last executing test programs: 13m10.556233843s ago: executing program 2 (id=1704): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r2, 0x8949, &(0x7f0000000580)={'bond0\x00'}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async) close(0xffffffffffffffff) (async) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r4 = socket$inet6(0xa, 0x3, 0x3c) (async) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000001100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast6-avx\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4044008}], 0x1, 0x200408d0) (async) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/70, 0x46}, {0xfffffffffffffffd}, {&(0x7f00000003c0)=""/192, 0xc0}], 0x3}, 0x10020) (async) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4000, 0x0, @remote, 0x5}, 0x1c) (async) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) (async) r7 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) (async) r9 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r9, &(0x7f0000000000)={0xa, 0x4e23, 0x3, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001e40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="24000000000000002900000032000000feff"], 0x28}}], 0x1, 0x20042004) sendmmsg$inet6(r9, &(0x7f0000001980)=[{{0x0, 0x0, 0x0}}], 0x20, 0x4004844) (async) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000200001c0"]) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) read$FUSE(0xffffffffffffffff, &(0x7f000000e400)={0x2020}, 0x204a) 13m9.445792593s ago: executing program 2 (id=1711): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d031, 0xffffffffffffffff, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x4e21, 0xb744, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffffd}, 0x1c) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CAP_SPLIT_IRQCHIP(r7, 0x4068aea3, &(0x7f00000001c0)) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4138ae84, &(0x7f0000000080)=@x86={0x6, 0xa, 0x7, 0x0, 0x3, 0x8d, 0xce, 0x1c, 0x89, 0xa0, 0x7, 0x8, 0x0, 0x8000, 0xb, 0x2, 0x8, 0x2, 0x1, '\x00', 0x9, 0x3fb}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000cc0)=@mmap={0x4, 0x2, 0x4, 0x400, 0x1000, {0x0, 0x2710}, {0x4, 0x1, 0x9a, 0x7, 0xfc, 0x9, "af56337f"}, 0x9, 0x1, {}, 0x2}) r9 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r9, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x8, 0x80, 0x0, '\x00', 0x5c8d}) ioctl$KVM_RUN(r9, 0xae80, 0x0) syz_open_dev$sg(&(0x7f00000002c0), 0x6, 0x4000) r10 = landlock_create_ruleset(&(0x7f0000000000)={0x0, 0x1}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r10, 0x2, &(0x7f00000000c0)={0x3}, 0x0) syz_usb_connect(0x4, 0x81c, &(0x7f0000000480)={{0x12, 0x1, 0x200, 0x84, 0x89, 0x46, 0xff, 0x1d4d, 0xc, 0x1197, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x80a, 0x3, 0x21, 0x0, 0x10, 0x1, [{{0x9, 0x4, 0x14, 0xf, 0x0, 0xb8, 0xf, 0xb7, 0x6, [@uac_control={{0xa, 0x24, 0x1, 0x9, 0x9}, [@output_terminal={0x9, 0x24, 0x3, 0x5, 0x2fb, 0x4, 0x3, 0x2}, @feature_unit={0x11, 0x24, 0x6, 0x2, 0x2, 0x5, [0x3, 0x6, 0x4, 0x6, 0x2], 0x5}, @selector_unit={0x8, 0x24, 0x5, 0x5, 0xfc, "489f31"}, @mixer_unit={0xb, 0x24, 0x4, 0x2, 0x60, "f5d74665a1f7"}, @selector_unit={0x5, 0x24, 0x5, 0x5, 0x81}]}]}}, {{0x9, 0x4, 0x7e, 0x8, 0x9, 0xc4, 0xe4, 0x13, 0x1, [], [{{0x9, 0x5, 0xd, 0x10, 0x3ff, 0x19, 0xe, 0x1d}}, {{0x9, 0x5, 0x80, 0x1, 0x3ff, 0x6, 0x0, 0x9, [@generic={0x63, 0x23, "fb447ad422c6fb89b413bb7479684ba153f15f8f6f1c4781d0f238e000b0b244da55bd794ce1f85172e00e97050b67fda0e47fb00fe703e1bdc39f1bdae7c61f86eb160ac623d813a7ad1f4202ab454843b2e7ed2caf80fc8652d2bf7581a3f2d6"}]}}, {{0x9, 0x5, 0xe, 0x4, 0x40, 0x7, 0xd, 0x5}}, {{0x9, 0x5, 0xc, 0x1d, 0x0, 0x1, 0x1f, 0x8, [@generic={0x7b, 0xd, "c5c0bdc29492e54dbcf0e81f2202ddd6d466ff4059ccd0133121b7fe039dfac3793b7f523c55299a358991390c23b13fe78fbfcea8d0dba58099408cd289205a628f21010cb00697028a98116f7521b3c42fb596d1376c27ca1ad769d8f694c749314108b48afad637f59ac608bb7b97bc58ba099e51de8f69"}, @uac_iso={0x7, 0x25, 0x1, 0xbeea4e69913121f6, 0xe0, 0x3}]}}, {{0x9, 0x5, 0xc, 0x10, 0x10, 0x2, 0xe, 0xd, [@generic={0x41, 0xc, "26f5046af0276a40f990be2b5c39e1a4b6abecbcd88363fc0f8b96224e6ac781fd22ae23eb6bdcf023c58f550c5a0dd23f04a2bee664295a991210d7458cc7"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x8f, 0x6}]}}, {{0x9, 0x5, 0x9, 0x1, 0x3ff, 0x8a, 0x7, 0xe, [@generic={0xb8, 0x23, "58f56c744b9b29edc00cbca93ec2c3a9ccbf8c5b42722932f25ec3bf76abf8349e9a7e08fae1fd7b442fcac625b57eca929f0a53dddb51d036235a78d185e27e44c17d420a78485585946aa3878d2c3f1bfeba232621babdc0513be397d45eee60659ecaa5948a7332333e32803fb1b91842a6f5de870a88d7817176b819e96c203466a75bb6e12fb3c1ed3bbe0b2f95306c517ead5e5dbefb0fd2edc74ebfa9a0a52e3df7a444d286d383f8094e121a52bafa611175"}, @generic={0x6b, 0x1, "d711f13ed609e160a4fe792461d93b458b91067321480acf39685cb92b63dbe867a80b1267f4d346e01de58cb15bbe11b1821cb4e8271c586f5fe2f755fbb3d71b4f7ed05d4fa45a1cf4a5e29061efdf0420dbddb1c59ff905e224c1e534e0cc2e27dee22b7754271f"}]}}, {{0x9, 0x5, 0x9, 0x1, 0x10, 0xd, 0x2, 0xfb, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x1, 0x5}]}}, {{0x9, 0x5, 0xd, 0x0, 0x8, 0x6, 0x4, 0x8}}, {{0x9, 0x5, 0xc, 0x0, 0x200, 0x9, 0x2, 0x0, [@generic={0x6f, 0x21, "62577cba293bba305869f08ab851fb587e2eed458fc5bee46fb025d3b967f9be90be8b40ef3017c99ab22f13b5397107174a572a16ea33ad9f9831c43dd24de095a4d57925d4674c489889f2ccdabe0f1557cd9c48a56a1fb0a9197b1d83cd6232ebd79caba58a2a6b22e45ebf"}]}}]}}, {{0x9, 0x4, 0x6, 0x81, 0x10, 0xfc, 0x5b, 0x82, 0xd7, [@hid_hid={0x9, 0x21, 0xfffa, 0x80, 0x1, {0x22, 0x247}}], [{{0x9, 0x5, 0x9, 0x10, 0x40, 0x40, 0x8, 0xf}}, {{0x9, 0x5, 0x1, 0x0, 0x200, 0x7, 0x34, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x8, 0x1000}]}}, {{0x9, 0x5, 0x7, 0x4, 0x8, 0x0, 0x4b, 0x4, [@generic={0x14, 0x7, "c3d9b8972f8536b56b1b8ed984d6edf464bd"}, @generic={0x4d, 0x9, "d26cb3c2f7baadaa3bd87077a9a8f8612496be2550945fc67626adc5237aed5a823bb25bfdf6efbf4da53ba7e4637e19ca02a543eddd5c78a05eb618636ae8ef03a0cc3025495a9f76ec02"}]}}, {{0x9, 0x5, 0x0, 0x8, 0x20, 0x9, 0xc, 0x4, [@generic={0xbd, 0x30, "adba40ad1ea8dc90ac1abc5ca3dda59c3ebce8a129bf6f032a360f20404e0a030a7d4e48eba9df4a9a953f5cf9bf995c43567488b4f501e2c8587a8c8265c9f6c498ce5050ef1a8c7160ac450c51ac98f80c53ee9bbe3d78eac1d1d1612d762951c300de140984119d0877b92131b45b05d316d00414199dd474583c53bb5470053e00a6531bc4eb7e2969e67993b54ba02c0514d2b10aa380e3a0266562e496a2d0ec36c56dd0355b06b92972b24a9afb3d77edc3afb2497e4305"}, @generic={0x4, 0x4, 'i$'}]}}, {{0x9, 0x5, 0xc, 0x3, 0x20, 0x8, 0xd, 0xca, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x7, 0x3a}]}}, {{0x9, 0x5, 0xc, 0x0, 0x278, 0x5, 0x1, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x2, 0x6}]}}, {{0x9, 0x5, 0x7, 0x0, 0x8, 0x80, 0x4, 0xab, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0xf7ef}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x2a, 0x8}]}}, {{0x9, 0x5, 0x2, 0x2, 0x10, 0x6f, 0xf6, 0xa3, [@generic={0x69, 0x1a706ddc45c7be6c, "4a85f115ba000403ce77fb79afa920ba41ea90d69bcf0f00d0c069e995c6fc91e8753cc06b8a66e557772ee323ef15e33cc03d488fba1b9458d147029835823da1d29bc5ad06cb1961a9073703a33e9a0aac26689563d7af64d967db9ba5f243f8b14f2ac885e0"}, @generic={0xec, 0xf, "c8141a089e3edece84c8d0e3948e48fde590e4d5669331e884f338771c338a979a058314f00e35992c9d857fd47017ed60860916fe6284f955e25349d82db94dba21733cd8173264b8df4bc38f2b6a78794da97e944c08b55138b67532b3c79fd747bb0e4df3f4f68549ae438c4909acc599060dd6978666647661d9c3c2a5d009464203101ca72a7b678ab34cc10e6cab5f0a389ee827531407b6d324c77c700e8f78fc1b677d01e317d7fb0d16b720d9dc739eecdb6ee5e004e5da07bd0a1f39e4a3caadc5aa8a0c38733c1a624d59fc5ccf7589e9bbc030660adceb837cd6a8a304b731677df302df"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x40, 0x2, 0x38, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0x7}, @generic={0x44, 0x6, "bcf5c276eb7e6041ded0936f8e701ff524cc17c62017a427da4e43e4c15d518d62d88b36e4405d67b02f0ee5f956445091bfdf5c3301db9854f0af967d92ecb24444"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x40, 0x81, 0x6, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x5, 0x3}]}}, {{0x9, 0x5, 0xf, 0x10, 0x20, 0x4c, 0x1, 0xfe, [@generic={0x2d, 0xf, "11d86072c3a4dc06475987707a7f57674d55c7cddeb72f51b8e6df285d3acdfd74fffcd909f0c125a5f7c2"}, @generic={0x5f, 0x0, "90880f27b7c612e6978ac0aa202e951a72326c81c179db4829e6b2c49e529d92919074d2ac85dcfd21775670929a6bda96a3013924c292af15bc6bc415b50df0ce63478c0b9b26d99e91ac795ec85d3b98852b5a407a9ba691135e902e"}]}}, {{0x9, 0x5, 0x8, 0x2, 0x40, 0x3, 0x1, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x6, 0x4}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0x81, 0xa}]}}, {{0x9, 0x5, 0x3, 0x3, 0x8, 0x8f, 0x4, 0xc1}}, {{0x9, 0x5, 0x2, 0x0, 0x10, 0xa9, 0xef, 0x6}}, {{0x9, 0x5, 0xd, 0x10, 0x200, 0x8, 0x7, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x3, 0x1}]}}, {{0x9, 0x5, 0xe, 0x10, 0x8, 0x40, 0x3, 0x7, [@generic={0x64, 0x22, "54d79160e3bb2b979055366518a0402e0d7197feac1163166820e42a96d9892377f31677125d1a67551d627f8fa316782e390ff4d8399b71c69deb70ff938756404953b45c193bad68ff74b3f3fb0192880b5bb2913370fcf3e84d1890266b9374fb"}, @generic={0xa, 0x31, "4b143e0f2ad03248"}]}}]}}]}}]}}, &(0x7f0000000e00)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x10, 0x0, 0x15, 0x66, 0x40, 0x8b}, 0x19, &(0x7f0000000340)={0x5, 0xf, 0x19, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xc, 0x8, 0x21, 0xf0}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xc, 0x5, 0x3, 0xd}]}, 0x4, [{0x0, 0x0}, {0x27, &(0x7f0000000e80)=ANY=[@ANYBLOB="270379204a220ba6a052dca752c7fabea369beb9c7fd1f1caa6883ee8ac40aac4f494b1b2b640755f6d38c166f17e4ebb488352b7ee857df57274829c33b69be20a1bc72b10e6be52982525af228c53658c01b5750c52a0aca985043d08a73cbb8e28dd791252ebc477d01cfdeaa137414101260ea29addbd103400d4a87fb92725530e70bec5f675ed73328d6a35adf3fba433e87e02493f9b234fa1ab182c1ff55ab600da467af13b1ac6cd57b93fd0397c200"/193]}, {0x7f, &(0x7f0000000d80)=ANY=[@ANYBLOB="7f039811916e11b45c33212fbd5e5df6395154736cb0a1dd20331bf488eec9cdbbb55ffd429bd18a295b26cfcfa1293f80607100384d032c4ff2ed22d8f15f8a212adc33223813ae40d67a9e6712566e390d557c654bbf57fd2b040caddfe0cc4e0246af824b72fb0ddf48d83daa2299ecfe21af62ffe1f55f30d21cfdb600"]}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x1001}}]}) openat$full(0xffffffffffffff9c, 0x0, 0x2fb71da98128d4bd, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYRES64=r8, @ANYRES32=0x0, @ANYRESOCT=0x0], 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x0) readv(r1, &(0x7f0000000240)=[{&(0x7f0000000040)=""/84, 0x9000}], 0x1) close_range(r0, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000791000/0x3000)=nil, 0x3000, 0x1) 13m5.268270861s ago: executing program 2 (id=1721): r0 = socket(0x80000000000000a, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=@newlink={0x50, 0x10, 0x503, 0x70bd28, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x20, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @random="00001500"}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4001}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000f}, 0x94) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x4e24, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000000200)={0x0, {{0xa, 0xfff, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r3 = syz_usb_connect$cdc_ncm(0x2, 0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000000000006241a0000000c241b4800f3ff00050080050905810300020000000904010000020d00000904010102020d0000090582020004000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f0000000080)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x80, 0x1c, {0x3, 0x9, 0xecc, 0x1, 0x7, 0x2865, 0x2008, 0x9, 0x1, 0x2, 0x4, 0x81}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r3, 0x0, 0x0) 13m2.447485059s ago: executing program 2 (id=1731): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0xa2, 0x6576, 0xd}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r2, 0x100000000) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000680)='ns/pid_for_children\x00') setns(r3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, &(0x7f0000000240)='syzkaller\x00', 0xb2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x2, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) r4 = fsmount(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_pressure(r4, &(0x7f0000000140)='memory.pressure\x00', 0x2, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f0000000140)={0x48, 0x2, r5}) setns(r4, 0x80) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000300), 0x0}) 13m1.091389616s ago: executing program 2 (id=1736): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(0xffffffffffffffff, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB='decodes io+'], 0xf) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = socket$kcm(0x2d, 0x7, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000080)={r2}) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs\x00') preadv(r3, &(0x7f0000000380)=[{&(0x7f0000000080)=""/83, 0x53}], 0x1, 0xc9, 0x1) madvise(&(0x7f00005ce000/0x3000)=nil, 0x3000, 0xb) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/154, 0x9a, 0x51) pipe2$watch_queue(0x0, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00'}) syz_usb_connect(0x5, 0x24, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x92, 0x20, 0x2c, 0x40, 0x1943, 0x2255, 0x9220, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0xc0, 0x81, [{{0x9, 0x4, 0x53, 0x0, 0x0, 0x73, 0xc4, 0x3f}}]}}]}}, 0x0) set_mempolicy(0x3, &(0x7f0000000000)=0x7, 0x7) sendto$inet6(r3, &(0x7f0000000240)="c18a2426f3730b4c38093e3cf616f19a7b0fc831009de5fda4140b77053bf99ace09d5d470440580c0403c413f635bf0158a0b1e0f56931721e71fd1b475fb22bafb5dfecac14307c4d9e095b91b", 0x4e, 0x40, &(0x7f0000000140)={0xa, 0x4e22, 0x3, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x5}, 0x1c) mmap(&(0x7f00004cb000/0x4000)=nil, 0x4000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000040)={&(0x7f000067d000/0x2000)=nil, &(0x7f000053d000/0x1000)=nil, 0x2000}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x20223000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 12m57.927923283s ago: executing program 2 (id=1746): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000180), 0x0, 0x0) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000100)={0x1, "fa02c8098000"}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000140)={0xfff, "711cf65998d09ba01233c4601b021d06f376bcdc75d21971706498fad99a57b9"}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000100)={0x4, r3}) ioctl$DMA_BUF_SET_NAME_A(r5, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') (async) ioctl$DMA_BUF_SET_NAME_A(r5, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') ppoll(&(0x7f0000000700)=[{r5, 0x84}], 0x1, 0x0, 0x0, 0x0) (async) ppoll(&(0x7f0000000700)=[{r5, 0x84}], 0x1, 0x0, 0x0, 0x0) close(0x3) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) alarm(0x94e) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_usb_connect(0x3, 0x3e, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) bind$can_j1939(0xffffffffffffffff, &(0x7f00000000c0), 0x18) (async) bind$can_j1939(0xffffffffffffffff, &(0x7f00000000c0), 0x18) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) syz_io_uring_setup(0x1104, &(0x7f0000000300)={0x0, 0x0, 0x80, 0x0, 0x8000021e}, &(0x7f00000001c0), &(0x7f0000000040)) (async) syz_io_uring_setup(0x1104, &(0x7f0000000300)={0x0, 0x0, 0x80, 0x0, 0x8000021e}, &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x4, 0x0, 0x7, 0x0, 0x0, 0x1}) (async) syz_io_uring_submit(r7, r8, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x4, 0x0, 0x7, 0x0, 0x0, 0x1}) r9 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0) r10 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r10, 0x0, 0x0) r11 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) dup3(r10, r11, 0x80000) (async) dup3(r10, r11, 0x80000) write$char_usb(r11, 0x0, 0x0) syz_usb_disconnect(r9) (async) syz_usb_disconnect(r9) 12m42.379915399s ago: executing program 32 (id=1746): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000180), 0x0, 0x0) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000100)={0x1, "fa02c8098000"}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000140)={0xfff, "711cf65998d09ba01233c4601b021d06f376bcdc75d21971706498fad99a57b9"}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000100)={0x4, r3}) ioctl$DMA_BUF_SET_NAME_A(r5, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') (async) ioctl$DMA_BUF_SET_NAME_A(r5, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') ppoll(&(0x7f0000000700)=[{r5, 0x84}], 0x1, 0x0, 0x0, 0x0) (async) ppoll(&(0x7f0000000700)=[{r5, 0x84}], 0x1, 0x0, 0x0, 0x0) close(0x3) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) alarm(0x94e) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_usb_connect(0x3, 0x3e, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) bind$can_j1939(0xffffffffffffffff, &(0x7f00000000c0), 0x18) (async) bind$can_j1939(0xffffffffffffffff, &(0x7f00000000c0), 0x18) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) syz_io_uring_setup(0x1104, &(0x7f0000000300)={0x0, 0x0, 0x80, 0x0, 0x8000021e}, &(0x7f00000001c0), &(0x7f0000000040)) (async) syz_io_uring_setup(0x1104, &(0x7f0000000300)={0x0, 0x0, 0x80, 0x0, 0x8000021e}, &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x4, 0x0, 0x7, 0x0, 0x0, 0x1}) (async) syz_io_uring_submit(r7, r8, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x4, 0x0, 0x7, 0x0, 0x0, 0x1}) r9 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0) r10 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r10, 0x0, 0x0) r11 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) dup3(r10, r11, 0x80000) (async) dup3(r10, r11, 0x80000) write$char_usb(r11, 0x0, 0x0) syz_usb_disconnect(r9) (async) syz_usb_disconnect(r9) 12m31.474656984s ago: executing program 5 (id=1848): socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x2b, 0x1, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x5, 0x0, 0x0, 0x3, 0x9, 0xc, 0x407, 0x81}, 0x0) (async, rerun: 64) r2 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) sendmsg$nl_generic(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x14, 0x38, 0x701, 0xfffffffc, 0x0, {0x2}}, 0x14}}, 0x4008000) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x85}, 0x0) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80882) r4 = syz_io_uring_setup(0x3b41, &(0x7f0000000280)={0x0, 0x3, 0x2000, 0x2, 0xffffffff, 0x0, r3}, &(0x7f00000000c0)=0x0, &(0x7f00000003c0)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/4, 0x4}], 0x1}) (async, rerun: 32) writev(r3, &(0x7f0000001800)=[{&(0x7f00000001c0)='*', 0x1}], 0x1) (rerun: 32) io_uring_enter(r4, 0x567, 0x0, 0x8, 0x0, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x2000000000000025, &(0x7f0000000200)=0x1, 0x4) (async) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r9 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_S_FMT(r9, 0xc0d05605, &(0x7f0000000180)={0xa, @pix_mp={0x0, 0x7, 0x32314d4e, 0x7, 0x0, [{}, {0xffffffff, 0x1}, {0x4}, {}, {}, {}, {0x0, 0xffffffff}], 0x4e}}) (async) r10 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r11, 0x4008ae89, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000040)={'sit0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x8002, 0x10, 0x168, 0xb, {{0x6, 0x4, 0x0, 0x12, 0x18, 0x78, 0xfffc, 0x8, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x1f}, @rand_addr=0x64010101, {[@generic={0x83, 0x2}]}}}}}) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3, &(0x7f0000000380)=0x2, 0x400, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000045000/0x3000)=nil, 0x3) 12m30.051596928s ago: executing program 5 (id=1853): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000005c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)={0x24, r2, 0x121, 0x31bd2c, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x800c0) setsockopt$inet6_tcp_int(r1, 0x6, 0x5, &(0x7f00000007c0)=0xe0, 0x4) getsockopt$inet6_tcp_int(r1, 0x6, 0x5, 0x0, &(0x7f00000009c0)) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000000306010800000000000000000600000705000100070000000500010007000000050001000700000005000100070000000900020073797a3000000000050001000700000005000100070000000900020073797a30000000000900020073797a30000000000900020073797a31"], 0x74}, 0x1, 0x0, 0x0, 0x80c1}, 0x50) 12m29.910504133s ago: executing program 5 (id=1854): process_madvise(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000180)}], 0x1, 0x0, 0x0) ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x6, 0x0, 0x0, "5debca561a5fbf61048955f6f876b2ff", 0x0, 0x1}) r0 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000800)={r0, r0, r0}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}}) (fail_nth: 8) 12m29.406736317s ago: executing program 5 (id=1856): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x439, 0x70bd2a, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x46497, 0x610c0}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FWMARK={0x8, 0x14, 0x80001ff}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x4008040) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x1bc}, 0x1, 0x0, 0x0, 0x8890}, 0x24000000) 12m29.330774862s ago: executing program 5 (id=1858): recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x4b, &(0x7f00000001c0)={&(0x7f00000004c0)=@deltclass={0x24, 0x29, 0x20, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {}, {0x4, 0xfff3}, {0x10, 0xffe0}}}, 0x24}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000100)={0x28, 0x7, r2, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="000000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d10300001400000011000100000000000011acf9c83d0000000100000a"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f00000001c0)={0x48, 0x5, r2, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r1, 0x3ba0, &(0x7f0000000540)={0x48, 0x8, r4, 0x0, 0x2fff, 0x1, &(0x7f00000000c0)='z', 0x4}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newqdisc={0x6c, 0x24, 0xd0f, 0x70bd2c, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xf}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x0, 0x8, 0x1, 0x73a0, 0x2}, {0x6, 0x1, 0x6, 0x2, 0x7, 0x9}, 0xdd, 0x0, 0x1e8c}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xa668cd67f58edc68}, @TCA_TBF_BURST={0x8, 0x6, 0x2}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000000}, 0x3000c81c) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r6, 0x84, 0x19, &(0x7f0000000000)={0x0, 0x2}, 0x8) 12m29.132759625s ago: executing program 5 (id=1860): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) (async) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f2110"], 0x0) (async) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}}, 0x24}}, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x437, 0x0, 0xffffffef, {0x0, 0x0, 0x0, r4, 0x50487, 0x8044}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e21}, @IFLA_GRE_REMOTE={0x8, 0x7, @local}]}}}]}, 0x44}}, 0x20008884) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000001c0)=[{{&(0x7f0000000240)={0xa, 0x4e22, 0x6, @local, 0xa}, 0x1c, 0x0}}], 0x1, 0x2008c0c0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {}, {0x5, 0xf}}}, 0x24}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) syz_usb_ep_write(r0, 0x81, 0xfffffffffffffdca, &(0x7f0000000080)="c0") readv(r1, &(0x7f0000000140)=[{&(0x7f0000000180)=""/112, 0x63}], 0x1d) 12m13.646550581s ago: executing program 33 (id=1860): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) (async) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f2110"], 0x0) (async) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}}, 0x24}}, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x437, 0x0, 0xffffffef, {0x0, 0x0, 0x0, r4, 0x50487, 0x8044}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e21}, @IFLA_GRE_REMOTE={0x8, 0x7, @local}]}}}]}, 0x44}}, 0x20008884) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000001c0)=[{{&(0x7f0000000240)={0xa, 0x4e22, 0x6, @local, 0xa}, 0x1c, 0x0}}], 0x1, 0x2008c0c0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {}, {0x5, 0xf}}}, 0x24}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) syz_usb_ep_write(r0, 0x81, 0xfffffffffffffdca, &(0x7f0000000080)="c0") readv(r1, &(0x7f0000000140)=[{&(0x7f0000000180)=""/112, 0x63}], 0x1d) 12m0.724207373s ago: executing program 1 (id=1973): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x715a9d1e7a68469f, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_COMPAT={0x1c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x9200}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x62}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}}, 0x0) syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010102cab4c508720c14008a570102030109022400010b00e0090904f405021df45208090503030000050881090502"], &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0}) 11m58.240071312s ago: executing program 1 (id=1983): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), 0xffffffffffffffff) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)={0x3c, r1, 0x917, 0x0, 0x400, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r2}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) unshare(0xc040400) r3 = open(&(0x7f00000001c0)='./cgroup\x00', 0x0, 0x157) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x48, &(0x7f0000000240)=ANY=[@ANYRESDEC], 0x8) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e21, 0x6, @local, 0x3ff}, 0x1c) ioctl$DRM_IOCTL_FREE_BUFS(r3, 0x4010641a, &(0x7f0000000040)={0x7, &(0x7f0000000000)=[0xfffffffe, 0x0, 0x0, 0x8000, 0x4, 0x7, 0x8001]}) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000000000)={@random="5b1a033f2511", @empty, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x20, 0x64, 0x0, 0x0, 0x11, 0x0, @empty, @empty=0xe0000001, {[@timestamp={0x44, 0x4, 0xea, 0x0, 0xf}]}}, {0x0, 0x4e20, 0x8}}}}}, 0x0) syz_clone3(&(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, {0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, {r3}}, 0x58) 11m58.151735177s ago: executing program 1 (id=1984): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000000)=0x2b) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000001c0)) r1 = syz_open_dev$vim2m(&(0x7f0000000280), 0x9804, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000140)={0x1, @pix={0x800200, 0x0, 0x38414261, 0x1, 0xfffffffd, 0x2, 0x2, 0x3, 0x0, 0x2}}) r2 = syz_io_uring_setup(0x719e, &(0x7f0000000480)={0x0, 0xdd60, 0x10, 0x3, 0x27b}, &(0x7f00000002c0), &(0x7f0000000500)) r3 = syz_io_uring_setup(0x61c6, &(0x7f0000000400)={0x0, 0x334e, 0x8202, 0x4, 0x312, 0x0, r2}, &(0x7f0000000100)=0x0, &(0x7f0000000300)=0x0) r6 = open$dir(&(0x7f0000000040)='./file1\x00', 0x8400, 0x8) getdents64(r6, &(0x7f0000000340)=""/162, 0xa2) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, 0x7}) write$UHID_CREATE2(r7, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r7, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x60, 0x185100}) io_uring_enter(r3, 0x7277, 0x0, 0x28, 0x0, 0x0) 11m57.335642343s ago: executing program 1 (id=1986): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) msgctl$MSG_STAT(0x0, 0xb, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x20000, 0x0, 0xb4a, 0x9, 0x100000b, 0x0, 0xffff}, 0x0) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r2 = semget$private(0x0, 0x6, 0x0) semtimedop(r2, &(0x7f0000000340)=[{0x4, 0x8fff}, {0x1, 0x443, 0x1800}], 0x2, 0x0) semctl$IPC_SET(r2, 0x0, 0x1, &(0x7f0000000240)={{0x1, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xee00, 0x120, 0x6}, 0x4, 0x1}) r3 = socket$key(0xf, 0x3, 0x2) recvmmsg(r3, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400}) setsockopt$sock_int(r3, 0x1, 0x4b, &(0x7f0000000040)=0xfd87, 0x4) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0216000002"], 0x10}}, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x9801) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000540)={0xffffffffffffffff}) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r6, 0x10f, 0x84, 0x0, &(0x7f0000000280)) getsockopt$IP_VS_SO_GET_VERSION(r6, 0x0, 0x480, &(0x7f00000000c0), &(0x7f0000000200)=0x40) lstat(&(0x7f0000000300)='./file0/file0\x00', &(0x7f0000000380)) syz_open_dev$hiddev(&(0x7f0000000400), 0xf, 0x20000) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./file0/file0\x00', 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x20902, 0x0) r7 = fsopen(&(0x7f0000000440)='ocfs2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) 11m55.0451535s ago: executing program 1 (id=1996): r0 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, r0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = memfd_create(&(0x7f0000000780)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\nh<\x99\xaa\xe1\xf3\xb8Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev<\x97\x1a2_\x82\xfa\x15h$\x01\xdd\xe5\xceC\x19\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xb2\xf5\x1e5.\xc1\xa1\x05\x92\x82d\x0e\xf5PMjIt\xc5u~Tw\xbeNg\xb5\xeeP\x9c\xce\xfaS\xa7\xec0\xf4\xd2\xc2+@\x12=\xaa\b\xd2&\x19k6\xc7\xa6+\x04V\xc3\xe1\xd3\fZZ\x1cJo\xa5(& \r\xf1\xa4\xb8\xc23\x16\xc3\xaejA/', 0x0) write$binfmt_elf32(r3, &(0x7f0000000f00)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738000000000035f4c38422a3bc82200005"], 0x66) execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x550, 0x40, 0x1000, 0x0, 0x20, 0x0, {0x0, 0x9416}, {0x350, 0xfffffffd}, {0xf4ef}, {0x0, 0x0, 0xffe}, 0x1, 0x100, 0x0, 0xd614, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, 0x0, 0xb}) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) ptrace$ARCH_GET_GS(0x1e, 0x0, &(0x7f00000003c0), 0x1004) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574"], 0x38}}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, r7, 0x100, 0x70bd2d, 0x25dfdbfc, {{}, {}, {0x18, 0x17, {0x9, 0x101, @l2={'ib', 0x3a, 'dummy0\x00'}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x4) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x45, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r9, 0x65, 0x1, 0x0, 0x0) bind$can_raw(r9, &(0x7f0000000000), 0x10) setsockopt$CAN_RAW_FILTER(r9, 0x65, 0x1, 0x0, 0x0) r10 = socket$pppl2tp(0x18, 0x1, 0x1) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={0x0}}, 0x0) ioctl$SIOCSIFMTU(r10, 0x8923, &(0x7f0000000100)={'vlan0\x00', 0x40}) 11m54.343615217s ago: executing program 1 (id=1998): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=ANY=[@ANYBLOB="200000006a0001050100008000000000000000000000000008000500be629e5b98313352dd3c1b41626550e655430c62f739fb5d8ef3a14a8f6db682a0ed8795b0901ef546ebd9f991266e45b1b7633b911f1bc6383bc5db54f063f1a232d4627de0f6c53299bcbdf680b9732ad83689ca927ecd1fda5102aa85f3f4a6c404ad815d809ce5d11f0d302a49859192776e81c18a3bb77f431c7f22b8a37e11282cea6929605abdf646fa2acafd765090bb80828e03471d337464c24cf2f50d4d4065f270d18e19138e2b84e20022c8889734f21f42c2efca370d03d4f5a103b17dbedfdaf500fe6fbe92cd618668461308ac9d", @ANYRES32, @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x2000c000) 11m53.951914078s ago: executing program 34 (id=1998): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=ANY=[@ANYBLOB="200000006a0001050100008000000000000000000000000008000500be629e5b98313352dd3c1b41626550e655430c62f739fb5d8ef3a14a8f6db682a0ed8795b0901ef546ebd9f991266e45b1b7633b911f1bc6383bc5db54f063f1a232d4627de0f6c53299bcbdf680b9732ad83689ca927ecd1fda5102aa85f3f4a6c404ad815d809ce5d11f0d302a49859192776e81c18a3bb77f431c7f22b8a37e11282cea6929605abdf646fa2acafd765090bb80828e03471d337464c24cf2f50d4d4065f270d18e19138e2b84e20022c8889734f21f42c2efca370d03d4f5a103b17dbedfdaf500fe6fbe92cd618668461308ac9d", @ANYRES32, @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x2000c000) 8m1.632214313s ago: executing program 3 (id=2217): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x3, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x2, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x5, 0xb, 0x4, 0x2, 0x1, 0x9}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x2070b921, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0xe}, {0x2, 0xb}, {0xd, 0xd}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x3, 0x1, 0x594}}}}]}, 0x44}}, 0x4008000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) timer_settime(0x0, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) close(r1) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x100, 0x0) (async) close(r4) (async) socket$unix(0x1, 0x1, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x3, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x2, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x5, 0xb, 0x4, 0x2, 0x1, 0x9}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x2070b921, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0xe}, {0x2, 0xb}, {0xd, 0xd}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x3, 0x1, 0x594}}}}]}, 0x44}}, 0x4008000) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) (async) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) (async) timer_settime(0x0, 0x0, 0x0, 0x0) (async) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) (async) 8m0.41205438s ago: executing program 3 (id=2224): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201410130f56920ac05190272f00102030109021b000100001000090455070103490200090582030004"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000580)={0x84, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c068c0a7d2eaebc5cea1f81510ff6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa43414787559be90843c35ab30acad8a6740140e00721abc", 0x56}], 0x1}, 0xff00) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, &(0x7f0000000180)) mkdir(&(0x7f0000000140)='./control\x00', 0x0) rmdir(&(0x7f0000000100)='./control\x00') syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="00394abb00514e9cf180", @ANYRESDEC=0x0], 0x0, 0x0, 0x0) syz_fuse_handle_req(r1, &(0x7f0000008100)="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", 0x2000, &(0x7f0000000340)={&(0x7f0000000100)={0x50, 0x0, 0x0, {0x7, 0x28, 0x0, 0x6845a088, 0x1, 0x3, 0x1, 0xffffffff, 0x0, 0x0, 0x40}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x40, &(0x7f0000000080)=ANY=[]) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a32000000000500040004000000050022596f8e961bd818eeca9ec62ffd05000200000011000300686173683a6e65742c00f30b000780080006000000000005000100070000003a7b8fcd1f736c0b5d46e7dc648b160826382153e4033a4d45bee00786315834f37099fcd7f48644501ddc8bb2b1c5e1938f74fd5c678cf2732671ffdf003eb2f2b29e6e02834a70a76e7593cf8d212fa50b3948f47ac375378a14eaf5721389097556c32c0c3fc6e6be12842dfe28183a29ac2f2f6390f28b012c44847f1557166e05969ce51dd645c9747518fd00"/251], 0x58}}, 0x20000000) r4 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r4, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f911, 0x8000, '\x00', @string=&(0x7f00000000c0)}}) r5 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r6, &(0x7f000000e280)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r6, &(0x7f000000c280)="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", 0x2000, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0x0, {0x3, 0x4000000000, 0x0, 0x0, 0x0, 0x0, {0xffffffffffffffff, 0x4, 0x2, 0xc9, 0x0, 0x8000000, 0x0, 0x0, 0x81, 0x1000, 0x2000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r6, &(0x7f0000000380)={0x50, 0x0, r7, {0x7, 0x29, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0x50) open(&(0x7f0000000080)='./file0/../file0/file0\x00', 0x10000, 0x20) syz_fuse_handle_req(r6, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d00)={0x90, 0x0, 0x9, {0x400, 0x0, 0x7, 0x3, 0xfffffff0, 0xa5, {0x0, 0xb43d, 0x3, 0x9, 0x8000000000000001, 0x9, 0x4, 0x800, 0x40, 0x6000, 0x4, 0x0, 0x0, 0xffffffff, 0xfff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) link(&(0x7f0000000280)='./file0/../file0/file0\x00', 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000220edf104c05c10687c20102030109022400010000000009040000024f6996000905c6d6000000000009050202"], 0x0) close(0x3) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001ec0), 0xffffffffffffffff) sendmsg$TIPC_NL_PUBL_GET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="030f000000000000000007"], 0x44}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 7m57.112069843s ago: executing program 3 (id=2236): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140000100075c0000000e0a01020000000000000000010000000900020073797a32000000000900010073797a30"], 0xec}, 0x1, 0x0, 0x0, 0x44080}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xe8001, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0x2}) ioctl$TUNSETOFFLOAD(r1, 0x400454c9, 0xba98575a95aeb701) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setxattr$incfs_metadata(0x0, 0x0, 0x0, 0x0, 0x1) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8924, &(0x7f00000000c0)={'dummy0\x00', 0x2}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x4e21, 0x4000003, @loopback}, 0x1c) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000080)='illinois\x00', 0x9) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00'}) shutdown(r6, 0x2) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x40, 0x0, 0x0, 0x4000b49, 0x9, 0x8, 0x0, 0x3}, 0x0) r7 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r7, 0xc004500a, &(0x7f0000000000)) ioctl$SNDCTL_DSP_CHANNELS(r7, 0xc0045006, &(0x7f0000000180)=0x70) write$dsp(r7, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) syz_usb_connect(0x5, 0x3f, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x2}, 0x80, 0x0}, 0x20000814) 7m53.120136688s ago: executing program 3 (id=2257): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vti={{0x8}, {0x24, 0x2, 0x0, 0x1, [@vti_common_policy=[@IFLA_VTI_FWMARK={0x8}], @vti_common_policy=[@IFLA_VTI_OKEY={0x8}, @IFLA_VTI_IKEY={0x8}, @IFLA_VTI_LINK={0x8}]]}}}]}, 0x50}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000200)={'syztnl1\x00', 0x0, 0x2f, 0x7, 0x2, 0x0, 0x14, @remote, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10, 0x8000, 0x765, 0x3}}) (async) r3 = creat(&(0x7f00000001c0)='./file0\x00', 0x8) close(r3) read$FUSE(r3, &(0x7f000000e400)={0x2020, 0x0, 0x0, 0x0}, 0x204a) syz_fuse_handle_req(r3, &(0x7f000000a3c0)="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", 0x2000, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x78, 0x0, 0x0, {0x410000003, 0x10, 0x0, {0x0, 0x800000001, 0x1000, 0x7, 0x0, 0xfffffffffffffffd, 0x0, 0x4, 0x0, 0x8001, 0x0, r4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) sendmsg$nl_xfrm(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)=@newsa={0x104, 0x10, 0x100, 0x70bd2c, 0x25dfdbfe, {{@in=@remote, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e24, 0x0, 0x4e22, 0x3127, 0xa, 0x0, 0xa0, 0x2c, r2, r4}, {@in=@local, 0x4d4, 0x3c}, @in=@loopback, {0xc, 0xc00, 0x5, 0x0, 0x3aae, 0xffffffff80000000, 0x3ff, 0x2126}, {0xffffffffa1836a90, 0x101, 0x3, 0x9}, {0x7, 0x5, 0x22}, 0x70bd2b, 0x3501, 0xa, 0x4, 0x1}, [@tfcpad={0x8, 0x16, 0x8}, @mark={0xc, 0x15, {0x35075a, 0x180000}}]}, 0x104}}, 0x10) (async) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) (async) umount2(&(0x7f00000001c0)='./file0\x00', 0x7) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(ecb-aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000040)="11da3cf44b1a8c3d8a39ccbd630e8ef9170ccf07ef1800322de53ae3b183ee66", 0x20) (async) close(0x3) ioctl$VIDIOC_G_SELECTION(r1, 0xc040565e, &(0x7f0000000480)={0x2, 0x2, 0x5, {0xff, 0x0, 0x36e, 0x401}}) (async) sendmsg$nl_generic(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000002d00010026bd7000fcdbdf250400000004000e800c00098008"], 0x24}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 7m52.163531219s ago: executing program 3 (id=2258): r0 = socket(0x2b, 0x1, 0x1) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x20040000) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, 0x0) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)={0x20, 0x0, 0x101, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x4}]}, 0x20}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x30, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x2d}}}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x8005}, 0x20000040) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) 7m51.336790634s ago: executing program 3 (id=2260): r0 = socket$alg(0x26, 0x5, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x9) (async) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYRES8=r0, @ANYRES16=r0, @ANYBLOB="01000000000000001c0012000c030100626f6e80b5baf888499431491de0a064000000000c000200080001000682c7dad53c90b15eefdf30bbc087a09de2cf8e67a41156dc112075fbc36fc51fe2487f71256ffb4b9285f4afed81c103178c266adf6bd8c9f9293e0c993c82782d38"], 0x3c}, 0x1, 0x0, 0x0, 0xc010}, 0x4008080) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) statx(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x6000, 0x8, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_GETQUOTA(r2, 0xffffffff80000700, r3, &(0x7f00000002c0)) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0x1, 0x803, 0x0) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x4000000006, 0x0, 0x1}}, 0x40) (async) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) (async) r5 = eventfd(0xff7ffff9) ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, &(0x7f0000000240)=r5) (async) socket$vsock_stream(0x28, 0x1, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) inotify_init() (async) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) openat$vnet(0xffffffffffffff9c, &(0x7f00000038c0), 0x2, 0x0) (async) pselect6(0x40, &(0x7f0000000600)={0x26, 0x0, 0x1000000, 0x40, 0x2, 0x11, 0x0, 0x7}, 0x0, &(0x7f0000000680)={0x7ff, 0x7, 0x9, 0x7, 0x4, 0x0, 0x5, 0x7}, 0x0, 0x0) (async) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000040)={0x1, r5}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/246, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) (async) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000680)) (async) ioctl$VHOST_SET_VRING_ERR(r4, 0x4008af22, &(0x7f00000002c0)={0x1, r5}) (async) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000000)=0x1) 7m50.539305542s ago: executing program 35 (id=2260): r0 = socket$alg(0x26, 0x5, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x9) (async) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYRES8=r0, @ANYRES16=r0, @ANYBLOB="01000000000000001c0012000c030100626f6e80b5baf888499431491de0a064000000000c000200080001000682c7dad53c90b15eefdf30bbc087a09de2cf8e67a41156dc112075fbc36fc51fe2487f71256ffb4b9285f4afed81c103178c266adf6bd8c9f9293e0c993c82782d38"], 0x3c}, 0x1, 0x0, 0x0, 0xc010}, 0x4008080) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) statx(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x6000, 0x8, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_GETQUOTA(r2, 0xffffffff80000700, r3, &(0x7f00000002c0)) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0x1, 0x803, 0x0) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x4000000006, 0x0, 0x1}}, 0x40) (async) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) (async) r5 = eventfd(0xff7ffff9) ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, &(0x7f0000000240)=r5) (async) socket$vsock_stream(0x28, 0x1, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) inotify_init() (async) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) openat$vnet(0xffffffffffffff9c, &(0x7f00000038c0), 0x2, 0x0) (async) pselect6(0x40, &(0x7f0000000600)={0x26, 0x0, 0x1000000, 0x40, 0x2, 0x11, 0x0, 0x7}, 0x0, &(0x7f0000000680)={0x7ff, 0x7, 0x9, 0x7, 0x4, 0x0, 0x5, 0x7}, 0x0, 0x0) (async) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000040)={0x1, r5}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/246, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) (async) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000680)) (async) ioctl$VHOST_SET_VRING_ERR(r4, 0x4008af22, &(0x7f00000002c0)={0x1, r5}) (async) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000000)=0x1) 35.65160695s ago: executing program 7 (id=4308): r0 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x46d, 0xc71b, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x70, 0xf, [{{0x9, 0x4, 0x0, 0x0, 0x4, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0xfffa, 0x8, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x2}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x22180, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000240)=ANY=[@ANYBLOB="fe"]) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x7, {[@local=@item_012={0x1, 0x2, 0xa, "d0"}, @global=@item_4={0x3, 0x1, 0x3, "4b24e0d4"}]}}, 0x0}, 0x0) 35.447640144s ago: executing program 8 (id=4310): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) recvfrom$inet(r2, &(0x7f0000000100)=""/188, 0xbc, 0x12020, &(0x7f0000000000)={0x2, 0x4e24, @remote}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000004c0)={r1, 0x3, 0x6, @broadcast}, 0x10) (async, rerun: 64) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r1, 0x1, 0x6, @local}, 0x10) (rerun: 64) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x1, 0x0, 0x2000001, {0x0, 0x0, 0x0, r1, {0x7}, {0xd}, {0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) 35.304507767s ago: executing program 8 (id=4311): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a300000000014000000020a031747d214"], 0x68}, 0x1, 0x0, 0x0, 0x4006000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000006044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x8040) 35.123506261s ago: executing program 8 (id=4312): socket$inet_sctp(0x2, 0x1, 0x84) (async) r0 = socket$inet_sctp(0x2, 0x1, 0x84) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000280)=[{0x6, 0x13, 0x0, 0x7fff7ffc}]}) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000280)=[{0x6, 0x13, 0x0, 0x7fff7ffc}]}) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x21, @local, 0x4e21, 0x3, 'sed\x00', 0x3, 0xffffffc7, 0x400004b}, 0x2c) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x40440, 0x0) fsopen(&(0x7f0000000000)='9p\x00', 0x0) (async) r2 = fsopen(&(0x7f0000000000)='9p\x00', 0x0) unshare(0x8000480) fsconfig$FSCONFIG_SET_PATH_EMPTY(r2, 0x4, &(0x7f0000000040)='9p\x00', &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c) syz_usb_connect$uac1(0x5, 0x0, 0x0, 0x0) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r4 = open(&(0x7f0000000340)='.\x00', 0xbc180, 0x0) mkdirat(r4, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) (async) mkdirat(r4, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r3, &(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r3, &(0x7f0000000540)='./cgroup\x00', 0x2) r5 = socket$nl_generic(0x10, 0x3, 0x10) epoll_create1(0x80000) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x6022dd563157307d}, 0x4000) (async) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x6022dd563157307d}, 0x4000) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r9, &(0x7f0000001300)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) bind$inet6(r9, &(0x7f0000000080)={0xa, 0x4e22, 0x100, @ipv4={'\x00', '\xff\xff', @empty}, 0x3}, 0x1c) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r10, &(0x7f0000000140)={0xa, 0x0, 0x10000, @local, 0xfcf}, 0x1c) (async) bind$inet6(r10, &(0x7f0000000140)={0xa, 0x0, 0x10000, @local, 0xfcf}, 0x1c) bind$inet6(r10, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) (async) bind$inet6(r10, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r9, 0x89) recvmmsg(r8, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000002e40)=[{&(0x7f0000000040)=""/37, 0x25}], 0x1}, 0xd}], 0x1, 0x10000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r5, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100f6938884c6aa00000008000300000000000000000000ce", @ANYRES32=r11, @ANYBLOB], 0x28}, 0x1, 0x6c00}, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000380)={{0x1, 0x1, 0x18, r3, {r0}}, '\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000380)={{0x1, 0x1, 0x18, r3, {r0}}, '\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00'}) 32.528439912s ago: executing program 4 (id=4321): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreqsrc(r0, 0x0, 0x26, &(0x7f0000000000)={@loopback, @broadcast, @remote}, 0xc) socket$inet_udplite(0x2, 0x2, 0x88) (async) setsockopt$inet_mreqsrc(r0, 0x0, 0x26, &(0x7f0000000000)={@loopback, @broadcast, @remote}, 0xc) (async) 32.463793773s ago: executing program 7 (id=4322): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a300000000014000000020a031747d214"], 0x68}, 0x1, 0x0, 0x0, 0x4006000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300011000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x8040) 32.383453696s ago: executing program 4 (id=4323): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x80, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) (async) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0xce8, 0x80803) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0xa, 0x0, 0x1, r2}) (async) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0xa, 0x0, 0x1, r2}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = socket(0x1e, 0x4, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x10080, 0x8, 0x200, 0x0, 0x0, 0x10000000000}, 0x0, &(0x7f0000000100)={0x3ff, 0x0, 0x4000000000000000, 0xe1, 0xfdffffffffffffff, 0x3, 0x359, 0x9}, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) (async) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) unshare(0x36000480) r5 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = syz_usb_connect(0x0, 0x62, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000fb5d7d086d04c308166b0102030109025000010000000009041f0000ff0100000a24010400050201020724070500000508240805040004960d2406010103020001000600060924030601010405050724040501009c"], 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000180)=r5, 0x4) syz_usb_control_io(r6, &(0x7f0000000540)={0x2c, 0x0, &(0x7f0000000140)=ANY=[@ANYRESDEC=0x0], 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_control_io(r6, &(0x7f0000000540)={0x2c, 0x0, &(0x7f0000000140)=ANY=[@ANYRESDEC=0x0], 0x0, 0x0, 0x0}, 0x0) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, 0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af04, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r7 = open(&(0x7f0000000200)='./cgroup\x00', 0x0, 0xe) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) fcntl$notify(r7, 0x402, 0x2) r8 = memfd_create(&(0x7f00000009c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9b5\x9b\x01\xf9t\xbb\x1e\x00\x00\x00\x00\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\\\xb0:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xc7\x85l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~7\x16\x02\x00(v\xe6`\"6\xfcgC\xb5\xf0\x13.zj\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1exQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1.E\b1\xcb\xa2\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x82e, 0x0, &(0x7f0000000100), 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002600)='/proc/bus/input/devices\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f00000001c0)={0x2020}, 0x1906) r4 = socket$xdp(0x2c, 0x3, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000280)={'batadv_slave_0\x00', 0x0}) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f00000001c0)=0x100, 0x4) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r7, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r7, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000400)={'batadv_slave_1\x00', 0x0}) r10 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r10, 0x84, 0x9, &(0x7f0000000000), 0x98) setsockopt$XDP_UMEM_FILL_RING(r7, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r7, &(0x7f0000000100)={0x2c, 0x0, r9}, 0x10) bind$xdp(r4, &(0x7f0000000240)={0x2c, 0x1, r6, 0x1000000, r7}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000000)=0x1, r11, 0x0, 0x0, 0x1}}, 0x20) 32.15305545s ago: executing program 0 (id=4327): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x2003, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x44, 0x2, [@TCA_FQ_CODEL_INTERVAL={0x8, 0x3, 0x6}, @TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0x1}, @TCA_FQ_CODEL_LIMIT={0x0, 0x2, 0x6}, @TCA_FQ_CODEL_CE_THRESHOLD_SELECTOR={0x5, 0xa, 0x1}, @TCA_FQ_CODEL_INTERVAL={0x4, 0x3, 0x3}, @TCA_FQ_CODEL_CE_THRESHOLD_SELECTOR={0x5, 0xa, 0x3}, @TCA_FQ_CODEL_QUANTUM={0x8, 0x6, 0x7}, @TCA_FQ_CODEL_CE_THRESHOLD_SELECTOR={0xfdab, 0xa, 0xaa}]}}]}, 0x78}}, 0x4000010) (async, rerun: 64) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) (rerun: 64) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="b40500000000fd8f71103b0000000000050d000000000000950000000001000002a905d36edcbe9655fa4a777718f34098af599865b7d5f944319eb5c11912ce913d54b1a21b641ab7ba59a852f2c9a06d0b0a3e9b1e80a1d3564e4149e515999be77cb4e321d38a284da9b443a0"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) sendmsg$NL80211_CMD_NEW_KEY(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000180)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010800000000000000000c00000008000300", @ANYRES32=r8, @ANYBLOB="0a00060008021100000100003000508011000a004abee339084eeef16f162471f4000000080007"], 0x58}}, 0x800) sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x81400000}, 0xc, &(0x7f0000000480)={&(0x7f00000006c0)={0x94, r6, 0x4, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x7, 0x21}}}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "7b5661d85a"}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "c16f3861da1ea3e4d55b1975e1"}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d73ce5576cb3e235b38152e83a"}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_SEQ={0x11, 0xa, "b9ce5b95e58d79e9579b7361b2"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_SEQ={0xb, 0xa, "ae08e5aab81a0b"}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}]}, 0x94}, 0x1, 0x0, 0x0, 0x20094}, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000007c0)=ANY=[@ANYBLOB="0623cf75b300adb20238e60b59afd89a7bf78321fc256a5ceb8ce9035e44992e704b3b001f5d556efa920c02de0a2539600feb6b47bee6130a6b10ef73f5004701a865f591b0d8351339950b72d88681bc0d688ceded01d00000", @ANYRES16=r2, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r3, @ANYBLOB="20005a801c0001800f000100022405090b180216306006000600020001110000"], 0x3c}}, 0x0) sendmsg$NL80211_CMD_NOTIFY_RADAR(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2cef7500", @ANYRES16=r2, @ANYBLOB="080029bd7000fddbdf25860000000800220153000000050018010f0000000800270003000000"], 0x2c}, 0x1, 0x0, 0x0, 0x20000090}, 0x4) (async, rerun: 64) r9 = socket$inet(0xa, 0x801, 0x84) (rerun: 64) connect$inet(r9, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async) listen(r9, 0x8) r10 = accept4(r9, 0x0, 0x0, 0x0) sendto$inet(r10, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) (async) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r10, 0x84, 0x22, &(0x7f0000000000)={0x2, 0x0, 0x6, 0xffffffff}, 0x10) sendto$inet6(r10, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0) (async) r11 = socket$alg(0x26, 0x5, 0x0) bind$alg(r11, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r11, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r12 = accept4(r11, 0x0, 0x0, 0x800) sendmmsg$alg(r12, &(0x7f0000000800)=[{0x0, 0x0, &(0x7f0000001e80)=[{&(0x7f0000000540)="7d7a68e25d38566c61856d6817441a9caa9b23557af3d00f974cd91d1b33a9d6e17fd477051346d814913f8a3ef2e1a781a2bbfc8d55dca693d39139f04047784190d93b5301b4abe27c9242396d40a5c2b7789629214281c8e09a6c1f1e0db5d1e74e1f27a89b2c25c2316fcddc9ff2a71eceb3094ba465389e", 0x7a}, {&(0x7f0000000080)="ce2ede98d4bde439a7931c4e260090a647151bacb721146be7ef4494578b05c18fc56c1571aa57d0f79d3c", 0x2b}, {&(0x7f0000000600)="5fec9dec1e9d48e2b3a02e29dcaadb6d242c08b8b6e2a34dd08e48e3d32aa2bf0bd42348d6bf39fd7dac80fedaaab8ff4258ecbc4e025305fab94303f773d083bb47da241fe082c8f8602308cd2f7dc846c93e62a8d53d22fcabce", 0x5b}], 0x3, 0x0, 0x0, 0x2400c0a0}], 0x1, 0x48800) (async) recvmsg(r12, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000ec0)=[{&(0x7f0000000480)=""/5, 0x5}, {&(0x7f0000000b00)=""/249, 0xf9}, {&(0x7f0000000c00)=""/11, 0xb}], 0x3}, 0x0) (async, rerun: 32) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r10, 0x84, 0x7b, &(0x7f0000000240)={0x0, 0x1}, 0x8) (async, rerun: 32) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r10, 0x84, 0x7c, &(0x7f00000003c0)={0x0, 0x2, 0x7a}, 0x8) 32.035530735s ago: executing program 4 (id=4329): r0 = socket$nl_route(0x10, 0x3, 0x0) dup(r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioperm(0x0, 0x82, 0x1e) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005440)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)='+', 0x1}], 0x1}}], 0x1, 0x400c404) fanotify_init(0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003640)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4040005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x4ee59ce4, 0xfffffffffffffffe, 0xfffffffc}, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, 0x0, 0x0) r3 = getpid() syz_pidfd_open(r3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, &(0x7f00000002c0)}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) r6 = openat$mixer(0xffffffffffffff9c, &(0x7f00000016c0), 0x121040, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r6, 0x40086603, &(0x7f0000000040)) unshare(0x62040200) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="28000000100001000000001a0000000000000000", @ANYRES32=0x0, @ANYBLOB="010900000000000008001b00"], 0x28}}, 0x0) 32.035151915s ago: executing program 8 (id=4330): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@newchain={0x34, 0x64, 0x800, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x8, 0xffff}, {0xfff2, 0xfff3}, {0x3, 0x3}}, [@TCA_CHAIN={0x8, 0xb, 0x1}, @TCA_CHAIN={0x8, 0xb, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) socket(0x10, 0x803, 0x0) r0 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000000c0)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00'}) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) io_setup(0xea, &(0x7f00000000c0)=0x0) io_submit(r6, 0x2, &(0x7f0000000300)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x7, 0x3, 0xffffffffffffffff, &(0x7f0000000800)="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", 0x1000, 0x94, 0x0, 0x1}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x7fff, 0xffffffffffffffff, &(0x7f0000000200)="496e429827642acfe3a5889e49d3e47df93a978154113423df6fe693e2167e75c579c86a942845c066a77bb4b2b6", 0x2e, 0x1, 0x0, 0x1}]) io_cancel(r6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x9, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r7, 0x3ba0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000140)={0xc}) 31.447972727s ago: executing program 0 (id=4332): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) rseq(&(0x7f0000000040), 0x20, 0x0, 0x0) rseq(0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000180)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xa843, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) r6 = dup(r5) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000050000f58b04"]) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000200)={0x2c, @loopback, 0x4e22, 0x3, 'sed\x00', 0x9, 0x8, 0x60}, 0x2c) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) umount2(&(0x7f0000000100)='./file0\x00', 0x0) r7 = syz_open_dev$amidi(&(0x7f0000000000), 0x2, 0x88800) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r7, 0x40045731, &(0x7f0000000040)=0x7) syz_usb_connect(0x0, 0x3e, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005a99e620d3139333ed6b0102030109022c00020000006d0904ce0700ef5a1d0009040000018f47e100090500000061281568934dc5cc3e3f1264328900000000080b9a00920360c896f58f63348068d207ad6e2508b38588606638997f7092defd6375b0a6f03be42758562d13fca08b48000a326eb8382458a79748541b18a25dd1015fd7886ecd14d554d6475ce103019a1ce2b9180cbcebbe06f9a955cb447a77db2aee2b4a1fb88cd3362fd252ed6ca8e4e2df56076bc820ea259a926ca842918363ca307312bed5a1"], 0x0) 31.180628042s ago: executing program 6 (id=4333): socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x0, &(0x7f0000000040)}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0xc001, 0x0, 0x9, 0x0, 0xfffffe0000000002, 0xfa10, 0xffffffef}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000001c0), 0x13f, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000400)={0x2020}, 0x2020) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002900)=[{{&(0x7f0000000200)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000000100)=[{&(0x7f0000002440)="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", 0x168}, {&(0x7f0000000300)}], 0x2, 0x0, 0x0, 0x10}}], 0x1, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r2, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, r3, 0x0, 0x97, 0x8000000}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000500)={0x28, 0x6, r3, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000, 0x80000001}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r2, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, r3}) syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x1) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r4, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) 30.073332154s ago: executing program 8 (id=4334): socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0xf, 0xfffffffffffffffe}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r8 = socket$kcm(0x29, 0x5, 0x0) sendmmsg$inet(r8, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000180)="1fe96d", 0x3}], 0x1}}], 0x1, 0x4040000) close_range(r8, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=@newtfilter={0x74, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r7, {0x9, 0xffe0}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x44, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x40, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x3c, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x80000001}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x1000}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x34}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x7}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x9}]}]}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) io_setup(0xffffff3b, &(0x7f0000000080)) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5800000002060300000000000000000000000007050001007a31000000000c00078008001300000000000500050002000000050004000100000012000300686173063a6e65742c706f727400"/88], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) ioctl$KVM_SET_SREGS(r9, 0x4138ae84, &(0x7f0000000100)={{0x7000, 0xdddd1000, 0x0, 0x0, 0x8, 0x8, 0x0, 0x2, 0x0, 0x6, 0x9, 0x10}, {0x8080000, 0x0, 0xc, 0x8, 0x0, 0x0, 0x7, 0x0, 0x7, 0x7, 0x0, 0xff}, {0x3000, 0x5000, 0xc, 0x0, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfc}, {0x100000, 0xd000, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x4}, {0xeeee8000, 0x3000, 0x9, 0x0, 0xff, 0x4, 0x0, 0xe, 0x10, 0x3c}, {0x0, 0xdddd0000, 0xd, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80}, {0x8080000, 0x0, 0xa, 0x6, 0x5, 0x0, 0x3, 0x9}, {0x80a0000, 0xdddd0000, 0x0, 0x0, 0x0, 0x1, 0x0, 0xa, 0x26}, {0x80a0000}, {0xffff1000}, 0xfdfcffdb, 0x0, 0x0, 0x28, 0xb, 0xf801, 0x0, [0x7, 0x0, 0x1]}) close_range(0xffffffffffffffff, r5, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_TRANSLATE(r9, 0xc018ae85, &(0x7f00000000c0)={0x40000}) fsetxattr$trusted_overlay_origin(r10, &(0x7f0000000280), &(0x7f0000000300), 0x2, 0x3) 29.983724512s ago: executing program 6 (id=4335): r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) dup(r0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20041, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) bind$rds(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@textreal={0x8, &(0x7f00000001c0)="0f01cb363e6464670fae880050000066b91406000066b85eacd44e66ba000000000f3066b90d03000066b8d715691966baa1495ef00f300f01370f01cf0f01c266b9be0200000f320f01c40f20c06635000004000f22c0", 0x57}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(0xffffffffffffffff, 0xc01864b0, &(0x7f0000000000)={0x0, 0x0, 0x1, 0x0, 0x3a9e9908}) 29.662332466s ago: executing program 7 (id=4336): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r0, 0x40047211, &(0x7f0000000040)=0x2) (async) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r0, 0x40047211, &(0x7f0000000040)=0x2) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000080), 0x30000, 0x0) fcntl$dupfd(r0, 0x0, r1) (async) r2 = fcntl$dupfd(r0, 0x0, r1) fcntl$notify(r1, 0x402, 0x4) (async) fcntl$notify(r1, 0x402, 0x4) ioctl$KVM_PPC_ALLOCATE_HTAB(r2, 0xc004aea7, &(0x7f00000000c0)=0x4) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r2, 0x6, 0x15, &(0x7f0000000100)=0x4, 0x4) (async) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r2, 0x6, 0x15, &(0x7f0000000100)=0x4, 0x4) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000140)={0x3, 0x4, 0x9}) sendmsg$NFT_BATCH(r2, &(0x7f0000000680)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000640)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x5}, @NFT_OBJECT_TUNNEL=@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x8}, @NFT_OBJECT_CONNLIMIT=@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}}, @NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x201, 0x0, 0x0, {0x3}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x5}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}, @NFTA_RULE_USERDATA={0x4}]}, @NFT_MSG_NEWFLOWTABLE={0xbc, 0x16, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_HOOK={0x5c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'vcan0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_vlan\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xffff}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2f1080}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x9}]}]}, @NFT_MSG_DELSET={0xf8, 0xb, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x6}, @NFTA_SET_USERDATA={0xbe, 0xd, 0x1, 0x0, "74603563f41773d21473eb988f0f2357c4d66ae95c9ba91debdc9c8d16fadeede43737a0a7a570c3f8801dd7f23ef9c34909602db4a79a77123be7b9224d543c0141773680456effbaf7931fcafc3cf4f0abc965cbafbad270d87e2c093def11322c56ed9e0a7d194cae8b7211b6b285a40f74239df2b00d5623863730b68b4d446381179cd101286d79cedd1f1df27368a6a3e4a802a9102bf292bc522005a5a97bb815e97dc2f666b199bcea608a794602a174f29ad70a4869"}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x24}]}, @NFT_MSG_NEWFLOWTABLE={0x2c, 0x16, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWSET={0x58, 0x9, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_SET_EXPRESSIONS={0x30, 0x12, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @nat={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @lookup={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @reject={{0xb}, @void}}]}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x5}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x5}]}, @NFT_MSG_DELTABLE={0x17c, 0x2, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_USERDATA={0xd0, 0x6, "50632bc7d0de2792160312b1985bd2460a9e8a6a4f8943b643444f1a644844eeb5ccc9c4407e18a672a9003836427aa434c8b85e75988841c592d87986fc32c2079dc18c59d023b499b97845cde3a52cb56d39e4bdfb74de53b553a7ee8fc527598848213fdbe86bfeaaab5170d13eb8debf6d0087670782fd4e3aef63544ceaaea3006b5c02c65cc3b6647741565ae417f2b2ec3be36212d63cdf03a89c8a22def88c6bb14c0e9af76ced040fbe4a61fa824ebe4644a906293d04f79f8521c4c1d7b2ea86c5caeec31db94d"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_USERDATA={0x4a, 0x6, "c2c1a6756ae0fcdd447d5a89cd1e28e4393b9faa48f7268dbddad0a899b17c793df37bb9dc841a286266af682573a0f7fea3d90bc5e0b564574fb2d9d208c64f0c8a24461d63"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x44c}, 0x1, 0x0, 0x0, 0x80}, 0x20048049) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000680)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000640)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x5}, @NFT_OBJECT_TUNNEL=@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x8}, @NFT_OBJECT_CONNLIMIT=@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}}, @NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x201, 0x0, 0x0, {0x3}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x5}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}, @NFTA_RULE_USERDATA={0x4}]}, @NFT_MSG_NEWFLOWTABLE={0xbc, 0x16, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_HOOK={0x5c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'vcan0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_vlan\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xffff}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2f1080}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x9}]}]}, @NFT_MSG_DELSET={0xf8, 0xb, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x6}, @NFTA_SET_USERDATA={0xbe, 0xd, 0x1, 0x0, "74603563f41773d21473eb988f0f2357c4d66ae95c9ba91debdc9c8d16fadeede43737a0a7a570c3f8801dd7f23ef9c34909602db4a79a77123be7b9224d543c0141773680456effbaf7931fcafc3cf4f0abc965cbafbad270d87e2c093def11322c56ed9e0a7d194cae8b7211b6b285a40f74239df2b00d5623863730b68b4d446381179cd101286d79cedd1f1df27368a6a3e4a802a9102bf292bc522005a5a97bb815e97dc2f666b199bcea608a794602a174f29ad70a4869"}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x24}]}, @NFT_MSG_NEWFLOWTABLE={0x2c, 0x16, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWSET={0x58, 0x9, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_SET_EXPRESSIONS={0x30, 0x12, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @nat={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @lookup={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @reject={{0xb}, @void}}]}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x5}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x5}]}, @NFT_MSG_DELTABLE={0x17c, 0x2, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_USERDATA={0xd0, 0x6, "50632bc7d0de2792160312b1985bd2460a9e8a6a4f8943b643444f1a644844eeb5ccc9c4407e18a672a9003836427aa434c8b85e75988841c592d87986fc32c2079dc18c59d023b499b97845cde3a52cb56d39e4bdfb74de53b553a7ee8fc527598848213fdbe86bfeaaab5170d13eb8debf6d0087670782fd4e3aef63544ceaaea3006b5c02c65cc3b6647741565ae417f2b2ec3be36212d63cdf03a89c8a22def88c6bb14c0e9af76ced040fbe4a61fa824ebe4644a906293d04f79f8521c4c1d7b2ea86c5caeec31db94d"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_USERDATA={0x4a, 0x6, "c2c1a6756ae0fcdd447d5a89cd1e28e4393b9faa48f7268dbddad0a899b17c793df37bb9dc841a286266af682573a0f7fea3d90bc5e0b564574fb2d9d208c64f0c8a24461d63"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x44c}, 0x1, 0x0, 0x0, 0x80}, 0x20048049) io_uring_setup(0x61f0, &(0x7f00000006c0)={0x0, 0xfb91, 0x4000, 0x1, 0x83}) socket(0x18, 0x4, 0x400) (async) r3 = socket(0x18, 0x4, 0x400) r4 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) fcntl$notify(r4, 0x402, 0x74) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000000780)={0x0, 0x22, "4e7ddaa2219ec7dab2dbd33caa27b549a136dd6b4dd872292623b52e362b105bb38d"}, &(0x7f00000007c0)=0x2a) (async) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000000780)={0x0, 0x22, "4e7ddaa2219ec7dab2dbd33caa27b549a136dd6b4dd872292623b52e362b105bb38d"}, &(0x7f00000007c0)=0x2a) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000800)={r5, 0x5}, 0x8) ioctl$int_out(r0, 0x5460, &(0x7f0000000840)) (async) ioctl$int_out(r0, 0x5460, &(0x7f0000000840)) ioctl$SNDCTL_MIDI_INFO(r2, 0xc074510c, &(0x7f0000000880)={"d164cd35714ed5b49ee9f837df49e1428fd4e8dcfd948757b5e00e086db3", 0x1, 0x6, 0x7, [0xa, 0xd, 0x6, 0x8001, 0xfffffff8, 0xfffffff7, 0x2a11, 0x2, 0xc4, 0x2, 0x0, 0x6, 0x5d, 0x0, 0x7, 0xe7e, 0x3f0d, 0x3]}) sendto$l2tp6(r3, &(0x7f0000000900), 0x0, 0x804, &(0x7f0000000940)={0xa, 0x0, 0x2, @private0, 0x4, 0x2}, 0x20) ioctl$BLKROSET(r2, 0x125d, &(0x7f0000000980)=0x401) (async) ioctl$BLKROSET(r2, 0x125d, &(0x7f0000000980)=0x401) write$P9_RSYMLINK(0xffffffffffffffff, &(0x7f00000009c0)={0x14, 0x11, 0x2, {0x0, 0x3, 0x9}}, 0x14) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000a00)={0x5, 0x0, [{0x320, 0x0, 0x8}, {0x2b6, 0x0, 0xc48a}, {0xa24, 0x0, 0xffffffffffffffff}, {0xb9b, 0x0, 0xff}, {0x22b, 0x0, 0x1}]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r2, 0xc058534f, &(0x7f0000000a80)={{0x3, 0xf9}, 0x1, 0xffffffd6, 0x1aa, {0x1, 0x80}, 0xf7, 0x3}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000bc0)={&(0x7f0000000b80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x800, 0x0, 0xffffffffffffffff}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000c00)={&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000b00)="ca72db410f1287bd816d0d0d9b4923b3a78f28dd968d16421e7f7f21680c9965a640c40cb82be8c059e4fe1d35468be617ec78d7cd1310347d774ba686102c1c01ff0c86ba40b0b8a3454130710253233b33f28de3c5966f1810d64f6e920060f2d82a7f23e130d1cd0ad971cb3e36ff2827e9e6698e138c951545", 0x7b, r6}, 0x68) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000c00)={&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000b00)="ca72db410f1287bd816d0d0d9b4923b3a78f28dd968d16421e7f7f21680c9965a640c40cb82be8c059e4fe1d35468be617ec78d7cd1310347d774ba686102c1c01ff0c86ba40b0b8a3454130710253233b33f28de3c5966f1810d64f6e920060f2d82a7f23e130d1cd0ad971cb3e36ff2827e9e6698e138c951545", 0x7b, r6}, 0x68) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000cc0), r6) sendmsg$NL80211_CMD_START_NAN(r6, &(0x7f0000000dc0)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d00)={0x48, r7, 0x100, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x4, 0x1d}}}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x2}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0xe}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x8}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x3}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x9}]}, 0x48}, 0x1, 0x0, 0x0, 0x4050}, 0x4000000) getsockopt$SO_TIMESTAMP(r6, 0x1, 0x3f, &(0x7f0000000e00), &(0x7f0000000e40)=0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000000e80)="e111bdfb50385560eb1293a1af2a2d04dea40d72bca6d8e2fadebcb0cb894f82c3754ce8bb38c5ef27259ed5592c6690269d7bb18d0d99815db959296fc9bbb388aa2d52f7a9f32cb28e0f5f77c25f90d0d56a26f95ad068bc", 0x59}, {&(0x7f0000000f00)="09aa36fcbcac281b500d8a0183ae9f9ba5556c368085adfd172b9cd2641420b54c0f309a9a304253f58eac2572469f1e3dbb986ab0e392638b047afce8f158ec9a0e94cf47fb8cf769b91cfebb5a43c4bee830fa", 0x54}, {&(0x7f0000000f80)}, {&(0x7f0000000fc0)="fcb1148c4e73949533691ff3cde4090c2611c29a6b3927185bc54335f4007e98dc8032690c7489ffea63e65a7b714a64d21932c124fb748367c6a6120bf4a7eebccb82a835d5e38c8fc74b7dc355afeadc306856b71a57f0195dd6595d648160657162ea1f195cefdbe5a723e53de3bff9fb1d2ed14a94911fbe9ad34b9c564d3925e200501df83b5d385e3077ed7ccc4398aa85a24093fedc4848", 0x9b}, {&(0x7f0000001080)="4be02149505dc83d417785c1045a1af208305aef1d712f6ce32c0579c6ad227a57324b66fb2d8960236684f8598921027112820a0d00a8b1b8a72dbc5c3de1a9cd69e3d97919e4c2d18938555e50", 0x4e}, {&(0x7f0000001100)="43f7f7110c3d8fc3928bcce4ab4c0aec1c1eea25e94c890340814341097486fefcc94b7438cb14cd0c77ac7dd8bee9a669acb7692b22326b540ad77a90bdf0810c32b74988e8f80a1bf9e8bb873a5fe3be8f458c3237e04e9ace9a637e8986068ac0ac750048a94ac4b5d62779369d496046ccf6cbc84d55bcd88441ec3869fd87c95ca295640c7d0354c8530bd200ec4a492cf73c0cc69a1818b34a6d122cbfbd28a196ab2bb1c3002df6fd96a91b3dc71dadd7ec0f7f49bb57be5906994086a1400d5ce4ff78676e7b646511cdd798e01255ceda22fbf532aec9ee1395ddb21c22728c9a02", 0xe6}, {&(0x7f0000001200)="f7aa96d53baf0f0a93dfc3662a177b745bb6668a8fd952c095956789785c85311a082ac97752d3b7acb43c4c61463afa8f48790dc79c17771da198c485f2de6f7602c8ef068cb29acf2e5f94ed1824fda712dcc02bb377528f1ffd08495fee04bfbbba0df349f4fb081aa8a17482069eeb40e3477fa319ffbc4ba0cff7f5c97f95172e2cbd1b21033b", 0x89}], 0x7}, 0x4000011) ioctl$BLKRASET(0xffffffffffffffff, 0x1262, &(0x7f0000001380)=0x100000001) sendmsg$IPVS_CMD_FLUSH(r2, &(0x7f0000001500)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001440)={0x58, 0x0, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x848}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg0\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}]}, 0x58}}, 0x4) 29.526066646s ago: executing program 4 (id=4337): r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r0, 0x400, 0x1) (async, rerun: 64) openat(r0, &(0x7f0000000180)='./file1\x00', 0x103000, 0x8d) (async, rerun: 64) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x42142, 0x40) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) pread64(r1, &(0x7f0000001440)=""/126, 0x7e, 0x41) 29.40765887s ago: executing program 4 (id=4338): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x84, &(0x7f00000000c0)=ANY=[@ANYBLOB="400f01"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000004c0)={0x34, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000ac0)={0x2c, &(0x7f00000008c0)={0x20, 0x7}, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x97, 0xff, 0x82, 0x8, 0x2058, 0x1005, 0xc19b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x8f, 0x0, 0x0, 0xbf, 0x57, 0x5a}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_BYTEORDER_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x80}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000200)={0x40}, 0x0, 0x0, 0x0, 0x0}) 29.407162031s ago: executing program 7 (id=4339): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x101001) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x18d7, &(0x7f0000000040)={0x0, 0x0, 0x2, 0x0, 0x25b}, 0x0, &(0x7f0000ffe000)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x20000000) r3 = socket(0x840000000002, 0x3, 0xfa) getsockname$inet(r3, 0x0, &(0x7f0000002280)) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x0, 0x3, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = syz_open_dev$vim2m(&(0x7f0000000100), 0x80000000, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000200)={0x6, 0x2, 0x4}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0605000004020000010006000000000000", @ANYRES32, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) unshare(0x62040200) syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902"], 0x0) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r6, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r7, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r6, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r7, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r6, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r8, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x334e8b}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r6, 0x3ba0, &(0x7f0000000180)={0x48, 0x7, r8, 0x0, 0x10001, 0x0, 0x1, 0xd6fe2, 0x3d3b4e}) ioctl$IOMMU_IOAS_UNMAP$ALL(r6, 0x3b86, &(0x7f0000000240)={0x18, r7}) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r5, 0x29, 0x41, &(0x7f0000000440)=ANY=[@ANYBLOB="66696c746572000000000000f0ffffff000000000000000000000000000000000400"/104], 0x68) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r9, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r9, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x421, @loopback}], 0x1c) 29.10929045s ago: executing program 0 (id=4340): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@updsa={0x13c, 0x10, 0x1, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@dev, 0x80ff, 0x0, 0x0, 0x0, 0xa, 0x20, 0x0, 0x5c}, {@in=@remote, 0x0, 0x2b}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x0, 0xffffffffffffffff, 0xfffffffffffffffe}, {0x0, 0xfffffffffffffffd, 0x1900000000000000}, {}, 0x0, 0x0, 0xa, 0x2, 0x80}, [@algo_auth_trunc={0x4c, 0x14, {{'sm3\x00'}}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x20004001}, 0x0) 29.07657191s ago: executing program 6 (id=4341): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000b00)=ANY=[@ANYBLOB="b8000000150001000000000000030000e00000020000000000005010000000000000000000000000000000000000000001fe0000000000000a"], 0xb8}, 0x1, 0x0, 0x0, 0x4004800}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r0, &(0x7f0000002d00)=[{{0x0, 0x0, 0x0}, 0x8105}, {{0x0, 0x0, 0x0}, 0x10000}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000380)=""/180, 0xb4}, {&(0x7f0000000440)=""/245, 0xf5}, {&(0x7f0000000580)=""/84, 0x54}, {&(0x7f0000003d40)=""/4097, 0x1001}, {&(0x7f00000016c0)=""/217, 0xd9}], 0x5}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000940)=""/134, 0x86}, {&(0x7f0000000080)=""/245, 0xf5}, {&(0x7f0000005080)=""/4096, 0x1000}, {&(0x7f0000001ac0)=""/4120, 0x1018}], 0x4}, 0xb0}, {{0x0, 0x0, 0x0}, 0x6}], 0x8, 0x20, 0x0) r2 = socket$isdn(0x22, 0x3, 0x4) ioctl$IMCLEAR_L2(r2, 0x80044946, &(0x7f0000000240)=0x8) 28.991705219s ago: executing program 0 (id=4342): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="617b33058a755249dd3d671fccb5978509", 0x11}, {&(0x7f00000001c0)='.', 0x1}, {&(0x7f0000000480)="34e0ff5e", 0x4}], 0x3}, 0x10) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip6_mr_vif\x00') read$FUSE(r2, &(0x7f0000000240)={0x2020}, 0x2020) r3 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0}) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0xb, 0x0, 0x3, 0x2, 0x0, 0xfffffffd, 0x25dfdbff}, 0x10}, 0x1, 0x7}, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000680)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="200111000000def90deeaaed04b4ba4c6cd83cc53197411d0d1c6d2afa1f928e070b88346cd4b728f7b047ef3f8ffca145adb74bec7f37ac4de7d72567b19d811be4c8"], 0x0, 0x0, 0x0, 0x0}) 28.899678358s ago: executing program 6 (id=4343): socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = syz_open_dev$video4linux(0x0, 0x800000000401, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r2, 0xc040564a, &(0x7f0000002580)={0x0, 0x1, 0x1014, 0xffffffffffffffff, 0x0, 0x0}) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, &(0x7f00000000c0)=0x3) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f00000020c0), 0x2, 0x0) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r3, 0x7ab, &(0x7f0000002080)={&(0x7f0000002100)={{@hyper, 0xfffffffe}, {@host, 0x7}, 0x400, "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"}, 0x418}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0x7c81, 0x0) unshare(0x2a020400) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x33}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x3, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) connect$can_bcm(r4, &(0x7f00000000c0)={0x1d, r5}, 0x10) sendmsg$can_bcm(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)={0x1, 0x848, 0x400, {0x0, 0xea60}, {0x77359400}, {}, 0x1, @can={{0x1}, 0x5, 0x3, 0x0, 0x0, "fd8f7d96be27a218"}}, 0x48}}, 0x1) sendmsg$can_bcm(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="01000000010000000300000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0300000ee0010000000400008007020000d467aef0f23fe718e95fdd22e4627d7027c3962f3ed275c596cc82f20b9c678c299934d9b0c721d36c9c6c64"], 0x48}, 0x1, 0x0, 0x0, 0x4001}, 0x4000000) sendmsg$can_bcm(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)={0x2, 0x90, 0x80000, {0x77359400}, {}, {}, 0x1, @can={{}, 0x40, 0x5, 0x0, 0x0, "ce2a4fa7a0aa108b"}}, 0x48}}, 0x40884) openat(0xffffffffffffff9c, 0x0, 0xa000, 0x1da) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/net\x00') close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) write(0xffffffffffffffff, &(0x7f0000000000)="3c00000058001f000307f4f9002304000a04d65f0800010002010002170003800500000099db973b91aa057972", 0x2d) r6 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_MSFILTER(r6, 0x29, 0x30, 0x0, 0x310) 28.348870111s ago: executing program 4 (id=4344): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCMGET(r2, 0x541e, &(0x7f0000000040)) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000080)={0x84, @private=0xa010102, 0x4e23, 0x3, 'wrr\x00', 0x1, 0x7, 0x49}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @broadcast, 0x4e21, 0x3, 'sh\x00', 0x16, 0x81, 0x5}, {@rand_addr=0xac1414aa, 0x4e23, 0x1, 0x0, 0x12d5c, 0x7}}, 0x44) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r4, 0xc0a85320, 0x0) r5 = epoll_create(0x101) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000080)={0x40000014}) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x620540, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_SPACE_INFO(r6, 0x540b, 0x0) socket$inet(0x2, 0x2, 0x0) rt_sigqueueinfo(0x0, 0xe, &(0x7f00000004c0)={0x22, 0x6, 0x7}) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYRESHEX, @ANYRESOCT, @ANYRESDEC=0x0, @ANYRESDEC=0x0]) fsopen(&(0x7f0000000000)='autofs\x00', 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000002100210100000000000000000a00000600000001000000001400110000000000000000905e84"], 0x30}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000000101010200000000000000000a000000"], 0x50}, 0x1, 0x0, 0x0, 0x8000850}, 0x0) 27.868592683s ago: executing program 8 (id=4345): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCMGET(r2, 0x541e, &(0x7f0000000040)) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000080)={0x84, @private=0xa010102, 0x4e23, 0x3, 'wrr\x00', 0x1, 0x7, 0x49}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @broadcast, 0x4e21, 0x3, 'sh\x00', 0x16, 0x81, 0x5}, {@rand_addr=0xac1414aa, 0x4e23, 0x1, 0x0, 0x12d5c, 0x7}}, 0x44) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r4, 0xc0a85320, 0x0) r5 = epoll_create(0x101) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000080)={0x40000014}) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x620540, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_SPACE_INFO(r6, 0x540b, 0x0) socket$inet(0x2, 0x2, 0x0) rt_sigqueueinfo(0x0, 0xe, &(0x7f00000004c0)={0x22, 0x6, 0x7}) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYRESHEX, @ANYRESOCT, @ANYRESDEC=0x0, @ANYRESDEC=0x0]) fsopen(&(0x7f0000000000)='autofs\x00', 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000002100210100000000000000000a00000600000001000000001400110000000000000000905e84"], 0x30}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000000101010200000000000000000a000000"], 0x50}, 0x1, 0x0, 0x0, 0x8000850}, 0x0) 27.756021542s ago: executing program 6 (id=4346): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a300000000014000000020a031747d214"], 0x68}, 0x1, 0x0, 0x0, 0x4006000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300048000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x8040) 27.507422202s ago: executing program 6 (id=4347): prlimit64(0x0, 0xe, &(0x7f0000000180)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) socket(0x22, 0x1, 0x24) r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000000700)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0xfe, 0x0}}, 0x10, &(0x7f0000000180)=[{0x0}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="2f000000000000008400000001000000000000000c0000000000000000000000000000000000000000000000b5dbfb6cc22ed35288c1b734969b1526c51b6835eb6044cc6bd4d7481c033399fbbe774c122f4fba1f4030965394e2b60d64dcd37555c9a41820ec20", @ANYRES32=0x0], 0x30}], 0x1, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x840) socket$netlink(0x10, 0x3, 0x9) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x9, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000), 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000140), 0x4) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4001c00) r2 = socket$inet(0x2, 0x7, 0x4) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) r4 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0) pipe2(&(0x7f0000000140), 0x800) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) sendfile(0xffffffffffffffff, r5, &(0x7f00000000c0)=0xfffffffffffffffa, 0x0) fcntl$setsig(r4, 0xa, 0x21) fcntl$setlease(r4, 0x400, 0x1) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 24.137861313s ago: executing program 0 (id=4348): r0 = socket$nl_route(0x10, 0x3, 0x0) unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom0\x00') (async) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20004}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ENCRYPT={0x5}, @IFLA_MACSEC_PROTECT={0x5, 0x8, 0x40}]}}}]}, 0x44}}, 0x0) (async) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf092000000000006609010000000000060000000b000000180100002020702500000000002020207b9af8ff00000000ad9100000000000037010000f8ffffffb702000008000000b70300000500000056000000060000002c93000000000000b5030000000000009900000076000000b7000000000000009500000000000000"], &(0x7f0000000780)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 22.818114678s ago: executing program 0 (id=4349): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) poll(&(0x7f0000000380)=[{r1, 0x1200}, {r2, 0x1400}, {r2, 0x220}], 0x3, 0x60000000) ioctl$SNDCTL_SEQ_RESET(r2, 0x5100) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="a80000001000ffff25bd7000fddbdf3d00000000", @ANYRES32=0x0, @ANYBLOB="350e0500230000008000128008000100767469007400028008000400e000000208000400ffffffff08000600810000000800030051b40000080002000e00000008000200cad9000008000100", @ANYRES32, @ANYBLOB="080003000300000008000200004000000800030011370000080006000f0000000800020001000000080002000a000000080005000a01010108001f"], 0xa8}, 0x1, 0x0, 0x0, 0x4000000}, 0x4008000) syz_usb_connect(0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f00000001c0)={0x0, 'vlan1\x00', {0x1}, 0x7f}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x218, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000880)=[{{&(0x7f0000000480)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000040)=[{&(0x7f00000008c0)="f738b308fd252cadb94054cbae093365aafa068e51380a1823c308782cb62557211c24658a29c543e48b9b9df131e5afd1013f3c3892df7650595fcbcb79bfb1feb9a88eff2aecc35d2a9d4bd4cf5ecfed985b641241059c37188016da587d7562f6dc5c4270b470294683db604d23731fa2023bbd180efde1d076057f4bafdc1a8d238837395330108b9c17cb4ed132e64db30749d044b72f5e59f01cc1f1e55d3dcd8bc452776cf5693692606ea2b14b80f66bb31afaf93d602f9705cd4e0b4421c6be8354f60e7eb165f1eb8fb745bba2b9e18d04d9d40511c10d9b520b5b1016b18da2a3b263350ffbf5d5b0b4", 0xef}], 0x1, &(0x7f00000007c0)=[@rights={{0x10}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, r7, r5, r4, r3, r6, r5]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [r0, r1, r2, r4]}}], 0x80, 0x2000c005}}], 0x1, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) pread64(0xffffffffffffffff, &(0x7f0000001240)=""/102400, 0x19000, 0x1) ioctl$VIDIOC_S_OUTPUT(0xffffffffffffffff, 0xc004562f, &(0x7f0000000100)=0x3ff) sendmsg(r8, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000540)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x100000000209, 0xa, 0x0, 0x5}, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000400)=[{&(0x7f0000000240)=""/84, 0x54}, {&(0x7f0000000680)=""/198, 0xc6}, {&(0x7f00000003c0)=""/61, 0x3d}, {&(0x7f0000000600)=""/75, 0x4b}, {&(0x7f0000000000)=""/48, 0x30}], &(0x7f0000000040), 0x5}, 0x20) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, 0x0, 0x0) socket(0x2b, 0x1, 0x1) r10 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r10, 0x29, 0x20, &(0x7f0000000180)={@loopback, 0x8000000, 0x0, 0xff, 0x1}, 0x20) 0s ago: executing program 36 (id=4339): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x101001) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x18d7, &(0x7f0000000040)={0x0, 0x0, 0x2, 0x0, 0x25b}, 0x0, &(0x7f0000ffe000)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x20000000) r3 = socket(0x840000000002, 0x3, 0xfa) getsockname$inet(r3, 0x0, &(0x7f0000002280)) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x0, 0x3, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = syz_open_dev$vim2m(&(0x7f0000000100), 0x80000000, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000200)={0x6, 0x2, 0x4}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0605000004020000010006000000000000", @ANYRES32, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) unshare(0x62040200) syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902"], 0x0) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r6, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r7, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r6, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r7, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r6, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r8, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x334e8b}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r6, 0x3ba0, &(0x7f0000000180)={0x48, 0x7, r8, 0x0, 0x10001, 0x0, 0x1, 0xd6fe2, 0x3d3b4e}) ioctl$IOMMU_IOAS_UNMAP$ALL(r6, 0x3b86, &(0x7f0000000240)={0x18, r7}) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r5, 0x29, 0x41, &(0x7f0000000440)=ANY=[@ANYBLOB="66696c746572000000000000f0ffffff000000000000000000000000000000000400"/104], 0x68) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r9, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r9, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x421, @loopback}], 0x1c) kernel console output (not intermixed with test programs): 096 [ 1165.983829][T16652] usb 9-1: device descriptor read/64, error -71 [ 1165.998578][T22019] binder_alloc: 22018: pid 22018 spamming oneway? 2 buffers allocated for a total size of 5120 [ 1166.065255][T22021] FAULT_INJECTION: forcing a failure. [ 1166.065255][T22021] name failslab, interval 1, probability 0, space 0, times 0 [ 1166.080824][T22021] CPU: 1 UID: 0 PID: 22021 Comm: syz.6.3801 Not tainted 6.17.0-rc1-syzkaller-00199-gdfd4b508c8c6 #0 PREEMPT(full) [ 1166.080847][T22021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1166.080856][T22021] Call Trace: [ 1166.080864][T22021] [ 1166.080871][T22021] dump_stack_lvl+0x189/0x250 [ 1166.080893][T22021] ? __pfx____ratelimit+0x10/0x10 [ 1166.080914][T22021] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1166.080931][T22021] ? __pfx__printk+0x10/0x10 [ 1166.080949][T22021] ? read_seqbegin+0x1ac/0x250 [ 1166.080968][T22021] ? __pfx___might_resched+0x10/0x10 [ 1166.080982][T22021] ? lock_acquire+0x5f/0x360 [ 1166.081004][T22021] should_fail_ex+0x414/0x560 [ 1166.081024][T22021] should_failslab+0xa8/0x100 [ 1166.081046][T22021] __kmalloc_noprof+0xcb/0x4f0 [ 1166.081066][T22021] ? tomoyo_encode+0x28b/0x550 [ 1166.081081][T22021] tomoyo_encode+0x28b/0x550 [ 1166.081097][T22021] tomoyo_realpath_from_path+0x58d/0x5d0 [ 1166.081115][T22021] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1166.081144][T22021] tomoyo_path_number_perm+0x1e8/0x5a0 [ 1166.081163][T22021] ? lock_release+0x4b/0x3e0 [ 1166.081184][T22021] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1166.081205][T22021] ? rcu_is_watching+0x15/0xb0 [ 1166.081220][T22021] ? lock_release+0x4b/0x3e0 [ 1166.081239][T22021] ? vfs_write+0x956/0xb30 [ 1166.081260][T22021] ? __mutex_unlock_slowpath+0x1a1/0x760 [ 1166.081288][T22021] ? lock_release+0x4b/0x3e0 [ 1166.081310][T22021] ? __fget_files+0x2a/0x420 [ 1166.081322][T22021] ? __fget_files+0x3a0/0x420 [ 1166.081334][T22021] ? __fget_files+0x2a/0x420 [ 1166.081349][T22021] security_file_ioctl+0xcb/0x2d0 [ 1166.081378][T22021] __se_sys_ioctl+0x47/0x170 [ 1166.081405][T22021] do_syscall_64+0xfa/0x3b0 [ 1166.081435][T22021] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1166.081454][T22021] ? clear_bhb_loop+0x60/0xb0 [ 1166.081470][T22021] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1166.081484][T22021] RIP: 0033:0x7f261238ebe9 [ 1166.081498][T22021] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1166.081511][T22021] RSP: 002b:00007f26132d2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1166.081528][T22021] RAX: ffffffffffffffda RBX: 00007f26125b5fa0 RCX: 00007f261238ebe9 [ 1166.081539][T22021] RDX: 0000200000000740 RSI: 0000000000002285 RDI: 0000000000000003 [ 1166.081548][T22021] RBP: 00007f26132d2090 R08: 0000000000000000 R09: 0000000000000000 [ 1166.081558][T22021] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1166.081567][T22021] R13: 00007f26125b6038 R14: 00007f26125b5fa0 R15: 00007f26126dfa28 [ 1166.081584][T22021] [ 1166.081617][T22021] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1166.116456][T16652] usb usb9-port1: attempt power cycle [ 1166.375275][ T5932] corsair-cpro 0003:1B1C:0C10.004F: item fetching failed at offset 2/5 [ 1166.390392][ T5932] corsair-cpro 0003:1B1C:0C10.004F: probe with driver corsair-cpro failed with error -22 [ 1166.434216][ T5932] tipc: Node number set to 2600303205 [ 1166.571503][T13720] usb 1-1: USB disconnect, device number 30 [ 1166.679512][ T30] audit: type=1326 audit(1755352736.334:1604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22032 comm="syz.7.3804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f337558ebe9 code=0x7ffc0000 [ 1166.704402][T16652] usb 9-1: new high-speed USB device number 105 using dummy_hcd [ 1166.721466][ T30] audit: type=1326 audit(1755352736.334:1605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22032 comm="syz.7.3804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f337558ebe9 code=0x7ffc0000 [ 1166.745546][ T30] audit: type=1326 audit(1755352736.334:1606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22032 comm="syz.7.3804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f337558ebe9 code=0x7ffc0000 [ 1166.747620][T16652] usb 9-1: device descriptor read/8, error -71 [ 1166.769232][ T30] audit: type=1326 audit(1755352736.334:1607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22032 comm="syz.7.3804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f337558ebe9 code=0x7ffc0000 [ 1166.802684][ T30] audit: type=1326 audit(1755352736.334:1608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22032 comm="syz.7.3804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f337558ebe9 code=0x7ffc0000 [ 1166.833111][ T30] audit: type=1326 audit(1755352736.334:1609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22032 comm="syz.7.3804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f337558ebe9 code=0x7ffc0000 [ 1166.889459][ T30] audit: type=1326 audit(1755352736.334:1610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22032 comm="syz.7.3804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f337558ebe9 code=0x7ffc0000 [ 1166.913930][ T30] audit: type=1326 audit(1755352736.334:1611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22032 comm="syz.7.3804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f337558ebe9 code=0x7ffc0000 [ 1166.950609][ T30] audit: type=1326 audit(1755352736.334:1612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22032 comm="syz.7.3804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f337558ebe9 code=0x7ffc0000 [ 1166.973638][ T30] audit: type=1326 audit(1755352736.334:1613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22032 comm="syz.7.3804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f337558ebe9 code=0x7ffc0000 [ 1167.012263][T22036] pim6reg: entered allmulticast mode [ 1167.207089][ T9] usb 5-1: USB disconnect, device number 106 [ 1167.918068][T16652] usb 9-1: new full-speed USB device number 106 using dummy_hcd [ 1167.961735][T16652] usb 9-1: config 2 has an invalid interface number: 174 but max is 0 [ 1167.995424][T16652] usb 9-1: config 2 has no interface number 0 [ 1168.005691][T22056] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1168.035386][T22056] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1168.111594][T16652] usb 9-1: config 2 interface 174 altsetting 0 has an endpoint descriptor with address 0x9E, changing to 0x8E [ 1168.173850][T16652] usb 9-1: config 2 interface 174 altsetting 0 endpoint 0x8E has invalid maxpacket 1023, setting to 64 [ 1168.204272][T16652] usb 9-1: config 2 interface 174 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1168.217832][T16652] usb 9-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=22.7e [ 1168.234650][T16652] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1168.294279][T16652] usb 9-1: Product: syz [ 1168.300553][T16652] usb 9-1: Manufacturer: syz [ 1168.308751][T16652] usb 9-1: SerialNumber: syz [ 1168.335469][T22048] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 1168.597825][T22048] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1168.665339][T22063] fuse: Unknown parameter 'mGN8oad' [ 1168.722188][T22048] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1168.851690][T16652] usb 9-1: probing VID:PID(0424:012C) [ 1168.889386][T16652] usb 9-1: vub300 testing BULK IN EndPoint(0) 8E [ 1168.928424][T22073] netlink: 44 bytes leftover after parsing attributes in process `syz.7.3814'. [ 1168.928558][T16652] usb 9-1: vub300 testing BULK IN EndPoint(1) 82 [ 1169.014004][T22076] netlink: 'syz.6.3816': attribute type 3 has an invalid length. [ 1169.043431][T16652] usb 9-1: Could not find two sets of bulk-in/out endpoint pairs [ 1169.088052][T16652] vub300 9-1:2.174: probe with driver vub300 failed with error -22 [ 1169.315828][T22076] netlink: 'syz.6.3816': attribute type 3 has an invalid length. [ 1169.324007][T22076] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3816'. [ 1169.755505][T16652] usb 9-1: USB disconnect, device number 106 [ 1169.897055][T22085] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1170.026277][T22085] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1170.235495][T22100] tipc: Started in network mode [ 1170.375202][T22100] tipc: Node identity ee687906d45b, cluster identity 4711 [ 1170.382748][T22100] tipc: Enabled bearer , priority 0 [ 1170.393491][T22101] tipc: Enabling of bearer rejected, already enabled [ 1170.441564][T22101] tipc: Disabling bearer [ 1170.645653][ T5932] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 1171.267090][ T5932] usb 1-1: config 0 has no interfaces? [ 1171.277279][ T5932] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1171.286686][ T5932] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1171.362444][ T5932] usb 1-1: Product: syz [ 1171.384479][ T5932] usb 1-1: Manufacturer: syz [ 1171.394287][ T5932] usb 1-1: SerialNumber: syz [ 1171.401722][T22113] random: crng reseeded on system resumption [ 1171.455333][ T5932] usb 1-1: config 0 descriptor?? [ 1171.607161][T22118] netlink: 'syz.6.3828': attribute type 3 has an invalid length. [ 1171.615802][T22118] netlink: 'syz.6.3828': attribute type 3 has an invalid length. [ 1171.681903][T22118] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3828'. [ 1173.120642][ T5924] usb 1-1: USB disconnect, device number 31 [ 1173.634332][ T5924] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 1173.784754][ T5924] usb 1-1: Using ep0 maxpacket: 32 [ 1173.799010][ T5924] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 1173.863663][ T5924] usb 1-1: config 0 has no interface number 0 [ 1173.926286][ T5924] usb 1-1: config 0 interface 12 has no altsetting 0 [ 1173.947675][ T5924] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1174.031497][ T5924] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1174.075734][ T5924] usb 1-1: Product: syz [ 1174.079995][ T5924] usb 1-1: Manufacturer: syz [ 1174.086354][ T5924] usb 1-1: SerialNumber: syz [ 1174.097963][ T5924] usb 1-1: config 0 descriptor?? [ 1175.231289][T22163] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1175.240241][T22163] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1175.558954][T22186] FAULT_INJECTION: forcing a failure. [ 1175.558954][T22186] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1175.600453][T22186] CPU: 0 UID: 0 PID: 22186 Comm: syz.4.3848 Not tainted 6.17.0-rc1-syzkaller-00199-gdfd4b508c8c6 #0 PREEMPT(full) [ 1175.600488][T22186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1175.600502][T22186] Call Trace: [ 1175.600510][T22186] [ 1175.600519][T22186] dump_stack_lvl+0x189/0x250 [ 1175.600549][T22186] ? __pfx____ratelimit+0x10/0x10 [ 1175.600576][T22186] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1175.600599][T22186] ? __pfx__printk+0x10/0x10 [ 1175.600630][T22186] ? rcu_is_watching+0x15/0xb0 [ 1175.600652][T22186] should_fail_ex+0x414/0x560 [ 1175.600680][T22186] _copy_to_user+0x31/0xb0 [ 1175.600704][T22186] video_usercopy+0xeb2/0x14f0 [ 1175.600729][T22186] ? __pfx___video_do_ioctl+0x10/0x10 [ 1175.600749][T22186] ? __pfx_video_usercopy+0x10/0x10 [ 1175.600775][T22186] ? __fget_files+0x2a/0x420 [ 1175.600792][T22186] ? __fget_files+0x3a0/0x420 [ 1175.600809][T22186] v4l2_ioctl+0x18d/0x1e0 [ 1175.600840][T22186] ? __pfx_v4l2_ioctl+0x10/0x10 [ 1175.600870][T22186] __se_sys_ioctl+0xf9/0x170 [ 1175.600895][T22186] do_syscall_64+0xfa/0x3b0 [ 1175.600925][T22186] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1175.600945][T22186] ? clear_bhb_loop+0x60/0xb0 [ 1175.600968][T22186] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1175.600987][T22186] RIP: 0033:0x7fd7eab8ebe9 [ 1175.601005][T22186] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1175.601023][T22186] RSP: 002b:00007fd7eba7b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1175.601044][T22186] RAX: ffffffffffffffda RBX: 00007fd7eadb5fa0 RCX: 00007fd7eab8ebe9 [ 1175.601059][T22186] RDX: 0000200000000240 RSI: 00000000c0405602 RDI: 0000000000000003 [ 1175.601072][T22186] RBP: 00007fd7eba7b090 R08: 0000000000000000 R09: 0000000000000000 [ 1175.601084][T22186] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1175.601096][T22186] R13: 00007fd7eadb6038 R14: 00007fd7eadb5fa0 R15: 00007fd7eaedfa28 [ 1175.601118][T22186] [ 1175.801326][ C0] vkms_vblank_simulate: vblank timer overrun [ 1175.916995][T22199] input: syz0 as /devices/virtual/input/input142 [ 1175.989101][T22199] kvm: pic: non byte write [ 1176.090724][T22205] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3856'. [ 1176.127194][T22207] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1176.139049][T22207] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1176.149138][T22207] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1176.158554][T16652] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 1176.162329][T22207] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1176.304350][T16652] usb 5-1: Using ep0 maxpacket: 32 [ 1176.313538][T16652] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 1176.326870][T16652] usb 5-1: config 0 has no interface number 0 [ 1176.335815][T16652] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1176.345320][T16652] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1176.353389][T16652] usb 5-1: Product: syz [ 1176.362859][T16652] usb 5-1: Manufacturer: syz [ 1176.371386][T16652] usb 5-1: SerialNumber: syz [ 1176.380737][T16652] usb 5-1: config 0 descriptor?? [ 1176.388721][T16652] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1176.598487][T16652] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1176.649247][T16652] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1176.659954][ T5924] f81534 1-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 1176.668901][ T5924] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 1176.686618][ T5924] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1176.745182][ T5924] f81534 1-1:0.12: probe with driver f81534 failed with error -71 [ 1176.805955][T22197] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1176.823197][ T5924] usb 1-1: USB disconnect, device number 32 [ 1176.849575][T22197] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1177.080843][ C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1177.081649][ T5953] usb 5-1: USB disconnect, device number 107 [ 1177.130835][ T5953] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1177.306739][ T5953] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1177.350511][ T5953] quatech2 5-1:0.51: device disconnected [ 1177.584508][T22231] netlink: 356 bytes leftover after parsing attributes in process `syz.0.3860'. [ 1177.593623][T22231] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3860'. [ 1178.114432][T22238] netlink: 228 bytes leftover after parsing attributes in process `syz.4.3861'. [ 1178.152323][T22237] kvm: kvm [22236]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x186) = 0x4000 [ 1178.161823][T22238] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1178.168261][T22237] kvm: kvm [22236]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0xbe706111 [ 1178.220422][T22237] kvm: kvm [22236]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0xbe706111 [ 1178.399416][T22252] netlink: 'syz.8.3865': attribute type 1 has an invalid length. [ 1178.408732][T22250] netlink: 'syz.8.3865': attribute type 1 has an invalid length. [ 1178.618694][T22266] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1178.680582][T22269] netlink: 'syz.0.3870': attribute type 3 has an invalid length. [ 1178.738443][T22269] netlink: 'syz.0.3870': attribute type 3 has an invalid length. [ 1178.762286][T22269] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3870'. [ 1178.950449][T22275] syz.6.3871 (22275): drop_caches: 2 [ 1178.983094][T22275] syz.6.3871 (22275): drop_caches: 2 [ 1179.003927][T22275] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1179.015628][T22275] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1179.474177][ T5953] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 1179.640307][ T5953] usb 1-1: Using ep0 maxpacket: 32 [ 1179.651037][ T5953] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 1179.663063][ T5953] usb 1-1: config 0 has no interface number 0 [ 1179.676891][ T5953] usb 1-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1179.688866][ T5953] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1179.701690][ T5953] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1179.710507][ T5953] usb 1-1: Product: syz [ 1179.717301][ T5953] usb 1-1: Manufacturer: syz [ 1179.722068][ T5953] usb 1-1: SerialNumber: syz [ 1179.752900][ T5953] usb 1-1: config 0 descriptor?? [ 1179.763695][ T5953] em28xx 1-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1179.783991][ T5953] em28xx 1-1:0.132: Video interface 132 found: [ 1180.182281][ T5953] em28xx 1-1:0.132: unknown em28xx chip ID (0) [ 1180.962928][T22290] netlink: 'syz.0.3876': attribute type 21 has an invalid length. [ 1180.971019][T22290] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3876'. [ 1181.560150][T22315] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 1181.566751][T22315] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1181.633859][T22315] vhci_hcd vhci_hcd.0: Device attached [ 1181.712132][T22315] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(5) [ 1181.718725][T22315] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1181.754515][T22315] vhci_hcd vhci_hcd.0: Device attached [ 1181.840733][ T5953] em28xx 1-1:0.132: failed to trigger write to i2c address 0xa0 (error=-5) [ 1181.855689][T22322] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3873'. [ 1181.865072][ T5953] em28xx 1-1:0.132: failed to read eeprom (err=-5) [ 1181.872744][T22322] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1181.886946][ T5953] em28xx 1-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-5] [ 1181.924511][T22322] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1181.936808][T22316] vhci_hcd: connection closed [ 1181.936991][T22320] vhci_hcd: connection closed [ 1181.941960][T13642] vhci_hcd: stop threads [ 1181.951831][T13642] vhci_hcd: release socket [ 1181.962306][T13642] vhci_hcd: disconnect device [ 1181.973430][T22322] random: crng reseeded on system resumption [ 1181.988080][ T5953] em28xx 1-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1182.000593][T13642] vhci_hcd: stop threads [ 1182.007714][ T5953] em28xx 1-1:0.132: analog set to bulk mode. [ 1182.019542][T13642] vhci_hcd: release socket [ 1182.028004][ T24] em28xx 1-1:0.132: Registering V4L2 extension [ 1182.039130][T13642] vhci_hcd: disconnect device [ 1182.157952][ T24] em28xx 1-1:0.132: failed to trigger read from i2c address 0x4a (error=-5) [ 1182.178130][ T24] em28xx 1-1:0.132: failed to trigger read from i2c address 0x48 (error=-5) [ 1182.199356][ T24] em28xx 1-1:0.132: failed to trigger read from i2c address 0x42 (error=-5) [ 1182.209134][ T24] em28xx 1-1:0.132: failed to trigger read from i2c address 0x40 (error=-5) [ 1182.247597][ T5932] usb 1-1: USB disconnect, device number 33 [ 1182.256762][ T5932] em28xx 1-1:0.132: Disconnecting em28xx [ 1182.402730][ T24] em28xx 1-1:0.132: Config register raw data: 0xffffffed [ 1182.422145][ T24] em28xx 1-1:0.132: AC97 chip type couldn't be determined [ 1182.430778][ T24] em28xx 1-1:0.132: No AC97 audio processor [ 1182.479097][ T24] usb 1-1: Decoder not found [ 1182.492108][ T24] em28xx 1-1:0.132: failed to create media graph [ 1182.697060][ T24] em28xx 1-1:0.132: V4L2 device video103 deregistered [ 1182.740717][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1182.750625][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1182.810196][ T24] em28xx 1-1:0.132: Remote control support is not available for this card. [ 1182.843967][ T5932] em28xx 1-1:0.132: Closing input extension [ 1182.885764][ T5932] em28xx 1-1:0.132: Freeing device [ 1183.027856][T22349] netlink: 13 bytes leftover after parsing attributes in process `syz.8.3889'. [ 1183.074763][T22349] netlink: 'syz.8.3889': attribute type 3 has an invalid length. [ 1183.112782][T22352] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3889'. [ 1183.165673][T22349] netlink: 2 bytes leftover after parsing attributes in process `syz.8.3889'. [ 1183.446034][ T5932] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 1183.559862][T22352] bridge0: port 2(vlan0) entered blocking state [ 1183.657663][T22352] bridge0: port 2(vlan0) entered disabled state [ 1183.670810][T22352] vlan0: entered allmulticast mode [ 1183.694001][T22352] bridge0: entered allmulticast mode [ 1183.704714][T22360] ptrace attach of "./syz-executor exec"[14035] was attempted by "./syz-executor exec"[22360] [ 1183.715289][ T5932] usb 1-1: Using ep0 maxpacket: 16 [ 1183.742299][T22341] ALSA: seq fatal error: cannot create timer (-22) [ 1183.758727][T22352] vlan0: left allmulticast mode [ 1183.844411][T22352] bridge0: left allmulticast mode [ 1184.786625][T22374] loop2: detected capacity change from 0 to 7 [ 1184.796205][T22374] Dev loop2: unable to read RDB block 7 [ 1184.801879][T22374] loop2: unable to read partition table [ 1184.810828][T22374] loop2: partition table beyond EOD, truncated [ 1184.824775][T22374] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 1184.884824][T22375] IPVS: set_ctl: invalid protocol: 94 172.20.20.187:20004 [ 1184.913987][T22377] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1185.157773][T22379] binder_alloc: 22378: pid 22378 spamming oneway? 1 buffers allocated for a total size of 4096 [ 1185.220357][T22380] binder_alloc: 22378: pid 22378 spamming oneway? 2 buffers allocated for a total size of 5120 [ 1185.426829][T22385] binder_alloc: 22384: pid 22384 spamming oneway? 1 buffers allocated for a total size of 4096 [ 1185.489518][T22388] binder_alloc: 22384: pid 22384 spamming oneway? 2 buffers allocated for a total size of 5120 [ 1185.575991][T22391] netlink: 'syz.8.3901': attribute type 13 has an invalid length. [ 1185.627558][T22391] gretap0: refused to change device tx_queue_len [ 1185.639811][T22391] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1185.668636][T22395] openvswitch: netlink: Duplicate or invalid key (type 0). [ 1185.710286][T22395] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1185.735001][ T5932] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1185.756718][T20293] IPVS: sh: UDP 0.0.0.0:0 - no destination available [ 1185.787723][ T5932] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 1185.806860][ T5932] usb 1-1: can't read configurations, error -71 [ 1185.828889][T22397] tipc: Enabled bearer , priority 0 [ 1185.858774][T22397] syzkaller0: entered promiscuous mode [ 1185.869447][T22397] syzkaller0: entered allmulticast mode [ 1185.882880][T22397] tipc: Resetting bearer [ 1185.892584][T22396] tipc: Resetting bearer [ 1185.905343][T22396] tipc: Disabling bearer [ 1186.066907][T22413] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1186.095712][T22413] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1186.317337][T22415] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1186.400796][T22415] team0: Port device batadv1 added [ 1186.672596][T22427] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 1186.933962][T22413] could not allocate digest TFM handle $ [ 1187.758416][T22434] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1187.788144][T22434] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1187.912915][T22436] binder_alloc: 22435: pid 22435 spamming oneway? 1 buffers allocated for a total size of 4096 [ 1188.018467][T22437] binder_alloc: 22435: pid 22435 spamming oneway? 2 buffers allocated for a total size of 5120 [ 1188.570947][T22444] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1188.580110][T22444] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1188.711755][ T24] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 1189.144766][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 1189.268265][ T30] kauditd_printk_skb: 33 callbacks suppressed [ 1189.268297][ T30] audit: type=1326 audit(1755352758.894:1647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22452 comm="syz.6.3918" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f261238ebe9 code=0x3ffc0000 [ 1189.694307][ C0] IPVS: sh: UDP 0.0.0.0:0 - no destination available [ 1189.730268][T22460] tipc: Enabling of bearer rejected, failed to enable media [ 1190.219781][T22468] binder_alloc: 22467: pid 22467 spamming oneway? 1 buffers allocated for a total size of 4096 [ 1190.247445][T22468] binder_alloc: 22467: pid 22467 spamming oneway? 2 buffers allocated for a total size of 5120 [ 1190.588388][ T30] audit: type=1326 audit(1755352760.244:1648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22475 comm="syz.8.3928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f6b18ebe9 code=0x7ffc0000 [ 1190.634065][ T30] audit: type=1326 audit(1755352760.244:1649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22475 comm="syz.8.3928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0f6b18ebe9 code=0x7ffc0000 [ 1190.668830][ T30] audit: type=1326 audit(1755352760.264:1650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22475 comm="syz.8.3928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f6b18ebe9 code=0x7ffc0000 [ 1190.726959][ T30] audit: type=1326 audit(1755352760.264:1651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22475 comm="syz.8.3928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f0f6b18ebe9 code=0x7ffc0000 [ 1190.749462][ C1] vkms_vblank_simulate: vblank timer overrun [ 1190.767367][ T30] audit: type=1326 audit(1755352760.274:1652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22475 comm="syz.8.3928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f6b18ebe9 code=0x7ffc0000 [ 1190.795910][ T30] audit: type=1326 audit(1755352760.274:1653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22475 comm="syz.8.3928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f0f6b18ebe9 code=0x7ffc0000 [ 1190.824880][ T30] audit: type=1326 audit(1755352760.284:1654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22475 comm="syz.8.3928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f6b18ebe9 code=0x7ffc0000 [ 1190.858158][T22484] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3929'. [ 1190.895970][ T30] audit: type=1326 audit(1755352760.284:1655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22475 comm="syz.8.3928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f6b18ebe9 code=0x7ffc0000 [ 1190.918470][ C1] vkms_vblank_simulate: vblank timer overrun [ 1190.929832][ T30] audit: type=1326 audit(1755352760.284:1656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22475 comm="syz.8.3928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7f0f6b18ebe9 code=0x7ffc0000 [ 1190.952383][ C1] vkms_vblank_simulate: vblank timer overrun [ 1190.958961][ T5953] usb 9-1: new high-speed USB device number 107 using dummy_hcd [ 1191.143606][ T5953] usb 9-1: config 0 has an invalid interface number: 95 but max is 0 [ 1191.157677][ T5953] usb 9-1: config 0 has no interface number 0 [ 1191.173573][ T5953] usb 9-1: config 0 interface 95 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 1191.208059][ T5953] usb 9-1: New USB device found, idVendor=7725, idProduct=b0a8, bcdDevice= 7.46 [ 1191.237749][ T5953] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1191.263407][ T24] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1191.307680][ T5953] usb 9-1: Product: syz [ 1191.316762][ T24] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 1191.330990][ T5953] usb 9-1: Manufacturer: syz [ 1191.342028][ T5953] usb 9-1: SerialNumber: syz [ 1191.347946][ T24] usb 1-1: can't read configurations, error -71 [ 1191.369176][ T5953] usb 9-1: config 0 descriptor?? [ 1191.381976][T22479] raw-gadget.3 gadget.8: fail, usb_ep_enable returned -22 [ 1191.714391][ T24] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 1191.783850][T22491] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1191.794446][T22491] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1191.873488][T22491] netlink: 'syz.6.3932': attribute type 21 has an invalid length. [ 1191.881920][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 1191.898220][ T24] usb 1-1: config 2 has an invalid interface number: 222 but max is 3 [ 1191.936713][ T24] usb 1-1: config 2 has an invalid interface number: 42 but max is 3 [ 1191.947419][ T24] usb 1-1: config 2 contains an unexpected descriptor of type 0x1, skipping [ 1191.958854][ T24] usb 1-1: config 2 has an invalid interface number: 124 but max is 3 [ 1191.970642][ T24] usb 1-1: config 2 has an invalid interface number: 5 but max is 3 [ 1191.983345][T22493] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3933'. [ 1191.992560][ T24] usb 1-1: config 2 has no interface number 0 [ 1191.992608][ T24] usb 1-1: config 2 has no interface number 1 [ 1191.992625][ T24] usb 1-1: config 2 has no interface number 2 [ 1191.992643][ T24] usb 1-1: config 2 has no interface number 3 [ 1191.992762][ T24] usb 1-1: config 2 interface 222 altsetting 252 has a duplicate endpoint with address 0x9, skipping [ 1192.052813][ T24] usb 1-1: config 2 interface 222 altsetting 252 has a duplicate endpoint with address 0x1, skipping [ 1192.065055][ T24] usb 1-1: config 2 interface 42 altsetting 2 endpoint 0x3 has an invalid bInterval 102, changing to 10 [ 1192.077770][ T24] usb 1-1: config 2 interface 42 altsetting 2 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 1192.089788][ T24] usb 1-1: config 2 interface 42 altsetting 2 has a duplicate endpoint with address 0x3, skipping [ 1192.168458][ T24] usb 1-1: config 2 interface 42 altsetting 2 has a duplicate endpoint with address 0x4, skipping [ 1192.206554][T22497] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1192.217601][ T24] usb 1-1: config 2 interface 42 altsetting 2 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 1192.230032][T22497] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1192.240191][ T24] usb 1-1: config 2 interface 42 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 1192.258140][ T24] usb 1-1: config 2 interface 42 altsetting 2 has a duplicate endpoint with address 0x1, skipping [ 1192.275553][ T24] usb 1-1: config 2 interface 42 altsetting 2 has an endpoint descriptor with address 0x4B, changing to 0xB [ 1192.288765][ T24] usb 1-1: config 2 interface 42 altsetting 2 endpoint 0xB has an invalid bInterval 202, changing to 11 [ 1192.301659][ T24] usb 1-1: config 2 interface 42 altsetting 2 endpoint 0xB has invalid maxpacket 17291, setting to 1024 [ 1192.340254][ T24] usb 1-1: config 2 interface 42 altsetting 2 has 11 endpoint descriptors, different from the interface descriptor's value: 10 [ 1192.363713][ T24] usb 1-1: config 2 interface 124 altsetting 248 has a duplicate endpoint with address 0x3, skipping [ 1192.377189][ T24] usb 1-1: config 2 interface 124 altsetting 248 has a duplicate endpoint with address 0xA, skipping [ 1192.418532][ T24] usb 1-1: config 2 interface 124 altsetting 248 has a duplicate endpoint with address 0x9, skipping [ 1192.456037][ T24] usb 1-1: config 2 interface 124 altsetting 248 has a duplicate endpoint with address 0x8, skipping [ 1192.597782][ T24] usb 1-1: config 2 interface 124 altsetting 248 has a duplicate endpoint with address 0x5, skipping [ 1192.612710][ T24] usb 1-1: config 2 interface 124 altsetting 248 has a duplicate endpoint with address 0xD, skipping [ 1192.624755][ T24] usb 1-1: config 2 interface 124 altsetting 248 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 1192.647654][ T24] usb 1-1: config 2 interface 124 altsetting 248 endpoint 0x83 has invalid maxpacket 17217, setting to 1024 [ 1192.669472][ T24] usb 1-1: config 2 interface 124 altsetting 248 bulk endpoint 0x83 has invalid maxpacket 1024 [ 1192.694283][ T24] usb 1-1: config 2 interface 124 altsetting 248 has an invalid descriptor for endpoint zero, skipping [ 1192.706466][ T24] usb 1-1: config 2 interface 124 altsetting 248 has a duplicate endpoint with address 0x4, skipping [ 1192.718288][ T24] usb 1-1: config 2 interface 124 altsetting 248 has a duplicate endpoint with address 0x4, skipping [ 1192.738264][ T24] usb 1-1: config 2 interface 124 altsetting 248 has a duplicate endpoint with address 0x6, skipping [ 1192.749817][ T24] usb 1-1: config 2 interface 124 altsetting 248 has 14 endpoint descriptors, different from the interface descriptor's value: 13 [ 1192.766805][ T24] usb 1-1: config 2 interface 5 altsetting 7 has a duplicate endpoint with address 0xA, skipping [ 1192.778749][ T24] usb 1-1: config 2 interface 222 has no altsetting 0 [ 1192.786889][ T24] usb 1-1: config 2 interface 42 has no altsetting 0 [ 1192.794533][ T24] usb 1-1: config 2 interface 124 has no altsetting 0 [ 1192.802220][ T24] usb 1-1: config 2 interface 5 has no altsetting 0 [ 1192.818501][ T24] usb 1-1: New USB device found, idVendor=17a8, idProduct=0102, bcdDevice=33.b2 [ 1192.914288][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1192.923325][ T24] usb 1-1: Product: syz [ 1192.932518][ T24] usb 1-1: Manufacturer: syz [ 1192.943837][ T24] usb 1-1: SerialNumber: syz [ 1193.657883][ T5953] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 1193.665100][ T5953] usb 9-1: MIDIStreaming interface descriptor not found [ 1193.764057][ T5953] usb 9-1: USB disconnect, device number 107 [ 1193.814207][T14562] udevd[14562]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.95/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1193.981939][T22519] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3939'. [ 1194.598389][ T30] kauditd_printk_skb: 45 callbacks suppressed [ 1194.598409][ T30] audit: type=1326 audit(1755352764.254:1702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22489 comm="syz.6.3932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f261238ebe9 code=0x7fc00000 [ 1194.870390][ T24] cp210x 1-1:2.222: cp210x converter detected [ 1194.891333][ T24] cp210x 1-1:2.222: failed to get vendor val 0x370b size 1: -71 [ 1194.899331][ T5932] usb 9-1: new high-speed USB device number 108 using dummy_hcd [ 1194.924233][ T24] cp210x 1-1:2.222: querying part number failed [ 1195.045288][ T24] usb 1-1: cp210x converter now attached to ttyUSB0 [ 1195.060778][T22536] sctp: [Deprecated]: syz.4.3943 (pid 22536) Use of int in maxseg socket option. [ 1195.060778][T22536] Use struct sctp_assoc_value instead [ 1195.076123][T22534] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3944'. [ 1195.104631][ T5932] usb 9-1: Using ep0 maxpacket: 16 [ 1195.128973][ T24] cp210x 1-1:2.42: cp210x converter detected [ 1195.137741][T22534] veth1_macvtap: left promiscuous mode [ 1195.151630][ T24] cp210x 1-1:2.42: failed to get vendor val 0x370b size 1: -71 [ 1195.176807][ T24] cp210x 1-1:2.42: querying part number failed [ 1195.185853][ T24] usb 1-1: cp210x converter now attached to ttyUSB1 [ 1195.243204][ T24] cp210x 1-1:2.124: cp210x converter detected [ 1195.250116][ T24] cp210x 1-1:2.124: failed to get vendor val 0x370b size 1: -71 [ 1195.321166][ T24] cp210x 1-1:2.124: querying part number failed [ 1195.338810][T22544] binder_alloc: 22543: pid 22543 spamming oneway? 1 buffers allocated for a total size of 4096 [ 1195.340905][ T24] usb 1-1: cp210x converter now attached to ttyUSB2 [ 1195.461871][ T24] cp210x 1-1:2.5: cp210x converter detected [ 1195.515155][T22549] binder_alloc: 22543: pid 22543 spamming oneway? 2 buffers allocated for a total size of 5120 [ 1195.555851][ T24] cp210x 1-1:2.5: failed to get vendor val 0x370b size 1: -71 [ 1195.577566][ T24] cp210x 1-1:2.5: querying part number failed [ 1195.745049][ T24] usb 1-1: cp210x converter now attached to ttyUSB3 [ 1195.789346][ T24] usb 1-1: USB disconnect, device number 37 [ 1196.008512][ T24] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1196.087798][ T24] cp210x 1-1:2.222: device disconnected [ 1196.294698][T22565] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1196.306900][T22565] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1196.344754][T22565] macsec3: entered promiscuous mode [ 1196.353287][ T24] cp210x ttyUSB1: cp210x converter now disconnected from ttyUSB1 [ 1196.358438][T22565] mac80211_hwsim hwsim19 wlan1: entered promiscuous mode [ 1196.401314][T22565] mac80211_hwsim hwsim19 wlan1: left promiscuous mode [ 1196.443939][ T24] cp210x 1-1:2.42: device disconnected [ 1196.469803][ T24] cp210x ttyUSB2: cp210x converter now disconnected from ttyUSB2 [ 1196.676519][ T24] cp210x 1-1:2.124: device disconnected [ 1196.822292][ T24] cp210x ttyUSB3: cp210x converter now disconnected from ttyUSB3 [ 1196.947039][ T24] cp210x 1-1:2.5: device disconnected [ 1197.315677][T22577] netlink: 44 bytes leftover after parsing attributes in process `syz.6.3956'. [ 1197.444247][ T24] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 1197.649040][ T24] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1197.700358][ T24] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1197.713569][ T5932] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1197.779802][ T5932] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 1197.833487][ T24] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1197.842976][ T5932] usb 9-1: can't read configurations, error -71 [ 1197.874386][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1197.955719][T22586] fuse: Unknown parameter 'mGN8oad' [ 1197.969750][T22573] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1198.031610][ T24] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1198.095075][ C0] IPVS: sh: UDP 0.0.0.0:0 - no destination available [ 1198.527186][T22594] block device autoloading is deprecated and will be removed. [ 1198.542710][T22594] syz.6.3962: attempt to access beyond end of device [ 1198.542710][T22594] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1200.471051][ T5931] usb 1-1: USB disconnect, device number 38 [ 1200.527036][T22618] netlink: 44 bytes leftover after parsing attributes in process `syz.7.3968'. [ 1200.699340][T22624] FAULT_INJECTION: forcing a failure. [ 1200.699340][T22624] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1200.759723][T22629] trusted_key: encrypted_key: insufficient parameters specified [ 1200.769505][T22624] CPU: 0 UID: 0 PID: 22624 Comm: syz.7.3971 Not tainted 6.17.0-rc1-syzkaller-00199-gdfd4b508c8c6 #0 PREEMPT(full) [ 1200.769535][T22624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1200.769548][T22624] Call Trace: [ 1200.769556][T22624] [ 1200.769565][T22624] dump_stack_lvl+0x189/0x250 [ 1200.769596][T22624] ? __pfx____ratelimit+0x10/0x10 [ 1200.769623][T22624] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1200.769648][T22624] ? __pfx__printk+0x10/0x10 [ 1200.769679][T22624] ? rcu_is_watching+0x15/0xb0 [ 1200.769701][T22624] should_fail_ex+0x414/0x560 [ 1200.769730][T22624] _copy_to_user+0x31/0xb0 [ 1200.769756][T22624] drm_ioctl+0x6a4/0xb10 [ 1200.769786][T22624] ? __pfx_drm_mode_getconnector+0x10/0x10 [ 1200.769817][T22624] ? __pfx_drm_ioctl+0x10/0x10 [ 1200.769850][T22624] ? __fget_files+0x2a/0x420 [ 1200.769870][T22624] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1200.769896][T22624] ? __pfx_drm_ioctl+0x10/0x10 [ 1200.769931][T22624] __se_sys_ioctl+0xf9/0x170 [ 1200.769958][T22624] do_syscall_64+0xfa/0x3b0 [ 1200.769987][T22624] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1200.770007][T22624] ? clear_bhb_loop+0x60/0xb0 [ 1200.770031][T22624] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1200.770050][T22624] RIP: 0033:0x7f337558ebe9 [ 1200.770068][T22624] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1200.770087][T22624] RSP: 002b:00007f33737f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1200.770109][T22624] RAX: ffffffffffffffda RBX: 00007f33757b5fa0 RCX: 00007f337558ebe9 [ 1200.770123][T22624] RDX: 0000200000000600 RSI: 00000000c05064a7 RDI: 0000000000000004 [ 1200.770136][T22624] RBP: 00007f33737f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1200.770149][T22624] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1200.770164][T22624] R13: 00007f33757b6038 R14: 00007f33757b5fa0 R15: 00007f33758dfa28 [ 1200.770187][T22624] [ 1201.174333][ T5931] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 1201.193148][T22647] netlink: 'syz.4.3978': attribute type 3 has an invalid length. [ 1201.248479][T22647] netlink: 'syz.4.3978': attribute type 3 has an invalid length. [ 1201.257157][T22647] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3978'. [ 1201.336160][ T5931] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1201.350717][ T5931] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1201.369238][T22653] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3979'. [ 1201.371287][ T5931] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1201.388746][ T5932] usb 9-1: new high-speed USB device number 110 using dummy_hcd [ 1201.438767][ T5931] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1201.452837][ T5931] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1201.472789][ T5931] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1201.502671][ T5931] usb 1-1: config 0 descriptor?? [ 1201.574568][ T5932] usb 9-1: Using ep0 maxpacket: 32 [ 1201.581795][ T5932] usb 9-1: config 0 has an invalid interface number: 51 but max is 0 [ 1201.615768][ T5932] usb 9-1: config 0 has no interface number 0 [ 1201.788009][ T5932] usb 9-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1201.808072][ T5932] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1201.831311][ T5932] usb 9-1: Product: syz [ 1201.849711][T22664] input: syz0 as /devices/virtual/input/input146 [ 1201.864445][T22664] input: failed to attach handler leds to device input146, error: -6 [ 1201.916711][T22664] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1201.937687][ T5932] usb 9-1: Manufacturer: syz [ 1201.942355][ T5932] usb 9-1: SerialNumber: syz [ 1201.944648][T22664] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1201.979425][ T5931] plantronics 0003:047F:FFFF.0050: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 1202.058120][ T5932] usb 9-1: config 0 descriptor?? [ 1202.104431][ T5932] quatech2 9-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1202.160727][T22670] fuse: Bad value for 'user_id' [ 1202.185401][T22670] fuse: Bad value for 'user_id' [ 1202.280776][ T5932] usb 9-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1202.443342][ T5932] usb 9-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1202.671917][ C1] usb 9-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1202.679821][ T5932] usb 9-1: USB disconnect, device number 110 [ 1202.698263][ T5932] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1202.733760][ T5932] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1202.756823][ T5932] quatech2 9-1:0.51: device disconnected [ 1202.838474][T22680] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3985'. [ 1202.977246][T22688] FAULT_INJECTION: forcing a failure. [ 1202.977246][T22688] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1203.023399][T22688] CPU: 0 UID: 0 PID: 22688 Comm: syz.4.3987 Not tainted 6.17.0-rc1-syzkaller-00199-gdfd4b508c8c6 #0 PREEMPT(full) [ 1203.023431][T22688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1203.023444][T22688] Call Trace: [ 1203.023452][T22688] [ 1203.023461][T22688] dump_stack_lvl+0x189/0x250 [ 1203.023489][T22688] ? __pfx____ratelimit+0x10/0x10 [ 1203.023518][T22688] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1203.023542][T22688] ? __pfx__printk+0x10/0x10 [ 1203.023574][T22688] ? rcu_is_watching+0x15/0xb0 [ 1203.023595][T22688] should_fail_ex+0x414/0x560 [ 1203.023625][T22688] _copy_to_user+0x31/0xb0 [ 1203.023649][T22688] simple_read_from_buffer+0xe1/0x170 [ 1203.023681][T22688] proc_fail_nth_read+0x1b3/0x220 [ 1203.023713][T22688] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1203.023737][T22688] ? rw_verify_area+0x2a6/0x4d0 [ 1203.023762][T22688] ? lock_release+0x4b/0x3e0 [ 1203.023792][T22688] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1203.023816][T22688] vfs_read+0x1fd/0xa30 [ 1203.023840][T22688] ? fdget_pos+0x247/0x320 [ 1203.023861][T22688] ? __pfx___mutex_lock+0x10/0x10 [ 1203.023891][T22688] ? __pfx_vfs_read+0x10/0x10 [ 1203.023921][T22688] ? __fget_files+0x3a0/0x420 [ 1203.023938][T22688] ? __fget_files+0x2a/0x420 [ 1203.023960][T22688] ksys_read+0x145/0x250 [ 1203.023986][T22688] ? __pfx_ksys_read+0x10/0x10 [ 1203.024011][T22688] ? rcu_is_watching+0x15/0xb0 [ 1203.024034][T22688] ? rcu_is_watching+0x15/0xb0 [ 1203.024055][T22688] do_syscall_64+0xfa/0x3b0 [ 1203.024088][T22688] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1203.024108][T22688] ? clear_bhb_loop+0x60/0xb0 [ 1203.024130][T22688] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1203.024150][T22688] RIP: 0033:0x7fd7eab8d5fc [ 1203.024169][T22688] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1203.024187][T22688] RSP: 002b:00007fd7eba7b030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1203.024209][T22688] RAX: ffffffffffffffda RBX: 00007fd7eadb5fa0 RCX: 00007fd7eab8d5fc [ 1203.024225][T22688] RDX: 000000000000000f RSI: 00007fd7eba7b0a0 RDI: 0000000000000005 [ 1203.024239][T22688] RBP: 00007fd7eba7b090 R08: 0000000000000000 R09: 0000000000000000 [ 1203.024252][T22688] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1203.024264][T22688] R13: 00007fd7eadb6038 R14: 00007fd7eadb5fa0 R15: 00007fd7eaedfa28 [ 1203.024286][T22688] [ 1203.487975][T22694] netlink: 'syz.4.3989': attribute type 2 has an invalid length. [ 1203.913979][T22705] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3991'. [ 1203.923330][T22705] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3991'. [ 1203.934755][T22705] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 1204.215852][T22705] bond2: entered allmulticast mode [ 1204.221502][T22705] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1204.375104][ T24] usb 1-1: USB disconnect, device number 39 [ 1204.536235][T16652] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 1204.634433][T22722] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3995'. [ 1204.706708][T16652] usb 5-1: config 0 has no interfaces? [ 1204.725282][T22727] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3997'. [ 1204.733814][T16652] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1204.743921][T16652] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1204.757897][T16652] usb 5-1: Product: syz [ 1204.844772][T22727] openvswitch: netlink: Flow key attr not present in new flow. [ 1204.943267][T16652] usb 5-1: Manufacturer: syz [ 1205.078085][T16652] usb 5-1: SerialNumber: syz [ 1205.084430][T16652] usb 5-1: config 0 descriptor?? [ 1205.534409][T22739] netlink: 'syz.7.4000': attribute type 3 has an invalid length. [ 1205.542221][T22739] netlink: 'syz.7.4000': attribute type 3 has an invalid length. [ 1205.567776][T22739] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4000'. [ 1205.610692][T22741] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4001'. [ 1205.655241][ T5931] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 1205.685395][T20298] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 1205.731074][T22744] netlink: 'syz.6.4004': attribute type 10 has an invalid length. [ 1206.004439][ T24] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 1206.306066][T22763] syz.6.4007: attempt to access beyond end of device [ 1206.306066][T22763] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1206.594371][T13720] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 1206.754179][T13720] usb 1-1: Using ep0 maxpacket: 8 [ 1206.765293][T13720] usb 1-1: config 9 has an invalid interface number: 136 but max is 1 [ 1206.782427][T13720] usb 1-1: config 9 has an invalid interface number: 60 but max is 1 [ 1206.790900][T13720] usb 1-1: config 9 has no interface number 0 [ 1206.797402][T13720] usb 1-1: config 9 has no interface number 1 [ 1206.803560][T13720] usb 1-1: config 9 interface 136 has no altsetting 0 [ 1206.810757][T13720] usb 1-1: config 9 interface 60 has no altsetting 0 [ 1206.822571][T13720] usb 1-1: New USB device found, idVendor=1415, idProduct=2000, bcdDevice=cf.52 [ 1206.838030][T13720] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1206.847360][T13720] usb 1-1: Product: syz [ 1206.851663][T13720] usb 1-1: Manufacturer: syz [ 1206.858767][T13720] usb 1-1: SerialNumber: syz [ 1207.072428][T22766] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4010'. [ 1207.083331][T22767] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4010'. [ 1207.117735][ T30] audit: type=1326 audit(1755352776.764:1703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22771 comm="syz.6.4012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f261238ebe9 code=0x7ffc0000 [ 1207.197368][T13720] usb 1-1: USB disconnect, device number 40 [ 1207.250577][ T30] audit: type=1326 audit(1755352776.764:1704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22771 comm="syz.6.4012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f261238d550 code=0x7ffc0000 [ 1207.415509][ T30] audit: type=1326 audit(1755352776.764:1705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22771 comm="syz.6.4012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f261238ebe9 code=0x7ffc0000 [ 1207.438567][ T30] audit: type=1326 audit(1755352776.764:1706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22771 comm="syz.6.4012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f261238ebe9 code=0x7ffc0000 [ 1207.462061][ T30] audit: type=1326 audit(1755352776.764:1707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22771 comm="syz.6.4012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f261238ebe9 code=0x7ffc0000 [ 1207.484570][ C1] vkms_vblank_simulate: vblank timer overrun [ 1207.501346][ T30] audit: type=1326 audit(1755352776.764:1708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22771 comm="syz.6.4012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f261238ebe9 code=0x7ffc0000 [ 1207.564794][ T24] usb 5-1: USB disconnect, device number 108 [ 1207.580277][ T30] audit: type=1326 audit(1755352776.764:1709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22771 comm="syz.6.4012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f261238ebe9 code=0x7ffc0000 [ 1207.606830][ T30] audit: type=1326 audit(1755352776.764:1710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22771 comm="syz.6.4012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f261238ebe9 code=0x7ffc0000 [ 1207.629381][ C1] vkms_vblank_simulate: vblank timer overrun [ 1207.696147][ T5931] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 1207.741360][ T30] audit: type=1326 audit(1755352776.764:1711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22771 comm="syz.6.4012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2612390b07 code=0x7ffc0000 [ 1207.763777][ C1] vkms_vblank_simulate: vblank timer overrun [ 1207.777496][ T30] audit: type=1326 audit(1755352776.764:1712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22771 comm="syz.6.4012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f2612390a7c code=0x7ffc0000 [ 1207.800105][ C1] vkms_vblank_simulate: vblank timer overrun [ 1207.894313][ T24] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 1208.007972][T22788] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1208.044502][T22788] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1208.054196][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 1208.072196][ T24] usb 5-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=30.bb [ 1208.089178][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1208.098118][ T24] usb 5-1: Product: syz [ 1208.102402][ T24] usb 5-1: Manufacturer: syz [ 1208.110119][ T24] usb 5-1: SerialNumber: syz [ 1208.236795][T22793] openvswitch: netlink: IP tunnel dst address not specified [ 1208.346558][T22781] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1208.359312][T22781] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1208.545893][ T24] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1208.563784][ T24] snd-usb-audio 5-1:222.0: probe with driver snd-usb-audio failed with error -71 [ 1208.626929][ T24] usb 5-1: USB disconnect, device number 109 [ 1208.769141][T22805] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 1208.769141][T22805] The task syz.6.4020 (22805) triggered the difference, watch for misbehavior. [ 1208.816987][T14558] udevd[14558]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:222.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1209.453248][T22812] openvswitch: netlink: Flow actions attr not present in new flow. [ 1210.734281][ C1] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 1212.328888][T22850] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1212.720264][T22852] FAULT_INJECTION: forcing a failure. [ 1212.720264][T22852] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1212.802783][T22852] CPU: 1 UID: 0 PID: 22852 Comm: syz.4.4033 Not tainted 6.17.0-rc1-syzkaller-00199-gdfd4b508c8c6 #0 PREEMPT(full) [ 1212.802814][T22852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1212.802827][T22852] Call Trace: [ 1212.802835][T22852] [ 1212.802843][T22852] dump_stack_lvl+0x189/0x250 [ 1212.802871][T22852] ? __pfx____ratelimit+0x10/0x10 [ 1212.802899][T22852] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1212.802921][T22852] ? __pfx__printk+0x10/0x10 [ 1212.802951][T22852] ? rcu_is_watching+0x15/0xb0 [ 1212.802973][T22852] should_fail_ex+0x414/0x560 [ 1212.803002][T22852] _copy_to_user+0x31/0xb0 [ 1212.803026][T22852] ? __pfx_virtio_read+0x10/0x10 [ 1212.803047][T22852] rng_dev_read+0x3f2/0x770 [ 1212.803070][T22852] ? __pfx_rng_dev_read+0x10/0x10 [ 1212.803088][T22852] ? common_file_perm+0x1b5/0x230 [ 1212.803121][T22852] ? bpf_lsm_file_permission+0x9/0x20 [ 1212.803157][T22852] ? security_file_permission+0x75/0x290 [ 1212.803185][T22852] ? rw_verify_area+0x2a6/0x4d0 [ 1212.803213][T22852] vfs_readv+0x5a7/0x850 [ 1212.803232][T22852] ? __pfx_rng_dev_read+0x10/0x10 [ 1212.803252][T22852] ? __pfx_vfs_readv+0x10/0x10 [ 1212.803270][T22852] ? vfs_write+0x956/0xb30 [ 1212.803300][T22852] ? lock_release+0x4b/0x3e0 [ 1212.803332][T22852] ? __fget_files+0x3a0/0x420 [ 1212.803349][T22852] ? __fget_files+0x2a/0x420 [ 1212.803368][T22852] __x64_sys_preadv+0x197/0x2a0 [ 1212.803396][T22852] ? __pfx___x64_sys_preadv+0x10/0x10 [ 1212.803421][T22852] ? rcu_is_watching+0x15/0xb0 [ 1212.803441][T22852] ? rcu_is_watching+0x15/0xb0 [ 1212.803461][T22852] do_syscall_64+0xfa/0x3b0 [ 1212.803488][T22852] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1212.803508][T22852] ? clear_bhb_loop+0x60/0xb0 [ 1212.803529][T22852] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1212.803548][T22852] RIP: 0033:0x7fd7eab8ebe9 [ 1212.803565][T22852] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1212.803583][T22852] RSP: 002b:00007fd7eba7b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 1212.803603][T22852] RAX: ffffffffffffffda RBX: 00007fd7eadb5fa0 RCX: 00007fd7eab8ebe9 [ 1212.803617][T22852] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000003 [ 1212.803629][T22852] RBP: 00007fd7eba7b090 R08: 0000000001000000 R09: 0000000000000000 [ 1212.803641][T22852] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1212.803652][T22852] R13: 00007fd7eadb6038 R14: 00007fd7eadb5fa0 R15: 00007fd7eaedfa28 [ 1212.803673][T22852] [ 1213.273816][T22863] veth0: entered promiscuous mode [ 1213.293788][T22861] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4035'. [ 1213.558009][ T1212] usb 1-1: new full-speed USB device number 41 using dummy_hcd [ 1213.663982][T22878] netlink: 76 bytes leftover after parsing attributes in process `syz.7.4041'. [ 1213.667420][ T5931] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 1213.716957][ T1212] usb 1-1: config 54 has an invalid interface number: 154 but max is 0 [ 1213.725698][ T1212] usb 1-1: config 54 has no interface number 0 [ 1213.734248][ T1212] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice= 0.ec [ 1213.762095][ T1212] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1213.782645][ T1212] usb 1-1: Product: syz [ 1213.787518][ T1212] usb 1-1: Manufacturer: syz [ 1213.792494][ T1212] usb 1-1: SerialNumber: syz [ 1214.094389][ C0] IPVS: sh: UDP 0.0.0.0:0 - no destination available [ 1214.165526][T22861] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 1214.176559][T22861] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1214.805521][ T1212] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1214.824781][T20293] usb 1-1: Failed to submit usb control message: -71 [ 1214.857897][ T1212] usb 1-1: USB disconnect, device number 41 [ 1214.915573][T20293] usb 1-1: unable to send the bmi data to the device: -71 [ 1214.932287][T20293] usb 1-1: unable to get target info from device [ 1214.954422][T20293] usb 1-1: could not get target info (-71) [ 1214.970611][T20293] usb 1-1: could not probe fw (-71) [ 1215.293114][T22899] FAULT_INJECTION: forcing a failure. [ 1215.293114][T22899] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1215.365282][T22899] CPU: 0 UID: 0 PID: 22899 Comm: syz.8.4046 Not tainted 6.17.0-rc1-syzkaller-00199-gdfd4b508c8c6 #0 PREEMPT(full) [ 1215.365306][T22899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1215.365316][T22899] Call Trace: [ 1215.365322][T22899] [ 1215.365330][T22899] dump_stack_lvl+0x189/0x250 [ 1215.365364][T22899] ? __pfx____ratelimit+0x10/0x10 [ 1215.365391][T22899] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1215.365414][T22899] ? __pfx__printk+0x10/0x10 [ 1215.365441][T22899] ? rcu_is_watching+0x15/0xb0 [ 1215.365457][T22899] should_fail_ex+0x414/0x560 [ 1215.365479][T22899] _copy_to_user+0x31/0xb0 [ 1215.365508][T22899] ? __pfx_virtio_read+0x10/0x10 [ 1215.365531][T22899] rng_dev_read+0x3f2/0x770 [ 1215.365553][T22899] ? __pfx_rng_dev_read+0x10/0x10 [ 1215.365573][T22899] ? common_file_perm+0x1b5/0x230 [ 1215.365598][T22899] ? bpf_lsm_file_permission+0x9/0x20 [ 1215.365623][T22899] ? security_file_permission+0x75/0x290 [ 1215.365650][T22899] ? rw_verify_area+0x2a6/0x4d0 [ 1215.365679][T22899] vfs_readv+0x5a7/0x850 [ 1215.365697][T22899] ? __pfx_rng_dev_read+0x10/0x10 [ 1215.365718][T22899] ? __pfx_vfs_readv+0x10/0x10 [ 1215.365734][T22899] ? vfs_write+0x956/0xb30 [ 1215.365756][T22899] ? lock_release+0x4b/0x3e0 [ 1215.365780][T22899] ? __fget_files+0x3a0/0x420 [ 1215.365798][T22899] ? __fget_files+0x2a/0x420 [ 1215.365819][T22899] __x64_sys_preadv+0x197/0x2a0 [ 1215.365850][T22899] ? __pfx___x64_sys_preadv+0x10/0x10 [ 1215.365877][T22899] ? rcu_is_watching+0x15/0xb0 [ 1215.365898][T22899] ? rcu_is_watching+0x15/0xb0 [ 1215.365918][T22899] do_syscall_64+0xfa/0x3b0 [ 1215.365944][T22899] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1215.365966][T22899] ? clear_bhb_loop+0x60/0xb0 [ 1215.365990][T22899] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1215.366009][T22899] RIP: 0033:0x7f0f6b18ebe9 [ 1215.366026][T22899] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1215.366044][T22899] RSP: 002b:00007f0f6bfd3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 1215.366061][T22899] RAX: ffffffffffffffda RBX: 00007f0f6b3b5fa0 RCX: 00007f0f6b18ebe9 [ 1215.366072][T22899] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000003 [ 1215.366082][T22899] RBP: 00007f0f6bfd3090 R08: 0000000001000000 R09: 0000000000000000 [ 1215.366092][T22899] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1215.366102][T22899] R13: 00007f0f6b3b6038 R14: 00007f0f6b3b5fa0 R15: 00007f0f6b4dfa28 [ 1215.366129][T22899] [ 1215.620404][ C0] vkms_vblank_simulate: vblank timer overrun [ 1215.940231][T22910] macsec1: entered promiscuous mode [ 1215.984235][T22910] bond0: entered promiscuous mode [ 1215.991399][T22910] bond0: left promiscuous mode [ 1216.358842][T22866] veth0: left promiscuous mode [ 1216.415971][T22919] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 1216.647067][T13720] hid-generic 0000:0000:0000.0051: unknown main item tag 0x0 [ 1216.665454][T13720] hid-generic 0000:0000:0000.0051: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1216.724291][ T5931] usb 5-1: device descriptor read/64, error -71 [ 1217.208516][ T5931] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 1217.643057][ T5931] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1217.666257][ T5931] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 1217.684676][ T5931] usb 5-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 1217.741254][ T5931] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1217.768727][ T5931] usb 5-1: config 0 descriptor?? [ 1218.560882][T22954] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1218.574415][ C1] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 1218.633984][T22954] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1218.868497][ T5931] Bluetooth: Can't get version to change to load ram patch err [ 1218.881333][ T5931] Bluetooth: Loading sysconfig file failed [ 1218.888480][ T5931] ath3k 5-1:0.0: probe with driver ath3k failed with error -71 [ 1218.898045][ T5931] usb 5-1: USB disconnect, device number 111 [ 1220.462679][T16652] hid-generic 0000:0000:0000.0052: unknown main item tag 0x0 [ 1220.463617][T16652] hid-generic 0000:0000:0000.0052: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1220.856318][T22991] netlink: 'syz.8.4067': attribute type 3 has an invalid length. [ 1220.866892][T22991] netlink: 'syz.8.4067': attribute type 3 has an invalid length. [ 1220.875374][T22991] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4067'. [ 1221.424703][T16652] usb 9-1: new high-speed USB device number 111 using dummy_hcd [ 1221.618049][T16652] usb 9-1: Using ep0 maxpacket: 8 [ 1221.626966][T16652] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1221.648775][T16652] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1221.660715][T16652] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1221.673226][T16652] usb 9-1: config 0 descriptor?? [ 1221.941640][T16652] iowarrior 9-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1222.034443][T23008] tipc: Enabling of bearer rejected, failed to enable media [ 1222.414861][T23009] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1222.437165][T23009] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1222.455217][ T5932] usb 9-1: USB disconnect, device number 111 [ 1222.461321][ C1] iowarrior 9-1:0.0: iowarrior_callback - usb_submit_urb failed with result -19 [ 1224.143577][T23030] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4076'. [ 1224.156206][T23028] fuse: Bad value for 'fd' [ 1224.216763][T23028] netlink: 'syz.8.4075': attribute type 1 has an invalid length. [ 1224.239278][T23032] syzkaller0: entered promiscuous mode [ 1224.249607][T23032] syzkaller0: entered allmulticast mode [ 1225.003420][T23050] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4083'. [ 1225.029866][T23051] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4083'. [ 1225.039295][T23050] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4083'. [ 1225.064978][T23053] netlink: 'syz.6.4084': attribute type 15 has an invalid length. [ 1225.069741][T23051] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4083'. [ 1225.073060][T23053] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4084'. [ 1225.093039][T23051] netlink: 'syz.8.4083': attribute type 11 has an invalid length. [ 1225.093386][T23050] netlink: 'syz.8.4083': attribute type 11 has an invalid length. [ 1225.181231][T23058] netlink: 44 bytes leftover after parsing attributes in process `syz.6.4086'. [ 1225.198133][T23060] netlink: 44 bytes leftover after parsing attributes in process `syz.8.4085'. [ 1225.277834][T23064] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4087'. [ 1225.339704][T23067] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1225.357021][T23067] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1226.289806][T16652] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 1226.422000][T23089] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 2, id = 0 [ 1226.422457][T23088] __nla_validate_parse: 2 callbacks suppressed [ 1226.422478][T23088] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4097'. [ 1226.472023][T16652] usb 1-1: Using ep0 maxpacket: 32 [ 1226.497779][T16652] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 52, changing to 9 [ 1226.517481][T16652] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 8241, setting to 1024 [ 1226.584276][T16652] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 1226.593976][T16652] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1226.599580][T23091] netlink: 44 bytes leftover after parsing attributes in process `syz.8.4098'. [ 1226.602577][T16652] usb 1-1: Product: syz [ 1226.619812][T16652] usb 1-1: Manufacturer: syz [ 1226.644760][T16652] usb 1-1: SerialNumber: syz [ 1226.651773][T16652] usb 1-1: config 0 descriptor?? [ 1226.770467][T16652] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1226.864694][T16652] usb 1-1: USB disconnect, device number 42 [ 1226.872685][T20294] usb 1-1: Failed to submit usb control message: -71 [ 1226.885557][T20294] usb 1-1: unable to send the bmi data to the device: -71 [ 1227.044427][T20294] usb 1-1: unable to get target info from device [ 1227.051690][T20294] usb 1-1: could not get target info (-71) [ 1227.063508][T20294] usb 1-1: could not probe fw (-71) [ 1227.593151][T23105] openvswitch: netlink: Message has 24 unknown bytes. [ 1227.601152][T23105] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1228.661089][T23123] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1228.670376][T23123] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1228.768383][T23128] sctp: [Deprecated]: syz.6.4107 (pid 23128) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1228.768383][T23128] Use struct sctp_sack_info instead [ 1228.884468][T16652] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 1229.044181][T16652] usb 1-1: Using ep0 maxpacket: 8 [ 1229.055827][T16652] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1229.064989][T16652] usb 1-1: config 1 has an invalid interface number: 251 but max is 2 [ 1229.073240][T16652] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1229.083972][T16652] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1229.093744][T16652] usb 1-1: config 1 has no interface number 1 [ 1229.103635][T16652] usb 1-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 1229.117465][T16652] usb 1-1: config 1 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 1229.142747][T16652] usb 1-1: config 1 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 1229.158375][T16652] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1229.167954][T16652] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1229.178425][T16652] usb 1-1: Product: syz [ 1229.183255][T16652] usb 1-1: Manufacturer: syz [ 1229.188554][T16652] usb 1-1: SerialNumber: syz [ 1229.397783][T16652] usb 1-1: 0:2 : does not exist [ 1229.404263][T16652] usb 1-1: 0:8 : does not exist [ 1229.456888][T16652] usb 1-1: USB disconnect, device number 43 [ 1229.603117][T14558] udevd[14558]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1229.671013][T23136] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1229.684063][T23136] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1229.696833][T23137] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4109'. [ 1229.708991][T23136] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4109'. [ 1230.044389][T23143] netlink: 'syz.0.4111': attribute type 1 has an invalid length. [ 1230.304689][ T5932] usb 1-1: new low-speed USB device number 44 using dummy_hcd [ 1230.323870][T23150] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1230.334669][T23150] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1230.381682][T23151] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode active-backup(1) [ 1230.484445][ T5932] usb 1-1: Invalid ep0 maxpacket: 64 [ 1230.763759][ T5932] usb 1-1: new low-speed USB device number 45 using dummy_hcd [ 1230.976961][ T5932] usb 1-1: Invalid ep0 maxpacket: 64 [ 1230.988776][ T5932] usb usb1-port1: attempt power cycle [ 1231.001282][T23159] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4116'. [ 1231.414311][ T5932] usb 1-1: new low-speed USB device number 46 using dummy_hcd [ 1231.447400][ T5932] usb 1-1: Invalid ep0 maxpacket: 64 [ 1231.575422][ T5932] usb 1-1: new low-speed USB device number 47 using dummy_hcd [ 1231.597407][ T5932] usb 1-1: Invalid ep0 maxpacket: 64 [ 1231.603029][ T5932] usb usb1-port1: unable to enumerate USB device [ 1232.636670][T23170] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4120'. [ 1232.884425][ T5931] usb 5-1: new high-speed USB device number 112 using dummy_hcd [ 1233.024168][ T5931] usb 5-1: device descriptor read/64, error -71 [ 1233.275986][ T5931] usb 5-1: new high-speed USB device number 113 using dummy_hcd [ 1233.436542][ T5931] usb 5-1: device descriptor read/64, error -71 [ 1233.556558][ T5931] usb usb5-port1: attempt power cycle [ 1233.578453][T23199] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4127'. [ 1233.591959][T23199] bridge0: port 2(bridge_slave_1) entered disabled state [ 1233.599664][T23199] bridge0: port 1(bridge_slave_0) entered disabled state [ 1233.767134][T23206] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1233.808004][T23206] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1233.914344][ T5931] usb 5-1: new high-speed USB device number 114 using dummy_hcd [ 1233.934885][ C1] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 1233.956153][ T5931] usb 5-1: device descriptor read/8, error -71 [ 1234.299605][ T5931] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 1234.369829][ T5932] usb 9-1: new high-speed USB device number 112 using dummy_hcd [ 1234.415075][ T5931] usb 5-1: device descriptor read/8, error -71 [ 1234.474439][T23225] TCP: TCP_TX_DELAY enabled [ 1234.525421][ T5931] usb usb5-port1: unable to enumerate USB device [ 1234.657999][ T5932] usb 9-1: Using ep0 maxpacket: 16 [ 1235.290947][T23229] program syz.0.4136 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1235.629416][ T30] kauditd_printk_skb: 70 callbacks suppressed [ 1235.629436][ T30] audit: type=1326 audit(1755352805.284:1783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23235 comm="syz.4.4138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7eab8ebe9 code=0x7ffc0000 [ 1235.666278][ T30] audit: type=1326 audit(1755352805.284:1784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23235 comm="syz.4.4138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7eab8ebe9 code=0x7ffc0000 [ 1235.699149][ T30] audit: type=1326 audit(1755352805.284:1785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23235 comm="syz.4.4138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7fd7eab8ebe9 code=0x7ffc0000 [ 1235.726193][T23238] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4138'. [ 1235.798006][ T30] audit: type=1326 audit(1755352805.284:1786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23235 comm="syz.4.4138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7eab8ebe9 code=0x7ffc0000 [ 1235.830441][ T30] audit: type=1326 audit(1755352805.284:1787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23235 comm="syz.4.4138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fd7eab8ebe9 code=0x7ffc0000 [ 1235.852796][ C0] vkms_vblank_simulate: vblank timer overrun [ 1235.864188][ T30] audit: type=1326 audit(1755352805.284:1788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23235 comm="syz.4.4138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7eab8ebe9 code=0x7ffc0000 [ 1235.894550][ T30] audit: type=1326 audit(1755352805.284:1789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23235 comm="syz.4.4138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7eab8ebe9 code=0x7ffc0000 [ 1235.917123][ C0] vkms_vblank_simulate: vblank timer overrun [ 1235.962810][ T30] audit: type=1326 audit(1755352805.284:1790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23235 comm="syz.4.4138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fd7eab8ebe9 code=0x7ffc0000 [ 1235.987272][ T30] audit: type=1326 audit(1755352805.284:1791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23235 comm="syz.4.4138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7eab8ebe9 code=0x7ffc0000 [ 1236.010552][ T30] audit: type=1326 audit(1755352805.284:1792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23235 comm="syz.4.4138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fd7eab8ebe9 code=0x7ffc0000 [ 1236.664721][ T5924] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 1236.892495][T23255] FAULT_INJECTION: forcing a failure. [ 1236.892495][T23255] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1236.894972][ T5924] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1236.905958][T23255] CPU: 1 UID: 0 PID: 23255 Comm: syz.6.4146 Not tainted 6.17.0-rc1-syzkaller-00199-gdfd4b508c8c6 #0 PREEMPT(full) [ 1236.905988][T23255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1236.906006][T23255] Call Trace: [ 1236.906016][T23255] [ 1236.906027][T23255] dump_stack_lvl+0x189/0x250 [ 1236.906062][T23255] ? __pfx____ratelimit+0x10/0x10 [ 1236.906096][T23255] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1236.906123][T23255] ? __pfx__printk+0x10/0x10 [ 1236.906155][T23255] ? rcu_is_watching+0x15/0xb0 [ 1236.906181][T23255] should_fail_ex+0x414/0x560 [ 1236.906215][T23255] _copy_to_user+0x31/0xb0 [ 1236.906243][T23255] ? __pfx_virtio_read+0x10/0x10 [ 1236.906267][T23255] rng_dev_read+0x3f2/0x770 [ 1236.906293][T23255] ? __pfx_rng_dev_read+0x10/0x10 [ 1236.906319][T23255] ? bpf_lsm_file_permission+0x9/0x20 [ 1236.906347][T23255] ? security_file_permission+0x75/0x290 [ 1236.906377][T23255] ? rw_verify_area+0x2a6/0x4d0 [ 1236.906407][T23255] vfs_readv+0x5a7/0x850 [ 1236.906428][T23255] ? __pfx_rng_dev_read+0x10/0x10 [ 1236.906451][T23255] ? __pfx_vfs_readv+0x10/0x10 [ 1236.906468][T23255] ? vfs_write+0x956/0xb30 [ 1236.906503][T23255] ? lock_release+0x4b/0x3e0 [ 1236.906540][T23255] ? __fget_files+0x3a0/0x420 [ 1236.906560][T23255] ? __fget_files+0x2a/0x420 [ 1236.906584][T23255] __x64_sys_preadv+0x197/0x2a0 [ 1236.906617][T23255] ? __pfx___x64_sys_preadv+0x10/0x10 [ 1236.906652][T23255] ? rcu_is_watching+0x15/0xb0 [ 1236.906686][T23255] do_syscall_64+0xfa/0x3b0 [ 1236.906719][T23255] ? rcu_is_watching+0x15/0xb0 [ 1236.906740][T23255] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1236.906762][T23255] ? clear_bhb_loop+0x60/0xb0 [ 1236.906787][T23255] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1236.906811][T23255] RIP: 0033:0x7f261238ebe9 [ 1236.906831][T23255] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1236.906851][T23255] RSP: 002b:00007f26132d2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 1236.906876][T23255] RAX: ffffffffffffffda RBX: 00007f26125b5fa0 RCX: 00007f261238ebe9 [ 1236.906894][T23255] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000003 [ 1236.906909][T23255] RBP: 00007f26132d2090 R08: 0000000001000000 R09: 0000000000000000 [ 1236.906924][T23255] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1236.906937][T23255] R13: 00007f26125b6038 R14: 00007f26125b5fa0 R15: 00007f26126dfa28 [ 1236.906963][T23255] [ 1237.176753][ T5924] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1237.216790][ T5924] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1237.308854][ T5924] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1237.367633][ T5932] usb 9-1: device descriptor read/all, error -71 [ 1237.372577][ T5924] usb 1-1: Product: syz [ 1237.433506][ T5924] usb 1-1: Manufacturer: syz [ 1237.442374][ T5924] usb 1-1: SerialNumber: syz [ 1237.455067][ T5924] usb 1-1: config 0 descriptor?? [ 1237.467453][ T5924] usb 1-1: selecting invalid altsetting 0 [ 1237.492448][T23267] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1237.648066][T23270] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1237.664809][T23270] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1237.796896][T23270] ALSA: seq fatal error: cannot create timer (-22) [ 1237.916006][ T24] usb 1-1: USB disconnect, device number 48 [ 1237.951840][T23280] netlink: 'syz.0.4153': attribute type 10 has an invalid length. [ 1238.022968][T23280] 8021q: adding VLAN 0 to HW filter on device team0 [ 1238.089486][T23280] bond0: (slave team0): Enslaving as an active interface with an up link [ 1239.350701][T23306] openvswitch: netlink: Missing valid actions attribute. [ 1239.355571][T23303] fuse: Unknown parameter 'groubV00000000000000000000' [ 1239.361000][T23306] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1239.545254][T23311] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4162'. [ 1239.654215][ T5932] usb 5-1: new high-speed USB device number 116 using dummy_hcd [ 1239.665329][T23312] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1239.752834][T23312] netlink: 'syz.7.4163': attribute type 1 has an invalid length. [ 1239.898546][ T5932] usb 5-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 1239.909204][T23312] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4163'. [ 1239.918565][ T5932] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1239.942608][ T5932] usb 5-1: Product: syz [ 1239.947415][T23312] ALSA: mixer_oss: invalid OSS volume 'ZyM/jb-))Wu' [ 1239.959937][T23312] ALSA: mixer_oss: invalid OSS volume '?Թ痈Y{UD' [ 1239.972214][T23312] ALSA: mixer_oss: invalid OSS volume 'ߧ4cT󯆩"m!lT.Π' [ 1239.974212][ T1212] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 1239.988497][ T5932] usb 5-1: Manufacturer: syz [ 1240.000555][ T5932] usb 5-1: SerialNumber: syz [ 1240.003788][T23312] ALSA: mixer_oss: invalid OSS volume 'lg' [ 1240.012751][T23312] ALSA: mixer_oss: invalid OSS volume ')nkKi,rWY\ZV?J`G' [ 1240.025520][T23312] ALSA: mixer_oss: invalid OSS volume 'kO0$g{pl{y;_ARW' [ 1240.036851][T23312] ALSA: mixer_oss: invalid OSS volume '' [ 1240.042698][T23312] ALSA: mixer_oss: invalid OSS volume 'sv Fu{Qby>h%w]' [ 1240.050964][T23312] ALSA: mixer_oss: invalid OSS volume 'E= v?@48@hL' [ 1240.092749][ T5932] usb 5-1: config 0 descriptor?? [ 1240.101434][T23312] ALSA: mixer_oss: invalid OSS volume '+?>3Iq0:iq|UDř' [ 1240.117945][T23312] ALSA: mixer_oss: invalid OSS volume 'vӷ*xrN0ܗcAdh' [ 1240.119610][ T5932] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 1240.130298][T23312] ALSA: mixer_oss: invalid OSS volume 'JM %HJ[~S' [ 1240.141432][T23312] ALSA: mixer_oss: invalid OSS volume 'SQF?`*]5S' [ 1240.156078][T23312] ALSA: mixer_oss: invalid OSS volume 'x\E79@ar4b2]jG' [ 1240.231332][ T1212] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1240.256486][ T1212] usb 1-1: config 0 has no interface number 0 [ 1240.264970][ T1212] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1240.281530][T23318] netlink: 36 bytes leftover after parsing attributes in process `syz.8.4165'. [ 1240.302284][ T1212] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1240.322603][T23318] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4165'. [ 1240.352687][ T1212] usb 1-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 1240.375222][ T1212] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1240.383571][T23318] netlink: 36 bytes leftover after parsing attributes in process `syz.8.4165'. [ 1240.408154][T23318] netlink: 36 bytes leftover after parsing attributes in process `syz.8.4165'. [ 1240.430161][ T1212] usb 1-1: config 0 descriptor?? [ 1240.668406][T23331] netlink: 'syz.8.4167': attribute type 3 has an invalid length. [ 1240.676554][T23331] netlink: 'syz.8.4167': attribute type 3 has an invalid length. [ 1240.688088][T23331] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4167'. [ 1241.058421][T23351] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4171'. [ 1241.091397][T23350] netlink: 44 bytes leftover after parsing attributes in process `syz.6.4174'. [ 1241.161084][T16652] usb 5-1: USB disconnect, device number 116 [ 1241.587891][T23358] loop7: detected capacity change from 0 to 7 [ 1242.048483][T23358] Dev loop7: unable to read RDB block 7 [ 1242.054408][T23358] loop7: unable to read partition table [ 1242.061957][T23358] loop7: partition table beyond EOD, truncated [ 1242.074566][T23358] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 1242.166317][ T24] usb 5-1: new high-speed USB device number 117 using dummy_hcd [ 1242.349504][ T5232] Dev loop7: unable to read RDB block 7 [ 1242.354254][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 1242.367543][ T5232] loop7: unable to read partition table [ 1242.369764][ T24] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1242.373390][ T5232] loop7: partition table beyond EOD, truncated [ 1242.393317][ T24] usb 5-1: config 2 has an invalid interface number: 22 but max is 0 [ 1242.413293][ T24] usb 5-1: config 2 has no interface number 0 [ 1242.422952][ T24] usb 5-1: config 2 interface 22 has no altsetting 0 [ 1242.434451][ T24] usb 5-1: New USB device found, idVendor=0451, idProduct=5416, bcdDevice= 1.00 [ 1242.449311][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1242.478976][ T24] usb 5-1: Product: syz [ 1242.483237][ T24] usb 5-1: Manufacturer: syz [ 1242.489549][ T24] usb 5-1: SerialNumber: syz [ 1242.632572][ T1212] usbhid 1-1:0.1: can't add hid device: -71 [ 1242.638730][ T1212] usbhid 1-1:0.1: probe with driver usbhid failed with error -71 [ 1242.671928][T23372] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 1242.681008][ T1212] usb 1-1: USB disconnect, device number 49 [ 1242.704837][T23372] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 1242.727192][T23373] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1242.749527][T23373] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1242.846219][T23382] netlink: 'syz.0.4182': attribute type 3 has an invalid length. [ 1242.864460][T23382] netlink: 'syz.0.4182': attribute type 3 has an invalid length. [ 1242.873464][T23382] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4182'. [ 1243.275325][ T24] usb-storage 5-1:2.22: USB Mass Storage device detected [ 1243.305888][ T24] usb-storage 5-1:2.22: Quirks match for vid 0451 pid 5416: 2 [ 1243.359977][ T24] usb 5-1: USB disconnect, device number 117 [ 1243.549866][T23402] netlink: 'syz.4.4185': attribute type 21 has an invalid length. [ 1243.560543][T23402] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1243.571269][T23402] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1243.734726][ T24] usb 5-1: new high-speed USB device number 118 using dummy_hcd [ 1244.177807][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1244.184294][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1244.317860][T23415] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1244.342052][ T5924] usb 9-1: new high-speed USB device number 114 using dummy_hcd [ 1244.422669][T23418] usb usb8: usbfs: process 23418 (syz.7.4189) did not claim interface 0 before use [ 1244.434222][ T30] kauditd_printk_skb: 25 callbacks suppressed [ 1244.434269][ T30] audit: type=1400 audit(1755352814.074:1818): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=3A273A02 pid=23412 comm="syz.7.4189" [ 1244.477869][T23415] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1244.514943][ T5924] usb 9-1: Using ep0 maxpacket: 16 [ 1244.532158][ T5924] usb 9-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 1244.544220][ T5924] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1244.552638][ T5924] usb 9-1: Product: syz [ 1244.572566][ T5924] usb 9-1: Manufacturer: syz [ 1244.586272][ T5924] usb 9-1: SerialNumber: syz [ 1244.593799][ T5924] usb 9-1: config 0 descriptor?? [ 1245.157658][T23432] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1245.185645][T23432] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1245.222465][T23432] ip6tnl3: entered promiscuous mode [ 1246.705603][ T5924] speedtch 9-1:0.0: speedtch_bind: wrong device class 68 [ 1246.714807][ T5924] speedtch 9-1:0.0: usbatm_usb_probe: bind failed: -19! [ 1246.729483][ T5924] usb 9-1: USB disconnect, device number 114 [ 1246.735932][ C0] IPVS: sh: UDP 0.0.0.0:0 - no destination available [ 1247.071361][T23456] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1247.587879][T23462] netlink: 'syz.7.4201': attribute type 11 has an invalid length. [ 1247.628834][T23467] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1247.646270][T23467] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1247.671561][T23467] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1247.697567][T23467] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1247.733900][T23467] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1247.754987][T23467] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1248.807352][T23479] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1248.844873][T23479] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1248.964578][ T24] usb 5-1: device descriptor read/64, error -110 [ 1249.084162][ T5932] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 1249.265642][ T5932] usb 1-1: config 0 has an invalid interface number: 239 but max is 0 [ 1249.274300][ T5932] usb 1-1: config 0 has no interface number 0 [ 1249.280463][ T5932] usb 1-1: config 0 interface 239 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1249.324263][ T24] usb 5-1: new high-speed USB device number 119 using dummy_hcd [ 1249.334349][ T5932] usb 1-1: config 0 interface 239 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1249.344632][ T5932] usb 1-1: config 0 interface 239 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1249.499102][ T5932] usb 1-1: New USB device found, idVendor=2201, idProduct=012c, bcdDevice=60.d9 [ 1249.512154][ T5932] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1249.544298][ T24] usb 5-1: device descriptor read/64, error -32 [ 1249.553240][ T5932] usb 1-1: Product: syz [ 1249.556733][T23496] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1249.566574][ T5932] usb 1-1: Manufacturer: syz [ 1249.571232][ T5932] usb 1-1: SerialNumber: syz [ 1249.583124][T23498] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4212'. [ 1249.643806][ T5932] usb 1-1: config 0 descriptor?? [ 1249.647401][T23499] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4212'. [ 1249.661509][T23485] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 1249.670429][ T24] usb usb5-port1: attempt power cycle [ 1249.703352][T23498] tipc: Started in network mode [ 1249.708831][T23498] tipc: Node identity e6010453c65e, cluster identity 4711 [ 1249.716817][T23498] tipc: Enabled bearer , priority 0 [ 1249.725354][T23499] syzkaller0: entered promiscuous mode [ 1249.731377][T23499] syzkaller0: entered allmulticast mode [ 1249.780823][T23498] tipc: Resetting bearer [ 1249.788230][T23497] tipc: Resetting bearer [ 1249.795769][T23497] tipc: Disabling bearer [ 1249.893743][ T5932] usb 1-1: probing VID:PID(2201:012C) [ 1249.928486][ T5932] usb 1-1: vub300 testing BULK OUT EndPoint(0) 02 [ 1250.026912][ T5932] usb 1-1: vub300 testing BULK IN EndPoint(1) 82 [ 1250.034290][ T24] usb 5-1: new high-speed USB device number 120 using dummy_hcd [ 1250.081745][ T5932] usb 1-1: Could not find two sets of bulk-in/out endpoint pairs [ 1250.114361][ T24] usb 5-1: device descriptor read/8, error -32 [ 1250.140325][ T5932] vub300 1-1:0.239: probe with driver vub300 failed with error -22 [ 1250.178023][ T5932] usb 1-1: USB disconnect, device number 50 [ 1250.224584][ T24] raw-gadget.2 gadget.4: failed to queue suspend event [ 1250.238578][ T24] raw-gadget.2 gadget.4: failed to queue reset event [ 1250.779701][ T24] raw-gadget.2 gadget.4: failed to queue resume event [ 1250.844512][ T24] usb 5-1: new high-speed USB device number 121 using dummy_hcd [ 1250.884611][ C1] raw-gadget.2 gadget.4: ignoring, device is not running [ 1250.891855][ T24] usb 5-1: device descriptor read/8, error -32 [ 1251.027470][ T24] raw-gadget.2 gadget.4: failed to queue suspend event [ 1251.039457][ T24] usb usb5-port1: unable to enumerate USB device [ 1252.124200][ T9] usb 9-1: new high-speed USB device number 115 using dummy_hcd [ 1252.161076][T23527] loop3: detected capacity change from 0 to 1 [ 1252.178610][T14558] Dev loop3: unable to read RDB block 1 [ 1252.185258][T14558] loop3: AHDI p1 [ 1252.200092][T14558] loop3: partition table partially beyond EOD, truncated [ 1252.240605][T23528] netlink: 'syz.7.4218': attribute type 1 has an invalid length. [ 1252.281567][ T9] usb 9-1: config 0 has no interfaces? [ 1252.301616][ T9] usb 9-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1252.332227][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1252.341725][T23527] Dev loop3: unable to read RDB block 1 [ 1252.350092][T23527] loop3: AHDI p1 [ 1252.365136][T23527] loop3: partition table partially beyond EOD, truncated [ 1252.382650][ T9] usb 9-1: Product: syz [ 1252.391271][ T9] usb 9-1: Manufacturer: syz [ 1252.437924][ T9] usb 9-1: SerialNumber: syz [ 1252.534173][ T9] usb 9-1: config 0 descriptor?? [ 1252.578251][T23532] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1252.600018][T23532] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1252.629075][T23532] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1252.657019][T23534] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1252.698799][T23532] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1252.717561][T23534] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1253.059460][T23539] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1253.106512][T23539] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1253.255551][T23543] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1253.295429][T23545] binder: 23544:23545 ioctl 4008662c 200000000400 returned -22 [ 1253.714184][ T9] usb 1-1: new full-speed USB device number 51 using dummy_hcd [ 1253.883732][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1253.923557][ T9] usb 1-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 1253.974350][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1254.042081][ T9] usb 1-1: config 0 descriptor?? [ 1254.054924][T23549] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 1254.332260][T23560] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1254.341149][T23560] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1254.500070][ T9] bigben 0003:146B:0902.0053: unexpected rdesc, please submit for review [ 1254.527953][ T9] bigben 0003:146B:0902.0053: hidraw0: USB HID v1.01 Device [HID 146b:0902] on usb-dummy_hcd.0-1/input0 [ 1254.602076][ T9] bigben 0003:146B:0902.0053: not enough values in HID_OUTPUT_REPORT 0 field 0 [ 1254.653710][ T9] bigben 0003:146B:0902.0053: no output report found [ 1254.800696][ T5932] usb 1-1: USB disconnect, device number 51 [ 1255.530840][ T1212] usb 9-1: USB disconnect, device number 115 [ 1256.262296][T23578] netlink: 44 bytes leftover after parsing attributes in process `syz.6.4233'. [ 1256.657344][T23589] delete_channel: no stack [ 1257.004208][ T9] usb 9-1: new high-speed USB device number 116 using dummy_hcd [ 1257.201132][ T9] usb 9-1: Using ep0 maxpacket: 8 [ 1257.211674][ T9] usb 9-1: config 0 has an invalid interface number: 31 but max is 0 [ 1257.221234][ T9] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1257.235365][ T9] usb 9-1: config 0 has no interface number 0 [ 1257.243537][ T9] usb 9-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1257.256230][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1257.267864][ T9] usb 9-1: Product: syz [ 1257.272278][ T9] usb 9-1: Manufacturer: syz [ 1257.278925][ T9] usb 9-1: SerialNumber: syz [ 1257.300072][ T9] usb 9-1: config 0 descriptor?? [ 1257.317638][ T9] usb 9-1: Found UVC 0.00 device syz (046d:08c3) [ 1257.325910][ T9] usb 9-1: No valid video chain found. [ 1257.368186][T23603] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4241'. [ 1258.079395][T23610] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4242'. [ 1258.126486][ T1212] usb 9-1: USB disconnect, device number 116 [ 1258.272780][T23619] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1258.288964][T23619] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1258.326907][T23619] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1258.340946][T23619] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1258.481261][T23634] netlink: 'syz.4.4249': attribute type 3 has an invalid length. [ 1258.489654][T23634] netlink: 'syz.4.4249': attribute type 3 has an invalid length. [ 1258.499341][T23634] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4249'. [ 1258.514166][ T1212] usb 9-1: new high-speed USB device number 117 using dummy_hcd [ 1258.574584][T23638] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1258.583410][T23638] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1258.614419][ T5924] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 1258.648282][T23639] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1258.657845][T23639] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1258.668152][ T1212] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1258.679425][ T1212] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1258.692692][ T1212] usb 9-1: New USB device found, idVendor=07b5, idProduct=0312, bcdDevice= 0.00 [ 1258.702194][ T1212] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1258.712036][ T1212] usb 9-1: config 0 descriptor?? [ 1258.776469][ T5924] usb 1-1: Using ep0 maxpacket: 32 [ 1258.787922][ T5924] usb 1-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 1258.797279][ T5924] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1258.807020][ T5924] usb 1-1: config 0 descriptor?? [ 1258.815577][ T5924] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 1258.907847][T23641] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1259.222836][T23654] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1259.231928][T23654] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1259.301378][T23656] netlink: 76 bytes leftover after parsing attributes in process `syz.6.4256'. [ 1259.490773][T23662] input: syz0 as /devices/virtual/input/input149 [ 1259.560012][ T1212] megaworld 0003:07B5:0312.0054: ignoring exceeding usage max [ 1259.622077][ T1212] megaworld 0003:07B5:0312.0054: hidraw0: USB HID v0.00 Device [HID 07b5:0312] on usb-dummy_hcd.8-1/input0 [ 1259.668508][T23626] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1259.677675][T23626] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1259.941278][ T1212] megaworld 0003:07B5:0312.0054: no inputs found [ 1259.997657][T23671] netlink: 'syz.6.4260': attribute type 3 has an invalid length. [ 1260.038905][T23671] netlink: 'syz.6.4260': attribute type 3 has an invalid length. [ 1260.185620][T23671] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4260'. [ 1260.681698][ T5924] gspca_vc032x: reg_w err -71 [ 1260.686578][ T5924] gspca_vc032x: I2c Bus Busy Wait 00 [ 1260.704423][ T5924] gspca_vc032x: I2c Bus Busy Wait 00 [ 1260.731701][ T5924] gspca_vc032x: I2c Bus Busy Wait 00 [ 1260.756028][ T5924] gspca_vc032x: I2c Bus Busy Wait 00 [ 1260.791944][ T5924] gspca_vc032x: I2c Bus Busy Wait 00 [ 1260.799934][ T5924] gspca_vc032x: I2c Bus Busy Wait 00 [ 1260.817376][ T5924] gspca_vc032x: I2c Bus Busy Wait 00 [ 1260.822839][ T5924] gspca_vc032x: I2c Bus Busy Wait 00 [ 1260.836536][T23680] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1260.886872][ T5924] gspca_vc032x: I2c Bus Busy Wait 00 [ 1260.887367][T23680] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1260.911010][ T5924] gspca_vc032x: I2c Bus Busy Wait 00 [ 1260.991590][ T5924] gspca_vc032x: I2c Bus Busy Wait 00 [ 1260.998205][ T5924] gspca_vc032x: I2c Bus Busy Wait 00 [ 1261.012320][ T5924] gspca_vc032x: I2c Bus Busy Wait 00 [ 1261.090028][ T5924] gspca_vc032x: I2c Bus Busy Wait 00 [ 1261.104941][ T5924] gspca_vc032x: I2c Bus Busy Wait 00 [ 1261.117712][ T5924] gspca_vc032x: I2c Bus Busy Wait 00 [ 1261.132063][ T5924] gspca_vc032x: I2c Bus Busy Wait 00 [ 1261.163202][ T5924] gspca_vc032x: I2c Bus Busy Wait 00 [ 1261.180586][ T5924] gspca_vc032x: Unknown sensor... [ 1261.256950][ T5924] vc032x 1-1:0.0: probe with driver vc032x failed with error -22 [ 1261.281494][ T5924] usb 1-1: USB disconnect, device number 52 [ 1261.342059][T23682] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1261.365712][T23684] FAULT_INJECTION: forcing a failure. [ 1261.365712][T23684] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1261.422846][T23684] CPU: 0 UID: 0 PID: 23684 Comm: syz.4.4262 Not tainted 6.17.0-rc1-syzkaller-00199-gdfd4b508c8c6 #0 PREEMPT(full) [ 1261.422878][T23684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1261.422890][T23684] Call Trace: [ 1261.422898][T23684] [ 1261.422909][T23684] dump_stack_lvl+0x189/0x250 [ 1261.422939][T23684] ? __pfx____ratelimit+0x10/0x10 [ 1261.422967][T23684] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1261.422992][T23684] ? __pfx__printk+0x10/0x10 [ 1261.423023][T23684] ? rcu_is_watching+0x15/0xb0 [ 1261.423045][T23684] should_fail_ex+0x414/0x560 [ 1261.423074][T23684] _copy_to_user+0x31/0xb0 [ 1261.423099][T23684] ? __pfx_virtio_read+0x10/0x10 [ 1261.423121][T23684] rng_dev_read+0x3f2/0x770 [ 1261.423145][T23684] ? __pfx_rng_dev_read+0x10/0x10 [ 1261.423164][T23684] ? common_file_perm+0x1b5/0x230 [ 1261.423198][T23684] ? bpf_lsm_file_permission+0x9/0x20 [ 1261.423224][T23684] ? security_file_permission+0x75/0x290 [ 1261.423251][T23684] ? rw_verify_area+0x2a6/0x4d0 [ 1261.423279][T23684] vfs_readv+0x5a7/0x850 [ 1261.423299][T23684] ? __pfx_rng_dev_read+0x10/0x10 [ 1261.423320][T23684] ? __pfx_vfs_readv+0x10/0x10 [ 1261.423338][T23684] ? vfs_write+0x956/0xb30 [ 1261.423369][T23684] ? lock_release+0x4b/0x3e0 [ 1261.423402][T23684] ? __fget_files+0x3a0/0x420 [ 1261.423420][T23684] ? __fget_files+0x2a/0x420 [ 1261.423441][T23684] __x64_sys_preadv+0x197/0x2a0 [ 1261.423472][T23684] ? __pfx___x64_sys_preadv+0x10/0x10 [ 1261.423541][T23684] ? rcu_is_watching+0x15/0xb0 [ 1261.423563][T23684] ? rcu_is_watching+0x15/0xb0 [ 1261.423585][T23684] do_syscall_64+0xfa/0x3b0 [ 1261.423615][T23684] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1261.423636][T23684] ? clear_bhb_loop+0x60/0xb0 [ 1261.423658][T23684] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1261.423679][T23684] RIP: 0033:0x7fd7eab8ebe9 [ 1261.423696][T23684] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1261.423715][T23684] RSP: 002b:00007fd7eba7b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 1261.423738][T23684] RAX: ffffffffffffffda RBX: 00007fd7eadb5fa0 RCX: 00007fd7eab8ebe9 [ 1261.423755][T23684] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000003 [ 1261.423768][T23684] RBP: 00007fd7eba7b090 R08: 0000000001000000 R09: 0000000000000000 [ 1261.423782][T23684] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1261.423794][T23684] R13: 00007fd7eadb6038 R14: 00007fd7eadb5fa0 R15: 00007fd7eaedfa28 [ 1261.423815][T23684] [ 1261.669958][ C0] vkms_vblank_simulate: vblank timer overrun [ 1261.927675][T23694] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 1262.110869][ T5924] usb 9-1: USB disconnect, device number 117 [ 1262.348479][T23701] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4266'. [ 1262.417730][T23701] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1262.436361][T23701] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1262.602334][T23710] bridge_slave_0: left allmulticast mode [ 1262.621177][T23715] netlink: 'syz.8.4271': attribute type 3 has an invalid length. [ 1262.639268][T23710] bridge_slave_0: left promiscuous mode [ 1262.664548][T23710] bridge0: port 1(bridge_slave_0) entered disabled state [ 1262.784357][T23715] netlink: 'syz.8.4271': attribute type 3 has an invalid length. [ 1262.999391][T23715] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4271'. [ 1263.012302][T23710] bridge_slave_1: left allmulticast mode [ 1263.084213][T23710] bridge_slave_1: left promiscuous mode [ 1263.090061][T23710] bridge0: port 2(bridge_slave_1) entered disabled state [ 1263.116993][T23710] bond0: (slave bond_slave_0): Releasing backup interface [ 1263.134492][ T5932] usb 1-1: new low-speed USB device number 53 using dummy_hcd [ 1263.147984][T23710] bond0: (slave bond_slave_1): Releasing backup interface [ 1263.206764][T23710] team0: Port device team_slave_0 removed [ 1263.238132][T23710] team0: Port device team_slave_1 removed [ 1263.251605][T23710] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1263.270232][T23710] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1263.301048][T23710] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1263.310300][ T5932] usb 1-1: config 0 interface 0 altsetting 129 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1263.321725][ T5932] usb 1-1: config 0 interface 0 altsetting 129 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1263.423883][T23710] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1263.448779][T23710] team0: Port device batadv1 removed [ 1263.484552][ T5932] usb 1-1: config 0 interface 0 altsetting 129 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1263.560088][T23723] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4273'. [ 1263.575036][ T5932] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1263.584909][ T5932] usb 1-1: New USB device found, idVendor=28bd, idProduct=0074, bcdDevice= 0.00 [ 1263.616956][ T5932] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1263.779584][ T5932] usb 1-1: config 0 descriptor?? [ 1263.821476][T23731] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1263.978924][T23731] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4275'. [ 1264.088851][T23735] FAULT_INJECTION: forcing a failure. [ 1264.088851][T23735] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1264.103639][T23735] CPU: 1 UID: 0 PID: 23735 Comm: syz.4.4276 Not tainted 6.17.0-rc1-syzkaller-00199-gdfd4b508c8c6 #0 PREEMPT(full) [ 1264.103671][T23735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1264.103688][T23735] Call Trace: [ 1264.103697][T23735] [ 1264.103706][T23735] dump_stack_lvl+0x189/0x250 [ 1264.103735][T23735] ? __pfx____ratelimit+0x10/0x10 [ 1264.103765][T23735] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1264.103788][T23735] ? __pfx__printk+0x10/0x10 [ 1264.103817][T23735] ? lock_acquire+0x5f/0x360 [ 1264.103848][T23735] should_fail_ex+0x414/0x560 [ 1264.103877][T23735] prepare_alloc_pages+0x213/0x610 [ 1264.103901][T23735] __alloc_frozen_pages_noprof+0x123/0x370 [ 1264.103924][T23735] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1264.103950][T23735] ? policy_nodemask+0x27c/0x720 [ 1264.103978][T23735] ? rcu_is_watching+0x15/0xb0 [ 1264.104000][T23735] alloc_pages_mpol+0x232/0x4a0 [ 1264.104031][T23735] vma_alloc_folio_noprof+0xe4/0x200 [ 1264.104058][T23735] ? rcu_is_watching+0x15/0xb0 [ 1264.104076][T23735] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 1264.104107][T23735] ? rcu_is_watching+0x15/0xb0 [ 1264.104126][T23735] ? lock_release+0x4b/0x3e0 [ 1264.104154][T23735] folio_prealloc+0x30/0x180 [ 1264.104183][T23735] __handle_mm_fault+0x2ab9/0x5440 [ 1264.104225][T23735] ? rcu_is_watching+0x15/0xb0 [ 1264.104245][T23735] ? __pfx___handle_mm_fault+0x10/0x10 [ 1264.104280][T23735] ? find_vma+0xe7/0x160 [ 1264.104305][T23735] ? __pfx_find_vma+0x10/0x10 [ 1264.104330][T23735] ? __mutex_trylock_common+0x153/0x260 [ 1264.104354][T23735] handle_mm_fault+0x40a/0x8e0 [ 1264.104385][T23735] do_user_addr_fault+0x764/0x1390 [ 1264.104426][T23735] exc_page_fault+0x76/0xf0 [ 1264.104454][T23735] asm_exc_page_fault+0x26/0x30 [ 1264.104474][T23735] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 1264.104498][T23735] Code: 0a 04 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 1264.104517][T23735] RSP: 0018:ffffc90011057ae8 EFLAGS: 00050246 [ 1264.104537][T23735] RAX: ffffffff84c7f101 RBX: 0000000000000040 RCX: 0000000000000040 [ 1264.104552][T23735] RDX: 0000000000000000 RSI: ffffc90011057b80 RDI: 0000200000034000 [ 1264.104567][T23735] RBP: ffffc90011057c30 R08: ffffc90011057bbf R09: 1ffff9200220af77 [ 1264.104583][T23735] R10: dffffc0000000000 R11: fffff5200220af78 R12: 0000200000034040 [ 1264.104599][T23735] R13: 00007ffffffff000 R14: ffffc90011057b80 R15: 0000200000034000 [ 1264.104618][T23735] ? _copy_from_user+0x31/0xb0 [ 1264.104646][T23735] _copy_to_user+0x8a/0xb0 [ 1264.104668][T23735] ? __pfx_virtio_read+0x10/0x10 [ 1264.104690][T23735] rng_dev_read+0x3f2/0x770 [ 1264.104713][T23735] ? __pfx_rng_dev_read+0x10/0x10 [ 1264.104732][T23735] ? common_file_perm+0x1b5/0x230 [ 1264.104765][T23735] ? bpf_lsm_file_permission+0x9/0x20 [ 1264.104791][T23735] ? security_file_permission+0x75/0x290 [ 1264.104818][T23735] ? rw_verify_area+0x2a6/0x4d0 [ 1264.104846][T23735] vfs_readv+0x5a7/0x850 [ 1264.104866][T23735] ? __pfx_rng_dev_read+0x10/0x10 [ 1264.104887][T23735] ? __pfx_vfs_readv+0x10/0x10 [ 1264.104905][T23735] ? vfs_write+0x956/0xb30 [ 1264.104936][T23735] ? lock_release+0x4b/0x3e0 [ 1264.104969][T23735] ? __fget_files+0x3a0/0x420 [ 1264.104986][T23735] ? __fget_files+0x2a/0x420 [ 1264.105008][T23735] __x64_sys_preadv+0x197/0x2a0 [ 1264.105037][T23735] ? __pfx___x64_sys_preadv+0x10/0x10 [ 1264.105065][T23735] ? rcu_is_watching+0x15/0xb0 [ 1264.105087][T23735] ? rcu_is_watching+0x15/0xb0 [ 1264.105108][T23735] do_syscall_64+0xfa/0x3b0 [ 1264.105138][T23735] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1264.105158][T23735] ? clear_bhb_loop+0x60/0xb0 [ 1264.105181][T23735] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1264.105207][T23735] RIP: 0033:0x7fd7eab8ebe9 [ 1264.105225][T23735] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1264.105242][T23735] RSP: 002b:00007fd7eba7b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 1264.105262][T23735] RAX: ffffffffffffffda RBX: 00007fd7eadb5fa0 RCX: 00007fd7eab8ebe9 [ 1264.105277][T23735] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000003 [ 1264.105291][T23735] RBP: 00007fd7eba7b090 R08: 0000000001000000 R09: 0000000000000000 [ 1264.105305][T23735] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1264.105316][T23735] R13: 00007fd7eadb6038 R14: 00007fd7eadb5fa0 R15: 00007fd7eaedfa28 [ 1264.105339][T23735] [ 1264.654474][ C1] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 1264.768414][ T5932] hid (null): unknown global tag 0x28 [ 1264.773865][ T5932] hid (null): unknown global tag 0xd [ 1264.779239][ T5932] hid (null): invalid report_size 415 [ 1264.792088][ T5932] uclogic 0003:28BD:0074.0055: interface is invalid, ignoring [ 1264.821027][ T5932] usb 1-1: USB disconnect, device number 53 [ 1265.266695][T23741] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1265.283258][T23748] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1265.293583][T23741] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1265.304708][T23748] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1265.401385][T23748] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(7) [ 1265.407945][T23748] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1265.427628][T23748] vhci_hcd vhci_hcd.0: Device attached [ 1265.449169][T23760] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1265.500361][T23760] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1265.635374][ T5932] vhci_hcd: vhci_device speed not set [ 1265.708357][ T5932] usb 45-1: new full-speed USB device number 3 using vhci_hcd [ 1265.750073][T23757] vhci_hcd: connection reset by peer [ 1265.762213][T13642] vhci_hcd: stop threads [ 1265.769113][T13642] vhci_hcd: release socket [ 1265.869653][T13642] vhci_hcd: disconnect device [ 1266.427030][T23773] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4285'. [ 1267.195520][T23787] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1267.294767][T23787] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1267.346267][T23765] loop6: detected capacity change from 0 to 524287999 [ 1267.384189][ T1212] usb 9-1: new high-speed USB device number 118 using dummy_hcd [ 1267.414712][ T9] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 1267.483263][T23791] netlink: 'syz.7.4290': attribute type 3 has an invalid length. [ 1267.500029][T23791] netlink: 'syz.7.4290': attribute type 3 has an invalid length. [ 1267.510326][T23791] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4290'. [ 1267.544219][ T1212] usb 9-1: Using ep0 maxpacket: 32 [ 1267.575936][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 1267.591655][ T9] usb 1-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 1267.600533][ T1212] usb 9-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1267.633687][T23794] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4284'. [ 1267.654012][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1267.662795][T23794] bridge_slave_1: left allmulticast mode [ 1267.671521][ T9] usb 1-1: Product: syz [ 1267.684642][ T1212] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1267.688941][ T9] usb 1-1: Manufacturer: syz [ 1267.691325][ T1212] usb 9-1: New USB device found, idVendor=056e, idProduct=00fd, bcdDevice= 0.00 [ 1267.708589][ T9] usb 1-1: SerialNumber: syz [ 1267.713315][T23794] bridge_slave_1: left promiscuous mode [ 1267.721160][T23794] bridge0: port 2(bridge_slave_1) entered disabled state [ 1267.771629][ T9] usb 1-1: config 0 descriptor?? [ 1267.794886][T23794] bridge_slave_0: left allmulticast mode [ 1267.804670][T23794] bridge_slave_0: left promiscuous mode [ 1267.816663][T23794] bridge0: port 1(bridge_slave_0) entered disabled state [ 1267.835906][ T9] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 1267.842600][ T1212] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1267.899108][ T1212] usb 9-1: config 0 descriptor?? [ 1268.063934][T23794] batman_adv: batadv0: Interface deactivated: macsec1 [ 1268.300777][T23814] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1268.310069][T23814] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1268.318582][T23786] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4289'. [ 1268.364488][ T1212] usbhid 9-1:0.0: can't add hid device: -71 [ 1268.385072][ T1212] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 1268.425900][ T1212] usb 9-1: USB disconnect, device number 118 [ 1268.555051][T23794] batman_adv: batadv0: Removing interface: macsec1 [ 1268.900672][T23818] syzkaller1: entered promiscuous mode [ 1268.901429][T23786] vcan0: tx drop: invalid da for name 0x00000000000000c7 [ 1269.048954][T23829] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1269.096463][T23829] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1269.104305][ T9] gspca_topro: reg_w err -110 [ 1269.109154][T23818] syzkaller1: entered allmulticast mode [ 1269.134195][ T9] gspca_topro: Sensor soi763a [ 1270.262695][T23860] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1270.276366][T16652] usb 1-1: USB disconnect, device number 54 [ 1270.304882][T23860] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1270.345735][T23860] fuse: Bad value for 'fd' [ 1270.351592][T23863] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1270.595988][T23871] veth0: entered promiscuous mode [ 1270.615421][T23871] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4310'. [ 1270.655124][T23863] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1270.758686][T23866] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1270.804514][ T5932] vhci_hcd: vhci_device speed not set [ 1270.962098][T23880] IPVS: set_ctl: invalid protocol: 33 172.20.20.170:20001 [ 1270.985794][T23863] netlink: 136 bytes leftover after parsing attributes in process `syz.6.4306'. [ 1271.711550][T23892] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4315'. [ 1271.735922][T23892] netlink: 'syz.0.4315': attribute type 4 has an invalid length. [ 1271.758767][T23892] netlink: 'syz.0.4315': attribute type 4 has an invalid length. [ 1272.075703][T23894] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1272.106408][T23894] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1272.698043][T23903] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1272.712767][T23903] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1273.793467][T23928] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 1273.913950][T23934] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4327'. [ 1273.928597][T23934] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4327'. [ 1273.943897][T23934] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4327'. [ 1273.969705][T23937] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1274.011048][T23941] netlink: 'syz.8.4330': attribute type 10 has an invalid length. [ 1274.016436][T23937] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1274.022912][T23941] dummy0: left allmulticast mode [ 1274.032180][T23941] dummy0: left promiscuous mode [ 1274.040166][T23941] bridge0: port 1(dummy0) entered disabled state [ 1274.118895][T23949] netlink: 'syz.8.4330': attribute type 10 has an invalid length. [ 1274.160805][T23941] dummy0: entered promiscuous mode [ 1274.169413][T23941] dummy0: entered allmulticast mode [ 1274.214961][T23941] team0: Port device dummy0 added [ 1274.249347][T23934] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4327'. [ 1274.362264][T23959] lo: entered promiscuous mode [ 1274.378812][T23959] tunl0: entered promiscuous mode [ 1274.396674][T23959] gre0: entered promiscuous mode [ 1274.454026][T23959] gretap0: entered promiscuous mode [ 1274.464128][T23959] erspan0: entered promiscuous mode [ 1274.470576][T23959] ip_vti0: entered promiscuous mode [ 1274.486120][T23959] ip6_vti0: entered promiscuous mode [ 1274.493338][T23959] sit0: entered promiscuous mode [ 1274.515711][T23959] ip6tnl0: entered promiscuous mode [ 1274.527369][T23959] ip6gre0: entered promiscuous mode [ 1274.533573][T23959] ip6gretap0: entered promiscuous mode [ 1274.554324][T23959] bridge0: port 1(bridge_slave_0) entered blocking state [ 1274.561570][T23959] bridge0: port 1(bridge_slave_0) entered listening state [ 1274.644212][T23959] bridge0: entered promiscuous mode [ 1274.652433][T23959] vcan0: entered promiscuous mode [ 1274.659016][T23959] bond0: left allmulticast mode [ 1274.664168][T23959] bond_slave_0: left allmulticast mode [ 1274.669944][T23959] bond_slave_1: left allmulticast mode [ 1274.678542][T23959] team0: entered promiscuous mode [ 1274.683747][T23959] team_slave_0: entered promiscuous mode [ 1274.690101][T23959] team_slave_1: entered promiscuous mode [ 1274.696372][T23959] batadv1: entered promiscuous mode [ 1274.704939][T23959] dummy0: entered promiscuous mode [ 1274.711651][T23959] nlmon0: entered promiscuous mode [ 1274.988851][T23970] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1275.179843][T23959] caif0: entered promiscuous mode [ 1275.195772][T23959] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1275.275057][ T5932] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 1275.368001][T23949] dummy0: left promiscuous mode [ 1275.372994][T23949] dummy0: left allmulticast mode [ 1275.381236][T23949] team0: Port device dummy0 removed [ 1275.434120][ T5932] usb 1-1: Using ep0 maxpacket: 32 [ 1275.444419][ T5932] usb 1-1: config 0 has an invalid interface number: 206 but max is 1 [ 1275.453101][ T5932] usb 1-1: config 0 has an invalid descriptor of length 147, skipping remainder of the config [ 1275.476237][ T5932] usb 1-1: config 0 has no interface number 1 [ 1275.546565][T23949] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1275.573767][ T5932] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1275.686737][ T5932] usb 1-1: config 0 interface 206 has no altsetting 0 [ 1275.717431][ T5932] usb 1-1: New USB device found, idVendor=13d3, idProduct=3393, bcdDevice=6b.ed [ 1275.885813][ T5932] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1276.018462][ T5932] usb 1-1: Product: syz [ 1276.022727][ T5932] usb 1-1: Manufacturer: syz [ 1276.022749][ T5932] usb 1-1: SerialNumber: syz [ 1276.031853][ T5932] usb 1-1: config 0 descriptor?? [ 1276.239173][T16652] usb 1-1: USB disconnect, device number 55 [ 1276.443660][T23980] netlink: 60 bytes leftover after parsing attributes in process `syz.8.4334'. [ 1276.464430][T23980] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1276.620895][T23996] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1276.637913][T23996] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1276.670348][T23996] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1276.685924][T23996] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1277.062132][T24007] netlink: 104 bytes leftover after parsing attributes in process `syz.6.4341'. [ 1277.734270][ T5932] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 1277.891315][ T5932] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 1277.919532][ T5932] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1277.933908][T24018] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4344'. [ 1278.223179][ T5932] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1278.266764][ T5932] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1278.379236][ T5932] usb 1-1: Manufacturer: syz [ 1278.412013][ T5932] usb 1-1: config 0 descriptor?? [ 1278.617693][T24025] netlink: 60 bytes leftover after parsing attributes in process `syz.8.4345'. [ 1281.308211][ T5932] rc_core: IR keymap rc-hauppauge not found [ 1281.314611][ T5932] Registered IR keymap rc-empty [ 1281.323996][ T5932] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 1281.335473][ T5932] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input150 [ 1282.042171][ T5932] usb 1-1: USB disconnect, device number 56 [ 1289.614989][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 1304.979215][ C0] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1304.986527][ C0] bridge0: topology change detected, propagating [ 1305.738571][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1305.761002][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1310.743087][ C0] IPVS: sh: UDP 0.0.0.0:0 - no destination available [ 1331.224613][ C1] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 1367.296220][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1367.314427][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1429.481422][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1429.497273][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1443.860438][ C0] IPVS: sh: UDP 0.0.0.0:0 - no destination available [ 1459.227765][ C1] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 1501.320102][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1501.335760][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1507.174002][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1507.181026][ C0] rcu: (detected by 0, t=10502 jiffies, g=151157, q=1659294 ncpus=2) [ 1507.189212][ C0] rcu: All QSes seen, last rcu_preempt kthread activity 3400 (4295087804-4295084404), jiffies_till_next_fqs=1, root ->qsmask 0x0 [ 1507.202541][ C0] rcu: rcu_preempt kthread starved for 3400 jiffies! g151157 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 1507.213768][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1507.223770][ C0] rcu: RCU grace-period kthread stack dump: [ 1507.229687][ C0] task:rcu_preempt state:R running task stack:27560 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 1507.243242][ C0] Call Trace: [ 1507.246557][ C0] [ 1507.249516][ C0] __schedule+0x1798/0x4cc0 [ 1507.254120][ C0] ? __pfx___schedule+0x10/0x10 [ 1507.259010][ C0] ? get_page_from_freelist+0x21e4/0x22c0 [ 1507.264761][ C0] ? rcu_read_lock_held+0xa/0x50 [ 1507.269735][ C0] ? __update_page_owner_handle+0x5a/0x570 [ 1507.275581][ C0] ? rcu_is_watching+0x15/0xb0 [ 1507.280379][ C0] preempt_schedule_irq+0xb5/0x150 [ 1507.285530][ C0] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 1507.291287][ C0] ? __set_page_owner+0x35f/0x4a0 [ 1507.296445][ C0] ? rcu_is_watching+0x15/0xb0 [ 1507.301241][ C0] ? rcu_irq_exit_check_preempt+0xd6/0x210 [ 1507.307087][ C0] irqentry_exit+0x6f/0x90 [ 1507.311557][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1507.317571][ C0] RIP: 0010:unwind_next_frame+0x5d/0x2390 [ 1507.323326][ C0] Code: 3c 28 00 74 08 48 89 df e8 b0 53 b0 00 48 89 5c 24 18 49 8b 5e 48 4d 8d 6e 38 4c 89 e8 48 c1 e8 03 48 89 44 24 58 80 3c 28 00 <74> 08 4c 89 ef e8 89 53 b0 00 4d 8b 7e 38 4d 89 f4 49 c1 ec 03 41 [ 1507.343056][ C0] RSP: 0018:ffffc90000157318 EFLAGS: 00000246 [ 1507.349161][ C0] RAX: 1ffff9200002ae84 RBX: ffffffff81ad112e RCX: e06c756616193400 [ 1507.357171][ C0] RDX: dffffc0000000000 RSI: ffffffff81ad112e RDI: ffffc900001573e8 [ 1507.365184][ C0] RBP: dffffc0000000000 R08: ffffc900001574b0 R09: 0000000000000006 [ 1507.373186][ C0] R10: ffffc90000157438 R11: ffffffff81ac3870 R12: ffff88801ce9da00 [ 1507.381405][ C0] R13: ffffc90000157420 R14: ffffc900001573e8 R15: ffffc900001573e8 [ 1507.389420][ C0] ? __timer_delete_sync+0x1fe/0x2d0 [ 1507.394765][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1507.400959][ C0] ? __timer_delete_sync+0x1fe/0x2d0 [ 1507.406380][ C0] ? unwind_next_frame+0x19ae/0x2390 [ 1507.411707][ C0] ? unwind_next_frame+0xa5/0x2390 [ 1507.416857][ C0] ? __try_to_del_timer_sync+0x29/0x3a0 [ 1507.422441][ C0] ? __timer_delete_sync+0x1fe/0x2d0 [ 1507.427764][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1507.433951][ C0] arch_stack_walk+0x11c/0x150 [ 1507.438755][ C0] ? __timer_delete_sync+0x1fe/0x2d0 [ 1507.444082][ C0] stack_trace_save+0x9c/0xe0 [ 1507.448795][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1507.454214][ C0] kasan_save_track+0x3e/0x80 [ 1507.458931][ C0] ? kasan_save_track+0x3e/0x80 [ 1507.463816][ C0] ? __kasan_slab_alloc+0x6c/0x80 [ 1507.468887][ C0] ? kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 1507.474570][ C0] ? fill_pool+0x100/0x570 [ 1507.479022][ C0] ? debug_object_assert_init+0x2b1/0x380 [ 1507.484801][ C0] ? __try_to_del_timer_sync+0x29/0x3a0 [ 1507.490382][ C0] ? __timer_delete_sync+0x1fe/0x2d0 [ 1507.495735][ C0] __kasan_slab_alloc+0x6c/0x80 [ 1507.500632][ C0] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 1507.506132][ C0] ? fill_pool+0x100/0x570 [ 1507.510588][ C0] fill_pool+0x100/0x570 [ 1507.514898][ C0] ? debug_object_assert_init+0x288/0x380 [ 1507.520652][ C0] ? rcu_is_watching+0x15/0xb0 [ 1507.525533][ C0] ? lock_acquire+0x5f/0x360 [ 1507.530199][ C0] ? __pfx_fill_pool+0x10/0x10 [ 1507.535009][ C0] ? debug_object_assert_init+0x288/0x380 [ 1507.540800][ C0] debug_object_assert_init+0x2b1/0x380 [ 1507.546395][ C0] ? rcu_is_watching+0x15/0xb0 [ 1507.551199][ C0] __try_to_del_timer_sync+0x29/0x3a0 [ 1507.556605][ C0] ? rcu_is_watching+0x15/0xb0 [ 1507.561403][ C0] __timer_delete_sync+0x1fe/0x2d0 [ 1507.566554][ C0] ? __pfx___timer_delete_sync+0x10/0x10 [ 1507.572227][ C0] ? lock_release+0x4b/0x3e0 [ 1507.576868][ C0] ? schedule+0x16f/0x360 [ 1507.581237][ C0] schedule_timeout+0x133/0x270 [ 1507.586126][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 1507.591533][ C0] ? rcu_is_watching+0x15/0xb0 [ 1507.596333][ C0] ? __pfx_process_timeout+0x10/0x10 [ 1507.601662][ C0] ? prepare_to_swait_event+0x341/0x380 [ 1507.607254][ C0] rcu_gp_fqs_loop+0x301/0x1540 [ 1507.612154][ C0] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 1507.618350][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1507.623769][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1507.629018][ C0] rcu_gp_kthread+0x99/0x390 [ 1507.633654][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1507.638894][ C0] ? __kthread_parkme+0x7b/0x200 [ 1507.643873][ C0] ? __kthread_parkme+0x1a1/0x200 [ 1507.648929][ C0] kthread+0x70e/0x8a0 [ 1507.653034][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1507.658276][ C0] ? __pfx_kthread+0x10/0x10 [ 1507.662934][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1507.668174][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 1507.673420][ C0] ? __pfx_kthread+0x10/0x10 [ 1507.678313][ C0] ret_from_fork+0x3f9/0x770 [ 1507.682955][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1507.688105][ C0] ? __switch_to_asm+0x39/0x70 [ 1507.692899][ C0] ? __switch_to_asm+0x33/0x70 [ 1507.697700][ C0] ? __pfx_kthread+0x10/0x10 [ 1507.702364][ C0] ret_from_fork_asm+0x1a/0x30 [ 1507.707174][ C0] [ 1507.710223][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 1507.716580][ C0] Sending NMI from CPU 0 to CPUs 1: [ 1507.721829][ C1] NMI backtrace for cpu 1 [ 1507.721853][ C1] CPU: 1 UID: 0 PID: 20291 Comm: kworker/u8:17 Not tainted 6.17.0-rc1-syzkaller-00199-gdfd4b508c8c6 #0 PREEMPT(full) [ 1507.721876][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1507.721888][ C1] Workqueue: events_unbound nsim_dev_trap_report_work [ 1507.721923][ C1] RIP: 0010:process_backlog+0x4b8/0x14f0 [ 1507.721951][ C1] Code: 59 f8 49 bf 00 00 00 00 00 fc ff df 4e 8d 24 e5 10 ed bd 8d 4c 89 e0 48 c1 e8 03 42 80 3c 38 00 74 08 4c 89 e7 e8 48 5a bd f8 <4d> 8b 24 24 48 c7 c0 68 0a a2 92 49 01 c4 48 8b 44 24 48 42 0f b6 [ 1507.721966][ C1] RSP: 0018:ffffc90000a08b00 EFLAGS: 00000246 [ 1507.721981][ C1] RAX: 1ffffffff1b7bda3 RBX: ffffffff8965b8b5 RCX: ffff888033a11e00 [ 1507.721995][ C1] RDX: 0000000000000100 RSI: 0000000000000001 RDI: 0000000000000008 [ 1507.722006][ C1] RBP: ffffc90000a08c28 R08: ffff8881dda36c8f R09: 0000000000000000 [ 1507.722018][ C1] R10: ffff8881dda36c80 R11: ffffed103bb46d92 R12: ffffffff8dbded18 [ 1507.722031][ C1] R13: 0000000000000001 R14: ffff8881dda36c80 R15: dffffc0000000000 [ 1507.722044][ C1] FS: 0000000000000000(0000) GS:ffff888125d1b000(0000) knlGS:0000000000000000 [ 1507.722059][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1507.722071][ C1] CR2: 0000200000404030 CR3: 000000000df36000 CR4: 00000000003526f0 [ 1507.722087][ C1] DR0: 0000000000000007 DR1: 000000000000000b DR2: 0000000000000002 [ 1507.722098][ C1] DR3: 0000000000000010 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1507.722143][ C1] Call Trace: [ 1507.722150][ C1] [ 1507.722169][ C1] ? __pfx_process_backlog+0x10/0x10 [ 1507.722198][ C1] __napi_poll+0xc4/0x360 [ 1507.722218][ C1] ? rcu_is_watching+0x15/0xb0 [ 1507.722238][ C1] net_rx_action+0x707/0xe30 [ 1507.722269][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 1507.722295][ C1] ? rcu_is_watching+0x15/0xb0 [ 1507.722323][ C1] handle_softirqs+0x283/0x870 [ 1507.722342][ C1] ? do_softirq+0xec/0x180 [ 1507.722360][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 1507.722380][ C1] ? nsim_dev_trap_report_work+0x7c7/0xb80 [ 1507.722407][ C1] do_softirq+0xec/0x180 [ 1507.722422][ C1] [ 1507.722428][ C1] [ 1507.722436][ C1] ? __pfx_do_softirq+0x10/0x10 [ 1507.722458][ C1] ? devlink_trap_report+0x216/0x6a0 [ 1507.722482][ C1] ? rcu_is_watching+0x15/0xb0 [ 1507.722500][ C1] __local_bh_enable_ip+0x17d/0x1c0 [ 1507.722517][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 1507.722535][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 1507.722557][ C1] ? nsim_dev_trap_report_work+0x7c7/0xb80 [ 1507.722584][ C1] nsim_dev_trap_report_work+0x7c7/0xb80 [ 1507.722616][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 1507.722634][ C1] process_scheduled_works+0xade/0x17b0 [ 1507.722663][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 1507.722686][ C1] worker_thread+0x8a0/0xda0 [ 1507.722714][ C1] kthread+0x70e/0x8a0 [ 1507.722736][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1507.722753][ C1] ? __pfx_kthread+0x10/0x10 [ 1507.722774][ C1] ? rcu_is_watching+0x15/0xb0 [ 1507.722791][ C1] ? __pfx_kthread+0x10/0x10 [ 1507.722811][ C1] ret_from_fork+0x3f9/0x770 [ 1507.722830][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1507.722850][ C1] ? __switch_to_asm+0x39/0x70 [ 1507.722872][ C1] ? __switch_to_asm+0x33/0x70 [ 1507.722893][ C1] ? __pfx_kthread+0x10/0x10 [ 1507.722914][ C1] ret_from_fork_asm+0x1a/0x30 [ 1507.722942][ C1]