last executing test programs: 24m19.809252458s ago: executing program 0 (id=1700): socket$netlink(0x10, 0x3, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=@newlink={0x40, 0x10, 0x503, 0x70bd27, 0x20000, {0x0, 0x0, 0x0, 0x0, 0x1d961}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @private=0xa010100}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x7}]}, 0x40}}, 0x4080) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x9, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000026006bab9a3fe3d86e17aa31106b876c1d0000007ea60864160af36504001a0038001d004231a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb5b64f69853362ac3407173ec", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r1, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) (async) recvmsg$kcm(r1, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x1, 0x0) (async) openat$kvm(0xffffffffffffff9c, 0x0, 0x1, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000001c0)) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r4, &(0x7f0000000040)=0x1f13, 0x12) sendto$packet(r2, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x11, 0x86dd, r3, 0x1, 0x0, 0x6, @local}, 0x14) (async) sendto$packet(r2, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x11, 0x86dd, r3, 0x1, 0x0, 0x6, @local}, 0x14) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000680)={0xffffffffffffffff}) r6 = openat$autofs(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r6, 0xc0189377, &(0x7f0000000640)={{0x1, 0x1, 0x18, r5, {0x41c, 0x3c}}, './file0\x00'}) syz_open_dev$sndctrl(&(0x7f0000000300), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r7, 0xc2c45512, &(0x7f0000000340)={{0x8, 0x6, 0x0, 0x0, '\x00', 0xfffffffd}, 0x0, [0x0, 0x0, 0x0, 0xfffffffc, 0x4000000, 0x100001, 0x7, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x80000004, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x5, 0x0, 0x0, 0xe4, 0x0, 0x9, 0x3, 0x800, 0x8, 0x0, 0x0, 0x6, 0xfffffffc, 0x0, 0xa, 0x1, 0xcdc, 0x0, 0xffffffff, 0x600000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x1559, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x8, 0x4, 0x800, 0x0, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x9, 0x80000000, 0x400000, 0x3, 0xc13, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x9, 0x80000000, 0xfffffffd, 0x0, 0x3, 0x800001, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x40000000, 0x2cbb, 0x2, 0x7b1ae8f, 0x3, 0x0, 0x80000005, 0x0, 0x3, 0x2d6, 0x0, 0x6, 0x100000, 0x0, 0x0, 0x4, 0x1, 0x2002001, 0x0, 0x0, 0xd686, 0x0, 0x8, 0x40000000, 0xfffffffb]}) 24m19.619973084s ago: executing program 0 (id=1702): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0xa, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = socket$inet6(0xa, 0x3, 0x3c) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a01010000ff97000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff274"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x5000, 0x80000001, @remote, 0x7}, 0x1c) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x24, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x24}, 0x1, 0x0, 0x0, 0x400c000}, 0x0) r9 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) syz_emit_ethernet(0x7a, &(0x7f00000002c0)={@local, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, '\x00', 0x44, 0x2f, 0x0, @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x880b, 0x0, 0xfffe}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x57}, {}, {0x8, 0x88be, 0x0, {{0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}}}}}}}}}, 0x0) sendmsg$NL80211_CMD_SET_MAC_ACL(r5, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x44, r9, 0x400, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_MAC_ADDRS={0x28, 0xa6, 0x0, 0x1, [{0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}]}]}, 0x44}}, 0x24000000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)={0x74, r9, 0x101, 0x70bd28, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x4000, 0x0, 0x4, 0x0, {0x329, 0xf70, 0x0, 0x319, 0x0, 0x0, 0x0, 0x1, 0x1}, 0xf, 0xa, 0x48}}, @NL80211_ATTR_SSID={0x5, 0x34, @random="a9"}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}], @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x2, 0x2, 0x1, 0x0, {0x400, 0x0, 0x0, 0x3c0, 0x0, 0x1, 0x0, 0x2}, 0x1, 0x2009, 0x3}}]}, 0x74}, 0x1, 0x0, 0x0, 0x4890}, 0x4010) r12 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') read$FUSE(r12, &(0x7f0000000640)={0x2020}, 0x2020) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) 24m17.905490878s ago: executing program 0 (id=1706): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40182, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f00000001c0)={0x1000200001ee0000, 0x3}) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r3 = socket(0x1e, 0x2, 0x0) socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x4000000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x1000000000, 0x7, 0xfa11, 0xffffffff}, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000480)=[@mss={0x2, 0x3}, @mss={0x2, 0xaf0}, @timestamp, @mss={0x2, 0x8}, @window={0x3, 0x8000, 0x81}, @sack_perm, @timestamp], 0x7) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents(r6, &(0x7f0000001fc0)=""/184, 0xb8) mknodat$loop(r6, &(0x7f0000000000)='./file0\x00', 0x4, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="400000002e00090027bd700000000000040000002900118031f9e05e2f826cfc31dc2af824704f63dac994ce05dc7224e5479795b50d9015743a8b75c2000000765d09d3afbe73ef6c989c6b23ef6ca56d01c6"], 0x40}, 0x1, 0x0, 0x0, 0x42804}, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r8, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r8, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x0, 0x0) setsockopt$inet_int(r8, 0x0, 0x7, &(0x7f0000000040)=0x6aba, 0x4) setsockopt$inet_int(r8, 0x0, 0x14, &(0x7f0000000180)=0x9, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='net_dev_xmit\x00'}, 0x10) 24m16.086949079s ago: executing program 0 (id=1716): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00'}, 0x94) r0 = syz_io_uring_setup(0x53f, &(0x7f0000000440)={0x0, 0x807734, 0x400, 0xfffffff8, 0xfb}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) open_tree(r4, &(0x7f0000000080)='.\x00', 0x9001) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84000, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r5, r5, &(0x7f0000000000)=0x2eb4, 0x2000007ff) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2b, 0x0, 0x0, 0x200}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r4, 0xc010643a, &(0x7f0000000100)={0x20000000, 0xb4, 0x7}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_usb_connect(0x5, 0x64, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000cb8be7406d04230807000102030109025200010000000009044000000e0100390a240108000b020102082407010500070e11240606060509000600040007000300390c2402050302060254df000a092402050001031f04092403", @ANYRES32], 0x0) 24m13.976335478s ago: executing program 0 (id=1721): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x24060084}, 0x20000000) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000003700)={0x77359400}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a5fdad88eeffffff1b0012800b00010067656e65766500000c00028008000100040000000a0001"], 0x48}}, 0x0) r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000040)='asymmetric\x00', &(0x7f0000000000)=@keyring={'key_or_keyring:', r0}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x58, 0x10, 0xffffff1f, 0x70bd26, 0x1, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TOS={0x5, 0x4, 0x1}, @IFLA_GENEVE_REMOTE6={0x14, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmmsg(r1, &(0x7f0000006d40)=[{{&(0x7f0000000040)=@ll={0x11, 0x15, r4, 0x1, 0x82}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000b40)="0261ad3a0908f7e75a50f5d69d67fbde15fc403386f8d0bfaae20508c54919f62ffadd10af2cb4f1f9ccb1501753d11fb5aae63ebacdafbc518039c9e2ae164c4ceedd8c0da622b7faffffffffffffff85e292c91fa6a8dceb98a9027e6c8f3f3976a69f1e559c3433f0d56e8572e9a3ef44766b262eb06e6c2e98d8b85acbdfd44a2913fa449379c7689c37519d212394f53031f24780a827695ae4b9a6b818e51e57c5702a24d1477c602568babc459e52ca7f6d2c00a54e4e9d01a38598e7109b8c17a90898d3b10d6072216905f6691cbdb1b5fa0ad4217b47ef5e675e3eb02596bcb91190556637a4faa6bb68b4e8", 0xf1}, {&(0x7f0000000180)="e23d3d29ea4221450727016f1b5b99f9b7591f14e4cc9f9779d1e08b37aca965e5d23934b7556989798c3fb6799c67b518d2867f41e142cc42ed8aaef4d2fd3060d20cdd9554ffd0d207c79e8b17c1350fd84c9a9970dc6e62468150f87005c6402865196ca0b76d127f2c34a300d1a2952ad1994e114f306eb08e01dc3d8a5727cc305ab462cd9bc2465ce9c1cf9520324d3ab0ea2b359d53c64d66c9de3d88eab2d0a9b8", 0xa5}, {&(0x7f0000000300)="55d5e589b7411a3aced2523190bce03e25fbb340abb386446e1f5db4112e0d3f03f72395674af1f3e806ee442d9435bff113ce5cd4aa76e17802666de40ab8a2d32c8dfa813a825931b00a3ced823d48857670b7340d9a85af3ed815b218823a4f894f479f3b", 0x66}, {&(0x7f0000000240)="d9da36fc33c8f94f022109d94fae0ad0e7e9506423c4c602d92a176e6418b1688330578a2024f82917fd12ba775b9c63d0cec9357bd4e7", 0x37}, {&(0x7f0000000380)="d6fd672ea8f9a894493954de2d3fe9880dc44b9af2b42c509068a55a93e5d7667cbe2b3bbf710179d7cfd0d6efe84222", 0x30}, {&(0x7f00000003c0)="180e2299c78abe0cafb5067187ef57b4569421c7d8c53485beee675396371b2f571a4b72ef4a5a81b7085638e1dc9763d843e937c4178b21c018ef73ebadf19ee552dc6ad8c8c3fa516f633cb2e42672e1c22578bb6e9c721104871be56f32f477de7791969185e550329e9c7a3accd60c231c810b5e543e5bae78709489d99636c28db7a8dbfb976443514ac08aae640778955e6a8c07ace5338b66dd2167", 0x9f}, {&(0x7f0000000480)="92f1a78af3ceb402c331b13856253e8b97dd8d0b085f46fc44f46118bcf446aa7b872ad93376b8cdfba8848d51f3ee013b77256afd696ca9559b9b1a4aaf0d11e536d17f8b5b9ae5544158a3685d44514bd440345d073dd365c5629e2868902092ab36312d385a4f7b27f89c04755531", 0x70}, {&(0x7f0000000500)="096b00d9f2a290207cc154e5b6662ea46e19335590f62ef222", 0x19}], 0x8}}, {{&(0x7f0000000580)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x4e22, @empty}, 0x3, 0x3, 0x4}}, 0x80, &(0x7f0000000780), 0x0, &(0x7f0000007e40)=[{0x1d4, 0x29, 0xe1a, "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"}, {0x100c, 0x1, 0x7, "1d9bda401c5d8918c57c04de6492b65b5613019d7420d32365601c4d11111f3fded4fb568c552ca4a8f1ddbea676584de25e8655c46abf3ab3846bb2b9195a69926c1c1a941aa90ec2dbe768fb22afcfe90a69389962bbeafaaa171a3377f0b7a28e7383c859b8da33c477537544cc1b739e3045e456b434b44f885c458abd21f4ab8507412d30298ac826151c9f88a15728d3fef3dd0217ff9dfe30e211fbcd13c8bac4be7cfc23970bc65685e717119dbf68d825819053aaf9795cb0af4c14c3c939f8ed77598107c85d18899ad55faa7d8b6eab10f132818829851697f6c5e6c36ad31d48d24bc218b1447c96444527f50b1e8dec91aed9e65c224e434f0315147218e16fd2cf8a52c317d9ab07b092cdc7f3b86447e598eb997ba65ebee4721ad099d0d1e166e3c469ef9177935f89242dffd391bdaee21eaf726c2041781cc63ecde19aa169e380d008e7963ba2978a25f4e0e0429a0084ed9d49f34440d0fc4c9d3a429325caee3caa87f7bdd456880f4069071c25213b87bf27677bdc2f168ceba428e5bb42f84c62aa314e11a627a66393590e88838dcda77a93eb25ff8e9bd140552c2ae1cac2840b63321507628e7c53256d6ad12e40a8a77fcba33226e2ffa121a8452dc9a8ecf9dd6dad617956d36f7aabda6c9bf2edade34c27bd23115cb215547633f4f9ded53af94a9172bb12864b01ba25deacd80ba5f12ccd081ae2faa96aebd64da92c25865c2b878f14d33cdd51bc1d2d470ee7a2f109708a54ada002b594fe497d0ae0feb0d94389779731acf830a4c3169e63fee92d61345ddf6e7620fc18f1385af5dabdbc0aea9e1d75b9fb00d943f55696461d583d72ca415269f808170563522fff4e9b54d29ac1be0e65f985e63b4dbca7369ca851de9c9596acc417fff92d357fb45e3bb66c505663629940aeab067b059ae07ec2423a7d3d67d0636af6c9c92962d53068c73534fc3f26d5f9e4f6fbfb1ad5a37be657d50b00a12f4982b6ec739a3e41626bc75556565c95b626ee76b6fe6259e68098019fa436a292b10e8d3685a34f90210539b52d53143225dcf0d1070c134b37798f826f98c5ec3431c023b78fec35e140638bfc15e550aa59dc729b1ff4c088024a965f58857b45d0a8bd029b87fbf9ffbd9235361d28cf93a2d6c3969cae5d94df04f7bb4955089335a74411236c53eacb0024f9e27514879d45ded2d07c03808d488885529c5acf029df7af26056583a5994f91f3b18109b1eee3c1b5246b6a929f7448beeed5cdc54f06c0c1d650b22d53458ee3c671664e76f8d1247a834debf8cd461910b6929cb7a7326ba3b7221bc0d8685551083fbc0e6933d27d050178c8210a1511a46ceeb9d0705db3bb4f5ef23121dcb608a91d6850ca55cd4e0fef3b129855e118d11fc5c8a589ff4a14f10f2727c370392ca2795b8432eb62625b65df0f1dd7b6313f23e60f6fa1c78b9ffced40c70694dcb08cc6e9b5cf3483610bd02ade8d3ca337491ffc984b94f87cf670cbf47768f3b4f5e5bfbe9957ac151209682b1707a5ce9b21550958c1e3e0e0be1d99f52e143827d4111a3e4f4d9436ebfb478ca1390df9706562e54f3f5dde04a5b39aab4271f3a6673a7ab206855b2e4ddb71bb610761c7264b2dbc9d168bd0180cd48d39cbaf7d67f51eb5bf284d505e801c2067400b3302bbc397f807e6f9a6890e674cd9b90fe5a436e4098c14c9f06db8a3373e0ba9bd066c3ec30fddc1a7f0515f6113245679c23b4f51e60ab64821d6e33d29d1c68c80c21ea57251d4524700e794d6baa64668cc39c85258e08b92b9390355054e8cedf920975e9b8cb40902cdb22c59f88a8a55f89d979f9e1c8949bc80504bca074c209789d9b76865e0057bb35a36ab78e319e39697212c125da586f5293a993450e09e916142651d9a51f3f776d5a834a040d150664f798409ce26ee37efb6c046fc7eb2d8914bd04cf1e57daba9196526ebe79ad6bd378920f86a5400738e2e63337a7098ba924b75aa055e38cbf864d5a8c29ba20e46196e1567c2e00fc0a0d3480980bf4d4732d394a3beac1fde047fbf4325418f6c4c43e4dd6aead06936ea0ab98aa2dba5bda1eec2552521cc5fe272d6d16384267f95c61e24b01ae5174f13ed7da42b999a0f933c31b422a3eb0604100a9d3f98ed63fd92844b7eed11e91fee55892ac035dd9af8f511bf382009f3fb985f80a5a1c6ad6fbb6bfdca553e46a5578fc8c17ad292f3d9e9a01520d59a2f86c4eb50bd47f8d69b7823db35772e2ed4a5bf49f08397d1286e85becb20b242faf6415183f45082331b5de517d668cb704c5490408a9daad77afed86b907a7fdfbea9bb2a5e89951cc7cba6b2b0bae3649046882b0089ec1f49e5324dc7bbe08f82a223bd637c50d3f9592001bc968ca27c612be00f9c2aa0e9b421dbde22969eb7ab488ebe75cdb1b81c8440eacfffa10345341fe6ee264f5e9138a4b09d113fe6d128802f5d50cab6ed48178c9e0fed5d349c335423ffead32d81da3604d316caf48919b630fa7d3de8255fae9efd17f096e621fccb4a6b3e5b649147ce287a69521b2eee80d23701bb7d3e8d48b60b76202796f2260e83e0c2768d918e978b624611e250b6cf1dabaf2c95e3f440a2d8983d97bd2f8cac561e694301b1f6802d854bdca9bc9b272dbd12abc54049a09682f65a86c202af8d13e86f6cce066210eb701a8a461efb224506258c27045996260e9c2fd93cf05272438acc94507b86bd59e6d1867f1659e31a832d664c42d2e8bfbd0f5774c6a9a28ec1428de6f3f2f6e534ae368a6190a07467d75dd56f2f027c957fa4f3795ad182ab2cd169d55e3acf5518514227c2edbf9cd82b0daaf9781d9d2b34bb8995ae511dc04e3ab1fca44e0b49bce6e0f994ce55223f85926312275dae59eea69c1beca41ef2c33ea65de22905da35343ca8914e9c0159cb550e10bc1db0d6f858cd1b60b0641a1a8f9da0bc5d104bbf9dc5d9c5a07f0b3cb7fbe020758de8843f4e9a3399f3fedde27086a09550b4d82b43305362ef067fabeebb2877a2b2ace665de1b9fc0d9a9213b23bd08f67d6eac586926b61225952bd16543ac7e20079b3766dbbfbcadc844e6e455940575b5132ea7bbb8fa68f63acfaddc7ea3afed9c18af3a3570604384246cb30e918a8f248eb9642a0efe3347823670d1590d055f690b05e2573c9318eb2cda1e15c1ba45018333660f36fa1be665cfde05708c0cf53a8657b8ba904c1c3680197b07b4e3b6b00db34df1b71227845ea8735cd0941b70ad78b9dd3c3eaca0e6d27c0ba6c3215cd6741d93c683db7dc9182c2993c5744c42ecad403f9c7e8f3f196e7a8ce5a1e5a8fec051774f2cd1f5df5cfa1fed1fa00fca7396d630411597516f0a256c65ad49d1960bef74c891826be0bcf2348fd478218b6a6fd2c61ca9a949d9b36864a46b6455cb50ca48d216e3177a5e3022e5fbb54d9e88dc3cb3b6f97c9bcbb7c8cd49d0ff5e8661827ea28521b2cbd47d71a86dae7a957c86ab569919cadcabaec4747b7f11f6c67a7ff375114018a30cfe263330710f1eb79dc1b7f054304a658e982ce6b0d3ba26875cb45a05142d898b4fc7b78abcb774cd37565d1bca6f267868eda4fa8d780bda45d88d42b1567177f29b9a40e4adf85b339433d4ec700982470a4d280d3fbb41208bc5f5657846cc89a8ddf2f2005230961a5b53ec808510256df9573ab7b91bba74d4f7103b36bfa6f739724d1b9e371ab1c53cf4b3bc75c34f4f06f9e8589ec3f03f16a641580acb3c94d4b14c57f2975da114f99bc5de71797b56c07ee3823a597f41328183c455cf7e705bee6a052f272fd717240ae8857bc0895584bd5d2843e201db1952fb663dcedd41f7e82213f339fade0e04d0d498732e268438ae22f94cc6b14289ca633555283232e93887e9f380ed700c33b43859c69ce084fb4a3fd7f7f067b0414e54d9aff5b99e7c1c6129101842d444434a2fadc58b64514bda064bb7e21e61aed84de87eb1e5bfe8d7631d663f10d6a2019acd8767e4682d8da23834567c0e659f47e140f86c955f354c803b66fb793298dfd80dd966220e9b8be75fe2bb0b68dd288aa356ee3a35367c89dac6eb4473f3e8f18575a0fcdf8d0e95d10f2369ed7c2d8c45a6893f713ffce6dac89e2f7ee9cf5a588dca200bc38635da6de808ca1ebabaf33e0d239ca8d40b26d4672bc31620f6c087bf5fe58c214ec437c419b2f91197ba979954ae984d086d40c79bccfd48be520a896a8ef3af2b2e6de37df25f02e301eca0e1576cd3002e16e7f42eb901a5f27a05001c9f6351b1105508e901d6e1a2d9943af4c6daa2aeb934fa124eb36011773741013e14f5e495b47db1f2c4c52a4b37bbea65a5e2f666a693dc2dea44aef930d834f9177bc0733e3709d272aaec3f04a6201de2d2829ae4143a4b501a9c6780c84aba3b61adc4f24b40ea229b8f82a69e796cb75557865b24f80dd8b502af303412c3792de04c3edee00d33cc9f7ed0d3901362fb06db926b743ba43acb00e7a9ca3735625e209427d75cdbc25babbd603b661672b65f7e0d75c476f472ad5ac897709fe4475d930d22fd896e115ebfd911abc9160280ac876902ff0a8012365d45eeaef449c64a93d760d2fa0aa9fd20c73008a9c7f44c54f76db6c361e46fdb3bd7ad0681b2da3dc3ac295c945d8035274b767b75bbf8db83aa8b2c656036bd7dd7c7b6bc00b49b37e02bf457f99a4b343b38f203e96688162520ea4962fa5ab4362b5725803009c931561c779832b8c1287a05ebcca7f26f62990f8a703b4ee5f715d23a33dc326814fb45d43be49c2a74cb54a3820835957097e827f4d3f1787fb76f3776e709fd46f55766e86e190b75e0e06cf022e0df7bdbbb3483e7fe61324b965182e9f70bbb1ce433389547df17b771c85a99c7c0b634e99bc2ceccfbc64d7655726be6eb9d4e1a4b61e890fe13f97aaa32a206000bee0ee3b25a9f671f419b2626ea9903968f44b10952a79d41d489bce8f5c97ca7bb2b88d4ca08e34e65e316affc1673b128aa016f070b830fe3d4dae8de9e53e4a2eae453bd65c149993bb339d5abd4944145c3ffb4e455cbdf35f7839c8199809e7dffe064283fe4676760e76758e7190821d7ea4452c688365a6e0c755fc2cad748977d984e57257a2b1541d490f446443ce81fab3015c099c48b6f2dee801c740cbc0b7ce6db3f69b0ea5800ba275a35c2335fafbd561e62aed5dd0ac437e78ba35196c0a31323f1a053aa272bb35225c7fb3829071c4304ce31359724435bd6b84cb301e0021a786535bba6d9b1e352c46b41604738b31ba5fcb09664f4c45351c97c95fa537740dac6e811821434d88d8db486eab2c91a4776b8915fd4a7d15b4499b31dded3a333a95110cd25576917d64535056ef9c11c4395bd71dbeaa69a575c379e7b23f32a326df6019bdc53b448a32dce108b5f9bbc5fc13eaed49fc158f95df9d204bf29fb411674e26b7ba927fc002c59478d2e5bac3c5ec69edc6a0646c68029748eb80d4849390cec276ba517b2bf99cea0efe60d1c583a7f73a99c1fdc2907dd7656c5400a65cfab11cc065657b02114316d9a50e016e048457f252eb964f48276872f06e7d3f68d03033b834f82cc8d28dc6dfb9d978e4c61b03836870ffe32153f010d67ff383fa0aaf330502b54cd6f1ce73ef03c4949cb79b83e33d9c7f022521be4b993abe91cb9393895a0703358adcae8c9f1feeff00c1174b3e71dfd606cc95fb09d1b"}, {0x50, 0x107, 0x1, "6c8d4219d083594104d9a41231cbbb70168eae7ca80f2904f1fb3fec36b1759d9e5dd474f60c89eb3767a24294ed512685c2a7f9c4d53d1850cbaaa1fa3aa78d7c11f00a"}, {0x88, 0x117, 0x3, "bf2aa4de57c3af10ee48ddd90d52498f0c4869a1ebe69d1eafd60bbf627d730833095329bbb9f0ec7cc437a8500431f4e6126ed961c1a3e66e2910ac6a7f9694887b925401a9c82fe9691d6a69807fec2adde494a465a99dcdd59b80d4d2a6a746b83d1d428b91ded2894acfe3669ccf98f6a1ae2ffce81cad4c"}, {0xa4, 0x1, 0x20da, "7f0cffd867fc8af82a9ff73025a8f07a378d6d50fadca8c461d4ac58f2147c4323b7eb443b7bcf2a22cb91a16084f4f8f1aad8b994bae3aeadfb7a27331ccab3d61eac4639ec4be4e6616cc62413706d627ace6d913a3faef24f63876e57882be41778eced8df45d08999c3e5407ce6ca7985de97fc780ceddda36cd22bd30ea85b56d49b3f672de3bdb6d399bc99e9ab6899f3911accd"}, {0x2c, 0x108, 0x8, "aeec318efe68cfc6b3ebfa67c48b3e1d310549d735b40f0db0f0d5a40f6217"}], 0x1388}}, {{&(0x7f0000000800)=@phonet={0x23, 0xf5, 0xd6, 0x4}, 0x80, &(0x7f0000003e00)=[{&(0x7f0000000880)="936b7548369f9c3a9ac611527b2569abf96d7946eebbe1b895cb942d7952b40d2037409c2a18a954fdd95fdcff312d92ccf0", 0x32}, {&(0x7f00000008c0)="cefd17f89f7e7e3ac8f19f7ca836ec3e42a7f58aa2c9a5d3ef22cc4a7a013f61cd9f0960bc33999c9e090ac00eb01dc9e3b9177066147f50d6eb7912b43b06397c517fb7bf59891cb4070231aa73069f1a4c506055771bf128ec9fd4abf2bd7463fceef122c0f9ac2c38ca12fc1613496779e6f241892b8a8e125be5c22e4e52691cb543d8c79fa785df25475e430a22944f4b8ef90b65a9cac2f1801ee025ed916dadb0cfa5dddc09c8d300847ec33121", 0xb1}, {&(0x7f0000002e00)="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", 0x1000}, {&(0x7f0000000980)="2e8a73cdb4a56d3b9e7d3d3b99a8e109dc0f117b8fae4fbdd4efc53629a4c51760de0e7b4b5cd38399eed0e4a7e960275c41db307d145124179c8f7f1df28434fba041dddc7ae851f860991072668ec83ef32e8b6cff558a11048ed7e866186bd5e87226d109f3d7d2db2e3cf86268936f228dd85a68cf6a44d83bb46365e04a40de6229e7e4a8c88b025238d85220796ef72c8c3cac29b4ae67a5a565", 0x9d}, {&(0x7f0000000a40)="97915cf579a4904d8a9e1f1e531f589929c02f83e7c9ea8efdf04af457e7744673acfac210ac2060a5f27445c3b36de53157bb3237cbcc65410388f7701d9860606d277208e9f1f05bf286d12df305adef26a161440dda8eed1da5", 0x5b}], 0x5, &(0x7f0000003e40)=[{0xb8, 0x103, 0x1, "cbcdc76efb6ebf84f4d268b6ed74f1a6b68a1c5705c2d5051a0d9d58f86d3977ca78270e41d8a569b5623c80fceecc41037e8cb420d8d3f3d4643c1f2e4ee5f5802902476a4b8f38cd2c451807486074ac400f04ca0c798d7351211d40bfc9e93c3d96a4831a843cdd6536c35e705e02c04b61bba5115cc4f7cdd9c1e7547c4936cd98b80e3b17539203086b9a3e5990c75a1d953048aa6c56073dd75d35e4766cbc53993e773b1b92"}, {0x30, 0x10d, 0x96, "007874ce733f8bc57e23faeba44b7c77f7bf78acdfb95b27bf5894a853c5022228"}, {0xc8, 0x109, 0x3f, "9cc9d1ac0a141acc0a4e36ae0462ea87c86fbb7ea79516346dd38dfe6c4138859d36b1b517522e69fd43e1bbd376f6d7fae252a7decbd47c1f4d31b0a305eea35c50bfa87fe9b930b192bba6106281c4da02940dc3372327a1bfcf1020fba24c365d84dfd54559c347977d5ebfbdc3b69f76f4bf5ded739981b684869b0e552119e1d91df41c22a0dff130850013e003ad05612800883a38ba5d4d4143aaa9ac8818e7ec8c420b1ffdd984e4fc662952ccb4ae7cf42f0cec5963"}, {0x84, 0x10a, 0x0, "36d9555dc8e962c4bb5fd3d4be6e27e962ed9b9f198bd1693b92eab00fa6438e50cf3642a9cf9eb9d85d508496bd5559e960918882e62a11906dfb743e701955f7936261509a05848f606ea215345a2da184b9ab1994ec56cd57824321f230ea018f5f01c26ac4d8f2c428accc10e3ab7827ff4ec9a2"}, {0x4c, 0xf, 0xa, "568771c928366f0745feb68fdd74a841f3746eb2a852768642706a4c67262a8d8432b20d3679b32f562987f5a72a3c262bac27dbb7de3801ba7a994c2b"}, {0xec, 0x108, 0x4, "62c4ba34a92a8e45c1365ecc61ebdac0f17f2a4e4cbf7964256870bc1844e749217524f3a2c36f84aa1232b3f34cb1ea87fa739e87b24c00f8f57857d8f264c7c8235ffe8aead32987f3a556200208851ea8f82afe4ce8efa6f60992d1d4a8eced68fd22c040bad9eb8a90a4871a85acfed13abf867f7bf04cb307e18c6f75c04dc672a0549385de15d3b864226aa4b975ceeac7418dbec3970fa524c3cf5c5857e15a7689facbfe545c2b85e69691c412b1833fc04b4be012cdbf50d569c9fb3554ddf858bb88a462c51ff62c48d0cc863bb2d2438d4ab6e1c690ab1f"}], 0x36c}}, {{&(0x7f00000041c0)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x4e21, @remote}, 0x3, 0x3, 0x1}}, 0x80, &(0x7f0000005340)=[{&(0x7f0000004240)="c8f1326c0c54f23b0ad13c15f2d9936e030189667a04ba4b8ae70e6cbb5041c02019b5c7c1cbab7e3628dc08e7b1d8a1d4bcbbf6db78", 0x36}, {&(0x7f0000004280)="dacc2b138d1041ce0c28da64ce0cb260e0fba27db900f2ec0100debd4ccc2d7dd3337cbd3d0c8e4a913da6d1aee3484e18f8c3be414ec9d7f9d9c2601c98aabd07d57163c8fd515e015b9924214a3adbc42071760976d2625ceddffe72bdcf17c9c6e25ea7b0bb74efb778b965fa651c141ba662791db9bceadf6341a0", 0x7d}, {&(0x7f0000004300)="f9c89b9b9f3c8d242773021e4444dbab4fb4e2f3aa020b4db5e16e72e4af89e027a6e61127174a5f2b88fe1c961c800edf8e93a08fcbe0e6", 0x38}, {&(0x7f0000004340)="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", 0x1000}], 0x4, &(0x7f0000005380)=[{0x100c, 0x28, 0x7, "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"}, {0x70, 0x113, 0x9, "5ab7a1b409fd75fdd6173a4373d158773db6daec7c53a286162f1aa8c4a91194aba856838019d343007e6a0d502d16b20452d582394f34dabb13652809e8acbe2a25c4dc8f8a5a0fb5138723f4710167a63f1f7eff64629c41386f1ceb06a790fc667b04"}, {0x9c, 0x104, 0x3, "e676da6c562e794f7275252e9b43b8d5ed9eca71c893ce74e37607923ee63fc94881bef3e046002176b10a18496849ddfb4bc5e68457dbffc8f9d99b10ab2ace488d799bf327918cf82ee90699cd22e98e5056ce110d68285c41eca5086d52fd9e37faf78639c897331638e2656d7cd3e058bb6b5b34ad022b7f43021fdf5a3384ba8330aeb14046a0d289ae24ce"}, {0x70, 0x114, 0x7, "021ad70759bf645c6d5c603313e943efebf80c29b942ec3906b5806de83ef417f145ed1ac7ea34a84a74f4f382d3949fd7a5c139885544d6f6077b845d082694d7e048bc7568b682b1badc5a65974529af9317fdfd6cccacfd34a752aa441f656d"}, {0x18, 0x6, 0x0, "2b6b0d4a14f98807f1"}, {0xfc, 0x113, 0x0, "4817cd728a1caa146913e6580d2ac1e968894863f5a5377a80f08ac2d64e6a5b28fa5c41146714b875b109be2cc824cae2933adab0a6f6b8c3c7399b4de69f15bfc2811c57de045ed4b2e9af7cb3a1bd1cde7131ee0972ebf4a6493cf9b08d83fb4710efb8de89b254f30e274cd0aec35798acd1cfafbc0b91c318b459e0772812b2b4112cf446cfc84a2edf8e861ab0ba6177905b4ba63b77b2649c3b307d535e123f075c3a8469901e32c3cf4ac092af60b7c62628b5ea7007d625c76c1e40492b86d24e09ad29fcdd9dd21bcefe65bc3d6d08f8ae73e1f545e70b727d0e6f95bb2785aa5240713e25243bea813f27"}], 0x129c}}, {{&(0x7f0000006640)=@x25, 0x80, &(0x7f0000006c40)=[{&(0x7f00000066c0)="65384460aeeb271e57f90771ff143fb2eb80cc1129a7407cf28886ef45b4fd16d2107dd2075073c399fd777dc92beb81573001f6cd69bf8a969e7a838400be1c420624a8cd03b050eaf2a184e68546aa3e1407a31519643238a74af322bc34c150b32144477031005479c32cefb2b43c27082fdaf78da571f91a080147d2904f3fd30ed02889c22091856ce05ae7d9d951914f4c0708b40ae09d17c6c269b9569a84aea09382d817a2643663b8f83916ea5e94c26a46ea912877eac1a8003d7077ee2f2a7e6e95dadffbc946080f1ef5c15a56761e5e86eafe108073d8698d6a5f", 0xe1}, {&(0x7f0000000600)="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"/392, 0x188}, {&(0x7f00000068c0)="0f2145658efa81e0567374fcf44b98c3beddedd60641acafab865199d336a91a3bcd9e30103bfb2a04c743a0b3bb4aee66de8cdf253e4fb490b58de68aa2ffdd79bdd9c5639e88106e33cd254bdd08aaef69667093f7512e02537d42c0126b1dc64a077d6f12d11223dfb9c4228908d5350290d68ea82054e9b9dd4e401eba422c7952fe07a2a901033ce628bbfc23a080c1d3d3afbab1f04800dbd0343683fcace07bde366fa3e163e37bd534a941f18be41dd5d923ba2bb209a905a1a22b9830e533a1739378dbc8e72792f2fb6ffff42302f5a91ea02d91061d78d9c7a032146935", 0xe3}, {&(0x7f00000069c0)="ee9cc612e8dec9", 0x7}, {&(0x7f0000006a00)="428d08c6f903dc712b9dd859586b56275b7fc08fb1b5c30cbe5e5b03e9c68b81be06afead787158ae29d46054c331fa693e667b0f698c7188f066d2b7324c8f96743d5523bf1d813f1c630fcf74d40f88efa6064f7c7a3851748aec6fc7401949fe304c4578c1572d216340b95c2cc37d46dd8fb4b73f21b750a629b37", 0x7d}, {&(0x7f0000006a80)="93e4a88e676d235286fb49462f8169ccb15ac55796e6ed2fa658911bb1e267fac893cbb17fbbd558659869926d96a1cc7441f5125db7944f831ab917168a8fafc4e12307ddfa89d5712a28670bee10461ba53558ed365e00270a05e0b47251977b9a32adc4c9447351b27dff7ba7faf1ab2f10d122cf811b756659eec39213d1c2cb804df435f9d3035c94a7a0ed67e2f3d6eb3af89ec6a0673429a87472ca3409892fba091500e20865ceff42e8c5e21bf32637ec8a9497a79c5acb9f5a9fbbd82e", 0xc2}, {&(0x7f0000006b80)="f1daf37c27251c3de9c241e9c90aa1886229542f165d4c9ffd647848ebabc1af4059112e67f54d494e5810b5e54992bfd86c6be6471328562d868a15c243de3df7229da1c7a435d2e19da88f3214b9c963972819ca9cfc02796fd0aa3d3aea96e59a7de5333e1cbeb1c0e0b8a2592e4f07cc448b33bdb47075409036dab28909aee597a2005c792981a756f9cb5f9219ae0cadb52aee4af014c44548ab7cc3010d8b48b9055846ff6eb57d10", 0xac}], 0x7, &(0x7f0000006c80)=[{0x88, 0x116, 0x8000, "b37f03c08cd3c0ca1b51378d24478fc0b23eaab7bd97165cb77e31c950e2def2c710acc45eb3c978aa1139cb4aa00afa1a3c2ba24e81f1c8ca2ff8c0fab2e7ba061ee8d0568db8269dc51534923f8db4240e794d8b9b8ea0056405ee09646604cff18f04a565d455f20770b5b7f525c0f8087b5c77734d176f8a6b"}, {0x28, 0x118, 0x5, "a8d4634f092c4c695b76d31a717c723a760410b1a466f7623f84"}], 0xb0}}], 0x5, 0x0) 24m13.703625674s ago: executing program 0 (id=1724): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4804}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140000006c"], 0x340a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$audio(0xffffff9c, 0x0, 0x402, 0x0) (async) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) socket$netlink(0x10, 0x3, 0x10) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000280)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x40000000000, 0xffffffffffffffff, 0xffffffefffffffff, 0x0, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffeffbfffffff, 0x0, 0x2, 0x0, 0x3, 0x80000000, 0x3, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x40, 0x1000000, 0xfffffff9, 0x100200000, 0xb, 0x8, 0x0, 0x0, 0x0, 0x9, 0x0, 0x10000, 0x1000, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x7, 0x10000, 0x7785, 0x0, 0x4, 0x4, 0x8, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x80000000000, 0x0, 0x4, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x1000000000, 0x0, 0x80000000000000, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x100, 0x81, 0xfffffffffffffffd, 0x20, 0x0, 0x0, 0x9, 0x100000000000, 0x0, 0x1, 0x2, 0x0, 0x7, 0xc0c0, 0x0, 0x0, 0x0, 0xffffffe1, 0x0, 0x0, 0x3, 0x0, 0xffffffffffeffffc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf82, 0x0, 0x20000000, 0x0, 0x80]}) (async) socket$packet(0x11, 0x3, 0x300) (async) socket$netlink(0x10, 0x3, 0x4) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="7000000000010104110000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000024000280140001800800010000000000080002007f0000010c000280050001000000000008000740000000000c000f80080001400000000078ab0daf6f3ef38a342aa92ced7a9c3efca2"], 0x70}}, 0x0) (async) r6 = socket(0x10, 0x803, 0x0) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002180)=@newtaction={0x22dc, 0x30, 0x800, 0x70bd25, 0x25dfdbfd, {}, [{0x16c, 0x1, [@m_vlan={0x168, 0x19, 0x0, 0x0, {{0x9}, {0x6c, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x4}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x0, 0x7, 0x1, 0xe124, 0x6}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xcf}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xfc0}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x4}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x7}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x9, 0x0, 0x3, 0x0, 0x7}, 0x1}}]}, {0xd4, 0x6, "ddd4a868ec4ce38ea5e08a981d60d01d1a456e2815c8b69bfa52f47c68a71fe3af43bdc0b7b1f1a661eef509894bd8bfffb3ec58e0cfbb35ad8195539af9aa0a19579347d1aedc2dccba523bc05e1ad75ac1efa110f029b548ddf9276644b39fdcc17df51606a3b2536334bd923f5da68084ff692b8c721c224a0f416fb7f5641e983c6a4a9149c9ff6cb4824ad080183e175f9cf7e7fb81cbff9d13c991d8d15b0a4d4528e8a5ee5cec2b9bfae3d5eac7aff5c32f0aeee49d6ecc9c0960b852320fa9f65a108bceaeb3e8df555f4dc3"}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}]}, {0x215c, 0x1, [@m_simple={0x58, 0x1b, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x1, 0xd7f, 0x7, 0x10001, 0x9}}]}, {0x12, 0x6, "5275285d6ccfa110b6cf7f707367"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_mirred={0x10d0, 0x6, 0x0, 0x0, {{0xb}, {0xa4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0x0, 0x7, 0xffff, 0xced7}, 0x1, r9}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0x8002, 0x10000000, 0x80000001, 0xfffff698}, 0x4, r9}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0x7, 0x5, 0x2, 0x104}, 0x2, r9}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x214, 0x7ff, 0x6, 0xffffffff, 0x4d2}, 0x4, r9}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xfffffffa, 0x7ff, 0x20000000, 0xb02e, 0x6}, 0x1, r9}}]}, {0x1004, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ctinfo={0x1030, 0x16, 0x0, 0x0, {{0xb}, {0x4}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3}}}}]}]}, 0x22dc}}, 0x0) 24m13.358566639s ago: executing program 32 (id=1724): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4804}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140000006c"], 0x340a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$audio(0xffffff9c, 0x0, 0x402, 0x0) (async) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) socket$netlink(0x10, 0x3, 0x10) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000280)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x40000000000, 0xffffffffffffffff, 0xffffffefffffffff, 0x0, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffeffbfffffff, 0x0, 0x2, 0x0, 0x3, 0x80000000, 0x3, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x40, 0x1000000, 0xfffffff9, 0x100200000, 0xb, 0x8, 0x0, 0x0, 0x0, 0x9, 0x0, 0x10000, 0x1000, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x7, 0x10000, 0x7785, 0x0, 0x4, 0x4, 0x8, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x80000000000, 0x0, 0x4, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x1000000000, 0x0, 0x80000000000000, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x100, 0x81, 0xfffffffffffffffd, 0x20, 0x0, 0x0, 0x9, 0x100000000000, 0x0, 0x1, 0x2, 0x0, 0x7, 0xc0c0, 0x0, 0x0, 0x0, 0xffffffe1, 0x0, 0x0, 0x3, 0x0, 0xffffffffffeffffc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf82, 0x0, 0x20000000, 0x0, 0x80]}) (async) socket$packet(0x11, 0x3, 0x300) (async) socket$netlink(0x10, 0x3, 0x4) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="7000000000010104110000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000024000280140001800800010000000000080002007f0000010c000280050001000000000008000740000000000c000f80080001400000000078ab0daf6f3ef38a342aa92ced7a9c3efca2"], 0x70}}, 0x0) (async) r6 = socket(0x10, 0x803, 0x0) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002180)=@newtaction={0x22dc, 0x30, 0x800, 0x70bd25, 0x25dfdbfd, {}, [{0x16c, 0x1, [@m_vlan={0x168, 0x19, 0x0, 0x0, {{0x9}, {0x6c, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x4}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x0, 0x7, 0x1, 0xe124, 0x6}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xcf}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xfc0}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x4}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x7}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x9, 0x0, 0x3, 0x0, 0x7}, 0x1}}]}, {0xd4, 0x6, "ddd4a868ec4ce38ea5e08a981d60d01d1a456e2815c8b69bfa52f47c68a71fe3af43bdc0b7b1f1a661eef509894bd8bfffb3ec58e0cfbb35ad8195539af9aa0a19579347d1aedc2dccba523bc05e1ad75ac1efa110f029b548ddf9276644b39fdcc17df51606a3b2536334bd923f5da68084ff692b8c721c224a0f416fb7f5641e983c6a4a9149c9ff6cb4824ad080183e175f9cf7e7fb81cbff9d13c991d8d15b0a4d4528e8a5ee5cec2b9bfae3d5eac7aff5c32f0aeee49d6ecc9c0960b852320fa9f65a108bceaeb3e8df555f4dc3"}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}]}, {0x215c, 0x1, [@m_simple={0x58, 0x1b, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x1, 0xd7f, 0x7, 0x10001, 0x9}}]}, {0x12, 0x6, "5275285d6ccfa110b6cf7f707367"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_mirred={0x10d0, 0x6, 0x0, 0x0, {{0xb}, {0xa4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0x0, 0x7, 0xffff, 0xced7}, 0x1, r9}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0x8002, 0x10000000, 0x80000001, 0xfffff698}, 0x4, r9}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0x7, 0x5, 0x2, 0x104}, 0x2, r9}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x214, 0x7ff, 0x6, 0xffffffff, 0x4d2}, 0x4, r9}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xfffffffa, 0x7ff, 0x20000000, 0xb02e, 0x6}, 0x1, r9}}]}, {0x1004, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ctinfo={0x1030, 0x16, 0x0, 0x0, {{0xb}, {0x4}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3}}}}]}]}, 0x22dc}}, 0x0) 18m38.482270615s ago: executing program 5 (id=3039): syz_emit_ethernet(0x46, &(0x7f00000006c0)=ANY=[@ANYRES64], 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0xa, 0x4}, 0x20) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x5000002}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040804}, 0x4048080) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56649, 0xffffffff, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0xde1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000804) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0xd, 0xb}, {0xffe0, 0xd}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}}, 0x4010004) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="12010000b1bd2f087d0403508c2f010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r8, &(0x7f00000000c0)={0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="0000f50000000341e9"], 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r8, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r8, 0x0, &(0x7f0000000440)={0x24, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SIOCSIFHWADDR(r2, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x40) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000500)="0f445bc066b816010f00d866b806010f00d0c4615dd56004460fc7190f20c035000000200f22c0650fc7b0070000000f185100d8c3b9800000c00f3235000800000f30", 0x43}], 0x0, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$KVM_RUN(r10, 0xae80, 0x0) 18m35.705140376s ago: executing program 5 (id=3048): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) gettid() syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000640)={0x2c, &(0x7f0000000540)={0x20, 0x16, 0x1, 'i'}, 0x0, 0x0, 0x0, 0x0}) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000300)="580000001500add427323b472545b4562d0200ffffff81000e22d991000000000000a80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) syz_usb_control_io$hid(r0, 0x0, 0x0) 18m32.357492267s ago: executing program 5 (id=3056): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) ioctl$TIOCSERGETLSR(r0, 0x5459, &(0x7f0000000400)) 18m30.917603708s ago: executing program 5 (id=3061): connect$inet(0xffffffffffffffff, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x103080, 0x0) socket(0x22, 0x2, 0x3) r0 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x580, 0x0, 0x379}, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="70020000", @ANYRES16=r5, @ANYBLOB="0f0700000000000000006700000048000e00", @ANYRES32=0x0, @ANYBLOB="0c00990000000000390000005500c500f613d603d7eb8db53f078f78fce20937f79c"], 0x270}}, 0x0) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00') r7 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000f40)=ANY=[@ANYBLOB="12011003000000001c1b081c4000010203f208020700000000000000040003020321021009212300200122350a09058103a5a58dd381fffb0f0610"], &(0x7f0000000a80)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x300, 0xc, 0x2, 0x7, 0xff, 0x7}, 0x157, &(0x7f0000000400)={0x5, 0xf, 0x157, 0x5, [@generic={0x100, 0x10, 0xa, "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"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x7, 0x5, 0x6}, @ssp_cap={0x10, 0x10, 0xa, 0x2, 0x1, 0x5, 0xf, 0x6, [0xf]}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "b390df4ff38855f86e269a1acb43070e"}, @ssp_cap={0x24, 0x10, 0xa, 0x39, 0x6, 0x0, 0xff00, 0x8001, [0xff00c0, 0xff3f00, 0xffc000, 0xff0000, 0x0, 0x0]}]}, 0xa, [{0xcb, &(0x7f0000000b00)=@string={0xcb, 0x3, "0700000023b7d7cd5199ebd5560544c038adfa28d69e2e248ea7d092c7a7619cd19912456f48691c477c81e699f1345315d73cf09c0163900773cb8e6e0636abbff3179a761732629b7cc4a6428dbbd4d478fc617b1082aab1d8832d9dcd698db31cc77041b4f3195e2c1f7acdfd3923ad332f2f2c3b0e25e52795650418be69d716e3c900307313f4b712c8ce4f5440724eb74fd5a0101e43d610c5c0fb5c0b0fcf7a6d03007a8dde3a6a3d560662d2a9d42c01c99eb7721637f8edaaae247b55f8292f5b13d949c6"}}, {0x70, &(0x7f0000000580)=ANY=[@ANYBLOB="7003e18be208cfc2c65c2415319075425599381198fb1bce3f02b58b035144f4a9c3f170e3972a319e571dd05a0046da12d3185b2e4b0eb30da49eb5fedac85f9683cf8e7f2607954d8fe526c45ad0772150cefa6febfe03b1bad900cb708a23dce1d6f02069"]}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x2801}}, {0xfc, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"]}, {0x3b, &(0x7f0000000780)=ANY=[@ANYBLOB="3b039e5fb0e4f8501a07e5e5472b338b75f3fb753f6458d58390a4bf7b15e5feaa89d481dbbfb7329aea3d2aba0e74d5e647d3f17946acb401e30a"]}, {0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x425}}, {0x3d, &(0x7f0000000800)=@string={0x3d, 0x3, "1c746d1ded0a0cb76a21a4799b79d70909390b9b9f2ff758d73de20642a1fb909d7802d29c58189ba55b77f5ebd4af3ad77cad9d98e8d546d41d07"}}, {0x4, &(0x7f0000000840)=@lang_id={0x4, 0x3, 0x445}}, {0xd5, &(0x7f0000000880)=@string={0xd5, 0x3, "43d4d48faf5ba9ff4db0a66e510f81da60397145051ccf05aaa5c480ab05298c0fab8994b27397c3d362b5246ec412df92c64284fc70336d9f2a84c7b2eebe315794860d00fe56420948fdf5dcf63f11fe7319075e9758d7983e06504c671d8c78dca8571e7439c1f3e3c913b607ed278c3a60b7dc426ee4845e10bd11b06955116068b749b017ac13be89970619e2ae44ddaf0219d92c26452015406d0bc424e682c9338d90af99dcab37d98369e5ad16b911258fbf489f62036a8896d7d32be6316d229fc4b3e3a5e01187dccf80acdd9d9a"}}, {0xc9, &(0x7f0000000980)=ANY=[@ANYBLOB="c90386b600802ce04743c2703dfa0bb4c5b7cc22952721ab9db9988ab8dd304b2af3904cbc5eb386018ac441cfd449facfec5418e97bf4954ca93b051d916a5bec9a05e485cd0580023cd49712eafb6bbe3ae92fdd90eed1d16e8ea8c2d015f2241fb7d7e3965d20f93ee2fc3d3e67c3783a6e7cd89a1982ee8af6008d391a9150cfbc0069261d04a4c7de826acd8c729adc75f4527ac94ee4485ad179fafdaa8d7a1c56f2f54308486e5994d5bbab1cce2b2d0b5f583f79cd732c549c3d95952ea73d2b9089b2d3cc"]}]}) chroot(&(0x7f00000001c0)='./file0/../file0/../file0/../file0\x00') syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$IPVS_CMD_SET_SERVICE(r6, &(0x7f0000000e40)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000e00)={&(0x7f00000006c0)={0xa0, 0x0, 0x10, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_bond\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x780b510426b8f18a}]}, @IPVS_CMD_ATTR_DEST={0x64, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast1}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@remote}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xfffd}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x9dde}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40050}, 0x44) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="470fffff1a00010000000000000000001c00000000000000000000000c00090001041b03", @ANYRES32=0x0, @ANYBLOB], 0x28}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0xffffffffffffffff, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x1c, 0xe, &(0x7f0000001880)=ANY=[@ANYRES16=r7], &(0x7f0000000680)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) io_uring_enter(r0, 0x47ba, 0x3e82, 0x60, 0x0, 0x0) unshare(0x60600) r8 = syz_clone(0x58c4380, 0x0, 0x0, 0x0, 0x0, 0x0) getgid() r9 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x89901) open_tree(r9, &(0x7f0000000640)='\x00', 0x81101) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r8, r9, 0x0, 0x2, &(0x7f0000000000)='(\x00'}, 0x30) unshare(0x68040200) 18m25.222698007s ago: executing program 5 (id=3067): syz_usb_connect(0x5, 0x8a0, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x0) 18m22.458055898s ago: executing program 5 (id=3071): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e23}, 0x34) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000240), 0x102, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000004c0)={[0x6, 0x7, 0x6, 0xedc, 0x7, 0x2400000000, 0xffff, 0x100000001, 0x40, 0x5, 0x3, 0xffffffffffffffff, 0x9, 0x3, 0x1, 0x3], 0x10000, 0x40}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_BEACONS(r7, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000038c0)={&(0x7f0000001500)={0x30, r4, 0x1, 0x70bd07, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0xe}, @val={0x8, 0x3, r6}, @val={0xc, 0x99, {0xb, 0x43}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x40000a0}, 0x810) sendmsg$NL80211_CMD_REGISTER_BEACONS(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002bbd7000fedbdf2555000000080001005c00000008000300", @ANYRES32=r6, @ANYBLOB="be612bcd181338e9559fe8785e54567a943b07394115583219213d2b738e54397a2e700660a2ac0afeb113d42b2af2d3a23222683be1998dcee494e64e18beeca0bcf48e8bcb949b1d40a55ef3c220ecc94ac8896d79f823e232c18a9580696b2bc2b395139b242d35afcee00dc0fe965ccc7f6ef214a1edac045253b20e2255dc0a1d3ce3308a069ac2d9138590f4026c"], 0x30}, 0x1, 0x0, 0x0, 0x44015}, 0x4040040) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB='$\x00\x00', @ANYRES16=r8, @ANYBLOB="010026bd5000f8dbdf2555000000080001004f00", @ANYRES32=r6], 0x24}, 0x1, 0x0, 0x0, 0x20044040}, 0x24008004) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xbaa}, 0x50) sigaltstack(&(0x7f0000000000)={0xffffffffffffffff, 0x0, 0xfffffffffffffefa}, &(0x7f0000000080)={&(0x7f0000000040)}) r10 = gettid() rt_sigqueueinfo(r10, 0x21, &(0x7f0000002d00)={0x0, 0x0, 0xffffffff}) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000240), 0xa7c, r9}, 0x38) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r11 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000001, 0x8010, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r11, 0x0, 0x0, 0x0, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) r12 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r12, 0x4c0a, &(0x7f00000005c0)={r12, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) 18m21.864221812s ago: executing program 33 (id=3071): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e23}, 0x34) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000240), 0x102, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000004c0)={[0x6, 0x7, 0x6, 0xedc, 0x7, 0x2400000000, 0xffff, 0x100000001, 0x40, 0x5, 0x3, 0xffffffffffffffff, 0x9, 0x3, 0x1, 0x3], 0x10000, 0x40}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_BEACONS(r7, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000038c0)={&(0x7f0000001500)={0x30, r4, 0x1, 0x70bd07, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0xe}, @val={0x8, 0x3, r6}, @val={0xc, 0x99, {0xb, 0x43}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x40000a0}, 0x810) sendmsg$NL80211_CMD_REGISTER_BEACONS(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002bbd7000fedbdf2555000000080001005c00000008000300", @ANYRES32=r6, @ANYBLOB="be612bcd181338e9559fe8785e54567a943b07394115583219213d2b738e54397a2e700660a2ac0afeb113d42b2af2d3a23222683be1998dcee494e64e18beeca0bcf48e8bcb949b1d40a55ef3c220ecc94ac8896d79f823e232c18a9580696b2bc2b395139b242d35afcee00dc0fe965ccc7f6ef214a1edac045253b20e2255dc0a1d3ce3308a069ac2d9138590f4026c"], 0x30}, 0x1, 0x0, 0x0, 0x44015}, 0x4040040) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB='$\x00\x00', @ANYRES16=r8, @ANYBLOB="010026bd5000f8dbdf2555000000080001004f00", @ANYRES32=r6], 0x24}, 0x1, 0x0, 0x0, 0x20044040}, 0x24008004) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xbaa}, 0x50) sigaltstack(&(0x7f0000000000)={0xffffffffffffffff, 0x0, 0xfffffffffffffefa}, &(0x7f0000000080)={&(0x7f0000000040)}) r10 = gettid() rt_sigqueueinfo(r10, 0x21, &(0x7f0000002d00)={0x0, 0x0, 0xffffffff}) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000240), 0xa7c, r9}, 0x38) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r11 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000001, 0x8010, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r11, 0x0, 0x0, 0x0, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) r12 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r12, 0x4c0a, &(0x7f00000005c0)={r12, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) 10m14.220216714s ago: executing program 4 (id=4640): socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a01010000ff97000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) syz_emit_ethernet(0x382, &(0x7f0000002680)={@local, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "000300", 0x34c, 0x2f, 0x0, @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {[@dstopts={0x16, 0x11, '\x00', [@jumbo={0xc2, 0x4, 0x6}, @calipso={0x7, 0x38, {0x2, 0xc, 0xee, 0x4, [0x31ed, 0x8, 0xb0e0000000, 0x27a, 0x7, 0xb]}}, @calipso={0x7, 0x30, {0x3, 0xa, 0x0, 0x30, [0x9, 0x1, 0x7, 0x6f2432c9, 0xffffffffffffff00]}}, @hao={0xc9, 0x10, @loopback}, @jumbo={0xc2, 0x4, 0xf}, @enc_lim={0x4, 0x1, 0xa}]}, @srh={0x5e, 0xc, 0x4, 0x6, 0x1, 0x8, 0x6, [@local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, @private2, @dev={0xfe, 0x80, '\x00', 0x37}, @mcast1]}, @hopopts={0x2b, 0x13, '\x00', [@hao={0xc9, 0x10, @private1}, @jumbo={0xc2, 0x4, 0x90000000}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x3, 0x7d, "a890d3c4bdbc3667a29f69691b788fb4d21488a079605efec82506eb2da6d5f861fca85657cc700ccc38c927d5006c3cde832c1abeec4c743741e425a8b2ac42f65a45961f864a26245ae4caaaf2b756ae9f0ff05a097c26867474fcc6af50d9a7c751dbf718bb9d43748248165e6e2054d168da03cb059e424defe4f1"}]}, @hopopts={0x2c, 0x2, '\x00', [@hao={0xc9, 0x10, @local}]}, @hopopts={0x0, 0x1d, '\x00', [@jumbo={0xc2, 0x4, 0x3}, @padn, @generic={0xf, 0xe3, "316e20ab2cb1d2cd09d0aa72cd57ee27f5e85316d6ddca130e4339ee48febfb1e824637b2a6c6554de04bf634f6b036a41f85c33887dc366df3981adf61a630cbd1ba8d1c10368e2a8c9d111c4f39d662cfed29b903d750688c3afbb49e36809e97ee5b67911a4a9a94f3675fa2bce3946ae5d11924c3d98478441a69e5fb44048be2bfc66c4e9d652d73cf0d19fe3c5dab7eed7fabe5db4786b984921557a83b0ec3ceb945a6ea6ccb4ce1fe4815a39235439327c51d9dbab5b2e0d2de7003c8779b9de9789ef12fee53e2394fcdb4a355f874861dde34db71eb22f4c9562bdadff3c"}]}, @srh={0x33, 0x4, 0x4, 0x2, 0x3, 0x68, 0x9, [@private0={0xfc, 0x0, '\x00', 0x1}, @private0]}, @dstopts={0x32, 0x2, '\x00', [@hao={0xc9, 0x10, @private2}, @padn={0x1, 0x1, [0x0]}]}], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x880b, 0x0, 0xfffe}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x57}, {}, {0x8, 0x88be, 0x0, {{0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}}}, {0x8, 0x22eb, 0x0, {{}, 0x2, {0x2951}}}}}}}}}, 0x0) 10m14.034992124s ago: executing program 4 (id=4641): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x0, 0x24000014) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000100)={0x28, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0xd, 0x3}, 0x0) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, 0x0) syz_open_dev$video(0x0, 0x8082007c, 0x121000) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000c00)=@filter={'filter\x00', 0x42, 0x4, 0xb5c, 0xffffffff, 0x9e4, 0x9e4, 0xec, 0xffffffff, 0xffffffff, 0xac8, 0xac8, 0xac8, 0xffffffff, 0x5, 0x0, {[{{@ip={@empty, @dev, 0x0, 0x0, 'bridge_slave_1\x00', 'nr0\x00'}, 0x3127, 0xc8, 0xec, 0x1ba, {0x46010000}, [@common=@addrtype={{0x2c}}, @common=@addrtype={{0x2c}}]}, @REJECT={0x24}}, {{@uncond, 0x287, 0x898, 0x8f8, 0x0, {0x0, 0x4}, [@common=@unspec=@u32={{0x7e0}, {[{[{}, {0x1000000}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}, {[{}, {}, {0x0, 0x2}], [{}, {0x0, 0x8}]}, {}, {}, {[{}, {}, {}, {}, {}, {0xfffffffe}], [{0x6}, {0x0, 0x3}], 0xfe}, {[{}, {}, {}, {}, {}, {}, {0x0, 0x2}], [{}, {}, {}, {}, {}, {}, {}, {0x0, 0xfe40}]}, {[{0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}, {[{}, {}, {}, {}, {}, {}, {}, {}, {0x3}]}, {}, {[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}, {[], [{}, {0x4}]}], 0x5}}, @common=@unspec=@ipvs={{0x48}, {@ipv4=@private=0xa010102, [0xff000000, 0xff, 0xff0000ff], 0x4e24, 0xc, 0x2, 0x4e24, 0x1, 0x8}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x2, 0x1], 0x1, 0x1}, {0x0, [0x4, 0x0, 0x5, 0x1, 0x5, 0x4], 0x4, 0x3}}}}, {{@ip={@multicast1, @broadcast, 0x0, 0x0, 'lo\x00', 'veth0_virt_wifi\x00'}, 0x0, 0xc0, 0xe4, 0x0, {}, [@common=@osf={{0x50}, {'syz1\x00', 0x0, 0x1, 0x1, 0x1}}]}, @REJECT={0x24}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0xbb8) socket$netlink(0x10, 0x3, 0x4) (async) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r3, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='net/rt_acct\x00') preadv(r5, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x1, 0x96, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast2, @in=@private=0xa010100, 0x0, 0x0, 0x4e21, 0x0, 0x2}, {0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9c0, 0x3}, {0xffffbffffffffffc, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in=@empty, 0x4d3, 0x3c}, 0xa, @in=@multicast2, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x4000000, 0x1}}, 0xe8) (async) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x4e21, 0x2, @mcast2}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001bc0)={&(0x7f00000000c0)='afs_send_data\x00', 0xffffffffffffffff, 0x0, 0xb49}, 0x18) (async) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4c, 0x0, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000017c0)='mountinfo\x00') (async) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) lseek(r6, 0x289e0cb5, 0x0) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_control_io(r7, 0x0, 0x0) (async) syz_usb_control_io$hid(r7, &(0x7f0000000b80)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00'], 0x0}, 0x0) 10m13.21723472s ago: executing program 4 (id=4645): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_io_uring_setup(0x1714, &(0x7f0000002040)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x2c, 0x2, r0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0}}) add_key$user(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xffffffffffffffff) io_uring_enter(r2, 0x27e2, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x2) sendmmsg$unix(r1, &(0x7f000000f7c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8081}}], 0xf000, 0x800) (fail_nth: 16) 10m12.793909757s ago: executing program 4 (id=4647): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_io_uring_setup(0x1714, &(0x7f0000002040)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x2c, 0x2, r0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0}}) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha224)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0/../file0\x00') munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r9 = fanotify_init(0x200, 0x0) fanotify_mark(r9, 0x1, 0x40000032, r8, 0x0) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000e40), 0x40080, 0x0) ioctl$TIOCPKT(r10, 0x5420, &(0x7f00000000c0)=0x1) ioctl$TCSETS(r10, 0x5402, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "fe94b89fc43c3328eae0cae1f5eba329e6f216"}) splice(r10, 0x0, r8, 0x0, 0x7ffff000, 0x1) readv(r9, &(0x7f00000001c0)=[{&(0x7f0000001280)=""/4096, 0x1000}], 0x1) pivot_root(&(0x7f0000000200)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0\x00') r11 = accept4$alg(r5, 0x0, 0x0, 0x800) sendmsg$alg(r11, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000004c0)=':', 0x1}, {&(0x7f00000005c0)="f4", 0x1}], 0x2, 0x0, 0x0, 0x4008080}, 0x20044081) add_key$user(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xffffffffffffffff) io_uring_enter(r2, 0x27e2, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x2) io_uring_setup(0x74f3, &(0x7f0000000240)={0x0, 0x6b7d, 0x400, 0x2, 0x2bc, 0x0, r2}) sendmmsg$unix(r1, &(0x7f000000f7c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8081}}], 0xf000, 0x800) 10m11.900936505s ago: executing program 4 (id=4652): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async, rerun: 64) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async, rerun: 64) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000000040)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}], 0x1, 0x4001) (async, rerun: 32) r0 = socket$packet(0x11, 0x3, 0x300) (rerun: 32) getsockopt$packet_int(r0, 0x107, 0xb, &(0x7f0000000000), 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x100000}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sendmsg(r2, 0x0, 0x0) (async, rerun: 64) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) (rerun: 64) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async, rerun: 64) r5 = socket(0x400000000010, 0x3, 0x0) (rerun: 64) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0xffe0, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x80) bind$alg(r5, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-ni\x00'}, 0x58) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) (async, rerun: 64) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) (rerun: 64) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) (async) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_MGMT(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000000fadbdf255200000008000300", @ANYRES32=r10, @ANYBLOB="0600280000000000050088"], 0x2c}, 0x1, 0x0, 0x0, 0x20048084}, 0x4000000) ioctl$KVM_PRE_FAULT_MEMORY(r8, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) 10m11.602605309s ago: executing program 4 (id=4654): syz_usb_connect(0x5, 0xbc, &(0x7f0000000080)={{0x12, 0x1, 0x250, 0x0, 0xde, 0xd4, 0x20, 0x506, 0xa11, 0x739b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xaa, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x6, 0x0, 0x0, 0xc8, 0x94, 0xc2, 0x0, [@uac_as={[@as_header={0x7, 0x24, 0x1, 0x9, 0x8, 0x1}, @as_header={0x7, 0x24, 0x1, 0x1, 0x0, 0x3}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x1, 0x60, 0x2, "2d367480f00f"}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x5, 0x100, 0x5, "01003ed76c"}, @as_header={0x7, 0x24, 0x1, 0xc, 0x40}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x5, 0x9, 0x1, "9cf7a01b48"}]}, @generic={0x58, 0xe, "6f6fe79817626f1efaec73eb4ecbce1346d9726b11040da75be073fb18d6268a62f42b61017cf8c2c51acf8939198fb7469e6de2248e734d57ed4331fd208a9389c0914089e8714578567f05ebf5de8f76feffa7da92"}]}}]}}]}}, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) accept4(r0, &(0x7f0000000140)=@l2tp={0x2, 0x0, @remote}, &(0x7f0000000040)=0x80, 0x80000) (async) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000000)={0x200}, 0x4) 10m11.139504391s ago: executing program 34 (id=4654): syz_usb_connect(0x5, 0xbc, &(0x7f0000000080)={{0x12, 0x1, 0x250, 0x0, 0xde, 0xd4, 0x20, 0x506, 0xa11, 0x739b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xaa, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x6, 0x0, 0x0, 0xc8, 0x94, 0xc2, 0x0, [@uac_as={[@as_header={0x7, 0x24, 0x1, 0x9, 0x8, 0x1}, @as_header={0x7, 0x24, 0x1, 0x1, 0x0, 0x3}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x1, 0x60, 0x2, "2d367480f00f"}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x5, 0x100, 0x5, "01003ed76c"}, @as_header={0x7, 0x24, 0x1, 0xc, 0x40}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x5, 0x9, 0x1, "9cf7a01b48"}]}, @generic={0x58, 0xe, "6f6fe79817626f1efaec73eb4ecbce1346d9726b11040da75be073fb18d6268a62f42b61017cf8c2c51acf8939198fb7469e6de2248e734d57ed4331fd208a9389c0914089e8714578567f05ebf5de8f76feffa7da92"}]}}]}}]}}, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) accept4(r0, &(0x7f0000000140)=@l2tp={0x2, 0x0, @remote}, &(0x7f0000000040)=0x80, 0x80000) (async) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000000)={0x200}, 0x4) 7m11.894216084s ago: executing program 6 (id=5389): socket$nl_route(0x10, 0x3, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000400)={[0xfffffffffffffff5]}, 0x8, 0x80000) r0 = socket(0x28, 0x805, 0x0) connect$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r1 = syz_io_uring_setup(0x1458, &(0x7f00000003c0)={0x0, 0x4, 0x10180, 0x2000, 0x3ae}, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='9'], 0x38}, 0x1, 0x0, 0x0, 0x41}, 0x37aea8e708e70634) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x51, 0x0, 0x0, 0x0, &(0x7f0000002000/0x4000)=nil, 0x4000, 0x14}) io_uring_enter(r1, 0x2d3e, 0xfffffffd, 0x0, 0x0, 0x0) (fail_nth: 13) 7m11.653535374s ago: executing program 6 (id=5390): prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000000)) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000040)) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000080)) prctl$PR_GET_UNALIGN(0x5, &(0x7f00000000c0)) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000100)) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000140)) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000180)) prctl$PR_GET_UNALIGN(0x5, &(0x7f00000001c0)) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000200)) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000240)) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000280)) prctl$PR_GET_UNALIGN(0x5, &(0x7f00000002c0)) openat$uinput(0xffffff9c, &(0x7f0000000300), 0x802, 0x0) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000340)) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000380)) prctl$PR_GET_UNALIGN(0x5, &(0x7f00000003c0)) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000400)) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000440)) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000480)) prctl$PR_GET_UNALIGN(0x5, &(0x7f00000004c0)) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000500)) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000540)) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000580)) prctl$PR_GET_UNALIGN(0x5, &(0x7f00000005c0)) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000600)) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000640)) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000680)) prctl$PR_GET_UNALIGN(0x5, &(0x7f00000006c0)) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000700)) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000740)) 7m11.557575724s ago: executing program 6 (id=5392): syz_emit_ethernet(0x8a, &(0x7f00000006c0)={@multicast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x4, 0x7c, 0x65, 0x0, 0x2, 0x1, 0x0, @rand_addr=0x64010101, @remote}, @dest_unreach={0x3, 0x4, 0x0, 0x0, 0x6, 0x1f, {0x18, 0x4, 0x3, 0x3a, 0x7ff, 0x68, 0x1ce2, 0x1, 0x11, 0xe5c, @broadcast, @broadcast, {[@generic={0x44, 0x7, "8af1992842"}, @ssrr={0x89, 0x7, 0x32, [@loopback]}, @timestamp_prespec={0x44, 0x3c, 0x22, 0x3, 0x4, [{@loopback, 0x7}, {@rand_addr=0x64010102, 0x3}, {@empty, 0x6}, {@multicast1, 0x7}, {@multicast2, 0x7f}, {@multicast2, 0x7}, {@broadcast, 0x9}]}]}}}}}}}, 0x0) syz_usb_connect$cdc_ecm(0x1, 0x4d, &(0x7f0000000400)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x2, 0xc73ebdfa468265f4, 0x7, [{{0x9, 0x4, 0x0, 0x7, 0x2, 0x2, 0x6, 0x0, 0x6, {{0x5}, {0x5, 0x24, 0x0, 0x8001}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x9, 0x5, 0x81}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x7ff, 0x6, 0x4, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x4, 0x3, 0xea}}}}}]}}]}}, &(0x7f0000000940)={0x0, 0x0, 0xf, &(0x7f0000000080)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x3, 0x3, 0x0, 0x3}]}, 0x1, [{0x0, 0x0}]}) 7m8.363967884s ago: executing program 6 (id=5406): userfaultfd(0x140800) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="20001f143c531f201f4500000f14010028bd7000fcdbdf250d0045006f70615f766e696300030000"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0xc004) r0 = socket$nl_generic(0x10, 0x3, 0x10) memfd_create(&(0x7f0000000b00)='prodM\xb0\xea\a\x06\xbe\xaen/\xce4\xb7\xc1\xef\xba!\x9d\rSt\xa24\t\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1dz\xd05\xe2e,\xb1\x84\xea\x91^%A\xe5\x9e\x13TdT\xc6^p\xb0#R\x04\x06\xae\xebA;Y\xeb\x8f\xec\xb4\xf9\x17\xb7\x04\xc2\xc0\xc6\xb4\v\xff\xfc\x88\x90\xabC\x02\x00\xf04\x03\x88\xae9\'>R^P{Vr!\xe2W\xc72\xea\xb7Wp\xc36\x96\xffZ\\A@\x00\x00\x00\xc9\xf3Y\xb8\x89#\xa1\xb1)Dk\xeb\xa1\t\x00{u[\xbd\x9d\xf4\xbf\\\xce\x02P\xf2MY\x05^\xffj\x9c\x14\xb7\xb6v\x1d*1>\x00 \x00\x00\x00\x00\x14C?]\x8c\xb4Y\xcf\x80\x85\xd6\x036\xc8~\xa8\f\x00\x00\xb5M\x9a\x9dc\xaaAU\xec\xe06\xed\xe4\xfb\xdf\a\xd0lg\x13\xf9\x8b:s>\xd7s\xef\xb3\x9f#\x15)\xf9\xe10\xc7\xb262\x00\x00\x00\x00\x00\x00\x00\x00Nz\x0eu\x8f\x01\x00\x00\x00\x00\x00\x00\xdd\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc3\xa7/\x0f\x9b`\xa5\x98\x81a\xeev\x00\x00\x00\x00\a\x10\x00m2\xf2\xd8,\x17\xf8\x8e\xae\xc8\xad\xed<\"\x8e\n\x9d\xb13\x8d\xef\x96\xd2I\"8=tg\xdfU\xd0q\x95/f\xec\xdc\xa3\xe1[\xc0\xaa\xefz\xc9\xf4[\x00\x00\x00Q\xff}5\x94\x88\xa1\xdc\xa1g\xe0q\xc5:\xe4\xdf\x80\xb3,\xb9\xb2\xdc\x81\x9f6\x0f\x84WY\xbfSY`\xb8\a\x19\xb1\x058\xa4\xc3\xbb\xf8aB:\x84\x02?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3o-GU\xb0\x00F\xb3o(aI[\xd6\x9fG\xaeI\x83\x93\x8cC\xc0#\xe0q\xd0Ex|\xdb\xa8\x16\xfe>:\t0\xfd\x8a\xc7\x84\xb5\xc7M-0A\xf0\x94\xf3\xcc\x8d\xbb3\\\"\x882\xb3\xa84\xac\x00\xdd}Ft\xc6\xcc\f}1X#\xe4\xe1\x94i\xce\xa1\xff\x95\x80\xb4T\x9c\x01\xf3\x1cLB\x94m(m\f\xbc\xebY\xa0\xf7\xf0\x9d\x10\xbd\x86\x1by\xe6\xdf\xc0\xc5\xb9\xb9\xbf\xdf~9\nC\xe9\xc5\x0e\xda\x9c(\x9b\"\xc7\x97\xfc\b\xd9\xc2T\xa7*}]\xc8\xb3 .\x9b\x89\x0f\xf8$\xdd>lU\x13EG\xbb1] \xda\x19\xc5\x9b\x15\x95\xc4\xfcw\xbb\x92\x91\xc4\xa6\x907XK\xfc\x17]\xfa\xff\'\xef\x92\x1c\xb8\x1fK\xb2o \xd1\xbd\xb2\x11+\xa3R\xefQ\xc2\xbdW\x05\xec\xb3=@\x03\xc6^\xa2\x15%\xb0\'D#\xb6Q\x8f\x82?S>\x0fP\x9cE\x92{d\xe6\x9cj1\x87\xb3\x01\xde\xe8\x89\xc4s\xb7\x14~}\xaa\x8c\xc3\x95BAE\xf2.\x8f#;a\x94\"\xd1U\xff\xe8v\xd3\x84d\xf4\x134\xa6XI\xe5h\xaa\x15\x9a\xf7Z\xe3%\x88p\x90\xbb\x9dt\xa3\xe1\r\x8d\x94\"\x19\x8b\x17)\xea\xd5\x17\xeb\xe4\x1b\x0fBZ1\xbe\xee\xfa\x1c\xf9\xa6\x11\x94\x06\\P:\xaf\xcex\xc2\x82\x9a\x16\xfc\xa1\xf9q\x12\xe3\x1a\xdc\xb7\x12\xbba\b\xbb\xed\xb2\xd1W\xe2\x8b\x8d8}\x10W\xbd\xa60A\xc3\x03\xfa\x890\x86#\bQ\xcb)\x00]\x9e\x14\xd2\xea\x82\xa8\xb7ZG\x15r\xf1\t\x00\x00\x00 \xc1\xaf\x19?\x00\\\x91\x13\x1b8\xe1\xc3\xa4\v\x94\xbfJ\xb5\xde\x95\x82\x00]B|\xe2[%\xe3\xf0\x04\xba\xed\xdb\xf5\x7f\x9d\xfe>\xf6m$M&\x7fq]\xe4\xf6\x82\xc3\x00\xb1zg}\x99E\xa4\x19\xe9\x1a4a\xd75D-k\x84\xa6\x12+\xebk\xa1\xfek\x89\xef\x18\xc1)6\xa65\xe2D\xbe\xe1\xdfq\xdd68\xf37g\xab9m\xe7\xddO\v?\xe0\xbe}\xa9U\xc7{\xd3\x16W\xbb\xe5\xd2\x93\xfe\xa4\x9d\r$\xe91c8`\x86\xbc)\xe29\xc3}\xb9P\xd5F\xc6\x12\x8c_x\xa8\xfa\xb5K\x03\x85\x93k\xe1\x8e\x1f)\".\xcc\'\v\xa6\x1bj\\\n\xe98yA\xd8T\x85\x80A\xcbo\x99\x99\xeb)r\x1a\xce\x18(\x185LL\xbcOeO\'\xe2\x86&\xe4\xe2\xe7~\x92\xa2\xb2\x1b\xc3\x00\x85\xce\xad7\x87\xa0\xfcc\xf5\xf8\xaf\v,q\xd4\x18\xbdM\x1a\xde\xba*L\x05m6\xecH\xd0T\xb8m\xdb\b\xa6\x02\xfb\x13\xac\x91\x8a\x8d\x94\x93\x8d=\xb1\x84\x9c\x9b\xe5\xc7\xa6\xc9Q\xc1eUc\xcc\x180^\x00\x00\x00\x00\x00\x00\x00\x00\xe7]6+\\\x00\x00\x00\x00?#C.\x1dj\xd9\xc3\xdd&\x80g:N\xec\x06[\x8f\x92\xe2\xb01\xb0\xef\x10,\xde\xf3\x86D\x8b\xf7\xf1>AH\xef\\\xf9\x8b\a\xe0\xb2\xcb\xf0\x97\b\r\xd5`\xb9\xd6\xa4\x1e\xbe\x12-}\xc5\x84\xde@\x18\x87\f\x01O\xedS\x8f\x9en,\xbce\xb2\xe4\x82v\x1c\xed\x84-s\xab\x06b\x9c\xba\xec\xa5\xc9A\x84\xd0\xe0 S\xc8\xa2\xaf\x85\v\xad\xa5\x88\xcf\xb6}`\x14\'\xea\xbfN\xac)\xa1\xe8\xb2\x9f\x112TJ\x16\x8c9\xe9\xf5\x18\x15Dd\x8a%>\x91\x93\x88\xe9\x18\x82]\x9e&\xfa\xaa\xfa8Z2\x00'/1301, 0x3) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r2 = socket$kcm(0x2, 0x5, 0x73) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x101041) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) write$sndseq(r3, &(0x7f0000000240)=[{0xe, 0x81, 0x0, 0xfd, @time={0x5, 0x5}, {0x10, 0x49}, {0xe}, @raw8={"1f000e0000000100"}}], 0x1c) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) io_uring_register$IORING_REGISTER_PBUF_STATUS(0xffffffffffffffff, 0x1a, &(0x7f0000000680)={0x1}, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_STATION(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c00000086fbe6", @ANYRES16=r5, @ANYBLOB="030300000000000000001100000008000300", @ANYRES32=r7, @ANYBLOB], 0x1c}}, 0x0) sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f00000006c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000600)={&(0x7f0000001e00)=ANY=[@ANYBLOB="1c000000", @ANYRES8=r4, @ANYBLOB="000421bd7000fddbdf250180000000000000", @ANYRES32=r7, @ANYBLOB="25ab00000000000008000098f4bc48eb0060fd94110fbfe510127c9aaaae3b86c236785f09d9be0c0d1e313e48"], 0xe}, 0x1, 0x0, 0x0, 0x2c080}, 0x80) socket$alg(0x26, 0x5, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=@delchain={0x60, 0x65, 0x8, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x1, 0xfff3}, {0x8}, {0xd, 0xc}}, [@filter_kind_options=@f_bpf={{0x8}, {0x2c, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file2\x00'}, @TCA_BPF_NAME={0xc, 0x7, './file2\x00'}, @TCA_BPF_FLAGS={0x8}]}}, @TCA_RATE={0x6, 0x5, {0xa8, 0x3e}}]}, 0x60}, 0x1, 0x0, 0x0, 0x81}, 0x10400) socket$inet_sctp(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x81c0, 0x0) execve(&(0x7f0000000140)='./file2\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000039c0), 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) 7m6.954147375s ago: executing program 6 (id=5411): r0 = fsopen(&(0x7f00000000c0)='bdev\x00', 0x1) r1 = mq_open(&(0x7f000084dff0)='\xa1sxt\x1a\x00\x00\x00\x00\x00\x00\x00\x01\x88\xbdd', 0x6e93ebbbcc0884f2, 0x100, &(0x7f0000000300)={0xfffffffffffffffe, 0x6, 0x3}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) r2 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x103cfa, 0x100, 0x2, 0x69}, &(0x7f0000000300)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r2, 0x47f6, 0x0, 0x2, 0x0, 0x0) mq_timedsend(r1, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(r1, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='source', &(0x7f0000005fc0)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0x0}) bind$can_j1939(r1, &(0x7f00000000c0)={0x1d, r2}, 0x18) connect$can_j1939(r1, &(0x7f0000000140)={0x1d, r2, 0x0, {0x1, 0xf1, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) setsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, &(0x7f00000003c0)=0x5, 0x4) sendmmsg(r1, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3400000010000700"/20, @ANYRES32=0x0, @ANYBLOB="040101000000000014000300767863616e3100"/28], 0x34}}, 0x0) inotify_init1(0x800) (async) openat$ptmx(0xffffffffffffff9c, 0x0, 0x800, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, 0x0) (async) io_uring_setup(0x53b6, &(0x7f0000000140)={0x0, 0x208, 0x0, 0x0, 0x2b7}) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(0xffffffffffffffff, 0x3ba0, &(0x7f00000006c0)={0x48, 0x1, 0x0, 0x0, 0x1000, 0x2000}) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan1\x00'}) (async) bind$can_j1939(r1, &(0x7f00000000c0)={0x1d, r2}, 0x18) (async) connect$can_j1939(r1, &(0x7f0000000140)={0x1d, r2, 0x0, {0x1, 0xf1, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) (async) setsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, &(0x7f00000003c0)=0x5, 0x4) (async) sendmmsg(r1, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3400000010000700"/20, @ANYRES32=0x0, @ANYBLOB="040101000000000014000300767863616e3100"/28], 0x34}}, 0x0) (async) 6m48.548148671s ago: executing program 35 (id=5425): inotify_init1(0x800) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) io_uring_setup(0x53b6, &(0x7f0000000140)={0x0, 0x208, 0x0, 0x0, 0x2b7}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(0xffffffffffffffff, 0x3ba0, &(0x7f00000006c0)={0x48, 0x1, 0x0, 0x0, 0x1000, 0x2000}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f00000000c0)={0x1d, r2}, 0x18) connect$can_j1939(r1, &(0x7f0000000140)={0x1d, r2, 0x0, {0x1, 0xf1, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) setsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, &(0x7f00000003c0)=0x5, 0x4) sendmmsg(r1, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3400000010000700"/20, @ANYRES32=0x0, @ANYBLOB="040101000000000014000300767863616e3100"/28], 0x34}}, 0x0) inotify_init1(0x800) (async) openat$ptmx(0xffffffffffffff9c, 0x0, 0x800, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, 0x0) (async) io_uring_setup(0x53b6, &(0x7f0000000140)={0x0, 0x208, 0x0, 0x0, 0x2b7}) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(0xffffffffffffffff, 0x3ba0, &(0x7f00000006c0)={0x48, 0x1, 0x0, 0x0, 0x1000, 0x2000}) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan1\x00'}) (async) bind$can_j1939(r1, &(0x7f00000000c0)={0x1d, r2}, 0x18) (async) connect$can_j1939(r1, &(0x7f0000000140)={0x1d, r2, 0x0, {0x1, 0xf1, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) (async) setsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, &(0x7f00000003c0)=0x5, 0x4) (async) sendmmsg(r1, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3400000010000700"/20, @ANYRES32=0x0, @ANYBLOB="040101000000000014000300767863616e3100"/28], 0x34}}, 0x0) (async) 16.367963257s ago: executing program 7 (id=6940): socket$inet6(0xa, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000002b80), 0x1, 0x8000) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc2c45513, &(0x7f0000002e00)={{0x9, 0x7, 0x3, 0x2, 'syz0\x00', 0x7b}, 0x0, [0x1, 0x200000a, 0x1000, 0x0, 0x1d1, 0x7fffffff, 0x5, 0x5, 0xbc0, 0x7, 0x15b, 0x7, 0x5944, 0x5, 0x7, 0x8004a7, 0x9, 0x5, 0xb, 0x3, 0x2c, 0x400, 0x2000040, 0x10040002, 0x7, 0x0, 0x2, 0x800, 0x3, 0x3, 0x4, 0x6, 0x6, 0xfff, 0x3ff, 0x1, 0x5, 0x3, 0x5, 0x6, 0x3, 0x78a, 0xbfff8007, 0x200000e, 0xe, 0x0, 0x2, 0x5, 0xe, 0x4, 0x9, 0x80000001, 0x400, 0x1ff, 0x9, 0xfffff647, 0x408, 0x4, 0x4000001, 0x9, 0x8, 0x9, 0x5, 0x8, 0x98, 0xbe, 0x1, 0xa, 0x7, 0x80000000, 0x81, 0x10001, 0x2, 0x80000001, 0x69e, 0xb, 0x7000000, 0x1, 0x8, 0x100009, 0x7, 0x4, 0x1, 0x8, 0xfffffffd, 0xffff, 0x6, 0x8, 0x0, 0x4, 0xef, 0xff, 0x4, 0xffffffff, 0xf8a, 0x58a0, 0x1, 0x9, 0x895, 0x6, 0x9, 0x89, 0xfffffffe, 0xa1a9, 0xe0b2, 0x9, 0xfffff561, 0x12, 0x3, 0x3, 0xfffffffa, 0x3, 0x2, 0x1, 0x2ba, 0x4, 0xe, 0x5, 0x8, 0x2, 0xfff, 0x4, 0x1ff, 0x7, 0x2, 0x7, 0x6, 0xff]}) r2 = socket$inet6(0xa, 0x80002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setreuid(0x0, 0x0) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x400}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) r5 = socket$inet(0x2, 0xa, 0x0) r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9e, 0x17, 0x36, 0x10, 0x17ef, 0x721e, 0xde06, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r6, &(0x7f0000000340)={0xc, &(0x7f00000005c0)={0x0, 0x2, 0x6c, {0x6c, 0x22, "c2990aca09d39c0b66d3efb9a6e8f233ef5ac80139e14e563c014f463cdbdba6cf68b3cd923f34270a6f5b50fd995363c182c84010c5401641ab80d47a4572e066e2ed890319a6739d918ee3171373aab6c2dbd4eb3a79cc96442edfed984713589ac6cb5abe2cedb0de"}}, &(0x7f0000000300)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000008c0)={0x24, &(0x7f0000000680)={0x0, 0x9, 0x48, "34556da5fc0c698f2f9a1a194ef141d04960452b35e571b66f98983bcc83870116b1eaa210ab5134636756a50db8700ea163f4b2c18c85d8142f3f173bd26c14cef9b22042824dd8"}, &(0x7f0000000700)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000740)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000780)={0x20, 0x80, 0x1c, {0x40, 0x7, 0x1, 0x2, 0x9, 0x7, 0x8, 0x9, 0x0, 0x9, 0x101, 0x2}}, &(0x7f00000007c0)={0x20, 0x85, 0x4, 0x2}, &(0x7f0000000800)={0x20, 0x83, 0x2}, &(0x7f0000000840)={0x20, 0x87, 0x2}, &(0x7f0000000880)={0x20, 0x89, 0x2, 0x1}}) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r8, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r8], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r10 = socket(0x10, 0x3, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0xffffffffffffffdb, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x3c, 0x28, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0x9}, {}, {0x9, 0x7}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x3, 0x1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x810}, 0x40c4) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYRES32=r5, @ANYBLOB="4649d373e40a8a8a6d151e2e32d9e508ec782e9a80f9659e1f78bcc81f9218f34ba505cc85dee97322cf3df73ce6283fe53f7e5bbd5569b74c17b06ebf28bd6ef5e728919b22c7c4b11cd82a18645a165e2dc6be6c833548b0139ebaa434bc8bec36a30c4b785f724ad3c6f51e1a846b3f44e49274f3336102cb3b2f1bf65ccae23d3e82b9a0b2be22e5a4a59e3bd1c773e615b8b6745acd00d59eceda8b823151d90b610feb9b896c5b021656cac68e86bd45193378e80d54c687b2ba06ecde6976b747aa17fce794e6957cb142aef582144a4a124c2aa41ff9c5c5504e9cfd48f9fc99a3c209e34bae3a976c04117cc896"], 0x24}}, 0x0) 13.026018203s ago: executing program 7 (id=6946): syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100002439da20cd061201a2d20102030109021b0001000000000904000001717ffe000905a1", @ANYRES64], 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) r0 = socket$netlink(0x10, 0x3, 0xa) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x48000) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000e00)={0x9, 0x9, 0x0, 'queue0\x00', 0x401}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, &(0x7f00000001c0)={0x0, 0x80, 0x1, 'queue0\x00'}) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0202ff00000000000ec00058000b4824ca", 0x24}], 0x1) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$XDP_STATISTICS(0xffffffffffffffff, 0x11b, 0x7, &(0x7f0000000000), &(0x7f00000000c0)=0x30) vmsplice(r2, 0x0, 0x0, 0x1) 9.844383579s ago: executing program 7 (id=6961): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x46d, 0xc293, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x394}}}}]}}]}}, 0x0) syz_usb_connect$cdc_ecm(0x5, 0x103, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xf1, 0x1, 0x1, 0x7, 0x10, 0x2, [{{0x9, 0x4, 0x0, 0xfc, 0x2, 0x2, 0x6, 0x0, 0x2, {{0x9, 0x24, 0x6, 0x0, 0x0, "cf19b84d"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x8000, 0x1, 0x6}, [@mdlm_detail={0x49, 0x24, 0x13, 0xd1, "1b8210f5a687601532ab750e4724666b80c4f54d47cf2f5c39d43f42308f56894277fb62af09cd31f94e3458a979e0c3f702b5a2b187f832fc53fa6c236902c73ab5f476e7"}, @mdlm_detail={0x5d, 0x24, 0x13, 0xfd, "befa7db460321913aaa02d82c464ee7370e24e093d22c8e2c4d4924724962359a289c4edadad7b33653d350f6842b8189550a6aab539f88751c92b0216f821a841d6dc36c7a085443efbd273707e5c7454d1fd8977acdba07b"}, @country_functional={0x6, 0x24, 0x7, 0x2, 0x7}, @ncm={0x6, 0x24, 0x1a, 0x1, 0x24}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x8, 0xe, 0x1, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x7, 0x7f, 0x81}}}}}]}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x201, 0x2, 0x6, 0x8, 0x8, 0x81}, 0x0, 0xfffffffffffffffe, 0x4, [{0x91, &(0x7f0000000200)=@string={0x91, 0x3, "77b3c55721d5710f64bbdf88076960d2d134172de1762af40521b370f027b729eed16506b290d5271cc2f1fe27cc7b2b00131c61a5c1528b985d5703e9c2483a5a182b0bd44f6b4290539265ca86aa5640daca2af435fa4eb56069642ff3756664eb208da5ca1a687b5f6f8ca036d728af113152d8d5ba7b9580c077159afa34dd8141d76f4838f045e85aa73b7369"}}, {0xcc, &(0x7f0000000380)=@string={0xcc, 0x3, "832f514907f2d49ba714bc853e3e11b66e407a24afed4a4e1b13e7c631ea6ead2a6ae3fa6a849d51dea1567274b445c42b515f5a38baa8eb924a7006ebf0205ee74debe9ebd278c6e4d484183cbcd9391a4ab1ac4fed9c851ff0df94e2e9a94eaa92a19c0ac5e09a1fd4edef8eb801ecf43132085b1d1f6acb28dda4d3b0c7ab2feddcb35b527869b514719e1fa86f97f6d3d71c5020a4c46597af183e207cdb15fab53b939d86e74b6e9caa883ae85ba3d651a815dad4526599cc156c546760647ec94c05885547087b"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0xc1a}}, {0x5c, &(0x7f0000000480)=@string={0x5c, 0x3, "071f1b8240f9e948b8683e1d690a54960941c2bcd27f5a991f6a09f1a2c51ed81cfdbf45166ab66ccf149f8ae46c28201621b0a258e1929793022088254152c9f67ec590dbe270577345572f202b51da884b75286a809edb6256"}}]}) syz_usb_control_io(r0, 0x0, 0x0) sched_getaffinity(0x0, 0x8, &(0x7f0000000100)) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x46d, 0xc293, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x394}}}}]}}]}}, 0x0) (async) syz_usb_connect$cdc_ecm(0x5, 0x103, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xf1, 0x1, 0x1, 0x7, 0x10, 0x2, [{{0x9, 0x4, 0x0, 0xfc, 0x2, 0x2, 0x6, 0x0, 0x2, {{0x9, 0x24, 0x6, 0x0, 0x0, "cf19b84d"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x8000, 0x1, 0x6}, [@mdlm_detail={0x49, 0x24, 0x13, 0xd1, "1b8210f5a687601532ab750e4724666b80c4f54d47cf2f5c39d43f42308f56894277fb62af09cd31f94e3458a979e0c3f702b5a2b187f832fc53fa6c236902c73ab5f476e7"}, @mdlm_detail={0x5d, 0x24, 0x13, 0xfd, "befa7db460321913aaa02d82c464ee7370e24e093d22c8e2c4d4924724962359a289c4edadad7b33653d350f6842b8189550a6aab539f88751c92b0216f821a841d6dc36c7a085443efbd273707e5c7454d1fd8977acdba07b"}, @country_functional={0x6, 0x24, 0x7, 0x2, 0x7}, @ncm={0x6, 0x24, 0x1a, 0x1, 0x24}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x8, 0xe, 0x1, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x7, 0x7f, 0x81}}}}}]}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x201, 0x2, 0x6, 0x8, 0x8, 0x81}, 0x0, 0xfffffffffffffffe, 0x4, [{0x91, &(0x7f0000000200)=@string={0x91, 0x3, "77b3c55721d5710f64bbdf88076960d2d134172de1762af40521b370f027b729eed16506b290d5271cc2f1fe27cc7b2b00131c61a5c1528b985d5703e9c2483a5a182b0bd44f6b4290539265ca86aa5640daca2af435fa4eb56069642ff3756664eb208da5ca1a687b5f6f8ca036d728af113152d8d5ba7b9580c077159afa34dd8141d76f4838f045e85aa73b7369"}}, {0xcc, &(0x7f0000000380)=@string={0xcc, 0x3, "832f514907f2d49ba714bc853e3e11b66e407a24afed4a4e1b13e7c631ea6ead2a6ae3fa6a849d51dea1567274b445c42b515f5a38baa8eb924a7006ebf0205ee74debe9ebd278c6e4d484183cbcd9391a4ab1ac4fed9c851ff0df94e2e9a94eaa92a19c0ac5e09a1fd4edef8eb801ecf43132085b1d1f6acb28dda4d3b0c7ab2feddcb35b527869b514719e1fa86f97f6d3d71c5020a4c46597af183e207cdb15fab53b939d86e74b6e9caa883ae85ba3d651a815dad4526599cc156c546760647ec94c05885547087b"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0xc1a}}, {0x5c, &(0x7f0000000480)=@string={0x5c, 0x3, "071f1b8240f9e948b8683e1d690a54960941c2bcd27f5a991f6a09f1a2c51ed81cfdbf45166ab66ccf149f8ae46c28201621b0a258e1929793022088254152c9f67ec590dbe270577345572f202b51da884b75286a809edb6256"}}]}) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) sched_getaffinity(0x0, 0x8, &(0x7f0000000100)) (async) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) (async) 8.726857513s ago: executing program 8 (id=6967): syz_open_dev$video(&(0x7f00000004c0), 0x81, 0xa082) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r3 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10, 0x0}, 0x300440f1) setsockopt$sock_attach_bpf(r3, 0x1, 0x12, &(0x7f0000000500)=r3, 0x4) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000100)={'bridge_slave_0\x00', &(0x7f0000000280)=@ethtool_stats={0x1d, 0x2, [0x1, 0xffffffff]}}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT(r4, &(0x7f00000004c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0xc0}, 0x1, 0x0, 0x0, 0x4004000}, 0x4840) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="5000000002020104000c0000000000000a0000003c0002802c00018014000300fe8000000000000000000000000000000000040000000000000000000000ffffac1414000c0002800500010000000000"], 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x0) r8 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x800) r9 = syz_io_uring_setup(0xeeb, &(0x7f0000000480)={0x0, 0x8001, 0x10100, 0x3, 0x86}, &(0x7f00000001c0)=0x0, &(0x7f0000000000)=0x0) getdents64(0xffffffffffffffff, &(0x7f0000000fc0)=""/224, 0xe0) syz_io_uring_submit(r10, r11, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x40, 0x0, @fd=r8, 0x73b, &(0x7f0000000500)=[{0x0}], 0x1, 0x0, 0x1}) io_uring_enter(r9, 0x567, 0xa9ea, 0x5, 0x0, 0x0) sendfile(r5, r6, 0x0, 0x201f00) r12 = socket(0x23, 0x6, 0x2007a30) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) 8.025309315s ago: executing program 2 (id=6971): r0 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x800) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000000)={0x2, 'vcan0\x00', {0x8001}, 0x7}) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) syz_usb_connect$cdc_ncm(0x1, 0xcd, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xbb, 0x2, 0x1, 0x9, 0xd0, 0xff, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, "8c"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x2, 0xfffc, 0x6, 0x4}, {0x6, 0x24, 0x1a, 0x1}, [@country_functional={0xc, 0x24, 0x7, 0xc, 0x7b, [0x7, 0x7ff, 0x5]}, @mdlm_detail={0x52, 0x24, 0x13, 0x5, "842178d6be01cbfaf6ea1b2d46bc0bed53dd602ab5ae28b853419d152e52de1f18995434779da18342aa8df6af299dbd967c745bada53d8bbb3f54cdad359a3405ff307f3968c3864a84e7dfab22"}]}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0x81, 0x1, 0x4}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0x5c, 0x7, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x7, 0x4, 0x3}}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x200, 0x8, 0x9, 0x7, 0xff, 0xfc}, 0x5, &(0x7f0000000180)={0x5, 0xf, 0x5}, 0x4, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x1809}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x300a}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x2009}}, {0x8b, &(0x7f0000000280)=@string={0x8b, 0x3, "13d349c78917449a3a5942e54b3044363408c49ad3570efafbc3b75dbbe931fce5361f4f31d2e6a2b6346db38560c9b3aeb88603e580a1b59e6a966458c96798a5e55b978e9d5a883d70d5917e32ef202b734e269474d9615a9919448522371b5bef7b676f15ba470116ca2791233ce43ca72275ff256ddfc2178b4cf1d172684ecbc386aebbdff617"}}]}) (async) r2 = openat$vimc0(0xffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r2, 0xc040565f, &(0x7f00000003c0)={0xb, 0x102, 0x2, {0x6, 0xfff, 0x2, 0x3}}) (async, rerun: 64) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc0f8565c, &(0x7f0000000400)={0x7, 0x0, 0x4, {0x1, @vbi={0x9aa, 0x40, 0x0, 0x30383653, [0x3, 0x101], [0x80000000, 0x6], 0x1}}, 0xc430}) (async, rerun: 64) r3 = openat$vimc1(0xffffff9c, &(0x7f0000000500), 0x2, 0x0) ioctl$VIDIOC_QUERYCAP(r3, 0x80685600, &(0x7f0000000540)) (async) writev(r2, &(0x7f0000001a40)=[{&(0x7f00000005c0)="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", 0x1000}, {&(0x7f00000015c0)}, {&(0x7f0000001600)="7abf4dc4f0b235e83e6476d4baf1ee771af8fbc789226e1223cdbb3307d741315d8da33488a44cd00bae7beaaae623b4dba14c72125f646ba4403b141ca969c72bf0552c69902c2d0fc350302e966eda23eab7a794f488471b9a7a7735b0a60a7a9b211aba06", 0x66}, {&(0x7f0000001680)="90c5e68df387e46c8a647122e3e2dea0d958eb25b4c09d710f3729f70f9466710e7aec4127338834be8f9af325409dba802e684da445edbe5bcebceee70b74196607ca62778bb9a261b74585db", 0x4d}, {&(0x7f0000001700)="af2d6187c1d7c99c558b29db5298db81df7002018e51488d317ef3267f858e85e1d4f036d3df5b4e5d363b10f9ad665b965e1265abd84ebf9bf9c47e11b73bed79147177e3b080f99bcfaf00447c0c66bdc16ca28e09eea52939a7a96f5a11bab78998fab8f034667916fa4330fc", 0x6e}, {&(0x7f0000001780)="1f92d05c5997c9cabd1e2043c5914accba1da2261db18502dbbbb75bb3f1afdf0fa55d9654f552c54ff2918eee6eb40e83452225a67d0defb4c9faa590c761a76bd971db1ff5619dc3a60200e455e230df474780faa4b7760c1b99a91146b796dbc2a9c16ad260396a87fb27f3a171bed412ce53e91ba6cb4b9fcba9c9de0e37f74e3e4d6eaf65e1cff4bf2eda7d779a37ed3b6b8652ac8b770e3d9f510b2249d2c222fecc5f4dc62d35dd58ef91bc979f6b5a159d35b2e0027f0ff7addc450c4821d65d52d6d343cbbfb5f97f99962140d7e34267", 0xd5}, {&(0x7f0000001880)="adcd5837510b63c18040bf7a88b663f654d27f5634dbbe0189c32073531a2bd703b05805b591eb30502a87ac887c4f3b92c0ab96fba40310f5f0be35b0d21ba918ea84c0938f0c903d113aaaa602b4da66a1ea0945571c", 0x57}, {&(0x7f0000001900)="978efccfb5a08940a4c7772dd32ae23d36119dc07609b63eec68b8b3951ddb72b0b30d7d8204d14b4b4fd0f0035e1b8a2d6a34d54604e91e7bfe15b686f2aaf86b128896c2b666d31828550264c1ee03a93c2d0c065d73df9453f1e47888af2dffe457", 0x63}, {&(0x7f0000001980)="fc89fab642270d3c81c4e1c250f2dc10fc9af11f7df2e57b34f777e39c3d6f85ef244472be619f3684e0928e9dd2f4427af5a45094675c737595c61b4a1032a2ffbaa7c06e98ff9deba34f6efc096a249c32a9d576c0ba902207029643240bee202f251832b5bb2e038b5172bce14ca9ca2a30dd943b72c02086fd6707d6da8677a3b958fc56", 0x86}], 0x9) (async, rerun: 64) r4 = socket$isdn(0x22, 0x3, 0x26) (rerun: 64) ppoll(&(0x7f0000001ac0)=[{r4, 0x1496}], 0x1, &(0x7f0000001b00), &(0x7f0000001b40)={[0x1, 0xc00]}, 0x8) (async) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000009, 0x11, 0xffffffffffffffff, 0x8000000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x18c, &(0x7f0000001b80)=0x1, 0x0, 0x4) (async) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000001bc0)=0x0) quotactl_fd$Q_SETINFO(r3, 0xffffffff80000602, r6, &(0x7f0000001c00)={0x8, 0xf, 0x1, 0x1}) (async) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001c80)={0x5, &(0x7f0000001c40)=[{0x0, 0x7, 0x81, 0x8}, {0xb, 0xff, 0x3, 0xca0}, {0x3, 0x0, 0x5, 0x6}, {0x6, 0x40, 0xf3, 0x8}, {0x9, 0x88, 0x9, 0x8}]}) (async, rerun: 32) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000001cc0)={0x0}) (rerun: 32) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f0000001d40)={r8, 0x0, r0, 0x8146}) (async) r9 = syz_open_dev$sndctrl(&(0x7f0000001d80), 0x8, 0x8140) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r9, 0xc0045540, &(0x7f0000001dc0)=0xfffffff9) socket$nl_xfrm(0x10, 0x3, 0x6) (async, rerun: 32) pipe2$watch_queue(&(0x7f0000001e00)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) (rerun: 32) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r10, 0xc08c5332, &(0x7f0000001e40)={0x4, 0x5c26, 0x0, 'queue0\x00', 0x6}) close(r7) (async, rerun: 32) ioctl$BTRFS_IOC_GET_FEATURES(r1, 0x80189439, &(0x7f0000001f00)) (rerun: 32) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001fc0)={r10, &(0x7f0000001f40)="a72b4f81c1973b1e1536ee8b91752ba94c22b4fc6cea5ec99db9927b24f950edc6133f84cb28a20d6615da5e687046754924d23b2ded3ec19bb13c43cd2ab645174dbd50a8122f606f7d1860eced0bd1f131"}, 0x1c) (async) write$P9_RWSTAT(r10, &(0x7f0000002000)={0x7, 0x7f, 0x2}, 0x7) ioctl$USBDEVFS_CONTROL(r10, 0xc0105500, &(0x7f0000003040)={0x2, 0xa, 0x8b27, 0xc3a9, 0x1000, 0x5d7, &(0x7f0000002040)="c06c9bea9fb3ebd1132c89acc317014c970d19c6f8d11a6469ca4abd47ac68fdf3b462651f14261c1fece49be048e88b30768dceff3229fa503589cecbf482d6841e4f83bf3b476af91dd38a5ad4112daaaa4d5ff81fa1424a9d856bc97ea59bb5e2df8b8c708ae171f4a42364ee15718150023aa57d424752663386e528c0275f857687511d3daddd9e844022c6aaa1837695bd6d246fa997825edb9382e13b5959e56b107033dededf527114d7486e2cf00329bc8c2d5f3642a2eb473c1f857ddd188f43a996344d038de6a1b4aa91cadd1d589d10cae1de80e7557a1f48ae38a7e7bd667a9fd4ef6c6d2461e30d40f9203a42bdb07643a556b5655cb4c5742a0de634706ede4241228eddab2762c154941a398a6408308cbca6864c634f66dc5c6f4e4d435b9708fe09170bf63dd38a143be00a8df5a5f9856c44c688fb0b2c1d22889eb59b814721c9c790759e425c901a227cefd1d2fab798b8dca893eb6214df4184364267527be13764de53e374665247e29f45a07dcdb1fc7dde3d714291d476b256b1bdf8ff72868e8dbd19e14caca941fb0e7f26555161ee48da4bdcfb68a23560b4d13148246ffb091c718e008435ecd2086ffcf31640fda64d74187813b72628778b29d4fb35676b36707244f158130ed13841b31967440924f0061302ef94cafd08a27a3223984749fff450f4a50e0f8dce345fea85844ed01811eb519f6047250f50af6c18b2e7500a822cfd4bc4d5c551e4ee9f44ff284951915398cb637d9a1956930debad1de11c06dfe0f209d2f5eceb861abf8813feca955297e5b94b925b9443005a3bed6ca8b0d72cd03763562f793275e86d38865faef87abad668c0e5ff83645bcfdef42bf87bdbd7139e9bab329d3929e4cddb4698d6cc715b09bb658c6269914565696de7d05fd3a9dc5102f281ce3d7a1063413730cf6ce48965079cf9dfac36007584f5295b61c2d7a2fe6eb7b3eeeda0a5d2546d8c11a676b37963a1167a2f1318cec51ab2b8356870c9f25c5ae05d279395f5e8cc427551bcafd7c5f43c2eeeaaa8679bd16f140373958b0155c6a57a83a358dabb041542ed6bad86d1fe5dcdbdfd0915150d2b8da75c51f29ab354d26ccee79bbb41f55b09135571d440f9aab9132fafac35dc2e5f789a3de8880af5cb1ac3ee9d476da9a7e55858ab7ca39553f8ebd09555952f8f37b24aa85c0f006196b6970b9d3e15a69751070f2110cffadbf4c832051ede984ca1a609b0bf1e44d18768c9291a6e36a4aa3bb5442021a1665bd3b7d6fe51afb4ebf9a62f1a4071958a0a58fe88455d9823bc495fb21952c0d152534c5bb65b5fbe35b1bc54caebd798d46bdf98043ef57a4fee18cc41841938a6b46fb0eb173147149e94586c845a5f9991650ee72569c864e3e86d1b4174e2a2910d3d83d1e2052826e385083987a4cf3e06cfc9d4a5deb07151d0c2ec11a3dd0fa8d71db1ea5fc3c7cfa5aa41d5751ccd3b36a219d0304c27021e8b42df12d8f3cf50c7934bc76ed9184a1e9bbf27319f40ffda3602f2cc6181d054f5bf6ab893ab56fa77dc4542de2fcb74ae64e43c6ff59cbb3fdfe61e625b435f0ae4c3b3e3cf7304668a86f14c0f4959218c2f8c949682b9f8eee0af91b7cda03b4bb0685bd3fb0f5b222bc5fb3d571eec37b8f2b9702290ac44f8eb53e11d86e9226cb7da8f62de74d6cb99a4b797397800b94c0c29b41b9b5be32291819a48f5e45373ac7f7e33b07192b378d3e6a7881def05170f786c51a493b0a6e3f9c1d96c2bbf6d3b415fe917eb97a25df9d15c79a5b20e7696a38b6edce5d55de3fb8d2fb0ff3001de72c8435c919e5ff17594407e30eeb51f8a97148c763ef7e2be7807f028d502a4a66c0c2c8b2d852ab22037c8de1a69210c776b10bbab0707f5c6025bf9a0b343736fc203489206fc53f74d9925bda9ee4466256316413bfd8971b779fa4a9b83431790d281d2b72eb02ef2807ff4d82a7d18bbfc5a3245ba026d503bdbc170c4e232922cc9379bad99bbff394eb0c87ca3f5b37bd6429ed2ab17d7074d474ea0b1c75f8ea14863e27e1d9fb9785519a40876c6dedbbab48692156cc8eb512b084c683d01edd350a0de1a7d4c1d9dc6eeb5d85aac47f898f4870ee3f1a6db166027213c9d39e0c0236b57647683bdf5809ff80dd334f654774b922ecbf8fe692cf2034aa38ea12927ced225041cdfc8051d6742924baa6ba0768ecde733a09fa136bbde282a0a96636619d8a0828de3eac90f347010749ba16b2603d95aeb58edf2ef7c94379e300f407c6ad19aff707c18184e72759962c8e8649b2aa9ce94c69f2ec5e92be5e7e63e5ee6d44635803d9d1348ddfa83f042709040ca734e44a0bec8df2ad5737c6355c29581da1cc14afae4255f8d4a07efa25925b7cdfa06c3f4803af659060d138010fc147743e309df91ae7ef0fd8cc3ed63e0529c47c81e0b93fcb82aeb040da81e44f95c81d4e4013b48ed92a4a1f1db2acae5a7f099d649d70320a88550b7e1bfc6d6aa17fda60d6c1928f11bfd470c8ec31c51121fd4f576c4a678ec8d8eef4c4b7ad822b385c84de66c350f3c721db32699b09b5efcb58efaf50b1e901328937ed2fe42180bf2da4e8ecf0d04583dd244970dbdcf43d3e1facb126e6d6dfde5ccb5e8d082fb7860cb626995822b9c702d6a019bdee2445b74e011d48bd85d29e3cb195eed1f5eb4bb3b2822c8a55f454f0fa949d927a9a940d30b80aea263a8581ee5dd70511729d99bd6dd7b722a581e8e228e5f35babde86df294465be7eff24b7476e84b291ae35037950396843889f65e12c7272170632f50a82b3cf1dfe35f4775724536c78f57ea70a5067af85a20bbcd45b616936811252e513aacda631895706c3ccbfc52d9624758fbcfb8c6141df8b8af6e6dfabb7054fd7c64ac473b716ab7284bbc549f602c7220a45c1536cc032b00ed064fd44086af1a8c9aff4336778a13d4103a42eea41318210c8525ae14a3402c2f78886f8f316fafa149c755033e6e3ce1b52fc267e5b9ff2bb0c5b351fd74fec204590393bc51fec2744a4acaa1fb4987eebf8a7c7502662a10166bb8ff23da3cdce545bf862fbe37e6d19c8d33a337de1a5048a7211ac96682b30a3eca624094be103a07edbcef9529b88e920a784d082f5d07555d2fc0821a9c19093c887aef030e361e7b42f56b0cd02cdf4f653a694e5eb340ea9ccd31aa57ae8c16310e16f165cb67d4fbc90f7a353c7c18409b3bf2f55c2c1ef493d29230139c3460bc06f2abe0705ad90bcbcc3e58010298401cebebb8fd17ebdf44ffe4833988c2bb48757f8a64391a3ee95671b8a1e82c3b36f3e279e1778b455780a733cf4dd3ebd730e2c73e5cf4d7e8e22f3dabbbb1ac465869a36cd73efe73bd9ada75d834e401872d1c50f6d5054aa689e766d7c5c2e52f39693f05d904255c24e6a8c65689437cfade1b8f9e96e5fc0f5984c4f2fe29cbacf24917c30103cff48f6bd1078532aa2dbeb6141fff951b6a838d3942c30cf627a5bc33892c1cff2b546c754fd3c2e84032932dba58a34e34fa06289b3c352a2b31ffc3da88457ab61a0507f90e7b3d5ade61e34d4426508f341fdd2d5be7b1c84346dafe53e79d9cc39cb1d3fd83a9e58aa38805e3861d06a6fbe85d7aa0562a41e306de1195c22b501f282409a44b3b93e43908cac3a4465af67fbf894ba060ef306bb4139909113ffd57ffc0a3471810cb1c2465a8701618a00c19d03db192291f392bad9efcff28f55b291ea702c9bda1e83bea46af2f05919d23f139a0e85a8e709a311b81728c1367c5cb11ba6fc0195a92740468939b70bc9a67c4856b9ef133b0aa1b0aaa23fdc5f12276b13a3c24b9c7644bca25f7cdda0ee83a626c94a36f134ab05acfbc80013805c866faba620d314ca0674af6f567bed6c28273bda89694e469babaecfa2a03d7191a70ebb72e82126e1617434ea93fd829cc8501007badb4c7d95acdff821ec119f8eccf3002c9937da02b2fce14ffdc2de1b13ae7d24888fe223610e383624d7eaf8d48bc26fc4a1e66ee0aa084638d5702ff7c7d800739751b53d270288dd57bb16bc7c32b35c48dce468e573ef33bb399a3452ebfb0f6f7d983b34c01c91fc2e9920284f845f77adc54012a8d9b460a92bbc6d58cc880e92a33698d54596c66b92b4d94a9af83888c3913753fa2fbbef3335138a49fe9f4ab9c63e943a77297a74da9fae50b988c4b4756dfaf72377be055a71362b73a22e6a59ad002bf0f70687ebc8b79755ef03942369446c41e3502cf39c03c1156a9c54df2bc4cf00253bc608e4c462c79e178143fb1ed292ca3c50dba027a2f85e163a58314552e7182568a3c161f7a43cf315de80742452bb8409ea802ba2ee693a8f498a41de8c2c46e134567a12becd7321d3c387ebf9878aae08c0c96ae41c4d480f4129993dfcbb2e16060cbc52d89045072b09e83758743f4b2a2c27e1d622a91e3402a3b76e4982346cd34a33713fe7f7f9baa7c6976ed2a7509620adabaa52c742a4e963f9245259f00dd578c24308529e94ddda40cc6a95bb848bd488d99cc366b74004643d704ff6d5c0a485a0bc33c700213e5242ad06ce32692a9958c733db209ce1939449df6904e4cfdea52eb3638f4f3f9b058c20d2d25ab91df63c6559d5911d6d8a4c2e99453b015bf3d60bdaf57b3b488be5a51c2fdf148838c9c1104a2109fdede013173cadf7b50075a735d233e69d4efeb2eac296a2b9e9feedee940470d91b2fb00b53406cf4ddd9eeaff63f4aa44382bbcdbfb8694a6911f17673b56d9b2e89597ba8fa81d58dc18ce9d5172bcab51b3e1db0d808c06e4d24ff4cf609c6d731324b46b55fbbd8e5a5ff73f06695796d20a1916bda15a4a0f6302fef7fb180435e79c06ac2940a8b0ccf98edcee4291c2a3200717cca77802f65176235956788e6d86ee0d4b16d42823755eafb4e0e61c33be1e530221ddbe0f3d3921d6cfb62d5565281d0c85ea8e9eca4d4fd8abf40b738359ce36281dbb798a91605ab2dba556b7dca9331d18763b954054d0ca0bf6fa8d343da5c15ba04a0157c94b5bd5675537cd967e93cbe37bc077d98b7f348615932b050261f5a12a751d32afd153ac76a722885a64e0d58224ae5e7c1061ebbc3cc78bb0949ad05b36ef654766a5c778020774680cbad1d0059068fa9ec0a39812ea158a80fd5f2d24ccc2f512358dc90156514fbe64ccda913afa18dd0b1c15dee351e8a4b226fe7ce002cbd76bdb39ac440294d4778747e2c2966fa5f990427e4b4771fec19cc2668c6da7a023f1226fe534a1d1f8ebb394d5ebab9c4a2a302f050b7075a7b7684eb0d5944c032dea6862556701a15c59b9baa398c4fa2c37b77003d7b2b25eb9ed618de21ed1940b50dae5f366ae47a4c668366d215b365e9f742437cdea4fe2b0968697a7ce0b6457977c97b08597104c153ded752c424a7bca762b0a060895858f9013d01d2b1663e029ef544c2cd91e6916e2079360d99c52b367be2b3672db36843621d24a800feddd4aedf5587fb2e9a4ee06c1f78976f450f8f5a8ccd572153046d9a0f21763f1666592db71bd50633597e4fe6439f36b82efeeac42b61ad9488ccad90bd14ae5b29ec5439c2561718a46040327b63533d8a925f38fee83399b49583b904bd227689f4d17903a13d84918f95405cd30ef713b86a347df83f471581faf6ede9c8400c9fecf07afa8541a2c2a1f0e46002504afb110045f58b1b5bc9cfae1c83d6499448062"}) (async) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000003080)={0x14, 0xe63, 0x3, 0x8}, 0x10) 7.809490095s ago: executing program 2 (id=6972): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000580)={0x18, &(0x7f0000000340)={0x82f29889f7236b70, 0xe, 0x5, "ac20f53eb7"}, 0x0, 0x0, 0x0, 0x0}) 7.54677569s ago: executing program 3 (id=6974): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_buf(r1, 0x0, 0x4, &(0x7f0000000040)="440910bc996c301c811f1f0400", 0x28) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipmr_getroute={0x1c, 0x1a, 0x1, 0x70bd28, 0x25dfdbfe, {0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfd, 0x3}}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20048850) 7.395045886s ago: executing program 3 (id=6975): openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYRES64=r0], 0xc8}}, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0xd1, 0x0, 0x0, @loopback, @multicast1}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f5, &(0x7f0000000200)={'syztnl0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000240)={'tunl0\x00', r5, 0x700, 0x7800, 0xffff, 0x8001, {{0x5, 0x4, 0x0, 0x28, 0x14, 0x68, 0x0, 0x10, 0x4, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) setsockopt$inet_int(r3, 0x0, 0x1, 0x0, 0x0) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x32c180) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) r6 = socket(0x10, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000040)={'pim6reg1\x00', &(0x7f00000001c0)=@ethtool_stats={0x1d, 0x6, [0xc000000000, 0x8, 0x3, 0x0, 0x0, 0x0]}}) r7 = socket$kcm(0x10, 0x2, 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCADDRT(r8, 0x890b, &(0x7f0000000200)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00', 0x2, 0x3, 0x6, 0x0, 0x4000000000000009, 0x10200, r5}) sendmsg$kcm(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a00100000000280", 0x2a}, {&(0x7f0000000400)="6a6f8e5e", 0x4}], 0x2}, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602240000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="04fa81060c0db5f2a900000000000000000000000009000000"], 0x7) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000280)={{&(0x7f0000ffc000/0x2000)=nil, 0x2000}, 0x2}) socket$nl_netfilter(0x10, 0x3, 0xc) 6.799267553s ago: executing program 8 (id=6977): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioprio_set$pid(0x2, 0x0, 0x6000) syz_clone(0x80280, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x7, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0xffffe000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mremap(&(0x7f0000a5f000/0x3000)=nil, 0x3000, 0x1000, 0x0, &(0x7f00007f9000/0x1000)=nil) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0xe, &(0x7f00000001c0)) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x1, 0x34008935, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x3, 0x9, 0x8, 0x6, 0x3}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa0}, 0x1, 0x0, 0x0, 0x24000850}, 0x40) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f0000000100)={0x0, 0x20, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010900000000000000000a0000010900020073797a31000000000900010073797a31"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) creat(&(0x7f0000001d00)='./file0\x00', 0x25) mkdir(&(0x7f0000000080)='./file1\x00', 0x0) creat(&(0x7f00000002c0)='./file3\x00', 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file8\x00', 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file6\x00', 0x4, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.dequeue\x00', 0x275a, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x0, 0x7) 6.713210544s ago: executing program 7 (id=6978): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000100)={0xe58b, 0xa}) ioctl$VIDIOC_S_STD(0xffffffffffffffff, 0x40085618, &(0x7f00000001c0)=0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) bind$inet6(0xffffffffffffffff, 0x0, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = userfaultfd(0x80801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000fff000/0x1000)=nil, 0x1000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa08, &(0x7f0000000000)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}, 0x1}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x28) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000000)={0x2, 0x3, 0xffffe000, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) rt_sigprocmask(0x0, &(0x7f00000000c0)={[0xffffffffffffffff]}, 0x0, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x5}, 0x10}, 0x94) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) ioctl$KVM_RUN(r7, 0xae80, 0x0) sched_setattr(0x0, 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r9, 0x4138ae84, &(0x7f0000000240)=@x86={0x2, 0x2, 0x84, 0x0, 0xb, 0x9, 0x83, 0x4, 0x8, 0x4, 0x3, 0xbe, 0x0, 0x7f, 0x3, 0xf0, 0x0, 0x8, 0x6, '\x00', 0xc, 0x21}) r10 = syz_open_dev$video4linux(&(0x7f0000000000), 0x1, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r10, 0xc0585605, &(0x7f0000000040)={0x0, 0x0, {0x125a8, 0xc, 0x0, 0x0, 0x2, 0x6, 0x2, 0xdd2fcb245114ab72}}) ioctl$KVM_SET_IRQCHIP(r8, 0x8208ae63, &(0x7f0000000e40)={0x2, 0x0, @ioapic={0x7000, 0xffffffff, 0x40, 0x4, 0x0, [{0x1, 0x85, 0x8, '\x00', 0x6}, {0xb, 0x0, 0x0, '\x00', 0xa}, {0x6c, 0x8, 0x6, '\x00', 0xff}, {0xf2, 0x8, 0x10, '\x00', 0x9}, {0x9, 0x1, 0x3, '\x00', 0xb}, {0x7, 0xff, 0x9, '\x00', 0x1}, {0x8, 0x3, 0xf7, '\x00', 0xf3}, {0x0, 0xa, 0x40, '\x00', 0x93}, {0x80, 0x9, 0x3, '\x00', 0xd}, {0x4, 0xfe, 0x2a, '\x00', 0xf}, {0xbe, 0x1, 0x4, '\x00', 0x2}, {0x8, 0x5, 0xf, '\x00', 0x1}, {0xa6, 0x0, 0x8d, '\x00', 0xa6}, {0x15, 0xc, 0x0, '\x00', 0x6}, {0x4, 0x4d, 0x9, '\x00', 0x1}, {0x9, 0xa, 0x9, '\x00', 0x2}, {0x5, 0x8, 0x81, '\x00', 0x3}, {0x7, 0x7, 0x90, '\x00', 0xfe}, {0xfd, 0x0, 0x5, '\x00', 0x7f}, {0xfd, 0x3, 0xe2, '\x00', 0x2}, {0x8, 0x2, 0x7, '\x00', 0x6}, {0x0, 0xfe, 0xfd, '\x00', 0x9}, {0xe, 0x11, 0x2, '\x00', 0xfd}, {0xd, 0x9, 0x8e, '\x00', 0x8}]}}) 5.85352339s ago: executing program 1 (id=6979): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, 0x0) r2 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x419, 0x600, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x2e0a04a5a13ae223, 0x3, [{{0x9, 0x4, 0x0, 0x8, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x4, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x2}}}}}]}}]}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000004000000e27f000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000b40)={0x24, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="002205000000fc"], 0x0}, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) close(r0) getsockopt$sock_buf(r1, 0x1, 0x1c, 0x0, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000780)={&(0x7f0000000400)=@ipv4_getroute={0x1c, 0x1a, 0x700, 0x70bd2c, 0x25dfdbfc, {0x2, 0x0, 0x0, 0xff, 0x0, 0x3, 0xff, 0x0, 0x2200}}, 0x1c}, 0x1, 0x0, 0x0, 0x20044450}, 0x40810) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={&(0x7f00000004c0)="e7173334739ce02b6c965881111155ae952f26c467697bb72269ca5c324b793fb97e565e1fc66649665324927db4646bbe7dd81775733542cfe7686e7a7f83b437559c62f7d01a56c05ad5babdf489ab04c37aeaf2826256bf24272f4146faba60969363da013e3b1ac5e4785228e8f5c9f9045f824954d1ee1af22e42b5e7e6d31acb172b9f62157e9e1c8046b97540e9277bcc68efb6759958a05a84d121b4ebca61afe57e0c926c58d67556b28545e0003c2db7d6f347d521b8309eaa0b6e37d1da7223b27607be9b12a7c7b3776e52e7135de0f1d12ac4107c7bff31e7154f3ef80dc70d538a8b2da6938cf101b41269b548da", &(0x7f00000005c0)=""/221, &(0x7f0000000300)="ab58a79066eb9309bd262c5e098a6d22ef5657bfb17a47ea8b11f774e42620bdcd6d6e2444f0237a95b1df6b252606a32c86c53ac2d4064b0a4419e6a78f7e3113fb3f9a666678eeb524c2443d9e7ecbe5bb92ea2d15e98ba059994636bcca98feaecbab5a753774af27a0a310b7488040dfad24f0414397fd7a38806b5c951725dbbba51e9d273f43859b9f360ddb6650", &(0x7f00000006c0)="bf3996bb4dc44358fe5f77a58694adbc2ecd0eb6eefc944e06407d763f16bf0770b5e9d621bb8d18470ce6d05736a99b2978c43feca728c7b8b644956ad55f1edcf5cd72aa0e6bdf3935d4bf81883db48150c1f1a6e817772a291c76db6cfd2ae3fd60466f266c3bc0abcb6c96c591293e0aad9a382ee9258810ff5d122055ff20f18c9b7c", 0x8d, r5}, 0x38) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x1e1802, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r6, 0x40047451, &(0x7f0000000080)=0x4) ioctl$PPPIOCSFLAGS1(r6, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r6, &(0x7f0000000180)=[{&(0x7f0000000900)="00214717a70700000000030600710a5eeb9d04710400bbf3e76880000000005c786d17fd49a037f173c0c6b84caec25c498ee297621db8d58baa300100fddd1a788ef1d0967fc8bfc1d63d577690", 0x4e}], 0x1, 0xee, 0x4000004) 5.21600757s ago: executing program 7 (id=6980): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000001000030500000000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0703050000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1, @ANYBLOB="ed2291868a5da93d52c4808059c1828ce22ac156862ce75e"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$cec(0x0, 0x0, 0x416400) r4 = socket(0x15, 0x5, 0x0) getsockopt(r4, 0x200000000114, 0x271b, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0cc5605, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) timerfd_create(0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) chdir(&(0x7f0000000540)='./cgroup\x00') fchmodat(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/file0\x00', 0xfffffe92) mkdir(&(0x7f00000003c0)='./file0\x00', 0xffe9) pread64(0xffffffffffffffff, &(0x7f0000000340)=""/251, 0xfb, 0xacab) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x18, 0x0, 0xa7fc) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xe0000000, 0x5, 0xb7, 0x2, 0x1, 0x1, 0x4, 0x3, 0x1}}}}]}, 0x58}}, 0x4000) r9 = socket(0x10, 0x803, 0x0) r10 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newtfilter={0x2c, 0x2c, 0xd2b, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0xb, 0xd}, {}, {0x1, 0x9}}, [@TCA_CHAIN={0x8, 0xb, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x800) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) 4.69831049s ago: executing program 2 (id=6981): socket$inet6(0xa, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000002b80), 0x1, 0x8000) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc2c45513, &(0x7f0000002e00)={{0x9, 0x7, 0x3, 0x2, 'syz0\x00', 0x7b}, 0x0, [0x1, 0x200000a, 0x1000, 0x0, 0x1d1, 0x7fffffff, 0x5, 0x5, 0xbc0, 0x7, 0x15b, 0x7, 0x5944, 0x5, 0x7, 0x8004a7, 0x9, 0x5, 0xb, 0x3, 0x2c, 0x400, 0x2000040, 0x10040002, 0x7, 0x0, 0x2, 0x800, 0x3, 0x3, 0x4, 0x6, 0x6, 0xfff, 0x3ff, 0x1, 0x5, 0x3, 0x5, 0x6, 0x3, 0x78a, 0xbfff8007, 0x200000e, 0xe, 0x0, 0x2, 0x5, 0xe, 0x4, 0x9, 0x80000001, 0x400, 0x1ff, 0x9, 0xfffff647, 0x408, 0x4, 0x4000001, 0x9, 0x8, 0x9, 0x5, 0x8, 0x98, 0xbe, 0x1, 0xa, 0x7, 0x80000000, 0x81, 0x10001, 0x2, 0x80000001, 0x69e, 0xb, 0x7000000, 0x1, 0x8, 0x100009, 0x7, 0x4, 0x1, 0x8, 0xfffffffd, 0xffff, 0x6, 0x8, 0x0, 0x4, 0xef, 0xff, 0x4, 0xffffffff, 0xf8a, 0x58a0, 0x1, 0x9, 0x895, 0x6, 0x9, 0x89, 0xfffffffe, 0xa1a9, 0xe0b2, 0x9, 0xfffff561, 0x12, 0x3, 0x3, 0xfffffffa, 0x3, 0x2, 0x1, 0x2ba, 0x4, 0xe, 0x5, 0x8, 0x2, 0xfff, 0x4, 0x1ff, 0x7, 0x2, 0x7, 0x6, 0xff]}) r2 = socket$inet6(0xa, 0x80002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setreuid(0x0, 0x0) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x400}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) r5 = socket$inet(0x2, 0xa, 0x0) r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9e, 0x17, 0x36, 0x10, 0x17ef, 0x721e, 0xde06, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r6, &(0x7f0000000340)={0xc, &(0x7f00000005c0)={0x0, 0x2, 0x6c, {0x6c, 0x22, "c2990aca09d39c0b66d3efb9a6e8f233ef5ac80139e14e563c014f463cdbdba6cf68b3cd923f34270a6f5b50fd995363c182c84010c5401641ab80d47a4572e066e2ed890319a6739d918ee3171373aab6c2dbd4eb3a79cc96442edfed984713589ac6cb5abe2cedb0de"}}, &(0x7f0000000300)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000008c0)={0x24, &(0x7f0000000680)={0x0, 0x9, 0x48, "34556da5fc0c698f2f9a1a194ef141d04960452b35e571b66f98983bcc83870116b1eaa210ab5134636756a50db8700ea163f4b2c18c85d8142f3f173bd26c14cef9b22042824dd8"}, &(0x7f0000000700)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000740)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000780)={0x20, 0x80, 0x1c, {0x40, 0x7, 0x1, 0x2, 0x9, 0x7, 0x8, 0x9, 0x0, 0x9, 0x101, 0x2}}, &(0x7f00000007c0)={0x20, 0x85, 0x4, 0x2}, &(0x7f0000000800)={0x20, 0x83, 0x2}, &(0x7f0000000840)={0x20, 0x87, 0x2}, &(0x7f0000000880)={0x20, 0x89, 0x2, 0x1}}) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r8, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r8], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r10 = socket(0x10, 0x3, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0xffffffffffffffdb, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x3c, 0x28, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0x9}, {}, {0x9, 0x7}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x3, 0x1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x810}, 0x40c4) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYRES32=r5, @ANYBLOB="4649d373e40a8a8a6d151e2e32d9e508ec782e9a80f9659e1f78bcc81f9218f34ba505cc85dee97322cf3df73ce6283fe53f7e5bbd5569b74c17b06ebf28bd6ef5e728919b22c7c4b11cd82a18645a165e2dc6be6c833548b0139ebaa434bc8bec36a30c4b785f724ad3c6f51e1a846b3f44e49274f3336102cb3b2f1bf65ccae23d3e82b9a0b2be22e5a4a59e3bd1c773e615b8b6745acd00d59eceda8b823151d90b610feb9b896c5b021656cac68e86bd45193378e80d54c687b2ba06ecde6976b747aa17fce794e6957cb142aef582144a4a124c2aa41ff9c5c5504e9cfd48f9fc99a3c209e34bae3a976c04117cc896"], 0x24}}, 0x0) 4.698013191s ago: executing program 3 (id=6982): r0 = socket(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRESDEC], 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x0) recvmmsg$unix(r0, &(0x7f0000008f40)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000004740)=""/199, 0xc7}, {&(0x7f0000000800)=""/234, 0xea}, {&(0x7f00000002c0)=""/242, 0xf2}, {&(0x7f0000000440)=""/175, 0xaf}, {&(0x7f0000004b00)=""/213, 0xd5}, {&(0x7f0000000900)=""/4085, 0xff5}, {&(0x7f0000000500)=""/256, 0x100}, {&(0x7f0000005d00)=""/204, 0xcc}], 0x8}}], 0x1, 0x0, 0x0) write(r0, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_open_dev$vcsn(&(0x7f0000000000), 0x7, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYRES32=r2], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xe}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}}, 0x0) write$P9_RATTACH(r2, &(0x7f00000000c0)={0x14, 0x69, 0x1, {0x4, 0x2, 0x2}}, 0x14) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x60, 0x2, 0x6, 0x101, 0x0, 0x0, {0xa}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xffffffff}, @IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x60}}, 0x0) socket(0x10, 0x3, 0x0) (async) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRESDEC], 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x0) (async) recvmmsg$unix(r0, &(0x7f0000008f40)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000004740)=""/199, 0xc7}, {&(0x7f0000000800)=""/234, 0xea}, {&(0x7f00000002c0)=""/242, 0xf2}, {&(0x7f0000000440)=""/175, 0xaf}, {&(0x7f0000004b00)=""/213, 0xd5}, {&(0x7f0000000900)=""/4085, 0xff5}, {&(0x7f0000000500)=""/256, 0x100}, {&(0x7f0000005d00)=""/204, 0xcc}], 0x8}}], 0x1, 0x0, 0x0) (async) write(r0, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) syz_open_dev$vcsn(&(0x7f0000000000), 0x7, 0x1) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYRES32=r2], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xe}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}}, 0x0) (async) write$P9_RATTACH(r2, &(0x7f00000000c0)={0x14, 0x69, 0x1, {0x4, 0x2, 0x2}}, 0x14) (async) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x60, 0x2, 0x6, 0x101, 0x0, 0x0, {0xa}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xffffffff}, @IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x60}}, 0x0) (async) 4.56104527s ago: executing program 8 (id=6983): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x58, r2, 0x1, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x8}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x33}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x68}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x57}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x32}]}, 0x58}, 0x1, 0x0, 0x0, 0x4084}, 0x4000000) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r4, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1006}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) 4.534990832s ago: executing program 3 (id=6984): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000240)=0x3) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000080)=0x7f) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f0000000000)) read$dsp(r2, &(0x7f0000000300)=""/79, 0x4f) syz_emit_ethernet(0x3e, &(0x7f0000000440)=ANY=[@ANYBLOB="0180c2000000aaaa99ffaa050800450000300064000009029078ffffffffe00000010b0090780098000045aa00010068000a64010003e000000164010100"], 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) r4 = dup(r3) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r7) getsockname$packet(r7, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYRES32=r3, @ANYBLOB="000020249fe4650574662600f3ff000076657468", @ANYRES8=r4], 0x48}}, 0x8001) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x3c, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xfff2, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_FLAGS_MASK={0x8, 0x30, 0x800}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x4000) pselect6(0x40, &(0x7f00000000c0)={0x6, 0xfffffffffffffffd, 0x9, 0x40, 0x2, 0xd}, 0x0, &(0x7f0000000680)={0x7ff, 0x7, 0x5, 0x7, 0xffffffffffffff22, 0x2, 0x5, 0x8}, 0x0, 0x0) syz_open_dev$vbi(&(0x7f00000000c0), 0x2, 0x2) r9 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000300)={'veth0\x00'}) socket$nl_route(0x10, 0x3, 0x0) 3.598145471s ago: executing program 8 (id=6985): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x1612c0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WDS_PEER(r1, &(0x7f00000002c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x50, r2, 0x4, 0x70bd2c, 0x25dfdc00, {{}, {@void, @val={0xc, 0x99, {0x5, 0x47}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="80b0c1cdfdf6"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x40080}, 0x4) r3 = socket$kcm(0xa, 0x3, 0x87) sendmsg$kcm(r3, &(0x7f0000000180)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x18000, @dev={0xfe, 0x80, '\x00', 0x68}, 0x2}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000100)="85b6", 0x2}], 0x1}, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000380)=0x1f40) openat$dsp1(0xffffff9c, &(0x7f0000000080), 0xb2a80, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x1612c0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_SET_WDS_PEER(r1, &(0x7f00000002c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x50, r2, 0x4, 0x70bd2c, 0x25dfdc00, {{}, {@void, @val={0xc, 0x99, {0x5, 0x47}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="80b0c1cdfdf6"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x40080}, 0x4) (async) socket$kcm(0xa, 0x3, 0x87) (async) sendmsg$kcm(r3, &(0x7f0000000180)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x18000, @dev={0xfe, 0x80, '\x00', 0x68}, 0x2}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000100)="85b6", 0x2}], 0x1}, 0x0) (async) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000380)=0x1f40) (async) openat$dsp1(0xffffff9c, &(0x7f0000000080), 0xb2a80, 0x0) (async) 3.28938245s ago: executing program 8 (id=6986): openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r2, &(0x7f0000003440)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x9, @dev={0xfe, 0x80, '\x00', 0xe}, 0x5}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000340)="f2", 0x1}], 0x1}}], 0x1, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) shutdown(r2, 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x402, 0x20}, 0xc) close(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r5) r6 = socket$unix(0x1, 0x1, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000010c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x3, 0x64, 0x0, @broadcast=0x1000000, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @private}}}}}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0xcb0, &(0x7f0000000000)) chdir(&(0x7f0000000480)='./cgroup\x00') ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r9 = socket(0x10, 0x1, 0x0) write(r9, &(0x7f0000000580)="240000001e005f031400ff01000000f80700b3586ff606c2e553797c080008e467dc0000", 0x24) recvmmsg(r9, &(0x7f0000005180), 0x400000000000166, 0x1a000, 0x0) syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b9"], 0x0) pipe(&(0x7f00000001c0)) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56441, 0x70b925, 0x80000, {0x0, 0x0, 0x0, r8, {}, {0x2, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000c061}, 0x8000) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2.937329449s ago: executing program 3 (id=6987): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0xfffffffffffffff7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000240)={0x16, 0x1, 0x1, "005a03f00004000000000000000000ff00", 0x38414761}) (async) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x9, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x1c) sendmmsg$inet(r0, &(0x7f0000005800)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=[@ip_pktinfo={{0x18, 0x0, 0x8, {0x0, @loopback, @empty}}}, @ip_tos_int={{0x10, 0x0, 0x1, 0x4}}], 0x28}}], 0x1, 0x4000) (async, rerun: 32) r2 = socket$kcm(0x10, 0x2, 0x10) (rerun: 32) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="3504000010000511d25a80648c63940d0324fc60040035400c0002000200002037153e370c040180060410004500", 0x2e}, {&(0x7f0000000a40)="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", 0x407}], 0x2}, 0x0) (async) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000000)=@buf={0xda, &(0x7f00000002c0)="e12674a39cf863aa029d0a709960824edfa732f7256ef62fd99c014f116ceca0e9873a56b5e011760ec77e1bfbed5a1d66081e5f7e4c461a49303b075e31d82df72b05369e4e3e3c68e3b139166f3d2d23207d90579219009f201d9b7633b352bb57064363794e4a07fdbccfc7cb9dbb478d5bd6d9536cd3b37e2797cb2dc178295a44251f167dd79fe095165f44f04ae19a3e235c55aee784a205367423449e4693ba477db92316945709a24e0e94f7b97d891422fac14911fa28d5248530391037783c36680cb8197111aa2c01bd5115b9ab05d3af9fc5839d"}) 2.838658278s ago: executing program 1 (id=6988): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x0, 0x10100, 0x0) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0) bind$alg(r4, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58) r6 = syz_io_uring_setup(0x10f, &(0x7f0000000140)={0x0, 0xb423, 0x0, 0x5, 0x199}, &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x3, r4, 0x0, 0x0, 0x0, 0x80800}) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) r9 = io_uring_setup(0x7625, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r10 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r10, 0x107, 0x14, 0x0, &(0x7f0000000080)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) io_uring_register$IORING_REGISTER_FILES(r9, 0x1e, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) io_uring_enter(r6, 0x3516, 0x3e44, 0x8, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x80, 0x10, 0x801, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, 0x0, 0x1feff, 0x1}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x58, 0x1a, 0x0, 0x1, [@AF_INET6={0x54, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0xf4}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x3}, @IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x8}, @IFLA_INET6_TOKEN={0x40, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_INET6_TOKEN={0x14, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x5}]}]}]}, 0x80}}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r11, 0x80089419, &(0x7f0000000340)) r12 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) ioctl$KVM_CREATE_IRQCHIP(r12, 0xae60) 2.634847486s ago: executing program 7 (id=6989): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$vsock_stream(0x28, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x800) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) syz_usb_connect$hid(0x2, 0x36, 0x0, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES8], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000b00)={0x18, &(0x7f0000000280)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) r3 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r3, 0xd01c4813, &(0x7f00000000c0)={0x2, 0x100, 0x0, 0x2, 0xfffffffd, 0x2}) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r4, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r4, 0x5001, 0x0) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r5, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000040)=0x2) getsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, &(0x7f0000000100), &(0x7f0000000180)=0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="2800000014001901000000000000000228"], 0x28}}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x90, 0x10, 0x503, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20305}, [@IFLA_LINKINFO={0x68, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x58, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x14, 0x4}}, @IFLA_VLAN_ID={0x6, 0x1, 0x4}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x6, 0x200}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x24, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0x24, 0x1, {0x7, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3, 0x36f}}]}, @IFLA_VLAN_EGRESS_QOS={0x4}]}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x90}}, 0x20000000) 2.546352369s ago: executing program 3 (id=6990): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x8, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x20}) r1 = syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000080e372208c106801b284010203110902240001000010000904020002f8fd00000905060200020d0006090582020002"], 0x0) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r2, 0x402, 0x80000013) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r2, 0xc0045540, &(0x7f0000000100)=0x5) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x164, &(0x7f00000004c0)=ANY=[@ANYRES64=r0]) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, 0x0, 0x0, 0x4}, 0x94) ptrace(0x10, r3) ptrace$setregset(0x4205, r3, 0x200, &(0x7f00000001c0)={&(0x7f0000000440)="c94522e546f93f6dedf11f1509685636", 0x60}) syz_usb_connect(0x3, 0x34, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xb5, 0xe6, 0x74, 0x20, 0x5ac, 0x292, 0x8873, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x22, 0x1, 0x0, 0x0, 0x0, 0x44, [{{0x9, 0x4, 0x77, 0x0, 0x1, 0x3, 0x9a, 0x2, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x7, 0x5, "e37e1b82e6"}]}}]}}]}}]}}, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x40, 0x1e5782) syz_usb_control_io(r1, &(0x7f00000002c0)={0x18, 0x0, &(0x7f0000000300)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x422}}, 0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000040)={0x2}) syz_usb_connect(0x0, 0x2d, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000974281408205050083e50102030109021b0002000000000904000000eca19d000904ba000009"], 0x0) 2.216493491s ago: executing program 1 (id=6991): r0 = syz_open_dev$video(&(0x7f00000004c0), 0x81, 0xa082) ioctl$VIDIOC_G_FMT(r0, 0xc0d05605, &(0x7f0000000380)={0x5, @vbi={0x3, 0x7fffffbf, 0x80000006, 0x2fdaa7e6, [0x2cf8, 0x5], [0x40000be4], 0x2}}) add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f00000000c0)={0x0, 0x1, 0xb7b4, 0x9, 0x0, 0x1}, &(0x7f0000000100)=0x14) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000200)={r2, 0xf2, "c466127ba107610e2e645592c9a0b31c5b74d8237518e6f9f1ad83c0f9e28d7cc6087df692bb5dbd2323ac15df6e3b93432fe475dc1dc432f531eaf384504ef2138a44b1fc8e16cdebf79669bf1e1f34a5fbe76d1933f2dab730476fd6d255ca0080f4690c27f60cc41324d187b3c59d25c71f7041353c184c1d144f8ba0c7fa65cad5af6f36316f65d200af674f42688a886c5c09e0fefd038b97946ca963cacbe5458cf57756ff91f5d2ade25d243212e85d43312aa5dbbf451924d376061deb732762fc3226dfeb811ae86d7c9add072535fcca8c244e19abbfd53384f659ffa6f64077536ec2c28365a419b2639e2e21"}, &(0x7f0000000140)=0xfa) r3 = socket(0x2b, 0x80801, 0x1) setsockopt$inet6_tcp_int(r3, 0x6, 0x2c, &(0x7f00000001c0)=0x400, 0x4) syz_open_dev$audion(&(0x7f0000000000), 0xfffffffb, 0x0) 2.064649609s ago: executing program 1 (id=6992): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="28000000190001000000000000000000021800000000ff000000000008000100ac141400040008"], 0x28}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), r0) (async) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), r0) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000004c0)={0x44, r1, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x44}}, 0x40440d0) socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9, 0x0, 0x0, 0x4000001}, 0x40000) 1.941913079s ago: executing program 1 (id=6993): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) unshare(0x24040000) r2 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x3, 0x800}, &(0x7f0000001200)=0x0, &(0x7f0000001040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_UNLINKAT={0x24, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x200, 0x1}) io_uring_enter(r2, 0x47f9, 0x0, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x202, 0x1, 0xcccd2000, 0x1000, &(0x7f0000009000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f00000000c0)={0x5, 0x0, 0x5000, 0x2000, &(0x7f000002f000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x4, 0x3, 0xf000, 0x1000, &(0x7f000002f000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000000)={0x200, 0x0, 0xffff1000, 0x1000, &(0x7f0000ffb000/0x1000)=nil}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000080)={0x0, 0xfff, 0xfffff001, 0xc, 0x0, 0x3ff, 0x100, 0xfffffffe, {0x0, @in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x31}}}, 0x8, 0xffffff7f, 0x5, 0x2000, 0x5}}, &(0x7f0000000000)=0xb0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000140)={r6, 0x8}, 0x8) r7 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r2}, 0x8) bpf$TOKEN_CREATE(0x24, &(0x7f0000000240)={0x0, r7}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@local, @broadcast, @void, {@ipv4={0x8906, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0xa001, 0x880b, 0x8}}}}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r8 = socket$inet6(0xa, 0x3, 0x8000000003c) getsockopt$inet6_int(r8, 0x29, 0x24, 0x0, &(0x7f0000000180)) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000380), 0x48) 1.776809168s ago: executing program 1 (id=6994): syz_usb_connect(0x2, 0x56, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000c9d1c40899040a50b7e70102030109024400020000000009049700010dd5ce000824020100"], 0x0) userfaultfd(0x80001) io_setup(0x6, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x62081, 0x0) io_submit(0x0, 0x0, &(0x7f00000000c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x9) accept4(r2, &(0x7f0000000280)=@l2={0x1f, 0x0, @fixed}, 0x0, 0x800) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x62981) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='blkio.bfq.idle_time\x00', 0x0, 0x0) preadv2(r4, &(0x7f0000000280)=[{&(0x7f00000008c0)=""/211, 0xd3}], 0x1, 0x0, 0x0, 0x0) 1.457973486s ago: executing program 2 (id=6995): r0 = socket(0x15, 0xa, 0xa) getsockopt(r0, 0x200000000114, 0x40002717, 0x0, &(0x7f0000000000)=0xfffffffffffffeeb) r1 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000040)='.log\x00', 0x30d000, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000cc0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELFLOWTABLE={0x488, 0x18, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_HOOK={0x150, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7}, @NFTA_FLOWTABLE_HOOK_DEVS={0x7c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'erspan0\x00'}, {0x14, 0x1, 'veth0_to_bond\x00'}, {0x14, 0x1, 'wg2\x00'}, {0x14, 0x1, 'hsr0\x00'}, {0x14, 0x1, 'veth0_to_bridge\x00'}, {0x14, 0x1, 'dvmrp0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x389a}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'macvtap0\x00'}, {0x14, 0x1, 'syzkaller0\x00'}, {0x14, 0x1, 'syzkaller0\x00'}, {0x14, 0x1, 'rose0\x00'}, {0x14, 0x1, 'pimreg\x00'}, {0x14, 0x1, 'virt_wifi0\x00'}, {0x14, 0x1, 'nicvf0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFTA_FLOWTABLE_HOOK={0x220, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'dvmrp0\x00'}, {0x14, 0x1, 'dvmrp1\x00'}, {0x14, 0x1, 'caif0\x00'}, {0x14, 0x1, 'dvmrp1\x00'}, {0x14, 0x1, 'xfrm0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'team_slave_1\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'macvlan0\x00'}, {0x14, 0x1, 'wlan0\x00'}, {0x14, 0x1, 'dvmrp1\x00'}, {0x14, 0x1, 'macvlan0\x00'}, {0x14, 0x1, 'vlan0\x00'}, {0x14, 0x1, 'ip6gretap0\x00'}, {0x14, 0x1, 'dummy0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0xa4, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_bridge\x00'}, {0x14, 0x1, 'macvlan0\x00'}, {0x14}, {0x14, 0x1, 'veth1_macvtap\x00'}, {0x14, 0x1, 'vlan0\x00'}, {0x14, 0x1, 'bond_slave_1\x00'}, {0x14, 0x1, 'erspan0\x00'}, {0x14, 0x1, 'ip6erspan0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'geneve1\x00'}, {0x14, 0x1, 'batadv_slave_1\x00'}, {0x14, 0x1, 'wlan0\x00'}]}]}, @NFTA_FLOWTABLE_HOOK={0xe8, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x40}, @NFTA_FLOWTABLE_HOOK_DEVS={0xcc, 0x3, 0x0, 0x1, [{0x14, 0x1, 'erspan0\x00'}, {0x14, 0x1, 'veth0_to_bond\x00'}, {0x14, 0x1, 'macvlan0\x00'}, {0x14, 0x1, 'veth1\x00'}, {0x14, 0x1, 'veth1_vlan\x00'}, {0x14, 0x1, 'team_slave_1\x00'}, {0x14, 0x1, 'ip6erspan0\x00'}, {0x14, 0x1, 'gre0\x00'}, {0x14, 0x1, 'veth0_to_team\x00'}, {0x14, 0x1, 'ip6erspan0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x354d}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x28, 0x16, 0xa, 0x101, 0x0, 0x0, {0x8, 0x0, 0x6}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8}]}, @NFT_MSG_DELFLOWTABLE={0x2f4, 0x18, 0xa, 0x0, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0xe4, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0xb8, 0x3, 0x0, 0x1, [{0x14, 0x1, 'geneve1\x00'}, {0x14, 0x1, 'veth0_to_bridge\x00'}, {0x14, 0x1, 'macvtap0\x00'}, {0x14, 0x1, 'xfrm0\x00'}, {0x14, 0x1, 'veth1_to_batadv\x00'}, {0x14, 0x1, 'batadv_slave_1\x00'}, {0x14, 0x1, 'veth1_to_hsr\x00'}, {0x14, 0x1, 'ip6gretap0\x00'}, {0x14, 0x1, 'lo\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7f}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x8}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK={0x1c0, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xa9a}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'tunl0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_FLOWTABLE_HOOK_DEVS={0xa4, 0x3, 0x0, 0x1, [{0x14, 0x1, 'macvtap0\x00'}, {0x14, 0x1, 'pimreg0\x00'}, {0x14, 0x1, 'vlan0\x00'}, {0x14, 0x1, 'wlan1\x00'}, {0x14, 0x1, 'vxcan1\x00'}, {0x14, 0x1, 'vcan0\x00'}, {0x14, 0x1, 'dummy0\x00'}, {0x14, 0x1, 'wlan1\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'xfrm0\x00'}, {0x14, 0x1, 'veth1_virt_wifi\x00'}, {0x14, 0x1, 'veth0_to_hsr\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_to_batadv\x00'}, {0x14, 0x1, 'syzkaller0\x00'}, {0x14, 0x1, 'nr0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'macsec0\x00'}, {0x14, 0x1, 'veth0_to_batadv\x00'}, {0x14, 0x1, 'vlan0\x00'}, {0x14, 0x1, 'ip6erspan0\x00'}, {0x14, 0x1, 'veth0_vlan\x00'}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x7cc}, 0x1, 0x0, 0x0, 0x40}, 0x4080) openat$dsp(0xffffff9c, &(0x7f00000003c0), 0x84000, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x81, 0x0, 0x9, 0xfffffffffffffffd, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[], 0xc48}, 0x0, 0xe3d08660d3cd4684}) io_uring_enter(0xffffffffffffffff, 0x92, 0x0, 0x0, 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000200)={0x48}) add_key$keyring(&(0x7f0000000400), 0x0, 0x0, 0x0, 0xfffffffffffffffe) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="d80000001b0001000000000000000000fc00000000000000", @ANYRES32=0x0, @ANYBLOB], 0xd8}, 0x1, 0x0, 0x0, 0x4044001}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)={0x14, 0x0, 0x2, 0x101, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) add_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x4004000}, 0x40080) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB=',\x00', @ANYRES16], 0x2c}}, 0x0) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) 521.613759ms ago: executing program 2 (id=6996): r0 = syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x9, 0xfffa, 0x0, 0x7ee0, 0x2}}) socket(0x10, 0x803, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) socket(0x15, 0x5, 0x0) (async) r2 = socket(0x15, 0x5, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11f8b) (async) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11f8b) ioctl$BLKTRACESETUP(r3, 0xc0481273, 0x0) getsockopt(r2, 0x200000000114, 0x271e, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9) sendmsg$NFT_MSG_GETTABLE(r3, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x14004081}, 0x40) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0xffffffff, 0x0, 0x0, 0x4, 0x2, 0x1}}) (async) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0xffffffff, 0x0, 0x0, 0x4, 0x2, 0x1}}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x9, 0xff, 0x0, 0x3, 0xfffffffe, 0x3}}) (async) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x9, 0xff, 0x0, 0x3, 0xfffffffe, 0x3}}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x100}) (async) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x100}) sendfile(r0, r0, &(0x7f0000000080)=0x5, 0x100) syz_io_uring_setup(0x239, &(0x7f0000000980)={0x0, 0x0, 0x10100}, &(0x7f0000000300), &(0x7f0000000000)) (async) r5 = syz_io_uring_setup(0x239, &(0x7f0000000980)={0x0, 0x0, 0x10100}, &(0x7f0000000300)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r5, 0x2def, 0x0, 0x0, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x1d, [0x6, 0xc95a, 0xfffffff3, 0x9, 0x7f, 0x2, 0x1, 0x7f, 0x6, 0xfffffff9, 0xfffffff2, 0x5f, 0xa, 0x3, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x4, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0xffffffff, 0xfffffffe, 0x1f461e2c, 0x2, 0xe661, 0x4, 0x9, 0x3, 0x7fff, 0x4c74, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x71, 0x7, 0x7, 0x103, 0x0, 0x5, 0x3c, 0x91, 0x6, 0xfffffffd, 0x5, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x8, 0x12f, 0x8000, 0x10, 0x8, 0x129432e2, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x9, 0xfffffffe, 0x7, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0xa, 0x4, 0x4000, 0x8000, 0x9, 0x400, 0x1, 0x6, 0xfffffffd, 0xff, 0x1005, 0x7ff, 0x5f31, 0x4, 0x0, 0x9, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0x5, 0x0, 0x1, 0x8000, 0xffff, 0x2, 0x7f, 0x9, 0x5, 0x10003, 0x4, 0x1, 0x7, 0xb, 0x9, 0x48c93690, 0x3, 0xff], [0x7, 0x4, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x1, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x1, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x10000009, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0xf, 0x8, 0x4, 0x6d01, 0x5, 0x3b, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2, 0x0, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0x54fe12d6, 0xbf, 0x200, 0x3, 0x400002, 0xfffffff9, 0x0, 0x6, 0x5, 0x0, 0x6, 0xfffffffb, 0x120000, 0x3, 0x6, 0x9, 0x4, 0x3], [0x9, 0xbb2f, 0x3, 0x7, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x6, 0x8ad, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x1, 0xffffffff, 0x7ffffffe, 0x5, 0x8, 0xc8, 0x3, 0x3, 0xffff, 0x3, 0x9, 0x80000001, 0x9602, 0xa, 0x8, 0x4, 0x6, 0x1, 0x10000, 0x5, 0x8, 0x2b91, 0xa1f, 0x8, 0x9, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) r8 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) process_mrelease(r0, 0x0) (async) process_mrelease(r0, 0x0) write$char_usb(r8, &(0x7f0000000040)="e2", 0x918) 85.639825ms ago: executing program 2 (id=6997): syz_clone(0x24000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x4) r0 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r0, 0x400, 0x0) timer_create(0x7, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = getpid() r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x20e, 0x0, 0x4000000000000001}]}) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0xc008ae88, &(0x7f0000000040)={0x10000000000000cf, 0x0, [{}]}) fcntl$setownex(r1, 0xf, &(0x7f0000000100)={0x2, r2}) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000001c0)=0x0) fcntl$setown(r0, 0x8, r6) r7 = io_uring_setup(0x410d, &(0x7f0000000000)={0x0, 0x60a4, 0x200, 0xfffffffc, 0x2d5}) io_uring_register$IORING_REGISTER_BUFFERS2(r7, 0xf, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c1) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) ioctl$TCSETS(r8, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0xfe, "0062ba7d82000000160000000000f738096304"}) socket(0x11, 0x5, 0x40) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00'}) setsockopt$packet_int(r9, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) inotify_init() r10 = socket$inet6_sctp(0xa, 0x1, 0x84) dup(r10) 0s ago: executing program 8 (id=6998): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x7b1182, 0x6d) (async) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) close(r1) move_mount(r1, 0x0, 0xffffffffffffff9c, 0x0, 0x167) utimensat(r0, 0x0, 0x0, 0x0) (async) ioctl$BTRFS_IOC_SYNC(r0, 0x9408, 0x0) (async, rerun: 32) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x40202, 0x0) (rerun: 32) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000040)) syz_usb_connect(0x6, 0x1b, &(0x7f0000000200)={{0x12, 0x1, 0x250, 0xbe, 0xf2, 0x2d, 0x8, 0x12d1, 0x169e, 0xf0f1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9, 0x0, 0x81, 0x8, 0xd0, 0xb}}]}}, 0x0) kernel console output (not intermixed with test programs): _driver returned -16 [ 2017.487811][ T3873] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 2017.532507][ T3870] netlink: 'syz.8.6603': attribute type 4 has an invalid length. [ 2017.578203][ T3870] netlink: 3 bytes leftover after parsing attributes in process `syz.8.6603'. [ 2017.621857][ T5918] usb 4-1: USB disconnect, device number 102 [ 2017.773551][ T3891] FAULT_INJECTION: forcing a failure. [ 2017.773551][ T3891] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2017.854226][ T3891] CPU: 1 UID: 0 PID: 3891 Comm: syz.2.6605 Tainted: G L syzkaller #0 PREEMPT(full) [ 2017.854264][ T3891] Tainted: [L]=SOFTLOCKUP [ 2017.854273][ T3891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2017.854287][ T3891] Call Trace: [ 2017.854296][ T3891] [ 2017.854313][ T3891] dump_stack_lvl+0x189/0x250 [ 2017.854346][ T3891] ? __pfx____ratelimit+0x10/0x10 [ 2017.854382][ T3891] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2017.854408][ T3891] ? __pfx__printk+0x10/0x10 [ 2017.854441][ T3891] ? __might_fault+0xb0/0x130 [ 2017.854485][ T3891] should_fail_ex+0x414/0x560 [ 2017.854524][ T3891] _copy_from_user+0x2d/0xb0 [ 2017.854551][ T3891] get_compat_msghdr+0xad/0x4a0 [ 2017.854587][ T3891] ? __pfx_get_compat_msghdr+0x10/0x10 [ 2017.854617][ T3891] ? rcu_is_watching+0x15/0xb0 [ 2017.854644][ T3891] ? ___sys_sendmsg+0x22f/0x2a0 [ 2017.854679][ T3891] ___sys_sendmsg+0x193/0x2a0 [ 2017.854709][ T3891] ? __pfx____sys_sendmsg+0x10/0x10 [ 2017.854738][ T3891] ? kstrtoull+0x12f/0x1d0 [ 2017.854804][ T3891] ? __fget_files+0x2a/0x420 [ 2017.854832][ T3891] ? __fget_files+0x3a0/0x420 [ 2017.854871][ T3891] __sys_sendmmsg+0x28e/0x430 [ 2017.854905][ T3891] ? __pfx___sys_sendmmsg+0x10/0x10 [ 2017.854943][ T3891] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2017.854987][ T3891] ? ksys_write+0x22a/0x250 [ 2017.855007][ T3891] ? exc_page_fault+0x82/0x100 [ 2017.855031][ T3891] ? __pfx_ksys_write+0x10/0x10 [ 2017.855058][ T3891] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 2017.855091][ T3891] __do_fast_syscall_32+0x1f7/0x590 [ 2017.855117][ T3891] ? rcu_is_watching+0x15/0xb0 [ 2017.855143][ T3891] ? do_fast_syscall_32+0x34/0x80 [ 2017.855174][ T3891] do_fast_syscall_32+0x34/0x80 [ 2017.855200][ T3891] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2017.855227][ T3891] RIP: 0023:0xf7f32539 [ 2017.855248][ T3891] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2017.855269][ T3891] RSP: 002b:00000000f542655c EFLAGS: 00000206 ORIG_RAX: 0000000000000159 [ 2017.855293][ T3891] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000008000f7c0 [ 2017.855317][ T3891] RDX: 000000000000f000 RSI: 0000000000000800 RDI: 0000000000000000 [ 2017.855329][ T3891] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2017.855339][ T3891] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2017.855348][ T3891] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2017.855371][ T3891] [ 2018.295974][ T3903] IPVS: length: 218 != 24 [ 2018.300769][ T3903] batadv_slave_1: entered allmulticast mode [ 2018.784899][ T5904] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 2018.835922][ T3930] can: request_module (can-proto-3) failed. [ 2018.984546][ T5904] usb 4-1: Using ep0 maxpacket: 32 [ 2019.005715][ T5904] usb 4-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 2019.045849][ T5904] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2019.119839][ T5904] usb 4-1: Product: syz [ 2019.139394][ T5904] usb 4-1: Manufacturer: syz [ 2019.163227][ T5904] usb 4-1: SerialNumber: syz [ 2019.220462][ T5904] usb 4-1: config 0 descriptor?? [ 2019.334988][ T3902] batadv_slave_1: left allmulticast mode [ 2019.731905][ T3976] netlink: 'syz.2.6614': attribute type 4 has an invalid length. [ 2019.982961][ T3990] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2019.997566][ T3990] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2020.193777][ T3997] netlink: 92 bytes leftover after parsing attributes in process `syz.1.6616'. [ 2020.698726][ T4010] netlink: 'syz.2.6619': attribute type 10 has an invalid length. [ 2021.308936][ T4013] FAULT_INJECTION: forcing a failure. [ 2021.308936][ T4013] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2021.352038][ T4013] CPU: 0 UID: 0 PID: 4013 Comm: syz.8.6620 Tainted: G L syzkaller #0 PREEMPT(full) [ 2021.352077][ T4013] Tainted: [L]=SOFTLOCKUP [ 2021.352084][ T4013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2021.352099][ T4013] Call Trace: [ 2021.352125][ T4013] [ 2021.352145][ T4013] dump_stack_lvl+0x189/0x250 [ 2021.352179][ T4013] ? __pfx____ratelimit+0x10/0x10 [ 2021.352210][ T4013] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2021.352230][ T4013] ? __pfx__printk+0x10/0x10 [ 2021.352260][ T4013] ? __might_fault+0xb0/0x130 [ 2021.352306][ T4013] should_fail_ex+0x414/0x560 [ 2021.352342][ T4013] _copy_from_user+0x2d/0xb0 [ 2021.352366][ T4013] get_compat_msghdr+0xad/0x4a0 [ 2021.352392][ T4013] ? __pfx_get_compat_msghdr+0x10/0x10 [ 2021.352423][ T4013] ? rcu_is_watching+0x15/0xb0 [ 2021.352451][ T4013] ? ___sys_sendmsg+0x22f/0x2a0 [ 2021.352484][ T4013] ___sys_sendmsg+0x193/0x2a0 [ 2021.352511][ T4013] ? __pfx____sys_sendmsg+0x10/0x10 [ 2021.352531][ T4013] ? kstrtoull+0x12f/0x1d0 [ 2021.352591][ T4013] ? __fget_files+0x2a/0x420 [ 2021.352619][ T4013] ? __fget_files+0x3a0/0x420 [ 2021.352657][ T4013] __sys_sendmmsg+0x28e/0x430 [ 2021.352681][ T4013] ? __pfx___sys_sendmmsg+0x10/0x10 [ 2021.352708][ T4013] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2021.352760][ T4013] ? ksys_write+0x22a/0x250 [ 2021.352782][ T4013] ? exc_page_fault+0x82/0x100 [ 2021.352803][ T4013] ? __pfx_ksys_write+0x10/0x10 [ 2021.352829][ T4013] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 2021.352857][ T4013] __do_fast_syscall_32+0x1f7/0x590 [ 2021.352878][ T4013] ? rcu_is_watching+0x15/0xb0 [ 2021.352906][ T4013] ? do_fast_syscall_32+0x34/0x80 [ 2021.352936][ T4013] do_fast_syscall_32+0x34/0x80 [ 2021.352961][ T4013] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2021.352990][ T4013] RIP: 0023:0xf70bd539 [ 2021.353017][ T4013] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2021.353042][ T4013] RSP: 002b:00000000f54ad55c EFLAGS: 00000206 ORIG_RAX: 0000000000000159 [ 2021.353074][ T4013] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000008000f7c0 [ 2021.353090][ T4013] RDX: 000000000000f000 RSI: 0000000000000800 RDI: 0000000000000000 [ 2021.353104][ T4013] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2021.353118][ T4013] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2021.353131][ T4013] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2021.353163][ T4013] [ 2021.667633][ T5904] peak_usb 4-1:0.0 can0: unable to request usb[type=0 value=0] err=-71 [ 2021.698134][ T5904] peak_usb 4-1:0.0: unable to read PCAN-USB Pro bootloader info (err -71) [ 2021.976256][ T5904] peak_usb 4-1:0.0: probe with driver peak_usb failed with error -71 [ 2022.006444][ T5904] usb 4-1: USB disconnect, device number 103 [ 2022.627039][ T4074] can: request_module (can-proto-3) failed. [ 2022.752605][ T4084] tipc: Enabled bearer , priority 0 [ 2022.781163][ T4084] syzkaller0: entered promiscuous mode [ 2022.797300][ T4084] syzkaller0: entered allmulticast mode [ 2023.144604][ T5904] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 2023.225745][ T4104] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6632'. [ 2023.330962][ T5904] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2023.354008][ T5904] usb 2-1: config 0 has no interfaces? [ 2023.367563][ T5904] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 2023.387104][ T5904] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2023.403436][ T5904] usb 2-1: config 0 descriptor?? [ 2023.632655][ T4084] tipc: Resetting bearer [ 2023.691298][ T4083] tipc: Resetting bearer [ 2023.693628][ T5904] usb 2-1: string descriptor 0 read error: -71 [ 2023.734139][ T5904] usb 2-1: USB disconnect, device number 2 [ 2023.787778][ T4083] tipc: Disabling bearer [ 2024.069404][ T4104] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2024.099714][ T4104] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 2024.124177][ T4104] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 2024.159712][ T4104] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2024.187432][ T4104] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 2024.219277][ T4104] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2024.248014][ T4104] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 2024.270391][ T4104] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2024.291759][ T4104] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 2024.323226][ T4104] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 2024.594624][ T5904] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 2024.644340][ T4179] netlink: 'syz.1.6638': attribute type 39 has an invalid length. [ 2024.804674][ T5904] usb 4-1: Using ep0 maxpacket: 8 [ 2024.827205][ T5904] usb 4-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 2024.847408][ T5904] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2024.856674][ T5904] usb 4-1: Product: syz [ 2024.861073][ T5904] usb 4-1: Manufacturer: syz [ 2024.867862][ T5904] usb 4-1: SerialNumber: syz [ 2024.893874][ T5904] usb 4-1: config 0 descriptor?? [ 2024.930138][ T5904] gspca_main: sq930x-2.14.0 probing 2770:930c [ 2024.976970][T18888] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 2025.135069][T18888] usb 2-1: device descriptor read/64, error -71 [ 2025.177525][ T4193] syzkaller1: entered promiscuous mode [ 2025.183456][ T4193] syzkaller1: entered allmulticast mode [ 2025.374867][T18888] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 2025.384847][ T52] Bluetooth: hci2: command 0x0419 tx timeout [ 2025.525065][T18888] usb 2-1: device descriptor read/64, error -71 [ 2025.612194][ T4207] can: request_module (can-proto-3) failed. [ 2025.619512][ T4214] net_ratelimit: 56 callbacks suppressed [ 2025.619551][ T4214] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2025.645146][T18888] usb usb2-port1: attempt power cycle [ 2025.846802][ T4201] fuse: Bad value for 'rootmode' [ 2025.894862][T28909] usb 9-1: new high-speed USB device number 60 using dummy_hcd [ 2025.984545][T18888] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 2026.017032][T18888] usb 2-1: device descriptor read/8, error -71 [ 2026.044543][T28909] usb 9-1: Using ep0 maxpacket: 8 [ 2026.052810][T28909] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 2026.062583][T28909] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2026.074619][T28909] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2026.085077][T28909] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2026.096875][T28909] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2026.116350][ T52] Bluetooth: hci5: command 0x0406 tx timeout [ 2026.126273][T28909] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2026.137534][T28909] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2026.185065][ T52] Bluetooth: hci0: command 0x0406 tx timeout [ 2026.244594][ T5904] gspca_sq930x: reg_w 0105 0f00 failed -71 [ 2026.264910][T18888] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 2026.275749][ T52] Bluetooth: hci1: command 0x0406 tx timeout [ 2026.315954][T18888] usb 2-1: device descriptor read/8, error -71 [ 2026.347573][ T52] Bluetooth: hci4: command 0x0c1a tx timeout [ 2026.360526][T28909] usb 9-1: GET_CAPABILITIES returned 0 [ 2026.377606][T28909] usbtmc 9-1:16.0: can't read capabilities [ 2026.425013][T18888] usb usb2-port1: unable to enumerate USB device [ 2026.487016][ T5904] gspca_sq930x: Sensor ov9630 not yet treated [ 2026.493258][ T5904] sq930x 4-1:0.0: probe with driver sq930x failed with error -22 [ 2026.532298][ T5904] usb 4-1: USB disconnect, device number 104 [ 2026.572150][T18888] usb 9-1: USB disconnect, device number 60 [ 2026.578349][ T4215] usb 9-1: usbtmc_ioctl_clear_in_halt returned -32 [ 2026.738380][ T4274] FAULT_INJECTION: forcing a failure. [ 2026.738380][ T4274] name failslab, interval 1, probability 0, space 0, times 0 [ 2026.774635][ T4274] CPU: 0 UID: 0 PID: 4274 Comm: syz.8.6648 Tainted: G L syzkaller #0 PREEMPT(full) [ 2026.774673][ T4274] Tainted: [L]=SOFTLOCKUP [ 2026.774681][ T4274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2026.774696][ T4274] Call Trace: [ 2026.774705][ T4274] [ 2026.774715][ T4274] dump_stack_lvl+0x189/0x250 [ 2026.774748][ T4274] ? __pfx____ratelimit+0x10/0x10 [ 2026.774778][ T4274] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2026.774800][ T4274] ? __pfx__printk+0x10/0x10 [ 2026.774828][ T4274] ? __pfx___might_resched+0x10/0x10 [ 2026.774848][ T4274] ? fs_reclaim_acquire+0x7d/0x100 [ 2026.774872][ T4274] should_fail_ex+0x414/0x560 [ 2026.774903][ T4274] should_failslab+0xa8/0x100 [ 2026.774926][ T4274] kmem_cache_alloc_node_noprof+0x8c/0x720 [ 2026.774955][ T4274] ? __alloc_skb+0x255/0x430 [ 2026.774973][ T4274] ? napi_skb_cache_get+0x4a5/0x780 [ 2026.774990][ T4274] ? napi_skb_cache_get+0x151/0x780 [ 2026.775011][ T4274] __alloc_skb+0x255/0x430 [ 2026.775032][ T4274] ? __pfx___alloc_skb+0x10/0x10 [ 2026.775057][ T4274] alloc_skb_with_frags+0xca/0x890 [ 2026.775083][ T4274] ? do_raw_spin_lock+0x121/0x290 [ 2026.775114][ T4274] sock_alloc_send_pskb+0x84d/0x980 [ 2026.775153][ T4274] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 2026.775180][ T4274] ? sock_def_readable+0xae/0x530 [ 2026.775209][ T4274] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 2026.775231][ T4274] unix_dgram_sendmsg+0x454/0x1840 [ 2026.775272][ T4274] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 2026.775290][ T4274] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 2026.775320][ T4274] ? __import_iovec+0x40e/0x7f0 [ 2026.775343][ T4274] ? unix_seqpacket_sendmsg+0x111/0x1e0 [ 2026.775363][ T4274] ? __pfx_unix_seqpacket_sendmsg+0x10/0x10 [ 2026.775384][ T4274] __sock_sendmsg+0x21c/0x270 [ 2026.775421][ T4274] ____sys_sendmsg+0x52d/0x820 [ 2026.775447][ T4274] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2026.775472][ T4274] ? rcu_is_watching+0x15/0xb0 [ 2026.775493][ T4274] ? ___sys_sendmsg+0x22f/0x2a0 [ 2026.775519][ T4274] ___sys_sendmsg+0x21f/0x2a0 [ 2026.775542][ T4274] ? __pfx____sys_sendmsg+0x10/0x10 [ 2026.775564][ T4274] ? kstrtoull+0x12f/0x1d0 [ 2026.775615][ T4274] ? __fget_files+0x2a/0x420 [ 2026.775637][ T4274] ? __fget_files+0x3a0/0x420 [ 2026.775668][ T4274] __sys_sendmmsg+0x28e/0x430 [ 2026.775693][ T4274] ? __pfx___sys_sendmmsg+0x10/0x10 [ 2026.775722][ T4274] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2026.775756][ T4274] ? ksys_write+0x22a/0x250 [ 2026.775772][ T4274] ? exc_page_fault+0x82/0x100 [ 2026.775789][ T4274] ? __pfx_ksys_write+0x10/0x10 [ 2026.775810][ T4274] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 2026.775837][ T4274] __do_fast_syscall_32+0x1f7/0x590 [ 2026.775859][ T4274] ? rcu_is_watching+0x15/0xb0 [ 2026.775879][ T4274] ? do_fast_syscall_32+0x34/0x80 [ 2026.775903][ T4274] do_fast_syscall_32+0x34/0x80 [ 2026.775923][ T4274] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2026.775945][ T4274] RIP: 0023:0xf70bd539 [ 2026.775960][ T4274] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2026.775977][ T4274] RSP: 002b:00000000f54ad55c EFLAGS: 00000206 ORIG_RAX: 0000000000000159 [ 2026.775997][ T4274] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000008000f7c0 [ 2026.776010][ T4274] RDX: 000000000000f000 RSI: 0000000000000800 RDI: 0000000000000000 [ 2026.776021][ T4274] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2026.776031][ T4274] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2026.776042][ T4274] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2026.776068][ T4274] [ 2027.183975][ T4279] tipc: Enabled bearer , priority 0 [ 2027.192574][ T4279] syzkaller0: entered promiscuous mode [ 2027.198267][ T4279] syzkaller0: entered allmulticast mode [ 2027.454582][T20005] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 2027.607778][T20005] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2027.619695][T20005] usb 4-1: config 0 has no interfaces? [ 2027.653854][T20005] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 2027.673377][T20005] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2027.733579][T20005] usb 4-1: config 0 descriptor?? [ 2027.984188][ T5904] usb 4-1: USB disconnect, device number 105 [ 2028.033094][ T4278] tipc: Resetting bearer [ 2028.114112][ T4278] tipc: Disabling bearer [ 2028.184978][ T52] Bluetooth: hci5: command 0x0406 tx timeout [ 2028.264784][ T52] Bluetooth: hci0: command 0x0406 tx timeout [ 2028.290515][ T4258] syz.2.6647 (4258): drop_caches: 3 [ 2028.324695][T20005] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 2028.344629][ T52] Bluetooth: hci1: command 0x0406 tx timeout [ 2028.424564][ T52] Bluetooth: hci4: command 0x0c1a tx timeout [ 2028.506894][T20005] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2028.529015][T20005] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2028.554687][T20005] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 2028.601800][T20005] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2028.633512][T20005] usb 2-1: config 0 descriptor?? [ 2028.663243][T20005] hub 2-1:0.0: USB hub found [ 2028.853947][ T4364] loop6: detected capacity change from 0 to 2640 [ 2028.875003][T20005] hub 2-1:0.0: 2 ports detected [ 2028.878658][T26347] buffer_io_error: 23 callbacks suppressed [ 2028.878698][T26347] Buffer I/O error on dev loop6, logical block 0, async page read [ 2028.912714][T26347] Buffer I/O error on dev loop6, logical block 0, async page read [ 2028.933311][T26347] Buffer I/O error on dev loop6, logical block 0, async page read [ 2028.942142][T26347] Buffer I/O error on dev loop6, logical block 0, async page read [ 2028.951981][T26347] Buffer I/O error on dev loop6, logical block 0, async page read [ 2028.972366][T26347] Buffer I/O error on dev loop6, logical block 0, async page read [ 2028.982155][ T4363] Buffer I/O error on dev loop6, logical block 1, async page read [ 2029.001412][ T4367] Buffer I/O error on dev loop6, logical block 0, async page read [ 2029.001768][ T4363] Buffer I/O error on dev loop6, logical block 1, async page read [ 2029.028511][ T4363] Buffer I/O error on dev loop6, logical block 1, async page read [ 2029.067773][T26347] ldm_validate_partition_table(): Disk read failed. [ 2029.084657][T26347] Dev loop6: unable to read RDB block 0 [ 2029.095154][T26347] loop6: unable to read partition table [ 2029.143697][ T4364] ldm_validate_partition_table(): Disk read failed. [ 2029.225587][ T4364] Dev loop6: unable to read RDB block 0 [ 2029.245605][ T4364] loop6: unable to read partition table [ 2029.261582][ T4364] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 2029.316187][T20005] usb 2-1: USB disconnect, device number 7 [ 2029.655908][ T4396] FAULT_INJECTION: forcing a failure. [ 2029.655908][ T4396] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2029.685782][ T4396] CPU: 0 UID: 0 PID: 4396 Comm: syz.8.6661 Tainted: G L syzkaller #0 PREEMPT(full) [ 2029.685819][ T4396] Tainted: [L]=SOFTLOCKUP [ 2029.685828][ T4396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2029.685842][ T4396] Call Trace: [ 2029.685851][ T4396] [ 2029.685861][ T4396] dump_stack_lvl+0x189/0x250 [ 2029.685895][ T4396] ? __pfx____ratelimit+0x10/0x10 [ 2029.685939][ T4396] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2029.685967][ T4396] ? __pfx__printk+0x10/0x10 [ 2029.686000][ T4396] ? __might_fault+0xb0/0x130 [ 2029.686042][ T4396] should_fail_ex+0x414/0x560 [ 2029.686077][ T4396] _copy_from_user+0x2d/0xb0 [ 2029.686103][ T4396] get_compat_msghdr+0xad/0x4a0 [ 2029.686139][ T4396] ? __pfx_get_compat_msghdr+0x10/0x10 [ 2029.686170][ T4396] ? rcu_is_watching+0x15/0xb0 [ 2029.686198][ T4396] ? ___sys_sendmsg+0x22f/0x2a0 [ 2029.686233][ T4396] ___sys_sendmsg+0x193/0x2a0 [ 2029.686264][ T4396] ? __pfx____sys_sendmsg+0x10/0x10 [ 2029.686294][ T4396] ? kstrtoull+0x12f/0x1d0 [ 2029.686357][ T4396] ? __fget_files+0x2a/0x420 [ 2029.686384][ T4396] ? __fget_files+0x3a0/0x420 [ 2029.686425][ T4396] __sys_sendmmsg+0x28e/0x430 [ 2029.686458][ T4396] ? __pfx___sys_sendmmsg+0x10/0x10 [ 2029.686496][ T4396] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2029.686538][ T4396] ? ksys_write+0x22a/0x250 [ 2029.686558][ T4396] ? exc_page_fault+0x82/0x100 [ 2029.686582][ T4396] ? __pfx_ksys_write+0x10/0x10 [ 2029.686610][ T4396] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 2029.686643][ T4396] __do_fast_syscall_32+0x1f7/0x590 [ 2029.686671][ T4396] ? rcu_is_watching+0x15/0xb0 [ 2029.686697][ T4396] ? do_fast_syscall_32+0x34/0x80 [ 2029.686728][ T4396] do_fast_syscall_32+0x34/0x80 [ 2029.686755][ T4396] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2029.686782][ T4396] RIP: 0023:0xf70bd539 [ 2029.686801][ T4396] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2029.686821][ T4396] RSP: 002b:00000000f54ad55c EFLAGS: 00000206 ORIG_RAX: 0000000000000159 [ 2029.686845][ T4396] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000008000f7c0 [ 2029.686859][ T4396] RDX: 000000000000f000 RSI: 0000000000000800 RDI: 0000000000000000 [ 2029.686869][ T4396] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2029.686879][ T4396] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2029.686889][ T4396] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2029.686918][ T4396] [ 2029.940564][T20005] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 2030.027163][ T4369] can: request_module (can-proto-3) failed. [ 2030.094911][T20005] usb 2-1: Using ep0 maxpacket: 16 [ 2030.102102][T20005] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 2030.134866][T20005] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 2030.163645][T20005] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2030.193024][T20005] usb 2-1: Product: syz [ 2030.236888][T20005] usb 2-1: Manufacturer: syz [ 2030.249848][T20005] usb 2-1: SerialNumber: syz [ 2030.298718][T20005] usb 2-1: config 0 descriptor?? [ 2030.340345][T20005] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 2030.384404][T20005] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 2030.443503][ T4400] use of bytesused == 0 is deprecated and will be removed in the future, [ 2030.453121][ T4400] use the actual size instead. [ 2030.514630][ T52] Bluetooth: hci4: command 0x0c1a tx timeout [ 2031.060141][T20005] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 2031.531606][ T4429] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2031.586049][ T4429] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2032.443923][T20005] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 2032.467154][T20005] em28xx 2-1:0.0: board has no eeprom [ 2032.545308][T20005] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 2032.567909][T20005] em28xx 2-1:0.0: dvb set to bulk mode. [ 2032.577748][ T5904] em28xx 2-1:0.0: Binding DVB extension [ 2032.780072][ T5904] em28xx 2-1:0.0: Registering input extension [ 2032.925119][ T4512] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 2032.931712][ T4512] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2032.946360][ T4512] vhci_hcd vhci_hcd.0: Device attached [ 2033.224747][T28909] usb 38-1: SetAddress Request (2) to port 0 [ 2033.231597][T28909] usb 38-1: new SuperSpeed USB device number 2 using vhci_hcd [ 2033.577027][ T5918] usb 2-1: USB disconnect, device number 8 [ 2033.631015][ T5918] em28xx 2-1:0.0: Disconnecting em28xx [ 2033.647036][ T5918] em28xx 2-1:0.0: Closing input extension [ 2033.771600][ T5918] em28xx 2-1:0.0: Freeing device [ 2035.115372][ T4584] netlink: 124 bytes leftover after parsing attributes in process `syz.3.6676'. [ 2035.362477][ T4586] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2035.441684][ T4513] vhci_hcd: connection reset by peer [ 2035.462412][ T1137] vhci_hcd vhci_hcd.2: stop threads [ 2035.475947][ T1137] vhci_hcd vhci_hcd.2: release socket [ 2035.491659][ T1137] vhci_hcd vhci_hcd.2: disconnect device [ 2035.851601][ T4598] tipc: Enabling of bearer rejected, failed to enable media [ 2036.142820][ T4610] netlink: 'syz.7.6681': attribute type 2 has an invalid length. [ 2036.153582][ T4610] netlink: 16158 bytes leftover after parsing attributes in process `syz.7.6681'. [ 2036.365525][ T4617] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6683'. [ 2036.434633][ T5884] usb 9-1: new high-speed USB device number 61 using dummy_hcd [ 2036.536171][ T4620] FAULT_INJECTION: forcing a failure. [ 2036.536171][ T4620] name failslab, interval 1, probability 0, space 0, times 0 [ 2036.550336][ T4620] CPU: 0 UID: 0 PID: 4620 Comm: syz.3.6684 Tainted: G L syzkaller #0 PREEMPT(full) [ 2036.550374][ T4620] Tainted: [L]=SOFTLOCKUP [ 2036.550390][ T4620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2036.550404][ T4620] Call Trace: [ 2036.550414][ T4620] [ 2036.550424][ T4620] dump_stack_lvl+0x189/0x250 [ 2036.550457][ T4620] ? __pfx____ratelimit+0x10/0x10 [ 2036.550494][ T4620] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2036.550522][ T4620] ? __pfx__printk+0x10/0x10 [ 2036.550558][ T4620] ? __pfx___might_resched+0x10/0x10 [ 2036.550584][ T4620] ? fs_reclaim_acquire+0x7d/0x100 [ 2036.550614][ T4620] should_fail_ex+0x414/0x560 [ 2036.550652][ T4620] should_failslab+0xa8/0x100 [ 2036.550680][ T4620] kmem_cache_alloc_node_noprof+0x8c/0x720 [ 2036.550715][ T4620] ? __alloc_skb+0x255/0x430 [ 2036.550736][ T4620] ? napi_skb_cache_get+0x4a5/0x780 [ 2036.550758][ T4620] ? napi_skb_cache_get+0x151/0x780 [ 2036.550783][ T4620] __alloc_skb+0x255/0x430 [ 2036.550810][ T4620] ? __pfx___alloc_skb+0x10/0x10 [ 2036.550841][ T4620] alloc_skb_with_frags+0xca/0x890 [ 2036.550871][ T4620] ? do_raw_spin_lock+0x121/0x290 [ 2036.550909][ T4620] sock_alloc_send_pskb+0x84d/0x980 [ 2036.550956][ T4620] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 2036.550990][ T4620] ? sock_def_readable+0xae/0x530 [ 2036.551027][ T4620] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 2036.551056][ T4620] unix_dgram_sendmsg+0x454/0x1840 [ 2036.551110][ T4620] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 2036.551134][ T4620] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 2036.551181][ T4620] ? __import_iovec+0x40e/0x7f0 [ 2036.551209][ T4620] ? unix_seqpacket_sendmsg+0x111/0x1e0 [ 2036.551235][ T4620] ? __pfx_unix_seqpacket_sendmsg+0x10/0x10 [ 2036.551263][ T4620] __sock_sendmsg+0x21c/0x270 [ 2036.551304][ T4620] ____sys_sendmsg+0x52d/0x820 [ 2036.551338][ T4620] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2036.551370][ T4620] ? rcu_is_watching+0x15/0xb0 [ 2036.551405][ T4620] ? ___sys_sendmsg+0x22f/0x2a0 [ 2036.551439][ T4620] ___sys_sendmsg+0x21f/0x2a0 [ 2036.551469][ T4620] ? __pfx____sys_sendmsg+0x10/0x10 [ 2036.551498][ T4620] ? kstrtoull+0x12f/0x1d0 [ 2036.551562][ T4620] ? __fget_files+0x2a/0x420 [ 2036.551590][ T4620] ? __fget_files+0x3a0/0x420 [ 2036.551628][ T4620] __sys_sendmmsg+0x28e/0x430 [ 2036.551661][ T4620] ? __pfx___sys_sendmmsg+0x10/0x10 [ 2036.551696][ T4620] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2036.551739][ T4620] ? ksys_write+0x22a/0x250 [ 2036.551759][ T4620] ? exc_page_fault+0x82/0x100 [ 2036.551781][ T4620] ? __pfx_ksys_write+0x10/0x10 [ 2036.551808][ T4620] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 2036.551842][ T4620] __do_fast_syscall_32+0x1f7/0x590 [ 2036.551869][ T4620] ? rcu_is_watching+0x15/0xb0 [ 2036.551893][ T4620] ? do_fast_syscall_32+0x34/0x80 [ 2036.551924][ T4620] do_fast_syscall_32+0x34/0x80 [ 2036.551949][ T4620] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2036.551977][ T4620] RIP: 0023:0xf7f27539 [ 2036.551995][ T4620] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2036.552013][ T4620] RSP: 002b:00000000f541655c EFLAGS: 00000206 ORIG_RAX: 0000000000000159 [ 2036.552035][ T4620] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000008000f7c0 [ 2036.552050][ T4620] RDX: 000000000000f000 RSI: 0000000000000800 RDI: 0000000000000000 [ 2036.552062][ T4620] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2036.552075][ T4620] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2036.552089][ T4620] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2036.552120][ T4620] [ 2036.574577][ T5884] usb 9-1: device descriptor read/64, error -71 [ 2036.713834][ T4625] tipc: Enabled bearer , priority 0 [ 2036.775620][ T4630] netlink: 52 bytes leftover after parsing attributes in process `syz.1.6685'. [ 2036.796233][ T4625] syzkaller0: entered promiscuous mode [ 2036.949760][ T4625] syzkaller0: entered allmulticast mode [ 2036.955836][ T5884] usb 9-1: new high-speed USB device number 62 using dummy_hcd [ 2037.095939][ T5884] usb 9-1: device descriptor read/64, error -71 [ 2037.115185][T20005] usb 4-1: new full-speed USB device number 106 using dummy_hcd [ 2037.205276][ T5884] usb usb9-port1: attempt power cycle [ 2037.277744][T20005] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2037.288524][T20005] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 2037.297700][T20005] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 2037.308119][T20005] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2037.324195][T20005] usb 4-1: config 0 descriptor?? [ 2037.341629][T20005] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 2037.349373][T20005] dvb-usb: bulk message failed: -22 (3/0) [ 2037.363398][T20005] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 2037.380212][T20005] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 2037.398038][T20005] usb 4-1: media controller created [ 2037.420406][T20005] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2037.440945][T20005] dvb-usb: bulk message failed: -22 (6/0) [ 2037.449331][T20005] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 2037.461480][T20005] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input144 [ 2037.501120][T20005] dvb-usb: schedule remote query interval to 150 msecs. [ 2037.531036][T20005] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 2037.551332][ T5884] usb 9-1: new high-speed USB device number 63 using dummy_hcd [ 2037.570267][ T4625] dvb-usb: bulk message failed: -22 (2/0) [ 2037.586371][ T5884] usb 9-1: device descriptor read/8, error -71 [ 2037.607796][ T5918] usb 4-1: USB disconnect, device number 106 [ 2037.697743][ T5918] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 2037.787589][ T4624] tipc: Resetting bearer [ 2037.844688][ T5884] usb 9-1: new high-speed USB device number 64 using dummy_hcd [ 2037.856220][ T4624] tipc: Disabling bearer [ 2037.885384][ T5884] usb 9-1: device descriptor read/8, error -71 [ 2038.006140][ T5884] usb usb9-port1: unable to enumerate USB device [ 2038.011535][ T4708] QAT: Device 64 not found [ 2038.344729][T28909] usb 38-1: device descriptor read/8, error -110 [ 2038.955582][T28909] usb usb38-port1: attempt power cycle [ 2039.140002][ T4746] FAULT_INJECTION: forcing a failure. [ 2039.140002][ T4746] name failslab, interval 1, probability 0, space 0, times 0 [ 2039.184731][ T4746] CPU: 1 UID: 0 PID: 4746 Comm: syz.2.6696 Tainted: G L syzkaller #0 PREEMPT(full) [ 2039.184770][ T4746] Tainted: [L]=SOFTLOCKUP [ 2039.184779][ T4746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2039.184794][ T4746] Call Trace: [ 2039.184804][ T4746] [ 2039.184815][ T4746] dump_stack_lvl+0x189/0x250 [ 2039.184848][ T4746] ? __pfx____ratelimit+0x10/0x10 [ 2039.184885][ T4746] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2039.184920][ T4746] ? __pfx__printk+0x10/0x10 [ 2039.184957][ T4746] ? __pfx___might_resched+0x10/0x10 [ 2039.184983][ T4746] ? fs_reclaim_acquire+0x7d/0x100 [ 2039.185013][ T4746] should_fail_ex+0x414/0x560 [ 2039.185053][ T4746] should_failslab+0xa8/0x100 [ 2039.185084][ T4746] kmem_cache_alloc_node_noprof+0x8c/0x720 [ 2039.185121][ T4746] ? __alloc_skb+0x255/0x430 [ 2039.185143][ T4746] ? napi_skb_cache_get+0x4a5/0x780 [ 2039.185165][ T4746] ? napi_skb_cache_get+0x151/0x780 [ 2039.185193][ T4746] __alloc_skb+0x255/0x430 [ 2039.185221][ T4746] ? __pfx___alloc_skb+0x10/0x10 [ 2039.185254][ T4746] alloc_skb_with_frags+0xca/0x890 [ 2039.185283][ T4746] ? finish_task_switch+0x23d/0x940 [ 2039.185319][ T4746] ? rcu_is_watching+0x15/0xb0 [ 2039.185349][ T4746] ? trace_sched_exit_tp+0x36/0xf0 [ 2039.185385][ T4746] sock_alloc_send_pskb+0x84d/0x980 [ 2039.185436][ T4746] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 2039.185469][ T4746] ? __pfx___schedule+0x10/0x10 [ 2039.185509][ T4746] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 2039.185538][ T4746] unix_dgram_sendmsg+0x454/0x1840 [ 2039.185569][ T4746] ? trace_irq_disable+0x37/0x100 [ 2039.185601][ T4746] ? preempt_schedule_irq+0xde/0x150 [ 2039.185627][ T4746] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 2039.185655][ T4746] ? irqentry_exit+0x5dd/0x660 [ 2039.185679][ T4746] ? lockdep_hardirqs_on+0x98/0x140 [ 2039.185704][ T4746] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 2039.185728][ T4746] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 2039.185765][ T4746] ? __import_iovec+0x40e/0x7f0 [ 2039.185794][ T4746] ? unix_seqpacket_sendmsg+0x111/0x1e0 [ 2039.185820][ T4746] ? __pfx_unix_seqpacket_sendmsg+0x10/0x10 [ 2039.185848][ T4746] __sock_sendmsg+0x21c/0x270 [ 2039.185885][ T4746] ____sys_sendmsg+0x52d/0x820 [ 2039.185925][ T4746] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2039.185958][ T4746] ? rcu_is_watching+0x15/0xb0 [ 2039.185985][ T4746] ? ___sys_sendmsg+0x22f/0x2a0 [ 2039.186020][ T4746] ___sys_sendmsg+0x21f/0x2a0 [ 2039.186049][ T4746] ? __pfx____sys_sendmsg+0x10/0x10 [ 2039.186078][ T4746] ? kstrtoull+0x12f/0x1d0 [ 2039.186145][ T4746] ? __fget_files+0x2a/0x420 [ 2039.186174][ T4746] ? __fget_files+0x3a0/0x420 [ 2039.186214][ T4746] __sys_sendmmsg+0x28e/0x430 [ 2039.186248][ T4746] ? __pfx___sys_sendmmsg+0x10/0x10 [ 2039.186286][ T4746] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2039.186330][ T4746] ? ksys_write+0x22a/0x250 [ 2039.186350][ T4746] ? exc_page_fault+0x82/0x100 [ 2039.186374][ T4746] ? __pfx_ksys_write+0x10/0x10 [ 2039.186402][ T4746] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 2039.186436][ T4746] __do_fast_syscall_32+0x1f7/0x590 [ 2039.186463][ T4746] ? rcu_is_watching+0x15/0xb0 [ 2039.186489][ T4746] ? do_fast_syscall_32+0x34/0x80 [ 2039.186520][ T4746] do_fast_syscall_32+0x34/0x80 [ 2039.186546][ T4746] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2039.186574][ T4746] RIP: 0023:0xf7f32539 [ 2039.186593][ T4746] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2039.186613][ T4746] RSP: 002b:00000000f542655c EFLAGS: 00000206 ORIG_RAX: 0000000000000159 [ 2039.186639][ T4746] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000008000f7c0 [ 2039.186655][ T4746] RDX: 000000000000f000 RSI: 0000000000000800 RDI: 0000000000000000 [ 2039.186670][ T4746] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2039.186683][ T4746] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2039.186698][ T4746] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2039.186731][ T4746] [ 2039.668698][ T5935] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 2039.834579][ T5935] usb 4-1: device descriptor read/64, error -71 [ 2039.883928][T28909] usb usb38-port1: unable to enumerate USB device [ 2040.104934][ T5935] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 2040.324674][ T5935] usb 4-1: device descriptor read/64, error -71 [ 2040.394422][ T4759] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6698'. [ 2040.458321][ T5935] usb usb4-port1: attempt power cycle [ 2040.915053][ T5935] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 2040.956228][ T5935] usb 4-1: device descriptor read/8, error -71 [ 2041.214705][ T5935] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 2041.285571][ T5935] usb 4-1: device descriptor read/8, error -71 [ 2041.405021][ T5935] usb usb4-port1: unable to enumerate USB device [ 2041.889423][ T4834] ptrace attach of "./syz-executor exec"[29489] was attempted by "./syz-executor exec"[4834] [ 2041.938742][ T4823] netlink: 'syz.2.6702': attribute type 7 has an invalid length. [ 2042.272250][ T4843] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6705'. [ 2042.707635][ T4852] FAULT_INJECTION: forcing a failure. [ 2042.707635][ T4852] name failslab, interval 1, probability 0, space 0, times 0 [ 2042.733137][ T4852] CPU: 1 UID: 0 PID: 4852 Comm: syz.1.6707 Tainted: G L syzkaller #0 PREEMPT(full) [ 2042.733164][ T4852] Tainted: [L]=SOFTLOCKUP [ 2042.733170][ T4852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2042.733181][ T4852] Call Trace: [ 2042.733188][ T4852] [ 2042.733195][ T4852] dump_stack_lvl+0x189/0x250 [ 2042.733220][ T4852] ? __pfx____ratelimit+0x10/0x10 [ 2042.733247][ T4852] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2042.733266][ T4852] ? __pfx__printk+0x10/0x10 [ 2042.733292][ T4852] ? __pfx___might_resched+0x10/0x10 [ 2042.733311][ T4852] ? fs_reclaim_acquire+0x7d/0x100 [ 2042.733332][ T4852] should_fail_ex+0x414/0x560 [ 2042.733360][ T4852] should_failslab+0xa8/0x100 [ 2042.733382][ T4852] kmem_cache_alloc_node_noprof+0x8c/0x720 [ 2042.733409][ T4852] ? __alloc_skb+0x255/0x430 [ 2042.733425][ T4852] ? napi_skb_cache_get+0x4a5/0x780 [ 2042.733440][ T4852] ? napi_skb_cache_get+0x151/0x780 [ 2042.733460][ T4852] __alloc_skb+0x255/0x430 [ 2042.733478][ T4852] ? __pfx___alloc_skb+0x10/0x10 [ 2042.733502][ T4852] alloc_skb_with_frags+0xca/0x890 [ 2042.733536][ T4852] ? do_raw_spin_lock+0x121/0x290 [ 2042.733564][ T4852] sock_alloc_send_pskb+0x84d/0x980 [ 2042.733599][ T4852] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 2042.733623][ T4852] ? sock_def_readable+0xae/0x530 [ 2042.733649][ T4852] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 2042.733669][ T4852] unix_dgram_sendmsg+0x454/0x1840 [ 2042.733706][ T4852] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 2042.733723][ T4852] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 2042.733750][ T4852] ? __import_iovec+0x40e/0x7f0 [ 2042.733772][ T4852] ? unix_seqpacket_sendmsg+0x111/0x1e0 [ 2042.733790][ T4852] ? __pfx_unix_seqpacket_sendmsg+0x10/0x10 [ 2042.733809][ T4852] __sock_sendmsg+0x21c/0x270 [ 2042.733836][ T4852] ____sys_sendmsg+0x52d/0x820 [ 2042.733859][ T4852] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2042.733881][ T4852] ? rcu_is_watching+0x15/0xb0 [ 2042.733901][ T4852] ? ___sys_sendmsg+0x22f/0x2a0 [ 2042.733925][ T4852] ___sys_sendmsg+0x21f/0x2a0 [ 2042.733945][ T4852] ? __pfx____sys_sendmsg+0x10/0x10 [ 2042.733966][ T4852] ? kstrtoull+0x12f/0x1d0 [ 2042.734011][ T4852] ? __fget_files+0x2a/0x420 [ 2042.734032][ T4852] ? __fget_files+0x3a0/0x420 [ 2042.734059][ T4852] __sys_sendmmsg+0x28e/0x430 [ 2042.734082][ T4852] ? __pfx___sys_sendmmsg+0x10/0x10 [ 2042.734108][ T4852] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2042.734139][ T4852] ? ksys_write+0x22a/0x250 [ 2042.734153][ T4852] ? exc_page_fault+0x82/0x100 [ 2042.734169][ T4852] ? __pfx_ksys_write+0x10/0x10 [ 2042.734188][ T4852] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 2042.734213][ T4852] __do_fast_syscall_32+0x1f7/0x590 [ 2042.734232][ T4852] ? rcu_is_watching+0x15/0xb0 [ 2042.734250][ T4852] ? do_fast_syscall_32+0x34/0x80 [ 2042.734271][ T4852] do_fast_syscall_32+0x34/0x80 [ 2042.734289][ T4852] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2042.734308][ T4852] RIP: 0023:0xf7f57539 [ 2042.734322][ T4852] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2042.734337][ T4852] RSP: 002b:00000000f544655c EFLAGS: 00000206 ORIG_RAX: 0000000000000159 [ 2042.734353][ T4852] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000008000f7c0 [ 2042.734365][ T4852] RDX: 000000000000f000 RSI: 0000000000000800 RDI: 0000000000000000 [ 2042.734375][ T4852] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2042.734384][ T4852] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2042.734394][ T4852] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2042.734416][ T4852] [ 2043.190725][T18888] hid-generic 0000:0000:0000.005A: unknown main item tag 0x0 [ 2043.212563][ T4859] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6708'. [ 2043.260584][T18888] hid-generic 0000:0000:0000.005A: hidraw0: HID v0.00 Device [syz0] on syz0 [ 2043.294289][ T4857] tipc: Enabled bearer , priority 0 [ 2043.302687][ T4857] syzkaller0: entered promiscuous mode [ 2043.309887][ T4857] syzkaller0: entered allmulticast mode [ 2043.634615][ T5918] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 2043.695546][ T4883] netlink: 'syz.3.6712': attribute type 30 has an invalid length. [ 2043.784675][ T5918] usb 2-1: device descriptor read/64, error -71 [ 2044.024719][ T5918] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 2044.204727][ T5918] usb 2-1: device descriptor read/64, error -71 [ 2044.314849][ T5918] usb usb2-port1: attempt power cycle [ 2044.414963][ T5935] tipc: Node number set to 159071786 [ 2044.665209][ T5918] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 2044.685328][ T5918] usb 2-1: device descriptor read/8, error -71 [ 2044.825280][ T4910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2044.835274][ T4910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2044.843921][ T4910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2044.866880][ T4910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2044.875642][ T4910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2044.901010][ T4910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2044.910144][ T4910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2044.921614][ T4910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2044.930388][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2044.940078][ T5918] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 2044.945862][ T4911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2044.957354][ T5884] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 2044.976971][ T5918] usb 2-1: device descriptor read/8, error -71 [ 2045.084810][ T5918] usb usb2-port1: unable to enumerate USB device [ 2045.134675][ T5884] usb 4-1: Using ep0 maxpacket: 32 [ 2045.141822][ T5884] usb 4-1: config 0 has an invalid interface number: 196 but max is 0 [ 2045.158030][ T5884] usb 4-1: config 0 has no interface number 0 [ 2045.164202][ T5884] usb 4-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 2045.201131][ T5884] usb 4-1: config 0 interface 196 has no altsetting 0 [ 2045.223746][ T5884] usb 4-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 2045.244615][ T5918] usb 9-1: new high-speed USB device number 65 using dummy_hcd [ 2045.258765][ T5884] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2045.284692][ T5884] usb 4-1: Product: syz [ 2045.291790][ T5884] usb 4-1: Manufacturer: syz [ 2045.306026][ T5884] usb 4-1: SerialNumber: syz [ 2045.326276][ T5884] usb 4-1: config 0 descriptor?? [ 2045.333696][ T4897] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 2045.399007][ T5918] usb 9-1: config 0 interface 0 has no altsetting 0 [ 2045.407422][ T5918] usb 9-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 2045.418149][ T5918] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2045.441746][ T5918] usb 9-1: config 0 descriptor?? [ 2045.956874][ T5884] ipheth 4-1:0.196: ipheth_enable_ncm: usb_control_msg: -71 [ 2045.986294][ T5884] ipheth 4-1:0.196: Apple iPhone USB Ethernet device attached [ 2045.998325][ T5884] usb 4-1: USB disconnect, device number 111 [ 2046.055158][ T5884] ipheth 4-1:0.196: Apple iPhone USB Ethernet now disconnected [ 2046.146815][ T4855] tipc: Resetting bearer [ 2046.197880][ T4855] tipc: Disabling bearer [ 2046.656681][ T4956] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6720'. [ 2046.867851][T20005] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 2047.313999][T20005] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2047.327631][T20005] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2047.341868][T20005] usb 2-1: New USB device found, idVendor=18d1, idProduct=9400, bcdDevice= 0.00 [ 2047.351463][T20005] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2047.389202][T20005] usb 2-1: config 0 descriptor?? [ 2047.657785][ T4963] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2047.677880][ T4963] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2047.706280][ T4963] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6713'. [ 2047.837907][ T4966] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2047.875387][ T4966] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2047.892829][T20005] stadia 0003:18D1:9400.005B: item fetching failed at offset 5/7 [ 2047.936537][T20005] stadia 0003:18D1:9400.005B: parse failed [ 2048.034595][T20005] stadia 0003:18D1:9400.005B: probe with driver stadia failed with error -22 [ 2048.081187][ T5918] usb 9-1: string descriptor 0 read error: -71 [ 2048.089601][ T4951] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2048.131266][ T5918] hackrf 9-1:0.0: usb_control_msg() failed -71 request 0e [ 2048.139480][ T4951] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2048.171620][ T5918] hackrf 9-1:0.0: Could not detect board [ 2048.203395][ T4978] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2048.204763][ T5918] hackrf 9-1:0.0: probe with driver hackrf failed with error -71 [ 2048.278822][ T4978] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2048.331702][ T5918] usb 9-1: USB disconnect, device number 65 [ 2048.421835][ T8209] usb 2-1: USB disconnect, device number 13 [ 2048.677314][ T4998] FAULT_INJECTION: forcing a failure. [ 2048.677314][ T4998] name failslab, interval 1, probability 0, space 0, times 0 [ 2048.709250][ T4998] CPU: 0 UID: 0 PID: 4998 Comm: syz.1.6722 Tainted: G L syzkaller #0 PREEMPT(full) [ 2048.709288][ T4998] Tainted: [L]=SOFTLOCKUP [ 2048.709297][ T4998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2048.709312][ T4998] Call Trace: [ 2048.709323][ T4998] [ 2048.709334][ T4998] dump_stack_lvl+0x189/0x250 [ 2048.709367][ T4998] ? __pfx____ratelimit+0x10/0x10 [ 2048.709416][ T4998] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2048.709444][ T4998] ? __pfx__printk+0x10/0x10 [ 2048.709481][ T4998] ? __pfx___might_resched+0x10/0x10 [ 2048.709507][ T4998] ? fs_reclaim_acquire+0x7d/0x100 [ 2048.709539][ T4998] should_fail_ex+0x414/0x560 [ 2048.709580][ T4998] should_failslab+0xa8/0x100 [ 2048.709610][ T4998] kmem_cache_alloc_node_noprof+0x8c/0x720 [ 2048.709648][ T4998] ? __alloc_skb+0x255/0x430 [ 2048.709670][ T4998] ? napi_skb_cache_get+0x4a5/0x780 [ 2048.709693][ T4998] ? napi_skb_cache_get+0x151/0x780 [ 2048.709722][ T4998] __alloc_skb+0x255/0x430 [ 2048.709749][ T4998] ? __pfx___alloc_skb+0x10/0x10 [ 2048.709784][ T4998] alloc_skb_with_frags+0xca/0x890 [ 2048.709817][ T4998] ? do_raw_spin_lock+0x121/0x290 [ 2048.709857][ T4998] sock_alloc_send_pskb+0x84d/0x980 [ 2048.709908][ T4998] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 2048.709943][ T4998] ? sock_def_readable+0xae/0x530 [ 2048.709982][ T4998] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 2048.710011][ T4998] unix_dgram_sendmsg+0x454/0x1840 [ 2048.710066][ T4998] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 2048.710091][ T4998] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 2048.710130][ T4998] ? __import_iovec+0x40e/0x7f0 [ 2048.710159][ T4998] ? unix_seqpacket_sendmsg+0x111/0x1e0 [ 2048.710193][ T4998] ? __pfx_unix_seqpacket_sendmsg+0x10/0x10 [ 2048.710221][ T4998] __sock_sendmsg+0x21c/0x270 [ 2048.710260][ T4998] ____sys_sendmsg+0x52d/0x820 [ 2048.710294][ T4998] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2048.710327][ T4998] ? rcu_is_watching+0x15/0xb0 [ 2048.710355][ T4998] ? ___sys_sendmsg+0x22f/0x2a0 [ 2048.710390][ T4998] ___sys_sendmsg+0x21f/0x2a0 [ 2048.710424][ T4998] ? __pfx____sys_sendmsg+0x10/0x10 [ 2048.710451][ T4998] ? kstrtoull+0x12f/0x1d0 [ 2048.710511][ T4998] ? __fget_files+0x2a/0x420 [ 2048.710540][ T4998] ? __fget_files+0x3a0/0x420 [ 2048.710580][ T4998] __sys_sendmmsg+0x28e/0x430 [ 2048.710615][ T4998] ? __pfx___sys_sendmmsg+0x10/0x10 [ 2048.710654][ T4998] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2048.710698][ T4998] ? ksys_write+0x22a/0x250 [ 2048.710719][ T4998] ? exc_page_fault+0x82/0x100 [ 2048.710743][ T4998] ? __pfx_ksys_write+0x10/0x10 [ 2048.710772][ T4998] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 2048.710807][ T4998] __do_fast_syscall_32+0x1f7/0x590 [ 2048.710835][ T4998] ? rcu_is_watching+0x15/0xb0 [ 2048.710862][ T4998] ? do_fast_syscall_32+0x34/0x80 [ 2048.710894][ T4998] do_fast_syscall_32+0x34/0x80 [ 2048.710920][ T4998] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2048.710949][ T4998] RIP: 0023:0xf7f57539 [ 2048.710969][ T4998] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2048.710990][ T4998] RSP: 002b:00000000f544655c EFLAGS: 00000206 ORIG_RAX: 0000000000000159 [ 2048.711014][ T4998] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000008000f7c0 [ 2048.711031][ T4998] RDX: 000000000000f000 RSI: 0000000000000800 RDI: 0000000000000000 [ 2048.711045][ T4998] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2048.711059][ T4998] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2048.711073][ T4998] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2048.711107][ T4998] [ 2049.790477][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 2049.798435][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 2049.824565][ T8209] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 2050.006325][ T8209] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2050.015862][ T8209] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2050.053025][ T8209] usb 4-1: config 0 descriptor?? [ 2050.089685][ T5022] fuse: Invalid uid '00000000000000000000003' [ 2050.158454][ T8209] cp210x 4-1:0.0: cp210x converter detected [ 2050.278048][ T5011] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2050.287163][ T5011] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2050.305606][ T5011] net_ratelimit: 163 callbacks suppressed [ 2050.305641][ T5011] A link change request failed with some changes committed already. Interface gre2 may have been left with an inconsistent configuration, please check. [ 2050.341029][ T31] kauditd_printk_skb: 59 callbacks suppressed [ 2050.341057][ T31] audit: type=1326 audit(1765834963.885:3719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5040 comm="syz.8.6732" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 2050.446366][ T31] audit: type=1326 audit(1765834963.925:3720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5040 comm="syz.8.6732" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 2050.542809][ T5011] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2050.596519][ T31] audit: type=1326 audit(1765834963.925:3721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5040 comm="syz.8.6732" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 2050.619687][ T31] audit: type=1326 audit(1765834963.925:3722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5040 comm="syz.8.6732" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 2050.649103][ T5011] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2050.673625][ T31] audit: type=1326 audit(1765834963.925:3723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5040 comm="syz.8.6732" exe="/root/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 2050.728622][ T31] audit: type=1326 audit(1765834963.925:3724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5040 comm="syz.8.6732" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 2050.751726][ T31] audit: type=1326 audit(1765834963.925:3725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5040 comm="syz.8.6732" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 2050.796413][ T8209] usb 4-1: cp210x converter now attached to ttyUSB0 [ 2050.911819][ T8209] usb 4-1: USB disconnect, device number 112 [ 2050.929734][ T8209] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2050.954654][ T8209] cp210x 4-1:0.0: device disconnected [ 2051.039129][ T31] audit: type=1326 audit(1765834963.925:3726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5040 comm="syz.8.6732" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 2051.175801][ T31] audit: type=1326 audit(1765834963.955:3727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5040 comm="syz.8.6732" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 2051.570634][ T31] audit: type=1326 audit(1765834963.965:3728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5040 comm="syz.8.6732" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 2051.859288][ T5104] FAULT_INJECTION: forcing a failure. [ 2051.859288][ T5104] name failslab, interval 1, probability 0, space 0, times 0 [ 2051.919404][ T5104] CPU: 0 UID: 0 PID: 5104 Comm: syz.2.6735 Tainted: G L syzkaller #0 PREEMPT(full) [ 2051.919438][ T5104] Tainted: [L]=SOFTLOCKUP [ 2051.919447][ T5104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2051.919460][ T5104] Call Trace: [ 2051.919469][ T5104] [ 2051.919479][ T5104] dump_stack_lvl+0x189/0x250 [ 2051.919512][ T5104] ? __pfx____ratelimit+0x10/0x10 [ 2051.919549][ T5104] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2051.919577][ T5104] ? __pfx__printk+0x10/0x10 [ 2051.919621][ T5104] ? __pfx___might_resched+0x10/0x10 [ 2051.919645][ T5104] ? fs_reclaim_acquire+0x7d/0x100 [ 2051.919676][ T5104] should_fail_ex+0x414/0x560 [ 2051.919716][ T5104] should_failslab+0xa8/0x100 [ 2051.919746][ T5104] kmem_cache_alloc_node_noprof+0x8c/0x720 [ 2051.919782][ T5104] ? __alloc_skb+0x255/0x430 [ 2051.919803][ T5104] ? napi_skb_cache_get+0x4a5/0x780 [ 2051.919824][ T5104] ? napi_skb_cache_get+0x151/0x780 [ 2051.919851][ T5104] __alloc_skb+0x255/0x430 [ 2051.919878][ T5104] ? __pfx___alloc_skb+0x10/0x10 [ 2051.919909][ T5104] alloc_skb_with_frags+0xca/0x890 [ 2051.919941][ T5104] ? do_raw_spin_lock+0x121/0x290 [ 2051.919980][ T5104] sock_alloc_send_pskb+0x84d/0x980 [ 2051.920030][ T5104] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 2051.920064][ T5104] ? sock_def_readable+0xae/0x530 [ 2051.920102][ T5104] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 2051.920130][ T5104] unix_dgram_sendmsg+0x454/0x1840 [ 2051.920182][ T5104] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 2051.920205][ T5104] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 2051.920243][ T5104] ? __import_iovec+0x40e/0x7f0 [ 2051.920272][ T5104] ? unix_seqpacket_sendmsg+0x111/0x1e0 [ 2051.920297][ T5104] ? __pfx_unix_seqpacket_sendmsg+0x10/0x10 [ 2051.920325][ T5104] __sock_sendmsg+0x21c/0x270 [ 2051.920362][ T5104] ____sys_sendmsg+0x52d/0x820 [ 2051.920400][ T5104] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2051.920432][ T5104] ? rcu_is_watching+0x15/0xb0 [ 2051.920458][ T5104] ? ___sys_sendmsg+0x22f/0x2a0 [ 2051.920493][ T5104] ___sys_sendmsg+0x21f/0x2a0 [ 2051.920522][ T5104] ? __pfx____sys_sendmsg+0x10/0x10 [ 2051.920550][ T5104] ? kstrtoull+0x12f/0x1d0 [ 2051.920627][ T5104] ? __fget_files+0x2a/0x420 [ 2051.920649][ T5104] ? __fget_files+0x3a0/0x420 [ 2051.920676][ T5104] __sys_sendmmsg+0x28e/0x430 [ 2051.920700][ T5104] ? __pfx___sys_sendmmsg+0x10/0x10 [ 2051.920726][ T5104] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2051.920757][ T5104] ? ksys_write+0x22a/0x250 [ 2051.920771][ T5104] ? exc_page_fault+0x82/0x100 [ 2051.920788][ T5104] ? __pfx_ksys_write+0x10/0x10 [ 2051.920807][ T5104] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 2051.920831][ T5104] __do_fast_syscall_32+0x1f7/0x590 [ 2051.920850][ T5104] ? rcu_is_watching+0x15/0xb0 [ 2051.920870][ T5104] ? do_fast_syscall_32+0x34/0x80 [ 2051.920892][ T5104] do_fast_syscall_32+0x34/0x80 [ 2051.920910][ T5104] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2051.920930][ T5104] RIP: 0023:0xf7f32539 [ 2051.920945][ T5104] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2051.920959][ T5104] RSP: 002b:00000000f542655c EFLAGS: 00000206 ORIG_RAX: 0000000000000159 [ 2051.920976][ T5104] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000008000f7c0 [ 2051.920988][ T5104] RDX: 000000000000f000 RSI: 0000000000000800 RDI: 0000000000000000 [ 2051.920997][ T5104] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2051.921007][ T5104] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2051.921016][ T5104] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2051.921039][ T5104] [ 2052.548104][ T5112] netlink: 'syz.2.6738': attribute type 1 has an invalid length. [ 2052.583726][ T5112] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2052.788283][ T5164] netlink: 'syz.2.6738': attribute type 10 has an invalid length. [ 2052.819232][ T5164] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6738'. [ 2052.857863][ T5164] dummy0: entered promiscuous mode [ 2052.943416][ T5168] syzkaller0: entered promiscuous mode [ 2052.951661][ T5168] syzkaller0: entered allmulticast mode [ 2053.025760][ T5174] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6740'. [ 2053.258310][ T5204] tipc: Enabled bearer , priority 0 [ 2053.267146][ T5204] syzkaller0: entered promiscuous mode [ 2053.272649][ T5204] syzkaller0: entered allmulticast mode [ 2053.544599][ T5918] usb 9-1: new high-speed USB device number 66 using dummy_hcd [ 2053.698507][ T5918] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2053.735443][ T5918] usb 9-1: config 0 has no interfaces? [ 2053.996683][ T5918] usb 9-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 2054.029575][ T5918] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2054.056732][ T5918] usb 9-1: config 0 descriptor?? [ 2054.205056][ T5935] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 2054.303140][ T5204] tipc: Resetting bearer [ 2054.349693][ T5918] usb 9-1: string descriptor 0 read error: -71 [ 2054.362454][ T5203] tipc: Resetting bearer [ 2054.368528][ T5935] usb 4-1: Using ep0 maxpacket: 32 [ 2054.434773][ T5918] usb 9-1: USB disconnect, device number 66 [ 2054.443757][ T5935] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2054.464193][ T5935] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 2054.493243][ T5935] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2054.517802][ T5203] tipc: Disabling bearer [ 2054.520974][ T5935] usb 4-1: config 0 descriptor?? [ 2055.003359][ T5935] savu 0003:1E7D:2D5A.005C: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0 [ 2055.779282][ T5231] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6748'. [ 2055.851748][ T5231] syzkaller1: entered promiscuous mode [ 2055.888507][ T5231] syzkaller1: entered allmulticast mode [ 2056.731922][ T5330] xt_bpf: check failed: parse error [ 2056.883066][ T5330] netlink: 16 bytes leftover after parsing attributes in process `syz.7.6752'. [ 2056.892432][ T5330] netlink: 16 bytes leftover after parsing attributes in process `syz.7.6752'. [ 2057.143289][T20005] usb 4-1: USB disconnect, device number 113 [ 2057.384039][ T5370] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(7) [ 2057.390608][ T5370] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 2057.399142][ T5369] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 2057.405686][ T5369] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 2057.419219][ T5370] vhci_hcd vhci_hcd.0: Device attached [ 2057.425940][ T5369] vhci_hcd vhci_hcd.0: Device attached [ 2057.436126][ T5372] usbip_core: unknown command [ 2057.451778][ T5372] vhci_hcd: unknown pdu 0 [ 2057.452107][ T5371] vhci_hcd: connection closed [ 2057.461909][ T5372] usbip_core: unknown command [ 2057.482541][T30646] vhci_hcd vhci_hcd.2: stop threads [ 2057.492598][T30646] vhci_hcd vhci_hcd.2: release socket [ 2057.505366][T30646] vhci_hcd vhci_hcd.2: disconnect device [ 2057.520351][T30646] vhci_hcd vhci_hcd.2: stop threads [ 2057.530145][T30646] vhci_hcd vhci_hcd.2: release socket [ 2057.544663][ T5935] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 2057.553421][T30646] vhci_hcd vhci_hcd.2: disconnect device [ 2057.614690][T20005] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 2057.706842][ T5935] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2057.718621][ T5935] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2057.729216][ T5935] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2057.742521][ T5935] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2057.752707][ T5935] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2057.766397][ T5935] usb 2-1: config 0 descriptor?? [ 2057.788354][T20005] usb 4-1: Using ep0 maxpacket: 8 [ 2057.799446][T20005] usb 4-1: unable to get BOS descriptor or descriptor too short [ 2057.814880][T20005] usb 4-1: config 8 has an invalid interface number: 255 but max is 0 [ 2057.835978][T20005] usb 4-1: config 8 has no interface number 0 [ 2057.843886][T20005] usb 4-1: config 8 interface 255 has no altsetting 0 [ 2057.860085][T20005] usb 4-1: string descriptor 0 read error: -22 [ 2057.882523][T20005] usb 4-1: New USB device found, idVendor=0423, idProduct=000a, bcdDevice= 0.00 [ 2057.902274][T20005] usb 4-1: New USB device strings: Mfr=229, Product=1, SerialNumber=3 [ 2058.257469][ T5935] plantronics 0003:047F:FFFF.005D: reserved main item tag 0xd [ 2058.315572][ T5935] plantronics 0003:047F:FFFF.005D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 2058.465349][T20005] eth%d: CATC EL1210A NetMate USB Ethernet at usb-dummy_hcd.3-1, 00:00:00:00:00:00. [ 2058.577731][T20005] usb 4-1: USB disconnect, device number 114 [ 2058.621291][ T5362] fuse: Bad value for 'user_id' [ 2058.651828][ T5362] fuse: Bad value for 'user_id' [ 2058.652508][ T5425] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2058.666540][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2058.732884][ T5425] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2058.741415][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2058.831732][ T5425] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2058.840422][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2058.950015][ T5447] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6765'. [ 2058.960838][ T5425] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2058.969366][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2058.995066][ T5884] usb 9-1: new high-speed USB device number 67 using dummy_hcd [ 2058.995557][ T5447] netlink: 31 bytes leftover after parsing attributes in process `syz.2.6765'. [ 2059.023105][ T5425] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2059.031483][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2059.109587][ T5447] netlink: 'syz.2.6765': attribute type 4 has an invalid length. [ 2059.267065][ T5884] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2059.377865][ T5884] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2059.428359][ T5884] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2059.500338][ T5884] usb 9-1: New USB device found, idVendor=050d, idProduct=3201, bcdDevice= 0.00 [ 2059.519350][ T5463] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6766'. [ 2059.540865][ T5884] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2059.605766][ T5884] usb 9-1: config 0 descriptor?? [ 2060.074065][ T5884] belkin 0003:050D:3201.005E: global environment stack underflow [ 2060.121395][ T5884] belkin 0003:050D:3201.005E: item 0 4 1 11 parsing failed [ 2060.157615][ T5884] belkin 0003:050D:3201.005E: parse failed [ 2060.163572][ T5884] belkin 0003:050D:3201.005E: probe with driver belkin failed with error -22 [ 2060.167858][ T5482] FAULT_INJECTION: forcing a failure. [ 2060.167858][ T5482] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2060.213562][ T5482] CPU: 1 UID: 0 PID: 5482 Comm: syz.1.6769 Tainted: G L syzkaller #0 PREEMPT(full) [ 2060.213597][ T5482] Tainted: [L]=SOFTLOCKUP [ 2060.213605][ T5482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2060.213619][ T5482] Call Trace: [ 2060.213628][ T5482] [ 2060.213638][ T5482] dump_stack_lvl+0x189/0x250 [ 2060.213670][ T5482] ? __pfx____ratelimit+0x10/0x10 [ 2060.213705][ T5482] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2060.213731][ T5482] ? __pfx__printk+0x10/0x10 [ 2060.213764][ T5482] ? __might_fault+0xb0/0x130 [ 2060.213809][ T5482] should_fail_ex+0x414/0x560 [ 2060.213842][ T5482] _copy_from_user+0x2d/0xb0 [ 2060.213864][ T5482] get_compat_msghdr+0xad/0x4a0 [ 2060.213897][ T5482] ? __pfx_get_compat_msghdr+0x10/0x10 [ 2060.213928][ T5482] ? rcu_is_watching+0x15/0xb0 [ 2060.213955][ T5482] ? ___sys_sendmsg+0x22f/0x2a0 [ 2060.213990][ T5482] ___sys_sendmsg+0x193/0x2a0 [ 2060.214020][ T5482] ? __pfx____sys_sendmsg+0x10/0x10 [ 2060.214049][ T5482] ? kstrtoull+0x12f/0x1d0 [ 2060.214125][ T5482] ? __fget_files+0x2a/0x420 [ 2060.214153][ T5482] ? __fget_files+0x3a0/0x420 [ 2060.214192][ T5482] __sys_sendmmsg+0x28e/0x430 [ 2060.214225][ T5482] ? __pfx___sys_sendmmsg+0x10/0x10 [ 2060.214261][ T5482] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2060.214305][ T5482] ? ksys_write+0x22a/0x250 [ 2060.214325][ T5482] ? exc_page_fault+0x82/0x100 [ 2060.214348][ T5482] ? __pfx_ksys_write+0x10/0x10 [ 2060.214376][ T5482] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 2060.214409][ T5482] __do_fast_syscall_32+0x1f7/0x590 [ 2060.214438][ T5482] ? rcu_is_watching+0x15/0xb0 [ 2060.214463][ T5482] ? do_fast_syscall_32+0x34/0x80 [ 2060.214492][ T5482] do_fast_syscall_32+0x34/0x80 [ 2060.214516][ T5482] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2060.214543][ T5482] RIP: 0023:0xf7f57539 [ 2060.214562][ T5482] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2060.214582][ T5482] RSP: 002b:00000000f544655c EFLAGS: 00000206 ORIG_RAX: 0000000000000159 [ 2060.214606][ T5482] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000008000f7c0 [ 2060.214622][ T5482] RDX: 000000000000f000 RSI: 0000000000000800 RDI: 0000000000000000 [ 2060.214636][ T5482] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2060.214650][ T5482] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2060.214663][ T5482] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2060.214695][ T5482] [ 2060.489226][T20005] usb 2-1: USB disconnect, device number 14 [ 2060.679945][ T5505] binder: 5484:5505 ioctl c018620c 800002c0 returned -1 [ 2062.063675][T20005] usb 9-1: USB disconnect, device number 67 [ 2062.694031][ T5550] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6777'. [ 2063.015472][T18888] usb 9-1: new high-speed USB device number 68 using dummy_hcd [ 2063.164560][T18888] usb 9-1: Using ep0 maxpacket: 32 [ 2063.185855][T18888] usb 9-1: config 0 has an invalid interface number: 29 but max is 0 [ 2063.213251][T18888] usb 9-1: config 0 has no interface number 0 [ 2063.232997][T18888] usb 9-1: config 0 interface 29 has no altsetting 0 [ 2063.256655][T18888] usb 9-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 2063.256898][ T5603] netlink: 'syz.7.6781': attribute type 2 has an invalid length. [ 2063.284608][T18888] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2063.292727][T18888] usb 9-1: Product: syz [ 2063.306776][ T5603] : entered promiscuous mode [ 2063.311742][T18888] usb 9-1: Manufacturer: syz [ 2063.317783][T18888] usb 9-1: SerialNumber: syz [ 2063.334967][T18888] usb 9-1: config 0 descriptor?? [ 2063.454597][ T5904] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 2063.554210][T18888] peak_usb 9-1:0.29: PEAK-System PCAN-USB X6 v0 fw v0.0.0 (2 channels) [ 2063.627316][ T5904] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2063.643947][ T5904] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2063.656909][ T5904] usb 2-1: New USB device found, idVendor=06cb, idProduct=73f5, bcdDevice= 0.00 [ 2063.667068][ T5904] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2063.678644][ T5904] usb 2-1: config 0 descriptor?? [ 2063.759083][T18888] peak_usb 9-1:0.29 can0: unable to request usb[type=2 value=5] err=-71 [ 2063.769463][T18888] peak_usb 9-1:0.29: unable to tell PCAN-USB X6 driver is loaded (err -71) [ 2063.786032][ T5935] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 2063.827286][T18888] peak_usb 9-1:0.29: probe with driver peak_usb failed with error -71 [ 2063.847525][T18888] usb 9-1: USB disconnect, device number 68 [ 2063.944771][ T5935] usb 4-1: Using ep0 maxpacket: 8 [ 2063.959333][ T5935] usb 4-1: too many endpoints for config 0 interface 0 altsetting 250: 255, using maximum allowed: 30 [ 2063.984607][ T5935] usb 4-1: config 0 interface 0 altsetting 250 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 2063.999727][ T5935] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2064.008324][ T5935] usb 4-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 2064.015473][ T5632] netlink: 'syz.7.6782': attribute type 1 has an invalid length. [ 2064.018520][ T5935] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2064.039612][ T5935] usb 4-1: config 0 descriptor?? [ 2064.103994][ T5632] bond3: entered promiscuous mode [ 2064.111199][ T5632] 8021q: adding VLAN 0 to HW filter on device bond3 [ 2064.145684][ T5904] itetech 0003:06CB:73F5.005F: collection stack underflow [ 2064.157778][ T5904] itetech 0003:06CB:73F5.005F: item 0 0 0 12 parsing failed [ 2064.172709][ T5904] itetech 0003:06CB:73F5.005F: probe with driver itetech failed with error -22 [ 2064.251726][ T5632] bond3: (slave veth3): making interface the new active one [ 2064.259549][ T5632] veth3: entered promiscuous mode [ 2064.269905][ T5632] bond3: (slave veth3): Enslaving as an active interface with an up link [ 2064.362893][ T5904] usb 2-1: USB disconnect, device number 15 [ 2065.559580][ T5724] xfrm0: entered promiscuous mode [ 2065.566074][ T5724] xfrm0: entered allmulticast mode [ 2065.614730][T20005] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 2065.776461][T20005] usb 2-1: Using ep0 maxpacket: 8 [ 2065.796389][T20005] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 2065.822406][T20005] usb 2-1: config 0 has no interface number 0 [ 2065.849199][T20005] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2065.895602][T20005] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 2065.938929][ T5734] netlink: 'syz.2.6790': attribute type 2 has an invalid length. [ 2065.951253][T20005] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2065.984745][ T5734] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6790'. [ 2066.049941][ T5935] usbhid 4-1:0.0: can't add hid device: -71 [ 2066.067310][ T5935] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 2066.080537][ T5935] usb 4-1: USB disconnect, device number 115 [ 2066.106078][ T5735] net_ratelimit: 1154 callbacks suppressed [ 2066.106102][ T5735] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2066.169596][T20005] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 2066.273921][T20005] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 2066.343373][ T5750] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:20000 [ 2066.356353][T20005] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2066.432185][T20005] usb 2-1: config 0 descriptor?? [ 2066.522571][T20005] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 2066.735160][ T5766] input: syz1 as /devices/virtual/input/input146 [ 2066.957045][ T5771] FAULT_INJECTION: forcing a failure. [ 2066.957045][ T5771] name failslab, interval 1, probability 0, space 0, times 0 [ 2066.975638][ T5771] CPU: 0 UID: 0 PID: 5771 Comm: syz.8.6794 Tainted: G L syzkaller #0 PREEMPT(full) [ 2066.975671][ T5771] Tainted: [L]=SOFTLOCKUP [ 2066.975681][ T5771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2066.975695][ T5771] Call Trace: [ 2066.975704][ T5771] [ 2066.975714][ T5771] dump_stack_lvl+0x189/0x250 [ 2066.975748][ T5771] ? __pfx____ratelimit+0x10/0x10 [ 2066.975783][ T5771] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2066.975805][ T5771] ? __pfx__printk+0x10/0x10 [ 2066.975830][ T5771] ? __pfx___might_resched+0x10/0x10 [ 2066.975851][ T5771] ? fs_reclaim_acquire+0x7d/0x100 [ 2066.975883][ T5771] should_fail_ex+0x414/0x560 [ 2066.975923][ T5771] should_failslab+0xa8/0x100 [ 2066.975952][ T5771] kmem_cache_alloc_node_noprof+0x8c/0x720 [ 2066.975985][ T5771] ? __alloc_skb+0x255/0x430 [ 2066.976001][ T5771] ? napi_skb_cache_get+0x4a5/0x780 [ 2066.976016][ T5771] ? napi_skb_cache_get+0x151/0x780 [ 2066.976037][ T5771] __alloc_skb+0x255/0x430 [ 2066.976064][ T5771] ? __pfx___alloc_skb+0x10/0x10 [ 2066.976107][ T5771] alloc_skb_with_frags+0xca/0x890 [ 2066.976138][ T5771] ? do_raw_spin_lock+0x121/0x290 [ 2066.976174][ T5771] sock_alloc_send_pskb+0x84d/0x980 [ 2066.976209][ T5771] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 2066.976238][ T5771] ? sock_def_readable+0xae/0x530 [ 2066.976277][ T5771] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 2066.976305][ T5771] unix_dgram_sendmsg+0x454/0x1840 [ 2066.976356][ T5771] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 2066.976373][ T5771] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 2066.976399][ T5771] ? __import_iovec+0x40e/0x7f0 [ 2066.976424][ T5771] ? unix_seqpacket_sendmsg+0x111/0x1e0 [ 2066.976451][ T5771] ? __pfx_unix_seqpacket_sendmsg+0x10/0x10 [ 2066.976478][ T5771] __sock_sendmsg+0x21c/0x270 [ 2066.976514][ T5771] ____sys_sendmsg+0x52d/0x820 [ 2066.976545][ T5771] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2066.976568][ T5771] ? rcu_is_watching+0x15/0xb0 [ 2066.976587][ T5771] ? ___sys_sendmsg+0x22f/0x2a0 [ 2066.976618][ T5771] ___sys_sendmsg+0x21f/0x2a0 [ 2066.976648][ T5771] ? __pfx____sys_sendmsg+0x10/0x10 [ 2066.976677][ T5771] ? kstrtoull+0x12f/0x1d0 [ 2066.976742][ T5771] ? __fget_files+0x2a/0x420 [ 2066.976768][ T5771] ? __fget_files+0x3a0/0x420 [ 2066.976801][ T5771] __sys_sendmmsg+0x28e/0x430 [ 2066.976836][ T5771] ? __pfx___sys_sendmmsg+0x10/0x10 [ 2066.976871][ T5771] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2066.976915][ T5771] ? ksys_write+0x22a/0x250 [ 2066.976934][ T5771] ? exc_page_fault+0x82/0x100 [ 2066.976955][ T5771] ? __pfx_ksys_write+0x10/0x10 [ 2066.976987][ T5771] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 2066.977012][ T5771] __do_fast_syscall_32+0x1f7/0x590 [ 2066.977038][ T5771] ? rcu_is_watching+0x15/0xb0 [ 2066.977063][ T5771] ? do_fast_syscall_32+0x34/0x80 [ 2066.977101][ T5771] do_fast_syscall_32+0x34/0x80 [ 2066.977126][ T5771] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2066.977152][ T5771] RIP: 0023:0xf70bd539 [ 2066.977168][ T5771] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2066.977181][ T5771] RSP: 002b:00000000f54ad55c EFLAGS: 00000206 ORIG_RAX: 0000000000000159 [ 2066.977204][ T5771] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000008000f7c0 [ 2066.977219][ T5771] RDX: 000000000000f000 RSI: 0000000000000800 RDI: 0000000000000000 [ 2066.977234][ T5771] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2066.977249][ T5771] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2066.977263][ T5771] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2066.977296][ T5771] [ 2067.683536][ T5790] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2067.692865][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2068.420817][T18888] usb 2-1: USB disconnect, device number 16 [ 2068.477923][T18888] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 2068.723413][ T5823] random: crng reseeded on system resumption [ 2068.855034][T18888] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 2068.904015][ T5835] program syz.8.6804 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2068.934760][ T5904] usb 4-1: new full-speed USB device number 116 using dummy_hcd [ 2069.014841][T18888] usb 2-1: Using ep0 maxpacket: 32 [ 2069.025969][T18888] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 2069.034364][T18888] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 2069.043486][T18888] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 2069.058943][T18888] usb 2-1: config 1 has no interface number 0 [ 2069.065238][T18888] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2069.076568][T18888] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 2069.078655][ T5842] syzkaller0: entered promiscuous mode [ 2069.097260][ T5842] syzkaller0: entered allmulticast mode [ 2069.104623][T18888] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 2069.124607][T18888] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2069.143210][ T5904] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 2069.160947][ T5904] usb 4-1: can't read configurations, error -71 [ 2069.172023][T18888] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 2069.389943][T18888] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached [ 2069.488114][ T5863] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6807'. [ 2069.499145][ T5863] bridge0: port 2(bridge_slave_1) entered disabled state [ 2069.506964][ T5863] bridge0: port 1(bridge_slave_0) entered disabled state [ 2069.645605][ T8209] usb 9-1: new high-speed USB device number 69 using dummy_hcd [ 2069.807313][ T8209] usb 9-1: config index 0 descriptor too short (expected 45, got 36) [ 2069.824586][ T8209] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2069.826122][T18888] usb 2-1: USB disconnect, device number 17 [ 2069.844820][ T8209] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2069.869232][T18888] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 2069.874500][ T8209] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2069.917727][ T8209] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2069.934473][ T8209] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2069.957609][ T8209] usb 9-1: config 0 descriptor?? [ 2070.370354][ T8209] plantronics 0003:047F:FFFF.0060: unknown main item tag 0x0 [ 2070.565865][ T8209] plantronics 0003:047F:FFFF.0060: unknown main item tag 0x0 [ 2070.640034][ T8209] plantronics 0003:047F:FFFF.0060: unknown main item tag 0x0 [ 2070.659798][ T8209] plantronics 0003:047F:FFFF.0060: unknown main item tag 0x0 [ 2070.719009][ T8209] plantronics 0003:047F:FFFF.0060: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 2070.822763][ T8209] usb 9-1: USB disconnect, device number 69 [ 2070.857646][ T5909] netlink: 'syz.1.6811': attribute type 1 has an invalid length. [ 2071.012350][ T5909] 8021q: adding VLAN 0 to HW filter on device bond2 [ 2071.061079][ T5908] fido_id[5908]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 2071.458897][ T5974] input: syz1 as /devices/virtual/input/input148 [ 2071.577394][ T5974] netlink: 'syz.1.6814': attribute type 1 has an invalid length. [ 2072.484589][ T5935] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 2072.614724][ T5935] usb 4-1: device descriptor read/64, error -71 [ 2072.833572][ T6101] IPVS: set_ctl: invalid protocol: 98 0.0.0.0:20004 [ 2072.854935][ T5935] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 2072.936055][ T5904] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 2072.985573][ T5935] usb 4-1: device descriptor read/64, error -71 [ 2073.095035][ T5935] usb usb4-port1: attempt power cycle [ 2073.106289][ T5904] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2073.116633][ T5904] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2073.132206][ T5904] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 2073.141463][ T5904] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2073.152236][ T5904] usb 2-1: config 0 descriptor?? [ 2073.165605][ T5904] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 2073.434652][ T5935] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 2073.455647][ T5935] usb 4-1: device descriptor read/8, error -71 [ 2073.694670][ T5935] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 2073.715334][ T5935] usb 4-1: device descriptor read/8, error -71 [ 2073.825639][ T5935] usb usb4-port1: unable to enumerate USB device [ 2075.015232][ T6136] xt_bpf: check failed: parse error [ 2075.337570][ T6150] IPVS: set_ctl: invalid protocol: 108 100.1.1.1:20001 [ 2075.401340][ T8209] usb 2-1: USB disconnect, device number 18 [ 2075.774587][ T8209] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 2075.947421][ T8209] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 2075.978320][ T8209] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 2076.019154][ T8209] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2076.097235][ T8209] usb 2-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 2076.142516][ T8209] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2076.184491][ T8209] usb 2-1: Product: syz [ 2076.188734][ T8209] usb 2-1: Manufacturer: syz [ 2076.213868][ T8209] usb 2-1: SerialNumber: syz [ 2076.242753][ T8209] usb 2-1: config 0 descriptor?? [ 2076.284844][ T8209] adutux 2-1:0.0: interrupt endpoints not found [ 2076.496466][ T6159] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2076.515135][ T6159] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2076.527397][ T5935] usb 2-1: USB disconnect, device number 19 [ 2077.055472][ T6186] syzkaller0: entered promiscuous mode [ 2077.103975][ T6186] syzkaller0: entered allmulticast mode [ 2077.844632][T18888] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 2078.154677][T18888] usb 2-1: Using ep0 maxpacket: 16 [ 2078.190902][T18888] usb 2-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 2078.212239][T18888] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2078.225938][T18888] usb 2-1: Product: syz [ 2078.234065][T18888] usb 2-1: Manufacturer: syz [ 2078.243759][T18888] usb 2-1: SerialNumber: syz [ 2078.264374][T18888] usb 2-1: config 0 descriptor?? [ 2078.282647][T18888] ssu100 2-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 2078.695850][ T5904] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 2078.832111][ T6242] tipc: Enabled bearer , priority 0 [ 2078.846001][ T6242] syzkaller0: entered promiscuous mode [ 2078.851644][ T6242] syzkaller0: entered allmulticast mode [ 2078.857855][ T5904] usb 4-1: Using ep0 maxpacket: 8 [ 2078.877824][ T5904] usb 4-1: unable to get BOS descriptor or descriptor too short [ 2078.926510][ T5904] usb 4-1: config 4 interface 0 has no altsetting 0 [ 2078.945617][ T5904] usb 4-1: string descriptor 0 read error: -22 [ 2078.951976][ T5904] usb 4-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 2078.962137][ T6249] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6843'. [ 2078.996445][ T5904] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2079.023374][ T5904] usb 4-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 2079.067055][ T5904] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 2079.100415][ T5904] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 2079.128255][ T5904] usb 4-1: media controller created [ 2079.203636][ T6242] tipc: Resetting bearer [ 2079.222754][ T5904] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2079.265475][ T6227] usb 4-1: dvb_usb_au6610: wlen=0, aborting [ 2079.379341][T18888] ssu100 2-1:0.0: probe with driver ssu100 failed with error -71 [ 2079.452852][T18888] usb 2-1: USB disconnect, device number 20 [ 2079.467278][ T5904] zl10353_read_register: readreg error (reg=127, ret==0) [ 2079.586320][ T6237] tipc: Resetting bearer [ 2079.726368][ T5904] usb 4-1: USB disconnect, device number 122 [ 2079.770502][ T6237] tipc: Disabling bearer [ 2080.004541][T18888] usb 2-1: new low-speed USB device number 21 using dummy_hcd [ 2080.199151][T18888] usb 2-1: config 65 has an invalid interface number: 95 but max is 0 [ 2080.224515][T18888] usb 2-1: config 65 has no interface number 0 [ 2080.248391][T18888] usb 2-1: string descriptor 0 read error: -22 [ 2080.285511][T18888] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=6f.b6 [ 2080.333706][T18888] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2080.409201][T18888] usbtest 2-1:65.95: Linux gadget zero [ 2080.424754][T18888] usbtest 2-1:65.95: low-speed {control in/out} tests (+alt) [ 2080.585014][T18888] usb 2-1: USB disconnect, device number 21 [ 2081.350135][ T6363] ptrace attach of "./syz-executor exec"[30062] was attempted by "./syz-executor exec"[6363] [ 2081.807690][ T5904] usb 9-1: new high-speed USB device number 70 using dummy_hcd [ 2081.984896][ T5904] usb 9-1: Using ep0 maxpacket: 32 [ 2081.997205][ T5904] usb 9-1: config 0 has an invalid interface number: 188 but max is 0 [ 2082.007455][ T5904] usb 9-1: config 0 has no interface number 0 [ 2082.015535][ T5904] usb 9-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 2082.033946][ T5904] usb 9-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 2082.044134][ T5904] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2082.052821][ T5904] usb 9-1: Product: syz [ 2082.064681][ T5904] usb 9-1: Manufacturer: syz [ 2082.073002][ T5904] usb 9-1: SerialNumber: syz [ 2082.088064][ T5904] usb 9-1: config 0 descriptor?? [ 2082.094323][ T6373] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 2082.223597][ T6394] tipc: Enabled bearer , priority 0 [ 2082.263127][ T6394] syzkaller0: entered promiscuous mode [ 2082.271224][ T6394] syzkaller0: entered allmulticast mode [ 2082.316813][ T6373] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 2082.528208][ T6404] team0: Device ipvlan1 failed to register rx_handler [ 2082.535174][ T5918] usb 2-1: new full-speed USB device number 22 using dummy_hcd [ 2082.549016][ T5904] asix 9-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 2082.580706][ T5904] asix 9-1:0.188: probe with driver asix failed with error -61 [ 2082.697076][ T5918] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2082.722394][ T5918] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 2082.743825][ T5918] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 2082.768616][ T5918] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2082.798276][ T5918] usb 2-1: config 0 descriptor?? [ 2082.823674][ T5918] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 2082.844906][ T5918] dvb-usb: bulk message failed: -22 (3/0) [ 2082.865307][ T5918] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 2082.881704][ T5918] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 2082.889214][ T5918] usb 2-1: media controller created [ 2082.897172][ T5918] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2082.925954][ T5918] dvb-usb: bulk message failed: -22 (6/0) [ 2082.936777][ T5918] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 2082.949568][ T5918] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input149 [ 2082.973075][ T5918] dvb-usb: schedule remote query interval to 150 msecs. [ 2082.993715][ T5918] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 2083.062416][ T6394] dvb-usb: bulk message failed: -22 (2/0) [ 2083.091507][ T5904] usb 2-1: USB disconnect, device number 22 [ 2083.138820][ T5904] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 2083.177366][ T6393] tipc: Resetting bearer [ 2083.208426][ T6393] tipc: Disabling bearer [ 2083.323871][ T6442] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6863'. [ 2083.904662][ T6468] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2083.933391][ T6468] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2085.108285][T29592] usb 9-1: USB disconnect, device number 70 [ 2085.264681][ T5918] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 2085.429165][ T5918] usb 2-1: unable to get BOS descriptor or descriptor too short [ 2085.440432][ T5918] usb 2-1: config 14 has an invalid interface number: 21 but max is 0 [ 2085.449039][ T5918] usb 2-1: config 14 has no interface number 0 [ 2085.460411][ T5918] usb 2-1: config 14 interface 21 altsetting 251 bulk endpoint 0xA has invalid maxpacket 32 [ 2085.474538][ T5918] usb 2-1: config 14 interface 21 has no altsetting 0 [ 2085.491971][ T5918] usb 2-1: New USB device found, idVendor=c880, idProduct=760e, bcdDevice=35.fc [ 2085.503879][ T5918] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2085.514613][ T5918] usb 2-1: Product: syz [ 2085.547535][ T5918] usb 2-1: Manufacturer: syz [ 2085.552283][ T5918] usb 2-1: SerialNumber: syz [ 2085.576972][ T6493] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 2085.730898][ T6530] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2085.749452][ T6529] vlan2: entered promiscuous mode [ 2085.814723][ T6530] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2085.822592][ T6529] bridge0: entered promiscuous mode [ 2085.846181][ T6542] xt_bpf: check failed: parse error [ 2086.024975][T18888] usb 9-1: new low-speed USB device number 71 using dummy_hcd [ 2086.175081][T18888] usb 9-1: device descriptor read/64, error -71 [ 2086.505853][T18888] usb 9-1: new low-speed USB device number 72 using dummy_hcd [ 2086.644749][T18888] usb 9-1: device descriptor read/64, error -71 [ 2086.755067][T18888] usb usb9-port1: attempt power cycle [ 2087.094732][T18888] usb 9-1: new low-speed USB device number 73 using dummy_hcd [ 2087.123077][T18888] usb 9-1: device descriptor read/8, error -71 [ 2087.354564][T18888] usb 9-1: new low-speed USB device number 74 using dummy_hcd [ 2087.376253][T18888] usb 9-1: device descriptor read/8, error -71 [ 2087.485468][T18888] usb usb9-port1: unable to enumerate USB device [ 2087.605189][ T5918] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 2087.614999][ T5918] usb 2-1: MIDIStreaming interface descriptor not found [ 2087.733066][ T5918] usb 2-1: USB disconnect, device number 23 [ 2087.757681][ T6570] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6875'. [ 2087.766985][ T6576] IPVS: set_ctl: invalid protocol: 62 172.30.1.8:0 [ 2087.880540][T26297] udevd[26297]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:14.21/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2088.045467][T29592] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 2088.266084][T29592] usb 4-1: Using ep0 maxpacket: 16 [ 2088.287956][T29592] usb 4-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 2088.318101][T29592] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2088.365542][T29592] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2088.388290][T29592] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2088.414747][T29592] usb 4-1: Product: syz [ 2088.419282][T29592] usb 4-1: Manufacturer: syz [ 2088.423923][T29592] usb 4-1: SerialNumber: syz [ 2088.660147][ T6649] netlink: 'syz.2.6878': attribute type 31 has an invalid length. [ 2088.687885][T29592] usb 4-1: 0:2 : does not exist [ 2088.717218][T29592] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 2088.780021][ T6668] tipc: Enabled bearer , priority 0 [ 2088.802361][T29592] usb 4-1: USB disconnect, device number 123 [ 2088.821597][ T6668] syzkaller0: entered promiscuous mode [ 2088.843458][ T6668] syzkaller0: entered allmulticast mode [ 2088.879700][T26347] udevd[26347]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2089.125501][T18888] usb 9-1: new full-speed USB device number 75 using dummy_hcd [ 2089.281299][T18888] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2089.302471][T18888] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 2089.345479][T18888] usb 9-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 2089.401020][T18888] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2089.418259][T18888] usb 9-1: config 0 descriptor?? [ 2089.447669][T18888] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 2089.454382][T18888] dvb-usb: bulk message failed: -22 (3/0) [ 2089.496058][T18888] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 2089.510138][T18888] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 2089.518192][T18888] usb 9-1: media controller created [ 2089.526227][T18888] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2089.567498][T18888] dvb-usb: bulk message failed: -22 (6/0) [ 2089.573413][T18888] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 2089.595609][T18888] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.8/usb9/9-1/input/input150 [ 2089.630981][T18888] dvb-usb: schedule remote query interval to 150 msecs. [ 2089.644883][ T5904] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 2089.651622][ T6668] dvb-usb: bulk message failed: -22 (2/0) [ 2089.661157][T18888] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 2089.702297][T18888] usb 9-1: USB disconnect, device number 75 [ 2089.751125][T18888] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 2089.767960][ T6665] tipc: Resetting bearer [ 2089.837015][ T5904] usb 4-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2089.876289][ T5904] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2089.891343][ T5904] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2089.904176][ T6665] tipc: Disabling bearer [ 2089.910339][ T5904] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 2089.919681][ T5904] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2089.957433][ T6717] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 2090.815655][ T6789] xt_bpf: check failed: parse error [ 2092.586184][ T5904] aiptek 4-1:17.0: Aiptek using 400 ms programming speed [ 2092.614857][ T5904] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:17.0/input/input151 [ 2092.644739][T18888] usb 9-1: new high-speed USB device number 76 using dummy_hcd [ 2092.745542][ T5904] usb 4-1: USB disconnect, device number 124 [ 2092.751651][ C1] aiptek 4-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 2092.804934][T18888] usb 9-1: Using ep0 maxpacket: 16 [ 2092.876408][T18888] usb 9-1: config 252 has an invalid interface number: 15 but max is 0 [ 2092.926241][T18888] usb 9-1: config 252 has no interface number 0 [ 2093.031422][T18888] usb 9-1: config 252 interface 15 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64 [ 2093.083155][T18888] usb 9-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=2b.29 [ 2093.099871][T18888] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2093.108594][T18888] usb 9-1: Product: syz [ 2093.115001][T18888] usb 9-1: Manufacturer: syz [ 2093.119878][T18888] usb 9-1: SerialNumber: syz [ 2093.237327][T18888] usb 9-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 2093.391138][T17816] usb 9-1: Failed to submit usb control message: -71 [ 2093.399532][T18888] usb 9-1: USB disconnect, device number 76 [ 2093.426004][T17816] usb 9-1: unable to send the bmi data to the device: -71 [ 2093.445606][T17816] usb 9-1: unable to get target info from device [ 2093.488721][T17816] usb 9-1: could not get target info (-71) [ 2093.502564][T17816] usb 9-1: could not probe fw (-71) [ 2094.479867][ T6937] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6905'. [ 2094.522926][ T6939] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6905'. [ 2094.565407][ T6937] syzkaller1: entered promiscuous mode [ 2094.571161][ T6937] syzkaller1: entered allmulticast mode [ 2094.732476][ T6937] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6905'. [ 2095.279784][ T6960] netlink: 15976 bytes leftover after parsing attributes in process `syz.8.6908'. [ 2095.754552][ T5918] usb 9-1: new high-speed USB device number 77 using dummy_hcd [ 2095.880743][ T5826] bridge_slave_1: left allmulticast mode [ 2095.900371][ T5826] bridge_slave_1: left promiscuous mode [ 2095.914587][ T5918] usb 9-1: Using ep0 maxpacket: 16 [ 2095.931281][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 2095.953214][ T5918] usb 9-1: New USB device found, idVendor=17ef, idProduct=7212, bcdDevice=de.06 [ 2095.965526][ T5918] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2096.020704][ T5918] usb 9-1: Product: syz [ 2096.033334][ T5918] usb 9-1: Manufacturer: syz [ 2096.044762][ T5918] usb 9-1: SerialNumber: syz [ 2096.070121][ T5918] usb 9-1: config 0 descriptor?? [ 2096.093692][ T5918] usb 9-1: bad CDC descriptors [ 2096.801431][ T5826] bridge_slave_0: left allmulticast mode [ 2096.833625][ T5826] bridge_slave_0: left promiscuous mode [ 2096.858810][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 2097.051434][ T6998] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2097.385769][T29592] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 2097.480127][ T7016] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6916'. [ 2097.551407][T29592] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2097.589427][T29592] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2097.643516][T29592] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2097.665966][T29592] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2097.685004][T29592] usb 2-1: SerialNumber: syz [ 2097.718096][ T7020] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6917'. [ 2097.975417][ T6998] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2097.994945][ T6998] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2098.021439][ T5918] usb 9-1: USB disconnect, device number 77 [ 2098.096430][ T5904] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 2098.099049][ T6998] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6914'. [ 2098.177834][ T7038] fuse: Unknown parameter 't/YԌsS00ãu?Å!d:|*p`v@z_ j Ya#Qe[pmvŰC"0m&wh0x0000000000000006' [ 2098.284741][ T5904] usb 4-1: Using ep0 maxpacket: 32 [ 2098.303545][ T5904] usb 4-1: config 0 has an invalid interface number: 119 but max is 0 [ 2098.313682][ T5904] usb 4-1: config 0 has no interface number 0 [ 2098.328959][ T5904] usb 4-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2098.342234][ T5904] usb 4-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 2098.355987][ T5904] usb 4-1: config 0 interface 119 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 2098.370235][ T5904] usb 4-1: config 0 interface 119 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 2098.381278][ T5904] usb 4-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 2098.399363][ T5904] usb 4-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 2098.411421][ T5904] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2098.419816][ T5904] usb 4-1: Product: syz [ 2098.424164][ T5904] usb 4-1: Manufacturer: syz [ 2098.429842][ T5904] usb 4-1: SerialNumber: syz [ 2098.438628][ T5904] usb 4-1: config 0 descriptor?? [ 2098.455574][ T7023] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 2098.464215][ T5826] bond1 (unregistering): (slave bridge1): Releasing active interface [ 2098.472621][ T5904] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.119/input/input152 [ 2098.492034][ T5183] usb 4-1: BOGUS urb xfer, pipe 1 != type 3 [ 2098.699932][ T7023] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2098.718913][ T7023] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2098.857618][ T5826] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2098.867098][ T5826] bond_slave_0: left promiscuous mode [ 2098.874372][ T5826] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2098.883887][ T5826] bond_slave_1: left promiscuous mode [ 2098.890203][ T5826] bond0 (unregistering): Released all slaves [ 2098.912135][ T5826] bond1 (unregistering): Released all slaves [ 2099.173026][ T5826] bond2 (unregistering): (slave veth5): Releasing active interface [ 2099.181557][ T5826] batadv1: entered promiscuous mode [ 2099.189428][ T5826] bond2 (unregistering): (slave batadv1): Releasing active interface [ 2099.199182][ T5826] bond2 (unregistering): Released all slaves [ 2099.383716][ T5826] m1Ie5n: left promiscuous mode [ 2099.461473][ T5826] tipc: Left network mode [ 2099.485360][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2099.713293][T20005] usb 9-1: new full-speed USB device number 78 using dummy_hcd [ 2099.797369][T29592] usb 2-1: 0:2 : does not exist [ 2099.828928][T29592] usb 2-1: unit 5: unexpected type 0x03 [ 2099.854720][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2099.868793][T29592] usb 2-1: 0:0: failed to get current value for ch 0 (-22) [ 2099.886078][T20005] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 2099.895757][T20005] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2099.909780][T20005] usb 9-1: Product: syz [ 2099.914381][T20005] usb 9-1: Manufacturer: syz [ 2099.922759][T20005] usb 9-1: SerialNumber: syz [ 2099.972022][T20005] usb 9-1: config 0 descriptor?? [ 2099.988676][T29592] usb 2-1: USB disconnect, device number 24 [ 2100.090472][T26347] udevd[26347]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2100.147367][ T5826] hsr_slave_0: left promiscuous mode [ 2100.177352][ T5826] hsr_slave_1: left promiscuous mode [ 2100.191867][ T5826] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2100.205747][T20005] usb 9-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 2100.219962][ T5826] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2100.321284][ T7137] fuse: Bad value for 'fd' [ 2100.404194][ T5826] pim6reg (unregistering): left allmulticast mode [ 2100.644792][ T5935] usb 4-1: USB disconnect, device number 125 [ 2100.695382][T29592] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 2100.905782][T29592] usb 2-1: Using ep0 maxpacket: 8 [ 2100.939123][T29592] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2100.949741][T29592] usb 2-1: New USB device found, idVendor=0e8d, idProduct=2000, bcdDevice=21.c6 [ 2100.959491][T29592] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2100.987825][T29592] usb 2-1: config 0 descriptor?? [ 2101.274693][ T31] audit: type=1804 audit(1765835014.805:3729): pid=7135 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.6924" name="/newroot/206/bus" dev="tmpfs" ino=1081 res=1 errno=0 [ 2101.346182][ T5826] team0 (unregistering): Port device team_slave_1 removed [ 2101.542352][ T5826] team0 (unregistering): Port device team_slave_0 removed [ 2101.742798][ T7163] loop6: detected capacity change from 0 to 524287999 [ 2102.264573][ T5904] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 2102.297780][T20005] dvb_usb_rtl28xxu 9-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 2102.339634][T20005] usb 9-1: USB disconnect, device number 78 [ 2102.481862][ T5904] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 2102.505918][ T5904] usb 4-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 2102.523934][ T5904] usb 4-1: Product: syz [ 2102.535132][ T5904] usb 4-1: Manufacturer: syz [ 2102.574668][ T5904] usb 4-1: SerialNumber: syz [ 2102.599746][ T5904] usb 4-1: config 0 descriptor?? [ 2102.632838][ T5904] ch341 4-1:0.0: ch341-uart converter detected [ 2103.227592][ T5904] usb 4-1: failed to receive control message: -71 [ 2103.246332][ T5904] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 2103.298458][ T5904] usb 4-1: USB disconnect, device number 126 [ 2103.388242][ T5904] ch341 4-1:0.0: device disconnected [ 2103.524663][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2103.782843][ T7207] tipc: Enabled bearer , priority 0 [ 2103.790475][ T7207] syzkaller0: entered promiscuous mode [ 2103.796225][ T7207] syzkaller0: entered allmulticast mode [ 2103.915376][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2104.018926][ T5826] IPVS: stop unused estimator thread 0... [ 2104.115336][T29592] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 2104.290939][T29592] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2104.318586][T29592] usb 4-1: config 0 has no interfaces? [ 2104.383399][T29592] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 2104.413588][T29592] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2104.535884][T29592] usb 4-1: config 0 descriptor?? [ 2104.652925][ T7221] netlink: 20 bytes leftover after parsing attributes in process `syz.7.6934'. [ 2104.905278][ T7230] tipc: Resetting bearer [ 2104.948171][T29592] usb 4-1: string descriptor 0 read error: -71 [ 2105.013485][T29592] usb 4-1: USB disconnect, device number 127 [ 2105.027326][ T7206] tipc: Resetting bearer [ 2105.071162][ T7232] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6935'. [ 2105.196813][ T7206] tipc: Disabling bearer [ 2106.264507][T29592] usb 9-1: new high-speed USB device number 79 using dummy_hcd [ 2106.435072][T29592] usb 9-1: Using ep0 maxpacket: 8 [ 2106.446976][T29592] usb 9-1: unable to get BOS descriptor or descriptor too short [ 2106.481481][T29592] usb 9-1: config 1 has an invalid interface number: 65 but max is 0 [ 2106.501113][T29592] usb 9-1: config 1 has no interface number 0 [ 2106.530288][T29592] usb 9-1: too many endpoints for config 1 interface 65 altsetting 139: 128, using maximum allowed: 30 [ 2106.572765][T29592] usb 9-1: config 1 interface 65 altsetting 139 has 0 endpoint descriptors, different from the interface descriptor's value: 128 [ 2106.617776][T29592] usb 9-1: config 1 interface 65 has no altsetting 0 [ 2106.651581][T29592] usb 9-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice=2b.cd [ 2106.681456][T29592] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2106.704540][T29592] usb 9-1: Product: syz [ 2106.721877][T29592] usb 9-1: Manufacturer: syz [ 2106.734456][T29592] usb 9-1: SerialNumber: syz [ 2107.317893][ T7299] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2107.336597][ T8209] usb 2-1: USB disconnect, device number 25 [ 2107.356467][ T7299] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2108.174589][ T8209] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 2108.355027][ T8209] usb 4-1: Using ep0 maxpacket: 8 [ 2108.646361][ T8209] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2108.712324][ T8209] usb 4-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 2108.721644][ T8209] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2108.741270][ T8209] usb 4-1: Product: syz [ 2108.745830][ T8209] usb 4-1: Manufacturer: syz [ 2108.750467][ T8209] usb 4-1: SerialNumber: syz [ 2108.757937][ T8209] usb 4-1: config 0 descriptor?? [ 2108.772969][ T8209] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 2108.790267][ T8209] usb 4-1: selecting invalid altsetting 1 [ 2109.313641][ T8209] gspca_stk014: reg_r err -110 [ 2109.332751][ T8209] stk014 4-1:0.0: probe with driver stk014 failed with error -110 [ 2109.674726][ T8209] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 2109.865636][ T8209] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 2109.891098][ T8209] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 2109.921535][ T8209] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 2109.948554][ T8209] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 2109.967925][ T8209] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2109.994237][ T8209] usb 2-1: Product: syz [ 2110.008566][ T8209] usb 2-1: Manufacturer: syz [ 2110.013718][ T8209] usb 2-1: SerialNumber: syz [ 2110.041282][ T8209] usb 2-1: config 0 descriptor?? [ 2110.091045][ T7338] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 2110.112036][ T7338] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 2110.158955][ T8209] usb 2-1: ucan: probing device on interface #0 [ 2110.242386][ T7298] delete_channel: no stack [ 2110.258341][T29592] kalmia 9-1:1.65 (unnamed net_device) (uninitialized): Error sending init packet. Status -22 [ 2110.297370][T29592] kalmia 9-1:1.65: probe with driver kalmia failed with error -22 [ 2110.338225][T29592] usb 9-1: USB disconnect, device number 79 [ 2110.523319][ T7367] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2110.535433][T18888] usb 4-1: USB disconnect, device number 2 [ 2110.564682][ T7367] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2110.573156][ T7367] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2110.584681][ T7372] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2110.613052][ T7372] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2110.624600][ T7372] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2110.811727][ T8209] ucan 2-1:0.0 can0: registered device [ 2111.015410][ T8209] ucan 2-1:0.0 can0: firmware string: [ 2111.228897][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 2111.238554][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 2111.246731][T20005] usb 2-1: USB disconnect, device number 26 [ 2111.283196][ T7407] ipip0: entered promiscuous mode [ 2111.288862][ T7407] ipip0: entered allmulticast mode [ 2111.502023][ T7429] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6958'. [ 2111.824587][ T5935] usb 9-1: new high-speed USB device number 80 using dummy_hcd [ 2112.215610][ T5935] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2112.263207][ T5935] usb 9-1: config 0 interface 0 has no altsetting 0 [ 2112.289204][ T5935] usb 9-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=b1.f9 [ 2112.313874][ T5935] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2112.334836][ T5935] usb 9-1: Product: syz [ 2112.339178][ T5935] usb 9-1: Manufacturer: syz [ 2112.363941][ T5935] usb 9-1: SerialNumber: syz [ 2112.388671][ T5935] usb 9-1: config 0 descriptor?? [ 2112.418732][ T5935] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 2112.465462][ T5935] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2112.475849][T18888] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 2112.496024][ T5935] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 2112.506357][ T5935] usb 9-1: media controller created [ 2112.581248][ T5935] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2112.644681][T18888] usb 4-1: Using ep0 maxpacket: 16 [ 2112.679802][T18888] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 2112.702397][T18888] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2112.725586][T18888] usb 4-1: Product: syz [ 2112.742428][T18888] usb 4-1: Manufacturer: syz [ 2112.755972][T18888] usb 4-1: SerialNumber: syz [ 2112.773321][ T5935] DVB: Unable to find symbol tda10046_attach() [ 2112.788887][T18888] r8152-cfgselector 4-1: Unknown version 0x0000 [ 2112.797205][T18888] r8152-cfgselector 4-1: config 0 descriptor?? [ 2112.805757][ T5935] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 2112.818892][ T5935] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 2112.893266][ T5935] dvb_usb_m920x 9-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 2112.924319][ T5935] usb 9-1: USB disconnect, device number 80 [ 2113.063193][T18888] r8152-cfgselector 4-1: Needed 1 retries to read version [ 2113.095000][T18888] r8152-cfgselector 4-1: Unknown version 0x2460 [ 2113.117043][T18888] r8152-cfgselector 4-1: bad CDC descriptors [ 2113.290281][ T7450] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6957'. [ 2113.439310][ T7488] netlink: 'syz.8.6960': attribute type 10 has an invalid length. [ 2113.519991][ T7488] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 2113.785288][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2113.794378][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2113.802831][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2114.222317][ T7521] netlink: 176 bytes leftover after parsing attributes in process `syz.2.6964'. [ 2114.231666][ T7521] openvswitch: netlink: Flow key attr not present in new flow. [ 2114.656333][T18888] r8152-cfgselector 4-1: USB disconnect, device number 3 [ 2114.920924][ T7540] netlink: 88 bytes leftover after parsing attributes in process `syz.8.6967'. [ 2114.981930][ T52] Bluetooth: hci0: SCO packet for unknown connection handle 200 [ 2115.104157][ T7540] netlink: 20 bytes leftover after parsing attributes in process `syz.8.6967'. [ 2115.225339][T18888] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 2115.385848][T18888] usb 2-1: Using ep0 maxpacket: 32 [ 2115.411469][T18888] usb 2-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=8a.0a [ 2115.488851][T18888] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2115.525221][T18888] usb 2-1: Product: syz [ 2115.536110][T18888] usb 2-1: Manufacturer: syz [ 2115.552855][T18888] usb 2-1: SerialNumber: syz [ 2115.579024][T18888] usb 2-1: config 0 descriptor?? [ 2115.598455][T18888] xr_serial 2-1:0.0: skipping garbage [ 2115.796495][T18888] usb 2-1: USB disconnect, device number 27 [ 2116.595457][ T7603] netlink: 'syz.3.6975': attribute type 10 has an invalid length. [ 2116.664758][ T7603] team0: Port device netdevsim0 added [ 2116.800538][ T7617] netlink: 'syz.3.6975': attribute type 10 has an invalid length. [ 2116.892786][ T7617] team0: Port device netdevsim0 removed [ 2116.904690][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2116.971032][ T7617] .`: (slave netdevsim0): Enslaving as an active interface with an up link [ 2117.765013][ T7613] netlink: 20 bytes leftover after parsing attributes in process `syz.8.6977'. [ 2117.815128][ T5935] usb 2-1: new full-speed USB device number 28 using dummy_hcd [ 2118.010870][ T5935] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 2118.027614][ T5935] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2118.055275][ T5935] usb 2-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 2118.080821][ T5935] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2118.089215][ T7627] macvtap1: entered promiscuous mode [ 2118.089393][ T7627] macvtap1: entered allmulticast mode [ 2118.089410][ T7627] bridge0: entered allmulticast mode [ 2118.090280][ T7627] bridge0: port 4(macvtap1) entered blocking state [ 2118.125392][ T7627] bridge0: port 4(macvtap1) entered disabled state [ 2118.146688][ T7627] bridge0: left allmulticast mode [ 2118.152493][ T5935] usb 2-1: config 0 descriptor?? [ 2118.171210][ T7620] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2118.587114][ T5935] samsung 0003:0419:0600.0061: unexpected long global item [ 2118.621932][ T5935] samsung 0003:0419:0600.0061: parse failed [ 2118.646617][ T5935] samsung 0003:0419:0600.0061: probe with driver samsung failed with error -22 [ 2118.718884][ T7655] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6983'. [ 2118.864279][ T7655] bond4: entered promiscuous mode [ 2118.885539][ T7655] 8021q: adding VLAN 0 to HW filter on device bond4 [ 2119.286972][ T7671] bridge2: entered promiscuous mode [ 2119.296178][ T7671] bond4: (slave bridge2): Enslaving as an active interface with an up link [ 2119.333955][ T5935] usb 2-1: USB disconnect, device number 28 [ 2120.024861][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2120.100067][ T7732] syzkaller0: entered promiscuous mode [ 2120.109105][ T7732] syzkaller0: entered allmulticast mode [ 2120.327361][ T7737] netlink: 'syz.3.6987': attribute type 1 has an invalid length. [ 2120.364768][T29592] usb 9-1: new high-speed USB device number 81 using dummy_hcd [ 2120.424729][ T7737] netlink: 5 bytes leftover after parsing attributes in process `syz.3.6987'. [ 2120.588050][T29592] usb 9-1: device descriptor read/64, error -71 [ 2120.837166][T29592] usb 9-1: new high-speed USB device number 82 using dummy_hcd [ 2120.984576][T29592] usb 9-1: device descriptor read/64, error -71 [ 2121.074693][ T8209] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 2121.125356][T29592] usb usb9-port1: attempt power cycle [ 2121.244703][ T8209] usb 4-1: Using ep0 maxpacket: 32 [ 2121.250904][ T8209] usb 4-1: too many configurations: 17, using maximum allowed: 8 [ 2121.263214][ T8209] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 2121.271799][ T8209] usb 4-1: config 0 has no interface number 0 [ 2121.285901][ T8209] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 2121.294368][ T8209] usb 4-1: config 0 has no interface number 0 [ 2121.302322][ T8209] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 2121.311199][ T8209] usb 4-1: config 0 has no interface number 0 [ 2121.319216][ T8209] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 2121.328003][ T8209] usb 4-1: config 0 has no interface number 0 [ 2121.335865][ T8209] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 2121.344112][ T8209] usb 4-1: config 0 has no interface number 0 [ 2121.352132][ T8209] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 2121.361139][ T8209] usb 4-1: config 0 has no interface number 0 [ 2121.368835][ T8209] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 2121.378007][ T8209] usb 4-1: config 0 has no interface number 0 [ 2121.388450][ T8209] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 2121.397146][ T8209] usb 4-1: config 0 has no interface number 0 [ 2121.406937][ T8209] usb 4-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 2121.416339][ T8209] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2121.424370][ T8209] usb 4-1: Product: syz [ 2121.429277][ T8209] usb 4-1: Manufacturer: syz [ 2121.433914][ T8209] usb 4-1: SerialNumber: syz [ 2121.450163][ T8209] usb 4-1: config 0 descriptor?? [ 2121.460380][ T8209] etas_es58x 4-1:0.2: Starting syz syz (Serial Number syz) [ 2121.468325][T29592] usb 9-1: new high-speed USB device number 83 using dummy_hcd [ 2121.542236][T29592] usb 9-1: device descriptor read/8, error -71 [ 2121.674738][ T5918] usb 2-1: new full-speed USB device number 29 using dummy_hcd [ 2121.804794][T29592] usb 9-1: new high-speed USB device number 84 using dummy_hcd [ 2121.821684][ T7800] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6995'. [ 2121.833580][ T5918] usb 2-1: config 0 has an invalid interface number: 151 but max is 1 [ 2121.842399][T29592] usb 9-1: device descriptor read/8, error -71 [ 2121.850853][ T5918] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2121.862153][ T5918] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 2121.872892][ T5918] usb 2-1: config 0 has no interface number 0 [ 2121.880468][ T5918] usb 2-1: config 0 interface 151 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2121.901505][ T5918] usb 2-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 2121.911792][ T5918] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2121.922923][ T5918] usb 2-1: Product: syz [ 2121.927956][ T5918] usb 2-1: Manufacturer: syz [ 2121.932671][ T5918] usb 2-1: SerialNumber: syz [ 2121.941380][ T5918] usb 2-1: config 0 descriptor?? [ 2121.955338][T29592] usb usb9-port1: unable to enumerate USB device [ 2121.966802][ T5918] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 2121.996747][ T5918] snd-usb-audio 2-1:0.151: probe with driver snd-usb-audio failed with error -2 [ 2122.034365][ T1394] udevd[1394]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2122.117331][ T7810] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2122.128312][ T7810] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2122.141997][ T8209] etas_es58x 4-1:0.2: could not parse product info: 'Т' [ 2122.698007][ T7831] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6996'. [ 2122.731509][ T7831] bridge_slave_1: left allmulticast mode [ 2122.737520][ T7831] bridge_slave_1: left promiscuous mode [ 2122.743691][ T7831] bridge0: port 2(bridge_slave_1) entered disabled state [ 2122.771442][ T7831] bridge_slave_0: left allmulticast mode [ 2122.781183][ T7831] bridge_slave_0: left promiscuous mode [ 2122.787850][ T7831] bridge0: port 1(bridge_slave_0) entered disabled state [ 2123.255578][ T7854] [ 2123.258019][ T7854] ===================================================== [ 2123.264980][ T7854] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 2123.272494][ T7854] syzkaller #0 Tainted: G L [ 2123.278516][ T7854] ----------------------------------------------------- [ 2123.285697][ T7854] syz.2.6997/7854 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 2123.293371][ T7854] ffffffff8dc0c058 (tasklist_lock){.+.+}-{3:3}, at: send_sigio+0x101/0x370 [ 2123.302023][ T7854] [ 2123.302023][ T7854] and this task is already holding: [ 2123.309396][ T7854] ffff888027e9bb20 (&f_owner->lock){....}-{3:3}, at: send_sigio+0x38/0x370 [ 2123.318123][ T7854] which would create a new lock dependency: [ 2123.324047][ T7854] (&f_owner->lock){....}-{3:3} -> (tasklist_lock){.+.+}-{3:3} [ 2123.331748][ T7854] [ 2123.331748][ T7854] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 2123.341228][ T7854] (&dev->event_lock#2){..-.}-{3:3} [ 2123.341265][ T7854] [ 2123.341265][ T7854] ... which became SOFTIRQ-irq-safe at: [ 2123.354159][ T7854] lock_acquire+0x117/0x340 [ 2123.358790][ T7854] _raw_spin_lock_irqsave+0xa7/0xf0 [ 2123.364099][ T7854] input_event+0x76/0xe0 [ 2123.368455][ T7854] xpad360_process_packet+0xda/0xdd0 [ 2123.373871][ T7854] xpad_irq_in+0x14e/0x25f0 [ 2123.378491][ T7854] __usb_hcd_giveback_urb+0x376/0x540 [ 2123.383992][ T7854] dummy_timer+0x85f/0x45b0 [ 2123.388603][ T7854] __hrtimer_run_queues+0x51c/0xc30 [ 2123.393931][ T7854] hrtimer_run_softirq+0x187/0x2b0 [ 2123.399145][ T7854] handle_softirqs+0x27d/0x850 [ 2123.404033][ T7854] __irq_exit_rcu+0xca/0x1f0 [ 2123.408730][ T7854] irq_exit_rcu+0x9/0x30 [ 2123.413245][ T7854] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 2123.418979][ T7854] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2123.425076][ T7854] kasan_check_range+0x1d4/0x2c0 [ 2123.430146][ T7854] __asan_memcpy+0x29/0x70 [ 2123.434663][ T7854] mas_commit_b_node+0x77b/0x1090 [ 2123.439790][ T7854] mas_wr_store_entry+0x522/0x27b0 [ 2123.445009][ T7854] mas_store_prealloc+0xaf2/0x1030 [ 2123.450238][ T7854] vma_complete+0x224/0xae0 [ 2123.454873][ T7854] __split_vma+0x8b0/0xa00 [ 2123.459399][ T7854] vma_modify+0x952/0x1a70 [ 2123.463913][ T7854] vma_modify_flags+0x208/0x2e0 [ 2123.464765][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2123.468870][ T7854] mprotect_fixup+0x43c/0xa30 [ 2123.468900][ T7854] do_mprotect_pkey+0x8c5/0xcd0 [ 2123.486691][ T7854] __ia32_sys_mprotect+0x7f/0x90 [ 2123.491728][ T7854] __do_fast_syscall_32+0x1f7/0x590 [ 2123.497047][ T7854] do_fast_syscall_32+0x34/0x80 [ 2123.501998][ T7854] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2123.508442][ T7854] [ 2123.508442][ T7854] to a SOFTIRQ-irq-unsafe lock: [ 2123.515472][ T7854] (tasklist_lock){.+.+}-{3:3} [ 2123.515501][ T7854] [ 2123.515501][ T7854] ... which became SOFTIRQ-irq-unsafe at: [ 2123.528185][ T7854] ... [ 2123.528196][ T7854] lock_acquire+0x117/0x340 [ 2123.535395][ T7854] _raw_read_lock+0x36/0x50 [ 2123.539999][ T7854] __do_wait+0xde/0x740 [ 2123.544262][ T7854] do_wait+0x1e8/0x4f0 [ 2123.548772][ T7854] kernel_wait+0xab/0x170 [ 2123.553245][ T7854] call_usermodehelper_exec_work+0xbe/0x230 [ 2123.559233][ T7854] process_scheduled_works+0xad1/0x1770 [ 2123.564875][ T7854] worker_thread+0x8a0/0xda0 [ 2123.569594][ T7854] kthread+0x711/0x8a0 [ 2123.573782][ T7854] ret_from_fork+0x599/0xb30 [ 2123.578488][ T7854] ret_from_fork_asm+0x1a/0x30 [ 2123.583393][ T7854] [ 2123.583393][ T7854] other info that might help us debug this: [ 2123.583393][ T7854] [ 2123.593627][ T7854] Chain exists of: [ 2123.593627][ T7854] &dev->event_lock#2 --> &f_owner->lock --> tasklist_lock [ 2123.593627][ T7854] [ 2123.606724][ T7854] Possible interrupt unsafe locking scenario: [ 2123.606724][ T7854] [ 2123.615055][ T7854] CPU0 CPU1 [ 2123.620424][ T7854] ---- ---- [ 2123.625796][ T7854] lock(tasklist_lock); [ 2123.630139][ T7854] local_irq_disable(); [ 2123.636928][ T7854] lock(&dev->event_lock#2); [ 2123.644180][ T7854] lock(&f_owner->lock); [ 2123.651039][ T7854] [ 2123.654619][ T7854] lock(&dev->event_lock#2); [ 2123.659492][ T7854] [ 2123.659492][ T7854] *** DEADLOCK *** [ 2123.659492][ T7854] [ 2123.667640][ T7854] 6 locks held by syz.2.6997/7854: [ 2123.672762][ T7854] #0: ffff888075334420 (sb_writers#5){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 2123.681941][ T7854] #1: ffffffff8e0bcb10 (file_rwsem){++++}-{0:0}, at: __break_lease+0x402/0x1620 [ 2123.691099][ T7854] #2: ffff888078bebe88 (&ctx->flc_lock){+.+.}-{3:3}, at: __break_lease+0x40f/0x1620 [ 2123.700627][ T7854] #3: ffffffff8df419e0 (rcu_read_lock){....}-{1:3}, at: kill_fasync+0x53/0x4d0 [ 2123.709789][ T7854] #4: ffff88807539d9f0 (&new->fa_lock){...-}-{3:3}, at: kill_fasync+0x199/0x4d0 [ 2123.718968][ T7854] #5: ffff888027e9bb20 (&f_owner->lock){....}-{3:3}, at: send_sigio+0x38/0x370 [ 2123.728053][ T7854] [ 2123.728053][ T7854] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 2123.738496][ T7854] -> (&dev->event_lock#2){..-.}-{3:3} { [ 2123.744335][ T7854] IN-SOFTIRQ-W at: [ 2123.748603][ T7854] lock_acquire+0x117/0x340 [ 2123.755286][ T7854] _raw_spin_lock_irqsave+0xa7/0xf0 [ 2123.762859][ T7854] input_event+0x76/0xe0 [ 2123.769295][ T7854] xpad360_process_packet+0xda/0xdd0 [ 2123.776809][ T7854] xpad_irq_in+0x14e/0x25f0 [ 2123.783527][ T7854] __usb_hcd_giveback_urb+0x376/0x540 [ 2123.791100][ T7854] dummy_timer+0x85f/0x45b0 [ 2123.797793][ T7854] __hrtimer_run_queues+0x51c/0xc30 [ 2123.805263][ T7854] hrtimer_run_softirq+0x187/0x2b0 [ 2123.812575][ T7854] handle_softirqs+0x27d/0x850 [ 2123.819572][ T7854] __irq_exit_rcu+0xca/0x1f0 [ 2123.826351][ T7854] irq_exit_rcu+0x9/0x30 [ 2123.832783][ T7854] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 2123.840601][ T7854] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2123.848767][ T7854] kasan_check_range+0x1d4/0x2c0 [ 2123.855892][ T7854] __asan_memcpy+0x29/0x70 [ 2123.862503][ T7854] mas_commit_b_node+0x77b/0x1090 [ 2123.869735][ T7854] mas_wr_store_entry+0x522/0x27b0 [ 2123.877033][ T7854] mas_store_prealloc+0xaf2/0x1030 [ 2123.884333][ T7854] vma_complete+0x224/0xae0 [ 2123.891024][ T7854] __split_vma+0x8b0/0xa00 [ 2123.897631][ T7854] vma_modify+0x952/0x1a70 [ 2123.904243][ T7854] vma_modify_flags+0x208/0x2e0 [ 2123.911286][ T7854] mprotect_fixup+0x43c/0xa30 [ 2123.918154][ T7854] do_mprotect_pkey+0x8c5/0xcd0 [ 2123.925282][ T7854] __ia32_sys_mprotect+0x7f/0x90 [ 2123.932413][ T7854] __do_fast_syscall_32+0x1f7/0x590 [ 2123.939815][ T7854] do_fast_syscall_32+0x34/0x80 [ 2123.946941][ T7854] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2123.955457][ T7854] INITIAL USE at: [ 2123.959712][ T7854] lock_acquire+0x117/0x340 [ 2123.966310][ T7854] _raw_spin_lock_irqsave+0xa7/0xf0 [ 2123.973608][ T7854] input_inject_event+0xa5/0x340 [ 2123.980663][ T7854] kbd_led_trigger_activate+0xbc/0x100 [ 2123.988224][ T7854] led_trigger_set+0x52d/0x950 [ 2123.995088][ T7854] led_trigger_set_default+0x260/0x2a0 [ 2124.002639][ T7854] led_classdev_register_ext+0x73d/0x960 [ 2124.010359][ T7854] input_leds_connect+0x517/0x790 [ 2124.017487][ T7854] input_register_device+0xd00/0x1170 [ 2124.024959][ T7854] atkbd_connect+0x73b/0xa50 [ 2124.031640][ T7854] serio_driver_probe+0x82/0xd0 [ 2124.038615][ T7854] really_probe+0x26d/0xad0 [ 2124.045213][ T7854] __driver_probe_device+0x18c/0x320 [ 2124.052599][ T7854] driver_probe_device+0x4f/0x240 [ 2124.059718][ T7854] __driver_attach+0x349/0x650 [ 2124.066572][ T7854] bus_for_each_dev+0x233/0x2b0 [ 2124.073541][ T7854] serio_handle_event+0x1f9/0x8d0 [ 2124.080666][ T7854] process_scheduled_works+0xad1/0x1770 [ 2124.088323][ T7854] worker_thread+0x8a0/0xda0 [ 2124.095007][ T7854] kthread+0x711/0x8a0 [ 2124.101171][ T7854] ret_from_fork+0x599/0xb30 [ 2124.107847][ T7854] ret_from_fork_asm+0x1a/0x30 [ 2124.114733][ T7854] } [ 2124.117494][ T7854] ... key at: [] input_allocate_device.__key.6+0x0/0x20 [ 2124.126907][ T7854] -> (&client->buffer_lock){....}-{3:3} { [ 2124.132825][ T7854] INITIAL USE at: [ 2124.136897][ T7854] lock_acquire+0x117/0x340 [ 2124.143330][ T7854] _raw_spin_lock+0x2e/0x40 [ 2124.149858][ T7854] evdev_handle_get_val+0x70/0x9f0 [ 2124.156887][ T7854] evdev_ioctl_handler+0x1202/0x1f10 [ 2124.164092][ T7854] __ia32_compat_sys_ioctl+0x543/0x840 [ 2124.171491][ T7854] __do_fast_syscall_32+0x1f7/0x590 [ 2124.178609][ T7854] do_fast_syscall_32+0x34/0x80 [ 2124.185393][ T7854] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2124.193643][ T7854] } [ 2124.196326][ T7854] ... key at: [] evdev_open.__key.26+0x0/0x20 [ 2124.204686][ T7854] ... acquired at: [ 2124.208751][ T7854] _raw_spin_lock+0x2e/0x40 [ 2124.213443][ T7854] evdev_handle_get_val+0x70/0x9f0 [ 2124.218735][ T7854] evdev_ioctl_handler+0x1202/0x1f10 [ 2124.224205][ T7854] __ia32_compat_sys_ioctl+0x543/0x840 [ 2124.229846][ T7854] __do_fast_syscall_32+0x1f7/0x590 [ 2124.235226][ T7854] do_fast_syscall_32+0x34/0x80 [ 2124.240278][ T7854] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2124.246819][ T7854] [ 2124.249146][ T7854] -> (&new->fa_lock){...-}-{3:3} { [ 2124.254364][ T7854] IN-SOFTIRQ-R at: [ 2124.258444][ T7854] lock_acquire+0x117/0x340 [ 2124.264775][ T7854] _raw_read_lock_irqsave+0xaf/0x100 [ 2124.271898][ T7854] kill_fasync+0x199/0x4d0 [ 2124.278154][ T7854] sock_wake_async+0x137/0x160 [ 2124.284760][ T7854] sk_wake_async+0x189/0x280 [ 2124.291180][ T7854] tcp_data_queue+0xd6b/0x5e30 [ 2124.297799][ T7854] tcp_rcv_established+0xf57/0x2580 [ 2124.304830][ T7854] tcp_v4_do_rcv+0xa90/0x1430 [ 2124.311355][ T7854] tcp_v4_rcv+0x2675/0x2f20 [ 2124.317721][ T7854] ip_protocol_deliver_rcu+0x221/0x440 [ 2124.325044][ T7854] ip_local_deliver_finish+0x3bb/0x6f0 [ 2124.332345][ T7854] NF_HOOK+0x30c/0x3a0 [ 2124.338268][ T7854] NF_HOOK+0x30c/0x3a0 [ 2124.344171][ T7854] __netif_receive_skb+0x143/0x380 [ 2124.351121][ T7854] process_backlog+0x622/0x1500 [ 2124.357826][ T7854] __napi_poll+0xae/0x320 [ 2124.363988][ T7854] net_rx_action+0x672/0xe50 [ 2124.370411][ T7854] handle_softirqs+0x27d/0x850 [ 2124.377008][ T7854] do_softirq+0xec/0x180 [ 2124.383077][ T7854] __local_bh_enable_ip+0x17d/0x1c0 [ 2124.390110][ T7854] __dev_queue_xmit+0x1955/0x3140 [ 2124.396967][ T7854] ip_finish_output2+0xd03/0x1160 [ 2124.403912][ T7854] ip_output+0x29f/0x450 [ 2124.409982][ T7854] __ip_queue_xmit+0x118d/0x1c30 [ 2124.416752][ T7854] __tcp_transmit_skb+0x24f6/0x3aa0 [ 2124.423788][ T7854] tcp_write_xmit+0x16e8/0x6980 [ 2124.430491][ T7854] __tcp_push_pending_frames+0x97/0x380 [ 2124.437867][ T7854] __tcp_close+0x617/0xfe0 [ 2124.444121][ T7854] tcp_close+0x28/0x110 [ 2124.450117][ T7854] inet_release+0x144/0x190 [ 2124.456470][ T7854] sock_release+0x85/0x150 [ 2124.462724][ T7854] rds_tcp_accept_one+0x71a/0x930 [ 2124.469607][ T7854] rds_tcp_accept_worker+0x3e/0xa0 [ 2124.476557][ T7854] process_scheduled_works+0xad1/0x1770 [ 2124.483932][ T7854] worker_thread+0x8a0/0xda0 [ 2124.490450][ T7854] kthread+0x711/0x8a0 [ 2124.496361][ T7854] ret_from_fork+0x599/0xb30 [ 2124.502780][ T7854] ret_from_fork_asm+0x1a/0x30 [ 2124.509380][ T7854] INITIAL USE at: [ 2124.513393][ T7854] lock_acquire+0x117/0x340 [ 2124.519650][ T7854] _raw_write_lock_irq+0xa2/0xf0 [ 2124.526360][ T7854] fasync_remove_entry+0xf1/0x1c0 [ 2124.533187][ T7854] sock_fasync+0x85/0xf0 [ 2124.539179][ T7854] __fput+0x8a2/0xa70 [ 2124.544912][ T7854] task_work_run+0x1d4/0x260 [ 2124.551261][ T7854] exit_to_user_mode_loop+0xff/0x4f0 [ 2124.558293][ T7854] __do_fast_syscall_32+0x3b4/0x590 [ 2124.565240][ T7854] do_fast_syscall_32+0x34/0x80 [ 2124.571846][ T7854] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2124.579919][ T7854] INITIAL READ USE at: [ 2124.584447][ T7854] lock_acquire+0x117/0x340 [ 2124.591134][ T7854] _raw_read_lock_irqsave+0xaf/0x100 [ 2124.598605][ T7854] kill_fasync+0x199/0x4d0 [ 2124.605294][ T7854] sock_wake_async+0x137/0x160 [ 2124.612253][ T7854] sk_wake_async+0x184/0x280 [ 2124.619050][ T7854] unix_release_sock+0x747/0xc70 [ 2124.626163][ T7854] unix_release+0x92/0xd0 [ 2124.632697][ T7854] sock_close+0xc3/0x240 [ 2124.639121][ T7854] __fput+0x44c/0xa70 [ 2124.645288][ T7854] task_work_run+0x1d4/0x260 [ 2124.652058][ T7854] get_signal+0x11ec/0x1340 [ 2124.658755][ T7854] arch_do_signal_or_restart+0x9a/0x7a0 [ 2124.666487][ T7854] exit_to_user_mode_loop+0x87/0x4f0 [ 2124.673953][ T7854] __do_fast_syscall_32+0x3b4/0x590 [ 2124.681345][ T7854] do_fast_syscall_32+0x34/0x80 [ 2124.688374][ T7854] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2124.696878][ T7854] } [ 2124.699462][ T7854] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 2124.708233][ T7854] ... acquired at: [ 2124.712119][ T7854] _raw_read_lock_irqsave+0xaf/0x100 [ 2124.717591][ T7854] kill_fasync+0x199/0x4d0 [ 2124.722192][ T7854] evdev_pass_values+0x627/0xbd0 [ 2124.727337][ T7854] evdev_events+0x1e6/0x340 [ 2124.732016][ T7854] input_pass_values+0x288/0x890 [ 2124.737127][ T7854] input_event_dispose+0x330/0x6b0 [ 2124.742431][ T7854] input_inject_event+0x1dd/0x340 [ 2124.747635][ T7854] evdev_write+0x2fc/0x480 [ 2124.752230][ T7854] vfs_write+0x27e/0xb30 [ 2124.756662][ T7854] ksys_write+0x145/0x250 [ 2124.761178][ T7854] __do_fast_syscall_32+0x1f7/0x590 [ 2124.766654][ T7854] do_fast_syscall_32+0x34/0x80 [ 2124.771877][ T7854] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2124.778387][ T7854] [ 2124.780710][ T7854] -> (&f_owner->lock){....}-{3:3} { [ 2124.785951][ T7854] INITIAL USE at: [ 2124.789852][ T7854] lock_acquire+0x117/0x340 [ 2124.795922][ T7854] _raw_write_lock_irq+0xa2/0xf0 [ 2124.802425][ T7854] __f_setown+0x67/0x370 [ 2124.808263][ T7854] f_setown+0x23a/0x300 [ 2124.813989][ T7854] do_fcntl+0x68b/0x1a50 [ 2124.819839][ T7854] do_compat_fcntl64+0x477/0x720 [ 2124.826352][ T7854] __do_fast_syscall_32+0x1f7/0x590 [ 2124.833117][ T7854] do_fast_syscall_32+0x34/0x80 [ 2124.839541][ T7854] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2124.847455][ T7854] INITIAL READ USE at: [ 2124.851785][ T7854] lock_acquire+0x117/0x340 [ 2124.858290][ T7854] _raw_read_lock_irqsave+0xaf/0x100 [ 2124.865601][ T7854] send_sigio+0x38/0x370 [ 2124.871858][ T7854] kill_fasync+0x24d/0x4d0 [ 2124.878294][ T7854] sock_wake_async+0x137/0x160 [ 2124.885089][ T7854] sk_wake_async+0x184/0x280 [ 2124.891700][ T7854] unix_release_sock+0x747/0xc70 [ 2124.898688][ T7854] unix_release+0x92/0xd0 [ 2124.905048][ T7854] sock_close+0xc3/0x240 [ 2124.911443][ T7854] __fput+0x44c/0xa70 [ 2124.917446][ T7854] task_work_run+0x1d4/0x260 [ 2124.924170][ T7854] get_signal+0x11ec/0x1340 [ 2124.930703][ T7854] arch_do_signal_or_restart+0x9a/0x7a0 [ 2124.938265][ T7854] exit_to_user_mode_loop+0x87/0x4f0 [ 2124.945563][ T7854] __do_fast_syscall_32+0x3b4/0x590 [ 2124.952778][ T7854] do_fast_syscall_32+0x34/0x80 [ 2124.959733][ T7854] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2124.968073][ T7854] } [ 2124.970581][ T7854] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 2124.979444][ T7854] ... acquired at: [ 2124.983255][ T7854] _raw_read_lock_irqsave+0xaf/0x100 [ 2124.988726][ T7854] send_sigio+0x38/0x370 [ 2124.993162][ T7854] kill_fasync+0x24d/0x4d0 [ 2124.997957][ T7854] sock_wake_async+0x137/0x160 [ 2125.002938][ T7854] sk_wake_async+0x184/0x280 [ 2125.007731][ T7854] unix_release_sock+0x747/0xc70 [ 2125.012858][ T7854] unix_release+0x92/0xd0 [ 2125.017474][ T7854] sock_close+0xc3/0x240 [ 2125.021932][ T7854] __fput+0x44c/0xa70 [ 2125.026103][ T7854] task_work_run+0x1d4/0x260 [ 2125.030888][ T7854] get_signal+0x11ec/0x1340 [ 2125.035568][ T7854] arch_do_signal_or_restart+0x9a/0x7a0 [ 2125.041325][ T7854] exit_to_user_mode_loop+0x87/0x4f0 [ 2125.046796][ T7854] __do_fast_syscall_32+0x3b4/0x590 [ 2125.052195][ T7854] do_fast_syscall_32+0x34/0x80 [ 2125.057240][ T7854] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2125.063751][ T7854] [ 2125.066087][ T7854] [ 2125.066087][ T7854] the dependencies between the lock to be acquired [ 2125.066097][ T7854] and SOFTIRQ-irq-unsafe lock: [ 2125.079645][ T7854] -> (tasklist_lock){.+.+}-{3:3} { [ 2125.084783][ T7854] HARDIRQ-ON-R at: [ 2125.088787][ T7854] lock_acquire+0x117/0x340 [ 2125.095054][ T7854] _raw_read_lock+0x36/0x50 [ 2125.101406][ T7854] __do_wait+0xde/0x740 [ 2125.107256][ T7854] do_wait+0x1e8/0x4f0 [ 2125.113091][ T7854] kernel_wait+0xab/0x170 [ 2125.119119][ T7854] call_usermodehelper_exec_work+0xbe/0x230 [ 2125.126860][ T7854] process_scheduled_works+0xad1/0x1770 [ 2125.134085][ T7854] worker_thread+0x8a0/0xda0 [ 2125.140355][ T7854] kthread+0x711/0x8a0 [ 2125.146184][ T7854] ret_from_fork+0x599/0xb30 [ 2125.152436][ T7854] ret_from_fork_asm+0x1a/0x30 [ 2125.158869][ T7854] SOFTIRQ-ON-R at: [ 2125.162856][ T7854] lock_acquire+0x117/0x340 [ 2125.169030][ T7854] _raw_read_lock+0x36/0x50 [ 2125.175255][ T7854] __do_wait+0xde/0x740 [ 2125.181106][ T7854] do_wait+0x1e8/0x4f0 [ 2125.186959][ T7854] kernel_wait+0xab/0x170 [ 2125.192965][ T7854] call_usermodehelper_exec_work+0xbe/0x230 [ 2125.200519][ T7854] process_scheduled_works+0xad1/0x1770 [ 2125.207741][ T7854] worker_thread+0x8a0/0xda0 [ 2125.214095][ T7854] kthread+0x711/0x8a0 [ 2125.219830][ T7854] ret_from_fork+0x599/0xb30 [ 2125.226112][ T7854] ret_from_fork_asm+0x1a/0x30 [ 2125.232564][ T7854] INITIAL USE at: [ 2125.236483][ T7854] lock_acquire+0x117/0x340 [ 2125.242565][ T7854] _raw_write_lock_irq+0xa2/0xf0 [ 2125.249092][ T7854] copy_process+0x2185/0x3950 [ 2125.255348][ T7854] kernel_clone+0x21e/0x820 [ 2125.261455][ T7854] user_mode_thread+0xdd/0x140 [ 2125.267800][ T7854] rest_init+0x23/0x300 [ 2125.273625][ T7854] start_kernel+0x3a7/0x400 [ 2125.279703][ T7854] x86_64_start_reservations+0x24/0x30 [ 2125.286742][ T7854] x86_64_start_kernel+0x143/0x1c0 [ 2125.293454][ T7854] common_startup_64+0x13e/0x147 [ 2125.299979][ T7854] INITIAL READ USE at: [ 2125.304328][ T7854] lock_acquire+0x117/0x340 [ 2125.310897][ T7854] _raw_read_lock+0x36/0x50 [ 2125.317945][ T7854] __do_wait+0xde/0x740 [ 2125.324118][ T7854] do_wait+0x1e8/0x4f0 [ 2125.330208][ T7854] kernel_wait+0xab/0x170 [ 2125.336548][ T7854] call_usermodehelper_exec_work+0xbe/0x230 [ 2125.344454][ T7854] process_scheduled_works+0xad1/0x1770 [ 2125.352022][ T7854] worker_thread+0x8a0/0xda0 [ 2125.358705][ T7854] kthread+0x711/0x8a0 [ 2125.364784][ T7854] ret_from_fork+0x599/0xb30 [ 2125.371433][ T7854] ret_from_fork_asm+0x1a/0x30 [ 2125.378215][ T7854] } [ 2125.380770][ T7854] ... key at: [] tasklist_lock+0x18/0x40 [ 2125.388613][ T7854] ... acquired at: [ 2125.392421][ T7854] _raw_read_lock+0x36/0x50 [ 2125.397119][ T7854] send_sigio+0x101/0x370 [ 2125.401638][ T7854] kill_fasync+0x24d/0x4d0 [ 2125.406244][ T7854] lease_break_callback+0x26/0x30 [ 2125.411459][ T7854] __break_lease+0x730/0x1620 [ 2125.416434][ T7854] vfs_truncate+0x428/0x520 [ 2125.421117][ T7854] do_sys_truncate+0xdb/0x190 [ 2125.426075][ T7854] __ia32_compat_sys_truncate+0x5b/0x70 [ 2125.431809][ T7854] __do_fast_syscall_32+0x1f7/0x590 [ 2125.437193][ T7854] do_fast_syscall_32+0x34/0x80 [ 2125.442242][ T7854] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2125.448752][ T7854] [ 2125.451200][ T7854] [ 2125.451200][ T7854] stack backtrace: [ 2125.457091][ T7854] CPU: 0 UID: 0 PID: 7854 Comm: syz.2.6997 Tainted: G L syzkaller #0 PREEMPT(full) [ 2125.457116][ T7854] Tainted: [L]=SOFTLOCKUP [ 2125.457123][ T7854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2125.457134][ T7854] Call Trace: [ 2125.457142][ T7854] [ 2125.457151][ T7854] dump_stack_lvl+0x189/0x250 [ 2125.457181][ T7854] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2125.457201][ T7854] ? __pfx__printk+0x10/0x10 [ 2125.457231][ T7854] __lock_acquire+0x2a95/0x2cf0 [ 2125.457257][ T7854] ? send_sigio+0x101/0x370 [ 2125.457280][ T7854] lock_acquire+0x117/0x340 [ 2125.457296][ T7854] ? send_sigio+0x101/0x370 [ 2125.457320][ T7854] ? __pfx__raw_read_lock_irqsave+0x10/0x10 [ 2125.457347][ T7854] ? _raw_read_lock_irqsave+0xbb/0x100 [ 2125.457374][ T7854] _raw_read_lock+0x36/0x50 [ 2125.457397][ T7854] ? send_sigio+0x101/0x370 [ 2125.457420][ T7854] send_sigio+0x101/0x370 [ 2125.457446][ T7854] kill_fasync+0x24d/0x4d0 [ 2125.457470][ T7854] ? kill_fasync+0x53/0x4d0 [ 2125.457495][ T7854] lease_break_callback+0x26/0x30 [ 2125.457516][ T7854] __break_lease+0x730/0x1620 [ 2125.457539][ T7854] ? __pfx___break_lease+0x10/0x10 [ 2125.457557][ T7854] ? mnt_get_write_access+0x66/0x280 [ 2125.457583][ T7854] ? mnt_get_write_access+0x213/0x280 [ 2125.457610][ T7854] vfs_truncate+0x428/0x520 [ 2125.457628][ T7854] ? __pfx_vfs_truncate+0x10/0x10 [ 2125.457647][ T7854] do_sys_truncate+0xdb/0x190 [ 2125.457662][ T7854] ? __pfx_do_sys_truncate+0x10/0x10 [ 2125.457682][ T7854] __ia32_compat_sys_truncate+0x5b/0x70 [ 2125.457700][ T7854] __do_fast_syscall_32+0x1f7/0x590 [ 2125.457728][ T7854] ? do_fast_syscall_32+0x34/0x80 [ 2125.457757][ T7854] do_fast_syscall_32+0x34/0x80 [ 2125.457784][ T7854] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2125.457805][ T7854] RIP: 0023:0xf7f32539 [ 2125.457819][ T7854] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2125.457834][ T7854] RSP: 002b:00000000f540555c EFLAGS: 00000206 ORIG_RAX: 000000000000005c [ 2125.457851][ T7854] RAX: ffffffffffffffda RBX: 0000000080000040 RCX: 0000000000000000 [ 2125.457863][ T7854] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2125.457873][ T7854] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2125.457882][ T7854] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2125.457892][ T7854] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2125.457907][ T7854] [ 2125.907580][ T5935] usb 2-1: USB disconnect, device number 29 [ 2125.960188][ T5904] usb 4-1: USB disconnect, device number 4 [ 2125.968770][ T5904] etas_es58x 4-1:0.2: Disconnecting syz syz [ 2130.354610][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog