last executing test programs: 16m44.425244488s ago: executing program 32 (id=416): ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0x4018aee2, 0x0) 7m18.681327479s ago: executing program 5 (id=3341): socket$kcm(0x2, 0x3, 0x2) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009e173610ef171e7206de0102030109021200010000000009040000000206"], 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x4, 0x0, 0x3, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x32) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000380)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}, 0x4, 0x4, 0x1}}, 0x26) ioctl$PPPIOCGL2TPSTATS(r3, 0x40047459, 0xfffffffffffffffe) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000200)={0x40, 0x2c, 0x4, "0ed836f3"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 7m17.261216457s ago: executing program 5 (id=3347): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r2 = socket$tipc(0x1e, 0x1, 0x0) listen(r2, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000200)={0x203, 0xa, 0x2}) r3 = fsopen(&(0x7f0000000080)='mqueue\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x4d) getdents64(r5, 0x0, 0x4f) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000500)=@userptr={0x6, 0xa, 0x4, 0x1, 0x0, {0x0, 0x2710}, {0x1, 0xc, 0xd2, 0x6, 0x77, 0x6, "0080ca6f"}, 0xff, 0x2, {&(0x7f00000002c0)}, 0x6}) r7 = syz_usb_connect(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYRES64, @ANYRES32, @ANYRES64, @ANYBLOB="c9c0d9c6fb9299d2761522830360663beed82ba510580ba1cd437b7a10b1e81fdfdde6d1ec775a2239762710d86533295ea30153323d770a5f4ac69d5d", @ANYRESDEC=r0, @ANYRESOCT=r6, @ANYRESOCT=r0], 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WOWLAN(r4, &(0x7f0000000c00)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000a00)={0x18c, 0x0, 0x1, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x3f}, @val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x7fff}}}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0x15c, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_NET_DETECT={0x130, 0x12, 0x0, 0x1, [@NL80211_ATTR_SCAN_SUPP_RATES={0xf0, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xec, 0x2, "895709ecb98872d8ce743352d64b1b580b512eba2fc0bc0f54320dd2851cb2563669224d9fd3cdb34763268cc7bd8881edce465b01a0d79d39fd61855694c5b5cf7f7fc62658a2fab2468b21c44ec50d528b731afdeea019921239637846406df9c5f0cf754614c7a26141b1cc8f2e15913a6508efaced3e19883868a2799855605f63bd265b42a1dc0a7ec14669595094d357da408bd16a1b4a43736942453f4a61ada8d5b018be3c5e74267cbc125c710106ea9d51ab762bc770ba74f1f2747ab5d05f22408050aea0bfb67f3f0d9a0b6352d8d31c91786fcdea3633c14e426a2e7f3a8c65ae27"}]}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x10}, @NL80211_ATTR_SCAN_FREQUENCIES={0x34, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x7}, {0x8, 0x0, 0x7fffffff}, {0x8, 0x0, 0x98a8e917}, {0x8, 0x0, 0xff}, {0x8, 0x0, 0x9}, {0x8, 0x0, 0x9}]}]}, @NL80211_WOWLAN_TRIG_NET_DETECT={0x1c, 0x12, 0x0, 0x1, [@NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x9}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x2}]}, @NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}, @NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}, @NL80211_WOWLAN_TRIG_ANY={0x4}]}]}, 0x18c}, 0x1, 0x0, 0x0, 0x804}, 0x4000) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000006, 0x11, r9, 0x3cd30000) ioctl$FS_IOC_RESVSP(r9, 0x40305829, &(0x7f0000000040)={0x1100, 0x2, 0x8, 0x10003}) syz_usb_control_io$lan78xx(r7, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@ipmr_newroute={0x24, 0x18, 0x200, 0x70bd2b, 0x25dfdbff, {0x80, 0x20, 0x0, 0x3, 0xff, 0x2, 0xff, 0x0, 0x2200}, [@RTA_SRC={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x830) getsockopt$inet6_IPV6_IPSEC_POLICY(r9, 0x29, 0x22, &(0x7f00000003c0)={{{@in=@empty, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@loopback}}, &(0x7f00000005c0)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) sendmsg$nl_generic(r4, &(0x7f00000009c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000980)={&(0x7f00000006c0)={0x2b8, 0x28, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@typed={0x14, 0x11, 0x0, 0x0, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}, @typed={0x4, 0x9a}, @nested={0x283, 0x15d, 0x0, 0x1, [@typed={0x8, 0x148, 0x0, 0x0, @uid=r10}, @typed={0x84, 0x128, 0x0, 0x0, @binary="92709f699dff60e15d18166796a1095078801754b5073bfbc59c4ea5d5a0498e4a5baf9ac722dc912a86d3f29cf841d4ccd54e6923e9e9c622f75f1becaddcd06cbd7ab5b7f614292eb7019fd81d743c0327ecb80c059920aae6753f8ba6f74ca772574258d5e9c45e3c64d67d31900c258b702526a504de100ce75b0cd18e7b"}, @generic="070755b9ce63e90786c76993f29d6b030f6b62a69f91a0ec68cb3a9005045212a15196854c08850f0c4968842e37c833e4a9436c18f8f530688f47b075fc0eded782e7964909382ddc0000d784f177fdfb7a221f0286b14057b5661582dc403e285e6d9c87a6ee3a5be0b25012f54353dc63a05123bf8c7a481302455681", @typed={0x8, 0x51, 0x0, 0x0, @uid=r11}, @generic="0b55be66f7bdf2789b673f31c74d963571628d7f0903689245b1ebe8e89d9bde836b9ab96fc34a1d87c5147ea5c3873c348a23b07252fb99392aebc6d8d7568e1ec053b378a26dd7ef090d3a8b61b749bfa1f6e877f326dd74dc61321126b50bf533eaf455629c877f6a7138086d09b8a0417951c0228fb101482e8e8bd0c9978f9fbe0f7dbbdc3765e7a7afcb033638e7e0a4740ca8", @generic="8e8984770711d8508637b2b05ab42b0933b1a6ba4214c989261bb20c780a0abf7df20b85f11cc689bdf43014423b71765420b76d020fc5347a4eff3c75f8f1379e6b014dc31ea34712366e7c8b36e04fad0d89adbbe321a072c1aad6fd320a0db90518a141374661230089a897a7f50ed54c2d0d94ec3275c595e137897b9484ca36d8de22246d404306a66307e7e4464832b96f902585970ceb2c290e2de81de7a67196bc2a1ede3ddb9c3089a6b1a17525b063267d2c2e674e9d0f283c35f9cb9a37c05e5453420076c3bdc55c49c65ea383", @nested={0x4, 0x36}]}, @nested={0x8, 0x95, 0x0, 0x1, [@nested={0x4, 0x6d}]}]}, 0x2b8}, 0x1, 0x0, 0x0, 0x400c081}, 0x1) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, 0x0) 7m14.172060424s ago: executing program 5 (id=3356): mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x9, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a70000000060a0b0400000000000000000200000244000480400001800b00010074617267657400003000028014000300e18eb063bae294fe8f45a9b02fdf068408000240000000010d000100434f4e4e4d41524b000000000900010073797a30000000000900020073797a32"], 0x98}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000980)={r4, 0x20, &(0x7f0000000940)={&(0x7f0000000780)=""/174, 0xae, 0x0, &(0x7f0000000840)=""/228, 0xe4}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x13, 0xb, &(0x7f0000000100)=@raw=[@call={0x85, 0x0, 0x0, 0x98}, @map_idx={0x18, 0x1, 0x5, 0x0, 0xd}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x2}, @cb_func={0x18, 0x3, 0x4, 0x0, 0xfffffffffffffffb}, @call={0x85, 0x0, 0x0, 0xd}, @call={0x85, 0x0, 0x0, 0xad}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @alu={0x7, 0x1, 0x2, 0xa, 0x5, 0x6}], &(0x7f00000001c0)='syzkaller\x00', 0x3, 0x13, &(0x7f0000000240)=""/19, 0x40f00, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0xc, 0x80000001, 0xbd}, 0x10, r5, r4, 0x6, 0x0, &(0x7f00000009c0)=[{0x4, 0x5, 0x2, 0x48d937bcc3591dbe}, {0x1, 0x3, 0x10, 0x2}, {0x4, 0x3, 0xa, 0xb}, {0x2, 0x1, 0x5, 0xc}, {0x4, 0x1, 0xa, 0xb}, {0x4, 0x5, 0xa, 0xa}], 0x10, 0x8}, 0x94) move_mount(r4, &(0x7f0000000200)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x120) ioctl$SIOCSIFHWADDR(r2, 0x8923, &(0x7f00000000c0)={'lo\x00', @random="01320136b1ff"}) 7m13.345584082s ago: executing program 5 (id=3362): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000180)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) move_mount(r2, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x38, 0x40, 0x1, 0xfffffffe, 0x25dfdbff, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x14, 0x2, 0x0, 0x1, [@nested={0x10, 0x17, 0x0, 0x1, [@typed={0x8, 0x1, 0x0, 0x0, @fd=r3}, @typed={0x4}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0x800c000) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x81}, 0x10) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="240000001a00010000000000000000000a000000000000000000000008001f"], 0x24}, 0x1, 0x0, 0x0, 0x4048890}, 0x0) 7m12.41206157s ago: executing program 5 (id=3370): r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0xe26, 0x101400) syz_usb_connect(0x3, 0x3f, &(0x7f00000003c0)={{0x12, 0x1, 0x310, 0x44, 0xb0, 0x69, 0x8, 0x1199, 0x6893, 0x16b7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x2, 0x3, 0x5f, 0x60, 0x5, "", [{{0x9, 0x4, 0x5c, 0x9, 0x0, 0x9f, 0x3a, 0xa5, 0x6}}, {{0x9, 0x4, 0x78, 0x8, 0x1, 0xc0, 0x22, 0x3b, 0x2, [], [{{0x9, 0x5, 0xe, 0x10, 0x0, 0x5, 0x6, 0x80, [@generic={0x9, 0x4, "5c040336c0ba6d"}]}}]}}]}}]}}, &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x0}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000180), 0xa4242, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000080), 0x4) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) fallocate(r1, 0x3, 0x10003, 0x2d22) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x2a8, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x2c0, 0x2e8, 0x2e8, 0x2c0, 0x2e8, 0x3, 0x0, {[{{@ipv6={@private0={0xfc, 0x0, '\x00', 0x41}, @private1={0xfc, 0x1, '\x00', 0xfd}, [0xffffff00, 0xff000000, 0x0, 0xff000000], [0xff, 0x34da508f3e8fb0eb, 0xffffff00, 0xff], 'veth0_to_batadv\x00', 'veth1_to_team\x00', {0xff}, {0xff}, 0x33, 0x7, 0x7}, 0x0, 0xa8, 0xc8, 0x0, {0x0, 0x2000000000000}}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00', {0xfffffffffffffffd}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x308) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0xc0045520, &(0x7f00000000c0)=""/92) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4090}, 0x0) 7m12.278735661s ago: executing program 5 (id=3372): syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="042ffd02ffffffffffff050800400b07000712"], 0x200) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=[@hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @dstopts_2292={{0x18, 0x29, 0x4, {0x4}}}, @hopopts={{0x88, 0x29, 0x36, {0x5e, 0xe, '\x00', [@pad1, @pad1, @calipso={0x7, 0x8, {0x3, 0x0, 0x0, 0xfff}}, @generic={0x8, 0x5e, "c8a110995d439fbfac9716a99c357bcb2d59a850490739734f6b321d19b3754df39cc2dc26cf263cbebbddb9a7f17b6771f74c46623f9e38bd23e6f0a2fd3a9a017f66738394aca44d1a9f0b35d9df0a964360ab0900a5e6fcac1cd41c91"}]}}}, @rthdrdstopts={{0x18, 0x29, 0x37, {0x73}}}], 0xd0}}], 0x1, 0x810) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000300)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) pwritev(0xffffffffffffffff, &(0x7f0000000d80)=[{&(0x7f0000000780)="42ebe7f5d8dde5f3e9c5c7e7bc09d8d80f373ae4dc85e6cb597bd322663b986ff272399bec41d811a763bcd2cdc221d2ac6cdeeca815ce250ce959444e7f296cb11433530cfccd0c6f450147b46eb5bbe281810c76577aaf554801815d1ee516cc0752832233d7610ce165a593e43cbaa4f52db28e5aead94767ad0d", 0x7c}, {0x0}, {&(0x7f0000000540)="b4e007f06d056aa0367c7356f83c", 0xe}, {&(0x7f0000000580)="1ab9a1fec95331b4b1bb5f840b0a198cb5add980a1e5cd402aaabeb7a27d1418376394238ae0a1ca9cc41879", 0x2c}, {&(0x7f0000000a80)}, {0x0}, {&(0x7f0000000ac0)="50591ee1c54cb070964417fd1f4ffe5a57c4ff8a3c5c5ce1d3957dfc44e8e17c719084f4e8da23c0e4667eeda56ce5d4d14d904f", 0x34}], 0x7, 0x4d9e, 0x8) sendmmsg$alg(r4, 0x0, 0x0, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 7m12.02303941s ago: executing program 33 (id=3372): syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="042ffd02ffffffffffff050800400b07000712"], 0x200) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=[@hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @dstopts_2292={{0x18, 0x29, 0x4, {0x4}}}, @hopopts={{0x88, 0x29, 0x36, {0x5e, 0xe, '\x00', [@pad1, @pad1, @calipso={0x7, 0x8, {0x3, 0x0, 0x0, 0xfff}}, @generic={0x8, 0x5e, "c8a110995d439fbfac9716a99c357bcb2d59a850490739734f6b321d19b3754df39cc2dc26cf263cbebbddb9a7f17b6771f74c46623f9e38bd23e6f0a2fd3a9a017f66738394aca44d1a9f0b35d9df0a964360ab0900a5e6fcac1cd41c91"}]}}}, @rthdrdstopts={{0x18, 0x29, 0x37, {0x73}}}], 0xd0}}], 0x1, 0x810) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000300)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) pwritev(0xffffffffffffffff, &(0x7f0000000d80)=[{&(0x7f0000000780)="42ebe7f5d8dde5f3e9c5c7e7bc09d8d80f373ae4dc85e6cb597bd322663b986ff272399bec41d811a763bcd2cdc221d2ac6cdeeca815ce250ce959444e7f296cb11433530cfccd0c6f450147b46eb5bbe281810c76577aaf554801815d1ee516cc0752832233d7610ce165a593e43cbaa4f52db28e5aead94767ad0d", 0x7c}, {0x0}, {&(0x7f0000000540)="b4e007f06d056aa0367c7356f83c", 0xe}, {&(0x7f0000000580)="1ab9a1fec95331b4b1bb5f840b0a198cb5add980a1e5cd402aaabeb7a27d1418376394238ae0a1ca9cc41879", 0x2c}, {&(0x7f0000000a80)}, {0x0}, {&(0x7f0000000ac0)="50591ee1c54cb070964417fd1f4ffe5a57c4ff8a3c5c5ce1d3957dfc44e8e17c719084f4e8da23c0e4667eeda56ce5d4d14d904f", 0x34}], 0x7, 0x4d9e, 0x8) sendmmsg$alg(r4, 0x0, 0x0, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 2m27.263402138s ago: executing program 3 (id=4663): r0 = creat(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000000c0)=0x40000000) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x0}, 0x20) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="50000000100039042abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="b96b00003537a940300012800b00010065727370616e000020000280040012000500160002000000060018"], 0x50}, 0x1, 0x0, 0x0, 0x410c0}, 0x4000020) r2 = socket(0x10, 0x3, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x3a) write(r2, &(0x7f0000000000)="2400000011005f0414f900655e00000000ae00002d000000000000ea08000f0001000000", 0x24) r3 = getpid() writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)="8724866f", 0x4}], 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xe, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1804"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r4, 0x4010744d, &(0x7f0000000180)) r6 = syz_pidfd_open(r3, 0x0) setns(r6, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x9000, &(0x7f0000000000)={0x0, 0xa}, 0x20) mremap(&(0x7f00001a6000/0x1000)=nil, 0x1000, 0x13000, 0x3, &(0x7f00004e6000/0x13000)=nil) prctl$PR_SET_MM(0x23, 0x2, &(0x7f00004f8000/0x2000)=nil) 2m26.921469398s ago: executing program 3 (id=4667): mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x9, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a70000000060a0b0400000000000000000200000244000480400001800b00010074617267657400003000028014000300e18eb063bae294fe8f45a9b02fdf068408000240000000010d000100434f4e4e4d41524b000000000900010073797a30000000000900020073797a32"], 0x98}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_i', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000980)={r4, 0x20, &(0x7f0000000940)={&(0x7f0000000780)=""/174, 0xae, 0x0, &(0x7f0000000840)=""/228, 0xe4}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x13, 0xb, &(0x7f0000000100)=@raw=[@call={0x85, 0x0, 0x0, 0x98}, @map_idx={0x18, 0x1, 0x5, 0x0, 0xd}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x2}, @cb_func={0x18, 0x3, 0x4, 0x0, 0xfffffffffffffffb}, @call={0x85, 0x0, 0x0, 0xd}, @call={0x85, 0x0, 0x0, 0xad}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @alu={0x7, 0x1, 0x2, 0xa, 0x5, 0x6}], &(0x7f00000001c0)='syzkaller\x00', 0x3, 0x13, &(0x7f0000000240)=""/19, 0x40f00, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0xc, 0x80000001, 0xbd}, 0x10, r5, r4, 0x6, 0x0, &(0x7f00000009c0)=[{0x4, 0x5, 0x2, 0x48d937bcc3591dbe}, {0x1, 0x3, 0x10, 0x2}, {0x4, 0x3, 0xa, 0xb}, {0x2, 0x1, 0x5, 0xc}, {0x4, 0x1, 0xa, 0xb}, {0x4, 0x5, 0xa, 0xa}], 0x10, 0x8}, 0x94) move_mount(r4, &(0x7f0000000200)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x120) ioctl$SIOCSIFHWADDR(r2, 0x8923, &(0x7f00000000c0)={'lo\x00', @random="01320136b1ff"}) 2m26.83635381s ago: executing program 3 (id=4669): r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='net/ptype\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000700)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000100)={0x20000014}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x5, 0x8, 0x5, 0x0, 0x9, 0x0, 0x2, 0xfa11, 0xffffffff}, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) poll(&(0x7f0000000140)=[{r2, 0x2141}, {r2, 0x1}], 0x2, 0x8000004) recvmmsg(0xffffffffffffffff, &(0x7f00000051c0)=[{{0x0, 0x0, 0x0}, 0x40}], 0x1, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[], 0x64}}, 0x0) r5 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r5, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000280)=ANY=[@ANYRES16=0x0, @ANYBLOB="df4800000000000000000c0000000c000380040005"], 0x20}}, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) connect$l2tp6(r5, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r5, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0}}], 0x17fd147c801ae9af, 0xff00) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000004400090000000000000000000500000008000200", @ANYRES32=r1, @ANYBLOB="ca20419e9287a26425a3486c7d5c56d9a49e036c611573cbe4ed30384af023a533c889458b311204cd89dc21eae6569404bcfb2a41a5983f487cbbf5aea686925bd96a79d6211f51a403f7aaed329bb6591f038bc33b6279270e1228dd070a9e5b4bebfce822a49c1fe3302c59bb1c88306052d48f3a5617e33c0dd5e71e805973bc70e0b896a6484ddae36ba04b3f176bacace18938310680947990d515cb164bff4e2667e5f1854b99c90ac73805e140b441"], 0x1c}, 0x1, 0x0, 0x0, 0xc1}, 0x4000044) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000ec0)=@raw={'raw\x00', 0x8, 0x3, 0x410, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x340, 0xffffffff, 0xffffffff, 0x340, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @private=0xa010102}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x0, 0xffffffff, 0x164d2c527ac5db29], [], 'team_slave_1\x00', 'vlan1\x00', {}, {}, 0x0, 0x40}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @dev={0xfe, 0x80, '\x00', 0x2e}, [0x0, 0xff], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x2b}, 0x0, 0x230, 0x270, 0x0, {}, [@common=@srh={{0x30}, {0xd1, 0x8, 0x8, 0x8, 0xf, 0x4c, 0x400}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x52, 0x1, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x4, 0x1, 0x9, 0x9, 0x80000000, 0x5, 0x0, 0x80000000]}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x470) r8 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r8, 0x8993, &(0x7f0000000080)={'bond0\x00', &(0x7f00000000c0)=@ethtool_coalesce={0x1, 0xf0, 0x200, 0x9, 0x6, 0x0, 0x2, 0x80000001, 0x5, 0x4, 0x5, 0x1, 0x2000, 0x4, 0x9, 0xa5, 0x5, 0x8000dff, 0xff, 0x452, 0x1000, 0xb, 0x4}}) vmsplice(0xffffffffffffffff, &(0x7f00000004c0)=[{0x0}], 0x1, 0x4) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) 2m25.411825895s ago: executing program 3 (id=4675): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x8, 'veth0_to_hsr\x00', {'veth1_to_bond\x00'}, 0x9}) r1 = socket$inet(0x2, 0x3, 0x30) getsockopt$inet_mreqsrc(r1, 0x0, 0x26, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000080)=0xc) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000000)={[0x38, 0xfff, 0x3fffc, 0x180, 0x2, 0x14, 0xf1, 0x0, 0x7fffffffffffa, 0x5, 0x4005, 0x8, 0x0, 0x45, 0xfffffffffffffffd, 0xbdb], 0xdddd0000, 0x1c4217}) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r9, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x114}) r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0}) r11 = dup3(r10, r9, 0x0) r12 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000004000000020000000000000001020000", @ANYRES32, @ANYRES16=r2, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="147bc9e747dc292dcf09eb1b0dd7391b8700000000000600"/41], 0x48) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r12, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r12, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r11, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r12, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000440)="42f7a85b"}) ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xf0ff, 0x0, 0x0, 0x48, 0x18, &(0x7f00000004c0)={@fd={0x66642a85, 0x0, r9}, @fd={0x66642a85, 0x0, r12}, @fd={0x66642a85, 0x0, r9}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r12, 0x40046208, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0x4a812c65cd2907c8, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001740)=@gettclass={0x24, 0x2a, 0xac610ab092b1ee64, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0x5, 0xffe0}, {0x8, 0xc}, {0x4, 0x6}}, ["", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x48898}, 0x4004) 2m24.007031412s ago: executing program 3 (id=4683): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, 0x0, 0x0) 2m23.836432652s ago: executing program 3 (id=4685): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000880)=@urb_type_iso={0x0, {0x1, 0x1}, 0x49e, 0xc0, 0x0, 0x0, 0x3, 0x60000, 0x1, 0x800, 0x8, 0x0, [{0xa, 0x7, 0x3}]}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)="c5f604ef", 0x4}, {0x0}], 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) 2m8.859111375s ago: executing program 34 (id=4685): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000880)=@urb_type_iso={0x0, {0x1, 0x1}, 0x49e, 0xc0, 0x0, 0x0, 0x3, 0x60000, 0x1, 0x800, 0x8, 0x0, [{0xa, 0x7, 0x3}]}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)="c5f604ef", 0x4}, {0x0}], 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) 2m7.076025177s ago: executing program 7 (id=4750): r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$bt_hci(r0, 0x0, 0x31, 0x0, &(0x7f0000002400)) 2m6.936375192s ago: executing program 7 (id=4759): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="50000000100001002dbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="5d4f0000000000001c001a8018000a80140007002001000000000000000000000000000014003500677265300000000000000000"], 0x50}}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x99) futex_waitv(&(0x7f0000001cc0)=[{0x1, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000000c0)={0x1, @raw_data="5fda43495216eb003a1b246aa3251d640db0a59406bdfa6cdcafcdcf52306943fb2c4e4cc1c9fcc2dfc3ba70f93716bda28737ee574cd188531231e226f1bb27f2433ad3e3013781a80f86f3e882af412e816bb15f943a27eb01b10ce23d91b84e68277f0f9ed74bb55ccf6646b28e1c6b6f3deca81501fa711c1c2e00725574ce5f12863280de1229aed1289a42fc5d6ca30d40a126ef85f4668fcc27d225d3d4f46f5d0cf2a583d3d9a16d827f8c68770aa5dcf1f19ce3ef6ca58290dcd9e900"}) r3 = syz_open_dev$hiddev(&(0x7f0000000040), 0x1, 0x24002) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="340000002e0003050000000000000000200000f8ffffffffffffff0008000000", @ANYRES32], 0x34}], 0x1}, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TCSETS(r4, 0x5402, &(0x7f0000000000)={0x401, 0x0, 0x10000, 0xb998, 0x0, "194f2f83c2e798c3584770116cddc8819592b1"}) write$binfmt_aout(r4, &(0x7f0000000000)=ANY=[], 0xff2e) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x390, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x2c0, 0x2e8, 0x2e8, 0x2c0, 0x2e8, 0x3, 0x0, {[{{@ipv6={@private0={0xfc, 0x0, '\x00', 0x41}, @private1={0xfc, 0x1, '\x00', 0xfd}, [0xffffff00, 0xff000000, 0x0, 0xff000000], [0xff, 0x34da508f3e8fb0eb, 0xffffff00, 0xff], 'veth0_to_batadv\x00', 'veth1_to_team\x00', {0xff}, {0xff}, 0x33, 0x7, 0x7}, 0x0, 0x190, 0x1b0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x100, 'bm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee0500000000000000ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06d7d4e252c3394fed47bf78c70f607b0178fa5ea3350ebc989f1f34a214e67442ce98bbaa8e0f7323a4ca0a7be6c60c527bac2b500", 0x1, 0x3}}, @common=@inet=@socket1={{0x28}, 0x1}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00', {0xfffffffffffffffd}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f0) syz_usb_control_io$hid(r5, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0xf, {[@local=@item_4={0x3, 0x2, 0x0, "2e2b5aa4"}, @local=@item_4={0x3, 0x2, 0x0, "f85edaca"}, @main=@item_4={0x3, 0x0, 0x8}]}}, 0x0}, 0x0) r7 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUCODE(r7, 0xc018480d, &(0x7f0000000040)={0x2, 0xffffffff, 0x7, 0x452, 0x5, 0x8}) ioctl$TCSETS(r4, 0x5402, &(0x7f0000000100)={0xa04c, 0x53b3, 0xfffffffd, 0x3, 0x1b, "53af0f0b4ecf6c29bf81c173f4a8f5f73eb62f"}) r8 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r8, &(0x7f00000000c0)='2\x00', 0x2) r9 = socket$inet6(0x10, 0x2, 0x4) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x1, 0x0, 0x81, 0xffffffff}) sendto$inet6(r9, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x810, 0x0, 0x0) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c0000000d0a01010000000000000000030000070900010073797a300000002e0b00000000000008e2fdbe00"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) ioctl$HIDIOCGPHYS(r3, 0x80404812, &(0x7f0000000080)) 2m3.041399225s ago: executing program 7 (id=4777): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) ioctl$FE_DISEQC_SEND_BURST(r0, 0x6f41, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000004a00010002200000000000000a008000", @ANYRES32=0x0, @ANYBLOB="0000000014000100ff"], 0x30}, 0x1, 0x0, 0x0, 0x44090}, 0x900) (async) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x1, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r4, 0x0, 0x7704}, [@IFLA_GROUP={0x8, 0x1b, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000020}, 0x40000) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@fallback=r1, 0x16, 0x1, 0x7, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0], 0x0}, 0x40) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000000000300000003000000580001800d00010075a6063a7379"], 0x6c}}, 0x0) (async) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0x40383d0c, &(0x7f00000005c0)={{0x7, 0x1}, {0xd, 0x3}, 0x11162031, 0x1}) (async) socket$key(0xf, 0x3, 0x2) (async) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x15c, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @lifetime_val={0x24, 0x9, {0xf, 0x81, 0x9, 0x100}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) (async) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) (async) setfsuid(0x0) (async) sendmsg$nl_xfrm(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)=@newsa={0x138, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x717, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private2, {0x7, 0x1000000000000192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc, 0x4}, {0xffffffffffffffff, 0x0, 0x1f, 0x5}, {0xfffffffe, 0x3fc}, 0x7e, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x844) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x14, 0x3a, 0x301, 0x70bd27, 0x25dfdbfe, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x2004c882}, 0x4) (async) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000280)={0x5, 0x0}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)={@fallback=r7, 0xffffffffffffffff, 0x1d, 0x3c, 0x0, @void, @void, @void, @value=r12, r6}, 0x20) (async) r13 = syz_clone(0x8000000, &(0x7f00000003c0)="66facd86327b2d5db8650632f9896873ec8da807bd1ec4bf", 0x18, &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)="4c5ff708c58eb91235d0d4d362f355d0d3c374465f662afadc7c779e7742f9a95664146f0bb43a416aaf68e0f6043bc3e56eaeecf3b17e359884824855e1900342284d93210bddafed840362d825e7759b42769107c6545ff21bf3965aa363e43fdfc15af0b22ae97b5d232ff37be0c09a73180a40765c2989041fce67d6032369543d861eac2e8a8f95035ea5d44cd7f4") ptrace$peeksig(0x4209, r13, &(0x7f0000000580)={0x2, 0x1, 0x7}, &(0x7f0000000880)=[{}, {}, {}, {}, {}, {}, {}]) (async) ioctl$XFS_IOC_FSGROWFSLOG(r5, 0x4008586f, &(0x7f0000000340)={0x6}) 2m2.969881393s ago: executing program 7 (id=4779): r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r0, 0x707, &(0x7f00000000c0)={&(0x7f0000001a80)=[{0x1, 0xa000, 0x0, 0x0}, {0x6, 0x7810, 0x0, 0x0}, {0xdf8e, 0x1000, 0x0, 0x0}], 0x3}) r1 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0) ioctl$USBDEVFS_REAPURB(r2, 0x4004550c, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000200)='\\\\+,\'$%+\x00', &(0x7f0000000240)='*\x00', 0x0) ioctl$IOMMU_VFIO_IOAS$GET(r3, 0x3b88, &(0x7f00000001c0)={0xc, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r4, 0x0, 0x0}) ioctl$IOMMU_DESTROY$stdev(r3, 0x3b80, &(0x7f0000000180)={0x8, r5}) 1m47.889480309s ago: executing program 35 (id=4779): r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r0, 0x707, &(0x7f00000000c0)={&(0x7f0000001a80)=[{0x1, 0xa000, 0x0, 0x0}, {0x6, 0x7810, 0x0, 0x0}, {0xdf8e, 0x1000, 0x0, 0x0}], 0x3}) r1 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0) ioctl$USBDEVFS_REAPURB(r2, 0x4004550c, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000200)='\\\\+,\'$%+\x00', &(0x7f0000000240)='*\x00', 0x0) ioctl$IOMMU_VFIO_IOAS$GET(r3, 0x3b88, &(0x7f00000001c0)={0xc, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r4, 0x0, 0x0}) ioctl$IOMMU_DESTROY$stdev(r3, 0x3b80, &(0x7f0000000180)={0x8, r5}) 1m36.311740219s ago: executing program 0 (id=4900): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000780)={0x1, r1}) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) ioctl$sock_ifreq(r2, 0x8994, &(0x7f0000000100)={'bond0\x00', @ifru_data=0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000002c0)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0, 0xc000}) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001517ee40f00a057a00f6000203010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r6, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000300)=ANY=[@ANYBLOB="200f1100000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r7 = fanotify_init(0x200, 0x0) fanotify_mark(r7, 0x21, 0x40000856, 0xffffffffffffffff, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x4) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=ANY=[@ANYBLOB="bff698d7eea79550001e000802110000010802b900258408000000000000000064000100000612020202020253088284"], 0x36) write$sequencer(r3, &(0x7f0000000300)=[@raw={0xc, 0x0, "aa4fdfe21b18"}, @t={0x4, 0x5, 0x7f, 0x9}, @s={0x5, @generic=0x1, 0xf, 0x81}, @s={0x5, @SEQ_MIDIPUTC=0xb3, 0x1f, 0xbf}, @s={0x5, @generic=0x63, 0x3, 0x3}, @l={0x92, 0x3, 0xd0, 0x13, 0x6, 0x4, 0x8000}], 0x24) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) 1m34.719389214s ago: executing program 0 (id=4912): syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0) write$proc_mixer(r0, &(0x7f0000000240)=ANY=[@ANYBLOB='LINE \'\' '], 0xbb) close(r0) socket$l2tp(0x2, 0x2, 0x73) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f0000000280)={&(0x7f0000000400), &(0x7f0000000280)}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r2, 0x0, 0x0, 0x404c0c6, &(0x7f0000000180)={0x2, 0x4e21, @remote}, 0x10) sendto$inet(r2, &(0x7f0000000100)='J', 0xffe3, 0x4004084, 0x0, 0x11000a00) 1m34.632433573s ago: executing program 0 (id=4914): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(r0, 0x0, 0x0, 0x2003, 0x6) (async) preadv(r0, 0x0, 0x0, 0x2003, 0x6) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) (async) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000180)={0x1}) r4 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'dummy0\x00', @link_local}) r6 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$tcp_congestion(r6, &(0x7f00000000c0)='vegas\x00', 0x6) close(0xffffffffffffffff) (async) close(0xffffffffffffffff) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000100001dd00000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a010200000000000000010073797a30000000000900030073797a320000000098000000060a010400000d1de641720000000000000100000008000b40000000005c6aef80580001800b000100746172676574000048000280300003005fad843dc5c1efe84ced18d4422d5b0b86e8441958d3d2ea41149f1e55359af069a2a5e039ccf56f068a5a0b09000100534e41540000000008000240000000020900010073797a30000000001400058008000140000000320800024000000000140000001100010000000000000000000000000a0000"], 0x10c}, 0x1, 0x0, 0x0, 0x4}, 0x0) execveat$binfmt(0xffffffffffffff9c, r4, 0x0, 0x0, 0x0) r8 = syz_open_dev$loop(&(0x7f0000000200), 0x4f98, 0x40100) ioctl$LOOP_CONFIGURE(r8, 0x4c0a, &(0x7f00000005c0)={r8, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1c, 0x1c, "fee8a2ab78fc179fd1f8a0e9a1af1ea09dc2b7fb0a010000000000000000030000000000000000000000000000000000000000000000001b00", "28095397bab22d0000b42076c1ce8ef05f819e01177d3d458dac0000000000000000000800000000003788cf8f00", "90be8b1c5512406c7f00", [0x4, 0xa]}}) socket$inet6(0xa, 0x6, 0x0) (async) r9 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r9, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @mcast1}, 0x1c) r10 = syz_open_dev$loop(&(0x7f0000000300), 0xc000000000000001, 0x168081) ioctl$LOOP_CONFIGURE(r10, 0x4c0a, &(0x7f0000001280)={r8, 0x0, {0x2a12, 0x80010000, 0x0, 0xa, 0x5, 0x0, 0x1, 0xe, 0x11, "e63adea23850fbd1f809000006aca7ca64c6a4b4e00d9691dda1af01000000000008000000000100ff0100", "2809e8dbe1b22d0000b420a1a93c7540f476779e0117613dd4070000ebff08000000000000000000020000000800000000faffffff00", "e7460000102000000000e4440000002000000000000000000000008bd02800", [0xe0, 0x9]}}) ioctl$KVM_SET_PIT2(r3, 0x4070aea0, &(0x7f0000000280)={[{0x4fba, 0x5, 0xfd, 0x7, 0x98, 0xf8, 0x2, 0x1, 0x9, 0x5, 0x4, 0x6, 0x9}, {0x10, 0x400, 0x14, 0x9, 0x7, 0x6, 0x31, 0x5, 0x1, 0x7, 0x7f, 0xd, 0x201}, {0x7d, 0x4c3e, 0x7f, 0xc, 0x5c, 0x2, 0x4, 0x4, 0x68, 0x7, 0x0, 0x6, 0x1e7}], 0x5}) (async) ioctl$KVM_SET_PIT2(r3, 0x4070aea0, &(0x7f0000000280)={[{0x4fba, 0x5, 0xfd, 0x7, 0x98, 0xf8, 0x2, 0x1, 0x9, 0x5, 0x4, 0x6, 0x9}, {0x10, 0x400, 0x14, 0x9, 0x7, 0x6, 0x31, 0x5, 0x1, 0x7, 0x7f, 0xd, 0x201}, {0x7d, 0x4c3e, 0x7f, 0xc, 0x5c, 0x2, 0x4, 0x4, 0x68, 0x7, 0x0, 0x6, 0x1e7}], 0x5}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x4498bda7e2139f51, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x4498bda7e2139f51, 0x0, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r11, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0x0, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x5, 0x76, 0x1000200004, 0x4, 0x2, 0x0, 0x1], 0x8080000}) (async) ioctl$KVM_SET_REGS(r11, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0x0, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x5, 0x76, 0x1000200004, 0x4, 0x2, 0x0, 0x1], 0x8080000}) 1m33.831351609s ago: executing program 0 (id=4918): r0 = syz_open_dev$evdev(&(0x7f0000000580), 0x2, 0x300) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40000101, &(0x7f0000006780)={0x77359400}) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, 0x0) 1m33.778118991s ago: executing program 0 (id=4919): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) (async) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0), r0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000100)={'wg0\x00', 0x0}) (async) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000140)={@multicast2, @remote, 0x0}, &(0x7f0000000180)=0xc) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x800c000}, 0x0) (async, rerun: 64) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, r2, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r3}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r4}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x10) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=@newqdisc={0x48, 0x24, 0xf0b, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x10}, {0xffff, 0xffff}, {0x0, 0x2194362b35d5d3c3}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x4}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x3b9aca00}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2001}, 0x0) (async) socket$inet6_sctp(0xa, 0x5, 0x84) 1m33.631071282s ago: executing program 0 (id=4920): r0 = socket$rxrpc(0x21, 0x2, 0xa) getsockname(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_GET_SECUREBITS(0x1b) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) syz_io_uring_setup(0x8005365, &(0x7f0000000800)={0x0, 0x79e0, 0x80, 0x2, 0x104, 0x0, r1}, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0)) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000040)={0xf00, 0x160, 0x10, 0x3f, 0x32, 0x1, 0x0, 0x0, {}, {0x400, 0x7fffffff, 0x20000}, {0xc18, 0x1000}, {0x0, 0xc260000}, 0x0, 0xd0, 0x0, 0x0, 0x0, 0x10000004, 0x0, 0x6, 0x9, 0xfffffffd, 0x0, 0x8, 0x16, 0x0, 0x0, 0xa}) syz_io_uring_setup(0x90c, 0x0, 0x0, &(0x7f0000000280), &(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x4) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0x8040480) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000004, 0x1feb405ac7518d90, 0xffffffffffffffff, 0x0) r7 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r7, 0x8108551b, &(0x7f0000002600)={0x0, 0x2, "5a77bd318786aeb202dfcdcdab2a02fa560186d85b25a5665a3247e500f61681905db88235f8a544304cfb2d22415e11068881e50f68530c2b21a100ef00000000ff3111d6847e0c7f719e169a596e5fc008daefba68f6222103472bc55704cdb72b4b996ed82ccb1eaae27969d008ba7d34171111d806726615380fe65a6a0a72e19c2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13e4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b30855a9727d2001457df7be7e1aefe3635b2ee97c143f28def4b73905ca14d90d1f6"}) ioctl$USBDEVFS_SUBMITURB(r7, 0x8038550a, &(0x7f0000000000)=@urb_type_interrupt={0x1, {0x1, 0x1}, 0x7, 0x20, &(0x7f0000000140)="a7563f", 0x3, 0x7ff, 0x1, 0x0, 0xffffffff, 0x1000005, 0x0}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) 1m20.204352362s ago: executing program 4 (id=4984): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) socket(0x400000000010, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$l2tp(0x2, 0x2, 0x73) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) add_key$keyring(&(0x7f0000000100), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x1e, r2, 0xfffffffffffffffd, 0xfffffffffffffffe, 0x1) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) r3 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) keyctl$update(0x2, r3, &(0x7f0000000140)="c4", 0x1) add_key(&(0x7f00000000c0)='ceph\x00', &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000280)="f1768b661ec2d5e08e4c810b4ff1b65f485e9c0f7e7c1e521a212bbbaa2b0a5709dfca2ce78e53477ae6a123c510fa7a96dffcfcb356f19cb7f7b0cf4702d93d19c2e3adbd470ec446", 0x49, r3) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="0600000004000000be7000005c00000000000000", @ANYRESOCT, @ANYBLOB='.'], 0x48) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000008240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000008200)={&(0x7f0000000140)=@getqdisc={0x24, 0x26, 0x8, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x10, 0x1}, {0x0, 0x3}, {0x10, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x240048c9}, 0x64000000) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x14, 0x2e, 0x9, 0x70bd27, 0x3, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x0) socket$l2tp(0x2, 0x2, 0x73) eventfd2(0xba6, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000001a007f000000000000dbdf24818000000000000000000000140002"], 0x30}, 0x1, 0x0, 0x0, 0x4004880}, 0x884) socket$packet(0x11, 0x2, 0x300) socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_setup(0x125b, &(0x7f00000010c0)={0x0, 0xc941, 0x0, 0x6, 0xbfdffffc}, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x101301) 1m20.030525334s ago: executing program 4 (id=4985): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000f80)=@RTM_GETMDB={0x18, 0x56, 0x1, 0x70bd2a, 0x25dfdbfb}, 0x18}, 0x1, 0x0, 0x0, 0x98}, 0x2004040) (async) ioctl$PPPIOCUNBRIDGECHAN(0xffffffffffffffff, 0x7434) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = timerfd_create(0x2, 0x140c00) (async) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) timerfd_settime(r2, 0x0, &(0x7f0000000080)={{}, {r3, r4+60000000}}, &(0x7f0000000180)) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x28, 0x3, 0xf7, 0xfffff020}, {0x6, 0x2, 0x0, 0x5}]}, 0x10) (async) openat$audio(0xffffffffffffff9c, &(0x7f0000000100), 0x600080, 0x0) 1m20.006359262s ago: executing program 4 (id=4986): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001d80), r2) sendmsg$NL80211_CMD_GET_REG(r2, &(0x7f0000004400)={0x0, 0x0, &(0x7f00000043c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c00e70a233941527fea1daeff", @ANYRES16=r3, @ANYBLOB="010025bd7000ffdbdf251f"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x404c000) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_STATION(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="030300000000020000001100000008000300", @ANYRES32=r6, @ANYBLOB], 0x1c}}, 0x14014) sendmsg$NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f0000000700)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000300)={0x354, r3, 0x400, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x4}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x3ff}, @NL80211_ATTR_SCHED_SCAN_MATCH={0xe8, 0x84, 0x0, 0x1, [{0x68, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="824f633848d7"}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x3c, 0x6, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8, 0x0, 0x9}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x2}, @NL80211_BAND_LC={0x8, 0x5, 0x701}, @NL80211_BAND_LC={0x8, 0x5, 0xfffffff9}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x80000001}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x1000}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x1ff}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x6}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x4f2f}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x524d}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="cd4a5047ead9"}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x2}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x24, 0x6, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8, 0x0, 0x80000000}, @NL80211_BAND_5GHZ={0x8}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x60000}, @NL80211_BAND_60GHZ={0x8, 0x2, 0xfffffff2}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="932a71c2de11"}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xf, 0x1, @random="ebb88eb59b498f3be563f3"}]}]}, @NL80211_ATTR_SCAN_SUPP_RATES={0x1f4, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xc9, 0x2, "94a477d1a6e04d329cdaa713a7a3e6ba97ed92b5d49801945a1524b2971ac79f67811e9c404dea41b052bab9c517ed40c39a7c08e60c6caffdb36d2c4dbe6bcd3009c394341eef5126592091e675f61cb0f8eed0d6dec72c777cce2cf8b054f2e7a62062fd7c194574fca1a375a94638472f835b3e84952b2fe951830f1f7e7985fbb9cadbd5372155adaabfae3689727a4273fd4a1b138691d80b60f39479f075e509e7107f8ece53cdd10c98bd943b1f8a87f8ebbd79209ebf50a397b72c52f48ae8f218"}, @NL80211_BAND_5GHZ={0x10, 0x1, "3a7d0de7d2703386a538213e"}, @NL80211_BAND_2GHZ={0xb1, 0x0, "5e0b3affe8207a061c7dda9cb4f2961ff2961af017087dc189bfa17ae8aec08f6ead2e7db801af44ae275ccb8d01eb1b2685a00fb1dcc22ff046f41b9deecae09a97da838d3115f8b127fa431f9c5919931e29bb2f00769defa0a384f55b518eb27961873861177baea416ab45113c85de05e8db4f7fea1c81e3487ea00a2f07b0284728efd11b5cb318497cdab517041fad27490933aafb50a27656bb7eac41555145476ba276a6147a6917bf"}, @NL80211_BAND_5GHZ={0x5e, 0x1, "6bc4fe5cb259693fa3b0e5d52686a6fb7f10a11eaf78d3522c1474629fdb5fb4ec8d5ee706e3480f8c358979338bead72127dee5dc0205428612f315020edae38729489acc9bc9eb91911169b092b7b4b8750e0c545fef89cd8f"}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x44, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x4}, {0x8, 0x0, 0x8}, {0x8, 0x0, 0x8}, {0x8, 0x0, 0x6}, {0x8}, {0x8, 0x0, 0xb}, {0x8}, {0x8, 0x0, 0x2}]}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0xfeff}]}, 0x354}, 0x1, 0x0, 0x0, 0x20000000}, 0x804) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x100, 0x2, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r9, r10, r11, &(0x7f0000000980)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r7, 0x80, &(0x7f0000000480)=@ethernet={0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x0, 0x0, 0x1}) sendmmsg$inet6(r7, 0x0, 0x0, 0x890) io_uring_enter(r8, 0x788b, 0x84b, 0x68, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000000900)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000740)={0x164, r3, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x5, 0x78}}}}, [@NL80211_ATTR_REKEY_DATA={0xac, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="c3781d85eb9d48d5cfc4632e59327aa2ab8f98c441cb4a1ca356f36ee078fd76"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x5}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="29bd0b2ed9fe237ac43206a4821d6a72"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="885fdf40f3247004bd1f983c51bfa0390431f72c73582867e58062d9ef01b623"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="f900"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="a4ffdf9391d5fc5b4bc3d1d7853d9aee6bcdada087daa438"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x9}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "34905541e0fa2013"}]}, @NL80211_ATTR_REKEY_DATA={0x34, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x7f}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "1e10f0944d6ac8ee"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="92fbfaa6df50f47a44a8de426299881748246204f63c901d"}]}, @NL80211_ATTR_REKEY_DATA={0x5c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="4dbdaa13e21975b35eea2930a3f4497b"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "e614c0202e841344"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "ebac06967f7889da"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x7}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="ff04c8daf324dd9da67ed94361cf7d12774546358441984a22d0fbba1294d63b"}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x64044055}, 0x4048001) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0xe, 0x13e, 0x89, 0xffffffff, 0x2}) r12 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60140, 0x0) r13 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r13, &(0x7f0000000a00)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x60, 0x1410, 0x8, 0x70bd27, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x4008088}, 0x0) r14 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0) r15 = ioctl$KVM_CREATE_VCPU(r14, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r15, 0x4008ae8a, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000d000000000001000000000000000141"], 0x38}}, 0x0) 1m19.904568705s ago: executing program 4 (id=4988): sendto$inet6(0xffffffffffffffff, &(0x7f00000002c0)="1c0000001200050f0c1000000049b23e9b", 0x11, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="5400000010000104000000000200000000000000", @ANYRES32=r2, @ANYBLOB="0000faffffff000034001280110001006272696467655f736c617665000000001c000580050021000000000006001f0000000000080022"], 0x54}}, 0x4004850) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdfde, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x3c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfff}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40006}, 0x4048801) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0x1, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000000100bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="100000feffffff00280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x800000, 0x4, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1800}, 0x50) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_usb_connect(0x4, 0x2d, &(0x7f0000000000)=ANY=[@ANYRES8=r3, @ANYRES16=r3], 0x0) 1m19.221327862s ago: executing program 4 (id=4990): r0 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) r1 = signalfd4(r0, &(0x7f0000000000), 0x8, 0x0) (async, rerun: 32) rt_sigprocmask(0x1, &(0x7f0000000040)={[0x2]}, 0x0, 0x8) (async, rerun: 32) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x2) fcntl$getownex(r2, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$PTRACE_GETSIGMASK(0x420a, r3, 0x8, &(0x7f00000000c0)) (async, rerun: 64) epoll_pwait(0xffffffffffffffff, &(0x7f0000000100)=[{}, {}, {}, {}], 0x4, 0xfffffffa, &(0x7f0000000140)={[0x8]}, 0x8) (async, rerun: 64) r4 = signalfd4(r0, &(0x7f0000000180)={[0xc]}, 0x8, 0x81800) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f00000001c0)={0x30000010}) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x54, 0x7, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x1}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x10000}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x4801}, 0x84000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000380)={0x8, &(0x7f0000000340)=[{0x1, 0x5d, 0xff, 0x4}, {0x9, 0x7, 0xa7}, {0x3, 0xf, 0x5, 0x7}, {0x6, 0x7, 0x3, 0x9}, {0x1c, 0x8, 0x8, 0x3}, {0x6, 0xc4, 0x7, 0x3}, {0x2, 0x6, 0x5, 0x5}, {0x8, 0x3, 0x47, 0x101}]}) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, 0x9, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x6}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xfffffffe}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xea}]}, 0x24}, 0x1, 0x0, 0x0, 0xc081}, 0x20048000) r5 = socket$inet(0x2, 0x4, 0x2) setsockopt$IP_VS_SO_SET_STARTDAEMON(r5, 0x0, 0x48b, &(0x7f00000004c0)={0x1, 'gretap0\x00', 0x4}, 0x18) pipe2(&(0x7f0000000500), 0x800) (async) clock_gettime(0x0, &(0x7f0000000540)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF_DMABUF(r1, 0xc0585609, &(0x7f0000000580)={0x2, 0x2, 0x4, 0x100000, 0x3, {r6, r7/1000+10000}, {0x2, 0x0, 0xb2, 0x2, 0xca, 0x35, "b661834b"}, 0x800000, 0x4, {0xffffffffffffffff}, 0x4b, 0x0, r4}) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000680)=@multiplanar_fd={0x3, 0xe, 0x4, 0xa00, 0xa, {0x0, 0xea60}, {0x1, 0xc, 0x5, 0x5, 0x3, 0x5, "97a10ed2"}, 0x0, 0x4, {&(0x7f0000000600)=[{0x6, 0x2, {r1}, 0x6}, {0x401, 0x9, {r8}, 0xa}]}, 0xe970, 0x0, r1}) (async) r9 = syz_usb_connect$uac1(0x6, 0xe4, &(0x7f0000000700)={{0x12, 0x1, 0x389, 0x0, 0x0, 0x0, 0x20, 0xb05, 0x1743, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd2, 0x3, 0x1, 0x81, 0x0, 0x0, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x400, 0x16}, [@input_terminal={0xc, 0x24, 0x2, 0x3, 0x0, 0x5, 0x1, 0xdd3, 0x5, 0x63}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x9, 0x9, 0x2}, @as_header={0x7, 0x24, 0x1, 0x0, 0x1, 0x3}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x100, 0x6, 0x3, 0xe}, @format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0xa, 0x3, 0x84, 0x1, "b47b43c30edef5"}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x7, 0x61, 0x9, "5a2fb033b31de9a1"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x23, 0x0, 0x80, 0x9}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0xf4, 0x5, 0x81, {0x7, 0x25, 0x1, 0x0, 0x7, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x4, 0x3, 0x1, 0x3, "95"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x6f, 0x1, 0x15, 0x4b, 0xf}, @as_header={0x7, 0x24, 0x1, 0x6, 0x4, 0x4}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0xee, 0x4, 0x5, 0x8, "1054", "da"}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0xd, 0x3, 0xee, {0x7, 0x25, 0x1, 0x0, 0x47, 0x3}}}}}}}}]}}, &(0x7f0000000980)={0xa, &(0x7f0000000800)={0xa, 0x6, 0x6b1, 0x5, 0x91, 0x0, 0x8, 0x5}, 0x10, &(0x7f0000000840)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0x0, 0x53, 0x0, 0x70, 0x7, 0xb}]}, 0x3, [{0x4, &(0x7f0000000880)=@lang_id={0x4, 0x3, 0x449}}, {0x44, &(0x7f00000008c0)=@string={0x44, 0x3, "a7663de0f87338f7cec387fb278a86683c0857ea1f732e73b0246354ff7ca696c6e920e4fb1457b1600970f801feb4ea04612d2f249fbb311766978a8bae5d89fa25"}}, {0x4, &(0x7f0000000940)=@lang_id={0x4, 0x3, 0x380a}}]}) syz_usb_control_io$uac1(r9, &(0x7f0000000b80)={0x14, &(0x7f00000009c0)={0x20, 0x24, 0xd3, {0xd3, 0x23, "d65684a4b1035754bf8cf89930812cf216198e9c6eea94754d5d9e7ce1d1a59a04ab3e57aeb01e292dbc8f6984bd622c0f93ff29d6f80c8f53189973acc5ad23d4c51878b15a468fc5191316d098290f9e2acb5128fcdca9018ba1c295172a736819b7686ba9bde299896c9ce7f38062bf5ad48b26f1ab044fb05997dd9b75b09a47b8834eb2b09f7cf1eb0c968d6a458769784c47e4627a16e2d7b090782668f3a1694127ea6ea81c6bd4e953f61f719ce9926084c3d190f984ac5d91ce67a70277a4e4c80c96fa72247e374e51f4be10"}}, &(0x7f0000000ac0)={0x0, 0x3, 0x81, @string={0x81, 0x3, "ebeef66a37c483c8ad4fc4751e4e0e9a434d180fc375795628e694f599e74a0c21bb43fee60a9b3068ab3abd2ad8f630d6905bacec6a17fbcce8c67b6d5971b9b7fd262dc1f64c58d0c1430f876ac5c859d63c4016f486be44d8f98bc3a38f0f1c3b98c74595113f23d9d86e693cdf22e0b6e6817daaa46a8a9a192ed2962c"}}}, &(0x7f0000000dc0)={0x44, &(0x7f0000000bc0)={0x0, 0xd, 0x8, "163f16be9dd0ac0f"}, &(0x7f0000000c00)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000c40)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000c80)={0x20, 0x81, 0x2, "dc3e"}, &(0x7f0000000cc0)={0x20, 0x82, 0x2, "a058"}, &(0x7f0000000d00)={0x20, 0x83, 0x1, '-'}, &(0x7f0000000d40)={0x20, 0x84, 0x2, "32dc"}, &(0x7f0000000d80)={0x20, 0x85, 0x3, "827b35"}}) (async) recvmsg$unix(r4, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001380)=[{&(0x7f0000000e40)=""/142, 0x8e}, {&(0x7f0000000f00)=""/78, 0x4e}, {&(0x7f0000000f80)=""/30, 0x1e}, {&(0x7f0000000fc0)=""/246, 0xf6}, {&(0x7f00000010c0)=""/199, 0xc7}, {&(0x7f00000011c0)=""/219, 0xdb}, {&(0x7f00000012c0)=""/97, 0x61}, {&(0x7f0000001340)=""/30, 0x1e}], 0x8, &(0x7f0000001400)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x90}, 0x0) sendmsg$nl_route(r10, &(0x7f00000015c0)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001580)={&(0x7f0000001540)=@getrule={0x14, 0x22, 0x400, 0x70bd28, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8005}, 0x54) ioctl$KVM_RUN(r11, 0xae80, 0x0) (async) syz_usb_connect$uac2(0x3, 0x10b, &(0x7f0000001600)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x1235, 0x8204, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xf9, 0x3, 0x1, 0x7, 0x40, 0x1, {0x8, 0xb, 0x2, 0x9, 0x1, 0x2, 0x20, 0x2}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x2, 0x7, 0x2b}, [@source_unit={0x8, 0x24, 0xa, 0xae, 0x4, 0x6, 0x3, 0x4}, @extension_unit={0xb, 0x24, 0x9, 0x1, 0x3, 0x60, "ae90fe70"}, @extension_unit={0x7, 0x24, 0x9, 0x6, 0x0, 0x9}, @source_unit={0x8, 0x24, 0xa, 0x0, 0x0, 0x70, 0x4, 0x3}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x4, 0x7f}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0xd, 0x3, 0xd, 0x1, "01a3", "c1"}, @as_header={0x10, 0x24, 0x1, 0x4, 0xf7, 0x1, 0x3, 0x5, 0x1, 0x8}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x0, 0x2}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x9, 0x4, 0x2, 0x2, "1efa377f"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x1, 0x0, 0x32, 0x9}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x6, 0xd, 0x3, {0x8, 0x25, 0x1, 0x1, 0x3f, 0xfb, 0x8d6a}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x7, 0x2, 0x5, 0x3, 0x7}, @as_header={0x10, 0x24, 0x1, 0x2, 0x1, 0x0, 0x5, 0x9, 0xb, 0x34}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x0, 0x3, 0x4, "a61dd1fdae7e"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0xd, 0x7f, 0xb0, 0x9, 0x6}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x6, 0x6c, 0x7f, {0x8, 0x25, 0x1, 0x3, 0xe, 0xa3, 0x3}}}}}}}}]}}, &(0x7f0000001a80)={0xa, &(0x7f0000001740)={0xa, 0x6, 0x200, 0x7, 0xa2, 0x9, 0x40, 0xcf}, 0x52, &(0x7f0000001780)={0x5, 0xf, 0x52, 0x2, [@generic={0x42, 0x10, 0x2, "dcb5e4bc6acfcd84f4e6f4349610812dd0605befd34684e4aeaed0444a0f9fc35e166b4d93ca2f47571e588876a065c343697a7ddfff324e6de67cd9381604"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x4, 0x4, 0x9, 0x7ff, 0x6}]}, 0x5, [{0xaa, &(0x7f0000001800)=@string={0xaa, 0x3, "d1e79aaae6034a29499fa64214373e2c4162002a2cfbaca562d581bf9f3e172684a785b6a708186496d6f385c015915c646930e073ad8cd28de53d393cb58ed291d0c92f53bcd31aecaa6220930fe0a142523091c0d42dc55477c0d5da887bd31584f62a31b81458510be0b774f2c00b1a355bbbf21d6c996c9da976f9b987fc46cea096d9b75a31e14236fdf49382964097cb02ffcc9b3bb5c300084bbf6f07c7687b57cfb70365"}}, {0x4, &(0x7f00000018c0)=@lang_id={0x4, 0x3, 0x437}}, {0x1b, &(0x7f0000001900)=@string={0x1b, 0x3, "cf57aff7dec07b57fcdcf141bb63fb2fada24153dd14dfce19"}}, {0x2b, &(0x7f0000001940)=@string={0x2b, 0x3, "d423c41eaab5b246c4dba6c11f116d59c3ae064e4edbafad4e7db8ca621414c6a02ed03adbd925f1bf"}}, {0xd7, &(0x7f0000001980)=@string={0xd7, 0x3, "c5b1175eaf92818e27da67b9203c0ea045384b95eb8b809b7fb8993319f79c2757aa6a28e294b14d31222dcc3568db3e71277de0d375ac9dd2d53d3383cf1d21b1bf932d36373b1425c6eef83292c20203ce715d4a028b868a5c152c807a3a2db19ff0d09b3ff60de7d1fed100e5a16d1fb7d8b39633b4597aef6a8df598a7aae16a3bb071ac6e19e6da0b726ef4ce0b5a76f1e036ef140a74ccf59c212a348a4c84b6e9d3ad9504921d9b44c3811dab683bd407dc6f9eae7199e27e735b260633848af5b58f2e263ca7330e936928aac79ed294cb"}}]}) (async) r12 = accept4$inet(r1, &(0x7f0000001b00)={0x2, 0x0, @empty}, &(0x7f0000001b40)=0x10, 0x80000) setsockopt$IP_VS_SO_SET_ADD(r12, 0x0, 0x482, &(0x7f0000001b80)={0x62, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x4, 'sh\x00', 0x20, 0xc, 0x5f}, 0x2c) (async) timer_create(0x1, &(0x7f0000001d80)={0x0, 0x3b, 0x2, @thr={&(0x7f0000001bc0)="64310b85ead82c904b1d37c6357afed3ea681b444d4cb4d02a025741b8b9666f13a01bfd97eb9c70bd52bd713ffdc7f2c73c8e5a9f4b19f051e2f04d0b2a030e4b9a1b231e3840a7cc1745af2483a19d2a3f2034f3c32ef61f2f152f300ad5cc9fb548a9a8da5a590add711f4bfcf1c0ec31ff389583f7ff7d799af2651c312069df46e7d2fcc793da51a9074cf024f1963e696d82601b18e2d203732573000ffaddd48130db76b33dce8e9478a7c3d744fa6758b2aa9b9d6867b64f7fc0c159e4ae892c74d89ac925dc488bd83ef95b2ba22ffdea13105acc0d6025d6033175cc8854f3b6", &(0x7f0000001cc0)="8aa3c4d9d83329984458ec2d93b0d3476acfe3912091a63b904177aa9c27d0fb292cd9dd692a3b6611fcc3e19e0779ff07f8053e73d4d6c0361f7f54a6c4e9cc6c695d1b4fdedf1010da3c82afafe51cbe9d8987264c7d6fef6fa71004073c1eee2e8466bf6b2cdbc2a279d1525f335e0795c449d77226866f0e888923c07a4d8b0c4bb090695ebb75bd705187a0b5c22b58dbde57c0b91ba8999fc832edeffee66a0a"}}, &(0x7f0000001dc0)=0x0) (async) clock_gettime(0x0, &(0x7f0000001e00)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000001e40)={0x0, 0x0}) timer_settime(r13, 0x1, &(0x7f0000001e80)={{r14, r15+10000000}, {r16, r17+60000000}}, &(0x7f0000001ec0)) 1m19.055896344s ago: executing program 4 (id=4991): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000a000000000000001314e6a5786b81845a05222947c3ef44ccd246b14e37c6ddaead494cc9f6246993147a0a08b8acde1e7ff3099d7665508c6da4e53793508e8868938ce1d82955e24c6621cbf79203eced0d58c01698c7b4181c94871d0b4797fbc7af40a05cb253afdab62c8672283fdee1fac29991293795b88979068d57471c87b66fe249fcfa8706bef78b5e67ef882a2e610d8ae0e96d33662b3b9ea75f4437ec1cbd2cb4b86a28bdfb262f27b3d691134a99603433f645a13e76117e6ce52b30b4c234488590ba1e273af9de909b435262f8ca4b92ee"], 0x48) close_range(r1, r1, 0x2) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702deff14000000b7030000000000008500000083000000bf0900000000000055090100000000009504000000000000bf91000000000000b7020000000000008500000000000000009500000000000000befed76a03686b99b38e03f7eb4ab742992fbfaf"], &(0x7f0000000000)='syzkaller\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @loopback}, @in6={0xa, 0x0, 0xffffffff, @local}], 0x38) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x4, @empty, 0x2}], 0x1c) sendmsg$can_raw(0xffffffffffffffff, 0x0, 0xc008004) bind$unix(0xffffffffffffffff, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r2, 0x0, 0x0, 0x240458d1, 0x0, 0x0) ioctl$SIOCGETMIFCNT_IN6(0xffffffffffffffff, 0x89e0, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) unshare(0x42000000) syz_usb_connect$cdc_ecm(0x3, 0x4d, &(0x7f0000000380)=ANY=[@ANYBLOB="1201010202000020"], 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2000000097d54a3c22f6559f409070f3df954e000a05000000000000000000010000000900010073797a300000000020000000020a05000000000000000000010000050c0004400000000000000001140000001100010000000000000000000000000a"], 0x68}}, 0x0) sendmmsg$inet(r3, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000140)="00000000b99b5c65df", 0x9}], 0x1}}], 0x1, 0x20008000) recvmsg(r3, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001380), 0x5c}, 0x123) shutdown(r3, 0x1) syz_usb_connect$midi(0x4, 0x48, 0x0, 0x0) set_mempolicy(0x4005, &(0x7f0000000080)=0x4, 0x8) syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a3201000000a4000000060a010400000000000000000100000008000b40000000007c000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020007000000440001800c0001006269747769736500340002800800034000000004080001400000001408000240000000120c0005800800010088634d580c000480080001"], 0x118}}, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="4801000042000100fffffffffddbdf250200000004003880100001800c00c800020000000000000020010480"], 0x148}, 0x1, 0x0, 0x0, 0x8800}, 0x4040) 1m18.388858495s ago: executing program 36 (id=4920): r0 = socket$rxrpc(0x21, 0x2, 0xa) getsockname(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_GET_SECUREBITS(0x1b) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) syz_io_uring_setup(0x8005365, &(0x7f0000000800)={0x0, 0x79e0, 0x80, 0x2, 0x104, 0x0, r1}, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0)) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000040)={0xf00, 0x160, 0x10, 0x3f, 0x32, 0x1, 0x0, 0x0, {}, {0x400, 0x7fffffff, 0x20000}, {0xc18, 0x1000}, {0x0, 0xc260000}, 0x0, 0xd0, 0x0, 0x0, 0x0, 0x10000004, 0x0, 0x6, 0x9, 0xfffffffd, 0x0, 0x8, 0x16, 0x0, 0x0, 0xa}) syz_io_uring_setup(0x90c, 0x0, 0x0, &(0x7f0000000280), &(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x4) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0x8040480) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000004, 0x1feb405ac7518d90, 0xffffffffffffffff, 0x0) r7 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r7, 0x8108551b, &(0x7f0000002600)={0x0, 0x2, "5a77bd318786aeb202dfcdcdab2a02fa560186d85b25a5665a3247e500f61681905db88235f8a544304cfb2d22415e11068881e50f68530c2b21a100ef00000000ff3111d6847e0c7f719e169a596e5fc008daefba68f6222103472bc55704cdb72b4b996ed82ccb1eaae27969d008ba7d34171111d806726615380fe65a6a0a72e19c2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13e4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b30855a9727d2001457df7be7e1aefe3635b2ee97c143f28def4b73905ca14d90d1f6"}) ioctl$USBDEVFS_SUBMITURB(r7, 0x8038550a, &(0x7f0000000000)=@urb_type_interrupt={0x1, {0x1, 0x1}, 0x7, 0x20, &(0x7f0000000140)="a7563f", 0x3, 0x7ff, 0x1, 0x0, 0xffffffff, 0x1000005, 0x0}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) 1m3.840492424s ago: executing program 37 (id=4991): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000a000000000000001314e6a5786b81845a05222947c3ef44ccd246b14e37c6ddaead494cc9f6246993147a0a08b8acde1e7ff3099d7665508c6da4e53793508e8868938ce1d82955e24c6621cbf79203eced0d58c01698c7b4181c94871d0b4797fbc7af40a05cb253afdab62c8672283fdee1fac29991293795b88979068d57471c87b66fe249fcfa8706bef78b5e67ef882a2e610d8ae0e96d33662b3b9ea75f4437ec1cbd2cb4b86a28bdfb262f27b3d691134a99603433f645a13e76117e6ce52b30b4c234488590ba1e273af9de909b435262f8ca4b92ee"], 0x48) close_range(r1, r1, 0x2) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702deff14000000b7030000000000008500000083000000bf0900000000000055090100000000009504000000000000bf91000000000000b7020000000000008500000000000000009500000000000000befed76a03686b99b38e03f7eb4ab742992fbfaf"], &(0x7f0000000000)='syzkaller\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @loopback}, @in6={0xa, 0x0, 0xffffffff, @local}], 0x38) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x4, @empty, 0x2}], 0x1c) sendmsg$can_raw(0xffffffffffffffff, 0x0, 0xc008004) bind$unix(0xffffffffffffffff, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r2, 0x0, 0x0, 0x240458d1, 0x0, 0x0) ioctl$SIOCGETMIFCNT_IN6(0xffffffffffffffff, 0x89e0, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) unshare(0x42000000) syz_usb_connect$cdc_ecm(0x3, 0x4d, &(0x7f0000000380)=ANY=[@ANYBLOB="1201010202000020"], 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2000000097d54a3c22f6559f409070f3df954e000a05000000000000000000010000000900010073797a300000000020000000020a05000000000000000000010000050c0004400000000000000001140000001100010000000000000000000000000a"], 0x68}}, 0x0) sendmmsg$inet(r3, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000140)="00000000b99b5c65df", 0x9}], 0x1}}], 0x1, 0x20008000) recvmsg(r3, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001380), 0x5c}, 0x123) shutdown(r3, 0x1) syz_usb_connect$midi(0x4, 0x48, 0x0, 0x0) set_mempolicy(0x4005, &(0x7f0000000080)=0x4, 0x8) syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a3201000000a4000000060a010400000000000000000100000008000b40000000007c000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020007000000440001800c0001006269747769736500340002800800034000000004080001400000001408000240000000120c0005800800010088634d580c000480080001"], 0x118}}, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="4801000042000100fffffffffddbdf250200000004003880100001800c00c800020000000000000020010480"], 0x148}, 0x1, 0x0, 0x0, 0x8800}, 0x4040) 16.34793679s ago: executing program 6 (id=5289): r0 = syz_open_dev$video(&(0x7f0000000080), 0x7f, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000006000/0x2000)=nil, &(0x7f000000d000/0x4000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff6000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = socket(0x8, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) r4 = syz_usb_connect$uac3(0x0, 0xa7, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x0, 0x8, 0x8001, 0x0, 0xaf, 0x0, 0xfffffe0000000001, 0x7, 0xffffffff}, 0x0) syz_usb_control_io$uac3(r4, &(0x7f00000003c0)={0x14, &(0x7f00000002c0)={0x0, 0x3, 0x2, {0x2, 0x4}}, &(0x7f0000000380)={0x0, 0x3, 0x19, @string={0x19, 0x3, "8a4cad4252b6419ddbda59a90840697ab66a319957dc92"}}}, &(0x7f0000000700)={0x44, &(0x7f0000000400)={0x40}, &(0x7f0000000440)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000480)={0x0, 0x8, 0x1, 0x3}, 0x0, &(0x7f0000000500)={0x20, 0x82, 0x3, "d61fba"}, &(0x7f00000005c0)={0x20, 0x83, 0x2, "75c2"}, &(0x7f0000000680)={0x20, 0x84, 0x1, 'R'}, &(0x7f00000006c0)={0x20, 0x85, 0x3, "da047e"}}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x80000001, 0x3) ioctl$BINDER_SET_MAX_THREADS(0xffffffffffffffff, 0x40046205, 0x0) r5 = syz_open_dev$video(0x0, 0x7f, 0x0) ioctl$VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x3, 0xd06, 0x32315659, 0x4, 0x4, 0x3, 0x3, 0xfeedcafe, 0x2, 0x2, 0x2}}) tee(r2, 0xffffffffffffffff, 0xffff, 0xb) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000012edfffebfa30000000000000703000028feffff620af0fff8ffffff61a4f0ff000000003e040000000000003e000000000000005504000011edfffe2500000017ffffff460400007fffffff7b0a00fe000000006e04000000000000e5000000000000009500000000000000023bc065b7a379d17cf9333379fc9e84af69912435f1b6a693002e7f3be3619184e50b91f32050e436fe275daf51efd601b6482a0800000098efd2a102ee010400006e7a1de4a21f379dbf01de00b1b564fef3bef70548aed0d600c095199fe3ff3128e599b0eaebbdbd7359a48f5b0afc532ef58de3c1b7646cb7798b3e6440c2fbdb00a3e35208b0bbf12cd8dff095edc710e4000000000000009fbe4b61a615c6c57a2b649dc74a1a610643b08d9e104d4d91af25b8123deda8a3658d42ecbf28bf6d8e8afcb913466aaa7f6df70252e79166d8582755a314d31a76e42f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0800000000000000d5f728d236619074d6ebdf098bc908f50ae728a40f9411fe7226a4040b96e37c4f46010400000000c3da29faf75ddd1aa96960bca97af133824b881cc1f62c0f8f8f0e8d76b86f9c45636614786f5a2cb77230a874640dcbe0b20bb77c022d4cab080078fce8c5c81b7037181fc2f18f781aaa6e2957d7e39cc1baddcb7ec6667e699f24e41697ee7ea23e4b29a8b6cc9a1f5a7b3caae05f1300010000949b3aab06b1e042ff2164d80c8ab1c156b97e5889685a96949e4cb40df77b8bb84b0e733a63784ccc214d930cbb7e090df9a2867b3acec439c163fc8706869ada11390d4dbcf840fa68e7d7071b53ac29df826f8ae6d6e18c1e0600bf870768d5217e9bb5a05d9e224e67f1231bd236ed200073824d93c4e1a0f50a74bb4850486727d970acc546087acbf30f2f8165b47ba56dfadd14b306e98931485747292c6fe6e188750cf4f87cce2aa7d67c7133a9f05954cde298a35ea6d715ba80aee6330000000000000000000000000000000000004000000000000000038600008fb854adb4f8080064e8407c6bdb37114c80fbaa4a0ec5aaf4b0ac6f2128668279eb6fc144344e2d461c9a1be8fa0061ea9d55ee4716bea8e1cebf9ed39325ab4c5530dd6ee9fffc00000000000000d7c5af73c683625aaad5eda5004a76c9f8975ed4c5e4eb3e77e9885f69754932609f19e2f615a01cb6d17fbf5cb539403cb0572534f054d5514ad8264f7b029b2bdf2ca4958a62a6e744f9a4c1e646e1dd2ca19583f0f8b0dc53debd7d44f334e6ed7445a9580f970e483b307c4b3c018bc194b23d37e6a2e52d8265e5aab6fec586d52386e8c07a88c88e8faec5f1b16b2014f6952ce7d6be12c6bdb9651ca6fc907061be311d1354e6295698594a73136237bee068d3819400e43544830a3f74b7942f22336953978a5b2032da4238cc61162c04c1297395b73e18c9387615a2bc87d9e2445f3d323d3fac347926a4bac694c55fe9d145906d410f58f1951405d10504efe402cae085afef5dbd617e87ddbd239e4a50d7eb8e327fb5db12cbd6a9efe8e671c4f251cafffe3400a670d14b9b3cd8d86e492997a0168c022ef3536bd1dc731f4f9f8cb66701f4578ba4cb9b706e605a88c3857fb8aaaa95024f8da775f72950212b84fc6133ae14d1429cd4905dabb52e43af7e65acf97b4951fa1e967d16a5ed642efc855a4a46b85cd079934ad3188276efae9387eaa232697526e24b5d4fded86c3811ccd00520150b16000080122965558074956da5e4c3bbefcb64aa8be4456ed2caf0f467b6bbf3aa4371f5e76ab3f6a20278a3c779e03afd9a6af6fd518e5dce030f88ec5a5cb7601a161da0f80893220800c523040d13e1f1300c2c6555bce60d95dd3288e53435713f03add23f14c8db5555c62de4f626483632a2ab547f88dd6efec73a0271a19ca3aa860aa4dcaeeb9bd91a0cb429efae2a5fcc08b3a572969bbe917d1767e38ba49e3e57fafea83e495a6a1d1a4ebf83434986091dd66ffe3ffed0c39552a312e2db596d9c827e02f6fc13c8ddbb50bfd7dd8aa2f35f259fc83e007fe79d2d25e30830b92fca00a292dd3b856faa4b7e66e1b64505f65900839df71a97d4d07d37f7ecf8ed9a22da26ae674bba16c204f6b2f8f74fc56b7126d7c11ece6e88ec41192aaee75415c58d264a2b6adae02c821b62428902aad499825ab85a348638384cd12e61dbde5c47056f0a20b4e2a2328d5db5cf026657a129e6be231acf5f57995c60d9fca5f63a0dfd18054717120bda466d04774b53208ad8b022719ca77a4e0a66b4708f791d849a5e2aaa0074a9560ede2600df5a5c41392fe9460080fcb1e65233fb8dbeec4c86dbcf6a0673e38d2d3615e5bfbde44afe0fa7564231fff7e7f1f3ad68492dd2cccb15b5d7d3e37e8b7d28921c4b9280979521173f322df408d9818b6cc400090300000021911480a876fbba698801937e8b4264eb6f5137bdaa075f1488d22230592a79000000000000000000000000000000000000000000110000000000000000000000000000000000000000000000000000000000000000002f316aa0886c174b73decb46c1c85edf50d8fcbac5ff76b365611666da86a8e65b308706bd7c000000000000003f7cd4d5cb9076b81b7741ec03877afb5237ea1694addebc14c3ae49f88c462ea2050acf2d9a97d3be29a5614d1eba2c98cf0236401e02d7c445e50f76419ab4f78f67a09e63dd4faa2e7b59399f055f2fa278783f26d0a52aefb0a5ef0b41e14a6fe6ba306206670b84894e901a523fcbadfeff535f2514bc834e876810d9a6a78e70a9e22860c36a724770b4185de44db6bf21fef32a8d5b36d9014f38fee012365f963b2a85e7d8075c333475b9f0284405e3127dde7e41285fbe0bdd370c06c6a41744c3d24eab511317f97b7b4a1c2ec33fedc46e9bf0fa640eebd3d58f0ebdb7cb8ccffd6d6ab7e0e843591d2618e2d2cdc7081c8fafffe9c3500800000087de4ee7aac6478d99de7dd82bef044a6d33c789d566c90c46ad581aa22f910547a77d55e26bf19f1d4661550b177ef53933a305e69b8a95119dcf5bda599d625054776151b2cd1fcde238bdc527594a6c17aa9728af24e2bb7a3830e7092b01b119ea4e7e7f0e21527d622cc29c9f0c8720195368f8374337ab4d130619d93c5ef37e7ddd0b2da147e6e513455b88753452de959a6cbfa1ffbc7ad5d8c3b48017fd31dcf72f337b639253f44cb27a12174bc4c191e21015d0c431a71906eb9c6a14c8a060459ef26787ce3d1cbfd5cc459f0048b5d06f6cbd3e9b34c89f3fb2f951ae81d7fcc8bc0000000000000000000000000000000000000000009231feef3117197c796369f776c8b2ea3970f358107945d9e74e9bdfa58e68b65a8f01bc4b73cc31df5aa29f363917f90e3fa1eaf553db1c761dd9b634a9c4d7c21c24fe6d953ed9438cad0f8dfe03e5e2f73019352f1fb682a5a6ebbf24ebc49e3d7058e696eb3f4b642f36c9006c0067e24a64aa8c53dd824a3c08bfda74a143c855030ae004ac797c575c202d8091eb77565212548ead770d68000000000099347593f67da85d1c962bfb320d1553a74ec3bf003ba62b1784dbf0168a7e85f28b77bdebce96bf386a6dd5df162a16f2b7e8a4de0ffc464a87f91f81866d2ef0af71ebb07a739c3cb1b7000000000000"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x43}, 0x48) write$UHID_INPUT(r6, &(0x7f0000001580)={0xfc, {"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", 0x1000}}, 0x1006) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="00000000001000001c00128008000100677265001000028008000700e00000020400120008000a00", @ANYRES32=r7, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x2000000) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc8a2, 0xc000, 0x1, 0xf3}) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000240)={0x8, 0x31303553, 0x1, @stepwise={0x5, 0x6, 0x1, 0x8, 0x2, 0xe000}}) 13.290425413s ago: executing program 6 (id=5296): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x1, 0x800}, 0x0, &(0x7f0000000240)={0x1f, 0xffffffffffffffff, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000140)={0x0, 0xdffffffe, 0x80, 0x0, 0xfc, "8100e1c8e80b598c36ff000800"}) r2 = syz_open_dev$video4linux(&(0x7f0000000000), 0x8004000000071, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r2, 0xc0585605, &(0x7f0000000100)={0x1, 0x1, @start={0x7fffffff, 0x1}}) syz_open_pts(r1, 0x141601) close_range(r0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @dstopts_2292={{0xe8, 0x29, 0x4, {0x4, 0x1a, '\x00', [@generic={0xfe, 0x72, "f4a4a3142ee1e12b9826287997a6b33d89f3d60da1641d9fe3896c3c1b6c130ef4f01be8f5836d417874540898619050b14420ab124b11de36afb16ef4fc1cf3f4e4fa0e647cd1b07b068d3894180b6aa7527a4a8252f6836a0d67a7782c675a838ea989e567e4774de1f52d188e0b0888c5"}, @calipso={0x7, 0x38, {0x0, 0xc, 0x7a, 0x8001, [0x5, 0x9, 0x1, 0x6, 0x4, 0xb]}}, @ra={0x5, 0x2, 0xa7e}, @pad1, @hao={0xc9, 0x10, @private2}, @generic={0x93, 0x7, "e80ee304ecb784"}]}}}, @hoplimit={{0x14}}, @hopopts={{0x70, 0x29, 0x36, {0x5e, 0xa, '\x00', [@pad1, @pad1, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x20, {0x3, 0x6, 0x0, 0xfff, [0x962, 0x1, 0x1]}}, @generic={0x4d, 0x2, "1d92"}, @generic={0x8}, @calipso={0x7, 0x18, {0x3, 0x4, 0x3, 0x7, [0x0, 0x8000]}}, @generic={0x1}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x3a, 0x4, 0x2, 0x70, 0x0, [@mcast1, @mcast2]}}}], 0x1f0}}], 0x1, 0x810) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 13.096349452s ago: executing program 6 (id=5297): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x6a6, 0xec000000, 0xcd}]}) 13.017717476s ago: executing program 6 (id=5298): creat(&(0x7f0000000400)='./bus\x00', 0x0) r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000600)={{0xa, 0x0, 0x8, @local}, {0xa, 0x0, 0x0, @empty}, 0x1}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000000)={{0xa, 0x4e24, 0x100, @local, 0x4}, {0xa, 0x4e23, 0x7, @empty, 0xd473}, 0x0, {[0x4, 0x7, 0x3, 0x8001, 0xe10, 0xe, 0x3]}}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x4e20, 0x0, @empty}, 0x1, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xe3]}}, 0x5c) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc01020301090212000100000000090401"], 0x0) socket$kcm(0x2d, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1bc2, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f9}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) r2 = socket$inet(0x2, 0x80001, 0x84) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0, 0x0, 0x2000c0c0}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000500)=@assoc_value, &(0x7f00000004c0)) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffff28, &(0x7f0000000500), 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001200), 0x101101, 0x0) ioctl$TCSBRKP(r5, 0x5425, 0x80000000) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x2c, &(0x7f00000000c0)={0x0, 0xd, 0x2, 'Vx'}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(0xffffffffffffffff, &(0x7f0000000000)={0x14, &(0x7f00000001c0)={0x20, 0xc, 0x8, {0x8, 0x22, "2557cba2f164"}}, 0x0}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000340)={0x2c, &(0x7f0000000200)={0x0, 0x9, 0x6d, {0x6d, 0x21, "114ef545041db452d72a1973c44e1a97a3a34cdf600a62727c7c6fa6270812dd7e1b1abe1d191bf8954ab34ac0266d99185ad0d4ba535cc5f0d9bc5cc56fc77d8b2f1aad64d8c8d0d207b8861fa6cece172fae22179dab3ee228d21d505906c0cff2a67446dd7aa183d957"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x42a}}, 0x0, &(0x7f0000000140)={0x20, 0x29, 0xf, {0xf, 0x29, 0x4, 0x1, 0x1, 0xa, "0504b9c1", "09ac9626"}}, &(0x7f0000000300)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xf2, 0x60, 0x7, 0x7, 0x6, 0x8, 0xa59c}}}, &(0x7f0000000840)={0x84, &(0x7f0000000380)={0x20, 0x8, 0x5a, "3fe039a1ad09ae24006c210fb895fc5d07341c2eec3257af5a8146db0820e789f393dedde20b24a3b676ff54203e07ff5c09980029746bf72a12fedb36b2b517a3ac9bd2422b0a3297fb4c190444f5b9f4e94cb6a4ac9d71da3f"}, &(0x7f0000000440)={0x0, 0xa, 0x1, 0xf8}, &(0x7f0000000480)={0x0, 0x8, 0x1, 0x8}, 0x0, &(0x7f0000000540)={0x20, 0x0, 0x4, {0x400, 0x20}}, &(0x7f0000000580)={0x40, 0x7, 0x2, 0x6}, &(0x7f00000005c0)={0x40, 0x9, 0x1, 0x6e}, &(0x7f0000000600)={0x40, 0xb, 0x2, "cb98"}, &(0x7f0000000640)={0x40, 0xf, 0x2, 0x3}, &(0x7f0000000680)={0x40, 0x13, 0x6, @local}, &(0x7f00000006c0)={0x40, 0x17, 0x6, @local}, 0x0, &(0x7f0000000740)={0x40, 0x1a, 0x2, 0x400}, &(0x7f0000000780)={0x40, 0x1c, 0x1, 0x9}, &(0x7f00000007c0)={0x40, 0x1e, 0x1, 0x52}, &(0x7f0000000800)={0x40, 0x21, 0x1, 0x1}}) sendmsg$inet6(r4, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000001400)=ANY=[], 0x40}, 0x84) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000002540)={0x73622a85, 0x1114, 0x2}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f00000002c0)={0x1}) syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000000)) r6 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x368, 0x1b0, 0xa, 0x148, 0x1b0, 0x10, 0x2d0, 0x2a8, 0x2a8, 0x2d0, 0x2a8, 0x3, 0x0, {[{{@ip={@empty, @multicast1, 0x0, 0xffffffff, 'team_slave_0\x00', 'veth0_to_bond\x00', {}, {}, 0x0, 0x0, 0x1}, 0x0, 0x190, 0x1b0, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@recent0={{0xf8}, {0xfffffffa, 0x40e151, 0x2, 0x0, 'syz0\x00', 0xfa}}, @inet=@rpfilter={{0x28}, {0x9}}]}, @unspec=@NOTRACK={0x20}}, {{@ip={@empty, @dev={0xac, 0x14, 0x14, 0x32}, 0x0, 0x0, 'ipvlan0\x00', 'nr0\x00', {}, {}, 0x6c}, 0x0, 0xc0, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x9}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, 0x2, 0x7, [0x8, 0x2b, 0xe, 0x9, 0x40, 0x16, 0x1a, 0x25, 0x16, 0x28, 0x3a, 0x26, 0x23, 0x8022, 0x401a, 0x19], 0x0, 0x1000, 0x7}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x3c8) 12.44437184s ago: executing program 6 (id=5302): openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0xe6) timer_create(0x3, &(0x7f0000533fa0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x12) unshare(0x6e000000) getgroups(0x400000000000005c, &(0x7f0000000040)) unshare(0x28000600) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r1, 0x6, 0x1c, 0x0, &(0x7f0000000080)) socket$netlink(0x10, 0x3, 0x0) gettid() r2 = open(&(0x7f00000002c0)='./file0\x00', 0x1491ff, 0x22) fcntl$setlease(r2, 0x400, 0x0) fcntl$setlease(r2, 0x400, 0x1) unshare(0x0) r3 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x18, 0x0) landlock_restrict_self(r3, 0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000100b7080000b2e900007b8af8ff00"], 0x0, 0xfffffffb, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000000)) bpf$TOKEN_CREATE(0x24, &(0x7f0000000280)={0x0, r1}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0300000003000040003800000500000011000000", @ANYRES32, @ANYBLOB="0300a903c82f9508dcaf8ebc56800000000000000000000000000000ab33d9e51e3e529cc5f0", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, 0x0, 0x0) 11.772152815s ago: executing program 6 (id=5305): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$pppoe(0x18, 0x1, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000019100)='net/fib_trie\x00') execve(&(0x7f0000019080)='./file0\x00', 0x0, 0x0) execve(&(0x7f0000001040)='./file0\x00', &(0x7f0000001080)={[&(0x7f0000000180)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000081000000bfa300000000000007030000f1feffff720a06fef8ffffff71a400fe000000007110bf00000000001d300200000000004704"], 0x0, 0x2}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000280)={'sit0\x00', &(0x7f0000000200)={'ip_vti0\x00', r6, 0x40, 0x40, 0x7c, 0xfffffffc, {{0x6, 0x4, 0x1, 0x31, 0x18, 0x67, 0x0, 0x0, 0x2f, 0x0, @remote, @multicast1, {[@generic={0x89, 0x4, "a88c"}]}}}}}) sendto$packet(r5, &(0x7f0000000180)="0b036c00e0ff64000200475400f6a13bb10000000800894f4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x0, r6}, 0x14) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000000000)={0x1, 0x9, 0xb2, 0x0, @vifc_lcl_addr=@empty, @broadcast}, 0x10) ioctl$PPPIOCGMRU(r1, 0x80047453, &(0x7f00000000c0)) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="e00000000a06010100000000000000000300000908000940800000010900020073797a310000000005000100070000000800094000000005880008800c000780"], 0x13a}, 0x1, 0x0, 0x0, 0x2000c880}, 0x48884) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x2) socket$inet(0x2, 0x4000000000000001, 0x0) r8 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) ioctl$USBDEVFS_SUBMITURB(r8, 0x8038550a, &(0x7f0000000380)=@urb_type_bulk={0x3, {0x1, 0x1}, 0x7fdf, 0x41, 0x0, 0x0, 0x0, 0x9, 0xffffffff, 0x5, 0x6, 0x0}) r9 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') lseek(r9, 0x7, 0x1) getdents(r9, 0x0, 0x48) ioctl$KVM_SET_IRQCHIP(r7, 0x4020aeb2, &(0x7f0000000300)={0x0, 0x12c, @ioapic={0xffff1000, 0x8000, 0x7f, 0x80000001, 0x0, [{0x1, 0x85, 0x1, '\x00', 0x4}, {0x5, 0x3, 0x0, '\x00', 0x6}, {0x7, 0x3, 0xe, '\x00', 0x3b}, {0x4e, 0xe, 0xd6, '\x00', 0x86}, {0xc, 0xb, 0x6, '\x00', 0x4}, {0xf, 0x8, 0xf5, '\x00', 0x3}, {0x2, 0xa, 0x50, '\x00', 0x8}, {0x88, 0x3, 0x2a, '\x00', 0x80}, {0x4, 0x0, 0xd, '\x00', 0x1}, {0x8, 0x9, 0x3, '\x00', 0x8}, {0x3, 0x6, 0x3, '\x00', 0x6}, {0x2, 0x9, 0x0, '\x00', 0x7f}, {0x14, 0x51, 0xa, '\x00', 0xfc}, {0xe, 0xfc, 0x5, '\x00', 0x1}, {0x9, 0x2, 0x6, '\x00', 0x9}, {0x1, 0x3, 0xfe, '\x00', 0x3}, {0x2, 0xb, 0xd6, '\x00', 0x7f}, {0x7, 0x0, 0xca, '\x00', 0x6}, {0x0, 0x1, 0x4, '\x00', 0x13}, {0x4, 0x2, 0x40, '\x00', 0xda}, {0x3, 0x3, 0x6, '\x00', 0x9}, {0x9, 0x3, 0x1, '\x00', 0x2}, {0xf9, 0x1, 0x4, '\x00', 0x8}, {0x8, 0xc, 0x0, '\x00', 0x6}]}}) 8.592250334s ago: executing program 2 (id=5314): r0 = socket$kcm(0x2a, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) (async) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) read$FUSE(r1, &(0x7f0000006200)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f00000002c0)={0x50, 0x0, r2, {0x7, 0x2b, 0x0, 0x4f834c58, 0x3, 0x101, 0x7, 0xa15, 0x0, 0x0, 0x1}}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./file0/file0\x00', 0x62) syz_fuse_handle_req(r1, &(0x7f0000002140)="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", 0x2000, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xd5a6, 0x9, 0x0, 0xfffffffd, 0x0, 0x1000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000004140)="c1fd43b601662701272af37a7deda072caa09faa11b0a4ef2825e87f09fb6bc3dfd84ddd853b18203bbf08b1af6066c78b4714a789a8f3605f5920e7afc5b0a04271cebce72a797abd5b9e4a44fdcc150e6ef0e8c3d4360e74275818df26243f28cac3d84e264fd0c77d4bccbc466e6b44b247d9dcee026df89aefc958d84a55d4d6922d96ce0349fe28efd6b83d15b7b08143a721c4a677b72362a49eeb15ec5b5f8569bad585e30a62ab149e7e4c7f49af9560fd52ea5730135dc3ea3f6a9a3ae6286e99e1520a43b8813ca6aad1adbb30b2459f90699e2ba3a6335ddcace3737ed8f5f21e027ac2b224389bf0c8c005ac8d8c3ae188679d34da0a2c20a910487d3c91b18770fa5ee483a3f09b882960f12e7d2eb9015895ce80b37f74a305a50deb146b1c3430f31d28e6f827b9c7070bc880d251ddb09e0e70a0512ed2600256332c43a5deaecb01f089333fc3b6721f6ed5b41f9971b7c63f57b5afa8042f5beb1ac1274676dc5406b5828247123bb7be795baee59d779bbde227c90d0a5d863936d434f2ce7a45f9b650600f32827b92e2d828915f0411f765ed82dd012561ed29b09950b96f8e490f1448dbd5e45bdc92a2a36aa67e5e9396b6376f82aa6915eac4144a102de786563e4482f0917698bc70776f8c7aad3346e18ee295af54f3c1658f9b124116a2fdac79353b095cf667dd941c3cba141b3ac8982eed42e7db649c9d49a59378216bf4323ff4c2f2992994d4144b74866a2426e19a2dc8dbf4643f97a214fc9c448512316d76c4116c3ae600dfb98cf85472da661745b638438dbf15d8dd87a8ba35205a000000009cf941454f8c788dc2eeccea412add734798c82e9c86122a91dff778edcd309c05fdca66176e9bc4d410b0ee4627eb889443b574ce205c7f4d6d428e909952712ec3dfc89552279b2da87b010051a451377a0c51a34ebba25c3b62ba98eb6f1549b0fee6a7c5e0c7a72835388803a0a8342bb9f2733224c92a50dd25a9b335f243f2d8c68142aa1db1de2f899a56c623a32f8a74c16db56983eb83f6469316f2fc14860c075236a3ba40e8c265909b8fc6b03c6378269f6629bab81418789cd748d8b786f47ab8f13b0caa5ecd79dbea61330be6de5804f5c211cef78f555e7b2093f4a836cdb8a2cfa261be14e0f59d075f58a16cb130f062a2261df244c57d6f477d761262b2e755c96bad3898894e80b23fae71fc31b2895513a11b0cf07551ca87325592dd10549b7d92da1cb07119fe970b8cc3aacc386ab64d32b308679593256d2fcd1f9e9b15ee93ef859e7268be776053182460e83fb873711226ec9aa5c35b15fbfa12ea0abfc7465b300bd8445c831ae77d2aab7d4bc3ba5f218fda9e90eacde1ac5119eb30073a6f291727cb94fc87a3d3013f3ebb1cd259067c571bd3c57eacce716e61f86bf4041bacadd6c676e17fb3cf89c4984aec78216854a60af68533fcdff12897c3e1b2c10cec019722623f477a512c4e5eef74a6d1ab7a735905373ca3a0b18c3eaa523c86238fba77e45aa07c1b96fa1e3ceb04e5f4742536b687ebf989918f6805cda9611ab9ed10ee33cda71a95be2da0d2c21d2295fdb334dc2057942382dc7d0f70300df3df84cf9a18f042c11243a347569771f9b82404e13684324fb06d867641c87d6d70ad15e90240f901d04a8b8c7fdfb8b84aefee1606f14a2a6995e6b8aaee1b372cd586a6daf28ad7d8ef644c58fa72f0b2f847eef72e18f1a4374c4fa3d604a9bfec6a1a4fefdfaa848279693208dfbc1dbb97b44c4f034090606e0ad312cdfb6a8f68dae7312b064c68813eb41992559ca63d88a8e90711c838f220a4da5bc7d82ec0af83da059bdccdb524a59ad26e43413f131e7703eb82158293a331456ce728c28923bf9ae644a331a667c2932ae1f11a9f9b893f802796ad029c40496c9bc49cdf41a40da1092b404da660e80f33a6012a407805e70f9a180105cd0401ed01a9f6edef4e2479e1579ea365d843c197279e3c79ae56a107dfaba6af80ed9a24d535d19827596ca2b14bf4b110fae4820fc8d0570a64ae08e315da0091f766bceb1fc990465ecb84a2d72efcb9a269816863b72f8d0869b20c14bd72f909fc3ebbf2ba2f98ce3fd7eb54b738692916eeb98ab9ea04ce3e740817dc9ac6561c71d3bc15358ebbb3027294f66eb890577f8a63ecd23beacd93c3b1498d5eefd8b68ebab3536653d5839713b07f79ebb2a6106c009cc535a2173cde3ccc65676bcae513145db5bf08546e8810fb4d193266d491fb9121935138a74c52149959a0c270cd6e244dd7cb140fcf6bf0e7536220f798bf32cda564ebde025a92617f3195e549a491a45446ff0ebfd3b047775af339e59a8da0db6223339325c6f493baa5f2c71b5710a975def3e3919a24a52351acc12e5a2ab6c171705bad0e6afd0ad2b6dd6feaedc9924fdba533fc958fab9a980b775eb4c93a499413073cf09826381b8054f9f09f4a0dfa63ac2f6cb22d001ff277ec7f493bc54d2d1d34a6dad62cd7bccab2ecd419c90087f6945311460b87daad605ff8519aba1d8311a5e565dd26655577aa13e531e01cacbb7e10e720a486e9cc450b8a21d23aeab42838d81dc05f5be0474ab81b806fe71b888323037f3262179e451f765e419bddf7b7a99b40bcc226986efbd3765b66e56a3500de4b18b676361510bd35b3a9c6b8c08222cf7a73c4cda972190f839c2d01a4c171a803c0a77d2769c892b2f0191d2fa01d7d5ca53573e47e93ca9b56b8f0d684d5458d505ad8383f22e19024da06bf6abf30ed663cfb33e202be17bb951e9ea30cfcf65675d2fc64aa51e07237fe8391549185fac5822daa92e73778e080b1304dd757f9035092a729b9a0122d1c07d60336f18a9e46ebeced1041de2e2e8a5de6f4a814d5179bddfcdeda88888cb9ce322a516af3be2b7cf371e9193cb40e66cd41dd94e37f14c6e6469e8fa6c57a4fa3125fb6819b84e276768a7354dd3e2692a77a4a60af85bec0325d0aae72a5f4f7bf9468f1d35147910a55af546e4e3634fe2d8efe116606bf84c0e9c4d442ec8f99fe6c1cc90b99a8d1e53322b26b66928fd01738fa70c0aff84b4f02946c6fa684bd617667857cd751a3ad3d324f9574af78eec6c8c51c25e01cb0ef129199f5a3b3b29e32a34c4ef14c810c2e69e06158f02033e15f1ec00419a91c1450338956a188fac918fb73692491baaf5976ca392c139ba0e551de260dfd6c733b572215f2af0aacc5709b0d4a3b36d23f5882c5644bb455075c5c48bd50492b395d14c36393019fa9eab8a211d71d173754663ea2af1ebdf9751006792609d4db47824d95d68583c922c04af3cdfb58f37b6f958a4b35cbd74a30a393be192fb46bfe4e722c3634c94fbf4829f25dc0b8b07cd16cf4c7e924eb02ae8d675539d32b5d9a54a43811eb98e2db317c67d5bc62901582cbb128542d6be3bc9a5b5b8a8827f2eab15e82b28b411edf67d786b76feed9e7d5ffbc86fbdb19ed80a4f5dcebd631719f8734c398938047011a251370e40d5929e9b4426081029b1339ccb08bb0dbcbb4eedd53792e43a046abc1d5c1dc8c1749052233e18e25593daee94f77f327de61867f1e791b797cc5ee43f8109cb0654d8742ece8512c322442f63dff88702ba047e8370a1b7304536ee7cf465a0a19d965fd03543b991449d6a1a98be5ec3867314c688c5c487e59a6bb05291fda479827172bf3db615c20ea022ff7b16020299220b7c45a7181c1eda48c9a5fa7624843d112c52d99d0b27e168eeadbcd3c60b3f366175decc8c91c64a0a16d3a2e38244dd8d2de806ad741e2256075efcb0466360acaa3f65611789a821c30a13d4b60e44173be9e288dda7d7aae2f8341d9a85104170631c942eef22c10e903bf70b0ed36831d536a0cd65c11a209e37a76f3f54deb326735bec5a532431a81f303af5e9d03717a93a3da18317c459aee8db08b9f0b3331d29770fe7fc4266c15a4294c9c435a38296cd880dcedb34f63037f2a8e3ada9ead3e52abd69e5779905f82a607f70e351d2167bf1b599cfb9314a37df876bd5f2acff82f1773c512ffd308179e47b26946ebcce112273e12895145ec88c701269c93f32a5ab2bc16acd57e997d140d18c2cbed2601a05ec33a63e7edbcca673f71eecab66af5287d7d5a1dad68771ed612d29ef8ab23ef0211b4bbed6f981cd24d652f355d94f6003b01cf3d803a6e36b470402c05816aa2cd747f293300bbe891854d932df7809c7809c2cc3d06c693981e7bc21e89aa3ea8f8829c85185e4ecfd2e293bfa2b88cae2c9e4722b9cfee01911a502d59360532528661eadf2150e26a2992871f562d6fed4a36867b2521b1778c4ce955f5980b9dd9ede42fc4a1394491ebf1c1fb0d794cb8c28b103d76b2e70b0337877a222d7f3cd61f353baf7bc9e23d80f8e5b4459937d75f869c179dd9b948a70b9ba37386532790bac12f2f342fc4f2afd8a45f109331d5daf3344ade893029e322e8b7f3bdb5a49987116b31b2bd6d5bab789ca061ea42f7647c88488f734150e161e5aea78639c5bf9c2fb88da321cbfd379b38cbe6e14af979f238685e2c0ff51629cd228602dbaceff8a214cdc66528cdea114691ef619a8c9a0f9cdb7e08c5bcfc2bfd29e39af38f5db4821c648cc3d976cc455a6e6498c92511b407f3349284901562a912c5af25ff792b9c6c5dfb73519336c7d4a87e49debce7a441b7a29706173e4e4e8dacee63a06ab85dd359b508bc8a0f7002832fae10a0a38efaa475846c4205aebe777334788c3e4652086e26dcdddad991b0ce5256e113bac692d442f524d7e292b86eaf0dd8380ccd78b1489dd2ef6beaf2eb9b08b50bb2a5ff3ba8df3b226baf79a0739d8a60cf815cb347399ac4adb2cea533d3f0ce160a563f8d401e5a6100578e4c8178a7e70663e135edc645cdec2f0588fc99a0cb60dd8788e02554ade370960ce562c210e826a1eba767a09b10f46ebbe6c9166e24286331d2ff025c57a10c7b64c506d0a68642171ad965a001700561fcac2e3f548fd58d32bab5f38b36e62f5546129cea35ce856052e3e480fc639640a5301dd700c8e8d0bd6ac790910fcf2b4f159cc1531aa1c9e37b541520450dde638942081201ae8a580f28cf50530190a45f45468753a122b364be7dad79044ec8b9977d583bc0ac3ec7b9fae192397ce8693310f301c18c2cab5208b369e63c5ac18d0266834e218b0400308c2c2f2df4a6ccadb3788860a2c733a9252b877ea1c1e849a38a328310bafae9614a6e161170c6fcbe9bd8c4177de1fd18f56805c91fb382aad767891556ff8e1b5f3ab8c18b4fa3053c981c12fa2ea017bb7596158ca533d0dd95a95d0b392222609f6ea336711a9dc50393bc41fac0d429540ad70757f2086bf1bea0132a609ea0bdeea0cef93d8b2a0d59189bffec05281e97b4722291005e9ca7e755be9070f405ab0d6c9546a5ebda2e62adcc621c2b1f6b07cd1e617d50469ef2c71647a47ef98ffbc71505e188cef3e5c774c0987664b6989794d7ca186804ccc6296da3adf22feb351792f1a9cff77413703744bf4f21212920d6a8fa1800da7a38fef7160a50f5b895e7b76f3fd830fcb9a25f3b3ccfd082a171223700ca665085aa1c5aa413bce813f1b7ca66105de94babb7b4a05029cc3759d00191fd9bfa0f996cc703403dd6ed2b33f2743a788041f279b767efc373314edfae1bd33f7eaaa7418a59fff7e40d02e618172f6e0abe08c855348f3cba40c8592a0521ed1e41524f20abccb2bf0ebb933e59b7036eff5a66279d578e6b2fd6c4140b33adc67f7083110d815ac55b4833ec0504488265b3ff2bdacec17c91bea9d6bdd931bf056d6e9790e472d874a5a3946b200493c9874d057aa6be3a1ca4da6fbb88a9d853aaa7c8ccabc83582caa65078bbe7b04625d139ed9860080d185bd9798d613ca3014713eb9e36bdeb73f14ac3fc7b2f8f594404f56dd937c0a7e865fa98e858cb0af661cbe12f15c928c4c45a982e24db18e7fc413591c8656b2c7876a5d717e42d3df13189b95ddc2b5a928dbda9ee02c30352045d02cbd854af821300f198b1ce1ea8e45c969020e5c7670fbd9b7227cfd3c809fac1df2eb18c199b27e969f32052376b450003b7ff6332ee1d9fce1b5947b72575ec6541b992fbc76f0e03fc1bb9a0df5ee3de0f34125c311d2ddb67962cf9a8230efff82c25c896621082a587139e997e0532962e84ad697a1a2b80d997c2a268ecca8b7d1095530b332ef368270bf31a75b777a7cfe8c8d324a8c558d3c65f801deac6822842f85f10a641b71ad7e5fb05f64eb3033507dc3a2e9ec02d667ef36c551f69c438e8b6c3927733d83e94f035ef3da230b759df5f5d1964815b176478c4ed94402dc8265e589171df165094a2e4e75614fc6febb8484f28ec8c1252b2d933852573926837e1edf9da0da3f90000000000007ffffcab3b10095b78b5df3701431cab31750e211d442a77dbc5e2d4d0e67bf329f9103414abd4f3879511375c8800f52f8a17ae6887214bf8634bd99075ab073540f04ff675d32190a3d1152ceee32e30719cd883a82185f89f071c02df443cf7046dce8a6ddc472ed63945faef588acf57985c7ecffa438f5427fb851ebc6a4c577a33895a8fc4628286a48d3bbcda1b769aa3194869e148ba457932fa6f2e4640e2755940e2f5a6a67796b5f88ac10f389b409c0c57bd4bf0cbe0fac2fd2f58ec498d19c43952e4522b51931712eb4002b7b208c02c4e06df99fa8e93d7a57e63aacdafb19db0fd422f8e89d1275b49963bd82b490f9e4d24cfe9700e98c73b31fdcf7b7d30d73e9bf6bd86439dc8b63171d53ca7caa860c60777436099db544164d4e4a81a483ffd5ef2980110f461529c057c40f2ee63b71a8eb2d87919726bda25a8fa2f242d3ff7bf0726d8a11d141eb87d2733f1faf456f2eccbe4c3a856702a80ba7e36cd8ef8e064e16e61eedda4478d2edaf0445e2247a76e25b4b5c68720b87bba69b4171983d95a5a764f42fa6f23466096d9a097edf84952023a4541110456b93ea558c2059156c287fc6cde7c74abd90ec539a5f43c2a641b1a34cffa2538ba565d0b57513bcc1b3df541d02d6d5a0aa2f96200dbbf64ab7c0adb868cce23ca607db6d6dd18f956185c983a90c8b4a7ec630178376ac400c61c77fcbacb979e2e07115db8a034a00ffb136f91c0b16c6d796f524f9ce6a0b72c378c8939b56bb83ca0f3d09da2b82b4d3457b568878d019f54f9cddd514a601d4edfae582f1a2674892bacf6eaba66124c797e1ebf91e1b5f12e520404d213b12770966d5c5f3435169f8867faed0107d2cd4cf0638e4f1c488122da7516820cc3d12cdc9f663778455352d2be1d8d3cd611808304554bde601e4ec4c9aa50ec22648b12f45c8d84bdcfc85f95ba0afe254df5d8b40d53adf1d4fe1dc3744bd486e3eb14775f4f4c333f751975a4a8b5bfa497850633aff3ff98deb53d1b515a08c4c474bcce46149dfd5bece51d1dfb6eaf593f8ee037404a5ce5edc2887006059cd3743448ab977899f10540b5a5eac1b9d4346654e4eb0200858b5b92525399a87859859269d3b0fa4c2159dc807548368ff701076606378b44cee2839f05ad94f659270af868cd674b44729bbb8eb2f697101bf4fb4f96d07dabaeb5b6a1cc884423fcac3d3805bffb3c8de3e801d641436ca6b1f50aabce4c7b3b1a24eb6977d5a8c84d6cce8ec9ee93d3062a4bd78ff916fbba7ab228838bd61f25759c6ac8650adbe2b346e65681dbafbb934358ca2b1b854bf42f42404a15caf99b785f132b9a20413b2d9d353220656ae271883ca9733430db09b5e8578e9d4fff032b0ee792f429791089d93876a30100a35c420a0686c125005242551df27673e0826a1c38bc028c104e0f958ae1ffb2d5221fd1a36e598065eed6a449567b41c027b6faa461d3aeee8dfb6285661af7fdcfa484fee654b633342eb122fe72d5d68ea4cfc988cabb0df39b8cbd064d489fcbc90bf313f3a29797d479a8fc12cf5b9ead0907a2dca568bc0f40d0fa4a9c3758f9bfd1ac3662a9f04260ef0d2b86a02d23759b210f38830c4a224649186b6e4b87c6b457217c86f502521940caf1e5b2eadb72951a790c94dd74b929232947b01cefd5a1483e127b1b6d216317b581455f9cf96876af837e5f88cc38a46eb2fb6cd7fcc6fce1a264167b86723829ffffc413bb0000000000000032dd6219a95418314b1e071dd59d0e96083e02cb8778069ed54137ce98bd702dead8fc74992d7743d1450faf7de44c2d59ff2dd339b80d3449e9bda5b3a564f01aeefe300165bf3b00d811c7ae866cb1a0a1b87400c2941841cd2d6953308f1a963f1c6d4486e7e45daabf0b066ad8884f4577534d3c9f3d3f3bbe8a1a3088d9b95da1fc901573e26f5b86c7a868429b9b634c9e35dfd0534563160912a43c64bacc8ea1ced7bc1b77a28716700e501905c9e81e190241e0edbf4f894aee4047c5b5fb58a3db4afaf76790690fdc1289236fbfc5f6cff540eb82de8044d17658fb054b198cc288cc43aa5d805a51cadac3e75c8fd82ad015a04932cb6f6b53aa4e8d9d84018ff8db0f756d6b5db4e06a689b52fe8471b9230c2dd14d042c1fea45c3d2452351a4222421366610d80785f7e47474d4ad58116313813d4db3176d93c4e29e5c7562806879ddc75b9cfcf38d6aed015c0f4d52302a51215187bfe254d6065bd142cc9b9e03f32ebc9686ad0d0cb3fcf0afa320a15f37cf591600636a4ef84c756c0d42ab98bc2479f0d5d230359f622447101844430a7555a4cbc702b55a4a6ed964cf399a1a493e40555f622da1643073a786a3425d95090b9b0e20521187e9e20d35f4e061e6201e67e844d88457f751e5519dd30df9251f1ce2836e0bf61eef8fc6ed22e4887186316566278bec46af3823ed53e3e18ca5741124dc53cadb5ff0846cc1c6b9c072be6dea187e8336eb6b6b7029ef79ff3b2999938cc59aafa1618fc4556ce3c81f99414d5d79538a83ee9d8a9ad0b9e57060d4be9c53266f418455d760f423a1642e9edfccede29d21891d7421ad0f1cefe472d0ef84965575419871374727bf5f1dc72057a18ed4d7e0a2ddd6d105eb2cc3718609814c2968f27465b00fb4b4a64359629722320583a05644693e6fcadde0efc12e66a0c8e48311f0550ab8fbc1556b69bb2a5a0c03f1a59d67046d7acd5beb9f7f9ae6eb18580431624d63ffe294ea5497a65ec3891f4c70b26b7b17a9f82145e5d5156d6b3355ad249bb66168bbb745d00c40d6ef42d52a032cf62caeeaec31f4c85ac403cbb0c6756953f0ddbf79da0cfa6ccc1c40de43bc4a10a700b98322e671225e80e663d30192ff5611c44c095351bb69a4e14c11a3d5b0b53e78954699760516134f3148e71a2b0bb04b24bb1a2c2b503f56249e0a2c638ff40e7c2c7d50ef7196fc9893e18c0ac3fc5a4c0d23ee08080f984dc643854b54df4a638af29dc5df79f905c4133ce263f3b2bb55fa7d56fa82795687e6ee5c68cc13d71e44367ea8670409cf2231990cc6d06e5aae2fc340bba3aa417016fb9dd89f90a89196c104017a68f7527b8b958e38f9646832a7790045fe394ce41bcbd1cbcbe52cd7e56cec7b2856e448fa5d7e837798b899f05a2c2fbe6d9f1a7b193bbf7c70444d6a37810d4d19d359f9cd6b8a6ef2230b735f8bebe0ccec94e44ed95234bfa4a36a2f0ee9fd5ca73d697344d28436e0fab81e73f447bb144a70aaf96acf6ff52c4737e7a4debcd285bdb54e363d842bc9a7d180c16f010fe4078b41c4c3e565c3edd64e61f995ab0086dbdc026dc1825b8c45ed96edd8d2bd9daa699e5da333274d6bee2097c004462848cd16849f95cd2252c4c87058a821ed977ed751b77b0a8fc0966bf3a30c26d49f3185782a7d314e89f039a15ede458538f1ada8eb836a36bb5d82c402e3feebd37e7b7c667a1c82edc8720072789fa5f388039daa731ce74dbd5aa8965b7ee99f6c271035239ca1c34cdc3c57bd8510dee08f74cda37095b1b098997998fa267e0be15de474b2c737936cacccb4ba44112570bbd13f870b55f3763f77724b586d6e26c3e72b20bb13272f2ee331bcabd4a79980a8d2965c20da2a3918c855215fecce95d29bec58f522d3d6d2852c4ac080fffcb3ee7fb98591f99b7cfb7bb124cc20078030756aee8fd284df06cd5f07c13fd56e5381b19e0a3a9f412a8d27428cb6af0078e4dc8ce4836630360a5c3b98ff5e6cbac1d9d29de9838a84d4722ceea3765be3df9984cf139770f3fb986b9cc9185ab787f54be33d46c54de74d94d13f74ec70cfbe1605c00db79fa8de64cd834090a35c80759f83c8fbefcf9a276dde8a8498d084b4619578eccdda2651a475f73367bda96894bb36eb868035251694cbb745feb150555ada09909497ff1d9c8aee7a35b7c8b2fc64ff483f4fd3491ed52304e6010b9bf2af8c5b8e162a383a0bf0bf108ca78f5086132b2b1a29581f323841c2f189509898d932436e5c1e693ed91f0524da026fecaa2b7efab54aeef120be61de457171c58811e0ca8a7600e0ac249aa579d78d2e2b1d6f41a3da4676b6690ca0249251f5b48b9a3820ac5b25a52cc01bc331c24039b6f4bfab72d5838a35629259930dea936f8c60b4f1b189db1fd1b5e7e6c8a842707ad6756d098a9ab543cde3e1d1161983ea91b7322ee2a713be3bad369d8112fdc7f1ac7b5122d55dc5ae443e10db711ddd6619ffbf96068e28911b1f54388413a17958d61ca07465b54699a1351915300cb826d3bf7f4f217bba0ed3195cbd077b67167b9a03040afc237f3bb36edd9fed33d7d6e7c9493fec34be6543880b0b442d8351496f2e8d60d4d984cca743983c0afab9cdedd5a9d774a121e91230d359c27a3d7b4db38ce73db747af3ca06470901f2605c031a7c9b7d1bbb1e838d36a4d39b039e80bcddfaecca906705fe8c844e93d5aee494dc62c7b4fcb6abe09acf925ef422dc09185b53e960795c56500b43faa6e89720aeee724532f89e60e20b12cd4f832b95189bf45b96aa7af10cf8298b44278de1c67e2d71d811240a7aa2d1d6de22e5b8cef4a1f309de3b81c5a028aabdabddc9637974c2dc19b60458f0954bc751b7ae628ac602eb7c52c7fac0c1621ee7757fc5b002ad7e8fb66fc7da0896547abf01ee091c0cfe1d0fc66e6e03599bb2aa7608a72c30203af5eac3915a0b6616b6119c4a09654de2f56e53296d1f8487cd7ec36c86894bab72ec3ce61208f848432d45a27cafcfbf2a2c56b58e017c76ac7e943aff0b4acaf84dfb343d93efb29c518a9d552c36a3e44c6ea948673bc2aa71c5a873d1d301a9c8b02f19c086f922f0b3e4f7d14e8a59c017809188e2e1b4dc6b55fb8ad82b1c04460b5ff2e9b8f47d3e833599519b79ac6d9ab282db4a55654f60396d2e72bf8e2ebbc8c742913359edadfcbda00", 0x2000, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x90, 0x0, 0x1, {0x5, 0xfffffffffffffffa, 0x1000000001000002, 0x6, 0x2fc, 0x5, {0x7, 0xffffffffffffffff, 0x40000000000b, 0xfe2b25c, 0x7fffffffffc, 0x20000006b, 0x25, 0x0, 0x4010, 0x8000, 0xd241, r3, 0x0, 0x8, 0x2}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 64) sendmsg$kcm(r0, &(0x7f0000001f80)={&(0x7f0000001d00)=@qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000040), 0x3f00}], 0x1}, 0x0) (rerun: 64) 8.037503396s ago: executing program 9 (id=5316): ioctl$VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x22000, 0x0) ioctl$BLKREPORTZONE(r1, 0xc0101282, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) 7.97276684s ago: executing program 9 (id=5317): r0 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020000000000000800000524050000082407000000009e0c240700000000a3e82f07070d240701060000fd80000000e80924030000000001"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000c40)={0x84, &(0x7f0000000740)={0x20, 0x3, 0x2, "b23b"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000f00)={0x84, &(0x7f0000000b00)=ANY=[@ANYBLOB="200603"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001640)={0x84, &(0x7f0000001180)=ANY=[@ANYBLOB="20000200000061e6"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001480)={0x84, &(0x7f0000001040)={0x0, 0xe, 0x2, "e249"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 7.676081372s ago: executing program 2 (id=5318): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000780)={0x1, r1}) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) ioctl$sock_ifreq(r2, 0x8994, &(0x7f0000000100)={'bond0\x00', @ifru_data=0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000002c0)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0, 0xc000}) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001517ee40f00a057a00f6000203010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r6, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000300)=ANY=[@ANYBLOB="200f1100000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r7 = fanotify_init(0x200, 0x0) fanotify_mark(r7, 0x21, 0x40000856, 0xffffffffffffffff, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x34, r5, 0x5, 0x0, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@chandef_params, @NL80211_ATTR_IE={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x1000, {0x7f, 0x7fff, 0x8, 0x52}}}]}, 0x34}}, 0x4) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=ANY=[@ANYBLOB="bff698d7eea79550001e000802110000010802b900258408000000000000000064000100000612020202020253088284"], 0x36) write$sequencer(r3, &(0x7f0000000300)=[@raw={0xc, 0x0, "aa4fdfe21b18"}, @t={0x4, 0x5, 0x7f, 0x9}, @s={0x5, @generic=0x1, 0xf, 0x81}, @s={0x5, @SEQ_MIDIPUTC=0xb3, 0x1f, 0xbf}, @s={0x5, @generic=0x63, 0x3, 0x3}, @l={0x92, 0x3, 0xd0, 0x13, 0x6, 0x4, 0x8000}], 0x24) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) 6.011096502s ago: executing program 1 (id=5323): creat(&(0x7f0000000400)='./bus\x00', 0x0) r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000600)={{0xa, 0x0, 0x8, @local}, {0xa, 0x0, 0x0, @empty}, 0x1}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000000)={{0xa, 0x4e24, 0x100, @local, 0x4}, {0xa, 0x4e23, 0x7, @empty, 0xd473}, 0x0, {[0x4, 0x7, 0x3, 0x8001, 0xe10, 0xe, 0x3]}}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x4e20, 0x0, @empty}, 0x1, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xe3]}}, 0x5c) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc01020301090212000100000000090401"], 0x0) socket$kcm(0x2d, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1bc2, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f9}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) r2 = socket$inet(0x2, 0x80001, 0x84) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0, 0x0, 0x2000c0c0}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000500)=@assoc_value, &(0x7f00000004c0)) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffff28, &(0x7f0000000500), 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001200), 0x101101, 0x0) ioctl$TCSBRKP(r5, 0x5425, 0x80000000) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x2c, &(0x7f00000000c0)={0x0, 0xd, 0x2, 'Vx'}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(0xffffffffffffffff, &(0x7f0000000000)={0x14, &(0x7f00000001c0)={0x20, 0xc, 0x8, {0x8, 0x22, "2557cba2f164"}}, 0x0}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000340)={0x2c, &(0x7f0000000200)={0x0, 0x9, 0x6d, {0x6d, 0x21, "114ef545041db452d72a1973c44e1a97a3a34cdf600a62727c7c6fa6270812dd7e1b1abe1d191bf8954ab34ac0266d99185ad0d4ba535cc5f0d9bc5cc56fc77d8b2f1aad64d8c8d0d207b8861fa6cece172fae22179dab3ee228d21d505906c0cff2a67446dd7aa183d957"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x42a}}, 0x0, &(0x7f0000000140)={0x20, 0x29, 0xf, {0xf, 0x29, 0x4, 0x1, 0x1, 0xa, "0504b9c1", "09ac9626"}}, &(0x7f0000000300)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xf2, 0x60, 0x7, 0x7, 0x6, 0x8, 0xa59c}}}, &(0x7f0000000840)={0x84, &(0x7f0000000380)={0x20, 0x8, 0x5a, "3fe039a1ad09ae24006c210fb895fc5d07341c2eec3257af5a8146db0820e789f393dedde20b24a3b676ff54203e07ff5c09980029746bf72a12fedb36b2b517a3ac9bd2422b0a3297fb4c190444f5b9f4e94cb6a4ac9d71da3f"}, &(0x7f0000000440)={0x0, 0xa, 0x1, 0xf8}, &(0x7f0000000480)={0x0, 0x8, 0x1, 0x8}, 0x0, &(0x7f0000000540)={0x20, 0x0, 0x4, {0x400, 0x20}}, &(0x7f0000000580)={0x40, 0x7, 0x2, 0x6}, &(0x7f00000005c0)={0x40, 0x9, 0x1, 0x6e}, &(0x7f0000000600)={0x40, 0xb, 0x2, "cb98"}, &(0x7f0000000640)={0x40, 0xf, 0x2, 0x3}, 0x0, &(0x7f00000006c0)={0x40, 0x17, 0x6, @local}, &(0x7f0000000700)={0x40, 0x19, 0x2, "bbf2"}, &(0x7f0000000740)={0x40, 0x1a, 0x2, 0x400}, &(0x7f0000000780)={0x40, 0x1c, 0x1, 0x9}, &(0x7f00000007c0)={0x40, 0x1e, 0x1, 0x52}, &(0x7f0000000800)={0x40, 0x21, 0x1, 0x1}}) sendmsg$inet6(r4, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000001400)=ANY=[], 0x40}, 0x84) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000002540)={0x73622a85, 0x1114, 0x2}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f00000002c0)={0x1}) syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000000)) r6 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x368, 0x1b0, 0xa, 0x148, 0x1b0, 0x10, 0x2d0, 0x2a8, 0x2a8, 0x2d0, 0x2a8, 0x3, 0x0, {[{{@ip={@empty, @multicast1, 0x0, 0xffffffff, 'team_slave_0\x00', 'veth0_to_bond\x00', {}, {}, 0x0, 0x0, 0x1}, 0x0, 0x190, 0x1b0, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@recent0={{0xf8}, {0xfffffffa, 0x40e151, 0x2, 0x0, 'syz0\x00', 0xfa}}, @inet=@rpfilter={{0x28}, {0x9}}]}, @unspec=@NOTRACK={0x20}}, {{@ip={@empty, @dev={0xac, 0x14, 0x14, 0x32}, 0x0, 0x0, 'ipvlan0\x00', 'nr0\x00', {}, {}, 0x6c}, 0x0, 0xc0, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x9}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, 0x2, 0x7, [0x8, 0x2b, 0xe, 0x9, 0x40, 0x16, 0x1a, 0x25, 0x16, 0x28, 0x3a, 0x26, 0x23, 0x8022, 0x401a, 0x19], 0x0, 0x1000, 0x7}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x3c8) lgetxattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=@known='system.advise\x00', &(0x7f0000000180)=""/42, 0x2a) 5.952205775s ago: executing program 2 (id=5324): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a54000000030a0fdb00000000000000000a0060050900030073797a30000000000900010073797a310000000014000480080002403cb140bb08000140000000030a000700726f757465000000080005400000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="50000000100001002dbd70000000000000000000", @ANYRES32=0x0], 0x50}}, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x99) futex_waitv(&(0x7f0000001cc0)=[{0x1, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f00000000c0)={0x1, @raw_data="5fda43495216eb003a1b246aa3251d640db0a59406bdfa6cdcafcdcf52306943fb2c4e4cc1c9fcc2dfc3ba70f93716bda28737ee574cd188531231e226f1bb27f2433ad3e3013781a80f86f3e882af412e816bb15f943a27eb01b10ce23d91b84e68277f0f9ed74bb55ccf6646b28e1c6b6f3deca81501fa711c1c2e00725574ce5f12863280de1229aed1289a42fc5d6ca30d40a126ef85f4668fcc27d225d3d4f46f5d0cf2a583d3d9a16d827f8c68770aa5dcf1f19ce3ef6ca58290dcd9e900"}) r4 = syz_open_dev$hiddev(&(0x7f0000000040), 0x1, 0x24002) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="340000002e0003050000000000000000200000f8ffffffffffffff0008000000", @ANYRES32], 0x34}], 0x1}, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TCSETS(r5, 0x5402, &(0x7f0000000000)={0x401, 0x0, 0x10000, 0xb998, 0x0, "194f2f83c2e798c3584770116cddc8819592b1"}) write$binfmt_aout(r5, &(0x7f0000000000)=ANY=[], 0xff2e) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x390, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x2c0, 0x2e8, 0x2e8, 0x2c0, 0x2e8, 0x3, 0x0, {[{{@ipv6={@private0={0xfc, 0x0, '\x00', 0x41}, @private1={0xfc, 0x1, '\x00', 0xfd}, [0xffffff00, 0xff000000, 0x0, 0xff000000], [0xff, 0x34da508f3e8fb0eb, 0xffffff00, 0xff], 'veth0_to_batadv\x00', 'veth1_to_team\x00', {0xff}, {0xff}, 0x33, 0x7, 0x7}, 0x0, 0x190, 0x1b0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x100, 'bm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee0500000000000000ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06d7d4e252c3394fed47bf78c70f607b0178fa5ea3350ebc989f1f34a214e67442ce98bbaa8e0f7323a4ca0a7be6c60c527bac2b500", 0x1, 0x3}}, @common=@inet=@socket1={{0x28}, 0x1}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00', {0xfffffffffffffffd}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f0) syz_usb_control_io$hid(r6, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0xf, {[@local=@item_4={0x3, 0x2, 0x0, "2e2b5aa4"}, @local=@item_4={0x3, 0x2, 0x0, "f85edaca"}, @main=@item_4={0x3, 0x0, 0x8}]}}, 0x0}, 0x0) r8 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUCODE(r8, 0xc018480d, &(0x7f0000000040)={0x2, 0xffffffff, 0x7, 0x452, 0x5, 0x8}) ioctl$TCSETS(r5, 0x5402, &(0x7f0000000100)={0xa04c, 0x53b3, 0xfffffffd, 0x3, 0x1b, "53af0f0b4ecf6c29bf81c173f4a8f5f73eb62f"}) r9 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r9, &(0x7f00000000c0)='2\x00', 0x2) r10 = socket$inet6(0x10, 0x2, 0x4) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x1, 0x0, 0x81, 0xffffffff}) sendto$inet6(r10, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x810, 0x0, 0x0) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c0000000d0a01010000000000000000030000070900010073797a300000002e0b00000000000008e2fdbe00"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) ioctl$HIDIOCGPHYS(r4, 0x80404812, &(0x7f0000000080)) 5.885924394s ago: executing program 9 (id=5325): creat(&(0x7f0000000400)='./bus\x00', 0x0) r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000600)={{0xa, 0x0, 0x8, @local}, {0xa, 0x0, 0x0, @empty}, 0x1}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000000)={{0xa, 0x4e24, 0x100, @local, 0x4}, {0xa, 0x4e23, 0x7, @empty, 0xd473}, 0x0, {[0x4, 0x7, 0x3, 0x8001, 0xe10, 0xe, 0x3]}}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x4e20, 0x0, @empty}, 0x1, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xe3]}}, 0x5c) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc01020301090212000100000000090401"], 0x0) socket$kcm(0x2d, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1bc2, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f9}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) r2 = socket$inet(0x2, 0x80001, 0x84) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0, 0x0, 0x2000c0c0}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000500)=@assoc_value, &(0x7f00000004c0)) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffff28, &(0x7f0000000500), 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001200), 0x101101, 0x0) ioctl$TCSBRKP(r5, 0x5425, 0x80000000) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x2c, &(0x7f00000000c0)={0x0, 0xd, 0x2, 'Vx'}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(0xffffffffffffffff, &(0x7f0000000000)={0x14, &(0x7f00000001c0)={0x20, 0xc, 0x8, {0x8, 0x22, "2557cba2f164"}}, 0x0}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000340)={0x2c, &(0x7f0000000200)={0x0, 0x9, 0x6d, {0x6d, 0x21, "114ef545041db452d72a1973c44e1a97a3a34cdf600a62727c7c6fa6270812dd7e1b1abe1d191bf8954ab34ac0266d99185ad0d4ba535cc5f0d9bc5cc56fc77d8b2f1aad64d8c8d0d207b8861fa6cece172fae22179dab3ee228d21d505906c0cff2a67446dd7aa183d957"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x42a}}, 0x0, &(0x7f0000000140)={0x20, 0x29, 0xf, {0xf, 0x29, 0x4, 0x1, 0x1, 0xa, "0504b9c1", "09ac9626"}}, &(0x7f0000000300)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xf2, 0x60, 0x7, 0x7, 0x6, 0x8, 0xa59c}}}, &(0x7f0000000840)={0x84, &(0x7f0000000380)={0x20, 0x8, 0x5a, "3fe039a1ad09ae24006c210fb895fc5d07341c2eec3257af5a8146db0820e789f393dedde20b24a3b676ff54203e07ff5c09980029746bf72a12fedb36b2b517a3ac9bd2422b0a3297fb4c190444f5b9f4e94cb6a4ac9d71da3f"}, &(0x7f0000000440)={0x0, 0xa, 0x1, 0xf8}, &(0x7f0000000480)={0x0, 0x8, 0x1, 0x8}, 0x0, &(0x7f0000000540)={0x20, 0x0, 0x4, {0x400, 0x20}}, &(0x7f0000000580)={0x40, 0x7, 0x2, 0x6}, &(0x7f00000005c0)={0x40, 0x9, 0x1, 0x6e}, &(0x7f0000000600)={0x40, 0xb, 0x2, "cb98"}, &(0x7f0000000640)={0x40, 0xf, 0x2, 0x3}, &(0x7f0000000680)={0x40, 0x13, 0x6, @local}, &(0x7f00000006c0)={0x40, 0x17, 0x6, @local}, 0x0, &(0x7f0000000740)={0x40, 0x1a, 0x2, 0x400}, &(0x7f0000000780)={0x40, 0x1c, 0x1, 0x9}, &(0x7f00000007c0)={0x40, 0x1e, 0x1, 0x52}, &(0x7f0000000800)={0x40, 0x21, 0x1, 0x1}}) sendmsg$inet6(r4, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000001400)=ANY=[], 0x40}, 0x84) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000002540)={0x73622a85, 0x1114, 0x2}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f00000002c0)={0x1}) syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000000)) r6 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x368, 0x1b0, 0xa, 0x148, 0x1b0, 0x10, 0x2d0, 0x2a8, 0x2a8, 0x2d0, 0x2a8, 0x3, 0x0, {[{{@ip={@empty, @multicast1, 0x0, 0xffffffff, 'team_slave_0\x00', 'veth0_to_bond\x00', {}, {}, 0x0, 0x0, 0x1}, 0x0, 0x190, 0x1b0, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@recent0={{0xf8}, {0xfffffffa, 0x40e151, 0x2, 0x0, 'syz0\x00', 0xfa}}, @inet=@rpfilter={{0x28}, {0x9}}]}, @unspec=@NOTRACK={0x20}}, {{@ip={@empty, @dev={0xac, 0x14, 0x14, 0x32}, 0x0, 0x0, 'ipvlan0\x00', 'nr0\x00', {}, {}, 0x6c}, 0x0, 0xc0, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x9}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, 0x2, 0x7, [0x8, 0x2b, 0xe, 0x9, 0x40, 0x16, 0x1a, 0x25, 0x16, 0x28, 0x3a, 0x26, 0x23, 0x8022, 0x401a, 0x19], 0x0, 0x1000, 0x7}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x3c8) 4.771424363s ago: executing program 1 (id=5328): openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r0 = syz_open_dev$vbi(&(0x7f0000000100), 0x1, 0x2) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000004900)=[{&(0x7f00000000c0)=@in={0x2, 0x4e22, @local}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000100)="f4", 0x1}], 0x1, &(0x7f00000002c0)=[@init={0x18, 0x84, 0x0, {0x2561, 0x9, 0x0, 0x6}}], 0x18}], 0x1, 0xc4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x54, 0x10, 0x400, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x34080}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}, @IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x28}}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e21}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x54}}, 0x804) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205648, &(0x7f00000000c0)={0xe7ff, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x98f905, 0xffffbfff, '\x00', @string=&(0x7f0000000180)=0xa3}}) syz_emit_ethernet(0x2a, &(0x7f0000001600)={@broadcast, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, 0x0) 4.663250983s ago: executing program 1 (id=5329): syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="042ffd02ffffffffffff050800400b07000712"], 0x200) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @dstopts_2292={{0x18, 0x29, 0x4, {0x4}}}, @hopopts={{0x88, 0x29, 0x36, {0x5e, 0xe, '\x00', [@pad1, @pad1, @calipso={0x7, 0x8, {0x3, 0x0, 0x0, 0xfff}}, @generic={0x8, 0x5e, "c8a110995d439fbfac9716a99c357bcb2d59a850490739734f6b321d19b3754df39cc2dc26cf263cbebbddb9a7f17b6771f74c46623f9e38bd23e6f0a2fd3a9a017f66738394aca44d1a9f0b35d9df0a964360ab0900a5e6fcac1cd41c91"}]}}}, @rthdrdstopts={{0x18, 0x29, 0x37, {0x73}}}], 0xe8}}], 0x1, 0x810) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000300)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d3f2007000000", @ANYRES32=r5, @ANYBLOB="00000000100000001c001a80080002802d07420008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001d40)=@base={0x12, 0x4, 0x4, 0x2}, 0x50) syz_usb_connect(0x6, 0xabf, &(0x7f0000002840)={{0x12, 0x1, 0x0, 0x88, 0x91, 0xc4, 0x40, 0x1b80, 0xd393, 0x9504, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xaad, 0x4, 0x9f, 0xee, 0x0, 0x4, "", [{{0x9, 0x4, 0x81, 0x7, 0xf, 0x3c, 0xaf, 0xe7, 0xf, [], [{{0x9, 0x5, 0xe, 0x10, 0x3ff, 0x16, 0x1, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0x7ff4}]}}, {{0x9, 0x5, 0x0, 0x4, 0x10, 0x69, 0x8, 0xd1}}, {{0x9, 0x5, 0xa, 0x2, 0x3ff, 0xf, 0x4, 0x2}}, {{0x9, 0x5, 0x3, 0x1, 0x8, 0xf3, 0xf2, 0x3}}, {{0x9, 0x5, 0x0, 0x4, 0x630, 0x5, 0xcf, 0x2, [@generic={0x9f, 0x24, "9a2f0dca024fe9d32bdc3724a8747b8888c22f6635ecf75d01c22f31e4a277255a199e6862e11583cfbd491d656b2fbee63f6696796ad2480216e8266552c5972c660f604a3aa4590f47f6d107e2cb2f4098c6eca0db509fda17fcbc22927f9ccdc60c7eba5a34745795df992db90cf0ef19831c0e4f568ca70210b0ac0797eadf8c4e80883d0632850fe1c88a171d4b78757e958aff21fc1aeba6fc8a"}, @generic={0xd4, 0x22, "64bf892d39bbe351ed14f4d0c55165b24ac008dfb6b4126e930e1e86839926a08ca4d595fdff6d479d8e950b4f3c5dd2905a373fcf6532f837701ba42d8c9fc7ee81c46c2a40c71099b080e837e6cb6072bbcde2e607e4d63cac32b159787ecf80e0ccd4b87abf53b39fed08b19c2cf137fe3ac68e1113bd062e2577e00a63e5f7cb2c119f105052f6febc2da311b0869d8af1d377676518840efe7415d54a1f3832c9392c6dcecbea6a944ff6209b8df309221d22f636c973ee4821a2cb27d8e4ad9d8c9297fe6e68b85ca23f07d510040a"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x10, 0xc0, 0x0, 0x1}}, {{0x9, 0x5, 0x80, 0x10, 0x20, 0xd9, 0x6, 0x1, [@generic={0xa2, 0x30, "55462ccf30d605db89d700550aa32a4a9755072034ab66c11a85e8a5ee549fc640e45b46d4a75aa6e0a5d1f1b3f26862de8110e23ae688724a431682949d0e1228efab16603211efcfeac36d0ed370967a465d822662962c3aa26c7f59e914c8c6a8acce15c1405a3c2ab3a7bee1a01dad1d9e5bbbc0848c42323e84d4ab6effe5eb3db53f1bc98b964479117ab39bcba44234c868d389f7813022cb6391c596"}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0xf7, 0x1}]}}, {{0x9, 0x5, 0x2, 0x10, 0x3ff, 0x7, 0x9, 0x3}}, {{0x9, 0x5, 0x8f, 0x0, 0x10, 0x7, 0x8, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0xfff6}, @generic={0x1c, 0x31, "6404afae02ea26c6fce9e2f5caa35b1d6359f9b6f19a65b8cc3c"}]}}, {{0x9, 0x5, 0x8, 0x10, 0x200, 0x1a, 0x3, 0x5, [@generic={0xd5, 0x22, "4062ab8e684e4706c0953b28205893797530fb6ff1b970b4b3be3c9320e68dea5dc4a81a16b24fd6668b6711794e3bd75c7c83d054f231a0306fbede4cc22d336c0f2c04c5d9cc4a73cd2b4571ec6e68ae8a4a189ea480bba8daa8a09ae471916b2124c77da1a1bcc7b76089b35ae9b08dc3106805a5d96a735815b5eef9dffc534e710c16739fa3bbb587f12e0641185b50bf0ffddf22d7bfc02b5329781d1fb75ee949ecaa96a403172a11c6dcf88f46246084be02d86128cebeadf03e92afe0352c4c32ac95c9916292ec8c680e490ecadf"}]}}, {{0x9, 0x5, 0x0, 0x4, 0x20, 0xec, 0x9, 0x8, [@generic={0x55, 0x22, "2c282f7b90b683eb72fabed42747037ec4fa7ea4b2de6c31db656d29d1dec1ea46cb4ba32bce7d512f1a577b8a3a9c632ae7bfaccdceb80a7cc27058307b387d1a03e1b019596d5ebeb7dd647be347f1537c5a"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x0, 0x7}]}}, {{0x9, 0x5, 0xa, 0x1, 0x20, 0xfe, 0xfb, 0x6}}, {{0x9, 0x5, 0x5, 0x10, 0x20, 0xbc, 0xd, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x2, 0x4}, @generic={0x1a, 0x22, "0f87c9bf88d64bbb689c6860d84dfc3da32d8d9b6cff2f04"}]}}, {{0x9, 0x5, 0x1, 0x10, 0x8, 0xd0, 0xfa, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x6, 0x2}]}}, {{0x9, 0x5, 0xf, 0x0, 0x40, 0x8, 0x4, 0xfe}}]}}, {{0x9, 0x4, 0x41, 0x9, 0x3, 0xff, 0xff, 0xff, 0x1, [@cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x80}, {0xd, 0x24, 0xf, 0x1, 0x7fffffff, 0x7c27, 0xfffb}, {0x6, 0x24, 0x1a, 0x9, 0x2}, [@dmm={0x7, 0x24, 0x14, 0x8, 0x1}, @mbim={0xc, 0x24, 0x1b, 0x0, 0x1, 0x6, 0x9, 0x9, 0x5}, @mbim_extended={0x8, 0x24, 0x1c, 0x9, 0x0, 0xc180}]}, @cdc_ecm={{0xa, 0x24, 0x6, 0x0, 0x0, "684d8cd86c"}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x10, 0x6, 0x6}, [@ncm={0x6, 0x24, 0x1a, 0x4, 0x1c}]}], [{{0x9, 0x5, 0x6, 0xc, 0x10, 0x7, 0x5, 0x8}}, {{0x9, 0x5, 0x4, 0x0, 0x200, 0x4, 0x4, 0x7f}}, {{0x9, 0x5, 0xf, 0x1, 0x20, 0xfd, 0x2, 0xff, [@generic={0xc6, 0x10, "78dde5313f59454b0b4cd7f33b717cd2a2b77342fa32de147fe828244b80bb7239079c445f967695358e74c0ba67f4614d843fa67bc194ccc82949a8fcb1cef476891142636ecdc1c1b4f18bd082e9a90bfb0450bc4a1cb72ba735d829766bda9556a5762421dcc4903b95e467c3075ef47845080f9ae66890ba1dbf84437010b35022d60eaa7dae0c8381e4b27cfaa1cda1529160a93f4d921a72fce28c7c1524ec9e1ea095dab20cd4208eba9299270fc273ca5eaab3e654df1f7bbc5d0f6a2dfbd724"}]}}]}}, {{0x9, 0x4, 0xde, 0x4, 0xe, 0xf0, 0xfd, 0x5b, 0x8, [@uac_control={{0xa, 0x24, 0x1, 0xffff, 0x12}, [@processing_unit={0x8, 0x24, 0x7, 0x1, 0x4, 0x4, "b5"}]}], [{{0x9, 0x5, 0x4, 0x10, 0x3ff, 0x0, 0x80, 0x6e, [@generic={0x57, 0x1, "f421b6b5e98ccc939a7b88da7700e3ff108d70dd4ca4ed368c49a40bd1b494a730cc5917d63342b96623fcdd02ac67cd01f7ff44de3708f4c1eeb08a6ae19828d4b5176e535df8c4f5296b56f1a9ca9e5dac8a46f3"}]}}, {{0x9, 0x5, 0x80, 0x0, 0x8, 0x4, 0x4, 0x7f}}, {{0x9, 0x5, 0x2, 0x0, 0x8, 0x7, 0x1, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x64, 0x8001}, @generic={0x75, 0x2, "d632ac378b53fa0af48d0e59822888253ab066b3ae181fb11839b8fb5cbac61b8cc6b7a55cb77d365639ca850a550e766f27d5f8cb7f2ee2ac14ce15a613462df9f1e8eacc1120a4de8b580d22ed3296d785d9826d4afacffb7378a85e15cc4d0dea37d79d44d18989f9f6bcced0b90821e60f"}]}}, {{0x9, 0x5, 0xb, 0x4, 0x58, 0x5, 0xae, 0x8f, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xda, 0x5}, @generic={0x3e, 0xe, "f54a59cfe691e3385f581ec75bfd8f9388f4f65cec660622097d237a02087f50fdfc71fb34c55e10cffcf3cd3167ec71461986292e83809d3c26e088"}]}}, {{0x9, 0x5, 0x80, 0xc, 0x400, 0x4, 0x14, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x9, 0x2}]}}, {{0x9, 0x5, 0x4, 0x10, 0x400, 0x2, 0x2, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x5, 0x1}]}}, {{0x9, 0x5, 0x4, 0x1, 0x200, 0x5, 0x0, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x80, 0x3}, @generic={0xc8, 0x7, "664b7f6702c0622e978c1b6650de296e5e9d5f783d997c244696bc05795d14b62a8a3754172783195ebc1b5887ca64e40f09189102f4b67f8ac67bfab83921f3112b5b5c425bae28f2a52be52054621505d8c9ac3336d06eeba2c3d32db2243ab9c15074c39a48db6fa0205805b5e71dfef4704012fc670591eaa4579c49849a1acf9e9781e1786232504bdf26ede0b5fc8e0cad90d0a72e2c6be31aa15dbd0ad08d74c134a7158014abf84a6f47bc5d95f6396bdc3fd9843f56e00fa6a731a0e4b7bbd6157e"}]}}, {{0x9, 0x5, 0x8, 0x8, 0x200, 0xf, 0x8, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x2, 0x3}]}}, {{0x9, 0x5, 0x7, 0x0, 0x10, 0x4, 0x1, 0x97, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x81, 0x2}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x7, 0x9c83}]}}, {{0x9, 0x5, 0x80, 0xc, 0x200, 0x9, 0x6, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x4}, @generic={0xa6, 0x22, "8b377c26c1b665724d2ad3fe2ae4b1111984a65d656e16c3d8f0c4a23c51654d6a2174ca3f9de4a1b9fa668f3fc2276d791739a3053dfa9f5e3ce22b0ecb749e90c92fff4cf4c7e0aa34e6b2012d7adbc757b092a38fae01c9bf45b8ce902afecaec0fd5780c8748fb18ee4b270de53e56b3ba0ffbd574e4fa8e8b76130c87020340c85d395311e85430e3b9d933bc6863ff25cd5c4ca27793f3455d278da3f0372277e4"}]}}, {{0x9, 0x5, 0x0, 0xc, 0x10, 0x8, 0x0, 0x10}}, {{0x9, 0x5, 0x0, 0x8, 0x20, 0x1, 0xf1, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0x4}]}}, {{0x9, 0x5, 0x6, 0x0, 0x40, 0xe, 0x5, 0xaf}}, {{0x9, 0x5, 0x1, 0x8, 0x10, 0x7, 0x1, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0x8001}, @generic={0x4c, 0xc, "1e6ac828402b4830221af4c051e703d877a8d560381ba110c8f592cf6f9f7351a13d7610322033c3e7b3b6b0dd44ad3fd03cfb31f2a0c01c64249280b2081bc5a56720cf15ec5f46b59b"}]}}]}}, {{0x9, 0x4, 0x3c, 0x2, 0x6, 0x6, 0xbe, 0xa6, 0x5, [@hid_hid={0x9, 0x21, 0x8, 0x24, 0x1, {0x22, 0xf83}}], [{{0x9, 0x5, 0x8, 0x0, 0x10, 0x7f, 0x6, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x1, 0x8}]}}, {{0x9, 0x5, 0x1, 0x10, 0x10, 0x5, 0x5, 0x10, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xc0, 0x2}, @generic={0x18, 0xc, "61db4a3b6b16bb3eaa761c017da47bef7d16410b5bf7"}]}}, {{0x9, 0x5, 0x6, 0x10, 0x20, 0x40, 0x2, 0xb, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x0, 0x7ff}, @generic={0x7, 0x7, "45be78addd"}]}}, {{0x9, 0x5, 0xb, 0x8, 0x10, 0x9, 0x5, 0xff}}, {{0x9, 0x5, 0x0, 0x0, 0x8, 0xf1, 0x7, 0x66, [@generic={0xec, 0x21, "06525279be49e203aabce990fd18e62cc43be1c12abc47c00b23c9275660d204081f6b7e60c36c3fe61fc3c25e282d7f76fe9747c7b2ef9968ad09a6e18c1a59ecdda2c5be7c91e23da13789cb04edebc0723b8aa3a0a89124717bb5bb909a0c83127bb148f45984cd197517b4905e9f221a7caba0db0a080b9e962dfb4f9acb9ec5c4ac08064c07528d0a38752bcee50cf68e91eba72efffd894360304ca27b843dc1a800709dc732b7cadbfd49cdbf7cf038becce02ef880701003f953ccd0c85c4079b1b3ac2e59e0cc95c1bf94e89b1a66a9ffa60a3b1344788de55378016456fcbbed9c585f2187"}, @generic={0x11, 0x11, "6f787ad05b006e8cecd64098f90c6f"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x10, 0xff, 0x8, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x10, 0xfffb}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0xf9, 0x7}]}}]}}]}}]}}, &(0x7f0000003440)={0xa, &(0x7f0000003300)={0xa, 0x6, 0x200, 0xa, 0x6, 0xfc, 0x10, 0x84}, 0xbf, &(0x7f0000003340)={0x5, 0xf, 0xbf, 0x4, [@ptm_cap={0x3}, @generic={0x99, 0x10, 0x1, "9a28bac9c56461dc813cfd23e7b4ecca70baf67c3267edda31cb3957fd432e0fce4108f7718c6992947fdf0e59821fdb826104f8c11bb50130a330eef970e1998a7e65d59e083bdf187e2427d0aeabfd5cbc12d8009f4492591306076d80a40565c56fe25f7bf19a8c837b64d5fdf008cb006edd6a0faadb15f2b831151d58cf82663b1f37f0e4b47e521e62400538329854133ff2f4"}, @ssp_cap={0x14, 0x10, 0xa, 0x8, 0x2, 0xb662, 0xff00, 0xff, [0xff0000, 0x30]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x5, 0xba, 0x89}]}, 0x1, [{0x4, &(0x7f0000003400)=@lang_id={0x4}}]}) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000100)={@in={{0x2, 0x0, @rand_addr=0x64010103}}, 0x0, 0x0, 0x39, 0x0, "c3218d82c5890101d7cdb23c72887c897926a8856263b50c57bfccf9f362f16f21f5c8facc1d1518103bbde1a9fe13f6545bbdff9c1351ba69e297337d6a5e4a94bd192900"}, 0xd8) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000000)="8c933d33132263a289e790c67446d30262dc1deb29", 0x15) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000003c0)={0x78, 0x0, 0x100, 0x2, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "01ac4db579667ce9917f7c82298bfae057388698ac7852bc0f69006f"}}]}, @TIPC_NLA_BEARER={0x4}, @TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000000}, 0x4011) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r7 = accept4(r3, 0x0, 0x0, 0x800) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000500), r7) sendmsg$TIPC_NL_KEY_SET(r7, &(0x7f0000000c40)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000880)={0x1d4, r8, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x80, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffffc}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xb210}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x587}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xd}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x480}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x439}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10}]}]}, @TIPC_NLA_SOCK={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x906}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x466}]}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7f}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8}]}, @TIPC_NLA_LINK={0x68, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa0000}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_LINK={0x38, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NET={0x40, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xf2d9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x400}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}]}]}, 0x1d4}, 0x1, 0x0, 0x0, 0x4001}, 0x48c0) pwritev(0xffffffffffffffff, &(0x7f0000000d80)=[{&(0x7f0000000780)="42ebe7f5d8dde5f3e9c5c7e7bc09d8d80f373ae4dc85e6cb597bd322663b986ff272399bec41d811a763bcd2cdc221d2ac6cdeeca815ce250ce959444e7f296cb11433530cfccd0c6f450147b46eb5bbe281810c76577aaf554801815d1ee516cc0752832233d7610ce165a593e43cbaa4f52db28e5aead94767ad0d", 0x7c}, {0x0}, {&(0x7f0000000540)="b4e007f06d056aa0367c7356f83c", 0xe}, {&(0x7f0000000580)="1ab9a1fec95331b4b1bb5f840b0a198cb5add980a1e5cd402aaabeb7a27d1418376394238ae0a1ca9cc41879", 0x2c}, {&(0x7f0000000a80)}, {0x0}, {&(0x7f0000000ac0)="50591ee1c54cb070964417fd1f4ffe5a57c4ff8a3c5c5ce1d3957dfc44e8e17c719084f4e8da23c0e4667eeda56ce5d4d14d904f", 0x34}], 0x7, 0x4d9e, 0x8) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x28, 0x1, 0x2) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) 4.535250165s ago: executing program 9 (id=5330): syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="042ffd02ffffffffffff050800400b07000712"], 0x200) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @dstopts_2292={{0x18, 0x29, 0x4, {0x4}}}, @hopopts={{0x88, 0x29, 0x36, {0x5e, 0xe, '\x00', [@pad1, @pad1, @calipso={0x7, 0x8, {0x3, 0x0, 0x0, 0xfff}}, @generic={0x8, 0x5e, "c8a110995d439fbfac9716a99c357bcb2d59a850490739734f6b321d19b3754df39cc2dc26cf263cbebbddb9a7f17b6771f74c46623f9e38bd23e6f0a2fd3a9a017f66738394aca44d1a9f0b35d9df0a964360ab0900a5e6fcac1cd41c91"}]}}}, @rthdrdstopts={{0x18, 0x29, 0x37, {0x73}}}], 0xe8}}], 0x1, 0x810) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000300)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d3f2007000000", @ANYRES32=r5, @ANYBLOB="00000000100000001c001a80080002802d07420008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001d40)=@base={0x12, 0x4, 0x4, 0x2}, 0x50) syz_usb_connect(0x6, 0xabf, &(0x7f0000002840)={{0x12, 0x1, 0x0, 0x88, 0x91, 0xc4, 0x40, 0x1b80, 0xd393, 0x9504, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xaad, 0x4, 0x9f, 0xee, 0x0, 0x4, "", [{{0x9, 0x4, 0x81, 0x7, 0xf, 0x3c, 0xaf, 0xe7, 0xf, [], [{{0x9, 0x5, 0xe, 0x10, 0x3ff, 0x16, 0x1, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0x7ff4}]}}, {{0x9, 0x5, 0x0, 0x4, 0x10, 0x69, 0x8, 0xd1}}, {{0x9, 0x5, 0xa, 0x2, 0x3ff, 0xf, 0x4, 0x2}}, {{0x9, 0x5, 0x3, 0x1, 0x8, 0xf3, 0xf2, 0x3}}, {{0x9, 0x5, 0x0, 0x4, 0x630, 0x5, 0xcf, 0x2, [@generic={0x9f, 0x24, "9a2f0dca024fe9d32bdc3724a8747b8888c22f6635ecf75d01c22f31e4a277255a199e6862e11583cfbd491d656b2fbee63f6696796ad2480216e8266552c5972c660f604a3aa4590f47f6d107e2cb2f4098c6eca0db509fda17fcbc22927f9ccdc60c7eba5a34745795df992db90cf0ef19831c0e4f568ca70210b0ac0797eadf8c4e80883d0632850fe1c88a171d4b78757e958aff21fc1aeba6fc8a"}, @generic={0xd4, 0x22, "64bf892d39bbe351ed14f4d0c55165b24ac008dfb6b4126e930e1e86839926a08ca4d595fdff6d479d8e950b4f3c5dd2905a373fcf6532f837701ba42d8c9fc7ee81c46c2a40c71099b080e837e6cb6072bbcde2e607e4d63cac32b159787ecf80e0ccd4b87abf53b39fed08b19c2cf137fe3ac68e1113bd062e2577e00a63e5f7cb2c119f105052f6febc2da311b0869d8af1d377676518840efe7415d54a1f3832c9392c6dcecbea6a944ff6209b8df309221d22f636c973ee4821a2cb27d8e4ad9d8c9297fe6e68b85ca23f07d510040a"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x10, 0xc0, 0x0, 0x1}}, {{0x9, 0x5, 0x80, 0x10, 0x20, 0xd9, 0x6, 0x1, [@generic={0xa2, 0x30, "55462ccf30d605db89d700550aa32a4a9755072034ab66c11a85e8a5ee549fc640e45b46d4a75aa6e0a5d1f1b3f26862de8110e23ae688724a431682949d0e1228efab16603211efcfeac36d0ed370967a465d822662962c3aa26c7f59e914c8c6a8acce15c1405a3c2ab3a7bee1a01dad1d9e5bbbc0848c42323e84d4ab6effe5eb3db53f1bc98b964479117ab39bcba44234c868d389f7813022cb6391c596"}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0xf7, 0x1}]}}, {{0x9, 0x5, 0x2, 0x10, 0x3ff, 0x7, 0x9, 0x3}}, {{0x9, 0x5, 0x8f, 0x0, 0x10, 0x7, 0x8, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0xfff6}, @generic={0x1c, 0x31, "6404afae02ea26c6fce9e2f5caa35b1d6359f9b6f19a65b8cc3c"}]}}, {{0x9, 0x5, 0x8, 0x10, 0x200, 0x1a, 0x3, 0x5, [@generic={0xd5, 0x22, "4062ab8e684e4706c0953b28205893797530fb6ff1b970b4b3be3c9320e68dea5dc4a81a16b24fd6668b6711794e3bd75c7c83d054f231a0306fbede4cc22d336c0f2c04c5d9cc4a73cd2b4571ec6e68ae8a4a189ea480bba8daa8a09ae471916b2124c77da1a1bcc7b76089b35ae9b08dc3106805a5d96a735815b5eef9dffc534e710c16739fa3bbb587f12e0641185b50bf0ffddf22d7bfc02b5329781d1fb75ee949ecaa96a403172a11c6dcf88f46246084be02d86128cebeadf03e92afe0352c4c32ac95c9916292ec8c680e490ecadf"}]}}, {{0x9, 0x5, 0x0, 0x4, 0x20, 0xec, 0x9, 0x8, [@generic={0x55, 0x22, "2c282f7b90b683eb72fabed42747037ec4fa7ea4b2de6c31db656d29d1dec1ea46cb4ba32bce7d512f1a577b8a3a9c632ae7bfaccdceb80a7cc27058307b387d1a03e1b019596d5ebeb7dd647be347f1537c5a"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x0, 0x7}]}}, {{0x9, 0x5, 0xa, 0x1, 0x20, 0xfe, 0xfb, 0x6}}, {{0x9, 0x5, 0x5, 0x10, 0x20, 0xbc, 0xd, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x2, 0x4}, @generic={0x1a, 0x22, "0f87c9bf88d64bbb689c6860d84dfc3da32d8d9b6cff2f04"}]}}, {{0x9, 0x5, 0x1, 0x10, 0x8, 0xd0, 0xfa, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x6, 0x2}]}}, {{0x9, 0x5, 0xf, 0x0, 0x40, 0x8, 0x4, 0xfe}}]}}, {{0x9, 0x4, 0x41, 0x9, 0x3, 0xff, 0xff, 0xff, 0x1, [@cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x80}, {0xd, 0x24, 0xf, 0x1, 0x7fffffff, 0x7c27, 0xfffb}, {0x6, 0x24, 0x1a, 0x9, 0x2}, [@dmm={0x7, 0x24, 0x14, 0x8, 0x1}, @mbim={0xc, 0x24, 0x1b, 0x0, 0x1, 0x6, 0x9, 0x9, 0x5}, @mbim_extended={0x8, 0x24, 0x1c, 0x9, 0x0, 0xc180}]}, @cdc_ecm={{0xa, 0x24, 0x6, 0x0, 0x0, "684d8cd86c"}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x10, 0x6, 0x6}, [@ncm={0x6, 0x24, 0x1a, 0x4, 0x1c}]}], [{{0x9, 0x5, 0x6, 0xc, 0x10, 0x7, 0x5, 0x8}}, {{0x9, 0x5, 0x4, 0x0, 0x200, 0x4, 0x4, 0x7f}}, {{0x9, 0x5, 0xf, 0x1, 0x20, 0xfd, 0x2, 0xff, [@generic={0xc6, 0x10, "78dde5313f59454b0b4cd7f33b717cd2a2b77342fa32de147fe828244b80bb7239079c445f967695358e74c0ba67f4614d843fa67bc194ccc82949a8fcb1cef476891142636ecdc1c1b4f18bd082e9a90bfb0450bc4a1cb72ba735d829766bda9556a5762421dcc4903b95e467c3075ef47845080f9ae66890ba1dbf84437010b35022d60eaa7dae0c8381e4b27cfaa1cda1529160a93f4d921a72fce28c7c1524ec9e1ea095dab20cd4208eba9299270fc273ca5eaab3e654df1f7bbc5d0f6a2dfbd724"}]}}]}}, {{0x9, 0x4, 0xde, 0x4, 0xe, 0xf0, 0xfd, 0x5b, 0x8, [@uac_control={{0xa, 0x24, 0x1, 0xffff, 0x12}, [@processing_unit={0x8, 0x24, 0x7, 0x1, 0x4, 0x4, "b5"}]}], [{{0x9, 0x5, 0x4, 0x10, 0x3ff, 0x0, 0x80, 0x6e, [@generic={0x57, 0x1, "f421b6b5e98ccc939a7b88da7700e3ff108d70dd4ca4ed368c49a40bd1b494a730cc5917d63342b96623fcdd02ac67cd01f7ff44de3708f4c1eeb08a6ae19828d4b5176e535df8c4f5296b56f1a9ca9e5dac8a46f3"}]}}, {{0x9, 0x5, 0x80, 0x0, 0x8, 0x4, 0x4, 0x7f}}, {{0x9, 0x5, 0x2, 0x0, 0x8, 0x7, 0x1, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x64, 0x8001}, @generic={0x75, 0x2, "d632ac378b53fa0af48d0e59822888253ab066b3ae181fb11839b8fb5cbac61b8cc6b7a55cb77d365639ca850a550e766f27d5f8cb7f2ee2ac14ce15a613462df9f1e8eacc1120a4de8b580d22ed3296d785d9826d4afacffb7378a85e15cc4d0dea37d79d44d18989f9f6bcced0b90821e60f"}]}}, {{0x9, 0x5, 0xb, 0x4, 0x58, 0x5, 0xae, 0x8f, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xda, 0x5}, @generic={0x3e, 0xe, "f54a59cfe691e3385f581ec75bfd8f9388f4f65cec660622097d237a02087f50fdfc71fb34c55e10cffcf3cd3167ec71461986292e83809d3c26e088"}]}}, {{0x9, 0x5, 0x80, 0xc, 0x400, 0x4, 0x14, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x9, 0x2}]}}, {{0x9, 0x5, 0x4, 0x10, 0x400, 0x2, 0x2, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x5, 0x1}]}}, {{0x9, 0x5, 0x4, 0x1, 0x200, 0x5, 0x0, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x80, 0x3}, @generic={0xc8, 0x7, "664b7f6702c0622e978c1b6650de296e5e9d5f783d997c244696bc05795d14b62a8a3754172783195ebc1b5887ca64e40f09189102f4b67f8ac67bfab83921f3112b5b5c425bae28f2a52be52054621505d8c9ac3336d06eeba2c3d32db2243ab9c15074c39a48db6fa0205805b5e71dfef4704012fc670591eaa4579c49849a1acf9e9781e1786232504bdf26ede0b5fc8e0cad90d0a72e2c6be31aa15dbd0ad08d74c134a7158014abf84a6f47bc5d95f6396bdc3fd9843f56e00fa6a731a0e4b7bbd6157e"}]}}, {{0x9, 0x5, 0x8, 0x8, 0x200, 0xf, 0x8, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x2, 0x3}]}}, {{0x9, 0x5, 0x7, 0x0, 0x10, 0x4, 0x1, 0x97, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x81, 0x2}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x7, 0x9c83}]}}, {{0x9, 0x5, 0x80, 0xc, 0x200, 0x9, 0x6, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x4}, @generic={0xa6, 0x22, "8b377c26c1b665724d2ad3fe2ae4b1111984a65d656e16c3d8f0c4a23c51654d6a2174ca3f9de4a1b9fa668f3fc2276d791739a3053dfa9f5e3ce22b0ecb749e90c92fff4cf4c7e0aa34e6b2012d7adbc757b092a38fae01c9bf45b8ce902afecaec0fd5780c8748fb18ee4b270de53e56b3ba0ffbd574e4fa8e8b76130c87020340c85d395311e85430e3b9d933bc6863ff25cd5c4ca27793f3455d278da3f0372277e4"}]}}, {{0x9, 0x5, 0x0, 0xc, 0x10, 0x8, 0x0, 0x10}}, {{0x9, 0x5, 0x0, 0x8, 0x20, 0x1, 0xf1, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0x4}]}}, {{0x9, 0x5, 0x6, 0x0, 0x40, 0xe, 0x5, 0xaf}}, {{0x9, 0x5, 0x1, 0x8, 0x10, 0x7, 0x1, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0x8001}, @generic={0x4c, 0xc, "1e6ac828402b4830221af4c051e703d877a8d560381ba110c8f592cf6f9f7351a13d7610322033c3e7b3b6b0dd44ad3fd03cfb31f2a0c01c64249280b2081bc5a56720cf15ec5f46b59b"}]}}]}}, {{0x9, 0x4, 0x3c, 0x2, 0x6, 0x6, 0xbe, 0xa6, 0x5, [@hid_hid={0x9, 0x21, 0x8, 0x24, 0x1, {0x22, 0xf83}}], [{{0x9, 0x5, 0x8, 0x0, 0x10, 0x7f, 0x6, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x1, 0x8}]}}, {{0x9, 0x5, 0x1, 0x10, 0x10, 0x5, 0x5, 0x10, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xc0, 0x2}, @generic={0x18, 0xc, "61db4a3b6b16bb3eaa761c017da47bef7d16410b5bf7"}]}}, {{0x9, 0x5, 0x6, 0x10, 0x20, 0x40, 0x2, 0xb, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x0, 0x7ff}, @generic={0x7, 0x7, "45be78addd"}]}}, {{0x9, 0x5, 0xb, 0x8, 0x10, 0x9, 0x5, 0xff}}, {{0x9, 0x5, 0x0, 0x0, 0x8, 0xf1, 0x7, 0x66, [@generic={0xec, 0x21, "06525279be49e203aabce990fd18e62cc43be1c12abc47c00b23c9275660d204081f6b7e60c36c3fe61fc3c25e282d7f76fe9747c7b2ef9968ad09a6e18c1a59ecdda2c5be7c91e23da13789cb04edebc0723b8aa3a0a89124717bb5bb909a0c83127bb148f45984cd197517b4905e9f221a7caba0db0a080b9e962dfb4f9acb9ec5c4ac08064c07528d0a38752bcee50cf68e91eba72efffd894360304ca27b843dc1a800709dc732b7cadbfd49cdbf7cf038becce02ef880701003f953ccd0c85c4079b1b3ac2e59e0cc95c1bf94e89b1a66a9ffa60a3b1344788de55378016456fcbbed9c585f2187"}, @generic={0x11, 0x11, "6f787ad05b006e8cecd64098f90c6f"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x10, 0xff, 0x8, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x10, 0xfffb}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0xf9, 0x7}]}}]}}]}}]}}, &(0x7f0000003440)={0xa, &(0x7f0000003300)={0xa, 0x6, 0x200, 0xa, 0x6, 0xfc, 0x10, 0x84}, 0xbf, &(0x7f0000003340)={0x5, 0xf, 0xbf, 0x4, [@ptm_cap={0x3}, @generic={0x99, 0x10, 0x1, "9a28bac9c56461dc813cfd23e7b4ecca70baf67c3267edda31cb3957fd432e0fce4108f7718c6992947fdf0e59821fdb826104f8c11bb50130a330eef970e1998a7e65d59e083bdf187e2427d0aeabfd5cbc12d8009f4492591306076d80a40565c56fe25f7bf19a8c837b64d5fdf008cb006edd6a0faadb15f2b831151d58cf82663b1f37f0e4b47e521e62400538329854133ff2f4"}, @ssp_cap={0x14, 0x10, 0xa, 0x8, 0x2, 0xb662, 0xff00, 0xff, [0xff0000, 0x30]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x5, 0xba, 0x89}]}, 0x1, [{0x4, &(0x7f0000003400)=@lang_id={0x4}}]}) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000100)={@in={{0x2, 0x0, @rand_addr=0x64010103}}, 0x0, 0x0, 0x39, 0x0, "c3218d82c5890101d7cdb23c72887c897926a8856263b50c57bfccf9f362f16f21f5c8facc1d1518103bbde1a9fe13f6545bbdff9c1351ba69e297337d6a5e4a94bd192900"}, 0xd8) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000000)="8c933d33132263a289e790c67446d30262dc1deb29", 0x15) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000003c0)={0x78, 0x0, 0x100, 0x2, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "01ac4db579667ce9917f7c82298bfae057388698ac7852bc0f69006f"}}]}, @TIPC_NLA_BEARER={0x4}, @TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000000}, 0x4011) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r7 = accept4(r3, 0x0, 0x0, 0x800) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000500), r7) sendmsg$TIPC_NL_KEY_SET(r7, &(0x7f0000000c40)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000880)={0x1d4, r8, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x80, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffffc}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xb210}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x587}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xd}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x480}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x439}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10}]}]}, @TIPC_NLA_SOCK={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x906}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x466}]}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7f}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8}]}, @TIPC_NLA_LINK={0x68, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa0000}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_LINK={0x38, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NET={0x40, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xf2d9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x400}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}]}]}, 0x1d4}, 0x1, 0x0, 0x0, 0x4001}, 0x48c0) pwritev(0xffffffffffffffff, &(0x7f0000000d80)=[{&(0x7f0000000780)="42ebe7f5d8dde5f3e9c5c7e7bc09d8d80f373ae4dc85e6cb597bd322663b986ff272399bec41d811a763bcd2cdc221d2ac6cdeeca815ce250ce959444e7f296cb11433530cfccd0c6f450147b46eb5bbe281810c76577aaf554801815d1ee516cc0752832233d7610ce165a593e43cbaa4f52db28e5aead94767ad0d", 0x7c}, {0x0}, {&(0x7f0000000540)="b4e007f06d056aa0367c7356f83c", 0xe}, {&(0x7f0000000580)="1ab9a1fec95331b4b1bb5f840b0a198cb5add980a1e5cd402aaabeb7a27d1418376394238ae0a1ca9cc41879", 0x2c}, {&(0x7f0000000a80)}, {0x0}, {&(0x7f0000000ac0)="50591ee1c54cb070964417fd1f4ffe5a57c4ff8a3c5c5ce1d3957dfc44e8e17c719084f4e8da23c0e4667eeda56ce5d4d14d904f", 0x34}], 0x7, 0x4d9e, 0x8) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x28, 0x1, 0x2) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) 3.998437555s ago: executing program 1 (id=5331): bpf$MAP_CREATE(0x0, 0x0, 0x0) timer_create(0x1, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r1 = inotify_init1(0x0) read(r1, 0x0, 0x0) (fail_nth: 9) 3.684545807s ago: executing program 9 (id=5333): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000005c0)={0x234, 0x25, 0x1, 0x70bd0b, 0x25dfdbfe, {0xc}, [@nested={0x220, 0xe, 0x0, 0x1, [@nested={0x21c, 0x30, 0x0, 0x1, [@nested={0xc, 0x14, 0x0, 0x1, [@typed={0x8, 0xe2, 0x0, 0x0, @ipv4=@rand_addr=0x64010100}]}, @nested={0xe5, 0x21, 0x0, 0x1, [@generic="5a15f564c4f22641978fc5cb318a80513202754df567e4f86525007ca9e42ca2d3e58e02c0bbb514c2928c46b64011243ad6b9a8a1e324fca520627c8c41d182bc6909de27", @typed={0x8, 0xed, 0x0, 0x0, @fd=r0}, @generic="a145b6fb5c5fb74bf0d3a6f1be5ce79d02d742d6360aa01f7afb2b388e93f14d508bc510455a6d375d7eea538edd319ad98d67baed571f931072051b6942357f750c871b7c59dd288bbe80774456f5abaec3", @typed={0x8, 0x5a, 0x0, 0x0, @u32=0xe}, @generic="5b4e96c17da28ce1d5309969d47c0cc840f13e0de026841e92c1713492f5783dd786b5fe9a4ac686b0f069cd5b2789fbe7e9f20cb15a", @nested={0x4, 0xc6}]}, @generic="12c1e10b5b45426ef2119446ccffb27addddb1acda4e61df321b94a59915e0cd0cca2d42458217da56d755e0f8ff3aa21668bb90118adf2af7deb83c8fe64f9d052207d2f210923071c0772c64a0cdd2f4efd475b763df1616f76f1d349f85ec943ae87b39c9d885927f02bfed38d100cafbee060a092cf0c419cb3b9ec9c61d532aa7b5fd8decb56a48428b3623135a65c4ef9636c8bb0ea431a2f8551e29bcc67807a1368d034f229c478608d8290007b985714f334e0e6964efebb108c8c7b0e348c6611fc8a93e1822eae900a182615686ddcc424813e6847d7e07c2", @typed={0x8, 0x1a, 0x0, 0x0, @fd}, @generic="28357720856cfec0707ad29d73f883a3e2e115d5411737da3afe17b2ee5458f98cafad86cb69323987afa665fbe6733cc5ee2dfb8171e2ade5f801897b4f"]}]}]}, 0x234}, 0x1, 0x0, 0x0, 0x4000d}, 0x0) socket$kcm(0x15, 0x5, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x5}}, 0x1c) socket$inet6(0xa, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x110) r1 = syz_open_dev$dvb_dvr(&(0x7f0000000240), 0x0, 0x100) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000000)={0x81, 0xfffffff7, 0x1, 0x100, 0xdbd}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400a0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af9219a1e18c488e827c1bbec", 0x89}], 0x1}, 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}, {0x0}], 0x2) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x800) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0xfffe, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @info_reply={0x10, 0x0, 0x0, 0x1ff, 0x9}}}}}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r5, 0x400, 0x1) truncate(&(0x7f0000000100)='./file1\x00', 0x7) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x2040, 0x0) close_range(r4, 0xffffffffffffffff, 0x2000000000000) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) 3.580469038s ago: executing program 1 (id=5334): ioprio_set$pid(0x2, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x3f00) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x541b, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) close(r3) r4 = syz_open_dev$dvb_dvr(&(0x7f0000000000), 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), r5) sendmsg$ETHTOOL_MSG_COALESCE_SET(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000005000c0001000000080007000100000008000600000100000800050002000000080013007cc4000008000d000400000005000b000400000008000e0081000000080006"], 0x74}, 0x1, 0x0, 0x0, 0x2400c000}, 0x0) ioctl$DVB_DVR_DMX_SET_BUFFER_SIZE(r4, 0x6f2d, 0x7fffffffffffffff) syz_open_dev$sg(&(0x7f00000060c0), 0x81, 0x8002) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2800, 0x0) r7 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x4000008) r8 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000000)="8ee8c9b8ee088ed8660f3801b2d6352ed9ff660f3882040f01cf0fc72d2626652e0f01ca0fc7386635002000000f22e0", 0xffffffffffffff8b}], 0x1, 0x50, 0x0, 0x0) write$binfmt_script(r8, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0xa0011, r8, 0x0) preadv(r8, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r8, r9, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f0000000280)="0f09660f38825a2e0f01ca66b8070000000f23c00f21f86635010007000f23f866b98605000066b80080000066ba000000000f30b8780e8ec80f20e06635010000000f22e0660f5b8f0038baf80c66b8d017908966efbafc0cb80800efbaf80c66b8b455dd8366efbafc0cb098ee", 0x6e}], 0x1, 0x64, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) 3.428230086s ago: executing program 9 (id=5336): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000a3b370086d04ae08581101020301090212000d000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000e80)={0x84, &(0x7f0000000440)={0x40, 0x11}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000840)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x29, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) syz_usb_control_io(r0, 0x0, &(0x7f0000000840)={0x84, 0x0, &(0x7f0000000480)={0x0, 0xa, 0x1, 0xfa}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000500)={0x20, 0x0, 0x4}, &(0x7f0000000540)={0x20, 0x0, 0x8, {0x1c0, 0x10, [0xf0f]}}, &(0x7f0000000580)={0x40, 0x7, 0x2, 0x8}, &(0x7f00000005c0)={0x40, 0x9, 0x1, 0x5}, &(0x7f0000000600)={0x40, 0xb, 0x2, "5fc0"}, &(0x7f0000000640)={0x40, 0xf, 0x2, 0x4}, &(0x7f0000000680)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x20}}, &(0x7f00000006c0)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}}, &(0x7f0000000700)={0x40, 0x19, 0x2, "fc23"}, &(0x7f0000000740)={0x40, 0x1a, 0x2, 0x2}, &(0x7f0000000780)={0x40, 0x1c, 0x1, 0x2}, &(0x7f00000007c0)={0x40, 0x1e, 0x1, 0x4}, &(0x7f0000000800)={0x40, 0x21, 0x1, 0xb}}) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000340)={0x44, &(0x7f0000000100)={0x0, 0x13, 0x7, "067b0fb541d422"}, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="64a101000000f7"], 0x0, 0x0, 0x0}) 3.412782588s ago: executing program 8 (id=5337): openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0xe6) timer_create(0x3, &(0x7f0000533fa0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0xc) unshare(0x6e000000) getgroups(0x400000000000005c, &(0x7f0000000040)) unshare(0x28000600) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x1c, 0x0, &(0x7f0000000080)) socket$netlink(0x10, 0x3, 0x0) gettid() r1 = open(&(0x7f00000002c0)='./file0\x00', 0x1491ff, 0x22) fcntl$setlease(r1, 0x400, 0x0) fcntl$setlease(r1, 0x400, 0x1) unshare(0x0) r2 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x18, 0x0) landlock_restrict_self(r2, 0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000100b7080000b2e900007b8af8ff00"], 0x0, 0xfffffffb, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000000)) bpf$TOKEN_CREATE(0x24, &(0x7f0000000280)={0x0, r0}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0300000003000040003800000500000011000000", @ANYRES32, @ANYBLOB="0300a903c82f9508dcaf8ebc56800000000000000000000000000000ab33d9e51e3e529cc5f0", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, 0x0, 0x0) 3.247621399s ago: executing program 8 (id=5338): creat(&(0x7f0000000400)='./bus\x00', 0x0) r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000600)={{0xa, 0x0, 0x8, @local}, {0xa, 0x0, 0x0, @empty}, 0x1}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000000)={{0xa, 0x4e24, 0x100, @local, 0x4}, {0xa, 0x4e23, 0x7, @empty, 0xd473}, 0x0, {[0x4, 0x7, 0x3, 0x8001, 0xe10, 0xe, 0x3]}}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x4e20, 0x0, @empty}, 0x1, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xe3]}}, 0x5c) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc01020301090212000100000000090401"], 0x0) socket$kcm(0x2d, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1bc2, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f9}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) r2 = socket$inet(0x2, 0x80001, 0x84) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0, 0x0, 0x2000c0c0}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000500)=@assoc_value, &(0x7f00000004c0)) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffff28, &(0x7f0000000500), 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001200), 0x101101, 0x0) ioctl$TCSBRKP(r5, 0x5425, 0x80000000) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x2c, &(0x7f00000000c0)={0x0, 0xd, 0x2, 'Vx'}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(0xffffffffffffffff, &(0x7f0000000000)={0x14, &(0x7f00000001c0)={0x20, 0xc, 0x8, {0x8, 0x22, "2557cba2f164"}}, 0x0}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000340)={0x2c, &(0x7f0000000200)={0x0, 0x9, 0x6d, {0x6d, 0x21, "114ef545041db452d72a1973c44e1a97a3a34cdf600a62727c7c6fa6270812dd7e1b1abe1d191bf8954ab34ac0266d99185ad0d4ba535cc5f0d9bc5cc56fc77d8b2f1aad64d8c8d0d207b8861fa6cece172fae22179dab3ee228d21d505906c0cff2a67446dd7aa183d957"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x42a}}, 0x0, &(0x7f0000000140)={0x20, 0x29, 0xf, {0xf, 0x29, 0x4, 0x1, 0x1, 0xa, "0504b9c1", "09ac9626"}}, &(0x7f0000000300)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xf2, 0x60, 0x7, 0x7, 0x6, 0x8, 0xa59c}}}, &(0x7f0000000840)={0x84, &(0x7f0000000380)={0x20, 0x8, 0x5a, "3fe039a1ad09ae24006c210fb895fc5d07341c2eec3257af5a8146db0820e789f393dedde20b24a3b676ff54203e07ff5c09980029746bf72a12fedb36b2b517a3ac9bd2422b0a3297fb4c190444f5b9f4e94cb6a4ac9d71da3f"}, &(0x7f0000000440)={0x0, 0xa, 0x1, 0xf8}, &(0x7f0000000480)={0x0, 0x8, 0x1, 0x8}, 0x0, &(0x7f0000000540)={0x20, 0x0, 0x4, {0x400, 0x20}}, &(0x7f0000000580)={0x40, 0x7, 0x2, 0x6}, &(0x7f00000005c0)={0x40, 0x9, 0x1, 0x6e}, &(0x7f0000000600)={0x40, 0xb, 0x2, "cb98"}, &(0x7f0000000640)={0x40, 0xf, 0x2, 0x3}, &(0x7f0000000680)={0x40, 0x13, 0x6, @local}, 0x0, &(0x7f0000000700)={0x40, 0x19, 0x2, "bbf2"}, &(0x7f0000000740)={0x40, 0x1a, 0x2, 0x400}, &(0x7f0000000780)={0x40, 0x1c, 0x1, 0x9}, &(0x7f00000007c0)={0x40, 0x1e, 0x1, 0x52}, &(0x7f0000000800)={0x40, 0x21, 0x1, 0x1}}) sendmsg$inet6(r4, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000001400)=ANY=[], 0x40}, 0x84) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000002540)={0x73622a85, 0x1114, 0x2}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f00000002c0)={0x1}) syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000000)) r6 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x368, 0x1b0, 0xa, 0x148, 0x1b0, 0x10, 0x2d0, 0x2a8, 0x2a8, 0x2d0, 0x2a8, 0x3, 0x0, {[{{@ip={@empty, @multicast1, 0x0, 0xffffffff, 'team_slave_0\x00', 'veth0_to_bond\x00', {}, {}, 0x0, 0x0, 0x1}, 0x0, 0x190, 0x1b0, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@recent0={{0xf8}, {0xfffffffa, 0x40e151, 0x2, 0x0, 'syz0\x00', 0xfa}}, @inet=@rpfilter={{0x28}, {0x9}}]}, @unspec=@NOTRACK={0x20}}, {{@ip={@empty, @dev={0xac, 0x14, 0x14, 0x32}, 0x0, 0x0, 'ipvlan0\x00', 'nr0\x00', {}, {}, 0x6c}, 0x0, 0xc0, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x9}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, 0x2, 0x7, [0x8, 0x2b, 0xe, 0x9, 0x40, 0x16, 0x1a, 0x25, 0x16, 0x28, 0x3a, 0x26, 0x23, 0x8022, 0x401a, 0x19], 0x0, 0x1000, 0x7}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x3c8) lgetxattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=@known='system.advise\x00', &(0x7f0000000180)=""/42, 0x2a) 2.554194062s ago: executing program 2 (id=5339): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r0, 0x0, 0xd1, &(0x7f0000000000)=0x8, 0x4) ioctl$F2FS_IOC_GARBAGE_COLLECT(r0, 0x4004f506, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket(0x1, 0x803, 0x0) unshare(0x26020400) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x81a0, 0x0) ioctl$KVM_CAP_X86_NOTIFY_VMEXIT(r1, 0x4068aea3, &(0x7f0000000300)={0xdb, 0x0, 0xffffffffffffffff}) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af83, &(0x7f0000000400)={0x1d}) 2.461181226s ago: executing program 2 (id=5340): creat(&(0x7f0000000400)='./bus\x00', 0x0) r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000600)={{0xa, 0x0, 0x8, @local}, {0xa, 0x0, 0x0, @empty}, 0x1}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000000)={{0xa, 0x4e24, 0x100, @local, 0x4}, {0xa, 0x4e23, 0x7, @empty, 0xd473}, 0x0, {[0x4, 0x7, 0x3, 0x8001, 0xe10, 0xe, 0x3]}}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x4e20, 0x0, @empty}, 0x1, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xe3]}}, 0x5c) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc01020301090212000100000000090401"], 0x0) socket$kcm(0x2d, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1bc2, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f9}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) r2 = socket$inet(0x2, 0x80001, 0x84) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0, 0x0, 0x2000c0c0}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000500)=@assoc_value, &(0x7f00000004c0)) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffff28, &(0x7f0000000500), 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001200), 0x101101, 0x0) ioctl$TCSBRKP(r5, 0x5425, 0x80000000) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x2c, &(0x7f00000000c0)={0x0, 0xd, 0x2, 'Vx'}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(0xffffffffffffffff, &(0x7f0000000000)={0x14, &(0x7f00000001c0)={0x20, 0xc, 0x8, {0x8, 0x22, "2557cba2f164"}}, 0x0}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000340)={0x2c, &(0x7f0000000200)={0x0, 0x9, 0x6d, {0x6d, 0x21, "114ef545041db452d72a1973c44e1a97a3a34cdf600a62727c7c6fa6270812dd7e1b1abe1d191bf8954ab34ac0266d99185ad0d4ba535cc5f0d9bc5cc56fc77d8b2f1aad64d8c8d0d207b8861fa6cece172fae22179dab3ee228d21d505906c0cff2a67446dd7aa183d957"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x42a}}, 0x0, &(0x7f0000000140)={0x20, 0x29, 0xf, {0xf, 0x29, 0x4, 0x1, 0x1, 0xa, "0504b9c1", "09ac9626"}}, &(0x7f0000000300)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xf2, 0x60, 0x7, 0x7, 0x6, 0x8, 0xa59c}}}, &(0x7f0000000840)={0x84, &(0x7f0000000380)={0x20, 0x8, 0x5a, "3fe039a1ad09ae24006c210fb895fc5d07341c2eec3257af5a8146db0820e789f393dedde20b24a3b676ff54203e07ff5c09980029746bf72a12fedb36b2b517a3ac9bd2422b0a3297fb4c190444f5b9f4e94cb6a4ac9d71da3f"}, &(0x7f0000000440)={0x0, 0xa, 0x1, 0xf8}, &(0x7f0000000480)={0x0, 0x8, 0x1, 0x8}, 0x0, &(0x7f0000000540)={0x20, 0x0, 0x4, {0x400, 0x20}}, &(0x7f0000000580)={0x40, 0x7, 0x2, 0x6}, &(0x7f00000005c0)={0x40, 0x9, 0x1, 0x6e}, &(0x7f0000000600)={0x40, 0xb, 0x2, "cb98"}, &(0x7f0000000640)={0x40, 0xf, 0x2, 0x3}, &(0x7f0000000680)={0x40, 0x13, 0x6, @local}, &(0x7f00000006c0)={0x40, 0x17, 0x6, @local}, &(0x7f0000000700)={0x40, 0x19, 0x2, "bbf2"}, 0x0, &(0x7f0000000780)={0x40, 0x1c, 0x1, 0x9}, &(0x7f00000007c0)={0x40, 0x1e, 0x1, 0x52}, &(0x7f0000000800)={0x40, 0x21, 0x1, 0x1}}) sendmsg$inet6(r4, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000001400)=ANY=[], 0x40}, 0x84) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000002540)={0x73622a85, 0x1114, 0x2}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f00000002c0)={0x1}) syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000000)) r6 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x368, 0x1b0, 0xa, 0x148, 0x1b0, 0x10, 0x2d0, 0x2a8, 0x2a8, 0x2d0, 0x2a8, 0x3, 0x0, {[{{@ip={@empty, @multicast1, 0x0, 0xffffffff, 'team_slave_0\x00', 'veth0_to_bond\x00', {}, {}, 0x0, 0x0, 0x1}, 0x0, 0x190, 0x1b0, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@recent0={{0xf8}, {0xfffffffa, 0x40e151, 0x2, 0x0, 'syz0\x00', 0xfa}}, @inet=@rpfilter={{0x28}, {0x9}}]}, @unspec=@NOTRACK={0x20}}, {{@ip={@empty, @dev={0xac, 0x14, 0x14, 0x32}, 0x0, 0x0, 'ipvlan0\x00', 'nr0\x00', {}, {}, 0x6c}, 0x0, 0xc0, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x9}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, 0x2, 0x7, [0x8, 0x2b, 0xe, 0x9, 0x40, 0x16, 0x1a, 0x25, 0x16, 0x28, 0x3a, 0x26, 0x23, 0x8022, 0x401a, 0x19], 0x0, 0x1000, 0x7}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x3c8) 1.996743725s ago: executing program 8 (id=5341): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) r4 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r4, 0x0, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000040)=ANY=[], 0x118) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc0}, 0x0) r6 = io_uring_setup(0x168f, &(0x7f0000000400)={0x0, 0x631d, 0x2, 0x2, 0x2d8}) io_uring_register$IORING_REGISTER_BUFFERS2(r6, 0xf, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1.072247965s ago: executing program 8 (id=5342): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x1f8}}], 0x1, 0xc850) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0xfffffffffffffffc) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r2 = accept4(r1, 0x0, 0x0, 0x800) openat$yama_ptrace_scope(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) io_setup(0x42, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000b02000/0x1000)=nil, &(0x7f000082c000/0x3000)=nil, &(0x7f0000928000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000b34000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f00000a3000/0x1000)=nil, &(0x7f000099f000/0x3000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = io_uring_setup(0x185d, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x1, 0x800000c1}) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x85812, 0xffffffffffffffff, 0x0) sendmmsg$unix(r2, 0x0, 0x0, 0x90) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2002, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) syz_open_procfs(0x0, 0x0) r4 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000100), 0x103902, 0x0) r5 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000001c40), 0x2, 0x0) write$apparmor_current(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="737461636b2026260a3a0cca7c2b08c9dff78977f306b457ca93031d371d06d2e59e863e2fe54118a4ee43068df6ba88e1b6dc3a2f2c91ae1c817d6b6014270b8bc51f73363852f4f12ee955f464599f0c485d0060937368ed58f2cbb01c83e466e9aa6f13f381f03e28414b668392b5a05aaaa54ea9f0712ed52a26631a8e02e6d239f1210726e76bda9377b2a2ef6ddf2422eec7e32e1fe6baae8373c8ac6f1714214efdcaac5e4cd4e14ec7f698a77dae48ed5c51f5f4cff8a35976206ef5fc2fa7c693273b04d6593d48668268df65b06a8a7e36ee3ebfc527241f3b0c2ba85b78d4954eb31abb24308c0000000017dc6823"], 0xf4) sendfile(r4, r4, 0x0, 0x20004) 898.241608ms ago: executing program 2 (id=5343): r0 = syz_usb_connect(0x2, 0x5e, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006b36a2207b06a1279bb00102030109024c0001000010000904e7000229feac000b2402010302057ff49bfd052406000105240002000d240f0105000000090007000806241a7f000109050602ff030000000905820208"], 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x3800, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x4, &(0x7f0000000080)={[{}]}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0xb8}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000500)="4274aa814c8f6ea8d8db43", 0xb}, {&(0x7f0000000280)="0700000000000000bccc23a2f8164fe26ad17c1668bf60cc412d60d7b02fe70f0d4c385a653d469c0888c116c5e9393ca029e477f71c7707c0e59c992ef8bb099330a50fb6057761ab0f200736ceae852a03caf381f413af6c96075ecb03b216edfcdf6142457f010d6404620000000000", 0x71}, {&(0x7f0000000600)="1a13a7837ea8ca56a91f616de628b8b1b2107d046bccc3025bbe70905237ffee5666e0e28cfda9249a7beaeaab10864089fb7c447ce7416d", 0x38}], 0x3}, 0x41) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x1, 0x2) write$sysctl(0xffffffffffffffff, &(0x7f0000000100)='0\x00', 0xff47) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000b40)={'syz0\x00', {0x27, 0x8001, 0xb, 0x3}, 0x3a, [0x8, 0x40, 0xf, 0x101, 0x5, 0x457, 0xc951, 0x9, 0x7, 0x5, 0x2, 0xf, 0xd8b681d, 0x7, 0x8001, 0x401, 0xc9c3, 0x400, 0x431a5f4b, 0x8001, 0x1000, 0x1, 0x9, 0xb1, 0xe0c8, 0x10000709, 0x10001, 0x2, 0x9, 0x4, 0x2, 0x1000, 0x80000001, 0x55, 0x9, 0x7, 0x5, 0x1, 0x6, 0xffff, 0x7fff, 0xa8b, 0x257, 0x6, 0x1, 0x6, 0x1, 0x4, 0x5, 0x1, 0x80, 0x3, 0x9, 0xff, 0x25, 0x2, 0x80000000, 0x8, 0x7, 0xff, 0x8, 0x9, 0x7, 0x51c8], [0x7, 0x6, 0x7ff, 0x2, 0x1, 0xb4, 0x4, 0x7, 0x3, 0x8, 0x4, 0x1, 0x8, 0xffff, 0x9, 0xfffffbb7, 0x5, 0x4, 0x9, 0xfffff27b, 0x7fff, 0x79, 0x6, 0x8, 0xf, 0x100, 0x4, 0x10, 0xfffffffd, 0xf9, 0xfb, 0x60000000, 0xfffffff6, 0x35e, 0x3, 0x10000, 0x9d2, 0x11, 0x7f, 0xa, 0xa7, 0xad1, 0x9, 0x4, 0x4, 0x5, 0x5, 0xfffffff8, 0x1, 0x9a31, 0x2, 0x4, 0x8, 0x0, 0x8, 0x8, 0x5b8, 0x7, 0x2, 0x5, 0x800, 0x1, 0xffff, 0x8], [0xcde, 0x75, 0x1, 0x7, 0x0, 0x2, 0x30, 0x2, 0x5, 0x200, 0xa9b, 0x40, 0x3, 0x9, 0x3, 0xce, 0x1, 0x4, 0x9, 0x7, 0x2, 0x0, 0x1, 0x2, 0xff, 0x8, 0x8, 0x6, 0xffff, 0x40, 0x9a05, 0x9, 0xd38, 0x8, 0x4040, 0x400, 0xe, 0x2600000, 0x0, 0x3, 0x80000001, 0x7fff, 0x1, 0x8b8b, 0x6, 0x200, 0x1, 0x40, 0x2, 0x1, 0x6, 0xe8d6, 0xe, 0x80, 0x0, 0x80, 0x800, 0x9, 0x3ff, 0x6, 0x0, 0x7fffffff, 0xfffffffe, 0x9], [0x6, 0x8, 0x9, 0x4, 0x1, 0x0, 0x4, 0x2, 0x5, 0x6, 0x2, 0x8, 0xffffff7f, 0xfffffffc, 0x6, 0x1, 0x6, 0xfff, 0x2, 0x58c, 0x7, 0x7, 0x400, 0x10001, 0x2, 0x9, 0x1, 0xb, 0x4, 0x5, 0x7, 0x8001, 0x1, 0x401, 0x2, 0x1, 0x2, 0x5, 0x2, 0x829, 0x7, 0x7, 0x61, 0x1, 0x3, 0x2, 0x5, 0x6, 0x5, 0x5, 0xff, 0xfffff36d, 0x9, 0x1ff, 0x0, 0x56, 0xe9, 0x5852, 0x8001, 0x1, 0x5, 0x1, 0x8000, 0x3ff]}, 0x45c) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f00000006c0)={0x1, @pix_mp={0x9, 0x200, 0x56555959, 0x8, 0xa, [{0x5, 0x3}, {0x0, 0x3}, {0x27, 0x101}, {0x1ff}, {0x1d3, 0xa}, {0x0, 0x4}, {0x1ff, 0xfffffff9}, {0x6, 0x5}], 0x7, 0x9, 0x0, 0x2}}) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMON(r2, 0x40045612, &(0x7f0000000800)=0x3) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x2, 0x0, 0x0, 0x0, 0x0, "f4ffffff"}, 0x20000000, 0x1, {0x0}}) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000340)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) write$cgroup_int(r4, &(0x7f00000000c0)=0x5, 0x12) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x40) r6 = accept4(r5, 0x0, 0x0, 0x800) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000640)={0xaa, 0x704}) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) 521.597708ms ago: executing program 1 (id=5344): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000040050bbe1a00000000000109022400010000e80b090400000103000200070000000000000001090581038936050a70"], 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000003c0)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB="202300010000002183efb930f018ab996d8aa2a590abdb0000c52a61a54607b71ea9e43d359c479c37f525cde38bf7010077366b48db5941a8249d7fb2"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x2) ioctl$HIDIOCGPHYS(r1, 0x80404812, &(0x7f00000004c0)) 205.779594ms ago: executing program 8 (id=5345): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0x4}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x18, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x9, 0xc6c3, 0xe46f, 0xe, 0x16, 0x1a, 0x8}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x24040800}, 0x40020) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) sendmsg$inet(r6, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000740)='=', 0x1}], 0x1}, 0x1) ioctl$KVM_X86_SET_MSR_FILTER(r1, 0x4188aec6, &(0x7f0000002a40)={0x1, [{0x3, 0x148, 0x40, &(0x7f0000000140)="420f0a4dda4ce16b0594a82b1ca74bb2e6eed1f4565f710a08a17a801903c11c164f818edd01443a91"}, {0x1, 0x8000, 0x3, &(0x7f0000001240)="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"}, {0x2, 0x3f8, 0x0, &(0x7f0000002240)="81f222c6f9bbf5f689ddbe6d7bb8c32e9a1f1ad0d3ac3ce09425d6c618219ab82a98a18b7e9cbc408d3fd010ea1f146a11df1ceeb196d322cb4dc4fb816dac825ed3506d6793134945ee4a3c6ca1e0a139997b6460c99671d079bbe64dac0a68c3480332411a1407cec5fe95d8f490447f129ac36c738651a663cbb389b560"}, {0x0, 0x668, 0xfff, &(0x7f00000022c0)="0df167e1afd14fe77ef1ab09560be03d148b7d0b239d1b735d4160d2676694337a1cb769e81472475b8b0e3def831f96af893fb8fb20a5429167e34eb538cf12a50eab2863fb70d8809f6a014b181f0c09d5ec4f72dab369f5ca3612de2e215c9d7cd3a7e0e511d892f33b740931ac207e27edab8cb3c11552e366085e4888669689918a540fd35b8cf4f214eae55456738f892c070b7873cca44a5018b32d9d510e2b2ccaf502bde5c0b1d4e68d4ac3169359b5c8a5e7e2663914cd6afc93b653aec6dd7a59c70ca6aa484469"}, {0x0, 0x60, 0x0, &(0x7f00000023c0)="cd254ba9582a6fb1d751f29b"}, {0x2, 0xf0, 0x2, &(0x7f0000002400)="36d80423f66f5d0a111c70bb457032032d400d7c61ccb73b9a731428da77"}, {0x6, 0x130, 0x157, &(0x7f0000002440)="cf4edede334859dd88e03a3dd4af6bd4a064a15c5be32999f2b7109bc0ca8ac652151e9f5c7e"}, {0x2, 0x0, 0xfffffffa, 0x0}, {0x2, 0x178, 0x4, &(0x7f00000024c0)="111672fccef346a0091a1b2a785dfc4be9d3a0653e3bf2e631fb7e7c034fbfba279ef9f7e539bf95889e6a143543cf"}, {0x2, 0x610, 0xe, &(0x7f0000002500)="b344dd10bdf7ffafaebafebf9f07a8020728722065bc64acba1d9e6df7dd35cc2f17e731acc62ce090a55b21734fc81ef62dbfd2946ca640e44432a8e2e8a14aa7cfab84ebabedc68a101684401585e44039a461bfc50203a17a5b163a94104a66d54ac45c92d529d1abfa7bde6a53241ca7a52366c2e5dfbab83ad1e3e256c46f2dcea53f9e193dce99bee8a19a8c488f36319657f4f7ee7050cf0080dffa2dcf1d102ae80cd84653ead613bd4815de8073f93b3e57948f55f61a8ac805eece031b"}, {0x1, 0x788, 0x0, &(0x7f0000002600)="7d7a5a167cac3792aca67e873157d8dec6b44f238f4859c085ab840ec83287cce9491098665de697ca96df2b468d77182e8338982b5e56e688d5c0be76eab6b20d901e4071c611a6c68d2814c6cc46b1f1467031e5ae6980a3ccdfb8ab3b1c28df255a869909fdb8c76b369e1214a30516be032d42f1ca45aa64dbb38fb2f4051206ec3fde8819ecfb43ebdccebfda89990c1ab01589fede3e00d5d7bce7a6f991c1c708540af076701d2fd64610bb466cdb20771335cfb299cee38788afc2159f1e4cb5aedf7c73c9a8a3392389fef570712928e9a7f3b4c17937a3e41e1f3c786cb23c8e7494d25fa3b255e325819255"}, {0x3, 0x498, 0x4, &(0x7f0000002700)="14381ba854fcb58056f899c27476429f6565ef7f7f803526e58c1aa6b0bdc02b2692a35d38810bd96213daf560b463f3537d1894acfe0fd09e4021062b217f35acbacf1d7b24e6deed870028aedb8465e17ae12cd03eeb2460b09fe7172f82631717aae7fda61b9e73d2da1620c55e1a1b22a767cdfdaf062f6b925257219f9d6d9520ea3cc3f3e40309acb6b956e3fdfdd587"}, {0x2, 0x1d8, 0x3, &(0x7f0000002800)="d44ddd782f69a34eb67798204abda40a9e2d334e79a5affcc2330d03ea47631bee877682ac43a658e72e03b2525877edba9e22f184e252aba8d8f6"}, {0x0, 0x3a8, 0x3ff, &(0x7f0000002840)="cdcdeb13336beab023581e96ab28b976d4ae9e32aa11a8eaa3189a99a42fef0a464627523f712e909c72b8126e7c7ea209f20111180c8ed34ec51c7c388f669c665311ac70d82f9282b5e3d1fa9fc360305dc47702b971fdad29f593a784c0d58fb9cafcc37ca9c0fd8169ceb9bbb947d79654c40e"}, {0x1, 0x488, 0x7, &(0x7f00000028c0)="7779134a7fecc2fc9883304201b2d3ff3c3cb48b66ed9aee9840c8dde4d6c486757391913e5e766313aaada75abb46c886e8b58de854c2a9ee50592c15e68ce7f72c1390348372c02b6a560b818897badad4e1e53dee95e681d073d668ddb6831546a3773638984b61f30e950d7f261b001b27de2720e6f5537cd39180e90f1e5726743355c602ffb428095c60a805cb8e"}, {0x1, 0x398, 0x9, &(0x7f0000002980)="53755da035b9f018db5a08930a5a5f6ee8c62b461cc9b1ab31f1f5e5a8576601978c0e0875aba896df3f235c9279a44fcd11b09e5b17f6acf00077c424b142909666700d7dc736b4aeafe254c56685cbe1f7cda6db6ef1cfe16995cc3c78cfa63b4c8c42e82bb817aa9f89a6650b7b93665038"}]}) recvmsg$unix(r5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x46}, 0x60000123) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r7 = socket(0x1d, 0x2, 0x6) getsockopt$inet_mreqn(r7, 0x6a, 0x24, 0x0, &(0x7f00000000c0)) 0s ago: executing program 8 (id=5346): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) landlock_restrict_self(r0, 0xf) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x1, 0x3}, 0x4) unshare(0x2c020400) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000080)={0x1, 0x1}, 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) pipe2(0x0, 0x800) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) landlock_restrict_self(0xffffffffffffffff, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) kernel console output (not intermixed with test programs): /sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1115.612890][ T5674] usb 2-1: Using ep0 maxpacket: 32 [ 1115.619386][ T5674] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 1115.627591][ T5674] usb 2-1: config 0 has no interface number 0 [ 1115.633945][ T5674] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1115.645555][ T5674] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1115.655417][ T5674] usb 2-1: config 0 interface 85 has no altsetting 0 [ 1115.665427][ T5674] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1115.674697][ T5674] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1115.683063][ T5674] usb 2-1: Product: syz [ 1115.687340][ T5674] usb 2-1: Manufacturer: syz [ 1115.692018][ T5674] usb 2-1: SerialNumber: syz [ 1115.698345][ T5674] usb 2-1: config 0 descriptor?? [ 1115.733700][T24930] netlink: 'syz.6.5116': attribute type 3 has an invalid length. [ 1115.879905][T24922] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1115.891275][T24922] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1115.902680][ T809] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1115.925707][ T1327] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.932226][ T1327] ieee802154 phy1 wpan1: encryption failed: -22 [ 1115.968543][ T809] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1115.984730][T24938] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1116.000114][T24938] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1116.005497][T24940] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1116.029389][T24940] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1116.045969][ T5674] appletouch 2-1:0.85: Failed to read mode from device. [ 1116.055867][ T5674] appletouch 2-1:0.85: probe with driver appletouch failed with error -5 [ 1116.081631][ T5674] usb 2-1: USB disconnect, device number 29 [ 1116.176778][T24944] FAULT_INJECTION: forcing a failure. [ 1116.176778][T24944] name failslab, interval 1, probability 0, space 0, times 0 [ 1116.190303][T24944] CPU: 0 UID: 0 PID: 24944 Comm: syz.2.5121 Tainted: G L syzkaller #0 PREEMPT(full) [ 1116.190329][T24944] Tainted: [L]=SOFTLOCKUP [ 1116.190337][T24944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1116.190348][T24944] Call Trace: [ 1116.190355][T24944] [ 1116.190363][T24944] dump_stack_lvl+0xe8/0x150 [ 1116.190387][T24944] should_fail_ex+0x40c/0x560 [ 1116.190408][T24944] should_failslab+0xa8/0x100 [ 1116.190434][T24944] ? mas_alloc_nodes+0x291/0x350 [ 1116.190457][T24944] kmem_cache_alloc_noprof+0x87/0x650 [ 1116.190482][T24944] mas_alloc_nodes+0x291/0x350 [ 1116.190504][T24944] mas_preallocate+0x2cf/0x630 [ 1116.190527][T24944] ? rcu_is_watching+0x15/0xb0 [ 1116.190545][T24944] ? __pfx_mas_preallocate+0x10/0x10 [ 1116.190571][T24944] ? anon_vma_name+0x61/0x210 [ 1116.190595][T24944] ? __mas_set_range+0x11a/0x3a0 [ 1116.190615][T24944] __split_vma+0x318/0xa50 [ 1116.190638][T24944] ? __pfx___split_vma+0x10/0x10 [ 1116.190665][T24944] ? mas_find+0xab1/0xcf0 [ 1116.190698][T24944] ? userfaultfd_unmap_prep+0x99/0x3e0 [ 1116.190724][T24944] vms_gather_munmap_vmas+0x4e3/0x1370 [ 1116.190746][T24944] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 1116.190765][T24944] ? mas_find+0xa23/0xcf0 [ 1116.190790][T24944] mmap_region+0x909/0x2340 [ 1116.190812][T24944] ? process_measurement+0x14fb/0x1c10 [ 1116.190829][T24944] ? trace_irq_enable+0x3b/0x140 [ 1116.190864][T24944] ? __pfx_mmap_region+0x10/0x10 [ 1116.190882][T24944] ? rcu_is_watching+0x15/0xb0 [ 1116.190901][T24944] ? __pfx_process_measurement+0x10/0x10 [ 1116.190923][T24944] ? tomoyo_check_open_permission+0x38e/0x470 [ 1116.190954][T24944] ? unwind_next_frame+0x8f/0x2550 [ 1116.190975][T24944] ? rcu_is_watching+0x15/0xb0 [ 1116.191016][T24944] ? arch_get_unmapped_area_topdown+0x269/0xb50 [ 1116.191046][T24944] ? mm_get_unmapped_area+0xd3/0x100 [ 1116.191068][T24944] ? shmem_get_unmapped_area+0x2cf/0x8f0 [ 1116.191091][T24944] ? cap_mmap_addr+0xaf/0x100 [ 1116.191110][T24944] ? bpf_lsm_mmap_addr+0x9/0x50 [ 1116.191129][T24944] ? shmem_mapping+0xd/0x50 [ 1116.191140][T24944] ? memfd_check_seals_mmap+0x165/0x200 [ 1116.191173][T24944] do_mmap+0xc3b/0x10c0 [ 1116.191191][T24944] ? lock_release+0x4b/0x3c0 [ 1116.191215][T24944] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1116.191244][T24944] ? __pfx_do_mmap+0x10/0x10 [ 1116.191257][T24944] ? down_write_killable+0x180/0x240 [ 1116.191276][T24944] ? __pfx_down_write_killable+0x10/0x10 [ 1116.191293][T24944] ? apparmor_mmap_file+0x2da/0x3e0 [ 1116.191331][T24944] vm_mmap_pgoff+0x272/0x4e0 [ 1116.191349][T24944] ? __fget_files+0x2a/0x420 [ 1116.191369][T24944] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1116.191390][T24944] ? lock_release+0x4b/0x3c0 [ 1116.191410][T24944] ? __fget_files+0x3a2/0x420 [ 1116.191423][T24944] ? __fget_files+0x2a/0x420 [ 1116.191437][T24944] ksys_mmap_pgoff+0x4dc/0x760 [ 1116.191465][T24944] ? rcu_is_watching+0x15/0xb0 [ 1116.191484][T24944] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1116.191502][T24944] do_syscall_64+0x174/0x580 [ 1116.191523][T24944] ? trace_irq_disable+0x3b/0x140 [ 1116.191549][T24944] ? clear_bhb_loop+0x40/0x90 [ 1116.191563][T24944] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1116.191575][T24944] RIP: 0033:0x7f005e39ce59 [ 1116.191587][T24944] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1116.191610][T24944] RSP: 002b:00007f005f21b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1116.191630][T24944] RAX: ffffffffffffffda RBX: 00007f005e615fa0 RCX: 00007f005e39ce59 [ 1116.191643][T24944] RDX: 0000000000000001 RSI: 0000000000400000 RDI: 0000200000000000 [ 1116.191654][T24944] RBP: 00007f005f21b090 R08: 0000000000000005 R09: 00000000ea369000 [ 1116.191666][T24944] R10: 0000000000010012 R11: 0000000000000246 R12: 0000000000000001 [ 1116.191676][T24944] R13: 00007f005e616038 R14: 00007f005e615fa0 R15: 00007f005e73fa48 [ 1116.191699][T24944] [ 1116.807733][T24958] warn_alloc: 1 callbacks suppressed [ 1116.807750][T24958] syz.2.5124: vmalloc error: size 9223372036854775807, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1116.829604][T24958] CPU: 0 UID: 0 PID: 24958 Comm: syz.2.5124 Tainted: G L syzkaller #0 PREEMPT(full) [ 1116.829633][T24958] Tainted: [L]=SOFTLOCKUP [ 1116.829640][T24958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1116.829653][T24958] Call Trace: [ 1116.829661][T24958] [ 1116.829669][T24958] dump_stack_lvl+0xe8/0x150 [ 1116.829693][T24958] warn_alloc+0x249/0x340 [ 1116.829722][T24958] ? __pfx_warn_alloc+0x10/0x10 [ 1116.829750][T24958] ? __mutex_trylock_common+0x15f/0x270 [ 1116.829774][T24958] __vmalloc_node_range_noprof+0x12c/0x1730 [ 1116.829797][T24958] ? rcu_is_watching+0x15/0xb0 [ 1116.829815][T24958] ? trace_contention_end+0x3d/0x140 [ 1116.829838][T24958] ? __mutex_lock+0x30d/0x1550 [ 1116.829856][T24958] ? rcu_is_watching+0x15/0xb0 [ 1116.829869][T24958] ? lock_release+0x4b/0x3c0 [ 1116.829904][T24958] ? kfree+0x1c5/0x640 [ 1116.829924][T24958] ? tomoyo_path_number_perm+0x4ba/0x5f0 [ 1116.829950][T24958] ? tomoyo_path_number_perm+0x219/0x5f0 [ 1116.829973][T24958] ? dvb_dvr_do_ioctl+0x76/0x220 [ 1116.829996][T24958] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1116.830013][T24958] ? do_vfs_ioctl+0x116f/0x1540 [ 1116.830034][T24958] ? dvb_dvr_do_ioctl+0x12b/0x220 [ 1116.830066][T24958] vmalloc_noprof+0xb2/0xe0 [ 1116.830087][T24958] ? dvb_dvr_do_ioctl+0x12b/0x220 [ 1116.830108][T24958] dvb_dvr_do_ioctl+0x12b/0x220 [ 1116.830134][T24958] dvb_usercopy+0x199/0x2e0 [ 1116.830147][T24958] ? __pfx_dvb_dvr_do_ioctl+0x10/0x10 [ 1116.830163][T24958] ? __pfx_dvb_usercopy+0x10/0x10 [ 1116.830178][T24958] ? __fget_files+0x3a2/0x420 [ 1116.830204][T24958] ? __fget_files+0x2a/0x420 [ 1116.830226][T24958] ? __pfx_dvb_dvr_ioctl+0x10/0x10 [ 1116.830253][T24958] dvb_dvr_ioctl+0x29/0x40 [ 1116.830277][T24958] __se_sys_ioctl+0xfc/0x170 [ 1116.830296][T24958] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1116.830310][T24958] do_syscall_64+0x174/0x580 [ 1116.830327][T24958] ? trace_irq_disable+0x3b/0x140 [ 1116.830359][T24958] ? clear_bhb_loop+0x40/0x90 [ 1116.830380][T24958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1116.830398][T24958] RIP: 0033:0x7f005e39ce59 [ 1116.830413][T24958] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1116.830431][T24958] RSP: 002b:00007f005f1d9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1116.830445][T24958] RAX: ffffffffffffffda RBX: 00007f005e616180 RCX: 00007f005e39ce59 [ 1116.830455][T24958] RDX: 7fffffffffffffff RSI: 0000000000006f2d RDI: 0000000000000005 [ 1116.830463][T24958] RBP: 00007f005e432d6f R08: 0000000000000000 R09: 0000000000000000 [ 1116.830471][T24958] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1116.830479][T24958] R13: 00007f005e616218 R14: 00007f005e616180 R15: 00007f005e73fa48 [ 1116.830507][T24958] [ 1116.830556][T24958] Mem-Info: [ 1117.135686][T24958] active_anon:26885 inactive_anon:0 isolated_anon:0 [ 1117.135686][T24958] active_file:20603 inactive_file:40760 isolated_file:0 [ 1117.135686][T24958] unevictable:768 dirty:368 writeback:0 [ 1117.135686][T24958] slab_reclaimable:7700 slab_unreclaimable:121689 [ 1117.135686][T24958] mapped:54345 shmem:18229 pagetables:2344 [ 1117.135686][T24958] sec_pagetables:0 bounce:0 [ 1117.135686][T24958] kernel_misc_reclaimable:0 [ 1117.135686][T24958] free:1206025 free_pcp:13792 free_cma:0 [ 1117.189083][ T5674] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 1117.295515][T24958] Node 0 active_anon:109040kB inactive_anon:0kB active_file:82412kB inactive_file:162836kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:221480kB dirty:1468kB writeback:0kB shmem:72680kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:4096kB kernel_stack:17832kB pagetables:9156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1117.367318][T24964] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1117.377168][ T5674] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1117.385637][ T5674] usb 2-1: config 0 has no interface number 0 [ 1117.393343][T24964] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1117.401193][T24958] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:124kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1117.439188][ T5674] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1117.452348][ T5674] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1117.460514][T24958] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1117.461726][ T5674] usb 2-1: Product: syz [ 1117.500261][T24958] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 1117.506947][T24958] Node 0 DMA32 free:870892kB boost:0kB min:34188kB low:42732kB high:51276kB reserved_highatomic:0KB free_highatomic:0KB active_anon:109240kB inactive_anon:0kB active_file:82412kB inactive_file:161536kB unevictable:1536kB writepending:1468kB zspages:0kB present:3129332kB managed:2552828kB mlocked:0kB bounce:0kB free_pcp:48936kB local_pcp:18104kB free_cma:0kB [ 1117.540802][ T5674] usb 2-1: Manufacturer: syz [ 1117.545827][ T5674] usb 2-1: SerialNumber: syz [ 1117.557118][ T5674] usb 2-1: config 0 descriptor?? [ 1117.558918][ T809] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -EPIPE [ 1117.589155][T24958] lowmem_reserve[]: 0 0 0 0 0 [ 1117.594157][T24958] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:672kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:12kB free_cma:0kB [ 1117.624742][T24958] lowmem_reserve[]: 0 0 0 0 0 [ 1117.629513][T24958] Node 1 Normal free:3939832kB boost:0kB min:55704kB low:69628kB high:83552kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:4284kB local_pcp:0kB free_cma:0kB [ 1117.667920][T24958] lowmem_reserve[]: 0 0 0 0 0 [ 1117.675504][T24958] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1117.688433][T24958] Node 0 DMA32: 4123*4kB (UM) 6038*8kB (UME) 4149*16kB (UM) 642*32kB (UME) 586*64kB (UME) 691*128kB (UME) 408*256kB (UME) 286*512kB (UME) 126*1024kB (UME) 6*2048kB (UME) 49*4096kB (M) = 870572kB [ 1117.708073][T24958] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1117.724408][T24958] Node 1 Normal: 3*4kB (M) 4*8kB (UM) 10*16kB (UM) 7*32kB (UM) 10*64kB (UM) 4*128kB (UM) 2*256kB (UM) 1*512kB (U) 1*1024kB (U) 4*2048kB (UM) 959*4096kB (M) = 3939884kB [ 1117.741571][T24958] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1117.751366][T24958] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 1117.760715][T24958] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1117.770718][T24958] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1117.788190][T24958] 79801 total pagecache pages [ 1117.793014][T24958] 0 pages in swap cache [ 1117.797317][T24958] Free swap = 124996kB [ 1117.801564][T24958] Total swap = 124996kB [ 1117.819806][ T5674] dvb_usb_ec168 2-1:0.1: probe with driver dvb_usb_ec168 failed with error -71 [ 1117.830592][ T5674] usb 2-1: USB disconnect, device number 30 [ 1117.845329][T24958] 2097051 pages RAM [ 1117.864227][T24958] 0 pages HighMem/MovableOnly [ 1117.869023][T24958] 427061 pages reserved [ 1117.875281][T24958] 0 pages cma reserved [ 1118.004707][T22595] Bluetooth: hci1: command 0x0406 tx timeout [ 1118.248405][ T50] Bluetooth: hci7: unexpected event 0x2f length: 509 > 260 [ 1118.788343][ T809] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001030. ret = -EPROTO [ 1118.816617][ T809] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 1118.829131][ T809] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1118.840403][ T809] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1118.842094][T24986] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1118.865656][ T809] lan78xx 9-1:1.0: probe with driver lan78xx failed with error -71 [ 1118.873211][T24986] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1118.890185][ T809] usb 9-1: USB disconnect, device number 11 [ 1119.692981][T16663] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 1119.813956][T25005] netlink: 32 bytes leftover after parsing attributes in process `syz.6.5141'. [ 1119.862439][T16663] usb 9-1: Using ep0 maxpacket: 8 [ 1119.873743][T16663] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 155, changing to 7 [ 1119.888066][T16663] usb 9-1: New USB device found, idVendor=194f, idProduct=010c, bcdDevice= 0.40 [ 1119.899678][T16663] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1119.908028][T16663] usb 9-1: Product: ᑇ [ 1119.912931][T16663] usb 9-1: Manufacturer: 氋ᶢïŸåƒ›å§°ê«æ€Šï‚šî˜¦ê¡‹é«·é‹»á«¿ìžŽé–­î¼Žáž‚弲亊튪á€ê²‡æ“˜ã´¼é©¼ç¢¯å¼´ã€ï¼±ã¹æ­µá‚šáŒ³î°›ì ¥â¼…̉隲轎穕氩â’é…튉監뙰ǂï¨È§î¡³ê¬¬à  çˆ½ã»»æ€Žâ‡‹â€…똨킵⻌䌮駩맜ì†á’šì«»ï¢¶ë§©ï¨¤æ“ˆè…œêœë‚’좊榱賟蜽ኀ䟣⃾黒⎌陨釓å¿è¾ì•¨èƒ¼áŠ±ã·®ä“¡îŽ˜â›˜ä°ë‡¬á†ç´Œî‰¦ä£¨ïœ¦è…«â‘´ëŽ¤ [ 1120.012461][T16658] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 1120.125350][T25022] gre0: entered promiscuous mode [ 1120.132413][T25022] gre0: entered allmulticast mode [ 1120.166808][T16658] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1120.178049][T16658] usb 3-1: config 0 has no interface number 0 [ 1120.194238][T16658] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1120.202788][ T5709] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 1120.211028][T16658] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1120.223872][T16658] usb 3-1: Product: syz [ 1120.228104][T16658] usb 3-1: Manufacturer: syz [ 1120.238385][T16658] usb 3-1: SerialNumber: syz [ 1120.269896][T16658] usb 3-1: config 0 descriptor?? [ 1120.388139][T16663] usb 9-1: Audio class v2/v3 interfaces need an interface association [ 1120.396471][ T5709] usb 10-1: Using ep0 maxpacket: 16 [ 1120.421512][ T5709] usb 10-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1120.441062][ T5709] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1120.464518][ T5709] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1120.477124][T16663] snd-usb-audio 9-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1120.486641][ T809] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 1120.508155][ T5709] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1120.528255][ T5709] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1120.537237][T16663] usb 9-1: USB disconnect, device number 12 [ 1120.548651][T16658] dvb_usb_ec168 3-1:0.1: probe with driver dvb_usb_ec168 failed with error -71 [ 1120.556968][ T5709] usb 10-1: Product: syz [ 1120.569080][ T5709] usb 10-1: Manufacturer: syz [ 1120.577320][ T5709] usb 10-1: SerialNumber: syz [ 1120.593136][T16658] usb 3-1: USB disconnect, device number 89 [ 1120.600364][ T5626] udevd[5626]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1120.625109][ T5709] usb 10-1: 0:2 : does not exist [ 1120.653868][ T809] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1120.688347][ T809] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 102, changing to 10 [ 1120.709775][ T809] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 51036, setting to 1024 [ 1120.733473][ T809] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1120.754404][ T809] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1120.763782][ T809] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1120.778803][ T809] usb 2-1: config 0 descriptor?? [ 1120.791363][T25025] raw-gadget.6 gadget.1: fail, usb_ep_enable returned -22 [ 1121.201615][T25025] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1121.236882][ T809] plantronics 0003:047F:FFFF.0077: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1121.292367][T16658] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 1121.452383][T16658] usb 9-1: Using ep0 maxpacket: 16 [ 1121.459338][T16658] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1121.469713][T16658] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1121.480849][T16658] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1121.490579][T16658] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1121.501177][T16658] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1121.515674][T16658] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1121.525078][T16658] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1121.533414][T16658] usb 9-1: Manufacturer: syz [ 1121.540432][T16658] usb 9-1: config 0 descriptor?? [ 1121.637856][ T5709] usb 10-1: 1:0: failed to get current value for ch 0 (-22) [ 1121.691428][ T5709] usb 10-1: USB disconnect, device number 15 [ 1121.713926][ T5635] udevd[5635]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1121.824059][T16658] rc_core: IR keymap rc-hauppauge not found [ 1121.830120][T16658] Registered IR keymap rc-empty [ 1121.835389][T16658] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1121.862488][T16658] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1121.884986][T16658] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0 [ 1121.908787][T16658] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0/input272 [ 1121.928754][T16658] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1121.962441][T16658] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1121.994166][T16658] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1122.015926][T16658] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1122.043928][T16658] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1122.072458][T16658] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1122.093079][T16658] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1122.113200][T16658] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1122.133023][T16658] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1122.173398][T16658] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1122.206132][T16658] mceusb 9-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1122.215967][T16658] mceusb 9-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1122.259867][T25056] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1122.292101][T16663] usb 9-1: USB disconnect, device number 13 [ 1122.305111][T25056] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1122.596512][T25062] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1122.606135][T25062] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1122.622589][ T5709] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 1122.683791][T16658] usb 2-1: reset high-speed USB device number 31 using dummy_hcd [ 1122.803776][ T5709] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 1122.814751][ T5709] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1023 [ 1122.827100][ T5709] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1122.833732][T16658] usb 2-1: device descriptor read/64, error -32 [ 1122.845413][ T5709] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1122.859893][ T5709] usb 3-1: Product: 辩떇将䨶⭨ꈼíŸé±¦í‰‰ä±¶ïœ–é¸ã­žáš”î¡ã²®ê®²åŠ¾ë‹¢â·‰ì‘®î±™ê¿Šæ®¼ë‘¸ã¨·é´™í“·â…暋㥨ﶙƵ㢭题暪„೦놪⻴î¤Ü£ï³¼ä˜³ãž½æ°­ç½¬â©£î“µæ©µåµ–ⱆá篶ï—뭰쭷㱸뢙੅슆稹ᑆ뭗諭餻檹樑걟죚ê–挲ëžì½”₠Ხ觱鸃ᣭ둧惘π䵦漫ﱯ䛇ｯá‘㙲嬾苈⢥æŸäª¸ç¨¹à¿‡æ¬ªëž¾ë„… [ 1122.907243][ T5709] usb 3-1: Manufacturer: à ’ [ 1122.911918][ T5709] usb 3-1: SerialNumber: 褽樱ᅣ痡믴鿺雎솕놳境Ḅ풹試鱈ëŠì¶´â˜·î±¦ê‹¢ê™šå¢Žê—Žâ†˜è™¿ä¹ë»å¯¢à½“솂î¤å›§Íµì°Šâ™¸á—ƒæš‡é‡†ä©•æŠ—峆숖帥䒩줂ᓵ鵚ã•ë¬Žå·¾íž®äŸ“á„è£ç¹™íŠŒê˜¥è—Šî¡¶Å€å²¹í®ä¥¯ïžçŸ±à°‰á”˜ë¾¶æ »ê…²ä¿¨æ›˜ã®¿ [ 1123.082356][T16658] usb 2-1: reset high-speed USB device number 31 using dummy_hcd [ 1123.223036][T16658] usb 2-1: device descriptor read/64, error -32 [ 1123.243379][T25082] syzkaller0: entered promiscuous mode [ 1123.253068][T25082] syzkaller0: entered allmulticast mode [ 1123.473067][T16658] usb 2-1: reset high-speed USB device number 31 using dummy_hcd [ 1123.500229][T16663] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 1123.515327][T16658] usb 2-1: device descriptor read/8, error -32 [ 1123.673132][T16663] usb 9-1: Using ep0 maxpacket: 8 [ 1123.694540][T16663] usb 9-1: config 0 has an invalid interface number: 143 but max is 0 [ 1123.739321][T16663] usb 9-1: config 0 has no interface number 0 [ 1123.787173][T16663] usb 9-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 1123.861414][T16663] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1123.921837][T16663] usb 9-1: config 0 descriptor?? [ 1124.054401][T16663] viperboard 9-1:0.143: version 0.00 found at bus 009 address 014 [ 1124.106104][T16663] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 1124.146222][T16663] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 1124.413421][ T5674] usb 2-1: USB disconnect, device number 31 [ 1124.506607][T16664] usb 9-1: USB disconnect, device number 14 [ 1124.905007][T25099] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5165'. [ 1125.022542][T25158] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1125.040894][T25158] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1125.182361][T16658] usb 10-1: new full-speed USB device number 16 using dummy_hcd [ 1125.226847][T25164] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1125.240388][T25164] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1125.344312][T16658] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1125.354627][T16658] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1125.365159][T16658] usb 10-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1125.375289][T16658] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1125.386840][T16658] usb 10-1: config 0 descriptor?? [ 1125.400860][T16658] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1125.407740][T16658] dvb-usb: bulk message failed: -22 (3/0) [ 1125.411586][ T5709] cdc_ncm 3-1:1.0: bind() failure [ 1125.420955][T16658] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1125.437950][T16658] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1125.449443][ T5709] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 1125.456578][ T5709] cdc_ncm 3-1:1.1: bind() failure [ 1125.459378][T16658] usb 10-1: media controller created [ 1125.469115][ T5709] usb 3-1: USB disconnect, device number 90 [ 1125.476597][T16658] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1125.483737][ T809] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 1125.508116][T16658] dvb-usb: bulk message failed: -22 (6/0) [ 1125.530105][T16658] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1125.549782][T16658] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.9/usb10/10-1/input/input273 [ 1125.565389][T16658] dvb-usb: schedule remote query interval to 150 msecs. [ 1125.573049][T16658] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1125.612099][T25099] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1125.631272][T25099] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1125.646488][ T809] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1125.655852][T25099] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1125.661520][ T809] usb 2-1: config 0 has no interface number 0 [ 1125.673658][ T809] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1125.683557][ T809] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1125.683864][T25099] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1125.691615][ T809] usb 2-1: Product: syz [ 1125.706093][ T809] usb 2-1: Manufacturer: syz [ 1125.711007][ T809] usb 2-1: SerialNumber: syz [ 1125.723357][ T809] usb 2-1: config 0 descriptor?? [ 1125.732582][T16658] dvb-usb: bulk message failed: -22 (1/0) [ 1125.738554][T16658] dvb-usb: error while querying for an remote control event. [ 1125.750241][T16658] usb 10-1: USB disconnect, device number 16 [ 1125.777272][T16658] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1125.912681][ T5709] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 1125.963566][ T809] dvb_usb_ec168 2-1:0.1: probe with driver dvb_usb_ec168 failed with error -71 [ 1125.983683][ T809] usb 2-1: USB disconnect, device number 32 [ 1126.063965][ T5709] usb 3-1: Using ep0 maxpacket: 32 [ 1126.080561][ T5709] usb 3-1: config 246 has an invalid interface number: 166 but max is 0 [ 1126.109841][ T5709] usb 3-1: config 246 has an invalid descriptor of length 0, skipping remainder of the config [ 1126.109864][ T5709] usb 3-1: config 246 has no interface number 0 [ 1126.109894][ T5709] usb 3-1: config 246 interface 166 altsetting 118 endpoint 0xB has invalid wMaxPacketSize 0 [ 1126.109909][ T5709] usb 3-1: config 246 interface 166 altsetting 118 bulk endpoint 0xB has invalid maxpacket 0 [ 1126.109924][ T5709] usb 3-1: config 246 interface 166 altsetting 118 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1126.109947][ T5709] usb 3-1: config 246 interface 166 has no altsetting 0 [ 1126.113843][ T5709] usb 3-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 9.63 [ 1126.113864][ T5709] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1126.113879][ T5709] usb 3-1: Product: syz [ 1126.113890][ T5709] usb 3-1: Manufacturer: syz [ 1126.113918][ T5709] usb 3-1: SerialNumber: syz [ 1126.850776][T25193] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1126.851113][T25193] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1126.854635][ T5709] usb 3-1: Limiting number of CPorts to U8_MAX [ 1126.854995][ T5709] usb 3-1: Not enough endpoints found in device, aborting! [ 1127.022086][ T50] Bluetooth: hci8: unexpected event 0x2f length: 509 > 260 [ 1127.213823][ T5709] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 1127.392370][ T5709] usb 10-1: Using ep0 maxpacket: 8 [ 1127.404668][ T5709] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 1127.426058][ T5709] usb 10-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 1127.440610][ T5709] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1127.458315][ T5709] usb 10-1: Product: syz [ 1127.466423][ T5709] usb 10-1: Manufacturer: syz [ 1127.475387][ T5709] usb 10-1: SerialNumber: syz [ 1127.492007][ T5709] usb 10-1: config 0 descriptor?? [ 1127.506146][ T5709] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 1128.046042][T25306] syz.6.5185: vmalloc error: size 9223372036854775807, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1128.094813][T25306] CPU: 0 UID: 0 PID: 25306 Comm: syz.6.5185 Tainted: G L syzkaller #0 PREEMPT(full) [ 1128.094846][T25306] Tainted: [L]=SOFTLOCKUP [ 1128.094854][T25306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1128.094866][T25306] Call Trace: [ 1128.094874][T25306] [ 1128.094882][T25306] dump_stack_lvl+0xe8/0x150 [ 1128.094935][T25306] warn_alloc+0x249/0x340 [ 1128.094966][T25306] ? __pfx_warn_alloc+0x10/0x10 [ 1128.094996][T25306] ? __mutex_trylock_common+0x15f/0x270 [ 1128.095019][T25306] __vmalloc_node_range_noprof+0x12c/0x1730 [ 1128.095044][T25306] ? rcu_is_watching+0x15/0xb0 [ 1128.095066][T25306] ? trace_contention_end+0x3d/0x140 [ 1128.095087][T25306] ? __mutex_lock+0x30d/0x1550 [ 1128.095112][T25306] ? rcu_is_watching+0x15/0xb0 [ 1128.095130][T25306] ? lock_release+0x4b/0x3c0 [ 1128.095155][T25306] ? kfree+0x1c5/0x640 [ 1128.095176][T25306] ? tomoyo_path_number_perm+0x4ba/0x5f0 [ 1128.095204][T25306] ? tomoyo_path_number_perm+0x219/0x5f0 [ 1128.095230][T25306] ? dvb_dvr_do_ioctl+0x76/0x220 [ 1128.095254][T25306] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1128.095278][T25306] ? do_vfs_ioctl+0x116f/0x1540 [ 1128.095307][T25306] ? dvb_dvr_do_ioctl+0x12b/0x220 [ 1128.095329][T25306] vmalloc_noprof+0xb2/0xe0 [ 1128.095352][T25306] ? dvb_dvr_do_ioctl+0x12b/0x220 [ 1128.095376][T25306] dvb_dvr_do_ioctl+0x12b/0x220 [ 1128.095401][T25306] dvb_usercopy+0x199/0x2e0 [ 1128.095419][T25306] ? __pfx_dvb_dvr_do_ioctl+0x10/0x10 [ 1128.095441][T25306] ? __pfx_dvb_usercopy+0x10/0x10 [ 1128.095464][T25306] ? __fget_files+0x3a2/0x420 [ 1128.095484][T25306] ? __fget_files+0x2a/0x420 [ 1128.095505][T25306] ? __pfx_dvb_dvr_ioctl+0x10/0x10 [ 1128.095527][T25306] dvb_dvr_ioctl+0x29/0x40 [ 1128.095548][T25306] __se_sys_ioctl+0xfc/0x170 [ 1128.095572][T25306] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1128.095592][T25306] do_syscall_64+0x174/0x580 [ 1128.095614][T25306] ? trace_irq_disable+0x3b/0x140 [ 1128.095639][T25306] ? clear_bhb_loop+0x40/0x90 [ 1128.095658][T25306] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1128.095676][T25306] RIP: 0033:0x7f319739ce59 [ 1128.095692][T25306] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1128.095709][T25306] RSP: 002b:00007f319819e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1128.095729][T25306] RAX: ffffffffffffffda RBX: 00007f3197616360 RCX: 00007f319739ce59 [ 1128.095751][T25306] RDX: 7fffffffffffffff RSI: 0000000000006f2d RDI: 0000000000000005 [ 1128.095763][T25306] RBP: 00007f3197432d6f R08: 0000000000000000 R09: 0000000000000000 [ 1128.095775][T25306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1128.095787][T25306] R13: 00007f31976163f8 R14: 00007f3197616360 R15: 00007f319773fa48 [ 1128.095807][T25306] [ 1128.095857][T25306] Mem-Info: [ 1128.411089][T25306] active_anon:27512 inactive_anon:0 isolated_anon:0 [ 1128.411089][T25306] active_file:20683 inactive_file:40421 isolated_file:0 [ 1128.411089][T25306] unevictable:768 dirty:621 writeback:0 [ 1128.411089][T25306] slab_reclaimable:7776 slab_unreclaimable:130337 [ 1128.411089][T25306] mapped:58505 shmem:18229 pagetables:2357 [ 1128.411089][T25306] sec_pagetables:0 bounce:0 [ 1128.411089][T25306] kernel_misc_reclaimable:0 [ 1128.411089][T25306] free:1197952 free_pcp:10487 free_cma:0 [ 1128.491653][T25306] Node 0 active_anon:110148kB inactive_anon:0kB active_file:82732kB inactive_file:161480kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:234020kB dirty:2480kB writeback:0kB shmem:71380kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:4096kB kernel_stack:18164kB pagetables:9304kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1128.547468][T25306] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:124kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1128.606371][T25306] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1128.638675][T25306] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 1128.646466][T25306] Node 0 DMA32 free:835808kB boost:0kB min:34188kB low:42732kB high:51276kB reserved_highatomic:0KB free_highatomic:0KB active_anon:110548kB inactive_anon:0kB active_file:82732kB inactive_file:161480kB unevictable:1536kB writepending:2480kB zspages:0kB present:3129332kB managed:2552828kB mlocked:0kB bounce:0kB free_pcp:36580kB local_pcp:18416kB free_cma:0kB [ 1128.715525][T25306] lowmem_reserve[]: 0 0 0 0 0 [ 1128.721561][T25306] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:672kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:12kB free_cma:0kB [ 1128.782049][T16658] usb 3-1: USB disconnect, device number 91 [ 1128.841174][T25306] lowmem_reserve[]: 0 0 0 0 0 [ 1128.875311][T25306] Node 1 Normal free:3940640kB boost:0kB min:55704kB low:69628kB high:83552kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:3528kB local_pcp:0kB free_cma:0kB [ 1128.945259][T25306] lowmem_reserve[]: 0 0 0 0 0 [ 1128.955771][T25306] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1128.982951][T25306] Node 0 DMA32: 1785*4kB (UM) 5471*8kB (UME) 4099*16kB (UME) 330*32kB (UME) 443*64kB (UME) 704*128kB (UME) 416*256kB (UME) 299*512kB (UME) 127*1024kB (UME) 3*2048kB (UME) 48*4096kB (M) = 837900kB [ 1129.029270][T25306] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1129.053456][T25306] Node 1 Normal: 3*4kB (M) 4*8kB (UM) 9*16kB (UM) 7*32kB (UM) 10*64kB (UM) 4*128kB (UM) 2*256kB (UM) 1*512kB (U) 2*1024kB (UM) 4*2048kB (UM) 959*4096kB (M) = 3940892kB [ 1129.140992][T25306] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1129.153064][T25306] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 1129.162671][T25306] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1129.172657][T25306] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1129.187426][T25306] 79437 total pagecache pages [ 1129.198818][T25306] 0 pages in swap cache [ 1129.204306][T25306] Free swap = 124996kB [ 1129.219468][T25306] Total swap = 124996kB [ 1129.232786][T25306] 2097051 pages RAM [ 1129.249795][T25306] 0 pages HighMem/MovableOnly [ 1129.254862][T25306] 427061 pages reserved [ 1129.259050][T25306] 0 pages cma reserved [ 1129.281664][ T30] kauditd_printk_skb: 27 callbacks suppressed [ 1129.281680][ T30] audit: type=1326 audit(1781639844.537:3409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25323 comm="syz.8.5187" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f005b79ce59 code=0x7ffc0000 [ 1129.316851][ T30] audit: type=1326 audit(1781639844.537:3410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25323 comm="syz.8.5187" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f005b79ce59 code=0x7ffc0000 [ 1129.319875][T25324] FAULT_INJECTION: forcing a failure. [ 1129.319875][T25324] name failslab, interval 1, probability 0, space 0, times 0 [ 1129.342049][ T30] audit: type=1326 audit(1781639844.577:3411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25323 comm="syz.8.5187" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f005b75d68e code=0x7ffc0000 [ 1129.381390][ T30] audit: type=1326 audit(1781639844.577:3412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25323 comm="syz.8.5187" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f005b75d68e code=0x7ffc0000 [ 1129.412409][ T30] audit: type=1326 audit(1781639844.577:3413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25323 comm="syz.8.5187" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7f005b79ce59 code=0x7ffc0000 [ 1129.438147][T25324] CPU: 1 UID: 0 PID: 25324 Comm: syz.8.5187 Tainted: G L syzkaller #0 PREEMPT(full) [ 1129.438170][T25324] Tainted: [L]=SOFTLOCKUP [ 1129.438175][T25324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1129.438183][T25324] Call Trace: [ 1129.438188][T25324] [ 1129.438193][T25324] dump_stack_lvl+0xe8/0x150 [ 1129.438211][T25324] should_fail_ex+0x40c/0x560 [ 1129.438227][T25324] should_failslab+0xa8/0x100 [ 1129.438245][T25324] ? ptlock_alloc+0x20/0x70 [ 1129.438260][T25324] kmem_cache_alloc_noprof+0x87/0x650 [ 1129.438278][T25324] ptlock_alloc+0x20/0x70 [ 1129.438294][T25324] pte_alloc_one+0x7a/0x370 [ 1129.438310][T25324] __pte_alloc+0x25/0x1a0 [ 1129.438327][T25324] ? alloc_new_pud+0x185/0x300 [ 1129.438338][T25324] move_page_tables+0x18ad/0x1c80 [ 1129.438354][T25324] ? __pfx_copy_vma+0x10/0x10 [ 1129.438366][T25324] ? move_page_tables+0x5cf/0x1c80 [ 1129.438379][T25324] ? do_vmi_align_munmap+0x3b7/0x4b0 [ 1129.438391][T25324] ? __pfx_move_page_tables+0x10/0x10 [ 1129.438405][T25324] ? percpu_counter_add_batch+0xec/0x1d0 [ 1129.438445][T25324] move_vma+0x99e/0x18a0 [ 1129.438462][T25324] ? arch_get_unmapped_area_topdown+0x269/0xb50 [ 1129.438477][T25324] ? __pfx_move_vma+0x10/0x10 [ 1129.438490][T25324] ? __pfx_arch_get_unmapped_area_topdown+0x10/0x10 [ 1129.438503][T25324] ? mtree_load+0x12a/0x780 [ 1129.438523][T25324] ? cap_mmap_addr+0xaf/0x100 [ 1129.438541][T25324] ? bpf_lsm_mmap_addr+0x9/0x50 [ 1129.438562][T25324] mremap_to+0x7e9/0x8c0 [ 1129.438574][T25324] ? mtree_load+0x12a/0x780 [ 1129.438590][T25324] ? __pfx_mremap_to+0x10/0x10 [ 1129.438601][T25324] ? may_expand_vm+0x24d/0x390 [ 1129.438633][T25324] ? check_prep_vma+0x9aa/0xc00 [ 1129.438651][T25324] ? kmem_cache_free+0x182/0x650 [ 1129.438676][T25324] __se_sys_mremap+0xe77/0x11d0 [ 1129.438707][T25324] ? __pfx___se_sys_mremap+0x10/0x10 [ 1129.438735][T25324] ? rcu_is_watching+0x15/0xb0 [ 1129.438753][T25324] ? trace_irq_enable+0x3b/0x140 [ 1129.438776][T25324] ? irqentry_exit+0x218/0x8f0 [ 1129.438803][T25324] ? trace_irq_disable+0x3b/0x140 [ 1129.438821][T25324] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1129.438836][T25324] ? __secure_computing+0xe7/0x2b0 [ 1129.438855][T25324] ? __x64_sys_mremap+0x20/0xc0 [ 1129.438866][T25324] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1129.438879][T25324] do_syscall_64+0x174/0x580 [ 1129.438895][T25324] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1129.438907][T25324] ? clear_bhb_loop+0x40/0x90 [ 1129.438921][T25324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1129.438933][T25324] RIP: 0033:0x7f005b79ce59 [ 1129.438944][T25324] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1129.438955][T25324] RSP: 002b:00007f005c685028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 1129.438969][T25324] RAX: ffffffffffffffda RBX: 00007f005ba15fa0 RCX: 00007f005b79ce59 [ 1129.438978][T25324] RDX: 0000000000013000 RSI: 0000000000001000 RDI: 00002000001a6000 [ 1129.438986][T25324] RBP: 00007f005c685090 R08: 00002000004e6000 R09: 0000000000000000 [ 1129.438995][T25324] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 1129.439003][T25324] R13: 00007f005ba16038 R14: 00007f005ba15fa0 R15: 00007f005bb3fa48 [ 1129.439017][T25324] [ 1129.439265][ T30] audit: type=1326 audit(1781639844.697:3414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25323 comm="syz.8.5187" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f005b75d68e code=0x7ffc0000 [ 1129.822585][ T30] audit: type=1326 audit(1781639844.697:3415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25323 comm="syz.8.5187" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f005b75d68e code=0x7ffc0000 [ 1129.953139][ T30] audit: type=1326 audit(1781639844.697:3416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25323 comm="syz.8.5187" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f005b75d68e code=0x7ffc0000 [ 1129.977940][ T30] audit: type=1326 audit(1781639844.697:3417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25323 comm="syz.8.5187" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f005b79ce59 code=0x7ffc0000 [ 1130.021786][ T30] audit: type=1326 audit(1781639844.697:3418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25323 comm="syz.8.5187" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f005b79ce59 code=0x7ffc0000 [ 1130.128149][ T50] Bluetooth: hci6: unexpected event 0x2f length: 509 > 260 [ 1130.302859][T16663] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 1130.382422][ T29] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 1130.462429][T16663] usb 3-1: Using ep0 maxpacket: 16 [ 1130.473443][T16663] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1130.482886][T16663] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1130.493969][T16663] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1130.505641][T16663] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1130.515780][T16663] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1130.524222][T16663] usb 3-1: Product: syz [ 1130.528672][T16663] usb 3-1: Manufacturer: syz [ 1130.533698][ T29] usb 2-1: Using ep0 maxpacket: 16 [ 1130.539185][T16663] usb 3-1: SerialNumber: syz [ 1130.546040][ T29] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1130.558569][ T29] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1130.574718][T16663] usb 3-1: 0:2 : does not exist [ 1130.580131][ T29] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1130.590494][ T29] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1130.602062][ T29] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1130.616777][ T29] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1130.626392][ T29] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1130.634792][ T29] usb 2-1: Manufacturer: syz [ 1130.643293][ T29] usb 2-1: config 0 descriptor?? [ 1130.912453][ T29] rc_core: IR keymap rc-hauppauge not found [ 1130.922187][ T29] Registered IR keymap rc-empty [ 1130.929693][ T29] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1130.952963][ T29] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1130.973223][ T29] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 1130.999677][ T29] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input274 [ 1131.025444][ T5709] gspca_zc3xx: reg_w_i err -71 [ 1131.036128][ T29] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1131.046449][T25369] kAFS: unable to lookup cell 'ÿ' [ 1131.062511][ T5709] gspca_zc3xx 10-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 1131.081793][T16663] usb 3-1: 1:0: cannot get min/max values for control 4 (id 1) [ 1131.092475][ T29] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1131.099910][ T5709] usb 10-1: USB disconnect, device number 17 [ 1131.132381][ T29] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1131.162974][ T29] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1131.184963][T16663] usb 3-1: USB disconnect, device number 92 [ 1131.193236][ T29] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1131.213699][ T5626] udevd[5626]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1131.239795][ T29] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1131.262573][ T29] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1131.264924][T25392] FAULT_INJECTION: forcing a failure. [ 1131.264924][T25392] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1131.287431][T25392] CPU: 0 UID: 0 PID: 25392 Comm: syz.8.5196 Tainted: G L syzkaller #0 PREEMPT(full) [ 1131.287458][T25392] Tainted: [L]=SOFTLOCKUP [ 1131.287465][T25392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1131.287476][T25392] Call Trace: [ 1131.287482][T25392] [ 1131.287489][T25392] dump_stack_lvl+0xe8/0x150 [ 1131.287511][T25392] should_fail_ex+0x40c/0x560 [ 1131.287530][T25392] _copy_to_user+0x31/0xb0 [ 1131.287559][T25392] simple_read_from_buffer+0xe1/0x170 [ 1131.287580][T25392] proc_fail_nth_read+0x1bb/0x230 [ 1131.287604][T25392] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1131.287627][T25392] ? rw_verify_area+0x24a/0x4c0 [ 1131.287647][T25392] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1131.287667][T25392] vfs_read+0x213/0xa80 [ 1131.287689][T25392] ? __pfx_vfs_read+0x10/0x10 [ 1131.287709][T25392] ? do_sys_openat2+0x14e/0x200 [ 1131.287726][T25392] ? kmem_cache_free+0x182/0x650 [ 1131.287754][T25392] ksys_read+0x150/0x270 [ 1131.287774][T25392] ? __pfx_ksys_read+0x10/0x10 [ 1131.287797][T25392] ? rcu_is_watching+0x15/0xb0 [ 1131.287815][T25392] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1131.287833][T25392] do_syscall_64+0x174/0x580 [ 1131.287855][T25392] ? trace_irq_disable+0x3b/0x140 [ 1131.287880][T25392] ? clear_bhb_loop+0x40/0x90 [ 1131.287899][T25392] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1131.287917][T25392] RIP: 0033:0x7f005b75d68e [ 1131.287933][T25392] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1131.287948][T25392] RSP: 002b:00007f005c684fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1131.287974][T25392] RAX: ffffffffffffffda RBX: 00007f005c6856c0 RCX: 00007f005b75d68e [ 1131.287988][T25392] RDX: 000000000000000f RSI: 00007f005c6850a0 RDI: 0000000000000005 [ 1131.287999][T25392] RBP: 00007f005c685090 R08: 0000000000000000 R09: 0000000000000000 [ 1131.288011][T25392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1131.288022][T25392] R13: 00007f005ba16038 R14: 00007f005ba15fa0 R15: 00007f005bb3fa48 [ 1131.288042][T25392] [ 1131.498978][ T29] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1131.532729][ T29] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1131.562392][ T29] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1131.584190][ T29] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1131.593471][ T29] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1131.612025][ T29] usb 2-1: USB disconnect, device number 33 [ 1131.749521][T25416] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1131.770785][T25416] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1131.782576][ T5674] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 1131.948767][T25423] bond1: entered promiscuous mode [ 1131.953241][ T5674] usb 9-1: Using ep0 maxpacket: 32 [ 1131.960257][T25423] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1131.969815][ T5674] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1131.986357][ T5674] usb 9-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice= 0.40 [ 1131.997297][ T5674] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1132.005932][ T5674] usb 9-1: Product: syz [ 1132.010175][ T5674] usb 9-1: Manufacturer: syz [ 1132.015471][ T5674] usb 9-1: SerialNumber: syz [ 1132.247068][ T5674] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 1132.298413][ T5674] usb 9-1: USB disconnect, device number 15 [ 1132.400891][T25498] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1132.410943][T25498] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1132.796827][ T50] Bluetooth: hci7: unexpected event 0x2f length: 509 > 260 [ 1132.996129][T25531] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1133.013751][T25531] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1133.026969][T25531] fuse: Bad value for 'group_id' [ 1133.031980][T25531] fuse: Bad value for 'group_id' [ 1133.045190][T25525] netlink: 32 bytes leftover after parsing attributes in process `syz.8.5206'. [ 1133.095033][T25535] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1133.114411][T25535] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1133.349071][T25553] bond27: entered promiscuous mode [ 1133.354639][T25553] 8021q: adding VLAN 0 to HW filter on device bond27 [ 1133.532703][ T5674] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 1133.685823][ T5674] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 1133.695177][ T5674] usb 9-1: config 0 has no interface number 0 [ 1133.703449][ T5674] usb 9-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1133.716001][ T5674] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1133.724736][ T5674] usb 9-1: Product: syz [ 1133.730928][ T5674] usb 9-1: Manufacturer: syz [ 1133.736105][ T5674] usb 9-1: SerialNumber: syz [ 1133.744588][ T5674] usb 9-1: config 0 descriptor?? [ 1133.988671][T25600] FAULT_INJECTION: forcing a failure. [ 1133.988671][T25600] name failslab, interval 1, probability 0, space 0, times 0 [ 1134.010711][T25600] CPU: 1 UID: 0 PID: 25600 Comm: syz.1.5214 Tainted: G L syzkaller #0 PREEMPT(full) [ 1134.010740][T25600] Tainted: [L]=SOFTLOCKUP [ 1134.010747][T25600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1134.010758][T25600] Call Trace: [ 1134.010765][T25600] [ 1134.010773][T25600] dump_stack_lvl+0xe8/0x150 [ 1134.010796][T25600] should_fail_ex+0x40c/0x560 [ 1134.010822][T25600] should_failslab+0xa8/0x100 [ 1134.010847][T25600] ? __kvm_mmu_topup_memory_cache+0x1b2/0x600 [ 1134.010869][T25600] kmem_cache_alloc_noprof+0x87/0x650 [ 1134.010916][T25600] ? __kvm_mmu_topup_memory_cache+0x1b2/0x600 [ 1134.010937][T25600] ? kmem_cache_alloc_noprof+0x156/0x650 [ 1134.010960][T25600] __kvm_mmu_topup_memory_cache+0x1b2/0x600 [ 1134.010985][T25600] mmu_topup_memory_caches+0x21/0x170 [ 1134.011007][T25600] kvm_mmu_load+0x9d/0x2380 [ 1134.011028][T25600] ? kvm_msr_allowed+0x9a/0x490 [ 1134.011051][T25600] ? kvm_msr_allowed+0x9a/0x490 [ 1134.011074][T25600] ? kvm_msr_allowed+0x9a/0x490 [ 1134.011097][T25600] ? kvm_msr_allowed+0x9a/0x490 [ 1134.011119][T25600] ? kvm_apic_has_interrupt+0x740/0x770 [ 1134.011148][T25600] vcpu_run+0x4dcc/0x7950 [ 1134.011201][T25600] ? __pfx_vcpu_run+0x10/0x10 [ 1134.011232][T25600] ? kvm_arch_vcpu_ioctl_run+0x2fa/0x2070 [ 1134.011257][T25600] ? rcu_is_watching+0x15/0xb0 [ 1134.011276][T25600] ? lock_acquire+0x5f/0x350 [ 1134.011301][T25600] ? fpu_swap_kvm_fpstate+0xcb/0x510 [ 1134.011324][T25600] ? fpu_swap_kvm_fpstate+0xcb/0x510 [ 1134.011349][T25600] kvm_arch_vcpu_ioctl_run+0x1193/0x2070 [ 1134.011381][T25600] ? kvm_arch_vcpu_ioctl_run+0x2fa/0x2070 [ 1134.011407][T25600] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 1134.011434][T25600] ? rcu_is_watching+0x15/0xb0 [ 1134.011452][T25600] ? trace_contention_end+0x3d/0x140 [ 1134.011471][T25600] ? __mutex_lock+0x30d/0x1550 [ 1134.011494][T25600] ? rcu_is_watching+0x15/0xb0 [ 1134.011510][T25600] ? trace_irq_enable+0x3b/0x140 [ 1134.011534][T25600] ? rcu_is_watching+0x15/0xb0 [ 1134.011556][T25600] ? kvm_vcpu_ioctl+0x27f/0xfd0 [ 1134.011579][T25600] ? get_task_pid+0x22/0x310 [ 1134.011596][T25600] ? do_raw_write_lock+0x11d/0x260 [ 1134.011618][T25600] ? rcu_is_watching+0x15/0xb0 [ 1134.011636][T25600] ? lock_release+0x4b/0x3c0 [ 1134.011661][T25600] ? get_task_pid+0x22/0x310 [ 1134.011678][T25600] kvm_vcpu_ioctl+0xa61/0xfd0 [ 1134.011703][T25600] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1134.011723][T25600] ? hook_file_ioctl+0x1f0/0x5c0 [ 1134.011757][T25600] ? lock_release+0x4b/0x3c0 [ 1134.011785][T25600] ? __fget_files+0x2a/0x420 [ 1134.011804][T25600] ? __fget_files+0x3a2/0x420 [ 1134.011822][T25600] ? __fget_files+0x2a/0x420 [ 1134.011843][T25600] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1134.011867][T25600] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1134.011889][T25600] __se_sys_ioctl+0xfc/0x170 [ 1134.011913][T25600] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1134.011931][T25600] do_syscall_64+0x174/0x580 [ 1134.011952][T25600] ? trace_irq_disable+0x3b/0x140 [ 1134.011989][T25600] ? clear_bhb_loop+0x40/0x90 [ 1134.012026][T25600] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1134.012044][T25600] RIP: 0033:0x7ff0a859ce59 [ 1134.012060][T25600] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1134.012076][T25600] RSP: 002b:00007ff0a9466028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1134.012096][T25600] RAX: ffffffffffffffda RBX: 00007ff0a8815fa0 RCX: 00007ff0a859ce59 [ 1134.012110][T25600] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000008 [ 1134.012122][T25600] RBP: 00007ff0a9466090 R08: 0000000000000000 R09: 0000000000000000 [ 1134.012134][T25600] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1134.012145][T25600] R13: 00007ff0a8816038 R14: 00007ff0a8815fa0 R15: 00007ff0a893fa48 [ 1134.012166][T25600] [ 1134.035333][ T5674] dvb_usb_ec168 9-1:0.1: probe with driver dvb_usb_ec168 failed with error -71 [ 1134.431415][ T5674] usb 9-1: USB disconnect, device number 16 [ 1134.762355][T16658] usb 10-1: new full-speed USB device number 18 using dummy_hcd [ 1134.923780][T16658] usb 10-1: config 0 has an invalid interface number: 8 but max is 0 [ 1134.932070][T16658] usb 10-1: config 0 has no interface number 0 [ 1134.938312][T16658] usb 10-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 1134.950034][T16658] usb 10-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1134.966647][T16658] usb 10-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 767, setting to 64 [ 1135.010916][T16658] usb 10-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1135.021001][T16658] usb 10-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1135.029881][T16658] usb 10-1: Product: syz [ 1135.034597][T16658] usb 10-1: SerialNumber: syz [ 1135.052797][T16658] usb 10-1: config 0 descriptor?? [ 1135.059026][T25619] raw-gadget.4 gadget.9: fail, usb_ep_enable returned -22 [ 1135.071040][T16658] cm109 10-1:0.8: invalid payload size 64, expected 4 [ 1135.084721][T16658] input: CM109 USB driver as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.8/input/input275 [ 1135.131310][T25630] vlan2: entered promiscuous mode [ 1135.142440][T25630] hsr0: entered promiscuous mode [ 1135.147818][T25630] vlan2: entered allmulticast mode [ 1135.159039][T25630] hsr0: entered allmulticast mode [ 1135.181903][T25630] hsr_slave_0: entered allmulticast mode [ 1135.207487][T25630] hsr_slave_1: entered allmulticast mode [ 1135.308434][ C0] cm109 10-1:0.8: cm109_urb_irq_callback: urb status -71 [ 1135.562436][T16658] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 1135.624284][T25663] netlink: 'syz.9.5217': attribute type 21 has an invalid length. [ 1135.632675][T25663] netlink: 136 bytes leftover after parsing attributes in process `syz.9.5217'. [ 1135.722354][T16658] usb 9-1: Using ep0 maxpacket: 32 [ 1135.728957][T16658] usb 9-1: config index 0 descriptor too short (expected 29220, got 36) [ 1135.738147][T16658] usb 9-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1135.746914][T16658] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1135.756184][T16658] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1135.766549][T16658] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1135.776665][T16658] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1135.791291][T16658] usb 9-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1135.800505][T16658] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1135.810878][T16658] usb 9-1: config 0 descriptor?? [ 1136.002174][T25671] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1136.024095][T25671] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1136.035139][T16658] usblp 9-1:0.0: usblp0: USB Bidirectional printer dev 17 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1136.288862][T25692] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1136.290484][ C0] usblp0: nonzero read bulk status received: -71 [ 1136.303115][T25692] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1136.305203][T16658] usb 9-1: USB disconnect, device number 17 [ 1136.330553][T25692] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1136.372357][ T29] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 1136.524175][ T29] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1136.532325][ T29] usb 3-1: config 0 has no interface number 0 [ 1136.540214][ T29] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1136.548427][T25657] usblp0: removed [ 1136.549905][ T29] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1136.565644][ T29] usb 3-1: Product: syz [ 1136.569921][ T29] usb 3-1: Manufacturer: syz [ 1136.574619][ T29] usb 3-1: SerialNumber: syz [ 1136.581765][ T29] usb 3-1: config 0 descriptor?? [ 1136.807944][ T29] dvb_usb_ec168 3-1:0.1: probe with driver dvb_usb_ec168 failed with error -71 [ 1136.822118][ T29] usb 3-1: USB disconnect, device number 93 [ 1136.932356][T16658] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 1137.082931][T16658] usb 2-1: Using ep0 maxpacket: 32 [ 1137.097262][T16658] usb 2-1: config 246 has an invalid interface number: 166 but max is 0 [ 1137.108657][T16658] usb 2-1: config 246 has an invalid descriptor of length 0, skipping remainder of the config [ 1137.119799][T16658] usb 2-1: config 246 has no interface number 0 [ 1137.131605][T16658] usb 2-1: config 246 interface 166 altsetting 118 endpoint 0xB has invalid wMaxPacketSize 0 [ 1137.142101][T16658] usb 2-1: config 246 interface 166 altsetting 118 bulk endpoint 0xB has invalid maxpacket 0 [ 1137.152662][T16658] usb 2-1: config 246 interface 166 altsetting 118 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1137.166684][T16658] usb 2-1: config 246 interface 166 has no altsetting 0 [ 1137.176242][T16658] usb 2-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 9.63 [ 1137.187104][T16658] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1137.195360][T16658] usb 2-1: Product: syz [ 1137.199626][T16658] usb 2-1: Manufacturer: syz [ 1137.204708][T16658] usb 2-1: SerialNumber: syz [ 1137.553457][ C0] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1137.560748][ C0] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1137.567977][ C0] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1137.575467][ C0] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1137.582959][ C0] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1137.590234][ C0] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1137.597477][ C0] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1137.605322][ C0] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1137.613351][ C0] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1137.620669][ C0] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1137.628807][ C0] cm109 10-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 1137.637926][ T5674] usb 10-1: USB disconnect, device number 18 [ 1137.666143][ T5674] cm109 10-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1137.682600][ T5681] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 1137.832356][ T5681] usb 3-1: Using ep0 maxpacket: 32 [ 1137.839554][ T5681] usb 3-1: config 246 has an invalid interface number: 166 but max is 0 [ 1137.848694][ T5681] usb 3-1: config 246 has an invalid descriptor of length 0, skipping remainder of the config [ 1137.860803][ T5681] usb 3-1: config 246 has no interface number 0 [ 1137.867762][ T5681] usb 3-1: config 246 interface 166 altsetting 118 endpoint 0xB has invalid wMaxPacketSize 0 [ 1137.878451][ T5681] usb 3-1: config 246 interface 166 altsetting 118 bulk endpoint 0xB has invalid maxpacket 0 [ 1137.890142][ T5681] usb 3-1: config 246 interface 166 altsetting 118 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1137.904085][T25710] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1137.905190][T25710] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1137.947061][T16658] usb 2-1: Limiting number of CPorts to U8_MAX [ 1137.957820][ T5681] usb 3-1: config 246 interface 166 has no altsetting 0 [ 1137.967586][T16658] usb 2-1: Not enough endpoints found in device, aborting! [ 1137.984806][ T5681] usb 3-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 9.63 [ 1137.997644][ T5681] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1138.005760][ T5681] usb 3-1: Product: syz [ 1138.009962][ T5681] usb 3-1: Manufacturer: syz [ 1138.014644][ T5681] usb 3-1: SerialNumber: syz [ 1138.052335][ T5674] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 1138.202476][ T5674] usb 10-1: Using ep0 maxpacket: 32 [ 1138.209092][ T5674] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 1138.217394][ T5674] usb 10-1: config 0 has no interface number 0 [ 1138.228099][ T5674] usb 10-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 1138.237635][ T5674] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1138.246196][ T5674] usb 10-1: Product: syz [ 1138.250547][ T5674] usb 10-1: Manufacturer: syz [ 1138.256077][ T5674] usb 10-1: SerialNumber: syz [ 1138.262819][ T5674] usb 10-1: config 0 descriptor?? [ 1138.272542][ T5674] usb 10-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1138.281490][ T5674] usb 10-1: selecting invalid altsetting 1 [ 1138.287380][ T5674] usb 10-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1138.296697][ T5674] usb 10-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1138.307846][ T5674] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1138.316455][ T5674] usb 10-1: media controller created [ 1138.328065][ T5674] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1138.472651][ T5674] usb 10-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 1138.479933][ T5674] zl10353_read_register: readreg error (reg=127, ret==-32) [ 1138.662855][T25730] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1138.672841][T25730] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1138.683055][ T5681] usb 3-1: Limiting number of CPorts to U8_MAX [ 1138.689692][ T5681] usb 3-1: Not enough endpoints found in device, aborting! [ 1138.875049][ T5681] usb 10-1: USB disconnect, device number 19 [ 1139.113944][T25798] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1139.130039][T25798] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1139.258048][T25801] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1139.267188][T25801] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1139.441924][T25806] gre0: entered promiscuous mode [ 1139.447109][T25806] gre0: entered allmulticast mode [ 1139.679173][ T29] usb 2-1: USB disconnect, device number 34 [ 1139.752354][T16663] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 1139.841613][T25829] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1139.855408][T25829] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1139.905088][T16663] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1139.917490][T16663] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1139.922689][T16658] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 1139.929971][T16663] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1139.946867][T16663] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1139.963568][T16663] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1139.979897][T16663] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1139.993485][T16663] usb 10-1: config 0 descriptor?? [ 1140.006852][T25828] bond1: entered promiscuous mode [ 1140.012628][T25828] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1140.133728][T16658] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 1140.142383][T16658] usb 9-1: config 0 has no interface number 0 [ 1140.150246][T16658] usb 9-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1140.159659][T16658] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1140.171202][T16658] usb 9-1: Product: syz [ 1140.176057][T16658] usb 9-1: Manufacturer: syz [ 1140.180692][T16658] usb 9-1: SerialNumber: syz [ 1140.188754][T16658] usb 9-1: config 0 descriptor?? [ 1140.426175][T16663] plantronics 0003:047F:FFFF.0078: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0 [ 1140.469178][T16658] dvb_usb_ec168 9-1:0.1: probe with driver dvb_usb_ec168 failed with error -71 [ 1140.506033][T16658] usb 9-1: USB disconnect, device number 18 [ 1140.529036][ T5674] usb 3-1: USB disconnect, device number 94 [ 1140.677351][T25898] FAULT_INJECTION: forcing a failure. [ 1140.677351][T25898] name failslab, interval 1, probability 0, space 0, times 0 [ 1140.690578][T25898] CPU: 0 UID: 0 PID: 25898 Comm: syz.2.5248 Tainted: G L syzkaller #0 PREEMPT(full) [ 1140.690604][T25898] Tainted: [L]=SOFTLOCKUP [ 1140.690612][T25898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1140.690622][T25898] Call Trace: [ 1140.690629][T25898] [ 1140.690637][T25898] dump_stack_lvl+0xe8/0x150 [ 1140.690662][T25898] should_fail_ex+0x40c/0x560 [ 1140.690687][T25898] should_failslab+0xa8/0x100 [ 1140.690713][T25898] ? __kvm_mmu_topup_memory_cache+0x1b2/0x600 [ 1140.690733][T25898] kmem_cache_alloc_noprof+0x87/0x650 [ 1140.690755][T25898] ? __kvm_mmu_topup_memory_cache+0x1b2/0x600 [ 1140.690775][T25898] ? kmem_cache_alloc_noprof+0x156/0x650 [ 1140.690799][T25898] __kvm_mmu_topup_memory_cache+0x1b2/0x600 [ 1140.690823][T25898] mmu_topup_memory_caches+0x21/0x170 [ 1140.690844][T25898] kvm_mmu_load+0x9d/0x2380 [ 1140.690865][T25898] ? kvm_msr_allowed+0x9a/0x490 [ 1140.690888][T25898] ? kvm_msr_allowed+0x9a/0x490 [ 1140.690910][T25898] ? kvm_msr_allowed+0x9a/0x490 [ 1140.690932][T25898] ? kvm_msr_allowed+0x9a/0x490 [ 1140.690954][T25898] ? kvm_apic_has_interrupt+0x740/0x770 [ 1140.690982][T25898] vcpu_run+0x4dcc/0x7950 [ 1140.691035][T25898] ? __pfx_vcpu_run+0x10/0x10 [ 1140.691058][T25898] ? kvm_arch_vcpu_ioctl_run+0x2fa/0x2070 [ 1140.691082][T25898] ? rcu_is_watching+0x15/0xb0 [ 1140.691101][T25898] ? lock_acquire+0x5f/0x350 [ 1140.691126][T25898] ? fpu_swap_kvm_fpstate+0xcb/0x510 [ 1140.691154][T25898] ? fpu_swap_kvm_fpstate+0xcb/0x510 [ 1140.691180][T25898] kvm_arch_vcpu_ioctl_run+0x1193/0x2070 [ 1140.691210][T25898] ? kvm_arch_vcpu_ioctl_run+0x2fa/0x2070 [ 1140.691235][T25898] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 1140.691262][T25898] ? rcu_is_watching+0x15/0xb0 [ 1140.691280][T25898] ? trace_contention_end+0x3d/0x140 [ 1140.691300][T25898] ? __mutex_lock+0x30d/0x1550 [ 1140.691324][T25898] ? rcu_is_watching+0x15/0xb0 [ 1140.691342][T25898] ? trace_irq_enable+0x3b/0x140 [ 1140.691366][T25898] ? rcu_is_watching+0x15/0xb0 [ 1140.691383][T25898] ? kvm_vcpu_ioctl+0x27f/0xfd0 [ 1140.691406][T25898] ? get_task_pid+0x22/0x310 [ 1140.691423][T25898] ? do_raw_write_lock+0x11d/0x260 [ 1140.691445][T25898] ? rcu_is_watching+0x15/0xb0 [ 1140.691462][T25898] ? lock_release+0x4b/0x3c0 [ 1140.691486][T25898] ? get_task_pid+0x22/0x310 [ 1140.691503][T25898] kvm_vcpu_ioctl+0xa61/0xfd0 [ 1140.691527][T25898] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1140.691549][T25898] ? hook_file_ioctl+0x1f0/0x5c0 [ 1140.691578][T25898] ? rcu_is_watching+0x15/0xb0 [ 1140.691596][T25898] ? trace_irq_enable+0x3b/0x140 [ 1140.691619][T25898] ? irqentry_exit+0x218/0x8f0 [ 1140.691640][T25898] ? trace_irq_disable+0x3b/0x140 [ 1140.691666][T25898] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1140.691691][T25898] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1140.691713][T25898] __se_sys_ioctl+0xfc/0x170 [ 1140.691737][T25898] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1140.691755][T25898] do_syscall_64+0x174/0x580 [ 1140.691777][T25898] ? trace_irq_disable+0x3b/0x140 [ 1140.691800][T25898] ? clear_bhb_loop+0x40/0x90 [ 1140.691819][T25898] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1140.691837][T25898] RIP: 0033:0x7f005e39ce59 [ 1140.691853][T25898] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1140.691869][T25898] RSP: 002b:00007f005f21b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1140.691888][T25898] RAX: ffffffffffffffda RBX: 00007f005e615fa0 RCX: 00007f005e39ce59 [ 1140.691901][T25898] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 1140.691912][T25898] RBP: 00007f005f21b090 R08: 0000000000000000 R09: 0000000000000000 [ 1140.691923][T25898] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1140.691934][T25898] R13: 00007f005e616038 R14: 00007f005e615fa0 R15: 00007f005e73fa48 [ 1140.691954][T25898] [ 1141.207597][T16663] usb 2-1: new full-speed USB device number 35 using dummy_hcd [ 1141.294382][T25922] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1141.313064][T25922] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1141.365858][T25928] FAULT_INJECTION: forcing a failure. [ 1141.365858][T25928] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1141.379487][T25928] CPU: 0 UID: 0 PID: 25928 Comm: syz.8.5253 Tainted: G L syzkaller #0 PREEMPT(full) [ 1141.379517][T25928] Tainted: [L]=SOFTLOCKUP [ 1141.379524][T25928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1141.379535][T25928] Call Trace: [ 1141.379542][T25928] [ 1141.379549][T25928] dump_stack_lvl+0xe8/0x150 [ 1141.379574][T25928] should_fail_ex+0x40c/0x560 [ 1141.379594][T25928] prepare_alloc_pages+0x230/0x650 [ 1141.379625][T25928] __alloc_frozen_pages_noprof+0x12f/0x380 [ 1141.379652][T25928] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1141.379679][T25928] ? __pfx_policy_nodemask+0x10/0x10 [ 1141.379703][T25928] ? rcu_is_watching+0x15/0xb0 [ 1141.379723][T25928] ? rcu_is_watching+0x15/0xb0 [ 1141.379741][T25928] alloc_pages_mpol+0x212/0x380 [ 1141.379768][T25928] folio_alloc_mpol_noprof+0x39/0x160 [ 1141.379795][T25928] vma_alloc_folio_noprof+0xe1/0x1e0 [ 1141.379822][T25928] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 1141.379848][T25928] ? __pte_offset_map+0x29/0x240 [ 1141.379868][T25928] ? lock_acquire+0x5f/0x350 [ 1141.379895][T25928] do_pte_missing+0x1750/0x3540 [ 1141.379925][T25928] handle_mm_fault+0x1b36/0x3080 [ 1141.379949][T25928] ? handle_mm_fault+0xec/0x3080 [ 1141.379972][T25928] ? __pfx_handle_mm_fault+0x10/0x10 [ 1141.379992][T25928] ? follow_page_pte+0x6ce/0xe70 [ 1141.380014][T25928] ? __pfx_follow_page_pte+0x10/0x10 [ 1141.380038][T25928] __get_user_pages+0x1678/0x2720 [ 1141.380069][T25928] __gup_longterm_locked+0xd52/0x15c0 [ 1141.380097][T25928] ? gup_fast_fallback+0x20d/0x20d0 [ 1141.380117][T25928] ? rcu_is_watching+0x15/0xb0 [ 1141.380134][T25928] ? sanity_check_pinned_pages+0x817/0x8d0 [ 1141.380151][T25928] ? rcu_is_watching+0x15/0xb0 [ 1141.380171][T25928] gup_fast_fallback+0x1d82/0x20d0 [ 1141.380201][T25928] ? __pfx_gup_fast_fallback+0x10/0x10 [ 1141.380221][T25928] ? is_valid_gup_args+0x11f/0x200 [ 1141.380240][T25928] ? pin_user_pages_fast+0x4d/0xb0 [ 1141.380260][T25928] rds_info_getsockopt+0x209/0x490 [ 1141.380287][T25928] ? __pfx_rds_info_getsockopt+0x10/0x10 [ 1141.380319][T25928] ? __might_fault+0xaf/0x130 [ 1141.380339][T25928] ? __might_fault+0xcb/0x130 [ 1141.380361][T25928] ? rds_getsockopt+0x2b4/0x500 [ 1141.380378][T25928] ? __pfx_rds_getsockopt+0x10/0x10 [ 1141.380395][T25928] do_sock_getsockopt+0x51d/0x7e0 [ 1141.380422][T25928] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1141.380443][T25928] ? rcu_is_watching+0x15/0xb0 [ 1141.380462][T25928] ? lock_release+0x4b/0x3c0 [ 1141.380490][T25928] ? __fget_files+0x3a2/0x420 [ 1141.380510][T25928] ? __fget_files+0x2a/0x420 [ 1141.380523][T25922] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1141.380532][T25928] __x64_sys_getsockopt+0x1a4/0x240 [ 1141.380585][T25928] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1141.380641][T25928] do_syscall_64+0x174/0x580 [ 1141.380707][T25928] ? trace_irq_disable+0x3b/0x140 [ 1141.380769][T25928] ? clear_bhb_loop+0x40/0x90 [ 1141.380817][T25928] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1141.380861][T25928] RIP: 0033:0x7f005b79ce59 [ 1141.380899][T25928] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1141.380934][T25928] RSP: 002b:00007f005c685028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1141.380987][T25928] RAX: ffffffffffffffda RBX: 00007f005ba15fa0 RCX: 00007f005b79ce59 [ 1141.381021][T25928] RDX: 0000000000002711 RSI: 0000200000000114 RDI: 0000000000000003 [ 1141.381049][T25928] RBP: 00007f005c685090 R08: 0000200000000400 R09: 0000000000000000 [ 1141.381083][T25928] R10: 0000200000019980 R11: 0000000000000246 R12: 0000000000000002 [ 1141.381120][T25928] R13: 00007f005ba16038 R14: 00007f005ba15fa0 R15: 00007f005bb3fa48 [ 1141.381165][T25928] [ 1141.634484][T25931] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1141.671267][T16663] usb 2-1: too many endpoints for config 0 interface 0 altsetting 4: 129, using maximum allowed: 30 [ 1141.769920][T16663] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1141.781679][T16663] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1141.791887][T16663] usb 2-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 1141.804454][T16658] usb 10-1: reset high-speed USB device number 20 using dummy_hcd [ 1141.806008][T16663] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1141.820544][T16663] usb 2-1: New USB device found, idVendor=056a, idProduct=0725, bcdDevice= 0.00 [ 1141.825280][T25931] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1141.858107][T16663] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1141.877250][T16663] usb 2-1: config 0 descriptor?? [ 1141.942495][T16658] usb 10-1: device descriptor read/64, error -32 [ 1142.182392][T16658] usb 10-1: reset high-speed USB device number 20 using dummy_hcd [ 1142.292167][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 1142.292183][ T30] audit: type=1326 audit(1781639857.547:3420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25900 comm="syz.1.5249" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff0a859ce59 code=0x0 [ 1142.322886][T16658] usb 10-1: device descriptor read/64, error -32 [ 1142.394748][ T5709] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 1142.406254][T16663] usbhid 2-1:0.0: can't add hid device: -71 [ 1142.419705][T16663] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1142.431130][ T30] audit: type=1326 audit(1781639857.687:3421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25900 comm="syz.1.5249" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0a859ce59 code=0x7ffc0000 [ 1142.449969][T16663] usb 2-1: USB disconnect, device number 35 [ 1142.491561][ T30] audit: type=1800 audit(1781639857.687:3422): pid=25951 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.5258" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 1142.523520][ T30] audit: type=1326 audit(1781639857.687:3423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25900 comm="syz.1.5249" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0a859ce59 code=0x7ffc0000 [ 1142.548669][ T30] audit: type=1326 audit(1781639857.687:3424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25900 comm="syz.1.5249" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0a859ce59 code=0x7ffc0000 [ 1142.574807][ T30] audit: type=1326 audit(1781639857.687:3425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25900 comm="syz.1.5249" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7ff0a859ce59 code=0x7ffc0000 [ 1142.586558][ T5709] usb 9-1: Using ep0 maxpacket: 16 [ 1142.606689][T16658] usb 10-1: reset high-speed USB device number 20 using dummy_hcd [ 1142.617246][ T30] audit: type=1326 audit(1781639857.687:3426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25900 comm="syz.1.5249" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0a859ce59 code=0x7ffc0000 [ 1142.638181][ T5709] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1142.644886][T16658] usb 10-1: device descriptor read/8, error -32 [ 1142.669889][ T5709] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1142.693023][ T5709] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1142.729198][ T30] audit: type=1326 audit(1781639857.747:3427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25900 comm="syz.1.5249" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0a859ce59 code=0x7ffc0000 [ 1142.754390][ T50] Bluetooth: hci8: unexpected event 0x2f length: 509 > 260 [ 1142.764277][ T30] audit: type=1326 audit(1781639857.747:3428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25900 comm="syz.1.5249" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff0a859cbc2 code=0x7ffc0000 [ 1142.797207][ T5709] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1142.812240][ T30] audit: type=1326 audit(1781639857.747:3429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25900 comm="syz.1.5249" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7ff0a859cc57 code=0x7ffc0000 [ 1142.871086][ T5709] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1142.915876][T25806] raw-gadget.4 gadget.9: failed to queue suspend event [ 1142.929889][T25806] raw-gadget.4 gadget.9: failed to queue disconnect event [ 1142.956985][T16658] usb 10-1: reset high-speed USB device number 20 using dummy_hcd [ 1142.968876][ T5709] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1142.989368][ T5709] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1143.008290][ T5709] usb 9-1: Manufacturer: syz [ 1143.031523][ T5709] usb 9-1: config 0 descriptor?? [ 1143.172347][T16658] usb 10-1: device not accepting address 20, error -71 [ 1143.183358][ T5674] usb 10-1: USB disconnect, device number 20 [ 1143.332970][ T5709] rc_core: IR keymap rc-hauppauge not found [ 1143.344885][ T5709] Registered IR keymap rc-empty [ 1143.354333][ T5709] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1143.382534][ T5681] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 1143.394750][ T5709] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1143.423337][ T5709] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0 [ 1143.451230][ T5709] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0/input277 [ 1143.501610][ T5709] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1143.534811][ T5681] usb 2-1: Using ep0 maxpacket: 16 [ 1143.543108][ T5709] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1143.551128][ T5681] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1143.562445][ T5709] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1143.573766][ T5681] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1143.597200][ T5709] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1143.602486][ T5681] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1143.632356][ T5681] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1143.642863][ T5709] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1143.653113][ T5681] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1143.672532][ T5709] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1143.693313][ T5681] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1143.712528][ T809] usb 10-1: new high-speed USB device number 21 using dummy_hcd [ 1143.714924][ T5681] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1143.720307][ T5709] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1143.745060][ T5709] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1143.773077][ T5709] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1143.778734][ T5681] usb 2-1: Manufacturer: syz [ 1143.791153][ T5681] usb 2-1: config 0 descriptor?? [ 1143.803434][ T5709] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1143.834623][ T5709] mceusb 9-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1143.855016][ T5709] mceusb 9-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1143.875853][ T809] usb 10-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 1143.887927][ T5709] usb 9-1: USB disconnect, device number 19 [ 1143.903518][ T809] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1143.912879][ T809] usb 10-1: Product: syz [ 1143.929027][ T809] usb 10-1: Manufacturer: syz [ 1143.944051][ T809] usb 10-1: SerialNumber: syz [ 1143.958876][ T809] usb 10-1: config 0 descriptor?? [ 1143.969382][ T809] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 1144.063589][ T5681] rc_core: IR keymap rc-hauppauge not found [ 1144.075867][ T5681] Registered IR keymap rc-empty [ 1144.092568][ T5681] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1144.112364][ T5681] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1144.143001][ T5681] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 1144.163809][ T5681] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input278 [ 1144.186479][ T5681] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1144.222430][ T5681] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1144.249180][T25997] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1144.252739][ T5681] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1144.259598][T25997] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1144.282598][T25997] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1144.314351][T25997] netlink: 16 bytes leftover after parsing attributes in process `syz.9.5262'. [ 1144.314906][ T5681] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1144.358846][ T809] gspca_sq905c: sq905c_command: usb_control_msg failed (-71) [ 1144.380190][T26044] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1144.391744][ T809] sq905c 10-1:0.0: Get version command failed [ 1144.401846][T26044] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1144.410031][ T809] sq905c 10-1:0.0: probe with driver sq905c failed with error -71 [ 1144.410129][ T5681] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1144.435718][ T809] usb 10-1: USB disconnect, device number 21 [ 1144.462535][ T5681] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1144.503329][ T5681] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1144.522386][ T5681] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1144.554622][ T5681] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1144.572448][ T5681] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1144.594922][ T5681] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1144.604115][ T5681] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1144.615349][ T5681] usb 2-1: USB disconnect, device number 36 [ 1144.683624][T22581] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 1144.834385][T22581] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1144.844629][T22581] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1144.855813][T22581] usb 9-1: New USB device found, idVendor=08e4, idProduct=0163, bcdDevice= 0.40 [ 1144.865080][T22581] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1144.873150][T22581] usb 9-1: Product: syz [ 1144.877429][T22581] usb 9-1: Manufacturer: syz [ 1144.882051][T22581] usb 9-1: SerialNumber: syz [ 1145.047826][T26096] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5271'. [ 1145.111944][T26053] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1145.141450][T26053] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1145.273966][T22581] snd-usb-audio 9-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 1145.328366][T22581] usb 9-1: USB disconnect, device number 20 [ 1145.379985][ T5626] udevd[5626]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1145.659340][T26143] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5274'. [ 1145.855683][ T50] Bluetooth: hci6: unexpected event 0x2f length: 509 > 260 [ 1145.992664][T22581] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 1146.091797][T26165] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1146.112128][T26165] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1146.184310][T22581] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1146.199272][T22581] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1146.216277][T22581] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1146.228009][T22581] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1146.254875][T22581] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1146.264980][T22581] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1146.277016][T22581] usb 3-1: config 0 descriptor?? [ 1146.642712][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1146.706964][T26148] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1146.751445][T22581] plantronics 0003:047F:FFFF.0079: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 1146.770239][ T5681] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 1146.933032][ T5681] usb 9-1: Using ep0 maxpacket: 16 [ 1146.944753][ T5681] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1146.970142][ T5681] usb 9-1: config 0 interface 0 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1147.013275][ T5681] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1147.031090][ T5681] usb 9-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1147.065385][ T5681] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1147.095306][ T5681] usb 9-1: config 0 descriptor?? [ 1147.117939][ T5681] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 1147.282437][T16663] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 1147.453792][T16663] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1147.462116][T16663] usb 2-1: config 0 has no interface number 0 [ 1147.470477][T16663] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1147.492395][T16663] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1147.503407][T16663] usb 2-1: Product: syz [ 1147.512411][T16663] usb 2-1: Manufacturer: syz [ 1147.522406][T16663] usb 2-1: SerialNumber: syz [ 1147.534046][T16663] usb 2-1: config 0 descriptor?? [ 1147.783310][T16663] dvb_usb_ec168 2-1:0.1: probe with driver dvb_usb_ec168 failed with error -71 [ 1147.800016][T16663] usb 2-1: USB disconnect, device number 37 [ 1147.887674][T26265] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1147.899589][T26265] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1148.162492][ T5681] usb 3-1: reset high-speed USB device number 95 using dummy_hcd [ 1148.292369][ T5681] usb 3-1: device descriptor read/64, error -32 [ 1148.417828][T26281] ±ÿ: renamed from lo (while UP) [ 1148.532652][ T5681] usb 3-1: reset high-speed USB device number 95 using dummy_hcd [ 1148.612364][ T5674] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 1148.662542][ T5681] usb 3-1: device descriptor read/64, error -32 [ 1148.764145][ T5674] usb 2-1: Using ep0 maxpacket: 8 [ 1148.776183][ T5674] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 1148.796642][ T5674] usb 2-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 1148.812973][ T5674] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1148.812999][ T5674] usb 2-1: Product: syz [ 1148.813015][ T5674] usb 2-1: Manufacturer: syz [ 1148.813034][ T5674] usb 2-1: SerialNumber: syz [ 1148.815424][ T5674] usb 2-1: config 0 descriptor?? [ 1148.819570][ T5674] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 1148.903103][ T5681] usb 3-1: reset high-speed USB device number 95 using dummy_hcd [ 1148.922563][ T5681] usb 3-1: device descriptor read/8, error -32 [ 1149.442337][ T5681] usb 3-1: reset high-speed USB device number 95 using dummy_hcd [ 1149.474060][ T5681] usb 3-1: device firmware changed [ 1149.482184][T22581] usb 3-1: USB disconnect, device number 95 [ 1149.557693][T16663] usb 9-1: USB disconnect, device number 21 [ 1149.642579][T22581] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 1149.808228][T22581] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1149.821576][T22581] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1149.836972][T22581] usb 3-1: Product: syz [ 1149.844887][T22581] usb 3-1: Manufacturer: syz [ 1149.853821][T22581] usb 3-1: SerialNumber: syz [ 1149.962377][T16663] usb 9-1: new low-speed USB device number 22 using dummy_hcd [ 1150.102872][T16663] usb 9-1: device descriptor read/64, error -71 [ 1150.269445][T22581] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1150.281985][T22581] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1150.362376][T16663] usb 9-1: new low-speed USB device number 23 using dummy_hcd [ 1150.492356][T16663] usb 9-1: device descriptor read/64, error -71 [ 1150.603590][T16663] usb usb9-port1: attempt power cycle [ 1150.942365][T16663] usb 9-1: new low-speed USB device number 24 using dummy_hcd [ 1150.963162][T16663] usb 9-1: device descriptor read/8, error -71 [ 1151.202951][T16663] usb 9-1: new low-speed USB device number 25 using dummy_hcd [ 1151.223237][T16663] usb 9-1: device descriptor read/8, error -71 [ 1151.282548][T15874] usb 10-1: new high-speed USB device number 22 using dummy_hcd [ 1151.332711][T16663] usb usb9-port1: unable to enumerate USB device [ 1151.435164][T15874] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 1151.443805][T15874] usb 10-1: config 0 has no interface number 0 [ 1151.452138][T15874] usb 10-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1151.461499][T15874] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1151.469716][T15874] usb 10-1: Product: syz [ 1151.474133][T15874] usb 10-1: Manufacturer: syz [ 1151.478933][T15874] usb 10-1: SerialNumber: syz [ 1151.485246][T15874] usb 10-1: config 0 descriptor?? [ 1151.502023][T22581] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 1151.515792][T22581] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPIPE [ 1151.646866][ T5674] gspca_zc3xx: reg_r err -32 [ 1151.718581][T15874] dvb_usb_ec168 10-1:0.1: probe with driver dvb_usb_ec168 failed with error -71 [ 1151.736740][T22581] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000118. ret = -EPROTO [ 1151.752172][T15874] usb 10-1: USB disconnect, device number 22 [ 1151.765571][T22581] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1151.776317][T22581] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1151.793885][T22581] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 1151.807610][T22581] usb 3-1: USB disconnect, device number 96 [ 1151.986880][T26379] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1151.997086][T26379] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1152.232426][ T5674] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 1152.238822][ T5674] gspca_zc3xx 2-1:0.0: probe with driver gspca_zc3xx failed with error -32 [ 1152.371464][T26390] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5300'. [ 1152.570008][T26400] syz.9.5301: vmalloc error: size 9223372036854775807, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1152.589499][T26400] CPU: 1 UID: 0 PID: 26400 Comm: syz.9.5301 Tainted: G L syzkaller #0 PREEMPT(full) [ 1152.589527][T26400] Tainted: [L]=SOFTLOCKUP [ 1152.589535][T26400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1152.589552][T26400] Call Trace: [ 1152.589560][T26400] [ 1152.589569][T26400] dump_stack_lvl+0xe8/0x150 [ 1152.589594][T26400] warn_alloc+0x249/0x340 [ 1152.589623][T26400] ? __pfx_warn_alloc+0x10/0x10 [ 1152.589654][T26400] ? __mutex_trylock_common+0x15f/0x270 [ 1152.589677][T26400] __vmalloc_node_range_noprof+0x12c/0x1730 [ 1152.589703][T26400] ? rcu_is_watching+0x15/0xb0 [ 1152.589722][T26400] ? trace_contention_end+0x3d/0x140 [ 1152.589743][T26400] ? __mutex_lock+0x30d/0x1550 [ 1152.589766][T26400] ? rcu_is_watching+0x15/0xb0 [ 1152.589783][T26400] ? lock_release+0x4b/0x3c0 [ 1152.589803][T26400] ? kfree+0x1c5/0x640 [ 1152.589819][T26400] ? tomoyo_path_number_perm+0x4ba/0x5f0 [ 1152.589841][T26400] ? tomoyo_path_number_perm+0x219/0x5f0 [ 1152.589861][T26400] ? dvb_dvr_do_ioctl+0x76/0x220 [ 1152.589881][T26400] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1152.589900][T26400] ? do_vfs_ioctl+0x116f/0x1540 [ 1152.589923][T26400] ? dvb_dvr_do_ioctl+0x12b/0x220 [ 1152.589940][T26400] vmalloc_noprof+0xb2/0xe0 [ 1152.589958][T26400] ? dvb_dvr_do_ioctl+0x12b/0x220 [ 1152.589976][T26400] dvb_dvr_do_ioctl+0x12b/0x220 [ 1152.589996][T26400] dvb_usercopy+0x199/0x2e0 [ 1152.590010][T26400] ? __pfx_dvb_dvr_do_ioctl+0x10/0x10 [ 1152.590027][T26400] ? __pfx_dvb_usercopy+0x10/0x10 [ 1152.590045][T26400] ? __fget_files+0x3a2/0x420 [ 1152.590069][T26400] ? __fget_files+0x2a/0x420 [ 1152.590087][T26400] ? __pfx_dvb_dvr_ioctl+0x10/0x10 [ 1152.590105][T26400] dvb_dvr_ioctl+0x29/0x40 [ 1152.590122][T26400] __se_sys_ioctl+0xfc/0x170 [ 1152.590143][T26400] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1152.590159][T26400] do_syscall_64+0x174/0x580 [ 1152.590179][T26400] ? clear_bhb_loop+0x40/0x90 [ 1152.590195][T26400] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1152.590209][T26400] RIP: 0033:0x7f320599ce59 [ 1152.590223][T26400] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1152.590236][T26400] RSP: 002b:00007f320683b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1152.590252][T26400] RAX: ffffffffffffffda RBX: 00007f3205c16180 RCX: 00007f320599ce59 [ 1152.590263][T26400] RDX: 7fffffffffffffff RSI: 0000000000006f2d RDI: 0000000000000005 [ 1152.590272][T26400] RBP: 00007f3205a32d6f R08: 0000000000000000 R09: 0000000000000000 [ 1152.590282][T26400] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1152.590290][T26400] R13: 00007f3205c16218 R14: 00007f3205c16180 R15: 00007f3205d3fa48 [ 1152.590307][T26400] [ 1152.591680][T26400] Mem-Info: [ 1152.876171][T16663] usb 2-1: USB disconnect, device number 38 [ 1152.889159][T26400] active_anon:26933 inactive_anon:0 isolated_anon:0 [ 1152.889159][T26400] active_file:20683 inactive_file:40431 isolated_file:0 [ 1152.889159][T26400] unevictable:768 dirty:376 writeback:0 [ 1152.889159][T26400] slab_reclaimable:7794 slab_unreclaimable:134538 [ 1152.889159][T26400] mapped:53424 shmem:18228 pagetables:2362 [ 1152.889159][T26400] sec_pagetables:0 bounce:0 [ 1152.889159][T26400] kernel_misc_reclaimable:0 [ 1152.889159][T26400] free:1196672 free_pcp:10030 free_cma:0 [ 1152.945465][ T809] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 1153.011686][T26400] Node 0 active_anon:107964kB inactive_anon:0kB active_file:82732kB inactive_file:161520kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:217704kB dirty:1512kB writeback:0kB shmem:71376kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:4096kB kernel_stack:18068kB pagetables:9476kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1153.115786][T26400] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:124kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1153.155021][ T809] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1153.240134][T26400] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1153.282821][T26400] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 1153.288762][T26400] Node 0 DMA32 free:827796kB boost:0kB min:34188kB low:42732kB high:51276kB reserved_highatomic:0KB free_highatomic:0KB active_anon:108164kB inactive_anon:0kB active_file:82732kB inactive_file:161520kB unevictable:1536kB writepending:1512kB zspages:0kB present:3129332kB managed:2552828kB mlocked:0kB bounce:0kB free_pcp:37684kB local_pcp:19652kB free_cma:0kB [ 1153.338238][T26400] lowmem_reserve[]: 0 0 0 0 0 [ 1153.352635][T26400] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:672kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:12kB free_cma:0kB [ 1153.396596][T26400] lowmem_reserve[]: 0 0 0 0 0 [ 1153.401896][T26451] netlink: 32 bytes leftover after parsing attributes in process `syz.6.5305'. [ 1153.404182][ T809] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1153.432157][T26400] Node 1 Normal free:3942604kB boost:0kB min:55704kB low:69628kB high:83552kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:1512kB local_pcp:0kB free_cma:0kB [ 1153.465786][T26400] lowmem_reserve[]: 0 0 0 0 0 [ 1153.481562][T26400] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1153.495114][ T809] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1153.504957][ T809] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1153.517986][ T809] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1153.532490][ T809] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1153.543017][ T809] usb 3-1: config 0 descriptor?? [ 1153.551207][T26453] netlink: 'syz.1.5306': attribute type 9 has an invalid length. [ 1153.605012][T26453] netem: incorrect gi model size [ 1153.611015][T26400] Node 0 DMA32: 3067*4kB (UM) 6485*8kB (UME) 3844*16kB (UME) 386*32kB (UME) 231*64kB (UME) 657*128kB (UME) 433*256kB (UME) 317*512kB (UME) 130*1024kB (UME) 2*2048kB (ME) 44*4096kB (M) = 827476kB [ 1153.630649][T26400] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1153.642409][T26400] Node 1 Normal: 2*4kB (M) 3*8kB (UM) 10*16kB (UM) 6*32kB [ 1153.643033][T26453] netem: change failed [ 1153.654918][T26400] (UM) 10*64kB (UM) 4*128kB (UM) 3*256kB (UM) 4*512kB (UM) 2*1024kB (UM) 4*2048kB (UM) 959*4096kB (M) = 3942656kB [ 1153.667498][T26400] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1153.683080][T26400] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 1153.701048][T26400] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1153.712128][T26400] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1153.752410][T26400] 79438 total pagecache pages [ 1153.760949][T26400] 0 pages in swap cache [ 1153.812133][T26400] Free swap = 124996kB [ 1153.816712][T26400] Total swap = 124996kB [ 1153.828039][T26400] 2097051 pages RAM [ 1153.832563][T26400] 0 pages HighMem/MovableOnly [ 1153.841882][T26400] 427061 pages reserved [ 1153.851364][T26400] 0 pages cma reserved [ 1153.981691][T26395] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1154.012462][ T809] plantronics 0003:047F:FFFF.007A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 1154.042918][ T29] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 1154.213067][ T29] usb 2-1: Using ep0 maxpacket: 8 [ 1154.219686][ T29] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 1154.230779][ T29] usb 2-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 1154.241734][ T29] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1154.260875][ T29] usb 2-1: Product: syz [ 1154.265544][ T29] usb 2-1: Manufacturer: syz [ 1154.271474][ T29] usb 2-1: SerialNumber: syz [ 1154.287801][ T29] usb 2-1: config 0 descriptor?? [ 1154.301010][ T29] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 1154.672450][ T809] usb 9-1: new high-speed USB device number 26 using dummy_hcd [ 1154.833921][ T809] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 1154.842052][ T809] usb 9-1: config 0 has no interface number 0 [ 1154.850371][ T809] usb 9-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1154.859600][ T809] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1154.867696][ T809] usb 9-1: Product: syz [ 1154.872151][ T809] usb 9-1: Manufacturer: syz [ 1154.877317][ T809] usb 9-1: SerialNumber: syz [ 1154.884845][ T809] usb 9-1: config 0 descriptor?? [ 1155.109199][ T809] dvb_usb_ec168 9-1:0.1: probe with driver dvb_usb_ec168 failed with error -71 [ 1155.127119][ T809] usb 9-1: USB disconnect, device number 26 [ 1155.492401][ T5674] usb 3-1: reset high-speed USB device number 97 using dummy_hcd [ 1155.632335][ T5674] usb 3-1: device descriptor read/64, error -32 [ 1155.872349][T16655] usb 10-1: new high-speed USB device number 23 using dummy_hcd [ 1155.872383][ T5674] usb 3-1: reset high-speed USB device number 97 using dummy_hcd [ 1155.923691][ T5681] usb 9-1: new high-speed USB device number 27 using dummy_hcd [ 1156.003565][ T5674] usb 3-1: device descriptor read/64, error -32 [ 1156.035890][T16655] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 1156.044206][T16655] usb 10-1: config 0 has no interface number 0 [ 1156.052060][T16655] usb 10-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1156.061760][T16655] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1156.069939][T16655] usb 10-1: Product: syz [ 1156.074308][T16655] usb 10-1: Manufacturer: syz [ 1156.079014][T16655] usb 10-1: SerialNumber: syz [ 1156.082412][ T5681] usb 9-1: Using ep0 maxpacket: 8 [ 1156.090269][T16655] usb 10-1: config 0 descriptor?? [ 1156.099146][ T5681] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 1156.111888][ T5681] usb 9-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 1156.121836][ T5681] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1156.130351][ T5681] usb 9-1: Product: syz [ 1156.134777][ T5681] usb 9-1: Manufacturer: syz [ 1156.139454][ T5681] usb 9-1: SerialNumber: syz [ 1156.145833][ T5681] usb 9-1: config 0 descriptor?? [ 1156.154641][ T5681] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 1156.252647][ T5674] usb 3-1: reset high-speed USB device number 97 using dummy_hcd [ 1156.272602][ T5674] usb 3-1: device descriptor read/8, error -32 [ 1156.313159][T16655] dvb_usb_ec168 10-1:0.1: probe with driver dvb_usb_ec168 failed with error -71 [ 1156.330109][T16655] usb 10-1: USB disconnect, device number 23 [ 1157.173114][T22581] usb 3-1: USB disconnect, device number 97 [ 1157.282753][T16658] usb 10-1: new high-speed USB device number 24 using dummy_hcd [ 1157.330241][ T29] gspca_zc3xx: reg_r err -71 [ 1157.338022][ T29] gspca_zc3xx 2-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 1157.350519][ T29] usb 2-1: USB disconnect, device number 39 [ 1157.452741][T16658] usb 10-1: Using ep0 maxpacket: 16 [ 1157.459985][T16658] usb 10-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1157.469790][T16658] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1157.482552][T16658] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1157.493995][T16658] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1157.503304][T16658] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1157.511434][T16658] usb 10-1: Product: syz [ 1157.515743][T16658] usb 10-1: Manufacturer: syz [ 1157.520548][T16658] usb 10-1: SerialNumber: syz [ 1157.531117][T16658] usb 10-1: 0:2 : does not exist [ 1157.622369][T22581] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 1157.785181][T22581] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 1157.795347][T22581] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1157.803460][T22581] usb 3-1: Product: syz [ 1157.807741][T22581] usb 3-1: SerialNumber: syz [ 1157.814444][T22581] usb 3-1: config 0 descriptor?? [ 1158.025906][T22581] hso 3-1:0.0: Failed to find INT IN ep [ 1158.227950][T26617] bond2: entered promiscuous mode [ 1158.243188][T26617] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1158.256745][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 1158.256760][ T30] audit: type=1326 audit(1781639873.517:3441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26586 comm="syz.2.5318" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f005e39ce59 code=0x7ffc0000 [ 1158.288859][ T30] audit: type=1326 audit(1781639873.517:3442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26586 comm="syz.2.5318" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f005e39ce59 code=0x7ffc0000 [ 1158.308711][T26587] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1158.314133][ T30] audit: type=1326 audit(1781639873.517:3443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26586 comm="syz.2.5318" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=300 compat=0 ip=0x7f005e39ce59 code=0x7ffc0000 [ 1158.349402][ T30] audit: type=1326 audit(1781639873.517:3444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26586 comm="syz.2.5318" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f005e39ce59 code=0x7ffc0000 [ 1158.376586][ T30] audit: type=1326 audit(1781639873.517:3445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26586 comm="syz.2.5318" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f005e39ce59 code=0x7ffc0000 [ 1158.401470][ T30] audit: type=1326 audit(1781639873.517:3446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26586 comm="syz.2.5318" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=301 compat=0 ip=0x7f005e39ce59 code=0x7ffc0000 [ 1158.426951][ T30] audit: type=1326 audit(1781639873.517:3447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26586 comm="syz.2.5318" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f005e39ce59 code=0x7ffc0000 [ 1158.437103][ T5709] usb 3-1: USB disconnect, device number 98 [ 1158.452847][ T30] audit: type=1326 audit(1781639873.517:3448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26586 comm="syz.2.5318" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f005e39ce59 code=0x7ffc0000 [ 1158.486037][ T30] audit: type=1326 audit(1781639873.517:3449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26586 comm="syz.2.5318" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f005e39ce59 code=0x7ffc0000 [ 1158.511172][ T30] audit: type=1326 audit(1781639873.517:3450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26586 comm="syz.2.5318" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f005e39ce59 code=0x7ffc0000 [ 1158.581325][T16658] usb 10-1: 1:0: failed to get current value for ch 0 (-22) [ 1158.611039][T16658] usb 10-1: USB disconnect, device number 24 [ 1158.631600][ T5626] udevd[5626]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1158.962368][T22595] Bluetooth: hci5: command 0x0406 tx timeout [ 1158.979652][ T5681] gspca_zc3xx: reg_r err -32 [ 1159.054018][T26682] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5324'. [ 1159.242350][T16658] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 1159.352357][T22581] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 1159.362710][ T5709] usb 10-1: new high-speed USB device number 25 using dummy_hcd [ 1159.393881][T16658] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1159.402063][T16658] usb 2-1: config 0 has no interface number 0 [ 1159.410119][T16658] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1159.419455][T16658] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1159.427547][T16658] usb 2-1: Product: syz [ 1159.432132][T16658] usb 2-1: Manufacturer: syz [ 1159.436777][T16658] usb 2-1: SerialNumber: syz [ 1159.442859][T16658] usb 2-1: config 0 descriptor?? [ 1159.514050][T22581] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1159.526007][T22581] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1159.528084][ T5709] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 1159.537011][T22581] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1159.555045][T22581] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1159.568060][T22581] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1159.577213][ T5681] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 1159.577422][ T5709] usb 10-1: config 0 has no interface number 0 [ 1159.583677][ T5681] gspca_zc3xx 9-1:0.0: probe with driver gspca_zc3xx failed with error -32 [ 1159.587907][T22581] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1159.610470][ T5709] usb 10-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1159.621240][T22581] usb 3-1: config 0 descriptor?? [ 1159.628264][ T5709] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1159.636654][ T5709] usb 10-1: Product: syz [ 1159.640940][ T5709] usb 10-1: Manufacturer: syz [ 1159.645705][ T5709] usb 10-1: SerialNumber: syz [ 1159.663985][ T5709] usb 10-1: config 0 descriptor?? [ 1159.675289][T16658] dvb_usb_ec168 2-1:0.1: probe with driver dvb_usb_ec168 failed with error -71 [ 1159.688597][T16658] usb 2-1: USB disconnect, device number 40 [ 1159.898412][ T5709] dvb_usb_ec168 10-1:0.1: probe with driver dvb_usb_ec168 failed with error -71 [ 1159.911925][ T5709] usb 10-1: USB disconnect, device number 25 [ 1159.920088][ T5635] udevd[5635]: setting mode of /dev/bus/usb/010/025 to 020664 failed: No such file or directory [ 1159.931931][ T5635] udevd[5635]: setting owner of /dev/bus/usb/010/025 to uid=0, gid=0 failed: No such file or directory [ 1160.005667][T16658] usb 9-1: USB disconnect, device number 27 [ 1160.061186][T26685] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1160.089347][T22581] plantronics 0003:047F:FFFF.007B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 1160.311117][ T50] Bluetooth: hci8: unexpected event 0x2f length: 509 > 260 [ 1160.499197][ T50] Bluetooth: hci7: unexpected event 0x2f length: 509 > 260 [ 1161.048132][T26770] FAULT_INJECTION: forcing a failure. [ 1161.048132][T26770] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1161.097741][T26770] CPU: 0 UID: 0 PID: 26770 Comm: syz.1.5331 Tainted: G L syzkaller #0 PREEMPT(full) [ 1161.097772][T26770] Tainted: [L]=SOFTLOCKUP [ 1161.097779][T26770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1161.097792][T26770] Call Trace: [ 1161.097812][T26770] [ 1161.097822][T26770] dump_stack_lvl+0xe8/0x150 [ 1161.097866][T26770] should_fail_ex+0x40c/0x560 [ 1161.097891][T26770] _copy_from_user+0x2d/0xb0 [ 1161.097922][T26770] __ia32_sys_rt_sigreturn+0x362/0x8c0 [ 1161.097961][T26770] ? trace_irq_enable+0x3b/0x140 [ 1161.097982][T26770] ? __pfx___ia32_sys_rt_sigreturn+0x10/0x10 [ 1161.098003][T26770] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1161.098028][T26770] ? lock_release+0x4b/0x3c0 [ 1161.098050][T26770] ? rcu_is_watching+0x15/0xb0 [ 1161.098067][T26770] ? rcu_is_watching+0x15/0xb0 [ 1161.098082][T26770] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1161.098097][T26770] do_syscall_64+0x174/0x580 [ 1161.098117][T26770] ? clear_bhb_loop+0x40/0x90 [ 1161.098133][T26770] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1161.098147][T26770] RIP: 0033:0x7ff0a853e1d9 [ 1161.098160][T26770] Code: 11 06 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 0c 25 [ 1161.098173][T26770] RSP: 002b:00007ff0a9465a80 EFLAGS: 00000202 ORIG_RAX: 000000000000000f [ 1161.098189][T26770] RAX: ffffffffffffffda RBX: 00007ff0a8815fa0 RCX: 00007ff0a853e1d9 [ 1161.098200][T26770] RDX: 00007ff0a9465a80 RSI: 00007ff0a9465bb0 RDI: 0000000000000021 [ 1161.098210][T26770] RBP: 00007ff0a9466090 R08: 0000000000000000 R09: 0000000000000000 [ 1161.098220][T26770] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001 [ 1161.098229][T26770] R13: 00007ff0a8816038 R14: 00007ff0a8815fa0 R15: 00007ff0a893fa48 [ 1161.098245][T26770] [ 1161.454498][T26784] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5335'. [ 1161.532365][T15874] usb 3-1: reset high-speed USB device number 99 using dummy_hcd [ 1161.682480][T15874] usb 3-1: device descriptor read/64, error -32 [ 1161.802360][ T29] usb 10-1: new high-speed USB device number 26 using dummy_hcd [ 1161.932419][T15874] usb 3-1: reset high-speed USB device number 99 using dummy_hcd [ 1161.954362][ T29] usb 10-1: Using ep0 maxpacket: 8 [ 1161.964250][ T29] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 1161.980384][ T29] usb 10-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 1161.994817][ T29] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1162.014012][ T5709] usb 9-1: new high-speed USB device number 28 using dummy_hcd [ 1162.025948][ T29] usb 10-1: Product: syz [ 1162.033181][ T29] usb 10-1: Manufacturer: syz [ 1162.040756][ T29] usb 10-1: SerialNumber: syz [ 1162.051997][ T29] usb 10-1: config 0 descriptor?? [ 1162.072355][T15874] usb 3-1: device descriptor read/64, error -32 [ 1162.079135][ T29] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 1162.175070][ T5709] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 1162.188802][ T5709] usb 9-1: config 0 has no interface number 0 [ 1162.199014][ T5709] usb 9-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1162.209360][ T5709] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1162.217981][ T5709] usb 9-1: Product: syz [ 1162.222995][ T5709] usb 9-1: Manufacturer: syz [ 1162.228041][ T5709] usb 9-1: SerialNumber: syz [ 1162.238922][ T5709] usb 9-1: config 0 descriptor?? [ 1162.312467][T15874] usb 3-1: reset high-speed USB device number 99 using dummy_hcd [ 1162.332678][T15874] usb 3-1: device descriptor read/8, error -32 [ 1162.469038][ T5709] dvb_usb_ec168 9-1:0.1: probe with driver dvb_usb_ec168 failed with error -71 [ 1162.490917][ T5709] usb 9-1: USB disconnect, device number 28 [ 1162.852358][T15874] usb 3-1: reset high-speed USB device number 99 using dummy_hcd [ 1162.873549][T15874] usb 3-1: device firmware changed [ 1162.879258][T16658] usb 3-1: USB disconnect, device number 99 [ 1163.024230][T16658] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 1163.184205][T16658] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1163.193472][T16658] usb 3-1: config 0 has no interface number 0 [ 1163.205326][T16658] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1163.223028][T16658] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1163.237455][T16658] usb 3-1: Product: syz [ 1163.245288][T16658] usb 3-1: Manufacturer: syz [ 1163.253612][T16658] usb 3-1: SerialNumber: syz [ 1163.269284][T16658] usb 3-1: config 0 descriptor?? [ 1163.521225][T16658] dvb_usb_ec168 3-1:0.1: probe with driver dvb_usb_ec168 failed with error -71 [ 1163.537317][T16658] usb 3-1: USB disconnect, device number 100 [ 1164.021310][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 1164.021327][ T30] audit: type=1400 audit(1781639879.277:3474): apparmor="DENIED" operation="stack" class="file" info="label not found" error=-2 profile="unconfined" name=26260A3A0CCA7C2B08C9DFF78977F306B457CA93031D371D06D2E59E863E2FE54118A4EE43068DF6BA88E1B6DC3A2F2C91AE1C817D6B6014270B8BC51F73363852F4F12EE955F464599F0C485D pid=26878 comm="syz.8.5342" [ 1164.342928][T16663] usb 3-1: new full-speed USB device number 101 using dummy_hcd [ 1164.495610][T16663] usb 3-1: config 0 has an invalid interface number: 231 but max is 0 [ 1164.505452][T16663] usb 3-1: config 0 has no interface number 0 [ 1164.511850][T16663] usb 3-1: config 0 interface 231 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 1164.525113][T16663] usb 3-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 1164.534805][T16663] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1164.543144][T16663] usb 3-1: Product: syz [ 1164.547405][T16663] usb 3-1: Manufacturer: syz [ 1164.552019][T16663] usb 3-1: SerialNumber: syz [ 1164.558311][T16663] usb 3-1: config 0 descriptor?? [ 1164.567643][T26883] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22 [ 1164.581772][T16663] plusb 3-1:0.231 usb0: register 'plusb' at usb-dummy_hcd.2-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1, f6:c3:31:62:1a:44 [ 1164.722386][ T5709] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 1164.893847][ T29] gspca_zc3xx: reg_r err -32 [ 1164.901960][ T5709] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1164.923674][ T5709] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1164.970679][ T5709] usb 2-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00 [ 1164.991100][ T5709] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1165.022909][ T5709] usb 2-1: config 0 descriptor?? [ 1165.049409][ T5709] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1165.203305][ T31] INFO: task syz.3.4685:23140 blocked for more than 143 seconds. [ 1165.215423][ T31] Tainted: G L syzkaller #0 [ 1165.224343][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1165.236025][ T31] task:syz.3.4685 state:D stack:24904 pid:23140 tgid:23139 ppid:22600 task_flags:0x480040 flags:0x00080002 [ 1165.252498][ T31] Call Trace: [ 1165.265592][ T31] [ 1165.274364][ T31] __schedule+0x17d9/0x56c0 [ 1165.285526][ T31] ? kobject_uevent_env+0x375/0x9e0 [ 1165.297951][ T31] ? rcu_is_watching+0x15/0xb0 [ 1165.311629][ T31] ? __se_sys_ioctl+0xfc/0x170 [ 1165.323066][ T31] ? find_inode_fast+0xd2/0x740 [ 1165.333317][ T31] ? rcu_is_watching+0x15/0xb0 [ 1165.344694][ T31] ? __pfx___schedule+0x10/0x10 [ 1165.358840][ T31] ? schedule+0x90/0x360 [ 1165.378113][ T31] ? rcu_is_watching+0x15/0xb0 [ 1165.396086][ T31] ? lock_release+0x4b/0x3c0 [ 1165.417568][ T31] schedule+0x164/0x360 [ 1165.428211][ T31] schedule_timeout+0xc0/0x2c0 [ 1165.442203][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 1165.457288][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 1165.478718][ T31] ? rcu_is_watching+0x15/0xb0 [ 1165.500734][ T31] ? rcu_is_watching+0x15/0xb0 [ 1165.502445][ T29] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 1165.519365][ T31] ? trace_irq_enable+0x3b/0x140 [ 1165.520705][ T29] gspca_zc3xx 10-1:0.0: probe with driver gspca_zc3xx failed with error -32 [ 1165.525491][ T31] ? wait_for_completion+0x272/0x5e0 [ 1165.562374][ T31] wait_for_completion+0x2ca/0x5e0 [ 1165.579762][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 1165.595723][ T31] ? kobject_put+0x50f/0x550 [ 1165.607672][ T31] i2c_del_adapter+0x281/0x430 [ 1165.620095][ T31] ? __pfx_i2c_del_adapter+0x10/0x10 [ 1165.630853][ T31] ? kfree+0x4d/0x640 [ 1165.640769][ T31] dvb_usb_i2c_exit+0x64/0xb0 [ 1165.651489][ T31] dvb_usb_device_exit+0x1cb/0x360 [ 1165.664106][ T31] ? __pfx_rpm_resume+0x10/0x10 [ 1165.674802][ T31] ? __pfx_dvb_usb_device_exit+0x10/0x10 [ 1165.685614][ T31] ? rcu_is_watching+0x15/0xb0 [ 1165.698443][ T31] ? rcu_is_watching+0x15/0xb0 [ 1165.716629][ T31] ? usb_disable_interface+0x31d/0x350 [ 1165.727771][ T31] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1165.740876][ T31] usb_unbind_interface+0x295/0x9f0 [ 1165.752076][ T31] ? up_write+0x19f/0x4a0 [ 1165.762506][ T31] ? kernfs_remove_by_name_ns+0x101/0x140 [ 1165.776254][ T31] ? __pfx_usb_unbind_interface+0x10/0x10 [ 1165.793237][ T31] device_release_driver_internal+0x4f5/0x880 [ 1165.806117][ T31] bus_remove_device+0x444/0x560 [ 1165.811125][ T31] ? __pfx_bus_remove_device+0x10/0x10 [ 1165.816841][ T31] ? kernfs_remove_by_name_ns+0x101/0x140 [ 1165.823732][ T31] device_del+0x524/0x8f0 [ 1165.828220][ T31] ? __pfx_device_del+0x10/0x10 [ 1165.833336][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1165.838505][ T31] usb_disable_device+0x3d4/0x8d0 [ 1165.844512][ T31] usb_disconnect+0x346/0x9a0 [ 1165.851239][ T31] hub_quiesce+0x171/0x330 [ 1165.855954][ T31] hub_disconnect+0xc6/0x450 [ 1165.860763][ T31] usb_unbind_interface+0x295/0x9f0 [ 1165.886967][ T31] ? up_write+0x19f/0x4a0 [ 1165.948764][ T29] usb 10-1: USB disconnect, device number 26 [ 1165.969317][ T31] ? kernfs_remove_by_name_ns+0x101/0x140 [ 1165.999616][ T31] ? __pfx_usb_unbind_interface+0x10/0x10 [ 1166.031097][ T31] device_release_driver_internal+0x4f5/0x880 [ 1166.046271][ T31] proc_disconnect_claim+0x34a/0x3e0 [ 1166.073509][ T31] ? __pfx_proc_disconnect_claim+0x10/0x10 [ 1166.111968][ T31] usbdev_ioctl+0x132d/0x2120 [ 1166.118416][ T31] ? __pfx_usbdev_ioctl+0x10/0x10 [ 1166.123772][ T31] ? __fget_files+0x2a/0x420 [ 1166.128524][ T31] ? __fget_files+0x3a2/0x420 [ 1166.133684][ T31] ? __fget_files+0x2a/0x420 [ 1166.138403][ T31] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1166.143768][ T31] ? __pfx_usbdev_ioctl+0x10/0x10 [ 1166.149279][ T31] __se_sys_ioctl+0xfc/0x170 [ 1166.154342][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1166.160547][ T31] do_syscall_64+0x174/0x580 [ 1166.166056][ T31] ? trace_irq_disable+0x3b/0x140 [ 1166.171220][ T31] ? clear_bhb_loop+0x40/0x90 [ 1166.176370][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1166.182701][ T31] RIP: 0033:0x7f0293f9ce59 [ 1166.187447][ T31] RSP: 002b:00007f0294dfb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1166.196431][ T31] RAX: ffffffffffffffda RBX: 00007f0294215fa0 RCX: 00007f0293f9ce59 [ 1166.205406][ T31] RDX: 0000200000002600 RSI: 000000008108551b RDI: 0000000000000004 [ 1166.213964][ T31] RBP: 00007f0294032d6f R08: 0000000000000000 R09: 0000000000000000 [ 1166.222146][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1166.231713][ T31] R13: 00007f0294216038 R14: 00007f0294215fa0 R15: 00007f029433fa48 [ 1166.240675][ T31] [ 1166.244556][ T31] INFO: task syz.3.4685:23142 blocked for more than 144 seconds. [ 1166.254246][ T31] Tainted: G L syzkaller #0 [ 1166.260887][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1166.281622][ T31] task:syz.3.4685 state:D stack:29144 pid:23142 tgid:23139 ppid:22600 task_flags:0x400040 flags:0x00080002 [ 1166.294015][ T31] Call Trace: [ 1166.297403][ T31] [ 1166.300400][ T31] __schedule+0x17d9/0x56c0 [ 1166.304991][ T31] ? __pfx___schedule+0x10/0x10 [ 1166.309881][ T31] ? rcu_is_watching+0x15/0xb0 [ 1166.314780][ T31] ? rcu_is_watching+0x15/0xb0 [ 1166.319635][ T31] ? lock_release+0x4b/0x3c0 [ 1166.324466][ T31] ? rcu_is_watching+0x15/0xb0 [ 1166.329318][ T31] schedule+0x164/0x360 [ 1166.334059][ T31] schedule_preempt_disabled+0x13/0x30 [ 1166.339578][ T31] __mutex_lock+0x7bf/0x1550 [ 1166.344858][ T31] ? __mutex_lock+0x5d4/0x1550 [ 1166.349673][ T31] ? usbdev_ioctl+0x13f/0x2120 [ 1166.355011][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1166.360103][ T31] ? hook_file_ioctl+0x1f0/0x5c0 [ 1166.365131][ T31] usbdev_ioctl+0x13f/0x2120 [ 1166.369773][ T31] ? __pfx_usbdev_ioctl+0x10/0x10 [ 1166.374998][ T31] ? __fget_files+0x2a/0x420 [ 1166.379800][ T31] ? __fget_files+0x3a2/0x420 [ 1166.384686][ T31] ? __fget_files+0x2a/0x420 [ 1166.389343][ T31] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1166.394426][ T31] ? __pfx_usbdev_ioctl+0x10/0x10 [ 1166.399513][ T31] __se_sys_ioctl+0xfc/0x170 [ 1166.404257][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1166.410454][ T31] do_syscall_64+0x174/0x580 [ 1166.415158][ T31] ? trace_irq_disable+0x3b/0x140 [ 1166.420234][ T31] ? clear_bhb_loop+0x40/0x90 [ 1166.424976][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1166.430947][ T31] RIP: 0033:0x7f0293f9ce59 [ 1166.435464][ T31] RSP: 002b:00007f0294dda028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1166.444746][ T31] RAX: ffffffffffffffda RBX: 00007f0294216090 RCX: 00007f0293f9ce59 [ 1166.452881][ T31] RDX: 0000200000000880 RSI: 000000008038550a RDI: 0000000000000004 [ 1166.461704][ T31] RBP: 00007f0294032d6f R08: 0000000000000000 R09: 0000000000000000 [ 1166.469747][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1166.477834][ T31] R13: 00007f0294216128 R14: 00007f0294216090 R15: 00007f029433fa48 [ 1166.489924][ T31] [ 1166.493553][ T31] INFO: lockdep is turned off. [ 1166.504822][ T31] NMI backtrace for cpu 0 [ 1166.504840][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1166.504864][ T31] Tainted: [L]=SOFTLOCKUP [ 1166.504870][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1166.504883][ T31] Call Trace: [ 1166.504889][ T31] [ 1166.504896][ T31] dump_stack_lvl+0xe8/0x150 [ 1166.504917][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 1166.504936][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1166.504967][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1166.504987][ T31] sys_info+0x135/0x170 [ 1166.505002][ T31] watchdog+0xfd7/0x1030 [ 1166.505028][ T31] ? watchdog+0x1c7/0x1030 [ 1166.505053][ T31] kthread+0x388/0x470 [ 1166.505069][ T31] ? __pfx_watchdog+0x10/0x10 [ 1166.505090][ T31] ? __pfx_kthread+0x10/0x10 [ 1166.505107][ T31] ret_from_fork+0x514/0xb70 [ 1166.505125][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1166.505142][ T31] ? __switch_to+0xc89/0x1420 [ 1166.505165][ T31] ? __pfx_kthread+0x10/0x10 [ 1166.505181][ T31] ret_from_fork_asm+0x1a/0x30 [ 1166.505206][ T31] [ 1166.505231][ T31] Sending NMI from CPU 0 to CPUs 1: [ 1166.621745][ C1] NMI backtrace for cpu 1 [ 1166.621763][ C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 1166.621784][ C1] Tainted: [L]=SOFTLOCKUP [ 1166.621790][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1166.621799][ C1] RIP: 0010:lock_release+0xb/0x3c0 [ 1166.621831][ C1] Code: bf 2f 00 00 00 e9 06 ff ff ff 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 41 57 41 56 41 55 <41> 54 53 48 83 ec 30 49 89 f5 49 89 fe 65 48 8b 05 f0 1e 97 11 48 [ 1166.621846][ C1] RSP: 0018:ffffc900001d76b8 EFLAGS: 00000246 [ 1166.621863][ C1] RAX: 0000000000000000 RBX: ffffc900001d7798 RCX: ffffc900001d7b88 [ 1166.621874][ C1] RDX: ffffc900001d7701 RSI: ffffffff8176a21f RDI: ffffffff8e95da20 [ 1166.621886][ C1] RBP: 1ffffffff21a4801 R08: ffffc900001d7b70 R09: 0000000000000000 [ 1166.621896][ C1] R10: ffffc900001d77d8 R11: fffff5200003aefd R12: ffffc900001d0000 [ 1166.621908][ C1] R13: ffffffff8176a21f R14: ffffc900001d7788 R15: ffffc900001d7b80 [ 1166.621920][ C1] FS: 0000000000000000(0000) GS:ffff88812538f000(0000) knlGS:0000000000000000 [ 1166.621932][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1166.621943][ C1] CR2: 00007f005b9e8158 CR3: 000000008ba1c000 CR4: 00000000003526f0 [ 1166.621957][ C1] Call Trace: [ 1166.621962][ C1] [ 1166.621969][ C1] ? unwind_next_frame+0x8f/0x2550 [ 1166.621990][ C1] unwind_next_frame+0x1baa/0x2550 [ 1166.622011][ C1] ? slab_free_after_rcu_debug+0x12a/0x220 [ 1166.622027][ C1] ? unwind_next_frame+0x8f/0x2550 [ 1166.622044][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1166.622067][ C1] arch_stack_walk+0x11b/0x150 [ 1166.622086][ C1] ? rcu_core+0x78b/0x10a0 [ 1166.622101][ C1] stack_trace_save+0xa9/0x100 [ 1166.622121][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 1166.622143][ C1] ? kasan_save_track+0x4f/0x80 [ 1166.622162][ C1] ? kasan_save_track+0x3e/0x80 [ 1166.622180][ C1] ? kasan_save_free_info+0x40/0x50 [ 1166.622196][ C1] ? __kasan_slab_free+0x5c/0x80 [ 1166.622214][ C1] ? kfree+0x1c5/0x640 [ 1166.622230][ C1] ? slab_free_after_rcu_debug+0x62/0x220 [ 1166.622244][ C1] ? handle_softirqs+0x225/0x840 [ 1166.622267][ C1] ? run_ksoftirqd+0x36/0x60 [ 1166.622291][ C1] kasan_save_track+0x3e/0x80 [ 1166.622309][ C1] ? kasan_save_track+0x3e/0x80 [ 1166.622328][ C1] ? kasan_save_free_info+0x40/0x50 [ 1166.622343][ C1] ? __kasan_slab_free+0x5c/0x80 [ 1166.622362][ C1] ? slab_free_after_rcu_debug+0x12a/0x220 [ 1166.622393][ C1] kasan_save_free_info+0x40/0x50 [ 1166.622410][ C1] __kasan_slab_free+0x5c/0x80 [ 1166.622432][ C1] slab_free_after_rcu_debug+0x12a/0x220 [ 1166.622446][ C1] ? __pfx_slab_free_after_rcu_debug+0x10/0x10 [ 1166.622461][ C1] ? rcu_core+0x70d/0x10a0 [ 1166.622474][ C1] rcu_core+0x78b/0x10a0 [ 1166.622492][ C1] ? __pfx_rcu_core+0x10/0x10 [ 1166.622505][ C1] ? try_to_wake_up+0x8c5/0x14d0 [ 1166.622522][ C1] ? rcu_is_watching+0x15/0xb0 [ 1166.622539][ C1] handle_softirqs+0x225/0x840 [ 1166.622561][ C1] ? preempt_schedule_common+0x82/0xd0 [ 1166.622580][ C1] ? run_ksoftirqd+0x36/0x60 [ 1166.622602][ C1] run_ksoftirqd+0x36/0x60 [ 1166.622622][ C1] smpboot_thread_fn+0x57c/0xa80 [ 1166.622645][ C1] ? smpboot_thread_fn+0x4e/0xa80 [ 1166.622668][ C1] kthread+0x388/0x470 [ 1166.622682][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 1166.622704][ C1] ? __pfx_kthread+0x10/0x10 [ 1166.622717][ C1] ret_from_fork+0x514/0xb70 [ 1166.622733][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1166.622747][ C1] ? __switch_to+0xc89/0x1420 [ 1166.622769][ C1] ? __pfx_kthread+0x10/0x10 [ 1166.622801][ C1] ret_from_fork_asm+0x1a/0x30 [ 1166.622836][ C1] [ 1166.979148][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1166.986057][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1166.996779][ T31] Tainted: [L]=SOFTLOCKUP [ 1167.001116][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1167.011192][ T31] Call Trace: [ 1167.014485][ T31] [ 1167.017434][ T31] vpanic+0x56c/0xa60 [ 1167.021470][ T31] ? __pfx___schedule+0x10/0x10 [ 1167.026341][ T31] ? __pfx_vpanic+0x10/0x10 [ 1167.030869][ T31] panic+0xc5/0xd0 [ 1167.034611][ T31] ? __pfx_panic+0x10/0x10 [ 1167.039045][ T31] ? preempt_schedule_common+0x82/0xd0 [ 1167.044528][ T31] ? preempt_schedule_thunk+0x16/0x40 [ 1167.049968][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 1167.056161][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 1167.062347][ T31] watchdog+0x1030/0x1030 [ 1167.066716][ T31] ? watchdog+0x1c7/0x1030 [ 1167.071172][ T31] kthread+0x388/0x470 [ 1167.075271][ T31] ? __pfx_watchdog+0x10/0x10 [ 1167.079971][ T31] ? __pfx_kthread+0x10/0x10 [ 1167.084577][ T31] ret_from_fork+0x514/0xb70 [ 1167.089176][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1167.094290][ T31] ? __switch_to+0xc89/0x1420 [ 1167.098978][ T31] ? __pfx_kthread+0x10/0x10 [ 1167.103582][ T31] ret_from_fork_asm+0x1a/0x30 [ 1167.108366][ T31] [ 1167.111979][ T31] Kernel Offset: disabled [ 1167.116308][ T31] Rebooting in 86400 seconds..