last executing test programs: 7m0.493661242s ago: executing program 2 (id=774): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYRESDEC=0x0, @ANYRES32, @ANYBLOB], 0x50) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f0000000280)={0x3, 0x980900, 0x2eae0342ca72d7e8}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) fsetxattr$security_capability(r1, &(0x7f00000001c0), 0x0, 0x0, 0x2) timer_create(0x3, 0x0, &(0x7f0000044000)) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(0xffffffffffffffff, 0x40045402, &(0x7f0000000140)) ppoll(&(0x7f0000000200)=[{0xffffffffffffffff, 0x1}, {0xffffffffffffffff, 0x1008}, {0xffffffffffffffff, 0x84}, {0xffffffffffffffff, 0x4000}, {0xffffffffffffffff, 0x2192}, {0xffffffffffffffff, 0x120}], 0x6, &(0x7f00000004c0)={0x77359400}, &(0x7f00000002c0)={[0xe12e]}, 0x8) openat$binfmt(0xffffff9c, 0x0, 0x41, 0x1ff) r2 = syz_open_dev$tty1(0xc, 0x4, 0x4) r3 = socket$inet6(0xa, 0x1, 0x84) getsockopt$bt_hci(r3, 0x84, 0x6d, &(0x7f0000002280)=""/4090, &(0x7f0000000040)=0xffa) ioctl$TCSETAW(r2, 0x5407, &(0x7f00000001c0)={0x0, 0x53, 0x5, 0x1000, 0x1, 'tH\x00'}) write$UHID_INPUT(r2, &(0x7f0000001040)={0x9, {"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", 0x35e}}, 0x1006) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc008561c, &(0x7f0000000000)={0x980900, 0xfffffff2, @name="82bf06255c32514ef266824307509e39f5e892343710c37e48a72f12e53542fb"}) 6m59.55834286s ago: executing program 0 (id=779): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1000, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r6) r7 = socket$unix(0x1, 0x5, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000980)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CMP_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '@s'}]}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "1c"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x8c}, 0x1, 0x0, 0x0, 0x6040850}, 0x20000040) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff, 0xfffc}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x7, 0x8005, 0x5, 0xfffffdff, 0x4008}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x9, 0x9, 0x5, 0x96, 0x1002, 0xc}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x24000091}, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) r11 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r11, 0xc004500a, &(0x7f0000000000)=0xffff0018) ioctl$SOUND_PCM_READ_RATE(r11, 0x80045002, 0x0) 6m59.53641493s ago: executing program 2 (id=780): r0 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e20, 0x9c000000, @ipv4={'\x00', '\xff\xff', @remote}, 0x1df}}, 0x80, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="100000001001000001"], 0x10}, 0x40) readv(r0, &(0x7f0000004500)=[{&(0x7f0000000180)=""/45, 0x2d}], 0x1) 6m58.864276674s ago: executing program 0 (id=781): r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)=""/133, 0x85}, {&(0x7f00000002c0)=""/72, 0x48}, {&(0x7f0000000040)=""/51, 0x33}, {&(0x7f0000000340)=""/233, 0xe9}], 0x4, 0x0, 0x96) write(0xffffffffffffffff, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000020c0)='/proc/cpuinfo\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000000080)={0x2020}, 0x2020) pread64(r1, &(0x7f00000042c0)=""/191, 0xbf, 0x9a) read$FUSE(r1, &(0x7f0000002280)={0x2020}, 0x2020) ioctl$HIDIOCGREPORT(r1, 0x400c4807, &(0x7f0000000040)={0x2}) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x1, 0x0, 0x4}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f000009df00)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x800, 0x2, 0x0, 0x0, 0x10, 0xfffd}, 0x20) link(0x0, 0x0) r4 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120100009f187620ef170372362e010203010902240001000010000904bc00029e8833000905020200020200000905820220"], 0x0) syz_usb_control_io$rtl8150(r4, 0x0, 0x0) syz_usb_control_io$rtl8150(r4, 0x0, &(0x7f00000029c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="200302"], 0x0, 0x0, 0x0, 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0xc850) syz_usb_control_io$uac1(r4, 0x0, &(0x7f0000002640)={0x44, &(0x7f0000000500)={0x20, 0x10, 0x2, '!k'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r4, 0x0, &(0x7f0000000a80)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)={0x40, 0xb, 0x2, "31fb"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r4, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000580)={0x0, 0x16, 0x2, "f610"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r4, 0x0, &(0x7f0000000380)={0x18, &(0x7f00000000c0)={0x40, 0x14, 0x2, "86e2"}, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000540)=@deltclass={0x24, 0x29, 0x4, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x8, 0x7}, {0xffff, 0xa1a7a237334a7c95}, {0x2, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x8082}, 0x800) set_mempolicy(0x5, &(0x7f0000000000)=0x4000000ff9, 0xf) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000500)=ANY=[@ANYBLOB="7000000010000305fcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="11110200318800004800128008000100677470003c00028005000500000000000800040001000000080003"], 0x70}, 0x1, 0x0, 0x0, 0x48890}, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) 6m58.454498558s ago: executing program 2 (id=782): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0xfffffffe, @empty, 0xffffffff}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x3) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) bind$l2tp(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xc) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8004) socket$key(0xf, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)=@newsa={0x14c, 0x10, 0x713, 0x0, 0x0, {{@in=@multicast1, @in6=@local}, {@in=@broadcast, 0x0, 0x33}, @in6=@local, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x6}, [@algo_auth_trunc={0x5c, 0x14, {{'cmac(aes)\x00'}, 0x80, 0x0, "3509fe8fd57fd44aa5074c50bc700e53"}}]}, 0x14c}}, 0x0) (fail_nth: 15) socket$alg(0x26, 0x5, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x66) r6 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000000)) ioctl$PAGEMAP_SCAN(r6, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000b24000/0x1000)=nil, 0x7ffffffa, 0x0, 0x0, 0x6, 0x0, 0x2, 0x0, 0x18}) ioctl$VIDIOC_S_SELECTION(r2, 0xc040565f, &(0x7f0000000940)={0xa, 0x100, 0x3, {0x8000, 0x1000, 0x4, 0x2}}) ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000180)={0x2, @win={{0xc78e, 0xffffcaca, 0x5, 0x7}, 0x8, 0x5, 0x0, 0xfffffeff, 0x0, 0x5}}) 6m57.239780722s ago: executing program 2 (id=785): syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) r0 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000002140)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x4000}}) umount2(&(0x7f0000000140)='./file0\x00', 0xa) openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={0x474083, 0x15, 0x8}, 0x18) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x7, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff}}}, &(0x7f0000000480)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r9, 0x6, 0xd, &(0x7f0000000080)='bbr', 0x3) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) connect$inet(r9, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) r10 = dup(r8) syz_ublk_setup_queues(r10, r7, &(0x7f0000000180)={0x0, 0x20fb89, 0x800, 0x1, 0x32c}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0x15a, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7d, 0x8, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x400, 0x3, 0xffffffff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0xbd}}], 0x1, &(0x7f0000000340)={0x2e, 0x871629fa8e45411f, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x8a2, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94) 6m56.982539136s ago: executing program 2 (id=787): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, 0x0, 0x0) sendmsg$inet6(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x3404c8c4) r2 = eventfd(0xb7db) syz_usb_connect(0x4, 0x24, &(0x7f0000001300)=ANY=[@ANYRES32=r2], 0xfffffffffffffffe) setitimer(0x2, &(0x7f0000000180)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) r4 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, 0x0) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x24) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r5, 0x4068aea3, &(0x7f0000001340)={0xa8, 0x0, 0x1}) r6 = socket$inet_sctp(0x2, 0x1, 0x84) bind(r6, &(0x7f0000000000)=@in={0x2, 0x3210, @rand_addr=0xac140001}, 0x10) listen(r6, 0x5) write$tun(r3, &(0x7f0000000140)=ANY=[@ANYBLOB="00000800010000000000140008004500003c000000004084ca2502020202ac14000104d2321000000000000000000100001c11223344000800000005000500000005c0040008"], 0x4a) 6m56.743844944s ago: executing program 2 (id=790): io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x25, 0x0, 0x1) r0 = syz_usbip_server_init(0x4) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}}}, &(0x7f00000000c0)=0xe4) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000801, r1, &(0x7f0000000540)={0x5, 0x6, 0x7fffffff, 0x2, 0x6, 0x7ff, 0xb97d, 0x4, 0x6}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xee01}}, './file0\x00'}) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r7 = syz_io_uring_complete(0x0, 0x0) write$FUSE_INIT(r7, &(0x7f0000000080)={0x50, 0x0, r4, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) syz_fuse_handle_req(r3, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r3, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)={0x180, 0x0, 0xfffffffffffffff9, [{{0x0, 0x2, 0x2, 0x100, 0x3, 0x8, {0x6, 0x9, 0x4, 0x80000000000000fc, 0x3, 0x0, 0x7fffffff, 0x58, 0x4, 0x9000, 0x9, r5, r6, 0x1, 0x4}}, {0x20000000000000, 0x537, 0x2b, 0xf3, ':-(\\\xc9\x80\x00\x00\t\xc3\x00\x00\xf39|\xd8mM\x92\x8d\x14\xd3\xa4a\xb6\x02E\x89\x85V\xc2\x06\x00\x00\x00\x00\x00+\x13;\b\x01\x00'}}, {{0x20000003, 0x2, 0x4, 0x9, 0xbc88, 0x9, {0x4, 0x5, 0x5, 0x6, 0x3, 0x12e, 0x7, 0x8, 0xf7fffffa, 0xc000, 0x0, r5, r6, 0x4, 0x8}}, {0xffffdfffffffffff, 0x401, 0xb, 0x8100008, '&+%*!\xeb(^-@\x00'}}]}, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000000c0)={{{@in6=@private1, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@remote}}, &(0x7f00000001c0)=0xe4) r9 = getuid() mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x2, &(0x7f0000000200)={{}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, r1}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[{@allow_other}, {@blksize={'blksize', 0x3d, 0x1800}}], [{@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@obj_role}, {@subj_user}, {@mask={'mask', 0x3d, '^MAY_READ'}}, {@mask={'mask', 0x3d, '^MAY_APPEND'}}, {@fowner_gt={'fowner>', r5}}, {@fowner_lt={'fowner<', r8}}, {@uid_eq={'uid', 0x3d, r9}}]}}) 6m56.287648385s ago: executing program 32 (id=790): io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x25, 0x0, 0x1) r0 = syz_usbip_server_init(0x4) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}}}, &(0x7f00000000c0)=0xe4) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000801, r1, &(0x7f0000000540)={0x5, 0x6, 0x7fffffff, 0x2, 0x6, 0x7ff, 0xb97d, 0x4, 0x6}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xee01}}, './file0\x00'}) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r7 = syz_io_uring_complete(0x0, 0x0) write$FUSE_INIT(r7, &(0x7f0000000080)={0x50, 0x0, r4, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) syz_fuse_handle_req(r3, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r3, &(0x7f00000083c0)="99529ca7d265e2dba44891e35e7d5dab7921b730436ecd4e999a25bcf86a25f8f029c0dd50373e90b7cf7779b12ecd4423c5b13cfac186975cd723976f3c747612913029d42517c189364bc59d8ebad53ed1b86f8f66c99b1f9b5b40d78cef1f14f81815d53bdca7fef40607358db69eb8c0b1f6b0942ab4b1ee7ca8deb4eddef06381a3d1c52d6147fc5109c7c607591497a6b2477f60cc881d3219c96bffb34aadec3fa97250713cce17cd536721bf9c40a019531ed0bbad139e26a3d4d39b68ab1bf37cb1a4bd197a8789cb1940cd86d9e56713bc36c7cffd07a311f5bc2e91f16d152eb480645e85ec9b3bf09c7fa140dced0afd55d7b99e90a96e7748e2d0dc09672ac199ce529e631efe1783769819c182ca106f6184bcbb387ed246c43562d74c36ac3a7ec2f0e11f70bad0007c03bb9c0d2dacc2148cce4a4aea327c7319016ad146b52bfae0357f9e892e9bec61a13c93551cfa3d4f4bfa7585c93bb0bef01a9114f3dc54179cf9a57fe88f5cff3403e33c9d09e3e9c2e10f1f16894e1b59e3cad47c1f202cf7b756f2851fc96d09459c9a8d34c19e6a3525cd5001aac5181f57286d0e1e88ce5092c7c76b6abdaebf2c499aa47587b48eb12a2b72548c190b0324ebedb81a63333b6edb25550f859c5ccc404a944ff7f61af8800888192fbd4c8e0e417d1d181b4b335a6f52e0a7dae18397e81e3f747cab7be902ed903bdd6a622f178f9b4244718ee1206237257374d2fd1466ab6135ef7ef4a114ae170eafe9cd78cf9ffc36974cbc4b8003072bed78765a0b9f1240f24dec6a9e46db9bb498d40f727c0cbf8f4a6a49539bd0805caf65d80130d7fb60a69dc7ed890874a17530c042cf33a977d331435d68ef33885f638c777ad49564ca77d8b81ddd853a21cd55d95b627310dd633a4f005853a5506cd8f744c367f3cb6998b0fa97de6bb35b166b0c6408c4e0a38ed26235a88520c38ca97ac8a6dc81e6dc6483d383fa09f198997b8eea1c68c9e3320683c9a02dd89ddc34c241e7294ccc88d6b35762892e8746e558bfbc2251949f2ecb763dad5b975eaf36e2864be6a41d3e20514d32f5d4b6350dc7e3cc3a85428ea98efb3b1edc2a2ec1e618452949cc7e2ba1251990168fee342d4f304b7a7af9162bcbe6b09c75d7420d2c547b4e3cee1836df6eddd5dff73a4e308fcd8eaa7a33e6980a6f8ead03257a37d72d3b265d02fa42f57db877654ed513e31c35e1af0bd28511d6b57cfe07b27cbe9767a534b426dfc3dd257d5899444f34cbf4dc74b9eab2e7e3e1e1a8a6ac5e4359d653506b299a5b7c67b92dc462f1216655f952362a3387ad9966b606d98e8d1b544dc27dc6bc78fd18a446736e25c51143db9886b6c09812d5825b5d9e0932f218ff8bea4d9e1c4df9c9d4eb19336d48163a921c4ff1f0beef26b01b7e8c0d23fb59b84e229eaabb791f2cffc9aa4db75162cbfe4c9ae8d76a5b6bc4bff20e3f8f125b9aadb3e728d7f78d61fd55f46b7f59511b876e6563256686e44f25cf38d393a9b762bada272eba8df28e4086c4cd2fe3c9fab97756fb145373e6ca1991bb1ee6589e49c821ff29f047970819f88f724bd077cd3f0ae463d99b3e53078431e3f9bebabc5289a65479359efe3909186aac60a29f561de8c590988c913c9e693ab8106e8287f6565eee6735f7c88cad7124d1c8d9ff347e97912824088ee954de01c6d8a06447f06899607eadbfd078bc3df506252005749378dbd7399c9eca60b81dc0d88dedec31e5cf6e7b6d6d411958df8f9e0bf4443e8d3bdfe49d05f811d17088024d0629fc8ab8e05e309bf55e8e60d342623765f4e8d2dc4a90291cd4354ff9568c8170e6ea56e028bcf2719595253adb8c84050bb9ce4927a1c1f4560da87d109ceda90bbe45a1717763d8025f1ff40f157185ddf17079da272ae10c4f34162caf4b0d31221a57b3059fd449c87554d968a54b2eebd760dc3263c40d9eedf5905d5699d29706ea6e9e81ff2bf92489a06deffe7e978661f37a88450783e23f107c2bfce000dfc91c5fca49e46d9ea978f215a45984699f0d2503b30a741e13be56b7abe3e5663c0825c3cb04ead44ce97719c4ee6f4cdd3c452775ad7163d5c9034583cc2dbc2b0c04917a3e1aa3d0a8bb6fcf94d7922eb1d543c09185827aeb1b72ae7103ef2c014af2ff4b47fca40fb0e66ddf0264476d7a84e9b8dc551d4c407bdbac6757f7a25bd404b45bec1091696203cc438860131ad5f2fd80e3c45629864dd9f7d302b66fb8fb86735c9a6dcf8b135a273dd2ae9473bc905081be9fcb8f91b1ddba1ac692798dac0b9ccffe0319a779f5e10c65f294b22fe475283b023f9cd890e92c5447b1bc1528255c5af383bc1fb6e72cb9a67215a9e25cde63c89baa8c7125c7e8b748b728d07d9cb66778404f54e6a9e3ae1ae82f3d0ce77199f23f94a01b71b805b476fedbebeb52c83a1b857f23ba438c56a6c4c2a5909f721e6e3d240e4a16455e92220d13022ce7ec0b1365ba4e67aa6ecb324f8826579e12cebdfc0d8af63e83b5e5624d5b791f99093f9a27f7baea9fd10111209c0857a04f07408111063ef34026aee27a3d51b40e53883f9094402534bdd21cc49d7f5593e99cb204cd805bee4add0f82cf4b6dc5da14d6b79fbc68c9ccf7fb5fe774f8879e13079b024a8ad24bf123c420d630837a84ba05abf0ae4dc3fc04f25c7f74ff91d0d609c958642a48551e51b5c0074a56a7da10ce153b08cabea636f8489d8e7b655758a41d7f7474c9d76bf4d54d789bfceaffef139854065de6a94b0275a9626aab99ae838364b1a491e55017e4212b6b01f7a41bc9c215ecd17c49a8610db28c699259c58b81a0e84c45fd8e719c05c48501c49e8a6515044d247f58e4cd0bf22fd6ae31f45339d1f801196d426c52269b1aaffaf18e2a03760bb231cb7cefa6d72f1d7eb6a3bbd65d0914221b8fbf531dbd562eb4a1b28983ac7d83d4813b10b34c9525ba644f61a2c4800d4fe96a7bca63da1041ed73cc57fb9d42f9dfc8ca41d80292bbb311c89b0a0fcee1d88a025a7416863342aea00e6f049cb2ddebd17c5c617ff562a8af0c965cbe8341431a30ea239e4a62aa2b19757a3b0de04229a9907f8610c27b26591405845bf8b5b83706ed18d910c4f68777378366ff565617b19168a04560a32ce5ad64aaef9f4377118c4335b24826cdcde78fb4bdb11498553f56d8dfeb3a482c70cc6580c399b92339cbdb3464fcc7b00e9839fd0d2b8b6db90c56b33593a0048bf7983421f29b1285c81a239045b96a9b0cacd70d6d9853206471f06915efc8d3ec4c50fb13601abc73247a656066fd7b329159b3ce9e3302b4c0d6aec58cb0946a8ee8e7f55f1af604f1edb4d887fa6292dc0ce57705c1a25dc62650c127d11a364b397aefc2fcc3a164bdc53165a461b01de9180c1461b309c75af0911b4cc1b8aa05652b62119c87b4b235c573aa15b1516cddf61efd6a7f8c953fbaaee9c0e800e8f519e1494de850ddb976864088fe0cf90bbc54395078ea2501e8baa84d6807e184105bc2a140b663416496886422643bbf764d406af06e7d086678828defda0b648b25666b7b5ea29e927141740d5be0e61bf25d40b8404ffd3c67bb855b11d4faf82b7b8051615c101c3deb0601a0fa9ecd8b4a95082ccbc8222b0982802dd8430e653d6eea2786dc3a91397135faffdc65a5bae048f5c463b1a6648becce961d39d063d28d1ad6dafcea0b0878379adb16cc0d4cea572abeacd9a168a4fe2e338092b5bc93ecf02ac6ccda03e5b23adf511fdf7a79442093233b79c67d3fdd3c36c96a8f67aa79e4743d99cf963ae6161877f73656eb0314d889f4b8649bbce8a759f90eac6c006197b54b2bbac7c9b237f1e3dc099c62a65481960e6ad697fc66316ac084ba99c60f58bf44ff45f3b2006cbc4196a25f124dfaf247e863a855ef6070deb45219a922dcf2be9bd01c340e1ca5ed7c3ddac9f7a677c5d00610991d21e0751ac8044585b39f3fec5b672a11a9bce32196c2003d01ea50b0f0403e16df188ecbbb74f295f01398363ddfecdb63a49347c912c125670205d7b6be999688df85bb7d5ac12b62b4fdc4eadcc2a9a7897028404f697b007603a0ad588c772952d6670ee870771774ad157c0b9cccd4b2192d835606198ea0c65036ae4e406cdc539ff3aa81fa20b7ab58d6f3abdb69cc1f503d593f7025d2035e7f21db76336efc2843a0dc9bd2eb8794718134ee68fc57d4d2bcc18969d08177f442b87433b48540c661940cf9e2462c53efa310c7e47487deab2ae15b1978ef05aa1e14110943f649d82486f710a39854409e74edcaf06b4a92d3580b9cdabf83c6351657698d3d5af7514f382e75d1c912cded577258603fc9ed002e010747cddf7885d34afc9a84d82696c6660cb5ecafb68b564908fc49c4db6a187d037241a26b1141cf20f2e968a53366db0f60b79cd98cf3c897c50b7b9728e6e7100f99e4d5ed2428dbd285516ca6660777a39b4b2617c1be5b0232d60b9c8099f5daedbf190109439c40b46090985200d6c0501313f3fa4d244864575c275faca47aeff32c7b3e3c59392618562a7c2d4b3af85a37a8847f595352024cb63d3a9085c2a502c6a3248f43c5fc828e636cb634b2d393d853ae2dc9605985cf85c060860a90256c7b574c1e01c320687a2bb0b2d51cc2950c485f2ffa5db0ad7aaf753f543de7f86efb775c6bac2989a33757a28836fd27f9347229a0004bd2e546994c69c678fe5717f613f905d945c072004c3a80e0e54215e19ff9972521890d4e705e429f16fc35fe5a15f2e6b75cd719d38f76b087b62e4b5dcdb35f4baa2bab167150bafb6c69e260ca51004bc826d46b77c3f67eaa08497294868e6d91b7b867e4da62052f4f891677256cfbaf19cf32bad99a7da69d8a66537686f89a58d78c7eeaa99cd38009a1a32582bedc5c718e57b19cd405ae659a89909356a07fcef89384d160fa5ae6683cc379642aea4f0c915f72d679bd521399cb16112f2abdede3001400b4a64d2173e153a68631183679b56b8f389ba889784133453a7e892fd3b092f5040870a3cfd6f982990143e7c0882b4ff4c5d049192d36925a25ae4be441aa30dc7e74398b340c45b52c73ed3b0cd640e3cc9fd4be24e7355f386106f65895f1ee850b2a781d1d1d322ca5a3b0fdb78ce1eda048ece94af25437969c99c58c08f1446ca5541e03987a20fd75283e3e116dc4c9222ab7522e4ccf6da14aef49cac9a6a2cd4aba1c54d49e6da4179a66b84e384cd3da53908579b28c11d525ebdc4dc69074cef8a9ecd3aab98f2858769d656b46141c3a4e69a5ed6c0a732c9ec1fce080eaebf537fa5e17236a44ba9c931f555d193e475ffafd20c53ccbab607c1a15fd06742a64691205eb0d00f7f40e4dd8efb279cf09b2522aac0729a631aacb92d5cfa2ce6bb07385b981890b5916755d5cc3a51c8c36bd2987068cc24fcf73840895ca9bbb9aff1059601f771afedf0a48d5921103920515b27d7e607951982feba197df8c61600feb3622b9eea13a4db4068728cb98cca76cfae197f6258758490bf41673ee29acd91fd296ec863c646e0ca6a0f0e9de146c663ba13d962964d7c32804fd12a14c1ca7212ad48bdfab469c6570dca562220ecbe7b6b163ed4c9361c5c10bed5c92861b8786ada20a99245d282e4454187ec02adfe354e30647cb10661c85168f7958e3ce69ab48c9455214707a63c9b1167f0845a6bfcce2a96cd53eab430f13cd527f1666290719a47c517cfa22fec2e9916af8aa93c78e567993d7fb8ee60fc4b903b8c67a3658302c5e5f35250c30427e4c055b6c54705bc599861f80b7200d361965ff98c88cc698a2615cadeac4bdfd3d613377cea52d2bbcb7e6b78ac31d4b2c33eaf0b2ed40b963e3cb25c7dfea3ebfe7b4aff2aaaaf184dc80ab649a108e2c830ce7eaea58a263392aa9cd13d7f7bd607dc7c804b19dfa41b3e5a5155201a87311e22062c93896e70f3a5c4b03521300b61cc311ebd5beb9838d0ed207c6bfc99e4392508e95804b10b36024f32e1fe1138e9ee7773f797b2bc6be7416f4e9691ef4c2a8d06af6c8b84bd1e6fd1ba3d3183475ef6c139ccf8dcf37671fbb96a2ab5e0e042f7c4728cf30bcc1a0de28a5024276ceaa194b4926e7f6a97b78bac36e47f832d56a96cd266434d37bcf2c2f57877717d91b1854972f832354acc207a2ee8caace7504e0e6197dd7e64a01c4c67bb2de8acc0cccc6c6bff0b0cbfe345542c5a795dfa48cc0990ab5702574d36494bc44c20f5b324f7c984d986cc8cb40cb2550076d96a069b6688d22171beed2dc5b6ff3ede8fff4c4a9de6d3817357a7ca7d24d87300b4545ebbac8cf7f09ec637a4f4d6bd07673709b6c363a75ccef585610c5f15de7851b5ab53e02a757bfc3caeb9a9a8996beffdc0cfd1201b6cd99cb035584e51a6c15a5d2e17d2f8aa6b41e26809392fac6caed1e02a53dcea8a413203608780dab33315a76eba24d540e4c5b9790420834bc8d4e47bc65ae52a54c0ff308427a8d7aff746aa6589d17514e40fee5d0b3533cf4ad2c5f9d96db9f50bd69ed8c92b860e199a35cf268c66ed13516a3b4b024f62d4b2a656067eece95575bdb4907efc488a9821bc3a9c81dd11b2128b7a01aa7a9ce6e73de3b4e9beced70206f91575baddbcbe5722337953c8016a0f4b62120d776c43b7d1a879b692107954f45acdf8967dcaa994aad4922d4fe093e16c2d0090906f5036af99e50bb09b04e9c9b3b5085abf621297ce203010249cede92e9b66b446b86b43eaaae228dfdd3b4408c12b404bb727f7e969e7da04fc59900112bf8d38af0416dc616e75f167aa1352215f07115a6f4eb6bb5fff6f5c2fc9ab906392036b44090e65fdaf017dc53bc94e0807d679d793df18cc44e6c846d414cef1569530f7692daf91eaaf4ae89fe2522f2c9cf33b6ca508ebcd006bc1a61f0c800553aff9dc7d57200b25ecb83e1e0b8cd29520b63aa649d3f71a62570eee56e03223ddf31f0c04fa686b7f6dd054e7a259d9ba335c2c5b2c508897506c0db7f01878dec1411c33f0af61b81dbcf9ff8bdc0c50044963a79f3ee1462150c6bd03a32dbdfef8d72f0b8b3a395ffb0cc85792e7bc867feb5e312cb64e29e193388e9f173c162f4a1320a6f99ea3795fb77d982605959909a1aa11076fcc779ea6b80ec1bf0edfc2569ec04d15a0bdeebccf3c75393dca5e81663532f8ced12d08e4c2ae6e2954d427c7bf053dc4718f56f453bc88d74045bd2f9747aae9b5298a0de927f1d6b1308f4e1483487f083e71ed09298deb52bb10079b13def7453eb432498069edb5ade70c5c54913684d934a3febf78753ac13300a91f467ff3f6e2f00898f015d08f7739047b321b3eaee5ad8aa7adbf7833f014d8c576a491af9fca6843b327ed513821cb3951b2e67a275225d7af6b382e2f955adaacba5d1fdea2223202dee132b91d5cf381b51da94145255f584a70c5e8d11e06a44afa6599bf3ed0cb61703eba254333af53afac60e54cf6397f9f7302249ab644f0b576c713b15007be1f4f9bb213660bca8a70251472b86669d361ef968f542e81ddbe8f4d2e9cabe8d7bf6a31f14a2cc272963553a424c105e7750437ec5bf316e30ce60b4b0c27ccc1eb27e60f6472fef27654da49905ff9c01b28695310ecd8701aedff25a83da4b7c41995f902bdf249769dcb53a3efa894710dd66ba8745ae2253cc6b75a038183a0bee21226d48239320efad6727093e4f94bbc2fdcc216200d903c32bb9f16dd17d5dac423ae0696f3decc576b8f1fdce63d0532370af7d1e2fa2ca5c5d17bd88f5e3abb4792dac8689ca13752f83d753b06b037bf5a80a3748983790352775685b0414c9d74849fd217e388f904278ddb6b0abdda941b61579c796e2bb77a9bc363b18642c401faa502a31011544111b6eedaa369976c814773d83220a75f31026d6ad0b8b4298ea6062234db232bc435e096e84f740e55bb14d46ae04af0500aa5bb218aff6c76aa8a8e3140a1b0d6638538fd7f30fa8d992e53abf8af2fbc16b9e8a668c1aac72cea1a746ee5f7f3392a4ec8f1d19f2f426b6069b1cd347cbc38bceba96ce5da49198083403143c740c04639cd1089abb34fe812d85921c47437604f684bca44a1eaa965c0a6e1c1fd1f70ee932af3455b36184cc15934cdb3f28959d37d8fc10696f8ec1e4b0c3d1b9ff74a01b796d1bb68954a3768c8bcec741b3b69da892f8922142b16b2cabb469a9906b34216243fac80374c10e178c5fd36440f8d7a8588a9c2510d86ffa8cb68ce8c330d2111c94724e522f04573dad43bce252eb505d29ca9379a6b281519d38b7174f3ae8f185544f3003c936a7e6b23ca97a313aac6a061caa45fda73522f3061767bb4e33dbe4bde390eb0f07225a8aef939cb6ab2ada10c02527281abad394cd4ea9f59467a08b72047cdb75d7b2b98e5b4542554a60f953ac7a4b980f42518eec05ff2c044549cab0cf33eef36dfbabcbc0300009d898862d2194cfcdd9a713c30bbe52291105193656ea5eb830873ac956469d31689cc3c69edb5cb9a6e31ce3e6fb50ddd4e52ef9fdeacfc0db21e1e83e0d8d0a64f17cacb4dc208a893e7fd8ffa86cfc554dfba3d9fd281115eccb4b9d909f2fbf3fbb66bedd7b5db3f6d4f076f5d8fb54f8832896f8ef6f624162f1dd589be7a8e87dd5065708a8b0bfb18a5c2299f5605ac8a11c1add55b2018e6099380a70bee3e0727ca6ec58928fe6eb3147b47401e8d822eebade713b58335787669e5e0de5d328a1067df4cd9124665bb02ee8adfd1b3618374ef167df1f0fe79456f78aee3da4c1bf397e4637b0cf41a0f4a2910efd02b17bf5f3c15b0084b36fa7d4e85a53e5be366b428244eeba7499c3e54397227928e2ff6e583f332d6f7e8cf4d058f379b58a7d03a4bfa454bb4b6d543804b8970e6a9fe8886179eb418a8ce9e509e8433571f7d32378f2e983fa418c8c91760ec9fb20968e7fc23b7c4ac71693b2576ac0f8ce2020ff1e7a7ff24301b48b544fb29a1ca4f2502daded865e488a16dd33ec67b2eee3025cdc5ef90f253c4b5e0a61d51e495b675c5a1d55b4ba3812c5f44cd08487e61d36b0c2dc32d27333a5ee8a0906bfbcd388bd9389d1509912c0471c7b706a5aff880569a3fb11ac5f14d780deb4c1b1afe30fb6b8daf87b27a4ceb869d587a97f2f5af8d819aa47bbf207db68a6ecbbefb1e109ed0bfbbf3b54fba9e79de8fad9c3bcd3e74b8b92ccea3ff5c558c6cd72d78a711fc39df603bd4aa1439dd302258edd2204e52d7f435c6f552b612fbc321bea971195cd4d8bb033e2a779e239164d7eea6d8fd233b0b9b776246564cfcf44b31a83031a2413bf98a398c9f93da243cef9ce73d81bade8ad551fb0ffa75bc874c11d23ac9d7752f22a0f54c3870f3314a83e64332db810da1ebb288e10c4eb9be9ec037317b8f813e68160a887da3f5c0389510a0734b69ef275e19973b169d340610cf2112e9964cc0566b9b690c3feb36c8526491d3a563f0bead2abbcf0665e048aa3f929351b2f89876580633a403250ae3b5244c8c0e996bf888938dfc8920348d88e272e6eadc7c0387ca1dae228bd620ce3975d43b58758d9412d304a227245587065f58c4573ba2557f1d8333ba007709b1239d682f03405b22135757178fb701bbde81d2f8faaa7666c025d8a8bb426dc4b8e61aed79b3b3d3a9b01ee9142772d869677ede166e7a8be8ab84cdd6946b1478ce77ba307213971cfb24c86c344310f279e38d22254bf4caf83c02e715cb0550e615dc9f8dd2400fa749e3527493c15fb454c158e4c0603ae6e962b7890058ec7c10f0618ee274a15bca6ca9fe5bc5f9e7797c0950299912be9c58463c07d667d4bffe8aa590ae43db08512b40f3d265026bef2facdd508984e5f6d2ac7ef573397f14ed2e2ccdcbe5796e60ae64d173814906d1da5a5bfe8a2a4c5d6bb0b3315b878b4877d0c045f6e6cfa0dfc1ea4de7abe26f2b2d8c93299ed1d83f1b7853c756bfa346cd53b008fec169883983fe0f2405777dd85e17b2e4e8b23432c0dc4c386d67b6597184d0b4b95877362304638484cc0951400f66ee8391dd44417c58b3d46a8345a8049fcd70f7b5f4a6f912e2b18760947c74ef2b732b342878d7e7cc99902de87db36469555fbbfe76189f108d6ab31f4727fe4e22d075afaf6cc726ab17a5e1b4ab6c8f29a459da3c4266b5ad8ff55906a190f8b19a3bb92a50df49647c03d5d6106ec07e9300038d059a75b54ac31683ef8e5eee946e1c84d016ee1e7800a92c0a3823b62e0417fe86b191951f65abc0c38c1e0e8f1121a04b62a8a720790560f922804b1b7e7eaa497e1bede6e3d0dcf0312dbf221561958fa1e85a8f99e6fc82f919e78c17d1beda16cfef25fb5d00f7c32df9a51eac76000c988ffdf011564aa0e319764b16a5a7c728a470ff70772fb76c9ada26a0ac073fcbfa12501c2454b19e02d928e3939a40bfff76c002533b3849cdf8016728445131e5f1e292b7d3dc06bb3a3cfff6fabae0b7341694a8938c1d2497cd70b76c337c9a312e96c8f736d7625a535e1906eba53d199221ca60202a65be0f7e530aca10e61fa39c7601d65954e5ed4cab94345c6b89c7f8a0de5c61a7945e1564731b6715331d13263b2961a163382f7c4934d847033860e402f3aadb4f3e6cf47a97a2031401da4d2c8de8c80cdad71b97b4deb2075a02282f958ac6772354e67f097ca693778224b80892490015e7d697fb9107f75cea708178ffec93fb1d44e8493bad1d42c918e661219ea819e0200759037a5a585c0fe074fd407536fe58013f42612c41bfc66e16870d7a9c00ee93a3122b253fecbf5de3837641f4a1376af0f053463413c26c29f9a346318565276856b963da30ba6ab8c4c8ef6cfddc432328586d9d9829895835759bcde0851ae0c838a3927ea63fe5ba793fae94da61cab00fc05f3a265a2da1221bb2b66775ed7ba856b41011652d4984991e56249360ddfc997245ac1547a1c16382d42df383a8d1c852643b24895c422712e79c436fdfffece4ed1c50922d4f25296aaf6b204522086d188bee254f8303b60537ead1195ac5dd301286f0042dd68aa05a70e4beb779aa0b61a316f736b72c9ab7ed860a0908a078f4b8a53f2df0abf993f689de4b02b9138ca5047fb0bfc9ba3b92bff033e36fc9553260b008cef3d147c62d1d3944fd1eaff79bc5a922ec2190907bfda1b51c2c7fb867db1f8e13a37b5e3ae0165e93350b958a239ec1f2b78561cff854b975307b5b5dd23b040602a5a36bd79947ee04c7d0e5e30f9c4c79f7b4e6eada98bfc6c357cdf8939213423f1b21ba26cfc2b2756ea3eb992372db0ab8a7c37d8ae96bf3ed6be873c1891550ef741812032e1ae938326c399ee43a3061602dda006f1b6b620bebb6a5752bee77e8acf9921ebf4d4c8af7eb5e937c65697c0664c594e31a62377a25605051996c474ca322ce8e0e6ef8a7988be", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)={0x180, 0x0, 0xfffffffffffffff9, [{{0x0, 0x2, 0x2, 0x100, 0x3, 0x8, {0x6, 0x9, 0x4, 0x80000000000000fc, 0x3, 0x0, 0x7fffffff, 0x58, 0x4, 0x9000, 0x9, r5, r6, 0x1, 0x4}}, {0x20000000000000, 0x537, 0x2b, 0xf3, ':-(\\\xc9\x80\x00\x00\t\xc3\x00\x00\xf39|\xd8mM\x92\x8d\x14\xd3\xa4a\xb6\x02E\x89\x85V\xc2\x06\x00\x00\x00\x00\x00+\x13;\b\x01\x00'}}, {{0x20000003, 0x2, 0x4, 0x9, 0xbc88, 0x9, {0x4, 0x5, 0x5, 0x6, 0x3, 0x12e, 0x7, 0x8, 0xf7fffffa, 0xc000, 0x0, r5, r6, 0x4, 0x8}}, {0xffffdfffffffffff, 0x401, 0xb, 0x8100008, '&+%*!\xeb(^-@\x00'}}]}, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000000c0)={{{@in6=@private1, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@remote}}, &(0x7f00000001c0)=0xe4) r9 = getuid() mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x2, &(0x7f0000000200)={{}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, r1}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[{@allow_other}, {@blksize={'blksize', 0x3d, 0x1800}}], [{@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@obj_role}, {@subj_user}, {@mask={'mask', 0x3d, '^MAY_READ'}}, {@mask={'mask', 0x3d, '^MAY_APPEND'}}, {@fowner_gt={'fowner>', r5}}, {@fowner_lt={'fowner<', r8}}, {@uid_eq={'uid', 0x3d, r9}}]}}) 6m55.587023988s ago: executing program 0 (id=796): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) r1 = syz_open_dev$mtd(&(0x7f0000000900), 0x46, 0x1) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0xfffffffd, 0x0, 0x30, 0x0, @in6={0x1b, 0x4e24, 0x40000007, @private2={0xfc, 0x2, '\x00', 0x1}}, @in6={0xa, 0x4e21, 0x4, @private0, 0x7}}}, 0x118) ioctl$MEMGETBADBLOCK(r1, 0x40084d0b, &(0x7f0000000000)=0x20000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) shutdown(r3, 0x1) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000000)=0x2, 0x4) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendmsg$inet(r3, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220f"], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r4 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r7 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000640), 0x41, 0x0) writev(r7, &(0x7f0000005500)=[{&(0x7f0000003440)="0600000000000000839dda8b05257a6d6136e19271de93a120d8af19df66cf6039f1f64c7b9f823dfcd870324392314a3c965f000b25fd7da27c50794c07ca8a4809c5b5ba2f2b5c2a399a164cbe8323c843c21f05bef0f6daffa4bac0373c194da474fa0b72473e", 0x68}], 0x1) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xffff}, {0xfff1, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000003c0)=@newtfilter={0x74, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x44, 0x2, [@TCA_BASIC_ACT={0x40, 0x3, [@m_skbmod={0x3c, 0x1, 0x0, 0x0, {{0xb}, {0x10, 0x2, 0x0, 0x1, [@TCA_SKBMOD_SMAC={0xa, 0x4, @random="e9aba4799b78"}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x74}}, 0x4) ioctl$HIDIOCSREPORT(r4, 0x81044804, &(0x7f0000000400)={0x1}) syz_usb_control_io(r0, 0x0, 0x0) 6m54.414193415s ago: executing program 3 (id=797): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0xfffffffe, @empty, 0xffffffff}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x3) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) bind$l2tp(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xc) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8004) socket$key(0xf, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)=@newsa={0x14c, 0x10, 0x713, 0x1d, 0x0, {{@in=@multicast1, @in6=@local}, {@in=@broadcast, 0x0, 0x33}, @in6=@local, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x6}, [@algo_auth_trunc={0x5c, 0x14, {{'cmac(aes)\x00'}, 0x80, 0x0, "3509fe8fd57fd44aa5074c50bc700e53"}}]}, 0x14c}}, 0x0) socket$alg(0x26, 0x5, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x66) r6 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000000)) ioctl$PAGEMAP_SCAN(r6, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000b24000/0x1000)=nil, 0x7ffffffa, 0x0, 0x0, 0x6, 0x0, 0x2, 0x0, 0x18}) ioctl$VIDIOC_S_SELECTION(r2, 0xc040565f, &(0x7f0000000940)={0xa, 0x100, 0x3, {0x8000, 0x1000, 0x4, 0x2}}) ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000180)={0x2, @win={{0xc78e, 0xffffcaca, 0x5, 0x7}, 0x8, 0x5, 0x0, 0xfffffeff, 0x0, 0x5}}) 6m53.287560081s ago: executing program 3 (id=799): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0xfffffffe, @empty, 0xffffffff}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x3) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) bind$l2tp(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xc) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8004) socket$key(0xf, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee4, 0x8031, 0xffffffffffffffff, 0x3000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x4, 0x2) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)=@newsa={0x148, 0x10, 0x713, 0x0, 0x0, {{@in=@multicast1, @in6=@local}, {@in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x0, 0x33}, @in6=@local, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x6}, [@algo_auth_trunc={0x5c, 0x14, {{'blake2s-128-x86\x00'}, 0x80, 0x0, "3509fe8fd57fd44aa5074c50bc700e53"}}]}, 0x148}}, 0x0) socket$alg(0x26, 0x5, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x66) r6 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000000)) ioctl$PAGEMAP_SCAN(r6, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000b24000/0x1000)=nil, 0x7ffffffa, 0x0, 0x0, 0x6, 0x0, 0x2, 0x0, 0x18}) ioctl$VIDIOC_S_SELECTION(r2, 0xc040565f, &(0x7f0000000940)={0xa, 0x100, 0x3, {0x8000, 0x1000, 0x4, 0x2}}) 6m50.450676554s ago: executing program 3 (id=805): r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)=""/133, 0x85}, {&(0x7f00000002c0)=""/72, 0x48}, {&(0x7f0000000040)=""/51, 0x33}, {&(0x7f0000000340)=""/233, 0xe9}], 0x4, 0x0, 0x96) write(0xffffffffffffffff, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000020c0)='/proc/cpuinfo\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000000080)={0x2020}, 0x2020) pread64(r1, &(0x7f00000042c0)=""/191, 0xbf, 0x9a) read$FUSE(r1, &(0x7f0000002280)={0x2020}, 0x2020) ioctl$HIDIOCGREPORT(r1, 0x400c4807, &(0x7f0000000040)={0x2}) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x1, 0x0, 0x4}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f000009df00)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x800, 0x2, 0x0, 0x0, 0x10, 0xfffd}, 0x20) link(0x0, 0x0) r4 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120100009f187620ef170372362e010203010902240001000010000904bc00029e8833000905020200020200000905820220"], 0x0) syz_usb_control_io$rtl8150(r4, 0x0, 0x0) syz_usb_control_io$rtl8150(r4, 0x0, &(0x7f00000029c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="200302"], 0x0, 0x0, 0x0, 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0xc850) syz_usb_control_io$uac1(r4, 0x0, &(0x7f0000002640)={0x44, &(0x7f0000000500)={0x20, 0x10, 0x2, '!k'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r4, 0x0, &(0x7f0000000a80)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)={0x40, 0xb, 0x2, "31fb"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r4, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000580)={0x0, 0x16, 0x2, "f610"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r4, 0x0, &(0x7f0000000380)={0x18, &(0x7f00000000c0)={0x40, 0x14, 0x2, "86e2"}, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000540)=@deltclass={0x24, 0x29, 0x4, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x8, 0x7}, {0xffff, 0xa1a7a237334a7c95}, {0x2, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x8082}, 0x800) set_mempolicy(0x5, &(0x7f0000000000)=0x4000000ff9, 0xf) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000500)=ANY=[@ANYBLOB="7000000010000305fcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="11110200318800004800128008000100677470003c00028005000500000000000800040001000000080003"], 0x70}, 0x1, 0x0, 0x0, 0x48890}, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) 6m50.252560784s ago: executing program 0 (id=807): syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) r0 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000002140)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x4000}}) umount2(&(0x7f0000000140)='./file0\x00', 0xa) openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={0x474083, 0x15, 0x8}, 0x18) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x7, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff}}}, &(0x7f0000000480)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r9, 0x6, 0xd, &(0x7f0000000080)='bbr', 0x3) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) connect$inet(r9, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) r10 = dup(r8) syz_ublk_setup_queues(r10, r7, &(0x7f0000000180)={0x0, 0x20fb89, 0x800, 0x1, 0x32c}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0x15a, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7d, 0x8, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x400, 0x3, 0xffffffff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0xbd}}], 0x1, &(0x7f0000000340)={0x2e, 0x871629fa8e45411f, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x8a2, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94) 6m49.933171943s ago: executing program 0 (id=809): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0xfffffffe, @empty, 0xffffffff}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x3) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) bind$l2tp(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xc) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8004) socket$key(0xf, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)=@newsa={0x14c, 0x10, 0x713, 0x0, 0x0, {{@in=@multicast1, @in6=@local}, {@in=@broadcast, 0x0, 0x33}, @in6=@local, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x6}, [@algo_auth_trunc={0x5c, 0x14, {{'cmac(aes)\x00'}, 0x80, 0x0, "3509fe8fd57fd44aa5074c50bc700e53"}}]}, 0x14c}}, 0x0) (fail_nth: 16) socket$alg(0x26, 0x5, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x66) r6 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000000)) ioctl$PAGEMAP_SCAN(r6, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000b24000/0x1000)=nil, 0x7ffffffa, 0x0, 0x0, 0x6, 0x0, 0x2, 0x0, 0x18}) ioctl$VIDIOC_S_SELECTION(r2, 0xc040565f, &(0x7f0000000940)={0xa, 0x100, 0x3, {0x8000, 0x1000, 0x4, 0x2}}) ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000180)={0x2, @win={{0xc78e, 0xffffcaca, 0x5, 0x7}, 0x8, 0x5, 0x0, 0xfffffeff, 0x0, 0x5}}) 6m49.070168767s ago: executing program 0 (id=812): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, 0x0, 0x0) sendmsg$inet6(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x3404c8c4) r2 = eventfd(0xb7db) syz_usb_connect(0x4, 0x24, &(0x7f0000001300)=ANY=[@ANYRES32=r2], 0xfffffffffffffffe) setitimer(0x2, &(0x7f0000000180)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) r4 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x24) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r5, 0x4068aea3, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) bind(r6, &(0x7f0000000000)=@in={0x2, 0x3210, @rand_addr=0xac140001}, 0x10) listen(r6, 0x5) write$tun(r3, &(0x7f0000000140)=ANY=[@ANYBLOB="00000800010000000000140008004500003c000000004084ca2502020202ac14000104d2321000000000000000000100001c11223344000800000005000500000005c0040008"], 0x4a) 6m48.325460141s ago: executing program 33 (id=812): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, 0x0, 0x0) sendmsg$inet6(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x3404c8c4) r2 = eventfd(0xb7db) syz_usb_connect(0x4, 0x24, &(0x7f0000001300)=ANY=[@ANYRES32=r2], 0xfffffffffffffffe) setitimer(0x2, &(0x7f0000000180)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) r4 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x24) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r5, 0x4068aea3, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) bind(r6, &(0x7f0000000000)=@in={0x2, 0x3210, @rand_addr=0xac140001}, 0x10) listen(r6, 0x5) write$tun(r3, &(0x7f0000000140)=ANY=[@ANYBLOB="00000800010000000000140008004500003c000000004084ca2502020202ac14000104d2321000000000000000000100001c11223344000800000005000500000005c0040008"], 0x4a) 6m47.199605535s ago: executing program 3 (id=819): syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) r0 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000002140)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x4000}}) umount2(&(0x7f0000000140)='./file0\x00', 0xa) openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={0x474083, 0x15, 0x8}, 0x18) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x7, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff}}}, &(0x7f0000000480)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r9, 0x6, 0xd, &(0x7f0000000080)='bbr', 0x3) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) connect$inet(r9, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) r10 = dup(r8) syz_ublk_setup_queues(r10, r7, &(0x7f0000000180)={0x0, 0x20fb89, 0x800, 0x1, 0x32c}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0x15a, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7d, 0x8, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x400, 0x3, 0xffffffff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0xbd}}], 0x1, &(0x7f0000000340)={0x2e, 0x871629fa8e45411f, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x8a2, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94) 6m46.4716064s ago: executing program 3 (id=822): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0xfffffffe, @empty, 0xffffffff}, 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) bind$l2tp(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) socketpair$unix(0x1, 0x3, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8fb, 0x0, 0x9, 0x0, 0xfffffe0000000005, 0xfa0f, 0xa46}, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xc) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8004) socket$key(0xf, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)=@newsa={0x14c, 0x10, 0x713, 0x0, 0x0, {{@in=@multicast1, @in6=@local}, {@in=@broadcast, 0x0, 0x33}, @in6=@local, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x6}, [@algo_auth_trunc={0x5c, 0x14, {{'cmac(aes)\x00'}, 0x80, 0x0, "3509fe8fd57fd44aa5074c50bc700e53"}}]}, 0x14c}}, 0x0) socket$alg(0x26, 0x5, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x66) r6 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000000)) ioctl$PAGEMAP_SCAN(r6, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000b24000/0x1000)=nil, 0x7ffffffa, 0x0, 0x0, 0x6, 0x0, 0x2, 0x0, 0x18}) ioctl$VIDIOC_S_SELECTION(r2, 0xc040565f, &(0x7f0000000940)={0xa, 0x100, 0x3, {0x8000, 0x1000, 0x4, 0x2}}) ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000180)={0x2, @win={{0xc78e, 0xffffcaca, 0x5, 0x7}, 0x8, 0x5, 0x0, 0xfffffeff, 0x0, 0x5}}) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a6970"], 0x60}}, 0x0) 6m45.786467612s ago: executing program 3 (id=824): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000022c0)=@newqdisc={0x860, 0x28, 0x4ee4e6a52ff56541, 0x70bd2d, 0xfffffdf8, {0x0, 0x0, 0x0, r6, {0x10}, {}, {0xd, 0xd}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x834, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x7, 0x7, 0x80000000, 0x0, 0x1, 0x0, 0x5, 0x4a, 0x81, 0x3, 0x8, 0x100, 0x10001, 0x3, 0x5, 0xb, 0x184, 0x8, 0x7, 0x1, 0x1, 0x200009, 0x0, 0x8, 0x7, 0x4, 0x6, 0x7f, 0x10, 0xfffff9b9, 0x5, 0x7, 0x7, 0xf285, 0x7, 0x8, 0x5, 0x2, 0x7, 0x8, 0x1ff, 0x401, 0xe8, 0x80000000, 0xd8fa, 0x8, 0x7, 0x7fff, 0x3, 0x200, 0x4, 0x3, 0x80000000, 0x6, 0xff, 0x8001, 0x3, 0xd, 0x40, 0x7, 0xf5a, 0xffffffff, 0x1, 0x2, 0x0, 0x800, 0x0, 0x6, 0x1000, 0x6, 0x6, 0x0, 0x1ff, 0x7, 0x4, 0x8, 0xffffffff, 0x80000001, 0x4d, 0x313, 0x7, 0x600, 0x7, 0x6, 0x9, 0x13bf, 0x97, 0x7, 0x9, 0x1, 0x9, 0x0, 0x401, 0x7d, 0x6, 0x80000001, 0x8, 0xdd0, 0xf577, 0x3ff, 0x6, 0x40, 0xfffffffc, 0x7, 0x6, 0xffffff4d, 0x7, 0x7fff, 0x8, 0x4, 0x9, 0x9, 0x475, 0x10, 0x1000, 0x9, 0x4, 0xff, 0x4, 0x1, 0x7, 0x4, 0xfffffff7, 0x2, 0x5, 0x99, 0x7, 0x4, 0x7fffffff, 0x6, 0x8, 0x1000, 0x8001, 0x100, 0x100, 0x2, 0x4, 0x25, 0x3ff, 0x2277, 0x9, 0xcc8f, 0xd, 0xce2, 0x9b, 0x9, 0x7f, 0x3, 0x8000, 0x7, 0x0, 0x9, 0x8, 0x5, 0x8211, 0x80000001, 0x7b51, 0x74, 0x101, 0xfffffc62, 0x60000, 0x2, 0x3, 0x7ad7, 0x3, 0x2, 0x4, 0x5, 0x54, 0x0, 0x101, 0x4, 0xa2e, 0x7, 0x2, 0x8001, 0x4, 0x80, 0x2, 0xffff5609, 0x6ca98c39, 0x81, 0x0, 0x0, 0x0, 0x5, 0x55a, 0xd, 0x4, 0x1, 0x0, 0x9, 0xfffffffe, 0x101, 0x6, 0x6, 0xa, 0x10000, 0x4, 0x80000000, 0x2000cf1, 0x7, 0x10001, 0x6, 0x4, 0x200, 0x0, 0x8, 0x7, 0x9, 0x3, 0xffff, 0x7fffffff, 0x7, 0x7, 0x200000, 0x5e0, 0xfffffff2, 0x7, 0x3, 0x31, 0x7, 0x5, 0x40000000, 0x4, 0x5, 0x2, 0x8, 0x9, 0x1000, 0x7, 0xbdb7, 0x3, 0xe, 0x7, 0x3, 0x6, 0x4, 0x1, 0x459, 0xd, 0x7, 0x68, 0x4, 0x4, 0x7fffffff, 0x7, 0x2, 0x80000000, 0x6cdd, 0xbd, 0x0, 0x6, 0x40, 0x81]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0x0, 0xfffe, 0x7ff, 0x1}, {0x6, 0x0, 0x8, 0x6, 0x8, 0x401}, 0x8000040, 0xd, 0x8ef}}, @TCA_TBF_PTAB={0x404, 0x3, [0x7, 0x400, 0x8, 0x4, 0x0, 0x4, 0x9, 0xfffffff8, 0x1d, 0xff, 0x4, 0x7, 0x2, 0xfffffffc, 0x275d, 0xffffffff, 0x4, 0x5, 0x4b, 0x8, 0x7, 0x2, 0x100400, 0x9, 0x7d4, 0x6d59c30b, 0x6, 0x0, 0x9, 0x1, 0x1ff, 0xff, 0x1, 0xffff, 0x400, 0x20a, 0x200, 0xd8e9, 0xa48, 0xc70, 0x400, 0x7, 0x7a, 0x7fff, 0x7, 0x13, 0x4, 0xfffffffe, 0x7, 0x1800000, 0x4, 0xffff, 0x80000000, 0x3, 0x0, 0x4, 0x5, 0xd69, 0x7, 0x5, 0x2, 0x101, 0xd, 0x7, 0xffffffff, 0x9, 0x2, 0xc, 0x81, 0x3, 0x8, 0xe, 0x6, 0x5, 0x8, 0x2d, 0x0, 0x13, 0x10, 0x1ff, 0x3, 0x2, 0x3, 0x401, 0x7, 0xf, 0x0, 0x4f, 0xffffffff, 0x7, 0x7fff, 0x6, 0xc5c, 0x5, 0xd, 0xb4, 0x80, 0x7, 0x7f, 0x4, 0x3d62, 0x7, 0x8, 0x200, 0x5, 0x100, 0xc2c, 0x6, 0x80, 0x63, 0x80, 0x6, 0x1, 0x4, 0x4, 0x4, 0xb, 0x5, 0x7, 0x9d, 0x120, 0x9, 0xfffffff6, 0x6, 0x0, 0x96, 0x1, 0xa2, 0x8, 0x3, 0x6, 0x7, 0x6, 0x3, 0x80, 0x6281, 0x125, 0x9, 0x10, 0xfffff000, 0x2, 0xfffffff8, 0x9, 0x9, 0x101, 0x6, 0x3, 0x2, 0x8, 0x7fff, 0x0, 0x0, 0x2f3, 0x4, 0x0, 0x0, 0x3, 0xa80, 0x8, 0x8, 0x7d2, 0x7f, 0x60000, 0x2, 0xfffffc01, 0x8, 0xfffffff9, 0x988, 0x101, 0xac3, 0x49da481b, 0x0, 0x0, 0x7fffffff, 0xa45, 0x7, 0xb, 0x9, 0x0, 0xffffffc0, 0x6b50, 0x0, 0xabd, 0x1, 0xef9c, 0x7, 0x6e, 0x9, 0x1, 0x9, 0x2, 0x7, 0x3, 0x80000001, 0x9, 0x7, 0x4, 0x6, 0x0, 0x2, 0x0, 0x4, 0x7fff, 0x81, 0x8, 0x80, 0x0, 0xfff, 0x4, 0xdb4d, 0x975, 0x2, 0x3fffc00, 0x0, 0x0, 0x6d, 0x9, 0x80000000, 0x2ad, 0xf4c, 0x9a27, 0x0, 0xfff, 0x6, 0x3ff, 0x10001, 0x0, 0x9, 0x8, 0x61c, 0x7, 0x3, 0x1ff, 0x10000, 0x9, 0xffffffff, 0x2, 0x9, 0x7e0995af, 0xfffffff9, 0x0, 0x7, 0x15369691, 0x2, 0x5, 0x7, 0x8, 0x0, 0x80000001, 0x8, 0xa150, 0x4, 0x71, 0x9, 0x4, 0x7fe]}]}}]}, 0x860}, 0x1, 0x0, 0x0, 0x40098}, 0x40000) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="80", 0x1}], 0x1}, 0x4) 6m45.376781831s ago: executing program 34 (id=824): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000022c0)=@newqdisc={0x860, 0x28, 0x4ee4e6a52ff56541, 0x70bd2d, 0xfffffdf8, {0x0, 0x0, 0x0, r6, {0x10}, {}, {0xd, 0xd}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x834, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x7, 0x7, 0x80000000, 0x0, 0x1, 0x0, 0x5, 0x4a, 0x81, 0x3, 0x8, 0x100, 0x10001, 0x3, 0x5, 0xb, 0x184, 0x8, 0x7, 0x1, 0x1, 0x200009, 0x0, 0x8, 0x7, 0x4, 0x6, 0x7f, 0x10, 0xfffff9b9, 0x5, 0x7, 0x7, 0xf285, 0x7, 0x8, 0x5, 0x2, 0x7, 0x8, 0x1ff, 0x401, 0xe8, 0x80000000, 0xd8fa, 0x8, 0x7, 0x7fff, 0x3, 0x200, 0x4, 0x3, 0x80000000, 0x6, 0xff, 0x8001, 0x3, 0xd, 0x40, 0x7, 0xf5a, 0xffffffff, 0x1, 0x2, 0x0, 0x800, 0x0, 0x6, 0x1000, 0x6, 0x6, 0x0, 0x1ff, 0x7, 0x4, 0x8, 0xffffffff, 0x80000001, 0x4d, 0x313, 0x7, 0x600, 0x7, 0x6, 0x9, 0x13bf, 0x97, 0x7, 0x9, 0x1, 0x9, 0x0, 0x401, 0x7d, 0x6, 0x80000001, 0x8, 0xdd0, 0xf577, 0x3ff, 0x6, 0x40, 0xfffffffc, 0x7, 0x6, 0xffffff4d, 0x7, 0x7fff, 0x8, 0x4, 0x9, 0x9, 0x475, 0x10, 0x1000, 0x9, 0x4, 0xff, 0x4, 0x1, 0x7, 0x4, 0xfffffff7, 0x2, 0x5, 0x99, 0x7, 0x4, 0x7fffffff, 0x6, 0x8, 0x1000, 0x8001, 0x100, 0x100, 0x2, 0x4, 0x25, 0x3ff, 0x2277, 0x9, 0xcc8f, 0xd, 0xce2, 0x9b, 0x9, 0x7f, 0x3, 0x8000, 0x7, 0x0, 0x9, 0x8, 0x5, 0x8211, 0x80000001, 0x7b51, 0x74, 0x101, 0xfffffc62, 0x60000, 0x2, 0x3, 0x7ad7, 0x3, 0x2, 0x4, 0x5, 0x54, 0x0, 0x101, 0x4, 0xa2e, 0x7, 0x2, 0x8001, 0x4, 0x80, 0x2, 0xffff5609, 0x6ca98c39, 0x81, 0x0, 0x0, 0x0, 0x5, 0x55a, 0xd, 0x4, 0x1, 0x0, 0x9, 0xfffffffe, 0x101, 0x6, 0x6, 0xa, 0x10000, 0x4, 0x80000000, 0x2000cf1, 0x7, 0x10001, 0x6, 0x4, 0x200, 0x0, 0x8, 0x7, 0x9, 0x3, 0xffff, 0x7fffffff, 0x7, 0x7, 0x200000, 0x5e0, 0xfffffff2, 0x7, 0x3, 0x31, 0x7, 0x5, 0x40000000, 0x4, 0x5, 0x2, 0x8, 0x9, 0x1000, 0x7, 0xbdb7, 0x3, 0xe, 0x7, 0x3, 0x6, 0x4, 0x1, 0x459, 0xd, 0x7, 0x68, 0x4, 0x4, 0x7fffffff, 0x7, 0x2, 0x80000000, 0x6cdd, 0xbd, 0x0, 0x6, 0x40, 0x81]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0x0, 0xfffe, 0x7ff, 0x1}, {0x6, 0x0, 0x8, 0x6, 0x8, 0x401}, 0x8000040, 0xd, 0x8ef}}, @TCA_TBF_PTAB={0x404, 0x3, [0x7, 0x400, 0x8, 0x4, 0x0, 0x4, 0x9, 0xfffffff8, 0x1d, 0xff, 0x4, 0x7, 0x2, 0xfffffffc, 0x275d, 0xffffffff, 0x4, 0x5, 0x4b, 0x8, 0x7, 0x2, 0x100400, 0x9, 0x7d4, 0x6d59c30b, 0x6, 0x0, 0x9, 0x1, 0x1ff, 0xff, 0x1, 0xffff, 0x400, 0x20a, 0x200, 0xd8e9, 0xa48, 0xc70, 0x400, 0x7, 0x7a, 0x7fff, 0x7, 0x13, 0x4, 0xfffffffe, 0x7, 0x1800000, 0x4, 0xffff, 0x80000000, 0x3, 0x0, 0x4, 0x5, 0xd69, 0x7, 0x5, 0x2, 0x101, 0xd, 0x7, 0xffffffff, 0x9, 0x2, 0xc, 0x81, 0x3, 0x8, 0xe, 0x6, 0x5, 0x8, 0x2d, 0x0, 0x13, 0x10, 0x1ff, 0x3, 0x2, 0x3, 0x401, 0x7, 0xf, 0x0, 0x4f, 0xffffffff, 0x7, 0x7fff, 0x6, 0xc5c, 0x5, 0xd, 0xb4, 0x80, 0x7, 0x7f, 0x4, 0x3d62, 0x7, 0x8, 0x200, 0x5, 0x100, 0xc2c, 0x6, 0x80, 0x63, 0x80, 0x6, 0x1, 0x4, 0x4, 0x4, 0xb, 0x5, 0x7, 0x9d, 0x120, 0x9, 0xfffffff6, 0x6, 0x0, 0x96, 0x1, 0xa2, 0x8, 0x3, 0x6, 0x7, 0x6, 0x3, 0x80, 0x6281, 0x125, 0x9, 0x10, 0xfffff000, 0x2, 0xfffffff8, 0x9, 0x9, 0x101, 0x6, 0x3, 0x2, 0x8, 0x7fff, 0x0, 0x0, 0x2f3, 0x4, 0x0, 0x0, 0x3, 0xa80, 0x8, 0x8, 0x7d2, 0x7f, 0x60000, 0x2, 0xfffffc01, 0x8, 0xfffffff9, 0x988, 0x101, 0xac3, 0x49da481b, 0x0, 0x0, 0x7fffffff, 0xa45, 0x7, 0xb, 0x9, 0x0, 0xffffffc0, 0x6b50, 0x0, 0xabd, 0x1, 0xef9c, 0x7, 0x6e, 0x9, 0x1, 0x9, 0x2, 0x7, 0x3, 0x80000001, 0x9, 0x7, 0x4, 0x6, 0x0, 0x2, 0x0, 0x4, 0x7fff, 0x81, 0x8, 0x80, 0x0, 0xfff, 0x4, 0xdb4d, 0x975, 0x2, 0x3fffc00, 0x0, 0x0, 0x6d, 0x9, 0x80000000, 0x2ad, 0xf4c, 0x9a27, 0x0, 0xfff, 0x6, 0x3ff, 0x10001, 0x0, 0x9, 0x8, 0x61c, 0x7, 0x3, 0x1ff, 0x10000, 0x9, 0xffffffff, 0x2, 0x9, 0x7e0995af, 0xfffffff9, 0x0, 0x7, 0x15369691, 0x2, 0x5, 0x7, 0x8, 0x0, 0x80000001, 0x8, 0xa150, 0x4, 0x71, 0x9, 0x4, 0x7fe]}]}}]}, 0x860}, 0x1, 0x0, 0x0, 0x40098}, 0x40000) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="80", 0x1}], 0x1}, 0x4) 2m35.719021743s ago: executing program 4 (id=2251): r0 = fsopen(&(0x7f0000000100)='nfs\x00', 0x0) (async) r1 = openat$btrfs_control(0xffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000001740)={0x1, 0x5, 0x1, 0x9, 0x4, 0x0, [{0x3, 0x3f, 0xd, '\x00', 0x2104}, {0x7, 0x7, 0x4, '\x00', 0x8c}, {0x5, 0x5, 0x4, '\x00', 0x2400}, {0x2, 0x4, 0xe376, '\x00', 0x1000}]}) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000540)='soft\x00', &(0x7f0000000580)='\x00', 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="6800000010000304020000000000000000000400", @ANYRES32=0x0, @ANYBLOB="0003000000000000480012800b0001006272696467650000380002800c001f000100000000000000060027000e00000005002900000000000c002e0000a000000000000000"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x8044) (async, rerun: 32) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (rerun: 32) syz_clone3(&(0x7f0000001e80)={0x1e6022000, 0x0, 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) (async) r4 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) (async) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r5, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0000000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e06018000020000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) ioctl$EVIOCSMASK(r4, 0x40104593, &(0x7f0000000040)={0x20, 0x0, 0x0}) r6 = socket(0x10, 0x80002, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) (async, rerun: 64) io_setup(0x3, &(0x7f0000000100)=0x0) (rerun: 64) r9 = eventfd2(0x6, 0x801) (async) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000003700)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000100}, 0xc, &(0x7f00000036c0)={&(0x7f0000001f00)={0x1788, 0x0, 0x300, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x4, 0x69}}}}, [@NL80211_ATTR_NAN_FUNC={0x1064, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TX_MATCH_FILTER={0x102c, 0xe, 0x0, 0x1, [{0x1004, 0x0, "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"}, {0x24, 0x0, "32e20ab977f2c648fbbc0d1c384bb4f686bbb666b950968977afdf0e5a442ab6"}]}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "6e8ca9c1f08c"}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @device_b}, @NL80211_NAN_FUNC_RX_MATCH_FILTER={0x18, 0xd, 0x0, 0x1, [{0x12, 0x0, "5c6b217f9eda3e62a9072a0f041d"}]}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}]}, @NL80211_ATTR_NAN_FUNC={0x20, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "e6b4fa37ac05"}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x9}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x10}]}, @NL80211_ATTR_NAN_FUNC={0x14c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SRF={0x124, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_BF_IDX={0x5}, @NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}, @NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x8}]}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x3}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0xf}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x6}]}, @NL80211_ATTR_NAN_FUNC={0x124, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_TX_MATCH_FILTER={0x10c, 0xe, 0x0, 0x1, [{0x2d, 0x0, "10854cf57ce13f230c9fd8ab915ecd681e14c9b96747ce48b8de8cd53b768a0584c97e65ba941b3b81"}, {0xd8, 0x0, "38eb63d41d8d9ffeecfb0e296b39c5b16c6c51138498bfd226e7d10c3f08808b619d57eb22d8ac28cd7910055f073172192b665935653db43218c1441990f773292920d8867a41f05b6a4f0fcfbe1c61f3e876253e9385d8e8628af818cc93093bc8c61a180ebabb15e3889fc2268a4acaee4f044f9f4a2150338bf4e49df8730358de6a3a4a42f91a5eb7d060f485f4269f3fb1134222e644685835bf05338d49df0c1e5460112e394afd0ba723b62a1f9a5b9d65a1a65e5a7301bd0e170c84b0893e908762f0e5c75ddf4284fcf8babccdb904"}]}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x8}, @NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x6}]}, @NL80211_ATTR_NAN_FUNC={0x474, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_RX_MATCH_FILTER={0x468, 0xd, 0x0, 0x1, [{0xa8, 0x0, "3b7a29bd1f075e99cb438993f7adbcfe23bce034086b3e9d2d78b44e22e2be2b926265953bb6fa942ce1c394c7b4e96af88cbce4010e198ec275ffd2ecf9d6eec894619fe5a6ca75104a7ed61f2f3db254049d5b61e17165f48e040e569d7cb6a138dd729dd1b5badf289b357e15b7dd5b976abdc9afbca0c82cee2fe9a718f87bdacccc04d82c060e5c1314c662c30080746e7c71ef984e38933f88226766e5e2aaf13c"}, {0xcf, 0x0, "61b2b4e52382a062b4d5912f25e09e13c683eb4d37af1744fe4a484c6462a6656d057d893b8f6760d4c51741fb3493027c8b24b81a81a871783147b418817dedc035e9d1129d824439f0848f5fa3d5aed70e8c059f3b508756fc15e0d85d4c79ea48072f0feb47c848de17f8a3ac7d69703c8dee4ecfb2ce91a2be5a300ba9106878561a54e49d6a99b1785c3f499cc05e27eda44d01dee6daccdff0a0e7c51f204268f100c390550f63aa58c332a0b186d5845ae9ada36de920d8ddf02c5bf2c9c6f0712abb0956a024d8"}, {0x83, 0x0, "919507869199509d2dbd528ed6efc421538e8b86d4caf1a5a4a746dd0938343780763f7b1f97283d35a7863eb6082846abbd68a8faede126d2065b8c1dc5e8552c549b2b0b6116263b9d381b283eac311c024bb16750bdd100142dd0ec268931b038f4cc8d8b2fb28225f8a235e0d18b757fe3032355cceb6a938fff847875"}, {0x2c, 0x0, "8326e0a42b7e58ddc41fa8083b20ed9923f49b62b68f4613ec808103a409e363cc748ced26a35219"}, {0xf1, 0x0, "20c6cb7fd631a2b358009e9cb507a1cb2545101fbb2c3b4943b2e1dea6bd7f3a7d1fccaca7fece2cc3c9028362786858391f9884a5fe0a7fcd83b2b75dfee33b1acd3117e7d15f4d1e29441b8d5ad3a718e8d230554d6cbb35608f7b5a69d043265dbc70fb92dc5911bf61a864b13a21257a845dc3928607448ceda87f487fb657966eb9d2ec2ddb910967af1bfdb64aba130625b08f190445a42d41d7a511f062d2b0e3e8bdad91f967e7d8c806d91f4cebf2c960cc979ecd1806fdf235e644c5fe568f8e0ca320fe96e83b841865cafda24a6a093777dca7a08429bd43d6b696ccf8ab23889479bcad7ebd63"}, {0x72, 0x0, "25483b399aadfedcab7692e5ef0821921ff234d561b23ee44e4d48b33f1512d9e04c2847aad4fa0c181f19a3c8d6b4f758aea100652bced31185b354948ec683be07fc2f55ca42a4a260d0db63b15f682e83cc6e47e896c5265e34c66e20c8091c01cab663010c78594fc59ec24c"}, {0xd1, 0x0, "c0e61d34929fd9171bc7f730caaabd4ee26ca9390260496d84d27c8a167b47ed18a2e9b19c501f4830cf553bb2801c5c3fd54db36ef9940b0ec77c3a2c3ec12e062f3eddc66b69305737a6f8e9634a3385ea6be3883dd69dea5967abd3bfbdbb05703fe4ab223e312ab65c84401eeeb7cc414ba63c4cf063cac42233a69c384b2f0a7e3833be4a12136f2a51c2d759c149c432b2d8d5bc69944f71d7d8d576060c39aedacfc8d1ffc39627fded20aa21e65786abe01a2e1fd429bff815fd351913b23e63f99190941d85aeabdd"}]}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0xfb9}]}]}, 0x1788}, 0x1, 0x0, 0x0, 0x20040003}, 0x40) (async, rerun: 32) r10 = eventfd(0x6) (async, rerun: 32) r11 = socket$nl_generic(0x10, 0x3, 0x10) (async) r12 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)={0x47, r12, 0x1, 0x70bd24, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20008804}, 0x4050) (async) io_submit(r8, 0x4, &(0x7f0000001600)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x2, 0x8, r6, &(0x7f0000000140)="1b00479074104b", 0x7, 0x3}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x2, 0x2, 0xffffffffffffffff, &(0x7f00000003c0)="141f0a92c793fcd2052fb05c2c1470cd85d797ad06b6ca77234b5442a9ccbcaa193a8de12301a61e6cc4185fb9338bc9f79ad03666417913d380ad47671d201987c9bebb2d0c6a92852515c5ee3181a45dddc11391903c14e08d5bcf6fc13df403f55f724f97898b59eaee0413ef9939fb8ffda660f28c9ad2d88dd7e76d5b8934305cc2963e98ebcbdf9be0", 0x8c, 0x70, 0x0, 0x1, r9}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x9, r7, &(0x7f00000004c0)="d683e7fcc4967239f5b8b89c538ba40965e5c629290394c515a9d053a5d37c9145a74270d4225376f432e8202917b0577b145f62e038b596d6b8905e2e824efaaa08212c6f5cb22523084f7f9b36e87496a040a042eeb7eb5a9bee8eddaa1f5c03a809e57b370efd5e510ab44d8f9ea5dc3d9a8ce799eee987f5eedf089eeb4a95b99f7d0d5834b2401ff2d1771d05f53cfd1949d655122a", 0x98, 0x3, 0x0, 0x2, r10}, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0xa, 0xfff0, r11, &(0x7f00000005c0)="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", 0x1000, 0x6, 0x0, 0x1, r7}]) (async) connect$inet6(r7, 0x0, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d00", @ANYRES32=r3, @ANYRES16=r6, @ANYRES32=r6], 0x44}}, 0x2000800) (async) r13 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r13, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="b8000000190001004530459691cd1873e00000020000000000000000000000000000000000000000000000000000000000000000fffd00000a00000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000700000000020000fbffffffffffffff000000000000000000000000000000000000000000000000feffffffffffffff00"/108], 0xb8}}, 0x10) sendmsg$nl_xfrm(r13, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001640)=@updpolicy={0xe8, 0x15, 0x1, 0x0, 0x25dfdbfb, {{@in=@remote, @in=@remote, 0xce20, 0x0, 0x0, 0x0, 0xa, 0x10, 0x20}, {0x0, 0x5, 0xff, 0x0, 0x0, 0x9, 0xffffffff}, {0x0, 0x200, 0x4}, 0x22000, 0x6e6bb5, 0x2, 0x0, 0x1}, [@extra_flags={0x8}, @user_kmaddress={0x2c, 0x13, {@in=@multicast1, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0xa}}]}, 0xe8}}, 0x24000080) 2m33.850689295s ago: executing program 4 (id=2259): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) (async, rerun: 32) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f00000005c0)=&(0x7f0000000580)) (async, rerun: 32) r1 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000300)=""/78, 0x0}) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x2209c2, 0x0) (async, rerun: 32) syz_open_procfs(0x0, &(0x7f00000000c0)='mounts\x00') (rerun: 32) r2 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0xbe82, 0x1000, 0x3, 0x330}, &(0x7f0000000200)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd_index=0x4, 0x8, 0x0, 0x0, 0x4, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r2, 0x101, 0x11, 0x5, 0x0, 0x0) (async) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) (async) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) (async) mmap(&(0x7f0000ff5000/0x4000)=nil, 0x4000, 0x67b93cf164ff38ce, 0xa017dd1956410e38, 0xffffffffffffffff, 0xfffff000) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) (async) r6 = openat$null(0xffffff9c, &(0x7f0000000000), 0x161182, 0x0) (async) r7 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea00090587033b"], 0x0) (async) r8 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) write$char_usb(r8, &(0x7f0000000040)='7', 0x1) (async) timer_create(0x0, &(0x7f0000000100)={0x0, 0x3a, 0x0, @thr={&(0x7f00000001c0)="ef5a4740042538ba3bc6b5f91e39eb60f3a538ec924ff8145fa1fc75741468dd64c6c94c7b726c41946c907f50e5b59f1c2b1403a8571a", &(0x7f0000000c00)="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"}}, &(0x7f0000000300)) (async) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0xff7e, 0x7}) (async, rerun: 64) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (rerun: 64) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) write$char_usb(r8, &(0x7f0000000bc0)="be", 0x1) (async) syz_usb_disconnect(r7) (async, rerun: 32) ioctl$VHOST_VSOCK_SET_RUNNING(r6, 0x4004af61, &(0x7f0000000180)=0xffffffff) (async, rerun: 32) mremap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async) ioctl$GIO_FONTX(r6, 0x4b6b, &(0x7f0000000ac0)={0x98, 0x1a, &(0x7f00000006c0)}) 2m30.710620503s ago: executing program 4 (id=2277): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) r1 = socket$kcm(0x21, 0x2, 0xa) syz_usb_connect$hid(0x2, 0x36, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e20, 0x9c000000, @ipv4={'\x00', '\xff\xff', @remote}, 0x1df}}, 0x80, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1000000010010000"], 0x10}, 0x40) readv(r1, &(0x7f0000004500)=[{&(0x7f0000000180)=""/45, 0x2d}], 0x1) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) 2m30.667702915s ago: executing program 4 (id=2278): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f00000002c0)='./file0/file0\x00', 0x88101) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x0) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r5, &(0x7f0000004200)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) close(0x3) r6 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r6, &(0x7f0000000000)={0x18, 0x0, {0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, 'macvlan1\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r6, 0x80047437, &(0x7f0000000100)) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="1bf700050000000000dfbfc9b6146187e9", 0x11}], 0x1, 0x0, 0x0, 0x2c}, 0x20044084) 2m30.503758568s ago: executing program 4 (id=2281): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000980)=ANY=[@ANYBLOB="a801000016000104fdffffff00000000fc0100000000000000000000000000012001000000000000000000000000000200040000000000000000802000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe8000000000000000000000000000102000000033000000ffffffff0000000000000000000000000400000000000000feffffffffffffff05000000000000000000000000fc00000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000020000000000000000f1ffffffffffff02000000feffffff0000000000000000900000000000000008000000fdffffff04001b0014000d00"], 0x1a8}}, 0x4808) 2m30.110129957s ago: executing program 4 (id=2282): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x14, 0x15, 0x301, 0x70bd2c, 0x0, {0xc}}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="475f99ce6ab9f0164d18380000830604010200000000000000000a0000010800054000000fa60500010001000000060006405ae5736a000500000a000200000007ff02000000"], 0x38}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000) mknodat$null(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x40, 0x103) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000100)=@v2={0x2000000, [{0x81}, {0x8, 0xc}]}, 0x14, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e23, @loopback}, 0x10) r2 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) sigaltstack(&(0x7f0000000000)={0xffffffffffffffff, 0x0, 0xfffffffffffffefa}, &(0x7f0000000080)={&(0x7f0000000040)}) sigaltstack(&(0x7f0000000380)={0x0, 0x3}, 0x0) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r3, 0xc0e85667, &(0x7f00000005c0)={0xffffff07, 0x6, "22590a37c8e2d3f458ee5ed83af35c32d4869cadf26264b04173abf0ba771192", 0x0, 0x3922, 0xf, 0x2, 0x8, 0x5, 0x7, 0x6, [0x6, 0xc5f7, 0xb]}) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000500)={'gre0\x00', &(0x7f0000000440)={'syztnl2\x00', 0x0, 0x8, 0x7800, 0x11, 0x70c9, {{0x9, 0x4, 0x3, 0x7, 0x24, 0x68, 0x0, 0x7, 0x4, 0x0, @rand_addr=0x64010102, @remote, {[@rr={0x7, 0xf, 0xb1, [@loopback, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @noop]}}}}}) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x2, 0xd, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private1}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast1}}, @sadb_x_policy={0x8, 0x12, 0x1, 0x2, 0x0, 0x0, 0x0, {0x6, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@private1, @in6=@private1}}, @sadb_lifetime={0x4, 0x4}]}, 0xc0}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, 0x0, 0x0) syz_usb_control_io$sierra_net(r2, &(0x7f00000003c0)={0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="000b0200000002"], 0x0}, 0x0) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000200)={r5, r5, 0x2b, 0x0, @void}, 0x10) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x1b, &(0x7f0000000240)={@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x20) r9 = ioctl$TUNGETDEVNETNS(r1, 0x54e3, 0x0) dup(r9) ioctl$EVIOCGMASK(r7, 0x5b02, 0x0) syz_usb_control_io$rtl8150(r2, &(0x7f0000000900)={0xc, &(0x7f0000000680)={0x40, 0x21, 0xb6, {0xb6, 0x30, "b87a9f2c17e8d0359716e2bffe08da20c3088bbe54cb148170d37fced374bb3bc7e4ba2ec29275fe65fe3917f42b5211cdf2ed9135510c585fa207dfda47878c9a5ca77df4266eca6c252c76e19b55908f96d40a4aff4f1146e90f52d88b94e8ab79f4c507e9080f8b731c500390a46bb4b6e27ba924f94503eb57428607d9820062c8a665e7155e220b5f58f83d40a507dce292aa6ab5f230586838a86c126e08f264bd7728263d84ccf757477b0b09837864b5"}}, &(0x7f0000000800)={0x0, 0x3, 0xd2, @string={0xd2, 0x3, "c9d2b3c25078d8da363c151c2d465921a79d137c83216649ee655530680a1e5280ec711ff15acc2dafaa6d599cb395352b1d411469b312a5599360f18c79482b3d4b4b366da2a8787fe4221695f2abd204cc9cd0d825169a55b2ddccbf03931eda540269456459eba2907d3f738677bdda30229af26199c95feccd706fb374df7cc5aed5cda0ba7c837ce858fa74c75117023f36abdee7a249deae7fa045248edaba87be0920a42c451e4178e0372359a88778d8ed1f5a9de8ab607d65693e1be4135759821bf3c63a8c8b33b5a61898"}}}, &(0x7f0000000b40)={0x18, &(0x7f0000000940)={0x20, 0x13, 0xc4, "e8e75e067d8291aee78fb7809ec5ace37d1517f7c74e74d3d77621b1daac1d11f690f775e34470a283b6ed5fd24a28e9cc8911bbb870bcbe2510bc38050ad6601030e4040f901b4878f14c881247017072fe60b5f6875d3e46926c0af6f9c771f0ae6c760d769f7f088e121002523fda89941bdff52ae15130e510a76f46038251aa38c5bc28a4bcf81fe1d8d16bd8af293535242f853f75365389df74310f502929c8f87e9261c3f522fcc94f5efc683eb94dda3eddec8fa21f9c232484a7ba57895ceb"}, &(0x7f0000000a40)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000a80)={0x0, 0x8, 0x1, 0xfd}, &(0x7f0000000ac0)={0xc0, 0x5, 0x2, "992a"}, &(0x7f0000000b00)}) 2m29.822475922s ago: executing program 35 (id=2282): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x14, 0x15, 0x301, 0x70bd2c, 0x0, {0xc}}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="475f99ce6ab9f0164d18380000830604010200000000000000000a0000010800054000000fa60500010001000000060006405ae5736a000500000a000200000007ff02000000"], 0x38}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000) mknodat$null(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x40, 0x103) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000100)=@v2={0x2000000, [{0x81}, {0x8, 0xc}]}, 0x14, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e23, @loopback}, 0x10) r2 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) sigaltstack(&(0x7f0000000000)={0xffffffffffffffff, 0x0, 0xfffffffffffffefa}, &(0x7f0000000080)={&(0x7f0000000040)}) sigaltstack(&(0x7f0000000380)={0x0, 0x3}, 0x0) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r3, 0xc0e85667, &(0x7f00000005c0)={0xffffff07, 0x6, "22590a37c8e2d3f458ee5ed83af35c32d4869cadf26264b04173abf0ba771192", 0x0, 0x3922, 0xf, 0x2, 0x8, 0x5, 0x7, 0x6, [0x6, 0xc5f7, 0xb]}) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000500)={'gre0\x00', &(0x7f0000000440)={'syztnl2\x00', 0x0, 0x8, 0x7800, 0x11, 0x70c9, {{0x9, 0x4, 0x3, 0x7, 0x24, 0x68, 0x0, 0x7, 0x4, 0x0, @rand_addr=0x64010102, @remote, {[@rr={0x7, 0xf, 0xb1, [@loopback, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @noop]}}}}}) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x2, 0xd, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private1}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast1}}, @sadb_x_policy={0x8, 0x12, 0x1, 0x2, 0x0, 0x0, 0x0, {0x6, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@private1, @in6=@private1}}, @sadb_lifetime={0x4, 0x4}]}, 0xc0}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, 0x0, 0x0) syz_usb_control_io$sierra_net(r2, &(0x7f00000003c0)={0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="000b0200000002"], 0x0}, 0x0) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000200)={r5, r5, 0x2b, 0x0, @void}, 0x10) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x1b, &(0x7f0000000240)={@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x20) r9 = ioctl$TUNGETDEVNETNS(r1, 0x54e3, 0x0) dup(r9) ioctl$EVIOCGMASK(r7, 0x5b02, 0x0) syz_usb_control_io$rtl8150(r2, &(0x7f0000000900)={0xc, &(0x7f0000000680)={0x40, 0x21, 0xb6, {0xb6, 0x30, "b87a9f2c17e8d0359716e2bffe08da20c3088bbe54cb148170d37fced374bb3bc7e4ba2ec29275fe65fe3917f42b5211cdf2ed9135510c585fa207dfda47878c9a5ca77df4266eca6c252c76e19b55908f96d40a4aff4f1146e90f52d88b94e8ab79f4c507e9080f8b731c500390a46bb4b6e27ba924f94503eb57428607d9820062c8a665e7155e220b5f58f83d40a507dce292aa6ab5f230586838a86c126e08f264bd7728263d84ccf757477b0b09837864b5"}}, &(0x7f0000000800)={0x0, 0x3, 0xd2, @string={0xd2, 0x3, "c9d2b3c25078d8da363c151c2d465921a79d137c83216649ee655530680a1e5280ec711ff15acc2dafaa6d599cb395352b1d411469b312a5599360f18c79482b3d4b4b366da2a8787fe4221695f2abd204cc9cd0d825169a55b2ddccbf03931eda540269456459eba2907d3f738677bdda30229af26199c95feccd706fb374df7cc5aed5cda0ba7c837ce858fa74c75117023f36abdee7a249deae7fa045248edaba87be0920a42c451e4178e0372359a88778d8ed1f5a9de8ab607d65693e1be4135759821bf3c63a8c8b33b5a61898"}}}, &(0x7f0000000b40)={0x18, &(0x7f0000000940)={0x20, 0x13, 0xc4, "e8e75e067d8291aee78fb7809ec5ace37d1517f7c74e74d3d77621b1daac1d11f690f775e34470a283b6ed5fd24a28e9cc8911bbb870bcbe2510bc38050ad6601030e4040f901b4878f14c881247017072fe60b5f6875d3e46926c0af6f9c771f0ae6c760d769f7f088e121002523fda89941bdff52ae15130e510a76f46038251aa38c5bc28a4bcf81fe1d8d16bd8af293535242f853f75365389df74310f502929c8f87e9261c3f522fcc94f5efc683eb94dda3eddec8fa21f9c232484a7ba57895ceb"}, &(0x7f0000000a40)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000a80)={0x0, 0x8, 0x1, 0xfd}, &(0x7f0000000ac0)={0xc0, 0x5, 0x2, "992a"}, &(0x7f0000000b00)}) 1m33.025306889s ago: executing program 8 (id=2540): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000010000100"], 0xe0}, 0x1, 0x0, 0x0, 0x800}, 0x810) r0 = socket$nl_generic(0x10, 0x3, 0x10) close(r0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000500)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x134, r1, 0x800, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_REG_RULES={0x114, 0x22, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x2}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xfffffff7}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x3}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x853}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x8}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x35}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x7ff}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x9}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x1000}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x3}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x3}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xffffffff}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x5}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xf0}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x1}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8037}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x1}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x40}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7}]}, {0x4}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x3}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x5982}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x5}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x4}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x91e}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x7}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xfffffffa}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x6}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x7}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x7}]}]}]}, 0x134}, 0x1, 0x0, 0x0, 0x4048040}, 0x30) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000340)=[{0x20, 0xc, 0x77, 0xfffff010}, {0x28, 0x0, 0x0, 0x68ac}, {0x6, 0x0, 0x0, 0x2}]}, 0x8) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[], 0x44}}, 0x28000) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x6a, 0x3, 0x0, &(0x7f00000000c0)=0xfffffffffffffd27) r3 = syz_io_uring_setup(0xefe, &(0x7f0000000080)={0x0, 0x4, 0x10000, 0xfffffff9, 0x2376}, &(0x7f0000000180), &(0x7f0000000140), &(0x7f0000000040)) io_uring_enter(r3, 0x742f, 0x77ae, 0x1, 0x0, 0x0) 1m32.679137728s ago: executing program 8 (id=2542): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) bind$can_j1939(r0, &(0x7f0000000140)={0x1d, r1, 0x102030405060708, {}, 0x20}, 0x18) connect$can_j1939(r0, &(0x7f0000000180)={0x1d, r1, 0x0, {0x0, 0xee}, 0xff}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)="0807060504030201", 0x8}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xa9525000) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x0, 0x0}) close_range(r2, 0xffffffffffffffff, 0x0) 1m31.785118467s ago: executing program 8 (id=2543): r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)=""/133, 0x85}, {&(0x7f00000002c0)=""/72, 0x48}, {&(0x7f0000000040)=""/51, 0x33}, {&(0x7f0000000340)=""/233, 0xe9}], 0x4, 0x0, 0x96) write(0xffffffffffffffff, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000020c0)='/proc/cpuinfo\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000000080)={0x2020}, 0x2020) pread64(r1, &(0x7f00000042c0)=""/191, 0xbf, 0x9a) read$FUSE(r1, &(0x7f0000002280)={0x2020}, 0x2020) ioctl$HIDIOCGREPORT(r1, 0x400c4807, &(0x7f0000000040)={0x2}) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x1, 0x0, 0x4}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f000009df00)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x800, 0x2, 0x0, 0x0, 0x10, 0xfffd}, 0x20) link(0x0, 0x0) r4 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120100009f187620ef170372362e010203010902240001000010000904bc00029e8833000905020200020200000905820220"], 0x0) syz_usb_control_io$rtl8150(r4, 0x0, 0x0) syz_usb_control_io$rtl8150(r4, 0x0, &(0x7f00000029c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="200302"], 0x0, 0x0, 0x0, 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xd4ad1185e214d3bd}}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}}, @NFT_MSG_DELCHAIN={0x38, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}]}, @NFT_MSG_DELSET={0x98, 0xb, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_SET_USERDATA={0x74, 0xd, 0x1, 0x0, "8d26453b8633c48300cbfa014121c806fc9f50c70fbca17d563daea197aefa4ada112c0d44ef132bb0d785fdb4f62555c35ee31a8d5c95ec57fcd90df433bc0c800d6df81c96d4ac4d231e18995ffdeb37376473fa66d6b1eb1b7ff26c043a63657d7a365d841dc72ccac34826bb3c2e"}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x20}, @NFTA_SET_GC_INTERVAL={0x8}]}], {0x14}}, 0x134}}, 0xc850) syz_usb_control_io$uac1(r4, 0x0, &(0x7f0000002640)={0x44, &(0x7f0000000500)={0x20, 0x10, 0x2, '!k'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r4, 0x0, &(0x7f0000000a80)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)={0x40, 0xb, 0x2, "31fb"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r4, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000580)={0x0, 0x16, 0x2, "f610"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r4, 0x0, &(0x7f0000000380)={0x18, &(0x7f00000000c0)={0x40, 0x14, 0x2, "86e2"}, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000540)=@deltclass={0x24, 0x29, 0x4, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x8, 0x7}, {0xffff, 0xa1a7a237334a7c95}, {0x2, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x8082}, 0x800) set_mempolicy(0x5, &(0x7f0000000000)=0x4000000ff9, 0xf) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000500)=ANY=[@ANYBLOB="7000000010000305fcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="11110200318800004800128008000100677470003c00028005000500000000000800040001000000080003"], 0x70}, 0x1, 0x0, 0x0, 0x48890}, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) 1m28.638305857s ago: executing program 8 (id=2554): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) bind$can_j1939(r0, &(0x7f0000000140)={0x1d, r1, 0x102030405060708, {}, 0x20}, 0x18) connect$can_j1939(r0, &(0x7f0000000180)={0x1d, r1, 0x0, {0x0, 0xee}, 0xff}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)="0807060504030201", 0x8}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xa9525000) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x0, 0x0}) close_range(r2, 0xffffffffffffffff, 0x0) 1m27.554106192s ago: executing program 8 (id=2564): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) r1 = socket$kcm(0x21, 0x2, 0xa) syz_usb_connect$hid(0x2, 0x36, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e20, 0x9c000000, @ipv4={'\x00', '\xff\xff', @remote}, 0x1df}}, 0x80, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="100000001001000001"], 0x10}, 0x40) readv(r1, &(0x7f0000004500)=[{&(0x7f0000000180)=""/45, 0x2d}], 0x1) (fail_nth: 2) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) 1m26.87819094s ago: executing program 8 (id=2567): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) syz_usb_connect(0x2, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="120110019bde521023398a71d7d80102030109022400010509401909047b07022d51d5980905eb022000020205090504"], 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x40, r2, 0x101, 0x70bd25, 0x25dfdbfd, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @remote}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_IFINDEX={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040044}, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000740), 0x440001, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000300)={'sit0\x00', 0x0, 0x8000, 0x10, 0xe, 0x800, {{0x2a, 0x4, 0x1, 0x25, 0xa8, 0x68, 0x0, 0x5, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, {[@generic={0x0, 0xc, "6fdd2e0e93074b4f4d72"}, @lsrr={0x83, 0x23, 0xdd, [@local, @rand_addr=0x64010100, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x38}, @local, @local, @private=0xa010101, @empty]}, @generic={0x7, 0x7, "a5f775fd1d"}, @cipso={0x86, 0x5b, 0x1, [{0x0, 0x5, "636eff"}, {0x84bfc74150f56d77, 0xe, "4d34cbf1344e38df5f77101d"}, {0x6, 0xe, "521853f80d01241ffd272590"}, {0x7, 0xf, "fa174f901fecc5bc247d93e3d3"}, {0x2, 0xa, "53bd8d7c0a44e758"}, {0x1, 0x5, "42e032"}, {0x7, 0xb, "f7cbbbc8add8b81a3d"}, {0x5, 0x7, "1794124b26"}, {0x0, 0x4, "16c1"}]}]}}}}}) sendmsg$can_bcm(r4, &(0x7f00000008c0)={&(0x7f00000007c0)={0x1d, r5}, 0x10, &(0x7f0000000880)={&(0x7f0000000800)={0x3, 0x123, 0x9164, {}, {0x0, 0x2710}, {0x3, 0x0, 0x0, 0x1}, 0x1, @canfd={{0x4}, 0x18, 0x1, 0x0, 0x0, "6bf6aa22c58bc33a7d54c36f221bd74a9307a0f5249b6f8d807388529cc000f6f2d008adf7a43aa7595480b468df86d8daf75aabe003ea348bc3a64770e79428"}}, 0x80}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) ioctl$SNDCTL_SEQ_GETOUTCOUNT(r3, 0x80045104, &(0x7f0000000780)) r6 = syz_open_procfs(0x0, &(0x7f0000000b00)='net/rpc\x00') bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="03000000040000000400000027e2967c00"], 0x48) r7 = openat(r6, 0x0, 0x2, 0x0) write(r7, &(0x7f0000000d00)='nf', 0x2) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="180000002600090122bd7008f9ff0200000004e8f6d4", @ANYRESDEC=r1, @ANYRESOCT=0x0], 0x18}, 0x1, 0x0, 0x0, 0x1000c957}, 0x0) r9 = epoll_create1(0x0) r10 = syz_io_uring_setup(0x1fa, &(0x7f0000000540)={0x0, 0x41ae, 0x2, 0x2, 0x23d}, &(0x7f00000005c0), &(0x7f0000000600), &(0x7f0000000640)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r11, 0x89f6, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000100)=@ethtool_regs={0x4, 0x0, 0x34, "2a161d2d71db37f20a8f1597f02515fcead4"}}) io_uring_register$IORING_REGISTER_SEND_MSG_RING(r10, 0x1f, &(0x7f0000000700)={0x28, 0x6c, 0x0, 0xffffffffffffffff, &(0x7f0000000680)="815f30a900f9018b98b297327790d685732d716659ed250d1ada572a95d7144cd72dec7a49a33ff700d183f4b434e969a30f95a65ab62069766cfcdace2b5e2b862bc1452849bbe5a633ed5c7dc41ba9357a7914adf0d7a6187e4ced733e2746224976284c46e6", 0x0, 0x8, 0x0, 0x1, {0x0, 0x0, r0, 0x4}}, 0x1) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r0, &(0x7f0000000040)={0x120002013}) r12 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) ioctl$XFS_IOC_FSBULKSTAT_SINGLE(r12, 0xc0205866, &(0x7f00000004c0)={&(0x7f0000000080)=0x8e, 0x5, &(0x7f00000000c0), &(0x7f0000000140)}) fsopen(&(0x7f0000000500)='jffs2\x00', 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r13 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl(r13, 0x4048aecb, &(0x7f0000000100)="070000000000000001000000ffffffff0010a5d4") ioctl$VIDIOC_S_SELECTION(r12, 0xc040565f, &(0x7f0000000040)={0x9, 0x100, 0x0, {0x204, 0xbde, 0x400, 0x10000}}) ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0x8008551d, &(0x7f00000000c0)={0xb348, 0x12, [{0x3, 0x1}, {0x9, 0x1}, {0x9, 0x1}, {0x9}, {0xf, 0x1}, {0xe}, {0x9}, {0xe, 0x1}, {0x7, 0x1}, {0xa}, {0xb, 0x1}, {0x2}, {0xc, 0x1}, {0x8, 0x1}, {0xf}, {0x1, 0x1}, {0x1, 0x1}, {}]}) 1m11.678910151s ago: executing program 36 (id=2567): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) syz_usb_connect(0x2, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="120110019bde521023398a71d7d80102030109022400010509401909047b07022d51d5980905eb022000020205090504"], 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x40, r2, 0x101, 0x70bd25, 0x25dfdbfd, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @remote}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_IFINDEX={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040044}, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000740), 0x440001, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000300)={'sit0\x00', 0x0, 0x8000, 0x10, 0xe, 0x800, {{0x2a, 0x4, 0x1, 0x25, 0xa8, 0x68, 0x0, 0x5, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, {[@generic={0x0, 0xc, "6fdd2e0e93074b4f4d72"}, @lsrr={0x83, 0x23, 0xdd, [@local, @rand_addr=0x64010100, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x38}, @local, @local, @private=0xa010101, @empty]}, @generic={0x7, 0x7, "a5f775fd1d"}, @cipso={0x86, 0x5b, 0x1, [{0x0, 0x5, "636eff"}, {0x84bfc74150f56d77, 0xe, "4d34cbf1344e38df5f77101d"}, {0x6, 0xe, "521853f80d01241ffd272590"}, {0x7, 0xf, "fa174f901fecc5bc247d93e3d3"}, {0x2, 0xa, "53bd8d7c0a44e758"}, {0x1, 0x5, "42e032"}, {0x7, 0xb, "f7cbbbc8add8b81a3d"}, {0x5, 0x7, "1794124b26"}, {0x0, 0x4, "16c1"}]}]}}}}}) sendmsg$can_bcm(r4, &(0x7f00000008c0)={&(0x7f00000007c0)={0x1d, r5}, 0x10, &(0x7f0000000880)={&(0x7f0000000800)={0x3, 0x123, 0x9164, {}, {0x0, 0x2710}, {0x3, 0x0, 0x0, 0x1}, 0x1, @canfd={{0x4}, 0x18, 0x1, 0x0, 0x0, "6bf6aa22c58bc33a7d54c36f221bd74a9307a0f5249b6f8d807388529cc000f6f2d008adf7a43aa7595480b468df86d8daf75aabe003ea348bc3a64770e79428"}}, 0x80}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) ioctl$SNDCTL_SEQ_GETOUTCOUNT(r3, 0x80045104, &(0x7f0000000780)) r6 = syz_open_procfs(0x0, &(0x7f0000000b00)='net/rpc\x00') bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="03000000040000000400000027e2967c00"], 0x48) r7 = openat(r6, 0x0, 0x2, 0x0) write(r7, &(0x7f0000000d00)='nf', 0x2) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="180000002600090122bd7008f9ff0200000004e8f6d4", @ANYRESDEC=r1, @ANYRESOCT=0x0], 0x18}, 0x1, 0x0, 0x0, 0x1000c957}, 0x0) r9 = epoll_create1(0x0) r10 = syz_io_uring_setup(0x1fa, &(0x7f0000000540)={0x0, 0x41ae, 0x2, 0x2, 0x23d}, &(0x7f00000005c0), &(0x7f0000000600), &(0x7f0000000640)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r11, 0x89f6, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000100)=@ethtool_regs={0x4, 0x0, 0x34, "2a161d2d71db37f20a8f1597f02515fcead4"}}) io_uring_register$IORING_REGISTER_SEND_MSG_RING(r10, 0x1f, &(0x7f0000000700)={0x28, 0x6c, 0x0, 0xffffffffffffffff, &(0x7f0000000680)="815f30a900f9018b98b297327790d685732d716659ed250d1ada572a95d7144cd72dec7a49a33ff700d183f4b434e969a30f95a65ab62069766cfcdace2b5e2b862bc1452849bbe5a633ed5c7dc41ba9357a7914adf0d7a6187e4ced733e2746224976284c46e6", 0x0, 0x8, 0x0, 0x1, {0x0, 0x0, r0, 0x4}}, 0x1) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r0, &(0x7f0000000040)={0x120002013}) r12 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) ioctl$XFS_IOC_FSBULKSTAT_SINGLE(r12, 0xc0205866, &(0x7f00000004c0)={&(0x7f0000000080)=0x8e, 0x5, &(0x7f00000000c0), &(0x7f0000000140)}) fsopen(&(0x7f0000000500)='jffs2\x00', 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r13 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl(r13, 0x4048aecb, &(0x7f0000000100)="070000000000000001000000ffffffff0010a5d4") ioctl$VIDIOC_S_SELECTION(r12, 0xc040565f, &(0x7f0000000040)={0x9, 0x100, 0x0, {0x204, 0xbde, 0x400, 0x10000}}) ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0x8008551d, &(0x7f00000000c0)={0xb348, 0x12, [{0x3, 0x1}, {0x9, 0x1}, {0x9, 0x1}, {0x9}, {0xf, 0x1}, {0xe}, {0x9}, {0xe, 0x1}, {0x7, 0x1}, {0xa}, {0xb, 0x1}, {0x2}, {0xc, 0x1}, {0x8, 0x1}, {0xf}, {0x1, 0x1}, {0x1, 0x1}, {}]}) 10.682920068s ago: executing program 9 (id=2947): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010829bd7000000000000b00000008000300", @ANYRES32=r2, @ANYBLOB="60005080110001004abee339084eeef16f162471f4000700080003000aac0f00050002"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 10.643282602s ago: executing program 9 (id=2948): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) close(0x3) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, 'macvlan1\x00'}}, 0x1e) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000440)='\x00W', 0x2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 10.54808862s ago: executing program 9 (id=2949): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000800)=@updpolicy={0xb8, 0x14, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x300, 0x0, 0xa}}}, 0xb8}}, 0x0) 10.42684678s ago: executing program 9 (id=2950): r0 = getgid() syz_mount_image$fuse(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x44000, &(0x7f0000000000)={{}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, 0xee00}, 0x2c, {'group_id', 0x3d, r0}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1600}}]}}, 0x0, 0x0, 0x0) 10.404753079s ago: executing program 9 (id=2951): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000263000008ef1647608ed0ce3cfd029b2a0e396b0000002009040000050300029e0921761f52cb598242140581034000fd0fbe6a66fa4967f1af2e8fcab4d1d40cff246da537"], 0x0) (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xd) (async) r2 = dup(r1) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x200000, 0x0, 0x0, 0x0, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x9801) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async) chroot(&(0x7f0000000440)='./file0\x00') (async) pivot_root(&(0x7f0000000200)='./file0/../file0/../file0/../file0\x00', 0x0) (async) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) (async) r4 = landlock_create_ruleset(&(0x7f00000001c0)={0x2, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r4, 0x9) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, &(0x7f0000000000)={0x18, &(0x7f0000000100)={0x0, 0x21, 0x84, {0x84, 0x11, "9062a3812d030000000d54f37cc5b1d43ee44fbf6fc93f0808251fe45df76afe450e90903248e35be181b1cc7cbead223258affe71a52c63000000000000ee8791ccbcbfacaa4c40514713e3b61129752f29b1b1cc83188469d618dfb88ff32268bad8cce1f3ccf7a61223d3d20ad991f7886cb779868c0aa6cc6c8a5a11bd5d8bb5"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) r5 = syz_usb_connect$sierra_net(0x0, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, "", {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x9, 0x2, 0x20, 0x6, 0xf, 0x1}, {0x9, 0x5, 0xa, 0x2, 0x200, 0xc6, 0x1, 0xb}, {0x9, 0x5, 0xf, 0x3, 0x8, 0x5, 0xe, 0x5}}}}}}]}}, 0x0) syz_usb_control_io(r5, 0x0, 0x0) (async) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) r6 = syz_io_uring_setup(0x1a7, &(0x7f00000000c0)={0x0, 0x62a8, 0x1, 0x2, 0x50}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r7, r8, r9, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd_index=0x3, 0x9, 0x0, 0x0, 0x14, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r6, 0x1, 0x1, 0x1, 0x0, 0xf5) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) 9.752803743s ago: executing program 9 (id=2955): syz_usb_connect(0x0, 0x7a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004082057d0000000000000109026800030100c0000904000000010100000904000101010200000b2402010203180144ac00070501010002010904010000010100000904010101010200000b2402010203180144ac000705820100020109040200020103000007050302"], 0x0) (async) r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) preadv(r0, &(0x7f00000014c0)=[{&(0x7f0000000100)=""/179, 0xb3}], 0x1, 0x7, 0x8) (async) syz_usb_connect$uac2(0x0, 0xd7, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x97, 0x41e, 0x3000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc5, 0x3, 0x1, 0x8, 0xa0, 0xb3, {0x8, 0xb, 0x0, 0x0, 0x1, 0x2, 0x20, 0xf7}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0xd7e, 0x6, 0x14, 0x60}, [@feature_unit={0xb, 0x24, 0x6, 0x1, 0x6, [0x1, 0x6, 0xff]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x4, 0x2, 0x2, 0x9e, "6e9d9b64da0ac8a3"}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x7, 0x3, 0x9, 0x6, "77c968c6"}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x1, 0x6}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x8, 0x5a, 0x6, {0x8, 0x25, 0x1, 0x81, 0xc, 0x0, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x8, 0x7, 0x1, 0x1}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x0, 0x0, 0x2, 0x8}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0xe5, 0x0, 0xa8, 0xe, 0x3}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x4, 0x8}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x0, 0x4, 0x1, 0x8, "21a1", "4713"}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x8, 0x5, 0xdd, {0x8, 0x25, 0x1, 0x0, 0xf, 0x1, 0x7ff}}}}}}}}]}}, &(0x7f00000003c0)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x300, 0x4, 0x8, 0x2, 0x8, 0xef}, 0x2e, &(0x7f00000001c0)={0x5, 0xf, 0x2e, 0x1, [@generic={0x29, 0x10, 0x1, "5e66c0934502c0bdcad57e264db0787f7a39ceeffec2f7ee0147ce6ea15e9b2f769cd07eeb39"}]}, 0x7, [{0x12, &(0x7f0000000200)=@string={0x12, 0x3, "866e972706d75559154ee15ca0f8a4e5"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x1004}}, {0xe, &(0x7f0000000280)=@string={0xe, 0x3, "8f97b55d94cdca052d31680f"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x240a}}, {0xf, &(0x7f0000000300)=@string={0xf, 0x3, "758b338c3bd2ae2e58ec1532c9"}}, {0x26, &(0x7f0000000340)=@string={0x26, 0x3, "0181db69f20e59a62a31da38e693af8d47986fc1b26e6d79d6b59c1514547d5e131039bc"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x446}}]}) 8.578291078s ago: executing program 6 (id=2963): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x10d000) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, 0x0}, 0x94) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x4000010, 0xffffffffffffffff, 0x2dfda000) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/nfsfs\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000700)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x47, 0x5, 0x8, 0x5, 0x0, 0x9, 0x0, 0x57c73f3a, 0xfa11, 0xffffffff}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) r6 = inotify_init() inotify_add_watch(r6, &(0x7f0000000000)='.\x00', 0x1400037e) ftruncate(r5, 0x6000000) copy_file_range(r4, 0x0, r1, &(0x7f0000000140)=0x100, 0xea67, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRESOCT=r1], 0x7c}, 0x1, 0x0, 0x0, 0x1}, 0x20000480) r7 = mq_open(0x0, 0x800, 0x5f, &(0x7f0000000280)={0x2433, 0x90, 0x3, 0x6}) fcntl$getownex(r0, 0x10, 0x0) mq_notify(r7, &(0x7f0000000380)={0x0, 0x12}) r8 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r8, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x4}, 0x20) connect$l2tp6(r8, &(0x7f0000000f40)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x20) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) sendmmsg$inet6(r8, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0}}], 0x17fd147c801ae9af, 0xff00) syz_clone(0x6408f400, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000040)={0x10001, 0x3, 0x6000, 0x1000, &(0x7f0000152000/0x1000)=nil}) 7.403456652s ago: executing program 6 (id=2971): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) close(0x3) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, 'macvlan1\x00'}}, 0x1e) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000440)='\x00', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 7.347401946s ago: executing program 6 (id=2972): r0 = syz_usb_connect(0x3, 0x3f, &(0x7f0000000380)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d0001000000000904000003030000000905be3b"], 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x40000) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000140)={0x10f1, 0x0, [{0xadb, 0xed, 0x40000000000000}]}) socket$nl_route(0x10, 0x3, 0x0) socket(0x26, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r2 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x88800, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e23, 0x6, @mcast2, 0x3}, 0x1c) connect$pppl2tp(r3, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x0, 0x0, 0x0, 0x0, {0xa, 0x4e22, 0xffff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, 0x32) r5 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2}, 0x94) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x181900, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000001c0)={[0xfffffffffffffffb, 0x6, 0xfffffffffffffffd, 0x7, 0x10003, 0x0, 0x400200cc4, 0xb8d, 0x7d, 0x2000, 0x4, 0x0, 0x2, 0x1, 0xb9, 0xff], 0xeeee8000, 0x2011c0}) r7 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write(r7, &(0x7f0000000080)="7472616e73706f72743d6c6f6fe56b6e716e3d6e716e2e323031342d30382e6f72672e6e766d657870726573732c646973636f76657279", 0x37) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000000c0)={0x10, &(0x7f0000000100)=ANY=[], 0x0, 0x0}) syz_open_dev$vbi(&(0x7f0000000180), 0x0, 0x2) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_clone(0x220111, 0x0, 0x0, 0x0, 0x0, 0x0) 6.79051006s ago: executing program 1 (id=2973): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000800)=@updpolicy={0xb8, 0x14, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x300}}}, 0xb8}}, 0x0) 6.719339708s ago: executing program 1 (id=2974): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$F2FS_IOC_SEC_TRIM_FILE(r0, 0x4018f514, &(0x7f0000000000)={0x4, 0x1, 0x1}) socket$nl_route(0x10, 0x3, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0xa042, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_init(0x200, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x2, 0x3, 0x6) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r3, @ANYBLOB='\a', @ANYRESHEX], 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x28, 0x26, 0x301, 0x70bd29, 0x25dfdbfd, {0x20}, [@nested={0x14, 0x131, 0x0, 0x1, [@nested={0x10, 0x15f, 0x0, 0x1, [@typed={0xb, 0xd7, 0x0, 0x0, @binary="bef7bf1c6e645f"}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4020}, 0x80) 5.242658154s ago: executing program 1 (id=2979): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) syz_usb_connect$uac3(0x3, 0x80, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002000000408205820540000102030109026e000301c0c310080b000201223061090400000001013000"], 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) splice(r1, 0x0, r3, 0x0, 0x38f9, 0x0) fcntl$setstatus(r2, 0x4, 0x42c00) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = fsopen(&(0x7f0000000100)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000200)='secret\x00', &(0x7f0000000480)='AQB1234+6789l+\x83\'/-\x82\xe2\x9a\x9c\x89>0123456789\x02\x0023456\a\x00\x00\x00\x00\x00\x00\x00567=\x00K\x1e\x13x\xbe\x0e\x9b,\xa7\xcc\xfa\x00?#E#\xdb\x7f1\')\xfd}\xaa\xcd1\xe7\xa3c\xad\x99\x97q\x9f\x82\x99\xbd\xfdt\xa2~\x18\v\xcc\xd4\x81\x9a\xe8\xe5\a\xc4\x11\xc5\xfc\xefw\xe4\xdd\x1f\r\xb3z\xd5\xbe\xf0\xaac\xc2%\x90\xd4\xad\xe7\x1f\xd0\x11\x82\xa4_m\xde]+E\xb3J\xd0\x1d\xbaAS\xa0\x80m\xe8\xf1\x99\x86m\x02\xa7\xd9.FcS\xcdI\xc5\xd7\x88\x96\b\xf6\b@\xc6\xb68k8E\xf9\x1b\xf0\x86(\x83\xd8\xea\xa7\xb2\xa7k\x8cN\x02\xb5\x97\x14\xc7~\x96\xf5\xd1\xc1TO\xf2\xf0@~*t\xe6\xa2_:\xd8\xd4\xa1\x04\xa6o\x9b\xe2\x98\x94\x12;\xd79sg6>=Bz/\x06\xbc\xcfI\x97.\x93\x187\xaf\x13X\fL\xcd\x83t\xd2 \xf35\xf3\x114\n\xa0\xcd\xe6F<\a\xe3\xf1L\'&\xee\x95c\xce\xdc\x10\xe4>\xfd\x91\x93%\xe2\x84\"\xd2p\x84\xcd\x16\xa1+W\xd8', 0x0) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) recvmmsg(r4, &(0x7f0000002e80)=[{{0x0, 0x0, 0x0}, 0x3fffff}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000001bc0)=""/4097, 0x1001}, {&(0x7f0000000dc0)=""/201, 0xc9}, {&(0x7f0000003900)=""/151, 0x97}, {&(0x7f0000003ac0)=""/4096, 0x1000}, {&(0x7f0000004ac0)=""/41, 0x29}], 0x5}, 0x19}], 0x3, 0x0, 0x0) fcntl$setstatus(r2, 0x4, 0x2400) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r6, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000040)=ANY=[@ANYBLOB="1400000001080104000000fe9f4964ab1aaa1997e7db00000100000a0cbc5de1aad2e6000004"], 0x14}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) write(r0, &(0x7f0000000040), 0xffffff4a) 4.951609653s ago: executing program 7 (id=2983): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000002000010000000000000000000a00204000000007000000001400110076657468305f746f5f6272696467650008000a00fbffffff140002"], 0x4c}, 0x1, 0x0, 0x0, 0x24040804}, 0x8014) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, 0x0, 0x300, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) r2 = socket$inet6(0xa, 0x80003, 0xff) r3 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r3, 0x29, 0x16, &(0x7f0000fcb000), 0x4) setsockopt$inet6_int(r2, 0x29, 0x31, &(0x7f0000fcb000)=0x4, 0x4) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r7) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_KEY(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r8, 0x805, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48893}, 0x40) sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000800)={&(0x7f00000005c0)={0x1e0, r6, 0x400, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x0, 0x79}}}}, [@NL80211_ATTR_IE={0xa, 0x2a, [@chsw_timing={0x68, 0x4, {0x1}}]}, @NL80211_ATTR_IE={0x14e, 0x2a, [@ibss={0x6, 0x2, 0x1}, @preq={0x82, 0x41, {{0x0, 0x1, 0x1, 0x0, 0x1}, 0x9, 0x3, 0x0, @device_a, 0x4, @value=@broadcast, 0x1, 0x2, 0x3, [{{0x0, 0x0, 0x1}, @device_b, 0xff}, {{0x1}, @device_b, 0xc}, {{0x1, 0x0, 0x1}, @broadcast, 0x7fff}]}}, @gcr_ga={0xbd, 0x6, @broadcast}, @perr={0x84, 0xf6, {0x6, 0x10, [{{}, @device_a, 0x400, @void, 0x26}, {{}, @device_b, 0x50, @void, 0x3b}, {{}, @device_a, 0xffff57f2, @void, 0x40}, {{}, @broadcast, 0x100, @void, 0x13}, {{0x0, 0x1}, @broadcast, 0x1000, @value, 0x15}, {{0x0, 0x1}, @device_b, 0x1, @value=@broadcast, 0x2e}, {{}, @device_a, 0xfffffb51, @void, 0x3e}, {{0x0, 0x1}, @broadcast, 0x24f, @value=@device_b, 0xd}, {{}, @device_b, 0x4, @void, 0x3}, {{}, @device_a, 0x6, @void, 0x4}, {{0x0, 0x1}, @device_a, 0x7, @value=@broadcast, 0x26}, {{}, @device_b, 0x5, @void, 0x41}, {{}, @broadcast, 0x1, @void, 0x1e}, {{}, @device_a, 0x83, @void, 0x38}, {{0x0, 0x1}, @broadcast, 0x26ef, @value, 0x2c}, {{0x0, 0x1}, @device_a, 0x0, @value, 0x40}]}}, @erp={0x2a, 0x1, {0x1}}]}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x4e}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x5d}, @NL80211_ATTR_IE={0x42, 0x2a, [@cf={0x4, 0x6, {0x8, 0x3, 0x7, 0x4}}, @link_id={0x65, 0x12, {@random="ede53db0012b", @broadcast, @broadcast}}, @erp={0x2a, 0x1, {0x1, 0x1, 0x1}}, @sec_chan_ofs={0x3e, 0x1, 0x2}, @cf={0x4, 0x6, {0x90, 0x4e, 0x200, 0x401}}, @link_id={0x65, 0x12, {@from_mac=@broadcast, @device_b}}]}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x32}]}, 0x1e0}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x259fdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x6}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x40, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_JITTER64={0xc, 0xb, 0xbbf1}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x3ff}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0x4, 0xa}}]}}}]}, 0x70}, 0x1, 0x0, 0x0, 0x40088c1}, 0x10) 4.609763627s ago: executing program 7 (id=2986): socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000700)=ANY=[@ANYBLOB="280000005e00010000000000000000000c00fe0001000000080000800c00018008000400", @ANYRES32=r0], 0x28}], 0x1, 0x0, 0x0, 0x40004}, 0x0) copy_file_range(r0, 0x0, r0, 0x0, 0x800, 0x0) 4.414803613s ago: executing program 7 (id=2988): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6) pwrite64(r0, &(0x7f0000000100)="0000010042", 0x5, 0x1be) pwrite64(r0, &(0x7f0000000100)="55aa", 0x2, 0x1fe) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x2) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) 4.239218558s ago: executing program 6 (id=2989): syz_usb_connect(0x2, 0x1e2, &(0x7f00000002c0)=ANY=[@ANYRESOCT=0x0], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0}) 4.219660492s ago: executing program 7 (id=2990): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000240)=0x3) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000100)={{0x1, 0x1, 0xfffffffd, r0}, './file0\x00'}) (async) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x7f) (async) keyctl$get_persistent(0x16, 0xffffffffffffffff, 0xfffffffffffffffb) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) read$dsp(r0, &(0x7f0000000280)=""/79, 0x4f) 3.262601703s ago: executing program 7 (id=2991): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000800)=ANY=[@ANYBLOB="aaaaaaaaaabb86dd60ffffffffffffffff800000000000000000000000000000ff0200000000000000000000000000018b009078000f0009000000000000401b000000000000"], 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = syz_usb_connect(0x3, 0x40, &(0x7f0000001300)=ANY=[@ANYBLOB="12010002000000407205feca00010000000109022e0001010080fa0904000004ff000000070501020002000705810200020007050204e5"], 0x0) syz_usb_ep_read(r2, 0x1, 0x0, 0x0) syz_usb_ep_write(r2, 0x81, 0x40, &(0x7f0000000100)="900100"/64) mkdirat(0xffffffffffffff9c, 0x0, 0x10e) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000125bd7000fcdbdf257000000008004300", @ANYRES32=0x0, @ANYBLOB="0c00990001000000480000000a000600ffffffffffff00000a00060008021100000100000a00060008021100000100000a000600ffffffffffff00000a000600ffffffffffff0000"], 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan1\x00'}) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000a00), 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r3 = inotify_init() inotify_add_watch(r3, &(0x7f0000000300)='./file1\x00', 0x0) r4 = socket$unix(0x1, 0x2, 0x0) bind$unix(r4, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) fsopen(&(0x7f0000000240)='exfat\x00', 0x0) r5 = socket(0x1d, 0x3, 0xffffffff) connect$inet(r5, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x800000000, 0x6, 0xfa11, 0xffffffff}, 0x0) socket$kcm(0x10, 0x400000002, 0x0) r8 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x101800) ioctl$SNDRV_TIMER_IOCTL_TREAD64(r8, 0x400454a4, &(0x7f0000000040)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r8, 0x40345410, 0x0) 2.102893097s ago: executing program 1 (id=2993): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) r1 = socket$kcm(0x21, 0x2, 0xa) r2 = syz_ublk_setup_io_uring(0x7fbd, &(0x7f00000001c0)={0x0, 0x22d0, 0x400, 0x2, 0x37b}, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) getpgrp(0x0) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r2, 0x12, 0x0, 0x0) syz_usb_connect$hid(0x2, 0x36, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000100)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYRES64=r0], 0x10}, 0x4054) timer_getoverrun(r0) readv(r1, &(0x7f0000004500)=[{&(0x7f0000000180)=""/45, 0x2d}], 0x1) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r3, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0xfffe, 0x5, r3}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r4 = fsopen(&(0x7f0000000140)='ext3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000000)='test_dummy_encryption', &(0x7f0000000080)='v1\xeaul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) 1.357884895s ago: executing program 5 (id=2996): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) close(0x3) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = syz_open_dev$sndpcmc(&(0x7f0000000a00), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r2, 0xc25c4110, &(0x7f0000000100)={0x0, [[0x1, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1], [0x4e, 0x2, 0x0, 0xfffffffe, 0x0, 0x20000000, 0x0, 0xfffffffd], [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xff7ffffd]], '\x00', [{0x0, 0xfffffffe, 0x0, 0x1, 0x1}, {0x1, 0xffffffff, 0x0, 0x1}, {0x0, 0xb}, {0x0, 0x1}, {0x0, 0xfffffffd}, {0x1, 0x2000}, {0x0, 0x1000}, {0x0, 0xfffffffc}, {0x0, 0x5}, {0x0, 0x3}, {0x0, 0xcb}, {0x2000000}], '\x00', 0x6b4, 0x0, 0x0, 0x1000000}) connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, 'macvlan1\x00'}}, 0x1e) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000440)='\x00W', 0x2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 1.118442974s ago: executing program 5 (id=2997): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)={0x20, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_WANT_1X_4WAY_HS={0x4}]}, 0x20}}, 0x0) 1.019812007s ago: executing program 6 (id=2998): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000780)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2080}, 0xc, &(0x7f0000000740)={&(0x7f00000005c0)={0x14c, r1, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x200}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xe00000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xb5a2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xd6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8}]}, @TIPC_NLA_MON={0x4}, @TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffffffe}]}, @TIPC_NLA_MEDIA={0x5c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xee}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4d8a}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x313e}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7fffffff}]}]}, 0x14c}, 0x1, 0x0, 0x0, 0x200000c1}, 0x20048040) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) r2 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r2, &(0x7f00000002c0)={0x1, 0x5}, 0x2) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='timers\x00') ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x10, 0x41, 0xb2}) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000180)={0x1, 0x0, [{0x40000072, 0x0, 0x80000074}]}) write$USERIO_CMD_REGISTER(r2, &(0x7f00000000c0), 0x2) read(r2, &(0x7f00000001c0)=""/93, 0x5d) syz_emit_ethernet(0x96, &(0x7f0000000000)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000308", 0x60, 0x3a, 0x0, @private1, @local, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "5b52ab", 0x0, 0x2b, 0x0, @private0, @private0, [@srh={0x11, 0x4, 0x4, 0x2, 0x1, 0x0, 0x0, [@private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}, @dstopts={0x88}]}}}}}}}, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000480)={@cgroup, 0xffffffffffffffff, 0x24, 0x30}, 0x20) write$USERIO_CMD_SEND_INTERRUPT(r2, &(0x7f0000000580)={0x2, 0xf8}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r2, &(0x7f0000000100), 0x2) r6 = socket$can_bcm(0x1d, 0x2, 0x2) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x41, &(0x7f0000000000)=0x4011, 0x4) connect$can_bcm(r6, &(0x7f00000005c0), 0x10) recvmmsg(r6, &(0x7f0000000340)=[{{0x0, 0x0, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000080)=""/200, 0xc8}], 0x2}, 0x7fff}], 0x1, 0x10002, 0x0) sendmsg$can_bcm(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) r7 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r7, 0x4020565a, &(0x7f0000000080)={0x5, 0x2}) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) close_range(r8, 0xffffffffffffffff, 0x0) 981.891312ms ago: executing program 1 (id=2999): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r2 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x6) socket$inet(0x2, 0x200000003, 0x84) socket(0x2, 0x3, 0xff) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/raw\x00') ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001300)={'macvlan1\x00', &(0x7f0000000180)=@ethtool_stats={0x1d, 0x3, [0x80000001, 0x6, 0x8000]}}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="050000080000120000000000000008000300701b7d9a34666ce56a345a4d9997e33371354971a4af0431d39c61b83487000000000000005216c83102e6c853a52b7960", @ANYRES32=r6, @ANYBLOB="0800050008000000"], 0x24}}, 0xc080) sendmsg$NL80211_CMD_ASSOCIATE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001340)={0x34, r5, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_SSID={0x18, 0x34, @random="88866133e36854a1fecd6207eacecfc7c6f7edfd"}]}, 0x34}}, 0xc00) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f0000001240)=0x4000000) r7 = fsopen(&(0x7f0000000000)='bpf\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_BINARY(r7, 0x2, &(0x7f00000000c0)='#*-\x00', &(0x7f0000000100)='*', 0x1) preadv(r3, &(0x7f0000002400)=[{&(0x7f0000000240)=""/4082, 0xff2}], 0x1, 0xea, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000100)='net/l2cap\x00') readv(r8, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/86, 0x56}, {&(0x7f00000001c0)=""/194, 0xc2}], 0x2) fcntl$addseals(r2, 0x409, 0x7) ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000000)={r2, 0x1f, 0x0, 0x1000000}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, 0x0) socket(0x1, 0x5, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) unlink(&(0x7f00000003c0)='./cgroup\x00') migrate_pages(0x0, 0x3, &(0x7f0000000300)=0x3, 0x0) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') 920.765972ms ago: executing program 5 (id=3000): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6) pwrite64(r0, &(0x7f0000000100)="0000010042", 0x5, 0x1be) pwrite64(r0, &(0x7f0000000100)="55aa", 0x2, 0x1fe) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x2) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) 664.006514ms ago: executing program 1 (id=3001): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x14, 0x15, 0x301, 0x70bd2c, 0x0, {0xc}}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="475f99ce6ab9f0164d18380000830604010200000000000000000a0000010800054000000fa60500010001000000060006405ae5736a000500000a000200000007ff02000000"], 0x38}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000) mknodat$null(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x40, 0x103) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000100)=@v2={0x2000000, [{0x81}, {0x8, 0xc}]}, 0x14, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e23, @loopback}, 0x10) r2 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) sigaltstack(&(0x7f0000000000)={0xffffffffffffffff, 0x0, 0xfffffffffffffefa}, &(0x7f0000000080)={&(0x7f0000000040)}) sigaltstack(&(0x7f0000000380)={0x0, 0x3}, 0x0) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r3, 0xc0e85667, &(0x7f00000005c0)={0xffffff07, 0x6, "22590a37c8e2d3f458ee5ed83af35c32d4869cadf26264b04173abf0ba771192", 0x0, 0x3922, 0xf, 0x2, 0x8, 0x5, 0x7, 0x6, [0x6, 0xc5f7, 0xb]}) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000500)={'gre0\x00', &(0x7f0000000440)={'syztnl2\x00', 0x0, 0x8, 0x7800, 0x11, 0x70c9, {{0x9, 0x4, 0x3, 0x7, 0x24, 0x68, 0x0, 0x7, 0x4, 0x0, @rand_addr=0x64010102, @remote, {[@rr={0x7, 0xf, 0xb1, [@loopback, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @noop]}}}}}) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x2, 0xd, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private1}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast1}}, @sadb_x_policy={0x8, 0x12, 0x1, 0x2, 0x0, 0x0, 0x0, {0x6, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@private1, @in6=@private1}}, @sadb_lifetime={0x4, 0x4}]}, 0xc0}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x13f, 0x9}}, 0x20) syz_usb_control_io$sierra_net(r2, &(0x7f00000003c0)={0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="000b0200000002"], 0x0}, 0x0) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000200)={r5, r5, 0x2b, 0x0, @void}, 0x10) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x1b, &(0x7f0000000240)={@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x20) r9 = ioctl$TUNGETDEVNETNS(r1, 0x54e3, 0x0) dup(r9) ioctl$EVIOCGMASK(r7, 0x5b02, 0x0) syz_usb_control_io$rtl8150(r2, 0x0, &(0x7f0000000b40)={0x18, &(0x7f0000000940)={0x20, 0x13, 0xc4, "e8e75e067d8291aee78fb7809ec5ace37d1517f7c74e74d3d77621b1daac1d11f690f775e34470a283b6ed5fd24a28e9cc8911bbb870bcbe2510bc38050ad6601030e4040f901b4878f14c881247017072fe60b5f6875d3e46926c0af6f9c771f0ae6c760d769f7f088e121002523fda89941bdff52ae15130e510a76f46038251aa38c5bc28a4bcf81fe1d8d16bd8af293535242f853f75365389df74310f502929c8f87e9261c3f522fcc94f5efc683eb94dda3eddec8fa21f9c232484a7ba57895ceb"}, &(0x7f0000000a40)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000a80)={0x0, 0x8, 0x1, 0xfd}, &(0x7f0000000ac0)={0xc0, 0x5, 0x2, "992a"}, &(0x7f0000000b00)}) 606.817835ms ago: executing program 5 (id=3002): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) getpeername$packet(r0, 0x0, &(0x7f0000000140)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x8000001, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, 0x10}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac95ab194f93f8e795a9b29420fa62d", 0x11}], 0x1}}], 0x1, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) write$binfmt_misc(r2, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd00ac6700000000000000000000c2888e7d52164ec480e79200000100", [0x0, 0x2000000000001]}}) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffb}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="200000001e00110227d37000ffdbdf2507"], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001000000128bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000027e1cf000000f399b9618a18a46908bd11be19142b9787298f20334680d77fa085a05a0e5df003cd36ff5cd00a2d5666215c6ef6e3e820dfb81f5684d1bd05f6ec4701c7926cf53c4590f62c217c6bce18be09fcceef8a203f5868d5731150d9acc1df27ba1cc1b9ce571d6d3fa20ffdb6942e22bfb20a29038f2f4608584be158723bdaa3"], 0x28}, 0x1, 0xba01, 0x0, 0x4004001}, 0x0) 293.915738ms ago: executing program 5 (id=3003): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010829bd7000000000000b00000008000300", @ANYRES32=r2, @ANYBLOB="60005080110001004abee339084eeef16f162471f400000008000d000aac0f00050002"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 223.086344ms ago: executing program 6 (id=3004): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f00000001c0)={0x1000200001ee0000, 0x3}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) connect$pptp(0xffffffffffffffff, 0x0, 0x0) connect$pptp(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f00002b7000/0x4000)=nil, 0x4000, 0x64) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r3) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x48, r4, 0x1, 0x70bd27, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0xfffffffffffffff8}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x81}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40020}, 0x20044090) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0) r5 = socket$inet(0x2, 0x3, 0x33) r6 = socket$kcm(0xa, 0x2, 0x0) listen(r5, 0x0) dup(r6) sendmsg$sock(r6, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0xfd}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x10, 0x1, 0x24, 0x3}}], 0x10}, 0x0) 137.937842ms ago: executing program 7 (id=3005): openat2(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)='wi', 0x2}], 0x1, 0x1) r1 = syz_open_dev$amidi(&(0x7f0000000000), 0x2, 0x101100) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) syz_usb_connect(0x0, 0x24, &(0x7f0000000500)={{0x12, 0x1, 0x201, 0x7d, 0x51, 0xe8, 0x10, 0x5ac, 0x223, 0xad34, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x8, 0x4, 0x10, 0x4, "", [{{0x9, 0x4, 0x76, 0x78, 0x0, 0x3, 0xae, 0x2, 0x1}}]}}]}}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0}) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r1, 0x40045731, &(0x7f0000000180)) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000480)={"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"}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000180)="66baa000ecc744240011000000c7442402b16e0000ff2c2443f466baf80cb8f2c96789ef66bafc0c66ed0f072e0f01c248b820450000000000000f23d00f21f835000000010f23f8c46289900cabb9f9080000b8c93c0000ba000000000f30c4816857a601000000", 0x68}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r4, 0x26, &(0x7f0000000080)={0x1, 0x0, 0x2007, 0x1fd}) fcntl$lock(r4, 0x6, &(0x7f0000000280)={0x1, 0x0, 0x2f, 0x9}) r5 = getpid() openat$tcp_congestion(0xffffff9c, &(0x7f0000000040), 0x1, 0x0) syz_pidfd_open(r5, 0x0) fcntl$lock(r4, 0x24, &(0x7f00000000c0)={0x0, 0x0, 0x3, 0x0, r5}) 0s ago: executing program 5 (id=3006): ioctl$BTRFS_IOC_SNAP_CREATE(0xffffffffffffffff, 0x50009401, &(0x7f0000000180)={{}, "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"}) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0186405, &(0x7f0000001300)={0x7fffffff, 0x7fff, {0xffffffffffffffff}, {0x0}, 0x3, 0x6}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110037f1ce808000000a3f30a010203010902240001020010110904630702584200080905fe0f100008000909050203"], &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r3, 0x0, 0x0) syz_open_dev$evdev(0x0, 0x4, 0x60202) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001340)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="29062bbd7000ffdbdf251400000018000180140002006e657464657673696d30000e47000000000005001900000000007cb32b8605001800a8058989573c8c7f07ff3fde84b7e61a13f1536b9a69d142425a0028e22283c4f53860c2b0bdda501efc7362fe94cfddc05652ce099801af626f000000000000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20000104}, 0x40) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000040)={'wg2\x00', 0x0}) setsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000001180)={{{@in6=@mcast2, @in6=@remote, 0x4e24, 0xb52, 0x4e23, 0x6, 0x7, 0xa0, 0x20, 0x3a, r7, r1}, {0xed87, 0x4, 0x0, 0x400, 0x3ff, 0x3, 0xa3, 0x9}, {0x40, 0x6, 0x9, 0x3}, 0x7, 0x6e6bb8, 0x0, 0x0, 0x3, 0x2}, {{@in6=@mcast2, 0x4d6, 0x6c}, 0xa, @in=@private=0xa010102, 0x34ff, 0x5, 0x0, 0xc6, 0x400, 0xe7f, 0x233c}}, 0xe4) bind$inet(r4, 0x0, 0x0) listen(r4, 0x0) socket$netlink(0x10, 0x3, 0x4) r8 = socket$kcm(0x11, 0x2, 0x0) close(r8) r9 = socket$kcm(0x11, 0x2, 0x0) r10 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r10, 0x107, 0x12, &(0x7f00000000c0)=r9, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r11 = socket$kcm(0x11, 0x2, 0x0) r12 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r12, 0x107, 0x12, &(0x7f00000000c0)=r11, 0x8) r13 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r13, 0x107, 0x12, &(0x7f00000000c0)=r8, 0x8) r14 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)=ANY=[@ANYBLOB="2400000047000701feffffffffffffff0400"], 0x24}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) listen(r2, 0x0) kernel console output (not intermixed with test programs): 2430] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 657.027701][T12430] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 657.030265][T12430] usb 6-1: config 0 descriptor?? [ 657.252090][T12430] usbhid 6-1:0.0: can't add hid device: -71 [ 657.252200][T12430] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 657.273251][T12430] usb 6-1: USB disconnect, device number 74 [ 658.035682][T12430] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 658.065487][T12448] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 658.186465][T12430] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 658.188091][T12430] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 658.188131][T12430] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 658.188159][T12430] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 658.188209][T12430] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 658.193107][T12430] usb 2-1: config 0 descriptor?? [ 658.240271][T12448] usb 6-1: Using ep0 maxpacket: 32 [ 658.260681][T12448] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 658.285747][T12448] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 658.285787][T12448] usb 6-1: config 0 has no interface number 0 [ 658.288722][T12448] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 658.288757][T12448] usb 6-1: Product: syz [ 658.288774][T12448] usb 6-1: Manufacturer: syz [ 658.288790][T12448] usb 6-1: SerialNumber: syz [ 658.309926][T12448] usb 6-1: config 0 descriptor?? [ 658.320000][T12448] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 658.445169][T12430] usbhid 2-1:0.0: can't add hid device: -71 [ 658.445426][T12430] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 658.463209][T12430] usb 2-1: USB disconnect, device number 84 [ 658.520736][T12448] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 658.524570][T12448] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 658.729981][T14445] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 658.730662][T14445] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 658.941377][T14445] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 658.944734][T14445] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 659.040313][T14445] binder: 14444:14445 ioctl 40045431 80000300 returned -22 [ 659.067138][ C1] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 659.067710][T12448] usb 6-1: USB disconnect, device number 75 [ 659.107176][T12448] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 659.131467][T12448] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 659.132309][T12448] quatech2 6-1:0.51: device disconnected [ 659.146696][T12446] usb 8-1: new high-speed USB device number 63 using dummy_hcd [ 659.326693][T12446] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 659.329463][T12446] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 659.358511][T12446] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 659.358538][T12446] usb 8-1: Product: syz [ 659.358550][T12446] usb 8-1: Manufacturer: syz [ 659.358563][T12446] usb 8-1: SerialNumber: syz [ 659.617927][T12446] usblp 8-1:1.0: usblp0: USB Unidirectional printer dev 63 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 659.924384][ T4984] ldm_validate_privheads(): Disk read failed. [ 659.924492][ T4984] loop0: [ 659.924519][ T4984] loop0: partition table partially beyond EOD, truncated [ 660.030088][ C0] usblp0: nonzero write bulk status received: -71 [ 660.031298][T12446] usb 8-1: USB disconnect, device number 63 [ 660.050582][T12446] usblp0: removed [ 660.106409][T12448] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 660.257998][T12448] usb 6-1: Using ep0 maxpacket: 8 [ 660.258884][T12448] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 660.260936][T12448] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 660.260997][T12448] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 660.261023][T12448] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 660.261052][T12448] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 660.261111][T12448] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 660.261158][T12448] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 660.564032][T12448] usb 6-1: usb_control_msg returned -32 [ 660.564074][T12448] usbtmc 6-1:16.0: can't read capabilities [ 660.820447][ T5619] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 660.844030][ T5619] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 660.856961][ T5619] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 660.858343][ T5619] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 660.859156][ T5619] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 661.113293][T14476] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2628'. [ 661.128794][T14476] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2628'. [ 661.349307][T14479] usbtmc 6-1:16.0: usb_clear_halt returned -32 [ 661.757347][T14474] bridge0: port 1(bridge_slave_0) entered blocking state [ 661.757564][T14474] bridge0: port 1(bridge_slave_0) entered disabled state [ 661.757670][T14474] bridge_slave_0: entered allmulticast mode [ 661.758984][T14474] bridge_slave_0: entered promiscuous mode [ 661.778485][T14474] bridge0: port 2(bridge_slave_1) entered blocking state [ 661.779129][T14474] bridge0: port 2(bridge_slave_1) entered disabled state [ 661.779512][T14474] bridge_slave_1: entered allmulticast mode [ 661.785462][T14474] bridge_slave_1: entered promiscuous mode [ 661.839911][T14474] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 661.843481][T14474] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 661.890908][T14474] team0: Port device team_slave_0 added [ 661.893551][T14474] team0: Port device team_slave_1 added [ 661.925248][T14474] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 661.926053][T14474] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 661.926081][T14474] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 661.928288][T14474] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 661.928303][T14474] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 661.928393][T14474] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 661.968978][T12431] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 662.049570][T14474] hsr_slave_0: entered promiscuous mode [ 662.050530][T14474] hsr_slave_1: entered promiscuous mode [ 662.051112][T14474] debugfs: 'hsr0' already exists in 'hsr' [ 662.051142][T14474] Cannot create hsr debugfs directory [ 662.156462][T12431] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 662.162997][T12431] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 662.163023][T12431] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 662.163042][T12431] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 662.163075][T12431] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 662.214278][T12431] usb 2-1: config 0 descriptor?? [ 662.493711][T12431] usbhid 2-1:0.0: can't add hid device: -71 [ 662.493870][T12431] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 662.494227][T14474] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 662.518609][T12431] usb 2-1: USB disconnect, device number 85 [ 662.526791][T12448] usb 8-1: new high-speed USB device number 64 using dummy_hcd [ 662.535411][T14474] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 662.541194][T14474] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 662.577984][T14474] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 662.579448][T14474] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 662.584459][T14474] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 662.587277][T14474] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 662.621549][T14474] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 662.696690][T12448] usb 8-1: New USB device found, idVendor=17ef, idProduct=6161, bcdDevice= 0.00 [ 662.700401][T12448] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 662.700435][T12448] usb 8-1: Product: syz [ 662.700447][T12448] usb 8-1: Manufacturer: syz [ 662.700459][T12448] usb 8-1: SerialNumber: syz [ 662.754305][T14474] 8021q: adding VLAN 0 to HW filter on device bond0 [ 662.779811][T14474] 8021q: adding VLAN 0 to HW filter on device team0 [ 662.795390][ T9215] bridge0: port 1(bridge_slave_0) entered blocking state [ 662.795501][ T9215] bridge0: port 1(bridge_slave_0) entered forwarding state [ 662.805142][ T9215] bridge0: port 2(bridge_slave_1) entered blocking state [ 662.805221][ T9215] bridge0: port 2(bridge_slave_1) entered forwarding state [ 662.909634][T12445] usb 6-1: USB disconnect, device number 76 [ 662.921546][ T5622] Bluetooth: hci5: command tx timeout [ 662.944705][T14474] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 663.012379][T12448] cdc_acm 8-1:1.0: ttyACM0: USB ACM device [ 663.026910][T14474] veth0_vlan: entered promiscuous mode [ 663.058186][T14474] veth1_vlan: entered promiscuous mode [ 663.058846][T12448] usb 8-1: USB disconnect, device number 64 [ 663.185199][T14474] veth0_macvtap: entered promiscuous mode [ 663.209873][T14474] veth1_macvtap: entered promiscuous mode [ 663.244044][T14474] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 663.260434][T14474] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 663.295817][ T9215] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 663.337400][ T9220] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 663.445697][ T9219] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 663.449125][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 663.449150][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 663.449879][ T59] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 663.523439][ T9215] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 663.523469][ T9215] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 663.545554][T12448] usb 8-1: new high-speed USB device number 65 using dummy_hcd [ 663.673505][T14505] netlink: 180 bytes leftover after parsing attributes in process `syz.9.2627'. [ 663.697776][T12448] usb 8-1: New USB device found, idVendor=17ef, idProduct=6161, bcdDevice= 0.00 [ 663.701515][T12448] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 663.701554][T12448] usb 8-1: Product: syz [ 663.701572][T12448] usb 8-1: Manufacturer: syz [ 663.701589][T12448] usb 8-1: SerialNumber: syz [ 663.895498][T12437] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 664.057647][T12437] usb 2-1: New USB device found, idVendor=1235, idProduct=8012, bcdDevice= 0.40 [ 664.077281][T12437] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 664.077315][T12437] usb 2-1: Product: syz [ 664.077331][T12437] usb 2-1: Manufacturer: syz [ 664.077376][T12437] usb 2-1: SerialNumber: syz [ 664.161475][T12448] cdc_acm 8-1:1.0: ttyACM0: USB ACM device [ 664.315532][T12449] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 664.360232][T12437] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 664.476464][T12449] usb 6-1: Using ep0 maxpacket: 8 [ 664.477738][T12449] usb 6-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 664.479539][T12449] usb 6-1: config index 0 descriptor too short (expected 30, got 18) [ 664.484773][T12449] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 664.484802][T12449] usb 6-1: Product: syz [ 664.484820][T12449] usb 6-1: Manufacturer: syz [ 664.484871][T12449] usb 6-1: SerialNumber: syz [ 664.486830][T14518] loop9: detected capacity change from 0 to 7 [ 664.489968][T14518] Dev loop9: unable to read RDB block 7 [ 664.490090][T14518] loop9: unable to read partition table [ 664.490733][T14518] loop9: partition table beyond EOD, truncated [ 664.490802][T14518] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 664.578930][T12449] usb 6-1: config 0 descriptor?? [ 664.599100][T12449] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 664.599198][T12449] usb 6-1: setting power ON [ 664.599221][T12449] dvb-usb: bulk message failed: -22 (2/0) [ 664.625914][T12448] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 664.647972][T12430] usb 8-1: USB disconnect, device number 65 [ 664.683085][T12449] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 664.683978][T12449] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 664.684035][T12449] usb 6-1: media controller created [ 664.740418][T12449] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 664.788282][T12449] usb 6-1: selecting invalid altsetting 6 [ 664.788316][T12449] usb 6-1: digital interface selection failed (-22) [ 664.788363][T12449] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 664.789270][T12448] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 664.789823][T12449] usb 6-1: setting power OFF [ 664.794509][T12448] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 664.794544][T12448] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 664.794571][T12448] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 664.794619][T12448] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 664.877831][T12449] dvb-usb: bulk message failed: -22 (2/0) [ 664.877860][T12449] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 664.877878][T12449] (NULL device *): no alternate interface [ 664.900438][T12448] usb 10-1: config 0 descriptor?? [ 664.996030][ T5622] Bluetooth: hci5: command tx timeout [ 665.144365][T12437] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 665.169192][T12437] usb 2-1: USB disconnect, device number 86 [ 665.177554][T14516] netlink: 40 bytes leftover after parsing attributes in process `syz.9.2639'. [ 665.198200][T12448] usbhid 10-1:0.0: can't add hid device: -71 [ 665.198331][T12448] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 665.237584][T12448] usb 10-1: USB disconnect, device number 2 [ 665.292792][ T5612] udevd[5612]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 665.387579][T14526] netlink: 56 bytes leftover after parsing attributes in process `syz.7.2645'. [ 665.532220][T14512] dvb-usb: bulk message failed: -22 (3/0) [ 665.532250][T14512] dvb-usb: bulk message failed: -22 (4/0) [ 665.532265][T14512] cxusb: i2c read failed [ 665.596003][T12437] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 665.651610][T12449] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 665.677077][T12449] usb 6-1: USB disconnect, device number 77 [ 665.748557][T12437] usb 2-1: Using ep0 maxpacket: 8 [ 665.749494][T12437] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 665.751263][T12437] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 665.751329][T12437] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 665.751358][T12437] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 665.751386][T12437] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 665.751415][T12437] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 665.751477][T12437] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 666.056542][T12437] usb 2-1: usb_control_msg returned -32 [ 666.056599][T12437] usbtmc 2-1:16.0: can't read capabilities [ 666.469553][T14535] fuse: Unknown parameter '΅' [ 666.820043][T14543] usbtmc 2-1:16.0: usb_clear_halt returned -32 [ 666.865800][ T5692] usb 6-1: new high-speed USB device number 78 using dummy_hcd [ 667.016047][ T5692] usb 6-1: Using ep0 maxpacket: 32 [ 667.018212][ T5692] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 667.020363][ T5692] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 667.020393][ T5692] usb 6-1: config 0 has no interface number 0 [ 667.023672][ T5692] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 667.023692][ T5692] usb 6-1: Product: syz [ 667.023704][ T5692] usb 6-1: Manufacturer: syz [ 667.023716][ T5692] usb 6-1: SerialNumber: syz [ 667.039115][ T5692] usb 6-1: config 0 descriptor?? [ 667.078323][ T5622] Bluetooth: hci5: command tx timeout [ 667.672834][ T4984] ldm_validate_privheads(): Disk read failed. [ 667.672919][ T4984] loop0: [ 667.672942][ T4984] loop0: partition table partially beyond EOD, truncated [ 667.698301][ T5692] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 667.698417][ T5692] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 667.700689][ T5692] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 667.704457][ T5692] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -71 [ 667.770084][ T5692] usb 6-1: USB disconnect, device number 78 [ 667.848280][T14548] FAULT_INJECTION: forcing a failure. [ 667.848280][T14548] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 667.848323][T14548] CPU: 1 UID: 0 PID: 14548 Comm: syz.7.2651 Tainted: G L syzkaller #0 PREEMPT(full) [ 667.848351][T14548] Tainted: [L]=SOFTLOCKUP [ 667.848359][T14548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 667.848371][T14548] Call Trace: [ 667.848381][T14548] [ 667.848391][T14548] dump_stack_lvl+0xe8/0x150 [ 667.848427][T14548] should_fail_ex+0x410/0x560 [ 667.848458][T14548] _copy_from_user+0x2d/0xb0 [ 667.848555][T14548] copy_uabi_to_xstate+0x313/0xa10 [ 667.848595][T14548] ? __pfx_copy_uabi_to_xstate+0x10/0x10 [ 667.848634][T14548] ? fpu__restore_sig+0xc25/0x1200 [ 667.848664][T14548] ? fpu__restore_sig+0xc25/0x1200 [ 667.848694][T14548] ? __local_bh_enable_ip+0xd6/0x140 [ 667.848748][T14548] ? x86_task_fpu+0x4c/0x90 [ 667.848772][T14548] fpu__restore_sig+0x1092/0x1200 [ 667.848799][T14548] ? fpu__restore_sig+0xc25/0x1200 [ 667.848861][T14548] ? __lock_acquire+0x747/0x2de0 [ 667.848884][T14548] ? __pfx_fpu__restore_sig+0x10/0x10 [ 667.848959][T14548] ia32_restore_sigcontext+0x40c/0x560 [ 667.849004][T14548] ? __pfx_ia32_restore_sigcontext+0x10/0x10 [ 667.849044][T14548] ? _raw_spin_unlock_irq+0x23/0x50 [ 667.849087][T14548] __ia32_compat_sys_rt_sigreturn+0x1ad/0x270 [ 667.849113][T14548] ? __task_pid_nr_ns+0x28/0x470 [ 667.849138][T14548] ? __pfx___ia32_compat_sys_rt_sigreturn+0x10/0x10 [ 667.849180][T14548] ? asm_int80_emulation+0x1a/0x20 [ 667.849210][T14548] do_int80_emulation+0x198/0x500 [ 667.849238][T14548] ? trace_irq_disable+0x3b/0x140 [ 667.849263][T14548] ? asm_int80_emulation+0x1a/0x20 [ 667.849313][T14548] ? clear_bhb_loop+0x70/0xc0 [ 667.849337][T14548] ? clear_bhb_loop+0x70/0xc0 [ 667.849365][T14548] asm_int80_emulation+0x1a/0x20 [ 667.849389][T14548] RIP: 0023:0xf7ff40ea [ 667.849411][T14548] Code: 03 c9 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 80 5d 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 667.849433][T14548] RSP: 002b:00000000f54b650c EFLAGS: 00000206 [ 667.849457][T14548] RAX: 0000000000000091 RBX: 0000000000000003 RCX: 0000000080004500 [ 667.849474][T14548] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 667.849488][T14548] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 667.849502][T14548] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 667.849516][T14548] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 667.849548][T14548] [ 668.252601][T12446] usb 2-1: USB disconnect, device number 87 [ 668.444301][T14571] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2656'. [ 668.459568][T14571] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2656'. [ 668.609430][T14577] netlink: 104 bytes leftover after parsing attributes in process `syz.5.2659'. [ 668.609465][T14577] netlink: 104 bytes leftover after parsing attributes in process `syz.5.2659'. [ 668.635425][ T5692] usb 8-1: new high-speed USB device number 66 using dummy_hcd [ 668.787893][ T5692] usb 8-1: Using ep0 maxpacket: 8 [ 668.790966][ T5692] usb 8-1: unable to get BOS descriptor or descriptor too short [ 668.791022][ T5692] usb 8-1: New USB device found, idVendor=1199, idProduct=6822, bcdDevice=92.a8 [ 668.792390][ T5692] usb 8-1: config 10 has an invalid interface number: 124 but max is 0 [ 668.792419][ T5692] usb 8-1: config 10 has no interface number 0 [ 668.792463][ T5692] usb 8-1: config 10 interface 124 altsetting 134 endpoint 0xB has an invalid bInterval 127, changing to 10 [ 668.792499][ T5692] usb 8-1: config 10 interface 124 altsetting 134 endpoint 0xB has invalid maxpacket 18369, setting to 1024 [ 668.792550][ T5692] usb 8-1: config 10 interface 124 has no altsetting 0 [ 668.801613][ T5692] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 668.801678][ T5692] usb 8-1: Product: syz [ 668.801832][ T5692] usb 8-1: Manufacturer: syz [ 668.801900][ T5692] usb 8-1: SerialNumber: syz [ 668.833734][T14557] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 669.108672][ T5692] sierra 8-1:10.124: Sierra USB modem converter detected [ 669.133316][ T5692] usb 8-1: Sierra USB modem converter now attached to ttyUSB0 [ 669.153935][ T5692] usb 8-1: USB disconnect, device number 66 [ 669.156433][ T5622] Bluetooth: hci5: command tx timeout [ 669.189973][ T5692] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 669.193300][ T5692] sierra 8-1:10.124: device disconnected [ 669.340915][T14587] netlink: 11575 bytes leftover after parsing attributes in process `syz.1.2662'. [ 669.340941][T14587] netlink: 116 bytes leftover after parsing attributes in process `syz.1.2662'. [ 669.518043][ T4984] ldm_validate_privheads(): Disk read failed. [ 669.518117][ T4984] loop0: [ 669.518138][ T4984] loop0: partition table partially beyond EOD, truncated [ 669.651013][T14596] vivid-003: ================= START STATUS ================= [ 669.652023][T14594] FAULT_INJECTION: forcing a failure. [ 669.652023][T14594] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 669.652059][T14594] CPU: 0 UID: 0 PID: 14594 Comm: syz.1.2665 Tainted: G L syzkaller #0 PREEMPT(full) [ 669.652081][T14594] Tainted: [L]=SOFTLOCKUP [ 669.652087][T14594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 669.652137][T14594] Call Trace: [ 669.652145][T14594] [ 669.652153][T14594] dump_stack_lvl+0xe8/0x150 [ 669.652182][T14594] should_fail_ex+0x410/0x560 [ 669.652206][T14594] _copy_from_user+0x2d/0xb0 [ 669.652227][T14594] copy_uabi_to_xstate+0x4d3/0xa10 [ 669.652257][T14594] ? __pfx_copy_uabi_to_xstate+0x10/0x10 [ 669.652286][T14594] ? fpu__restore_sig+0xc25/0x1200 [ 669.652309][T14594] ? fpu__restore_sig+0xc25/0x1200 [ 669.652331][T14594] ? __local_bh_enable_ip+0xd6/0x140 [ 669.652352][T14594] ? x86_task_fpu+0x4c/0x90 [ 669.652373][T14594] fpu__restore_sig+0x1092/0x1200 [ 669.652396][T14594] ? fpu__restore_sig+0xc25/0x1200 [ 669.652420][T14594] ? __lock_acquire+0x747/0x2de0 [ 669.652438][T14594] ? __pfx_fpu__restore_sig+0x10/0x10 [ 669.652479][T14594] ia32_restore_sigcontext+0x40c/0x560 [ 669.652497][T14594] ? __pfx_ia32_restore_sigcontext+0x10/0x10 [ 669.652523][T14594] ? _raw_spin_unlock_irq+0x23/0x50 [ 669.652553][T14594] __ia32_compat_sys_rt_sigreturn+0x1ad/0x270 [ 669.652571][T14594] ? __task_pid_nr_ns+0x28/0x470 [ 669.652587][T14594] ? __pfx___ia32_compat_sys_rt_sigreturn+0x10/0x10 [ 669.652608][T14594] ? asm_int80_emulation+0x1a/0x20 [ 669.652628][T14594] do_int80_emulation+0x198/0x500 [ 669.652646][T14594] ? trace_irq_disable+0x3b/0x140 [ 669.652663][T14594] ? asm_int80_emulation+0x1a/0x20 [ 669.652677][T14594] ? clear_bhb_loop+0x70/0xc0 [ 669.652693][T14594] ? clear_bhb_loop+0x70/0xc0 [ 669.652712][T14594] asm_int80_emulation+0x1a/0x20 [ 669.652727][T14594] RIP: 0023:0xf7f550ea [ 669.652741][T14594] Code: 03 c9 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 80 5d 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 669.652755][T14594] RSP: 002b:00000000f541650c EFLAGS: 00000206 [ 669.652771][T14594] RAX: 0000000000000091 RBX: 0000000000000003 RCX: 0000000080004500 [ 669.652781][T14594] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 669.652791][T14594] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 669.652800][T14594] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 669.652810][T14594] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 669.652831][T14594] [ 669.671115][T14596] vivid-003: Radio HW Seek Mode: Bounded [ 669.671305][T14596] vivid-003: Radio Programmable HW Seek: false [ 669.671366][T14596] vivid-003: RDS Rx I/O Mode: Block I/O [ 669.671432][T14596] vivid-003: Generate RBDS Instead of RDS: false [ 669.671497][T14596] vivid-003: RDS Reception: true [ 669.671622][T14596] vivid-003: RDS Program Type: 0 inactive [ 669.671732][T14596] vivid-003: RDS PS Name: inactive [ 669.671793][T14596] vivid-003: RDS Radio Text: inactive [ 669.671855][T14596] vivid-003: RDS Traffic Announcement: false inactive [ 669.671946][T14596] vivid-003: RDS Traffic Program: false inactive [ 669.672027][T14596] vivid-003: RDS Music: false inactive [ 669.672096][T14596] vivid-003: ================== END STATUS ================== [ 670.309577][ T4984] ldm_validate_privheads(): Disk read failed. [ 670.309658][ T4984] loop0: [ 670.309681][ T4984] loop0: partition table partially beyond EOD, truncated [ 670.496935][T12431] usb 8-1: new high-speed USB device number 67 using dummy_hcd [ 670.657978][T12431] usb 8-1: Using ep0 maxpacket: 8 [ 670.658945][T12431] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 670.660671][T12431] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 670.660728][T12431] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 670.660754][T12431] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 670.660782][T12431] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 670.660810][T12431] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 670.660857][T12431] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 670.962282][T12431] usb 8-1: usb_control_msg returned -32 [ 670.962326][T12431] usbtmc 8-1:16.0: can't read capabilities [ 671.095844][T14623] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2674'. [ 671.097809][T14623] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2674'. [ 671.280671][ T4984] ldm_validate_privheads(): Disk read failed. [ 671.280774][ T4984] loop0: [ 671.280797][ T4984] loop0: partition table partially beyond EOD, truncated [ 671.415758][T12431] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 671.437467][T14632] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2677'. [ 671.555989][T12431] usb 10-1: device descriptor read/64, error -71 [ 671.724265][T14647] usbtmc 8-1:16.0: usb_clear_halt returned -32 [ 671.825444][T12431] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 671.955694][T12431] usb 10-1: device descriptor read/64, error -71 [ 672.075975][T12431] usb usb10-port1: attempt power cycle [ 672.415471][T12431] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 672.439091][T12431] usb 10-1: device descriptor read/8, error -71 [ 672.685788][T12431] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 672.706337][T12431] usb 10-1: device descriptor read/8, error -71 [ 672.828234][T12431] usb usb10-port1: unable to enumerate USB device [ 673.131150][ T4984] ldm_validate_privheads(): Disk read failed. [ 673.131239][ T4984] loop0: [ 673.131260][ T4984] loop0: partition table partially beyond EOD, truncated [ 673.215408][T12431] usb 6-1: new high-speed USB device number 79 using dummy_hcd [ 673.399806][T12431] usb 6-1: Using ep0 maxpacket: 16 [ 673.400741][T12431] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 673.400807][T12431] usb 6-1: too many configurations: 112, using maximum allowed: 8 [ 673.442936][T12431] usb 6-1: New USB device strings: Mfr=144, Product=246, SerialNumber=0 [ 673.442971][T12431] usb 6-1: Product: syz [ 673.442989][T12431] usb 6-1: Manufacturer: syz [ 673.471716][T12431] r8152-cfgselector 6-1: Unknown version 0x0000 [ 673.471745][T12431] r8152-cfgselector 6-1: config 0 descriptor?? [ 673.499794][T12431] cdc_acm 6-1:0.0: Zero length descriptor references [ 673.499883][T12431] cdc_acm 6-1:0.0: probe with driver cdc_acm failed with error -22 [ 673.612059][ T9222] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 673.710505][T14674] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 673.711069][T14674] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 673.735185][T12449] r8152-cfgselector 6-1: USB disconnect, device number 79 [ 674.108444][T12431] usb 8-1: USB disconnect, device number 67 [ 674.565533][T12449] usb 6-1: new high-speed USB device number 80 using dummy_hcd [ 674.587946][T12437] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 674.715453][T12449] usb 6-1: Using ep0 maxpacket: 8 [ 674.716827][T12449] usb 6-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 674.736693][T12449] usb 6-1: config index 0 descriptor too short (expected 30, got 18) [ 674.754708][T12449] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 674.754740][T12449] usb 6-1: Product: syz [ 674.754758][T12449] usb 6-1: Manufacturer: syz [ 674.754776][T12449] usb 6-1: SerialNumber: syz [ 674.763545][T12437] usb 10-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 674.789980][T12437] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 674.809340][T12437] usb 10-1: config 0 descriptor?? [ 674.824471][T12449] usb 6-1: config 0 descriptor?? [ 674.850099][T12437] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 674.873980][T12449] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 674.874068][T12449] usb 6-1: setting power ON [ 674.874091][T12449] dvb-usb: bulk message failed: -22 (2/0) [ 674.914316][T12449] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 674.938482][T12449] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 674.938608][T12449] usb 6-1: media controller created [ 675.058861][T12449] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 675.159999][T12449] usb 6-1: selecting invalid altsetting 6 [ 675.160080][T12449] usb 6-1: digital interface selection failed (-22) [ 675.160098][T12449] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 675.161959][T12449] usb 6-1: setting power OFF [ 675.161983][T12449] dvb-usb: bulk message failed: -22 (2/0) [ 675.162023][T12449] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 675.162037][T12449] (NULL device *): no alternate interface [ 675.470887][T14710] dvb-usb: bulk message failed: -22 (3/0) [ 675.470920][T14710] dvb-usb: bulk message failed: -22 (4/0) [ 675.470935][T14710] cxusb: i2c read failed [ 675.623662][T12449] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 675.659128][T14722] tipc: Enabled bearer , priority 0 [ 675.660750][T12449] usb 6-1: USB disconnect, device number 80 [ 675.692115][T14723] tipc: Enabling of bearer rejected, already enabled [ 675.718203][T14722] syzkaller0: entered promiscuous mode [ 675.718221][T14722] syzkaller0: entered allmulticast mode [ 675.853082][T14722] tipc: Resetting bearer [ 675.890288][T14721] tipc: Resetting bearer [ 675.975910][T14721] tipc: Disabling bearer [ 676.301373][ T4984] ldm_validate_privheads(): Disk read failed. [ 676.301481][ T4984] loop0: [ 676.301507][ T4984] loop0: partition table partially beyond EOD, truncated [ 676.675632][T12431] usb 6-1: new high-speed USB device number 81 using dummy_hcd [ 676.827543][T12431] usb 6-1: Using ep0 maxpacket: 8 [ 676.830526][T12431] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 676.834343][T12431] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 676.834403][T12431] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 676.834421][T12431] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 676.834451][T12431] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 676.834478][T12431] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 676.834522][T12431] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 676.984170][T14751] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2704'. [ 677.168423][T12431] usb 6-1: usb_control_msg returned -32 [ 677.168482][T12431] usbtmc 6-1:16.0: can't read capabilities [ 677.293799][T14758] libceph: resolve '0.' (ret=-3): failed [ 677.403570][T12437] usb 10-1: USB disconnect, device number 7 [ 677.555900][T12431] usb 8-1: new full-speed USB device number 68 using dummy_hcd [ 677.707231][T12431] usb 8-1: New USB device found, idVendor=1397, idProduct=00bd, bcdDevice= 0.40 [ 677.715594][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 677.733990][T12431] usb 8-1: string descriptor 0 read error: -22 [ 677.734161][T12431] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 677.778030][T12431] usb 8-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 677.912265][T14776] usbtmc 6-1:16.0: CHECK_CLEAR_STATUS returned 0 [ 677.945649][T12437] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 677.969874][T12431] usb 8-1: unit 13 not found! [ 678.052505][T12431] usb 8-1: invalid MIDI EP [ 678.052542][T12431] usb 8-1: snd-bcd2000: error during probing [ 678.067437][T12431] snd-bcd2000 8-1:1.2: probe with driver snd-bcd2000 failed with error -22 [ 678.070314][T12431] usb 8-1: USB disconnect, device number 68 [ 678.098968][T12437] usb 2-1: Using ep0 maxpacket: 8 [ 678.104959][T12437] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 678.118119][T12437] usb 2-1: config index 0 descriptor too short (expected 30, got 18) [ 678.134389][T12437] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 678.134421][T12437] usb 2-1: Product: syz [ 678.134438][T12437] usb 2-1: Manufacturer: syz [ 678.134455][T12437] usb 2-1: SerialNumber: syz [ 678.178994][T12437] usb 2-1: config 0 descriptor?? [ 678.203579][T12437] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 678.203640][T12437] usb 2-1: setting power ON [ 678.203662][T12437] dvb-usb: bulk message failed: -22 (2/0) [ 678.230747][T12437] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 678.233904][T12437] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 678.233968][T12437] usb 2-1: media controller created [ 678.287874][T12437] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 678.336598][T12437] usb 2-1: selecting invalid altsetting 6 [ 678.336627][T12437] usb 2-1: digital interface selection failed (-22) [ 678.336713][T12437] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 678.341749][T12437] usb 2-1: setting power OFF [ 678.341785][T12437] dvb-usb: bulk message failed: -22 (2/0) [ 678.341806][T12437] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 678.341817][T12437] (NULL device *): no alternate interface [ 678.611906][T14770] dvb-usb: bulk message failed: -22 (3/0) [ 678.611936][T14770] dvb-usb: bulk message failed: -22 (4/0) [ 678.630730][T14770] cxusb: i2c read failed [ 678.641014][T12437] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 678.672716][T12430] usb 2-1: USB disconnect, device number 88 [ 678.691396][ T4984] ldm_validate_privheads(): Disk read failed. [ 678.691467][ T4984] loop0: [ 678.691489][ T4984] loop0: partition table partially beyond EOD, truncated [ 678.980626][T12431] hid_parser_main: 31 callbacks suppressed [ 678.980698][T12431] hid-generic 0000:0000:0000.003C: unknown main item tag 0x0 [ 679.004255][T12431] hid-generic 0000:0000:0000.003C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 679.321104][T12449] hid-generic 0000:0000:0000.003D: unknown main item tag 0x0 [ 679.348133][T12449] hid-generic 0000:0000:0000.003D: hidraw1: HID v0.00 Device [syz1] on syz0 [ 679.594564][T12437] usb 6-1: USB disconnect, device number 81 [ 679.878597][T14811] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2723'. [ 679.943286][T12430] hid-generic 0000:0000:0000.003E: unknown main item tag 0x0 [ 679.954171][T12430] hid-generic 0000:0000:0000.003E: hidraw2: HID v0.00 Device [syz1] on syz0 [ 680.203573][ T4984] ldm_validate_privheads(): Disk read failed. [ 680.203660][ T4984] loop0: [ 680.203683][ T4984] loop0: partition table partially beyond EOD, truncated [ 680.552044][T14828] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2727'. [ 680.694166][T14829] netlink: 'syz.6.2727': attribute type 11 has an invalid length. [ 681.011168][ T31] kauditd_printk_skb: 25 callbacks suppressed [ 681.011190][ T31] audit: type=1326 audit(1789451432.260:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14810 comm="syz.7.2724" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff40ec code=0x7ffc0000 [ 681.013978][ T31] audit: type=1326 audit(1789451432.260:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14810 comm="syz.7.2724" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff40ec code=0x7ffc0000 [ 681.014788][ T31] audit: type=1326 audit(1789451432.260:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14810 comm="syz.7.2724" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7ff40ec code=0x7ffc0000 [ 681.014828][ T31] audit: type=1326 audit(1789451432.260:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14810 comm="syz.7.2724" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff40ec code=0x7ffc0000 [ 681.014861][ T31] audit: type=1326 audit(1789451432.260:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14810 comm="syz.7.2724" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff40ec code=0x7ffc0000 [ 681.015145][ T31] audit: type=1326 audit(1789451432.260:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14810 comm="syz.7.2724" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=451 compat=1 ip=0xf7ff40ec code=0x7ffc0000 [ 681.022673][ T31] audit: type=1326 audit(1789451432.270:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14810 comm="syz.7.2724" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff40ec code=0x7ffc0000 [ 681.029328][ T31] audit: type=1326 audit(1789451432.280:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14810 comm="syz.7.2724" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff40ec code=0x7ffc0000 [ 681.366366][T12430] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 681.511288][ T4984] ldm_validate_privheads(): Disk read failed. [ 681.511368][ T4984] loop0: [ 681.511391][ T4984] loop0: partition table partially beyond EOD, truncated [ 681.533156][T12430] usb 2-1: Using ep0 maxpacket: 8 [ 681.533940][T12430] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 681.535094][T12430] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 681.535150][T12430] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 681.535176][T12430] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 681.535205][T12430] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 681.535233][T12430] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 681.535399][T12430] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 681.858027][T12430] usb 2-1: usb_control_msg returned -32 [ 681.858093][T12430] usbtmc 2-1:16.0: can't read capabilities [ 681.966379][T14870] netlink: 72 bytes leftover after parsing attributes in process `syz.6.2741'. [ 682.356710][T12430] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 682.421227][ T4984] ldm_validate_privheads(): Disk read failed. [ 682.421308][ T4984] loop0: [ 682.421333][ T4984] loop0: partition table partially beyond EOD, truncated [ 682.516156][T12430] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 682.517588][T12430] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 682.517613][T12430] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 682.517631][T12430] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 682.517683][T12430] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 682.522801][T12430] usb 10-1: config 0 descriptor?? [ 682.685923][T14893] usbtmc 2-1:16.0: CHECK_CLEAR_STATUS returned 0 [ 683.583611][T12430] usbhid 10-1:0.0: can't add hid device: -71 [ 683.583763][T12430] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 683.604521][T12430] usb 10-1: USB disconnect, device number 8 [ 683.951985][T14916] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 684.148578][T12448] usb 2-1: USB disconnect, device number 89 [ 684.313806][ T4984] ldm_validate_privheads(): Disk read failed. [ 684.313877][ T4984] loop0: [ 684.313892][ T4984] loop0: partition table partially beyond EOD, truncated [ 684.523903][T14927] gtp0: entered promiscuous mode [ 684.523924][T14927] gtp0: entered allmulticast mode [ 684.825419][T12448] usb 6-1: new full-speed USB device number 82 using dummy_hcd [ 684.979494][T12448] usb 6-1: not running at top speed; connect to a high speed hub [ 684.979541][T12448] usb 6-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 1.00 [ 684.983980][T12448] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 684.984055][T12448] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 685.046970][T12448] gspca_main: spca501-2.14.0 probing 0000:0000 [ 685.316647][T12437] usb 8-1: new high-speed USB device number 69 using dummy_hcd [ 685.380453][T12449] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 685.466754][T12437] usb 8-1: Using ep0 maxpacket: 32 [ 685.473426][T12437] usb 8-1: New USB device found, idVendor=0e41, idProduct=4244, bcdDevice= 0.40 [ 685.512316][T12437] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 685.512379][T12437] usb 8-1: Product: 뭾趙﯍啱漾즂仅ᒆ쥳拱쩗ܚퟡⵜ鄊ꤵ㰨༃李ℯ뫕顉ᓀ啿썚ꇤ媭ﾮ퐸瑾愚뀈眕軝趗輝곉ꢨḘ⠮㣮뵄䣉춖쉺壒㫒昏롩ꁱ㥵⸉蛫ꔹ쩦㻉流 [ 685.512411][T12437] usb 8-1: Manufacturer: 쫭ᠡ痵楧쪗쭂﫷믰츷祷ﰣᏢ觊친島ꅉꝀ鹙꼫탲®ف繡趓ᔐᡧ醲䶈᥁ᔸꣷ囼殺皥鿕濯﷢凼亍퉪鎛䣤衿㾭飖ꡏ嫝鏙鰌ᾪ釪噐ꟑ塗◌匣棹⋞複聅ᇯ緈䝒ꇢ⬈珊㫺ﶲ꼡쏾ꊧ唤㙿熻湰癘뺄䤸ෂ涣䤃䊁ﬕ뿆廀绵ᴴ䏇䌇띗妙ꆡ녷৙谎⾇蟂봄榅反ꑜ린鉺ᠳ拥먗틗᎓둂甴ལ [ 685.512568][T12437] usb 8-1: SerialNumber: Ј [ 685.539966][T12449] usb 10-1: New USB device found, idVendor=1038, idProduct=12c2, bcdDevice= 0.00 [ 685.565653][T12448] gspca_spca501: reg write: error -110 [ 685.565800][T12448] spca501 6-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 685.566155][T12448] spca501 6-1:1.0: probe with driver spca501 failed with error -22 [ 685.602223][T12449] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 685.602341][T12449] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 685.602436][T12449] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 685.662429][T12449] usb 10-1: config 0 descriptor?? [ 685.663660][T12448] uvcvideo 6-1:1.0: Found UVC 1.00 device (0000:0000) [ 685.663810][T12448] uvcvideo 6-1:1.0: No streaming interface found for terminal 32770. [ 685.734547][T12437] usb 8-1: Audio class v2/v3 interfaces need an interface association [ 685.946934][T12437] snd-usb-audio 8-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 686.076546][ T5612] udevd[5612]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 686.115535][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 686.141830][T14953] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2768'. [ 686.238325][T14951] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 686.243678][T14951] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 686.244830][T14965] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 686.254904][T14965] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 686.378074][T12449] usbhid 10-1:0.0: can't add hid device: -71 [ 686.378240][T12449] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 686.393568][T12449] usb 10-1: USB disconnect, device number 9 [ 686.437725][ T5692] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 686.597446][ T5692] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 686.599394][ T5692] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 686.599431][ T5692] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 686.599458][ T5692] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 686.599509][ T5692] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 686.604011][ T5692] usb 2-1: config 0 descriptor?? [ 686.878663][ T5692] usbhid 2-1:0.0: can't add hid device: -71 [ 686.878784][ T5692] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 686.882680][ T5692] usb 2-1: USB disconnect, device number 90 [ 687.526504][T12437] usb 6-1: USB disconnect, device number 82 [ 687.707112][ T4984] ldm_validate_privheads(): Disk read failed. [ 687.707166][ T4984] loop0: [ 687.707213][ T4984] loop0: partition table partially beyond EOD, truncated [ 687.776332][ T5692] usb 8-1: USB disconnect, device number 69 [ 687.890480][T14978] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 688.105531][T14989] netlink: 56 bytes leftover after parsing attributes in process `syz.7.2779'. [ 688.323376][T15003] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2782'. [ 688.495481][T12437] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 688.595479][ T5692] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 688.646221][T12437] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 688.647941][T12437] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 688.647984][T12437] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 688.648112][T12437] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 688.648329][T12437] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 688.653807][T12437] usb 10-1: config 0 descriptor?? [ 688.785396][ T5692] usb 2-1: Using ep0 maxpacket: 32 [ 688.787160][ T5692] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 688.790153][ T5692] usb 2-1: config index 0 descriptor too short (expected 27632, got 27) [ 688.790200][ T5692] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 688.790278][ T5692] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 688.790304][ T5692] usb 2-1: config 1 has no interface number 0 [ 688.790358][ T5692] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 688.790381][ T5692] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 688.790433][ T5692] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 688.902010][ T5692] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 689.025127][T12437] usbhid 10-1:0.0: can't add hid device: -71 [ 689.025265][T12437] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 689.052915][T12437] usb 10-1: USB disconnect, device number 10 [ 689.101693][ T5692] snd_usb_pod 2-1:1.1: invalid control EP [ 689.101719][ T5692] snd_usb_pod 2-1:1.1: cannot start listening: -22 [ 689.103334][ T5692] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 689.103885][ T5692] snd_usb_pod 2-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 689.318012][T15015] netlink: 84 bytes leftover after parsing attributes in process `syz.6.2787'. [ 689.399781][ T5692] usb 2-1: USB disconnect, device number 91 [ 689.579796][ T4984] ldm_validate_privheads(): Disk read failed. [ 689.580337][ T4984] loop0: [ 689.580366][ T4984] loop0: partition table partially beyond EOD, truncated [ 689.988104][T12437] usb 6-1: new high-speed USB device number 83 using dummy_hcd [ 690.039816][T15032] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2793'. [ 690.106413][T12431] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 690.135502][T12437] usb 6-1: Using ep0 maxpacket: 16 [ 690.140698][T12437] usb 6-1: unable to get BOS descriptor or descriptor too short [ 690.140762][T12437] usb 6-1: New USB device found, idVendor=1235, idProduct=8212, bcdDevice= 0.40 [ 690.142573][T12437] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 690.142602][T12437] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 690.191921][T12437] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 690.191955][T12437] usb 6-1: Product: syz [ 690.191973][T12437] usb 6-1: Manufacturer: syz [ 690.191992][T12437] usb 6-1: SerialNumber: syz [ 690.255837][T12431] usb 10-1: device descriptor read/64, error -71 [ 690.495503][T12431] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 690.625901][T12431] usb 10-1: device descriptor read/64, error -71 [ 690.705423][T12449] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 690.735769][T12431] usb usb10-port1: attempt power cycle [ 690.772969][T12437] usb 6-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8212); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 690.773086][T12437] usb 6-1: Error initialising Scarlett Gen 3 Mixer Driver: -22 [ 690.832032][T12437] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 690.834441][T12437] usb 6-1: USB disconnect, device number 83 [ 690.871409][ T5612] udevd[5612]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 690.875584][T12449] usb 2-1: Using ep0 maxpacket: 8 [ 690.897543][T12449] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 690.909280][T12449] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 690.909339][T12449] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 690.909366][T12449] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 690.909395][T12449] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 690.909423][T12449] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 690.909470][T12449] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 691.075545][T12431] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 691.096210][T12431] usb 10-1: device descriptor read/8, error -71 [ 691.118340][T12449] usb 2-1: usb_control_msg returned -32 [ 691.118399][T12449] usbtmc 2-1:16.0: can't read capabilities [ 691.290013][T15046] 8021q: adding VLAN 0 to HW filter on device bond1 [ 691.336163][T12431] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 691.360157][T12431] usb 10-1: device descriptor read/8, error -71 [ 691.467126][T12431] usb usb10-port1: unable to enumerate USB device [ 691.895388][T15054] usbtmc 2-1:16.0: CHECK_CLEAR_STATUS returned 0 [ 692.491715][ T4984] ldm_validate_privheads(): Disk read failed. [ 692.491788][ T4984] loop0: [ 692.491810][ T4984] loop0: partition table partially beyond EOD, truncated [ 693.515884][T12449] usb 2-1: USB disconnect, device number 92 [ 693.991927][T12431] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 694.178961][T12431] usb 2-1: New USB device found, idVendor=1b80, idProduct=e396, bcdDevice=a7.b1 [ 694.180675][T12431] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 694.183817][T12431] usb 2-1: config 0 descriptor?? [ 694.271015][T12431] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 694.289617][T12431] dvb_usb_af9015 2-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 694.458219][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 694.458301][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 694.643241][T15065] netlink: 56 bytes leftover after parsing attributes in process `syz.9.2804'. [ 694.657779][T12439] usb 2-1: USB disconnect, device number 93 [ 695.132045][ T4984] ldm_validate_privheads(): Disk read failed. [ 695.132119][ T4984] loop0: [ 695.132140][ T4984] loop0: partition table partially beyond EOD, truncated [ 695.363428][T15091] mac80211_hwsim hwsim13 syzkaller0: left promiscuous mode [ 695.363481][T15091] mac80211_hwsim hwsim13 syzkaller0: left allmulticast mode [ 695.626460][T12431] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 695.626675][T12430] usb 6-1: new high-speed USB device number 84 using dummy_hcd [ 695.765702][T12430] usb 6-1: device descriptor read/64, error -71 [ 695.796830][T12431] usb 2-1: Using ep0 maxpacket: 8 [ 695.800361][T12431] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 695.807651][T12431] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 695.807828][T12431] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 695.807891][T12431] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 695.807962][T12431] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 695.808033][T12431] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 695.808145][T12431] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 695.885533][ T5692] usb 8-1: new high-speed USB device number 70 using dummy_hcd [ 696.027915][T12430] usb 6-1: new high-speed USB device number 85 using dummy_hcd [ 696.046071][ T5692] usb 8-1: Using ep0 maxpacket: 32 [ 696.051948][ T5692] usb 8-1: unable to get BOS descriptor or descriptor too short [ 696.052006][ T5692] usb 8-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice= 0.40 [ 696.073180][ T5692] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 696.073329][ T5692] usb 8-1: Product: syz [ 696.073380][ T5692] usb 8-1: Manufacturer: syz [ 696.073478][ T5692] usb 8-1: SerialNumber: syz [ 696.122797][T12431] usb 2-1: usb_control_msg returned -32 [ 696.122858][T12431] usbtmc 2-1:16.0: can't read capabilities [ 696.165522][T12432] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 696.165759][T12430] usb 6-1: device descriptor read/64, error -71 [ 696.207635][T15110] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2821'. [ 696.287740][T12430] usb usb6-port1: attempt power cycle [ 696.327340][T12432] usb 10-1: Using ep0 maxpacket: 32 [ 696.329103][T12432] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 696.330360][T12432] usb 10-1: config 1 interface 0 altsetting 1 endpoint 0x82 has invalid maxpacket 22576, setting to 1024 [ 696.330396][T12432] usb 10-1: config 1 interface 0 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 696.330425][T12432] usb 10-1: config 1 interface 0 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 696.330450][T12432] usb 10-1: config 1 interface 0 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 696.330477][T12432] usb 10-1: config 1 interface 0 has no altsetting 0 [ 696.332725][ T5692] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 696.334235][T12432] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 696.334265][T12432] usb 10-1: Product: ྎ嬒쮊걤秠ὲ␧퐠懸ៈ≬곽랓꒏瘛ꚫ椯覝徙磋됍⩑⾤鲗굛茲祷௺죢ஆ䈊婢᳔狕蛸폶︋ꟓ㴼ி﯂赉ၣ탅뵠꘦ᣤﶟ꾧勖깞튟䡗ኘᓳ㒉봑릀鞘혳߱ٔ-ﭾ柡㊭ࡊ苒鉚컁荱ꬖ谊䍆䴺潮槿嘺ᄌ죌漲䚜ನﲁﻷ钧╦ꁆ৅泊뗺﯄揧븚ܓ皂䮈쐈 [ 696.334308][T12432] usb 10-1: Manufacturer: ᰁ [ 696.334320][T12432] usb 10-1: SerialNumber: 徯躤뀾Ś芻㊈ᘄꓢ薨橴喳ꆝ쁯ꊀ㳷ᛘ䪕ꏿ渥﶐ﰸ홏瘩Ό闻䥈漆໸쾡ć䦚ꆙ╜ᜑ蛓紈怒ﻉ䟯᳻挵ꏌ舾ۓ䎝宖쵘ะꝸ [ 696.374734][T15101] raw-gadget.4 gadget.9: fail, usb_ep_enable returned -22 [ 696.573438][ T5692] usb 8-1: USB disconnect, device number 70 [ 696.628249][T12304] udevd[12304]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 696.655621][T12430] usb 6-1: new high-speed USB device number 86 using dummy_hcd [ 696.663820][T15101] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 696.664866][T15101] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 696.692491][T12430] usb 6-1: device descriptor read/8, error -71 [ 696.720515][T12432] usb 10-1: No union descriptors [ 696.732106][T12432] usb 10-1: USB disconnect, device number 15 [ 696.893026][T15120] usbtmc 2-1:16.0: CHECK_CLEAR_STATUS returned 0 [ 696.935633][T12430] usb 6-1: new high-speed USB device number 87 using dummy_hcd [ 696.956108][T12430] usb 6-1: device descriptor read/8, error -71 [ 697.065833][T12430] usb usb6-port1: unable to enumerate USB device [ 697.115410][T12437] usb 8-1: new high-speed USB device number 71 using dummy_hcd [ 697.265469][T12437] usb 8-1: Using ep0 maxpacket: 16 [ 697.268731][T12437] usb 8-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 697.268783][T12437] usb 8-1: too many configurations: 112, using maximum allowed: 8 [ 697.311166][T12437] usb 8-1: New USB device strings: Mfr=144, Product=246, SerialNumber=0 [ 697.311201][T12437] usb 8-1: Product: syz [ 697.311224][T12437] usb 8-1: Manufacturer: syz [ 697.339344][T12437] r8152-cfgselector 8-1: Unknown version 0x0000 [ 697.339376][T12437] r8152-cfgselector 8-1: config 0 descriptor?? [ 697.396652][T15126] fuse: Bad value for 'fd' [ 697.553647][ T5692] r8152-cfgselector 8-1: USB disconnect, device number 71 [ 698.443927][T12432] usb 2-1: USB disconnect, device number 94 [ 698.544342][T15153] netlink: 100 bytes leftover after parsing attributes in process `syz.1.2835'. [ 698.544375][T15153] netlink: 100 bytes leftover after parsing attributes in process `syz.1.2835'. [ 699.135521][ T5692] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 699.305378][ T5692] usb 2-1: Using ep0 maxpacket: 8 [ 699.306322][ T5692] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 699.307908][ T5692] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 699.307978][ T5692] usb 2-1: config 179 has no interface number 0 [ 699.308034][ T5692] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 699.308069][ T5692] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 699.308103][ T5692] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 699.308134][ T5692] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 699.308166][ T5692] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 699.308214][ T5692] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 699.314048][T15160] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 699.505658][T12432] usb 6-1: new high-speed USB device number 88 using dummy_hcd [ 699.619415][T12430] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input33 [ 699.670287][T12432] usb 6-1: Using ep0 maxpacket: 16 [ 699.696505][T12432] usb 6-1: unable to get BOS descriptor or descriptor too short [ 699.696657][T12432] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 699.698752][T12432] usb 6-1: config 1 has an invalid descriptor of length 203, skipping remainder of the config [ 699.698804][T12432] usb 6-1: config 1 interface 0 altsetting 123 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 699.698910][T12432] usb 6-1: config 1 interface 0 has no altsetting 0 [ 699.755755][T12432] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 699.755788][T12432] usb 6-1: Product: syz [ 699.755806][T12432] usb 6-1: Manufacturer: syz [ 699.755822][T12432] usb 6-1: SerialNumber: syz [ 699.868959][T12448] usb 2-1: USB disconnect, device number 95 [ 699.869041][ C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 699.869581][ C0] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 700.220908][T15179] netlink: 71 bytes leftover after parsing attributes in process `syz.7.2844'. [ 700.230963][T12430] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 700.333164][T15182] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2844'. [ 700.381942][T12430] usb 10-1: device descriptor read/64, error -71 [ 700.615543][T12430] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 700.713549][T12432] cdc_ether 6-1:1.0: skipping garbage [ 700.713576][T12432] cdc_ether 6-1:1.0: skipping garbage [ 700.713590][T12432] cdc_ether 6-1:1.0: skipping garbage [ 700.713840][T12432] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22 [ 700.740888][T12432] usb 6-1: USB disconnect, device number 88 [ 700.769302][T12430] usb 10-1: device descriptor read/64, error -71 [ 700.875936][T12430] usb usb10-port1: attempt power cycle [ 700.885419][T12448] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 700.931647][T15186] netlink: 104 bytes leftover after parsing attributes in process `syz.6.2846'. [ 700.931678][T15186] netlink: 104 bytes leftover after parsing attributes in process `syz.6.2846'. [ 701.012395][T15188] mac80211_hwsim hwsim13 syzkaller0: entered promiscuous mode [ 701.012475][T15188] mac80211_hwsim hwsim13 syzkaller0: entered allmulticast mode [ 701.032898][T15188] tipc: Started in network mode [ 701.033010][T15188] tipc: Node identity 080211, cluster identity 4711 [ 701.033240][T15188] tipc: Enabled bearer , priority 0 [ 701.034152][T15188] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2847'. [ 701.047638][T12448] usb 2-1: Using ep0 maxpacket: 8 [ 701.064697][T12448] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 701.081095][T12448] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 701.081159][T12448] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 701.081184][T12448] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 701.081213][T12448] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 701.081240][T12448] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 701.081288][T12448] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 701.235599][T12430] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 701.258523][T12430] usb 10-1: device descriptor read/8, error -71 [ 701.289532][T15193] vim2m vim2m.0: vidioc_s_fmt queue busy [ 701.362854][T12448] usb 2-1: usb_control_msg returned -32 [ 701.362917][T12448] usbtmc 2-1:16.0: can't read capabilities [ 701.500224][T12430] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 701.519475][T12430] usb 10-1: device descriptor read/8, error -71 [ 701.625928][T12430] usb usb10-port1: unable to enumerate USB device [ 701.645687][ T5692] usb 6-1: new high-speed USB device number 89 using dummy_hcd [ 701.775496][ T5692] usb 6-1: device descriptor read/64, error -71 [ 701.825281][T15206] FAULT_INJECTION: forcing a failure. [ 701.825281][T15206] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 701.827954][T15206] CPU: 0 UID: 0 PID: 15206 Comm: syz.7.2852 Tainted: G L syzkaller #0 PREEMPT(full) [ 701.827998][T15206] Tainted: [L]=SOFTLOCKUP [ 701.828007][T15206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 701.828027][T15206] Call Trace: [ 701.828083][T15206] [ 701.828138][T15206] dump_stack_lvl+0xe8/0x150 [ 701.828253][T15206] should_fail_ex+0x410/0x560 [ 701.828306][T15206] _copy_from_user+0x2d/0xb0 [ 701.828335][T15206] get_compat_msghdr+0xb3/0x4c0 [ 701.828397][T15206] ? __pfx_get_compat_msghdr+0x10/0x10 [ 701.828464][T15206] ___sys_sendmsg+0x201/0x360 [ 701.828493][T15206] ? __lock_acquire+0x747/0x2de0 [ 701.828563][T15206] ? __pfx____sys_sendmsg+0x10/0x10 [ 701.828590][T15206] ? get_pid_task+0x20/0x1f0 [ 701.828633][T15206] ? get_pid_task+0x20/0x1f0 [ 701.828651][T15206] ? get_pid_task+0x20/0x1f0 [ 701.828700][T15206] ? __fget_files+0x2a/0x420 [ 701.828794][T15206] ? __fget_files+0x3a2/0x420 [ 701.828833][T15206] __sys_sendmsg+0x177/0x240 [ 701.828863][T15206] ? __pfx___sys_sendmsg+0x10/0x10 [ 701.828907][T15206] __do_fast_syscall_32+0x27a/0x6a0 [ 701.828936][T15206] ? do_fast_syscall_32+0x33/0x70 [ 701.828977][T15206] ? asm_int80_emulation+0x1a/0x20 [ 701.829001][T15206] ? do_int80_emulation+0x299/0x500 [ 701.829026][T15206] ? trace_irq_disable+0x3b/0x140 [ 701.829055][T15206] do_fast_syscall_32+0x33/0x70 [ 701.829083][T15206] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 701.829112][T15206] RIP: 0023:0xf7ff40ec [ 701.829161][T15206] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 701.829211][T15206] RSP: 002b:00000000f54b650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 701.829264][T15206] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000480 [ 701.829282][T15206] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 701.829296][T15206] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 701.829311][T15206] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 701.829326][T15206] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 701.829358][T15206] [ 702.088264][T15207] usbtmc 2-1:16.0: CHECK_CLEAR_STATUS returned 0 [ 702.145784][T12449] tipc: Node number set to 134353152 [ 702.175433][ T5692] usb 6-1: new high-speed USB device number 90 using dummy_hcd [ 702.251660][T15211] FAULT_INJECTION: forcing a failure. [ 702.251660][T15211] name failslab, interval 1, probability 0, space 0, times 0 [ 702.251726][T15211] CPU: 1 UID: 0 PID: 15211 Comm: syz.7.2854 Tainted: G L syzkaller #0 PREEMPT(full) [ 702.251758][T15211] Tainted: [L]=SOFTLOCKUP [ 702.251768][T15211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 702.251783][T15211] Call Trace: [ 702.251794][T15211] [ 702.251805][T15211] dump_stack_lvl+0xe8/0x150 [ 702.251847][T15211] should_fail_ex+0x410/0x560 [ 702.251885][T15211] ? __alloc_skb+0x1db/0x7a0 [ 702.251914][T15211] should_failslab+0xa8/0x100 [ 702.252018][T15211] ? __alloc_skb+0x1db/0x7a0 [ 702.252043][T15211] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 702.252112][T15211] ? __alloc_skb+0x18d/0x7a0 [ 702.252138][T15211] ? __alloc_skb+0x1db/0x7a0 [ 702.252174][T15211] __alloc_skb+0x1db/0x7a0 [ 702.252205][T15211] netlink_sendmsg+0x5d4/0xb40 [ 702.252314][T15211] ? __pfx_netlink_sendmsg+0x10/0x10 [ 702.252358][T15211] ? apparmor_socket_sendmsg+0x98/0x360 [ 702.252416][T15211] ? __pfx_netlink_sendmsg+0x10/0x10 [ 702.252449][T15211] sock_sendmsg_nosec+0x13a/0x180 [ 702.252489][T15211] ____sys_sendmsg+0x54e/0x850 [ 702.252526][T15211] ? __pfx_____sys_sendmsg+0x10/0x10 [ 702.252573][T15211] ___sys_sendmsg+0x2a5/0x360 [ 702.252603][T15211] ? __lock_acquire+0x747/0x2de0 [ 702.252633][T15211] ? __pfx____sys_sendmsg+0x10/0x10 [ 702.252662][T15211] ? get_pid_task+0x20/0x1f0 [ 702.252696][T15211] ? get_pid_task+0x20/0x1f0 [ 702.252716][T15211] ? get_pid_task+0x20/0x1f0 [ 702.252770][T15211] ? __fget_files+0x2a/0x420 [ 702.252803][T15211] ? __fget_files+0x3a2/0x420 [ 702.252845][T15211] __sys_sendmsg+0x177/0x240 [ 702.252878][T15211] ? __pfx___sys_sendmsg+0x10/0x10 [ 702.252930][T15211] __do_fast_syscall_32+0x27a/0x6a0 [ 702.252960][T15211] ? do_fast_syscall_32+0x33/0x70 [ 702.252986][T15211] ? asm_int80_emulation+0x1a/0x20 [ 702.253010][T15211] ? do_int80_emulation+0x299/0x500 [ 702.253036][T15211] ? trace_irq_disable+0x3b/0x140 [ 702.253064][T15211] do_fast_syscall_32+0x33/0x70 [ 702.253092][T15211] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 702.253121][T15211] RIP: 0023:0xf7ff40ec [ 702.253144][T15211] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 702.253164][T15211] RSP: 002b:00000000f54b650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 702.253190][T15211] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000200 [ 702.253207][T15211] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 702.253222][T15211] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 702.253242][T15211] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 702.253257][T15211] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 702.253290][T15211] [ 702.333517][ T5692] usb 6-1: device descriptor read/64, error -71 [ 702.513154][ T5692] usb usb6-port1: attempt power cycle [ 702.629611][T15213] syzkaller0: entered promiscuous mode [ 702.629645][T15213] syzkaller0: entered allmulticast mode [ 702.765655][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 702.895531][T12448] usb 8-1: new high-speed USB device number 72 using dummy_hcd [ 702.927595][ T5692] usb 6-1: new high-speed USB device number 91 using dummy_hcd [ 702.946193][ T5692] usb 6-1: device descriptor read/8, error -71 [ 703.051257][T12448] usb 8-1: Using ep0 maxpacket: 32 [ 703.053204][T12448] usb 8-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 703.063690][T12448] usb 8-1: config index 0 descriptor too short (expected 27632, got 27) [ 703.063788][T12448] usb 8-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 703.063868][T12448] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 703.063939][T12448] usb 8-1: config 1 has no interface number 0 [ 703.064057][T12448] usb 8-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 703.064130][T12448] usb 8-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 703.064257][T12448] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 703.156167][T12448] snd_usb_pod 8-1:1.1: Line 6 Pocket POD found [ 703.217089][T15215] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2856'. [ 703.235646][ T5692] usb 6-1: new high-speed USB device number 92 using dummy_hcd [ 703.257156][ T5692] usb 6-1: device descriptor read/8, error -71 [ 703.283934][T15215] fuse: Bad value for 'rootmode' [ 703.358566][T12448] snd_usb_pod 8-1:1.1: invalid control EP [ 703.358595][T12448] snd_usb_pod 8-1:1.1: cannot start listening: -22 [ 703.358856][T12448] snd_usb_pod 8-1:1.1: Line 6 Pocket POD now disconnected [ 703.386027][ T5692] usb usb6-port1: unable to enumerate USB device [ 703.394858][T12448] snd_usb_pod 8-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 703.652914][T12432] usb 2-1: USB disconnect, device number 96 [ 703.723433][ T5692] usb 8-1: USB disconnect, device number 72 [ 703.803174][T15223] netlink: 104 bytes leftover after parsing attributes in process `syz.9.2859'. [ 703.803197][T15223] netlink: 104 bytes leftover after parsing attributes in process `syz.9.2859'. [ 703.978158][T15232] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2863'. [ 703.978191][T15232] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 703.981147][T15232] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2863'. [ 703.981173][T15232] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 704.165642][T12432] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 704.315431][T12432] usb 2-1: Using ep0 maxpacket: 32 [ 704.316444][T12432] usb 2-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 704.323300][T12432] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 704.323329][T12432] usb 2-1: config 0 has no interface number 0 [ 704.323373][T12432] usb 2-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 704.324144][T12432] usb 2-1: config 0 interface 1 has no altsetting 0 [ 704.324731][ T4984] ldm_validate_privheads(): Disk read failed. [ 704.324881][ T4984] loop0: [ 704.324907][ T4984] loop0: partition table partially beyond EOD, truncated [ 704.374173][T12432] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 704.374208][T12432] usb 2-1: Product: syz [ 704.403950][T12432] usb 2-1: Manufacturer: syz [ 704.403977][T12432] usb 2-1: SerialNumber: syz [ 704.417124][T12432] usb 2-1: config 0 descriptor?? [ 704.741914][T12432] cx231xx 2-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 704.790247][T12432] cx231xx 2-1:0.1: Failed to read PCB config [ 704.790410][T12432] cx231xx 2-1:0.1: probe with driver cx231xx failed with error -71 [ 704.795144][T12432] usb 2-1: USB disconnect, device number 97 [ 704.830048][T15245] FAULT_INJECTION: forcing a failure. [ 704.830048][T15245] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 704.830090][T15245] CPU: 1 UID: 0 PID: 15245 Comm: syz.7.2868 Tainted: G L syzkaller #0 PREEMPT(full) [ 704.830120][T15245] Tainted: [L]=SOFTLOCKUP [ 704.830130][T15245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 704.830144][T15245] Call Trace: [ 704.830155][T15245] [ 704.830165][T15245] dump_stack_lvl+0xe8/0x150 [ 704.830217][T15245] should_fail_ex+0x410/0x560 [ 704.830247][T15245] _copy_from_iter+0x1d3/0x1660 [ 704.830337][T15245] ? __alloc_skb+0x27a/0x7a0 [ 704.830381][T15245] ? __alloc_skb+0x27a/0x7a0 [ 704.830407][T15245] ? __alloc_skb+0x27a/0x7a0 [ 704.830433][T15245] ? __pfx__copy_from_iter+0x10/0x10 [ 704.830468][T15245] ? kmem_cache_alloc_node_noprof+0x1f9/0x610 [ 704.830499][T15245] ? __alloc_skb+0x27a/0x7a0 [ 704.830519][T15245] ? __alloc_skb+0x27a/0x7a0 [ 704.830545][T15245] ? netlink_sendmsg+0x650/0xb40 [ 704.830574][T15245] ? skb_put+0x112/0x210 [ 704.830600][T15245] netlink_sendmsg+0x6c0/0xb40 [ 704.830637][T15245] ? __pfx_netlink_sendmsg+0x10/0x10 [ 704.830677][T15245] ? apparmor_socket_sendmsg+0x98/0x360 [ 704.830704][T15245] ? __pfx_netlink_sendmsg+0x10/0x10 [ 704.830734][T15245] sock_sendmsg_nosec+0x13a/0x180 [ 704.830771][T15245] ____sys_sendmsg+0x54e/0x850 [ 704.830814][T15245] ? __pfx_____sys_sendmsg+0x10/0x10 [ 704.830865][T15245] ___sys_sendmsg+0x2a5/0x360 [ 704.830886][T15245] ? __lock_acquire+0x747/0x2de0 [ 704.830907][T15245] ? __pfx____sys_sendmsg+0x10/0x10 [ 704.830927][T15245] ? get_pid_task+0x20/0x1f0 [ 704.830943][T15245] ? get_pid_task+0x20/0x1f0 [ 704.830957][T15245] ? get_pid_task+0x20/0x1f0 [ 704.830999][T15245] ? __fget_files+0x2a/0x420 [ 704.831021][T15245] ? __fget_files+0x3a2/0x420 [ 704.831051][T15245] __sys_sendmsg+0x177/0x240 [ 704.831074][T15245] ? __pfx___sys_sendmsg+0x10/0x10 [ 704.831109][T15245] __do_fast_syscall_32+0x27a/0x6a0 [ 704.831135][T15245] ? do_fast_syscall_32+0x33/0x70 [ 704.831153][T15245] ? asm_int80_emulation+0x1a/0x20 [ 704.831170][T15245] ? do_int80_emulation+0x299/0x500 [ 704.831188][T15245] ? trace_irq_disable+0x3b/0x140 [ 704.831207][T15245] do_fast_syscall_32+0x33/0x70 [ 704.831225][T15245] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 704.831245][T15245] RIP: 0023:0xf7ff40ec [ 704.831261][T15245] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 704.831276][T15245] RSP: 002b:00000000f54b650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 704.831294][T15245] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000480 [ 704.831306][T15245] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 704.831316][T15245] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 704.831326][T15245] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 704.831336][T15245] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 704.831358][T15245] [ 705.465456][T12432] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 705.526560][T12449] usb 8-1: new high-speed USB device number 73 using dummy_hcd [ 705.546892][T15252] __nla_validate_parse: 1 callbacks suppressed [ 705.546994][T15252] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2871'. [ 705.625894][T12432] usb 2-1: Using ep0 maxpacket: 32 [ 705.628011][T12432] usb 2-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 705.629414][T12432] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 705.629446][T12432] usb 2-1: config 0 has no interface number 0 [ 705.629490][T12432] usb 2-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 705.629517][T12432] usb 2-1: config 0 interface 1 has no altsetting 0 [ 705.632237][T12432] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 705.632267][T12432] usb 2-1: Product: syz [ 705.632284][T12432] usb 2-1: Manufacturer: syz [ 705.632301][T12432] usb 2-1: SerialNumber: syz [ 705.676056][T12449] usb 8-1: Using ep0 maxpacket: 8 [ 705.677740][T12449] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 705.685412][T12449] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 705.685557][T12449] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 705.685627][T12449] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 705.685698][T12449] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 705.685772][T12449] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 705.685920][T12449] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 705.698102][T12432] usb 2-1: config 0 descriptor?? [ 705.926531][T12432] cx231xx 2-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 705.931250][T12432] cx231xx 2-1:0.1: bad scenario!!!!! [ 705.931250][T12432] config_info=0 [ 705.931283][T12432] cx231xx 2-1:0.1: Failed to read PCB config [ 705.935566][T12429] usb 10-1: new full-speed USB device number 20 using dummy_hcd [ 705.972810][T12449] usb 8-1: usb_control_msg returned -32 [ 705.972877][T12449] usbtmc 8-1:16.0: can't read capabilities [ 706.106175][T12429] usb 10-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 706.107690][T12429] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 706.107730][T12429] usb 10-1: can't read configurations, error -61 [ 706.146654][T12449] usb 2-1: USB disconnect, device number 98 [ 706.235603][T12429] usb 10-1: new full-speed USB device number 21 using dummy_hcd [ 706.406293][T12429] usb 10-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 706.409597][T12429] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 706.409629][T12429] usb 10-1: can't read configurations, error -61 [ 706.410042][T12429] usb usb10-port1: attempt power cycle [ 706.746566][T12429] usb 10-1: new full-speed USB device number 22 using dummy_hcd [ 706.747351][T15254] usbtmc 8-1:16.0: CHECK_CLEAR_STATUS returned b6 [ 706.771732][ T5619] Bluetooth: hci2: command 0x0406 tx timeout [ 706.783840][T12429] usb 10-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 706.808375][T12429] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 706.808420][T12429] usb 10-1: can't read configurations, error -61 [ 706.935554][T12429] usb 10-1: new full-speed USB device number 23 using dummy_hcd [ 706.957025][T12429] usb 10-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 706.959076][T12448] usb 8-1: USB disconnect, device number 73 [ 706.960002][T12429] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 706.960042][T12429] usb 10-1: can't read configurations, error -61 [ 706.961736][T12429] usb usb10-port1: unable to enumerate USB device [ 707.145447][T12449] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 707.296629][T12449] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 707.297873][T12449] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 707.300425][T12449] usb 2-1: config 0 descriptor?? [ 707.304748][T12449] cp210x 2-1:0.0: cp210x converter detected [ 707.504012][T12449] cp210x 2-1:0.0: failed to get vendor val 0x370c size 13: -121 [ 707.504040][T12449] cp210x 2-1:0.0: GPIO initialisation failed: -121 [ 707.524160][T12449] usb 2-1: cp210x converter now attached to ttyUSB0 [ 707.612550][T15266] netlink: 104 bytes leftover after parsing attributes in process `syz.7.2876'. [ 707.612575][T15266] netlink: 104 bytes leftover after parsing attributes in process `syz.7.2876'. [ 707.693531][ T4984] ldm_validate_privheads(): Disk read failed. [ 707.693612][ T4984] loop0: [ 707.693635][ T4984] loop0: partition table partially beyond EOD, truncated [ 707.713945][T12429] usb 2-1: USB disconnect, device number 99 [ 707.734932][T12429] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 707.808286][T12429] cp210x 2-1:0.0: device disconnected [ 707.994902][T15275] FAULT_INJECTION: forcing a failure. [ 707.994902][T15275] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 707.994951][T15275] CPU: 0 UID: 0 PID: 15275 Comm: syz.6.2880 Tainted: G L syzkaller #0 PREEMPT(full) [ 707.994982][T15275] Tainted: [L]=SOFTLOCKUP [ 707.994992][T15275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 707.995024][T15275] Call Trace: [ 707.995035][T15275] [ 707.995046][T15275] dump_stack_lvl+0xe8/0x150 [ 707.995091][T15275] should_fail_ex+0x410/0x560 [ 707.995123][T15275] _copy_from_iter+0x1d3/0x1660 [ 707.995151][T15275] ? __alloc_skb+0x27a/0x7a0 [ 707.995180][T15275] ? __alloc_skb+0x27a/0x7a0 [ 707.995207][T15275] ? __alloc_skb+0x27a/0x7a0 [ 707.995234][T15275] ? __pfx__copy_from_iter+0x10/0x10 [ 707.995257][T15275] ? kmem_cache_alloc_node_noprof+0x1f9/0x610 [ 707.995300][T15275] ? __alloc_skb+0x27a/0x7a0 [ 707.995322][T15275] ? __alloc_skb+0x27a/0x7a0 [ 707.995353][T15275] ? netlink_sendmsg+0x650/0xb40 [ 707.995385][T15275] ? skb_put+0x112/0x210 [ 707.995415][T15275] netlink_sendmsg+0x6c0/0xb40 [ 707.995458][T15275] ? __pfx_netlink_sendmsg+0x10/0x10 [ 707.995499][T15275] ? apparmor_socket_sendmsg+0x98/0x360 [ 707.995529][T15275] ? __pfx_netlink_sendmsg+0x10/0x10 [ 707.995563][T15275] sock_sendmsg_nosec+0x13a/0x180 [ 707.995603][T15275] ____sys_sendmsg+0x54e/0x850 [ 707.995639][T15275] ? __pfx_____sys_sendmsg+0x10/0x10 [ 707.995686][T15275] ___sys_sendmsg+0x2a5/0x360 [ 707.995716][T15275] ? __lock_acquire+0x747/0x2de0 [ 707.995746][T15275] ? __pfx____sys_sendmsg+0x10/0x10 [ 707.995776][T15275] ? get_pid_task+0x20/0x1f0 [ 707.995800][T15275] ? get_pid_task+0x20/0x1f0 [ 707.995820][T15275] ? get_pid_task+0x20/0x1f0 [ 707.995873][T15275] ? __fget_files+0x2a/0x420 [ 707.995906][T15275] ? __fget_files+0x3a2/0x420 [ 707.995948][T15275] __sys_sendmsg+0x177/0x240 [ 707.995981][T15275] ? __pfx___sys_sendmsg+0x10/0x10 [ 707.996030][T15275] __do_fast_syscall_32+0x27a/0x6a0 [ 707.996059][T15275] ? do_fast_syscall_32+0x33/0x70 [ 707.996086][T15275] ? asm_int80_emulation+0x1a/0x20 [ 707.996109][T15275] ? do_int80_emulation+0x299/0x500 [ 707.996135][T15275] ? trace_irq_disable+0x3b/0x140 [ 707.996164][T15275] do_fast_syscall_32+0x33/0x70 [ 707.996190][T15275] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 707.996219][T15275] RIP: 0023:0xf7f650ec [ 707.996240][T15275] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 707.996262][T15275] RSP: 002b:00000000f542650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 707.996288][T15275] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000480 [ 707.996313][T15275] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 707.996334][T15275] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 707.996348][T15275] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 707.996362][T15275] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 707.996394][T15275] [ 708.678076][T15280] loop8: detected capacity change from 0 to 9 [ 708.724029][T15280] Dev loop8: unable to read RDB block 9 [ 708.724097][T15280] loop8: unable to read partition table [ 708.724288][T15280] loop8: partition table beyond EOD, truncated [ 708.724304][T15280] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 708.801547][T15272] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2879'. [ 708.801580][T15272] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2879'. [ 708.943648][T15292] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2885'. [ 708.944421][T15292] netlink: 'syz.1.2885': attribute type 11 has an invalid length. [ 709.333654][T15301] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2889'. [ 709.333687][T15301] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2889'. [ 709.373627][T15303] netlink: 104 bytes leftover after parsing attributes in process `syz.7.2890'. [ 709.373657][T15303] netlink: 104 bytes leftover after parsing attributes in process `syz.7.2890'. [ 709.373685][T15303] FAULT_INJECTION: forcing a failure. [ 709.373685][T15303] name failslab, interval 1, probability 0, space 0, times 0 [ 709.373719][T15303] CPU: 0 UID: 0 PID: 15303 Comm: syz.7.2890 Tainted: G L syzkaller #0 PREEMPT(full) [ 709.373750][T15303] Tainted: [L]=SOFTLOCKUP [ 709.373759][T15303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 709.373774][T15303] Call Trace: [ 709.373784][T15303] [ 709.373795][T15303] dump_stack_lvl+0xe8/0x150 [ 709.373837][T15303] should_fail_ex+0x410/0x560 [ 709.373867][T15303] ? __alloc_skb+0x1db/0x7a0 [ 709.373893][T15303] should_failslab+0xa8/0x100 [ 709.373923][T15303] ? __alloc_skb+0x1db/0x7a0 [ 709.373947][T15303] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 709.373984][T15303] ? __alloc_skb+0x18d/0x7a0 [ 709.374010][T15303] ? __alloc_skb+0x1db/0x7a0 [ 709.374042][T15303] __alloc_skb+0x1db/0x7a0 [ 709.374072][T15303] netlink_ack+0x136/0xb30 [ 709.374103][T15303] ? __pfx___mutex_trylock_common+0x10/0x10 [ 709.374137][T15303] ? rcu_is_watching+0x16/0xb0 [ 709.374248][T15303] ? trace_contention_end+0x3d/0x140 [ 709.374286][T15303] netlink_rcv_skb+0x2a4/0x4a0 [ 709.374327][T15303] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 709.374386][T15303] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 709.374438][T15303] ? netlink_deliver_tap+0x2e/0x1b0 [ 709.374470][T15303] ? netlink_deliver_tap+0x2e/0x1b0 [ 709.374506][T15303] xfrm_netlink_rcv+0x79/0x90 [ 709.374531][T15303] netlink_unicast+0x7bd/0x940 [ 709.374573][T15303] netlink_sendmsg+0x813/0xb40 [ 709.374615][T15303] ? __pfx_netlink_sendmsg+0x10/0x10 [ 709.374658][T15303] ? apparmor_socket_sendmsg+0x98/0x360 [ 709.374687][T15303] ? __pfx_netlink_sendmsg+0x10/0x10 [ 709.374719][T15303] sock_sendmsg_nosec+0x13a/0x180 [ 709.374758][T15303] ____sys_sendmsg+0x54e/0x850 [ 709.374794][T15303] ? __pfx_____sys_sendmsg+0x10/0x10 [ 709.374842][T15303] ___sys_sendmsg+0x2a5/0x360 [ 709.374870][T15303] ? __lock_acquire+0x747/0x2de0 [ 709.374899][T15303] ? __pfx____sys_sendmsg+0x10/0x10 [ 709.374928][T15303] ? get_pid_task+0x20/0x1f0 [ 709.374951][T15303] ? get_pid_task+0x20/0x1f0 [ 709.374971][T15303] ? get_pid_task+0x20/0x1f0 [ 709.375026][T15303] ? __fget_files+0x2a/0x420 [ 709.375057][T15303] ? __fget_files+0x3a2/0x420 [ 709.375099][T15303] __sys_sendmsg+0x177/0x240 [ 709.375131][T15303] ? __pfx___sys_sendmsg+0x10/0x10 [ 709.375182][T15303] __do_fast_syscall_32+0x27a/0x6a0 [ 709.375210][T15303] ? do_fast_syscall_32+0x33/0x70 [ 709.375236][T15303] ? asm_int80_emulation+0x1a/0x20 [ 709.375259][T15303] ? do_int80_emulation+0x299/0x500 [ 709.375282][T15303] ? trace_irq_disable+0x3b/0x140 [ 709.375317][T15303] do_fast_syscall_32+0x33/0x70 [ 709.375345][T15303] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 709.375373][T15303] RIP: 0023:0xf7ff40ec [ 709.375396][T15303] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 709.375417][T15303] RSP: 002b:00000000f54b650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 709.375443][T15303] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000200 [ 709.375459][T15303] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 709.375474][T15303] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 709.375488][T15303] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 709.375503][T15303] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 709.375536][T15303] [ 709.785466][ T9222] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 709.843870][T15310] FAULT_INJECTION: forcing a failure. [ 709.843870][T15310] name failslab, interval 1, probability 0, space 0, times 0 [ 709.843917][T15310] CPU: 1 UID: 0 PID: 15310 Comm: syz.7.2892 Tainted: G L syzkaller #0 PREEMPT(full) [ 709.843949][T15310] Tainted: [L]=SOFTLOCKUP [ 709.843958][T15310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 709.843973][T15310] Call Trace: [ 709.843982][T15310] [ 709.843991][T15310] dump_stack_lvl+0xe8/0x150 [ 709.844029][T15310] should_fail_ex+0x410/0x560 [ 709.844061][T15310] should_failslab+0xa8/0x100 [ 709.844090][T15310] __kmalloc_noprof+0xfe/0x720 [ 709.844181][T15310] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 709.844210][T15310] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 709.844245][T15310] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 709.844281][T15310] genl_family_rcv_msg_doit+0xda/0x340 [ 709.844314][T15310] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 709.844349][T15310] ? apparmor_capable+0x126/0x170 [ 709.844425][T15310] ? bpf_lsm_capable+0x9/0x20 [ 709.844470][T15310] ? security_capable+0x7e/0x2c0 [ 709.844525][T15310] genl_rcv_msg+0x614/0x7a0 [ 709.844555][T15310] ? __pfx_genl_rcv_msg+0x10/0x10 [ 709.844579][T15310] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 709.844636][T15310] ? __pfx_nl80211_connect+0x10/0x10 [ 709.844682][T15310] ? __pfx_nl80211_post_doit+0x10/0x10 [ 709.844732][T15310] netlink_rcv_skb+0x226/0x4a0 [ 709.844765][T15310] ? __pfx_genl_rcv_msg+0x10/0x10 [ 709.844792][T15310] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 709.844843][T15310] ? down_read+0x2be/0x330 [ 709.844909][T15310] genl_rcv+0x28/0x40 [ 709.844932][T15310] netlink_unicast+0x7bd/0x940 [ 709.844973][T15310] netlink_sendmsg+0x813/0xb40 [ 709.845016][T15310] ? __pfx_netlink_sendmsg+0x10/0x10 [ 709.845056][T15310] ? apparmor_socket_sendmsg+0x98/0x360 [ 709.845084][T15310] ? __pfx_netlink_sendmsg+0x10/0x10 [ 709.845113][T15310] sock_sendmsg_nosec+0x13a/0x180 [ 709.845150][T15310] ____sys_sendmsg+0x54e/0x850 [ 709.845186][T15310] ? __pfx_____sys_sendmsg+0x10/0x10 [ 709.845232][T15310] ___sys_sendmsg+0x2a5/0x360 [ 709.845260][T15310] ? __lock_acquire+0x747/0x2de0 [ 709.845287][T15310] ? __pfx____sys_sendmsg+0x10/0x10 [ 709.845315][T15310] ? get_pid_task+0x20/0x1f0 [ 709.845335][T15310] ? get_pid_task+0x20/0x1f0 [ 709.845354][T15310] ? get_pid_task+0x20/0x1f0 [ 709.845409][T15310] ? __fget_files+0x2a/0x420 [ 709.845440][T15310] ? __fget_files+0x3a2/0x420 [ 709.845481][T15310] __sys_sendmsg+0x177/0x240 [ 709.845513][T15310] ? __pfx___sys_sendmsg+0x10/0x10 [ 709.845562][T15310] __do_fast_syscall_32+0x27a/0x6a0 [ 709.845591][T15310] ? do_fast_syscall_32+0x33/0x70 [ 709.845616][T15310] ? asm_int80_emulation+0x1a/0x20 [ 709.845639][T15310] ? do_int80_emulation+0x299/0x500 [ 709.845664][T15310] ? trace_irq_disable+0x3b/0x140 [ 709.845701][T15310] do_fast_syscall_32+0x33/0x70 [ 709.845728][T15310] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 709.845756][T15310] RIP: 0023:0xf7ff40ec [ 709.845778][T15310] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 709.845800][T15310] RSP: 002b:00000000f54b650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 709.845827][T15310] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000480 [ 709.845843][T15310] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 709.845857][T15310] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 709.845871][T15310] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 709.845885][T15310] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 709.845919][T15310] [ 710.046152][ T5692] usb 10-1: new high-speed USB device number 24 using dummy_hcd [ 710.232523][ T5692] usb 10-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 710.245209][ T5692] usb 10-1: config index 0 descriptor too short (expected 170, got 72) [ 710.272045][ T5692] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 710.272082][ T5692] usb 10-1: Product: syz [ 710.272100][ T5692] usb 10-1: Manufacturer: syz [ 710.272117][ T5692] usb 10-1: SerialNumber: syz [ 710.360542][T12432] usb 10-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 710.446743][T12429] usb 2-1: new full-speed USB device number 100 using dummy_hcd [ 710.609034][T12429] usb 2-1: not running at top speed; connect to a high speed hub [ 710.609106][T12429] usb 2-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice= 0.40 [ 710.619620][T12429] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 710.645859][T15327] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2896'. [ 710.677347][T12429] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 710.677372][T12429] usb 2-1: Product: 㣞᧯狶똗ᅅꔏ᭜血휡軷뿐軉﫛榦꫚ʨ졮뽥娌＊謩璾Âԝ휣蛌㑵⬅䙆厾맑Έ瞋耇⇅䅗佾䭓寱ꐹꉼ壋䠻䁑̗暰謘乮ᑶ洽悭쐮쀫ꐗ金笶檠‰뻽ⓞ谝씖숾 [ 710.677392][T12429] usb 2-1: Manufacturer: ᐉ [ 710.677404][T12429] usb 2-1: SerialNumber: К [ 710.681881][ T31] audit: type=1400 audit(1789451461.920:470): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=15318 comm="syz.5.2894" [ 711.476130][T12432] ath9k_htc 10-1:1.0: ath9k_htc: Target is unresponsive [ 711.476408][T12432] ath9k_htc: Failed to initialize the device [ 711.678161][T12432] usb 10-1: ath9k_htc: USB layer deinitialized [ 712.370880][T12430] usb 10-1: USB disconnect, device number 24 [ 712.649190][T15343] netlink: 104 bytes leftover after parsing attributes in process `syz.9.2901'. [ 712.649213][T15343] netlink: 104 bytes leftover after parsing attributes in process `syz.9.2901'. [ 712.865600][T12449] usb 6-1: new high-speed USB device number 93 using dummy_hcd [ 712.902739][T12429] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 712.904138][T12429] usb 2-1: unit 4 not found! [ 712.974390][T15345] netlink: 104 bytes leftover after parsing attributes in process `syz.9.2902'. [ 712.974411][T15345] netlink: 104 bytes leftover after parsing attributes in process `syz.9.2902'. [ 713.018861][T12449] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 713.021789][T12449] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 713.021823][T12449] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 713.021844][T12449] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 713.021895][T12449] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 713.055604][T12449] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 713.055644][T12449] usb 6-1: Product: syz [ 713.055656][T12449] usb 6-1: Manufacturer: syz [ 713.107086][T12449] cdc_wdm 6-1:1.0: skipping garbage [ 713.107112][T12449] cdc_wdm 6-1:1.0: skipping garbage [ 713.107205][T12449] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22 [ 713.180831][T12429] usb 2-1: USB disconnect, device number 100 [ 713.332704][T15349] netlink: 'syz.9.2904': attribute type 1 has an invalid length. [ 713.345950][T15341] netlink: 104 bytes leftover after parsing attributes in process `syz.5.2900'. [ 713.346416][ T5612] udevd[5612]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 713.388452][ T31] audit: type=1326 audit(1789451464.640:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15348 comm="syz.9.2904" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=31 arch=40000003 syscall=354 compat=1 ip=0xf7fc50ec code=0x0 [ 713.618352][T12429] usb 2-1: new full-speed USB device number 101 using dummy_hcd [ 713.648770][T15359] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 713.650164][T15359] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 713.690453][T12432] usb 6-1: USB disconnect, device number 93 [ 713.766555][T12429] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 713.767911][T12429] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 713.767956][T12429] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 4 [ 713.767977][T12429] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 713.768009][T12429] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 713.773542][T12429] usb 2-1: config 0 descriptor?? [ 714.076132][T15347] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2903'. [ 714.076171][T15347] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 714.539918][T15378] netlink: 100 bytes leftover after parsing attributes in process `syz.9.2911'. [ 714.539951][T15378] netlink: 100 bytes leftover after parsing attributes in process `syz.9.2911'. [ 714.609596][T15380] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2910'. [ 714.705426][T12439] usb 8-1: new high-speed USB device number 74 using dummy_hcd [ 714.855415][T12439] usb 8-1: Using ep0 maxpacket: 16 [ 714.859879][T12439] usb 8-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice=38.b7 [ 714.884531][T12439] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 714.884581][T12439] usb 8-1: Product: syz [ 714.884599][T12439] usb 8-1: Manufacturer: syz [ 714.884627][T12439] usb 8-1: SerialNumber: syz [ 714.917782][T12429] ath6kl: Failed to submit usb control message: -110 [ 714.917909][T12429] ath6kl: unable to send the bmi data to the device: -110 [ 714.917927][T12429] ath6kl: Unable to send get target info: -110 [ 714.957419][T12439] usb 8-1: config 0 descriptor?? [ 714.957657][T12429] ath6kl: Failed to init ath6kl core: -110 [ 714.976154][T12439] hub 8-1:0.0: bad descriptor, ignoring hub [ 714.976188][T12439] hub 8-1:0.0: probe with driver hub failed with error -5 [ 715.134451][T12429] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 715.385810][T12439] usb 8-1: USB disconnect, device number 74 [ 715.707946][T15392] __nla_validate_parse: 2 callbacks suppressed [ 715.707974][T15392] netlink: 104 bytes leftover after parsing attributes in process `syz.5.2915'. [ 715.707994][T15392] netlink: 104 bytes leftover after parsing attributes in process `syz.5.2915'. [ 715.708156][T15392] FAULT_INJECTION: forcing a failure. [ 715.708156][T15392] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 715.708194][T15392] CPU: 1 UID: 0 PID: 15392 Comm: syz.5.2915 Tainted: G L syzkaller #0 PREEMPT(full) [ 715.708227][T15392] Tainted: [L]=SOFTLOCKUP [ 715.708237][T15392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 715.708252][T15392] Call Trace: [ 715.708263][T15392] [ 715.708275][T15392] dump_stack_lvl+0xe8/0x150 [ 715.708318][T15392] should_fail_ex+0x410/0x560 [ 715.708353][T15392] _copy_from_user+0x2d/0xb0 [ 715.708386][T15392] kstrtouint_from_user+0xd6/0x180 [ 715.708490][T15392] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 715.708525][T15392] ? lock_acquire+0x115/0x350 [ 715.708561][T15392] proc_fail_nth_write+0x8e/0x210 [ 715.708595][T15392] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 715.708645][T15392] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 715.708682][T15392] vfs_write+0x296/0xba0 [ 715.708796][T15392] ? __pfx_vfs_write+0x10/0x10 [ 715.708835][T15392] ? __fget_files+0x2a/0x420 [ 715.708875][T15392] ? __fget_files+0x3a2/0x420 [ 715.708908][T15392] ? __fget_files+0x2a/0x420 [ 715.708952][T15392] ksys_write+0x150/0x270 [ 715.708992][T15392] ? __pfx_ksys_write+0x10/0x10 [ 715.709060][T15392] ? asm_int80_emulation+0x1a/0x20 [ 715.709094][T15392] do_int80_emulation+0x198/0x500 [ 715.709124][T15392] ? trace_irq_disable+0x3b/0x140 [ 715.709150][T15392] ? asm_int80_emulation+0x1a/0x20 [ 715.709175][T15392] ? clear_bhb_loop+0x70/0xc0 [ 715.709202][T15392] ? clear_bhb_loop+0x70/0xc0 [ 715.709233][T15392] asm_int80_emulation+0x1a/0x20 [ 715.709259][T15392] RIP: 0023:0xf71575ab [ 715.709283][T15392] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 715.709306][T15392] RSP: 002b:00000000f540d4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 715.709335][T15392] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f540d5d0 [ 715.709354][T15392] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 715.709370][T15392] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 715.709385][T15392] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 715.709401][T15392] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 715.709439][T15392] [ 716.298389][ T5692] usb 2-1: USB disconnect, device number 101 [ 716.515520][T12449] usb 8-1: new high-speed USB device number 75 using dummy_hcd [ 716.594732][T15404] dlm: no locking on control device [ 716.645642][T12449] usb 8-1: device descriptor read/64, error -71 [ 716.704810][T15406] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2918'. [ 716.889272][T12449] usb 8-1: new high-speed USB device number 76 using dummy_hcd [ 717.015550][T12449] usb 8-1: device descriptor read/64, error -71 [ 717.128169][T12449] usb usb8-port1: attempt power cycle [ 717.223704][T15417] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2922'. [ 717.298050][T15419] netlink: 104 bytes leftover after parsing attributes in process `syz.5.2924'. [ 717.298084][T15419] netlink: 104 bytes leftover after parsing attributes in process `syz.5.2924'. [ 717.465696][T12449] usb 8-1: new high-speed USB device number 77 using dummy_hcd [ 717.485906][T12439] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 717.487682][T12449] usb 8-1: device descriptor read/8, error -71 [ 717.615424][T12439] usb 2-1: device descriptor read/64, error -71 [ 717.726054][T12449] usb 8-1: new high-speed USB device number 78 using dummy_hcd [ 717.746095][T12449] usb 8-1: device descriptor read/8, error -71 [ 717.855879][T12449] usb usb8-port1: unable to enumerate USB device [ 717.875435][T12437] usb 10-1: new high-speed USB device number 25 using dummy_hcd [ 717.875646][T12439] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 718.006131][T12439] usb 2-1: device descriptor read/64, error -71 [ 718.025393][T12437] usb 10-1: Using ep0 maxpacket: 32 [ 718.027036][T12437] usb 10-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 718.028454][T12437] usb 10-1: config 0 has an invalid interface number: 85 but max is 0 [ 718.028485][T12437] usb 10-1: config 0 has no interface number 0 [ 718.028536][T12437] usb 10-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 718.028558][T12437] usb 10-1: config 0 interface 85 has no altsetting 0 [ 718.031291][T12437] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 718.031318][T12437] usb 10-1: Product: syz [ 718.031335][T12437] usb 10-1: Manufacturer: syz [ 718.031351][T12437] usb 10-1: SerialNumber: syz [ 718.057749][T12437] usb 10-1: config 0 descriptor?? [ 718.107280][T12432] usb 6-1: new high-speed USB device number 94 using dummy_hcd [ 718.130912][T12439] usb usb2-port1: attempt power cycle [ 718.285421][T12432] usb 6-1: Using ep0 maxpacket: 8 [ 718.286414][T12432] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 718.289388][T12432] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 718.289429][T12432] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 718.289458][T12432] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 718.289486][T12432] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 718.289535][T12432] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 718.339963][T12437] appletouch 10-1:0.85: Geyser mode initialized. [ 718.377920][T12437] input: appletouch as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.85/input/input34 [ 718.475485][T12439] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 718.496080][T12439] usb 2-1: device descriptor read/8, error -71 [ 718.600930][T15438] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 718.601510][T15438] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 718.659237][ T5692] usb 10-1: USB disconnect, device number 25 [ 718.704312][ T5692] appletouch 10-1:0.85: input: appletouch disconnected [ 718.735910][T12439] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 718.743845][T12432] usb 6-1: GET_CAPABILITIES returned 0 [ 718.743902][T12432] usbtmc 6-1:16.0: can't read capabilities [ 718.784864][T12439] usb 2-1: device descriptor read/8, error -71 [ 718.886017][T12439] usb usb2-port1: unable to enumerate USB device [ 719.150328][T12439] usb 6-1: USB disconnect, device number 94 [ 719.283228][T15452] netlink: 156 bytes leftover after parsing attributes in process `syz.9.2934'. [ 719.283903][T15451] netlink: 156 bytes leftover after parsing attributes in process `syz.9.2934'. [ 719.544665][T15456] netlink: 104 bytes leftover after parsing attributes in process `syz.5.2936'. [ 719.544697][T15456] netlink: 104 bytes leftover after parsing attributes in process `syz.5.2936'. [ 719.548925][T12437] usb 10-1: new high-speed USB device number 26 using dummy_hcd [ 719.635609][ T5692] usb 8-1: new high-speed USB device number 79 using dummy_hcd [ 719.724382][T12437] usb 10-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 719.735068][T12437] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 719.735099][T12437] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 719.753143][T12437] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 719.753226][T12437] usb 10-1: SerialNumber: syz [ 719.755914][ T5692] usb 8-1: device descriptor read/64, error -71 [ 719.988647][T12437] usb 10-1: 0:2 : does not exist [ 719.988726][T12437] usb 10-1: unit 5: unexpected type 0x0b [ 720.000705][ T5692] usb 8-1: new high-speed USB device number 80 using dummy_hcd [ 720.034643][T12437] usb 10-1: USB disconnect, device number 26 [ 720.072119][ T5612] udevd[5612]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 720.092197][T12432] usb 6-1: new full-speed USB device number 95 using dummy_hcd [ 720.165656][ T5692] usb 8-1: device descriptor read/64, error -71 [ 720.246207][T12432] usb 6-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 720.250286][T12432] usb 6-1: config 0 has an invalid interface number: 133 but max is 0 [ 720.250319][T12432] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 720.250341][T12432] usb 6-1: config 0 has no interface number 0 [ 720.252841][T12432] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 720.252872][T12432] usb 6-1: Product: syz [ 720.252889][T12432] usb 6-1: Manufacturer: syz [ 720.252906][T12432] usb 6-1: SerialNumber: syz [ 720.279672][T12432] usb 6-1: config 0 descriptor?? [ 720.284664][ T5692] usb usb8-port1: attempt power cycle [ 720.489258][T15462] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 720.494524][T15462] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 720.583969][T12432] keyspan 6-1:0.133: Keyspan 1 port adapter converter detected [ 720.584336][T12432] keyspan 6-1:0.133: found no endpoint descriptor for endpoint 82 [ 720.603616][T12432] keyspan 6-1:0.133: found no endpoint descriptor for endpoint 81 [ 720.603715][T12432] keyspan 6-1:0.133: found no endpoint descriptor for endpoint 1 [ 720.603849][T12432] keyspan 6-1:0.133: found no endpoint descriptor for endpoint 2 [ 720.640081][ T5692] usb 8-1: new high-speed USB device number 81 using dummy_hcd [ 720.658842][ T5692] usb 8-1: device descriptor read/8, error -71 [ 720.671095][T12432] usb 6-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 720.694059][T12432] usb 6-1: USB disconnect, device number 95 [ 720.716585][T12432] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 720.723238][T12432] keyspan 6-1:0.133: device disconnected [ 720.895887][ T5692] usb 8-1: new high-speed USB device number 82 using dummy_hcd [ 720.917901][ T5692] usb 8-1: device descriptor read/8, error -71 [ 721.027702][ T5692] usb usb8-port1: unable to enumerate USB device [ 721.438124][T15482] netlink: 56 bytes leftover after parsing attributes in process `syz.9.2947'. [ 721.490296][ T31] audit: type=1804 audit(1789451472.740:472): pid=15477 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.2945" name="/newroot/430/file0" dev="fuse" ino=1 res=1 errno=0 [ 721.611198][T15486] netlink: 104 bytes leftover after parsing attributes in process `syz.9.2949'. [ 721.611231][T15486] netlink: 104 bytes leftover after parsing attributes in process `syz.9.2949'. [ 722.387752][T12437] usb 6-1: new full-speed USB device number 96 using dummy_hcd [ 722.557922][T12437] usb 6-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 722.561201][T12437] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 722.561233][T12437] usb 6-1: Product: syz [ 722.561250][T12437] usb 6-1: Manufacturer: syz [ 722.561268][T12437] usb 6-1: SerialNumber: syz [ 722.594130][T12437] usb 6-1: config 0 descriptor?? [ 722.620204][T12437] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 723.020175][T15511] netlink: 56 bytes leftover after parsing attributes in process `syz.7.2958'. [ 723.035736][T12437] gspca_stk1135: reg_w 0x0 err -71 [ 723.036827][T12437] gspca_stk1135: serial bus timeout: status=0x00 [ 723.036844][T12437] gspca_stk1135: Sensor write failed [ 723.036880][T12437] gspca_stk1135: serial bus timeout: status=0x00 [ 723.036892][T12437] gspca_stk1135: Sensor write failed [ 723.036936][T12437] gspca_stk1135: serial bus timeout: status=0x00 [ 723.036948][T12437] gspca_stk1135: Sensor read failed [ 723.036984][T12437] gspca_stk1135: serial bus timeout: status=0x00 [ 723.036995][T12437] gspca_stk1135: Sensor read failed [ 723.037004][T12437] gspca_stk1135: Detected sensor type unknown (0x0) [ 723.037043][T12437] gspca_stk1135: serial bus timeout: status=0x00 [ 723.037054][T12437] gspca_stk1135: Sensor read failed [ 723.112846][T12437] gspca_stk1135: serial bus timeout: status=0x00 [ 723.112867][T12437] gspca_stk1135: Sensor read failed [ 723.112905][T12437] gspca_stk1135: serial bus timeout: status=0x00 [ 723.112917][T12437] gspca_stk1135: Sensor write failed [ 723.112955][T12437] gspca_stk1135: serial bus timeout: status=0x00 [ 723.112966][T12437] gspca_stk1135: Sensor write failed [ 723.113072][T12437] stk1135 6-1:0.0: probe with driver stk1135 failed with error -71 [ 723.164059][T12437] usb 6-1: USB disconnect, device number 96 [ 723.319438][T15515] netlink: 104 bytes leftover after parsing attributes in process `syz.6.2960'. [ 723.319473][T15515] netlink: 104 bytes leftover after parsing attributes in process `syz.6.2960'. [ 723.727610][T15535] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2965'. [ 723.754876][T15535] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2965'. [ 724.675945][T12448] usb 6-1: new high-speed USB device number 97 using dummy_hcd [ 724.848004][T12448] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 724.848987][T12448] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 724.849037][T12448] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 724.849073][T12448] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 724.905375][T12448] usb 6-1: config 0 descriptor?? [ 724.935432][ T5692] usb 8-1: new full-speed USB device number 84 using dummy_hcd [ 725.096956][ T5692] usb 8-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 725.098521][ T5692] usb 8-1: config 0 interface 0 altsetting 5 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 725.098560][ T5692] usb 8-1: config 0 interface 0 has no altsetting 0 [ 725.098598][ T5692] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 725.102205][ T5692] usb 8-1: config 0 descriptor?? [ 725.104594][T15553] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 725.348471][T15559] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2973'. [ 725.348527][T15559] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2973'. [ 725.528892][T15553] netlink: 'syz.7.2970': attribute type 29 has an invalid length. [ 725.564144][ T5692] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:0D8C:0022.0040/input/input35 [ 725.629996][ T5692] cm6533_jd 0003:0D8C:0022.0040: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.7-1/input0 [ 725.716281][T12437] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 725.749225][ T5692] usb 8-1: USB disconnect, device number 84 [ 725.816586][T15562] fido_id[15562]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/8-1/report_descriptor': No such file or directory [ 725.877058][T12437] usb 2-1: Using ep0 maxpacket: 16 [ 725.877879][T12437] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 725.879282][T12437] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 725.879337][T12437] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 725.882083][T12437] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 725.882110][T12437] usb 2-1: Product: syz [ 725.882127][T12437] usb 2-1: Manufacturer: syz [ 725.882143][T12437] usb 2-1: SerialNumber: syz [ 725.967757][T12437] usb 2-1: 0:2 : does not exist [ 725.988747][T12448] uclogic 0003:256C:006D.003F: interface is invalid, ignoring [ 726.155933][T15561] netlink: 'syz.1.2974': attribute type 11 has an invalid length. [ 726.183317][T12437] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 726.215882][ T5692] usb 6-1: USB disconnect, device number 97 [ 726.279671][T12437] usb 2-1: USB disconnect, device number 106 [ 726.339737][ T5612] udevd[5612]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 726.528260][ T4984] ldm_validate_privheads(): Disk read failed. [ 726.528346][ T4984] loop0: [ 726.528370][ T4984] loop0: partition table partially beyond EOD, truncated [ 727.026673][T15579] loop8: detected capacity change from 0 to 8 [ 727.033717][T15579] Dev loop8: unable to read RDB block 8 [ 727.033773][T15579] loop8: unable to read partition table [ 727.034008][T15579] loop8: partition table beyond EOD, truncated [ 727.034031][T15579] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 727.216381][T12437] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 727.276803][T15583] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2983'. [ 727.366941][T15585] netlink: 104 bytes leftover after parsing attributes in process `syz.5.2984'. [ 727.366971][T15585] netlink: 104 bytes leftover after parsing attributes in process `syz.5.2984'. [ 727.394519][T12437] usb 2-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 727.406438][T12437] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 727.406466][T12437] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 727.408863][T12437] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 727.408892][T12437] usb 2-1: Product: syz [ 727.408909][T12437] usb 2-1: Manufacturer: syz [ 727.408925][T12437] usb 2-1: SerialNumber: syz [ 727.819306][ T4984] ldm_validate_privheads(): Disk read failed. [ 727.819415][ T4984] loop0: [ 727.819438][ T4984] loop0: partition table partially beyond EOD, truncated [ 727.915866][T12448] usb 6-1: new high-speed USB device number 98 using dummy_hcd [ 728.097883][T12448] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 728.099980][T12448] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 728.100092][T12448] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 728.146430][T12448] usb 6-1: config 0 descriptor?? [ 728.428449][T15591] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 728.428801][T15591] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 728.429147][T15591] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 728.429305][T15591] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 728.434727][T15591] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 728.434828][T15591] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 728.481601][T15591] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 728.722125][T12448] keytouch 0003:0926:3333.0041: fixing up Keytouch IEC report descriptor [ 728.755901][T12448] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.0041/input/input37 [ 729.000768][T12448] keytouch 0003:0926:3333.0041: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 729.179166][ T5692] usb 8-1: new high-speed USB device number 85 using dummy_hcd [ 729.281806][T12448] usb 6-1: USB disconnect, device number 98 [ 729.326215][ T5692] usb 8-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 729.329340][ T5692] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 729.329408][ T5692] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 729.329440][ T5692] usb 8-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 729.329487][ T5692] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 730.032003][T12437] usb 2-1: 0:1 : does not exist [ 730.032091][T12437] usb 2-1: BAAD SPEAKER p_chmask mismatch [ 730.164548][T12437] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 730.182835][T12437] usb 2-1: USB disconnect, device number 107 [ 730.201137][ T5612] udevd[5612]: setting owner of /dev/bus/usb/002/107 to uid=0, gid=0 failed: No such file or directory [ 730.342248][ T5612] udevd[5612]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 730.435932][ T5622] Bluetooth: hci5: command 0x0c1a tx timeout [ 730.436510][ T5622] Bluetooth: hci2: command 0x0406 tx timeout [ 730.436584][ T5622] Bluetooth: hci3: command 0x0c1a tx timeout [ 730.436618][ T5622] Bluetooth: hci0: command 0x0c1a tx timeout [ 731.373015][ T4984] ldm_validate_privheads(): Disk read failed. [ 731.373080][ T4984] loop0: [ 731.373116][ T4984] loop0: partition table partially beyond EOD, truncated [ 731.638933][ T5692] cxacru 8-1:1.0: send of cm 0x91 failed (-104) [ 731.639147][ T5692] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -104 [ 731.639168][ T5692] ATM dev 0: usbatm_atm_init: atm_start failed: -104! [ 731.687051][T15638] loop5: detected capacity change from 0 to 7 [ 731.704518][T15638] loop5: [ 731.704541][T15638] loop5: partition table partially beyond EOD, truncated [ 731.742431][ T5692] cxacru 8-1:1.0: probe with driver cxacru failed with error -104 [ 731.855402][T12446] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 731.970364][ T5692] usb 8-1: USB disconnect, device number 85 [ 732.015575][T12446] usb 2-1: Using ep0 maxpacket: 8 [ 732.018657][T12446] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 732.019842][T12446] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 732.019896][T12446] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 732.019923][T12446] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 732.019950][T12446] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 732.019980][T12446] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 732.020030][T12446] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 732.206120][ T32] INFO: task kworker/0:8:8869 blocked for more than 143 seconds. [ 732.206158][ T32] Tainted: G L syzkaller #0 [ 732.206172][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 732.206185][ T32] task:kworker/0:8 state:D stack:21472 pid:8869 tgid:8869 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 732.206253][ T32] Workqueue: events_freezable mmc_rescan [ 732.206328][ T32] Call Trace: [ 732.206339][ T32] [ 732.206354][ T32] __schedule+0x17db/0x58f0 [ 732.206437][ T32] ? __lock_acquire+0x747/0x2de0 [ 732.206472][ T32] ? process_scheduled_works+0xc3d/0x1630 [ 732.206532][ T32] ? worker_thread+0xa47/0xfb0 [ 732.206563][ T32] ? ret_from_fork_asm+0x1a/0x30 [ 732.206597][ T32] ? __pfx___schedule+0x10/0x10 [ 732.206650][ T32] ? schedule+0x90/0x2b0 [ 732.206706][ T32] schedule+0x164/0x2b0 [ 732.206737][ T32] schedule_timeout+0xc0/0x2c0 [ 732.206762][ T32] ? __pfx_schedule_timeout+0x10/0x10 [ 732.206801][ T32] ? do_raw_spin_lock+0x12b/0x2f0 [ 732.206838][ T32] ? _raw_spin_unlock_irq+0x23/0x50 [ 732.206870][ T32] ? wait_for_completion+0x272/0x5e0 [ 732.206886][ T32] wait_for_completion+0x2ca/0x5e0 [ 732.206928][ T32] ? __pfx_wait_for_completion+0x10/0x10 [ 732.206964][ T32] ? trace_mmc_request_start+0x81/0x1e0 [ 732.206994][ T32] ? __mmc_start_request+0x384/0x4b0 [ 732.207037][ T32] mmc_wait_for_req_done+0x22b/0x490 [ 732.207131][ T32] mmc_wait_for_cmd+0x183/0x2a0 [ 732.207160][ T32] ? __pfx_mmc_wait_for_cmd+0x10/0x10 [ 732.207201][ T32] ? __pfx_mmc_wait_done+0x10/0x10 [ 732.207236][ T32] mmc_send_io_op_cond+0xfd/0x300 [ 732.207326][ T32] ? __pfx_mmc_send_io_op_cond+0x10/0x10 [ 732.214696][ T32] ? ktime_get+0x1f5/0x220 [ 732.214749][ T32] ? usleep_range_state+0x95/0x180 [ 732.214801][ T32] mmc_attach_sdio+0xdb/0xc10 [ 732.214832][ T32] ? __pfx_mmc_send_if_cond_pcie+0x10/0x10 [ 732.214858][ T32] ? __pfx_mmc_attach_sdio+0x10/0x10 [ 732.214900][ T32] ? mmc_power_up+0x5d/0x650 [ 732.214928][ T32] ? mmc_attach_sd_uhs2+0x5e/0x900 [ 732.214952][ T32] ? lockdep_hardirqs_on+0x7b/0x110 [ 732.214980][ T32] mmc_rescan+0x7e9/0x1040 [ 732.215066][ T32] ? process_scheduled_works+0x97a/0x1630 [ 732.215105][ T32] process_scheduled_works+0xc3d/0x1630 [ 732.215165][ T32] ? __pfx_process_scheduled_works+0x10/0x10 [ 732.215206][ T32] ? assign_work+0x3cf/0x5d0 [ 732.215243][ T32] worker_thread+0xa47/0xfb0 [ 732.242500][ T32] kthread+0x38b/0x480 [ 732.242643][ T32] ? __pfx_worker_thread+0x10/0x10 [ 732.242724][ T32] ? __pfx_kthread+0x10/0x10 [ 732.242784][ T32] ret_from_fork+0x514/0xb70 [ 732.242888][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 732.243002][ T32] ? __switch_to+0xc89/0x1420 [ 732.243143][ T32] ? __pfx_kthread+0x10/0x10 [ 732.243206][ T32] ret_from_fork_asm+0x1a/0x30 [ 732.243346][ T32] [ 732.243386][ T32] INFO: task kworker/0:9:8870 blocked for more than 143 seconds. [ 732.243440][ T32] Tainted: G L syzkaller #0 [ 732.243480][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 732.243518][ T32] task:kworker/0:9 state:D stack:22096 pid:8870 tgid:8870 ppid:2 task_flags:0x4288060 flags:0x00080000 [ 732.243702][ T32] Workqueue: usb_hub_wq hub_event [ 732.243783][ T32] Call Trace: [ 732.243804][ T32] [ 732.243844][ T32] __schedule+0x17db/0x58f0 [ 732.243940][ T32] ? __lock_acquire+0x747/0x2de0 [ 732.258029][ T32] ? unwind_next_frame+0x1baf/0x2550 [ 732.258262][ T32] ? __pfx___schedule+0x10/0x10 [ 732.258382][ T32] ? schedule+0x90/0x2b0 [ 732.258474][ T32] schedule+0x164/0x2b0 [ 732.258572][ T32] schedule_timeout+0xc0/0x2c0 ** replaying previous printk message ** [ 732.258572][ T32] schedule_timeout+0xc0/0x2c0 [ 732.258641][ T32] ? __pfx_schedule_timeout+0x10/0x10 [ 732.258728][ T32] ? do_raw_spin_lock+0x12b/0x2f0 [ 732.258854][ T32] ? _raw_spin_unlock_irq+0x23/0x50 [ 732.258937][ T32] ? wait_for_completion+0x272/0x5e0 [ 732.259015][ T32] wait_for_completion+0x2ca/0x5e0 [ 732.259094][ T32] ? __pfx_wait_for_completion+0x10/0x10 [ 732.259186][ T32] ? __flush_work+0x101/0xca0 [ 732.259309][ T32] __flush_work+0xa63/0xca0 [ 732.259402][ T32] ? __flush_work+0x101/0xca0 [ 732.259492][ T32] ? __pfx___flush_work+0x10/0x10 [ 732.270909][ T32] ? __pfx_wq_barrier_func+0x10/0x10 [ 732.271098][ T32] ? __cancel_work_sync+0x5c/0x110 [ 732.271197][ T32] __cancel_work_sync+0xbf/0x110 [ 732.271287][ T32] mmc_stop_host+0xd9/0x460 [ 732.271378][ T32] mmc_remove_host+0x15/0x60 [ 732.271507][ T32] vub300_disconnect+0x154/0x2f0 [ 732.271628][ T32] usb_unbind_interface+0x295/0x9f0 [ 732.271707][ T32] ? kernfs_remove_by_name_ns+0x101/0x140 [ 732.271835][ T32] ? kernfs_remove_by_name_ns+0x101/0x140 [ 732.271981][ T32] ? __pfx_usb_unbind_interface+0x10/0x10 [ 732.272058][ T32] device_release_driver_internal+0x4f5/0x880 [ 732.272151][ T32] bus_remove_device+0x444/0x560 [ 732.272258][ T32] ? __pfx_bus_remove_device+0x10/0x10 [ 732.272348][ T32] ? kernfs_remove_by_name_ns+0x101/0x140 [ 732.272420][ T32] device_del+0x524/0x8f0 [ 732.280932][ T32] ? __pfx_device_del+0x10/0x10 [ 732.281068][ T32] ? kobject_put+0x516/0x550 [ 732.281231][ T32] usb_disable_device+0x3d4/0x8d0 [ 732.281319][ T32] usb_disconnect+0x346/0x9a0 [ 732.281431][ T32] hub_event+0x1bbb/0x4d30 [ 732.281497][ T32] ? do_raw_spin_unlock+0xf5/0x200 [ 732.281612][ T32] ? register_lock_class+0x31/0x2e0 [ 732.281758][ T32] ? __pfx_hub_event+0x10/0x10 [ 732.281842][ T32] ? rcu_is_watching+0x16/0xb0 [ 732.281926][ T32] ? process_scheduled_works+0x97a/0x1630 [ 732.282029][ T32] process_scheduled_works+0xc3d/0x1630 [ 732.282200][ T32] ? __pfx_process_scheduled_works+0x10/0x10 [ 732.282292][ T32] ? assign_work+0x3cf/0x5d0 [ 732.282377][ T32] worker_thread+0xa47/0xfb0 [ 732.289437][ T32] ? __kthread_parkme+0x71/0x1f0 [ 732.289576][ T32] kthread+0x38b/0x480 [ 732.289644][ T32] ? __pfx_worker_thread+0x10/0x10 [ 732.289720][ T32] ? __pfx_kthread+0x10/0x10 [ 732.289790][ T32] ret_from_fork+0x514/0xb70 [ 732.289854][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 732.289949][ T32] ? __switch_to+0xc89/0x1420 [ 732.290034][ T32] ? __pfx_kthread+0x10/0x10 [ 732.290097][ T32] ret_from_fork_asm+0x1a/0x30 [ 732.290242][ T32] [ 732.292659][ T32] [ 732.292659][ T32] Showing all locks held in the system: [ 732.292752][ T32] locks held by pr/ttyS0/16: 2, last CPU#1: [ 732.300293][ T32] #0: ffffffff8ec364b8 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x30/0x60 [ 732.300670][ T32] #1: ffffffff9ad39098 (&port_lock_key){-.-.}-{3:3}, at: univ8250_console_device_lock+0x67/0xc0 [ 732.300873][ T32] locks held by khungtaskd/32: 1, last CPU#0: [ 732.300921][ T32] #0: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 732.301218][ T32] locks held by klogd/4973: 1, last CPU#0: [ 732.301277][ T32] #0: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 732.301439][ T32] locks held by getty/5373: 2, on CPU#0: [ 732.301479][ T32] #0: ffff88803623c0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 732.301689][ T32] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 732.310287][ T32] locks held by kworker/0:4/5692: 3, on CPU#0: [ 732.310310][ T32] #0: ffff8880232e2540 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 732.310395][ T32] #1: ffffc900045afc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 732.310459][ T32] #2: ffff88802a4d21d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4d30 [ 732.310706][ T32] locks held by kworker/0:8/8869: 2, on CPU#0: [ 732.310748][ T32] #0: ffff88801b06a140 ((wq_completion)events_freezable){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 732.310902][ T32] #1: ffffc900043efc40 ((work_completion)(&(&host->detect)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 732.311066][ T32] locks held by kworker/0:9/8870: 5, on CPU#0: [ 732.311108][ T32] #0: ffff8880232e2540 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 732.419949][T12437] usb 6-1: new high-speed USB device number 99 using dummy_hcd [ 732.454083][T12446] usb 2-1: usb_control_msg returned -32 [ 732.454136][T12446] usbtmc 2-1:16.0: can't read capabilities [ 732.489994][ T5692] usb 8-1: new high-speed USB device number 86 using dummy_hcd [ 732.516755][T15617] Bluetooth: hci2: command 0x0406 tx timeout [ 732.516884][T15617] Bluetooth: hci5: command 0x0c1a tx timeout [ 732.533261][ T32] #1: ffffc90003a8fc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 732.533494][ T32] #2: ffff88802a4ec1d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4d30 [ 732.533640][ T32] #3: ffff88801df021d8 (&dev->mutex){....}-{4:4}, at: usb_disconnect+0xfc/0x9a0 [ 732.535845][ T32] #4: ffff8880575751a0 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb9/0x880 [ 732.538529][ T32] locks held by kworker/1:5/12437: 6, on CPU#1: [ 732.538595][ T32] #0: ffff8880232e2540 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 732.538773][ T32] #1: ffffc9000445fc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 732.538932][ T32] #2: ffff88802a4651d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4d30 [ 732.539079][ T32] #3: ffff88802a4ea568 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x20a1/0x4d30 [ 732.540914][ T32] #4: ffff88802a398f60 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x20c9/0x4d30 [ 732.541087][ T32] #5: ffffffff8fafb968 (ehci_cf_port_reset_rwsem){.+.+}-{4:4}, at: hub_port_reset+0x14d/0x1810 [ 732.541251][ T32] locks held by kworker/1:14/12446: 6, last CPU#1: [ 732.543367][ T32] #0: ffff8880232e2540 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 732.543480][ T32] #1: ffffc90003e7fc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 732.543541][ T32] #2: ffff88802a33d1d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4d30 [ 732.543596][ T32] #3: ffff888029f371d8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 732.543742][ T32] #4: ffff888029f361a0 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 732.543916][ T32] #5: ffffffff8fb065c8 (minor_rwsem#2){++++}-{4:4}, at: usb_register_dev+0x142/0x5e0 [ 732.550473][ T32] locks held by syz.8.2567/14275: 1, on CPU#0: [ 732.550515][ T32] #0: ffff88802a4ec1d8 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x151/0x770 [ 732.550674][ T32] locks held by syz-executor/14474: 1, last CPU#0: [ 732.550715][ T32] #0: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 732.550895][ T32] locks held by syz.6.3004/15641: 1, on CPU#0: [ 732.550936][ T32] #0: ffff888079771d38 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1dd/0x4e0 [ 732.566587][ T32] locks held by syz.6.3004/15643: 2, last CPU#0: [ 732.566642][ T32] #0: ffff888079771d38 (&mm->mmap_lock){++++}-{4:4}, at: __mm_populate+0x182/0x390 [ 732.566826][ T32] #1: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: get_mem_cgroup_from_mm+0x38/0x290 [ 732.567450][ T32] [ 732.567489][ T32] ============================================= [ 732.567489][ T32] [ 732.567547][ T32] NMI backtrace for cpu 0 [ 732.567607][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 732.567698][ T32] Tainted: [L]=SOFTLOCKUP [ 732.567713][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 732.567752][ T32] Call Trace: [ 732.567785][ T32] [ 732.567814][ T32] dump_stack_lvl+0xe8/0x150 [ 732.567925][ T32] nmi_cpu_backtrace+0x274/0x2d0 [ 732.568077][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 732.568218][ T32] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 732.568333][ T32] sys_info+0x135/0x170 [ 732.568442][ T32] watchdog+0xfd7/0x1030 [ 732.568518][ T32] ? watchdog+0x1c7/0x1030 [ 732.568591][ T32] kthread+0x38b/0x480 [ 732.568654][ T32] ? __pfx_watchdog+0x10/0x10 [ 732.568706][ T32] ? __pfx_kthread+0x10/0x10 [ 732.568768][ T32] ret_from_fork+0x514/0xb70 [ 732.568842][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 732.568942][ T32] ? __switch_to+0xc89/0x1420 [ 732.569020][ T32] ? __pfx_kthread+0x10/0x10 [ 732.569074][ T32] ret_from_fork_asm+0x1a/0x30 [ 732.569230][ T32] [ 732.569343][ T32] Sending NMI from CPU 0 to CPUs 1: [ 732.569446][ C1] NMI backtrace for cpu 1 [ 732.569464][ C1] CPU: 1 UID: 0 PID: 16 Comm: pr/ttyS0 Tainted: G L syzkaller #0 PREEMPT(full) [ 732.569491][ C1] Tainted: [L]=SOFTLOCKUP [ 732.569498][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 732.569511][ C1] RIP: 0010:io_serial_in+0x77/0xc0 [ 732.569576][ C1] Code: e8 1e 35 55 fc 44 89 f9 d3 e3 49 83 c6 40 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 0f 35 c5 fc 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f c3 cc cc cc cc cc 44 89 f9 80 e1 07 [ 732.569594][ C1] RSP: 0000:ffffc900001578b8 EFLAGS: 00000002 [ 732.569612][ C1] RAX: 1ffffffff35a7200 RBX: 00000000000003fd RCX: 0000000000000000 [ 732.569626][ C1] RDX: 00000000000003fd RSI: 0000000000000000 RDI: 0000000000000020 [ 732.569638][ C1] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 732.569651][ C1] R10: dffffc0000000000 R11: ffffffff85729520 R12: dffffc0000000000 [ 732.569666][ C1] R13: 0000000000000000 R14: ffffffff9ad390c0 R15: 0000000000000000 [ 732.569680][ C1] FS: 0000000000000000(0000) GS:ffff888124dd2000(0000) knlGS:0000000000000000 [ 732.569697][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 732.569712][ C1] CR2: 00000000f540aedc CR3: 0000000070fa4000 CR4: 00000000003526f0 [ 732.569729][ C1] Call Trace: [ 732.569737][ C1] [ 732.569747][ C1] wait_for_lsr+0x184/0x2f0 [ 732.569771][ C1] __serial8250_console_fifo_write+0x346/0x3e0 [ 732.569804][ C1] serial8250_console_write+0xaa1/0x1200 [ 732.569829][ C1] ? __pfx_serial8250_console_write+0x10/0x10 [ 732.569849][ C1] ? __schedule+0x17f1/0x58f0 [ 732.569888][ C1] nbcon_emit_next_record+0xef5/0x1a90 [ 732.569953][ C1] ? __pfx_nbcon_emit_next_record+0x10/0x10 [ 732.569978][ C1] ? nbcon_context_try_acquire+0x819/0xbd0 [ 732.570006][ C1] ? _raw_spin_lock_irqsave+0x4c/0x60 [ 732.570038][ C1] nbcon_kthread_func+0x679/0x880 [ 732.570062][ C1] ? nbcon_kthread_func+0x163/0x880 [ 732.570081][ C1] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 732.570104][ C1] ? __kthread_parkme+0x71/0x1f0 [ 732.570133][ C1] ? __kthread_parkme+0x199/0x1f0 [ 732.570174][ C1] kthread+0x38b/0x480 [ 732.570192][ C1] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 732.570210][ C1] ? __pfx_kthread+0x10/0x10 [ 732.570228][ C1] ret_from_fork+0x514/0xb70 [ 732.570248][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 732.570283][ C1] ? __switch_to+0xc89/0x1420 [ 732.570310][ C1] ? __pfx_kthread+0x10/0x10 [ 732.570328][ C1] ret_from_fork_asm+0x1a/0x30 [ 732.570365][ C1] [ 732.590142][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 733.684810][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 733.695523][ T32] Tainted: [L]=SOFTLOCKUP [ 733.699867][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 733.709958][ T32] Call Trace: [ 733.713280][ T32] [ 733.716240][ T32] vpanic+0x56d/0xa60 [ 733.720274][ T32] ? __pfx___schedule+0x10/0x10 [ 733.725183][ T32] ? __pfx_vpanic+0x10/0x10 [ 733.729735][ T32] panic+0xc5/0xd0 [ 733.733485][ T32] ? __pfx_panic+0x10/0x10 [ 733.737963][ T32] ? preempt_schedule_common+0x7f/0xd0 [ 733.743457][ T32] ? preempt_schedule_thunk+0x16/0x40 [ 733.748850][ T32] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 733.755064][ T32] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 733.761325][ T32] watchdog+0x1030/0x1030 [ 733.765687][ T32] ? watchdog+0x1c7/0x1030 [ 733.770157][ T32] kthread+0x38b/0x480 [ 733.774264][ T32] ? __pfx_watchdog+0x10/0x10 [ 733.778967][ T32] ? __pfx_kthread+0x10/0x10 [ 733.783591][ T32] ret_from_fork+0x514/0xb70 [ 733.788216][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 733.793358][ T32] ? __switch_to+0xc89/0x1420 [ 733.798071][ T32] ? __pfx_kthread+0x10/0x10 [ 733.802680][ T32] ret_from_fork_asm+0x1a/0x30 [ 733.807488][ T32] [ 733.811190][ T32] Kernel Offset: disabled [ 733.815531][ T32] Rebooting in 86400 seconds..