last executing test programs: 9m18.502439527s ago: executing program 1 (id=298): syz_open_dev$vivid(&(0x7f0000000000), 0x1, 0x2) userfaultfd(0x80801) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) pipe2(&(0x7f00000001c0), 0x0) write$UHID_CREATE2(r2, &(0x7f00000001c0)=ANY=[], 0x118) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="64f3a49a2aa20eeb7d00b8000000000f23d80f21f835400000400f23f8f466baf80cb876d28082ef66bafc0cb0b2c4c1f9fa933f490000c4e2b928bc765862e16af20fe6d4f3d973fc0f07670f35", 0x4e}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, &(0x7f0000000880)={{r3}, "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"}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_open_dev$swradio(0x0, 0x1, 0x2) (async) r5 = syz_open_dev$swradio(0x0, 0x1, 0x2) ioctl$VIDIOC_G_FREQUENCY(r5, 0xc02c5638, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x47ba, 0x0, 0x0, 0x0, 0x0) (async) io_uring_enter(0xffffffffffffffff, 0x47ba, 0x0, 0x0, 0x0, 0x0) 9m17.69604026s ago: executing program 1 (id=302): r0 = socket$inet6(0xa, 0x802, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x12, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@alu={0x4, 0x1, 0x7, 0x8, 0x6, 0xfffffffffffffff0, 0xfffffffffffffffc}, @exit, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000340)='syzkaller\x00', 0x101, 0xe1, &(0x7f0000000380)=""/225, 0x40f00, 0x20, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000000480)={0xa, 0x2}, 0x8, 0x10, &(0x7f00000004c0)={0x4, 0x9, 0x7ff, 0x6}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000500)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2, r2, 0xffffffffffffffff], &(0x7f0000000540)=[{0x4, 0x1, 0x9, 0x4}, {0x0, 0x1, 0xb}]}, 0x94) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="34000000100001080000000000000000cd70a144", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}}, 0x24048180) syz_emit_ethernet(0x4e, &(0x7f00000000c0)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x7, 0x6, "001b01", 0x18, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x2, 0x0}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0xff, 0x2, 0x3, 0x1, 0xfffffff6, [{0x5, 0x1, "c89600000500"}]}}}}}}, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x4, 0x200000005c831, 0xffffffffffffffff, 0x0) 9m17.315611446s ago: executing program 1 (id=304): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_CT_DIRECTION={0x5}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc8}}, 0x0) munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000ffe000/0x1000)=nil) r1 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r1, &(0x7f0000000140)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e23, 0xc15, @mcast1, 0xf6d}}, 0x24) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f00000001c0)={0x14, 0x88, 0xfa00, {r3, 0x10, 0x0, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x44}}}}, 0x90) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$netlink(r4, &(0x7f0000000100), 0xc) r5 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x2a00) ioctl$SG_BLKSECTGET(r5, 0x1267, &(0x7f0000000280)) socket$nl_netfilter(0x10, 0x3, 0xc) 9m17.176368885s ago: executing program 1 (id=306): r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x1a5}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) r1 = socket$xdp(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x312000, 0x800, 0x0, 0x5}, 0x20) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) syz_open_dev$vbi(&(0x7f0000000180), 0x3, 0x2) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xb1003fff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000080)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0) preadv(r6, &(0x7f00000000c0)=[{&(0x7f0000000240)=""/140, 0x8c}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000040)) 9m15.723891544s ago: executing program 1 (id=315): connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x8000001, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xf9}}, 0x10}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac95ab194f93f8e795a9b29420fa62d", 0x11}], 0x1}}], 0x1, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x0) connect$tipc(0xffffffffffffffff, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x1, 0x4}}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac0000000000000000000600", "f4bd00ac6700000000000000000000c2888e7d52164ec480e79200000100", [0x0, 0x2000000000001]}}) 9m15.478323821s ago: executing program 1 (id=317): syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, 0x0, 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000000)=0x0) (async) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) (async) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c0000001a00010000000000000000000a0000000000000000000000080010000000000006001d"], 0x2c}}, 0x0) (async) timer_settime(r2, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) (async) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r6, 0x4400ae8f, &(0x7f00000001c0)={"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"}) (async) ioctl$KVM_CAP_HYPERV_SYNIC2(r6, 0x4068aea3, &(0x7f0000000140)) (async) r7 = creat(&(0x7f0000000000)='./file0\x00', 0x6b) write$binfmt_elf32(r7, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x3, 0x2, 0x6, 0xd360, 0x3, 0x6, 0x8, 0x1b, 0x38, 0x1a4, 0x408, 0x3, 0x20, 0x1, 0x5, 0x8000, 0x1ff}, [{0x60000000, 0xff, 0x4, 0xc9, 0x0, 0x3, 0x3}]}, 0x58) (async) close(r7) (async) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000005c0)={0xc}) (async) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000040)={0x2, 0x0, [{0x400000b0, 0x0, 0xfffffffffffffffd}, {0x400000b1, 0x0, 0x8}]}) (async) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) (async) iopl(0x0) close_range(r8, 0xffffffffffffffff, 0x0) 9m0.356457119s ago: executing program 32 (id=317): syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, 0x0, 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000000)=0x0) (async) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) (async) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c0000001a00010000000000000000000a0000000000000000000000080010000000000006001d"], 0x2c}}, 0x0) (async) timer_settime(r2, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) (async) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r6, 0x4400ae8f, &(0x7f00000001c0)={"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"}) (async) ioctl$KVM_CAP_HYPERV_SYNIC2(r6, 0x4068aea3, &(0x7f0000000140)) (async) r7 = creat(&(0x7f0000000000)='./file0\x00', 0x6b) write$binfmt_elf32(r7, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x3, 0x2, 0x6, 0xd360, 0x3, 0x6, 0x8, 0x1b, 0x38, 0x1a4, 0x408, 0x3, 0x20, 0x1, 0x5, 0x8000, 0x1ff}, [{0x60000000, 0xff, 0x4, 0xc9, 0x0, 0x3, 0x3}]}, 0x58) (async) close(r7) (async) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000005c0)={0xc}) (async) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000040)={0x2, 0x0, [{0x400000b0, 0x0, 0xfffffffffffffffd}, {0x400000b1, 0x0, 0x8}]}) (async) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) (async) iopl(0x0) close_range(r8, 0xffffffffffffffff, 0x0) 7m39.310604713s ago: executing program 5 (id=734): r0 = socket$packet(0x11, 0x2, 0x300) (async) r1 = syz_open_dev$dvb_demux(&(0x7f0000000380), 0x8, 0x5814c0) ioctl$DVB_DEMUX_DMX_QBUF(r1, 0xc0186f3f, &(0x7f00000003c0)={0xb8, 0x470d071d, 0x3, 0x6, 0x14, 0x7}) (async) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'blake2s-128-x86\x00'}, 0x58) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000300000004000000089084b29f3605bd", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b708000000000000738af4ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_buf(r3, 0x0, 0x8008000000010, &(0x7f0000000740)="170000000200010000ffbe8c5ee17688a2006c000301000a000002a2576e5ed9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000fc0607bdca67a622c45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033ac2dfc060115003901000000000000ea000000000000000062068f5ee50ce5af9b1c56835382e9d969ba5149e9e90539062a80e605007f71174aa964f3c63e5a1b47b63a6323ded241482cfe17c3778a658cfecb61406ae7298f", 0xc0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000002060101000000000000000000f90003050005000a0000000900020073797a3000000000050001009f"], 0x30}}, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000200000000000800000000000000", @ANYRES32, @ANYBLOB="0f00"/20, @ANYRES32=0x0, @ANYRES32, @ANYRES16=r3, @ANYRES8=r5, @ANYRESHEX=r0], 0x50) (async) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="340000001c00010029bd7000ffdbdf2507000000", @ANYRES32=r7, @ANYBLOB="80007f0a0a0002000180c2000003000004000e8008000f"], 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x4044004) syz_open_dev$vcsu(&(0x7f0000000480), 0x7, 0x10b000) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYRESHEX, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b70300000000000085000000330000"], 0x0, 0x802, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001c0001000000000004086aa42d"], 0x30}}, 0x0) (async) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f00000002c0)={0x3, &(0x7f0000000000)=[{0x7, 0x7, 0xb0, 0x8}, {0xb, 0x0, 0x80, 0x7}, {0x0, 0xc, 0xd, 0x3}]}, 0x10) (async) accept4(r2, 0x0, 0x0, 0x0) (async) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000100)={{0x4000, 0x1000, 0xb, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x1}, {0x0, 0x60000, 0x3, 0x0, 0x0, 0x7, 0xf9, 0x6, 0x0, 0x0, 0x0, 0x42}, {0xeeef0000, 0x6000, 0x13, 0x9, 0x0, 0x0, 0x81, 0x0, 0x4, 0xe, 0x1, 0x3}, {0x8080000, 0x0, 0x4}, {0x7000, 0x1000, 0x3, 0x0, 0x0, 0x80, 0x80, 0x0, 0xfc, 0x0, 0x1a}, {0x100000, 0xd000, 0x10, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x84}, {0x4, 0x5000, 0x9, 0x4, 0x3, 0x0, 0x0, 0x0, 0x3}, {0x1, 0x100000, 0x0, 0xf9, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2}, {0x6000}, {0x1, 0xfffe}, 0x0, 0x0, 0x6000, 0x0, 0x0, 0x1, 0x900, [0xfffffffffffffffc, 0x0, 0x0, 0x3]}) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) (async) r11 = eventfd2(0x2, 0x801) ioctl$KVM_IOEVENTFD(r10, 0x4040ae79, &(0x7f00000000c0)={0x7, 0x2, 0x2, r11, 0xb}) (async) r12 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) io_setup(0x4, &(0x7f0000000340)) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r12, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x6, 0xfffffffffffffffd, 0x2, 0x5, 0x0, 0x4002004c5, 0x1000, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2], 0x8080000, 0x1144}) 7m39.153175348s ago: executing program 5 (id=736): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000000)=0x6, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)={0x5c, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x17e5}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x5c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newlink={0x40, 0x10, 0x403, 0x200000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x12080, 0x42}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8, 0x2, @udp6}, @IFLA_GTP_FD0={0x8, 0x1, @udp6=r1}]}}}]}, 0x40}, 0x1, 0xba01}, 0x0) 7m39.086650503s ago: executing program 5 (id=737): syz_open_dev$loop(&(0x7f0000000000), 0x1, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x20000, 0x2) syz_usb_disconnect(r0) syz_usb_connect(0x4, 0x24, &(0x7f0000000400)=ANY=[], 0x0) ioctl$EVIOCRMFF(r0, 0xc0085504, &(0x7f0000000000)=0x10) 7m37.980917605s ago: executing program 5 (id=744): socket$inet6(0xa, 0x2, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x1, 0x0, @ioapic={0x8082801, 0x5fa, 0x8, 0x5, 0x0, [{0x3, 0x6, 0x3, '\x00', 0xe}, {0x5, 0xb, 0x72, '\x00', 0x6}, {0xfe, 0x5, 0x9, '\x00', 0x5}, {0x81, 0x3, 0x8, '\x00', 0x5}, {0xb, 0x50, 0x7f, '\x00', 0x60}, {0xfe, 0x0, 0x2}, {0x1, 0x9, 0x9, '\x00', 0xa}, {0xd, 0x3, 0xb, '\x00', 0x45}, {0x8, 0x5, 0x7f, '\x00', 0xff}, {0x6, 0x5a, 0x0, '\x00', 0x6}, {0x3c, 0x4, 0x2, '\x00', 0x1}, {0x8, 0x4, 0x19, '\x00', 0xff}, {0x3, 0x86, 0x8, '\x00', 0xfa}, {0x1, 0x4f, 0x2}, {0x64, 0x87, 0x96, '\x00', 0x7}, {0xb, 0x0, 0x23, '\x00', 0x7b}, {0x3, 0x7, 0xe}, {0x68, 0x3, 0x2, '\x00', 0x3}, {0x8, 0x9e, 0xc0, '\x00', 0x2}, {0x3e, 0x48, 0xa, '\x00', 0x7}, {0x7, 0x1, 0x2, '\x00', 0x1}, {0x3, 0x7, 0x86, '\x00', 0x4}, {0x93, 0x1, 0x4, '\x00', 0xe6}, {0xb, 0x7f, 0xe0, '\x00', 0x47}]}}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x2, 0x0, @pic={0x0, 0x7, 0x0, 0x93, 0x0, 0x0, 0x4, 0xbb, 0x2, 0xc0, 0x6d, 0x26, 0x61, 0x6, 0x95, 0x7}}) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000380)={0x1, 0x0, [{0x4000000b, 0x101, 0x1, 0x8, 0x8, 0x5, 0x4}]}) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x9001) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x89900) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file3\x00', 0x2) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r5, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 7m34.711993353s ago: executing program 5 (id=761): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x100, @remote, 0x1}, 0x1c) getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x8) 7m34.454892231s ago: executing program 5 (id=762): syz_open_procfs(0x0, &(0x7f0000000080)='oom_score\x00') socket$alg(0x26, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0xa, 0x3, 0xff) socket$inet_sctp(0x2, 0x1, 0x84) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000040)=ANY=[@ANYBLOB="0100"], 0x6) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={r0, 0x7ffd, 0xffffffffffffffff}) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha384)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000040)=0x3) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r4, 0x1, 0x70bd28, 0x25dfdbfb, {{}, {}, {0x4c, 0x18, {0x4, @media='ib\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r5 = accept4(r2, 0x0, 0x0, 0x800) sendmsg$nl_generic(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002280)=ANY=[], 0xd80}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89101) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524000000", @ANYRES8=r6, @ANYBLOB="05", @ANYRES16=r6], 0x0) 7m33.841677522s ago: executing program 33 (id=762): syz_open_procfs(0x0, &(0x7f0000000080)='oom_score\x00') socket$alg(0x26, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0xa, 0x3, 0xff) socket$inet_sctp(0x2, 0x1, 0x84) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000040)=ANY=[@ANYBLOB="0100"], 0x6) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={r0, 0x7ffd, 0xffffffffffffffff}) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha384)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000040)=0x3) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r4, 0x1, 0x70bd28, 0x25dfdbfb, {{}, {}, {0x4c, 0x18, {0x4, @media='ib\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r5 = accept4(r2, 0x0, 0x0, 0x800) sendmsg$nl_generic(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002280)=ANY=[], 0xd80}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89101) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524000000", @ANYRES8=r6, @ANYBLOB="05", @ANYRES16=r6], 0x0) 6m28.427619239s ago: executing program 0 (id=1092): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(khazad)\x00'}, 0x58) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x20042, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket(0x28, 0x5, 0x0) r4 = syz_io_uring_setup(0x4f6, &(0x7f0000000380)={0x0, 0xc81d, 0x10, 0x4, 0x2cf}, &(0x7f0000000300)=0x0, &(0x7f00000002c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000140)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000001c0)=@vsock={0x28, 0x0, 0xffffffff, @host}, 0x0, 0x0, 0x1}) io_uring_enter(r4, 0x47b2, 0x10f9, 0x82, 0x0, 0x48) r7 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x3) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4040aea0, &(0x7f0000000300)=@x86={0x1, 0x0, 0x0, 0x0, 0x6, 0x38, 0x6, 0x5, 0x1, 0xff, 0x9, 0x7, 0x0, 0xfffffffc, 0x2, 0x8, 0x5, 0xf9, 0x0, '\x00', 0x8, 0xf90}) ioctl$KVM_SET_GUEST_DEBUG_x86(r7, 0x4048ae9b, &(0x7f0000000000)={0x80003, 0x0, {[0x2, 0x6, 0x9, 0x2, 0x8, 0x78b, 0xc7, 0x4d7b]}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r8 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r8) 6m27.213680501s ago: executing program 0 (id=1108): r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r2, {0xffff, 0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x83, 0xffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x101) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000002240)='./file0\x00', 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@newtaction={0x170, 0x30, 0xc96f2b0dc02613b7, 0x71bd23, 0x25dfdbff, {}, [{0x15c, 0x1, [@m_ife={0xa0, 0xb, 0x0, 0x0, {{0x8}, {0x48, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x1, 0x8, 0x8, 0x1ff, 0x8}, 0x1}}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x10800, 0xffffffff, 0x4, 0x800004, 0xe4}, 0x1}}, @TCA_IFE_DMAC={0xa, 0x3, @multicast}]}, {0x31, 0x6, "ea24464decc1b2772ce0e9d802b5374a8d6638c9f5d62d73097ad328a4154dd4046c261a61dc99ee70038b3509"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_csum={0x88, 0x14, 0x0, 0x0, {{0x9}, {0x4}, {0x59, 0x6, "1ed0822c77a64017dbc62f5d14d932ebc6c446abdf4e3b55ee133232e0d764e0b30353d506aa394ff3584b721f343a4bc8c7cfbb6a17c654556597efcdf1c89a39983e32329c72fdd0502d07e3e31ee946760a0bd1"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_skbmod={0x30, 0xd, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}, 0x170}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x8804, 0x0, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x6, &(0x7f0000000440)={0x7d, {{0x29, 0x0, 0x4000000, @mcast2, 0x40000005}}}, 0x88) r5 = open(&(0x7f0000000000)='./file0\x00', 0x8000, 0x0) write$sysctl(r5, &(0x7f0000000040)='5\x00', 0x2) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) lseek(r6, 0xfffffffffffffff5, 0x1) setsockopt$inet_udp_int(r0, 0x11, 0x66, &(0x7f0000000080), 0x4) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x301101, 0x0) preadv2(r8, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0xc2}, @NFTA_PAYLOAD_BASE={0x8}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x6}]}}}]}]}], {0x14}}, 0x84}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000040) arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x2) r9 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000206d0403ca9d000000000109022d1a010000700109040001010300010009210000020122070009058103"], 0x0) syz_usb_control_io$hid(r9, 0x0, 0x0) syz_usb_control_io$hid(r9, &(0x7f0000000400)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\"\a'], 0x0}, 0x0) unshare(0x8000000) 6m26.432879613s ago: executing program 0 (id=1111): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000400)="580000001400192340834b80040d8c560a067fbc45ff810500000000070058000b480400945f640094272d7061d328b92d0000000000008000f0fffeffe809000000fff5dd00000010000100090808004149004001040800", 0x58}], 0x1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000002c80)={0x0, 0x0, &(0x7f0000002c40)={&(0x7f0000003180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01080000e0030000000e02000000090001007300803000000000080002400000000214000000110001"], 0x50}}, 0x0) sendmsg$NFT_MSG_GETCHAIN(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="b0010000040a0102000000000000000002"], 0x1b0}, 0x1, 0x0, 0x0, 0x40}, 0x44000) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x24, 0x2a, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x3}, {}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) sendto$inet6(r0, 0x0, 0x0, 0x48080, 0xffffffffffffffff, 0x0) 6m26.036007738s ago: executing program 0 (id=1113): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x400000, 0x0, &(0x7f0000000000/0x400000)=nil) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r3 = open_tree(r1, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 6m25.203440275s ago: executing program 0 (id=1117): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x18, &(0x7f0000000980)=ANY=[@ANYBLOB="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", @ANYRESHEX=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000c41e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000005c0)=ANY=[@ANYRES64=0x0, @ANYRES16=r1, @ANYBLOB="010029bd7000fedbdf25170000004800068008000600000000003c0004"], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x4040800) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(0xffffffffffffffff) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f0000000540)=@name={0x1e, 0x2, 0x1, {{0x41, 0x8000001}, 0x4}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x200000, 0x3}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x2, 0x1}, 0x10) r5 = syz_io_uring_setup(0x110, &(0x7f0000000600)={0x0, 0x45885, 0x80, 0x0, 0x8}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r5, 0x3596, 0x0, 0x49, 0x0, 0x0) sendmsg$tipc(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000090}, 0x95) setsockopt$TIPC_DEST_DROPPABLE(r4, 0x10f, 0x81, &(0x7f0000000000), 0x4) recvmmsg(r4, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000380)=""/141, 0x8d}], 0x1}, 0x4}], 0x1, 0x1, 0x0) r8 = dup3(r3, r4, 0x0) setsockopt$TIPC_GROUP_LEAVE(r8, 0x10f, 0x88) r9 = creat(&(0x7f0000000480)='./file0\x00', 0x20) ioctl$TUNSETOFFLOAD(r9, 0x400454d0, 0x4) r10 = socket$unix(0x1, 0x2, 0x0) r11 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r12, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000014}, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r14 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r14, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r13, {0xb, 0xfff2}, {}, {0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x54, 0x2, [@TCA_BASIC_ACT={0x50, 0x3, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x17, 0x2, {{0x4, 0xffff, 0x3f, 0x2, 0x6}, 0x2}}]}, {0x3f}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x4) 6m24.895862844s ago: executing program 0 (id=1119): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000002b80)={0x0, &(0x7f0000001980)=""/4096, &(0x7f0000002980), &(0x7f0000002a80), 0x1, r0}, 0x38) 6m24.391280794s ago: executing program 34 (id=1119): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000002b80)={0x0, &(0x7f0000001980)=""/4096, &(0x7f0000002980), &(0x7f0000002a80), 0x1, r0}, 0x38) 5m2.819179258s ago: executing program 2 (id=1457): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) preadv(r6, &(0x7f00000015c0)=[{&(0x7f0000000140)=""/4078, 0xfee}], 0x1, 0xf2, 0x207fff) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{}, 0x0, 0x0}, 0x20) r7 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x20000) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r7, 0x40146f2c, &(0x7f00000000c0)={0x100, 0x0, 0x0, 0x5, 0x4}) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r7, 0x40146f2c, &(0x7f0000000040)={0x4, 0x0, 0x0, 0xb, 0x4}) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x5, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="9a", 0x1, 0x800, &(0x7f0000000480)={0xa, 0x4e23, 0x20000000, @loopback}, 0x1c) 5m0.304221048s ago: executing program 2 (id=1469): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300), 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000480)={{0xfffc, 0x9, 0x0, 0x6}, 'syz0\x00', 0x3}) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0xf7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x70, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2, 0x0, 0x10}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_LABELS={0xc, 0x16, 0x1, 0x0, [0x2, 0x3]}]}, 0x70}, 0x1, 0x0, 0x0, 0x200000d0}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) move_pages(0x0, 0x2, &(0x7f0000000300)=[&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil], &(0x7f0000000540)=[0x1, 0x1], &(0x7f0000001680), 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x40, 0x0, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@CTA_LABELS={0x8, 0x16, 0x1, 0x0, [0xfffffff3]}, @CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004890}, 0x200088a0) syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0xfbc6, 0x10100, 0x8000003, 0x0, 0x0, r2}, &(0x7f0000000100)=0x0, &(0x7f0000000240)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x230}}) io_uring_enter(0xffffffffffffffff, 0x2ded, 0x4004, 0x33, 0x0, 0x0) r7 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$printer(r7, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r2) socket$inet6_udp(0xa, 0x2, 0x0) r8 = syz_open_dev$cec(&(0x7f00000003c0), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r8, 0xc05c6104, &(0x7f0000004180)={"2370491d", 0x0, 0x5, 0x2, 0x8, 0x5, "000064640000001503fe00", "037ec42b", '\x00', "64bdac32", ["e86621d9cc668c391f77c506", "3549ffffffffffffff010800", "2fc7977386a7a0236a9cc1f0", "cf6cce2296b3f853e224c4e0"]}) r9 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r9, 0xc0145608, &(0x7f00000000c0)={0xb, 0x1, 0x4, 0x0, 0x7}) ioctl$vim2m_VIDIOC_STREAMOFF(r9, 0x40045612, &(0x7f0000000000)=0x1) 4m58.532059857s ago: executing program 2 (id=1481): r0 = socket$netlink(0x10, 0x3, 0x9) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, 0x0) (async, rerun: 64) gettid() (async, rerun: 64) timer_create(0x7, 0x0, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_gettime(r3, &(0x7f0000000140)) (async) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) (async, rerun: 32) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (rerun: 32) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 64) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (rerun: 64) setsockopt$inet6_group_source_req(r6, 0x29, 0x2c, &(0x7f00000002c0)={0x8, {{0xa, 0x4e22, 0x3, @loopback, 0x27}}, {{0xa, 0x4e20, 0x8, @rand_addr=' \x01\x00', 0x4}}}, 0x108) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x9, 0x2, 0x180, 0x4, 0x10, 0xf1, 0x50, 0x7fffffffffffe, 0x5, 0x6, 0x9, 0x8000000000000000, 0xf4a, 0x100000000, 0xbdb], 0xffff1001, 0x4000}) (async) r7 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(r7, 0x65, 0x8, 0xfffffffffffffffe, &(0x7f0000001280)=0x5a) io_setup(0x7, &(0x7f0000000780)=0x0) io_pgetevents(r8, 0x8, 0x8, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000100), 0x0) (async, rerun: 32) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x300f, 0x2, 0x0, 0x0, 0x0, 0x1}) (async, rerun: 32) r9 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) (async) ioctl$KVM_RUN(r9, 0xae80, 0x0) (async) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, 0x0) (async) syz_clone3(&(0x7f0000000440)={0x23800000, &(0x7f0000000040), 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) syz_genetlink_get_family_id$wireguard(0x0, r0) 4m58.052400179s ago: executing program 2 (id=1484): socket$inet6(0xa, 0x2, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000100)={0x1, 0x0, @pic={0x73, 0xf1, 0x6, 0x5, 0x7, 0x18, 0x0, 0xfd, 0x9, 0x6, 0x6, 0xa5, 0x0, 0x2, 0x0, 0x81}}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r2, &(0x7f0000000000)="ca", 0x1, 0x20000005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) recvfrom$inet(r2, 0x0, 0x0, 0x1, 0x0, 0x0) recvmmsg(r2, &(0x7f0000002a00)=[{{0x0, 0x0, 0x0}, 0x814}], 0x1, 0x40010121, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x2, 0x0, @pic={0x0, 0x7, 0x0, 0x93, 0x0, 0x0, 0x4, 0xbb, 0x2, 0xc0, 0x6d, 0x26, 0x61, 0x6, 0x95, 0x7}}) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000380)={0x1, 0x0, [{0xd, 0x101, 0x0, 0x2000008, 0xfffffffb, 0x205, 0x5}]}) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x9001) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) 4m55.613544295s ago: executing program 2 (id=1489): r0 = openat(0xffffffffffffff9c, 0x0, 0x109442, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async, rerun: 32) r2 = socket$unix(0x1, 0x2, 0x0) (rerun: 32) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) r3 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000100)={r3}) (async, rerun: 32) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async, rerun: 32) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000340)) (async, rerun: 64) sendmsg$unix(r2, &(0x7f00000000c0)={&(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x303de1f53b11ae}, 0x20008840) (rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="180800000000000000000000b400000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf09000000000000550901000000000095"], 0x0, 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x1d, &(0x7f0000000080)=0x7, 0x4) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000040)=0x44f3, 0x4) recvmmsg(r2, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/57, 0x39}, 0x8}], 0x1, 0x1000400000de, 0x0) (async) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1}) (async) io_uring_setup(0x5807, &(0x7f00000004c0)={0x0, 0x1374, 0x40, 0x2, 0x21b, 0x0, r0}) (async) r5 = syz_io_uring_setup(0x3e7c, &(0x7f0000000540)={0x0, 0x7b8b, 0x200, 0x1, 0x313}, &(0x7f0000000480)=0x0, &(0x7f0000000280)=0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r6, r7, &(0x7f0000000600)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x40, 0x0, r9, 0x0, &(0x7f0000000000)="bda8", 0x2, 0x100, 0x1}) (async) io_uring_enter(r5, 0x46f3, 0x0, 0x0, 0x0, 0x0) write(r8, &(0x7f0000000200)='~', 0x1) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async, rerun: 64) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) (async, rerun: 64) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000007f167409c242c931bf90000000109021200010000000009040080"], 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) (async, rerun: 32) r10 = socket$packet(0x11, 0x3, 0x300) (rerun: 32) setsockopt$packet_int(r10, 0x107, 0x6, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x47361000) (async) ioctl$KVM_CREATE_GUEST_MEMFD(r4, 0xc040aed4, &(0x7f0000000440)={0x200001fe0000, 0x2000000000}) 4m53.679483522s ago: executing program 2 (id=1503): socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000004800000000000000000a20000000000a03000000000000000000070000040900010073797a30000000008c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d48001280140001800c000100636f756e7465720004000280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008000001800b6fcf1a22796e736574000008000340000001", @ANYRES8=r0], 0xd4}, 0x1, 0x0, 0x0, 0x24004041}, 0x0) 4m53.458848619s ago: executing program 35 (id=1503): socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000004800000000000000000a20000000000a03000000000000000000070000040900010073797a30000000008c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d48001280140001800c000100636f756e7465720004000280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008000001800b6fcf1a22796e736574000008000340000001", @ANYRES8=r0], 0xd4}, 0x1, 0x0, 0x0, 0x24004041}, 0x0) 12.32944277s ago: executing program 7 (id=2918): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) clock_gettime(0xaa36e421d3e1fd1, 0x0) 12.207768572s ago: executing program 7 (id=2919): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) pipe2$watch_queue(&(0x7f0000002240), 0x80) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000001900010000000000000000001c140000fe000001000000", @ANYRES64=r2], 0x24}}, 0x4000000) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/rt_acct\x00') r5 = socket(0x18, 0x800, 0x0) sendfile(r5, r4, 0x0, 0x8) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0x4}, {}, {0x6, 0xffff}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}, @TCA_CHAIN={0x8, 0xb, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0xc858}, 0x80) sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r9, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x5, 0x0) r11 = syz_usb_connect$hid(0x5, 0x47, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0xc70, 0xf014, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xf0, 0x2, "", [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x4, 0x1, {0x22, 0x29}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x0, 0x6, 0xe9}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r11, 0x0, 0x0) syz_usb_control_io$hid(r11, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 9.138608007s ago: executing program 4 (id=2938): sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x28}}, 0x0) r0 = socket(0x1000000010, 0x80802, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) setsockopt$TIPC_CONN_TIMEOUT(r3, 0x10f, 0x8a, 0x0, 0x2e) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r5 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r4, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r6 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) r7 = socket(0x10, 0x803, 0x0) getsockname$packet(r6, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000140)={'veth0_virt_wifi\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000280)={'gre0\x00', r4, 0x80, 0x8000, 0x401, 0x5536, {{0x3f, 0x4, 0x0, 0x38, 0xfc, 0x68, 0x0, 0x8, 0x4, 0x0, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x3e}, {[@rr={0x7, 0x2b, 0x64, [@initdev={0xac, 0x1e, 0x1, 0x0}, @local, @broadcast, @multicast1, @local, @multicast1, @local, @loopback, @multicast1, @multicast2]}, @noop, @timestamp_addr={0x44, 0x3c, 0x57, 0x1, 0x1, [{@broadcast, 0x3}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x69c5}, {@rand_addr=0x64010101, 0x1}, {@loopback, 0x40}, {@empty, 0x200}, {@broadcast, 0x1afbe1fb}, {@broadcast, 0x5fb69bcb}]}, @timestamp_prespec={0x44, 0x2c, 0xaa, 0x3, 0x6, [{@rand_addr=0x64010100, 0x3}, {@rand_addr=0x64010102, 0x19}, {@broadcast}, {@multicast1, 0xfffffffa}, {@remote, 0x3}]}, @generic={0x82, 0x8, "bad975823f14"}, @noop, @lsrr={0x83, 0x1b, 0x1d, [@loopback, @multicast2, @local, @private=0xa010100, @remote, @local]}, @cipso={0x86, 0x30, 0x0, [{0x7, 0x3, '\f'}, {0x5, 0xf, "73711ce8055811b34ba2b13a11"}, {0x1, 0x9, "d92eb88755fbce"}, {0x5, 0xa, "1fa0e4d43c7cb09e"}, {0x5, 0x5, "a8c171"}]}]}}}}}) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r1, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x6040300b}, 0xc, &(0x7f0000000500)={&(0x7f0000000800)=ANY=[@ANYBLOB="cc000000", @ANYRES16=0x0, @ANYBLOB="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"], 0xcc}}, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="4400000010000104fcfffffffbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0315000004000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r9, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r8], 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x4924924924926d3, 0x0) 9.002798994s ago: executing program 7 (id=2939): syz_usb_connect$uac1(0x0, 0x9b, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902890003010000000904000000010100000a24010000000201020524040000090401000001020000090401010101020000072401000000000c24020100000005d5ae37460905010900000000000725010000000009e6010000010200000904020101010200000b2402011e0300019f8eca072401000000000905010910"], 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, &(0x7f0000000400)={0x7}) syz_usb_connect(0x0, 0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="120100002ec6601037210100352a010203010902120001000000000904"], 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0), 0x42801, 0x0) syz_usb_connect$uac2(0x1, 0xd4, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x582, 0xc, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc2, 0x3, 0x1, 0x7, 0xa0, 0xa, {0x8, 0xb, 0x0, 0x2, 0x1, 0x3, 0x20, 0xb}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x9, 0x9, 0x12, 0x9}, [@sample_rate={0x9, 0x24, 0xd, 0x5, 0x0, 0x1, [0x1]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@as_header={0x10, 0x24, 0x1, 0x9, 0xcd, 0x0, 0x4, 0x9f, 0x1, 0x8}, @as_header={0x10, 0x24, 0x1, 0x4, 0x1, 0x2, 0x3, 0x1, 0x1ff, 0xf2}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x1, 0x2, 0x1, 0x0, "0e19882db10b"}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x9, 0x2, 0x5, 0x6}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0xf9dc, 0xffff, 0x4, 0x80}, @as_header={0x10, 0x24, 0x1, 0x6, 0x4, 0x2, 0x3, 0xfd, 0xfffffff9, 0xe8}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x0, 0x0, 0xf, {0x8, 0x25, 0x1, 0x2, 0x0, 0x7, 0x8001}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x4, 0x8, 0xf5, {0x8, 0x25, 0x1, 0x80, 0x3c, 0xf, 0x7f}}}}}}}}]}}, &(0x7f00000003c0)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x200, 0x1, 0xc, 0x66, 0xff, 0xd5}, 0x42, &(0x7f0000000040)={0x5, 0xf, 0x42, 0x4, [@wireless={0xb, 0x10, 0x1, 0xc, 0x63, 0x0, 0x80, 0x7f, 0x4}, @ss_container_id={0x14, 0x10, 0x4, 0x5a, "ea9ac2b7455e67612040807f5b82cf73"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x3, 0x8, 0x0, 0x7}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "7541de06f0c0e434e452c271d0a3b03e"}]}, 0x2, [{0xe, &(0x7f0000000280)=@string={0xe, 0x3, "ef5531c925f33734b1ae7e6c"}}, {0xdd, &(0x7f00000002c0)=@string={0xdd, 0x3, "a2637154e19e59d23ada6364e20279dc1295e221c70f933a164c7451feb9db5b5009bcadf56985b6529c16a8d96f60acaf043b6963dfa6fc40c76ed69860cae1169b8f684a31b2352c1f582885114e41f5d10cab7f90893aee41199e3e9ef17fdb9d6ecbd56b4d75fc7878b646ff9e563b5ed455f27398229e3bbaa1fadc0f5deb7cfbe45cbaefb58fa329d13228eed78b5770c8533755c415f478beb3eb4cc58d3709f3eeb6877b3deca7f6235f39cc70010cf430c31ae076545f4b7a159bd8bffecf303a0e642b159977d92b4ebef6fb670d1d352df6a216cea3"}}]}) 8.741288877s ago: executing program 4 (id=2941): r0 = syz_usb_connect(0x6, 0x46, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000e75fcc08c0070515c5b8010203010902340001000080000904ba00038e4ee2000905000000041a06010905010300021007c109050c04400006030f07059acbf5"], 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r1, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, r2, 0x0, 0x8097, 0x8000000}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r2, 0x0, &(0x7f0000ff6000/0xa000)=nil, 0xa000, 0x1}) syz_usb_control_io$printer(r0, &(0x7f00000003c0)={0x14, 0x0, &(0x7f00000002c0)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r3, &(0x7f0000000000)="93", 0xf5) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) prctl$PR_SET_NAME(0x4, 0x0) ftruncate(r4, 0x200) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x3a, 0x301, 0x70bd25, 0xfffffffc, {0x5}}, 0x14}}, 0x0) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$peeksig(0x4209, r6, &(0x7f0000000000)={0x0, 0x1}, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r3, {0xee01}}, './file0\x00'}) newfstatat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300), 0x4000) sendmsg$nl_generic(r5, &(0x7f0000000380)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000001140)={0x308, 0x20, 0x200, 0x70bd26, 0x25dfdbff, {0x2}, [@nested={0xc, 0x28, 0x0, 0x1, [@typed={0x8, 0xeb, 0x0, 0x0, @pid=r6}]}, @generic="fa30c65d3926acbef6b7c2e51c1233b22633330946830c5b8ce7dea7623e7fa7ae68a47b11c52c52ef14249c60dafc7128fef2b4baf385a917520d1390a23033f1191c46f0486b7109f0508a2b301c5d623851e44eb0a9c291", @nested={0x1c5, 0x144, 0x0, 0x1, [@nested={0x0, 0x8b, 0x0, 0x1, [@generic="988067181e32e3b1b69a551de297ae6b57a76c175d9ff8befab1e52efbc996d2ad0c4d2b5787e7b43a52a6717592d88bd3e9257d7c10753bab7d671dcfc3d57eb3e091992d1ae2bbd20bb6d8bf16d38646d04d205a2e428b61492ab97c48f793a90ba17edf53093f441ee35680878c96f6eb6a75c7e26bd30dbd5589b0fd414c4ffa66c4d6dcd29586e7369a129a785ac45238c03e35c4414dbd9f3523fe2c62ffb832ae760daadb55a38f3b692943ea0fa006a121ce93ddfb2a31fb", @generic="555d51f82ea181be1230f284d2cf1cbf329e7f6d954eafe038f49f5d2a131d405df1abb04199fea546c24a63d06b53bd6589266f1cb97960fe476c832517596e3a6488e375d9021c2d942ee566378dfaf9a7f0038113812d4c981e46913f0778145c93b7767b233b6df1afe6359e0595d3af541746767f7563aed4", @generic="02390c9075d3d60eed22649c5607b6422deab27232d947bba6d17550df8e9974294690865b434b150f73b2d4db2dacbc89a106fb1bde6c1c8c0f8f84c24e396b10a8dd960d288559051bafd055de9b44cb9fafb83f", @typed={0x0, 0xcf, 0x0, 0x0, @ipv4=@rand_addr=0x64010102}, @typed={0x0, 0x105}, @generic="58bc63d846df8e56983800c4eeba15ea7e3d414ed6d17c2dc6131364f50c57040c2c2268a0f2e5c9c9fbaf7128cf4dd7bff420a0", @nested={0x0, 0x96, 0x0, 0x1, [@nested={0x0, 0x126}, @generic="2f0ad8a9258c87ca714735f6ff771f2057f7ebd39f7d407100265ada17f928e4e0800e6b01c1df142e081976b8c41ad1318e94fd05d5978aac2432aa8b29222421e06dba0a000f104a828480f537da253fa215dda9347ba45155a3e98233d94af77a9f58870fa5fd703022959e38f372a1eb0dce6d64ba092875525c4f12494735f3044049e22a33c3cb439b7bc7bb8aa595cf41c72d3772ae5f194a528f49d81aea13cda7d0a77212cee3cc1270a6398a0314c6fbd702a36463038367571e060098e11b807317ae3cea64dcd67ac10effe32fc1c7d23f08ed3e90232177948aeaf0368a923e3ba7", @typed={0x0, 0x47, 0x0, 0x0, @str='GPL\x00'}]}]}, @nested={0xfffffffffffffd14, 0x11}, @generic="f8da1028365719171e", @nested={0x4, 0x143}, @generic="cb65a3ba8e7a5938c0c0bb73090e3c005e6f34268c00ff0f51626d145ad2e13d0bcbe8e31d34c983816b00835c848e2ce881fb2a908dcfd1e33019aae96ec7060cd7e6c4db4b390ae6ccb82a29954f27a4a81487e9435b98eb58821afb63fb69e768ac3b2124e165f03c0f0963c59c7432b434506f0acc3cdca70bf94a27ed7cf999e9a7e38da73405a2e9b0917012ee60aa8a4f245e26ddf37ff9b62279b692950d83e29b6a2fbdff1472fef4b4446f4879e482030d590e6871d2ca9eac", @nested={0x4, 0x14f}, @generic="bb9b7ec8296ddedb4eb8ad6c985beea79fa8015fc24a7b5cf17ecb696f45d62688d91ad4c7804d8b62c088da93e954e73f0acdd64c36eccc1f39d481a8a992b704c491a64336c0fd873385065c41515733d3caba57e93c3328079a06383809c167959b5ae3ff86d80b608d3c3bb84b5e49cd006a0db6132cf37326919e249a29199529fea0ac12a72067a2248c4bf014f6450d831b747e74e17ea2bf4f3c5e71a37398257bc138ff07c00f5fb4130127ea6d02eba0030ab6429cb5164692c554fde5b985bc49087fcc61f3453cc3fbb298266640f591fe72396a", @generic="5b95ba07c4a321200a0be58f83e442d309fd9db6a44fbd82b6d9c28b5350704dc1d9b6fe03910212401ce5"]}, @nested={0x86, 0x156, 0x0, 0x1, [@generic="0c83131053ea6901d768c21a35548a99f1dc3a9d96d1d625972a7c41dcda1f6c9fcb54c3760789b1c38b38d7cf92715a4c21557dd2392086d5a8c1bfed1f2fc48e405ded211d9c903dba97738212d18250ab421bbf224c1d0080f4ddfefae9d47447f5e877da6f3fafbe3d7a1719d9c968a5dbc6ee93a5f55672d00a99f73a949c60"]}, @generic="3944fc472146ba1ba26d6beff2696c3cf8f35b136c8175333127fe53dd9c10fb64c8959b2a7bd6cdbf1f1b88671229652eab590318d49cdcb54b6c8997"]}, 0x308}, 0x1, 0x0, 0x0, 0x8040}, 0x20004010) r7 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) get_robust_list(r7, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/sockstat\x00') r8 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) r9 = fsmount(r8, 0x0, 0x1) fchdir(r9) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x121440, 0x0) r10 = syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r10, 0xc0205648, &(0x7f0000000100)={0x9b0000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x9b0905, 0xfffffff7, '\x00', @p_u8=&(0x7f00000000c0)=0xff}}) 8.127688122s ago: executing program 4 (id=2945): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x400000000003, 0x7ffff, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = syz_open_dev$loop(&(0x7f00000005c0), 0x75f, 0xa382) r2 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4007, @fd_index=0x4, 0x1, &(0x7f0000000000)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1, 0x0, 0x1}) io_uring_enter(r5, 0xc86, 0x0, 0xe, 0x0, 0x0) ioprio_set$pid(0x3, 0x0, 0x0) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000b40), 0x2, 0x0) syz_fuse_handle_req(r8, &(0x7f00000060c0)="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", 0x2000, &(0x7f0000001e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$inet6_sctp(0xa, 0x1, 0x84) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r9, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0000000002acfc7a1e757babed790590eb246f9433f3139d8c37044b337be688f48d49d2258d091b238c4169c498d5b839bc04d60b54fa0b2023523d10e1cc87f241278ca9e7be55b6e2cc9348298b21fef918d331945324dd9bcbb9e8da7c9a203160d31c0c2d08b8f0fe644f8d4dbcde747b13c88c6441e1240000000000000000", @ANYRES16=r10, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac14140f00000000000000001400020002000000ffffffff00000000000000000d0001007564703a73797a3200000000"], 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00009d", @ANYRES16=r10, @ANYBLOB="010026bd7000fbdbdf2505000000280001800d0001007564703a73797a320000000014000280080003008a000000080004000cdb0000"], 0x3c}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) 5.963978637s ago: executing program 7 (id=2949): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x9, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6(0xa, 0x1, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r3}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f00000007c0)={0x28, 0x3, r3, 0x0, &(0x7f0000000000/0x800000)=nil, 0x800000, 0x1004000}) syz_usb_connect(0x4, 0x8b9, &(0x7f0000000800)={{0x12, 0x1, 0x110, 0x82, 0xb7, 0x74, 0xa178af439821247b, 0xbfd, 0xc, 0x7b32, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8a7, 0x3, 0x9, 0x6, 0x0, 0x2c, "", [{{0x9, 0x4, 0xce, 0x4, 0x7, 0x47, 0x84, 0x99, 0x1, [@uac_control={{0xa, 0x24, 0x1, 0x5, 0x12}, [@extension_unit={0x8, 0x24, 0x8, 0x5, 0x6, 0x8, "1a"}]}, @hid_hid={0x9, 0x21, 0x7, 0xf2, 0x1, {0x22, 0x9b7}}], [{{0x9, 0x5, 0x6, 0x10, 0x0, 0x5, 0x7, 0x7}}, {{0x9, 0x5, 0xb86b774077fad22e, 0x10, 0x200, 0x0, 0x7, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xe2, 0x10}, @generic={0x96, 0x23, "0ec7defe8b817274e846cbc08ef85f268a4cac6c71cdec716fdcf0eb5bb5e17a2ddaea77c4d558adbaffff8a4ea04e597e8bbedf8fe853c7dc8bd10b75c1f4c4e22add923af8e249671e9314378654257519ad475f6888d1b0328b24874c78684ecb8b66d569ac45b40ddc4268d05f73a53df1d7e03a33679b927e06b4159f7bd56313499dc6dab730e6e6ad7e560dc3293a28b8"}]}}, {{0x9, 0x5, 0xd, 0x10, 0x1f7, 0x1e, 0x2, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x24, 0x5}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x2, 0xfffd}]}}, {{0x9, 0x5, 0xe, 0x0, 0x10, 0x2, 0x22, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x10, 0xf}, @generic={0x9c, 0xc, "7955ed963786fb421c44335aec580961e38cb689d28cd42c4af08d84c7cedea71a7bc583979f5456bbd8649615ca34b73ceb5caa817e3409c438cbcdc1ed08413e48629a2734a39f782b838abeefd6e65ddef1f93bdfb73af8339692c92a1a958ace2af4bd2e8a941383d1b5048004019a8d28fe581b1d69d8128a66bbc6fd1d51eb5c0533c522ae446570ba085d47ba5667c11535f0826a8431"}]}}, {{0x9, 0x5, 0x7, 0xc, 0x40, 0x80, 0x0, 0x8, [@generic={0xcb, 0xc, "55d85e8e8a1c98825678e0a449ccb0b456837c7406e4819dab9ac5b1ace0cd3dc852153c108c193e373ab2a6573d593c917d5715075df1966d5e65966cfea139dfacdac0b643cb64150a7b5a6a3e901fb75f60d7e31a454b184629bc67aa32e4575c82c1784f1ada5eef950fd54ef63fbd7ff90887989446f2c6360f8055f6d9fc953a77de1df5667bd485c7c42de87855eeabb9308698a480906386386c381cb1d1d5a3c752e999b63a828137e022a8a6536a5d1247840b16651ff892aac9622ede2cc721e0a2823b"}]}}, {{0x9, 0x5, 0x80, 0x3, 0x20, 0x7f, 0x2, 0x64, [@generic={0x6a, 0x22, "857038aeb17d7f043442f3f7425f75afc3da51c334ae4398b480bb3af51e4a5f7d9098914c88d422812a046a93938a63cbbf916bbf7d9aea059587678f6d567210ff3a2769a136f982a0a111b894d6c1533ede1e887cd5ff3958ed9b0a46180b02ecc99cbaf69cd0"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x3ff, 0x8, 0xbd, 0x5, [@generic={0x57, 0x8, "7d6da29edc863d0b127c731b7c16f93f3d0791ede903d61f5023edda75b41bd62cf2abdb42f1b781dac0c4c3be73917599003d885f76532615e4a7c8064905bfcac32118edf5b29cdbc7eec9b60d5cde809e1a3bd7"}]}}]}}, {{0x9, 0x4, 0xdd, 0xf, 0xe, 0xcd, 0xea, 0x9c, 0x8, [@uac_as, @cdc_ecm={{0x6, 0x24, 0x6, 0x0, 0x0, "f3"}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x0, 0xfffe, 0x0, 0x40}}], [{{0x9, 0x5, 0x8a, 0x10, 0x200, 0xfd, 0x20, 0x8, [@generic={0xf7, 0x11, "f64df675e400efc9847d500adb567239644384b0044466745097d5313a4ba83c1c4048bc309cf0699077e6353d4d15b0c8c4f816d3a2fedd06810296e736c2bd9b204896b3891eb22413f631763309d85805af6d3291fbc4b7a53a78d47870e109877ab7321eeae252a42dce3b355a9e4744b3443b8e8b5282bf5c36039a21ea812a68a575ccf683fe01ae902e84047ab69d543f457d49bd29a0868af88fa2fdfd4a0b0335da16d99219f43e069080cd3b8de7f377191026195eb90a9db2345207f65fe4c9bb2adf94ff0962a330ef1e45143a8693d7cba9bfc2ac7ae95178b37f98a2c2d9753f3c040db84c618d1608f350a2583d"}]}}, {{0x9, 0x5, 0x5, 0x0, 0x40, 0xad, 0x6, 0x7}}, {{0x9, 0x5, 0x4, 0x8, 0x20, 0x81, 0x2, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x4, 0x4}]}}, {{0x9, 0x5, 0x4, 0x0, 0x3ff, 0x2, 0xf9, 0x9, [@generic={0x6d, 0x3, "7969be4343f3e539a3d52db74dd3b2c9cfa492c0d03e20d7acef5e246b0b59d6cbad64ffbf9c1f07719608e85efa8494524ba0297112b5f8ed1738aa5f5336b3ebca9354bcb21fe79ab0de929c7402bd7914434b413d6c03c295f0148e297d5a42f0a9be1f69c4ec680b16"}]}}, {{0x9, 0x5, 0x1, 0x4, 0x40, 0x8, 0x4, 0x81, [@generic={0x82, 0xa, "f5814278907a134daccdf7a802dfc2fe4f657ab76a356807975675bb442e74215b22d77ddecb5580c012f79d960b4019a2955268d935c4f7116ae01e6790ad25d2cc4435f1f4196ff31d9c907c3e0f6f5829a4a3daf417cd7932a521e7c124c2fa32da8101fa9336ce836750ee32a63a7894b6ddee1e9c3d5658eedaa81aecfd"}]}}, {{0x9, 0x5, 0xf, 0x4, 0x3ff, 0xd5, 0xc, 0x67, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x2, 0x5}]}}, {{0x9, 0x5, 0xc, 0x2, 0x10, 0x10, 0x0, 0xe, [@generic={0xc1, 0xc, "1fbea8ef642c49e9c8c59ff535e54cabbc46acc54219d50648f8237820fda2744df7b3ec9b80b57c028f557acd5f76991422851d3e6dd8f8af3d8c75902a5c59512294088cb35e78753e6caaf1c67f8bde849422113508aa0d4b24d40525dd015c73ca5fe26342e7bcdb1f7a9f366c1d1198f77071fabc58d1e72850e7ac428372f601d1bb54aab2986f8eb2c89534abd86f923b9e45f616a35c713d416e206e2009b02c78cf569536a4ea0a14a20c3c3cf052cb0ce138798fd57572e14077"}, @generic={0xb2, 0x10, "011e0926417f68527742a8d411012dfb41bf7255f350646f107be998caf35dc15b79fc226550d0794caeb125887cb11e9411a4f777de7bb9cbf11bacba8b7586bdd625b0d8b49bb48b02cbae0614cf38a3bf937303f5f4816cb22dddb5ada114599b9a43c4a2910f576c3a0eec96fbd4eb2fee59e9ce8a129581aed363afdbe2dab52951cfc0d267c95d14b8841d1bdddcd3b72e1668112f4378468faa5df7937fa21dc5acaa84efd6b49a7e1d8f5aeb"}]}}, {{0x9, 0x5, 0xc, 0x1, 0x8, 0x2, 0xff, 0x6}}, {{0x9, 0x5, 0x6, 0x0, 0x200, 0xa, 0xfb, 0xd}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0x5, 0x5, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x74}, @generic={0x9b, 0x1a, "5badaf8e20379bfa07ad686a4aee7be16b8bc7aefea2113966262100c294b3218d6b978ce13d119b125c5b3d515dd2a3864ff5c55a57363b98b1fb923ba10aa5ccc2cb79513526185422d330781f579b7463ff7ae88991afb4428a6c0e83fb15bae838e6fb1d1d462bfd878805041cb06704a5a172ad63fbb5bceb89250bd1c433fddb77c696e5a94cf83ccd68871a9e44d6edaaf55b379aea"}]}}, {{0x9, 0x5, 0xc, 0x3, 0x40, 0x8, 0x8, 0x4}}, {{0x9, 0x5, 0x2, 0x4, 0x200, 0x4, 0xa8, 0x9}}, {{0x9, 0x5, 0xf, 0x0, 0x40, 0x2, 0x5, 0x5}}, {{0x9, 0x5, 0xb, 0x2, 0x40, 0xb5, 0x1, 0x6}}]}}, {{0x9, 0x4, 0x6e, 0xa, 0x3, 0xff, 0x4, 0x3b, 0x3, [@cdc_ecm={{0xa, 0x24, 0x6, 0x0, 0x0, "8f89a0b222"}, {0x5, 0x24, 0x0, 0xab1c}, {0xd, 0x24, 0xf, 0x1, 0x80000000, 0x9, 0x2, 0x85}, [@network_terminal={0x7, 0x24, 0xa, 0x9, 0x2, 0x7, 0xa}, @dmm={0x7, 0x24, 0x14, 0x8, 0x2}, @dmm={0x7, 0x24, 0x14, 0x10, 0x5}]}], [{{0x9, 0x5, 0x80, 0x0, 0x20, 0x6, 0x4, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x3, 0x216e}]}}, {{0x9, 0x5, 0xe, 0x0, 0x8, 0x7, 0x1, 0xde, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0xca, 0x101}]}}, {{0x9, 0x5, 0x5, 0x10, 0x200, 0x7, 0x3, 0xe, [@generic={0x48, 0x23, "020bbe41828faa44d47b032b7908a392915b1105cab248edb5ea40204be85cb9ed57996dafaac7197c16ed871a2a3c11cfb719308de18519f5f97b5ea7054f81caf49b6b73d4"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x8, 0x9}]}}]}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x110, 0x0, 0xff, 0xc5, 0x8, 0x2}, 0x67, &(0x7f0000000100)={0x5, 0xf, 0x67, 0x5, [@ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x40, "0437ed19d457002f4ff35371a1a83d9c"}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x7, 0xb, 0x100}, @generic={0x41, 0x10, 0x2, "bee3001de1376a0ac0a99cad46ed676a954fd5f3f90d8b56afbde0642808bb00998b90924939fd7497723a00fcdb07f3518e528b6326899a89c1e8a2fb6c"}]}, 0x2, [{0x39, &(0x7f0000000040)=@string={0x39, 0x3, "b6d9516ffffa60cc5b524c6ec9d736646b1f5a997e3d2e2c411fe37b633153af7903ed47187f75e1379e975a442db069b5f38f90f1e2c2"}}, {0xc9, &(0x7f0000000180)=@string={0xc9, 0x3, "2ab96e87956d779cc8f8e0fa6a2e874a74b8d18d52c8306e2efbebae20dce5ccd54ac644d9cb57cafd452c66d3b6c359215b6db45b04b40f084e664a45eb6b39e65ce3375ddeb14ed9e6ad716ba4a132d8342e69102adf323bab9bee171e4ecda1f65f38dc07e2e3c89ca70e52ea4473613852d58ab4f3a8b6b11eb41d8fe77bd58c469dd8cb4635f7bc8316444cb2fba877866595bc8c881f33daa2894acb912c41d0e04555f801bd6b2a56e9b4ff2cd74a82711df751a95fd64b392b16f07764256899fd1647"}}]}) 5.783941621s ago: executing program 4 (id=2951): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect$uac3(0x2, 0x8c, &(0x7f0000000540)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x154e, 0x500e, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7a, 0x3, 0x1, 0x14, 0x1d041aef2736f6cc, 0x3, {0x8, 0xb, 0x2, 0x1, 0x1, 0x22, 0x30, 0x9}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xe, 0x16, 0x7}, [@source_unit={0xc, 0x24, 0xb, 0x3, 0x2, 0xffffff00, 0x6}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x5, 0x5, 0x5, {0xa, 0x25, 0x25, 0x6, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x10, 0x5, 0x7, {0xa, 0x25, 0x25, 0x4, 0x8, 0x5}}}}}}}}]}}, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f000009c000/0x1000)=nil, 0x1000, 0x11) syncfs(r0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) 5.013779203s ago: executing program 8 (id=2953): r0 = syz_open_dev$swradio(&(0x7f0000000280), 0x0, 0x2) ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f0000000140)={0x4, 0x2, 0xffbfffff}) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2c2e, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xff, 0x70, 0x1, "", [{{0x9, 0x4, 0x0, 0xd, 0x1, 0x3, 0x1, 0x0, 0x7, {0x9, 0x21, 0xff7f, 0x77, 0x1, {0x22, 0xfb1}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x3, 0x1, 0x2}}}}}]}}]}}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) (async) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2c2e, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xff, 0x70, 0x1, "", [{{0x9, 0x4, 0x0, 0xd, 0x1, 0x3, 0x1, 0x0, 0x7, {0x9, 0x21, 0xff7f, 0x77, 0x1, {0x22, 0xfb1}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x3, 0x1, 0x2}}}}}]}}]}}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) (async) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$lan78xx(r1, 0x0, 0x0) (async) syz_usb_control_io$lan78xx(r1, 0x0, 0x0) r2 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0c0009800800014000000005080008400000000114000000110001"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000000d0a010300000000000000000aefff000900020073797a310000ffdf0900010073797a31"], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) (async) sendmsg$NFT_MSG_GETSETELEM(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000000d0a010300000000000000000aefff000900020073797a310000ffdf0900010073797a31"], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) recvmmsg(r5, &(0x7f0000001f00)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x0, 0x0) (async) recvmmsg(r5, &(0x7f0000001f00)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) (async) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r6 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0xffffffffffffffff, 0x2, 0x0, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_SET_MP_STATE(r7, 0x4004ae99, &(0x7f0000000100)=0x6) ioctl$KVM_RUN(r7, 0xae80, 0x0) (async) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000004600)={0x24, 0x0, 0x0, &(0x7f00000000c0), 0x0}, 0x0) 4.57587606s ago: executing program 3 (id=2954): sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x4000) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000700)={0x9, 0x0, 0x0, 0x7}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="3000000012009702"], 0x30}, 0x1, 0x0, 0x0, 0x40010}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) openat$random(0xffffffffffffff9c, &(0x7f0000000240), 0x2000, 0x0) openat$random(0xffffffffffffff9c, &(0x7f00000002c0), 0x80202, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x4ff1, &(0x7f0000000040)={0x0, 0x835c, 0xf000, 0x20000a, 0x20002f3}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000140)={'syztnl2\x00', 0x0, 0x4, 0x78, 0xb, 0x2, 0x4, @mcast2, @mcast2, 0x40, 0x20, 0x1, 0x8000}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x5e, &(0x7f0000000080)={&(0x7f0000000280)=@delchain={0x34, 0x65, 0x8, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x7}, {0xd, 0xe}, {0xfff3, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x8}}, @TCA_RATE={0x6, 0x5, {0x8c, 0xaf}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40005}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r3 = socket(0x1e, 0x4, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r3, 0x10f, 0x81, &(0x7f0000000480), 0x4) sendmsg$tipc(r3, &(0x7f0000000200)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x2, {0x1, 0x0, 0x2}}, 0x10, 0x0}, 0x4000001) recvmmsg(r3, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000a40)=""/188, 0xbc}], 0x1, 0x0, 0x18}, 0xfffffffc}], 0x1, 0x0, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) r5 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000240), 0x35c, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000300)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@private1}}, &(0x7f0000000400)=0xe8) setsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@rand_addr=0x64010100, @in6=@private0, 0x4e23, 0x40, 0x4e20, 0x3, 0x2, 0x80, 0x20, 0x2b, r2, r6}, {0x5, 0x6, 0x9, 0x5, 0x9, 0x1000, 0x7d, 0x5}, {0x1, 0x7, 0xb9, 0x4}, 0x6, 0x0, 0x1, 0x0, 0x1, 0x2}, {{@in6=@local, 0x4d2, 0xff}, 0x2, @in=@remote, 0x3507, 0x1, 0x2, 0x9, 0x7, 0x9, 0x3}}, 0xe8) preadv(r5, &(0x7f0000000040)=[{&(0x7f00000013c0)=""/4096, 0x5}], 0x1, 0x5, 0x0) 4.292040541s ago: executing program 8 (id=2955): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x401, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x38, r4, 0x1, 0x70bd29, 0x0, {{0x2}, {@val={0x8}, @val={0xc, 0x99, {0x41, 0x60}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x39a}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}]]}, 0x38}}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x20, r4, 0x100, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}]}, 0x20}}, 0x8800) read$FUSE(r3, &(0x7f0000008300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r3, &(0x7f0000004300)="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", 0x2000, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x90, 0x0, 0x3, {0x3, 0x4000000000, 0x0, 0x0, 0x0, 0x8, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, r6, 0x7, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r3, &(0x7f0000006300)="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", 0x2000, &(0x7f0000000200)={&(0x7f0000000080)={0x50, 0xfffffffffffffffe, 0x0, {0x7, 0x28, 0x0, 0x1000a080, 0x0, 0x0, 0x3, 0xffffffff}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r3, &(0x7f0000000e00)={0x50, 0x0, r5, {0x7, 0x28, 0x800073, 0xc0000, 0xffff, 0x5, 0x0, 0x8000}}, 0x50) unlink(&(0x7f0000000100)='./file0/file0\x00') ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = semget(0x2, 0x4, 0xa) semtimedop(r8, &(0x7f0000000340)=[{0x3, 0x0, 0x1800}, {0x1, 0x7f, 0x1800}], 0x2, &(0x7f0000000380)={0x0, 0x3938700}) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x2, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008000}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001740)=@newqdisc={0x6c, 0x28, 0x4, 0x4000, 0xfffffdf8, {0x0, 0x0, 0x0, r7, {0x5}, {}, {0xa, 0x7}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0xa32, 0x6, 0x1, 0xc, 0x0, 0x4, 0x8, 0x52, 0x68d8, 0x1, 0x4, 0x3, 0x1f, 0x6, 0xbffffffd, 0xfffffe01}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40098}, 0x0) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) r14 = fanotify_init(0x200, 0x0) fanotify_mark(r14, 0x1, 0x40001043, r12, 0x0) writev(r13, &(0x7f0000003280)=[{&(0x7f0000000440)="c924", 0x2}], 0x1) sendmsg$nl_route_sched(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000022c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x5, 0xfff1}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0xf7513c36066f8950}, 0x20000010) close(0x3) 4.287044638s ago: executing program 3 (id=2956): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x1ff000, 0x6, 0x2000007f, 0x1}, 0x50) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r3, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x6}, 0xc) setsockopt$MRT6_FLUSH(r3, 0x29, 0xd4, &(0x7f0000000140)=0x8, 0x4) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000002c0)={r2, 0x11, 0x6, @random="08d32bfb45c9"}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x3, 0xfff1}, {0x4, 0xa}, {0x0, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x4048080}, 0x0) 3.828551622s ago: executing program 6 (id=2958): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @window={0x3, 0x3, 0x7}, @timestamp, @mss={0x2, 0xffffffff}, @window={0x3, 0x8, 0x6}, @timestamp, @sack_perm, @sack_perm], 0x8) r1 = socket$inet6(0x10, 0x2, 0x4) (async) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) (async) sendto$inet6(r1, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x810, 0x0, 0x0) 3.692257919s ago: executing program 8 (id=2959): r0 = syz_clone(0x40080000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ptrace$peeksig(0x4209, r0, &(0x7f0000000140), 0x0) landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0xa000, 0x8, 0xc00000, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0xfc, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x41}, @rand_addr=0x20003}}}}) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000040)={0x3, 0x2}) socket$inet6(0xa, 0x3, 0xff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) futex_waitv(&(0x7f00000047c0)=[{0x5, 0x0, 0x82}], 0x1, 0x0, 0x0, 0x1) r4 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) tgkill(r4, r4, 0x21) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x0}, 0x20) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)={0x34, r5, 0x3141e0b2751b0f9b, 0x70bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x60c5}, 0x80) mkdirat(0xffffffffffffff9c, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f0214f9f4070009040081000000fe", 0x15) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[]) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha512\x00'}, 0x58) r7 = syz_usb_connect(0x5, 0x24, 0x0, 0x0) syz_usb_control_io$uac1(r7, 0x0, &(0x7f0000000600)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.690776814s ago: executing program 6 (id=2960): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="280000004000070127bd7000fedbdf25037c00000400c2840b00018005001080"], 0x28}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f00000001c0)) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000040)=0x10000) read$dsp(r1, &(0x7f0000000100)=""/110, 0x6e) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000000)=0x40000) 3.685359014s ago: executing program 3 (id=2961): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmsg(r0, &(0x7f00000031c0)={0x0, 0x0, 0x0}, 0x2000) recvmmsg(r0, &(0x7f0000003780)=[{{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x39, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/108, 0x6c}, {&(0x7f0000006380)=""/4102, 0x1006}, {&(0x7f0000001680)=""/129, 0x81}, {&(0x7f00000001c0)=""/62, 0x3e}, {&(0x7f0000000500)=""/43, 0x2b}], 0x5}, 0x2159}], 0x3, 0x2000, 0x0) 3.561189491s ago: executing program 3 (id=2962): r0 = syz_usb_connect(0x0, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e2379c"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_setup(0x20fe, &(0x7f0000000540)) socket$tipc(0x1e, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000008c0)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000001c00010029bd7000fedbdf2507000000", @ANYRES32=r2, @ANYBLOB="80007e0a0a000200aaaaaaaaaa1cdfff050005"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4040000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$unix(0x1, 0x2, 0x0) socket$unix(0x1, 0x2, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000100), 0x6f5e, 0x8001) ioctl$SG_IO(r3, 0x2285, &(0x7f0000001380)={0x53, 0xfffffffffffffffc, 0x6, 0xe, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000140)="b9d811587566", 0x0, 0x7, 0x2, 0x2, 0x0}) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x4e21, 0x5, @ipv4={'\x00', '\xff\xff', @empty}, 0x7}, 0x1c) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) r6 = fcntl$dupfd(r4, 0x406, r4) write$cgroup_pid(r6, &(0x7f0000000240), 0xfdef) 3.485281953s ago: executing program 6 (id=2963): r0 = syz_usb_connect(0x0, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e2379c"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_setup(0x20fe, &(0x7f0000000540)) socket$tipc(0x1e, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000008c0)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000001c00010029bd7000fedbdf2507000000", @ANYRES32=r2, @ANYBLOB="80007e0a0a000200aaaaaaaaaa1cdfff050005"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4040000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$unix(0x1, 0x2, 0x0) bind$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r4 = socket$unix(0x1, 0x2, 0x0) connect$unix(r4, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r5 = syz_open_dev$sg(&(0x7f0000000100), 0x6f5e, 0x8001) ioctl$SG_IO(r5, 0x2285, &(0x7f0000001380)={0x53, 0xfffffffffffffffc, 0x6, 0xe, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000140)="b9d811587566", 0x0, 0x7, 0x2, 0x2, 0x0}) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) r7 = fcntl$dupfd(r6, 0x406, r6) write$cgroup_pid(r7, &(0x7f0000000240), 0xfdef) 2.756713786s ago: executing program 7 (id=2964): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000f80)=[{&(0x7f0000000880)="a5", 0x1}], 0x1000000000000157}, 0x20008005) setsockopt$sock_attach_bpf(r3, 0x1, 0x10, &(0x7f0000000100), 0x4) setsockopt$sock_attach_bpf(r3, 0x1, 0xa, &(0x7f0000000180), 0x4) recvmsg$unix(r3, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x2082) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="080086dd0001110004000000a60c6eec00be00"], 0xfdef) 2.660136334s ago: executing program 6 (id=2965): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.procs\x00', 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x100, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000027c0)=@newtfilter={0x4ac, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x5, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x478, 0x2, [@TCA_MATCHALL_ACT={0x474, 0x2, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1ff, 0x3, 0x10000, 0x81, 0x7f, 0x5, 0x4, 0x2, 0x4, 0x5, 0x2234, 0x83, 0x81b, 0x7fe, 0x8, 0x0, 0x3, 0x7ed53619, 0x1, 0x2, 0x9644, 0x800004, 0x58b, 0x85a, 0x3ff, 0x46, 0x2, 0x1, 0x0, 0x80000000, 0x10001, 0x790, 0x5, 0x1, 0xfffffff9, 0x1a77, 0x9, 0x3, 0x400, 0x63c, 0x0, 0xffffffff, 0x1, 0x3, 0x3, 0x5b1f, 0x7b0, 0x3, 0x100, 0xfffffffe, 0xd, 0xff, 0x3, 0xfffc, 0x6, 0x10a4, 0x11ff, 0x80, 0x4, 0x7, 0x3, 0xa14, 0x3, 0x2, 0x9, 0x81, 0x7, 0x8, 0x5, 0x10001, 0x8f7, 0x3, 0xfffffef9, 0x9, 0x4, 0x8, 0xfff, 0x3, 0xffffca9a, 0x6, 0x7, 0x8, 0x100, 0xc0000000, 0x0, 0x6, 0x6, 0x8, 0x80000001, 0x8, 0x1d24, 0x2, 0x7, 0x80000000, 0x7f, 0x7, 0x9, 0xff, 0x24, 0x5, 0x8, 0x6, 0x10007e, 0x8, 0x0, 0x5, 0x470, 0x7f, 0xe, 0x0, 0x1, 0x0, 0x4, 0x10009, 0x61, 0x200, 0x9, 0x2, 0x2, 0x6, 0x3ff, 0x8, 0x7, 0x11, 0xda56, 0x7ffffffe, 0x180, 0x2f0cb955, 0x7, 0x8, 0xf, 0x6ae, 0x9, 0x0, 0x9, 0x8001, 0x0, 0xec000, 0x0, 0x1, 0x2, 0x9, 0x7, 0x6, 0x4, 0x1, 0xffffcf1b, 0x282, 0x5517bc7b, 0x3, 0x4, 0xb6b, 0x5, 0xf7800000, 0x40ac, 0x8, 0x3, 0x10, 0x9, 0x8, 0x80000001, 0x0, 0x74, 0x2, 0x7fffffff, 0x3, 0xa, 0x6, 0xffffffff, 0x8, 0x2, 0x7, 0x7f, 0x5, 0x3, 0xa, 0x1, 0x0, 0xa, 0x300, 0x5, 0x3, 0x6, 0xffffffff, 0xffb, 0xff, 0x3, 0x8, 0x3, 0x2, 0x9, 0xb, 0x399d, 0x5, 0x8ab6, 0x18000, 0x2, 0xfffffff9, 0x2, 0x2, 0x528c, 0x205, 0x200, 0xac, 0xf, 0xd05, 0x9a2ce73, 0x4, 0x6, 0xe074, 0x6b10, 0x5, 0x1, 0x6, 0xb, 0xa26, 0xaf6, 0x0, 0xec, 0x6, 0xde16, 0xc418, 0xffffffff, 0xffffffff, 0x9, 0x400, 0x80001, 0x5, 0x354d, 0x4, 0x2, 0x1, 0x200, 0x0, 0x8, 0x7, 0x0, 0x80, 0x5, 0x8, 0x1, 0x9, 0xe7b, 0x0, 0x7, 0x42bf, 0x10000, 0x9, 0x9, 0x6, 0x4b75, 0x80000001, 0x1000, 0x5915, 0x10001, 0x1]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0xfffffe00, 0xc7a9694b94481158, 0x5, 0x1, 0xdbec, {0x8, 0x0, 0xb55, 0x5, 0x7, 0xb}, {0x6, 0x1, 0xd, 0x800, 0x1}, 0x2, 0x0, 0x6}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x4ac}, 0x1, 0x0, 0x0, 0x10}, 0x0) write$cgroup_pid(r2, &(0x7f00000000c0), 0x12) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) 2.600499174s ago: executing program 8 (id=2966): mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x3000003, 0x28031, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = epoll_create1(0x0) r5 = fcntl$dupfd(r3, 0x0, r4) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000040)={0x20000001}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f00000001c0)={0x10000000}) close(r4) ioctl$KVM_PRE_FAULT_MEMORY(r2, 0xc040aed5, &(0x7f0000000240)={0x0, 0x107000}) mmap$KVM_VCPU(&(0x7f0000000000/0xc00000)=nil, 0x930, 0xf, 0x32, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000/0x3000)=nil}) 2.325120954s ago: executing program 6 (id=2967): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = dup2(r0, r0) readv(r1, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000000080)=""/21, 0x15}], 0x2) (async) write$P9_RREADLINK(r1, &(0x7f00000005c0)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10) (async) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000007c0), r1) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000008c0)={'gre0\x00', &(0x7f0000000800)={'syztnl1\x00', 0x0, 0x7, 0x7, 0x1, 0x5, {{0x1a, 0x4, 0x0, 0x9, 0x68, 0x64, 0x0, 0x7, 0x4, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x15}, {[@timestamp={0x44, 0x1c, 0xe6, 0x0, 0x3, [0x40, 0xfff, 0xffffffff, 0x24, 0xe, 0xd7f]}, @cipso={0x86, 0x36, 0xfffffffffffffffd, [{0x6, 0x12, "70e9c56f6eb368a71c4faedf1a9d3a52"}, {0x0, 0xd, "8a731bc13aaec54234336d"}, {0x2, 0x9, "5f740d3a0fd1f3"}, {0x5, 0x8, "9809bce4ae2e"}]}]}}}}}) (async) getsockname$packet(r1, &(0x7f0000000900)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000940)=0x14) sendmsg$ETHTOOL_MSG_EEE_GET(r1, &(0x7f0000000ac0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000980)={0xe0, r2, 0x300, 0x70bd27, 0x25dfdbfc, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x84}, 0x20002090) r5 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r5, &(0x7f0000000580)={&(0x7f0000000040)=@in6={0xa, 0x4e23, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x3}, 0x1c, &(0x7f0000000640)=[{&(0x7f0000000100)="9a1dcaec90635ed63309c29bac5435727a89d971f6aec288bbd416f5437445d9cae9c488f822f5daa69dbf38c208e91f6a7f82fe7e9f642bd52e98861f6448d3e3dffaf00eae7581fd254d794ff3e1f99cd9d8188a1fe7b8ad71c0eb28ac3c2241614bc19073ec93b93204058ce5bb4b784b28682a38efce4ee98a6658241d653d4340dcfe43a4afc5dd802081aa5453051d1d690a10fad89ae10f325ef965aef50b34c0e0b6bd75c9b175b7fcb8eef1145b6e9ff159d2008b197bb9bab2f6e680fbe9e6f83c8f6a9f8b0ae2890c9a08e4f1d029fc250e4fb56acac2ea658e90312ddfc1547a9be01271d37bc0fa", 0xee}, {&(0x7f0000000200)="29b084232ad5c4b017ffdd69bbd7663fa838aaaf56f855640f66c0285fe995311b1c868de7f720df8affe0bd7a1575469ae52c0b57b1e0b15b5aad222e7d600594350a28aa5fa1", 0x47}, {&(0x7f0000000280)="c5d725b966a1a09e5bb34fa4430e41a6fb8a5b78f2342895177c3c3778bf084ae0b699a91430aea448d8f09fb8cbb3531cd8e42952b37190bea65e4021ef95f49dfdaf6334f7ab607d04b2e9536196c632a21ff6eb48b8a2336d18b3d5644b3414e28da2f90f19eeb13dea627631c0d0e8ca2eb6c34855d99340f6229043233a46e5618aeb21c337dab27723e3f6b12da21aa8a080c612a4f3322b7a62e49ee497881ed35a884242abeabe50867b31caef5100e7012f446d773385d303201e33fc66a5abcf8221936eca5b1b1cdf63fe822cf49c0c9bef1aa6089fd0e5bd56e71f60", 0xe2}, {&(0x7f0000000380)="89405d6445dee80fac35c4c065d86276ef2766257d5cdeec13983edd3b29e07afdc3525b807b78061bdb1ee5f2e41b672aeb1fdb7dbf772458681efa31134a1310ff14267ada126b8281a3f635ec0b249d0a209bf69a785b8ce2a896911ebdf33b78fa89e09c39e6bfaeceb6a5e6cecdb379a9de1d69ddbf81fa1de697ebf2daca42a8b1e1e39ab1fab1c58408c3873ed3e83279d124a310e7", 0x99}, {&(0x7f0000000480)="950651f72593166a062d8adbc34829c62ca0ad0337492c6212a14572cd801786c7380eddc406eea236d7db404064bf6642dc71d878a5ac4dbce596ea678b6428e9b6aedc0d63044d2df1fb9cb596d52fb45497bf2bf0c085c79c5ca7355b1cb83523db1c0785d512e297097071c739712cfa5c848a5969598a542e9d7a77f7af26f46893a4cfe8baa0183cf05de714fed7032427a3ae477585553f291d1bb887a0ca4a5b0f6395ce327515dc34bf2947591ba97b2f2c85a20d72fbf1f5816161714b6251bf83372bf2a87a2ab7e790cac50e7ec38871822233403d057fa274a5dc5e4c706e52d55c2ec2aceb0028f5a84110dd2702605925ed", 0xf9}], 0x5, &(0x7f00000006c0)=[@init={0x18, 0x84, 0x0, {0x9, 0x3, 0x2, 0x800}}, @authinfo={0x18, 0x84, 0x6, {0x2982}}, @authinfo={0x18, 0x84, 0x6, {0x6}}, @dstaddrv4={0x18, 0x84, 0x7, @rand_addr=0x64010100}, @dstaddrv6={0x20, 0x84, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @authinfo={0x18, 0x84, 0x6, {0x81}}, @dstaddrv6={0x20, 0x84, 0x8, @remote}], 0xb8, 0x801}, 0x0) (async) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async, rerun: 64) futex(&(0x7f000000cffc)=0x2, 0x3, 0x801, 0x0, &(0x7f0000000040), 0xfffffffc) (rerun: 64) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect$sierra_net(0x5, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, "", {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0xd, 0x2, 0xcc8b4ba2b9e35774, 0x80, 0x0, 0x8}, {0x9, 0x5, 0x3, 0x2, 0xbf5fdd93b78273e1, 0x1, 0x4, 0xc8}, {0x9, 0x5, 0x8, 0x3, 0x230, 0x8, 0x6, 0x6}}}}}}]}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYRES64=r6], 0x50}, 0x1, 0x0, 0x0, 0x40804}, 0x8000) 2.237063797s ago: executing program 8 (id=2968): r0 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f0000000380)=[{&(0x7f0000000040)="39000000130003474cbb65e1c3e4ffff06000d00010000000700000025000000040016000c0014000800001f000006060400180000008cdb25", 0x39}], 0x1) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x8, 0x0, 0x0, 0x0, [0x0], [0x0, 0x4], [0x0, 0x0, 0x0, 0x4], [0x0, 0x0, 0x3, 0xf]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f00000000c0)={r5}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r0, @ANYBLOB="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"], 0x21c}, 0x1, 0x0, 0x0, 0x20040010}, 0x4008804) 2.155784793s ago: executing program 4 (id=2969): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="12010000b1bd2f087d0403508c2f010203010902120001000000000904"], 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000100)={@void, @void, @ipv4=@igmp={{0x5, 0x4, 0x1, 0x6, 0x1c, 0x68, 0x0, 0xff, 0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x11}}, {0x14, 0x1, 0x0, @local}}}, 0x1c) syz_usb_control_io$cdc_ecm(r3, &(0x7f00000000c0)={0x14, &(0x7f0000000100)=ANY=[@ANYBLOB="0000f50000000341"], 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f0000000100)={0x5, 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.001583722s ago: executing program 8 (id=2970): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000000308010800000000000033dc0500000505000300010000000c0004800800014000000002"], 0x28}, 0x1, 0x0, 0x0, 0x8}, 0x4000040) (async) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000000308010800000000000033dc0500000505000300010000000c0004800800014000000002"], 0x28}, 0x1, 0x0, 0x0, 0x8}, 0x4000040) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000001010102000000000000000002000000240002800c000280040001003a00000014000180080001cd4bde2a0192000000000000000c0019800800"], 0x44}, 0x1, 0x0, 0x0, 0x200448c1}, 0x40) (async) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000001010102000000000000000002000000240002800c000280040001003a00000014000180080001cd4bde2a0192000000000000000c0019800800"], 0x44}, 0x1, 0x0, 0x0, 0x200448c1}, 0x40) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000170a01020000ddffffff00000700000a0900010740000000000c0005400000000000000004"], 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x31f07beb2700b496) (async) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000170a01020000ddffffff00000700000a0900010740000000000c0005400000000000000004"], 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x31f07beb2700b496) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x101, 0x4}) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000040)=0x4ff, 0x4) (async) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000040)=0x4ff, 0x4) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000000)=0x120, 0x4) syz_emit_ethernet(0xbe, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0xfffffffffffffe1f, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffe01, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0xfffffffffffffe1f, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffe01, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r4 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$IP_SET_OP_GET_FNAME(r3, 0x1, 0x53, &(0x7f0000000640)={0x8, 0x7, 0x0, 'syz2\x00'}, &(0x7f0000000680)=0x2c) (async) getsockopt$IP_SET_OP_GET_FNAME(r3, 0x1, 0x53, &(0x7f0000000640)={0x8, 0x7, 0x0, 'syz2\x00'}, &(0x7f0000000680)=0x2c) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x48080}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_RANGE_FROM_DATA={0x1c, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x15, 0x1, "45aaa4ae07b848b8f7fde6e221155163b1"}]}, @NFTA_RANGE_OP={0x8}, @NFTA_RANGE_TO_DATA={0x4}, @NFTA_RANGE_SREG={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x9c}}, 0x24000000) write$binfmt_misc(r5, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000000500)={r5, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe10804000000af8e0e3dc11d875397bdb22d0000b420a1a93e527d3d458d080000000000000000000000000000000000000000004300", "f4bd00000080190000efffca0000000000001a000000ff00", [0x2]}}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd52, 0x1}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd52, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r1, 0xc01c64a3, &(0x7f0000000280)={0x3, r7, 0x1, 0xffff, 0xa, 0x1ff, 0x20}) syz_usb_connect(0x2, 0x6a, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000a3233910daa658744d2d010203010902310001080010000904df0003080662ff09050c02200006060309050710000201020704f99fbb0905"], 0x0) 1.839061774s ago: executing program 3 (id=2971): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000101c1b021b00000000000109022400010000400009040000010300400009210000000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = landlock_create_ruleset(&(0x7f00000000c0)={0x8201, 0x3, 0x1}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$VIDIOC_QUERYCAP(r2, 0x5450, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000024c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) syz_usb_connect$uac1(0x1, 0xaf, &(0x7f0000000140)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x0, 0xd8c, 0x201, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9d, 0x3, 0x1, 0xe, 0x40, 0x3, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xc3, 0x1b}, [@extension_unit={0x7, 0x24, 0x8, 0x2, 0xe, 0x90}, @mixer_unit={0xa, 0x24, 0x4, 0x5, 0x64, "4b79a54aa0"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x3, 0x6}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x8, 0x4, 0x7, {0x7, 0x25, 0x1, 0x8, 0xc, 0xe}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x0, 0x3, 0x0, 0x6, "14eb7297f07aabc0"}, @as_header={0x7, 0x24, 0x1, 0xf}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x1, 0x2, 0xa7, 0x4, "5c99f12d8b9c"}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x5, 0xf, 0x1, {0x7, 0x25, 0x1, 0x8, 0x6, 0x9}}}}}}}}]}}, &(0x7f0000000740)={0xa, &(0x7f0000000380)={0xa, 0x6, 0x300, 0xb, 0x40, 0x0, 0xff, 0x1}, 0x1a, &(0x7f0000000700)={0x5, 0xf, 0x1a, 0x2, [@wireless={0xb, 0x10, 0x1, 0x4, 0x100, 0x73, 0x4, 0x1, 0x38}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x3, 0x6, 0x4}]}, 0x1, [{0x84, &(0x7f00000009c0)=@string={0x84, 0x3, "6157818e4158d7fac2e8ccc1de88efb9dcf81517ddb5cf576d5b9619340748aeeeedb09e43e0abb0b7fd5a681b5e7e6ddfd1b2214e87a1302086807d261b7570463aee9a822797f02e116df817f2139255c16b9e2b8f46670aa9c3d63f93e59f8196f356204253521b3a0ff3978ed5c6defbe3175e0c30ed7cb442edd5216e9327fa"}}]}) ioctl$VHOST_GET_VRING_BASE(r3, 0x4008af24, &(0x7f0000000080)) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="000000000000000000000092df134b1e3bde5a38a632a2b30dcd19e3fab6726da7122305796fee4e725a0a7e0bb450b9823096b4619128b96b7ac53daecbd5e9fee70446b0957b1e6df925b842a8898b6ce56306e1c5a45247678a60dd5a694570baf7dca9576a703438e65d327b9812d35c93d3a0e3a2925674d741cf9d00"/138], 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000100)={0x40, 0x3, 0x5, 'N\x00\x00\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_usb_connect$uac1(0x3, 0xa0, &(0x7f0000000900)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x582, 0x23, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8e, 0x3, 0x1, 0x1, 0x90, 0x4, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x7, 0x26}, [@mixer_unit={0x6, 0x24, 0x4, 0x3, 0x2, '-'}, @processing_unit={0xd, 0x24, 0x7, 0x4, 0x1, 0x1, "2198639f937b"}, @output_terminal={0x9, 0x24, 0x3, 0x6, 0x304, 0x3, 0x6, 0x2}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x0, 0x3, 0x1b, 0xc9, 0xd}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x8, 0x37, 0x1, {0x7, 0x25, 0x1, 0x8, 0x96, 0xab43}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0xfa, 0x0, 0xaf, 0x33, 0x1}]}, {{0x9, 0x5, 0x82, 0x9, 0x3b7, 0x2, 0xd0, 0x3, {0x7, 0x25, 0x1, 0x8, 0xbd, 0x9}}}}}}}}]}}, &(0x7f0000000300)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x250, 0x7f, 0x65, 0x1, 0xff}, 0x19, &(0x7f0000000200)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x2, "40df83036aaa1060da924d1bdff9fe1d"}]}, 0x2, [{0x64, &(0x7f0000000240)=@string={0x64, 0x3, "29d827207e4f02f81bc92a622d88c14cb3b90ebaed12d5cff16f396836a251e4e85dee3d5ce1197e7e9a3584bc64d2f203ce5b1e957ff2db64778c3d84a419a8f4045f26bda8f67cf3767b24992b2b31a9a7be9d8dcb057a353b0f950395300e0549"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0xc04}}]}) syz_usb_control_io$uac1(r4, &(0x7f00000003c0)={0x14, &(0x7f0000000340)={0x20, 0x23, 0x28, {0x28, 0x5, "e1921aa3d41faf083cdbce5dab3135d0a3c50e33e22dc9b7787c067782695e4b5c92026a4aa5"}}, &(0x7f0000000040)=ANY=[@ANYBLOB="00431e0000001e035cd204eaf68742db39ccc17d61981c36464ff80e1fd66bf83e403293"]}, &(0x7f0000000680)={0x44, &(0x7f0000000400)={0x0, 0x18, 0x80, "77089c24641d78e6e6c742121aac3d38d5eef1e9e87d19a4143ee9ae8411495cae23a7ad480a948acb7d03d7770bb88e40037d951567d0cbf98b79c7d64b35aac790af2af4a8f541da56166f07e86ac5b6dd71d371a7c2baf00de1bc4ce557468c743f540dbf7baa6fa02741e9374c2e53e0d5e79be835f39adf1fe13ce5169c"}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0xff}, &(0x7f0000000540)={0x20, 0x81, 0x3, "4141ca"}, &(0x7f0000000580)={0x20, 0x82, 0x1, 'a'}, &(0x7f00000005c0)=ANY=[@ANYBLOB="0100010000000000"], &(0x7f0000000600)={0x20, 0x84, 0x2, "b387"}, &(0x7f0000000640)={0x20, 0x85, 0x3, "78809a"}}) 1.628157707s ago: executing program 7 (id=2972): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000012c0)=ANY=[@ANYBLOB="12010000c6700610f71400058544010203010902120001000000000904"], 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x2ef824c763e986ec, 0x5, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xffff, 0xffff}, {0x0, 0x6}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}}, 0x48004) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100), 0x8041, 0x0) ioctl$SNDCTL_DSP_GETTRIGGER(r5, 0x80045010, &(0x7f0000000140)) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000003580)=@newtfilter={0x1424, 0x28, 0xd24, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4}, {0x6}, {0xa, 0x3d}}, [@TCA_RATE={0x6, 0x5, {0x1, 0x7}}, @filter_kind_options=@f_flower={{0xb}, {0x38, 0x2, [@TCA_FLOWER_KEY_CT_MARK={0x8, 0x5f, 0x319}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x8100}, @TCA_FLOWER_KEY_ARP_THA={0xa, 0x41, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @TCA_FLOWER_KEY_ARP_TIP_MASK={0x8, 0x3c, 0xff}, @TCA_FLOWER_KEY_ENC_IPV4_SRC={0x8, 0x1b, @broadcast}, @TCA_FLOWER_KEY_CT_MARK={0x8, 0x5f, 0x84}]}}, @TCA_CHAIN={0x8, 0xb, 0xb}, @TCA_CHAIN={0x8}, @TCA_CHAIN={0x8, 0xb, 0x8}, @filter_kind_options=@f_fw={{0x7}, {0x1374, 0x2, [@TCA_FW_MASK={0x8, 0x5, 0xc00000}, @TCA_FW_ACT={0x310, 0x4, [@m_mirred={0xf4, 0xf, 0x0, 0x0, {{0xb}, {0x84, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xe6a, 0x2, 0x3, 0xa, 0x5}, 0x3, r4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0x60d64fad, 0x3, 0x2, 0xf}, 0x1, r4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0x1, 0x6, 0x1, 0x7ff}, 0x1, r4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x7, 0x4, 0xffffff9e, 0x80000000}, 0x4, r4}}]}, {0x45, 0x6, "daa30bdd22e2f304c1b93ab6ff6014b16af3c554885e0a9e5ebfe834b106f4bc074e80425ca8f34aa86e065cdd4ec475d4358b6a2ed9123e391134e94d062e365e"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ife={0x148, 0x1f, 0x0, 0x0, {{0x8}, {0x40, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x24, 0x6, [@IFE_META_PRIO={0x8, 0x3, @val=0x4004}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x401}, @IFE_META_PRIO={0x8, 0x3, @val=0x9}, @IFE_META_SKBMARK={0x8, 0x1, @val=0xfffffffd}]}, @TCA_IFE_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @TCA_IFE_DMAC={0xa}]}, {0xe4, 0x6, "840f9eba493e46ed10a74524c828058f584bb85fa1e9d64c3499bbbdb7a01286138f31ff44db33911ac0a9b0cfcd6f01ccd576e98ef7441c33f96ad41423cb97563331ac77ae37de0ada42195711de12612f5e57ff92c7b3f75f45b08fc5b9070ced96066b49c4bcf98a9e6914838e9643e2dbd6e478657fca29e1a8abf86b5ddfbb113ca7513fb8994a13a95e22ec565ee23fbdf9843da7b93e8c3aff3c43776ad8e5f611b21afbd50fc44851d2273a3fb6759e91c0bd64ada7c514993f6ef87dc77d26f3cb936248c0b8cb6760d0324e9beb13bd6712884c968eefeb7e1401"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_sample={0xd0, 0x10, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x35, 0x8, 0x7, 0x9, 0x5}}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x3, 0x2, 0x0, 0x6, 0x6}}]}, {0x71, 0x6, "5fe0f3d7d9d72eb89a624adda614fe8bdcf9c7c62621eb0d6d934608befb740c674b83ae5d4bd56f316e05195f045e7c2a70c8e9b438eebcda9758731584d4680e37e803ef962c684ede53ce61cfc7fc44b3ba58452f7a949c4ef9d1bcae5ee4f66c8272c81640f065cc71b86c"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}, @TCA_FW_POLICE={0x1028, 0x2, [@TCA_POLICE_RATE64={0xc, 0x8, 0xfffffffffffffff9}, @TCA_POLICE_AVRATE={0x8}, @TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x2, 0xec8, 0x5, 0x9, 0x6, 0x92, 0x5, 0x5126, 0x6, 0x5, 0xfffffffb, 0x3, 0xff, 0xffffffff, 0x9, 0x5, 0x14, 0x1256, 0x10, 0x8001, 0x8000, 0x80000000, 0x2, 0x80, 0x1ff, 0x0, 0x2, 0x6, 0x9, 0x0, 0xcf, 0x4, 0x3, 0x0, 0x0, 0x90, 0x4, 0x6, 0x80000001, 0x15f1, 0x5, 0x73, 0x49, 0x1, 0x2, 0x40, 0xfff, 0x8, 0x5, 0x0, 0x62ac, 0xc, 0x0, 0x2, 0x7, 0x2, 0x8, 0x3, 0x476, 0x5, 0x94f, 0x6, 0x7, 0xafe, 0xe37b, 0x1, 0x3ff, 0x7, 0x9, 0xc8, 0x6, 0x2, 0x7, 0x0, 0x55, 0x7, 0x0, 0x7, 0x7fffffff, 0x7, 0xd, 0x6, 0x4, 0x3, 0x3, 0x4, 0xfff, 0x2, 0x0, 0x3, 0x40, 0x5, 0x100, 0x1, 0xf, 0x9, 0x8, 0x40000000, 0x10001, 0x10001, 0x0, 0xfffffffe, 0x3, 0x3, 0xfffffffd, 0x7ff, 0x690, 0x8, 0x5, 0xd7e6, 0x7ff, 0x1b911dbc, 0x2, 0x0, 0x81, 0x4, 0x7, 0x3, 0xfffffffd, 0x800, 0x600, 0x3, 0xcef2, 0x9, 0x7, 0x80000000, 0x0, 0x3, 0x6, 0x7, 0x5, 0x1, 0x7af9, 0x5, 0x40f9, 0x7, 0x0, 0x8001, 0x3, 0x3, 0x6, 0x3, 0x2, 0xff, 0x6, 0x9, 0x1000, 0xd, 0x5, 0x40, 0x1, 0x6, 0x1, 0x2, 0x3, 0x5, 0x0, 0x7ff, 0x4, 0x10001, 0xffff, 0x5, 0x6, 0x46, 0x0, 0x7, 0xd3f6, 0x8001, 0xf, 0x2, 0x6, 0x137, 0x806, 0x9, 0x3, 0x101, 0x5, 0x4, 0xc3, 0x8462, 0x4, 0x4, 0x80000000, 0x5, 0xffffffff, 0x0, 0x80000000, 0x0, 0x3, 0x9, 0x5, 0x4, 0x5, 0x3ff, 0x8000, 0x10, 0xa, 0x7ab, 0x1, 0x3, 0x8, 0x0, 0x9, 0x8, 0xf, 0x7, 0xfffffff7, 0x5, 0x0, 0x6, 0x8000800, 0x8, 0x3, 0x6, 0x6, 0x1, 0x2, 0xffffffff, 0xfffff800, 0x800, 0xa, 0x4, 0x0, 0x7, 0xffffffa0, 0x100, 0x1, 0x7, 0xa3, 0x0, 0x3, 0x72, 0x53b4, 0x6, 0x9, 0x1, 0x7fff, 0x9, 0x1, 0xa9, 0x1a, 0xfffff6c5, 0xfffffff8, 0x4, 0x0, 0x9, 0x55a, 0x8, 0x7fffffff, 0x2, 0x9, 0x1348, 0x6, 0xffff, 0x100]}, @TCA_POLICE_RATE={0x404, 0x2, [0x7fff, 0x7fff, 0x9, 0x1, 0x1, 0x6510b9f4, 0x6, 0x7, 0x2, 0x1, 0x5, 0x1, 0x7, 0xa, 0x1, 0x5a, 0x7, 0x0, 0x8000, 0x80, 0x7, 0x566c56af, 0xff, 0x7ff, 0x8, 0x5, 0x8, 0x3fffc000, 0x81, 0x400, 0xc5, 0x1, 0xffffffff, 0x1, 0x5, 0x70, 0x7, 0x4, 0x4, 0x36, 0x80ee, 0x2, 0x7fff, 0x0, 0x4, 0xd, 0x68, 0x8, 0x8, 0x4, 0x5, 0x8, 0x6, 0xffffffc7, 0x5a652b2e, 0x3, 0x6, 0x8, 0x1ff, 0x4, 0x2, 0x9, 0x1, 0x19, 0x7, 0xfffffff7, 0x7ae, 0x0, 0xeb, 0xff, 0x5, 0x7ff, 0x2012689f, 0x8, 0x1000, 0x80000000, 0x7, 0x2, 0x3, 0x7, 0x7, 0x2, 0x0, 0x8, 0x5, 0x80, 0x1, 0x7, 0x9, 0x9, 0x4, 0x6, 0x0, 0xd5, 0x9, 0x0, 0x8, 0x9, 0x40, 0x5, 0xfffffff7, 0x1, 0x5, 0xd0, 0x9, 0x36, 0x4, 0x8, 0x7f, 0xe1, 0x0, 0x7, 0x3, 0x8, 0x5d7f, 0xc, 0x3, 0x4, 0x6, 0x401, 0x9, 0x7f, 0x80000000, 0x6, 0x9, 0x7, 0x2, 0x4, 0x7, 0xffffffff, 0xffffffc0, 0x4, 0x7, 0x9, 0x7, 0x4, 0x0, 0x9, 0x1, 0x5be2, 0xa8, 0x3, 0x7, 0x2, 0x4, 0x2, 0xfc, 0x7f37, 0x6, 0x27360d66, 0xc, 0x800, 0xf, 0xfffffff7, 0x5, 0xffff, 0x6ed4, 0xc450, 0xfffffffc, 0x720, 0x1, 0x9, 0x7fffffff, 0x80000000, 0xffff12d8, 0xffff, 0x8, 0x5, 0x1411, 0x6, 0x4778e01e, 0x6, 0x7fffffff, 0x8, 0x100, 0x5, 0x33b2, 0x1, 0x677, 0x2, 0x7f, 0x8520, 0xffffffff, 0x70, 0x5, 0x3, 0x5, 0x9, 0x7, 0x8, 0x67, 0x0, 0x7, 0x81, 0x4, 0xc, 0x3b, 0xb5a, 0x6, 0xfffffffb, 0x2, 0x8, 0x800, 0xffffd384, 0x10001, 0x6, 0x7, 0x7, 0xfffffff7, 0xa0e9, 0x9b9b, 0x0, 0x6, 0xffffff1f, 0x6, 0xffffffff, 0x5, 0x40, 0xaec6, 0x1000, 0x0, 0x7, 0x100, 0x1, 0x5, 0x7, 0xfffffff9, 0x5, 0x7, 0x2, 0x7, 0x5, 0x6, 0x6, 0x81, 0x1000, 0x1, 0x7, 0x4, 0x4, 0x3, 0x1, 0x2, 0xffff, 0x37, 0x5, 0xefe, 0xfff, 0x8, 0x1, 0x2, 0x8, 0x80, 0x9, 0x1f, 0xffffffff]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x6, 0x5, 0xe06, 0x8001, 0x7, 0x101, 0x4, 0xd016, 0xff, 0x8, 0x3, 0x1ff, 0x1, 0x8, 0xffffffff, 0x1, 0x8, 0x7, 0xb5, 0x6c, 0x5, 0x3, 0x2, 0x5, 0x6, 0x8, 0x8, 0x9, 0x6, 0x80000000, 0x1, 0x6, 0xffff, 0x2, 0x0, 0x380, 0x1, 0x40, 0x7d, 0x6, 0x44b9, 0xd7d7, 0x10, 0x5, 0x2, 0x9, 0x1, 0x3, 0x7fffffff, 0x4, 0xb, 0xfffff800, 0x9, 0x2df0, 0x4, 0xb, 0x8, 0x10001, 0x7f36ae35, 0x0, 0xfffffffb, 0x10, 0x3, 0x8, 0xbd95, 0x8, 0xffffa353, 0x9, 0x100, 0x2, 0x7fffffff, 0x3, 0x1, 0x0, 0x6, 0x8001, 0x10, 0x3, 0x80000000, 0x9, 0x0, 0xfee, 0x80000001, 0x8, 0x10, 0x6, 0xf06, 0x0, 0xffff, 0x3ff, 0xf, 0x800, 0x1ff, 0x7, 0x4, 0x0, 0x4, 0xfffff6ba, 0xa1, 0x0, 0x3, 0x10001, 0x2, 0x8, 0xf, 0xeb7, 0xa, 0x6, 0x3, 0x0, 0x400, 0xec, 0x7, 0xffff, 0x7, 0x1, 0x6, 0x10000, 0x80000001, 0x4, 0x88, 0x80, 0x40, 0x1, 0x5, 0x8, 0x3, 0xb13, 0x7b, 0x52, 0x10000, 0x4dd5, 0x5, 0x80000000, 0xfffffff9, 0xffffff25, 0x2, 0x9, 0x228f, 0x9, 0x5, 0x80000000, 0x2, 0x9, 0x6, 0x77, 0x4, 0x10001, 0x3, 0x67c, 0x6, 0x1, 0xffff, 0x1, 0xffffffb2, 0x18fe08af, 0x1, 0xc771, 0xffffff33, 0x2, 0x6, 0x4, 0x3, 0x7fffffff, 0x0, 0xe1, 0xe1, 0xc, 0x3, 0x3ff, 0xfffffffd, 0x1, 0x1000, 0x9da, 0x3, 0x5, 0x0, 0xfffffff7, 0xb3, 0x90, 0x3ff, 0x8001, 0x7fff, 0x7fffffff, 0x4, 0xc4d, 0x6, 0x401, 0x6, 0x12f, 0x9, 0x80000000, 0x2, 0x0, 0x6, 0x7, 0x7, 0x2, 0x9, 0x9, 0x3cfc, 0x9b57, 0x80000001, 0x81, 0x4, 0x3, 0xcf, 0x7, 0x1b, 0x2b, 0x0, 0x8, 0x1000, 0x2, 0x4, 0xed8, 0x1, 0x8, 0x85ab, 0xe, 0x10001, 0x100, 0x80000001, 0xfff, 0x101, 0x7, 0x400, 0x4, 0x7, 0x200, 0xe, 0x96a, 0x6, 0x8, 0xfffffffb, 0x5, 0xe4c, 0x4, 0x5, 0x800, 0x0, 0x3, 0xfc37, 0x4, 0x6, 0x1000, 0xe0e, 0x5, 0xfff, 0x9, 0x8035c460, 0x0, 0x4, 0xb, 0x9]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x2, 0xffff, 0x1, 0x4, 0x80000001, 0x264, 0x7, 0x2, 0x1, 0x6, 0x3, 0x5, 0x4, 0x401, 0xa0000, 0x1, 0x4, 0x1ff, 0x6a, 0x8, 0x8, 0x0, 0x8, 0x3, 0xee, 0x2, 0x9, 0x8, 0x7, 0x8, 0x6, 0x9, 0x542638a9, 0x4, 0x1, 0x5, 0x9, 0x6, 0x4000, 0x2, 0x202000, 0xc800, 0x9, 0x8, 0xdb0, 0x93, 0x4, 0xbd7, 0x8, 0x200, 0x7, 0x6, 0x4, 0xffffffff, 0x1efd, 0x7f58, 0x0, 0x2936c000, 0x7, 0x6, 0x1, 0x0, 0x5, 0x3, 0x7ff, 0x9, 0x7, 0x5, 0xfffffe00, 0xffffffff, 0x0, 0xbc4, 0xc, 0xc7d5, 0xf9c, 0x403e5805, 0x7fffffff, 0x80000000, 0xfff, 0xffffffff, 0x0, 0x5, 0x8, 0x4, 0x2, 0x0, 0x5, 0x614, 0x0, 0x5, 0x6d, 0x0, 0x2, 0x5, 0x6, 0xbf60, 0x6, 0x9, 0x3e953feb, 0x2, 0xfff, 0x2, 0x6, 0x24, 0x8, 0x7f, 0x855e, 0xb, 0x7, 0x1, 0x3, 0x6, 0x24, 0xfffffff9, 0x2, 0x7, 0x3, 0x3, 0xf, 0xc, 0x3, 0x0, 0x3, 0x8, 0x3, 0x8, 0x9, 0x81e, 0x23, 0xa, 0x6, 0x5f7, 0x9, 0xfff, 0x4, 0x8, 0x6, 0x10001, 0x100, 0x2e90, 0xff, 0x2, 0x80000000, 0x3, 0x9, 0x401, 0x6, 0x3, 0x5, 0x41, 0xfffffffd, 0x3, 0x6, 0xd6a, 0x9, 0x101, 0x8, 0xfffffc01, 0x2, 0x5, 0x38, 0x9, 0x80000000, 0xe, 0x78c, 0x0, 0x0, 0x9, 0x8, 0x80000001, 0xa1, 0xf, 0x7, 0x2, 0x600, 0xf4c3, 0x9, 0xc011, 0x2, 0x6, 0x0, 0x298000, 0x2952, 0x3, 0x4, 0x2, 0xb, 0x9, 0x7, 0x3, 0xfc4a, 0x8, 0x2f9, 0x0, 0x1, 0x10, 0xafe, 0x7fffffff, 0xffffffff, 0x0, 0x2, 0xfffffffc, 0x8001, 0x3ff, 0x6, 0x4, 0x986f, 0x1, 0xfffff9bc, 0x7, 0x101, 0xfffffff7, 0x4, 0x8000, 0x401, 0xfffffffe, 0x3c24, 0xd5d, 0xfffffff4, 0x9250, 0xffffffff, 0x7, 0x9, 0xffff, 0x1, 0xb7, 0xb7, 0x0, 0x1, 0x3, 0x3, 0x6, 0x3, 0x80, 0x6, 0x9, 0x5, 0x1, 0x8, 0x9, 0xfffffeff, 0x8, 0x2, 0x2, 0x5, 0x9, 0xfffffffa, 0x1, 0x0, 0x6, 0xf18, 0x8, 0x1c3, 0x2, 0x5, 0x9]}]}, @TCA_FW_INDEV={0x14, 0x3, 'pimreg1\x00'}, @TCA_FW_MASK={0x8, 0x5, 0x48}, @TCA_FW_INDEV={0x14, 0x3, 'bridge0\x00'}]}}, @filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_DIVISOR={0x8, 0x8, 0xd}, @TCA_FLOW_RSHIFT={0x8, 0x4, 0x4}]}}]}, 0x1424}}, 0x4008094) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) fspick(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x0) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) execveat(r8, 0x0, 0x0, 0x0, 0x1000) r9 = getpgid(0x0) syz_open_procfs(r9, &(0x7f00000001c0)='sessionid\x00') prctl$PR_SCHED_CORE(0x3e, 0x3, 0x0, 0x1, 0x0) r10 = syz_io_uring_setup(0x891, &(0x7f00000003c0)={0x0, 0x64ef, 0x400, 0x3, 0xbfdffffc}, &(0x7f0000000300)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r11, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) socket$xdp(0x2c, 0x3, 0x0) syz_io_uring_submit(r11, r12, &(0x7f00000002c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000480)="fd86345bd791baf82d3202e211cb2e95259669ec66737aa6de5f7c2ddb5a7d4de70069b0c0955909c8dbb7453af4b1ad8723428e6387a1b30be1a488a19f8de0223923eaa074d3bdaa36668cda7375f98547237e593241dcd12e3025cfc81fd79dbe20178d456324930859e1da9a3dc292555e9069d1f3259a2c316adba4e136beb489db8133c1be0ba5aa59aa9c25b9252c6a578e07676749ee981db4134256acf06dbf62d662d8d465c5856c02d8a8ec77cc75cd363b3adc3a825f99", 0xbd, 0x12041}) io_uring_enter(r10, 0x47f6, 0xfa, 0x4, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000200)=0x5, 0x4) 1.567373666s ago: executing program 6 (id=2973): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$igmp(0x2, 0x3, 0x2) r2 = socket$inet(0x2, 0x1, 0x100) setsockopt$sock_int(r2, 0x1, 0x48, &(0x7f0000000040)=0x3, 0x4) syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x100, 0x0, 0xfffffffffffffffb, 0x9, 0x6, 0x0, 0x7}, 0x0) r6 = syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x18006, &(0x7f0000002300)=ANY=[], 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000140)={{0x1, 0x1, 0x18, r6, {r1}}, './file0\x00'}) openat2(r7, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)={0x2880, 0x8, 0xa}, 0x18) write$FUSE_INIT(r3, &(0x7f0000000380)={0x50, 0x0, 0x0, {0x7, 0x27, 0x2, 0x1dd880, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}, 0x50) fchmodat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r8 = openat$audio(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r9 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) lsm_set_self_attr(0x67, 0x0, 0x20, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r9, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r9, 0x40045612, &(0x7f0000000200)=0x2) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000009b80)="50b11747d6822c403d2e292ca265ae242f69d1baf07e8db9ad0716994717df62acbcd4ff57e3e37c7fa55330d96f3ae735f0b7879e13ac4a5b82a00649725fcdd8bc513e1c7dbb9ab9a66ea421ac231f677e50993bc669389d4c28140c0cb20fcdeb39fe8963f759220c33c901891e58ed9e9c97c473a5103ad07ebcc55d6a8a6b78f2db24fbbc39e86aa01fec234db80b009bba10bf5c95368489bac22d32fe73367dca9bf2e3dc398b18c63cb90d5d1a313cd25650ea28424882abd498005a60af451da873630495c2bd07f342d5f3de97c4ed62d454a0ca89d7c53792fb9266608d3525377e336e79cf54957c04e8abf1508e54e7b254cc730fdc8d010e5b1e4cb23464eeae445b6bf6fe6e87d5e45a06a97350386d766d695877fa1b0624de12c6c213908f2286a2363e02f4df497074a0bed6f7bc4c4cf5ba0a19c84f9021112a13daf592bec368e837d5c26870be4f1ab35f821f59bf46e3afeebcd4c1feacf28292e7069fa30dda3da246e3faaa3bb95719c69f02b76107ad47f1c526570ff628fcf705279c28b84a249ce36e927a784223d6bcdf4f9ddec51af87a6d308e6a0f4b9d01bf0c9eaba27f1a1c8637c1f42ebc2bb7dc93ba617788e140941b08935b6839b65c7486b4cd09f6a17ea526dd852c8b0242b6598dc3cc982f77c51db6e64df3335cccf419e38df41540067b106c699dfd1eb06c8debfc41d72346133d5e4cb50b5f2a19f154a8905b0c2b43bab0b11779b750362b991c88d34070286ff6ad42f30329a324877ecb1652564adda10a6064d5d5ce49f48409b2b568e059a77126c05072bdb5c38ef4791a985b24bf1d5fff34a45af5f6ee491eb922d696f0358cc35d87e97386149de0042ad067e3011fa0b4a6baa6215581a88fb67f3a113afd431ea70a92e11d81d8fb170f97953ca84260a93c2e01bc8369bc2ae4b995c0de707586bd4200723e17e1eb8128a6d5b4d59f0c34b2b7ae3229e97271c07e91b384d9e8c7846201a73a2e32b79f57cf0d4af12df342792b73810df698020280e9c5eaac577979e71a503b7860d7c6a6a98969e155aedc10c0f288778346ab5f4c7937a9c933caa4099ff25582e694af36de4da7acc4c5eda8ebbbbb70616224151c0f7a0e3d1fdcf27cb2d73416d2cb01e2be8d00685b1a7a5e7db3e48003d88993d34fa522de7089f25da6b86fad8e237a8dc3819942c59c5097664b8f88aecba45a9f9a59647dc32d78c0cc4ae728a30330c7df606ea11bc2bf16f0937a7491412656ddf8a91534cb1904573d1109f7498f146215aca96c11fa0c4122728bcf6705c8917403c425f4280b45981917e03830bc6a6d30bd46ff168ede03ba8ddb5478ace67254fe922cd4252cc8d94531b53b3bf074cb53c6ce923e29e09c4ed434e619e53d67150ee213876fda26d83cc814888b1d9471618781c9e2702363a86995088cf82ef72d47294a6cb102d617280df10a41bbace59dbafae9de4ecd669353d35c79cdbc8e2690e299f58dee2657d26907d10ab70c6941d08d1b63c6fe5eaeb2a7e4f64f2fba65f8c351e9a0d5a7443fdc901f1f48ac3871e417bc639983a5a6b4d541d321a97bda21fc41a02783f591ca3475ec51049da030c2f7291ca62cd3eb67de3ab86e180af3919edad86617f59fd17cb2c7ea33fa5dfeae37c947bb4cca26a3a02287aa5531013fd28a030c60be88624de3df16fea135cea6da3dc0192ff081ce9e4a29e7f6c204d92e90fa335308c8d6a722e253603e03d6884f5d45ced1924d2cc1e6a2d5bf1d459034de2248e7faeb7fca0cf841049a0449b24fd2ca8b8fd389437302f18946d7394775c9ba44a6602116ba9b0aea43b65af111d5766d4263e614d0719a40ad5c1757c14616d6a4413d9b1d29e49b7676b311042ae381b9240747e2a2a754c20d4f673f046083f5b742b732e83e6fb1361a0d510d72a63529be3a02bb5778c7f341e62a516a7ac3eabedc65eb3b842056bc37fe03cfe910676803dcd2b7038df80cda342d3c478158983621fc8af66a276dacb5bd187d4205a42591ec6a0b8cd2b2560b3de60cec3ff0baeef5e4baaf0b76e5a2a6b92205267a5c9fe248895e71a90b05a07a9d929d905d601a7a7036951b55e6d82bfd1dfca1c12639907147fb201864c05b7a7bfe5e26ce28c4484aecac96fd6f964cac20e0a7d552905b1c7a3c796eb93ffb49d6d29fd25206ab17222cb1f45c3c0f43398cf53ce663e42f756c962c014a42c108327852fa52378f8190fd71a7847eebb32351238d040b73b33fc899904777f31aac8911c412cab86a76e470ccfc8f7a22fe6c029e9a4145c85f28ff5c4e2e521ac77835eb99a6462d8795ba86cb383751114fbefee1c97246ae8fa005d5d9a11dd1aad36aee1ac98b57ba8cdb113297b113fd2ee54e749640cfb1eb914e379c8bb2dd967504266e265557fdc01327e00de86c950ff1255ad68f6b766dda2f0f572a18fdd0a53fb37b18d5dff10759d74b0ba96854ac184b0ffc334b85a9a8afe5e7d5bb84373fa91042dc652ee7fe1b9e86097c0029041ad4efb8f7bbf7f99990fff7a677885e01f6b8fd939daac1c9e721fc87c8140b8546b227e4476404e6ea5b6f499c2567bbb8c5cadcfbd3dc8feeca191a28b96f7c20b56f20b98e7e6a6b7d304965919e10bc658e9a641cd64a7c5e1f8b024e58a2f1b1ebae2a10a3ef9b38b9070c89def8a0b970fd75c99092382e97ead02c47025d8548dbd15c707974ed2e78a39958402558b3b983878efea864b34c7bbeb02718f396bfed5f06e9d96946e66d54ffaab14d20bf5e3783605bc6b599edeecb1ab00d7fa9673bd6129fea4d57d093117c170d8d6f4657eb96775b06ebb4d33238bf554c031b3889b270812da6f34a163fb9bbb1f16303ecae540a78c1258fc4115b674e194b3bd33d0c5874fe61bbd81091ba925fb1defd1f13ec9fdaee00e6d0ab02bd9d0d3b3c5e5a45811601384ba1a19b98ff1044810187ab82a9d90e6c62dbd0298b37754fdbee159941df70045c29b7b2deb6053b9e4a135282dac1ad194d36d347da5f65ac1d1c307292ae667bcea3a648ea3a53dc7c9175a06bf0b8536436e67147b88b99c5b181923d07bcc8935bf7ef5f4f48239cc511bb7cae0c0b7fedf14300fa7aa9ab3175785f46771a9efd6363bb7cda28e8456be480af9ac709d94c7c0d8d899e27d3fba1329334f9a145c70675a0722823eea84b399a06582aa6ae934420f80868212f71d9ce9cbd8f7ae228144dcf3bc56db013f467e1560f6aa7423f9b9f776132a0eec54cfeea66b3640e2d731be12678ed83f08615af9ffd31ff3ae0ee554a2ce96f7f2eb461e880e1aea46712876a03add6c219845a9dd4e71ea9b8f467e85d6706e019b77da5b73557723591ed61f7919a6ae48bd94ce2ae6ed6af9ecb9e41b9ca0a38c2a4d24ac971f19c294ccd19a4f8869d33ac2df588edacee203e38ecda11c5d2ac70182f12e14523487963decca94cad84dd7e027bb07edeb9b3a0cc0f774d1bbec9700e88555fd745f707cabd78c7b8e868cc89ab8e735f6c7561a14c776e5ea73b807ad6c2469e20c2cdbfbeccce7a96927ee9219962e519e61652674ce591da2bb0dd60311ad31ea16d1c6eab2f89f6b5b02639cf871b37a9a40c541e68f31293a32f2a057ac3fcfb3e16cb8edd9166aff7e65ccc490385bbcb74d0be1702032dbd2d6c7757267765b051179e43b16773b73583fce72e19830998aaa021d8593d154ec64a2295664971611f8d96a52a12e5f4d1809346729d46d5f6f25542f41c93de415f4dd4cfb2b83d1ba8cbf1086da690e7d7ac2efb84914f2fa530d13ed548c6f598322defa8eaba95b41f3135884141ba495794fe368ffd1fac1a5009ad9430e032b6ba7d04c7f34fe938fb350bff445563b5c5846214373c4f262d33b70c72d295c8c73ce907d741b86826b10c7267eb1d7ad137e5744e52fbd48a4229ee75d980e9ab08b5ac280ee4faf19d5a19a220602c957cc9d3e394cdf1a7a494b21489f54c62441fef0ff0d4cd03bb1b6cf0ac3793046224ce3ab8fe22128a07f5bfecd26cbb2ca8aa74c009591d5b2dd36bc0b1974f2fdf87e0c2f06de06ef6ed995d984ab76adff0b9ab9e08022f69a8bc9005e6c20dc77b124fe5da958f91c64a02fef3af2899153459e6796bf29419c4de7c403b2919dea2ad9ad77f53f1ee873e8c3ebfb665883f26f2bfb42cdcaa2fe59e502695d80552c176cdd6aedb3f76992d7fe881602e20978a90a5295590439fb7e255851b4580bd5a21fb9f0755c9b547ffdf12517cb82fc3ed5ad960ad94607e84e90674d5e1e8068b1597ca3b85483141c34b9bc441f89ea85867c02b6a26575fa35fa982bb9f5b00b9ba0d68a1f88038728d8494915b5c85da0f701e5da2fd54b9d8a6c13b875e33743e3c9543b3f2d5b3c62fe48d068678b8a409f116584fb786a242fb12c0a59b34490b0b339cdb84b6f19cfbf68bf27a63961f1c2769e5b481600eeb45d713921a96d398d2c20bc9e2bd4bde46a12d764045877723164c02796af30de5f371e87c98afc1863c35a2b7a1da6af640f14c3ef30a26728426ba5742bffd32e047cb19f2412a707a0734b76f063925df581bf7e994cf11f72c73f285c8352413edcd85c1bc34d1a3ec8bb2073e596129884b2a6846973da06276fa64a4a1ac5e60952c302227a22c92ac7391f02f6b950838c19dd80bf6ce9fc540f9da98e4ed12eeb205fcf10c9ddd11dca7269dd2a4d75635c5ba52be04ad46bcd5a2bbd1e08289b8921ce3f0f36bc491a2df7d03f4f085e481b0a381612ec40c983b7e3688da11bae1937ecb9741fbc03c4e6a09f6bb97388e63ae2c94c9700180c47f90c37d991ef84833a61db647f8a14f1ddc19a5164d3602c34509550f2b068b859645c33f00483a4664f583072e221468ceef4c8f44aa6b1a8137d385d19729ba2ce6add2bb34e0a4840bcedd25373379a9d0e84afa829afebb7560c9417eeb19890ab9edab88afded20febdc9b8b9bfc8f0b8c58bf19db81124ee327b4cbe6e007fc00089f1c57ced6c9df212c60ece3c79e1d15c208da510c407db8414b9742f1e163dfe79cdc4ea5234e8747a027fb306e7db71708954090c37f3297f7eda75a2cc6d2f63d1b830706048d580d515beb95cedd63193fb0436f7754ca0678c0660a7f051daebc35ebb3a2f110a75c7c76d43133787b0dfda522f6e45a6abe0a0a65f7755146f705a6adcc3bfe861555dbec4957a98f17a6d6a372701f9e638ba53b4c195589cc457637df08d65bea188c1dbd7be40a3a519fb3ac09aa711d2628738b80d94fb59fb75dbc8a766e931f461f611168da51080e69bf503e33227851bc6203e0cd1b6cc1c63f42868d5d32bab680fa323200d2f41e1264468f9980ef00f409f06edb61bd47f19bc98e36dd21f8483efba942c952fc843764ec5e1ec30f6a370703324acb147434284885bc2249fd5ac97b6cee45d297400d0fd64c0e1d3b0379d43c67e47d4e323ad6504ed0e377f13b3cd458236a7cfff1fcaffdb94b2afa0d8541e2ddd51bebe5bb35e3566e4240a2f5bab3048b78e2eaea40406989c2e338756d199a8234d28c810790afe1bb2d3a0c98b60a54f38810a041e6365d7601eac573089941680313ff1c667f95c0319a052c4ea6a4fceca111d920a1672e785d778805e9e0af6d46f8db261de30ac30f3cfee13380cebe0a3aed23e2c3b8800ab00ef825c4b1b7f28e51fe92f6d3b03ae291607616d56a491213f3777ef581436d7964c8782640865bf767703c9038b45c895c9991cdc232f24963c3cecb0373dc4ec6d421daa96e986507efac5964b9a102edc02bddb6b314610ec6dc36a8e379593efd31ae32cba80c65579b76fa1c54554eb6c7a503fd21b6584bd1eb160d920aab21038ca95fdee0779cd761ec02e7d64e225a8e5c377dfe27c4ba4e2adc7f4460d65213c08312e671afe740daebceb5fedd1ab4ccca792862bd76b4b26a568fa0bc0ee14b9661fb2d7b043bd91b2975b677119532098bbf8271fe9adee0573b170149950c93fe8e50f5d39aa7f36a742e28e0c509d70403e58b14585c0a0741a48effbccc441f90c9102c1b61102156e59b9734d1565519f63ade10283906280898551facc5332b9f1034fad98b7dbe18187482d0b2a48120dafbbd698869fb40ba561b4330c5118f8225e033dec5e45c30937219dc9110b7c452af3932d40ec3b4ff6d644410461cc547d669dbe44c4e5d1095f5c26429fc664ca56769f7b51396a7636e9234fed751940fe6c0505c5da8a63af095befca386060e68f03432a162978eb7a4bc392070c21517a5496d8a336d9220cf595ef58eeaeab9af28369a7b2c4ceea21bc8f9463467f0ee3faeb30b390dd348465fb578a6fe485e5d0b528c92fc7bee3f6e16f1b43f3cd39b0a40a37a2c80f7d43ff8d9b8b6d31c60840fb05cb3518bdf95b2c747419368a3bd4bf88288cc6d8606c626862e0526832af026039b47d072bc998bfa10aa2e6555cfac9441c0bd9f54cc063fac57501483a8f9c7e2c8c98ecb9f04e5bfcda5864b2fc18814267e1ee9f4523aa5eae3edbd0a21e14b64a72e8fa2ad9702ea1cc33584da8a69b6765704be9abac81ad6544814c683511c50b9cb9a38f78459c3f2544ea5646a9560db98c2a61c9883c20f16317f834fa989fbc5ec50e06bc80af322f2cd3f4d42cc05cbfffda76af890ff886bbbe1a05ec9dcbfb69005e5070d0577ed62212f4a10587313ca324b7583f9ead0b697e26db128bdfc8cd993003035ab2eac1aee33f8ec6633d03fde1cbb18fce193b63aaf92de45eedf1a93a2a1d25e612965297dcbb34252287cf9ace9f7447a59dacd1e2e69b382cb625f492f9c39a101bc36a4d390f42d9826d9f002697d561842a1d5be4cef4a9fa0e6a0c2c542ab88bfd1bacdcc7457b45d41cad4e72bda2f7d5459460ee7f9206d9cb50c3ad358a155b3a1b9c024c981bdbf3bf045cbcdd9f9362feaa1f715f294945497956c6189495303c0d2daa695f5600cc3bf330ea4c1a79b5b726a1ae7864f7748a76b47c5f19c2c3a99b2893eff199d9d18b7d7f23ba3925212219047d31145dcdc4de57b51d762c3f3d82602366c4fffc3180e94c58fc17e0e30c5a7da180cc5df579376f088782baecc44029b42843562d60dc53bd293f0320dd7f5e557846529a22f4e26d70a09f1d3d4d9cad342cbd86cda8d7554cb9993ad8887906de8eb98aa4fb367ad16648d1e2c29c9abbea63aeec634fd3825e442a7e5e1d762ac8b0daa20d045c298a9fe44c8025673030146d4f3083b115c99637e3b9ef6f0a96d9232235cb74ac1df4cd50e804e73c239372afa5c3d9d8314765ab0c49168eda1451478611bb9f4ce3f6efe549fece5691b3d66286b111c918b71de8b55c306930feef596b9e725b94467bd558d71336505b18d291055435ac93c5f2141e93661d29c91615bf21ae957d1bc4b10ede79a25f11469cc6d271c8f8d111e87902f425412be72ff5bf09d17d0d7e1405ddb1cdc10d616c6991173f09a1c246d644c785855a44d137d9e98bb320a7f60dee883ed945e11ee84a0e6c9a764d9bfd2e14742c6cefbbdc064240ca778bad305f0e2d66961e696d45f3f2289ab06bdcadbf352699be0233131114b767725c0f31ec588ee3dd60af55576efec24e295f915d560a7fe5832b9dc10dcb6a6b898a2daa1b20c8cfe2ad6782a93cea070e098a25f72d92cb793e1701308a3f2d69d826a571e9c2dba02f17840bd890e9f3b40aeabacc6c625fa25dfe805e3253bcc1f98eebee91e73eb132e33a13e882bf2427e6d385e53e2dcb20f037e93be1de07cda7b2d9f768a988bdcbbe16dc350e064857c06867a5ebccf2ef9f63522077f9353ef7562b77f199ab6630732b85e30b7a6838823d5c8b2f2d4aa257ad91c3d0b01652f2f47dff1a5d0b1ba4c79de90a6bbc4d1d30fafe8514793bff0aa9a450ed1a560505a948b7e3e7255d14f52d3e0cacf3a69e0526e0eff0d0b668c474841ff3eca5f2fd7b3b621631f236b5d7c44584868b73c64ae15ff464ac3c6eeb6d7c4ee423a3573acfd5270be643e3625818e734c01c0f4ac403b0649c0f8691b9e3fdd4d390d2aefb8c6b2bbee85c9394a0e78013f6d737d9b9a7784868b64133e41f47f9fcf013656bf426741811b2c768d2a21e246d6bdadf37a09b0bed69eb47bb69832bb908060c6855e2f584f85ce1d2090a60192448c5a1b2adfc2633cc6cea0ba6dafe570d961ba6bd5c178ca862762de6bf970673f54fbcac58745d0631cab35154ce61ef54c9de7859b1a06746dd402c090a3d10b8f2882769889cc7840e1b5e63cdc1d0f6dd720d00e312a755025b71ec25aef7c1c56432cb38fb0affca7e01080a6ec7f81f0a8278afaab95ba58936eac4255514fdd9529a2cc3c64c846dcc6c82be84efbc9eeae9d85c1981f06b41136f23411225f17361f123c156464dcade756c80b7f5d90f4c6b534f7929146e91a305b20ca1128321345bd580f96663f167868d2128a63a869215e2913a19c7ef801bb13679bf90efa1abd06183f37aee170ad36d88649a9219f6f4113ee8fc5e94e72f074ce295006f6d2f0253cbcbe610383bdcc17a4387ffda3ea717a678092a90b4fc2669d90108e976274e64cfcdee5839573f63952f079874ed1540a89f729982df9cb31a5a27c96e1f09b73794b282eadc7719546c778ee51f547682f44f9ac4b09640c43d78dc57e64c6886e9ddcf4a6df2388fb8ae346563284cab5d93298c02aa76b8144c806adfae987db4e9ee826030a2a0f083272f8299a1aec76b17d30e2bab99848e393933e7f570fa5c171728377316689f2f207e59ecebcff5665c8198bc41d3c0ff734365df176c1cde67d84e93494908f8a16a0784da3a3c48d67185c4e2a9720f8221856dcd2f2a4ff0d8325003745209c4c796440f8a28db1e83d214641123d3daf1e61279cefd90739a32fbdaf1a4041e068277b2a31de9f1e34519e309d923be5dff1193782c900cb9229a81fac3c05258d95c992d39c9277107ca6f8298e2e03046a87c51978895fb357fa8af5284ab4018141740b90b588c9f15057aa033ebcf2afb41715b4d30d057439cebba113ece1433182df041b48a1a9e90f405a4763026899179bf728e45e122c069b4a3c7381fcaa187e1fa9784e8581c298d4aab3d9df8057c893c0ea07028bc8c97359e4b8f59d1969953d8dc9c7a3e4f63aa2efaec5af4e62ecd6e6b8c1b34e17e7a4b18ccacb9eb9171f365b1a13d761cdf3525c7d3e16ce8c128931060aebaf59b81828cd6813c426b5216d9a5b1f49813500b05512284f6a993146ce160df74634d041654b41cd4bfad14acc62d0f4d7995176ce6791a29ab1b2a898fa0751fbbc4f877c6f11383edc67678b37a23a6a431d64c443aa0380d36afd5925c79799d042f2932f70148c69fd2ddda80180c71870f1be3fa2788f4d82a06e29d0544deeb0365a3047c121049574a3054a5c530488d22d3f106763998e3edbfcd989c8a919b70df19141342522af8fb8cf83322c2d0ef575f640adcd70e9e4cc483b8726a0fa420ec55075dfca4f144662558ef1bdaa41643af55e3b1db151c22ec83c90d574797a8881faac018e2342f7161d959f9b13a5193ca13d224085291b0ad4c51cec776ab5c74bbdf544ea9f53cf43ecf69780dc0dd5369939989e01e5113c881b9f7f12117fb433b2bc0aeb521cee7a6a2d32db0d0fb4c87eba7f61f35f7eed39c9c3720a562f02ca0ef7c292274a1dd4a5644e61b6374c5f8d67c27cc2d6b6bc81a5bce637b569118c449b3805d548eea41a301e491bc50c2deb8cc241c2a781976ce8708118ad82d33f9fc6639033cea15091b311c2ec96be1cc2b1866179911d9cc012adfadaaa0ae5d42568b8ccae833ed30b0aca93d87aaa1aadf7cde62dae506a8186f63696623a3c764c7a43184faf5a24792382e53f89e30204697bd201dcc4443f11a6ddc79a610389109f933d0e911680a9df0a14ba2add425391169c452b2439e51a8ca7c147c2efb5879ffb6dce33498836c5f8cfb268c62827a4ec349946a313c362003c82f71fb42b37e04ecd74fe559aeb737059033ac19f0735f9d094242eea2399cd57c2c053d14ab708d9419769b833d119e271ebe06246a10e7713876c59b9fae9860cfef8d7671293ce0c50d1e6afdfa351927e3aa68a54f05cfd6943ec10d98fbb8199da131e50fefe8b0b32ca561ace46f0c21fdfba4b1162caf1ed2a5322f6bffc1bc97fdd556146c4938165d8032fad6bbf38fbbe42b2afe79873c8c1b622ab9a750f3dd7ecedf3e310d478d7058c0a90c33a2a7a7380f61b457db9f68844d3405608f14e0040ed2ba8d99fe5b8c373ebcc322957a02e9fd24ba5cc8e9acc8aad0f6e80a00b113c6cd20656037074098249155581e10a321fa8285286da3e3108f7b8e6d2e6506f8fa4df3075b3c36b4a33b0899fb05bd74f6faa57280fb6686f20cf613a1ada130d3661502aa9c2e861968670bec121bda18d555efc1d706cb2b5d7d6fac67e1c4c4920a5f257fbce9848861377e624a54dc08383a3bacaf66e81f9a5d3bd30fd6bb132c2a7903a821b008714dce1c20954ba0dfcd94ddd606e3bdff3851e9a7219023d4db7bbe57382d3d286008312477e79fc92f21c9f67b24108279fd972d1f9035d80f6ac42e4ed5d1d91d544d55e74fbbd564b16a4536d20f609cbcb043307de321478134bf65aa1cf990feac1539b268283aaca8ce9dca398e0ad96733aaa9cdf7e4639b47a817bf69c2ff07692c262099db93dacea55fc8c2ea5313b2fac432a0e9110bd413672738be7afaa95afa04bbcf70f14c7f45ad344c6ad417257f94eb56be33a93aac3b2e6fd8046ff4cf250eef8ecf084d8161e266b2c90540729c41a56ccd0d933dadd7cc32e60c4bf600d82a62fd9f2ee4c74bef4c6b499a3a35b6ff71413cd30302001dacd8dc4219a9c565b75e7fd436ed1d1cbe5bb03a1bd7340cdf2304f4c4e9e25949396adfa855bf647a142f1717bab399993511e984f60ac71956e32e6ece7927b8f35703b3df06e598568c37ec7703be1d4436069a7c614711a5d95158c00b154dc2dcf24f50886366ed347112420adef713185e71c8b5b87d978f8a8149e572260465bd21d65a03468e44fef91b9ce891ce359a396dae0a345483dad902707a1252757752afc2197d6e3fd973e63c18c289cd63d88403175bb83ff9327842be4f54d14bdfcc5dd4f376de8a3194452f20ebcb3d15349545e6cf573ceed6b9f08765eaffc2f7b4af494fed9d0ecc0af63149eef699e9082356a9a24269fd6136f4f9d03094efb847fad7c83ee00915b1bb4e09bfb83ebc6ff1e5d4894c9de9092eda25c90f61c705e3e5fe204242598ec13afe2f71a2b4d4e426fdb3af88f221fbe399fdf1cd304663c8bdcb3e091bb4fab8da1226dff97ff940883c405db4d1da3dd981b77a39f614e7bccd1f48085cfef4f46d16243c0411be1551be3ab213002b9afffe3ae7d7727412a39b03b3e30", 0x2000, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x40010) close_range(r8, 0xffffffffffffffff, 0x0) socket(0x80000000000000a, 0x1, 0x0) 393.792862ms ago: executing program 4 (id=2974): syz_usb_connect(0x2, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000011620140480b05101e8c00000001090212000100000000090401"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r0, 0x707, &(0x7f00000000c0)={&(0x7f0000000080)=[{0xffff, 0x1, 0x1, &(0x7f0000000140)='<'}], 0x1}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870fd00090582020002"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0xa8, &(0x7f0000000000)=ANY=[@ANYBLOB="1b1b", @ANYRES16=r1]) 0s ago: executing program 3 (id=2975): r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x46, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205647, &(0x7f0000000100)={0xf030000, 0x6, 0x4, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x98f90d, 0x0, '\x00', @p_u32=0x0}}) sched_setattr(0x0, &(0x7f0000000340)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x3, 0x0, 0x7, 0xfa11, 0xffffffff}, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={0x0, 0x2, 0xfffffde1, @multicast}, 0x10) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000280)={0x0, 0x2, 0x6, @broadcast}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'pim6reg\x00'}) setsockopt$packet_add_memb(r4, 0x107, 0x1, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000480)=ANY=[], 0x0) r5 = syz_open_dev$video4linux(&(0x7f0000000040), 0x7fffffffffffffde, 0x161041) ioctl$VIDIOC_SUBDEV_S_FMT(r5, 0xc0585605, &(0x7f00000002c0)={0x1, 0x0, {0x4, 0x9, 0x1004, 0x0, 0xa}}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r8 = socket$tipc(0x1e, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000480)={'veth1_virt_wifi\x00'}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYRES16=r1, @ANYRES16=r7, @ANYBLOB="010026bd7000fedbdf25150000000c00018008000100", @ANYRES32=r4, @ANYRESOCT=r1], 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x41004) syz_usb_connect(0x0, 0x12, 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@getchain={0x2c, 0x11, 0x43d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xc, 0xfff3}}, [{0x8, 0xb, 0x778}]}, 0x2c}}, 0x0) sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x8040}, 0x40001) kernel console output (not intermixed with test programs): he config [ 598.587586][T20615] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 598.597466][T20615] usb 4-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 598.610026][T20615] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 598.636561][T20615] usb 4-1: config 0 descriptor?? [ 598.734553][ T10] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 598.846931][T28188] tipc: Started in network mode [ 598.851901][T28188] tipc: Node identity 84e, cluster identity 4711 [ 598.858984][T28188] tipc: Node number set to 2126 [ 598.896376][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 598.921110][ T10] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 598.946540][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 598.970514][ T10] usb 5-1: config 0 descriptor?? [ 599.011838][T28155] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 599.012121][ T10] hub 5-1:0.0: USB hub found [ 599.055784][T28155] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 599.188867][ T10] hub 5-1:0.0: 1 port detected [ 599.289465][T28223] netlink: 180 bytes leftover after parsing attributes in process `syz.8.2444'. [ 599.313876][T28221] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2443'. [ 599.799662][ T9] usb 5-1: USB disconnect, device number 19 [ 599.805902][ T10] hub 5-1:0.0: hub_ext_port_status failed (err = -71) [ 599.931337][T28244] kvm: kvm [28243]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0xc1) = 0xfffffc18 [ 599.940595][T28244] kvm: kvm [28243]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0xc2) = 0xfffffc18 [ 599.951834][T28244] kvm: kvm [28243]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x11e) = 0xfffffc18 [ 599.963327][T28244] kvm: kvm [28243]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x186) = 0xfffffc18 [ 599.972928][T28244] kvm: kvm [28243]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x187) = 0xfffffc18 [ 600.644861][T28280] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 600.667335][T28280] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 600.687638][T28288] netlink: 'syz.7.2454': attribute type 5 has an invalid length. [ 600.697940][T17111] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 600.710266][T17111] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 600.874827][T20615] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 601.030271][ T797] usb 4-1: USB disconnect, device number 10 [ 601.046619][T20615] usb 5-1: config 0 has an invalid interface number: 95 but max is 0 [ 601.082428][T20615] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 601.109372][T20615] usb 5-1: config 0 has no interface number 0 [ 601.128405][T20615] usb 5-1: config 0 interface 95 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 601.159431][T20615] usb 5-1: New USB device found, idVendor=7725, idProduct=b0a8, bcdDevice= 7.46 [ 601.172801][T20615] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 601.181376][T20615] usb 5-1: Product: syz [ 601.186285][T20615] usb 5-1: Manufacturer: syz [ 601.190998][T20615] usb 5-1: SerialNumber: syz [ 601.209143][T20615] usb 5-1: config 0 descriptor?? [ 601.420219][T20615] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 601.442416][T20615] usb 5-1: MIDIStreaming interface descriptor not found [ 601.945576][T20615] usb 5-1: USB disconnect, device number 20 [ 603.238477][T28399] netlink: 48 bytes leftover after parsing attributes in process `syz.8.2468'. [ 603.247968][T28399] netlink: 48 bytes leftover after parsing attributes in process `syz.8.2468'. [ 603.293635][T28399] syzkaller1: entered promiscuous mode [ 603.299213][T28399] syzkaller1: entered allmulticast mode [ 603.307575][ T797] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 603.827189][ T797] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 603.857324][ T797] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 603.883340][ T797] usb 5-1: New USB device found, idVendor=0c70, idProduct=f014, bcdDevice= 0.00 [ 604.024561][ T797] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 604.171280][ T797] usb 5-1: config 0 descriptor?? [ 604.693548][ T30] audit: type=1326 audit(1773598338.028:4042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28437 comm="syz.8.2473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ed179c799 code=0x7ffc0000 [ 604.724571][ T30] audit: type=1326 audit(1773598338.028:4043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28437 comm="syz.8.2473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ed179c799 code=0x7ffc0000 [ 604.857623][ T30] audit: type=1326 audit(1773598338.028:4044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28437 comm="syz.8.2473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7ed175cfce code=0x7ffc0000 [ 604.912001][ T797] hid_parser_main: 49 callbacks suppressed [ 604.912024][ T797] aquacomputer_d5next 0003:0C70:F014.002E: unknown main item tag 0x0 [ 604.938661][ T30] audit: type=1326 audit(1773598338.028:4045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28437 comm="syz.8.2473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ed179c799 code=0x7ffc0000 [ 604.950978][ T797] aquacomputer_d5next 0003:0C70:F014.002E: unknown main item tag 0x0 [ 604.972529][ T797] aquacomputer_d5next 0003:0C70:F014.002E: unknown main item tag 0x0 [ 604.980970][ T797] aquacomputer_d5next 0003:0C70:F014.002E: unknown main item tag 0x0 [ 604.990291][ T797] aquacomputer_d5next 0003:0C70:F014.002E: unknown main item tag 0x0 [ 604.999648][ T797] aquacomputer_d5next 0003:0C70:F014.002E: unknown main item tag 0x0 [ 605.014598][ T30] audit: type=1326 audit(1773598338.028:4046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28437 comm="syz.8.2473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ed179c799 code=0x7ffc0000 [ 605.024954][ T797] aquacomputer_d5next 0003:0C70:F014.002E: unknown main item tag 0x0 [ 605.064643][ T797] aquacomputer_d5next 0003:0C70:F014.002E: unknown main item tag 0x0 [ 605.072963][ T797] aquacomputer_d5next 0003:0C70:F014.002E: unknown main item tag 0x0 [ 605.094350][ T797] aquacomputer_d5next 0003:0C70:F014.002E: unknown main item tag 0x0 [ 605.124709][ T30] audit: type=1326 audit(1773598338.028:4047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28437 comm="syz.8.2473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7ed179c799 code=0x7ffc0000 [ 605.163525][ T797] aquacomputer_d5next 0003:0C70:F014.002E: hidraw0: USB HID v0.00 Device [HID 0c70:f014] on usb-dummy_hcd.4-1/input0 [ 605.250048][ T30] audit: type=1326 audit(1773598338.028:4048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28437 comm="syz.8.2473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ed179c799 code=0x7ffc0000 [ 605.339191][ T30] audit: type=1326 audit(1773598338.028:4049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28437 comm="syz.8.2473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ed179c799 code=0x7ffc0000 [ 605.434021][ T30] audit: type=1326 audit(1773598338.028:4050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28437 comm="syz.8.2473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f7ed179c799 code=0x7ffc0000 [ 605.521457][ T30] audit: type=1326 audit(1773598338.028:4051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28437 comm="syz.8.2473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ed179c799 code=0x7ffc0000 [ 605.591442][T28478] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 605.606968][T28478] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 606.156055][ T9] usb 5-1: USB disconnect, device number 21 [ 606.226250][T28500] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2481'. [ 606.259161][T28500] netlink: 'syz.4.2481': attribute type 4 has an invalid length. [ 606.822532][T28506] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2483'. [ 608.189579][T28572] netlink: 52 bytes leftover after parsing attributes in process `syz.7.2495'. [ 608.304521][T28571] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2494'. [ 608.345332][ T24] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 608.528122][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 608.549564][ T24] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 608.579723][ T24] usb 5-1: New USB device found, idVendor=0c70, idProduct=f014, bcdDevice= 0.00 [ 608.694571][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 608.707508][T28590] binder: 28582:28590 ioctl 40086e81 200000000100 returned -22 [ 608.745788][ T24] usb 5-1: config 0 descriptor?? [ 609.062188][T28590] binder: 28582:28590 ioctl c0306201 0 returned -14 [ 609.282927][ T24] aquacomputer_d5next 0003:0C70:F014.002F: hidraw0: USB HID v0.00 Device [HID 0c70:f014] on usb-dummy_hcd.4-1/input0 [ 610.982930][ T9] usb 5-1: USB disconnect, device number 22 [ 611.154536][ T24] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 611.333026][ T24] usb 4-1: config 0 has an invalid interface number: 11 but max is 0 [ 611.344623][ T24] usb 4-1: config 0 has no interface number 0 [ 611.352866][ T24] usb 4-1: config 0 interface 11 altsetting 245 endpoint 0x7 has an invalid bInterval 129, changing to 11 [ 611.372033][ T24] usb 4-1: config 0 interface 11 altsetting 245 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 611.384258][ T24] usb 4-1: config 0 interface 11 has no altsetting 0 [ 611.391369][ T24] usb 4-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 611.401384][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 611.437357][ T24] usb 4-1: config 0 descriptor?? [ 611.447980][ T24] keyspan 4-1:0.11: Keyspan 2 port adapter converter detected [ 611.467032][ T24] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 81 [ 611.496060][ T9] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 611.517825][ T24] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 82 [ 611.531163][ T24] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 1 [ 611.543554][ T24] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 2 [ 611.556769][ T24] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 85 [ 611.572887][ T24] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 5 [ 611.596264][ T24] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 611.626216][ T24] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 83 [ 611.634558][ T9] usb 5-1: device descriptor read/64, error -71 [ 611.649289][ T24] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 84 [ 611.672664][ T24] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 3 [ 611.687855][ T24] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 4 [ 611.706664][ T24] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 86 [ 611.719524][ T24] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 6 [ 611.746241][ T24] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 611.776730][ T24] usb 4-1: USB disconnect, device number 11 [ 611.794389][ T24] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 611.828598][ T24] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 611.850556][ T24] keyspan 4-1:0.11: device disconnected [ 611.874554][ T9] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 612.014548][ T9] usb 5-1: device descriptor read/64, error -71 [ 612.170032][ T9] usb usb5-port1: attempt power cycle [ 612.452760][T28725] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 612.471970][T28724] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 612.501663][T28725] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 612.510041][T28724] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 612.517981][ T9] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 612.539702][T28724] fuse: Bad value for 'rootmode' [ 612.555707][ T9] usb 5-1: device descriptor read/8, error -71 [ 612.568341][T28731] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2517'. [ 612.794574][ T9] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 612.814980][T28736] kvm: pic: non byte write [ 612.815056][ T9] usb 5-1: device descriptor read/8, error -71 [ 612.934791][ T9] usb usb5-port1: unable to enumerate USB device [ 613.217216][T28762] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 613.243000][T28762] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 613.471713][ T9] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 613.743200][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 613.763990][ T9] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 613.773459][ T9] usb 4-1: can't read configurations, error -61 [ 613.915387][ T9] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 614.077672][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 614.103816][ T9] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 614.123503][ T9] usb 4-1: can't read configurations, error -61 [ 614.137169][ T9] usb usb4-port1: attempt power cycle [ 614.480556][ T30] kauditd_printk_skb: 42 callbacks suppressed [ 614.480573][ T30] audit: type=1326 audit(1773598347.828:4094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28782 comm="syz.4.2526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff53a93db19 code=0x7ffc0000 [ 614.484644][ T9] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 614.490307][ T30] audit: type=1326 audit(1773598347.838:4095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28782 comm="syz.4.2526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff53a93db19 code=0x7ffc0000 [ 614.546729][ T30] audit: type=1326 audit(1773598347.838:4096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28782 comm="syz.4.2526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff53a93db19 code=0x7ffc0000 [ 614.574848][ T30] audit: type=1326 audit(1773598347.838:4097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28782 comm="syz.4.2526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff53a93db19 code=0x7ffc0000 [ 614.597815][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 614.597919][ T30] audit: type=1326 audit(1773598347.838:4098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28782 comm="syz.4.2526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff53a93db19 code=0x7ffc0000 [ 614.607485][ T9] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 614.629948][ T30] audit: type=1326 audit(1773598347.838:4099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28782 comm="syz.4.2526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff53a93db19 code=0x7ffc0000 [ 614.662173][ T30] audit: type=1326 audit(1773598347.838:4100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28782 comm="syz.4.2526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff53a93db19 code=0x7ffc0000 [ 614.765835][ T30] audit: type=1326 audit(1773598347.838:4101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28782 comm="syz.4.2526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff53a93db19 code=0x7ffc0000 [ 614.881250][ T30] audit: type=1326 audit(1773598347.838:4102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28782 comm="syz.4.2526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff53a93db19 code=0x7ffc0000 [ 614.932584][ T30] audit: type=1326 audit(1773598347.838:4103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28782 comm="syz.4.2526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff53a93db19 code=0x7ffc0000 [ 614.955491][ T9] usb 4-1: can't read configurations, error -61 [ 615.084576][ T9] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 615.108422][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 615.120855][ T9] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 615.132659][ T9] usb 4-1: can't read configurations, error -61 [ 615.143320][ T9] usb usb4-port1: unable to enumerate USB device [ 615.350702][T28797] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2528'. [ 615.555398][ T24] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 615.714868][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 615.722464][ T24] usb 5-1: config 0 has an invalid interface number: 4 but max is 0 [ 615.730580][ T24] usb 5-1: config 0 has no interface number 0 [ 615.736897][ T24] usb 5-1: config 0 interface 4 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 615.748192][ T24] usb 5-1: config 0 interface 4 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 615.758734][ T24] usb 5-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 615.767818][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 615.778311][ T24] usb 5-1: config 0 descriptor?? [ 616.191322][ T24] hid (null): bogus close delimiter [ 616.212841][ T24] hid (null): unknown global tag 0xe5 [ 616.393126][ T24] usb 5-1: USB disconnect, device number 27 [ 617.415007][ T24] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 617.509843][T28882] tipc: Enabling of bearer rejected, already enabled [ 617.584714][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 617.595973][ T24] usb 5-1: unable to get BOS descriptor or descriptor too short [ 617.625423][ T24] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 617.642931][ T24] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 617.767207][ T24] usb 5-1: New USB device found, idVendor=2466, idProduct=8010, bcdDevice= 0.40 [ 617.784670][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 617.793928][ T24] usb 5-1: Product: syz [ 617.798257][ T24] usb 5-1: Manufacturer: syz [ 617.814754][ T24] usb 5-1: SerialNumber: syz [ 617.860351][T28901] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 617.869862][T28901] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 618.004734][ T797] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 618.183006][ T797] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 618.209625][ T797] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 618.223126][ T797] usb 4-1: New USB device found, idVendor=0c70, idProduct=f014, bcdDevice= 0.00 [ 618.241448][ T797] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 618.281323][ T797] usb 4-1: config 0 descriptor?? [ 618.365784][ T24] usb 5-1: failed waiting for Axe-Fx III to boot: -71 [ 618.383938][ T24] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 618.437437][ T24] usb 5-1: USB disconnect, device number 28 [ 618.598928][T28929] loop5: detected capacity change from 0 to 7 [ 618.634598][ T5812] loop5: [ 618.637968][ T5812] loop5: partition table partially beyond EOD, truncated [ 618.656558][T28929] loop5: [ 618.659934][T28929] loop5: partition table partially beyond EOD, truncated [ 618.707322][ T797] hid_parser_main: 66 callbacks suppressed [ 618.707336][ T797] aquacomputer_d5next 0003:0C70:F014.0031: unknown main item tag 0x0 [ 618.726915][ T797] aquacomputer_d5next 0003:0C70:F014.0031: unknown main item tag 0x0 [ 618.735988][ T797] aquacomputer_d5next 0003:0C70:F014.0031: unknown main item tag 0x0 [ 618.748369][ T797] aquacomputer_d5next 0003:0C70:F014.0031: unknown main item tag 0x0 [ 618.766125][ T797] aquacomputer_d5next 0003:0C70:F014.0031: unknown main item tag 0x0 [ 618.777346][ T797] aquacomputer_d5next 0003:0C70:F014.0031: unknown main item tag 0x0 [ 618.786596][ T797] aquacomputer_d5next 0003:0C70:F014.0031: unknown main item tag 0x0 [ 618.809518][ T797] aquacomputer_d5next 0003:0C70:F014.0031: unknown main item tag 0x0 [ 618.818535][ T797] aquacomputer_d5next 0003:0C70:F014.0031: unknown main item tag 0x0 [ 618.825648][T28937] syzkaller0: entered promiscuous mode [ 618.832867][T28937] syzkaller0: entered allmulticast mode [ 618.840448][ T797] aquacomputer_d5next 0003:0C70:F014.0031: unknown main item tag 0x0 [ 618.868584][ T797] aquacomputer_d5next 0003:0C70:F014.0031: hidraw0: USB HID v0.00 Device [HID 0c70:f014] on usb-dummy_hcd.3-1/input0 [ 619.244898][ T797] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 619.280724][T28962] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2548'. [ 619.306906][T28962] syzkaller0: entered promiscuous mode [ 619.312611][T28962] syzkaller0: entered allmulticast mode [ 619.637058][ T797] usb 5-1: Using ep0 maxpacket: 32 [ 619.648625][ T797] usb 5-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 619.666038][ T797] usb 5-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 619.735091][ T797] usb 5-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 619.819653][ T797] usb 5-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 619.851692][ T797] usb 5-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 619.873498][ T797] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 619.882402][ T797] usb 5-1: Product: syz [ 619.887822][ T797] usb 5-1: Manufacturer: syz [ 619.892729][ T797] usb 5-1: SerialNumber: syz [ 619.916294][ C1] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 619.935889][ T797] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/input/input58 [ 620.164571][ T797] imon 5-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 620.172926][ T797] (id 0x00) [ 620.275269][ T797] rc_core: IR keymap rc-imon-pad not found [ 620.290866][ T797] Registered IR keymap rc-empty [ 620.304647][ T797] imon 5-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 620.321212][ T797] imon 5-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 620.590728][ T5883] usb 4-1: USB disconnect, device number 16 [ 620.944546][ T797] imon:send_packet: packet tx failed (-71) [ 620.951199][T29012] netlink: 48 bytes leftover after parsing attributes in process `syz.8.2553'. [ 620.970924][ T797] imon 5-1:155.0: remote input dev register failed [ 621.003941][ T797] imon 5-1:155.0: imon_init_intf0: rc device setup failed [ 621.091303][ T797] imon 5-1:155.0: unable to initialize intf0, err 0 [ 621.101246][ T797] imon:imon_probe: failed to initialize context! [ 621.110758][ T797] imon 5-1:155.0: unable to register, err -19 [ 621.140045][ T797] usb 5-1: USB disconnect, device number 29 [ 621.208716][T29033] loop5: detected capacity change from 0 to 7 [ 621.271696][T29033] loop5: [ 621.291832][T29033] loop5: partition table partially beyond EOD, truncated [ 621.307876][T29038] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 621.321111][T29038] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 621.417502][T29045] FAULT_INJECTION: forcing a failure. [ 621.417502][T29045] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 621.468660][T29045] CPU: 1 UID: 0 PID: 29045 Comm: syz.4.2558 Tainted: G L syzkaller #0 PREEMPT(full) [ 621.468688][T29045] Tainted: [L]=SOFTLOCKUP [ 621.468693][T29045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 621.468703][T29045] Call Trace: [ 621.468710][T29045] [ 621.468717][T29045] dump_stack_lvl+0xe8/0x150 [ 621.468755][T29045] should_fail_ex+0x412/0x560 [ 621.468785][T29045] _copy_from_user+0x2d/0xb0 [ 621.468803][T29045] do_sock_getsockopt+0x165/0x3f0 [ 621.468919][T29045] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 621.468937][T29045] ? __fget_files+0x3a0/0x420 [ 621.468965][T29045] ? __fget_files+0x2a/0x420 [ 621.468990][T29045] __x64_sys_getsockopt+0x1a4/0x240 [ 621.469013][T29045] do_syscall_64+0x14d/0xf80 [ 621.469029][T29045] ? trace_irq_disable+0x3b/0x150 [ 621.469050][T29045] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 621.469065][T29045] ? clear_bhb_loop+0x40/0x90 [ 621.469083][T29045] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 621.469098][T29045] RIP: 0033:0x7ff53a99c799 [ 621.469114][T29045] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 621.469127][T29045] RSP: 002b:00007ff53b8e3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 621.469144][T29045] RAX: ffffffffffffffda RBX: 00007ff53ac15fa0 RCX: 00007ff53a99c799 [ 621.469155][T29045] RDX: 000000000000001a RSI: 0000000000000084 RDI: 0000000000000003 [ 621.469165][T29045] RBP: 00007ff53b8e3090 R08: 0000200000002b40 R09: 0000000000000000 [ 621.469175][T29045] R10: 0000200000002a40 R11: 0000000000000246 R12: 0000000000000001 [ 621.469185][T29045] R13: 00007ff53ac16038 R14: 00007ff53ac15fa0 R15: 00007ff53ad3fa48 [ 621.469210][T29045] [ 622.114604][ T10] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 622.302289][ T30] kauditd_printk_skb: 1984 callbacks suppressed [ 622.302303][ T30] audit: type=1326 audit(1773598355.618:6088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29061 comm="syz.6.2562" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3e8179c799 code=0x0 [ 622.336350][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 622.377118][ T10] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 622.404819][T29059] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 622.423867][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 622.442515][ T10] usb 5-1: Product: syz [ 622.452719][ T10] usb 5-1: Manufacturer: syz [ 622.463925][ T10] usb 5-1: SerialNumber: syz [ 622.481358][ T10] r8152-cfgselector 5-1: Unknown version 0x0000 [ 622.493326][ T10] r8152-cfgselector 5-1: config 0 descriptor?? [ 623.100892][ T797] r8152-cfgselector 5-1: USB disconnect, device number 30 [ 623.359920][T29100] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 623.369558][T29100] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 623.504782][T20615] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 623.585267][T29108] netlink: 'syz.6.2568': attribute type 15 has an invalid length. [ 623.593467][T29108] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2568'. [ 623.636966][T29110] loop5: detected capacity change from 0 to 7 [ 623.651090][T29110] loop5: [ 623.654266][T29110] loop5: partition table partially beyond EOD, truncated [ 623.657161][T29113] FAULT_INJECTION: forcing a failure. [ 623.657161][T29113] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 623.695369][T20615] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 623.702002][T29113] CPU: 0 UID: 0 PID: 29113 Comm: syz.4.2570 Tainted: G L syzkaller #0 PREEMPT(full) [ 623.702028][T29113] Tainted: [L]=SOFTLOCKUP [ 623.702034][T29113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 623.702044][T29113] Call Trace: [ 623.702051][T29113] [ 623.702058][T29113] dump_stack_lvl+0xe8/0x150 [ 623.702086][T29113] should_fail_ex+0x412/0x560 [ 623.702112][T29113] _copy_from_user+0x2d/0xb0 [ 623.702130][T29113] sctp_getsockopt_peer_auth_chunks+0xcd/0x5f0 [ 623.702290][T29113] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 623.702322][T29113] ? __pfx_sctp_getsockopt_peer_auth_chunks+0x10/0x10 [ 623.702343][T29113] ? sctp_getsockopt+0x12f/0xb90 [ 623.702360][T29113] ? __local_bh_enable_ip+0xd0/0x130 [ 623.702394][T29113] sctp_getsockopt+0x848/0xb90 [ 623.702408][T29113] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 623.702462][T29113] do_sock_getsockopt+0x2d3/0x3f0 [ 623.702482][T29113] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 623.702499][T29113] ? __fget_files+0x3a0/0x420 [ 623.702519][T29113] ? __fget_files+0x2a/0x420 [ 623.702545][T29113] __x64_sys_getsockopt+0x1a4/0x240 [ 623.702569][T29113] do_syscall_64+0x14d/0xf80 [ 623.702585][T29113] ? trace_irq_disable+0x3b/0x150 [ 623.702605][T29113] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 623.702620][T29113] ? clear_bhb_loop+0x40/0x90 [ 623.702639][T29113] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 623.702654][T29113] RIP: 0033:0x7ff53a99c799 [ 623.702670][T29113] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 623.702683][T29113] RSP: 002b:00007ff53b8e3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 623.702700][T29113] RAX: ffffffffffffffda RBX: 00007ff53ac15fa0 RCX: 00007ff53a99c799 [ 623.702712][T29113] RDX: 000000000000001a RSI: 0000000000000084 RDI: 0000000000000003 [ 623.702721][T29113] RBP: 00007ff53b8e3090 R08: 0000200000002b40 R09: 0000000000000000 [ 623.702731][T29113] R10: 0000200000002a40 R11: 0000000000000246 R12: 0000000000000001 [ 623.702741][T29113] R13: 00007ff53ac16038 R14: 00007ff53ac15fa0 R15: 00007ff53ad3fa48 [ 623.702765][T29113] [ 623.950156][T20615] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 623.966120][T20615] usb 4-1: New USB device found, idVendor=0c70, idProduct=f014, bcdDevice= 0.00 [ 623.976974][T20615] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 623.988342][T20615] usb 4-1: config 0 descriptor?? [ 624.046316][T29130] kvm: user requested TSC rate below hardware speed [ 624.224936][ T797] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 624.377452][ T797] usb 5-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 624.386729][ T797] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 624.398976][ T797] usb 5-1: config 0 descriptor?? [ 624.407798][ T797] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 624.414752][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.421121][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.435718][T20615] hid_parser_main: 28 callbacks suppressed [ 624.435739][T20615] aquacomputer_d5next 0003:0C70:F014.0032: unknown main item tag 0x0 [ 624.451202][T20615] aquacomputer_d5next 0003:0C70:F014.0032: unknown main item tag 0x0 [ 624.460171][T20615] aquacomputer_d5next 0003:0C70:F014.0032: unknown main item tag 0x0 [ 624.468504][T20615] aquacomputer_d5next 0003:0C70:F014.0032: unknown main item tag 0x0 [ 624.476838][T20615] aquacomputer_d5next 0003:0C70:F014.0032: unknown main item tag 0x0 [ 624.486344][T20615] aquacomputer_d5next 0003:0C70:F014.0032: unknown main item tag 0x0 [ 624.494535][T20615] aquacomputer_d5next 0003:0C70:F014.0032: unknown main item tag 0x0 [ 624.502711][T20615] aquacomputer_d5next 0003:0C70:F014.0032: unknown main item tag 0x0 [ 624.511242][T20615] aquacomputer_d5next 0003:0C70:F014.0032: unknown main item tag 0x0 [ 624.519516][T20615] aquacomputer_d5next 0003:0C70:F014.0032: unknown main item tag 0x0 [ 624.544130][T20615] aquacomputer_d5next 0003:0C70:F014.0032: hidraw0: USB HID v0.00 Device [HID 0c70:f014] on usb-dummy_hcd.3-1/input0 [ 624.633137][T29143] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 624.645509][T29143] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 624.829348][ T797] gspca_stv06xx: I2C: Read error writing address: -71 [ 624.854569][ T797] usb 5-1: USB disconnect, device number 31 [ 624.996527][ T30] audit: type=1326 audit(1773598358.348:6089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29163 comm="syz.4.2576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff53a93db19 code=0x7ffc0000 [ 625.034175][ T30] audit: type=1326 audit(1773598358.368:6090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29163 comm="syz.4.2576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff53a93db19 code=0x7ffc0000 [ 625.097125][ T30] audit: type=1326 audit(1773598358.368:6091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29163 comm="syz.4.2576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff53a99c799 code=0x7ffc0000 [ 625.163529][ T30] audit: type=1326 audit(1773598358.368:6092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29163 comm="syz.4.2576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff53a93db19 code=0x7ffc0000 [ 625.228137][ T30] audit: type=1326 audit(1773598358.368:6093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29163 comm="syz.4.2576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff53a93db19 code=0x7ffc0000 [ 625.288138][ T30] audit: type=1326 audit(1773598358.378:6094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29163 comm="syz.4.2576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff53a93db19 code=0x7ffc0000 [ 625.332730][ T30] audit: type=1326 audit(1773598358.378:6095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29163 comm="syz.4.2576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff53a93db19 code=0x7ffc0000 [ 625.388067][ T30] audit: type=1326 audit(1773598358.378:6096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29163 comm="syz.4.2576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff53a93db19 code=0x7ffc0000 [ 625.434014][ T30] audit: type=1326 audit(1773598358.378:6097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29163 comm="syz.4.2576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff53a93db19 code=0x7ffc0000 [ 625.701786][T20615] usb 4-1: USB disconnect, device number 17 [ 626.314660][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 626.490374][T29202] loop5: detected capacity change from 0 to 7 [ 626.508104][ T5812] loop5: [ 626.512039][ T5812] loop5: partition table partially beyond EOD, truncated [ 626.522968][T29202] loop5: [ 626.528728][T29202] loop5: partition table partially beyond EOD, truncated [ 626.751767][T29209] FAULT_INJECTION: forcing a failure. [ 626.751767][T29209] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 626.789391][T29209] CPU: 1 UID: 0 PID: 29209 Comm: syz.7.2582 Tainted: G L syzkaller #0 PREEMPT(full) [ 626.789418][T29209] Tainted: [L]=SOFTLOCKUP [ 626.789424][T29209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 626.789433][T29209] Call Trace: [ 626.789439][T29209] [ 626.789446][T29209] dump_stack_lvl+0xe8/0x150 [ 626.789482][T29209] should_fail_ex+0x412/0x560 [ 626.789506][T29209] _copy_to_user+0x31/0xb0 [ 626.789524][T29209] simple_read_from_buffer+0xe1/0x170 [ 626.789547][T29209] proc_fail_nth_read+0x1bb/0x230 [ 626.789571][T29209] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 626.789593][T29209] ? rw_verify_area+0x2a6/0x4d0 [ 626.789608][T29209] ? reacquire_held_locks+0x104/0x190 [ 626.789628][T29209] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 626.789648][T29209] vfs_read+0x20c/0xa70 [ 626.789663][T29209] ? fdget_pos+0x246/0x320 [ 626.789687][T29209] ? __pfx___mutex_lock+0x10/0x10 [ 626.789704][T29209] ? __pfx_vfs_read+0x10/0x10 [ 626.789721][T29209] ? __fget_files+0x2a/0x420 [ 626.789744][T29209] ? __fget_files+0x3a0/0x420 [ 626.789763][T29209] ? __fget_files+0x2a/0x420 [ 626.789788][T29209] ksys_read+0x150/0x270 [ 626.789805][T29209] ? __pfx_ksys_read+0x10/0x10 [ 626.789818][T29209] ? fput+0xa0/0xd0 [ 626.789844][T29209] do_syscall_64+0x14d/0xf80 [ 626.789860][T29209] ? trace_irq_disable+0x3b/0x150 [ 626.789879][T29209] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 626.789894][T29209] ? clear_bhb_loop+0x40/0x90 [ 626.789912][T29209] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 626.789929][T29209] RIP: 0033:0x7f3264f5cfce [ 626.789944][T29209] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 626.789957][T29209] RSP: 002b:00007f3265eebfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 626.789972][T29209] RAX: ffffffffffffffda RBX: 00007f3265eec6c0 RCX: 00007f3264f5cfce [ 626.789983][T29209] RDX: 000000000000000f RSI: 00007f3265eec0a0 RDI: 0000000000000005 [ 626.789993][T29209] RBP: 00007f3265eec090 R08: 0000000000000000 R09: 0000000000000000 [ 626.790001][T29209] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 626.790010][T29209] R13: 00007f3265216038 R14: 00007f3265215fa0 R15: 00007f326533fa48 [ 626.790033][T29209] [ 627.311874][ T30] kauditd_printk_skb: 2729 callbacks suppressed [ 627.311891][ T30] audit: type=1326 audit(1773598360.648:8827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29163 comm="syz.4.2576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff53a93db19 code=0x7ffc0000 [ 627.400894][ T30] audit: type=1326 audit(1773598360.658:8828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29163 comm="syz.4.2576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff53a93db19 code=0x7ffc0000 [ 627.477043][ T30] audit: type=1326 audit(1773598360.658:8829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29163 comm="syz.4.2576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff53a93db19 code=0x7ffc0000 [ 627.526042][ T30] audit: type=1326 audit(1773598360.658:8830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29163 comm="syz.4.2576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff53a93db19 code=0x7ffc0000 [ 627.594296][ T30] audit: type=1326 audit(1773598360.658:8831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29163 comm="syz.4.2576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff53a93db19 code=0x7ffc0000 [ 627.625553][ T9] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 627.662821][ T30] audit: type=1326 audit(1773598360.658:8832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29163 comm="syz.4.2576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff53a93db19 code=0x7ffc0000 [ 627.706575][ T30] audit: type=1326 audit(1773598360.658:8833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29163 comm="syz.4.2576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff53a93db19 code=0x7ffc0000 [ 627.737023][ T30] audit: type=1326 audit(1773598360.658:8834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29163 comm="syz.4.2576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff53a93db19 code=0x7ffc0000 [ 627.762603][ T30] audit: type=1326 audit(1773598360.658:8835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29163 comm="syz.4.2576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff53a93db19 code=0x7ffc0000 [ 627.787461][ T30] audit: type=1326 audit(1773598360.658:8836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29163 comm="syz.4.2576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff53a93db19 code=0x7ffc0000 [ 627.825632][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 627.844891][ T9] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 627.856084][ T9] usb 4-1: config 0 has no interface number 0 [ 628.089405][ T9] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 628.098882][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 628.112992][ T9] usb 4-1: Product: syz [ 628.119591][ T9] usb 4-1: Manufacturer: syz [ 628.127476][ T9] usb 4-1: SerialNumber: syz [ 628.147355][ T9] usb 4-1: config 0 descriptor?? [ 628.178504][ T9] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 628.206467][T29232] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 628.235708][T29232] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 628.399260][ T9] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 628.428855][ T9] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 628.854541][ T797] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 628.902696][T29273] loop5: detected capacity change from 0 to 7 [ 628.911981][T29273] loop5: [ 628.915514][T29273] loop5: partition table partially beyond EOD, truncated [ 629.014644][ T797] usb 5-1: Using ep0 maxpacket: 16 [ 629.024042][ T797] usb 5-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 629.034030][ T797] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 629.079275][ T797] usb 5-1: Product: syz [ 629.083589][ T797] usb 5-1: Manufacturer: syz [ 629.089639][ T797] usb 5-1: SerialNumber: syz [ 629.098782][ T797] usb 5-1: config 0 descriptor?? [ 629.306659][T29287] binder: 29284:29287 ioctl c0306201 0 returned -14 [ 629.321147][T29258] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 629.385303][T29258] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 629.423401][ T797] speedtch 5-1:0.0: speedtch_bind: data interface not found! [ 629.433135][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 629.461733][ T5869] usb 4-1: USB disconnect, device number 18 [ 629.473431][ T797] speedtch 5-1:0.0: usbatm_usb_probe: bind failed: -19! [ 629.486639][ T5869] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 629.565312][ T5869] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 629.611175][T29299] bridge1: entered promiscuous mode [ 629.622585][ T10] usb 5-1: USB disconnect, device number 32 [ 629.634266][ T5869] quatech2 4-1:0.51: device disconnected [ 630.012368][T29319] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 631.151135][T29356] loop5: detected capacity change from 0 to 7 [ 631.175815][T29356] loop5: [ 631.182036][T29356] loop5: partition table partially beyond EOD, truncated [ 631.750144][T29383] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2608'. [ 631.782345][T29384] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2608'. [ 631.804704][T29383] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2608'. [ 631.815410][T29384] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2608'. [ 632.478932][ T30] kauditd_printk_skb: 122 callbacks suppressed [ 632.478948][ T30] audit: type=1326 audit(1773598365.828:8959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29323 comm="syz.4.2598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff53a99c799 code=0x7ffc0000 [ 632.760768][ T30] audit: type=1326 audit(1773598365.828:8960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29323 comm="syz.4.2598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff53a93db19 code=0x7ffc0000 [ 632.885364][ T30] audit: type=1326 audit(1773598365.828:8961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29323 comm="syz.4.2598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff53a99c799 code=0x7ffc0000 [ 632.911005][ T30] audit: type=1326 audit(1773598365.828:8962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29323 comm="syz.4.2598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff53a99c799 code=0x7ffc0000 [ 632.966797][ T30] audit: type=1326 audit(1773598365.828:8963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29323 comm="syz.4.2598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff53a93db19 code=0x7ffc0000 [ 632.991239][ T30] audit: type=1326 audit(1773598365.828:8964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29323 comm="syz.4.2598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff53a93db19 code=0x7ffc0000 [ 633.036246][ T30] audit: type=1326 audit(1773598365.828:8965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29323 comm="syz.4.2598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff53a99c799 code=0x7ffc0000 [ 633.065908][ T30] audit: type=1326 audit(1773598365.858:8966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29323 comm="syz.4.2598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff53a93db19 code=0x7ffc0000 [ 633.095098][ T30] audit: type=1326 audit(1773598365.858:8967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29323 comm="syz.4.2598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff53a93db19 code=0x7ffc0000 [ 633.251288][ T30] audit: type=1326 audit(1773598365.858:8968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29323 comm="syz.4.2598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff53a93db19 code=0x7ffc0000 [ 633.899730][T29418] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 633.919653][T29418] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 634.119935][T29427] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 635.142028][T29443] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2618'. [ 635.500305][T29466] netlink: 'syz.8.2624': attribute type 10 has an invalid length. [ 635.504769][ T10] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 635.519127][T29466] team0: Port device dummy0 added [ 635.601866][T29473] binder: BINDER_SET_CONTEXT_MGR already set [ 635.608841][T29473] binder: 29462:29473 ioctl 4018620d 200000000040 returned -16 [ 635.620569][T29473] ip6gre0: Caught tx_queue_len zero misconfig [ 635.626780][T29473] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1288) ! [ 635.665736][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 635.699905][ T10] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 635.711593][ T10] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 635.752473][ T10] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 635.856471][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 635.869299][ T10] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 635.884063][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 635.907447][ T10] usb 4-1: config 0 descriptor?? [ 636.469640][ T10] hid (null): invalid report_size 9525 [ 636.475712][ T10] hid (null): unknown global tag 0x9d [ 636.666633][ T10] usb 4-1: USB disconnect, device number 19 [ 637.771540][T29558] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2630'. [ 637.795890][T29558] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 638.337051][T29577] xfrm0: entered promiscuous mode [ 638.356951][T29577] xfrm0: entered allmulticast mode [ 638.659971][ T30] kauditd_printk_skb: 134 callbacks suppressed [ 638.659988][ T30] audit: type=1326 audit(1773598372.008:9103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29587 comm="syz.3.2635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc23bb3db19 code=0x7ffc0000 [ 638.951792][ T30] audit: type=1326 audit(1773598372.008:9104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29587 comm="syz.3.2635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc23bb3db19 code=0x7ffc0000 [ 638.997306][ T30] audit: type=1326 audit(1773598372.008:9105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29587 comm="syz.3.2635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc23bb3db19 code=0x7ffc0000 [ 639.130511][T29605] loop5: detected capacity change from 0 to 7 [ 639.144556][ T30] audit: type=1326 audit(1773598372.008:9106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29587 comm="syz.3.2635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc23bb3db19 code=0x7ffc0000 [ 639.215542][ T30] audit: type=1326 audit(1773598372.008:9107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29587 comm="syz.3.2635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc23bb3db19 code=0x7ffc0000 [ 639.239083][T29605] loop5: [ 639.242150][T29605] loop5: partition table partially beyond EOD, truncated [ 639.364370][ T30] audit: type=1326 audit(1773598372.008:9108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29587 comm="syz.3.2635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc23bb3db19 code=0x7ffc0000 [ 639.478036][ T30] audit: type=1326 audit(1773598372.008:9109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29587 comm="syz.3.2635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc23bb3db19 code=0x7ffc0000 [ 639.571917][ T30] audit: type=1326 audit(1773598372.008:9110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29587 comm="syz.3.2635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc23bb3db19 code=0x7ffc0000 [ 639.652698][ T30] audit: type=1326 audit(1773598372.008:9111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29587 comm="syz.3.2635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc23bb3db19 code=0x7ffc0000 [ 639.879798][ T30] audit: type=1326 audit(1773598372.008:9112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29587 comm="syz.3.2635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc23bb3db19 code=0x7ffc0000 [ 639.888949][T29628] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2640'. [ 639.954946][T29628] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2640'. [ 640.129036][T29628] netlink: 'syz.6.2640': attribute type 4 has an invalid length. [ 640.290238][T29633] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2644'. [ 641.712962][T29662] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2648'. [ 641.974637][ T797] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 642.821847][T29689] netlink: 'syz.3.2654': attribute type 4 has an invalid length. [ 642.847657][T29689] xfrm0: left allmulticast mode [ 642.854836][T29689] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 642.862652][T29689] macsec1: left allmulticast mode [ 642.893809][T29697] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2654'. [ 643.394603][ T797] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 643.534818][ T797] usb 4-1: device descriptor read/64, error -71 [ 643.974691][ T797] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 644.104778][ T797] usb 4-1: device descriptor read/64, error -71 [ 644.176221][ T30] kauditd_printk_skb: 937 callbacks suppressed [ 644.176238][ T30] audit: type=1326 audit(1773598377.528:10050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29709 comm="syz.4.2656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff53a99c799 code=0x7ffc0000 [ 644.215264][ T797] usb usb4-port1: attempt power cycle [ 644.240242][ T30] audit: type=1326 audit(1773598377.558:10051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29709 comm="syz.4.2656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff53a99c799 code=0x7ffc0000 [ 644.265162][ T30] audit: type=1326 audit(1773598377.558:10052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29709 comm="syz.4.2656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff53a93db19 code=0x7ffc0000 [ 644.297775][ T30] audit: type=1326 audit(1773598377.558:10053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29709 comm="syz.4.2656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff53a99c799 code=0x7ffc0000 [ 644.323544][ T30] audit: type=1326 audit(1773598377.558:10054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29709 comm="syz.4.2656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff53a99c799 code=0x7ffc0000 [ 644.373531][ T30] audit: type=1326 audit(1773598377.558:10055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29709 comm="syz.4.2656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff53a99c799 code=0x7ffc0000 [ 644.581981][ T30] audit: type=1326 audit(1773598377.558:10056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29709 comm="syz.4.2656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff53a99c799 code=0x7ffc0000 [ 644.615092][ T797] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 644.645701][ T797] usb 4-1: device descriptor read/8, error -71 [ 644.660668][ T30] audit: type=1326 audit(1773598377.558:10057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29709 comm="syz.4.2656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff53a99c799 code=0x7ffc0000 [ 644.684031][T29754] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2660'. [ 644.684392][ T30] audit: type=1326 audit(1773598377.558:10058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29709 comm="syz.4.2656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff53a93db19 code=0x7ffc0000 [ 644.785837][ T30] audit: type=1326 audit(1773598377.558:10059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29709 comm="syz.4.2656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff53a93db19 code=0x7ffc0000 [ 644.894561][ T797] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 644.925410][ T797] usb 4-1: device descriptor read/8, error -71 [ 645.055838][ T797] usb usb4-port1: unable to enumerate USB device [ 645.124730][ T24] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 645.334489][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 645.341427][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 645.356597][ T24] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 645.381131][ T24] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 645.419669][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 645.436589][ T24] usb 5-1: config 0 descriptor?? [ 645.660590][ T24] usb 5-1: USB disconnect, device number 33 [ 645.677806][T29821] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2665'. [ 645.752778][T29836] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 645.763531][T29836] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 645.966606][T29847] FAULT_INJECTION: forcing a failure. [ 645.966606][T29847] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 646.093277][T29855] bridge_slave_0: left allmulticast mode [ 646.093610][T29847] CPU: 1 UID: 0 PID: 29847 Comm: syz.3.2669 Tainted: G L syzkaller #0 PREEMPT(full) [ 646.093634][T29847] Tainted: [L]=SOFTLOCKUP [ 646.093640][T29847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 646.093649][T29847] Call Trace: [ 646.093655][T29847] [ 646.093663][T29847] dump_stack_lvl+0xe8/0x150 [ 646.093689][T29847] should_fail_ex+0x412/0x560 [ 646.093725][T29847] _copy_from_user+0x2d/0xb0 [ 646.093743][T29847] video_usercopy+0x36f/0x14b0 [ 646.093893][T29847] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 646.093914][T29847] ? __pfx___video_do_ioctl+0x10/0x10 [ 646.093935][T29847] ? __pfx_video_usercopy+0x10/0x10 [ 646.093963][T29847] ? __fget_files+0x2a/0x420 [ 646.093987][T29847] ? __fget_files+0x2a/0x420 [ 646.094009][T29847] ? __fget_files+0x3a0/0x420 [ 646.094033][T29847] v4l2_ioctl+0x18d/0x1e0 [ 646.094054][T29847] ? __pfx_v4l2_ioctl+0x10/0x10 [ 646.094073][T29847] __se_sys_ioctl+0xfc/0x170 [ 646.094094][T29847] do_syscall_64+0x14d/0xf80 [ 646.094111][T29847] ? trace_irq_disable+0x3b/0x150 [ 646.094132][T29847] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 646.094148][T29847] ? clear_bhb_loop+0x40/0x90 [ 646.094167][T29847] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 646.094182][T29847] RIP: 0033:0x7fc23bb9c799 [ 646.094199][T29847] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 646.094213][T29847] RSP: 002b:00007fc239df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 646.094231][T29847] RAX: ffffffffffffffda RBX: 00007fc23be15fa0 RCX: 00007fc23bb9c799 [ 646.094242][T29847] RDX: 0000200000000040 RSI: 00000000c0405602 RDI: 0000000000000003 [ 646.094253][T29847] RBP: 00007fc239df6090 R08: 0000000000000000 R09: 0000000000000000 [ 646.094263][T29847] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 646.094274][T29847] R13: 00007fc23be16038 R14: 00007fc23be15fa0 R15: 00007fc23bf3fa48 [ 646.094299][T29847] [ 646.172732][ T24] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 646.187859][T29855] bridge_slave_0: left promiscuous mode [ 646.362780][T29855] bridge0: port 1(bridge_slave_0) entered disabled state [ 646.375726][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 646.383781][ T24] usb 5-1: config 15 has an invalid interface number: 146 but max is 3 [ 646.395811][ T24] usb 5-1: config 15 has an invalid interface number: 86 but max is 3 [ 646.414784][ T24] usb 5-1: config 15 has an invalid interface number: 26 but max is 3 [ 646.415339][T29855] bridge_slave_1: left allmulticast mode [ 646.430411][ T24] usb 5-1: config 15 has an invalid interface number: 239 but max is 3 [ 646.455327][ T24] usb 5-1: config 15 contains an unexpected descriptor of type 0x1, skipping [ 646.465950][ T24] usb 5-1: config 15 contains an unexpected descriptor of type 0x1, skipping [ 646.474560][T29855] bridge_slave_1: left promiscuous mode [ 646.478153][ T24] usb 5-1: config 15 has no interface number 0 [ 646.489063][ T24] usb 5-1: config 15 has no interface number 1 [ 646.494792][T29855] bridge0: port 2(bridge_slave_1) entered disabled state [ 646.503414][ T24] usb 5-1: config 15 has no interface number 2 [ 646.510520][ T24] usb 5-1: config 15 has no interface number 3 [ 646.517803][ T24] usb 5-1: config 15 interface 146 altsetting 8 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 646.533834][T29855] bond0: (slave bond_slave_0): Releasing backup interface [ 646.542167][ T24] usb 5-1: config 15 interface 146 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 646.569091][ T24] usb 5-1: config 15 interface 146 altsetting 8 has a duplicate endpoint with address 0x2, skipping [ 646.583295][T29855] bond0: (slave bond_slave_1): Releasing backup interface [ 646.593457][ T24] usb 5-1: config 15 interface 146 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 646.605661][ T24] usb 5-1: config 15 interface 146 altsetting 8 endpoint 0x85 has an invalid bInterval 107, changing to 10 [ 646.622755][ T24] usb 5-1: config 15 interface 146 altsetting 8 endpoint 0x85 has invalid maxpacket 41844, setting to 1024 [ 646.625828][T29855] team0: Port device team_slave_0 removed [ 646.635013][ T24] usb 5-1: config 15 interface 146 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 646.652091][ T24] usb 5-1: config 15 interface 146 altsetting 8 has an endpoint descriptor with address 0x31, changing to 0x1 [ 646.664931][ T24] usb 5-1: config 15 interface 146 altsetting 8 endpoint 0x1 has an invalid bInterval 170, changing to 11 [ 646.682779][ T24] usb 5-1: config 15 interface 146 altsetting 8 endpoint 0x1 has invalid maxpacket 49482, setting to 1024 [ 646.695054][ T24] usb 5-1: config 15 interface 146 altsetting 8 has 8 endpoint descriptors, different from the interface descriptor's value: 6 [ 646.703009][T29855] team0: Port device team_slave_1 removed [ 646.708966][ T24] usb 5-1: config 15 interface 26 altsetting 249 has a duplicate endpoint with address 0x5, skipping [ 646.727881][ T24] usb 5-1: config 15 interface 26 altsetting 249 bulk endpoint 0x3 has invalid maxpacket 64 [ 646.739773][ T24] usb 5-1: config 15 interface 26 altsetting 249 has an invalid descriptor for endpoint zero, skipping [ 646.747220][T29855] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 646.751767][ T24] usb 5-1: config 15 interface 239 altsetting 92 endpoint 0x6 has invalid maxpacket 45452, setting to 1024 [ 646.781147][ T24] usb 5-1: config 15 interface 239 altsetting 92 bulk endpoint 0x6 has invalid maxpacket 1024 [ 646.798416][ T24] usb 5-1: config 15 interface 239 altsetting 92 has a duplicate endpoint with address 0x2, skipping [ 646.809911][ T24] usb 5-1: config 15 interface 239 altsetting 92 has an invalid endpoint descriptor of length 4, skipping [ 646.821969][ T24] usb 5-1: config 15 interface 239 altsetting 92 has a duplicate endpoint with address 0x5, skipping [ 646.878337][ T24] usb 5-1: config 15 interface 239 altsetting 92 bulk endpoint 0x5 has invalid maxpacket 1024 [ 646.912950][ T24] usb 5-1: config 15 interface 239 altsetting 92 has a duplicate endpoint with address 0x4, skipping [ 646.942562][ T24] usb 5-1: config 15 interface 239 altsetting 92 has an invalid descriptor for endpoint zero, skipping [ 646.957603][ T24] usb 5-1: config 15 interface 239 altsetting 92 bulk endpoint 0x8 has invalid maxpacket 16 [ 646.968331][ T24] usb 5-1: config 15 interface 239 altsetting 92 has an endpoint descriptor with address 0x1F, changing to 0xF [ 646.982047][ T24] usb 5-1: config 15 interface 239 altsetting 92 has a duplicate endpoint with address 0xF, skipping [ 646.994548][ T24] usb 5-1: config 15 interface 239 altsetting 92 has an invalid descriptor for endpoint zero, skipping [ 647.039364][ T24] usb 5-1: config 15 interface 239 altsetting 92 has a duplicate endpoint with address 0x3, skipping [ 647.064505][ T24] usb 5-1: config 15 interface 239 altsetting 92 has a duplicate endpoint with address 0x5, skipping [ 647.094610][ T24] usb 5-1: config 15 interface 239 altsetting 92 has a duplicate endpoint with address 0xC, skipping [ 647.125330][ T24] usb 5-1: config 15 interface 239 altsetting 92 has a duplicate endpoint with address 0x8, skipping [ 647.151803][ T24] usb 5-1: config 15 interface 239 altsetting 92 has a duplicate endpoint with address 0x2, skipping [ 647.174591][ T24] usb 5-1: config 15 interface 239 altsetting 92 has a duplicate endpoint with address 0xF, skipping [ 647.214673][ T24] usb 5-1: config 15 interface 239 altsetting 92 has 18 endpoint descriptors, different from the interface descriptor's value: 16 [ 647.272141][ T24] usb 5-1: config 15 interface 146 has no altsetting 0 [ 647.282881][ T24] usb 5-1: config 15 interface 86 has no altsetting 0 [ 647.291200][ T24] usb 5-1: config 15 interface 26 has no altsetting 0 [ 647.298491][ T24] usb 5-1: config 15 interface 239 has no altsetting 0 [ 647.308850][ T24] usb 5-1: Dual-Role OTG device on HNP port [ 647.315481][ T24] usb 5-1: New USB device found, idVendor=0584, idProduct=b03a, bcdDevice=8d.4c [ 647.325044][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 647.333065][ T24] usb 5-1: Product: syz [ 647.341963][ T24] usb 5-1: Manufacturer: syz [ 647.348190][ T24] usb 5-1: SerialNumber: syz [ 647.377099][T29838] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 647.688494][ T24] ftdi_sio 5-1:15.146: FTDI USB Serial Device converter detected [ 647.704312][ T24] ftdi_sio ttyUSB0: unknown device type: 0x8d4c [ 647.751663][ T24] ftdi_sio 5-1:15.86: FTDI USB Serial Device converter detected [ 647.778930][ T24] ftdi_sio ttyUSB1: unknown device type: 0x8d4c [ 647.790392][ T24] ftdi_sio 5-1:15.26: FTDI USB Serial Device converter detected [ 647.800804][ T24] ftdi_sio ttyUSB2: unknown device type: 0x8d4c [ 648.410518][T29923] geneve2: entered promiscuous mode [ 648.429512][ T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 648.439865][ T24] ftdi_sio 5-1:15.239: FTDI USB Serial Device converter detected [ 648.455887][ T24] ftdi_sio ttyUSB3: unknown device type: 0x8d4c [ 648.471212][ T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 648.499264][ T24] usb 5-1: USB disconnect, device number 34 [ 648.525597][ T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 648.568158][ T24] ftdi_sio 5-1:15.146: device disconnected [ 648.571285][ T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 648.615211][ T24] ftdi_sio 5-1:15.86: device disconnected [ 648.631319][ T24] ftdi_sio 5-1:15.26: device disconnected [ 648.657825][ T24] ftdi_sio 5-1:15.239: device disconnected [ 648.778275][T29936] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2678'. [ 649.006037][ T24] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 649.217695][T29976] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 649.270142][T29975] loop5: detected capacity change from 0 to 7 [ 649.279440][ T5812] loop5: [ 649.282405][ T5812] loop5: partition table partially beyond EOD, truncated [ 649.360380][T29975] loop5: [ 649.363655][T29975] loop5: partition table partially beyond EOD, truncated [ 650.095698][ T30] kauditd_printk_skb: 67 callbacks suppressed [ 650.095713][ T30] audit: type=1326 audit(1773598383.378:10127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29993 comm="syz.8.2686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ed179c799 code=0x7ffc0000 [ 650.292870][ T30] audit: type=1326 audit(1773598383.388:10128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29993 comm="syz.8.2686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ed179c799 code=0x7ffc0000 [ 650.428816][ T30] audit: type=1326 audit(1773598383.388:10129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29993 comm="syz.8.2686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7ed175cfce code=0x7ffc0000 [ 650.550714][ T30] audit: type=1326 audit(1773598383.388:10130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29993 comm="syz.8.2686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ed179c799 code=0x7ffc0000 [ 650.648805][ T30] audit: type=1326 audit(1773598383.388:10131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29993 comm="syz.8.2686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ed179c799 code=0x7ffc0000 [ 650.753055][ T30] audit: type=1326 audit(1773598383.388:10132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29993 comm="syz.8.2686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7ed179c799 code=0x7ffc0000 [ 650.817139][ T30] audit: type=1326 audit(1773598383.388:10133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29993 comm="syz.8.2686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ed179c799 code=0x7ffc0000 [ 650.885088][ T30] audit: type=1326 audit(1773598383.388:10134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29993 comm="syz.8.2686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f7ed179c799 code=0x7ffc0000 [ 650.911090][ T30] audit: type=1326 audit(1773598383.388:10135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29993 comm="syz.8.2686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ed179c799 code=0x7ffc0000 [ 650.941507][ T30] audit: type=1326 audit(1773598383.388:10136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29993 comm="syz.8.2686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7ed179c799 code=0x7ffc0000 [ 651.050767][T30007] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2690'. [ 651.257113][T20615] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 651.424745][T20615] usb 5-1: Using ep0 maxpacket: 32 [ 651.431710][T20615] usb 5-1: config 0 has an invalid interface number: 89 but max is 0 [ 651.457246][T20615] usb 5-1: config 0 has no interface number 0 [ 651.463416][T20615] usb 5-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid maxpacket 39163, setting to 1024 [ 651.489204][T20615] usb 5-1: config 0 interface 89 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 1024 [ 651.502595][T30032] loop5: detected capacity change from 0 to 7 [ 651.513007][T30032] loop5: [ 651.521916][T30032] loop5: partition table partially beyond EOD, truncated [ 651.529629][T20615] usb 5-1: config 0 interface 89 has no altsetting 0 [ 651.541749][T20615] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 651.564630][T20615] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 651.572677][T20615] usb 5-1: Product: syz [ 651.581431][T20615] usb 5-1: Manufacturer: syz [ 651.596723][T20615] usb 5-1: SerialNumber: syz [ 651.609902][T20615] usb 5-1: config 0 descriptor?? [ 651.645107][T30009] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 651.686829][T20615] em28xx 5-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 651.717110][T20615] em28xx 5-1:0.89: Video interface 89 found: bulk [ 652.268856][T30089] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 652.386988][T20615] em28xx 5-1:0.89: unknown em28xx chip ID (0) [ 652.498234][T30092] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2702'. [ 652.783092][T30095] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2703'. [ 652.795561][T30009] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2691'. [ 652.826072][T20615] em28xx 5-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 652.834211][T20615] em28xx 5-1:0.89: board has no eeprom [ 652.909239][T30104] vivid-002: disconnect [ 652.915375][T20615] em28xx 5-1:0.89: Identified as Terratec Grabby (card=67) [ 652.933137][T20615] em28xx 5-1:0.89: analog set to bulk mode. [ 652.945209][ T797] em28xx 5-1:0.89: Registering V4L2 extension [ 652.960581][T20615] usb 5-1: USB disconnect, device number 36 [ 652.979024][T20615] em28xx 5-1:0.89: Disconnecting em28xx [ 653.075277][ T797] em28xx 5-1:0.89: Config register raw data: 0xffffffed [ 653.082794][ T797] em28xx 5-1:0.89: AC97 chip type couldn't be determined [ 653.093225][ T797] em28xx 5-1:0.89: No AC97 audio processor [ 653.102081][ T797] usb 5-1: Decoder not found [ 653.122227][ T797] em28xx 5-1:0.89: failed to create media graph [ 653.141912][ T797] em28xx 5-1:0.89: V4L2 device video103 deregistered [ 653.160452][ T797] em28xx 5-1:0.89: Registering snapshot button... [ 653.169955][ T5883] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 653.209427][ T797] input: em28xx snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.89/input/input61 [ 653.226492][ T797] em28xx 5-1:0.89: Remote control support is not available for this card. [ 653.238701][T20615] em28xx 5-1:0.89: Closing input extension [ 653.482525][T20615] em28xx 5-1:0.89: Deregistering snapshot button [ 653.575065][ T5883] usb 4-1: Using ep0 maxpacket: 16 [ 653.607188][ T5883] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 653.619001][ T5883] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 653.633410][ T5883] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 653.673456][T20615] em28xx 5-1:0.89: Freeing device [ 653.694018][ T5883] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 653.722680][T30147] loop5: detected capacity change from 0 to 7 [ 653.731334][ T5883] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 653.751161][ T5808] loop5: [ 653.760828][ T5808] loop5: partition table partially beyond EOD, truncated [ 653.792272][T30147] loop5: [ 653.796726][T30147] loop5: partition table partially beyond EOD, truncated [ 653.804964][ T5883] usb 4-1: config 0 descriptor?? [ 654.028337][T30104] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 654.037431][T30104] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 654.270891][T30175] xfrm0: entered promiscuous mode [ 654.288491][T30175] xfrm0: entered allmulticast mode [ 654.359106][T30103] vivid-002: reconnect [ 654.371435][ T5883] usbhid 4-1:0.0: can't add hid device: -71 [ 654.389118][ T5883] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 654.431878][ T5883] usb 4-1: USB disconnect, device number 25 [ 654.485937][ T797] usb 5-1: new full-speed USB device number 37 using dummy_hcd [ 654.654871][ T797] usb 5-1: device descriptor read/64, error -71 [ 654.934854][ T797] usb 5-1: new full-speed USB device number 38 using dummy_hcd [ 654.950794][T30211] netlink: 116 bytes leftover after parsing attributes in process `syz.8.2714'. [ 655.074501][ T797] usb 5-1: device descriptor read/64, error -71 [ 655.166500][T30212] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2715'. [ 655.194969][ T797] usb usb5-port1: attempt power cycle [ 655.200045][T30232] loop5: detected capacity change from 0 to 7 [ 655.208153][T30232] loop5: [ 655.211141][T30232] loop5: partition table partially beyond EOD, truncated [ 655.267668][T30242] netlink: 'syz.3.2721': attribute type 25 has an invalid length. [ 655.275790][T30242] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2721'. [ 655.297776][T30239] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2719'. [ 655.344609][T30239] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 655.353282][T30239] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 655.383154][T30239] support for the xor transformation has been removed. [ 655.521669][T30252] netlink: 188 bytes leftover after parsing attributes in process `syz.7.2723'. [ 655.596841][ T797] usb 5-1: new full-speed USB device number 39 using dummy_hcd [ 655.625577][ T797] usb 5-1: device descriptor read/8, error -71 [ 655.884719][ T797] usb 5-1: new full-speed USB device number 40 using dummy_hcd [ 655.904986][ T797] usb 5-1: device descriptor read/8, error -71 [ 656.015184][ T797] usb usb5-port1: unable to enumerate USB device [ 656.064925][ T29] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 656.214688][ T29] usb 4-1: Using ep0 maxpacket: 16 [ 656.221744][ T29] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 656.233661][ T29] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 656.245530][ T29] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice= 7.c9 [ 656.255930][ T29] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 656.263991][ T29] usb 4-1: Product: syz [ 656.268600][ T29] usb 4-1: Manufacturer: syz [ 656.273330][ T29] usb 4-1: SerialNumber: syz [ 656.798222][T30299] loop5: detected capacity change from 0 to 7 [ 656.807400][T30299] loop5: [ 656.810386][T30299] loop5: partition table partially beyond EOD, truncated [ 657.296589][T30308] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2733'. [ 657.677245][T30316] netlink: 'syz.4.2734': attribute type 16 has an invalid length. [ 657.693860][T30316] netlink: 'syz.4.2734': attribute type 17 has an invalid length. [ 657.736294][T30319] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2734'. [ 657.775314][T30319] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2734'. [ 657.815617][T30319] 8021q: VLANs not supported on gre0 [ 658.014706][T30329] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 658.083828][T30329] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 658.906149][T30370] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2745'. [ 659.365032][ T29] usb 4-1: USB disconnect, device number 26 [ 659.509839][T30391] geneve2: entered promiscuous mode [ 659.528593][T30396] netlink: 'syz.4.2747': attribute type 3 has an invalid length. [ 659.888912][T30404] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2752'. [ 659.906222][T30404] netlink: 'syz.3.2752': attribute type 4 has an invalid length. [ 659.940900][ T5903] hid_parser_main: 28 callbacks suppressed [ 659.940920][ T5903] hid-generic 00A0:0006:0003.0034: unknown main item tag 0x0 [ 659.955265][ T5903] hid-generic 00A0:0006:0003.0034: unknown main item tag 0x0 [ 659.963970][ T5903] hid-generic 00A0:0006:0003.0034: unknown main item tag 0x0 [ 659.973724][ T5903] hid-generic 00A0:0006:0003.0034: unknown main item tag 0x0 [ 659.981503][ T5903] hid-generic 00A0:0006:0003.0034: unknown main item tag 0x0 [ 659.990561][ T5903] hid-generic 00A0:0006:0003.0034: unknown main item tag 0x0 [ 659.998793][ T5903] hid-generic 00A0:0006:0003.0034: unknown main item tag 0x0 [ 660.103886][ T5903] hid-generic 00A0:0006:0003.0034: unknown main item tag 0x0 [ 660.115403][ T5903] hid-generic 00A0:0006:0003.0034: unknown main item tag 0x0 [ 660.123974][ T5903] hid-generic 00A0:0006:0003.0034: unknown main item tag 0x0 [ 660.150944][ T5903] hid-generic 00A0:0006:0003.0034: hidraw0: HID v0.05 Device [syz0] on syz0 [ 660.331151][T30413] __nla_validate_parse: 2 callbacks suppressed [ 660.331164][T30413] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2753'. [ 660.353987][T30413] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2753'. [ 660.548070][T30424] fuse: Bad value for 'fd' [ 660.607759][T30424] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 660.665092][T30424] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 660.675283][T30432] fuse: Bad value for 'fd' [ 660.829506][T30431] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2756'. [ 661.127569][T30461] fuse: Bad value for 'group_id' [ 661.135977][T30461] fuse: Bad value for 'group_id' [ 661.182934][T30457] kvm: pic: non byte write [ 661.238669][ T30] kauditd_printk_skb: 544 callbacks suppressed [ 661.238686][ T30] audit: type=1326 audit(1773598394.588:10681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30469 comm="syz.7.2763" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3264f9c799 code=0x0 [ 661.372196][T30476] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 661.383393][T30476] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 661.392401][T30475] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 661.401396][T30475] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 661.507756][T30489] fuse: Unknown parameter '0x000000000000000b' [ 661.735703][T30502] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2767'. [ 661.753969][T30502] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2767'. [ 661.788777][T30502] netlink: 'syz.8.2767': attribute type 4 has an invalid length. [ 662.225092][T25621] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 662.235786][T25621] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 662.247089][T25621] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 662.257728][T25621] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 662.266674][T25621] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 663.006622][T30589] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 663.016132][T30589] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 663.420855][ T5903] hid-generic 0000:0000:0000.0035: hidraw0: HID v0.00 Device [syz0] on syz0 [ 663.435800][ T10] IPVS: starting estimator thread 0... [ 663.490987][T30524] chnl_net:caif_netlink_parms(): no params data found [ 663.546381][T30624] IPVS: using max 42 ests per chain, 100800 per kthread [ 663.623310][T30642] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2779'. [ 663.638677][T30642] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2779'. [ 663.743076][ T3474] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 663.953372][ T3474] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 664.052252][T30524] bridge0: port 1(bridge_slave_0) entered blocking state [ 664.090365][T30524] bridge0: port 1(bridge_slave_0) entered disabled state [ 664.108017][T30524] bridge_slave_0: entered allmulticast mode [ 664.170778][T30524] bridge_slave_0: entered promiscuous mode [ 664.226390][ T3474] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 664.276573][T30524] bridge0: port 2(bridge_slave_1) entered blocking state [ 664.303930][T30524] bridge0: port 2(bridge_slave_1) entered disabled state [ 664.314747][ T5828] Bluetooth: hci5: command tx timeout [ 664.323100][T30524] bridge_slave_1: entered allmulticast mode [ 664.335974][T30524] bridge_slave_1: entered promiscuous mode [ 664.369833][ T3474] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 664.441439][T30524] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 664.456568][T30524] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 664.541560][T30524] team0: Port device team_slave_0 added [ 664.560725][T30524] team0: Port device team_slave_1 added [ 664.641746][T30775] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2782'. [ 664.663590][T30775] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2782'. [ 664.688962][T30777] netlink: 'syz.4.2782': attribute type 4 has an invalid length. [ 664.733857][T30524] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 664.740721][T30775] netlink: 'syz.4.2782': attribute type 4 has an invalid length. [ 664.743208][T30524] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 664.777645][T30524] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 664.816504][T30524] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 664.830355][T30524] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 664.878251][T30524] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 664.928256][ T3474] bridge_slave_1: left allmulticast mode [ 664.934212][ T3474] bridge_slave_1: left promiscuous mode [ 664.944466][ T3474] bridge0: port 2(bridge_slave_1) entered disabled state [ 665.221521][ T3474] bridge_slave_0: left allmulticast mode [ 665.237618][ T3474] bridge_slave_0: left promiscuous mode [ 665.257073][ T3474] bridge0: port 1(bridge_slave_0) entered disabled state [ 665.380226][ T3474] ip6gretap0 (unregistering): left promiscuous mode [ 665.501400][ T3474] bridge0 (unregistering): left promiscuous mode [ 665.534540][ T5883] usb 5-1: new full-speed USB device number 41 using dummy_hcd [ 665.600688][ T3474] bond2 (unregistering): (slave macvlan0): Releasing active interface [ 665.618987][ T3474] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 665.630394][ T3474] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 665.643000][ T3474] bond0 (unregistering): Released all slaves [ 665.659426][ T3474] bond1 (unregistering): Released all slaves [ 665.677100][ T3474] bond2 (unregistering): Released all slaves [ 665.698582][ T5883] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 665.699049][ T3474] bond3 (unregistering): Released all slaves [ 665.719457][ T5883] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 665.734499][ T5883] usb 5-1: Product: syz [ 665.749069][ T5883] usb 5-1: Manufacturer: syz [ 665.753707][ T5883] usb 5-1: SerialNumber: syz [ 665.798524][ T5883] usb 5-1: config 0 descriptor?? [ 665.951352][T30524] hsr_slave_0: entered promiscuous mode [ 665.962659][T30524] hsr_slave_1: entered promiscuous mode [ 665.985635][T30524] debugfs: 'hsr0' already exists in 'hsr' [ 665.993518][T30524] Cannot create hsr debugfs directory [ 666.014248][ T3474] tipc: Left network mode [ 666.082794][ T5883] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 666.248328][T30874] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 666.318080][T30874] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 666.398052][ T5828] Bluetooth: hci5: command tx timeout [ 666.427748][T30874] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2786'. [ 666.662424][T30918] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 667.418291][T30989] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 1^!l1*$pOcɔr$G [ 667.590328][ T3474] hsr_slave_0: left promiscuous mode [ 667.637098][ T3474] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 667.647107][ T3474] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 667.967709][ T5883] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 667.982292][ T5883] usb 5-1: USB disconnect, device number 41 [ 668.161932][ T3474] team0 (unregistering): Port device team_slave_1 removed [ 668.219726][ T3474] team0 (unregistering): Port device team_slave_0 removed [ 668.535822][ T5828] Bluetooth: hci5: command tx timeout [ 668.926456][T31027] lo: Caught tx_queue_len zero misconfig [ 669.288952][T31040] netlink: 'syz.7.2796': attribute type 29 has an invalid length. [ 669.731977][T31086] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 669.752571][T31086] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 669.797307][T31086] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 669.830633][T31086] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 669.841084][ T3474] IPVS: stop unused estimator thread 0... [ 669.881813][T31086] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 669.922788][T30524] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 669.927625][T31086] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 669.961801][T30524] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 669.999195][T30524] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 670.036095][T30524] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 670.215414][T30524] 8021q: adding VLAN 0 to HW filter on device bond0 [ 670.242406][T30524] 8021q: adding VLAN 0 to HW filter on device team0 [ 670.267331][ T10] usb 5-1: new full-speed USB device number 42 using dummy_hcd [ 670.305884][T17119] bridge0: port 1(bridge_slave_0) entered blocking state [ 670.313469][T17119] bridge0: port 1(bridge_slave_0) entered forwarding state [ 670.351250][T17119] bridge0: port 2(bridge_slave_1) entered blocking state [ 670.358437][T17119] bridge0: port 2(bridge_slave_1) entered forwarding state [ 670.407696][ T10] usb 5-1: device descriptor read/64, error -71 [ 670.478993][T30524] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 670.600841][T30524] veth0_vlan: entered promiscuous mode [ 670.634581][T25621] Bluetooth: hci5: command tx timeout [ 670.636232][T30524] veth1_vlan: entered promiscuous mode [ 670.655508][ T10] usb 5-1: new full-speed USB device number 43 using dummy_hcd [ 670.682362][ T30] audit: type=1326 audit(1773598404.018:10682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31143 comm="syz.7.2805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3264f9c799 code=0x7ffc0000 [ 670.741581][T31147] netlink: 148 bytes leftover after parsing attributes in process `syz.7.2805'. [ 670.749132][T30524] veth0_macvtap: entered promiscuous mode [ 670.762686][ T30] audit: type=1326 audit(1773598404.018:10683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31143 comm="syz.7.2805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3264f9c799 code=0x7ffc0000 [ 670.774601][T31147] netlink: 116 bytes leftover after parsing attributes in process `syz.7.2805'. [ 670.794776][T30524] veth1_macvtap: entered promiscuous mode [ 670.801050][ T10] usb 5-1: device descriptor read/64, error -71 [ 670.811383][T31147] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2805'. [ 670.832717][ T30] audit: type=1326 audit(1773598404.028:10684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31143 comm="syz.7.2805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3264f9c799 code=0x7ffc0000 [ 670.881326][T30524] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 670.897686][ T30] audit: type=1326 audit(1773598404.028:10685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31143 comm="syz.7.2805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3264f9c799 code=0x7ffc0000 [ 670.914960][ T10] usb usb5-port1: attempt power cycle [ 670.928421][T30524] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 670.938292][ T30] audit: type=1326 audit(1773598404.028:10686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31143 comm="syz.7.2805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3264f9c799 code=0x7ffc0000 [ 670.971139][ T3474] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 670.974672][ T30] audit: type=1326 audit(1773598404.028:10687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31143 comm="syz.7.2805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=296 compat=0 ip=0x7f3264f9c799 code=0x7ffc0000 [ 670.992200][ T3474] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 671.011953][ T30] audit: type=1326 audit(1773598404.028:10688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31143 comm="syz.7.2805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3264f9c799 code=0x7ffc0000 [ 671.048921][ T3474] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 671.059436][ T30] audit: type=1326 audit(1773598404.028:10689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31143 comm="syz.7.2805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3264f9c799 code=0x7ffc0000 [ 671.059909][ T3474] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 671.142294][ T30] audit: type=1326 audit(1773598404.028:10690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31143 comm="syz.7.2805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3264f5cfce code=0x7ffc0000 [ 671.218332][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 671.228151][ T30] audit: type=1326 audit(1773598404.028:10691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31143 comm="syz.7.2805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3264f5cfce code=0x7ffc0000 [ 671.230632][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 671.285836][ T10] usb 5-1: new full-speed USB device number 44 using dummy_hcd [ 671.304063][T17119] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 671.317703][T17119] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 671.337235][ T10] usb 5-1: device descriptor read/8, error -71 [ 671.582592][ T10] usb 5-1: new full-speed USB device number 45 using dummy_hcd [ 671.616912][ T10] usb 5-1: device descriptor read/8, error -71 [ 671.734758][ T10] usb usb5-port1: unable to enumerate USB device [ 671.942666][T31192] ip6t_srh: unknown srh invflags 4000 [ 673.772031][T31235] binder: BINDER_SET_CONTEXT_MGR already set [ 673.778512][T31235] binder: 31231:31235 ioctl 4018620d 200000000040 returned -16 [ 673.791084][T31235] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 673.801163][T31235] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 673.815818][T31235] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 673.826379][T31235] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 674.384599][ T9] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 674.544781][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 674.572655][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 674.586379][ T9] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 674.653742][ T9] usb 5-1: New USB device found, idVendor=1f71, idProduct=3306, bcdDevice=1b.23 [ 674.663531][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 674.690334][ T9] usb 5-1: Product: syz [ 674.710277][ T9] usb 5-1: Manufacturer: syz [ 674.724646][ T9] usb 5-1: SerialNumber: syz [ 674.760460][ T9] usb 5-1: config 0 descriptor?? [ 675.002600][ T9] usb 5-1: USB disconnect, device number 46 [ 675.779046][T31283] vti0: entered promiscuous mode [ 675.789567][T31291] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2828'. [ 675.868114][T31288] loop2: detected capacity change from 0 to 7 [ 675.961448][T31288] Dev loop2: unable to read RDB block 7 [ 676.027979][T31288] loop2: AHDI p1 p2 p3 [ 676.045945][T31299] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2831'. [ 676.071953][T31288] loop2: partition table partially beyond EOD, truncated [ 676.178478][T31288] loop2: p1 start 1601398130 is beyond EOD, truncated [ 676.296623][T31288] loop2: p2 start 1702059890 is beyond EOD, truncated [ 677.481617][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88805a9e9400: rx timeout, send abort [ 677.493347][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff88805a9e9400: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 677.822959][T31341] netlink: 6 bytes leftover after parsing attributes in process `syz.4.2838'. [ 678.007738][ T30] kauditd_printk_skb: 80 callbacks suppressed [ 678.007758][ T30] audit: type=1326 audit(1773598411.318:10772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31339 comm="syz.7.2839" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3264f9c799 code=0x0 [ 678.142285][T31351] fuse: Unknown parameter 'rwotmode' [ 678.346022][T31359] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 678.391906][T31359] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 679.516405][T31399] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2852'. [ 679.976837][T31433] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 679.997895][T31433] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 680.006574][ T9] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 680.091546][T31433] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 680.101183][T31433] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 680.179092][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 680.202507][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 680.230849][ T9] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 680.245031][T31460] tipc: Enabling of bearer rejected, already enabled [ 680.254098][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 680.282981][ T9] usb 5-1: config 0 descriptor?? [ 680.544371][T31480] xt_TCPMSS: Only works on TCP SYN packets [ 680.553370][T31480] No such timeout policy "syz1" [ 680.858653][ T9] hid_parser_main: 2 callbacks suppressed [ 680.858674][ T9] cp2112 0003:10C4:EA90.0036: unknown main item tag 0x0 [ 680.878987][ T9] cp2112 0003:10C4:EA90.0036: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 680.893470][T31484] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2869'. [ 681.059096][ T9] cp2112 0003:10C4:EA90.0036: Part Number: 0x82 Device Version: 0xFE [ 681.469772][T31505] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 681.496866][T31504] iommufd_mock iommufd_mock0: Adding to iommu group 1 [ 681.696103][T31504] input: syz0 as /devices/virtual/input/input62 [ 681.757585][T31417] veth1_to_bond: Caught tx_queue_len zero misconfig [ 681.801696][T31533] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2876'. [ 681.849277][T31535] netlink: 'syz.3.2877': attribute type 8 has an invalid length. [ 681.897806][ T30] audit: type=1326 audit(1773598415.248:10773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31539 comm="syz.3.2878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28f0f9c799 code=0x7ffc0000 [ 681.923668][ T30] audit: type=1326 audit(1773598415.268:10774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31539 comm="syz.3.2878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28f0f9c799 code=0x7ffc0000 [ 681.947258][ T30] audit: type=1326 audit(1773598415.268:10775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31539 comm="syz.3.2878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f28f0f5cfce code=0x7ffc0000 [ 681.976623][ T30] audit: type=1326 audit(1773598415.268:10776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31539 comm="syz.3.2878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28f0f9c799 code=0x7ffc0000 [ 682.005082][ T30] audit: type=1326 audit(1773598415.268:10777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31539 comm="syz.3.2878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28f0f9c799 code=0x7ffc0000 [ 682.042522][ T30] audit: type=1326 audit(1773598415.268:10778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31539 comm="syz.3.2878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f28f0f9c799 code=0x7ffc0000 [ 682.067503][ T30] audit: type=1326 audit(1773598415.268:10779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31539 comm="syz.3.2878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28f0f9c799 code=0x7ffc0000 [ 682.093185][ T30] audit: type=1326 audit(1773598415.268:10780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31539 comm="syz.3.2878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f28f0f9c799 code=0x7ffc0000 [ 682.122237][ T30] audit: type=1326 audit(1773598415.268:10781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31539 comm="syz.3.2878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28f0f9c799 code=0x7ffc0000 [ 682.175048][ T9] usb 5-1: reset high-speed USB device number 47 using dummy_hcd [ 682.745523][T31563] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 682.768282][T31563] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 682.810138][T31563] ALSA: mixer_oss: invalid OSS volume ' ' [ 682.816849][T31563] x_tables: duplicate underflow at hook 4 [ 682.949819][T31575] FAULT_INJECTION: forcing a failure. [ 682.949819][T31575] name failslab, interval 1, probability 0, space 0, times 0 [ 682.963332][T31575] CPU: 0 UID: 0 PID: 31575 Comm: syz.4.2886 Tainted: G L syzkaller #0 PREEMPT(full) [ 682.963357][T31575] Tainted: [L]=SOFTLOCKUP [ 682.963363][T31575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 682.963372][T31575] Call Trace: [ 682.963379][T31575] [ 682.963386][T31575] dump_stack_lvl+0xe8/0x150 [ 682.963413][T31575] should_fail_ex+0x412/0x560 [ 682.963440][T31575] should_failslab+0xa8/0x100 [ 682.963462][T31575] __kmalloc_noprof+0xe8/0x760 [ 682.963481][T31575] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 682.963611][T31575] tomoyo_realpath_from_path+0xe3/0x5d0 [ 682.963646][T31575] tomoyo_path_perm+0x283/0x560 [ 682.963665][T31575] ? tomoyo_path_perm+0x251/0x560 [ 682.963684][T31575] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 682.963711][T31575] ? get_pid_task+0x20/0x1f0 [ 682.963750][T31575] ? __fget_files+0x2a/0x420 [ 682.963774][T31575] ? __fget_files+0x3a0/0x420 [ 682.963800][T31575] security_inode_getattr+0x12b/0x310 [ 682.963819][T31575] __x64_sys_newfstat+0x13b/0x270 [ 682.963843][T31575] ? __pfx___x64_sys_newfstat+0x10/0x10 [ 682.963880][T31575] ? __pfx_ksys_write+0x10/0x10 [ 682.963906][T31575] do_syscall_64+0x14d/0xf80 [ 682.963923][T31575] ? trace_irq_disable+0x3b/0x150 [ 682.963944][T31575] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 682.963961][T31575] ? clear_bhb_loop+0x40/0x90 [ 682.963977][T31575] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 682.963992][T31575] RIP: 0033:0x7ff53a99c799 [ 682.964008][T31575] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 682.964022][T31575] RSP: 002b:00007ff53b8e3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000005 [ 682.964040][T31575] RAX: ffffffffffffffda RBX: 00007ff53ac15fa0 RCX: 00007ff53a99c799 [ 682.964052][T31575] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 682.964062][T31575] RBP: 00007ff53b8e3090 R08: 0000000000000000 R09: 0000000000000000 [ 682.964071][T31575] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 682.964081][T31575] R13: 00007ff53ac16038 R14: 00007ff53ac15fa0 R15: 00007ff53ad3fa48 [ 682.964107][T31575] [ 682.964115][T31575] ERROR: Out of memory at tomoyo_realpath_from_path. [ 683.230998][T31583] netlink: 'syz.3.2888': attribute type 9 has an invalid length. [ 683.397356][ T10] usb 5-1: USB disconnect, device number 47 [ 684.476633][ T797] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 684.674767][ T797] usb 5-1: Using ep0 maxpacket: 16 [ 684.692785][ T797] usb 5-1: config 0 has no interfaces? [ 684.711797][ T797] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 684.733471][ T797] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 684.754354][ T797] usb 5-1: Manufacturer: syz [ 684.784820][ T797] usb 5-1: config 0 descriptor?? [ 685.342273][T31690] fuse: Unknown parameter 'f0x0000000000000004' [ 685.607544][T31698] netlink: 92 bytes leftover after parsing attributes in process `syz.6.2902'. [ 685.839369][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.846245][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.647775][T31725] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2906'. [ 686.720481][T31733] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 686.738158][T31733] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 686.927686][ T24] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 686.974333][ T797] usb 5-1: USB disconnect, device number 48 [ 687.111765][T31743] xt_hashlimit: overflow, rate too high: 0 [ 687.118731][T31743] loop2: detected capacity change from 0 to 7 [ 687.128093][T31743] Dev loop2: unable to read RDB block 7 [ 687.133690][T31743] loop2: unable to read partition table [ 687.139654][T31743] loop2: partition table beyond EOD, truncated [ 687.148999][T31743] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 687.164023][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 687.209331][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 687.251852][ T24] usb 4-1: New USB device found, idVendor=0c70, idProduct=f014, bcdDevice= 0.00 [ 687.352537][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 687.375900][ T24] usb 4-1: config 0 descriptor?? [ 687.811978][T31786] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 687.838689][ T24] aquacomputer_d5next 0003:0C70:F014.0037: unknown main item tag 0x0 [ 687.849020][ T24] aquacomputer_d5next 0003:0C70:F014.0037: unknown main item tag 0x0 [ 687.869761][T31786] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 687.884719][ T30] kauditd_printk_skb: 40 callbacks suppressed [ 687.884736][ T30] audit: type=1326 audit(1773598421.218:10822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31787 comm="syz.7.2918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3264f9c799 code=0x7ffc0000 [ 687.914079][ T24] aquacomputer_d5next 0003:0C70:F014.0037: unknown main item tag 0x0 [ 687.934113][ T24] aquacomputer_d5next 0003:0C70:F014.0037: unknown main item tag 0x0 [ 687.962936][ T24] aquacomputer_d5next 0003:0C70:F014.0037: unknown main item tag 0x0 [ 687.996926][ T24] aquacomputer_d5next 0003:0C70:F014.0037: unknown main item tag 0x0 [ 688.005267][ T30] audit: type=1326 audit(1773598421.218:10823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31787 comm="syz.7.2918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3264f9c799 code=0x7ffc0000 [ 688.020117][T31798] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 688.038455][ T24] aquacomputer_d5next 0003:0C70:F014.0037: unknown main item tag 0x0 [ 688.101789][T31802] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2919'. [ 688.115323][T31798] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 688.176679][ T24] aquacomputer_d5next 0003:0C70:F014.0037: unknown main item tag 0x0 [ 688.188359][ T30] audit: type=1326 audit(1773598421.218:10824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31787 comm="syz.7.2918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f3264f9c799 code=0x7ffc0000 [ 688.211717][ T24] aquacomputer_d5next 0003:0C70:F014.0037: unknown main item tag 0x0 [ 688.243597][ T24] aquacomputer_d5next 0003:0C70:F014.0037: unknown main item tag 0x0 [ 688.275996][ T24] aquacomputer_d5next 0003:0C70:F014.0037: hidraw0: USB HID v0.00 Device [HID 0c70:f014] on usb-dummy_hcd.3-1/input0 [ 688.296468][ T30] audit: type=1326 audit(1773598421.218:10825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31787 comm="syz.7.2918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3264f9c799 code=0x7ffc0000 [ 688.369383][ T30] audit: type=1326 audit(1773598421.218:10826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31787 comm="syz.7.2918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3264f9c799 code=0x7ffc0000 [ 688.608083][T31821] fuse: Unknown parameter 'grkup_iAM00000000000000000000' [ 688.749637][T31824] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2921'. [ 688.995817][T31834] loop5: detected capacity change from 0 to 7 [ 689.004146][ T5812] loop5: [ 689.012648][ T5812] loop5: partition table partially beyond EOD, truncated [ 689.059163][T31834] loop5: [ 689.062236][T31834] loop5: partition table partially beyond EOD, truncated [ 689.508584][ T24] usb 4-1: USB disconnect, device number 28 [ 689.871810][ T30] audit: type=1400 audit(1773598423.218:10827): apparmor="DENIED" operation="setprocattr" info="invalid" error=-22 profile="unconfined" pid=31883 comm="syz.3.2931" [ 689.973180][T31887] syzkaller1: entered promiscuous mode [ 690.078182][T31887] syzkaller1: entered allmulticast mode [ 690.506814][T31901] FAULT_INJECTION: forcing a failure. [ 690.506814][T31901] name failslab, interval 1, probability 0, space 0, times 0 [ 690.529508][T31901] CPU: 1 UID: 0 PID: 31901 Comm: syz.6.2934 Tainted: G L syzkaller #0 PREEMPT(full) [ 690.529527][T31901] Tainted: [L]=SOFTLOCKUP [ 690.529530][T31901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 690.529536][T31901] Call Trace: [ 690.529541][T31901] [ 690.529546][T31901] dump_stack_lvl+0xe8/0x150 [ 690.529564][T31901] should_fail_ex+0x412/0x560 [ 690.529581][T31901] should_failslab+0xa8/0x100 [ 690.529595][T31901] __kvmalloc_node_noprof+0x178/0x8a0 [ 690.529607][T31901] ? video_usercopy+0xa6a/0x14b0 [ 690.529625][T31901] video_usercopy+0xa6a/0x14b0 [ 690.529639][T31901] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 690.529652][T31901] ? __pfx___video_do_ioctl+0x10/0x10 [ 690.529665][T31901] ? __pfx_video_usercopy+0x10/0x10 [ 690.529688][T31901] ? __fget_files+0x2a/0x420 [ 690.529704][T31901] ? __fget_files+0x2a/0x420 [ 690.529716][T31901] ? __fget_files+0x3a0/0x420 [ 690.529731][T31901] v4l2_ioctl+0x18d/0x1e0 [ 690.529744][T31901] ? __pfx_v4l2_ioctl+0x10/0x10 [ 690.529756][T31901] __se_sys_ioctl+0xfc/0x170 [ 690.529768][T31901] do_syscall_64+0x14d/0xf80 [ 690.529777][T31901] ? trace_irq_disable+0x3b/0x150 [ 690.529791][T31901] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 690.529801][T31901] ? clear_bhb_loop+0x40/0x90 [ 690.529812][T31901] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 690.529821][T31901] RIP: 0033:0x7f3e8179c799 [ 690.529831][T31901] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 690.529839][T31901] RSP: 002b:00007f3e82709028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 690.529850][T31901] RAX: ffffffffffffffda RBX: 00007f3e81a15fa0 RCX: 00007f3e8179c799 [ 690.529857][T31901] RDX: 0000200000000440 RSI: 00000000c0585611 RDI: 0000000000000003 [ 690.529863][T31901] RBP: 00007f3e82709090 R08: 0000000000000000 R09: 0000000000000000 [ 690.529869][T31901] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 690.529876][T31901] R13: 00007f3e81a16038 R14: 00007f3e81a15fa0 R15: 00007f3e81b3fa48 [ 690.529890][T31901] [ 690.787628][T31904] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 690.849520][T31907] loop5: detected capacity change from 0 to 7 [ 690.865965][T31907] loop5: [ 690.869006][T31907] loop5: partition table partially beyond EOD, truncated [ 690.877990][T31904] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 690.974829][T31919] netlink: 'syz.4.2938': attribute type 1 has an invalid length. [ 691.045356][T31919] bond6: entered promiscuous mode [ 691.051002][T31919] 8021q: adding VLAN 0 to HW filter on device bond6 [ 691.104684][T31919] bond6: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 691.154835][T31919] bond6: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 691.167940][T31919] bond6: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 691.233923][T31919] bond6: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 691.246803][T31919] bond6: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 691.414769][ T10] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 691.586667][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 691.598600][ T10] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 691.608585][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 691.619622][ T10] usb 4-1: config 0 descriptor?? [ 691.768559][T31990] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 691.780826][T31990] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 692.111242][T32007] loop7: detected capacity change from 0 to 16384 [ 692.423833][T32016] FAULT_INJECTION: forcing a failure. [ 692.423833][T32016] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 692.437195][T32008] loop7: detected capacity change from 16384 to 16383 [ 692.444318][T32016] CPU: 1 UID: 0 PID: 32016 Comm: syz.6.2946 Tainted: G L syzkaller #0 PREEMPT(full) [ 692.444342][T32016] Tainted: [L]=SOFTLOCKUP [ 692.444348][T32016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 692.444357][T32016] Call Trace: [ 692.444366][T32016] [ 692.444373][T32016] dump_stack_lvl+0xe8/0x150 [ 692.444398][T32016] should_fail_ex+0x412/0x560 [ 692.444421][T32016] _copy_from_user+0x2d/0xb0 [ 692.444438][T32016] video_usercopy+0xac7/0x14b0 [ 692.444461][T32016] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 692.444482][T32016] ? __pfx___video_do_ioctl+0x10/0x10 [ 692.444502][T32016] ? __pfx_video_usercopy+0x10/0x10 [ 692.444530][T32016] ? __fget_files+0x2a/0x420 [ 692.444551][T32016] ? __fget_files+0x2a/0x420 [ 692.444569][T32016] ? __fget_files+0x3a0/0x420 [ 692.444589][T32016] v4l2_ioctl+0x18d/0x1e0 [ 692.444607][T32016] ? __pfx_v4l2_ioctl+0x10/0x10 [ 692.444624][T32016] __se_sys_ioctl+0xfc/0x170 [ 692.444642][T32016] do_syscall_64+0x14d/0xf80 [ 692.444657][T32016] ? trace_irq_disable+0x3b/0x150 [ 692.444675][T32016] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 692.444689][T32016] ? clear_bhb_loop+0x40/0x90 [ 692.444705][T32016] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 692.444718][T32016] RIP: 0033:0x7f3e8179c799 [ 692.444744][T32016] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 692.444757][T32016] RSP: 002b:00007f3e82709028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 692.444775][T32016] RAX: ffffffffffffffda RBX: 00007f3e81a15fa0 RCX: 00007f3e8179c799 [ 692.444786][T32016] RDX: 0000200000000440 RSI: 00000000c0585611 RDI: 0000000000000003 [ 692.444796][T32016] RBP: 00007f3e82709090 R08: 0000000000000000 R09: 0000000000000000 [ 692.444805][T32016] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 692.444815][T32016] R13: 00007f3e81a16038 R14: 00007f3e81a15fa0 R15: 00007f3e81b3fa48 [ 692.444839][T32016] [ 692.688265][T32008] loop7: unable to read partition table [ 692.713322][T32008] loop_reread_partitions: partition scan of loop7 (() failed (rc=-5) [ 693.691682][T32055] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 693.715990][T32055] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 694.207737][ T10] usbhid 4-1:0.0: can't add hid device: -71 [ 694.244289][ T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 694.286382][ T10] usb 4-1: USB disconnect, device number 29 [ 694.632808][T32078] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 695.466325][T32095] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 695.485355][T32095] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 695.981371][T32115] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2956'. [ 696.012443][T32115] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 696.040806][T32120] FAULT_INJECTION: forcing a failure. [ 696.040806][T32120] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 696.055360][T32120] CPU: 0 UID: 0 PID: 32120 Comm: syz.6.2957 Tainted: G L syzkaller #0 PREEMPT(full) [ 696.055388][T32120] Tainted: [L]=SOFTLOCKUP [ 696.055393][T32120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 696.055402][T32120] Call Trace: [ 696.055409][T32120] [ 696.055417][T32120] dump_stack_lvl+0xe8/0x150 [ 696.055443][T32120] should_fail_ex+0x412/0x560 [ 696.055468][T32120] _copy_to_user+0x31/0xb0 [ 696.055483][T32120] simple_read_from_buffer+0xe1/0x170 [ 696.055505][T32120] proc_fail_nth_read+0x1bb/0x230 [ 696.055529][T32120] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 696.055552][T32120] ? rw_verify_area+0x2a6/0x4d0 [ 696.055567][T32120] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 696.055588][T32120] vfs_read+0x20c/0xa70 [ 696.055603][T32120] ? fdget_pos+0x246/0x320 [ 696.055628][T32120] ? __pfx___mutex_lock+0x10/0x10 [ 696.055647][T32120] ? __pfx_vfs_read+0x10/0x10 [ 696.055665][T32120] ? __fget_files+0x2a/0x420 [ 696.055687][T32120] ? __fget_files+0x3a0/0x420 [ 696.055702][T32120] ? __fget_files+0x2a/0x420 [ 696.055728][T32120] ksys_read+0x150/0x270 [ 696.055744][T32120] ? __pfx_ksys_read+0x10/0x10 [ 696.055759][T32120] ? __pfx_v4l2_ioctl+0x10/0x10 [ 696.055787][T32120] do_syscall_64+0x14d/0xf80 [ 696.055803][T32120] ? trace_irq_disable+0x3b/0x150 [ 696.055824][T32120] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 696.055839][T32120] ? clear_bhb_loop+0x40/0x90 [ 696.055866][T32120] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 696.055882][T32120] RIP: 0033:0x7f3e8175cfce [ 696.055897][T32120] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 696.055909][T32120] RSP: 002b:00007f3e82708fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 696.055924][T32120] RAX: ffffffffffffffda RBX: 00007f3e827096c0 RCX: 00007f3e8175cfce [ 696.055934][T32120] RDX: 000000000000000f RSI: 00007f3e827090a0 RDI: 0000000000000004 [ 696.055942][T32120] RBP: 00007f3e82709090 R08: 0000000000000000 R09: 0000000000000000 [ 696.055950][T32120] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 696.055957][T32120] R13: 00007f3e81a16038 R14: 00007f3e81a15fa0 R15: 00007f3e81b3fa48 [ 696.055976][T32120] [ 696.056667][T32115] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 696.075235][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 696.474562][ T29] usb 5-1: new full-speed USB device number 49 using dummy_hcd [ 696.489920][T32145] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2960'. [ 696.521665][T32145] openvswitch: netlink: Message has -1 unknown bytes. [ 696.648535][ T29] usb 5-1: unable to get BOS descriptor or descriptor too short [ 696.664044][ T29] usb 5-1: not running at top speed; connect to a high speed hub [ 696.690448][T32180] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 696.701742][ T29] usb 5-1: New USB device found, idVendor=154e, idProduct=500e, bcdDevice= 0.40 [ 696.712297][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 696.724052][ T29] usb 5-1: Product: syz [ 696.731795][T32180] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 696.746222][ T29] usb 5-1: Manufacturer: syz [ 696.753590][ T29] usb 5-1: SerialNumber: syz [ 696.844665][ T9] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 697.004500][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 697.019186][ T9] usb 4-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 697.047820][ T9] usb 4-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 697.060332][ T9] usb 4-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 697.072972][ T9] usb 4-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 697.090750][ T9] usb 4-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 697.105678][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 697.114053][ T9] usb 4-1: Product: syz [ 697.126513][ T9] usb 4-1: Manufacturer: syz [ 697.131243][ T9] usb 4-1: SerialNumber: syz [ 697.150376][ C0] imon 4-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 697.160592][ T9] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/input/input63 [ 697.429786][ T29] usb 5-1: USB disconnect, device number 49 [ 697.445192][ T9] imon 4-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 697.453704][ T9] (id 0x00) [ 697.543196][ T6328] udevd[6328]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 697.605501][ T9] rc_core: IR keymap rc-imon-pad not found [ 697.611387][ T9] Registered IR keymap rc-empty [ 697.631210][ T9] imon 4-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 697.684647][ T9] imon 4-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 697.936273][T32248] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 697.961071][T32248] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 698.034058][T32261] netlink: 5 bytes leftover after parsing attributes in process `syz.8.2968'. [ 698.049390][T32261] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 698.168263][ T9] imon:send_packet: packet tx failed (-71) [ 698.187184][ T9] imon 4-1:155.0: remote input dev register failed [ 698.193903][ T9] imon 4-1:155.0: imon_init_intf0: rc device setup failed [ 698.208054][T32267] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2970'. [ 698.219171][T32266] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2970'. [ 698.237997][T32266] loop2: detected capacity change from 0 to 7 [ 698.247144][ T5869] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 698.267758][ T5812] Dev loop2: unable to read RDB block 7 [ 698.273607][ T5812] loop2: unable to read partition table [ 698.286366][ T5812] loop2: partition table beyond EOD, truncated [ 698.299690][ T9] imon 4-1:155.0: unable to initialize intf0, err 0 [ 698.313135][ T9] imon:imon_probe: failed to initialize context! [ 698.325799][T32266] Dev loop2: unable to read RDB block 7 [ 698.333023][ T9] imon 4-1:155.0: unable to register, err -19 [ 698.338822][T32266] loop2: unable to read partition table [ 698.352604][T32266] loop2: partition table beyond EOD, truncated [ 698.373613][T32266] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 698.408299][ T9] usb 4-1: USB disconnect, device number 30 [ 698.438518][ T5869] usb 5-1: Using ep0 maxpacket: 8 [ 698.454611][ T5869] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 698.463776][ T5869] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 698.488447][ T5869] usb 5-1: Product: syz [ 698.499293][ T5869] usb 5-1: Manufacturer: syz [ 698.515846][ T5869] usb 5-1: SerialNumber: syz [ 698.535721][ T5869] usb 5-1: config 0 descriptor?? [ 698.547909][ T5869] gspca_main: se401-2.14.0 probing 047d:5003 [ 698.787443][ T9] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 698.945379][ T5869] gspca_se401: ExtraFeatures: 2 [ 698.950258][ T5869] gspca_se401: Too many frame sizes [ 698.994681][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 699.010361][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 699.042089][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 699.071416][ T9] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 699.091829][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 699.116215][ T9] usb 4-1: config 0 descriptor?? [ 699.160249][ T29] usb 5-1: USB disconnect, device number 50 [ 699.555791][ T9] usbhid 4-1:0.0: can't add hid device: -71 [ 699.563167][ T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 699.575807][ T9] usb 4-1: USB disconnect, device number 31 [ 699.974590][ T9] usb 5-1: new full-speed USB device number 51 using dummy_hcd [ 700.126349][ T9] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 700.135044][ T9] usb 5-1: config 0 has no interface number 0 [ 700.141182][ T9] usb 5-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 700.150726][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 700.161746][ T9] usb 5-1: config 0 descriptor?? [ 700.179459][ T9] usb 5-1: selecting invalid altsetting 1 [ 700.194300][ T9] dvb_ttusb_budget: ttusb_init_controller: error [ 700.227472][T32331] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2975'. [ 700.271324][ T9] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 700.320257][ T9] DVB: Unable to find symbol cx22700_attach() [ 700.549930][T32322] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 700.559812][ T31] INFO: task kworker/1:7:5904 blocked for more than 143 seconds. [ 700.568055][T32322] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 700.576939][ T31] Tainted: G L syzkaller #0 [ 700.599238][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 700.629014][ T31] task:kworker/1:7 state:D stack:21544 pid:5904 tgid:5904 ppid:2 task_flags:0x4288160 flags:0x00080000 [ 700.676897][ T9] DVB: Unable to find symbol tda10046_attach() [ 700.683487][ T9] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 700.692100][ T31] Workqueue: usb_hub_wq hub_event [ 700.711541][ T9] usb 5-1: USB disconnect, device number 51 [ 700.721991][ T31] Call Trace: [ 700.725532][ T31] [ 700.729681][ T31] __schedule+0x15dd/0x52d0 [ 700.743945][ T31] ? __pfx___schedule+0x10/0x10 [ 700.762151][ T31] ? __pfx___schedule+0x10/0x10 [ 700.770983][ T31] ? schedule+0x90/0x360 [ 700.775623][ T31] schedule+0x164/0x360 [ 700.780158][ T31] schedule_timeout+0xc3/0x2c0 [ 700.786464][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 700.791857][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 700.798588][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 700.804747][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 700.810656][ T31] ? wait_for_completion+0x274/0x5e0 [ 700.817439][ T31] wait_for_completion+0x2cc/0x5e0 [ 700.822951][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 700.829224][ T31] i2c_del_adapter+0x5c0/0x790 [ 700.834234][ T31] ? __pfx_i2c_del_adapter+0x10/0x10 [ 700.840345][ T31] ? rcu_is_watching+0x15/0xb0 [ 700.846358][ T31] ? devres_log+0x10e/0x360 [ 700.851740][ T31] ? devres_release_group+0x305/0x350 [ 700.857659][ T31] devres_release_group+0x2fd/0x350 [ 700.885033][ T31] ? __pfx_devres_release_group+0x10/0x10 [ 700.890994][ T31] ? enable_work+0x1fd/0x230 [ 700.896514][ T31] ? __pfx_mcp2221_remove+0x10/0x10 [ 700.901971][ T31] hid_device_remove+0x250/0x370 [ 700.907506][ T31] ? __pfx_hid_device_remove+0x10/0x10 [ 700.913529][ T31] device_release_driver_internal+0x46f/0x860 [ 700.921305][ T31] bus_remove_device+0x34d/0x440 [ 700.929094][ T31] device_del+0x527/0x8f0 [ 700.933810][ T31] ? __pfx_device_del+0x10/0x10 [ 700.939252][ T31] hid_destroy_device+0x6b/0x1b0 [ 700.945358][ T31] usbhid_disconnect+0x9f/0xc0 [ 700.951176][ T31] usb_unbind_interface+0x26e/0x910 [ 700.958190][ T31] ? __pfx_usb_unbind_interface+0x10/0x10 [ 700.964062][ T31] device_release_driver_internal+0x4d9/0x860 [ 700.970707][ T31] bus_remove_device+0x34d/0x440 [ 700.975937][ T31] device_del+0x527/0x8f0 [ 700.980373][ T31] ? __pfx_device_del+0x10/0x10 [ 700.985695][ T31] ? kobject_put+0x51d/0x560 [ 700.990475][ T31] usb_disable_device+0x3d4/0x8d0 [ 700.996689][ T31] usb_disconnect+0x32f/0x990 [ 701.001594][ T31] hub_event+0x1cc9/0x4f30 [ 701.006658][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 701.011781][ T31] ? __pfx_hub_event+0x10/0x10 [ 701.017240][ T31] ? process_scheduled_works+0xa8d/0x18c0 [ 701.024109][ T31] ? process_scheduled_works+0xa8d/0x18c0 [ 701.031547][ T31] process_scheduled_works+0xb6e/0x18c0 [ 701.042839][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 701.049894][ T31] ? assign_work+0x3d5/0x5e0 [ 701.055788][ T31] worker_thread+0xa53/0xfc0 [ 701.060973][ T31] kthread+0x388/0x470 [ 701.065981][ T31] ? __pfx_worker_thread+0x10/0x10 [ 701.071834][ T31] ? __pfx_kthread+0x10/0x10 [ 701.077027][ T31] ret_from_fork+0x51e/0xb90 [ 701.081810][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 701.087626][ T31] ? __switch_to+0xc7d/0x1450 [ 701.092619][ T31] ? __pfx_kthread+0x10/0x10 [ 701.097791][ T31] ret_from_fork_asm+0x1a/0x30 [ 701.103252][ T31] [ 701.107856][ T31] [ 701.107856][ T31] Showing all locks held in the system: [ 701.143743][ T31] 1 lock held by khungtaskd/31: [ 701.153678][ T31] #0: ffffffff8e75e460 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 701.165293][ T31] 2 locks held by getty/5580: [ 701.170179][ T31] #0: ffff8880325010a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 701.181635][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 701.198035][ T31] 1 lock held by syz-executor/5806: [ 701.206276][ T31] #0: ffff8880b863ade0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xb6/0x150 [ 701.217777][ T31] 6 locks held by kworker/1:7/5904: [ 701.223092][ T31] #0: ffff88801f6a2148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0xa52/0x18c0 [ 701.235762][ T31] #1: ffffc9000439fc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa8d/0x18c0 [ 701.274595][ T31] #2: ffff88802a4f1198 (&dev->mutex){....}-{4:4}, at: hub_event+0x17f/0x4f30 [ 701.284102][ T31] #3: ffff888067871198 (&dev->mutex){....}-{4:4}, at: usb_disconnect+0xf8/0x990 [ 701.294020][ T31] #4: ffff8880541cf160 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x860 [ 701.305353][ T31] #5: ffff8880326b9a20 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x860 [ 701.316491][ T31] 4 locks held by syz.8.2970/32266: [ 701.321730][ T31] #0: ffff88805c2d3008 (&sb->s_type->i_mutex_key#14){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 701.332279][ T31] #1: ffffffff8fc396b0 ((netlink_chain).rwsem){++++}-{4:4}, at: blocking_notifier_call_chain+0x54/0x90 [ 701.343655][ T31] #2: ffff888025dc98d8 (&nft_net->commit_mutex){+.+.}-{4:4}, at: nft_rcv_nl_event+0x13d/0xdb0 [ 701.354367][ T31] #3: ffffffff8e7646f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 701.369083][ T31] [ 701.372217][ T31] ============================================= [ 701.372217][ T31] [ 701.383152][ T31] NMI backtrace for cpu 0 [ 701.383174][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 701.383194][ T31] Tainted: [L]=SOFTLOCKUP [ 701.383200][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 701.383209][ T31] Call Trace: [ 701.383215][ T31] [ 701.383222][ T31] dump_stack_lvl+0xe8/0x150 [ 701.383249][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 701.383336][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 701.383357][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 701.383378][ T31] sys_info+0x135/0x170 [ 701.383393][ T31] watchdog+0xfd9/0x1030 [ 701.383424][ T31] ? watchdog+0x21a/0x1030 [ 701.383447][ T31] kthread+0x388/0x470 [ 701.383462][ T31] ? __pfx_watchdog+0x10/0x10 [ 701.383479][ T31] ? __pfx_kthread+0x10/0x10 [ 701.383493][ T31] ret_from_fork+0x51e/0xb90 [ 701.383513][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 701.383527][ T31] ? __switch_to+0xc7d/0x1450 [ 701.383546][ T31] ? __pfx_kthread+0x10/0x10 [ 701.383561][ T31] ret_from_fork_asm+0x1a/0x30 [ 701.383591][ T31] [ 701.383599][ T31] Sending NMI from CPU 0 to CPUs 1: [ 701.501764][ C1] NMI backtrace for cpu 1 [ 701.501783][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 701.501804][ C1] Tainted: [L]=SOFTLOCKUP [ 701.501810][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 701.501820][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 701.501841][ C1] Code: be 6c 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 43 22 1b 00 fb f4 fc e9 02 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 701.501855][ C1] RSP: 0018:ffffc90000197e20 EFLAGS: 00000246 [ 701.501869][ C1] RAX: 000000000103c327 RBX: ffffffff819a8d5a RCX: 0000000080000001 [ 701.501881][ C1] RDX: 0000000000000001 RSI: ffffffff8def6963 RDI: ffffffff8c27bd00 [ 701.501891][ C1] RBP: ffffc90000197f10 R08: ffff8880b873395b R09: 1ffff110170e672b [ 701.501903][ C1] R10: dffffc0000000000 R11: ffffed10170e672c R12: ffffffff901199b0 [ 701.501914][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff11003ad9000 [ 701.501925][ C1] FS: 0000000000000000(0000) GS:ffff888125560000(0000) knlGS:0000000000000000 [ 701.501937][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 701.501948][ C1] CR2: 0000001b2fa03ff8 CR3: 00000000794e0000 CR4: 00000000003526f0 [ 701.501962][ C1] Call Trace: [ 701.501969][ C1] [ 701.501975][ C1] default_idle+0x9/0x20 [ 701.501993][ C1] default_idle_call+0x72/0xb0 [ 701.502013][ C1] do_idle+0x1ba/0x5d0 [ 701.502036][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 701.502054][ C1] ? __pfx_do_idle+0x10/0x10 [ 701.502076][ C1] cpu_startup_entry+0x43/0x60 [ 701.502097][ C1] start_secondary+0x101/0x110 [ 701.502115][ C1] common_startup_64+0x13e/0x147 [ 701.502136][ C1] [ 701.677227][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 701.684115][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 701.694786][ T31] Tainted: [L]=SOFTLOCKUP [ 701.699099][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 701.709144][ T31] Call Trace: [ 701.712506][ T31] [ 701.715427][ T31] vpanic+0x56c/0xa60 [ 701.719411][ T31] ? __pfx___schedule+0x10/0x10 [ 701.724331][ T31] ? __pfx_vpanic+0x10/0x10 [ 701.728854][ T31] ? __pfx_console_unlock+0x10/0x10 [ 701.734055][ T31] panic+0xc5/0xd0 [ 701.737769][ T31] ? __pfx_panic+0x10/0x10 [ 701.742384][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 701.747750][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 701.753994][ T31] watchdog+0x1023/0x1030 [ 701.758323][ T31] ? watchdog+0x21a/0x1030 [ 701.762743][ T31] kthread+0x388/0x470 [ 701.766976][ T31] ? __pfx_watchdog+0x10/0x10 [ 701.771666][ T31] ? __pfx_kthread+0x10/0x10 [ 701.776253][ T31] ret_from_fork+0x51e/0xb90 [ 701.780842][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 701.785942][ T31] ? __switch_to+0xc7d/0x1450 [ 701.790963][ T31] ? __pfx_kthread+0x10/0x10 [ 701.795541][ T31] ret_from_fork_asm+0x1a/0x30 [ 701.800314][ T31] [ 701.803741][ T31] Kernel Offset: disabled [ 701.808058][ T31] Rebooting in 86400 seconds..