last executing test programs: 41m13.432638013s ago: executing program 1 (id=289): mount$fuse(0x0, 0x0, 0x0, 0x80, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r2, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r3, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 41m11.811260148s ago: executing program 1 (id=292): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0x40000071, 0x0, 0x40300}]}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x4e, 0x0, &(0x7f00000000c0)="e300dde148f063096244fe42904bcee14db4241544716b9ea42231ed3373a3e29953e3bb017d9c1fd05dacf5bb80b4b7ee0fae7aea5349ff567ea8f6264df25f2d09a83b2f37d2381e5e303d9fad", 0x0, 0x407, 0x0, 0xffffffffffffffc7, 0x0, 0x0, 0x0, 0x8, 0x0, 0xe}, 0x4c) r3 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x0) ioctl$FIBMAP(r3, 0x1, &(0x7f0000000040)=0x85) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newlink={0x4c, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x1414, 0x2021}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x1}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x8044806) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='gid_map\x00') r7 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r8, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x41) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89001) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x89901) r9 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000100)={0x4, 0x1, 0xf000, 0x1000, &(0x7f0000ffe000/0x1000)=nil}) r11 = eventfd(0x5f0) ioctl$KVM_IOEVENTFD(r10, 0x40a0ae49, &(0x7f0000000080)={0x7ff, 0x8080000, 0x0, r11}) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r10, 0x4020aed2, &(0x7f0000000000)={0x8000000, 0x101000, 0x8}) writev(r6, &(0x7f0000000080)=[{&(0x7f0000000000)='4', 0x1}], 0x1) write$snapshot(r6, &(0x7f0000000240)="b980a8ee90a2e532c01a19c234c0351c4adb69c2147adcaa4d7f93c6297a35d0bd4661f60e7d14c8bd73f4e6641b753275defd67c8144611942a2999bf5617f063d487013e181ff8ab9c292ed2a9fe9a95b9708f1ab24d0398fe55895293086ad1e0b82e4f2e37e786b1f587d6f34de7525e1fff5e116377bd2bf2803bd1af0c4de833e8cd8bd00ebc60a55035a252ffe3ceddd865954202ddc7d804f8b7b15c2fcdbe67585818fc", 0xa8) 41m10.15107456s ago: executing program 1 (id=297): r0 = socket$key(0xf, 0x3, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) clock_gettime(0x6, &(0x7f0000000180)) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000001380)) ioctl$sock_inet_SIOCDARP(r3, 0x8953, &(0x7f00000001c0)={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0xa, 0x0}}, {0x6, @remote}, 0x4, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2b}}, 'netpci0\x00'}) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0) syz_emit_ethernet(0x2a, 0x0, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xb4, 0x19, 0x1, 0x0, 0x25dfdbfc, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0xa0, 0x80}, {0x0, 0x4, 0x0, 0x4, 0x0, 0x2}, {0x0, 0x0, 0x200000000000}, 0x0, 0x6e6bbf, 0x1}}, 0xb4}, 0x1, 0x0, 0x0, 0x20008010}, 0x0) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)="1400000016000b63d25a80648c2566e506bce1e8", 0x14}], 0x1}, 0x0) r5 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r5, 0x40045532, &(0x7f0000000480)) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0) r7 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r7, 0xc0684113, &(0x7f0000000080)={0x1, 0xfffff800, 0x1, 0xa, 0x8, 0x3, 0x500, 0xe, 0x9, 0x40, 0xffffffff, 0x2}) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = getpid() r9 = syz_pidfd_open(r8, 0x0) syz_open_dev$video(&(0x7f0000000000), 0x1, 0x40) process_madvise(r9, &(0x7f00000015c0)=[{0x0, 0xb3c9de750fa141ee}, {&(0x7f0000001600)="7fe370522d6af6625215f1793293827ec1fbafd2669ec71d6ec4f18aaa71edae948611d70900e80e4116a3c114041430f19bd4f37e3c7238ed6e6d46979c2220bde96ffe55c88d2e697fd133e5733e1bbb159ba81a1e8e2fb2e51596", 0x1}, {&(0x7f0000001300)="0454c96113b0da138a30557b0c026d7c7ba28c5cf82e468ed91537d279936ddcf06ef737e0943554457a28db61aea38a154bf19b456388daf4df61c9febcd9b8a2b14929c6f097f4ff11e686a8a37381b9321ae19dd77be474863e35633dec7003568e91eab8e870a93a73b6dea475547a826b25021aecd727c201c9cea0bfba0122b00573c286b821d43d0b4e38ec90b7d08565bf81862bdf5115e75886e742c51e058d0752982da309d53a7c0d320fdbd38bfaa998ff981d15928f783b2728ecc210898685dfc72398e665b7892024c0ab0dcfe9d3fc", 0xd7}, {&(0x7f0000001400)="3e519bc4eb7b0a55b33bdb22cc7ca76aba33506ebcf89e67b16583e68404bbca008b995a73322a4cc7a3c436e94da49121c4f225ccd342612b46beb2f569a7a0423c0cf79f2d94c015b7b47bc11d5fe599214dbe7f92c8a14b6d254a8daa074ece2708f10e912eb72cb22efc14a0d0cc7cea79311ead3200c7aca0e920d83c8d7b92db", 0x83}, {&(0x7f00000017c0)="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", 0x1000}, {&(0x7f00000014c0)="6b553f4de4ed875c9fadc16852f54981bcd646a5262fc3900592194638585e3d2e79f074f796720749ddc1a2661dcb2471a47d963fb4d817dfdb5f52dc8ab642030c2c771646051d08609527b36368b80794b8cb63fe817c3379951a047c5026c2e99eae6dc05c6845529fb603666d78c0e1e5f7bca8f1d8584b7409ccaf0da598af64d7bdd2ae21ac4fb4e07dee96a92a8dddecee7ccbede2d0a7d4f2da90dc3eb4ae8895091f05db58a786519f6fc924a465cc46ae6a9b8705de0705b8bab4f10cddc7756c53eadf4aa6e2379fd85e9c5e7bfc", 0xd4}], 0x6, 0x9, 0x0) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000480)={0x2, 0x3, 0x0, 0x9, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x6c, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_x_nat_t_port={0x1, 0x15, 0x4e20}, @sadb_x_nat_t_type={0x1, 0x14, 0x3}]}, 0x60}}, 0x0) 41m9.504373458s ago: executing program 1 (id=302): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000003540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000003700)={&(0x7f0000000240)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000fddbdf253b00000008000300", @ANYRES32=r2, @ANYBLOB="30003300c0100e00ffffffffffbf08", @ANYBLOB="724b2a5966c0282a48d2c0d4b9d8b73811921608ca3f416d7fcf556fff0d37cfa11c5f130ac9d76ac0ae1c1c86f8c4dd2feefb0fc1bf5e5ec5290b884a886f2d55967c7ca070f321007c31205f79f495792f68a1c6ceb1b40e9e38795d03afce516ab7e639320e3cb77c7e", @ANYRES8=r0], 0x4c}, 0x1, 0x0, 0x0, 0x24004800}, 0x28008004) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000040)={'tunl0\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x7800, 0x7, 0x5, 0xfd, {{0x1b, 0x4, 0x0, 0x7, 0x6c, 0x68, 0x0, 0x40, 0x4, 0x0, @broadcast, @loopback, {[@noop, @lsrr={0x83, 0x1b, 0x5d, [@broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010102, @multicast2, @broadcast, @broadcast]}, @ssrr={0x89, 0xf, 0x7d, [@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @private=0xa010100]}, @rr={0x7, 0x2b, 0xb6, [@rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x42}, @remote, @dev={0xac, 0x14, 0x14, 0x3c}, @private=0xa010100, @local, @private=0xa010100, @private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x20}]}]}}}}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/if_inet6\x00') socketpair$unix(0x1, 0x2, 0x0, 0x0) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0xa1001) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000300)={{0x0, 0x2, 0xffffffff}}) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x183c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f0000000840)={0x9c9, 0x1000000, 0x0, 'queue1\x00', 0x200000}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r6, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r5, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x40605414, &(0x7f00000000c0)={0x6, 0xffff81a4, 0x40, 0x0, 0xf}) preadv(r4, 0x0, 0x0, 0x1fd, 0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040080}, 0x44040) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000380)=ANY=[@ANYBLOB="d44eec00000000000000000000000000011100f90800020064eb69bad94997ec"], 0x20}, 0x1, 0x0, 0x0, 0x14000004}, 0x20000800) syz_emit_ethernet(0x7a, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd60381f3400442f00fc000000000000000000000000000000ff0221000000000000000001042081000000892f"], 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x200400d0}, 0x0) r11 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$DEVLINK_CMD_RATE_DEL(r11, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000b80)={&(0x7f0000000d80)=ANY=[@ANYBLOB="78fb609331f52860eb56495e196ac88c9e6c5a57da8094425c70f09836eb9edcd0cd966fb52f4b02728680bbafa2945fb718703077d9d8ed0ddc8b217d86a246d7842df4e0ca37bb380ba8895d8574c916152d5506e44e5c945e276c770465c12561bc44a4f9c3e806e23cd3062f5672ee9b0fcead6b7d54b13708f44265203cc21e72b5d20a534c4f9faf21cca4c5698c4cd33959", @ANYRES16=0x0, @ANYBLOB="10002abd7000fddbdf254d000000080001007063690011000200303030303a30303a31302e30000000000800030002000000080001007063690011000200303030303a30303a31302e30000000000800030000000000080001007063690011000200303030303a30303a31302e3000000000"], 0x78}, 0x1, 0x0, 0x0, 0x44010}, 0x80050) 41m7.98224629s ago: executing program 32 (id=302): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000003540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000003700)={&(0x7f0000000240)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000fddbdf253b00000008000300", @ANYRES32=r2, @ANYBLOB="30003300c0100e00ffffffffffbf08", @ANYBLOB="724b2a5966c0282a48d2c0d4b9d8b73811921608ca3f416d7fcf556fff0d37cfa11c5f130ac9d76ac0ae1c1c86f8c4dd2feefb0fc1bf5e5ec5290b884a886f2d55967c7ca070f321007c31205f79f495792f68a1c6ceb1b40e9e38795d03afce516ab7e639320e3cb77c7e", @ANYRES8=r0], 0x4c}, 0x1, 0x0, 0x0, 0x24004800}, 0x28008004) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000040)={'tunl0\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x7800, 0x7, 0x5, 0xfd, {{0x1b, 0x4, 0x0, 0x7, 0x6c, 0x68, 0x0, 0x40, 0x4, 0x0, @broadcast, @loopback, {[@noop, @lsrr={0x83, 0x1b, 0x5d, [@broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010102, @multicast2, @broadcast, @broadcast]}, @ssrr={0x89, 0xf, 0x7d, [@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @private=0xa010100]}, @rr={0x7, 0x2b, 0xb6, [@rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x42}, @remote, @dev={0xac, 0x14, 0x14, 0x3c}, @private=0xa010100, @local, @private=0xa010100, @private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x20}]}]}}}}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/if_inet6\x00') socketpair$unix(0x1, 0x2, 0x0, 0x0) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0xa1001) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000300)={{0x0, 0x2, 0xffffffff}}) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x183c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f0000000840)={0x9c9, 0x1000000, 0x0, 'queue1\x00', 0x200000}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r6, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r5, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x40605414, &(0x7f00000000c0)={0x6, 0xffff81a4, 0x40, 0x0, 0xf}) preadv(r4, 0x0, 0x0, 0x1fd, 0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040080}, 0x44040) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000380)=ANY=[@ANYBLOB="d44eec00000000000000000000000000011100f90800020064eb69bad94997ec"], 0x20}, 0x1, 0x0, 0x0, 0x14000004}, 0x20000800) syz_emit_ethernet(0x7a, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd60381f3400442f00fc000000000000000000000000000000ff0221000000000000000001042081000000892f"], 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x200400d0}, 0x0) r11 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$DEVLINK_CMD_RATE_DEL(r11, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000b80)={&(0x7f0000000d80)=ANY=[@ANYBLOB="78fb609331f52860eb56495e196ac88c9e6c5a57da8094425c70f09836eb9edcd0cd966fb52f4b02728680bbafa2945fb718703077d9d8ed0ddc8b217d86a246d7842df4e0ca37bb380ba8895d8574c916152d5506e44e5c945e276c770465c12561bc44a4f9c3e806e23cd3062f5672ee9b0fcead6b7d54b13708f44265203cc21e72b5d20a534c4f9faf21cca4c5698c4cd33959", @ANYRES16=0x0, @ANYBLOB="10002abd7000fddbdf254d000000080001007063690011000200303030303a30303a31302e30000000000800030002000000080001007063690011000200303030303a30303a31302e30000000000800030000000000080001007063690011000200303030303a30303a31302e3000000000"], 0x78}, 0x1, 0x0, 0x0, 0x44010}, 0x80050) 36m18.090659125s ago: executing program 3 (id=1456): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e1f, 0x3, 'lc\x00', 0x4, 0x81, 0x5}, {@rand_addr=0x64010102, 0x4e26, 0x4, 0xcb, 0x12d5c, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, &(0x7f0000000380)={{0x84, @private=0xa010100, 0x4e20, 0x3, 'sh\x00', 0x0, 0x60000000, 0xc}, {@rand_addr=0x64010102, 0x4e26, 0x2000, 0x0, 0x8001, 0x1}}, 0x44) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x1a, 0xa, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) getsockopt$IP_VS_SO_GET_INFO(r2, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000140)=0xc) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_clone3(&(0x7f00000008c0)={0x8080, &(0x7f0000000480), &(0x7f00000004c0), &(0x7f0000000500)=0x0, {0x21}, &(0x7f0000000540)=""/214, 0xd6, &(0x7f0000000e00)=""/186, &(0x7f0000000680)=[0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x6}, 0x58) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x8010, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) sendmsg$AUDIT_LIST_RULES(r2, &(0x7f0000000b40)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x10, 0x3f5, 0x300, 0x70bd29, 0x25dfdbfb, "", [""]}, 0x10}}, 0x800) socket$inet_mptcp(0x2, 0x1, 0x106) r6 = syz_io_uring_setup(0x7acb, &(0x7f00000001c0)={0x0, 0xad4a, 0x800, 0xffffffff, 0x10e}, &(0x7f0000000240), &(0x7f0000000080)) io_uring_register$IORING_UNREGISTER_EVENTFD(r6, 0x5, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f00000003c0)=0xffffffff) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000440)='projid_map\x00') write$tcp_mem(r7, &(0x7f0000000180)={0xd2, 0x20, 0x44, 0x20, 0x6}, 0x48) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') socket$kcm(0x10, 0x2, 0x0) 36m17.819786458s ago: executing program 0 (id=1458): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e27, 0x7ff, @ipv4={'\x00', '\xff\xff', @local}, 0x5}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x28, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r2, &(0x7f0000000200)={0x2a, 0x1, 0x1}, 0x66) socket$nl_route(0x10, 0x3, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = gettid() prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x4, 0xfffffe0000000001, 0xfa14, 0xffffffff}, 0x0) ioctl$FBIOBLANK(0xffffffffffffffff, 0x4611, 0x3) quotactl_fd$Q_GETFMT(0xffffffffffffffff, 0xffffffff80000402, 0x0, 0x0) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f00000000c0)={0x80009, 0x14, 0x12, 0x15, 0xb, 0xc0c9, 0x2, 0xf8, 0xffffffffffffffff}) r6 = socket(0x40000000015, 0x5, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000001000000fe880000000000000000000000000101ac141436000000000000000000000000fffc0000000000000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x13c}, 0x1, 0x0, 0x0, 0x1}, 0x0) bind$inet(r6, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) ioprio_get$uid(0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 36m16.42455427s ago: executing program 0 (id=1461): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000003540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000003700)={&(0x7f0000000240)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000fddbdf253b00000008000300", @ANYRES32=r2, @ANYBLOB="30003300c0100e00ffffffffffbf08", @ANYBLOB="724b2a5966c0282a48d2c0d4b9d8b73811921608ca3f416d7fcf556fff0d37cfa11c5f130ac9d76ac0ae1c1c86f8c4dd2feefb0fc1bf5e5ec5290b884a886f2d55967c7ca070f321007c31205f79f495792f68a1c6ceb1b40e9e38795d03afce516ab7e639320e3cb77c7e", @ANYRES8=r0], 0x4c}, 0x1, 0x0, 0x0, 0x24004800}, 0x28008004) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000040)={'tunl0\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x7800, 0x7, 0x5, 0xfd, {{0x1b, 0x4, 0x0, 0x7, 0x6c, 0x68, 0x0, 0x40, 0x4, 0x0, @broadcast, @loopback, {[@noop, @lsrr={0x83, 0x1b, 0x5d, [@broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010102, @multicast2, @broadcast, @broadcast]}, @ssrr={0x89, 0xf, 0x7d, [@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @private=0xa010100]}, @rr={0x7, 0x2b, 0xb6, [@rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x42}, @remote, @dev={0xac, 0x14, 0x14, 0x3c}, @private=0xa010100, @local, @private=0xa010100, @private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x20}]}]}}}}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f0000000200)='net/if_inet6\x00') socketpair$unix(0x1, 0x2, 0x0, 0x0) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0xa1001) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f0000000300)={{0x0, 0x2, 0xffffffff}}) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x183c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000840)={0x9c9, 0x1000000, 0x0, 'queue1\x00', 0x200000}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r7, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r6, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r6, 0x40605414, &(0x7f00000000c0)={0x6, 0xffff81a4, 0x40, 0x0, 0xf}) preadv(r5, 0x0, 0x0, 0x1fd, 0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000400}, 0xc, &(0x7f0000000140)={&(0x7f0000000c00)={0x1c, r4, 0x300, 0x70bd27, 0x25dfdbff, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040080}, 0x44040) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000380)=ANY=[@ANYBLOB="d44eec00000000000000000000000000011100f90800020064eb69bad94997ec"], 0x20}, 0x1, 0x0, 0x0, 0x14000004}, 0x20000800) syz_emit_ethernet(0x7a, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd60381f3400442f00fc000000000000000000000000000000ff0221000000000000000001042081000000892f"], 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x200400d0}, 0x0) r12 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$DEVLINK_CMD_RATE_DEL(r12, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000b80)={&(0x7f0000000d80)=ANY=[@ANYBLOB="78fb609331f52860eb56495e196ac88c9e6c5a57da8094425c70f09836eb9edcd0cd966fb52f4b02728680bbafa2945fb718703077d9d8ed0ddc8b217d86a246d7842df4e0ca37bb380ba8895d8574c916152d5506e44e5c945e276c770465c12561bc44a4f9c3e806e23cd3062f5672ee9b0fcead6b7d54b13708f44265203cc21e72b5d20a534c4f9faf21cca4c5698c4cd33959", @ANYRES16=0x0, @ANYBLOB], 0x78}, 0x1, 0x0, 0x0, 0x44010}, 0x80050) 36m16.242182529s ago: executing program 0 (id=1462): mount$fuse(0x0, 0x0, 0x0, 0x80, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)={0x698, 0x21, 0x800, 0x70bd28, 0x25dfdbfd, {0x17}, [@typed={0x8, 0x44, 0x0, 0x0, @pid}, @generic="6e3c16cb77f25034e763b9c97073e075bee897c43094cd164a0360c97f4e494640dedf33b5b9e7df3c4037d431dacce392f43291b4eb9fba039e6869c218a9d369b852a6db199d5d6a6919628201255eddb2853e778d43421e28c15a4b469eda6ff91ea166c27b645d1a280071d7103a6d8607cfa231f635c72956296084875285a54c6063ab9caf531ec5cac03f67839cecbcd0e780918dc56540", @typed={0xa, 0x46, 0x0, 0x0, @str='wlan0\x00'}, @typed={0x14, 0xca, 0x0, 0x0, @ipv6=@private2}, @nested={0x5bd, 0x132, 0x0, 0x1, [@generic="b0436dbcc9e1b7aab3373fe4de5a9d887b5b626603eea4257c6d4175dc40949634027d61b5837c2ca3dfa7cfbbcf8cb09ae7afc5ed7ea522d37a0c5ff23dceecf602cfc11ed24208f31cf6cbe20b7854704ba75d57bc3c7088ee7d4096bff357da828983c3016ae7ffa9c5d4278f5fced3395e9cfd7f682810ef9fc7c099182cee", @nested={0x535, 0x1f, 0x0, 0x1, [@typed={0x1d, 0x12d, 0x0, 0x0, @binary="df69cdd9f861f37307a7385180073c1c0ef5bad516d04554e2"}, @generic="7e5958a7b602c412aa658394649301094fa43409e22f8ec4629e04e343ce8fa4cdf747d50d37b1da4c18042edecf8581f3419ed713e2f25197ab219c191238458bc5649178cc9c18bf6eb2ca060a032038ac30b7bfa615486651bd0a999341a22ddbc663509b0357fab88819df5b45b698a6278639559820721fd7a90eee6b9ec65fc22f823ded6cbc4c21a891fa7c757043b436e65d490f35d4", @typed={0x8, 0x5, 0x0, 0x0, @u32=0x6}, @nested={0x306, 0xe5, 0x0, 0x1, [@generic="06ebdb4a72d56045e5f706fa304f8a1a6c34a891e67c43d24221f8eebb4aa533f769790eb3add9a01f5bfb316d1986dd8ae90dcadfec73a4164d8a4b3a62154a3d4b880ce6972474ffd7188ba647703fafcfc89c206807f20633c8c1ccf911783614", @generic="a689076c8f8060c9f751684466d18233798cc54764367fcb2c56aeea31fe48affef3edd4d118a4bf3cdd57b621d528f9c58f9590", @typed={0x8, 0x2, 0x0, 0x0, @uid}, @nested={0x110, 0x121, 0x0, 0x1, [@nested={0x4, 0x20}, @generic="1188201e628e94a1258bea344a9097529f15cb9ab92a2fae222915a02e3a2a73edee5d558e3a264a68fa9b2aa244cfa1a56ba41da54f0756fa1ca8b8b1677b29134c9e6d58050c4ffdfcd2570f238dc88664901ea8b0b2df8f0828f804523745cc4c8d", @generic="3c07094240778a6bdf12e9b2f1b9dc8d135942beecfeeb05a15f22d8f74d3f7244561ec4fc3984065b52867f564f6859f6aa6b6edd195dd27ab0eea4b9eec13a447c1399392c1cb803ed66ed2c0f282c23288f6ed018efc39875a573f4565e4f530b46bfff325c3e0793f46d8329bf1586063bba2b171e9579b673133caf3b6e8651f6d59417618af54823105b2dde9bea27ad1f0f4baa5ff99ecae5245fe11f4f", @nested={0x4, 0x2d}]}, @typed={0x8, 0x64, 0x0, 0x0, @fd}, @nested={0x9e, 0x18, 0x0, 0x1, [@generic="d33a3da134299779684b", @nested={0x4, 0x11e}, @generic="aada79e6ed9ffac8", @generic="36e05b7313776fafb65d041a1e196e601407172dc2b8f4e6cee4d04750ee45c3d55b44b5b02e82c57d194915a27e76462984be13369fd3930d899248076a20ad32469f1cc990606b3212686a2f30ed8069053358f76fc455271884f4baa447e0458fdb175d040fc490b675af846a674110d4fe11a10fff45aecfd6df", @typed={0x8, 0x43, 0x0, 0x0, @uid}]}, @nested={0xaa, 0x123, 0x0, 0x1, [@generic="ea35bc844e975a4d253a051221f5cfe3129b6f9bf3a3f8b804ce46d4702429601060420c13c5a3f94bb1e4a99f4e8bfc08a9319b62dfae0ae7e84f9a918c05a46cc13963af789e051d0f2bb9680d30ce9d8ea67e9c397f092971e278c594fb62fac8f4d0ea10ef47a392ab854394f3188e58fb6635c1e95cf08cd4015cfdb72dd322e7398a23a19d2ccc9a50c83aa32a5ee27bf3fbc0e16611a06e7d6534d65a721d99dd4878"]}]}, @generic="021a9be2a620c89d8aeadcd5b1b971d6968ecc04939fe3167e58b0b087ba0e9789483e536150714a8de9cdcbb2601fd02b48157fd70fc2b143a092cf61ce64b554426b23cb688b9bc7fa4f07afb71e34cada4b889fa6b4acd5a7e21417f9f577575cc87f478c6ec4dc7793b6713999523500607c5ac93ceb9c307a5b3eb35f50346b80d86a87f5872af7103bb7ab03583efa231722f69d0441d0e088e262acf645ed1002fc580539428a7d3db57b72", @generic="41a0666aa50408894550dc37b0b8eee74f39d60dcfb74f4701734bec8ce29978aadcf18bd188fc8ba004f7a7e08fc30cefd93baa558608bfcabed344a22903f98e718a071e71339e40125973c883999f3ddbb64fcfb65089582f3bda9915bd39cc752ebf24f77c5a705ec9f35849ea79811e9c3fc1802f9190f63b4d1ea00f55e45613cf033c5198eded035f90d68fd25d5de528cccd4ad6e134fd3c94c805f046c21e83f0a57b223f059f56dea56e20726bfbbf7e5dbbc4"]}]}]}, 0x698}, 0x1, 0x0, 0x0, 0x64841}, 0x24060050) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r2, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 36m16.043746288s ago: executing program 0 (id=1463): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040)=0xfd87, 0x4) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f00000000c0)=@ethtool_ringparam={0x10, 0x4, 0xffffffd6, 0x10000, 0x80000001, 0xfffffff7, 0x6, 0x4, 0x8003}}) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000002240)={0x6, {{0x2, 0x4e22, @multicast2}}}, 0x84) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000001040)={0x3, {{0x2, 0x0, @multicast1}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r4, 0x0, 0x30, &(0x7f0000000680)=ANY=[@ANYBLOB="0300000002004e33e000000200000000000000000000000000000000000000000000000000a31a2bbb46eb6455000000000000e1ffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000100000002004c23ac14142b0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000006e89d0a2d4d9d086eec3fa358bcbbfb210d1c46e6e1fef021f9d74be9d3f11e7978af0eef4aca42d8ada68051b4ebe28c807bd42d0e34df578578441fa3db2092390e3c3a02dce18408c9989fdf50aad2f55141877f593194e170d51d3a1b0a8c4c6f01af83508e8554f3394cc171e922e92b17a4f4f07745be209c490bce74150810100000058024c6814ff396460ec91ad44f912bd7680081dde41dd845343a7b835bba689954644f4294cc5d56a7c7b05d66096f3b8cacc23ada4a3e1802e90035072883354e7aa5cef1baca447e36acfca05000000dd3e40509bd6b36c30e4df3d076ca2f8ddd4c7c60449472088a6437a422751e27d386ee628044ca5751762b943464f"], 0x10c) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000040)={0x1, 0x3, 0x6000, 0x2000, &(0x7f0000fa3000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_CREATE_DEVICE(r6, 0xc018aec0, &(0x7f00000000c0)={0x1}) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x41) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89001) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="c400000019000100000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000004e2300000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000100000000000000060000000000000000000000000000000800000001200000010000000c00150059073500a0"], 0xc4}, 0x1, 0x0, 0x0, 0x88c0}, 0x0) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x2, 0xf, 0x8, 0x0, 0x10, 0x0, 0x0, 0x25dfdbfe, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x20, @empty}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x2, 0x0, 0x0, 0x0, {0x6, 0x32, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, @in6=@dev={0xfe, 0x80, '\x00', 0x18}}}, @sadb_address={0x3, 0x6, 0x0, 0x20, 0x0, @in={0x2, 0x4e24, @private=0xa010101}}]}, 0x80}}, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x89901) 36m14.874433626s ago: executing program 0 (id=1466): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x1, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000200)=ANY=[@ANYBLOB="401504"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 36m14.821467008s ago: executing program 3 (id=1468): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)={0x674, 0x21, 0x800, 0x70bd28, 0x25dfdbfd, {0x17}, [@typed={0x8, 0x44, 0x0, 0x0, @pid}, @generic="6e3c16cb77f25034e763b9c97073e075bee897c43094cd164a0360c97f4e494640dedf33b5b9e7df3c4037d431dacce392f43291b4eb9fba039e6869c218a9d369b852a6db199d5d6a6919628201255eddb2853e778d43421e28c15a4b469eda6ff91ea166c27b645d1a280071d7103a6d8607cfa231f635c72956296084875285a54c6063ab9caf531ec5cac03f67839cecbcd0e780918dc56540", @typed={0xa, 0x46, 0x0, 0x0, @str='wlan0\x00'}, @typed={0x14, 0xca, 0x0, 0x0, @ipv6=@private2}, @nested={0x599, 0x132, 0x0, 0x1, [@generic="b0436dbcc9e1b7aab3373fe4de5a9d887b5b626603eea4257c6d4175dc40949634027d61b5837c2ca3dfa7cfbbcf8cb09ae7afc5ed7ea522d37a0c5ff23dceecf602cfc11ed24208f31cf6cbe20b7854704ba75d57bc3c7088ee7d4096bff357da828983c3016ae7ffa9c5d4278f5fced3395e9cfd7f682810ef9fc7c099182cee", @nested={0x511, 0x1f, 0x0, 0x1, [@generic="7e5958a7b602c412aa658394649301094fa43409e22f8ec4629e04e343ce8fa4cdf747d50d37b1da4c18042edecf8581f3419ed713e2f25197ab219c191238458bc5649178cc9c18bf6eb2ca060a032038ac30b7bfa615486651bd0a999341a22ddbc663509b0357fab88819df5b45b698a6278639559820721fd7a90eee6b9ec65fc22f823ded6cbc4c21a891fa7c757043b436e65d490f35d4", @typed={0x8, 0x5, 0x0, 0x0, @u32=0x6}, @nested={0x302, 0xe5, 0x0, 0x1, [@generic="06ebdb4a72d56045e5f706fa304f8a1a6c34a891e67c43d24221f8eebb4aa533f769790eb3add9a01f5bfb316d1986dd8ae90dcadfec73a4164d8a4b3a62154a3d4b880ce6972474ffd7188ba647703fafcfc89c206807f20633c8c1ccf911783614", @generic="a689076c8f8060c9f751684466d18233798cc54764367fcb2c56aeea31fe48affef3edd4d118a4bf3cdd57b621d528f9c58f9590", @typed={0x8, 0x2, 0x0, 0x0, @uid}, @nested={0x110, 0x121, 0x0, 0x1, [@nested={0x4, 0x20}, @generic="1188201e628e94a1258bea344a9097529f15cb9ab92a2fae222915a02e3a2a73edee5d558e3a264a68fa9b2aa244cfa1a56ba41da54f0756fa1ca8b8b1677b29134c9e6d58050c4ffdfcd2570f238dc88664901ea8b0b2df8f0828f804523745cc4c8d", @generic="3c07094240778a6bdf12e9b2f1b9dc8d135942beecfeeb05a15f22d8f74d3f7244561ec4fc3984065b52867f564f6859f6aa6b6edd195dd27ab0eea4b9eec13a447c1399392c1cb803ed66ed2c0f282c23288f6ed018efc39875a573f4565e4f530b46bfff325c3e0793f46d8329bf1586063bba2b171e9579b673133caf3b6e8651f6d59417618af54823105b2dde9bea27ad1f0f4baa5ff99ecae5245fe11f4f", @nested={0x4, 0x2d}]}, @typed={0x8, 0x64, 0x0, 0x0, @fd}, @nested={0x9e, 0x18, 0x0, 0x1, [@generic="d33a3da134299779684b", @nested={0x4, 0x11e}, @generic="aada79e6ed9ffac8", @generic="36e05b7313776fafb65d041a1e196e601407172dc2b8f4e6cee4d04750ee45c3d55b44b5b02e82c57d194915a27e76462984be13369fd3930d899248076a20ad32469f1cc990606b3212686a2f30ed8069053358f76fc455271884f4baa447e0458fdb175d040fc490b675af846a674110d4fe11a10fff45aecfd6df", @typed={0x8, 0x43, 0x0, 0x0, @uid}]}, @nested={0xa8, 0x123, 0x0, 0x1, [@generic="ea35bc844e975a4d253a051221f5cfe3129b6f9bf3a3f8b804ce46d4702429601060420c13c5a3f94bb1e4a99f4e8bfc08a9319b62dfae0ae7e84f9a918c05a46cc13963af789e051d0f2bb9680d30ce9d8ea67e9c397f092971e278c594fb62fac8f4d0ea10ef47a392ab854394f3188e58fb6635c1e95cf08cd4015cfdb72dd322e7398a23a19d2ccc9a50c83aa32a5ee27bf3fbc0e16611a06e7d6534d65a721d99dd"]}]}, @generic="021a9be2a620c89d8aeadcd5b1b971d6968ecc04939fe3167e58b0b087ba0e9789483e536150714a8de9cdcbb2601fd02b48157fd70fc2b143a092cf61ce64b554426b23cb688b9bc7fa4f07afb71e34cada4b889fa6b4acd5a7e21417f9f577575cc87f478c6ec4dc7793b6713999523500607c5ac93ceb9c307a5b3eb35f50346b80d86a87f5872af7103bb7ab03583efa231722f69d0441d0e088e262acf645ed1002fc580539428a7d3db57b72", @generic="41a0666aa50408894550dc37b0b8eee74f39d60dcfb74f4701734bec8ce29978aadcf18bd188fc8ba004f7a7e08fc30cefd93baa558608bfcabed344a22903f98e718a071e71339e40125973c883999f3ddbb64fcfb65089582f3bda9915bd39cc752ebf24f77c5a705ec9f35849ea79811e9c3fc1802f9190f63b4d1ea00f55e45613cf033c5198eded035f90d68fd25d5de528cccd4ad6e134fd3c94c805f046c21e83f0a57b223f059f56dea56e20726bfbbf7e5dbbc4"]}]}]}, 0x674}, 0x1, 0x0, 0x0, 0x64841}, 0x24060050) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r2, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r3, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 36m14.684173001s ago: executing program 3 (id=1469): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_open_dev$loop(0x0, 0x1, 0x400000) fchdir(0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x8000, 0xffffffff}, 0x0) r3 = fsopen(&(0x7f00000000c0)='ocfs2_dlmfs\x00', 0x1) r4 = fsmount(r3, 0x0, 0x8) getdents(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000000201010200000000000000000002fefd"], 0x14}, 0x1, 0x0, 0x0, 0x80051}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet_sctp(0x2, 0x1, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e23, @loopback}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e20, @local}, 0x10) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x58}}, 0x20000000) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000007f01f00810000007f00000001000000", @ANYRES32, @ANYBLOB="0000000000000000009994000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_GET_PROG_INFO(0x3, &(0x7f0000000340)={r8, 0x0, 0x0}, 0x10) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dddbfd, {0x0, 0x0, 0x0, r11, {0x0, 0xffff}, {0xffff, 0xffff}, {0x1, 0xd}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newtfilter={0x2c, 0x2c, 0xd27, 0x70bd2d, 0x8000, {0x0, 0x0, 0x0, r11, {0x0, 0xa}, {0x0, 0xc}, {0xe}}, [@TCA_RATE={0x6, 0x5, {0x8, 0x9}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x22044028}, 0x800) 36m14.560411775s ago: executing program 0 (id=1472): r0 = landlock_create_ruleset(&(0x7f0000000000)={0x25, 0x2, 0x1}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) r1 = openat$vcsa(0xffffff9c, &(0x7f0000000080), 0x800402, 0x0) ioctl$EVIOCGBITSW(r1, 0x80404525, &(0x7f0000000240)=""/238) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) setsockopt$sock_timeval(r3, 0x1, 0x15, &(0x7f0000000180)={0x0, 0xea60}, 0x10) r4 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r4, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x100, 0x0) connect$unix(r3, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e) 36m13.438213614s ago: executing program 33 (id=1472): r0 = landlock_create_ruleset(&(0x7f0000000000)={0x25, 0x2, 0x1}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) r1 = openat$vcsa(0xffffff9c, &(0x7f0000000080), 0x800402, 0x0) ioctl$EVIOCGBITSW(r1, 0x80404525, &(0x7f0000000240)=""/238) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) setsockopt$sock_timeval(r3, 0x1, 0x15, &(0x7f0000000180)={0x0, 0xea60}, 0x10) r4 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r4, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x100, 0x0) connect$unix(r3, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e) 36m12.445566687s ago: executing program 3 (id=1477): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040)=0xfd87, 0x4) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f00000000c0)=@ethtool_ringparam={0x10, 0x4, 0xffffffd6, 0x10000, 0x80000001, 0xfffffff7, 0x6, 0x4, 0x8003}}) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000002240)={0x6, {{0x2, 0x4e22, @multicast2}}}, 0x84) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000001040)={0x3, {{0x2, 0x0, @multicast1}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r4, 0x0, 0x30, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x10c) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000040)={0x1, 0x3, 0x6000, 0x2000, &(0x7f0000fa3000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_CREATE_DEVICE(r6, 0xc018aec0, &(0x7f00000000c0)={0x1}) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x41) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89001) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="c400000019000100000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000004e2300000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000100000000000000060000000000000000000000000000000800000001200000010000000c00150059073500a0"], 0xc4}, 0x1, 0x0, 0x0, 0x88c0}, 0x0) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x2, 0xf, 0x8, 0x0, 0x10, 0x0, 0x0, 0x25dfdbfe, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x20, @empty}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x2, 0x0, 0x0, 0x0, {0x6, 0x32, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, @in6=@dev={0xfe, 0x80, '\x00', 0x18}}}, @sadb_address={0x3, 0x6, 0x0, 0x20, 0x0, @in={0x2, 0x4e24, @private=0xa010101}}]}, 0x80}}, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x89901) 36m10.454174989s ago: executing program 3 (id=1482): openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) pipe2$9p(&(0x7f00000027c0)={0xffffffffffffffff}, 0x0) setrlimit(0x40000000000008, &(0x7f0000000080)={0x0, 0x6}) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(r1, &(0x7f0000001300)=[{{&(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f0000001440)=[@ip_retopts={{0x10}}], 0x10}}], 0x1, 0x4008804) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) getdents64(r3, 0x0, 0x0) r4 = openat$vcsa(0xffffff9c, &(0x7f0000000040), 0x80000, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r4, 0x4038ae7a, &(0x7f0000000000)={0x80, 0x40000194, 0x0, 0x0}) close_range(r0, 0xffffffffffffffff, 0x0) 36m9.839729561s ago: executing program 3 (id=1484): socket$packet(0x11, 0x3, 0x300) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffdffffffffff, 0xfa11, 0xffffffff}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x40505330, &(0x7f0000000400)={0x800100, 0xffffffff, 0x22, 0xe1d9, 0x1101, 0xff}) r2 = syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0x82002) ioctl$CEC_S_MODE(r2, 0x40046109, &(0x7f0000000140)=0x12) r3 = syz_open_dev$sg(&(0x7f0000000280), 0x5dc, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00\x00']) sched_setscheduler(0x0, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000680), 0x8, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f0000000280)=0x2) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r4, 0xc0505350, &(0x7f0000000700)={{0x0, 0x1}, {0xf, 0x2f}, 0x40}) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 36m8.688759609s ago: executing program 34 (id=1484): socket$packet(0x11, 0x3, 0x300) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffdffffffffff, 0xfa11, 0xffffffff}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x40505330, &(0x7f0000000400)={0x800100, 0xffffffff, 0x22, 0xe1d9, 0x1101, 0xff}) r2 = syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0x82002) ioctl$CEC_S_MODE(r2, 0x40046109, &(0x7f0000000140)=0x12) r3 = syz_open_dev$sg(&(0x7f0000000280), 0x5dc, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00\x00']) sched_setscheduler(0x0, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000680), 0x8, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f0000000280)=0x2) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r4, 0xc0505350, &(0x7f0000000700)={{0x0, 0x1}, {0xf, 0x2f}, 0x40}) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 26m37.848794255s ago: executing program 4 (id=3440): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet(0x10, 0x3, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x228000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) sched_setattr(0xffffffffffffffff, &(0x7f0000000180)={0x38, 0x5, 0x8, 0x8005, 0x0, 0x9, 0xfffffffffffffffd, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xc) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001140)=@base={0x5, 0x10001, 0x7fff, 0x202, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000001780), 0x8, r6, 0x0, 0x20000000}, 0x38) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="3120000100", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) 26m35.697659313s ago: executing program 4 (id=3444): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x1002}, 0x4) getsockopt$packet_int(r1, 0x107, 0x15, 0x0, &(0x7f0000000100)) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="4dc07f947163300c", 0x8) accept4(r0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.events\x00', 0x275a, 0x0) socket$can_raw(0x1d, 0x3, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00'}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4048810}, 0x0) 26m35.233829794s ago: executing program 4 (id=3447): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0x7, 0x0, 0x0) openat$kvm(0xffffff9c, &(0x7f0000000280), 0x2000, 0x0) syz_usb_connect$uac1(0x5, 0x9c, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001000000406b1d010140000102030109028a000301ffa0060904000000010100000a240100000202010207240504062e7d0904010000000000000000010101010200000c2402ec79030420be11d1d109050109758b0620010725010006efff0904020000010200000904020101010200001124020306040803000c0000000000000007240116050210090506090002"], 0x0) syz_usb_connect$printer(0x3, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0xff, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x8, 0x80, 0x9, [{{0x9, 0x4, 0x0, 0x81, 0x2, 0x7, 0x1, 0x3, 0xd6, "", {{{0x9, 0x5, 0x1, 0x2, 0x3ff, 0xe, 0x14, 0x2}}}}}]}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x310, 0x10, 0xf, 0x33, 0x20, 0x1}, 0x15c, &(0x7f00000002c0)={0x5, 0xf, 0x15c, 0x4, [@generic={0x103, 0x10, 0x2, "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"}, @generic={0x39, 0x10, 0x9, "d61e3bf566cf17b69eb68d70cde0cf1401058ee52bfcd101fecefc7fd59c4bb320004fafe763f8e9033d03d0cb25f83ffd64c6062ee5"}, @ext_cap={0x7, 0x10, 0x2, 0x14, 0x7, 0x6, 0x9}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "47435aeca01b5b944f97b54464aee1b0"}]}, 0x4, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x340a}}, {0xec, &(0x7f0000000180)=@string={0xec, 0x3, "a8ba4136695a8a29c01b6be9499c060ef3e8b5c47da48612eed9bae1e5afd5fbb539ca0b94e82ffff6e37982516ec6595c97a78d5868c6c599661fbf43c51633b058f07ee1aa417438175f608eb26a7e19d63ab39ffb6d148d165fa055a4fa5ad0415544a1af5fa608c87cfb0fa176c863b941404f3d349a2308fd911fd4faab6bde51bb229220154d878aa7da15a2b78793d4c94c01b1c157bec14e211549c189e5acb3cf233603cc241e4a42fd5d08c4430b6cb965a5f932f9370568d7a1ec292f28edac722fc597cb9093c03dfde603fc838a511ddcde1fd739f8bac035218e5187b6d8a2691954f4"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x3409}}, {0x24, &(0x7f0000000480)=@string={0x24, 0x3, "0e30396094e296b80f26a3178618153e9bdf2509f2981eee6b99a5e3bce345bcdf22"}}]}) 26m33.322565178s ago: executing program 4 (id=3451): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = openat$nullb(0xffffffffffffff9c, 0x0, 0x400000000a882, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r2, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x35, &(0x7f0000000000)=0x8, 0x4) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5393, &(0x7f0000000000)) r3 = openat$dlm_control(0xffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000080)=@x86={0x0, 0xfb, 0xa, 0x0, 0x4, 0x1, 0xfe, 0x9, 0xc, 0x0, 0x4, 0x2, 0x0, 0x10001, 0xfffffffe, 0x6, 0x7, 0x3, 0x1, '\x00', 0xfb, 0x9}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000001d00070f000000000000000007000000", @ANYRES32, @ANYBLOB='@'], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) unshare(0x28000600) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={@cgroup, 0xffffffffffffffff, 0x1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x42, &(0x7f0000000040), 0x3b) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x2, 0x4, 0x2, 0xc, 0x1400}, 0x50) prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000340)={'ip_vti0\x00', 0x0, 0x40, 0x10, 0x1, 0x4, {{0x1b, 0x4, 0x1, 0x25, 0x6c, 0x68, 0x0, 0x0, 0x4, 0x0, @rand_addr=0x64010100, @broadcast, {[@ra={0x94, 0x4}, @rr={0x7, 0x13, 0x48, [@broadcast, @empty, @multicast1, @dev={0xac, 0x14, 0x14, 0x44}]}, @timestamp_addr={0x44, 0xc, 0xac, 0x1, 0x6, [{@broadcast, 0x800}]}, @timestamp_prespec={0x44, 0x34, 0x81, 0x3, 0x0, [{@multicast1, 0x80000000}, {@local, 0x2af}, {@local, 0x2}, {@local}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x6}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8000}]}]}}}}}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x4, 0x1, 0x2, 0x0, 0x1, 0x0, '\x00', r5}, 0x50) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0xffffffffffffffff, 0x2, 0x8}, 0xc) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000180)={{'fd', 0x3d, r8}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) r9 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r9, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r10 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r10, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 26m32.237230028s ago: executing program 4 (id=3452): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) unshare(0x2040400) syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000180)=ANY=[], 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000002240), 0x2) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(r4, 0x7a98, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x3459, &(0x7f0000000240)={0x0, 0xfe45, 0x80, 0x3, 0x1fc, 0x0, r4}, &(0x7f00000001c0), &(0x7f0000000300)) r5 = syz_io_uring_setup(0x81d, &(0x7f0000000400)={0x0, 0xc6ed, 0x0, 0xfdffffff, 0x3d4}, &(0x7f00000003c0)=0x0, &(0x7f0000000140)=0x0) epoll_create1(0x0) syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r3, 0x0, 0x0, 0x0, 0x80000}) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r10, 0x541b, 0x0) sendmsg$nl_route(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newlink={0x4c, 0x10, 0x401, 0x4002, 0x0, {0x0, 0x0, 0xffff, 0x0, 0x1d188}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x8, 0x2, 0x0, 0x1, [@IFLA_VLAN_EGRESS_QOS={0x4}]}}}, @IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}]}, 0x4c}}, 0x0) io_uring_enter(r5, 0x47f5, 0x0, 0x0, 0x0, 0x0) 26m30.47997359s ago: executing program 4 (id=3460): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') preadv(r0, &(0x7f00000001c0)=[{&(0x7f0000000340)=""/127, 0x7f}, {&(0x7f0000000bc0)=""/84, 0x54}], 0x2, 0x6, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)={0x30, 0x40, 0x1, 0xfffffffe, 0x25dfdbff, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0xc, 0x2, 0x0, 0x1, [@nested={0x8, 0x19, 0x0, 0x1, [@typed={0x4, 0x1}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0x800c000) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, &(0x7f0000000000)=@generic={0x0, 0x5, 0xe4}) ioctl$KVM_CAP_HYPERV_SEND_IPI(r0, 0x4068aea3, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfc, 0x40000000}, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) r4 = openat$vim2m(0xffffff9c, &(0x7f0000000b00), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r4, 0xc0f8565c, &(0x7f0000000000)={0x0, 0xbd5, 0x2, {0x2, @raw_data="f91fd2868ba3d9189024fc40809db9e19479c0b5fce2c721330d5771dbf9dbfa9e2ad24622489141b4803cfeb0b70909e75715a13fada32fef53473eb9ce014fbe3929ea41fdeb0ff177dfb9d3227f213a6451b667d35b03b25618d20cea1f072990b86d463a0de7513744a2bb3bf4fb6049e30f7c533837beba9566c9fd8721c48fad424a5fb17bc1419fb85e5e7dce382ba5a1ce182b419becd67c18f0ba055b8d72225df5a5e7917f8a87a52b8c2516745c462e944b0c22a7e71ecf492a0ef916598abba0e732"}}) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc04c560f, &(0x7f0000000180)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x400, 0x7, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x7, 0x0, "5ce91551"}, 0x0, 0x1, {0x0}, 0x2, 0x20000000}) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r5, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x4e21, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3}], 0x1c) r6 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/card0/oss_mixer\x00', 0x2, 0x0) write$proc_mixer(r6, &(0x7f0000000340)=ANY=[@ANYBLOB='LINE \'Li'], 0x8c) close(r6) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0xffffffffffffff15, &(0x7f00000025c0)=[{&(0x7f0000002600)={0x20, 0x5e, 0x1, 0x4, 0x0, "", [@typed={0x4}, @typed={0xc, 0x0, 0x0, 0x0, @u64=0x8}]}, 0x20}], 0x1, 0x0, 0x0, 0x4040040}, 0x0) r7 = syz_clone(0x8280, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) r8 = syz_open_procfs(0x0, &(0x7f0000000240)='net/dev_mcast\x00') read$FUSE(r8, &(0x7f0000000580)={0x2020}, 0x2020) pread64(r8, &(0x7f0000000480)=""/209, 0xd1, 0x2) read$FUSE(r8, &(0x7f0000002c40)={0x2020}, 0x2065) r9 = getpgid(0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)={0x48, r3, 0x400, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x20}, @void, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PID={0x8, 0x52, r7}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x16}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r8}, @NL80211_ATTR_PID={0x8, 0x52, r9}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) setsockopt(r5, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)={0x20, r3, 0xacf5e67dd0b583a1, 0x0, 0x0, {{0x5}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_FTM_RESPONDER={0x4}]]}, 0x20}, 0x1, 0x0, 0x0, 0x4800}, 0x4048000) sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x28, r3, 0x10, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x4f}, @void, @val={0xc, 0x99, {0xb, 0x57}}}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4084}, 0x80c4) 26m29.723022992s ago: executing program 35 (id=3460): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') preadv(r0, &(0x7f00000001c0)=[{&(0x7f0000000340)=""/127, 0x7f}, {&(0x7f0000000bc0)=""/84, 0x54}], 0x2, 0x6, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)={0x30, 0x40, 0x1, 0xfffffffe, 0x25dfdbff, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0xc, 0x2, 0x0, 0x1, [@nested={0x8, 0x19, 0x0, 0x1, [@typed={0x4, 0x1}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0x800c000) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, &(0x7f0000000000)=@generic={0x0, 0x5, 0xe4}) ioctl$KVM_CAP_HYPERV_SEND_IPI(r0, 0x4068aea3, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfc, 0x40000000}, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) r4 = openat$vim2m(0xffffff9c, &(0x7f0000000b00), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r4, 0xc0f8565c, &(0x7f0000000000)={0x0, 0xbd5, 0x2, {0x2, @raw_data="f91fd2868ba3d9189024fc40809db9e19479c0b5fce2c721330d5771dbf9dbfa9e2ad24622489141b4803cfeb0b70909e75715a13fada32fef53473eb9ce014fbe3929ea41fdeb0ff177dfb9d3227f213a6451b667d35b03b25618d20cea1f072990b86d463a0de7513744a2bb3bf4fb6049e30f7c533837beba9566c9fd8721c48fad424a5fb17bc1419fb85e5e7dce382ba5a1ce182b419becd67c18f0ba055b8d72225df5a5e7917f8a87a52b8c2516745c462e944b0c22a7e71ecf492a0ef916598abba0e732"}}) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc04c560f, &(0x7f0000000180)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x400, 0x7, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x7, 0x0, "5ce91551"}, 0x0, 0x1, {0x0}, 0x2, 0x20000000}) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r5, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x4e21, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3}], 0x1c) r6 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/card0/oss_mixer\x00', 0x2, 0x0) write$proc_mixer(r6, &(0x7f0000000340)=ANY=[@ANYBLOB='LINE \'Li'], 0x8c) close(r6) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0xffffffffffffff15, &(0x7f00000025c0)=[{&(0x7f0000002600)={0x20, 0x5e, 0x1, 0x4, 0x0, "", [@typed={0x4}, @typed={0xc, 0x0, 0x0, 0x0, @u64=0x8}]}, 0x20}], 0x1, 0x0, 0x0, 0x4040040}, 0x0) r7 = syz_clone(0x8280, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) r8 = syz_open_procfs(0x0, &(0x7f0000000240)='net/dev_mcast\x00') read$FUSE(r8, &(0x7f0000000580)={0x2020}, 0x2020) pread64(r8, &(0x7f0000000480)=""/209, 0xd1, 0x2) read$FUSE(r8, &(0x7f0000002c40)={0x2020}, 0x2065) r9 = getpgid(0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)={0x48, r3, 0x400, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x20}, @void, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PID={0x8, 0x52, r7}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x16}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r8}, @NL80211_ATTR_PID={0x8, 0x52, r9}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) setsockopt(r5, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)={0x20, r3, 0xacf5e67dd0b583a1, 0x0, 0x0, {{0x5}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_FTM_RESPONDER={0x4}]]}, 0x20}, 0x1, 0x0, 0x0, 0x4800}, 0x4048000) sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x28, r3, 0x10, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x4f}, @void, @val={0xc, 0x99, {0xb, 0x57}}}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4084}, 0x80c4) 16m52.527323472s ago: executing program 7 (id=5831): close(0xffffffffffffffff) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8, @ANYRES16=r0], 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) execve(0x0, 0x0, 0x0) 16m51.008998547s ago: executing program 7 (id=5837): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x4c) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d05c164a534308", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000004c00)=[{{0x0, 0x0, &(0x7f0000000240)}, 0x2ca998c3}], 0x4000032, 0x40000021, 0x0) recvmsg$can_raw(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000340)=""/197, 0xc5}], 0x1}, 0x1) r2 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x101040) ioctl$CEC_ADAP_G_CAPS(r2, 0xc04c6100, &(0x7f00000000c0)) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={0xffffffffffffffff, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000280)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f0000000580)=[0x0, 0x0], &(0x7f00000005c0)=[0x0], 0x0, 0x4f, &(0x7f0000000600)=[{}], 0x8, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0x1a, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x5b5d}, [@IFLA_AF_SPEC={0x8, 0x1a, 0x0, 0x1, [@AF_MPLS={0x4}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x14090}, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="6e65772064656661756c74207472757374a2643a73797a20303030303030303030303000003030303430393600c009b53a8f86be29f4b77e5178345c9cf75895714417c8bc927ddfecf7bcbfc7ce"], 0x2d, 0xfffffffffffffff9) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_update={'update ', 'default', 0x20, 'trusted:', 'tr:\x00\x00\x00\x00\x00'}, 0x20, 0xfffffffffffffffd) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0xc0286687, &(0x7f0000000040)={0x2, 0x2, 0x9a, &(0x7f0000000440)=""/154}) recvfrom$rxrpc(r1, 0x0, 0x0, 0x10000, 0x0, 0x0) 16m44.074482941s ago: executing program 7 (id=5862): pread64(0xffffffffffffffff, &(0x7f00000000c0)=""/161, 0xa1, 0x6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) openat$rfkill(0xffffffffffffff9c, 0x0, 0x202cc1, 0x0) dup(0xffffffffffffffff) io_uring_enter(0xffffffffffffffff, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0) ioctl$CEC_DQEVENT(r1, 0xc0506107, 0x0) ioctl$CEC_DQEVENT(r1, 0xc0506107, 0x0) 16m42.723740001s ago: executing program 7 (id=5869): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000700)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000000040)={0x3, [0xc000, 0x7, 0x6]}, 0xa) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 16m42.660143823s ago: executing program 7 (id=5870): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) r4 = openat$vicodec0(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r4, 0xc0185648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x98f90b, 0x20, '\x00', @p_u32=&(0x7f00000002c0)=0x7b}}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000980)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r3, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 16m42.444704996s ago: executing program 7 (id=5872): socket$unix(0x1, 0x1, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x802) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/4\x00') read$FUSE(r1, &(0x7f0000000a00)={0x2020}, 0x2020) 16m42.16631217s ago: executing program 36 (id=5872): socket$unix(0x1, 0x1, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x802) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/4\x00') read$FUSE(r1, &(0x7f0000000a00)={0x2020}, 0x2020) 20.273390791s ago: executing program 5 (id=9135): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newsa={0x13c, 0x10, 0x413, 0x0, 0x25dfdbfb, {{@in6=@dev, @in=@remote}, {@in=@private=0xa010100, 0x0, 0x32}, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, {0x0, 0x400, 0x0, 0x0, 0x0, 0x40000000000000}, {0x0, 0xb, 0x0, 0x8000}, {}, 0x0, 0x1000000, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4106-gcm-aesni\x00'}, 0x0, 0x40}}]}, 0x13c}}, 0x4000080) (async) syz_usb_connect(0x5, 0x3e, &(0x7f0000000040)=ANY=[@ANYBLOB="120141349fc32001c8553d2099040c5049330102030109022c0001000010000904a9020146662700092402020600040000082402010701060f090582020002080110"], 0x0) 17.972576476s ago: executing program 8 (id=9145): syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0009030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r0, &(0x7f0000000440)=""/183, 0xb7) r1 = openat$btrfs_control(0xffffff9c, &(0x7f00000001c0), 0x8000, 0x0) syz_usb_disconnect(0xffffffffffffffff) r2 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fffffff, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r2, 0xc02c564a, &(0x7f0000000000)={0x4, 0x30314442, 0x3, @discrete={0x40}}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x800000, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000300)="b9400a0000b80ad8bb5bbadd214c3f0f30b9800000c00f3235008000000f3066baa100b010ee0f7815338f000066ba4200b8bf00c0feef0f21fe0f001d8a92251e0f0132aa66ba200066b8003066ef", 0x4f}], 0x1, 0x50, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r3 = syz_io_uring_setup(0x10d, &(0x7f00000009c0)={0x0, 0x6ab6, 0x100}, &(0x7f0000001200)=0x0, &(0x7f0000000200)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r3, 0x47f9, 0x1, 0x1, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = syz_open_dev$media(&(0x7f0000000040), 0x2, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r6, 0xc0487c04, &(0x7f0000000540)={0x0, 0x3, 0x0, &(0x7f00000009c0)=[{}, {0x80000000}, {0x80000000}], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$MEDIA_IOC_SETUP_LINK(r6, 0xc0347c03, &(0x7f00000002c0)={{r8, 0x0, 0x0, [0xffffff80, 0x2c4]}, {r7, 0x0, 0x1, [0x4, 0x3ff]}, 0x0, [0x1000, 0x8]}) syz_usb_connect(0x0, 0x24, &(0x7f0000000240)=ANY=[@ANYBLOB="120100002ba1ef40ac0545023a0a0101f70109021200010400000009041c0000034a0200131d00b95a99411875d39df0e072"], 0x0) r9 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r9}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x77359400}, {0x77359400}}, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80082) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fgetxattr(r5, &(0x7f0000000140)=@known='system.sockprotoname\x00', &(0x7f0000000780)=""/213, 0xd5) sendmmsg$unix(r11, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r10, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 17.004034528s ago: executing program 5 (id=9148): syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="040ffa860101045d"], 0x7) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/class/thermal', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f0000000040)=ANY=[], 0x8) getsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000003280)=""/76, &(0x7f00000002c0)=0x4c) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_io_uring_setup(0x495, &(0x7f0000000400)={0x0, 0x7079, 0x0, 0x7, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) socket$nl_route(0x10, 0x3, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r2, 0x4, 0x0}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = dup(r6) socketpair$unix(0x1, 0x1, 0x0, 0x0) write$UHID_INPUT(r7, &(0x7f0000001040)={0xd, {"a2e3ad21ed6b0af99cfbf4c007f70eb4d04fe7ff7fc6e5539b0872fc8b546a1b4d09940f08900c878f0e1ac6e7049b4cb4956c409b3c2a0867f3988f7ef319520100ffe8d178708c523c921b1b0f5a0a169b50d336cd3b78130daa61d8f809ea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f309f4cff7738596ecae8707ce065cd5b91cd0ae193973735b36d5b1b63e91c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecd03aded6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca5b6bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27afc953854a642c57519544ae15a7e454dea05918b4124351601611c8f11baa500a3621c56cea8d20ff911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a60560a22f1fca567e65d5e880572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5120000008213b704c7fb082ff27590678ef9f190bae979babc7041d860420c5664ba7921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202fd28f28381aab144a5d429a04a689b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2f05dd3318271a1f5f8528f227e79c1388dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eefc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44060bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a7288afe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f48fe4eae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf02b98a269b891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efedfd71af9444e197f47e866101496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615f7084a607a7eceb6243378e0610060f02cca4051c2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c4e15a7b6eb65ca8104e1b4da1fbb77ab2fc043aead87c32ab875ee7c2e7b7019c902cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad948741b2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd73643de50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c1023bf70cc77737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73c497579773767075428067e7f16f4dde374f8211fef42cb468e623daf60b3569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d3414442e863a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae44369ddb4581c55925d0f6f1ba471eba281f259152f85a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e05130935e00785ec27e923911fab964c271556527697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9ddbfb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e7027132f2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5336651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee29165895ac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463181f4b87c10772d2b13f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76d57227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f84fad6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b3110b932a4d02da711b757fe43c06d21e35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc238a081ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cb0b3e35cb80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c60edddab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec014508e5247d33ae6c962d35603ff8454c16f8342856935125102bb784ed714887071f3d998efdd9923c954ab6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee658e4cb5e930ed624806c43a006dc9336d07c2b8081c128ad2706f48261f7897084c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da3932ba5c04c24a560ad80a3ce654578376e599aff3565b1d531f30912b99e6619ebe93cc0b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e6491953264d2700c838fa2c7b34252600c9654e502dcea39cb6bc3eb69992e234b4ca7db2f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ff1aa70826ad01a9b03c37b0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1010}}, 0x1b7) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="48000000100001040000000000000000000000008397fadbad58d693f999731dd15885ffd4aacc540ef33bde994914043d619a5c501f16e37854be1a05a022979ee9f325ecc69b144c3c318cba16925906da1a70baf27f9c86a68635f107a141f1d8c1c78292ef8a336245f6824e05b58fd94358af8ca233bf548e45a31543dfff97508d338e1e1fc2c62cc1387e57e2beef9cd76ee43fff1980b2935d12c3a79ac6767c3e5a91e8d644e65547f62589b3da941b461dfa1fbb5a95f0e07a3bb72c4866d700"/207, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e640000000018000280140008800800030001"], 0x48}}, 0x0) sendmmsg$inet(r8, &(0x7f0000000440), 0x0, 0x0) mkdirat(r0, &(0x7f0000000c00)='./file0\x00', 0x408) 15.587473644s ago: executing program 5 (id=9151): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)=ANY=[@ANYBLOB="380000000202050000000000000000000200000a240002801400018008000100ffffffff080002000a0101020c0002"], 0x38}, 0x1, 0x0, 0x0, 0xce5fca8af66a7fb1}, 0x8000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8004, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_X86_SETUP_MCE(r3, 0x4008ae9c, &(0x7f0000000640)={0x10, 0x0, 0x4}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000180)={0x1, 0x0, [{0x17a, 0x0, 0x7fffffff}]}) ioctl$KVM_X86_SET_MCE(r3, 0x4040ae9e, &(0x7f00000002c0)={0xed80000000000000, 0xeeef0000, 0xfffffffffffffffd, 0x0, 0x2}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r5, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x34, r6, 0x303, 0x0, 0x25dfdbfd, {0x3d}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x880}, 0x4000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_procfs$pagemap(r4, &(0x7f00000000c0)) connect$unix(r7, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x4000) r9 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000700), 0x22000, 0x0) r10 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPIOCSFLAGS(r10, 0x40047459, &(0x7f00000001c0)=0x400000) ioctl$SOUND_MIXER_WRITE_VOLUME(r9, 0xc0040d07, &(0x7f0000000040)=0x121) 13.859821109s ago: executing program 5 (id=9157): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x41) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89001) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84000, 0x0) r2 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=@newqdisc={0x68, 0x14, 0xf0b, 0x4, 0x0, {0x2, 0x0, 0x0, 0x0, {0xa}, {0xb, 0x3}}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0xec, 0x1fc, 0x80000a, 0x0, 0x1, 0x7e}}, {0x4}}, {{0x1c, 0x1, {0x8, 0x7, 0x5, 0x2, 0x1, 0x6, 0x7}}, {0x4}}]}]}, 0x68}}, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) open_tree(r3, &(0x7f0000000100)='./file0\x00', 0x40001) 13.606815364s ago: executing program 2 (id=9160): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000100)=0x80000) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000140)={@local}) (async) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, &(0x7f0000000080)={&(0x7f00000006c0)={{@host, 0x64}, {}, 0x400, "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"}, 0x418, 0x7fffffff}) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="20000009130a010800fcffff16000000020000070900010073797a00"], 0x20}, 0x1, 0x0, 0x0, 0xb6f46e86ab0a1d9}, 0x48096) (async) readahead(r0, 0x7, 0x9) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000002980)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x140, 0x9, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x5}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @masq={{0x9}, @void}}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0xe}, @NFTA_SET_USERDATA={0xec, 0xd, 0x1, 0x0, "f5a6c3928974645c00403254d1fb4139aec25e8345f8bc807b63f23b156d7d3372613188caa5a8b3e00717c55abeca01c74c1a1d8dc40f03bce3e3b2bdf690e46e67e5d8e66ff2c06808c90734f10a0d7c90ef3dadb06536422c6a87b5ec037b042fd9dde74c63c1391e0976b40e31973e357189557a4fece18ed0c0b5535f2a90319133d2a63a4046d67423785b2666b4563037f8642204d71f3d0dd200aec786b3c6f9b4e6aa5bdcb2914082a981189d4a1b1fe4585eb8ab440064089941d8d1fa088314af4dbdf1dc1e9b981e546b4b11647e8daa27b7f45093f576284c3bd75bb0b714d2651f"}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @objref={{0xb}, @void}}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELOBJ={0x20, 0x14, 0xa, 0x201, 0x0, 0x0, {0x5a94e63f1a38f4f9, 0x0, 0x6}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWSETELEM={0xed0, 0xc, 0xa, 0x0, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x90c, 0x3, 0x0, 0x1, [{0xac, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x88, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x81, 0x1, "5af5eb5fc31b1b1a534a88207ae47b86989cb6f41b30d193503c12c09616a883d4f62d71dcba999aa2be1e15835d7feaf928258fda826b199faa2d8e3af7c33550f040f1b677fcaf480f89c059dd2c29a86a9ae89cbd2f34a72779d57b7baca8f6b1cbf63d382b530d5ca880931b2fb57c4b670b03db51d4a392eb518a"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_SET_ELEM_EXPRESSIONS={0x14, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @dynset={{0xb}, @void}}]}]}, {0x78, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x28, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x23, 0x1, "c57f24f90e5afee158ec8081c098f2c2fe65e3f0f56bab39d0c5912fbdbddd"}]}, @NFTA_SET_ELEM_EXPR={0x4c, 0x7, 0x0, 0x1, @flow_offload={{0x11}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}}}]}, {0x340, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x3c, 0x6, 0x1, 0x0, "cd83f4721a980098c6644a8f75b872c3e336fe1de268cf3d24e562c6d36280c8cac25e8964de5b1a565380049c964db5597c2e838d1f5280"}, @NFTA_SET_ELEM_DATA={0xc0, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VALUE={0xb8, 0x1, "274004346984a236e1df78b684aca3770ba87f8c86ab992932027ec5876ca069f022ab6220cf515b5fd7ce54b0b5d7ca78f2b5f8a59d356145a285865c9405880881aea323c9355c0172d7d0003ac8925981e3ecf2acaa796e769e847597769f1a6aa12ccac3238b2c8b91c59708a92bdc17219c40ce0179803cd1e4a6ca234965804b757d9553430e1b752a2fe3989ed9ac564fdeccf1112777e98254235e8255825a5271317635aa3fca26dfaf846d81058a24"}]}, @NFTA_SET_ELEM_USERDATA={0x4e, 0x6, 0x1, 0x0, "3339f9b9b001dd94d2a12a268ca7861774d61a5979a6c1aafb67e83edac96c601616d7774648f28c542b702007564dc689e55d99a5a32720ed8dfe71faf9c8baf43ade12978ff054be3d"}, @NFTA_SET_ELEM_DATA={0x1f0, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xd4, 0x1, "9a051e49e3ef59d63fa7c29b98bbc61d8fd700ef09e1a08489f51e99dfdab6288a6a0627e8b86b08507a079fe701f1e98b0f095d7b7a9362d3225c1f20fe53249e8cde2d8e1cf25aebdcf443eaa0e5f6219379a722429cea6b24ed9b33bea7ff5f7347ce55732dbe74c849c1fa3f2f22015793cd453780cd70be74fc38b326cbcaf89b7b2afae0bb4e12f6c6ffd37683ef64f0a5f443ca69c4a19bcc584f980c0aae646dd3ac6ee84ed278e05a8a9b4c2e138d3fe96f37c4298621cc7b659e8e38db129d815f556b93ed24f28b770ce0"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0x7d, 0x1, "ef8d17f09ea01f0052bb6ccfede9ea7508d32897210bd6679da7ce8c95421cfa76d10aa815b750386b7a98c66ff644d0913d3c2e4d789cbe445f56e22d26e3f701c765d005d351e2519fbc38e063261164cfefb376abda2f30f7379a74e09810e803b678634fafce0eebe9b800fa6ac7969eae030e83508f32"}, @NFTA_DATA_VALUE={0x1b, 0x1, "54d52315e68cd8a2090b28018f302d326791a3de07f296"}]}]}, {0x134, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_KEY={0x128, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0xe9, 0x1, "a71a124d29b8a3bef017b0fe55010fc416893452c39494b4ca1e0a4d8084eca4380c06927bfc002a35b6aba6c79f9029e1f340f5c40c82ca4fbefcb2022733bf2008af1f069de104fb68bb95b71f15cbb2ffdc6ce8cc1565cfe462dabb2ca62bdb36b942be2269cd97e7bd86637e7a7324ee89275dceff59cf0cce4f27bd7a2fa25db6ab62bda1934f1826b8cff61df4058eb8597674f7a27bbd6a78fca9fe7b891290f1777dd016284ca7054a7c7e974cd692c531cbfa8bb72aafe9b65603ee42882a4f436981425ee1477884807829bf611e51e5624b6110220b47484090f7cd9a4a3683"}]}]}, {0x370, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x74, 0x7, 0x0, 0x1, @inner={{0xa}, @val={0x64, 0x2, 0x0, 0x1, [@NFTA_INNER_EXPR={0x1c, 0x5, 0x0, 0x1, @meta={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x3}]}}}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x54}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_INNER_EXPR={0x14, 0x5, 0x0, 0x1, @immediate={{0xe}, @void}}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x40}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x11}]}}}, @NFTA_SET_ELEM_EXPRESSIONS={0x2f8, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @limit={{0xa}, @void}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @void}}, {0x2ac, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x298, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0xb8, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x83, 0x1, "b8186559c13c6f1f2f896e9e54284fbb4588e0b7ebb8f0996843dae0f5bd175a74d2de8d1cacd99c5fd036080f722957dc5f5aa7dd2694908533e67a239e2fdc7969461559aac8344f8714a9191f4c5029e2ffbf261acb99cfc3cc6ffed0409bb79823720add92318d2d671c0abd32728573d486dc3063dfc9a50b7a26ae80"}]}, @NFTA_IMMEDIATE_DATA={0x1d4, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0x2b, 0x1, "7855b6140199be71e315a2a5df8838555aa85833f2520fd856e3f483cd51391f7c2716a5577957"}, @NFTA_DATA_VALUE={0xc7, 0x1, "1a2a1a0226234ff76af857aafa0c0bd751a9d0df4c6a20ac6563c085f0a77cd10f0555a0fbb7ad60c06f878283931293c629aaa6178ebd46208790f0e9ce84b48020ef795b85ebe1884b0a3df46520156d4391a6e496c5437a9422b3e080270bb99c14802b530f84bec0306c4028b0ac6c28f604e40ec028919c26865cd06fc9826dce29a1e6285416cc02909444f2a49f6a3823c3ca1459d65c60754d10b2dfe4ca77545a11c9da03f9e23b882dfd3d9d846f938767ce0c2e36c96a18019f6a1362a4"}, @NFTA_DATA_VALUE={0x1f, 0x1, "8065e6a20c25265577ed1af976e1218f449f9c420a9362cd5106b7"}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0xfffffffc}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0x22, 0x1, "8d3d0476dfad60222a5c0cb024fdfeb485d4fdd1ff0d38229c97683d66c7"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x15}]}}}, {0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}, {0x1c, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0x4}]}}}]}]}]}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x550, 0x3, 0x0, 0x1, [{0x44, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x80000001}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x8}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xfffffffffffffb27}]}, {0x508, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x18, 0x7, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x1}]}}}, @NFTA_SET_ELEM_KEY_END={0x2b4, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x40, 0x1, "cd397d91ebba09d1389e6eebe97136de3bcaddfe211918848de85a80b6b40958f051c35d2be1c683da895bbb1490540c1e685a75cb1bc6aa81ed29ea"}, @NFTA_DATA_VALUE={0xd4, 0x1, "a73d19ab8fa0d9e96868ad577a43055484320a7870804de9880f31f3f2b10be1ae9dfebcd4c717f6074eb630e0bf50461f2a6cd2e28bc969f512bd05c334b2f7e2fda8e9b76bee3a15ed3207c0827087835c7efaf9f7cd9c2c8282a3a4003da0c1137fac344411f881db808e13e4352c51acd831c9b65bed524d96ae5386b2287b8dc434f629708e8f1ea05583c7230f0af20363efe9d987804c2c88aab265a8552ec26d2222c5082b43247fcfc7630763f139d7704902149237ce87b05d518e0109de5b6a858f5b3de3145a79585e5d"}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VALUE={0x6e, 0x1, "acdc19b3e5392dc19d5985e77791aa62929288a8ea26d1a3784594c056f1f06590b6ac6efec90ce9b38e6f8b1df8cec1072814845a8fb58999953b16c24228e4986793803dec502b860821fd5560b0a3e20c0b268376d37a882e25be874dc53f521cf955342f6422b608"}, @NFTA_DATA_VALUE={0x80, 0x1, "cea83ac0de46b18b7d31fc8bdf7fc21da59371df0f0dc3fccc19b2475d8290b65ddb246ad325d27a4789f89c1d418bb249bbc03a56d2af7baa83d647488c6b7cea5938ea8069dc2f82819fa42ce5c20cdbc2a1bb152759aa74d7ce9cc823b305efeb93fb6527685209de1e0d8b728d87593ed595d5a97b93a5d4a8c8"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xfc59}, @NFTA_SET_ELEM_KEY_END={0x118, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x88, 0x1, "9704c3bc02986018b03858a6eef01bb529fb475b2905bfca0c42e9809bf8150da369101b808fee024e1431ba00a33c5b977bfcfe12ba4bb907e0f2183aba591f63cbf26fa7ca0b9b401e7f2b735c3a6d6e9ae4a8fc8503655b2cc197ce97316ab336c4c981d0174ef7b297eb886887d5b13e98e73a9277241f8f47c310e2eff6eb4f01ef"}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x9}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_KEY={0xfc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xf7, 0x1, "aab1bba6b04477f8c92194237947e7a7820633b8a019b784d52446e0dd9537457a9ecc8892e9065ed2486db26e9dd3bc9ab196b286fd94a99040085810b065c141fb7e5cf6cdbad03c7ff94897e3743a6501eddad5a6af46a49e344cc31bbeca4879cbf229e843f121f19dc1571566741907963041b403d7e822f20b21606fced7483d587b5b053bff0d9507021d15a18c29f4718072754da15cb300d11b00aaf656d9b1b79b6ed0bbc23a75187f2d41e6cb122526daf24be5e1c4feefedef1ce9fff8464dd70545093bb363fe9d1555f25d2c42ec2fff4768609d78461ee908cdebd510f481d8953b8a4b527e705f22a534fe"}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x1058}, 0x1, 0x0, 0x0, 0x800}, 0x240000c5) (async) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x188, 0x0, 0x0, 0x0, 0x20, 0x461, 0x4e72, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0xb1, [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x2, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0xc, 0xfe}}}}}]}}]}}, 0x0) syz_usb_control_io(r3, 0x0, 0x0) (async, rerun: 32) syz_usb_control_io(r3, &(0x7f0000000340)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB="a920f4b5667ac7157b0434e170676dcc92119e0a62c37116fff03ee45cfa1bcd21052cb2558c02c73e12171c6587db565697a509a1d6dde792e1c3cdf9b1fe347567346fb45447e9b7513678545da73c75e08995f6df6bb6efda6a2b0ae80000000000000000000000000000b2556d6c31fe779ac42303c8956403359bc7ba627980d8edc09a3a6eecc83fd5e9e7d389cc3e9b175039a63ab7d3309ba703ae93c0075091f91f1706dbaed7640d25196634ce0456580afd2f70bdb12c4e2d7c1bfec9fa77be40565ed792d00fc6aaea65694a3f8a69ade795964b041b92938508b897fe06eec15ac0def811a3"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async, rerun: 32) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WDS_PEER(r4, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000b00)=ANY=[@ANYBLOB="5c000000e8c1f84b2e597ffe38ba1f63fdf754118943ea99313b5da8470afc078a73d8278b04a9306b128ca7863aaba49907e7fe45517c989c0666ebdaf904f39f60196d23344f240c74690000000000002000000000000000000000000200000000", @ANYRES16=r5, @ANYBLOB="00082dbd7000fcdbdf25420000000a000600f74e148967c400000a000600ffffffffffff00000a00060008021100000100000a000600e672039fb02600000a0006001ddbbe32024900000a00060016a154feaced0000"], 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x810) socket$nl_route(0x10, 0x3, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) (async, rerun: 32) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x437, 0x10, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x54583, 0x1}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x38}}, 0x10) (async, rerun: 32) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6(0xa, 0x2, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r8, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r7, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r9}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0xc4}}, 0x0) 12.916178555s ago: executing program 5 (id=9162): fanotify_init(0x200, 0x0) poll(&(0x7f0000000180), 0x1e0, 0x5) r0 = socket$nl_route(0x10, 0x3, 0x0) modify_ldt$write(0x1, &(0x7f0000000040)={0x806, 0xffffffffffffffff}, 0x10) r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) r2 = creat(&(0x7f0000000140)='./file0\x00', 0xecf86c37d53049cc) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x80012, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x10408}}, 0x50) syz_fuse_handle_req(r3, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x0, 0xffffffffffffff80, {0x0, 0x4}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(r3, &(0x7f0000008340)={0x2020}, 0x2020) r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) r6 = dup2(r5, r3) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000200)={0x2001}) r8 = openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r9, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x1}) ioctl$KVM_SET_GSI_ROUTING(r9, 0x4008ae6a, &(0x7f0000000040)) r10 = eventfd2(0x8, 0x1) ioctl$KVM_IRQFD(r9, 0x4020ae76, &(0x7f0000000080)={r10, 0x4}) write$eventfd(r10, &(0x7f0000000080)=0x430f, 0x8) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x4000) write$P9_RGETLOCK(r5, &(0x7f00000000c0)=ANY=[], 0xffffff6a) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) write$P9_RLERROR(r12, &(0x7f00000000c0)=ANY=[@ANYBLOB="0d0027255b0002000000000000"], 0xd) tee(r11, r12, 0xfffffc11, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f00000001c0)={0x1, @pix={0x410001, 0x2, 0x31424752, 0x7, 0x6, 0x8ea, 0x6, 0x7, 0x1, 0x3, 0x0, 0x4}}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x10) 12.295774118s ago: executing program 5 (id=9163): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000005600010000000000000000000700c6c9", @ANYRES32=r1, @ANYBLOB="200001"], 0x38}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) brk(0x55555ede6001) r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r2, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r2, 0xc0845657, &(0x7f0000000580)={0x0, @bt={0xb40, 0x870, 0x1, 0x1, 0xd59f80, 0x1, 0x0, 0x19ef, 0x2a, 0x3, 0x2800, 0x6, 0xfffffff7, 0xd1, 0x0, 0x30, {0x9d, 0xffffffff}, 0xd0, 0x9}}) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000097000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007baaf8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000b50005008200000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000070000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 11.764860155s ago: executing program 37 (id=9163): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000005600010000000000000000000700c6c9", @ANYRES32=r1, @ANYBLOB="200001"], 0x38}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) brk(0x55555ede6001) r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r2, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r2, 0xc0845657, &(0x7f0000000580)={0x0, @bt={0xb40, 0x870, 0x1, 0x1, 0xd59f80, 0x1, 0x0, 0x19ef, 0x2a, 0x3, 0x2800, 0x6, 0xfffffff7, 0xd1, 0x0, 0x30, {0x9d, 0xffffffff}, 0xd0, 0x9}}) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000097000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007baaf8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000b50005008200000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000070000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 11.2238623s ago: executing program 8 (id=9165): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x602, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x20c) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000040)="93d90400000300", 0x7}, {&(0x7f00000004c0)="416f3381ecf1ff", 0x7}], 0x2) read$FUSE(0xffffffffffffffff, &(0x7f0000003740)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) timer_create(0x0, &(0x7f00000000c0)={0x0, 0xc, 0x2, @tid=r3}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)=0xfe) ioctl$PPPIOCSACTIVE(r0, 0x40047459, &(0x7f0000009280)={0xfffffffffffffff7, 0x0}) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000400)=""/235, 0xeb}], 0x1) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$gtp(&(0x7f00000003c0), 0xffffffffffffffff) r7 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) sendmsg$GTP_CMD_DELPDP(r5, &(0x7f0000000580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x24, r6, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r7}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000081}, 0x20008000) write$ppp(r0, &(0x7f0000003700)="aaf5", 0x2) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x68, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x3c, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1886c301}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_DEV={0x14, 0x3, 'pimreg1\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth0_to_bond\x00'}]}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0xd8}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) 11.109057538s ago: executing program 2 (id=9166): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0xffff}}, 0x14}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="070000000400000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x319c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f0000000400)={0x2c, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\a'], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000840)={0x84, &(0x7f0000000440)=ANY=[@ANYBLOB="203105"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x2004c054}, 0x4000090) close(0x3) 10.127092843s ago: executing program 8 (id=9168): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = io_uring_setup(0x2936, &(0x7f0000000300)={0x0, 0x5b58, 0x1000, 0x3, 0x1cd}) syz_io_uring_setup(0x583, &(0x7f0000000180)={0x0, 0xd5ca, 0x4, 0x3, 0x317, 0x0, r1}, &(0x7f0000000200), &(0x7f0000000240)) r2 = io_uring_setup(0xbbc, &(0x7f0000000040)={0x0, 0xb9b9, 0x5df78db4f8544a7d, 0x2, 0x57}) io_uring_enter(r2, 0x100000, 0x2, 0xf, &(0x7f0000000000)={[0x20]}, 0x18) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000002000010377b43e9300800000020000000000000300"], 0x24}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801, 0x1303}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x3c}}, 0x0) 8.661497959s ago: executing program 8 (id=9170): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4f3, 0x755, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0xb1, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xc}}}}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000340)={0x2c, &(0x7f0000000040)={0x20, 0xa, 0x7, {0x7, 0xf, "00f4000000"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) close(r3) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) ioctl$HIDIOCGRDESC(r2, 0x90044802, &(0x7f0000000380)={0x4000}) syz_usb_connect(0x1, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582239f"], 0x0) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000200)="240000001a005f0400f9f407000904018020200000000000008c8f9e1253b899471a1c1a", 0x24) syz_open_dev$char_usb(0xc, 0xb4, 0x800000000000) close(0x3) r5 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x2, 0x3d7}, &(0x7f00000006c0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r5, 0x847ba, 0x79c, 0xe, 0x0, 0x0) syz_usb_connect(0x3, 0x2d, &(0x7f00000004c0)=ANY=[@ANYBLOB="1201100311395b40d8050c815f180902030109021b00010601f1080904c808017ff8ac4c090501030002"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x155551fa}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r8, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000200)=ANY=[@ANYBLOB="b92421d5ffffaaaaaaaaaabb86dd6000000800303afffe80000000000000000000000000000eff020000000000000000000000000001870090780000000000000000000000aaff0200000000000000000000000000010e01909f50c21594d700000000000000"], 0x0) r9 = socket$key(0xf, 0x3, 0x2) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r5, 0x18, &(0x7f0000000080)={0x1, r5, 0x4, {0x7, 0x2}, 0x7}, 0x1) sendmsg$key(r9, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x2, 0x400000000000003, 0x0, 0x2, 0xd, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x4e24, 0x4, @private0, 0xfffffffe}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xff}, @sadb_address={0x3, 0x5, 0xff, 0x80, 0x0, @in={0x2, 0x4e21, @remote}}, @sadb_key={0x1, 0x8}]}, 0x68}}, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000040)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) 7.895161481s ago: executing program 2 (id=9171): r0 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x7, 0x2) r1 = syz_usb_connect(0x3, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) read$char_usb(r2, &(0x7f00000002c0)=""/151, 0x97) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_usb_disconnect(r1) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000200)={0x51, 0x1, 0x2, "6040a7190200002000000000210000ff1057e31e94000002000000000006ff00", 0x30383653}) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000000)={0x3d, 0x1, 0x0, "d3fa5b89042b7205fe7bafe9e6415dbf6b34944d164ce8cd4e0d4c7b546787a7", 0x47314356}) r3 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000380)={0x1d, r4, 0x1, {0x0, 0x0, 0x3}, 0xff}, 0x18) sendmsg$nl_generic(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x500}, 0x1, 0x0, 0x0, 0x800}, 0xc880) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x38, r6, 0xc4fc9e906872338b, 0x0, 0xf0ffff, {{0x5}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x8a}]}]}]}, 0x38}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$NL80211_CMD_NOTIFY_RADAR(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r6, 0x8, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1590}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004000}, 0x40040004) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) fadvise64(r8, 0x9, 0x2, 0x0) ioctl$TIOCSWINSZ(r8, 0x5414, &(0x7f0000000340)={0x1, 0x0, 0x9, 0x3}) 5.665310668s ago: executing program 6 (id=9174): socket$inet_sctp(0x2, 0x1, 0x84) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd1l,'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000002240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bind$alg(r1, 0x0, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r4 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x1e, r4, 0xfffffffffffffffd, 0xfffffffffffffffe, 0x1) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r5 = add_key(&(0x7f0000000200)='user\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_int(r6, &(0x7f0000000200)='cgroup.clone_children\x00', 0x2, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001080)=ANY=[@ANYBLOB="140000002100010326bd7078fadbdf2505"], 0x14}}, 0x0) r9 = openat$cgroup_ro(r6, &(0x7f00000000c0)='cpuacct.usage_all\x00', 0x0, 0x0) sendfile(r7, r9, 0x0, 0x38) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)}, 0x40080) keyctl$instantiate(0xc, r4, &(0x7f0000000080)=ANY=[@ANYBLOB="6c6f616420656372797074667320757365723a7b5c3ad0d6dc265b203030303030303030303030303030"], 0x3b, r5) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00') syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, 0x0, 0x0) 5.518464807s ago: executing program 9 (id=9175): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r1, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r2, r2, 0x0, 0x200020) 5.105436206s ago: executing program 9 (id=9176): open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000440)='.\x00', 0x20000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/profiling', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, 0xffffffffffffffff, 0x0) utimensat(r1, 0x0, &(0x7f0000000040)={{}, {0x0, 0x3ffffffe}}, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) linkat(r5, &(0x7f0000000000)='\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1400) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x63, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xa}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x78}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r5, 0x3ba0, &(0x7f0000000340)={0x35, 0x5, r4, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_IOAS_UNMAP$ALL(r3, 0x3b86, &(0x7f0000000240)={0x18, r4}) r7 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r7, &(0x7f0000000140), 0x10) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) syz_io_uring_setup(0x497, &(0x7f0000000480)={0x0, 0x707b, 0x0, 0x4, 0x288}, &(0x7f0000000340), &(0x7f0000000280)) 4.79232651s ago: executing program 9 (id=9177): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0xd, &(0x7f0000000080)=ANY=[@ANYBLOB="1802000000000000000000000000000085100000010000009500000000000000180000000001000000000000002020207b1af8ff000000001f1200000000000007010000f8ffff"], 0x0, 0x3, 0x0, 0x0, 0x41000, 0xa}, 0x94) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000100)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r1) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="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"], 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x7427, 0x0, 0x0, 0x20, 0x3, 0x0, 0x106c, 0x80000001, 0x8000000000000, 0x80000004000080, 0x400000000, 0x8, 0x0, 0x6, 0x5, 0x8001], 0x8000000, 0x3c4210}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 4.534108688s ago: executing program 9 (id=9178): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000002580), 0x2, 0x0) read(r0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r5, &(0x7f0000000100)=[{&(0x7f0000000040)=""/162, 0xa2}], 0x1, 0x40000003, 0x6) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$KVM_CREATE_PIT2(r7, 0x4040ae77, &(0x7f0000000180)={0x1}) ioctl$KVM_SET_PIT2(r7, 0x4070aea0, &(0x7f0000000280)={[{0x4fba, 0x5, 0xfd, 0x7, 0x98, 0xf8, 0x4, 0x1, 0x9, 0x5, 0x4, 0x6, 0x9}, {0x10, 0x400, 0x4, 0x9, 0x7, 0x6, 0x33, 0x2, 0x1, 0x7, 0x7f, 0xd, 0x201}, {0x3, 0x4c3e, 0x7f, 0xe, 0x5c, 0x8, 0x4, 0x4, 0x68, 0x7, 0x0, 0x6, 0x1e7}], 0x5}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x4498bda7e2139f51, 0x0, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x141743, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, &(0x7f0000000480)="33ee50a139cd0e9a97673c3665d90b3088d580497934de1ad77807903793605d5f83a7ec306ed7e094a9333a5cc260966d6e33718b599143d357b3ea74a180c82cd7273f6754e41b", 0x0, 0x48) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0x0, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x5, 0x7fff, 0x1000200004, 0x4, 0x2, 0x0, 0x1], 0x8080000}) ioctl$KVM_RUN(r8, 0xae80, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x5, &(0x7f0000000000), 0x13, 0x0, 0x0, 0x10000000}, 0x12cd) 3.964407337s ago: executing program 2 (id=9179): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x34, 0x9, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xfbe}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 3.675510173s ago: executing program 2 (id=9180): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000000000006241a0000000c241b4800f3ff00050080050905810300020000000904010000020d00000904010102020d0000090582020004000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f00000009c0)={0x20, 0x80, 0x1c, {0x1, 0x28, 0xe4d, 0x80, 0x3fc, 0xfffd, 0x5, 0xfffffffe, 0x800, 0x7543, 0x0, 0x6}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) close_range(r0, 0xffffffffffffffff, 0x4000000) 3.18647145s ago: executing program 9 (id=9181): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0xffff}}, 0x14}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="070000000400000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x319c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f0000000400)={0x2c, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\a'], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000840)={0x84, &(0x7f0000000440)=ANY=[@ANYBLOB="203105"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x2004c054}, 0x4000090) close(0x3) 3.13027173s ago: executing program 6 (id=9182): socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r0 = socket$inet6(0xa, 0x3, 0x3) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x5000, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}, 0x13}, 0x1c) writev(r0, &(0x7f00000192c0)=[{&(0x7f0000019380)="8492956181f597fb0ffb48658363a2a01c96049e2e9fd2a3e2e7be731a73ddea38e7ac4a3086bb42d7d8a3a640886432488ab2f34452de7280f9588015069553e24c9763fea9281e607f90155ec28699d4ef97e057f34607536543735c4962f95e6bd27486ff53e9ba7adc7f8631cdfb6d48cabde8f13ec182e08fca6f232e1008af46a9d3b53b22d819deaa5cf6f97a8d50a58ef8efab2b188030b082c0084ba17ddfa97c2fcc41de17db855ba3e7431343c9ad296952ddba0b08d6ed111d5f389ed743e990d25f88f2e305de633716dee9303e188ec4fd69d31893f61d2d259af7418c31d9b6e9ea12b6cc0eb3ab4ab1b3be887c25f5a537a8c030f7b0b841cbfef61db5f34da24d3e4115d9e82fdcaa3e26df08a58682700180aec0de731382b0580c75abe9d0dec6b7610a6f4a5039cf2413f8acd013f15a0118a1640d94113167b77dc0a38d014fa637d057c3d283b68d6d2dbed065a2ca23e7a87469396f21651029aa79cfd98650189bff70ede2571ff7280195cfe32a932e955618d8dbfc904a989f7da4b81a05efdef30440a0f05153ea81fd0cf742ab5520a7220c3986bee179f5e06408173e166f35212b493966e6224c7e5d29030643c86b27808b2be56d439a3ab1a59424c95972fa25c6fa6e57bb6aa7a5892515a35a75e814db9c5caa93f67e49229ffe3b05f1f76c59ba63166b4df5c98c1036f8a284cbaa6b62976bbb0dd39352473406376fe3aa33b6ea6a7376f6704490331eb2a013131aa15d4d0fa6b637fa9bf84ae1ff322dbadfc94478d7f1895a2d0b0d7cee96169877cde72792f01ee551a8a1cec1e54c8656d245d0747c001f0cd439cd31d9b9697ec588b59242340743e6b9eb46a2090b13044dce9cc5ecacc3bf38c5e52f2fb5d834eb7de3436ca787d1d3b7f98860628df0d59d7611fe9d109a1bf67447e68c37534ffd13a05e8b87570a18a640f6fbd16716d4c0fc34c94c8a9b5fd12f7f961cadede6763539d805828d75966795c956e8cd5e815bbd92345f93ed888203d50ca3420cf78d80be67d0719a53ef7665812b54993f2197c9534f80fc0e3c98ea3863df45388ed3e16895919c8ac8deed340fc1d50eea8e9e5b1d221854ce1c480afad4fa46d57e6327951182eab7f2fc4bdf75dbd4a31f0a132fee680f25cd25fc6cfa1d2ec1dc9c10fa1ac0273847ca56004a0c1d3727c7a5829f518602b04b7c7488391e16c93f6122ad22fc0e84f88f5ecd2e3c15b23588f2a7985f5a25b9632079f9b86da3b36424c9a80f3668fedaeb2c974ef735c7a89f7238c48e9991ca446d954003134e44476b73ba46cb9d1aa4810ecd784229af6f007e81e0b01761e190c04e8fd5ba1a64259ad0bf11d7b614d6ee7b4618636b3418e38e6e439259a0806cdc2613d797233e87f1c922f426608ec40a0384c269bcf019bc5f29fc2362a5497aa329ae0769beb61d3986d1511f862cc496b8d6e7ac5efdc40b5309d2a1535b0fc08f23c3257794137a9516b661b63ea2eb5ea479cbf0876afe938f59f6736c591ec6bf094e34e0607b7e878812d84712f84decd2099c9f8cd1a3aa62c2bc57e0b18a6efcacb90e3531356736e7e7fe2f8f5b59737fd44e3610282556dc6e73e4730f4e2dd3d3a7ca8d140483a89851ea41c7d1bf72a1b83e25cee0ccc213bf876ddc876f496d331d1114f0641015e21241231f227d159d4c74af49", 0x4c1}, {&(0x7f00000191c0)="91a734f9ec34f417d2fd4ceebf91d450feaee433e903ae37504e59f7fd28526a05fb42f5316b21c39b07f6f4002375b40b6871f65f7d8dc988437ffab21315c6f4ce5673a7ae29fc2886d176d7", 0x4d}, {&(0x7f000001a500)}, {&(0x7f000001a440)="373f0c6e77dc2a0f40cabfb07fa976c4f3af8c5d4aafdc85b7ec98c79b29b092417f368fd2b04f282d176554b5fabd5996ba17dcf3d1e878b50dddaaf6dad740d3b88bbe3d1c5b939e609ca0e6c984a1c226780f8dd92309d34842e027b5503701b3104f4633e138c3af0f8aab5de142acc623ee6a60eb00c6b37eba777419bb227ba5507191c7b5d18b9992e10681", 0x8f}], 0x4) 3.044489745s ago: executing program 8 (id=9183): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e23, 0xfffffffc, @loopback}, 0x1c) listen(r1, 0x4) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000140)={0x0, 0x5}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x4}, 0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000001680)="89", 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000340)={0x0, 0x4d0, 0x3}, 0x8) (fail_nth: 1) 2.97910848s ago: executing program 6 (id=9184): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e23, 0xfffffffc, @loopback}, 0x1c) listen(r1, 0x4) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000140)={0x0, 0x5}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x4}, 0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000001680)="89", 0x1}], 0x1}}], 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) brk(0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000340)={0x0, 0x4d0, 0x3}, 0x8) 1.760601669s ago: executing program 6 (id=9185): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r1 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x503, 0x70bd2a, 0x4, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_FWD_MASK={0x6, 0x9, 0xffc0}, @IFLA_BR_VLAN_STATS_PER_PORT={0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4804}, 0x800) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r3 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={r1, 0x0, 0x0, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f00000001c0)=0x1) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f00000000c0)=0x1) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) write$UHID_INPUT(r6, &(0x7f0000000040)={0xf, {"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", 0x1000}}, 0x1006) r7 = dup(r4) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_MPATH(r7, &(0x7f0000000240)={&(0x7f0000000080), 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x2c, r8, 0xbc7a80b5e444284c, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x0, 0x5b}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc800}, 0x404c000) 1.459441385s ago: executing program 6 (id=9186): r0 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x972, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) getcwd(&(0x7f0000000000)=""/154, 0x9a) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='attr/current\x00') read$FUSE(r3, &(0x7f0000000080)={0x2020}, 0x2020) write$FUSE_CREATE_OPEN(r3, 0x0, 0x0) r4 = syz_usb_connect$sierra_net(0x6, 0x3f, &(0x7f0000002500)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x6, 0x2, 0x20, 0x3, 0x35}, {0x9, 0x5, 0x1, 0x2, 0x40, 0x7, 0xa, 0x6}, {0x9, 0x5, 0x0, 0x3, 0x20, 0x40, 0xa3, 0x28}}}}}}]}}, 0x0) syz_usb_control_io$sierra_net(r4, 0x0, &(0x7f0000000480)={0x10, 0x0, &(0x7f00000020c0)={0xa1, 0x1, 0x400, "df1b51146da298113489e2c6fe06a390a39c90679e5e381e72ce30efa5c07a58663404cb0e81491e275cbfd5ed49b9e0ec4d1c2a67de9f15e9cfa2e9b4b0a80da7df4aa7d82337d5f9ddc7da2fe67dd1422a2bb468761feb64a43e113335e3a598afdc040812b02df15434251155ce694cccf5d1def5668964f65e70f8a9e074a6616a51464b4e947ab2dde2a5db51c149564697bb77fa165e8977ccd3de4e3dfd021dcf7e350a513ed2c47274806c61de8a3c6da585cdc534800a29147f39aa8bd84206a6343b7b703d5f7a3b8a017822e4e4eef6481155cfce10b5b7dec52ced1679937861e29ac37c166d02418873488db07d523030b081d15b8467200164044cfbafcf52a64b415413a880f7c0b91a67b7a3e4d15b5908e80fac01c9da857230c5f90bb3c225915efbf854bd13a14bd2f51ca2400202e35630ec65d619187fd17ddac1fe605804f2b0b439ca8e6f06de6d422a82d111442cce043689fc23f6afdf304081941d4e0acb91ad483505b6790f0ffcb69a25d9eb4c9651fd11afa16719f565f41a764d737799115772bcd48ab0a4e9cdae443edc31e7abf0d35f6c2cdbc8476e25ecb6fce972e544c8b209aaa6089a0851443523637b7e96179ef2be907e66570955956c1c178ea35ad1510054d42e2e2b580dad41c4d229a53a1b1639adaea43e4cf2469988bbf899d5b71aa028173206082449dbf19adeb0a93e7663ecb33b60ec4829ab9639a42c4f0e942d5150a47ccb9b015abbe3acf08c5b4f54905049dfcf8f05e2bf117583bdd2c4ae06b39777bf137a4ddb367abd3ad559c093e8166fa811c387020593816e81f8b89e466251ae363aa67be4da566e8a58f2dbe5c294059b27f2cd0ada199fc086167e8e789f07ec7ffa705228a09b39bb451e9045d5c28198c039df0addfdfdbe9281d404090446ef5c2b4aba641a9c1f3288c821a2a72106b761cd29c1168998e0443f66598990f40d1ca8c9e96062e6aeaf1a4a3542996a4875d14dff646ae88f6e74cce06d4cf3dc14c06f170132bb529a1f7cc2a60bea90e6a024eaee9161aef425a8ba9dd66a126c66093597d7d4e91f5e228344dae8bc4f71073f8f347ae309728101956d5253c016734fb728519bd3868b1fec09fa7c9646e52413713f3e4bd8629eaf9e9fbb9a9dd7a271d34c58266795313b3c29e84f1dbeed05c785d613c318c6f07a6c47ef2207f786ba7ca887f1ecad930249e32672a59370d542fbd7ac411b9ceeaad3f496e45f8ccf85802131519e3166e7774e2d65caeb6d2fd7e75f9248b818b285260ff9235dce7a99547f355d0df6f7a396f6d92a6bf809615c0b9933e7d4f00aeeeac94db8c569c920c6d484a7945c86bb64ddcea0da71f5ab65b5700e2ee5019972e3fda1cc84def5628e432de0c38dee6c332cec8be2603b68cec101833cd23cd6748357"}, 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 983.761152ms ago: executing program 8 (id=9187): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) r2 = openat$ppp(0xffffff9c, &(0x7f00000016c0), 0x8101, 0x0) ioctl$FS_IOC_FSGETXATTR(r2, 0x801c581f, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f0000000240)=0x16, 0x4) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000040)={0x4}) prlimit64(0x0, 0xb, &(0x7f0000000000), 0x0) r6 = gettid() tkill(r6, 0x36) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000714000/0x4000)=nil, 0x4000, 0xc) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r7 = syz_clone(0x200000, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r8, &(0x7f0000000180)=[{&(0x7f0000001bc0)=""/156, 0x653932f9e45c1b9}], 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)=""/80}, {&(0x7f0000000340)=""/149}, {&(0x7f0000000400)=""/127}, {&(0x7f0000001c80)=""/4096}, {&(0x7f0000000480)=""/65}, {&(0x7f00000006c0)=""/228}], 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f00000000c0)={0x4}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000005c0)=ANY=[@ANYRESHEX=r4, @ANYRESOCT=r2, @ANYRES16=r7, @ANYRES32=r1, @ANYBLOB="d50e330080000000ffffffffffff08021100"], 0x6f4}, 0x1, 0x0, 0x0, 0x30008415}, 0x0) r9 = syz_usb_connect$cdc_ncm(0x0, 0x8f, &(0x7f00000001c0)=ANY=[@ANYRESHEX=r0], 0x0) syz_usb_control_io$cdc_ncm(r9, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r9, 0x0, 0x0) r10 = openat$vimc1(0xffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_G_CTRL(r10, 0xc008561b, &(0x7f0000000140)={0xe0, 0x3}) syz_usb_control_io$cdc_ncm(r9, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x80, 0x1c, {0x100, 0x70, 0x8, 0x1ff, 0x7, 0x100, 0xfeba, 0x3, 0x8000, 0x0, 0x100, 0x9}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r9, 0x0, 0x0) socket$inet6(0xa, 0x4, 0x81) 838.633725ms ago: executing program 2 (id=9188): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x400, 0x0, 0x0, 0x0, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000001280)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r2, &(0x7f0000004300)="f6c5cdd50b89338e6f0228b937225c21a87072407fe83d5fecd7bcca9b3fb6c714baa7d905bd76d4f38eba0ffafc067da9e5b2a863dbea1f11e32b455862ad205d1de267dbf9edb296fda48092e372fd3166c91d636b627f4ce223d2fff7db30abd245c174812a8ebfce720483d74f6658daaba3ea9e453d789d9d1d8b63c91f02b1282f122d5847241f305a5d791a7188c946ed5d5e5343c04968e62b064aeadeafd55ddb6a1b724a9adf29b15c4c55c9afd709d19cf29df117c69d1f855b647f2d6dc3ad9cc2e413cda65ca8d3fd777fdf88827428723d37b89a7330dddd234f39187db8e54905b8eb0dc851f51ff37b5deb69b64bbd27b72881267f94a88974a56b1d3178d49c209d6f4e974c00f25a87255c3804b1150f98d46437f5333b200651dfd1ae939125483cec1690ecb4d449ae4f2bdf88d50382440dbe1699017f21c0f1e0c85cd339a9f87046af063b54b923d4eaa04fc8dabb3bb3e3bc83f0657b5a3c4cdfce3c325abe45a39b794d13057e3a036ec20c4eb1c18a7501a8bf3899626fe01b2b9c18ab08eaa972ab9f8a786888162c7f77db751c1ab88db854ad8a99c7307a52571fd4d0a8ca5a6f4f5e46396bab29e4a5bb6f7c40404be7357b47028a1cd2b780abbba9e37d182866a9171ddea543a5684ff6445d4c3ba61b4300a1556e85518301862b398e43f61d461054469f693c42f995a000dc9b950b277bbc5a9bec872462a0938ef0e0ba4f4d2bff4d81804996a9f97893c02b2deff1abf1a6cb7987f446132f55a10aaf537d93422ed22fa659ceda5939cf18398f8632a257abbf68d4854e452ceb5acc02c7b65d67b582e159fb5039ecfe636dfd00218f2e5d1e2ebeca027472d63fdd2b61d7bbd9258a3fbb14ee2559845a638e07bbde84f87a42b59a09c1bc877b7e51a4ea42c64bcb3b3c8043f1604c569308bd6ddf438204df167580f5aefe2a8beabb77a8fd3392f99e3a43a7cfa0a68b1b21a307aeecd5b7a3742d74ff1790b13f1026ebec296210301d48d9354646382a18d247300bfd8aca878051a2d667ad2ee489edfeb3c1c912cc6a6c573fd92dd4cd1b6d2fb1bbdc86ddd8bf515c28f15ebafe858df78e8a783b293db3144c44397cbaeeadea44655c6350562166bda3accf7a2e65cf3eb7beace08760337e2dff8c9611fb131b345f44dba2aa2eee0bb4ec719c59a269e71ffc0775c5c193e341a833d38edf8a1f01f66b9fd039ff55c884257ec7330f333e579e66ac67097bfe31b2b78d88b81b640351da3bea710e38d805000000814f4638df1680d2217dfe7364dc228ea79f74e678b338105391e8c1e041cae3d2ccb9d1b034d96b811bf06515b3f4dd02cf2cf9f9884a6a1af39f219fde0b1caee2065536b8e900bf4fe9d87396cb0854ff28db253382a8f1e6c2a2805b5d5c8b756640a49a092f8fbc5ab87e511d790519e9e79c1336b2af288b1b07871858966197f65919009c435e6ca5bc89a15fae0e3534e50cbacb3cb2ee519a9894f08facb453a7ada35c0cd8e6ac71cf9ceb21c1b944d81a16a3299c730fe1ddb164505e2df5e4dc7f46c3fa3230a9cc3845298d4abf909565a67be3316ca881540f2920c8fb6ffe5ffc66ef477476cc4941ba03795287f408b6175df89274e189bc2e12e93f5d8aaa532400946a7a0cb6cacb55d4947d0c02da9e2345b4d0cc92a570019ac51f64b29b7e509109500f9fe8129196bc46230a1848ad7dc721efd97f1cbee41a1e520da4cda9fa5a0024d7865e637d0f17f240647f11f4d41a39e29643917f6ccd8680d83cfaa33081c3dd613ba2ebe736539834ba7977d2617b85b073a4532c8e6cb3dc3ecb492f23b573ee103ad6c56a5930904e836e9390a8b20470de2c7e0d1b52000366cbc198caa4917b593334a449840a093bbd709a6f835eb4338e23b12f59efd0fe6a8f7d108e6c40d63b06b43639a73822b431b636c3c6cfa2c973fd43aab1ebb560eb5b556b98758583195190651d9f12bec2a2db9c87f879af59d9e72786e416ea8fa36ff4a4f08d56c5e208b9995fd9ed0607d3af20b1eb51dc0943cd96bee0cc78875fac1dc471f80664ef9eb1f146d5b6871842ae1c51e83523f28a149346df307eae77929a81c235f5593d7eb30581b0650a8759d5a59b5c2697c461e17d8458b13dc88935b878f71f0597d46924bc84714ca7af2df5749b1b0fbe1950aade8d85555887809f9d4cb5d8d6cdd0ddede90e2fd122d1168f0c7e535aefe0385ce12a5cb1060498ba51b28fc344e6c6094b1cf6263007e299d7ceae7814c664f43bc2b8e989779e1a2a36e7e209175c197117966925ced8cd941fb4d37d05a5c771ba579671d505d6af7fb70fe764d906fa84f046fb4429d82bc7f4ed72f686bf2f923ec7bd48b1be8773ef8a51235825cb6c54d444021e823ba2614e7d93920a96d23f19d9adfcabe1716fea4979ef4d74fadc6fd53e8d6c6704c4eb04a039ba4c83d15afdb195a36f292ba9a2728cd85311076aa6a484c01fbf9fad617f4870fcbd1cd453aeaa391968287263852732552443e3388bd07d975cd2a11624fa2d0d931034b940c4b2babe262706c6cd72007c5fd5744564babc9fc37da476cb38ed0de6b530864e26a6febeb8d901d40c771a0cf2f498830487d83368ff3f8af68a0ffa5762d3f2c9cf2a66e2338d3e3655b647685c2dcacba997eac420d5618c3d268b85795fa49e37ee504521017439581a6c5c064f0184e4cad2b8134e2f9b9ec42981c155775d7d744bfff7adb3f7599f159c7cf1d7d56fb7cddf5b4f8ee8a3dcfbc1151b3d253771db09879f48c3c0cc9506e97c776fa8251c21d5fed9dba8ca6674e45ac2a6bef86ae18b175ffb5d281f58527661ef7d5651b28db85c1b7cc305ab5b34fb49a32778390d3b6d4e78d06d3d863eff86435d36be3043529fb9b4d061a7a983d6e287fa83925dfab1b526d6bf510a29f9d6ad493bbb4da5fdf0aef4f16ff50799b016dc4230aaf87b9ef8953f8ad522ab4c3ec3209a57852cbdb5e39628ad107b248d6f07d123fb0e68d7b7aa8558478de5dee88032de6ccbbcab0ecfe8fccb1681816db894fdc24a9b6cf8ad5690efb01c8b4840255a5d5563b4cb73609f0a5337738e179fd9577bb795eb5a89a4ee4e2b2bed5fc65ba1efb911889e131a0b010c5699d7f6b869ffff3945208feee8d245eb45590f2c67b97d186307dbee5327ef60340386ae04d45f981061b80d33ed6db2e5dcd711d68f8d9befdca10334e9636de1a2d6e6de2888d0984aae79b636eb0576f6cc9f450320b7e946eb82e9e1f8b3477f382090c79a9524a69f3416eadba673ff24cb1846358680d370e6ae98230256ebad4826f90ef8189b95f3b6275950c33ec2781bf438bbcce8ee350f3c1475b026a6c189db5101981b21f82ba8d8f62e852ccc5109a2780c70eb4a0b014c0c06ef46ff506c481b8082154db687b644ff122e5f35af5882212834a5b696afda432241f966d5706fa7c00be4a4912b6adb8e5629d0e18bb2ed4e2d7b6dbe79920d21ed0491f7a5017ae5ccdee5b498f61bb9ad5845a6268abebf80338c20c09530675a8366bfd4ea746957dd7337f1c1184751b649a399891ad2b6306bb062b9b2dc8a8b09302ea3386ccd78d9a3a0314c3df264ce81048391ae66ec9eeda8c70efe95146205d0b6bed2c362f2920615d41c7d12fc3991000a080061dad4e34587ff1684c6756f55dfd249d2d62bef74b5e4a40a63a2bc14a473cf913d5a4fd289d1792fc693c4a5f85326eebc52994a34e16af861438f22633fc5a4ce0d30d37ac0e2277e072f78375d7b1443e1af9647c23decfc411a3d0def781ce6679d92872fbc27dbd4a7edc2acfe565103d472fbde7ac626248a5305cf6e1c5fc81e9b71adb2523839b9425c72a67409539d611240ff5ad04ea2b3d063e197f5663606aeb0b76fa2e1121e3815506fe4a9ac09d555c1b8d8c9749f5dd5096130aaab80d9b721a831013885e3a376a57f97db4f1878372c7ac241b7424b86d97ae5fa3a0943f55c64cdbb4aa3209c4fbee3d9ed201e2bfccee01d33bd99c01689e1f23b185acb82e75cd2a161c316334f4887c8225f11ec1354105e3180d67ebb3a98d1178cca8332eb73555f53ed86c7285fc6c85570be32e74baeece3d610cfb505e1ca6c02fabffbd9b4c80274db8faab4a4d29f8bfa6db38daf4ca8442aad66e40581f40a63e50b3a33d9a3e32f4440b761d149a8d71c138f74d5b0e10d9266788499a19f03a17726226e27c899c538bf4c219d7a035bdab2c5b347bcb176555fa451594050c6196a2236e5b0981eabab3519dd10ed1ffb6334476cbb06059384f02c164f278d49391c6069b9adf25c14870e2fe1f28abd9925d3101fe464f829e971067dc9231fc3bc9d0e2a6c8e13db15f4b69b3b028a587a092453296f7f790a547ba191bca2ca929d1477344d7ba30b826a10152580e5ed7418f481e4b10139a4acea1a1c42f748cafff8b0215c6be50e0af09905366f0403c53f8c746ff06ec45d69d3c4039d0980af45c8a2d6cadafe477ffe3451fce3bdc9644faf73ef3ca3e823526fdc086d82967b1a569cdb99ea26fe6d06a21fdfa7a8342089931240324b786f6be1b987c8fc9e9e602cb0ad66039a0147319a896134cc97a7f50b3a0c04c4f80b8a53ea222f5c009325eca6668e453d92e1577712af0297ffbc3e3365d504ebc1c7e825e045c30c0ad9067fcea6dd754c179c3febce85187611f78634c081192b430010987a852837015a3c2a70604e18c5d394207fa61fd3c51a8ac5ab263d1c15a9918f599338d21b894e6016337a5a31422867a775a7def8fb7cc3a41342175e05c891ebbd7318bf011ab2dcd865dc5efa3a9451d973951c96752803665567c08013259f14fd704d5d108cef5a38b4e2375aa241c5cfa99511e334cac9665a06f25da7d3fdb497363b119bb4d536a6803b3aed59143655ef6df225b5a9305979f77e32942ffb4858fe22b270c6ec4bb68fa56a9e0d6e53650e7b1968fe5afc21e5638cd50f5c415c9addd998fe32ac983a9f9266590967782b6d9b70f22a48cc14301af5de46d7b71d0f7c0ead21ff503cbed5c2535672835ea0216eaa7fed72390b66b4684b51365d1923aec4dcf4dd08b357552cfb7e96a5ab956ac1276882e80a79d018c5ca7ffb3367d59846387f4af1fd4b6098cb560bb565af3ec0c3934da29120546804f3800aaba4969e00cb83d9d9b0cf216c42a8722030a6fc85a01b9748bebe688671318a2cc33f69e0bf3a8a3779c8847de958b28b2e8017da7f74d56f1a75134a4da0944e45dfefe63ff367759b55e1659870e0be86cef2789ec9063ae6093693c1d47cfc164eae67c97efa447120a36b39561d380077ceaff4bf0f55b066af441e400cc3996633abf905a32cf025becf31983dc6fceb6e0fb506bd350d81afa6421115939adef8cd68abbbd94f1567d9e9f7505af57e1802b8d704bb7460b3822330c4a4bb6ff2b187fb9a3f324b0f415c706a1de8a7cf6747c72be3b356c0206a3c0c39daa85309bff9faba7b68178108b261086cc15a0e21a52a37c1576a72d2d5da5c43248ad760d239711739cb79fc79b4ca2dbec2e100db1c535ed90623c67ed2e3817ebec259343b17efdd912ea0fbf73653015b7f8a51cae3cab19ba00638b8c8bfa8db481ca7dc7ce5c2540c46c963386188f74dec088552330e6ea067b222bd97ecab5073d95d5814599f522a36fc80636bb66ee8dca399586f90f1c849e30d92382bb0e64f62511a7f1044560175d68dffc03a9e56ac7629a4bcf50a4334f29b3391ef4bf0f3174a44d69e143437cb3dcb3871c4e7de50084b5e5033c48df364a1d5cf925d42a3c8e2b419909e4a2ca2156c1397eb87704e8f8d6cdb3a4a031c1b5468a1e75a923cbdbd384cd8d87c2c05f11f1df014ef98c13fcf9f182f6fb68dc0aa4adf7bec8a17caedd172f64806c311fc106b39edd9628a01d7159d638e09b39feab432718059589dc971143da4a8e640aa63ae0c2fb4a71129d362cdcf993adbc97b4f1543637cf1acbc9e67067f6c6f95be39fdd14dc6478c507507ceff88c2d1c5e13522547ab149dad2526393714c6c0a221c167ddf1084b563c0bfcc4c75a972131c62ddec7a497bd5118eaa12ab25bbbf7cc62eca5de5ea50bab67ce6ff2e05cc47cc0b0a5465eb01bbc08dac30b8522bd92180d8987390314e19eb3201f0be2b4f71abb697a751fd8d6a3251ca8ea1b2f20a7827d2599d62e392d6c065183a1778950d5ebe04180047ee8a2a096e5f1d6813ec63ff4a626c725b24d259cbd9ca6305009b29c6ef7225eecf9078824f9aef4d3e9aee1e9616b2b7f87499f8abab6c38e9a3e7714132850b5e71fa671697e6c8407ac3dad5abeee5f7b2a63aa51d29744736b0c38adccf8e29a85b81f3b3106daed64fc78618e18c9056cc41ce2f50379cc6c2c1411ba2c690e1899dee193f0f2877412f1cbd54d12255ca81a72211f9a8ab7f0b7bebb6c11b4bd6c77455decdfd7df2b2014395ba69f22e520138a43e1b3a11264822b143adcad307b35800563bab720687a898a76cde1f0a15aa3f32c0d302ce6f1094bacf5a1add935884be029c7fe18a5e90c696e3371af0f3cd721abd7dd4ce74ef00000000bcc4b1411d52026901380a9c7a807a76fa617667adea8b7734822da93d93969641a92ad2af6350ceee54e3d7c7c39e22d6c5f363d201572b8d68c2b9c7230b0b85801cfafbc5557f21bc444ea05fc612e2c2a8d4a38578c69bb252d8f4d617d0974f95b6ebb416d5c8f3fa925d4ed4f23bfce03e28389ca8c1bece1fa49e8d66387bbb09b3c29d9ed75ea5a9ac7930cb3ed05f999867c640b3435962fdb763002e2fb451c5a1b9d4536e49ba50fcf61451168a994249ef29af51694a1426d987ed8cfe09f10462c7629c4ff1b1cc709b99e9e87a54d1ecf54cd9da0c2c19b84b2a2c32c0bd12d158b73230cf610645048cf1afbb62aa7ce6fab79bec3ad84108f3d96cb9fb3d78a26724892a6bca533e64880c7d4c28a6685502f4cb2a27b132c8253b97e88583fe0766d04795709486556df99b7e65fbf71febe24e0a188e2dc489b8fddbf9d4b1c9ef4b558f888824469df9b2085a845998220332d9cb693472ff2abcc10784c2280825adfcc630e3a961b39ab786deddc53b18e862edc75742d6eb2d7cc227ba3ed770851718388612e4e7f4f257a90fdf09e3b0081d7498e2d5b628d9132aa0165f323f59af5e9ea54c582999fb527d5f2f3dd7e4f85877080526f8481899b6afc732f5da6af31b561ddc36a6b8c723087d3f168292550d89b228f7a3cc131c110a2dab2f81e339f24d3d2b696892dcd4a3e8f2eaaddc0d78e2d07cb9df9d2fe73e4c55562c0794092c7dabd4364f9fea89d6cdd8369d5bf1bc8863b8f89aacf0fd9b9b380947bb4872656e58bc87526e18fa8b17ef8a7219adf1b79d1be5dd827e7ba8e4ed50a81eb7562b179876a8803dde2ea99fe744e8f7df17040ac38592a3be7eb353416496e867d8a74c7eb94556b16241935d718dd43462fe0855cc31a812e0ac01109d1d3539bd2fd4eeb422009138a92324bd072edee2ba47d6cacc24588410ce30565a8aaa5aad52d9c55368372715717ff5ed3a0243ddafd11a7059c29a26b9ea9374e8434f31e4c15a747ee6d69368d12b96122690f843569e82ad27eb8fb25e94dde94cc15e690dc65f6a6c2a6393821168a79e03cd223ce54a1d5e38eee1c12e23027b12c6a8094c805088617c2fb4f52008366faf37fdb13b3a7a879949d13644da36dd35a4ede785ca0ac7b4f15472e77a33228129143f849ee75c915df31764c96954621a01e0941d6bb58125f544818b7152698f3addcd0a684af8fcdd4bcdf5752b3faa731988866ee8a664850989d280505d2a4b861f159d47d2d61ab3de866fb2c8f90075b713f61cf83a2ed426d53214b70385b7a46e5620c032486a5a00e0e73d3ea16eeccf5731507903a25685466b61311502ce781634ee46542957a0d5bacabb8d965689422588ee102d6a6016bf11589fff32e503feefccefe4107d0619e7a15336a8655e2f09034b4069941126d48909232592aac6d9c231285dc1d038ff1fa09c1588f543304659ca334afbc42b5f5fb813b34663cc6f4b0a12fc3edc28765b062e7a50fd19ef575be96cd1d9aa48c1fef1b2763949982a47bf25a69c8b1306e8e36c91d2096e6a6cf934452233ff49e91ee173c1e288b9ff70ff364689b82e2467a3d741809657ce0856582d24da5663162422a6f1ed1fce7cef40d90ce57cb99e19a0b4365d483361d03d0cceadd682f333bcdb0a49e24d8c7d004aad2dac06f4839cffc0a77730623917e5f101c33411ab4e0a8491de9a8bbd5dedb8dfeb5a5880da57c74bb8e1fd8b02d3c22087be3f686aee26988b2d62a41d4593ff0dc100c31dad221489f612ef60c160bd6c1f5a00ea6efd3a5aa5ca14efbf78ae4e5d8c5db9c03758b81e636005ade8d03a11f5d8231cfc1bdacdb276992ca8ecbad337fa89dacc9e9be11d398d37207e15ddb45566e0af78833545352d3043b70e20695ddddaccccaa93ee5e2874bfc7f9510541a57fb3cb9c8d6e75460cca3c4cca39a642eff1967dda07a66fe67d87696a5fe22a718a52cd9ba83e348ed211c1dc2e21ebd797455f0648af12c10321240058857632112a75adfdca249f26cf8d6ba05ee83d00ff8d64d8fed069dae70b79105ccd95fc9df34426d765578f651a4cba8094f46e0a9b676c0c0ebb1803660a70f5c7ad2de1ff96676c3ecacdc2953fd235856228556db20395b8d54819b7b12f56e4dddf6a7fe4f7f3d69dff022c59efb2313ae801dcb02b117f50f18eb11dd5a291a7068c820fbe381bd0697566909a38fdab0a0c48442dc935ab8447ebecb93af879a6bb82ab5f245274d873b5be4312856fe4fab8edc9575c02ba4cdb34b31323b69cfef40755bf96279460640ed9fb84d5c60d95cfd76a39726c29f5607d80090e5e3da18fd74682975dd98d98e4afdf4460e1aeb7087a18ded69310b28fa45b356fc28d1f2bef4c9dd50909076de9587fa07b966ee143ec589f70b8ac4d1320cac5bafefe640e445922090c721ce79e4e2c546cfb9b7f058932e6c83170dd2785e28ed81757ade61aa094bd042411aafe0b75156067a5790c78a44589728f1190ac0ba2f93004e06602f51fab34cc56a485569be11e0fd8c89ec3363e053dbdb6cbc69b686e89ff3730dce9099daff958f3be6e7f9ac00bddf0f133a6f904262443963aabe84b0ec9ab9209ebb0d6e81b8d30b2959bbfe5b332459310be2d8183a93ea08301b816d5b009a967916dd45b0f541c57685a6c7ef8cf715ae7fd1780f0a0da48467196e25e26fd2d5a075ad5acfa1ebec9647da21672b642ee4a908fbce416f4ed36ab5b96e5b47a0f6c7f280119567b7d54640c65ce5a0f4912690c4a3d0805e4284fb695eb3af2528f031261439506a4d3f4c2e18b736c55475828a0faf0153acf0dd89bf3c2f6525cb4bfcb419421c7696ee93bc595158a9a43bb288022122a8c45a0db060fe5e85bcc128f396f7af7006eba4e0d6e2f0802625342799bc1b98366682db90ff1be99322bc0672e07757c44173b96e659ff645d263af255d6ecd88bd9a0863006db7f674e79b0493d41a12057e36243394294b4c7850d14a988715de4b55e9f83c2f0676a8486efcc948109076361267f092315dae79164da8f832ad6f35f600b92e4a8228d39e507117c1c1b2a4a12b667538000912ea67de21bd85616cb30f95573ba748a75d2e04b493865a8711a688e33221b26f621ab3a137cf86cc9dd340bcee72f19e00de06f1e9abbe08b4cb8725c9e624f02d36c4c276a529b6e23581c348bb90a4fb1f89053aee36caca5529bad9124825860c011140744f245cd02ffe219e436bfef045517e4e41094b25cf9082692cd8e37d3893c5a90c35b808a17a6508fa7ae743740be0d984ef5ea80cee51e14b9997f86b45b97e5acf89a0a6aa962689c4f53bc7b65e5037de60fa395ed1013591caa79412108224c020d77069939391e20ee32b86139fca7eb9ca5c07fa733311fef5d5594b83ae34c6bc32f037b09995511ff9b9b611bc727055a10b808ebb8c8e5ce532046c7ad3336c38d506e0e3043c4413dc8ce0a9caadbef27d6f663b22bf8d399621ee86e52d9abd5628e3270424d8a06a79174c7de23c431224fd8d0f42853510600f9e2deb8a7bfcd324a5c6ec19cd0c9ca81c552b111a2acc4479e20439e2e3caf44c92026b5be1ad6933ed8d4de1575216c134d55171568ee64213fc4d32ca5cd7ad04b8705ecfd1b88d56294dca67efe3b1b37c7d5d170cef18997c4af074e97a98c11ec3cdc83a4ea564ebb47f02344d3ab410e25a4ad658be9bf627d49c106c1098dccf7ff62ff9f4dc997a279afdc5630ba32167a68ed7bb3bae2a8b61fca67b5b7dc5b3ef3ab679b602764da9aabf3d0caa56b278c2ab6fbee2cfdd7277402a1f82de1d97807829c0105277073772929f16d79584118f31b45ec4db29aad83693b2d9de08f417beaa2f78d55a36a824a94d1e3cfeb3d75c3d41ddd0e317e85d327e9b5a9da44dc12b6fc3acf6d222a44f59520fa3fcdc37903eca4b7a91fe14cf54b06855d204ebd71018fe767a158b5e389b5e8e136fc8960840ef1916d8e36f08260e5fc9808442e2034f2c761ae051d03fa618a5f6b8ba8cee00411d09aaa3f8fe30a5d29d9403a905403b5310355326387ea6ea72643b70fcc5bf767371878440d07be919c4ad8c4b8952ea61655bbeac50025f4cc2e859c20dfd440a0b1b14549bccaf7952a27f12266c3b7185d9f37ab405d0765011ae6dbc0717f58ec6bd4101589f5c6054faba863bd2af1e8b19cc2cee98c619e477a47497896c42c37697313917b37140a77a5afec97556f06e0ee1d87c3739bd9ff4c210ddd4eceb65701e64bf4d6cbd5d4b9786f4d45acd881fa6eb1c6fda5f8844f5a1635d05e7bb82270694efe063d44296d86b4bb8b28e573dd7cc0d379b5449af1064f10ab8e8f5f177713a63fd7ea8bb68305356c59b5b48334d568fc6d81713bf2c1438dbec4c2c793d5bcd94c459eaace9295ec5b51328fcea5c8f984d8bf90b2f9fb247ce722a1c001e6ff179524417d647b856d905976f623b2db0facf05d62a87662ddc0d6c31cadca2ec262439fdd0f5cd7788617b98bbb802ceed7f971fe6d432a49dc132fe5475db3bc61d6ff04442a9afa9078be7a15de8668cdf469697e337eb4a99b24cd89da2a36eaf4f725cfc77f5e4de3dc010c2ef1f6b22dc479544c0c4c611fe1c8ef5ed3c23ddae7cd01ae1874217f8d1001f0c5f8d2ace0ec72ef3ed9b95b72753462feaa1ff5c2d23f5ec1ccf41064895d6944f38bf7c41a091df7b8c5c5021ff7ab7571439a3d5c889aa57c715e4a55ecd77b5cb4f8bc3408d95d560f5e8ec711e81ef8a751df5d1d053822debf0295574ebfc5f1fc47caafdf8b3862d68fb01d6239fa13c026320aafdead31d003d8bd8b46842687b6", 0x2000, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x90, 0x0, 0x3, {0x3, 0x4000000000, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, &(0x7f0000006300)="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", 0x2000, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$nl_route(0x10, 0x3, 0x0) write$FUSE_INIT(r2, &(0x7f0000000e00)={0x50, 0x0, r3, {0x7, 0x28, 0x2, 0xc0200, 0x0, 0xfff9, 0x0, 0x8000}}, 0x50) syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0x0, 0x269}, &(0x7f0000000380)=0x0, &(0x7f0000000080)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) unlink(&(0x7f0000000100)='./file0/file0\x00') setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x396, @empty}, 0x1c) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setstatus(r5, 0x4, 0x42800) r6 = fanotify_init(0x200, 0x0) fanotify_mark(r6, 0x1, 0x48001059, 0xffffffffffffffff, 0x0) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) unshare(0x68040200) syz_usb_connect$uac1(0x6, 0x71, 0x0, 0x0) r7 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r7, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x34004811) getsockopt$kcm_KCM_RECV_DISABLE(r7, 0x119, 0x1, 0x0, 0x0) 460.231937ms ago: executing program 1 (id=9164): keyctl$clear(0x3, 0xfffffffffffffffd) ioctl$DRM_IOCTL_MODE_ADDFB(0xffffffffffffffff, 0xc01c64ae, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000240)=@req3={0x1000, 0x1, 0x1000, 0x1, 0x7ff, 0xf84, 0x3}, 0x1c) syz_emit_ethernet(0x4e, &(0x7f0000000180)={@random="5b685c7e778f", @multicast, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, '\x00', 0x18, 0x11, 0x0, @local, @mcast2, {[], {0x4e1d, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x4, 0x1}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000880)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "e800", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x14, 0x1}}}}}}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000240)={0x14, 0x2, 0x6, 0x801}, 0x14}, 0x1, 0x0, 0x0, 0xc0d1}, 0x0) 271.351269ms ago: executing program 1 (id=9189): openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) r2 = openat$ttynull(0xffffff9c, &(0x7f0000000040), 0x800, 0x0) ioctl$VT_RELDISP(r2, 0x5605) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) add_key(&(0x7f00000000c0)='rxrpc\x00', 0x0, &(0x7f0000000340)="6debb6c01d255ba96eef31463a476841c4374d9f343464c4f9ba1cc36ab0ce60ae6b83d5e3da9753993296d3a707e329ed92d9c2f869b6feeac8a2b87fcf42f04b82b47c2e2934d0f43c695a44f1abb9bab9f17730eef2ec45e52b4ef7d95b82712831948692c25e028704c4c8f8dd9752ce20811058a5aa0dfe2b1403ec", 0x7e, 0xffffffffffffffff) setsockopt$inet_int(r3, 0x0, 0x1, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0501ffffffff0a0000002e00000008001300", @ANYRES32=r6, @ANYBLOB="0a00340002020202020200000c00490006ac0f0009ac0f00"], 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x4004050) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x32c180) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) r7 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}}) r8 = socket$kcm(0x10, 0x2, 0x0) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCADDRT(r9, 0x890b, &(0x7f0000000200)={@initdev={0xfe, 0x88, '\x00', 0xff, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xa, 0x0, 0x6, 0x0, 0x4000000000000009, 0x10200}) sendmsg$kcm(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a00100000000280", 0x2a}, {&(0x7f0000000400)="6a6f8e5e", 0x4}], 0x2}, 0x0) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602240000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 63.888307ms ago: executing program 9 (id=9190): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r1, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'vlan1\x00'}) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x32, 0x0, 0x0, 0xb49, 0x9, 0xc, 0x0, 0x3}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x2) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) syz_emit_ethernet(0x4a, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000008004afa003c0064000007069078ac1414bbac1414bb44140871ac141440000000eae0000002000000024e224e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50c20012907800e7"], 0x0) write(r1, &(0x7f00000000c0), 0x0) r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x109142, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r5, 0xc0045009, &(0x7f0000000100)=0xfffffffd) lstat(0x0, 0x0) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r6) getpgid(r6) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="28000000400009000000000000000000020000000c1401000500feffffffffffffffcb0007000000adb2df9b30ef3a9a491e0d6306ebb7848b0f3385135cea8f25c7bd60d2c3f6"], 0x28}}, 0x20004840) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r7, 0x0, 0xca, &(0x7f0000000140)={0x5, 0x1, 0xc, 0x2, @vifc_lcl_addr=@rand_addr=0x64010102, @broadcast}, 0x10) setsockopt$MRT_FLUSH(r7, 0x0, 0xd4, &(0x7f0000000040)=0x8, 0x4) fstat(r7, &(0x7f0000000080)) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) 0s ago: executing program 6 (id=9191): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e22, 0xc, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x3}, 0x1c) r1 = fcntl$dupfd(r0, 0x406, r0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000380)=0x10, 0x1c) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[], 0x56c}, 0x1, 0x0, 0x0, 0x200440d1}, 0x800e885) read$FUSE(r1, &(0x7f00000036c0)={0x2020}, 0x2020) shutdown(r1, 0x1) kernel console output (not intermixed with test programs): t_files+0x2a/0x420 [ 2578.534146][ T4973] ? __fget_files+0x3a0/0x420 [ 2578.534170][ T4973] ? __fget_files+0x2a/0x420 [ 2578.534206][ T4973] ksys_read+0x145/0x250 [ 2578.534228][ T4973] ? __pfx_ksys_read+0x10/0x10 [ 2578.534253][ T4973] ? __do_fast_syscall_32+0xbe/0x590 [ 2578.534280][ T4973] __do_fast_syscall_32+0x1f7/0x590 [ 2578.534304][ T4973] ? rcu_is_watching+0x15/0xb0 [ 2578.534325][ T4973] ? do_fast_syscall_32+0x34/0x80 [ 2578.534352][ T4973] do_fast_syscall_32+0x34/0x80 [ 2578.534376][ T4973] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2578.534401][ T4973] RIP: 0023:0xf7f84539 [ 2578.534419][ T4973] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2578.534436][ T4973] RSP: 002b:00000000f5476590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 2578.534458][ T4973] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00000000f5476620 [ 2578.534471][ T4973] RDX: 000000000000000f RSI: 00000000f7416ff4 RDI: 0000000000000000 [ 2578.534484][ T4973] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 2578.534495][ T4973] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2578.534507][ T4973] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2578.534540][ T4973] [ 2578.804535][T21643] usb 3-1: USB disconnect, device number 54 [ 2579.026039][ T4978] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2579.107280][ T891] usb 10-1: new high-speed USB device number 56 using dummy_hcd [ 2579.267361][ T891] usb 10-1: Using ep0 maxpacket: 32 [ 2579.274632][ T891] usb 10-1: config 2 has an invalid interface number: 194 but max is 0 [ 2579.277314][T21643] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 2579.297864][ T891] usb 10-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 2579.337219][ T891] usb 10-1: config 2 has no interface number 0 [ 2579.343533][ T891] usb 10-1: config 2 interface 194 altsetting 0 endpoint 0xA has invalid maxpacket 1584, setting to 1024 [ 2579.366023][ T891] usb 10-1: config 2 interface 194 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 2579.380464][ T891] usb 10-1: New USB device found, idVendor=0499, idProduct=1025, bcdDevice=9c.f6 [ 2579.390069][ T891] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2579.404987][ T4975] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 2579.437276][T21643] usb 3-1: Using ep0 maxpacket: 8 [ 2579.459256][T21643] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2579.483880][T21643] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2579.502260][T21643] usb 3-1: Product: syz [ 2579.506507][T21643] usb 3-1: Manufacturer: syz [ 2579.534153][T21643] usb 3-1: SerialNumber: syz [ 2579.673944][ T4975] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2579.693675][ T4975] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2579.731034][ T891] usb 10-1: string descriptor 0 read error: -71 [ 2579.752710][ T891] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 2579.786432][T21643] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 55 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 2579.906157][ T891] usb 10-1: USB disconnect, device number 56 [ 2580.146111][ T5000] FAULT_INJECTION: forcing a failure. [ 2580.146111][ T5000] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2580.160047][ T5000] CPU: 0 UID: 0 PID: 5000 Comm: syz.8.8982 Tainted: G L syzkaller #0 PREEMPT(full) [ 2580.160079][ T5000] Tainted: [L]=SOFTLOCKUP [ 2580.160087][ T5000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2580.160098][ T5000] Call Trace: [ 2580.160104][ T5000] [ 2580.160109][ T5000] dump_stack_lvl+0x189/0x250 [ 2580.160130][ T5000] ? __pfx____ratelimit+0x10/0x10 [ 2580.160144][ T5000] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2580.160157][ T5000] ? __pfx__printk+0x10/0x10 [ 2580.160174][ T5000] ? __might_fault+0xb0/0x130 [ 2580.160198][ T5000] should_fail_ex+0x414/0x560 [ 2580.160220][ T5000] _copy_from_user+0x2d/0xb0 [ 2580.160235][ T5000] ucma_write+0x158/0x2e0 [ 2580.160252][ T5000] ? __pfx_ucma_write+0x10/0x10 [ 2580.160264][ T5000] ? security_file_permission+0x75/0x290 [ 2580.160278][ T5000] ? rw_verify_area+0x255/0x4d0 [ 2580.160290][ T5000] ? __pfx_ucma_write+0x10/0x10 [ 2580.160303][ T5000] vfs_write+0x27e/0xb30 [ 2580.160320][ T5000] ? __pfx_vfs_write+0x10/0x10 [ 2580.160332][ T5000] ? __fget_files+0x2a/0x420 [ 2580.160349][ T5000] ? __fget_files+0x2a/0x420 [ 2580.160362][ T5000] ? __fget_files+0x3a0/0x420 [ 2580.160375][ T5000] ? __fget_files+0x2a/0x420 [ 2580.160394][ T5000] ksys_write+0x145/0x250 [ 2580.160407][ T5000] ? __pfx_ksys_write+0x10/0x10 [ 2580.160421][ T5000] ? __do_fast_syscall_32+0xbe/0x590 [ 2580.160437][ T5000] __do_fast_syscall_32+0x1f7/0x590 [ 2580.160450][ T5000] ? rcu_is_watching+0x15/0xb0 [ 2580.160464][ T5000] ? do_fast_syscall_32+0x34/0x80 [ 2580.160479][ T5000] do_fast_syscall_32+0x34/0x80 [ 2580.160493][ T5000] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2580.160507][ T5000] RIP: 0023:0xf708d539 [ 2580.160519][ T5000] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2580.160529][ T5000] RSP: 002b:00000000f547d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 2580.160543][ T5000] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000180 [ 2580.160552][ T5000] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000000 [ 2580.160559][ T5000] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2580.160566][ T5000] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2580.160573][ T5000] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2580.160591][ T5000] [ 2580.513558][T21643] usb 3-1: USB disconnect, device number 55 [ 2580.532545][T21643] usblp0: removed [ 2580.967402][ T891] usb 10-1: new full-speed USB device number 57 using dummy_hcd [ 2580.975240][T21645] usb 9-1: new high-speed USB device number 97 using dummy_hcd [ 2581.037277][ T5835] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 2581.061844][ T5019] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3516746025 (3516746025 ns) > initial count (356247244 ns). Using initial count to start timer. [ 2581.142491][ T891] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2581.157374][ T891] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2581.174193][ T891] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2581.184150][ T891] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2581.207304][ T5835] usb 6-1: Using ep0 maxpacket: 32 [ 2581.216503][T21645] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2581.252152][T21645] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2581.283398][T21645] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 2581.322285][T21645] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2581.350367][ T5835] usb 6-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 2581.367462][ T5835] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2581.375742][T21645] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2581.385405][ T5835] usb 6-1: Product: syz [ 2581.390146][T21645] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2581.398255][ T5835] usb 6-1: Manufacturer: syz [ 2581.403580][ T5835] usb 6-1: SerialNumber: syz [ 2581.414059][T21645] usb 9-1: config 0 descriptor?? [ 2581.429748][ T5835] usb 6-1: config 0 descriptor?? [ 2581.436457][ T891] usb 10-1: GET_CAPABILITIES returned 0 [ 2581.467569][ T891] usbtmc 10-1:16.0: can't read capabilities [ 2581.482861][ T5835] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 2581.648629][ T891] usb 10-1: USB disconnect, device number 57 [ 2582.246380][T21645] plantronics 0003:047F:FFFF.00EC: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 2582.329065][ T5024] FAULT_INJECTION: forcing a failure. [ 2582.329065][ T5024] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2582.365989][ T5024] CPU: 0 UID: 0 PID: 5024 Comm: syz.9.8992 Tainted: G L syzkaller #0 PREEMPT(full) [ 2582.366022][ T5024] Tainted: [L]=SOFTLOCKUP [ 2582.366029][ T5024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2582.366039][ T5024] Call Trace: [ 2582.366048][ T5024] [ 2582.366057][ T5024] dump_stack_lvl+0x189/0x250 [ 2582.366085][ T5024] ? __pfx____ratelimit+0x10/0x10 [ 2582.366104][ T5024] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2582.366124][ T5024] ? __pfx__printk+0x10/0x10 [ 2582.366161][ T5024] should_fail_ex+0x414/0x560 [ 2582.366192][ T5024] _copy_to_user+0x31/0xb0 [ 2582.366218][ T5024] simple_read_from_buffer+0xe1/0x170 [ 2582.366245][ T5024] proc_fail_nth_read+0x1b3/0x220 [ 2582.366268][ T5024] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2582.366290][ T5024] ? rw_verify_area+0x2a6/0x4d0 [ 2582.366306][ T5024] ? tun_chr_write_iter+0x18a/0x200 [ 2582.366325][ T5024] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2582.366347][ T5024] vfs_read+0x200/0xa30 [ 2582.366363][ T5024] ? fdget_pos+0x247/0x320 [ 2582.366388][ T5024] ? __pfx___mutex_lock+0x10/0x10 [ 2582.366409][ T5024] ? __pfx_vfs_read+0x10/0x10 [ 2582.366429][ T5024] ? __fget_files+0x2a/0x420 [ 2582.366459][ T5024] ? __fget_files+0x3a0/0x420 [ 2582.366479][ T5024] ? __fget_files+0x2a/0x420 [ 2582.366513][ T5024] ksys_read+0x145/0x250 [ 2582.366531][ T5024] ? exc_page_fault+0x82/0x100 [ 2582.366553][ T5024] ? __pfx_ksys_read+0x10/0x10 [ 2582.366577][ T5024] ? __do_fast_syscall_32+0xbe/0x590 [ 2582.366602][ T5024] __do_fast_syscall_32+0x1f7/0x590 [ 2582.366623][ T5024] ? rcu_is_watching+0x15/0xb0 [ 2582.366645][ T5024] ? do_fast_syscall_32+0x34/0x80 [ 2582.366673][ T5024] do_fast_syscall_32+0x34/0x80 [ 2582.366695][ T5024] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2582.366730][ T5024] RIP: 0023:0xf7f84539 [ 2582.366757][ T5024] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2582.366774][ T5024] RSP: 002b:00000000f5476590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 2582.366797][ T5024] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f5476620 [ 2582.366811][ T5024] RDX: 000000000000000f RSI: 00000000f7416ff4 RDI: 0000000000000000 [ 2582.366823][ T5024] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 2582.366835][ T5024] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2582.366848][ T5024] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2582.366882][ T5024] [ 2582.711346][ T4874] Bluetooth: hci0: command 0x0406 tx timeout [ 2582.847419][T21643] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 2582.863696][ T5014] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2582.874577][ T5014] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2582.972070][ T5035] FAULT_INJECTION: forcing a failure. [ 2582.972070][ T5035] name failslab, interval 1, probability 0, space 0, times 0 [ 2582.986172][ T5035] CPU: 0 UID: 0 PID: 5035 Comm: syz.6.8994 Tainted: G L syzkaller #0 PREEMPT(full) [ 2582.986204][ T5035] Tainted: [L]=SOFTLOCKUP [ 2582.986211][ T5035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2582.986223][ T5035] Call Trace: [ 2582.986232][ T5035] [ 2582.986241][ T5035] dump_stack_lvl+0x189/0x250 [ 2582.986268][ T5035] ? __pfx____ratelimit+0x10/0x10 [ 2582.986287][ T5035] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2582.986308][ T5035] ? __pfx__printk+0x10/0x10 [ 2582.986337][ T5035] ? __pfx___might_resched+0x10/0x10 [ 2582.986358][ T5035] ? fs_reclaim_acquire+0x7d/0x100 [ 2582.986384][ T5035] should_fail_ex+0x414/0x560 [ 2582.986417][ T5035] should_failslab+0xa8/0x100 [ 2582.986440][ T5035] kmem_cache_alloc_node_noprof+0x8c/0x720 [ 2582.986469][ T5035] ? __alloc_skb+0x255/0x430 [ 2582.986486][ T5035] ? napi_skb_cache_get+0x4a5/0x780 [ 2582.986504][ T5035] ? napi_skb_cache_get+0x151/0x780 [ 2582.986529][ T5035] __alloc_skb+0x255/0x430 [ 2582.986552][ T5035] ? __pfx___alloc_skb+0x10/0x10 [ 2582.986575][ T5035] ? netlink_autobind+0xdb/0x300 [ 2582.986600][ T5035] ? netlink_autobind+0x2c2/0x300 [ 2582.986629][ T5035] netlink_sendmsg+0x5c6/0xb30 [ 2582.986663][ T5035] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2582.986691][ T5035] ? __import_iovec+0x5d4/0x7f0 [ 2582.986711][ T5035] ? aa_sock_msg_perm+0xf1/0x1b0 [ 2582.986738][ T5035] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2582.986756][ T5035] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2582.986779][ T5035] __sock_sendmsg+0x21c/0x270 [ 2582.986811][ T5035] ____sys_sendmsg+0x505/0x820 [ 2582.986840][ T5035] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2582.986869][ T5035] ? kstrtouint+0x6e/0xe0 [ 2582.986905][ T5035] ___sys_sendmsg+0x21f/0x2a0 [ 2582.986929][ T5035] ? __pfx____sys_sendmsg+0x10/0x10 [ 2582.986959][ T5035] ? rcu_read_lock_any_held+0xb3/0x120 [ 2582.987020][ T5035] ? __fget_files+0x2a/0x420 [ 2582.987042][ T5035] ? __fget_files+0x3a0/0x420 [ 2582.987075][ T5035] __sys_sendmsg+0x164/0x220 [ 2582.987105][ T5035] ? __pfx___sys_sendmsg+0x10/0x10 [ 2582.987136][ T5035] ? __pfx_ksys_write+0x10/0x10 [ 2582.987159][ T5035] ? __do_fast_syscall_32+0xbe/0x590 [ 2582.987185][ T5035] __do_fast_syscall_32+0x1f7/0x590 [ 2582.987206][ T5035] ? rcu_is_watching+0x15/0xb0 [ 2582.987226][ T5035] ? do_fast_syscall_32+0x34/0x80 [ 2582.987252][ T5035] do_fast_syscall_32+0x34/0x80 [ 2582.987273][ T5035] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2582.987296][ T5035] RIP: 0023:0xf70ad539 [ 2582.987316][ T5035] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2582.987332][ T5035] RSP: 002b:00000000f549d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 2582.987353][ T5035] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 2582.987367][ T5035] RDX: 000000000000c000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2582.987379][ T5035] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2582.987390][ T5035] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2582.987403][ T5035] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2582.987436][ T5035] [ 2583.000861][ T312] usb 9-1: USB disconnect, device number 97 [ 2583.031313][T21643] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 2583.237618][ T5835] gspca_ov534_9: reg_w failed -110 [ 2583.399607][ T5037] macvlan2: entered promiscuous mode [ 2583.405958][ T5037] bridge0: entered promiscuous mode [ 2583.466680][T21643] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2583.477577][T21643] usb 3-1: Product: syz [ 2583.483544][T21643] usb 3-1: Manufacturer: syz [ 2583.490493][T21643] usb 3-1: SerialNumber: syz [ 2583.582993][ T30] kauditd_printk_skb: 43 callbacks suppressed [ 2583.583282][ T30] audit: type=1326 audit(1766292925.728:3704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5043 comm="syz.9.8998" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f84539 code=0x7ffc0000 [ 2583.613525][ T30] audit: type=1326 audit(1766292925.728:3705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5043 comm="syz.9.8998" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f84539 code=0x7ffc0000 [ 2583.636336][ T30] audit: type=1326 audit(1766292925.758:3706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5043 comm="syz.9.8998" exe="/root/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf7f84539 code=0x7ffc0000 [ 2583.661218][ T30] audit: type=1326 audit(1766292925.758:3707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5043 comm="syz.9.8998" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f84539 code=0x7ffc0000 [ 2583.687242][ T5835] gspca_ov534_9: Unknown sensor 0000 [ 2583.687353][ T5835] ov534_9 6-1:0.0: probe with driver ov534_9 failed with error -22 [ 2583.687923][ T30] audit: type=1326 audit(1766292925.758:3708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5043 comm="syz.9.8998" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f84539 code=0x7ffc0000 [ 2583.729567][T21643] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 2583.741902][T21643] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -32 [ 2583.753579][ T30] audit: type=1326 audit(1766292925.778:3709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5043 comm="syz.9.8998" exe="/root/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf7f84539 code=0x7ffc0000 [ 2583.776296][T21643] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 2583.789448][T21643] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -32 [ 2583.925126][ T30] audit: type=1326 audit(1766292926.068:3710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5043 comm="syz.9.8998" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f84539 code=0x7ffc0000 [ 2583.956576][ T30] audit: type=1326 audit(1766292926.068:3711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5043 comm="syz.9.8998" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f84539 code=0x7ffc0000 [ 2584.003809][ T5835] usb 6-1: USB disconnect, device number 38 [ 2584.136975][ T30] audit: type=1326 audit(1766292926.278:3712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5043 comm="syz.9.8998" exe="/root/syz-executor" sig=0 arch=40000003 syscall=132 compat=1 ip=0xf7f84539 code=0x7ffc0000 [ 2584.172924][ T30] audit: type=1326 audit(1766292926.278:3713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5043 comm="syz.9.8998" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f84539 code=0x7ffc0000 [ 2584.509453][ T5835] usb 6-1: new full-speed USB device number 39 using dummy_hcd [ 2584.680965][ T5835] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2584.700717][ T5835] usb 6-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 2584.712428][ T5835] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2584.722748][ T5061] ptrace attach of "./syz-executor exec"[28474] was attempted by "./syz-executor exec"[5061] [ 2584.731189][ T5835] usb 6-1: Product: syz [ 2584.741446][ T5835] usb 6-1: Manufacturer: syz [ 2584.746092][ T5835] usb 6-1: SerialNumber: syz [ 2584.752906][ T5835] usb 6-1: config 0 descriptor?? [ 2584.768612][ T5835] streamzap 6-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0) [ 2585.234158][ T5068] FAULT_INJECTION: forcing a failure. [ 2585.234158][ T5068] name failslab, interval 1, probability 0, space 0, times 0 [ 2585.247662][ T5068] CPU: 1 UID: 0 PID: 5068 Comm: syz.8.9002 Tainted: G L syzkaller #0 PREEMPT(full) [ 2585.247684][ T5068] Tainted: [L]=SOFTLOCKUP [ 2585.247688][ T5068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2585.247696][ T5068] Call Trace: [ 2585.247702][ T5068] [ 2585.247708][ T5068] dump_stack_lvl+0x189/0x250 [ 2585.247727][ T5068] ? __pfx____ratelimit+0x10/0x10 [ 2585.247740][ T5068] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2585.247754][ T5068] ? __pfx__printk+0x10/0x10 [ 2585.247793][ T5068] ? __pfx___might_resched+0x10/0x10 [ 2585.247815][ T5068] ? fs_reclaim_acquire+0x7d/0x100 [ 2585.247842][ T5068] should_fail_ex+0x414/0x560 [ 2585.247868][ T5068] should_failslab+0xa8/0x100 [ 2585.247883][ T5068] kmem_cache_alloc_node_noprof+0x8c/0x720 [ 2585.247901][ T5068] ? __alloc_skb+0x255/0x430 [ 2585.247912][ T5068] ? napi_skb_cache_get+0x4a5/0x780 [ 2585.247926][ T5068] ? napi_skb_cache_get+0x151/0x780 [ 2585.247949][ T5068] __alloc_skb+0x255/0x430 [ 2585.247972][ T5068] ? __pfx___alloc_skb+0x10/0x10 [ 2585.247998][ T5068] ? __raw_spin_lock_init+0x45/0x100 [ 2585.248024][ T5068] audit_log_start+0x1ad/0xa20 [ 2585.248040][ T5068] ? __pfx_audit_log_start+0x10/0x10 [ 2585.248053][ T5068] ? get_pid_task+0x20/0x1f0 [ 2585.248071][ T5068] ? __pfx___cant_migrate+0x10/0x10 [ 2585.248087][ T5068] audit_seccomp+0x64/0x190 [ 2585.248098][ T5068] ? clear_bhb_loop+0x60/0xb0 [ 2585.248109][ T5068] ? clear_bhb_loop+0xe/0xb0 [ 2585.248123][ T5068] __seccomp_filter+0xcf0/0x1e20 [ 2585.248140][ T5068] ? ksys_write+0x1cb/0x250 [ 2585.248152][ T5068] ? __pfx___seccomp_filter+0x10/0x10 [ 2585.248164][ T5068] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 2585.248177][ T5068] ? __pfx_vfs_write+0x10/0x10 [ 2585.248190][ T5068] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2585.248205][ T5068] ? __fget_files+0x3a0/0x420 [ 2585.248226][ T5068] ? ksys_write+0x22a/0x250 [ 2585.248236][ T5068] ? exc_page_fault+0x82/0x100 [ 2585.248250][ T5068] ? __secure_computing+0xe2/0x2a0 [ 2585.248263][ T5068] syscall_trace_enter+0xaa/0x160 [ 2585.248278][ T5068] __do_fast_syscall_32+0x1da/0x590 [ 2585.248292][ T5068] ? rcu_is_watching+0x15/0xb0 [ 2585.248305][ T5068] ? do_fast_syscall_32+0x34/0x80 [ 2585.248321][ T5068] do_fast_syscall_32+0x34/0x80 [ 2585.248334][ T5068] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2585.248347][ T5068] RIP: 0023:0xf708d539 [ 2585.248360][ T5068] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2585.248370][ T5068] RSP: 002b:00000000f547d55c EFLAGS: 00000206 ORIG_RAX: 000000000000009b [ 2585.248383][ T5068] RAX: ffffffffffffffda RBX: 0000000000000566 RCX: 0000000080000200 [ 2585.248392][ T5068] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2585.248399][ T5068] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2585.248406][ T5068] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2585.248412][ T5068] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2585.248430][ T5068] [ 2585.628246][T21643] usb 3-1: USB disconnect, device number 56 [ 2585.933760][ T5080] netlink: 4 bytes leftover after parsing attributes in process `syz.9.9006'. [ 2586.027419][T21643] usb 9-1: new high-speed USB device number 98 using dummy_hcd [ 2586.189063][T16131] usb 3-1: new full-speed USB device number 57 using dummy_hcd [ 2586.258131][T21643] usb 9-1: Using ep0 maxpacket: 16 [ 2586.282265][T21643] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2586.304441][T21643] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2586.397015][T21643] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2586.419447][T21643] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2586.436885][T21643] usb 9-1: Product: syz [ 2586.446377][T21643] usb 9-1: Manufacturer: syz [ 2586.495141][T21643] usb 9-1: SerialNumber: syz [ 2587.436429][T22806] usb 6-1: USB disconnect, device number 39 [ 2588.213713][T22806] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 2588.526645][T21643] usb 9-1: 0:2 : does not exist [ 2588.744323][T22806] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 2588.758694][T22806] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2588.767581][T22806] usb 6-1: Product: syz [ 2588.771837][T22806] usb 6-1: Manufacturer: syz [ 2588.776455][T22806] usb 6-1: SerialNumber: syz [ 2588.785793][T21643] usb 9-1: 5:0: failed to get current value for ch 0 (-22) [ 2588.840014][T21643] usb 9-1: USB disconnect, device number 98 [ 2588.890521][T24299] udevd[24299]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2588.981101][T16131] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 2588.989532][T16131] usb 3-1: can't read configurations, error -71 [ 2589.201885][T22806] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 2589.213829][T22806] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 2589.765613][ T5104] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 2590.159609][T21643] usb 10-1: new high-speed USB device number 58 using dummy_hcd [ 2590.276874][ T5110] FAULT_INJECTION: forcing a failure. [ 2590.276874][ T5110] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2590.315918][ T5110] CPU: 1 UID: 0 PID: 5110 Comm: syz.8.9015 Tainted: G L syzkaller #0 PREEMPT(full) [ 2590.315964][ T5110] Tainted: [L]=SOFTLOCKUP [ 2590.315973][ T5110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2590.315986][ T5110] Call Trace: [ 2590.315995][ T5110] [ 2590.316006][ T5110] dump_stack_lvl+0x189/0x250 [ 2590.316038][ T5110] ? __pfx____ratelimit+0x10/0x10 [ 2590.316062][ T5110] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2590.316088][ T5110] ? __pfx__printk+0x10/0x10 [ 2590.316118][ T5110] ? __might_fault+0xb0/0x130 [ 2590.316162][ T5110] should_fail_ex+0x414/0x560 [ 2590.316201][ T5110] _copy_from_user+0x2d/0xb0 [ 2590.316227][ T5110] kstrtouint_from_user+0xc4/0x170 [ 2590.316253][ T5110] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 2590.316294][ T5110] proc_fail_nth_write+0x88/0x200 [ 2590.316318][ T5110] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 2590.316345][ T5110] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 2590.316369][ T5110] vfs_write+0x27e/0xb30 [ 2590.316401][ T5110] ? __pfx_vfs_write+0x10/0x10 [ 2590.316424][ T5110] ? __fget_files+0x2a/0x420 [ 2590.316457][ T5110] ? __fget_files+0x3a0/0x420 [ 2590.316482][ T5110] ? __fget_files+0x2a/0x420 [ 2590.316515][ T5110] ksys_write+0x145/0x250 [ 2590.316541][ T5110] ? __pfx_ksys_write+0x10/0x10 [ 2590.316567][ T5110] ? __do_fast_syscall_32+0xbe/0x590 [ 2590.316596][ T5110] __do_fast_syscall_32+0x1f7/0x590 [ 2590.316621][ T5110] ? rcu_is_watching+0x15/0xb0 [ 2590.316645][ T5110] ? do_fast_syscall_32+0x34/0x80 [ 2590.316676][ T5110] do_fast_syscall_32+0x34/0x80 [ 2590.316699][ T5110] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2590.316724][ T5110] RIP: 0023:0xf708d539 [ 2590.316743][ T5110] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2590.316761][ T5110] RSP: 002b:00000000f547d590 EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 2590.316783][ T5110] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000f547d620 [ 2590.316798][ T5110] RDX: 0000000000000001 RSI: 00000000f7426ff4 RDI: 0000000000000000 [ 2590.316812][ T5110] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 2590.316825][ T5110] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2590.316837][ T5110] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2590.316872][ T5110] [ 2590.389780][T21643] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 2590.564658][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 2590.571099][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 2590.582360][T21643] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 2590.592458][T21643] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 2590.602839][T21643] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 2590.614060][T21643] usb 10-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 2590.623846][T21643] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2590.638257][T21643] usb 10-1: config 0 descriptor?? [ 2590.775311][T22806] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x0000011c. ret = -EPROTO [ 2590.817288][T22806] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 2590.855772][T22806] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 2590.879349][T22806] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71 [ 2590.886462][ T5124] syzkaller0: entered promiscuous mode [ 2590.889188][T21643] hdpvr 10-1:0.0: unexpected answer of status request, len 0 [ 2590.893179][ T5124] syzkaller0: entered allmulticast mode [ 2590.911611][T21643] hdpvr 10-1:0.0: device init failed [ 2590.919700][ T5123] FAULT_INJECTION: forcing a failure. [ 2590.919700][ T5123] name failslab, interval 1, probability 0, space 0, times 0 [ 2590.947512][T22806] usb 6-1: USB disconnect, device number 40 [ 2590.953881][T21643] hdpvr 10-1:0.0: probe with driver hdpvr failed with error -12 [ 2590.967181][ T5123] CPU: 0 UID: 0 PID: 5123 Comm: syz.5.9019 Tainted: G L syzkaller #0 PREEMPT(full) [ 2590.967215][ T5123] Tainted: [L]=SOFTLOCKUP [ 2590.967223][ T5123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2590.967234][ T5123] Call Trace: [ 2590.967244][ T5123] [ 2590.967253][ T5123] dump_stack_lvl+0x189/0x250 [ 2590.967284][ T5123] ? __pfx____ratelimit+0x10/0x10 [ 2590.967306][ T5123] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2590.967329][ T5123] ? __pfx__printk+0x10/0x10 [ 2590.967360][ T5123] ? __pfx___might_resched+0x10/0x10 [ 2590.967382][ T5123] ? fs_reclaim_acquire+0x7d/0x100 [ 2590.967411][ T5123] should_fail_ex+0x414/0x560 [ 2590.967446][ T5123] should_failslab+0xa8/0x100 [ 2590.967473][ T5123] __kmalloc_cache_noprof+0x84/0x700 [ 2590.967493][ T5123] ? snd_pcm_oss_change_params_locked+0x1fe/0x3f70 [ 2590.967531][ T5123] snd_pcm_oss_change_params_locked+0x1fe/0x3f70 [ 2590.967565][ T5123] ? __mutex_trylock_common+0x153/0x260 [ 2590.967592][ T5123] ? __pfx___mutex_trylock_common+0x10/0x10 [ 2590.967621][ T5123] ? rcu_is_watching+0x15/0xb0 [ 2590.967645][ T5123] ? trace_contention_end+0x39/0x100 [ 2590.967684][ T5123] ? aa_file_perm+0x139/0x1530 [ 2590.967711][ T5123] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 2590.967738][ T5123] ? aa_file_perm+0x139/0x1530 [ 2590.967764][ T5123] ? aa_file_perm+0x44c/0x1530 [ 2590.967789][ T5123] ? snd_pcm_oss_write+0x264/0xf20 [ 2590.967816][ T5123] ? _parse_integer_limit+0x1ae/0x1f0 [ 2590.967867][ T5123] snd_pcm_oss_make_ready_locked+0x7d/0x300 [ 2590.967901][ T5123] snd_pcm_oss_write+0x281/0xf20 [ 2590.967945][ T5123] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 2590.967975][ T5123] ? bpf_lsm_file_permission+0x9/0x20 [ 2590.967996][ T5123] ? security_file_permission+0x75/0x290 [ 2590.968018][ T5123] ? rw_verify_area+0x255/0x4d0 [ 2590.968037][ T5123] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 2590.968067][ T5123] vfs_write+0x27e/0xb30 [ 2590.968097][ T5123] ? __pfx_vfs_write+0x10/0x10 [ 2590.968119][ T5123] ? __fget_files+0x2a/0x420 [ 2590.968147][ T5123] ? __fget_files+0x2a/0x420 [ 2590.968168][ T5123] ? __fget_files+0x3a0/0x420 [ 2590.968190][ T5123] ? __fget_files+0x2a/0x420 [ 2590.968225][ T5123] ksys_write+0x145/0x250 [ 2590.968246][ T5123] ? __pfx_ksys_write+0x10/0x10 [ 2590.968269][ T5123] ? __do_fast_syscall_32+0xbe/0x590 [ 2590.968294][ T5123] __do_fast_syscall_32+0x1f7/0x590 [ 2590.968314][ T5123] ? rcu_is_watching+0x15/0xb0 [ 2590.968335][ T5123] ? do_fast_syscall_32+0x34/0x80 [ 2590.968364][ T5123] do_fast_syscall_32+0x34/0x80 [ 2590.968386][ T5123] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2590.968411][ T5123] RIP: 0023:0xf704d539 [ 2590.968429][ T5123] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2590.968448][ T5123] RSP: 002b:00000000f543d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 2590.968471][ T5123] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000180 [ 2590.968485][ T5123] RDX: 00000000fffffe76 RSI: 0000000000000000 RDI: 0000000000000000 [ 2590.968498][ T5123] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2590.968510][ T5123] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2590.968523][ T5123] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2590.968556][ T5123] [ 2591.322318][ T5105] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2591.386420][ T5105] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2591.546138][ T312] usb 10-1: USB disconnect, device number 58 [ 2591.583681][ T5129] FAULT_INJECTION: forcing a failure. [ 2591.583681][ T5129] name failslab, interval 1, probability 0, space 0, times 0 [ 2591.597291][ T5129] CPU: 1 UID: 0 PID: 5129 Comm: syz.6.9021 Tainted: G L syzkaller #0 PREEMPT(full) [ 2591.597322][ T5129] Tainted: [L]=SOFTLOCKUP [ 2591.597330][ T5129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2591.597342][ T5129] Call Trace: [ 2591.597350][ T5129] [ 2591.597359][ T5129] dump_stack_lvl+0x189/0x250 [ 2591.597387][ T5129] ? __pfx____ratelimit+0x10/0x10 [ 2591.597408][ T5129] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2591.597430][ T5129] ? __pfx__printk+0x10/0x10 [ 2591.597458][ T5129] ? __pfx___might_resched+0x10/0x10 [ 2591.597474][ T5129] ? fs_reclaim_acquire+0x7d/0x100 [ 2591.597489][ T5129] should_fail_ex+0x414/0x560 [ 2591.597510][ T5129] should_failslab+0xa8/0x100 [ 2591.597525][ T5129] __kmalloc_cache_noprof+0x84/0x700 [ 2591.597537][ T5129] ? _copy_from_user+0x94/0xb0 [ 2591.597551][ T5129] ? __se_sys_mount+0x166/0x410 [ 2591.597564][ T5129] ? memdup_user+0x99/0xd0 [ 2591.597580][ T5129] __se_sys_mount+0x166/0x410 [ 2591.597598][ T5129] ? __pfx___se_sys_mount+0x10/0x10 [ 2591.597614][ T5129] ? __do_fast_syscall_32+0xbe/0x590 [ 2591.597627][ T5129] ? __ia32_sys_mount+0x20/0xc0 [ 2591.597642][ T5129] __do_fast_syscall_32+0x1f7/0x590 [ 2591.597656][ T5129] ? rcu_is_watching+0x15/0xb0 [ 2591.597668][ T5129] ? do_fast_syscall_32+0x34/0x80 [ 2591.597684][ T5129] do_fast_syscall_32+0x34/0x80 [ 2591.597697][ T5129] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2591.597711][ T5129] RIP: 0023:0xf70ad539 [ 2591.597723][ T5129] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2591.597734][ T5129] RSP: 002b:00000000f547c55c EFLAGS: 00000206 ORIG_RAX: 0000000000000015 [ 2591.597748][ T5129] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00000000800020c0 [ 2591.597757][ T5129] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000080000040 [ 2591.597764][ T5129] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2591.597771][ T5129] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2591.597778][ T5129] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2591.597795][ T5129] [ 2592.247338][ T312] usb 9-1: new full-speed USB device number 99 using dummy_hcd [ 2593.161425][ T312] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2593.185465][ T312] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2593.236635][ T312] usb 9-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 2593.282397][ T312] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2593.326972][ T5161] netlink: 4 bytes leftover after parsing attributes in process `syz.9.9029'. [ 2593.366268][ T312] usb 9-1: config 0 descriptor?? [ 2594.061458][ T5167] futex_wake_op: syz.2.9031 tries to shift op by -1; fix this program [ 2594.408739][ T312] isku 0003:1E7D:319C.00ED: unknown main item tag 0x0 [ 2594.418574][ T312] isku 0003:1E7D:319C.00ED: unknown main item tag 0x0 [ 2594.429511][ T312] isku 0003:1E7D:319C.00ED: unknown main item tag 0x0 [ 2594.461807][ T312] isku 0003:1E7D:319C.00ED: unknown main item tag 0x0 [ 2594.477317][ T312] isku 0003:1E7D:319C.00ED: item fetching failed at offset 6/7 [ 2594.492198][ T312] isku 0003:1E7D:319C.00ED: parse failed [ 2594.500085][ T312] isku 0003:1E7D:319C.00ED: probe with driver isku failed with error -22 [ 2594.590690][T21645] usb 10-1: new high-speed USB device number 59 using dummy_hcd [ 2594.760370][T21645] usb 10-1: Using ep0 maxpacket: 32 [ 2594.771439][ T5192] loop2: detected capacity change from 0 to 7 [ 2594.791830][ T5192] Dev loop2: unable to read RDB block 7 [ 2594.803001][ T5192] loop2: unable to read partition table [ 2594.811602][T21645] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 2594.815604][ T5192] loop2: partition table beyond EOD, truncated [ 2594.840881][ T5192] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 2594.866703][T21645] usb 10-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 2594.887228][T21645] usb 10-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 2594.895763][T21645] usb 10-1: Product: syz [ 2594.910607][T21645] usb 10-1: Manufacturer: syz [ 2594.915406][T21645] usb 10-1: SerialNumber: syz [ 2594.925280][T21645] usb 10-1: config 0 descriptor?? [ 2594.936344][ T5174] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 2594.945170][T21645] hub 10-1:0.0: bad descriptor, ignoring hub [ 2594.953392][T21645] hub 10-1:0.0: probe with driver hub failed with error -5 [ 2594.997073][ T5198] netlink: 208 bytes leftover after parsing attributes in process `syz.5.9037'. [ 2595.268531][ T5204] netlink: 'syz.6.9038': attribute type 32 has an invalid length. [ 2595.276752][ T5204] netlink: 'syz.6.9038': attribute type 32 has an invalid length. [ 2595.355161][ T5205] vimc link validate: Sensor B:src:4096x16 (0x33424752, 3, 0, 5, 4) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 2595.407297][ T312] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 2595.557669][ T312] usb 6-1: device descriptor read/64, error -71 [ 2595.676433][ T5202] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2595.711792][ T5202] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2595.797234][ T312] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 2595.947331][ T312] usb 6-1: device descriptor read/64, error -71 [ 2595.955909][ T6670] raw-gadget.1 gadget.9: failed to queue suspend event [ 2596.057569][ T5174] raw-gadget.1 gadget.9: failed to queue resume event [ 2596.057660][ T312] usb usb6-port1: attempt power cycle [ 2596.108207][ T2769] raw-gadget.1 gadget.9: failed to queue suspend event [ 2596.207319][ T5174] raw-gadget.1 gadget.9: failed to queue resume event [ 2596.241157][ T1252] raw-gadget.1 gadget.9: failed to queue suspend event [ 2596.285750][T21645] usb 9-1: USB disconnect, device number 99 [ 2596.337408][ T5174] raw-gadget.1 gadget.9: failed to queue resume event [ 2596.378330][ T2769] raw-gadget.1 gadget.9: failed to queue suspend event [ 2596.417330][ T312] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 2596.447433][ T5174] raw-gadget.1 gadget.9: failed to queue resume event [ 2596.461752][ T312] usb 6-1: device descriptor read/8, error -71 [ 2596.488537][T25129] raw-gadget.1 gadget.9: failed to queue suspend event [ 2596.587332][ T5174] raw-gadget.1 gadget.9: failed to queue resume event [ 2596.634080][ T2769] raw-gadget.1 gadget.9: failed to queue suspend event [ 2596.708627][ T312] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 2596.717308][ T5174] raw-gadget.1 gadget.9: failed to queue resume event [ 2596.754373][ T312] usb 6-1: device descriptor read/8, error -71 [ 2596.768549][T25129] raw-gadget.1 gadget.9: failed to queue suspend event [ 2596.860357][ T5174] raw-gadget.1 gadget.9: failed to queue resume event [ 2596.890760][ T312] usb usb6-port1: unable to enumerate USB device [ 2596.910252][ T2769] raw-gadget.1 gadget.9: failed to queue suspend event [ 2596.987551][ T5174] raw-gadget.1 gadget.9: failed to queue resume event [ 2597.043344][ T4818] raw-gadget.1 gadget.9: failed to queue suspend event [ 2597.137282][ T5174] raw-gadget.1 gadget.9: failed to queue resume event [ 2597.205319][T25129] raw-gadget.1 gadget.9: failed to queue suspend event [ 2597.287901][ T5174] raw-gadget.1 gadget.9: failed to queue resume event [ 2597.328337][ T2769] raw-gadget.1 gadget.9: failed to queue suspend event [ 2597.399866][ T5174] raw-gadget.1 gadget.9: failed to queue disconnect event [ 2597.507569][ T312] usb 10-1: USB disconnect, device number 59 [ 2598.287289][ T312] usb 6-1: new low-speed USB device number 45 using dummy_hcd [ 2598.451901][ T312] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 2598.467735][ T312] usb 6-1: config 0 has no interface number 0 [ 2598.480601][ T312] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 2598.506653][ T312] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 2598.529066][ T312] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2598.552099][ T312] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2598.575726][ T312] usb 6-1: config 0 descriptor?? [ 2598.591523][ T5224] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 2598.615024][ T312] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 2598.882264][ T312] usb 6-1: USB disconnect, device number 45 [ 2599.132639][ T5235] xt_hashlimit: size too large, truncated to 1048576 [ 2599.170235][ T5235] xt_hashlimit: Unknown mode mask FFFFFFE, kernel too old? [ 2599.441086][ T5241] openvswitch: netlink: Duplicate key (type 21). [ 2599.472066][ T5238] netlink: 1076 bytes leftover after parsing attributes in process `syz.6.9046'. [ 2599.519464][ T891] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 2599.543652][ T5243] FAULT_INJECTION: forcing a failure. [ 2599.543652][ T5243] name failslab, interval 1, probability 0, space 0, times 0 [ 2599.566717][ T5243] CPU: 1 UID: 0 PID: 5243 Comm: syz.5.9049 Tainted: G L syzkaller #0 PREEMPT(full) [ 2599.566752][ T5243] Tainted: [L]=SOFTLOCKUP [ 2599.566760][ T5243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2599.566772][ T5243] Call Trace: [ 2599.566780][ T5243] [ 2599.566790][ T5243] dump_stack_lvl+0x189/0x250 [ 2599.566821][ T5243] ? __pfx____ratelimit+0x10/0x10 [ 2599.566842][ T5243] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2599.566866][ T5243] ? __pfx__printk+0x10/0x10 [ 2599.566897][ T5243] ? __pfx___might_resched+0x10/0x10 [ 2599.566920][ T5243] ? fs_reclaim_acquire+0x7d/0x100 [ 2599.566947][ T5243] should_fail_ex+0x414/0x560 [ 2599.566979][ T5243] should_failslab+0xa8/0x100 [ 2599.567005][ T5243] kmem_cache_alloc_node_noprof+0x8c/0x720 [ 2599.567035][ T5243] ? __alloc_skb+0x255/0x430 [ 2599.567054][ T5243] ? napi_skb_cache_get+0x4a5/0x780 [ 2599.567073][ T5243] ? napi_skb_cache_get+0x151/0x780 [ 2599.567102][ T5243] __alloc_skb+0x255/0x430 [ 2599.567125][ T5243] ? __pfx___alloc_skb+0x10/0x10 [ 2599.567150][ T5243] ? netlink_autobind+0xdb/0x300 [ 2599.567174][ T5243] ? netlink_autobind+0x2c2/0x300 [ 2599.567205][ T5243] netlink_sendmsg+0x5c6/0xb30 [ 2599.567242][ T5243] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2599.567271][ T5243] ? __import_iovec+0x5d4/0x7f0 [ 2599.567293][ T5243] ? aa_sock_msg_perm+0xf1/0x1b0 [ 2599.567321][ T5243] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2599.567341][ T5243] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2599.567366][ T5243] __sock_sendmsg+0x21c/0x270 [ 2599.567396][ T5243] ____sys_sendmsg+0x505/0x820 [ 2599.567427][ T5243] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2599.567457][ T5243] ? kstrtouint+0x6e/0xe0 [ 2599.567495][ T5243] ___sys_sendmsg+0x21f/0x2a0 [ 2599.567530][ T5243] ? __pfx____sys_sendmsg+0x10/0x10 [ 2599.567563][ T5243] ? rcu_read_lock_any_held+0xb3/0x120 [ 2599.567619][ T5243] ? __fget_files+0x2a/0x420 [ 2599.567643][ T5243] ? __fget_files+0x3a0/0x420 [ 2599.567676][ T5243] __sys_sendmsg+0x164/0x220 [ 2599.567703][ T5243] ? __pfx___sys_sendmsg+0x10/0x10 [ 2599.567736][ T5243] ? __pfx_ksys_write+0x10/0x10 [ 2599.567760][ T5243] ? __do_fast_syscall_32+0xbe/0x590 [ 2599.567788][ T5243] __do_fast_syscall_32+0x1f7/0x590 [ 2599.567810][ T5243] ? rcu_is_watching+0x15/0xb0 [ 2599.567832][ T5243] ? do_fast_syscall_32+0x34/0x80 [ 2599.567861][ T5243] do_fast_syscall_32+0x34/0x80 [ 2599.567893][ T5243] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2599.567917][ T5243] RIP: 0023:0xf704d539 [ 2599.567935][ T5243] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2599.567953][ T5243] RSP: 002b:00000000f543d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 2599.567977][ T5243] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 2599.567992][ T5243] RDX: 000000000000c000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2599.568005][ T5243] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2599.568017][ T5243] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2599.568028][ T5243] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2599.568059][ T5243] [ 2599.977284][ T891] usb 3-1: Using ep0 maxpacket: 16 [ 2599.984952][ T891] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2600.004959][ T891] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 2600.014475][ T891] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2600.026130][ T891] usb 3-1: config 0 descriptor?? [ 2600.387646][ T312] usb 10-1: new high-speed USB device number 60 using dummy_hcd [ 2600.572658][ T312] usb 10-1: Using ep0 maxpacket: 32 [ 2600.588363][ T312] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 2600.613883][ T312] usb 10-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 2600.626431][ T312] usb 10-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 2600.635419][ T312] usb 10-1: Product: syz [ 2600.645450][ T312] usb 10-1: Manufacturer: syz [ 2600.650947][ T312] usb 10-1: SerialNumber: syz [ 2600.660559][ T312] usb 10-1: config 0 descriptor?? [ 2600.666469][ T5251] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 2600.676805][ T312] hub 10-1:0.0: bad descriptor, ignoring hub [ 2600.697281][ T5237] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2600.719935][ T312] hub 10-1:0.0: probe with driver hub failed with error -5 [ 2600.741579][ T5237] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2600.784745][ T891] usbhid 3-1:0.0: can't add hid device: -71 [ 2600.800646][ T891] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 2600.861530][ T891] usb 3-1: USB disconnect, device number 59 [ 2601.436206][ T5260] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2601.473086][ T5260] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2601.635754][ T1252] raw-gadget.1 gadget.9: failed to queue suspend event [ 2601.707385][ T5251] raw-gadget.1 gadget.9: failed to queue resume event [ 2601.757194][T22806] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 2601.771323][ T76] raw-gadget.1 gadget.9: failed to queue suspend event [ 2601.867330][ T5251] raw-gadget.1 gadget.9: failed to queue resume event [ 2601.900469][T25129] raw-gadget.1 gadget.9: failed to queue suspend event [ 2601.937800][T22806] usb 3-1: Using ep0 maxpacket: 8 [ 2601.962457][T22806] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 2601.983580][T22806] usb 3-1: config 0 has no interface number 0 [ 2601.997343][ T5251] raw-gadget.1 gadget.9: failed to queue resume event [ 2601.997497][T22806] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2602.025161][T25129] raw-gadget.1 gadget.9: failed to queue suspend event [ 2602.033589][T22806] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 2602.058003][T22806] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2602.071143][T22806] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 2602.085146][T22806] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 2602.094832][T22806] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2602.103126][ T5251] raw-gadget.1 gadget.9: failed to queue resume event [ 2602.119167][T22806] usb 3-1: config 0 descriptor?? [ 2602.129580][ T3861] raw-gadget.1 gadget.9: failed to queue suspend event [ 2602.142152][T22806] ldusb 3-1:0.55: LD USB Device #1 now attached to major 180 minor 1 [ 2602.218523][ T5251] raw-gadget.1 gadget.9: failed to queue resume event [ 2602.241726][T25129] raw-gadget.1 gadget.9: failed to queue suspend event [ 2602.327401][ T5251] raw-gadget.1 gadget.9: failed to queue resume event [ 2602.371556][T25129] raw-gadget.1 gadget.9: failed to queue suspend event [ 2602.438750][T21645] usb 3-1: USB disconnect, device number 60 [ 2602.448970][ T5251] raw-gadget.1 gadget.9: failed to queue resume event [ 2602.463198][T21645] ldusb 3-1:0.55: LD USB Device #1 now disconnected [ 2602.510328][ T3929] raw-gadget.1 gadget.9: failed to queue suspend event [ 2602.599127][ T5251] raw-gadget.1 gadget.9: failed to queue resume event [ 2602.628604][ T3929] raw-gadget.1 gadget.9: failed to queue suspend event [ 2602.708989][ T5265] raw-gadget.1 gadget.9: failed to queue resume event [ 2602.728133][ T3929] raw-gadget.1 gadget.9: failed to queue suspend event [ 2602.800812][ T5251] raw-gadget.1 gadget.9: failed to queue resume event [ 2602.829515][ T76] raw-gadget.1 gadget.9: failed to queue suspend event [ 2602.911315][ T5265] raw-gadget.1 gadget.9: failed to queue resume event [ 2602.945081][ T76] raw-gadget.1 gadget.9: failed to queue suspend event [ 2603.028160][ T5251] raw-gadget.1 gadget.9: failed to queue resume event [ 2603.072404][ T3861] raw-gadget.1 gadget.9: failed to queue suspend event [ 2603.148252][ T5265] raw-gadget.1 gadget.9: failed to queue resume event [ 2603.178465][ T3861] raw-gadget.1 gadget.9: failed to queue suspend event [ 2603.188133][ T5260] raw-gadget.1 gadget.9: failed to queue disconnect event [ 2603.220962][T21645] usb 10-1: USB disconnect, device number 60 [ 2604.308574][ T5294] FAULT_INJECTION: forcing a failure. [ 2604.308574][ T5294] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2604.363470][ T5294] CPU: 0 UID: 0 PID: 5294 Comm: syz.2.9064 Tainted: G L syzkaller #0 PREEMPT(full) [ 2604.363514][ T5294] Tainted: [L]=SOFTLOCKUP [ 2604.363522][ T5294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2604.363533][ T5294] Call Trace: [ 2604.363542][ T5294] [ 2604.363552][ T5294] dump_stack_lvl+0x189/0x250 [ 2604.363583][ T5294] ? __pfx____ratelimit+0x10/0x10 [ 2604.363604][ T5294] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2604.363628][ T5294] ? __pfx__printk+0x10/0x10 [ 2604.363672][ T5294] should_fail_ex+0x414/0x560 [ 2604.363707][ T5294] strncpy_from_user+0x36/0x2c0 [ 2604.363740][ T5294] getname_flags+0xf3/0x540 [ 2604.363770][ T5294] do_sys_openat2+0xbc/0x200 [ 2604.363799][ T5294] ? __pfx_do_sys_openat2+0x10/0x10 [ 2604.363829][ T5294] ? ksys_write+0x22a/0x250 [ 2604.363847][ T5294] ? exc_page_fault+0x82/0x100 [ 2604.363869][ T5294] ? __pfx_ksys_write+0x10/0x10 [ 2604.363891][ T5294] __ia32_compat_sys_openat+0x131/0x160 [ 2604.363925][ T5294] __do_fast_syscall_32+0x1f7/0x590 [ 2604.363949][ T5294] ? rcu_is_watching+0x15/0xb0 [ 2604.363971][ T5294] ? do_fast_syscall_32+0x34/0x80 [ 2604.364000][ T5294] do_fast_syscall_32+0x34/0x80 [ 2604.364023][ T5294] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2604.364046][ T5294] RIP: 0023:0xf704d539 [ 2604.364064][ T5294] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2604.364082][ T5294] RSP: 002b:00000000f543d100 EFLAGS: 00000206 ORIG_RAX: 0000000000000127 [ 2604.364105][ T5294] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f543d150 [ 2604.364119][ T5294] RDX: 0000000000002082 RSI: 0000000000000000 RDI: 00000000f73e6ff4 [ 2604.364131][ T5294] RBP: 0000000000002082 R08: 0000000000000000 R09: 0000000000000000 [ 2604.364144][ T5294] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2604.364156][ T5294] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2604.364188][ T5294] [ 2605.248242][ T891] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 2605.263692][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 2605.263707][ T30] audit: type=1326 audit(1766292947.408:3735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5303 comm="syz.5.9068" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf704d539 code=0x0 [ 2605.348627][ T5305] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9068'. [ 2605.411168][ T5305] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9068'. [ 2605.429650][ T891] usb 3-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 2605.439577][ T891] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2605.464161][ T891] usb 3-1: config 0 descriptor?? [ 2606.523449][ T891] pegasus 3-1:0.0: probe with driver pegasus failed with error -71 [ 2606.542550][ T891] usb 3-1: USB disconnect, device number 61 [ 2606.607566][T16131] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 2606.877476][T16131] usb 6-1: Using ep0 maxpacket: 32 [ 2606.885181][T16131] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 2606.920392][T16131] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 2606.920485][T13006] Bluetooth: hci2: unexpected event for opcode 0x0401 [ 2606.940466][T16131] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 2606.981300][T16131] usb 6-1: Product: syz [ 2606.985494][T16131] usb 6-1: Manufacturer: syz [ 2606.997236][T16131] usb 6-1: SerialNumber: syz [ 2607.033491][T16131] usb 6-1: config 0 descriptor?? [ 2607.037936][ T5309] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 2607.072592][T16131] hub 6-1:0.0: bad descriptor, ignoring hub [ 2607.091590][T16131] hub 6-1:0.0: probe with driver hub failed with error -5 [ 2607.547198][T16131] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 2607.717183][T16131] usb 3-1: Using ep0 maxpacket: 8 [ 2607.748172][T16131] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 2607.767455][T16131] usb 3-1: config 0 has no interface number 0 [ 2607.773725][T16131] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2607.814785][ T5315] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2607.827211][T16131] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 2607.847666][ T5315] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2607.865744][T16131] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2607.897213][T16131] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 2607.947179][T16131] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 2607.968817][T16131] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2607.991015][T16131] usb 3-1: config 0 descriptor?? [ 2608.040267][ T1252] raw-gadget.2 gadget.5: failed to queue suspend event [ 2608.086149][T16131] ldusb 3-1:0.55: LD USB Device #1 now attached to major 180 minor 1 [ 2608.118419][ T5309] raw-gadget.2 gadget.5: failed to queue resume event [ 2608.161690][ T1252] raw-gadget.2 gadget.5: failed to queue suspend event [ 2608.247312][ T5309] raw-gadget.2 gadget.5: failed to queue resume event [ 2608.285007][ T1252] raw-gadget.2 gadget.5: failed to queue suspend event [ 2608.367361][ T5309] raw-gadget.2 gadget.5: failed to queue resume event [ 2608.400963][ T6670] raw-gadget.2 gadget.5: failed to queue suspend event [ 2608.481079][ T5309] raw-gadget.2 gadget.5: failed to queue resume event [ 2608.508731][ T6670] raw-gadget.2 gadget.5: failed to queue suspend event [ 2608.526414][ T891] usb 3-1: USB disconnect, device number 62 [ 2608.545890][ T891] ldusb 3-1:0.55: LD USB Device #1 now disconnected [ 2608.597405][ T5309] raw-gadget.2 gadget.5: failed to queue resume event [ 2608.639171][ T6670] raw-gadget.2 gadget.5: failed to queue suspend event [ 2608.738010][ T5309] raw-gadget.2 gadget.5: failed to queue resume event [ 2608.789112][ T1252] raw-gadget.2 gadget.5: failed to queue suspend event [ 2608.867442][ T5309] raw-gadget.2 gadget.5: failed to queue resume event [ 2608.904800][ T3929] raw-gadget.2 gadget.5: failed to queue suspend event [ 2608.987284][ T891] usb 10-1: new high-speed USB device number 61 using dummy_hcd [ 2608.996414][ T5309] raw-gadget.2 gadget.5: failed to queue resume event [ 2609.057802][ T3861] raw-gadget.2 gadget.5: failed to queue suspend event [ 2609.147306][ T891] usb 10-1: device descriptor read/64, error -71 [ 2609.177650][ T5309] raw-gadget.2 gadget.5: failed to queue resume event [ 2609.207676][ T3861] raw-gadget.2 gadget.5: failed to queue suspend event [ 2609.277329][ T5309] raw-gadget.2 gadget.5: failed to queue resume event [ 2609.322633][ T3861] raw-gadget.2 gadget.5: failed to queue suspend event [ 2609.381406][ T5309] raw-gadget.2 gadget.5: failed to queue disconnect event [ 2609.393152][ T891] usb 10-1: new high-speed USB device number 62 using dummy_hcd [ 2609.497712][T16131] usb 6-1: USB disconnect, device number 46 [ 2609.557694][ T891] usb 10-1: device descriptor read/64, error -71 [ 2609.699608][ T891] usb usb10-port1: attempt power cycle [ 2610.057725][ T891] usb 10-1: new high-speed USB device number 63 using dummy_hcd [ 2610.101336][ T891] usb 10-1: device descriptor read/8, error -71 [ 2610.290251][ T312] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 2610.357484][ T891] usb 10-1: new high-speed USB device number 64 using dummy_hcd [ 2610.420825][ T891] usb 10-1: device descriptor read/8, error -71 [ 2610.449291][ T312] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2610.468296][ T312] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2610.489832][ T312] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2610.519016][ T312] usb 3-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 2610.537213][ T312] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2610.545690][ T891] usb usb10-port1: unable to enumerate USB device [ 2610.561640][ T312] usb 3-1: Product: syz [ 2610.566002][ T312] usb 3-1: Manufacturer: syz [ 2610.582433][ T312] usb 3-1: SerialNumber: syz [ 2610.599165][ T312] usb 3-1: config 0 descriptor?? [ 2610.624361][ T312] adutux 3-1:0.0: interrupt endpoints not found [ 2611.913806][ T5356] fuse: Bad value for 'fd' [ 2611.947280][ T5360] bond0: option min_links: invalid value (18446744071830523904) [ 2611.974684][ T5360] bond0: option min_links: allowed values 0 - 2147483647 [ 2612.329375][T16131] usb 10-1: new full-speed USB device number 65 using dummy_hcd [ 2612.416129][ T5367] FAULT_INJECTION: forcing a failure. [ 2612.416129][ T5367] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2612.430163][ T5367] CPU: 0 UID: 0 PID: 5367 Comm: syz.5.9085 Tainted: G L syzkaller #0 PREEMPT(full) [ 2612.430194][ T5367] Tainted: [L]=SOFTLOCKUP [ 2612.430200][ T5367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2612.430210][ T5367] Call Trace: [ 2612.430219][ T5367] [ 2612.430227][ T5367] dump_stack_lvl+0x189/0x250 [ 2612.430257][ T5367] ? __pfx____ratelimit+0x10/0x10 [ 2612.430278][ T5367] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2612.430299][ T5367] ? __pfx__printk+0x10/0x10 [ 2612.430324][ T5367] ? __might_fault+0xb0/0x130 [ 2612.430360][ T5367] should_fail_ex+0x414/0x560 [ 2612.430395][ T5367] _copy_from_user+0x2d/0xb0 [ 2612.430417][ T5367] get_old_timespec32+0x88/0x130 [ 2612.430439][ T5367] ? __pfx_get_old_timespec32+0x10/0x10 [ 2612.430471][ T5367] __sys_recvmmsg+0xee/0x280 [ 2612.430497][ T5367] ? __pfx___sys_recvmmsg+0x10/0x10 [ 2612.430539][ T5367] __ia32_compat_sys_recvmmsg_time32+0xbf/0xe0 [ 2612.430569][ T5367] __do_fast_syscall_32+0x1f7/0x590 [ 2612.430593][ T5367] ? rcu_is_watching+0x15/0xb0 [ 2612.430612][ T5367] ? do_fast_syscall_32+0x34/0x80 [ 2612.430639][ T5367] do_fast_syscall_32+0x34/0x80 [ 2612.430659][ T5367] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2612.430681][ T5367] RIP: 0023:0xf704d539 [ 2612.430698][ T5367] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2612.430715][ T5367] RSP: 002b:00000000f543d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000151 [ 2612.430738][ T5367] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800037c0 [ 2612.430752][ T5367] RDX: 00000000000003b4 RSI: 0000000000000000 RDI: 0000000080003700 [ 2612.430765][ T5367] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2612.430776][ T5367] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2612.430789][ T5367] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2612.430820][ T5367] [ 2612.679388][T16131] usb 10-1: config 0 has an invalid interface number: 210 but max is 0 [ 2612.689508][T16131] usb 10-1: config 0 has no interface number 0 [ 2612.698560][T16131] usb 10-1: New USB device found, idVendor=045e, idProduct=02bf, bcdDevice=c3.54 [ 2612.707931][T16131] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2612.716085][T16131] usb 10-1: Product: syz [ 2612.720913][T16131] usb 10-1: Manufacturer: syz [ 2612.725661][T16131] usb 10-1: SerialNumber: syz [ 2612.733736][T16131] usb 10-1: config 0 descriptor?? [ 2612.743078][T16131] gspca_main: kinect-2.14.0 probing 045e:02bf [ 2612.780630][ T5369] IPVS: ip_vs_edit_dest(): server weight less than zero [ 2612.948510][ T5362] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2612.966665][ T5362] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2612.992639][T22806] usb 10-1: USB disconnect, device number 65 [ 2613.217177][T16131] usb 6-1: new full-speed USB device number 47 using dummy_hcd [ 2613.355282][T22806] usb 3-1: USB disconnect, device number 63 [ 2613.381271][T16131] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2613.414078][T16131] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2613.434375][T16131] usb 6-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 2613.444643][T16131] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2613.472107][T16131] usb 6-1: config 0 descriptor?? [ 2613.912120][T16131] isku 0003:1E7D:319C.00EE: unknown main item tag 0x0 [ 2613.927801][T21643] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 2613.936693][T16131] isku 0003:1E7D:319C.00EE: unknown main item tag 0x0 [ 2613.944202][T16131] isku 0003:1E7D:319C.00EE: unknown main item tag 0x0 [ 2613.952223][T16131] isku 0003:1E7D:319C.00EE: unknown main item tag 0x0 [ 2613.968397][T16131] isku 0003:1E7D:319C.00EE: item fetching failed at offset 6/7 [ 2613.976624][T16131] isku 0003:1E7D:319C.00EE: parse failed [ 2613.982593][T16131] isku 0003:1E7D:319C.00EE: probe with driver isku failed with error -22 [ 2613.997640][T31246] usb 10-1: new high-speed USB device number 66 using dummy_hcd [ 2614.101621][T21643] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 2614.128694][T21643] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2614.149536][T21643] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 2614.181117][T21643] usb 3-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 2614.198441][T21643] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2614.206582][T31246] usb 10-1: Using ep0 maxpacket: 16 [ 2614.224420][T21643] usb 3-1: Product: syz [ 2614.224575][T31246] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2614.242039][T31246] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2614.252662][T31246] usb 10-1: config 0 interface 0 has no altsetting 0 [ 2614.254717][T21643] usb 3-1: Manufacturer: syz [ 2614.259670][T31246] usb 10-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 2614.265484][T21643] usb 3-1: SerialNumber: syz [ 2614.281121][T31246] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2614.297553][T21643] usb 3-1: config 0 descriptor?? [ 2614.379297][T31246] usb 10-1: config 0 descriptor?? [ 2614.513876][T21643] adutux 3-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 2614.763216][ T5381] tap0: tun_chr_ioctl cmd 35111 [ 2614.772053][ T5381] mmap: syz.2.9091 (5381): VmData 28983296 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 2614.808559][ T312] hid-generic 0000:0000:0004.00EF: reserved main item tag 0xd [ 2614.827849][ T312] hid-generic 0000:0000:0004.00EF: unknown main item tag 0x2 [ 2614.853795][ T312] hid-generic 0000:0000:0004.00EF: item fetching failed at offset 10/113 [ 2614.864104][ T312] hid-generic 0000:0000:0004.00EF: probe with driver hid-generic failed with error -22 [ 2614.994346][T21643] usb 3-1: USB disconnect, device number 64 [ 2615.184734][T31246] hid (null): unknown global tag 0xe [ 2615.205236][T31246] hid (null): unknown global tag 0xe [ 2615.217355][T31246] hid (null): unknown global tag 0x63 [ 2615.242114][T31246] hid (null): unknown global tag 0xd [ 2615.708101][ T5404] netlink: 56 bytes leftover after parsing attributes in process `syz.6.9095'. [ 2615.859497][ T5407] loop5: detected capacity change from 0 to 7 [ 2615.866596][ T5407] Dev loop5: unable to read RDB block 7 [ 2615.875624][ T5407] loop5: AHDI p1 p2 p3 [ 2615.884998][ T5407] loop5: partition table partially beyond EOD, truncated [ 2615.893161][ T5407] loop5: p1 start 1601398130 is beyond EOD, truncated [ 2615.905291][ T5407] loop5: p2 start 1702059890 is beyond EOD, truncated [ 2615.922090][ T5409] FAULT_INJECTION: forcing a failure. [ 2615.922090][ T5409] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2615.953831][ T5409] CPU: 0 UID: 0 PID: 5409 Comm: syz.6.9097 Tainted: G L syzkaller #0 PREEMPT(full) [ 2615.953864][ T5409] Tainted: [L]=SOFTLOCKUP [ 2615.953872][ T5409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2615.953884][ T5409] Call Trace: [ 2615.953893][ T5409] [ 2615.953903][ T5409] dump_stack_lvl+0x189/0x250 [ 2615.953933][ T5409] ? __pfx____ratelimit+0x10/0x10 [ 2615.953955][ T5409] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2615.953980][ T5409] ? __pfx__printk+0x10/0x10 [ 2615.954012][ T5409] ? fs_reclaim_acquire+0x7d/0x100 [ 2615.954044][ T5409] should_fail_ex+0x414/0x560 [ 2615.954080][ T5409] prepare_alloc_pages+0x22b/0x650 [ 2615.954113][ T5409] __alloc_frozen_pages_noprof+0x123/0x370 [ 2615.954142][ T5409] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 2615.954174][ T5409] ? policy_nodemask+0x27c/0x720 [ 2615.954205][ T5409] alloc_pages_mpol+0x232/0x4a0 [ 2615.954235][ T5409] folio_alloc_mpol_noprof+0x39/0x70 [ 2615.954271][ T5409] shmem_alloc_and_add_folio+0x423/0xf40 [ 2615.954307][ T5409] ? filemap_get_entry+0xad/0x2f0 [ 2615.954324][ T5409] ? filemap_get_entry+0xad/0x2f0 [ 2615.954349][ T5409] ? shmem_huge_global_enabled+0x293/0x320 [ 2615.954375][ T5409] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 2615.954408][ T5409] ? shmem_allowable_huge_orders+0x4c0/0x4e0 [ 2615.954443][ T5409] shmem_get_folio_gfp+0x59d/0x1660 [ 2615.954491][ T5409] shmem_fault+0x179/0x390 [ 2615.954529][ T5409] __do_fault+0x138/0x390 [ 2615.954553][ T5409] do_pte_missing+0x6ad/0x3330 [ 2615.954590][ T5409] ? handle_mm_fault+0xdb/0x32b0 [ 2615.954622][ T5409] handle_mm_fault+0x1b26/0x32b0 [ 2615.954665][ T5409] ? handle_mm_fault+0xdb/0x32b0 [ 2615.954703][ T5409] ? __pfx_handle_mm_fault+0x10/0x10 [ 2615.954755][ T5409] ? lock_mm_and_find_vma+0x9c/0x300 [ 2615.954778][ T5409] do_user_addr_fault+0x764/0x1380 [ 2615.954819][ T5409] exc_page_fault+0x82/0x100 [ 2615.954843][ T5409] asm_exc_page_fault+0x26/0x30 [ 2615.954867][ T5409] RIP: 0010:rep_stos_alternative+0x40/0x80 [ 2615.954893][ T5409] Code: c9 75 f6 e9 92 59 04 00 48 89 07 48 83 c7 08 83 e9 08 74 ef 83 f9 08 73 ef eb de 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 <48> 89 07 48 89 47 08 48 89 47 10 48 89 47 18 48 89 47 20 48 89 47 [ 2615.954916][ T5409] RSP: 0018:ffffc9000afdf938 EFLAGS: 00050202 [ 2615.954937][ T5409] RAX: 0000000000000000 RBX: 000000008003da80 RCX: 0000000000000a80 [ 2615.954952][ T5409] RDX: 0000000000000000 RSI: ffffffff8d9791a8 RDI: 000000008003d000 [ 2615.954965][ T5409] RBP: ffffc9000afdfa98 R08: ffffffff820f72a0 R09: ffff888027e27180 [ 2615.954980][ T5409] R10: 0000000000000005 R11: 0000000000000000 R12: 000000008003ca80 [ 2615.954993][ T5409] R13: 0000000000001000 R14: 1ffff920015fbf38 R15: 00007ffffffff001 [ 2615.955015][ T5409] ? __might_fault+0xb0/0x130 [ 2615.955054][ T5409] iov_iter_zero+0x3c2/0x1690 [ 2615.955082][ T5409] ? aa_file_perm+0x44c/0x1530 [ 2615.955117][ T5409] ? __pfx_iov_iter_zero+0x10/0x10 [ 2615.955150][ T5409] ? __pfx_aa_file_perm+0x10/0x10 [ 2615.955182][ T5409] read_iter_zero+0x92/0x2a0 [ 2615.955212][ T5409] do_iter_readv_writev+0x623/0x8c0 [ 2615.955242][ T5409] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 2615.955269][ T5409] ? common_file_perm+0x1b5/0x220 [ 2615.955299][ T5409] ? bpf_lsm_file_permission+0x9/0x20 [ 2615.955321][ T5409] ? security_file_permission+0x75/0x290 [ 2615.955343][ T5409] ? rw_verify_area+0x2a6/0x4d0 [ 2615.955367][ T5409] vfs_readv+0x253/0x850 [ 2615.955399][ T5409] ? __pfx_vfs_readv+0x10/0x10 [ 2615.955442][ T5409] ? __fget_files+0x2a/0x420 [ 2615.955473][ T5409] ? __fget_files+0x3a0/0x420 [ 2615.955496][ T5409] ? __fget_files+0x2a/0x420 [ 2615.955530][ T5409] __ia32_compat_sys_preadv+0x1bf/0x2c0 [ 2615.955552][ T5409] ? exc_page_fault+0x82/0x100 [ 2615.955573][ T5409] ? __pfx___ia32_compat_sys_preadv+0x10/0x10 [ 2615.955602][ T5409] ? __do_fast_syscall_32+0xbe/0x590 [ 2615.955631][ T5409] __do_fast_syscall_32+0x1f7/0x590 [ 2615.955654][ T5409] ? rcu_is_watching+0x15/0xb0 [ 2615.955676][ T5409] ? do_fast_syscall_32+0x34/0x80 [ 2615.955706][ T5409] do_fast_syscall_32+0x34/0x80 [ 2615.955728][ T5409] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2615.955752][ T5409] RIP: 0023:0xf70ad539 [ 2615.955769][ T5409] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2615.955786][ T5409] RSP: 002b:00000000f549d55c EFLAGS: 00000206 ORIG_RAX: 000000000000014d [ 2615.955806][ T5409] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0 [ 2615.955820][ T5409] RDX: 000000000000019e RSI: 0000000000000000 RDI: 0000000000000000 [ 2615.955832][ T5409] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2615.955843][ T5409] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2615.955855][ T5409] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2615.955889][ T5409] [ 2616.509246][T16131] usb 6-1: USB disconnect, device number 47 [ 2616.754687][ T5417] FAULT_INJECTION: forcing a failure. [ 2616.754687][ T5417] name failslab, interval 1, probability 0, space 0, times 0 [ 2616.823914][ T5417] CPU: 1 UID: 0 PID: 5417 Comm: syz.2.9099 Tainted: G L syzkaller #0 PREEMPT(full) [ 2616.823948][ T5417] Tainted: [L]=SOFTLOCKUP [ 2616.823955][ T5417] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2616.823966][ T5417] Call Trace: [ 2616.823975][ T5417] [ 2616.823984][ T5417] dump_stack_lvl+0x189/0x250 [ 2616.824012][ T5417] ? __pfx____ratelimit+0x10/0x10 [ 2616.824032][ T5417] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2616.824055][ T5417] ? __pfx__printk+0x10/0x10 [ 2616.824084][ T5417] ? __pfx___might_resched+0x10/0x10 [ 2616.824105][ T5417] ? fs_reclaim_acquire+0x7d/0x100 [ 2616.824131][ T5417] should_fail_ex+0x414/0x560 [ 2616.824163][ T5417] should_failslab+0xa8/0x100 [ 2616.824187][ T5417] kmem_cache_alloc_node_noprof+0x8c/0x720 [ 2616.824216][ T5417] ? __alloc_skb+0x255/0x430 [ 2616.824234][ T5417] ? napi_skb_cache_get+0x4a5/0x780 [ 2616.824252][ T5417] ? napi_skb_cache_get+0x151/0x780 [ 2616.824275][ T5417] __alloc_skb+0x255/0x430 [ 2616.824298][ T5417] ? __pfx___alloc_skb+0x10/0x10 [ 2616.824330][ T5417] ? netlink_autobind+0xdb/0x300 [ 2616.824354][ T5417] ? netlink_autobind+0x2c2/0x300 [ 2616.824382][ T5417] netlink_sendmsg+0x5c6/0xb30 [ 2616.824421][ T5417] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2616.824448][ T5417] ? __import_iovec+0x5d4/0x7f0 [ 2616.824468][ T5417] ? aa_sock_msg_perm+0xf1/0x1b0 [ 2616.824493][ T5417] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2616.824512][ T5417] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2616.824537][ T5417] __sock_sendmsg+0x21c/0x270 [ 2616.824566][ T5417] ____sys_sendmsg+0x505/0x820 [ 2616.824595][ T5417] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2616.824624][ T5417] ? kstrtouint+0x6e/0xe0 [ 2616.824659][ T5417] ___sys_sendmsg+0x21f/0x2a0 [ 2616.824684][ T5417] ? __pfx____sys_sendmsg+0x10/0x10 [ 2616.824714][ T5417] ? rcu_read_lock_any_held+0xb3/0x120 [ 2616.824765][ T5417] ? __fget_files+0x2a/0x420 [ 2616.824788][ T5417] ? __fget_files+0x3a0/0x420 [ 2616.824820][ T5417] __sys_sendmsg+0x164/0x220 [ 2616.824844][ T5417] ? __pfx___sys_sendmsg+0x10/0x10 [ 2616.824874][ T5417] ? __pfx_ksys_write+0x10/0x10 [ 2616.824898][ T5417] ? __do_fast_syscall_32+0xbe/0x590 [ 2616.824923][ T5417] __do_fast_syscall_32+0x1f7/0x590 [ 2616.824945][ T5417] ? rcu_is_watching+0x15/0xb0 [ 2616.824965][ T5417] ? do_fast_syscall_32+0x34/0x80 [ 2616.824991][ T5417] do_fast_syscall_32+0x34/0x80 [ 2616.825011][ T5417] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2616.825034][ T5417] RIP: 0023:0xf704d539 [ 2616.825054][ T5417] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2616.825070][ T5417] RSP: 002b:00000000f543d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 2616.825091][ T5417] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 2616.825105][ T5417] RDX: 000000000000c000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2616.825117][ T5417] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2616.825128][ T5417] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2616.825140][ T5417] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2616.825170][ T5417] [ 2617.261312][T16131] usb 10-1: USB disconnect, device number 66 [ 2617.437429][ T5419] input: syz0 as /devices/virtual/input/input142 [ 2617.461275][ T5425] netlink: 168 bytes leftover after parsing attributes in process `syz.5.9102'. [ 2617.515771][ T5425] netlink: 168 bytes leftover after parsing attributes in process `syz.5.9102'. [ 2617.867230][T21643] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 2617.897862][ T5434] netlink: 'syz.2.9105': attribute type 10 has an invalid length. [ 2617.909323][ T5435] netlink: 36 bytes leftover after parsing attributes in process `syz.9.9103'. [ 2617.921473][ T5434] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9105'. [ 2617.943541][ T5434] dummy0: entered promiscuous mode [ 2617.999556][ T5434] bridge0: port 3(dummy0) entered blocking state [ 2618.006658][ T5434] bridge0: port 3(dummy0) entered disabled state [ 2618.013813][ T5434] dummy0: entered allmulticast mode [ 2618.060207][T21643] usb 6-1: unable to get BOS descriptor or descriptor too short [ 2618.090457][T21643] usb 6-1: config 14 has an invalid interface number: 21 but max is 0 [ 2618.111568][T21643] usb 6-1: config 14 has no interface number 0 [ 2618.133306][T21643] usb 6-1: config 14 interface 21 altsetting 251 bulk endpoint 0xA has invalid maxpacket 32 [ 2618.201674][T21643] usb 6-1: config 14 interface 21 has no altsetting 0 [ 2618.263738][T21643] usb 6-1: New USB device found, idVendor=c880, idProduct=760e, bcdDevice=35.fc [ 2618.307815][T21643] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2618.336304][T21643] usb 6-1: Product: syz [ 2618.340899][T21643] usb 6-1: Manufacturer: syz [ 2618.365605][T21643] usb 6-1: SerialNumber: syz [ 2618.412658][ T5425] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 2619.070758][ T5443] FAULT_INJECTION: forcing a failure. [ 2619.070758][ T5443] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2619.084270][ T5443] CPU: 1 UID: 0 PID: 5443 Comm: syz.2.9107 Tainted: G L syzkaller #0 PREEMPT(full) [ 2619.084311][ T5443] Tainted: [L]=SOFTLOCKUP [ 2619.084318][ T5443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2619.084329][ T5443] Call Trace: [ 2619.084337][ T5443] [ 2619.084346][ T5443] dump_stack_lvl+0x189/0x250 [ 2619.084376][ T5443] ? __pfx____ratelimit+0x10/0x10 [ 2619.084397][ T5443] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2619.084421][ T5443] ? __pfx__printk+0x10/0x10 [ 2619.084464][ T5443] should_fail_ex+0x414/0x560 [ 2619.084499][ T5443] _copy_to_user+0x31/0xb0 [ 2619.084526][ T5443] simple_read_from_buffer+0xe1/0x170 [ 2619.084555][ T5443] proc_fail_nth_read+0x1b3/0x220 [ 2619.084581][ T5443] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2619.084607][ T5443] ? rw_verify_area+0x2a6/0x4d0 [ 2619.084623][ T5443] ? tun_chr_write_iter+0x18a/0x200 [ 2619.084645][ T5443] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2619.084668][ T5443] vfs_read+0x200/0xa30 [ 2619.084687][ T5443] ? fdget_pos+0x247/0x320 [ 2619.084715][ T5443] ? __pfx___mutex_lock+0x10/0x10 [ 2619.084738][ T5443] ? __pfx_vfs_read+0x10/0x10 [ 2619.084759][ T5443] ? __fget_files+0x2a/0x420 [ 2619.084787][ T5443] ? __fget_files+0x3a0/0x420 [ 2619.084810][ T5443] ? __fget_files+0x2a/0x420 [ 2619.084845][ T5443] ksys_read+0x145/0x250 [ 2619.084863][ T5443] ? exc_page_fault+0x82/0x100 [ 2619.084885][ T5443] ? __pfx_ksys_read+0x10/0x10 [ 2619.084908][ T5443] ? __do_fast_syscall_32+0xbe/0x590 [ 2619.084934][ T5443] __do_fast_syscall_32+0x1f7/0x590 [ 2619.084958][ T5443] ? rcu_is_watching+0x15/0xb0 [ 2619.084981][ T5443] ? do_fast_syscall_32+0x34/0x80 [ 2619.085010][ T5443] do_fast_syscall_32+0x34/0x80 [ 2619.085032][ T5443] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2619.085054][ T5443] RIP: 0023:0xf704d539 [ 2619.085072][ T5443] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2619.085089][ T5443] RSP: 002b:00000000f543d590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 2619.085111][ T5443] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f543d620 [ 2619.085125][ T5443] RDX: 000000000000000f RSI: 00000000f73e6ff4 RDI: 0000000000000000 [ 2619.085137][ T5443] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 2619.085148][ T5443] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2619.085160][ T5443] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2619.085191][ T5443] [ 2619.907289][T16131] usb 10-1: new high-speed USB device number 67 using dummy_hcd [ 2620.011582][T21643] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 2620.019167][T21643] usb 6-1: MIDIStreaming interface descriptor not found [ 2620.053343][T21643] usb 6-1: USB disconnect, device number 48 [ 2620.077206][T16131] usb 10-1: Using ep0 maxpacket: 32 [ 2620.085680][T16131] usb 10-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2620.097187][T16131] usb 10-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2620.141847][T16131] usb 10-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 2620.152313][T16131] usb 10-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 2620.165744][T23960] udevd[23960]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:14.21/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2620.187732][T16131] usb 10-1: Product: syz [ 2620.201290][T16131] usb 10-1: Manufacturer: syz [ 2620.225172][T16131] hub 10-1:4.0: USB hub found [ 2620.435468][ T5450] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2620.463384][ T5450] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2620.485446][T16131] hub 10-1:4.0: config failed, can't read hub descriptor (err -22) [ 2620.599624][T16131] usb 10-1: USB disconnect, device number 67 [ 2622.478529][T16131] usb 10-1: new high-speed USB device number 68 using dummy_hcd [ 2622.627317][T21643] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 2622.637206][T16131] usb 10-1: Using ep0 maxpacket: 32 [ 2622.644188][T16131] usb 10-1: config 0 has an invalid interface number: 67 but max is 0 [ 2622.652525][T16131] usb 10-1: config 0 has no interface number 0 [ 2622.661048][T16131] usb 10-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 2622.670345][T16131] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2622.679368][T22806] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 2622.687237][T16131] usb 10-1: Product: syz [ 2622.691655][T16131] usb 10-1: Manufacturer: syz [ 2622.696352][T16131] usb 10-1: SerialNumber: syz [ 2622.704178][T16131] usb 10-1: config 0 descriptor?? [ 2622.721700][T16131] smsc95xx v2.0.0 [ 2622.725511][T16131] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 2622.736383][T16131] smsc95xx 10-1:0.67: probe with driver smsc95xx failed with error -22 [ 2622.787625][T21643] usb 6-1: Using ep0 maxpacket: 8 [ 2622.797783][T21643] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 2622.805903][T21643] usb 6-1: config 0 has no interface number 0 [ 2622.812280][T21643] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2622.823696][T21643] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 2622.835609][T21643] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2622.847243][T21643] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 2622.860600][T21643] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 2622.869743][T22806] usb 3-1: Using ep0 maxpacket: 16 [ 2622.875122][T21643] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2622.890738][T21643] usb 6-1: config 0 descriptor?? [ 2622.908580][T21643] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 2622.924988][ T5498] FAULT_INJECTION: forcing a failure. [ 2622.924988][ T5498] name failslab, interval 1, probability 0, space 0, times 0 [ 2622.942927][ T5498] CPU: 0 UID: 0 PID: 5498 Comm: syz.9.9119 Tainted: G L syzkaller #0 PREEMPT(full) [ 2622.942960][ T5498] Tainted: [L]=SOFTLOCKUP [ 2622.942968][ T5498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2622.942980][ T5498] Call Trace: [ 2622.942989][ T5498] [ 2622.942998][ T5498] dump_stack_lvl+0x189/0x250 [ 2622.943034][ T5498] ? __pfx____ratelimit+0x10/0x10 [ 2622.943054][ T5498] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2622.943076][ T5498] ? __pfx__printk+0x10/0x10 [ 2622.943108][ T5498] ? __pfx___might_resched+0x10/0x10 [ 2622.943132][ T5498] ? fs_reclaim_acquire+0x7d/0x100 [ 2622.943159][ T5498] should_fail_ex+0x414/0x560 [ 2622.943203][ T5498] should_failslab+0xa8/0x100 [ 2622.943229][ T5498] kmem_cache_alloc_node_noprof+0x8c/0x720 [ 2622.943260][ T5498] ? __alloc_skb+0x255/0x430 [ 2622.943277][ T5498] ? napi_skb_cache_get+0x4a5/0x780 [ 2622.943295][ T5498] ? napi_skb_cache_get+0x151/0x780 [ 2622.943320][ T5498] __alloc_skb+0x255/0x430 [ 2622.943344][ T5498] ? __pfx___alloc_skb+0x10/0x10 [ 2622.943367][ T5498] ? netlink_autobind+0xdb/0x300 [ 2622.943392][ T5498] ? netlink_autobind+0x2c2/0x300 [ 2622.943423][ T5498] netlink_sendmsg+0x5c6/0xb30 [ 2622.943530][ T5498] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2622.943576][ T5498] ? __import_iovec+0x5d4/0x7f0 [ 2622.943608][ T5498] ? aa_sock_msg_perm+0xf1/0x1b0 [ 2622.943635][ T5498] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2622.943655][ T5498] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2622.943682][ T5498] __sock_sendmsg+0x21c/0x270 [ 2622.943713][ T5498] ____sys_sendmsg+0x505/0x820 [ 2622.943739][ T5498] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2622.943764][ T5498] ? kstrtouint+0x6e/0xe0 [ 2622.943799][ T5498] ___sys_sendmsg+0x21f/0x2a0 [ 2622.943821][ T5498] ? __pfx____sys_sendmsg+0x10/0x10 [ 2622.943847][ T5498] ? rcu_read_lock_any_held+0xb3/0x120 [ 2622.943880][ T5498] ? __fget_files+0x2a/0x420 [ 2622.943895][ T5498] ? __fget_files+0x3a0/0x420 [ 2622.943915][ T5498] __sys_sendmsg+0x164/0x220 [ 2622.943930][ T5498] ? __pfx___sys_sendmsg+0x10/0x10 [ 2622.943950][ T5498] ? __pfx_ksys_write+0x10/0x10 [ 2622.943964][ T5498] ? __do_fast_syscall_32+0xbe/0x590 [ 2622.943981][ T5498] __do_fast_syscall_32+0x1f7/0x590 [ 2622.943995][ T5498] ? rcu_is_watching+0x15/0xb0 [ 2622.944008][ T5498] ? do_fast_syscall_32+0x34/0x80 [ 2622.944024][ T5498] do_fast_syscall_32+0x34/0x80 [ 2622.944037][ T5498] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2622.944053][ T5498] RIP: 0023:0xf7f84539 [ 2622.944067][ T5498] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2622.944077][ T5498] RSP: 002b:00000000f547655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 2622.944092][ T5498] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000000 [ 2622.944101][ T5498] RDX: 000000000000c000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2622.944108][ T5498] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2622.944115][ T5498] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2622.944122][ T5498] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2622.944140][ T5498] [ 2622.948834][ T312] usb 10-1: USB disconnect, device number 68 [ 2623.068142][T22806] usb 3-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 2623.188036][T21645] usb 6-1: USB disconnect, device number 49 [ 2623.206087][ C1] ldusb 6-1:0.55: usb_submit_urb failed (-19) [ 2623.253646][T22806] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 2623.294302][T22806] usb 3-1: Product: syz [ 2623.298999][T22806] usb 3-1: Manufacturer: syz [ 2623.304228][T22806] usb 3-1: SerialNumber: syz [ 2623.326849][T22806] usb 3-1: config 0 descriptor?? [ 2623.688094][T22806] usb 9-1: new high-speed USB device number 100 using dummy_hcd [ 2623.761553][ T5515] FAULT_INJECTION: forcing a failure. [ 2623.761553][ T5515] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2623.776273][ T5515] CPU: 1 UID: 0 PID: 5515 Comm: syz.9.9124 Tainted: G L syzkaller #0 PREEMPT(full) [ 2623.776301][ T5515] Tainted: [L]=SOFTLOCKUP [ 2623.776308][ T5515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2623.776322][ T5515] Call Trace: [ 2623.776330][ T5515] [ 2623.776340][ T5515] dump_stack_lvl+0x189/0x250 [ 2623.776370][ T5515] ? __pfx____ratelimit+0x10/0x10 [ 2623.776388][ T5515] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2623.776401][ T5515] ? __pfx__printk+0x10/0x10 [ 2623.776418][ T5515] ? __might_fault+0xb0/0x130 [ 2623.776441][ T5515] should_fail_ex+0x414/0x560 [ 2623.776461][ T5515] _copy_from_iter+0x1cd/0x1630 [ 2623.776479][ T5515] ? __build_skb_around+0x22d/0x3c0 [ 2623.776496][ T5515] ? __pfx__copy_from_iter+0x10/0x10 [ 2623.776507][ T5515] ? __alloc_skb+0x2f1/0x430 [ 2623.776520][ T5515] ? __pfx___alloc_skb+0x10/0x10 [ 2623.776534][ T5515] ? netlink_sendmsg+0x642/0xb30 [ 2623.776547][ T5515] ? skb_put+0x11b/0x210 [ 2623.776562][ T5515] netlink_sendmsg+0x6b2/0xb30 [ 2623.776583][ T5515] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2623.776599][ T5515] ? __import_iovec+0x5d4/0x7f0 [ 2623.776611][ T5515] ? aa_sock_msg_perm+0xf1/0x1b0 [ 2623.776627][ T5515] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2623.776638][ T5515] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2623.776653][ T5515] __sock_sendmsg+0x21c/0x270 [ 2623.776672][ T5515] ____sys_sendmsg+0x505/0x820 [ 2623.776689][ T5515] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2623.776706][ T5515] ? kstrtouint+0x6e/0xe0 [ 2623.776727][ T5515] ___sys_sendmsg+0x21f/0x2a0 [ 2623.776742][ T5515] ? __pfx____sys_sendmsg+0x10/0x10 [ 2623.776760][ T5515] ? rcu_read_lock_any_held+0xb3/0x120 [ 2623.776791][ T5515] ? __fget_files+0x2a/0x420 [ 2623.776804][ T5515] ? __fget_files+0x3a0/0x420 [ 2623.776825][ T5515] __sys_sendmsg+0x164/0x220 [ 2623.776840][ T5515] ? __pfx___sys_sendmsg+0x10/0x10 [ 2623.776858][ T5515] ? __pfx_ksys_write+0x10/0x10 [ 2623.776872][ T5515] ? __do_fast_syscall_32+0xbe/0x590 [ 2623.776889][ T5515] __do_fast_syscall_32+0x1f7/0x590 [ 2623.776902][ T5515] ? rcu_is_watching+0x15/0xb0 [ 2623.776915][ T5515] ? do_fast_syscall_32+0x34/0x80 [ 2623.776930][ T5515] do_fast_syscall_32+0x34/0x80 [ 2623.776943][ T5515] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2623.776958][ T5515] RIP: 0023:0xf7f84539 [ 2623.776970][ T5515] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2623.776980][ T5515] RSP: 002b:00000000f547655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 2623.776994][ T5515] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000140 [ 2623.777002][ T5515] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2623.777009][ T5515] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2623.777016][ T5515] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2623.777023][ T5515] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2623.777040][ T5515] [ 2623.837213][T22806] usb 9-1: Using ep0 maxpacket: 32 [ 2624.079165][T22806] usb 9-1: config 0 has an invalid interface number: 67 but max is 0 [ 2624.087823][T22806] usb 9-1: config 0 has no interface number 0 [ 2624.096202][T22806] usb 9-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 2624.105657][T22806] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2624.115943][T22806] usb 9-1: Product: syz [ 2624.120212][T22806] usb 9-1: Manufacturer: syz [ 2624.124824][T22806] usb 9-1: SerialNumber: syz [ 2624.131906][T22806] usb 9-1: config 0 descriptor?? [ 2624.139281][T22806] smsc95xx v2.0.0 [ 2624.143434][T22806] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 2624.156268][T22806] smsc95xx 9-1:0.67: probe with driver smsc95xx failed with error -22 [ 2624.351874][ T5511] netlink: 8 bytes leftover after parsing attributes in process `syz.8.9123'. [ 2624.361185][ T5511] netlink: 8 bytes leftover after parsing attributes in process `syz.8.9123'. [ 2624.371942][ T5511] netlink: 4 bytes leftover after parsing attributes in process `syz.8.9123'. [ 2624.381346][ T5511] openvswitch: netlink: Key type 256 is out of range max 32 [ 2624.390515][ T891] usb 9-1: USB disconnect, device number 100 [ 2624.489405][T31246] usb 10-1: new high-speed USB device number 69 using dummy_hcd [ 2624.651335][T31246] usb 10-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=26.50 [ 2624.661098][T31246] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2624.669667][T31246] usb 10-1: Product: syz [ 2624.674396][T31246] usb 10-1: Manufacturer: syz [ 2624.679421][T31246] usb 10-1: SerialNumber: syz [ 2624.687419][T31246] usb 10-1: config 0 descriptor?? [ 2624.697593][T31246] usb 10-1: Waiting for MOTU Microbook II to boot up... [ 2624.704620][T31246] usb 10-1: failed setting the sample rate for Motu MicroBook II: -22 [ 2624.713557][T31246] snd-usb-audio 10-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 2624.899922][ T5519] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2624.911401][ T5519] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2625.370620][T21645] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 2625.518669][T22806] usb 10-1: USB disconnect, device number 69 [ 2625.572794][T31246] usb 3-1: USB disconnect, device number 65 [ 2625.904920][ T5544] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9133'. [ 2626.103021][T13006] Bluetooth: hci5: unexpected event for opcode 0x0401 [ 2626.457583][ T5548] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9135'. [ 2626.717189][T22806] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 2626.767631][T21643] usb 9-1: new high-speed USB device number 101 using dummy_hcd [ 2626.777943][ T5555] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 2626.877186][T22806] usb 6-1: device descriptor read/64, error -71 [ 2626.959467][T21643] usb 9-1: config 0 has an invalid interface number: 186 but max is 1 [ 2626.968140][T21643] usb 9-1: config 0 has no interface number 1 [ 2626.979072][T21643] usb 9-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice=e5.83 [ 2626.988247][T21643] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2626.996874][T21643] usb 9-1: Product: syz [ 2627.001542][T21643] usb 9-1: Manufacturer: syz [ 2627.006360][T21643] usb 9-1: SerialNumber: syz [ 2627.014297][T21643] usb 9-1: config 0 descriptor?? [ 2627.025833][T21643] hub 9-1:0.186: Invalid hub with more than one config or interface [ 2627.036389][T21643] hub 9-1:0.186: probe with driver hub failed with error -22 [ 2627.117647][T22806] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 2627.222199][T21645] usb 9-1: USB disconnect, device number 101 [ 2627.247622][T22806] usb 6-1: device descriptor read/64, error -71 [ 2627.367982][T22806] usb usb6-port1: attempt power cycle [ 2627.707254][T22806] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 2627.730311][T22806] usb 6-1: device descriptor read/8, error -71 [ 2627.779098][ T5560] binder: 5559:5560 ioctl c018620b 0 returned -14 [ 2627.977522][T22806] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 2628.007838][T22806] usb 6-1: device descriptor read/8, error -71 [ 2628.077262][T21643] usb 10-1: new high-speed USB device number 70 using dummy_hcd [ 2628.117753][T22806] usb usb6-port1: unable to enumerate USB device [ 2628.227260][T21643] usb 10-1: Using ep0 maxpacket: 16 [ 2628.234940][T21643] usb 10-1: unable to get BOS descriptor or descriptor too short [ 2628.244622][T21643] usb 10-1: config 1 has an invalid interface number: 27 but max is 0 [ 2628.252979][T21643] usb 10-1: config 1 has no interface number 0 [ 2628.259382][T21643] usb 10-1: config 1 interface 27 has no altsetting 0 [ 2628.270582][T21643] usb 10-1: New USB device found, idVendor=2c7c, idProduct=0512, bcdDevice=45.9f [ 2628.280595][T21643] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2628.289551][T21643] usb 10-1: Product: syz [ 2628.293877][T21643] usb 10-1: Manufacturer: syz [ 2628.298694][T21643] usb 10-1: SerialNumber: syz [ 2628.518675][T21643] qmi_wwan 10-1:1.27: bogus CDC Union: master=0, slave=0 [ 2628.535371][T21643] qmi_wwan 10-1:1.27: probe with driver qmi_wwan failed with error -22 [ 2628.553896][T21643] usb 10-1: USB disconnect, device number 70 [ 2628.843005][ T5576] fuse: Bad value for 'user_id' [ 2628.858607][ T5576] fuse: Bad value for 'user_id' [ 2629.137482][T21643] usb 9-1: new high-speed USB device number 102 using dummy_hcd [ 2629.177278][T22806] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 2629.287161][T21643] usb 9-1: Using ep0 maxpacket: 32 [ 2629.295725][T21643] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 2629.310251][T21643] usb 9-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 2629.320764][T21643] usb 9-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 2629.329173][T21643] usb 9-1: Product: syz [ 2629.333869][T21643] usb 9-1: Manufacturer: syz [ 2629.338716][T22806] usb 3-1: Using ep0 maxpacket: 16 [ 2629.350607][T21643] usb 9-1: SerialNumber: syz [ 2629.358605][T22806] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2629.373159][T22806] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2629.391080][T21643] usb 9-1: config 0 descriptor?? [ 2629.415699][T22806] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2629.426552][T22806] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2629.445104][T22806] usb 3-1: Product: syz [ 2629.449920][T22806] usb 3-1: Manufacturer: syz [ 2629.454606][T22806] usb 3-1: SerialNumber: syz [ 2629.458822][ T5578] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 2629.999409][T13006] Bluetooth: hci3: unexpected event for opcode 0x0401 [ 2630.031365][T21643] hub 9-1:0.0: bad descriptor, ignoring hub [ 2630.073569][T21643] hub 9-1:0.0: probe with driver hub failed with error -5 [ 2631.364824][ T5603] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9151'. [ 2631.926836][T22806] usb 3-1: 0:2 : does not exist [ 2631.969954][T22806] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 2632.058171][T22806] usb 3-1: USB disconnect, device number 66 [ 2632.187491][ T5607] cifs: Unknown parameter 'f,' [ 2632.519483][ T5611] netlink: 4 bytes leftover after parsing attributes in process `syz.9.9153'. [ 2632.541240][ T5612] netlink: 244 bytes leftover after parsing attributes in process `syz.9.9153'. [ 2632.626777][ T5593] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2632.648889][ T5593] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2632.749945][ T1252] raw-gadget.0 gadget.8: failed to queue suspend event [ 2632.838533][ T5578] raw-gadget.0 gadget.8: failed to queue resume event [ 2632.935123][ T1252] raw-gadget.0 gadget.8: failed to queue suspend event [ 2633.027899][ T5578] raw-gadget.0 gadget.8: failed to queue resume event [ 2633.069215][ T1252] raw-gadget.0 gadget.8: failed to queue suspend event [ 2633.137360][T31246] usb 10-1: new high-speed USB device number 71 using dummy_hcd [ 2633.147343][ T5578] raw-gadget.0 gadget.8: failed to queue resume event [ 2633.170071][ T76] raw-gadget.0 gadget.8: failed to queue suspend event [ 2633.249430][ T5578] raw-gadget.0 gadget.8: failed to queue resume event [ 2633.282106][ T76] raw-gadget.0 gadget.8: failed to queue suspend event [ 2633.298015][T31246] usb 10-1: Using ep0 maxpacket: 32 [ 2633.305558][T31246] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2633.316512][T31246] usb 10-1: config 0 has no interfaces? [ 2633.322754][T31246] usb 10-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 2633.332056][T31246] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2633.343868][T31246] usb 10-1: config 0 descriptor?? [ 2633.357218][T21645] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 2633.357268][ T5578] raw-gadget.0 gadget.8: failed to queue resume event [ 2633.390075][T14616] raw-gadget.0 gadget.8: failed to queue suspend event [ 2633.467735][ T5578] raw-gadget.0 gadget.8: failed to queue resume event [ 2633.488971][ T76] raw-gadget.0 gadget.8: failed to queue suspend event [ 2633.507404][T21645] usb 3-1: Using ep0 maxpacket: 32 [ 2633.514244][T21645] usb 3-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2633.529784][T21645] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2633.536477][T21645] usb 3-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00 [ 2633.545766][T21645] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2633.559723][ T5578] raw-gadget.0 gadget.8: failed to queue resume event [ 2633.561541][T21645] usb 3-1: config 0 descriptor?? [ 2633.600820][ T7110] raw-gadget.0 gadget.8: failed to queue suspend event [ 2633.677831][ T5578] raw-gadget.0 gadget.8: failed to queue resume event [ 2633.702258][ T76] raw-gadget.0 gadget.8: failed to queue suspend event [ 2633.809014][ T5578] raw-gadget.0 gadget.8: failed to queue resume event [ 2633.927846][T14616] raw-gadget.0 gadget.8: failed to queue suspend event [ 2633.945870][ T5637] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2633.975724][ T5637] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2634.758274][ T751] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2634.781614][ T751] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 2634.976366][ T2769] tipc: Resetting bearer [ 2635.112201][ T4874] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2635.130299][ T4874] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2635.139604][ T4874] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2635.155805][ T4874] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2635.170915][ T4874] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2635.330627][ T751] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2635.342497][ T751] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 2635.430163][ T5578] raw-gadget.0 gadget.8: failed to queue disconnect event [ 2635.530110][T21645] usbhid 3-1:0.0: can't add hid device: -71 [ 2635.536303][ T312] usb 9-1: USB disconnect, device number 102 [ 2635.560888][T21645] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 2635.588912][T21645] usb 3-1: USB disconnect, device number 67 [ 2635.610433][ T751] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2635.660347][ T751] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 2635.850534][ T751] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2635.862169][ T751] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 2635.906239][T22806] usb 10-1: USB disconnect, device number 71 [ 2636.027325][T21645] usb 3-1: new full-speed USB device number 68 using dummy_hcd [ 2636.209955][T21645] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2636.247380][T21645] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2636.304841][T21645] usb 3-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 2636.338719][T21645] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2636.338800][T22806] usb 10-1: new high-speed USB device number 72 using dummy_hcd [ 2636.377438][ T751] bridge_slave_1: left allmulticast mode [ 2636.383202][ T751] bridge_slave_1: left promiscuous mode [ 2636.401999][T21645] usb 3-1: config 0 descriptor?? [ 2636.405644][ T751] bridge0: port 2(bridge_slave_1) entered disabled state [ 2636.428568][ T751] bridge_slave_0: left allmulticast mode [ 2636.434916][ T751] bridge_slave_0: left promiscuous mode [ 2636.455304][ T751] bridge0: port 1(bridge_slave_0) entered disabled state [ 2636.528675][T22806] usb 10-1: device descriptor read/64, error -71 [ 2636.790758][T22806] usb 10-1: new high-speed USB device number 73 using dummy_hcd [ 2636.863114][T21645] isku 0003:1E7D:319C.00F1: unknown main item tag 0x0 [ 2636.870301][ T5662] netlink: 8 bytes leftover after parsing attributes in process `syz.8.9168'. [ 2636.887269][T21645] isku 0003:1E7D:319C.00F1: unknown main item tag 0x0 [ 2636.894520][T21645] isku 0003:1E7D:319C.00F1: unknown main item tag 0x0 [ 2636.901670][T21645] isku 0003:1E7D:319C.00F1: unknown main item tag 0x0 [ 2636.909030][T21645] isku 0003:1E7D:319C.00F1: item fetching failed at offset 6/7 [ 2636.917809][T21645] isku 0003:1E7D:319C.00F1: parse failed [ 2636.923828][T21645] isku 0003:1E7D:319C.00F1: probe with driver isku failed with error -22 [ 2636.937409][T22806] usb 10-1: device descriptor read/64, error -71 [ 2637.047603][T22806] usb usb10-port1: attempt power cycle [ 2637.238805][T13006] Bluetooth: hci1: command tx timeout [ 2637.417492][T22806] usb 10-1: new high-speed USB device number 74 using dummy_hcd [ 2637.439371][T22806] usb 10-1: device descriptor read/8, error -71 [ 2637.566542][ T751] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2637.577636][ T751] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2637.587772][ T751] bond0 (unregistering): Released all slaves [ 2637.688827][T22806] usb 10-1: new high-speed USB device number 75 using dummy_hcd [ 2637.718396][T22806] usb 10-1: device descriptor read/8, error -71 [ 2637.815624][ T751] bond1 (unregistering): Released all slaves [ 2637.827238][T22806] usb usb10-port1: unable to enumerate USB device [ 2637.836307][ T751] bond2 (unregistering): Released all slaves [ 2637.854278][ T5645] chnl_net:caif_netlink_parms(): no params data found [ 2638.010372][ T751] æÿîÿ: left promiscuous mode [ 2638.065349][ T751] : left promiscuous mode [ 2638.148118][ T751] tipc: Disabling bearer [ 2638.153789][ T751] tipc: Disabling bearer [ 2638.159636][ T751] tipc: Left network mode [ 2638.193110][ T5645] bridge0: port 1(bridge_slave_0) entered blocking state [ 2638.200651][ T5645] bridge0: port 1(bridge_slave_0) entered disabled state [ 2638.209429][ T5645] bridge_slave_0: entered allmulticast mode [ 2638.216888][ T5645] bridge_slave_0: entered promiscuous mode [ 2638.236023][ T5645] bridge0: port 2(bridge_slave_1) entered blocking state [ 2638.244186][ T5645] bridge0: port 2(bridge_slave_1) entered disabled state [ 2638.251676][ T5645] bridge_slave_1: entered allmulticast mode [ 2638.260029][ T5645] bridge_slave_1: entered promiscuous mode [ 2638.328009][ T891] usb 9-1: new full-speed USB device number 103 using dummy_hcd [ 2638.380834][ T5645] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2638.396377][ T5645] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2638.530541][ T5645] team0: Port device team_slave_0 added [ 2638.544128][ T5645] team0: Port device team_slave_1 added [ 2638.600574][ T891] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 2638.623650][ T5645] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2638.637300][ T5645] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2638.638725][ T891] usb 9-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 2638.675515][ T891] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2638.684015][ T5645] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2638.710023][ T891] usb 9-1: config 0 descriptor?? [ 2638.734229][ T5668] raw-gadget.3 gadget.8: fail, usb_ep_enable returned -22 [ 2638.745365][ T751] hsr_slave_0: left promiscuous mode [ 2638.758739][ T751] hsr_slave_1: left promiscuous mode [ 2638.762308][ T312] usb 3-1: USB disconnect, device number 68 [ 2638.769173][ T751] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2638.793146][ T751] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2638.830099][ T751] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2638.850020][ T751] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2638.913237][ T751] veth1_macvtap: left promiscuous mode [ 2638.920780][ T751] veth0_macvtap: left promiscuous mode [ 2638.926507][ T751] veth1_vlan: left promiscuous mode [ 2638.932787][ T751] veth0_vlan: left promiscuous mode [ 2639.209394][ T312] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 2639.327597][T13006] Bluetooth: hci1: command tx timeout [ 2639.346612][ T891] elan 0003:04F3:0755.00F2: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.8-1/input0 [ 2639.417208][ T312] usb 3-1: Using ep0 maxpacket: 8 [ 2639.431086][ T312] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 2639.465797][ T312] usb 3-1: config 0 has no interface number 0 [ 2639.477183][ T312] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2639.526688][ T312] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 2639.557182][ T312] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2639.597246][ T312] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 2639.627821][ T312] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 2639.636939][ T312] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2639.673534][ T312] usb 3-1: config 0 descriptor?? [ 2639.693748][ T312] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 2639.933874][ T5668] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2639.944142][ T5668] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2639.983427][ T312] usb 3-1: USB disconnect, device number 69 [ 2639.983520][ C1] ldusb 3-1:0.55: usb_submit_urb failed (-19) [ 2640.168561][ T5698] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2640.190336][ T5698] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2640.366388][ T751] team0 (unregistering): Port device team_slave_1 removed [ 2640.519022][T21645] usb 9-1: reset full-speed USB device number 103 using dummy_hcd [ 2641.397698][T13006] Bluetooth: hci1: command tx timeout [ 2641.484199][ T5645] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2641.497254][ T5645] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2641.525690][ T5645] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2641.549256][ T5668] netlink: 8 bytes leftover after parsing attributes in process `syz.8.9170'. [ 2641.746429][ T5645] hsr_slave_0: entered promiscuous mode [ 2641.756077][ T5645] hsr_slave_1: entered promiscuous mode [ 2641.763844][ T5645] debugfs: 'hsr0' already exists in 'hsr' [ 2641.772841][ T5645] Cannot create hsr debugfs directory [ 2641.966850][ T5710] kvm: pic: non byte read [ 2642.278272][ T751] IPVS: stop unused estimator thread 0... [ 2642.634083][ T312] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 2643.478776][T13006] Bluetooth: hci1: command tx timeout [ 2643.498540][T17594] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 2643.695658][T17594] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2643.717298][T17594] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 2643.773374][T17594] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2643.790569][T17594] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2643.818124][T17594] usb 3-1: Product: syz [ 2643.822400][T17594] usb 3-1: Manufacturer: syz [ 2643.829206][ T312] usb 10-1: new full-speed USB device number 76 using dummy_hcd [ 2643.832191][T17594] usb 3-1: SerialNumber: syz [ 2643.869596][T17594] cdc_mbim 3-1:1.0: skipping garbage [ 2644.016232][ T312] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2644.047220][ T312] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2644.089091][ T312] usb 10-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 2644.104911][ T5645] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2644.112154][ T5730] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 2644.137226][ T312] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2644.146792][ T5645] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2644.182004][ T312] usb 10-1: config 0 descriptor?? [ 2644.191127][ T5645] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2644.233515][ T5645] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2644.419615][T31246] usb 9-1: USB disconnect, device number 103 [ 2644.470836][ T5645] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2644.509810][ T5645] 8021q: adding VLAN 0 to HW filter on device team0 [ 2644.529751][ T6670] bridge0: port 1(bridge_slave_0) entered blocking state [ 2644.537035][ T6670] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2644.566249][ T76] bridge0: port 2(bridge_slave_1) entered blocking state [ 2644.573555][ T76] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2644.628377][ T312] isku 0003:1E7D:319C.00F3: unknown main item tag 0x0 [ 2644.646634][ T312] isku 0003:1E7D:319C.00F3: unknown main item tag 0x0 [ 2644.655821][ T312] isku 0003:1E7D:319C.00F3: unknown main item tag 0x0 [ 2644.673545][ T312] isku 0003:1E7D:319C.00F3: unknown main item tag 0x0 [ 2644.692634][ T312] isku 0003:1E7D:319C.00F3: item fetching failed at offset 6/7 [ 2644.704113][ T312] isku 0003:1E7D:319C.00F3: parse failed [ 2644.710980][ T312] isku 0003:1E7D:319C.00F3: probe with driver isku failed with error -22 [ 2644.747983][ T5730] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 2644.769722][T17594] cdc_mbim 3-1:1.0: setting tx_max = 16384 [ 2644.785731][T17594] cdc_mbim 3-1:1.0: cdc-wdm0: USB WDM device [ 2644.793562][ T5645] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2644.805891][T17594] wwan wwan0: port wwan0mbim0 attached [ 2644.857918][T17594] cdc_mbim 3-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.2-1, CDC MBIM, 36:31:40:d4:9f:84 [ 2645.008548][ C1] cdc_mbim 3-1:1.0: nonzero urb status received: -71 [ 2645.015410][ C1] cdc_mbim 3-1:1.0: wdm_int_callback - 0 bytes [ 2645.022395][ C1] cdc_mbim 3-1:1.0: nonzero urb status received: -71 [ 2645.029205][ C1] cdc_mbim 3-1:1.0: wdm_int_callback - 0 bytes [ 2645.035688][ C1] cdc_mbim 3-1:1.0: nonzero urb status received: -71 [ 2645.042581][ C1] cdc_mbim 3-1:1.0: wdm_int_callback - 0 bytes [ 2645.049177][ C1] cdc_mbim 3-1:1.0: nonzero urb status received: -71 [ 2645.055891][ C1] cdc_mbim 3-1:1.0: wdm_int_callback - 0 bytes [ 2645.062329][ C1] cdc_mbim 3-1:1.0: nonzero urb status received: -71 [ 2645.069036][ C1] cdc_mbim 3-1:1.0: wdm_int_callback - 0 bytes [ 2645.071578][ T5645] veth0_vlan: entered promiscuous mode [ 2645.075529][ C1] cdc_mbim 3-1:1.0: nonzero urb status received: -71 [ 2645.087666][ C1] cdc_mbim 3-1:1.0: wdm_int_callback - 0 bytes [ 2645.095011][ C1] cdc_mbim 3-1:1.0: nonzero urb status received: -71 [ 2645.095039][ C1] cdc_mbim 3-1:1.0: wdm_int_callback - 0 bytes [ 2645.108701][ C1] cdc_mbim 3-1:1.0: nonzero urb status received: -71 [ 2645.115432][ C1] cdc_mbim 3-1:1.0: wdm_int_callback - 0 bytes [ 2645.119017][ T5645] veth1_vlan: entered promiscuous mode [ 2645.121845][ C1] cdc_mbim 3-1:1.0: nonzero urb status received: -71 [ 2645.133843][ C1] cdc_mbim 3-1:1.0: wdm_int_callback - 0 bytes [ 2645.134430][ C1] cdc_mbim 3-1:1.0: nonzero urb status received: -71 [ 2645.146819][ C1] cdc_mbim 3-1:1.0: wdm_int_callback - 0 bytes [ 2645.155955][ T312] usb 3-1: USB disconnect, device number 70 [ 2645.163432][ T312] cdc_mbim 3-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.2-1, CDC MBIM [ 2645.293266][ T312] wwan wwan0: port wwan0mbim0 disconnected [ 2645.360114][ T5645] veth0_macvtap: entered promiscuous mode [ 2645.385578][ T5645] veth1_macvtap: entered promiscuous mode [ 2645.433237][ T5645] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2645.475350][ T5645] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2645.506122][ T3929] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2645.529135][ T3929] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2645.563559][ T3929] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2645.579608][ T3929] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2645.819643][ T2769] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2645.877656][ T2769] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2646.004887][ T76] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2646.030988][ T76] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2646.587426][T21643] usb 10-1: USB disconnect, device number 76 [ 2647.194034][ T5819] netlink: 8 bytes leftover after parsing attributes in process `syz.9.9190'. [ 2647.265653][ T5819] dvmrp5: entered allmulticast mode [ 2647.285147][ T5822] dvmrp5: left allmulticast mode [ 2648.078358][ T5827] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9192'. [ 2648.887973][ T5848] netlink: 'syz.1.9195': attribute type 1 has an invalid length. [ 2648.932480][ T5848] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2649.011952][ T5848] ALSA: mixer_oss: invalid OSS volume '' [ 2649.088346][ T5848] ptrace attach of "./syz-executor exec"[5854] was attempted by "./syz-executor exec"[5848] [ 2649.159522][ T5848] FAULT_INJECTION: forcing a failure. [ 2649.159522][ T5848] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2649.197543][ T5848] CPU: 0 UID: 0 PID: 5848 Comm: syz.1.9195 Tainted: G L syzkaller #0 PREEMPT(full) [ 2649.197571][ T5848] Tainted: [L]=SOFTLOCKUP [ 2649.197575][ T5848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2649.197583][ T5848] Call Trace: [ 2649.197588][ T5848] [ 2649.197594][ T5848] dump_stack_lvl+0x189/0x250 [ 2649.197616][ T5848] ? __pfx____ratelimit+0x10/0x10 [ 2649.197629][ T5848] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2649.197642][ T5848] ? __pfx__printk+0x10/0x10 [ 2649.197659][ T5848] ? __might_fault+0xb0/0x130 [ 2649.197682][ T5848] should_fail_ex+0x414/0x560 [ 2649.197703][ T5848] _copy_from_user+0x2d/0xb0 [ 2649.197718][ T5848] get_compat_msghdr+0xad/0x4a0 [ 2649.197737][ T5848] ? __pfx_get_compat_msghdr+0x10/0x10 [ 2649.197754][ T5848] ? kstrtouint+0x6e/0xe0 [ 2649.197774][ T5848] ___sys_sendmsg+0x193/0x2a0 [ 2649.197791][ T5848] ? __pfx____sys_sendmsg+0x10/0x10 [ 2649.197808][ T5848] ? rcu_read_lock_any_held+0xb3/0x120 [ 2649.197839][ T5848] ? __fget_files+0x2a/0x420 [ 2649.197852][ T5848] ? __fget_files+0x3a0/0x420 [ 2649.197880][ T5848] __sys_sendmsg+0x164/0x220 [ 2649.197894][ T5848] ? __pfx___sys_sendmsg+0x10/0x10 [ 2649.197914][ T5848] ? __pfx_ksys_write+0x10/0x10 [ 2649.197928][ T5848] ? __do_fast_syscall_32+0xbe/0x590 [ 2649.197944][ T5848] __do_fast_syscall_32+0x1f7/0x590 [ 2649.197957][ T5848] ? rcu_is_watching+0x15/0xb0 [ 2649.197970][ T5848] ? do_fast_syscall_32+0x34/0x80 [ 2649.197986][ T5848] do_fast_syscall_32+0x34/0x80 [ 2649.197999][ T5848] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2649.198013][ T5848] RIP: 0023:0xf70cd539 [ 2649.198025][ T5848] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2649.198035][ T5848] RSP: 002b:00000000f54bd55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 2649.198049][ T5848] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000340 [ 2649.198058][ T5848] RDX: 0000000004048000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2649.198065][ T5848] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2649.198072][ T5848] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2649.198079][ T5848] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2649.198096][ T5848] [ 2649.536885][ T5857] netlink: 16 bytes leftover after parsing attributes in process `syz.6.9196'. [ 2649.808236][ T5864] FAULT_INJECTION: forcing a failure. [ 2649.808236][ T5864] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2649.857285][T19677] usb 10-1: new high-speed USB device number 77 using dummy_hcd [ 2649.889340][ T5864] CPU: 1 UID: 0 PID: 5864 Comm: syz.2.9198 Tainted: G L syzkaller #0 PREEMPT(full) [ 2649.889367][ T5864] Tainted: [L]=SOFTLOCKUP [ 2649.889372][ T5864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2649.889379][ T5864] Call Trace: [ 2649.889384][ T5864] [ 2649.889391][ T5864] dump_stack_lvl+0x189/0x250 [ 2649.889410][ T5864] ? __pfx____ratelimit+0x10/0x10 [ 2649.889423][ T5864] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2649.889437][ T5864] ? __pfx__printk+0x10/0x10 [ 2649.889454][ T5864] ? __might_fault+0xb0/0x130 [ 2649.889477][ T5864] should_fail_ex+0x414/0x560 [ 2649.889497][ T5864] _copy_from_user+0x2d/0xb0 [ 2649.889513][ T5864] get_old_timespec32+0x88/0x130 [ 2649.889528][ T5864] ? __pfx_get_old_timespec32+0x10/0x10 [ 2649.889547][ T5864] __sys_recvmmsg+0xee/0x280 [ 2649.889564][ T5864] ? __pfx___sys_recvmmsg+0x10/0x10 [ 2649.889577][ T5864] ? ksys_write+0x22a/0x250 [ 2649.889590][ T5864] ? __pfx_ksys_write+0x10/0x10 [ 2649.889604][ T5864] __ia32_compat_sys_recvmmsg_time32+0xbf/0xe0 [ 2649.889623][ T5864] __do_fast_syscall_32+0x1f7/0x590 [ 2649.889637][ T5864] ? rcu_is_watching+0x15/0xb0 [ 2649.889650][ T5864] ? do_fast_syscall_32+0x34/0x80 [ 2649.889666][ T5864] do_fast_syscall_32+0x34/0x80 [ 2649.889679][ T5864] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2649.889693][ T5864] RIP: 0023:0xf704d539 [ 2649.889709][ T5864] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2649.889719][ T5864] RSP: 002b:00000000f543d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000151 [ 2649.889733][ T5864] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800037c0 [ 2649.889742][ T5864] RDX: 00000000000003b4 RSI: 0000000000000000 RDI: 0000000080003700 [ 2649.889750][ T5864] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2649.889757][ T5864] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2649.889764][ T5864] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2649.889782][ T5864] [ 2650.384174][ T5869] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9199'. [ 2650.697195][T19677] usb 10-1: Using ep0 maxpacket: 32 [ 2650.741627][T19677] usb 10-1: config 0 has an invalid interface number: 8 but max is 0 [ 2650.777166][T19677] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2650.797214][T17594] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 2650.807125][T19677] usb 10-1: config 0 has no interface number 0 [ 2650.853996][T19677] usb 10-1: config 0 interface 8 altsetting 248 has 2 endpoint descriptors, different from the interface descriptor's value: 10 [ 2650.886210][T19677] usb 10-1: config 0 interface 8 has no altsetting 0 [ 2650.920786][T19677] usb 10-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=2d.bb [ 2650.936989][T19677] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2650.955530][T19677] usb 10-1: Product: syz [ 2650.965586][T19677] usb 10-1: Manufacturer: syz [ 2650.980565][T19677] usb 10-1: SerialNumber: syz [ 2650.989321][T17594] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2651.002672][T17594] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 2651.007993][T19677] usb 10-1: config 0 descriptor?? [ 2651.019221][T17594] usb 3-1: config 1 has no interface number 0 [ 2651.026394][T17594] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2651.039044][T17594] usb 3-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 2651.052404][T17594] usb 3-1: too many endpoints for config 1 interface 1 altsetting 1: 247, using maximum allowed: 30 [ 2651.072558][T17594] usb 3-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 247 [ 2651.094311][T17594] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2651.104207][T17594] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2651.112712][T17594] usb 3-1: Product: syz [ 2651.118594][T17594] usb 3-1: Manufacturer: syz [ 2651.123269][T17594] usb 3-1: SerialNumber: syz [ 2651.272518][T19677] ath6kl: Failed to submit usb control message: -71 [ 2651.279425][T19677] ath6kl: unable to send the bmi data to the device: -71 [ 2651.287679][T19677] ath6kl: Unable to send get target info: -71 [ 2651.294808][T19677] ath6kl: Failed to init ath6kl core: -71 [ 2651.303350][T19677] ath6kl_usb 10-1:0.8: probe with driver ath6kl_usb failed with error -71 [ 2651.330473][T19677] usb 10-1: USB disconnect, device number 77 [ 2651.969241][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 2651.975750][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 2651.977584][ T5873] tipc: Enabled bearer , priority 0 [ 2651.998957][ T5873] syzkaller0: entered promiscuous mode [ 2652.004592][ T5873] syzkaller0: entered allmulticast mode [ 2652.022691][ T5873] tipc: Resetting bearer [ 2652.032196][T17594] cdc_ncm 3-1:1.1: failed GET_NTB_PARAMETERS [ 2652.038919][T17594] cdc_ncm 3-1:1.1: bind() failure [ 2652.048831][ T5872] tipc: Resetting bearer [ 2652.053913][T17594] usb 3-1: USB disconnect, device number 71 [ 2652.082255][ T5872] tipc: Disabling bearer [ 2667.317385][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 2713.400955][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 2713.412082][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 2761.557734][ T4874] Bluetooth: hci1: command 0x0406 tx timeout [ 2774.842276][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 2774.850811][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 2805.557569][ T31] INFO: task kworker/1:4:15033 blocked for more than 143 seconds. [ 2805.565512][ T31] Tainted: G L syzkaller #0 [ 2805.572183][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2805.581005][ T31] task:kworker/1:4 state:D stack:20992 pid:15033 tgid:15033 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 2805.594052][ T31] Workqueue: usb_hub_wq hub_event [ 2805.599726][ T31] Call Trace: [ 2805.603045][ T31] [ 2805.606009][ T31] __schedule+0x14bc/0x5000 [ 2805.610713][ T31] ? __pfx___schedule+0x10/0x10 [ 2805.615604][ T31] ? schedule+0x91/0x360 [ 2805.619995][ T31] schedule+0x165/0x360 [ 2805.624181][ T31] usb_kill_urb+0x1be/0x2d0 [ 2805.628843][ T31] ? __pfx_usb_kill_urb+0x10/0x10 [ 2805.633901][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 2805.640157][ T31] usb_start_wait_urb+0x1e3/0x4f0 [ 2805.645320][ T31] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 2805.651074][ T31] usb_control_msg+0x232/0x3e0 [ 2805.655882][ T31] hub_port_init+0xb1d/0x28e0 [ 2805.660750][ T31] hub_event+0x2573/0x4ef0 [ 2805.665261][ T31] ? __pfx_hub_event+0x10/0x10 [ 2805.670102][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 2805.675856][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2805.681169][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 2805.686924][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 2805.692724][ T31] process_scheduled_works+0xad1/0x1770 [ 2805.698580][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 2805.704986][ T31] worker_thread+0x8a0/0xda0 [ 2805.709700][ T31] kthread+0x711/0x8a0 [ 2805.713809][ T31] ? __pfx_worker_thread+0x10/0x10 [ 2805.719414][ T31] ? __pfx_kthread+0x10/0x10 [ 2805.724066][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2805.729582][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 2805.734825][ T31] ? __pfx_kthread+0x10/0x10 [ 2805.739630][ T31] ret_from_fork+0x599/0xb30 [ 2805.744273][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 2805.749587][ T31] ? __switch_to_asm+0x39/0x70 [ 2805.754398][ T31] ? __switch_to_asm+0x33/0x70 [ 2805.760283][ T31] ? __pfx_kthread+0x10/0x10 [ 2805.764925][ T31] ret_from_fork_asm+0x1a/0x30 [ 2805.769875][ T31] [ 2805.772983][ T31] [ 2805.772983][ T31] Showing all locks held in the system: [ 2805.780972][ T31] 1 lock held by khungtaskd/31: [ 2805.785855][ T31] #0: ffffffff8df41a20 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 2805.795814][ T31] 1 lock held by klogd/5189: [ 2805.800606][ T31] #0: ffff8880b863a918 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xad/0x140 [ 2805.810960][ T31] 2 locks held by getty/5590: [ 2805.815658][ T31] #0: ffff8880350d90a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 2805.825533][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x449/0x1460 [ 2805.835788][ T31] 5 locks held by kworker/1:4/15033: [ 2805.841158][ T31] #0: ffff888142abe148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 2805.852651][ T31] #1: ffffc900102cfb80 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 2805.864646][ T31] #2: ffff888144b46198 (&dev->mutex){....}-{4:4}, at: hub_event+0x187/0x4ef0 [ 2805.873689][ T31] #3: ffff888144b99518 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x215a/0x4ef0 [ 2805.885805][ T31] #4: ffff888029232168 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x2182/0x4ef0 [ 2805.898195][ T31] [ 2805.900534][ T31] ============================================= [ 2805.900534][ T31] [ 2805.909329][ T31] NMI backtrace for cpu 1 [ 2805.909350][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 2805.909376][ T31] Tainted: [L]=SOFTLOCKUP [ 2805.909383][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2805.909394][ T31] Call Trace: [ 2805.909402][ T31] [ 2805.909411][ T31] dump_stack_lvl+0x189/0x250 [ 2805.909443][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2805.909467][ T31] ? __pfx__printk+0x10/0x10 [ 2805.909508][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 2805.909538][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 2805.909567][ T31] ? __pfx__printk+0x10/0x10 [ 2805.909599][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 2805.909628][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 2805.909658][ T31] sys_info+0x135/0x170 [ 2805.909679][ T31] watchdog+0xf95/0xfe0 [ 2805.909710][ T31] ? watchdog+0x20a/0xfe0 [ 2805.909745][ T31] kthread+0x711/0x8a0 [ 2805.909774][ T31] ? __pfx_watchdog+0x10/0x10 [ 2805.909801][ T31] ? __pfx_kthread+0x10/0x10 [ 2805.909828][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2805.909858][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 2805.909885][ T31] ? __pfx_kthread+0x10/0x10 [ 2805.909910][ T31] ret_from_fork+0x599/0xb30 [ 2805.909933][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 2805.909963][ T31] ? __switch_to_asm+0x39/0x70 [ 2805.909986][ T31] ? __switch_to_asm+0x33/0x70 [ 2805.910008][ T31] ? __pfx_kthread+0x10/0x10 [ 2805.910034][ T31] ret_from_fork_asm+0x1a/0x30 [ 2805.910077][ T31] [ 2805.910084][ T31] Sending NMI from CPU 1 to CPUs 0: [ 2806.065953][ C0] NMI backtrace for cpu 0 [ 2806.065974][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 2806.065995][ C0] Tainted: [L]=SOFTLOCKUP [ 2806.066002][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2806.066011][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 2806.066034][ C0] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 93 90 0c 00 f3 0f 1e fa fb f4 c8 ed 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 2806.066048][ C0] RSP: 0018:ffffffff8dc07d80 EFLAGS: 000002c6 [ 2806.066064][ C0] RAX: 96e83b7877457600 RBX: ffffffff81978fda RCX: 96e83b7877457600 [ 2806.066076][ C0] RDX: 0000000000000001 RSI: ffffffff8d79261c RDI: ffffffff8bc08360 [ 2806.066088][ C0] RBP: ffffffff8dc07ea8 R08: ffff8880b86336db R09: 1ffff110170c66db [ 2806.066099][ C0] R10: dffffc0000000000 R11: ffffed10170c66dc R12: ffffffff8f822070 [ 2806.066111][ C0] R13: 1ffffffff1b92a68 R14: 0000000000000000 R15: 0000000000000000 [ 2806.066122][ C0] FS: 0000000000000000(0000) GS:ffff888125e35000(0000) knlGS:0000000000000000 [ 2806.066136][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2806.066147][ C0] CR2: 000055cb4e7714d0 CR3: 000000000dd3a000 CR4: 00000000003526f0 [ 2806.066172][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2806.066182][ C0] DR3: 000000000000000e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 2806.066193][ C0] Call Trace: [ 2806.066200][ C0] [ 2806.066207][ C0] default_idle+0x13/0x20 [ 2806.066225][ C0] default_idle_call+0x73/0xb0 [ 2806.066243][ C0] do_idle+0x1ea/0x520 [ 2806.066260][ C0] ? irqentry_exit+0x5ba/0x660 [ 2806.066278][ C0] ? __pfx_do_idle+0x10/0x10 [ 2806.066301][ C0] cpu_startup_entry+0x44/0x60 [ 2806.066317][ C0] rest_init+0x2de/0x300 [ 2806.066336][ C0] start_kernel+0x3a7/0x400 [ 2806.066353][ C0] x86_64_start_reservations+0x24/0x30 [ 2806.066372][ C0] x86_64_start_kernel+0x143/0x1c0 [ 2806.066391][ C0] common_startup_64+0x13e/0x147 [ 2806.066417][ C0] [ 2806.271877][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 2806.278744][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 2806.289523][ T31] Tainted: [L]=SOFTLOCKUP [ 2806.293926][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2806.304079][ T31] Call Trace: [ 2806.307545][ T31] [ 2806.310570][ T31] dump_stack_lvl+0x99/0x250 [ 2806.315225][ T31] ? __asan_memcpy+0x40/0x70 [ 2806.319915][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2806.325140][ T31] ? __pfx__printk+0x10/0x10 [ 2806.329761][ T31] vpanic+0x237/0x6d0 [ 2806.333777][ T31] ? __pfx_vpanic+0x10/0x10 [ 2806.338474][ T31] ? preempt_schedule_common+0x83/0xd0 [ 2806.343945][ T31] panic+0xb9/0xc0 [ 2806.347661][ T31] ? __pfx_panic+0x10/0x10 [ 2806.352091][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 2806.357460][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 2806.363616][ T31] watchdog+0xfdf/0xfe0 [ 2806.367774][ T31] ? watchdog+0x20a/0xfe0 [ 2806.372133][ T31] kthread+0x711/0x8a0 [ 2806.376219][ T31] ? __pfx_watchdog+0x10/0x10 [ 2806.380923][ T31] ? __pfx_kthread+0x10/0x10 [ 2806.385543][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2806.390769][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 2806.396015][ T31] ? __pfx_kthread+0x10/0x10 [ 2806.400745][ T31] ret_from_fork+0x599/0xb30 [ 2806.405341][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 2806.410461][ T31] ? __switch_to_asm+0x39/0x70 [ 2806.415230][ T31] ? __switch_to_asm+0x33/0x70 [ 2806.419998][ T31] ? __pfx_kthread+0x10/0x10 [ 2806.424599][ T31] ret_from_fork_asm+0x1a/0x30 [ 2806.429381][ T31] [ 2806.432689][ T31] Kernel Offset: disabled [ 2806.437028][ T31] Rebooting in 86400 seconds..