last executing test programs: 35m43.162229716s ago: executing program 1 (id=1334): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_INFO={0x28, 0x3, "ebae551382395afa4d23edfcbe6d55b57cb15e63c15c46395916e2b388abc3d6ce231633"}, @NFTA_MATCH_NAME={0xb, 0x1, 'helper\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x20}}, 0xa8}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) 35m43.020245847s ago: executing program 1 (id=1335): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = epoll_create1(0x80000) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000000)={@local}) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r3, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e, 0xfffffffffffffff9}) close(r3) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r2, 0x7a9, &(0x7f0000000340)={{@hyper, 0x2}, 0xe148, 0x3, 0x69c9, 0x4, 0xd, 0x385a2d2f, 0x4, 0x100000000}) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000440)={0x28, 0x0, 0x2710, @host}, 0x10) listen(r4, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) sendmmsg(r5, &(0x7f0000000700), 0x1, 0x24004008) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000180)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f0000003dc0)=[{{0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)=""/244, 0xf4}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f00000004c0)=""/248, 0xf8}, {&(0x7f00000005c0)=""/112, 0x70}, {&(0x7f0000000640)=""/209, 0xd1}, {&(0x7f0000000740)=""/46, 0x2e}, {&(0x7f0000000780)=""/135, 0x87}, {&(0x7f0000000840)=""/135, 0x87}, {&(0x7f0000000900)=""/93, 0x5d}, {&(0x7f0000000980)=""/42, 0x2a}, {&(0x7f00000009c0)=""/79, 0x4f}], 0x9}, 0x5}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000ac0)}, {&(0x7f0000000b00)=""/88, 0x58}, {&(0x7f0000000b80)=""/106, 0x6a}, {&(0x7f0000000c00)=""/54, 0x36}, {&(0x7f0000000c40)=""/93, 0x5d}, {&(0x7f0000000cc0)=""/160, 0xa0}, {&(0x7f0000000d80)=""/43, 0x2b}], 0x7}, 0x7}, {{&(0x7f0000000e00)=@hci, 0x80, &(0x7f0000001000)=[{&(0x7f0000000e80)}, {&(0x7f0000000ec0)=""/46, 0x2e}, {&(0x7f0000000f00)=""/232, 0xe8}], 0x3, &(0x7f0000001040)=""/113, 0x71}, 0x6}, {{0x0, 0x0, &(0x7f0000001580)=[{&(0x7f00000010c0)=""/243, 0xf3}, {&(0x7f00000011c0)=""/187, 0xbb}, {&(0x7f0000001280)=""/143, 0x8f}, {&(0x7f0000001340)=""/202, 0xca}, {&(0x7f0000001440)=""/112, 0x70}, {&(0x7f00000014c0)=""/157, 0x9d}], 0x6, &(0x7f00000015c0)=""/212, 0xd4}, 0x10000}, {{&(0x7f00000016c0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, &(0x7f0000002d40)=[{0x0}, {&(0x7f0000001940)=""/62, 0x3e}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000002980)=""/255, 0xff}, {&(0x7f0000002a80)=""/30, 0x1e}, {&(0x7f0000002ac0)=""/37, 0x25}, {&(0x7f0000002b00)=""/240, 0xf0}, {&(0x7f0000002c00)=""/111, 0x6f}, {&(0x7f0000002c80)=""/130, 0x82}], 0x9}, 0xe774}], 0x6, 0x40000042, 0x0) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000040)={0xa0000004}) r9 = dup2(r2, r1) ioctl$VIDIOC_ENUMAUDOUT(r9, 0xc0345642, &(0x7f00000000c0)={0x7, "56ef0807141e59fa6ea73ed1fa847c1ec008964be9a8518f3ff07536e25c4587", 0x3}) epoll_wait(r8, &(0x7f0000000200)=[{}], 0x1, 0x254) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r7, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r1, &(0x7f0000000000)={0xa0000001}) ioctl$VHOST_VSOCK_SET_RUNNING(r9, 0x4004af61, &(0x7f00000002c0)) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x38, 0x1, 0x1, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@CTA_FILTER={0x14, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x8}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x408}]}, @CTA_TUPLE_ORIG={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x4000040) 35m41.869862437s ago: executing program 1 (id=1339): r0 = openat$cgroup_root(0xffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x8, &(0x7f0000000040)=0xf, 0x4) (async) setsockopt$inet6_int(r2, 0x29, 0x2, &(0x7f0000004240)=0xc3, 0x4) (async) recvmmsg(r2, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x8, &(0x7f0000000000)=0x7f, 0x4) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) 35m40.576677572s ago: executing program 1 (id=1343): mkdir(&(0x7f00000002c0)='./file0\x00', 0x2) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x80101) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x10) chroot(&(0x7f0000000780)='./file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) r2 = syz_io_uring_setup(0x90e, &(0x7f00000000c0)={0x0, 0xfffffffe, 0x0, 0x1, 0x10000000}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xa7, 0x82000, 0x23456}) io_uring_enter(r2, 0x47f9, 0x0, 0x0, 0x0, 0x0) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f00000001c0)='./file0/../file0/../file0/../file0/file0\x00', 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x2) (async) open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x80101) (async) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x10) (async) chroot(&(0x7f0000000780)='./file0\x00') (async) open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) (async) syz_io_uring_setup(0x90e, &(0x7f00000000c0)={0x0, 0xfffffffe, 0x0, 0x1, 0x10000000}, &(0x7f0000000240), &(0x7f0000000280)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xa7, 0x82000, 0x23456}) (async) io_uring_enter(r2, 0x47f9, 0x0, 0x0, 0x0, 0x0) (async) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') (async) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f00000001c0)='./file0/../file0/../file0/../file0/file0\x00', 0x0) (async) 35m40.05770445s ago: executing program 1 (id=1344): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x874fd42a7836ef69, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}}], 0x1, 0x0) 35m39.377999216s ago: executing program 1 (id=1345): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_INFO={0x28, 0x3, "ebae551382395afa4d23edfcbe6d55b57cb15e63c15c46395916e2b388abc3d6ce231633"}, @NFTA_MATCH_NAME={0xb, 0x1, 'helper\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x20}}, 0xa8}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) 35m38.675541661s ago: executing program 32 (id=1345): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_INFO={0x28, 0x3, "ebae551382395afa4d23edfcbe6d55b57cb15e63c15c46395916e2b388abc3d6ce231633"}, @NFTA_MATCH_NAME={0xb, 0x1, 'helper\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x20}}, 0xa8}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) 28m38.521767668s ago: executing program 0 (id=2737): connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) openat$pfkey(0xffffffffffffff9c, 0x0, 0x181640, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) setsockopt$inet_int(r0, 0x0, 0x1, 0x0, 0x0) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x2) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) epoll_pwait(0xffffffffffffffff, &(0x7f00000000c0)=[{}], 0x1, 0xef19, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef91", 0x12) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000003540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x34000041) syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), r2) sendmsg$nl_xfrm(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000008c0)=@newpolicy={0x200, 0x13, 0x8, 0x70bd2d, 0x25dfdbfb, {{@in6=@mcast1, @in=@multicast2, 0x4e20, 0x0, 0x4e22, 0xf6, 0xa, 0x80, 0x20, 0x2b}, {0x3, 0x4, 0xa16, 0x8000000000000000, 0x8, 0xbba, 0x0, 0x9}, {0x4, 0x4, 0x1d0, 0x5}, 0xd44, 0x0, 0x0, 0x1}, [@extra_flags={0x8, 0x18, 0x9}, @tmpl={0x144, 0x5, [{{@in6=@remote, 0x4d4, 0x6c}, 0x2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x3503, 0x0, 0x3, 0x9, 0x6, 0x1000, 0x54}, {{@in=@loopback, 0x4d6, 0x33}, 0x2, @in6=@dev={0xfe, 0x80, '\x00', 0x36}, 0x3501, 0x2, 0x0, 0x5, 0x6, 0xa, 0x9a53}, {{@in=@remote, 0x4d5, 0x33}, 0x2, @in=@multicast2, 0x34ff, 0x4, 0x0, 0x1, 0x81f, 0xfffffff8, 0x1}, {{@in6=@mcast1, 0x4d5, 0x6c}, 0x2, @in=@remote, 0x3503, 0x1, 0x3, 0x2, 0x9, 0xd, 0xfcd0}, {{@in=@empty, 0x4d4}, 0xa, @in6=@mcast1, 0x3d02, 0x0, 0x2, 0x2, 0x4, 0x6cb, 0x6}]}]}, 0x200}, 0x1, 0x0, 0x0, 0x20000000}, 0x20) openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_open_procfs(0x0, 0x0) 28m37.513401886s ago: executing program 0 (id=2738): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) execve(0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_usb_connect$hid(0x5, 0x36, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) socket$nl_route(0x10, 0x3, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r5 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$inet6_IPV6_RTHDR(r5, 0x29, 0x39, &(0x7f0000001640)=ANY=[], 0x18) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0xff}, 0x7}, 0x1c) syz_usb_connect$uac1(0x6, 0xed, &(0x7f0000000140)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xdb, 0x3, 0x1, 0xa, 0x10, 0x8, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x0, 0x1}, [@output_terminal={0x9, 0x24, 0x3, 0x1, 0x305, 0x4, 0x1, 0x4}, @selector_unit={0x6, 0x24, 0x5, 0x3, 0x3, "bb"}, @processing_unit={0xb, 0x24, 0x7, 0x1, 0x4, 0xd, "0a969ff6"}, @selector_unit={0x6, 0x24, 0x5, 0x1, 0x6a, "f5"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x80, 0xfe01, 0x3, "90981c60d3fa"}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x4, 0x4, 0x1, 0x96, "", "e1"}, @as_header={0x7, 0x24, 0x1, 0x7f, 0x40, 0x3}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x8, 0x2, 0x40}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x3, 0x3, 0x3, 0xa8, "ef4851", "a11c"}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x8, 0x6, 0x9, {0x7, 0x25, 0x1, 0x80, 0xb, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x4e7d, 0x5, 0x5, "2d20fd81a50e"}, @as_header={0x7, 0x24, 0x1, 0x0, 0xd, 0x5}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x1, 0x0, 0xf0, "511a2cf576cbbd27"}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x3a, 0x10, 0x7, {0x7, 0x25, 0x1, 0x83, 0x9, 0xb}}}}}}}]}}, &(0x7f0000000500)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x200, 0x3a, 0x3, 0x5, 0xff, 0x3}, 0x39, &(0x7f0000000480)={0x5, 0xf, 0x39, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x45, "acdf95f3e19d480aad3371643d4f2cf7"}, @ssp_cap={0x20, 0x10, 0xa, 0xf9, 0x5, 0x9, 0xd094256b0ac81082, 0x8, [0xffc0c0, 0xc000, 0x0, 0x3f28, 0xffc0]}]}, 0x1, [{0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0xc1a}}]}) r6 = socket(0x2, 0x3, 0xff) sendmmsg$inet(r6, &(0x7f0000000640)=[{{&(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10, &(0x7f0000000040)=[{&(0x7f00000006c0)="281e3162e61e5f8e22c14cebe48862dda7b2fddc249bd774480a07f7ea440013", 0x20}], 0x1}}, {{&(0x7f00000000c0)={0x2, 0x4e21, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@ip_retopts={{0x18, 0x0, 0x7, {[@rr={0x7, 0x7, 0x5, [@rand_addr=0x64010101]}]}}}], 0x18}}], 0x2, 0x4800) writev(r5, 0x0, 0x0) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r7, 0x40345410, 0x0) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r8, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue0\x00', 0x200000}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r7, 0x54a2) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r8, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x0, 0xe8030000}}) 28m27.549591129s ago: executing program 0 (id=2762): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$can_j1939(0x1d, 0x2, 0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) syz_io_uring_setup(0x44cd, &(0x7f00000004c0)={0x0, 0x5331, 0x10100, 0x1000006, 0xfffefffe}, &(0x7f0000000100), &(0x7f0000000240)) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000180)=ANY=[], 0x118) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/handlers\x00', 0x0, 0x0) preadv2(r2, 0x0, 0x0, 0x2b, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYRES32=r3], 0xf0}, 0x1, 0x0, 0x0, 0xf337ef5e5ef6a030}, 0x40) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r5, 0x5, &(0x7f00000000c0)={0x1, 0x2, 0x0, 0x80000000}) r6 = socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f00000000c0)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="a01bb6fd2eecb19f3ef070e2898565d087897ad77a0ccec4e68fea79a86b47b6cdd5febe321a4b7fdfd5e61b5c95dcfce7860269ba5162162e90e29a6d0fcc1f768e81f76a7049a287db8939611f8796b362b89696dd6f126a174c7291d01ec173fc12f19fcdfb8db5502d8ecebe27e0990114715ffe05dfabd3a3c21f509a385654a14af030169cc1de9763f0f458d3b2c30a7b84d31cc54c2764ca7fa8c85886d7afb6a9e46b47ff2499c2d8397a83271f645b56176cbadf9b7dac70f3a3fe9f89882bee6dd9cbd92ce5f28e6a5e0c43cb4b1f8aed75d4af3fd97ca7a185326856057d8bf357940f5207f89fa193fea0f03791", @ANYRESOCT=0x0, @ANYBLOB="15c38f3a8ed726bb79eaedc6546fad3f3436d9156309720aa492cce657e919998b8fe8a23e06524560943c856dddaddde16e7863f3d2e782e5a004be9b941a9daf437ab1610d5c3f158bca0aabf8872065093ba9807b2a", @ANYRES8=r5, @ANYRES8=r4], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000240), 0x800, r7}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, &(0x7f0000000840)=""/121, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r7}, 0x38) lremovexattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=@known='system.posix_acl_access\x00') r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r9], 0x24}}, 0x0) sendmsg$FOU_CMD_DEL(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r9, 0x1}, 0x14}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x40ead000) madvise(&(0x7f0000130000/0xd000)=nil, 0xd000, 0x66) 28m19.716965541s ago: executing program 0 (id=2773): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x3e, 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f00000020c0)="c6cfdab7e6f83fe5e44d0200d886a720a29cfb7e50ef99fcf38be6c3b9a9f8c9fdb7b1332c99b85247977ad2d66a577e6f0853366c7561476cb35cf07e6fc1c21d33853a21771a8835a50d941d35a4ccb511cb67ed64259c99811f0e6f176fba1e0fa45fefe030a588f0cf64895fb12a794fd0bd176a38440328d3c6c24c85f50e95c5190eb03fb04f1eb34cae287ed75c8ca8fab2c04dc1fafa14ef93e2a721a12238700dfdabd057e94e697534e1af81921756270313d22a185c146852a5e94300bc8de9904e8c6948d5d2aed05337b9572ee74b77209c6b4710e87fa6661b19283079a46f70a538d96f484b63171bdc3622fcbab6d9bafeaacd755923209c07b8c2f39c04ea713020bcd9e6f1120ea3fbc8dd0b55986c05aa0c0b13ad52f250e9505ba53a887ed7c857e0f56282d6dd5932930efe384bbb198c50aae4b9a65e6a6ccc2904a9121a28df865011c39a54fb0f890cc1f7ef5f5172754f1c2aa8e8acf8c754f22efa88ffea91f2a14133e0a7a8a06bc80d042ce1affa2ebc74b49b48169404b33c62915e54c554d10bc432ec988f7081a8690335d58d0a819d33296db1377af876d84fd557f9a2018ee91f7d39819fc72b0a9bbdd05d6efe6cc459cd42e16f955dcb1a6a2b8b2a71b3a7e1bfa82816abf8c7d3688d53decbc480eaa3821cef557290284d9c504a63768852e15b39841ef3648f14c7edab005230c7bd518f300df6ff307c0740150dddfdab1e408edb96b2e6ed612b0bc2fca570fa1813d86160a766fe6c11cdbc7a67014fa7645b4b1d3aad378bcce27aa4725ecf7675b2682cc5a15673136e7181ed5ef122017dc72df65af147dcb9ac702f8a6a2eb3f6824ba7db3c32fa4bfbf63dcd45e42a49b6edee22856fc2a43aeb6a3eea91dbd53a231b559ca7b38564853be3bdee7f820966faa916ed4fd335159328f8b727ba068b0ade0e11c9f2c2af4d5244f5d49f9c9f94105a6fe4c71112bcacf9c3dd2861d06cb3fa6b2159bc2028e513298b594ca7da60f4ed30edd7b066c23ca7d9b7d9555b47e687b43b7b5ca3210d939e34dd3d176d8b3d3d2f32f28518aa8b5169362fee4a4ede7d3d218db0ecc3de14789344df20188d907093bbf621fe67ab2a1f29221b2ec334dadc15345fc829005f4f81fc13ad0f5590742295812a7f2108cbbbc37387a7d4174592bf4f94f272306942e6c44b23e96d92911ef416b4159e81b19f267aad20c2aabf7fd285330cbf4c1bb8ac86493e0ef84de88eb7953fcf833e6cc5ebdd50b706bcc148971d24e9d3736ed66e28f75e6a1e2c9a4e2abba887b27815d2f5739fe5f8afe7240841337bfe7a69308186180fed5736fe3cbc2892cb991d0f4400d66952459c54a16448f06fd49995aa65501631d5c42e2abd8f0d890a6bbe49b384bfe27599afd536493981be5f7dbb15bfbc198fcd8ebfca182c531537df31c1dca495e40cf030623a8a081e3bec3b8e5109ba05c0830ef00ff98a4419bae14762d8e0a790c1d517f1f602001712a6a0951f024a46efb5c2122460495fa0f4ebaae86286b8a626be2052874f947f18b0c2860ce681a33d5f4217415363fe7a6f8fca125742f03433988d88a5b8e2bf4f3079eb990b6e1ff381b7199717fb885f4f37351bf18bedbeeca351b7bfca5b791b91be0dcf8d169914c449829669e0577d1ebc4fa783d57e0c695cafae201014831a16d8fec47f22d9b79c2acc820f4dba9d1a2986731681ed1f8dd1e83bc2d491302d2f769e6b0bc47040492ffaef4267d15182adc6f5073220590d1ce89a520b6d51d6903dd54360cd7047aed76e0a6cd3c3625e67b7c1636fd627aa48f1ee6dd567730c6ec19d1634f62a77f70c64736532455f0d2ae85003e7bb32f06b480a9f7fba5e6917305fd77e38f6936e49c1a3b2a07e242ccc2f9d629d7992937a035574b3efefd515096e30058cb60cc89d8565205f15e71d805ba5d1c4f7b971918e32bd81611a574fc651bc8094f7f3aef8a3ebf95aef1c062ec66e288b1d1ee17ab75723bc46b031744a25cf055c1bc8b083313e38d0fd5d60e832ef28fbff4c93d2d2ed283575a486167c7158e08fe7094d23984bdf38cf6000db39c5d0f7db72325af909b18247d8fddd89eff8831c294d52194a11dae2339938a79ae903eb63bc6e5535796e1c0416cdad01e1493a3075930a0b3b50ad904ff760bec5c6406b10808bf13251df73b4d6fd149a378ac277ccbbfddd9536abdf5c7a8d29e128a290f0d56c9635540f4c9a3ff1d3e0e2b974b50497ebd690dc9393f8b3acfd1650627db8ab784233727f997dab536f1e993980a41f510fa0128d6bf2c8445ed1578b25a36e05f7170b9fbe8ca63e1b4a7235c27f56790c4dd38168ce26358d12b143e9dbae1d01406778250f1c77c80643016ffd4a7a6703b9c3dfa4e7b51fa1d59605d57c9712159eb34c306a988ac95eeb15c3225ccd022d2ccf5f31a81009d2a25891b83e60efe8f718d6c124202f108d23e5e6c89e269890bda8e5681315db361cdf30e4269f2cb530a188f26621a8b263f22bb385d779b3c4eebd16656451087457892e15074abb1c796f0b7f635b9496f3a17220716c449c11c0e82b67b8f1ee6a2709a20676f40f2751df3d74db503db6cb73c955ae1d6983da44de4d349004f3d9db4ba40124416a67bd18d1d9b3c1e4706ddbb2099a2ae16e99c144860d46ef66bc6844963c0563fe2cb8c4049dea32ce5656fbfec6d1aff7ef48bac92c932c9787d9e4cb0c78fc3d70f730c452c20d077b4d9ea304f1b8a2967b1e7af7f05fd35f84d633bf5095b1af53a506f6f61abc99186eba707843e9db2a18fc1c6c77dd79ab9353eaad6457245709acbe9cb381d4458eb5571fa4f4df069ae668b1df2c97f91271be5fc2040031c3980c7555af2d4186875ea4599c873ffaf47aa08c27a0580ceef6251dce4cfd6eb175a1bf36c1fd750826f4e14966e6f196b68da0a524baf86f49ce8c09430554b50a0b387c02ebd59fae9caa1054cba1304aa6732f3990ce6b7bca6b65237f0fc3c79a102e2989dcf3f884002f2efe83e25a3fb217c24c4f66e0973e7ca62483bb52c943ccfbf31324f2b7938de0555a54f47256c903ab65489906c382d7d1022f7f302b186d18b5775e042ba83b874793420a6d854aaec01e3c819d0b11b51558fb9c10b1e2ff96639fb119d90f80aa302c9a6420b4b1230d79fd1e8105259c4ebf9cc3f1eac67f15bcb9d49ae537084c96994ad08214ac07db663c1bbce6499b5665fb5a949ab3d65062467824a2065a9de2f1edc243e03ad38f0ef227519de50a3dc2e8f4a38538be5557c5de56d0110a0759fe96b0e66d20fcb6066995f77fba9c7468434a53892cf2b3f41d58e08bd2ea3b1da2a1178acf50249d77757353943cd126b511098230698782ca88d018381f233f4331d3980f72f30caf915a18794de1253734b89303f25826a80ddd75a9bdf14c6f01690833190872ca5431ab92ab3dca92595983b11de0076125059234720906641119dab9c96be9c10d60fb54267bda61fcb85a491df037cd563b229eea02cd192796d36803b04691d385471a5f68bb76afafe9df28f50dcabfefc8e2eb334bcace928b8eb8f6449116fb5a0fa4a0c51e21b8b1f99308d396db60418cb5385bdf6bce7227e514f6cbc9a9fc50b79e8b0530fd51b21679ea1c404dba52811b3c9487f670e622ac7b1ce8028eadbd882d4325663d8dc4f0960c047c5f3099c90c6256bc11e8eef6b325e0f1ed00279a695f2828762f28ecacdc726aedf42064727ec100ffa74d38d47f383946b9f856e53cb939a619f205e030a302628ffb9b2cfcc2e881e239f33844a118a4de2a5c3d6b857c5105db775a61c5d54d1d82048670e8cd2c44a032904005125eb9f999e845efba3a063e3e26b06298f28799975b51118eece2b7fec02d4b888bfb90919bec287aba71296c66dcf749efa3abcddfccee6ef80d03a1638045f18fb96131cbd9a93e657c29eb74de40f433969e1988ac335bdd9c671b5b75ce6e2440be247775f9d597b4d8523c283e774ed0987e10b88e0c5616720502149db329babc91b225359927f88e0b42f02d41a4c9e0ad7c55a0d2c52cf45da6152c0c742f661b562c3a8ecff1145cac3f63fc053e1a14fe7a57742ab709581604fabe54ff13172b5049434d12f6ed9623265af643f725efea21e2ac1b82365033b9cff4158318f40c8894d2bcffdc954fcf7068c97ca2d2b1bf19b9232b918864e3f63fd59f4c8c578821ec5083e46363d9158451c5a92b425e68081b2c7572df44658a4aae41a439c6bb4bdd2f26ff2a357fa2946e5be5cd97ba25f73bbcc6c05fa966d0aa0cf2e45f22e0021468b37d5afebbfba3233e2cd4fd64e1578be72c38891224cd6c70c4cfd146df6a8142f1493772d48650f808000000ff704e02ec121e9f43de623eff8070f88a623cd395a0f4e4655166c1c77f443dc8bdac2cfaa126d4ac9d7788dc972c88fd87d3c8758853f1882532e4ff298b466e7d198daa9015127f2937544b34aaf545f39ee00d74e0e1017a30ff2edff701d53f3a13fc61b31fe7d9032a6c4a517c7527e48c0c44a2beebc9a9f9e6f989bc6c255e05bec5ff99547658143d9eb43a1d96aa5288638b4477aa1f84c59d41194335c09d9d5d660640acb84b53520482fb200ca616e1a6f486e6da3e6721479e85d0676ba142d95ecdf1acc76a49e9bf016f951d8b95adc7e8d4317ddbb28b678135a4a9b98fb8b8b5948b682ee70e04a31f7e3c49c52a11acbb29bd8152bbb4fedd2aae8e7ad5330365213d207677855e6cd72bf93502c14b11bd2f2d6e797efc2cc5bc198730e5cc51c92751ece5c167b3328a6deed4bd73c62623bb3874c9ef18e24997e3ac93b0ad9ca7ddd4c0401ec1b942cb21dfe6abfd3aefe2588ac1684bf6b37dc09d9b9d932d5534c707ef8fe0812a403e057d00955559ca3e0f7e70d3cdfab918b8d125061fd53374c97bd0c9d19e68bacb3db46974d36cb1c96b4475acaf4d46b88a5760d2cac9432f2ce030cce4c3f853a9fd669ca36c36ff1f0432713f60e6d6bc789fdae7c7fcf4049e6166b63a12aaa3da6fc35d8783020ceb92f7f90082d4826735618905fc9fdbeb65990882ce130a7e5ebfcdc796ef293019925e80af5074bfed5f62833d9d98e324dd54e30e1d69a15e4beed5da9c6ec01a32978aa29cd26c5703a28e504e7c9264e0421718422b88ef90f6fb4e51c619f29b5fc2f600f88be036eaf28d7f5433715bd493ce55811901a59964f20ac0b06dc3a555eac123c40d3be91f53501523a51e8b53a92bbd99ec3bdcd57904cfac3c0d7bcc6613b11a771d32f0f6c60c05449b42820c0a41f757ea1efebebb37f8ea567b2f7dcc4a67ebbdc00716a70f5fe255b9232e27ba05888e034fc50ac0934a43c84577183b83019008edbeb27546e8be7d8402a4c1852198c0e050296129fd66247c39abff19338300fc3cbe20a395e5805d8bc64c2d87ba27264716e211ab023765e8d454b637aa1320cb18eb4a3dbfa94027a4d75a9a2cc784cbdc22694a8f7e97bd6cea5a4e26b538be9a9dde5637be2d386a85a79ed4df541ab7d0b1370d99d2cfd1f7bf1458bedd0a53f5e6972ee424ed08acb4b49db83cae427d315d1fea4e680258e73b3fc50fdb77692c8798bcda57ac0c34823d69a8ead14c41e9613813838ef80f63138cc9ba3a6b83dfc77b6aa1248678409bd96b64c0b625e88e33262fa0bbee94fec8f3bffedaf8b12d229d0f637848a1dba01892d80f5a5596d37ac1c9c54d32dec3ca56b49aa1157583074af418d0d95a5a46fc3c234814e377963dd4c9c8a5f7cc35aacc892afb9bcede477760688e06f0b2c5a702954f4532c715151eda02f78830129b2612de8fc62fb992d1ba52da164920eb1d1dbc7d1f8f16e31c763581f4c478cf7a84cf01ca904160475a1eabae393bcb852fd550374002bad1ba0827dadcf3f6a2354a3f8f67e6da4f567fe21f55cc34840e79f6af947561c79a141721f6da4625a20fb203f96bd1a3b7322a14a0ab4a38835e1f235f772a18643824cbb9f76664b1212c785055ae17e89f590fdb1b81535e1e3e8a726a9aaf67ae2a8e67eab8f32781bc21027cb1babd932d63bafe7faf48bc57820c5e32288583db4cf369a7fbb479e1e97ca67f63b1880fb33ccf2661d7af9041ea1afc0e90ee0b4b510d094268e4576584a17fcb21b3c3f68bf1e1c4748177cb4cab92df4c254e0d0759d507e5eb096861efcf1aa66805474e3bd32f7055a7d53d47f416d24a5ac7d5fc953206db3a012234d8693e0ff662457ddaf977eaf37d043c407a7ade1fa8eaf85b6e1b1456aec3064ee858742f4e22f2d6084e3881a4783b3a9086009202eb6eb77fc1ce2236d6384cbc62c7db9cecd2fdb06f328d49c066562cf1dee863d33b48288fbb1d4d5bcafcd1b6391879e670c7189bbebafe48214d6e2b405e36192e1067eb8d0363777a174e630467673ca968ea51476b0b8a04d598f6fc593d3f3267ab37e17831dab86a67aac3ec8336c5b6e9e416b1f46d0a9e8ec6c515d86e773baa409e2afae30ea1744f2bc777af11c42f2bf6177e95245c6d601f7cb7b589ccda76a2a314dab023da8128c667a0df682f5c7bbf842a2bb51d4d842cd09d02d67444e5d8ae1f3260c4ef2da5a1c4121fdd47e953d03ff6fea10e35db2c0c110704f513b9d1c57c9da80881ced16d92faf1be60471dc4d82529ea50fd6060be18e8e6deffb15e0a0df4e36117dc22d78bd43b3fedb24cba54c2f2e3bba015bc4c817f70fc1e8b21adb04a9d8c229e9ec178fee0f35d4f169bb7dadd14f40000000062da4e21e42270a4ed0d60b4034db31ee1e13c97d8d941b2627b255d4283cf0af9044a65765ba88dcb2010fae98a6aeb0a5605d8a904d1cfa0cf8fa67a9d29670a108f014a1b21862e20d4f0f3f0cb99c97f289c657dbd08237aba2f616804ebb0e71819fa46df1a018d8336b534391596cd24b0720dd8a95e5c74b9d047da1da93d653b2aa98e67a65c3868a0c464ad24d427c3c81b41f0b2fb78f6aecd5487c29f4fd871bec21f54d22b661eeed67c866cdf057d585beace568ed52a4399dfdcc8c9a80c94f3cb92f0974b9b33ed893e8db33cf95220e03f3d28edd8b80991b0754010e7252392d1e846011defb6c46c73ee015bcb9b288f6945771af90ddd8c548eb6649efff32b0a2b36e743e46135e47fc65d1eb3f7a580104c22bbcc75ec041813cf2496a4793d17112f40333e3c874e0bcbcd889a6bb484e43632b2f9a628a461a2a5d58808b848751642b5c426c50fd82398894dc78c56ed1f0358b626cde2a0167dcb210c8ae2f6d9c95356331cf2a21ed0dfd5165bcac2681ce070f60fff5a32d246c838552cbb35a6dfdb6ea54c4ecf0ad16990901b7a72280872fc807eda1de4fdce2c223f0400e0f9eac84c1e2980b9b5a032dd1294bd2eb49372f55b9b4cf4d3c1b14050bec1344d71a8316e173bd36f5917100de4dfedfff896517a04468006e5c632c8ad15521324f3abd72545b47df874a4a95d3bb30915ebcc3ed371528f89c7e943286a8cf4ff2cca3f3496ded16b139658bd5d3323ae9007b4dab665cd24e7888735de2cce7bc1b3af39a6d92d787dd237f8d72283f7aab1d99985f3783e5cb0661cadb552293f189f75e7f3fa933c775a27415a3ad22239986364ba7a582f2d9c31e7247aa8d44d5a7e8169fec65daaf62756b34dd307ebc7fbe8a8023aac1553fbf15b48a8ee3bd0c35c7ced684f667500ab2997aa75382475eb35888e72b30ad5aad3910c5ead6797f4182adce92dafc2073f1529ff5f1a42daf3c78e499039864e8e768fb11b33c0d7779e6128579d882761f9b21fcc0696da03eeb049c90b86da8dba548058f0caddb83ec9051a04f3133341e9a17a17b72ac20cd9e242fb383365f6a2f5c795087c7ee682555adadb7305bfe2886a57f3718f30f24b52d481aa35eb2c40417df5ea9d8af1b7b871ce37fb1c84402d269e3a01a5c9a00d3c7d6ff21c90d437066850ea92773288ba925294f9368b74fd1f3c4512ae8be2f86b73641507480f3db07634df10fca86bb4431664ade710d5a8894c368660c95f7a0b8ce5ffcdae136b5c8b4ed8c3b4cd9b71079dfd6d1501df9b7f1477b516f3cceecb2def619c05061502b253af7e3deccc839de56292c95a3912e809b100897a85705cf59af66e194143d13c12b6dc1a31cd15a74fe57666931e3fd6b75512d22f063c68576b1bd6a1ab6d7f4065447daee300b7d4fe330daeda866beb44eb8ed4041d0a36bfa49871e0623eb6f5d7b967e8f969985063e2fc4f4097c2a5189b10c1776713f78193c6e0e847025936b36eaa2e817ebb45c375f18350247f6586214a200f2f17536b52b8fa196d4a6a77317807075d130a77badf745a6076b1241e47942501cba893fd0db02545e49f559e9712a60ffce9f3154459c69984de49e11192266196497c81b7c5b45997c1369c8e8490b1a748985fd4c9ab8929d17a51c331dc160c8ae8d2961351ef103e0400299e4f28faff6ac1905be2814cb02511472c7232bd104ac438d846b4a727df2ed24364e061f157c2447e7d5265b1cd75797603e220a9d2e280868f3c2c56befbc6b1b1a07be1070b293adf324b3aee5140ef5f643c952726d9b770989b07f2cdea2e1d6951027e8b386faccff07b2547dd78aa85cc113b599ab168ef602e40fc097396341a8e5b97b59032110ddf114129feaed96e85237bb4bb886b287279b96234c18947ce7d2d5e92dd5c68829edd271bfccff21b87f6a061c9b43b51252add291c8f59be1a222d00fb7719664a8b89c452e78cf1d491a036107f0a521545fd96d2548735847e278065c196153028b91f59c7b70f9883f14cfb3343bb230f4af9bd51132cc62ee5459e34e77bb2983d30e65e65ab769fa0a0578bed01f33c76f4138208659a97fbbf380f1321336c14d21012f3cc4ee2101d42321f0123d51377e319e4ff4551f7f83ca62ff9448a28b6134da582f609be7dea5d70370772ef2552f12e97cf390ee2697022168d622ae0c813d86a43c25c758162ab0aadf25c84c790fb32a459997068be01325e473871cb024ff030070434d197558b8df442e1d2ad0c7b33fe021fa6cd57b7477dd76c6a802ddf405e909d48d23321e986d791b44d32d417d63638246fcdd661e6a1453d1411ec85fa0b750354aecdd4f4b90a420d2d4f67c514f15a8fe590735f660dc5eaa7f2873c7841edaf2c0d46a92fc07c6cd22fc978f74bac72e468d96ba370fb88f9a629d4de0a8a83d43c1949aae33fe24859c1bbf8663adc6936e305cf9c56aacc84e7515caf18d0d049bec2f0a484b75a8c2c23abbca66b039a52e606f08df0a3cdd2dc6449e84ce463206d2878de0e4d0f438764a0fe360e95494e9e61581001785b081254971197024460a68ec029052f2d8841dac7e714798027696067e739cd1525df28ac9514c02e25f8ea1146e356fc5941e4661cd244dccee4a1450e4334a20cb572b842d44a8431abf4d5bb82ac6b78ce3c6d394e5969c6fe8216805f6e2db2889f27849e0dd26a5a387958a36c833a8b3d861033c00ffef267e4b09350ca1b819d5c83025e4ad69328970db92528e6ce569d5632ceeb6dc42c8f6f8759256ad9c1ffe8c34a92b795bf00544714c957d5d982a4e91ec7a30dfdcacbd41ceb61f208e5442f7f7ce19ba2f0dddf50020ed1c271afe5007277e2496c3bc7f3101d6fa7f0ea2627a99de0c441a11c6afbb721037dcfc897fc5d9e0ed644b9c3aee328bc2beb3801d2bf43b1e360759c1056c74a63aa33cb6e5933b7a0b4f654113ea5830de7e8374e939e4c794be77f1f0c1e1bcedc8f584a56db0c38b6c8da60bad62b41d754d9b6cbf3379374a6126db0ef1ee2da5862acaf117408ad26c66ec8ee4f9f1844fb4cc64bc61212b303c7c622f05d29b7fd540bdc253bc948d373886e5cd4dc9bc1b551dfc514f12cc64ecc3b276ab43a4adc2142fea9c5ecf983b0841729d1771b51c2ff787ac2439f305ca3fe31cdbe24f034fcd3d41141cc0ed5cdd82e3171be1381ad4f0bf81b3be200524c98cad5a3dee3ee618c97d0bc2baaa2385fb63e6b906b08681c19d55200924c0edb4c3b48463fd9c2ac86510ce1e0a641def11e9e7b7fa74a629895221b06a15c995cafe55dee6c06e01b34f4f18e5ffeb76ffb412277bdfa4cee10823a1e55832c3d1d19ba5b84560668b33fafc672cfba1a85c60c61c45bd562506d9d28542c4b4795ed011a8005862f7add9dc2533dd29d0ddd534eb0a3b537b391c423b527b3ae4ce0c829a6efcf8671e9e5224df6ed6c1f20452cb46cd578a620788f9af325d45825ced3043ef3693ffebf7b881518ba2c71587251edf150772ae1e24f4415f9d9307151b8fbcb83d0da908f4b6c762b777dc406991353e962f181bc06e892ff9e000000009dafd09b291f79720b866e46bcf14d5bd1ed15a468a8996ecec8ce3d9890fb45c96804dddfe5b7280c0e30934f129e14b344506f70d484eea40baac63b89dc71b030a6c8149ffca24357773bffe76bbf2e778f0034666970a96bf336ee5240e765ea3715382bd8fe19c5ce5a8814717d87d4d6304a3b0d6581a6fed44975ef8a8186c19a513f5c6c0610acbd31fd58e2cb683162464cf7f5c101a0ff96cbffd547c2beab15ca343cfe592ea435f980ff03e0aeadcc80d64383d287997a6a937fc22221cec2a1aa6e8dfc1dc6e0f2e02060a18c09957376a72e165728acddf73873a958f43bcd2e9c6c71a83f744bf14c75f5e8308523a7d39bcbfd832c6597b2928b07630ae50540bb71b44b5b4040a1d172fabe8dbfb96a99e7498b12dcc8ed9e43fb36c202d019b4fbe11f715f5de76bede175c22d8355323eb004c5021d892fbe48fa7b6bf382eb03d0e447a38c63bb7fa1154c2cdf08a1cf5fa95ec75a5aa9037ebf8916cb78e6da650016a0c7ed34290e25e2122be24e4373c49c4fc81c39ec1a1ce4b658e1b80562bf911a1f6a5fc2e69d2554d4abf5ad79d9c9b7d9ac8c4122c11f590a35dcf3e7cf975027832b4e2a71ebc591a60bb874b36b415b455bd942fe1a69a92b70ce1a1c867c85138449529cab5f63feab609a2ba3344191c416d8409b59962bcee1c4a40874069e28432fcade20f07c9259dec75fb978a6b84b6e8f50fdb341c7c19f55a8fa389cf085f44661c9618d56d32be0bdb3b2928fc2c372e86ea109afaee022bb832e80e869c7cb1053921b862b27599d3665f7fabfd6436743ea893ec43e4e4daa598127df8ee3249be4668d717117a038f0e734a894457df4c64dd76a9d9d42efc29f2311085c9e6fcef385f40af94f283edca078797e96b79719875aed3900252c3acc6a92e23083b3fa24057d9ebf7886df99d652e7068cbd445560a0afc81bf7c011777837f94b32094fa1bc99472cc2a40bff245abb27d3f628b1b649fd00", 0x2000, &(0x7f0000000b40)={&(0x7f00000002c0)={0x50, 0x0, 0x4, {0x7, 0x2b, 0x0, 0x2c3024c, 0x9, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f000000c0c0)="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", 0x2000, &(0x7f0000001e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e80)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000060c0)="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", 0x2000, &(0x7f0000000d00)={&(0x7f0000000480)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x6, 0x18080000, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) dup(r0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x2940, 0x2, 0x9}, 0x18) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) syz_io_uring_setup(0x10c, &(0x7f00000000c0)={0x0, 0x3eac, 0x400, 0x2, 0x105}, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') socket$inet_sctp(0x2, 0x5, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_udp(0xa, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x583, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00'}, 0x48) openat$sysfs(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/kernel/kexec_crash_size', 0x800, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$rds(0x15, 0x5, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x9, &(0x7f0000000100)=0xe2, 0x4) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000086d0493c2000000000001090224000100003000090400000503000000092100000801220b0009058103"], 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f0000000480)={0x24, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="00220c000000a98aab"], 0x0}, 0x0) 28m13.446238567s ago: executing program 0 (id=2795): sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f00000065c0)={0x0, 0x0, &(0x7f0000006580)={&(0x7f0000000040)={0x9c0, 0x14, 0x211, 0x0, 0x25dfdbfe, {0x18}, [@INET_DIAG_REQ_BYTECODE={0xce, 0x1, "48d0a2d9a812dd14cc03e8f35abe95bd027a9fbb53f4a91d8bb27791e2a633ae9783fbe471014a4a79d61113c9be4a788ebaf215c453c0789676fdbe9a1abc3ec33163622af03ff1072fe6c686c3363c2330a527155fb57494c7ada9b27af4dd69994e5b653ba01f653779d99966217626f5c70e1123636ede0f49d5abd51b9360b5d7e73216e522fe8126b3a59bdb14c1037b35a3a0aaefd34a5d2f30c8c901c186a55d80454dc1d15bf5ee559c88509c6a34b76d934ae74e78c26d7a9b5058c8a6bddf5a48d2e5946f"}, @INET_DIAG_REQ_BYTECODE={0x8da, 0x1, "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"}]}, 0x9c0}, 0x1, 0x0, 0x0, 0x4048804}, 0x800) r0 = socket$inet_smc(0x2b, 0x1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000009c0)=@security={'security\x00', 0xe, 0x4, 0x2b8, 0xffffffff, 0x94, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x264, 0x264, 0x264, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @private=0xa010102, 0xff000000, 0xff000000, 'pimreg\x00', 'vxcan1\x00', {}, {0xff}, 0x88, 0x3, 0x10}, 0x0, 0x70, 0x94}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x18, 0x6, 0xe759}}}, {{@ip={@loopback, @multicast2, 0xffffffff, 0xff000000, 'netpci0\x00', 'veth1_to_bridge\x00', {}, {}, 0xff, 0x2, 0xd}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x4, 0x4, 0x2}}}, {{@uncond, 0x0, 0x9c, 0xf8, 0x0, {}, [@common=@inet=@l2tp={{0x2c}, {0x0, 0x4, 0x3, 0x1, 0x3}}]}, @common=@CLUSTERIP={0x5c, 'CLUSTERIP\x00', 0x0, {0x1, @broadcast, 0x3, 0x5, [0x39, 0xd, 0x3f, 0x16, 0x2e, 0x29, 0x22, 0x24, 0x19, 0x11, 0x13, 0x10, 0xe, 0x33, 0x10, 0xb], 0x1, 0x4, 0xb}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x314) 28m12.434082191s ago: executing program 0 (id=2801): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000000080)={@loopback={0xfec0ffff00000000}, @private1, @local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x280}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$unix(0x1, 0x2, 0x0) socket$inet(0x2, 0x3, 0x1) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r4 = socket(0x10, 0x2, 0x0) write(r4, &(0x7f0000000040)="1c0000001a009b8a140000003b9b", 0xe) recvmmsg(r4, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) socket(0x2, 0x80805, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) pipe2$watch_queue(0x0, 0x80) preadv2(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x100000000000000d, 0x0, 0x0, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffc, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}) socket$inet6_tcp(0xa, 0x1, 0x0) 27m57.833497778s ago: executing program 2 (id=2834): mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) bind$l2tp6(r0, &(0x7f0000000100)={0xa, 0x0, 0x10001, @mcast1, 0x80000001, 0x4}, 0x20) (fail_nth: 2) 27m57.024331517s ago: executing program 33 (id=2801): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000000080)={@loopback={0xfec0ffff00000000}, @private1, @local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x280}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$unix(0x1, 0x2, 0x0) socket$inet(0x2, 0x3, 0x1) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r4 = socket(0x10, 0x2, 0x0) write(r4, &(0x7f0000000040)="1c0000001a009b8a140000003b9b", 0xe) recvmmsg(r4, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) socket(0x2, 0x80805, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) pipe2$watch_queue(0x0, 0x80) preadv2(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x100000000000000d, 0x0, 0x0, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffc, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}) socket$inet6_tcp(0xa, 0x1, 0x0) 27m56.777947186s ago: executing program 2 (id=2838): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x8e, 0x88, 0x5, 0x20, 0x8086, 0x9500, 0xb6d8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1, 0x0, 0x0, 0x15, 0xcc, 0x1c}}]}}]}}, 0x0) syz_clone(0x4808280, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x1, 0x0, 0x81, 0xffffffff}) setpriority(0x1, 0x0, 0x44) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000a40)={&(0x7f00000000c0)=[{0x1e, 0x16800, 0x0, 0x0}, {0x6, 0x4001, 0x0, 0x0}], 0x2}) 27m51.305624172s ago: executing program 2 (id=2848): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) write(r0, &(0x7f0000000000)="fa", 0xfffffdef) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) (async) r1 = socket$l2tp(0x2, 0x2, 0x73) (async, rerun: 32) socket(0x10, 0x803, 0x0) (rerun: 32) bind$inet(r1, 0x0, 0x0) (async) r2 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280), 0x0) (async, rerun: 64) recvmsg(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000000, 0x1010, r2, 0xc2dcc000) (async) unshare(0x6a040000) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x200000b, 0x59033, 0xffffffffffffffff, 0x0) (async) r3 = socket(0x10, 0x803, 0x0) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xf}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000ec0)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x5}, {0x0, 0x9}, {0x7, 0xe}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PROTO={0x6, 0x4, 0x86dd}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x4, 0x4, 0x6, 0x2, 0x6}, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x6}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x4) (async) openat$sysfs(0xffffff9c, &(0x7f0000000180)='/sys/power/wakeup_count', 0x18201, 0x1) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, 0x0, 0x0) (async) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) (async) socket$inet6(0xa, 0x2, 0x0) (async) bind$inet6(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000880) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0186405, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) 27m51.058117993s ago: executing program 2 (id=2849): r0 = socket$alg(0x26, 0x5, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000040)={0x1100, r0}, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-256\x00'}, 0x58) r2 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r2, 0x0, 0x0, 0x40800) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x14, r3, 0x1a, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x24048080}, 0x800) 27m49.625711201s ago: executing program 2 (id=2857): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f00000000c0)='wg0\x00', 0x4) connect$inet(r0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000003c0)={'syztnl1\x00', &(0x7f0000000300)={'ip6_vti0\x00', 0x0, 0x2f, 0x4, 0x47, 0x2, 0x21, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8, 0x10, 0xe, 0xffff}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000500)={'syztnl0\x00', &(0x7f0000000400)={'syztnl2\x00', r1, 0x40, 0x1, 0x7, 0x200, {{0x2b, 0x4, 0x1, 0x1b, 0xac, 0x65, 0x0, 0x81, 0x0, 0x0, @empty, @multicast1, {[@end, @noop, @noop, @lsrr={0x83, 0x17, 0x4a, [@private=0xa010102, @empty, @private=0xa010100, @private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp={0x44, 0x28, 0x59, 0x0, 0x9, [0x10001, 0x6, 0x3, 0xfffffff8, 0x4e7, 0x7ff, 0x8, 0xaf, 0xfff]}, @lsrr={0x83, 0x7, 0xfd, [@empty]}, @timestamp_addr={0x44, 0x3c, 0xc3, 0x1, 0x8, [{@loopback, 0x6}, {@local, 0x2}, {@multicast2, 0x7}, {@broadcast, 0x401}, {@broadcast, 0x5}, {@private=0xa010102, 0x2}, {@multicast1, 0x7}]}, @generic={0x0, 0xf, "2162f790f33ee7223490c65f31"}, @end]}}}}}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2002000000000000000000d9fff502000800409d8f47c6d5c7caff3d5f609c000000008290"], 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x8800) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x20000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000180), &(0x7f0000000000)=0x4) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x20400, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) bpf$BPF_BTF_LOAD(0x25, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x28) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x68, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x5d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x29}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x53}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x49}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x31}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r5, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000380)="17d014", 0x3, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r5, 0xc01464ba, &(0x7f00000000c0)={0x183, 0x0, r6}) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_SET_CPUID2(r7, 0x4008ae90, &(0x7f0000000240)=ANY=[@ANYBLOB="010000000000000001000000000000000000000000000000001b0300ff"]) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000280)=ANY=[@ANYRES8=r4]) 27m44.436963107s ago: executing program 2 (id=2881): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) execve(0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_usb_connect$hid(0x5, 0x36, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$inet(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000340)="31ad81df3fb2ddf597267390417d0a0be391dae8d945c26057d449295d390d081b", 0x33fe0}], 0x1}, 0x14) socket$nl_route(0x10, 0x3, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r5 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$inet6_IPV6_RTHDR(r5, 0x29, 0x39, &(0x7f0000001640)=ANY=[], 0x18) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0xff}, 0x7}, 0x1c) syz_usb_connect$uac1(0x6, 0xed, &(0x7f0000000140)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xdb, 0x3, 0x1, 0xa, 0x10, 0x8, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x0, 0x1}, [@output_terminal={0x9, 0x24, 0x3, 0x1, 0x305, 0x4, 0x1, 0x4}, @selector_unit={0x6, 0x24, 0x5, 0x3, 0x3, "bb"}, @processing_unit={0xb, 0x24, 0x7, 0x1, 0x4, 0xd, "0a969ff6"}, @selector_unit={0x6, 0x24, 0x5, 0x1, 0x6a, "f5"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x80, 0xfe01, 0x3, "90981c60d3fa"}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x4, 0x4, 0x1, 0x96, "", "e1"}, @as_header={0x7, 0x24, 0x1, 0x7f, 0x40, 0x3}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x8, 0x2, 0x40}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x3, 0x3, 0x3, 0xa8, "ef4851", "a11c"}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x8, 0x6, 0x9, {0x7, 0x25, 0x1, 0x80, 0xb, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x4e7d, 0x5, 0x5, "2d20fd81a50e"}, @as_header={0x7, 0x24, 0x1, 0x0, 0xd, 0x5}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x1, 0x0, 0xf0, "511a2cf576cbbd27"}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x3a, 0x10, 0x7, {0x7, 0x25, 0x1, 0x83, 0x9, 0xb}}}}}}}]}}, &(0x7f0000000500)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x200, 0x3a, 0x3, 0x5, 0xff, 0x3}, 0x39, &(0x7f0000000480)={0x5, 0xf, 0x39, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x45, "acdf95f3e19d480aad3371643d4f2cf7"}, @ssp_cap={0x20, 0x10, 0xa, 0xf9, 0x5, 0x9, 0xd094256b0ac81082, 0x8, [0xffc0c0, 0xc000, 0x0, 0x3f28, 0xffc0]}]}, 0x1, [{0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0xc1a}}]}) r6 = socket(0x2, 0x3, 0xff) sendmmsg$inet(r6, &(0x7f0000000640)=[{{&(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10, &(0x7f0000000040)=[{&(0x7f00000006c0)="281e3162e61e5f8e22c14cebe48862dda7b2fddc249bd774480a07f7ea440013", 0x20}], 0x1}}, {{&(0x7f00000000c0)={0x2, 0x4e21, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@ip_retopts={{0x18, 0x0, 0x7, {[@rr={0x7, 0x7, 0x5, [@rand_addr=0x64010101]}]}}}], 0x18}}], 0x2, 0x4800) writev(r5, 0x0, 0x0) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r7, 0x40345410, 0x0) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r8, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue0\x00', 0x200000}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r7, 0x54a2) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r8, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x0, 0xe8030000}}) 27m29.261154575s ago: executing program 34 (id=2881): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) execve(0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_usb_connect$hid(0x5, 0x36, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$inet(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000340)="31ad81df3fb2ddf597267390417d0a0be391dae8d945c26057d449295d390d081b", 0x33fe0}], 0x1}, 0x14) socket$nl_route(0x10, 0x3, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r5 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$inet6_IPV6_RTHDR(r5, 0x29, 0x39, &(0x7f0000001640)=ANY=[], 0x18) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0xff}, 0x7}, 0x1c) syz_usb_connect$uac1(0x6, 0xed, &(0x7f0000000140)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xdb, 0x3, 0x1, 0xa, 0x10, 0x8, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x0, 0x1}, [@output_terminal={0x9, 0x24, 0x3, 0x1, 0x305, 0x4, 0x1, 0x4}, @selector_unit={0x6, 0x24, 0x5, 0x3, 0x3, "bb"}, @processing_unit={0xb, 0x24, 0x7, 0x1, 0x4, 0xd, "0a969ff6"}, @selector_unit={0x6, 0x24, 0x5, 0x1, 0x6a, "f5"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x80, 0xfe01, 0x3, "90981c60d3fa"}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x4, 0x4, 0x1, 0x96, "", "e1"}, @as_header={0x7, 0x24, 0x1, 0x7f, 0x40, 0x3}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x8, 0x2, 0x40}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x3, 0x3, 0x3, 0xa8, "ef4851", "a11c"}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x8, 0x6, 0x9, {0x7, 0x25, 0x1, 0x80, 0xb, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x4e7d, 0x5, 0x5, "2d20fd81a50e"}, @as_header={0x7, 0x24, 0x1, 0x0, 0xd, 0x5}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x1, 0x0, 0xf0, "511a2cf576cbbd27"}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x3a, 0x10, 0x7, {0x7, 0x25, 0x1, 0x83, 0x9, 0xb}}}}}}}]}}, &(0x7f0000000500)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x200, 0x3a, 0x3, 0x5, 0xff, 0x3}, 0x39, &(0x7f0000000480)={0x5, 0xf, 0x39, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x45, "acdf95f3e19d480aad3371643d4f2cf7"}, @ssp_cap={0x20, 0x10, 0xa, 0xf9, 0x5, 0x9, 0xd094256b0ac81082, 0x8, [0xffc0c0, 0xc000, 0x0, 0x3f28, 0xffc0]}]}, 0x1, [{0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0xc1a}}]}) r6 = socket(0x2, 0x3, 0xff) sendmmsg$inet(r6, &(0x7f0000000640)=[{{&(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10, &(0x7f0000000040)=[{&(0x7f00000006c0)="281e3162e61e5f8e22c14cebe48862dda7b2fddc249bd774480a07f7ea440013", 0x20}], 0x1}}, {{&(0x7f00000000c0)={0x2, 0x4e21, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@ip_retopts={{0x18, 0x0, 0x7, {[@rr={0x7, 0x7, 0x5, [@rand_addr=0x64010101]}]}}}], 0x18}}], 0x2, 0x4800) writev(r5, 0x0, 0x0) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r7, 0x40345410, 0x0) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r8, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue0\x00', 0x200000}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r7, 0x54a2) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r8, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x0, 0xe8030000}}) 13m25.79319278s ago: executing program 7 (id=5501): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1a1}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)=@ipv6_newrule={0x4c, 0x20, 0x1, 0x70bd2b, 0x25dfdbfb, {0xa, 0x80, 0x20, 0x8, 0x5, 0x0, 0x0, 0x1, 0xe}, [@FRA_SRC={0x14, 0x2, @loopback}, @FRA_DST={0x14, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}}, @FIB_RULE_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e20, 0x4e21}}]}, 0x4c}}, 0x20000000) process_madvise(r1, &(0x7f00000015c0)=[{0x0}, {&(0x7f0000001000)='o', 0x1}, {&(0x7f0000001280)="04", 0x1}], 0x3, 0xc, 0x0) r3 = openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/key-users\x00', 0x0, 0x0) getpeername$qrtr(r3, &(0x7f0000000040), &(0x7f0000000100)=0xc) ptrace$setopts(0x4206, r0, 0x100, 0x2) ioprio_get$pid(0x1, r0) 13m25.615304078s ago: executing program 7 (id=5504): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000440)={0x0, 0x38, &(0x7f0000000340)=[@in6={0xa, 0x4e22, 0x2, @mcast2, 0x9}, @in6={0xa, 0x4e23, 0x7ff, @mcast2, 0x7}]}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000080)={0x3, 0x0, [{0x80000019, 0xf0e, 0xffff, 0x5, 0x2}, {0xb, 0x9, 0x6, 0x7, 0x81}, {0xb8c7555903250bc2, 0x8, 0x8001, 0x3, 0x1}]}) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000380), 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010000100ab5a0000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4024}, 0x4000010) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x20044040) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e24}, 0x6e) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') syz_clone(0x25000000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0700000004000000000100000400000020000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000555ac01bfef1045fdbf3a21568f426a26525f9"], 0x50) syz_emit_ethernet(0x17b, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd6000000000000000000005000000000000000000000000bbff02000000000000000100004e227d3e0f150721"], 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000740)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x3}, @NFT_OBJECT_QUOTA=@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}}, @NFT_MSG_NEWRULE={0x26c, 0x6, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0xbc, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_NAT_REG_ADDR_MAX={0x8, 0x4, 0x1, 0x0, 0x11}, @NFTA_NAT_FLAGS={0x8, 0x7, 0x1, 0x0, 0x40}, @NFTA_NAT_REG_ADDR_MAX={0x8, 0x4, 0x1, 0x0, 0x18}, @NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_NAT_REG_ADDR_MAX={0x8, 0x4, 0x1, 0x0, 0xa}]}}}, {0x14, 0x1, 0x0, 0x1, @synproxy={{0xd}, @void}}, {0x10, 0x1, 0x0, 0x1, @tproxy={{0xb}, @void}}, {0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_TYPE={0x8}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_LIMIT_FLAGS={0x8}]}}}, {0x30, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x16}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x24}]}}}]}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT={0x34, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT_FLAGS={0x8}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x73}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x84}, @NFTA_RULE_COMPAT_FLAGS={0x8}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x5}]}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_RULE_USERDATA={0xa1, 0x7, 0x1, 0x0, "31498f25fa2568bcf5069a94011878bbc46ae801da50af08bd3e332e3f7ad58a68ca1ed7ef3012906898439c920a8e80e63d607f80bd0deb091c2bb1ced3521405de54c09221b1ebb93e66943620b8ed28fadf2efbf6cc6eb3c9c9f805b8d7214b3ad9ad97c88a1e888e3fdf988756c5d1da491df9b47018bcd2344553d8c491871590003fd79a82ce6c61b92b851c98bcdfd1aaab7e5ca9432a5f44ac"}, @NFTA_RULE_USERDATA={0x47, 0x7, 0x1, 0x0, "f22a9ec6e426005e888c4d5740533a0dd66be20fbd66092a638b7696d8e58ff5310681c9020055b0e608b98825942597ba97e96a17d1c7a1facc40b9575fab263ca511"}, @NFTA_RULE_USERDATA={0x43, 0x7, 0x1, 0x0, "f5f7467cbdb5b8ca85f1048ef910a8de3c731fa59cf10be96179d2686276893239f8fe381cffcedcd78fd6297f5bc1c1ed0749090df2c50964104eacba8fbb"}]}, @NFT_MSG_DELTABLE={0x120, 0x2, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_USERDATA={0xf1, 0x6, "438bed93bc259fac1f7f6561439e73f8dfda516d0d92db3dfa2ee58a5341b64fbdf9c736c01cc48d04ed613df2baaa31708d7821ccfc1c0e2905737e2828cd2756ea8adb220d98f468c765607b6125a9fd1b3fbf57ec1a2e29d70e328a6a50857545aa043b742af3ecd01a573fdcc27fc91010ece742499b3f93bfe55daf6cb61a0a820b71f98796d90d5f210d3aa7a0e71692e55ee677f4a19ab0d386e402d3ba3fcd01b05f7476e3b7878bf37a2f9b1fcc90adb5ddf96efb2b9040ab8eacfd8dfb89b03fbab2e26ece4a73a18c47737ee81e9d9e0fa14f3026d3718aee1e59dc165717f0e43c28ee226951a5"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSET={0x130, 0xb, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_EXPRESSIONS={0x5c, 0x12, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @inner={{0xa}, @void}}, {0x48, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x1f}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x1d}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x215bb1fc69fdbc49}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x11}]}}}]}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x7}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_EXPRESSIONS={0x98, 0x12, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @quota={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @last={{0x9}, @void}}, {0x48, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0x15}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_NAT_REG_ADDR_MAX={0x8, 0x4, 0x1, 0x0, 0x9}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_NAT_TYPE={0x8}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x17}]}}}, {0x2c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_PAYLOAD_CSUM_TYPE={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_CSUM_TYPE={0x8, 0x6, 0x1, 0x0, 0x2}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x504}, 0x1, 0x0, 0x0, 0x8000}, 0x44) ioctl$KVM_RUN(r2, 0xae80, 0x0) r6 = socket$key(0xf, 0x3, 0x2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket(0x25, 0x80000, 0xdf) sendmsg$key(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYBLOB="020a000207000000000000000000000005001a00ac1e00010000000000000000000000008829000300000020000000000000000000000d9f"], 0x38}}, 0x40004) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x3, 0x3, 0x10, 0x0, 0xfffffff7, 0x8, 0x15, 0x1, 0x3, 0x0, 0x7, 0x6, 0x0, 0x4, 0xa7, 0x5, 0x6, 0x10, 0x7, '\x00', 0x0, 0x4}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r7, 0x0, 0xcc, &(0x7f0000000040)={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, "097098e974c5ad6be42e8e573e55a03841b16670a2b2755be4c5048d147b819f", 0x991, 0xb06ccd28, 0x969, 0x7}, 0x3c) ioctl$SNDCTL_TMR_TIMEBASE(r5, 0xc0045401, &(0x7f0000000280)=0xa6) 13m22.834984417s ago: executing program 7 (id=5510): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000000480)=[{{&(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10, 0x0, 0x0, &(0x7f00000005c0)=[@ip_retopts={{0x18, 0x0, 0x7, {[@lsrr={0x83, 0xb, 0x4, [@local, @empty]}]}}}], 0x18, 0xffff0000}}], 0x1, 0x40880) 13m22.681759575s ago: executing program 7 (id=5512): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xd417b000) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xe) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x4}]}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x20000000) close_range(r1, 0xffffffffffffffff, 0x0) unshare(0x6a040000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xd417b000) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xe) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x4}]}) (async) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x20000000) (async) close_range(r1, 0xffffffffffffffff, 0x0) (async) 13m20.745586395s ago: executing program 7 (id=5514): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) execve(0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_usb_connect$hid(0x5, 0x36, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, 0x0, 0x0) sendmsg$inet(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000340)="31ad81df3fb2ddf597267390417d0a0be391dae8d945c26057d449295d390d081b", 0x33fe0}], 0x1}, 0x14) socket$nl_route(0x10, 0x3, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r5 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$inet6_IPV6_RTHDR(r5, 0x29, 0x39, &(0x7f0000001640)=ANY=[], 0x18) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0xff}, 0x7}, 0x1c) syz_usb_connect$uac1(0x6, 0xed, &(0x7f0000000140)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xdb, 0x3, 0x1, 0xa, 0x10, 0x8, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x0, 0x1}, [@output_terminal={0x9, 0x24, 0x3, 0x1, 0x305, 0x4, 0x1, 0x4}, @selector_unit={0x6, 0x24, 0x5, 0x3, 0x3, "bb"}, @processing_unit={0xb, 0x24, 0x7, 0x1, 0x4, 0xd, "0a969ff6"}, @selector_unit={0x6, 0x24, 0x5, 0x1, 0x6a, "f5"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x80, 0xfe01, 0x3, "90981c60d3fa"}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x4, 0x4, 0x1, 0x96, "", "e1"}, @as_header={0x7, 0x24, 0x1, 0x7f, 0x40, 0x3}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x8, 0x2, 0x40}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x3, 0x3, 0x3, 0xa8, "ef4851", "a11c"}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x8, 0x6, 0x9, {0x7, 0x25, 0x1, 0x80, 0xb, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x4e7d, 0x5, 0x5, "2d20fd81a50e"}, @as_header={0x7, 0x24, 0x1, 0x0, 0xd, 0x5}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x1, 0x0, 0xf0, "511a2cf576cbbd27"}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x3a, 0x10, 0x7, {0x7, 0x25, 0x1, 0x83, 0x9, 0xb}}}}}}}]}}, &(0x7f0000000500)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x200, 0x3a, 0x3, 0x5, 0xff, 0x3}, 0x39, &(0x7f0000000480)={0x5, 0xf, 0x39, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x45, "acdf95f3e19d480aad3371643d4f2cf7"}, @ssp_cap={0x20, 0x10, 0xa, 0xf9, 0x5, 0x9, 0xd094256b0ac81082, 0x8, [0xffc0c0, 0xc000, 0x0, 0x3f28, 0xffc0]}]}, 0x1, [{0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0xc1a}}]}) r6 = socket(0x2, 0x3, 0xff) sendmmsg$inet(r6, &(0x7f0000000640)=[{{&(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10, &(0x7f0000000040)=[{&(0x7f00000006c0)="281e3162e61e5f8e22c14cebe48862dda7b2fddc249bd774480a07f7ea440013", 0x20}], 0x1}}, {{&(0x7f00000000c0)={0x2, 0x4e21, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@ip_retopts={{0x18, 0x0, 0x7, {[@rr={0x7, 0x7, 0x5, [@rand_addr=0x64010101]}]}}}], 0x18}}], 0x2, 0x4800) writev(r5, 0x0, 0x0) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r7, 0x40345410, 0x0) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r8, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue0\x00', 0x200000}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r7, 0x54a2) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r8, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x0, 0xe8030000}}) 13m17.18234553s ago: executing program 7 (id=5529): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) socket$nl_audit(0x10, 0x3, 0x9) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0xffffffff, 0xffffffffffffffff, 0x0, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4000) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r4 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, r3) add_key(&(0x7f0000000000)='rxrpc\x00', 0x0, 0x0, 0x0, r4) sendto$inet6(r2, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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"], 0x390}}, 0x4008000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31040000000900010073797a30000000000800054000000021380000001d0a03000000000000000000070000000900010073797a3000000000090002"], 0xbc}}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000540), 0x400, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'tunl0\x00'}) socket$netlink(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) mq_open(&(0x7f0000000580)='exthdr\x00', 0x2, 0x189, &(0x7f00000005c0)={0x49335f85, 0x7, 0x8, 0x46}) r8 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}, 0x1, 0x0, 0x0, 0x8000804}, 0x0) sendmsg$kcm(r8, &(0x7f0000000280)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}, 0xff000000}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="7bcd", 0x2}], 0x1, 0x0, 0x0, 0x900}, 0x60) ioctl$FS_IOC_SETVERSION(r0, 0x40047602, &(0x7f0000000240)) r9 = syz_usb_connect(0x5, 0x24, &(0x7f0000001900)={{0x12, 0x1, 0x200, 0x2, 0xcd, 0x77, 0x10, 0x403, 0xb8d8, 0x30bb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xde, 0x0, 0x0, 0x8, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xd0, 0x76, 0xd8, 0xe}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r9, &(0x7f0000003440)={0x14, 0x0, &(0x7f0000003400)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$hid(r9, &(0x7f0000004000)={0x24, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="07f7030000000403470c15c286d7f0d16370e0600f854761e872242b9a217fe186b0903989c87761428e44e10108792411b53c84cb15b6f6d752b72673fd31a7d3eb56c715e7098dfd339d044fbb1864cc33813315514d28e193ea15fae06b1f8d"], 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r9, &(0x7f0000000200)={0x24, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0003340000003403"], 0x0, 0x0}, 0x0) 13m1.670284539s ago: executing program 35 (id=5529): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) socket$nl_audit(0x10, 0x3, 0x9) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0xffffffff, 0xffffffffffffffff, 0x0, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4000) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r4 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, r3) add_key(&(0x7f0000000000)='rxrpc\x00', 0x0, 0x0, 0x0, r4) sendto$inet6(r2, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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"], 0x390}}, 0x4008000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31040000000900010073797a30000000000800054000000021380000001d0a03000000000000000000070000000900010073797a3000000000090002"], 0xbc}}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000540), 0x400, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'tunl0\x00'}) socket$netlink(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) mq_open(&(0x7f0000000580)='exthdr\x00', 0x2, 0x189, &(0x7f00000005c0)={0x49335f85, 0x7, 0x8, 0x46}) r8 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}, 0x1, 0x0, 0x0, 0x8000804}, 0x0) sendmsg$kcm(r8, &(0x7f0000000280)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}, 0xff000000}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="7bcd", 0x2}], 0x1, 0x0, 0x0, 0x900}, 0x60) ioctl$FS_IOC_SETVERSION(r0, 0x40047602, &(0x7f0000000240)) r9 = syz_usb_connect(0x5, 0x24, &(0x7f0000001900)={{0x12, 0x1, 0x200, 0x2, 0xcd, 0x77, 0x10, 0x403, 0xb8d8, 0x30bb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xde, 0x0, 0x0, 0x8, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xd0, 0x76, 0xd8, 0xe}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r9, &(0x7f0000003440)={0x14, 0x0, &(0x7f0000003400)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$hid(r9, &(0x7f0000004000)={0x24, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="07f7030000000403470c15c286d7f0d16370e0600f854761e872242b9a217fe186b0903989c87761428e44e10108792411b53c84cb15b6f6d752b72673fd31a7d3eb56c715e7098dfd339d044fbb1864cc33813315514d28e193ea15fae06b1f8d"], 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r9, &(0x7f0000000200)={0x24, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0003340000003403"], 0x0, 0x0}, 0x0) 6m41.093084775s ago: executing program 5 (id=6611): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000440)={0x0, 0x38, &(0x7f0000000340)=[@in6={0xa, 0x4e22, 0x2, @mcast2, 0x9}, @in6={0xa, 0x4e23, 0x7ff, @mcast2, 0x7}]}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000080)={0x3, 0x0, [{0x80000019, 0xf0e, 0xffff, 0x5, 0x2}, {0xb, 0x9, 0x6, 0x7, 0x81}, {0xb8c7555903250bc2, 0x8, 0x8001, 0x3, 0x1}]}) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000380), 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010000100ab5a0000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4024}, 0x4000010) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x20044040) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e24}, 0x6e) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') syz_clone(0x25000000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0700000004000000000100000400000020000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000555ac01bfef1045fdbf3a21568f426a26525f9"], 0x50) syz_emit_ethernet(0x17b, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd6000000000000000000005000000000000000000000000bbff02000000000000000100004e227d3e0f150721"], 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000740)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x3}, @NFT_OBJECT_QUOTA=@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}}, @NFT_MSG_NEWRULE={0x26c, 0x6, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0xbc, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_NAT_REG_ADDR_MAX={0x8, 0x4, 0x1, 0x0, 0x11}, @NFTA_NAT_FLAGS={0x8, 0x7, 0x1, 0x0, 0x40}, @NFTA_NAT_REG_ADDR_MAX={0x8, 0x4, 0x1, 0x0, 0x18}, @NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_NAT_REG_ADDR_MAX={0x8, 0x4, 0x1, 0x0, 0xa}]}}}, {0x14, 0x1, 0x0, 0x1, @synproxy={{0xd}, @void}}, {0x10, 0x1, 0x0, 0x1, @tproxy={{0xb}, @void}}, {0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_TYPE={0x8}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_LIMIT_FLAGS={0x8}]}}}, {0x30, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x16}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x24}]}}}]}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT={0x34, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT_FLAGS={0x8}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x73}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x84}, @NFTA_RULE_COMPAT_FLAGS={0x8}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x5}]}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_RULE_USERDATA={0xa1, 0x7, 0x1, 0x0, "31498f25fa2568bcf5069a94011878bbc46ae801da50af08bd3e332e3f7ad58a68ca1ed7ef3012906898439c920a8e80e63d607f80bd0deb091c2bb1ced3521405de54c09221b1ebb93e66943620b8ed28fadf2efbf6cc6eb3c9c9f805b8d7214b3ad9ad97c88a1e888e3fdf988756c5d1da491df9b47018bcd2344553d8c491871590003fd79a82ce6c61b92b851c98bcdfd1aaab7e5ca9432a5f44ac"}, @NFTA_RULE_USERDATA={0x47, 0x7, 0x1, 0x0, "f22a9ec6e426005e888c4d5740533a0dd66be20fbd66092a638b7696d8e58ff5310681c9020055b0e608b98825942597ba97e96a17d1c7a1facc40b9575fab263ca511"}, @NFTA_RULE_USERDATA={0x43, 0x7, 0x1, 0x0, "f5f7467cbdb5b8ca85f1048ef910a8de3c731fa59cf10be96179d2686276893239f8fe381cffcedcd78fd6297f5bc1c1ed0749090df2c50964104eacba8fbb"}]}, @NFT_MSG_DELTABLE={0x120, 0x2, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_USERDATA={0xf1, 0x6, "438bed93bc259fac1f7f6561439e73f8dfda516d0d92db3dfa2ee58a5341b64fbdf9c736c01cc48d04ed613df2baaa31708d7821ccfc1c0e2905737e2828cd2756ea8adb220d98f468c765607b6125a9fd1b3fbf57ec1a2e29d70e328a6a50857545aa043b742af3ecd01a573fdcc27fc91010ece742499b3f93bfe55daf6cb61a0a820b71f98796d90d5f210d3aa7a0e71692e55ee677f4a19ab0d386e402d3ba3fcd01b05f7476e3b7878bf37a2f9b1fcc90adb5ddf96efb2b9040ab8eacfd8dfb89b03fbab2e26ece4a73a18c47737ee81e9d9e0fa14f3026d3718aee1e59dc165717f0e43c28ee226951a5"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSET={0x130, 0xb, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_EXPRESSIONS={0x5c, 0x12, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @inner={{0xa}, @void}}, {0x48, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x1f}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x1d}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x215bb1fc69fdbc49}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x11}]}}}]}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x7}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_EXPRESSIONS={0x98, 0x12, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @quota={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @last={{0x9}, @void}}, {0x48, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0x15}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_NAT_REG_ADDR_MAX={0x8, 0x4, 0x1, 0x0, 0x9}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_NAT_TYPE={0x8}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x17}]}}}, {0x2c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_PAYLOAD_CSUM_TYPE={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_CSUM_TYPE={0x8, 0x6, 0x1, 0x0, 0x2}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x504}, 0x1, 0x0, 0x0, 0x8000}, 0x44) ioctl$KVM_RUN(r2, 0xae80, 0x0) r6 = socket$key(0xf, 0x3, 0x2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket(0x25, 0x80000, 0xdf) sendmsg$key(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYBLOB="020a000207000000000000000000000005001a00ac1e00010000000000000000000000008829000100000020000340000000000000000d9f"], 0x38}}, 0x40004) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x3, 0x3, 0x10, 0x0, 0xfffffff7, 0x8, 0x15, 0x1, 0x3, 0x0, 0x7, 0x6, 0x0, 0x4, 0xa7, 0x5, 0x6, 0x10, 0x7, '\x00', 0x0, 0x4}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r7, 0x0, 0xcc, &(0x7f0000000040)={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, "097098e974c5ad6be42e8e573e55a03841b16670a2b2755be4c5048d147b819f", 0x991, 0xb06ccd28, 0x969, 0x7}, 0x3c) ioctl$SNDCTL_TMR_TIMEBASE(r5, 0xc0045401, &(0x7f0000000280)=0xa6) 6m40.224541428s ago: executing program 5 (id=6617): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='attr/current\x00') preadv(r0, 0x0, 0x0, 0x33a9, 0x4) 6m39.23979366s ago: executing program 5 (id=6621): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x10, 0xffffffffffffffff, 0xffffc000) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x2, 0xf8af735949d586db) ioctl$SCSI_IOCTL_SYNC(r0, 0x4) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) io_uring_setup(0x7a5c, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(r3, 0x0, 0x4000004) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) io_setup(0x8, &(0x7f0000000040)) r4 = openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$nvram(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_STREAMON(r6, 0x40045612, &(0x7f00000001c0)) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r5) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac14140f000000"], 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100280000000000000002000000200001800d0001007564703a73797a32"], 0x34}}, 0x0) 6m36.032105924s ago: executing program 5 (id=6631): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r1, 0x114, 0x6, &(0x7f0000000340), 0x4) setsockopt$RDS_CONG_MONITOR(r1, 0x114, 0x6, &(0x7f00000000c0)=0x1, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000300)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SNAP_CREATE(r1, 0x50009401, &(0x7f0000001180)={{r1}, "bb66733058d7b18c0e600d14fc5c8f93dc249a7b37946d6c915bbcb66fa5eed9050f676009a35454869aea478665ddf59adeb0d8dc825ec16ce90b04aa891ced68125801d5f9b9889fa6e4765aad39ae31614a68960ea36bdbe266768f06ba378bbe88f3196b08e9d98b84685fc4685383cda8b1b7dadac73627492d7bbdff4158f3c9f85c791ee1d50e5c56dd51f97f39f6b3e34015d6f3dc96eb25c6dce8a7d13d20c434f56bb296676720479bf1b0dcb46dbedec865dacde1cfa0f4b6211240ca3a4af37f278390caa9713d092531e2e313ae5c55b214ca94a19148d5c1d0f4c96c0f018f52513c81a4d417db30221b1c90629d45afa9e63cde4e248b554371e51fe4624ad0cc3c6eb74ebf143e354c2546829772c8ca8ea4214e060692711c2764de02778b7816af10231fd88dd18a22a4ac4c0485a99200d0f74edcd4440e03999f7ebcec358a1e7050ef86b635278278bd745f666db56b910aea669f3929a98608ff0ffd1bcd8a662f5f4a5b887a8a3a0addbdcee274bc5e42ce7ca1e9fc87ccf43d0c65e4a5af4752b40f3af9ec361902d8624e2376830e3219dadb0d72de8ad12fa1dc29bb54ef088bc9d1091d5271521345594da41c0f667d7865302d4117a032d662bcd3b468e28e5694ffc5bb391e0ff9c6980c54a12c114011e78efac8fb6423bc10fff7ef4df5929e935a6d47cbe6235518f4507f1982ed36cc6fabc13d1dc815866dcb4076daaa538129ecb6f4690f277ca45fdc40b3b035bce86cbc4325a548d30995d9c2b02a4d2edaefee1c2e6e4a6a56fb47bf92db2885821273e25df9b9cf48384af6e4268c75f0ba9d36eb59e8439fe8f85147333e729c9ab2d09425ec74cec3808e6679fa7c5dc325be9d6d7b8e768941d6d44d236197e2eb43ae3112557c5f04e4a8ab713cc7ad5fa8769bced1ceb1b4f2dcd1fca30b4538eefc92ebeeca5afa69e052880c6fbc4621e0d30db70b22ca7e0e46005cc8a6468bbd1c2e33d829856f2ae6cbe8fdd6f2cf7b0c9e98e41de1e4a08e97ecf38eb495972eda9ca769aa7f7e0bbf4bde41de08103a1698a7eb1db529de396fd17b327bc051d5eb805c70c7b4749e1381dd6aa00583a3e3683c6c342dfcbd944b6436a9749192b7474dd0194ad8e1189ffb1a1998d8ba1268aa26229871fa42f846fef0ac81bf87ebfbcf5e9bc3fd44a2137410280da39f0b27866f813a69fe5b0f9e0081bc2625b15737b76686698b98e31d4a435def7a19f0118694f8ea16a3c2a2273528e5923e87ad61af621ead843c8e374833daa4554d5652c07def8040604dde6462d058ef3f01a478930724258302ac4e6200a05a5c64e4d07f8cb2b5f6c54630ddeeda4272512ac96ace7be703b123488cfea3ef366b53eccccfc870c9ca2fdce0f144482b6f96f4db8783230c918cf8e6525120b69cc45a5919312969130daaec64d2ed96f3a87efae757c242ce46c1199e7a088fc3ee3f1aa4cc54987e9c7768407697d01ffa8ac1fb834f848246a23a2a9f0be97ae25a5bc0701367f67f3c55e9ba0957f71cb5370555af3f11e4130199b4d76a14524cd1906df0645092d93e94106b4b9d6119d5bc93ea12040810a839cb848d97eb679b4252f7542643f08b30f910f2b2c2b0e127c50692ded19680923c8d8647403cd8e7a1c0f71fec30020222dca0443b784cf3e03ade9738384da67041e79049d8b705a3bfd85496d13ad7ce64daeacb5dcafcea75dbb562b3ac6c646483492577eccb665dd24760545ae17b02f31a14fe5e099776d07241cbaab2c0f5fc1e4c68f17f92c95bfa8e1ee3d41cab1a207c16e36688ee708af3e0b8a46ff4b71501ef7e57b0fe08cd8b62ef4d77a38dffedd40a03a2a24668f9a91500249379b5c08922aeef11041a1a757dd7d208b669f8ed19a69eb1f17007ba52ed90a5260c21faefa7d6d0e2bbd236e8ec19114831c9c6eae4114a5a0455157d21fc4dd780cb5dd76907f721bc789aa360801955a7e1c449b4e24d126dbf1caa9d98a436154b34aa231f0b05828a5256077d385de5e3033a1c8ab4350847fad3a20e4a630fc676e24a4ff0d9df19f45f7257c7799ff6cf41429d87dd2397f3c1b5f0be75607fc448e19fac1802eb8a993fabec11e4f988969a4fa2eb098f932fff37c95945da92eede49f8c3aed6a39c03a1fff7a096e06f16a516cb0749f11f842e7910fff0fca2951c7fb3b6bbd1ce92e7e245e1de6cbdf93eb3af2b161861933cad0ee0ebbaa4d3736c6d7544da9b5a4850030fa99b10a6d2fba3911200c7cef788a47ac351074bd008c4ff1bf41e24da2798cf8a1be24669199e287cecd562f4a9d43671e36bb739aac8f77bbd55f4b8cd6cd20b8c595ab98c7a685fb3c5426c699437013d84b9c74a4491aa140564a7ef9c53ca823a00d35e1de9968beb0adfe84cb031b493a80dee04c7e1858ee40d5ae8c4299b32753561f4e2efc22e2af6e55f64079211943af2ae21132323bbc5e371371160eb0de7328be9996b1cd6cc32345221d16f375b47c1d73a929652dcd80d95be2785cf19288ffbe7234a0c45899040784ee613d57d6b61d983c8ede80863dc5cbbf88c0bf734166a673e33f76a2c6b59cb38235611fa0f8070fadd962fc723df49c43b4944deae41ee8c5c50456e50779b1aa36f2df631aff6d5e47a12a82091a6b88f3a4092b8dfd3998d19923c9abe0873924471e62a8b6c394c0582a9c20b7be70d597f12c2a091be798831822c5b2d3b486cbda695dddd8a974b22d28c251be4236bb8ba4b4bfd029609cefbbd4eb92a10d0b519f0207e78051c271a16771c99a5f267f25adc5fa68a31e5dab32101053a6d571e6d7d9222ae444c8d41285046f3e14c606e3dbec1bc5ffcf8bd6cbc840a19ecb4163cef739a0e2a1717555cedf9eb904f09d20e34a59c3fe7d30ba171d4bff207a9f04695a1d4be298710ba91849ab3a103559b38b9ac5e68e3a0a49d983923fa1fa003a6ea20084f25f3ef6688c6421b8aa3b06f32a6ef75a2b5ce270e330cf3b452ddf12e5b48e60531e6b1c0ba3a353f22cf7a035d8b11991d343bd40feef64d89ae6680705e741b067c02b146f49dfc43edff76f91463947daf4f5b7ac6f5579c3ceb07c98c402cc86cd40d430f4eb996a4ab811fef9d95de2d67b42b30b7d5406a22ddbda29e85d93000932a6fde96dcf6e16caff05e8bf9e2d3d34fbb5f6e1732535f589db8e5407a5bbfc6e8bf7d2042d58e18d8848e7fad0a0e3d26de0b83422369abfc4fc340a6bc586936d64ba127fa52825bda48cce904fbe8ef57318e60f242ff8403106f3e16a736b4d5f66b1e708c8734223019214ecb7648d4b4267957fe9d1e9679448cb285cac40c938bbdd9731c545b71f66326c1cf881a551c3a024b0ab48534c93b9d4036c308dad89ce936b8ec895f5317fa873d259c0ec2ebbc630bc1686d5515c146cb430461b5c8e25deb9cc9cde63ea058c340031d6d3eca95a5c13842de41eb989f5874364528983c4d38ddb8c7e30f443b3941feaf6b892693c8102f3c96bca1f5bee897a9d9f83b6ffa3c5c8e4cc34504119a6a021642e6ef58b26907e1f02c52627e00ffd6acdc90daca13137bc2c87d6d7d9c5aaad920b1ea64aaaa63d175c6f8722a0885d82d37a7b99d7d6ab78d0e8327f7c91a2d16799c715264668ff763da49349135eb2328da382511757884fe552152898ecdb5d814764b8160153018d7b61273e835b7fa95db0235c897cb727fda4882fe58e89e336cb0cde45c11521f91ec6351df9f8af18790d53b105d333d6cf8206e3dbef5e173991ae49c943adf29f2aafba569c274a40812f2adfa6ac563a5645cb202663bc1bdbd4cc6669bdecba7cddc7070851b63ed11064f1ea4920dc6133757f384333d0e9f79a3c97f707864cd2a6ee6b2a4612d63776acc8fec0c72460f596899e31543d990fe0a39a10edd57028c3cfb52ed2f19563c6af348b91a3cebdd7668d1079280e88906d8cc261341062cf9104f8043d71118fda57eceb2942a6296cfd52d93ce7dfde1fcec1903edaa87dc06d7286b343839dfb2c2486167e59443c0e0bf78a06d343f6cbed241945e1ce58d5ca3f5f98b6e5356f6e239559651e1b349591ca9f221000249ca7c707c50da43797b399ad1df4501a9511f4c5594df248e02f7cfece246110834d81790fac4f318118cba68af12dd0f944f6b01f9428759eee994c47878bf7659ee623ed0ce57c1acb820e40e96eeb533e8e1d0287a240a502c28af4686e2ad6ce662fd6d0fdf0d9390259900e1ef1c7f3b4f8a8e7aa81a12b74325be3610934dc23a286c440563b1fc8179e9c14a3dbf7b1b229732fd3395cb7104efdbc3677fff43d4272bae4589cf758f2cc43f1acad57fca2dbfc2217ebdd994b20dbb8d15778b8c65d2900b32bbe092c302f296571b1a30917635b9412f4c24648c4131c2483713c1241e8af4d3f36336b1acea5a2deb6e7eced0f2064d58ca00354bc921eabf2dc388886de6d686607f2f84294094979e92c977b5cbe09f29c8421f4adee2543878bcb95cb3146c4870e19b335abd66e445d2d9696392edd099c8ea93210737a1b8f3d8635b24b12b90eaf79abfdbedba266f01c4727a9c7df660b57fa19739c170b36cac9b2567380c7ac44ea68c54a0bc63f053a6ad75c12e3ac0180e2936f4f450ef4d2325aaf01f28fb7439b11eec2bd280c7206f4948df84a016e58d588c931d4d6121a6d1c123936ed12e93369ac8ab5feb5329481859ac34b87e9800edb1e064244ee235446042f9c7ff5b86e5f5ffb6a64e0b4cde9cfca40074af1ea66c8dc822e85a86898f57d5fb4bfe3315892af6251d74bb7c690f7dd3fe9c3318678f1d5035dd5e71c7a5b31a7bb61521c4925eb500b55484417b1c9d2d2e3f1e7b99a19f21ff18d8097b0468ac46c7e87b399c79d45482a187dc9f6e74ef1b82cad32f7c5e5c1d5b23f0bfcdcd769d89836c3d317f0516d22c9233c21630583d956ae87dfd0c4b7cc2f70a069feeedcda195416fa36a114a7f1e83f826bd1d4e65af7b02df611625d40b4954687a2b30377caadd36b8ea2268de9f54629bf0efba82932c7f405357dece39d4fec75d8006b8289e8d4a5518470641dab79090a4aaa8b9f27c79c348f949c8b4f4ce238e685afa77db9207f37a70d6468a3a84f22afa6367a2d08535a0e63a647c90d1b6d86ac05ded5a5f756553bf54fa8fd35a4038707ff59203e840a92948a97d6661d729b09c0d0f71117e8233c99107427bf3559e9071e0471787341273b9475ed194b052e2cf6e247d654aacc7b0e359890d99c4904cc8b7b95334c6fa9b605d9a519ac536c9b7261e906fb9e0b78ca461110bd9240706659502b0bb7456aecfeb070c20b35d9c3614bee142e9e9f32665895af1f58410b3822b1b51ddb58da263213e18df95cc31b0edbf9e6a5ba01be4240fdf0502e8e37a0c60795f304f56175ebb4705a61cbe49b8944ddb6b3788ce337364c3c3f58362920b54e7670b314d079afb5fa0f23bf183b962d6de2ac317df57a71e9d8582271c76e40ff8a926afc5aac184d7eb1864ba40fd20f1d41c64d326cbe204be1b8309d324ede7312a9b059f24c4a93dab5d947562a7e1a96b17413c4dff7f4254d253784a332518ed377aaafbed9cbdbfe3142b358722d7edcb5e5cd23b3d55f7b4d53a46f8c5e3f9e3b403bfe105084520c8d008c496cf78c5296feafb142828eec444893596cdae68f470c1dad95c8aa7111e4ee8a295cc4a84a8ac"}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0], &(0x7f0000000040), 0x1, r3}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000140)=[{0x6, 0x7, 0x0, 0x7fff0003}]}) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000e40), 0x40080, 0x0) ioctl$TIOCPKT(r6, 0x5420, &(0x7f00000000c0)=0x1) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) io_setup(0x4fb, &(0x7f00000009c0)=0x0) io_submit(r7, 0x1, &(0x7f00000001c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0xfffb, 0xffffffffffffffff, 0x0, 0x0, 0xc}]) ioctl$TCSETS(r6, 0x5402, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x400, 0x0, "fe94b89fc43c3328eae0cae1f5eba329e6f216"}) splice(r6, 0x0, r5, 0x0, 0x7ffff000, 0x1) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000001100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r9 = accept4(r8, 0x0, 0x0, 0x800) sendmmsg$alg(r9, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e", 0x3}], 0x2, &(0x7f0000000380)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x40800) recvmsg(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000000c0)=""/81, 0xd}, {&(0x7f0000000500)=""/83, 0x53}], 0x2}, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000200)={0x200, 0x0, &(0x7f0000000440), &(0x7f00000000c0)=[0x2], &(0x7f0000000280)=[r4, r4], &(0x7f0000000040), 0x0, 0xfffffffffffffffc}) write$P9_RWALK(r6, &(0x7f0000000400)={0x23, 0x6f, 0x2, {0x2, [{0x2, 0x0, 0x4}, {0x8, 0x1, 0x4}]}}, 0x23) 6m35.529326368s ago: executing program 5 (id=6632): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x2, &(0x7f0000006680)) r0 = syz_clone(0x40008000, 0x0, 0xfffffffffffffccd, 0x0, 0x0, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000180), 0x2, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0cc5605, &(0x7f0000000300)={0x1, @pix={0x409, 0x8, 0x34524742, 0x0, 0x84, 0x0, 0xb, 0x0, 0x0, 0x8, 0x0, 0x1}}) r2 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000d379)={&(0x7f0000000200)=ANY=[@ANYBLOB="18000000140001030000df00000000001e00000001000000"], 0x18}}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r2) rt_sigprocmask(0x0, &(0x7f0000001480)={[0xffffffffffffffff]}, 0x0, 0x8) r3 = gettid() rt_tgsigqueueinfo(0x0, r3, 0xb, &(0x7f00000007c0)={0x83b, 0x8000006, 0x3}) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffff7]}, 0x8, 0x80000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0xffffc000) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000003a00010325bd7000fcff000009"], 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) read$FUSE(r4, &(0x7f0000002bc0)={0x2020}, 0x2020) waitid(0x1, r0, 0x0, 0x4, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYRESHEX=r0], 0x18}, 0x4) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket$kcm(0x29, 0x2, 0x0) recvmsg(r6, &(0x7f0000001d40)={0x0, 0x0, 0x0}, 0x20) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000140)='pim6reg0\x00', 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x8, 0x4, @remote}]}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x40}}, 0x0) r8 = socket$pppl2tp(0x18, 0x1, 0x1) getsockname(r8, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x39) ioctl$KVM_CAP_X86_GUEST_MODE(r9, 0x4068aea3, &(0x7f0000000080)) 6m33.900758599s ago: executing program 5 (id=6637): r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_emit_ethernet(0x82, &(0x7f0000000380)=ANY=[@ANYRES8=r0], 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x38}}, 0x10) r1 = io_uring_setup(0x1593, &(0x7f0000000180)={0x0, 0x20001bb4, 0x4000, 0x3, 0x3a1}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r2, &(0x7f0000000240)=ANY=[@ANYRES32=r1, @ANYRES64=r1], 0xff2e) close_range(r1, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0x2, 0x0) r5 = openat$dma_heap(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r6 = socket$unix(0x1, 0x2, 0x0) bind$unix(r6, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r7 = socket$unix(0x1, 0x2, 0x0) connect$unix(r7, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) setsockopt$SO_TIMESTAMP(r6, 0x1, 0x23, &(0x7f0000000080)=0x6, 0x26) recvmmsg(r6, &(0x7f0000000300), 0x40000000000049e, 0x1000000000fe, 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000400)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c) sendto$inet6(r8, &(0x7f0000000040)="e400", 0x2, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x2, @loopback, 0x5}, 0x1c) mkdir(&(0x7f00000000c0)='./file0\x00', 0x143) r9 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r9) 6m18.77811743s ago: executing program 36 (id=6637): r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_emit_ethernet(0x82, &(0x7f0000000380)=ANY=[@ANYRES8=r0], 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x38}}, 0x10) r1 = io_uring_setup(0x1593, &(0x7f0000000180)={0x0, 0x20001bb4, 0x4000, 0x3, 0x3a1}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r2, &(0x7f0000000240)=ANY=[@ANYRES32=r1, @ANYRES64=r1], 0xff2e) close_range(r1, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0x2, 0x0) r5 = openat$dma_heap(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r6 = socket$unix(0x1, 0x2, 0x0) bind$unix(r6, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r7 = socket$unix(0x1, 0x2, 0x0) connect$unix(r7, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) setsockopt$SO_TIMESTAMP(r6, 0x1, 0x23, &(0x7f0000000080)=0x6, 0x26) recvmmsg(r6, &(0x7f0000000300), 0x40000000000049e, 0x1000000000fe, 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000400)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c) sendto$inet6(r8, &(0x7f0000000040)="e400", 0x2, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x2, @loopback, 0x5}, 0x1c) mkdir(&(0x7f00000000c0)='./file0\x00', 0x143) r9 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r9) 14.099589845s ago: executing program 8 (id=7718): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="d80000001e0081054e81f782060000000000000006007c095dd2466518000e800a00142603600e1208000f0000000406a80016c00800094014000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791433a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad909d5e1cace81ed0bffece0b42a9eca0200e6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0xffa6) 13.958126837s ago: executing program 8 (id=7719): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000580)={0x26, 'hash\x00', 0x0, 0x0, 'sha224\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x800) recvmmsg$unix(r3, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0xf0ffffff, 0x0) 11.470023246s ago: executing program 8 (id=7730): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) execve(0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_usb_connect$hid(0x5, 0x36, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmsg$inet(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000340)="31ad81df3fb2ddf597267390417d0a0be391dae8d945c26057d449295d390d081b", 0x33fe0}], 0x1}, 0x14) socket$nl_route(0x10, 0x3, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r6 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$inet6_IPV6_RTHDR(r6, 0x29, 0x39, &(0x7f0000001640)=ANY=[], 0x18) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0xff}, 0x7}, 0x1c) syz_usb_connect$uac1(0x6, 0xe9, &(0x7f0000000140)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd7, 0x3, 0x1, 0xa, 0x10, 0x8, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x0, 0x1}, [@output_terminal={0x9, 0x24, 0x3, 0x1, 0x305, 0x4, 0x1, 0x4}, @selector_unit={0x6, 0x24, 0x5, 0x3, 0x3, "bb"}, @processing_unit={0xb, 0x24, 0x7, 0x1, 0x4, 0xd, "0a969ff6"}, @selector_unit={0x6, 0x24, 0x5, 0x1, 0x6a, "f5"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x80, 0xfe01, 0x3, "90981c60d3fa"}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x4, 0x4, 0x1, 0x96, "", "e1"}, @as_header={0x7, 0x24, 0x1, 0x7f, 0x40, 0x3}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x8, 0x2, 0x40}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x3, 0x3, 0x3, 0xa8, "ef4851", "a11c"}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x8, 0x6, 0x9, {0x7, 0x25, 0x1, 0x80, 0xb, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x4e7d, 0x5, 0x5, "2d20fd81a50e"}, @as_header={0x7, 0x24, 0x1, 0x0, 0xd, 0x5}, @format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x1, 0x0, 0xf0, "511a2cf5"}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x3a, 0x10, 0x7, {0x7, 0x25, 0x1, 0x83, 0x9, 0xb}}}}}}}]}}, &(0x7f0000000500)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x200, 0x3a, 0x3, 0x5, 0xff, 0x3}, 0x39, &(0x7f0000000480)={0x5, 0xf, 0x39, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x45, "acdf95f3e19d480aad3371643d4f2cf7"}, @ssp_cap={0x20, 0x10, 0xa, 0xf9, 0x5, 0x9, 0xd094256b0ac81082, 0x8, [0xffc0c0, 0xc000, 0x0, 0x3f28, 0xffc0]}]}, 0x1, [{0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0xc1a}}]}) r7 = socket(0x2, 0x3, 0xff) sendmmsg$inet(r7, &(0x7f0000000640)=[{{&(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10, &(0x7f0000000040)=[{&(0x7f00000006c0)="281e3162e61e5f8e22c14cebe48862dda7b2fddc249bd774480a07f7ea440013", 0x20}], 0x1}}, {{&(0x7f00000000c0)={0x2, 0x4e21, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@ip_retopts={{0x18, 0x0, 0x7, {[@rr={0x7, 0x7, 0x5, [@rand_addr=0x64010101]}]}}}], 0x18}}], 0x2, 0x4800) writev(r6, 0x0, 0x0) r8 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r8, 0x40345410, 0x0) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r9, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue0\x00', 0x200000}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r8, 0x54a2) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r9, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x0, 0xe8030000}}) 11.252910012s ago: executing program 4 (id=7732): r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905ba3e79"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="40010400000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000005c0)={0x24, &(0x7f0000000300)={0x40, 0xd, 0x1a, "dd7c83cd0c6d9284ef7ef45cbd577f90e333b69ff6ef57c927a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x178, 0x13, 0x1, 0x0, 0x25dfdbfd, {{@in6=@dev={0xfe, 0x80, '\x00', 0x32}, @in=@remote, 0x0, 0xb, 0xffff, 0x0, 0xa, 0x80, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x1}, {0x1, 0x0, 0x80}}, [@tmpl={0xc4, 0x5, [{{@in=@multicast2, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x34ff, 0x2, 0x2}, {{@in6=@local, 0x0, 0x3c}, 0xa, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x2, 0x0, 0x0, 0x0, 0x800, 0x800, 0xfffffffc}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x2f}, 0x0, 0x3c}, 0x0, @in=@private=0xa010101, 0x3504, 0x0, 0x0, 0x1, 0x0, 0xabf, 0x1000000}]}]}, 0x178}}, 0x0) 10.755688824s ago: executing program 6 (id=7733): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000001040)=[{0x0, 0x1000000, 0x0, 0x0, &(0x7f0000000840)=[@assoc={0x10, 0x117, 0x4, 0x2}, @assoc={0x10, 0x117, 0x4, 0x6}], 0x20, 0x14}], 0x1, 0x40880) 10.664487255s ago: executing program 6 (id=7734): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000180)={0x1d, r1, 0x0, {0x0, 0x0, 0x1}, 0x2}, 0x18) sendmsg$can_j1939(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1d, 0x0, 0x15, {0x0, 0x1ee}}, 0x18, &(0x7f00000004c0)={0x0}, 0x1, 0x0, 0x0, 0x300}, 0x0) 10.409354512s ago: executing program 6 (id=7736): r0 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x402880, 0x0) fcntl$lock(r0, 0x11, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x8, 0x3, 0x46c, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3d8, 0xffffffff, 0xffffffff, 0x3d8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x120, 0x140, 0x0, {}, [@common=@unspec=@connlabel={{0x24}, {0x7f, 0x1}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x4b, 0x1ff, 0x6, 0xb0e2, 0x80ffff, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, [0x0, 0x0, 0xff000000], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x1fc, 0x264, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x7, 0x0, 0x41, 0x0, 0xb10f, 0x1000, 0x6, 0x3, 0x20}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x16, 0x7f, 0x4, 0x1, '\x00', 'syz0\x00', {0xa6}}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24, '\x00', 0x7}}}}, 0x4c8) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x0, 0x1, 0x401, 0x0, 0x92, 0x55, 0x8, 0x1000006, 0x4}, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES8, @ANYBLOB='\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1, 0x18, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000002000000b702000014000000b7030000040000000000000083000000bf0900000000000055090100000000009500000000000000181100001650213ada5c6897a58c709fb19fb9b142286b3ac340dcd6d851915d998dc995660094a6391cb69fe7dd11744b500fd917aab760ef53b1eea0829be6ccb73a63596d42695faed1a783ec33424c354483792c20da63f13c0b3d9a0cc2966a80508b66a6aa0817b043ec3e21563e1547b73fdd71f1fc98e593ee8dd2f0dfaf0e603c11c74fc0aa9fa656e2221a7399469d526b0b9851c83e2700db9a0b4b20688823c918f3aef321259209affb53ca4d239f8232769a", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x23, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x4074) clock_settime(0xfffffffb, &(0x7f0000000140)={0x77359400}) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="05000000010000008e000000c9e700000100", @ANYRES32, @ANYBLOB='\x00'/20, @ANYBLOB='\x00'/25], 0x48) ftruncate(0xffffffffffffffff, 0x6) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r6, 0x4068aea3, &(0x7f0000000240)={0x79, 0x0, 0xceb}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC2(r7, 0x4068aea3, &(0x7f0000000080)) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000000000084000008000000000000000000813f001200"]) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r8, 0xae03, 0xbf) sendto$inet6(0xffffffffffffffff, &(0x7f0000000040)="c2251a571efd74377a98aad33122e868337ba127e2b0349c0429ee737ee0091f", 0x20, 0x800, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) 8.690516503s ago: executing program 3 (id=7737): syz_usb_connect(0x4, 0x24b, &(0x7f00000028c0)=ANY=[], 0x0) socket$inet6(0xa, 0x80002, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_dev$tty1(0xc, 0x4, 0x4) socket$inet(0x2, 0x4000000000000001, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) socket$can_j1939(0x1d, 0x2, 0x7) syz_usb_connect$uac1(0x2, 0x7e, &(0x7f0000000240)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6c, 0x3, 0x1, 0x5, 0x80, 0x3, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x3, 0x80}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x2, 0xa, 0x5, {0x7, 0x25, 0x1, 0x5, 0x1, 0x81}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0xc27, 0x591, 0x2, 'G\'\x00x'}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x5, 0xf, 0xfa, {0x7, 0x25, 0x1, 0x414ab0b54972077f, 0x6, 0x3}}}}}}}]}}, &(0x7f00000005c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x201, 0x40, 0xf, 0x2, 0x10, 0x3}, 0x55, &(0x7f0000000100)={0x5, 0xf, 0x55, 0x6, [@wireless={0xb, 0x10, 0x1, 0x4, 0x20, 0x5, 0x2, 0x9, 0x5}, @ext_cap={0x7, 0x10, 0x2, 0xa, 0x4, 0x6, 0x46}, @wireless={0xb, 0x10, 0x1, 0xc, 0xc2, 0x9, 0x6, 0x7, 0x6}, @ss_container_id={0x14, 0x10, 0x4, 0x10, "2b8e7b768b8a27cc45e6b62a7657a1d4"}, @wireless={0xb, 0x10, 0x1, 0x2, 0x61, 0x0, 0x3, 0xde08, 0x5}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "95e964f63796838077e546aa2253365c"}]}, 0x7, [{0x0, 0x0}, {0x74, &(0x7f0000000340)=@string={0x74, 0x3, "50236e33909e697117074512c5816a2dbc45ec9def20650711d3a07a9733ea3ba013cbb7c6f593e5a6a3825cde2f7f32464a593cc3ee2c3bcbc38bd319b64f05d6cc910d3249fa8371b6e65488f99599e71d41c84ca1afaa682076f3b141f4b61d1812f6c6307e1a72b7db0bbfaf7fb22e26"}}, {0x0, 0x0}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x140a}}, {0x7b, &(0x7f0000000440)=@string={0x7b, 0x3, "5da490cbae81cb33a8bce11fa50efb5dbf9b392815e24f8c8903745969616e3f1ee8a60550c6b8ea0539cc564cbd4fc3fd993c2d8ff2e5265232a9b8e0750e274d194c89ce2ead2d5a7824d5d2830dce0f2c39274d4e893ffc9c2c6866a0700d2d4e8394e751386d8d630c63eb1aa1bb3cba19703fc2db780c"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x437}}, {0x2, &(0x7f0000000580)=@string={0x2}}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c00000010001ffe00989837a182138b00268f1c", @ANYRES32=0x0, @ANYBLOB="ff7f000080000000140012800a00010076786c616e0000000400028008000a00", @ANYRES64=r0], 0x3c}, 0x1, 0x8000a0ffffffff, 0x21000000}, 0x0) 8.431136409s ago: executing program 4 (id=7738): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000001c0), 0x7fffdb0, 0x100, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x2000000000000001, 0x0, 0x2, 0x0) syz_emit_ethernet(0x14a, &(0x7f0000000580)=ANY=[@ANYBLOB="aaaaaaaaaaaac2000001080045008f3c006700000006907864010101ac1414aa4e214e2200009aa82ca57736a538a85c1dfa3fe251c4b93295c9007784a9524867", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="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"], 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000400)={0x15, 0x110, 0xfa00, {r3, 0x0, 0x0, 0x30, 0x0, @ib={0x1b, 0xd, 0x0, {"9db82bb40f0688ff8035b72797edea57"}, 0x9, 0xfffffffffffffff8, 0x7}, @ib={0x1b, 0x7ff, 0x0, {"7d0300000000001000"}, 0x0, 0x4, 0x6}}}, 0x118) write$RDMA_USER_CM_CMD_QUERY(r2, &(0x7f00000000c0)={0x13, 0x10, 0xfa00, {&(0x7f0000000f00), r3}}, 0x18) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(0xffffffffffffffff, 0xc0984124, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r4, 0x8983, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x4, 0x5f, &(0x7f0000000000)=ANY=[@ANYRESHEX=0x0], 0x0) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, 0xffffffffffffffff, 0x0) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x5008, 0x0) epoll_create1(0x0) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, &(0x7f0000000140)) r5 = socket$netlink(0x10, 0x3, 0x15) writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) recvmmsg(r1, 0x0, 0x0, 0x12001, 0x0) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r6, 0x0, 0xca, 0x0, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r6, 0x0, 0xd2, &(0x7f0000000280)={@broadcast, @empty, 0x0, "ffff01e03d64a831683fdc3fd440829c82cfc400", 0x0, 0x0, 0x0, 0xfffffffe}, 0xfffffffffffffc43) setsockopt$MRT_FLUSH(r6, 0x0, 0xd4, &(0x7f0000000000)=0xe, 0x4) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000240)=""/254, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x1}, 0x4) socket$kcm(0x10, 0x6, 0x10) 7.829828877s ago: executing program 9 (id=7740): r0 = socket$kcm(0x10, 0x2, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) io_setup(0xea, &(0x7f00000000c0)=0x0) close(r2) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) io_submit(r3, 0x1, &(0x7f0000000940)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x5, 0x8, r2, 0x0, 0x0, 0x0, 0x0, 0x2}]) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="24008000000000000000268237211121cabb0000b3a4740e1bcf13ae17ec7e9240c508ac13a210303a63213dfb1c93b82d898880b08bece5bc5352dba2e9724b6652f23bda6af95314c916d84d9299d4ef4dc41ee6200f917c6944d1820b5d5737d60272df5938f0c7b0db8f921fc86aec8c194d949774b97166f84a5bdd72b142a0e1526e44694c6dba9dcbe392aed311a423f36083664eed4fd51eb46dc4194d827e0416f1493dbd5fc899d75afa7d4a8f5fe5bab7fab2ab4ad4a081a5fa540260694f5f850a93fce93f64b7f6f7e4ae", @ANYRES16=r1, @ANYBLOB="010026bd7000fddbdf255c00000008000300", @ANYRES32=r5, @ANYBLOB='\b\x00k\x00Z\x00\x00\x00'], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) unshare(0x22020600) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = getpid() sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r6, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[@ANYBLOB="5c0000f0", @ANYRES16=r1, @ANYBLOB="00022abd7000ffdbdf25700000000a00060008021100000000000a00060008021100000100000a000600ffffffffffff00000a000600ffffffffffff00000a00060008021100000000000a0006000802110000010000"], 0x5c}, 0x1, 0x0, 0x0, 0x2004c000}, 0x24000000) syz_pidfd_open(r7, 0x0) r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$sock_inet6_tcp_SIOCINQ(r8, 0x541b, 0x0) r9 = socket(0x10, 0x3, 0x0) write(r9, &(0x7f0000000000)="3c00000058001f000307f4f9002304000a04d65f0800010002010002170003800500000099db973b91aa057972513500b0406700912deb5b85932234", 0x3c) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000002d000100000000000000000005000080050011"], 0x1c}], 0x1, 0x0, 0x0, 0x4000045}, 0x300) socket(0x1, 0x803, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r8, 0x403c5404, &(0x7f00000005c0)={{0xffffffffffffffff, 0x0, 0x7, 0x1, 0x6}, 0x80000000, 0x8b88}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffe51, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r12 = syz_io_uring_setup(0x520a, &(0x7f0000000400)={0x0, 0x2b5d, 0x20, 0x2, 0x339}, &(0x7f0000000180), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000fea000/0x13000)=nil, 0x13000, 0x2000002, 0x10010, r12, 0x0) getsockname$packet(r6, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000540)=0x14) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="adffa88800000000140012800b0001006d616373656300002a00028008000500", @ANYRES32=r13, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r13, @ANYBLOB="e0a13e609286f53e06000000e5050200"], 0x44}}, 0x8000) 7.264632558s ago: executing program 9 (id=7741): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socket$kcm(0xf, 0x3, 0x2) syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) socket$can_raw(0x1d, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) syz_io_uring_setup(0x94e, &(0x7f0000000400)={0x0, 0x4bdd, 0x20}, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x4000000000, 0x7, 0xffffffffeffffffd, 0x909b}, 0x0, &(0x7f00000002c0)={0x8a, 0xfffffffffffffffe, 0x0, 0x9, 0x0, 0x0, 0x7509, 0xfffffffffffffff5}, 0x0, 0x0) sendto$inet6(r2, &(0x7f0000000100)="15", 0x1, 0x1, &(0x7f0000000140)={0xa, 0x4e23, 0x7ff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}, 0x1c) sendto$inet6(r2, &(0x7f00000001c0)="e3", 0x1, 0x20000000, &(0x7f0000000040)={0xa, 0x4e24, 0xaf6, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xffff0001}, 0x1c) shutdown(r2, 0x1) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_io_uring_setup(0x49b, &(0x7f0000000200)={0x0, 0x4661, 0x400, 0x7, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0x7ff, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x4, 0x28ba1b42, 0x0}) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r7, 0x4048ae9b, &(0x7f0000000080)={0xe0003, 0x0, {[0xffffffffffffffff, 0x1f8, 0x83, 0xffffffffefffff15, 0x3, 0x4, 0x4, 0x4]}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x4498bda7e2139f51, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000002080)={0xc, {"a2e3ad21ed0d52f91b5d390887f70e06d038e7ff7fc6e5539b3272298b089b07081b4d090890e0878f0e1ac6e7049b3366959bfc9a240d2567f3988f7ef319520100ffe8d178708c523c921b1b9b39070d075d0936cd3b78130d9b61d8e809ea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb056d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498be0800000000000000f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6efcffac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ec126c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b8247068ae949ed06e288e810bac9c76600025e19c9000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c198045651cf4778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdc80c47ee4f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78ff95b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af0000807e0000000002d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c5409711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b4051db55e0510a6e4114a53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e24919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a6d8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f00000000000000000000b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d53588a0f9455e8f8d2ab2242729251a4523a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d664130bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7899484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ea4cd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f031755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb24ee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) 6.868051675s ago: executing program 3 (id=7742): r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) writev(r3, &(0x7f0000000640)=[{&(0x7f0000000200)="9c", 0x1}], 0x1) ioctl$BLKZEROOUT(r3, 0x127f, &(0x7f0000000100)={0xa00, 0xa00}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_emit_ethernet(0x116, &(0x7f0000000380)={@multicast, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "70eae4", 0xe0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, @private2={0xfc, 0x2, '\x00', 0x1}, {[@routing={0x0, 0x0, 0x5}, @hopopts={0x3a, 0x19, '\x00', [@pad1, @ra={0x5, 0x2, 0x268}, @generic={0xf, 0xc0, "614ccb56dd684a71816467683dafdf84e26d48a952d0a41b15a34cc14fc4afe6e6a7d5e12cfd9bd459c39cd719c23f6d598f7f64dd51c2ba4074512f221e2dd496cb58523bbdb9136a2bdb420018931dc265824cb6df54d732b7a865954f051df4c90941872bc4d0224431e01afd5e5545fa4f350b8ffa4c4ce0dbd58ee4fec61205d64ec94a1d8c649b2eac33cd561dfc5aa22cd70e0ce01025b7492cd77c6d449d192949646977d6b9b6af1e3d1970ac2bffc8fb620c602cba640fcf454820"}]}]}}}}}, 0x0) r4 = openat$sequencer2(0xffffff9c, &(0x7f0000000080), 0x143240, 0x0) ioctl$SNDCTL_SEQ_NRMIDIS(r4, 0xc0045103, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000001680)=@raw={'raw\x00', 0x3c1, 0x3, 0x2dc, 0x0, 0x111, 0x4b4, 0xec, 0xd4feffff, 0x214, 0x202, 0x225, 0x214, 0x278, 0x3, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0xfc}, @empty, [], [], 'veth1_vlan\x00', 'team_slave_0\x00'}, 0x0, 0xa4, 0xec}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x81, 'syz1\x00'}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, [], [0x0, 0xffffffff], 'veth1_to_hsr\x00', 'erspan0\x00'}, 0x0, 0xe0, 0x128, 0x0, {}, [@common=@unspec=@limit={{0x3c}, {0x0, 0x8000000}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xa, 'syz1\x00', {0x7f}}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x338) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000340), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e23, @empty}, 0x10) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, {0xa, 0x0, 0x0, @empty}, 0xffa4}, 0x5c) 6.119454239s ago: executing program 6 (id=7743): r0 = socket$packet(0x11, 0x3, 0x300) r1 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000004001000ffff00000b00000001000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/18], 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, r2, 0x0, 0x41}, 0x38) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) ppoll(&(0x7f0000000040)=[{r3, 0x5408}], 0x1, &(0x7f00000000c0)={0x0, 0x3938700}, 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r1, 0xc05c6104, &(0x7f00000000c0)={"a8920b3e", 0x0, 0x6, 0x2, 0x0, 0x0, "f700", '\x00', "0100", "fccfffff", ["50d5c2a7c5ae5cace40000b6", "808e88e2e9ffffbdae00", "0c436d743c97c443084000", "ff81000000008000"]}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000080)=0x81, 0x43) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00', 0x0}) unshare(0x2040400) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x3c, r6, 0x1, 0x0, 0xfffffffc, {}, [@ETHTOOL_A_RINGS_RX={0x8}, @ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0xd}]}, 0x3c}}, 0x0) r7 = socket$igmp(0x2, 0x3, 0x2) getsockopt$MRT(r7, 0x0, 0xd1, 0x0, 0x0) sendto$packet(r0, &(0x7f0000000180)="0b036800e0ff64000200475400f6a13bb1000000080088474803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x0, r4}, 0x14) 5.686932115s ago: executing program 8 (id=7744): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r1, 0x1, 0xe, 0x0, &(0x7f00000000c0)) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x2c, &(0x7f0000000180), 0x4) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000240), 0x4) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r2, 0xc0096616, &(0x7f0000000040)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x42, &(0x7f00000002c0)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x34, 0x0, 0x20, 0xfc, 0x2, 0x0, @rand_addr=0x1c, @multicast1=0xe0000300, {[@end]}}, @dest_unreach={0x3, 0x6, 0x0, 0x0, 0xfa, 0x9, {0x5, 0x4, 0x0, 0x1c, 0xfff6, 0x65, 0x5, 0x1, 0x4, 0x3, @private=0xa010102, @local}}}}}}, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) fcntl$dupfd(r2, 0x0, r2) setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, &(0x7f00000000c0)={@multicast1=0x1c, @empty=0xe0000300, 0x0, "8a79348df081496d0420922f45a71c1daa8b610468cd140526c41efcd3a4a422", 0x3, 0x1, 0x85}, 0x3c) 5.432014808s ago: executing program 6 (id=7745): openat$null(0xffffff9c, &(0x7f0000000040), 0x8000, 0x0) add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4004) socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) keyctl$setperm(0x5, 0x0, 0x52b242d) keyctl$search(0xa, 0x0, &(0x7f0000000240)='keyring\x00', &(0x7f0000000280)={'syz', 0x3}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bind$qrtr(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) keyctl$instantiate(0xc, 0x0, 0x0, 0x1c, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/bus/input/devices\x00', 0x0, 0x0) r3 = epoll_create(0x6) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)={0x80000000}) io_setup(0x8, &(0x7f0000004200)=0x0) io_submit(r4, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}, 0x2, 0x2}}, 0x26) close_range(r1, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8a002, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000040)={0x4, 0xffffffff, 0xfffffff8, 0xfffffffc}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000057e89720f20c506206100102030109021200010000000009040000003afdb800"], 0x0) 5.335894982s ago: executing program 8 (id=7746): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000240)={@hyper}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000af5ff6c783d49368da9408f120c0b640997000000007a300000000000000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a300000000008000540000000ffffffff80280001800e000100636f6e6e6c696d697400000014000280080002400000000108000140000000080800034000000110140000001000010000000000000000000084000a"], 0xb8}}, 0x20050800) sendto$inet6(r4, &(0x7f0000000280)='g', 0x1, 0x4008891, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f00000000c0)={0xb, 0x4, 0xfe, 0x2, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x5}, 0xe) setsockopt$sock_int(r4, 0x1, 0x28, &(0x7f0000000000)=0xf66, 0x4) shutdown(r4, 0x1) fsopen(0x0, 0x0) socket$kcm(0x29, 0x2, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000080)={0x28, 0x0, 0x2711}, 0x10) listen(r6, 0x0) pselect6(0x40, &(0x7f0000000300)={0x0, 0x3ffffffffffffffc, 0xe9ef, 0x100, 0x200000000, 0x200010, 0xfffc, 0x4}, &(0x7f0000000580)={0xa, 0xfffffffffffffffd, 0x4, 0x5, 0xffffffffffffffff, 0xffeffffffffffffa, 0x4, 0x6}, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x282a2, 0x0) 5.185258888s ago: executing program 9 (id=7747): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{}, &(0x7f0000000480), &(0x7f0000000500)}, 0x20) ioctl$USBDEVFS_DISCSIGNAL(0xffffffffffffffff, 0x8010550e, &(0x7f0000000440)={0xd, &(0x7f00000083c0)="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"}) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000000c0)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r5, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000004200)={0x50, 0x0, r6, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x503, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14615}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e21}]}}}]}, 0x3c}}, 0x4000) syz_fuse_handle_req(r5, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x50) getdents64(r7, 0x0, 0x0) write$FUSE_NOTIFY_DELETE(r5, &(0x7f0000000080)={0x2a, 0x6, 0x0, {0x1, 0x200000000000, 0x1, 0x2, '\x00', 0x8}}, 0x2a) syz_fuse_handle_req(r5, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001040)=ANY=[@ANYBLOB="b0000000000000000000000000000000000000000020000000000000000000000000000000000000020000000000000000002000"/62, @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="0021000000000000467700000000000000000000000000000000000001"], 0x0, 0x0, 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@deltfilter={0x2c, 0x2d, 0x300, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0xc, 0x2}, {0x8}, {0x1, 0xa}}, [@TCA_RATE={0x6, 0x5, {0x71, 0x3}}]}, 0x2c}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)=ANY=[@ANYRESDEC=r2], 0x1c}}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0x8417f, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000088000000060a010400000000000000000100000008000b400000000060000480280001800e000100636f6e6e6c696d69740000001400028008000140000006e508000240000000003400018008000100636d7000280002800800024000000001140003800400010009000100efbb17b799000000080001400000000e0900010073797a30"], 0xfc}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000380)={0x0, 0x0}) 5.020837933s ago: executing program 4 (id=7748): syz_emit_ethernet(0x32, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x10, 0x0, @opaque='\x00\x00\x00\x00\x00\x00\x00\x00'}}}}}, 0x0) 4.941012558s ago: executing program 4 (id=7749): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'hsr0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000000440)=[{{&(0x7f0000000000)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, 0x0, 0x0, &(0x7f0000000400)=[@ip_pktinfo={{0x18, 0x0, 0x8, {r2, @remote, @remote}}}], 0x18, 0x31}}], 0x1, 0x488d0) 4.816955621s ago: executing program 4 (id=7750): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) io_setup(0x4fb, &(0x7f00000009c0)=0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) io_submit(r0, 0x2, &(0x7f00000001c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x40, r1, &(0x7f0000000040)='B', 0x1, 0x4, 0x0, 0x997f18199400164}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0xfffb, r1, 0x0, 0x0, 0xc}]) (fail_nth: 8) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}], 0x1}], 0x1, 0x40800) 4.628862182s ago: executing program 3 (id=7751): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts-cbc-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000440)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b3", 0x40}], 0x1, &(0x7f0000000380)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x40800) recvmmsg$unix(r1, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000680)=""/78, 0x4e}], 0x1}}, {{&(0x7f0000000080), 0x6e, &(0x7f0000000200)=[{&(0x7f0000000180)=""/125, 0x7d}, {&(0x7f0000000540)=""/225, 0xe1}, {&(0x7f0000000000)=""/29, 0x1d}], 0x3, &(0x7f0000000700)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x84}}], 0x2, 0x40010000, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000404c054b0200000000000109022400010000000009040000010300000009210800000122f8040905a103"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) 2.548555311s ago: executing program 3 (id=7752): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000000)={0x1, 0x4, 0x0, 0x8, 0x3e, 0x9, 0xec, 0xa0, 0x4, 0x3, 0x0, 0x3, 0x6, 0x1}, 0xe) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e1f, @local}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000180)={r3, 0x417}, &(0x7f0000000240)=0x8) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x1000) r4 = syz_open_dev$vim2m(&(0x7f0000000180), 0x2, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r4, 0xc0f8565c, &(0x7f0000001640)={0x80000001, 0x1, 0x1, {0x0, @sliced={0x17f, [0x7, 0x7, 0x0, 0x4, 0xb, 0xf6, 0x7, 0x7, 0x3, 0x0, 0x2, 0x9, 0x6, 0x6, 0x81, 0xe9b, 0xfff6, 0xaa98, 0x2, 0x4, 0x5, 0x5, 0xffff, 0x80, 0x7, 0xa1, 0xfffb, 0x2, 0xff, 0xffff, 0x8, 0xff48, 0xef46, 0x9, 0x7, 0x8, 0x10, 0xb, 0x8, 0x2, 0x7, 0xff68, 0x6, 0x9, 0x7, 0x7, 0xc78, 0x3]}}, 0x6}) r5 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, 0x0) ioctl$IOMMU_IOAS_COPY(r5, 0x3b83, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000c40)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x0, 0x2, @initdev={0xfe, 0x88, '\x00', 0x4, 0x0}, 0x6, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xc}}], 0x1, 0x20004080) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000015c0)={0xffffffffffffffff, 0x0, 0x760, 0xd8, &(0x7f0000000400)="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", &(0x7f0000001400)=""/216, 0xfff, 0x0, 0x0, 0x77, 0x0, &(0x7f0000001540)="dd0a1f9acb2c454cae388845b6e68ddb621db5013c9dc39a0309ed1c7d8d8e63049c3d2233af3c14938569859c9b1054eba5654de0de4646ad674591d7b85d26ec8a99698143c60b907e6243ce32b3a249791e0d412896acc5e95d8fb11e74c4ab91dfa03ecadec621b0c46d9d12d5778ed84a1c5310a4", 0x2, 0x0, 0x2}, 0x4c) sendfile(r6, 0xffffffffffffffff, &(0x7f00000000c0)=0x58, 0xa) semget(0x0, 0x4, 0x326) r7 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000280)={0x1, 0x2}, 0x8) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x41, &(0x7f00000003c0)=0x491b, 0x4) sendmmsg$inet6(r7, &(0x7f00000002c0)=[{{&(0x7f0000000200)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c, 0x0}}], 0x1, 0x4004000) 1.060809109s ago: executing program 3 (id=7753): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) recvfrom(r2, 0x0, 0x0, 0x2120, 0x0, 0x0) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) close(0x4) r3 = socket(0x2000000000000021, 0x2, 0x2) shutdown(r3, 0x2) r4 = syz_io_uring_setup(0x8d2, &(0x7f0000000700)={0x0, 0x0, 0x3010}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000), &(0x7f00000000c0)=0xc) io_uring_enter(r4, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) 793.14002ms ago: executing program 8 (id=7754): r0 = socket(0x10, 0x3, 0x1) syz_usb_connect$uac1(0x3, 0xa6, &(0x7f0000000280)=ANY=[@ANYBLOB="12010002000000406b1d010140000102030109029400030104a0090904000000010100000a2401f7ff07020102092403030003030904010000010200000904010101010200000924020182042910000c240201090407065d7b68d5090501090004ffc803072501000405000904020000010200000904020101010200000b240201060108013a388207240101c0050009058209500005084107250182fe0700"], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}) connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1, 0x400000}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000000), 0x4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f"], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f00000003c0)=ANY=[@ANYRESDEC, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080400000000925e85000000010000009500000000"], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) request_key(&(0x7f0000000040)='user\x00', 0x0, &(0x7f0000000140)='\\\\@[*#)\x00', 0xfffffffffffffffe) prlimit64(0x0, 0xa, &(0x7f00000000c0)={0x8, 0xb8a}, &(0x7f0000000100)) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000040)={0x7f1, 0x85, 0xefcf, 0xfffffff8, 0x0, "f06f00", 0x6, 0x2}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0x8, &(0x7f0000000240)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffcf, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0xc6c5}, 0x94) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(r3, 0x40304580, &(0x7f0000000b40)={0x56, 0x0, 0x4007, {0x0, 0x1}, {0x46, 0x400}, @rumble={0xdd, 0x5}}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_async', 0x42, 0x0) openat$audio1(0xffffff9c, &(0x7f00000001c0), 0x8200, 0x0) io_setup(0x20, &(0x7f00000000c0)=0x0) io_submit(r4, 0x0, &(0x7f0000000300)) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000"], 0x50) write$char_usb(r3, &(0x7f0000000040)="e2", 0x2250) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) preadv(r5, &(0x7f00000000c0)=[{&(0x7f0000001500)=""/102386, 0x18ff2}], 0x1, 0x0, 0x3) unshare(0x8040400) getgroups(0x0, 0x0) 702.615408ms ago: executing program 4 (id=7755): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x10, 0xffffffffffffffff, 0xffffc000) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x2, 0xf8af735949d586db) ioctl$SCSI_IOCTL_SYNC(r0, 0x4) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) io_uring_setup(0x7a5c, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(r3, 0x0, 0x4000004) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) io_setup(0x8, &(0x7f0000000040)) r4 = openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$nvram(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_STREAMON(r6, 0x40045612, &(0x7f00000001c0)) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r5) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac14140f00000000000000001400020002000000ffffffff00000000000000000d0001007564703a7379"], 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100280000000000000002000000200001800d0001007564703a73797a32"], 0x34}}, 0x0) 697.282782ms ago: executing program 6 (id=7756): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x60240) creat(&(0x7f0000000040)='./file0\x00', 0x4b) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c678c6f75705f69643d", @ANYRESDEC=0x0, @ANYRES8=r0]) write$FUSE_NOTIFY_DELETE(r2, &(0x7f0000000080)={0x2a, 0x6, 0x0, {0x1, 0x200000000000, 0x1, 0x2, '\x00', 0x8}}, 0x2a) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000bc0), 0xffffffffffffffff) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) unshare(0x8000000) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='numa_maps\x00') r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) syz_open_dev$dri(&(0x7f00000002c0), 0x12c5, 0x80c002) writev(r3, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) write$binfmt_aout(r3, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}}, @NFT_MSG_NEWSETELEM={0x14, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7}}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x70}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x18, &(0x7f00000005c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 592.770469ms ago: executing program 9 (id=7757): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000140)={0xdd, 0x4, 0x3, 0x21, 0x0, 0x9, 0xe8, 0xa0, 0x7, 0x3, 0x7, 0x3, 0x86, 0x21}, 0xe) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e1f, @local}]}, &(0x7f0000000180)=0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x2000, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x140, 0x7, 0x6361, 0x5, 0xffffffed, 0x10006}, [@TCA_NETEM_LATENCY64={0xc}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmmsg$inet(r3, &(0x7f0000000440)=[{{&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, &(0x7f00000003c0)=[{&(0x7f00000002c0)="873f4e346a68a6bf26f17f3df11848b0742ee6ac370afb7eb133289a4e918fcd3355a7a812bef5a2de0b366efa603fbcd108241b9876c479c6bdad9f3f10916a474a1ca87b8da98d7a8f92e70f6b4f76a23310449068c061ae256ebf4805978a6f412c25367fe1b8945171a708d8a05f460a356a2fbc53c87c7ab3bdbc2f17c00060fe0801e1c5d55c2f17b6f7fda8cb95a536fbbcaa55069292ba290fe2a312f55da23b55ea21719110be33523747b1e92821697301276aea04a182a5890918a768f70d45d2eb0baa5b55a87b63fa08", 0xd0}], 0x1, &(0x7f0000000400)=[@ip_pktinfo={{0x18, 0x0, 0x8, {r5, @remote, @multicast2}}}], 0x18}}], 0x1, 0x4800) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001480)={{0x14, 0x10, 0x1, 0x0, 0x84000000, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x50, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x24, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0x4}]}]}], {0x14, 0x11, 0x7c, 0x0, 0x0, {0x1}}}, 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000040)={r2, 0x7, 0x6, 0xb}, 0x10) listen(r0, 0x3) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000200)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x81, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10, 0xca, 0x0, 0x1000}}}}}}, 0x0) 306.320494ms ago: executing program 9 (id=7758): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000103000000000000000000000000cfbd00000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) 110.976659ms ago: executing program 3 (id=7759): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xef, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) 0s ago: executing program 9 (id=7760): socket$inet_smc(0x2b, 0x1, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000041c0)={0x2020, 0x0, 0x0}, 0x2020) unshare(0x24020400) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) pselect6(0x40, &(0x7f0000000100)={0x3000000, 0x0, 0x0, 0x0, 0x800, 0x0, 0x100000}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a9}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) kernel console output (not intermixed with test programs): ] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 9059, setting to 1024 [ 2447.733106][T24462] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 2447.828645][T24462] usb 10-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 2447.832709][T24481] usb 4-1: USB disconnect, device number 38 [ 2447.859074][T24462] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2447.888334][T24462] usb 10-1: Product: syz [ 2447.892649][T24462] usb 10-1: Manufacturer: syz [ 2447.908232][T24462] usb 10-1: SerialNumber: syz [ 2448.114127][T24462] usb 10-1: config 0 descriptor?? [ 2448.149960][ T36] sd 1:0:0:0: Attached scsi generic sg1 type 0 [ 2448.316700][T24462] input: KB Gear Tablet as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/input/input177 [ 2448.350368][T29511] sd 1:0:0:0: [sdb] Test Unit Ready failed: Result: hostbyte=DID_NO_CONNECT driverbyte=DRIVER_OK [ 2448.423844][T24478] gspca_zc3xx: reg_w_i err -110 [ 2448.434748][ T3553] sd 1:0:0:1: [sdc] Test Unit Ready failed: Result: hostbyte=DID_NO_CONNECT driverbyte=DRIVER_OK [ 2448.484234][ T3553] sd 1:0:0:1: [sdc] Read Capacity(10) failed: Result: hostbyte=DID_NO_CONNECT driverbyte=DRIVER_OK [ 2448.508628][ T36] sd 1:0:0:1: Attached scsi generic sg2 type 0 [ 2448.537561][T29511] sd 1:0:0:0: [sdb] Read Capacity(10) failed: Result: hostbyte=DID_NO_CONNECT driverbyte=DRIVER_OK [ 2448.651359][ T3553] sd 1:0:0:1: [sdc] Sense not available. [ 2448.668170][T29511] sd 1:0:0:0: [sdb] Sense not available. [ 2448.712636][T29511] sd 1:0:0:0: [sdb] 0 512-byte logical blocks: (0 B/0 B) [ 2448.732610][ T3553] sd 1:0:0:1: [sdc] 0 512-byte logical blocks: (0 B/0 B) [ 2448.784221][T29511] sd 1:0:0:0: [sdb] 0-byte physical blocks [ 2448.797401][ T3553] sd 1:0:0:1: [sdc] 0-byte physical blocks [ 2448.851673][ T3553] sd 1:0:0:1: [sdc] Test WP failed, assume Write Enabled [ 2448.878068][T29511] sd 1:0:0:0: [sdb] Write Protect is off [ 2448.928544][T29511] sd 1:0:0:0: [sdb] Asking for cache data failed [ 2448.978363][ T3553] sd 1:0:0:1: [sdc] Asking for cache data failed [ 2448.991839][T29511] sd 1:0:0:0: [sdb] Assuming drive cache: write through [ 2449.042401][ T3553] sd 1:0:0:1: [sdc] Assuming drive cache: write through [ 2449.079550][T24478] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 2449.118475][T24478] gspca_zc3xx 7-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 2449.202705][T29511] sd 1:0:0:0: [sdb] Attached SCSI removable disk [ 2449.543562][ T1351] loop6: detected capacity change from 0 to 7 [ 2449.556621][ T3553] sd 1:0:0:1: [sdc] Attached SCSI removable disk [ 2449.585802][ T1351] Dev loop6: unable to read RDB block 7 [ 2449.603174][T31346] sd 1:0:0:1: [sdc] Test Unit Ready failed: Result: hostbyte=DID_NO_CONNECT driverbyte=DRIVER_OK [ 2449.626096][ T1351] loop6: unable to read partition table [ 2449.662134][ T1351] loop6: partition table beyond EOD, truncated [ 2449.716791][ T1351] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 2449.782286][T24462] usb 7-1: USB disconnect, device number 12 [ 2449.851683][ T5201] Dev loop6: unable to read RDB block 7 [ 2449.917960][ T5201] loop6: unable to read partition table [ 2449.934200][ T5201] loop6: partition table beyond EOD, truncated [ 2450.517281][T24482] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 2450.532062][T31397] udevd[31397]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory [ 2450.812021][T24482] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 2450.891445][T24482] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2450.975569][T24482] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2451.035385][T24482] usb 7-1: config 0 interface 0 has no altsetting 0 [ 2451.078161][ T1370] fuse: Unknown parameter 'gŒoup_id' [ 2451.101241][T24482] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2451.161164][T24482] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2451.272272][T24482] usb 7-1: config 0 interface 0 has no altsetting 0 [ 2451.351017][T24482] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2451.385678][T24482] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2451.454466][T24482] usb 7-1: config 0 interface 0 has no altsetting 0 [ 2451.506019][T24482] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2451.557337][T24481] usb 4-1: new full-speed USB device number 39 using dummy_hcd [ 2451.601094][T24482] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2451.641927][T31346] udevd[31346]: inotify_add_watch(7, /dev/sdc, 10) failed: No such file or directory [ 2451.674888][T24479] usb 10-1: USB disconnect, device number 11 [ 2451.694267][ T1370] nvme_fabrics: missing parameter 'transport=%s' [ 2451.710655][T24482] usb 7-1: config 0 interface 0 has no altsetting 0 [ 2451.712251][ T1370] nvme_fabrics: missing parameter 'nqn=%s' [ 2451.987405][T24482] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2452.018520][T24482] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2452.046893][T24482] usb 7-1: config 0 interface 0 has no altsetting 0 [ 2452.086323][T24482] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2452.141117][T24482] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2452.188271][T24482] usb 7-1: config 0 interface 0 has no altsetting 0 [ 2452.208510][ T1378] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2452.232654][T24482] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2452.258011][T24482] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2452.294072][T24482] usb 7-1: config 0 interface 0 has no altsetting 0 [ 2452.341877][T24482] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2452.377598][T24482] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2452.421064][T24482] usb 7-1: config 0 interface 0 has no altsetting 0 [ 2452.477065][T24482] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 2452.513357][T24482] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 2452.550870][T24482] usb 7-1: Product: syz [ 2452.574556][T24482] usb 7-1: Manufacturer: syz [ 2452.601094][T24482] usb 7-1: SerialNumber: syz [ 2452.658115][T24482] usb 7-1: config 0 descriptor?? [ 2452.719663][T24482] yurex 7-1:0.0: USB YUREX device now attached to Yurex #0 [ 2452.942487][T24482] usb 7-1: USB disconnect, device number 13 [ 2452.995330][T24482] yurex 7-1:0.0: USB YUREX #0 now disconnected [ 2453.148084][ T1387] syzkaller0: create flow: hash 1076349285 index 1 [ 2453.994072][ T1398] bridge0: port 3(gretap0) entered blocking state [ 2454.016570][ T1398] bridge0: port 3(gretap0) entered disabled state [ 2454.040311][ T1398] gretap0: entered allmulticast mode [ 2454.060025][ T1398] gretap0: entered promiscuous mode [ 2454.084999][T29511] syzkaller0: tun_net_xmit 76 [ 2454.111583][T29511] syzkaller0: tun_net_xmit 48 [ 2454.121574][T24479] syzkaller0: tun_net_xmit 76 [ 2454.182788][ T1383] syzkaller0: delete flow: hash 1076349285 index 1 [ 2454.254847][T24481] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 2454.285373][T24481] usb 4-1: can't read configurations, error -71 [ 2458.805403][ T1401] tipc: New replicast peer: 255.255.255.255 [ 2458.814979][ T1401] tipc: Enabled bearer , priority 10 [ 2458.847777][ T1407] : entered promiscuous mode [ 2459.143468][ T1503] netlink: 'syz.9.7296': attribute type 1 has an invalid length. [ 2459.199531][ T1503] bond2: entered promiscuous mode [ 2459.206247][ T1503] 8021q: adding VLAN 0 to HW filter on device bond2 [ 2459.351643][ T1509] fuse: Unknown parameter 'gŒoup_id' [ 2459.392953][ T1503] netlink: 28 bytes leftover after parsing attributes in process `syz.9.7296'. [ 2459.570435][ T1519] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7298'. [ 2459.707743][ T1503] bond2: entered allmulticast mode [ 2459.713118][ T1512] nvme_fabrics: missing parameter 'transport=%s' [ 2459.722590][ T1512] nvme_fabrics: missing parameter 'nqn=%s' [ 2460.278203][ T1492] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 2460.427547][ T1459] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 2460.511849][ T1492] usb 4-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 2460.522223][ T1492] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2460.579917][ T1492] usb 4-1: Product: syz [ 2460.599307][ T1492] usb 4-1: Manufacturer: syz [ 2460.601424][ T1459] usb 10-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 2460.604050][ T1492] usb 4-1: SerialNumber: syz [ 2460.674727][ T1459] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2460.752631][ T1492] usb 4-1: config 0 descriptor?? [ 2460.760581][ T1459] usb 10-1: Product: syz [ 2460.783535][ T1459] usb 10-1: Manufacturer: syz [ 2460.800911][ T1492] i2c-tiny-usb 4-1:0.0: version 6d.cc found at bus 004 address 041 [ 2460.823792][ T1459] usb 10-1: SerialNumber: syz [ 2460.877880][ T1459] usb 10-1: config 0 descriptor?? [ 2460.916765][ T1459] ch341 10-1:0.0: ch341-uart converter detected [ 2461.614631][ T1492] i2c i2c-1: failure reading functionality [ 2461.636823][ T1492] i2c i2c-1: connected i2c-tiny-usb device [ 2461.648291][ T1492] usb 4-1: USB disconnect, device number 41 [ 2462.092781][ T1526] netlink: 12 bytes leftover after parsing attributes in process `syz.9.7302'. [ 2462.561482][ T1459] usb 10-1: failed to send control message: -71 [ 2462.584109][ T1459] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 2462.689843][ T1459] usb 10-1: USB disconnect, device number 12 [ 2462.785157][ T1550] syzkaller1: entered promiscuous mode [ 2462.798030][ T1550] syzkaller1: entered allmulticast mode [ 2462.977835][ T1459] ch341 10-1:0.0: device disconnected [ 2464.206423][ T1557] netlink: 24 bytes leftover after parsing attributes in process `syz.8.7309'. [ 2464.699052][ T1571] tipc: New replicast peer: 255.255.255.255 [ 2464.708790][ T1571] tipc: Enabled bearer , priority 10 [ 2464.735593][ T1571] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7310'. [ 2464.877962][ T1492] usb 9-1: new high-speed USB device number 47 using dummy_hcd [ 2465.175912][ T1578] netlink: 48 bytes leftover after parsing attributes in process `syz.9.7316'. [ 2465.193463][ T1578] netlink: 48 bytes leftover after parsing attributes in process `syz.9.7316'. [ 2465.288396][ T1492] usb 9-1: Using ep0 maxpacket: 8 [ 2465.407141][ T1492] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 2465.479815][ T1492] usb 9-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 2466.071761][ T1492] usb 9-1: New USB device strings: Mfr=241, Product=1, SerialNumber=3 [ 2466.093253][ T1492] usb 9-1: Product: syz [ 2466.102339][ T1581] netlink: 'syz.3.7317': attribute type 1 has an invalid length. [ 2466.111341][ T1492] usb 9-1: Manufacturer: syz [ 2466.128313][ T1492] usb 9-1: SerialNumber: syz [ 2466.149884][ T1492] usb 9-1: config 0 descriptor?? [ 2466.159240][ T1582] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7317'. [ 2466.204565][ T1492] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 2466.329717][ T1581] bond1: entered promiscuous mode [ 2466.402110][ T1581] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2466.426820][ T1588] netlink: 'syz.9.7327': attribute type 2 has an invalid length. [ 2466.448297][ T1582] bond1: entered allmulticast mode [ 2466.589739][ T1591] netlink: 168876 bytes leftover after parsing attributes in process `syz.9.7327'. [ 2467.218620][ T1492] gspca_zc3xx: reg_w_i err -110 [ 2467.828128][ T1492] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 2467.834504][ T1492] gspca_zc3xx 9-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 2467.896363][ T1607] Cannot find del_set index 0 as target [ 2468.676628][ T1494] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 2469.042557][ T1494] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 2469.068487][ T1494] usb 4-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 2469.103558][ T1494] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2469.116471][ T1493] usb 9-1: USB disconnect, device number 47 [ 2469.123488][ T1494] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2469.316025][ T1494] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 2469.466197][ T1494] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 2469.561096][ T1622] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7325'. [ 2469.609542][ T1622] input: syz0 as /devices/virtual/input/input178 [ 2469.656361][ T1626] syzkaller1: entered promiscuous mode [ 2469.668401][ T1626] syzkaller1: entered allmulticast mode [ 2470.329604][ T1459] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 2470.348799][ T1631] tipc: Enabling of bearer rejected, already enabled [ 2470.357946][ T1631] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7328'. [ 2470.618007][ T1459] usb 7-1: Using ep0 maxpacket: 32 [ 2470.788793][ T1459] usb 7-1: config 0 has an invalid interface number: 196 but max is 0 [ 2470.882088][ T1459] usb 7-1: config 0 has no interface number 0 [ 2470.920034][ T1459] usb 7-1: config 0 interface 196 has no altsetting 0 [ 2470.979823][ T1459] usb 7-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 2471.053879][ T1459] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2471.142754][ T1459] usb 7-1: Product: syz [ 2471.161710][ T1459] usb 7-1: Manufacturer: syz [ 2471.190986][ T1459] usb 7-1: SerialNumber: syz [ 2471.242365][ T1459] usb 7-1: config 0 descriptor?? [ 2471.550776][ T1629] netlink: 28 bytes leftover after parsing attributes in process `syz.6.7330'. [ 2471.572840][ T1629] netlink: 'syz.6.7330': attribute type 7 has an invalid length. [ 2471.626618][ T1629] netlink: 20 bytes leftover after parsing attributes in process `syz.6.7330'. [ 2471.742659][ T1459] ipheth 7-1:0.196: Unable to find endpoints [ 2471.782750][ T1459] usb 7-1: USB disconnect, device number 14 [ 2471.957368][ T1458] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 2471.967292][ T1493] usb 4-1: USB disconnect, device number 42 [ 2472.001929][ T1611] delete_channel: no stack [ 2472.157796][ T1458] usb 10-1: Using ep0 maxpacket: 8 [ 2472.170005][ T1458] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2472.201247][ T1458] usb 10-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 2472.232050][ T1458] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2472.257811][ T1458] usb 10-1: Product: syz [ 2472.262269][ T1458] usb 10-1: Manufacturer: syz [ 2472.287271][ T1458] usb 10-1: SerialNumber: syz [ 2472.304803][ T1458] usb 10-1: config 0 descriptor?? [ 2472.355306][ T1458] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 2472.404134][ T1458] usb 10-1: selecting invalid altsetting 1 [ 2472.827882][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 2472.834320][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 2472.944075][ T1659] netlink: 'syz.3.7341': attribute type 1 has an invalid length. [ 2472.978681][ T1660] syzkaller1: entered promiscuous mode [ 2473.019695][ T1661] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7341'. [ 2473.031306][ T1660] syzkaller1: entered allmulticast mode [ 2473.430883][ T1659] bond2: entered promiscuous mode [ 2473.436759][ T1659] 8021q: adding VLAN 0 to HW filter on device bond2 [ 2473.452487][ T1661] bond2: entered allmulticast mode [ 2474.098762][ T1685] IPv6: NLM_F_CREATE should be specified when creating new route [ 2474.148358][ T1686] fuse: Bad value for 'fd' [ 2474.686246][ T1664] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2474.767484][ T1664] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2474.784017][ T1664] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2474.856137][ T1664] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 2474.980698][ T1664] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2475.007376][ T1664] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 2475.024433][ T1664] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 2475.035060][ T1664] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 2475.396857][ T1695] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7347'. [ 2475.692132][T26310] Bluetooth: hci4: command 0x0c1a tx timeout [ 2476.214984][ T1698] program syz.4.7348 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2476.482494][ T1701] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7350'. [ 2476.808537][T20517] Bluetooth: hci3: command 0x0405 tx timeout [ 2476.814911][T26310] Bluetooth: hci0: command 0x0406 tx timeout [ 2477.047800][T26310] Bluetooth: hci5: command 0x0419 tx timeout [ 2477.053935][T20517] Bluetooth: hci1: command 0x0406 tx timeout [ 2477.086390][ T1704] tipc: Enabling of bearer rejected, already enabled [ 2477.095764][ T1713] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7352'. [ 2477.116109][ T1704] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7349'. [ 2477.381443][ T1459] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 2477.498996][ T1718] syzkaller1: entered promiscuous mode [ 2477.504494][ T1718] syzkaller1: entered allmulticast mode [ 2477.578039][ T1459] usb 5-1: Using ep0 maxpacket: 16 [ 2477.610995][ T1459] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2477.649915][ T1459] usb 5-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 2477.696406][ T1459] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2477.760409][ T1459] usb 5-1: config 0 descriptor?? [ 2478.224394][ T1461] usb 10-1: USB disconnect, device number 13 [ 2478.258326][ T1714] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2478.273422][ T1714] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2478.284155][ T1714] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2478.297919][ T1714] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2478.318111][ T1714] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2478.330263][ T1714] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2478.888736][T26310] Bluetooth: hci0: command 0x0406 tx timeout [ 2478.996939][ T1459] kye 0003:0458:5010.007C: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 2479.008469][ T1459] kye 0003:0458:5010.007C: unknown main item tag 0x0 [ 2479.015191][ T1459] kye 0003:0458:5010.007C: unknown main item tag 0x0 [ 2479.022507][ T1459] kye 0003:0458:5010.007C: unknown main item tag 0x0 [ 2479.032291][ T1459] kye 0003:0458:5010.007C: unknown main item tag 0x0 [ 2479.052562][ T1459] kye 0003:0458:5010.007C: unknown main item tag 0x0 [ 2479.074238][ T1459] kye 0003:0458:5010.007C: hidraw0: USB HID v0.00 Device [HID 0458:5010] on usb-dummy_hcd.4-1/input0 [ 2479.114107][ T1459] kye 0003:0458:5010.007C: tablet-enabling feature report not found [ 2479.127312][T26310] Bluetooth: hci5: command 0x0419 tx timeout [ 2479.140220][T26310] Bluetooth: hci1: command 0x0406 tx timeout [ 2479.162379][ T1459] kye 0003:0458:5010.007C: tablet enabling failed [ 2479.397395][ T30] audit: type=1326 audit(1761429252.609:3973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1705 comm="syz.4.7351" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x0 [ 2479.418913][ C1] vkms_vblank_simulate: vblank timer overrun [ 2479.491737][ T1724] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7351'. [ 2479.529182][ T1458] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 2479.658345][ T1459] usb 9-1: new high-speed USB device number 48 using dummy_hcd [ 2479.674936][ T1738] FAULT_INJECTION: forcing a failure. [ 2479.674936][ T1738] name failslab, interval 1, probability 0, space 0, times 0 [ 2479.694436][ T1738] CPU: 1 UID: 0 PID: 1738 Comm: syz.3.7362 Not tainted syzkaller #0 PREEMPT(full) [ 2479.694474][ T1738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2479.694489][ T1738] Call Trace: [ 2479.694498][ T1738] [ 2479.694509][ T1738] dump_stack_lvl+0x189/0x250 [ 2479.694555][ T1738] ? __pfx____ratelimit+0x10/0x10 [ 2479.694584][ T1738] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2479.694615][ T1738] ? __pfx__printk+0x10/0x10 [ 2479.694645][ T1738] ? __pfx___might_resched+0x10/0x10 [ 2479.694676][ T1738] should_fail_ex+0x414/0x560 [ 2479.694715][ T1738] should_failslab+0xa8/0x100 [ 2479.694740][ T1738] kmem_cache_alloc_lru_noprof+0x79/0x6d0 [ 2479.694772][ T1738] ? __d_alloc+0x36/0x7a0 [ 2479.694804][ T1738] __d_alloc+0x36/0x7a0 [ 2479.694835][ T1738] d_alloc_parallel+0xe1/0x1610 [ 2479.694882][ T1738] ? __lock_acquire+0xab9/0xd20 [ 2479.694907][ T1738] ? __pfx_d_alloc_parallel+0x10/0x10 [ 2479.694940][ T1738] ? __raw_spin_lock_init+0x45/0x100 [ 2479.694973][ T1738] ? __init_waitqueue_head+0xa9/0x150 [ 2479.695009][ T1738] __lookup_slow+0x116/0x3d0 [ 2479.695039][ T1738] ? __pfx___lookup_slow+0x10/0x10 [ 2479.695063][ T1738] ? lookup_slow+0x46/0x70 [ 2479.695104][ T1738] ? down_read+0x1ad/0x2e0 [ 2479.695139][ T1738] lookup_slow+0x53/0x70 [ 2479.695166][ T1738] link_path_walk+0x935/0xea0 [ 2479.695208][ T1738] path_lookupat+0x97/0x430 [ 2479.695243][ T1738] filename_lookup+0x212/0x570 [ 2479.695266][ T1738] ? __lock_acquire+0xab9/0xd20 [ 2479.695293][ T1738] ? __pfx_filename_lookup+0x10/0x10 [ 2479.695346][ T1738] ? strncpy_from_user+0x150/0x290 [ 2479.695384][ T1738] ? getname_flags+0x1e5/0x540 [ 2479.695411][ T1738] do_readlinkat+0xd9/0x500 [ 2479.695442][ T1738] ? __pfx_do_readlinkat+0x10/0x10 [ 2479.695482][ T1738] ? __pfx_ksys_write+0x10/0x10 [ 2479.695522][ T1738] __ia32_sys_readlinkat+0x9a/0xb0 [ 2479.695558][ T1738] __do_fast_syscall_32+0xb6/0x2b0 [ 2479.695591][ T1738] ? lockdep_hardirqs_on+0x9c/0x150 [ 2479.695625][ T1738] do_fast_syscall_32+0x34/0x80 [ 2479.695657][ T1738] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2479.695685][ T1738] RIP: 0023:0xf705d539 [ 2479.695705][ T1738] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2479.695725][ T1738] RSP: 002b:00000000f544d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000131 [ 2479.695749][ T1738] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000100 [ 2479.695765][ T1738] RDX: 0000000080000540 RSI: 0000000000000048 RDI: 0000000000000000 [ 2479.695780][ T1738] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2479.695794][ T1738] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2479.695808][ T1738] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2479.695842][ T1738] [ 2479.761771][ T1458] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2479.763182][ C1] vkms_vblank_simulate: vblank timer overrun [ 2479.767758][ T1458] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 2480.065786][ T1459] usb 9-1: Using ep0 maxpacket: 8 [ 2480.102007][ T1445] usb 10-1: new full-speed USB device number 14 using dummy_hcd [ 2480.111596][ T1459] usb 9-1: config 179 has an invalid interface number: 65 but max is 0 [ 2480.124077][ T1459] usb 9-1: config 179 has no interface number 0 [ 2480.131745][ T1459] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 2480.143229][ T1459] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 2480.154887][ T1458] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253 [ 2480.168367][ T1459] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2480.180086][ T1459] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 2480.193499][ T1459] usb 9-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 2480.207136][ T1458] usb 7-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 2480.216601][ T1458] usb 7-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 2480.226451][ T1459] usb 9-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 2480.244649][ T1458] usb 7-1: Manufacturer: syz [ 2480.257252][ T1459] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2480.268582][ T1458] usb 7-1: config 0 descriptor?? [ 2480.276346][ T1445] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2480.287396][ T1445] usb 10-1: config 0 has no interfaces? [ 2480.298843][ T1458] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 2480.309429][ T1731] raw-gadget.6 gadget.8: fail, usb_ep_enable returned -22 [ 2480.311980][ T1445] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2480.328928][ T1490] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 2480.335096][ T1445] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2480.346736][ T1445] usb 10-1: Product: syz [ 2480.356998][ T1445] usb 10-1: Manufacturer: syz [ 2480.363151][ T1445] usb 10-1: SerialNumber: syz [ 2480.389663][ T1445] usb 10-1: config 0 descriptor?? [ 2480.489533][ T1490] usb 4-1: Using ep0 maxpacket: 16 [ 2480.511579][ T1490] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 2480.528212][ T1490] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2480.536306][ T1490] usb 4-1: Product: syz [ 2480.562865][ T1490] usb 4-1: Manufacturer: syz [ 2480.578243][ T1490] usb 4-1: SerialNumber: syz [ 2480.609309][ T1490] r8152-cfgselector 4-1: Unknown version 0x0000 [ 2480.615899][ T1490] r8152-cfgselector 4-1: config 0 descriptor?? [ 2480.626525][ T1494] usb 5-1: USB disconnect, device number 61 [ 2480.655648][ T1493] usb 10-1: USB disconnect, device number 14 [ 2480.674480][ T1445] input: Generic X-Box pad as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:179.65/input/input179 [ 2480.843790][ T1731] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2480.868490][ T1731] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2481.024904][ T1745] FAULT_INJECTION: forcing a failure. [ 2481.024904][ T1745] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2481.041535][ T1745] CPU: 1 UID: 0 PID: 1745 Comm: syz.4.7365 Not tainted syzkaller #0 PREEMPT(full) [ 2481.041566][ T1745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2481.041581][ T1745] Call Trace: [ 2481.041590][ T1745] [ 2481.041601][ T1745] dump_stack_lvl+0x189/0x250 [ 2481.041638][ T1745] ? __pfx____ratelimit+0x10/0x10 [ 2481.041667][ T1745] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2481.041698][ T1745] ? __pfx__printk+0x10/0x10 [ 2481.041722][ T1745] ? __might_fault+0xb0/0x130 [ 2481.041766][ T1745] should_fail_ex+0x414/0x560 [ 2481.041806][ T1745] _copy_from_user+0x2d/0xb0 [ 2481.041835][ T1745] ucma_write+0x158/0x2e0 [ 2481.041867][ T1745] ? __pfx_ucma_write+0x10/0x10 [ 2481.041892][ T1745] ? security_file_permission+0x75/0x290 [ 2481.041921][ T1745] ? rw_verify_area+0x255/0x4d0 [ 2481.041952][ T1745] ? __lock_acquire+0xab9/0xd20 [ 2481.041971][ T1745] ? __pfx_ucma_write+0x10/0x10 [ 2481.041999][ T1745] vfs_write+0x27e/0xb30 [ 2481.042040][ T1745] ? __pfx_vfs_write+0x10/0x10 [ 2481.042080][ T1745] ? __fget_files+0x2a/0x420 [ 2481.042105][ T1745] ? __fget_files+0x2a/0x420 [ 2481.042125][ T1745] ? __fget_files+0x3a0/0x420 [ 2481.042145][ T1745] ? __fget_files+0x2a/0x420 [ 2481.042176][ T1745] ksys_write+0x145/0x250 [ 2481.042206][ T1745] ? exc_page_fault+0x82/0x100 [ 2481.042236][ T1745] ? __pfx_ksys_write+0x10/0x10 [ 2481.042272][ T1745] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 2481.042305][ T1745] ? lockdep_hardirqs_on+0x9c/0x150 [ 2481.042338][ T1745] __do_fast_syscall_32+0xb6/0x2b0 [ 2481.042370][ T1745] ? lockdep_hardirqs_on+0x9c/0x150 [ 2481.042403][ T1745] do_fast_syscall_32+0x34/0x80 [ 2481.042443][ T1745] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2481.042471][ T1745] RIP: 0023:0xf707d539 [ 2481.042490][ T1745] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2481.042511][ T1745] RSP: 002b:00000000f546d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 2481.042535][ T1745] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000200 [ 2481.042551][ T1745] RDX: 0000000000000020 RSI: 0000000000000000 RDI: 0000000000000000 [ 2481.042565][ T1745] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2481.042578][ T1745] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2481.042592][ T1745] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2481.042624][ T1745] [ 2481.135574][ T1445] usb 9-1: USB disconnect, device number 48 [ 2481.135643][ C0] xpad 9-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 2481.139943][ C1] vkms_vblank_simulate: vblank timer overrun [ 2481.144785][ C0] xpad 9-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 2482.151711][ T1759] FAULT_INJECTION: forcing a failure. [ 2482.151711][ T1759] name failslab, interval 1, probability 0, space 0, times 0 [ 2482.181329][ T1759] CPU: 1 UID: 0 PID: 1759 Comm: syz.8.7370 Not tainted syzkaller #0 PREEMPT(full) [ 2482.181360][ T1759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2482.181373][ T1759] Call Trace: [ 2482.181382][ T1759] [ 2482.181393][ T1759] dump_stack_lvl+0x189/0x250 [ 2482.181428][ T1759] ? __pfx____ratelimit+0x10/0x10 [ 2482.181456][ T1759] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2482.181485][ T1759] ? __pfx__printk+0x10/0x10 [ 2482.181514][ T1759] ? __pfx___might_resched+0x10/0x10 [ 2482.181537][ T1759] ? fs_reclaim_acquire+0x7d/0x100 [ 2482.181576][ T1759] should_fail_ex+0x414/0x560 [ 2482.181614][ T1759] should_failslab+0xa8/0x100 [ 2482.181638][ T1759] __kmalloc_noprof+0xcb/0x7f0 [ 2482.181667][ T1759] ? sock_kmalloc+0xd6/0x160 [ 2482.181697][ T1759] sock_kmalloc+0xd6/0x160 [ 2482.181725][ T1759] skcipher_recvmsg+0x571/0x11d0 [ 2482.181776][ T1759] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 2482.181810][ T1759] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 2482.181830][ T1759] ? security_socket_recvmsg+0x7e/0x2e0 [ 2482.181852][ T1759] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 2482.181887][ T1759] sock_recvmsg+0x22c/0x270 [ 2482.181920][ T1759] ____sys_recvmsg+0x1c9/0x460 [ 2482.181954][ T1759] ? __pfx_____sys_recvmsg+0x10/0x10 [ 2482.181975][ T1759] ? get_compat_msghdr+0x37e/0x4a0 [ 2482.182020][ T1759] ___sys_recvmsg+0x1b5/0x510 [ 2482.182051][ T1759] ? __pfx____sys_recvmsg+0x10/0x10 [ 2482.182100][ T1759] ? __fget_files+0x3a0/0x420 [ 2482.182132][ T1759] do_recvmmsg+0x36a/0x770 [ 2482.182164][ T1759] ? __pfx_do_recvmmsg+0x10/0x10 [ 2482.182187][ T1759] ? ksys_write+0x1cb/0x250 [ 2482.182238][ T1759] ? __fget_files+0x3a0/0x420 [ 2482.182266][ T1759] __sys_recvmmsg+0x19d/0x280 [ 2482.182302][ T1759] ? __pfx___sys_recvmmsg+0x10/0x10 [ 2482.182326][ T1759] ? __pfx_ksys_write+0x10/0x10 [ 2482.182361][ T1759] __ia32_compat_sys_recvmmsg_time32+0xbf/0xe0 [ 2482.182390][ T1759] __do_fast_syscall_32+0xb6/0x2b0 [ 2482.182419][ T1759] ? lockdep_hardirqs_on+0x9c/0x150 [ 2482.182452][ T1759] do_fast_syscall_32+0x34/0x80 [ 2482.182483][ T1759] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2482.182511][ T1759] RIP: 0023:0xf702d539 [ 2482.182530][ T1759] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2482.182549][ T1759] RSP: 002b:00000000f541d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000151 [ 2482.182573][ T1759] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080001e40 [ 2482.182588][ T1759] RDX: 0000000000000001 RSI: 0000000000010000 RDI: 0000000000000000 [ 2482.182602][ T1759] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2482.182615][ T1759] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2482.182628][ T1759] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2482.182660][ T1759] [ 2482.462724][ C1] vkms_vblank_simulate: vblank timer overrun [ 2482.553379][ T1493] usb 7-1: USB disconnect, device number 15 [ 2483.009425][ T1771] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7374'. [ 2483.029023][ T1771] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7374'. [ 2483.217267][ T1458] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 2483.263929][ T1776] netlink: 'syz.8.7376': attribute type 1 has an invalid length. [ 2483.317719][ T1779] FAULT_INJECTION: forcing a failure. [ 2483.317719][ T1779] name failslab, interval 1, probability 0, space 0, times 0 [ 2483.349474][ T1779] CPU: 0 UID: 0 PID: 1779 Comm: syz.9.7377 Not tainted syzkaller #0 PREEMPT(full) [ 2483.349506][ T1779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2483.349522][ T1779] Call Trace: [ 2483.349531][ T1779] [ 2483.349540][ T1779] dump_stack_lvl+0x189/0x250 [ 2483.349578][ T1779] ? __pfx____ratelimit+0x10/0x10 [ 2483.349606][ T1779] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2483.349637][ T1779] ? __pfx__printk+0x10/0x10 [ 2483.349664][ T1779] ? __pfx___might_resched+0x10/0x10 [ 2483.349689][ T1779] ? fs_reclaim_acquire+0x7d/0x100 [ 2483.349730][ T1779] should_fail_ex+0x414/0x560 [ 2483.349767][ T1779] should_failslab+0xa8/0x100 [ 2483.349792][ T1779] kmem_cache_alloc_noprof+0x74/0x6e0 [ 2483.349824][ T1779] ? security_inode_alloc+0x39/0x330 [ 2483.349864][ T1779] security_inode_alloc+0x39/0x330 [ 2483.349901][ T1779] inode_init_always_gfp+0x9ed/0xdc0 [ 2483.349952][ T1779] ? __pfx_proc_alloc_inode+0x10/0x10 [ 2483.349983][ T1779] alloc_inode+0x82/0x1b0 [ 2483.350030][ T1779] new_inode+0x22/0x170 [ 2483.350049][ T1779] ? get_pid_task+0x20/0x1f0 [ 2483.350081][ T1779] proc_pid_make_inode+0x21/0x130 [ 2483.350118][ T1779] proc_ns_dir_lookup+0x697/0x7c0 [ 2483.350151][ T1779] path_openat+0x1101/0x3830 [ 2483.350217][ T1779] ? __pfx_path_openat+0x10/0x10 [ 2483.350267][ T1779] do_filp_open+0x1fa/0x410 [ 2483.350293][ T1779] ? __lock_acquire+0xab9/0xd20 [ 2483.350317][ T1779] ? __pfx_do_filp_open+0x10/0x10 [ 2483.350369][ T1779] ? _raw_spin_unlock+0x28/0x50 [ 2483.350393][ T1779] ? alloc_fd+0x64c/0x6c0 [ 2483.350438][ T1779] do_sys_openat2+0x121/0x1c0 [ 2483.350467][ T1779] ? __pfx_do_sys_openat2+0x10/0x10 [ 2483.350494][ T1779] ? ksys_write+0x22a/0x250 [ 2483.350527][ T1779] ? __pfx_ksys_write+0x10/0x10 [ 2483.350560][ T1779] __ia32_compat_sys_openat+0x131/0x160 [ 2483.350612][ T1779] __do_fast_syscall_32+0xb6/0x2b0 [ 2483.350645][ T1779] ? lockdep_hardirqs_on+0x9c/0x150 [ 2483.350679][ T1779] do_fast_syscall_32+0x34/0x80 [ 2483.350710][ T1779] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2483.350738][ T1779] RIP: 0023:0xf7f44539 [ 2483.350758][ T1779] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2483.350778][ T1779] RSP: 002b:00000000f543655c EFLAGS: 00000206 ORIG_RAX: 0000000000000127 [ 2483.350803][ T1779] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000280 [ 2483.350819][ T1779] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 2483.350833][ T1779] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2483.350846][ T1779] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2483.350859][ T1779] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2483.350893][ T1779] [ 2483.865842][ T1493] r8152-cfgselector 4-1: USB disconnect, device number 43 [ 2483.877944][ T1458] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 2483.886966][ T1458] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2483.895947][ T1458] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2483.907434][ T1458] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2483.915525][ T1458] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2483.928421][ T1458] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2483.987302][ T1445] usb 9-1: new high-speed USB device number 49 using dummy_hcd [ 2484.006747][ T1458] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2484.051243][ T1458] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2484.082434][ T1458] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2484.120243][ T1458] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2484.140849][ T1445] usb 9-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 2484.156334][ T1445] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2484.170857][ T1458] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2484.238382][ T1458] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2484.265217][ T1445] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2484.312297][ T1445] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2484.320954][ T1458] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2484.342800][ T1458] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2484.362651][ T1445] usb 9-1: SerialNumber: syz [ 2484.379068][ T1458] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2484.420149][ T1458] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2484.439577][ T1458] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2484.455377][ T1458] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2484.477413][ T1458] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2484.496468][ T1458] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2484.518199][ T1490] usb 10-1: new full-speed USB device number 15 using dummy_hcd [ 2484.536441][ T1458] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2484.702529][ T1458] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2484.709546][ T1490] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2484.711536][ T1458] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2484.729842][ T1458] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2484.740956][ T1458] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2484.751661][ T1458] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 2484.762402][ T1445] usb 9-1: 0:2 : does not exist [ 2484.767451][ T1458] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 2484.775897][ T1445] usb 9-1: unit 5: unexpected type 0x03 [ 2484.787212][ T1458] usb 5-1: Product: syz [ 2484.791435][ T1458] usb 5-1: Manufacturer: syz [ 2484.806321][ T1490] usb 10-1: config 0 has no interfaces? [ 2484.834169][ T1490] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2484.846964][ T1490] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2484.866265][ T1490] usb 10-1: Product: syz [ 2484.878291][ T1490] usb 10-1: Manufacturer: syz [ 2484.883025][ T1490] usb 10-1: SerialNumber: syz [ 2484.883446][ T1458] usb 5-1: SerialNumber: syz [ 2484.981729][ T1490] usb 10-1: config 0 descriptor?? [ 2484.981941][ T1458] usb 5-1: config 0 descriptor?? [ 2485.016712][ T1445] usb 9-1: USB disconnect, device number 49 [ 2485.023031][ T1458] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 2485.186583][T31346] udevd[31346]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2485.234844][ T1494] usb 10-1: USB disconnect, device number 15 [ 2485.296116][ T1490] usb 5-1: USB disconnect, device number 62 [ 2485.335696][ T1490] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 2485.710658][ T1490] usb 9-1: new high-speed USB device number 50 using dummy_hcd [ 2485.870015][ T1490] usb 9-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 2485.903909][ T1490] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253 [ 2486.035194][ T1490] usb 9-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 2486.245663][ T1812] PKCS7: Unknown OID: [5] (bad) [ 2486.276820][ T1812] PKCS7: Only support pkcs7_signedData type [ 2486.283227][ T1490] usb 9-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 2486.296362][ T1490] usb 9-1: Manufacturer: syz [ 2486.319051][ T1490] usb 9-1: config 0 descriptor?? [ 2486.339649][ T1490] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 2487.585591][ T1458] usb 4-1: new low-speed USB device number 44 using dummy_hcd [ 2487.864910][ T1458] usb 4-1: Invalid ep0 maxpacket: 64 [ 2488.093970][ T1458] usb 4-1: new low-speed USB device number 45 using dummy_hcd [ 2488.297304][ T1458] usb 4-1: Invalid ep0 maxpacket: 64 [ 2488.303237][ T1458] usb usb4-port1: attempt power cycle [ 2488.540469][ T1492] usb 9-1: USB disconnect, device number 50 [ 2488.677381][ T1458] usb 4-1: new low-speed USB device number 46 using dummy_hcd [ 2488.743486][ T1458] usb 4-1: Invalid ep0 maxpacket: 64 [ 2488.907749][ T1458] usb 4-1: new low-speed USB device number 47 using dummy_hcd [ 2489.001088][ T1458] usb 4-1: Invalid ep0 maxpacket: 64 [ 2489.047841][ T1458] usb usb4-port1: unable to enumerate USB device [ 2490.643238][ T1852] binder: 1851:1852 ioctl c018620b 80000000 returned -14 [ 2490.932691][ T1859] fuse: Bad value for 'fd' [ 2491.278032][ T1859] nvme_fabrics: missing parameter 'transport=%s' [ 2491.351392][ T1859] nvme_fabrics: missing parameter 'nqn=%s' [ 2491.418549][ T1494] usb 9-1: new high-speed USB device number 51 using dummy_hcd [ 2491.610677][ T1494] usb 9-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 2491.688869][ T1494] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253 [ 2491.808696][ T1494] usb 9-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 2491.850524][ T1494] usb 9-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 2491.895090][ T1494] usb 9-1: Manufacturer: syz [ 2491.907460][ T1445] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 2491.936935][ T1494] usb 9-1: config 0 descriptor?? [ 2492.020160][ T1494] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 2492.150382][ T1445] usb 7-1: Using ep0 maxpacket: 16 [ 2492.170108][ T1445] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2492.457872][ T1445] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2492.526629][ T1445] usb 7-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 2492.582916][ T1445] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2492.628452][ T1445] usb 7-1: config 0 descriptor?? [ 2493.105971][ T1445] usbhid 7-1:0.0: can't add hid device: -71 [ 2493.155317][ T1445] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 2493.229789][ T1445] usb 7-1: USB disconnect, device number 16 [ 2493.441915][ T1893] syzkaller0: entered promiscuous mode [ 2493.467360][ T1893] syzkaller0: entered allmulticast mode [ 2494.287826][ T1492] usb 9-1: USB disconnect, device number 51 [ 2494.803276][ T30] audit: type=1326 audit(1761429268.019:3974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1914 comm="syz.8.7413" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 2494.995081][ T30] audit: type=1326 audit(1761429268.049:3975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1914 comm="syz.8.7413" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 2495.017206][ C1] vkms_vblank_simulate: vblank timer overrun [ 2495.183240][ T30] audit: type=1326 audit(1761429268.079:3976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1914 comm="syz.8.7413" exe="/root/syz-executor" sig=0 arch=40000003 syscall=136 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 2495.389149][ T30] audit: type=1326 audit(1761429268.079:3977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1914 comm="syz.8.7413" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 2495.468047][ T30] audit: type=1326 audit(1761429268.079:3978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1914 comm="syz.8.7413" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 2495.565170][ T30] audit: type=1326 audit(1761429268.109:3979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1914 comm="syz.8.7413" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 2495.641299][ T30] audit: type=1326 audit(1761429268.109:3980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1914 comm="syz.8.7413" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 2495.745681][ T30] audit: type=1326 audit(1761429268.109:3981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1914 comm="syz.8.7413" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 2495.767753][ C1] vkms_vblank_simulate: vblank timer overrun [ 2495.824397][ T30] audit: type=1326 audit(1761429268.109:3982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1914 comm="syz.8.7413" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 2495.858979][ T30] audit: type=1326 audit(1761429268.109:3983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1914 comm="syz.8.7413" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 2495.881529][ C1] vkms_vblank_simulate: vblank timer overrun [ 2496.242008][ T1947] loop6: detected capacity change from 0 to 524287999 [ 2496.269116][ T1950] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7420'. [ 2496.488217][ T1494] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 2496.650088][ T1494] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 2496.662100][ T1494] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253 [ 2496.710032][ T1494] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 2496.739888][ T1494] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 2496.767823][ T1494] usb 5-1: Manufacturer: syz [ 2496.859006][ T1494] usb 5-1: config 0 descriptor?? [ 2496.867070][ T1494] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 2496.944084][T31397] Buffer I/O error on dev loop6, logical block 65535998, async page read [ 2498.610144][ T1971] netlink: 64 bytes leftover after parsing attributes in process `syz.3.7426'. [ 2498.669744][ T1494] usb 9-1: new high-speed USB device number 52 using dummy_hcd [ 2498.851749][ T1494] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2498.942661][ T1494] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2499.004371][ T1494] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2499.068918][ T1494] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2499.130707][ T1494] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2499.268772][ T1461] usb 5-1: USB disconnect, device number 63 [ 2499.298689][ T1494] usb 9-1: config 0 descriptor?? [ 2499.806777][T31346] Buffer I/O error on dev loop6, logical block 65535998, async page read [ 2499.942633][T31346] Buffer I/O error on dev loop6, logical block 65535998, async page read [ 2500.044685][ T1968] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7425'. [ 2500.186599][T31346] Buffer I/O error on dev loop6, logical block 65535998, async page read [ 2500.391882][ T1494] usbhid 9-1:0.0: can't add hid device: -71 [ 2500.484007][ T1494] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 2500.567099][ T1989] netlink: 'syz.6.7430': attribute type 5 has an invalid length. [ 2500.610114][ T1989] netlink: 3657 bytes leftover after parsing attributes in process `syz.6.7430'. [ 2500.674494][ T1494] usb 9-1: USB disconnect, device number 52 [ 2500.978075][ T1492] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 2501.148028][ T1492] usb 5-1: Using ep0 maxpacket: 32 [ 2501.225370][ T1992] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2501.301362][ T1992] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2501.818899][ T1492] usb 5-1: unable to get BOS descriptor or descriptor too short [ 2501.845029][T31346] Buffer I/O error on dev loop6, logical block 65535998, async page read [ 2501.884784][ T1492] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 2501.924191][ T1492] usb 5-1: can't read configurations, error -71 [ 2503.437773][ T1461] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 2503.617236][ T1461] usb 4-1: Using ep0 maxpacket: 32 [ 2503.629681][ T1461] usb 4-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 2503.644353][ T1461] usb 4-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 2503.698371][ T1461] usb 4-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 255, changing to 11 [ 2503.757226][ T1461] usb 4-1: config 155 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 59292, setting to 1024 [ 2503.850680][ T1461] usb 4-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 2503.931878][ T1461] usb 4-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 2503.958755][ T1461] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2503.986601][ T1461] usb 4-1: Product: syz [ 2504.017088][ T1461] usb 4-1: Manufacturer: syz [ 2504.043674][ T1461] usb 4-1: SerialNumber: syz [ 2504.104707][ T2021] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 2504.152244][ C0] imon 4-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 2504.184537][ T1461] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/input/input180 [ 2504.417260][ T1461] imon 4-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 2504.468039][ T1461] (id 0x00) [ 2504.707243][ T1461] rc_core: IR keymap rc-imon-pad not found [ 2504.753837][ T1461] Registered IR keymap rc-empty [ 2504.784598][ T1461] imon 4-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 2504.877656][ T1461] imon 4-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 2504.943061][ T2045] netlink: 'syz.6.7444': attribute type 12 has an invalid length. [ 2504.978277][ T2045] netlink: 'syz.6.7444': attribute type 29 has an invalid length. [ 2505.009867][ T1461] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/rc/rc0 [ 2505.042330][ T2045] netlink: 468 bytes leftover after parsing attributes in process `syz.6.7444'. [ 2505.087387][ T1461] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/rc/rc0/input181 [ 2505.184242][ T2049] pimreg: left allmulticast mode [ 2505.194901][ T1461] imon 4-1:155.0: iMON device (15c2:ffdc, intf0) on usb<4:48> initialized [ 2505.309873][ T1492] usb 4-1: USB disconnect, device number 48 [ 2505.706509][ T1494] usb 9-1: new high-speed USB device number 53 using dummy_hcd [ 2505.941611][ T1494] usb 9-1: device descriptor read/64, error -71 [ 2506.207916][ T1494] usb 9-1: new high-speed USB device number 54 using dummy_hcd [ 2506.337930][ T1494] usb 9-1: device descriptor read/64, error -71 [ 2506.448069][ T1494] usb usb9-port1: attempt power cycle [ 2506.811678][ T1494] usb 9-1: new high-speed USB device number 55 using dummy_hcd [ 2506.859971][ T1494] usb 9-1: device descriptor read/8, error -71 [ 2507.099129][ T1494] usb 9-1: new high-speed USB device number 56 using dummy_hcd [ 2507.139156][ T1494] usb 9-1: device descriptor read/8, error -71 [ 2507.258296][ T1494] usb usb9-port1: unable to enumerate USB device [ 2507.801707][ T2066] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2507.936241][ T2069] netlink: 156 bytes leftover after parsing attributes in process `syz.3.7449'. [ 2508.638615][ T2077] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7453'. [ 2508.763065][ T2082] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7452'. [ 2508.978110][ T2081] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 2510.740880][ T2081] bond1 (unregistering): Released all slaves [ 2510.928133][ T1458] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 2510.937261][ T1461] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 2511.091189][ T1461] usb 10-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 2511.153414][ T1461] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2511.178608][ T1461] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 2511.215345][ T1461] usb 10-1: SerialNumber: syz [ 2511.978174][ T1461] cdc_ether 10-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.9-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 2512.360893][ T2101] binder: 2097:2101 ioctl c018620c 800002c0 returned -1 [ 2512.834807][ T1445] usb 10-1: USB disconnect, device number 16 [ 2512.890279][ T1445] cdc_ether 10-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.9-1, CDC Ethernet Device [ 2513.798003][ T2120] xt_nat: multiple ranges no longer supported [ 2513.850330][ T2123] netlink: 'syz.9.7462': attribute type 12 has an invalid length. [ 2513.859075][ T2123] netlink: 'syz.9.7462': attribute type 29 has an invalid length. [ 2513.866987][ T2123] netlink: 468 bytes leftover after parsing attributes in process `syz.9.7462'. [ 2514.697277][ T1461] usb 7-1: new full-speed USB device number 17 using dummy_hcd [ 2514.780245][ T2140] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7466'. [ 2514.796226][ T2140] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7466'. [ 2514.876502][ T2148] netlink: 3672 bytes leftover after parsing attributes in process `syz.9.7466'. [ 2514.912613][ T1461] usb 7-1: not running at top speed; connect to a high speed hub [ 2514.925886][ T1461] usb 7-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 2514.936111][ T1461] usb 7-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 2514.947473][ T1461] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2514.961029][ T1461] usb 7-1: string descriptor 0 read error: -22 [ 2514.968434][ T1461] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2514.980854][ T1461] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2515.031079][ T1461] usb 7-1: 0:2 : does not exist [ 2515.251191][ T1461] usb 7-1: USB disconnect, device number 17 [ 2515.973074][ T2174] netlink: 'syz.4.7473': attribute type 12 has an invalid length. [ 2516.036133][ T2174] netlink: 'syz.4.7473': attribute type 29 has an invalid length. [ 2516.098779][ T2174] netlink: 'syz.4.7473': attribute type 2 has an invalid length. [ 2516.154462][ T2174] netlink: 260 bytes leftover after parsing attributes in process `syz.4.7473'. [ 2516.248204][ T1461] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 2516.366438][ T2181] syzkaller1: entered promiscuous mode [ 2516.380517][ T2181] syzkaller1: entered allmulticast mode [ 2516.433744][ T1461] usb 7-1: Using ep0 maxpacket: 8 [ 2516.456088][ T1461] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2516.476648][ T1461] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2516.506760][ T1461] usb 7-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.00 [ 2516.537983][ T1461] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2516.566413][ T1461] usb 7-1: config 0 descriptor?? [ 2517.418881][ T1461] usbhid 7-1:0.0: can't add hid device: -71 [ 2517.456164][ T1461] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 2517.517820][ T1461] usb 7-1: USB disconnect, device number 18 [ 2518.187083][ T2199] netlink: 'syz.9.7480': attribute type 2 has an invalid length. [ 2518.251459][ T2199] : entered promiscuous mode [ 2518.326698][ T2199] GUP no longer grows the stack in syz.9.7480 (2199): 80005000-80008000 (80004000) [ 2518.367129][ T2199] CPU: 0 UID: 0 PID: 2199 Comm: syz.9.7480 Not tainted syzkaller #0 PREEMPT(full) [ 2518.367159][ T2199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2518.367178][ T2199] Call Trace: [ 2518.367188][ T2199] [ 2518.367199][ T2199] dump_stack_lvl+0x189/0x250 [ 2518.367238][ T2199] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2518.367272][ T2199] ? __pfx__printk+0x10/0x10 [ 2518.367293][ T2199] ? find_vma+0xe7/0x160 [ 2518.367338][ T2199] fixup_user_fault+0x661/0x720 [ 2518.367375][ T2199] fault_in_user_writeable+0x72/0xe0 [ 2518.367408][ T2199] futex_lock_pi+0x773/0xa90 [ 2518.367435][ T2199] ? __pfx_futex_lock_pi+0x10/0x10 [ 2518.367488][ T2199] ? __pfx_futex_wake_mark+0x10/0x10 [ 2518.367529][ T2199] ? __pfx_userfaultfd_unmap_complete+0x10/0x10 [ 2518.367576][ T2199] do_futex+0x292/0x420 [ 2518.367616][ T2199] ? __pfx_do_futex+0x10/0x10 [ 2518.367651][ T2199] ? __vm_munmap+0x2c1/0x380 [ 2518.367695][ T2199] __se_sys_futex_time32+0x360/0x3e0 [ 2518.367741][ T2199] ? __pfx___se_sys_futex_time32+0x10/0x10 [ 2518.367779][ T2199] ? rcu_is_watching+0x15/0xb0 [ 2518.367811][ T2199] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 2518.367845][ T2199] ? __ia32_sys_futex_time32+0x21/0xf0 [ 2518.367872][ T2199] __do_fast_syscall_32+0xb6/0x2b0 [ 2518.367906][ T2199] ? asm_int80_emulation+0x1a/0x20 [ 2518.367929][ T2199] ? do_int80_emulation+0x1f3/0x390 [ 2518.367962][ T2199] do_fast_syscall_32+0x34/0x80 [ 2518.367992][ T2199] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2518.368019][ T2199] RIP: 0023:0xf7f44539 [ 2518.368039][ T2199] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2518.368060][ T2199] RSP: 002b:00000000f53f455c EFLAGS: 00000206 ORIG_RAX: 00000000000000f0 [ 2518.368084][ T2199] RAX: ffffffffffffffda RBX: 0000000080004000 RCX: 000000000000008d [ 2518.368100][ T2199] RDX: 00000000fffffffd RSI: 0000000000000000 RDI: 0000000000000000 [ 2518.368115][ T2199] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 2518.368128][ T2199] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2518.368142][ T2199] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2518.368176][ T2199] [ 2519.148163][ T2209] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3514397838 (14057591352 ns) > initial count (1428875600 ns). Using initial count to start timer. [ 2519.434623][ T2220] FAULT_INJECTION: forcing a failure. [ 2519.434623][ T2220] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2519.472335][ T2220] CPU: 0 UID: 0 PID: 2220 Comm: syz.4.7486 Not tainted syzkaller #0 PREEMPT(full) [ 2519.472358][ T2220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2519.472368][ T2220] Call Trace: [ 2519.472375][ T2220] [ 2519.472383][ T2220] dump_stack_lvl+0x189/0x250 [ 2519.472410][ T2220] ? __pfx____ratelimit+0x10/0x10 [ 2519.472430][ T2220] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2519.472452][ T2220] ? __pfx__printk+0x10/0x10 [ 2519.472469][ T2220] ? __might_fault+0xb0/0x130 [ 2519.472500][ T2220] should_fail_ex+0x414/0x560 [ 2519.472528][ T2220] _copy_from_user+0x2d/0xb0 [ 2519.472557][ T2220] cmsghdr_from_user_compat_to_kern+0x394/0x800 [ 2519.472585][ T2220] ? __pfx_cmsghdr_from_user_compat_to_kern+0x10/0x10 [ 2519.472610][ T2220] ____sys_sendmsg+0x20f/0x830 [ 2519.472631][ T2220] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2519.472659][ T2220] ___sys_sendmsg+0x21f/0x2a0 [ 2519.472677][ T2220] ? __pfx____sys_sendmsg+0x10/0x10 [ 2519.472694][ T2220] ? __lock_acquire+0xab9/0xd20 [ 2519.472733][ T2220] ? __fget_files+0x2a/0x420 [ 2519.472748][ T2220] ? __fget_files+0x3a0/0x420 [ 2519.472770][ T2220] __sys_sendmmsg+0x28e/0x430 [ 2519.472791][ T2220] ? __pfx___sys_sendmmsg+0x10/0x10 [ 2519.472805][ T2220] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 2519.472847][ T2220] ? ksys_write+0x22a/0x250 [ 2519.472868][ T2220] ? exc_page_fault+0x82/0x100 [ 2519.472893][ T2220] ? __pfx_ksys_write+0x10/0x10 [ 2519.472921][ T2220] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 2519.472939][ T2220] __do_fast_syscall_32+0xb6/0x2b0 [ 2519.472962][ T2220] ? lockdep_hardirqs_on+0x9c/0x150 [ 2519.472986][ T2220] do_fast_syscall_32+0x34/0x80 [ 2519.473008][ T2220] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2519.473028][ T2220] RIP: 0023:0xf707d539 [ 2519.473042][ T2220] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2519.473056][ T2220] RSP: 002b:00000000f546d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000159 [ 2519.473074][ T2220] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080001040 [ 2519.473085][ T2220] RDX: 0000000000000001 RSI: 0000000000040880 RDI: 0000000000000000 [ 2519.473095][ T2220] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2519.473104][ T2220] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2519.473113][ T2220] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2519.473136][ T2220] [ 2519.715244][ C0] vkms_vblank_simulate: vblank timer overrun [ 2519.716915][ T1445] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 2519.955294][ T1445] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2519.966423][ T1445] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2519.976711][ T1445] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2519.985868][ T1445] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2520.007884][ T2210] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 2520.022552][ T1445] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 2520.165432][ T2226] syzkaller1: entered promiscuous mode [ 2520.187305][ T2226] syzkaller1: entered allmulticast mode [ 2520.226674][ T2225] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 2520.237830][ T1445] usb 4-1: USB disconnect, device number 50 [ 2520.469259][ T2209] kvm: pic: single mode not supported [ 2521.323171][ T2242] tipc: Enabling of bearer rejected, already enabled [ 2521.777334][ T1445] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 2521.823297][ T2249] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7495'. [ 2521.945606][ T1445] usb 7-1: Using ep0 maxpacket: 8 [ 2521.957087][ T1445] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2521.992906][ T1445] usb 7-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00 [ 2522.024362][ T1445] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2522.063637][ T1445] usb 7-1: config 0 descriptor?? [ 2522.584110][ T1445] kye 0003:0458:4018.007D: hidraw0: USB HID v0.07 Device [HID 0458:4018] on usb-dummy_hcd.6-1/input0 [ 2524.127293][ T1458] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 2524.183552][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 2524.183602][ T30] audit: type=1326 audit(1761429297.399:3994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2266 comm="syz.9.7500" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f44539 code=0x0 [ 2524.307421][ T1458] usb 5-1: Using ep0 maxpacket: 32 [ 2524.328347][ T1458] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2524.350839][ T1458] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2524.372305][ T1458] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 2524.411429][ T1458] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2524.440492][ T1458] usb 5-1: config 0 descriptor?? [ 2524.980143][ T1458] usbhid 5-1:0.0: can't add hid device: -71 [ 2524.992299][ T1458] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 2525.144292][ T1458] usb 5-1: USB disconnect, device number 66 [ 2526.767836][ T1458] usb 7-1: USB disconnect, device number 19 [ 2527.603440][ T2298] A link change request failed with some changes committed already. Interface macvlan0 may have been left with an inconsistent configuration, please check. [ 2527.887829][ T1490] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 2528.129915][ T1490] usb 5-1: Using ep0 maxpacket: 16 [ 2528.151977][ T1490] usb 5-1: unable to get BOS descriptor or descriptor too short [ 2528.181348][ T1490] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2528.201773][ T1490] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2528.231842][ T1490] usb 5-1: Product: syz [ 2528.245351][ T1490] usb 5-1: Manufacturer: syz [ 2528.288322][ T1490] usb 5-1: SerialNumber: syz [ 2528.547356][ T1445] usb 7-1: new full-speed USB device number 20 using dummy_hcd [ 2528.738900][ T1445] usb 7-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2528.783533][ T1445] usb 7-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2528.834339][ T1445] usb 7-1: config 0 interface 0 has no altsetting 0 [ 2528.872926][ T1445] usb 7-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 2528.904590][ T1445] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2528.974400][ T1445] usb 7-1: config 0 descriptor?? [ 2529.435941][ T1445] hid-steam 0003:28DE:1102.007E: unknown main item tag 0x0 [ 2529.461388][ T1445] hid-steam 0003:28DE:1102.007E: unknown main item tag 0x0 [ 2529.478488][ T1445] hid-steam 0003:28DE:1102.007E: : USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.6-1/input0 [ 2529.577761][ T1445] hid-steam 0003:28DE:1102.007E: Steam Controller 'XXXXXXXXXX' connected [ 2529.601467][ T1445] input: Steam Controller as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:28DE:1102.007E/input/input183 [ 2529.627536][ T1494] usb 9-1: new high-speed USB device number 57 using dummy_hcd [ 2529.676768][ T1445] hid-steam 0003:28DE:1102.007F: unknown main item tag 0x0 [ 2529.704952][ T1445] hid-steam 0003:28DE:1102.007F: unknown main item tag 0x0 [ 2529.773005][ T1445] hid-steam 0003:28DE:1102.007F: hidraw0: USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.6-1/input0 [ 2529.788528][ T1494] usb 9-1: Using ep0 maxpacket: 32 [ 2529.799695][ T1494] usb 9-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 2529.818339][ T1494] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2529.852729][ T1494] usb 9-1: Product: syz [ 2529.866374][ T1494] usb 9-1: Manufacturer: syz [ 2529.887871][ T1494] usb 9-1: SerialNumber: syz [ 2529.925283][ T1494] usb 9-1: config 0 descriptor?? [ 2529.977072][ T1494] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 2530.064988][ T1445] usb 7-1: USB disconnect, device number 20 [ 2530.140632][ T1445] hid-steam 0003:28DE:1102.007E: Steam Controller 'XXXXXXXXXX' disconnected [ 2530.896987][ T1490] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 2531.022553][ T1490] usb 5-1: USB disconnect, device number 67 [ 2531.195533][T31346] udevd[31346]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2531.270179][T20875] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2531.308971][T20875] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2531.409551][ T1494] gspca_topro: reg_w err -71 [ 2531.448005][ T1494] gspca_topro: Sensor soi763a [ 2531.495968][ T1494] usb 9-1: USB disconnect, device number 57 [ 2532.154980][ T2356] syzkaller1: entered promiscuous mode [ 2532.183367][ T2356] syzkaller1: entered allmulticast mode [ 2532.192593][ T2360] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7526'. [ 2533.821776][ T2395] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7539'. [ 2534.254573][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 2534.261292][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 2534.377291][ T1460] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 2534.587692][ T1460] usb 5-1: Using ep0 maxpacket: 8 [ 2534.615223][ T1460] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2534.678518][ T1460] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2534.711338][ T1460] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2534.731411][ T2417] fuse: Unknown parameter 'gŒoup_id' [ 2534.754375][ T1460] usb 5-1: config 0 descriptor?? [ 2534.979016][ T2418] nvme_fabrics: missing parameter 'transport=%s' [ 2534.994622][ T2418] nvme_fabrics: missing parameter 'nqn=%s' [ 2535.077338][ T1460] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 2535.282868][ T2408] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2535.316382][ T2408] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2535.781979][ T1493] usb 5-1: USB disconnect, device number 68 [ 2537.328271][ T2456] netlink: 64 bytes leftover after parsing attributes in process `syz.3.7549'. [ 2540.795631][ T2487] fuse: Bad value for 'fd' [ 2540.867265][ T1461] usb 9-1: new high-speed USB device number 58 using dummy_hcd [ 2541.098343][ T1493] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 2541.118395][ T1461] usb 9-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 2541.147477][ T1461] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2541.278237][ T1461] usb 9-1: config 0 descriptor?? [ 2541.291263][ T1461] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 2541.299700][ T1493] usb 4-1: Using ep0 maxpacket: 32 [ 2541.315230][ T1493] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 2541.324026][ T1493] usb 4-1: can't read configurations, error -61 [ 2541.468070][ T1493] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 2541.628128][ T1493] usb 4-1: Using ep0 maxpacket: 32 [ 2541.645041][ T1493] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 2541.657887][ T1493] usb 4-1: can't read configurations, error -61 [ 2541.680962][ T1493] usb usb4-port1: attempt power cycle [ 2542.047973][ T1493] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 2542.068972][ T1493] usb 4-1: Using ep0 maxpacket: 32 [ 2542.076576][ T1493] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 2542.085712][ T1493] usb 4-1: can't read configurations, error -61 [ 2542.222786][ T1493] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 2542.248959][ T1493] usb 4-1: Using ep0 maxpacket: 32 [ 2542.259312][ T1493] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 2542.268611][ T1493] usb 4-1: can't read configurations, error -61 [ 2542.275432][ T1493] usb usb4-port1: unable to enumerate USB device [ 2543.273423][ T1461] usb 9-1: USB disconnect, device number 58 [ 2543.467537][ T2492] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7560'. [ 2543.687835][ T2501] fuse: Unknown parameter 'gŒoup_id' [ 2544.438513][ T2504] nvme_fabrics: missing parameter 'transport=%s' [ 2544.444906][ T2504] nvme_fabrics: missing parameter 'nqn=%s' [ 2545.128187][ T1493] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 2545.313416][ T30] audit: type=1326 audit(1761429318.529:3995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2532 comm="syz.8.7567" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x0 [ 2545.369801][ T1493] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 2545.391816][ T1493] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2545.416188][ T1493] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2545.468120][ T1493] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 2545.533961][ T1493] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 2545.601407][ T1493] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 2545.667997][ T1494] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 2545.771574][ T1493] usb 5-1: Manufacturer: syz [ 2545.806075][ T1493] usb 5-1: config 0 descriptor?? [ 2545.830047][ T1494] usb 10-1: config 0 has no interfaces? [ 2545.850127][ T1494] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2545.945863][ T1494] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2545.986212][ T1494] usb 10-1: Product: syz [ 2545.996217][ T1494] usb 10-1: Manufacturer: syz [ 2546.002365][ T1494] usb 10-1: SerialNumber: syz [ 2546.015137][ T1494] usb 10-1: config 0 descriptor?? [ 2546.126914][ T2548] netlink: 'syz.3.7570': attribute type 5 has an invalid length. [ 2546.176902][ T2548] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.7570'. [ 2546.393116][ T1493] usbhid 5-1:0.0: can't add hid device: -32 [ 2546.416425][ T1493] usbhid 5-1:0.0: probe with driver usbhid failed with error -32 [ 2546.434718][ T1493] usb 5-1: USB disconnect, device number 69 [ 2546.469625][ T2554] netlink: 168 bytes leftover after parsing attributes in process `syz.9.7569'. [ 2546.553733][ T2554] netlink: 168 bytes leftover after parsing attributes in process `syz.9.7569'. [ 2546.564559][ T2560] netlink: 16 bytes leftover after parsing attributes in process `syz.9.7569'. [ 2546.635682][ T2554] netlink: 16 bytes leftover after parsing attributes in process `syz.9.7569'. [ 2546.669628][ T2560] bond0: entered promiscuous mode [ 2546.674734][ T2560] bond_slave_0: entered promiscuous mode [ 2546.808296][ T2560] bond_slave_1: entered promiscuous mode [ 2546.850094][ T2560] mac80211_hwsim hwsim44 wlan1: entered promiscuous mode [ 2546.878492][ T2560] debugfs: 'hsr1' already exists in 'hsr' [ 2546.908051][ T2560] Cannot create hsr debugfs directory [ 2546.913508][ T2560] hsr1: entered promiscuous mode [ 2547.263172][ T2578] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7578'. [ 2547.497916][ T1493] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 2547.668838][ T1492] usb 9-1: new full-speed USB device number 59 using dummy_hcd [ 2547.680187][ T1493] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 2547.699750][ T1493] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253 [ 2547.714826][ T1493] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 2547.739186][ T1493] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 2547.761376][ T1493] usb 5-1: Manufacturer: syz [ 2547.786573][ T1493] usb 5-1: config 0 descriptor?? [ 2547.822464][ T1493] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 2547.848228][ T1494] usb 4-1: new full-speed USB device number 55 using dummy_hcd [ 2547.858274][ T1492] usb 9-1: config 0 has an invalid interface number: 51 but max is 0 [ 2547.879167][ T1492] usb 9-1: config 0 has no interface number 0 [ 2547.903057][ T1492] usb 9-1: config 0 interface 51 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 2547.942121][ T1492] usb 9-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 2547.965841][ T1492] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2547.986617][ T1492] usb 9-1: Product: syz [ 2547.996978][ T1492] usb 9-1: Manufacturer: syz [ 2548.011694][ T1492] usb 9-1: SerialNumber: syz [ 2548.053722][ T1492] usb 9-1: config 0 descriptor?? [ 2548.068380][ T2580] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 2548.084550][ T1492] quatech2 9-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 2548.832949][ T1494] usb 4-1: config 0 has no interfaces? [ 2548.851601][ T1494] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2548.892121][ T1494] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2548.939388][ T1494] usb 4-1: Product: syz [ 2548.965120][ T1494] usb 4-1: Manufacturer: syz [ 2549.125256][ T1494] usb 4-1: SerialNumber: syz [ 2549.183793][ T1494] usb 4-1: config 0 descriptor?? [ 2549.286462][ T1494] usb 10-1: USB disconnect, device number 17 [ 2549.562839][ T2586] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7579'. [ 2549.636149][ T2586] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2549.681336][ T2586] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2550.238485][ T2602] nvme_fabrics: missing parameter 'transport=%s' [ 2550.246543][ T2602] nvme_fabrics: missing parameter 'nqn=%s' [ 2550.434811][ T1492] usb 9-1: qt2_attach - failed to power on unit: -71 [ 2550.497704][ T1458] usb 5-1: USB disconnect, device number 70 [ 2550.654958][ T1492] quatech2 9-1:0.51: probe with driver quatech2 failed with error -71 [ 2550.816084][ T1492] usb 9-1: USB disconnect, device number 59 [ 2551.107769][ T1490] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 2551.258022][ T1490] usb 7-1: Using ep0 maxpacket: 8 [ 2551.289669][ T1490] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2551.423336][ T1490] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 2551.528512][ T1490] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 2551.615766][ T1490] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 2551.668254][ T1490] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2551.706382][ T2624] FAULT_INJECTION: forcing a failure. [ 2551.706382][ T2624] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2551.803062][ T1490] usb 7-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 2551.872746][ T2624] CPU: 1 UID: 0 PID: 2624 Comm: syz.4.7585 Not tainted syzkaller #0 PREEMPT(full) [ 2551.872780][ T2624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2551.872795][ T2624] Call Trace: [ 2551.872805][ T2624] [ 2551.872815][ T2624] dump_stack_lvl+0x189/0x250 [ 2551.872852][ T2624] ? __pfx____ratelimit+0x10/0x10 [ 2551.872879][ T2624] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2551.872908][ T2624] ? __pfx__printk+0x10/0x10 [ 2551.872946][ T2624] should_fail_ex+0x414/0x560 [ 2551.872985][ T2624] _copy_to_user+0x31/0xb0 [ 2551.873017][ T2624] br_dev_siocdevprivate+0xdec/0x1580 [ 2551.873067][ T2624] ? __pfx_br_dev_siocdevprivate+0x10/0x10 [ 2551.873096][ T2624] ? rcu_is_watching+0x15/0xb0 [ 2551.873123][ T2624] ? trace_contention_end+0x39/0x120 [ 2551.873162][ T2624] ? __lock_acquire+0xab9/0xd20 [ 2551.873188][ T2624] ? dev_ioctl+0x83c/0x1150 [ 2551.873221][ T2624] ? full_name_hash+0x92/0xe0 [ 2551.873250][ T2624] ? netdev_name_node_lookup+0xdf/0x120 [ 2551.873282][ T2624] dev_ifsioc+0xb57/0xf00 [ 2551.873324][ T2624] dev_ioctl+0x84c/0x1150 [ 2551.873361][ T2624] sock_ioctl+0x719/0x790 [ 2551.873393][ T2624] ? __pfx_sock_ioctl+0x10/0x10 [ 2551.873438][ T2624] compat_sock_ioctl+0x285/0xc80 [ 2551.873473][ T2624] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 2551.873505][ T2624] ? __fget_files+0x3a0/0x420 [ 2551.873526][ T2624] ? __fget_files+0x2a/0x420 [ 2551.873551][ T2624] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 2551.873580][ T2624] __ia32_compat_sys_ioctl+0x543/0x840 [ 2551.873612][ T2624] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 2551.873642][ T2624] ? __fget_files+0x3a0/0x420 [ 2551.873671][ T2624] ? fput+0xa0/0xd0 [ 2551.873695][ T2624] ? ksys_write+0x22a/0x250 [ 2551.873727][ T2624] ? exc_page_fault+0x82/0x100 [ 2551.873762][ T2624] ? __pfx_ksys_write+0x10/0x10 [ 2551.873796][ T2624] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 2551.873829][ T2624] ? lockdep_hardirqs_on+0x9c/0x150 [ 2551.873862][ T2624] __do_fast_syscall_32+0xb6/0x2b0 [ 2551.873895][ T2624] ? lockdep_hardirqs_on+0x9c/0x150 [ 2551.873929][ T2624] do_fast_syscall_32+0x34/0x80 [ 2551.873961][ T2624] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2551.873988][ T2624] RIP: 0023:0xf707d539 [ 2551.874008][ T2624] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2551.874028][ T2624] RSP: 002b:00000000f546d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 2551.874059][ T2624] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000000089f0 [ 2551.874075][ T2624] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2551.874090][ T2624] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2551.874103][ T2624] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2551.874117][ T2624] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2551.874150][ T2624] [ 2551.874886][ T1490] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 2551.887755][ T2630] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 2552.099188][ T1490] usb 7-1: Product: syz [ 2552.277292][ T1460] usb 9-1: new high-speed USB device number 60 using dummy_hcd [ 2552.355245][ T1458] usb 4-1: USB disconnect, device number 55 [ 2552.437665][ T1460] usb 9-1: Using ep0 maxpacket: 32 [ 2552.445389][ T1460] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 2552.462858][ T1460] usb 9-1: config 0 has no interface number 0 [ 2552.480333][ T1460] usb 9-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 2552.499875][ T1460] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2552.511168][ T1490] usb 7-1: Manufacturer: syz [ 2552.528246][ T1490] usb 7-1: SerialNumber: syz [ 2552.550785][ T1460] usb 9-1: Product: syz [ 2552.571983][ T1490] usb 7-1: config 0 descriptor?? [ 2552.581118][ T1460] usb 9-1: Manufacturer: syz [ 2552.585770][ T1460] usb 9-1: SerialNumber: syz [ 2552.632055][ T1460] usb 9-1: config 0 descriptor?? [ 2552.646698][ T1460] usb 9-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 2552.681893][ T1460] usb 9-1: selecting invalid altsetting 1 [ 2552.723565][ T1460] usb 9-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 2552.751111][ T1460] usb 9-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 2552.787097][ T1460] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 2552.795606][ T1490] radio-si470x 7-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 2552.815672][ T1490] radio-si470x 7-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 2552.897240][ T1458] usb 4-1: new low-speed USB device number 56 using dummy_hcd [ 2552.921255][ T1460] usb 9-1: media controller created [ 2553.009237][ T1490] radio-si470x 7-1:0.0: software version 0, hardware version 0 [ 2553.020865][ T1490] radio-si470x 7-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 2553.047609][ T1460] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2553.065522][ T1490] radio-si470x 7-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 2553.099280][ T1460] usb 9-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 2553.126666][ T1460] zl10353_read_register: readreg error (reg=127, ret==-71) [ 2553.148639][ T1458] usb 4-1: unable to get BOS descriptor or descriptor too short [ 2553.161438][ T1458] usb 4-1: config 1 interface 0 has no altsetting 0 [ 2553.169418][ T1460] usb 9-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 2553.180230][ T1458] usb 4-1: string descriptor 0 read error: -22 [ 2553.186607][ T1458] usb 4-1: New USB device found, idVendor=05ac, idProduct=0263, bcdDevice= 0.40 [ 2553.212468][ T1458] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2553.242549][ T2613] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2553.290168][ T2613] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2553.383959][ T1460] usb 9-1: USB disconnect, device number 60 [ 2553.481863][ T1458] usbhid 4-1:1.0: can't add hid device: -71 [ 2553.488287][ T1458] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 2553.554777][ T1458] usb 4-1: USB disconnect, device number 56 [ 2553.618289][ T1490] radio-si470x 7-1:0.0: si470x_set_report: usb_control_msg returned -110 [ 2553.652479][ T1490] radio-si470x 7-1:0.0: submitting int urb failed (-90) [ 2553.694726][ T1490] radio-si470x 7-1:0.0: si470x_set_report: usb_control_msg returned -32 [ 2553.736201][ T1490] radio-si470x 7-1:0.0: probe with driver radio-si470x failed with error -22 [ 2554.550011][ T1490] usb 7-1: USB disconnect, device number 21 [ 2554.746647][ T2672] fuse: Unknown parameter 'gŒoup_id' [ 2555.655710][ T2683] nvme_fabrics: missing parameter 'transport=%s' [ 2555.719907][ T2683] nvme_fabrics: missing parameter 'nqn=%s' [ 2556.337484][ T1492] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 2556.641799][ T2699] netlink: 'syz.6.7603': attribute type 21 has an invalid length. [ 2556.680760][ T2699] netlink: 'syz.6.7603': attribute type 6 has an invalid length. [ 2556.719719][ T2699] netlink: 132 bytes leftover after parsing attributes in process `syz.6.7603'. [ 2557.096674][ T1492] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 2557.315731][ T1492] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2557.404063][ T1492] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2557.493930][ T1492] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2557.722268][ T1492] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2557.733242][ T2710] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7605'. [ 2557.752691][ T1492] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2557.793287][ T2710] netlink: 'syz.6.7605': attribute type 13 has an invalid length. [ 2557.906060][ T1492] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2558.086593][ T2713] syzkaller1: entered promiscuous mode [ 2558.121531][ T2713] syzkaller1: entered allmulticast mode [ 2558.829782][ T2727] netlink: 'syz.8.7609': attribute type 5 has an invalid length. [ 2558.873239][ T2727] netlink: 3657 bytes leftover after parsing attributes in process `syz.8.7609'. [ 2559.288005][ T1494] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 2559.408148][ T2729] FAULT_INJECTION: forcing a failure. [ 2559.408148][ T2729] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2559.449210][ T1494] usb 10-1: Using ep0 maxpacket: 8 [ 2559.461319][ T1494] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 2559.492832][ T2729] CPU: 1 UID: 0 PID: 2729 Comm: syz.4.7611 Not tainted syzkaller #0 PREEMPT(full) [ 2559.492863][ T2729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2559.492877][ T2729] Call Trace: [ 2559.492886][ T2729] [ 2559.492896][ T2729] dump_stack_lvl+0x189/0x250 [ 2559.492935][ T2729] ? __pfx____ratelimit+0x10/0x10 [ 2559.492962][ T2729] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2559.492993][ T2729] ? __pfx__printk+0x10/0x10 [ 2559.493015][ T2729] ? __might_fault+0xb0/0x130 [ 2559.493059][ T2729] should_fail_ex+0x414/0x560 [ 2559.493097][ T2729] _copy_from_user+0x2d/0xb0 [ 2559.493127][ T2729] ia32_restore_sigcontext+0xe5/0x5b0 [ 2559.493156][ T2729] ? __pfx_ia32_restore_sigcontext+0x10/0x10 [ 2559.493182][ T2729] ? _raw_spin_lock_irq+0xae/0xf0 [ 2559.493207][ T2729] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 2559.493244][ T2729] ? _raw_spin_unlock_irq+0x23/0x50 [ 2559.493267][ T2729] ? lockdep_hardirqs_on+0x9c/0x150 [ 2559.493296][ T2729] __ia32_compat_sys_sigreturn+0x21c/0x270 [ 2559.493325][ T2729] ? __pfx___ia32_compat_sys_sigreturn+0x10/0x10 [ 2559.493364][ T2729] ? do_int80_emulation+0xec/0x390 [ 2559.493397][ T2729] ? asm_int80_emulation+0x1a/0x20 [ 2559.493419][ T2729] do_int80_emulation+0x126/0x390 [ 2559.493450][ T2729] ? clear_bhb_loop+0x60/0xb0 [ 2559.493472][ T2729] ? clear_bhb_loop+0x60/0xb0 [ 2559.493498][ T2729] asm_int80_emulation+0x1a/0x20 [ 2559.493519][ T2729] RIP: 0023:0xf707d558 [ 2559.493537][ T2729] Code: 00 00 51 52 55 89 e5 0f 34 cd 80 5d 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 77 00 00 00 cd 80 <90> 90 90 90 90 90 90 90 b8 ad 00 00 00 cd 80 90 90 90 90 90 90 90 [ 2559.493556][ T2729] RSP: 002b:00000000f546ceb4 EFLAGS: 00000206 ORIG_RAX: 0000000000000077 [ 2559.493580][ T2729] RAX: ffffffffffffffda RBX: 00000000f5439000 RCX: 0000000000000000 [ 2559.493596][ T2729] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2559.493609][ T2729] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2559.493621][ T2729] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2559.493635][ T2729] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2559.493667][ T2729] [ 2559.539440][ T1494] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2559.539479][ T1494] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2559.539508][ T1494] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2559.539576][ T1494] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2559.539623][ T1494] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2559.539649][ T1494] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2559.959439][ T1494] usb 10-1: usb_control_msg returned -32 [ 2559.959516][ T1494] usbtmc 10-1:16.0: can't read capabilities [ 2559.983648][ T1492] usb 4-1: unable to read config index 2 descriptor/start: -71 [ 2559.983680][ T1492] usb 4-1: can't read configurations, error -71 [ 2560.293846][ T2743] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7613'. [ 2560.459433][ T2745] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2560.460017][ T2745] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2560.857103][ T2755] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7615'. [ 2562.000179][ T2778] fuse: Unknown parameter 'gŒoup_id' [ 2562.197946][ T1460] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 2562.211258][ T2780] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7621'. [ 2562.325078][ T2781] nvme_fabrics: missing parameter 'transport=%s' [ 2562.340984][ T2781] nvme_fabrics: missing parameter 'nqn=%s' [ 2562.463353][ T1460] usb 5-1: Using ep0 maxpacket: 32 [ 2562.501250][ T1460] usb 5-1: too many configurations: 17, using maximum allowed: 8 [ 2562.664865][ T1460] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 2562.687222][ T1460] usb 5-1: config 0 has no interface number 0 [ 2562.707220][ T1460] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 2562.739117][ T1460] usb 5-1: config 0 has no interface number 0 [ 2562.777703][ T1460] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 2562.785787][ T1460] usb 5-1: config 0 has no interface number 0 [ 2562.863413][ T1460] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 2562.872729][ T1460] usb 5-1: config 0 has no interface number 0 [ 2562.913977][ T1460] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 2562.922860][ T1460] usb 5-1: config 0 has no interface number 0 [ 2562.966655][ T1460] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 2562.986859][ T1460] usb 5-1: config 0 has no interface number 0 [ 2563.035840][ T1460] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 2563.074846][ T1460] usb 5-1: config 0 has no interface number 0 [ 2563.115181][ T1460] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 2563.144359][ T1460] usb 5-1: config 0 has no interface number 0 [ 2563.190898][ T1460] usb 5-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 2563.256098][ T1460] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2563.397310][ T1460] usb 5-1: Product: syz [ 2563.417304][ T1460] usb 5-1: Manufacturer: syz [ 2563.437906][ T1460] usb 5-1: SerialNumber: syz [ 2563.478376][ T1460] usb 5-1: config 0 descriptor?? [ 2563.506132][ T1460] etas_es58x 5-1:0.2: Starting syz syz (Serial Number syz) [ 2565.368591][ T2744] usbtmc 10-1:16.0: stb usb_control_msg returned -110 [ 2565.574796][ T1445] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 2565.634149][ T1492] usb 10-1: USB disconnect, device number 18 [ 2565.797579][ T1445] usb 4-1: Using ep0 maxpacket: 8 [ 2565.820204][ T1445] usb 4-1: config 2 interface 0 has no altsetting 0 [ 2565.851764][ T1445] usb 4-1: New USB device found, idVendor=04e2, idProduct=1412, bcdDevice=ca.10 [ 2565.894980][ T1445] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2565.925284][ T1445] usb 4-1: Product: syz [ 2565.949792][ T1445] usb 4-1: Manufacturer: syz [ 2565.958416][ T1445] usb 4-1: SerialNumber: syz [ 2566.036295][ T1460] etas_es58x 5-1:0.2: could not retrieve the product info string [ 2566.181814][ T1458] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 2566.209884][ T2820] FAULT_INJECTION: forcing a failure. [ 2566.209884][ T2820] name failslab, interval 1, probability 0, space 0, times 0 [ 2566.264471][ T1460] usb 5-1: USB disconnect, device number 71 [ 2566.272451][ T1445] usb 4-1: USB disconnect, device number 59 [ 2566.288089][ T2820] CPU: 0 UID: 0 PID: 2820 Comm: syz.4.7629 Not tainted syzkaller #0 PREEMPT(full) [ 2566.288120][ T2820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2566.288135][ T2820] Call Trace: [ 2566.288143][ T2820] [ 2566.288154][ T2820] dump_stack_lvl+0x189/0x250 [ 2566.288190][ T2820] ? __pfx____ratelimit+0x10/0x10 [ 2566.288219][ T2820] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2566.288249][ T2820] ? __pfx__printk+0x10/0x10 [ 2566.288272][ T2820] ? __pfx___might_resched+0x10/0x10 [ 2566.288295][ T2820] ? fs_reclaim_acquire+0x7d/0x100 [ 2566.288333][ T2820] should_fail_ex+0x414/0x560 [ 2566.288371][ T2820] should_failslab+0xa8/0x100 [ 2566.288396][ T2820] kmem_cache_alloc_noprof+0x74/0x6e0 [ 2566.288428][ T2820] ? skb_clone+0x212/0x3a0 [ 2566.288458][ T2820] skb_clone+0x212/0x3a0 [ 2566.288481][ T2820] ? nfnetlink_rcv+0x4ba/0x2590 [ 2566.288512][ T2820] nfnetlink_rcv+0x4ec/0x2590 [ 2566.288546][ T2820] ? __dev_queue_xmit+0x27b/0x3b50 [ 2566.288573][ T2820] ? __dev_queue_xmit+0x1d79/0x3b50 [ 2566.288597][ T2820] ? kasan_save_track+0x3e/0x80 [ 2566.288627][ T2820] ? __kasan_slab_alloc+0x6c/0x80 [ 2566.288668][ T2820] ? __dev_queue_xmit+0x27b/0x3b50 [ 2566.288705][ T2820] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 2566.288752][ T2820] ? ref_tracker_free+0x63a/0x7d0 [ 2566.288775][ T2820] ? __asan_memcpy+0x40/0x70 [ 2566.288803][ T2820] ? __pfx_ref_tracker_free+0x10/0x10 [ 2566.288841][ T2820] ? skb_clone+0x246/0x3a0 [ 2566.288876][ T2820] ? __netlink_deliver_tap+0x807/0x850 [ 2566.288911][ T2820] ? netlink_deliver_tap+0x2e/0x1b0 [ 2566.288962][ T2820] netlink_unicast+0x82f/0x9e0 [ 2566.289002][ T2820] ? __pfx_netlink_unicast+0x10/0x10 [ 2566.289034][ T2820] ? netlink_sendmsg+0x642/0xb30 [ 2566.289053][ T2820] ? skb_put+0x11b/0x210 [ 2566.289078][ T2820] netlink_sendmsg+0x805/0xb30 [ 2566.289107][ T2820] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2566.289130][ T2820] ? __import_iovec+0x5d4/0x7f0 [ 2566.289155][ T2820] ? aa_sock_msg_perm+0xf1/0x1d0 [ 2566.289188][ T2820] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2566.289210][ T2820] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2566.289232][ T2820] __sock_sendmsg+0x21c/0x270 [ 2566.289264][ T2820] ____sys_sendmsg+0x505/0x830 [ 2566.289292][ T2820] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2566.289332][ T2820] ___sys_sendmsg+0x21f/0x2a0 [ 2566.289358][ T2820] ? __pfx____sys_sendmsg+0x10/0x10 [ 2566.289419][ T2820] ? __fget_files+0x2a/0x420 [ 2566.289439][ T2820] ? __fget_files+0x3a0/0x420 [ 2566.289491][ T2820] __sys_sendmsg+0x164/0x220 [ 2566.289516][ T2820] ? __pfx___sys_sendmsg+0x10/0x10 [ 2566.289548][ T2820] ? __pfx_ksys_write+0x10/0x10 [ 2566.289584][ T2820] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 2566.289618][ T2820] ? lockdep_hardirqs_on+0x9c/0x150 [ 2566.289650][ T2820] __do_fast_syscall_32+0xb6/0x2b0 [ 2566.289682][ T2820] ? lockdep_hardirqs_on+0x9c/0x150 [ 2566.289716][ T2820] do_fast_syscall_32+0x34/0x80 [ 2566.289745][ T2820] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2566.289772][ T2820] RIP: 0023:0xf707d539 [ 2566.289791][ T2820] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2566.289811][ T2820] RSP: 002b:00000000f546d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 2566.289836][ T2820] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0 [ 2566.289852][ T2820] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2566.289873][ T2820] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2566.289886][ T2820] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2566.289900][ T2820] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2566.289932][ T2820] [ 2566.292759][ T1460] etas_es58x 5-1:0.2: Disconnecting syz syz [ 2566.755745][ T1458] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2566.765112][ T1458] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2566.779520][ T2824] kvm: requested 111466 ns i8254 timer period limited to 200000 ns [ 2566.812975][ T1458] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2566.867573][ T1458] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2566.957266][ T1458] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2566.987228][ T1458] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2567.021521][ T1458] usb 10-1: Product: syz [ 2567.025840][ T1458] usb 10-1: Manufacturer: syz [ 2567.088724][ T2832] netlink: 592 bytes leftover after parsing attributes in process `syz.3.7634'. [ 2567.111026][ T1458] cdc_wdm 10-1:1.0: skipping garbage [ 2567.132029][ T1458] cdc_wdm 10-1:1.0: skipping garbage [ 2567.151243][ T1458] cdc_wdm 10-1:1.0: probe with driver cdc_wdm failed with error -22 [ 2567.351184][ T1493] usb 10-1: USB disconnect, device number 19 [ 2567.888258][ T1493] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 2568.079016][ T1493] usb 10-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 2568.127574][ T1493] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2568.142774][ T1493] usb 10-1: Product: syz [ 2568.151624][ T1493] usb 10-1: Manufacturer: syz [ 2568.159363][ T1493] usb 10-1: SerialNumber: syz [ 2568.411334][ T1493] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 2568.482929][ T1493] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 2568.524497][ T1493] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 2568.566601][ T1493] lan78xx 10-1:1.0: probe with driver lan78xx failed with error -71 [ 2568.613515][ T1493] usb 10-1: USB disconnect, device number 20 [ 2568.711986][ T2877] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6_vti0, syncid = 1, id = 0 [ 2569.214132][ T1445] usb 9-1: new high-speed USB device number 61 using dummy_hcd [ 2569.417325][ T1445] usb 9-1: Using ep0 maxpacket: 32 [ 2569.469008][ T1445] usb 9-1: config 3 has an invalid interface number: 202 but max is 0 [ 2569.497715][ T1445] usb 9-1: config 3 has no interface number 0 [ 2569.505935][ T1445] usb 9-1: config 3 interface 202 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 8 [ 2569.578801][ T1445] usb 9-1: New USB device found, idVendor=0b95, idProduct=178a, bcdDevice=b0.61 [ 2569.630363][ T1445] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2569.711490][ T1445] usb 9-1: Product: syz [ 2569.715776][ T1445] usb 9-1: Manufacturer: syz [ 2569.762128][ T1445] usb 9-1: SerialNumber: syz [ 2569.791466][ T2879] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 2571.743940][ T2898] netlink: 188 bytes leftover after parsing attributes in process `syz.4.7646'. [ 2571.962391][ T1445] ax88179_178a 9-1:3.202: probe with driver ax88179_178a failed with error -71 [ 2572.046572][ T1445] usb 9-1: USB disconnect, device number 61 [ 2572.869384][ T2916] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7651'. [ 2573.137732][ T1493] usb 10-1: new high-speed USB device number 21 using dummy_hcd [ 2573.193898][ T2918] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7652'. [ 2573.386756][ T1493] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2573.418641][ T1493] usb 10-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 2573.471955][ T1493] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2573.508557][ T1493] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 2573.531671][ T1493] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 2573.641054][ T1493] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2573.722215][ T1493] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2573.762984][ T1493] usb 10-1: Product: syz [ 2573.791979][ T1493] usb 10-1: Manufacturer: syz [ 2573.833587][ T1493] cdc_wdm 10-1:1.0: skipping garbage [ 2573.860378][ T1493] cdc_wdm 10-1:1.0: skipping garbage [ 2573.924534][ T1493] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device [ 2574.012487][ T1493] cdc_wdm 10-1:1.0: Unknown control protocol [ 2574.498639][ T30] audit: type=1800 audit(1761429347.699:3996): pid=2928 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.7654" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 2574.652944][ T1493] usb 10-1: USB disconnect, device number 21 [ 2575.456886][ T2939] 8021q: adding VLAN 0 to HW filter on device bond3 [ 2575.991238][ T2928] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7654'. [ 2577.378032][ T1493] usb 10-1: new high-speed USB device number 22 using dummy_hcd [ 2577.585785][ T1493] usb 10-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 2577.601146][ T1493] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2577.632809][ T1493] usb 10-1: config 0 descriptor?? [ 2577.760761][ T2929] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7654'. [ 2578.219721][ T2973] netlink: 'syz.8.7665': attribute type 5 has an invalid length. [ 2578.231442][ T2973] netlink: 3657 bytes leftover after parsing attributes in process `syz.8.7665'. [ 2578.288142][ T1493] usb 10-1: Cannot set autoneg [ 2578.298101][ T1493] MOSCHIP usb-ethernet driver 10-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -32 [ 2579.144011][ T1492] usb 10-1: USB disconnect, device number 22 [ 2579.381610][ T2991] netlink: 'syz.9.7671': attribute type 1 has an invalid length. [ 2579.392677][ T2992] netlink: 'syz.9.7671': attribute type 1 has an invalid length. [ 2579.910396][ T2994] bond4: (slave veth3): Enslaving as an active interface with a down link [ 2580.238601][ T3004] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 2580.288646][ T3004] pimreg: tun_chr_ioctl cmd 1074025677 [ 2580.312894][ T3004] pimreg: linktype set to 768 [ 2580.668192][ T30] audit: type=1326 audit(1761429353.859:3997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3008 comm="syz.8.7676" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf702d539 code=0x0 [ 2581.311811][ T3016] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7677'. [ 2582.190697][ T3026] netlink: 28 bytes leftover after parsing attributes in process `syz.6.7679'. [ 2583.550845][ T1461] IPVS: starting estimator thread 0... [ 2583.667506][ T3046] IPVS: using max 27 ests per chain, 64800 per kthread [ 2583.994461][ T3058] fuse: Unknown parameter 'gŒoup_id' [ 2584.488798][ T3058] nvme_fabrics: missing parameter 'transport=%s' [ 2584.554162][ T3058] nvme_fabrics: missing parameter 'nqn=%s' [ 2584.602551][ T3076] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7690'. [ 2584.638616][ T3076] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7690'. [ 2586.111190][ T3081] fuse: Unknown parameter '' [ 2586.200149][ T3084] netlink: 28 bytes leftover after parsing attributes in process `syz.6.7692'. [ 2586.417259][ T1460] usb 5-1: new full-speed USB device number 72 using dummy_hcd [ 2586.842709][ T1460] usb 5-1: config 36 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2586.871117][ T1460] usb 5-1: config 36 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 2586.904678][ T1460] usb 5-1: config 36 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 2586.932640][ T1460] usb 5-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 2586.942227][ T1460] usb 5-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 2586.963909][ T1460] usb 5-1: Manufacturer: syz [ 2586.976638][ T1460] usb 5-1: SerialNumber: syz [ 2587.390844][ T1460] yealink 5-1:36.0: invalid payload size 0, expected 16 [ 2587.421055][ T1460] input: Yealink usb-p1k as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:36.0/input/input184 [ 2587.488815][ C0] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 2587.495953][ C0] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 2587.502976][ C0] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 2587.510248][ C0] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 2587.519018][ C0] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 2587.526249][ C0] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 2587.533200][ C0] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 2587.540165][ C0] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 2587.546945][ C0] yealink 5-1:36.0: urb_ctl_callback - usb_submit_urb failed -90 [ 2587.647738][ T1460] usb 5-1: USB disconnect, device number 72 [ 2587.742923][ T3094] netlink: 'syz.3.7696': attribute type 5 has an invalid length. [ 2587.751551][ T3094] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.7696'. [ 2588.678280][ T1493] usb 9-1: new high-speed USB device number 62 using dummy_hcd [ 2588.726926][ T3101] FAULT_INJECTION: forcing a failure. [ 2588.726926][ T3101] name failslab, interval 1, probability 0, space 0, times 0 [ 2588.792083][ T3101] CPU: 1 UID: 0 PID: 3101 Comm: syz.3.7698 Not tainted syzkaller #0 PREEMPT(full) [ 2588.792114][ T3101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2588.792129][ T3101] Call Trace: [ 2588.792137][ T3101] [ 2588.792150][ T3101] dump_stack_lvl+0x189/0x250 [ 2588.792186][ T3101] ? __pfx____ratelimit+0x10/0x10 [ 2588.792217][ T3101] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2588.792248][ T3101] ? __pfx__printk+0x10/0x10 [ 2588.792278][ T3101] ? __pfx___might_resched+0x10/0x10 [ 2588.792302][ T3101] ? fs_reclaim_acquire+0x7d/0x100 [ 2588.792343][ T3101] should_fail_ex+0x414/0x560 [ 2588.792383][ T3101] should_failslab+0xa8/0x100 [ 2588.792408][ T3101] __kmalloc_noprof+0xcb/0x7f0 [ 2588.792448][ T3101] ? tomoyo_encode+0x28b/0x550 [ 2588.792491][ T3101] tomoyo_encode+0x28b/0x550 [ 2588.792532][ T3101] tomoyo_realpath_from_path+0x58d/0x5d0 [ 2588.792579][ T3101] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 2588.792608][ T3101] tomoyo_path_number_perm+0x1e8/0x5a0 [ 2588.792640][ T3101] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2588.792688][ T3101] ? __lock_acquire+0xab9/0xd20 [ 2588.792733][ T3101] ? __fget_files+0x2a/0x420 [ 2588.792760][ T3101] ? __fget_files+0x3a0/0x420 [ 2588.792781][ T3101] ? __fget_files+0x2a/0x420 [ 2588.792807][ T3101] security_file_ioctl_compat+0xcb/0x2d0 [ 2588.792838][ T3101] __ia32_compat_sys_ioctl+0x128/0x840 [ 2588.792874][ T3101] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 2588.792905][ T3101] ? __fget_files+0x3a0/0x420 [ 2588.792935][ T3101] ? fput+0xa0/0xd0 [ 2588.792961][ T3101] ? ksys_write+0x22a/0x250 [ 2588.792991][ T3101] ? exc_page_fault+0x82/0x100 [ 2588.793021][ T3101] ? __pfx_ksys_write+0x10/0x10 [ 2588.793055][ T3101] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 2588.793087][ T3101] ? lockdep_hardirqs_on+0x9c/0x150 [ 2588.793118][ T3101] __do_fast_syscall_32+0xb6/0x2b0 [ 2588.793150][ T3101] ? lockdep_hardirqs_on+0x9c/0x150 [ 2588.793183][ T3101] do_fast_syscall_32+0x34/0x80 [ 2588.793214][ T3101] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2588.793241][ T3101] RIP: 0023:0xf705d539 [ 2588.793259][ T3101] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2588.793278][ T3101] RSP: 002b:00000000f544d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 2588.793302][ T3101] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000041045508 [ 2588.793318][ T3101] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2588.793331][ T3101] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2588.793344][ T3101] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2588.793358][ T3101] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2588.793392][ T3101] [ 2588.793759][ T3101] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2589.298242][ T1493] usb 9-1: Using ep0 maxpacket: 32 [ 2589.308839][ T1493] usb 9-1: config 0 has an invalid interface number: 67 but max is 0 [ 2589.316969][ T1493] usb 9-1: config 0 has no interface number 0 [ 2589.324663][ T1493] usb 9-1: config 0 interface 67 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2589.369394][ T1493] usb 9-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 2589.387853][ T1493] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2589.414389][ T1493] usb 9-1: Product: syz [ 2589.439906][ T1493] usb 9-1: Manufacturer: syz [ 2589.444567][ T1493] usb 9-1: SerialNumber: syz [ 2589.484394][ T1493] usb 9-1: config 0 descriptor?? [ 2589.531488][ T1493] smsc95xx v2.0.0 [ 2589.582997][ T1493] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 2589.643030][ T1493] smsc95xx 9-1:0.67: probe with driver smsc95xx failed with error -22 [ 2590.271037][ T3124] fuse: Unknown parameter 'gŒoup_id' [ 2590.437263][ T1460] usb 10-1: new high-speed USB device number 23 using dummy_hcd [ 2590.963776][ T3125] nvme_fabrics: missing parameter 'transport=%s' [ 2590.977243][ T1460] usb 10-1: Using ep0 maxpacket: 8 [ 2591.050937][ T3125] nvme_fabrics: missing parameter 'nqn=%s' [ 2591.191573][ T3132] syzkaller1: entered promiscuous mode [ 2591.233352][ T3132] syzkaller1: entered allmulticast mode [ 2591.339951][ T1460] usb 10-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2591.351701][ T1460] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 2591.363994][ T1460] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 239, changing to 11 [ 2591.406718][ T1460] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 9059, setting to 1024 [ 2591.486810][ T1458] usb 9-1: USB disconnect, device number 62 [ 2591.500786][ T1460] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 2591.803471][ T1460] usb 10-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 2591.824807][ T1460] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2591.848899][ T1460] usb 10-1: Product: syz [ 2591.853193][ T1460] usb 10-1: Manufacturer: syz [ 2591.891485][ T1460] usb 10-1: SerialNumber: syz [ 2591.918628][ T1460] usb 10-1: config 0 descriptor?? [ 2591.987792][ T1458] usb 9-1: new full-speed USB device number 63 using dummy_hcd [ 2592.177667][ T1458] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2592.210193][ T1458] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2592.240711][ T3139] sctp: [Deprecated]: syz.6.7707 (pid 3139) Use of int in max_burst socket option. [ 2592.240711][ T3139] Use struct sctp_assoc_value instead [ 2592.282524][ T1458] usb 9-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 2592.319123][ T1458] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2592.336757][ T3140] fuse: Bad value for 'user_id' [ 2592.354273][ T3140] fuse: Bad value for 'user_id' [ 2592.378899][ T1458] usb 9-1: config 0 descriptor?? [ 2593.038211][ T1458] usbhid 9-1:0.0: can't add hid device: -71 [ 2593.052322][ T1458] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 2593.106285][ T1458] usb 9-1: USB disconnect, device number 63 [ 2593.227465][ T1460] usb 10-1: can't set config #0, error -71 [ 2593.264119][ T1460] usb 10-1: USB disconnect, device number 23 [ 2593.417863][ T1493] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 2593.600172][ T1493] usb 7-1: config 0 interface 0 has no altsetting 0 [ 2593.610964][ T3156] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7711'. [ 2593.626221][ T1493] usb 7-1: New USB device found, idVendor=0582, idProduct=008d, bcdDevice=7a.ac [ 2593.648630][ T1493] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2593.663905][ T3156] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7711'. [ 2593.675571][ T1493] usb 7-1: Product: syz [ 2593.683019][ T1493] usb 7-1: Manufacturer: syz [ 2593.688489][ T3156] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7711'. [ 2593.699380][ T1493] usb 7-1: SerialNumber: syz [ 2593.729643][ T1493] usb 7-1: config 0 descriptor?? [ 2593.765778][ T3156] syz_tun: entered promiscuous mode [ 2593.824773][ T1493] usb 7-1: interface 1 not found [ 2593.853314][ T3156] batadv_slave_1: entered promiscuous mode [ 2593.915931][ T3156] batadv_slave_1: left promiscuous mode [ 2593.972201][ T3156] syz_tun: left promiscuous mode [ 2594.045546][ T3144] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2594.118694][ T3144] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2595.698830][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 2595.705254][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 2595.912701][ T1460] usb 7-1: USB disconnect, device number 22 [ 2596.294045][ T3179] netlink: 'syz.9.7716': attribute type 5 has an invalid length. [ 2596.339270][ T3179] netlink: 3657 bytes leftover after parsing attributes in process `syz.9.7716'. [ 2596.691920][ T3188] netlink: 'syz.6.7717': attribute type 5 has an invalid length. [ 2596.752281][ T3188] netlink: 3657 bytes leftover after parsing attributes in process `syz.6.7717'. [ 2597.009508][ T3193] netlink: 156 bytes leftover after parsing attributes in process `syz.8.7718'. [ 2597.898366][ T3169] fuse: Unknown parameter 'f' [ 2598.232607][ T3212] veth0: entered promiscuous mode [ 2598.422046][ T3212] veth0: left promiscuous mode [ 2598.962348][ T3225] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 2599.027937][ T1492] usb 10-1: new high-speed USB device number 24 using dummy_hcd [ 2599.232628][ T1492] usb 10-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.05 [ 2599.268195][ T1492] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2599.300136][ T1492] usb 10-1: Product: syz [ 2599.314018][ T1492] usb 10-1: Manufacturer: syz [ 2599.334327][ T1492] usb 10-1: SerialNumber: syz [ 2599.351895][ T1492] usb 10-1: config 0 descriptor?? [ 2599.364092][ T1492] go7007 10-1:0.0: probe with driver go7007 failed with error -12 [ 2599.666685][ T1492] usb 10-1: USB disconnect, device number 24 [ 2600.133442][ T1445] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 2600.380889][ T1445] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 2600.428233][ T3250] vcan0: tx address claim with dlc 0 [ 2600.491733][ T1445] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 2600.592374][ T1445] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 2600.666735][ T1445] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 2600.718514][ T1445] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2600.830849][ T1445] usb 5-1: Product: syz [ 2600.835058][ T1445] usb 5-1: Manufacturer: syz [ 2600.875730][ T3256] macvtap1: entered allmulticast mode [ 2600.896729][ T3256] veth0_macvtap: entered allmulticast mode [ 2600.911214][ T1445] usb 5-1: SerialNumber: syz [ 2601.024485][ T1445] usb 5-1: config 0 descriptor?? [ 2601.063198][ T3244] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 2601.100342][ T3244] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 2601.164163][ T1445] usb 5-1: ucan: probing device on interface #0 [ 2601.907543][ T1445] ucan 5-1:0.0: probe with driver ucan failed with error -71 [ 2601.956211][ T1445] usb 5-1: USB disconnect, device number 73 [ 2602.927246][ T1458] usb 4-1: new full-speed USB device number 60 using dummy_hcd [ 2603.117651][ T1458] usb 4-1: not running at top speed; connect to a high speed hub [ 2603.142011][ T1458] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 2603.168432][ T1458] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 2603.196641][ T1458] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2603.217002][ T3274] netlink: 'syz.9.7740': attribute type 3 has an invalid length. [ 2603.224874][ T1458] usb 4-1: string descriptor 0 read error: -22 [ 2603.225009][ T1458] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2603.225037][ T1458] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2603.258737][ T3274] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7740'. [ 2603.280814][ T1458] usb 4-1: 0:2 : does not exist [ 2603.553078][ T1458] usb 4-1: USB disconnect, device number 60 [ 2605.454357][ T3293] syz_tun: entered allmulticast mode [ 2605.488355][ T3292] syz_tun: left allmulticast mode [ 2606.129927][ T3301] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7746'. [ 2606.337235][ T1461] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 2606.476507][ T3307] FAULT_INJECTION: forcing a failure. [ 2606.476507][ T3307] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2606.511776][ T3307] CPU: 1 UID: 0 PID: 3307 Comm: syz.4.7750 Not tainted syzkaller #0 PREEMPT(full) [ 2606.511798][ T3307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2606.511809][ T3307] Call Trace: [ 2606.511816][ T3307] [ 2606.511823][ T3307] dump_stack_lvl+0x189/0x250 [ 2606.511850][ T3307] ? __pfx____ratelimit+0x10/0x10 [ 2606.511869][ T3307] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2606.511891][ T3307] ? __pfx__printk+0x10/0x10 [ 2606.511908][ T3307] ? __might_fault+0xb0/0x130 [ 2606.511939][ T3307] should_fail_ex+0x414/0x560 [ 2606.511967][ T3307] fpu__restore_sig+0x1bb/0x1100 [ 2606.511994][ T3307] ? __lock_acquire+0xab9/0xd20 [ 2606.512012][ T3307] ? __pfx_fpu__restore_sig+0x10/0x10 [ 2606.512056][ T3307] ia32_restore_sigcontext+0x449/0x5b0 [ 2606.512077][ T3307] ? __pfx_ia32_restore_sigcontext+0x10/0x10 [ 2606.512096][ T3307] ? _raw_spin_lock_irq+0xae/0xf0 [ 2606.512114][ T3307] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 2606.512141][ T3307] ? _raw_spin_unlock_irq+0x23/0x50 [ 2606.512159][ T3307] ? lockdep_hardirqs_on+0x9c/0x150 [ 2606.512181][ T3307] __ia32_compat_sys_sigreturn+0x21c/0x270 [ 2606.512202][ T3307] ? __pfx___ia32_compat_sys_sigreturn+0x10/0x10 [ 2606.512224][ T3307] ? do_int80_emulation+0xec/0x390 [ 2606.512247][ T3307] ? asm_int80_emulation+0x1a/0x20 [ 2606.512263][ T3307] do_int80_emulation+0x126/0x390 [ 2606.512286][ T3307] ? clear_bhb_loop+0x60/0xb0 [ 2606.512302][ T3307] ? clear_bhb_loop+0x60/0xb0 [ 2606.512321][ T3307] asm_int80_emulation+0x1a/0x20 [ 2606.512336][ T3307] RIP: 0023:0xf707d539 [ 2606.512354][ T3307] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2606.512367][ T3307] RSP: 002b:00000000f546d55c EFLAGS: 00000206 [ 2606.512382][ T3307] RAX: 0000000000000001 RBX: 00000000f5439000 RCX: 0000000000000002 [ 2606.512392][ T3307] RDX: 00000000800001c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2606.512402][ T3307] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2606.512411][ T3307] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2606.512421][ T3307] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2606.512443][ T3307] [ 2606.628030][ T1461] usb 7-1: Using ep0 maxpacket: 32 [ 2606.895287][ T1461] usb 7-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice=10.06 [ 2606.895323][ T1461] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2606.895347][ T1461] usb 7-1: Product: syz [ 2606.895364][ T1461] usb 7-1: Manufacturer: syz [ 2606.895382][ T1461] usb 7-1: SerialNumber: syz [ 2607.028072][ T1492] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 2607.208224][ T1492] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 2607.208253][ T1492] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2607.208274][ T1492] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2607.208305][ T1492] usb 4-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 2607.208323][ T1492] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2607.210545][ T1492] usb 4-1: config 0 descriptor?? [ 2607.651465][ T1492] sony 0003:054C:024B.0080: unknown main item tag 0x0 [ 2607.651497][ T1492] sony 0003:054C:024B.0080: unknown main item tag 0x0 [ 2607.651517][ T1492] sony 0003:054C:024B.0080: unknown main item tag 0x4 [ 2607.651538][ T1492] sony 0003:054C:024B.0080: unknown main item tag 0x0 [ 2607.651595][ T1492] sony 0003:054C:024B.0080: unknown main item tag 0x0 [ 2607.651616][ T1492] sony 0003:054C:024B.0080: unknown main item tag 0x0 [ 2607.651636][ T1492] sony 0003:054C:024B.0080: unknown main item tag 0x0 [ 2607.651664][ T1492] sony 0003:054C:024B.0080: unknown main item tag 0x0 [ 2607.651693][ T1492] sony 0003:054C:024B.0080: unknown main item tag 0x0 [ 2607.651714][ T1492] sony 0003:054C:024B.0080: unknown main item tag 0x0 [ 2607.656393][ T1492] sony 0003:054C:024B.0080: unexpected long global item [ 2607.657062][ T1492] sony 0003:054C:024B.0080: parse failed [ 2607.658903][ T1492] sony 0003:054C:024B.0080: probe with driver sony failed with error -22 [ 2607.820582][ T1461] usb 7-1: config 0 descriptor?? [ 2607.839378][ T1461] ums_eneub6250 7-1:0.0: USB Mass Storage device detected [ 2607.864475][ T1494] usb 4-1: USB disconnect, device number 61 [ 2610.051633][ T3321] geneve2: entered allmulticast mode [ 2610.173966][ T1494] usb 7-1: USB disconnect, device number 23 [ 2610.688133][ T1460] usb 9-1: new high-speed USB device number 64 using dummy_hcd [ 2610.743456][ T3343] fuse: Unknown parameter 'gŒoup_id' [ 2610.904718][ T1460] usb 9-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 2610.954974][ T1460] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2610.965407][ T3348] tipc: Enabling of bearer rejected, already enabled [ 2611.039510][ T1460] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2611.059919][ T3343] nvme_fabrics: missing parameter 'transport=%s' [ 2611.071858][ T3343] nvme_fabrics: missing parameter 'nqn=%s' [ 2611.095794][ T1460] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2611.108699][ T3351] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7755'. [ 2611.154159][ T1460] usb 9-1: Product: syz [ 2611.210165][ T3352] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7759'. [ 2611.227225][ T1460] usb 9-1: Manufacturer: syz [ 2611.277452][ T1460] usb 9-1: SerialNumber: syz [ 2611.461667][ T3352] 8021q: adding VLAN 0 to HW filter on device bond3 [ 2611.555187][ T3357] macvlan0: entered promiscuous mode [ 2611.576667][ T3357] macvlan0: entered allmulticast mode [ 2611.596732][ T3357] bond3: entered promiscuous mode [ 2611.613327][ T3357] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 2611.639870][ T3332] [ 2611.642257][ T3332] ===================================================== [ 2611.649208][ T3332] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 2611.656699][ T3332] syzkaller #0 Not tainted [ 2611.661156][ T3332] ----------------------------------------------------- [ 2611.668101][ T3332] syz.8.7754/3332 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 2611.675807][ T3332] ffff888089ebf468 (&tty->flow.lock){....}-{3:3}, at: stop_tty+0x2f/0x150 [ 2611.684408][ T3332] [ 2611.684408][ T3332] and this task is already holding: [ 2611.691794][ T3332] ffffffff8e759118 (kbd_event_lock){....}-{3:3}, at: kbd_event+0xd2/0x3f70 [ 2611.700476][ T3332] which would create a new lock dependency: [ 2611.706370][ T3332] (kbd_event_lock){....}-{3:3} -> (&tty->flow.lock){....}-{3:3} [ 2611.714145][ T3332] [ 2611.714145][ T3332] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 2611.723609][ T3332] (&dev->event_lock#2){..-.}-{3:3} [ 2611.723649][ T3332] [ 2611.723649][ T3332] ... which became SOFTIRQ-irq-safe at: [ 2611.736567][ T3332] lock_acquire+0x120/0x360 [ 2611.741184][ T3332] _raw_spin_lock_irqsave+0xa7/0xf0 [ 2611.746494][ T3332] input_inject_event+0xa5/0x340 [ 2611.751548][ T3332] led_trigger_event+0x138/0x210 [ 2611.756594][ T3332] kbd_bh+0x1c6/0x2e0 [ 2611.760684][ T3332] tasklet_action_common+0x36c/0x580 [ 2611.766090][ T3332] handle_softirqs+0x286/0x870 [ 2611.771154][ T3332] __irq_exit_rcu+0xca/0x1f0 [ 2611.775876][ T3332] irq_exit_rcu+0x9/0x30 [ 2611.780261][ T3332] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 2611.786036][ T3332] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2611.792146][ T3332] _raw_spin_unlock_irq+0x29/0x50 [ 2611.797286][ T3332] n_tty_ioctl_helper+0x27e/0x340 [ 2611.802448][ T3332] tty_ioctl+0x9c6/0xde0 [ 2611.806827][ T3332] __ia32_compat_sys_ioctl+0x543/0x840 [ 2611.812421][ T3332] __do_fast_syscall_32+0xb6/0x2b0 [ 2611.817781][ T3332] do_fast_syscall_32+0x34/0x80 [ 2611.822765][ T3332] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2611.829227][ T3332] [ 2611.829227][ T3332] to a SOFTIRQ-irq-unsafe lock: [ 2611.836268][ T3332] (tasklist_lock){.+.+}-{3:3} [ 2611.836310][ T3332] [ 2611.836310][ T3332] ... which became SOFTIRQ-irq-unsafe at: [ 2611.849008][ T3332] ... [ 2611.849024][ T3332] lock_acquire+0x120/0x360 [ 2611.856357][ T3332] _raw_read_lock+0x36/0x50 [ 2611.861001][ T3332] __do_wait+0xde/0x740 [ 2611.865359][ T3332] do_wait+0x1f8/0x510 [ 2611.869559][ T3332] kernel_wait+0xab/0x170 [ 2611.874007][ T3332] call_usermodehelper_exec_work+0xbe/0x230 [ 2611.880011][ T3332] process_scheduled_works+0xae1/0x17b0 [ 2611.885693][ T3332] worker_thread+0x8a0/0xda0 [ 2611.890422][ T3332] kthread+0x711/0x8a0 [ 2611.894619][ T3332] ret_from_fork+0x4bc/0x870 [ 2611.899316][ T3332] ret_from_fork_asm+0x1a/0x30 [ 2611.904184][ T3332] [ 2611.904184][ T3332] other info that might help us debug this: [ 2611.904184][ T3332] [ 2611.914428][ T3332] Chain exists of: [ 2611.914428][ T3332] &dev->event_lock#2 --> kbd_event_lock --> tasklist_lock [ 2611.914428][ T3332] [ 2611.927509][ T3332] Possible interrupt unsafe locking scenario: [ 2611.927509][ T3332] [ 2611.935844][ T3332] CPU0 CPU1 [ 2611.941256][ T3332] ---- ---- [ 2611.946648][ T3332] lock(tasklist_lock); [ 2611.950917][ T3332] local_irq_disable(); [ 2611.957687][ T3332] lock(&dev->event_lock#2); [ 2611.964930][ T3332] lock(kbd_event_lock); [ 2611.971798][ T3332] [ 2611.975268][ T3332] lock(&dev->event_lock#2); [ 2611.980281][ T3332] [ 2611.980281][ T3332] *** DEADLOCK *** [ 2611.980281][ T3332] [ 2611.988443][ T3332] 5 locks held by syz.8.7754/3332: [ 2611.993572][ T3332] #0: ffff8881473ac118 (&evdev->mutex){+.+.}-{4:4}, at: evdev_write+0x1a1/0x480 [ 2612.002755][ T3332] #1: ffff888028fa3230 (&dev->event_lock#2){..-.}-{3:3}, at: input_inject_event+0xa5/0x340 [ 2612.012903][ T3332] #2: ffffffff8df3d2e0 (rcu_read_lock){....}-{1:3}, at: input_inject_event+0xb6/0x340 [ 2612.022601][ T3332] #3: ffffffff8df3d2e0 (rcu_read_lock){....}-{1:3}, at: input_pass_values+0x8d/0x890 [ 2612.032219][ T3332] #4: ffffffff8e759118 (kbd_event_lock){....}-{3:3}, at: kbd_event+0xd2/0x3f70 [ 2612.041320][ T3332] [ 2612.041320][ T3332] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 2612.051754][ T3332] -> (&dev->event_lock#2){..-.}-{3:3} { [ 2612.057455][ T3332] IN-SOFTIRQ-W at: [ 2612.061566][ T3332] lock_acquire+0x120/0x360 [ 2612.067933][ T3332] _raw_spin_lock_irqsave+0xa7/0xf0 [ 2612.075001][ T3332] input_inject_event+0xa5/0x340 [ 2612.081803][ T3332] led_trigger_event+0x138/0x210 [ 2612.088598][ T3332] kbd_bh+0x1c6/0x2e0 [ 2612.094431][ T3332] tasklet_action_common+0x36c/0x580 [ 2612.101559][ T3332] handle_softirqs+0x286/0x870 [ 2612.108212][ T3332] __irq_exit_rcu+0xca/0x1f0 [ 2612.114715][ T3332] irq_exit_rcu+0x9/0x30 [ 2612.120838][ T3332] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 2612.128325][ T3332] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2612.136163][ T3332] _raw_spin_unlock_irq+0x29/0x50 [ 2612.143054][ T3332] n_tty_ioctl_helper+0x27e/0x340 [ 2612.149975][ T3332] tty_ioctl+0x9c6/0xde0 [ 2612.156097][ T3332] __ia32_compat_sys_ioctl+0x543/0x840 [ 2612.163446][ T3332] __do_fast_syscall_32+0xb6/0x2b0 [ 2612.170414][ T3332] do_fast_syscall_32+0x34/0x80 [ 2612.177122][ T3332] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2612.185327][ T3332] INITIAL USE at: [ 2612.189369][ T3332] lock_acquire+0x120/0x360 [ 2612.195621][ T3332] _raw_spin_lock_irqsave+0xa7/0xf0 [ 2612.202573][ T3332] input_inject_event+0xa5/0x340 [ 2612.209289][ T3332] kbd_led_trigger_activate+0xbc/0x100 [ 2612.216510][ T3332] led_trigger_set+0x52d/0x950 [ 2612.223055][ T3332] led_trigger_set_default+0x260/0x2a0 [ 2612.230322][ T3332] led_classdev_register_ext+0x73d/0x930 [ 2612.237732][ T3332] input_leds_connect+0x517/0x790 [ 2612.244530][ T3332] input_register_device+0xd00/0x1140 [ 2612.251655][ T3332] atkbd_connect+0x72e/0xa00 [ 2612.258020][ T3332] serio_driver_probe+0x82/0xd0 [ 2612.264683][ T3332] really_probe+0x26d/0x9e0 [ 2612.270966][ T3332] __driver_probe_device+0x18c/0x2f0 [ 2612.278052][ T3332] driver_probe_device+0x4f/0x430 [ 2612.284908][ T3332] __driver_attach+0x452/0x700 [ 2612.291440][ T3332] bus_for_each_dev+0x233/0x2b0 [ 2612.298075][ T3332] serio_handle_event+0x1f9/0x8d0 [ 2612.304880][ T3332] process_scheduled_works+0xae1/0x17b0 [ 2612.312196][ T3332] worker_thread+0x8a0/0xda0 [ 2612.318566][ T3332] kthread+0x711/0x8a0 [ 2612.324402][ T3332] ret_from_fork+0x4bc/0x870 [ 2612.330767][ T3332] ret_from_fork_asm+0x1a/0x30 [ 2612.337367][ T3332] } [ 2612.339975][ T3332] ... key at: [] input_allocate_device.__key.5+0x0/0x20 [ 2612.349122][ T3332] -> (kbd_event_lock){....}-{3:3} { [ 2612.354378][ T3332] INITIAL USE at: [ 2612.358284][ T3332] lock_acquire+0x120/0x360 [ 2612.364381][ T3332] _raw_spin_lock_irqsave+0xa7/0xf0 [ 2612.371261][ T3332] vt_reset_unicode+0x2b/0x160 [ 2612.377616][ T3332] reset_vc+0x68/0x1b0 [ 2612.383273][ T3332] vc_init+0x70/0x4a0 [ 2612.388838][ T3332] con_init+0x385/0x9c0 [ 2612.394572][ T3332] console_init+0x10e/0x430 [ 2612.400684][ T3332] start_kernel+0x254/0x410 [ 2612.406784][ T3332] x86_64_start_reservations+0x24/0x30 [ 2612.413828][ T3332] x86_64_start_kernel+0x143/0x1c0 [ 2612.420535][ T3332] common_startup_64+0x13e/0x147 [ 2612.427076][ T3332] } [ 2612.429641][ T3332] ... key at: [] kbd_event_lock+0x18/0xa0 [ 2612.437555][ T3332] ... acquired at: [ 2612.441390][ T3332] lock_acquire+0x120/0x360 [ 2612.446087][ T3332] _raw_spin_lock+0x2e/0x40 [ 2612.450795][ T3332] kbd_event+0xd2/0x3f70 [ 2612.455257][ T3332] input_handle_events_default+0xd4/0x1a0 [ 2612.461209][ T3332] input_pass_values+0x288/0x890 [ 2612.466363][ T3332] input_event_dispose+0x330/0x6b0 [ 2612.471688][ T3332] input_inject_event+0x1dd/0x340 [ 2612.476908][ T3332] evdev_write+0x2fc/0x480 [ 2612.481544][ T3332] vfs_write+0x27e/0xb30 [ 2612.485982][ T3332] ksys_write+0x145/0x250 [ 2612.490510][ T3332] __do_fast_syscall_32+0xb6/0x2b0 [ 2612.495809][ T3332] do_fast_syscall_32+0x34/0x80 [ 2612.500880][ T3332] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2612.507444][ T3332] [ 2612.509816][ T3332] [ 2612.509816][ T3332] the dependencies between the lock to be acquired [ 2612.509830][ T3332] and SOFTIRQ-irq-unsafe lock: [ 2612.523374][ T3332] -> (tasklist_lock){.+.+}-{3:3} { [ 2612.528785][ T3332] HARDIRQ-ON-R at: [ 2612.533044][ T3332] lock_acquire+0x120/0x360 [ 2612.539740][ T3332] _raw_read_lock+0x36/0x50 [ 2612.546434][ T3332] __do_wait+0xde/0x740 [ 2612.552795][ T3332] do_wait+0x1f8/0x510 [ 2612.559063][ T3332] kernel_wait+0xab/0x170 [ 2612.565592][ T3332] call_usermodehelper_exec_work+0xbe/0x230 [ 2612.573693][ T3332] process_scheduled_works+0xae1/0x17b0 [ 2612.581458][ T3332] worker_thread+0x8a0/0xda0 [ 2612.588258][ T3332] kthread+0x711/0x8a0 [ 2612.594534][ T3332] ret_from_fork+0x4bc/0x870 [ 2612.601324][ T3332] ret_from_fork_asm+0x1a/0x30 [ 2612.608387][ T3332] SOFTIRQ-ON-R at: [ 2612.612681][ T3332] lock_acquire+0x120/0x360 [ 2612.619390][ T3332] _raw_read_lock+0x36/0x50 [ 2612.626110][ T3332] __do_wait+0xde/0x740 [ 2612.632486][ T3332] do_wait+0x1f8/0x510 [ 2612.638761][ T3332] kernel_wait+0xab/0x170 [ 2612.645288][ T3332] call_usermodehelper_exec_work+0xbe/0x230 [ 2612.653379][ T3332] process_scheduled_works+0xae1/0x17b0 [ 2612.661150][ T3332] worker_thread+0x8a0/0xda0 [ 2612.667954][ T3332] kthread+0x711/0x8a0 [ 2612.674462][ T3332] ret_from_fork+0x4bc/0x870 [ 2612.681249][ T3332] ret_from_fork_asm+0x1a/0x30 [ 2612.688221][ T3332] INITIAL USE at: [ 2612.692401][ T3332] lock_acquire+0x120/0x360 [ 2612.699018][ T3332] _raw_write_lock_irq+0xa2/0xf0 [ 2612.706253][ T3332] copy_process+0x224f/0x3c00 [ 2612.713045][ T3332] kernel_clone+0x21e/0x840 [ 2612.719663][ T3332] user_mode_thread+0xdd/0x140 [ 2612.726542][ T3332] rest_init+0x23/0x300 [ 2612.732809][ T3332] start_kernel+0x3ae/0x410 [ 2612.739423][ T3332] x86_64_start_reservations+0x24/0x30 [ 2612.746986][ T3332] x86_64_start_kernel+0x143/0x1c0 [ 2612.754205][ T3332] common_startup_64+0x13e/0x147 [ 2612.761264][ T3332] INITIAL READ USE at: [ 2612.765876][ T3332] lock_acquire+0x120/0x360 [ 2612.772923][ T3332] _raw_read_lock+0x36/0x50 [ 2612.780139][ T3332] __do_wait+0xde/0x740 [ 2612.786833][ T3332] do_wait+0x1f8/0x510 [ 2612.793449][ T3332] kernel_wait+0xab/0x170 [ 2612.800324][ T3332] call_usermodehelper_exec_work+0xbe/0x230 [ 2612.808765][ T3332] process_scheduled_works+0xae1/0x17b0 [ 2612.817042][ T3332] worker_thread+0x8a0/0xda0 [ 2612.824195][ T3332] kthread+0x711/0x8a0 [ 2612.830830][ T3332] ret_from_fork+0x4bc/0x870 [ 2612.837965][ T3332] ret_from_fork_asm+0x1a/0x30 [ 2612.845291][ T3332] } [ 2612.848061][ T3332] ... key at: [] tasklist_lock+0x18/0x40 [ 2612.856119][ T3332] ... acquired at: [ 2612.860207][ T3332] lock_acquire+0x120/0x360 [ 2612.864904][ T3332] _raw_read_lock+0x36/0x50 [ 2612.869609][ T3332] send_sigurg+0x12b/0x420 [ 2612.874220][ T3332] sk_send_sigurg+0x6c/0x2e0 [ 2612.879023][ T3332] queue_oob+0x420/0x4f0 [ 2612.883463][ T3332] unix_stream_sendmsg+0xc3f/0xdf0 [ 2612.888754][ T3332] __sock_sendmsg+0x21c/0x270 [ 2612.893623][ T3332] ____sys_sendmsg+0x52d/0x830 [ 2612.898564][ T3332] ___sys_sendmsg+0x21f/0x2a0 [ 2612.903436][ T3332] __sys_sendmmsg+0x28e/0x430 [ 2612.908302][ T3332] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 2612.914031][ T3332] __do_fast_syscall_32+0xb6/0x2b0 [ 2612.919338][ T3332] do_fast_syscall_32+0x34/0x80 [ 2612.924387][ T3332] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2612.930913][ T3332] [ 2612.933237][ T3332] -> (&f_owner->lock){....}-{3:3} { [ 2612.938652][ T3332] INITIAL USE at: [ 2612.942732][ T3332] lock_acquire+0x120/0x360 [ 2612.949175][ T3332] _raw_write_lock_irq+0xa2/0xf0 [ 2612.956055][ T3332] __f_setown+0x67/0x370 [ 2612.962323][ T3332] fcntl_dirnotify+0x3fa/0x6a0 [ 2612.969035][ T3332] do_fcntl+0x6d0/0x1910 [ 2612.975216][ T3332] do_compat_fcntl64+0x477/0x720 [ 2612.982111][ T3332] __do_fast_syscall_32+0xb6/0x2b0 [ 2612.989193][ T3332] do_fast_syscall_32+0x34/0x80 [ 2612.995982][ T3332] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2613.004242][ T3332] INITIAL READ USE at: [ 2613.008781][ T3332] lock_acquire+0x120/0x360 [ 2613.015648][ T3332] _raw_read_lock_irqsave+0xaf/0x100 [ 2613.023297][ T3332] send_sigio+0x38/0x370 [ 2613.029912][ T3332] dnotify_handle_event+0x169/0x440 [ 2613.037490][ T3332] fsnotify+0x1671/0x1a80 [ 2613.044182][ T3332] __fsnotify_parent+0x3fe/0x540 [ 2613.051491][ T3332] __kernel_read+0x73b/0x960 [ 2613.058475][ T3332] bprm_execve+0x8ce/0x1450 [ 2613.065359][ T3332] do_execveat_common+0x510/0x6a0 [ 2613.072766][ T3332] __ia32_compat_sys_execveat+0xca/0xe0 [ 2613.080685][ T3332] __do_fast_syscall_32+0xb6/0x2b0 [ 2613.088172][ T3332] do_fast_syscall_32+0x34/0x80 [ 2613.095412][ T3332] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2613.104108][ T3332] } [ 2613.106796][ T3332] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 2613.115830][ T3332] ... acquired at: [ 2613.119832][ T3332] lock_acquire+0x120/0x360 [ 2613.124524][ T3332] _raw_read_lock_irqsave+0xaf/0x100 [ 2613.130004][ T3332] send_sigio+0x38/0x370 [ 2613.134438][ T3332] kill_fasync+0x24d/0x4d0 [ 2613.139050][ T3332] sock_wake_async+0x137/0x160 [ 2613.144018][ T3332] sk_send_sigurg+0x1f1/0x2e0 [ 2613.148891][ T3332] queue_oob+0x420/0x4f0 [ 2613.153331][ T3332] unix_stream_sendmsg+0xc3f/0xdf0 [ 2613.158644][ T3332] __sock_sendmsg+0x21c/0x270 [ 2613.163530][ T3332] ____sys_sendmsg+0x52d/0x830 [ 2613.168486][ T3332] ___sys_sendmsg+0x21f/0x2a0 [ 2613.173364][ T3332] __sys_sendmmsg+0x28e/0x430 [ 2613.178239][ T3332] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 2613.183985][ T3332] __do_fast_syscall_32+0xb6/0x2b0 [ 2613.189289][ T3332] do_fast_syscall_32+0x34/0x80 [ 2613.194359][ T3332] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2613.201014][ T3332] [ 2613.203362][ T3332] -> (&new->fa_lock){....}-{3:3} { [ 2613.208601][ T3332] INITIAL USE at: [ 2613.212611][ T3332] lock_acquire+0x120/0x360 [ 2613.218878][ T3332] _raw_write_lock_irq+0xa2/0xf0 [ 2613.225576][ T3332] fasync_remove_entry+0xf1/0x1c0 [ 2613.232365][ T3332] tty_fasync+0x13c/0x350 [ 2613.238448][ T3332] __fput+0x8a2/0xa70 [ 2613.244199][ T3332] task_work_run+0x1d4/0x260 [ 2613.250549][ T3332] exit_to_user_mode_loop+0xe9/0x130 [ 2613.257657][ T3332] __do_fast_syscall_32+0x1f4/0x2b0 [ 2613.264621][ T3332] do_fast_syscall_32+0x34/0x80 [ 2613.271223][ T3332] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2613.279320][ T3332] INITIAL READ USE at: [ 2613.283739][ T3332] lock_acquire+0x120/0x360 [ 2613.290417][ T3332] _raw_read_lock_irqsave+0xaf/0x100 [ 2613.297882][ T3332] kill_fasync+0x199/0x4d0 [ 2613.304489][ T3332] snd_fasync_work_fn+0x162/0x210 [ 2613.311710][ T3332] process_scheduled_works+0xae1/0x17b0 [ 2613.319451][ T3332] worker_thread+0x8a0/0xda0 [ 2613.326225][ T3332] kthread+0x711/0x8a0 [ 2613.332509][ T3332] ret_from_fork+0x4bc/0x870 [ 2613.339296][ T3332] ret_from_fork_asm+0x1a/0x30 [ 2613.346245][ T3332] } [ 2613.348843][ T3332] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 2613.357631][ T3332] ... acquired at: [ 2613.361560][ T3332] lock_acquire+0x120/0x360 [ 2613.366248][ T3332] _raw_read_lock_irqsave+0xaf/0x100 [ 2613.371866][ T3332] kill_fasync+0x199/0x4d0 [ 2613.376485][ T3332] __start_tty+0x18c/0x220 [ 2613.381212][ T3332] start_tty+0x2b/0x70 [ 2613.385501][ T3332] n_tty_set_termios+0xa7c/0x1090 [ 2613.390710][ T3332] tty_set_termios+0xda4/0x17e0 [ 2613.395767][ T3332] set_termios+0x516/0x6c0 [ 2613.400375][ T3332] tty_mode_ioctl+0x47e/0x740 [ 2613.405288][ T3332] tty_ioctl+0x9c6/0xde0 [ 2613.409726][ T3332] __ia32_compat_sys_ioctl+0x543/0x840 [ 2613.415381][ T3332] __do_fast_syscall_32+0xb6/0x2b0 [ 2613.420690][ T3332] do_fast_syscall_32+0x34/0x80 [ 2613.425738][ T3332] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2613.432264][ T3332] [ 2613.434600][ T3332] -> (&tty->flow.lock){....}-{3:3} { [ 2613.439918][ T3332] INITIAL USE at: [ 2613.443819][ T3332] lock_acquire+0x120/0x360 [ 2613.449908][ T3332] _raw_spin_lock_irqsave+0xa7/0xf0 [ 2613.456683][ T3332] start_tty+0x20/0x70 [ 2613.462342][ T3332] n_tty_set_termios+0xa7c/0x1090 [ 2613.468943][ T3332] tty_set_termios+0xda4/0x17e0 [ 2613.475372][ T3332] set_termios+0x516/0x6c0 [ 2613.481363][ T3332] tty_mode_ioctl+0x47e/0x740 [ 2613.487626][ T3332] tty_ioctl+0x9c6/0xde0 [ 2613.493567][ T3332] __se_sys_ioctl+0xfc/0x170 [ 2613.499750][ T3332] do_syscall_64+0xfa/0xfa0 [ 2613.505846][ T3332] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2613.513372][ T3332] } [ 2613.515871][ T3332] ... key at: [] alloc_tty_struct.__key.35+0x0/0x20 [ 2613.524572][ T3332] ... acquired at: [ 2613.528419][ T3332] lock_acquire+0x120/0x360 [ 2613.533112][ T3332] _raw_spin_lock_irqsave+0xa7/0xf0 [ 2613.538523][ T3332] stop_tty+0x2f/0x150 [ 2613.542788][ T3332] kbd_event+0x2b72/0x3f70 [ 2613.547411][ T3332] input_handle_events_default+0xd4/0x1a0 [ 2613.553330][ T3332] input_pass_values+0x288/0x890 [ 2613.558456][ T3332] input_event_dispose+0x330/0x6b0 [ 2613.563775][ T3332] input_inject_event+0x1dd/0x340 [ 2613.569012][ T3332] evdev_write+0x2fc/0x480 [ 2613.573628][ T3332] vfs_write+0x27e/0xb30 [ 2613.578089][ T3332] ksys_write+0x145/0x250 [ 2613.582613][ T3332] __do_fast_syscall_32+0xb6/0x2b0 [ 2613.587937][ T3332] do_fast_syscall_32+0x34/0x80 [ 2613.592993][ T3332] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2613.599540][ T3332] [ 2613.601926][ T3332] [ 2613.601926][ T3332] stack backtrace: [ 2613.607841][ T3332] CPU: 1 UID: 0 PID: 3332 Comm: syz.8.7754 Not tainted syzkaller #0 PREEMPT(full) [ 2613.607865][ T3332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2613.607881][ T3332] Call Trace: [ 2613.607889][ T3332] [ 2613.607897][ T3332] dump_stack_lvl+0x189/0x250 [ 2613.607937][ T3332] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2613.607972][ T3332] ? __pfx__printk+0x10/0x10 [ 2613.608000][ T3332] validate_chain+0x1f05/0x2140 [ 2613.608028][ T3332] __lock_acquire+0xab9/0xd20 [ 2613.608046][ T3332] ? stop_tty+0x2f/0x150 [ 2613.608071][ T3332] lock_acquire+0x120/0x360 [ 2613.608093][ T3332] ? stop_tty+0x2f/0x150 [ 2613.608120][ T3332] ? __lock_acquire+0xab9/0xd20 [ 2613.608144][ T3332] _raw_spin_lock_irqsave+0xa7/0xf0 [ 2613.608166][ T3332] ? stop_tty+0x2f/0x150 [ 2613.608185][ T3332] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 2613.608206][ T3332] ? atomic_notifier_call_chain+0x26/0x180 [ 2613.608238][ T3332] stop_tty+0x2f/0x150 [ 2613.608267][ T3332] kbd_event+0x2b72/0x3f70 [ 2613.608305][ T3332] ? __pfx_kbd_event+0x10/0x10 [ 2613.608328][ T3332] ? finish_task_switch+0x266/0x950 [ 2613.608353][ T3332] ? rcu_is_watching+0x15/0xb0 [ 2613.608382][ T3332] ? __lock_acquire+0xab9/0xd20 [ 2613.608407][ T3332] ? do_raw_spin_lock+0x121/0x290 [ 2613.608442][ T3332] ? do_raw_spin_unlock+0x122/0x240 [ 2613.608471][ T3332] ? __lock_acquire+0xab9/0xd20 [ 2613.608488][ T3332] ? input_pass_values+0x8d/0x890 [ 2613.608506][ T3332] ? input_pass_values+0x8d/0x890 [ 2613.608533][ T3332] input_handle_events_default+0xd4/0x1a0 [ 2613.608566][ T3332] ? input_pass_values+0x8d/0x890 [ 2613.608587][ T3332] input_pass_values+0x288/0x890 [ 2613.608613][ T3332] ? input_handle_event+0x70c/0xf30 [ 2613.608638][ T3332] input_event_dispose+0x330/0x6b0 [ 2613.608667][ T3332] input_inject_event+0x1dd/0x340 [ 2613.608702][ T3332] ? input_inject_event+0xb6/0x340 [ 2613.608735][ T3332] evdev_write+0x2fc/0x480 [ 2613.608762][ T3332] ? __pfx_evdev_write+0x10/0x10 [ 2613.608781][ T3332] ? bpf_lsm_file_permission+0x9/0x20 [ 2613.608799][ T3332] ? security_file_permission+0x75/0x290 [ 2613.608825][ T3332] ? rw_verify_area+0x255/0x4d0 [ 2613.608857][ T3332] ? __lock_acquire+0xab9/0xd20 [ 2613.608883][ T3332] ? __pfx_evdev_write+0x10/0x10 [ 2613.608910][ T3332] vfs_write+0x27e/0xb30 [ 2613.608935][ T3332] ? __pfx_vfs_write+0x10/0x10 [ 2613.608958][ T3332] ? __fget_files+0x2a/0x420 [ 2613.608990][ T3332] ? __fget_files+0x2a/0x420 [ 2613.609011][ T3332] ? __fget_files+0x3a0/0x420 [ 2613.609030][ T3332] ? __fget_files+0x2a/0x420 [ 2613.609054][ T3332] ksys_write+0x145/0x250 [ 2613.609088][ T3332] ? __pfx_ksys_write+0x10/0x10 [ 2613.609112][ T3332] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 2613.609146][ T3332] ? lockdep_hardirqs_on+0x9c/0x150 [ 2613.609177][ T3332] __do_fast_syscall_32+0xb6/0x2b0 [ 2613.609218][ T3332] ? lockdep_hardirqs_on+0x9c/0x150 [ 2613.609240][ T3332] do_fast_syscall_32+0x34/0x80 [ 2613.609262][ T3332] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2613.609288][ T3332] RIP: 0023:0xf702d539 [ 2613.609310][ T3332] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2613.609335][ T3332] RSP: 002b:00000000f541d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 2613.609362][ T3332] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000040 [ 2613.609377][ T3332] RDX: 0000000000002250 RSI: 0000000000000000 RDI: 0000000000000000 [ 2613.609387][ T3332] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2613.609397][ T3332] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2613.609407][ T3332] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2613.609424][ T3332] [ 2613.609525][ C1] vkms_vblank_simulate: vblank timer overrun [ 2613.973540][ C1] vkms_vblank_simulate: vblank timer overrun [ 2614.504915][ T3357] bond3: left promiscuous mode [ 2615.840658][ T1460] usb 9-1: 0:2 : does not exist [ 2615.887211][ T1460] usb 9-1: USB disconnect, device number 64 [ 2615.965833][T31346] udevd[31346]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory