000000c0)=0x8) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2c, &(0x7f0000000180)={0x0, {{0xa, 0x4e22, 0x6ef, @mcast1, 0xfffffffd}}, {{0xa, 0x4e24, 0x21, @loopback, 0xfffffe01}}}, 0x108) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) lseek(r0, 0x4, 0x4) socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c0040b4", @ANYRES16=r5, @ANYBLOB="01002cbd7000fddbdf258800000008000300", @ANYRES32=r7, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x20008001}, 0x4040) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r8, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x14, r9, 0x303, 0x4, 0x25dfdbfd, {0x3d}}, 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x4000080) socket$inet_tcp(0x2, 0x1, 0x0) (async) r10 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r10, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r10, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async) connect$inet(r10, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r10, 0x6, 0xd, &(0x7f0000000100)='htcp', 0x4) sendto$inet(r10, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12) (async) sendto$inet(r10, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12) recvfrom$inet(r10, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) (async) recvfrom$inet(r10, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) syz_open_dev$loop(&(0x7f0000000240), 0x40, 0x18a8a3) (async) r11 = syz_open_dev$loop(&(0x7f0000000240), 0x40, 0x18a8a3) setreuid(0x0, 0xee01) ioctl$LOOP_SET_CAPACITY(r11, 0x4c07) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r0, &(0x7f0000000280)={&(0x7f0000000100), 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xc8, r9, 0x202, 0x70bd29, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}]}, 0xc8}, 0x1, 0x0, 0x0, 0x1}, 0x4000010) 0s ago: executing program 3 (id=1955): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x190) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000001b80), 0x109080, 0x0) close(0x3) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x404, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_open_procfs(r4, &(0x7f0000000140)='timers\x00') write$FUSE_INIT(r0, &(0x7f0000001dc0)={0x50, 0x0, r1, {0x7, 0x2b, 0x0, 0x2b418842, 0x6}}, 0x50) statx(0xffffffffffffff9c, &(0x7f0000000640)='./file0/file1\x00', 0x1000, 0x100, 0x0) syz_fuse_handle_req(r0, &(0x7f0000004200)="aa8e9df36226466e888b39901e75023156b5530e75c1e203314842ea78a6048cdec3383c60dcd8fa24f6928f6e02ab1090989c59ae38dceda05af132af4546a298837c63ea70975feb0919d7f7766791d530b90d522b23c58776ac7a4035383c5a0dd90d8b766c96816631f1742a0da0ce6ddd053a05966f6b6ec22dd28a0a2636d07696a307496b0b0d8bb370227dca3c96838e556681409be388f1dfbf500f1aee82b374f4473aecbdb77cf567fece7f8ec733fa91aa92a186f9768d16d0257ef826959fb3a73e4976a019bde8a82e9bb0a0443cbb1ab2c6e8f8748489948710294efb79d70edec2271491bc1cddc9c9d2713cc3063761f2bea07f5577bbe5224302ef23adcc96cb5ecee406c7977c97d7000000006e28198954bba79006fd58b2a2b43047e7f3ead143ccb6b27043d7a7512e9d3bad0138554f4b465ab6d1cec9b40cb301ac6491ee7fcdc0588e53eb2510471de91e3e73c98f0a3cc9929eac63f477a1208a80f8c75d0a1d9edb895d675d036a1863dddea98b18c846ac253b2470324b21eaaa6e69389b91bcd470995cd6835c6fac80d5ca41b66562c910f893124cf0f20dc65d90aa0f9cd1a7c88f755aaf33875d7639ae1b7413834636de57f44302b723646257ee7456bdfee10f2eaf0c05f2cf01a115ed8ac2908827af3d85da2f1bcf53d87ee830dc5e98fcfc1a22e547ce57508f606945a7599d8e1cc0268987cb7b3d00a6bfacea7bd05430255bc8b473a071b83695783944ef856fc89906e0b44a13166309bc8cc1dbae68399e1e8e4a2ea265c1a104dd862563cdaeee2b37e72fbda323cc72360b6d4fad2fd2409397f90422bbe6e9068aaf38e18918736e6357a6caac59ae803ffbe853ff716a388423bbc93bb2d6b1222bb94c96a3bddf421288d47039fa1b73573dbed87e1f6b280f8b045f9be8e0d85f6cf416bfc0f3f4ce988aefa2382cccf39e40b2a1657814b7953d0a0aea45d50d02d66982e5269f1ededd6a9f8f9e212314a4bb5c2f4898278fd3a585c1ff60e435b186c552134e5ddb0f2cc95dac405bc4bd32ccda41b05c6a376070c8ef2d6eb3ea7fce97da8f09440d47dc5faca6271d1ce4f4201b315d1cc3fa1d4cc2baa14e4c57bafb7b5bb2e9e859505360e1738a36100dd6c2fb6610fc0ed88e452148ecd8b73517f69c28f0c979525d21ba4fef353eebb2326f48217c44a322e9f1f08f92af1ff5ee5f2dc563f1a0edb09d0646105be0c46ddc8b71301e68013e863d539af5b3a2b11f770d8c0c086988216602619ec440f98d434add23bc7f54d145260773e53121188ca179832d5c406f2b4a91045edca91232416219fade02bf6ba002352943850294b05d9a142889205e6b69336cecfe8a7cfc88688368d54b475f3915eea851334395f80b41177ed4d17d91880a22c1c0cf33a550e32fbf76505458d07ebccc4e77bafae1700c9997f6fe28452f011e370642f228bbf0e2f3dc05741127f6d73e96c073b26e730ac19cb17dfc63c0ed4b5d53ffd6e312e3e80822c8bbea3cf2914f3f8ee53fb4edde1d4507fa9d7de54eecb75132befab6bf486cb05bc8727dadac49c83bf08d9eb94621b42241f9eb8fd1e6fbf969d932a023760faa62c178b7f0a1d43adbf5c21a35a58d381442ecdfc2dcce2d11e5efae8433b14fc9fc28294ae76eaa95f38ac121f255d9b478c81a1caf5c606c34e6efa80dd3aa77cc4001b9fceebcc77a1efea7bf9f749f62c7a8bd5deb0f70c54ab5daab010cf14b2f1012516dc1639edb2d890638b73559d060be47f594f322efdd40c5945148fe1690585923488910fcb3159006f935f7d184e4b4c404ccb6e2a799cc67aa2b56a13c16e3ad92b85a12060881c1d140708ffece6965f9746ed4eef74d37424e760f4b266c80c93390523eadc65494962bed4efc86a0fead2fe25c9108c5d591770cee92f9ff2d916ba0dedc6551a47ce3a4dbc97043e588b3483f0793786fe9f32f1b79ba3f4c4ccabba52a59861c8024bcdfc8ecb0acc821160b060d5dc24f0ade14d08b56218a32a03f9eba729c02fc6b714bc72b11cc7fe47b51b3a174cfa2d8f5df80a0fd4d1dd2ed36b868b46ee5a8cc72e91b57bd05005b5142b5531650813fb5496af379f9e7b1b73c49c64dead9725af0742a41b770205390791de856715c0138ca22f134911a28d2caf22ef21049d1ba721d278bcf675317c5303cbaf96535414fd92c55d741120200d49729e01e399e4c30fa8da659654196af7991a3d294c775a610f242a56c88d542641036de7eccbd64f9f306a3920596d350637a6409f667110b46c6d85ab94df4d7b0af12318522ba1e745e7de45176789a53213b9b3d23b2599275e4f1858fdb2fd63f8c6f7990235e2fb3c4c8f215715973b60b1e56d1f061b6ff33510d08fa403559cbcc21bd141b41f1e9ab4e163a0f80a918ba13031c483931a9dcdb790ad77fbdf5634662cb75e79d986e4724f64c80203600df7ac9950330431b83777bd968a86be5698b13c37513235ac89a0a1dcb799112a86a2d96b1708e0c5e983756d8243927fc7d42be6ff4c946c0763a9745897726f38b65920363b7c32051bf9e770ab1ec140ff11fc639f36fa760afcfd6ba2f609df8cb0949f26119895b69c8ffd0836a01da1e407ba08f37a1144674f5a71b3499ffcccb21e75f19cdfb33c7eded5fa5c264784a78edc5f6de17da15317a66fea522b6e92a52efa5013797212d816c3229c7dd523e2165f9f042c3b3b16e608a1d87ab9c46c2b291bf547e1f4312913b16e39a714c24ebc5cb4f4f80bb20ce4efdf2921db45b7389fef98bd0e8aa40be16758b0d7755ab631b27c5d49225e84fea63e3f031c665851ef4ed18628b26445da2cad4741800cf72a401ad79a7462657068e0f2ee65eeb86da66890247cb45b31d3ad06ea7500eac5be65528c55bf190b0ec27673b67b36117344097a0dbb9db47a2b5144218002d14cbb98629c2ed35db5cdcf93994e3e3d1a1673ff60ec0d9bae1217ba6f39ae4ac4c9e5a19f85634f3091150c4724aaabe3bd1445cfa33fac93b86c5871ca168a728899e2e0062a596fba22b962764420f1268bb8ae0a894559c488cfce6b71aa8478964d2eef5086b2cee891ca031b6543bb7ba55006621f1d80e17abcba9f9d05fc5e61c6c4a890aba4b205f5570e7866ec4de380420c4758de63ff0f7b1acb0521e45cd9bc54df1a4614c04c524f43e86f58757eddb645bbc56a63de5bb560f56a31796dc344d58e2ff2d3fe5228d87c0439e6353943c92160fb847a172eea37ad0c22de5d1e7cd66730218832c87b73366131e29a1545b26d4c500a9afd75864b460cea1ba33a5dca6e5585e9c78a8ee3361f20e2b79489ed2ef1c935d7deeef6de0d009b72a0751929209b351331c0225c29341f5d476b278061a0a33c1e455815bbb83eebf5f5c3fe97c4b3df32846a094501a157196b6c1db1e05cec4f2dee823ebea7da05f5ee63aee1670128471465ae83defcf26aba78f18544146fcc9305ed5899965edbcf9f677c499a52d984db346c12faf02553338e6553488c29c9f3f4537a9437b5eb7382f95f9e844d27fa0b1ffc48d2b44e383b1fdb567b7f23863e8e10b6210f8031859cea410d52f99b5a8d2f218e7c92e231904b171dc077c636db15087cfb0ca6a2cd09f6b7973627a03ebfb4772daddc8ad7c9e534d8bc58cfc6d1305374b589a2a85c8a3c471c7408712ff5cfd7a50bee627d0417a5667dba71866320857cdb84e071a37e477f1b5ac16bdd464d8bf3ae31860ad19722bea1d85d1a5c09e1ab36dcd6c4bf524ed2137745e3562147081027d7852bee1ccc9563e4ff0ce72affa7002e9a066591ddf31abc4388281d98d2d88fa1c5f22cb60523e72e3d838fc6b0163fe0082ce0d8d59098363a174818113182d40cdb6367cb4a867c5aaa480c95f4a98439a2b58291fedcbfedfc3ebb41fe6b0a12fce36518ea6082fb919cdff23e3b40aa26eac8d634e03fc3a1e0fafe402c875709b15b622f35bfdd233ea8d7989ec38dfa1e5b5688d76c615b5efba62dd7d50be97b92f16c838edecd426e18dd270ddda42121d7ad8d26ec28df29580e6dcd7f968885d1cbc5f573efda890a408b45701bdf5cb2e3c54f8481710145ac1f5bdb1b53a1e9a7efd8a3ad7dad7bd0fa017e080854913beda2ccc95631a5c1da5c5afaa84bcc3f1a7041208fac9e09ef52140f142bed882b8988ea062cc8ecd7fd78fd33aeee8e8d5cc891514e3407fbb171e84e45fa14713e995513e16763424e356032ac81047c8e2bfe05dfecc510b55866d4a8696c91afd7b6b809fcf2e0f8a21834f43149d8e2b5dc5fddacb8ff9341376281e8f7d762fdb61a8e6536529b0d4d3cd8217fdb4f0b8341587737da7f50dbe4e5b7851a25d52066bd0e3ad11aed47ee02bec11d0f125cdee1f505cc5c1223d386b2fda556331cf57d8df433927cf12a5fbff853be266c5a64b6424f7b106931d312f0fd447206d21c1945579915e7e21627c7fc423a813823ce5fa2c6f3114303d0995c5706418a088535c62eda2a60c82b727c31177252f8ea025c16a3676ea0ccec24ea57e68c7e0f1b0e06f78a8ccead63eb4c0ef5c59b1d3a805644f8089e604a5bd3aa4494ff7fca02dd5894a6f02e572edd487af04ace3e37f19074325613d6f7d2af73062607b45a3c9365337a1c5e6bae9702a65f0a1b9ce75e43f6381efd9d610ad37532b62c6ab5957ded77a5d01604f67d7ccaa495266ab7fe161268b9a6156643ab6289fa0be75ac433a0204df164c02d3d0cb1b7bf0acd92ca8ff19b710b0b511820d0500fdf58f598fc611380a0f7dffce7bbc934edc967ba0094a0281750176748a4e2c99684c1c4a40258b0da77a0bfb9a4b808d5932443389f0f346dad998cee519624aeb07ea4446064282b1448bfa2e5ac3393d30b5c3865a8995869f69bab0747cfcbbd2bfd407c82e198da326f36be9a508e12d6d73fb262b37fcd7ff70b372c966b7198a9f2364012ff8127f200c079cb70d550f9483c1bf9fba69ebc961c989a82fc38cffe853e4738f33f1fa42fe7167e4bb79110f237d7e4989d2f6f4bd21905e491e2d4b6ac5a66025c11a93ab1eddcade3c3e78c270eaf6a0a6ed43df6e35bcaea9aa716d547d2136c2388379abf645e3f7cad1cc1fdc92b882729ff92b0612302970bd9ca7e36d76b2eb4d9dfe35116bb7771e448867e57026e622e1e54422b064fdb707fef339aa16fde808f622a7269b77c292c7e85fade6dcde475c2f61d71370209bc0e46ba7c7b71e41df246d283f5574205ca6b4819c63d97193eb084fd6b0c20b956cfc4b45b51fd46b2e034ff0f003179c7539fbc4e888c0633767604ed0f07beb4fe00f5a3b56ad9f3997cb49c7a8b92a719411b20874686a8a5ab462914baa85d016df99796a868af3dfa6ad98ceaaa18af2f2fad2ebf3dee1df8c8863e84ed83d6da5e283ca9cc385e0ded20531f127ff4aa974b91634d8f367154d3e23ebb04571a5a453d1265e873d00d40be7e1eb7e74529822b4c81d742c981a988fb786084cbd1e721358c7a1ea5293aa609773b890a5c9de4d1349588def4232d41fa5d7cfbc3dd130754891c304118a895268555874613e9c89c66bceea609e7ca1a914ea327db1f85a3809098e801289d8ab71997c2ad5bd1f3fd4b3c6b80667ac2b6b23b35018206dbf708284f0e0fac58d0b6d72c0d0034b6ed37b1f9931158f2443f045f65e33084ebc6aac93d8c0e3c1c52878dd3f54b9f88a40821090cdeb3bdbb61f0be16338a2a7ba0f77e9ecd5400b6f809a49eee78346c69e7ab560fcc32f2d19e665bb91fbc00e4c00838a1385d5156d1696f694027a9e6a7ef66933202012caca81c1b3ebe64976a9d000e28a6aae5d6f061c5acf8e4bca00bc5ecc547ab1664cdb2125300130a5a92abc0d36cf911fb3123034e925ea097fde14253dd3de52bf5c8a6bf01436c92dbbf5450a9b7775a981b09eab05406dae83f8ddcf898b1bace4b8487f0b4ec5b5316a9b7e3bcd6da41caa23604b3932ff3daf31bb19e74c687773bb54503f6b3ed74aef1410dc4a9a72fa05b1e120e682a7e7f9b8c7b6836fa9d8f96d16fa17975bc3dd7784f0d621d5a69038b0947d1cb47381c82c6df030fc8033dd66b380d884b12991ef5d5283e552f723aaf791bf3af581423c57b536b91e5a158695b68f7eccfd72fd2af1016e261ec863215d1df0fe756366e56fa86c4495cd9a45e83227af93a5b431c5d33fea2b3d469aab08f57b85b3a14a47d7da8ca74dae34f963cf660057466dac3937ce00060f8db8099178944aa37474a37eaef3b9ca04bd0eb1d03c25887d530cd690625f5829830851a6a58a7b411bc87aa70f26e80514799664e35c44db243d61add5bcaba3695e45e9f1a3cbf8ebdfb87571c44b9dcddc5fd422e94cbeb02bb58abd14e140829e12f7f0c7e3cc1a1bcae8429775e531710bfa504e103b17c20c329f653c015ab514fd6cf162b96d871930de99413e148fa58c1ff262a997c6ed1bc008912c6b864031dc95b5a3ad6aa3521167a62fe771baff828cafaf178539048d2e91a62ee7a50df04062422150347774db320fb535ddd4c03a8cdfc3affd253c200e1d5678ff12eb6f5bd43da636778cd2f8551295f4cbbc902322e491c5c10fee144daeaec4cc2a2f855f5312f4c8cac1155c8d3b93a5fe6a60118a0a9912b16d583582b478e4f05c375247d4cd897c49a8cfd2540833311039d9b121e5d5779d71b206d0d862b95e0eab28005f86ddd6ec514d931a521fc035eaacfd10ec5f97af541cabf08512f6c79e7e0db5217bd14aab6d3e9458018c3e59769bcb689347d7e394b469e9c9d9da2be8fc7a54b1aab301b68c1faf7ba7bfd05b8a313c902ad3733e523fd64739d9af110e39a96f1048fd6a43d13045ec71ff3d1f64a904f3878cb18f58b3b84942331ec05d3372a328a83e8aab828574313964f6f6c5af246faf2c69a95e9ceca77c0fbf303103a2d38ef6da2929a3dbccae5823f82d9a37c989154c8a760df8e7d8589daf1fd69683cadd2c7ac13e285a7661c23913912ee272797e3a0808654fd0b9f74f2fe04cb34167aa630b8aa58efc2586bef8c7c2e354d7c8d08de7d25a80b08bae8d2326d16a15d537d8baffcbbae460ce608ded63a45bdf0caf9dc335aa8d2aac03a62a9c6c62ce7c2caa9a731baa549d1880d3facdb4bee43ae27ccd5a22f143da8e7b4deb5c2a194d450eb5ff6949a950115d4e1d60fc75115346a0aaaf1400a301dcc8a04f9d2762c093f88adac799f6bd5150ca9c7d3ac1f728b88b1b0807a7407ad9b8febd89a801c9845af62bf2fc98aea4835d52871774e72b9fc07d26d55ef163833fd2f5c951ff963f43fcdaf03995cf3f14360b05be587e7a19fb760a944166b1fbd04c0d02bda8ff5d92a23c4e683db1b2823a6b02a16a7bc7963aaeeec43d97a85752fa439544127fb71d8b4fee6a09b966bc4e7be67acca35bfe4acabf18f6e9cc938c1e0af43e11754cbe7b37738019d9a162083f5f1fcdd9299921a349f1e0ee840b19fed4c0b5273d5e71ff5f1f20dbb36c89e1edbbef78de1a6229a2cd22bcf2164a1b567f7c08c6ba78ff2e53bc348dd2ab53b9deffc9cf8726feaf9cb07b4f94d189314da8c0005f3bb031e44c402339588832779790e814c707fdbe0830d53b4d35812f27e7709bee185d6d6d67a65382dcf56d567180a4a74cb05b0f7d0202bf33b88729f2bab7003264a2d67ea93d022baea74d7ca54a0081923a82e56750f22f58bc997ea57afe1bce18405383055745f0c6bfbbc514df76107b3c5d04bfe033dace72bd5bead25e736a0052b6efe7eb1153d1afe9202e227d60e4e38f5f294894d2ef9b89998194492e427442a18506e24ddcc1952354fe0250ad949be08a63b6c0e206ecbac70415c36f1bf78d7068ce8eb804561eab2540c6c984e63d1217de1242ae70a5dd457d7a96f24ad9e8a59c060a2a95e9e04a6a4429f40d47d2770e9d3ece295d748aa30a7bbd2aec570733be7855c3a789d71d94b3c86ccdd3cca3ddcb35a969e8c2d5b17ded6ab8b81b90a4206ac2ff163c04ba9886b5ec6138db5eb6ffc19201f66a1057858e564960de679b2996bb93c8d2b440fde169d1fbb5886fe673639c514c2eb8bca75f79abbb73c4a125e5f4d7d4ccd5c9fc85cedc9fe6f2b2b75ec384fa6ecec37579a70bd29b4c9893badb36e1b33cf61b07ee7d2a5550ac9f23b5fe629297efe94eb8a8c2adce65a61ddae84544fe8f81455e2d053fdf7efde38b92b0b4d3e7ff9d81f5de7d571cb4db7e059cbe1ac2153b22b57b4d45d58fa50d152efa2d85d262238ce4816e40f93b65f53b6646297f69e3dde4ae7c57e9112054cb831eca5716863196db7667674b00be7c83f900c944ea2bc8e8e6b6b335a6e9f63e6f6635f6afc0889355aa4f0b928b90f76e6f03b5d40e9a0cace6243aff4590c0ef255860401b16da288687e890b1921b8ba63860df7aad86279c89d16cc4ad1ef4633639f203724c1958fb3b6a990f555e8df8f494fbdae25b353c14fe524541347c1d7f61c349f55773575fab73df09ebd1c635ad5f93fc8e075093ec3fd8b832e5331e329c2578d1f6f7a0a44838e578fe40db7d11645c2c73e0a438a80085988294d98a4ef4c5faa593dd5a9b0dec12d8a6dfd15cc4503bb2078739f26f9c10d0b1fc2634094cfd2ff6bec88a7513debde5fcabb85fd31df8d97bcfaf247edb89cb056fc52bc06f117a3e1022a57817b9abe1793cf279e163212f501681eb9ef08e39adb9ba80ec3cd45f5ae7afc0c256a3470e8ed3ca41c5502c510f0526eab848ec5a7115a53741cf05846989b9b5fc6d2ad74fb855a852e3fc7234bb0ed8b6937167133925dbeb4313a9895860e761300a0695e03e81c2c1e3fe3f4b8c42c946b010259ffa4c1d345350020cddc8e9697fb83c22fff5190558551584368e7a270f958bc72e2624c3e45bbef318b5134f0419e725945e445993f2f176f0a21f5dba86398529fe5159d57c0d75d64f950763b52935e778b20356615409dcb088514eeba3f811e9ce6ce2bd1ba6ac932bd79f7a518959f99d52acbc2a1d0c02c70b9ea46d662d39c315b36315f4220e5dce293275050a3e6df506d0c1d7786017572cd758ba4995963fa034ecd49cadb42bb1ee280600557ce2e17488e1dd4595b8c7d4f20f420a3a01b6228d764c5069222cc93e2091fd2053f05a50eda7840c13f45c6e2a2fbc0f9de4baefb7b40ea1fb7e9d30fb1fdb8f20eafca0c7c8c61c57dfcb8e2836e8d0ce546e8e37b9fc467e1bbeab314be171573398e0c2fb032049a99acf174a857c019609e83010dda8da078a4311efcaaff62fa908dde87cec4d41078c343eec5a80c42d0146d57e9a14f2b5611be05e3b665728c14ea9536d146926fe1e8d5acf12afca415ef5ad77bdfead7ea087183962592296d3d892c64a0a3b9fc95b50f03df7f4f50f950b43a289af09ca92a01a684e5c649b8da4a3365878273a00afd14b4fa2ddaeea5007f728899ba9f5fc9d1d7893a489e56c5fb152e5f775042f4b3bab6cea9cbf9a2b91647fe3c62d3ae4b5d065460b51d51b6e91f2f4fe90a3775e6312ffc805612fee8c314ee70c92de3feefb3cda56a59ddba83757b0e85cb0ee7ad1ac608a1e6a64656d9f586afc38fd1f6474b521724532d88cd351688db077dc9d229a78f8704b21f85324bf9c697874cac5f709c6701a421ac368edda0ec3a0b90268c449acf753d7e8cab501ae3d7e04788e899ec54a2517545b68fd928fb659349e1692bdeccca648fd13a7602868c44e77ed6fd587538a74adc6acdb1ebd1816af88ece2ca64f2603428a0aa842fe86be6b2b568fd29c23433c9e3f9f0e45bd13beb22ac06eb82ae0eb2b3b328aca4abba5e72a155e2cc82ac92c4697fdb9439511c1144fe2ba36f516fa181f7f8d58af69f87a6c936d1e561fff0509819e65a681aaea445a106f8ff3dfd987e2e24e977281cb85cc5e5eb987da2d17e73dacfd9880bd14ecad13d5705643f926303b389a61fd63139577de263a5fdef1facdac0068a9471fc17ac654e88e0a0d12c8aca1e850b64a88f2382e0cf3a4e3363827a06abc1eeb87216e3447dfbf8c04080ca2fe1a08cc2e2001eb386cf02ac0d3b328bcf1de009d048a03cd955c628971c30a137dc66879cbe938390a8f63251f55e559549dd11969b637876a20bc7c6f5fe2b753923d2f0269f2082206eb2312f40654cc95bb38add159104495018a5aa7b8f5836162de9a03b6981c662f2ee02a168d530a002616c09c4cc26c2a2726711e3e25b4e3acb6dcba25fde78ecede51f01e22a2f79409c77011a599ff57d81e70dbde5fcbdc841f9af0e49e8200cd2d3c73013e0e5608ee1951ac04a111864b545e7bc2434c2474286519feaff4da07324d1b13bb16d1daa1d485bcd5466b82c9622f92664f1153d08c6e644b3d0f5902b4d749895f7763015bf0e2849703ed920a3866a260f22fe40f46c76ca6ca10ae8994505fa613a6b1aec84ee6620c25ca4d002f56ddd21b12eed5132634a3194281283fe5fdac07d2fec091dc0f748fe25c6b08cf8d4ff893e863a43c4c92fba47d86c8dfbbabbdca0cec09f732bc0b8df2a97ee7208e64512249300aa4c44c10d4c4503bd76e7b4e2c9aa2e274166ef103d5c832a760f33b5a0eae4dab922f0fec5adbf409bff956b4ce40e6157d498d46ae053f1ad73655bfb0a3dfac6b96c09bac4d07e6bd7f3ac6337f58cccc631466985f6ad680d21a5fe9a9bde4b6980c689e6e8c7a413b6e3084997c089443ffaca9be80c96ce1d9b6de074b4aecfd2db3b679a2d5cf0523aa14414699d481eace4aa397d818ff4d3e73d82031849c7e4f1f1503b636728637f87cf7a7df5472abfcb7e5d77439e1018dba49a41e1c8e63942fe0d1a426f390e8e225fee14501a34762b8d835ca14d6a3a3d8042724ea9e6b568fe0eb84306397ffa8345935e9be8642e6ffbd96e636fd16cacae5d4b88fd0aa0bfbba8221f68eabc98c67de6f9eab2cca07b096b458bbfdc7f1da0bb845a1a6e19c6da87a958acb1aad0b74d6537e97fb0673a20178cbb963f909839e49ec593ddcfc3046aa54c22e3a54148c440d1f2ba1fa7417572c629e48e6d2e07760a87581971d1edccc03c0e465d4d6321d820b3346fb516c1813585a6a8462124f91428a90ed037f40cd6f23596dc90c03825636e55a061838964213c70104ec0c5909a0c62240e93314f9b67ce8fafa115251282a6ee7a036a861d1af11919dbfa7ceb7b2260e66be6300a536e78ebdf60a6f022574b35205341f3557e409d8ecc0c2304b372605c9284aebe1b92f13051db78210df83873b0496625507cf8e1ee5e90aa66f45be75e388d6e0a021b8af3787ee06cd710719b4d06ca5ba5f87de812a660f939584ea880d3c71bc58135e612431850180ee39b707bd98aff26d2c5e4396b43daefd82b2ec1004978637b8d389cc415d628fea6f66f28664f9409448e68a2d48a0a00", 0x2000, &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x90, 0x0, 0x7fc, {0x1, 0x3, 0xea, 0x57e, 0x8, 0x6, {0x4, 0x4000000, 0xfffffffffffffff8, 0x8, 0x3, 0x7d, 0xfffffffe, 0x5b, 0x1, 0x8000, 0x4, r2, r3, 0x3, 0x5}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f8481f0000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x80054) syz_open_dev$video4linux(&(0x7f0000000100), 0x1, 0x440c0) setxattr$trusted_overlay_origin(&(0x7f0000000180)='./file0\x00', &(0x7f0000000000), 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): isable+0x3b/0x150 [ 350.836887][T10731] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.836903][T10731] ? clear_bhb_loop+0x40/0x90 [ 350.836922][T10731] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.836937][T10731] RIP: 0033:0x7f46dc35cfce [ 350.836952][T10731] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 350.836966][T10731] RSP: 002b:00007f46da5f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 350.836983][T10731] RAX: ffffffffffffffda RBX: 00007f46da5f66c0 RCX: 00007f46dc35cfce [ 350.836994][T10731] RDX: 000000000000000f RSI: 00007f46da5f60a0 RDI: 0000000000000005 [ 350.837004][T10731] RBP: 00007f46da5f6090 R08: 0000000000000000 R09: 0000000000000000 [ 350.837014][T10731] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 350.837023][T10731] R13: 00007f46dc616038 R14: 00007f46dc615fa0 R15: 00007fff5ad4e7f8 [ 350.837046][T10731] [ 350.920565][T10734] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1456'. [ 350.958882][T10735] FAULT_INJECTION: forcing a failure. [ 350.958882][T10735] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 351.116092][T10735] CPU: 1 UID: 0 PID: 10735 Comm: syz.6.1450 Not tainted syzkaller #0 PREEMPT(full) [ 351.116120][T10735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 351.116134][T10735] Call Trace: [ 351.116142][T10735] [ 351.116151][T10735] dump_stack_lvl+0xe8/0x150 [ 351.116206][T10735] should_fail_ex+0x412/0x560 [ 351.116235][T10735] _copy_to_user+0x31/0xb0 [ 351.116263][T10735] simple_read_from_buffer+0xe1/0x170 [ 351.116294][T10735] proc_fail_nth_read+0x1bb/0x230 [ 351.116323][T10735] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 351.116351][T10735] ? rw_verify_area+0x2a6/0x4d0 [ 351.116382][T10735] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 351.116409][T10735] vfs_read+0x20c/0xa70 [ 351.116436][T10735] ? fdget_pos+0x246/0x320 [ 351.116459][T10735] ? ksys_write+0x1e6/0x270 [ 351.116480][T10735] ? __pfx___mutex_lock+0x10/0x10 [ 351.116501][T10735] ? __pfx_vfs_read+0x10/0x10 [ 351.116530][T10735] ? __fget_files+0x2a/0x420 [ 351.116558][T10735] ? __fget_files+0x3a0/0x420 [ 351.116581][T10735] ? __fget_files+0x2a/0x420 [ 351.116614][T10735] ksys_read+0x150/0x270 [ 351.116635][T10735] ? __pfx_ksys_read+0x10/0x10 [ 351.116663][T10735] do_syscall_64+0x14d/0xf80 [ 351.116681][T10735] ? trace_irq_disable+0x3b/0x150 [ 351.116705][T10735] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.116725][T10735] ? clear_bhb_loop+0x40/0x90 [ 351.116748][T10735] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.116767][T10735] RIP: 0033:0x7ff571f5cfce [ 351.116802][T10735] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 351.116820][T10735] RSP: 002b:00007ff572de6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 351.116841][T10735] RAX: ffffffffffffffda RBX: 00007ff572de76c0 RCX: 00007ff571f5cfce [ 351.116868][T10735] RDX: 000000000000000f RSI: 00007ff572de70a0 RDI: 0000000000000005 [ 351.116880][T10735] RBP: 00007ff572de7090 R08: 0000000000000000 R09: 0000000000000000 [ 351.116892][T10735] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 351.116903][T10735] R13: 00007ff572216128 R14: 00007ff572216090 R15: 00007ffc07e47598 [ 351.116933][T10735] [ 351.601201][T10743] raw_sendmsg: syz.6.1459 forgot to set AF_INET. Fix it! [ 351.647889][T10743] dvmrp0: entered allmulticast mode [ 351.679847][T10743] dvmrp0: left allmulticast mode [ 351.700672][T10745] FAULT_INJECTION: forcing a failure. [ 351.700672][T10745] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 351.744180][T10745] CPU: 0 UID: 0 PID: 10745 Comm: syz.3.1460 Not tainted syzkaller #0 PREEMPT(full) [ 351.744218][T10745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 351.744230][T10745] Call Trace: [ 351.744237][T10745] [ 351.744245][T10745] dump_stack_lvl+0xe8/0x150 [ 351.744275][T10745] should_fail_ex+0x412/0x560 [ 351.744300][T10745] _copy_from_user+0x2d/0xb0 [ 351.744324][T10745] __sys_connect+0x156/0x450 [ 351.744344][T10745] ? __pfx___sys_connect+0x10/0x10 [ 351.744372][T10745] ? __pfx_ksys_write+0x10/0x10 [ 351.744400][T10745] __x64_sys_connect+0x7a/0x90 [ 351.744420][T10745] do_syscall_64+0x14d/0xf80 [ 351.744437][T10745] ? trace_irq_disable+0x3b/0x150 [ 351.744459][T10745] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.744478][T10745] ? clear_bhb_loop+0x40/0x90 [ 351.744501][T10745] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.744519][T10745] RIP: 0033:0x7f46dc39c799 [ 351.744536][T10745] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 351.744552][T10745] RSP: 002b:00007f46da5f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 351.744571][T10745] RAX: ffffffffffffffda RBX: 00007f46dc615fa0 RCX: 00007f46dc39c799 [ 351.744584][T10745] RDX: 0000000000000010 RSI: 0000200000000180 RDI: 0000000000000003 [ 351.744595][T10745] RBP: 00007f46da5f6090 R08: 0000000000000000 R09: 0000000000000000 [ 351.744605][T10745] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 351.744615][T10745] R13: 00007f46dc616038 R14: 00007f46dc615fa0 R15: 00007fff5ad4e7f8 [ 351.744648][T10745] [ 352.116108][T10749] netlink: 'syz.6.1462': attribute type 21 has an invalid length. [ 352.124318][T10750] netlink: 'syz.6.1462': attribute type 21 has an invalid length. [ 352.138937][T10749] netlink: 388 bytes leftover after parsing attributes in process `syz.6.1462'. [ 352.158271][T10750] netlink: 388 bytes leftover after parsing attributes in process `syz.6.1462'. [ 352.446146][ T5945] usb 8-1: new high-speed USB device number 43 using dummy_hcd [ 352.596175][ T5945] usb 8-1: Using ep0 maxpacket: 32 [ 352.602990][ T5945] usb 8-1: config 0 has an invalid interface number: 67 but max is 0 [ 352.615307][ T5945] usb 8-1: config 0 has no interface number 0 [ 352.623483][ T5945] usb 8-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 352.632704][ T5945] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.640777][ T5945] usb 8-1: Product: syz [ 352.644993][ T5945] usb 8-1: Manufacturer: syz [ 352.649792][ T5945] usb 8-1: SerialNumber: syz [ 352.657965][ T5945] usb 8-1: config 0 descriptor?? [ 352.776113][ T29] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 352.928199][ T29] usb 6-1: Using ep0 maxpacket: 32 [ 352.940818][ T29] usb 6-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 352.956224][ T29] usb 6-1: config 0 interface 0 has no altsetting 0 [ 352.962946][ T29] usb 6-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 352.972353][ T29] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.994716][ T29] usb 6-1: config 0 descriptor?? [ 353.349884][T10771] FAULT_INJECTION: forcing a failure. [ 353.349884][T10771] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 353.364403][T10771] CPU: 0 UID: 0 PID: 10771 Comm: syz.6.1469 Not tainted syzkaller #0 PREEMPT(full) [ 353.364439][T10771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 353.364456][T10771] Call Trace: [ 353.364466][T10771] [ 353.364475][T10771] dump_stack_lvl+0xe8/0x150 [ 353.364514][T10771] should_fail_ex+0x412/0x560 [ 353.364543][T10771] _copy_from_user+0x2d/0xb0 [ 353.364563][T10771] ___sys_sendmsg+0x1c6/0x360 [ 353.364601][T10771] ? __pfx____sys_sendmsg+0x10/0x10 [ 353.364658][T10771] ? __fget_files+0x2a/0x420 [ 353.364689][T10771] ? __fget_files+0x3a0/0x420 [ 353.364715][T10771] __x64_sys_sendmsg+0x1bd/0x2a0 [ 353.364734][T10771] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 353.364779][T10771] ? __pfx_ksys_write+0x10/0x10 [ 353.364810][T10771] do_syscall_64+0x14d/0xf80 [ 353.364831][T10771] ? trace_irq_disable+0x3b/0x150 [ 353.364854][T10771] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.364874][T10771] ? clear_bhb_loop+0x40/0x90 [ 353.364901][T10771] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.364922][T10771] RIP: 0033:0x7ff571f9c799 [ 353.364942][T10771] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 353.364960][T10771] RSP: 002b:00007ff572e08028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 353.364981][T10771] RAX: ffffffffffffffda RBX: 00007ff572215fa0 RCX: 00007ff571f9c799 [ 353.364995][T10771] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000004 [ 353.365007][T10771] RBP: 00007ff572e08090 R08: 0000000000000000 R09: 0000000000000000 [ 353.365024][T10771] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 353.365033][T10771] R13: 00007ff572216038 R14: 00007ff572215fa0 R15: 00007ffc07e47598 [ 353.365070][T10771] [ 353.548404][ T5945] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 353.561233][ T5945] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 353.580166][ T5945] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 353.595972][ T5945] smsc95xx 8-1:0.67: probe with driver smsc95xx failed with error -71 [ 353.608861][ T5945] usb 8-1: USB disconnect, device number 43 [ 353.684292][T10773] trusted_key: encrypted_key: master key parameter '00000000000000000525' is invalid [ 353.700279][T10773] comedi comedi3: 8255: I/O port conflict (0x4004f27,4) [ 353.915092][T10779] dvmrp1: entered allmulticast mode [ 353.932396][ T29] corsair-cpro 0003:1B1C:0C10.001C: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.5-1/input0 [ 353.950928][T10782] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1473'. [ 354.126246][ T29] corsair-cpro 0003:1B1C:0C10.001C: probe with driver corsair-cpro failed with error -61 [ 354.201313][T10796] syzkaller1: entered promiscuous mode [ 354.209685][T10796] syzkaller1: entered allmulticast mode [ 354.229563][T10796] af_packet: tpacket_rcv: packet too big, clamped from 64993 to 3944. macoff=96 [ 354.305878][T10798] syzkaller1: entered promiscuous mode [ 354.311723][T10798] syzkaller1: entered allmulticast mode [ 354.347788][T10798] FAULT_INJECTION: forcing a failure. [ 354.347788][T10798] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 354.364476][T10798] CPU: 1 UID: 0 PID: 10798 Comm: syz.3.1479 Not tainted syzkaller #0 PREEMPT(full) [ 354.364501][T10798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 354.364513][T10798] Call Trace: [ 354.364521][T10798] [ 354.364529][T10798] dump_stack_lvl+0xe8/0x150 [ 354.364561][T10798] should_fail_ex+0x412/0x560 [ 354.364606][T10798] _copy_from_iter+0x1d3/0x1670 [ 354.364628][T10798] ? format_decode+0x60f/0xe10 [ 354.364660][T10798] ? vsnprintf+0xdf1/0xee0 [ 354.364696][T10798] ? __pfx__copy_from_iter+0x10/0x10 [ 354.364731][T10798] tun_get_user+0x267/0x4300 [ 354.364770][T10798] ? unwind_get_return_address+0x4d/0x90 [ 354.364810][T10798] ? __pfx_tun_get_user+0x10/0x10 [ 354.364829][T10798] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 354.364860][T10798] ? lockdep_hardirqs_on+0x7a/0x110 [ 354.364879][T10798] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 354.364909][T10798] ? save_netdev_trace_buffer+0x4e2/0x610 [ 354.364946][T10798] ? ref_tracker_alloc+0x35c/0x4c0 [ 354.364969][T10798] ? tun_chr_write_iter+0x60/0x210 [ 354.364996][T10798] ? vfs_write+0x61d/0xb90 [ 354.365012][T10798] ? ksys_write+0x150/0x270 [ 354.365037][T10798] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 354.365066][T10798] ? tun_get+0x1c/0x2f0 [ 354.365090][T10798] ? tun_get+0x1c/0x2f0 [ 354.365107][T10798] ? tun_get+0x1c/0x2f0 [ 354.365130][T10798] tun_chr_write_iter+0x113/0x210 [ 354.365163][T10798] vfs_write+0x61d/0xb90 [ 354.365189][T10798] ? __pfx_vfs_write+0x10/0x10 [ 354.365218][T10798] ? __fget_files+0x2a/0x420 [ 354.365253][T10798] ksys_write+0x150/0x270 [ 354.365274][T10798] ? __pfx_ksys_write+0x10/0x10 [ 354.365303][T10798] do_syscall_64+0x14d/0xf80 [ 354.365323][T10798] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.365343][T10798] ? clear_bhb_loop+0x40/0x90 [ 354.365367][T10798] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.365388][T10798] RIP: 0033:0x7f46dc39c799 [ 354.365407][T10798] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 354.365423][T10798] RSP: 002b:00007f46da5f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 354.365444][T10798] RAX: ffffffffffffffda RBX: 00007f46dc615fa0 RCX: 00007f46dc39c799 [ 354.365460][T10798] RDX: 000000000000fdef RSI: 0000200000000240 RDI: 0000000000000003 [ 354.365473][T10798] RBP: 00007f46da5f6090 R08: 0000000000000000 R09: 0000000000000000 [ 354.365486][T10798] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 354.365498][T10798] R13: 00007f46dc616038 R14: 00007f46dc615fa0 R15: 00007fff5ad4e7f8 [ 354.365529][T10798] [ 354.647582][ T5956] usb 6-1: USB disconnect, device number 48 [ 354.710292][T10802] tmpfs: Bad value for 'mpol' [ 354.732785][T10802] syzkaller1: entered promiscuous mode [ 354.741399][T10802] syzkaller1: entered allmulticast mode [ 354.849521][T10807] syzkaller1: entered promiscuous mode [ 354.855086][T10807] syzkaller1: entered allmulticast mode [ 354.880563][ T29] usb 8-1: new high-speed USB device number 44 using dummy_hcd [ 354.921983][T10804] pim6reg1: entered promiscuous mode [ 354.927375][T10804] pim6reg1: entered allmulticast mode [ 354.992826][T10809] pim6reg1: entered promiscuous mode [ 354.999494][T10809] pim6reg1: entered allmulticast mode [ 355.036108][ T29] usb 8-1: Using ep0 maxpacket: 32 [ 355.043391][ T29] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 355.053404][ T29] usb 8-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 355.064547][ T29] usb 8-1: config 0 interface 0 has no altsetting 0 [ 355.080355][ T29] usb 8-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 355.090110][ T29] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.098416][ T29] usb 8-1: Product: syz [ 355.102705][ T29] usb 8-1: Manufacturer: syz [ 355.107955][ T29] usb 8-1: SerialNumber: syz [ 355.119475][ T29] usb 8-1: config 0 descriptor?? [ 355.164488][T10811] pim6reg1: entered promiscuous mode [ 355.174437][T10811] pim6reg1: entered allmulticast mode [ 355.192360][T10811] FAULT_INJECTION: forcing a failure. [ 355.192360][T10811] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 355.206985][T10811] CPU: 0 UID: 0 PID: 10811 Comm: syz.3.1485 Not tainted syzkaller #0 PREEMPT(full) [ 355.207012][T10811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 355.207027][T10811] Call Trace: [ 355.207035][T10811] [ 355.207045][T10811] dump_stack_lvl+0xe8/0x150 [ 355.207080][T10811] should_fail_ex+0x412/0x560 [ 355.207110][T10811] _copy_from_user+0x2d/0xb0 [ 355.207142][T10811] core_sys_select+0x578/0xc30 [ 355.207185][T10811] ? __pfx_core_sys_select+0x10/0x10 [ 355.207234][T10811] ? __pfx_set_user_sigmask+0x10/0x10 [ 355.207276][T10811] __se_sys_pselect6+0x267/0x320 [ 355.207307][T10811] ? __pfx___se_sys_pselect6+0x10/0x10 [ 355.207332][T10811] ? __pfx_ksys_write+0x10/0x10 [ 355.207358][T10811] ? __x64_sys_pselect6+0x21/0xf0 [ 355.207385][T10811] do_syscall_64+0x14d/0xf80 [ 355.207406][T10811] ? trace_irq_disable+0x3b/0x150 [ 355.207430][T10811] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.207450][T10811] ? clear_bhb_loop+0x40/0x90 [ 355.207475][T10811] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.207496][T10811] RIP: 0033:0x7f46dc39c799 [ 355.207516][T10811] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 355.207535][T10811] RSP: 002b:00007f46da5f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 355.207557][T10811] RAX: ffffffffffffffda RBX: 00007f46dc615fa0 RCX: 00007f46dc39c799 [ 355.207573][T10811] RDX: 0000200000000840 RSI: 0000200000000800 RDI: 0000000000000040 [ 355.207587][T10811] RBP: 00007f46da5f6090 R08: 0000000000000000 R09: 0000000000000000 [ 355.207600][T10811] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 355.207613][T10811] R13: 00007f46dc616038 R14: 00007f46dc615fa0 R15: 00007fff5ad4e7f8 [ 355.207645][T10811] [ 355.414372][ T29] gs_usb 8-1:0.0: Configuring for 168 interfaces [ 355.421694][ T29] gs_usb 8-1:0.0: Couldn't get bit timing const for channel 0 (-EREMOTEIO) [ 355.430796][ T29] gs_usb 8-1:0.0: probe with driver gs_usb failed with error -121 [ 355.554510][T10819] netlink: 'syz.6.1486': attribute type 10 has an invalid length. [ 355.572206][T10819] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1486'. [ 355.611133][T10819] batman_adv: batadv0: Adding interface: veth0_vlan [ 355.618011][T10819] batman_adv: batadv0: The MTU of interface veth0_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 355.645941][ T10] usb 8-1: USB disconnect, device number 44 [ 355.663398][T10819] batman_adv: batadv0: Interface activated: veth0_vlan [ 356.146119][ T5945] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 356.316097][ T5945] usb 4-1: Using ep0 maxpacket: 32 [ 356.327757][ T5945] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 356.348216][ T5945] usb 4-1: config 0 has no interface number 0 [ 356.360167][ T5945] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 356.370609][T10833] FAULT_INJECTION: forcing a failure. [ 356.370609][T10833] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 356.396153][ T5945] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.406291][T10833] CPU: 0 UID: 0 PID: 10833 Comm: syz.6.1490 Not tainted syzkaller #0 PREEMPT(full) [ 356.406318][T10833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 356.406331][T10833] Call Trace: [ 356.406366][T10833] [ 356.406375][T10833] dump_stack_lvl+0xe8/0x150 [ 356.406412][T10833] should_fail_ex+0x412/0x560 [ 356.406441][T10833] _copy_from_user+0x2d/0xb0 [ 356.406482][T10833] ___sys_recvmsg+0x175/0x590 [ 356.406512][T10833] ? __pfx____sys_recvmsg+0x10/0x10 [ 356.406579][T10833] ? __fget_files+0x3a0/0x420 [ 356.406618][T10833] do_recvmmsg+0x334/0x800 [ 356.406652][T10833] ? __pfx_do_recvmmsg+0x10/0x10 [ 356.406688][T10833] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 356.406730][T10833] __x64_sys_recvmmsg+0x198/0x250 [ 356.406758][T10833] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 356.406796][T10833] do_syscall_64+0x14d/0xf80 [ 356.406816][T10833] ? trace_irq_disable+0x3b/0x150 [ 356.406840][T10833] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.406863][T10833] ? clear_bhb_loop+0x40/0x90 [ 356.406888][T10833] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.406909][T10833] RIP: 0033:0x7ff571f9c799 [ 356.406928][T10833] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 356.406946][T10833] RSP: 002b:00007ff572e08028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 356.406967][T10833] RAX: ffffffffffffffda RBX: 00007ff572215fa0 RCX: 00007ff571f9c799 [ 356.406983][T10833] RDX: 0000000000000004 RSI: 0000200000007d40 RDI: 0000000000000003 [ 356.406996][T10833] RBP: 00007ff572e08090 R08: 0000000000000000 R09: 0000000000000000 [ 356.407009][T10833] R10: 0000000000002120 R11: 0000000000000246 R12: 0000000000000001 [ 356.407021][T10833] R13: 00007ff572216038 R14: 00007ff572215fa0 R15: 00007ffc07e47598 [ 356.407053][T10833] [ 356.410142][ T5945] usb 4-1: Product: syz [ 356.729202][ T5945] usb 4-1: Manufacturer: syz [ 356.739304][ T5945] usb 4-1: SerialNumber: syz [ 356.762234][ T5945] usb 4-1: config 0 descriptor?? [ 356.805276][T10838] block device autoloading is deprecated and will be removed. [ 357.201611][ T5945] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 357.214984][ T5945] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 357.287347][T10861] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1498'. [ 357.302255][T10862] FAULT_INJECTION: forcing a failure. [ 357.302255][T10862] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 357.318888][T10861] block nbd0: Unsupported socket: should be TCP or UNIX. [ 357.326946][T10862] CPU: 0 UID: 0 PID: 10862 Comm: syz.7.1497 Not tainted syzkaller #0 PREEMPT(full) [ 357.326972][T10862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 357.326985][T10862] Call Trace: [ 357.326994][T10862] [ 357.327003][T10862] dump_stack_lvl+0xe8/0x150 [ 357.327036][T10862] should_fail_ex+0x412/0x560 [ 357.327064][T10862] _copy_from_user+0x2d/0xb0 [ 357.327092][T10862] ___sys_sendmsg+0x1c6/0x360 [ 357.327122][T10862] ? __pfx____sys_sendmsg+0x10/0x10 [ 357.327180][T10862] ? __fget_files+0x2a/0x420 [ 357.327205][T10862] ? __fget_files+0x3a0/0x420 [ 357.327241][T10862] __x64_sys_sendmsg+0x1bd/0x2a0 [ 357.327267][T10862] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 357.327308][T10862] ? __pfx_ksys_write+0x10/0x10 [ 357.327339][T10862] do_syscall_64+0x14d/0xf80 [ 357.327359][T10862] ? trace_irq_disable+0x3b/0x150 [ 357.327383][T10862] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.327404][T10862] ? clear_bhb_loop+0x40/0x90 [ 357.327429][T10862] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.327449][T10862] RIP: 0033:0x7f4b4bd9c799 [ 357.327468][T10862] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 357.327484][T10862] RSP: 002b:00007f4b49fd5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 357.327505][T10862] RAX: ffffffffffffffda RBX: 00007f4b4c016090 RCX: 00007f4b4bd9c799 [ 357.327520][T10862] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000005 [ 357.327533][T10862] RBP: 00007f4b49fd5090 R08: 0000000000000000 R09: 0000000000000000 [ 357.327545][T10862] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 357.327557][T10862] R13: 00007f4b4c016128 R14: 00007f4b4c016090 R15: 00007ffc0bbbf988 [ 357.327589][T10862] [ 357.526722][ T5945] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 357.541783][T10863] netlink: 1004 bytes leftover after parsing attributes in process `syz.6.1498'. [ 357.549158][ T5945] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 357.582548][ T5945] usb 4-1: USB disconnect, device number 79 [ 357.685893][T10865] syzkaller1: entered promiscuous mode [ 357.692781][T10865] syzkaller1: entered allmulticast mode [ 357.719874][T10865] FAULT_INJECTION: forcing a failure. [ 357.719874][T10865] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 357.764032][T10865] CPU: 0 UID: 0 PID: 10865 Comm: syz.5.1499 Not tainted syzkaller #0 PREEMPT(full) [ 357.764058][T10865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 357.764071][T10865] Call Trace: [ 357.764080][T10865] [ 357.764088][T10865] dump_stack_lvl+0xe8/0x150 [ 357.764122][T10865] should_fail_ex+0x412/0x560 [ 357.764150][T10865] _copy_from_iter+0x1d3/0x1670 [ 357.764173][T10865] ? format_decode+0x60f/0xe10 [ 357.764206][T10865] ? vsnprintf+0xdf1/0xee0 [ 357.764231][T10865] ? __pfx__copy_from_iter+0x10/0x10 [ 357.764268][T10865] tun_get_user+0x267/0x4300 [ 357.764289][T10865] ? unwind_get_return_address+0x4d/0x90 [ 357.764330][T10865] ? __pfx_tun_get_user+0x10/0x10 [ 357.764350][T10865] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 357.764381][T10865] ? lockdep_hardirqs_on+0x7a/0x110 [ 357.764401][T10865] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 357.764430][T10865] ? save_netdev_trace_buffer+0x4e2/0x610 [ 357.764469][T10865] ? ref_tracker_alloc+0x35c/0x4c0 [ 357.764493][T10865] ? tun_chr_write_iter+0x60/0x210 [ 357.764520][T10865] ? vfs_write+0x61d/0xb90 [ 357.764536][T10865] ? ksys_write+0x150/0x270 [ 357.764554][T10865] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 357.764584][T10865] ? tun_get+0x1c/0x2f0 [ 357.764609][T10865] ? tun_get+0x1c/0x2f0 [ 357.764636][T10865] ? tun_get+0x1c/0x2f0 [ 357.764658][T10865] tun_chr_write_iter+0x113/0x210 [ 357.764689][T10865] vfs_write+0x61d/0xb90 [ 357.764714][T10865] ? __pfx_vfs_write+0x10/0x10 [ 357.764743][T10865] ? __fget_files+0x2a/0x420 [ 357.764775][T10865] ksys_write+0x150/0x270 [ 357.764797][T10865] ? __pfx_ksys_write+0x10/0x10 [ 357.764826][T10865] do_syscall_64+0x14d/0xf80 [ 357.764845][T10865] ? trace_irq_disable+0x3b/0x150 [ 357.764869][T10865] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.764889][T10865] ? clear_bhb_loop+0x40/0x90 [ 357.764914][T10865] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.764934][T10865] RIP: 0033:0x7f0fdfd9c799 [ 357.764953][T10865] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 357.764971][T10865] RSP: 002b:00007f0fe0c28028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 357.764996][T10865] RAX: ffffffffffffffda RBX: 00007f0fe0015fa0 RCX: 00007f0fdfd9c799 [ 357.765011][T10865] RDX: 000000000000002e RSI: 0000200000001ec0 RDI: 0000000000000003 [ 357.765024][T10865] RBP: 00007f0fe0c28090 R08: 0000000000000000 R09: 0000000000000000 [ 357.765037][T10865] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 357.765049][T10865] R13: 00007f0fe0016038 R14: 00007f0fe0015fa0 R15: 00007ffe9a1152b8 [ 357.765080][T10865] [ 358.171032][T10868] syzkaller1: entered promiscuous mode [ 358.179765][T10868] syzkaller1: entered allmulticast mode [ 358.275213][ T1224] usb 8-1: new high-speed USB device number 45 using dummy_hcd [ 358.419834][ T1224] usb 8-1: device descriptor read/64, error -71 [ 358.518441][T10884] FAULT_INJECTION: forcing a failure. [ 358.518441][T10884] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 358.531781][T10884] CPU: 0 UID: 0 PID: 10884 Comm: syz.6.1505 Not tainted syzkaller #0 PREEMPT(full) [ 358.531808][T10884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 358.531821][T10884] Call Trace: [ 358.531829][T10884] [ 358.531838][T10884] dump_stack_lvl+0xe8/0x150 [ 358.531871][T10884] should_fail_ex+0x412/0x560 [ 358.531900][T10884] _copy_from_user+0x2d/0xb0 [ 358.531927][T10884] __sys_sendto+0x292/0x590 [ 358.531951][T10884] ? __pfx___sys_sendto+0x10/0x10 [ 358.531970][T10884] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 358.532005][T10884] ? __fget_files+0x3a0/0x420 [ 358.532042][T10884] ? ksys_write+0x242/0x270 [ 358.532082][T10884] ? __pfx_ksys_write+0x10/0x10 [ 358.532123][T10884] __x64_sys_sendto+0xde/0x100 [ 358.532149][T10884] do_syscall_64+0x14d/0xf80 [ 358.532169][T10884] ? trace_irq_disable+0x3b/0x150 [ 358.532194][T10884] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.532214][T10884] ? clear_bhb_loop+0x40/0x90 [ 358.532241][T10884] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.532263][T10884] RIP: 0033:0x7ff571f9c799 [ 358.532282][T10884] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 358.532300][T10884] RSP: 002b:00007ff572e08028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 358.532322][T10884] RAX: ffffffffffffffda RBX: 00007ff572215fa0 RCX: 00007ff571f9c799 [ 358.532337][T10884] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 358.532349][T10884] RBP: 00007ff572e08090 R08: 0000200000000300 R09: 000000000000001c [ 358.532363][T10884] R10: 000000000000003a R11: 0000000000000246 R12: 0000000000000001 [ 358.532375][T10884] R13: 00007ff572216038 R14: 00007ff572215fa0 R15: 00007ffc07e47598 [ 358.532410][T10884] [ 358.786110][ T1224] usb 8-1: new high-speed USB device number 46 using dummy_hcd [ 358.916184][ T1224] usb 8-1: device descriptor read/64, error -71 [ 359.016833][ T5945] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 359.026450][ T1224] usb usb8-port1: attempt power cycle [ 359.136122][ T29] usb 7-1: new full-speed USB device number 49 using dummy_hcd [ 359.176732][T10882] kvm: kvm [10880]: vcpu2, guest rIP: 0x9130 Unhandled WRMSR(0xc1) = 0xfffffc18 [ 359.187675][T10882] kvm: kvm [10880]: vcpu2, guest rIP: 0x9130 Unhandled WRMSR(0xc2) = 0xfffffc18 [ 359.199702][T10882] kvm: kvm [10880]: vcpu2, guest rIP: 0x9130 Unhandled WRMSR(0x11e) = 0xfffffc18 [ 359.212166][T10882] kvm: kvm [10880]: vcpu2, guest rIP: 0x9130 Unhandled WRMSR(0x186) = 0xfffffc18 [ 359.221489][T10882] kvm: kvm [10880]: vcpu2, guest rIP: 0x9130 Unhandled WRMSR(0x187) = 0xfffffc18 [ 359.230833][ T5847] usb 4-1: new full-speed USB device number 80 using dummy_hcd [ 359.244436][ T5945] usb 6-1: unable to get BOS descriptor or descriptor too short [ 359.262361][ T5945] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 359.272278][ T29] usb 7-1: device descriptor read/64, error -71 [ 359.278742][ T5945] usb 6-1: can't read configurations, error -71 [ 359.366258][ T1224] usb 8-1: new high-speed USB device number 47 using dummy_hcd [ 359.390683][ T1224] usb 8-1: device descriptor read/8, error -71 [ 359.398253][ T5847] usb 4-1: unable to get BOS descriptor or descriptor too short [ 359.406639][ T5847] usb 4-1: not running at top speed; connect to a high speed hub [ 359.414507][ T5847] usb 4-1: no configurations [ 359.419444][ T5847] usb 4-1: can't read configurations, error -22 [ 359.516120][ T29] usb 7-1: new full-speed USB device number 50 using dummy_hcd [ 359.556198][ T5847] usb 4-1: new full-speed USB device number 81 using dummy_hcd [ 359.636142][ T1224] usb 8-1: new high-speed USB device number 48 using dummy_hcd [ 359.646290][ T29] usb 7-1: device descriptor read/64, error -71 [ 359.656738][ T1224] usb 8-1: device descriptor read/8, error -71 [ 359.711553][ T5847] usb 4-1: unable to get BOS descriptor or descriptor too short [ 359.720161][ T5847] usb 4-1: not running at top speed; connect to a high speed hub [ 359.728011][ T5847] usb 4-1: no configurations [ 359.732658][ T5847] usb 4-1: can't read configurations, error -22 [ 359.739769][ T5847] usb usb4-port1: attempt power cycle [ 359.756485][ T29] usb usb7-port1: attempt power cycle [ 359.766523][ T1224] usb usb8-port1: unable to enumerate USB device [ 360.076113][ T5847] usb 4-1: new full-speed USB device number 82 using dummy_hcd [ 360.096142][ T29] usb 7-1: new full-speed USB device number 51 using dummy_hcd [ 360.106879][ T5847] usb 4-1: unable to get BOS descriptor or descriptor too short [ 360.115301][ T5847] usb 4-1: not running at top speed; connect to a high speed hub [ 360.123158][ T5847] usb 4-1: no configurations [ 360.127317][ T29] usb 7-1: device descriptor read/8, error -71 [ 360.127969][ T5847] usb 4-1: can't read configurations, error -22 [ 360.266285][ T5847] usb 4-1: new full-speed USB device number 83 using dummy_hcd [ 360.288914][ T5847] usb 4-1: unable to get BOS descriptor or descriptor too short [ 360.297210][ T5847] usb 4-1: not running at top speed; connect to a high speed hub [ 360.304986][ T5847] usb 4-1: no configurations [ 360.309709][ T5847] usb 4-1: can't read configurations, error -22 [ 360.318118][ T5847] usb usb4-port1: unable to enumerate USB device [ 360.326305][ T5945] usb 6-1: new full-speed USB device number 50 using dummy_hcd [ 360.366229][ T29] usb 7-1: new full-speed USB device number 52 using dummy_hcd [ 360.397594][ T29] usb 7-1: device descriptor read/8, error -71 [ 360.480915][ T5945] usb 6-1: config index 0 descriptor too short (expected 35577, got 27) [ 360.489429][ T5945] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 360.499141][ T5945] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 360.508219][ T5945] usb 6-1: config 1 has no interface number 0 [ 360.514656][ T29] usb usb7-port1: unable to enumerate USB device [ 360.521059][ T5945] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 360.532638][ T5945] usb 6-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 360.545618][ T5945] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 360.554695][ T5945] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.572931][ T5945] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found [ 360.781544][ T5945] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now attached [ 361.186202][ T5847] usb 8-1: new high-speed USB device number 49 using dummy_hcd [ 361.194176][ T29] usb 6-1: USB disconnect, device number 50 [ 361.205978][ T29] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected [ 361.346087][ T5847] usb 8-1: Using ep0 maxpacket: 32 [ 361.352932][ T5847] usb 8-1: config 0 has an invalid interface number: 67 but max is 0 [ 361.361210][ T5847] usb 8-1: config 0 has no interface number 0 [ 361.371281][ T5847] usb 8-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 361.382073][ T5847] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.390325][ T5847] usb 8-1: Product: syz [ 361.394524][ T5847] usb 8-1: Manufacturer: syz [ 361.399722][ T5847] usb 8-1: SerialNumber: syz [ 361.407498][ T5847] usb 8-1: config 0 descriptor?? [ 361.824102][ T5847] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 361.834991][ T5847] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 362.048491][ T5847] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 362.074310][ T5847] smsc95xx 8-1:0.67: probe with driver smsc95xx failed with error -71 [ 362.102555][ T5847] usb 8-1: USB disconnect, device number 49 [ 362.166417][T10915] FAULT_INJECTION: forcing a failure. [ 362.166417][T10915] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 362.180380][T10915] CPU: 1 UID: 0 PID: 10915 Comm: syz.3.1514 Not tainted syzkaller #0 PREEMPT(full) [ 362.180406][T10915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 362.180419][T10915] Call Trace: [ 362.180428][T10915] [ 362.180437][T10915] dump_stack_lvl+0xe8/0x150 [ 362.180473][T10915] should_fail_ex+0x412/0x560 [ 362.180504][T10915] prepare_alloc_pages+0x22a/0x650 [ 362.180533][T10915] __alloc_frozen_pages_noprof+0x119/0x3d0 [ 362.180562][T10915] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 362.180582][T10915] ? __pfx_policy_nodemask+0x10/0x10 [ 362.180606][T10915] alloc_pages_mpol+0x235/0x490 [ 362.180626][T10915] folio_alloc_mpol_noprof+0x39/0x160 [ 362.180644][T10915] vma_alloc_folio_noprof+0xe1/0x1e0 [ 362.180663][T10915] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 362.180687][T10915] do_pte_missing+0x159d/0x33f0 [ 362.180711][T10915] ? handle_mm_fault+0xee/0x3170 [ 362.180734][T10915] handle_mm_fault+0x1bd7/0x3170 [ 362.180772][T10915] ? handle_mm_fault+0xee/0x3170 [ 362.180798][T10915] ? __pfx_handle_mm_fault+0x10/0x10 [ 362.180817][T10915] ? lock_vma_under_rcu+0x45a/0x500 [ 362.180839][T10915] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 362.180874][T10915] do_user_addr_fault+0xa73/0x1340 [ 362.180901][T10915] ? rcu_is_watching+0x15/0xb0 [ 362.180916][T10915] ? trace_page_fault_user+0x84/0x210 [ 362.180939][T10915] exc_page_fault+0x6a/0xc0 [ 362.180955][T10915] asm_exc_page_fault+0x26/0x30 [ 362.180982][T10915] RIP: 0033:0x7f46dc25df4b [ 362.180997][T10915] Code: 00 00 00 48 8d 3d 3d a7 1a 00 48 89 c1 31 c0 e8 9b 32 ff ff eb d2 66 0f 1f 84 00 00 00 00 00 55 31 c0 53 48 81 ec 68 10 00 00 <48> 89 7c 24 08 48 8d 3d 71 a7 1a 00 48 89 34 24 48 8b 14 24 48 8b [ 362.181010][T10915] RSP: 002b:00007f46da5b2fa0 EFLAGS: 00010206 [ 362.181024][T10915] RAX: 0000000000000000 RBX: 00007f46dc616180 RCX: 0000000000000000 [ 362.181034][T10915] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000200000001100 [ 362.181044][T10915] RBP: 00007f46da5b4090 R08: 0000000000000000 R09: 0000000000000000 [ 362.181053][T10915] R10: 0000200000001100 R11: 0000000000000000 R12: 0000000000000001 [ 362.181062][T10915] R13: 00007f46dc616218 R14: 00007f46dc616180 R15: 00007fff5ad4e7f8 [ 362.181085][T10915] [ 362.181352][T10915] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 363.006214][ T5945] usb 8-1: new high-speed USB device number 50 using dummy_hcd [ 363.156163][ T5945] usb 8-1: Using ep0 maxpacket: 8 [ 363.163256][ T5945] usb 8-1: unable to get BOS descriptor or descriptor too short [ 363.172908][ T5945] usb 8-1: config 1 has an invalid interface number: 96 but max is 2 [ 363.182048][ T5945] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 363.192439][ T5945] usb 8-1: config 1 has 4 interfaces, different from the descriptor's value: 3 [ 363.201772][ T5945] usb 8-1: config 1 has no interface number 3 [ 363.208217][ T5945] usb 8-1: too many endpoints for config 1 interface 96 altsetting 137: 244, using maximum allowed: 30 [ 363.219365][ T5945] usb 8-1: config 1 interface 96 altsetting 137 has 0 endpoint descriptors, different from the interface descriptor's value: 244 [ 363.244067][ T5945] usb 8-1: config 1 interface 96 has no altsetting 0 [ 363.253557][ T5945] usb 8-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice= 0.40 [ 363.263578][ T5945] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.273390][ T5945] usb 8-1: Product: syz [ 363.277818][ T5945] usb 8-1: Manufacturer: syz [ 363.282488][ T5945] usb 8-1: SerialNumber: syz [ 364.758622][T10899] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 364.774313][T10912] netlink: 'syz.6.1513': attribute type 1 has an invalid length. [ 364.782967][T10912] netlink: 224 bytes leftover after parsing attributes in process `syz.6.1513'. [ 364.804460][T10912] workqueue: Failed to create a rescuer kthread for wq "phy3": -EINTR [ 364.813942][T10913] netlink: 'syz.3.1514': attribute type 1 has an invalid length. [ 364.843893][T10913] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1514'. [ 364.928560][T10919] netlink: 248 bytes leftover after parsing attributes in process `syz.7.1516'. [ 365.082946][T10930] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1518'. [ 365.202177][ T5945] usb 8-1: USB disconnect, device number 50 [ 365.256300][ T10] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 365.375271][ T6171] udevd[6171]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.96/sound/card5/controlC5/../uevent} for writing: No such file or directory [ 365.392172][ T5857] udevd[5857]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.2/sound/card6/controlC6/../uevent} for writing: No such file or directory [ 365.401249][ T5855] udevd[5855]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.1/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 365.447775][ T10] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 365.456869][ T10] usb 6-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 365.468050][ T10] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 365.479263][ T10] usb 6-1: config 220 has no interface number 2 [ 365.485665][ T10] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 365.499505][ T10] usb 6-1: config 220 interface 0 has no altsetting 0 [ 365.523818][ T10] usb 6-1: config 220 interface 76 has no altsetting 0 [ 365.544993][ T10] usb 6-1: config 220 interface 1 has no altsetting 0 [ 365.564575][ T10] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 365.575561][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.583892][ T10] usb 6-1: Product: syz [ 365.588962][ T10] usb 6-1: Manufacturer: syz [ 365.593691][ T10] usb 6-1: SerialNumber: syz [ 365.734189][T10945] FAULT_INJECTION: forcing a failure. [ 365.734189][T10945] name failslab, interval 1, probability 0, space 0, times 0 [ 365.748217][T10945] CPU: 0 UID: 0 PID: 10945 Comm: syz.7.1523 Not tainted syzkaller #0 PREEMPT(full) [ 365.748237][T10945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 365.748247][T10945] Call Trace: [ 365.748253][T10945] [ 365.748262][T10945] dump_stack_lvl+0xe8/0x150 [ 365.748288][T10945] should_fail_ex+0x412/0x560 [ 365.748309][T10945] should_failslab+0xa8/0x100 [ 365.748326][T10945] __kmalloc_noprof+0xe8/0x760 [ 365.748348][T10945] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 365.748376][T10945] tomoyo_realpath_from_path+0xe3/0x5d0 [ 365.748405][T10945] ? tomoyo_path_number_perm+0x219/0x630 [ 365.748427][T10945] tomoyo_path_number_perm+0x246/0x630 [ 365.748455][T10945] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 365.748476][T10945] ? __lock_acquire+0x6b5/0x2cf0 [ 365.748506][T10945] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 365.748536][T10945] ? __fget_files+0x2a/0x420 [ 365.748582][T10945] ? __fget_files+0x2a/0x420 [ 365.748610][T10945] ? __fget_files+0x3a0/0x420 [ 365.748633][T10945] ? __fget_files+0x2a/0x420 [ 365.748654][T10945] security_file_ioctl+0xc3/0x2a0 [ 365.748675][T10945] __se_sys_ioctl+0x47/0x170 [ 365.748692][T10945] do_syscall_64+0x14d/0xf80 [ 365.748707][T10945] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 365.748722][T10945] ? clear_bhb_loop+0x40/0x90 [ 365.748740][T10945] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 365.748755][T10945] RIP: 0033:0x7f4b4bd9c799 [ 365.748768][T10945] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 365.748781][T10945] RSP: 002b:00007f4b49ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 365.748797][T10945] RAX: ffffffffffffffda RBX: 00007f4b4c015fa0 RCX: 00007f4b4bd9c799 [ 365.748809][T10945] RDX: 00002000000002c0 RSI: 00000000c0306201 RDI: 0000000000000003 [ 365.748818][T10945] RBP: 00007f4b49ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 365.748827][T10945] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 365.748836][T10945] R13: 00007f4b4c016038 R14: 00007f4b4c015fa0 R15: 00007ffc0bbbf988 [ 365.748858][T10945] [ 365.748883][T10945] ERROR: Out of memory at tomoyo_realpath_from_path. [ 365.848266][ T5945] usb 4-1: new full-speed USB device number 84 using dummy_hcd [ 366.127818][ T5945] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 366.140219][ T5945] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 366.151694][ T5945] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 366.164678][ T5945] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 366.182395][ T5945] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 366.192170][ T5945] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 366.200648][ T5945] usb 4-1: Product: syz [ 366.205031][ T5945] usb 4-1: SerialNumber: syz [ 366.215111][T10938] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 366.428518][T10938] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 366.436831][T10938] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 366.477318][ T8717] usb 8-1: new high-speed USB device number 51 using dummy_hcd [ 366.646284][T10938] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 366.656841][ T8717] usb 8-1: Using ep0 maxpacket: 32 [ 366.663004][T10938] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 366.673398][ T8717] usb 8-1: config 0 has an invalid interface number: 67 but max is 0 [ 366.681614][ T8717] usb 8-1: config 0 has no interface number 0 [ 366.688682][T10938] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 366.695981][ T8717] usb 8-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 366.706313][ T8717] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.714368][ T8717] usb 8-1: Product: syz [ 366.719248][ T8717] usb 8-1: Manufacturer: syz [ 366.723213][T10938] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 366.724037][ T8717] usb 8-1: SerialNumber: syz [ 366.743552][T10938] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 366.751230][ T8717] usb 8-1: config 0 descriptor?? [ 366.760073][T10938] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 366.782945][T10938] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 367.184046][ T8717] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 367.195027][ T8717] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 367.208122][T10938] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 367.218446][T10938] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 367.228363][T10938] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 367.235659][T10938] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 367.408370][ T8717] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 367.424242][ T8717] smsc95xx 8-1:0.67: probe with driver smsc95xx failed with error -71 [ 367.440578][ T8717] usb 8-1: USB disconnect, device number 51 [ 367.451096][ T5945] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 367.460624][ T5945] cdc_ncm 4-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 367.469835][ T5945] cdc_ncm 4-1:1.0: setting rx_max = 2048 [ 367.669848][ T5945] cdc_ncm 4-1:1.0: setting tx_max = 184 [ 367.689599][ T5945] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 367.709835][ T5945] usb 4-1: USB disconnect, device number 84 [ 367.728258][ T5945] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM (NO ZLP) [ 368.054459][T10955] binder: 10953:10955 ioctl c0306201 2000000002c0 returned -14 [ 368.062994][T10930] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 368.089594][T10949] netlink: 'syz.5.1517': attribute type 1 has an invalid length. [ 368.097637][T10949] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1517'. [ 368.120799][T10949] workqueue: Failed to create a rescuer kthread for wq "phy5-mac-cmds": -EINTR [ 368.213441][ T10] uvcvideo 6-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 368.279052][ T10] uvcvideo 6-1:220.0: No valid video chain found. [ 368.298976][ T10] usb 6-1: selecting invalid altsetting 0 [ 368.304918][T10960] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1527'. [ 368.318712][T10960] netlink: 2384 bytes leftover after parsing attributes in process `syz.7.1527'. [ 368.336300][T10969] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 368.388026][ T10] usb 6-1: selecting invalid altsetting 0 [ 368.393265][T10975] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 368.407831][ T10] usbtest 6-1:220.1: probe with driver usbtest failed with error -22 [ 368.447990][T10964] FAULT_INJECTION: forcing a failure. [ 368.447990][T10964] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 368.462245][ T10] usb 6-1: USB disconnect, device number 51 [ 368.538155][T10964] CPU: 0 UID: 0 PID: 10964 Comm: syz.6.1528 Not tainted syzkaller #0 PREEMPT(full) [ 368.538181][T10964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 368.538190][T10964] Call Trace: [ 368.538196][T10964] [ 368.538203][T10964] dump_stack_lvl+0xe8/0x150 [ 368.538230][T10964] should_fail_ex+0x412/0x560 [ 368.538253][T10964] _copy_from_user+0x2d/0xb0 [ 368.538273][T10964] ___sys_sendmsg+0x1c6/0x360 [ 368.538294][T10964] ? __pfx____sys_sendmsg+0x10/0x10 [ 368.538334][T10964] ? __fget_files+0x2a/0x420 [ 368.538353][T10964] ? __fget_files+0x3a0/0x420 [ 368.538378][T10964] __x64_sys_sendmsg+0x1bd/0x2a0 [ 368.538397][T10964] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 368.538420][T10964] ? __pfx_ksys_write+0x10/0x10 [ 368.538441][T10964] do_syscall_64+0x14d/0xf80 [ 368.538455][T10964] ? trace_irq_disable+0x3b/0x150 [ 368.538472][T10964] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.538486][T10964] ? clear_bhb_loop+0x40/0x90 [ 368.538504][T10964] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.538518][T10964] RIP: 0033:0x7ff571f9c799 [ 368.538531][T10964] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 368.538543][T10964] RSP: 002b:00007ff572e08028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 368.538557][T10964] RAX: ffffffffffffffda RBX: 00007ff572215fa0 RCX: 00007ff571f9c799 [ 368.538568][T10964] RDX: 0000000004008054 RSI: 0000200000000200 RDI: 0000000000000005 [ 368.538577][T10964] RBP: 00007ff572e08090 R08: 0000000000000000 R09: 0000000000000000 [ 368.538586][T10964] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 368.538595][T10964] R13: 00007ff572216038 R14: 00007ff572215fa0 R15: 00007ffc07e47598 [ 368.538616][T10964] [ 369.006533][ T5847] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 369.126487][ T10] usb 8-1: new high-speed USB device number 52 using dummy_hcd [ 369.166301][ T5847] usb 4-1: Using ep0 maxpacket: 32 [ 369.173234][ T5847] usb 4-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 369.183887][ T5847] usb 4-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 369.197683][ T5847] usb 4-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 369.209540][ T5847] usb 4-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 369.225796][ T5847] usb 4-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 369.238616][ T5847] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.246704][ T5847] usb 4-1: Product: syz [ 369.250887][ T5847] usb 4-1: Manufacturer: syz [ 369.255477][ T5847] usb 4-1: SerialNumber: syz [ 369.266367][ T5945] usb 7-1: new high-speed USB device number 53 using dummy_hcd [ 369.274996][ C0] imon 4-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 369.286575][ T10] usb 8-1: Using ep0 maxpacket: 32 [ 369.299003][ T10] usb 8-1: config 0 has an invalid interface number: 67 but max is 0 [ 369.315104][ T10] usb 8-1: config 0 has no interface number 0 [ 369.325933][ T5847] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/input/input30 [ 369.338166][ T8717] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 369.351473][ T10] usb 8-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 369.363248][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.372604][ T10] usb 8-1: Product: syz [ 369.376856][ T10] usb 8-1: Manufacturer: syz [ 369.384692][ T10] usb 8-1: SerialNumber: syz [ 369.394345][ T10] usb 8-1: config 0 descriptor?? [ 369.426102][ T5945] usb 7-1: Using ep0 maxpacket: 32 [ 369.433636][ T5945] usb 7-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 369.444300][ T5945] usb 7-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 369.457324][ T5945] usb 7-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 369.468639][ T5945] usb 7-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 369.484092][ T5945] usb 7-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 369.493501][ T5945] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.499338][ T8717] usb 6-1: Using ep0 maxpacket: 32 [ 369.503311][ T5945] usb 7-1: Product: syz [ 369.511362][ T5945] usb 7-1: Manufacturer: syz [ 369.518780][ T5945] usb 7-1: SerialNumber: syz [ 369.525161][ T8717] usb 6-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 369.537103][ T5847] imon 4-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 369.545441][ T5847] (id 0x00) [ 369.549374][ T8717] usb 6-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 369.556666][ C1] imon 7-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 369.565531][ T8717] usb 6-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 369.581138][ T8717] usb 6-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 369.597726][ T8717] usb 6-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 369.613934][ T5945] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:155.0/input/input32 [ 369.623108][ T8717] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.638172][ T8717] usb 6-1: Product: syz [ 369.642428][ T8717] usb 6-1: Manufacturer: syz [ 369.647579][ T8717] usb 6-1: SerialNumber: syz [ 369.679177][ C0] imon 6-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 369.691435][ T8717] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:155.0/input/input33 [ 369.746099][ T5945] imon 7-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 369.748725][ T5847] rc_core: IR keymap rc-imon-pad not found [ 369.759699][ T5945] (id 0x00) [ 369.765805][ T5847] Registered IR keymap rc-empty [ 369.771321][ T5847] imon 4-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 369.782497][ T5847] imon 4-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 369.807338][ T5847] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/rc/rc0 [ 369.830217][ T10] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 369.844579][ T5847] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/rc/rc0/input31 [ 369.855511][ T10] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 369.866659][ T5945] rc_core: IR keymap rc-imon-pad not found [ 369.878258][ T5945] Registered IR keymap rc-empty [ 369.883222][ T5945] imon 7-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 369.895081][ T5945] imon 7-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 369.895627][ T5847] imon 4-1:155.0: iMON device (15c2:ffdc, intf0) on usb<4:85> initialized [ 369.926146][ T8717] imon 6-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 369.934570][ T8717] (id 0x00) [ 369.979172][ T5945] rc rc1: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:155.0/rc/rc1 [ 370.001401][T10983] imon:display_open: display port is already open [ 370.032005][ T5945] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:155.0/rc/rc1/input34 [ 370.032096][ T5847] usb 4-1: USB disconnect, device number 85 [ 370.076692][ T8717] rc_core: IR keymap rc-imon-pad not found [ 370.082782][ T10] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 370.100982][ T5945] imon 7-1:155.0: iMON device (15c2:ffdc, intf0) on usb<7:53> initialized [ 370.105277][ T8717] Registered IR keymap rc-empty [ 370.120839][ T10] smsc95xx 8-1:0.67: probe with driver smsc95xx failed with error -71 [ 370.135123][T10996] imon:display_open: could not find interface for minor 0 [ 370.150756][ T8717] imon 6-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 370.165624][ T10] usb 8-1: USB disconnect, device number 52 [ 370.175321][T10996] FAULT_INJECTION: forcing a failure. [ 370.175321][T10996] name failslab, interval 1, probability 0, space 0, times 0 [ 370.181392][ T8717] imon 6-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 370.213271][T10996] CPU: 1 UID: 0 PID: 10996 Comm: syz.6.1536 Not tainted syzkaller #0 PREEMPT(full) [ 370.213297][T10996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 370.213311][T10996] Call Trace: [ 370.213319][T10996] [ 370.213329][T10996] dump_stack_lvl+0xe8/0x150 [ 370.213362][T10996] should_fail_ex+0x412/0x560 [ 370.213392][T10996] should_failslab+0xa8/0x100 [ 370.213413][T10996] ? do_getname+0x2e/0x250 [ 370.213437][T10996] kmem_cache_alloc_noprof+0x87/0x650 [ 370.213472][T10996] do_getname+0x2e/0x250 [ 370.213488][T10996] ? getname_flags+0x11/0x20 [ 370.213506][T10996] do_sys_openat2+0xca/0x200 [ 370.213527][T10996] ? __pfx_do_sys_openat2+0x10/0x10 [ 370.213549][T10996] ? ksys_write+0x242/0x270 [ 370.213564][T10996] ? __pfx_ksys_write+0x10/0x10 [ 370.213580][T10996] __x64_sys_openat+0x138/0x170 [ 370.213603][T10996] do_syscall_64+0x14d/0xf80 [ 370.213618][T10996] ? trace_irq_disable+0x3b/0x150 [ 370.213636][T10996] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.213650][T10996] ? clear_bhb_loop+0x40/0x90 [ 370.213668][T10996] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.213682][T10996] RIP: 0033:0x7ff571f5cfce [ 370.213696][T10996] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 370.213708][T10996] RSP: 002b:00007ff572e07b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 370.213724][T10996] RAX: ffffffffffffffda RBX: 00007ff572e086c0 RCX: 00007ff571f5cfce [ 370.213734][T10996] RDX: 0000000000000002 RSI: 00007ff572e07c00 RDI: ffffffffffffff9c [ 370.213745][T10996] RBP: 00007ff572e08090 R08: 0000000000000000 R09: 0000000000000000 [ 370.213754][T10996] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 370.213763][T10996] R13: 00007ff572216038 R14: 00007ff572215fa0 R15: 00007ffc07e47598 [ 370.213785][T10996] [ 370.408056][T10998] imon:display_open: could not find interface for minor 0 [ 370.421923][T10998] imon:display_open: could not find interface for minor 0 [ 370.454085][ T8714] usb 7-1: USB disconnect, device number 53 [ 370.461007][ T8717] rc rc2: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:155.0/rc/rc2 [ 370.538788][ T8717] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:155.0/rc/rc2/input35 [ 370.601360][ T8717] imon 6-1:155.0: iMON device (15c2:ffdc, intf0) on usb<6:52> initialized [ 370.648897][ T8717] usb 6-1: USB disconnect, device number 52 [ 370.849190][T11007] FAULT_INJECTION: forcing a failure. [ 370.849190][T11007] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 370.862451][T11007] CPU: 0 UID: 0 PID: 11007 Comm: syz.3.1540 Not tainted syzkaller #0 PREEMPT(full) [ 370.862478][T11007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 370.862490][T11007] Call Trace: [ 370.862499][T11007] [ 370.862507][T11007] dump_stack_lvl+0xe8/0x150 [ 370.862540][T11007] should_fail_ex+0x412/0x560 [ 370.862579][T11007] _copy_from_iter+0x1d3/0x1670 [ 370.862601][T11007] ? format_decode+0x60f/0xe10 [ 370.862631][T11007] ? vsnprintf+0xdf1/0xee0 [ 370.862655][T11007] ? __pfx__copy_from_iter+0x10/0x10 [ 370.862690][T11007] tun_get_user+0x267/0x4300 [ 370.862709][T11007] ? unwind_get_return_address+0x4d/0x90 [ 370.862736][T11007] ? __lock_acquire+0x6b5/0x2cf0 [ 370.862773][T11007] ? __pfx_tun_get_user+0x10/0x10 [ 370.862789][T11007] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 370.862817][T11007] ? lockdep_hardirqs_on+0x7a/0x110 [ 370.862836][T11007] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 370.862876][T11007] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 370.862903][T11007] ? lockdep_hardirqs_on+0x7a/0x110 [ 370.862921][T11007] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 370.862964][T11007] ? tun_get+0x1c/0x2f0 [ 370.862993][T11007] tun_chr_write_iter+0x113/0x210 [ 370.863025][T11007] vfs_write+0x61d/0xb90 [ 370.863050][T11007] ? __pfx_vfs_write+0x10/0x10 [ 370.863077][T11007] ? __fget_files+0x2a/0x420 [ 370.863110][T11007] ksys_write+0x150/0x270 [ 370.863130][T11007] ? __pfx_ksys_write+0x10/0x10 [ 370.863158][T11007] do_syscall_64+0x14d/0xf80 [ 370.863177][T11007] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.863196][T11007] ? clear_bhb_loop+0x40/0x90 [ 370.863219][T11007] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.863239][T11007] RIP: 0033:0x7f46dc39c799 [ 370.863257][T11007] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 370.863273][T11007] RSP: 002b:00007f46da5f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 370.863294][T11007] RAX: ffffffffffffffda RBX: 00007f46dc615fa0 RCX: 00007f46dc39c799 [ 370.863308][T11007] RDX: 000000000000340a RSI: 0000200000000300 RDI: 0000000000000004 [ 370.863321][T11007] RBP: 00007f46da5f6090 R08: 0000000000000000 R09: 0000000000000000 [ 370.863333][T11007] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 370.863344][T11007] R13: 00007f46dc616038 R14: 00007f46dc615fa0 R15: 00007fff5ad4e7f8 [ 370.863374][T11007] [ 371.279552][T11010] random: crng reseeded on system resumption [ 371.305980][T11010] Unrecognized hibernate image header format! [ 371.318179][T11010] PM: hibernation: Image mismatch: architecture specific data [ 371.327806][T11010] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 371.335070][T11010] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 371.500762][T11026] FAULT_INJECTION: forcing a failure. [ 371.500762][T11026] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 371.514531][T11026] CPU: 1 UID: 0 PID: 11026 Comm: syz.6.1546 Not tainted syzkaller #0 PREEMPT(full) [ 371.514559][T11026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 371.514572][T11026] Call Trace: [ 371.514581][T11026] [ 371.514590][T11026] dump_stack_lvl+0xe8/0x150 [ 371.514626][T11026] should_fail_ex+0x412/0x560 [ 371.514668][T11026] _copy_from_user+0x2d/0xb0 [ 371.514705][T11026] ___sys_sendmsg+0x1c6/0x360 [ 371.514735][T11026] ? __pfx____sys_sendmsg+0x10/0x10 [ 371.514791][T11026] ? __fget_files+0x2a/0x420 [ 371.514818][T11026] ? __fget_files+0x3a0/0x420 [ 371.514853][T11026] __x64_sys_sendmsg+0x1bd/0x2a0 [ 371.514880][T11026] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 371.514912][T11026] ? __pfx_ksys_write+0x10/0x10 [ 371.514951][T11026] do_syscall_64+0x14d/0xf80 [ 371.514972][T11026] ? trace_irq_disable+0x3b/0x150 [ 371.514995][T11026] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.515017][T11026] ? clear_bhb_loop+0x40/0x90 [ 371.515042][T11026] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.515062][T11026] RIP: 0033:0x7ff571f9c799 [ 371.515082][T11026] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 371.515100][T11026] RSP: 002b:00007ff572e08028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 371.515121][T11026] RAX: ffffffffffffffda RBX: 00007ff572215fa0 RCX: 00007ff571f9c799 [ 371.515137][T11026] RDX: 0000000004008054 RSI: 0000200000000200 RDI: 0000000000000009 [ 371.515151][T11026] RBP: 00007ff572e08090 R08: 0000000000000000 R09: 0000000000000000 [ 371.515164][T11026] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 371.515176][T11026] R13: 00007ff572216038 R14: 00007ff572215fa0 R15: 00007ffc07e47598 [ 371.515208][T11026] [ 371.866676][ T1224] usb 8-1: new high-speed USB device number 53 using dummy_hcd [ 371.884133][T11035] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 371.897346][T11038] netlink: 19 bytes leftover after parsing attributes in process `syz.5.1549'. [ 371.952069][T11042] FAULT_INJECTION: forcing a failure. [ 371.952069][T11042] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 371.967739][T11042] CPU: 1 UID: 0 PID: 11042 Comm: syz.5.1550 Not tainted syzkaller #0 PREEMPT(full) [ 371.967763][T11042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 371.967774][T11042] Call Trace: [ 371.967784][T11042] [ 371.967792][T11042] dump_stack_lvl+0xe8/0x150 [ 371.967821][T11042] should_fail_ex+0x412/0x560 [ 371.967844][T11042] _copy_from_user+0x2d/0xb0 [ 371.967867][T11042] ___sys_sendmsg+0x1c6/0x360 [ 371.967891][T11042] ? __pfx____sys_sendmsg+0x10/0x10 [ 371.967936][T11042] ? __fget_files+0x2a/0x420 [ 371.967958][T11042] ? __fget_files+0x3a0/0x420 [ 371.967987][T11042] __x64_sys_sendmsg+0x1bd/0x2a0 [ 371.968008][T11042] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 371.968034][T11042] ? __pfx_ksys_write+0x10/0x10 [ 371.968058][T11042] do_syscall_64+0x14d/0xf80 [ 371.968074][T11042] ? trace_irq_disable+0x3b/0x150 [ 371.968094][T11042] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.968111][T11042] ? clear_bhb_loop+0x40/0x90 [ 371.968131][T11042] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.968147][T11042] RIP: 0033:0x7f0fdfd9c799 [ 371.968163][T11042] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 371.968178][T11042] RSP: 002b:00007f0fe0c28028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 371.968195][T11042] RAX: ffffffffffffffda RBX: 00007f0fe0015fa0 RCX: 00007f0fdfd9c799 [ 371.968207][T11042] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000004 [ 371.968217][T11042] RBP: 00007f0fe0c28090 R08: 0000000000000000 R09: 0000000000000000 [ 371.968227][T11042] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 371.968237][T11042] R13: 00007f0fe0016038 R14: 00007f0fe0015fa0 R15: 00007ffe9a1152b8 [ 371.968263][T11042] [ 371.996562][ T8717] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 372.036509][ T1224] usb 8-1: Using ep0 maxpacket: 8 [ 372.173572][ T1224] usb 8-1: unable to get BOS descriptor or descriptor too short [ 372.183784][ T1224] usb 8-1: config 0 has an invalid interface number: 88 but max is 0 [ 372.192691][ T1224] usb 8-1: config 0 has no interface number 0 [ 372.199239][ T1224] usb 8-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 372.210854][ T1224] usb 8-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 372.221378][ T1224] usb 8-1: config 0 interface 88 has no altsetting 0 [ 372.231847][ T1224] usb 8-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 372.254917][ T1224] usb 8-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 372.272221][ T1224] usb 8-1: Product: syz [ 372.282390][ T1224] usb 8-1: Manufacturer: syz [ 372.286775][ T8717] usb 4-1: Using ep0 maxpacket: 32 [ 372.293800][ T1224] usb 8-1: SerialNumber: syz [ 372.298914][ T8717] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 372.308201][ T8717] usb 4-1: config 0 has no interface number 0 [ 372.314479][ T1224] usb 8-1: config 0 descriptor?? [ 372.324178][ T8717] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 372.337305][ T8717] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.345543][ T8717] usb 4-1: Product: syz [ 372.357856][ T8717] usb 4-1: Manufacturer: syz [ 372.362574][ T8717] usb 4-1: SerialNumber: syz [ 372.373197][ T8717] usb 4-1: config 0 descriptor?? [ 372.763187][T11051] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1553'. [ 372.773799][T11051] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1553'. [ 372.790612][ T8717] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 372.819818][ T8717] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 373.037103][ T8717] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 373.064202][ T8717] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 373.087936][ T8717] usb 4-1: USB disconnect, device number 86 [ 373.116093][ T8714] usb 7-1: new high-speed USB device number 54 using dummy_hcd [ 373.150132][ T1224] input: syz syz as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.88/input/input36 [ 373.214365][ T1224] usb 8-1: USB disconnect, device number 53 [ 373.286392][ T8714] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 373.310507][ T8714] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 373.322787][ T8714] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 373.335902][ T8714] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 373.345062][ T8714] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.359488][ T8714] usb 7-1: config 0 descriptor?? [ 373.367104][ T8714] hub 7-1:0.0: USB hub found [ 373.566089][ T1224] usb 8-1: new high-speed USB device number 54 using dummy_hcd [ 373.577052][T11054] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 373.586001][T11054] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 373.722770][T11054] netlink: 188 bytes leftover after parsing attributes in process `syz.6.1554'. [ 373.757982][ T8714] hub 7-1:0.0: 11 ports detected [ 373.769907][ T8714] hub 7-1:0.0: insufficient power available to use all downstream ports [ 373.783395][ T30] audit: type=1326 audit(1773935888.762:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11070 comm="syz.3.1559" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f46dc39c799 code=0x0 [ 373.846186][ T1224] usb 8-1: Using ep0 maxpacket: 16 [ 373.853621][ T1224] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 373.866211][ T1224] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 373.880318][ T1224] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 373.889809][ T1224] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.897994][ T1224] usb 8-1: Product: syz [ 373.902313][ T1224] usb 8-1: Manufacturer: syz [ 373.908039][ T1224] usb 8-1: SerialNumber: syz [ 373.916496][ T1224] usb 8-1: config 0 descriptor?? [ 373.927689][ T1224] em28xx 8-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 373.937161][ T1224] em28xx 8-1:0.0: Audio interface 0 found (Vendor Class) [ 374.065284][T11063] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 374.213079][ T8714] usb 7-1: USB disconnect, device number 54 [ 374.417163][T11081] FAULT_INJECTION: forcing a failure. [ 374.417163][T11081] name failslab, interval 1, probability 0, space 0, times 0 [ 374.438199][T11081] CPU: 1 UID: 0 PID: 11081 Comm: syz.5.1561 Not tainted syzkaller #0 PREEMPT(full) [ 374.438227][T11081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 374.438240][T11081] Call Trace: [ 374.438249][T11081] [ 374.438258][T11081] dump_stack_lvl+0xe8/0x150 [ 374.438296][T11081] should_fail_ex+0x412/0x560 [ 374.438329][T11081] should_failslab+0xa8/0x100 [ 374.438354][T11081] __kmalloc_noprof+0xe8/0x760 [ 374.438387][T11081] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 374.438425][T11081] tomoyo_realpath_from_path+0xe3/0x5d0 [ 374.438468][T11081] ? tomoyo_path_number_perm+0x219/0x630 [ 374.438496][T11081] tomoyo_path_number_perm+0x246/0x630 [ 374.438532][T11081] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 374.438562][T11081] ? __lock_acquire+0x6b5/0x2cf0 [ 374.438604][T11081] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 374.438647][T11081] ? __fget_files+0x2a/0x420 [ 374.438678][T11081] ? __fget_files+0x2a/0x420 [ 374.438710][T11081] ? __fget_files+0x3a0/0x420 [ 374.438736][T11081] ? __fget_files+0x2a/0x420 [ 374.438767][T11081] security_file_ioctl+0xc3/0x2a0 [ 374.438795][T11081] __se_sys_ioctl+0x47/0x170 [ 374.438820][T11081] do_syscall_64+0x14d/0xf80 [ 374.438841][T11081] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.438862][T11081] ? clear_bhb_loop+0x40/0x90 [ 374.438887][T11081] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.438909][T11081] RIP: 0033:0x7f0fdfd9c799 [ 374.438928][T11081] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 374.438946][T11081] RSP: 002b:00007f0fe0c28028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 374.438968][T11081] RAX: ffffffffffffffda RBX: 00007f0fe0015fa0 RCX: 00007f0fdfd9c799 [ 374.438983][T11081] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000008 [ 374.438996][T11081] RBP: 00007f0fe0c28090 R08: 0000000000000000 R09: 0000000000000000 [ 374.439008][T11081] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 374.439020][T11081] R13: 00007f0fe0016038 R14: 00007f0fe0015fa0 R15: 00007ffe9a1152b8 [ 374.439054][T11081] [ 374.439085][T11081] ERROR: Out of memory at tomoyo_realpath_from_path. [ 374.685437][ T1224] em28xx 8-1:0.0: unknown em28xx chip ID (0) [ 374.695937][T11061] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 374.736694][T11061] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 374.763135][ T1224] em28xx 8-1:0.0: Config register raw data: 0xfffffffb [ 375.012917][ T1224] em28xx 8-1:0.0: AC97 chip type couldn't be determined [ 375.046520][ T1224] em28xx 8-1:0.0: No AC97 audio processor [ 375.074827][ T1224] usb 8-1: USB disconnect, device number 54 [ 375.094588][ T1224] em28xx 8-1:0.0: Disconnecting em28xx [ 375.104869][ T1224] em28xx 8-1:0.0: Freeing device [ 375.186265][ T8714] usb 6-1: new full-speed USB device number 53 using dummy_hcd [ 375.286198][ T5847] usb 4-1: new full-speed USB device number 87 using dummy_hcd [ 375.306097][ T29] usb 7-1: new high-speed USB device number 55 using dummy_hcd [ 375.340328][ T8714] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 375.349494][ T8714] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.357636][ T8714] usb 6-1: Product: syz [ 375.362251][ T8714] usb 6-1: Manufacturer: syz [ 375.366938][ T8714] usb 6-1: SerialNumber: syz [ 375.374177][ T8714] usb 6-1: config 0 descriptor?? [ 375.437704][ T5847] usb 4-1: config 150 has an invalid interface number: 204 but max is 2 [ 375.447105][ T5847] usb 4-1: config 150 has 2 interfaces, different from the descriptor's value: 3 [ 375.457070][ T5847] usb 4-1: config 150 has no interface number 0 [ 375.463461][ T5847] usb 4-1: config 150 interface 204 has no altsetting 0 [ 375.476704][ T29] usb 7-1: Using ep0 maxpacket: 32 [ 375.483120][ T5847] usb 4-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 375.485261][ T29] usb 7-1: config 0 has an invalid interface number: 67 but max is 0 [ 375.492869][ T5847] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.500758][ T29] usb 7-1: config 0 has no interface number 0 [ 375.510788][ T5847] usb 4-1: Product: syz [ 375.519342][ T5847] usb 4-1: Manufacturer: syz [ 375.524142][ T5847] usb 4-1: SerialNumber: syz [ 375.530912][ T29] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 375.545879][ T29] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.554077][ T29] usb 7-1: Product: syz [ 375.558392][ T29] usb 7-1: Manufacturer: syz [ 375.563063][ T29] usb 7-1: SerialNumber: syz [ 375.575391][ T29] usb 7-1: config 0 descriptor?? [ 375.593879][ T8714] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 375.780852][ T5847] xr_serial 4-1:150.204: skipping garbage [ 375.787387][ T5847] xr_serial 4-1:150.204: xr_serial converter detected [ 375.886102][ T10] usb 8-1: new high-speed USB device number 55 using dummy_hcd [ 375.999423][ T29] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 376.010375][ T29] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 376.046137][ T10] usb 8-1: Using ep0 maxpacket: 8 [ 376.054000][ T10] usb 8-1: unable to get BOS descriptor or descriptor too short [ 376.064609][ T10] usb 8-1: config 14 has an invalid interface number: 180 but max is 0 [ 376.072999][ T10] usb 8-1: config 14 has no interface number 0 [ 376.080552][ T10] usb 8-1: config 14 interface 180 has no altsetting 0 [ 376.094920][ T10] usb 8-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=da.db [ 376.104291][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.112407][ T10] usb 8-1: Product: syz [ 376.116926][ T10] usb 8-1: Manufacturer: syz [ 376.121611][ T10] usb 8-1: SerialNumber: syz [ 376.221220][ T29] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 376.232487][ T29] smsc95xx 7-1:0.67: probe with driver smsc95xx failed with error -71 [ 376.251913][ T29] usb 7-1: USB disconnect, device number 55 [ 376.347656][ T10] ath6kl: Failed to submit usb control message: -71 [ 376.354371][ T10] ath6kl: unable to send the bmi data to the device: -71 [ 376.361509][ T10] ath6kl: Unable to send get target info: -71 [ 376.369768][ T10] ath6kl: Failed to init ath6kl core: -71 [ 376.377425][ T10] ath6kl_usb 8-1:14.180: probe with driver ath6kl_usb failed with error -71 [ 376.409984][ T10] usb 8-1: USB disconnect, device number 55 [ 376.624507][ T5847] usb 4-1: xr_serial converter now attached to ttyUSB0 [ 376.912568][ T1224] usb 4-1: USB disconnect, device number 87 [ 376.933239][ T1224] xr_serial ttyUSB0: xr_serial converter now disconnected from ttyUSB0 [ 376.947464][T11111] program syz.7.1570 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 376.961802][ T1224] xr_serial 4-1:150.204: device disconnected [ 377.014522][T11116] FAULT_INJECTION: forcing a failure. [ 377.014522][T11116] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 377.028030][T11116] CPU: 1 UID: 0 PID: 11116 Comm: syz.6.1571 Not tainted syzkaller #0 PREEMPT(full) [ 377.028057][T11116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 377.028072][T11116] Call Trace: [ 377.028081][T11116] [ 377.028089][T11116] dump_stack_lvl+0xe8/0x150 [ 377.028124][T11116] should_fail_ex+0x412/0x560 [ 377.028155][T11116] _copy_from_iter+0x1d3/0x1670 [ 377.028179][T11116] ? format_decode+0x60f/0xe10 [ 377.028212][T11116] ? vsnprintf+0xdf1/0xee0 [ 377.028238][T11116] ? __pfx__copy_from_iter+0x10/0x10 [ 377.028278][T11116] tun_get_user+0x267/0x4300 [ 377.028300][T11116] ? unwind_get_return_address+0x4d/0x90 [ 377.028343][T11116] ? __pfx_tun_get_user+0x10/0x10 [ 377.028363][T11116] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 377.028394][T11116] ? lockdep_hardirqs_on+0x7a/0x110 [ 377.028415][T11116] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 377.028445][T11116] ? save_netdev_trace_buffer+0x4e2/0x610 [ 377.028486][T11116] ? ref_tracker_alloc+0x35c/0x4c0 [ 377.028511][T11116] ? tun_chr_write_iter+0x60/0x210 [ 377.028540][T11116] ? vfs_write+0x61d/0xb90 [ 377.028559][T11116] ? ksys_write+0x150/0x270 [ 377.028577][T11116] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 377.028608][T11116] ? tun_get+0x1c/0x2f0 [ 377.028632][T11116] ? tun_get+0x1c/0x2f0 [ 377.028650][T11116] ? tun_get+0x1c/0x2f0 [ 377.028674][T11116] tun_chr_write_iter+0x113/0x210 [ 377.028710][T11116] vfs_write+0x61d/0xb90 [ 377.028738][T11116] ? __pfx_vfs_write+0x10/0x10 [ 377.028766][T11116] ? __fget_files+0x2a/0x420 [ 377.028803][T11116] ksys_write+0x150/0x270 [ 377.028826][T11116] ? __pfx_ksys_write+0x10/0x10 [ 377.028858][T11116] do_syscall_64+0x14d/0xf80 [ 377.028877][T11116] ? trace_irq_disable+0x3b/0x150 [ 377.028902][T11116] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.028923][T11116] ? clear_bhb_loop+0x40/0x90 [ 377.028957][T11116] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.028978][T11116] RIP: 0033:0x7ff571f9c799 [ 377.028998][T11116] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 377.029016][T11116] RSP: 002b:00007ff572e08028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 377.029038][T11116] RAX: ffffffffffffffda RBX: 00007ff572215fa0 RCX: 00007ff571f9c799 [ 377.029055][T11116] RDX: 0000000000000036 RSI: 0000200000000240 RDI: 0000000000000004 [ 377.029068][T11116] RBP: 00007ff572e08090 R08: 0000000000000000 R09: 0000000000000000 [ 377.029082][T11116] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 377.029094][T11116] R13: 00007ff572216038 R14: 00007ff572215fa0 R15: 00007ffc07e47598 [ 377.029126][T11116] [ 377.265651][ T8714] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 377.340123][ T8714] usb 6-1: USB disconnect, device number 53 [ 377.582132][T11125] openvswitch: netlink: Duplicate key (type 21). [ 377.656289][ T29] usb 7-1: new high-speed USB device number 56 using dummy_hcd [ 377.718248][T11129] FAULT_INJECTION: forcing a failure. [ 377.718248][T11129] name failslab, interval 1, probability 0, space 0, times 0 [ 377.731292][T11129] CPU: 0 UID: 0 PID: 11129 Comm: syz.7.1576 Not tainted syzkaller #0 PREEMPT(full) [ 377.731319][T11129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 377.731332][T11129] Call Trace: [ 377.731341][T11129] [ 377.731349][T11129] dump_stack_lvl+0xe8/0x150 [ 377.731390][T11129] should_fail_ex+0x412/0x560 [ 377.731433][T11129] should_failslab+0xa8/0x100 [ 377.731458][T11129] __kmalloc_noprof+0xe8/0x760 [ 377.731490][T11129] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 377.731528][T11129] tomoyo_realpath_from_path+0xe3/0x5d0 [ 377.731569][T11129] ? tomoyo_path_number_perm+0x219/0x630 [ 377.731597][T11129] tomoyo_path_number_perm+0x246/0x630 [ 377.731627][T11129] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 377.731658][T11129] ? __lock_acquire+0x6b5/0x2cf0 [ 377.731701][T11129] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 377.731746][T11129] ? __fget_files+0x2a/0x420 [ 377.731776][T11129] ? __fget_files+0x2a/0x420 [ 377.731801][T11129] ? __fget_files+0x3a0/0x420 [ 377.731827][T11129] ? __fget_files+0x2a/0x420 [ 377.731858][T11129] security_file_ioctl+0xc3/0x2a0 [ 377.731887][T11129] __se_sys_ioctl+0x47/0x170 [ 377.731965][T11129] do_syscall_64+0x14d/0xf80 [ 377.732036][T11129] ? trace_irq_disable+0x3b/0x150 [ 377.732062][T11129] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.732085][T11129] ? clear_bhb_loop+0x40/0x90 [ 377.732111][T11129] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.732133][T11129] RIP: 0033:0x7f4b4bd9c799 [ 377.732153][T11129] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 377.732171][T11129] RSP: 002b:00007f4b49ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 377.732193][T11129] RAX: ffffffffffffffda RBX: 00007f4b4c015fa0 RCX: 00007f4b4bd9c799 [ 377.732209][T11129] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000008 [ 377.732223][T11129] RBP: 00007f4b49ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 377.732236][T11129] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 377.732248][T11129] R13: 00007f4b4c016038 R14: 00007f4b4c015fa0 R15: 00007ffc0bbbf988 [ 377.732281][T11129] [ 377.732304][T11129] ERROR: Out of memory at tomoyo_realpath_from_path. [ 377.817207][ T29] usb 7-1: Using ep0 maxpacket: 32 [ 377.967864][ T29] usb 7-1: config 5 has an invalid interface number: 137 but max is 0 [ 377.976195][ T29] usb 7-1: config 5 has no interface number 0 [ 377.983126][ T29] usb 7-1: config 5 interface 137 has no altsetting 0 [ 377.994751][ T29] usb 7-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.0a [ 378.015141][ T29] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.035895][ T29] usb 7-1: Product: syz [ 378.043287][ T29] usb 7-1: Manufacturer: syz [ 378.056527][ T29] usb 7-1: SerialNumber: syz [ 378.286206][ T5847] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 378.322119][ T29] usb 7-1: USB disconnect, device number 56 [ 378.337061][ T8714] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 378.362472][T11139] netlink: 400 bytes leftover after parsing attributes in process `syz.7.1580'. [ 378.416089][ T5847] usb 4-1: device descriptor read/64, error -71 [ 378.497891][ T8714] usb 6-1: Using ep0 maxpacket: 32 [ 378.506749][ T8714] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 378.519768][ T8714] usb 6-1: config 0 has no interface number 0 [ 378.528296][ T8714] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 378.540677][ T8714] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.549705][ T8714] usb 6-1: Product: syz [ 378.554079][ T8714] usb 6-1: Manufacturer: syz [ 378.560598][ T8714] usb 6-1: SerialNumber: syz [ 378.570405][ T8714] usb 6-1: config 0 descriptor?? [ 378.598812][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.688223][ T5847] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 378.837221][ T5847] usb 4-1: device descriptor read/64, error -71 [ 378.956871][ T5847] usb usb4-port1: attempt power cycle [ 378.986876][ T8714] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -61 [ 378.997775][ T8714] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 379.196126][ T10] usb 7-1: new high-speed USB device number 57 using dummy_hcd [ 379.326112][ T5847] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 379.346132][ T10] usb 7-1: device descriptor read/64, error -71 [ 379.353194][ T5847] usb 4-1: device descriptor read/8, error -71 [ 379.388200][ T8714] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 379.402292][ T8714] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -71 [ 379.414047][ T8714] usb 6-1: USB disconnect, device number 54 [ 379.586148][ T10] usb 7-1: new high-speed USB device number 58 using dummy_hcd [ 379.596312][ T5847] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 379.616868][ T5847] usb 4-1: device descriptor read/8, error -71 [ 379.720986][ T10] usb 7-1: device descriptor read/64, error -71 [ 379.727764][ T5847] usb usb4-port1: unable to enumerate USB device [ 379.836491][ T10] usb usb7-port1: attempt power cycle [ 379.878897][T11161] FAULT_INJECTION: forcing a failure. [ 379.878897][T11161] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 379.892217][T11161] CPU: 0 UID: 0 PID: 11161 Comm: syz.7.1589 Not tainted syzkaller #0 PREEMPT(full) [ 379.892244][T11161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 379.892265][T11161] Call Trace: [ 379.892274][T11161] [ 379.892283][T11161] dump_stack_lvl+0xe8/0x150 [ 379.892318][T11161] should_fail_ex+0x412/0x560 [ 379.892347][T11161] _copy_from_iter+0x1d3/0x1670 [ 379.892370][T11161] ? format_decode+0x60f/0xe10 [ 379.892402][T11161] ? vsnprintf+0xdf1/0xee0 [ 379.892428][T11161] ? __pfx__copy_from_iter+0x10/0x10 [ 379.892467][T11161] tun_get_user+0x267/0x4300 [ 379.892488][T11161] ? unwind_get_return_address+0x4d/0x90 [ 379.892531][T11161] ? __pfx_tun_get_user+0x10/0x10 [ 379.892550][T11161] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 379.892581][T11161] ? lockdep_hardirqs_on+0x7a/0x110 [ 379.892601][T11161] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 379.892631][T11161] ? save_netdev_trace_buffer+0x4e2/0x610 [ 379.892670][T11161] ? ref_tracker_alloc+0x35c/0x4c0 [ 379.892702][T11161] ? tun_chr_write_iter+0x60/0x210 [ 379.892729][T11161] ? vfs_write+0x61d/0xb90 [ 379.892746][T11161] ? ksys_write+0x150/0x270 [ 379.892764][T11161] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 379.892795][T11161] ? tun_get+0x1c/0x2f0 [ 379.892824][T11161] ? tun_get+0x1c/0x2f0 [ 379.892843][T11161] ? tun_get+0x1c/0x2f0 [ 379.892866][T11161] tun_chr_write_iter+0x113/0x210 [ 379.892899][T11161] vfs_write+0x61d/0xb90 [ 379.892926][T11161] ? __pfx_vfs_write+0x10/0x10 [ 379.892954][T11161] ? __fget_files+0x2a/0x420 [ 379.892988][T11161] ksys_write+0x150/0x270 [ 379.893010][T11161] ? __pfx_ksys_write+0x10/0x10 [ 379.893042][T11161] do_syscall_64+0x14d/0xf80 [ 379.893057][T11161] ? trace_irq_disable+0x3b/0x150 [ 379.893074][T11161] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 379.893089][T11161] ? clear_bhb_loop+0x40/0x90 [ 379.893106][T11161] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 379.893143][T11161] RIP: 0033:0x7f4b4bd9c799 [ 379.893162][T11161] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 379.893179][T11161] RSP: 002b:00007f4b49ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 379.893200][T11161] RAX: ffffffffffffffda RBX: 00007f4b4c015fa0 RCX: 00007f4b4bd9c799 [ 379.893214][T11161] RDX: 000000000000009e RSI: 0000200000000200 RDI: 0000000000000003 [ 379.893227][T11161] RBP: 00007f4b49ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 379.893245][T11161] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 379.893255][T11161] R13: 00007f4b4c016038 R14: 00007f4b4c015fa0 R15: 00007ffc0bbbf988 [ 379.893278][T11161] [ 380.426204][ T10] usb 7-1: new high-speed USB device number 59 using dummy_hcd [ 380.446771][ T10] usb 7-1: device descriptor read/8, error -71 [ 380.526112][ T5956] usb 8-1: new high-speed USB device number 56 using dummy_hcd [ 380.686091][ T5956] usb 8-1: Using ep0 maxpacket: 16 [ 380.686261][ T10] usb 7-1: new high-speed USB device number 60 using dummy_hcd [ 380.699458][ T5956] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 380.712384][ T5956] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 380.719012][ T10] usb 7-1: device descriptor read/8, error -71 [ 380.723514][ T5956] usb 8-1: New USB device found, idVendor=1b96, idProduct=0008, bcdDevice= 0.00 [ 380.737861][ T5956] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.753994][ T5956] usb 8-1: config 0 descriptor?? [ 380.837735][ T10] usb usb7-port1: unable to enumerate USB device [ 381.164690][T11165] netlink: 65051 bytes leftover after parsing attributes in process `syz.7.1591'. [ 381.190739][ T5956] ntrig 0003:1B96:0008.001D: unknown main item tag 0x0 [ 381.203603][ T5956] ntrig 0003:1B96:0008.001D: item fetching failed at offset 5/7 [ 381.212896][ T5956] ntrig 0003:1B96:0008.001D: parse failed [ 381.218878][ T5956] ntrig 0003:1B96:0008.001D: probe with driver ntrig failed with error -22 [ 381.388645][ T10] usb 8-1: USB disconnect, device number 56 [ 382.105047][T11191] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 382.296134][ T5847] usb 7-1: new high-speed USB device number 61 using dummy_hcd [ 382.436142][ T5956] usb 8-1: new full-speed USB device number 57 using dummy_hcd [ 382.456077][ T5847] usb 7-1: Using ep0 maxpacket: 32 [ 382.462778][ T5847] usb 7-1: config 0 has an invalid interface number: 67 but max is 0 [ 382.471027][ T5847] usb 7-1: config 0 has no interface number 0 [ 382.480433][ T5847] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 382.490506][ T5847] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.499561][ T5847] usb 7-1: Product: syz [ 382.503948][ T5847] usb 7-1: Manufacturer: syz [ 382.512042][ T5847] usb 7-1: SerialNumber: syz [ 382.519488][ T5847] usb 7-1: config 0 descriptor?? [ 382.592839][ T5956] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 382.602361][ T5956] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.612141][ T5956] usb 8-1: Product: syz [ 382.618202][ T5956] usb 8-1: Manufacturer: syz [ 382.622897][ T5956] usb 8-1: SerialNumber: syz [ 382.631098][ T5956] usb 8-1: config 0 descriptor?? [ 382.851895][ T5956] usb 8-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 382.905094][T11200] fuse: fd is not a fuse device [ 382.934234][ T5847] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -61 [ 382.947532][ T5847] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 383.336386][ T5847] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 383.349602][ T5847] smsc95xx 7-1:0.67: probe with driver smsc95xx failed with error -71 [ 383.361897][ T5847] usb 7-1: USB disconnect, device number 61 [ 383.676176][ T29] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 383.832007][ T29] usb 6-1: unable to get BOS descriptor or descriptor too short [ 383.845841][ T29] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 383.866132][ T29] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 383.889588][ T29] usb 6-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 383.909783][ T29] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.932695][ T29] usb 6-1: Product: syz [ 383.951605][ T29] usb 6-1: Manufacturer: syz [ 383.966063][ T29] usb 6-1: SerialNumber: syz [ 384.197433][ T29] usb 6-1: 0:1 : does not exist [ 384.203082][ T29] usb 6-1: BAAD GENERIC IO: no channels? [ 384.283419][ T29] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 384.300532][ T29] usb 6-1: USB disconnect, device number 55 [ 384.330432][ T9261] udevd[9261]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 384.838283][T11215] overlayfs: missing 'workdir' [ 384.940969][ T5956] dvb_usb_rtl28xxu 8-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 384.960606][ T5956] usb 8-1: USB disconnect, device number 57 [ 385.252627][ T5854] Bluetooth: hci1: unknown advertising packet type: 0x65 [ 385.256441][ T5854] Bluetooth: hci1: Malformed LE Event: 0x02 [ 385.587115][ T5847] usb 7-1: new high-speed USB device number 62 using dummy_hcd [ 385.736235][ T5847] usb 7-1: Using ep0 maxpacket: 32 [ 385.743134][ T5847] usb 7-1: config 0 has an invalid interface number: 67 but max is 0 [ 385.751739][ T10] usb 8-1: new high-speed USB device number 58 using dummy_hcd [ 385.759736][ T5847] usb 7-1: config 0 has no interface number 0 [ 385.771252][ T5847] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 385.781163][ T5847] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.791328][ T5847] usb 7-1: Product: syz [ 385.795551][ T5847] usb 7-1: Manufacturer: syz [ 385.800539][ T5847] usb 7-1: SerialNumber: syz [ 385.813065][ T5847] usb 7-1: config 0 descriptor?? [ 385.916233][ T10] usb 8-1: Using ep0 maxpacket: 16 [ 385.923551][ T10] usb 8-1: config 1 has an invalid interface number: 105 but max is 0 [ 385.932502][ T10] usb 8-1: config 1 has no interface number 0 [ 385.939212][ T10] usb 8-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 385.951904][ T10] usb 8-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 385.962358][ T10] usb 8-1: config 1 interface 105 has no altsetting 0 [ 385.972344][ T10] usb 8-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 385.982039][ T10] usb 8-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 385.991417][ T10] usb 8-1: Product: syz [ 385.995683][ T10] usb 8-1: Manufacturer: syz [ 386.000772][ T10] usb 8-1: SerialNumber: syz [ 386.013575][T11237] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 386.021944][T11237] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 386.242507][ T5847] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -61 [ 386.269416][ T5847] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 386.438224][T11237] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 386.447210][T11237] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 386.647711][ T5847] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 386.662465][ T10] aqc111 8-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: 0 [ 386.673690][ T5847] smsc95xx 7-1:0.67: probe with driver smsc95xx failed with error -71 [ 386.683979][ T10] aqc111 8-1:1.105: probe with driver aqc111 failed with error -61 [ 386.693672][ T5847] usb 7-1: USB disconnect, device number 62 [ 387.235389][T11272] syzkaller1: entered promiscuous mode [ 387.241491][T11272] syzkaller1: entered allmulticast mode [ 387.254051][T11272] FAULT_INJECTION: forcing a failure. [ 387.254051][T11272] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 387.268538][T11272] CPU: 1 UID: 0 PID: 11272 Comm: syz.6.1629 Not tainted syzkaller #0 PREEMPT(full) [ 387.268564][T11272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 387.268578][T11272] Call Trace: [ 387.268587][T11272] [ 387.268596][T11272] dump_stack_lvl+0xe8/0x150 [ 387.268644][T11272] should_fail_ex+0x412/0x560 [ 387.268673][T11272] _copy_from_iter+0x1d3/0x1670 [ 387.268698][T11272] ? format_decode+0x60f/0xe10 [ 387.268732][T11272] ? vsnprintf+0xdf1/0xee0 [ 387.268759][T11272] ? __pfx__copy_from_iter+0x10/0x10 [ 387.268800][T11272] tun_get_user+0x267/0x4300 [ 387.268823][T11272] ? unwind_get_return_address+0x4d/0x90 [ 387.268866][T11272] ? __pfx_tun_get_user+0x10/0x10 [ 387.268886][T11272] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 387.268917][T11272] ? lockdep_hardirqs_on+0x7a/0x110 [ 387.268938][T11272] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 387.268970][T11272] ? save_netdev_trace_buffer+0x4e2/0x610 [ 387.269010][T11272] ? ref_tracker_alloc+0x35c/0x4c0 [ 387.269034][T11272] ? tun_chr_write_iter+0x60/0x210 [ 387.269062][T11272] ? vfs_write+0x61d/0xb90 [ 387.269080][T11272] ? ksys_write+0x150/0x270 [ 387.269098][T11272] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 387.269129][T11272] ? tun_get+0x1c/0x2f0 [ 387.269154][T11272] ? tun_get+0x1c/0x2f0 [ 387.269172][T11272] ? tun_get+0x1c/0x2f0 [ 387.269196][T11272] tun_chr_write_iter+0x113/0x210 [ 387.269231][T11272] vfs_write+0x61d/0xb90 [ 387.269258][T11272] ? __pfx_vfs_write+0x10/0x10 [ 387.269288][T11272] ? __fget_files+0x2a/0x420 [ 387.269324][T11272] ksys_write+0x150/0x270 [ 387.269345][T11272] ? __pfx_ksys_write+0x10/0x10 [ 387.269376][T11272] do_syscall_64+0x14d/0xf80 [ 387.269396][T11272] ? trace_irq_disable+0x3b/0x150 [ 387.269421][T11272] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.269443][T11272] ? clear_bhb_loop+0x40/0x90 [ 387.269468][T11272] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.269489][T11272] RIP: 0033:0x7ff571f9c799 [ 387.269508][T11272] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 387.269525][T11272] RSP: 002b:00007ff572e08028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 387.269547][T11272] RAX: ffffffffffffffda RBX: 00007ff572215fa0 RCX: 00007ff571f9c799 [ 387.269563][T11272] RDX: 000000000000002e RSI: 0000200000001ec0 RDI: 0000000000000003 [ 387.269576][T11272] RBP: 00007ff572e08090 R08: 0000000000000000 R09: 0000000000000000 [ 387.269589][T11272] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 387.269602][T11272] R13: 00007ff572216038 R14: 00007ff572215fa0 R15: 00007ffc07e47598 [ 387.269643][T11272] [ 387.643400][T11281] fuse: fd is not a fuse device [ 387.712543][T11289] fuse: Bad value for 'user_id' [ 387.718887][T11289] fuse: Bad value for 'user_id' [ 388.718712][ T8714] usb 8-1: USB disconnect, device number 58 [ 389.246064][ T8714] usb 8-1: new full-speed USB device number 59 using dummy_hcd [ 389.386099][ T29] usb 7-1: new high-speed USB device number 63 using dummy_hcd [ 389.435686][ T8714] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 389.450512][ T8714] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 389.467921][ T8714] usb 8-1: Product: syz [ 389.477018][ T8714] usb 8-1: Manufacturer: syz [ 389.484859][ T8714] usb 8-1: SerialNumber: syz [ 389.499732][ T8714] usb 8-1: config 0 descriptor?? [ 389.546194][ T29] usb 7-1: Using ep0 maxpacket: 32 [ 389.557144][ T29] usb 7-1: config 0 has an invalid interface number: 67 but max is 0 [ 389.565565][ T29] usb 7-1: config 0 has no interface number 0 [ 389.582242][ T29] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 389.606072][ T29] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 389.614158][ T29] usb 7-1: Product: syz [ 389.618397][ T29] usb 7-1: Manufacturer: syz [ 389.623025][ T29] usb 7-1: SerialNumber: syz [ 389.642757][ T29] usb 7-1: config 0 descriptor?? [ 389.715729][ T8714] usb 8-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 390.254019][T11356] fuse: fd is not a fuse device [ 390.472841][ T29] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 390.496664][ T29] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 390.516644][ T29] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 390.536971][ T29] smsc95xx 7-1:0.67: probe with driver smsc95xx failed with error -71 [ 390.560076][ T29] usb 7-1: USB disconnect, device number 63 [ 390.915435][T11369] 9pnet_fd: Insufficient options for proto=fd [ 391.171120][ T8714] dvb_usb_rtl28xxu 8-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 391.195118][ T8714] usb 8-1: USB disconnect, device number 59 [ 391.304181][T11380] fuse: fd is not a fuse device [ 391.437640][T11384] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1655'. [ 391.827580][T11399] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1662'. [ 392.305781][T11414] IPVS: sync thread started: state = MASTER, mcast_ifn = ip_vti0, syncid = 4, id = 0 [ 392.384251][ T5854] Bluetooth: hci2: ISO packet for unknown connection handle 201 [ 392.938288][T11432] netlink: 188 bytes leftover after parsing attributes in process `syz.7.1675'. [ 394.373580][T11454] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1683'. [ 394.392005][ T5854] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 394.541007][T11459] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1685'. [ 394.553799][T11459] netlink: 'syz.7.1685': attribute type 3 has an invalid length. [ 394.692791][ T5854] Bluetooth: hci2: unexpected event 0x01 length: 11 > 1 [ 394.692893][ T5854] Bluetooth: hci2: SCO packet for unknown connection handle 201 [ 394.694832][T11463] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1687'. [ 394.722513][T11463] bridge_slave_1: left allmulticast mode [ 394.728568][T11463] bridge_slave_1: left promiscuous mode [ 394.734609][T11463] bridge0: port 2(bridge_slave_1) entered disabled state [ 394.750519][T11463] bridge_slave_0: left allmulticast mode [ 394.757605][T11463] bridge_slave_0: left promiscuous mode [ 394.763863][T11463] bridge0: port 1(bridge_slave_0) entered disabled state [ 394.774412][T11465] program syz.7.1688 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 395.168670][T11474] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1691'. [ 395.180929][T11474] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1691'. [ 395.455694][T11487] fuse: fd is not a fuse device [ 395.495357][T11487] fuse: fd is not a fuse device [ 395.841880][T11510] netlink: 'syz.7.1704': attribute type 1 has an invalid length. [ 396.410850][ T30] audit: type=1400 audit(1773935911.392:20): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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netlink: 64 bytes leftover after parsing attributes in process `syz.3.1715'. [ 397.156269][ T29] usb 8-1: new high-speed USB device number 60 using dummy_hcd [ 397.276355][T11570] veth1_to_team: entered allmulticast mode [ 397.337454][ T29] usb 8-1: Using ep0 maxpacket: 32 [ 397.353033][ T29] usb 8-1: config 0 has an invalid interface number: 67 but max is 0 [ 397.371979][ T29] usb 8-1: config 0 has no interface number 0 [ 397.381285][ T29] usb 8-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 397.391720][ T29] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.400282][ T29] usb 8-1: Product: syz [ 397.404657][ T29] usb 8-1: Manufacturer: syz [ 397.409666][ T29] usb 8-1: SerialNumber: syz [ 397.420806][ T29] usb 8-1: config 0 descriptor?? [ 397.985296][T11584] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1735'. [ 398.136110][ T10] usb 7-1: new high-speed USB device number 64 using dummy_hcd [ 398.246410][ T29] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 398.258542][ T29] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 398.270237][ T29] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 398.282515][ T29] smsc95xx 8-1:0.67: probe with driver smsc95xx failed with error -71 [ 398.296912][ T10] usb 7-1: Using ep0 maxpacket: 32 [ 398.302329][ T29] usb 8-1: USB disconnect, device number 60 [ 398.314620][ T10] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 248, changing to 7 [ 398.351167][ T10] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 128, changing to 7 [ 398.382800][ T10] usb 7-1: New USB device found, idVendor=0582, idProduct=0156, bcdDevice= 0.40 [ 398.400606][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.418122][ T10] usb 7-1: Product: syz [ 398.428320][ T10] usb 7-1: Manufacturer: syz [ 398.438632][ T10] usb 7-1: SerialNumber: syz [ 398.662159][ T10] usb 7-1: BAAD SPEAKERPHONE c_chmask mismatch [ 398.747887][ T10] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 398.809177][ T9261] udevd[9261]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 398.861506][ T10] usb 7-1: USB disconnect, device number 64 [ 399.204213][ T5854] Bluetooth: hci4: ACL packet for unknown connection handle 2964 [ 399.457631][T11622] fuse: fd is not a fuse device [ 399.666158][ T5945] usb 7-1: new high-speed USB device number 65 using dummy_hcd [ 399.826288][ T5945] usb 7-1: Using ep0 maxpacket: 32 [ 399.833702][ T5945] usb 7-1: config 0 has an invalid interface number: 67 but max is 0 [ 399.843534][ T5945] usb 7-1: config 0 has no interface number 0 [ 399.852353][ T5945] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 399.862096][ T5945] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.870930][ T5945] usb 7-1: Product: syz [ 399.875476][ T5945] usb 7-1: Manufacturer: syz [ 399.880256][ T5945] usb 7-1: SerialNumber: syz [ 399.889248][ T5945] usb 7-1: config 0 descriptor?? [ 399.915365][T11636] overlayfs: failed to clone lowerpath [ 399.925875][ T5854] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 400.246143][ T10] usb 8-1: new high-speed USB device number 61 using dummy_hcd [ 400.386823][ T10] usb 8-1: device descriptor read/64, error -71 [ 400.636080][ T10] usb 8-1: new high-speed USB device number 62 using dummy_hcd [ 400.710767][ T5945] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 400.732034][ T5945] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 400.756645][ T5945] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 400.776299][ T5945] smsc95xx 7-1:0.67: probe with driver smsc95xx failed with error -71 [ 400.786111][ T10] usb 8-1: device descriptor read/64, error -71 [ 400.803929][ T5945] usb 7-1: USB disconnect, device number 65 [ 400.906603][ T10] usb usb8-port1: attempt power cycle [ 401.273157][ T10] usb 8-1: new high-speed USB device number 63 using dummy_hcd [ 401.328784][ T10] usb 8-1: device descriptor read/8, error -71 [ 401.566353][ T10] usb 8-1: new high-speed USB device number 64 using dummy_hcd [ 401.596874][ T10] usb 8-1: device descriptor read/8, error -71 [ 401.728823][ T10] usb usb8-port1: unable to enumerate USB device [ 401.876191][ T5945] usb 7-1: new high-speed USB device number 66 using dummy_hcd [ 402.030329][ T5945] usb 7-1: config 0 has an invalid interface number: 13 but max is 0 [ 402.038874][ T5945] usb 7-1: config 0 has an invalid descriptor of length 196, skipping remainder of the config [ 402.049438][ T5945] usb 7-1: config 0 has no interface number 0 [ 402.055597][ T5945] usb 7-1: config 0 interface 13 altsetting 71 has 0 endpoint descriptors, different from the interface descriptor's value: 7 [ 402.073468][ T5945] usb 7-1: config 0 interface 13 has no altsetting 0 [ 402.083474][ T5945] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 402.092719][ T5945] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.105631][ T5945] usb 7-1: config 0 descriptor?? [ 402.159400][T11701] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.1781'. [ 402.333270][ T5945] usb 7-1: string descriptor 0 read error: -71 [ 402.363998][ T5945] usb 7-1: USB disconnect, device number 66 [ 403.144789][T11733] input: syz0 as /devices/virtual/input/input37 [ 403.166770][T11733] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1790'. [ 403.422887][T11744] 9p: Bad value for 'wfdno' [ 403.516602][ T5945] usb 7-1: new high-speed USB device number 67 using dummy_hcd [ 403.559476][T11750] 9p: Bad value for 'rfdno' [ 403.676068][ T5945] usb 7-1: Using ep0 maxpacket: 32 [ 403.695491][ T5945] usb 7-1: config 0 has an invalid interface number: 67 but max is 0 [ 403.714756][ T5945] usb 7-1: config 0 has no interface number 0 [ 403.729789][ T5945] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 403.746141][ T5945] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.764772][ T5945] usb 7-1: Product: syz [ 403.776450][ T5945] usb 7-1: Manufacturer: syz [ 403.783132][T11758] fuse: fd is not a fuse device [ 403.788066][ T5945] usb 7-1: SerialNumber: syz [ 403.798227][ T5945] usb 7-1: config 0 descriptor?? [ 403.816889][T11758] fuse: Unknown parameter '&d' [ 403.839187][T11759] netlink: 'syz.5.1799': attribute type 21 has an invalid length. [ 403.868608][T11759] netlink: 144 bytes leftover after parsing attributes in process `syz.5.1799'. [ 403.916974][T11761] fuse: fd is not a fuse device [ 404.287550][T11770] overlayfs: failed to clone upperpath [ 404.477100][T11778] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1809'. [ 404.509890][T11778] openvswitch: netlink: IP tunnel dst address not specified [ 404.549584][T11778] fuse: Unknown parameter '' [ 404.634985][ T5945] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 404.658372][ T5945] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 404.686647][ T5945] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 404.701240][ T5945] smsc95xx 7-1:0.67: probe with driver smsc95xx failed with error -71 [ 404.715284][ T5945] usb 7-1: USB disconnect, device number 67 [ 405.302277][T11799] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 405.903307][T11821] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 405.933584][T11821] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 406.126382][ T8714] usb 7-1: new high-speed USB device number 68 using dummy_hcd [ 406.300754][ T8714] usb 7-1: unable to get BOS descriptor or descriptor too short [ 406.315030][ T8714] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 406.331208][ T8714] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 50, changing to 7 [ 406.349271][ T8714] usb 7-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 406.377392][ T8714] usb 7-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40 [ 406.386749][ T8714] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.394857][ T8714] usb 7-1: Product: syz [ 406.400030][ T8714] usb 7-1: Manufacturer: syz [ 406.404736][ T8714] usb 7-1: SerialNumber: syz [ 406.456575][ T10] usb 8-1: new high-speed USB device number 65 using dummy_hcd [ 406.531323][T11835] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1832'. [ 406.629100][ T10] usb 8-1: Using ep0 maxpacket: 32 [ 406.638271][ T10] usb 8-1: config 0 has an invalid interface number: 67 but max is 0 [ 406.647719][ T8714] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 406.660229][ T10] usb 8-1: config 0 has no interface number 0 [ 406.678054][ T10] usb 8-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 406.694237][ T8714] snd-usb-audio 7-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 406.703986][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.718076][ T10] usb 8-1: Product: syz [ 406.727085][ T10] usb 8-1: Manufacturer: syz [ 406.738707][ T10] usb 8-1: SerialNumber: syz [ 406.757989][ T10] usb 8-1: config 0 descriptor?? [ 406.789497][T11840] netlink: 'syz.3.1834': attribute type 21 has an invalid length. [ 406.872030][ T8714] snd-usb-audio 7-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 406.894881][ T8714] usb 7-1: USB disconnect, device number 68 [ 406.948230][ T5857] udevd[5857]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 407.516153][ T5945] usb 7-1: new high-speed USB device number 69 using dummy_hcd [ 407.592376][ T10] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 407.610303][ T10] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 407.621095][ T10] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 407.646142][ T5945] usb 7-1: device descriptor read/64, error -71 [ 407.662215][ T10] smsc95xx 8-1:0.67: probe with driver smsc95xx failed with error -71 [ 407.682338][ T10] usb 8-1: USB disconnect, device number 65 [ 407.887745][T11866] openvswitch: netlink: EtherType 80 is less than min 600 [ 407.906265][ T5945] usb 7-1: new high-speed USB device number 70 using dummy_hcd [ 408.036166][ T5945] usb 7-1: device descriptor read/64, error -71 [ 408.146398][ T5945] usb usb7-port1: attempt power cycle [ 408.366200][ T5956] usb 8-1: new high-speed USB device number 66 using dummy_hcd [ 408.486219][ T5945] usb 7-1: new high-speed USB device number 71 using dummy_hcd [ 408.526501][ T5956] usb 8-1: Using ep0 maxpacket: 8 [ 408.532475][ T5945] usb 7-1: device descriptor read/8, error -71 [ 408.540913][ T5956] usb 8-1: unable to get BOS descriptor or descriptor too short [ 408.553073][ T5956] usb 8-1: New USB device found, idVendor=1235, idProduct=800c, bcdDevice= 0.40 [ 408.562724][ T5956] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.572649][ T5956] usb 8-1: Product: syz [ 408.577164][ T5956] usb 8-1: Manufacturer: syz [ 408.582175][ T5956] usb 8-1: SerialNumber: syz [ 408.598865][ T5956] usb 8-1: 1:1 : incorrect wMaxPacketSize for BADD profile [ 408.776103][ T5945] usb 7-1: new high-speed USB device number 72 using dummy_hcd [ 408.796941][ T5945] usb 7-1: device descriptor read/8, error -71 [ 408.909860][ T5945] usb usb7-port1: unable to enumerate USB device [ 408.917468][ T5956] usb 8-1: incorrect wMaxPacketSize 0x400 for BADD profile [ 408.960366][ T5956] snd-usb-audio 8-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 408.975614][ T5956] usb 8-1: USB disconnect, device number 66 [ 409.004408][ T9261] udevd[9261]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 409.589355][T11892] netlink: 'syz.7.1856': attribute type 10 has an invalid length. [ 409.627503][T11892] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1856'. [ 409.671207][T11892] batman_adv: batadv0: Adding interface: veth0_vlan [ 409.689730][T11892] batman_adv: batadv0: The MTU of interface veth0_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 409.729472][T11892] batman_adv: batadv0: Interface activated: veth0_vlan [ 409.879348][T11904] netlink: 'syz.3.1861': attribute type 4 has an invalid length. [ 409.919674][T11904] netlink: 'syz.3.1861': attribute type 4 has an invalid length. [ 410.402229][T11912] binder: 11911:11912 ioctl c00c620f 0 returned -14 [ 410.440591][T11907] fuse: fd is not a fuse device [ 411.345276][T11945] netlink: 'syz.5.1875': attribute type 10 has an invalid length. [ 411.364095][T11945] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1875'. [ 411.863666][T11962] x_tables: duplicate underflow at hook 2 [ 411.900297][T11962] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 411.994322][ T5854] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 412.051788][T11967] smc: net device hsr0 applied user defined pnetid SYZ2 [ 412.075252][T11967] smc: net device hsr0 erased user defined pnetid SYZ2 [ 412.202025][ T5854] Bluetooth: hci4: Unknown advertising packet type: 0x30 [ 412.202108][ T5854] Bluetooth: hci4: adv larger than maximum supported [ 412.210041][ T5854] Bluetooth: hci4: Malformed LE Event: 0x0d [ 412.506227][ T5847] usb 7-1: new full-speed USB device number 73 using dummy_hcd [ 412.668074][ T5847] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 412.679141][ T5847] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 412.689981][ T5847] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 412.701048][ T5847] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 412.713366][ T5847] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 412.723306][ T5847] usb 7-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 412.731472][ T5847] usb 7-1: Product: syz [ 412.735664][ T5847] usb 7-1: SerialNumber: syz [ 412.746239][T11969] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 412.834195][T11988] netlink: 'syz.7.1895': attribute type 21 has an invalid length. [ 412.842334][T11988] netlink: 128 bytes leftover after parsing attributes in process `syz.7.1895'. [ 412.967291][T11969] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 412.975512][T11969] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 413.145282][T12001] netlink: 'syz.3.1897': attribute type 10 has an invalid length. [ 413.166319][T12001] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1897'. [ 413.187053][T11969] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 413.209434][T11969] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 413.228811][T11969] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 413.241484][T11969] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 413.254522][T11969] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 413.265122][T11969] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 413.284829][T11969] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 413.492495][T12011] netlink: 112 bytes leftover after parsing attributes in process `syz.5.1901'. [ 413.509228][T12011] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1901'. [ 413.571878][T12013] overlayfs: failed to clone upperpath [ 413.678763][T12018] macvlan1: entered promiscuous mode [ 413.691733][T12018] macvlan1: entered allmulticast mode [ 413.697823][T12018] veth1_vlan: entered allmulticast mode [ 413.724202][T11969] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 413.755500][T11969] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 413.767595][T11969] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 413.796258][T11969] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 414.024937][ T5847] cdc_ncm 7-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 414.031466][ T5847] cdc_ncm 7-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 414.039940][ T5847] cdc_ncm 7-1:1.0: setting rx_max = 2048 [ 414.048689][T12029] fuse: fd is not a fuse device [ 414.054805][T12029] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1909'. [ 414.064076][T12029] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1909'. [ 414.244470][ T5847] cdc_ncm 7-1:1.0: setting tx_max = 184 [ 414.264027][ T5847] cdc_ncm 7-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.6-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 414.282322][ T5847] usb 7-1: USB disconnect, device number 73 [ 414.297013][ T5847] cdc_ncm 7-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.6-1, CDC NCM (NO ZLP) [ 415.476940][T12061] netlink: 'syz.5.1917': attribute type 21 has an invalid length. [ 416.766717][T12069] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 417.544820][T12097] 9p: Bad value for 'rfdno' [ 417.665865][T12103] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 418.926427][ T5847] usb 7-1: new high-speed USB device number 74 using dummy_hcd [ 419.023101][T12138] netlink: 'syz.5.1945': attribute type 21 has an invalid length. [ 419.031678][T12138] netlink: 388 bytes leftover after parsing attributes in process `syz.5.1945'. [ 419.076194][ T5847] usb 7-1: Using ep0 maxpacket: 8 [ 419.083081][ T5847] usb 7-1: unable to get BOS descriptor or descriptor too short [ 419.092817][ T5847] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 419.103244][ T5847] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 419.117073][ T5847] usb 7-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice= 0.40 [ 419.126602][ T5847] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.134692][ T5847] usb 7-1: Product: syz [ 419.139580][ T5847] usb 7-1: Manufacturer: syz [ 419.144289][ T5847] usb 7-1: SerialNumber: syz [ 419.361615][T12124] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 419.372599][T12124] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 419.383175][T12124] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 419.393214][T12124] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 419.403515][T12124] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 419.413453][T12124] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 419.426916][ T5847] gspca_main: STV06xx-2.14.0 probing 046d:08f0 [ 419.434428][ T5847] gspca_stv06xx: st6422 sensor detected [ 419.543097][T12149] sctp: [Deprecated]: syz.3.1948 (pid 12149) Use of struct sctp_assoc_value in delayed_ack socket option. [ 419.543097][T12149] Use struct sctp_sack_info instead [ 419.638575][T12153] tipc: Enabling of bearer rejected, failed to enable media [ 419.776147][T12159] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 419.843653][T12165] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1953'. [ 419.903470][ T5847] STV06xx 7-1:1.0: probe with driver STV06xx failed with error -71 [ 419.930433][ T5847] usb 7-1: USB disconnect, device number 74 [ 419.983446][T12169] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000009: 0000 [#1] SMP KASAN PTI [ 419.995490][T12169] KASAN: null-ptr-deref in range [0x0000000000000048-0x000000000000004f] [ 420.003990][T12169] CPU: 1 UID: 0 PID: 12169 Comm: syz.3.1955 Not tainted syzkaller #0 PREEMPT(full) [ 420.013363][T12169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 420.023420][T12169] RIP: 0010:fuse_opt_fd+0x49/0x220 [ 420.028611][T12169] Code: 4c 8d bb 98 00 00 00 4c 89 f8 48 c1 e8 03 80 3c 28 00 74 08 4c 89 ff e8 05 ed e4 fe 4d 8b 3f 4d 8d 66 48 4c 89 e0 48 c1 e8 03 <80> 3c 28 00 74 08 4c 89 e7 e8 e9 ec e4 fe 49 81 3c 24 80 2b 29 8c [ 420.048249][T12169] RSP: 0018:ffffc900030f7a68 EFLAGS: 00010206 [ 420.054341][T12169] RAX: 0000000000000009 RBX: ffff8880733c5600 RCX: 0000000000080000 [ 420.062326][T12169] RDX: ffffc9000d921000 RSI: 0000000000000695 RDI: 0000000000000696 [ 420.070307][T12169] RBP: dffffc0000000000 R08: ffffffff824b510a R09: ffffffff8eb5d6e0 [ 420.078303][T12169] R10: 0000000000000009 R11: 0000000000000002 R12: 0000000000000048 [ 420.086291][T12169] R13: 0000000000000002 R14: 0000000000000000 R15: ffff88802a849280 [ 420.094275][T12169] FS: 00007f46da5f66c0(0000) GS:ffff888124ee1000(0000) knlGS:0000000000000000 [ 420.103226][T12169] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 420.109830][T12169] CR2: 0000200000003000 CR3: 000000007ad20000 CR4: 00000000003526f0 [ 420.117830][T12169] Call Trace: [ 420.121130][T12169] [ 420.124075][T12169] fuse_parse_param+0x69b/0xa80 [ 420.128948][T12169] ? __pfx_fuse_parse_param+0x10/0x10 [ 420.134347][T12169] ? static_key_count+0x41/0x70 [ 420.139211][T12169] vfs_parse_fs_param+0x1a9/0x420 [ 420.144268][T12169] vfs_parse_monolithic_sep+0x283/0x360 [ 420.149836][T12169] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 420.155506][T12169] ? __pfx_vfs_parse_monolithic_sep+0x10/0x10 [ 420.161597][T12169] ? alloc_fs_context+0x9e9/0xd50 [ 420.166682][T12169] do_new_mount+0x304/0xd30 [ 420.171228][T12169] ? apparmor_capable+0x126/0x170 [ 420.176271][T12169] ? security_capable+0x7e/0x2c0 [ 420.181255][T12169] ? __pfx_do_new_mount+0x10/0x10 [ 420.186297][T12169] ? ns_capable+0x89/0xe0 [ 420.190661][T12169] ? path_mount+0x690/0x10e0 [ 420.195270][T12169] ? user_path_at+0xd4/0x160 [ 420.199892][T12169] __se_sys_mount+0x31d/0x420 [ 420.204602][T12169] ? __pfx___se_sys_mount+0x10/0x10 [ 420.209824][T12169] ? __x64_sys_mount+0x20/0xc0 [ 420.214658][T12169] do_syscall_64+0x14d/0xf80 [ 420.219284][T12169] ? trace_irq_disable+0x3b/0x150 [ 420.224332][T12169] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.230415][T12169] ? clear_bhb_loop+0x40/0x90 [ 420.235114][T12169] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.241022][T12169] RIP: 0033:0x7f46dc39c799 [ 420.245451][T12169] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 420.265073][T12169] RSP: 002b:00007f46da5f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 420.273507][T12169] RAX: ffffffffffffffda RBX: 00007f46dc615fa0 RCX: 00007f46dc39c799 [ 420.281531][T12169] RDX: 0000200000002100 RSI: 00002000000020c0 RDI: 0000000000000000 [ 420.289519][T12169] RBP: 00007f46dc432c99 R08: 0000200000002140 R09: 0000000000000000 [ 420.297509][T12169] R10: 0000000000000404 R11: 0000000000000246 R12: 0000000000000000 [ 420.305533][T12169] R13: 00007f46dc616038 R14: 00007f46dc615fa0 R15: 00007fff5ad4e7f8 [ 420.313537][T12169] [ 420.316568][T12169] Modules linked in: [ 420.321604][T12169] ---[ end trace 0000000000000000 ]--- [ 420.336243][T12171] netlink: 'syz.3.1955': attribute type 10 has an invalid length. [ 420.357053][T12169] RIP: 0010:fuse_opt_fd+0x49/0x220 [ 420.362436][T12169] Code: 4c 8d bb 98 00 00 00 4c 89 f8 48 c1 e8 03 80 3c 28 00 74 08 4c 89 ff e8 05 ed e4 fe 4d 8b 3f 4d 8d 66 48 4c 89 e0 48 c1 e8 03 <80> 3c 28 00 74 08 4c 89 e7 e8 e9 ec e4 fe 49 81 3c 24 80 2b 29 8c [ 420.383390][T12169] RSP: 0018:ffffc900030f7a68 EFLAGS: 00010206 [ 420.391323][T12169] RAX: 0000000000000009 RBX: ffff8880733c5600 RCX: 0000000000080000 [ 420.399935][T12169] RDX: ffffc9000d921000 RSI: 0000000000000695 RDI: 0000000000000696 [ 420.408026][T12169] RBP: dffffc0000000000 R08: ffffffff824b510a R09: ffffffff8eb5d6e0 [ 420.416068][T12169] R10: 0000000000000009 R11: 0000000000000002 R12: 0000000000000048 [ 420.424063][T12169] R13: 0000000000000002 R14: 0000000000000000 R15: ffff88802a849280 [ 420.432137][T12169] FS: 00007f46da5f66c0(0000) GS:ffff888124ee1000(0000) knlGS:0000000000000000 [ 420.443701][T12169] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 420.450406][T12169] CR2: 0000200000003000 CR3: 000000007ad20000 CR4: 00000000003526f0 [ 420.458496][T12169] Kernel panic - not syncing: Fatal exception [ 420.465193][T12169] Kernel Offset: disabled [ 420.469525][T12169] Rebooting in 86400 seconds..