last executing test programs: 16m12.955431934s ago: executing program 4 (id=907): r0 = openat$audio1(0xffffffffffffff9c, 0x0, 0x101480, 0x0) epoll_wait(0xffffffffffffffff, &(0x7f0000000300)=[{}, {}, {}], 0x3, 0x6bb00000) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000080)={0xf0f03c, 0x2}) 16m12.849567967s ago: executing program 4 (id=909): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x8, 0xffffffffffffff01, 0x8, 0x80000001, 0x3}, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) unshare(0x20400) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) ioctl$TIOCMGET(r2, 0x541e, &(0x7f0000000040)) openat$sndseq(0xffffffffffffff9c, 0x0, 0x40041) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001a80)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0), 0x84000) stat(&(0x7f0000000380)='./file0/file0\x00', &(0x7f0000000580)) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) bind$alg(0xffffffffffffffff, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r4 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) syz_genetlink_get_family_id$fou(&(0x7f0000000040), r4) sendmsg$alg(r4, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x810}, 0x20044000) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)={0x14, 0x0, 0x22, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20000011}, 0x4) sendmsg$IPVS_CMD_GET_DAEMON(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x0, 0x0, 0x70bd29, 0x25dfdbff}, 0x14}}, 0x0) read$FUSE(r3, &(0x7f00000041c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r3, &(0x7f0000006280)="897c6500ff3035465c7acb4e06980b05687c1480c7aafe631c0543db2bf0d6f539506e8782da06c1ca018774d72e9e5a3418ab66ee78dad68457b17ec9d47bf7d8272d607c1c0a4bd906f0cee7f8451828d2458596bdd6a459ba18ebaf61b38f5d66c27fa8a024ad7832a85e58689a4c254c94cbcf7208fce6e61d9566459789d15a6f91dd7db7c54cc3a94da956fb290a8a15f849270bc459d9d9f47801be86dd5c9d18382081a993b7bfde5c28adca4c71329afd6be743b076033b5859891703eb65fa256d6f47450b6edacbd05a9bd8b372e90cfc30f32826566dac6c48e6ef001881cbc30482f9ec469e476a101da496b8c0785eaf875d3608b0c49e9d39baaa1041f903a805f0f24aa63722fa2d87b98595fa5cfaf8b79c458de43ee39904e7cac7540a934b4108957785d58807abff186949f1b94cd21b724aff34ac45c7066dcdbd68ea7b766af9d045cd7fafeafc5c5a0c3400ef4e0c71a6fdd5b8d68a6f317644cda9d2fd2c839a82b97b3d909b54c672227bef573c9de1991d65a63017f724d1f7f1575e69db53318a7fd7065b303e751518c8eef04f642dbd4dfa349040a7b5401050ffc2b4ef62803a7c8eaba99e011dfac24d81b2b61e0b0581e53bf520f623eca17f0545c5e59ff15b527475f970f589894ae589145fa4283f7225088ccfeba1d72e9128f8c223ae1840f2edae3dbcdf7e560d5cdf4f71c9ada1931c0f8312c000101b264aaddb9fab166ba8d8903d6098eca20935ca607ea79e936798b3dfb22a7e159abb234cf21f3733dbf263a8ff116092f251659108892b2e21e1b428fd225096a5040270b2d70347013eaa1fd8e452942200283aab092c4ffc5b8b427b5d691a5a773e09da20539ff0f8214331c5d84107ae8a59aeb58efe22d7a079e446f1dfb07510377799bfdc7ee59cabcd76af0fe8a427ac8258ff33bbad5a8061f1cfdfbf375d73d676cc7916d6658ce46a0b17ad6350150f98e3512b513e25ca73f5f5df0a1fb9582ace7906c493fe1fd2889d9aac0b7c29c2b6c205537627bad64df433336a5ace32ca871e51b4dab0fbb00886a1fa81a98b74de0a26cebf65723515ebb807fc3c161ed42d1a7b6b55717613577ea437f3a2967c66ce45ff85a6a35b7cd40625fc575b107d7394e3d2db51d58347276c33e21f50b5a6b5672bf9fda63139bb75aead1fe4ee9a4064af5a5958466aa39faa6d821489fa415224c8d69d3b5922236832c2b1e4f6b8863b32f9aea83fb522a2de081d674502b48f73ce6db98d84136059b4a6676bc85ac6b7626329afa9bc7d3f9f2caa3c4d872744e0a8e02d72a75c6c545b8ec8e15b6fb0fe4185bd0d154960e6fef05ba40e5fe2968eb1301dcc52a03337179e74ba1522af93d77827845f8941c69ed8bb84567e3c63f1cc378a542f1de7007b688ff0a9c69d5861f0b85402c30a2fd391c52bafbe65f8e82135fd38361d7c0b43c982b2f3e7cb09c40c7e215114f4243d670cd576bcd93c1e959345170c75d6c3cf89cf8c2c70dc792e646e7c649d4c5f36bb016c7acd466ad58473d40dfef36394e581065a8581ab852250403cf372ac0065bf757fa3f445424ac0d82aec1938a2ea116bdfd306baa1cb06c62a4a97d66ab1b9489469cb8ba842da12e310caed02c5ef05c0be1e1e8c9c8b87d6871c94c57d164d08672b205c948086a06a545b266b7ad902a908681eb188bc51b6190b5cb9d8ca59b8c4c6e7369c00d6f6119fd5d437239e3d3c89cb81e09e560fb817590106015f08e7b09f1e1e65bfab3b8489fa058e24081978b9e25463d9945bfbca81c08885d4b6d4c62e217bd9e19460762f36c66bc948fe31cde089626fbb310e3c78a8d3f2eac21d374d9b58d887235d3a95721168e4b9475849071d60ecfe7ea5d6c4bf60da3747612ef59bb651270f326c0af31bc8c71361f851de34ccb3c8071b96f1128d7ee79b41246e566edd0272dbd3ccfe472b38e5e03d3ef83218bd498e6de8b4d92cb6f82716449ede7ba845028eccdb9137be8a622ac88ac53118fbc39637fa7a93cd3abc6f7671c7804420d66e94720acbcac916950f9baca77fef4217155ccc2cd0507339a0486f9f468eb28772986ee768c63eba671bf8c52e48a2a5dc2cc24fe925368706c2d712dd1064692b0fb2a32ddfbd4a0ffcf9c2abcedaae6e527bc1d42637aff2a275b76a7a7f010e42e1cc1d27141f6c3585a2bf58c6c5789ce61551d10118a000e3764631ec0b7f4b1a6f22a678133a30940b79dc76f863dd9f6e0d7776300898c97cef286c731c2050928c492439256e481652bff0d202db3cfdc54c9816ceea7895357bfa0362fad79afd09ed55189294d6ead7e898ac091cddbe7efcedb314bc02a18dd5bbddc42e089124758bb491fd1536aab27c5c124567bc325e7028bced5a179a011d1cb9a5ffb61d7af863e91ec8e60495561188b74d158ba1418228d44e92915a22eb1c166ef7d6179e84381ed950ffd747f13e24172942d922ca3109fb8b1e4e6264fa4a4eec75ad0d0e22579d90f45d6cd157300e38ae665eb56457202e25a8dd5877ba99725de288660badd2704345d9bad208c903ba27ea167dd45a77f77b6502b525b2973270582858183c784c324c1366fbba8d410c38bf75b41e067f6a9a017c56595161db4fc5639393fdafb1f148d3f416c1adc5fe1ab9cebe4689855c9b4bda6dcba5d5fa858a1b87d2ad23cdf54dbdf4d14aa4462da0b6f1107f4afa0091c2643508861a4d9f133ba77751941bb8fb756abf1a104205b80d47a3b4a59724d959c8b5833da4f56fb6613231f230a9378c9af741e94fd2c7213ac1d7625559b3f032f6c8df3ab441929720fe43d7c548cc661eed5b3c62b3c61f538ea3228376e2a18c6da2ad906322f64fb4865cde8e1889a8e5237fd6a39bbd6662f1dedc22fbd74e4376fa610cd710703dbd3924a38beae69783d1d5abf36122cbb87129ba719042748f060f4303a3199c5891c5040fd8cdb9761b006bf64cdcb65e5cc50a29994b8c1c34b83760ece12ed9ed7c3d2a7f8911cdf23a1afe0d7db1bf342aa0123dd5cd31339f5c8e160c4efef882602b3eccbe76fb690162b8bfb8a31910bcdf9a4a5dde76c2ac2fcd8678add7a000cfdcab398eb2171c026313eb6eb56b4b87bf8ef93f7f8a1c0bcc3775b681d4229ea561cb52281d8ba4315c3694ed08433596884d5a7ce3a8b1f82359846b7136726e2fe37bf4f7b7e2206cdcdb0705ced9f0dcaaa2ed3a78ea70d2cfeab668eb321400fc955e9aeb7bbcf86cd03f02dd443503a1480d9d9f899f53bd747a95293786798fc59fceb09e686a9328da4f929b6201841bbbefaffcf3386abdf69540e3b46a643ec10f0acf21f27c0053dc13f18485dbc898729dfbeaaa4887b58cd442d7ffa941808cd9658595be8650a815b088621278d89f0d8a4252566b923df3a3cd65c0e4af08fad385927251b31d35f75eaf25e6cf13a579aeeb0bcc0a14ca4a20a6831d532be0b2af3821792a2df95131b7fafef245aa19b214053342aa820c35858d13f84e496294529411015c41ed447b5b51dc44a45d52552a2be1abfc157f3ace7bfa32d5b931421d5a152dd66b7bf549311b08325e5a7201f793037b38990bedeca8a647c08d2478670f8fc2b4e8983ea18bcd514daeeeeb9d7a778f783c76edf01bd4beda4b77b612cd2e865c2e4f58ca7ae06147bf66ae6aee221cf9b9505dc07e6fb6cf4f82dc8c406c78e270210c11cf2531011ed678d9dfe1f49c9a69a95a9f3b0e5b624d9c2664d787ab911b75a4a38d63e9d6c353f8aaf433ff961fe5e34d84936ead0d0bc7954caf84e541f5c6f3f20c9eed21eb0316b82c0dc5182540e63a0af25565496792153d6395adc2b8d68b8bcd93dd110ff5685879db4384ec390d44b89663d43a5de3bdc0e103b7c1b355dc5f6fe3518c93628780ba03f156badea65d1d0af8433c9e8a975fdd19453da662a33fa9f0f5fa15fdb216b483fb48370a967246e0b763df8b3bc7924a6c76c4b114f803dbfa3b312e6815b4eb67be167283a9e482d9a5beac250089d069d4c386b7fda5fc228404a0f58b12ca4dc131c381b49b42b570bcfc0dd663f24afaf65a26a21f6d92f52c9f8de36cb76bacbaa0eef98ba6b7dbbc2629a03bb2b6f83fc5adaf20c217bc8d0f0d2421e01472532bcb546aeb2d483c8f95011a3ba1d2fd8086a717cb015dd53064ef4a80b6d6fdc12d9069223fdf2aa9b192a0e0bdb38436f49d9eedfef3665815633fee4344aff11162526362b70b18e1dbedbb5d8c4698860beccf667851878a25a1e766caae2861f2e23404aac859e62fdfeac06a6057554828d7035806e8ab3ee2fa6d711e5811db61231a22f4672f6a11b27641f350bcab78792362e6ebc1c054a643bbbf2746678c14dc567d1f73e37005c8ab6374c4d8d3106384a2d32c5fcf05cb9ba97cb7fa1aff11505a701bead543e555f3901ef3b693d5b9ebf49518c3509af042b7e84b1b867c22b7e08725220e4338fd074edce428212e6a3563a08e2ccd8ab71910256532904542e93d5c7deb5bf5d49beb3202d4da4f643649e55edbb91188cdcf0883a40c6ed6b8a086fb5c50dc08fee00308420121d4c7431b3cfb80f9c1e099423ac451d67b12e930d9e391d0a799c7d4b54a0d56ea0aae00c1d009e21fb5459416b464b227d66ccc1a68da59d64c1583dee54bbcd7d61ffe541fd0fb7452adba91906918966a7d58019ad1f8fdebeceeed7018837b6e4272eefeec8385abe7207fb2d7061fa6cdc478165a98971f9729b818a73edefed976d5c7c0a651c091cfd1174c020e39330a79144271fe4cbc61ea0ffa274d0d87d06dd08c1d5f8a0364d46ef7b54426bc286330c75fa257afeb2715c2ae511ff53b1189cc59ab80b1325fbdcedfdb8f36ed71f70091116e16b52188b794e637755027caac8db8554f8674b844964c710cacd7a9d6b06baf6fef76159a380e639b0d3e66080a7cf7f86baac01dbe47fe687fcef2f3bfbf6f8fba045181dee688360a11ee56e5fc73ed31c0e2924ae57f0cc93c63a30662a65c5d5f17123ae28cc5b74dd13ed81b03dc7fa61dc575668868c0df12d3553269f04ba79084d070abcdbd4745de80e90e4e3e524f27249b5c4a2f2d4c8b331b0cb6d4efe62a298daacc6eacdfe008c1f912795dbdc37098c42db860953120fda709baa6d46f52eaba781505e68561ca0f281e850532ef8e7c779883e312806e1c357bdef8d0dda005e710cfa6eb8686e8bf3bff036b3fcdc4036541d93530ce6f598442c24170b307ef05f23c93aa0ec96831b532d8120402214a940d1fa01ed649061a4a71308be189cffd729a196754fb8a75f23851189589be1b819f0612cad3dc94ccee88f4ab9ef6ac9c7daad8cf94f5ed9496c4c824e5b4f66ce32a80e7a6ef069a32f6812e656aa5f5742bd432afdf026c86e8f28212c1139dad47d7fc07e5c1a83e993daaa4a4bb5f0c9435ccab2a10f867ffe259dba7a1d9168619b1e3048860a5122e4a5d0b00372eaae861a0cc88549852fffa76e6d78739b654d67df15ea97a9a46b7c382d83191a673aa619b4a10ec05bc681379b0d6df824cb6fe158e9d89ae5dd1ef66976f67972b553db52eb6feef836dca6026293f83a61e117754a7424a3da63bd82d017f87f0603e2a9b8fc550aae611681935ae91f7ca2b5341b05a25208bd28f1a202a7f2a213b1d7411ffb557470aec00c4d13c70163f22a038a189710dd19a47e8db4a87c3fd329a63abca172a9810edad2d8e19ef85b57ea4287cfb3d740d7ea3fa9c80d06e1aa84b317f678ddb3c147ba5e0db432125f59ca4944c8e9050281ca82a3ecf67b2a5df678697a52a7297af1ecb03c586af7b91d74e881964ed95f7be12fa07e2a4e71aab8b913a13996fa33e915144bf00e49b8e7adec5b2c4b8165f54ba3155230e241ee023af77a295ab87c40f63f6092ccee05cb08a265abe8f57c9919bf45064b6c2240ba8011db223a283a4e2292d9b59df8c9a4fdc763f0631007db9976f351717db0e6b5f9c6e5f227c2efa1ae5fe0be1af0b22fc164f9f9678a01fe8b059749fe8a2972455732da1989c609d191544ef9fbb3e58da93ec4a582430523f260b776e4d747312747d18a9bae14740f5dcd35fd1072f8a4d81573b5882203be856b62d7e1d87081a9e431872c9d68864197bbc61f15dd8aeae950d34d6ce97182deebd2ad64cabd1c723baf512acfc7e94675b31369bd60e155af79b97bb734312569f736dcd5b5a78223ffaa0f7e93e1a112cb9f6a5b88fe3cf12c30024c16c6b8380fdf086c662665d3751c11617cc4dbd5b8bc7543301a23fbc90ba8d060193cdc2b68c31c734d516707b759f7db009c8f06e69b40154e1cd8ae444afb28134acdf871136b4fd78bd86d7faaaf618afb25e92d1ee37cdff0595278f9565f5eb109e181e9cacec2f22e32e9f34774ee223fdb992febcc5dbc5cceeda16cbcf1434730d859e7e03d36ff17636a7a7e66956b515894da114f3040909f90ce3cfbb2d7d46e37049c0fb124e0683d662eb427cd7b851ada229451e6e3aaee64b9964ced3036bde5d9d80eb062474f96ecfb9b65fcafc719494ac12ab7df245475f2a5e7f85ca4789833ca373e6214d39176c8f51dde87a4cfe5414a20f68bb9f34709979b99533ba3435c4aa56e525195e10ffd00f8e41aee30a909c07b973bbf733d45500b539ebe2206d438216690998d9e256db1b7ac6bef3e810785e1986985c945a2b820323a592721fcfa444934d0faf8aa439d5efca5dcd77b72d1eb91b3790d50d0a7483e354c415f81d99c133d648c1293e795b3c43f9b47e23ef982e10072ea5baafb0df675e69af1807b225afa0cec3eafbde8535d3ecaa0ea6ddbffe4465207425bb003670320324df0aeeb16b38a043f9c0e85673b36def332fd68b2b1e6edda621d0cadebbced8c7fc8f890489115b457249e8d8103676b3207a472804d33e0fe511ac56cd8dc5333b2333892f87b455940ada78fcf5075c358fce990e6f65f095eb416d876ce6f120b8b02cfa6b176ee269c942f881247c3e464cce2aa65c39137607c585aeb4b5f24f5f8e058c9c8b48003c1809da3e8aad1bee7955c3a976d43fe132e2b16f4758a0a9884e51d13b930675a4361ff366b0fed190ad7b2a00385528951e39cd44ea06d8921b9d613d7626221154cf86249a550198fe4e5b05ad3052b474291da0a0a2f701759859bc0392adf243ad5eca89e6d18e28dff99ef95743bcabe75504be8c715cd6360facf3bb06cb97c29989d4f6ff5083573cefe6ef0b39a252a2678112fa88e5b06c9a6bfc9597cc96e5a49710c4fc120fb0da4945b9d94e46de1e9989d0fc3d8d20df23d815b660c799a903f651b0d013f7fe158f1d297f7fcb6a48780ca5525f1d081ada0aafa83552318b848783306549750b6254cf676c7b934cf7fdab992717f0cdc089b34278f3fb151cadde14d0d3250e85a4b0ff2a2778a219aa40563d3ef575285484424b6d0e7cc8392342e4848c6fc8cb20fa1b450cc4c1fea19f3bbdd9e342e6c49cd7ac893b1eda2e93d1d74d20969465946b398fbc733757741ac822c4a118632cd242a439fc37512cf79b7c629504ccc1e7f2f11798955c3262b5e9695625ba74d8050e20f51d4769e1ab938f487f1bc4b55b5abcaa3ec079c2d0972b2ae9bfb7c5423b959119292ea05f1d79d35afe47e49d97c946b193bffc0a8f607f18a6845cecbbdd98cd351db2b2dce05a4848ba84a6a497b4618950130cb7e76c03d0976eb2fb41d3a42a1430063ed8e5b8c67e80fd4fc1148911958babbcbff33a6505de209b0d9320017fd736fd027a16564008ab2e1f48a6dd66c9256730e9fda0a606875d0871b2b9b0bc2ed4e1b696dbf0283c8dc72cf4338e595266f5390bc3a21f988353118f2948fc75d050ea076b73508d9ed89bade0ba305c1f4e5daf9d40d2f5e7ababed8d1b1d919c61a6d3fb149c1a9b44e38585a2fe322f83d73a3aecb44da3f0e82942d75d62ed3f91eb44f3411df014f88839e4cb1e21b9b259d4eb4adaf6b0be433d0ed4c87ec77dde5ee9d566e3dd8d928fc1875c63af26c59daba5ae267d9bd5da72b99a03e6a33cc48ed961ab484ff4a46c2d5fa597e626e00b530d7b9a9705e4e08d03f3a7f2a5a5233ad6340e3b5c89db81ca713b6d7d855c6324955f85109b204566f50178cd88abe3fcba25de905e8ea0b75ad51831761ed9b1af2470f976f05ec73bf74d137c207270cfd614170518cdc449aeeb663e114359c8124eaf2499d8cf5dc84a0872301db2e57b50bd285060ec4390d99d4ae3674ca3bb8679c1b08e566ba4f30daec8684a980055eb43cb5a1306c4b52a154682aa96637e06c869278aa2f74ef7345632c11265ef8ac97e953745302556881ba0cb590fef271c0abb193fb84d18ee3f24d9976ae816b857d6f68d1fdfe10b312c799fe014debf875d04bff8b4f387859e97c6bf13f7083c28a2045a0b5eb09c94e781a165965e8617c0efed1701ea9667aeca26d9577ea7b1242e1d91b25d6a66756cc627648a293b9f4345966bc469fafaeddc1118d0972bd5c7751a1f51e5989fd952f314ae10417c97b41e60ebfbc47e496486fa4a89fd16aea7fa1eabebd26eb2a37a3e2b351e0c9d2f67b2e5be0f921adc9b6045b045948e5103af0e5050b9c0799b513c00865deebda730de538f956ceb6164e08bd6f58655a294b4b44fc65309b30f9c00f92ef5bd5b911a3d830f72c258b19521bb8e80db02129954efb61423f518d2c5f36587303890cad9a93fa4f4bcd0e24c67db679c67ea59c1350b8442577632d5e8735833f3daf5a74bc7bd82659a81beba8c889632efe03cd24187aee856cf659e16e195464f52f2b984fc7a299e7b2aa53979a147ebed35705d5e89691666536f2febacfcef9b32d14952f958b72512869e4f6a0a34176918217888b1eb8b89322ebb6bb1dead2b4744e728479880db70e6147edaff6c3f083f18e0696bdbd78cf0bda14d9f42e5c1077ced00041aadff90470aacec0e48e2a5f2a0ed37818a173b96061e8c5bf24c0bde9e09f9e0ddb8e13306ef1d4eb8043ebadde5d7553e5212ecd4691eb426251f9d6720b8276ac543dde02399a35d974b22c1727d4b6df01957cae47443b706d43165e01d6932b136f561ce837431254cfb2a6e7d8070a2d3805aaa15b3c10ccd0cda2e9b418ce9ef380e5d08217752e12b3b892d03a9495c83d78d674612fde5a67738b2d4649ce44606ecce6bf3bd1293eca246a83643e4f1c7ba362b110e07c8479f216e3d4afc4fcb8d0820c8ab702a66d8183e83174597035e92b9b500dee08c80b927b42c3689c7c9617b4112c9e54cbfa51e989b5fd42b80c595d3edd265f138e8128cfbbb0e4f53aa0aa95a2ecda451852e564c42d5de7671560843d08103b9bdceac5fdeb0b1266f72f491265dd2b2b80a225a50955167da1812364ea340d82f61535401bae6f3140a8795d7c318a64cee4676627244930957b2f0b227be21b72d90027e6a5a7af3c59470c74dcdb71d1ef090a0f49c91acd604c792385c8f4e085765292822ee5eca03885fd6bfeaca9b3bbbdeac939f7846a487c5a483ed1e4fbf37c93886ea27bb35c812089b900b77c7c924147e97b6a71533610750bc84921012aa8158b213f7601d934a20bdd1f757b0a33042a683af6b9069f3900059d7f80f9fdcc9f33ece8cf7888dc9e24f1fc6ca0ecccf161c5334c60f440feb3acfc3d115011c176dfa05314c5bcf089e3c82bbe7680a3eefdcdbf3ac27265b779db4f49bade0128eda6e29bc5933ef454601db1b49628fd39ab938794fa46a33937a086ece7050d31a21524e2f0cacb307ed4412a2078636f9cc8e11c5c31cc0f9edd7be6d1e31a1513a58e25215f5a24245cb988589e6d5e5119f4f6557c697fad7d1c3a7e3bae064db4382701e33e48c5b6a52fe9141a385ef2325c6f7781134607e98bfd02c43d6deefaa861700388b40d98e941cfb2ddec209f977e8b9f93d29fdbf85e3010ce7cd622e8c75ce3df535e392052b6d65d5042d2a6e78bbfe5ee146e8b18d4bc7fb024dbba57cbe0402205593766a313950cb719d00c67bb6b3bcaa1015b89e820f11475afce655947113a7c3dcbb52427f090df994fbf076db867e0ab3f6125fb8884c1d13ff3e99fab5fa8b9f0b72cb44db4d0a48d9ec17f9733764e213c40a15ad821ec60e4a88cb2fd9dd9a4f35e6a708f4b74067f4be3f03a95261f6b191df53fa5bb5164e4a164630ad9ce39087aa950ad9e60cd2c44fa2237c49abf858c97737fd21180fd0b9542767150fbed3f39a29e6c3484d9437e15d2439f2a54b2a1ac7e63e6c436658abc3f1dd52d984f6c6901768a8cf2ec98ebf44e90e0fc0c24f8957c62e05d8eacecaf25b178fd710af609a8a1bc4d7955b5f0cb4f48a37685e6304ea5843573a1abff37b5106916c83c8f23f939a0dc43aea8d196191ed6e18dd793990d1f37d7de0bf8fac6f469843724eaab86be8a483be281b8ecf4aa29d9c571951cde8cd8c2aaf4d597ac2cb48f23fad145916920a55d655924940573b64dbd42a280cddc4810434f930183fdbbdc72db1491a4c9d44daf9b1bc2fecd855508648063040faeb125da0e68e6cd2002181118eecff0be1dd8eae726af5d451630cd65119c52abd6dded97f931202f186a18c4ba34bc2c3f6d765e2d8f445e959f26ffb55827cf3ff2cc0289f17b82c8caa5a2d3d54306a300f0ef42bbe4ea9e32c5d4b1173942745cdcfe4f5d1619eefaf8dc600afbc9171d516f7f4b35331d0b9be005132ffad5e9df59710278b842afb626a78b8b8b37fc3a894dc705b2d4e0940cb264e9dc87eaa148e6faf78125462f28a0f1d7b3c65a291b85713fa71ffc478f6601e8716c35489f4a54ed0c70bcfd5502cc91374dc3c982075c5180398bc6b195b36e79dcc4087cb990cc9d964a150e0dcc887d496bdd27c3f298736b9ad8345ba2df46021964cf43c38f9d2e94b77bee2b7bf059e0870ff9f17b9ef1320c0aa88a2fa9781e9017ab64643de9a3df9ed4b8cfd8fa080a2e494409520b795eb1517d224a05e450c4c8ae0e9fd29c0e72d3a592cce55f6dd5107f21214e1a3f9a5448384de06149f959ec0c92790f0ff229ab4971171f1c528ae6d095ec007bf5e7f55d623a68194e9ea8edc3af418075338328f24e7504341c22bef72c2963fc9c3237ba990d29c2c8aa3007395f6d96e95b40ee1b18dbad550bf39d0d98268cb74dde76d987c3169c9067495fb1b88508bbb7e94cbb7dfc15c03b1d5b163132c8a468906f02d422a8cf98d0b432b5779dd962074b72dd27439b2e94312f573435e5aa84664432c1914839cd6e172186ce93eeb1d7cb0659696d9d550eb3b185f8c6ee16e53f78233cbe709f99d2879d63d93f7d0ed133241d2f1ab1eb2c56605ca0f0e01c39ab0ba2370fe5c4e68de0561b517ff9a10023c386236398372c7176e35443e2cf5dd6cbed9f23395f231e6a54f65626cb5860a8b72122c34664119e7c47204ef4a70583a", 0x2000, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0x0, {0x3, 0x0, 0x0, 0x5, 0x0, 0x0, {0x0, 0x0, 0x20, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x2, r5}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 16m9.99310581s ago: executing program 4 (id=918): openat$iommufd(0xffffffffffffff9c, &(0x7f0000000600), 0x40000, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0xa000000d}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$vcsn(0x0, 0x3f0b, 0x117001) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$TCSETA(r3, 0x5406, &(0x7f0000000100)={0x2, 0x36, 0x9, 0x2, 0xf, "d306d45e1a00584d"}) syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5f72, 0x20000, 0x4, 0x85}, 0x0, 0x0) syz_open_dev$dri(0x0, 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x200000000000041, 0x48242) ioctl$DRM_IOCTL_WAIT_VBLANK(r4, 0xc018643a, &(0x7f0000000040)={0x4000000}) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r6 = dup(r5) r7 = syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0xfad6, 0x0, 0x0, 0x98}, &(0x7f00000003c0)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r6, 0x0, 0x0, 0x0, 0x80000}) io_uring_enter(r7, 0x47f5, 0x0, 0x0, 0x0, 0x0) 16m8.394731501s ago: executing program 4 (id=930): r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000680)) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) sendmsg$AUDIT_GET_FEATURE(r0, 0x0, 0x4804) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x1, 0xbfdffffc}, &(0x7f00000000c0)=0x0, &(0x7f0000000040)=0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01080000000000000000030000000900010073797a3100000000080002400000000614000000110001"], 0x50}}, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r7, 0x10e, 0x1, &(0x7f0000000000)=0x4, 0x4) write$sndseq(0xffffffffffffffff, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x85c3}}) io_uring_enter(r4, 0x147c, 0x0, 0x0, 0x0, 0x0) 16m6.490506519s ago: executing program 4 (id=933): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = openat$binfmt_format(0xffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) munmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000) mmap$KVM_VCPU(&(0x7f0000ffc000/0x2000)=nil, 0x930, 0x0, 0x24132, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) r7 = memfd_secret(0x0) sendmmsg$unix(r6, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) r8 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='%(,c\xbe\xfbL:', 0x0) r9 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r9, 0x1, &(0x7f0000000000)='source', &(0x7f00000000c0)='%.,:', 0x0) mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000003) write$binfmt_format(r4, &(0x7f0000000100)='-1\x00', 0x2) close_range(r4, 0xffffffffffffffff, 0x0) r10 = getpid() openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) sendmmsg$unix(r1, &(0x7f0000008700)=[{{&(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000300)=[{&(0x7f0000000140)}, {&(0x7f0000000200)='}$', 0x2}], 0x2, &(0x7f0000000380)=[@cred={{0x1c, 0x1, 0x2, {r10, 0xee00}}}, @rights={{0x24, 0x1, 0x1, [r7, r1, r8, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [r4, 0xffffffffffffffff, 0xffffffffffffffff, r3]}}], 0x68, 0x40}}, {{&(0x7f0000000400)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000a40)=[{&(0x7f0000000480)="dc3a1fff7a1909c74fabe750e782d88ef71a16f60460d6de675867b1a6b966e0e3fe2d0ea033bfd8bb051fc300849a322a05933197edc7a357b06421899510197c1c3fb7acac4eb35656634d7375aa0b61e743265f4c8cdaa3adae881cdd1dc1e9593eb0a8eccad2461781b0566ea048bb7c74c8a309e6656233f451b9b0f5ce1f71c217346b467a9535ade4272206b932797db58b4d9027bc4521ccb21405bcccde3faa5e080384e56b1e8d563a5223a8d30091f6b8d5099939571a581ad957d9a4607b44906820c0b41ba2173c5a781201b2e8", 0xd4}, {&(0x7f0000000600)="c5391cf9d70b9235cdb442d8d644f2f525072c77613e46c82a61fa551bab389d7a7faf0889416cd956ac6edb481530", 0x2f}, {&(0x7f0000000640)="0762e9f0c4a3271bc8525600ef47627f9c28fd654305e4c59aeba117ee4846276b9a33c8b0f4227d0782dcd8fa962aff25263ae27fd13a17c19ddf19eb047bf3892868f84d9511f0d02e88bbe0004f26fbb243930405cf4402de235d69150fde2adff1e3929ec1e3ea1100ec4132d4239c37476682764b46126ea84870a10ee2e60648469b9fe9bfe520db078007d6eb250e26475362e6b585ebcf4a73", 0x9d}, {&(0x7f0000000700)="a73ba0eb500e66493138300d1a337de1ba8bf1e7c2e8bb02cd7f6eea8db3985a50532dc239004972cc40164329e589e40079b0202580a23e079501bbaffcfb78606a5491f255f074033b9c56d4482f10b5e2dff3f7e8321b5db7841890047d35105a7d2e1458ee8694b3fc5101778bc6c2b56178971cee538a8e2011331d2000301155ec819ccd6f26ff92f8559ebfc9d49375b945a93cfb997360a0b17d84c5766e6d7f24b4f871ada16b7f1e929548", 0xb0}, {&(0x7f00000007c0)="99b022724b10cfa8a2c5a850fb0e4b99c66c92fcea5af9e38333477d6846dc", 0x1f}, {&(0x7f0000000800)}, {&(0x7f0000000840)="10f9b133ab1aeeda425f38cb00b5a050d94405960f14f8bf460790dd56b51c05fe9dcd8755335d2c4e73819bf25fc3cdf9ac4a1cd74dbd4d5e2f577e0911f7c087e2e11cd7ec7995626ae15f880aa33877952277d0f315cb4ea10cddb7071fba35e375818aa37bbe91e5a0d326deb21bbcbc214e4cd6b841992d1d6896af21cfb4ae99a559592d9b2e42391a461a91051ceeae3ded9a9eb68c2ab297086b3293e70ff78cba223740e164cc9dd2102fef0573728441f9573cfa081de8224f51", 0xbf}, {&(0x7f0000000900)="85ee7aa6ec4036d2bb816f0b3751b41f993d2cfd34cdffb0da597a60664df6b79b0513309daa6a80e33cd83d3b9e66cf98ea2727ed230bb1dccb505797d6fb10d1cb7a", 0x43}, {&(0x7f0000000980)="7aa4", 0x2}, {&(0x7f00000009c0)="ef8942edd1accad61913007d42b89d3bcc61edb85ef19a8b0882e7afffde7368a5ec348658ad88a55a58df920785a0c2a4c5ac1c09b332e72ce82d5013e91ccbf4e2d188ce234fac1015ccaad163d6d350b6a61fdd9319ded5fbd296e8a87da1c705db11eaf589608ea1ccb8", 0x6c}], 0xa, &(0x7f0000000b00)=[@cred={{0x1c}}], 0x20, 0x850}}, {{&(0x7f0000000b40)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000d40)=[{&(0x7f0000000bc0)="5bce1f2acaa4b48b68efd5cdaf9ebb610d8e4a2ec4324800f41a4947b91390d9f2530be317002b2bc8c9be7803b60a2858fe79f8337899c07d9668f465708a43447d7833e9e0dc6789fda28d832a4e9b8f826efd666c95ad790359387c842fd389120648af00e6b4b6bcdd291e55d9a168a4785973189dadfebe90a03cfbaf4f72c4b3fc5d5c9f8b05db", 0x8a}], 0x1, &(0x7f0000000ec0)=[@cred={{0x1c, 0x1, 0x2, {r10}}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {r10}}}, @cred={{0x1c, 0x1, 0x2, {r10}}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}], 0xd0, 0x4000}}, {{&(0x7f0000000fc0)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f00000041c0)=[{&(0x7f0000001040)="624b48103947114fa2fecd931089542c2b33a48441586c354d27d325b959948aa94946b7a3dea8195f0bab0c3de0149156312984e502a287eba4356384f472a4f6a6b9670f81dfdc6d292342e11698297ed1ef970bac58da697abc44df420909248a05ea7146d6ecc204da52e0e42e50a2", 0x71}, {&(0x7f00000010c0)="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", 0x1000}, {&(0x7f0000006200)="f575ea795834a97ced654b7947092ea9eb9bbe11f13bc6a08fcfdabd8cf7cef371249ee343b279c30e07c64d3c46f93dc83376755ddfff333cea3435b8e7791193fb0caa8d42f29f6a5ce39847e72a17c078fd6ad9b78ee283559203d2", 0x5d}, {&(0x7f0000008340)="9f1ec342ece17be76cec0c96a2a3e5a5276ab53e402457540a5d5911fd24d06eac2148533da029e1c899d396b65702baf44b3e27ee90eb23d1489dccf441007f27aefbb238b0b439378ca8a89d6f2d90017b65b91c07e40f4d6860b3e9bbcb295925b1713749945288f6a1326d29b4111933efebbff764f059de23826bee3e48073a3d8049189ddb31fbe4941533c8554f5a19e2f11a45ae002d664395b46fe83a8c27b153fddd016d0553319cdf72d3b32433dacc2a", 0xb6}], 0x4, &(0x7f0000008400)=[@rights={{0x14, 0x1, 0x1, [r7]}}, @cred={{0x1c, 0x1, 0x2, {r10, 0x0, 0xffffffffffffffff}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r3]}}, @rights={{0x18, 0x1, 0x1, [r3, 0xffffffffffffffff]}}], 0x68, 0x4000000}}, {{0x0, 0x0, &(0x7f00000084c0)=[{&(0x7f0000006280)="d11264f4dccaecba7dcd6fb5ab1b1ee89ea7f447a392c66d37bd3aaae81e34", 0x1f}, {&(0x7f0000008480)="df8cb1adddc9cb11aea1018c5e1b02fbbf5c2729983ca225216713802572585ee7a5847b6c6fbfa0c5f6375fb668b3c940ea27ee801223bbebe365", 0x3b}], 0x2, &(0x7f0000008640)=[@cred={{0x1c, 0x1, 0x2, {r10}}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r3, r8, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r10}}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x98, 0x4000}}], 0x5, 0x0) close(r1) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) 16m2.858701021s ago: executing program 4 (id=945): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdfffff}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d01020301090212000100000000090401"], 0x0) io_uring_enter(r3, 0x75fa, 0xe475, 0x0, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x20, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x157f}}, 0x20}}, 0x20000840) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) r8 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x183822, 0x0) syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0x0, 0x100, 0x0, 0x333}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) socket$isdn(0x22, 0x2, 0x25) socket$isdn(0x22, 0x2, 0x22) r11 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r12, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r12, r13, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r11, 0x3516, 0x77e, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r8, 0x0, &(0x7f0000000100)=[{0x0}, {0x0}], 0x2}) r14 = dup2(r6, r7) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback, r14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r15 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x684400, 0x0) ioctl$SNDCTL_DSP_SETFMT(r15, 0xc0045005, &(0x7f0000000380)) io_uring_enter(r3, 0x7b4a, 0xbf4d, 0x0, 0x0, 0x0) 15m47.762708854s ago: executing program 32 (id=945): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdfffff}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d01020301090212000100000000090401"], 0x0) io_uring_enter(r3, 0x75fa, 0xe475, 0x0, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x20, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x157f}}, 0x20}}, 0x20000840) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) r8 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x183822, 0x0) syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0x0, 0x100, 0x0, 0x333}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) socket$isdn(0x22, 0x2, 0x25) socket$isdn(0x22, 0x2, 0x22) r11 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r12, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r12, r13, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r11, 0x3516, 0x77e, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r8, 0x0, &(0x7f0000000100)=[{0x0}, {0x0}], 0x2}) r14 = dup2(r6, r7) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback, r14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r15 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x684400, 0x0) ioctl$SNDCTL_DSP_SETFMT(r15, 0xc0045005, &(0x7f0000000380)) io_uring_enter(r3, 0x7b4a, 0xbf4d, 0x0, 0x0, 0x0) 11.374909618s ago: executing program 5 (id=5828): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) ioctl$SIOCSIFHWADDR(r0, 0x8b0f, &(0x7f00000003c0)={'veth1_to_hsr\x00', @random="0300002000"}) memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r1, &(0x7f0000000100)={'syz0\x00', {}, 0x7, [0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf6, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffc, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x6, 0x40, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x180d, 0x0, 0xae4d, 0x0, 0x0, 0x3], [0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x400, 0x0, 0xff, 0x4000000], [0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0e, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0xf, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffe]}, 0x45c) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) write$input_event(r1, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x18) 11.143879201s ago: executing program 5 (id=5830): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) r1 = creat(0x0, 0x42) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x84) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x24040084) ioctl$DRM_IOCTL_MODE_SETCRTC(r2, 0xc06864a2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) vmsplice(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000180)="3fd97d6447", 0x5}], 0x1, 0x0) socket$rxrpc(0x21, 0x2, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd64, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x2000) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x100000f, 0x13, r0, 0x0) setsockopt$sock_void(r1, 0x1, 0x1b, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000000c0)=0x3) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x4000) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) 8.489620135s ago: executing program 0 (id=5839): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="ac00000010000d040000", @ANYRES32=0x0, @ANYBLOB="0000000000000000840012800c0001006d6163766c616e007400028006000200000000000600020001000000280005800a000400aaaaaaaaaaaa000009000400", @ANYRESOCT], 0xac}}, 0x0) 8.3245258s ago: executing program 0 (id=5840): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) r1 = memfd_create(&(0x7f00000012c0)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x05\x00\x00\x00\x00\x00\x00\x00_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\x97d\x00\x00\x00\x00\x00\x00\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xf0y\xd6\xb0\xf2\x9f\xa7\xcf\xad\x86\\\xec\xec\xd6\x9d\bT\xcd\xa2\xea\x00\x00\x00\x00\x00\x00\x00\x00\x03\xc23l\x9c\xda\xed\x98\x0fK=X\xfdY`l\xe7\x00K\xc2K\xb34\xd8\x1e\xa7\nEJ\x9b\x1bb\x80|`\xfb\x16\xcf5F\xac\xae=r\x8c)\x97\x9e7\xd7\x01\x0e\a\x17F\xb8\x1eD\r-\x11o\xa1X\x90\x8f^\xf0S\xb2\xce\x06\xa4\x8e\xc6\x9a:\xd9\x02\x90\x8db\xee\xc7}\xb0W\xea\xcbm\x17.%\"\xec\x9d\x90\xb7[W\xce\xb9^\xa3|\xd4\xeb\xc1\xcd@\x15n/\xbf\x86\xea\xe9O\xaf\xee\x88W\x0f00~\xf2\xe9\xcdm\xb9e|O.\xc8\x85\x1a\xe9\xcf\xe5\x1e\x86\xaa\xed|\x15i\xeb4pv\"\fd\xa4\xf4\xc0\xac\x8eO\xb8\xa8\x8e\x9c\x0f\xf9\x80\x90\xdf3[\xee\r\x88\x9f', 0x6) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x503, 0x70bd2a, 0x4, {0x0, 0x0, 0x0, 0x0, 0x0, 0x201a0}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_BROADCAST={0xa, 0x3f, @remote}]}, 0x40}}, 0x800) r3 = fcntl$dupfd(r1, 0x0, r1) mmap$IORING_OFF_CQ_RING(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x13, r3, 0x8000000) r4 = socket$tipc(0x1e, 0x2, 0x0) connect$tipc(r4, &(0x7f0000003100)=@id, 0x10) sendmmsg$inet(r4, &(0x7f0000002f40)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f00000002c0)="91199893b794f675ec88239fef317c764ee3a8ecbdc2a8c32d46f77944d1de9f924d05d3566b8eb8f5750393c669559d05543efa2927ef0d2b10e3d4f8541f34e1c7c8ca2d1e811f67f3dc50fdd469af72a49e684e28a364f5da124dff2b55a5536aa670b82da70bf0f19cd420371848ddc41d65649fde307c1971599f2fec84845e32bb2b6ebda099de12e8b64842024389524a1c5a97608000d1030d99e2a6e23a0bc8", 0xa4}, {&(0x7f0000000380)="11a68683394e1541cc444dff7adf30f079408cb066a6f8f4d33c4f11850de78c586d1a2ccff92e8e83fb82e447d9b88de42182e9e8c97415f41ef8a504215a2b2fdb1404c9659fdb988d0f527c3675cf2b", 0x51}, {&(0x7f0000000400)="875ad17d55c11f1ea6ec6cd17661afc73209e32142961e4660591bf3ca40d05a507ac0b0e71f7ed4c63f52a003cc8102f20dc6e33b5dc6de64ac815cf87867507cc072f0cb762aa5deb8731a699d3c7c69f85266ba51eb244f20129de491adaeb0c2d2eb13c1f215ddff92b05148f0ad513018b14798e45e55ecb916d4dd89f2df7e33c470998f325bf453f929d86196", 0x90}, {&(0x7f00000004c0)="1273dd9951adeaefffe3c4957c86dbff8693adf2202b620b3aec000cf330bb7249", 0x21}, {&(0x7f0000000500)="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", 0xba7}], 0x5}}], 0x300, 0x0) getsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f0000000000), &(0x7f00000000c0)=0x4) sendmmsg(r4, &(0x7f0000001980)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000340)="052a09a0c06df10c60f32bf089c51fcacd629383126b08d12411e1359dc9f026ec43cef6358c1a24b40f480f1a858dee19125678af9c021a8bc36071ae67382dacfe376fa44b255cde512a1e90da09cce062769cd211f9c9ee7d05159008bee63522eff7469c1682902b8057084a455c6ff2925da762a69b0086e3cca73dd0e486e3e1", 0x83}, {&(0x7f0000000400)="7e74161ba400aa9f3c32b48420971c289c991a4bc472fcdbd473a4e5dcc3835364aeff2b14051abd91ec87feb4e42037e235c0c497af3011b64dbd551855567d547689785b993026f60258d6f1a979", 0x4f}], 0x2, &(0x7f0000000480)=[{0x48, 0x119, 0xf237, "39899bb2eb659136f8bdde81912873176d14123c1e1e851f07137c36f5918e490b331654c41aac444fe95d51792fe2b5a0"}, {0x58, 0x10a, 0xb, "2bebb1686c921ccf8216bcff2d6933792299ebdf7ae5261f264618087ce2f5d057994be99c8c66a8251f181b4142838e5c9cf91d7bb508c69ec8bed1f425a2487ac46f2e7aae1d"}, {0xe0, 0x102, 0xfff, "8bcb693fbd0b498ab620d42f91b59ec6882b76b9a0ae952abc24a292c406d6b86192eac5ea040fa1593fb716e991339a00a101a6bf4e4526105848a6cf9b52b0c16ac1aa186f8973de28177890923770af7e32aa2bb582a35ae49dbf4c1d0c81d3ec7cb354336f0751f9c1068a0503db4c53587fa7ba0622aeaaa061297b4acb882982b6ad5ee0f94288d79d5c13bad62514dda05e341c4e865d3aae2b5c95205f61903df7bf087abd67298f7352fbc01ac8ba472b7837dc7666154d27e55c6cd84f550a7655cc2bcc35332c60d4"}, {0x38, 0x112, 0x430, "ac865512eec9dd1bc7591d243f9b206b4b234fca8d057e6fe1f95064e8899e56b8265be5"}, {0xb0, 0x114, 0x0, "e9bf962596f33fdbb14fd890d778d0332ba84052a0e014efd62a4f15cd576823d9016851fb1540e314e37adf196e39a12db2bca22c63ee1e07bc4f56030c457b379d163869325295420220b9cecf4d1aa9d538f4de0bb0051576d2f25388e1c87f95716d8bf6e90721b4ffd2ab3a057ee19da62d9f74679e1cf1a395da9653907d24adcfae7a885596bbc71c71e6c9868b817c4b9d0ce6d975508e46d39c"}, {0xe8, 0x116, 0x18, "27e6fe7d153d1a38ecb09e971a03b3ed001faec2c89df2d9141695f67301406f078bc5e8aab7c555d4eb8d5bf3be20c7ec45a01a04781a3e149e1d21e031e0e205617429f972e57b06056a8afb96d25616310d4b5e849ee4110c4e3ad36f5c12697fe37429a4180c59820510d866fad896f098545ac50382418c3b3d6d7a98fb4a68300e99ebb1359d626f77cb49aab2ac39b00e93dceaa7772bd1a7110c432112e8da5e270edbd11ae5c3349c92534d4caa6feea47dac5e74fe7d0a8269a6c30bfdaf782a748d856c29ce1de1aff125c4a02bebf11b"}, {0x80, 0x11, 0x2, "37c9a633def96018775d90193b336e05453afa99fd42171eb8ecfb1b3e90042ad232a0b83903ff711104add6129c2f1e462f37f83e1bc7203bc8fdf1ef9aaa6ef423ce596229c76e24e09fbf7829ae9f4f01ce4dc04713d90fab11a139941c54e33bcbfd54b2a376d334"}, {0xf0, 0x107, 0x6, "5388e53776c61f334443c14b8ef3a87360abac83417ee49d8fdde6b1df954b18a85505ec2b9f63861282ce21729d78da78074b59942f56185835d4b5208a03517ae50f01002b67eee6ac42fa1694c34f644c02458d456c2534a15e060559a84bfc11cd72f7b0d8020f4ee12bdd24223f22cf26edb115df91f95894f5d8d854189b0375f6d7673e0e01f5926c04dd0f658c1fce2416fca41c5f7dcaaec13bd5ecae16977650e08fe3af7d358ebf130a48b4a7184f1397f8ab215306d71d25ba8280b99970de9cfa97de33512ef0f1693c7720b96e4ddb3d65900b8b4d"}, {0x28, 0x113, 0x3c5, "0fe576bcc0e898d44bc99024acb7f77baee4aa9ab7"}], 0x4e8}}, {{&(0x7f0000000980)=@l2tp6={0xa, 0x0, 0xfffffff9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x6, 0x2}, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000a00)="3a36f831c26a3db670115385c19ad774589ed04cee3da47df5d06eaadad8b8fa57453349bb6612b77c52924560f7b251364a3818da1795b3fdc3606015066bb56384b903592c24df21d402311451db7f409590b4c885e8ced1ef141d27", 0x5d}], 0x1, &(0x7f0000000ac0)=[{0x18, 0x10e, 0x8, "2551677aec"}, {0x100, 0x6, 0x9, "044d39135846df0957aca83fa6b4eba24276c64650e8a3b628a39fdd969b9afdfb8ae7b15b14152c7502ca82382f01aec561068d4e90a17a14c81712d4cc9de4f60d3e059aadbadb46cf5915cf1cdd5b58e09389af7b1cb473ef76c316aa02981c49f9c5d1ceec955b83152ab0b75ae6daeb6a817d1fc8f58780d9b7dc3b6f1113af19c729fd94dd8388bb3a80bce33c50e18efc9ae5074cd4e16625e639961999d9c1aaa13997ed824d6f9cef0bf23d3de447ba85e95a33eb61872df632100c2ff5091994f531025374d8035a36710685a997d7db269ffaa74604914dd59840cd8086729336790f1d7b41935dd1"}, {0xe8, 0x1, 0x2, "33372b99149450f185507ee597d005ab82e0487569615b62d3134e393ebf35c5b69aa6bfd3690450ef44bc548cbd0dd75787a9a4373fe6960ec8fcde613417247a572da8a65b6f247dec4fb7a32d229bd3a9bdf0eb29e438e76c04156dd8bbbcd1d93c5df3de82697a2704aa8553977b313d9d37feec97b1aeb3c049a661b19c139112d43dbaff0f8df33a7d1875caea498e58f6dc96bdefcaad1ff76424947211d4b7ab2ceaf95a5c094fdbd7d84b9858602e6af4a05b7ff9e84dfe7dfb61acfc67c32b5dd8a3c68906746b663ce1d6e2d00c22"}, {0x70, 0x119, 0x7, "dc8b9e47c55ded586a8b74477b80ec3860d5f2d8086fcf0345a9935241204a088f18df6a697e38dbc6d1e4d1cfd902c1afc7077cf292accc11a284cab07697e90650e49aba5f0b1c5e1fc2342855a4f423b97eb9f4d3e3b38ad85321590e2f0c"}, {0x40, 0x117, 0x8001, "f0f1da23e5802fa1cf491e1ed97449cf54c9a4f5792e2d28881bf9d218e985207f5c5c4ce213687a18e212df"}], 0x2b0}}, {{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000d80)="922909c01fd11b34d298e9923b96641c5ebb8d269ede134a033f69c5709381880dbaf0dfb261a02cc27a7ab4fd09b2b9a41f00db416aea86c80945513bf093fe57f38cbe87ce234415f73978c9f2ad1fcc6a91bc30", 0x55}, {&(0x7f0000000e00)="e2b7be7eb1f387f28a2f326957bb87e95d54e0566fcdad45576a3d60135a824619d195bb6c03431666f48534b758feefa8651cdf8354fde359e1f511654e06598a2a1903b52c8b54c35df49a298faae9c4bdd840988de3456cc9eb5ac4bc9e15957d23e4c85a0b047b43eecaff824a41a87cf458", 0x74}], 0x2, &(0x7f0000000ec0)=ANY=[@ANYBLOB="7900b6495df718b85b3be4de6e105ec5c8b5eb99aaa1fc0f759ef17d6735ecfcd45abe1c911199ae0f39ec4c163070099d95f9139f006147c9705273b92ff85b3875c65175e0087dcc86b9a67363e7b1bf4a24b63055c48870518c56a7b36220011f209260dbd2b47ec8de644a73c078409a1851ef6fbefc00"/136], 0x88}}, {{0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000000f80)="e82b8a3c54817e06a54d42e6d02fe2c64b72ec70a06854197bf7afb1647f1b43ab038fc5126aebdc4f35cb05ae31122cf2c5bcde1beeb18cdd94e5c3f28f04e515c7d0537bdeba8df279297a63312df0a20a2a97f291a433d76b35b18fb8077d8c26b4e7baa549548aa28a1a8c6e0008982b43daf83cdb19e0a208f11a45ee2588ab9af9def4d4c0fa858628d888c75e61089b877877f825ff95abede8b0f0119429753f4dd5a0fa", 0xa8}, {&(0x7f0000001040)="d4a90edb74f7202529feb23f4b9052a2e21da0d7ef849262abc4051142686d96f90158838fdb254b2a50ea36f50faa4c16a4d880e7adb60588ef1a305e83ec118b4b5e6f9139839f5e7c6c7574444ccd61dabee50f5400e5952c425baf8f8f1758d8ba1b3fe47e90a79a0f0fa4a583608dea0f98a737def3757e5b5833ccdc98db74dffacf41b5b6496a326bc71eb91f51ceb7766467e258ba360f7b6f13acb82ad9e9c97caf0875f020e57077be040b9d5d1befaca296911c2121c30e8a92f21e0fe3985ded5ad4fa", 0xc9}], 0x2, &(0x7f0000001180)=[{0x88, 0x107, 0x3, "9b6f5a41ecc210d039a1f79a7f62cea8dda87d53bfeae526498bdfb203a1cb148d94ef4ad56c934e8f4094b2a58831a9220cbbab16c0fabf4234df6a2732c03c512c29a442a0094a139de38b99942f485d264ff06d212c5f120d44f98fd4ba5b889b0174ade24fae6ae530f413e9deac766cf12299"}, {0x20, 0x116, 0x9, "dd5e7a0e7e0e225386baadf1ee"}, {0x18, 0x0, 0x40, "69cb92ea"}], 0xc0}}], 0x4, 0x4804) fallocate(r3, 0x3, 0x81ff, 0x1000000) r5 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000100)='.request_key_auth\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f00000001c0)='/dev/usb/hiddev#\x00', r5) r6 = syz_open_dev$hidraw(&(0x7f0000000280), 0x6, 0x2) r7 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r8 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, r7) add_key(&(0x7f0000000000)='rxrpc\x00', 0x0, &(0x7f0000000240)="0000000000000002ff69fe0000000002000000180000000200861f4104bfeacdd5a9007d16dcdc2850b536f0", 0x2c, r8) keyctl$get_keyring_id(0x0, r8, 0x3ff) keyctl$restrict_keyring(0x1d, r8, &(0x7f0000001240)='logon\x00', 0x0) ioctl$HIDIOCGFEATURE(r6, 0xc0404807, &(0x7f0000000000)={0x5, "676d658bc6141d8f4000008d3aadb9889e0fc934c0f387fccc8194467bf428b073bff81abf2ecfca8357352a647e1cc5f014f686d5bc7ca5b8f1325471d0ac32"}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220f00000003a8407a730b93bf0280b3"], 0x0}, 0x0) r9 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGFIELDINFO(r9, 0xc038480a, &(0x7f00000000c0)={0x1, 0x200, 0xee21, 0x8000, 0xfffffff8, 0x0, 0x0, 0x25, 0xfff, 0x244, 0x101, 0x1, 0x1, 0xf8}) 8.083913957s ago: executing program 1 (id=5842): syz_emit_ethernet(0x86, &(0x7f00000010c0)={@random="e3d6d39bf112", @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x5, 0x0, 0x0, @multicast2, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @dev, @local, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x3, [{@rand_addr, 0x4e210000}]}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@multicast1}, {}, {@dev}, {@private}, {@broadcast}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@dev}]}]}}}}}}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x420002, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000040)=ANY=[], 0xc4}, 0x1, 0x0, 0x0, 0x8000}, 0x20000091) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) fallocate(r1, 0x0, 0x0, 0x10fff6) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x7000001, 0x12, r1, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f0000000080)=@x86={0x88, 0x7, 0x0, 0x0, 0x4, 0xf, 0x4, 0x3d, 0x81, 0xff, 0x40, 0x8, 0x0, 0x8, 0x8, 0xff, 0x6, 0x8, 0x5, '\x00', 0x7, 0xc7}) open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000100)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x8000}}, 0x50) syz_fuse_handle_req(r2, &(0x7f00000041c0)="412e450a2a7b9586d1e6e9de257afc4fd60c8de430c0d6348b2cf1db8d070a539de9c1e91a178f9240dbcfe303566018f6c20c55d643a2ed46aaacf49ca491ee2f06184bdb548778a2c56e56f6b40b994419428bbbb9dfa5f9593511ca8ae1c088fb0ee5da72f505000000000000002c04754204f194ae6ceff4570d44496eeffe619998eafc7167d22e1c6aa73e89ad19224e35130a37cf68d5c41ccafe59b4b753a26e06c4306d31d78de6cede97c06e3ca2cc4af66b7548268efa91621ffca2655d2c8f1a9bb019b88fa729cb3d32f72c098c44898d42c42f39feb4faead93980726c236129acdf31c01f1cabb5ca3ec4e45eb5e6e59912792b4976e3f2b560c861d49b539d8e1870040a8cf190a8a767ec067a8048aac53336b44669d3d425843ae80681a7c02a5d5a3d90f355fd4a6ac277e75230d558f0df20cb323cc65e9b5a258cdd669c8a9534e4aff09a8fe89b124748c9e756c28789c2152a5142bc0bb205e339d43bb980b3f04a3c1a424a2a093966b20600a5410e0528fb35937c998eea19f01eaf2f39e16d85563a6737ddab3213ca1832f0afdf891e34a582f6a4ac81fda70ebc3fedac2fb3a492fdb40b91021e5d371d990064cd1f7c2c1a6472dedb505f9a4940057a3e57fd53aa3cd2eb914e073a19b6e925f8553e6875c093c7d19de25861fd9640f0eca4cda0467f12126daa2e0c6df7d4e4babe5a6e59e8391be7700790315b6b8a8aa74cd6d3f054aceaeda79430676b67fe25c9029e0894b413377fc4d8300d9f9338fadd07e4c80cac08113df8971a868458c47c06fff0c1c4bfd48ea583e9e76ef103d42c233b6de10b30612cdbeb6b60a6a4dbbe2da63cc2dd4fb93cac65af3c1279274f4af0e2c5b96e6068aa5b41f7548fb72b0c142351f64446db7425115b89132b5589ee642ebbde655adb2d7d1117456a6e4f2886879b42baf85e05d53e2aceea9c3830673bdc4d081675fe76b994651af9c3f16b7513834fce4654f84558a8308fa677d05bffcc893d5e02bf87c5ec520cd66ad58dc06f0c47d253cd36dfec82980fc8dbdc9e185fe4fbdda2c2517ec9abfbb4841252e650b6bf56fdeca9a4ee3c311de3c6859ec14cc00e95323c57c02fa894d83ea17944f3112fc19a7e11335d7951ec6dd5b4f06fb9b637313a230341ea5da6a7a959e707d0cd5fca60a6649c8df8d6c17e9a49d230e5775df14e4b43aa3420bd0b8814ec7360ab1910e69fab8932f7646d7998bdc2e8ec354c52da21ed83fb7582cb9d37bb95f144974f72c7b0ae7b42945768fa8ec0dd6daba72d05809670506ef1054282201b00906c8af64e3e13a10f180688c96549b2d3d6b04403fd571e7b132891dd4b7cf37aec25ca1e9190c17aaefbc31e059915c12c232fb7097e9fa6f35fbb265c7102db62e2264590c583ea90f1aee3f166af81430d9084eb0c760ebbb16049c9fd1fee6ce33c8ac205e3ac9c275531feadfa4054e0c027c26beb009f54aa72b864d39bb11753f77931bb960276db33021c65671e57b3708bbf979be222e8439d71f58ca87cec7a054517af398a42735b580717377a54f139e2c46813cbb03d98e49c26f4ed54d75e48573cd06145f913f4e313eeee837496dfff75aa722fd8486c45f9c959da12ae48ba4a10712120a203e2476c7b96031d8f8773f68344e6fa21831287655aabbd594e9f272eb1a7315d2d79b8bcd5e63004cd106f80b1e40a5d9e428a01bc58264f4d63c2ee9db6efa70607a642aeb883bf4b9fe009d7f09c16b05a2c9b73573e9019e161ebbdc1fc9b9cd0c5fe1b57adcba2d0f3a767ad59aafa159b3dd181f0601ff95e8af8b5410e56c81ffb8ab35b1e04af35dabf69f08572e69260b72bfd502c5a0de627fd3fee44bf1d4a261bd356056c5739398e3ff161beec1240a089625daffbc61dc5e660c274565477a0ff1797fefff04a98704802ab0674ab72d400686229608cbfd2ca20f4e62495e8b09de9d180c47375bbad72f4474b67d56104b4b466192be60f7aa668fd0a4338b856f114311842ee806d6488ab09098ed9de0e21bcc8b42a5d5713d15eca108fcc7a65d6b414a112524a6e1418644508dd957147a92d4399d13faaf01cacef40549cd11900f9aa32a8333f55796ef25d33c554a308da9797cd0ac25888311b0ac88eff0be7a36ddedcfc2b095abb4d5a6a4edbbad67b70cdf60c7ed0c5e040ced90edb3322ef684332358942ede9191b431c99b3abf8f9c50206479f0ac118c0a99df61fb9c90d846f41caa6a2448fb7e15640965e051c2af4ee72a5cc7c962bacff7019615c10e6c3054e2e5792df3aa6e2c33425552148466a88568cc79b6edebf0107b7d3d24423a665d20c3a1c0f1a6b34eb475bf875912115914cfabcf394f8a096d64e5dc95705079f748b9d4688859c0200fa43719e4722ed6c064c0efa7e07beb2a26fd724b63537fa0eb506365d5c029cd8dce7dd0a1cb9d9058c061739734af6be9e880fe7e28a211a4c368a7babd1107110ecbb384b274cc092b9511c4abde2ddd863162e2739984a9f3c0a76e3c530a27d5e385f4a3b87607b2a944e09d28239661d27719e22c0a657ea383c30859ca29cdb8fbc79bc83e995dcb361743a7e195650c37e570b768a0a1f0b118fa5be9b3c838326343ec5b376d5ee040ee29dfd868cccf9cfa4591151f519cd6e2ae1453a58aa92f90ee5be11ceb8511ab743f399be0a190eeddfd112336866831c3255ef6520d88b2581ea3767f3df01a38d9b4656f2a89c5df41443291a795da45c8a846015cd041bea0dfbe648348b10ae73ce43d9017182792cd9172eee642c549a530cc1f537f9aa70ca63792ba4a86a713ae09b917136e5bf1506ad7f367d8d2f77f47a2318facd109bba9b1327b5db9e4aeffbdcf414db761eeacc227a15cd72aa52c8ede33bdbab9de9aa1e8f470a388013d07f08777e2131bbd4856ab5c1c38d03ef407197ccf24e8b2a8db69e78f9d6623033c453e2e54fce65fb785467064a146c4bf218068b5e3efdafaf93a98253becaef226cd79468ff1bbe0c9d43877f5cbb5844fd8957f15d3ef208aac11816585cdccf039c36b429d3d7fb634054fd0f09c8abea3746a6b7379142abde26d998ac7e39b94746c60c09f86ddbd7497849d1ef839730672449f35a3c3253666e9fc053ac1c518e44e0b84555be507f7c00fa9e4864b4bf40ac3d93f12001eb780a779e655d0633803268c094ae161a0efd652003d6ac47f9a6c28d866b56233f371627b01e0fe9361dca611a28841968d4e12cb73d49ce08fe25de4a90b2d34607202b20e71f5e1eed38e17d0a2748f548cf61735f4c9cead1cb93b11929d906d65fc60f88e6919b7b5a1014e6d408bce9c8cc832eecf9147708fe451891717d2ed99dee70773feaa97985102abd3dd05c904c28898afe060621db6564887bc4afe158fbe1d819136a1ac1dc9d8674798a93daf5255460b50c34496205834c668db4c764e76ebb6cdaf5fc44b881cc2ae87b4a7cc045143f96b1620abfd0f116e673b335beefdafa1e58d9194e010cb78956044646da5ba853ce981667f2b8e5001c2df437c9d597ccd2be7d2887f5cb7aad0539abb3f9db1c8f5cd4d7d831946ba1c1aa8737c114fec1ac9a82519f57cb48c49b7f62e9eaa89f448df33fb307cd0036c70b490ac340f7d04e14f32bfeebb08a9d5bc7bbef8f231ea09311d4c82cc55c90eb53c6c003cc98a34dd3c4ec2d8b3a655a78e16e908f368733d0a02b36fe963e2d80b5e6f7b2e3aae3013c900c76e4d56e8348bef221f8a642e692c23b12520fb68c793e789eeeceb4efb2097a4d5952d144094cd7be6edc933d257f6230e962d70ba42e1b07ad9eca0ccd60d3d9a6e06b73ccf96a8aa490ed3bd58bf4d79db65355ae145b54be004e464f4dd23fb8b1bf15e13838116083da67186513652608e37c8f847b2bcafb57bcefc7efc8c8182c7d708cce5d14695b4e618e77f8e7be81f27a05e415fd37ac21507a665b2558daee5c0b0859fedfede8c03f181ef5e0ec0da6caa3edf402dd73bcb4026c489a7cca8ab700d3e9f050006c36768a16e8a48e48ed5750b8cdb7ad1fd12d4cc8333d324d6c83905303fa7013fc02553b587544affe38f1a95e0c4c39740d63b6d387fc89b30bd5fd745cb64844b13897ccf5cca135f7d39e03ce8adcda919d86b25b52764b0a0c4f07f88df68868415de13863df84a7e8d355b09cf90e482eb4174fd01f1b371a4dc52f3c89fc3a70c71657aa5d7573ef9acf4d2b0b321c41ff2640515bb43637ba2288ca0bff2e2a3a998ad8294c52f9edfe0a4ee0a3f8ed5b4b5c43319bb9c58dd07ea3237d7bb62cb086e7ea4a81cba2cdeb28794a09c275a704963110b64720bd089e3737ee1a91e348b5e97b63e1724de1fa9f49961d653bbb47b6fa993b035cf59659bcd0306180645162568abf51127845cbe6e37cc3c19b9d69657db4258fa5e8428a73eff6506bff474c2e302ad5559ac8de44c6f0baba5e2e579e7d7f9d9ebf540674432ac11d92bfc9abdc24126888b533f43bd6f293b0bc315915743114a35308a0ee2e710522137918a2b09ddbbc7a2313a2a6b85a1ad26f14dd70072651c8300ddf6de29704b716ce1bc431c66ccc96731f46359a9f6850976c96dcb5e0ee47446f50b6b3ba90d45224066e123ad3854d877c0cdd9325000ac0d6813c30cd43d3e150335601724ca3666458dc4c04f6562296982353e155d5255c9008c0b46d21a678c8fcb3aa8d6574476e0458eb0a76a6cb50f929ed218cc4654cb4f95fb3afbc2548b74acc312563375a19e55d488599488dfed4dd31b39f29ad61dad343dfca3b45b316a34e7a7bebd2b0f562a9e69848d13fc80a4fa52d0f17bd15d9e1fd39a7dcc86128d14493805d105a745673bddea68ca74ac09d95cc7412d5be2cbd0a247a81dc9e148111e22cdf3375805469226ca3538f960a6ba6aa0eeeb87c784ffb1bfc09180a61be3c7c535fc6d593c3b3f4de21b8c3eccc9021e80fb07dce0aeb3b023bd55f24356f646791ba80e5ca21ac092a069ae0a22cfefc08c23cc7aa69b570bd17cce9de15871d363f167288f99f04761caa67f12c949466493f661d39ee4280c955446ff5a9bb14f2d1ae21cdb91a5868e0c52097cf380f571935b140562922763f1b79c3709b949c57a00b08828ce9e685f6b234b5fe3c62d9feb249ce75e81f5efd556c14d5da24dc0554723fdbe52659969a39f470e82c50c4777c908628436e31177af1125d5f70ff627462247e5bc20c47ef75f369174586d43d42f7eefdd47fefa745badebca2a881ccc018ea411cc8a7a0881422bee8704bb98e6bea9fbec63441fb45d7ccfd436909b57a2b60b788e15bda3ca7663b19bd84d0879deb639f10def9a99d42a4b9a4fd7fecbf6d2e7598678307ba9a5b6f143c27cf1ca41e3c904007bb762cd5df6e63c4cf422c2ba959e53bd8e5664cf5df6a91a4bc8cebc52b22f30060fcbc5ead53d38eabd160c1da4cab8aa95c3640ffd78074aa2cbb05cb8ea90a0c95a4a1b2be1ee94f238000f1faffa069d87039f13f5f84ff368aec5a0b10020232b9fc954a6c22573ef48459e574d48a4845837e1d6ef386738ccedd093d4d5bf3a3f790c875ba7449d03397642feb71100f2c25ab2cadf0b0802544a2095a51b19cdece623b17d420b173a99c081f8e229b6de3c680d6bb39bb98b479517d77cca581b81cf856753a44ebd64cff111fb8ca37ea45d217a3fca44a083e6c35b0fed9f8f7631178d15e88f86c85f1ce68c900afdd1f7e5b8bd4ef3f58c447b77d3befc49180df7a5eb2ae8ae33b4ef573f3a425da8a60cde84d8eeae6d6399b9fbbfa0fa8d448b25c7f79b7554d0b02b0decbc74ae8560f630af596313fb33d442a410061ace0aa7a440d5e31ca8bb2cc495c4f0b672edb011b0c5f16781836df7f4af8329143d5a1a99d7b18ef9f774c4199d635848cedebac82637a03a189c65bf667503737c75b6639ac65ad424ca475285437e6f19830b36549f607ffc387c8b11a34a838159376a6335afaa045bd2bb04e279dd72436331d07dfbd72e2436b27f0df23a266fd15cf56d1a9e93aaac8901cfe49a3219ae36c5c65c75e5c708fb82cac4d6a50726509ec3a7d32d54cf584ae353a5bff759fc677a0b240cf8a0a72817c9d37699ca89c96e0e0d96a7665ac3a7d1febca1a1d79e2cbde8025c271360e2f90048b2d9fd56f45c013e001dad4b7785be69dc01f8a954ef7a84455986fc5c9d5167d91808efdb4476ed79f99563d887cfd4e99809d9e388501dea228cbb3cf3770082dc566455251fd9c2c742963c33500618c6ec99e0bef007408a0462a081237be4c6e5db0258d4be5fc9cf63fd1ace1f4166c053b0fb84fe24917da1255cf40bbb1b45644f6a7699cf802a35a932c374b1d62013e6afca3787627469994c02f622ab877ed5491fc2a89eea60e4e1628da89e3ad600ff6442e4ebf20e47304176b6a1703c094b3cf6d7fbbddd8d8fa5a00f28b4d8f43d88487e9d4531071512f2027198714a8d1cef126775547fc74f2a35840510f325e50361be76557767560055e084f2ecaefa0dd8ca8215301a7a887d2eaddaeb1f5c3dfdbd2cc1ba5f02d4426b98c0f861c5f724405758f442560ea6cd1d953456cc4aac6642ad61c03dbaffc2364d8ec2ef9f483c70355139d1fbd9617ab3c7eedf0b8963c1cfdab769180db43c416a90d9fdf3fd0eb2f81187642b4e2a09d6462d27527fdfda31f7b262501749dcfc6c184983f9923424131d05cc811cacf5c2c87e8e6f135349e68cde0e8997bf1dde248e5124d5dca2681abdbe58d327a8edd585821f03fdd4515728f1336495ba25c9bba56a3f706d60c35cbd0b40d0ac0583a981f9af08510ed8ed0a726e5472f8995af3837fbf1e89587633d2ef944868a153919165778e963710872af12faf96c0919c638e5affa97104471ba6e178d27602f96b9546ebe52190d91be245be08742b96389080676a566d3229e593e4f56a76ae4c58113c6adc1088703b1b92dafe32a5600e14ac1e71df829dfef425911f16a2b91f693599ecabf93065c6c4f5fefca8d4ed095599113529f65d9120d5252f577af95b404979508c343df54e4d239720e7d3a861f1dcabfa69e12d655c8a026c10a4df279b139fd222e561d205ac9b45c1054f8699eca594fb23886e0de565186597766dd5e40f74a423d5708dac254f4172f1089270988fb18715813f13ee4d131b64dd517c7e77f27f804b229f5339ac2f483b14739ac33a9645044d3010bd77ed18fb117f7b11bb51c4ed683b59e28bf25a58f123dfbeb1f0f21f03d9b57d8e61d59b311037a5b757b03ca5c95e0eb73922c6918530c99de4d6733640f2b8d13bebce31d4f5e27aab201101e48cde23a0d7e87b9511949d812e3187ee5ff11bc5858c022ed7b00790eba32f9ef7e134ce5f73a01269ca971b40e62133eca9d596a768686d6390b2c74602f6dc597faec3ed9d9658102d99c9624c1a97d00d63853578afaccc7e30a77fe054ebc23eec45f608f996fd015cd6bd50a111360f0790eff6ffb1ea59d13c8e29480bd96217188f97e53a1f5d9eae0a2badb4fea52f2bb4f8cb04d0afd99e7371a978a7d7ef473f77ea6738ff84af655313a12db24cff692ec7e282245ae9a42338db814593448f7115df3dc3f4e2faa2c2fdbd68f679d6aba01a15031347bb17d8bf8f1fad0ecf365e9dcd32e69803c5c05f4b47adbf8a21af7e9fb327f267df1c914486389a9820edf0a03bde6ef388c255761e402b2f7e1f9c1c3c95bd30c502197ab37f76b52f0d0675f366e919be19329853767bba34a540fb75bcdcc9596a4cda254a660e11bed5af9d8646ac4b7d6d7aa5d7c0005879b6d08058a56c3d3a4d3d401b883153fa7f2f6a6d34dd010f6b9e7b4e457b9ff5a5802d7723abb35f9dca0afc10fd534e7753445b7268d90145b6438b93fc475f44d5d678d79da6c5770f3a9106f3cffbabe4b88cbe7eda9b8a495be4f6717b0fbee6fec78c86031b6d878d47e357b2089de3e6dd19a265552553d1f7da53884ef84d0eebe782791c48a9c68a28d8ea3bb70c922b01dc20b2cd05cfb276e326651398f766f5faaea54a41da597cf6b50f3d5ebc634185b99069126b8d935c6bc42c47f2109de42091ef4ade3d87cc44aeb78709255501e64f34ac2d4b2725cf7777315f8ca9424bc9d61a896a93500faa6cf5a5aee1fb888e17b47a38a667be2ffa3bae46afa88bfd8b5b6e1186d6e41b9a4e490591043372c23f36fb48d80caff74cc349adc92bb25f701738c809ccf74c47afa193795ee67bc58ea7fd85542fa7e70218490fff212163401cfde016df2f42496bae403d5391e53fe200f758bbcdead0fe72c77861889b9632a257229c35bdfe8fa78375b4f5c768b9c60cafbde1f00aff6ca1879f6472f28001f5f13d4d9d6c3a90e04d8df09873550daa8262d39efbe96a79c697fbcc9a7f27c9f6d782d5d5f6d024b291376e9cc40d902f809072e1f0f2c2ab88ce3d074e88461f5971853e7be749943ab6e25e25e8afa5042dd73407f49b50841c7782c54eece62ec2beef1f16caf1ca5989427bd2726ca0fee33e303702e9892e4382e92c3f3a03a6188f39762db81819c7e12b424be8fd964dcdbfbac00139e8c5a6200506f13f484ac34ef3d26e7cadd53cf402117419c1618205bfa5382486094bd55448f2b1aa4dbec2289189b601b1bbf5792b2a641c6f5dd19cf24abc72fc5264cf11f6b44a4929267a02cd1de1b602b9de65a6c06640aa0f76109baa90d66eeb17295b1711365b7d6835a2dd55b7fe868c59453613240643c847a5b48d27897a58dda63e579c1bba58350550e147b190f0a2c9a5ce719d627ce3302028b4b6801bbfa8cd74874ffba35817c0eca034d19210950796807125fe6065dcd47d7c870ed2db5c00cff235e4154e2d89ec2a09a87551f9b7ca25d519b5603c0c33d2cf72878199ffab567fc5e093529b89d1163587f3564ba8291d2d96cf9762e7f568e786ea90849f6312c1a10f45d61600cd45c48e6870a7d76c913f9c4497374fc04401cbd11f7710740148234fe8f041f24d0278fcfd48846e6aa49f05016fc332dc5d46b4a26574fed5c0751cebb9f7ab4cdbc1ee011d82d6ef95c52c9df8eedac3ab5cf30805f23d88d4f707601f8e6c606b58f2fe234e948d6756d430a5c4ec76a33874886c8fb484059b47a9bd198a61a1896419288a9e81d0969dec778a53e8233f0f63bd0134e5f29825e7817e7c8ccb7d9acd8f86ac9d3af78c43df3036d7934dd294f2bb12063bee52c547d27a218145befb0ca96cbfaabd39fa245b51c39f4cd4cf8db105f9dc46a7aaa8f7d06fa208120ce1ac49326179618fa2c8596c44e174eb7a141056b1d17689c10dee089c8b0867b8a757ae12251bbd68db5fba2be341275fb6ee379309f5cde9b31242b0b2bac44da74776fac141936bd96e3177161f057c820a8c22cca8cce29b158eb55aed0260253fbee70a6dd281d9fca23e0b0a38d46c76a95e1262f1cafcf0fc37b52e649a1ba1e2c0f97d10bbf4d2b5632cf340bce56736071d5885ec9b4e17910744d3e63e2ca6deb21e43fc21e89c6865d3ad424ef4a14efe8843ff3168c99ee395400dcc8755719d290c567c95a5e7d28ec1190ceee240084d444265cc801cd960f69b368359bbf06b8a4ec23b47c7bf9d4b16c701a1c4fb9e81abb75bf49d450b566ce03de939fc6f5c51291380086f8c995cdd4fa15a325601c4846a69f15c77f55c900270bc9ea5f406480cb0e3e89bc869fe8b7cec4fbef7e76283d50c25ab1b4d34d093a7df062990a925a9c44aa2661abd7d381a4d6cdb64821ef624dd51b72e99af914bca2f80c25b82ac6945df7c7582e6d0ce2cd073e35f1fc120a68ba210410db64592a9aa319b30f2b818c495750e1cea0610e27d52be31e52e501a3bd51b501bc51c2ec8592f679b6e55b9aa58d513fd2bebadc83ba76eb45e5676f130193e9a666b8c8132c9f5141681fbab324b555c5c890d488ac2dd00feead0a20fbd8a46391438e3193edc6fb89161cd864fca98f4f39a2893c933dcd13bc8c5d5a548d24862e8161c0fad7f33aca8c86791d620815fe3f0daddb5defd933d0c10097a7a98e67625420b6c0db7c3e17ab07ea64e6f0f53fdc670799e06a2e3a871d6be363a2639e35339361311e0f528cc433eacea4f79bf217108c7b1d657840253ffdea18bdd1f93cdee63e7a9b8dbcb4ee06162b253e09ea0641f2771bd9823dd210905e9ea495f43194bb471cdeb690e8890b03b50835d53dde1b572dd123ccc8507bb57a45e46c0efb8fb3d5596bddf9782d86dd911636eae2cf64b5829cf8893faf789be3fa22859accf688f5b5da6c29cacc96d477e23b63cc934f685b6e42e1655c9a9b94d6d78402de22b8d9776e3915391aa258e57467d770d65480ba2f6a94b0337965a8c659c42b4e90b14da4697d0c0a6d74774c94c52d8ecb694eec747bdaa6c3a6d60739db18c6446090eebba72e62ab88b0e8b88e728ba8cb133d8524eda89a2bff1c8414da3edfa6f83788331c8a7e5a8af2dd3682d4752190a3c689949abdad8350111373e7fb46151f54a10f79d91940e37efb05f9f157bddcfacf018b65a38ab614807c34a2786af4a1d48c4d1c1abd31815715f9d1b103992207fc664f12c82fd923c57d8e7cfb9f4af55182318d055c704865cf484206d60e34cf7fe9b6ce60b1772c5c7cdacb6695227d80da18ec1f98a434b1aaf9c6b6d082f5663aed2bf267e559dca6b93d3ce34273846fc677f529690482df0a8f782b8ad7269f344f5f2b4d320a7ce2d2fa02284f8db634dc930c3e2b9a629245364acf35d41e9a14c88efde4e742ef1ea4b43d0caf2e70d4a617278823e6403934524debbd933e7676e441a48f630dc8bcccd55d9032d6bf3dea97d1669c39fb865b0e619eeb3f5461e517000f5aee3ef2abdb87d3a76b88e140eb4644a9fbddbdc9e20972cdfacf00bffa3a1ca5f84122c2ebc54067cdaa23967eaeb7bbbfe44e5843382b834fae1f62a066688595e4ee67c7ff9858672355abf7893ebeb4bcf88a62b2237c6e6cec9aebe3f28bfc310ced3a590e88d4bd0f53289206deb9addbf6f3c02115ce4980dadfc112683ae250c2d438fd9c0f2a090dbf122a0072828db798bdb868dcd47384dd3f5eeebc0307a5b268683cd51f312e8f02b5a7746b11a97ac43287d9b9765f03c720503cfe6e0117660a4c00d67895224c4d42b032000a10d7a743054758a8f54941fd5eaf72498b678d1579b3de4e5518f90f1e3d32517d09d7f5da9d180215e66218e9dd64036819cf12638ce82712a6cc79a9ddb36e86814b797d72c2bc58b18ba439e99965f745b4fb7de2878e3186e3e7b835c746b0935f6c67e92e3770bd8d5eb4f66d8175ceb7850e418c55e574db891639aa77fc62bc45dcb734681ede8484d4d4109a9adb8c3d00", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x3, {0x0, 0xe}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0) io_setup(0x1fd, &(0x7f0000000480)=0x0) io_submit(r5, 0x2, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x0, r4, &(0x7f00000000c0)='!', 0xb7f40}]) mremap(&(0x7f0000000000/0x9000)=nil, 0xa00000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) dup3(r4, r2, 0x80000) openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x8401) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind(r6, &(0x7f0000001000)=@phonet={0x23, 0x7, 0x2, 0x40}, 0x80) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x5, 0x5, 0xfffffff9) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@RTM_NEWMDB={0x58, 0x54, 0x1e5, 0x0, 0x0, {0x7, r9}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x0, 0x4, {@ip4=@broadcast}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x1, 0x2, {@in6_addr=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x86dd}}}]}, 0x58}}, 0x20044050) 7.589649207s ago: executing program 1 (id=5844): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000200)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x2, 0x28, 0x65, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x0, 0x0, 0x11}}}}}}, 0x0) 7.476007099s ago: executing program 1 (id=5845): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20a00, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b405000000000000b600014c06ad3ea36fc7"], 0x0, 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x44041, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fd7000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, 0x0}], 0x1, 0x4c, 0x0, 0x0) syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xc70, 0xf010, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x20, [{{0x9, 0x4, 0x0, 0x1, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r3, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='net/fib_trie\x00') setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000001c0)={&(0x7f0000000140)=""/112, 0x0, 0x1000, 0x4, 0x1}, 0x20) preadv(r4, &(0x7f0000000b00)=[{&(0x7f0000000300)=""/30, 0x1e}], 0x1, 0x80000001, 0x3) r5 = socket(0x2, 0x80805, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r4, 0x40a85323, &(0x7f0000000540)={{0x9, 0x6}, 'port0\x00', 0xd0, 0x804, 0x7, 0x3, 0x97, 0x4, 0x7f, 0x0, 0x5, 0xe}) sendmmsg$inet(r5, &(0x7f0000000480)=[{{&(0x7f0000000040)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000380)="ddd3", 0x2}], 0x1}}, {{&(0x7f0000000300)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000002c0)=[{&(0x7f00000006c0)='\f', 0x1}], 0x1}}, {{&(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000280)}}], 0x3, 0x4000000) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xc, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f00000000c0)=@assoc_value={r6, 0xd}, 0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={r6, 0xd3ff}, 0x8) syz_usb_control_io$hid(r3, &(0x7f0000000b80)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x7, "fede60e0"}]}}, 0x0}, 0x0) r7 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$EVIOCGKEYCODE_V2(r7, 0x80284504, &(0x7f0000000040)=""/95) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6.587906407s ago: executing program 5 (id=5848): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = openat$binfmt_format(0xffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) munmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000) mmap$KVM_VCPU(&(0x7f0000ffc000/0x2000)=nil, 0x930, 0x0, 0x24132, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) r7 = memfd_secret(0x0) sendmmsg$unix(r6, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) r8 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='%(,c\xbe\xfbL:', 0x0) r9 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r9, 0x1, &(0x7f0000000000)='source', &(0x7f00000000c0)='%.,:', 0x0) mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000003) write$binfmt_format(r4, &(0x7f0000000100)='-1\x00', 0x2) close_range(r4, 0xffffffffffffffff, 0x0) r10 = getpid() openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) sendmmsg$unix(r1, &(0x7f0000008700)=[{{&(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000300)=[{&(0x7f0000000140)}, {&(0x7f0000000200)='}$', 0x2}], 0x2, &(0x7f0000000380)=[@cred={{0x1c, 0x1, 0x2, {r10, 0xee00}}}, @rights={{0x24, 0x1, 0x1, [r7, r1, r8, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [r4, 0xffffffffffffffff, 0xffffffffffffffff, r3]}}], 0x68, 0x40}}, {{&(0x7f0000000400)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000a40)=[{&(0x7f0000000480)="dc3a1fff7a1909c74fabe750e782d88ef71a16f60460d6de675867b1a6b966e0e3fe2d0ea033bfd8bb051fc300849a322a05933197edc7a357b06421899510197c1c3fb7acac4eb35656634d7375aa0b61e743265f4c8cdaa3adae881cdd1dc1e9593eb0a8eccad2461781b0566ea048bb7c74c8a309e6656233f451b9b0f5ce1f71c217346b467a9535ade4272206b932797db58b4d9027bc4521ccb21405bcccde3faa5e080384e56b1e8d563a5223a8d30091f6b8d5099939571a581ad957d9a4607b44906820c0b41ba2173c5a781201b2e8", 0xd4}, {&(0x7f0000000600)="c5391cf9d70b9235cdb442d8d644f2f525072c77613e46c82a61fa551bab389d7a7faf0889416cd956ac6edb481530", 0x2f}, {&(0x7f0000000640)="0762e9f0c4a3271bc8525600ef47627f9c28fd654305e4c59aeba117ee4846276b9a33c8b0f4227d0782dcd8fa962aff25263ae27fd13a17c19ddf19eb047bf3892868f84d9511f0d02e88bbe0004f26fbb243930405cf4402de235d69150fde2adff1e3929ec1e3ea1100ec4132d4239c37476682764b46126ea84870a10ee2e60648469b9fe9bfe520db078007d6eb250e26475362e6b585ebcf4a73", 0x9d}, {&(0x7f0000000700)="a73ba0eb500e66493138300d1a337de1ba8bf1e7c2e8bb02cd7f6eea8db3985a50532dc239004972cc40164329e589e40079b0202580a23e079501bbaffcfb78606a5491f255f074033b9c56d4482f10b5e2dff3f7e8321b5db7841890047d35105a7d2e1458ee8694b3fc5101778bc6c2b56178971cee538a8e2011331d2000301155ec819ccd6f26ff92f8559ebfc9d49375b945a93cfb997360a0b17d84c5766e6d7f24b4f871ada16b7f1e929548", 0xb0}, {&(0x7f00000007c0)="99b022724b10cfa8a2c5a850fb0e4b99c66c92fcea5af9e38333477d6846dc", 0x1f}, {&(0x7f0000000800)}, {&(0x7f0000000840)="10f9b133ab1aeeda425f38cb00b5a050d94405960f14f8bf460790dd56b51c05fe9dcd8755335d2c4e73819bf25fc3cdf9ac4a1cd74dbd4d5e2f577e0911f7c087e2e11cd7ec7995626ae15f880aa33877952277d0f315cb4ea10cddb7071fba35e375818aa37bbe91e5a0d326deb21bbcbc214e4cd6b841992d1d6896af21cfb4ae99a559592d9b2e42391a461a91051ceeae3ded9a9eb68c2ab297086b3293e70ff78cba223740e164cc9dd2102fef0573728441f9573cfa081de8224f5110", 0xc0}, {&(0x7f0000000900)="85ee7aa6ec4036d2bb816f0b3751b41f993d2cfd34cdffb0da597a60664df6b79b0513309daa6a80e33cd83d3b9e66cf98ea2727ed230bb1dccb505797d6fb10d1cb7a", 0x43}, {&(0x7f0000000980)="7aa4", 0x2}, {&(0x7f00000009c0)="ef8942edd1accad61913007d42b89d3bcc61edb85ef19a8b0882e7afffde7368a5ec348658ad88a55a58df920785a0c2a4c5ac1c09b332e72ce82d5013e91ccbf4e2d188ce234fac1015ccaad163d6d350b6a61fdd9319ded5fbd296e8a87da1c705db11eaf589608ea1ccb8", 0x6c}], 0xa, 0x0, 0x0, 0x850}}, {{&(0x7f0000000b40)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000d40)=[{&(0x7f0000000bc0)="5bce1f2acaa4b48b68efd5cdaf9ebb610d8e4a2ec4324800f41a4947b91390d9f2530be317002b2bc8c9be7803b60a2858fe79f8337899c07d9668f465708a43447d7833e9e0dc6789fda28d832a4e9b8f826efd666c95ad790359387c842fd389120648af00e6b4b6bcdd291e55d9a168a4785973189dadfebe90a03cfbaf4f72c4b3fc5d5c9f8b05db", 0x8a}], 0x1, &(0x7f0000000ec0)=[@cred={{0x1c, 0x1, 0x2, {r10}}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {r10}}}, @cred={{0x1c, 0x1, 0x2, {r10}}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}], 0xd0, 0x4000}}, {{&(0x7f0000000fc0)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f00000041c0)=[{&(0x7f0000001040)="624b48103947114fa2fecd931089542c2b33a48441586c354d27d325b959948aa94946b7a3dea8195f0bab0c3de0149156312984e502a287eba4356384f472a4f6a6b9670f81dfdc6d292342e11698297ed1ef970bac58da697abc44df420909248a05ea7146d6ecc204da52e0e42e50a2", 0x71}, {&(0x7f00000010c0)="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", 0x1000}, {&(0x7f0000006200)="f575ea795834a97ced654b7947092ea9eb9bbe11f13bc6a08fcfdabd8cf7cef371249ee343b279c30e07c64d3c46f93dc83376755ddfff333cea3435b8e7791193fb0caa8d42f29f6a5ce39847e72a17c078fd6ad9b78ee283559203d2", 0x5d}, {&(0x7f0000008340)="9f1ec342ece17be76cec0c96a2a3e5a5276ab53e402457540a5d5911fd24d06eac2148533da029e1c899d396b65702baf44b3e27ee90eb23d1489dccf441007f27aefbb238b0b439378ca8a89d6f2d90017b65b91c07e40f4d6860b3e9bbcb295925b1713749945288f6a1326d29b4111933efebbff764f059de23826bee3e48073a3d8049189ddb31fbe4941533c8554f5a19e2f11a45ae002d664395b46fe83a8c27b153fddd016d0553319cdf72d3b32433dacc2a", 0xb6}], 0x4, &(0x7f0000008400)=[@rights={{0x14, 0x1, 0x1, [r7]}}, @cred={{0x1c, 0x1, 0x2, {r10, 0x0, 0xffffffffffffffff}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r3]}}, @rights={{0x18, 0x1, 0x1, [r3, 0xffffffffffffffff]}}], 0x68, 0x4000000}}, {{0x0, 0x0, &(0x7f00000084c0)=[{&(0x7f0000006280)="d11264f4dccaecba7dcd6fb5ab1b1ee89ea7f447a392c66d37bd3aaae81e34", 0x1f}, {&(0x7f0000008480)="df8cb1adddc9cb11aea1018c5e1b02fbbf5c2729983ca225216713802572585ee7a5847b6c6fbfa0c5f6375fb668b3c940ea27ee801223bbebe365", 0x3b}], 0x2, &(0x7f0000008640)=[@cred={{0x1c, 0x1, 0x2, {r10}}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r3, r8, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r10}}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x98, 0x4000}}], 0x5, 0x0) close(r1) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) 5.260014742s ago: executing program 1 (id=5851): syz_usb_connect(0x2, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000842c4b083d0fa368a71d01020301090009050a03400003040d09050910ff03000904090508100002070550"], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x9e46, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) shutdown(0xffffffffffffffff, 0x1) syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x46d, 0xc09b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x2, 0xa0, 0xf, [{{0x9, 0x4, 0x0, 0xe, 0x2, 0x3, 0x1, 0x3, 0x5c, {0x9, 0x21, 0x70, 0x14, 0x1, {0x22, 0x474}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x9f, 0x6, 0xa}}, [{{0x9, 0x5, 0x2, 0x3, 0x200, 0xf7, 0xc, 0x6}}]}}}]}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x300, 0xf9, 0x4, 0x9, 0x8, 0x7}, 0xd4, &(0x7f0000000100)={0x5, 0xf, 0xd4, 0x1, [@generic={0xcf, 0x10, 0x2, "1f15c7f6445a8dbbb59d7e5221e58e1a2e7a56ff41a00a39f0f28a10c956e71738fa6604b55ce5f582e44750fa9c4e4a98bd09b4640649e2ddfd9d7d07c33891983a33aff9fe63572c599c6d0912db9d56a99df52b7052ff3a03cd83fee126aac0a6d5fac7654bf7136ab842abff771ef569ced875316b443d41c4c3bd01d13918bfa2f6764416ba140b156fc0a71647f805af6818d9778c02a5a617501653e9d76160425cf6eb8df142d21a46d4eb9af92c239271359e23e9b28d11d7ebaaa3c747417ae2dc461dbf17af53"}]}, 0x3, [{0x68, &(0x7f0000000200)=@string={0x68, 0x3, "c117d044a54fe9a106ba995969c64ca2bacc32eb6ee817fcad7df19b6412e8e5191d0edd72cf70340d4129234945e989a68330b8e1e0aa403aec0909bbcd8f563f3f719e341414b17568fed458c330684ff211020f6add8c9779488c278fafac80619df7dcc8"}}, {0x4, &(0x7f0000000080)=@lang_id={0x4, 0x3, 0x3c08}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x2c01}}]}) 5.011632099s ago: executing program 0 (id=5852): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="05000000000000008b679b65000008000300", @ANYRES32=r2, @ANYBLOB="080005", @ANYRESOCT=r1, @ANYRES8=r1, @ANYRES64=r1], 0x24}}, 0x0) 4.88051507s ago: executing program 0 (id=5853): r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = epoll_create1(0x0) epoll_pwait(r1, &(0x7f0000000080)=[{}], 0x1, 0x3, 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000000)={0xf010000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r2 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000010, 0x13, r2, 0x0) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) 4.696008198s ago: executing program 0 (id=5854): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xf2, 0x30, 0x39, 0x20, 0x2c42, 0x1202, 0x8540, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xc, 0x2, 0x2, 0xc1, 0x7f, 0xc, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) (async) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) inotify_init1(0x0) (async) inotify_init1(0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') (async) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') read$eventfd(r2, &(0x7f0000000080), 0x51) fsopen(&(0x7f0000004240)='fuseblk\x00', 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x45, &(0x7f0000000000)={'ipvs\x00'}, &(0x7f0000000040)=0x1e) syz_usb_control_io(r0, &(0x7f0000000200)={0x2c, &(0x7f0000000080)={0x0, 0x21, 0x90, {0x90, 0x8, "47884d876365f10777e717df8d734462a2b750e14128101659733d9b5edab0f7661b48cfaa2833559601a1353d7d61cadc8a9e94ec809ec39dba36f704c640d5e22f8930742c257aa999fe29acaba3f15e0e687e8e409c135062fea8066f2c7825061fdd184516eab33730e6ec06a3c53c23d14d3d8fcfe7b4bd7d09ed04894cf3088ad750665946b98799ae9803"}}, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x843}}, &(0x7f0000000300)={0x0, 0xf, 0x1c, {0x5, 0xf, 0x1c, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x6, "4ca3ec50e10a492f185d3b2d92ebd584"}, @ptm_cap={0x3}]}}, &(0x7f0000000140)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3, 0x10, 0x7, 0x6, "bcdac2dd", '\a\x00'}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3, 0x0, 0x3, 0x5, 0x7, 0x8a8, 0x1001}}}, &(0x7f00000008c0)={0x84, &(0x7f0000000340)={0x20, 0x17, 0x7, "798880bca84a6a"}, &(0x7f0000000380)={0x0, 0xa, 0x1}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f0000000440)={0x20, 0x0, 0x8, {0xc0, 0x20, [0x0]}}, &(0x7f00000004c0)={0x40, 0x7, 0x2, 0x401}, &(0x7f0000000580)={0x40, 0x9, 0x1}, &(0x7f00000005c0)={0x40, 0xb, 0x2, "8796"}, &(0x7f0000000600)={0x40, 0xf, 0x2, 0x1}, &(0x7f0000000640)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000680)={0x40, 0x17, 0x6}, &(0x7f00000006c0)={0x40, 0x19, 0x2, "f92a"}, &(0x7f00000007c0)={0x40, 0x1a, 0x2}, &(0x7f0000000800)={0x40, 0x1c, 0x1}, &(0x7f00000002c0)={0x40, 0x1e, 0x1, 0x8}, &(0x7f0000000880)={0x40, 0x21, 0x1, 0xe}}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000c80)={0x34, &(0x7f0000000480)={0x40, 0xb, 0x1, "e4"}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000c80)={0x34, &(0x7f0000000480)={0x40, 0xb, 0x1, "e4"}, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_DEFRAG(r1, 0x50009402, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_connect$hid(0x5, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011801000000405804155000000000000109022d00010000000909040004010300000009210400040122070009058103"], 0x0) (async) r3 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011801000000405804155000000000000109022d00010000000909040004010300000009210400040122070009058103"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) (async) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x7, {[@main=@item_4={0x3, 0x0, 0xa, "a43daeb4"}, @local=@item_012={0x0, 0x2, 0x4}, @local=@item_012={0x0, 0x2, 0x2}]}}, 0x0}, 0x0) syz_usb_disconnect(r3) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000180)={0x40, 0x12, 0x1, "b4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000180)={0x40, 0x12, 0x1, "b4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) (async) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4001c00) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000240)={0x20, 0x8, 0x1, "b4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 4.534799702s ago: executing program 2 (id=5856): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="17090100000000000000010000000500070000000000080009000000000008000a0000000000060002000100000014001f0000000000000000000000000000000000140020"], 0x5c}}, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000180001000000000000000000020000000003000900000000060015000400000014001680100008800c00038008000a"], 0x38}}, 0x0) (async) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="f80000003e000701feffffff00000000017c0000040042800c00018006000600800a0000d1000280cb0014"], 0xf8}, 0x1, 0x0, 0x0, 0x4048011}, 0xc040) 4.440180863s ago: executing program 2 (id=5857): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000003900)={0x2, 0x4e24, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @empty}, 0x10) sendmmsg$inet(r0, &(0x7f0000004300)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="81", 0x1}]}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000600)="32461fed3d61c850f2e6e9d7f14cfc3465eb818a0f2778c573a42bf3c417aaef41c897216ec3295c2e4e99732a8bf329d941900835c6716fd9071bd51d1b96bd6e84f14b02c66440ab48cfd2ebc4", 0x4e}], 0x1}}], 0x2, 0x8805) socket$inet_smc(0x2b, 0x1, 0x0) fsopen(&(0x7f0000000080)='autofs\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0xc8300, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000000c0)={"766cace9c303653f121a2d892000", 0x0, 0x0, {0x81, 0x50000a}, {0x7, 0x8}, 0x5, [0x8, 0x3, 0x4, 0x6, 0x0, 0x400, 0xffffffffffff0001, 0x2, 0x8, 0x7, 0x80000000, 0x81, 0x10, 0x522586f, 0xfffffffffffffffb, 0x7]}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 3.957814878s ago: executing program 3 (id=5858): syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "dfa5ef", 0x8, 0x2f, 0x0, @empty, @mcast2, {[], {0x0, 0x6558, 0x8}}}}}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000900)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x10) 3.912179475s ago: executing program 3 (id=5859): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)="b695239c08196411731fab0a53dff72d3b912a4c8c8ae6bfe7c7a41b2224bd9057314eaecc8b5ef1615c4de085d09dc96aa6f36060732826c0e3e473c0a25e7e2d0aa543b3ca73575cff431fef8c6e67a630e54ba2c6caae10cf00ad0b0ae4dad4bf1d7ae18a88a6d2708cba894deb38669e18ec5818acb3a51f7e2a773e1cdc22399f34a95753795c5acd9531caf27ffb707b980cc4cf895a2b45afc19e37628e2e41c6a13cf268f44b474eb1dfa40a3e94ae0bd61d4630f0cb71aeb4291d35a4ece94df5902bc4451367e71a1fbe024a670606630d07c77626", 0xda}], 0x1}}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000500)="28e6ceb00e919b519d9c75d8fcf6370a0e5820a3ab6a48c49f564a91ccef167412e24838a1258d11365ba45a2f25b09276ee5b5f9480a756f4470ea61b2fb4efb8c84c471dc92c8123010cfdbdb58334fab843d30b6f1e0f4805c9a152b188a9f605b298e6f1", 0x66}, {&(0x7f00000001c0)="f2c0293a7f3c9fbf", 0x8}, {&(0x7f0000000640)="a56e36f21e5b3781a76eaf88293ba3631f4c249d6158a8f24521994342243ded321f5d6d4a3a8ed71abe4e83de427ca7f920c61b1538ef5718853cb9c00576a9e573caa79cea", 0x46}, {&(0x7f00000006c0)="52fad8a2f6e21b15aade9d6f12393327d118219aab8428e0f3480004e52eafe4592e182d4cd7f609834f6214afcceeaacdd3ce254ca8f3f4330db1ee806231cfa98b5736d6f3afbadd8022414c8613ac341b8d1538b6cf5d199b7f2b725c9353de81c0b1e0c8ac5d35b834fd06f4637e2507c227b801c6621964aaed5895438fd97d030cd34829f4c54b99d5efb7893f28f4847812f491f7de6864e4b1304dc35ff1759cef048b21bc4ec21a879978ac29ceced9e7d023469a1b06faaddfa976300f676404adb82ebf8e", 0xca}, {&(0x7f00000007c0)="1b3599cc95cb5e69b24ff9b2fd5b1d69d1f18403cf1373d55b65db231bdf20f8738ac39578900a2609508508529dc99cc2e0c7693ea42658dbbcd73a170fd94f4bb03c1de81e670864d13d54a2c849d4f16e19b50dee3f8a13b62dce", 0x5c}], 0x5}}], 0x2, 0xc0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, 0x0, 0x0, 0x10008095, 0x0, 0x0) 3.57206297s ago: executing program 2 (id=5860): io_setup(0x6d, &(0x7f00000000c0)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000000)={0x0, 0xea60}, 0x10) io_submit(r0, 0x2, &(0x7f0000000140)=[&(0x7f00000001c0)={0x0, 0x4, 0x0, 0x0, 0x0, r1, &(0x7f0000000200)='Y', 0x1, 0x0, 0x0, 0x2}, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x2, r1, 0x0, 0x0, 0x0, 0x0, 0x2}]) syz_clone(0x648e7000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000e40), 0x400, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f00000000c0)={0x1d, r4, 0x1, {0x1}, 0x1}, 0x18) connect$can_j1939(r3, &(0x7f0000000640)={0x1d, r4, 0x0, {}, 0x1}, 0x18) sendfile(r3, r2, 0x0, 0x1000000000000a) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_mtu(r5, 0x29, 0x17, &(0x7f0000000040), 0x4) sendto$inet6(r5, 0x0, 0x0, 0x240425c4, &(0x7f0000000080)={0xa, 0x4621, 0x0, @local}, 0x1c) r6 = memfd_secret(0x80000) read$FUSE(r6, &(0x7f0000005fc0)={0x2020}, 0x2020) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000000, 0x12, r6, 0x5af0e000) r7 = socket$netlink(0x10, 0x3, 0x12) r8 = accept$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000180)=0x14) recvmmsg(r8, &(0x7f0000005d80)=[{{&(0x7f00000001c0)=@nl, 0x80, &(0x7f0000000440)=[{&(0x7f0000000340)=""/247, 0xf7}, {&(0x7f0000000500)=""/240, 0xf0}, {&(0x7f0000000240)=""/179, 0xb3}, {&(0x7f00000006c0)=""/232, 0xe8}], 0x4, &(0x7f0000000480)=""/56, 0x38}, 0xf78f}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000007c0)=""/244, 0xf4}, {&(0x7f0000000600)=""/56, 0x38}, {&(0x7f00000008c0)=""/31, 0x1f}, {&(0x7f0000000900)=""/4, 0x4}, {&(0x7f0000000940)=""/81, 0x51}], 0x5, &(0x7f0000000a40)=""/32, 0x20}, 0xd0}, {{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000a80)=""/115, 0x73}, {&(0x7f0000000e80)=""/4096, 0x1000}], 0x2, &(0x7f0000000b40)=""/19, 0x13}, 0x4}, {{&(0x7f0000000b80)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000000d40)=[{&(0x7f0000000c00)=""/8, 0x8}, {&(0x7f0000000c40)=""/241, 0xf1}, {&(0x7f0000001e80)=""/4096, 0x1000}], 0x3, &(0x7f0000000d80)=""/180, 0xb4}, 0x8}, {{&(0x7f0000002e80)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f00000050c0)=[{&(0x7f0000002f00)=""/4096, 0x1000}, {&(0x7f0000003f00)=""/154, 0x9a}, {&(0x7f0000003fc0)=""/54, 0x36}, {&(0x7f0000004000)=""/170, 0xaa}, {&(0x7f00000040c0)=""/4096, 0x1000}], 0x5, &(0x7f0000005140)=""/108, 0x6c}, 0x7}, {{&(0x7f00000051c0)=@caif=@util, 0x80, &(0x7f0000005340)=[{&(0x7f0000005240)=""/218, 0xda}], 0x1, &(0x7f0000005380)=""/87, 0x57}, 0x4}, {{&(0x7f0000005400), 0x80, &(0x7f0000005900)=[{&(0x7f0000005480)=""/71, 0x47}, {&(0x7f0000005500)=""/182, 0xb6}, {&(0x7f00000055c0)=""/21, 0x15}, {&(0x7f0000005600)=""/75, 0x4b}, {&(0x7f0000005680)=""/13, 0xd}, {&(0x7f00000056c0)=""/181, 0xb5}, {&(0x7f0000005780)=""/204, 0xcc}, {&(0x7f0000005880)=""/71, 0x47}], 0x8, &(0x7f0000005980)=""/252, 0xfc}, 0xfffffffb}, {{&(0x7f0000005a80)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private1}}, 0x80, &(0x7f0000005c80)=[{&(0x7f0000005b00)=""/192, 0xc0}, {&(0x7f0000005bc0)=""/60, 0x3c}, {&(0x7f0000005c00)=""/102, 0x66}], 0x3, &(0x7f0000005cc0)=""/186, 0xba}, 0x400}], 0x8, 0x0, &(0x7f0000005f80)={0x0, 0x989680}) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=@newqdisc={0x24, 0x10, 0x1, 0x3, 0x0, {0x0, 0x0, 0x0, r4, {0xffe0, 0x1}, {0xffff}, {0x5, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x44080}, 0x4000c00) 3.512180312s ago: executing program 5 (id=5861): socket(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x22042, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x1000, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0xd7) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = landlock_create_ruleset(&(0x7f0000000340)={0x7e64, 0x3, 0x2}, 0x18, 0x0) landlock_restrict_self(r3, 0x0) r4 = mq_open(&(0x7f0000000180)=' \x01\x9c\x147\xb3\xcf\xfc\xc3\xa2W)\xebs\x93\xa7\xc7!Q\x8f\xf6\xec\xa5fs\xf5l{T\x87r\xd2)r\xa7\xd6\bO\x9a\x98\xf52:\"\xf4\x12\xc0T+\xcd\x9fv|\x8d\xd5\xb2Dvc\x8e\x93\xd8\xd6\xa0\xc56\xd2x\xe3c:\x00\x00\x00\x00\x00\x00\x00\x00\x97\x97\x9c \xdc\xaavt\x18\xcen\xe4\x03\x84;7\xfb\x84r\xf4\xe7\xc9\b\x987\xaa\x85\xfb\x05%\xa8\xe5b\x81\x8e}\xe1r\xf7s2\x82\xe57&b', 0x41, 0x80, 0x0) mmap(&(0x7f000074f000/0x1000)=nil, 0x1000, 0xb635773f04ebbeee, 0x11, r4, 0x15b77000) 3.163094926s ago: executing program 2 (id=5862): syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5021900000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x2}]}}}]}]}], {0x14}}, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socket$nl_audit(0x10, 0x3, 0x9) openat$vmci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) socket$igmp(0x2, 0x3, 0x2) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket(0x2, 0x80805, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmmsg(r2, &(0x7f0000000540)=[{{&(0x7f0000000580)=@ieee802154={0x24, @none={0x0, 0x2}}, 0x80, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x20}}], 0x1, 0x400c0d0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="400000001e00010000000000000000000a000000", @ANYBLOB="0000000014"], 0x40}}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$tipc(0x1e, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = socket(0x28, 0x5, 0x0) setsockopt$packet_int(r3, 0x107, 0x10, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r4], 0x20) 3.000451597s ago: executing program 3 (id=5863): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_X86_SETUP_MCE(r3, 0x4008ae9c, &(0x7f00000000c0)={0xa, 0x5, 0xd}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000000000008902"]) bind$inet(r0, &(0x7f0000003900)={0x2, 0x4e24, @multicast1}, 0x10) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d4", 0x5) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$alg(r5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x40010}, 0x14000012) sendmsg$nl_route_sched_retired(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000009c0)=@deltclass={0x30, 0x29, 0x200, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xa, 0xa}, {0x6, 0x6}, {0xe, 0xd}}, [@c_cbq={{0x8}, {0x4}}]}, 0x30}}, 0x0) recvmmsg(r5, &(0x7f0000007480)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000080)=""/5, 0x5}, {&(0x7f00000001c0)=""/43, 0x2b}], 0x2}, 0x8}], 0x1, 0x2, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @empty}, 0x10) sendmmsg$inet(r0, &(0x7f0000004300)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)="81", 0x1}, {&(0x7f0000000180)="7f8f9f4c1a5f277c2edddcc1c8c5dfb12ed565a203dec02c9940f4b12be36a2b78665e3f05b0f0eed0a68d8acaaf17f5b8a50186"}, {&(0x7f00000001c0)="a74e669ad659248e24c50674665f00e4d716e370ac6178373116d963720e41ffbe4c8484c11e03dc6e0bc21ef458e6306d4b92140e6194220d47ac43e2642dd5bda7df58910d1049d7ff8c81f5cb6ab6888168a9bb7ce386ef0549593fe6683e94ebc70ff3d91390ee5d9625b2ef6cbb5fb3f86e15cb3c61918b66e1b9afb788b6d12c3483942852ed7d2e8d69b8ad0d6b9a31e6ae04d24636af2e33418cc3579be62dc9a8cb779d6336b02505176efe39f67bf60c844182c0da64ed60b680a58b8e5cf47b6b1fa8c66b79af66290953c5b8838cc64125c82f58d0b7d60be5bc3d30354281cb61a4f703693f3109a686fc7d353e594c"}, {&(0x7f00000000c0)="7e792bd8a552b2c44d7569d3a0bd878f46bec557326f360d41d4ad8fb00044323da1068e2284f0dd488c00c347f63ed493f7a8536271ea8f390ee6a909f44d2713edf2aaf063882165c5a3a1013894f28f4643dfefb74a70af1a3c465658f477cbfa4aa80ba76da99e1708674a1da7ef00138b25f9c94804799108b33dfc3ab27f75540903012075dbaafb5b47ec71c86d108afa1a22a71841c42fc6e3d23ff1ce19aae51a7bdb472a11bf4fd68b1c8909087ec6683309d2b5"}], 0x1}}, {{0x0, 0x32, &(0x7f00000005c0)=[{&(0x7f0000000000)="d8da2f5b13cc", 0x1}], 0x1}}], 0x2, 0x5) setsockopt$inet_tcp_int(r0, 0x6, 0xc, &(0x7f0000000080)=0x7fe00, 0x4) 2.986506801s ago: executing program 2 (id=5864): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = syz_io_uring_setup(0x5c2, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x3, 0x348}, &(0x7f00000001c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000000)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xc}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20044010}, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_trace_dev_match', 0x0, 0x0) pread64(r3, &(0x7f0000000100)=""/78, 0x4e, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') prctl$PR_SET_NAME(0xf, &(0x7f0000000100)='\n\xa1&\xf2\nl\x01\xd335\xa4\xb9>L\xd6Z8\x987\xee\x83\x7ffn{\vM\xfe\x00\xca\x11@\xb5\x02\xbf\xf8*\x03Q\\*\xfapG8%}+(V\x8c\xa0\x8d\xdf\n\xe7\xcaJg\x8b\xc3\xafH\xf0\x1d\x82M\x9e \x88`3\xcd\xd9\xbcW\xfe\xa9\xaa\xdcxV?\xd9(\xcf\x86\xb5\xf92\x1c\x1a\xe5}\x1f\xfb\x96\x9e\xc7\ad\xd2;\x94\xe7\xea\xc0\x1ew\xeds;\xb3') preadv(r7, &(0x7f0000000080)=[{&(0x7f0000000040)=""/46, 0x2e}], 0x1, 0x0, 0x0) close(r6) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000680001ed020000000000008000000000000000000c000200010000000600000008"], 0x2c}}, 0x4000) write$binfmt_misc(r5, &(0x7f0000000000), 0xfffffecc) splice(r4, 0x0, r6, 0x0, 0x4ffe6, 0x0) io_uring_enter(r0, 0x6e2, 0x203900, 0x1, 0x0, 0x0) 2.47759862s ago: executing program 5 (id=5865): r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x10002, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_RW$syz(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x8, 0xffffffffffffffff, 0x0, 0x9, 0x33cca0, 0x92, &(0x7f0000000040)="6e93a40170ee25e3b1bef3332674ee9483f5e41212be3745d9e4c15c6d7463132862d0e36dadc987f7980ec77543cd405a656129bd92fc5fcd3a734fe2792cdbaadbefbe203f9a6e9865a3f2c00f82bbb44994f8a5bd27ec42d4043dc63e873e2d1900698384b92ea8effb88fefdd9bdc933c2f7711717f1f4470fc1a61335b2807bbb1854c610ec0bc74a4299f1dc486974", 0x5}) (async) r1 = io_uring_setup(0x2c59, &(0x7f0000000180)={0x0, 0x7c33, 0x8000, 0x3, 0x26f, 0x0, r0}) io_uring_enter(r1, 0x5596, 0xc05c, 0x11, &(0x7f0000000200)={[0x2]}, 0x8) (async) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000240)=0x400, 0x4) (async) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000880)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000840)={&(0x7f00000002c0)={0x580, 0x0, 0x300, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x400}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x800}]}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xb25}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}]}]}, @TIPC_NLA_LINK={0x6c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_BEARER={0x17c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x641fcf73}]}, @TIPC_NLA_BEARER_NAME={0xa, 0x1, @l2={'ib', 0x3a, 'lo\x00'}}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'ib', 0x3a, 'veth0_to_bond\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @local}}, {0x14, 0x2, @in={0x2, 0x4e23, @broadcast}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x2, @local, 0x2}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0xfffffffb, @local, 0x7}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x2, @private2, 0x6}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x1, @dev={0xfe, 0x80, '\x00', 0xa}}}}}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @rand_addr=0x64010100}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x9c7, @ipv4={'\x00', '\xff\xff', @loopback}, 0x2}}}}]}, @TIPC_NLA_BEARER={0x16c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x2225, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x10}}, 0x2}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x5, @remote, 0x8}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x4a19cd37, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xfffffffc}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x103d54b0, @local, 0x5}}, {0x14, 0x2, @in={0x2, 0x4e20, @rand_addr=0x64010102}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @empty}}, {0x14, 0x2, @in={0x2, 0x4e23, @private=0xa010100}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x7718, @mcast2, 0x19}}, {0x14, 0x2, @in={0x2, 0x4e21, @broadcast}}}}]}, @TIPC_NLA_NET={0x40, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}]}, @TIPC_NLA_BEARER={0x94, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x200}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @private=0xa010102}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x3, @empty, 0x1ff}}}}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_MTU={0x8}]}]}, @TIPC_NLA_SOCK={0x50, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xaa}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10001}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffd}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xebe}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_SOCK={0x6c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x79}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfffff6e9}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x70000000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7b6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}]}]}]}, 0x580}, 0x1, 0x0, 0x0, 0x4000004}, 0x40000) r3 = accept4$packet(r0, &(0x7f00000008c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000900)=0x14, 0x80000) (async) r5 = openat(r0, &(0x7f0000000940)='./file0\x00', 0x103000, 0x130) fremovexattr(r3, &(0x7f0000000980)=@random={'os2.', 'ib'}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000a40)={'ip6tnl0\x00', &(0x7f00000009c0)={'ip6gre0\x00', r4, 0x4, 0x5, 0x0, 0x2, 0x8, @mcast2, @mcast2, 0x40, 0x1, 0x3, 0x3}}) bind$xdp(r0, &(0x7f0000000a80)={0x2c, 0x0, r6, 0x34}, 0x10) (async) ioctl$KVM_RUN(r0, 0xae80, 0x0) (async) setsockopt$XDP_TX_RING(r5, 0x11b, 0x3, &(0x7f0000000ac0)=0x104002, 0x4) epoll_create1(0x0) fcntl$getownex(r2, 0x10, &(0x7f0000000b00)={0x0, 0x0}) waitid(0x0, r7, 0x0, 0x8, &(0x7f0000000b40)) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c00)={0x3, 0x4, 0x4, 0xa, 0x0, r5, 0x1, '\x00', r6, r0, 0x5, 0x3, 0x2, 0x0, @void, @value, @void, @value}, 0x50) request_key(&(0x7f0000000c80)='logon\x00', &(0x7f0000000cc0)={'syz', 0x1}, &(0x7f0000000d00)='[)%\x9c-\v!m\x00', 0xfffffffffffffffa) (async) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(0xffffffffffffffff, &(0x7f0000000e00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x20, 0x140b, 0x20, 0x70bd27, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000010}, 0x10) (async) write$UHID_INPUT(r5, &(0x7f0000000e40)={0x8, {"4b097e3a8f4f05fc2bb052684f9374f6a486f8b22339a51901de4cc5a0db3e001a03a9c0112b2a6ee1a07b39b2433eec555782722aaa0cf4600ea15bf062de1895eee04decd5c630599323f131f3e84f0067be7285bc9743bdeaddff69de332c6aa135ee389fae0f3092f13c97a012b09e29e4cd921017b3f6bc3ea05d3b12f8d3671527f96e8b07d843b480476e75d898308262c14c31c9aa7815f562278799ec743cf1e3a39e4666322f0c9097a8cd439bcb6d353314629dcbe52576f7902c91bc447e5550129739b39f3afa78c94c10b08ee2b0f9c4bdfaa53b6ceb51e62727ed41724bcd668100e20b594a05d1671341d66fc48ddd6172f5602ad762b4330a825a3856eb1efc2ec72a9f08d8369b45d11273400d887506fb7ed578c8fcc20a02e3c4b4a134fc706b925871461f18f32c2bfaa433161f8fbbdbb0a1067ca2be680549d7de62241802e8a2609cac5587bdb5b9881c689e9f30a7db4c3b7081dc3e1bf2e641759e27c8ec75f81f7f216b7acf478eb9a5e536b777f753641201f347d896b3cfce6e1e75dc9c0d534edbde2dcee5eed61e7532aac1892dc5d06716bd33e8f1cc485723bd51c52ffc41f5f3fb76707f09d3a44487c73702a6c30002ea62c07a5cc05c42161aa14967197794491f08b58eddf05799a389fe1c013bdbd38e8971af847e5896f6976d58e0f1286a0dc2ccb8f5fa3a7a15ab8e4f6a199af1f0f0acb0c59072df6c006178f7be44b6fb8e69e05544510e89a779eb65a61e255224e385f30a91fd83fe9f088dcde6a945932d038dff0a124d5788770fd2e1e0a37bf668fac58f89e83b6ed44ca8a9d4b2e4e84d18bc2bff9448506deef75e06f744098d19934ff298f66fc1321408d5f13e2b8c5a777c738d8d50371f9925143ae173b9288686b1f0293b9251685876b90340c0c32f7dbfd1ccffeb6ce3c9be7bbabab5067708569cf37c1614d0cfd430b8a4890f064200bdbaa36229ac9628eaaf102e18033636c45fd715566229e6b7f5d09110b61980b678dd5b60eddeaa7118764096b6340b1aeaf873f49a6b5d354fd6a2792ff66d8c59bff4f2cd65655bf0666bfe5b2d6987a542371cadb5655e2624c013625c5805e3f7f1a5897a893550df7c788ef7f149841f42387657ac08021da842edafcd696f4f862fb5bb271b906193848de1156c985d5adf2213b84f6809d4c96dbbefb3bf9e2307562b030d08d0064a4684559e9c21860834c97179385191031f8ecec711bf6c833c17ec9aa5e06088cbe20eccffd3705012c5500fde1489d8b74162629230b7340fd15dbf90e1a2e4db3165613168ac40f4a07f7803d72254a6a7b031e92eed98f10feac716fa192736cf2f76b5d92284942666707868b5134fbaae2e18c3ea174aa9027d6bc49e002e2cf61dc3cc2b373e1aad8f5fef94b6c861f69548b0c8db0a579f45271c1ffa9cec4732bb5601eae5c9dcd5dbfa390f43e3f4a18a4c06371f971726d983e51d557877f94e4a116839d29991eadfbd6ccf289a7a47a0217e1349e53679b2a1269b83a664d7c73077581fc8eae848568dbf08f7c1fae7c773791404a9fb18ce653c4c27f0153895e24c0c269176e9254b9b550efc1888862c265a1b955dbe449c941c12cc67194d3a69e55c80c7a96d6092de30665577e34231f269cc06470f4f6841299dd1667c60dee48342a8defa5f0fdbc5adb29f57a39ffa98c48191f0b6a39840a7a0aa6001a0c60029f3a25591a3aa5cbdc6edf9bcaaa96047e432913c9901abd869aa15536fc16305bd2c88ce7deefec21dae390e01fd95684915f60cbf1efde9125ec498abdf8758e9b02b263c9da902d61e7fae810eb38ce609133d4679a75478a0a36961064f0df66b939c37d62ff0d6aaaafe47e443b2082b7573a1db428572bb94bbe9707f350c1b2bd01d08100023ccbafdddbd7bb9515347b1ba28909d0431047528df722acdbc2c31c294510be806dd1f5cd6417770f261b4438d9e921c5bc1fd84d3631eb20601324b6186811ced4902f59101ece15b2efb41a84ac8c3af560655ea41d1d5db117c0a57f4e93bf56ed28be1f18b13ae2840e4657a62cf38a78c6c1074d11613951045726051660c2d9d188d60a60a532a2073b2775b91373d0b81fab93f5b6e0b487dfb633d0921df2424cd81f4e7601064ffe3502f2bc9ef2daf8075993f6c699cb46f50e717fff7b6a895a79e5203d762f56c135edcf8a314d4e77f2cf49b1d62f8f5a7bf1863b7ed136383bbd1956bc2c82df4f2bc02e1e919f473a3a19de13ed497708b353b969f1389b6a6512c16c8bd643acc5624b69fc6b99257b38b638a94afca1ae90b69230d40054cadb3d981a9398e9f55f96f17f1f6682c562d5f31dddd08e6323ed9d4466909dcd0542c9cb5f2c55d494c65a122be7ce93437e9ed04396a45af8b23d01a59933deaa4414dc932480921d1d7bbdfb172687539fac496f36293eb5565cee688a5d18f5aaf292d573ec86bb3469782750d284f77b3bdffa419cdd374796ffdeac7bf866abd738aa79934a48582bd08a70f29d2e1c0203fc59102ce826c8e284744f72b2f230d35f416f1917801977ca8bf9a40a7947b0d5229da4cd5b44dbd352e635e85d8b763a4cd116a2db626af766840e75a63e9b0c7ef11a1f610e2e6af5cbdb997a9a05dd28083eafad4417f9be19f567d525365666710ebd6d237ae79457960c7c8aa033c0342ba8d74ca295c4dfcb7414f1158d929654a00f8b6fb35a87157cca1000c20637aa1c7f9c345c59e16f8fb254aa4c6f2e9290349425e9e77cd3d7ce9a31694d66f77b4004caf8d8460f916d503e21b3d3010fff034922129e35ad6ed3d5134867feeac53e9a24aa658d7918dfb8ab3d95bb5b5b63c288361ee837e73f566496cdd7d297bcf593fbb9d9b98e7c7cb7e91d42913580d9efa3323d8fa21a485ba28603b760fd99f9c195a0ac040688096467dfdbf151a24dd4ec9ee6bc8082e85aebb118ae0364876758ad169ce56b3c7e2d6324951daf3306a4fa1f7be63cd01f61bdb9024bf635c499c2923345e10adba9883e1b07cd7263934a32edf47bf78c543098eeaa71e2da53a157e29c19faafc1ca5717b882dad181f912303183e4dcbe6672be912ab6fd94a0e390a76987dab99b637670d4cfc6bf0420fc4e2afdf92490edfa310fbf1f52b58a1067e53e0afc07be0d70d8cb5d93113d3987f3c71bb932a7f17e22afb4d8011ba08ca1b591ab8bdc7819953ac2776ac042d43ed501022a71a56d8faa46d96266d6c772ed18f1c68a0f99528ed7ca641dce6b0fa1388b3a600cf38bf1162a85cd2bfb898e74d14b6a145f562446ea8b5baea6dc0bf5eb2304457988f32069e41a229c7ac4752812f8af9de200f36fcf58fdd58fd4cfb875cb5065a8203593d306118fd295e04c59d481f4d07a75475cc4d316952279e4c1085782d2497c17adb38aaed9ae9521119bedca8dd4d9104c0ed358d656dbc66495b982afe96edff79f50cb4df2e5f6ddc770dd0c1072c92e2b8da6749180095938a79e7a82d9cc26d9462294816ef7d1fe116518a416a56f2214b0aba5723694df0aa016adab1907263e4f15866d6059323361217d36ca54cb3bb14eb7ed4bc80b68ac75ef2c21f72d14ed209e03a3926f15db5767272aa121011820b044006d069eca922ac4d75bc17dfc8cb374498b296346259e9f4bd7f4a0f10ec1e663bc1098be73f089c453942b575209a1a1467e781801cf1218a1db4988f111924cfaaaa5a531ddcadd194dd56a8d78f21259ab5c2a554b527313852069db852be3f3cac22bee920025f360cb5b10099a49c0b269f9d0b7360b0e5a440d87248a4649bfaf4241f53d8626e8f43e9544744eeaf9b368c5a69e68ef73759dab5d6493afe0137712d0aa456b51616ea1503b184764306510ee2623ff14ddc21a20d5af90c0988357e2f7c7fd41ce2ebb5b673c9dbc878d8ae83f943b3767b223e244c3e307d35e182f01d7bde5629539196178af4e7c4d7c3cae2042f36b3fdb19c294819c90159a66b9dca4c198e6463bac5bce6a877795efbde614955961c3a86ca6f18c9785f5da669067787152b6907d7230343a2de93667f49496785a2c530bdc12fbebf7b24898747f7892bc661a0368d70a44082409a82efae7a8d51bc5f42c8256aed82b6b65e8304f70a9e85056674e082a2840357c9b819207976705e4bd5e162bf2fd01112a1520f6bed1fc5c9d4ef95d81534554fcef24be841364fcea1a4b6f5b890b4a717f00f358338b99be7821e4e3f19818070a3e6806911b34fc109ef702be8cf5c3e779b3a760bf41f73b7e9b266830f343c6c0aa94759711cbc2574f2766f9c827339c02a5b519d9129b63e4df6e9ae830034b9be736c922caa146dce6c045f8d4f999160fb14a11a48292f1a8c9a11c190eb972449bb872412ac91aae2540f8c51c52d46ef82118c5e924fdc9032ca4bb5b9329c00a93ec357da8d0a01d05686f11a98398f82ff6ae3b38c7336ed97349a58080c37cba2a607f65d4e632f8e103f068d43598801f8f55e5acc466bab73ddcd1307f7bcec41287d6b69e28ca09d03fbce9699108a72b2bc62e2db20f19b2f56ea9f7d074494747f49e9f6f2e227e3ab49f3bfd058756956665b496eb7e6df6af6adedd5f6f8d894a4dd375f1be0b67c59988002b64f5be8a98d7b9e487f41e2b873adbfb059bb6dac0ed1b95b72a2ccb0f3fd8e9d60cc585b014de0562b7aab929adf319ad7902aedaf7b018d0539164aa4d3761d16a3ee1bbfdc4e679f7f9c76b302096e9a2652b26599bb179196accd83da002f5000da246a59654e5340c740508413ce4fbcdbc7315e8150452a0ce3862d96c1c8b83f9f65ceccb25bb528ce95eb2bac4883adb5e51aa28b6180b4e66c70f1905e8db06dd6ac5f0ef059949caa7de0537010bed7ba2aedd4b1eb65e33f71ff9310446b204afd490be9e66a81715bcacd4ca2717cde0765a83992b982b1001d3dd10419c0cb2a9074d1d55e389ab01f13209bd343e91200cc3bead7759532f33c6bd95a3728e08f28d4fad6f6d008df4d8b31bea7d85d8db1ead2504ea693728885485046c14226082a64edb4f12a4d5d3e04834d139101876d1b8ae115d298cd825aae782cc8fc81fea91f97b4b587c6df20925f46a7acaaa5171ad7edbef729e2520f0419e9a8f053fda05614dc4b1dec7674cc9bd9f6e8c18c00f19ba121a5f705fb29be1a0d045079e4cb56f2c0c26cdd260e0b6a2e5a02f44788caa98c45f571b3c841802b641b4d18d83028f716a30b1e5a4f2bbceb60b586da8b2c8e6cb202609b67edf4388a6b1e01e3e8b0c3ebebd275211a54d0fd047ea411f35b35b1ff2ee4b3cb9e9942919bc6b97da2c445c8616723fbb8a0b3d763a19223b118087ef5a08a54bd74aa09fedf6d511f3464e945c41ab5812c2cd0c86c90e09351004793a182f94f28e141bdefcbaed707fd05913a3cb3254eecd5ade174c182c3c6956bdf978149e866d81238cfebc991a517fe8bb08ce4dd387a02b817b66cd721c7c920dae5f02cec87d08e85ac6f50e450fe1dd5d2451b921fad9454a37aace944d1751a7b3022626d1e9bd1cd3cf83522f3aaa4c0a8133d67c4889ecd0fd7655bf8e5eb5ad1cdd99f6bfa8bd318276c48241961fd98bcfac71b9cb2305748167d3089b4b5790f2b27f6d65e9ffbdd288eca91f9e83e3a63964ea42f79aa787b2a8a3744eecdaf8625d2148f3ca0a4b85eb514ff5557001af6780736aa0d0152f5363813820a", 0x1000}}, 0x1006) (async) prctl$PR_SCHED_CORE(0x3e, 0x0, r7, 0x3, 0x0) (async) r8 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000001e80), 0x254180, 0x0) (async) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000001f00), r5) sendmsg$BATADV_CMD_GET_VLAN(r8, &(0x7f0000001fc0)={&(0x7f0000001ec0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001f80)={&(0x7f0000001f40)={0x24, r9, 0x300, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3b9}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x64004000) (async) mprotect(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x2) (async) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r8, 0x84, 0x1b, &(0x7f0000002000)={0x0, 0xd0, "a4cdae9cbd1c8295156c26f6952bb9724d33cea9302ec1b00c71508664d06d6a5e8022003aacde29248962bd9dbfb0b3da7e11cf26012fd11a4a452baa1634be6f923a632d24905fdf2256773d4781e41a56607cec93ad31716d7ee8581d6edcce88eba06b43acdd21543a62a9af0bf88ed11cbaf98af68b1db0c468dded6ce1899f7c00b35448053f9c81f19bcd90771cbc2da125f9ff32f9296fd374854bc8442e6148604165c64e1d4c296751046a7650251d1f37fb3fd5526e4bad577e7a21bf15162faafdb5b6c11995247dc4f2"}, &(0x7f0000002100)=0xd8) getsockopt$inet_sctp_SCTP_RTOINFO(r8, 0x84, 0x0, &(0x7f0000002140)={r10, 0x1, 0x7, 0xffff8000}, &(0x7f0000002180)=0x10) (async) wait4(r7, &(0x7f00000021c0), 0x8, 0x0) (async) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000002580)={&(0x7f0000002200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000002540)={&(0x7f0000002300)={0x228, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}]}, @HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}]}]}, 0x228}, 0x1, 0x0, 0x0, 0x24000050}, 0x801) 2.387446895s ago: executing program 5 (id=5866): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000280)={@my=0x1}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, 0x0, 0x0) connect$vsock_stream(r3, &(0x7f00000001c0)={0x28, 0x0, 0x0, @my=0x1}, 0x10) lsm_list_modules(0x0, 0x0, 0x1000000) bpf$LINK_GET_NEXT_ID(0x24, 0x0, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r4, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3011, 0x17) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000001000000280001801400040000000000000000000000ffffac1414aa060001000a"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) 2.075954199s ago: executing program 3 (id=5867): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x4d, 0x40003, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaa60aaaaaaaaaaaaaaaa080045"], 0x0) r2 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r2, 0x29, 0x24, &(0x7f00000000c0), 0x4) syz_emit_ethernet(0x46, &(0x7f0000000040)=ANY=[@ANYRES16=r0, @ANYRES8=r0, @ANYRES16=r0], 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000100), 0x400c2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], 0x0, 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000000000004503"]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x80010, r1, 0x10000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r7, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff5000/0x3000)=nil) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x3) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000f40)=@filter={'filter\x00', 0x4, 0x4, 0x3cc, 0xffffffff, 0x0, 0x0, 0xe4, 0xfeffffff, 0xffffffff, 0x390, 0x390, 0x390, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xa4, 0xe4}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x4}}}, {{@ipv6={@private2, @empty, [], [], 'sit0\x00', 'batadv_slave_1\x00'}, 0x0, 0xec, 0x12c, 0x0, {}, [@common=@dst={{0x48}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x2, 0x57, {0x2000000}}}}, {{@ipv6={@empty, @mcast1, [], [], 'ip6tnl0\x00', 'dvmrp0\x00'}, 0x0, 0xd0, 0xf4, 0x0, {}, [@common=@unspec=@realm={{0x2c}, {0x1, 0xdd8}}]}, @REJECT={0x24}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x428) syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2) 2.062335214s ago: executing program 2 (id=5868): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) setpriority(0x3, 0x0, 0xfffffffd) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xf, &(0x7f0000000340)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x8, 0x0, 0xfffffffffffffffe, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x94) getdents(0xffffffffffffffff, &(0x7f0000000440)=""/4096, 0x1000) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/profiling', 0x2, 0x0) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000200)=ANY=[@ANYBLOB="2d18"], 0x28) statx(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x4000, 0x100, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0xae6e5460af1e607, &(0x7f00000014c0)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r4}, 0x2c, {'group_id', 0x3d, r5}, 0x2c, {[], [{@fsmagic={'fsmagic', 0x3d, 0x4}}, {@euid_lt={'euid<', r6}}, {@dont_hash}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}]}}) 1.892002807s ago: executing program 1 (id=5869): syz_emit_ethernet(0x3a, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002bbbbbbbbbbbb08004500002c00000002001190"], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000010bd408205000000000000000109022400011b0000000904"], 0x0) syz_usb_connect$hid(0x6, 0x3f, &(0x7f0000000100)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0xff, 0x2505, 0x220, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x8, 0xf0, 0x7, [{{0x9, 0x4, 0x0, 0xe, 0x2, 0x3, 0x1, 0x1, 0x93, {0x9, 0x21, 0x0, 0x5, 0x1, {0x22, 0xf48}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x2, 0x4, 0x6}}, [{{0x9, 0x5, 0x2, 0x3, 0x7289ed60138711b1, 0x1, 0x8, 0x3}}]}}}]}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x110, 0x8, 0x20, 0x9, 0x30, 0xb}, 0x64, &(0x7f0000000200)={0x5, 0xf, 0x64, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x8, 0x71, 0x6}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0xc, 0x8, 0x1, 0x9a}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x5, 0x8, 0x7}, @generic={0x37, 0x10, 0x1, "67f00d1c8df1789f409b10a5faa5c70ab25b55677344a8a7e62a70a1ea804d19ed8a02e0238aca6da47af5f9eb22e4e7c9fd420c"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x7, 0x4, 0x7fff}]}, 0x3, [{0xe0, &(0x7f0000000440)=@string={0xe0, 0x3, "91f579646f31c0e3cf636fe261f17262734e8570fc2b60a9b9f4af1ecc48964b8d93f3c035f97e1daf7bcc357dc6e1a5791f0bc0b108f321c3f8fdd857dd3e7855cf9c05ab6aaab6106a36585908643229bb873a4d6594b1184764c54ef32f48fe1a24cde9c3ea3968fd65ed052a68f8bf4a5dfdc365a549e8c510748ee7f522edcee44b764ffe922cb561f8eb2c598e9e1cf7f88c612f8ff97b2aa4ffbd9a480d40749a4188411bdbad983e744e13238c825b8077da6e91a11657e266fbd502c42535b9484e87170cd7ce345081bcdec23b643f0fcd63e0857ee4bbb6cd"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x804}}, {0x100, &(0x7f0000000540)=@string={0x100, 0x3, "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"}}]}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000040000000001, 0xffffffffffffffff}) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000003d0007010000000000000000047c000004001280140001202a000300", @ANYRES32=0x0, @ANYBLOB="080013"], 0x2c}}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000000)) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x56a, 0xd8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x673119c074b3a761, 0x6, [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x3, 0x1, 0x3, 0xfa, {0x9, 0x21, 0x2, 0x4, 0x1, {0x22, 0x6c2}}, {{{0x9, 0x5, 0x81, 0x3, 0x600, 0x0, 0xaa, 0x6}}}}}]}}]}}, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\b\x00'/20]) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$sock_timeval(r5, 0x1, 0x2, 0x0, 0x48) getsockopt$inet6_mptcp_buf(r5, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_PIT(r4, 0x8048ae66, &(0x7f00000000c0)={[{0x0, 0x800, 0x0, 0x0, 0x0, 0xa5, 0xbd, 0x9, 0xa9, 0x4, 0x0, 0x0, 0x40000000}, {0x8, 0x4005, 0x0, 0x0, 0x41, 0x0, 0x1, 0x0, 0x6, 0xff, 0x0, 0x2, 0x6}, {0x3fe, 0x9, 0x0, 0xfd, 0x0, 0x0, 0xb3, 0x0, 0x3, 0xfe, 0x80, 0xf6, 0x7}], 0x5}) ioctl$KVM_RUN(r6, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66ba4300b006ee0f01c40f009b27000000b9800000c00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a000000328fe858b660002fb90d090000b800680000ba000000000f30", 0x5a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0x7c}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 1.639330047s ago: executing program 0 (id=5871): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = openat$binfmt_format(0xffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) munmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000) mmap$KVM_VCPU(&(0x7f0000ffc000/0x2000)=nil, 0x930, 0x0, 0x24132, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) r7 = memfd_secret(0x0) sendmmsg$unix(r6, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) r8 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='%(,c\xbe\xfbL:', 0x0) r9 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r9, 0x1, &(0x7f0000000000)='source', &(0x7f00000000c0)='%.,:', 0x0) mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000003) write$binfmt_format(r4, &(0x7f0000000100)='-1\x00', 0x2) close_range(r4, 0xffffffffffffffff, 0x0) r10 = getpid() openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) sendmmsg$unix(r1, &(0x7f0000008700)=[{{&(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000300)=[{&(0x7f0000000140)}, {&(0x7f0000000200)='}$', 0x2}], 0x2, &(0x7f0000000380)=[@cred={{0x1c, 0x1, 0x2, {r10, 0xee00}}}, @rights={{0x24, 0x1, 0x1, [r7, r1, r8, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [r4, 0xffffffffffffffff, 0xffffffffffffffff, r3]}}], 0x68, 0x40}}, {{&(0x7f0000000400)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000a40)=[{&(0x7f0000000480)="dc3a1fff7a1909c74fabe750e782d88ef71a16f60460d6de675867b1a6b966e0e3fe2d0ea033bfd8bb051fc300849a322a05933197edc7a357b06421899510197c1c3fb7acac4eb35656634d7375aa0b61e743265f4c8cdaa3adae881cdd1dc1e9593eb0a8eccad2461781b0566ea048bb7c74c8a309e6656233f451b9b0f5ce1f71c217346b467a9535ade4272206b932797db58b4d9027bc4521ccb21405bcccde3faa5e080384e56b1e8d563a5223a8d30091f6b8d5099939571a581ad957d9a4607b44906820c0b41ba2173c5a781201b2e8", 0xd4}, {&(0x7f0000000600)="c5391cf9d70b9235cdb442d8d644f2f525072c77613e46c82a61fa551bab389d7a7faf0889416cd956ac6edb481530", 0x2f}, {&(0x7f0000000640)="0762e9f0c4a3271bc8525600ef47627f9c28fd654305e4c59aeba117ee4846276b9a33c8b0f4227d0782dcd8fa962aff25263ae27fd13a17c19ddf19eb047bf3892868f84d9511f0d02e88bbe0004f26fbb243930405cf4402de235d69150fde2adff1e3929ec1e3ea1100ec4132d4239c37476682764b46126ea84870a10ee2e60648469b9fe9bfe520db078007d6eb250e26475362e6b585ebcf4a73", 0x9d}, {&(0x7f0000000700)="a73ba0eb500e66493138300d1a337de1ba8bf1e7c2e8bb02cd7f6eea8db3985a50532dc239004972cc40164329e589e40079b0202580a23e079501bbaffcfb78606a5491f255f074033b9c56d4482f10b5e2dff3f7e8321b5db7841890047d35105a7d2e1458ee8694b3fc5101778bc6c2b56178971cee538a8e2011331d2000301155ec819ccd6f26ff92f8559ebfc9d49375b945a93cfb997360a0b17d84c5766e6d7f24b4f871ada16b7f1e929548", 0xb0}, {&(0x7f00000007c0)="99b022724b10cfa8a2c5a850fb0e4b99c66c92fcea5af9e38333477d6846dc", 0x1f}, {&(0x7f0000000800)}, {&(0x7f0000000840)="10f9b133ab1aeeda425f38cb00b5a050d94405960f14f8bf460790dd56b51c05fe9dcd8755335d2c4e73819bf25fc3cdf9ac4a1cd74dbd4d5e2f577e0911f7c087e2e11cd7ec7995626ae15f880aa33877952277d0f315cb4ea10cddb7071fba35e375818aa37bbe91e5a0d326deb21bbcbc214e4cd6b841992d1d6896af21cfb4ae99a559592d9b2e42391a461a91051ceeae3ded9a9eb68c2ab297086b3293e70ff78cba223740e164cc9dd2102fef0573728441f9573cfa081de8224f5110", 0xc0}, {&(0x7f0000000900)="85ee7aa6ec4036d2bb816f0b3751b41f993d2cfd34cdffb0da597a60664df6b79b0513309daa6a80e33cd83d3b9e66cf98ea2727ed230bb1dccb505797d6fb10d1cb7a", 0x43}, {&(0x7f0000000980)="7aa4", 0x2}, {&(0x7f00000009c0)="ef8942edd1accad61913007d42b89d3bcc61edb85ef19a8b0882e7afffde7368a5ec348658ad88a55a58df920785a0c2a4c5ac1c09b332e72ce82d5013e91ccbf4e2d188ce234fac1015ccaad163d6d350b6a61fdd9319ded5fbd296e8a87da1c705db11eaf589608ea1ccb8", 0x6c}], 0xa, 0x0, 0x0, 0x850}}, {{&(0x7f0000000b40)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000d40)=[{&(0x7f0000000bc0)="5bce1f2acaa4b48b68efd5cdaf9ebb610d8e4a2ec4324800f41a4947b91390d9f2530be317002b2bc8c9be7803b60a2858fe79f8337899c07d9668f465708a43447d7833e9e0dc6789fda28d832a4e9b8f826efd666c95ad790359387c842fd389120648af00e6b4b6bcdd291e55d9a168a4785973189dadfebe90a03cfbaf4f72c4b3fc5d5c9f8b05db", 0x8a}], 0x1, &(0x7f0000000ec0)=[@cred={{0x1c, 0x1, 0x2, {r10}}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {r10}}}, @cred={{0x1c, 0x1, 0x2, {r10}}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}], 0xd0, 0x4000}}, {{&(0x7f0000000fc0)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f00000041c0)=[{&(0x7f0000001040)="624b48103947114fa2fecd931089542c2b33a48441586c354d27d325b959948aa94946b7a3dea8195f0bab0c3de0149156312984e502a287eba4356384f472a4f6a6b9670f81dfdc6d292342e11698297ed1ef970bac58da697abc44df420909248a05ea7146d6ecc204da52e0e42e50a2", 0x71}, {&(0x7f00000010c0)="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", 0x1000}, {&(0x7f0000006200)="f575ea795834a97ced654b7947092ea9eb9bbe11f13bc6a08fcfdabd8cf7cef371249ee343b279c30e07c64d3c46f93dc83376755ddfff333cea3435b8e7791193fb0caa8d42f29f6a5ce39847e72a17c078fd6ad9b78ee283559203d2", 0x5d}, {&(0x7f0000008340)="9f1ec342ece17be76cec0c96a2a3e5a5276ab53e402457540a5d5911fd24d06eac2148533da029e1c899d396b65702baf44b3e27ee90eb23d1489dccf441007f27aefbb238b0b439378ca8a89d6f2d90017b65b91c07e40f4d6860b3e9bbcb295925b1713749945288f6a1326d29b4111933efebbff764f059de23826bee3e48073a3d8049189ddb31fbe4941533c8554f5a19e2f11a45ae002d664395b46fe83a8c27b153fddd016d0553319cdf72d3b32433dacc2a", 0xb6}], 0x4, &(0x7f0000008400)=[@rights={{0x14, 0x1, 0x1, [r7]}}, @cred={{0x1c, 0x1, 0x2, {r10, 0x0, 0xffffffffffffffff}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r3]}}, @rights={{0x18, 0x1, 0x1, [r3, 0xffffffffffffffff]}}], 0x68, 0x4000000}}, {{0x0, 0x0, &(0x7f00000084c0)=[{&(0x7f0000006280)="d11264f4dccaecba7dcd6fb5ab1b1ee89ea7f447a392c66d37bd3aaae81e34", 0x1f}, {&(0x7f0000008480)="df8cb1adddc9cb11aea1018c5e1b02fbbf5c2729983ca225216713802572585ee7a5847b6c6fbfa0c5f6375fb668b3c940ea27ee801223bbebe365", 0x3b}], 0x2, &(0x7f0000008640)=[@cred={{0x1c, 0x1, 0x2, {r10}}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r3, r8, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r10}}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x98, 0x4000}}], 0x5, 0x0) close(r1) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) 866.365757ms ago: executing program 3 (id=5872): openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = syz_io_uring_setup(0x837, &(0x7f0000000180)={0x0, 0x9b08, 0x0, 0x4, 0x3ce}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r0, 0x80, &(0x7f00000000c0)=@nl=@proc={0x10, 0x0, 0x25dfdbfe, 0x4090000}}) io_uring_enter(r1, 0x5167, 0x0, 0x2, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 431.045644ms ago: executing program 3 (id=5873): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)="b695239c08196411731fab0a53dff72d3b912a4c8c8ae6bfe7c7a41b2224bd9057314eaecc8b5ef1615c4de085d09dc96aa6f36060732826c0e3e473c0a25e7e2d0aa543b3ca73575cff431fef8c6e67a630e54ba2c6caae10cf00ad0b0ae4dad4bf1d7ae18a88a6d2708cba894deb38669e18ec5818acb3a51f7e2a773e1cdc22399f34a95753795c5acd9531caf27ffb707b980cc4cf895a2b45afc19e37628e2e41c6a13cf268f44b474eb1dfa40a3e94ae0bd61d4630f0cb71aeb4291d35a4ece94df5902bc4451367e71a1fbe024a670606630d07c77626", 0xda}], 0x1}}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000500)="28e6ceb00e919b519d9c75d8fcf6370a0e5820a3ab6a48c49f564a91ccef167412e24838a1258d11365ba45a2f25b09276ee5b5f9480a756f4470ea61b2fb4efb8c84c471dc92c8123010cfdbdb58334fab843d30b6f1e0f4805c9a152b188a9f605b298e6f1", 0x66}, {&(0x7f00000001c0)="f2c0293a7f3c9fbf", 0x8}, {&(0x7f0000000640)="a56e36f21e5b3781a76eaf88293ba3631f4c249d6158a8f24521994342243ded321f5d6d4a3a8ed71abe4e83de427ca7f920c61b1538ef5718853cb9c00576a9e573caa79cea", 0x46}, {&(0x7f00000006c0)="52fad8a2f6e21b15aade9d6f12393327d118219aab8428e0f3480004e52eafe4592e182d4cd7f609834f6214afcceeaacdd3ce254ca8f3f4330db1ee806231cfa98b5736d6f3afbadd8022414c8613ac341b8d1538b6cf5d199b7f2b725c9353de81c0b1e0c8ac5d35b834fd06f4637e2507c227b801c6621964aaed5895438fd97d030cd34829f4c54b99d5efb7893f28f4847812f491f7de6864e4b1304dc35ff1759cef048b21bc4ec21a879978ac29ceced9e7d023469a1b06faaddfa976300f676404adb82ebf8e", 0xca}, {&(0x7f00000007c0)="1b3599cc95cb5e69b24ff9b2fd5b1d69d1f18403cf1373d55b65db231bdf20f8738ac39578900a2609508508529dc99cc2e0c7693ea42658dbbcd73a170fd94f4bb03c1de81e670864d13d54a2c849d4f16e19b50dee3f8a13b62dce", 0x5c}], 0x5}}], 0x2, 0xc0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580), 0x0, 0x10008095, 0x0, 0x0) 0s ago: executing program 1 (id=5874): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a8, 0x0, 0x111, 0x4b4, 0x0, 0x700, 0x2d8, 0x278, 0x278, 0x2d8, 0x278, 0x3, 0x0, {[{{@ipv6={@mcast2, @empty, [0x0, 0x0, 0x3000000], [], 'vlan0\x00', 'team_slave_0\x00', {}, {}, 0x88}, 0x0, 0x128, 0x190, 0x0, {}, [@common=@inet=@multiport={{0x50}}, @common=@unspec=@connmark={{0x30}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private1, [], [], 'geneve1\x00', 'erspan0\x00'}, 0x0, 0xe0, 0x148, 0x0, {}, [@common=@unspec=@statistic={{0x38}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x408) kernel console output (not intermixed with test programs): descriptor's value: 1 [ 1207.349718][T23173] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5382'. [ 1207.363689][T15464] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 1207.396266][T16711] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1207.411766][T16711] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1207.502633][T15464] usb 2-1: device descriptor read/64, error -71 [ 1207.550367][T23175] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5383'. [ 1207.579373][T23175] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5383'. [ 1207.630235][T15464] usb usb2-port1: attempt power cycle [ 1207.717505][T23169] kAFS: unable to lookup cell '.,' [ 1207.730569][T23178] netlink: 104 bytes leftover after parsing attributes in process `syz.2.5384'. [ 1207.993203][T15464] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 1208.023748][T15464] usb 2-1: device descriptor read/8, error -71 [ 1208.262745][T15464] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 1208.403955][T15464] usb 2-1: device descriptor read/8, error -71 [ 1208.514340][T15464] usb usb2-port1: unable to enumerate USB device [ 1208.582793][T20547] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 1208.758185][T20547] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1208.768467][T20547] usb 3-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 1208.777846][T20547] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1208.788736][T20547] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1209.074065][ T5901] usb 6-1: USB disconnect, device number 6 [ 1209.166037][T23187] kAFS: unable to lookup cell '.,' [ 1209.870213][T15464] usb 4-1: USB disconnect, device number 32 [ 1211.310797][T23225] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1211.522625][T16711] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1211.591904][ T5901] usb 3-1: USB disconnect, device number 66 [ 1211.714648][T23228] FAULT_INJECTION: forcing a failure. [ 1211.714648][T23228] name failslab, interval 1, probability 0, space 0, times 0 [ 1211.736051][T16711] usb 6-1: config 0 has no interfaces? [ 1211.745216][T23228] CPU: 1 UID: 0 PID: 23228 Comm: syz.2.5400 Not tainted 6.15.0-syzkaller-12058-g64980441d269 #0 PREEMPT(full) [ 1211.745237][T23228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1211.745246][T23228] Call Trace: [ 1211.745252][T23228] [ 1211.745259][T23228] dump_stack_lvl+0x189/0x250 [ 1211.745298][T23228] ? __pfx____ratelimit+0x10/0x10 [ 1211.745316][T23228] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1211.745335][T23228] ? __pfx__printk+0x10/0x10 [ 1211.745353][T23228] ? __pfx___might_resched+0x10/0x10 [ 1211.745364][T23228] ? fs_reclaim_acquire+0x7d/0x100 [ 1211.745383][T23228] should_fail_ex+0x414/0x560 [ 1211.745403][T23228] should_failslab+0xa8/0x100 [ 1211.745418][T23228] kmem_cache_alloc_noprof+0x73/0x3c0 [ 1211.745436][T23228] ? __kernfs_new_node+0xd7/0x7e0 [ 1211.745455][T23228] __kernfs_new_node+0xd7/0x7e0 [ 1211.745471][T23228] ? __lock_acquire+0xab9/0xd20 [ 1211.745494][T23228] ? __pfx___kernfs_new_node+0x10/0x10 [ 1211.745511][T23228] ? kernfs_root+0x1c/0x230 [ 1211.745529][T23228] ? kernfs_root+0x1c/0x230 [ 1211.745544][T23228] ? kernfs_root+0x1c/0x230 [ 1211.745557][T23228] ? kernfs_root+0x1c/0x230 [ 1211.745575][T23228] kernfs_new_node+0x102/0x210 [ 1211.745594][T23228] __kernfs_create_file+0x4b/0x2e0 [ 1211.745616][T23228] sysfs_add_file_mode_ns+0x238/0x300 [ 1211.745634][T23228] internal_create_group+0x66d/0x1110 [ 1211.745660][T23228] ? __pfx_internal_create_group+0x10/0x10 [ 1211.745677][T23228] ? kernfs_add_one+0xf0/0x520 [ 1211.745697][T23228] sysfs_create_groups+0x59/0x120 [ 1211.745715][T23228] device_add_attrs+0x13f/0x5a0 [ 1211.745733][T23228] ? __pfx_device_add_attrs+0x10/0x10 [ 1211.745750][T23228] ? device_add_class_symlinks+0x21f/0x240 [ 1211.745767][T23228] device_add+0x496/0xb50 [ 1211.745783][T23228] input_register_device+0x9ca/0x10b0 [ 1211.745810][T23228] uinput_create_device+0x422/0x670 [ 1211.745825][T23228] ? __lock_acquire+0xab9/0xd20 [ 1211.745847][T23228] uinput_ioctl_handler+0x3f0/0x1570 [ 1211.745865][T23228] ? __pfx_uinput_ioctl_handler+0x10/0x10 [ 1211.745888][T23228] ? __fget_files+0x2a/0x420 [ 1211.745902][T23228] ? __fget_files+0x3a0/0x420 [ 1211.745919][T23228] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1211.745939][T23228] ? __pfx_uinput_ioctl+0x10/0x10 [ 1211.745954][T23228] __se_sys_ioctl+0xfc/0x170 [ 1211.745975][T23228] do_syscall_64+0xfa/0x3b0 [ 1211.745991][T23228] ? lockdep_hardirqs_on+0x9c/0x150 [ 1211.746007][T23228] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1211.746019][T23228] ? clear_bhb_loop+0x60/0xb0 [ 1211.746035][T23228] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1211.746046][T23228] RIP: 0033:0x7fc4c478e929 [ 1211.746058][T23228] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1211.746069][T23228] RSP: 002b:00007fc4c5623038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1211.746083][T23228] RAX: ffffffffffffffda RBX: 00007fc4c49b5fa0 RCX: 00007fc4c478e929 [ 1211.746092][T23228] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000004 [ 1211.746100][T23228] RBP: 00007fc4c5623090 R08: 0000000000000000 R09: 0000000000000000 [ 1211.746108][T23228] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1211.746115][T23228] R13: 0000000000000000 R14: 00007fc4c49b5fa0 R15: 00007fc4c4adfa28 [ 1211.746133][T23228] [ 1211.746835][T16711] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1211.895877][T23228] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5400'. [ 1212.179965][T16711] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1212.188994][T16711] usb 6-1: Product: syz [ 1212.194214][T16711] usb 6-1: Manufacturer: syz [ 1212.198843][T16711] usb 6-1: SerialNumber: syz [ 1212.280717][T16711] usb 6-1: config 0 descriptor?? [ 1212.793439][T16711] usb 2-1: new low-speed USB device number 19 using dummy_hcd [ 1213.006103][T16711] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1213.019501][T16711] usb 2-1: config 7 has an invalid interface number: 67 but max is 0 [ 1213.031141][T16711] usb 2-1: config 7 has no interface number 0 [ 1213.047504][T16711] usb 2-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=6b.16 [ 1213.061349][T16711] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1213.074467][T16711] usb 2-1: Product: 㯑 [ 1213.095097][T23250] FAULT_INJECTION: forcing a failure. [ 1213.095097][T23250] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1213.152641][T23250] CPU: 1 UID: 0 PID: 23250 Comm: syz.2.5409 Not tainted 6.15.0-syzkaller-12058-g64980441d269 #0 PREEMPT(full) [ 1213.152668][T23250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1213.152681][T23250] Call Trace: [ 1213.152687][T23250] [ 1213.152693][T23250] dump_stack_lvl+0x189/0x250 [ 1213.152718][T23250] ? __pfx____ratelimit+0x10/0x10 [ 1213.152735][T23250] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1213.152758][T23250] ? __pfx__printk+0x10/0x10 [ 1213.152772][T23250] ? __might_fault+0xb0/0x130 [ 1213.152792][T23250] should_fail_ex+0x414/0x560 [ 1213.152812][T23250] _copy_from_iter+0x1db/0x16f0 [ 1213.152833][T23250] ? trace_kmalloc+0x1f/0xd0 [ 1213.152844][T23250] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 1213.152862][T23250] ? __pfx__copy_from_iter+0x10/0x10 [ 1213.152884][T23250] ? skb_set_owner_w+0x25b/0x3a0 [ 1213.152899][T23250] ? skb_put+0x11b/0x210 [ 1213.152914][T23250] pppol2tp_sendmsg+0x3cd/0x5f0 [ 1213.152933][T23250] ? __pfx_pppol2tp_sendmsg+0x10/0x10 [ 1213.152949][T23250] __sock_sendmsg+0x21c/0x270 [ 1213.152968][T23250] sock_write_iter+0x258/0x330 [ 1213.152986][T23250] ? __pfx_sock_write_iter+0x10/0x10 [ 1213.153009][T23250] ? __pfx_aa_file_perm+0x10/0x10 [ 1213.153031][T23250] do_iter_readv_writev+0x56b/0x7f0 [ 1213.153048][T23250] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 1213.153069][T23250] ? bpf_lsm_file_permission+0x9/0x20 [ 1213.153088][T23250] ? security_file_permission+0x75/0x290 [ 1213.153103][T23250] ? rw_verify_area+0x258/0x650 [ 1213.153125][T23250] vfs_writev+0x31a/0x960 [ 1213.153143][T23250] ? __lock_acquire+0xab9/0xd20 [ 1213.153162][T23250] ? __pfx_vfs_writev+0x10/0x10 [ 1213.153187][T23250] ? __fget_files+0x2a/0x420 [ 1213.153204][T23250] ? __fget_files+0x3a0/0x420 [ 1213.153217][T23250] ? __fget_files+0x2a/0x420 [ 1213.153243][T23250] do_writev+0x14d/0x2d0 [ 1213.153260][T23250] ? __pfx_do_writev+0x10/0x10 [ 1213.153274][T23250] ? rcu_is_watching+0x15/0xb0 [ 1213.153289][T23250] ? do_syscall_64+0xbe/0x3b0 [ 1213.153309][T23250] do_syscall_64+0xfa/0x3b0 [ 1213.153325][T23250] ? lockdep_hardirqs_on+0x9c/0x150 [ 1213.153341][T23250] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1213.153353][T23250] ? clear_bhb_loop+0x60/0xb0 [ 1213.153368][T23250] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1213.153381][T23250] RIP: 0033:0x7fc4c478e929 [ 1213.153411][T23250] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1213.153422][T23250] RSP: 002b:00007fc4c5623038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1213.153437][T23250] RAX: ffffffffffffffda RBX: 00007fc4c49b5fa0 RCX: 00007fc4c478e929 [ 1213.153448][T23250] RDX: 0000000000000001 RSI: 0000200000000180 RDI: 0000000000000003 [ 1213.153456][T23250] RBP: 00007fc4c5623090 R08: 0000000000000000 R09: 0000000000000000 [ 1213.153464][T23250] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1213.153483][T23250] R13: 0000000000000000 R14: 00007fc4c49b5fa0 R15: 00007fc4c4adfa28 [ 1213.153502][T23250] [ 1213.454041][ C1] vkms_vblank_simulate: vblank timer overrun [ 1214.061342][T23253] netlink: 'syz.3.5411': attribute type 11 has an invalid length. [ 1214.555382][T20547] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 1215.399905][T20547] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1215.429917][T20547] usb 3-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 1215.449397][T20547] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1215.477187][T20547] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1215.617066][ T5901] usb 6-1: USB disconnect, device number 7 [ 1215.650711][T16711] usb 2-1: USB disconnect, device number 19 [ 1216.410895][T23274] loop6: detected capacity change from 0 to 524287999 [ 1216.433154][T23279] kAFS: unable to lookup cell '.,' [ 1218.215620][ T8448] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1218.238130][ T8448] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1218.246948][ T5901] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1218.285937][T23295] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5420'. [ 1218.423039][ T5901] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1218.773082][ T5901] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1219.057475][T15464] usb 3-1: USB disconnect, device number 67 [ 1219.387775][T23330] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5431'. [ 1219.421906][T23329] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5431'. [ 1219.825300][T23340] netlink: 148 bytes leftover after parsing attributes in process `syz.2.5436'. [ 1219.852773][T23340] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 1220.142625][T16711] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 1220.492676][T16711] usb 4-1: Using ep0 maxpacket: 16 [ 1220.548033][T16711] usb 4-1: config 0 has no interfaces? [ 1220.553584][T16711] usb 4-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 1220.565821][T16711] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1220.666297][T16711] usb 4-1: config 0 descriptor?? [ 1220.716008][T23352] netlink: 68 bytes leftover after parsing attributes in process `syz.2.5440'. [ 1220.910943][T23342] tap0: tun_chr_ioctl cmd 1074025677 [ 1220.917036][T23342] tap0: linktype set to 805 [ 1220.931874][ T5895] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 1221.345688][ T5895] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1221.458773][ T5895] usb 2-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 1221.475063][ T5895] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1221.487270][ T5895] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1222.073013][T23366] loop6: detected capacity change from 0 to 524287999 [ 1222.262749][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1222.325626][T23350] kAFS: unable to lookup cell '.,' [ 1222.867131][T16711] usb 4-1: USB disconnect, device number 33 [ 1223.675098][ T980] usb 2-1: USB disconnect, device number 20 [ 1224.263440][ T980] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 1224.422689][ T980] usb 2-1: Using ep0 maxpacket: 32 [ 1224.439087][ T980] usb 2-1: config 0 has an invalid interface number: 183 but max is 0 [ 1224.450457][ T980] usb 2-1: config 0 has no interface number 0 [ 1224.461723][ T980] usb 2-1: config 0 interface 183 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 528 [ 1224.608338][ T980] usb 2-1: New USB device found, idVendor=06d0, idProduct=0622, bcdDevice=70.f8 [ 1224.651718][ T980] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1224.674551][T23389] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5450'. [ 1224.692379][ T980] usb 2-1: Product: syz [ 1224.704036][ T980] usb 2-1: Manufacturer: syz [ 1224.724322][ T980] usb 2-1: SerialNumber: syz [ 1224.745201][ T980] usb 2-1: config 0 descriptor?? [ 1224.751853][T23391] binder: 23390:23391 ioctl c0306201 2000000003c0 returned -14 [ 1224.782878][T23383] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1225.014182][T23382] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1225.056721][T23382] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1225.977581][T23410] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1226.229122][T23364] syz.2.5444: vmalloc error: size 3145728, failed to allocated page array size 6144, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1226.236714][T23382] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5447'. [ 1226.290759][T23364] CPU: 0 UID: 0 PID: 23364 Comm: syz.2.5444 Not tainted 6.15.0-syzkaller-12058-g64980441d269 #0 PREEMPT(full) [ 1226.290790][T23364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1226.290805][T23364] Call Trace: [ 1226.290814][T23364] [ 1226.290823][T23364] dump_stack_lvl+0x189/0x250 [ 1226.290867][T23364] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1226.290902][T23364] ? __pfx__printk+0x10/0x10 [ 1226.290926][T23364] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1226.290952][T23364] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1226.290988][T23364] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 1226.291017][T23364] warn_alloc+0x214/0x310 [ 1226.291051][T23364] ? __pfx_warn_alloc+0x10/0x10 [ 1226.291087][T23364] ? __get_vm_area_node+0x28f/0x300 [ 1226.291111][T23364] ? do_replace_finish+0x73/0x1930 [ 1226.291144][T23364] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 1226.291202][T23364] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1226.291227][T23364] ? do_replace_finish+0x73/0x1930 [ 1226.291255][T23364] ? __get_vm_area_node+0x28f/0x300 [ 1226.291281][T23364] ? do_replace_finish+0x73/0x1930 [ 1226.291308][T23364] __vmalloc_node_range_noprof+0x56a/0x12f0 [ 1226.291335][T23364] ? do_replace_finish+0x73/0x1930 [ 1226.291359][T23364] ? __vmap_pages_range_noflush+0xdb5/0xe10 [ 1226.291415][T23364] ? __kasan_unpoison_vmalloc+0x51/0x80 [ 1226.291452][T23364] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1226.291505][T23364] ? do_replace_finish+0x73/0x1930 [ 1226.291528][T23364] vmalloc_noprof+0xb2/0xf0 [ 1226.291547][T23364] ? do_replace_finish+0x73/0x1930 [ 1226.291571][T23364] do_replace_finish+0x73/0x1930 [ 1226.291597][T23364] ? __might_fault+0xb0/0x130 [ 1226.291636][T23364] do_replace+0x324/0x430 [ 1226.291660][T23364] ? __pfx_do_replace+0x10/0x10 [ 1226.291692][T23364] ? bpf_lsm_capable+0x9/0x20 [ 1226.291709][T23364] ? security_capable+0x7e/0x2e0 [ 1226.291740][T23364] do_ebt_set_ctl+0x1e3/0xb60 [ 1226.291767][T23364] ? __pfx_do_ebt_set_ctl+0x10/0x10 [ 1226.291793][T23364] ? rcu_is_watching+0x15/0xb0 [ 1226.291819][T23364] ? nf_setsockopt+0x221/0x290 [ 1226.291844][T23364] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 1226.291873][T23364] ? __pfx___mutex_lock+0x10/0x10 [ 1226.291898][T23364] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1226.291922][T23364] ? aa_sk_perm+0x81e/0x950 [ 1226.291948][T23364] ? __pfx_aa_sk_perm+0x10/0x10 [ 1226.291981][T23364] nf_setsockopt+0x26f/0x290 [ 1226.292005][T23364] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1226.292034][T23364] do_sock_setsockopt+0x257/0x3e0 [ 1226.292056][T23364] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 1226.292080][T23364] ? __fget_files+0x2a/0x420 [ 1226.292108][T23364] __x64_sys_setsockopt+0x18b/0x220 [ 1226.292135][T23364] do_syscall_64+0xfa/0x3b0 [ 1226.292159][T23364] ? lockdep_hardirqs_on+0x9c/0x150 [ 1226.292183][T23364] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1226.292202][T23364] ? clear_bhb_loop+0x60/0xb0 [ 1226.292224][T23364] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1226.292242][T23364] RIP: 0033:0x7fc4c478e929 [ 1226.292259][T23364] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1226.292275][T23364] RSP: 002b:00007fc4c5623038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1226.292295][T23364] RAX: ffffffffffffffda RBX: 00007fc4c49b5fa0 RCX: 00007fc4c478e929 [ 1226.292309][T23364] RDX: 0000000000000080 RSI: 0000000000000000 RDI: 0000000000000003 [ 1226.292319][T23364] RBP: 00007fc4c4810b39 R08: 00000000000001c6 R09: 0000000000000000 [ 1226.292331][T23364] R10: 00002000000003c0 R11: 0000000000000246 R12: 0000000000000000 [ 1226.292343][T23364] R13: 0000000000000000 R14: 00007fc4c49b5fa0 R15: 00007fc4c4adfa28 [ 1226.292370][T23364] [ 1226.292378][T23364] Mem-Info: [ 1226.919847][T23364] active_anon:10796 inactive_anon:0 isolated_anon:0 [ 1226.919847][T23364] active_file:18197 inactive_file:40567 isolated_file:0 [ 1226.919847][T23364] unevictable:768 dirty:113 writeback:0 [ 1226.919847][T23364] slab_reclaimable:6100 slab_unreclaimable:123463 [ 1226.919847][T23364] mapped:36033 shmem:2721 pagetables:1732 [ 1226.919847][T23364] sec_pagetables:0 bounce:0 [ 1226.919847][T23364] kernel_misc_reclaimable:0 [ 1226.919847][T23364] free:1223221 free_pcp:20465 free_cma:0 [ 1227.142570][T23364] Node 0 active_anon:44600kB inactive_anon:0kB active_file:72752kB inactive_file:162064kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:144104kB dirty:452kB writeback:0kB shmem:9348kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12868kB pagetables:6780kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1227.219284][T23364] Node 1 active_anon:0kB inactive_anon:0kB active_file:36kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:28kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1227.312639][T23364] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1227.390485][T23364] lowmem_reserve[]: 0 2501 2502 2502 2502 [ 1227.397700][T23364] Node 0 DMA32 free:972908kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:41496kB inactive_anon:0kB active_file:72752kB inactive_file:160228kB unevictable:1536kB writepending:452kB present:3129332kB managed:2561084kB mlocked:0kB bounce:0kB free_pcp:68420kB local_pcp:41520kB free_cma:0kB [ 1227.447264][T23364] lowmem_reserve[]: 0 0 1 1 1 [ 1227.452307][T23364] Node 0 Normal free:4kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1836kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 1227.455658][T23418] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5457'. [ 1227.482600][T23364] lowmem_reserve[]: 0 0 0 0 0 [ 1227.499658][T23364] Node 1 Normal free:3904368kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:36kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:20860kB local_pcp:6208kB free_cma:0kB [ 1227.535132][T23364] lowmem_reserve[]: 0 0 0 0 0 [ 1227.546685][T23364] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1227.577937][T23364] Node 0 DMA32: 39*4kB (ME) 155*8kB (ME) 644*16kB (UME) 730*32kB (UME) 310*64kB (UME) 158*128kB (UME) 58*256kB (UME) 19*512kB (M) 10*1024kB (UME) 1*2048kB (M) 210*4096kB (M) = 972148kB [ 1227.606096][T23364] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 1227.624986][T23364] Node 1 Normal: 206*4kB (UM) 53*8kB (UME) 37*16kB (UME) 240*32kB (UME) 87*64kB (UME) 27*128kB (UME) 9*256kB (UM) 7*512kB (UME) 5*1024kB (UME) 4*2048kB (UME) 944*4096kB (M) = 3904368kB [ 1227.631134][T23418] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5457'. [ 1227.647610][T23364] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1227.663699][T23364] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 1227.677788][T23364] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1227.687765][T23364] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1227.703969][T23364] 61481 total pagecache pages [ 1227.708759][T23364] 0 pages in swap cache [ 1227.720182][T23364] Free swap = 124996kB [ 1227.726491][T23364] Total swap = 124996kB [ 1227.730998][T23364] 2097051 pages RAM [ 1227.740460][T23364] 0 pages HighMem/MovableOnly [ 1227.746623][T23364] 424674 pages reserved [ 1227.750965][T23364] 0 pages cma reserved [ 1227.911577][ T980] net1080 2-1:0.183: probe with driver net1080 failed with error -71 [ 1227.956667][ T980] usb 2-1: USB disconnect, device number 21 [ 1228.752560][T16711] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 1228.923081][T16711] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1228.961562][T16711] usb 2-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1229.004922][T16711] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1229.041064][T16711] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1229.125247][T16711] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1229.359670][T16711] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 1230.262907][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1231.016679][T23465] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5470'. [ 1231.094515][T23465] netlink: 312 bytes leftover after parsing attributes in process `syz.2.5470'. [ 1231.132671][T23465] netlink: 'syz.2.5470': attribute type 1 has an invalid length. [ 1232.617057][ T5895] usb 2-1: USB disconnect, device number 22 [ 1232.664403][T23429] delete_channel: no stack [ 1232.738908][T23480] tipc: Can't bind to reserved service type 2 [ 1233.516891][T23497] binder: 23496:23497 ioctl 4020ae46 7fc4c5621be0 returned -22 [ 1233.525062][T23497] binder: 23496:23497 ioctl 4020ae46 7fc4c5621be0 returned -22 [ 1233.533076][T23497] binder: 23496:23497 ioctl 4020ae46 7fc4c5621be0 returned -22 [ 1233.540897][T23497] binder: 23496:23497 ioctl 4020ae46 7fc4c5621be0 returned -22 [ 1233.639737][T23497] binder: 23496:23497 ioctl 4020ae46 7fc4c5621be0 returned -22 [ 1233.677758][T23497] binder: 23496:23497 ioctl 4020ae46 7fc4c5621be0 returned -22 [ 1233.685629][T23497] binder: 23496:23497 ioctl 4020ae46 7fc4c5621be0 returned -22 [ 1233.693460][T23497] binder: 23496:23497 ioctl 4020ae46 7fc4c5621be0 returned -22 [ 1233.701779][T23497] binder: 23496:23497 ioctl 4020ae46 7fc4c5621be0 returned -22 [ 1233.712991][T23497] binder: 23496:23497 ioctl 4020ae46 7fc4c5621be0 returned -22 [ 1233.725583][T23497] binder: 23496:23497 ioctl 4020ae46 7fc4c5621be0 returned -22 [ 1233.737018][T23497] binder: 23496:23497 ioctl 4020ae46 7fc4c5621be0 returned -22 [ 1233.750466][T23497] binder: 23496:23497 ioctl 4020ae46 7fc4c5621be0 returned -22 [ 1233.760820][T23497] binder: 23496:23497 ioctl 4020ae46 7fc4c5621be0 returned -22 [ 1233.771266][T23497] binder: 23496:23497 ioctl 4020ae46 7fc4c5621be0 returned -22 [ 1233.780822][T23497] binder: 23496:23497 ioctl 4020ae46 7fc4c5621be0 returned -22 [ 1233.794754][T23497] binder: 23496:23497 ioctl 4020ae46 7fc4c5621be0 returned -22 [ 1233.815975][T23497] binder: 23496:23497 ioctl 4020ae46 7fc4c5621be0 returned -22 [ 1233.833361][T23497] binder: 23496:23497 ioctl 4020ae46 7fc4c5621be0 returned -22 [ 1233.849335][T23497] binder: 23496:23497 ioctl 4020ae46 7fc4c5621be0 returned -22 [ 1233.866385][T23497] binder: 23496:23497 ioctl 4020ae46 7fc4c5621be0 returned -22 [ 1233.876632][T23497] binder: 23496:23497 ioctl 4020ae46 7fc4c5621be0 returned -22 [ 1233.887428][T23497] binder: 23496:23497 ioctl 4020ae46 7fc4c5621be0 returned -22 [ 1233.903930][T23497] binder: 23496:23497 ioctl 4020ae46 7fc4c5621be0 returned -22 [ 1233.915956][T23497] binder: 23496:23497 ioctl 4020ae46 7fc4c56218e0 returned -22 [ 1234.018488][T23509] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1234.064062][T23509] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1234.099523][T23511] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5486'. [ 1234.232631][ T980] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1234.392699][ T980] usb 6-1: Using ep0 maxpacket: 8 [ 1234.401953][ T980] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1234.428499][ T980] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1234.447708][ T980] usb 6-1: config 0 interface 0 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1234.490697][ T980] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1234.517835][ T980] usb 6-1: New USB device found, idVendor=04f2, idProduct=1123, bcdDevice= 0.00 [ 1234.545871][ T980] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1234.574121][ T980] usb 6-1: config 0 descriptor?? [ 1234.585766][ T980] usbhid 6-1:0.0: can't add hid device: -22 [ 1234.603354][ T980] usbhid 6-1:0.0: probe with driver usbhid failed with error -22 [ 1234.671444][T23531] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5494'. [ 1234.781406][T15464] usb 6-1: USB disconnect, device number 8 [ 1234.782786][T23531] kvm: vcpu 1: requested lapic timer restore with starting count register 0x390=1188580205 (38034566560 ns) > initial count (22209858656 ns). Using initial count to start timer. [ 1234.892581][ T980] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 1235.049211][ T980] usb 2-1: Using ep0 maxpacket: 32 [ 1235.072241][ T980] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1235.090815][ T980] usb 2-1: config 5 has an invalid interface number: 196 but max is 0 [ 1235.108302][ T980] usb 2-1: config 5 has no interface number 0 [ 1235.120847][ T980] usb 2-1: config 5 interface 196 has no altsetting 0 [ 1235.155168][ T980] usb 2-1: New USB device found, idVendor=045b, idProduct=0212, bcdDevice=18.36 [ 1235.164757][ T980] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1235.175940][ T980] usb 2-1: Product: syz [ 1235.180134][ T980] usb 2-1: Manufacturer: syz [ 1235.186226][ T980] usb 2-1: SerialNumber: syz [ 1235.527226][ T980] upd78f0730 2-1:5.196: upd78f0730 converter detected [ 1235.547441][ T980] usb 2-1: upd78f0730 converter now attached to ttyUSB0 [ 1235.568392][ T980] usb 2-1: USB disconnect, device number 23 [ 1235.594158][ T980] upd78f0730 ttyUSB0: upd78f0730 converter now disconnected from ttyUSB0 [ 1235.602746][T23559] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5502'. [ 1235.637999][ T980] upd78f0730 2-1:5.196: device disconnected [ 1235.663489][T23559] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5502'. [ 1235.710157][T23559] bond2 (unregistering): Released all slaves [ 1235.826331][T23569] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1236.305078][T23575] netlink: 140 bytes leftover after parsing attributes in process `syz.3.5509'. [ 1236.333635][T23577] netlink: 'syz.1.5510': attribute type 10 has an invalid length. [ 1236.391109][T23577] 8021q: adding VLAN 0 to HW filter on device team0 [ 1236.414962][T23577] bond0: (slave team0): Enslaving as an active interface with an up link [ 1236.456407][T23579] FAULT_INJECTION: forcing a failure. [ 1236.456407][T23579] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1236.488031][T23579] CPU: 0 UID: 0 PID: 23579 Comm: syz.3.5511 Not tainted 6.15.0-syzkaller-12058-g64980441d269 #0 PREEMPT(full) [ 1236.488059][T23579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1236.488072][T23579] Call Trace: [ 1236.488081][T23579] [ 1236.488089][T23579] dump_stack_lvl+0x189/0x250 [ 1236.488133][T23579] ? __pfx____ratelimit+0x10/0x10 [ 1236.488158][T23579] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1236.488187][T23579] ? __pfx__printk+0x10/0x10 [ 1236.488220][T23579] should_fail_ex+0x414/0x560 [ 1236.488251][T23579] _copy_to_user+0x31/0xb0 [ 1236.488273][T23579] simple_read_from_buffer+0xe1/0x170 [ 1236.488299][T23579] proc_fail_nth_read+0x1df/0x250 [ 1236.488326][T23579] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1236.488352][T23579] ? rw_verify_area+0x258/0x650 [ 1236.488380][T23579] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1236.488405][T23579] vfs_read+0x200/0x980 [ 1236.488428][T23579] ? __pfx___mutex_lock+0x10/0x10 [ 1236.488455][T23579] ? __pfx_vfs_read+0x10/0x10 [ 1236.488475][T23579] ? __fget_files+0x2a/0x420 [ 1236.488501][T23579] ? __fget_files+0x3a0/0x420 [ 1236.488521][T23579] ? __fget_files+0x2a/0x420 [ 1236.488562][T23579] ksys_read+0x145/0x250 [ 1236.488581][T23579] ? __pfx_ksys_read+0x10/0x10 [ 1236.488595][T23579] ? rcu_is_watching+0x15/0xb0 [ 1236.488618][T23579] ? do_syscall_64+0xbe/0x3b0 [ 1236.488646][T23579] do_syscall_64+0xfa/0x3b0 [ 1236.488672][T23579] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1236.488689][T23579] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1236.488706][T23579] ? clear_bhb_loop+0x60/0xb0 [ 1236.488727][T23579] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1236.488745][T23579] RIP: 0033:0x7fb9c918d33c [ 1236.488762][T23579] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1236.488777][T23579] RSP: 002b:00007fb9ca010030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1236.488797][T23579] RAX: ffffffffffffffda RBX: 00007fb9c93b5fa0 RCX: 00007fb9c918d33c [ 1236.488810][T23579] RDX: 000000000000000f RSI: 00007fb9ca0100a0 RDI: 0000000000000005 [ 1236.488821][T23579] RBP: 00007fb9ca010090 R08: 0000000000000000 R09: 0000000000000000 [ 1236.488831][T23579] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1236.488842][T23579] R13: 0000000000000000 R14: 00007fb9c93b5fa0 R15: 00007fb9c94dfa28 [ 1236.488869][T23579] [ 1236.723354][ C0] vkms_vblank_simulate: vblank timer overrun [ 1236.747030][T23581] kernel read not supported for file / œ7³ÏüâW)ës“§Ç!Qöì¥fsõl{T‡rÒ)r§ÖOš˜õ2:"ôÀT+ÍŸv|Õ²DvcŽ“ØÖ Å6Òxãc: (pid: 23581 comm: syz.1.5513) [ 1236.815520][ T30] audit: type=1800 audit(1749120864.646:4022): pid=23581 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.5513" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=95445 res=0 errno=0 [ 1236.853616][ C0] vkms_vblank_simulate: vblank timer overrun [ 1236.903594][T23585] netlink: 48 bytes leftover after parsing attributes in process `syz.5.5512'. [ 1237.205348][T23584] loop6: detected capacity change from 0 to 524287999 [ 1237.371244][T23594] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5516'. [ 1237.811803][T23608] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5522'. [ 1237.844951][ T30] audit: type=1326 audit(1749120865.736:4023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23609 comm="syz.2.5523" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc4c478e929 code=0x0 [ 1237.846137][T23608] netlink: 56 bytes leftover after parsing attributes in process `syz.5.5522'. [ 1238.127112][T23616] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5524'. [ 1238.588514][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.594958][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1238.747199][T23625] netlink: 76 bytes leftover after parsing attributes in process `syz.2.5528'. [ 1238.779794][T23625] FAULT_INJECTION: forcing a failure. [ 1238.779794][T23625] name failslab, interval 1, probability 0, space 0, times 0 [ 1238.793431][T23625] CPU: 0 UID: 0 PID: 23625 Comm: syz.2.5528 Not tainted 6.15.0-syzkaller-12058-g64980441d269 #0 PREEMPT(full) [ 1238.793455][T23625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1238.793467][T23625] Call Trace: [ 1238.793475][T23625] [ 1238.793483][T23625] dump_stack_lvl+0x189/0x250 [ 1238.793515][T23625] ? __pfx____ratelimit+0x10/0x10 [ 1238.793539][T23625] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1238.793566][T23625] ? __pfx__printk+0x10/0x10 [ 1238.793600][T23625] should_fail_ex+0x414/0x560 [ 1238.793628][T23625] should_failslab+0xa8/0x100 [ 1238.793650][T23625] kmem_cache_alloc_noprof+0x73/0x3c0 [ 1238.793668][T23625] ? skb_clone+0x212/0x3a0 [ 1238.793694][T23625] skb_clone+0x212/0x3a0 [ 1238.793718][T23625] __netlink_deliver_tap+0x404/0x850 [ 1238.793748][T23625] ? netlink_deliver_tap+0x2e/0x1b0 [ 1238.793767][T23625] netlink_deliver_tap+0x19c/0x1b0 [ 1238.793786][T23625] netlink_sendskb+0x68/0x140 [ 1238.793813][T23625] netlink_rcv_skb+0x28c/0x470 [ 1238.793832][T23625] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 1238.793853][T23625] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1238.793886][T23625] ? netlink_deliver_tap+0x2e/0x1b0 [ 1238.793912][T23625] ? netlink_deliver_tap+0x2e/0x1b0 [ 1238.793933][T23625] xfrm_netlink_rcv+0x79/0x90 [ 1238.793952][T23625] netlink_unicast+0x75b/0x8d0 [ 1238.793988][T23625] netlink_sendmsg+0x805/0xb30 [ 1238.794016][T23625] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1238.794037][T23625] ? aa_sock_msg_perm+0x94/0x160 [ 1238.794063][T23625] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1238.794086][T23625] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1238.794105][T23625] __sock_sendmsg+0x21c/0x270 [ 1238.794132][T23625] ____sys_sendmsg+0x505/0x830 [ 1238.794157][T23625] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1238.794185][T23625] ? import_iovec+0x74/0xa0 [ 1238.794208][T23625] ___sys_sendmsg+0x21f/0x2a0 [ 1238.794229][T23625] ? __pfx____sys_sendmsg+0x10/0x10 [ 1238.794284][T23625] ? __fget_files+0x2a/0x420 [ 1238.794303][T23625] ? __fget_files+0x3a0/0x420 [ 1238.794332][T23625] __x64_sys_sendmsg+0x19b/0x260 [ 1238.794355][T23625] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1238.794384][T23625] ? __pfx_ksys_write+0x10/0x10 [ 1238.794406][T23625] ? do_syscall_64+0xbe/0x3b0 [ 1238.794434][T23625] do_syscall_64+0xfa/0x3b0 [ 1238.794457][T23625] ? lockdep_hardirqs_on+0x9c/0x150 [ 1238.794479][T23625] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1238.794497][T23625] ? clear_bhb_loop+0x60/0xb0 [ 1238.794519][T23625] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1238.794536][T23625] RIP: 0033:0x7fc4c478e929 [ 1238.794553][T23625] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1238.794568][T23625] RSP: 002b:00007fc4c5623038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1238.794587][T23625] RAX: ffffffffffffffda RBX: 00007fc4c49b5fa0 RCX: 00007fc4c478e929 [ 1238.794601][T23625] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000003 [ 1238.794612][T23625] RBP: 00007fc4c5623090 R08: 0000000000000000 R09: 0000000000000000 [ 1238.794623][T23625] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1238.794634][T23625] R13: 0000000000000000 R14: 00007fc4c49b5fa0 R15: 00007fc4c4adfa28 [ 1238.794661][T23625] [ 1238.872617][ T24] usb 4-1: new full-speed USB device number 34 using dummy_hcd [ 1238.873307][ C0] vkms_vblank_simulate: vblank timer overrun [ 1239.024788][ T24] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1239.028008][ C0] vkms_vblank_simulate: vblank timer overrun [ 1239.149026][ T24] usb 4-1: not running at top speed; connect to a high speed hub [ 1239.240927][ C0] vkms_vblank_simulate: vblank timer overrun [ 1239.394418][ T24] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1239.406407][ T24] usb 4-1: New USB device found, idVendor=05ac, idProduct=024e, bcdDevice= 0.40 [ 1239.433493][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1239.441537][ T24] usb 4-1: Product: syz [ 1239.449312][T23627] netlink: 36 bytes leftover after parsing attributes in process `syz.5.5529'. [ 1239.452243][ T24] usb 4-1: Manufacturer: 㴱抬íœã‰¬à¦ì›„쇭फ़뿛çƒè·à²’柫畡䲒㚭çªì•œå ‘ã¤î¶šèž·ã¯—챻꥜á›é»é½¸êž§ç„ˆë“ˆä¡§ã“疰改舸 [ 1239.516707][ T24] usb 4-1: SerialNumber: syz [ 1239.759000][ T24] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input65 [ 1239.809148][ T5190] bcm5974 4-1:1.0: could not read from device [ 1239.848336][ T24] bcm5974 4-1:1.0: could not read from device [ 1239.918085][T23646] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5534'. [ 1239.932090][ T5190] bcm5974 4-1:1.0: could not read from device [ 1239.962099][ T24] input: failed to attach handler mousedev to device input65, error: -5 [ 1240.002169][T23646] netlink: 104 bytes leftover after parsing attributes in process `syz.5.5534'. [ 1240.062145][ T5190] bcm5974 4-1:1.0: could not read from device [ 1240.088631][ T5190] bcm5974 4-1:1.0: could not read from device [ 1240.099594][ T24] usb 4-1: USB disconnect, device number 34 [ 1240.654403][T23663] xt_CT: No such helper "netbios-ns" [ 1240.883739][T23671] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1240.896202][T23671] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 1240.915634][T23671] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1240.982843][T23671] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 1241.004477][T23671] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1241.015890][T23671] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 1241.036619][T23671] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1241.095806][T23671] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 1241.104478][T23671] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1241.117196][T23671] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 1241.631615][T23690] __nla_validate_parse: 3 callbacks suppressed [ 1241.631634][T23690] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5547'. [ 1241.670884][T23690] netlink: 104 bytes leftover after parsing attributes in process `syz.5.5547'. [ 1242.435173][T23703] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5554'. [ 1242.762368][T23714] fuse: Unknown parameter '017777777777777777777770x0000000000000009' [ 1242.803027][T23713] fuse: Unknown parameter '017777777777777777777770x0000000000000009' [ 1242.851229][T23716] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5559'. [ 1242.892765][T23716] netlink: 104 bytes leftover after parsing attributes in process `syz.5.5559'. [ 1243.021756][T23723] xt_bpf: check failed: parse error [ 1243.242632][T23653] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 1243.421583][T23730] trusted_key: encrypted_key: insufficient parameters specified [ 1243.530011][T23653] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1243.540289][T23653] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1243.549722][T23653] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1243.562949][T23653] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1243.590584][T23653] usb 3-1: Product: syz [ 1243.595012][T23653] usb 3-1: Manufacturer: syz [ 1243.600340][T23653] usb 3-1: SerialNumber: syz [ 1243.617530][T23653] usb 3-1: config 0 descriptor?? [ 1243.662291][T23653] usb 3-1: selecting invalid altsetting 0 [ 1244.085219][T23653] usb 3-1: USB disconnect, device number 68 [ 1244.219943][T23734] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5564'. [ 1245.224946][T23742] netlink: 36 bytes leftover after parsing attributes in process `syz.5.5567'. [ 1245.538875][T23746] netlink: 'syz.5.5569': attribute type 8 has an invalid length. [ 1245.553350][T23746] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5569'. [ 1245.622803][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1245.872634][T23750] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 1246.020261][T23752] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5572'. [ 1246.101770][T23752] netlink: 56 bytes leftover after parsing attributes in process `syz.0.5572'. [ 1246.125579][T23755] fuse: Invalid gid '00000000000000000003' [ 1246.569945][ T980] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 1246.837034][ T980] usb 6-1: device descriptor read/64, error -71 [ 1247.082916][ T980] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 1247.300683][ T980] usb 6-1: device descriptor read/64, error -71 [ 1247.452801][ T980] usb usb6-port1: attempt power cycle [ 1247.832797][ T980] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 1247.873279][ T980] usb 6-1: device descriptor read/8, error -71 [ 1248.112623][ T980] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1248.147730][ T980] usb 6-1: device descriptor read/8, error -71 [ 1248.263264][ T980] usb usb6-port1: unable to enumerate USB device [ 1248.351727][T23786] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5580'. [ 1249.432164][T23804] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5585'. [ 1249.474230][T23804] kernel read not supported for file / œ7³ÏüâW)ës“§Ç!Qöì¥fsõl{T‡rÒ)r§ÖOš˜õ2:"ôÀT+ÍŸv|Õ²DvcŽ“ØÖ Å6Òxãc: (pid: 23804 comm: syz.1.5585) [ 1249.762671][T23807] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5587'. [ 1249.781786][ T30] audit: type=1800 audit(1749120877.656:4024): pid=23804 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.5585" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=95445 res=0 errno=0 [ 1249.835779][T23807] netlink: 56 bytes leftover after parsing attributes in process `syz.0.5587'. [ 1251.122744][ T24] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 1251.867460][ T24] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1251.896462][ T24] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1251.983100][ T24] usb 6-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 1252.012676][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1252.032826][ T24] usb 6-1: Product: syz [ 1252.037004][ T24] usb 6-1: Manufacturer: syz [ 1252.087580][ T24] usb 6-1: SerialNumber: syz [ 1252.117439][ T24] usb 6-1: config 0 descriptor?? [ 1252.509074][T23844] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5595'. [ 1253.249805][T23852] netlink: 104 bytes leftover after parsing attributes in process `syz.1.5599'. [ 1253.508101][T23857] FAULT_INJECTION: forcing a failure. [ 1253.508101][T23857] name failslab, interval 1, probability 0, space 0, times 0 [ 1253.609840][T23857] CPU: 0 UID: 0 PID: 23857 Comm: syz.1.5600 Not tainted 6.15.0-syzkaller-12058-g64980441d269 #0 PREEMPT(full) [ 1253.609868][T23857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1253.609879][T23857] Call Trace: [ 1253.609887][T23857] [ 1253.609896][T23857] dump_stack_lvl+0x189/0x250 [ 1253.609929][T23857] ? __pfx____ratelimit+0x10/0x10 [ 1253.609946][T23857] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1253.609966][T23857] ? __pfx__printk+0x10/0x10 [ 1253.609989][T23857] should_fail_ex+0x414/0x560 [ 1253.610009][T23857] should_failslab+0xa8/0x100 [ 1253.610026][T23857] kmem_cache_alloc_noprof+0x73/0x3c0 [ 1253.610039][T23857] ? skb_clone+0x212/0x3a0 [ 1253.610057][T23857] skb_clone+0x212/0x3a0 [ 1253.610073][T23857] __netlink_deliver_tap+0x404/0x850 [ 1253.610097][T23857] ? netlink_deliver_tap+0x2e/0x1b0 [ 1253.610117][T23857] netlink_deliver_tap+0x19c/0x1b0 [ 1253.610136][T23857] netlink_sendskb+0x68/0x140 [ 1253.610165][T23857] netlink_rcv_skb+0x28c/0x470 [ 1253.610184][T23857] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1253.610217][T23857] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1253.610264][T23857] ? netlink_deliver_tap+0x2e/0x1b0 [ 1253.610284][T23857] ? netlink_deliver_tap+0x2e/0x1b0 [ 1253.610312][T23857] netlink_unicast+0x75b/0x8d0 [ 1253.610355][T23857] netlink_sendmsg+0x805/0xb30 [ 1253.610389][T23857] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1253.610415][T23857] ? aa_sock_msg_perm+0x94/0x160 [ 1253.610445][T23857] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1253.610473][T23857] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1253.610496][T23857] __sock_sendmsg+0x21c/0x270 [ 1253.610529][T23857] sock_sendmsg+0x158/0x230 [ 1253.610560][T23857] ? __pfx_sock_sendmsg+0x10/0x10 [ 1253.610604][T23857] ? __asan_memset+0x22/0x50 [ 1253.610634][T23857] ? iov_iter_bvec+0xb8/0x180 [ 1253.610658][T23857] splice_to_socket+0x8ff/0xf10 [ 1253.610707][T23857] ? __pfx_splice_to_socket+0x10/0x10 [ 1253.610727][T23857] ? aa_file_perm+0x3e7/0xed0 [ 1253.610783][T23857] ? get_pid_task+0x20/0x1f0 [ 1253.610825][T23857] ? bpf_lsm_file_permission+0x9/0x20 [ 1253.610854][T23857] ? security_file_permission+0x75/0x290 [ 1253.610881][T23857] ? rw_verify_area+0x258/0x650 [ 1253.610921][T23857] ? __pfx_splice_to_socket+0x10/0x10 [ 1253.610944][T23857] do_splice+0xc79/0x1660 [ 1253.610985][T23857] ? __pfx_do_splice+0x10/0x10 [ 1253.611009][T23857] __se_sys_splice+0x2e1/0x460 [ 1253.611030][T23857] ? __pfx___se_sys_splice+0x10/0x10 [ 1253.611046][T23857] ? rcu_is_watching+0x15/0xb0 [ 1253.611064][T23857] ? __x64_sys_splice+0x21/0xf0 [ 1253.611090][T23857] do_syscall_64+0xfa/0x3b0 [ 1253.611110][T23857] ? lockdep_hardirqs_on+0x9c/0x150 [ 1253.611130][T23857] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1253.611145][T23857] ? clear_bhb_loop+0x60/0xb0 [ 1253.611164][T23857] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1253.611179][T23857] RIP: 0033:0x7fbc5f18e929 [ 1253.611195][T23857] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1253.611215][T23857] RSP: 002b:00007fbc5fffc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 1253.611238][T23857] RAX: ffffffffffffffda RBX: 00007fbc5f3b6080 RCX: 00007fbc5f18e929 [ 1253.611255][T23857] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 1253.611268][T23857] RBP: 00007fbc5fffc090 R08: 000000000004ffe6 R09: 0000000000000000 [ 1253.611278][T23857] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1253.611287][T23857] R13: 0000000000000001 R14: 00007fbc5f3b6080 R15: 00007fbc5f4dfa28 [ 1253.611310][T23857] [ 1254.051935][T20547] usb 6-1: USB disconnect, device number 13 [ 1255.007864][T23876] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5604'. [ 1255.419171][T23887] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5605'. [ 1255.464488][T23883] kernel read not supported for file / œ7³ÏüâW)ës“§Ç!Qöì¥fsõl{T‡rÒ)r§ÖOš˜õ2:"ôÀT+ÍŸv|Õ²DvcŽ“ØÖ Å6Òxãc: (pid: 23883 comm: syz.0.5605) [ 1255.482137][ T30] audit: type=1800 audit(1749120883.376:4025): pid=23883 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.5605" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=100381 res=0 errno=0 [ 1256.482302][T23894] netlink: 'syz.2.5609': attribute type 39 has an invalid length. [ 1256.656945][T23896] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5610'. [ 1257.106002][T23908] FAULT_INJECTION: forcing a failure. [ 1257.106002][T23908] name failslab, interval 1, probability 0, space 0, times 0 [ 1257.132541][T23908] CPU: 0 UID: 0 PID: 23908 Comm: syz.5.5615 Not tainted 6.15.0-syzkaller-12058-g64980441d269 #0 PREEMPT(full) [ 1257.132567][T23908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1257.132578][T23908] Call Trace: [ 1257.132585][T23908] [ 1257.132594][T23908] dump_stack_lvl+0x189/0x250 [ 1257.132626][T23908] ? __pfx____ratelimit+0x10/0x10 [ 1257.132651][T23908] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1257.132677][T23908] ? __pfx__printk+0x10/0x10 [ 1257.132699][T23908] ? __pfx___might_resched+0x10/0x10 [ 1257.132717][T23908] ? fs_reclaim_acquire+0x7d/0x100 [ 1257.132744][T23908] should_fail_ex+0x414/0x560 [ 1257.132773][T23908] should_failslab+0xa8/0x100 [ 1257.132795][T23908] __kmalloc_noprof+0xcb/0x4f0 [ 1257.132813][T23908] ? tomoyo_encode+0x28b/0x550 [ 1257.132843][T23908] tomoyo_encode+0x28b/0x550 [ 1257.132874][T23908] tomoyo_realpath_from_path+0x58d/0x5d0 [ 1257.132910][T23908] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1257.132933][T23908] tomoyo_path_number_perm+0x1e8/0x5a0 [ 1257.132958][T23908] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1257.132996][T23908] ? __lock_acquire+0xab9/0xd20 [ 1257.133040][T23908] ? __fget_files+0x2a/0x420 [ 1257.133064][T23908] ? __fget_files+0x2a/0x420 [ 1257.133084][T23908] ? __fget_files+0x3a0/0x420 [ 1257.133104][T23908] ? __fget_files+0x2a/0x420 [ 1257.133128][T23908] security_file_ioctl+0xcb/0x2d0 [ 1257.133152][T23908] __se_sys_ioctl+0x47/0x170 [ 1257.133182][T23908] do_syscall_64+0xfa/0x3b0 [ 1257.133206][T23908] ? lockdep_hardirqs_on+0x9c/0x150 [ 1257.133228][T23908] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1257.133246][T23908] ? clear_bhb_loop+0x60/0xb0 [ 1257.133267][T23908] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1257.133284][T23908] RIP: 0033:0x7f0e9638e929 [ 1257.133301][T23908] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1257.133316][T23908] RSP: 002b:00007f0e971d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1257.133334][T23908] RAX: ffffffffffffffda RBX: 00007f0e965b5fa0 RCX: 00007f0e9638e929 [ 1257.133347][T23908] RDX: 00002000000000c0 RSI: 00000000c0386105 RDI: 0000000000000003 [ 1257.133366][T23908] RBP: 00007f0e971d7090 R08: 0000000000000000 R09: 0000000000000000 [ 1257.133377][T23908] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1257.133388][T23908] R13: 0000000000000000 R14: 00007f0e965b5fa0 R15: 00007f0e966dfa28 [ 1257.133416][T23908] [ 1257.133436][T23908] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1257.322511][ C0] vkms_vblank_simulate: vblank timer overrun [ 1257.872609][T23653] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 1258.107963][T23653] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1258.119978][T23653] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1258.189230][T23653] usb 4-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 1258.202801][ T24] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1258.226027][T23653] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1258.261384][T23653] usb 4-1: Product: syz [ 1258.452582][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 1258.459885][ T24] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1258.471496][ T24] usb 6-1: config index 0 descriptor too short (expected 34347, got 43) [ 1258.480062][ T24] usb 6-1: config 31 has too many interfaces: 196, using maximum allowed: 32 [ 1258.524348][T23653] usb 4-1: Manufacturer: syz [ 1258.529111][T23653] usb 4-1: SerialNumber: syz [ 1258.536656][T23653] usb 4-1: config 0 descriptor?? [ 1258.552198][ T24] usb 6-1: config 31 has an invalid descriptor of length 0, skipping remainder of the config [ 1258.598398][ T24] usb 6-1: config 31 has 1 interface, different from the descriptor's value: 196 [ 1258.632546][ T24] usb 6-1: config 31 has no interface number 0 [ 1258.632553][T20547] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 1258.752624][ T24] usb 6-1: config 31 interface 81 altsetting 3 has an endpoint descriptor with address 0x93, changing to 0x83 [ 1258.778740][ T24] usb 6-1: config 31 interface 81 altsetting 3 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1258.790979][ T24] usb 6-1: config 31 interface 81 altsetting 3 bulk endpoint 0x83 has invalid maxpacket 0 [ 1258.801292][ T24] usb 6-1: config 31 interface 81 has no altsetting 0 [ 1258.831958][ T24] usb 6-1: string descriptor 0 read error: -22 [ 1258.897028][T20547] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1258.940351][T20547] usb 2-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 1258.957014][T20547] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1258.972920][T20547] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1258.979926][ T24] usb 6-1: New USB device found, idVendor=0dfc, idProduct=0001, bcdDevice=24.ac [ 1259.010505][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1259.224442][T23937] kAFS: unable to lookup cell '.,' [ 1259.254643][ T24] input: USB Touchscreen 0dfc:0001 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:31.81/input/input66 [ 1259.324742][ T24] input: failed to attach handler mousedev to device input66, error: -5 [ 1259.421532][T23931] netlink: 'syz.5.5620': attribute type 5 has an invalid length. [ 1259.437974][ T24] usb 6-1: USB disconnect, device number 14 [ 1260.259117][T23951] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5625'. [ 1260.276187][T23951] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5625'. [ 1260.286811][T23951] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5625'. [ 1260.508654][T23955] trusted_key: encrypted_key: insufficient parameters specified [ 1260.517854][T23955] trusted_key: encrypted_key: keylen parameter is missing [ 1260.974779][ T980] usb 4-1: USB disconnect, device number 35 [ 1261.916389][ T24] usb 2-1: USB disconnect, device number 24 [ 1262.179963][T23955] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5627'. [ 1262.259724][T23955] vlan3: entered promiscuous mode [ 1262.288852][T23973] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5632'. [ 1262.328903][T23955] team0: entered promiscuous mode [ 1262.359058][T23955] team_slave_1: entered promiscuous mode [ 1262.401821][T23955] veth0_to_bond: entered promiscuous mode [ 1262.454042][T23980] netlink: 'syz.5.5634': attribute type 23 has an invalid length. [ 1262.623282][ T24] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 1262.659817][T23989] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5638'. [ 1262.677714][T23989] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5638'. [ 1262.794750][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 1262.818075][ T24] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1262.834835][ T24] usb 2-1: config 127 has an invalid interface number: 158 but max is 0 [ 1262.857204][ T24] usb 2-1: config 127 has no interface number 0 [ 1262.881108][ T24] usb 2-1: config 127 interface 158 has no altsetting 0 [ 1262.903399][ T24] usb 2-1: New USB device found, idVendor=13d8, idProduct=0011, bcdDevice=36.f5 [ 1262.915510][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1262.936914][ T24] usb 2-1: Product: syz [ 1262.945698][ T24] usb 2-1: Manufacturer: syz [ 1262.956487][ T24] usb 2-1: SerialNumber: syz [ 1263.261927][ T24] comedi comedi0: could not switch to alternate setting 1 [ 1263.282599][T20547] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 1263.303319][ T24] usbduxfast 2-1:127.158: driver 'usbduxfast' failed to auto-configure device. [ 1263.473577][T20547] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1263.485906][T20547] usb 4-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 1263.498234][T20547] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1263.517594][T20547] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1263.661453][ T24] usb 2-1: USB disconnect, device number 25 [ 1263.763573][T24003] kAFS: unable to lookup cell '.,' [ 1263.864419][T24013] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5645'. [ 1263.884492][T24013] kernel read not supported for file / œ7³ÏüâW)ës“§Ç!Qöì¥fsõl{T‡rÒ)r§ÖOš˜õ2:"ôÀT+ÍŸv|Õ²DvcŽ“ØÖ Å6Òxãc: (pid: 24013 comm: syz.0.5645) [ 1263.912638][ T30] audit: type=1800 audit(1749120891.796:4026): pid=24013 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.5645" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=100381 res=0 errno=0 [ 1263.944598][ C0] vkms_vblank_simulate: vblank timer overrun [ 1264.247093][T24015] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.5646'. [ 1264.560672][T24017] netlink: 104 bytes leftover after parsing attributes in process `syz.1.5647'. [ 1264.747967][T24002] loop6: detected capacity change from 0 to 524287999 [ 1265.534769][T24027] syz_tun: entered allmulticast mode [ 1265.546638][T24027] dvmrp1: entered allmulticast mode [ 1265.554009][T24026] syz_tun: left allmulticast mode [ 1265.767530][T24029] __nla_validate_parse: 1 callbacks suppressed [ 1265.767544][T24029] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5652'. [ 1266.356213][T24038] netlink: 'syz.2.5657': attribute type 10 has an invalid length. [ 1266.356397][T23653] usb 4-1: USB disconnect, device number 36 [ 1266.413293][T24038] team0: Device dummy0 is up. Set it down before adding it as a team port [ 1266.720053][T24053] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5660'. [ 1266.854484][T24053] kernel read not supported for file / œ7³ÏüâW)ës“§Ç!Qöì¥fsõl{T‡rÒ)r§ÖOš˜õ2:"ôÀT+ÍŸv|Õ²DvcŽ“ØÖ Å6Òxãc: (pid: 24053 comm: syz.1.5660) [ 1266.907231][ T30] audit: type=1800 audit(1749120894.796:4027): pid=24053 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.5660" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=95445 res=0 errno=0 [ 1266.939084][ C0] vkms_vblank_simulate: vblank timer overrun [ 1267.022596][ T980] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 1267.122576][T23653] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 1267.297629][T23653] usb 4-1: config 0 has no interfaces? [ 1267.323301][T23653] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1267.381408][T23653] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1267.453675][T23653] usb 4-1: Product: syz [ 1267.470961][T23653] usb 4-1: Manufacturer: syz [ 1267.499296][T23653] usb 4-1: SerialNumber: syz [ 1267.506833][ T980] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1267.551410][ T980] usb 3-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 1267.580636][ T980] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1267.599570][ T980] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1267.652915][T23653] usb 4-1: config 0 descriptor?? [ 1267.865838][T24057] kAFS: unable to lookup cell '.,' [ 1270.114673][T23653] usb 4-1: USB disconnect, device number 37 [ 1270.384720][ T980] usb 3-1: USB disconnect, device number 69 [ 1270.399827][T24087] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5669'. [ 1270.561630][T24092] netlink: 36 bytes leftover after parsing attributes in process `syz.5.5670'. [ 1271.102956][T23653] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 1271.172627][ T5901] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 1271.252524][T23653] usb 3-1: Using ep0 maxpacket: 32 [ 1271.259914][T23653] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1271.275680][T23653] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1271.286561][T23653] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1271.298847][T23653] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1271.328692][T23653] usb 3-1: config 0 descriptor?? [ 1271.377883][T23653] hub 3-1:0.0: USB hub found [ 1271.513134][ T5901] usb 6-1: config 0 has no interfaces? [ 1271.532344][ T5901] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1271.542301][ T5901] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1271.560761][ T5901] usb 6-1: Product: syz [ 1271.565242][ T5901] usb 6-1: Manufacturer: syz [ 1271.569910][ T5901] usb 6-1: SerialNumber: syz [ 1271.594860][T23653] hub 3-1:0.0: 1 port detected [ 1271.608412][ T5901] usb 6-1: config 0 descriptor?? [ 1271.794771][ T24] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 1271.943713][ T24] usb 4-1: device descriptor read/64, error -71 [ 1272.192944][ T24] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 1272.257790][T23653] hub 3-1:0.0: activate --> -90 [ 1272.336797][ T24] usb 4-1: device descriptor read/64, error -71 [ 1272.350476][T24127] ptrace attach of "./syz-executor exec"[15485] was attempted by "./syz-executor exec"[24127] [ 1272.384668][T24127] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5679'. [ 1272.405351][T24127] netlink: 88 bytes leftover after parsing attributes in process `syz.1.5679'. [ 1272.454392][ T24] usb usb4-port1: attempt power cycle [ 1272.877120][ T24] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 1272.951227][ T24] usb 4-1: device descriptor read/8, error -71 [ 1273.292772][ T24] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 1273.316019][ T24] usb 4-1: device descriptor read/8, error -71 [ 1273.423103][ T24] usb usb4-port1: unable to enumerate USB device [ 1273.462595][T20547] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 1273.634387][T23653] hub 3-1:0.0: hub_ext_port_status failed (err = -32) [ 1273.644068][T23653] usb 3-1-port1: connect-debounce failed [ 1273.696409][T20547] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1273.744531][T20547] usb 2-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 1273.753871][T20547] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1273.763421][T20547] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1274.001691][T24133] kAFS: unable to lookup cell '.,' [ 1274.023407][T20547] usb 3-1: USB disconnect, device number 70 [ 1274.113793][T23653] usb 6-1: USB disconnect, device number 15 [ 1274.158557][T24140] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5683'. [ 1274.321718][T24143] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5685'. [ 1274.338309][T24143] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5685'. [ 1274.398626][T24146] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5686'. [ 1274.858576][T24159] FAULT_INJECTION: forcing a failure. [ 1274.858576][T24159] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1274.941301][T24159] CPU: 0 UID: 0 PID: 24159 Comm: syz.5.5689 Not tainted 6.15.0-syzkaller-12058-g64980441d269 #0 PREEMPT(full) [ 1274.941333][T24159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1274.941347][T24159] Call Trace: [ 1274.941356][T24159] [ 1274.941366][T24159] dump_stack_lvl+0x189/0x250 [ 1274.941419][T24159] ? __pfx____ratelimit+0x10/0x10 [ 1274.941457][T24159] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1274.941498][T24159] ? __pfx__printk+0x10/0x10 [ 1274.941530][T24159] should_fail_ex+0x414/0x560 [ 1274.941558][T24159] _copy_to_user+0x31/0xb0 [ 1274.941579][T24159] simple_read_from_buffer+0xe1/0x170 [ 1274.941603][T24159] proc_fail_nth_read+0x1df/0x250 [ 1274.941629][T24159] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1274.941654][T24159] ? rw_verify_area+0x258/0x650 [ 1274.941682][T24159] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1274.941705][T24159] vfs_read+0x200/0x980 [ 1274.941727][T24159] ? __pfx___mutex_lock+0x10/0x10 [ 1274.941752][T24159] ? __pfx_vfs_read+0x10/0x10 [ 1274.941771][T24159] ? __fget_files+0x2a/0x420 [ 1274.941796][T24159] ? __fget_files+0x3a0/0x420 [ 1274.941815][T24159] ? __fget_files+0x2a/0x420 [ 1274.941842][T24159] ksys_read+0x145/0x250 [ 1274.941861][T24159] ? __pfx_ksys_read+0x10/0x10 [ 1274.941874][T24159] ? rcu_is_watching+0x15/0xb0 [ 1274.941895][T24159] ? do_syscall_64+0xbe/0x3b0 [ 1274.941921][T24159] do_syscall_64+0xfa/0x3b0 [ 1274.941943][T24159] ? lockdep_hardirqs_on+0x9c/0x150 [ 1274.941965][T24159] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1274.941982][T24159] ? clear_bhb_loop+0x60/0xb0 [ 1274.942002][T24159] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1274.942020][T24159] RIP: 0033:0x7f0e9638d33c [ 1274.942035][T24159] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1274.942052][T24159] RSP: 002b:00007f0e97195030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1274.942071][T24159] RAX: ffffffffffffffda RBX: 00007f0e965b6160 RCX: 00007f0e9638d33c [ 1274.942084][T24159] RDX: 000000000000000f RSI: 00007f0e971950a0 RDI: 0000000000000012 [ 1274.942096][T24159] RBP: 00007f0e97195090 R08: 0000000000000000 R09: 0000000000000000 [ 1274.942107][T24159] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1274.942117][T24159] R13: 0000000000000000 R14: 00007f0e965b6160 R15: 00007f0e966dfa28 [ 1274.942153][T24159] [ 1275.172874][ C0] vkms_vblank_simulate: vblank timer overrun [ 1276.012545][ T24] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 1276.162543][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 1276.170190][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1276.183979][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1276.194089][ T24] usb 6-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1276.203196][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1276.213589][ T24] usb 6-1: config 0 descriptor?? [ 1276.342719][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1276.493942][T24179] binder_alloc: binder_alloc_mmap_handler: 24176 2000003d8000-2000003d9000 already mapped failed -16 [ 1276.539293][ T5901] usb 2-1: USB disconnect, device number 26 [ 1276.644895][ T24] usbhid 6-1:0.0: can't add hid device: -32 [ 1276.651135][ T24] usbhid 6-1:0.0: probe with driver usbhid failed with error -32 [ 1276.839024][ T5901] usb 6-1: USB disconnect, device number 16 [ 1278.592368][T24230] dlm: no locking on control device [ 1278.782675][T23653] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 1278.912559][T23653] usb 4-1: device descriptor read/64, error -71 [ 1279.163347][T23653] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 1279.255141][T24244] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave [ 1279.290857][T24244] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1) [ 1279.312761][T23653] usb 4-1: device descriptor read/64, error -71 [ 1279.427800][T23653] usb usb4-port1: attempt power cycle [ 1279.654879][T24251] tipc: Started in network mode [ 1279.659800][T24251] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 1279.686524][T24251] tipc: Enabling of bearer rejected, failed to enable media [ 1279.802689][T23653] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 1280.033061][T23653] usb 4-1: device descriptor read/8, error -71 [ 1280.252784][T20547] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 1280.282683][T23653] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 1280.325257][T23653] usb 4-1: device descriptor read/8, error -71 [ 1280.422770][T20547] usb 6-1: Using ep0 maxpacket: 16 [ 1280.455273][T20547] usb 6-1: config 0 has no interfaces? [ 1280.463205][T23653] usb usb4-port1: unable to enumerate USB device [ 1280.472012][T20547] usb 6-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 1280.493688][T20547] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1280.518294][T20547] usb 6-1: config 0 descriptor?? [ 1280.682636][ T30] audit: type=1326 audit(1749120908.456:4028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24258 comm="syz.2.5726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4c478e929 code=0x7ffc0000 [ 1280.707503][ T30] audit: type=1326 audit(1749120908.456:4029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24258 comm="syz.2.5726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4c478e929 code=0x7ffc0000 [ 1281.102652][ T30] audit: type=1326 audit(1749120908.456:4030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24258 comm="syz.2.5726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=459 compat=0 ip=0x7fc4c478e929 code=0x7ffc0000 [ 1281.125115][ C0] vkms_vblank_simulate: vblank timer overrun [ 1281.140768][ T30] audit: type=1326 audit(1749120908.456:4031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24258 comm="syz.2.5726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4c478e929 code=0x7ffc0000 [ 1281.171711][ T30] audit: type=1326 audit(1749120908.456:4032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24258 comm="syz.2.5726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4c478e929 code=0x7ffc0000 [ 1281.284365][ T30] audit: type=1326 audit(1749120908.456:4033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24258 comm="syz.2.5726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7fc4c478e929 code=0x7ffc0000 [ 1281.306842][ C0] vkms_vblank_simulate: vblank timer overrun [ 1281.313173][ T30] audit: type=1326 audit(1749120908.456:4034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24258 comm="syz.2.5726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4c478e929 code=0x7ffc0000 [ 1281.337454][ T30] audit: type=1326 audit(1749120908.456:4035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24258 comm="syz.2.5726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4c478e929 code=0x7ffc0000 [ 1281.361719][ T30] audit: type=1326 audit(1749120908.456:4036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24258 comm="syz.2.5726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4c478e929 code=0x7ffc0000 [ 1281.414071][ T30] audit: type=1326 audit(1749120908.456:4037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24258 comm="syz.2.5726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4c478e929 code=0x7ffc0000 [ 1281.436532][ C0] vkms_vblank_simulate: vblank timer overrun [ 1281.836117][T24270] binder: 24268:24270 ioctl c0306201 2000000003c0 returned -14 [ 1282.165224][T24270] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5728'. [ 1282.197390][T24278] binder: 24277:24278 ioctl 4020ae46 7fb9ca00ebe0 returned -22 [ 1282.211357][T24278] binder: 24277:24278 ioctl 4020ae46 7fb9ca00ebe0 returned -22 [ 1282.221133][T24278] binder: 24277:24278 ioctl 4020ae46 7fb9ca00ebe0 returned -22 [ 1282.231403][T24278] binder: 24277:24278 ioctl 4020ae46 7fb9ca00ebe0 returned -22 [ 1282.240332][T24278] binder: 24277:24278 ioctl 4020ae46 7fb9ca00ebe0 returned -22 [ 1282.251582][T24278] binder: 24277:24278 ioctl 4020ae46 7fb9ca00ebe0 returned -22 [ 1282.275826][T24278] binder: 24277:24278 ioctl 4020ae46 7fb9ca00ebe0 returned -22 [ 1282.290905][T24278] binder: 24277:24278 ioctl 4020ae46 7fb9ca00ebe0 returned -22 [ 1282.306076][T24278] binder: 24277:24278 ioctl 4020ae46 7fb9ca00ebe0 returned -22 [ 1282.318495][T24278] binder: 24277:24278 ioctl 4020ae46 7fb9ca00ebe0 returned -22 [ 1282.326891][T24278] binder: 24277:24278 ioctl 4020ae46 7fb9ca00ebe0 returned -22 [ 1282.337331][T24278] binder: 24277:24278 ioctl 4020ae46 7fb9ca00ebe0 returned -22 [ 1282.372680][T24278] binder: 24277:24278 ioctl 4020ae46 7fb9ca00ebe0 returned -22 [ 1282.405855][T24278] binder: 24277:24278 ioctl 4020ae46 7fb9ca00ebe0 returned -22 [ 1282.431308][T24278] binder: 24277:24278 ioctl 4020ae46 7fb9ca00ebe0 returned -22 [ 1282.446028][T24278] binder: 24277:24278 ioctl 4020ae46 7fb9ca00ebe0 returned -22 [ 1282.466906][T24288] FAULT_INJECTION: forcing a failure. [ 1282.466906][T24288] name failslab, interval 1, probability 0, space 0, times 0 [ 1282.491695][T24278] binder: 24277:24278 ioctl 4020ae46 7fb9ca00ebe0 returned -22 [ 1282.494137][T24288] CPU: 1 UID: 0 PID: 24288 Comm: syz.2.5733 Not tainted 6.15.0-syzkaller-12058-g64980441d269 #0 PREEMPT(full) [ 1282.494165][T24288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1282.494178][T24288] Call Trace: [ 1282.494186][T24288] [ 1282.494197][T24288] dump_stack_lvl+0x189/0x250 [ 1282.494233][T24288] ? __pfx____ratelimit+0x10/0x10 [ 1282.494274][T24288] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1282.494305][T24288] ? __pfx__printk+0x10/0x10 [ 1282.494342][T24288] should_fail_ex+0x414/0x560 [ 1282.494375][T24288] should_failslab+0xa8/0x100 [ 1282.494401][T24288] kmem_cache_alloc_noprof+0x73/0x3c0 [ 1282.494422][T24288] ? skb_clone+0x212/0x3a0 [ 1282.494451][T24288] skb_clone+0x212/0x3a0 [ 1282.494478][T24288] __netlink_deliver_tap+0x404/0x850 [ 1282.494511][T24288] ? netlink_deliver_tap+0x2e/0x1b0 [ 1282.494531][T24288] netlink_deliver_tap+0x19c/0x1b0 [ 1282.494553][T24288] netlink_sendskb+0x68/0x140 [ 1282.494586][T24288] netlink_rcv_skb+0x28c/0x470 [ 1282.494608][T24288] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1282.494637][T24288] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1282.494676][T24288] ? down_read+0x1ad/0x2e0 [ 1282.494708][T24288] genl_rcv+0x28/0x40 [ 1282.494732][T24288] netlink_unicast+0x75b/0x8d0 [ 1282.494772][T24288] netlink_sendmsg+0x805/0xb30 [ 1282.494803][T24288] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1282.494828][T24288] ? aa_sock_msg_perm+0x94/0x160 [ 1282.494857][T24288] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1282.494884][T24288] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1282.494905][T24288] __sock_sendmsg+0x21c/0x270 [ 1282.494937][T24288] ____sys_sendmsg+0x505/0x830 [ 1282.494966][T24288] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1282.494998][T24288] ? import_iovec+0x74/0xa0 [ 1282.495025][T24288] ___sys_sendmsg+0x21f/0x2a0 [ 1282.495049][T24288] ? __pfx____sys_sendmsg+0x10/0x10 [ 1282.495110][T24288] ? __fget_files+0x2a/0x420 [ 1282.495133][T24288] ? __fget_files+0x3a0/0x420 [ 1282.495166][T24288] __x64_sys_sendmsg+0x19b/0x260 [ 1282.495192][T24288] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1282.495226][T24288] ? __pfx_ksys_write+0x10/0x10 [ 1282.495242][T24288] ? rcu_is_watching+0x15/0xb0 [ 1282.495274][T24288] ? do_syscall_64+0xbe/0x3b0 [ 1282.495306][T24288] do_syscall_64+0xfa/0x3b0 [ 1282.495331][T24288] ? lockdep_hardirqs_on+0x9c/0x150 [ 1282.495356][T24288] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1282.495377][T24288] ? clear_bhb_loop+0x60/0xb0 [ 1282.495402][T24288] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1282.495421][T24288] RIP: 0033:0x7fc4c478e929 [ 1282.495440][T24288] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1282.495458][T24288] RSP: 002b:00007fc4c5623038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1282.495480][T24288] RAX: ffffffffffffffda RBX: 00007fc4c49b5fa0 RCX: 00007fc4c478e929 [ 1282.495496][T24288] RDX: 0000000020000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 1282.495509][T24288] RBP: 00007fc4c5623090 R08: 0000000000000000 R09: 0000000000000000 [ 1282.495522][T24288] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1282.495535][T24288] R13: 0000000000000000 R14: 00007fc4c49b5fa0 R15: 00007fc4c4adfa28 [ 1282.495566][T24288] [ 1282.530427][T24269] delete_channel: no stack [ 1282.533009][T24278] binder: 24277:24278 ioctl 4020ae46 7fb9ca00ebe0 returned -22 [ 1282.873491][T20547] usb 6-1: USB disconnect, device number 17 [ 1282.952638][T24278] binder: 24277:24278 ioctl 4020ae46 7fb9ca00ebe0 returned -22 [ 1282.994618][T24296] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5734'. [ 1283.003969][T24296] 8021q: VLANs not supported on ip6tnl0 [ 1283.010649][T24278] binder: 24277:24278 ioctl 4020ae46 7fb9ca00ebe0 returned -22 [ 1283.035391][T24278] binder: 24277:24278 ioctl 4020ae46 7fb9ca00ebe0 returned -22 [ 1283.045248][T24278] binder: 24277:24278 ioctl 4020ae46 7fb9ca00ebe0 returned -22 [ 1283.053962][T24278] binder: 24277:24278 ioctl 4020ae46 7fb9ca00ebe0 returned -22 [ 1283.061960][T24278] binder: 24277:24278 ioctl 4020ae46 7fb9ca00ebe0 returned -22 [ 1283.072136][T24278] binder: 24277:24278 ioctl 4020ae46 7fb9ca00e8e0 returned -22 [ 1283.451766][T24314] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1283.502748][T20547] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 1283.674300][T20547] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1283.685314][T20547] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1283.696767][T20547] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1283.709368][T20547] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1283.723959][T20547] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1283.735266][T20547] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1283.743490][T20547] usb 6-1: Manufacturer: syz [ 1283.750155][T20547] usb 6-1: config 0 descriptor?? [ 1283.856688][T24322] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave [ 1283.870593][T24322] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1) [ 1283.884404][T24322] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5745'. [ 1283.950131][T24324] FAULT_INJECTION: forcing a failure. [ 1283.950131][T24324] name failslab, interval 1, probability 0, space 0, times 0 [ 1283.966784][T24324] CPU: 1 UID: 0 PID: 24324 Comm: syz.1.5746 Not tainted 6.15.0-syzkaller-12058-g64980441d269 #0 PREEMPT(full) [ 1283.966810][T24324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1283.966840][T24324] Call Trace: [ 1283.966848][T24324] [ 1283.966856][T24324] dump_stack_lvl+0x189/0x250 [ 1283.966890][T24324] ? __pfx____ratelimit+0x10/0x10 [ 1283.966912][T24324] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1283.966933][T24324] ? __pfx__printk+0x10/0x10 [ 1283.966971][T24324] should_fail_ex+0x414/0x560 [ 1283.967001][T24324] should_failslab+0xa8/0x100 [ 1283.967024][T24324] kmem_cache_alloc_noprof+0x73/0x3c0 [ 1283.967041][T24324] ? skb_clone+0x212/0x3a0 [ 1283.967060][T24324] skb_clone+0x212/0x3a0 [ 1283.967078][T24324] __netlink_deliver_tap+0x404/0x850 [ 1283.967114][T24324] ? netlink_deliver_tap+0x2e/0x1b0 [ 1283.967136][T24324] netlink_deliver_tap+0x19c/0x1b0 [ 1283.967176][T24324] netlink_sendskb+0x68/0x140 [ 1283.967208][T24324] netlink_rcv_skb+0x28c/0x470 [ 1283.967228][T24324] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1283.967254][T24324] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1283.967293][T24324] ? down_read+0x1ad/0x2e0 [ 1283.967325][T24324] genl_rcv+0x28/0x40 [ 1283.967348][T24324] netlink_unicast+0x75b/0x8d0 [ 1283.967379][T24324] netlink_sendmsg+0x805/0xb30 [ 1283.967401][T24324] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1283.967428][T24324] ? aa_sock_msg_perm+0x94/0x160 [ 1283.967457][T24324] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1283.967483][T24324] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1283.967504][T24324] __sock_sendmsg+0x21c/0x270 [ 1283.967526][T24324] ____sys_sendmsg+0x505/0x830 [ 1283.967545][T24324] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1283.967577][T24324] ? import_iovec+0x74/0xa0 [ 1283.967603][T24324] ___sys_sendmsg+0x21f/0x2a0 [ 1283.967628][T24324] ? __pfx____sys_sendmsg+0x10/0x10 [ 1283.967677][T24324] ? __fget_files+0x2a/0x420 [ 1283.967693][T24324] ? __fget_files+0x3a0/0x420 [ 1283.967725][T24324] __x64_sys_sendmsg+0x19b/0x260 [ 1283.967751][T24324] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1283.967783][T24324] ? __pfx_ksys_write+0x10/0x10 [ 1283.967800][T24324] ? rcu_is_watching+0x15/0xb0 [ 1283.967825][T24324] ? do_syscall_64+0xbe/0x3b0 [ 1283.967857][T24324] do_syscall_64+0xfa/0x3b0 [ 1283.967884][T24324] ? lockdep_hardirqs_on+0x9c/0x150 [ 1283.967908][T24324] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1283.967928][T24324] ? clear_bhb_loop+0x60/0xb0 [ 1283.967951][T24324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1283.967965][T24324] RIP: 0033:0x7fbc5f18e929 [ 1283.967979][T24324] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1283.967992][T24324] RSP: 002b:00007fbc6001d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1283.968012][T24324] RAX: ffffffffffffffda RBX: 00007fbc5f3b5fa0 RCX: 00007fbc5f18e929 [ 1283.968028][T24324] RDX: 0000000024000000 RSI: 0000200000000340 RDI: 0000000000000003 [ 1283.968042][T24324] RBP: 00007fbc6001d090 R08: 0000000000000000 R09: 0000000000000000 [ 1283.968055][T24324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1283.968066][T24324] R13: 0000000000000000 R14: 00007fbc5f3b5fa0 R15: 00007fbc5f4dfa28 [ 1283.968098][T24324] [ 1284.314568][T20547] appleir 0003:05AC:8243.002C: unknown main item tag 0x0 [ 1284.322354][T20547] appleir 0003:05AC:8243.002C: No inputs registered, leaving [ 1284.393115][T20547] appleir 0003:05AC:8243.002C: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.5-1/input0 [ 1284.894428][ T24] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 1285.066320][ T24] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1285.076669][ T24] usb 4-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 1285.094389][ T24] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1285.110957][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1285.417041][T24335] kAFS: unable to lookup cell '.,' [ 1286.875224][ T24] usb 6-1: USB disconnect, device number 18 [ 1286.901736][T24307] delete_channel: no stack [ 1286.970400][T24351] FAULT_INJECTION: forcing a failure. [ 1286.970400][T24351] name failslab, interval 1, probability 0, space 0, times 0 [ 1286.994169][T24351] CPU: 1 UID: 0 PID: 24351 Comm: syz.5.5753 Not tainted 6.15.0-syzkaller-12058-g64980441d269 #0 PREEMPT(full) [ 1286.994194][T24351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1286.994205][T24351] Call Trace: [ 1286.994213][T24351] [ 1286.994221][T24351] dump_stack_lvl+0x189/0x250 [ 1286.994253][T24351] ? __pfx____ratelimit+0x10/0x10 [ 1286.994277][T24351] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1286.994303][T24351] ? __pfx__printk+0x10/0x10 [ 1286.994336][T24351] should_fail_ex+0x414/0x560 [ 1286.994364][T24351] should_failslab+0xa8/0x100 [ 1286.994386][T24351] kmem_cache_alloc_noprof+0x73/0x3c0 [ 1286.994405][T24351] ? skb_clone+0x212/0x3a0 [ 1286.994430][T24351] skb_clone+0x212/0x3a0 [ 1286.994453][T24351] __netlink_deliver_tap+0x404/0x850 [ 1286.994483][T24351] ? netlink_deliver_tap+0x2e/0x1b0 [ 1286.994502][T24351] netlink_deliver_tap+0x19c/0x1b0 [ 1286.994521][T24351] netlink_sendskb+0x68/0x140 [ 1286.994548][T24351] netlink_rcv_skb+0x28c/0x470 [ 1286.994566][T24351] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1286.994589][T24351] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1286.994623][T24351] ? down_read+0x1ad/0x2e0 [ 1286.994651][T24351] genl_rcv+0x28/0x40 [ 1286.994672][T24351] netlink_unicast+0x75b/0x8d0 [ 1286.994708][T24351] netlink_sendmsg+0x805/0xb30 [ 1286.994735][T24351] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1286.994756][T24351] ? aa_sock_msg_perm+0x94/0x160 [ 1286.994782][T24351] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1286.994805][T24351] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1286.994824][T24351] __sock_sendmsg+0x21c/0x270 [ 1286.994857][T24351] ____sys_sendmsg+0x505/0x830 [ 1286.994882][T24351] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1286.994910][T24351] ? import_iovec+0x74/0xa0 [ 1286.994933][T24351] ___sys_sendmsg+0x21f/0x2a0 [ 1286.994955][T24351] ? __pfx____sys_sendmsg+0x10/0x10 [ 1286.995009][T24351] ? __fget_files+0x2a/0x420 [ 1286.995028][T24351] ? __fget_files+0x3a0/0x420 [ 1286.995058][T24351] __x64_sys_sendmsg+0x19b/0x260 [ 1286.995080][T24351] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1286.995109][T24351] ? __pfx_ksys_write+0x10/0x10 [ 1286.995128][T24351] ? rcu_is_watching+0x15/0xb0 [ 1286.995150][T24351] ? do_syscall_64+0xbe/0x3b0 [ 1286.995178][T24351] do_syscall_64+0xfa/0x3b0 [ 1286.995202][T24351] ? lockdep_hardirqs_on+0x9c/0x150 [ 1286.995225][T24351] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1286.995243][T24351] ? clear_bhb_loop+0x60/0xb0 [ 1286.995264][T24351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1286.995282][T24351] RIP: 0033:0x7f0e9638e929 [ 1286.995297][T24351] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1286.995312][T24351] RSP: 002b:00007f0e971d7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1286.995331][T24351] RAX: ffffffffffffffda RBX: 00007f0e965b5fa0 RCX: 00007f0e9638e929 [ 1286.995344][T24351] RDX: 00000000000488c0 RSI: 00002000000001c0 RDI: 0000000000000003 [ 1286.995355][T24351] RBP: 00007f0e971d7090 R08: 0000000000000000 R09: 0000000000000000 [ 1286.995365][T24351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1286.995376][T24351] R13: 0000000000000000 R14: 00007f0e965b5fa0 R15: 00007f0e966dfa28 [ 1286.995404][T24351] [ 1287.492354][ T24] usb 4-1: USB disconnect, device number 46 [ 1287.680051][T24362] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.5758'. [ 1287.887828][ T24] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 1288.044208][ T24] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1288.053606][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1288.098205][ T24] usb 4-1: config 0 descriptor?? [ 1288.111779][ T24] cp210x 4-1:0.0: cp210x converter detected [ 1288.289225][T24379] binder: BINDER_SET_CONTEXT_MGR already set [ 1288.295486][T24379] binder: 24378:24379 ioctl 4018620d 200000000040 returned -16 [ 1288.518268][ T24] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1288.616415][T24377] loop6: detected capacity change from 0 to 524287999 [ 1288.730947][T24359] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1288.739774][T24359] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1288.766367][ T24] usb 4-1: cp210x converter now attached to ttyUSB0 [ 1288.992685][ T24] usb 4-1: USB disconnect, device number 47 [ 1289.078256][ T24] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1289.230584][ T24] cp210x 4-1:0.0: device disconnected [ 1290.132551][T23653] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 1290.442553][T23653] usb 2-1: Using ep0 maxpacket: 8 [ 1290.453703][T23653] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1290.474831][T23653] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1290.512208][T23653] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1290.558391][T23653] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 1290.587695][T23653] usb 2-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00 [ 1290.600894][T23653] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1290.617993][T23653] usb 2-1: config 0 descriptor?? [ 1290.623084][ T5894] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 1290.706981][T24410] veth1_to_bond: entered allmulticast mode [ 1290.721061][T24410] veth1_to_bond: entered promiscuous mode [ 1290.744699][T24409] veth1_to_bond: left promiscuous mode [ 1290.753322][T24409] veth1_to_bond: left allmulticast mode [ 1290.790075][ T5894] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1290.802386][ T5894] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1290.833587][ T5894] usb 4-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 1290.858320][ T5894] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1290.939849][ T5894] usb 4-1: Product: syz [ 1290.960158][ T5894] usb 4-1: Manufacturer: syz [ 1291.008887][ T5894] usb 4-1: SerialNumber: syz [ 1291.039510][ T5894] usb 4-1: config 0 descriptor?? [ 1291.076158][T23653] redragon 0003:0C45:760B.002D: unknown main item tag 0x6 [ 1291.136995][T23653] redragon 0003:0C45:760B.002D: item fetching failed at offset 7/133 [ 1291.193018][T23653] redragon 0003:0C45:760B.002D: probe with driver redragon failed with error -22 [ 1291.238429][T24417] kAFS: unable to lookup cell '' [ 1291.312817][ T980] usb 2-1: USB disconnect, device number 27 [ 1291.337906][T24418] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5777'. [ 1291.407911][T24418] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5777'. [ 1291.609410][T24425] syz_tun: entered allmulticast mode [ 1291.625023][T24424] syz_tun: left allmulticast mode [ 1291.675778][T24427] netlink: 36 bytes leftover after parsing attributes in process `syz.5.5782'. [ 1291.951268][T24435] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5785'. [ 1291.976937][T24434] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5785'. [ 1292.143383][T23653] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 1292.322636][T23653] usb 3-1: Using ep0 maxpacket: 32 [ 1292.348132][T23653] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1292.367179][T24445] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1292.378809][T23653] usb 3-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 1292.387042][T24445] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1292.399392][T24445] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1292.402709][T23653] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1292.408787][T24445] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1292.425607][T24445] geneve2: entered promiscuous mode [ 1292.429481][T23653] usb 3-1: Product: syz [ 1292.439971][T23653] usb 3-1: Manufacturer: syz [ 1292.444792][T23653] usb 3-1: SerialNumber: syz [ 1292.454943][T23653] usb 3-1: config 0 descriptor?? [ 1292.471285][T23653] usb 3-1: bad CDC descriptors [ 1292.478052][T23653] usb 3-1: unsupported MDLM descriptors [ 1292.563384][T24452] FAULT_INJECTION: forcing a failure. [ 1292.563384][T24452] name failslab, interval 1, probability 0, space 0, times 0 [ 1292.595939][T24452] CPU: 1 UID: 0 PID: 24452 Comm: syz.5.5792 Not tainted 6.15.0-syzkaller-12058-g64980441d269 #0 PREEMPT(full) [ 1292.595965][T24452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1292.595976][T24452] Call Trace: [ 1292.595984][T24452] [ 1292.595992][T24452] dump_stack_lvl+0x189/0x250 [ 1292.596023][T24452] ? __pfx____ratelimit+0x10/0x10 [ 1292.596047][T24452] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1292.596074][T24452] ? __pfx__printk+0x10/0x10 [ 1292.596098][T24452] ? __pfx___might_resched+0x10/0x10 [ 1292.596131][T24452] ? fs_reclaim_acquire+0x7d/0x100 [ 1292.596176][T24452] should_fail_ex+0x414/0x560 [ 1292.596207][T24452] should_failslab+0xa8/0x100 [ 1292.596232][T24452] __kmalloc_cache_noprof+0x70/0x3d0 [ 1292.596253][T24452] ? tcf_block_get_ext+0x8d4/0x17d0 [ 1292.596277][T24452] tcf_block_get_ext+0x8d4/0x17d0 [ 1292.596297][T24452] ? __sock_sendmsg+0x21c/0x270 [ 1292.596334][T24452] tcf_block_get+0x67/0xa0 [ 1292.596351][T24452] ? __pfx_tcf_chain_head_change_dflt+0x10/0x10 [ 1292.596376][T24452] fq_codel_init+0x395/0x960 [ 1292.596406][T24452] ? lockdep_rtnl_is_held+0x26/0x40 [ 1292.596433][T24452] ? __pfx_fq_codel_init+0x10/0x10 [ 1292.596452][T24452] qdisc_create+0x7a9/0xea0 [ 1292.596488][T24452] tc_modify_qdisc+0x1426/0x2010 [ 1292.596529][T24452] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 1292.596589][T24452] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 1292.596615][T24452] rtnetlink_rcv_msg+0x779/0xb70 [ 1292.596650][T24452] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 1292.596679][T24452] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1292.596707][T24452] ? ref_tracker_free+0x63a/0x7d0 [ 1292.596733][T24452] ? __copy_skb_header+0xa7/0x550 [ 1292.596757][T24452] ? __pfx_ref_tracker_free+0x10/0x10 [ 1292.596796][T24452] netlink_rcv_skb+0x208/0x470 [ 1292.596818][T24452] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1292.596850][T24452] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1292.596885][T24452] ? netlink_deliver_tap+0x2e/0x1b0 [ 1292.596904][T24452] ? netlink_deliver_tap+0x2e/0x1b0 [ 1292.596930][T24452] netlink_unicast+0x75b/0x8d0 [ 1292.596970][T24452] netlink_sendmsg+0x805/0xb30 [ 1292.597002][T24452] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1292.597027][T24452] ? aa_sock_msg_perm+0x94/0x160 [ 1292.597049][T24452] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1292.597069][T24452] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1292.597084][T24452] __sock_sendmsg+0x21c/0x270 [ 1292.597106][T24452] ____sys_sendmsg+0x52d/0x830 [ 1292.597126][T24452] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1292.597149][T24452] ? import_iovec+0x74/0xa0 [ 1292.597166][T24452] ___sys_sendmsg+0x21f/0x2a0 [ 1292.597184][T24452] ? __pfx____sys_sendmsg+0x10/0x10 [ 1292.597225][T24452] ? __fget_files+0x2a/0x420 [ 1292.597257][T24452] ? __fget_files+0x3a0/0x420 [ 1292.597281][T24452] __sys_sendmmsg+0x227/0x430 [ 1292.597301][T24452] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1292.597315][T24452] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 1292.597354][T24452] ? ksys_write+0x22a/0x250 [ 1292.597370][T24452] ? __pfx_ksys_write+0x10/0x10 [ 1292.597382][T24452] ? rcu_is_watching+0x15/0xb0 [ 1292.597405][T24452] __x64_sys_sendmmsg+0xa0/0xc0 [ 1292.597423][T24452] do_syscall_64+0xfa/0x3b0 [ 1292.597443][T24452] ? lockdep_hardirqs_on+0x9c/0x150 [ 1292.597460][T24452] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1292.597475][T24452] ? clear_bhb_loop+0x60/0xb0 [ 1292.597492][T24452] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1292.597506][T24452] RIP: 0033:0x7f0e9638e929 [ 1292.597520][T24452] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1292.597533][T24452] RSP: 002b:00007f0e971d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1292.597549][T24452] RAX: ffffffffffffffda RBX: 00007f0e965b5fa0 RCX: 00007f0e9638e929 [ 1292.597560][T24452] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000004 [ 1292.597570][T24452] RBP: 00007f0e971d7090 R08: 0000000000000000 R09: 0000000000000000 [ 1292.597579][T24452] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1292.597588][T24452] R13: 0000000000000000 R14: 00007f0e965b5fa0 R15: 00007f0e966dfa28 [ 1292.597609][T24452] [ 1292.615218][T24454] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5793'. [ 1293.221920][T24469] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5798'. [ 1293.243161][T24469] FAULT_INJECTION: forcing a failure. [ 1293.243161][T24469] name failslab, interval 1, probability 0, space 0, times 0 [ 1293.256582][T24469] CPU: 1 UID: 0 PID: 24469 Comm: syz.1.5798 Not tainted 6.15.0-syzkaller-12058-g64980441d269 #0 PREEMPT(full) [ 1293.256607][T24469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1293.256619][T24469] Call Trace: [ 1293.256627][T24469] [ 1293.256636][T24469] dump_stack_lvl+0x189/0x250 [ 1293.256670][T24469] ? __pfx____ratelimit+0x10/0x10 [ 1293.256696][T24469] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1293.256725][T24469] ? __pfx__printk+0x10/0x10 [ 1293.256758][T24469] should_fail_ex+0x414/0x560 [ 1293.256789][T24469] should_failslab+0xa8/0x100 [ 1293.256812][T24469] kmem_cache_alloc_noprof+0x73/0x3c0 [ 1293.256832][T24469] ? skb_clone+0x212/0x3a0 [ 1293.256859][T24469] skb_clone+0x212/0x3a0 [ 1293.256884][T24469] __netlink_deliver_tap+0x404/0x850 [ 1293.256916][T24469] ? netlink_deliver_tap+0x2e/0x1b0 [ 1293.256936][T24469] netlink_deliver_tap+0x19c/0x1b0 [ 1293.256957][T24469] netlink_sendskb+0x68/0x140 [ 1293.256986][T24469] netlink_rcv_skb+0x28c/0x470 [ 1293.257006][T24469] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1293.257037][T24469] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1293.257069][T24469] ? netlink_deliver_tap+0x2e/0x1b0 [ 1293.257088][T24469] ? netlink_deliver_tap+0x2e/0x1b0 [ 1293.257113][T24469] netlink_unicast+0x75b/0x8d0 [ 1293.257152][T24469] netlink_sendmsg+0x805/0xb30 [ 1293.257183][T24469] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1293.257223][T24469] ? aa_sock_msg_perm+0x94/0x160 [ 1293.257270][T24469] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1293.257298][T24469] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1293.257320][T24469] __sock_sendmsg+0x21c/0x270 [ 1293.257360][T24469] sock_sendmsg+0x158/0x230 [ 1293.257392][T24469] ? __pfx_sock_sendmsg+0x10/0x10 [ 1293.257435][T24469] ? __asan_memset+0x22/0x50 [ 1293.257465][T24469] ? iov_iter_bvec+0xb8/0x180 [ 1293.257489][T24469] splice_to_socket+0x8ff/0xf10 [ 1293.257539][T24469] ? __pfx_splice_to_socket+0x10/0x10 [ 1293.257558][T24469] ? aa_file_perm+0x3e7/0xed0 [ 1293.257614][T24469] ? get_pid_task+0x20/0x1f0 [ 1293.257656][T24469] ? bpf_lsm_file_permission+0x9/0x20 [ 1293.257685][T24469] ? security_file_permission+0x75/0x290 [ 1293.257711][T24469] ? rw_verify_area+0x258/0x650 [ 1293.257746][T24469] ? __pfx_splice_to_socket+0x10/0x10 [ 1293.257767][T24469] do_splice+0xc79/0x1660 [ 1293.257818][T24469] ? __pfx_do_splice+0x10/0x10 [ 1293.257853][T24469] __se_sys_splice+0x2e1/0x460 [ 1293.257883][T24469] ? __pfx___se_sys_splice+0x10/0x10 [ 1293.257912][T24469] ? __x64_sys_splice+0x21/0xf0 [ 1293.257938][T24469] do_syscall_64+0xfa/0x3b0 [ 1293.257964][T24469] ? lockdep_hardirqs_on+0x9c/0x150 [ 1293.257989][T24469] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1293.258008][T24469] ? clear_bhb_loop+0x60/0xb0 [ 1293.258033][T24469] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1293.258051][T24469] RIP: 0033:0x7fbc5f18e929 [ 1293.258070][T24469] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1293.258087][T24469] RSP: 002b:00007fbc5fffc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 1293.258108][T24469] RAX: ffffffffffffffda RBX: 00007fbc5f3b6080 RCX: 00007fbc5f18e929 [ 1293.258122][T24469] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 1293.258134][T24469] RBP: 00007fbc5fffc090 R08: 000000000004ffe6 R09: 0000000000000000 [ 1293.258147][T24469] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1293.258158][T24469] R13: 0000000000000001 R14: 00007fbc5f3b6080 R15: 00007fbc5f4dfa28 [ 1293.258189][T24469] [ 1293.680218][ T980] usb 4-1: USB disconnect, device number 48 [ 1294.055820][ T980] usb 4-1: new low-speed USB device number 49 using dummy_hcd [ 1294.218557][ T980] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1294.233515][ T980] usb 4-1: config 0 has no interface number 0 [ 1294.241872][ T980] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1294.253578][ T980] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 1294.264946][ T980] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1294.274278][ T980] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1294.287030][ T980] usb 4-1: config 0 descriptor?? [ 1294.296891][T24482] netlink: 'syz.1.5804': attribute type 10 has an invalid length. [ 1294.304883][T24482] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5804'. [ 1294.328100][T24482] team0: Port device geneve0 added [ 1294.334307][T24475] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1294.350307][ T980] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1294.558065][ T5894] usb 4-1: USB disconnect, device number 49 [ 1294.564196][ C0] iowarrior 4-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 1294.710186][T24487] input: syz0 as /devices/virtual/input/input67 [ 1294.795383][ T980] usb 3-1: USB disconnect, device number 71 [ 1295.338954][T24507] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5813'. [ 1295.348210][T24507] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5813'. [ 1295.666757][T24518] input: syz0 as /devices/virtual/input/input68 [ 1296.152925][T24527] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5821'. [ 1296.168650][T24527] netlink: 216 bytes leftover after parsing attributes in process `syz.0.5821'. [ 1296.178727][T24527] netlink: 216 bytes leftover after parsing attributes in process `syz.0.5821'. [ 1296.203517][T24527] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 1296.485450][T24534] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5824'. [ 1296.633799][T24539] netlink: 140 bytes leftover after parsing attributes in process `syz.3.5826'. [ 1296.761043][T24542] input: syz0 as /devices/virtual/input/input69 [ 1297.203472][T24555] netlink: 'syz.0.5831': attribute type 29 has an invalid length. [ 1297.214994][T24555] netlink: 'syz.0.5831': attribute type 29 has an invalid length. [ 1297.225033][T24555] netlink: 500 bytes leftover after parsing attributes in process `syz.0.5831'. [ 1297.472614][ T24] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 1297.755430][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1297.765935][ T24] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1297.794416][ T24] usb 4-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 1297.803666][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1297.811675][ T24] usb 4-1: Product: syz [ 1297.817475][ T24] usb 4-1: Manufacturer: syz [ 1297.822110][ T24] usb 4-1: SerialNumber: syz [ 1297.833486][T24570] FAULT_INJECTION: forcing a failure. [ 1297.833486][T24570] name failslab, interval 1, probability 0, space 0, times 0 [ 1297.855259][T24570] CPU: 0 UID: 0 PID: 24570 Comm: syz.1.5835 Not tainted 6.15.0-syzkaller-12058-g64980441d269 #0 PREEMPT(full) [ 1297.855287][T24570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1297.855299][T24570] Call Trace: [ 1297.855308][T24570] [ 1297.855316][T24570] dump_stack_lvl+0x189/0x250 [ 1297.855352][T24570] ? __pfx____ratelimit+0x10/0x10 [ 1297.855381][T24570] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1297.855412][T24570] ? __pfx__printk+0x10/0x10 [ 1297.855441][T24570] ? __pfx___might_resched+0x10/0x10 [ 1297.855459][T24570] ? fs_reclaim_acquire+0x7d/0x100 [ 1297.855487][T24570] should_fail_ex+0x414/0x560 [ 1297.855518][T24570] should_failslab+0xa8/0x100 [ 1297.855545][T24570] __kmalloc_noprof+0xcb/0x4f0 [ 1297.855564][T24570] ? kfree+0x4d/0x440 [ 1297.855580][T24570] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1297.855616][T24570] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1297.855648][T24570] ? tomoyo_domain+0xd9/0x130 [ 1297.855684][T24570] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1297.855709][T24570] tomoyo_path_number_perm+0x1e8/0x5a0 [ 1297.855738][T24570] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1297.855781][T24570] ? __lock_acquire+0xab9/0xd20 [ 1297.855832][T24570] ? __fget_files+0x2a/0x420 [ 1297.855859][T24570] ? __fget_files+0x2a/0x420 [ 1297.855880][T24570] ? __fget_files+0x3a0/0x420 [ 1297.855901][T24570] ? __fget_files+0x2a/0x420 [ 1297.855928][T24570] security_file_ioctl+0xcb/0x2d0 [ 1297.855953][T24570] __se_sys_ioctl+0x47/0x170 [ 1297.855985][T24570] do_syscall_64+0xfa/0x3b0 [ 1297.856010][T24570] ? lockdep_hardirqs_on+0x9c/0x150 [ 1297.856035][T24570] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1297.856055][T24570] ? clear_bhb_loop+0x60/0xb0 [ 1297.856080][T24570] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1297.856100][T24570] RIP: 0033:0x7fbc5f18e929 [ 1297.856119][T24570] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1297.856137][T24570] RSP: 002b:00007fbc6001d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1297.856160][T24570] RAX: ffffffffffffffda RBX: 00007fbc5f3b5fa0 RCX: 00007fbc5f18e929 [ 1297.856176][T24570] RDX: 0000200000000100 RSI: 00000000402c5342 RDI: 0000000000000003 [ 1297.856189][T24570] RBP: 00007fbc6001d090 R08: 0000000000000000 R09: 0000000000000000 [ 1297.856212][T24570] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1297.856225][T24570] R13: 0000000000000000 R14: 00007fbc5f3b5fa0 R15: 00007fbc5f4dfa28 [ 1297.856259][T24570] [ 1297.856268][T24570] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1297.863241][ T24] usb 4-1: config 0 descriptor?? [ 1298.202786][ T980] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 1298.234449][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 1298.234461][ T30] audit: type=1326 audit(1749120926.126:4048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24574 comm="syz.0.5838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f091fd8e929 code=0x7ffc0000 [ 1298.263089][ C0] vkms_vblank_simulate: vblank timer overrun [ 1298.291922][ T5894] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 1298.351756][ T30] audit: type=1326 audit(1749120926.126:4049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24574 comm="syz.0.5838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f091fd8e929 code=0x7ffc0000 [ 1298.382588][ T5901] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 1298.414954][ T980] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1298.425977][ T980] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1298.462515][ T5894] usb 3-1: Using ep0 maxpacket: 16 [ 1298.475672][ T5894] usb 3-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 1298.488132][ T30] audit: type=1326 audit(1749120926.156:4050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24574 comm="syz.0.5838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=238 compat=0 ip=0x7f091fd8e929 code=0x7ffc0000 [ 1298.510584][ C0] vkms_vblank_simulate: vblank timer overrun [ 1298.512809][ T980] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1298.517267][ T5894] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1298.554049][ T980] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1298.575316][ T5901] usb 2-1: Using ep0 maxpacket: 16 [ 1298.578833][ T5894] usb 3-1: Product: syz [ 1298.587728][ T5894] usb 3-1: Manufacturer: syz [ 1298.595588][ T5894] usb 3-1: SerialNumber: syz [ 1298.600427][ T30] audit: type=1326 audit(1749120926.156:4051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24574 comm="syz.0.5838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f091fd8e929 code=0x7ffc0000 [ 1298.633597][ T5901] usb 2-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 1298.636158][ T5894] usb 3-1: config 0 descriptor?? [ 1298.651941][ T5901] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1298.652432][ T30] audit: type=1326 audit(1749120926.156:4052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24574 comm="syz.0.5838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f091fd8e929 code=0x7ffc0000 [ 1298.655468][ T5894] visor 3-1:0.0: Sony Clie 3.5 converter detected [ 1298.698905][ T30] audit: type=1326 audit(1749120926.166:4053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24574 comm="syz.0.5838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f091fd8e929 code=0x7ffc0000 [ 1298.725493][ T30] audit: type=1326 audit(1749120926.166:4054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24574 comm="syz.0.5838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f091fd8e929 code=0x7ffc0000 [ 1298.736894][ T5901] usb 2-1: Product: syz [ 1298.747929][ C0] vkms_vblank_simulate: vblank timer overrun [ 1298.777816][ T980] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1298.831118][ T980] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1298.833495][ T30] audit: type=1326 audit(1749120926.166:4055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24574 comm="syz.0.5838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f091fd8e929 code=0x7ffc0000 [ 1298.840246][ T980] usb 6-1: Manufacturer: syz [ 1298.862177][ C0] vkms_vblank_simulate: vblank timer overrun [ 1298.873416][ T5901] usb 2-1: Manufacturer: syz [ 1298.878128][ T5901] usb 2-1: SerialNumber: syz [ 1298.885807][ T5901] usb 2-1: config 0 descriptor?? [ 1298.893473][ T5901] visor 2-1:0.0: Sony Clie 3.5 converter detected [ 1298.909424][ T980] usb 6-1: config 0 descriptor?? [ 1298.932938][ T30] audit: type=1326 audit(1749120926.166:4056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24574 comm="syz.0.5838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f091fd8e929 code=0x7ffc0000 [ 1298.955601][ T30] audit: type=1326 audit(1749120926.166:4057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24574 comm="syz.0.5838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f091fd8e929 code=0x7ffc0000 [ 1299.087225][T24573] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1299.098954][T24573] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1299.321725][T24570] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1299.335854][T24570] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1299.344883][ T5901] usb 2-1: clie_3_5_startup: get interface number failed: -71 [ 1299.367221][ T5901] visor 2-1:0.0: probe with driver visor failed with error -71 [ 1299.474514][ T5901] usb 2-1: USB disconnect, device number 28 [ 1299.678625][T24582] netlink: 140 bytes leftover after parsing attributes in process `syz.0.5839'. [ 1299.802561][T23653] usb 4-1: USB disconnect, device number 50 [ 1300.030600][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.037376][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.832622][ T5901] usb 2-1: new full-speed USB device number 29 using dummy_hcd [ 1300.874038][ T5894] usb 3-1: clie_3_5_startup: get interface number failed: -71 [ 1300.881710][ T5894] visor 3-1:0.0: probe with driver visor failed with error -71 [ 1300.901075][ T5894] usb 3-1: USB disconnect, device number 72 [ 1300.995321][ T5901] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1301.006990][ T5901] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1301.019090][ T5901] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1301.032191][ T5901] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1301.048832][ T5901] usb 2-1: config 0 descriptor?? [ 1301.068829][ T5901] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1301.077800][ T5901] dvb-usb: bulk message failed: -22 (3/0) [ 1301.095083][ T5901] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1301.106748][ T5901] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1301.115318][ T5901] usb 2-1: media controller created [ 1301.125777][ T5901] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1301.142136][ T5901] dvb-usb: bulk message failed: -22 (6/0) [ 1301.154841][ T5901] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1301.165659][ T5901] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input70 [ 1301.184663][ T5901] dvb-usb: schedule remote query interval to 150 msecs. [ 1301.191902][ T5901] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1301.312621][T23653] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 1301.342682][ T5901] dvb-usb: bulk message failed: -22 (1/0) [ 1301.363644][ T5901] dvb-usb: error while querying for an remote control event. [ 1301.407122][ T980] usbhid 6-1:0.0: can't add hid device: -71 [ 1301.415547][ T980] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1301.441697][ T980] usb 6-1: USB disconnect, device number 19 [ 1301.496210][T24606] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1301.506374][T24606] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1301.533037][ T5901] usb 2-1: USB disconnect, device number 29 [ 1301.543683][T23653] usb 4-1: no configurations [ 1301.548312][T23653] usb 4-1: can't read configurations, error -22 [ 1301.589974][ T5901] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1301.734780][T23653] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 1301.834942][T24611] FAULT_INJECTION: forcing a failure. [ 1301.834942][T24611] name failslab, interval 1, probability 0, space 0, times 0 [ 1301.847869][T24611] CPU: 1 UID: 0 PID: 24611 Comm: syz.2.5849 Not tainted 6.15.0-syzkaller-12058-g64980441d269 #0 PREEMPT(full) [ 1301.847893][T24611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1301.847905][T24611] Call Trace: [ 1301.847913][T24611] [ 1301.847921][T24611] dump_stack_lvl+0x189/0x250 [ 1301.847953][T24611] ? __pfx____ratelimit+0x10/0x10 [ 1301.847977][T24611] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1301.848004][T24611] ? __pfx__printk+0x10/0x10 [ 1301.848038][T24611] should_fail_ex+0x414/0x560 [ 1301.848066][T24611] should_failslab+0xa8/0x100 [ 1301.848088][T24611] kmem_cache_alloc_noprof+0x73/0x3c0 [ 1301.848107][T24611] ? skb_clone+0x212/0x3a0 [ 1301.848132][T24611] skb_clone+0x212/0x3a0 [ 1301.848156][T24611] __netlink_deliver_tap+0x404/0x850 [ 1301.848186][T24611] ? netlink_deliver_tap+0x2e/0x1b0 [ 1301.848205][T24611] netlink_deliver_tap+0x19c/0x1b0 [ 1301.848224][T24611] netlink_sendskb+0x68/0x140 [ 1301.848252][T24611] netlink_rcv_skb+0x28c/0x470 [ 1301.848270][T24611] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1301.848294][T24611] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1301.848329][T24611] ? down_read+0x1ad/0x2e0 [ 1301.848358][T24611] genl_rcv+0x28/0x40 [ 1301.848377][T24611] netlink_unicast+0x75b/0x8d0 [ 1301.848414][T24611] netlink_sendmsg+0x805/0xb30 [ 1301.848440][T24611] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1301.848462][T24611] ? aa_sock_msg_perm+0x94/0x160 [ 1301.848488][T24611] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1301.848511][T24611] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1301.848530][T24611] __sock_sendmsg+0x21c/0x270 [ 1301.848557][T24611] ____sys_sendmsg+0x505/0x830 [ 1301.848582][T24611] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1301.848611][T24611] ? import_iovec+0x74/0xa0 [ 1301.848634][T24611] ___sys_sendmsg+0x21f/0x2a0 [ 1301.848655][T24611] ? __pfx____sys_sendmsg+0x10/0x10 [ 1301.848709][T24611] ? __fget_files+0x2a/0x420 [ 1301.848728][T24611] ? __fget_files+0x3a0/0x420 [ 1301.848758][T24611] __x64_sys_sendmsg+0x19b/0x260 [ 1301.848780][T24611] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1301.848808][T24611] ? __pfx_ksys_write+0x10/0x10 [ 1301.848824][T24611] ? rcu_is_watching+0x15/0xb0 [ 1301.848846][T24611] ? do_syscall_64+0xbe/0x3b0 [ 1301.848880][T24611] do_syscall_64+0xfa/0x3b0 [ 1301.848902][T24611] ? lockdep_hardirqs_on+0x9c/0x150 [ 1301.848925][T24611] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1301.848942][T24611] ? clear_bhb_loop+0x60/0xb0 [ 1301.848964][T24611] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1301.848981][T24611] RIP: 0033:0x7fc4c478e929 [ 1301.848997][T24611] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1301.849012][T24611] RSP: 002b:00007fc4c5623038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1301.849030][T24611] RAX: ffffffffffffffda RBX: 00007fc4c49b5fa0 RCX: 00007fc4c478e929 [ 1301.849043][T24611] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 1301.849055][T24611] RBP: 00007fc4c5623090 R08: 0000000000000000 R09: 0000000000000000 [ 1301.849066][T24611] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1301.849076][T24611] R13: 0000000000000000 R14: 00007fc4c49b5fa0 R15: 00007fc4c4adfa28 [ 1301.849104][T24611] [ 1302.203543][T23653] usb 4-1: no configurations [ 1302.208212][T23653] usb 4-1: can't read configurations, error -22 [ 1302.214993][T23653] usb usb4-port1: attempt power cycle [ 1302.224654][ T980] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 1302.269543][T24614] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5850'. [ 1302.279920][T24614] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5850'. [ 1302.562965][ T980] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1302.573572][ T980] usb 6-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 1302.584592][ T980] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1302.602544][ T980] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1302.605456][T23653] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 1302.724543][T23653] usb 4-1: no configurations [ 1302.729494][T23653] usb 4-1: can't read configurations, error -22 [ 1303.048635][T24608] kAFS: unable to lookup cell '.,' [ 1303.122636][T23653] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 1303.184791][T23653] usb 4-1: no configurations [ 1303.189629][T23653] usb 4-1: can't read configurations, error -22 [ 1303.196543][T23653] usb usb4-port1: unable to enumerate USB device [ 1303.442906][ T980] usb 2-1: new full-speed USB device number 30 using dummy_hcd [ 1303.536439][T24631] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1303.607094][ T980] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1303.615123][ T980] usb 2-1: can't read configurations, error -61 [ 1303.743479][ T980] usb 2-1: new full-speed USB device number 31 using dummy_hcd [ 1303.905330][ T980] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1303.914039][ T980] usb 2-1: can't read configurations, error -61 [ 1303.920611][ T980] usb usb2-port1: attempt power cycle [ 1304.264171][ T980] usb 2-1: new full-speed USB device number 32 using dummy_hcd [ 1304.295439][ T980] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1304.304582][ T980] usb 2-1: can't read configurations, error -61 [ 1304.454715][ T980] usb 2-1: new full-speed USB device number 33 using dummy_hcd [ 1304.496202][ T980] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1304.509342][ T5901] usb 6-1: USB disconnect, device number 20 [ 1304.519789][ T980] usb 2-1: can't read configurations, error -61 [ 1304.536764][ T980] usb usb2-port1: unable to enumerate USB device [ 1304.694528][ T30] kauditd_printk_skb: 161 callbacks suppressed [ 1304.694545][ T30] audit: type=1800 audit(1749120932.576:4219): pid=24648 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.5861" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=103658 res=0 errno=0 [ 1305.635645][ T30] audit: type=1326 audit(1749120933.526:4220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24664 comm="syz.5.5866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e9638e929 code=0x7ffc0000 [ 1305.659067][ T30] audit: type=1326 audit(1749120933.526:4221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24664 comm="syz.5.5866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e9638e929 code=0x7ffc0000 [ 1305.684584][ T30] audit: type=1326 audit(1749120933.526:4222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24664 comm="syz.5.5866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e9638e929 code=0x7ffc0000 [ 1305.707760][ T30] audit: type=1326 audit(1749120933.526:4223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24664 comm="syz.5.5866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0e9638e929 code=0x7ffc0000 [ 1305.730485][ T30] audit: type=1326 audit(1749120933.526:4224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24664 comm="syz.5.5866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e9638e929 code=0x7ffc0000 [ 1305.754873][ T30] audit: type=1326 audit(1749120933.526:4225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24664 comm="syz.5.5866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0e9638e929 code=0x7ffc0000 [ 1305.777585][ T30] audit: type=1326 audit(1749120933.526:4226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24664 comm="syz.5.5866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e9638e929 code=0x7ffc0000 [ 1305.801283][ T30] audit: type=1326 audit(1749120933.526:4227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24664 comm="syz.5.5866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0e9638e929 code=0x7ffc0000 [ 1305.824076][ T30] audit: type=1326 audit(1749120933.526:4228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24664 comm="syz.5.5866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e9638e929 code=0x7ffc0000 [ 1305.850069][T24668] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5866'. [ 1305.859179][T24668] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5866'. [ 1305.868409][T24668] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5866'. [ 1306.492584][ T5901] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 1306.704545][ T5901] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1306.724814][ T5901] usb 2-1: New USB device found, idVendor=0582, idProduct=0000, bcdDevice= 0.00 [ 1306.748671][ T5901] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1306.889877][ T5841] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1306.904714][ T5901] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1306.922617][ T5841] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1306.931253][ T5841] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1306.941433][ T5841] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1306.954232][ T5841] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1306.971014][T21296] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1306.979516][T21296] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1306.993433][T21296] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1307.001863][T21296] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1307.011767][T21296] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1307.205349][T24677] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1307.255182][T24677] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1307.410623][ T5901] usb 2-1: USB disconnect, device number 34 [ 1307.751911][T24685] chnl_net:caif_netlink_parms(): no params data found [ 1307.937812][T22809] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1308.023035][ C0] ------------[ cut here ]------------ [ 1308.028799][ C0] refcount_t: addition on 0; use-after-free. [ 1308.035263][ C0] WARNING: CPU: 0 PID: 22809 at lib/refcount.c:25 refcount_warn_saturate+0xfa/0x1d0 [ 1308.044683][ C0] Modules linked in: [ 1308.048825][ C0] CPU: 0 UID: 0 PID: 22809 Comm: kworker/u8:10 Not tainted 6.15.0-syzkaller-12058-g64980441d269 #0 PREEMPT(full) [ 1308.060821][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1308.070936][ C0] Workqueue: netns cleanup_net [ 1308.075752][ C0] RIP: 0010:refcount_warn_saturate+0xfa/0x1d0 [ 1308.081817][ C0] Code: 00 00 e8 09 2d ff fc 5b 41 5e e9 d1 4a a7 06 cc e8 fb 2c ff fc c6 05 63 ca c9 0a 01 90 48 c7 c7 c0 38 e2 8b e8 17 db c2 fc 90 <0f> 0b 90 90 eb d7 e8 db 2c ff fc c6 05 44 ca c9 0a 01 90 48 c7 c7 [ 1308.101485][ C0] RSP: 0018:ffffc90000007828 EFLAGS: 00010246 [ 1308.107593][ C0] RAX: a187d8676c314800 RBX: 0000000000000002 RCX: ffff88802e213c00 [ 1308.115636][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 1308.123652][ C0] RBP: ffffc900000079b0 R08: 0000000000000003 R09: 0000000000000004 [ 1308.131623][ C0] R10: dffffc0000000000 R11: fffffbfff1bfaa44 R12: ffff8880317d0000 [ 1308.139629][ C0] R13: dffffc0000000000 R14: ffff8880317d016c R15: ffff888055c4d400 [ 1308.147634][ C0] FS: 0000000000000000(0000) GS:ffff888125c55000(0000) knlGS:0000000000000000 [ 1308.156606][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1308.163233][ C0] CR2: 0000200000222030 CR3: 0000000043f3a000 CR4: 00000000003526f0 [ 1308.171206][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1308.179194][ C0] DR3: 000000000000000c DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1308.187178][ C0] Call Trace: [ 1308.190456][ C0] [ 1308.193319][ C0] tipc_crypto_xmit+0x1820/0x22c0 [ 1308.198364][ C0] ? __pfx_tipc_crypto_xmit+0x10/0x10 [ 1308.203752][ C0] tipc_bearer_xmit_skb+0x245/0x400 [ 1308.208947][ C0] ? tipc_bearer_xmit_skb+0xa9/0x400 [ 1308.214243][ C0] ? __pfx_tipc_bearer_xmit_skb+0x10/0x10 [ 1308.219967][ C0] tipc_disc_timeout+0x580/0x6d0 [ 1308.224924][ C0] ? __pfx_tipc_disc_timeout+0x10/0x10 [ 1308.230397][ C0] call_timer_fn+0x17b/0x5f0 [ 1308.235009][ C0] ? __pfx_tipc_disc_timeout+0x10/0x10 [ 1308.240469][ C0] ? call_timer_fn+0xbe/0x5f0 [ 1308.245186][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 1308.250337][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1308.255566][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 1308.260778][ C0] ? __pfx_tipc_disc_timeout+0x10/0x10 [ 1308.266269][ C0] __run_timer_base+0x61a/0x860 [ 1308.271129][ C0] ? ktime_get+0x3e/0x1f0 [ 1308.275491][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 1308.280866][ C0] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 1308.287144][ C0] run_timer_softirq+0xb7/0x180 [ 1308.292014][ C0] handle_softirqs+0x286/0x870 [ 1308.296820][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 1308.301600][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 1308.306929][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 1308.312131][ C0] __irq_exit_rcu+0xca/0x1f0 [ 1308.316750][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 1308.321967][ C0] irq_exit_rcu+0x9/0x30 [ 1308.326225][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1308.331882][ C0] [ 1308.334833][ C0] [ 1308.337798][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1308.343805][ C0] RIP: 0010:preempt_schedule_irq+0xb0/0x150 [ 1308.349700][ C0] Code: 24 20 f6 44 24 21 02 74 0c 90 0f 0b 48 f7 03 08 00 00 00 74 64 bf 01 00 00 00 e8 4b 0b 2a f6 e8 a6 1d 61 f6 fb bf 01 00 00 00 1b ab ff ff 48 c7 44 24 40 00 00 00 00 9c 8f 44 24 40 8b 44 24 [ 1308.369335][ C0] RSP: 0018:ffffc9000ca473c0 EFLAGS: 00000282 [ 1308.375428][ C0] RAX: a187d8676c314800 RBX: 0000000000000000 RCX: a187d8676c314800 [ 1308.383417][ C0] RDX: 0000000000000006 RSI: ffffffff8d97cb27 RDI: 0000000000000001 [ 1308.391389][ C0] RBP: ffffc9000ca47460 R08: ffffffff8fa100f7 R09: 1ffffffff1f4201e [ 1308.399383][ C0] R10: dffffc0000000000 R11: fffffbfff1f4201f R12: 0000000000000000 [ 1308.407369][ C0] R13: 0000000000000000 R14: dffffc0000000000 R15: 1ffff92001948e78 [ 1308.415367][ C0] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 1308.421101][ C0] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 1308.423444][ C1] ------------[ cut here ]------------ [ 1308.426941][ C0] irqentry_exit+0x6f/0x90 [ 1308.432362][ C1] refcount_t: saturated; leaking memory. [ 1308.436785][ C0] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1308.443075][ C1] WARNING: CPU: 1 PID: 0 at lib/refcount.c:22 refcount_warn_saturate+0x17d/0x1d0 [ 1308.447889][ C0] RIP: 0010:__cancel_work+0x25e/0x2e0 [ 1308.456994][ C1] Modules linked in: [ 1308.462352][ C0] Code: 27 35 00 90 0f 0b 90 e9 1d ff ff ff e8 0b 27 35 00 e8 46 74 da 09 48 85 db 74 ce e8 fc 26 35 00 fb 48 c7 44 24 20 0e 36 e0 45 <48> 8b 44 24 10 4a c7 04 20 00 00 00 00 65 48 8b 05 2d 7b 11 11 48 [ 1308.466257][ C1] [ 1308.485865][ C0] RSP: 0018:ffffc9000ca47520 EFLAGS: 00000293 [ 1308.488204][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.15.0-syzkaller-12058-g64980441d269 #0 PREEMPT(full) [ 1308.494280][ C0] [ 1308.494289][ C0] RAX: ffffffff818b34d4 RBX: 0000000000000200 RCX: ffff88802e213c00 [ 1308.505560][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1308.507872][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1308.515851][ C1] RIP: 0010:refcount_warn_saturate+0x17d/0x1d0 [ 1308.525904][ C0] RBP: ffffc9000ca475d0 R08: ffffffff8fa100f7 R09: 1ffffffff1f4201e [ 1308.533884][ C1] Code: 8b e8 b7 da c2 fc 90 0f 0b 90 90 e9 74 ff ff ff e8 78 2c ff fc c6 05 df c9 c9 0a 01 90 48 c7 c7 60 38 e2 8b e8 94 da c2 fc 90 <0f> 0b 90 90 e9 51 ff ff ff e8 55 2c ff fc c6 05 c0 c9 c9 0a 01 90 [ 1308.540014][ C0] R10: dffffc0000000000 R11: fffffbfff1f4201f R12: dffffc0000000000 [ 1308.548004][ C1] RSP: 0018:ffffc90000a08828 EFLAGS: 00010246 [ 1308.567610][ C0] R13: 1ffff1100c694c9e R14: 0000000000000000 R15: 001fffffffc00040 [ 1308.575592][ C1] [ 1308.581647][ C0] ? __cancel_work+0x254/0x2e0 [ 1308.589616][ C1] RAX: 57bcd176d4608500 RBX: 0000000000000001 RCX: ffff88801d2cda00 [ 1308.591945][ C0] ? __pfx___cancel_work+0x10/0x10 [ 1308.596711][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 1308.604698][ C0] __cancel_work_sync+0x1f/0x110 [ 1308.609791][ C1] RBP: ffffc90000a089b0 R08: ffffffff8fa100f7 R09: 1ffffffff1f4201e [ 1308.617769][ C0] devl_port_unregister+0x128/0x290 [ 1308.622710][ C1] R10: dffffc0000000000 R11: fffffbfff1f4201f R12: ffff8880317d0000 [ 1308.630676][ C0] __nsim_dev_port_del+0x17b/0x1b0 [ 1308.635880][ C1] R13: dffffc0000000000 R14: ffff8880317d016c R15: ffff888031060800 [ 1308.643873][ C0] nsim_dev_reload_destroy+0x288/0x490 [ 1308.648968][ C1] FS: 0000000000000000(0000) GS:ffff888125d55000(0000) knlGS:0000000000000000 [ 1308.656957][ C0] nsim_dev_reload_down+0x8a/0xc0 [ 1308.662432][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1308.671387][ C0] devlink_reload+0x1b3/0x8d0 [ 1308.676399][ C1] CR2: 00007fd7f1ce7d60 CR3: 00000000346f8000 CR4: 00000000003526f0 [ 1308.682993][ C0] ? xa_get_mark+0x67/0x7b0 [ 1308.687654][ C1] Call Trace: [ 1308.695626][ C0] ? __pfx_devlink_reload+0x10/0x10 [ 1308.700109][ C1] [ 1308.703395][ C0] ? xa_get_mark+0x70f/0x7b0 [ 1308.708580][ C1] tipc_crypto_xmit+0x1820/0x22c0 [ 1308.711436][ C0] devlink_pernet_pre_exit+0x1d9/0x3d0 [ 1308.716058][ C1] ? __pfx_tipc_crypto_xmit+0x10/0x10 [ 1308.721056][ C0] ? __pfx_devlink_pernet_pre_exit+0x10/0x10 [ 1308.726532][ C1] tipc_bearer_xmit_skb+0x245/0x400 [ 1308.726558][ C1] ? tipc_bearer_xmit_skb+0xa9/0x400 [ 1308.726584][ C1] ? __pfx_tipc_bearer_xmit_skb+0x10/0x10 [ 1308.726616][ C1] tipc_disc_timeout+0x580/0x6d0 [ 1308.731991][ C0] ? class_remove_file_ns+0x121/0x160 [ 1308.738003][ C1] ? __pfx_tipc_disc_timeout+0x10/0x10 [ 1308.743196][ C0] ops_undo_list+0x184/0x990 [ 1308.748477][ C1] call_timer_fn+0x17b/0x5f0 [ 1308.754185][ C0] ? __pfx_ops_undo_list+0x10/0x10 [ 1308.759099][ C1] ? __pfx_tipc_disc_timeout+0x10/0x10 [ 1308.764480][ C0] cleanup_net+0x4c5/0x800 [ 1308.769913][ C1] ? call_timer_fn+0xbe/0x5f0 [ 1308.774503][ C0] ? __pfx_cleanup_net+0x10/0x10 [ 1308.779072][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 1308.784186][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1308.789632][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1308.794041][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 1308.798701][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 1308.803636][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 1308.808728][ C1] ? __pfx_tipc_disc_timeout+0x10/0x10 [ 1308.813925][ C0] process_scheduled_works+0xae1/0x17b0 [ 1308.819108][ C1] __run_timer_base+0x61a/0x860 [ 1308.824850][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 1308.830005][ C1] ? ktime_get+0x3e/0x1f0 [ 1308.835739][ C0] worker_thread+0x8a0/0xda0 [ 1308.841183][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 1308.846729][ C0] ? __kthread_parkme+0x7b/0x200 [ 1308.851548][ C1] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 1308.857557][ C0] kthread+0x70e/0x8a0 [ 1308.861883][ C1] run_timer_softirq+0xb7/0x180 [ 1308.866463][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1308.871812][ C1] handle_softirqs+0x286/0x870 [ 1308.876753][ C0] ? __pfx_kthread+0x10/0x10 [ 1308.883006][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 1308.887055][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1308.891890][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 1308.897004][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 1308.901755][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 1308.906334][ C0] ? __pfx_kthread+0x10/0x10 [ 1308.911088][ C1] __irq_exit_rcu+0xca/0x1f0 [ 1308.916296][ C0] ret_from_fork+0x3f9/0x770 [ 1308.921564][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 1308.926762][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1308.931951][ C1] irq_exit_rcu+0x9/0x30 [ 1308.936546][ C0] ? __switch_to_asm+0x39/0x70 [ 1308.941119][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1308.945711][ C0] ? __switch_to_asm+0x33/0x70 [ 1308.950896][ C1] [ 1308.956052][ C0] ? __pfx_kthread+0x10/0x10 [ 1308.960290][ C1] [ 1308.965084][ C0] ret_from_fork_asm+0x1a/0x30 [ 1308.970701][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1308.975481][ C0] [ 1308.978390][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 1308.982989][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1308.983013][ C0] CPU: 0 UID: 0 PID: 22809 Comm: kworker/u8:10 Not tainted 6.15.0-syzkaller-12058-g64980441d269 #0 PREEMPT(full) [ 1308.983041][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1308.983059][ C0] Workqueue: netns cleanup_net [ 1308.983084][ C0] Call Trace: [ 1308.983095][ C0] [ 1308.983105][ C0] dump_stack_lvl+0x99/0x250 [ 1308.983140][ C0] ? __asan_memcpy+0x40/0x70 [ 1308.983171][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1308.983204][ C0] ? __pfx__printk+0x10/0x10 [ 1308.983241][ C0] panic+0x2db/0x790 [ 1308.983279][ C0] ? __pfx_panic+0x10/0x10 [ 1308.983306][ C0] ? show_trace_log_lvl+0x4fb/0x550 [ 1308.983350][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 1308.983378][ C0] __warn+0x31b/0x4b0 [ 1308.983407][ C0] ? refcount_warn_saturate+0xfa/0x1d0 [ 1308.983435][ C0] ? refcount_warn_saturate+0xfa/0x1d0 [ 1308.983458][ C0] report_bug+0x2be/0x4f0 [ 1308.983484][ C0] ? refcount_warn_saturate+0xfa/0x1d0 [ 1308.983508][ C0] ? refcount_warn_saturate+0xfa/0x1d0 [ 1308.983531][ C0] ? refcount_warn_saturate+0xfc/0x1d0 [ 1308.983554][ C0] handle_bug+0x84/0x160 [ 1308.983586][ C0] exc_invalid_op+0x1a/0x50 [ 1308.983617][ C0] asm_exc_invalid_op+0x1a/0x20 [ 1308.983638][ C0] RIP: 0010:refcount_warn_saturate+0xfa/0x1d0 [ 1308.983662][ C0] Code: 00 00 e8 09 2d ff fc 5b 41 5e e9 d1 4a a7 06 cc e8 fb 2c ff fc c6 05 63 ca c9 0a 01 90 48 c7 c7 c0 38 e2 8b e8 17 db c2 fc 90 <0f> 0b 90 90 eb d7 e8 db 2c ff fc c6 05 44 ca c9 0a 01 90 48 c7 c7 [ 1308.983681][ C0] RSP: 0018:ffffc90000007828 EFLAGS: 00010246 [ 1308.983699][ C0] RAX: a187d8676c314800 RBX: 0000000000000002 RCX: ffff88802e213c00 [ 1308.983716][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 1308.983730][ C0] RBP: ffffc900000079b0 R08: 0000000000000003 R09: 0000000000000004 [ 1308.983745][ C0] R10: dffffc0000000000 R11: fffffbfff1bfaa44 R12: ffff8880317d0000 [ 1308.983762][ C0] R13: dffffc0000000000 R14: ffff8880317d016c R15: ffff888055c4d400 [ 1308.983797][ C0] ? refcount_warn_saturate+0xf9/0x1d0 [ 1308.983820][ C0] tipc_crypto_xmit+0x1820/0x22c0 [ 1308.983866][ C0] ? __pfx_tipc_crypto_xmit+0x10/0x10 [ 1308.983903][ C0] tipc_bearer_xmit_skb+0x245/0x400 [ 1308.983933][ C0] ? tipc_bearer_xmit_skb+0xa9/0x400 [ 1308.983962][ C0] ? __pfx_tipc_bearer_xmit_skb+0x10/0x10 [ 1308.984002][ C0] tipc_disc_timeout+0x580/0x6d0 [ 1308.984043][ C0] ? __pfx_tipc_disc_timeout+0x10/0x10 [ 1308.984087][ C0] call_timer_fn+0x17b/0x5f0 [ 1308.984116][ C0] ? __pfx_tipc_disc_timeout+0x10/0x10 [ 1308.984143][ C0] ? call_timer_fn+0xbe/0x5f0 [ 1308.984170][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 1308.984209][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1308.984237][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 1308.984260][ C0] ? __pfx_tipc_disc_timeout+0x10/0x10 [ 1308.984290][ C0] __run_timer_base+0x61a/0x860 [ 1308.984317][ C0] ? ktime_get+0x3e/0x1f0 [ 1308.984352][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 1308.984377][ C0] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 1308.984420][ C0] run_timer_softirq+0xb7/0x180 [ 1308.984449][ C0] handle_softirqs+0x286/0x870 [ 1308.984488][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 1308.984527][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 1308.984565][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 1308.984595][ C0] __irq_exit_rcu+0xca/0x1f0 [ 1308.984627][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 1308.984669][ C0] irq_exit_rcu+0x9/0x30 [ 1308.984697][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1308.984725][ C0] [ 1308.984734][ C0] [ 1308.984743][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1308.984766][ C0] RIP: 0010:preempt_schedule_irq+0xb0/0x150 [ 1308.984794][ C0] Code: 24 20 f6 44 24 21 02 74 0c 90 0f 0b 48 f7 03 08 00 00 00 74 64 bf 01 00 00 00 e8 4b 0b 2a f6 e8 a6 1d 61 f6 fb bf 01 00 00 00 1b ab ff ff 48 c7 44 24 40 00 00 00 00 9c 8f 44 24 40 8b 44 24 [ 1308.984812][ C0] RSP: 0018:ffffc9000ca473c0 EFLAGS: 00000282 [ 1308.984831][ C0] RAX: a187d8676c314800 RBX: 0000000000000000 RCX: a187d8676c314800 [ 1308.984847][ C0] RDX: 0000000000000006 RSI: ffffffff8d97cb27 RDI: 0000000000000001 [ 1308.984862][ C0] RBP: ffffc9000ca47460 R08: ffffffff8fa100f7 R09: 1ffffffff1f4201e [ 1308.984879][ C0] R10: dffffc0000000000 R11: fffffbfff1f4201f R12: 0000000000000000 [ 1308.984894][ C0] R13: 0000000000000000 R14: dffffc0000000000 R15: 1ffff92001948e78 [ 1308.984929][ C0] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 1308.984965][ C0] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 1308.984989][ C0] irqentry_exit+0x6f/0x90 [ 1308.985021][ C0] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1308.985043][ C0] RIP: 0010:__cancel_work+0x25e/0x2e0 [ 1308.985066][ C0] Code: 27 35 00 90 0f 0b 90 e9 1d ff ff ff e8 0b 27 35 00 e8 46 74 da 09 48 85 db 74 ce e8 fc 26 35 00 fb 48 c7 44 24 20 0e 36 e0 45 <48> 8b 44 24 10 4a c7 04 20 00 00 00 00 65 48 8b 05 2d 7b 11 11 48 [ 1308.985085][ C0] RSP: 0018:ffffc9000ca47520 EFLAGS: 00000293 [ 1308.985103][ C0] RAX: ffffffff818b34d4 RBX: 0000000000000200 RCX: ffff88802e213c00 [ 1308.985119][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1308.985132][ C0] RBP: ffffc9000ca475d0 R08: ffffffff8fa100f7 R09: 1ffffffff1f4201e [ 1308.985149][ C0] R10: dffffc0000000000 R11: fffffbfff1f4201f R12: dffffc0000000000 [ 1308.985165][ C0] R13: 1ffff1100c694c9e R14: 0000000000000000 R15: 001fffffffc00040 [ 1308.985189][ C0] ? __cancel_work+0x254/0x2e0 [ 1308.985224][ C0] ? __pfx___cancel_work+0x10/0x10 [ 1308.985258][ C0] __cancel_work_sync+0x1f/0x110 [ 1308.985283][ C0] devl_port_unregister+0x128/0x290 [ 1308.985309][ C0] __nsim_dev_port_del+0x17b/0x1b0 [ 1308.985337][ C0] nsim_dev_reload_destroy+0x288/0x490 [ 1308.985368][ C0] nsim_dev_reload_down+0x8a/0xc0 [ 1308.985395][ C0] devlink_reload+0x1b3/0x8d0 [ 1308.985429][ C0] ? xa_get_mark+0x67/0x7b0 [ 1308.985465][ C0] ? __pfx_devlink_reload+0x10/0x10 [ 1308.985491][ C0] ? xa_get_mark+0x70f/0x7b0 [ 1308.985536][ C0] devlink_pernet_pre_exit+0x1d9/0x3d0 [ 1308.985567][ C0] ? __pfx_devlink_pernet_pre_exit+0x10/0x10 [ 1308.985603][ C0] ? class_remove_file_ns+0x121/0x160 [ 1308.985639][ C0] ops_undo_list+0x184/0x990 [ 1308.985667][ C0] ? __pfx_ops_undo_list+0x10/0x10 [ 1308.985693][ C0] cleanup_net+0x4c5/0x800 [ 1308.985718][ C0] ? __pfx_cleanup_net+0x10/0x10 [ 1308.985742][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1308.985766][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 1308.985798][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 1308.985833][ C0] process_scheduled_works+0xae1/0x17b0 [ 1308.985895][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 1309.640488][ C0] worker_thread+0x8a0/0xda0 [ 1309.645105][ C0] ? __kthread_parkme+0x7b/0x200 [ 1309.650048][ C0] kthread+0x70e/0x8a0 [ 1309.654122][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1309.659235][ C0] ? __pfx_kthread+0x10/0x10 [ 1309.663841][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1309.669056][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 1309.674258][ C0] ? __pfx_kthread+0x10/0x10 [ 1309.678853][ C0] ret_from_fork+0x3f9/0x770 [ 1309.683450][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1309.688578][ C0] ? __switch_to_asm+0x39/0x70 [ 1309.693365][ C0] ? __switch_to_asm+0x33/0x70 [ 1309.698126][ C0] ? __pfx_kthread+0x10/0x10 [ 1309.702722][ C0] ret_from_fork_asm+0x1a/0x30 [ 1309.707497][ C0] [ 1309.710825][ C0] Kernel Offset: disabled [ 1309.715164][ C0] Rebooting in 86400 seconds..