last executing test programs: 24m46.650571822s ago: executing program 32 (id=2014): syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea00090587033b"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x10000) r0 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x3010, 0x0, 0x290}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000340)={0xffffffffffffffff}, 0x111, 0x5}}, 0x62) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @ib_path={0x0, r4, 0x1, 0x1, 0x36}}, 0x20) r5 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r5, &(0x7f0000000100)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e22, @private=0xa010100}}, 0x24) connect$rxrpc(r5, &(0x7f00000001c0)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e21, 0x2, @mcast1, 0x7}}, 0x24) r6 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x717e, 0x100, 0x14, 0x150}, &(0x7f0000000140)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}) io_uring_enter(r6, 0x3516, 0x0, 0x0, 0x0, 0x0) listen(r5, 0x9) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r10, 0x1, 0x70bd2b, 0x0, {{}, {}, {0x4c, 0x18, {0x3, @link='broadcast-link\x00'}}}}, 0x68}}, 0x20000004) r11 = openat$full(0xffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) r12 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240), r11) sendmsg$TIPC_CMD_RESET_LINK_STATS(r11, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r12, 0x100, 0x70bd29, 0x25dfdbfe, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20040040}, 0x8) 18m55.177971748s ago: executing program 4 (id=3492): socket(0x10, 0x5, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xffffd000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002c00)={r5, 0x18000000000002a0, 0x42, 0x0, &(0x7f0000000500)="b9ff0300600d698cb89e14f008001f000c0cae0e4000632177fbac14140ee934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010108038da1924425181aa5", 0x0, 0x100, 0x60000000, 0x5c, 0xc0, &(0x7f0000000000), &(0x7f0000002c80)="8dc92a8ff39080a675b6565efa3ed46f2a2756e43abbfd8c44686c04d6a0c42f2599fc2b73f432c834dac249597b646035045af99decf86f5b32dc0404e599f56091e15e581ff6805ee283c0313298a5b8ba1c84f1850c217b5a2c2bc547eaf4585e5ba878d1660fa871a275fb61d1fec75942919083919f8d8fdad79615bc5d2d3fa40e054d38d49dfbebc2f137fc7110"}, 0x48) ioctl$KVM_IRQFD(r0, 0x4020ae76, &(0x7f0000000500)={0xffffffffffffffff, 0x3, 0x2}) 18m52.825877622s ago: executing program 4 (id=3495): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket(0x1e, 0x4, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000) close_range(r2, 0xffffffffffffffff, 0x0) 18m52.659232869s ago: executing program 4 (id=3497): getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff3}}}, 0x24}}, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xeec}, 0x0, &(0x7f00000010c0)={0x0, 0x100000001, 0xfffffffffffffffb}, &(0x7f0000000300)={0x0, 0x3938700}, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) 18m51.972984766s ago: executing program 4 (id=3501): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000b00)={0xa, 0x4e22, 0x100007, @remote, 0xa}, 0x1c) connect$pppl2tp(r0, &(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x5, 0x0, {0xa, 0x0, 0xf9d, @private2}}}, 0x32) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r2, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) 18m51.738998505s ago: executing program 4 (id=3504): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) syz_open_dev$loop(&(0x7f0000000700), 0x10, 0x202a80) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000001540)={'wg2\x00'}) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'vlan1\x00', 0x0}) sendto$packet(r5, &(0x7f0000000140)="3303120081fd140000007ef570235f", 0xf, 0x40008c1, &(0x7f00000000c0)={0x11, 0x2, r7, 0x1, 0xcf, 0x6, @local}, 0x14) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000032c0)={'tunl0\x00', &(0x7f0000003240)={'gretap0\x00', 0x0, 0x700, 0x7800, 0xf0000000, 0x3, {{0x5, 0x4, 0x2, 0x0, 0x14, 0x65, 0x0, 0xc0, 0x2f, 0x0, @local, @remote}}}}) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000003300)) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0xe) 18m50.249657966s ago: executing program 4 (id=3508): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000140000e5b7030000000700008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) open(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$igmp6(0xa, 0x3, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002ac0)={0x1a, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2000}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r5}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x470, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x200, 0x230, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4d0) 18m47.866776316s ago: executing program 5 (id=3516): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x94) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)="dc", 0x1}], 0x8) 18m47.633665503s ago: executing program 5 (id=3517): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x3, 0x0, 0x0, &(0x7f0000000200)='syzkaller\x00', 0xf97d, 0x64, &(0x7f0000000280)=""/100, 0x41000, 0x10, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000a40)={0x1, 0x4, 0x7}, 0x10, 0x0, r1, 0x0, &(0x7f0000000ac0)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x60000000}, 0x94) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800800040000000000050017"], 0x44}}, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, 0x0, 0x0) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r4, &(0x7f0000000580)="17", 0xfdef, 0x10008095, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x44}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r3, 0x0, 0x5}, 0x18) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) socket$inet6_tcp(0xa, 0x1, 0x0) inotify_init1(0x800) r6 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe00}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) connect$pppl2tp(r6, 0x0, 0x0) 18m47.410759671s ago: executing program 5 (id=3520): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x8, 0x3, 0x8, 0x0, 0x0, 0x2, 0x0, 0x1, 0xf2, 0x1, 0x81, 0x2c, 0x0, 0x3, 0xff, 0x6, 0x1, 0xfd, 0x2, '\x00', 0x1, 0xffffffffffffffff}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000000000000070000040"]) 18m46.999195674s ago: executing program 5 (id=3523): syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000000000b703000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r0}, 0x10) setitimer(0x2, 0x0, 0x0) 18m45.606043125s ago: executing program 5 (id=3527): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000200)={0x6, &(0x7f0000000040)=[{0x5, 0x3, 0x13, 0x3}, {0x6, 0x4, 0xe, 0x1ff}, {0x6, 0x2, 0x7, 0xb}, {0x4, 0x89, 0xb, 0xd}, {0x4, 0x3, 0x33, 0x71e9f1b1}, {0x6, 0x40, 0x5, 0x7}]}, 0x8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x78, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_REPLY={0x14, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8}]}]}, 0x78}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000900)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000f0000001c0007800c000400002e0000000000000c0003"], 0x30}}, 0x0) 18m44.420628456s ago: executing program 5 (id=3529): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010005000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r2}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 18m25.215195957s ago: executing program 33 (id=3537): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000074"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x18) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r8, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$inet(r1, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0xff0f}], 0x1}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x10) recvmsg(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) 18m24.92665699s ago: executing program 34 (id=3521): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0) syz_usb_disconnect(r0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x200) syz_usb_disconnect(r1) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCRMFF(r1, 0x4004550d, 0x0) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000780)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x20, 0x1, 0x2, "fdc1"}, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000200)=ANY=[@ANYBLOB="40f4ff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$char_usb(r3, &(0x7f00000005c0)=""/33, 0x21) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r4 = syz_open_dev$hiddev(0x0, 0x2, 0x80000) ioctl$HIDIOCGFIELDINFO(r4, 0xc038480a, &(0x7f0000000040)={0x1, 0x100, 0x959e, 0x6, 0x92, 0x3, 0x7, 0xc0e, 0x4, 0x5, 0x9, 0x5833, 0x4, 0x101}) r5 = syz_usb_connect(0x2, 0x51, &(0x7f00000001c0)=ANY=[@ANYBLOB="120101024cf1c50863070210845f0102030109023f0001000000000904000005ff87e7000905ee63dd0000000009050300000000000009050cf2010002060209050f00000040"], &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r5, &(0x7f0000000340)={0x2c, &(0x7f0000000080)={0x20, 0x23, 0x2, {0x2, 0x21}}, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x140c}}, &(0x7f0000000240)={0x0, 0xf, 0x33, {0x5, 0xf, 0x33, 0x3, [@wireless={0xb, 0x10, 0x1, 0xc, 0x8a, 0x7, 0x0, 0x4, 0x26}, @ssp_cap={0x1c, 0x10, 0xa, 0x46, 0x4, 0x18302c8, 0x870f, 0x7f, [0xf, 0xf0, 0xf, 0xff00]}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x1, 0x8, 0x5}]}}, &(0x7f00000002c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x7f, 0x60, 0xc, 0xe0, "00f450f8", "8545a51d"}}, &(0x7f0000000300)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x8, 0x10, 0x3, 0x3, 0x0, 0x6, 0x800}}}, &(0x7f0000000780)={0x84, &(0x7f0000000380)={0x0, 0x3, 0x4, "3c724cf1"}, 0x0, &(0x7f0000000400)={0x0, 0x8, 0x1}, &(0x7f0000000440)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f0000000840)=ANY=[], &(0x7f00000004c0)={0x40, 0x7, 0x2}, &(0x7f0000000500)={0x40, 0x9, 0x1, 0x81}, &(0x7f0000000540)={0x40, 0xb, 0x2, "f3d5"}, &(0x7f0000000580)={0x40, 0xf, 0x2, 0xa}, &(0x7f00000005c0)={0x40, 0x13, 0x6, @local}, &(0x7f0000000600)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000640)={0x40, 0x19, 0x2, "4488"}, &(0x7f0000000680)={0x40, 0x1a, 0x2}, &(0x7f00000006c0)={0x40, 0x1c, 0x1, 0x8}, &(0x7f0000000700)={0x40, 0x1e, 0x1, 0xff}, &(0x7f0000000740)={0x40, 0x21, 0x1, 0x1}}) 18m24.804962511s ago: executing program 35 (id=3530): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 18m24.745127388s ago: executing program 36 (id=3529): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010005000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r2}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 18m24.670398063s ago: executing program 37 (id=3508): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000140000e5b7030000000700008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) open(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$igmp6(0xa, 0x3, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002ac0)={0x1a, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2000}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r5}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x470, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x200, 0x230, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4d0) 17m51.984619686s ago: executing program 6 (id=3581): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x6}]}, 0x10) socket(0x2, 0x3, 0x6) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_emit_ethernet(0x24, &(0x7f0000000600)={@multicast, @link_local, @void, {@arp={0x806, @generic={0x310, 0x7, 0x6, 0x0, 0x4, @random="7e5a7e942a3a", "", @remote, "ad79"}}}}, 0x0) 17m51.605005158s ago: executing program 6 (id=3585): r0 = socket$tipc(0x1e, 0x4, 0x0) connect$tipc(r0, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x5}}, 0x10) getsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000140), &(0x7f0000000180)=0x4) 17m51.305315611s ago: executing program 6 (id=3590): socket(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) dup(0xffffffffffffffff) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x1, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) readv(r2, &(0x7f0000000300)=[{&(0x7f00000078c0)=""/86, 0x56}], 0x1) 17m49.849705851s ago: executing program 6 (id=3597): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000400)='sched_switch\x00', r0}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="050000000a000000324900008000000000010000", @ANYRES32=0x1, @ANYBLOB="0300000000001c00000000000009000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000020000000000000000"], 0x50) 17m48.941415508s ago: executing program 6 (id=3599): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x20002, 0x0) ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f0000000040)) 17m48.141850337s ago: executing program 6 (id=3600): bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_pidfd_open(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000004000000000000000000850000002300"], &(0x7f0000000180)='GPL\x00', 0x4, 0x8f, &(0x7f00000002c0)=""/143}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000380)='sched_switch\x00', r3}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f0000000000)) timer_create(0x4, 0x0, 0x0) tkill(0x0, 0x21) r4 = syz_open_dev$usbmon(&(0x7f0000000140), 0x0, 0x2000) ioctl$MON_IOCX_MFETCH(r4, 0xc0109207, &(0x7f00000002c0)={&(0x7f0000000280)=[0x0], 0x1, 0x7}) 17m33.007467473s ago: executing program 38 (id=3600): bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_pidfd_open(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000004000000000000000000850000002300"], &(0x7f0000000180)='GPL\x00', 0x4, 0x8f, &(0x7f00000002c0)=""/143}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000380)='sched_switch\x00', r3}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f0000000000)) timer_create(0x4, 0x0, 0x0) tkill(0x0, 0x21) r4 = syz_open_dev$usbmon(&(0x7f0000000140), 0x0, 0x2000) ioctl$MON_IOCX_MFETCH(r4, 0xc0109207, &(0x7f00000002c0)={&(0x7f0000000280)=[0x0], 0x1, 0x7}) 2m37.934773183s ago: executing program 8 (id=6892): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) r1 = openat$vim2m(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000080)={0xfb9, 0x3, 0x3, 0x0, 0x40}) ioctl$USBDEVFS_CONTROL(r0, 0xc0105500, &(0x7f0000000000)={0x80, 0x6, 0x8, 0x0, 0x0, 0x101, 0x0}) 2m37.669061347s ago: executing program 8 (id=6893): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = gettid() tkill(r2, 0x100) r3 = syz_io_uring_setup(0x10d, &(0x7f0000000540)={0x0, 0xd4bb, 0x0, 0xfffffffd}, &(0x7f0000000380), &(0x7f0000000280)) r4 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000700), 0x101, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r4, 0xc0040d07, &(0x7f0000000040)=0x121) io_uring_enter(r3, 0x3517, 0xc2de, 0x9, 0x0, 0x0) r5 = syz_open_dev$mouse(&(0x7f00000000c0), 0x3, 0x20182) ioctl$KVM_CAP_SPLIT_IRQCHIP(r5, 0x4068aea3, &(0x7f0000000400)={0x79, 0x0, 0xcff}) r6 = syz_io_uring_setup(0x18b, &(0x7f0000000140)={0x0, 0x334e, 0x10, 0x0, 0x801}, &(0x7f00000003c0)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000540)=0xfffffffc, 0x0, 0x4) openat$sequencer(0xffffff9c, &(0x7f0000000100), 0x201, 0x0) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x48100) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r9, 0xc08c5335, &(0x7f00000001c0)={0x0, 0x80, 0x0, 'queue0\x00'}) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000040)='./file0/file0\x00', 0x60, 0x185500, 0x12345}) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCPKT(r10, 0x5420, 0x0) ioctl$TIOCSSOFTCAR(r10, 0x541a, &(0x7f0000000080)=0x3) sendmsg$nl_route(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x200000c0}, 0x0) io_uring_enter(r6, 0x7277, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x2, 0x4}) r11 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r11, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r11, 0x10f, 0x87, &(0x7f0000000000)={0x200042, 0x0, 0x3}, 0x10) r12 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r12, 0x10f, 0x87, &(0x7f0000000100)={0x42, 0x3, 0x3}, 0x10) 2m35.306378054s ago: executing program 8 (id=6895): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r3, 0x2000) r4 = getpid() ioctl$SG_BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000000)={'\x00', 0xc, 0x5, 0x3, 0x0, 0x5, r4}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x84}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xec}, 0x1, 0x0, 0x0, 0x4000000}, 0x8090) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000000380)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @dev}, 0x1c, 0x0}}], 0x1, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r3, 0x0, 0xffffffdb) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x60, r1, 0x101, 0x0, 0xfffffffc, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_SSID={0x5, 0x34, @random="c4"}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_KEYS={0x30, 0x51, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}]}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4044015}, 0x48000) 2m35.050754243s ago: executing program 8 (id=6896): r0 = gettid() socket$inet6(0xa, 0x800, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) mknod(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) lsetxattr(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)=@known='security.apparmor\x00', 0x0, 0x0, 0x1) creat(&(0x7f0000000000)='./file0\x00', 0x12) ioctl$EVIOCSMASK(r3, 0x40104593, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) io_uring_register$IORING_UNREGISTER_RING_FDS(0xffffffffffffffff, 0x15, &(0x7f0000000640), 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) prctl$PR_SET_IO_FLUSHER(0x43, 0xffffffff) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000040000000000a40000000160a01080000000000000000020000000900020073797a30000000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140049f81c0000170a01020000000000617c0002000002d4d6548c9e6fb8eda3eea2d9248db6ca2f1370a4cc7fb9953db6aba18dc93203dcc4e85c835b1dd6cd1af9ee33a9bfba649103fafac3d55f695262e7f829983400"], 0x14}, 0x1, 0x0, 0x0, 0x20048000}, 0x8094) sendmsg$unix(0xffffffffffffffff, 0x0, 0x20040001) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x30, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, &(0x7f0000000100), 0x10) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) 2m32.881945861s ago: executing program 8 (id=6904): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) process_vm_writev(0x0, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x20000113, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000080)=0x3ff) write$dsp(r3, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x134, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@private0={0xfc, 0x0, '\x00', 0x2}, @in=@rand_addr=0x64010101, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x20, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x3b}, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0x1ff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x134}, 0x1, 0x0, 0x0, 0x8801}, 0x0) syz_emit_ethernet(0xca, &(0x7f0000001300)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x19, 0x4, 0x3, 0x2d, 0xbc, 0x68, 0x0, 0x7, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x31}, @multicast1, {[@timestamp_addr={0x44, 0xc, 0x42, 0x1, 0x7, [{@dev={0xac, 0x14, 0x14, 0x1a}, 0x80000001}]}, @timestamp={0x44, 0x8, 0xa6, 0x0, 0xa, [0x5e]}, @timestamp_addr={0x44, 0x3c, 0x65, 0x1, 0x8, [{@rand_addr=0x64010102, 0xfb1}, {@remote, 0xffffffff}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xb70}, {@dev={0xac, 0x14, 0x14, 0x2c}, 0x3}, {@broadcast, 0x80000001}, {@local, 0x9}, {@private=0xa010101, 0x8}]}]}}, @redirect={0x5, 0x3, 0x0, @dev={0xac, 0x14, 0x14, 0x41}, {0x13, 0x4, 0x1, 0x1d, 0x8, 0x65, 0xf, 0x5, 0x2, 0x6, @multicast2, @multicast1, {[@ssrr={0x89, 0x7, 0x77, [@local]}, @cipso={0x86, 0x2e, 0xffffffffffffffff, [{0x5, 0xc, "b2dbefe37e745d094f56"}, {0x5, 0x2}, {0x5, 0xd, "fff2fd43fdd82794801792"}, {0x1, 0xd, "37ff93ae02b06a962c1e2e"}]}]}}, "c1f4cce9"}}}}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000018000100feffffff00010000000000809d0000000000ffffe0000002fc0100000000000000000000000080010001071c4e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000ac14142500000000000000000000000000000000000000009201000000000000a39b000000000000ffff0000000000001c250800000000000500000000000000fcffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000fefffffffffffffffafffffffcffffff0000000080000000003500000200010020000000480003006465666c61746500"/236], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[], 0x40}}, 0x0) r6 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$printer(r6, 0x0, &(0x7f0000000040)={0x34, &(0x7f0000004400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) socket$kcm(0x1e, 0x2, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYRES32], 0x118) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=ANY=[@ANYBLOB="7c02000021000100000000000100000000000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0003000000000002cc011100e0"], 0x27c}}, 0x0) r8 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r8, 0x5b01, 0x0) syz_usb_disconnect(r6) 2m28.344195603s ago: executing program 8 (id=6918): syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x82002) r0 = syz_io_uring_setup(0x239, &(0x7f0000000040)={0x0, 0x0, 0x10100, 0x0, 0x360}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3}) r3 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x9d, 0xea, 0x78, 0x40, 0x18b4, 0xfffb, 0xdc7b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1, 0x0, 0x0, 0xa0, 0x1f, 0x71}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r3, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000000000)={0x0, 0x0, 0x1, "01"}, 0x0, 0x0}) r4 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r4, 0x707, &(0x7f0000000a40)={&(0x7f0000000140)=[{0x18, 0x4000, 0x2, &(0x7f00000001c0)='\x00\x00'}, {0x2, 0x4000, 0x0, 0x0}], 0x2}) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, 0x0, 0x840) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r5, 0x29, 0x2, &(0x7f0000004240)=0xc3, 0x4) recvmmsg(r5, &(0x7f0000003d00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003dc0)=""/45, 0x2d}}], 0x1, 0x2, 0x0) setsockopt$inet6_int(r5, 0x29, 0x8, &(0x7f0000000000)=0x7f, 0x4) sendto$inet6(r5, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) io_uring_enter(r0, 0x2def, 0x0, 0x0, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) 2m13.015717088s ago: executing program 39 (id=6918): syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x82002) r0 = syz_io_uring_setup(0x239, &(0x7f0000000040)={0x0, 0x0, 0x10100, 0x0, 0x360}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3}) r3 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x9d, 0xea, 0x78, 0x40, 0x18b4, 0xfffb, 0xdc7b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1, 0x0, 0x0, 0xa0, 0x1f, 0x71}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r3, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000000000)={0x0, 0x0, 0x1, "01"}, 0x0, 0x0}) r4 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r4, 0x707, &(0x7f0000000a40)={&(0x7f0000000140)=[{0x18, 0x4000, 0x2, &(0x7f00000001c0)='\x00\x00'}, {0x2, 0x4000, 0x0, 0x0}], 0x2}) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, 0x0, 0x840) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r5, 0x29, 0x2, &(0x7f0000004240)=0xc3, 0x4) recvmmsg(r5, &(0x7f0000003d00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003dc0)=""/45, 0x2d}}], 0x1, 0x2, 0x0) setsockopt$inet6_int(r5, 0x29, 0x8, &(0x7f0000000000)=0x7f, 0x4) sendto$inet6(r5, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) io_uring_enter(r0, 0x2def, 0x0, 0x0, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) 1m58.078216652s ago: executing program 7 (id=7000): r0 = socket$inet(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x80000000000035b, 0x40000000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="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", @ANYBLOB='\b\x00\b\x00', @ANYBLOB="312000000000000024002b8008000100", @ANYRES16=r3, @ANYRES32, @ANYRES16, @ANYRESDEC=r0, @ANYRES32=r0, @ANYRESOCT=r2, @ANYRES32, @ANYRESDEC=r1], 0x4c}, 0x1, 0x0, 0x0, 0x20088050}, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) r6 = dup(r5) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r6, 0x84, 0x85, 0x0, &(0x7f00000000c0)) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 1m56.989136275s ago: executing program 7 (id=7003): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f000000ddc0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) mkdir(&(0x7f0000000180)='./file0/../file0/file0\x00', 0x0) write$FUSE_INIT(r2, &(0x7f0000004200)={0x50, 0x0, r3, {0x7, 0x24, 0x0, 0x41046100, 0xffff, 0x0, 0xf7, 0x0, 0x0, 0x0, 0x1}}, 0x50) syz_fuse_handle_req(r2, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000006d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x7, {0x0, 0x0, 0x20000000, 0x4, 0xfffffffd, 0x0, {0xffffffffffffffff, 0x0, 0x7, 0x0, 0x5, 0x3, 0x2, 0x0, 0x0, 0xc000, 0x0, r4, 0x0, 0x403}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, &(0x7f0000004280)="ba5b8ea61489f0f38300fd701eb516b4c60bbe2ff4823e4606fb2bb264192217c6fa28b332cf26b91e1d9164bd551945a835ae0d1cbd61c683a32fcfc15e84e91526d14a8f3a5e20426db65cd52292757c753315dcfc610cc8fec0689484ec083ec9b5abb9fae2bf0a3b615f0dea062169cf61a9f0cb3f29a6c28752f80c082728c300e1ecca8a70b8e500dea6d9152bc6627bfd3018cfb624a1b541defe58da6df08027d67434aaa60468d9fc3772251814262313bc9f879561d5479379d0bcc9736efeb8b2927751c83c2beb3cebe9a44b8962332c6298095dd686e96a86ff0ea7add27ad201b64b7340ce6dfa43464a8270f0f11b1485389f8b4e85756be2ebcc8a560a2edf06e44cc43d256501a1e44283fc4c14cd5a17a8538c602de6eaa0db28eb73343825ef7d295cf1af0d4a3154db224d319f1c109a09bf3a723e5bf7c69aa82ce7150de7713ac205e73945a7f94b1cdfb1376f2e41a70fb7d39cc4e38e60c2ca1ab7937defac79abe448aed5be52805b47f4811729cccc363b0dd88472950ce5afedf7e3ee53e567540674d48528c0dd9c341ba63fe213d5c907889e1a048e7c239306ef73a03cdd8c2636831949418bc4b651e523f781f3588ce069c174e7195d6a15a14f09d14b1f7bb2b33d37421e63ddfa269ab8b62a0ee3d97d516a5bb00b8125e38eb3a536a0b17b54621febb2936dbba1079139474afcbdb0ce42811d1e4c345eddf278b16de9ef061afa842c4596f93d7f4b25a1e04efa933b7c3c9f69a6e998acc68e22b11bb935fa8715134028a6cdaecec54089c2a0c689dbb9b54114b03889ffc4230be929a2b27b04f8db25c52f0e994d55197cf4a035a060a5d0a5bb702bb1c5c4cd8762cfa2bd55440960be8fa8a21193cefb0ea9fd71854f8201129ea98e89224f80b50d3280b2ca4675719b12be1544eb3d1c9aa6d0b8fb3bbc76895d9bb836683f84fdd22fe08add2f5b05afdc35c1ca9464ff38c5023c6e83c08d4782056cfa79f5afcb6a64b3588611d728a201dd5347a476b41e230ca9d495df26795e8f3f3aaa3bf94f9b7480c2a6c699cf91a48f7b1f6cd489f65fe73e13c009e18d70ba6f14d2d6f1553ebda5e195342486f18229b2627418b336bebce7c27aab37618dc9f2451d9eb0680101af466f33aff9a8b12961e2cd01e815f673190e7c3cbf84cf0d233679cdd5cac74c4fc4d784398fedd4f52c098632d8e10a12f34cbfb256ba61362432ec74732abc64c3b711f2aab8273ef88e31897d2e503bb80493c0a1182d638420beb6ef9e11aca868c9fc61aa787ca8dbac99df545ce2d5d5c4fc7e31e415e5c2b06a32abeab7306c528bd22c23135e94fafa4271ad4bb229871909786a2252b8214a30f09bea5913b84079d2fe6845d75013a15069002b0e0956e4c81c2a9f75fcc040c47ad4c23a4f2797c8d9c43f87cbbe0786b11967d5ad1dcbc5fe39b61615ba16392337b78bd5e5fc9ad9d646be0ab3a8d246309e056fa66d34ddef99b7371713b9e2827a30d54645664743af794ebbe927e43df9146950aa24058b81ce7f9555d1987baa47c486bc4180db65b897eb21ff2529423c88f2227ef4eef0b035ccc9d11f895d18ed9f00504d9db260d1561a5cc3692a52dac20d64ed22c50da171b223fcfe0a7e451c8341deb63e3ed6ffca9fd79aac6c8cd4e58a4c2af8acd487bea4846b7c222add7872d21ab64567800fee1b1669f631201335fbc5d1b3d9045b000055edc3bd551518216893d708a44b438e4479e33508c12fe031e8f7a1968912eb7cbe4053f5940063c2fb5770387db74dd8707a71b7671cc5abf42012a9ee638c60f59d9678b22fc536ffb953843ed6c66ab9bcf7cf5ff249a440aa726339b9a96fd3a0e3c3ed11ab910ebdc3e0eba99809fbd8bf1580f0a140924bedce7e90ee7e0d8bb9f8cbc990da15772e67d36991a25c38b77ef6d01357ccbbf6549103955a4dc82e0b1cd5e16907a4e7f488b0949934947a7b69f3956b3b62c9d357c9a3329dda4b827437c6d0efc7f5b767253c0a7b463ec9ec9064142f0b14a1c617ef9b7130a51cc2b98079337edfac68c8b777b73bd58097daa9f64ca3b9daabcc53dfce7be8dcd83b73f453023d5732ab3bb95a80845e6e427ba688518ef7425cf036ad42df97b339ab880c949081ebe5f4c051823cd12679164984abc2a2e3676e7e44c20643e48a2f2440ef1b541b9baf3e8a7db7a0f01c5217ef20038474d9c1207e72fd71a25d5a8f7b91be13b3a3b9d57edcf7c88b0a3b4a060a7e03a5667e5b444b0057dd5ab4e1c85e09f5552faa5654bba884bdca0247f12b3244a0f7a0492e321eb418cfa75915d76e9e26d734345fbd6e9b40f9c47b203ebbfbad6b330ec90adac0e1b03745e48a1eb3fa3c079d47062bf5a779c3479e6f5c4b8800a1e7513fcdfa0a6c6bcaccc6f736a0ec4031d7fa23c89bb6a8702a694aa87e88521490a5dbd5d0e5775b561ef9d4376e367e31a83df641c55d3801f573ef7a2ea945379f9d07a04cf8bae55e51599719f79ca33917c421ff63a335e11b4f266f5171e27b60b544f893cc8fec2bd191ff7ed87476e31979df4f01d71af376541bf09c0147d3ccb91285e6eff7c44fc8031e3a03b47abea0828e42861d2747259e1f7815d1d18bc8efcc36a27643fbbbf33eeed6b5036773a305a901da08f858e1909ff3ea335bb48200020044b0711b67615a0626017da66274e804883aa858d04707d443805caceb8bd239e31ea7a446752fe789205bb083f1ca90d1589c43e8bb152801fff7bf3853d8bfcdd630b41aa3fe1f09bdc4cb1ec33885c21b883935468dfa05063f9d7c1faf14115ed359122187a90b2045c96650b2be20f1519edaa1d3597d2bb22e08954d00f7addb14b639258c75698a98046028c6f9ff187086b569cd4856d97ea1799722158e8418dde709acb7fcf890edeedf6f49c7d79ee5df4c535d53bb54ecd4a3031471262190d44b1d86a5410f34b80e387eee07acb83acb7de24b2df74b0b9bd6179e132d1a5e70fb52a2f704df3851e264192663297183b1dcf9e7f1a2c746991c2f239308201a1daa8b2478079af02204c8244adc87dfcc0397a4db01f1f079c39bed4b12a5c5e4cc0b0c66e83691ddb7e7c30d23a1b97ae7e0fdb56564ba2999c7aecced3e0fd1d185bdc1c27f4404f11177275563d1303dbdd6947277d90ff461425f6e6aa64a69a1463861f83fedd00d0c3f8c21eb9184cc02f501ab353cdcd3ec8da677e8da8472d22bf14f34bd5c4335dcb59d8a645a7074f604cf2defbd2fa005b0b88d64f010f1902612a3006dbd0c0c6af178ae888dcddd074845fd691dfe45d56311f491549581b225d6997703eb55cbd60beabb8d468d07ef9e6d8ad78521a455dd0595a66c2d5bef407cf266c4837e8b41ec5b08e7f097abc73e0e36ab26e101e5f994f672c741a49e608d93843e84a42162f0774436fded89e7e753902869178a9346c237266943780da10ac18b6a8abb97b558d4fb331fd90820b2a3b64b11776e7d4f53a1bb0f6695319120905d8d32f9042c3a40c2c47f89b4622cde88af69f732bb6438085a7c614a9cb913a7753feacbc54e32c33431230c78b252b4bc0874b1e07d85e7cb3b07957916d448bba0e9d97c320a7fca0e01948cf7507fb3bd94221e3b92ba3c55f00a4569d64c3eb3936a2fae6db0d527b55e40171f2df19b84cfcd57332eba0765eebabbd9e6a9bc8e1f43829d170025cd465318a28ef062815445264aee30b5976da2480cd70d23255b6f240ea6f211560b767ea16b8738f8e85398d4df771b1005e5d590062d55434d504b5e9be5a8b3d2b3b41413cfc2a808318679ef0b2607d6ef00496234956cdf74ba8332051a8facb438dceada860d3aad5cb33385023d224715cc28cec354686541f66902a883c4552528b078aadc8528a442dab2e68451d9ad0966687c6d8fd696652af8d43ffd37e7ccb96d5a0bf6d72c37685512e90bd085d5f46d36ef55af96e2eaa1f5d5ce44460413578d716f963df48ac4ce00130bb44db351e4fb52f8b2ae0a944c49514da5d740f3891c34b0681066f0c2f7c26a80a44018832051d2c358df63f6e339da476150cf834100f26e73ed4bbd82107c2fcd401955bcf1c83c2a1a1b1f72c60da8f9c5647113364cff4a204af27f131883e993e436c186b5319f1d2475842d032baaf41722e697e2d1fe83717e1fb6be097fea1fba7d354ebf8d688d78b0df5c11a49f3f3a2a134ba1157372820cf67138b7672bc6e115219df45ffbc31074cd6ef7ce0ec8574bda2c839a086335164894a9ccd2da9b53c95ea12f6499ced7e2011720f0fcc32fc6fd00a8a206754abec3525674040f63cad36056425d329cae87d1e76cdcb43fa95151f250362666eed4a3924551919da9d6ffb8094d836340ea3cfd1d4916b6b631bb0886f696e60b604c4d7fdd55e282e22c549814ce6f75bd3460488d3500ce58aa241a6a8c5d50af901df1b85dbd32fced3dfc4d510f08ccaf81fdae78db2d5bf7676f0b2ab72fe3f43878f7dc43e4bab02047ff51c02b37b1db2f68068fdee95f59248a633ee9dd1153b0a54129197fe8fea93fc473ce6097704da00fc25c99adbd1e24e5532868e8b1c2649699385a480785c88d837513a33ea024af35adf57c6c7a0bc8f5495d7424235116a79739c86842bb35e9ca5da7798f7ae3ccd9434dad566b70bed82c644cb65ddb37e94a2f06c332b32a829aad2ddc813ebcc07e07e5587f7f7ab27bafa0aac1441a809fba549bd3fa7b8c16851c3d22d7ba41ebb1b19f8e9f5d114950a5798ad8ed4d1b5bb4ddc6f3cecdd719baa78ad32d0fb94b8156811f9ef54ab2a29738e2e596b1424b19ef39d0a354c3e8aa6227f4fb2787b10cfc615dc356800066f800718edb658bb3b85d775c0724e7c2942c8cacf420a0e23fc2bc40d078ca5f4fb9d95236c8c35008c43e864b2ee0d7f2a634978c6c34bc2b5040a29ca1b1c60a92d7ff86b3c9dd90ebf3fb212d4c23d69be399837b92fa04dca5075ea7877561ab64664d12a1e1ff39cc20f4518b460ae9f87995bd3ae66272f3f24a47c6340cb0318b67acdb26064bcccf7ccba386e07127d9ffbda288cf2924623902d9f4be97605ab5dd02a969f44de8a94abd68020c1f47033ac2b7d0e9431035e358f7d876a119e31b154b6e66815f286a41a23cba9fea4dc4febb5210b291202e8dbeb6ee9e006f108ddf891ece25c7311e7f4c788c37e8a39382405627a547e609393cffd1cbfadf90ff9060a14700539d497dafb6a249e4ec814a9e68d7a954a3c51776af6fd839b9b4b1af37797431c15794508731fd5be32edc6514ee16681f9934b0d83185ca69820d3a590d511e9f5f3ee5bf33f6ed22d507481bd7f05aa644ff19809d49a3c2924cc408ddb839d6f07cf0894ec6a6372c453d23aa324802308833027861946679abd540548abb956743cf0ccb3925caff0c597334b72e8d081c7aa9822207426b16539e370678a2fda3f34555d721570e725e3eab5cce6e0f7faaa3580f6c7d7eedbab4a0b7af72d3daa450e467917181bb2c3eaec374209f7e74a4e9195487316e7c934d3f4d0a0ffd73ae1c0855690d5f03d04ad567dcdfc366f92bf13c3e667dbce23e2b64232c11f641bd7cac7f1f9eee72eb98a5cc28226afcd1fefec1b275186c48f063fc2e99448569bb5a903ad450a5812b17c8fa3a7ae639734974d368ad0968b2ff1381c128ab00b837d765e36bfdaf8d5284975faf739b9882a0db327ea522fbd71c3a708cc674bee98602540804d856829826a95543c0168af63ff084c46ed81320f5d6bcca8fe5955091caeb78ddf53b819ff91bce937e02025beaff559462045263a3ff132dfdb5024747bb5afcdf8dee04a8085a9268790256483e7f33fde71478f8772339154952dff0e1acffe87ee37f830c30b89042b778cc87fbbb7967fb0110a54ea4a7bbdc575a93dfcd4f1841c9a75dce63f90afed202aceb7a9593d0deece3adfd66b4f40f50c0cc1822835bfba2b20f25d991f8ed85204e9b56da4709e3c1544a96fcb914c327aa8d6e7e22b21c3745f579483a1959a2766cb34a961572c6b1cedc06cbb4299053514fbb384f8192f4a5e0483667c685b3fd032a9c01471651bd7f8503eb7a9b564f779f9d33b120fb9eae779e37b28c82790917da2d763186401bf9b9d3a50572dbd7f7ac54a5afed50594e175ecb23f9c9fb949bbf84b94ec580a1d70aa405d645ee0848517d239d5dd0c0474e0b50991236b57d6af5325621399fa647946be8b27bff179dabfbf084cd7bc3fdb5313636ba7ee5264e90d76add5b41c3d23fbcb2e9066f187bba2770abea27f2aaf8cbe545f216e5bdecb3a584511970314058474803a24f88903bbd69e333e2c9046183c7945736a0f39676b64b12b319c3ce11107679c67d87ab6e9e1d2d28905674e9da798e2026cb544d4ae356991d29ed4bd38f2a5a7c6cf2a30b1b6d48700cce7eb573e84a46c25070525f67d45538704ca3cf53be6c44e84fbb40387803e6db47b373cd36783689b7f93eb27287570dae90d21214a85d6bfa898fcc2181af6e25daea786d7d50afa58731b4fac9c9d2861c802cfa6ef854e747217c0a894a28d21d0a43b9de43985c4756c29b561029ef95cfdc27bf38f26dac2fdf97cc58d9c1c59bf4ee59768ad51a1d0d8de92d0e2c723b1ddf411d23566ce0b72cc227d41fb63b6a13188fe72525ad316fae05f5aa7233f7bfed187f1b1f87a861afb173552f5d7c9bc7acc95107bbc323c376044a01ab13da42d1ab27b86dc3de3b157e47790b78896bcb2c532a7b7487bb6f24c4021c42357df52e4d5848b5584609a482dea46d173d2a695958002abd093c25f002116f8afc55e729024a4dedf5a4d3c626ebd9367fc18e7e4c7554fba0ad7349c5d526ea6dbd2c03ff33580b15fec3c1f827e885db592b47015544f6b1d400bde1133afa0071f68feebd987a807cc6d5b1b8827410c0b6d46c4b0cf6a5df999f71ba3ef4d9dae246d3e58e7428d98a33076ffc525946780d0100000000000000b872f0999d47c6e424317bd8b0e2f70ac10dfaa19990e2a3f744ea5b32996dc228ff8de836b5ecb7e56cfb3dbf48172b5ff09eecf14439b8bbc5cf3ccc9863ef5547fa2896b73196cdcab97954f9acbec8e7d2626b1a3b8983fa31961ef8c8684ee824f343933cd73d516e1f8086556ab718010022319ab39f72b9e7989e50ec8681f3f6a778e7d23c8be2f4c26bc0ed855947107e93cc9e7515fe67b0c3b6e43d9fb157be2b2f2d9c799de55214974ec254f54cb6c20a76e656cd753502499750238164f1cefc37636e9eb4038053b631c95d80bc50e248ef5692eeb3f0c86aa50476eeb8f80f7115a4c410dd80264c123ff0b62b6291db85865816cc36871b061984a4afc440029c338684330a640e9b31e06eea4ded4e15d92c44a28368138aed08699aee772ac5734e74a65a6b8acd6cb86b2bcf12330ea808524ee838adfa3c185d24e3b2e5e89a5c9b95a659298a4935549e218d4bb4da58a2a663251ffae5c6137f8e70a86a3a26f4bdf2187fa4b9fb3c822ab961846fc01d247530c89daed7ef18a14cba3b47d369980cf48049021cbaa271caee8e00aea56ac7b5c29899348ae129ba840c39f33a7c2f0b2fefb5291d23ea7e5aa91101585576d9996a05897341e41063bf9cae137ed985283bbe3abe8e5a2754378e2ca7f1287056c8a05459d6a47ae4933c43879287b7ee557f3af6b047775ce76aa064be50caec22382a5e735765910fdd926d148ff77f42ee9f60fedb0c4158e02a385934c84521d52be0e0e0dddb0bae54acc1685919cc0d62192950c2e476d169f3533ff9dd440c6092450e15e5199d1d302bd81c3f1df78e71a39df0194beb1ff8dac956129b7be3d39b6505b17d2fb309859d6de62cf58760a4623267ec5496588d2ab5407e31a132f26fe29ece80ad80653ca190b83c9ac8345259087f0a84a001fbfb49c7442ab371d30897b94779039f17857ea96afb9fa41db33d7f3dcf123244975a1714a96db05fc1bcac173081dfaae090b16c05aca4dc98afd5798347b2cfc60ba92eb5e237752d64df1982ef13b116f6b010b0d2eca243f0f991a3f34a486bf58e06d6f922e07413d5844ff279559f8c401785e0207ece4ce7dc53c7705e2647a3c352902efb136fb0f6952eb8acebf90e7e56e831c228cc319e9d079d89d2ff1d43fc1a1139c2d7893ae246747a8c0c1c34c28cf5d6ea9b6c71b3e966b3f32259a19c3e35e4a08d4dd27052033fd7f1437ce9cd2088b31b8ba974558dedb1f8d4355e224e1b8df8da3bc93cb3f9b582ac379dcd0104a3f146d6d3fb699de99cccd099beabe63841a2dba61a465b258692fd98c9d4ff1fbc7212ea2066c5367f64707e7b2e14c51d78a5328d044ac33b1313502b986ac0462c6c3455f60f727e3e895b1e4df196d4f7a9e21c53a6500f0dc6e957530164bc648ebfedb6c973ae8fe49a92fca7274f29edcb202356775baab723f9e3a03a1d24d6dda56853ef0a91ca8bc7c530e28ee896efd1a1f5866206dd82e0eb554f4afedd9e87562903b49963d72d8caca7bb0975252f8f5578287e583aac618995a941299fa0973e67ae44469336e45b68f978fedfc8785e333610f8029b194226f86e770ac987cb84f9c76e5ccaaefe64bfcadf5635bee6077e05364e8872100003c9442e1c7cadd6f98e0dc9e2db17eabc8e6307ffd485dd06935a423d5c9cff832cc1d481e49d6dc00176d0342fdab19cec251b6fbed3ab6374ecd022de617cb2720ffebfb8b98b426cb445439b7b088fc7d9ed9a91989f2bbad8519070a6f916df7c49e3184fef1753387a5a2b5b991e04de915e053c471d198b843fb0afe5a68cf8fffe65bab08f6f5425d458a55de6355558bc5049e3a176977630a45de0b7076cdda2a167003090bbbfba5618ba2f6481cdb1386d1fb3c44a35c4d0cf9ca14dad697078fa4a062e55515c8cd69c6b2e911b19f637cba7c6ca26b3b4b2a74fd5cbc64f269fa5d6f9628830962db2d7ee04a6c37673c593771e568e8dd6cb965e67e6f4be91e625c1015160c234e8893eac8ba39708b9f32e519abfb9c5b2562e424d6eb2c8a737a830997821fc294c559d14d7c0bc8fb03ceb44f1bce3f63c46607ba95d70cb8098d30e1e3e6c5957ed3b4bb1b96d3c3879098247483e6c4f669bd556387b346bfc5497fd76a8e89bf185968f3e3dd58214ec024f5a4a180b31eefef8233bbcac8d9706b35476cd5d4cbe86034928f5c4a3c07fbd3e19ec89536aaa4fcbc2c7212ad2b5c3213a32d760e9883149f1770ef77a1313bcbbd41ebe246e847aac1baf975fdd326bf81fc68e19ce8cc7f056f5be524f35fdc7f4c0420c36846ce5415c725291ebe4964090e5c59d6844ad02acb37c437486e677b0b48c8bfced79275ff64f4be33b3492d40b8496754a36b9657efbaeb2e958de29b2de4c2346de000039c2877e1a21bf2b550d0ac6cce5feb72faaccb3ba47f498c460669ca345b5561f99b5f2f020a2c01b9d95399064eed1b7e75b802f3e70239b1c58c75f9067ca4543ec5d5e32fbfbb36d9ba9db1682c7c63e91f399752c155dc5077a2dacfdd6f9e52031290be704314d5ebdcccf9f30985dbae514d0283f6c4b7e3ebdd46b6279e8031b3847a8b46240053ce76bee81fa7b62266a1b501153aacda0803809cb4671d53f6e55dad8fd508373c1c2c9353a1c9f8de2509eacbe8e1733477880c549e327a8db5aae29169ac886cd5086b7f4e8823549c44e48fcc3683fd045dd93677336998c4016dc31823ec36a0d2ceca92c131cb3d8d5e08275f40f70943de8bbcf583a8985c30dbacef8425aaca57dc860753c31c17194f71c5d316572bcf81ab8db62e06c1ee39c6a24dd0f68d82c75762842c9bbb70127029154cb768aafd308471eb518c8aecf27c0efd01883961ce002a6231189293d00dc4d71824d2af860b7b3efc3c282b2719dc737bc5c3ac23dd7dd1420472d64acf6bb2d97503804a67cf9516e28167ab8fd38acf90ce56cfb304b59a5960f4f38963db71bd7ead69178d8ce52b74297ea3a0cdd55bb1eb849c02f8a87610bc7fc48a7af7d6e56cc41cff303afadeb6b4592605c3c3c2385c9a165c1c7e30194c0e994499472b08aaaaca3707b9baf3185f5b1314853d50d7b86f255615fd4009f07b87085bcc44c865f7e14d29e64f95001bc00c68afc3a0a0555027d460519f15264289c0918cf594b5ad37252575a9484a1de681f70745d2c6248581cd3702767115637c7cf7bc15a63775b90c285be77db8b85dc08ab81bb307694417a8d1c4aa1ed8716bc58a35e1dc8e23cde3748c6a93370397dd5c41371fbe45b86e3180e410dec137bd47730c7fdb7e062cafae686201b69071f6027ac38c191c333d27f5cc814c4522859598e7e54a04a7deae272533ae39e296785124efb6714089e6567b8db2cb403d87bea3a718b925825b914764ead06b48727e4c42bee1a36e9844f35c79fb50c89e4d9ad6a7b464299fcd10037166c2cecd017bfc184ef59fe2575e93a139a47e2baf5482f3a5d248413c87a39baf7e1eb1441ceb37f5df211844834808cd4df62b2e0b0b0a75da0e27720b5ae54fe00518e951e21ba4e1bc2d454e7bbfb86e3aaf7b9a25e354e56aeebd11e832471fc8edd0d3b4d3c123779cee870c86d97d703bc44b639a2fc49855fa54e9304de1dcedf90df397733fa94792c1bf0685335b027f3de1ac8f7f007f61ea9e51988f1fcbaf982b5b808645c4eb2fcaaca3c10667eddc4007061eaf3c250744baae0332bff7c9f077ede4b593853f4a165dcfee11b75d5107d1a86a6669c231415eef1dbb58f0b829ef03f4ee0e6acc787b1ad31807852ec4269d23322304842ac0cb13cd53e7e4479cb7fd9d7b4ecd722ecfea4c59f69760323d9930b03cba558cbe30711447ca93a01596d2bc245e9908738b1de17f07c9eeaa28472e08570a3129e81c874a894b23b1d8a77c1b4275fdea8adf5ff10bad0ebd41073059c3a900801699d4c1b023336ed5d675b57db4770f85b0cf1e0dab135633936ceaffbc4a8a1dd58bec1fd3fbcee9be9874158abd4376928b2023191d2c87f3657943a60dcb16212704cfbee381e58194c5671b594494c60325512773dc7dc38da37d8b275becb97f472067bfd7d3594afd78a0803839248c75fdce6b62711026cc32e1e3aa01152175a3096603394e773883790e96622a2b347ebe569eb26d4010115cfa611d4deb83ae4b0753b528fea440c95d5650acb53931f8ef6b6614b2aefd0754c5484b6139ad18a0cc23efbc3def8595ca45ef24cb6083c93261381a111f2ef450f5f95a343de96d4d426d3a7a72526b09b825a75df24dbf4d51a5b77f8cb948bcb78c4b4c09da92aeaf9855d40b0d5d8eabc5fe57c555f58ba0125e29512d2295b0c9ddba45f37a346e7826a4e3bcfa40a54be096f695adf9e66bc9f369556ac26c6fe46d4bd80ac949cd31e1390c14387a81cb5cf814944e60a2937", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x90, 0x0, 0xe81, {0x6, 0x3, 0x2, 0x800000000400000, 0x81, 0x0, {0x1, 0xfffffffffffffffd, 0x80000000000, 0x80000000004, 0x400000000000, 0x4000000000006, 0x0, 0xfffffffd, 0x1, 0x4000, 0x4000000, r4, r5, 0x0, 0x5}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$key(r1, 0x0, 0x0) r6 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io$uac1(r6, 0x0, &(0x7f0000000540)={0x24, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) unshare(0x26000400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18380000000000000000000001000000b7080000000000007b8af8ff00000000b508000000000000638af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018240000", @ANYRES32, @ANYBLOB="0000000002000000b703000008000000850000006900000095"], &(0x7f0000000080)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) writev(r7, &(0x7f0000000080)=[{&(0x7f00000000c0)='\t', 0x1}], 0x1) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000000)=0x8001) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x2b, [0x8000, 0xc95a, 0xffffdff3, 0x1, 0x80, 0x6, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x800, 0x5, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0x24, 0x9, 0x1, 0x1f461e2c, 0x2, 0xe661, 0x4, 0x7, 0x3, 0x7fff, 0x4c74, 0x101, 0x242, 0xc, 0xe, 0x0, 0x71, 0x7, 0x7, 0x3, 0x2, 0x8005, 0x3f, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x3, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x8000, 0x10, 0xfffffff3, 0x529432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x9, 0xfffffffc, 0x3, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x9, 0x3, 0x3, 0x8000, 0x9, 0x3ff, 0x401, 0x6, 0x5, 0x8, 0x5, 0x10005, 0x5f31, 0x4, 0x0, 0x2, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0x7, 0x28, 0x1, 0xfe000000, 0xffff, 0x2, 0x7, 0x9, 0x3ff, 0x3, 0x8, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x12000000, 0x2], [0x100007, 0x4, 0x7, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x2, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x8, 0x8, 0x86, 0x10000003, 0x1000, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x5, 0x8, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x200, 0x80, 0x83, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0x2ac8, 0xbf, 0x2, 0x3, 0x7ff, 0xfffffff9, 0x0, 0x1, 0xffff, 0x0, 0x4, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0x25], [0x9, 0x6, 0x3, 0xb, 0xfffffbff, 0x934, 0x6, 0x6, 0x0, 0xbdfe, 0xce7, 0x1ff, 0xfffffffe, 0x7, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x8003, 0xffff, 0x81, 0xff, 0x5, 0x1, 0xfffffffe, 0x14c, 0x60a7, 0xa71d, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0xee1, 0xfffff000, 0xffff, 0x3, 0x7f, 0x3ff, 0x9602, 0x7, 0x2, 0x7, 0x6, 0x1, 0x8000, 0x5, 0x8, 0x30b1d693, 0xa23, 0xc, 0x7, 0x800001, 0x6c1b, 0x0, 0x4, 0x5, 0x2, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 1m53.714162581s ago: executing program 7 (id=7015): sigaltstack(&(0x7f0000000000)={0xffffffffffffffff, 0x0, 0xfffffffffffffefa}, &(0x7f0000000080)={&(0x7f0000000040)}) sigaltstack(&(0x7f0000000040)={0xffffffffffffffff, 0x0, 0xfffffffffffffefa}, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) syz_open_dev$vbi(0x0, 0x3, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000002c0)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b0fb000e000000b8785d9600010000000000000000000000000000040000000000000000000000002900", "2809e8db5240f45f819e01177d3d0a8dd4992861ac0000000000000000000000000000000000000000000000000000000000000000001f00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) sendfile(r3, 0xffffffffffffffff, &(0x7f0000000080)=0x105, 0x9) recvmmsg(r1, &(0x7f0000000900)=[{{&(0x7f00000001c0)=@can, 0x80, &(0x7f0000000040)=[{&(0x7f0000000240)=""/103, 0x67}], 0x1, &(0x7f0000000400)=""/90, 0x5a}, 0x1}, {{&(0x7f0000000480)=@qipcrtr, 0x80, 0x0, 0x0, &(0x7f0000000700)=""/192, 0xc0}, 0x8}, {{0x0, 0x0, &(0x7f0000000840), 0x0, &(0x7f0000000880)=""/121, 0x79}, 0x6}], 0x3, 0x2, 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r4, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) connect$l2tp6(r4, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r4, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0}}], 0x17fd147c801ae9af, 0xff00) r5 = socket$inet_sctp(0x2, 0x1, 0x84) r6 = socket(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000340)={'team0\x00', 0x0}) r8 = inotify_init() r9 = socket$inet_sctp(0x2, 0x1, 0x84) r10 = socket(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000000340)={'team0\x00', 0x0}) setsockopt$inet_mreqn(r10, 0x0, 0x23, &(0x7f00000000c0)={@multicast2, @multicast1, r11}, 0xc) setsockopt$inet_mreqn(r9, 0xffef, 0x23, &(0x7f00000000c0)={@multicast2=0xe0004000, @private=0xa010100, r11}, 0xc) close_range(r8, 0xffffffffffffffff, 0x0) setsockopt$inet_mreqn(r6, 0x0, 0x23, &(0x7f00000000c0)={@multicast2, @multicast1, r7}, 0xc) socket$kcm(0x1e, 0x2, 0x0) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x1, 0x20010, r0, 0x441f5000) 1m51.458369474s ago: executing program 7 (id=7020): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = syz_open_dev$sg(&(0x7f0000000140), 0x8, 0x8000) ioctl$SG_NEXT_CMD_LEN(r5, 0x2283, &(0x7f0000000300)=0x4c) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x6}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b925, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {}, {0xb, 0xb}, {0xfff2, 0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xfffd, 0xfffffffe, 0xb, 0x1, 0xfffffffc, 0xffff, 0x5, 0x4000007, 0x101}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20018041}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) (async) close(r1) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) (async) close(r4) (async) syz_open_dev$sg(&(0x7f0000000140), 0x8, 0x8000) (async) ioctl$SG_NEXT_CMD_LEN(r5, 0x2283, &(0x7f0000000300)=0x4c) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x6}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b925, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {}, {0xb, 0xb}, {0xfff2, 0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xfffd, 0xfffffffe, 0xb, 0x1, 0xfffffffc, 0xffff, 0x5, 0x4000007, 0x101}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20018041}, 0x4008000) (async) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) (async) 1m50.098903938s ago: executing program 7 (id=7026): syz_open_dev$tty1(0xc, 0x4, 0x3) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) mknod(&(0x7f00000000c0)='./file0\x00', 0x400, 0x200) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x2, 0xfffffe0000000004, 0xfa11, 0xffffffff}, 0x0) mremap(&(0x7f00007f1000/0x4000)=nil, 0x4000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) close(r3) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f0000000300)={0x0, 0x0, 0x0}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') socket$key(0x2d, 0x3, 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005a1000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ac4000/0x4000)=nil) write$P9_RSTATu(0xffffffffffffffff, &(0x7f00000009c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES64=r2], 0x2c2) socket$inet_sctp(0x2, 0x5, 0x84) r4 = syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r5, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f00000002c0)={r5, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000500)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000020000006b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000404000000020000000590000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m47.850773214s ago: executing program 7 (id=7029): ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'team_slave_0\x00', 0x4000}) userfaultfd(0x801) timer_create(0x2, 0x0, &(0x7f0000000000)) r0 = socket(0x80000000000000a, 0x2, 0x0) socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, 0x0, &(0x7f00000000c0)) ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, &(0x7f0000000100)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaa0600aaaa0180c2000000080045000044000000000021907800000000ffffffff050090780a0101026f"], 0x0) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c000000100005ff04000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a", @ANYRES32=r8], 0x3c}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x8, @rand_addr=0x64010100}}, 0xff, 0x3}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000840)={r5, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xd, 0x7, 0x4}, 0x9c) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000640)=0x8000) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xb7}}}, 0x1c) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=@newchain={0x8a0, 0x64, 0x100, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xe, 0x6}, {0xfff3, 0x6}, {0x3, 0x8}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x8001}, @TCA_RATE={0x6, 0x5, {0x4, 0x5}}, @TCA_CHAIN={0x8, 0xb, 0xc}, @TCA_RATE={0x6, 0x5, {0x2}}, @filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_SRC_PORT_MASK={0x6}]}}, @filter_kind_options=@f_flow={{0x9}, {0x830, 0x2, [@TCA_FLOW_EMATCHES={0x40, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x34, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x1, 0x7, 0x8001}, {{0x4, 0x1, 0x0, 0x1}, {0x0, 0x1, 0x0, 0x1}}}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x9000, 0x3, 0x278f}, {0x9, 0x8, 0x800, 0x6}}}]}]}, @TCA_FLOW_PERTURB={0x8, 0xc, 0x8}, @TCA_FLOW_XOR={0x8, 0x7, 0x618}, @TCA_FLOW_POLICE={0x90, 0xa, 0x0, 0x1, [@TCA_POLICE_AVRATE={0x8, 0x4, 0xffff}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0x7, 0x527, 0x2, 0x1, {0x9, 0x1, 0x39e, 0xe, 0x1, 0xfffffffe}, {0x80, 0x0, 0x400, 0x28b4, 0x83f6, 0x8}, 0x56, 0x7fffffff, 0x690}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x3}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0xffffffffffffffff, 0x80000001, 0x7ff, 0x0, {0x2, 0x1, 0x3ff, 0xffff, 0x6, 0xe8}, {0x6, 0x0, 0xf, 0x0, 0x7f, 0x4001}, 0x1000, 0x101, 0x9}}]}, @TCA_FLOW_ACT={0x74c, 0x9, 0x0, 0x1, [@m_xt={0x1f0, 0x7, 0x0, 0x0, {{0x7}, {0x16c, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x7}, @TCA_IPT_TARG={0xb7, 0x6, {0xe60b, 'raw\x00', 0x7, 0x9, "168e51211cb0dac1567328a23adecd528e86128d70a7db97853a2c78627cdda91304290adbec04a3a96b3d9e303a29496aa41cfabf6c14c943dc391fa80b8d8b326812c0b47c0e1ad7e6170ebaaccfe1dc20069e4154d85deddbbce8c087b5548d7f25e21fabf5690e19c02b7bb5ec46704f9612da60faae427bc3ffdf74e48fcb47940a8ae09829bbf8a115a6"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x6}, @TCA_IPT_TARG={0x8e, 0x6, {0xffff, 'raw\x00', 0xe, 0x1, "0129802a0b60f2b583aff63df8785b506e15fc39b254636b7feaa39c02cb49e0a41da7a8575d4f710ec2db08ab8b34cb582bf22aa732548853e6fe2e5128c273f0ee78e2f0bdec236e6394eef6dac5f305646df0c5c7e7b6bfc848b33baa6334138c8fc9"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x3}, @TCA_IPT_HOOK={0x8}]}, {0x5d, 0x6, "162dc327de9ba0a1b090792b06c591ff8cac7b0ee40ed3301c7e248574ea0afc8bbbe6cc43f08fb7ca05d415840da9b776e2ab66d9518c0e5aa58f7e3819afb17e9e74b2c49cf464da95cf2a4eca72f73f294b3fa7359cc509"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_police={0x478, 0x1c, 0x0, 0x0, {{0xb}, {0x42c, 0x2, 0x0, 0x1, [[@TCA_POLICE_RESULT={0x8, 0x5, 0x5}], [], [@TCA_POLICE_RATE64={0xc, 0x8, 0x9}, @TCA_POLICE_RESULT={0x8, 0x5, 0xbd6}, @TCA_POLICE_RESULT={0x8, 0x5, 0xa955ab14}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6ff2080b, 0x9, 0x9, 0x3, 0x81, 0x1, 0x7, 0x1, 0x1000, 0xfacb, 0x8, 0xfffffff2, 0x7fff, 0x2, 0x4, 0xfffffc00, 0x7, 0x9, 0x784a, 0x7, 0xc, 0xe, 0x8, 0x2, 0x7186, 0x9, 0x8, 0x40000000, 0xb4, 0x60, 0x1, 0x9, 0x9, 0x9, 0x0, 0x7e3, 0x5, 0x0, 0x4, 0x4, 0xfffffe01, 0xa9, 0x8, 0x9, 0x0, 0xfffffffd, 0x1, 0x100, 0x2, 0x1, 0x1, 0x5, 0x9, 0x8, 0x3, 0x5, 0x8, 0x6, 0x10, 0x5, 0x0, 0x8, 0x1000, 0x69b9, 0x8, 0x5635b7f0, 0x9, 0x877, 0x5, 0x5, 0x9, 0x8000, 0x7, 0x9, 0x5, 0x6, 0x3, 0x9, 0x0, 0x2, 0xd, 0x5, 0xfff, 0x8, 0xd, 0xfff, 0xffff, 0xd, 0x3ff, 0x8, 0x8, 0x401, 0xb, 0x1, 0xefc9, 0x8001, 0xfffffffa, 0x0, 0x1, 0x7fffffff, 0x7, 0x900, 0x9, 0xa600, 0x9, 0x5, 0x0, 0x0, 0xc9fb, 0x9, 0x2, 0x80000000, 0x3, 0x67e, 0xe53, 0x8, 0x1, 0x80000001, 0xfffeffff, 0x8, 0x7f, 0x622, 0xa, 0x8000, 0x9d, 0x4, 0x101, 0xfffffffd, 0x5, 0x4d, 0x6461, 0xffffffad, 0xc, 0x6, 0x9, 0x3, 0xfffeffff, 0x2, 0x200000, 0x2, 0x7, 0x1, 0x6, 0x68, 0x8, 0x0, 0xcfdb, 0x400, 0x8, 0xd, 0xffffffff, 0x101, 0x1, 0x7, 0x1599, 0x1ff, 0xc, 0x447, 0xfffffffc, 0x1, 0x2, 0x0, 0xfffffff8, 0x8f, 0x3, 0x0, 0x7, 0x9, 0x2, 0xec2, 0x6, 0x3, 0x800, 0x7, 0x6, 0x9, 0x5, 0x4, 0x0, 0x3, 0x8, 0x8be, 0x7fff, 0x2, 0x40, 0x1ff, 0x9, 0xcbe7, 0x7f, 0x8, 0xc08, 0x7, 0x5, 0x4, 0xe, 0x2, 0x7, 0x4, 0x7, 0x1, 0x9, 0xc, 0x9d00, 0x5, 0x80000001, 0x80000001, 0xbec, 0x5c, 0x80000001, 0x7, 0x2, 0x7, 0x3, 0x8, 0x8, 0x1, 0x9, 0x3, 0x7, 0x45b9, 0x0, 0x5, 0xc, 0x9, 0x2, 0x6b06, 0x3, 0x7, 0x8, 0x331, 0x4, 0x2, 0xffffffe6, 0x870b, 0x8, 0xe2ed, 0x5f01, 0x4, 0x9, 0x6, 0xfffffffe, 0xfff, 0x80, 0x3f31, 0xbb, 0x1000, 0x9, 0x3, 0x7ff, 0x0, 0x0, 0x8, 0x7, 0x6, 0x4, 0xa]}]]}, {0x22, 0x6, "ccdc57dc8edace774ba7e54e7f639e34370b62a72052a5431aa06a123295"}, {0xc}, {0xc, 0x8, {0x3}}}}, @m_mpls={0xe0, 0x1f, 0x0, 0x0, {{0x9}, {0x64, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0xff, 0x5, 0x80, 0x5}, 0x3}}, @TCA_MPLS_LABEL={0x8, 0x5, 0x43f4}, @TCA_MPLS_LABEL={0x8, 0x5, 0x37b99}, @TCA_MPLS_LABEL={0x8, 0x5, 0x30e9}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x80b, 0x8, 0x6, 0x0, 0x5}, 0x4}}, @TCA_MPLS_TC={0x5, 0x6, 0x7}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}]}, {0x53, 0x6, "96986d955fa653444a3d601379169839058212418f8681f2327b9b105bd5e31418412b10ab51efbf536d6faa7284fcdcbb6732089908467917f254c5f0de058b4c6d1dda345d1da5e7e1ac23a4576a"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}]}]}}]}, 0x8a0}, 0x1, 0x0, 0x0, 0x800}, 0x0) memfd_create(&(0x7f0000000040)='\x01\xfd\xae.+\xa6\x8c\xf8\xff2\x199\x94S,|\x99x?Ue[\xbd\xe1!\x03[d \xa0\x97\xf5G\x97A\xc2\xd8\xf0Uq\xe6+\xa5l\x94\v\xd3\a\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\xfa\x18\x8dR\xbb\xea5F\x00G\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xccV\xa6w%\x06\x19\x7f\xc3\xb3O\xe5t3\x03\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\xa1\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xe9k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6x\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x00p+\x96\x1ei|n\xda\xee\x01\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\x9f\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\xf4\xcd\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xffY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\ti\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x17&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96\xb8\x02\x13pA\x19\tf\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcc\b\x00\x00\x00\x00\x00\x00\x00\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01;\xbfM.\xe3\x84\x82\x9c\x91\a\x9b\x191c\xaeLz\xe0\x04Daz\x8d\xc3\x03\xab\x8dEGC$\x00e,\x94#\xcd4\xf9\x05\x88.\x13\x03\x04\xdb\x00\x00\x00\x00\x00', 0x4) r9 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r9, 0xc0105512, &(0x7f0000000200)) 1m32.571877922s ago: executing program 40 (id=7029): ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'team_slave_0\x00', 0x4000}) userfaultfd(0x801) timer_create(0x2, 0x0, &(0x7f0000000000)) r0 = socket(0x80000000000000a, 0x2, 0x0) socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, 0x0, &(0x7f00000000c0)) ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, &(0x7f0000000100)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaa0600aaaa0180c2000000080045000044000000000021907800000000ffffffff050090780a0101026f"], 0x0) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c000000100005ff04000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a", @ANYRES32=r8], 0x3c}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x8, @rand_addr=0x64010100}}, 0xff, 0x3}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000840)={r5, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xd, 0x7, 0x4}, 0x9c) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000640)=0x8000) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xb7}}}, 0x1c) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=@newchain={0x8a0, 0x64, 0x100, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xe, 0x6}, {0xfff3, 0x6}, {0x3, 0x8}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x8001}, @TCA_RATE={0x6, 0x5, {0x4, 0x5}}, @TCA_CHAIN={0x8, 0xb, 0xc}, @TCA_RATE={0x6, 0x5, {0x2}}, @filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_SRC_PORT_MASK={0x6}]}}, @filter_kind_options=@f_flow={{0x9}, {0x830, 0x2, [@TCA_FLOW_EMATCHES={0x40, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x34, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x1, 0x7, 0x8001}, {{0x4, 0x1, 0x0, 0x1}, {0x0, 0x1, 0x0, 0x1}}}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x9000, 0x3, 0x278f}, {0x9, 0x8, 0x800, 0x6}}}]}]}, @TCA_FLOW_PERTURB={0x8, 0xc, 0x8}, @TCA_FLOW_XOR={0x8, 0x7, 0x618}, @TCA_FLOW_POLICE={0x90, 0xa, 0x0, 0x1, [@TCA_POLICE_AVRATE={0x8, 0x4, 0xffff}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0x7, 0x527, 0x2, 0x1, {0x9, 0x1, 0x39e, 0xe, 0x1, 0xfffffffe}, {0x80, 0x0, 0x400, 0x28b4, 0x83f6, 0x8}, 0x56, 0x7fffffff, 0x690}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x3}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0xffffffffffffffff, 0x80000001, 0x7ff, 0x0, {0x2, 0x1, 0x3ff, 0xffff, 0x6, 0xe8}, {0x6, 0x0, 0xf, 0x0, 0x7f, 0x4001}, 0x1000, 0x101, 0x9}}]}, @TCA_FLOW_ACT={0x74c, 0x9, 0x0, 0x1, [@m_xt={0x1f0, 0x7, 0x0, 0x0, {{0x7}, {0x16c, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x7}, @TCA_IPT_TARG={0xb7, 0x6, {0xe60b, 'raw\x00', 0x7, 0x9, "168e51211cb0dac1567328a23adecd528e86128d70a7db97853a2c78627cdda91304290adbec04a3a96b3d9e303a29496aa41cfabf6c14c943dc391fa80b8d8b326812c0b47c0e1ad7e6170ebaaccfe1dc20069e4154d85deddbbce8c087b5548d7f25e21fabf5690e19c02b7bb5ec46704f9612da60faae427bc3ffdf74e48fcb47940a8ae09829bbf8a115a6"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x6}, @TCA_IPT_TARG={0x8e, 0x6, {0xffff, 'raw\x00', 0xe, 0x1, "0129802a0b60f2b583aff63df8785b506e15fc39b254636b7feaa39c02cb49e0a41da7a8575d4f710ec2db08ab8b34cb582bf22aa732548853e6fe2e5128c273f0ee78e2f0bdec236e6394eef6dac5f305646df0c5c7e7b6bfc848b33baa6334138c8fc9"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x3}, @TCA_IPT_HOOK={0x8}]}, {0x5d, 0x6, "162dc327de9ba0a1b090792b06c591ff8cac7b0ee40ed3301c7e248574ea0afc8bbbe6cc43f08fb7ca05d415840da9b776e2ab66d9518c0e5aa58f7e3819afb17e9e74b2c49cf464da95cf2a4eca72f73f294b3fa7359cc509"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_police={0x478, 0x1c, 0x0, 0x0, {{0xb}, {0x42c, 0x2, 0x0, 0x1, [[@TCA_POLICE_RESULT={0x8, 0x5, 0x5}], [], [@TCA_POLICE_RATE64={0xc, 0x8, 0x9}, @TCA_POLICE_RESULT={0x8, 0x5, 0xbd6}, @TCA_POLICE_RESULT={0x8, 0x5, 0xa955ab14}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6ff2080b, 0x9, 0x9, 0x3, 0x81, 0x1, 0x7, 0x1, 0x1000, 0xfacb, 0x8, 0xfffffff2, 0x7fff, 0x2, 0x4, 0xfffffc00, 0x7, 0x9, 0x784a, 0x7, 0xc, 0xe, 0x8, 0x2, 0x7186, 0x9, 0x8, 0x40000000, 0xb4, 0x60, 0x1, 0x9, 0x9, 0x9, 0x0, 0x7e3, 0x5, 0x0, 0x4, 0x4, 0xfffffe01, 0xa9, 0x8, 0x9, 0x0, 0xfffffffd, 0x1, 0x100, 0x2, 0x1, 0x1, 0x5, 0x9, 0x8, 0x3, 0x5, 0x8, 0x6, 0x10, 0x5, 0x0, 0x8, 0x1000, 0x69b9, 0x8, 0x5635b7f0, 0x9, 0x877, 0x5, 0x5, 0x9, 0x8000, 0x7, 0x9, 0x5, 0x6, 0x3, 0x9, 0x0, 0x2, 0xd, 0x5, 0xfff, 0x8, 0xd, 0xfff, 0xffff, 0xd, 0x3ff, 0x8, 0x8, 0x401, 0xb, 0x1, 0xefc9, 0x8001, 0xfffffffa, 0x0, 0x1, 0x7fffffff, 0x7, 0x900, 0x9, 0xa600, 0x9, 0x5, 0x0, 0x0, 0xc9fb, 0x9, 0x2, 0x80000000, 0x3, 0x67e, 0xe53, 0x8, 0x1, 0x80000001, 0xfffeffff, 0x8, 0x7f, 0x622, 0xa, 0x8000, 0x9d, 0x4, 0x101, 0xfffffffd, 0x5, 0x4d, 0x6461, 0xffffffad, 0xc, 0x6, 0x9, 0x3, 0xfffeffff, 0x2, 0x200000, 0x2, 0x7, 0x1, 0x6, 0x68, 0x8, 0x0, 0xcfdb, 0x400, 0x8, 0xd, 0xffffffff, 0x101, 0x1, 0x7, 0x1599, 0x1ff, 0xc, 0x447, 0xfffffffc, 0x1, 0x2, 0x0, 0xfffffff8, 0x8f, 0x3, 0x0, 0x7, 0x9, 0x2, 0xec2, 0x6, 0x3, 0x800, 0x7, 0x6, 0x9, 0x5, 0x4, 0x0, 0x3, 0x8, 0x8be, 0x7fff, 0x2, 0x40, 0x1ff, 0x9, 0xcbe7, 0x7f, 0x8, 0xc08, 0x7, 0x5, 0x4, 0xe, 0x2, 0x7, 0x4, 0x7, 0x1, 0x9, 0xc, 0x9d00, 0x5, 0x80000001, 0x80000001, 0xbec, 0x5c, 0x80000001, 0x7, 0x2, 0x7, 0x3, 0x8, 0x8, 0x1, 0x9, 0x3, 0x7, 0x45b9, 0x0, 0x5, 0xc, 0x9, 0x2, 0x6b06, 0x3, 0x7, 0x8, 0x331, 0x4, 0x2, 0xffffffe6, 0x870b, 0x8, 0xe2ed, 0x5f01, 0x4, 0x9, 0x6, 0xfffffffe, 0xfff, 0x80, 0x3f31, 0xbb, 0x1000, 0x9, 0x3, 0x7ff, 0x0, 0x0, 0x8, 0x7, 0x6, 0x4, 0xa]}]]}, {0x22, 0x6, "ccdc57dc8edace774ba7e54e7f639e34370b62a72052a5431aa06a123295"}, {0xc}, {0xc, 0x8, {0x3}}}}, @m_mpls={0xe0, 0x1f, 0x0, 0x0, {{0x9}, {0x64, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0xff, 0x5, 0x80, 0x5}, 0x3}}, @TCA_MPLS_LABEL={0x8, 0x5, 0x43f4}, @TCA_MPLS_LABEL={0x8, 0x5, 0x37b99}, @TCA_MPLS_LABEL={0x8, 0x5, 0x30e9}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x80b, 0x8, 0x6, 0x0, 0x5}, 0x4}}, @TCA_MPLS_TC={0x5, 0x6, 0x7}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}]}, {0x53, 0x6, "96986d955fa653444a3d601379169839058212418f8681f2327b9b105bd5e31418412b10ab51efbf536d6faa7284fcdcbb6732089908467917f254c5f0de058b4c6d1dda345d1da5e7e1ac23a4576a"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}]}]}}]}, 0x8a0}, 0x1, 0x0, 0x0, 0x800}, 0x0) memfd_create(&(0x7f0000000040)='\x01\xfd\xae.+\xa6\x8c\xf8\xff2\x199\x94S,|\x99x?Ue[\xbd\xe1!\x03[d \xa0\x97\xf5G\x97A\xc2\xd8\xf0Uq\xe6+\xa5l\x94\v\xd3\a\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\xfa\x18\x8dR\xbb\xea5F\x00G\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xccV\xa6w%\x06\x19\x7f\xc3\xb3O\xe5t3\x03\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\xa1\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xe9k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6x\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x00p+\x96\x1ei|n\xda\xee\x01\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\x9f\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\xf4\xcd\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xffY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\ti\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x17&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96\xb8\x02\x13pA\x19\tf\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcc\b\x00\x00\x00\x00\x00\x00\x00\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01;\xbfM.\xe3\x84\x82\x9c\x91\a\x9b\x191c\xaeLz\xe0\x04Daz\x8d\xc3\x03\xab\x8dEGC$\x00e,\x94#\xcd4\xf9\x05\x88.\x13\x03\x04\xdb\x00\x00\x00\x00\x00', 0x4) r9 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r9, 0xc0105512, &(0x7f0000000200)) 13.952976825s ago: executing program 1 (id=7331): r0 = socket$inet6(0xa, 0x2, 0x0) lstat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f, 0x0, r1}}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0xe4) r2 = socket$key(0xf, 0x3, 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x48, 0x2, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x810}, 0x4084) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x28, 0x3, 0x6, 0x301, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x24000004) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) close(r0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f00000004c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x2, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r5, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=@updpolicy={0xb8, 0x15, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x4e21, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8}, {0x0, 0xb}}}, 0xb8}}, 0x0) 13.666787347s ago: executing program 1 (id=7332): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) bind$inet6(0xffffffffffffffff, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cgroups\x00', 0x0, 0x0) read$FUSE(r3, 0x0, 0x0) r4 = socket(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x7, 0xfffffffd, 0x0, 0xc4, 0x3ff, 0x8, 0x0, 0x3}, 0x0) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4, 0x8) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x101, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000240)=[0x0, 0x0], &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x1, 0x25}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b8, &(0x7f0000000140)={r5}) r6 = syz_open_dev$dri(0x0, 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0), 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CURSOR(r2, 0xc01c64a3, &(0x7f0000000280)={0x3, 0x0, 0x1, 0xffff, 0xa, 0x1ff, 0x1}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) 10.83779402s ago: executing program 1 (id=7339): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x88842, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r2 = socket$inet(0x2, 0x1, 0x0) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r5, {0x1, 0x7}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0x0, 0xff, 0x9, 0x8000}, {0x12, 0x2, 0x200, 0x401, 0x8001, 0x1400}, 0x0, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) (async) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r6, 0xc0a85320, &(0x7f0000000440)={{0x80}, 'port1\x00', 0xe3, 0x1b1c07}) (async) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r6, 0x4058534c, &(0x7f0000000000)={0x80, 0x9, 0x2, 0xe05, 0x20000, 0x28e7}) (async) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) r7 = openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0xd40, 0x82) getsockopt$inet_mreqn(r7, 0x0, 0x24, &(0x7f00000001c0)={@local, @broadcast}, &(0x7f0000000200)=0xc) openat$btrfs_control(0xffffff9c, &(0x7f00000002c0), 0x20642, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[], 0x50) (async) r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r8, 0x0, 0x0, 0x0, &(0x7f0000000a00), 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffc}, 0x4c) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r9 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000100)=0xd) (async) ioctl$TCFLSH(r9, 0x540b, 0x0) 10.142031874s ago: executing program 3 (id=7343): socket(0x1, 0x6, 0x8) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$qrtr(0x2a, 0x2, 0x0) syz_open_dev$swradio(&(0x7f0000000080), 0x1, 0x2) unshare(0x2c020680) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r1, 0x29, 0xb, 0x0, 0x0) openat$vicodec1(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0) r2 = openat$vicodec1(0xffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_LOG_STATUS(r2, 0x5646, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000005c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_DEL_STATION(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYRES16=r1, @ANYRESOCT=r0, @ANYBLOB="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", @ANYBLOB="21012cbd7000fbdbdf251400000008000300", @ANYBLOB="0600360000000000e8e50eb26ff91c9b2ca7b8d7917fd15f7338e44500b2eb438979c108c0925c97a69295061ac555f9353f0a3961e821e435454da2cf226c2401ec3bd2128015ed0d425bbd6f8283327f70a641c19f95f04f0a3d07e1410ac6376bc01a824502999629122acb501b91a7d0654a350fefaf6540d8687ad82f68db66344e43cbe6b521b499de2e806c3f1a3ef1ca350ce60339f5c86311a3cd9a5d43c1cb3224f29f544a3f62"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x440) 9.622020657s ago: executing program 3 (id=7345): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000240)=ANY=[@ANYBLOB="d8010000", @ANYRES16=r1, @ANYBLOB="010000000000fbdbdf2501000000080005000100000006000600234e0000140002007767320000000000000000000000000024000300a0cb879a47f5bc644c0e690100000001000000b6e901b9ff2f518c78042fb5427c010880"], 0x1d8}}, 0x0) (fail_nth: 7) 8.967109019s ago: executing program 1 (id=7346): socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = syz_open_dev$video(&(0x7f0000000140), 0x1d24, 0x0) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r3, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f00000016c0)={0x2, 0x0, [{0x2, 0x28, &(0x7f0000000080)=""/40}, {0xd100828e98ba2273, 0xef, &(0x7f00000015c0)=""/239}]}) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f00000003c0)={0x1}) r4 = syz_open_dev$media(&(0x7f0000000040), 0x5, 0x143080) ioctl$MEDIA_IOC_REQUEST_ALLOC(r4, 0x80047c05, &(0x7f0000000000)) poll(0x0, 0x0, 0x9) ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, 0x0) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000000, 0x5d032, 0xffffffffffffffff, 0x0) syz_open_procfs$pagemap(0x0, &(0x7f0000000240)) r5 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCGARP(r5, 0x89a3, &(0x7f0000000340)={{0x3a, 0x0, @private}, {0x0, @multicast}, 0x0, {0x2, 0x0, @remote}}) r6 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r7, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) ioctl$VIDIOC_CREATE_BUFS(r6, 0xc100565c, &(0x7f0000000040)={0x0, 0xfff, 0x4, {0x9, @pix_mp={0x12, 0x5be7, 0xb5315258, 0x6, 0xb, [{0x80000004, 0x7}, {0x7ff, 0x5}, {0x10000001, 0x9}, {0x63d, 0x7fd}, {0x1, 0xb}, {0x7, 0x489aa92e}, {0x5}, {0xff, 0x7}], 0x1, 0xc, 0x2, 0x0, 0x3}}, 0xfffffffd}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 8.928103622s ago: executing program 3 (id=7347): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x6f, 0x48014) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @private1, 0x2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x104) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @loopback}}, {{0xa, 0x2, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x44}}}, 0x104) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x0, 0x0, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x23}, 0x10}, 0x94) sendto$inet6(r4, &(0x7f0000000340), 0x0, 0x10, 0x0, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0xe1de16f30d6386eb, 0x0, 0x0) close(r2) symlink(&(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') readlink(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001200)=""/4096, 0x1000) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000140), 0x3, 0x2) r7 = syz_io_uring_setup(0x6d8a, &(0x7f0000000300)={0x0, 0x8a5, 0x10100, 0x0, 0x264}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000040)=@IORING_OP_SHUTDOWN={0x22, 0x50, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r10}}) io_uring_enter(r7, 0x2df0, 0xcbf1, 0x6c, 0x0, 0xffffffffffffffaf) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000100)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r6, 0x40045612, &(0x7f0000000000)) ioctl$vim2m_VIDIOC_DQBUF(r6, 0xc0585611, &(0x7f0000000200)=@userptr={0x0, 0x1, 0x2, 0x2, 0x0, {0x0, 0x2710}, {0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '#\x00'}, 0x0, 0x2, {0x0}, 0x400}) ioctl$vim2m_VIDIOC_DQBUF(r6, 0xc0585611, &(0x7f0000000280)=@mmap={0x0, 0x1, 0x4, 0x1000, 0x0, {0x77359400}, {0x1, 0xc}, 0xfffffffe}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) 7.025842633s ago: executing program 2 (id=7352): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x50, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x1, 0x1}}, @IFLA_BR_NF_CALL_IP6TABLES={0x5, 0x25, 0x1}, @IFLA_BR_NF_CALL_ARPTABLES={0x5, 0x26, 0x1}]}}}]}, 0x50}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x20, 0x30}, 0xc) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000180)="1a", 0x1, 0x40, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYRES16=r1, @ANYRES32=r1], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f0000005b574e69622bf85eda07b3"], 0x0}, 0x0) r3 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) openat$6lowpan_enable(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000011c0)={0x3, 0x100, 0x0, 0x5, 0x590f, 0x2}) sendto$inet6(r1, &(0x7f0000000c80)='|', 0x1, 0xbcff, 0x0, 0x0) writev(r1, &(0x7f0000000940)=[{&(0x7f0000002340)='E', 0x1}], 0x1) writev(r1, &(0x7f0000001300)=[{&(0x7f0000000100)='^', 0x34000}], 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x24, 0x2, 0x1, 0x401, 0x0, 0x0, {0x7, 0x0, 0x6}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0xb}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x4004000) 6.51949064s ago: executing program 0 (id=7353): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) fadvise64(r0, 0x0, 0x0, 0x6) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e000000850000002a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000080)=r1, 0x4) sendmsg$NFT_MSG_GETGEN(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x10, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x40008ac}, 0x4c10) 6.391716013s ago: executing program 0 (id=7354): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000fcffffff850000000700000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000110000850000008600000095"], &(0x7f0000001a00)='syzkaller\x00', 0xa, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0xe, 0x0, &(0x7f0000000380)="3703c0f1a40000ff463a41c95125", 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0}, 0x4c) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) unshare(0x8000000) shmget$private(0x0, 0x2000, 0x20, &(0x7f0000ffd000/0x2000)=nil) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, 0x0) r5 = dup3(r4, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x7) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) io_uring_setup(0x5665, &(0x7f0000000300)={0x0, 0xd4ea, 0x400, 0x80000001, 0x803}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='oom_score_adj\x00') io_setup(0x8, &(0x7f0000000540)) r8 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) io_submit(0x0, 0x1, &(0x7f0000000200)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x6, 0x6, r8, &(0x7f0000000440), 0x0, 0x2a1f, 0x0, 0x3, r5}]) writev(r7, &(0x7f0000000c80)=[{&(0x7f0000000cc0)='0', 0x1}, {0x0, 0x2}], 0x2) sendmsg$NFT_MSG_GETOBJ(r6, 0x0, 0x0) 6.368883314s ago: executing program 3 (id=7355): syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[], 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f00000001c0)=@e={0xff, 0xa, 0xc, 0x2, @SEQ_CONTROLLER, 0x4, 0x6, 0x5}) 4.595904034s ago: executing program 1 (id=7357): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffff, 0xa}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xfff1, 0xa}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x3, 0x6}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 4.54481646s ago: executing program 9 (id=7358): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r4 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r4, &(0x7f0000000080)={0x1d, r3, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r5, 0x0, {0x1, 0xf0, 0x4}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r7 = accept4(r6, 0x0, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_GET_ADDR(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)={0x40, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x7}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x5}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xca}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x44044001}, 0x4000041) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) socket(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x1c, r9, 0x303, 0x70bd28, 0x0, {0xa}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x0) (fail_nth: 2) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r7, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x40011}, 0x20000004) sendmsg$IPCTNL_MSG_EXP_DELETE(r7, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000580)={0x1ec, 0x2, 0x2, 0x401, 0x0, 0x0, {0x7}, [@CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x3}, @CTA_EXPECT_MASK={0x2c, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x26}}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}, @CTA_EXPECT_TUPLE={0xc8, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x2e}}, {0x14, 0x4, @loopback}}}]}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0xf8cf}, @CTA_EXPECT_HELP_NAME={0xe, 0x6, 'sip-20000\x00'}, @CTA_EXPECT_TUPLE={0xa0, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010101}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}]}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x101}, @CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}, @CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x8080}, 0x40) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2e, 0x25dfdbfc, {0x0, 0x0, 0x74, r5, {0xd, 0x10}, {0xfff1, 0x9}, {0x2, 0xd}}}, 0x51}, 0x1, 0xf0ffffffffffff, 0x0, 0x40001}, 0x20000050) 4.507906584s ago: executing program 0 (id=7359): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) fsetxattr$trusted_overlay_origin(r0, &(0x7f00000001c0), 0x0, 0x0, 0x1) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x0, 0x7fff0000}]}) r2 = dup(r1) fremovexattr(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="c5097374656d2e2f6465762f6b766d00"]) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x40000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = eventfd2(0x3, 0x1) ioctl$KVM_IRQFD(r4, 0x4020ae76, &(0x7f0000000240)={r5, 0x7ff, 0x2, r5}) ioctl$KVM_SET_IRQCHIP(r4, 0xae64, 0x0) ioctl$KVM_SET_PIT2(r2, 0xae71, &(0x7f00000002c0)={[{0x10000, 0x2, 0x0, 0x0, 0x0, 0xfd, 0x0, 0xff, 0x80, 0x1, 0x0, 0x0, 0x100000000000000}, {0xfffffffe, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4, 0x2, 0x0, 0x10, 0x3bc}, {0x10000, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x5, 0x3, 0xfd, 0x0, 0x1, 0xfc, 0x800}]}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00800010003b15fd070000fbdbdf250000", @ANYRES32=0x0, @ANYBLOB="0000000000b401001c001280"], 0x3c}}, 0x0) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_NMI(r6, 0xae9a) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x108000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0xeeee8000, 0x200}) ioctl$KVM_RUN(r6, 0xae80, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_opts(r7, 0x0, 0x19, &(0x7f0000000180)="84", 0x1) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f00000000c0)='veth1_to_team\x00', 0x10) sendto$inet(r7, 0x0, 0x0, 0x804, &(0x7f0000000080)={0x2, 0x4e22, @multicast1}, 0x10) recvmmsg(r7, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x40000002, 0x0) 3.961785999s ago: executing program 2 (id=7360): r0 = socket$nl_route(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000001980)=[{&(0x7f0000000840)="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", 0xbce}], 0x1) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x8026, 0x2823}, [@IFLA_PORT_SELF={0x1c, 0x19, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x2}, @IFLA_PORT_VF={0x8, 0x1, 0x4}]}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0xc044010}, 0x20040040) 3.691618508s ago: executing program 1 (id=7361): r0 = socket(0xa, 0x2400000001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000034000)={0x82000001, {{0xa, 0x4e21, 0xffffff20, @mcast1}}}, 0x84) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x7b5, 0x312, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x6}}}}}]}}]}}, 0x0) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xf, &(0x7f0000000180)={0xfffffffffffffff9, 0xbe}, 0x0) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x6dce6cf62e96ac40, 0x0) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = syz_open_dev$vbi(&(0x7f00000002c0), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r5, 0xc0045627, &(0x7f00000000c0)=0x2) preadv(r5, &(0x7f0000000740)=[{&(0x7f0000000340)=""/162, 0xca80}], 0x1, 0x80000001, 0x3f7a) ioctl$TUNSETLINK(r4, 0x400454cd, 0xfef0) socket$packet(0x11, 0x2, 0x300) r6 = socket$kcm(0x2, 0xa, 0x2) close(0x3) ioctl$FAT_IOCTL_GET_VOLUME_ID(r6, 0x80047213, &(0x7f00000001c0)) socket$nl_route(0x10, 0x3, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r3, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r3, 0x3b89, &(0x7f0000000200)={0x28, 0x0, r7, r8, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)}) socket$nl_route(0x10, 0x3, 0x0) 3.589494887s ago: executing program 0 (id=7362): r0 = socket(0x200000000000011, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000300)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0xffff, @private=0xa010102}, 0x2, 0x3, 0x4}}, 0x2e) mkdir(&(0x7f00000000c0)='./file0\x00', 0x16) r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') unlinkat(r4, &(0x7f0000000280)='./file0\x00', 0x200) r5 = open_tree(0xffffffffffffff9c, &(0x7f00000002c0)='\x00', 0x89901) move_mount(r5, 0x0, r5, 0x0, 0x276) getsockopt(r3, 0x111, 0x1, 0x0, &(0x7f00000000c0)) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @random="518440db9de1"}, 0x14) r6 = socket(0x200000000000011, 0x2, 0x0) bind$packet(r6, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @random="933c547ecfa7"}, 0x14) syz_emit_ethernet(0x5a, &(0x7f0000000180)={@multicast, @empty, @val={@val={0x88a8, 0x2, 0x0, 0x2}, {0x8100, 0x5, 0x1, 0x3}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast2}, {0x0, 0x4e23, 0x30, 0x0, @opaque="2629a5a8f30264b5d9ee6f51c35d65e1272c07cd171531fc452b4d18b6302095a906748f8a1006d1"}}}}}, 0x0) 3.58910981s ago: executing program 2 (id=7363): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x5c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_IE={0x34, 0x2a, [@ht={0x2d, 0x1a, {0x2, 0x0, 0x0, 0x0, {0x4, 0xc1, 0x0, 0xc}, 0x300, 0x1, 0x3}}, @link_id={0x65, 0x12, {@random="1c68fb74f3d3", @device_a, @device_b}}]}, @chandef_params]}, 0x5c}}, 0x0) (fail_nth: 7) 3.513939031s ago: executing program 9 (id=7364): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000700)='./file1\x00', 0x2000775) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0xd, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000300)=0x111, 0x4) write$binfmt_elf64(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x2, 0x0, 0x0, 0x8, 0x3, 0x3e, 0x728, 0x80, 0x40, 0x1, 0x7, 0xc, 0x38, 0x4, 0xfffe, 0x2, 0x4}, [{0x1, 0x10063cc, 0x0, 0x2, 0x7, 0x5, 0xfffffffffffffff1, 0xc031}, {0x6, 0x0, 0x6, 0x1, 0x6, 0x9, 0x3, 0x10001}, {0x7, 0x7, 0xffff, 0x7ff, 0x2, 0x7, 0x100000000}, {0x5, 0x7fff, 0x0, 0x2f9, 0x4, 0xff, 0x5, 0x14f}]}, 0x120) creat(&(0x7f0000001f00)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x30) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) r3 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000200), 0x35c, 0x0) preadv(r3, &(0x7f0000000080)=[{&(0x7f0000000340)=""/245, 0xf5}], 0x1, 0x404, 0xc) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000180)={0x2, 0x77, 0x20a, 0x5, 0x4, 0x4, 0x8, 0x3bc, 0x0}, &(0x7f00000001c0)=0x20) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r6, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_GSI_ROUTING(r6, 0x4008ae6a, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000000000004900000004000000000000000000000009000000070000007b00000091000000000000000000000000000000000000000600000002"]) ioctl$KVM_CAP_STEAL_TIME(r6, 0x4068aea3, &(0x7f0000000000)) fcntl$setsig(r3, 0xa, 0x3a) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000240)={r4, @in={{0x2, 0x4e21, @broadcast}}, 0x8001, 0x99f2, 0x8001, 0xc, 0x90, 0x100, 0x9}, 0x9c) 3.395935277s ago: executing program 0 (id=7365): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e20, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000480)={0x1, [0x0]}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f00000000c0)={r2, 0x2, 0x3, "5bcc38"}, 0xb) syz_usb_connect(0x5, 0x40, &(0x7f00000004c0)=ANY=[@ANYRES8=r2, @ANYBLOB="24119db554fea5764ad12bbe70995c03e3e3365c9fd44de49320c4cc77415a2e23585a70e337c4f763716968d429043bada71ed3bde3df5bf36de2e1d0ec72e15451dc050fc1e63a4226d8c585843f67301b40c8a496eb", @ANYBLOB="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", @ANYRES32=r1], 0x0) 3.302311406s ago: executing program 2 (id=7366): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) io_setup(0x7ff, &(0x7f0000000140)=0x0) socketpair(0x1e, 0x5, 0x0, &(0x7f0000000040)) io_submit(r0, 0x3, &(0x7f00000006c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x2, 0xffffffffffffffff, &(0x7f0000000200)="9f4ee747624cfd3732f07c781959c138ab1e6a8946097eb8f5c67a66034f0a9d98eb46e1ad728080ef0c5a8706be466feaba876bb7fd678a633a930208", 0x3d, 0x5, 0x0, 0x2}, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x7, 0x200, 0xffffffffffffffff, &(0x7f0000000300)="bbd60bfc0acf0ec59b07b501dd36", 0xe, 0xe7}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2, 0x100, 0xffffffffffffffff, &(0x7f0000000640)="24fb321d944ab0debc093dd4b55c62e786e609268e8a43e092959d10f1df23d1530b8abaff9ad38465a8eb3560b0a1f0d218bdab0dd1d22181ce44a8a20ce3d4ee38d9f88b4e8159e7c6ed6dc77d079e89e8edd8c6a85a2bb1e371c418a664abdf221d055253a8611b4a844875", 0x6d, 0x27c53926, 0x0, 0x1}]) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x111240, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r8, {0x0, 0xffff}, {0xffff, 0xf}, {0xd, 0xb}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4008000) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x4, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000002b21c90b000000000000721a5dbb56a3d9e16e7c2179c9b5b24722944820e624fc5b17d0822ca4232c98a9936ba722475ca5", 0x72}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b700c9e37eed5653ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d33330e2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb00"/135, 0x87}, {&(0x7f0000001400)="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", 0x17f}], 0x3}, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r9 = socket$inet_udp(0x2, 0x2, 0x0) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00', 0x0}) sendmsg$nl_xfrm(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="b80000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000000000000000000080000ac3b35bb00000000000000000200000000000000", @ANYRES32=r12, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000"], 0xb8}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) bind$inet(r9, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r9, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r9, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) read$FUSE(0xffffffffffffffff, &(0x7f00000022c0)={0x2020}, 0x2020) 3.109762093s ago: executing program 3 (id=7367): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, &(0x7f00000003c0)={{0x2}, 0x100, './file0\x00'}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) openat$audio(0xffffffffffffff9c, 0x0, 0x40000000040201, 0x0) io_uring_setup(0x4664, 0x0) socket$unix(0x1, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x1, 0x0, 0x0, 0x3}, 0x94) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x4}, {&(0x7f0000000300)='l3', 0x7fffef80}], 0x3}], 0x1, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008004}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r5, 0x5, 0x0, 0x1000, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_BSS_SELECT={0x10, 0xe3, 0x0, 0x1, {0xc, 0x0, [@NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x1, 0x7}}]}}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x44}}, 0x0) 2.739474111s ago: executing program 2 (id=7368): socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = syz_open_dev$video(&(0x7f0000000140), 0x1d24, 0x0) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r3, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f00000016c0)={0x2, 0x0, [{0x2, 0x28, &(0x7f0000000080)=""/40}, {0xd100828e98ba2273, 0xef, &(0x7f00000015c0)=""/239}]}) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f00000003c0)={0x1}) r4 = syz_open_dev$media(&(0x7f0000000040), 0x5, 0x143080) ioctl$MEDIA_IOC_REQUEST_ALLOC(r4, 0x80047c05, &(0x7f0000000000)) poll(0x0, 0x0, 0x9) ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, 0x0) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000000, 0x5d032, 0xffffffffffffffff, 0x0) syz_open_procfs$pagemap(0x0, &(0x7f0000000240)) r5 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCGARP(r5, 0x89a3, &(0x7f0000000340)={{0x3a, 0x0, @private}, {0x0, @multicast}, 0x0, {0x2, 0x0, @remote}}) r6 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x118) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r7, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) ioctl$VIDIOC_CREATE_BUFS(r6, 0xc100565c, &(0x7f0000000040)={0x0, 0xfff, 0x4, {0x9, @pix_mp={0x12, 0x5be7, 0xb5315258, 0x6, 0xb, [{0x80000004, 0x7}, {0x7ff, 0x5}, {0x10000001, 0x9}, {0x63d, 0x7fd}, {0x1, 0xb}, {0x7, 0x489aa92e}, {0x5}, {0xff, 0x7}], 0x1, 0xc, 0x2, 0x0, 0x3}}, 0xfffffffd}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 2.577345744s ago: executing program 9 (id=7369): move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000000009000300"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)={{0x14}, [@NFT_MSG_NEWRULE={0x3944, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x3918, 0x4, 0x0, 0x1, [{0x38f4, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x38e0, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_IMMEDIATE_DATA={0xc0, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}]}, @NFTA_IMMEDIATE_DATA={0x190, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xaa, 0x1, "fc5bb0bcf8ce6cf4a5fc33e4c0a2099f5c8b1ce2e5cd67258120dd61bf7b07ca1f3eb8f62d36672cdc60a98fa440a5ffc63193a6ce792e34ef9d66118aca1c0f96f4ac9c565758fd9302c194b50580f077faa4a012c481e340532169ce32963e78f1aed22ee6fbe78880b84c1499c60bffa21e794651009715a97e25c92f3bc1daa82ff3e8e29d49d28ea4e2661c8897da66ac7d9db3c421e02fd4f6e67d7dc626786ad23103"}, @NFTA_DATA_VALUE={0xdd, 0x1, "0c346fc11a3f1dd98c541d9ea1831c1f0134d0a06e1e6d5b60154a9d90d4239c0af4f523dcdf7a0d1af93850f5290ccc99c28214de6472c6b4bd719b634f889df22e605b86e2156fbedf9a02e7dfaf8d91d73079b9b77e6c3ffaf548601e6e9e4e56ddf7b1814c7b675461a62e8ea2e8a77b7d5da90e439a4a8f9156060bc1b0c16bade2a3d7709408e055ec0c48684df020a0431e936516291190656cd799d49417caf397489396142167be666014f7769496b3cd680c2c2fa2aae8d10c1487e64173114d6ac13fbb176eec601840f1361c2aa74314d28c17"}]}, @NFTA_IMMEDIATE_DATA={0x1280, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0x9e, 0x1, "183a164cd6a164ef9e45702e8d9a12589abb27cda8a5c96c5d0cfa7b16b47d5b54b22a3933c5bf09f6519875ebfe9499ffecc1ed4dbc0c7430c2a76c2e4af9cc6a38933873f4d39073ea71188657a3ebe2a1ee8f9908a7bd38a97e8e86bf8a2ebcf237cce31ee27392e12911755ce1052b09e608e277521905786b885a4441afbcae76c29e695bc16115c510c5c956b5866fd17d64e3d7a2f687"}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VALUE={0x33, 0x1, "edf7a233ccd8ae5bc0dc0e12e7e93a59a6975fef3054736968634c0fe6c86ca76daece0b0e6d75ff5281a9c2f93baa"}, @NFTA_DATA_VALUE={0xb7, 0x1, "c3624646a0733162d7ad706eae9b6ae14fecf191e9c383c9ae219b4cb6a07d75b81e22f89cc1e34e65735160c37d81e68a6de88fc27d3954371c2a7c3e6a259b1e7e97c68cec4e12663fe4d31aad9bd2222e2eb636a10e0ba31900a240f0c182f4e398fed8a139e575cd3160af1cb618ab05072f716e6d33987604a6b14887cc392f8d050c331684a1e16a79e9ac441cf191c81c258f6cce5d89c61b5bcc136df7806474c8186bea6ece93dbe748c68bb19fe5"}, @NFTA_DATA_VALUE={0x23, 0x1, "c9efed5ff40d086b54cd48eab4e266a790cff16954cb8cee7ea3e2b9b424b8"}, @NFTA_DATA_VALUE={0x55, 0x1, "4b8ccb42a498d79345a6e297c3b8a1f7b6ffc8758f4ddb9ac7dbb57fa711ed9b94fff1ad758b0220ce66ff19780d605a5cb0988648981cf80c3ca17cd334003b490c65e62938877fcbb8cd5b901e95ad59"}]}, @NFTA_IMMEDIATE_DATA={0x1e0, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x61, 0x1, "8e7b613907d58531cb1d038dc825aa08cf5a796974fa2f5bf76859267bf21634241d3829cf0fe452762cb60ddc355017da642fc0e1341c92d07dc0f17f298c74168d759e9467316f05685baa6afe29ff9bd54c7e5af1a115d83a017cb9"}, @NFTA_DATA_VALUE={0x5c, 0x1, "1a08e24f6af752d4a21dbea2e5d31420c130ee7fa75e813f358d873e6698e795b2d1aff921e6c937446009475815b4a9a75a5643b0a6a8335fb704e971d01525d46a0c52c6058b26bbb5b955ba5913d95d397a11a6ae0312"}, @NFTA_DATA_VALUE={0x67, 0x1, "35362b6fa295048ffa67695f4c872eb7c91bfa5f655a55a2715b494e307230bba1e6763ee24c000934b4215d8af0d169cbd7340722bac1a605479966b4f32701287d84ddadbd35ba065aac0678301cca3d496d47744b84844cc6c68704cf22d309f383"}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x7}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0x80, 0x1, "d93f7119796f38db64274f8e1fa1137a44e8f4ed2a117e202df3e3aec1d8a3871304e14425d118a53722791b035570c648034bcb7cb501515837a577f97f4cfec7fd31739485d0b5b2dc49e358e554eabac26af05c9e1be32b1b938a13431bd6b5e0eccb30fa761b761b7eef79c099ef4b7dfdb720427b7f36b83de2"}]}, @NFTA_IMMEDIATE_DATA={0x20a8, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x2b, 0x1, "9d8d253eaff5c1422124f5b2022c61efe3c2e9d8d9dbfc42e0031c23c1d2645e5a7e988c40484b"}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffff9}]}]}, @NFTA_IMMEDIATE_DATA={0x17c, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xf2, 0x1, "4c837b4ac8803211c43793bdcdcc5b7acbf34b1f77e5bbf6111c4bb998b3753e915a0ef151b3e18d54b52c25fa117e26f3bf5e3f02622dd3b6a03d542bc7f5009d8e88cb361063b2d6289a3033bb73ce7b7e42a9242b1b38230da33bf896771bf66a3b527ede09081b8e6bdc2f96c86de6150404766fecb3edc3946ac30c7b92c8573ed4b421f96aecc07a01e1c82d639962a67d4a60f01faa15a413961f89074a940e59903c3d1a1cdf61fe97111a0321adb00635a53a35b5b69c42a862e4776dd7d34e8f055fea0e2496b6b75a6d017a4a5a2de0735ad1f3988d179cb45c6a5a492f30b07729f4c897cf60dd2f"}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0xc, 0x1, "37bd842910c4b86a"}, @NFTA_DATA_VALUE={0xb, 0x1, "30276153da80ad"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}]}]}]}}}, {0x20, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0xa}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x396c}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) 2.429014156s ago: executing program 9 (id=7370): r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904010001020d00e7052406000105240000000d240f0100000000000000000006241a00000008241c00000008000905810300020000000904010000020d000009040101"], 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x4, @string={0x4, 0x3, '>M'}}}, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000400)=ANY=[@ANYRESHEX=r0], 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_SEND_PRIO(r2, 0x6b, 0x3, &(0x7f00000000c0)=0x4, 0x4) (async) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000580)={0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="201109"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r1, &(0x7f0000000180)={0xc, &(0x7f0000000040)={0x0, 0x6, 0x83, {0x83, 0x7, "72fffcd4d1f09ef0fffebd998c14660a2954f8bacbc76456158492b7f52dbdc15744bd4aa1b5a04245b5cb5681e891d55edf35e47f9bfac5e36d7c17f3b4dc788edf7db20def2891b4be90f0b3d01b119acbacc84e52bdbd5311fe4f1c2c36978c927414a3d85f41ee83b5f7d6fbd1d722928dc81c313dab88e58b569a9413f199"}}, &(0x7f0000000100)={0x0, 0x3, 0x18, @string={0x18, 0x3, "390f3d183fd6b6d37756ea7701480dadc229105d8802"}}}, &(0x7f00000003c0)={0x18, &(0x7f00000001c0)={0x40, 0x15, 0x6c, "4ff31184ce0957028d091c83d5e2f4d37f2e04ebb815410903fa99f57bcc7e51c268c3e02dc537a070c3b2ea104d9a1b6462d1dd96a8c632b2f67d4b5aecd2ac3e514e8452df9046040ed6b734a62b5bfad2d9c36282dfb4411657ccf8544ecbc266a54a3c9c9a88898eb10a"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0xeb}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000340)={0xc0, 0x5, 0x5, "ac3d233871"}, &(0x7f0000000380)={0x40, 0x5, 0x2, "a035"}}) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 2.054257604s ago: executing program 3 (id=7371): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) process_vm_writev(0x0, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x20000113, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000080)=0x3ff) write$dsp(r3, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x134, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@private0={0xfc, 0x0, '\x00', 0x2}, @in=@rand_addr=0x64010101, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x20, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x3b}, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0x1ff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x134}, 0x1, 0x0, 0x0, 0x8801}, 0x0) syz_emit_ethernet(0xca, &(0x7f0000001300)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x19, 0x4, 0x3, 0x2d, 0xbc, 0x68, 0x0, 0x7, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x31}, @multicast1, {[@timestamp_addr={0x44, 0xc, 0x42, 0x1, 0x7, [{@dev={0xac, 0x14, 0x14, 0x1a}, 0x80000001}]}, @timestamp={0x44, 0x8, 0xa6, 0x0, 0xa, [0x5e]}, @timestamp_addr={0x44, 0x3c, 0x65, 0x1, 0x8, [{@rand_addr=0x64010102, 0xfb1}, {@remote, 0xffffffff}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xb70}, {@dev={0xac, 0x14, 0x14, 0x2c}, 0x3}, {@broadcast, 0x80000001}, {@local, 0x9}, {@private=0xa010101, 0x8}]}]}}, @redirect={0x5, 0x3, 0x0, @dev={0xac, 0x14, 0x14, 0x41}, {0x13, 0x4, 0x1, 0x1d, 0x8, 0x65, 0xf, 0x5, 0x2, 0x6, @multicast2, @multicast1, {[@ssrr={0x89, 0x7, 0x77, [@local]}, @cipso={0x86, 0x2e, 0xffffffffffffffff, [{0x5, 0xc, "b2dbefe37e745d094f56"}, {0x5, 0x2}, {0x5, 0xd, "fff2fd43fdd82794801792"}, {0x1, 0xd, "37ff93ae02b06a962c1e2e"}]}]}}, "c1f4cce9"}}}}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000018000100feffffff00010000000000809d0000000000ffffe0000002fc0100000000000000000000000080010001071c4e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000ac14142500000000000000000000000000000000000000009201000000000000a39b000000000000ffff0000000000001c250800000000000500000000000000fcffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000fefffffffffffffffafffffffcffffff0000000080000000003500000200010020000000480003006465666c61746500"/236], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[], 0x40}}, 0x0) r6 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$printer(r6, 0x0, &(0x7f0000000040)={0x34, &(0x7f0000004400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = socket$kcm(0x1e, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, 0x0}, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYRES32], 0x118) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=ANY=[@ANYBLOB="7c02000021000100000000000100000000000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0003000000000002cc011100e0"], 0x27c}}, 0x0) r9 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r9, 0x5b01, 0x0) syz_usb_disconnect(r6) 967.922565ms ago: executing program 2 (id=7372): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0xfffffffffffffffd, 0xfffffffffffffffe, 0xfffffffc}, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) rmdir(0x0) sendmsg$nl_route(r2, 0x0, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x7}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r3}, {}, {0x46, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x5, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_RTHDR(r5, 0x29, 0x39, 0x0, 0x18) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x9200}, @TCA_FLOW_ADDEND={0x8, 0x5, 0x2}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0xc010) sigaltstack(&(0x7f0000000480)={&(0x7f0000004000)=""/4126, 0x80000001, 0x101e}, 0x0) r10 = gettid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x800000000004, @tid=r10}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 366.105921ms ago: executing program 9 (id=7373): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000), 0x20000328) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) setsockopt$inet_tcp_int(r0, 0x6, 0x25, &(0x7f00000004c0)=0x2, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 147.948471ms ago: executing program 0 (id=7374): syz_mount_image$fuse(0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,us', @ANYRESDEC=0x0, @ANYRESDEC=0x0], 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000100)="16000000246837f73199aee6fdb9291b3091ec1a2d41d227975ad8ec309d59191b00867997f9c0efa9c9092a31cdbb98ea272787afda0af59a320709c3a59ef05c6f40ceafec53f48d6186e7d8409e35306221caf67b370d875eff3191932728e5ab6c9a3acf6ccee3e352c898f5744abaedfb53f92c37acb126bd143f3e9cdfcf25a8d6129fcc3a141c3f5ab6db772f87c787817a9b699dd60732d952716b103bc1e9", 0xa3}], 0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1400"], 0x7c}}, 0x0) r1 = io_uring_setup(0x20, &(0x7f00000000c0)={0x0, 0x0, 0x3000, 0x80000000, 0xfefffffd}) io_uring_register$IORING_REGISTER_RESIZE_RINGS(r1, 0x21, &(0x7f0000000340)={0x0, 0x40eb99, 0x8, 0x0, 0xd5}, 0x1) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000100)=@arm64={0x10, 0x8, 0xf2, '\x00', 0x3}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000040)={0x1d, 0x0, 0x8000000000000003, {}, 0xfd}, 0x18) r4 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') ioctl$FS_IOC_GETVERSION(r5, 0xc0145b0d, &(0x7f0000000040)) 0s ago: executing program 9 (id=7375): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newlink={0x60, 0x10, 0x403, 0x70bd2b, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x28, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_EGRESS_QOS={0x1c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x80}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x9}}]}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x60}, 0x1, 0x0, 0x0, 0x91}, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)=ANY=[@ANYBLOB="6f0027ed", @ANYRES16=r3, @ANYBLOB="01000000000000000000030000005800018044000400200001000a000000000000000000000000000000000000000000000100000000200002000a00000000000000ff020000000000000000000000000001000000000d0001007564703a73797a3000000000"], 0x6c}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000080)=0x6, 0x4) kernel console output (not intermixed with test programs): ber 88 using dummy_hcd [ 1805.506631][T30498] hsr_slave_0: entered promiscuous mode [ 1805.529012][T30498] hsr_slave_1: entered promiscuous mode [ 1805.545432][T30498] debugfs: 'hsr0' already exists in 'hsr' [ 1805.569492][T30498] Cannot create hsr debugfs directory [ 1805.575465][ T5948] usb 10-1: Using ep0 maxpacket: 32 [ 1805.593555][ T5948] usb 10-1: config index 0 descriptor too short (expected 156, got 27) [ 1805.602342][ T5948] usb 10-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1805.658600][ T5948] usb 10-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1805.702911][T29771] cypress_m8 4-1:5.215: DeLorme Earthmate USB converter detected [ 1805.739028][ T5948] usb 10-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1805.782370][T29771] usb 4-1: DeLorme Earthmate USB converter now attached to ttyUSB0 [ 1805.801158][ T5948] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1805.830864][ T5948] usb 10-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1805.844972][T29771] usb 4-1: USB disconnect, device number 100 [ 1805.852311][ T5948] usb 10-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1805.870439][ T5948] usb 10-1: Product: syz [ 1805.882176][ T5948] usb 10-1: Manufacturer: syz [ 1805.887101][ T5948] usb 10-1: SerialNumber: syz [ 1805.898922][T29771] earthmate ttyUSB0: DeLorme Earthmate USB converter now disconnected from ttyUSB0 [ 1805.923177][T29771] cypress_m8 4-1:5.215: device disconnected [ 1805.960991][ T5948] usb 10-1: config 0 descriptor?? [ 1806.001804][ T5885] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 1806.006260][ T5948] ldusb 10-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1806.048828][ T5948] ldusb 10-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1806.177458][ T5885] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1806.200930][ T5885] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1806.260441][ T5885] usb 1-1: config 0 descriptor?? [ 1806.906431][T30524] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1806.922386][T27826] usb 10-1: USB disconnect, device number 88 [ 1806.922476][ C1] ldusb 10-1:0.0: usb_submit_urb failed (-19) [ 1806.995747][ T5836] Bluetooth: hci6: command tx timeout [ 1807.055454][T27826] ldusb 10-1:0.0: LD USB Device #0 now disconnected [ 1807.157258][ T5885] usb 1-1: Cannot set autoneg [ 1807.206501][ T5885] MOSCHIP usb-ethernet driver 1-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 1807.322473][ T5885] usb 1-1: USB disconnect, device number 72 [ 1807.824639][T30555] FAULT_INJECTION: forcing a failure. [ 1807.824639][T30555] name failslab, interval 1, probability 0, space 0, times 0 [ 1807.901052][T30555] CPU: 0 UID: 0 PID: 30555 Comm: syz.9.7091 Not tainted syzkaller #0 PREEMPT(full) [ 1807.901083][T30555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1807.901095][T30555] Call Trace: [ 1807.901105][T30555] [ 1807.901114][T30555] dump_stack_lvl+0x189/0x250 [ 1807.901148][T30555] ? __pfx____ratelimit+0x10/0x10 [ 1807.901176][T30555] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1807.901204][T30555] ? __pfx__printk+0x10/0x10 [ 1807.901233][T30555] ? __pfx___might_resched+0x10/0x10 [ 1807.901262][T30555] should_fail_ex+0x414/0x560 [ 1807.901300][T30555] should_failslab+0xa8/0x100 [ 1807.901324][T30555] kmem_cache_alloc_node_noprof+0x77/0x710 [ 1807.901354][T30555] ? __alloc_skb+0x112/0x2d0 [ 1807.901380][T30555] __alloc_skb+0x112/0x2d0 [ 1807.901404][T30555] netlink_ack+0x146/0xa50 [ 1807.901423][T30555] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1807.901452][T30555] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 1807.901475][T30555] ? __pfx_nl80211_post_doit+0x10/0x10 [ 1807.901501][T30555] ? __asan_memcpy+0x40/0x70 [ 1807.901526][T30555] ? __pfx_ref_tracker_free+0x10/0x10 [ 1807.901554][T30555] netlink_rcv_skb+0x28c/0x470 [ 1807.901572][T30555] ? __lock_acquire+0xab9/0xd20 [ 1807.901592][T30555] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1807.901620][T30555] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1807.901672][T30555] ? down_read+0x1ad/0x2e0 [ 1807.901697][T30555] genl_rcv+0x28/0x40 [ 1807.901721][T30555] netlink_unicast+0x82f/0x9e0 [ 1807.901762][T30555] ? __pfx_netlink_unicast+0x10/0x10 [ 1807.901795][T30555] ? netlink_sendmsg+0x642/0xb30 [ 1807.901813][T30555] ? skb_put+0x11b/0x210 [ 1807.901838][T30555] netlink_sendmsg+0x805/0xb30 [ 1807.901872][T30555] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1807.901898][T30555] ? __import_iovec+0x5d4/0x7f0 [ 1807.901921][T30555] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1807.901952][T30555] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1807.901973][T30555] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1807.901996][T30555] __sock_sendmsg+0x21c/0x270 [ 1807.902029][T30555] ____sys_sendmsg+0x505/0x830 [ 1807.902060][T30555] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1807.902100][T30555] ___sys_sendmsg+0x21f/0x2a0 [ 1807.902127][T30555] ? __pfx____sys_sendmsg+0x10/0x10 [ 1807.902190][T30555] ? __fget_files+0x2a/0x420 [ 1807.902209][T30555] ? __fget_files+0x3a0/0x420 [ 1807.902241][T30555] __sys_sendmsg+0x164/0x220 [ 1807.902266][T30555] ? __pfx___sys_sendmsg+0x10/0x10 [ 1807.902300][T30555] ? __pfx_ksys_write+0x10/0x10 [ 1807.902333][T30555] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 1807.902367][T30555] ? lockdep_hardirqs_on+0x9c/0x150 [ 1807.902399][T30555] __do_fast_syscall_32+0xb6/0x2b0 [ 1807.902419][T30555] ? lockdep_hardirqs_on+0x9c/0x150 [ 1807.902453][T30555] do_fast_syscall_32+0x34/0x80 [ 1807.902472][T30555] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1807.902496][T30555] RIP: 0023:0xf70ad539 [ 1807.902516][T30555] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1807.902532][T30555] RSP: 002b:00000000f549d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1807.902552][T30555] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800006c0 [ 1807.902564][T30555] RDX: 0000000000000800 RSI: 0000000000000000 RDI: 0000000000000000 [ 1807.902574][T30555] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1807.902583][T30555] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1807.902592][T30555] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1807.902618][T30555] [ 1808.665441][T30561] program syz.1.7092 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1809.028927][T30498] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1809.108529][ T5836] Bluetooth: hci6: command tx timeout [ 1809.145962][T30498] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1809.158584][T30570] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1809.213766][T30498] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1809.250221][T30498] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1809.521917][T27447] usb 10-1: new high-speed USB device number 89 using dummy_hcd [ 1809.677665][T27447] usb 10-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 1809.710175][T27447] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1809.785015][T27447] usb 10-1: config 0 descriptor?? [ 1809.800114][T30498] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1809.852007][T27447] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 1809.926096][T30498] 8021q: adding VLAN 0 to HW filter on device team0 [ 1810.029574][T17648] bridge0: port 1(bridge_slave_0) entered blocking state [ 1810.036813][T17648] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1810.140484][T17648] bridge0: port 2(bridge_slave_1) entered blocking state [ 1810.147876][T17648] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1810.196517][T27447] gspca_sunplus: reg_w_riv err -71 [ 1810.204248][T27447] sunplus 10-1:0.0: probe with driver sunplus failed with error -71 [ 1810.259923][T27447] usb 10-1: USB disconnect, device number 89 [ 1810.450112][T30498] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1810.571128][T30498] veth0_vlan: entered promiscuous mode [ 1810.618194][T30498] veth1_vlan: entered promiscuous mode [ 1810.667323][T30498] veth0_macvtap: entered promiscuous mode [ 1810.683964][T30498] veth1_macvtap: entered promiscuous mode [ 1810.728544][T30498] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1810.808199][T30498] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1810.922253][T29998] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 1810.936660][T25623] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1810.967148][T25623] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1810.989540][T25623] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1811.025101][T25623] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1811.104129][T29998] usb 4-1: config index 0 descriptor too short (expected 65183, got 72) [ 1811.119854][T29998] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1811.134561][T29998] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1811.152068][ T5836] Bluetooth: hci6: command tx timeout [ 1811.153704][ T3004] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1811.171316][T29998] usb 4-1: Product: syz [ 1811.190610][T29998] usb 4-1: Manufacturer: syz [ 1811.197156][T29998] usb 4-1: SerialNumber: syz [ 1811.205984][ T3004] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1811.213137][T29998] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1811.232141][T27447] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1811.330988][T17648] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1811.362687][T17648] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1811.680873][T30604] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1811.719001][T30604] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1811.776293][T30604] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1811.830385][T30604] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1811.878728][T30604] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1811.896525][T30604] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1811.915882][T29998] usb 4-1: USB disconnect, device number 101 [ 1812.352686][T27447] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 1812.374488][T27447] ath9k_htc: Failed to initialize the device [ 1812.395751][T29998] usb 4-1: ath9k_htc: USB layer deinitialized [ 1812.791793][T29998] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 1812.942168][T29998] usb 4-1: Using ep0 maxpacket: 32 [ 1812.963891][T29998] usb 4-1: config index 0 descriptor too short (expected 241, got 72) [ 1812.992066][T29998] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 1813.017966][T29998] usb 4-1: config 0 interface 0 altsetting 0 has 6 endpoint descriptors, different from the interface descriptor's value: 5 [ 1813.071180][T29998] usb 4-1: New USB device found, idVendor=110a, idProduct=2210, bcdDevice=bd.da [ 1813.110553][T29998] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1813.203729][T29998] usb 4-1: config 0 descriptor?? [ 1813.254333][T29998] mos7840 4-1:0.0: missing endpoints [ 1813.478270][T27826] usb 4-1: USB disconnect, device number 102 [ 1813.922198][T27826] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 1814.115050][T27826] usb 2-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 1814.141272][T27826] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1814.178174][T27826] usb 2-1: config 0 descriptor?? [ 1814.206685][T27826] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 1814.614795][T27826] gspca_sunplus: reg_w_riv err -71 [ 1814.638445][T27826] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 1814.669302][T27826] usb 2-1: USB disconnect, device number 40 [ 1815.895402][ T5885] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 1816.222973][T29998] usb 10-1: new high-speed USB device number 90 using dummy_hcd [ 1816.241009][ T5885] usb 2-1: Using ep0 maxpacket: 16 [ 1816.264215][ T5885] usb 2-1: config 0 has an invalid interface number: 255 but max is 0 [ 1816.309711][ T5885] usb 2-1: config 0 has no interface number 0 [ 1816.343208][ T5885] usb 2-1: config 0 interface 255 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 1816.381815][ T5885] usb 2-1: config 0 interface 255 altsetting 0 endpoint 0x82 has invalid maxpacket 4672, setting to 1024 [ 1816.412205][ T5885] usb 2-1: config 0 interface 255 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1816.426469][T29998] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1816.458229][ T5885] usb 2-1: New USB device found, idVendor=2001, idProduct=1a02, bcdDevice=bb.ee [ 1816.462028][T29998] usb 10-1: New USB device found, idVendor=249c, idProduct=932c, bcdDevice=f9.1b [ 1816.491401][ T5885] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1816.513399][T30747] FAULT_INJECTION: forcing a failure. [ 1816.513399][T30747] name failslab, interval 1, probability 0, space 0, times 0 [ 1816.525835][T29998] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1816.551518][ T5885] usb 2-1: Product: syz [ 1816.555835][ T5885] usb 2-1: Manufacturer: syz [ 1816.560458][ T5885] usb 2-1: SerialNumber: syz [ 1816.565772][T30747] CPU: 1 UID: 0 PID: 30747 Comm: syz.2.7130 Not tainted syzkaller #0 PREEMPT(full) [ 1816.565802][T30747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1816.565815][T30747] Call Trace: [ 1816.565823][T30747] [ 1816.565832][T30747] dump_stack_lvl+0x189/0x250 [ 1816.565871][T30747] ? __pfx____ratelimit+0x10/0x10 [ 1816.565898][T30747] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1816.565923][T30747] ? __pfx__printk+0x10/0x10 [ 1816.565949][T30747] ? __pfx___might_resched+0x10/0x10 [ 1816.565977][T30747] should_fail_ex+0x414/0x560 [ 1816.566010][T30747] should_failslab+0xa8/0x100 [ 1816.566032][T30747] kmem_cache_alloc_node_noprof+0x77/0x710 [ 1816.566060][T30747] ? __alloc_skb+0x112/0x2d0 [ 1816.566085][T30747] __alloc_skb+0x112/0x2d0 [ 1816.566108][T30747] netlink_ack+0x146/0xa50 [ 1816.566126][T30747] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1816.566149][T30747] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 1816.566172][T30747] ? __pfx_nl80211_post_doit+0x10/0x10 [ 1816.566193][T30747] ? __asan_memcpy+0x40/0x70 [ 1816.566213][T30747] ? __pfx_ref_tracker_free+0x10/0x10 [ 1816.566237][T30747] netlink_rcv_skb+0x28c/0x470 [ 1816.566252][T30747] ? __lock_acquire+0xab9/0xd20 [ 1816.566268][T30747] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1816.566290][T30747] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1816.566323][T30747] ? down_read+0x1ad/0x2e0 [ 1816.566341][T30747] genl_rcv+0x28/0x40 [ 1816.566360][T30747] netlink_unicast+0x82f/0x9e0 [ 1816.566392][T30747] ? __pfx_netlink_unicast+0x10/0x10 [ 1816.566417][T30747] ? netlink_sendmsg+0x642/0xb30 [ 1816.566431][T30747] ? skb_put+0x11b/0x210 [ 1816.566450][T30747] netlink_sendmsg+0x805/0xb30 [ 1816.566475][T30747] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1816.566503][T30747] ? __import_iovec+0x5d4/0x7f0 [ 1816.566522][T30747] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1816.566547][T30747] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1816.566563][T30747] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1816.566580][T30747] __sock_sendmsg+0x21c/0x270 [ 1816.566606][T30747] ____sys_sendmsg+0x505/0x830 [ 1816.566629][T30747] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1816.566661][T30747] ___sys_sendmsg+0x21f/0x2a0 [ 1816.566682][T30747] ? __pfx____sys_sendmsg+0x10/0x10 [ 1816.566732][T30747] ? __fget_files+0x2a/0x420 [ 1816.566746][T30747] ? __fget_files+0x3a0/0x420 [ 1816.566771][T30747] __sys_sendmsg+0x164/0x220 [ 1816.566791][T30747] ? __pfx___sys_sendmsg+0x10/0x10 [ 1816.566817][T30747] ? __pfx_ksys_write+0x10/0x10 [ 1816.566842][T30747] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 1816.566868][T30747] ? lockdep_hardirqs_on+0x9c/0x150 [ 1816.566893][T30747] __do_fast_syscall_32+0xb6/0x2b0 [ 1816.566909][T30747] ? lockdep_hardirqs_on+0x9c/0x150 [ 1816.566935][T30747] do_fast_syscall_32+0x34/0x80 [ 1816.566950][T30747] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1816.566969][T30747] RIP: 0023:0xf702d539 [ 1816.566984][T30747] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1816.566998][T30747] RSP: 002b:00000000f541d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1816.567017][T30747] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000180 [ 1816.567029][T30747] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 1816.567038][T30747] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1816.567048][T30747] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1816.567057][T30747] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1816.567084][T30747] [ 1816.577500][T29998] usb 10-1: config 0 descriptor?? [ 1816.652309][ T5885] usb 2-1: config 0 descriptor?? [ 1817.112684][T29998] usb 10-1: selecting invalid altsetting 0 [ 1817.133017][T29998] usb 10-1: can't set first interface for hiFace device. [ 1817.155384][T29998] snd-usb-hiface 10-1:0.0: probe with driver snd-usb-hiface failed with error -5 [ 1817.280433][T30716] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1817.288135][T30716] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1817.796530][T30732] netlink: 'syz.9.7125': attribute type 10 has an invalid length. [ 1817.808839][T30732] netlink: 40 bytes leftover after parsing attributes in process `syz.9.7125'. [ 1817.821092][T30716] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1817.848767][T30736] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7125'. [ 1817.882710][T30716] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1817.911937][T27826] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 1818.078876][T30732] team0: Port device geneve0 added [ 1818.124362][T27826] usb 4-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 1818.163143][T27826] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1818.370773][T27826] usb 4-1: config 0 descriptor?? [ 1818.389635][T27826] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 1818.513459][T29998] usb 10-1: USB disconnect, device number 90 [ 1818.622938][ T5885] asix 2-1:0.255 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1818.642222][ T5885] asix 2-1:0.255: probe with driver asix failed with error -71 [ 1818.709423][ T5885] usb 2-1: USB disconnect, device number 41 [ 1818.803904][T27826] gspca_sunplus: reg_w_riv err -71 [ 1818.820829][T27826] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 1818.852221][T27826] usb 4-1: USB disconnect, device number 103 [ 1819.229707][T30777] IPVS: set_ctl: invalid protocol: 29 172.20.20.187:20004 [ 1819.294795][T30780] netlink: 88 bytes leftover after parsing attributes in process `syz.9.7137'. [ 1819.330289][T30780] netlink: 88 bytes leftover after parsing attributes in process `syz.9.7137'. [ 1819.846901][T30791] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7138'. [ 1820.936329][T30818] netlink: 72 bytes leftover after parsing attributes in process `syz.0.7143'. [ 1821.252085][T27826] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 1821.771766][T27826] usb 1-1: Using ep0 maxpacket: 8 [ 1821.841909][T27826] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 1821.865133][T27826] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1822.044156][T27826] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1822.105687][T27826] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1822.181136][T27826] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1822.259569][T30836] netlink: 'syz.1.7145': attribute type 16 has an invalid length. [ 1822.399731][T27826] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1822.430471][T30840] IPVS: set_ctl: invalid protocol: 2 172.20.20.52:20003 [ 1822.472690][T30840] IPVS: set_ctl: invalid protocol: 2 172.20.20.52:20003 [ 1822.479729][T30840] IPVS: set_ctl: invalid protocol: 2 172.20.20.52:20003 [ 1822.551915][T17488] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 1822.561335][T30840] IPVS: set_ctl: invalid protocol: 2 172.20.20.52:20003 [ 1822.591330][T27826] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1822.613203][T30840] IPVS: set_ctl: invalid protocol: 2 172.20.20.52:20003 [ 1822.703488][T30840] IPVS: set_ctl: invalid protocol: 2 172.20.20.52:20003 [ 1822.739168][T30840] IPVS: set_ctl: invalid protocol: 2 172.20.20.52:20003 [ 1822.765170][T30840] IPVS: set_ctl: invalid protocol: 2 172.20.20.52:20003 [ 1822.788562][T30840] IPVS: set_ctl: invalid protocol: 2 172.20.20.52:20003 [ 1822.802542][T17488] usb 2-1: Using ep0 maxpacket: 32 [ 1822.816908][T17488] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1822.883877][T30840] IPVS: set_ctl: invalid protocol: 2 172.20.20.52:20003 [ 1822.920131][T17488] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1822.945519][T30840] IPVS: set_ctl: invalid protocol: 2 172.20.20.52:20003 [ 1822.999747][T30840] IPVS: set_ctl: invalid protocol: 2 172.20.20.52:20003 [ 1823.016988][T17488] usb 2-1: New USB device found, idVendor=258a, idProduct=0033, bcdDevice= 0.00 [ 1823.035948][T30840] IPVS: set_ctl: invalid protocol: 2 172.20.20.52:20003 [ 1823.060813][T17488] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1823.073737][T27826] usb 1-1: GET_CAPABILITIES returned 0 [ 1823.079243][T27826] usbtmc 1-1:16.0: can't read capabilities [ 1823.138196][T30840] IPVS: set_ctl: invalid protocol: 2 172.20.20.52:20003 [ 1823.199678][T30840] IPVS: set_ctl: invalid protocol: 2 172.20.20.52:20003 [ 1823.208819][T17488] usb 2-1: config 0 descriptor?? [ 1823.234194][T17488] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1823.252718][T30840] IPVS: set_ctl: invalid protocol: 2 172.20.20.52:20003 [ 1823.293835][T30818] netlink: 96 bytes leftover after parsing attributes in process `syz.0.7143'. [ 1823.303160][T30840] IPVS: set_ctl: invalid protocol: 2 172.20.20.52:20003 [ 1823.325248][T30840] IPVS: set_ctl: invalid protocol: 2 172.20.20.52:20003 [ 1823.333717][T30818] netlink: 96 bytes leftover after parsing attributes in process `syz.0.7143'. [ 1823.343369][T30840] IPVS: set_ctl: invalid protocol: 2 172.20.20.52:20003 [ 1823.372466][T30840] IPVS: set_ctl: invalid protocol: 2 172.20.20.52:20003 [ 1823.409070][T30821] usbtmc 1-1:16.0: usb_control_msg returned -71 [ 1823.416320][T27826] usb 1-1: USB disconnect, device number 73 [ 1823.458062][T30840] IPVS: set_ctl: invalid protocol: 2 172.20.20.52:20003 [ 1823.489567][T30840] IPVS: set_ctl: invalid protocol: 2 172.20.20.52:20003 [ 1823.515122][T30840] IPVS: set_ctl: invalid protocol: 2 172.20.20.52:20003 [ 1823.571631][T30840] IPVS: set_ctl: invalid protocol: 2 172.20.20.52:20003 [ 1823.579461][T30840] IPVS: set_ctl: invalid protocol: 2 172.20.20.52:20003 [ 1823.587849][T30840] IPVS: set_ctl: invalid protocol: 2 172.20.20.52:20003 [ 1823.595301][T30840] IPVS: set_ctl: invalid protocol: 2 172.20.20.52:20003 [ 1823.603473][T30840] IPVS: set_ctl: invalid protocol: 2 172.20.20.52:20003 [ 1823.611020][T30840] IPVS: set_ctl: invalid protocol: 2 172.20.20.52:20003 [ 1823.620859][T30840] IPVS: set_ctl: invalid protocol: 2 172.20.20.52:20003 [ 1823.633664][T30840] IPVS: set_ctl: invalid protocol: 2 172.20.20.52:20003 [ 1823.640793][T30840] IPVS: set_ctl: invalid protocol: 2 172.20.20.52:20003 [ 1823.648469][T30840] IPVS: set_ctl: invalid protocol: 2 172.20.20.52:20003 [ 1824.261926][T27447] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 1824.317612][T30859] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1824.371188][T30859] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1824.449775][T27447] usb 4-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 1824.497913][T27447] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1824.549389][T30857] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1824.592811][T27447] usb 4-1: config 0 descriptor?? [ 1824.623163][T30868] tipc: Enabling of bearer rejected, failed to enable media [ 1824.665553][T27447] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 1825.073405][T27447] gspca_sunplus: reg_w_riv err -71 [ 1825.089347][T27447] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 1825.150183][T27447] usb 4-1: USB disconnect, device number 104 [ 1825.500133][T30881] netlink: 32 bytes leftover after parsing attributes in process `syz.9.7153'. [ 1825.941885][T29998] usb 10-1: new high-speed USB device number 91 using dummy_hcd [ 1825.965677][T17488] usb 2-1: USB disconnect, device number 42 [ 1826.156229][T29998] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1826.200409][T29998] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1826.225152][T30900] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7159'. [ 1826.256151][T29998] usb 10-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 1826.279015][T30900] FAULT_INJECTION: forcing a failure. [ 1826.279015][T30900] name failslab, interval 1, probability 0, space 0, times 0 [ 1826.351313][T29998] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1826.389430][T30900] CPU: 1 UID: 0 PID: 30900 Comm: syz.1.7159 Not tainted syzkaller #0 PREEMPT(full) [ 1826.389461][T30900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1826.389475][T30900] Call Trace: [ 1826.389484][T30900] [ 1826.389494][T30900] dump_stack_lvl+0x189/0x250 [ 1826.389528][T30900] ? __pfx____ratelimit+0x10/0x10 [ 1826.389557][T30900] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1826.389586][T30900] ? __pfx__printk+0x10/0x10 [ 1826.389621][T30900] ? __pfx___might_resched+0x10/0x10 [ 1826.389650][T30900] should_fail_ex+0x414/0x560 [ 1826.389688][T30900] should_failslab+0xa8/0x100 [ 1826.389713][T30900] kmem_cache_alloc_node_noprof+0x77/0x710 [ 1826.389744][T30900] ? __alloc_skb+0x112/0x2d0 [ 1826.389772][T30900] __alloc_skb+0x112/0x2d0 [ 1826.389797][T30900] netlink_ack+0x146/0xa50 [ 1826.389815][T30900] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1826.389840][T30900] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 1826.389864][T30900] ? __pfx_nl80211_post_doit+0x10/0x10 [ 1826.389890][T30900] ? __asan_memcpy+0x40/0x70 [ 1826.389917][T30900] ? __pfx_ref_tracker_free+0x10/0x10 [ 1826.389947][T30900] netlink_rcv_skb+0x28c/0x470 [ 1826.389966][T30900] ? __lock_acquire+0xab9/0xd20 [ 1826.389987][T30900] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1826.390017][T30900] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1826.390060][T30900] ? down_read+0x1ad/0x2e0 [ 1826.390086][T30900] genl_rcv+0x28/0x40 [ 1826.390110][T30900] netlink_unicast+0x82f/0x9e0 [ 1826.390150][T30900] ? __pfx_netlink_unicast+0x10/0x10 [ 1826.390181][T30900] ? netlink_sendmsg+0x642/0xb30 [ 1826.390200][T30900] ? skb_put+0x11b/0x210 [ 1826.390225][T30900] netlink_sendmsg+0x805/0xb30 [ 1826.390258][T30900] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1826.390282][T30900] ? __import_iovec+0x5d4/0x7f0 [ 1826.390306][T30900] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1826.390339][T30900] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1826.390359][T30900] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1826.390382][T30900] __sock_sendmsg+0x21c/0x270 [ 1826.390421][T30900] ____sys_sendmsg+0x505/0x830 [ 1826.390450][T30900] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1826.390490][T30900] ___sys_sendmsg+0x21f/0x2a0 [ 1826.390515][T30900] ? __pfx____sys_sendmsg+0x10/0x10 [ 1826.390579][T30900] ? __fget_files+0x2a/0x420 [ 1826.390598][T30900] ? __fget_files+0x3a0/0x420 [ 1826.390631][T30900] __sys_sendmsg+0x164/0x220 [ 1826.390657][T30900] ? __pfx___sys_sendmsg+0x10/0x10 [ 1826.390692][T30900] ? __pfx_ksys_write+0x10/0x10 [ 1826.390724][T30900] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 1826.390756][T30900] ? lockdep_hardirqs_on+0x9c/0x150 [ 1826.390790][T30900] __do_fast_syscall_32+0xb6/0x2b0 [ 1826.390811][T30900] ? lockdep_hardirqs_on+0x9c/0x150 [ 1826.390845][T30900] do_fast_syscall_32+0x34/0x80 [ 1826.390865][T30900] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1826.390888][T30900] RIP: 0023:0xf7fa6539 [ 1826.390905][T30900] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1826.390921][T30900] RSP: 002b:00000000f549655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1826.390945][T30900] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800006c0 [ 1826.390959][T30900] RDX: 0000000020000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1826.390972][T30900] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1826.390983][T30900] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1826.390995][T30900] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1826.391027][T30900] [ 1826.503360][T29998] usb 10-1: config 0 descriptor?? [ 1826.869301][T30905] Cannot find set identified by id 0 to match [ 1827.358925][T30915] netlink: 72 bytes leftover after parsing attributes in process `syz.1.7161'. [ 1827.724708][T30924] FAULT_INJECTION: forcing a failure. [ 1827.724708][T30924] name failslab, interval 1, probability 0, space 0, times 0 [ 1827.752216][T27826] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 1827.967370][T30924] CPU: 0 UID: 0 PID: 30924 Comm: syz.3.7163 Not tainted syzkaller #0 PREEMPT(full) [ 1827.967401][T30924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1827.967414][T30924] Call Trace: [ 1827.967423][T30924] [ 1827.967433][T30924] dump_stack_lvl+0x189/0x250 [ 1827.967468][T30924] ? __pfx____ratelimit+0x10/0x10 [ 1827.967507][T30924] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1827.967535][T30924] ? __pfx__printk+0x10/0x10 [ 1827.967563][T30924] ? __pfx___might_resched+0x10/0x10 [ 1827.967586][T30924] ? fs_reclaim_acquire+0x7d/0x100 [ 1827.967622][T30924] should_fail_ex+0x414/0x560 [ 1827.967659][T30924] should_failslab+0xa8/0x100 [ 1827.967683][T30924] kmem_cache_alloc_node_noprof+0x77/0x710 [ 1827.967712][T30924] ? __alloc_skb+0x112/0x2d0 [ 1827.967731][T30924] ? netlink_autobind+0xdb/0x300 [ 1827.967759][T30924] __alloc_skb+0x112/0x2d0 [ 1827.967785][T30924] netlink_sendmsg+0x5c6/0xb30 [ 1827.967817][T30924] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1827.967841][T30924] ? __import_iovec+0x5d4/0x7f0 [ 1827.967865][T30924] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1827.967897][T30924] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1827.967918][T30924] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1827.967941][T30924] __sock_sendmsg+0x21c/0x270 [ 1827.967972][T30924] ____sys_sendmsg+0x505/0x830 [ 1827.968002][T30924] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1827.968044][T30924] ___sys_sendmsg+0x21f/0x2a0 [ 1827.968070][T30924] ? __pfx____sys_sendmsg+0x10/0x10 [ 1827.968133][T30924] ? __fget_files+0x2a/0x420 [ 1827.968161][T30924] ? __fget_files+0x3a0/0x420 [ 1827.968200][T30924] __sys_sendmsg+0x164/0x220 [ 1827.968232][T30924] ? __pfx___sys_sendmsg+0x10/0x10 [ 1827.968265][T30924] ? __pfx_ksys_write+0x10/0x10 [ 1827.968305][T30924] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 1827.968346][T30924] ? lockdep_hardirqs_on+0x9c/0x150 [ 1827.968379][T30924] __do_fast_syscall_32+0xb6/0x2b0 [ 1827.968408][T30924] do_fast_syscall_32+0x34/0x80 [ 1827.968428][T30924] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1827.968453][T30924] RIP: 0023:0xf702d539 [ 1827.968472][T30924] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1827.968499][T30924] RSP: 002b:00000000f541d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1827.968522][T30924] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 1827.968537][T30924] RDX: 0000000004000800 RSI: 0000000000000000 RDI: 0000000000000000 [ 1827.968549][T30924] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1827.968561][T30924] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1827.968573][T30924] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1827.968606][T30924] [ 1828.617957][T30933] netlink: 72 bytes leftover after parsing attributes in process `syz.2.7164'. [ 1828.649527][T27826] usb 2-1: Using ep0 maxpacket: 8 [ 1828.893598][ T9] usb 4-1: new full-speed USB device number 105 using dummy_hcd [ 1828.901840][T29998] usbhid 10-1:0.0: can't add hid device: -71 [ 1828.941781][T29998] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 1828.996086][T27826] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 1829.005601][ T5885] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 1829.020560][T27826] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1829.030931][T27826] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1829.059206][T27826] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1829.064091][T29998] usb 10-1: USB disconnect, device number 91 [ 1829.083741][ T9] usb 4-1: config 0 has an invalid interface number: 138 but max is 0 [ 1829.099676][T27826] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1829.142550][T27826] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1829.169243][T27826] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1829.169267][ T9] usb 4-1: config 0 has no interface number 0 [ 1829.233189][ T5885] usb 3-1: Using ep0 maxpacket: 8 [ 1829.305877][ T5885] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 1829.323520][ T5885] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1829.335939][ T5885] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1829.347422][ T5885] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1829.357971][ T5885] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1829.371889][ T5885] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1829.380975][ T5885] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1829.401349][ T9] usb 4-1: config 0 interface 138 altsetting 0 has an endpoint descriptor with address 0x61, changing to 0x1 [ 1829.432213][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=c8.66 [ 1829.468275][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1829.529353][ T9] usb 4-1: config 0 descriptor?? [ 1829.695341][T27826] usb 2-1: GET_CAPABILITIES returned 0 [ 1829.701263][T27826] usbtmc 2-1:16.0: can't read capabilities [ 1829.707678][ T5885] usb 3-1: GET_CAPABILITIES returned 0 [ 1829.739802][ T5885] usbtmc 3-1:16.0: can't read capabilities [ 1829.761651][T29998] usb 10-1: new high-speed USB device number 92 using dummy_hcd [ 1829.804864][ T9] usb 4-1: string descriptor 0 read error: -71 [ 1829.823951][ T9] usbtest 4-1:0.138: Linux gadget zero [ 1829.839851][ T9] usbtest 4-1:0.138: full-speed {control in/out bulk-out iso-out} tests (+alt) [ 1829.889968][ T9] usb 4-1: USB disconnect, device number 105 [ 1829.943735][T29998] usb 10-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 1829.970552][T30933] netlink: 96 bytes leftover after parsing attributes in process `syz.2.7164'. [ 1829.980190][T30933] netlink: 96 bytes leftover after parsing attributes in process `syz.2.7164'. [ 1830.007914][T30914] netlink: 96 bytes leftover after parsing attributes in process `syz.1.7161'. [ 1830.018457][T29998] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1830.036784][T30914] netlink: 96 bytes leftover after parsing attributes in process `syz.1.7161'. [ 1830.058847][T29998] usb 10-1: config 0 descriptor?? [ 1830.086521][T29998] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 1830.133005][T30950] usbtmc 2-1:16.0: usb_control_msg returned -71 [ 1830.140956][T29771] usb 2-1: USB disconnect, device number 43 [ 1830.175838][T27447] usb 3-1: USB disconnect, device number 36 [ 1830.496482][T29998] gspca_sunplus: reg_w_riv err -71 [ 1830.501838][T29998] sunplus 10-1:0.0: probe with driver sunplus failed with error -71 [ 1830.822131][T27826] usb 4-1: new full-speed USB device number 106 using dummy_hcd [ 1830.880896][T29998] usb 10-1: USB disconnect, device number 92 [ 1830.985578][T27826] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1831.020266][T27826] usb 4-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 1831.080830][T27826] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1831.110034][T27826] usb 4-1: Product: syz [ 1831.123286][T27826] usb 4-1: Manufacturer: syz [ 1831.140461][T27826] usb 4-1: SerialNumber: syz [ 1831.160926][T30969] binder: BINDER_SET_CONTEXT_MGR already set [ 1831.179033][T27826] usb 4-1: config 0 descriptor?? [ 1831.190999][T30969] binder: 30967:30969 ioctl 4018620d 80000100 returned -16 [ 1831.248497][T27826] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 1831.804451][T27826] gspca_pac7302: reg_w() failed i: ff v: 01 error -110 [ 1831.833620][T27826] gspca_pac7302 4-1:0.0: probe with driver gspca_pac7302 failed with error -110 [ 1832.678488][T30998] netlink: 'syz.2.7173': attribute type 2 has an invalid length. [ 1832.753635][T30999] fuse: Bad value for 'fd' [ 1832.758267][T30998] netlink: 'syz.2.7173': attribute type 9 has an invalid length. [ 1832.786771][T30998] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.7173'. [ 1832.823229][T29771] usb 4-1: USB disconnect, device number 106 [ 1832.843618][T31001] fuse: Unknown parameter 'group_id00000000000000000000' [ 1832.978937][T30999] bond1: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 1833.004317][T30999] bond1 (unregistering): Released all slaves [ 1833.137187][T31010] tipc: Started in network mode [ 1833.146997][T31010] tipc: Node identity 2a4187e0ef2f, cluster identity 4711 [ 1833.209100][T31010] tipc: Enabled bearer , priority 0 [ 1833.247464][T31007] syzkaller0: entered promiscuous mode [ 1833.259260][T31007] syzkaller0: entered allmulticast mode [ 1833.277994][T31007] tipc: Resetting bearer [ 1833.289122][T31007] syzkaller0: tun_net_xmit 90 [ 1833.326907][T31005] tipc: Resetting bearer [ 1833.511980][T31005] tipc: Disabling bearer [ 1833.771387][T31022] FAULT_INJECTION: forcing a failure. [ 1833.771387][T31022] name failslab, interval 1, probability 0, space 0, times 0 [ 1833.807043][T31022] CPU: 0 UID: 0 PID: 31022 Comm: syz.2.7177 Not tainted syzkaller #0 PREEMPT(full) [ 1833.807074][T31022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1833.807086][T31022] Call Trace: [ 1833.807095][T31022] [ 1833.807104][T31022] dump_stack_lvl+0x189/0x250 [ 1833.807137][T31022] ? __pfx____ratelimit+0x10/0x10 [ 1833.807177][T31022] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1833.807205][T31022] ? __pfx__printk+0x10/0x10 [ 1833.807235][T31022] ? __pfx___might_resched+0x10/0x10 [ 1833.807263][T31022] should_fail_ex+0x414/0x560 [ 1833.807298][T31022] should_failslab+0xa8/0x100 [ 1833.807321][T31022] kmem_cache_alloc_node_noprof+0x77/0x710 [ 1833.807351][T31022] ? __alloc_skb+0x112/0x2d0 [ 1833.807379][T31022] __alloc_skb+0x112/0x2d0 [ 1833.807403][T31022] netlink_ack+0x146/0xa50 [ 1833.807420][T31022] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1833.807442][T31022] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 1833.807464][T31022] ? __pfx_nl80211_post_doit+0x10/0x10 [ 1833.807491][T31022] ? __asan_memcpy+0x40/0x70 [ 1833.807518][T31022] ? __pfx_ref_tracker_free+0x10/0x10 [ 1833.807548][T31022] netlink_rcv_skb+0x28c/0x470 [ 1833.807568][T31022] ? __lock_acquire+0xab9/0xd20 [ 1833.807589][T31022] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1833.807618][T31022] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1833.807661][T31022] ? down_read+0x1ad/0x2e0 [ 1833.807686][T31022] genl_rcv+0x28/0x40 [ 1833.807709][T31022] netlink_unicast+0x82f/0x9e0 [ 1833.807756][T31022] ? __pfx_netlink_unicast+0x10/0x10 [ 1833.807790][T31022] ? netlink_sendmsg+0x642/0xb30 [ 1833.807809][T31022] ? skb_put+0x11b/0x210 [ 1833.807835][T31022] netlink_sendmsg+0x805/0xb30 [ 1833.807869][T31022] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1833.807894][T31022] ? __import_iovec+0x5d4/0x7f0 [ 1833.807918][T31022] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1833.807951][T31022] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1833.807972][T31022] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1833.807995][T31022] __sock_sendmsg+0x21c/0x270 [ 1833.808028][T31022] ____sys_sendmsg+0x505/0x830 [ 1833.808057][T31022] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1833.808100][T31022] ___sys_sendmsg+0x21f/0x2a0 [ 1833.808127][T31022] ? __pfx____sys_sendmsg+0x10/0x10 [ 1833.808196][T31022] ? __fget_files+0x2a/0x420 [ 1833.808215][T31022] ? __fget_files+0x3a0/0x420 [ 1833.808246][T31022] __sys_sendmsg+0x164/0x220 [ 1833.808271][T31022] ? __pfx___sys_sendmsg+0x10/0x10 [ 1833.808305][T31022] ? __pfx_ksys_write+0x10/0x10 [ 1833.808335][T31022] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 1833.808367][T31022] ? lockdep_hardirqs_on+0x9c/0x150 [ 1833.808399][T31022] __do_fast_syscall_32+0xb6/0x2b0 [ 1833.808419][T31022] ? lockdep_hardirqs_on+0x9c/0x150 [ 1833.808452][T31022] do_fast_syscall_32+0x34/0x80 [ 1833.808471][T31022] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1833.808494][T31022] RIP: 0023:0xf702d539 [ 1833.808512][T31022] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1833.808531][T31022] RSP: 002b:00000000f541d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1833.808553][T31022] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000480 [ 1833.808568][T31022] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1833.808580][T31022] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1833.808591][T31022] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1833.808603][T31022] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1833.808636][T31022] [ 1834.282067][T29771] usb 10-1: new high-speed USB device number 93 using dummy_hcd [ 1834.432304][T29771] usb 10-1: Using ep0 maxpacket: 16 [ 1834.440721][T29771] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1834.452975][T29771] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1834.518021][T29771] usb 10-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1834.537467][T29771] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1834.547499][T29771] usb 10-1: Product: syz [ 1834.552132][T29771] usb 10-1: Manufacturer: syz [ 1834.556954][T29771] usb 10-1: SerialNumber: syz [ 1834.581725][T29771] usb 10-1: config 0 descriptor?? [ 1834.642558][T29771] em28xx 10-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1834.670731][T31024] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1834.734572][T29771] em28xx 10-1:0.0: Audio interface 0 found (Vendor Class) [ 1834.763888][T31026] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 1834.794381][ T3004] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1834.963378][ T13] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1835.230294][T29771] em28xx 10-1:0.0: unknown em28xx chip ID (0) [ 1835.258068][T29771] em28xx 10-1:0.0: Config register raw data: 0xfffffffb [ 1835.391739][T31043] sg_write: data in/out 64380/1 bytes for SCSI command 0x1c-- guessing data in; [ 1835.391739][T31043] program syz.3.7178 not setting count and/or reply_len properly [ 1835.792204][ T9] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 1835.967338][ T9] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1836.094304][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1836.139653][ T9] usb 1-1: Product: syz [ 1836.165983][ T9] usb 1-1: Manufacturer: syz [ 1836.181182][ T9] usb 1-1: SerialNumber: syz [ 1836.335428][T29771] em28xx 10-1:0.0: AC97 vendor ID = 0x00fc00fe [ 1836.471731][T27447] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 1836.555617][T29771] em28xx 10-1:0.0: Unknown AC97 audio processor detected! [ 1836.612301][T29771] em28xx 10-1:0.0: couldn't setup AC97 register 2 [ 1836.632439][T27447] usb 3-1: Using ep0 maxpacket: 8 [ 1836.652568][T29771] em28xx 10-1:0.0: couldn't setup AC97 register 4 [ 1836.660634][T27447] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1836.674974][T29771] em28xx 10-1:0.0: couldn't setup AC97 register 6 [ 1836.683192][ T9] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1836.705046][T27447] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1836.722480][T29771] em28xx 10-1:0.0: couldn't setup AC97 register 54 [ 1836.754710][ T9] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1836.767832][T27447] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1836.778184][T29771] em28xx 10-1:0.0: couldn't setup AC97 register 56 [ 1836.812309][T27447] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1836.828948][T29771] usb 10-1: USB disconnect, device number 93 [ 1836.864687][T27447] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1836.893084][T27447] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1837.128975][T27447] usb 3-1: GET_CAPABILITIES returned 0 [ 1837.135919][T27447] usbtmc 3-1:16.0: can't read capabilities [ 1837.340353][ C1] usbtmc 3-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 1837.352226][T31059] usbtmc 3-1:16.0: Unable to send data, error -71 [ 1837.815709][T31073] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7189'. [ 1837.829331][T31073] netlink: 80 bytes leftover after parsing attributes in process `syz.9.7189'. [ 1837.866212][T17488] usb 3-1: USB disconnect, device number 37 [ 1838.506698][ T9] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000040. ret = -EPROTO [ 1838.583839][ T9] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 1838.664178][ T9] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 1838.692313][ T9] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1838.745728][ T9] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1838.812978][ T9] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 1838.905897][ T9] usb 1-1: USB disconnect, device number 74 [ 1840.240398][T31101] FAULT_INJECTION: forcing a failure. [ 1840.240398][T31101] name failslab, interval 1, probability 0, space 0, times 0 [ 1840.253852][T31101] CPU: 0 UID: 0 PID: 31101 Comm: syz.1.7197 Not tainted syzkaller #0 PREEMPT(full) [ 1840.253882][T31101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1840.253891][T31101] Call Trace: [ 1840.253897][T31101] [ 1840.253903][T31101] dump_stack_lvl+0x189/0x250 [ 1840.253925][T31101] ? __pfx____ratelimit+0x10/0x10 [ 1840.253943][T31101] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1840.253959][T31101] ? __pfx__printk+0x10/0x10 [ 1840.253975][T31101] ? __pfx___might_resched+0x10/0x10 [ 1840.253992][T31101] should_fail_ex+0x414/0x560 [ 1840.254012][T31101] should_failslab+0xa8/0x100 [ 1840.254027][T31101] kmem_cache_alloc_node_noprof+0x77/0x710 [ 1840.254046][T31101] ? __alloc_skb+0x112/0x2d0 [ 1840.254085][T31101] __alloc_skb+0x112/0x2d0 [ 1840.254099][T31101] netlink_ack+0x146/0xa50 [ 1840.254110][T31101] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1840.254125][T31101] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 1840.254139][T31101] ? __pfx_nl80211_post_doit+0x10/0x10 [ 1840.254153][T31101] ? __asan_memcpy+0x40/0x70 [ 1840.254168][T31101] ? __pfx_ref_tracker_free+0x10/0x10 [ 1840.254185][T31101] netlink_rcv_skb+0x28c/0x470 [ 1840.254196][T31101] ? __lock_acquire+0xab9/0xd20 [ 1840.254209][T31101] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1840.254225][T31101] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1840.254248][T31101] ? down_read+0x1ad/0x2e0 [ 1840.254267][T31101] genl_rcv+0x28/0x40 [ 1840.254281][T31101] netlink_unicast+0x82f/0x9e0 [ 1840.254303][T31101] ? __pfx_netlink_unicast+0x10/0x10 [ 1840.254321][T31101] ? netlink_sendmsg+0x642/0xb30 [ 1840.254332][T31101] ? skb_put+0x11b/0x210 [ 1840.254346][T31101] netlink_sendmsg+0x805/0xb30 [ 1840.254364][T31101] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1840.254379][T31101] ? __import_iovec+0x5d4/0x7f0 [ 1840.254392][T31101] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1840.254411][T31101] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1840.254423][T31101] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1840.254436][T31101] __sock_sendmsg+0x21c/0x270 [ 1840.254454][T31101] ____sys_sendmsg+0x505/0x830 [ 1840.254471][T31101] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1840.254495][T31101] ___sys_sendmsg+0x21f/0x2a0 [ 1840.254510][T31101] ? __pfx____sys_sendmsg+0x10/0x10 [ 1840.254545][T31101] ? __fget_files+0x2a/0x420 [ 1840.254557][T31101] ? __fget_files+0x3a0/0x420 [ 1840.254575][T31101] __sys_sendmsg+0x164/0x220 [ 1840.254589][T31101] ? __pfx___sys_sendmsg+0x10/0x10 [ 1840.254608][T31101] ? __pfx_ksys_write+0x10/0x10 [ 1840.254627][T31101] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 1840.254645][T31101] ? lockdep_hardirqs_on+0x9c/0x150 [ 1840.254663][T31101] __do_fast_syscall_32+0xb6/0x2b0 [ 1840.254676][T31101] ? lockdep_hardirqs_on+0x9c/0x150 [ 1840.254700][T31101] do_fast_syscall_32+0x34/0x80 [ 1840.254712][T31101] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1840.254726][T31101] RIP: 0023:0xf7fa6539 [ 1840.254739][T31101] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1840.254749][T31101] RSP: 002b:00000000f549655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1840.254765][T31101] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000280 [ 1840.254774][T31101] RDX: 0000000000044000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1840.254782][T31101] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1840.254789][T31101] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1840.254796][T31101] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1840.254816][T31101] [ 1841.712072][ T9] usb 2-1: new full-speed USB device number 44 using dummy_hcd [ 1841.898748][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1841.942044][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1842.015449][ T9] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1842.091783][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1842.116626][ T9] usb 2-1: config 0 descriptor?? [ 1842.651768][ T9] savu 0003:1E7D:2D5A.0020: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 1843.547595][ C1] sd 0:0:1:0: [sda] tag#1515 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1843.558158][ C1] sd 0:0:1:0: [sda] tag#1515 CDB: Write(6) 0a 00 00 00 00 00 00 00 fe 80 00 00 [ 1843.811602][ T5885] usb 10-1: new high-speed USB device number 94 using dummy_hcd [ 1843.974100][ T5885] usb 10-1: config 1 interface 0 has no altsetting 0 [ 1843.986177][ T5885] usb 10-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.40 [ 1844.000083][ T5885] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1844.010560][ T5885] usb 10-1: Product: syz [ 1844.015414][ T5885] usb 10-1: Manufacturer: syz [ 1844.020819][ T5885] usb 10-1: SerialNumber: syz [ 1844.122142][T27826] usb 2-1: reset full-speed USB device number 44 using dummy_hcd [ 1844.246237][ T5885] usbhid 10-1:1.0: can't add hid device: -71 [ 1844.267284][ T5885] usbhid 10-1:1.0: probe with driver usbhid failed with error -71 [ 1844.300185][ T5885] usb 10-1: USB disconnect, device number 94 [ 1844.961658][T27447] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 1845.192832][T27447] usb 4-1: Using ep0 maxpacket: 8 [ 1845.219470][T27447] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1845.267724][T27447] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1845.380528][T27447] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1845.390161][T27447] pvrusb2: ********** [ 1845.394993][T27447] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1845.413210][T17488] usb 2-1: USB disconnect, device number 44 [ 1845.440708][T27447] pvrusb2: Important functionality might not be entirely working. [ 1845.510442][T27447] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1845.574038][T27447] pvrusb2: ********** [ 1845.599969][T31145] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1845.638492][T31145] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1845.697625][ T2347] pvrusb2: Invalid write control endpoint [ 1845.937487][T27447] usb 4-1: USB disconnect, device number 107 [ 1846.033174][ T2347] pvrusb2: Invalid write control endpoint [ 1846.039028][ T2347] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1846.101646][ T2347] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1846.155248][ T2347] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1846.203576][ T2347] pvrusb2: Device being rendered inoperable [ 1846.231826][ T2347] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 1846.305120][ T2347] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 1846.345670][ T2347] pvrusb2: Attached sub-driver cx25840 [ 1846.351356][ T2347] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1846.397653][ T2347] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1847.300004][T31181] FAULT_INJECTION: forcing a failure. [ 1847.300004][T31181] name failslab, interval 1, probability 0, space 0, times 0 [ 1847.322076][T31180] input: syz1 as /devices/virtual/input/input151 [ 1847.367768][T31181] CPU: 1 UID: 0 PID: 31181 Comm: syz.1.7217 Not tainted syzkaller #0 PREEMPT(full) [ 1847.367795][T31181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1847.367804][T31181] Call Trace: [ 1847.367810][T31181] [ 1847.367816][T31181] dump_stack_lvl+0x189/0x250 [ 1847.367838][T31181] ? __pfx____ratelimit+0x10/0x10 [ 1847.367855][T31181] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1847.367871][T31181] ? __pfx__printk+0x10/0x10 [ 1847.367885][T31181] ? __pfx___might_resched+0x10/0x10 [ 1847.367899][T31181] ? fs_reclaim_acquire+0x7d/0x100 [ 1847.367920][T31181] should_fail_ex+0x414/0x560 [ 1847.367941][T31181] should_failslab+0xa8/0x100 [ 1847.367955][T31181] __kmalloc_noprof+0xcb/0x7f0 [ 1847.367971][T31181] ? rcu_is_watching+0x15/0xb0 [ 1847.367983][T31181] ? security_prepare_creds+0x52/0x390 [ 1847.368001][T31181] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 1847.368018][T31181] security_prepare_creds+0x52/0x390 [ 1847.368036][T31181] prepare_creds+0x497/0x6c0 [ 1847.368055][T31181] join_session_keyring+0x1b/0x440 [ 1847.368074][T31181] keyctl_join_session_keyring+0x88/0xc0 [ 1847.368089][T31181] __do_fast_syscall_32+0xb6/0x2b0 [ 1847.368101][T31181] ? lockdep_hardirqs_on+0x9c/0x150 [ 1847.368121][T31181] do_fast_syscall_32+0x34/0x80 [ 1847.368132][T31181] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1847.368147][T31181] RIP: 0023:0xf7fa6539 [ 1847.368158][T31181] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1847.368170][T31181] RSP: 002b:00000000f547555c EFLAGS: 00000206 ORIG_RAX: 0000000000000120 [ 1847.368184][T31181] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 0000000080000040 [ 1847.368194][T31181] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1847.368201][T31181] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1847.368208][T31181] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1847.368216][T31181] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1847.368234][T31181] [ 1848.854423][T31208] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1848.872121][T31203] binder: 31200:31203 ioctl c0306201 0 returned -14 [ 1849.342757][T17488] usb 3-1: new full-speed USB device number 38 using dummy_hcd [ 1850.387914][T17488] usb 3-1: config 0 has an invalid interface number: 214 but max is 0 [ 1850.396488][T17488] usb 3-1: config 0 has no interface number 0 [ 1850.402660][T17488] usb 3-1: config 0 interface 214 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 1850.414556][T17488] usb 3-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1850.426932][T17488] usb 3-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 1850.436350][T17488] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1850.444673][T17488] usb 3-1: Product: syz [ 1850.448861][T17488] usb 3-1: Manufacturer: syz [ 1850.453686][T17488] usb 3-1: SerialNumber: syz [ 1850.466861][T17488] usb 3-1: config 0 descriptor?? [ 1850.822650][T17488] usbtouchscreen 3-1:0.214: Failed to read FW rev: -71 [ 1850.829915][T17488] usbtouchscreen 3-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 1850.896062][T17488] usb 3-1: USB disconnect, device number 38 [ 1851.792177][ T1228] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 1851.952566][ T1228] usb 2-1: Using ep0 maxpacket: 8 [ 1851.961999][ T1228] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 1851.978173][ T1228] usb 2-1: config 0 has no interface number 0 [ 1851.991804][ T1228] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1852.011843][ T1228] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1852.041550][ T1228] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1852.072473][ T1228] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1852.102427][ T1228] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1852.131109][ T1228] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1852.152235][ T1228] usb 2-1: config 0 descriptor?? [ 1852.161054][ T1228] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1852.389179][ T1228] usb 2-1: USB disconnect, device number 45 [ 1852.402531][ T1228] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 1852.452948][T25767] usb 3-1: new full-speed USB device number 39 using dummy_hcd [ 1852.671294][T25767] usb 3-1: config 0 has an invalid interface number: 120 but max is 0 [ 1852.679985][T25767] usb 3-1: config 0 has no interface number 0 [ 1852.686452][T25767] usb 3-1: config 0 interface 120 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1852.702352][T25767] usb 3-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 1852.712175][T25767] usb 3-1: New USB device strings: Mfr=32, Product=0, SerialNumber=0 [ 1852.720361][T25767] usb 3-1: Manufacturer: syz [ 1852.733401][T25767] usb 3-1: config 0 descriptor?? [ 1852.751688][T25767] input: syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.120/input/input154 [ 1852.968415][ T9] usb 3-1: USB disconnect, device number 39 [ 1853.262024][T25767] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 1853.513106][T25767] usb 2-1: Using ep0 maxpacket: 8 [ 1853.534622][T25767] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1853.561585][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 1853.567992][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1853.582236][T25767] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1853.610240][T25767] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1853.643098][T25767] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1853.661145][T25767] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1853.670731][T25767] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1853.942008][ T30] audit: type=1326 audit(1763638219.107:2099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31266 comm="syz.2.7239" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 1854.001567][T25767] usb 2-1: GET_CAPABILITIES returned 0 [ 1854.001845][ T30] audit: type=1326 audit(1763638219.127:2100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31266 comm="syz.2.7239" exe="/root/syz-executor" sig=0 arch=40000003 syscall=138 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 1854.007121][T25767] usbtmc 2-1:16.0: can't read capabilities [ 1854.157077][ C0] usbtmc 2-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 1854.166829][T31243] usbtmc 2-1:16.0: Unable to send data, error -71 [ 1854.260432][ T30] audit: type=1326 audit(1763638219.127:2101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31266 comm="syz.2.7239" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 1854.301895][ T30] audit: type=1326 audit(1763638219.127:2102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31266 comm="syz.2.7239" exe="/root/syz-executor" sig=0 arch=40000003 syscall=120 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 1854.367462][ T30] audit: type=1326 audit(1763638219.347:2103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31266 comm="syz.2.7239" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 1854.450404][ T30] audit: type=1326 audit(1763638219.347:2104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31266 comm="syz.2.7239" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 1854.535200][ T30] audit: type=1326 audit(1763638219.397:2105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31271 comm="syz.2.7239" exe="/root/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 1854.612016][T27447] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 1854.645102][ T30] audit: type=1326 audit(1763638219.397:2106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31266 comm="syz.2.7239" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 1854.766986][ T30] audit: type=1326 audit(1763638219.397:2107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31266 comm="syz.2.7239" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 1854.820511][T27447] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 1854.836311][T27447] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1854.857078][ T1228] usb 2-1: USB disconnect, device number 46 [ 1854.921518][T27447] usb 3-1: Product: syz [ 1854.925748][T27447] usb 3-1: Manufacturer: syz [ 1854.946574][T27447] usb 3-1: SerialNumber: syz [ 1854.955614][ T30] audit: type=1326 audit(1763638219.397:2108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31266 comm="syz.2.7239" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 1854.999056][T27447] usb 3-1: config 0 descriptor?? [ 1855.024504][T27447] ch341 3-1:0.0: ch341-uart converter detected [ 1855.041595][T25767] usb 10-1: new high-speed USB device number 95 using dummy_hcd [ 1855.181622][T25767] usb 10-1: device descriptor read/64, error -71 [ 1855.444274][T31285] netlink: 72 bytes leftover after parsing attributes in process `syz.1.7242'. [ 1855.480218][T25767] usb 10-1: new high-speed USB device number 96 using dummy_hcd [ 1855.771762][ T1228] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 1855.779427][T25767] usb 10-1: device descriptor read/64, error -71 [ 1855.901876][T25767] usb usb10-port1: attempt power cycle [ 1855.951868][ T1228] usb 2-1: Using ep0 maxpacket: 8 [ 1855.981962][ T1228] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 1855.997712][ T1228] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1856.080608][ T1228] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1856.093760][ T1228] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1856.104666][ T1228] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1856.125432][ T1228] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1856.159570][ T1228] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1856.209777][T27447] usb 3-1: failed to receive control message: -110 [ 1856.241728][T25767] usb 10-1: new high-speed USB device number 97 using dummy_hcd [ 1856.263524][T27447] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -110 [ 1856.294977][T25767] usb 10-1: device descriptor read/8, error -71 [ 1856.467766][T31296] tipc: Started in network mode [ 1856.475037][T31296] tipc: Node identity 4, cluster identity 4711 [ 1856.483297][T31296] tipc: Node number set to 4 [ 1856.524083][T31285] netlink: 96 bytes leftover after parsing attributes in process `syz.1.7242'. [ 1856.533158][T25767] usb 10-1: new high-speed USB device number 98 using dummy_hcd [ 1856.541889][T31285] netlink: 96 bytes leftover after parsing attributes in process `syz.1.7242'. [ 1856.572567][T25767] usb 10-1: device descriptor read/8, error -71 [ 1856.691553][T25767] usb usb10-port1: unable to enumerate USB device [ 1857.559518][T27447] usb 3-1: USB disconnect, device number 40 [ 1857.569370][T27447] ch341 3-1:0.0: device disconnected [ 1857.686266][T31303] support for cryptoloop has been removed. Use dm-crypt instead. [ 1858.636407][ T1228] usb 2-1: usb_control_msg returned -71 [ 1858.678218][ T1228] usbtmc 2-1:16.0: can't read capabilities [ 1858.891842][T27447] usb 10-1: new high-speed USB device number 99 using dummy_hcd [ 1859.081606][T27447] usb 10-1: Using ep0 maxpacket: 8 [ 1859.082126][ T1228] usb 2-1: USB disconnect, device number 47 [ 1859.118518][T31319] FAULT_INJECTION: forcing a failure. [ 1859.118518][T31319] name failslab, interval 1, probability 0, space 0, times 0 [ 1859.161560][T31319] CPU: 1 UID: 0 PID: 31319 Comm: syz.1.7252 Not tainted syzkaller #0 PREEMPT(full) [ 1859.161590][T31319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1859.161603][T31319] Call Trace: [ 1859.161611][T31319] [ 1859.161620][T31319] dump_stack_lvl+0x189/0x250 [ 1859.161655][T31319] ? __pfx____ratelimit+0x10/0x10 [ 1859.161682][T31319] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1859.161709][T31319] ? __pfx__printk+0x10/0x10 [ 1859.161734][T31319] ? __pfx___might_resched+0x10/0x10 [ 1859.161757][T31319] ? fs_reclaim_acquire+0x7d/0x100 [ 1859.161795][T31319] should_fail_ex+0x414/0x560 [ 1859.161830][T31319] should_failslab+0xa8/0x100 [ 1859.161854][T31319] __kmalloc_node_track_caller_noprof+0xcd/0x800 [ 1859.161885][T31319] ? ip6_setup_cork+0x6c1/0x10e0 [ 1859.161914][T31319] ? __kmalloc_cache_noprof+0x3d5/0x6f0 [ 1859.161953][T31319] kmemdup_noprof+0x2b/0x70 [ 1859.161979][T31319] ip6_setup_cork+0x6c1/0x10e0 [ 1859.162020][T31319] ip6_make_skb+0x1bd/0x410 [ 1859.162048][T31319] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 1859.162078][T31319] ? __pfx_ip6_make_skb+0x10/0x10 [ 1859.162127][T31319] ? ip6_dst_hoplimit+0x65/0x3e0 [ 1859.162150][T31319] ? ip6_dst_hoplimit+0x65/0x3e0 [ 1859.162176][T31319] udpv6_sendmsg+0x1d1a/0x2510 [ 1859.162215][T31319] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 1859.162247][T31319] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 1859.162280][T31319] ? __pfx___might_resched+0x10/0x10 [ 1859.162299][T31319] ? exc_page_fault+0xab/0x100 [ 1859.162347][T31319] ? aa_sk_perm+0x81e/0x950 [ 1859.162376][T31319] ? copy_compat_iovec_from_user+0xf8/0x140 [ 1859.162414][T31319] ? inet_send_prepare+0x5c/0x270 [ 1859.162437][T31319] ? inet6_sendmsg+0xe4/0x120 [ 1859.162464][T31319] __sock_sendmsg+0xe5/0x270 [ 1859.162495][T31319] ____sys_sendmsg+0x52d/0x830 [ 1859.162525][T31319] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1859.162565][T31319] ___sys_sendmsg+0x21f/0x2a0 [ 1859.162590][T31319] ? __pfx____sys_sendmsg+0x10/0x10 [ 1859.162614][T31319] ? __lock_acquire+0xab9/0xd20 [ 1859.162671][T31319] ? __fget_files+0x2a/0x420 [ 1859.162690][T31319] ? __fget_files+0x3a0/0x420 [ 1859.162720][T31319] __sys_sendmmsg+0x28e/0x430 [ 1859.162756][T31319] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1859.162777][T31319] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 1859.162836][T31319] ? ksys_write+0x22a/0x250 [ 1859.162862][T31319] ? exc_page_fault+0x82/0x100 [ 1859.162891][T31319] ? __pfx_ksys_write+0x10/0x10 [ 1859.162927][T31319] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 1859.162955][T31319] __do_fast_syscall_32+0xb6/0x2b0 [ 1859.162976][T31319] ? lockdep_hardirqs_on+0x9c/0x150 [ 1859.163007][T31319] do_fast_syscall_32+0x34/0x80 [ 1859.163027][T31319] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1859.163052][T31319] RIP: 0023:0xf7fa6539 [ 1859.163070][T31319] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1859.163088][T31319] RSP: 002b:00000000f549655c EFLAGS: 00000206 ORIG_RAX: 0000000000000159 [ 1859.163111][T31319] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080003cc0 [ 1859.163132][T31319] RDX: 0000000000000172 RSI: 0000000004000000 RDI: 0000000000000000 [ 1859.163145][T31319] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1859.163157][T31319] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1859.163169][T31319] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1859.163202][T31319] [ 1859.503670][ C1] vkms_vblank_simulate: vblank timer overrun [ 1860.033469][T31328] binder: 31327:31328 ioctl 4004f50d 80000240 returned -22 [ 1860.256029][T27826] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 1860.523696][T31341] sctp: [Deprecated]: syz.2.7260 (pid 31341) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1860.523696][T31341] Use struct sctp_sack_info instead [ 1860.754114][T27826] usb 2-1: Using ep0 maxpacket: 16 [ 1860.762515][T27826] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1860.782632][T27826] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 1860.899837][T27826] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 1860.984720][T27826] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 1861.074372][T27826] usb 2-1: New USB device found, idVendor=0586, idProduct=1500, bcdDevice=2e.97 [ 1861.085431][T27826] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1861.113794][T27826] usb 2-1: Product: syz [ 1861.126577][T27826] usb 2-1: Manufacturer: syz [ 1861.195461][T27826] usb 2-1: SerialNumber: syz [ 1861.294568][T27826] usb 2-1: config 0 descriptor?? [ 1861.332069][T27826] omninet 2-1:0.0: ZyXEL - omni.net usb converter detected [ 1861.441314][T27826] usb 2-1: ZyXEL - omni.net usb converter now attached to ttyUSB0 [ 1861.618359][T27826] usb 2-1: USB disconnect, device number 48 [ 1861.669082][T31358] loop4: detected capacity change from 0 to 7 [ 1861.709471][T27826] omninet ttyUSB0: ZyXEL - omni.net usb converter now disconnected from ttyUSB0 [ 1861.740718][T31359] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7265'. [ 1861.741327][T31358] loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 1861.792384][T27826] omninet 2-1:0.0: device disconnected [ 1861.839798][T31358] loop4: p1 size 2037579776 extends beyond EOD, truncated [ 1861.900269][T31358] loop4: p2 start 4294901760 is beyond EOD, truncated [ 1861.929670][T31358] loop4: p3 start 4294836224 is beyond EOD, truncated [ 1861.950717][T31358] loop4: p4 size 327680 extends beyond EOD, truncated [ 1861.990840][T31358] loop4: p5 size 8323072 extends beyond EOD, truncated [ 1862.007263][T31358] loop4: p6 start 8192 is beyond EOD, truncated [ 1862.064651][T27447] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1862.113741][T27447] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 1862.134971][T27447] usb 10-1: can't read configurations, error -71 [ 1862.213563][T25643] udevd[25643]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 1862.232112][T29771] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 1862.235420][T23990] udevd[23990]: inotify_add_watch(7, /dev/loop4p5, 10) failed: No such file or directory [ 1862.240301][T28387] udevd[28387]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 1862.434513][T29771] usb 4-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 1862.456737][T29771] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1862.504337][T29771] usb 4-1: config 0 descriptor?? [ 1862.533154][T29771] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 1862.645867][T25767] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 1862.856787][T25767] usb 1-1: Using ep0 maxpacket: 16 [ 1862.888601][T25767] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1862.909007][T25767] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1862.928133][T25767] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1862.938207][T25767] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1862.946613][T25767] usb 1-1: Product: syz [ 1862.956947][T25767] usb 1-1: Manufacturer: syz [ 1862.958255][T29771] gspca_sunplus: reg_w_riv err -71 [ 1862.978877][T25767] usb 1-1: SerialNumber: syz [ 1862.997307][T29771] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 1863.009421][T25767] usb 1-1: config 0 descriptor?? [ 1863.026084][T25767] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1863.047136][T25767] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 1863.178307][T29771] usb 4-1: USB disconnect, device number 108 [ 1863.681203][T25767] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 1863.690971][T25767] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 1864.023734][T31391] netlink: 'syz.9.7275': attribute type 2 has an invalid length. [ 1864.034201][T31391] netlink: 'syz.9.7275': attribute type 9 has an invalid length. [ 1864.042301][T31391] netlink: 209852 bytes leftover after parsing attributes in process `syz.9.7275'. [ 1864.054697][T31392] fuse: Bad value for 'fd' [ 1864.128555][T31392] fuse: Unknown parameter 'group_id00000000000000000000' [ 1864.149066][T31391] bond1: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 1864.198032][T31391] bond1 (unregistering): Released all slaves [ 1864.783789][T25767] em28xx 1-1:0.0: AC97 vendor ID = 0x00fc00fe [ 1864.873858][T29771] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 1864.950584][T31407] FAULT_INJECTION: forcing a failure. [ 1864.950584][T31407] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1864.964627][T29771] hid-generic 0000:0000:0000.0021: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1864.966166][T31407] CPU: 1 UID: 0 PID: 31407 Comm: syz.9.7279 Not tainted syzkaller #0 PREEMPT(full) [ 1864.966191][T31407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1864.966202][T31407] Call Trace: [ 1864.966216][T31407] [ 1864.966224][T31407] dump_stack_lvl+0x189/0x250 [ 1864.966254][T31407] ? __pfx____ratelimit+0x10/0x10 [ 1864.966279][T31407] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1864.966303][T31407] ? __pfx__printk+0x10/0x10 [ 1864.966334][T31407] should_fail_ex+0x414/0x560 [ 1864.966367][T31407] strncpy_from_user+0x36/0x290 [ 1864.966396][T31407] getname_flags+0xf3/0x540 [ 1864.966421][T31407] user_path_at+0x24/0x60 [ 1864.966443][T31407] do_faccessat+0x5d8/0xd90 [ 1864.966472][T31407] ? __pfx_do_faccessat+0x10/0x10 [ 1864.966495][T31407] ? __pfx_ksys_write+0x10/0x10 [ 1864.966526][T31407] __ia32_sys_faccessat2+0x9a/0xb0 [ 1864.966547][T31407] __do_fast_syscall_32+0xb6/0x2b0 [ 1864.966573][T31407] do_fast_syscall_32+0x34/0x80 [ 1864.966591][T31407] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1864.966611][T31407] RIP: 0023:0xf70ad539 [ 1864.966628][T31407] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1864.966643][T31407] RSP: 002b:00000000f549d55c EFLAGS: 00000206 ORIG_RAX: 00000000000001b7 [ 1864.966663][T31407] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000280 [ 1864.966676][T31407] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 1864.966687][T31407] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1864.966697][T31407] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1864.966708][T31407] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1864.966737][T31407] [ 1865.131601][ T1228] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 1865.212363][T25767] em28xx 1-1:0.0: Unknown AC97 audio processor detected! [ 1865.244115][T25767] em28xx 1-1:0.0: couldn't setup AC97 register 2 [ 1865.260041][T25767] em28xx 1-1:0.0: couldn't setup AC97 register 4 [ 1865.269996][T25767] em28xx 1-1:0.0: couldn't setup AC97 register 6 [ 1865.276929][T25767] em28xx 1-1:0.0: couldn't setup AC97 register 54 [ 1865.291268][T25767] em28xx 1-1:0.0: couldn't setup AC97 register 56 [ 1865.319972][T25767] usb 1-1: USB disconnect, device number 75 [ 1865.411183][ T1228] usb 4-1: config 0 has no interfaces? [ 1865.421026][ T1228] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1865.435029][ T1228] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1865.452511][ T1228] usb 4-1: SerialNumber: syz [ 1865.468064][ T1228] usb 4-1: config 0 descriptor?? [ 1865.749672][T31413] sit0: entered promiscuous mode [ 1865.780949][T31413] netlink: 'syz.3.7278': attribute type 1 has an invalid length. [ 1865.800385][T31413] netlink: 1 bytes leftover after parsing attributes in process `syz.3.7278'. [ 1865.814066][T31417] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1865.818387][T31418] FAULT_INJECTION: forcing a failure. [ 1865.818387][T31418] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1865.836579][T31418] CPU: 1 UID: 0 PID: 31418 Comm: syz.0.7282 Not tainted syzkaller #0 PREEMPT(full) [ 1865.836607][T31418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1865.836620][T31418] Call Trace: [ 1865.836629][T31418] [ 1865.836637][T31418] dump_stack_lvl+0x189/0x250 [ 1865.836670][T31418] ? __pfx____ratelimit+0x10/0x10 [ 1865.836699][T31418] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1865.836724][T31418] ? __pfx__printk+0x10/0x10 [ 1865.836745][T31418] ? __might_fault+0xb0/0x130 [ 1865.836796][T31418] should_fail_ex+0x414/0x560 [ 1865.836831][T31418] _copy_to_iter+0x404/0x1790 [ 1865.836858][T31418] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 1865.836898][T31418] ? __pfx__copy_to_iter+0x10/0x10 [ 1865.836920][T31418] ? __skb_try_recv_from_queue+0x2b2/0x730 [ 1865.836953][T31418] ? __skb_try_recv_datagram+0x3d5/0x4d0 [ 1865.836986][T31418] __skb_datagram_iter+0xf8/0x990 [ 1865.837012][T31418] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 1865.837046][T31418] skb_copy_datagram_iter+0xc5/0x230 [ 1865.837075][T31418] netlink_recvmsg+0x2ab/0xa30 [ 1865.837107][T31418] ? __pfx_netlink_recvmsg+0x10/0x10 [ 1865.837125][T31418] ? __kmalloc_noprof+0x432/0x7f0 [ 1865.837150][T31418] ? iovec_from_user+0x87/0x250 [ 1865.837175][T31418] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1865.837204][T31418] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 1865.837222][T31418] ? security_socket_recvmsg+0x7e/0x2e0 [ 1865.837241][T31418] ? __pfx_netlink_recvmsg+0x10/0x10 [ 1865.837261][T31418] sock_recvmsg+0x22c/0x270 [ 1865.837291][T31418] ____sys_recvmsg+0x1c9/0x460 [ 1865.837320][T31418] ? __pfx_____sys_recvmsg+0x10/0x10 [ 1865.837339][T31418] ? get_compat_msghdr+0x37e/0x4a0 [ 1865.837381][T31418] ___sys_recvmsg+0x1b5/0x510 [ 1865.837410][T31418] ? __pfx____sys_recvmsg+0x10/0x10 [ 1865.837460][T31418] ? __fget_files+0x3a0/0x420 [ 1865.837494][T31418] do_recvmmsg+0x36a/0x770 [ 1865.837527][T31418] ? __pfx_do_recvmmsg+0x10/0x10 [ 1865.837565][T31418] ? _copy_from_user+0x94/0xb0 [ 1865.837597][T31418] ? __fget_files+0x3a0/0x420 [ 1865.837625][T31418] __sys_recvmmsg+0x127/0x280 [ 1865.837651][T31418] ? __pfx___sys_recvmmsg+0x10/0x10 [ 1865.837676][T31418] ? __pfx_ksys_write+0x10/0x10 [ 1865.837712][T31418] __ia32_compat_sys_recvmmsg_time32+0xbf/0xe0 [ 1865.837738][T31418] __do_fast_syscall_32+0xb6/0x2b0 [ 1865.837757][T31418] ? lockdep_hardirqs_on+0x9c/0x150 [ 1865.837799][T31418] do_fast_syscall_32+0x34/0x80 [ 1865.837819][T31418] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1865.837842][T31418] RIP: 0023:0xf703d539 [ 1865.837861][T31418] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1865.837880][T31418] RSP: 002b:00000000f542d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000151 [ 1865.837904][T31418] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800037c0 [ 1865.837919][T31418] RDX: 00000000000003b4 RSI: 0000000002040000 RDI: 0000000080003700 [ 1865.837933][T31418] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1865.837946][T31418] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1865.837958][T31418] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1865.837991][T31418] [ 1866.151096][T31417] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1866.602231][T29771] usb 10-1: new high-speed USB device number 101 using dummy_hcd [ 1866.764465][T29771] usb 10-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 1866.774398][T29771] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1866.789652][T29771] usb 10-1: config 0 descriptor?? [ 1866.813910][T29771] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 1866.859182][T31437] fuse: Unknown parameter '' [ 1867.209002][T29771] gspca_sunplus: reg_w_riv err -71 [ 1867.223870][T29771] sunplus 10-1:0.0: probe with driver sunplus failed with error -71 [ 1867.240784][T29771] usb 10-1: USB disconnect, device number 101 [ 1867.827162][ T1228] usb 4-1: USB disconnect, device number 109 [ 1867.934620][T31441] syzkaller1: entered promiscuous mode [ 1867.940633][T31441] syzkaller1: entered allmulticast mode [ 1868.101945][T31441] sctp: [Deprecated]: syz.9.7290 (pid 31441) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1868.101945][T31441] Use struct sctp_sack_info instead [ 1868.431806][ T1228] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 1868.581528][ T1228] usb 1-1: Using ep0 maxpacket: 16 [ 1868.646048][ T1228] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1868.743235][T31468] netlink: 72 bytes leftover after parsing attributes in process `syz.9.7294'. [ 1868.794330][ T1228] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1868.980456][ T1228] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1869.010006][ T1228] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1869.042706][ T1228] usb 1-1: Product: syz [ 1869.057249][ T1228] usb 1-1: Manufacturer: syz [ 1869.076801][ T1228] usb 1-1: SerialNumber: syz [ 1869.112864][ T1228] usb 1-1: config 0 descriptor?? [ 1869.131866][T29998] usb 10-1: new high-speed USB device number 102 using dummy_hcd [ 1869.189096][ T1228] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1869.241955][ T1228] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 1869.302154][T29998] usb 10-1: Using ep0 maxpacket: 8 [ 1869.364021][T29998] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 1869.406279][T29998] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1869.585511][T29998] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1869.701580][T29998] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1869.774319][T29998] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1869.821651][ T1228] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 1869.844899][ T1228] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 1869.939899][T29998] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1870.041558][T31483] fuse: Bad value for 'fd' [ 1870.069453][T29998] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1870.262126][T17488] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 1870.312154][T25767] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 1870.459091][T17488] usb 3-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 1870.469132][T17488] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1870.511998][T25767] usb 4-1: device descriptor read/64, error -71 [ 1870.573509][T31468] netlink: 96 bytes leftover after parsing attributes in process `syz.9.7294'. [ 1870.595701][T31468] netlink: 96 bytes leftover after parsing attributes in process `syz.9.7294'. [ 1870.610213][T17488] usb 3-1: config 0 descriptor?? [ 1870.621263][T17488] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 1870.694042][T29998] usb 10-1: usb_control_msg returned -71 [ 1870.761824][T25767] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 1870.913456][T25767] usb 4-1: device descriptor read/64, error -71 [ 1870.946976][ T1228] em28xx 1-1:0.0: AC97 vendor ID = 0x00fc00fe [ 1870.983854][T29998] usbtmc 10-1:16.0: can't read capabilities [ 1871.032708][T25767] usb usb4-port1: attempt power cycle [ 1871.041279][T17488] gspca_sunplus: reg_w_riv err -71 [ 1871.051273][T17488] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 1871.094638][T17488] usb 3-1: USB disconnect, device number 41 [ 1871.184106][ T1228] em28xx 1-1:0.0: Unknown AC97 audio processor detected! [ 1871.206787][ T1228] em28xx 1-1:0.0: couldn't setup AC97 register 2 [ 1871.273205][T29998] usb 10-1: USB disconnect, device number 102 [ 1871.322277][ T1228] em28xx 1-1:0.0: couldn't setup AC97 register 4 [ 1871.345072][ T1228] em28xx 1-1:0.0: couldn't setup AC97 register 6 [ 1871.361779][ T1228] em28xx 1-1:0.0: couldn't setup AC97 register 54 [ 1871.402159][ T1228] em28xx 1-1:0.0: couldn't setup AC97 register 56 [ 1871.412405][ T1228] usb 1-1: USB disconnect, device number 76 [ 1871.431864][T25767] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 1871.452658][T25767] usb 4-1: device descriptor read/8, error -71 [ 1871.731858][T25767] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 1871.816433][T25767] usb 4-1: device descriptor read/8, error -71 [ 1871.953352][T25767] usb usb4-port1: unable to enumerate USB device [ 1872.024429][T31497] FAULT_INJECTION: forcing a failure. [ 1872.024429][T31497] name failslab, interval 1, probability 0, space 0, times 0 [ 1872.051049][T31497] CPU: 0 UID: 0 PID: 31497 Comm: syz.0.7304 Not tainted syzkaller #0 PREEMPT(full) [ 1872.051072][T31497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1872.051081][T31497] Call Trace: [ 1872.051087][T31497] [ 1872.051093][T31497] dump_stack_lvl+0x189/0x250 [ 1872.051117][T31497] ? __pfx____ratelimit+0x10/0x10 [ 1872.051135][T31497] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1872.051151][T31497] ? __pfx__printk+0x10/0x10 [ 1872.051162][T31497] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1872.051184][T31497] should_fail_ex+0x414/0x560 [ 1872.051205][T31497] should_failslab+0xa8/0x100 [ 1872.051220][T31497] __kmalloc_cache_noprof+0x6f/0x6f0 [ 1872.051237][T31497] ? sctp_add_bind_addr+0x8c/0x370 [ 1872.051254][T31497] ? __pfx_sctp_get_port_local+0x10/0x10 [ 1872.051269][T31497] sctp_add_bind_addr+0x8c/0x370 [ 1872.051285][T31497] ? sctp_auto_asconf_init+0x15c/0x1e0 [ 1872.051300][T31497] sctp_do_bind+0x5ab/0x940 [ 1872.051320][T31497] sctp_connect_new_asoc+0x25c/0x690 [ 1872.051335][T31497] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1872.051347][T31497] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1872.051364][T31497] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1872.051377][T31497] ? security_sctp_bind_connect+0x7e/0x2e0 [ 1872.051394][T31497] sctp_sendmsg+0x155c/0x2810 [ 1872.051428][T31497] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1872.051453][T31497] ? aa_sk_perm+0x81e/0x950 [ 1872.051486][T31497] ? __pfx_aa_sk_perm+0x10/0x10 [ 1872.051518][T31497] ? sock_rps_record_flow+0x19/0x410 [ 1872.051541][T31497] ? inet_sendmsg+0x2f4/0x370 [ 1872.051565][T31497] __sock_sendmsg+0x19c/0x270 [ 1872.051598][T31497] ____sys_sendmsg+0x52d/0x830 [ 1872.051627][T31497] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1872.051677][T31497] ___sys_sendmsg+0x21f/0x2a0 [ 1872.051702][T31497] ? __pfx____sys_sendmsg+0x10/0x10 [ 1872.051726][T31497] ? __lock_acquire+0xab9/0xd20 [ 1872.051781][T31497] ? __fget_files+0x2a/0x420 [ 1872.051802][T31497] ? __fget_files+0x3a0/0x420 [ 1872.051834][T31497] __sys_sendmmsg+0x28e/0x430 [ 1872.051864][T31497] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1872.051885][T31497] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 1872.051946][T31497] ? ksys_write+0x22a/0x250 [ 1872.051973][T31497] ? exc_page_fault+0x82/0x100 [ 1872.052003][T31497] ? __pfx_ksys_write+0x10/0x10 [ 1872.052040][T31497] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 1872.052068][T31497] __do_fast_syscall_32+0xb6/0x2b0 [ 1872.052089][T31497] ? lockdep_hardirqs_on+0x9c/0x150 [ 1872.052123][T31497] do_fast_syscall_32+0x34/0x80 [ 1872.052144][T31497] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1872.052169][T31497] RIP: 0023:0xf703d539 [ 1872.052189][T31497] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1872.052208][T31497] RSP: 002b:00000000f540c55c EFLAGS: 00000206 ORIG_RAX: 0000000000000159 [ 1872.052232][T31497] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080003880 [ 1872.052248][T31497] RDX: 0000000000000002 RSI: 0000000000000004 RDI: 0000000000000000 [ 1872.052261][T31497] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1872.052273][T31497] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1872.052286][T31497] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1872.052320][T31497] [ 1872.131721][ T1228] usb 3-1: new full-speed USB device number 42 using dummy_hcd [ 1872.864349][ T1228] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1872.916415][ T1228] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1872.983247][ T1228] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1873.012604][ T1228] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1873.057486][ T1228] usb 3-1: Product: syz [ 1873.075106][ T1228] usb 3-1: Manufacturer: syz [ 1873.079776][ T1228] usb 3-1: SerialNumber: syz [ 1873.310386][T31492] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1873.337297][T31492] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1873.555793][T31523] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1873.565729][T31492] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1873.566118][ T1228] usb 3-1: cannot find UAC_HEADER [ 1873.581375][T31523] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1873.598052][T31492] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1873.646751][ T1228] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1873.688808][T25643] udevd[25643]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1873.767409][T25767] usb 3-1: USB disconnect, device number 42 [ 1874.626304][T31543] binder: 31538:31543 ioctl c0306201 0 returned -14 [ 1874.637957][T31543] binder: 31538:31543 ioctl c0306201 0 returned -14 [ 1875.581599][T29998] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 1875.752093][T29998] usb 2-1: Using ep0 maxpacket: 16 [ 1875.763642][T31563] binder: 31560:31563 ioctl c0306201 0 returned -14 [ 1875.772936][T29998] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1875.793872][T29998] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1875.817187][T29998] usb 2-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 1875.840043][T29998] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1875.880929][T29998] usb 2-1: config 0 descriptor?? [ 1875.929825][T31563] binder: 31560:31563 ioctl c0306201 0 returned -14 [ 1877.074525][T29998] usbhid 2-1:0.0: can't add hid device: -32 [ 1877.085814][T29998] usbhid 2-1:0.0: probe with driver usbhid failed with error -32 [ 1877.761570][T31578] FAULT_INJECTION: forcing a failure. [ 1877.761570][T31578] name failslab, interval 1, probability 0, space 0, times 0 [ 1877.808710][T31578] CPU: 0 UID: 0 PID: 31578 Comm: syz.2.7325 Not tainted syzkaller #0 PREEMPT(full) [ 1877.808731][T31578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1877.808740][T31578] Call Trace: [ 1877.808745][T31578] [ 1877.808751][T31578] dump_stack_lvl+0x189/0x250 [ 1877.808773][T31578] ? __pfx____ratelimit+0x10/0x10 [ 1877.808790][T31578] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1877.808806][T31578] ? __pfx__printk+0x10/0x10 [ 1877.808822][T31578] ? __pfx___might_resched+0x10/0x10 [ 1877.808839][T31578] should_fail_ex+0x414/0x560 [ 1877.808860][T31578] should_failslab+0xa8/0x100 [ 1877.808874][T31578] kmem_cache_alloc_node_noprof+0x77/0x710 [ 1877.808891][T31578] ? __alloc_skb+0x112/0x2d0 [ 1877.808907][T31578] __alloc_skb+0x112/0x2d0 [ 1877.808921][T31578] netlink_ack+0x146/0xa50 [ 1877.808932][T31578] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1877.808946][T31578] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 1877.808970][T31578] ? __pfx_nl80211_post_doit+0x10/0x10 [ 1877.808985][T31578] ? __asan_memcpy+0x40/0x70 [ 1877.809000][T31578] ? __pfx_ref_tracker_free+0x10/0x10 [ 1877.809018][T31578] netlink_rcv_skb+0x28c/0x470 [ 1877.809029][T31578] ? __lock_acquire+0xab9/0xd20 [ 1877.809042][T31578] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1877.809058][T31578] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1877.809082][T31578] ? down_read+0x1ad/0x2e0 [ 1877.809097][T31578] genl_rcv+0x28/0x40 [ 1877.809110][T31578] netlink_unicast+0x82f/0x9e0 [ 1877.809137][T31578] ? __pfx_netlink_unicast+0x10/0x10 [ 1877.809156][T31578] ? netlink_sendmsg+0x642/0xb30 [ 1877.809167][T31578] ? skb_put+0x11b/0x210 [ 1877.809181][T31578] netlink_sendmsg+0x805/0xb30 [ 1877.809200][T31578] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1877.809214][T31578] ? __import_iovec+0x5d4/0x7f0 [ 1877.809228][T31578] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1877.809246][T31578] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1877.809259][T31578] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1877.809272][T31578] __sock_sendmsg+0x21c/0x270 [ 1877.809291][T31578] ____sys_sendmsg+0x505/0x830 [ 1877.809309][T31578] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1877.809333][T31578] ___sys_sendmsg+0x21f/0x2a0 [ 1877.809348][T31578] ? __pfx____sys_sendmsg+0x10/0x10 [ 1877.809385][T31578] ? __fget_files+0x2a/0x420 [ 1877.809396][T31578] ? __fget_files+0x3a0/0x420 [ 1877.809415][T31578] __sys_sendmsg+0x164/0x220 [ 1877.809429][T31578] ? __pfx___sys_sendmsg+0x10/0x10 [ 1877.809449][T31578] ? __pfx_ksys_write+0x10/0x10 [ 1877.809467][T31578] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 1877.809486][T31578] ? lockdep_hardirqs_on+0x9c/0x150 [ 1877.809505][T31578] __do_fast_syscall_32+0xb6/0x2b0 [ 1877.809517][T31578] ? lockdep_hardirqs_on+0x9c/0x150 [ 1877.809536][T31578] do_fast_syscall_32+0x34/0x80 [ 1877.809548][T31578] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1877.809563][T31578] RIP: 0023:0xf702d539 [ 1877.809575][T31578] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1877.809587][T31578] RSP: 002b:00000000f541d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1877.809602][T31578] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000300 [ 1877.809612][T31578] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1877.809627][T31578] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1877.809634][T31578] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1877.809642][T31578] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1877.809661][T31578] [ 1878.723011][T31586] FAULT_INJECTION: forcing a failure. [ 1878.723011][T31586] name failslab, interval 1, probability 0, space 0, times 0 [ 1878.742317][T31586] CPU: 0 UID: 0 PID: 31586 Comm: syz.2.7326 Not tainted syzkaller #0 PREEMPT(full) [ 1878.742336][T31586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1878.742344][T31586] Call Trace: [ 1878.742350][T31586] [ 1878.742356][T31586] dump_stack_lvl+0x189/0x250 [ 1878.742378][T31586] ? __pfx____ratelimit+0x10/0x10 [ 1878.742402][T31586] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1878.742420][T31586] ? __pfx__printk+0x10/0x10 [ 1878.742441][T31586] ? __lock_acquire+0xab9/0xd20 [ 1878.742483][T31586] should_fail_ex+0x414/0x560 [ 1878.742520][T31586] should_failslab+0xa8/0x100 [ 1878.742543][T31586] __kmalloc_cache_noprof+0x6f/0x6f0 [ 1878.742571][T31586] ? __tipc_nl_bearer_enable+0xab3/0x13f0 [ 1878.742609][T31586] __tipc_nl_bearer_enable+0xab3/0x13f0 [ 1878.742643][T31586] ? __pfx___tipc_nl_bearer_enable+0x10/0x10 [ 1878.742662][T31586] ? __mutex_lock+0x335/0x1350 [ 1878.742708][T31586] ? tipc_nl_bearer_enable+0x17/0x40 [ 1878.742733][T31586] ? __pfx___mutex_lock+0x10/0x10 [ 1878.742759][T31586] ? rcu_is_watching+0x15/0xb0 [ 1878.742776][T31586] ? __nla_parse+0x40/0x60 [ 1878.742792][T31586] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 1878.742813][T31586] ? genl_family_rcv_msg_attrs_parse+0x212/0x2a0 [ 1878.742831][T31586] tipc_nl_bearer_enable+0x22/0x40 [ 1878.742844][T31586] genl_family_rcv_msg_doit+0x215/0x300 [ 1878.742867][T31586] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1878.742898][T31586] genl_rcv_msg+0x60e/0x790 [ 1878.742918][T31586] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1878.742932][T31586] ? __pfx_tipc_nl_bearer_enable+0x10/0x10 [ 1878.742946][T31586] ? __asan_memcpy+0x40/0x70 [ 1878.742961][T31586] ? __pfx_ref_tracker_free+0x10/0x10 [ 1878.742978][T31586] netlink_rcv_skb+0x208/0x470 [ 1878.742989][T31586] ? __lock_acquire+0xab9/0xd20 [ 1878.743001][T31586] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1878.743017][T31586] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1878.743042][T31586] ? down_read+0x1ad/0x2e0 [ 1878.743063][T31586] genl_rcv+0x28/0x40 [ 1878.743077][T31586] netlink_unicast+0x82f/0x9e0 [ 1878.743100][T31586] ? __pfx_netlink_unicast+0x10/0x10 [ 1878.743119][T31586] ? netlink_sendmsg+0x642/0xb30 [ 1878.743130][T31586] ? skb_put+0x11b/0x210 [ 1878.743145][T31586] netlink_sendmsg+0x805/0xb30 [ 1878.743164][T31586] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1878.743178][T31586] ? __import_iovec+0x5d4/0x7f0 [ 1878.743192][T31586] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1878.743211][T31586] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1878.743223][T31586] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1878.743237][T31586] __sock_sendmsg+0x21c/0x270 [ 1878.743256][T31586] ____sys_sendmsg+0x505/0x830 [ 1878.743273][T31586] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1878.743297][T31586] ___sys_sendmsg+0x21f/0x2a0 [ 1878.743313][T31586] ? __pfx____sys_sendmsg+0x10/0x10 [ 1878.743351][T31586] ? __fget_files+0x2a/0x420 [ 1878.743398][T31586] ? __fget_files+0x3a0/0x420 [ 1878.743417][T31586] __sys_sendmsg+0x164/0x220 [ 1878.743431][T31586] ? __pfx___sys_sendmsg+0x10/0x10 [ 1878.743451][T31586] ? __pfx_ksys_write+0x10/0x10 [ 1878.743470][T31586] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 1878.743489][T31586] ? lockdep_hardirqs_on+0x9c/0x150 [ 1878.743508][T31586] __do_fast_syscall_32+0xb6/0x2b0 [ 1878.743521][T31586] ? lockdep_hardirqs_on+0x9c/0x150 [ 1878.743543][T31586] do_fast_syscall_32+0x34/0x80 [ 1878.743555][T31586] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1878.743570][T31586] RIP: 0023:0xf702d539 [ 1878.743583][T31586] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1878.743600][T31586] RSP: 002b:00000000f541d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1878.743616][T31586] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800010c0 [ 1878.743625][T31586] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1878.743632][T31586] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1878.743639][T31586] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1878.743647][T31586] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1878.743666][T31586] [ 1879.329597][T29771] usb 2-1: USB disconnect, device number 49 [ 1879.965052][T31604] binder: 31597:31604 ioctl c0306201 0 returned -14 [ 1880.220822][T31604] binder: 31597:31604 ioctl c0306201 0 returned -14 [ 1881.799478][T31621] binder: 31618:31621 ioctl c0306201 0 returned -14 [ 1881.864533][T31621] binder: 31618:31621 ioctl c0306201 0 returned -14 [ 1882.561585][T29771] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 1882.821688][T29771] usb 1-1: Using ep0 maxpacket: 8 [ 1882.869025][T29771] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1882.912768][T29771] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E [ 1882.985867][T29771] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 1883.051055][T29771] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1883.117063][T29771] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1 [ 1883.161612][T29771] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1883.232540][T29771] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x75, changing to 0x5 [ 1883.273207][T29771] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1883.309275][T29771] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1883.344425][T29771] usb 1-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 1883.369555][T29771] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1883.417826][T29771] usb 1-1: Product: syz [ 1883.428941][T29771] usb 1-1: Manufacturer: syz [ 1883.464567][T29771] usb 1-1: SerialNumber: syz [ 1883.565261][T29771] usb 1-1: config 0 descriptor?? [ 1883.575418][T31624] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1883.597249][T31646] vivid-007: ================= START STATUS ================= [ 1883.618568][T31646] vivid-007: Generate PTS: true [ 1883.657436][T31646] vivid-007: Generate SCR: true [ 1883.691541][T31646] tpg source WxH: 320x240 (Y'CbCr) [ 1883.699528][T29771] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1883.722280][T31646] tpg field: 1 [ 1883.733625][T31646] tpg crop: (0,0)/320x240 [ 1883.751004][T31646] tpg compose: (0,0)/320x240 [ 1883.765425][T31646] tpg colorspace: 8 [ 1883.777504][T31646] tpg transfer function: 0/0 [ 1883.792217][T31646] tpg Y'CbCr encoding: 0/0 [ 1883.803143][T31646] tpg quantization: 0/0 [ 1883.811470][T31646] tpg RGB range: 0/2 [ 1883.825406][T31646] vivid-007: ================== END STATUS ================== [ 1884.298332][T29771] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -12 [ 1884.367360][T31654] FAULT_INJECTION: forcing a failure. [ 1884.367360][T31654] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1884.413707][T31654] CPU: 1 UID: 0 PID: 31654 Comm: syz.3.7345 Not tainted syzkaller #0 PREEMPT(full) [ 1884.413729][T31654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1884.413738][T31654] Call Trace: [ 1884.413743][T31654] [ 1884.413749][T31654] dump_stack_lvl+0x189/0x250 [ 1884.413771][T31654] ? __pfx____ratelimit+0x10/0x10 [ 1884.413795][T31654] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1884.413811][T31654] ? __pfx__printk+0x10/0x10 [ 1884.413832][T31654] should_fail_ex+0x414/0x560 [ 1884.413855][T31654] _copy_to_user+0x31/0xb0 [ 1884.413872][T31654] simple_read_from_buffer+0xe1/0x170 [ 1884.413893][T31654] proc_fail_nth_read+0x1b3/0x220 [ 1884.413911][T31654] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1884.413928][T31654] ? rw_verify_area+0x2a6/0x4d0 [ 1884.413943][T31654] ? __lock_acquire+0xab9/0xd20 [ 1884.413955][T31654] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1884.413971][T31654] vfs_read+0x200/0xa30 [ 1884.413986][T31654] ? fdget_pos+0x247/0x320 [ 1884.414001][T31654] ? __pfx___mutex_lock+0x10/0x10 [ 1884.414020][T31654] ? __pfx_vfs_read+0x10/0x10 [ 1884.414037][T31654] ? __fget_files+0x2a/0x420 [ 1884.414051][T31654] ? __fget_files+0x3a0/0x420 [ 1884.414062][T31654] ? __fget_files+0x2a/0x420 [ 1884.414079][T31654] ksys_read+0x145/0x250 [ 1884.414097][T31654] ? __pfx_ksys_read+0x10/0x10 [ 1884.414115][T31654] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 1884.414134][T31654] ? lockdep_hardirqs_on+0x9c/0x150 [ 1884.414153][T31654] __do_fast_syscall_32+0xb6/0x2b0 [ 1884.414165][T31654] ? lockdep_hardirqs_on+0x9c/0x150 [ 1884.414183][T31654] do_fast_syscall_32+0x34/0x80 [ 1884.414195][T31654] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1884.414209][T31654] RIP: 0023:0xf702d539 [ 1884.414221][T31654] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1884.414232][T31654] RSP: 002b:00000000f541d590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 1884.414247][T31654] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f541d620 [ 1884.414256][T31654] RDX: 000000000000000f RSI: 00000000f73c6ff4 RDI: 0000000000000000 [ 1884.414264][T31654] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 1884.414271][T31654] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1884.414278][T31654] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1884.414297][T31654] [ 1884.970664][T23990] udevd[23990]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1885.592406][T25767] usb 1-1: USB disconnect, device number 77 [ 1886.222230][T31679] FAULT_INJECTION: forcing a failure. [ 1886.222230][T31679] name failslab, interval 1, probability 0, space 0, times 0 [ 1886.235630][T31679] CPU: 0 UID: 0 PID: 31679 Comm: syz.2.7351 Not tainted syzkaller #0 PREEMPT(full) [ 1886.235660][T31679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1886.235672][T31679] Call Trace: [ 1886.235681][T31679] [ 1886.235691][T31679] dump_stack_lvl+0x189/0x250 [ 1886.235725][T31679] ? __pfx____ratelimit+0x10/0x10 [ 1886.235754][T31679] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1886.235781][T31679] ? __pfx__printk+0x10/0x10 [ 1886.235810][T31679] ? __pfx___might_resched+0x10/0x10 [ 1886.235840][T31679] should_fail_ex+0x414/0x560 [ 1886.235877][T31679] should_failslab+0xa8/0x100 [ 1886.235901][T31679] kmem_cache_alloc_noprof+0x74/0x6e0 [ 1886.235932][T31679] ? __anon_vma_prepare+0x117/0x4a0 [ 1886.235969][T31679] __anon_vma_prepare+0x117/0x4a0 [ 1886.235997][T31679] ? __pte_alloc+0x15e/0x1a0 [ 1886.236023][T31679] __handle_mm_fault+0x4aff/0x5400 [ 1886.236071][T31679] ? __pfx___handle_mm_fault+0x10/0x10 [ 1886.236119][T31679] ? find_vma+0xe7/0x160 [ 1886.236146][T31679] ? __pfx_find_vma+0x10/0x10 [ 1886.236178][T31679] handle_mm_fault+0x40a/0x8e0 [ 1886.236218][T31679] do_user_addr_fault+0x764/0x1380 [ 1886.236259][T31679] exc_page_fault+0x82/0x100 [ 1886.236292][T31679] asm_exc_page_fault+0x26/0x30 [ 1886.236311][T31679] RIP: 0010:rep_movs_alternative+0x11/0x90 [ 1886.236336][T31679] Code: c3 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 83 f9 40 73 44 83 f9 08 73 25 85 c9 74 0f 8a 06 <88> 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 2e 0f 1f [ 1886.236354][T31679] RSP: 0018:ffffc90004597e68 EFLAGS: 00050202 [ 1886.236374][T31679] RAX: ffffffff848993ff RBX: 0000000000000002 RCX: 0000000000000002 [ 1886.236389][T31679] RDX: 0000000000000000 RSI: ffffffff8bb755e0 RDI: 0000000080000000 [ 1886.236403][T31679] RBP: ffffc90004597f20 R08: 0000000000000001 R09: 0000000000000002 [ 1886.236416][T31679] R10: dffffc0000000000 R11: fffffbfff176eabc R12: 0000000080000002 [ 1886.236430][T31679] R13: 00007ffffffff000 R14: ffffffff8bb755e0 R15: 0000000080000000 [ 1886.236454][T31679] ? check_zeroed_user+0x2f/0x170 [ 1886.236490][T31679] _copy_to_user+0x8a/0xb0 [ 1886.236527][T31679] keyctl_capabilities+0x50/0x170 [ 1886.236557][T31679] __do_fast_syscall_32+0xb6/0x2b0 [ 1886.236578][T31679] ? lockdep_hardirqs_on+0x9c/0x150 [ 1886.236612][T31679] do_fast_syscall_32+0x34/0x80 [ 1886.236632][T31679] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1886.236657][T31679] RIP: 0023:0xf702d539 [ 1886.236675][T31679] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1886.236692][T31679] RSP: 002b:00000000f541d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000120 [ 1886.236713][T31679] RAX: ffffffffffffffda RBX: 000000000000001f RCX: 0000000080000000 [ 1886.236726][T31679] RDX: 00000000fffffe0d RSI: 0000000000000000 RDI: 0000000000000000 [ 1886.236740][T31679] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1886.236752][T31679] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1886.236764][T31679] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1886.236798][T31679] [ 1886.542509][ C0] vkms_vblank_simulate: vblank timer overrun [ 1886.611578][T29998] usb 10-1: new high-speed USB device number 103 using dummy_hcd [ 1886.775845][T29998] usb 10-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 1886.785508][T29998] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1886.798187][T29998] usb 10-1: config 0 descriptor?? [ 1887.026166][T29998] kaweth 10-1:0.0: Firmware present in device. [ 1887.046024][T17488] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 1887.058728][T25623] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1887.070000][T25623] bond0 (unregistering): Released all slaves [ 1887.089062][T25623] bond1 (unregistering): Released all slaves [ 1887.107014][T25623] bond2 (unregistering): Released all slaves [ 1887.192571][T17488] usb 3-1: device descriptor read/64, error -71 [ 1887.289213][T25623] tipc: Disabling bearer [ 1887.303229][T25623] tipc: Left network mode [ 1887.451303][T17488] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 1887.560674][T31690] binder: 31685:31690 ioctl c0306201 0 returned -14 [ 1887.584291][T31690] binder: 31685:31690 ioctl c0306201 0 returned -14 [ 1887.619997][T17488] usb 3-1: device descriptor read/64, error -71 [ 1887.621937][T27447] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 1887.673396][T25623] hsr_slave_0: left promiscuous mode [ 1887.681399][T25623] hsr_slave_1: left promiscuous mode [ 1887.688427][T25623] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1887.696923][T25623] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1887.748180][T17488] usb usb3-port1: attempt power cycle [ 1887.921913][T27447] usb 4-1: device descriptor read/64, error -71 [ 1888.097585][T17488] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 1888.132573][T17488] usb 3-1: device descriptor read/8, error -71 [ 1888.172025][T27447] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 1888.322096][T27447] usb 4-1: device descriptor read/64, error -71 [ 1888.366588][T25623] team0 (unregistering): Port device team_slave_1 removed [ 1888.373921][T17488] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 1888.419287][T17488] usb 3-1: device descriptor read/8, error -71 [ 1888.460551][T27447] usb usb4-port1: attempt power cycle [ 1888.476010][T25623] team0 (unregistering): Port device team_slave_0 removed [ 1888.545329][T17488] usb usb3-port1: unable to enumerate USB device [ 1888.886223][T29998] kaweth 10-1:0.0: Error reading configuration (-71), no net device created [ 1888.912105][T27447] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 1888.929323][T29998] kaweth 10-1:0.0: probe with driver kaweth failed with error -5 [ 1888.946450][T29998] usb 10-1: USB disconnect, device number 103 [ 1888.955651][T27447] usb 4-1: device descriptor read/8, error -71 [ 1889.183960][T31695] FAULT_INJECTION: forcing a failure. [ 1889.183960][T31695] name failslab, interval 1, probability 0, space 0, times 0 [ 1889.218456][T27447] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 1889.226339][T31695] CPU: 0 UID: 0 PID: 31695 Comm: syz.9.7358 Not tainted syzkaller #0 PREEMPT(full) [ 1889.226367][T31695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1889.226379][T31695] Call Trace: [ 1889.226388][T31695] [ 1889.226397][T31695] dump_stack_lvl+0x189/0x250 [ 1889.226429][T31695] ? __pfx____ratelimit+0x10/0x10 [ 1889.226457][T31695] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1889.226483][T31695] ? __pfx__printk+0x10/0x10 [ 1889.226508][T31695] ? __pfx___might_resched+0x10/0x10 [ 1889.226528][T31695] ? fs_reclaim_acquire+0x7d/0x100 [ 1889.226563][T31695] should_fail_ex+0x414/0x560 [ 1889.226596][T31695] should_failslab+0xa8/0x100 [ 1889.226617][T31695] kmem_cache_alloc_node_noprof+0x77/0x710 [ 1889.226644][T31695] ? __alloc_skb+0x112/0x2d0 [ 1889.226675][T31695] ? netlink_autobind+0xdb/0x300 [ 1889.226700][T31695] __alloc_skb+0x112/0x2d0 [ 1889.226724][T31695] netlink_sendmsg+0x5c6/0xb30 [ 1889.226753][T31695] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1889.226786][T31695] ? __import_iovec+0x5d4/0x7f0 [ 1889.226808][T31695] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1889.226838][T31695] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1889.226855][T31695] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1889.226875][T31695] __sock_sendmsg+0x21c/0x270 [ 1889.226906][T31695] ____sys_sendmsg+0x505/0x830 [ 1889.226933][T31695] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1889.226973][T31695] ___sys_sendmsg+0x21f/0x2a0 [ 1889.226998][T31695] ? __pfx____sys_sendmsg+0x10/0x10 [ 1889.227057][T31695] ? __fget_files+0x2a/0x420 [ 1889.227077][T31695] ? __fget_files+0x3a0/0x420 [ 1889.227107][T31695] __sys_sendmsg+0x164/0x220 [ 1889.227132][T31695] ? __pfx___sys_sendmsg+0x10/0x10 [ 1889.227164][T31695] ? __pfx_ksys_write+0x10/0x10 [ 1889.227196][T31695] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 1889.227240][T31695] ? lockdep_hardirqs_on+0x9c/0x150 [ 1889.227273][T31695] __do_fast_syscall_32+0xb6/0x2b0 [ 1889.227293][T31695] ? lockdep_hardirqs_on+0x9c/0x150 [ 1889.227325][T31695] do_fast_syscall_32+0x34/0x80 [ 1889.227346][T31695] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1889.227371][T31695] RIP: 0023:0xf70ad539 [ 1889.227390][T31695] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1889.227408][T31695] RSP: 002b:00000000f549d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1889.227433][T31695] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 0000000080000400 [ 1889.227449][T31695] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1889.227462][T31695] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1889.227475][T31695] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1889.227487][T31695] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1889.227520][T31695] [ 1889.228729][T31695] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7358'. [ 1889.486447][ C0] vcan0: j1939_tp_rxtimer: 0xffff888076a7d000: rx timeout, send abort [ 1889.553804][T27447] usb 4-1: device descriptor read/8, error -71 [ 1889.663198][T27447] usb usb4-port1: unable to enumerate USB device [ 1889.917936][T25623] lo (unregistering): left allmulticast mode [ 1890.234970][T31712] FAULT_INJECTION: forcing a failure. [ 1890.234970][T31712] name failslab, interval 1, probability 0, space 0, times 0 [ 1890.275253][T31712] CPU: 1 UID: 0 PID: 31712 Comm: syz.2.7363 Not tainted syzkaller #0 PREEMPT(full) [ 1890.275284][T31712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1890.275297][T31712] Call Trace: [ 1890.275306][T31712] [ 1890.275316][T31712] dump_stack_lvl+0x189/0x250 [ 1890.275345][T31712] ? __pfx____ratelimit+0x10/0x10 [ 1890.275379][T31712] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1890.275401][ T9] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 1890.275417][T31712] ? __pfx__printk+0x10/0x10 [ 1890.275447][T31712] ? __pfx___might_resched+0x10/0x10 [ 1890.275477][T31712] should_fail_ex+0x414/0x560 [ 1890.275510][T31712] should_failslab+0xa8/0x100 [ 1890.275531][T31712] __kmalloc_cache_noprof+0x6f/0x6f0 [ 1890.275557][T31712] ? cfg80211_connect+0xcfd/0x21a0 [ 1890.275592][T31712] cfg80211_connect+0xcfd/0x21a0 [ 1890.275632][T31712] ? __asan_memset+0x22/0x50 [ 1890.275667][T31712] nl80211_connect+0x17bc/0x1cd0 [ 1890.275700][T31712] ? rcu_is_watching+0x15/0xb0 [ 1890.275725][T31712] ? __pfx_nl80211_connect+0x10/0x10 [ 1890.275749][T31712] ? __mutex_lock+0x335/0x1350 [ 1890.275819][T31712] ? nl80211_pre_doit+0x4f1/0x930 [ 1890.275848][T31712] genl_family_rcv_msg_doit+0x215/0x300 [ 1890.275881][T31712] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1890.275919][T31712] ? bpf_lsm_capable+0x9/0x20 [ 1890.275941][T31712] ? security_capable+0x7e/0x2e0 [ 1890.275973][T31712] genl_rcv_msg+0x60e/0x790 [ 1890.276003][T31712] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1890.276025][T31712] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 1890.276044][T31712] ? __pfx_nl80211_connect+0x10/0x10 [ 1890.276067][T31712] ? __pfx_nl80211_post_doit+0x10/0x10 [ 1890.276090][T31712] ? __asan_memcpy+0x40/0x70 [ 1890.276113][T31712] ? __pfx_ref_tracker_free+0x10/0x10 [ 1890.276140][T31712] netlink_rcv_skb+0x208/0x470 [ 1890.276156][T31712] ? __lock_acquire+0xab9/0xd20 [ 1890.276176][T31712] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1890.276201][T31712] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1890.276240][T31712] ? down_read+0x1ad/0x2e0 [ 1890.276262][T31712] genl_rcv+0x28/0x40 [ 1890.276282][T31712] netlink_unicast+0x82f/0x9e0 [ 1890.276319][T31712] ? __pfx_netlink_unicast+0x10/0x10 [ 1890.276347][T31712] ? netlink_sendmsg+0x642/0xb30 [ 1890.276363][T31712] ? skb_put+0x11b/0x210 [ 1890.276387][T31712] netlink_sendmsg+0x805/0xb30 [ 1890.276416][T31712] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1890.276438][T31712] ? __import_iovec+0x5d4/0x7f0 [ 1890.276458][T31712] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1890.276494][T31712] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1890.276512][T31712] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1890.276531][T31712] __sock_sendmsg+0x21c/0x270 [ 1890.276560][T31712] ____sys_sendmsg+0x505/0x830 [ 1890.276587][T31712] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1890.276626][T31712] ___sys_sendmsg+0x21f/0x2a0 [ 1890.276649][T31712] ? __pfx____sys_sendmsg+0x10/0x10 [ 1890.276708][T31712] ? __fget_files+0x2a/0x420 [ 1890.276725][T31712] ? __fget_files+0x3a0/0x420 [ 1890.276754][T31712] __sys_sendmsg+0x164/0x220 [ 1890.276778][T31712] ? __pfx___sys_sendmsg+0x10/0x10 [ 1890.276808][T31712] ? __pfx_ksys_write+0x10/0x10 [ 1890.276837][T31712] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 1890.276865][T31712] ? lockdep_hardirqs_on+0x9c/0x150 [ 1890.276895][T31712] __do_fast_syscall_32+0xb6/0x2b0 [ 1890.276914][T31712] ? lockdep_hardirqs_on+0x9c/0x150 [ 1890.276951][T31712] do_fast_syscall_32+0x34/0x80 [ 1890.276968][T31712] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1890.276990][T31712] RIP: 0023:0xf702d539 [ 1890.277008][T31712] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1890.277024][T31712] RSP: 002b:00000000f541d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1890.277045][T31712] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 1890.277059][T31712] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1890.277069][T31712] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1890.277080][T31712] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1890.277090][T31712] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1890.277121][T31712] [ 1890.664574][T31723] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7366'. [ 1890.822363][T17488] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 1890.838543][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1890.878619][T25623] IPVS: stop unused estimator thread 0... [ 1890.881470][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1890.961541][T17488] usb 1-1: device descriptor read/64, error -71 [ 1890.978068][ T9] usb 2-1: New USB device found, idVendor=07b5, idProduct=0312, bcdDevice= 0.00 [ 1891.023584][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1891.102577][ T9] usb 2-1: config 0 descriptor?? [ 1891.201543][T17488] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 1891.343720][T17488] usb 1-1: device descriptor read/64, error -71 [ 1891.472574][T17488] usb usb1-port1: attempt power cycle [ 1891.522487][T25767] usb 10-1: new high-speed USB device number 104 using dummy_hcd [ 1891.686150][T25767] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1891.698674][T25767] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1891.714923][T25767] usb 10-1: config 1 has no interface number 0 [ 1891.722267][T25767] usb 10-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1891.734186][T25767] usb 10-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 1891.751154][T25767] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1891.761521][T25767] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1891.769836][T25767] usb 10-1: Product: syz [ 1891.775843][T25767] usb 10-1: Manufacturer: syz [ 1891.780674][T25767] usb 10-1: SerialNumber: syz [ 1891.861913][T17488] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 1891.920824][T17488] usb 1-1: device descriptor read/8, error -71 [ 1892.242096][T17488] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 1892.268932][T31748] netlink: 72 bytes leftover after parsing attributes in process `syz.3.7371'. [ 1892.290372][T17488] usb 1-1: device descriptor read/8, error -71 [ 1892.314029][T31735] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1892.353897][T31735] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1892.412685][T17488] usb usb1-port1: unable to enumerate USB device [ 1892.582479][T25767] cdc_ncm 10-1:1.1: bind() failure [ 1892.640511][T25767] usb 10-1: USB disconnect, device number 104 [ 1892.701526][T17488] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 1892.885143][T17488] usb 4-1: Using ep0 maxpacket: 8 [ 1892.962107][T17488] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 1892.962169][T17488] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1892.962193][T17488] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1892.962219][T17488] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1892.962243][T17488] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1892.962291][T17488] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1892.962317][T17488] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1893.597794][T17488] usb 4-1: GET_CAPABILITIES returned 0 [ 1893.603407][T17488] usbtmc 4-1:16.0: can't read capabilities [ 1893.684428][T31748] netlink: 96 bytes leftover after parsing attributes in process `syz.3.7371'. [ 1893.712559][T31748] netlink: 96 bytes leftover after parsing attributes in process `syz.3.7371'. [ 1893.947896][T27447] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 1893.955957][ T31] INFO: task kworker/0:2:982 blocked for more than 143 seconds. [ 1893.964675][ T31] Not tainted syzkaller #0 [ 1893.969644][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1893.985316][ T31] task:kworker/0:2 state:D stack:20440 pid:982 tgid:982 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 1894.018352][ T31] Workqueue: usb_hub_wq hub_event [ 1894.033901][ T31] Call Trace: [ 1894.042827][ T31] [ 1894.058562][ T31] __schedule+0x1798/0x4cc0 [ 1894.072746][ T31] ? worker_thread+0x8a0/0xda0 [ 1894.081921][ T31] ? __lock_acquire+0xab9/0xd20 [ 1894.098758][ T31] ? __pfx___schedule+0x10/0x10 [ 1894.109613][ T31] ? schedule+0x91/0x360 [ 1894.126797][ T31] schedule+0x165/0x360 [ 1894.132189][T27447] usb 1-1: Using ep0 maxpacket: 8 [ 1894.141708][ T31] schedule_timeout+0x9a/0x270 [ 1894.156871][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 1894.182441][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1894.189070][T27447] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1894.211391][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1894.220350][ T31] ? wait_for_completion+0x267/0x5d0 [ 1894.226386][T27447] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1894.247175][ T31] wait_for_completion+0x2bf/0x5d0 [ 1894.259337][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 1894.266247][T27447] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1894.290731][ T31] i2c_del_adapter+0x581/0x6e0 [ 1894.300160][T27447] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1894.314181][ T31] ? __pfx_i2c_del_adapter+0x10/0x10 [ 1894.331827][ T31] ? dvb_usbv2_exit+0x85a/0x9e0 [ 1894.342000][ T31] dvb_usbv2_probe+0x4ae/0x41a0 [ 1894.354242][T27447] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1894.372109][ T31] ? __pfx_dvb_usbv2_probe+0x10/0x10 [ 1894.379830][ T31] ? __pm_runtime_set_status+0x785/0xa50 [ 1894.394834][T27447] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1894.412661][ T31] usb_probe_interface+0x668/0xc30 [ 1894.428266][ T31] ? __pfx_usb_probe_interface+0x10/0x10 [ 1894.463736][ T31] really_probe+0x26d/0x9e0 [ 1894.478848][ T31] __driver_probe_device+0x18c/0x2f0 [ 1894.488880][ T31] driver_probe_device+0x4f/0x430 [ 1894.508619][ T31] __device_attach_driver+0x2ce/0x530 [ 1894.538839][ T31] bus_for_each_drv+0x251/0x2e0 [ 1894.551943][ T31] ? __pfx___device_attach_driver+0x10/0x10 [ 1894.569338][ T31] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1894.589593][ T31] __device_attach+0x2b8/0x400 [ 1894.615392][ T31] ? __pfx___device_attach+0x10/0x10 [ 1894.624852][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 1894.641673][ T31] bus_probe_device+0x185/0x260 [ 1894.668294][ T31] device_add+0x7b6/0xb50 [ 1894.685973][ T31] usb_set_configuration+0x1a87/0x20e0 [ 1894.725091][T27447] usb 1-1: usb_control_msg returned -71 [ 1894.733946][ T31] usb_generic_driver_probe+0x8d/0x150 [ 1894.750246][T27447] usbtmc 1-1:16.0: can't read capabilities [ 1894.757870][ T31] usb_probe_device+0x1c4/0x390 [ 1894.778448][T27447] usb 1-1: USB disconnect, device number 82 [ 1894.784963][ T31] ? __pfx_usb_probe_device+0x10/0x10 [ 1894.809192][ T31] really_probe+0x26d/0x9e0 [ 1894.841183][ T31] __driver_probe_device+0x18c/0x2f0 [ 1894.858554][ T31] driver_probe_device+0x4f/0x430 [ 1894.881556][ T31] __device_attach_driver+0x2ce/0x530 [ 1894.897228][ T31] bus_for_each_drv+0x251/0x2e0 [ 1894.905428][T17488] usb 4-1: USB disconnect, device number 118 [ 1894.908377][ T31] ? __pfx___device_attach_driver+0x10/0x10 [ 1894.938277][ T31] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1894.954233][ T31] __device_attach+0x2b8/0x400 [ 1894.969419][ T31] ? __pfx___device_attach+0x10/0x10 [ 1894.981896][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 1894.999679][ T31] bus_probe_device+0x185/0x260 [ 1895.010549][ T31] device_add+0x7b6/0xb50 [ 1895.020178][ T31] usb_new_device+0xa39/0x16f0 [ 1895.033445][ T31] ? __pfx_usb_new_device+0x10/0x10 [ 1895.057508][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1895.074789][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1895.086132][ T31] hub_event+0x2958/0x4a20 [ 1895.101605][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 1895.112121][ T31] ? __pfx_hub_event+0x10/0x10 [ 1895.127293][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 1895.139534][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1895.159337][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 1895.177842][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 1895.192933][ T31] process_scheduled_works+0xae1/0x17b0 [ 1895.208833][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 1895.225318][ T31] worker_thread+0x8a0/0xda0 [ 1895.236412][ T31] kthread+0x711/0x8a0 [ 1895.248605][ T31] ? __pfx_worker_thread+0x10/0x10 [ 1895.263777][ T31] ? __pfx_kthread+0x10/0x10 [ 1895.280870][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1895.294783][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1895.310299][ T31] ? __pfx_kthread+0x10/0x10 [ 1895.322808][ T31] ret_from_fork+0x4bc/0x870 [ 1895.340430][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1895.349090][ T31] ? __switch_to_asm+0x39/0x70 [ 1895.364333][ T31] ? __switch_to_asm+0x33/0x70 [ 1895.379440][ T31] ? __pfx_kthread+0x10/0x10 [ 1895.393773][ T31] ret_from_fork_asm+0x1a/0x30 [ 1895.408966][ T31] [ 1895.419293][ T31] INFO: task syz.8.6918:29698 blocked for more than 144 seconds. [ 1895.437344][ T31] Not tainted syzkaller #0 [ 1895.451952][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1895.471298][ T31] task:syz.8.6918 state:D stack:26664 pid:29698 tgid:29685 ppid:27667 task_flags:0x400040 flags:0x10080002 [ 1895.519737][ T31] Call Trace: [ 1895.523624][ T31] [ 1895.529688][ T31] __schedule+0x1798/0x4cc0 [ 1895.539755][ T31] ? __pfx___schedule+0x10/0x10 [ 1895.555403][ T31] ? schedule+0x91/0x360 [ 1895.565554][ T31] schedule+0x165/0x360 [ 1895.575910][ T31] schedule_preempt_disabled+0x13/0x30 [ 1895.591621][ T31] __mutex_lock+0x7e6/0x1350 [ 1895.606670][ T31] ? __mutex_lock+0x5bb/0x1350 [ 1895.622630][ T31] ? usbdev_open+0x16e/0x760 [ 1895.631880][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1895.648282][ T31] ? bus_find_device+0x273/0x2b0 [ 1895.658022][ T31] ? __pfx_bus_find_device+0x10/0x10 [ 1895.674089][ T31] ? __lock_acquire+0xab9/0xd20 [ 1895.689243][ T31] usbdev_open+0x16e/0x760 [ 1895.699335][ T31] ? __pfx_usbdev_open+0x10/0x10 [ 1895.709707][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 1895.730435][ T31] chrdev_open+0x4cc/0x5e0 [ 1895.743009][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 1895.750813][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 1895.757621][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 1895.763168][ T31] do_dentry_open+0x953/0x13f0 [ 1895.768357][ T31] vfs_open+0x3b/0x340 [ 1895.773088][ T31] ? path_openat+0x2ecd/0x3830 [ 1895.777955][ T31] path_openat+0x2ee5/0x3830 [ 1895.814342][ T31] ? __pfx_path_openat+0x10/0x10 [ 1895.836517][ T31] do_filp_open+0x1fa/0x410 [ 1895.852715][ T31] ? __lock_acquire+0xab9/0xd20 [ 1895.857950][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 1895.870929][ T31] ? _raw_spin_unlock+0x28/0x50 [ 1895.881117][ T31] ? alloc_fd+0x64c/0x6c0 [ 1895.891793][ T31] do_sys_openat2+0x121/0x1c0 [ 1895.901974][ T31] ? __se_sys_futex_time32+0x360/0x3e0 [ 1895.921707][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 1895.926963][ T31] ? rcu_is_watching+0x15/0xb0 [ 1895.961885][ T31] __ia32_compat_sys_openat+0x131/0x160 [ 1895.971550][ T31] __do_fast_syscall_32+0xb6/0x2b0 [ 1895.976745][ T31] do_fast_syscall_32+0x34/0x80 [ 1896.001695][ T31] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1896.008218][ T31] RIP: 0023:0xf7f66539 [ 1896.018614][ T31] RSP: 002b:00000000f541c100 EFLAGS: 00000206 ORIG_RAX: 0000000000000127 [ 1896.036774][ T31] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f541c150 [ 1896.061789][ T31] RDX: 0000000000101301 RSI: 0000000000000000 RDI: 00000000f73f6ff4 [ 1896.080112][ T31] RBP: 0000000000101301 R08: 0000000000000000 R09: 0000000000000000 [ 1896.099807][ T31] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1896.131523][ T31] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1896.139660][ T31] [ 1896.147654][ T31] [ 1896.147654][ T31] Showing all locks held in the system: [ 1896.155629][ T31] 5 locks held by kworker/0:0/9: [ 1896.160603][ T31] #0: ffff8880216d8148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1896.175498][ T31] #1: ffffc900000e7ba0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1896.187633][ T31] #2: ffff88802766f198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a20 [ 1896.197224][ T31] #3: ffff88807cb71198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400 [ 1896.207203][ T31] #4: ffff888047f87160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400 [ 1896.217171][ T31] 1 lock held by khungtaskd/31: [ 1896.222619][ T9] usbhid 2-1:0.0: can't add hid device: -32 [ 1896.228620][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -32 [ 1896.239628][ T31] #0: ffffffff8df3d6e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1896.249646][ T31] 5 locks held by kworker/0:2/982: [ 1896.255032][ T31] #0: ffff8880216d8148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1896.266624][ T31] #1: ffffc90003707ba0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1896.279792][ T31] #2: ffff8880278b2198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a20 [ 1896.289111][ T31] #3: ffff888030d8c198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400 [ 1896.298682][ T31] #4: ffff88807d592160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400 [ 1896.308313][ T31] 2 locks held by klogd/5189: [ 1896.313264][ T31] #0: ffff8880b883a058 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xad/0x140 [ 1896.323458][ T31] #1: ffff8880b8924048 (psi_seq){-.-.}-{0:0}, at: fs_reclaim_acquire+0x7d/0x100 [ 1896.332949][ T31] 2 locks held by getty/5587: [ 1896.337631][ T31] #0: ffff88814e1480a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1896.347580][ T31] #1: ffffc900036bb2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 1896.358266][ T31] 3 locks held by kworker/u8:4/17648: [ 1896.363746][ T31] #0: ffff88801a069948 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1896.375939][ T31] #1: ffffc900037afba0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1896.387105][ T31] #2: ffffffff8f2cbd48 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 1896.396531][ T31] 4 locks held by udevd/23952: [ 1896.401299][ T31] #0: ffff88805f96e418 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xb7/0xe20 [ 1896.410293][ T31] #1: ffff88804c2b6088 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x5c/0x420 [ 1896.420063][ T31] #2: ffff8880239280f8 (kn->active#22){++++}-{0:0}, at: kernfs_seq_start+0xb2/0x420 [ 1896.429813][ T31] #3: ffff888030d8c198 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 1896.439802][ T31] 3 locks held by kworker/u8:5/27962: [ 1896.445307][ T31] #0: ffff88802efb1148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1896.457423][ T31] #1: ffffc9000b16fba0 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1896.471302][ T31] #2: ffffffff8f2cbd48 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 1896.481175][ T31] 1 lock held by syz.8.6918/29698: [ 1896.486374][ T31] #0: ffff8880278b2198 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x16e/0x760 [ 1896.495725][ T31] 1 lock held by syz.7.7029/30250: [ 1896.500864][ T31] #0: ffff8880278b2198 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x16e/0x760 [ 1896.510089][ T31] 2 locks held by syz.1.7361/31739: [ 1896.521934][ T31] 2 locks held by syz.3.7371/31744: [ 1896.527283][ T31] #0: ffff8880115d9348 (&sb->s_type->i_mutex_key#11){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 1896.537985][ T31] #1: ffffffff8df43178 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 1896.548987][ T31] 2 locks held by syz.2.7372/31750: [ 1896.554503][ T31] #0: ffffffff8f2cbd48 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 1896.563640][ T31] #1: ffffffff8df43178 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730 [ 1896.574772][ T31] 1 lock held by syz.0.7374/31760: [ 1896.579882][ T31] #0: ffffffff8df43040 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 1896.589987][ T31] 2 locks held by syz.9.7375/31764: [ 1896.595470][ T31] #0: ffffffff8f7eec90 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 1896.605035][ T31] #1: ffffffff8f2cbd48 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8e9/0x1c80 [ 1896.614538][ T31] [ 1896.616871][ T31] ============================================= [ 1896.616871][ T31] [ 1896.625361][ T31] NMI backtrace for cpu 0 [ 1896.625380][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1896.625398][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1896.625409][ T31] Call Trace: [ 1896.625416][ T31] [ 1896.625424][ T31] dump_stack_lvl+0x189/0x250 [ 1896.625461][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1896.625484][ T31] ? __pfx__printk+0x10/0x10 [ 1896.625510][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 1896.625531][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1896.625552][ T31] ? __pfx__printk+0x10/0x10 [ 1896.625571][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1896.625600][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1896.625621][ T31] watchdog+0xf60/0xfa0 [ 1896.625642][ T31] ? watchdog+0x1e2/0xfa0 [ 1896.625662][ T31] kthread+0x711/0x8a0 [ 1896.625685][ T31] ? __pfx_watchdog+0x10/0x10 [ 1896.625701][ T31] ? __pfx_kthread+0x10/0x10 [ 1896.625728][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1896.625752][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1896.625774][ T31] ? __pfx_kthread+0x10/0x10 [ 1896.625796][ T31] ret_from_fork+0x4bc/0x870 [ 1896.625814][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1896.625836][ T31] ? __switch_to_asm+0x39/0x70 [ 1896.625850][ T31] ? __switch_to_asm+0x33/0x70 [ 1896.625862][ T31] ? __pfx_kthread+0x10/0x10 [ 1896.625883][ T31] ret_from_fork_asm+0x1a/0x30 [ 1896.625910][ T31] [ 1896.625920][ T31] Sending NMI from CPU 0 to CPUs 1: [ 1896.773282][ C1] NMI backtrace for cpu 1 [ 1896.773302][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 1896.773321][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1896.773332][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 1896.773361][ C1] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 93 b1 21 00 f3 0f 1e fa fb f4 c8 e6 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 1896.773376][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c6 [ 1896.773393][ C1] RAX: 2aacaa03d3843500 RBX: ffffffff81967b47 RCX: 2aacaa03d3843500 [ 1896.773406][ C1] RDX: 0000000000000001 RSI: ffffffff8d70e43a RDI: ffffffff8bbf08e0 [ 1896.773419][ C1] RBP: ffffc90000197f10 R08: ffff8880b8932fdb R09: 1ffff110171265fb [ 1896.773431][ C1] R10: dffffc0000000000 R11: ffffed10171265fc R12: ffffffff8f7cee70 [ 1896.773444][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff1100395db58 [ 1896.773456][ C1] FS: 0000000000000000(0000) GS:ffff88812623b000(0000) knlGS:0000000000000000 [ 1896.773470][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1896.773482][ C1] CR2: 000000005776399c CR3: 0000000077372000 CR4: 00000000003526f0 [ 1896.773500][ C1] Call Trace: [ 1896.773508][ C1] [ 1896.773515][ C1] default_idle+0x13/0x20 [ 1896.773531][ C1] default_idle_call+0x73/0xb0 [ 1896.773548][ C1] do_idle+0x1e7/0x510 [ 1896.773569][ C1] ? __pfx_do_idle+0x10/0x10 [ 1896.773594][ C1] cpu_startup_entry+0x44/0x60 [ 1896.773611][ C1] start_secondary+0x101/0x110 [ 1896.773635][ C1] common_startup_64+0x13e/0x147 [ 1896.773672][ C1] [ 1897.029428][T31764] vlan2: entered promiscuous mode [ 1897.034850][T31764] geneve1: entered promiscuous mode [ 1897.040350][T31764] vlan2: entered allmulticast mode [ 1897.048545][T31764] geneve1: entered allmulticast mode [ 1897.167009][T27447] usb 2-1: USB disconnect, device number 50 [ 1900.209329][ T5200] udevd[5200]: worker [23952] /devices/platform/dummy_hcd.8/usb9/9-1 is taking a long time