last executing test programs: 23m17.054112748s ago: executing program 1 (id=1630): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=ANY=[@ANYBLOB="940100001e00ff0225bd700000000000010000007c0106"], 0x194}, 0x1, 0x0, 0x0, 0x81}, 0x4004000) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x84, r2, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x69}, @IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x33}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x73}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}]}, 0x84}}, 0x40000) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0xc0, &(0x7f0000000300)={0xa, 0x4e20, 0x800, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) syz_emit_ethernet(0x32, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x2, 0x9c, 0x0, @val=0x80}}}}}}}, 0x0) 23m16.549694248s ago: executing program 1 (id=1633): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12014101f2c59620d016b8108ede0102030109022400010000100009040002020083ec0009050602000202000a09058202"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e23, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfc}}, 0x40009}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac95ab194f93f8e795a9b29420fa62d", 0x11}], 0x1}}], 0x1, 0x24088000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) syz_emit_ethernet(0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="bbbbbb"], 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f00000000c0), 0x2, 0x2200) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) write$binfmt_misc(r2, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) syz_usb_control_io(r0, 0x0, &(0x7f00000005c0)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB='@\t\f'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = semget$private(0x0, 0x6, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) ioctl$IOMMU_IOAS_COPY$syz(r4, 0x3b83, &(0x7f0000000100)={0x28, 0x10004, 0x0, 0x0, 0x266525, 0x3d7, 0x1, 0x244f2e}) semtimedop(r3, &(0x7f0000000380)=[{0x2, 0xf, 0x1000}], 0x1, 0x0) semctl$SETVAL(r3, 0x2, 0x10, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000140)=ANY=[@ANYBLOB="200f28"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 23m13.416737378s ago: executing program 1 (id=1648): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0xf, 0x7ffffffe}]}) timerfd_create(0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc}) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = socket$kcm(0x11, 0x2, 0x300) recvmsg$kcm(r4, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r5) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r6) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40000c0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c0001800600010000d28d1ff5fa40c57e0000000000000714000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x4000811}, 0x40) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r9 = dup(r8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000007800010000000000000000000700"], 0x24}}, 0x0) r10 = socket(0x10, 0x3, 0x0) sendmmsg(r10, &(0x7f0000000000), 0x400000000000235, 0x0) setsockopt$inet_sctp_SCTP_MAXSEG(r9, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0, 0x2}, 0x8) 23m11.327730366s ago: executing program 1 (id=1659): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0) open_tree(r0, &(0x7f0000000640)='\x00', 0x89901) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000000000010711e0920000000000001090224000100000000090400090103000100092105000001220500090581030002"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) r3 = syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x0) read$hidraw(r3, &(0x7f0000002340)=""/147, 0x93) syz_usb_ep_write(r2, 0x81, 0x94, &(0x7f0000000180)="ae0b95c5e7b30f50dbbe32a6f11613e7c7ab553cffbb4fa77bcd37985b6cc94c0dbbd8b9444662dffaed92d26344232f2b5821bb47cb7a407aa055542973f6fb46fee77ac1704cbb20c745dac4000000000000000000000000000000036316e221534351a0087eecaf4e68b68109f81c6c34968793f1670cdcbdac6ed525dcc70da307cc38fffdd18cea7d34659f91d53971d092") 23m9.09020997s ago: executing program 1 (id=1668): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) madvise(&(0x7f0000416000/0xf000)=nil, 0xf000, 0x14) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xfffe, 0x2, &(0x7f0000006680)) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x24080, 0x0) mmap(&(0x7f0000519000/0x4000)=nil, 0x4000, 0x2, 0x8031, r1, 0x0) ptrace$ARCH_MAP_VDSO_X32(0x1e, r0, 0x12, 0x2001) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) write$eventfd(0xffffffffffffffff, &(0x7f0000000080)=0xffffffff00000000, 0x8) r2 = syz_open_procfs(r0, &(0x7f0000000000)='ns\x00') fchdir(r2) openat$cgroup_ro(r2, &(0x7f0000000180)='cpuset.memory_pressure\x00', 0x275a, 0x0) read$eventfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) sched_getscheduler(r0) syz_usb_connect(0x4, 0x52, &(0x7f00000002c0)=ANY=[], 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000040)=@req={0xa29c, 0x3, 0x67f, 0x40}, 0x10) sendto$packet(r3, 0x0, 0x0, 0x4094, &(0x7f0000000200)={0x11, 0x3, 0x0, 0x1, 0xff, 0x6, @multicast}, 0x14) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x600, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000240)="5c00000014006b03c84e21008bf32c19021800f8021e6182949a36c23d3b48dfd8cd6e56066d4144911e1ede3bc9f4d4938037e786a6d0bdd77f6f60c1504bb918", 0x41}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) ioctl$SNDCTL_SEQ_CTRLRATE(r4, 0xc0045103, &(0x7f00000000c0)) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x3) ioctl$TCFLSH(r6, 0x80047437, 0x10004000000006) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)}, 0x0) 23m8.754361947s ago: executing program 1 (id=1670): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) unshare(0x20000400) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmmsg$unix(r1, &(0x7f0000010400)=[{{&(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000100)=[{&(0x7f0000000280)="83181d2e7518c86dc44acc5b0f4024f8b22efdaed75a34d6fdb4fdde0837a6de39874e4ba0b57c75114165b77e7776d8f120eae2aa262ee818902b5c485ae3c64a18d0fc73567dcf368790844309ba9b605c9fa0f75b0ada929c34fcac851f752ef3e0728d17094ff5b19b8fb172241259cde0758a02edf9752de736df7f862fd83851524f3a9ae505cd78b391a165bbafb7d3618f5f3c0068ccdbb6a8545c942734b2649cc17ede7d704ff179bfbd1fe7e0a6c3a65e7e2c5c574f281c5dba1757864711af", 0xc5}, {&(0x7f0000000380)="ef88f1f10c1b5580806e287d5e01173509a8719c587be41f487c5cdb796db97a56c2327815afc18cb15aa714fc9e2f334c625dc80bd3467fbf7dc9afd238dcface5cde957a3694b5f5601539166168db5efc96f6f29a97ee2207447b0f3988ab01a17f89f542076ba2a60e9552ae1e10f03c7c20fc2707cbb0e4f302ce83957f40e4fac041baa14e1cfe1738da952ea9cd4010f30c075ea20a399f7b", 0x9c}, {&(0x7f0000000680)="6df4007a1c3af5fed6d5127601b9d23dffc98ee491bb8fbaadacc4931a658d31978cab995664ddbe044c486c6db96d93cf37c3a7c7977bc79ec26b613554ce8080047243cc8ef12472ae18c923affa501de0788a657ec94fe1a1f5e485553877d31536987eb0a5e7e6b17c090f3ce592ef330a2f42e4eaad1e94924838d748d77d85dabc7117ec07733aa7fd46172bac41bf2c901f93ddc7c9e53621b8217b36036ada35491da67cdaf13766baeaff89b88c0bea23a457dd2eeba09541c138a7b91aa63edb0fc9f3607429f89ea6c9525e4729c63e", 0xd5}, {&(0x7f0000000780)="c7ff9c6389f37e69021f05be300e5113893c5a0dcdc9724e10ea2f16c8c94b802566392c8c50a303f3f3999c203430ff10d107e776d59f4ad321f1df8253e0d4385d245e17b736474f412e4562083268acce97a63e4093754927b707e1b148a3091d1d45e0c3373dca57c747ebd1521728fb610c59905fa8131c396ff051ae6652658e8a563bb94946cf7b083cd8a2dba8ae816a6e874331ed00fc6c78fe36d5bf1f02ce594ad7cb98bcabbdc1e349a55cd668f4d89713483f4a609164c674812ea7ec0b990795092ab10f1d0ade50fdafaa8bf9", 0xd4}], 0x4, &(0x7f0000000f00)=[@rights={{0x18, 0x1, 0x1, [r2, r0]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [r0, 0xffffffffffffffff, r1]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [r2, r1]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff, 0xffffffffffffffff}}}, @rights={{0x18, 0x1, 0x1, [r1, r0]}}], 0x108, 0x4040802}}, {{&(0x7f0000008740)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000008a40)=[{&(0x7f00000087c0)="648d77f9563734cc56598d404fcdf2a4fa7932d712345fc956289f385239c18eff7681ab23841c4fc7e37ee4eade4868ca3f29095ad4068b99bbb488dfe491f0294663a8f1266f7de6ca5f925c1716574bc3cfa2d7749d9022fc8f5c5a8cd19c75dcf25442", 0x65}, {&(0x7f0000008840)="b06e675ca91d79fe7b30edbeab1b68f3c5819d6bf227bb6e6ec32e09b8ae468168b53c373b7d4cad3eebfa2af3a0edd4f5f4b0874dcb0b6437ae90206e2c874a15b0b3765c876e049268841cb09d9058c29b9d3cd9121900f1198bad6ed65d8182f661d8344ceff513d7124952ee53e48ab74035345eb18b6f5ff8b39a946f06f16b71ed3f5d48f7dcc26146bbf255a59b347b5826ee4ba1f3", 0x99}, {&(0x7f0000008900)="c42e1886e2bc95a2b3b0394fa535ce261705217a47dfd812c98c9487af2f8b439fa40f3ea2d2746ecb2eb9ddbe6e4d64a894525097903542fcd74534a18bd994aef48b12a8f4", 0x46}, {&(0x7f0000008980)="338d71e9ce41228d1094bdb970d28cfa30cd55119f8e4e291ddc1e257e43cb421bec4dbad8fc0ce64bab56528f6c94d11121193dbc5edb896682682f499b2925a6e5816e3611df01efcbc00171cef060f8856b7d18de404c40ca40fd0a09a35703043e257e6409de9d9d1104e569276e8b3a3f9814394c847d1671fce32066de4d28cf79ffbfd29b0d83", 0x8a}], 0x4, 0x0, 0x0, 0x20008000}}, {{&(0x7f0000008a80)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000008b40), 0x0, &(0x7f0000008b80)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [r1, r1]}}], 0x58}}, {{&(0x7f0000008c00)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000008d00)=[{&(0x7f0000008c80)='*\aw', 0x3}, {&(0x7f0000008cc0)="4dbbb6b4ead1ec3c8c67643028a07a1b18d2a71df8364e7f6c411244e889b67085d3e467ec70dcf2994e138d9abc97", 0x2f}], 0x2, &(0x7f0000008e40)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r0, r2, r2, r0]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [r1, 0xffffffffffffffff, r0, r0, r1, 0xffffffffffffffff, r2, 0xffffffffffffffff, r1, 0xffffffffffffffff]}}], 0x130, 0xc4}}, {{&(0x7f00000100c0)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000010140), 0x0, 0x0, 0x0, 0x10008884}}, {{&(0x7f0000010180)=@file={0x1, './file0/file0\x00'}, 0x6e, &(0x7f0000010300)=[{&(0x7f0000010200)="41082d337c03085eec84bab72e15b656b97d62165d6abe2399a6c0b8d3138a997a662990b366ebf15398c169582723c44c2177a05d6a6b865c2c1eaddf9b152c44b91e5fbad33f6123c972c2cdc187dd915d78360fb9ba3c114a9f67b0cf98a8dacb71c0a5c988b6e63ee098802b7d0ff682aada7e98d4f0bd1d2ef884875e2f6689340e4d1d248bf9498ca01358182844685ae382951dc604150421568d6de4b0b959c81f45a06e3adb46cfbb18500fa215069a77373e7cb02f17698652459317dd2f6dc4f4e39395ea760c41981c36b5f5b6f5a483bb00b3b3d38398", 0xdd}], 0x1, &(0x7f0000010380)=[@rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x50, 0x800}}], 0x6, 0x0) recvmmsg(r0, &(0x7f0000006580)=[{{&(0x7f0000000480)=@nfc, 0x80, &(0x7f0000002e40)=[{&(0x7f0000000c80)=""/142, 0x8e}, {&(0x7f0000002fc0)=""/129, 0x81}, {&(0x7f00000043c0)=""/190, 0xbe}, {&(0x7f0000000dc0)=""/69, 0x45}, {&(0x7f0000003140)=""/237, 0xed}], 0x5, &(0x7f0000000500)=""/4, 0x4}, 0x8}, {{&(0x7f0000003240)=@l2tp={0x2, 0x0, @initdev}, 0x80, &(0x7f0000005500)=[{&(0x7f00000032c0)=""/4096, 0x1000}, {&(0x7f0000003080)=""/162, 0xa2}, {&(0x7f0000006600)=""/243, 0xf3}, {&(0x7f0000004380)=""/61, 0x3d}, {&(0x7f0000004480)=""/4096, 0x1000}, {&(0x7f0000005480)=""/69, 0x45}], 0x6, &(0x7f0000005580)=""/4096, 0x1000}, 0x101}], 0x2, 0x22, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) openat$rdma_cm(0xffffff9c, 0x0, 0x2, 0x0) socket$inet6(0xa, 0x1, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, 0x0) socket$isdn(0x22, 0x3, 0x26) ioctl$sock_ifreq(r1, 0x8937, &(0x7f0000000040)={'netpci0\x00', @ifru_ivalue=0x8000}) unshare(0x4020400) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) unshare(0x2c020400) socket$packet(0x11, 0x3, 0x300) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x0, 0x8110}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x40}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)=ANY=[@ANYBLOB="1800e2ff1300080029bd7000fddbdf25ea3729ff", @ANYRES32=0x0], 0x18}}, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r7, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) bind$inet6(r7, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x47, &(0x7f0000000d40)={@link_local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010700", 0x11, 0x11, 0x0, @private1, @mcast2, {[], {0x0, 0xe22, 0x11, 0x0, @gue={{0x2}, 'J'}}}}}}}, 0x0) 23m7.998469324s ago: executing program 32 (id=1670): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) unshare(0x20000400) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmmsg$unix(r1, &(0x7f0000010400)=[{{&(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000100)=[{&(0x7f0000000280)="83181d2e7518c86dc44acc5b0f4024f8b22efdaed75a34d6fdb4fdde0837a6de39874e4ba0b57c75114165b77e7776d8f120eae2aa262ee818902b5c485ae3c64a18d0fc73567dcf368790844309ba9b605c9fa0f75b0ada929c34fcac851f752ef3e0728d17094ff5b19b8fb172241259cde0758a02edf9752de736df7f862fd83851524f3a9ae505cd78b391a165bbafb7d3618f5f3c0068ccdbb6a8545c942734b2649cc17ede7d704ff179bfbd1fe7e0a6c3a65e7e2c5c574f281c5dba1757864711af", 0xc5}, {&(0x7f0000000380)="ef88f1f10c1b5580806e287d5e01173509a8719c587be41f487c5cdb796db97a56c2327815afc18cb15aa714fc9e2f334c625dc80bd3467fbf7dc9afd238dcface5cde957a3694b5f5601539166168db5efc96f6f29a97ee2207447b0f3988ab01a17f89f542076ba2a60e9552ae1e10f03c7c20fc2707cbb0e4f302ce83957f40e4fac041baa14e1cfe1738da952ea9cd4010f30c075ea20a399f7b", 0x9c}, {&(0x7f0000000680)="6df4007a1c3af5fed6d5127601b9d23dffc98ee491bb8fbaadacc4931a658d31978cab995664ddbe044c486c6db96d93cf37c3a7c7977bc79ec26b613554ce8080047243cc8ef12472ae18c923affa501de0788a657ec94fe1a1f5e485553877d31536987eb0a5e7e6b17c090f3ce592ef330a2f42e4eaad1e94924838d748d77d85dabc7117ec07733aa7fd46172bac41bf2c901f93ddc7c9e53621b8217b36036ada35491da67cdaf13766baeaff89b88c0bea23a457dd2eeba09541c138a7b91aa63edb0fc9f3607429f89ea6c9525e4729c63e", 0xd5}, {&(0x7f0000000780)="c7ff9c6389f37e69021f05be300e5113893c5a0dcdc9724e10ea2f16c8c94b802566392c8c50a303f3f3999c203430ff10d107e776d59f4ad321f1df8253e0d4385d245e17b736474f412e4562083268acce97a63e4093754927b707e1b148a3091d1d45e0c3373dca57c747ebd1521728fb610c59905fa8131c396ff051ae6652658e8a563bb94946cf7b083cd8a2dba8ae816a6e874331ed00fc6c78fe36d5bf1f02ce594ad7cb98bcabbdc1e349a55cd668f4d89713483f4a609164c674812ea7ec0b990795092ab10f1d0ade50fdafaa8bf9", 0xd4}], 0x4, &(0x7f0000000f00)=[@rights={{0x18, 0x1, 0x1, [r2, r0]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [r0, 0xffffffffffffffff, r1]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [r2, r1]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff, 0xffffffffffffffff}}}, @rights={{0x18, 0x1, 0x1, [r1, r0]}}], 0x108, 0x4040802}}, {{&(0x7f0000008740)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000008a40)=[{&(0x7f00000087c0)="648d77f9563734cc56598d404fcdf2a4fa7932d712345fc956289f385239c18eff7681ab23841c4fc7e37ee4eade4868ca3f29095ad4068b99bbb488dfe491f0294663a8f1266f7de6ca5f925c1716574bc3cfa2d7749d9022fc8f5c5a8cd19c75dcf25442", 0x65}, {&(0x7f0000008840)="b06e675ca91d79fe7b30edbeab1b68f3c5819d6bf227bb6e6ec32e09b8ae468168b53c373b7d4cad3eebfa2af3a0edd4f5f4b0874dcb0b6437ae90206e2c874a15b0b3765c876e049268841cb09d9058c29b9d3cd9121900f1198bad6ed65d8182f661d8344ceff513d7124952ee53e48ab74035345eb18b6f5ff8b39a946f06f16b71ed3f5d48f7dcc26146bbf255a59b347b5826ee4ba1f3", 0x99}, {&(0x7f0000008900)="c42e1886e2bc95a2b3b0394fa535ce261705217a47dfd812c98c9487af2f8b439fa40f3ea2d2746ecb2eb9ddbe6e4d64a894525097903542fcd74534a18bd994aef48b12a8f4", 0x46}, {&(0x7f0000008980)="338d71e9ce41228d1094bdb970d28cfa30cd55119f8e4e291ddc1e257e43cb421bec4dbad8fc0ce64bab56528f6c94d11121193dbc5edb896682682f499b2925a6e5816e3611df01efcbc00171cef060f8856b7d18de404c40ca40fd0a09a35703043e257e6409de9d9d1104e569276e8b3a3f9814394c847d1671fce32066de4d28cf79ffbfd29b0d83", 0x8a}], 0x4, 0x0, 0x0, 0x20008000}}, {{&(0x7f0000008a80)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000008b40), 0x0, &(0x7f0000008b80)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [r1, r1]}}], 0x58}}, {{&(0x7f0000008c00)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000008d00)=[{&(0x7f0000008c80)='*\aw', 0x3}, {&(0x7f0000008cc0)="4dbbb6b4ead1ec3c8c67643028a07a1b18d2a71df8364e7f6c411244e889b67085d3e467ec70dcf2994e138d9abc97", 0x2f}], 0x2, &(0x7f0000008e40)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r0, r2, r2, r0]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [r1, 0xffffffffffffffff, r0, r0, r1, 0xffffffffffffffff, r2, 0xffffffffffffffff, r1, 0xffffffffffffffff]}}], 0x130, 0xc4}}, {{&(0x7f00000100c0)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000010140), 0x0, 0x0, 0x0, 0x10008884}}, {{&(0x7f0000010180)=@file={0x1, './file0/file0\x00'}, 0x6e, &(0x7f0000010300)=[{&(0x7f0000010200)="41082d337c03085eec84bab72e15b656b97d62165d6abe2399a6c0b8d3138a997a662990b366ebf15398c169582723c44c2177a05d6a6b865c2c1eaddf9b152c44b91e5fbad33f6123c972c2cdc187dd915d78360fb9ba3c114a9f67b0cf98a8dacb71c0a5c988b6e63ee098802b7d0ff682aada7e98d4f0bd1d2ef884875e2f6689340e4d1d248bf9498ca01358182844685ae382951dc604150421568d6de4b0b959c81f45a06e3adb46cfbb18500fa215069a77373e7cb02f17698652459317dd2f6dc4f4e39395ea760c41981c36b5f5b6f5a483bb00b3b3d38398", 0xdd}], 0x1, &(0x7f0000010380)=[@rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x50, 0x800}}], 0x6, 0x0) recvmmsg(r0, &(0x7f0000006580)=[{{&(0x7f0000000480)=@nfc, 0x80, &(0x7f0000002e40)=[{&(0x7f0000000c80)=""/142, 0x8e}, {&(0x7f0000002fc0)=""/129, 0x81}, {&(0x7f00000043c0)=""/190, 0xbe}, {&(0x7f0000000dc0)=""/69, 0x45}, {&(0x7f0000003140)=""/237, 0xed}], 0x5, &(0x7f0000000500)=""/4, 0x4}, 0x8}, {{&(0x7f0000003240)=@l2tp={0x2, 0x0, @initdev}, 0x80, &(0x7f0000005500)=[{&(0x7f00000032c0)=""/4096, 0x1000}, {&(0x7f0000003080)=""/162, 0xa2}, {&(0x7f0000006600)=""/243, 0xf3}, {&(0x7f0000004380)=""/61, 0x3d}, {&(0x7f0000004480)=""/4096, 0x1000}, {&(0x7f0000005480)=""/69, 0x45}], 0x6, &(0x7f0000005580)=""/4096, 0x1000}, 0x101}], 0x2, 0x22, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) openat$rdma_cm(0xffffff9c, 0x0, 0x2, 0x0) socket$inet6(0xa, 0x1, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, 0x0) socket$isdn(0x22, 0x3, 0x26) ioctl$sock_ifreq(r1, 0x8937, &(0x7f0000000040)={'netpci0\x00', @ifru_ivalue=0x8000}) unshare(0x4020400) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) unshare(0x2c020400) socket$packet(0x11, 0x3, 0x300) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x0, 0x8110}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x40}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)=ANY=[@ANYBLOB="1800e2ff1300080029bd7000fddbdf25ea3729ff", @ANYRES32=0x0], 0x18}}, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r7, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) bind$inet6(r7, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x47, &(0x7f0000000d40)={@link_local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010700", 0x11, 0x11, 0x0, @private1, @mcast2, {[], {0x0, 0xe22, 0x11, 0x0, @gue={{0x2}, 'J'}}}}}}}, 0x0) 15m24.848309286s ago: executing program 5 (id=3301): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe4000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f00000000c0)="3b76210fb6150f209e440f20c0663503000000440f22c00fa2660fc7b2d42af30fa7d0440f20c066350d000000440f22c06767f2caab12bad004ec", 0x3b}], 0x1, 0xd, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r3, 0x4020aed2, &(0x7f0000000080)={0x10000, 0x14000, 0x8}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000240)={[0x10583a, 0x5, 0xa, 0x4000000000, 0x6, 0x2, 0x1041, 0x4, 0x7, 0x8000000000000000, 0xfffffffffffffffe, 0xffffffff, 0x1, 0x9, 0xbe3, 0x6a], 0xeeee8000, 0x1000d6}) ioctl$KVM_RUN(r4, 0xae80, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c000000100005ff2abd7000000000000000004a", @ANYRES32=0x0, @ANYBLOB="942a000004000600140012800937010076657468000000000400028008001300", @ANYRES32, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x24008080) 15m22.665748062s ago: executing program 5 (id=3306): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040de2842110000000000010902240001000000000904000001030000000921000000012205000905810300"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) r5 = syz_clone(0x111, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$setsig(0x4203, r5, 0xfffffffffffffff8, &(0x7f0000000140)={0x1b, 0x7, 0x80}) syz_usb_control_io(r4, &(0x7f00000001c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000085000000854e"], 0x0, 0x0, 0x0, 0x0}, 0x0) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f00000001c0)={0x5813}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000980)={@multicast, @local, @void, {@ipv6={0x86dd, @dccp_packet={0x8, 0x6, "4ed2ff", 0x10, 0x21, 0x0, @loopback, @local, {[], {{0x4e20, 0x4e20, 0x4, 0x1, 0x6, 0x0, 0x0, 0x3, 0x3, "7f0066", 0x14, "398731"}}}}}}}, 0x0) r7 = syz_open_dev$hidraw(&(0x7f0000000000), 0x15e, 0x800) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r8, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000080)={r9, 0x0, 0x8, 0x401, 0x4, 0x8001}, 0x14) r10 = eventfd2(0x0, 0x80800) r11 = epoll_create(0x6) epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r10, &(0x7f0000000100)={0x10000015}) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x1, 0x0, 0x10}, @l2cap_cid_signaling={{0xc}, [@l2cap_conn_rsp={{0x3, 0x8, 0x8}, {0x8, 0x4, 0x7fff, 0x6}}]}}, 0x15) r12 = syz_open_dev$vbi(&(0x7f0000000080), 0x2, 0x2) ioctl$VIDIOC_G_SLICED_VBI_CAP(r12, 0xc0745645, &(0x7f00000000c0)={0x80, [0x1ff, 0xfe, 0x6dc, 0x1b, 0x9, 0x8, 0xffff, 0x1, 0x2, 0x3, 0x7, 0x10, 0x1000, 0x57, 0x6, 0xa, 0xfff7, 0x3, 0xb53, 0x4, 0x7, 0x0, 0x200, 0x64d, 0xffff, 0x1, 0x5, 0xb, 0xd4, 0x759b, 0x14, 0x2c, 0x9, 0x10, 0xfff, 0x6, 0xf, 0xfc, 0x9, 0x3ff, 0x2, 0x3, 0x1, 0x2, 0x9, 0x8007, 0x6, 0x1491], 0x6}) ioctl$HIDIOCGFEATURE(r7, 0xc0404807, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x401, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1220}}, 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0], 0x50}}, 0x0) 15m20.236622424s ago: executing program 5 (id=3314): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) open_by_handle_at(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="150000"], 0x70003) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x48) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x408001, 0x0, 0xa, 0x0, 0xfffffe0000000001, 0x0, 0xffffffff}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c40)={{0x14}, [@NFT_MSG_NEWRULE={0x27c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x23c, 0x4, 0x0, 0x1, [{0x238, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x228, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_INFO={0x213, 0x3, "d67a8527f76ec1d39e537c4c3060c6a405106c72848aa8bcb429b3a20d532452032d5f166334739d1719a5778bd4f724ee4ca57f2527aeeb0c75755d68fc6fa55f4825682ee95e581039823e5963beedcf65b8b005623d90772b8b6ebd2498b0aff725a3eabb6c99cb2edfe10b9c33be8a971e08401bc0807e75a2ff376b7934473bc1f02bb512b77414daf260c9c7d4e1f0758b56ec5823892af310e6252fcfb1d9dbaddefdaa26f43f12f831fd221926d6536eeff641db46920ae0e48f3ff5de599714ba6510ce479d4116a519792281736f39c9fc0e10ef557392c43389271cebcf36543fcf6f83bf74b93ee4eb5e8c82e35bb4784cc1ed0ad291b16e8368487589f7590bf5896f340a36555a1cf69736da230a809176dbdfba3d47efb9a6932e5503d277532b7d4e6f7c7373a298e5843a9f74d5fd07fbc6ad22bc644ba9b3c94ec3c8f0b9321b16e5826b1f058f781760a5d4b6a8880202b41689139c37cd51f65a92d883f8901add03b650c9ec182fb565a4d657ebba9d6a5eb426b22d5933b72362e6ec327fb679aa8034b8b3b6680ad138be47652a3e77981187d2921cebfc1639aa280e3d38dba9b1af49ceded79c78a2d656b3a3e946e17e6257def6679f70f11aa01a2d906aecf4dbc7d1a332a8932ed719ce7eecb5450f494f944b3f6b637502ddba609c6e45dcfad1db7c7dda3e2c755ddcf27132985442e9b8df16f96c82e72e3e2491856d07756b"}, @NFTA_MATCH_NAME={0x8, 0x1, 'bpf\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x88fb}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}]}], {0x14}}, 0x2a4}}, 0x4048010) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x14, 0x6000, @fd, 0x0, 0x20000003, 0x8020, 0x0, 0x1, {0x2}}) r7 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r7, 0x5393, &(0x7f0000000000)) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) prctl$PR_CAP_AMBIENT(0x2f, 0x1, 0x2) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x14, r8, 0x1, 0x0, 0x0, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x8) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r5) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r9, 0x8923, &(0x7f0000000000)={'veth0_vlan\x00', @random="0134014010ff"}) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r5, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x1040) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'sit0\x00', 0x4}, 0x18) 15m17.069747419s ago: executing program 5 (id=3325): r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x939, 0x40003) socket$netlink(0x10, 0x3, 0x8000000004) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x44000, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080), 0x0) ioctl$USBDEVFS_GETDRIVER(r0, 0x41045508, &(0x7f0000000280)={0x8, "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"}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x130, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x4, 0xf}, {}, {0x7, 0xd}}, [@filter_kind_options=@f_u32={{0x8}, {0x104, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0x1, 0xa}}, @TCA_U32_POLICE={0xc, 0x6, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x9}]}, @TCA_U32_FLAGS={0x8, 0xb, 0x3}, @TCA_U32_MARK={0x10, 0xa, {0x8, 0x8}}, @TCA_U32_HASH={0x8, 0x2, 0xa8}, @TCA_U32_SEL={0xc4, 0x5, {0x7, 0xc, 0xff, 0x3, 0x3, 0x0, 0x9a, 0x4, [{0x4, 0xfff, 0x7, 0x1}, {0x8, 0x1578, 0x9, 0x8}, {0x5, 0x3, 0x0, 0x1}, {0xf, 0x3, 0x4}, {0x6e54, 0x4, 0xb, 0xffffde55}, {0x2, 0x8, 0x0, 0x4}, {0x1ff, 0x4c, 0xd, 0x3}, {0x6, 0x3, 0x2ae, 0x69}, {0x3, 0x853, 0x811f, 0x7e5}, {0x5, 0x7, 0x6, 0x40}, {0x8, 0x0, 0x6, 0x9}]}}, @TCA_U32_FLAGS={0x8}]}}]}, 0x130}, 0x1, 0x0, 0x0, 0x10}, 0x48804) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {}, {0x6, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_LOW_RATE_THRESHOLD={0xfffffffffffffeb7, 0xb, 0x3}, @TCA_FQ_RATE_ENABLE={0x8}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x28000}, 0x0) 15m15.770692606s ago: executing program 5 (id=3327): r0 = syz_open_dev$sndpcmc(&(0x7f0000000180), 0x0, 0x0) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x100000, 0x0) ioctl$TIOCSWINSZ(r1, 0x5414, &(0x7f0000000080)={0x800, 0x9, 0x2, 0xcd}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000100)={r3, 0x6}, 0x8) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r0, 0xc2604110, &(0x7f00000001c0)={0x0, [[0xffffffff, 0x0, 0x1, 0x8, 0x0, 0x6804, 0x0, 0xffffffff], [0x800004, 0x100001], [0x91, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1000]], '\x00', [{0xfffffffc, 0xfffffffe}, {}, {}, {0x9}, {}, {}, {}, {}, {}, {0x0, 0x4}, {0x200}], '\x00', 0x301}) socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0x3b}, 0x5a) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000180)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x45, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaae130aeaaba3086dd606410a6000f040000000000000000000000ffffffffffffcdbf4100000018f724b0cd4eb926ff020000000000000000000000000001223427d5c9a46b9fa14172170a0135"], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x6, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0x2c020400) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$wireguard(&(0x7f00000005c0), r8) sendmsg$WG_CMD_SET_DEVICE(r8, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r9, @ANYBLOB="01000000000000000000010000000800050001000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5420800050000000000900008808c00008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c640009801c000080060001000200000008000200ffffffff05000300030000001c000080060001000200000008000200ac141427050003"], 0xec}, 0x1, 0x0, 0x0, 0x4084}, 0x80) connect$l2tp6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x2, @dev={0xfe, 0x80, '\x00', 0x38}, 0xf, 0x4}, 0x20) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103000000001c0000000a"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r10, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r10, 0x84, 0x10, &(0x7f0000000240)=@sack_info={r11, 0x2}, &(0x7f0000000280)=0xffa6) 15m14.453751136s ago: executing program 5 (id=3328): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000001c0)={{0xffffffff, 0x41000, 0x10, 0x7, 0xf7, 0x5, 0x3d, 0x29, 0x0, 0x2e, 0x19}, {0xd000, 0x1, 0xc, 0x0, 0x40, 0x5, 0x7d, 0x8, 0x58, 0x3, 0x3, 0x1}, {0xa000, 0x3000, 0x10, 0x9, 0x3, 0x7, 0xfe, 0x9, 0x1, 0xa8, 0x5, 0x81}, {0x58000, 0x26000, 0x9, 0x5d, 0x4, 0x42, 0x9, 0xff, 0x3, 0x6, 0xe}, {0xdddd0000, 0x9000, 0x8, 0x3, 0x7, 0xb, 0x9, 0x7f, 0x9e, 0x83, 0xf7, 0x83}, {0x1000, 0x10000, 0x0, 0xa0, 0xb1, 0x8, 0x0, 0xa0, 0x80, 0xf, 0x1, 0xfd}, {0x10000, 0x2, 0x8, 0x0, 0x6, 0x2, 0xb, 0x0, 0x5, 0x81, 0xff, 0x70}, {0x0, 0x1000, 0xe, 0x5, 0xf, 0x7, 0x1, 0x18, 0x2, 0x3, 0x7, 0x9}, {0x4000, 0x30}, {0x4000, 0x86}, 0x80000031, 0x0, 0x50000, 0x242120, 0xb, 0x0, 0xa000, [0xc3, 0x3, 0x5a, 0x100]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b"], 0x0) 15m13.331741161s ago: executing program 33 (id=3328): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000001c0)={{0xffffffff, 0x41000, 0x10, 0x7, 0xf7, 0x5, 0x3d, 0x29, 0x0, 0x2e, 0x19}, {0xd000, 0x1, 0xc, 0x0, 0x40, 0x5, 0x7d, 0x8, 0x58, 0x3, 0x3, 0x1}, {0xa000, 0x3000, 0x10, 0x9, 0x3, 0x7, 0xfe, 0x9, 0x1, 0xa8, 0x5, 0x81}, {0x58000, 0x26000, 0x9, 0x5d, 0x4, 0x42, 0x9, 0xff, 0x3, 0x6, 0xe}, {0xdddd0000, 0x9000, 0x8, 0x3, 0x7, 0xb, 0x9, 0x7f, 0x9e, 0x83, 0xf7, 0x83}, {0x1000, 0x10000, 0x0, 0xa0, 0xb1, 0x8, 0x0, 0xa0, 0x80, 0xf, 0x1, 0xfd}, {0x10000, 0x2, 0x8, 0x0, 0x6, 0x2, 0xb, 0x0, 0x5, 0x81, 0xff, 0x70}, {0x0, 0x1000, 0xe, 0x5, 0xf, 0x7, 0x1, 0x18, 0x2, 0x3, 0x7, 0x9}, {0x4000, 0x30}, {0x4000, 0x86}, 0x80000031, 0x0, 0x50000, 0x242120, 0xb, 0x0, 0xa000, [0xc3, 0x3, 0x5a, 0x100]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b"], 0x0) 17.397415495s ago: executing program 3 (id=5848): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10290}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0x1d, 0x0, 0x0, 0x6}]}}]}, @IFLA_GROUP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r3, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x3) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f00001b6000/0x3000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r4 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000140)={'virt_wifi0\x00', 0x1}) sendmsg(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x80) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x4, 0xe0, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000480)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2f}}, @in={0x2, 0x4e21, @loopback}, @in6={0xa, 0x4e20, 0x0, @empty, 0xfff}, @in={0x2, 0x4e23, @rand_addr=0x64010102}], 0x4c) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2) r7 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x3) execveat(r7, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x5, 0xffffffffffffffff, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000002dc0)=@userptr={0x2, 0x1, 0x4, 0x0, 0x1, {0x77359400}, {0x1, 0xc, 0x9, 0xc, 0x3, 0x8, "c12400"}, 0x3, 0x2, {&(0x7f00000002c0)}, 0x96000}) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x1) lgetxattr(0x0, 0x0, &(0x7f00000002c0)=""/203, 0xcb) 14.56140853s ago: executing program 3 (id=5853): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000000000010711e09200000000000010902240001000000000904000901030001000921050000012205000905810300"], 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f00000003c0)=[@in6={0xa, 0x4e23, 0xa, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}]}, &(0x7f0000000040)=0x10) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f00000003c0)=[@in6={0xa, 0x4e23, 0xa, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}]}, &(0x7f0000000040)=0x10) shutdown(r1, 0x2) (async) shutdown(r1, 0x2) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x3a, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x6) (async) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x6) ioctl$KVM_SET_CPUID(r5, 0x4008ae8a, &(0x7f0000000080)={0x2, 0x0, [{0xc0000001, 0xc83b, 0xd, 0x2, 0x6}, {0x0, 0xb, 0xfffffff7, 0xa07, 0xfffeffff}]}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x200006, 0x8, &(0x7f0000006680)) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x200006, 0x8, &(0x7f0000006680)) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000140)="66baf80cb8044fdc87efed660f388059e0b805000000b91e4200000f01c10f20c035000000200f22c0f20fa20f01cb36263e660f381efc660f7c150c000000b805000000b9210000000f01c1c4e17929d8", 0x51}], 0x1, 0x1d, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x3, @empty, 0x8}, 0x1c) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x3, @empty, 0x8}, 0x1c) ioctl$KVM_RUN(r5, 0xae80, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000080)={r2, 0x8001}, &(0x7f00000000c0)=0x8) (async) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000080)={r2, 0x8001}, &(0x7f00000000c0)=0x8) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x0) (async) syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x0) r6 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000ac0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r6, r7, 0xd4) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) setuid(0xee00) (async) setuid(0xee00) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x2c, r9, 0x1, 0x40000000, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r10}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5a}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004000}, 0x8010) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) r11 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r11, 0x8982, &(0x7f0000001ac0)={0x0, 'batadv0\x00', {0x7}, 0x802}) 14.404946385s ago: executing program 4 (id=5854): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10290}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0x1d, 0x0, 0x0, 0x6}]}}]}, @IFLA_GROUP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r3, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x3) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f00001b6000/0x3000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r4 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000140)={'virt_wifi0\x00', 0x1}) sendmsg(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x80) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x4, 0xe0, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000480)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2f}}, @in={0x2, 0x4e21, @loopback}, @in6={0xa, 0x4e20, 0x0, @empty, 0xfff}, @in={0x2, 0x4e23, @rand_addr=0x64010102}], 0x4c) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2) r7 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x3) write$binfmt_script(r7, &(0x7f0000000040)={'#! ', './control/file0'}, 0x13) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x5, 0xffffffffffffffff, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000002dc0)=@userptr={0x2, 0x1, 0x4, 0x0, 0x1, {0x77359400}, {0x1, 0xc, 0x9, 0xc, 0x3, 0x8, "c12400"}, 0x3, 0x2, {&(0x7f00000002c0)}, 0x96000}) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x1) lgetxattr(0x0, 0x0, &(0x7f00000002c0)=""/203, 0xcb) 13.038988412s ago: executing program 3 (id=5855): socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x2, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000006000000140008"], 0x28}}, 0x8000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, 0x0, 0x0) unshare(0x10000400) add_key$user(&(0x7f0000000140), 0x0, &(0x7f00000005c0)="f40fc24077021c9b084c60ffc26f26db12b9e78d629870bb26", 0x19, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000380)=[@assoc={0x18, 0x117, 0x4, 0x6}], 0x18}], 0x1, 0x40800) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="d3000000a0000000180a000000000000"], 0x0, 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x32}, 0x94) r7 = fsopen(&(0x7f00000000c0)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsopen(&(0x7f0000000300)='sysfs\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) 11.584789672s ago: executing program 4 (id=5859): r0 = socket(0x18, 0x800, 0x0) connect$pppoe(r0, &(0x7f0000000100)={0x18, 0x0, {0x3, @multicast, 'veth0_to_bridge\x00'}}, 0x1e) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) sendmmsg$inet(r0, &(0x7f0000004f80)=[{{0x0, 0x0, &(0x7f0000004700)=[{&(0x7f00000032c0)="ec", 0x1}], 0x1}}], 0x34000, 0x20020800) 11.12139872s ago: executing program 4 (id=5861): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000c00)={0x44, &(0x7f0000000980)={0x60, 0x3, 0x3, "b3e71b"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 8.596579003s ago: executing program 2 (id=5870): socket$nl_route(0x10, 0x3, 0x0) openat$kvm(0xffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x18000000, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, 0x0, 0x0) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r4) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x2c, r6, 0x1, 0x70bd29, 0x0, {{0x2}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}]]}, 0x2c}}, 0x0) sendto$inet(r3, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) syz_open_procfs$userns(0x0, &(0x7f0000000580)) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x40000021, 0x0, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) write$FUSE_INIT(r2, &(0x7f0000000280)={0x50, 0x0, 0x0, {0x7, 0x2d, 0x7f, 0x10081148, 0x2, 0xff, 0x3, 0xf2af, 0x0, 0x0, 0x100, 0xf0cf}}, 0x50) execve(&(0x7f0000000040)='./file0\x00', &(0x7f00000005c0)={[&(0x7f0000000ec0)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000180)='\x7f\xbf\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000380)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000080)='\xf6\x98l_\xf5<\x1a_6:', 0x0, &(0x7f0000000bc0)='\x7f\xb7\xc3\x7f\xa5a\xd6\xd3\x18\xd0\xe0\xd8R\xf02b\xefA|uiWb\x8f\xee\x1ch\x83\x94y\x89\xf1Y{\x87\xd5\xf7\xccMr\xc5\xbdT\x9e\xd4\x84\x06\xcd\x8b\xcd\t\x01\x11\xbc\x86<\x8b\xad\xc4\x80B\xce\x86\x86g\x92\x92w\x89\xfe\xba\xbeeC\x96Ad\t\xc2\xc8\xed\xf3\x1e\x84Ot\x12`=\x98r\x94[\xc8\x91r\xbaG3\xd6a\xca\x05\xd5\xec\xfd\xfa\xaa\xa1\xa7\xcc\x85\xf5D_\xb4$r\xca\x8f\xcf[T\xb9\x0f\xaf\x00\xbc\xa4\xba\xb6=]\x8a\xfb\xaa\xdc+\xbe\a\x06>\r\xe5,i\xa2\xa8\xa2M\xc7\xfb\x11\xd1U\xe5H\xd6\x1b\xf7\xf6B\xcbG\xe4\xe6\xc3{\xf5\xf9_F\x02\x8ah\x15G`+\xf9\xb9\x95V\xa3\xb0\x1b\x0e\xafle%/K\xbb\x9d\x17\xde0\xc2\xa41\x9aS\xe6M\x1e\xb9\xc9\xe8\xf7i\x02e\x8c\xce\xa9\xe7\xc9\x13\xa4\xe8\xf4\x1c\xff\x82\xe13\x89\xeex\xb5\xcf\xce\x108j#\xabH\xc3RU\x00M?\xca\x9c\xefT\xaaJ8*\xe0S\rV\x9c\xaf\xb3yh\x15\xa2\xce>>f\x16\x8d(\xeaot\x83\xe5\x13\xf2bA\xc1O\xbb~\xe5p\x83\xb3\x9d\x1c}\xe7\xd7\x811\x15\x9eP\xea\x00\x00\x00\x00\x00\xfd\x8c\x96\xebw\xdeg\"\xe4\xf6\xfc\x96N\xaf>!\xd9\xaf\x1be\xfa\xedJ\"\xab\x18xK5?\xec\xa0\xc2<\xa8\xdbo\xb1l\nn\xdb#\x97\xbcd\x0e\x93\x9e\xea\xb9\x9d-\xb6u\x7f\xe0\xa6\xef\xb4#\x1b@N\x04\xa0s\xa0\xe1\x90k8\xc3\r\xd0\x1b70b\xda\xe5\xb0\xa8\x01\x14N\xcf\x8dJ\xad\xc69\v\xbc[\xec\x97\xe7\xb2\x90j\xbd\xb1GX\xf2\xed\x15\xceK\xac\x19`a\x1e\x15\x90\x8d\xf4r\xd4Q\xd5\xc19|\xf7\x99\xed\x0e\xaf\xf7\xefR\xa6\xd0:\xe2yB\xfdpG\xf5\xc5\x919\x0f\xfa\xd1R\xc7\x8b\xbc)l\x11\xa8h2V\xe8\x1a\xf7\x8e\x14\xcbF\r\xa7w\xd3\xd3\xb7\xa5\x88\"\xa8\xa4>\xf0*\xbeM\x02\xf0i\x10m(7\xb64\xf5\xa1aZ\x16^\xde\a\xfae\xae\xe7{1\xd0\xa2\t\f\x85\x98\xdaK4]Hi1J\x95\x0e\xa37\x86ch\xcb\xeb\xbfq\xc6\xd3\x98\xd3\x8c_R\xe4oN\xa7\xab\x03\x1c\xc5}\xf1\x92\x82\xe3\xa5~jy<\xf7T\xaf\xabYQ\x82EI\xf0P\x96', &(0x7f0000000000)='\xc1r\x9dnyb`\x00\xa2\xabCg\x13\b\x8f*\xdaA\x822\xf7\xaf\xf6U\xad\xb0\xb2\f\x88s\x19\xa3D\xa9\x82\x8a\xa3\x94\xab\"|\xcf\x1f\x12\x8d\xe1\xe5\xc3\x01\x03\x003\xa9p^\x01^\x16>tnF', &(0x7f00000007c0)='\x00', &(0x7f0000000900)='\x01-\x00\xb6\xb7\xe1\x7fl\xd5\xf8G\xfdQ=\xc3\xd4\x02RP\xb2\xbf\x99\xfc\x10\" \x93)\xc5\x93\x98\x11\xe0\xd4\x14\x9a\f#LU\xda\xeb\f\x03\xa4\xf7\x85\xddYL\xf7\xf2\xc4\xff@+\x04^\xcc\xc8\xa1\x9f\xa7p\xd2\xaa\xa2^\xa6\xd1\v\xd1\xdd+o\x91\xc8\x90\xeebUCE\xdc=\x89\x86\x81S\x038', &(0x7f0000000840)='\x10!%{@{+\x00', &(0x7f0000000880)='.-\\:!\x00\x00\x00\x00\x00y\xa5\x91\x9d:)\x0f\x9d/\xf8\f\xad\xdb|\xcf\x1cHB\xc8\xa3Qo{\xc5|\xa5z\x0e\x0f\xdee\xc2>\xb6\xfe\xeaZ~\xa3\x15\x16l\x00']}, &(0x7f0000000b80)={[&(0x7f0000000800)='.-\\:!\x00\x00\x00\x00\x00y\xa5\x91\x9d:)\x0f\x9d/\xf8\f\xad\xdb|\xcf\x1cHB\xc8\xa3Qo{\xc5|\xa5z\x0e\x0f\xdee\xc2>\xb6\xfe\xeaZ~\xa3\x15\x16l\x00\x00\x00\x00\x00', &(0x7f00000000c0)='-\xf3\x00']}) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) syz_emit_ethernet(0xb6, &(0x7f0000000ac0)=ANY=[@ANYBLOB="0180c20000020180c200000388a81100810025008847000a05000000000000000000000000000000000000000000000000000000000000000000000001000e489ef9fceb1f24f1b777e21fad84a10a8207050019ac742d5d8d69dd44effb5ba93fadb4d0bbc9e7b8237b5ee964bcdb65fb5e04bf8776c7b28549caeeba0b6df8c9c1be7f69b4397c3860b81e56eaeef1f35ca914684bcddc02880b653f973c6a1d40fd51d6ddd93ed419f961047ef297b694a0556015"], &(0x7f0000000740)={0x0, 0x2, [0x129, 0x3fa, 0xfed, 0x100]}) 7.806153697s ago: executing program 6 (id=5871): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) r2 = syz_open_dev$sndctrl(&(0x7f0000000400), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r2, 0xc1485544, 0x0) write$UHID_INPUT(r1, &(0x7f0000004500)={0xa, {"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", 0x1000}}, 0x1006) 7.546492349s ago: executing program 4 (id=5872): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000640)=0x10) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x4, @local, 0xc}, 0x1c) 7.401215084s ago: executing program 6 (id=5874): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x100, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff03c}, {0x6, 0x80, 0xed, 0xfffffffc}]}, 0x10) r1 = fsmount(0xffffffffffffffff, 0x1, 0x4) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/113, 0x1008000, 0x800, 0x0, 0x2}, 0x20) pipe2$9p(&(0x7f00000000c0), 0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) unshare(0x66020000) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r4, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r5 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1e}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, 0x2}, {0x0, 0x0, 0xfffffffffffffff7, 0x4}, 0x0, 0x6e6bb9, 0x1}, {{@in=@broadcast, 0xfffffffc, 0x6c}, 0x0, @in=@empty, 0x0, 0x0, 0x2, 0x7, 0x200}}, 0xe8) sendmmsg(r5, &(0x7f0000000480), 0x2e9, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff000000000003000000000000000004d232020000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b0000000000000000000000000000000500000000000000ffffffffffffffff0000000000000000050000000000000004000000020000000000000006000000020000000a00041819000000000000000c0015005c0735000100"], 0xfc}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) r6 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000180)={'dvmrp1\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) io_uring_enter(r6, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x42804}, 0x0) syz_genetlink_get_family_id$tipc2(0x0, r7) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) 6.605683495s ago: executing program 0 (id=5875): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="0c000280060012"], 0x24}}, 0x0) (async) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) r4 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0xf7fa, 0x3180, 0x8000, 0x1d8, 0x0, r3}, &(0x7f0000000340)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) (async) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd=r3, 0xffffffffffffffff, &(0x7f0000000580)=""/207, 0xcf, 0x2}) (async) io_uring_enter(r4, 0x627, 0x4c1, 0x43, 0x0, 0x30) r7 = fanotify_init(0x10, 0x2) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="0100000500000096c0d07400004a0673b8aecad720c7411bfdbbe652d25ee2ae8f960d792d508da8eafbbab636ce", @ANYRES32=0x0, @ANYBLOB="000000000080000014000300697036746e6c300000000000000000001c0012800b000100697036746e6c00000c00028008001400fbffffff"], 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x20000084) (async, rerun: 64) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r7, 0x5, 0x6, 0x4, 0x7}) (async, rerun: 64) r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r9, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r11 = socket$netlink(0x10, 0x3, 0x0) (async) r12 = socket$nl_route(0x10, 0x3, 0x0) (async) r13 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r14, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7fff}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000280)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r14, {0xffff}, {0xffff, 0x10000}, {0xfffb, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x5, [0x2, 0x10, 0xe, 0x3, 0xf, 0xf, 0x1, 0x40, 0x4, 0x5, 0x1, 0xe, 0xf, 0x7, 0x8, 0xb], 0x1, [0x5, 0x0, 0x0, 0x401, 0x7, 0x4, 0x0, 0x2, 0xfffb, 0x2, 0x1, 0x39e, 0x7, 0x7, 0x2, 0xd], [0x5, 0x9, 0x9, 0x3, 0x6, 0x4, 0x564, 0x1, 0xbf9, 0x5, 0x1, 0x0, 0x81, 0x1, 0x76c]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0xdc}, 0x0) (async, rerun: 32) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x23, &(0x7f0000000640), 0x0) (rerun: 32) r15 = socket(0xa, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) bind$inet6(r15, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x5}}, 0x1c) (rerun: 64) ioctl$BLKZEROOUT(r9, 0x127f, &(0x7f0000000180)={0x9, 0xac}) 6.486468162s ago: executing program 4 (id=5876): r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000100)='asymmetric\x00', 0x0, &(0x7f0000000180)="3082", 0x2, r0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x80082) writev(r1, &(0x7f0000000400)=[{&(0x7f0000000700)="c5", 0x1}, {0x0, 0x600}], 0x2) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRESOCT=r3, @ANYRES32=r3, @ANYRES32=0x0, @ANYRESHEX=r3], 0xf0}}, 0x844) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x220000, 0x0) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000100)=@ccm_128={{0x303}, "53d498b304014886", "07185c06df895a1d28b972de5dacbbbc", "4c6ec9f3", "7308ff2b627c34cc"}, 0x28) r5 = socket(0x10, 0x803, 0x0) sendmmsg$alg(r4, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000140)="7cc160364fa44fa22f23c1c036ef54a895f45f11d2f18a95a605556371a00b79ab61e08a20efd9724f17c536c1234d67e996ca49b452cadfd27fe7cd045fbf45a2405e8077039dc209a2f3eb", 0x4c}, {&(0x7f00000001c0)="b7bfc471ad1e09e2c319c1e5345c44be0789e9a802d29a98d8900c8618e54adbdaecbe1144fb73e9b7f3f7ad7d85d560be00f71f30ce1d8440563a79160e34480a700707aac9d7ffcce3aeda6cda35b23566fe3c2fa2cb9962a00f2376da0fec64c935022fe1f2f6c3564f69f75dcac3651e7e1a8f72e2a85710409817ec731811c8a906ef13107a38d09f147286d3da8659cf9a1f234f78b87bf383f7ac524eb1823049f28a5e37f51eee9d44e31582ff103b19cc8a848dbb1ab740d03926d76e5286640c6a435f19c33177c8adc4dbe19f", 0xd2}, {&(0x7f0000000380)="0d4838f142122153fae2f01750da547407f2e3d0d81fe13f619b7163565098184c6f5e25a026ee107a5b606ebd94674b7a35165cc9b34e6cfccb8b89d53f5e1d8d64532b450a", 0x46}, {&(0x7f0000000400)="d27132aac973e65746d6834a39b9dc6057a8e3c7b56eb521c665d43454461954b2c75c4b008a57267790e1a14c056afcd95dce83d63c030e0d421522e6114eed542b40f0fd", 0x45}, {&(0x7f0000000300)="29b824d0a637f4c7c935f892dd9866a90354", 0x12}], 0x5, &(0x7f0000000500)=[@assoc={0x18, 0x117, 0x4, 0x6}], 0x18}], 0x1, 0x800) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052409000105240000000d0b979d60a53067d50060200006241a0000000905810300020000000904010000020d00000904010102020d0000090582020002000000090b"], 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000340)=0x1) 6.439340617s ago: executing program 6 (id=5877): r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000540)={'#! ', '\xe9\x1fq\x89Y\x1e\x923aK', [{0x20, '`\n\t\xe5[\x19'}, {0x20, '.\\'}, {0x20, '%^\\\x93\xca\xe9[\x04\fu\xd3\x10.\xee\\Q$e\xa9=B\x19I\xd2Le\x14P\x86\xd3\xe5b\x93y\xdf\xfb\x17B7\a\x9c\xb5?\x0f\xc8\x9b\x9aol)\x87Z\xcc\xa5\xc2\xffb\xb8\x00\xbb\n\xcb\xb1\xdaa\x18\xacG\t\x8e\x00*\xf8R\xa9\x8e\xaaUw\xc0!\x1fa\xf5\xecf\x14B\xd4\xd4\r\x143Y=\xa6!\x94P\xdb\x81vr\x8c\xfd/6\x16\xd8\x16\x82\xb6Z\xaep\xc3\xaan\xfd\x13\xf2\xc5\x97n\xdd \x96\x0en\xe9\xaa&LN\xf0\xed<\xa7(a\xa8H\xb3\xee\x13\xe8\xb3\x8c\xd6!\xb0iJ9(|Pp\xd5\xf5\x1b\xa5\xa4\x86\xfd\x1a\xc1C\xa3u\x9d\x9d\t\x8d&V\xfe\v\x9a\xc6\x9e \xf6\x88\xaa!p\xd3nF\b\x1e9\xd3=%\xd3)\xd0%\x18\xbd\x87\xdb\x96\xbe\xc1\xfb\x00\xe1\xd3\xee\xb2P\x93\x15\xf9\xd5^\x9b\xa9\xd9\xf0\xf3\xf1\xdf&A\xdb\x97r\x99\x12|\x0e\xc0\xed\x92\xc2;\xee\x19l\x16Ww\\\xeb3\xa7\xb4XO\x1a\xf0\"\x9d\x86\xebV\xb4\xd8=h,\x84C)F\x16\xa1O\xb2\xc0\xf3\xbdT\xd1\xe5/\xa7p\x9d: \xfcwL'}, {0x20, '/dev/loop#\x00,\xc5\x18\xf4tn\xbbq\xe9\x01 \x83zY\x14\xf5\xb69\x14\x11\xdc5\x95\xfb\x03~\x1b\x1d\v}\x11d 4\xbfA\x1e/\xfc\xc3\xb8\x02\xe7J\x00\v{\xd1\x9c\xe8C\x97@-g\xdee\x1b\xb8\x00\x00'}], 0xa, "521299a432289bea0aa53f5db534de379d0418026c1f265a707f7b5008ab99f2c9"}, 0x1a3) write$UHID_INPUT(r1, &(0x7f00000007c0)={0x8, {"dc5d3b0169633d3eba3eabbc09167be55101d4af4b22a373236464d2dbfaa84399b77bd438a54364a7ebc5bdaab4f9decb7c044318cd59a0af8279bcab35dd7daf7a0ceb381df2c32eff45b13e2c8f40e1895355bf6f165200cb1ca41a155730ee2e9f83183f9fafe029d0401b0770618254a8b2dc87b630072b1e2de160d1afed51b74c14b71ec1b226a324482d14ad586b1a4ce80e458fe45244c01eddeddf3564af838d6d5324f8a77023d6eb7aa14397a0e1413ea1c3dfdf063a35b709e627f36fe403ee3117365be5017682f53595f28543062c740a94a794312f5cebc315044b8ea000a5d0f27812ab0ce149d11e6f6f7620c5f3e250bf67d13a1ca39dbb7b8b5a31e3d7ba7ebe5849a7a09b61fc9f2cfc54b89e9cd0105bca49483ce55e0187ce2ad692a18219d881057c838587b915337169ee054655f26a04df913a658fccbf4def6aad750ca4796b74d322c67e9d4ee6a530a22dcc35db850b424d6ec9f62495b9f9fd2b000feadd57d26dbd505798c208d91eb0aab0fd97537631b8bf81ce0e2241c4272be4ff69b390e4485d574146b76d1fdbf7fc5334906805534cdae1e47240af7761a18fc8bd0a694be47529da98bc0f98eb7db3fc4a74cbb6e486f4de90fbf2452e72c2e1dca44543ad9ad094b8bc861eef1e814662d0b350339e3a510d459c6f83aabd5fd3dcb38224056d761e7df9b482b9905f1e2135c1929be328ecdb69c007a3efd548502c83106f6df1ab1178fac499eda92ad4373155227ec2df150c919d322ecb3ea37e659285f18a3e2f79b59900ca438df3a1381380a12d3ad7678e0a8d3bdfb40651389b4ac8c66138d442d70eafdc2df8b080028006b124e4ebe0d9883ef100f1934e42794146382c1d628fd2ebe5859b6c243824903d056d800975675bb1913142adbc039a9c68c2f146a0e8903447313f5e5549905f397a9b1f21a93b80c4d04a8ea7a29a50fbc5407a9305bba420edf898ea678d6879489c39692c99bb6dacf61f5f97637b94c1031d635b5423b38b9196fafaaf87b2796eadc21466af5a10281e6a808748969d29efb444c99a4cb2111732a792dbca4376a125a68f7cdac065cc6173dc21caafba48c742d9a7df2f771ff2f5725b22c247d4e0c6106f9f5f6929b69929ab37e9a9b326ce618bb702b883b12026f1300f21f2c7440cac8c5f1210a78aa067211d2827f5dcc7578252c2ccc3f67bab9d1bb6939b21b550788ef550acfed4bf50c0b4fb3ca4d2872ee64f95d611a317d9daaf373a10d868680b2226396c95fa2b0ab4d6fce06c3b42cb97d17a7b5089061537fdeb1a53040869f7befca330358fdba86754fc2e46c2113e1484cb37534af8f0408a7ee313778dab49f08229964298f847ea66c4ec319f64b6a12da585bc59e82e0263c507b397d3efee3b4066f4d25566aa1549f6185f6375f84b65fa8945148b90430c86a5b6fdf58d5c812b98d9dc621fd9a3d9f1a577495356516d1cbcf5e8bb8923b54b247225b9c3892b18a9e137f3620c734052af9dc8f1ea36f0d4592d5ee32e35676a84dc891f97456f2ac3a4ab58a42bcdc221a4ac8bb28d428add2fcbe5b110a8afd5d23b31e827bd16167b2d88cae024afc04a722ac0b4d45c52512e6b6f102aac4be21bc89ce246539048370553665b0a4336a6db99d0d19399be6437bf21419304331b4342b2c1db580f0c9bf681fdb8e9fa3e025454197bbc82ef93ee2f385660818ec5127080675a8013766469afe3b1e36e81bf2f04c3a26eaf4517551e734d21ba3bc90e48aea0891792970c39f3f528397e9b7ae190f1760fe5960dc763ee0a17939c60bfcac0a8914be82c749e4fe85d1ac5fa733413468fb8941085e8c4d6e0b6d1e62e20da58440facd640ddbb6c1f694b3ca48757a34c5a11668368711a1d4f3a81d31ac30d71277d7ae77882b6841cfa6289e6cce84a3ad57eeb328f831888ac7d3cfcd3a472a48d903f20cec8c8ae8d0bea04ebf7413ef7693f8ed876e49bd5f89d7e1078208ff62712e330fc0341b9ccf26845578d44b1e0c66d1bebc14742baedfabb8e9a2c8f42730360c72997efe0ce786ff330c2eb6e0ff20896f813c2a515ce76f826c11a1c1588eb369231ddeb4a2f9f9591ecdecc74d20aeb50047beb3ab89a9e4e1b805a20b645c79d0bc5d0247fab8ba46a97a07630b1f1cb69b42b568af746733d2c581f057873d64fe6e659b00b4a26745f5fba1fe7406a86b007936c7cfdac53a4c5b0ea9f6604863c8e3f174eddbb09175f6e13cda9a860cf400ef9ed02b895502ac6e6de6a658249c3c6e8a653517eae2231e56e0f120547923c6549ebc1ed14c623637ce3d96af5c93a32e58e2d9659d8b5b145888b52d9a5b5cb3cdf594eb137bcef2ba068cfd2c6ccf7ab6e5b4ec55e9197bfb91c9b8729f7b50cf0b0326f7ea3e712c77674d48545ca2a86744c3c38f149d69cf811beacf7e5f49c7bfba20f1dcf3d7bc0b9c796016820a46495d244c9606a06fe2e14233eda78d69ae4523ad7b708b0c7ead44d7fd376fed60e3cc2ee25e9600adfbe87ac7c8fb8269aec9459602af0f420becda6120ce7d9626c65ae7f860639e8bf664eb4301ec18add0e436c0356c12ab6b4ca35da2b43c4a8c239fd0b59a2ce94843cdfa1667053165053633b062844dbb0d00070fde74fa3178eb5f1f5fd02e2088d8690379f39ab22c080cdcb29d700bac74fabd8a356fe99afe83a5d99aa5024e9158a299eda6c99b6701e64f1d68e7e2c0c6e88396bb535a02d0948f0a250a6e090041c96d9c9acd6134d44d516fd1010c39e572b86b05bb1326a2a4f23f11181186f9c2a01dc7b58c0129f4b851ca9b1e3dc35db7364e29ef646211796b1651511e041345abce427fa5d6e48b8fb078c8432061a4cc518a8f2a2caf709a5c1473a62112a6650afc64eec12f8f9c08cff1b6fbf7a1209fc8661f62303b7c5d49c1d0b32a9f37e81ed9ab6193816d40995ed49c10b9f5752e04d57535a3d16f06c65d32846c31ec9787ec4a965679eb804e86b45d007f38d8104550770dc6f313bc846e43a14a8c21d0628c744e3e83cb998d1b7acfe996541a8c03852dadf9326444c582b481cae844e4f3fe3d638903b38f24633b63adbad841ac6c4c1169d781a0e271e8a967b1c7e986fcb3a66168e86e3559a44fcfa92452260491da9397659af60453f4cd4be2d15439445ec2b4366a79d3283da912d9d499df1242bd174edc235848caa21d2c997aff0e95c7e5cc0803c90fab84e7be7b37909d0e2f3bc9974e3388acb6800baba183ecc8eea8c71c0d65d669e41f99ceae523b7a6b772f3b8ebba1d2127ccc3ddb7ddcb4ec73cbdc26fc87c3848e258a0b5484d3a13e40ec4e4a65dd92f09e9fe1e3e2f8b96c4e363aa3683860dee62dfcf8823ee4a3593a092e0bd9c4cedacf44a272faa164447b01f46a7795642a40c61b0034a37f0e9b792428a0ddcd144fe8263088eaac8016f8f1cd30b55ac90a8f10d785b7570dd9e639a4a068d3fe98a420b9f72e79de817f676c2a224300d749571ad43f49d1fbe838f4566bc7b5f104c384ad87189213152b644d9fcbdf98bafeee569d640ce9045779f1d90024c023a7480a358dee276fba139c14b4fdb12885240903d0e61dc161659a68f62c92b899007e0f2b65bf0a069e9e57c9b6ae50a3b30dd1003fb0eead73ae2f6010b3b356b4060579a4f29935e1f00c01d12e5f44e8e3163d81dfef7ca8560604240c7e96e4454c6971614df306c768121abb3f628e3f1d2d026f58d1087334c5bdb74d7c949b0ee66a4531ba4e9b922aee3d0f802ed034734507a5913c52966f1f8bd4577840de0253aabc23299dced2a299859c07af9fb0f9c29b6533b9d84d471390d59ab315f5ddb226f6b8dd7889295f0fb1f7bd1adafe4cc520a1e84bf2a59d5b9795aeafc8d6fd66a8228aba8653b98622617ddfeb5d6795c9bd2f35d4a0c386e862675a50e3314c3fbb17aca151c13c7fc8b1d1b72ed0a958537b5ddc9e74bddc2b9571ec3f2b7775b125338d4852a75a63941564c65bb36dfb6bea4aab1ae7a4f285c2177aa98406eb2cc10934aa92d5a9612d4455c84ad200841d289b5c2d5deab0d8e2459598ef183d3dc47f6bad0b9513710600cfa4d69fcd5763cdcc4f2c2b7cd7d4491fd52f4aec82ce846c0988f6f0123e21e900d39c61085e68c9badc350b44004f6c042d64b0d0cbf91ad0592b198f1eeea1e52200bc8e6d62848d6884b10bdde72466039da488be6b340c23148f666f2fe6e032c07dac43586df182aca9116f4600313fa8375c76337ba86bdc391dae6450218f58f047ced64befc6bb5c2a60024669630a6279fedf2fe45e7e19ce582ad96ae0d023eb9b39f5f1e666e73bb038ae38157275be5eb3e7cbc8b05adf53e817646bdc2cfce98e5d162bf7faaca787db8717ab8b27b9e35609c5fb9fe9def07f010df8b43cf5c96851eadfdeff0b7bc5826e7e15490ae9c3d14166ee81bef007070e7981235a673804ad89943ee6b51ac63364f7870e121e6ff23a0c7d179527cd58dd7a4ca37247c2bd9efc79b720bb1ee2d39862e98cb81e93cf5b48d5d02ee8ac737ab504c867a1c49e678300803c94fbe978dea918a1e71b9791ee1e4d30056e86c26a4675a8b090be2365c0b451a13ece52a89a7057fe2052e11c6666eb916d823ea66bf217c320acba3b714910734b2d27c2fa586bd7f7664b0d1422adabad2ce2afc10270057f11940fac1a51d023ce48bd04ea39b7f99381b239fd0ddeea0dce7863ec1f8f61775013b6414ecf86e686a340a3148f87a9d7d60a1f2da53436d16fc88d6a4e7c3d55e0dd004cbecc15a5558eb705d82aacb1862ddc251dd5d9cbf1d78f97900ce6e8dab0ea678cb823bd1e7bbd1e927841af08f5427878c19f4f322228f9b36287fc13e7c1293ea875ae73815e052d6c2ebc40df8f7b9d1f76e0b10e35aa160944983d8e6b790df0d9b13f3460657336d81f7d83c0350324b930ec9c7557ce12887f76372e126f504b0980fea27f31a780c05187b9b5353dafc6b101543b24332b96e15bc26b19062e52fa9f86d260ee3a3bc92a133e328407bb85357ee5c45cb87228f44888b14941b5911b050e9319fe88033f830a8490917a9c0572ebbc5492b4e1083a2e3d77215a34abef947b5b9a950e780662de18873e55899c92db3ad3d437e8407890afa6b0c04ef861b8bc85fbbe1bb67b3d9ef001409f84b8ec4f01d861cecc143a805b981ab5cf5b605057b63cb2c84ec358e510a69cd8c33a8a62fe4680d0c980145cc709157832bfaef261cb0466c237376ca2944ce9affffd4b1dc7cc9511da0b34bffb9ac216fb8cf7c6572d95627787720d1ba67c6512fcdb16f6329e9668681c404efebad559f81f05971b5efb6b4cca97ad0346753cc0a40a877242d8a808c602b03dc962cee38e646cb18abb079c70d357c30738a70f55cd3c5956a83a1bfcd6649dd765f16bfe968066345df7380bbc0c16b3b5af513d6458c791343952f33a051c5d711c1f35af1b47f3db9bbfb5c7c636b3a2b52805d606479879be0b404a28ade5649a3185e0f85a85fc15cd824671c2befdd0da509597c87d869f0bd7ad163ad93ca28fc0c4025eccaafe385ec3fc06c54ebcd7b07b6c7e0197c5b9ef886159a1585ae45248f865be760db6f5bc8f868fc6aefd04e34ecb51159e4cdcc2214b42b1ca9caec13ba3e1b2e7a3c736977b226213d265c2873195122a9b448088c8b50edd549be41c38ab176807b75e7267f86e4", 0x1000}}, 0x1006) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd0000000300"}}) 6.293586756s ago: executing program 0 (id=5878): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$vcsa(0x0, 0xa40d, 0x2a8102) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(0xffffffffffffffff, 0xc1205531, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000480)=[0x0, 0x0], &(0x7f0000000300), 0x0, 0x2, 0x0, 0x0, r4}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(0xffffffffffffffff, 0xc01064ab, &(0x7f0000000040)={0x0, r5, r4}) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, 0x0) r6 = socket(0x10, 0x3, 0x0) write(r6, &(0x7f0000000000)="240000001a005f0314f9f407000904000200000001000000000000000800040001000000", 0x24) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r7, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x40000000, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0xc008}, 0x4008010) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x17b93}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 6.216875675s ago: executing program 6 (id=5879): getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @rand_addr=0x64010102}]}, 0x0) io_uring_setup(0x9, &(0x7f0000000040)={0x0, 0x251f, 0x2000, 0x4, 0xd1}) syz_emit_ethernet(0x46, &(0x7f0000000140)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c6dd00", 0x10, 0x3a, 0xff, @remote={0xfe, 0xe0}, @mcast2, {[], @ndisc_ra={0x89, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0xffffffff}}}}}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "d607f8f9951e76c13f64323723e7eecdf40c363423eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f001d34c09f39c3539e4f8d3ee0878ae95bc7f52363c468b257ff3e24852548deb01efd54f11ed2c41d078b9cf1fc8f72566153c97e4af37017ea6b16b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3b90400000000000000c279f03558083906666827d61dcc3a633bffff250b5a293e3877adc1660edbc9a0307a25720a170e7f5670e419dc44febf7ddc73fd4a5a0b6c28665f7f46c7084e17c809268103a2584ab40a68e528329d97afc3612e325c1eb4a3ab2e156a97444800", "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"}) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x1, &(0x7f00000000c0)={0x0, 0x989680}) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_SET_FPU(r2, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x4, 0x9, 0xbd, 0x0, 0xffff, 0x2, 0x2, '\x00', 0x654}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 6.165070151s ago: executing program 2 (id=5880): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x14, &(0x7f0000000dc0)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000080)={0x7b, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, &(0x7f0000000040)={0x4000000, 0x8, 0x40d}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000006c0)={0x84, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x20, 0x0, 0x4, {0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000e80)={0xfffffffffffffd3d, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="20000b000000b73b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.905765215s ago: executing program 6 (id=5881): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) readv(r1, &(0x7f0000000840)=[{&(0x7f0000002cc0)=""/4096, 0x1000}, {&(0x7f00000009c0)=""/212, 0xd4}, {&(0x7f0000001b40)=""/4096, 0x1000}, {&(0x7f0000000300)=""/236, 0xec}, {&(0x7f0000000540)=""/255, 0xff}, {&(0x7f0000000000)=""/37, 0x25}, {0x0}, {&(0x7f0000000640)=""/106, 0x6a}, {&(0x7f00000006c0)=""/99, 0x63}, {&(0x7f0000000440)=""/236, 0xec}], 0xa) personality(0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = creat(0x0, 0x122) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x7) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x1) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) connect$unix(r2, &(0x7f00000007c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e) syz_usb_connect(0x0, 0x24, 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYRESHEX=r3, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r6], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="3c0000001000030425bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0005000082180000140012800b00010062726964676500000400028008000a00", @ANYRESOCT=r2], 0x3c}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x1, 0x803, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r11, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r10, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r12], 0x5c}}, 0x40) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00030000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r13, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r13, @ANYRES8], 0x4c}}, 0x884) 4.382231257s ago: executing program 0 (id=5882): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) writev(r0, &(0x7f0000001480)=[{&(0x7f00000000c0)="2e46140153e1f4cc4747cfdadadcc7e180f86b3a937dbcae68cc5ba6d20f45c378fac8df4a7eef86db74c4cbcf81a26a546212a07da7f4853d30fa74be8aace1a20d83ec636d059ae1afb9fec1f57f6340a1545a6de95b214b0e6950328a92e713a2295f8c0c165b817a15306921ee7e5ac25d0b76718dc7022672f6d54b494bfe6c4b8b09d34cd9cf78110f53b12d162b576a5a3845b5922cd5399249cfae37d6475961916366efdb49", 0xaa}, {&(0x7f0000000440)="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", 0x1000}, {&(0x7f0000000000)="b4863e6ff2d204c949c7f8af8728ab6bcef5c8f3198fecd03b8982bf9ea5d8d913e0", 0x81}, {&(0x7f0000000180)="37143b150f72ce38b17393356bbaca4eb5efb67889a05af953faf0751f873796ec130ed22e939456df1f1ad481f3046043913be025b41ef5e8081f0f971a9bea3c522ea74bdd123007a247d22afd2663f9aa591e2c88fe061d2de6d8886344730c08907d220ec688e9e9ea73920220ea3dc635fcfdf18e962918ee71786fe33745062e159767b6be4ec69cdf4a6348a9db82cc257007f09d3c6e9e4c04163bdfabe98323288ccd3f98be033aa3a7bd7a45bf6faa6191", 0xb6}, {&(0x7f0000001500)="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", 0x109}, {&(0x7f0000000240)="ea0ffcd89c41a87c1820ed512cd8ed250372feccd1605f5bcd7b2262462619a9cba54525f78a3585cc4801595e899b97f7fffa441882d7ff2bcdce17174b112832c103f7283de98ba9c8233f4e97cd14cd44eb508b92856785b578f4425ce0f213d2cf069a37699dee3fe260fc32970eb2c142f7c9adfc7a3f3760f91a3258b7fe30ebab4423e9af3e9a7fada6c5d6787349467b53d3af9998df8bb1a566efa1abf8ba86d0d4346d977315d275b9e07a46c09ada5f26ee7070d57e1b23eb953ef8e6ec82a04063809c802f74ad494b97a29eff7556982047e977", 0xda}, {&(0x7f0000001640)="46d6c39ec60c4905fa6fd1b5c011d46e42a18346b5fe3625dae86fbc8d83573f9356a59d371bf77fc988cc9896542eb36779b47551f727334fd66ede5e52bd6699f3bef26b5e9e79fd833dc659fcbb31cc628c5d5b61e1280e810aac11384c6691019d60a5b2eb573523da659bb9a535488661b70a3e21788e82fbd5060a2431b9c35d16507389d08316cf2b304d0f2d2d39a0afc4a72b9c5f056acbaa4ecec61767611f5ffc0f68b0a005614c07f5f484e45544bae6ac903cd0e4dc24", 0xbd}], 0x7) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f0000000340)={0x6, @raw_data="e61c18b2e1cc51f0e8372332c66d4b5658ed9f62a1dba70b9740539edce4213bfd78ce0a981f306e5e4c6ef5df2cb9c2841828174d71a900f4771b51ed7c58b3283838d9d0faec90c4c0b1bd45c46ee8084f70d4bf31370c2d84e5b0bf90139c6f4723de53038397eb0c5a249a3e8f194d65e67d451ee5d07d10f37a4b69bfa493eaa7c4171e9b99fe5d9273a429f75a356e1a2fe1728533c973f0600fbfb024a33cc5756cad1f65804831beeb47a38824c7c19e559fc9b5a31cfaba93cf8045eb7b636998e68f75"}) 4.159921727s ago: executing program 0 (id=5883): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11012, r1, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x640c7400, 0x0, 0x0, 0x0, 0x0, 0x0) 3.613749214s ago: executing program 0 (id=5884): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x2000c805, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10) 3.528848321s ago: executing program 0 (id=5885): syz_open_dev$sg(&(0x7f0000000000), 0xf3, 0x8700) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x5}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x28044082) socketpair$unix(0x1, 0x1, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x2c, 0x2, 0x1, 0x101, 0x0, 0x0, {0xa}, [@CTA_TUPLE_REPLY={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @private=0xa010100}}}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4800}, 0x0) io_uring_setup(0x7ba6, &(0x7f0000000140)={0x0, 0x12fd, 0x1, 0x1, 0x36a}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000028c0)={'wlan0\x00', 0x0}) syz_open_dev$vim2m(&(0x7f00000001c0), 0x6, 0x2) syz_usb_connect(0x3, 0x34, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x40, 0x1e5782) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = syz_open_dev$evdev(&(0x7f00000001c0), 0x1bbc, 0x801) r6 = syz_io_uring_setup(0x239, &(0x7f0000000200)={0x0, 0x5e5, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r6, 0x2def, 0x0, 0x0, 0x0, 0x0) write$evdev(r5, &(0x7f00000000c0)=[{{}, 0x0, 0x1, 0x3}], 0x5b) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001000010400000000feffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000900001c00028008000500010000001e00030007000000080004db9fcfb436f560ecb86eae8588d0f8db0003000000"], 0x4c}, 0x1, 0x200000000000000}, 0x40000c0) 3.230991298s ago: executing program 2 (id=5886): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000007c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x1, 0xa, 0x0, 0x0, 0x5e}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffffffffff8}, {0x0, 0x0, 0x200000000000000, 0x1}}}, 0xb8}}, 0x2c000010) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000f20000e00000020000000000000000000000000000000000000000000000000000000000040000000000000a"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x10, 0x80}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, 0x0, 0x6e6bb5, 0x0, 0x0, 0x3, 0x2}}, 0xb8}}, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r2, &(0x7f0000002340)=[{{&(0x7f0000000300)={0xa, 0x4e21, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x6}, 0x1c, &(0x7f0000000cc0)=[{&(0x7f00000000c0)='O', 0x1}], 0x1}}], 0x1, 0x0) shutdown(r2, 0x1) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000000100), &(0x7f0000000000)=0x8) 3.125090931s ago: executing program 4 (id=5887): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/power/pm_async', 0xe2200, 0x90) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x3a8bc000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r6) r7 = socket$unix(0x1, 0x2, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0xa5, 0x7, 0x6361, 0x5, 0xffffffff, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r9, {0x0, 0x6}, {0x2, 0xb}, {0xffe0, 0xb}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x10, 0x80000000, 0x5}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2404c0f1}, 0x4008000) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r10 = mq_open(&(0x7f0000000480)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x196, &(0x7f0000000440)={0x2000000000002000, 0x1, 0x56, 0x3}) mq_timedsend(r10, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(r10, &(0x7f0000000880)=""/202, 0xca, 0x200000200009, 0x0) syz_io_uring_setup(0xbdc, &(0x7f0000000080)={0x0, 0xec21, 0x80, 0x80001, 0x373}, &(0x7f0000000340)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r11, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r11, r12, &(0x7f00000001c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x60, 0x4007, @fd=r0, 0xa, 0x0, 0x0, 0xd, 0x0, {0x1}}) 2.836404226s ago: executing program 3 (id=5888): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f00611058"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @multicast}) write$tun(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff02000000000000000000000000000100000000000000000000000000008c000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef) 2.832135765s ago: executing program 2 (id=5889): openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000100)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900c1210680320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000400b9a6080000b80000010066b87a000f00d80f300f300fc79d53bf0000c4b9e16dc30101220f01c3", 0x64}], 0x1, 0x14, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000001c0)={"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"}) (async) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000001c0)={"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"}) syz_usb_connect$hid(0x3, 0x36, &(0x7f00000005c0)=ANY=[@ANYBLOB="12011001000000085f14120200000000000109022400010000c000090400000003010000002100000001220000090581030000000000ba9bfa21c455694152611b70eb049921ebb2701eaabe6f2828266af6fe9b27649b8e7c858fa53eb5b8701704a66a2b69b96566d948cd3e620cb925daeccb9d0cd5fdcfdb5d5983153d22b6737a3e217ad0c2f83493523614ac98fa1a5dc6bc271f8096c8a2c298b4123778164ceba698aaa574"], 0x0) (async) syz_usb_connect$hid(0x3, 0x36, &(0x7f00000005c0)=ANY=[@ANYBLOB="12011001000000085f14120200000000000109022400010000c000090400000003010000002100000001220000090581030000000000ba9bfa21c455694152611b70eb049921ebb2701eaabe6f2828266af6fe9b27649b8e7c858fa53eb5b8701704a66a2b69b96566d948cd3e620cb925daeccb9d0cd5fdcfdb5d5983153d22b6737a3e217ad0c2f83493523614ac98fa1a5dc6bc271f8096c8a2c298b4123778164ceba698aaa574"], 0x0) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="0d01000009000008250592d20700006a3b010902241700fa0074980904e4ff11070103000905010200ffe0000009058202"], 0x0) (async) r3 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="0d01000009000008250592d20700006a3b010902241700fa0074980904e4ff11070103000905010200ffe0000009058202"], 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000200)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r3) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.421089521s ago: executing program 2 (id=5890): socket$nl_route(0x10, 0x3, 0x0) openat$kvm(0xffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x18000000, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, 0x0, 0x0) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r2, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) syz_open_procfs$userns(0x0, &(0x7f0000000580)) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x40000021, 0x0, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) execve(&(0x7f0000000040)='./file0\x00', &(0x7f00000005c0)={[&(0x7f0000000ec0)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb\\\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000180)='\x7f\xbf\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000380)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000080)='\xf6\x98l_\xf5<\x1a_6:', 0x0, &(0x7f0000000bc0)='\x7f\xb7\xc3\x7f\xa5a\xd6\xd3\x18\xd0\xe0\xd8R\xf02b\xefA|uiWb\x8f\xee\x1ch\x83\x94y\x89\xf1Y{\x87\xd5\xf7\xccMr\xc5\xbdT\x9e\xd4\x84\x06\xcd\x8b\xcd\t\x01\x11\xbc\x86<\x8b\xad\xc4\x80B\xce\x86\x86g\x92\x92w\x89\xfe\xba\xbeeC\x96Ad\t\xc2\xc8\xed\xf3\x1e\x84Ot\x12`=\x98r\x94[\xc8\x91r\xbaG3\xd6a\xca\x05\xd5\xec\xfd\xfa\xaa\xa1\xa7\xcc\x85\xf5D_\xb4$r\xca\x8f\xcf[T\xb9\x0f\xaf\x00\xbc\xa4\xba\xb6=]\x8a\xfb\xaa\xdc+\xbe\a\x06>\r\xe5,i\xa2\xa8\xa2M\xc7\xfb\x11\xd1U\xe5H\xd6\x1b\xf7\xf6B\xcbG\xe4\xe6\xc3{\xf5\xf9_F\x02\x8ah\x15G`+\xf9\xb9\x95V\xa3\xb0\x1b\x0e\xafle%/K\xbb\x9d\x17\xde0\xc2\xa41\x9aS\xe6M\x1e\xb9\xc9\xe8\xf7i\x02e\x8c\xce\xa9\xe7\xc9\x13\xa4\xe8\xf4\x1c\xff\x82\xe13\x89\xeex\xb5\xcf\xce\x108j#\xabH\xc3RU\x00M?\xca\x9c\xefT\xaaJ8*\xe0S\rV\x9c\xaf\xb3yh\x15\xa2\xce>>f\x16\x8d(\xeaot\x83\xe5\x13\xf2bA\xc1O\xbb~\xe5p\x83\xb3\x9d\x1c}\xe7\xd7\x811\x15\x9eP\xea\x00\x00\x00\x00\x00\xfd\x8c\x96\xebw\xdeg\"\xe4\xf6\xfc\x96N\xaf>!\xd9\xaf\x1be\xfa\xedJ\"\xab\x18xK5?\xec\xa0\xc2<\xa8\xdbo\xb1l\nn\xdb#\x97\xbcd\x0e\x93\x9e\xea\xb9\x9d-\xb6u\x7f\xe0\xa6\xef\xb4#\x1b@N\x04\xa0s\xa0\xe1\x90k8\xc3\r\xd0\x1b70b\xda\xe5\xb0\xa8\x01\x14N\xcf\x8dJ\xad\xc69\v\xbc[\xec\x97\xe7\xb2\x90j\xbd\xb1GX\xf2\xed\x15\xceK\xac\x19`a\x1e\x15\x90\x8d\xf4r\xd4Q\xd5\xc19|\xf7\x99\xed\x0e\xaf\xf7\xefR\xa6\xd0:\xe2yB\xfdpG\xf5\xc5\x919\x0f\xfa\xd1R\xc7\x8b\xbc)l\x11\xa8h2V\xe8\x1a\xf7\x8e\x14\xcbF\r\xa7w\xd3\xd3\xb7\xa5\x88\"\xa8\xa4>\xf0*\xbeM\x02\xf0i\x10m(7\xb64\xf5\xa1aZ\x16^\xde\a\xfae\xae\xe7{1\xd0\xa2\t\f\x85\x98\xdaK4]Hi1J\x95\x0e\xa37\x86ch\xcb\xeb\xbfq\xc6\xd3\x98\xd3\x8c_R\xe4oN\xa7\xab\x03\x1c\xc5}\xf1\x92\x82\xe3\xa5~jy<\xf7T\xaf\xabYQ\x82EI\xf0P\x96', &(0x7f0000000000)='\xc1r\x9dnyb`\x00\xa2\xabCg\x13\b\x8f*\xdaA\x822\xf7\xaf\xf6U\xad\xb0\xb2\f\x88s\x19\xa3D\xa9\x82\x8a\xa3\x94\xab\"|\xcf\x1f\x12\x8d\xe1\xe5\xc3\x01\x03\x003\xa9p^\x01^\x16>tnF', &(0x7f00000007c0)='\x00', &(0x7f0000000900)='\x01-\x00\xb6\xb7\xe1\x7fl\xd5\xf8G\xfdQ=\xc3\xd4\x02RP\xb2\xbf\x99\xfc\x10\" \x93)\xc5\x93\x98\x11\xe0\xd4\x14\x9a\f#LU\xda\xeb\f\x03\xa4\xf7\x85\xddYL\xf7\xf2\xc4\xff@+\x04^\xcc\xc8\xa1\x9f\xa7p\xd2\xaa\xa2^\xa6\xd1\v\xd1\xdd+o\x91\xc8\x90\xeebUCE\xdc=\x89\x86\x81S\x038', &(0x7f0000000840)='\x10!%{@{+\x00', &(0x7f0000000880)='.-\\:!\x00\x00\x00\x00\x00y\xa5\x91\x9d:)\x0f\x9d/\xf8\f\xad\xdb|\xcf\x1cHB\xc8\xa3Qo{\xc5|\xa5z\x0e\x0f\xdee\xc2>\xb6\xfe\xeaZ~\xa3\x15\x16l\x00']}, &(0x7f0000000b80)={[&(0x7f0000000800)='.-\\:!\x00\x00\x00\x00\x00y\xa5\x91\x9d:)\x0f\x9d/\xf8\f\xad\xdb|\xcf\x1cHB\xc8\xa3Qo{\xc5|\xa5z\x0e\x0f\xdee\xc2>\xb6\xfe\xeaZ~\xa3\x15\x16l\x00\x00\x00\x00\x00', &(0x7f00000000c0)='-\xf3\x00']}) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) syz_emit_ethernet(0xb6, &(0x7f0000000ac0)=ANY=[@ANYBLOB="0180c20000020180c200000388a81100810025008847000a05000000000000000000000000000000000000000000000000000000000000000000000001000e489ef9fceb1f24f1b777e21fad84a10a8207050019ac742d5d8d69dd44effb5ba93fadb4d0bbc9e7b8237b5ee964bcdb65fb5e04bf8776c7b28549caeeba0b6df8c9c1be7f69b4397c3860b81e56eaeef1f35ca914684bcddc02880b653f973c6a1d40fd51d6ddd93ed419f961047ef297b694a0556015"], &(0x7f0000000740)={0x0, 0x2, [0x129, 0x3fa, 0xfed, 0x100]}) 2.107712777s ago: executing program 6 (id=5891): r0 = msgget$private(0x0, 0x1c0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000258f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xd6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x2, 0x60b924, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, {0x2}, {0x5, 0xb}, {0x6, 0xfff4}}}, 0x24}, 0x1, 0x0, 0x0, 0x2400c0e0}, 0x20000091) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x5) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x400000000003, 0x7ffff, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) socket$inet6_udp(0xa, 0x2, 0x0) r2 = io_uring_setup(0x41d1, &(0x7f0000000140)) rt_sigsuspend(&(0x7f00000000c0)={[0x27ccfee7]}, 0x8) close_range(r2, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) creat(&(0x7f0000000000)='./file0\x00', 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) io_setup(0xb0, &(0x7f0000000200)) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x64c546c48307211d) r4 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x4, 0x4, 0x7}, 0x48) ioctl$VIDIOC_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000340)={0x0, @bt={0x9, 0x4, 0x1, 0x0, 0x799, 0x5, 0x10, 0x9, 0x9, 0xfffffff2, 0x6, 0x7, 0xfffffffe, 0xb, 0x4, 0x7, {0x80000001, 0xcfd6}, 0x3, 0x1}}) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={r5, &(0x7f0000000080)}, 0x20) ioctl$VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000000)={0xf0f03c, 0x1}) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r6, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCXONC(r6, 0x540a, 0x0) ioctl$int_in(r6, 0x5452, &(0x7f0000000040)=0x7) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000340)=0x5) ioctl$TCXONC(r6, 0x540a, 0x1) syz_open_dev$video4linux(&(0x7f0000000280), 0x2, 0x101000) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000002e00090027097000000000220400000008000c"], 0x28}, 0x1, 0x0, 0x0, 0x42804}, 0x0) 2.105619279s ago: executing program 3 (id=5892): r0 = socket(0x2b, 0x1, 0x2) (async) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_int(r1, &(0x7f0000000540), 0xfffffdd8) (async) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0xfffffce2) (async, rerun: 64) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async, rerun: 64) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="5c00000010003df600"/20, @ANYRES32=0x0, @ANYBLOB="4980020009d000003c0012800b000100697036746e6c00002c00028014000200fff7ff0000000000000000000000000114000300ff"], 0x5c}}, 0x840) (async) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r5, &(0x7f0000008380)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000002180)={0x50, 0x0, r6, {0x7, 0x27, 0x5, 0x1dd880, 0x1, 0x89, 0x0, 0x4, 0x0, 0x0, 0x80, 0x2404}}, 0x50) (async) read$FUSE(r5, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_IOCTL(r5, &(0x7f0000002140)={0x20, 0x0, r9, {0x403, 0x4, 0x8, 0xfff}}, 0x20) (async, rerun: 32) syz_fuse_handle_req(r5, &(0x7f0000004340)="265ed300624cee917954148609d0f2ac52561da46fe5c8ce8b3d649d8b59dfb0c633a2151990de893de399d507986121aa114fd87163065d2988807d3e0953e6b084d8b607280f9207193bb76a79bb6d4f638d070435bddb76667d5dee6329e71b2c9befbb22bbde0c1b6da63b845f2c28d2c5f4deb07b4ae015fc576702112f75a755e76b6dc450719f63cd1939961e4c895f9054760c61f933bf74d185520f9aebaf3ab397a2089640ec41ab5cfe6c828b53c4cc544f9812034c719e712532763eff6e69ad7cc4d2f29f97ccce18f298ce417251430929d422e21cac05093609d97896d0beb7d4cce9f1975f01e7dd29ea061a868bb6607b7cf88a2e33dd5c5db31cbead98e06c2c7add9012b0483fe662532c81ab1a1ca8f20f1cd9020e06c2bdade3f311d08b47503b5b63b279a9be019006e6929670f53d5688c194e9f046d2322d71bc26245e698cd44d655c59b2e0ff43771a386abc38cd6e493e0a475ef525fa78671fd9954e7df71a3b7c7ed90379dffa4fd76f0367eca11c1d8de813979951eccc8c93b4f9fdb4785c0a9d207e65742bdd358e9dfbf29203c36b91fdd78db55b53ad1e713e32fc1f47bf3390f3db8dfbd514b4b31095c818e18b63ebad5cc3b406557f3a9380c5065ab11c64522b1752b2296bb00b7750ab82704ba197f26ab76e35da02ae87d25669d54d212aa680b579773c889902782d1c8067b16ff957bfa70cd8af4c366c1629e871cfb033d46c0d308c3ff5072fd8e23ee02986a128051b8e6dbaa2bc46bdc8772d923f2906eef68015bdb4cd66a2525269a91cbd7336c930c08190a8606d762c768d164d05eea38d63e99e1fab83ce2683b885e1619065acb1bed0bfd63e3cea5c9d7c9994df4036aa17f9eb0850f9eb42b17b19926fd9d814529c3cf4397e3f38f9626f0bb4f229b51c35773cbecc42ba22f8346c9c3a6f3ca7d8b25d0bbf30baf48bde92ea192e2484ef9b2160492edb5f2ce296b0b6b420d020b7d14d780db436b1a23b733051369536eae7c7148927c3ba3a968516039b0b14d9918a41a1bdd5002847e1c3d02f0dc2235857a9797038d164591757820e7d74dbadd42b8903f20434c6ac0f401fdbfcbed5dd3c5b5fb0ce1f9c81e8d1037fde8dd3fef1d5d7af6af8f36c0f4462909dbf694cc6fe80070bd5fac5a5ca4dffae4b2c67892f7c53af3644ffec29ab3d791bd7934ad38929a9d5fb9ecf10b9dec62e315ccb0e0de60bb1620daa8154a4cdec98d94d42ac1a4b5f8da6afcb7dfb53544fbbcaa3aa444182ff25064ace51a825fe89236e850a2c90e1c7db17871ea809c4a11a26f49b213cab87d4a42b747546fb9b15068faf1a8556f909f2c47202e7b65cddc708ded90bdde68725b787bdc2d4eeda60204bd0028f07ffc3052f93eb6343d1b2a9a5292e6574baa4a096fda6dd54f6d39e9462b6839b8ee2426e3fbf42a016dc0963145e602f2b0c351f123df48f608f74b04fc7e9cd018e7ab25bc1c12f8f58c0b2dce5714faa54820ef72f38566e3d776ea2d5b061a2e94710176f15d2221420abad8b8b733de253e602277848e7f1e0eb4d07f5eb0cc4d9f874e632007cbca23a5d7e4109cf5c4fafe5f607149bac37938734b77d9b183cf76014aa61507bd4eb44524e8326c58932c8b9f6a10e334cc602b5b8c956c7cb5ffa099274b599fc9c58327f85553e00263e548c93c89edf7a7c83cc10348662fc344c85378572a40b49ae65972fb40abd5e0a38af48207983f86c7bb6bf9b7853c4b1fb522d135a83bbdbb78130b4df3aa7cfa930868cd5a2d995ca9fe4f64c79485ab19d85b0c82a72f4a09ccab267320a61208ccef13c3546ab0f16e34cdc56d6e48a6d9c14c626528a3b191e3723b19d4388d5b9b61c7aec726b8752455f96e888ba7af82c127796e9b67432d1f60a3470c7bf4b924cf10f06a3e3f64c60c7c2b0fba4d1ebe4e52014b4052c2ba0d5b649c46e5cdc6c7159faff2adad2db2d3db9f4f9e9735ba28b7aa1c6c2fea9dab6c9617160d182dfc13e18f44e73c4377df42080d08a87fcfd46b4a4f30205457ad19ddd473fc3a67153d04e960f1dc7556fb158a1d584eb2bde917792892a30e9cd25d37a318cf06bd6541463adaf5d12adc50252f364ba05f89182018ded2179c23a1fc0b31d87139da39298b8d387446c70c4577a27f6df841d9f43106bc1bf44f5c7a41460e2afc9eea98f8e256919c0befd53d7d015412391963c9ad39a19aad265cdbd609628e1913adc2467b69c00865a88635c46a851e7252cf3dc5c3cc5dcb04e97c0742d1a844556744036c97710dd9b55f661506f36cfef2c6b7305b63f5c33469b33ad09e1b593a7ddfc97777954c71c8e4857ca49aa7e5de0d25d760f633660e1fd783cdc43b00a0ec149cc9c8385807c2f6b4cb255d6a15ac75ef63d0871b176d503f332c069ccfa7a2bacd11999ea792024b35c9faae5bf02bd5c844d04d9680c1fe35c2d90ce808b45932e754e4e1dd142ba5a7bd9ecdf7717094ed4359eba666fbdc1e849ccede72b0b37f0b8bc4f76b99222f8d199de11dbd0ff396236f4a37aab955126a60c9f0d457c7a394920aa9014611e5d994c8373516f061dcc5ac881bdda5132b5ee984b15fd007828401c72df63c2efbc5f0e8545310ce65d0635dc73f0cb1c796c24b7ee62616116c13369ceb74ff8bda64a98e903dfcfd88b3c0c5f86191bcc8342578f23dc70fa6ceebde822ffedb7587a3f204d330be4977bbbc2529cf0ddf4c85b17f1088f48d878e72fb00e15a6144231108be816d2718c360e2fa8a236691c775a9a0ef3559696f5b8f85eec0aa2b1c4f01a2df6065bd31b23dd37718613fcbbb1566dc0607bf487c1a91f2b39a83755a6048e46d02ede0f5aaea8ee9e245d6c37891f5ebc9bb7ad2462b4ea4f1167b8c8e97e2f7b62c1c98ae0b808ee6033818d28a00ee72120820b2227da50d7f66d3318f6acc6398c81e529c5cb0df75e303954c2fa828760c1133fdbdf1fd7675b8634bdb496b054b91672fc7ac344a37bf60988870d54e5baf91334db883b2c69acb50676c2f871fd577747dd1d26c00a56e757b6a0edcd609ef5c3b3ef669ced2af5f19ad19194d04f23ff23546df47bc67ad596672a40cca2e87f8fcc3a318e37c73f9f50bd06926c74078356ddddba42ee273e0c33c2fc6cdd1fd50daa6ed3b7b6ce558f89449fca6d8b05c90639283d44e14a854eb29d65ce5b9552597072cb148ccea15ef430630559293afaf204f22a890fc3009a2bc1b0844a49668354a940fbd0d5919faadfe5cb80e4c93d138ae28269a99c877426298b9ec7f01e9005da2d7977f34103de38b2f65bdc1c899ba96745ca977c46db6003b1ab840e677f0d8960b4e9f71e82fb89a8cc0702739276ec7a040c69e6dc0e439658d420737a2f6cbe7cb1ce904f4a39dbe8284971e527ef50976c89855f75d5e129a09a117a5c042411696f8a3bf02879a287b2b1ea2a6e1adaed0374341113bb8363f33aacd361339c9c06b4bd6e04f8fbf1f120f1992856608426d44abb6cc429a075c7bd22bdffc9493f218286f8eb585001fdf79327c8c17d462cc2ca5b435d444659767150c6e1000a74f001be398a1bb48863d3a4d4a71a4623e1721b003d7d2c038fdb405b814f37a95a6a53bbb365dddeefb83451676c7b57a23dd1d523958e2e2eb8d889c47cb7aa515e9b11b2c3accfe6739a8ef56b7a02adfd63ec9f9232c38e2aef3773a9a7d6f4844ea1d609f146f19e6c46fb6b961b8037e5d9ba34c0ca5c10a668ddc5d6f4c7951732f68c56ad9c1b3e53e09d33d9b377258ab2de957c8adcd4b68923ed6eaf2441e2d888d1d4653c5686ab712a82ca16cf475009e238e5a8df04ca2fa719e6308bd60026deea44355a6e878157ffc7f14a8d34275a9ed5f810ea4ed1827e4c91998aebe9aacbae14d95eed96a9de17463ae852f53d2bf3e92df959564e9550c1eeb0b052c00cd44c07b7f021cdad5c70908a74bca9ec4fa372f491aeadb297e8f571de1b376ef1b7194d8e434ba3867940606521399595be0ec4daab0b45c42e439adc5cbecc7310025ed8761a1d78adf3ee6b223577e473423cece99cde0807269de6929624ed1739b2380ed4688779ce9808595e9b87ed6f42d89b1676014cb8c9a3f7484aacdf794f056439fd1e5233de23141d5b87ca95b54721a01212666e8067cf683025f1219f4d0569c8cfb2d6ed67e7f051e2ef9d0b70a390ac7d53bf9c4e537c74afd223e311341583282ac6e4ab209a591ab0f4d7205512a74a01cd33b57d993fc5c548a757d757e1f32272c22b86fb2428b338eac75c21e4ce3fbfdc6f04a62856610308e65dca82a7637d7113a48c6ce0357fa454f6d58a1b61698c7b65dc9b8678f9d279b883f76e04ad1f1154e2f490afb7e397ce65ce297f6599b0671f3129bc87cf4221d8ce101f71a1df23b6343dc3d6e35ee2eb0a1e37e67e091fab994b8948e956320d7e512308641a129526ff2e73ba026fb72fd3da3482fde5374d54bc3ed6ae53f2b9b4d222db5f3126760285683ecbbd0f8b5bb964e5a1cfe404ce21588a21c2244e0f76520e139992f65a15299548f4dc5e4d1e54acf7592ee1f04e36987606bf10e4632c79d00e1ed985553b00a8e828dd193f5cbd7101cd36745804d474532fc51e708c7f124bf9231b9a7bd1ca4446060535054b4bfd5a61607f3ae45cf1deebfb9d8710e5523c8cd03565cd378e77b1b3323a7d97f28fd1a13aa40626abf69d7b66ee9db3d604b293966347a4fb36d089078f9808bc209109690ea47941ad7c141767b78eee93131a57b5e12690b7288ffecf22f39f308a80457ac6052b8f477bafc15a3ab30cfa3cbd7dda9803e5a5664694e77f528087de197c02fd4d133ea9133b9aa4377bcc0b62801982b999b6e7f76dff371dfd998704e340b4e5da88384fa8cf08d747c977105e4574bda02c56361338a0a9bd800e94c861a31d5d64d71cb65c0655f5b5cf5f900e348d7cc05d9c2dcf711859cbb8ffa54065e2e5462f4c1d80d28e5d5400090d4bf61565422b8df0f34f7a7c1e153d39c9d7340d15b8db226d323b4e3c50fd8aaa87ec9e5c3fbb3ad66462c6ec5ff31877024d119fdb7a16e69d324ca9819512c45c3852409f4899a41a4d16ca77dc3dba1ffbdc2af2fccaba1f04e048444154d5019a267bbcd440d7bb3516e9741e5f9c3ef1135e8c0d70e3c7800c10c000e9cfbddbb5aba9e43b3dc0164f92733590f6921bfb53aa1466a53b6146113795fc13d1621b3cbe0eadec02c469a4899232c23a5a88a9d659984c22ee523b5c5de84223a0f0f9bf1fcdb1efb4709252c0fab477823bf2505f9a2e4a36d0bdae824ecad15a4c313f0c9eb4423ea249710e353e61264630927f778c01978f5b50213d71fd746e40009432bf50b7932b7659942f0d1b6375b87d9b038ce271d7333ed282beb3925a330d881ac7611d3e8b869601b146fd82c06b340ae4823c4c429af4c15f2a2a2bdf383788e86b68c001866a86188cfd71b02bc8abef13703264f3ad08ff6602e15ff84715b7796541c87e26b0c6e086211943e52629f8c1e71fdaec972ab5a2c690c78b08d65651ae4b64070f7bb37931119881ef14c4c8e228d67d34f1c9eb855b39ad6e615bf24f7b453a76547edf2fa025c53bda95d783fb3f735852f28318a8a67c8ceb5279d380d724ee6eb2e76ba8807a0865fcafac50d09a92b85d27a238e4461a80cbbeaed62a844c17e498f6457aa642ebbd0aaeabf127b8f8fbdc2e28ff7fafaafe3016603461f256d7fca690a8643b9697800b3cd59e09ecae48baabccb63cad4a627f6bfba0759f1c186977e9698e6fbc16ec9d1c95ca8e2e075a1eed3ba6223e4df44be7da59a444715a78fdb90a1645c069ca0fd1609b7dce29ffa11f17266c32856f9ebc853c0c7cbbbd82667a5106b5b63f5328ae9d653dc5dd53194988f0e421db3851eee53c557e40a7ad293a22ffd3445d296347cef4187aab3c9c3c2a8e40be66919c30cef3de8125f3cc7342a43791cf1b3b117af99b04e0fd8170f17f4ba25bdcb24965501025188a430df86239d369a6e2c9245e914fe4be3a1eb48e22e2e1c72caeb4b0d1b69e8a817cc7ddf644d33e56ae32215604f267a80754619440ddb3621280a4b388c14ca19dfd398d744977849247d0bbc55d5a54ef062ad3cb3689168b28a0981946fa01737e081101b9c571d0ec4e5775159daccc110588fbd35bf6f0d55f99da967a3d3db1999e158958d7ce128571efaabc09c1aa7137c35f3edf7cfff386a79ba5acfa974366c442207a39ce67afc8469c2ddc6f45413dd654d9f59ae7fd31115dfeccc43c27bbcffab119106735b7782f9694a3e30159aee341f04540a54443562cafad5cf3336c6e900332b053d7c93bab45d8846cb5b880e11b979c13dfea06267932d89e258ef30768ec2ce1d7b020609a5ea6ad9eda78219542567029d1d4d2ffe797b7f95f16b8f599390b0b630decdc6e17593b7e4992d48e62c27cca2e423eded85cd4b436065496984d59044d38f317d0ba649837e5377ab3793c3f66c0509eb37ba365c94273b3cad97c5f607bcd312cdf3c8605dd5569e293d21c588969d7bfb17a228b53f2cd0387995945253c6ec8fad3777cafafcbb9151a54e653a142b5ad0c62682b8ec4b99f525dd853f75c17ae6264b7bf975138de9932d40be9f35ce25dd2a1e307fcf506eb6db8803c19b9880f96299ef58a6bdf32708346db540dae112b0f7ebfbe6f3f46635b7d98e232cc91eff2aa9c7fed6dd53d448db2fb8fc4c0dd661d47585c7966f9338f165e53b3d7777dd844be6a6c8885d95b839a32ea0bc83ec0ef8a5bd11b666d11fd8e27561d8afc4686e978ba31ff2f812f81a6a82956b95a0cce2966a37a4b9e33bd297ab8b1667f6ca5a6be65e4485a305651a4230b7a010a960b035dfb7a8474dec1965c6a9177f62484817807e0dc43ab2770b27adcb40f76c0e78639c55fdecb6c008f2e859ed496818b48e5fbe32376fb3c434afc0ff780867e7374a8d659cc1580e49678f4542e5cd3e54d5f4bd1ff6d186827d588ace5a8adf437dea11def7b57b6b8c992b86695d09c65aaf532d6b8cf12686df8b07bfb5a8aef7944f04c8bd00d500b8b7eb24516dbec0f5514dc48f70eb26a2b78042fb6b4726a20fcf73ccc9a14b75bb82e558e8bc4f7ff5453850f83d12896e9abf322e5b81b6efe679c8c98ee092e06302f9f1472931dbe5a815ac38b1bff79363c4f846caa755ab3ed5b60a938d5f1a9e10950aaa0c5d10c5c4f09abb8ce6b98867e6f8644e3b9d603f07f9c2d1044600635d432ce796b0b96baf572238711302f8fe486f3bd4b5a0463eefb0cb04271393cb1b47b033db62840b4c535da356de3db90961deefbf43060d57b303489aaf9c3bed935f8750d47b8e6aed8eba71f08d93246c92c7cfddea99f6e052bf18e787aca4cc04779dda1f67a420cbb5fbcee2f2ae28be664fad18b478e171dc3699116ae71421b86a5fa9732767c994f38519874b33f07b12b8baa5bc672017cb1e2c8e8897e541358da9a9e3bf8bf57ad3541fb434534190ddb95a5ad701e20548b269268fef7c20c15adb8a86dc8ed756f760370ef2bfff1261349b535b77f67a4118dc8f95c70e977ae39c7c77f2d4e2248028439b72325c033c68684fc8dd6050f0449e2c87debc00fb8bd5d1d9b9f31219b4243cb089362b345f2b9aa7089eb618e1407223ef1022dbaa856197f6cd8dcb7fc53afc16731e0f21b45a17fdc2c49bfd9f14e454c98536c507c3aca95ad57be395ea9d737a4a3237825cf102ca080e013230cd7a46e91237b2214a2b175ffb390ac9f12e5dd3124ffe1e152e148371425c6ae5c603715d5439e0f9e49e8048b56489ce79c26df2dab6ad0c8ac0b37e5d4fe10061f44f3d2314e1ee6245ed600c62a9c448faf905267cdb125ed7dd2a7a539770bd1ddeefd13a521991cae16160cadef434edc23fec333ec7b328c4a6213c5040848e835c6b3e0aebcae1d5884f7e8f654adb512c2f0227fae83ddae0dfa848e0ba9344404ef1d6da880f8eac71fb7e02f197859fdc1ec634dca3f46932e5f022689ed253e60f232e1acd96fce398961d62c4d63d7f37d48c26175298658c224bc1db73b8baaeab139065a9bd004bcaa24493c17f09961c09bd0cb828a8cb3cab56df2991646ff370040bc8507d3d16e66dc075c8d302c6586dbee27b32f93ea563a2692f65ada174e35bcd8cd3214c1a38cc00c90067828b9980da7dec04fbeaa2e550c8d06358ab446853e7daf007b0de5c9e361d75c40ad5f9f2923c10ea479e5852ad35f232d6d141ca7b4328c9d72dc5c247d1431688b2a325d88582733953ee50f997a5d8324cdcb01fda11a773093f344fb38b55c5f9e7706e1024cfb4f2e47544ebbaf792de3c4d8f1522e9d9ce73fdaf1740d3dc134a78b53c6167aec45c730016b8ad9d9bc4042b6835a5ff34c9d36da7418719a86be6637c896fa4a4eda862a9e73ab97e5a977aebf0fe64a7d507dc210a677873e155fe4b2cc3a96e558f4d54db6fc5fcdf166c4cd58bb5d1721378ccff170c0eba14b990ef610606909c205e34aabd15eb7a60406df5451871b18ae3cfb5af37b7f7bb2be80590d3be02c5d0c4143be66efcbe13c6927f54ed27884b3d6a73e90516552a0bbd81f7c76ed5f84ecfef2225e52b9cf6021895716aa29b540750eb64b31cd7be1e9fdaaf132681b23cfb2742fbeb4d1f40fd0bb1d13ba044b252f2f04b0d5fcb121977486c5754a569b81be7577cc0c9e918affbf9abc1b6dd567aab66b7e2aca396e79d53ced9695a65a704bbd9700b55ac8c968c5f43557060c6507a3557c8762a7dc8263eaba22d51fb7df435e20beeaa700609d774d1e212e7493b672324e1a907fc1546cdf7d4ff88029dd7e9c92fc530e3f55b6c1b103c69f14859524d07e454a3c5f987e01d21d9a5a6f842370cc3dadcde1b5822b0d0c47883dfee62b9b7209c3a7c399ed34604e164f806e68a5a24a53d0c5beccdc1389e87a5894061f95e7e8e8bf84ead6e7fb155938230f22b426d9041e8bea72dae14911824db9b65bb0ea0d0404cc8fabcb8f1863e13c8475beb68138e043dd67bf1b0d7e038f9f3d25c8ab1a52173af6b46d8260d677bf066058e89dd18b03fa20e79938dab01876102992f9df49dbe983526b9e0bc83c15cb9d52511eff20d18dcdd316bf334b98aed9024051b87bd3d767054470f4b7f59a207e9b9f17827497bec146aa1b0d18ef54ae5927c64b05f34c8508a0cfea02cf59b3c97a1d3e83a00b7ca495167f411b3f41c1409a8ac007e1cb08ef83c4cbe38117d4b1ef9b58dc0092371b1dbb1a1834f780282dc2f3b6bf36fd0dcc7619c28785b76910757376adfb014ca9ff8bfa3e291e7cba2caa05efad48b1506337b61f74b7b0f4abc18846af682f34708bbee9dee76837bcd192876d1861a20b3e77c9984aff5ebf0a2a4741d6e43b4ac056ea138e79230144578bfd4ae82b84ed109e4d5ff0f955ca481ac0231cae963b7d4db76d89d07e265973a16899fb3a6f8dba53473954589134b520e680f4c5e707fd056e75edb194004b81a40bce0407b6c294078b77e8abd8873c01f6918b2c7c6095c9f23b9841e90e8acde53ba60cd78911cac6fc2ef6bb5fcbb0d3da3e63d70b47495f2177afce5da37c59efde49aae133761847a6f0c8aa374790522ba04d466bd1f7860f53371f5eb2f506c5bc7bb6ab449e4a5c37866c31684b285cf5da17f36434b809f69c542c989449fd0eca50f5eacf8080cbbe8b84d1183095ae7416b8f2b98311451cf7cad2d8fb721e589f9e611376430359cf855444fd1415011e8c313834bf0e217ac7b03f8add941427b0d15b56378b2cd1e3925008c16cd5f95dd149c7e050e0a153e4333e63bd14816b4357fbaa5f706af6ee225057eb599bbe5714c9ff23204d1902230569839d8836e6b2525570b00eca8534aa0c29cf62dce61ec66d9c195be81279b698ec8565fd6754f636b9288247657efdb2b6356a82f014a1e6b24926fdd67810ef0a01295c664980f2057ca17362b0a5888c23ac21842f931a7d57cdeea73c4848c6c1cce20be979faa611f86509ce031fb4102a0fd30bea4f4f840c75d238362a2c4f8de16e81733ca90119f8c1ae148b184d0b113685594088ad8a947455dcfb782f8beb69e255dbed46ae2ee6f094168a52501fc68ed669fac390cd9320ba16d69c86d6f642aea836bb1d7c14593f15d8d33d452d8c87003d7ada1995e2b43f788b4ab00ec6f58869968f098218a3ca21a6f369d47a14cd3de7de8357902e8ecfb5f2e6beb5d3d32a6a6224fe3d6dc5c06eb117af0ab396acfcae58b2b1b9981cc71cc1cde07491b6b6d97e04c10ff216393dd28737d31c8f2cc9ebe161b96d407088b2bc456c331b676a0d7dca3df7f7080697d154fa14f351fd467e30b4ac3f4eb7b4adfb173ff20594cfe539c775c4275795d54782bae4b59cc64a45740ff73d21f5d6cf39e10bae4fbc48ac7799023796d7408ff9220a07a49552b18c5e35f98082297d2b4a0932e4d224c6807d49bf9b5de2eff1a8130da56124ecb5509241fe95be11eb0df066f5f819bc7db0f1ee90ea0aaf4ca4458ae7b5105d574de028c82714ad0d53bfc8ffab31c57762b38e433d6991d83ba5616162e27e8ac122c145547c4abe18260c6d32c755a44390ed41241ef375e1f5a4311263881a02dae71f837206413fc37ddf40a9bb72256d1625ee0b94c1c5715809bdb24224cd0698a5802a83e2328dfa22b80e31b9a5c7dc2fe0c68545905368806c308334c194803eed4a24a96bc5021b837a293dde7ba22b9ed27369b3584deda6489bd1b3fa2925beeacb7d3be367fd014547f82b4561c0120978b6ec2b32ac2634589b819a2c94fd20c081fe9eac7b0745f73a1981e21b05b1bd97a9a1d7218c0e6d0e473e15a1a7465cea98ba0c72af2f270b6a61bc51d1a0a9603b91fcdcc7314fe7aa007ecffe6c7eebf5a65e82a96325e86f9aec39feac6eee9501495c74000ec1f0923e79ad1fbf6dc581539047537794151473e00be353b3b8dbb6da0053826c7bdf16c43867cc9cab9d1220466ca29ef2d6172c4c0ff9067eba9d9775225efaeab1b8c634b4001d2a5c01628bd5550c4573fa017afa3f501f1a6b7d7a483dc0885ab9c2ee959a596ffbb68c7ea99e48f4304697edf7fdba5567735ace3433c15aa59863f87e4605206a31ccf268588de7ed37fcacf6bde80c68ad53de63feb4399cce137c5776abd15395402af07250938aa1c466511bd5754f9cf2f938faa37a683996c801c8fc8aae36a706c5d6e2d36e96ab77eec817ce4d56d2bcf5a43702a883b127a1da8b6ceae1b82573a9e9e9e297560f8d65a1f5fd4bf3d45af0841e691b6e637bd8b9f7c8e51b813b818b0baf2d9c5c9d116781d327b4b43309c7265612089f1dce60a41fd0aff4bcd1335d696f01cee7b371e13584c731a3c3ef7e1b9f3f41f91c4dc647b948c93a99c1ae79f5f530c68c3cc28bbd", 0x2000, &(0x7f0000003840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002440)={0x78, 0x0, 0x7, {0x8, 0x2, 0x0, {0xfffffffffffffffc, 0x0, 0x3, 0x8, 0x2000000805, 0xffffffffffffffff, 0x800, 0x50, 0x0, 0x0, 0xbca4, r7, r8, 0x5, 0x9}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (rerun: 32) r10 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r10}, 0x2c, {'rootmode', 0x3d, 0x4000}}) (async) read$FUSE(r10, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r10, &(0x7f0000000080)={0x50, 0x0, r11, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50) (async) syz_fuse_handle_req(r10, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_fuse_handle_req(r10, &(0x7f000000a300)="99529ca7d265e2dba44891e35e7d5dab7921b730436ecd4e999a25bcf86a25f8f029c0dd50373e90b7cf7779b12ecd4423c5b13cfac186975cd723976f3c747612913029d42517c189364bc59d8ebad53ed1b86f8f66c99b1f9b5b40d78cef1f14f81815d53bdca7fef40607358db69eb8c0b1f6b0942ab4b1ee7ca8deb4eddef06381a3d1c52d6147fc5109c7c607591497a6b2477f60cc881d3219c96bffb34aadec3fa97250713cce17cd536721bf9c40a019531ed0bbad139e26a3d4d39b68ab1bf37cb1a4bd197a8789cb1940cd86d9e56713bc36c7cffd07a311f5bc2e91f16d152eb480645e85ec9b3bf09c7fa140dced0afd55d7b99e90a96e7748e2d0dc09672ac199ce529e631efe1783769819c182ca106f6184bcbb387ed246c43562d74c36ac3a7ec2f0e11f70bad0007c03bb9c0d2dacc2148cce4a4aea327c7319016ad146b52bfae0357f9e892e9bec61a13c93551cfa3d4f4bfa7585c93bb0bef01a9114f3dc54179cf9a57fe88f5cff3403e33c9d09e3e9c2e10f1f16894e1b59e3cad47c1f202cf7b756f2851fc96d09459c9a8d34c19e6a3525cd5001aac5181f57286d0e1e88ce5092c7c76b6abdaebf2c499aa47587b48eb12a2b72548c190b0324ebedb81a63333b6edb25550f859c5ccc404a944ff7f61af8800888192fbd4c8e0e417d1d181b4b335a6f52e0a7dae18397e81e3f747cab7be902ed903bdd6a622f178f9b4244718ee1206237257374d2fd1466ab6135ef7ef4a114ae170eafe9cd78cf9ffc36974cbc4b8003072bed78765a0b9f1240f24dec6a9e46db9bb498d40f727c0cbf8f4a6a49539bd0805caf65d80130d7fb60a69dc7ed890874a17530c042cf33a977d331435d68ef33885f638c777ad49564ca77d8b81ddd853a21cd55d95b627310dd633a4f005853a5506cd8f744c367f3cb6998b0fa97de6bb35b166b0c6408c4e0a38ed26235a88520c38ca97ac8a6dc81e6dc6483d383fa09f198997b8eea1c68c9e3320683c9a02dd89ddc34c241e7294ccc88d6b35762892e8746e558bfbc2251949f2ecb763dad5b975eaf36e2864be6a41d3e20514d32f5d4b6350dc7e3cc3a85428ea98efb3b1edc2a2ec1e618452949cc7e2ba1251990168fee342d4f304b7a7af9162bcbe6b09c75d7420d2c547b4e3cee1836df6eddd5dff73a4e308fcd8eaa7a33e6980a6f8ead03257a37d72d3b265d02fa42f57db877654ed513e31c35e1af0bd28511d6b57cfe07b27cbe9767a534b426dfc3dd257d5899444f34cbf4dc74b9eab2e7e3e1e1a8a6ac5e4359d653506b299a5b7c67b92dc462f1216655f952362a3387ad9966b606d98e8d1b544dc27dc6bc78fd18a446736e25c51143db9886b6c09812d5825b5d9e0932f218ff8bea4d9e1c4df9c9d4eb19336d48163a921c4ff1f0beef26b01b7e8c0d23fb59b84e229eaabb791f2cffc9aa4db75162cbfe4c9ae8d76a5b6bc4bff20e3f8f125b9aadb3e728d7f78d61fd55f46b7f59511b876e6563256686e44f25cf38d393a9b762bada272eba8df28e4086c4cd2fe3c9fab97756fb145373e6ca1991bb1ee6589e49c821ff29f047970819f88f724bd077cd3f0ae463d99b3e53078431e3f9bebabc5289a65479359efe3909186aac60a29f561de8c590988c913c9e693ab8106e8287f6565eee6735f7c88cad7124d1c8d9ff347e97912824088ee954de01c6d8a06447f06899607eadbfd078bc3df506252005749378dbd7399c9eca60b81dc0d88dedec31e5cf6e7b6d6d411958df8f9e0bf4443e8d3bdfe49d05f811d17088024d0629fc8ab8e05e309bf55e8e60d342623765f4e8d2dc4a90291cd4354ff9568c8170e6ea56e028bcf2719595253adb8c84050bb9ce4927a1c1f4560da87d109ceda90bbe45a1717763d8025f1ff40f157185ddf17079da272ae10c4f34162caf4b0d31221a57b3059fd449c87554d968a54b2eebd760dc3263c40d9eedf5905d5699d29706ea6e9e81ff2bf92489a06deffe7e978661f37a88450783e23f107c2bfce000dfc91c5fca49e46d9ea978f215a45984699f0d2503b30a741e13be56b7abe3e5663c0825c3cb04ead44ce97719c4ee6f4cdd3c452775ad7163d5c9034583cc2dbc2b0c04917a3e1aa3d0a8bb6fcf94d7922eb1d543c09185827aeb1b72ae7103ef2c014af2ff4b47fca40fb0e66ddf0264476d7a84e9b8dc551d4c407bdbac6757f7a25bd404b45bec1091696203cc438860131ad5f2fd80e3c45629864dd9f7d302b66fb8fb86735c9a6dcf8b135a273dd2ae9473bc905081be9fcb8f91b1ddba1ac692798dac0b9ccffe0319a779f5e10c65f294b22fe475283b023f9cd890e92c5447b1bc1528255c5af383bc1fb6e72cb9a67215a9e25cde63c89baa8c7125c7e8b748b728d07d9cb66778404f54e6a9e3ae1ae82f3d0ce77199f23f94a01b71b805b476fedbebeb52c83a1b857f23ba438c56a6c4c2a5909f721e6e3d240e4a16455e92220d13022ce7ec0b1365ba4e67aa6ecb324f8826579e12cebdfc0d8af63e83b5e5624d5b791f99093f9a27f7baea9fd10111209c0857a04f07408111063ef34026aee27a3d51b40e53883f9094402534bdd21cc49d7f5593e99cb204cd805bee4add0f82cf4b6dc5da14d6b79fbc68c9ccf7fb5fe774f8879e13079b024a8ad24bf123c420d630837a84ba05abf0ae4dc3fc04f25c7f74ff91d0d609c958642a48551e51b5c0074a56a7da10ce153b08cabea636f8489d8e7b655758a41d7f7474c9d76bf4d54d789bfceaffef139854065de6a94b0275a9626aab99ae838364b1a491e55017e4212b6b01f7a41bc9c215ecd17c49a8610db28c699259c58b81a0e84c45fd8e719c05c48501c49e8a6515044d247f58e4cd0bf22fd6ae31f45339d1f801196d426c52269b1aaffaf18e2a03760bb231cb7cefa6d72f1d7eb6a3bbd65d0914221b8fbf531dbd562eb4a1b28983ac7d83d4813b10b34c9525ba644f61a2c4800d4fe96a7bca63da1041ed73cc57fb9d42f9dfc8ca41d80292bbb311c89b0a0fcee1d88a025a7416863342aea00e6f049cb2ddebd17c5c617ff562a8af0c965cbe8341431a30ea239e4a62aa2b19757a3b0de04229a9907f8610c27b26591405845bf8b5b83706ed18d910c4f68777378366ff565617b19168a04560a32ce5ad64aaef9f4377118c4335b24826cdcde78fb4bdb11498553f56d8dfeb3a482c70cc6580c399b92339cbdb3464fcc7b00e9839fd0d2b8b6db90c56b33593a0048bf7983421f29b1285c81a239045b96a9b0cacd70d6d9853206471f06915efc8d3ec4c50fb13601abc73247a656066fd7b329159b3ce9e3302b4c0d6aec58cb0946a8ee8e7f55f1af604f1edb4d887fa6292dc0ce57705c1a25dc62650c127d11a364b397aefc2fcc3a164bdc53165a461b01de9180c1461b309c75af0911b4cc1b8aa05652b62119c87b4b235c573aa15b1516cddf61efd6a7f8c953fbaaee9c0e800e8f519e1494de850ddb976864088fe0cf90bbc54395078ea2501e8baa84d6807e184105bc2a140b663416496886422643bbf764d406af06e7d086678828defda0b648b25666b7b5ea29e927141740d5be0e61bf25d40b8404ffd3c67bb855b11d4faf82b7b8051615c101c3deb0601a0fa9ecd8b4a95082ccbc8222b0982802dd8430e653d6eea2786dc3a91397135faffdc65a5bae048f5c463b1a6648becce961d39d063d28d1ad6dafcea0b0878379adb16cc0d4cea572abeacd9a168a4fe2e338092b5bc93ecf02ac6ccda03e5b23adf511fdf7a79442093233b79c67d3fdd3c36c96a8f67aa79e4743d99cf963ae6161877f73656eb0314d889f4b8649bbce8a759f90eac6c006197b54b2bbac7c9b237f1e3dc099c62a65481960e6ad697fc66316ac084ba99c60f58bf44ff45f3b2006cbc4196a25f124dfaf247e863a855ef6070deb45219a922dcf2be9bd01c340e1ca5ed7c3ddac9f7a677c5d00610991d21e0751ac8044585b39f3fec5b672a11a9bce32196c2003d01ea50b0f0403e16df188ecbbb74f295f01398363ddfecdb63a49347c912c125670205d7b6be999688df85bb7d5ac12b62b4fdc4eadcc2a9a7897028404f697b007603a0ad588c772952d6670ee870771774ad157c0b9cccd4b2192d835606198ea0c65036ae4e406cdc539ff3aa81fa20b7ab58d6f3abdb69cc1f503d593f7025d2035e7f21db76336efc2843a0dc9bd2eb8794718134ee68fc57d4d2bcc18969d08177f442b87433b48540c661940cf9e2462c53efa310c7e47487deab2ae15b1978ef05aa1e14110943f649d82486f710a39854409e74edcaf06b4a92d3580b9cdabf83c6351657698d3d5af7514f382e75d1c912cded577258603fc9ed002e010747cddf7885d34afc9a84d82696c6660cb5ecafb68b564908fc49c4db6a187d037241a26b1141cf20f2e968a53366db0f60b79cd98cf3c897c50b7b9728e6e7100f99e4d5ed2428dbd285516ca6660777a39b4b2617c1be5b0232d60b9c8099f5daedbf190109439c40b46090985200d6c0501313f3fa4d244864575c275faca47aeff32c7b3e3c59392618562a7c2d4b3af85a37a8847f595352024cb63d3a9085c2a502c6a3248f43c5fc828e636cb634b2d393d853ae2dc9605985cf85c060860a90256c7b574c1e01c320687a2bb0b2d51cc2950c485f2ffa5db0ad7aaf753f543de7f86efb775c6bac2989a33757a28836fd27f9347229a0004bd2e546994c69c678fe5717f613f905d945c072004c3a80e0e54215e19ff9972521890d4e705e429f16fc35fe5a15f2e6b75cd719d38f76b087b62e4b5dcdb35f4baa2bab167150bafb6c69e260ca51004bc826d46b77c3f67eaa08497294868e6d91b7b867e4da62052f4f891677256cfbaf19cf32bad99a7da69d8a66537686f89a58d78c7eeaa99cd38009a1a32582bedc5c718e57b19cd405ae659a89909356a07fcef89384d160fa5ae6683cc379642aea4f0c915f72d679bd521399cb16112f2abdede3001400b4a64d2173e153a68631183679b56b8f389ba889784133453a7e892fd3b092f5040870a3cfd6f982990143e7c0882b4ff4c5d049192d36925a25ae4be441aa30dc7e74398b340c45b52c73ed3b0cd640e3cc9fd4be24e7355f386106f65895f1ee850b2a781d1d1d322ca5a3b0fdb78ce1eda048ece94af25437969c99c58c08f1446ca5541e03987a20fd75283e3e116dc4c9222ab7522e4ccf6da14aef49cac9a6a2cd4aba1c54d49e6da4179a66b84e384cd3da53908579b28c11d525ebdc4dc69074cef8a9ecd3aab98f2858769d656b46141c3a4e69a5ed6c0a732c9ec1fce080eaebf537fa5e17236a44ba9c931f555d193e475ffafd20c53ccbab607c1a15fd06742a64691205eb0d00f7f40e4dd8efb279cf09b2522aac0729a631aacb92d5cfa2ce6bb07385b981890b5916755d5cc3a51c8c36bd2987068cc24fcf73840895469bbb9aff1059601f771afedf0a48d5921103920515b27d7e607951982feba197df8c61600feb3622b9eea13a4db4068728cb98cca76cfae197f6258758490bf41673ee29acd91fd296ec863c646e0ca6a0f0e9de146c663ba13d962964d7c32804fd12a14c1ca7212ad48bdfab469c6570dca562220ecbe7b6b163ed4c9361c5c10bed5c92861b8786ada20a99245d282e4454187ec02adfe354e30647cb10661c85168f7958e3ce69ab48c9455214707a63c9b1167f0845a6bfcce2a96cd53eab430f13cd527f1666290719a47c517cfa22fec2e9916af8aa93c78e567993d7fb8ee60fc4b903b8c67a3658302c5e5f35250c30427e4c055b6c54705bc599861f80b7200d361965ff98c88cc698a2615cadeac4bdfd3d613377cea52d2bbcb7e6b78ac31d4b2c33eaf0b2ed40b963e3cb25c7dfea3ebfe7b4aff2aaaaf184dc80ab649a108e2c830ce7eaea58a263392aa9cd13d7f7bd607dc7c804b19dfa41b3e5a5155201a87311e22062c93896e70f3a5c4b03521300b61cc311ebd5beb9838d0ed207c6bfc99e4392508e95804b10b36024f32e1fe1138e9ee7773f797b2bc6be7416f4e9691ef4c2a8d06af6c8b84bd1e6fd1ba3d3183475ef6c139ccf8dcf37671fbb96a2ab5e0e042f7c4728cf30bcc1a0de28a5024276ceaa194b4926e7f6a97b78bac36e47f832d56a96cd266434d37bcf2c2f57877717d91b1854972f832354acc207a2ee8caace7504e0e6197dd7e64a01c4c67bb2de8acc0cccc6c6bff0b0cbfe345542c5a795dfa48cc0990ab5702574d36494bc44c20f5b324f7c984d986cc8cb40cb2550076d96a069b6688d22171beed2dc5b6ff3ede8fff4c4a9de6d3817357a7ca7d24d87300b4545ebbac8cf7f09ec637a4f4d6bd07673709b6c363a75ccef585610c5f15de7851b5ab53e02a757bfc3caeb9a9a8996beffdc0cfd1201b6cd99cb035584e51a6c15a5d2e17d2f8aa6b41e26809392fac6caed1e02a53dcea8a413203608780dab33315a76eba24d540e4c5b9790420834bc8d4e47bc65ae52a54c0ff308427a8d7aff746aa6589d17514e40fee5d0b3533cf4ad2c5f9d96db9f50bd69ed8c92b860e199a35cf268c66ed13516a3b4b024f62d4b2a656067eece95575bdb4907efc488a9821bc3a9c81dd11b2128b7a01aa7a9ce6e73de3b4e9beced70206f91575baddbcbe5722337953c8016a0f4b62120d776c43b7d1a879b692107954f45acdf8967dcaa994aad4922d4fe093e16c2d0090906f5036af99e50bb09b04e9c9b3b5085abf621297ce203010249cede92e9b66b446b86b43eaaae228dfdd3b4408c12b404bb727f7e969e7da04fc59900112bf8d38af0416dc616e75f167aa1352215f07115a6f4eb6bb5fff6f5c2fc9ab906392036b44090e65fdaf017dc53bc94e0807d679d793df18cc44e6c846d414cef1569530f7692daf91eaaf4ae89fe2522f2c9cf33b6ca508ebcd006bc1a61f0c800553aff9dc7d57200b25ecb83e1e0b8cd29520b63aa649d3f71a62570eee56e03223ddf31f0c04fa686b7f6dd054e7a259d9ba335c2c5b2c508897506c0db7f01878dec1411c33f0af61b81dbcf9ff8bdc0c50044963a79f3ee1462150c6bd03a32dbdfef8d72f0b8b3a395ffb0cc85792e7bc867feb5e312cb64e29e193388e9f173c162f4a1320a6f99ea3795fb77d982605959909a1aa11076fcc779ea6b80ec1bf0edfc2569ec04d15a0bdeebccf3c75393dca5e81663532f8ced12d08e4c2ae6e2954d427c7bf053dc4718f56f453bc88d74045bd2f9747aae9b5298a0de927f1d6b1308f4e1483487f083e71ed09298deb52bb10079b13def7453eb432498069edb5ade70c5c54913684d934a3febf78753ac13300a91f467ff3f6e2f00898f015d08f7739047b321b3eaee5ad8aa7adbf7833f014d8c576a491af9fca6843b327ed513821cb3951b2e67a275225d7af6b382e2f955adaacba5d1fdea2223202dee132b91d5cf381b51da94145255f584a70c5e8d11e06a44afa6599bf3ed0cb61703eba254333af53afac60e54cf6397f9f7302249ab644f0b576c713b15007be1f4f9bb213660bca8a70251472b86669d361ef968f542e81ddbe8f4d2e9cabe8d7bf6a31f14a2cc272963553a424c105e7750437ec5bf316e30ce60b4b0c27ccc1eb27e60f6472fef27654da49905ff9c01b28695310ecd8701aedff25a83da4b7c41995f902bdf249769dcb53a3efa894710dd66ba8745ae2253cc6b75a038183a0bee21226d48239320efad6727093e4f94bbc2fdcc216200d903c32bb9f16dd17d5dac423ae0696f3decc576b8f1fdce63d0532370af7d1e2fa2ca5c5d17bd88f5e3abb4792dac8689ca13752f83d753b06b037bf5a80a3748983790352775685b0414c9d74849fd217e388f904278ddb6b0abdda941b61579c796e2bb77a9bc363b18642c401faa502a31011544111b6eedaa369976c814773d83220a75f31026d6ad0b8b4298ea6062234db232bc435e096e84f740e55bb14d46ae04af0500aa5bb218aff6c76aa8a8e3140a1b0d6638538fd7f30fa8d992e53abf8af2fbc16b9e8a668c1aac72cea1a746ee5f7f3392a4ec8f1d19f2f426b6069b1cd347cbc38bceba96ce5da49198083403143c740c04639cd1089abb34fe812d85921c47437604f684bca44a1eaa965c0a6e1c1fd1f70ee932af3455b36184cc15934cdb3f28959d37d8fc10696f8ec1e4b0c3d1b9ff74a01b796d1bb68954a3768c8bcec741b3b69da892f8922142b16b2cabb469a9906b34216243fac80374c10e178c5fd36440f8d7a8588a9c2510d86ffa8cb68ce8c330d2111c94724e522f04573dad43bce252eb505d29ca9379a6b281519d38b7174f3ae8f185544f3003c936a7e6b23ca97a313aac6a061caa45fda73522f3061767bb4e33dbe4bde390eb0f07225a8aef939cb6ab2ada10c02527281abad394cd4ea9f59467a08b72047cdb75d7b2b98e5b4542554a60f953ac7a4b980f42518eec05ff2c044549cab0cf33eef36dfbabcbc0300009d898862d2194cfcdd9a713c30bbe52291105193656ea5eb830873ac956469d31689cc3c69edb5cb9a6e31ce3e6fb50ddd4e52ef9fdeacfc0db21e1e83e0d8d0a64f17cacb4dc208a893e7fd8ffa86cfc554dfba3d9fd281115eccb4b9d909f2fbf3fbb66bedd7b5db3f6d4f076f5d8fb54f8832896f8ef6f624162f1dd589be7a8e87dd5065708a8b0bfb18a5c2299f5605ac8a11c1add55b2018e6099380a70bee3e0727ca6ec58928fe6eb3147b47401e8d822eebade713b58335787669e5e0de5d328a1067df4cd9124665bb02ee8adfd1b3618374ef167df1f0fe79456f78aee3da4c1bf397e4637b0cf41a0f4a2910efd02b17bf5f3c15b0084b36fa7d4e85a53e5be366b428244eeba7499c3e54397227928e2ff6e583f332d6f7e8cf4d058f379b58a7d03a4bfa454bb4b6d543804b8970e6a9fe8886179eb418a8ce9e509e8433571f7d32378f2e983fa418c8c91760ec9fb20968e7fc23b7c4ac71693b2576ac0f8ce2020ff1e7a7ff24301b48b544fb29a1ca4f2502daded865e488a16dd33ec67b2eee3025cdc5ef90f253c4b5e0a61d51e495b675c5a1d55b4ba3812c5f44cd08487e61d36b0c2dc32d27333a5ee8a0906bfbcd388bd9389d1509912c0471c7b706a5aff880569a3fb11ac5f14d780deb4c1b1afe30fb6b8daf87b27a4ceb869d587a97f2f5af8d819aa47bbf207db68a6ecbbefb1e109ed0bfbbf3b54fba9e79de8fad9c3bcd3e74b8b92ccea3ff5c558c6cd72d78a711fc39df603bd4aa1439dd302258edd2204e52d7f435c6f552b612fbc321bea971195cd4d8bb033e2a779e239164d7eea6d8fd233b0b9b776246564cfcf44b31a83031a2413bf98a398c9f93da243cef9ce73d81bade8ad551fb0ffa75bc874c11d23ac9d7752f22a0f54c3870f3314a83e64332db810da1ebb288e10c4eb9be9ec037317b8f813e68160a887da3f5c0389510a0734b69ef275e19973b169d340610cf2112e9964cc0566b9b690c3feb36c8526491d3a563f0bead2abbcf0665e048aa3f929351b2f89876580633a403250ae3b5244c8c0e996bf888938dfc8920348d88e272e6eadc7c0387ca1dae228bd620ce3975d43b58758d9412d304a227245587065f58c4573ba2557f1d8333ba007709b1239d682f03405b22135757178fb701bbde81d2f8faaa7666c025d8a8bb426dc4b8e61aed79b3b3d3a9b01ee9142772d869677ede166e7a8be8ab84cdd6946b1478ce77ba307213971cfb24c86c344310f279e38d22254bf4caf83c02e715cb0550e615dc9f8dd2400fa749e3527493c15fb454c158e4c0603ae6e962b7890058ec7c10f0618ee274a15bca6ca9fe5bc5f9e7797c0950299912be9c58463c07d667d4bffe8aa590ae43db08512b40f3d265026bef2facdd508984e5f6d2ac7ef573397f14ed2e2ccdcbe5796e60ae64d173814906d1da5a5bfe8a2a4c5d6bb0b3315b878b4877d0c045f6e6cfa0dfc1ea4de7abe26f2b2d8c93299ed1d83f1b7853c756bfa346cd53b008fec169883983fe0f2405777dd85e17b2e4e8b23432c0dc4c386d67b6597184d0b4b95877362304638484cc0951400f66ee8391dd44417c58b3d46a8345a8049fcd70f7b5f4a6f912e2b18760947c74ef2b732b342878d7e7cc99902de87db36469555fbbfe76189f108d6ab31f4727fe4e22d075afaf6cc726ab17a5e1b4ab6c8f29a459da3c4266b5ad8ff55906a190f8b19a3bb92a50df49647c03d5d6106ec07e9300038d059a75b54ac31683ef8e5eee946e1c84d016ee1e7800a92c0a3823b62e0417fe86b191951f65abc0c38c1e0e8f1121a04b62a8a720790560f922804b1b7e7eaa497e1bede6e3d0dcf0312dbf221561958fa1e85a8f99e6fc82f919e78c17d1beda16cfef25fb5d00f7c32df9a51eac76000c988ffdf011564aa0e319764b16a5a7c728a470ff70772fb76c9ada26a0ac073fcbfa12501c2454b19e02d928e3939a40bfff76c002533b3849cdf8016728445131e5f1e292b7d3dc06bb3a3cfff6fabae0b7341694a8938c1d2497cd70b76c337c9a312e96c8f736d7625a535e1906eba53d199221ca60202a65be0f7e530aca10e61fa39c7601d65954e5ed4cab94345c6b89c7f8a0de5c61a7945e1564731b6715331d13263b2961a163382f7c4934d847033860e402f3aadb4f3e6cf47a97a2031401da4d2c8de8c80cdad71b97b4deb2075a02282f958ac6772354e67f097ca693778224b80892490015e7d697fb9107f75cea708178ffec93fb1d44e8493bad1d42c918e661219ea819e0200759037a5a585c0fe074fd407536fe58013f42612c41bfc66e16870d7a9c00ee93a3122b253fecbf5de3837641f4a1376af0f053463413c26c29f9a346318565276856b963da30ba6ab8c4c8ef6cfddc432328586d9d9829895835759bcde0851ae0c838a3927ea63fe5ba793fae94da61cab00fc05f3a265a2da1221bb2b66775ed7ba856b41011652d4984991e56249360ddfc997245ac1547a1c16382d42df383a8d1c852643b24895c422712e79c436fdfffece4ed1c50922d4f25296aaf6b204522086d188bee254f8303b60537ead1195ac5dd301286f0042dd68aa05a70e4beb779aa0b61a316f736b72c9ab7ed860a0908a078f4b8a53f2df0abf993f689de4b02b9138ca5047fb0bfc9ba3b92bff033e36fc9553260b008cef3d147c62d1d3944fd1eaff79bc5a922ec2190907bfda1b51c2c7fb867db1f8e13a37b5e3ae0165e93350b958a239ec1f2b78561cff854b975307b5b5dd23b040602a5a36bd79947ee04c7d0e5e30f9c4c79f7b4e6eada98bfc6c357cdf8939213423f1b21ba26cfc2b2756ea3eb992372db0ab8a7c37d8ae96bf3ed6be873c1891550ef741812032e1ae938326c399ee43a3061602dda006f1b6b620bebb6a5752bee77e8acf9921ebf4d4c8af7eb5e937c65697c0664c594e31a62377a25605051996c474ca322ce8e0e6ef8a7988be", 0x2000, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x150, 0x0, 0xfffffffffffffff9, [{{0x2, 0x1, 0x6, 0x800, 0x9, 0x4, {0x0, 0x56541a3c, 0x7, 0x8, 0x4, 0x1ff, 0xb28d, 0x0, 0xffff, 0x4000, 0x0, r12, r13, 0x8, 0x6}}, {0x4, 0x7, 0x2, 0x0, '.%'}}, {{0x6, 0x3, 0x5, 0x7fffffffffffffff, 0x3, 0x0, {0x5, 0x0, 0x7000, 0x6, 0x6, 0x6, 0x3, 0x8, 0x5e, 0x6000, 0x0, r12, r13, 0x8, 0x8}}, {0x6, 0x7, 0x7, 0x4e24, 'user_id'}}]}, 0x0, 0x0, 0x0}) (async) fchown(r3, r7, r13) (async) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) (async, rerun: 64) ioctl$KVM_CAP_X86_APIC_BUS_CYCLES_NS(r4, 0x4068aea3, &(0x7f0000000080)={0xed, 0x0, 0x3}) (async, rerun: 64) close(r0) (async) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @dev={0xfe, 0x80, '\x00', 0x28}, 0x1ff}, 0x1c) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000640), r0) 1.855737716s ago: executing program 3 (id=5893): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10290}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0x1d, 0x0, 0x0, 0x6}]}}]}, @IFLA_GROUP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r3, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x3) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f00001b6000/0x3000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r4 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000140)={'virt_wifi0\x00', 0x1}) sendmsg(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x80) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x4, 0xe0, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000480)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2f}}, @in={0x2, 0x4e21, @loopback}, @in6={0xa, 0x4e20, 0x0, @empty, 0xfff}, @in={0x2, 0x4e23, @rand_addr=0x64010102}], 0x4c) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)={'#! ', './control/file0'}, 0x13) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x5, 0xffffffffffffffff, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000002dc0)=@userptr={0x2, 0x1, 0x4, 0x0, 0x1, {0x77359400}, {0x1, 0xc, 0x9, 0xc, 0x3, 0x8, "c12400"}, 0x3, 0x2, {&(0x7f00000002c0)}, 0x96000}) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x1) lgetxattr(0x0, 0x0, &(0x7f00000002c0)=""/203, 0xcb) 0s ago: executing program 2 (id=5894): openat$urandom(0xffffffffffffff9c, 0x0, 0x103900, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) syz_clone(0x81000000, 0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(r1, 0xc17a) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a200040b5766b01040000000000000000010080030900010073797a31000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a32000000008c000000060a010400000000000000000100000008000b400000000070000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020007000000380001800c000100626974776973650028000280080003400000000408000140000000170800024000000012040005800800048004000280140000001100010000000000000000000700000a"], 0x100}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x8031, r1, 0x1342e000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x400c0c0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x80) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000240), 0x141802, 0x0) r4 = fsopen(&(0x7f0000000040)='binder\x00', 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x1, 0x4, 0x8}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x2, 0x4, 0x1, 0x9}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r5, @ANYBLOB="0000003f00000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0x0, 0x0, &(0x7f00000008c0), 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) close(r4) kernel console output (not intermixed with test programs): c thread 15024 ... [ 1757.756066][T20712] IPVS: stopping backup sync thread 25142 ... [ 1757.790552][T25810] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1757.844809][T25810] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1758.053784][T18327] usb 5-1: USB disconnect, device number 84 [ 1758.442957][T18315] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 1758.502498][T25810] team0: Port device team_slave_0 added [ 1758.543489][T25810] team0: Port device team_slave_1 added [ 1758.793226][T18315] usb 3-1: Using ep0 maxpacket: 16 [ 1758.936317][T18315] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1758.967902][T18315] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 1758.991572][T18315] usb 3-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x24, changing to 0x4 [ 1759.019052][T18315] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 61 [ 1759.063579][T18315] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 1759.108601][T18315] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1759.169796][T18315] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1759.188050][T25810] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1759.213275][T18315] usb 3-1: SerialNumber: syz [ 1759.218087][T25810] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1759.266538][T25928] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1759.285206][T25928] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1759.314582][T25810] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1759.400764][T25810] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1759.421033][T25810] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1759.532904][T25810] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1759.635134][T18315] cdc_acm 3-1:1.0: ttyACM0: USB ACM device [ 1759.685859][T18315] usb 3-1: USB disconnect, device number 13 [ 1760.004465][T20712] hsr_slave_0: left promiscuous mode [ 1760.045325][T20712] hsr_slave_1: left promiscuous mode [ 1760.058024][T20712] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1760.121078][T20712] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1760.249318][T25952] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5384'. [ 1760.271356][T25953] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1760.304276][T25955] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1760.330440][T25953] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1760.370569][T25953] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1760.382801][T25955] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1760.391464][T25953] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1760.402698][T25955] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1760.497429][T25955] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1760.530969][T25955] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1760.540332][T25955] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1760.599500][T25960] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5383'. [ 1760.799808][T24824] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1761.529236][T20712] team0 (unregistering): Port device team_slave_1 removed [ 1761.624038][T20712] team0 (unregistering): Port device team_slave_0 removed [ 1762.130376][T25960] bond4: Unable to set down delay as MII monitoring is disabled [ 1762.201961][T25960] bond4 (unregistering): Released all slaves [ 1762.263733][T25971] macsec1: entered promiscuous mode [ 1762.284804][T25971] bridge0: entered promiscuous mode [ 1762.310552][T25971] macsec1: entered allmulticast mode [ 1762.318217][T25971] bridge0: entered allmulticast mode [ 1762.388036][T25971] bridge0: port 3(macsec1) entered blocking state [ 1762.395416][T25971] bridge0: port 3(macsec1) entered disabled state [ 1762.526020][T25971] bridge0: left allmulticast mode [ 1762.557995][T25971] bridge0: left promiscuous mode [ 1762.698185][T25810] hsr_slave_0: entered promiscuous mode [ 1762.745242][T25810] hsr_slave_1: entered promiscuous mode [ 1762.769309][T25810] debugfs: 'hsr0' already exists in 'hsr' [ 1762.800243][T25810] Cannot create hsr debugfs directory [ 1763.285774][T20712] IPVS: stop unused estimator thread 0... [ 1764.003078][T23913] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 1764.187592][T23913] usb 3-1: Using ep0 maxpacket: 32 [ 1764.258611][T23913] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1764.274875][T23913] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1764.561677][T23913] usb 3-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1764.665724][T23913] usb 3-1: config 1 interface 2 altsetting 17 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1764.852938][T23913] usb 3-1: config 1 interface 2 has no altsetting 1 [ 1764.905712][T23913] usb 3-1: New USB device found, idVendor=1235, idProduct=8203, bcdDevice= 0.40 [ 1764.930959][T23913] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1764.941546][T25810] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1764.972908][T23913] usb 3-1: Product: syz [ 1764.977193][T23913] usb 3-1: Manufacturer: syz [ 1765.137708][T25810] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1765.147883][T23913] usb 3-1: SerialNumber: syz [ 1765.185027][T25810] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1765.280210][T25810] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1765.384395][T23913] usb 3-1: 2:17 : UAC_AS_GENERAL descriptor not found [ 1765.475811][T26010] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1765.503690][T26010] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1765.653008][T23913] usb 3-1: USB disconnect, device number 14 [ 1765.762378][T25810] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1765.806128][T25810] 8021q: adding VLAN 0 to HW filter on device team0 [ 1765.850756][T24828] bridge0: port 1(bridge_slave_0) entered blocking state [ 1765.858043][T24828] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1765.870565][T26013] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5398'. [ 1765.887231][T26013] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1765.896733][T26013] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1765.911456][ T1313] bridge0: port 2(bridge_slave_1) entered blocking state [ 1765.918732][ T1313] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1765.938195][T26013] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1765.950182][T26013] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1765.962051][T26013] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1765.971237][T26013] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1766.028897][T26014] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5397'. [ 1766.128075][T25810] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1766.312733][T25810] veth0_vlan: entered promiscuous mode [ 1766.363156][T25810] veth1_vlan: entered promiscuous mode [ 1766.465297][T25810] veth0_macvtap: entered promiscuous mode [ 1766.510157][T25810] veth1_macvtap: entered promiscuous mode [ 1766.599940][T25810] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1766.665350][T25810] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1766.722038][T20716] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1766.747744][T20716] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1766.761609][T20716] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1766.807708][T20716] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1767.009555][T24824] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1767.036363][T24824] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1767.066908][T26031] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5403'. [ 1767.101758][T26033] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5404'. [ 1767.198371][T26031] bond4: Unable to set down delay as MII monitoring is disabled [ 1767.340041][T26031] bond4 (unregistering): Released all slaves [ 1767.603928][T26033] bridge0: port 2(bridge_slave_1) entered disabled state [ 1767.611188][T26033] bridge0: port 1(bridge_slave_0) entered disabled state [ 1767.713895][ T1313] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1767.742398][ T1313] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1768.089745][T26041] fuse: Bad value for 'group_id' [ 1768.189934][T26041] fuse: Bad value for 'group_id' [ 1769.089841][T26056] sctp: [Deprecated]: syz.2.5408 (pid 26056) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1769.089841][T26056] Use struct sctp_sack_info instead [ 1770.775786][T26067] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5411'. [ 1770.787930][T26068] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1770.796903][T26068] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1771.248800][T26081] syzkaller1: entered promiscuous mode [ 1771.335599][T26081] syzkaller1: entered allmulticast mode [ 1771.704679][T26092] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1771.939094][T26100] FAULT_INJECTION: forcing a failure. [ 1771.939094][T26100] name failslab, interval 1, probability 0, space 0, times 0 [ 1771.963540][T26100] CPU: 0 UID: 0 PID: 26100 Comm: syz.3.5419 Tainted: G L syzkaller #0 PREEMPT(full) [ 1771.963575][T26100] Tainted: [L]=SOFTLOCKUP [ 1771.963582][T26100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1771.963595][T26100] Call Trace: [ 1771.963603][T26100] [ 1771.963613][T26100] dump_stack_lvl+0xe8/0x150 [ 1771.963649][T26100] should_fail_ex+0x412/0x560 [ 1771.963681][T26100] should_failslab+0xa8/0x100 [ 1771.963710][T26100] __kmalloc_noprof+0xe8/0x760 [ 1771.963734][T26100] ? sock_kmalloc+0xd6/0x160 [ 1771.963765][T26100] ? hash_recvmsg+0x130/0x840 [ 1771.963798][T26100] sock_kmalloc+0xd6/0x160 [ 1771.963837][T26100] hash_recvmsg+0x1d4/0x840 [ 1771.963866][T26100] ? __lock_acquire+0x6b5/0x2cf0 [ 1771.963896][T26100] ? __pfx_hash_recvmsg+0x10/0x10 [ 1771.963925][T26100] sock_recvmsg_nosec+0x186/0x1c0 [ 1771.963955][T26100] ____sys_recvmsg+0x3e3/0x4a0 [ 1771.963997][T26100] ? __pfx_____sys_recvmsg+0x10/0x10 [ 1771.964044][T26100] ? import_iovec+0x73/0xa0 [ 1771.964079][T26100] ___sys_recvmsg+0x215/0x590 [ 1771.964109][T26100] ? __lock_acquire+0x6b5/0x2cf0 [ 1771.964140][T26100] ? __pfx____sys_recvmsg+0x10/0x10 [ 1771.964211][T26100] do_recvmmsg+0x334/0x800 [ 1771.964261][T26100] ? __pfx_do_recvmmsg+0x10/0x10 [ 1771.964304][T26100] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1771.964345][T26100] __x64_sys_recvmmsg+0x198/0x250 [ 1771.964381][T26100] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1771.964424][T26100] do_syscall_64+0x14d/0xf80 [ 1771.964444][T26100] ? trace_irq_disable+0x3b/0x150 [ 1771.964474][T26100] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1771.964498][T26100] ? clear_bhb_loop+0x40/0x90 [ 1771.964525][T26100] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1771.964547][T26100] RIP: 0033:0x7fb69759c799 [ 1771.964567][T26100] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1771.964586][T26100] RSP: 002b:00007fb69843e028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1771.964610][T26100] RAX: ffffffffffffffda RBX: 00007fb697815fa0 RCX: 00007fb69759c799 [ 1771.964626][T26100] RDX: 0000000000000600 RSI: 0000200000003700 RDI: 0000000000000004 [ 1771.964641][T26100] RBP: 00007fb69843e090 R08: 0000000000000000 R09: 0000000000000000 [ 1771.964654][T26100] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1771.964668][T26100] R13: 00007fb697816038 R14: 00007fb697815fa0 R15: 00007fb69793fa48 [ 1771.964701][T26100] [ 1772.794638][T26105] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1774.137956][T26123] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5423'. [ 1774.324983][T26123] bond1: Unable to set down delay as MII monitoring is disabled [ 1774.391320][T26123] bond1 (unregistering): Released all slaves [ 1774.957773][T26132] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1774.995606][T26132] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1775.171334][T26134] syzkaller1: entered allmulticast mode [ 1775.975704][T26150] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1776.029388][T26150] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1776.726071][T26161] syzkaller1: entered promiscuous mode [ 1776.752705][T26161] syzkaller1: entered allmulticast mode [ 1776.839723][T26165] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1776.951695][T26165] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1777.030782][T26165] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5439'. [ 1777.043825][T26165] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5439'. [ 1777.069893][T24826] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1777.081464][T24826] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1777.116127][T24826] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1777.153056][T24826] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1777.543898][T26174] macsec1: entered promiscuous mode [ 1777.563244][T26174] bridge0: entered promiscuous mode [ 1777.589150][T26174] macsec1: entered allmulticast mode [ 1777.645298][T26174] bridge0: entered allmulticast mode [ 1777.736652][T26174] bridge0: port 3(macsec1) entered blocking state [ 1777.813292][T26174] bridge0: port 3(macsec1) entered disabled state [ 1778.143114][T26174] bridge0: left allmulticast mode [ 1778.215981][T26174] bridge0: left promiscuous mode [ 1778.522935][T18313] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 1778.706348][T18313] usb 4-1: Using ep0 maxpacket: 32 [ 1778.742075][T18313] usb 4-1: config 120 has an invalid descriptor of length 0, skipping remainder of the config [ 1778.762998][T18313] usb 4-1: config 120 has 0 interfaces, different from the descriptor's value: 1 [ 1778.807524][T18313] usb 4-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=6f.0b [ 1778.834059][T18313] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1778.862711][T18313] usb 4-1: Product: syz [ 1778.874219][T18313] usb 4-1: Manufacturer: syz [ 1778.886029][T18313] usb 4-1: SerialNumber: syz [ 1778.916658][T18313] r8152-cfgselector 4-1: Unknown version 0x0000 [ 1779.361233][T26194] ptrace attach of "./syz-executor exec"[16915] was attempted by " ./file0   /sys/kernel/debug/binder/stats 8    \x09   cgroup.controllers [ 1779.405803][T26185] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5442'. [ 1779.657100][T26199] syzkaller1: entered promiscuous mode [ 1779.682162][T26199] syzkaller1: entered allmulticast mode [ 1779.955592][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 1779.955612][ T29] audit: type=1326 audit(1772292970.580:1885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26177 comm="syz.4.5442" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1aa239c799 code=0x0 [ 1780.091264][T26208] syzkaller1: entered promiscuous mode [ 1780.097017][T26208] syzkaller1: entered allmulticast mode [ 1781.415620][T26223] : renamed from bond_slave_0 (while UP) [ 1781.452981][T18313] r8152-cfgselector 4-1: USB disconnect, device number 113 [ 1781.724088][T26234] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1781.766297][T26234] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1781.813114][T18327] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 1781.832454][T26234] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1781.910218][T26234] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1781.964211][T26234] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1782.007375][T26234] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1782.084741][T18327] usb 3-1: not running at top speed; connect to a high speed hub [ 1782.094113][T18327] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 1782.123019][T18327] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 1782.165333][T18327] usb 3-1: New USB device found, idVendor=1235, idProduct=8014, bcdDevice= 0.40 [ 1782.177867][T18327] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1782.213178][T18327] usb 3-1: Product: 胕㬾콴誨ꦌ䷸铨㸯टꟕᶱ뒷쯾䑫恕ș吪⃥垷ᶵ듒὜爥퀘랁ᤃꭞ嫕と䖩走㐳ꂁ훀ὂᵸ葂ꨉ媣䐺⍇ [ 1782.266945][T18327] usb 3-1: Manufacturer: 嚗៣숂㮰审ặ鱮ざ౏ბᘻ᪩娌痟ౡ肢뢶⊓ਐ굗㿵ﶺ昗ྌ蛌荗﫟ꧪ瀄¿쀦띆蕣끠͇䝜㟭닁霥猕 [ 1782.304759][T18327] usb 3-1: SerialNumber: ꦤ铠諏嫦쮷꘍굃胿損傪듏獟榤ⳓ趩灈슚規㖂ᳱ⺗갴㩲劗↼衂堧㖑ਟ뙙턉꾳苭䟹惓搀㐥딃䠟ᱮ䛂馜윅罥쑇石ﶬ月䒨ჱ敱ᛧ␞₏ﮄ暏폥㵙ꅦꂝᔄ粈 [ 1782.392793][T26230] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1782.442244][T26243] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1782.473767][T26243] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1782.643072][T18330] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 1782.793459][T18330] usb 5-1: Using ep0 maxpacket: 32 [ 1782.808342][T18330] usb 5-1: config 0 has an invalid interface number: 35 but max is 0 [ 1782.818437][T18330] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1782.844022][T18330] usb 5-1: config 0 has no interface number 0 [ 1782.860106][T18330] usb 5-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1782.876901][T18330] usb 5-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 1782.924762][T18330] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1782.935709][T18330] usb 5-1: Product: syz [ 1782.940027][T18330] usb 5-1: Manufacturer: syz [ 1782.950572][T18330] usb 5-1: SerialNumber: syz [ 1782.973795][T18330] usb 5-1: config 0 descriptor?? [ 1782.991212][T18330] radio-si470x 5-1:0.35: could not find interrupt in endpoint [ 1783.000990][T18330] radio-si470x 5-1:0.35: probe with driver radio-si470x failed with error -5 [ 1783.353808][T18330] radio-raremono 5-1:0.35: this is not Thanko's Raremono. [ 1783.388158][T18330] usbhid 5-1:0.35: couldn't find an input interrupt endpoint [ 1783.559234][T15285] usb 5-1: USB disconnect, device number 85 [ 1783.995671][T26250] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1784.147412][T26250] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1784.185985][T26250] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1784.321460][T26255] syzkaller1: entered promiscuous mode [ 1784.348194][T26255] syzkaller1: entered allmulticast mode [ 1784.481191][T26260] syzkaller1: entered promiscuous mode [ 1784.505512][T26260] syzkaller1: entered allmulticast mode [ 1784.533359][T18327] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1784.542016][T18327] usb 3-1: too many endpoints [ 1784.715564][T18327] usb 3-1: USB disconnect, device number 15 [ 1784.870902][T26273] tipc: Enabled bearer , priority 0 [ 1784.899123][T26273] syzkaller0: entered promiscuous mode [ 1784.922989][T26273] syzkaller0: entered allmulticast mode [ 1784.943308][T18330] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 1785.124305][T18330] usb 4-1: Using ep0 maxpacket: 8 [ 1785.137390][T18330] usb 4-1: New USB device found, idVendor=04b4, idProduct=8613, bcdDevice=95.8f [ 1785.153356][T18330] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 1785.319727][T18330] usb 4-1: Product: syz [ 1785.350035][T18330] usb 4-1: Manufacturer: syz [ 1785.404186][T18330] usb 4-1: SerialNumber: syz [ 1785.442639][T18330] usb 4-1: config 0 descriptor?? [ 1785.454733][T18330] usbtest 4-1:0.0: FX2 device [ 1785.475367][T18330] usbtest 4-1:0.0: high-speed {control bulk-in bulk-out} tests (+alt) [ 1785.668986][T26266] fuse: Bad value for 'fd' [ 1785.695949][T15285] usb 4-1: USB disconnect, device number 114 [ 1785.903313][T18313] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 1785.983296][T18308] tipc: Node number set to 3911317657 [ 1786.092926][T18313] usb 3-1: Using ep0 maxpacket: 32 [ 1786.101180][T18313] usb 3-1: config 0 has an invalid interface number: 35 but max is 0 [ 1786.111699][T18313] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1786.185772][T18313] usb 3-1: config 0 has no interface number 0 [ 1786.191938][T18313] usb 3-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1786.237285][T18313] usb 3-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 1786.267238][T18313] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1786.283022][T18313] usb 3-1: Product: syz [ 1786.287679][T18313] usb 3-1: Manufacturer: syz [ 1786.298329][T18313] usb 3-1: SerialNumber: syz [ 1786.306402][T18313] usb 3-1: config 0 descriptor?? [ 1786.318519][T18313] radio-si470x 3-1:0.35: could not find interrupt in endpoint [ 1786.330085][T26295] input: syz0 as /devices/virtual/input/input136 [ 1786.379734][T18313] radio-si470x 3-1:0.35: probe with driver radio-si470x failed with error -5 [ 1786.433499][T18314] usb 5-1: new full-speed USB device number 86 using dummy_hcd [ 1786.518370][T18313] radio-raremono 3-1:0.35: this is not Thanko's Raremono. [ 1786.534629][T18313] usbhid 3-1:0.35: couldn't find an input interrupt endpoint [ 1786.719705][T18314] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1786.732877][T18314] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1786.744443][T18330] usb 3-1: USB disconnect, device number 16 [ 1786.760715][T18314] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1786.786677][T18314] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1786.839594][T18314] hub 5-1:4.0: USB hub found [ 1787.145371][T18314] hub 5-1:4.0: 5 ports detected [ 1787.199329][ T29] audit: type=1326 audit(1772292977.820:1886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26297 comm="syz.3.5476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb69759c799 code=0x7ffc0000 [ 1787.224622][T18314] usb 5-1: selecting invalid altsetting 1 [ 1787.236615][T18330] IPVS: starting estimator thread 0... [ 1787.243988][T18314] hub 5-1:4.0: Using single TT (err -22) [ 1787.244046][ T29] audit: type=1326 audit(1772292977.820:1887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26297 comm="syz.3.5476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb69759c799 code=0x7ffc0000 [ 1787.265492][T18314] hub 5-1:4.0: insufficient power available to use all downstream ports [ 1787.292320][ T29] audit: type=1326 audit(1772292977.820:1888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26297 comm="syz.3.5476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb69755cfce code=0x7ffc0000 [ 1787.317134][ T29] audit: type=1326 audit(1772292977.820:1889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26297 comm="syz.3.5476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb69759c799 code=0x7ffc0000 [ 1787.333204][T26303] IPVS: using max 25 ests per chain, 60000 per kthread [ 1787.349683][ T29] audit: type=1326 audit(1772292977.820:1890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26297 comm="syz.3.5476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb69759c799 code=0x7ffc0000 [ 1787.380177][ T29] audit: type=1326 audit(1772292977.850:1891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26297 comm="syz.3.5476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=17 compat=0 ip=0x7fb69759c799 code=0x7ffc0000 [ 1787.519420][ T29] audit: type=1326 audit(1772292977.850:1892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26297 comm="syz.3.5476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb69759c799 code=0x7ffc0000 [ 1787.851243][ T29] audit: type=1326 audit(1772292977.850:1893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26297 comm="syz.3.5476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb69759c799 code=0x7ffc0000 [ 1787.914565][ T29] audit: type=1326 audit(1772292977.850:1894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26297 comm="syz.3.5476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fb69759c799 code=0x7ffc0000 [ 1788.381765][T26272] tipc: Resetting bearer [ 1788.416659][ T29] audit: type=1326 audit(1772292977.850:1895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26297 comm="syz.3.5476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb69759c799 code=0x7ffc0000 [ 1788.447889][T18314] hub 5-1:4.0: hub_hub_status failed (err = -32) [ 1788.572035][T26272] tipc: Disabling bearer [ 1788.601511][T18314] hub 5-1:4.0: config failed, can't get hub status (err -32) [ 1789.550727][T26316] syzkaller1: entered promiscuous mode [ 1789.556602][T26316] syzkaller1: entered allmulticast mode [ 1789.694514][T18313] usb 5-1: USB disconnect, device number 86 [ 1790.510754][T26340] all: renamed from bridge_slave_1 (while UP) [ 1790.685147][T26337] netlink: 'syz.0.5485': attribute type 9 has an invalid length. [ 1790.693144][T26337] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.5485'. [ 1791.603767][T26359] syzkaller1: entered promiscuous mode [ 1791.609394][T26359] syzkaller1: entered allmulticast mode [ 1791.947662][T26364] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5495'. [ 1792.026116][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1792.032584][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1792.373705][T26383] syzkaller1: entered promiscuous mode [ 1792.379299][T26383] syzkaller1: entered allmulticast mode [ 1792.667852][ T1313] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1793.391198][ T29] kauditd_printk_skb: 11 callbacks suppressed [ 1793.391217][ T29] audit: type=1326 audit(1772292984.000:1907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26392 comm="syz.3.5502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb69759c799 code=0x7ffc0000 [ 1793.450030][ T29] audit: type=1326 audit(1772292984.000:1908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26392 comm="syz.3.5502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb69759c799 code=0x7ffc0000 [ 1793.623017][ T29] audit: type=1326 audit(1772292984.000:1909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26392 comm="syz.3.5502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb69759c799 code=0x7ffc0000 [ 1793.703229][ T29] audit: type=1326 audit(1772292984.000:1910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26392 comm="syz.3.5502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb69759c799 code=0x7ffc0000 [ 1793.847538][ T29] audit: type=1326 audit(1772292984.000:1911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26392 comm="syz.3.5502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb69759c799 code=0x7ffc0000 [ 1793.919358][ T29] audit: type=1326 audit(1772292984.000:1912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26392 comm="syz.3.5502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb69759c799 code=0x7ffc0000 [ 1794.009694][ T29] audit: type=1326 audit(1772292984.000:1913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26392 comm="syz.3.5502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb69759c799 code=0x7ffc0000 [ 1794.070710][ T29] audit: type=1326 audit(1772292984.000:1914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26392 comm="syz.3.5502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=444 compat=0 ip=0x7fb69759c799 code=0x7ffc0000 [ 1794.296280][ T29] audit: type=1326 audit(1772292984.000:1915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26392 comm="syz.3.5502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb69759c799 code=0x7ffc0000 [ 1794.431449][ T29] audit: type=1326 audit(1772292984.000:1916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26392 comm="syz.3.5502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb69759c799 code=0x7ffc0000 [ 1794.683492][T26422] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1794.818502][T18313] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 1794.828573][T26422] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1795.055388][T18313] usb 5-1: device descriptor read/64, error -71 [ 1795.326659][T18313] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 1795.463189][T18313] usb 5-1: device descriptor read/64, error -71 [ 1795.581711][T18313] usb usb5-port1: attempt power cycle [ 1795.943121][T18313] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 1795.973636][T18313] usb 5-1: device descriptor read/8, error -71 [ 1796.322928][T18313] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 1796.357040][T18313] usb 5-1: device descriptor read/8, error -71 [ 1796.560772][T18313] usb usb5-port1: unable to enumerate USB device [ 1797.173156][T23913] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 1797.353043][T23913] usb 4-1: Using ep0 maxpacket: 32 [ 1797.374561][T23913] usb 4-1: too many configurations: 17, using maximum allowed: 8 [ 1797.423330][T23913] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1797.477711][T23913] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1797.514552][T23913] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1797.549838][T23913] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1797.580453][T23913] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1797.612677][T23913] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1797.671707][T23913] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1797.836628][T23913] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1797.849540][T23913] usb 4-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 1797.858668][T23913] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1797.873002][T23913] usb 4-1: Product: syz [ 1797.877230][T23913] usb 4-1: Manufacturer: syz [ 1797.886136][T23913] usb 4-1: SerialNumber: syz [ 1797.897285][T23913] usb 4-1: config 0 descriptor?? [ 1797.924000][T23913] etas_es58x 4-1:0.0: Starting syz syz (Serial Number syz) [ 1798.119908][T18327] usb 4-1: USB disconnect, device number 115 [ 1798.264018][T26463] binder: BINDER_SET_CONTEXT_MGR already set [ 1798.303704][T26463] binder: 26461:26463 ioctl 4018620d 200000000040 returned -16 [ 1798.451306][T22774] Bluetooth: hci1: SCO packet for unknown connection handle 201 [ 1798.852633][T26482] netlink: 32 bytes leftover after parsing attributes in process `syz.6.5522'. [ 1799.013098][T26483] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5524'. [ 1799.118292][T26486] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1799.148383][T26486] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1799.262440][T26483] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1799.310610][T26483] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1799.388813][T26483] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1799.509946][T26483] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1801.920263][T26527] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1801.978810][T26527] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1801.999345][T26527] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1802.033770][T26527] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1802.076122][T26527] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1802.142954][T26528] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1802.163483][T26527] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1802.223620][T26528] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1802.473067][T18327] usb 5-1: new low-speed USB device number 91 using dummy_hcd [ 1802.635362][T18327] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 1802.643969][T26537] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5536'. [ 1802.675172][T22774] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 1802.683068][T18327] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1802.765755][T18327] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1802.813012][T18327] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1802.843770][T26524] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5533'. [ 1802.846041][T18327] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1802.872528][T26541] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1802.892572][T18327] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 1802.901612][T26541] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1802.920579][T18327] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1802.942183][T18327] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1802.963881][T18330] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 1802.982375][T18327] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1803.012957][T18327] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1803.049630][T18327] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 1803.066021][T18327] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1803.097387][T18327] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1803.124560][T18327] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1803.166986][T18330] usb 3-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 1803.184130][T18327] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1803.195357][T18330] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1803.213429][T18330] usb 3-1: Product: syz [ 1803.219525][T18330] usb 3-1: Manufacturer: syz [ 1803.233206][T18327] usb 5-1: string descriptor 0 read error: -22 [ 1803.240525][T18327] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1803.253218][T18330] usb 3-1: SerialNumber: syz [ 1803.275201][T18330] usb 3-1: config 0 descriptor?? [ 1803.280462][T18327] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1803.307271][T18327] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1803.326631][T23913] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 1803.482980][T23913] usb 4-1: Using ep0 maxpacket: 32 [ 1803.529249][T26537] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1803.647669][ T29] kauditd_printk_skb: 63 callbacks suppressed [ 1803.647687][ T29] audit: type=1326 audit(1772292994.270:1980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26553 comm="syz.6.5542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f578699c799 code=0x7ffc0000 [ 1803.682762][T26537] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1803.688466][T23913] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 1803.714010][T26525] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1803.732037][T23913] usb 4-1: config 0 has no interface number 0 [ 1803.745419][T26559] sctp: [Deprecated]: syz.6.5542 (pid 26559) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1803.745419][T26559] Use struct sctp_sack_info instead [ 1803.762523][T26525] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1803.777722][T23913] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1803.801952][T23913] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1803.845092][T23913] usb 4-1: Product: syz [ 1803.857993][T23913] usb 4-1: Manufacturer: syz [ 1803.859321][T26537] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1803.880690][ T29] audit: type=1326 audit(1772292994.300:1981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26553 comm="syz.6.5542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f578699c799 code=0x7ffc0000 [ 1803.899904][T23913] usb 4-1: SerialNumber: syz [ 1803.916814][T26537] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1803.967452][T23913] usb 4-1: config 0 descriptor?? [ 1803.987456][T18330] mos7840 3-1:0.0: required endpoints missing [ 1803.994120][ T29] audit: type=1326 audit(1772292994.300:1982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26553 comm="syz.6.5542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f578695cfce code=0x7ffc0000 [ 1804.040532][T18330] usb 3-1: USB disconnect, device number 17 [ 1804.091209][ T29] audit: type=1326 audit(1772292994.300:1983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26553 comm="syz.6.5542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f578699c799 code=0x7ffc0000 [ 1804.177321][ T29] audit: type=1326 audit(1772292994.300:1984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26553 comm="syz.6.5542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f578699c799 code=0x7ffc0000 [ 1804.294539][ T29] audit: type=1326 audit(1772292994.350:1985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26553 comm="syz.6.5542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=17 compat=0 ip=0x7f578699c799 code=0x7ffc0000 [ 1804.383123][ T29] audit: type=1326 audit(1772292994.350:1986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26553 comm="syz.6.5542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f578699c799 code=0x7ffc0000 [ 1804.473053][ T29] audit: type=1326 audit(1772292994.360:1987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26553 comm="syz.6.5542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f578699c799 code=0x7ffc0000 [ 1804.498050][T23913] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1804.548379][ T29] audit: type=1326 audit(1772292994.360:1988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26553 comm="syz.6.5542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f578699c799 code=0x7ffc0000 [ 1804.625999][ T29] audit: type=1326 audit(1772292994.360:1989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26553 comm="syz.6.5542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f578695cfce code=0x7ffc0000 [ 1804.632994][T23913] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1804.849237][T26562] FAULT_INJECTION: forcing a failure. [ 1804.849237][T26562] name failslab, interval 1, probability 0, space 0, times 0 [ 1804.892614][T26562] CPU: 0 UID: 0 PID: 26562 Comm: syz.2.5543 Tainted: G L syzkaller #0 PREEMPT(full) [ 1804.892652][T26562] Tainted: [L]=SOFTLOCKUP [ 1804.892661][T26562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1804.892673][T26562] Call Trace: [ 1804.892682][T26562] [ 1804.892692][T26562] dump_stack_lvl+0xe8/0x150 [ 1804.892728][T26562] should_fail_ex+0x412/0x560 [ 1804.892759][T26562] should_failslab+0xa8/0x100 [ 1804.892789][T26562] __kmalloc_noprof+0xe8/0x760 [ 1804.892817][T26562] ? sock_kmalloc+0xd6/0x160 [ 1804.892848][T26562] ? hash_recvmsg+0x130/0x840 [ 1804.892881][T26562] sock_kmalloc+0xd6/0x160 [ 1804.892916][T26562] hash_recvmsg+0x1d4/0x840 [ 1804.892945][T26562] ? __lock_acquire+0x6b5/0x2cf0 [ 1804.892975][T26562] ? __pfx_hash_recvmsg+0x10/0x10 [ 1804.893003][T26562] sock_recvmsg_nosec+0x186/0x1c0 [ 1804.893032][T26562] ____sys_recvmsg+0x3e3/0x4a0 [ 1804.893073][T26562] ? __pfx_____sys_recvmsg+0x10/0x10 [ 1804.893122][T26562] ? import_iovec+0x73/0xa0 [ 1804.893156][T26562] ___sys_recvmsg+0x215/0x590 [ 1804.893186][T26562] ? __lock_acquire+0x6b5/0x2cf0 [ 1804.893218][T26562] ? __pfx____sys_recvmsg+0x10/0x10 [ 1804.893288][T26562] do_recvmmsg+0x334/0x800 [ 1804.893330][T26562] ? __pfx_do_recvmmsg+0x10/0x10 [ 1804.893375][T26562] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1804.893417][T26562] __x64_sys_recvmmsg+0x198/0x250 [ 1804.893453][T26562] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1804.893510][T26562] do_syscall_64+0x14d/0xf80 [ 1804.893542][T26562] ? trace_irq_disable+0x3b/0x150 [ 1804.893571][T26562] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1804.893592][T26562] ? clear_bhb_loop+0x40/0x90 [ 1804.893636][T26562] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1804.893658][T26562] RIP: 0033:0x7f1b6d79c799 [ 1804.893678][T26562] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1804.893697][T26562] RSP: 002b:00007f1b6e66a028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1804.893721][T26562] RAX: ffffffffffffffda RBX: 00007f1b6da15fa0 RCX: 00007f1b6d79c799 [ 1804.893737][T26562] RDX: 0000000000000600 RSI: 0000200000003700 RDI: 0000000000000004 [ 1804.893751][T26562] RBP: 00007f1b6e66a090 R08: 0000000000000000 R09: 0000000000000000 [ 1804.893765][T26562] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1804.893778][T26562] R13: 00007f1b6da16038 R14: 00007f1b6da15fa0 R15: 00007f1b6db3fa48 [ 1804.893812][T26562] [ 1805.467711][T23913] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1805.511012][T23913] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 1805.519771][T18308] usb 5-1: USB disconnect, device number 91 [ 1805.544643][T23913] usb 4-1: USB disconnect, device number 116 [ 1805.964884][T18308] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 1806.098929][T26576] syzkaller1: entered promiscuous mode [ 1806.122964][T26576] syzkaller1: entered allmulticast mode [ 1806.153244][T18308] usb 5-1: Using ep0 maxpacket: 8 [ 1806.165992][T18308] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1806.182482][T18308] usb 5-1: config 7 has too many interfaces: 229, using maximum allowed: 32 [ 1806.205023][T18308] usb 5-1: config 7 has an invalid descriptor of length 175, skipping remainder of the config [ 1806.257409][T18308] usb 5-1: config 7 has 0 interfaces, different from the descriptor's value: 229 [ 1806.292765][T18308] usb 5-1: New USB device found, idVendor=0675, idProduct=0200, bcdDevice=e1.e3 [ 1806.303166][T18308] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1806.311303][T18308] usb 5-1: Product: syz [ 1806.336971][T18308] usb 5-1: Manufacturer: syz [ 1806.341646][T18308] usb 5-1: SerialNumber: syz [ 1806.449426][T26581] loop3: detected capacity change from 0 to 7 [ 1806.457365][T26581] Dev loop3: unable to read RDB block 7 [ 1806.465929][T26581] loop3: unable to read partition table [ 1806.492273][T26581] loop3: partition table beyond EOD, truncated [ 1806.512290][T26581] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 1806.599613][T18308] usb 5-1: USB disconnect, device number 92 [ 1807.033824][T18313] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 1807.219801][T26597] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1807.228541][T18313] usb 4-1: Using ep0 maxpacket: 16 [ 1807.240493][T18313] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1807.263434][T26597] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1807.282643][T18313] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1807.304918][T18313] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1807.328661][T18313] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1807.348434][T18313] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1807.406444][T18313] usb 4-1: config 0 descriptor?? [ 1807.868589][T18313] HID 045e:07da: Invalid code 65791 type 1 [ 1807.910446][T18313] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.003E/input/input137 [ 1807.976128][T18313] microsoft 0003:045E:07DA.003E: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 1808.028006][T26609] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.5557'. [ 1808.177987][T18330] usb 4-1: USB disconnect, device number 117 [ 1808.736578][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 1808.736599][ T29] audit: type=1326 audit(1772292999.350:1998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26604 comm="syz.4.5556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1aa239c799 code=0x7ffc0000 [ 1808.898026][ T29] audit: type=1326 audit(1772292999.350:1999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26604 comm="syz.4.5556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1aa235cfce code=0x7ffc0000 [ 1809.033010][ T29] audit: type=1326 audit(1772292999.360:2000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26604 comm="syz.4.5556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1aa239c799 code=0x7ffc0000 [ 1809.235830][ T29] audit: type=1326 audit(1772292999.360:2001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26604 comm="syz.4.5556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=17 compat=0 ip=0x7f1aa239c799 code=0x7ffc0000 [ 1809.348033][ T29] audit: type=1326 audit(1772292999.360:2002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26604 comm="syz.4.5556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1aa239c799 code=0x7ffc0000 [ 1809.348082][T26628] FAULT_INJECTION: forcing a failure. [ 1809.348082][T26628] name failslab, interval 1, probability 0, space 0, times 0 [ 1809.465064][ T29] audit: type=1326 audit(1772292999.360:2003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26604 comm="syz.4.5556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f1aa239c799 code=0x7ffc0000 [ 1809.523150][T26628] CPU: 0 UID: 0 PID: 26628 Comm: syz.6.5560 Tainted: G L syzkaller #0 PREEMPT(full) [ 1809.523186][T26628] Tainted: [L]=SOFTLOCKUP [ 1809.523195][T26628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1809.523208][T26628] Call Trace: [ 1809.523218][T26628] [ 1809.523228][T26628] dump_stack_lvl+0xe8/0x150 [ 1809.523266][T26628] should_fail_ex+0x412/0x560 [ 1809.523298][T26628] should_failslab+0xa8/0x100 [ 1809.523326][T26628] ? skb_clone+0x212/0x3a0 [ 1809.523366][T26628] kmem_cache_alloc_noprof+0x87/0x650 [ 1809.523400][T26628] ? __netlink_lookup+0xc6/0x8b0 [ 1809.523437][T26628] skb_clone+0x212/0x3a0 [ 1809.523473][T26628] __netlink_deliver_tap+0x404/0x850 [ 1809.523512][T26628] ? netlink_deliver_tap+0x2e/0x1b0 [ 1809.523540][T26628] netlink_deliver_tap+0x19c/0x1b0 [ 1809.523569][T26628] netlink_unicast+0x7e3/0x9b0 [ 1809.523601][T26628] ? __pfx_netlink_unicast+0x10/0x10 [ 1809.523628][T26628] ? netlink_sendmsg+0x650/0xb40 [ 1809.523652][T26628] ? skb_put+0x11b/0x210 [ 1809.523685][T26628] netlink_sendmsg+0x813/0xb40 [ 1809.523722][T26628] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1809.523752][T26628] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1809.523782][T26628] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1809.523808][T26628] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1809.523834][T26628] ____sys_sendmsg+0xa68/0xad0 [ 1809.523876][T26628] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1809.523918][T26628] ? import_iovec+0x73/0xa0 [ 1809.523954][T26628] ___sys_sendmsg+0x2a5/0x360 [ 1809.523992][T26628] ? __pfx____sys_sendmsg+0x10/0x10 [ 1809.524060][T26628] ? __fget_files+0x2a/0x420 [ 1809.524090][T26628] ? __fget_files+0x3a0/0x420 [ 1809.524139][T26628] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1809.524175][T26628] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1809.524216][T26628] ? __pfx_ksys_write+0x10/0x10 [ 1809.524251][T26628] do_syscall_64+0x14d/0xf80 [ 1809.524272][T26628] ? trace_irq_disable+0x3b/0x150 [ 1809.524304][T26628] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1809.524327][T26628] ? clear_bhb_loop+0x40/0x90 [ 1809.524354][T26628] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1809.524376][T26628] RIP: 0033:0x7f578699c799 [ 1809.524398][T26628] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1809.524417][T26628] RSP: 002b:00007f5787894028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1809.524441][T26628] RAX: ffffffffffffffda RBX: 00007f5786c15fa0 RCX: 00007f578699c799 [ 1809.524457][T26628] RDX: 0000000000000090 RSI: 00002000000002c0 RDI: 0000000000000008 [ 1809.524471][T26628] RBP: 00007f5787894090 R08: 0000000000000000 R09: 0000000000000000 [ 1809.524485][T26628] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1809.524499][T26628] R13: 00007f5786c16038 R14: 00007f5786c15fa0 R15: 00007f5786d3fa48 [ 1809.524533][T26628] [ 1809.843178][ T29] audit: type=1326 audit(1772292999.360:2004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26604 comm="syz.4.5556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1aa239c799 code=0x7ffc0000 [ 1809.883120][ T29] audit: type=1326 audit(1772292999.360:2005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26604 comm="syz.4.5556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1aa239c799 code=0x7ffc0000 [ 1810.435149][T26630] vlan2: entered promiscuous mode [ 1810.455865][T26630] vlan2: entered allmulticast mode [ 1810.461074][T26630] hsr_slave_1: entered allmulticast mode [ 1810.652999][T26630] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5562'. [ 1810.723182][T26636] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1810.849195][T26635] syzkaller1: entered promiscuous mode [ 1810.858181][T26635] syzkaller1: entered allmulticast mode [ 1810.873345][T26636] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1810.930210][T26634] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1810.939497][T26634] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1811.206573][T26634] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1811.232564][T26634] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1811.553299][T18308] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 1811.612644][T26645] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5563'. [ 1811.627098][T26645] netlink: 64 bytes leftover after parsing attributes in process `syz.3.5563'. [ 1811.781893][T18308] usb 5-1: Using ep0 maxpacket: 16 [ 1811.792444][T18308] usb 5-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 1811.834217][T18308] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1811.899631][T18308] usb 5-1: config 0 descriptor?? [ 1811.938606][T18308] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 1812.207088][T26650] misc userio: The device must be registered before sending interrupts [ 1812.360991][ T29] audit: type=1326 audit(1772293002.980:2006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26652 comm="syz.6.5568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f578699c799 code=0x7ffc0000 [ 1812.744525][ T29] audit: type=1326 audit(1772293002.980:2007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26652 comm="syz.6.5568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f578699c799 code=0x7ffc0000 [ 1812.878288][T26664] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5569'. [ 1812.890399][T26664] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1812.903991][T26664] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1812.937219][T26664] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1812.966175][T26664] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1813.014631][T26664] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1813.032041][T26664] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1813.057069][T26666] IPVS: length: 255 != 24 [ 1813.198805][T26669] FAULT_INJECTION: forcing a failure. [ 1813.198805][T26669] name failslab, interval 1, probability 0, space 0, times 0 [ 1813.233782][T26669] CPU: 0 UID: 0 PID: 26669 Comm: syz.2.5572 Tainted: G L syzkaller #0 PREEMPT(full) [ 1813.233819][T26669] Tainted: [L]=SOFTLOCKUP [ 1813.233827][T26669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1813.233845][T26669] Call Trace: [ 1813.233854][T26669] [ 1813.233864][T26669] dump_stack_lvl+0xe8/0x150 [ 1813.233898][T26669] should_fail_ex+0x412/0x560 [ 1813.233936][T26669] should_failslab+0xa8/0x100 [ 1813.233965][T26669] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 1813.234000][T26669] ? __alloc_skb+0x186/0x7d0 [ 1813.234029][T26669] ? __alloc_skb+0x1d0/0x7d0 [ 1813.234056][T26669] ? __local_bh_enable_ip+0xd0/0x130 [ 1813.234089][T26669] __alloc_skb+0x1d0/0x7d0 [ 1813.234118][T26669] ? netlink_ack_tlv_len+0x6c/0x210 [ 1813.234148][T26669] netlink_ack+0x146/0xa50 [ 1813.234191][T26669] netlink_rcv_skb+0x2b6/0x4b0 [ 1813.234220][T26669] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 1813.234246][T26669] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1813.234283][T26669] ? bpf_lsm_capable+0x9/0x20 [ 1813.234311][T26669] ? security_capable+0x7e/0x2c0 [ 1813.234343][T26669] nfnetlink_rcv+0x2c0/0x27b0 [ 1813.234365][T26669] ? is_bpf_text_address+0x26/0x2b0 [ 1813.234394][T26669] ? is_bpf_text_address+0x292/0x2b0 [ 1813.234416][T26669] ? is_bpf_text_address+0x26/0x2b0 [ 1813.234442][T26669] ? kernel_text_address+0xa5/0xe0 [ 1813.234468][T26669] ? __kernel_text_address+0xd/0x30 [ 1813.234491][T26669] ? unwind_get_return_address+0x4d/0x90 [ 1813.234524][T26669] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1813.234548][T26669] ? arch_stack_walk+0xfb/0x150 [ 1813.234590][T26669] ? __lock_acquire+0x6b5/0x2cf0 [ 1813.234631][T26669] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1813.234655][T26669] ? __pfx_stack_trace_save+0x10/0x10 [ 1813.234686][T26669] ? __lock_acquire+0x6b5/0x2cf0 [ 1813.234720][T26669] ? __lock_acquire+0x6b5/0x2cf0 [ 1813.234753][T26669] ? __netlink_lookup+0xc6/0x8b0 [ 1813.234785][T26669] ? __netlink_lookup+0x7e4/0x8b0 [ 1813.234821][T26669] ? netlink_deliver_tap+0x2e/0x1b0 [ 1813.234853][T26669] ? netlink_deliver_tap+0x2e/0x1b0 [ 1813.234888][T26669] netlink_unicast+0x80f/0x9b0 [ 1813.234920][T26669] ? __pfx_netlink_unicast+0x10/0x10 [ 1813.234953][T26669] ? netlink_sendmsg+0x650/0xb40 [ 1813.234977][T26669] ? skb_put+0x11b/0x210 [ 1813.235010][T26669] netlink_sendmsg+0x813/0xb40 [ 1813.235046][T26669] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1813.235076][T26669] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1813.235105][T26669] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1813.235130][T26669] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1813.235155][T26669] ____sys_sendmsg+0xa68/0xad0 [ 1813.235195][T26669] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1813.235236][T26669] ? import_iovec+0x73/0xa0 [ 1813.235270][T26669] ___sys_sendmsg+0x2a5/0x360 [ 1813.235308][T26669] ? __pfx____sys_sendmsg+0x10/0x10 [ 1813.235375][T26669] ? __fget_files+0x2a/0x420 [ 1813.235404][T26669] ? __fget_files+0x3a0/0x420 [ 1813.235444][T26669] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1813.235479][T26669] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1813.235519][T26669] ? __pfx_ksys_write+0x10/0x10 [ 1813.235552][T26669] do_syscall_64+0x14d/0xf80 [ 1813.235573][T26669] ? trace_irq_disable+0x3b/0x150 [ 1813.235603][T26669] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1813.235626][T26669] ? clear_bhb_loop+0x40/0x90 [ 1813.235652][T26669] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1813.235674][T26669] RIP: 0033:0x7f1b6d79c799 [ 1813.235695][T26669] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1813.235714][T26669] RSP: 002b:00007f1b6e66a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1813.235738][T26669] RAX: ffffffffffffffda RBX: 00007f1b6da15fa0 RCX: 00007f1b6d79c799 [ 1813.235754][T26669] RDX: 0000000000000090 RSI: 00002000000002c0 RDI: 0000000000000008 [ 1813.235768][T26669] RBP: 00007f1b6e66a090 R08: 0000000000000000 R09: 0000000000000000 [ 1813.235782][T26669] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1813.235795][T26669] R13: 00007f1b6da16038 R14: 00007f1b6da15fa0 R15: 00007f1b6db3fa48 [ 1813.235829][T26669] [ 1813.845054][T18308] gspca_sonixj: i2c_w8 err -110 [ 1813.863087][T18308] sonixj 5-1:0.0: probe with driver sonixj failed with error -110 [ 1813.942007][T26676] syzkaller1: entered promiscuous mode [ 1813.947765][T26676] syzkaller1: entered allmulticast mode [ 1814.503289][T18308] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 1814.581350][T26690] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1814.593487][T26690] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1814.711875][T18308] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1814.766634][T18308] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 62976, setting to 1024 [ 1814.813410][T18308] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1814.841254][T26693] syzkaller1: entered promiscuous mode [ 1814.858079][T26693] syzkaller1: entered allmulticast mode [ 1814.866254][T18308] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1814.889564][T18308] usb 3-1: New USB device strings: Mfr=1, Product=130, SerialNumber=3 [ 1814.907637][T18308] usb 3-1: Product: syz [ 1814.917751][T18308] usb 3-1: Manufacturer: syz [ 1814.942996][T18308] usb 3-1: SerialNumber: syz [ 1814.994384][T18308] cdc_mbim 3-1:1.0: skipping garbage [ 1815.046613][T26697] syzkaller1: entered promiscuous mode [ 1815.052218][T26697] syzkaller1: entered allmulticast mode [ 1815.197134][T26678] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1815.411591][T26704] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5581'. [ 1815.583953][T23913] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 1815.761265][T23913] usb 4-1: config 1 interface 0 altsetting 81 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1815.772713][T23913] usb 4-1: config 1 interface 0 altsetting 81 endpoint 0x3 has invalid maxpacket 1576, setting to 1024 [ 1815.813160][T23913] usb 4-1: config 1 interface 0 altsetting 81 bulk endpoint 0x3 has invalid maxpacket 1024 [ 1815.859785][T23913] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1815.869713][T26678] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1815.985247][T26713] FAULT_INJECTION: forcing a failure. [ 1815.985247][T26713] name failslab, interval 1, probability 0, space 0, times 0 [ 1816.014089][T26713] CPU: 0 UID: 0 PID: 26713 Comm: syz.6.5584 Tainted: G L syzkaller #0 PREEMPT(full) [ 1816.014126][T26713] Tainted: [L]=SOFTLOCKUP [ 1816.014134][T26713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1816.014147][T26713] Call Trace: [ 1816.014156][T26713] [ 1816.014166][T26713] dump_stack_lvl+0xe8/0x150 [ 1816.014202][T26713] should_fail_ex+0x412/0x560 [ 1816.014234][T26713] should_failslab+0xa8/0x100 [ 1816.014263][T26713] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 1816.014299][T26713] ? __alloc_skb+0x186/0x7d0 [ 1816.014327][T26713] ? __alloc_skb+0x1d0/0x7d0 [ 1816.014350][T26713] ? __local_bh_enable_ip+0xd0/0x130 [ 1816.014383][T26713] __alloc_skb+0x1d0/0x7d0 [ 1816.014411][T26713] ? netlink_ack_tlv_len+0x6c/0x210 [ 1816.014440][T26713] netlink_ack+0x146/0xa50 [ 1816.014483][T26713] netlink_rcv_skb+0x2b6/0x4b0 [ 1816.014511][T26713] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 1816.014538][T26713] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1816.014575][T26713] ? bpf_lsm_capable+0x9/0x20 [ 1816.014603][T26713] ? security_capable+0x7e/0x2c0 [ 1816.014635][T26713] nfnetlink_rcv+0x2c0/0x27b0 [ 1816.014667][T26713] ? __local_bh_enable_ip+0xd0/0x130 [ 1816.014694][T26713] ? lockdep_hardirqs_on+0x7a/0x110 [ 1816.014726][T26713] ? __dev_queue_xmit+0x277/0x3890 [ 1816.014746][T26713] ? __local_bh_enable_ip+0xd0/0x130 [ 1816.014777][T26713] ? __dev_queue_xmit+0x277/0x3890 [ 1816.014797][T26713] ? __dev_queue_xmit+0x1e78/0x3890 [ 1816.014816][T26713] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1816.014846][T26713] ? __dev_queue_xmit+0x277/0x3890 [ 1816.014872][T26713] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1816.014901][T26713] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1816.014938][T26713] ? ref_tracker_free+0x693/0x840 [ 1816.014964][T26713] ? __copy_skb_header+0xa3/0x4a0 [ 1816.014997][T26713] ? __pfx_ref_tracker_free+0x10/0x10 [ 1816.015023][T26713] ? __skb_clone+0x63/0x7a0 [ 1816.015059][T26713] ? __skb_clone+0x483/0x7a0 [ 1816.015098][T26713] ? skb_clone+0x246/0x3a0 [ 1816.015133][T26713] ? __netlink_deliver_tap+0x807/0x850 [ 1816.015160][T26713] ? netlink_deliver_tap+0x2e/0x1b0 [ 1816.015192][T26713] ? netlink_deliver_tap+0x2e/0x1b0 [ 1816.015225][T26713] netlink_unicast+0x80f/0x9b0 [ 1816.015258][T26713] ? __pfx_netlink_unicast+0x10/0x10 [ 1816.015284][T26713] ? netlink_sendmsg+0x650/0xb40 [ 1816.015309][T26713] ? skb_put+0x11b/0x210 [ 1816.015341][T26713] netlink_sendmsg+0x813/0xb40 [ 1816.015378][T26713] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1816.015408][T26713] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1816.015437][T26713] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1816.015461][T26713] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1816.015487][T26713] ____sys_sendmsg+0xa68/0xad0 [ 1816.015529][T26713] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1816.015569][T26713] ? import_iovec+0x73/0xa0 [ 1816.015604][T26713] ___sys_sendmsg+0x2a5/0x360 [ 1816.015642][T26713] ? __pfx____sys_sendmsg+0x10/0x10 [ 1816.015708][T26713] ? __fget_files+0x2a/0x420 [ 1816.015738][T26713] ? __fget_files+0x3a0/0x420 [ 1816.015778][T26713] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1816.015813][T26713] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1816.015855][T26713] ? __pfx_ksys_write+0x10/0x10 [ 1816.015890][T26713] do_syscall_64+0x14d/0xf80 [ 1816.015910][T26713] ? trace_irq_disable+0x3b/0x150 [ 1816.015947][T26713] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1816.015970][T26713] ? clear_bhb_loop+0x40/0x90 [ 1816.015997][T26713] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1816.016019][T26713] RIP: 0033:0x7f578699c799 [ 1816.016043][T26713] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1816.016061][T26713] RSP: 002b:00007f5787894028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1816.016086][T26713] RAX: ffffffffffffffda RBX: 00007f5786c15fa0 RCX: 00007f578699c799 [ 1816.016102][T26713] RDX: 0000000000000090 RSI: 00002000000002c0 RDI: 0000000000000008 [ 1816.016116][T26713] RBP: 00007f5787894090 R08: 0000000000000000 R09: 0000000000000000 [ 1816.016130][T26713] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1816.016143][T26713] R13: 00007f5786c16038 R14: 00007f5786c15fa0 R15: 00007f5786d3fa48 [ 1816.016176][T26713] [ 1816.898963][T18327] usb 5-1: USB disconnect, device number 93 [ 1816.907839][T23913] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1816.917235][T23913] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1816.926128][T23913] usb 4-1: Product: syz [ 1816.930473][T23913] usb 4-1: Manufacturer: syz [ 1816.937639][T23913] usb 4-1: SerialNumber: syz [ 1817.012000][T26702] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1817.056102][T26702] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1817.323558][T26702] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1817.377461][T26702] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1817.411944][T23913] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -71 [ 1817.442430][T23913] usb 4-1: USB disconnect, device number 118 [ 1818.639580][T18308] cdc_mbim 3-1:1.0: failed to get mac address [ 1818.675688][T18308] cdc_mbim 3-1:1.0: bind() failure [ 1818.720488][T18308] cdc_ncm 3-1:1.1: probe with driver cdc_ncm failed with error -71 [ 1818.750085][T18308] cdc_mbim 3-1:1.1: probe with driver cdc_mbim failed with error -71 [ 1818.786071][T18308] usbtest 3-1:1.1: probe with driver usbtest failed with error -71 [ 1818.852165][T18308] usb 3-1: USB disconnect, device number 18 [ 1819.452965][T18330] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 1819.495669][T26759] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5597'. [ 1819.632944][T18330] usb 5-1: Using ep0 maxpacket: 16 [ 1819.681785][T18330] usb 5-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 1819.710340][T18330] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1819.807345][T18330] usb 5-1: config 0 descriptor?? [ 1819.811854][T18330] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 1819.870433][T26759] bond5: Unable to set down delay as MII monitoring is disabled [ 1819.919717][T26759] bond5 (unregistering): Released all slaves [ 1820.422374][T26777] program syz.0.5604 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1820.866416][T26788] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1821.224807][T26797] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1821.246595][T26797] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1822.063442][T18327] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 1822.228787][T26806] macsec1: entered promiscuous mode [ 1822.234159][T26806] bridge0: entered promiscuous mode [ 1822.240257][T26806] macsec1: entered allmulticast mode [ 1822.245786][T26806] bridge0: entered allmulticast mode [ 1822.252602][T26806] bridge0: port 3(macsec1) entered blocking state [ 1822.260205][T26806] bridge0: port 3(macsec1) entered disabled state [ 1822.296369][T18327] usb 4-1: Using ep0 maxpacket: 32 [ 1822.314763][T18327] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1822.326806][T18327] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1822.341356][T18327] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1822.358092][T18327] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1822.368986][T26806] bridge0: left allmulticast mode [ 1822.374302][T26806] bridge0: left promiscuous mode [ 1822.431230][T18327] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1822.492278][T18327] usb 4-1: config 0 descriptor?? [ 1822.507818][T26802] raw-gadget.6 gadget.3: fail, usb_ep_enable returned -22 [ 1822.531461][T18327] hub 4-1:0.0: USB hub found [ 1822.707302][T26747] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1822.736686][T18327] hub 4-1:0.0: 2 ports detected [ 1822.750024][T26747] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1822.795978][T26809] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1822.805855][T26809] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1822.975337][T18330] gspca_sonixj: reg_w err -71 [ 1822.980826][T18330] sonixj 5-1:0.0: probe with driver sonixj failed with error -71 [ 1823.000666][T18330] usb 5-1: USB disconnect, device number 94 [ 1824.026525][T18327] hub 4-1:0.0: hub_hub_status failed (err = -32) [ 1824.033497][T18327] hub 4-1:0.0: config failed, can't get hub status (err -32) [ 1824.048811][T18327] usbhid 4-1:0.0: can't add hid device: -32 [ 1824.066267][T18327] usbhid 4-1:0.0: probe with driver usbhid failed with error -32 [ 1824.125083][T18327] usb 4-1: USB disconnect, device number 119 [ 1824.320630][T26828] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1824.363549][T26828] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1824.714859][T24826] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1825.754333][T26845] netlink: 56 bytes leftover after parsing attributes in process `syz.3.5621'. [ 1825.978470][T26844] netlink: 76 bytes leftover after parsing attributes in process `syz.3.5621'. [ 1827.060072][T26857] FAULT_INJECTION: forcing a failure. [ 1827.060072][T26857] name failslab, interval 1, probability 0, space 0, times 0 [ 1827.103703][T26859] netlink: 7 bytes leftover after parsing attributes in process `syz.2.5625'. [ 1827.128750][T26857] CPU: 1 UID: 0 PID: 26857 Comm: syz.4.5626 Tainted: G L syzkaller #0 PREEMPT(full) [ 1827.128786][T26857] Tainted: [L]=SOFTLOCKUP [ 1827.128794][T26857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1827.128808][T26857] Call Trace: [ 1827.128818][T26857] [ 1827.128828][T26857] dump_stack_lvl+0xe8/0x150 [ 1827.128866][T26857] should_fail_ex+0x412/0x560 [ 1827.128898][T26857] should_failslab+0xa8/0x100 [ 1827.128928][T26857] __kmalloc_noprof+0xe8/0x760 [ 1827.128951][T26857] ? sock_kmalloc+0xd6/0x160 [ 1827.128983][T26857] ? hash_recvmsg+0x130/0x840 [ 1827.129016][T26857] sock_kmalloc+0xd6/0x160 [ 1827.129051][T26857] hash_recvmsg+0x1d4/0x840 [ 1827.129080][T26857] ? __lock_acquire+0x6b5/0x2cf0 [ 1827.129110][T26857] ? __pfx_hash_recvmsg+0x10/0x10 [ 1827.129139][T26857] sock_recvmsg_nosec+0x186/0x1c0 [ 1827.129169][T26857] ____sys_recvmsg+0x3e3/0x4a0 [ 1827.129210][T26857] ? __pfx_____sys_recvmsg+0x10/0x10 [ 1827.129257][T26857] ? import_iovec+0x73/0xa0 [ 1827.129290][T26857] ___sys_recvmsg+0x215/0x590 [ 1827.129320][T26857] ? __lock_acquire+0x6b5/0x2cf0 [ 1827.129351][T26857] ? __pfx____sys_recvmsg+0x10/0x10 [ 1827.129419][T26857] do_recvmmsg+0x334/0x800 [ 1827.129470][T26857] ? __pfx_do_recvmmsg+0x10/0x10 [ 1827.129516][T26857] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1827.129557][T26857] __x64_sys_recvmmsg+0x198/0x250 [ 1827.129594][T26857] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1827.129640][T26857] do_syscall_64+0x14d/0xf80 [ 1827.129659][T26857] ? trace_irq_disable+0x3b/0x150 [ 1827.129690][T26857] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1827.129713][T26857] ? clear_bhb_loop+0x40/0x90 [ 1827.129740][T26857] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1827.129762][T26857] RIP: 0033:0x7f1aa239c799 [ 1827.129782][T26857] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1827.129801][T26857] RSP: 002b:00007f1aa05f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1827.129824][T26857] RAX: ffffffffffffffda RBX: 00007f1aa2615fa0 RCX: 00007f1aa239c799 [ 1827.129840][T26857] RDX: 0000000000000600 RSI: 0000200000003700 RDI: 0000000000000004 [ 1827.129854][T26857] RBP: 00007f1aa05f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1827.129868][T26857] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1827.129881][T26857] R13: 00007f1aa2616038 R14: 00007f1aa2615fa0 R15: 00007f1aa273fa48 [ 1827.129914][T26857] [ 1827.457314][T26863] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5627'. [ 1827.480526][T26862] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1827.693857][T26862] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5625'. [ 1827.702780][T26862] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5625'. [ 1827.743403][T26859] netlink: 7 bytes leftover after parsing attributes in process `syz.2.5625'. [ 1828.036968][T26869] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1828.077665][T26869] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1828.133656][T26880] program syz.2.5631 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1828.178780][T26869] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1828.179231][T26869] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1830.049338][T26909] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5639'. [ 1830.058561][T26909] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5639'. [ 1830.131876][T26909] bond1: entered promiscuous mode [ 1830.264861][T26914] ip6gre1: entered promiscuous mode [ 1830.289689][T26914] ip6gre1: entered allmulticast mode [ 1831.163424][T26932] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1831.203512][T26932] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1831.255046][T26936] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5647'. [ 1831.342123][T26936] bond2: Unable to set down delay as MII monitoring is disabled [ 1831.367221][T26936] bond2 (unregistering): Released all slaves [ 1831.503222][T26930] FAULT_INJECTION: forcing a failure. [ 1831.503222][T26930] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1831.628855][T26930] CPU: 0 UID: 0 PID: 26930 Comm: syz.4.5642 Tainted: G L syzkaller #0 PREEMPT(full) [ 1831.628893][T26930] Tainted: [L]=SOFTLOCKUP [ 1831.628902][T26930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1831.628916][T26930] Call Trace: [ 1831.628925][T26930] [ 1831.628934][T26930] dump_stack_lvl+0xe8/0x150 [ 1831.628971][T26930] should_fail_ex+0x412/0x560 [ 1831.629002][T26930] _copy_to_user+0x31/0xb0 [ 1831.629035][T26930] simple_read_from_buffer+0xe1/0x170 [ 1831.629081][T26930] proc_fail_nth_read+0x1bb/0x230 [ 1831.629115][T26930] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1831.629147][T26930] ? rw_verify_area+0x2a6/0x4d0 [ 1831.629169][T26930] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1831.629198][T26930] vfs_read+0x20c/0xa70 [ 1831.629217][T26930] ? fdget_pos+0x246/0x320 [ 1831.629252][T26930] ? __pfx___mutex_lock+0x10/0x10 [ 1831.629274][T26930] ? __pfx_vfs_read+0x10/0x10 [ 1831.629296][T26930] ? __fget_files+0x2a/0x420 [ 1831.629329][T26930] ? __fget_files+0x3a0/0x420 [ 1831.629356][T26930] ? __fget_files+0x2a/0x420 [ 1831.629395][T26930] ksys_read+0x150/0x270 [ 1831.629417][T26930] ? __pfx_ksys_read+0x10/0x10 [ 1831.629450][T26930] do_syscall_64+0x14d/0xf80 [ 1831.629468][T26930] ? trace_irq_disable+0x3b/0x150 [ 1831.629499][T26930] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1831.629521][T26930] ? clear_bhb_loop+0x40/0x90 [ 1831.629548][T26930] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1831.629570][T26930] RIP: 0033:0x7f1aa235cfce [ 1831.629589][T26930] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1831.629607][T26930] RSP: 002b:00007f1aa05d4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1831.629630][T26930] RAX: ffffffffffffffda RBX: 00007f1aa05d56c0 RCX: 00007f1aa235cfce [ 1831.629645][T26930] RDX: 000000000000000f RSI: 00007f1aa05d50a0 RDI: 0000000000000007 [ 1831.629658][T26930] RBP: 00007f1aa05d5090 R08: 0000000000000000 R09: 0000000000000000 [ 1831.629671][T26930] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1831.629684][T26930] R13: 00007f1aa2616128 R14: 00007f1aa2616090 R15: 00007f1aa273fa48 [ 1831.629717][T26930] [ 1832.273614][T26946] input: syz0 as /devices/virtual/input/input138 [ 1832.366476][T26949] xt_cgroup: invalid path, errno=-2 [ 1832.994243][T18313] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 1833.284492][T18313] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 1833.363086][T18315] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 1833.415032][T18313] usb 3-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 1833.612908][T18313] usb 3-1: Product: syz [ 1833.628599][T18313] usb 3-1: Manufacturer: syz [ 1833.673907][T18315] usb 5-1: device descriptor read/64, error -71 [ 1833.704537][T18313] usb 3-1: SerialNumber: syz [ 1833.859030][T18313] usb 3-1: config 0 descriptor?? [ 1833.877454][T18313] ch341 3-1:0.0: ch341-uart converter detected [ 1833.996613][T18315] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 1834.246465][T18313] usb 3-1: failed to receive control message: -71 [ 1834.257914][T18313] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 1834.283274][T18313] usb 3-1: USB disconnect, device number 19 [ 1834.306644][T18313] ch341 3-1:0.0: device disconnected [ 1834.363041][T18315] usb 5-1: device descriptor read/64, error -71 [ 1834.422976][T22774] Bluetooth: hci1: command 0x0406 tx timeout [ 1834.425754][T18308] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 1834.483623][T18315] usb usb5-port1: attempt power cycle [ 1834.512888][T18308] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 1834.864511][T18315] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 1835.084285][T18315] usb 5-1: device descriptor read/8, error -71 [ 1835.373973][T18315] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 1835.404714][T18315] usb 5-1: device descriptor read/8, error -71 [ 1835.543582][T18315] usb usb5-port1: unable to enumerate USB device [ 1836.215144][T26984] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1836.246083][T26984] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1836.743023][T18308] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 1836.743678][T22774] Bluetooth: hci2: command 0x0406 tx timeout [ 1836.749166][T18308] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 1837.368461][T18330] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 1837.523038][T18330] usb 3-1: Using ep0 maxpacket: 8 [ 1837.540575][T18330] usb 3-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1837.556611][T18330] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1837.575959][T18330] usb 3-1: Product: syz [ 1837.592989][T18330] usb 3-1: Manufacturer: syz [ 1837.599041][T18330] usb 3-1: SerialNumber: syz [ 1837.753167][T18330] usb 3-1: config 0 descriptor?? [ 1837.775949][T18330] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 1838.375704][T27012] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1838.416131][T27012] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1838.451913][T27013] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1838.464780][T27013] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1838.830773][T22774] Bluetooth: hci0: command 0x0406 tx timeout [ 1838.835578][T18308] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1838.870431][T18308] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 1838.890736][T27019] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1838.911298][T27019] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1838.944129][T27019] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5670'. [ 1838.980367][T27021] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5669'. [ 1839.048574][T27021] bond2: entered promiscuous mode [ 1839.076068][T27021] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1839.189986][T27021] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1839.224771][T27021] bond2: (slave sit1): The slave device specified does not support setting the MAC address [ 1839.274390][T27021] bond2: (slave sit1): Error -95 calling set_mac_address [ 1839.326356][T27028] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1839.337710][T27028] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1840.092217][T18330] usb 3-1: USB disconnect, device number 20 [ 1840.346350][T27044] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1840.368979][T27044] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1840.646071][T27048] fuse: Unknown parameter 'group_id' [ 1840.653149][T18330] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 1840.824727][T18330] usb 5-1: Using ep0 maxpacket: 16 [ 1840.839097][T18330] usb 5-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 1840.873902][T18330] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1840.936548][T18330] usb 5-1: config 0 descriptor?? [ 1840.959019][T18330] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 1840.999970][T27054] netlink: 40 bytes leftover after parsing attributes in process `syz.6.5679'. [ 1841.060732][T27054] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1841.080266][T27054] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1841.143808][T18308] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 1841.145158][T22774] Bluetooth: hci4: command 0x0c1a tx timeout [ 1841.149956][T18308] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 1841.311668][T27060] syzkaller1: entered promiscuous mode [ 1841.333983][T27060] syzkaller1: entered allmulticast mode [ 1841.351366][T27060] FAULT_INJECTION: forcing a failure. [ 1841.351366][T27060] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1841.378150][T27060] CPU: 1 UID: 0 PID: 27060 Comm: syz.2.5682 Tainted: G L syzkaller #0 PREEMPT(full) [ 1841.378185][T27060] Tainted: [L]=SOFTLOCKUP [ 1841.378194][T27060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1841.378208][T27060] Call Trace: [ 1841.378217][T27060] [ 1841.378227][T27060] dump_stack_lvl+0xe8/0x150 [ 1841.378264][T27060] should_fail_ex+0x412/0x560 [ 1841.378296][T27060] _copy_from_iter+0x1d3/0x1670 [ 1841.378325][T27060] ? unwind_next_frame+0xa5/0x23c0 [ 1841.378366][T27060] ? __lock_acquire+0x6b5/0x2cf0 [ 1841.378393][T27060] ? __pfx__copy_from_iter+0x10/0x10 [ 1841.378436][T27060] tun_get_user+0x516/0x3dd0 [ 1841.378478][T27060] ? aa_file_perm+0x192/0x15e0 [ 1841.378513][T27060] ? aa_file_perm+0x50e/0x15e0 [ 1841.378541][T27060] ? __pfx_tun_get_user+0x10/0x10 [ 1841.378574][T27060] ? aa_file_perm+0x192/0x15e0 [ 1841.378607][T27060] ? __lock_acquire+0x6b5/0x2cf0 [ 1841.378645][T27060] ? ref_tracker_alloc+0x35c/0x4c0 [ 1841.378677][T27060] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1841.378709][T27060] ? tun_get+0x1c/0x2f0 [ 1841.378743][T27060] ? tun_get+0x1c/0x2f0 [ 1841.378770][T27060] ? tun_get+0x1c/0x2f0 [ 1841.378803][T27060] tun_chr_write_iter+0x113/0x200 [ 1841.378834][T27060] vfs_write+0x61d/0xb90 [ 1841.378866][T27060] ? __pfx_vfs_write+0x10/0x10 [ 1841.378902][T27060] ? __fget_files+0x2a/0x420 [ 1841.378943][T27060] ksys_write+0x150/0x270 [ 1841.378968][T27060] ? __pfx_ksys_write+0x10/0x10 [ 1841.379001][T27060] do_syscall_64+0x14d/0xf80 [ 1841.379023][T27060] ? trace_irq_disable+0x3b/0x150 [ 1841.379055][T27060] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1841.379077][T27060] ? clear_bhb_loop+0x40/0x90 [ 1841.379105][T27060] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1841.379127][T27060] RIP: 0033:0x7f1b6d79c799 [ 1841.379148][T27060] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1841.379167][T27060] RSP: 002b:00007f1b6e66a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1841.379191][T27060] RAX: ffffffffffffffda RBX: 00007f1b6da15fa0 RCX: 00007f1b6d79c799 [ 1841.379207][T27060] RDX: 000000000000fdef RSI: 00002000000004c0 RDI: 0000000000000003 [ 1841.379222][T27060] RBP: 00007f1b6e66a090 R08: 0000000000000000 R09: 0000000000000000 [ 1841.379236][T27060] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1841.379249][T27060] R13: 00007f1b6da16038 R14: 00007f1b6da15fa0 R15: 00007f1b6db3fa48 [ 1841.379303][T27060] [ 1842.093652][T27067] syzkaller1: entered promiscuous mode [ 1842.105887][T27067] syzkaller1: entered allmulticast mode [ 1842.128314][T27068] Cannot find del_set index 286 as target [ 1842.137376][T27068] syzkaller1: entered promiscuous mode [ 1842.144120][T27068] syzkaller1: entered allmulticast mode [ 1842.919567][T15285] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 1843.099006][T15285] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1843.114703][T15285] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1843.132669][T15285] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1843.153123][T15285] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1843.163347][T15285] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1843.251925][T15285] usb 3-1: config 0 descriptor?? [ 1844.005123][T27043] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1844.088478][T27043] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1844.104140][T27089] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5691'. [ 1844.114447][T27089] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5691'. [ 1844.293108][T18330] gspca_sonixj: reg_w err -110 [ 1844.298096][T18330] sonixj 5-1:0.0: probe with driver sonixj failed with error -110 [ 1844.323748][T15285] plantronics 0003:047F:FFFF.003F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 1844.345425][T18330] usb 5-1: USB disconnect, device number 99 [ 1844.600661][T27080] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1844.611479][T27080] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1844.701310][T27078] usb 3-1: string descriptor 0 read error: -71 [ 1844.720008][T15285] usb 3-1: USB disconnect, device number 21 [ 1845.086275][T27101] syzkaller1: entered promiscuous mode [ 1845.102038][T27101] syzkaller1: entered allmulticast mode [ 1845.340714][T27106] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1845.501288][T27110] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1845.530646][T27110] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1845.627496][T27118] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 1845.694408][T27118] syzkaller1: entered promiscuous mode [ 1845.701284][T27118] syzkaller1: entered allmulticast mode [ 1845.715592][T27121] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1845.880474][T27124] sctp: [Deprecated]: syz.6.5701 (pid 27124) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1845.880474][T27124] Use struct sctp_sack_info instead [ 1847.120149][T27146] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1847.140330][T27146] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1848.223101][T23913] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 1848.402957][T23913] usb 5-1: Using ep0 maxpacket: 32 [ 1848.443380][T23913] usb 5-1: config 9 has an invalid interface number: 8 but max is 3 [ 1848.457032][T23913] usb 5-1: config 9 contains an unexpected descriptor of type 0x2, skipping [ 1848.503533][T23913] usb 5-1: config 9 contains an unexpected descriptor of type 0x2, skipping [ 1848.530940][T23913] usb 5-1: config 9 contains an unexpected descriptor of type 0x2, skipping [ 1848.555114][T23913] usb 5-1: config 9 has an invalid descriptor of length 255, skipping remainder of the config [ 1848.599557][T23913] usb 5-1: config 9 has 1 interface, different from the descriptor's value: 4 [ 1848.613951][T27170] sctp: [Deprecated]: syz.0.5712 (pid 27170) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1848.613951][T27170] Use struct sctp_sack_info instead [ 1848.618977][T23913] usb 5-1: config 9 has no interface number 0 [ 1848.661038][T23913] usb 5-1: config 9 interface 8 altsetting 0 bulk endpoint 0xF has invalid maxpacket 1023 [ 1848.691486][T23913] usb 5-1: config 9 interface 8 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1848.722026][T23913] usb 5-1: config 9 interface 8 altsetting 0 has a duplicate endpoint with address 0x1, skipping [ 1848.758183][T23913] usb 5-1: config 9 interface 8 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 11 [ 1848.805391][T23913] usb 5-1: New USB device found, idVendor=eb2a, idProduct=17de, bcdDevice=e2.49 [ 1848.826256][T23913] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1848.836666][T23913] usb 5-1: Product: 䤪霻泘뉨∪튶䟐／굂鎭ヰ偶쨵熦慥옧陣㷕Ⳁ甏躘譛ഋ滢㎔艗톼緘榆壜妄ה㵠᭖鐜낡䀕晖蓱棯認⇦ᥱ겸⢊諆벺㌿缇쮀焪ࢡኜ鑦뷮椪چ夓奍᪵奿 [ 1848.858306][T23913] usb 5-1: Manufacturer: 劽炰袸穾逢됑∉첛䣔⮋ŗ婞ݩ蒒憽ሄ꼸钯ﳭ︘휠塞ᥑ콕낟棂Ž힩≶ꮧ叇ጎ௚鳼豿燝딤햣☐᭦햌讬ࣩ締갡䢂偱躲⩿繒ꁿ⪁ȣ饁馳魫齹颧炁쐠璼鰩啜ᣁ푋眹㋏陿ﾉ澑꩏ٶ罙ᷖ濁䍼䋻똛偓蘾뎀肪珷ᩭ┓䥥쑺 [ 1848.898914][T23913] usb 5-1: SerialNumber: 끠柹婥ͤ絏ᩡ勿訟䉔ᡴ퐣㷇ⷳ䰁ஐ﷣䩧룔鞽皴茀쎂ᇱ鋹鶪셧ꋌ괨訾녎ྮᇦﲟצ餇ᎎ郹ꈤ琕﶑ཚ也挌맚ꖹℲ내掊膫䃨柈繒ﱹ熛똓멱첁䳥睏粹䃋勻ዸ►ᡑ瑝㢽ꨣ歄㙘疴뀑氌㼝힯⾇⌰ꈡ寇꒻ࣕ㘢계렐葆쨰釔⿮㘼쟖߸녂跴杤펁⯗ᣄ蔖汷䲑㭕̦꿏н䑳 [ 1848.947381][T27161] raw-gadget.6 gadget.4: fail, usb_ep_enable returned -22 [ 1849.594948][T15285] usb 4-1: new full-speed USB device number 120 using dummy_hcd [ 1849.926608][T27183] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1849.936864][T27183] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1849.967415][T15285] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1849.984069][T15285] usb 4-1: New USB device found, idVendor=6737, idProduct=0001, bcdDevice=a4.72 [ 1849.993426][T15285] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1850.377894][T27175] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5713'. [ 1850.388701][T27175] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5713'. [ 1850.558772][T27190] netlink: 128 bytes leftover after parsing attributes in process `syz.0.5716'. [ 1850.576719][T15285] usb 4-1: string descriptor 0 read error: -71 [ 1850.595676][T15285] cypress_m8 4-1:2.0: HID->COM RS232 Adapter converter detected [ 1850.616478][T15285] cyphidcom ttyUSB0: required endpoint is missing [ 1850.640151][T15285] usb 4-1: USB disconnect, device number 120 [ 1850.684749][T15285] cypress_m8 4-1:2.0: device disconnected [ 1850.985373][T23913] dvb-usb: found a 'KWorld Xpert DVB-T USB2.0' in cold state, will try to load a firmware [ 1851.029310][T23913] usb 5-1: Direct firmware load for dvb-usb-adstech-usb2-02.fw failed with error -2 [ 1851.058062][T23913] usb 5-1: Falling back to sysfs fallback for: dvb-usb-adstech-usb2-02.fw [ 1851.472179][T27210] ip6gre1: left allmulticast mode [ 1853.468844][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1853.475300][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1853.576265][T27228] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5724'. [ 1853.703194][T27229] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5724'. [ 1854.025628][T27233] sctp: [Deprecated]: syz.6.5726 (pid 27233) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1854.025628][T27233] Use struct sctp_sack_info instead [ 1854.058507][T27235] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1854.114897][T27235] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1854.303022][T18330] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 1854.493814][T18330] usb 3-1: Using ep0 maxpacket: 16 [ 1854.522432][T18330] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1854.543857][T18330] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1854.609588][T18330] usb 3-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 1854.646352][T18330] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1854.725994][T18330] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1854.759672][T18330] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1854.794488][T18330] usb 3-1: Manufacturer: syz [ 1854.826259][T18330] usb 3-1: config 0 descriptor?? [ 1854.988968][T27246] syzkaller0: entered promiscuous mode [ 1855.137882][T27246] syzkaller0: entered allmulticast mode [ 1855.179885][T15285] usb 3-1: USB disconnect, device number 22 [ 1856.460494][T27268] xt_hashlimit: overflow, try lower: 3/0 [ 1856.754405][T27273] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5737'. [ 1856.774671][T27273] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5737'. [ 1856.949618][T27275] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1856.970117][T27276] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1856.979862][T27275] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1857.016795][T27276] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1857.647867][ T29] kauditd_printk_skb: 17 callbacks suppressed [ 1857.647888][ T29] audit: type=1326 audit(1772293048.250:2025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27280 comm="syz.2.5740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b6d79c799 code=0x7ffc0000 [ 1857.728702][ T29] audit: type=1326 audit(1772293048.250:2026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27280 comm="syz.2.5740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1b6d75cfce code=0x7ffc0000 [ 1857.771252][ T29] audit: type=1326 audit(1772293048.250:2027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27280 comm="syz.2.5740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b6d79c799 code=0x7ffc0000 [ 1857.836971][ T29] audit: type=1326 audit(1772293048.260:2028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27280 comm="syz.2.5740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=17 compat=0 ip=0x7f1b6d79c799 code=0x7ffc0000 [ 1857.889889][ T29] audit: type=1326 audit(1772293048.260:2029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27280 comm="syz.2.5740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b6d79c799 code=0x7ffc0000 [ 1857.966647][ T29] audit: type=1326 audit(1772293048.260:2030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27280 comm="syz.2.5740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f1b6d79c799 code=0x7ffc0000 [ 1858.030063][ T29] audit: type=1326 audit(1772293048.260:2031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27280 comm="syz.2.5740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b6d79c799 code=0x7ffc0000 [ 1858.287028][ T29] audit: type=1326 audit(1772293048.260:2032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27280 comm="syz.2.5740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1b6d75cfce code=0x7ffc0000 [ 1858.319040][ T29] audit: type=1326 audit(1772293048.260:2033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27280 comm="syz.2.5740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b6d79c799 code=0x7ffc0000 [ 1858.475939][ T29] audit: type=1326 audit(1772293048.260:2034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27280 comm="syz.2.5740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7f1b6d79c799 code=0x7ffc0000 [ 1859.355150][T27309] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5746'. [ 1860.423916][T18195] IPVS: ip_vs_send_async error -101 [ 1861.454605][T27259] geneve2: entered promiscuous mode [ 1861.459842][T27259] geneve2: entered allmulticast mode [ 1861.485766][T27262] batman_adv: batadv0: Adding interface: macvlan2 [ 1861.492202][T27262] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1861.532433][T27262] batman_adv: batadv0: Not using interface macvlan2 (retrying later): interface not active [ 1861.559598][T27307] ip6gre2: entered allmulticast mode [ 1861.727529][T27309] bond3: Unable to set down delay as MII monitoring is disabled [ 1861.894397][T27317] fuse: Bad value for 'group_id' [ 1861.899795][T27317] fuse: Bad value for 'group_id' [ 1862.025665][T27309] bond3 (unregistering): Released all slaves [ 1864.094565][T27333] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1864.107586][T27333] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1864.463243][T18315] usb 4-1: new full-speed USB device number 121 using dummy_hcd [ 1864.716084][T18315] usb 4-1: config 0 has an invalid interface number: 110 but max is 0 [ 1864.739953][T18315] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1864.760755][T18315] usb 4-1: config 0 has no interface number 0 [ 1864.772869][T18315] usb 4-1: config 0 interface 110 altsetting 2 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1864.802371][T18315] usb 4-1: config 0 interface 110 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1864.827906][T18315] usb 4-1: config 0 interface 110 has no altsetting 0 [ 1864.851277][T18315] usb 4-1: New USB device found, idVendor=0547, idProduct=2720, bcdDevice=af.55 [ 1864.862233][T18315] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1864.880954][T18315] usb 4-1: Product: syz [ 1864.891037][T18315] usb 4-1: Manufacturer: syz [ 1864.903078][T18315] usb 4-1: SerialNumber: syz [ 1864.952431][T18315] usb 4-1: config 0 descriptor?? [ 1865.024398][T27345] fuse: Unknown parameter '0x0000000000000003' [ 1865.274750][T18315] cdc_subset 4-1:0.110: probe with driver cdc_subset failed with error -22 [ 1865.425400][T27349] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1865.450807][T27349] team0: Port device batadv1 added [ 1865.491337][T18330] usb 4-1: USB disconnect, device number 121 [ 1866.072929][T18330] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 1866.260429][T18330] usb 3-1: Using ep0 maxpacket: 8 [ 1866.294861][T18330] usb 3-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=4d.89 [ 1866.308884][T18330] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1866.321435][T18330] usb 3-1: config 0 descriptor?? [ 1866.335911][T18330] gm12u320 3-1:0.0: [drm:gm12u320_set_ecomode] *ERROR* Misc. req. error -22 [ 1866.345449][T18330] gm12u320 3-1:0.0: probe with driver gm12u320 failed with error -5 [ 1866.366097][T18330] usb-storage 3-1:0.0: USB Mass Storage device detected [ 1866.382944][T27091] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 1866.403378][T27362] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1866.416539][T18330] usb-storage 3-1:0.0: device ignored [ 1866.422638][T27362] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1866.545249][T27353] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1866.566017][T27091] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1866.584935][T27353] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1866.609781][T27091] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1866.618409][T18309] usb 3-1: USB disconnect, device number 23 [ 1866.630071][T27091] usb 4-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=b1.f9 [ 1866.639634][T27091] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1866.649095][T27091] usb 4-1: Product: syz [ 1866.653746][T27091] usb 4-1: Manufacturer: syz [ 1866.658579][T27091] usb 4-1: SerialNumber: syz [ 1866.667703][T27091] usb 4-1: config 0 descriptor?? [ 1866.689639][T27091] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 1866.725624][T27091] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1866.736253][T27091] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 1866.748476][T27091] usb 4-1: media controller created [ 1866.848479][T27091] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1867.130026][T27091] DVB: Unable to find symbol tda10046_attach() [ 1867.151706][T27369] netlink: 100 bytes leftover after parsing attributes in process `syz.6.5763'. [ 1867.171355][T27091] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 1867.185493][T27091] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 1867.685354][T27091] dvb_usb_m920x 4-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 1867.707520][T27091] usb 4-1: USB disconnect, device number 122 [ 1867.820128][T27373] syzkaller1: entered promiscuous mode [ 1867.926376][T27373] syzkaller1: entered allmulticast mode [ 1868.240090][T27376] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1868.268821][T27376] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1868.977663][T18308] usb 3-1: new low-speed USB device number 24 using dummy_hcd [ 1869.092946][T18315] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 1869.155950][T18308] usb 3-1: config index 0 descriptor too short (expected 1307, got 27) [ 1869.194523][T18308] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 1869.226023][T18308] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1869.253359][T18308] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 1869.285035][T18315] usb 4-1: Using ep0 maxpacket: 8 [ 1869.325372][T18315] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1869.340441][T18308] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 1869.361002][T18315] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1869.374179][T18308] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1869.392434][T18315] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 46624, setting to 1024 [ 1869.405987][T18308] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 1869.433427][T18315] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1869.454639][T18315] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1869.488235][T18308] usb 3-1: string descriptor 0 read error: -22 [ 1869.495092][T18308] usb 3-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 1869.506409][T27396] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5771'. [ 1869.519848][T18315] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1869.531686][T18308] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1869.548800][T18315] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1869.576591][T18308] usb 3-1: config 0 descriptor?? [ 1869.631798][T18308] hub 3-1:0.0: bad descriptor, ignoring hub [ 1869.677184][T18308] hub 3-1:0.0: probe with driver hub failed with error -5 [ 1869.718989][T18308] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input140 [ 1869.868009][T18308] input: failed to attach handler mousedev to device input140, error: -5 [ 1870.208546][T18315] usb 4-1: GET_CAPABILITIES returned 0 [ 1870.235654][T18315] usbtmc 4-1:16.0: can't read capabilities [ 1870.331577][T18315] usb 3-1: USB disconnect, device number 24 [ 1870.605095][T27397] syz.0.5771 (27397): drop_caches: 2 [ 1870.934863][T27399] syz.0.5771 (27399): drop_caches: 2 [ 1871.352967][T15285] usb 3-1: new full-speed USB device number 25 using dummy_hcd [ 1871.526177][T15285] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1871.567976][T15285] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1871.601936][T15285] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1871.639997][T15285] usb 3-1: config 0 descriptor?? [ 1871.836460][T27421] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5779'. [ 1872.080833][T15285] elan 0003:04F3:0755.0040: unknown main item tag 0x0 [ 1872.100612][T15285] elan 0003:04F3:0755.0040: unknown main item tag 0x0 [ 1872.128584][T15285] elan 0003:04F3:0755.0040: unknown main item tag 0x0 [ 1872.143004][T15285] elan 0003:04F3:0755.0040: unknown main item tag 0x0 [ 1872.159110][T15285] elan 0003:04F3:0755.0040: unknown main item tag 0x0 [ 1872.168740][T27091] usb 4-1: USB disconnect, device number 123 [ 1872.186826][T15285] elan 0003:04F3:0755.0040: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.2-1/input0 [ 1872.199609][T27425] xt_cgroup: invalid path, errno=-2 [ 1872.288432][T18309] usb 3-1: USB disconnect, device number 25 [ 1872.648469][T27431] ip6erspan1: entered allmulticast mode [ 1872.673065][T18309] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 1872.731204][T27431] bond6: ARP target 9.0.0.0 is already present [ 1872.738061][T27431] bond6: option arp_ip_target: invalid value (9) [ 1872.774696][T27431] bond6 (unregistering): Released all slaves [ 1872.828950][T18309] usb 4-1: device descriptor read/64, error -71 [ 1873.082941][T18309] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 1873.192995][T18308] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 1873.223145][T18309] usb 4-1: device descriptor read/64, error -71 [ 1873.393432][T18309] usb usb4-port1: attempt power cycle [ 1873.418363][T18308] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1873.427360][T18308] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1873.438089][T18308] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1873.753365][T18308] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1873.775548][T18308] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1873.822906][T18309] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 1873.896275][T18308] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1873.920553][T18308] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1873.933222][T18309] usb 4-1: device descriptor read/8, error -71 [ 1873.951406][T18308] usb 3-1: Product: syz [ 1873.965558][T18308] usb 3-1: Manufacturer: syz [ 1874.035391][T27465] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1874.044619][T27465] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1874.086202][T18308] cdc_wdm 3-1:1.0: skipping garbage [ 1874.096114][T18308] cdc_wdm 3-1:1.0: skipping garbage [ 1874.107289][T18308] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 1874.118762][T18308] cdc_wdm 3-1:1.0: Unknown control protocol [ 1874.212936][T18309] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 1874.241660][T18309] usb 4-1: device descriptor read/8, error -71 [ 1874.289575][T27442] x_tables: unsorted entry at hook 1 [ 1874.299337][T18308] usb 3-1: USB disconnect, device number 26 [ 1874.353383][T18309] usb usb4-port1: unable to enumerate USB device [ 1874.959941][T27475] macsec2: entered promiscuous mode [ 1874.965892][T27475] bridge0: entered promiscuous mode [ 1874.977284][T27475] macsec2: entered allmulticast mode [ 1874.984283][T27475] bridge0: entered allmulticast mode [ 1875.065440][T27475] bridge0: port 3(macsec2) entered blocking state [ 1875.171943][T27475] bridge0: port 3(macsec2) entered disabled state [ 1875.237812][T27475] bridge0: left allmulticast mode [ 1875.254761][T27475] bridge0: left promiscuous mode [ 1875.615826][T27483] syzkaller1: entered promiscuous mode [ 1875.625680][T27483] syzkaller1: entered allmulticast mode [ 1875.981032][T27485] netlink: 4112 bytes leftover after parsing attributes in process `syz.3.5795'. [ 1876.056092][T27485] openvswitch: netlink: Key type 173 is out of range max 32 [ 1876.951734][T27494] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1876.984803][T27494] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1877.038872][T27494] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1877.095209][T27494] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1878.137842][T27522] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1878.154407][T27522] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1878.193711][T27091] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 1878.221792][T27526] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1878.267266][T27526] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1878.370644][T27523] syzkaller1: entered promiscuous mode [ 1878.385551][T27523] syzkaller1: entered allmulticast mode [ 1878.411685][T27521] syzkaller1: entered promiscuous mode [ 1878.428889][T27521] syzkaller1: entered allmulticast mode [ 1878.809916][T27534] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1878.928856][T27534] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1879.434365][T27542] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1879.456708][T27542] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1879.596150][T27545] binder: 27544:27545 ioctl c00c620f 200000000140 returned -22 [ 1879.723639][T27548] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1879.743487][T27548] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1880.020276][T27555] syzkaller1: entered promiscuous mode [ 1880.036409][T27555] syzkaller1: entered allmulticast mode [ 1880.063317][T27555] FAULT_INJECTION: forcing a failure. [ 1880.063317][T27555] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1880.108638][T27555] CPU: 1 UID: 0 PID: 27555 Comm: syz.2.5816 Tainted: G L syzkaller #0 PREEMPT(full) [ 1880.108678][T27555] Tainted: [L]=SOFTLOCKUP [ 1880.108687][T27555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1880.108701][T27555] Call Trace: [ 1880.108710][T27555] [ 1880.108720][T27555] dump_stack_lvl+0xe8/0x150 [ 1880.108768][T27555] should_fail_ex+0x412/0x560 [ 1880.108797][T27555] _copy_from_iter+0x1d3/0x1670 [ 1880.108833][T27555] ? __pfx__copy_from_iter+0x10/0x10 [ 1880.108856][T27555] ? sock_alloc_send_pskb+0x896/0x990 [ 1880.108891][T27555] ? __pfx__copy_from_iter+0x10/0x10 [ 1880.108919][T27555] ? page_copy_sane+0x16a/0x270 [ 1880.108944][T27555] copy_page_from_iter+0xdd/0x170 [ 1880.108974][T27555] skb_copy_datagram_from_iter+0x306/0x710 [ 1880.109004][T27555] tun_get_user+0xc38/0x3dd0 [ 1880.109042][T27555] ? aa_file_perm+0x192/0x15e0 [ 1880.109072][T27555] ? aa_file_perm+0x50e/0x15e0 [ 1880.109096][T27555] ? __pfx_tun_get_user+0x10/0x10 [ 1880.109119][T27555] ? aa_file_perm+0x192/0x15e0 [ 1880.109149][T27555] ? __lock_acquire+0x6b5/0x2cf0 [ 1880.109183][T27555] ? ref_tracker_alloc+0x35c/0x4c0 [ 1880.109211][T27555] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1880.109241][T27555] ? tun_get+0x1c/0x2f0 [ 1880.109270][T27555] ? tun_get+0x1c/0x2f0 [ 1880.109294][T27555] ? tun_get+0x1c/0x2f0 [ 1880.109323][T27555] tun_chr_write_iter+0x113/0x200 [ 1880.109352][T27555] vfs_write+0x61d/0xb90 [ 1880.109381][T27555] ? __pfx_vfs_write+0x10/0x10 [ 1880.109410][T27555] ? __fget_files+0x2a/0x420 [ 1880.109446][T27555] ksys_write+0x150/0x270 [ 1880.109476][T27555] ? __pfx_ksys_write+0x10/0x10 [ 1880.109505][T27555] do_syscall_64+0x14d/0xf80 [ 1880.109542][T27555] ? trace_irq_disable+0x3b/0x150 [ 1880.109572][T27555] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1880.109594][T27555] ? clear_bhb_loop+0x40/0x90 [ 1880.109619][T27555] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1880.109640][T27555] RIP: 0033:0x7f1b6d79c799 [ 1880.109661][T27555] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1880.109679][T27555] RSP: 002b:00007f1b6e66a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1880.109703][T27555] RAX: ffffffffffffffda RBX: 00007f1b6da15fa0 RCX: 00007f1b6d79c799 [ 1880.109718][T27555] RDX: 000000000000fdef RSI: 00002000000004c0 RDI: 0000000000000003 [ 1880.109731][T27555] RBP: 00007f1b6e66a090 R08: 0000000000000000 R09: 0000000000000000 [ 1880.109743][T27555] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1880.109756][T27555] R13: 00007f1b6da16038 R14: 00007f1b6da15fa0 R15: 00007f1b6db3fa48 [ 1880.109787][T27555] [ 1881.393417][T18308] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 1881.553207][T18308] usb 4-1: Using ep0 maxpacket: 16 [ 1881.560624][T18308] usb 4-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 1881.570793][T18308] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1881.599448][T27590] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1881.618830][T27590] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1881.652469][T18308] usb 4-1: config 0 descriptor?? [ 1881.658054][T27565] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5817'. [ 1881.820066][T18308] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 1882.471515][T27593] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1882.534316][T27593] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1884.770130][T27611] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1884.781612][T27611] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1884.798628][T27616] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1884.812575][T27616] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1884.933019][T18308] gspca_sonixj: reg_w err -110 [ 1884.937941][T18308] sonixj 4-1:0.0: probe with driver sonixj failed with error -110 [ 1884.977215][T27565] bond6: Unable to set down delay as MII monitoring is disabled [ 1885.005885][T27565] bond6 (unregistering): Released all slaves [ 1885.088059][T18325] usb 4-1: USB disconnect, device number 3 [ 1885.541151][T27632] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1885.551520][T27632] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1886.007024][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 1886.007040][ T29] audit: type=1804 audit(1772293076.630:2041): pid=27641 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.5842" name="/newroot/550/file1" dev="fuse" ino=1 res=1 errno=0 [ 1886.089393][T27644] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1886.155852][T27644] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1886.461799][T27646] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1886.509597][T27646] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1887.882718][T27665] geneve2: left allmulticast mode [ 1888.103162][T18325] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 1888.241053][T27673] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1888.291707][T27673] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1888.348552][T18325] usb 3-1: Using ep0 maxpacket: 32 [ 1888.401401][T18325] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1888.415393][T18325] usb 3-1: config 7 has an invalid interface number: 187 but max is 0 [ 1888.424449][T18325] usb 3-1: config 7 has no interface number 0 [ 1888.430692][T18325] usb 3-1: config 7 interface 187 altsetting 6 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1888.442508][T18325] usb 3-1: config 7 interface 187 altsetting 6 bulk endpoint 0x3 has invalid maxpacket 0 [ 1888.600298][T18325] usb 3-1: config 7 interface 187 has no altsetting 0 [ 1888.675528][T18325] usb 3-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 1888.701774][T18325] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1888.773360][T18325] usb 3-1: Product: syz [ 1888.799575][T18325] usb 3-1: Manufacturer: syz [ 1888.815109][T18325] usb 3-1: SerialNumber: syz [ 1889.105637][T18325] usb 3-1: Unknown endpoint type found, address 0x07 [ 1889.156354][T18325] usb 3-1: Not enough endpoints found in device, aborting! [ 1889.410124][T27682] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1889.510790][T27682] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1889.540311][T27682] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1889.561211][T27682] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1890.592474][T27687] ip6erspan1: left allmulticast mode [ 1890.684144][T18325] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 1890.874712][T18325] usb 4-1: Using ep0 maxpacket: 16 [ 1890.924174][T18325] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1890.971722][T18325] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1891.056186][T18325] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1891.103653][T18325] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1891.135806][T18325] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1891.213433][T18325] usb 4-1: config 0 descriptor?? [ 1891.879732][T18325] usbhid 4-1:0.0: can't add hid device: -71 [ 1891.896118][T18325] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1891.975876][T18325] usb 4-1: USB disconnect, device number 4 [ 1892.118437][T18308] usb 3-1: USB disconnect, device number 27 [ 1892.448039][T27710] netlink: 88 bytes leftover after parsing attributes in process `syz.2.5856'. [ 1892.946187][T27714] usb usb9: usbfs: process 27714 (syz.6.5858) did not claim interface 2 before use [ 1893.636189][T27722] kvm: pic: non byte write [ 1894.316796][T27731] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1894.375056][T27731] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1894.413648][T27731] netlink: 'syz.0.5862': attribute type 6 has an invalid length. [ 1894.452330][T27731] netlink: 'syz.0.5862': attribute type 6 has an invalid length. [ 1894.562633][T27731] tipc: Started in network mode [ 1894.567602][T27731] tipc: Node identity 1eb96de0ac7f, cluster identity 4711 [ 1894.577593][T27731] tipc: Enabled bearer , priority 0 [ 1894.594584][T27731] syzkaller0: entered promiscuous mode [ 1894.600282][T27731] syzkaller0: entered allmulticast mode [ 1894.729824][T18309] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 1894.885313][T18309] usb 3-1: Using ep0 maxpacket: 32 [ 1894.907292][T18309] usb 3-1: config 0 has an invalid interface number: 35 but max is 0 [ 1894.932934][T18309] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1894.956279][T18309] usb 3-1: config 0 has no interface number 0 [ 1894.962479][T18309] usb 3-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1895.015211][T18309] usb 3-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 1895.028410][T18309] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1895.046919][T18309] usb 3-1: Product: syz [ 1895.051144][T18309] usb 3-1: Manufacturer: syz [ 1895.067201][T18309] usb 3-1: SerialNumber: syz [ 1895.085169][T18309] usb 3-1: config 0 descriptor?? [ 1895.106266][T18309] radio-si470x 3-1:0.35: could not find interrupt in endpoint [ 1895.124186][T18309] radio-si470x 3-1:0.35: probe with driver radio-si470x failed with error -5 [ 1895.184380][T27731] tipc: Resetting bearer [ 1895.285618][T27731] tipc: Disabling bearer [ 1895.314273][T18309] radio-raremono 3-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 1895.502024][T27741] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1895.522740][T18309] radio-raremono 3-1:0.35: V4L2 device registered as radio48 [ 1895.533401][T27741] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1895.726099][T18309] usb 3-1: USB disconnect, device number 28 [ 1895.732653][T18309] radio-raremono 3-1:0.35: Thanko's Raremono disconnected [ 1899.062955][T27091] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 1899.223702][T27091] usb 3-1: Using ep0 maxpacket: 32 [ 1899.232878][T27091] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1899.253864][T27091] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1899.281809][T27091] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1899.327301][T27091] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1899.354312][T27091] usb 3-1: Product: syz [ 1899.372256][T27091] usb 3-1: Manufacturer: syz [ 1899.410354][T27091] hub 3-1:4.0: USB hub found [ 1899.607594][T27091] hub 3-1:4.0: 2 ports detected [ 1901.027506][T18330] usb 3-1: USB disconnect, device number 29 [ 1901.836975][T27814] netlink: 104 bytes leftover after parsing attributes in process `syz.2.5886'. [ 1901.967252][T27815] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5885'. [ 1902.114250][T27815] bond1: Unable to set down delay as MII monitoring is disabled [ 1902.157294][T27815] bond1 (unregistering): Released all slaves [ 1902.180412][T27827] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4068521576 (4068521576 ns) > initial count (2794446801 ns). Using initial count to start timer. [ 1902.429067][T27823] syzkaller1: entered promiscuous mode [ 1902.451493][T27823] syzkaller1: entered allmulticast mode [ 1902.960929][ T29] audit: type=1326 audit(1772293093.580:2042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27834 comm="syz.6.5891" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f578699c799 code=0x0 [ 1903.695595][T27829] tipc: Started in network mode [ 1903.700560][T27829] tipc: Node identity 025a87c379f7, cluster identity 4711 [ 1903.761271][T27829] tipc: Enabled bearer , priority 0 [ 1903.770130][T27848] syzkaller0: entered promiscuous mode [ 1903.814296][T27848] syzkaller0: entered allmulticast mode [ 1904.527395][T27822] tipc: Resetting bearer [ 1904.676599][T27822] tipc: Disabling bearer [ 1905.014808][T27852] [ 1905.017223][T27852] ===================================================== [ 1905.024263][T27852] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 1905.031730][T27852] syzkaller #0 Tainted: G L [ 1905.037712][T27852] ----------------------------------------------------- [ 1905.044644][T27852] syz.6.5891/27852 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 1905.052363][T27852] ffff8880606f9f30 (&new->fa_lock){....}-{3:3}, at: kill_fasync+0x199/0x4d0 [ 1905.061079][T27852] [ 1905.061079][T27852] and this task is already holding: [ 1905.068445][T27852] ffff8880513b0468 (&tty->flow.lock){....}-{3:3}, at: n_tty_ioctl_helper+0xe0/0x4d0 [ 1905.077877][T27852] which would create a new lock dependency: [ 1905.083855][T27852] (&tty->flow.lock){....}-{3:3} -> (&new->fa_lock){....}-{3:3} [ 1905.091557][T27852] [ 1905.091557][T27852] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 1905.101004][T27852] (&dev->event_lock#2){..-.}-{3:3} [ 1905.101038][T27852] [ 1905.101038][T27852] ... which became SOFTIRQ-irq-safe at: [ 1905.113950][T27852] lock_acquire+0xf0/0x2e0 [ 1905.118487][T27852] _raw_spin_lock_irqsave+0x40/0x60 [ 1905.123886][T27852] input_inject_event+0xa5/0x340 [ 1905.128938][T27852] led_trigger_event+0x138/0x210 [ 1905.133987][T27852] kbd_bh+0x1f3/0x300 [ 1905.138073][T27852] tasklet_action_common+0x2da/0x4b0 [ 1905.143476][T27852] handle_softirqs+0x22a/0x870 [ 1905.148359][T27852] run_ksoftirqd+0x36/0x60 [ 1905.152899][T27852] smpboot_thread_fn+0x541/0xa50 [ 1905.157948][T27852] kthread+0x388/0x470 [ 1905.162116][T27852] ret_from_fork+0x51e/0xb90 [ 1905.166827][T27852] ret_from_fork_asm+0x1a/0x30 [ 1905.171704][T27852] [ 1905.171704][T27852] to a SOFTIRQ-irq-unsafe lock: [ 1905.178740][T27852] (tasklist_lock){.+.+}-{3:3} [ 1905.178769][T27852] [ 1905.178769][T27852] ... which became SOFTIRQ-irq-unsafe at: [ 1905.191445][T27852] ... [ 1905.191452][T27852] lock_acquire+0xf0/0x2e0 [ 1905.198573][T27852] _raw_read_lock+0x36/0x50 [ 1905.203196][T27852] __do_wait+0xde/0x740 [ 1905.207458][T27852] do_wait+0x1e7/0x540 [ 1905.211631][T27852] kernel_wait+0xd6/0x1c0 [ 1905.216069][T27852] call_usermodehelper_exec_work+0xbe/0x230 [ 1905.222075][T27852] process_scheduled_works+0xb02/0x1830 [ 1905.227820][T27852] worker_thread+0xa50/0xfc0 [ 1905.232516][T27852] kthread+0x388/0x470 [ 1905.236687][T27852] ret_from_fork+0x51e/0xb90 [ 1905.241389][T27852] ret_from_fork_asm+0x1a/0x30 [ 1905.246267][T27852] [ 1905.246267][T27852] other info that might help us debug this: [ 1905.246267][T27852] [ 1905.256516][T27852] Chain exists of: [ 1905.256516][T27852] &dev->event_lock#2 --> &tty->flow.lock --> tasklist_lock [ 1905.256516][T27852] [ 1905.269696][T27852] Possible interrupt unsafe locking scenario: [ 1905.269696][T27852] [ 1905.278223][T27852] CPU0 CPU1 [ 1905.283792][T27852] ---- ---- [ 1905.289197][T27852] lock(tasklist_lock); [ 1905.293494][T27852] local_irq_disable(); [ 1905.300291][T27852] lock(&dev->event_lock#2); [ 1905.307533][T27852] lock(&tty->flow.lock); [ 1905.314514][T27852] [ 1905.318003][T27852] lock(&dev->event_lock#2); [ 1905.322894][T27852] [ 1905.322894][T27852] *** DEADLOCK *** [ 1905.322894][T27852] [ 1905.331152][T27852] 4 locks held by syz.6.5891/27852: [ 1905.336373][T27852] #0: ffff8880513b00a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1905.346173][T27852] #1: ffff8880513b0468 (&tty->flow.lock){....}-{3:3}, at: n_tty_ioctl_helper+0xe0/0x4d0 [ 1905.356153][T27852] #2: ffff8880513b00a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref+0x1c/0x90 [ 1905.365588][T27852] #3: ffffffff8e7602e0 (rcu_read_lock){....}-{1:3}, at: kill_fasync+0x53/0x4d0 [ 1905.374669][T27852] [ 1905.374669][T27852] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 1905.385092][T27852] -> (&dev->event_lock#2){..-.}-{3:3} { [ 1905.390869][T27852] IN-SOFTIRQ-W at: [ 1905.395044][T27852] lock_acquire+0xf0/0x2e0 [ 1905.401487][T27852] _raw_spin_lock_irqsave+0x40/0x60 [ 1905.408722][T27852] input_inject_event+0xa5/0x340 [ 1905.415741][T27852] led_trigger_event+0x138/0x210 [ 1905.422747][T27852] kbd_bh+0x1f3/0x300 [ 1905.428837][T27852] tasklet_action_common+0x2da/0x4b0 [ 1905.436446][T27852] handle_softirqs+0x22a/0x870 [ 1905.443251][T27852] run_ksoftirqd+0x36/0x60 [ 1905.449718][T27852] smpboot_thread_fn+0x541/0xa50 [ 1905.456706][T27852] kthread+0x388/0x470 [ 1905.462895][T27852] ret_from_fork+0x51e/0xb90 [ 1905.469531][T27852] ret_from_fork_asm+0x1a/0x30 [ 1905.476320][T27852] INITIAL USE at: [ 1905.480413][T27852] lock_acquire+0xf0/0x2e0 [ 1905.486774][T27852] _raw_spin_lock_irqsave+0x40/0x60 [ 1905.493907][T27852] input_inject_event+0xa5/0x340 [ 1905.500791][T27852] kbd_led_trigger_activate+0xbc/0x100 [ 1905.508294][T27852] led_trigger_set+0x535/0x960 [ 1905.515004][T27852] led_trigger_set_default+0x260/0x2a0 [ 1905.522392][T27852] led_classdev_register_ext+0x787/0x9c0 [ 1905.529968][T27852] input_leds_connect+0x517/0x790 [ 1905.537153][T27852] input_register_device+0xd00/0x1160 [ 1905.544462][T27852] atkbd_connect+0x731/0xa50 [ 1905.550993][T27852] serio_driver_probe+0x82/0xd0 [ 1905.557782][T27852] really_probe+0x267/0xaf0 [ 1905.564220][T27852] __driver_probe_device+0x18c/0x320 [ 1905.571462][T27852] driver_probe_device+0x4f/0x240 [ 1905.578435][T27852] __driver_attach+0x3e7/0x710 [ 1905.585128][T27852] bus_for_each_dev+0x23b/0x2c0 [ 1905.591913][T27852] serio_handle_event+0x20a/0xdd0 [ 1905.598882][T27852] process_scheduled_works+0xb02/0x1830 [ 1905.606470][T27852] worker_thread+0xa50/0xfc0 [ 1905.612998][T27852] kthread+0x388/0x470 [ 1905.618996][T27852] ret_from_fork+0x51e/0xb90 [ 1905.625519][T27852] ret_from_fork_asm+0x1a/0x30 [ 1905.632223][T27852] } [ 1905.634927][T27852] ... key at: [] input_allocate_device.__key.7+0x0/0x20 [ 1905.644217][T27852] -> (kbd_event_lock){....}-{3:3} { [ 1905.649539][T27852] INITIAL USE at: [ 1905.653530][T27852] lock_acquire+0xf0/0x2e0 [ 1905.659792][T27852] _raw_spin_lock_irqsave+0x40/0x60 [ 1905.666766][T27852] vt_reset_unicode+0x2b/0x1a0 [ 1905.673296][T27852] reset_vc+0x68/0x1b0 [ 1905.679135][T27852] vc_init+0x70/0x4a0 [ 1905.684894][T27852] con_init+0x377/0x6a0 [ 1905.690839][T27852] console_init+0x10b/0x4d0 [ 1905.697112][T27852] start_kernel+0x22b/0x3d0 [ 1905.703429][T27852] x86_64_start_reservations+0x24/0x30 [ 1905.710646][T27852] x86_64_start_kernel+0x143/0x1c0 [ 1905.717528][T27852] common_startup_64+0x13e/0x147 [ 1905.724223][T27852] } [ 1905.726836][T27852] ... key at: [] kbd_event_lock+0x18/0xa0 [ 1905.734871][T27852] ... acquired at: [ 1905.738775][T27852] _raw_spin_lock+0x2e/0x40 [ 1905.743472][T27852] kbd_event+0xd6/0x40d0 [ 1905.747906][T27852] input_handle_events_default+0xd4/0x1a0 [ 1905.753819][T27852] input_pass_values+0x288/0x890 [ 1905.758977][T27852] input_event_dispose+0x330/0x6b0 [ 1905.764292][T27852] input_inject_event+0x1dd/0x340 [ 1905.769512][T27852] evdev_write+0x325/0x4c0 [ 1905.774129][T27852] vfs_write+0x29a/0xb90 [ 1905.778767][T27852] ksys_write+0x150/0x270 [ 1905.783308][T27852] do_syscall_64+0x14d/0xf80 [ 1905.788091][T27852] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1905.794176][T27852] [ 1905.796515][T27852] -> (&tty->flow.lock){....}-{3:3} { [ 1905.801836][T27852] INITIAL USE at: [ 1905.805742][T27852] lock_acquire+0xf0/0x2e0 [ 1905.811745][T27852] _raw_spin_lock_irqsave+0x40/0x60 [ 1905.818526][T27852] start_tty+0x20/0x70 [ 1905.824189][T27852] n_tty_set_termios+0xa7c/0x10c0 [ 1905.830900][T27852] tty_set_termios+0xdb3/0x1800 [ 1905.837337][T27852] set_termios+0x566/0x710 [ 1905.843335][T27852] tty_mode_ioctl+0x4a6/0x7d0 [ 1905.849597][T27852] tty_ioctl+0x9c5/0xde0 [ 1905.855430][T27852] __se_sys_ioctl+0xfc/0x170 [ 1905.861603][T27852] do_syscall_64+0x14d/0xf80 [ 1905.867800][T27852] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1905.875276][T27852] } [ 1905.877787][T27852] ... key at: [] alloc_tty_struct.__key.35+0x0/0x20 [ 1905.886481][T27852] ... acquired at: [ 1905.890296][T27852] _raw_spin_lock_irqsave+0x40/0x60 [ 1905.895713][T27852] stop_tty+0x2f/0x150 [ 1905.899973][T27852] kbd_event+0x2ec1/0x40d0 [ 1905.904581][T27852] input_handle_events_default+0xd4/0x1a0 [ 1905.910497][T27852] input_pass_values+0x288/0x890 [ 1905.915645][T27852] input_event_dispose+0x330/0x6b0 [ 1905.921051][T27852] input_inject_event+0x1dd/0x340 [ 1905.926272][T27852] evdev_write+0x325/0x4c0 [ 1905.930885][T27852] vfs_write+0x29a/0xb90 [ 1905.935319][T27852] ksys_write+0x150/0x270 [ 1905.939844][T27852] do_syscall_64+0x14d/0xf80 [ 1905.944639][T27852] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1905.950728][T27852] [ 1905.953074][T27852] [ 1905.953074][T27852] the dependencies between the lock to be acquired [ 1905.953085][T27852] and SOFTIRQ-irq-unsafe lock: [ 1905.966642][T27852] -> (tasklist_lock){.+.+}-{3:3} { [ 1905.971982][T27852] HARDIRQ-ON-R at: [ 1905.976161][T27852] lock_acquire+0xf0/0x2e0 [ 1905.982609][T27852] _raw_read_lock+0x36/0x50 [ 1905.989135][T27852] __do_wait+0xde/0x740 [ 1905.995309][T27852] do_wait+0x1e7/0x540 [ 1906.001398][T27852] kernel_wait+0xd6/0x1c0 [ 1906.007765][T27852] call_usermodehelper_exec_work+0xbe/0x230 [ 1906.015703][T27852] process_scheduled_works+0xb02/0x1830 [ 1906.023283][T27852] worker_thread+0xa50/0xfc0 [ 1906.029912][T27852] kthread+0x388/0x470 [ 1906.035995][T27852] ret_from_fork+0x51e/0xb90 [ 1906.042607][T27852] ret_from_fork_asm+0x1a/0x30 [ 1906.049414][T27852] SOFTIRQ-ON-R at: [ 1906.053582][T27852] lock_acquire+0xf0/0x2e0 [ 1906.060053][T27852] _raw_read_lock+0x36/0x50 [ 1906.066575][T27852] __do_wait+0xde/0x740 [ 1906.072843][T27852] do_wait+0x1e7/0x540 [ 1906.078939][T27852] kernel_wait+0xd6/0x1c0 [ 1906.085281][T27852] call_usermodehelper_exec_work+0xbe/0x230 [ 1906.093189][T27852] process_scheduled_works+0xb02/0x1830 [ 1906.100751][T27852] worker_thread+0xa50/0xfc0 [ 1906.107362][T27852] kthread+0x388/0x470 [ 1906.113461][T27852] ret_from_fork+0x51e/0xb90 [ 1906.120068][T27852] ret_from_fork_asm+0x1a/0x30 [ 1906.126853][T27852] INITIAL USE at: [ 1906.130937][T27852] lock_acquire+0xf0/0x2e0 [ 1906.137286][T27852] _raw_write_lock_irq+0x3d/0x50 [ 1906.144158][T27852] copy_process+0x247a/0x3cf0 [ 1906.150764][T27852] kernel_clone+0x248/0x8e0 [ 1906.157209][T27852] user_mode_thread+0x110/0x180 [ 1906.164010][T27852] rest_init+0x23/0x300 [ 1906.170106][T27852] start_kernel+0x385/0x3d0 [ 1906.176655][T27852] x86_64_start_reservations+0x24/0x30 [ 1906.184048][T27852] x86_64_start_kernel+0x143/0x1c0 [ 1906.191085][T27852] common_startup_64+0x13e/0x147 [ 1906.197950][T27852] INITIAL READ USE at: [ 1906.202469][T27852] lock_acquire+0xf0/0x2e0 [ 1906.209247][T27852] _raw_read_lock+0x36/0x50 [ 1906.216119][T27852] __do_wait+0xde/0x740 [ 1906.222631][T27852] do_wait+0x1e7/0x540 [ 1906.229061][T27852] kernel_wait+0xd6/0x1c0 [ 1906.235774][T27852] call_usermodehelper_exec_work+0xbe/0x230 [ 1906.244072][T27852] process_scheduled_works+0xb02/0x1830 [ 1906.251997][T27852] worker_thread+0xa50/0xfc0 [ 1906.258964][T27852] kthread+0x388/0x470 [ 1906.265414][T27852] ret_from_fork+0x51e/0xb90 [ 1906.272370][T27852] ret_from_fork_asm+0x1a/0x30 [ 1906.279506][T27852] } [ 1906.282192][T27852] ... key at: [] tasklist_lock+0x18/0x40 [ 1906.290196][T27852] ... acquired at: [ 1906.294199][T27852] _raw_read_lock+0x36/0x50 [ 1906.298950][T27852] send_sigio+0x101/0x370 [ 1906.303479][T27852] kill_fasync+0x24d/0x4d0 [ 1906.308093][T27852] lease_break_callback+0x26/0x30 [ 1906.313315][T27852] __break_lease+0x81c/0x1e80 [ 1906.318189][T27852] vfs_truncate+0x449/0x540 [ 1906.322972][T27852] do_sys_truncate+0xf3/0x1c0 [ 1906.327841][T27852] __x64_sys_truncate+0x5b/0x70 [ 1906.332885][T27852] do_syscall_64+0x14d/0xf80 [ 1906.337669][T27852] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1906.343765][T27852] [ 1906.346111][T27852] -> (&f_owner->lock){....}-{3:3} { [ 1906.351442][T27852] INITIAL USE at: [ 1906.355437][T27852] lock_acquire+0xf0/0x2e0 [ 1906.361693][T27852] _raw_write_lock_irq+0x3d/0x50 [ 1906.368395][T27852] __f_setown+0x67/0x370 [ 1906.374394][T27852] f_setown+0x23a/0x300 [ 1906.380302][T27852] do_fcntl+0x6cd/0x1a20 [ 1906.386315][T27852] __se_sys_fcntl+0xc8/0x150 [ 1906.392663][T27852] do_syscall_64+0x14d/0xf80 [ 1906.399005][T27852] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1906.406653][T27852] INITIAL READ USE at: [ 1906.411078][T27852] lock_acquire+0xf0/0x2e0 [ 1906.417679][T27852] _raw_read_lock_irqsave+0x48/0x60 [ 1906.425071][T27852] send_sigio+0x38/0x370 [ 1906.431679][T27852] kill_fasync+0x24d/0x4d0 [ 1906.438279][T27852] fsnotify_insert_event+0x32b/0x410 [ 1906.445791][T27852] inotify_handle_inode_event+0x40c/0x640 [ 1906.453710][T27852] inotify_ignored_and_remove_idr+0x29/0x70 [ 1906.461793][T27852] fsnotify_destroy_marks+0x155/0x330 [ 1906.469358][T27852] dentry_unlink_inode+0x2c2/0x3f0 [ 1906.476655][T27852] vfs_rmdir+0x263/0x6e0 [ 1906.483092][T27852] filename_rmdir+0x292/0x520 [ 1906.489954][T27852] __se_sys_rmdir+0x2e/0x140 [ 1906.496733][T27852] do_syscall_64+0x14d/0xf80 [ 1906.503505][T27852] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1906.511581][T27852] } [ 1906.514178][T27852] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 1906.523158][T27852] ... acquired at: [ 1906.527073][T27852] _raw_read_lock_irqsave+0x48/0x60 [ 1906.532512][T27852] send_sigio+0x38/0x370 [ 1906.536956][T27852] kill_fasync+0x24d/0x4d0 [ 1906.541584][T27852] fsnotify_insert_event+0x32b/0x410 [ 1906.547072][T27852] inotify_handle_inode_event+0x40c/0x640 [ 1906.553002][T27852] inotify_ignored_and_remove_idr+0x29/0x70 [ 1906.559096][T27852] fsnotify_destroy_marks+0x155/0x330 [ 1906.564657][T27852] dentry_unlink_inode+0x2c2/0x3f0 [ 1906.569981][T27852] vfs_rmdir+0x263/0x6e0 [ 1906.574408][T27852] filename_rmdir+0x292/0x520 [ 1906.579286][T27852] __se_sys_rmdir+0x2e/0x140 [ 1906.584076][T27852] do_syscall_64+0x14d/0xf80 [ 1906.588872][T27852] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1906.594953][T27852] [ 1906.597289][T27852] -> (&new->fa_lock){....}-{3:3} { [ 1906.602445][T27852] INITIAL USE at: [ 1906.606361][T27852] lock_acquire+0xf0/0x2e0 [ 1906.612361][T27852] _raw_write_lock_irq+0x3d/0x50 [ 1906.618881][T27852] fasync_remove_entry+0xf1/0x1c0 [ 1906.625483][T27852] fsnotify_fasync+0x49/0x70 [ 1906.631647][T27852] __fput+0x8a5/0xa70 [ 1906.637218][T27852] task_work_run+0x1d9/0x270 [ 1906.643405][T27852] do_exit+0x69b/0x2320 [ 1906.649146][T27852] __pfx___ia32_sys_exit+0x0/0x10 [ 1906.655752][T27852] x64_sys_call+0x2231/0x2240 [ 1906.662027][T27852] do_syscall_64+0x14d/0xf80 [ 1906.668211][T27852] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1906.675679][T27852] INITIAL READ USE at: [ 1906.680024][T27852] lock_acquire+0xf0/0x2e0 [ 1906.686648][T27852] _raw_read_lock_irqsave+0x48/0x60 [ 1906.693977][T27852] kill_fasync+0x199/0x4d0 [ 1906.700430][T27852] fsnotify_insert_event+0x32b/0x410 [ 1906.707751][T27852] inotify_handle_inode_event+0x40c/0x640 [ 1906.715501][T27852] inotify_ignored_and_remove_idr+0x29/0x70 [ 1906.723419][T27852] fsnotify_destroy_marks+0x155/0x330 [ 1906.730826][T27852] dentry_unlink_inode+0x2c2/0x3f0 [ 1906.737955][T27852] vfs_rmdir+0x263/0x6e0 [ 1906.744223][T27852] filename_rmdir+0x292/0x520 [ 1906.750952][T27852] __se_sys_rmdir+0x2e/0x140 [ 1906.757575][T27852] do_syscall_64+0x14d/0xf80 [ 1906.764187][T27852] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1906.772097][T27852] } [ 1906.774608][T27852] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 1906.783307][T27852] ... acquired at: [ 1906.787124][T27852] _raw_read_lock_irqsave+0x48/0x60 [ 1906.792518][T27852] kill_fasync+0x199/0x4d0 [ 1906.797557][T27852] __start_tty+0x18c/0x220 [ 1906.802165][T27852] n_tty_ioctl_helper+0x128/0x4d0 [ 1906.807387][T27852] tty_ioctl+0x9c5/0xde0 [ 1906.811826][T27852] __se_sys_ioctl+0xfc/0x170 [ 1906.816608][T27852] do_syscall_64+0x14d/0xf80 [ 1906.821382][T27852] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1906.827465][T27852] [ 1906.829803][T27852] [ 1906.829803][T27852] stack backtrace: [ 1906.835709][T27852] CPU: 1 UID: 0 PID: 27852 Comm: syz.6.5891 Tainted: G L syzkaller #0 PREEMPT(full) [ 1906.835736][T27852] Tainted: [L]=SOFTLOCKUP [ 1906.835743][T27852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1906.835754][T27852] Call Trace: [ 1906.835764][T27852] [ 1906.835774][T27852] dump_stack_lvl+0xe8/0x150 [ 1906.835801][T27852] __lock_acquire+0x2a94/0x2cf0 [ 1906.835834][T27852] lock_acquire+0xf0/0x2e0 [ 1906.835854][T27852] ? kill_fasync+0x199/0x4d0 [ 1906.835875][T27852] _raw_read_lock_irqsave+0x48/0x60 [ 1906.835901][T27852] ? kill_fasync+0x199/0x4d0 [ 1906.835917][T27852] kill_fasync+0x199/0x4d0 [ 1906.835934][T27852] ? kill_fasync+0x53/0x4d0 [ 1906.835950][T27852] ? __pfx_n_tty_write_wakeup+0x10/0x10 [ 1906.835967][T27852] __start_tty+0x18c/0x220 [ 1906.835994][T27852] n_tty_ioctl_helper+0x128/0x4d0 [ 1906.836015][T27852] ? __pfx_n_tty_ioctl+0x10/0x10 [ 1906.836030][T27852] tty_ioctl+0x9c5/0xde0 [ 1906.836053][T27852] ? __pfx_tty_ioctl+0x10/0x10 [ 1906.836074][T27852] __se_sys_ioctl+0xfc/0x170 [ 1906.836094][T27852] do_syscall_64+0x14d/0xf80 [ 1906.836109][T27852] ? trace_irq_disable+0x3b/0x150 [ 1906.836136][T27852] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1906.836153][T27852] ? clear_bhb_loop+0x40/0x90 [ 1906.836173][T27852] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1906.836191][T27852] RIP: 0033:0x7f578699c799 [ 1906.836210][T27852] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1906.836226][T27852] RSP: 002b:00007f5787852028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1906.836245][T27852] RAX: ffffffffffffffda RBX: 00007f5786c16180 RCX: 00007f578699c799 [ 1906.836259][T27852] RDX: 0000000000000001 RSI: 000000000000540a RDI: 0000000000000009 [ 1906.836270][T27852] RBP: 00007f5786a32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 1906.836281][T27852] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1906.836292][T27852] R13: 00007f5786c16218 R14: 00007f5786c16180 R15: 00007f5786d3fa48 [ 1906.836312][T27852] [ 1914.915110][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1914.918958][T23913] dvb-usb: did not find the firmware file 'dvb-usb-adstech-usb2-02.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 1914.921533][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1914.953602][T23913] dvb_usb_dibusb_mb 5-1:9.8: probe with driver dvb_usb_dibusb_mb failed with error -22 [ 1914.966870][T23913] usb 5-1: USB disconnect, device number 100