last executing test programs: 26m5.061471085s ago: executing program 1 (id=1870): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) umount2(&(0x7f0000000080)='./file0\x00', 0xf) 26m4.17306152s ago: executing program 1 (id=1877): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=ANY=[@ANYBLOB="3801000010000100feffffff00010000fe880000000000000000000000000001fc010000000000000000000000000001000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c0000002001de00000000000000000000000002000800000000f5ff91010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000070000000000000002000000fcffffff00000000"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@loopback, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1, 0x0, 0x6}, [@tmpl={0x44, 0x5, [{{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x4d4, 0x3c}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @private=0xa410100}, 0x6, 0x4, 0x3}]}]}, 0xfc}}, 0x0) r2 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r2, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0xff, @loopback, 0x9}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000080)="1b", 0x1}], 0x1, 0x0, 0x0, 0x4855}, 0x24000052) 26m4.028459209s ago: executing program 1 (id=1878): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) r1 = openat$fb0(0xffffffffffffff9c, 0x0, 0x418c00, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = userfaultfd(0x80801) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa08, &(0x7f0000000000)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}, 0x1}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000100)={0x2, 0x3, 0xffffe000, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) openat$ttyS3(0xffffff9c, 0x0, 0x705601, 0x0) rt_sigprocmask(0x0, &(0x7f00000000c0)={[0xffffffffffffffff]}, 0x0, 0x8) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = io_uring_setup(0x22f4f, &(0x7f0000000280)={0x0, 0x10, 0x1, 0x0, 0xfb}) r9 = socket(0x2b, 0x1, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, 0x0) close_range(r8, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@loopback, 0x800, 0x0, 0x1, 0x1}, 0x20) ioctl$XFS_IOC_ERROR_CLEARALL(r1, 0x40085875) 26m1.404940631s ago: executing program 1 (id=1887): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000ff4ae0086d04dd08f4ff080203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000540)={0x1c, &(0x7f0000000480)={0x0, 0x6}, 0x0, 0x0}) r1 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="180000002500010324bd5502ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4004088}, 0x44000000) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x11, 0x3, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) readlink(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r5], 0x50}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r10 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r10, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000440)='./file0/../file0/../file0/../file0\x00') r11 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r11, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000002c0)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000080)='./file0\x00') sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="500000001000210400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000002800128009000100766c616e00000000180002800c0002000e0000000a000000060001000001000008000500", @ANYRES32=r9], 0x50}}, 0x2) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'veth1_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r12}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 25m58.459551177s ago: executing program 1 (id=1903): r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_tables_targets\x00') ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000200)={0x5, 0x101, 0x1}) readv(r0, &(0x7f00000006c0)=[{&(0x7f0000000380)=""/168, 0xa8}], 0x1) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x4c001, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) syz_usb_connect(0x2, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12011003b59414407c2c1205e121db820301090212948a030400e040a245f01c49284296"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x38, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0xd33a0a09992c3fcc}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x1, 0x0, 0x6, 0x7, 0xa}, {0xa, 0x0, 0x85c, 0x10, 0x43}, 0x4, 0x7, 0x699}}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (async) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000480)='blkio.bfq.time\x00', 0x0, 0x0) preadv(r6, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/140, 0x8c}], 0x1, 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) (async) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r7 = socket$unix(0x1, 0x1, 0x0) (async) r8 = socket$kcm(0x11, 0x3, 0x0) (async) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x400854d6, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r8, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r9, 0x42}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000180)="27030200000214000e00602fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f00000004c0)="f058050000007f8f", 0x8}], 0x2}, 0x5) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async) mremap(&(0x7f0000aaf000/0x3000)=nil, 0x3000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) (async) r11 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f00000002c0), 0xc0062, &(0x7f0000000640)=ANY=[@ANYBLOB='fd=', @ANYRESOCT, @ANYRESHEX=r10, @ANYRESOCT=r0, @ANYRES64=r6, @ANYRESDEC=0x0]) (async) read$FUSE(r11, &(0x7f0000006300)={0x2020}, 0x2020) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) 25m57.750084014s ago: executing program 1 (id=1907): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x1a5042, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r0, 0x0) r1 = openat$sndseq(0xffffff9c, &(0x7f00000000c0), 0x111040) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000180)={0x0, 0x400, 0x0, 'queue1\x00', 0x5fbb}) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) r3 = io_uring_setup(0x667, &(0x7f0000000000)={0x0, 0x8dd3, 0x1, 0x42, 0x235}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@mpls_delroute={0x1c, 0x18, 0x9, 0x0, 0xffffffff, {0x1c, 0x14, 0x0, 0x0, 0xfd, 0x4, 0x0, 0x1}}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x8000) syz_emit_ethernet(0x6e, &(0x7f00000024c0)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0x38, 0x2b, 0x0, @private2, @local, {[@hopopts={0x67}], {0x2100, 0x0, 0x30, 0x0, @gue={{0x1, 0x1, 0x0, 0x6, 0x0, @void}, "8fbab2e630c3e6a031fd2ad9265431d968f1028b8c7271bda9f785aa6887dd17aea49bf2"}}}}}}}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, 0x0) preadv2(r2, &(0x7f00000011c0)=[{&(0x7f0000003280)=""/4119, 0x1017}], 0x1, 0x7, 0x0, 0x1a) 25m57.467193456s ago: executing program 32 (id=1907): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x1a5042, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r0, 0x0) r1 = openat$sndseq(0xffffff9c, &(0x7f00000000c0), 0x111040) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000180)={0x0, 0x400, 0x0, 'queue1\x00', 0x5fbb}) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) r3 = io_uring_setup(0x667, &(0x7f0000000000)={0x0, 0x8dd3, 0x1, 0x42, 0x235}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@mpls_delroute={0x1c, 0x18, 0x9, 0x0, 0xffffffff, {0x1c, 0x14, 0x0, 0x0, 0xfd, 0x4, 0x0, 0x1}}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x8000) syz_emit_ethernet(0x6e, &(0x7f00000024c0)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0x38, 0x2b, 0x0, @private2, @local, {[@hopopts={0x67}], {0x2100, 0x0, 0x30, 0x0, @gue={{0x1, 0x1, 0x0, 0x6, 0x0, @void}, "8fbab2e630c3e6a031fd2ad9265431d968f1028b8c7271bda9f785aa6887dd17aea49bf2"}}}}}}}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, 0x0) preadv2(r2, &(0x7f00000011c0)=[{&(0x7f0000003280)=""/4119, 0x1017}], 0x1, 0x7, 0x0, 0x1a) 15m48.620039083s ago: executing program 3 (id=4006): syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea00090587033b"], 0x0) (async, rerun: 32) syz_open_dev$char_usb(0xc, 0xb4, 0x10000) (async, rerun: 32) r0 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0xc00, 0x0, 0x374}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x4004, @fd_index=0x4, 0x718a, 0x0, 0x0, 0x12, 0x1, {0x2}}) (async, rerun: 32) io_uring_enter(r0, 0x742f, 0x77ae, 0x1, 0x0, 0x0) (async, rerun: 32) flock(r0, 0x1) 15m48.434925937s ago: executing program 3 (id=4009): epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000001c0)={0x4}) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file7\x00', 0x21c0, 0x103) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r4, 0x65, 0x2, &(0x7f00000000c0)=0x2, 0x4) bind$can_raw(r4, &(0x7f0000000480), 0x10) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, &(0x7f0000000000)=[{{0x4, 0x0, 0x1, 0x1}, {0x2, 0x0, 0x1, 0x1}}, {{0x4, 0x1, 0x1}, {0x1, 0x1}}], 0x10) close(r4) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_usb_connect(0x0, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000f2303920422c021240850102030109022400010000100009040c0202c17f0c00090502020002020000090582020002"], 0x0) syz_usb_control_io$lan78xx(r7, 0x0, 0x0) syz_usb_control_io$rtl8150(r7, 0x0, &(0x7f0000000280)={0x18, &(0x7f0000000000)=ANY=[@ANYBLOB="201304000000"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io$rtl8150(r7, 0x0, &(0x7f0000000900)={0x18, &(0x7f0000000040)=ANY=[@ANYBLOB="001601000000dcee"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r7, 0x0, 0x0) syz_usb_control_io$sierra_net(r7, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r7, 0x0, &(0x7f0000000440)={0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="200a087dc812eb3a31d3e43d0f6b3c71bc12d800441009d693987aa7d797104a2a61d23ed7ba63d9fc4b128df110662b6cb9e09bb1ea13b2c877b5"], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r7, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002cbd7010fddbdf2505000000080009000200000008000c00a80a0000060001000500000008000b"], 0x3c}}, 0x20000034) connect$pppl2tp(r1, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x21, 0x0, 0x0, 0x0, {0xa, 0x0, 0x6, @private0}}}, 0x3a) r8 = openat$pfkey(0xffffff9c, &(0x7f0000000000), 0x21a240, 0x0) ioctl$FITHAW(r8, 0xc0045878) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r9, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) 15m46.960132403s ago: executing program 2 (id=4014): r0 = syz_usb_connect(0x0, 0x3f, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b03, 0x0) 15m46.340827583s ago: executing program 2 (id=4017): r0 = syz_usb_connect(0x0, 0x3f, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x0}) syz_usb_connect(0x0, 0x1b4, &(0x7f00000002c0)={{0x12, 0x1, 0x250, 0xe8, 0xca, 0xf9, 0x40, 0x2304, 0x236, 0x15ed, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1a2, 0x1, 0xf, 0x6, 0x20, 0xf7, "", [{{0x9, 0x4, 0xb7, 0x5, 0x5, 0xd4, 0xe8, 0x28, 0x0, [], [{{0x9, 0x5, 0x6, 0xc, 0x428, 0x7f, 0x9, 0x9, [@generic={0xca, 0x21, "42b6d177a0a82e6bce2859592fdf79540aa85e39b0621f9e092d226cbb554d83d2d3af8212dd9692ef4cf6bd0e4046c2a7bad444d344940c762cdfb3af8f99363d9590f31541fd3e7f9b96854abf829be41907752f905a6d03b23ac8e6083503eb57a05db8408242d8e3e7081ae6022182c17c7356840aed1201ef4d10200d86a529278c626840749c906a86ef7a1f12eb1f1cc6c40218703ed6ff8a35b2b6b498d0326d1e81befe54aeff25c8c141597663d76fd26754f3c96025c55c60d1d3f9dae6aec8aa9e16"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x650, 0x6, 0x4b, 0x7}}, {{0x9, 0x5, 0x5, 0x0, 0x10, 0x2, 0x8, 0x9}}, {{0x9, 0x5, 0x9, 0x10, 0x20, 0x0, 0x7, 0xd}}, {{0x9, 0x5, 0x7, 0x8, 0x8, 0x8, 0xf5, 0x2, [@generic={0x92, 0x11, "6e826ae2ccddb39778c69b28b20b4668a52191ba8b96dfcb4e0900bb5ed6e88948dfee9e0c44682a8d7c8c295f2d63845341326bba740de37bd717679fa2bfbe270d44c6d2d9dbf85d1f33ce7518e073cb0a87cbee1712cc6f65560a97512a3d5071412c8646e288a61868fbbb7dd3dc0734e3241b78e6dc0e68f2a355d647ed4891635a69462d479a1d60aaca902b39"}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x0, 0x36}]}}]}}]}}]}}, &(0x7f00000008c0)={0xa, &(0x7f0000000480)={0xa, 0x6, 0x201, 0x9, 0x7f, 0x3, 0x10, 0x9}, 0x1d, &(0x7f00000004c0)={0x5, 0xf, 0x1d, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0xa, 0x8, 0xb, 0x4}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x0, 0x0, 0x800}, @generic={0x7, 0x10, 0x3, "9eccbc1b"}]}, 0x7, [{0x81, &(0x7f0000000500)=@string={0x81, 0x3, "32577d008e193b55a4a4972128cf1745c60efca59890441d23c2e3a151de566c303bb8f863a019e33447adb8b38d7f115d6226223ea4d72e8274562d47dfab98e719d6aa1ccbcb6c673f0c7059eaaf566d71f09a72acfecde498b19033f4899566791cc80378052fc1458c5bec836c79eee11d75e8330d6557275d81b66c1d"}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x140c}}, {0x92, &(0x7f0000000600)=@string={0x92, 0x3, "4f47ee213f37e04fbc11bed9dfc03acb3c3c1b804e9d4f9fbfcb5bebfa2e8044a44830f64aae49c46d34e29e83c5252b30c634ab44914e90c836c34ed6dd990d91550bd3f0e565943349677063d0d742b1c760f8f60f345152e7631dfcc37e537acdb761a8af5a4dec0f2a6e66c8f9b912069e67b92e661b088fe58798cf06976d0905979c84ac4fb055c840b04d70c3"}}, {0x2f, &(0x7f00000006c0)=@string={0x2f, 0x3, "f07d437706d86e7606366c579a5c6f0a78fc57c06c04f34ea7c9dc1802bdc8908e429558a318ac2642114e510a"}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x2849}}, {0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x443}}, {0x102, &(0x7f0000000780)=@string={0x102, 0x3, "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"}}]}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) io_setup(0x95000, &(0x7f0000000000)) r2 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r2, &(0x7f0000000140)={0x18, 0x2, {0xffff, @dev={0xac, 0x14, 0x14, 0x20}}}, 0x1e) ioctl$EVIOCGMASK(r1, 0x5b03, 0x0) 15m45.023001345s ago: executing program 3 (id=4023): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e13d6a206419010015d4010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000280)={0x0, 0x10, 0x6, &(0x7f0000000240)={0x13, "c2ba2cdddf96c2d905bd4296ce341591ddc08dbe750690648bd79a7fbf3d4cefc6"}}) (fail_nth: 3) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) 15m44.706422258s ago: executing program 2 (id=4024): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x20, 0x2e, 0x200, 0x70bd27, 0x0, {0x1b}, [@typed={0x8, 0x18, 0x0, 0x0, @binary="01ac0f00"}, @typed={0x4, 0x1e}]}, 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0) r2 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000060a0b0400000000000000000000000014000480100001800800010064757000040002800900010073797a30000000000900024073796e3200000000140000001100010000000000000000000000000a"], 0x68}}, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r5 = syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r4, &(0x7f0000006340)={0x2020, 0x0, 0x0}, 0x2058) write$FUSE_INIT(r4, &(0x7f0000002180)={0x50, 0x0, r6, {0x7, 0x27, 0x2, 0x1dd880, 0x7, 0x81, 0x0, 0x4, 0x0, 0x0, 0x10, 0x5}}, 0x50) read$FUSE(r4, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_IOCTL(r4, &(0x7f0000002140)={0x20, 0x0, r7, {0x2, 0x0, 0x8, 0xfff}}, 0x20) syz_fuse_handle_req(r4, &(0x7f0000004340)="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", 0x2000, &(0x7f0000003840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002440)={0x78, 0x0, 0x7, {0x1, 0x0, 0x0, {0xffffffffffffffff, 0xfffffffffffffffd, 0x3, 0x8, 0x2, 0x0, 0x800, 0x0, 0x0, 0x4000, 0xbca4, 0x0, r8}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getdents64(r5, 0x0, 0x20000) syz_usb_control_io(r2, 0x0, 0x0) r9 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r9, 0xc0105b08, &(0x7f0000000040)) writev(r9, &(0x7f0000000440)=[{&(0x7f0000000100)="69620d78a68f9d011a6711c8a114c04594b9daa7e177999c1e8dc8005ab76d15217bad839b06c10b7b5285147dcc28bb7063b1ffcf07f3205b9773633d8508986155", 0x42}, {&(0x7f0000000180)="96ba5d260978944f2924e50ed6924e6f7e0cb1ab8c223daf52ecae74cb257e887147d35753bfbc721f7f80fd09dc28105c7160393332fb64405dc34739c033f20094bf6e327349cc306746d1c253aad7900972765b297ecc7fb870c13024f4178996184972a6c91830883fb1", 0x6c}, {&(0x7f0000000200)="3aabd46648a6753d8ecf5df2ba0b647881ab5c7c13a7b52addff", 0x1a}, {&(0x7f0000000240)="1abc29cc09aa6a5feb87189a85e72c34", 0x10}, {&(0x7f0000000280)="069dd83ccd1c6851d8ffe6636f4f85884e4259bef25f7b01e1a8a63f38e18f647027a6e75e5c5cadd5ba64f75c3ef9a87f2ee4268fd760d4d0f4", 0x3a}, {&(0x7f00000002c0)="8a1d06c1d8e8c79d4aae777868f6fca5d81f5705b011ebb3e201e29b3f62ed68738b175b645f1eea256829cb521e9aab08093aad5781169de54875209545d9c0539beb50df8f52bb05f8f39d5a24d26d80df2e6438d0189cbadfd204cfce8ceccc1f693d007e1910be89b65502827d856d00554bf1f2b3a7f862bc123436aa82cf2e0dc7bca50ac94b4640e0c0530021df7afc8cd773e90ef3e1f5f6f6d30096910e45c481b286b537dd5c45e43fac2b1a798e8808ed2f272e817da4121c64cca2220e7e8c852ebecff5a28ce934d8cc9953289b4f7af6a122fbb0caa4b069af29eb3845857709076d4c347b894a0e62", 0xf0}, {&(0x7f00000003c0)="569599f03a6aa16cf8545de820643798ea25ca47889d11ef3645724b366d90ca32c060ec5c2a2598a5887a1bc09cbc4a7374ccf21acf52ac4643dff6c1ee33ad970e53216601200b8b039588fcb881afc94a589c7dafadea89e1dada939bfb7c62ea7baee0830553aa0a70464d1a037b3425434c6b22cf5c9f2c8b3ff09ecc", 0x7f}], 0x7) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="40000000130005002cbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="020100000000000014000300766c616e3000000000000000000000000a000100aa00000300300000"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x42) 15m41.875198101s ago: executing program 3 (id=4036): r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0xfffd, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) r1 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000600)=""/128, 0x80}], 0x1, 0x111, 0x0) syz_usb_connect(0x0, 0x36, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000003c0)={0xc}) r4 = syz_open_dev$usbfs(&(0x7f0000000140), 0x10071, 0x545042) ioctl$USBDEVFS_ALLOW_SUSPEND(r4, 0x5522) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f00000001c0)=@urb_type_interrupt={0x1, {0x1, 0x1}, 0x1ff, 0x1, 0x0, 0x0, 0x205a, 0x1ff, 0x0, 0x96c, 0x7, 0x0}) r5 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="e00000000a06010100000000000000000300000908000940800000010900020073797a310000000005000100070000000800094000000005880008800c0007"], 0x13a}, 0x1, 0x0, 0x0, 0x2000c880}, 0x48084) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, &(0x7f0000000100)={0x58000}) close(r5) r7 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20010840) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_misc(r8, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f00000002c0)={r8, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00000000170000000400", "f4bd000000801900", [0x100000000, 0x8000000000000000]}}) pwrite64(r2, 0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000019c0)=@abs={0x0, 0x0, 0x10}, 0x6e) syz_emit_ethernet(0x11, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x0) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x42, &(0x7f0000000040), &(0x7f0000000080)=0x10) ioctl$int_out(0xffffffffffffffff, 0x5460, &(0x7f0000000180)) file_setattr(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', &(0x7f0000000580)={0x0, 0xfff, 0x245b1f2a, 0x8000, 0x10000}, 0x18, 0x1000) syz_usb_connect$midi(0x0, 0x81, &(0x7f0000000080)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x1430, 0x474b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6f, 0x1, 0x1, 0x80, 0x30, 0x8, "", {{{0x9, 0x4, 0x0, 0x0, 0x4, 0x1, 0x3, 0x30, 0xde, [@midi_in_jack={0x6, 0x24, 0x2, 0x2, 0x6, 0x7}, @ms_header={0x7, 0x24, 0x1, 0x1, 0x7}], [{{0x9, 0x5, 0x6, 0xc, 0x400, 0x2, 0x2, 0x2, {0x4}}}, {{0x9, 0x5, 0x6, 0x10, 0x10, 0xef, 0x1, 0xee, {0x10, 0x25, 0x1, 0xc, "2a07fe6836e17fdb586a07b4"}}}, {{0x9, 0x5, 0x1, 0x3, 0x400, 0x4, 0xf, 0xf, {0xb, 0x25, 0x1, 0x7, "3ab867d6d4b444"}}}, {{0x9, 0x5, 0x2, 0x0, 0x10, 0x5, 0x3, 0x0, {0xd, 0x25, 0x1, 0x9, "d4c3521117de33580f"}}}]}}}}}]}}, &(0x7f00000004c0)={0x0, 0x0, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="7f335eff4000e476bf9b24c80c7d94d44f6070ee54c819c7b28d3a7a5deb190a1afe5e8042cdd36d600d03def579a10a6fc689875283a889cc327e25e78d51ff4168e315fdbf08cd794d1995bcd42881c994973bb4576a66b1a106fde4121af29e8831ebd46edc56490c68426c61c6c81eaecdfb4692d7feae519551a128ffc59a91dd25348fa0cb89754c959b5d4147eaf3cffa5a128fb4c14b7c0db28d7778cd51e9ec3783314ead11c8625d7692ed35a058e285613281463f8b2ecdb103c2b6a0504dd3801990c7c02d97f8105c51079b2d4f47ab2ca3670394ec27db21f02c026a56"], 0x8, [{0xbd, &(0x7f00000006c0)=@string={0xbd, 0x3, "17cf54392c3f13fea0fb9bbec911fa8d0885b46bfaa164b5ca38df3c1fa2ebdb47db3746ae3af9bec37cde19cf18e00bc05a8799238f68bcbd3807485fe74070a0e1510b10a6dabab025e0569d096ad4e05d4f43e4bf105b7ccb83e75444acfe5252b005f6590fd066ef05cf1b97e4b29dabff034519aef4209883fe7bbe707a7dfa79286244e5318bedfc8ffccbc3e0e6762651f4cf939666b52a10ddb8f0fc73b2bfbc24b34f663d6949232581fc7a12b6290e136b957bbe5baa"}}, {0x46, &(0x7f00000001c0)=@string={0x46, 0x3, "fb54e3d50ca67ce5e53b4ec26df9043581b3f7da49728a446b1f25fd3ae61d7163b2995651ff57a58f1bf2c17dfec969ee0df77e3b7eb780fdcc024691928c17e642dfe6"}}, {0x0, 0x0}, {0x2, &(0x7f0000000340)=@string={0x2}}, {0x44, &(0x7f0000000540)=@string={0x44, 0x3, "961092091333f69d407a5359f7c8ccdb27ad804c68335c18d35e2f68f5aa79c2a6d853df20ab4c229e92ce48fa940f84ff70db6296b3d829d10bc1d046336efeac1e"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x340a}}, {0x1c, &(0x7f0000000780)=@string={0x1c, 0x3, "fd85b7237717a040e34c05063d0a7d48e9262300b7add0eb7ecb"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x429}}]}) 15m41.531634821s ago: executing program 2 (id=4037): set_mempolicy(0x3, &(0x7f0000000040)=0x8001, 0x8) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4048aecb, &(0x7f0000000280)={0x8, 0x0, [{0x7, 0xffffffff, 0x4, 0xffffff89, 0x6, 0x6, 0x2}, {0x1, 0x2, 0x6, 0x8000, 0x27, 0x7, 0x9}, {0xb, 0x8, 0x3, 0x3ff, 0x7ffffdff, 0x8003, 0xffff}, {0x80000019, 0xe5f, 0x0, 0x7, 0xdf3, 0x6, 0x80000001}, {0x80000000, 0x2bb, 0x1, 0xd, 0x3, 0x7fd, 0x80000000}, {0x80000000, 0x100, 0x4, 0x6, 0x2fdd, 0x2, 0x3}, {0x80000001, 0x2, 0x3, 0xfffffff7, 0xfffffff9, 0xff, 0x6}, {0xd, 0x0, 0x2, 0x7, 0x0, 0x5, 0x1c0}]}) 15m41.172786747s ago: executing program 2 (id=4039): socket$inet(0x2, 0x4000000000000001, 0x0) r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xe0}}], 0x68000, 0xe000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="2800000010000108feffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="000000002f1c260008001b"], 0x28}}, 0x0) 15m41.017399486s ago: executing program 2 (id=4040): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1d) open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) r1 = socket$igmp(0x2, 0x3, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = request_key(0x0, &(0x7f0000000100)={'syz', 0x2}, 0x0, 0xfffffffffffffffa) pipe2$watch_queue(&(0x7f0000000180), 0x80) keyctl$unlink(0x9, r4, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, 0x0, 0x80) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r5 = fsopen(&(0x7f0000000140)='debugfs\x00', 0x1) r6 = fsmount(r5, 0x0, 0x1) fchdir(r6) getdents64(0xffffffffffffffff, &(0x7f0000000440)=""/4108, 0x100c) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3d4, 0x20c, 0x20c, 0x20c, 0x20c, 0x178, 0x340, 0x340, 0x340, 0x340, 0x340, 0x6, 0x0, {[{{@ip={@rand_addr=0x64010102, @empty, 0xff, 0x0, 'veth1_to_bridge\x00', 'wlan1\x00', {0xff}, {}, 0x6, 0x1}, 0x0, 0xa8, 0xd8, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0x7}, {0x7fffffffffffffff}], 0x1, 0x1}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x9, 0x0, @empty, 0x4e21}}}, {{@uncond, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x2, 0x1, @multicast1, 0x1}}}, {{@uncond, 0x0, 0x70, 0x94}, @unspec=@CHECKSUM={0x24}}, {{@ip={@multicast1, @loopback, 0x0, 0xffffff00, 'wg1\x00', 'bond_slave_0\x00', {0xff}, {}, 0x5e, 0x3, 0x1}, 0x0, 0x70, 0x94}, @TTL={0x24, 'TTL\x00', 0x0, {0x1, 0x1}}}, {{@uncond, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0xfffffffc, 0x8, @multicast1}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x430) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r7 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r7, 0xf141d000) r8 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r8, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ca5000/0x4000)=nil, 0x0, 0x0, 0x0, 0xbff, 0x0, 0x0, 0x48, 0x40}) 15m40.113372205s ago: executing program 3 (id=4044): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000160001d9444b0f32386d26ff2efbff00"], 0x14}, 0x1, 0x0, 0x0, 0x200448d3}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000002880), 0xffffffffffffffff) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r4 = socket(0x10, 0x80002, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000080025bd7000fcdbff2500000000", @ANYRES32=0x0, @ANYBLOB="1000093100000400000c0045064cd13700104ea0e500"/36], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x8010) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmmsg$alg(r4, &(0x7f00000000c0), 0x492492492492627, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x7fa962bfffff, 0x12, r5, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1e}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, 0x2}, {0x0, 0x0, 0xfffffffffffffff7, 0x4}, 0x0, 0x6e6bb9, 0x1}, {{@in=@broadcast, 0xfffffffc, 0x6c}, 0x0, @in=@empty, 0x0, 0x0, 0x2, 0x7, 0x200}}, 0xe8) sendmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x2e9, 0x0) landlock_create_ruleset(0x0, 0x0, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc000000160033060000000000000080ff0100000000000000000000000000017f00000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff000000000000000000000000000004d23200000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000000000000ffffffffffffffff0000000000000000050000000000000004000000020000000000000006000000020000000a000418190000000c0015005c07350001000000"], 0xfc}}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)='W', 0x1}], 0x1}, 0x0) close(r6) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_clone(0x100a8600, 0x0, 0xda, 0x0, 0x0, 0x0) ioctl$TUNSETOFFLOAD(r7, 0xc004743e, 0x110e22fff6) syz_open_dev$vcsu(&(0x7f00000001c0), 0x8, 0x800) ioctl$TUNGETVNETLE(r6, 0xc008744c, &(0x7f0000000180)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x1c, r2, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4c000}, 0x4040000) 15m39.757828112s ago: executing program 3 (id=4046): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1d) open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) r1 = socket$igmp(0x2, 0x3, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = request_key(0x0, &(0x7f0000000100)={'syz', 0x2}, 0x0, 0xfffffffffffffffa) pipe2$watch_queue(&(0x7f0000000180), 0x80) keyctl$unlink(0x9, r4, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, 0x0, 0x80) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r5 = fsopen(&(0x7f0000000140)='debugfs\x00', 0x1) r6 = fsmount(r5, 0x0, 0x1) fchdir(r6) getdents64(0xffffffffffffffff, &(0x7f0000000440)=""/4108, 0x100c) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3d4, 0x20c, 0x20c, 0x20c, 0x20c, 0x178, 0x340, 0x340, 0x340, 0x340, 0x340, 0x6, 0x0, {[{{@ip={@rand_addr=0x64010102, @empty, 0xff, 0x0, 'veth1_to_bridge\x00', 'wlan1\x00', {0xff}, {}, 0x6, 0x1}, 0x0, 0xa8, 0xd8, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0x7}, {0x7fffffffffffffff}], 0x1, 0x1}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x9, 0x0, @empty, 0x4e21}}}, {{@uncond, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x2, 0x1, @multicast1, 0x1}}}, {{@uncond, 0x0, 0x70, 0x94}, @unspec=@CHECKSUM={0x24}}, {{@ip={@multicast1, @loopback, 0x0, 0xffffff00, 'wg1\x00', 'bond_slave_0\x00', {0xff}, {}, 0x5e, 0x3, 0x1}, 0x0, 0x70, 0x94}, @TTL={0x24, 'TTL\x00', 0x0, {0x1, 0x1}}}, {{@uncond, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0xfffffffc, 0x8, @multicast1}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x430) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r7 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r7, 0xf141d000) r8 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r8, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ca5000/0x4000)=nil, 0x0, 0x0, 0x0, 0xbff, 0x0, 0x0, 0x48, 0x40}) 15m25.745560963s ago: executing program 33 (id=4040): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1d) open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) r1 = socket$igmp(0x2, 0x3, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = request_key(0x0, &(0x7f0000000100)={'syz', 0x2}, 0x0, 0xfffffffffffffffa) pipe2$watch_queue(&(0x7f0000000180), 0x80) keyctl$unlink(0x9, r4, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, 0x0, 0x80) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r5 = fsopen(&(0x7f0000000140)='debugfs\x00', 0x1) r6 = fsmount(r5, 0x0, 0x1) fchdir(r6) getdents64(0xffffffffffffffff, &(0x7f0000000440)=""/4108, 0x100c) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3d4, 0x20c, 0x20c, 0x20c, 0x20c, 0x178, 0x340, 0x340, 0x340, 0x340, 0x340, 0x6, 0x0, {[{{@ip={@rand_addr=0x64010102, @empty, 0xff, 0x0, 'veth1_to_bridge\x00', 'wlan1\x00', {0xff}, {}, 0x6, 0x1}, 0x0, 0xa8, 0xd8, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0x7}, {0x7fffffffffffffff}], 0x1, 0x1}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x9, 0x0, @empty, 0x4e21}}}, {{@uncond, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x2, 0x1, @multicast1, 0x1}}}, {{@uncond, 0x0, 0x70, 0x94}, @unspec=@CHECKSUM={0x24}}, {{@ip={@multicast1, @loopback, 0x0, 0xffffff00, 'wg1\x00', 'bond_slave_0\x00', {0xff}, {}, 0x5e, 0x3, 0x1}, 0x0, 0x70, 0x94}, @TTL={0x24, 'TTL\x00', 0x0, {0x1, 0x1}}}, {{@uncond, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0xfffffffc, 0x8, @multicast1}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x430) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r7 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r7, 0xf141d000) r8 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r8, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ca5000/0x4000)=nil, 0x0, 0x0, 0x0, 0xbff, 0x0, 0x0, 0x48, 0x40}) 15m24.48841329s ago: executing program 34 (id=4046): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1d) open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) r1 = socket$igmp(0x2, 0x3, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = request_key(0x0, &(0x7f0000000100)={'syz', 0x2}, 0x0, 0xfffffffffffffffa) pipe2$watch_queue(&(0x7f0000000180), 0x80) keyctl$unlink(0x9, r4, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, 0x0, 0x80) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r5 = fsopen(&(0x7f0000000140)='debugfs\x00', 0x1) r6 = fsmount(r5, 0x0, 0x1) fchdir(r6) getdents64(0xffffffffffffffff, &(0x7f0000000440)=""/4108, 0x100c) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3d4, 0x20c, 0x20c, 0x20c, 0x20c, 0x178, 0x340, 0x340, 0x340, 0x340, 0x340, 0x6, 0x0, {[{{@ip={@rand_addr=0x64010102, @empty, 0xff, 0x0, 'veth1_to_bridge\x00', 'wlan1\x00', {0xff}, {}, 0x6, 0x1}, 0x0, 0xa8, 0xd8, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0x7}, {0x7fffffffffffffff}], 0x1, 0x1}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x9, 0x0, @empty, 0x4e21}}}, {{@uncond, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x2, 0x1, @multicast1, 0x1}}}, {{@uncond, 0x0, 0x70, 0x94}, @unspec=@CHECKSUM={0x24}}, {{@ip={@multicast1, @loopback, 0x0, 0xffffff00, 'wg1\x00', 'bond_slave_0\x00', {0xff}, {}, 0x5e, 0x3, 0x1}, 0x0, 0x70, 0x94}, @TTL={0x24, 'TTL\x00', 0x0, {0x1, 0x1}}}, {{@uncond, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0xfffffffc, 0x8, @multicast1}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x430) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r7 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r7, 0xf141d000) r8 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r8, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ca5000/0x4000)=nil, 0x0, 0x0, 0x0, 0xbff, 0x0, 0x0, 0x48, 0x40}) 12.603714181s ago: executing program 7 (id=7435): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x4) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r3, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1c}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r4) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_MGMT(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="310125bd7000fbdbdf255200000008000300", @ANYRES32=r7], 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_CQM(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0x234}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r4, &(0x7f0000000980)={&(0x7f00000000c0), 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x28, r9, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0xe, 0x72}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0xc800}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r12 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r12, 0x114, 0x8, &(0x7f0000000100)=0xffffffffffffffff, 0x4) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x20, r11, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x48050}, 0x0) syz_usb_connect$cdc_ecm(0x5, 0x110, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfe, 0x1, 0x1, 0x7, 0x80, 0x6, "", [{{0x9, 0x4, 0x0, 0xff, 0x3, 0x2, 0x6, 0x0, 0x57, {{0x6, 0x24, 0x6, 0x0, 0x0, "d2"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x8, 0x4, 0x8, 0x7}, [@mdlm_detail={0xa0, 0x24, 0x13, 0x5, "c4a7d36433db9d25dc3fefda1392d645792b08a88894353d8d70de4fac28585d729e85a9ba35f24ad011b259e2c73e65c30ca3e638223df32a88b0136ba9a1b8b8a1dee77379ef1d80f599f0bf449864906f8312e0af7a001feb3966169d580a7dec6112591c25d32d2c5d451955499e54e1e38d6f82528d97b2cf7746aeb2fb263e7906e0f74d8966b45761e2c74379c369507d57e0062c9be840f8"}, @obex={0x5, 0x24, 0x15, 0x46}, @mbim_extended={0x8, 0x24, 0x1c, 0x1, 0x1, 0xa}, @acm={0x4, 0x24, 0x2, 0x7}, @mbim_extended={0x8, 0x24, 0x1c, 0xf12e, 0x8, 0x9d}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x1, 0xef}}], {{0x9, 0x5, 0x82, 0x2, 0x0, 0x9, 0x6, 0xf6}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x0, 0x7, 0x10}}}}}]}}]}}, &(0x7f0000000840)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x250, 0x3, 0x0, 0xf7, 0x8, 0xb2}, 0x4a, &(0x7f00000002c0)={0x5, 0xf, 0x4a, 0x5, [@generic={0x3, 0x10, 0x3}, @generic={0x35, 0x10, 0xa, "47634168f0c4ea61d5aeea2fc1663b8025eaf049b24744403eeeac73b38f563c19e00b428670db0ff81802fb38e5554fa8c8"}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0xe, 0x9, 0x9}, @ptm_cap={0x3}]}, 0x7, [{0x90, &(0x7f0000000400)=@string={0x90, 0x3, "21fa19a1ad12ac05e632890c0e1ae85e2c346ff4147fe3d2473d5b8edc9b8fe98ffefbf6d3ce9027c51410aebb37ebca1a978820161e9edb25e04c4af22f3f42af8798682039932ef55e3d9254e046c1a2dbf183ea2cfc88f5ad48d1018371b9ed54175c0187093936824ca6d7bb4495db717372009279b2758e181bb7fb3a19d6dea4d921b42132fd0c2306ce54"}}, {0xe9, &(0x7f00000004c0)=@string={0xe9, 0x3, "ac59cf20ab497f73d4b2524b0e6117b4cdc58c7cb8c6a344e210e648014f0d2491c3237bf37a25202b500322314e8c1cf45afae8de0f0786662616cf2d0cb57f136ad8d05f01557a071696efd3e7f1901dd0c7e1aad9f936738744b2f25d89d33dbb67b60aadaeaf4859ba202148117ffd4676d768ead2250212e3e9f8ec41684c6e3c9d87aa55351c894e5efe6feae2a7f27b4e957da539f59b5b85e77dfd4939f70215e2f478cd8b8c84fdf32e5dfbeed9879f1624e3dd0d3c28f8dce8b2af015af02d7ce8f0bafe98ecce156d894d8a2e9a3745b9fbd9d1f64271b7fb4248fd79af5c00c8ee"}}, {0x87, &(0x7f00000005c0)=@string={0x87, 0x3, "768e8c047f302d3d59dfd448e1455d52b734529ecc133483ac426303be333bace804ff0405385f72405c68b080ffbe8da4fe7f9e35f60775759eb7239d44de7e41b158bc38b39592de71ad9c233319057aece4703be7ad33e650f39171c647eb7fa36d592800f9f846dfd1820f2806d66020608eb124ebf6ae7ffa9909b8139662ad875b3d"}}, {0xc7, &(0x7f0000000680)=@string={0xc7, 0x3, "f96dfb90bcfb89120dfbe1d2f5610629510da528fdd332ab3385a98a5ce8103a39ac7135695aa185dfc5f2a00a7e49ce62fa899d631e8958d51368db2b0dfa599e6a75e17fdf99410bcc66fc198c55cbfa12b91ddb8619d702545d1407f614af72fcc818804afa4add7d6209116d7f83148ab66d862b01b6f7381bcc0ad62215d89c5fcabd29580e17ad1b9dcf0963392b1e3b11849f023fccbbbe05a763780b80f6589e7afc4fc4f682ee3235e768eda439b20370777af815db9fbd0040abf7eb5efa5988"}}, {0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x40a}}, {0x30, &(0x7f00000007c0)=@string={0x30, 0x3, "89c9541e6d33db5990be92ef09e030f273f95fc573ae497d0919b2f820a442c553a5356173153777d52e543ea1a3"}}, {0x15, &(0x7f0000000800)=@string={0x15, 0x3, "f00115e66fd1191f6128a467d69a25befeb2ee"}}]}) 9.576853051s ago: executing program 7 (id=7446): openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000004882, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0x9, 0xfffffffffffff001, 0xff, 0xffff, 0xffffffff}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x161140, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0x4, &(0x7f00000000c0)=@raw=[@map_idx_val={0x18, 0x2, 0x6, 0x0, 0x108, 0x0, 0x0, 0x0, 0x81}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5}], &(0x7f00000002c0)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, 0x94) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r4 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r8 = accept4(r7, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f00000001c0)="00940a37", 0x4) sendto$unix(r8, &(0x7f0000000440)="36d9a32e92c131d730b1abaedb51eb66fd2d5b1f7eda4f0e859fdaf294bad70673813533d8bf1c6a77b65a7afdc01b29e73571071a68d5def5d7df839810da130b9348f4d9d407eb478d5bfb298c552a498271af70914e14ba9476fd2a0e47984c25ea20afab3064a748add27a7149e9c4705475bda2ecec9ec30214f28c5e16fd3f50f604f20232c534409e52bff64fc6ca0f5e254083aec2794b7216e002e87caf3d0fa7d04ff9e3b03e81595a04979594ff6ea888bf13de8e8f74c6178e31e47593732ae1a501ad3641d423195a788efdb643f50a8c8b9794a62f7b8dfa0fa7da9d391b92ce2a7f9fe0f9d584a3775f", 0x703d59595f6742a8, 0x800, 0x0, 0x0) recvfrom(r8, &(0x7f00000030c0)=""/4117, 0xffffffffffffffbf, 0x1, 0x0, 0xffffffffffffffb5) ioctl$int_in(r5, 0x5452, &(0x7f0000000180)=0x2) fcntl$setsig(r5, 0xa, 0x12) ppoll(&(0x7f0000000140)=[{r6, 0x8002}], 0x1, 0x0, 0x0, 0x0) r9 = dup2(r5, r6) fcntl$setown(r9, 0x8, r4) tkill(r4, 0x13) r10 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) socket(0x10, 0x3, 0x0) 8.984606745s ago: executing program 5 (id=7447): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="2ecf000000000087f7568cfb3a4d1365a2bfd387cbe6c2a0c2fb7697fe8c1cd5f2bfaa923382f6275926fbc944d1a0c7790f5cebfce6471e46b980bac3bd2087b78223cfc8c70614c884170ab30a03a5928880f47b7bdd6be07c7ff909a680ffd6d9d2f894d0591684ee51bf8658e3e8ff66edf7ec79669095f4396d318f1e1b9ca237bc7cc081afdae7fbbeccaa5ac94680fcfa68d3a210"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000200)={0x18, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000380)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000002c0)={0x18, &(0x7f0000000540)=ANY=[], 0x0, 0x0, 0x0, 0x0}) 8.803508934s ago: executing program 7 (id=7448): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_merged\x00', 0x275a, 0x0) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x20, 0x2e, 0x200, 0x70bd27, 0x0, {0x1b}, [@typed={0x8, 0x18, 0x0, 0x0, @binary="01ac0f00"}, @typed={0x4, 0x1e}]}, 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0) r2 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x68}}, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r5 = syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB, @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r4, 0x0, 0x0) write$FUSE_INIT(r4, &(0x7f0000002180)={0x50, 0x0, 0x0, {0x7, 0x27, 0x2, 0x1dd880, 0x7, 0x81, 0x0, 0x4, 0x0, 0x0, 0x10, 0x5}}, 0x50) read$FUSE(r4, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_IOCTL(r4, 0x0, 0x0) syz_fuse_handle_req(r4, 0x0, 0x0, &(0x7f0000003840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002440)={0x78, 0x0, 0x7, {0x1, 0x0, 0x0, {0xffffffffffffffff, 0xfffffffffffffffd, 0x3, 0x8, 0x2, 0x0, 0x800, 0x0, 0x0, 0x4000, 0xbca4, 0x0, r6}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getdents64(r5, 0x0, 0x20000) syz_usb_control_io(r2, 0x0, 0x0) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r7, 0xc0105b08, &(0x7f0000000040)) writev(r7, &(0x7f0000000440)=[{&(0x7f0000000100)="69620d78a68f9d011a6711c8a114c04594b9daa7e177999c1e8dc8005ab76d15217bad839b06c10b7b5285147dcc28bb7063b1ffcf07f3205b9773633d8508986155", 0x42}, {&(0x7f0000000180)="96ba5d260978944f2924e50ed6924e6f7e0cb1ab8c223daf52ecae74cb257e887147d35753bfbc721f7f80fd09dc28105c7160393332fb64405dc34739c033f20094bf6e327349cc306746d1c253aad7900972765b297ecc7fb870c13024f4178996184972a6c91830883fb1", 0x6c}, {&(0x7f0000000200)="3aabd46648a6753d8ecf5df2ba0b647881ab5c7c13a7b52addff", 0x1a}, {&(0x7f0000000240)="1abc29cc09aa6a5feb87189a85e72c34", 0x10}, {&(0x7f0000000280)="069dd83ccd1c6851d8ffe6636f4f85884e4259bef25f7b01e1a8a63f38e18f647027a6e75e5c5cadd5ba64f75c3ef9a87f2ee4268fd760d4d0f4", 0x3a}, {&(0x7f00000002c0)="8a1d06c1d8e8c79d4aae777868f6fca5d81f5705b011ebb3e201e29b3f62ed68738b175b645f1eea256829cb521e9aab08093aad5781169de54875209545d9c0539beb50df8f52bb05f8f39d5a24d26d80df2e6438d0189cbadfd204cfce8ceccc1f693d007e1910be89b65502827d856d00554bf1f2b3a7f862bc123436aa82cf2e0dc7bca50ac94b4640e0c0530021df7afc8cd773e90ef3e1f5f6f6d30096910e45c481b286b537dd5c45e43fac2b1a798e8808ed2f272e817da4121c64cca2220e7e8c852ebecff5a28ce934d8cc9953289b4f7af6a122fbb0caa4b069af29eb3845857709076d4c347b894a0e62", 0xf0}, {&(0x7f00000003c0)="569599f03a6aa16cf8545de820643798ea25ca47889d11ef3645724b366d90ca32c060ec5c2a2598a5887a1bc09cbc4a7374ccf21acf52ac4643dff6c1ee33ad970e53216601200b8b039588fcb881afc94a589c7dafadea89e1dada939bfb7c62ea7baee0830553aa0a70464d1a037b3425434c6b22cf5c9f2c8b3ff09ecc", 0x7f}], 0x7) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="40000000130005002cbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="020100000000000014000300766c616e3000000000000000000000000a000100aa00000300300000"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x42) 5.772982525s ago: executing program 5 (id=7460): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xf5ff, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x70, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x38, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_DATA={0x4}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x100}}, 0x0) 5.676766553s ago: executing program 7 (id=7461): r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000480)={'broute\x00', 0x0, 0x4, 0x0, [0x2, 0xfffffffffffffffc, 0x9, 0x8, 0x9, 0x4], 0x0, 0x0, 0x0}, &(0x7f0000000c80)=0xa8) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870f500090582020002"], 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x0, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x129a02, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, &(0x7f0000000200)={0x1d, r5}, 0x10) sendmsg$can_bcm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x20000600}}, 0x0) sendfile(r3, r2, &(0x7f0000000080)=0xb, 0x8) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x40041, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="40000000210a010800000000000000000a0000010900020073797a31000000000900010073797a3100000000140003"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000080)={'syztnl0\x00', 0x0, 0x80, 0x7810, 0xf3, 0x8, {{0x1d, 0x4, 0x0, 0x8, 0x74, 0x68, 0x0, 0x31, 0x2f, 0x0, @broadcast, @multicast2, {[@timestamp_addr={0x44, 0x14, 0x71, 0x1, 0xc, [{@rand_addr=0x64010101, 0x50000}, {@dev={0xac, 0x14, 0x14, 0x28}}]}, @rr={0x7, 0x1b, 0x16, [@broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @broadcast, @rand_addr=0x64010101, @multicast1]}, @lsrr={0x83, 0x13, 0xe0, [@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x2b}, @remote]}, @lsrr={0x83, 0x1b, 0xc, [@multicast2, @dev={0xac, 0x14, 0x14, 0x27}, @private=0xa010101, @private=0xa010101, @rand_addr=0x64010101, @loopback]}]}}}}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x1, &(0x7f0000000040)=@raw=[@exit], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r8, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94) r9 = fsopen(&(0x7f0000000500)='cifs\x00', 0x1) fsconfig$FSCONFIG_SET_FD(r9, 0x5, &(0x7f00000001c0)='acl\x00JN\xa0\xc3\xcd,\xebl>J\"f\xe7\xe0A\x04%\xb4\xd0\x7fb)\x9f\xd3\xeb\xfe\x8fi\xee\x02\x03\a\xb0p\xe9\xfe_\a0\xee\x82{\xa5\xbc\xb6\x8d\xe8\xe3K{H\xbc\xa0y+\xabL,\x8b^|#x\x85\xacc\xa5\xf3\xa7\x05Y~\xc3\xbag\x1d\x95\xcd\xaf\xd2\xd6\xc7v3\xe1r\xdbL\xcdPu\x91\xce\xa5\x86@vG\xb1t\x0f\xf2gg\xcb\xbc\xe9\x90\x00\xd5\xb2V0yZD/\xa1\x7f\xee{\xd3\xecN\xb1\xee\xb1\xb5\x1bu0=:\x84\xd5N2\xc5\x91\x8d\x12\xf7\xdd\xea\xad\xf8<$b\x8b\x89\x18\xe6\xaa\xf3\xa9\x01_\x9b\x89\x05\xc7\xb9\xac\xf5\xb8\x9d2\x8bt\x16\xe8\x9e\x02*\x8a\x83:\a\xef\xee\xeb\xf9\x96\xe9\b\v7`SN\xd1}s\xa7\x8c\x9bB\x13P\x11\x1fl\xc87\x96\xa2\x8f9\xfe\xb0Y~{=SU\xc8D\xe8(\x1c\xffQ\xa9\xdfY06\x19\xa7\x91&\x03Q\x95\xda\xde\x17\xd4\x954\xf8\xa6\xfad:c\xf4\xaa\x99\xcb\xd2GtO', 0x0, r9) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="6b0ee0b3d41b1b"]) 5.663204866s ago: executing program 5 (id=7462): r0 = openat$vicodec0(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_ENUMSTD(r0, 0xc0405619, 0x0) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000000)=0x200) 5.476023104s ago: executing program 5 (id=7463): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7f9, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x48574653, 0x1, @discrete={0xff, 0xfffffeff}}) syz_usb_connect(0x0, 0x49, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a52bfb0821048f79548601020301090237000100000000090400000002fe"], 0x0) syz_usb_connect$uac2(0x3, 0xcf, &(0x7f00000005c0)=ANY=[@ANYBLOB], &(0x7f0000000400)={0xa, &(0x7f0000000140)={0xa, 0x6, 0xe844d5ee7b9552f0, 0x5a, 0x5, 0x1c, 0x8, 0xc2}, 0x10, &(0x7f0000000280)=ANY=[]}) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) ioctl$RTC_UIE_ON(r1, 0x7003) ioctl$RTC_AIE_ON(r1, 0x7001) add_key$fscrypt_v1(&(0x7f0000000180), 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$clear(0x3, 0xfffffffffffffffc) request_key(&(0x7f0000000140)='user\x00', &(0x7f00000001c0)={'syz', 0x3}, &(0x7f0000000240)='$\x00', 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x21) syz_emit_ethernet(0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa080045000028006700000a06"], 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r4 = socket(0x15, 0x5, 0x0) getsockopt(r4, 0x200000000114, 0x40002717, 0x0, &(0x7f0000000000)=0xfffffffffffffeeb) close(r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x4361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x100, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0x2}, {0x6, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xad1611f0e81730c0}, 0x4890) r7 = socket$packet(0x11, 0x3, 0x300) r8 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r8, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r8, 0x0) connect$vsock_stream(r8, 0x0, 0x0) sendto$packet(r7, &(0x7f0000000240)="800000800000210ee7decd7a000340008100", 0x36, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r6, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 4.399467309s ago: executing program 6 (id=7466): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x40040, 0x6ab858183a7ef6ba) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) fcntl$getflags(r0, 0x3) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0xa30, 0xffffffff, 0x908, 0x908, 0x908, 0xffffffff, 0xffffffff, 0x99c, 0x99c, 0x99c, 0xffffffff, 0x4, &(0x7f00000000c0), {[{{@ip={@remote, @broadcast, 0xffffff00, 0x0, 'rose0\x00', 'veth0_to_hsr\x00', {0xff}, {0xff}, 0x84, 0x3, 0x21}, 0x0, 0x70, 0x94}, @REJECT={0x24, 'REJECT\x00', 0x0, {0x5}}}, {{@uncond, 0x0, 0x850, 0x874, 0x0, {}, [@common=@unspec=@u32={{0x7e0}, {[{[{0x8a23716, 0x1}, {0x800, 0x2}, {0x6, 0x2}, {0x10000}, {0x4, 0x3}, {0x4, 0x3}, {0x7, 0x2}, {0x7fff}, {0x1}, {0xb, 0x3}, {0x81, 0x3}], [{0x40, 0x2}, {0x9, 0xa}, {0x7f, 0x7899a924}, {0x2, 0x5}, {0x8, 0xf0a}, {0x8}, {0x5, 0x1}, {0x2, 0xffff5207}, {0x7, 0xdcf}, {0xcdb9, 0x100}, {0x0, 0x8}], 0x9, 0x8}, {[{0x1, 0x1}, {0x23809c14, 0x1}, {0x9, 0x3}, {0x1, 0x1}, {0xab, 0x1}, {0x7, 0x3}, {0x1, 0x2}, {0x9, 0x2}, {0x6, 0x2}, {0x0, 0x1}, {0x7, 0x1}], [{0x6, 0x2}, {0x39, 0x6}, {0x10001, 0x5}, {0x0, 0x6}, {0xffff0000, 0x9}, {0x44, 0x6}, {0x7fffffff, 0x5}, {0xb, 0x7}, {0x7fffffff, 0xfffffffd}, {0xfff, 0x2}, {0x3}], 0x4, 0x9}, {[{0x2, 0x1}, {0xfff, 0x2}, {0x6, 0x3}, {0x7, 0x1}, {0x5, 0x1}, {0x1000, 0x1}, {0x0, 0x1}, {0x0, 0x3}, {0xfffffff9, 0x1}, {0xff, 0x3}, {0x9, 0x3}], [{0x2, 0x6}, {0x2, 0x7}, {0xe8c000, 0x7}, {0x4}, {0xe2, 0x9}, {0x7fffffff}, {0x8000, 0x1ef}, {0x1, 0x1}, {0xffffffff, 0x6}, {0x5, 0x2}, {0x2, 0x1c00}], 0x6, 0x2}, {[{0xffff, 0x1}, {0x2c, 0x2}, {0x98ea, 0x3}, {0x8, 0x3}, {0x5}, {0x6426, 0x3}, {0x920, 0x1}, {0x10000, 0x3}, {0x7}, {0x4}], [{0x80000000, 0x63d}, {0x4, 0x5}, {0x7, 0xfffffff9}, {0x2}, {0x4, 0x6}, {0x77, 0x9}, {0x81, 0x4}, {0x0, 0x4}, {0xdd, 0x7}, {0xc5, 0x80000001}, {0x4, 0x800}], 0x4, 0x7}, {[{0x6}, {0x2}, {0x2, 0x2}, {0x9f02, 0x1}, {0x101, 0x2}, {0x2}, {0x10}, {0xffffffff, 0x3}, {0x7}, {0xff, 0x3b0832210c89846f}, {0x4f104a2e}], [{0x9, 0x9d8d}, {0x5, 0x8001}, {0x1000, 0x1}, {0x100, 0xfffffffc}, {0x0, 0xe}, {0x5, 0x5}, {0x80000001, 0xd}, {0x9bd, 0x5}, {0x5, 0xc2}, {0x7fff, 0x400}, {0x5, 0x1}], 0xb, 0x9}, {[{0x1, 0x1}, {0x7, 0x2}, {0xf24b, 0x1}, {0xfffffff9, 0x6}, {0x8}, {0x80, 0x2}, {0x1, 0x2}, {0x7, 0x2}, {0x10001}, {0x2a7}, {0x9, 0x2}], [{0x0, 0x7}, {0x3, 0x6}, {0x9, 0xc}, {0x6, 0x7f}, {0x1, 0x3}, {0x4, 0x8}, {0x1ff, 0x2}, {0x9, 0x1000}, {0x7, 0x9}, {0x1000, 0xd}, {0x7fff, 0x8}], 0x9, 0xa}, {[{0x8, 0x2}, {0x3, 0x2}, {0x0, 0x1}, {0x9, 0x3}, {0x1ff, 0x1}, {0x2, 0x1}, {0x3, 0x3}, {0x4, 0x1}, {0x10, 0x2}, {0x9, 0x2}, {0xc, 0x3}], [{0xa32, 0x7}, {0x80000000, 0xa}, {0x6, 0x8}, {0x5, 0xf654}, {0x7}, {0x5, 0x1c}, {0x7fff, 0x2}, {0x0, 0x10001}, {0x1, 0x6d1c547c}, {0xffff938e, 0x7fff}, {0x200, 0x8}], 0x1, 0x6}, {[{0x80000001}, {0x9, 0x1}, {0x360, 0x2}, {0x9, 0x3}, {0x1}, {0x3ff}, {}, {0x8000, 0x1}, {0xc}, {0xfffffffb, 0x931ba27bc9c21ad4}, {0x912}], [{0x7fffffff, 0x3}, {0x9, 0x3}, {0x1, 0x8001}, {0x6, 0x80}, {0x9, 0x800}, {0x40, 0x3b}, {0xffffffff, 0x6}, {0x80, 0x9}, {0x7ff, 0x855}, {0x800, 0x200}, {0x6}], 0x7, 0x3}, {[{0x9}, {0x5}, {0x400}, {0x10000, 0x2}, {0x7ff}, {0x8, 0x3}, {0x0, 0x1}, {0xb0b, 0x1}, {0x5, 0x1}, {0x5, 0x3}, {0x7}], [{0xc563, 0x80}, {0x1, 0x101}, {0xaca, 0x2}, {0x3, 0x85eb}, {0x4, 0x5}, {0x4, 0xe}, {0xfffff001, 0x100}, {0x0, 0x9}, {0x800, 0x6}, {0xa489}, {0x401, 0x10001}], 0x8, 0x9}, {[{0xffffffff, 0x2}, {0x3, 0x2}, {0x101, 0x2}, {0x2, 0x2}, {0x0, 0x1}, {0x101, 0x2}, {0xafd, 0x1}, {0x7, 0x3}, {0x2, 0x2}, {0x6, 0x1}, {0x38dbdb24}], [{0x7, 0x8}, {0x1, 0x5}, {0x200, 0x5}, {0x94, 0x800}, {0x7, 0xba}, {0x14a3, 0x8}, {0x12, 0x2}, {0x10, 0x5}, {0x9cb, 0x9}, {0x9, 0x6}, {0x1, 0x6}], 0x9, 0x5}, {[{0x1, 0x2}, {0x401, 0x3}, {0xfffff000, 0x3}, {0x0, 0x3}, {0x401, 0x3}, {0x1, 0x2}, {}, {0xcf7c, 0x3}, {0x33, 0x2}, {0xdfa, 0x1}, {0x197d5642, 0x2}], [{0x7, 0x80000001}, {0x0, 0x7b83}, {0x6, 0xfffffffa}, {0x41b, 0x2a2c82b2}, {0xfffff4a0, 0xc0}, {0x7f, 0xc4}, {0x9, 0x3}, {0x0, 0x7}, {0x8, 0x7}, {0xf, 0x5255}, {0x5fb4, 0x7f}], 0x2}], 0xb, 0x1}}]}, @REJECT={0x24}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x24}, @local, 0xffffff00, 0xff000000, '\x00', 'bond_slave_0\x00', {0xff}, {0xff}, 0x0, 0x3, 0x20}, 0x0, 0x70, 0x94}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x3576902ddd7fb99f, 0x7, 0x8}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0xa8c) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000780)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}, @NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x7}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xec}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) fallocate(r4, 0x85ca5d7b75022463, 0x0, 0x6) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000080)={r3, 0x9, 0x7fff}, 0x8) 4.342274473s ago: executing program 6 (id=7467): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x70, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x38, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_DATA={0x4}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x100}}, 0x0) (fail_nth: 5) 3.954150865s ago: executing program 4 (id=7468): r0 = syz_usb_connect$cdc_ncm(0x0, 0x8f, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109027d0002010080000904000001020d0000052406000105240000000d240f0103050000fd0000000406241aff072908241c0101090000142413099f33760bf14377323063f9c8a04d113905241510000905810300020800040904010000020d00000904010102020d0000090582020002e1ad00090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async, rerun: 64) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) (async) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x4, r1}) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086201, &(0x7f0000000080)=0x1) ioctl$DMA_BUF_SET_NAME_A(r3, 0x40046201, &(0x7f00000000c0)='cgroup.freeze\x00') (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x7101}) (async, rerun: 64) r5 = socket(0x400000000010, 0x3, 0x0) (async, rerun: 64) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x7, 0x2, 0x1}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) (async) r8 = socket(0x400000000010, 0x3, 0x0) (async, rerun: 32) r9 = socket$unix(0x1, 0x1, 0x0) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x5, 0x4}, {}, {0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x9200}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0xc010) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x20, 0x80, 0x1c, {0x0, 0x2270, 0xffffffff, 0x9, 0x44, 0x8000, 0xfffd, 0xec, 0x100, 0xfffc, 0x3, 0xfb}}, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 64) syz_usb_control_io(r0, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000900)={0x14, 0x0, &(0x7f00000008c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 3.839424879s ago: executing program 6 (id=7470): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40e41, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000001400000060ec97000fc83c00fe8000000000000000000000000000aaff020000000000000000000000000001"], 0xffe) (fail_nth: 5) 3.524970362s ago: executing program 5 (id=7471): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_merged\x00', 0x275a, 0x0) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x20, 0x2e, 0x200, 0x70bd27, 0x0, {0x1b}, [@typed={0x8, 0x18, 0x0, 0x0, @binary="01ac0f00"}, @typed={0x4, 0x1e}]}, 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0) r2 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x68}}, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r5 = syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB, @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r4, 0x0, 0x0) write$FUSE_INIT(r4, &(0x7f0000002180)={0x50, 0x0, 0x0, {0x7, 0x27, 0x2, 0x1dd880, 0x7, 0x81, 0x0, 0x4, 0x0, 0x0, 0x10, 0x5}}, 0x50) read$FUSE(r4, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_IOCTL(r4, 0x0, 0x0) syz_fuse_handle_req(r4, 0x0, 0x0, &(0x7f0000003840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002440)={0x78, 0x0, 0x7, {0x1, 0x0, 0x0, {0xffffffffffffffff, 0xfffffffffffffffd, 0x3, 0x8, 0x2, 0x0, 0x800, 0x0, 0x0, 0x4000, 0xbca4, 0x0, r6}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getdents64(r5, 0x0, 0x20000) syz_usb_control_io(r2, 0x0, 0x0) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r7, 0xc0105b08, &(0x7f0000000040)) writev(r7, &(0x7f0000000440)=[{&(0x7f0000000100)="69620d78a68f9d011a6711c8a114c04594b9daa7e177999c1e8dc8005ab76d15217bad839b06c10b7b5285147dcc28bb7063b1ffcf07f3205b9773633d8508986155", 0x42}, {&(0x7f0000000180)="96ba5d260978944f2924e50ed6924e6f7e0cb1ab8c223daf52ecae74cb257e887147d35753bfbc721f7f80fd09dc28105c7160393332fb64405dc34739c033f20094bf6e327349cc306746d1c253aad7900972765b297ecc7fb870c13024f4178996184972a6c91830883fb1", 0x6c}, {&(0x7f0000000200)="3aabd46648a6753d8ecf5df2ba0b647881ab5c7c13a7b52addff", 0x1a}, {&(0x7f0000000240)="1abc29cc09aa6a5feb87189a85e72c34", 0x10}, {&(0x7f0000000280)="069dd83ccd1c6851d8ffe6636f4f85884e4259bef25f7b01e1a8a63f38e18f647027a6e75e5c5cadd5ba64f75c3ef9a87f2ee4268fd760d4d0f4", 0x3a}, {&(0x7f00000002c0)="8a1d06c1d8e8c79d4aae777868f6fca5d81f5705b011ebb3e201e29b3f62ed68738b175b645f1eea256829cb521e9aab08093aad5781169de54875209545d9c0539beb50df8f52bb05f8f39d5a24d26d80df2e6438d0189cbadfd204cfce8ceccc1f693d007e1910be89b65502827d856d00554bf1f2b3a7f862bc123436aa82cf2e0dc7bca50ac94b4640e0c0530021df7afc8cd773e90ef3e1f5f6f6d30096910e45c481b286b537dd5c45e43fac2b1a798e8808ed2f272e817da4121c64cca2220e7e8c852ebecff5a28ce934d8cc9953289b4f7af6a122fbb0caa4b069af29eb3845857709076d4c347b894a0e62", 0xf0}, {&(0x7f00000003c0)="569599f03a6aa16cf8545de820643798ea25ca47889d11ef3645724b366d90ca32c060ec5c2a2598a5887a1bc09cbc4a7374ccf21acf52ac4643dff6c1ee33ad970e53216601200b8b039588fcb881afc94a589c7dafadea89e1dada939bfb7c62ea7baee0830553aa0a70464d1a037b3425434c6b22cf5c9f2c8b3ff09ecc", 0x7f}], 0x7) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="40000000130005002cbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="020100000000000014000300766c616e3000000000000000000000000a000100aa00000300300000"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x42) 3.339877925s ago: executing program 6 (id=7472): socket$can_bcm(0x1d, 0x2, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000004c0)={'vxcan1\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f00000003c0)="94d24efaf27bb4be876a3c373a990b65dc5bfb9722379f62c6594932255a84f6c5198bb9abf6e39ce7c30331cedf4db436188f3bc69680a7df0e7a0463fd2e5ce642811e7879162bb38ec74f04dceb5f7b51eb46933460eccdf5aac9c0d7089537f7b075a99057e233e886382e11e2cbd484ae30041208e8bb97fd9b1f5f678bcd4d158684dc8fd3627c1ed8396b31b3267c8d0efa092965a8cc00be95e50b01f445c040746c09ef9ce8d7629763f80607d5f9947d85e01493504be972a588207004f8b6ae20c1780da8bd5e63d20a80d896c116af90b6072902ef", 0xdb, 0x40, &(0x7f0000000680)={0x11, 0x15, r2, 0x1, 0x81, 0x6, @remote}, 0x14) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000040)={0x8, 0x9, 0x4, {0x2, @vbi={0x9, 0x1, 0x7, 0x34565559, [0x34565348, 0xb22], [0x7], 0x1}}, 0x8}) socket(0x1d, 0x2, 0x6) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4805}, 0x20000050) sendmsg$NFT_BATCH(r4, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0xf8, 0x16, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_FLOWTABLE_HOOK={0xc4, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bridge_slave_0\x00'}, {0x14, 0x1, 'veth1_vlan\x00'}, {0x14, 0x1, 'syz_tun\x00'}, {0x14, 0x1, 'veth1_to_batadv\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x4}, @NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ipvlan0\x00'}, {0x14, 0x1, 'ip6_vti0\x00'}, {0x14, 0x1, 'pim6reg\x00'}, {0x14, 0x1, 'erspan0\x00'}, {0x14, 0x1, 'bridge_slave_1\x00'}]}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x10000}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x14c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={0x0, 0xffffffffffffff8a}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e00000018000280140011"], 0x48}}, 0x0) socket(0x10, 0x3, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40088a01, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f000000b3c0)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f000000b480)={'dummy0\x00', 0x0}) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f000000b6c0), r6) sendmsg$ETHTOOL_MSG_EEE_GET(r6, &(0x7f000000bac0)={0x0, 0x0, &(0x7f000000ba80)={&(0x7f000000ba00)={0x20, r9, 0x1, 0x70bd26, 0x25dfdbff, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000c001}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, &(0x7f0000000040)={0xc000000e}) epoll_wait(0xffffffffffffffff, &(0x7f0000000080)=[{}], 0x1, 0x7) 2.805794246s ago: executing program 4 (id=7474): openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000004882, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x161140, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0x4, &(0x7f00000000c0)=@raw=[@map_idx_val={0x18, 0x2, 0x6, 0x0, 0x108, 0x0, 0x0, 0x0, 0x81}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5}], &(0x7f00000002c0)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, 0x94) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r4 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r8 = accept4(r7, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f00000001c0)="00940a37", 0x4) sendto$unix(r8, &(0x7f0000000440)="36d9a32e92c131d730b1abaedb51eb66fd2d5b1f7eda4f0e859fdaf294bad70673813533d8bf1c6a77b65a7afdc01b29e73571071a68d5def5d7df839810da130b9348f4d9d407eb478d5bfb298c552a498271af70914e14ba9476fd2a0e47984c25ea20afab3064a748add27a7149e9c4705475bda2ecec9ec30214f28c5e16fd3f50f604f20232c534409e52bff64fc6ca0f5e254083aec2794b7216e002e87caf3d0fa7d04ff9e3b03e81595a04979594ff6ea888bf13de8e8f74c6178e31e47593732ae1a501ad3641d423195a788efdb643f50a8c8b9794a62f7b8dfa0fa7da9d391b92ce2a7f9fe0f9d584a3775f", 0x703d59595f6742a8, 0x800, 0x0, 0x0) recvfrom(r8, &(0x7f00000030c0)=""/4117, 0xffffffffffffffbf, 0x1, 0x0, 0xffffffffffffffb5) ioctl$int_in(r5, 0x5452, &(0x7f0000000180)=0x2) fcntl$setsig(r5, 0xa, 0x12) ppoll(&(0x7f0000000140)=[{r6, 0x8002}], 0x1, 0x0, 0x0, 0x0) r9 = dup2(r5, r6) fcntl$setown(r9, 0x8, r4) tkill(r4, 0x13) r10 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) socket(0x10, 0x3, 0x0) 2.591414491s ago: executing program 0 (id=7475): timer_create(0x3, 0x0, &(0x7f00000001c0)) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) setrlimit(0xf, &(0x7f00000000c0)={0x3, 0x3}) timer_settime(0x0, 0x0, &(0x7f00000002c0), 0x0) mlock(&(0x7f0000bff000/0x400000)=nil, 0x400000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x88440, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r2, 0x4020aeb2, &(0x7f0000000300)={0x300, 0x12c, @ioapic={0x30000, 0x65, 0x8, 0x6, 0x0, [{0x2, 0x6, 0x4, '\x00', 0x4}, {0x81, 0x5, 0xa6, '\x00', 0x3}, {0xf0, 0x5, 0x9, '\x00', 0x4}, {0x2, 0x81, 0xb, '\x00', 0x8}, {0xc0, 0x0, 0x5, '\x00', 0x3}, {0x7, 0x9, 0x41, '\x00', 0xa6}, {0x0, 0x4, 0x3, '\x00', 0x2}, {0x6, 0x18, 0x7, '\x00', 0x4}, {0xb6, 0x7, 0x6, '\x00', 0x40}, {0x40, 0xb, 0xff, '\x00', 0x9}, {0x1, 0x8, 0x2, '\x00', 0x3}, {0x40, 0xf1, 0x5, '\x00', 0x4}, {0x5, 0xf, 0x1, '\x00', 0xf}, {0x5, 0x2, 0xfa, '\x00', 0xc}, {0x1, 0x57, 0x4, '\x00', 0x5}, {0xff, 0x6, 0x6, '\x00', 0x2}, {0x0, 0x8, 0x6, '\x00', 0xc7}, {0x5, 0x3, 0x9, '\x00', 0xa}, {0x1, 0x1, 0x7, '\x00', 0x6}, {0xcb, 0x61, 0xfe, '\x00', 0x2}, {0x83, 0x9, 0x53, '\x00', 0x9}, {0x4, 0xa, 0x40, '\x00', 0x8}, {0x7, 0xbf, 0x2, '\x00', 0xff}, {0x9, 0xff, 0x2, '\x00', 0x4}]}}) 2.534399881s ago: executing program 7 (id=7476): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x26, &(0x7f0000000080)=0x4000000, 0x4) listen(r2, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000140)) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$pokeuser(0x6, r4, 0x118, 0x137db) ptrace$pokeuser(0x6, r4, 0x118, 0x7) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000)=r1, 0x4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x2a, 0x107, 0xfffffffc, 0x0, {0x5, 0x7c}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x11}]}, 0x1c}, 0x1, 0x0, 0x0, 0x488c4}, 0xc000) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x300}, @NFTA_NG_DREG={0x8}, @NFTA_NG_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0xffffffd9}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x0) write$tun(r5, &(0x7f0000000440)=ANY=[@ANYBLOB="000086dd0001110004000000a60c6eec00be00442fd3fe8000000000000000000000000000aaff020000000000000000000000000001042022eb"], 0xfdef) 2.156387174s ago: executing program 0 (id=7477): r0 = socket$kcm(0xa, 0x922000000003, 0x11) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x24004008}, 0x0) syz_emit_ethernet(0x86, &(0x7f00000010c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x3, 0x4, 0x0, @broadcast=0x1000000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @empty, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@remote, 0x4e210000}]}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@multicast1}, {}, {@dev}, {@private}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@dev}]}]}}}}}}}, 0x0) recvmsg(r1, &(0x7f00000031c0)={0x0, 0x0, 0x0}, 0x2000) recvmmsg(r1, &(0x7f0000000280)=[{{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000080)=""/106, 0x6a}, {&(0x7f0000001840)=""/4087, 0xff7}, {&(0x7f0000000580)=""/195, 0xc3}, {&(0x7f0000000340)=""/165, 0xa5}, {&(0x7f0000000680)=""/104, 0x68}], 0x5}, 0x7}], 0x3, 0x40002000, 0x0) socket$kcm(0x10, 0x2, 0x4) connect(r0, &(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x1000065, @mcast2, 0x6, 0x1}, 0x80) r2 = syz_open_dev$vcsu(&(0x7f0000000080), 0x4, 0xa02) sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="746fb7546e27054d6b11990ee6764a3cd39b2be3422f39deaed9c432d2c447dc3d6b746eb2f660920bc4970ee35355068f7c45205e7865ba06a8359b988772e5cd1b9608831762aeb29e673a0299e2bb76d0f9c7ba6ba9cf034369e8dca266c21f75c1ad583d12a39b6118706c7e", 0x6e}, {&(0x7f0000000140)="272c438f175e1a6e8f607fa0ccbe61d0b1cebb9703abe8e4791f2b3010c65a40f53e55e17f797a0eff2e3642444d2b75a19e5dd359277b4d74589ae86a38932f6a0bd19e1fcdb1a9693756260dab6e0e245e581bf9982e743d2f3d49dd42623bee35177e3ee9ea086840f5eb8f9cf243645b74df81c26baa7b477759b0b1ed6c5e4d395257d3f5739b0cb239aa0f0b87b6318117f1a75a33cdb30f802d9bd01d0579968e669e89ca76d8bd330b2c2d365332000000", 0xb5}, {&(0x7f00000002c0)="ceb549d2a94508da7de9e3b10047306b8baf717114686ed75fd37129841982c41a4fe398d89bde5cc0311d95cf3c911dc4d931f8396c9eba4e55b94de4eee74535608892365d90985ead9539c152b81b2e904d50912e248da9244246cd6a4b106d3b7c6de041d386b2a79b7502302df0deb52b162533ed0ba679ebe1cb09277c", 0x80}], 0x3}, 0x44810) 2.065638984s ago: executing program 7 (id=7478): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x4) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r3, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1c}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r4) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_MGMT(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="310125bd7000fbdbdf255200000008000300", @ANYRES32=r7], 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_CQM(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0x234}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r4, &(0x7f0000000980)={&(0x7f00000000c0), 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x28, r9, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0xe, 0x72}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0xc800}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r12 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r12, 0x114, 0x8, &(0x7f0000000100)=0xffffffffffffffff, 0x4) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x20, r11, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x48050}, 0x0) syz_usb_connect$cdc_ecm(0x5, 0x110, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfe, 0x1, 0x1, 0x7, 0x80, 0x6, "", [{{0x9, 0x4, 0x0, 0xff, 0x3, 0x2, 0x6, 0x0, 0x57, {{0x6, 0x24, 0x6, 0x0, 0x0, "d2"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x8, 0x4, 0x8, 0x7}, [@mdlm_detail={0xa0, 0x24, 0x13, 0x5, "c4a7d36433db9d25dc3fefda1392d645792b08a88894353d8d70de4fac28585d729e85a9ba35f24ad011b259e2c73e65c30ca3e638223df32a88b0136ba9a1b8b8a1dee77379ef1d80f599f0bf449864906f8312e0af7a001feb3966169d580a7dec6112591c25d32d2c5d451955499e54e1e38d6f82528d97b2cf7746aeb2fb263e7906e0f74d8966b45761e2c74379c369507d57e0062c9be840f8"}, @obex={0x5, 0x24, 0x15, 0x46}, @mbim_extended={0x8, 0x24, 0x1c, 0x1, 0x1, 0xa}, @acm={0x4, 0x24, 0x2, 0x7}, @mbim_extended={0x8, 0x24, 0x1c, 0xf12e, 0x8, 0x9d}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x1, 0xef}}], {{0x9, 0x5, 0x82, 0x2, 0x0, 0x9, 0x6, 0xf6}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x0, 0x7, 0x10}}}}}]}}]}}, &(0x7f0000000840)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x250, 0x3, 0x0, 0xf7, 0x8, 0xb2}, 0xba, &(0x7f00000002c0)={0x5, 0xf, 0xba, 0x5, [@generic={0x73, 0x10, 0x3, "fe66cfb2aa5dfc990c7ee957936e4a3e002f4751cdb2b87bdec8c50863436365b870807748befdc1f235c89ca6022869f1d0f4e8b9fb5bc00597eecface77198aab00a4931052b882440ee464254f4e61cadd5f78fb821462b868232f8b0920cbe2cabdf2c5eb9c829a5577c1a7cbf27"}, @generic={0x35, 0x10, 0xa, "47634168f0c4ea61d5aeea2fc1663b8025eaf049b24744403eeeac73b38f563c19e00b428670db0ff81802fb38e5554fa8c8"}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0xe, 0x9, 0x9}, @ptm_cap={0x3}]}, 0x7, [{0x90, &(0x7f0000000400)=@string={0x90, 0x3, "21fa19a1ad12ac05e632890c0e1ae85e2c346ff4147fe3d2473d5b8edc9b8fe98ffefbf6d3ce9027c51410aebb37ebca1a978820161e9edb25e04c4af22f3f42af8798682039932ef55e3d9254e046c1a2dbf183ea2cfc88f5ad48d1018371b9ed54175c0187093936824ca6d7bb4495db717372009279b2758e181bb7fb3a19d6dea4d921b42132fd0c2306ce54"}}, {0xe9, &(0x7f00000004c0)=@string={0xe9, 0x3, "ac59cf20ab497f73d4b2524b0e6117b4cdc58c7cb8c6a344e210e648014f0d2491c3237bf37a25202b500322314e8c1cf45afae8de0f0786662616cf2d0cb57f136ad8d05f01557a071696efd3e7f1901dd0c7e1aad9f936738744b2f25d89d33dbb67b60aadaeaf4859ba202148117ffd4676d768ead2250212e3e9f8ec41684c6e3c9d87aa55351c894e5efe6feae2a7f27b4e957da539f59b5b85e77dfd4939f70215e2f478cd8b8c84fdf32e5dfbeed9879f1624e3dd0d3c28f8dce8b2af015af02d7ce8f0bafe98ecce156d894d8a2e9a3745b9fbd9d1f64271b7fb4248fd79af5c00c8ee"}}, {0x87, &(0x7f00000005c0)=@string={0x87, 0x3, "768e8c047f302d3d59dfd448e1455d52b734529ecc133483ac426303be333bace804ff0405385f72405c68b080ffbe8da4fe7f9e35f60775759eb7239d44de7e41b158bc38b39592de71ad9c233319057aece4703be7ad33e650f39171c647eb7fa36d592800f9f846dfd1820f2806d66020608eb124ebf6ae7ffa9909b8139662ad875b3d"}}, {0xc7, &(0x7f0000000680)=@string={0xc7, 0x3, "f96dfb90bcfb89120dfbe1d2f5610629510da528fdd332ab3385a98a5ce8103a39ac7135695aa185dfc5f2a00a7e49ce62fa899d631e8958d51368db2b0dfa599e6a75e17fdf99410bcc66fc198c55cbfa12b91ddb8619d702545d1407f614af72fcc818804afa4add7d6209116d7f83148ab66d862b01b6f7381bcc0ad62215d89c5fcabd29580e17ad1b9dcf0963392b1e3b11849f023fccbbbe05a763780b80f6589e7afc4fc4f682ee3235e768eda439b20370777af815db9fbd0040abf7eb5efa5988"}}, {0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x40a}}, {0x30, &(0x7f00000007c0)=@string={0x30, 0x3, "89c9541e6d33db5990be92ef09e030f273f95fc573ae497d0919b2f820a442c553a5356173153777d52e543ea1a3"}}, {0x15, &(0x7f0000000800)=@string={0x15, 0x3, "f00115e66fd1191f6128a467d69a25befeb2ee"}}]}) 1.977709304s ago: executing program 0 (id=7479): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000340)={@private2={0xfc, 0x2, '\x00', 0x9}, @local, @local, 0x9, 0x0, 0x0, 0x10000000, 0x0, 0x272001b, r2}) 1.976761351s ago: executing program 4 (id=7480): ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(0xffffffffffffffff, 0xc008551c, &(0x7f0000000000)={0x20000000, 0x14, [0xc5, 0x7, 0xed, 0x6, 0x800]}) r0 = openat$dma_heap(0xffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0xf504, 0x0) ioctl(r0, 0x7, &(0x7f0000000080)="b7f7b293b32b1f5cf6d7ac98c7cffa6e75da3f50f45192ff933a5c5c1ada65126055e56ce5271abf812758256db31098e33d4fd4ed3ebff1fd096ee67fb84a7d366862784b27a1bce30172add00d5eb22d01b40ba8bf6366b497688459bb1faa44f818d784ae862f9e8d9405014a42947e08e269e619f39bf76d126e3f9b738b9b3c17ac1151ebe676f5906af6f7c2d62b9a06b64d13e8b8e6a7e837f430f6273339c92b6e16fb9c3e59ba3dc1ff2e82fd52be8b718dc8ff98431abec4fceb7faf18dae6a4f8a7c4aa5b450edb087bccbd7aecc6a52c") r1 = openat$rtc(0xffffff9c, &(0x7f0000000180), 0x80, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000001c0)={0x7, 0x2, 0x0, 0x7fffffff, 'syz1\x00'}) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)={0x4, 0x0, [{0x991, 0x0, 0x8}, {0xaa6, 0x0, 0x8}, {0x641, 0x0, 0xa}, {0x9d, 0x0, 0x6}]}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000280)={0x0, 0xc7d}, &(0x7f00000002c0)=0x8) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r3, 0x84, 0x1a, &(0x7f0000000300)={r4, 0x54, "39719c7426d82c478238c91838661eb5e53bff2500609301982bc44d1cc9d11ff69f3733ded6e57d69343151335583396a0e911055901d8485bc4318c99f122f0d3f2a7c15a0d31196fca7b5baf3f98e729a1591"}, &(0x7f0000000380)=0x5c) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r3, {0x9}}, './file0\x00'}) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r6, 0x40146f2c, &(0x7f0000000400)={0x4, 0x1, 0x0, 0xb}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) ioctl$BTRFS_IOC_SNAP_CREATE(r6, 0x50009401, &(0x7f0000000480)={{r1}, "268058e4e2c42188211c8c52c207f75ed785caca2f2a823d913e9efd7aed994d51e22e2f4eaa1cdc9e09189b6c0c6c7e3964d44e8f7646cb1d81dc39fb5aedbe6c067744f915a4b2cf4f2a3583ccb3d8003d0f261452f75b09b950a5ff9f1d1f4e69150962037d80d344d4f2bc1aab8f3ba593aad985fb39d8cc85f39ab15302159eaa578e2a01b3325678b2bfe178d7efbc0118ba60f0c1e9893bb550268f5d72866a9fafde1036b2806ea8b3b61851b78022e8e78e2caf8364846a5cecbcdb70f67ce8c2470fec372055641eb1713d5c183165464988de197c75fabf654542e4edcd876a5929ed6494b394be661b11b44a06b75322e6a93c824891bc6d2661c3d2a04880b760ab64f579758bcd137d2833c957b4c0982b649fd400a8d12c4cfb88974847141212d7fde22d0a704fab62b8995105f44da04512eed73f175fd9d5d10da57c497b4931072e5278efd8a26b0d0a3bd63cfd8c17c8408a8a78ba0cab24627383194347c63d1e1611e875866563732aa2271d7ab017fa0aa743a07cb05e15aefacdf6e44f42cd716c7edd09850805c068069df5c38d74320441fb4801eeb7948dee1184a3db7742ef322424853d297c1f26436e8bebf20b1dd98e44993ab8eb001ff54a6569a0848f5d4c4fdd08214035de11e10b2ebf8d98fd8756bac64c62b77a9e0c18838b070b14f662c66aa911a033f93b1c71d4de11d407ef224a46ae6c0d15e037ae1d5d22fdd7669099ac3071c505490c991d03b48e600040787e75a1381fd8df5f30b74898f78ea9f529f2d9f05ee9016fd0c999034bb30d2164f78d53eac10dce528f4026ee6bd4f26870364dba34b1e715692ee4dbff23c4f1ecfff8c41ea9a31a039282d6929275ef929d0556d586643b9803aa36c6689392c2d5bf04bc83c9b2671713c1dae184aca425409914662c7bc9cb5a3d4910fc4dfed50cb96c44edc2f7feb81afb851014cce785491a3ef48076e20d52738d9b478b809da716b360ddaf25c869cae92de49270fc59cd16eb5d3a35e25f62ee8760af6b3792433784e07f6e10d57613bcde06c3a73b87955338db2d9a7269e9300959efb06aabbc8b1a87942925be6f44322d3d99bd9945bc187949dfd9485c0c826e7780b23d6a62fd3cb426cbbd1871ddc4bf2a1738545559f01d8edadc7c777d944c03dec27eb5048f30b514fffe13d8b81973fc2644555f0efd6788b23d753be82796f81f2a2a5da13742610432ec1ba5ac982328be7da3c3d4bfced21a2abd36a6af172ed2689245095355987f02e498b623604ace72a0f17f77ec97acef2928eea08aca1b947ef4b8a4fca9571a38243ad399d03584784d70b9c5c520e88398e52acc10585d0a925f5894b7d701c5eab29e17572eae6b84f2c6441928fedbde6067e1a810e45cc9b913ece46af347c8b5092d56d0abb6e5c16a59d664cb506cf4d42cdf630d96270e52bef8a612ad2880321ff697af973860236ebff82830334d32e32203e540a7d7962eb6507d4db84c8961be6b29ef953a3c7c868364d4953f5d362fbbdf5c640413f0a14626881dc7453ffb345293156337a4374a44c245c52f5433d561b2820cd5cd194be9a5acae2de005b8472e11309742a27cb162bcdecb700388ee34ec5bcc4d77c7441c97270498199ea3322c48540663bae4f972eca1e56d182102e1186ee3c189145f6076a8d53bb131feadd894a3206d4907371cfff1427450880acf464c573a0f7a209d3c00527493f50e3c951ffc4b69c39ba9b75a9b20e0158398b3a0269dd4a3001ff97b47d58cae2823f75dfce1b8f11dd56f75714493a3b59ddb65dfe6799737f13eee6bd3e384793560c64c93ee9e2dc62849d256745ebc00caed57ecddbaa02fa700fa0d601f768a36f81c3eb12cb8f0dfcc99424ba95ea60fb29042626b973c7ae5cb83f3bb8aff767cdad14f8077ce32f0fb864fd9273f89f5147c7d72ffde83c999efeddbfc61e51d2925ce581c2d616a4a68b584e238fc555b145a7621e6f504c459e1de517a36a9caef45d9689a05c716cea23362e15d530477939c12e5e8c729c2782f0048a1202036c4fd87f66fc8ff660fd335ef3a99d50c89eeb4cf4028afbf17135cca9e186681f84520d0b56ad2bb07d8ff61922e9eff30027abe0901290dc1d294fb854b4c15c6fd92a0aac397dc538167cc20a0b41719dc2cf06e3fabf6bce0136e62a085c76a117d62be4e46c8de75e3d1c9179d4d59d851cbdd7f7780c2f9508344e31556c8bc1b08114f10df6a2ad989761b6310857ae2c11d359c44f9316ac8ffe6175b92cf5f6c695948d91a1bc9dcbd6e23ec7f7800aaed2888aa1d873a4aad49ee3cacb0c031c2a5cc7e3095b2938f9c6ea67386a5a58e1fd674584bbe1eb482d9c0e8efb57f1d25bfa4b646e3656bd8eff07762a0adda00fb6861b8979a86949e4939d862423a1c9d8b74fa3cd516ba6c0adb71abb4d7748047942103cd31dc16876e45cd803f44b09ef4046f291716e0ab9d8f6c2568ce0876ed33215368f6e982f8a2ee1ba376194a10a3eb02de46d4617527733a76e675c9da015afc6f400efe1f51f92be2b0b3fb7ec7b059bab9da94418aafb96210c3d9beecb279f0c6620711f481082678a05896469204246b80e9fac8db148458259d8e934dd0e773fd1c01a34f51378e792fe7aece452ddecd91f3cac09e5ad42d2c5d935029a30902118bac3e29f3bf7ffc09da8704370535cbf74de06731bdb32d9ea620e98bacda20d32c7684722862221db6f1ced145c43b2b802c2f64e9a8b25f40455ae145a93f70ee30d39ed5874a4289f8218f9a101bbc39b7e50bd30c8b66715b21f340e03a62f89e0c1f21dd36cb7759ff228df070fd902cc384049d927d457ea6d2e2052584052a71ec7f9daba950147ea76d6d7c1e0b88d7e3cd38917a10eb8c23ff7d995efc1de203754c849c0ff09495454c97ecd3203953916fcb0fdb914e72213bd2d9625b652435cbcab2bd4e45a88fc593098bb38b094f86622b2b41174f718047e78c6985d71b34781ef65f6e719b8b17f82d93bd91e3853610fa1c31e5b3a637a3702d7eeca19c0ba240651a4140575beadc781ca96a4042f6595ecce74d5bfd871255f2b7429d1d58782f9704efbc609ab6ee93b90f6c5b53877ef1b4e8a1570b8bec9589adc2c2ce291d03c9043229b871991dfc2680a5d17cd4a56a7ed7bdcc7d6b7a8bd8523c201904ebbe62e753c0079e2d2cf695358289950e82fb4dd960b20f4ae843a953d861aaea7ec2d27c8825b30472e7e8fe6441ea9b1345b6a655814dc2f48058ad8cb6e602478f09580a0ab1f55783bce0a5a0dc2271abccbbddba53607e033064d07e04a96552cdd8624687c3342dabb9fdd310b63b9111be35f8a6570223999705162e1f5e23d2f66e5ac7df6b4ce50f7979f2cfae7f99aa68f158766e45de03fdc054d7eac048e7c253298f8faf7a5bf754b956e0a44768506ce49e9549c3d688885d8237673755c66326da4adce02cb0a548160b020cbe03e9082621333f530922cdacd0827a9422cb294769b6d91f561e52c00dcc16bdd5f69a8cdd7b23897f59810baa9f4acf0aade49d383f05f1e2400290989882ba7f368c10558e18b3eb74576753473778598ce2733391f609941ebb8c2f2801426bb8f951daf9322a885c627a36246173df0d675995000bbf1ee7d8da4227ca6c50a917d11634ba8858fea0ffaf621cca4b0a7dd8651b95ada94e25d78b6a7752de8db77343d1d855091252b823a80d30c9bdcf89243ab514a8f1a3511fdbbd31f38c3cca55b8d1811e6a0d8815fb17867d892bac07de11edde8f0ec6f8259222491db84ec45a7a2d18459a62e5a63750f303f7eeee1cacee02c9a0acf3b8af1ee22fe9fef67f55fe221013b9b2961904eb97a69909a6694f4e2553b25f76b91d044f4a15e806c27b5fbc399400642700994e1343f71ebe19e3de256859069dd2e160a09cdfd65c5d6912d8078055f91c706ec9461fc1e96b3b6a650c4ff49e420446226b21f554c432b12185906251bab304d6f5785b9f04a75c02ccf80de12ef04b88f231e83d2cd822d3963d297a8a74eed643c7ac6a3c11ed0c22fbfd3b7d7c5a54661b0e6f6e0e5438a39a5de7ff7791922a5a2bd03d96f3ae66feda4f63b11780c3097de842ca8ff3eae12833c83ba481944e12997722fb8c7f33e2b7f441d1e9a9b03842e16ce3387318c5fef568d1e1ec7b7014780029fcd5f3f7646c499a5af91287b3b10530e9fed0c6ae1d79a90e554bdb8ecf7714e0c2394c4181f6440d15dfe7aa670fa2fc3d72a85d7c702eded9c56361b9d01912193848cc786c7eeca88dbaf546a240605dd0905c6335083aea79bf020d03b229e3098c13fd057894eb795f15f28e0816358eca88c00e2d8d8c22fb15aae385722e51a71f27b14d91b4709be51f5d2868ac6b43dcecdcd5e8c13136d9206cdbb36b2fbfe4fac100ff2cd1df5f55b069546069327595095fce88f81217038ccae068cc9ca053b870e36c248d565899f86de48a604e2f71187015c4153c0629a3693611ab958471527698c8089af175c2fb3ce150ac02ffbfa94fc546e5eb3091bbc4de9018dc82204424bd54c51d8a53e11f7e01272d2a18237f34c89c5ba3a88108da8df7a1aab573630d1c5dad39859cf5bd50d3bf0a22f115f3f0d589f61e68f56305caa79a297ca3343f907aff6a7bf8bf6f99c07c646cdac539a8f70f42ed541580af3e921f07306acebe251e176bdc792290ff94ac129d92e3ae6318e1bb76ab48e78d0f59437592e47674661c19739379a7b975c49188d22eb5c8fd8391c1b30915be4c7c72c8978e94433344e233c029dc55688b461fedbb4b9bc01676a45408757adb2bcbf07d4cd64ab5ae4f71ca1e5653588f665cc8c391feb49cc466f16c8e3f7af90ba1fe02411529fd3aa7608c35097348963d443245acde82e4f6391dcd295d5425c55e34b4f44068355521c5908f6e154a9f508e915b1139b9e0f9cd65d945aadc2dfc1c0a67eb969363310e5533462b4ac175a6937fa8c605d0d874451490f4cca14d35d1426c2f9280bb61fb33787b15f81348b790a3fb406fef24dce25ad75e7e6278ebad27f940bd1bc49e28e7a174520bf89e363afedaa428baa48744a2c2f1853d4bbe05151f2e1e09c458bbee3309d8f49e478e793651bb5ff11437626d1e42c87557095de062520f6c4bc78667eb889a9c98f55c28ebbfd426e2cefd76c07e03aed9a3d64b046eddc884a768b7eeeb92f7b9cf27dda019ea4507a1e943d7f7ade2ee271d4930aace586b1562ba3dd8d822aef0dc6969674487f60a7374681da488f61533e34e29afb2d7892cdc1ed7763841be21d102f2c219480051826e2ca7e62b537f1d444048fcd6f2b5c0a1433923340a55cda50ec792c786bcc312ca10980941a302e621857744d43a4391e8332101d428f37011d33e7e53bda0d34cd96642e4851bbe71165106fb7e569246fed48e56a9021a4b136548de5b05826f68a5d7bcd6f497f4fc79afa935b8b5e25bc641dc6e0a8234e9b15e8138926749686e9eb20a71f6c154206d78a33c3257ebc08599f6b2f6e2024dff6bceb7d1ba46c0bbb06038a10e50d3ba8fe09a09a32d66c6bb5f4cf74c566ad8ddebdd4ad262075ed6e89a701ac0a3bbcc32711606ad76df71b8defc39bf8da5e8872a52cc6d1b55f3d20f2993439aef8250926123693f490c8bd838569e298d03541c5a6aaec0edf00e939b20481571d766ad4a32bda6"}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f0000001480)={0x0, 0x0}) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, r7, 0x7, r3, &(0x7f0000001500)={r6, r6, 0x79e}) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000001540)={0x2, 0xc07e}) bind$inet(r6, &(0x7f0000001580)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x37}}, 0x10) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000015c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x200, '\x00', 0x0, r6, 0x0, 0x5, 0x5}, 0x50) ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f0000001640)={'wg2\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001680)={0x2, 0x4, 0x8, 0x1, 0x80, r8, 0x0, '\x00', r9, r6, 0x5, 0x0, 0x1}, 0x50) connect$inet(r6, &(0x7f0000001700)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) syz_open_dev$media(&(0x7f0000001740), 0x340000, 0x80) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r6, 0x7a5, &(0x7f0000001780)={{@local, 0x40}, 0x1, 0x1, 0x13b7}) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f00000017c0)={0x200, r8, 0x80000}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r10, 0xc05c5340, &(0x7f0000001800)={0x800, 0x8001, 0x3, {0x7, 0x7f}, 0x0, 0xffff0001}) ioctl$UI_SET_EVBIT(r6, 0x40045564, 0x17) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r10, 0x84, 0xa, &(0x7f0000001880)={0x7, 0xf57, 0x8008, 0x1, 0x7, 0x3, 0x55, 0xfffffffc, r5}, 0x20) write$cgroup_devices(r10, &(0x7f00000018c0)={'b', ' *:* ', 'rw\x00'}, 0x9) 1.804104466s ago: executing program 4 (id=7481): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r0, 0x3) r1 = socket$inet(0xa, 0x801, 0x84) listen(r1, 0xfffffffd) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r2, &(0x7f0000000f40)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000500)='p', 0x1}], 0x1}}], 0x1, 0x20000004) r3 = socket$inet(0xa, 0x801, 0x84) listen(r3, 0x8) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r4, 0xfff) r5 = socket$netlink(0x10, 0x3, 0x4) r6 = socket$inet(0xa, 0x801, 0x84) listen(r2, 0x7) listen(r6, 0x8) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r5) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000140)="480003001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) 1.774444337s ago: executing program 0 (id=7482): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000640)=ANY=[@ANYBLOB="1201000000000040341d0a00dc2f000000010902240001000000000904000001030000e469e11e00100122030009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f00000000c0), r1) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x24, 0x24, 0x800, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xe, 0xb}, {0x3, 0xffff}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYRES32], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000691000010000000000000000000000000a14000000060a0904000000000000000002000000140000001100010000cc8e875a0000000000000a"], 0x3c}}, 0x4) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000300)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x40800) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bridge0\x00'}) r4 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000022546940fa0ae803d0990102030109023600010000000009047500038cbb2a0009050a001000010000090588"], 0x0) syz_usb_control_io$uac1(r4, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="000c0100000006"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x60442, 0x0) r6 = dup(r5) ioctl$PTP_ENABLE_PPS(r6, 0x40043d04, 0x0) r7 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r7, 0x7a7, &(0x7f0000000100)=0x80000) add_key(&(0x7f0000000000)='cifs.idmap\x00', &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r8 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r9 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r8, 0xfffffffffffffffe, r9, 0x0) 1.755946955s ago: executing program 6 (id=7483): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000180)=ANY=[], 0x118) r1 = msgget$private(0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x74}, {0x6}]}) msgctl$IPC_SET(r1, 0x1, &(0x7f0000258f88)) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000006c0)={0x55, 0x6fc2, 0x0, {0x6000, 0x1}, {0x50, 0x2}, @period={0x5c, 0x1, 0x0, 0x7f9e, 0x800, {0xfffe, 0x8001, 0x2, 0x200}, 0x0, 0x0}}) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x12d8) msgsnd(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="56cd344197f4772826cfce976efa19c637505d664936ff4fd827a0f11342b3962f0f1cf26ebfc787c8c67f4186df75b544f2b6cc8f4482f931fbc7012788f2e861a3af40b2af08b7876629db781895841dad3349c55a023e91e80d18883ffc18a874e8cccb7d555f29d56f2ff633ef459babab78cdf1e982c54da5a8e82f90b464ce26af01ae9c98f4718f15f2ff72e623f35c4807b0127b81cebf5235ae18776d684e17baeac3973cabbed343b6"], 0x0, 0xe800) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_GET_XSAVE(r0, 0x9000aea4, &(0x7f0000001680)) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000040)=0x200, 0x4) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x52, 0x0, &(0x7f0000000200)="2ca6201ecdbb4beb400730c0cd4e79e15dfca1dcf9c24aa627caf6e61f1040d351e34e948feacd423d6351314809b215b0415d5ead27e0c35b69f4c66893772f3e5e95557f7e3bfebbe1196e2a511cdea982"}) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) pwritev(r6, &(0x7f0000000600)=[{&(0x7f0000000240)="02000000", 0x1b}, {&(0x7f0000000280)="f697079a161cfb7702311e629acda76933ddd0c24174eb4d4d28f9", 0x4}, {&(0x7f0000000340)="527302587e0a4e47ad", 0x33}], 0x3, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="0403"], 0xe) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000044c0), 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) inotify_add_watch(r0, &(0x7f0000000100)='./file0/file0\x00', 0x8) 1.582882077s ago: executing program 4 (id=7484): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffe89, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001d00070f000200000000000007000000", @ANYRES32=r1], 0x24}, 0x1, 0x0, 0x0, 0x4008055}, 0x0) (fail_nth: 5) 1.564986681s ago: executing program 4 (id=7485): bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001040)=ANY=[@ANYBLOB="1201000040154220a9055015bbe4010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, &(0x7f00000003c0)={0x24, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB="000b000000001055b04adc8ba67df1e5b7037ee1fd56c39f14e3a494dbcc9ccf024b811d6166669e63d8c86d2e5444014874500907b58ad0342c86e57607e0b29280aaeed86f0d3fbace803b7f8fea9d946e6e8999445e9f1865"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000580)={0x34, &(0x7f0000000180)={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0xffffffffffffff1e, &(0x7f0000000000)={0x0, 0x21, 0x61, {0x61, 0x23, "48e29ff07ee9cf947bc74205d1baf18ac6e0631b9115473583642587f6a208b0f8b44a89b41b33ba067bf098f4b37ed49185d054ff06a139dfc23ef214b5d08cdcee80d5efe0a8847364f7b10f514d3acabb9711f279b40f89c0c91f261b2d"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x240a}}, &(0x7f00000002c0)={0x0, 0x22, 0x16, {[@global=@item_4={0x3, 0x1, 0x6, "a9e68f71"}, @global=@item_4={0x3, 0x1, 0xe, "4e355a1f"}, @main=@item_012={0x1, 0x0, 0xc, "af"}, @local=@item_4={0x3, 0x2, 0x0, "ac8550c0"}, @main=@item_012={0x2, 0x0, 0xc, "d3bf"}, @global=@item_012={0x1, 0x1, 0x6, "b6"}]}}, &(0x7f0000000140)={0x0, 0x21, 0x9, {0x9, 0x21, 0xb2b7, 0x6, 0x1, {0x22, 0x3e9}}}}, &(0x7f0000000800)={0x18, &(0x7f0000000200)={0x40, 0x0, 0x14, "95b21d2d5983b74ce8228ed0e5fd246ced06ff06"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x4}, &(0x7f00000006c0)={0x20, 0x1, 0xd2, "e6c8cd67a3a470bb6bd059a13df3d5940013d7b0e1e2d0d16e17d4a8a44687a0b116b3074c3de8965d290eac2ff957bd760b2a8bd18b646526fa8db35d3476d7f0390b8f2d19456b4746ee3449fc0e0c2a258ceaa8c574d084e9fbdb1d4ca61665b40692269b224de0c21ab49f1059bda947a87f7d69e50d967dae28df2ec0e413bf141c8f7e129d4fcd381f12585eb5ba2fefde5cb9019a38324b75ad2dbd7315aa7403fb508179f1b9f6c29390b6b4a4ddc28037fc8f1042e9d125e927b463729e23d074b81b2dab7d438bebf38879f0bd"}, &(0x7f00000007c0)={0x20, 0x3, 0x1, 0x41}}) 771.20356ms ago: executing program 6 (id=7486): r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000480)={'broute\x00', 0x0, 0x4, 0x0, [0x2, 0xfffffffffffffffc, 0x9, 0x8, 0x9, 0x4], 0x0, 0x0, 0x0}, &(0x7f0000000c80)=0xa8) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870f500090582020002"], 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x0, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x129a02, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, &(0x7f0000000200)={0x1d, r5}, 0x10) sendmsg$can_bcm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[], 0x20000600}}, 0x0) sendfile(r3, r2, &(0x7f0000000080)=0xb, 0x8) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x40041, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="40000000210a010800000000000000000a0000010900020073797a31000000000900010073797a3100000000140003"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000080)={'syztnl0\x00', 0x0, 0x80, 0x7810, 0xf3, 0x8, {{0x1d, 0x4, 0x0, 0x8, 0x74, 0x68, 0x0, 0x31, 0x2f, 0x0, @broadcast, @multicast2, {[@timestamp_addr={0x44, 0x14, 0x71, 0x1, 0xc, [{@rand_addr=0x64010101, 0x50000}, {@dev={0xac, 0x14, 0x14, 0x28}}]}, @rr={0x7, 0x1b, 0x16, [@broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @broadcast, @rand_addr=0x64010101, @multicast1]}, @lsrr={0x83, 0x13, 0xe0, [@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x2b}, @remote]}, @lsrr={0x83, 0x1b, 0xc, [@multicast2, @dev={0xac, 0x14, 0x14, 0x27}, @private=0xa010101, @private=0xa010101, @rand_addr=0x64010101, @loopback]}]}}}}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x1, &(0x7f0000000040)=@raw=[@exit], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r8, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94) r9 = fsopen(&(0x7f0000000500)='cifs\x00', 0x1) fsconfig$FSCONFIG_SET_FD(r9, 0x5, &(0x7f00000001c0)='acl\x00JN\xa0\xc3\xcd,\xebl>J\"f\xe7\xe0A\x04%\xb4\xd0\x7fb)\x9f\xd3\xeb\xfe\x8fi\xee\x02\x03\a\xb0p\xe9\xfe_\a0\xee\x82{\xa5\xbc\xb6\x8d\xe8\xe3K{H\xbc\xa0y+\xabL,\x8b^|#x\x85\xacc\xa5\xf3\xa7\x05Y~\xc3\xbag\x1d\x95\xcd\xaf\xd2\xd6\xc7v3\xe1r\xdbL\xcdPu\x91\xce\xa5\x86@vG\xb1t\x0f\xf2gg\xcb\xbc\xe9\x90\x00\xd5\xb2V0yZD/\xa1\x7f\xee{\xd3\xecN\xb1\xee\xb1\xb5\x1bu0=:\x84\xd5N2\xc5\x91\x8d\x12\xf7\xdd\xea\xad\xf8<$b\x8b\x89\x18\xe6\xaa\xf3\xa9\x01_\x9b\x89\x05\xc7\xb9\xac\xf5\xb8\x9d2\x8bt\x16\xe8\x9e\x02*\x8a\x83:\a\xef\xee\xeb\xf9\x96\xe9\b\v7`SN\xd1}s\xa7\x8c\x9bB\x13P\x11\x1fl\xc87\x96\xa2\x8f9\xfe\xb0Y~{=SU\xc8D\xe8(\x1c\xffQ\xa9\xdfY06\x19\xa7\x91&\x03Q\x95\xda\xde\x17\xd4\x954\xf8\xa6\xfad:c\xf4\xaa\x99\xcb\xd2GtO', 0x0, r9) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="6b0ee0b3d41b1b"]) 407.691507ms ago: executing program 5 (id=7487): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x26, &(0x7f0000000080)=0x4000000, 0x4) listen(r2, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000140)) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$pokeuser(0x6, r4, 0x118, 0x137db) ptrace$pokeuser(0x6, r4, 0x118, 0x7) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000)=r1, 0x4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x2a, 0x107, 0xfffffffc, 0x0, {0x5, 0x7c}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x11}]}, 0x1c}, 0x1, 0x0, 0x0, 0x488c4}, 0xc000) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x300}, @NFTA_NG_DREG={0x8}, @NFTA_NG_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0xffffffd9}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x0) write$tun(r5, &(0x7f0000000440)=ANY=[@ANYBLOB="000086dd0001110004000000a60c6eec00be00442fd3fe8000000000000000000000000000aaff020000000000000000000000000001042022eb"], 0xfdef) 403.313386ms ago: executing program 0 (id=7488): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080010000000e8fe55a1180015000600142603600e120500211dff000401a8001600", 0x34}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x24}}, 0x3, 0x2, 0xffff}}, 0x80, 0x0}, 0x4000000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8001c00180081064e81f782db44b9b545c7910006007c09e8fe55a10a0017", 0x1f}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f7d28344b904020000", 0x2}], 0x1}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x33fe0) (fail_nth: 5) 0s ago: executing program 0 (id=7489): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x2, 0xd, 0x0, 0x0, 0x11, 0x0, 0x70bd2d, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x2, 0x0, 0x0, 0xfffffffe, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x20}, @in=@private=0xa010100}}, @sadb_address={0x3, 0x5, 0xff, 0x0, 0x0, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x36}}}, @sadb_address={0x3, 0x6, 0xff, 0x0, 0x0, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0xff, 0x0}}}, @sadb_x_sec_ctx={0x1}]}, 0x88}}, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES16, @ANYRES16=0x0, @ANYBLOB='\x00'/28], 0x48) mmap(&(0x7f00000a9000/0x3000)=nil, 0x3000, 0x300000b, 0x13, r1, 0x53d27000) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$IP6T_SO_GET_REVISION_TARGET(r2, 0x29, 0x45, &(0x7f0000000080)={'ah\x00'}, &(0x7f0000000140)=0x1e) r3 = socket(0x10, 0x3, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000001ac0)={0xffffffffffffffff, 0x2000, {0x0, 0x0, 0x0, 0x3, 0x14a1ff, 0x0, 0x0, 0x1e, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0x0, 0x400]}}) r6 = dup(r5) write$UHID_INPUT(r6, &(0x7f0000001c00)={0x8, {"b0476b76ba5d044f65271519727e4ff1ff0d12c0e6bdf3ea1f52e24f60ca698457b32832b83d7e96694c1feb5809bd67002f71e0b97c0d5270c04ffa64f63b2e18ee4b7b572fe2f4d03cad38bcd106ff12f53b443ac6fc81da518f54b9004a44859529c07a2b1b8feddc0180a0f37b13babba1dd0813b7ea56dac4b7ffe9a2ef54221439ecc55223ef2d40f4ba8108c10387ddffbaed25d41e7692bf26ddfa747a666caff49843e38c86cac7323f784a17df6beaa49c3f4a98fb4013f4e573e2ef77b0965d4bfbdf7d5eada69406ca93f422495e00addfca1518085a40f10284ff59388ecf476a12ef1a540163922098d600519ae8cf3ef544344e9d968f341af618503b455f3976b76975270e94d714302382c63de5b7c1fad1fa373b369916cb3b4d583a9ebbaeb262884d25a0e1d9fb141de60df7e64cb38b6f7167991f8fba06bffe2d49133bbb462cd8a9493177eee5f03875b15c7a92c3cd6a3fdfc64f236e14fa05a0e8d3c45f13eecd22e13528c74186dc50e0e2af44177e26bded1161e5533375508dadb83db5126cc810f4e30d4e24ec12c3b99e5220aacf42c58f2960bd43c337dbd318aeeb5c9a6cd5ffd3bf1497bb48ab7bcb32c9c33c9f5b9bc4645b96f23f9e0d826b780030444ffb925f55df587ef5ca5ea74ccd66afc7981da496d6f037efbb0b08f3f5078c60ffb4db18d1b59996bd9b1513442785bf4ece8587b39d8176dc9c735d5ea25133b2053bba227b81faab7220326f8814a9df4eba4ecc6acdd82f70b653b56a18cc9dfa4deb0a112c797ab89a51a103c3a9085d828523370c4d79d9484f4dc910735a2c9b5b85197cd9c073df7a54b40df8e1bf595bab957900c2a1a7dc40e88ed0c55c362ffbb7f88a0725a6ae73b936a639e951faf9c45ae74a2ece2f6f88e425ee41d2c60cb083a2fd6d07381908a7f629e32f89a553cf0794f54b8bdc7bd541d88464a4f80ac0b8b625a803a55de4b05a95fc7f8fc3d6d79858ccb269b7b8b21657654164a9aa29f4e8462377e9d234a41ea69841a4aaa1e5f89f9b074f6f71cb1ffaa450c3160b0e319ec81ad30101db66218b0c69f97c234465dc45849fcfd62d396f2b50ddcc0ed7dd8651431534232ab6d1186d7760770a1fc6c77553a79d0297194f794997ee47781094a76d9dccf632dcbb527b3e68950d9bb534245c7f08ae1d6ef2750292ae28e5e6dcfe2a69737dd7a1e453f3902ae90789e98c212905422099904d3bfb949bde187682a59c01aa8e6a9972a63d6aaef4d4139b10a24e063707f1aba79bd59e3f9709a873dff401d1f356c4be5e449ae0e2633a1fe50ed367fe56b0499957c3b6cabb42256547995ea998f3937d153897d1c83f1ad922d6835bdfa3b986dc6f4bd927a4ca13fbaa99b7b43758e2329d588f40fac718b16cca855468643f3818496b4915fe9a2bdd3e68889fea24bc1dfa6287a801d49a7bb84654147448550d2919e4df3a943a88cf616befea4e7a4fddb7969311c6837f9529966241be1e57ed2d773debc542986d09866905a3f63b6e1820086d52a70f039154e839da7ea852c33bf3722a048f61bbf068519e050b8788370fb130a42e9f5322dfff65b15d588f9e926b70e4530e8b66697cabb1e8514831431fa0eaecb49f9613ed5fd7bc50f897bda36d24d4296e143e2480e325ec09a77c03a07b4f86eb703085313ebeee94ef5b1cde3f6a7efd785772eb4034039f598c07819b769416a223fab824c4ac50086e78042a1ccf47b6c7ede8540cded4bd4c920ce6c2b7493a5634c5e96bb761373623ab473b121d555bfd5a8bc3f5c5418bed83ffd0d6492840550fccc0c35746370396d0190b7b1d2cadcc150877e0d197f692f97cec790c95e3d3959dc7c68aca37306c1bc13ad33848395dba5e3c9ce8090bc0e7e8312091773641be56411921e3d473321c6d8bd10b7d3f5aedd6620bcaa06474bbb298bc77297b8b5dcb9e6b33dbe676460cca825609857724cee245306d07fda287d5fe57c424c27cf9b6cf0f16d2c6a8071bd57c826d7371841cf43dab1b42421ce416d0d3a9c80bc807d2e6761e53f06b3e63c0af1b4548d820118421205f040f4ab35307871e4c7a21ff28082c29e02e89486064661898c0eb1811c70a6124c1f25d62c38794a3e87c312c870db7b60d0df8b57860c94d1a9c561b327fae3a68ce9ff4551e418eb00766f0341c5e796e3cbbbe6b4864928b966110256d5475eb1fd7b2893b60e19e859baaf23c9233a1b064771671ee2d07c151e2e99c37a116a338788052a726a8519b8335e9ff4f71d00ab634543c20ddea1bf57d4f2b797182ff19618b6974d2b69d9f052934d527a1830bf2785842f35eaf32b65b7c9fdd6f0c41756072a59c0cce0b7305740729f1daa14e0092da9d022321b726d658fcef55affa2bbf36ad788f1f423b7dfd328435b4d5df315143d8b8028ba4bea6134a3dc9720c73d5e66b8b8168752eea6b78c75f04efd9677dbe419f13f5e1c9764276a83821b710307d8f85359b34d038ff17de45e8739d4b647fd1a8d794a3273d922af3374f5d3c75b8345b9dfdabb2c0418a358921e0e73d0fe88caab1741b913673e22ff4b59afa0f653a423d9b2bb20cbf07951a349eea18a891b4f4dc6df8e42a6181284f643de5fd2924ae54f672a1920343476c67333e1e8205bf4877b1251a83f417936714edb1c6975ba7969d2fcc2e69024a4669ac2f998116ade1bd84568b8f3f1fccbe95df9ed21db77315b7469f30bfae418415d9cb5aeea627ba6811e30d56d4f4bfe5f794ea4243e3cdfad3ef55199699b8433083b6f72f95effc5f2f613cfcefaf0b94e801ebcb7095a1474ee93142b82c9bf9886617b6bf69d08c83c76cd21d4cce5872d99de8e54bbff915ab923b2d24bb3aa178dd50b44fd0eb880ef33ca51d4bf5f0fbc8ffe18afe4245397f277e4efad955baa10cf56613481253d69c02e7661714b68be0fd64f29bdafbc8b4a0b30bd6709c67fe8e8915d0479b3902b1d0169fb5486b02e966ad5d8a2bcf42ecba59177cd85e17239667f6b045d1f873ce24733ae17e2d8432709062e786a32ac925121f1b0d46c66d4fb9088f4aa0cfe2149f6c2cb5b75d45349bc88fbd47e01ea07e7cd573335aab8d389846566800dd084bc3caa95f7632719c651f2d33be0fb56347c063b3c6e3e75c5e58caeb4c37574859b78c1ed018fbeed788a4305a9ee1c1ef65a0c83a7cd717a8c08ecd4e86370ffffd6d40a89a0b1e8c15a10ad5406e867e49319ad83bfbb925d5e240b4bd44fd751e7510d5ea03a6cab95f37155d1fd69aaea1db4a1f53714eb90e669209cf634f84a50c85bdc51838ebbb545b4387790df67f0122740c2abc910cf83230394172a56c9ffda6675bb8bb39846730a1bf764aeb92407c90a194da880cb8a4efb5b57a8311d864209c7fd226b93582b6b11eec559abfbba653c0569c219d3a2e60555cb739f9d32d564f23c4e98be78aa553610822af426f961df0df2185c61ccaa22b2a6aa6fb3e917bdfb2be9c3ffb8a50821321119c4cf4917db39548abc17bfba267fa50f6af15c560a21055f967f1ca6f656ddb556f9c7e17a771eeef7e80940d1c14ddf2c27647686fd0526460036aeea395fb10abef2be2ea96c9bb380370c08d1568d30eea0f3e6b7cf8f7edc7b36d4d0affd249330707b54ee620f208d885791171eb67a25a80fcc6922e0258c9673b6576564949dfa5bed9a0299bf952aade654de16e22d54fcd391ded6adab94ff621efcd91ef69acf8dfa1b22692ba3e49cd1d3fbed6db1402065ab37e457056877977ebac33ef566f28a19b9acb67a9cc53feb156814e880b3dd5a9119ffdbc5a45c20ea375f2882575b9a28740eebf63f2895d9ffac1ec33cbdcdede98a201424d000df1efd64dd7268cc1b2366ccfb09754822dafdb1821de5e6ebee09608e82e679fafb7a5100172f26998d31d7f27c2b310f0372c3b5e888f8e6efb56074177bf6a2a5bbd9ed070ad5aaf23ce144d1ac86cad110e5916a8a57e1e7fc3d37353f84f2f6d43d92ab8b35040467f3f8b1d23fac021bbac3710edc8e2e26d794db38e48020f63e94d4b4dca3e015537a8e3008274d55f81af931a0faf1a438444b6a0489b93f7b88f81f761eae0f82e60cb0cf2745ca8c9e30d3cc189c1405b1994ed71b00d90ea7a94102916cdc915620c363d04e51eabaaca6c2814a7c1e7aaeec80bdc13135b813e6d0eea83446a5c57ec29695c302c0d8da65b61fe8ada51a36e1aff34d449f9eb70cb94931226121ab121a971c2fc070ca84272d122c1696f52fbd5ed06783abe188dcf133c4d41e10295f6ffda69fa8c5a7c0fec3425a2d60523a60d280b5ce34eac5911268172e772fefba63a6f5c6dafa9e500a5e1355fb614613f8fc1ef5e5466fa19212bcdc349a865f4cee6ea80b11a410bb6e4ad677393973e38621d25ff6c4876ef8a8d2ba651be4a78d2ba9fafadcea8eff9cca3f4ab71a0b84917794e521220dad099ac8aaf32abd162348879e4299e4d46395f9d55267b635e18ca2e2fc96146b96c8a8055130b8d8cb10cc31382df34057bd8637f86e48adc854af408226752a04df8d0362db263e0959f2bd7e8a4d33a8c4b257e19d308280baf40cced1b3cd3a86ee22df0da49d750539eee1104e99a9f8a065e5499c73125a8a8430eda7aee156821a97c237611b50f682a2cccd0969304f0a50ae98800dfb32ee1bcfeab98182c34a51e67fa5bd738c22c44fc1269ce73f464edd2f31296e92e62df51cf55798ae2e3c33c57b09f4ecd13469122095a3563f95f0a04cf58dcea4aed5e8bdda7617863cbc37a97ebadb46d679f7e30014d96d0ac7ce9484368fa5fd19cbc3d139410a2bd7ffacef1bdf76dd1d5f34d2392fcb91c7585fc1ae7d8ba2aa8ded9645d5a5e76e2279b6e0692101137da946dfbd3836476f5dad7fed70115d716dce87b5ad755e5653a709f5aa42265ec9657ed406cc9256af3628c0116b8e1d23306983e9adbc19dec354870c98e2e76566895df933a80c4c36b617db4bbda1a4ca7d6c80a43734471fc92d0bdeacfc125dddd73febd8f7ef84f221d52ae71372cee802d59013a15958e850f8fdf46d8fd3b874633daf3b1f346470456c05722258480959dd6afcffa1f3f2ca033011339c5cb85b7d1c9b5916fb8dc9c2783df64eb5cca5af83a74fe5bb259f93722842eb4ac851e71f3cfd67a39590e7f8e20f018744b9277e6eb46b5f211df5f767ef29dc9a972e14c40ea2d4624f187f301c1116d3a61adeb5c6f7ccc021ac5e18d8b40d7f1f19daf4445c06e72db8701c267c0144c92cddd49af7a87aca5aa05d0e380dd27cc780d2f7db3bef26cc4fd358543e19d73179b879f7bdc702ab405270c93a3ed64153e20b5b663773a2ad4e8e3e1e8eaf39ec80d75d02f74ff94f0e095240a564eeece4fc9bcf19bf2243c700e1dae14a1b0217013977bfa05f681abc37714fe462d0a632044ce52fdaa1c1a806b1eb4370e23ca0247e536165aa9f1c2af8adfea369ee1f4a2c7823a7baef028a1e77501db48db6aa0d7e30969f7197368db02d443803b53b2899315f7e2ba9c5ae952a3866b4ea60f3d669e0a91f7ef640cd938646bf8822fe455f0302fccf87c7fad6daf38fde038fa596b83a9fd5bf675669a6cb2bab44c6617f07950bf34edb93bbcb4174630f275dbda7a0631c4b456e5f80eb6258c1874e77d426743e478917fe44b73dc203baa2cc442b84b5818409abae99d97a28754969bd393df", 0x1000}}, 0xfffffe38) r7 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r7, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) sendmsg$nl_route_sched(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000001a40)=@newqdisc={0x34, 0x24, 0xd0f, 0x70bd2d, 0x3, {0x60, 0x0, 0x0, 0x0, {0x0, 0x2}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_drr={0x8}, @TCA_RATE={0x6, 0x5, {0x6, 0x62}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40001d4}, 0x8840) kernel console output (not intermixed with test programs): ech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 2067.358894][T25844] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2067.385089][T25844] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2067.399118][T25844] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2067.409551][T25844] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2067.628602][T25844] usb 1-1: usb_control_msg returned -32 [ 2067.635422][T25844] usbtmc 1-1:16.0: can't read capabilities [ 2067.705813][ C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 2067.706407][T25860] usb 5-1: USB disconnect, device number 57 [ 2067.726850][T25860] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 2067.744114][T25860] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 2067.768673][T25860] quatech2 5-1:0.51: device disconnected [ 2068.260419][T19061] usb 6-1: Firmware version (0.0) predates our first public release. [ 2068.272213][T19061] usb 6-1: Please update to version 0.2 or newer [ 2068.463790][T30603] loop8: detected capacity change from 0 to 8 [ 2068.480479][T30603] Dev loop8: unable to read RDB block 8 [ 2068.486653][T30603] loop8: unable to read partition table [ 2068.492547][T30603] loop8: partition table beyond EOD, truncated [ 2068.499305][T30603] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 2068.583777][T25860] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 2068.597324][T19061] usb 6-1: USB disconnect, device number 112 [ 2068.666881][T30618] FAULT_INJECTION: forcing a failure. [ 2068.666881][T30618] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2068.704372][T30618] CPU: 0 UID: 0 PID: 30618 Comm: syz.6.7259 Tainted: G L syzkaller #0 PREEMPT(full) [ 2068.704407][T30618] Tainted: [L]=SOFTLOCKUP [ 2068.704415][T30618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2068.704427][T30618] Call Trace: [ 2068.704436][T30618] [ 2068.704444][T30618] dump_stack_lvl+0xe8/0x150 [ 2068.704480][T30618] should_fail_ex+0x412/0x560 [ 2068.704514][T30618] _copy_to_iter+0x404/0x17d0 [ 2068.704536][T30618] ? do_raw_spin_lock+0x12b/0x2f0 [ 2068.704571][T30618] ? __pfx__copy_to_iter+0x10/0x10 [ 2068.704589][T30618] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 2068.704613][T30618] ? lockdep_hardirqs_on+0x7a/0x110 [ 2068.704637][T30618] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 2068.704658][T30618] ? __skb_try_recv_datagram+0x3d4/0x4d0 [ 2068.704687][T30618] __skb_datagram_iter+0xf8/0x980 [ 2068.704710][T30618] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 2068.704741][T30618] skb_copy_datagram_iter+0xb5/0x240 [ 2068.704767][T30618] netlink_recvmsg+0x2c3/0xa50 [ 2068.704787][T30618] ? rcu_is_watching+0x15/0xb0 [ 2068.704812][T30618] ? __pfx_netlink_recvmsg+0x10/0x10 [ 2068.704837][T30618] ? aa_sock_msg_perm+0xf1/0x1b0 [ 2068.704858][T30618] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 2068.704879][T30618] ? security_socket_recvmsg+0x7e/0x2c0 [ 2068.704902][T30618] ? __pfx_netlink_recvmsg+0x10/0x10 [ 2068.704946][T30618] sock_recvmsg+0x172/0x1b0 [ 2068.704975][T30618] ____sys_recvmsg+0x1e6/0x4a0 [ 2068.705005][T30618] ? __pfx_____sys_recvmsg+0x10/0x10 [ 2068.705023][T30618] ? get_compat_msghdr+0x34b/0x4c0 [ 2068.705056][T30618] ? __lock_acquire+0x6b5/0x2cf0 [ 2068.705091][T30618] ___sys_recvmsg+0x215/0x590 [ 2068.705111][T30618] ? ktime_get_ts64+0xa9/0x410 [ 2068.705147][T30618] ? __pfx____sys_recvmsg+0x10/0x10 [ 2068.705172][T30618] ? __fget_files+0x2a/0x420 [ 2068.705215][T30618] ? __fget_files+0x3a0/0x420 [ 2068.705244][T30618] do_recvmmsg+0x3a5/0x800 [ 2068.705274][T30618] ? __pfx_do_recvmmsg+0x10/0x10 [ 2068.705308][T30618] ? _copy_from_user+0x94/0xb0 [ 2068.705336][T30618] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2068.705369][T30618] __sys_recvmmsg+0x12f/0x290 [ 2068.705392][T30618] ? __pfx___sys_recvmmsg+0x10/0x10 [ 2068.705415][T30618] ? ksys_write+0x242/0x270 [ 2068.705444][T30618] __ia32_compat_sys_recvmmsg_time32+0xbf/0xe0 [ 2068.705471][T30618] __do_fast_syscall_32+0x229/0x6e0 [ 2068.705496][T30618] ? do_fast_syscall_32+0x33/0x70 [ 2068.705519][T30618] ? lockdep_hardirqs_on+0x7a/0x110 [ 2068.705541][T30618] ? asm_int80_emulation+0x1a/0x20 [ 2068.705559][T30618] ? do_int80_emulation+0x286/0x530 [ 2068.705582][T30618] ? trace_irq_disable+0x3b/0x140 [ 2068.705609][T30618] do_fast_syscall_32+0x33/0x70 [ 2068.705634][T30618] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2068.705656][T30618] RIP: 0023:0xf70bf01c [ 2068.705675][T30618] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 2068.705691][T30618] RSP: 002b:00000000f54ad50c EFLAGS: 00000206 ORIG_RAX: 0000000000000151 [ 2068.705713][T30618] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800037c0 [ 2068.705727][T30618] RDX: 00000000000003b4 RSI: 0000000002040000 RDI: 0000000080003700 [ 2068.705739][T30618] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2068.705750][T30618] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2068.705762][T30618] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2068.705790][T30618] [ 2068.753835][T25860] usb 5-1: Using ep0 maxpacket: 8 [ 2068.837977][T30620] FAULT_INJECTION: forcing a failure. [ 2068.837977][T30620] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2068.882586][T25860] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 2068.929315][T30620] CPU: 0 UID: 0 PID: 30620 Comm: syz.6.7260 Tainted: G L syzkaller #0 PREEMPT(full) [ 2068.929349][T30620] Tainted: [L]=SOFTLOCKUP [ 2068.929357][T30620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2068.929368][T30620] Call Trace: [ 2068.929384][T30620] [ 2068.929394][T30620] dump_stack_lvl+0xe8/0x150 [ 2068.929429][T30620] should_fail_ex+0x412/0x560 [ 2068.929463][T30620] _copy_to_user+0x31/0xb0 [ 2068.929487][T30620] drm_copy_field+0xd5/0x170 [ 2068.929516][T30620] drm_version+0x18f/0x2e0 [ 2068.929544][T30620] drm_ioctl_kernel+0x2df/0x3b0 [ 2068.929572][T30620] ? __pfx_drm_version+0x10/0x10 [ 2068.929596][T30620] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 2068.929631][T30620] compat_drm_version+0x1ce/0x2d0 [ 2068.929656][T30620] ? __pfx_compat_drm_version+0x10/0x10 [ 2068.929674][T30620] ? __drm_dev_dbg+0xf1/0x200 [ 2068.929709][T30620] ? __fget_files+0x2a/0x420 [ 2068.929735][T30620] drm_compat_ioctl+0x272/0x360 [ 2068.929756][T30620] ? __pfx_compat_drm_version+0x10/0x10 [ 2068.929777][T30620] __ia32_compat_sys_ioctl+0x5ea/0x950 [ 2068.929806][T30620] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 2068.929835][T30620] ? __fget_files+0x3a0/0x420 [ 2068.929860][T30620] ? fput+0xa0/0xd0 [ 2068.929879][T30620] ? ksys_write+0x242/0x270 [ 2068.929913][T30620] __do_fast_syscall_32+0x229/0x6e0 [ 2068.929940][T30620] ? do_fast_syscall_32+0x33/0x70 [ 2068.929964][T30620] ? lockdep_hardirqs_on+0x7a/0x110 [ 2068.929986][T30620] ? asm_int80_emulation+0x1a/0x20 [ 2068.930004][T30620] ? do_int80_emulation+0x286/0x530 [ 2068.930028][T30620] ? trace_irq_disable+0x3b/0x140 [ 2068.930060][T30620] do_fast_syscall_32+0x33/0x70 [ 2068.930085][T30620] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2068.930108][T30620] RIP: 0023:0xf70bf01c [ 2068.930126][T30620] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 2068.930142][T30620] RSP: 002b:00000000f54ad50c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 2068.930163][T30620] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0246400 [ 2068.930177][T30620] RDX: 0000000080000440 RSI: 0000000000000000 RDI: 0000000000000000 [ 2068.930189][T30620] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2068.930199][T30620] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2068.930211][T30620] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2068.930238][T30620] [ 2069.338607][T25860] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2069.339600][T30624] tipc: Started in network mode [ 2069.348912][T25860] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2069.348950][T25860] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2069.348976][T25860] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2069.349176][T25860] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2069.397996][T25860] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2069.424587][T30624] tipc: Node identity 4, cluster identity 4711 [ 2069.435850][T30624] tipc: Node number set to 4 [ 2069.612260][T25860] usb 5-1: usb_control_msg returned -32 [ 2069.623118][T25860] usbtmc 5-1:16.0: can't read capabilities [ 2069.723801][T19061] usb 6-1: new high-speed USB device number 113 using dummy_hcd [ 2069.744166][T19069] usb 7-1: new high-speed USB device number 46 using dummy_hcd [ 2069.874568][T19061] usb 6-1: Using ep0 maxpacket: 32 [ 2069.883274][T19061] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2069.898607][T19061] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2069.932436][T19061] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 2069.943064][T19061] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2069.957995][T19061] usb 6-1: config 0 descriptor?? [ 2069.987099][T19061] hub 6-1:0.0: bad descriptor, ignoring hub [ 2069.996225][T19061] hub 6-1:0.0: probe with driver hub failed with error -5 [ 2070.023104][T19061] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 2070.059484][T25844] usb 1-1: USB disconnect, device number 11 [ 2071.371355][T19061] usb 5-1: USB disconnect, device number 58 [ 2071.823833][T19061] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 2071.978863][T19061] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 2071.988121][T19061] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2071.996647][T19061] usb 5-1: Product: syz [ 2072.000893][T19061] usb 5-1: Manufacturer: syz [ 2072.007829][T19061] usb 5-1: SerialNumber: syz [ 2072.016988][T19061] usb 5-1: config 0 descriptor?? [ 2072.309454][T30662] FAULT_INJECTION: forcing a failure. [ 2072.309454][T30662] name failslab, interval 1, probability 0, space 0, times 0 [ 2072.325049][T30662] CPU: 0 UID: 0 PID: 30662 Comm: syz.0.7281 Tainted: G L syzkaller #0 PREEMPT(full) [ 2072.325085][T30662] Tainted: [L]=SOFTLOCKUP [ 2072.325101][T30662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2072.325114][T30662] Call Trace: [ 2072.325123][T30662] [ 2072.325133][T30662] dump_stack_lvl+0xe8/0x150 [ 2072.325171][T30662] should_fail_ex+0x412/0x560 [ 2072.325208][T30662] should_failslab+0xa8/0x100 [ 2072.325235][T30662] ? skb_clone+0x212/0x3a0 [ 2072.325257][T30662] kmem_cache_alloc_noprof+0x87/0x650 [ 2072.325281][T30662] ? dev_queue_xmit_nit+0x2d/0xad0 [ 2072.325308][T30662] skb_clone+0x212/0x3a0 [ 2072.325328][T30662] ? dev_queue_xmit_nit+0x268/0xad0 [ 2072.325351][T30662] dev_queue_xmit_nit+0x29a/0xad0 [ 2072.325372][T30662] ? dev_queue_xmit_nit+0x2d/0xad0 [ 2072.325403][T30662] dev_hard_start_xmit+0x1c1/0x830 [ 2072.325442][T30662] __dev_queue_xmit+0x14d9/0x3950 [ 2072.325466][T30662] ? __sys_sendmsg+0x183/0x260 [ 2072.325495][T30662] ? __dev_queue_xmit+0x2b6/0x3950 [ 2072.325534][T30662] ? __pfx___dev_queue_xmit+0x10/0x10 [ 2072.325567][T30662] ? __copy_skb_header+0xa3/0x4a0 [ 2072.325589][T30662] ? __asan_memcpy+0x40/0x70 [ 2072.325609][T30662] ? __skb_clone+0x63/0x7a0 [ 2072.325634][T30662] ? __skb_clone+0x483/0x7a0 [ 2072.325664][T30662] ? skb_clone+0x246/0x3a0 [ 2072.325688][T30662] __netlink_deliver_tap+0x5ad/0x850 [ 2072.325721][T30662] ? netlink_deliver_tap+0x2e/0x1b0 [ 2072.325743][T30662] netlink_deliver_tap+0x19c/0x1b0 [ 2072.325765][T30662] netlink_unicast+0x730/0x8e0 [ 2072.325803][T30662] netlink_sendmsg+0x813/0xb40 [ 2072.325833][T30662] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2072.325858][T30662] ? aa_sock_msg_perm+0xf1/0x1b0 [ 2072.325879][T30662] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2072.325908][T30662] ____sys_sendmsg+0x972/0x9f0 [ 2072.325939][T30662] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2072.325965][T30662] ? kstrtoull+0x12f/0x1d0 [ 2072.326002][T30662] ___sys_sendmsg+0x2a5/0x360 [ 2072.326023][T30662] ? __lock_acquire+0x6b5/0x2cf0 [ 2072.326056][T30662] ? __pfx____sys_sendmsg+0x10/0x10 [ 2072.326079][T30662] ? get_pid_task+0x20/0x1f0 [ 2072.326111][T30662] ? get_pid_task+0x20/0x1f0 [ 2072.326129][T30662] ? get_pid_task+0x20/0x1f0 [ 2072.326179][T30662] ? __fget_files+0x2a/0x420 [ 2072.326200][T30662] ? __fget_files+0x3a0/0x420 [ 2072.326230][T30662] __sys_sendmsg+0x183/0x260 [ 2072.326257][T30662] ? __pfx___sys_sendmsg+0x10/0x10 [ 2072.326299][T30662] __do_fast_syscall_32+0x229/0x6e0 [ 2072.326328][T30662] ? do_fast_syscall_32+0x33/0x70 [ 2072.326352][T30662] ? lockdep_hardirqs_on+0x7a/0x110 [ 2072.326377][T30662] ? asm_int80_emulation+0x1a/0x20 [ 2072.326397][T30662] ? do_int80_emulation+0x286/0x530 [ 2072.326424][T30662] ? trace_irq_disable+0x3b/0x140 [ 2072.326453][T30662] do_fast_syscall_32+0x33/0x70 [ 2072.326482][T30662] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2072.326507][T30662] RIP: 0023:0xf6fef01c [ 2072.326526][T30662] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 2072.326544][T30662] RSP: 002b:00000000f53dd50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 2072.326568][T30662] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000040 [ 2072.326582][T30662] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2072.326594][T30662] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2072.326606][T30662] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2072.326618][T30662] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2072.326648][T30662] [ 2072.834461][T25844] usb 6-1: USB disconnect, device number 113 [ 2072.912527][T19061] usb 5-1: Firmware version (0.0) predates our first public release. [ 2072.940684][T30668] netlink: 32 bytes leftover after parsing attributes in process `syz.5.7271'. [ 2072.954037][T19061] usb 5-1: Please update to version 0.2 or newer [ 2072.967912][T30668] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7271'. [ 2073.051469][T30668] loop5: detected capacity change from 0 to 7 [ 2073.059383][T30668] Dev loop5: unable to read RDB block 7 [ 2073.067603][T30668] loop5: AHDI p1 p2 [ 2073.075774][T30668] loop5: partition table partially beyond EOD, truncated [ 2073.090154][T30668] loop5: p1 size 150995456 extends beyond EOD, truncated [ 2073.132739][T30655] netlink: 'syz.4.7269': attribute type 13 has an invalid length. [ 2073.174351][T25860] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 2073.273410][T19061] usb 5-1: USB disconnect, device number 59 [ 2073.366650][T25860] usb 1-1: Using ep0 maxpacket: 32 [ 2073.382681][T25860] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 2073.393031][T25860] usb 1-1: config 0 has no interface number 0 [ 2073.414454][T25860] usb 1-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 2073.436651][T25844] usb 6-1: new high-speed USB device number 114 using dummy_hcd [ 2073.437270][T25860] usb 1-1: config 0 interface 1 has no altsetting 0 [ 2073.466605][T25860] usb 1-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 2073.482231][T25860] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2073.497709][T25860] usb 1-1: Product: syz [ 2073.506735][T25860] usb 1-1: Manufacturer: syz [ 2073.515929][T25860] usb 1-1: SerialNumber: syz [ 2073.532707][T25860] usb 1-1: config 0 descriptor?? [ 2073.606219][T25844] usb 6-1: Using ep0 maxpacket: 8 [ 2073.620011][T25844] usb 6-1: unable to get BOS descriptor or descriptor too short [ 2073.634532][T25844] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 2073.650691][T25844] usb 6-1: config 1 interface 0 altsetting 0 has a duplicate endpoint with address 0x6, skipping [ 2073.675078][T25844] usb 6-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 2073.686029][T25844] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2073.698452][T25844] usb 6-1: Manufacturer: 哻헣ꘌ㯥쉎省㔄뎁牉䒊Ὣﴥ焝뉣嚙ｑꕗᮏ쇲ﹽ槉෮绷縻肷쳽䘂銑ឌ䋦 [ 2073.756672][T25860] cx231xx 1-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 2073.779560][T25860] cx231xx 1-1:0.1: Failed to read PCB config [ 2073.788393][T25860] cx231xx 1-1:0.1: probe with driver cx231xx failed with error -71 [ 2073.802009][T25860] usb 1-1: USB disconnect, device number 12 [ 2073.951302][T25844] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 2073.980758][T25844] usb 6-1: MIDIStreaming interface descriptor not found [ 2074.200379][T30680] sysfs: cannot create duplicate filename '/class/ieee80211/1^!l1*$pOcɔr$G' [ 2074.210959][T25844] usb 6-1: USB disconnect, device number 114 [ 2074.239630][T30680] CPU: 1 UID: 0 PID: 30680 Comm: syz.4.7273 Tainted: G L syzkaller #0 PREEMPT(full) [ 2074.239668][T30680] Tainted: [L]=SOFTLOCKUP [ 2074.239676][T30680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2074.239689][T30680] Call Trace: [ 2074.239698][T30680] [ 2074.239708][T30680] dump_stack_lvl+0xe8/0x150 [ 2074.239750][T30680] sysfs_warn_dup+0x8e/0xa0 [ 2074.239773][T30680] sysfs_do_create_link_sd+0xc0/0x110 [ 2074.239799][T30680] device_add_class_symlinks+0x1cf/0x240 [ 2074.239835][T30680] device_add+0x475/0xbb0 [ 2074.239869][T30680] wiphy_register+0x1dc5/0x2dc0 [ 2074.239916][T30680] ? __pfx_wiphy_register+0x10/0x10 [ 2074.239944][T30680] ? __pfx_netdev_run_todo+0x10/0x10 [ 2074.239975][T30680] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 2074.240017][T30680] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 2074.240051][T30680] ieee80211_register_hw+0x3d82/0x4a70 [ 2074.240097][T30680] ? ieee80211_register_hw+0x1971/0x4a70 [ 2074.240155][T30680] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 2074.240188][T30680] ? __asan_memset+0x22/0x50 [ 2074.240213][T30680] ? __hrtimer_setup+0x1b7/0x260 [ 2074.240237][T30680] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 2074.240269][T30680] mac80211_hwsim_new_radio+0x3334/0x5ba0 [ 2074.240337][T30680] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 2074.240360][T30680] ? kstrndup+0xbf/0x160 [ 2074.240400][T30680] hwsim_new_radio_nl+0xf6a/0x1c00 [ 2074.240450][T30680] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 2074.240485][T30680] ? rcu_is_watching+0x15/0xb0 [ 2074.240509][T30680] ? trace_kmalloc+0x2a/0xf0 [ 2074.240541][T30680] ? __nla_parse+0x40/0x60 [ 2074.240572][T30680] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 2074.240600][T30680] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 2074.240638][T30680] genl_family_rcv_msg_doit+0x22a/0x330 [ 2074.240675][T30680] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 2074.240718][T30680] ? bpf_lsm_capable+0x9/0x20 [ 2074.240747][T30680] ? security_capable+0x7e/0x2c0 [ 2074.240789][T30680] genl_rcv_msg+0x61c/0x7a0 [ 2074.240826][T30680] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2074.240852][T30680] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 2074.240892][T30680] netlink_rcv_skb+0x232/0x4b0 [ 2074.240928][T30680] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2074.240956][T30680] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2074.241008][T30680] ? down_read+0x270/0x2e0 [ 2074.241037][T30680] ? genl_rcv+0xd/0x40 [ 2074.241064][T30680] genl_rcv+0x28/0x40 [ 2074.241086][T30680] netlink_unicast+0x75c/0x8e0 [ 2074.241127][T30680] netlink_sendmsg+0x813/0xb40 [ 2074.241159][T30680] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2074.241185][T30680] ? aa_sock_msg_perm+0xf1/0x1b0 [ 2074.241209][T30680] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2074.241238][T30680] ____sys_sendmsg+0x972/0x9f0 [ 2074.241275][T30680] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2074.241317][T30680] ___sys_sendmsg+0x2a5/0x360 [ 2074.241349][T30680] ? __lock_acquire+0x6b5/0x2cf0 [ 2074.241387][T30680] ? __pfx____sys_sendmsg+0x10/0x10 [ 2074.241419][T30680] ? futex_wait+0x2a2/0x390 [ 2074.241478][T30680] ? __fget_files+0x2a/0x420 [ 2074.241498][T30680] ? __fget_files+0x3a0/0x420 [ 2074.241533][T30680] __sys_sendmsg+0x183/0x260 [ 2074.241560][T30680] ? __pfx___sys_sendmsg+0x10/0x10 [ 2074.241611][T30680] __do_fast_syscall_32+0x229/0x6e0 [ 2074.241642][T30680] ? do_fast_syscall_32+0x33/0x70 [ 2074.241673][T30680] ? irqentry_exit+0x10f/0x730 [ 2074.241700][T30680] ? trace_irq_disable+0x3b/0x140 [ 2074.241732][T30680] do_fast_syscall_32+0x33/0x70 [ 2074.241763][T30680] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2074.241789][T30680] RIP: 0023:0xf6fef01c [ 2074.241811][T30680] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 2074.241829][T30680] RSP: 002b:00000000f53bc50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 2074.241853][T30680] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 0000000080000100 [ 2074.241868][T30680] RDX: 0000000004000010 RSI: 0000000000000000 RDI: 0000000000000000 [ 2074.241881][T30680] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2074.241895][T30680] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2074.241908][T30680] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2074.241943][T30680] [ 2074.669711][T25851] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 2074.679565][T27172] udevd[27172]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2074.842546][T30689] netlink: set zone limit has 8 unknown bytes [ 2074.853732][T25851] usb 1-1: Using ep0 maxpacket: 32 [ 2074.860953][T25851] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 2074.869386][T25851] usb 1-1: config 0 has no interface number 0 [ 2074.878154][T25851] usb 1-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 2074.890340][T25851] usb 1-1: config 0 interface 1 has no altsetting 0 [ 2074.903760][T25851] usb 1-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 2074.955125][T25851] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2074.966208][T25851] usb 1-1: Product: syz [ 2074.970899][T25851] usb 1-1: Manufacturer: syz [ 2074.976834][T25851] usb 1-1: SerialNumber: syz [ 2075.012674][T25851] usb 1-1: config 0 descriptor?? [ 2075.045012][T19061] usb 5-1: new full-speed USB device number 60 using dummy_hcd [ 2075.216894][T19061] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2075.232050][T19061] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2075.266678][T19061] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2075.297521][T19061] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2075.319607][T30701] loop6: detected capacity change from 0 to 2640 [ 2075.344019][T30701] buffer_io_error: 11 callbacks suppressed [ 2075.344082][T30701] Buffer I/O error on dev loop6, logical block 0, async page read [ 2075.383288][T30701] Buffer I/O error on dev loop6, logical block 0, async page read [ 2075.405649][T30702] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7272'. [ 2075.429560][T30701] Buffer I/O error on dev loop6, logical block 0, async page read [ 2075.467673][T30701] Buffer I/O error on dev loop6, logical block 0, async page read [ 2075.478004][T30704] fuse: Unknown parameter 'group_d' [ 2075.498474][T30701] Buffer I/O error on dev loop6, logical block 0, async page read [ 2075.536974][T19061] usb 5-1: usb_control_msg returned -32 [ 2075.553776][T19061] usbtmc 5-1:16.0: can't read capabilities [ 2075.569902][T30701] Buffer I/O error on dev loop6, logical block 0, async page read [ 2075.600315][T30701] Buffer I/O error on dev loop6, logical block 0, async page read [ 2075.648260][T30701] Buffer I/O error on dev loop6, logical block 0, async page read [ 2075.679761][T30701] ldm_validate_partition_table(): Disk read failed. [ 2075.715170][T30701] Buffer I/O error on dev loop6, logical block 0, async page read [ 2075.753756][T30701] Buffer I/O error on dev loop6, logical block 0, async page read [ 2075.783464][T30701] Dev loop6: unable to read RDB block 0 [ 2075.802723][T30701] loop6: unable to read partition table [ 2075.822607][T30701] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 2076.650649][ T5210] ldm_validate_partition_table(): Disk read failed. [ 2076.658373][ T5210] Dev loop6: unable to read RDB block 0 [ 2076.664947][ T5210] loop6: unable to read partition table [ 2076.993785][T25844] usb 6-1: new high-speed USB device number 115 using dummy_hcd [ 2077.018070][T25851] cx231xx 1-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 2077.030507][T25851] cx231xx 1-1:0.1: Failed to read PCB config [ 2077.038087][T25851] cx231xx 1-1:0.1: probe with driver cx231xx failed with error -71 [ 2077.046152][T19061] usb 7-1: new high-speed USB device number 47 using dummy_hcd [ 2077.064530][T25851] usb 1-1: USB disconnect, device number 13 [ 2077.183880][T25844] usb 6-1: Using ep0 maxpacket: 32 [ 2077.194195][T19061] usb 7-1: Using ep0 maxpacket: 16 [ 2077.206220][T25844] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2077.207959][T19061] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2077.228816][T25844] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2077.230882][T19061] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2077.252852][T19061] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2077.255622][T30725] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7286'. [ 2077.267401][T19061] usb 7-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 2077.276971][T25844] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 2077.286495][T19061] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2077.298715][T25844] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2077.315302][T30725] netlink: 31 bytes leftover after parsing attributes in process `syz.0.7286'. [ 2077.325074][T19061] usb 7-1: config 0 descriptor?? [ 2077.326629][T30725] netlink: 'syz.0.7286': attribute type 3 has an invalid length. [ 2077.339353][T30725] netlink: 'syz.0.7286': attribute type 2 has an invalid length. [ 2077.348258][T25844] usb 6-1: config 0 descriptor?? [ 2077.355842][T30725] netlink: 31 bytes leftover after parsing attributes in process `syz.0.7286'. [ 2077.368657][T25844] hub 6-1:0.0: bad descriptor, ignoring hub [ 2077.375335][T25844] hub 6-1:0.0: probe with driver hub failed with error -5 [ 2077.385690][T25844] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 2077.739848][T19061] shield 0003:0955:7214.005E: unknown main item tag 0x0 [ 2077.743778][T25844] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 2077.747453][T19061] shield 0003:0955:7214.005E: unknown main item tag 0x0 [ 2077.776022][T19061] shield 0003:0955:7214.005E: unknown main item tag 0x0 [ 2077.794326][T19061] shield 0003:0955:7214.005E: unknown main item tag 0x0 [ 2077.801410][T19061] shield 0003:0955:7214.005E: unknown main item tag 0x0 [ 2077.815106][T19061] input: HID 0955:7214 Haptics as /devices/virtual/input/input110 [ 2077.817114][T25851] usb 5-1: USB disconnect, device number 60 [ 2077.924696][T25844] usb 1-1: Using ep0 maxpacket: 32 [ 2077.936604][T30718] random: crng reseeded on system resumption [ 2077.947507][T25844] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 2077.974192][T25844] usb 1-1: config 0 has no interface number 0 [ 2077.993962][T25844] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 2078.004200][T25844] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2078.015101][T25844] usb 1-1: Product: syz [ 2078.020346][T25844] usb 1-1: Manufacturer: syz [ 2078.027909][T25844] usb 1-1: SerialNumber: syz [ 2078.036818][T19061] shield 0003:0955:7214.005E: Registered Thunderstrike controller [ 2078.038654][T25844] usb 1-1: config 0 descriptor?? [ 2078.056621][T25844] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 2078.063459][T19061] shield 0003:0955:7214.005E: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.6-1/input0 [ 2078.067007][T30734] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2078.089082][T30734] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2078.253922][T25851] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 2078.266984][T25844] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 2078.283148][T25844] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 2078.426314][T25851] usb 5-1: config index 0 descriptor too short (expected 39, got 27) [ 2078.435978][T25851] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 2078.446421][T25851] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2078.456689][T25851] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2078.466387][T25851] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2078.475841][T25851] usb 5-1: Product: syz [ 2078.480327][T25851] usb 5-1: Manufacturer: syz [ 2078.492338][T25851] usb 5-1: SerialNumber: syz [ 2078.501083][T25851] usb 5-1: config 0 descriptor?? [ 2078.511507][T25851] hub 5-1:0.0: bad descriptor, ignoring hub [ 2078.518862][T25851] hub 5-1:0.0: probe with driver hub failed with error -5 [ 2078.531142][T25851] usb 5-1: selecting invalid altsetting 0 [ 2078.689856][ C0] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 2078.690580][T25860] usb 1-1: USB disconnect, device number 14 [ 2078.719780][T25860] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 2078.748306][T25860] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 2078.761237][T25860] quatech2 1-1:0.51: device disconnected [ 2078.844104][T25851] usb 5-1: USB disconnect, device number 61 [ 2079.173947][T19069] shield 0003:0955:7214.005E: Failed to output Thunderstrike HOSTCMD request HID report due to -ESHUTDOWN [ 2079.191246][T19069] shield 0003:0955:7214.005E: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 2079.203180][T19069] shield 0003:0955:7214.005E: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 2079.215996][T19069] shield 0003:0955:7214.005E: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 2079.313836][T25860] usb 7-1: reset high-speed USB device number 47 using dummy_hcd [ 2079.463732][T25860] usb 7-1: device descriptor read/64, error -32 [ 2079.518227][T30741] syzkaller0: tun_chr_ioctl cmd 1074025676 [ 2079.524566][T30741] syzkaller0: owner set to 0 [ 2079.713747][T25860] usb 7-1: reset high-speed USB device number 47 using dummy_hcd [ 2079.954513][T25851] usb 6-1: USB disconnect, device number 115 [ 2080.072153][T30753] syzkaller0: tun_chr_ioctl cmd 1074025676 [ 2080.082934][T30753] syzkaller0: owner set to 0 [ 2080.092264][T30753] netlink: 16 bytes leftover after parsing attributes in process `syz.6.7294'. [ 2080.104359][T30753] netlink: 16 bytes leftover after parsing attributes in process `syz.6.7294'. [ 2080.122588][T30753] netlink: 16 bytes leftover after parsing attributes in process `syz.6.7294'. [ 2080.134953][T30753] netlink: 16 bytes leftover after parsing attributes in process `syz.6.7294'. [ 2080.144528][T30753] netlink: 16 bytes leftover after parsing attributes in process `syz.6.7294'. [ 2080.156026][T30753] netlink: 16 bytes leftover after parsing attributes in process `syz.6.7294'. [ 2080.168449][T30753] netlink: 16 bytes leftover after parsing attributes in process `syz.6.7294'. [ 2080.181522][T30753] netlink: 16 bytes leftover after parsing attributes in process `syz.6.7294'. [ 2080.200633][T30753] netlink: 16 bytes leftover after parsing attributes in process `syz.6.7294'. [ 2080.210697][T30753] netlink: 16 bytes leftover after parsing attributes in process `syz.6.7294'. [ 2080.404308][T19061] usb 6-1: new high-speed USB device number 116 using dummy_hcd [ 2080.435719][T17399] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 2080.488009][T19069] usb 7-1: USB disconnect, device number 47 [ 2080.576987][T19061] usb 6-1: Using ep0 maxpacket: 32 [ 2080.589654][T19061] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2080.600177][T17399] usb 5-1: Using ep0 maxpacket: 32 [ 2080.606258][T19061] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2080.628957][T17399] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2080.642382][T17399] usb 5-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 2080.659191][T19061] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2080.670725][T17399] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2080.677735][T19061] usb 6-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 2080.691626][T19061] usb 6-1: config 0 interface 0 has no altsetting 0 [ 2080.700982][T19061] usb 6-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 2080.711345][T19061] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2080.731437][T17399] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 2080.744462][T19061] usb 6-1: config 0 descriptor?? [ 2080.749542][T17399] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2080.759212][T17399] usb 5-1: Product: syz [ 2080.769082][T17399] usb 5-1: Manufacturer: syz [ 2080.774116][T17399] usb 5-1: SerialNumber: syz [ 2080.783085][T17399] usb 5-1: config 0 descriptor?? [ 2080.804840][T25419] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2080.878219][T30780] FAULT_INJECTION: forcing a failure. [ 2080.878219][T30780] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2080.896249][T30780] CPU: 0 UID: 0 PID: 30780 Comm: syz.0.7304 Tainted: G L syzkaller #0 PREEMPT(full) [ 2080.896285][T30780] Tainted: [L]=SOFTLOCKUP [ 2080.896294][T30780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2080.896307][T30780] Call Trace: [ 2080.896315][T30780] [ 2080.896325][T30780] dump_stack_lvl+0xe8/0x150 [ 2080.896365][T30780] should_fail_ex+0x412/0x560 [ 2080.896403][T30780] _copy_to_user+0x31/0xb0 [ 2080.896430][T30780] simple_read_from_buffer+0xe1/0x170 [ 2080.896457][T30780] proc_fail_nth_read+0x1bb/0x230 [ 2080.896483][T30780] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2080.896509][T30780] ? rw_verify_area+0x2a6/0x4d0 [ 2080.896535][T30780] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2080.896559][T30780] vfs_read+0x20c/0xa70 [ 2080.896591][T30780] ? __pfx___mutex_lock+0x10/0x10 [ 2080.896620][T30780] ? __pfx_vfs_read+0x10/0x10 [ 2080.896648][T30780] ? __fget_files+0x2a/0x420 [ 2080.896674][T30780] ? __fget_files+0x3a0/0x420 [ 2080.896695][T30780] ? __fget_files+0x2a/0x420 [ 2080.896724][T30780] ksys_read+0x150/0x270 [ 2080.896747][T30780] ? kmem_cache_free+0x182/0x650 [ 2080.896775][T30780] ? __pfx_ksys_read+0x10/0x10 [ 2080.896806][T30780] ? asm_int80_emulation+0x1a/0x20 [ 2080.896832][T30780] do_int80_emulation+0x181/0x530 [ 2080.896859][T30780] ? trace_irq_disable+0x3b/0x140 [ 2080.896883][T30780] ? asm_int80_emulation+0x1a/0x20 [ 2080.896901][T30780] ? clear_bhb_loop+0x40/0x90 [ 2080.896926][T30780] ? clear_bhb_loop+0x40/0x90 [ 2080.896948][T30780] asm_int80_emulation+0x1a/0x20 [ 2080.896967][T30780] RIP: 0023:0xf7125cab [ 2080.896986][T30780] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 2080.897012][T30780] RSP: 002b:00000000f53dd4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 2080.897035][T30780] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f53dd5d0 [ 2080.897049][T30780] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 2080.897060][T30780] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2080.897071][T30780] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2080.897081][T30780] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2080.897099][T30780] [ 2081.129506][T19069] usb 7-1: new full-speed USB device number 48 using dummy_hcd [ 2081.287799][T19069] usb 7-1: unable to get BOS descriptor or descriptor too short [ 2081.296727][T19069] usb 7-1: not running at top speed; connect to a high speed hub [ 2081.306045][T19069] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2081.316260][T19069] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2081.327780][T19069] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2081.337682][T19069] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2081.345771][T19069] usb 7-1: Product: 賃鋫๎魄齴뒢善靕儥啘兲༷둬景鈐⽆뵪뛫鎟層塷✈耳㓦싐屚跏䴛㶯澩鉗⊼ᾶ论떛쾹ᛂ菚귐➿䅃뀲ᇉ왞詠ట鎡ꢅ䑉괘ᆊ馂廻䁜錭呫좲㋈왕ò唷骆៯忠쿊 [ 2081.367875][T19069] usb 7-1: Manufacturer: 玍끚鵤죭Λ絿԰ⅅ白훜腗麤谁ệペ剷⼊짩題 [ 2081.379219][T17399] gs_usb 5-1:0.0: Configuring for 1 interfaces [ 2081.386942][T19069] usb 7-1: SerialNumber: syz [ 2081.392153][T19061] usbhid 6-1:0.0: can't add hid device: -71 [ 2081.402699][T19061] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 2081.419354][T19061] usb 6-1: USB disconnect, device number 116 [ 2081.503834][T25851] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 2081.615352][T30772] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2081.625035][T30772] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2081.636625][T30772] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2081.645790][T30772] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2081.654309][T25851] usb 1-1: Using ep0 maxpacket: 32 [ 2081.664957][T19069] usb 7-1: 0:2 : does not exist [ 2081.672648][T25851] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2081.679300][T19069] usb 7-1: 5:0: failed to get current value for ch 0 (-22) [ 2081.684647][T25851] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2081.702834][T19069] usb 7-1: 5:0: cannot get min/max values for control 2 (id 5) [ 2081.705039][T25851] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 2081.712712][T19069] usb 7-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 2081.726979][T25851] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2081.732460][T19069] usb 7-1: [5] FU [Mic Capture Volume] ch = 1, val = 0/1/1 [ 2081.751229][T25851] usb 1-1: config 0 descriptor?? [ 2081.755533][T19069] usb 7-1: 5:0: cannot get min/max values for control 3 (id 5) [ 2081.770319][T25851] hub 1-1:0.0: bad descriptor, ignoring hub [ 2081.772190][T19069] usb 7-1: 5:0: failed to get current value for ch 1 (-22) [ 2081.784876][T25851] hub 1-1:0.0: probe with driver hub failed with error -5 [ 2081.796575][T25851] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 2081.807727][T17399] usb 5-1: USB disconnect, device number 62 [ 2081.839624][T19069] usb 7-1: 5:0: cannot get min/max values for control 3 (id 5) [ 2081.861492][T19069] usb 7-1: 5:0: cannot get min/max values for control 2 (id 5) [ 2081.894046][T19069] usb 7-1: USB disconnect, device number 48 [ 2081.945037][T27310] udevd[27310]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2082.494331][T25851] usb 6-1: new high-speed USB device number 117 using dummy_hcd [ 2082.548092][T30798] syzkaller0: tun_chr_ioctl cmd 1074025676 [ 2082.555194][T30798] syzkaller0: owner set to 0 [ 2082.659396][T25851] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 2082.672538][T25851] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2082.682916][T25851] usb 6-1: Product: syz [ 2082.690085][T25851] usb 6-1: Manufacturer: syz [ 2082.695187][T25851] usb 6-1: SerialNumber: syz [ 2082.706319][T25851] usb 6-1: config 0 descriptor?? [ 2083.320965][T25851] usb 6-1: Firmware version (0.0) predates our first public release. [ 2083.329668][T25851] usb 6-1: Please update to version 0.2 or newer [ 2083.566982][T30791] netlink: 'syz.5.7308': attribute type 13 has an invalid length. [ 2083.853810][T25851] usb 6-1: USB disconnect, device number 117 [ 2084.414666][T19069] usb 1-1: USB disconnect, device number 15 [ 2084.430585][T30839] loop6: detected capacity change from 0 to 2640 [ 2084.455993][T30839] buffer_io_error: 32 callbacks suppressed [ 2084.456015][T30839] Buffer I/O error on dev loop6, logical block 0, async page read [ 2084.498590][T30839] Buffer I/O error on dev loop6, logical block 0, async page read [ 2084.536718][T30839] Buffer I/O error on dev loop6, logical block 0, async page read [ 2084.572297][T30839] Buffer I/O error on dev loop6, logical block 0, async page read [ 2084.583773][T17399] usb 7-1: new high-speed USB device number 49 using dummy_hcd [ 2084.601765][T30839] Buffer I/O error on dev loop6, logical block 0, async page read [ 2084.614721][T30839] Buffer I/O error on dev loop6, logical block 0, async page read [ 2084.628392][T30839] Buffer I/O error on dev loop6, logical block 0, async page read [ 2084.637540][T30839] Buffer I/O error on dev loop6, logical block 0, async page read [ 2084.647933][T30839] ldm_validate_partition_table(): Disk read failed. [ 2084.655316][T30839] Buffer I/O error on dev loop6, logical block 0, async page read [ 2084.663390][T30839] Buffer I/O error on dev loop6, logical block 0, async page read [ 2084.673971][T30839] Dev loop6: unable to read RDB block 0 [ 2084.680705][T30839] loop6: unable to read partition table [ 2084.695378][T30839] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 2084.723317][ T5210] ldm_validate_partition_table(): Disk read failed. [ 2084.744350][ T5210] Dev loop6: unable to read RDB block 0 [ 2084.756766][ T5210] loop6: unable to read partition table [ 2084.759249][T17399] usb 7-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 2084.776114][T17399] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2084.787713][T17399] usb 7-1: Product: syz [ 2084.796026][T17399] usb 7-1: Manufacturer: syz [ 2084.801953][T17399] usb 7-1: SerialNumber: syz [ 2084.825616][T17399] usb 7-1: config 0 descriptor?? [ 2084.863765][T25851] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 2085.068420][T25851] usb 1-1: Using ep0 maxpacket: 16 [ 2085.091090][T25851] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2085.127092][T25851] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2085.181922][T25851] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2085.273497][T25851] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2085.290352][T25851] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2085.306318][T25851] usb 1-1: config 0 descriptor?? [ 2085.460744][T25844] usb 7-1: USB disconnect, device number 49 [ 2085.887552][T25851] microsoft 0003:045E:07DA.005F: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 2085.922586][T25851] microsoft 0003:045E:07DA.005F: no inputs found [ 2085.937630][T25851] microsoft 0003:045E:07DA.005F: could not initialize ff, continuing anyway [ 2086.169520][T17399] usb 1-1: USB disconnect, device number 16 [ 2086.476079][T30859] __nla_validate_parse: 301 callbacks suppressed [ 2086.476095][T30859] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7325'. [ 2086.519189][T19069] usb 7-1: new high-speed USB device number 50 using dummy_hcd [ 2086.653991][T30863] syzkaller0: entered promiscuous mode [ 2086.659636][T30863] syzkaller0: entered allmulticast mode [ 2086.673815][T19069] usb 7-1: Using ep0 maxpacket: 32 [ 2086.685113][T19069] usb 7-1: config 0 has an invalid interface number: 51 but max is 0 [ 2086.703556][T19069] usb 7-1: config 0 has no interface number 0 [ 2086.713929][T19069] usb 7-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 2086.723435][T19069] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2086.735184][T19069] usb 7-1: Product: syz [ 2086.740036][T19069] usb 7-1: Manufacturer: syz [ 2086.748490][T19069] usb 7-1: SerialNumber: syz [ 2086.756649][T19069] usb 7-1: config 0 descriptor?? [ 2086.771155][T19069] quatech2 7-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 2086.883945][T17399] usb 6-1: new high-speed USB device number 118 using dummy_hcd [ 2086.903782][T25851] usb 5-1: new full-speed USB device number 63 using dummy_hcd [ 2086.978895][T19069] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 2086.994377][T19069] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 2087.033977][T25851] usb 5-1: device descriptor read/64, error -71 [ 2087.043958][T17399] usb 6-1: Using ep0 maxpacket: 32 [ 2087.056244][T17399] usb 6-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 2087.065822][T19061] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 2087.074902][T17399] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2087.083825][T17399] usb 6-1: Product: syz [ 2087.088115][T17399] usb 6-1: Manufacturer: syz [ 2087.093493][T17399] usb 6-1: SerialNumber: syz [ 2087.101698][T17399] usb 6-1: config 0 descriptor?? [ 2087.110822][T17399] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 2087.243754][T19061] usb 1-1: Using ep0 maxpacket: 32 [ 2087.256281][T19061] usb 1-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 2087.268005][T19061] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2087.276306][T19061] usb 1-1: Product: syz [ 2087.280614][T19061] usb 1-1: Manufacturer: syz [ 2087.283886][T25851] usb 5-1: new full-speed USB device number 64 using dummy_hcd [ 2087.285526][T19061] usb 1-1: SerialNumber: syz [ 2087.304879][T19061] usb 1-1: config 0 descriptor?? [ 2087.327629][T19061] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 2087.407842][ C1] usb 7-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 2087.408634][T25850] usb 7-1: USB disconnect, device number 50 [ 2087.429714][T25850] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 2087.444141][T25851] usb 5-1: device descriptor read/64, error -71 [ 2087.453393][T25850] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 2087.467216][T25850] quatech2 7-1:0.51: device disconnected [ 2087.554344][T25851] usb usb5-port1: attempt power cycle [ 2087.893850][T25851] usb 5-1: new full-speed USB device number 65 using dummy_hcd [ 2087.914835][T25851] usb 5-1: device descriptor read/8, error -71 [ 2088.116878][T30876] loop6: detected capacity change from 0 to 2640 [ 2088.127817][T30876] ldm_validate_partition_table(): Disk read failed. [ 2088.136148][T30876] Dev loop6: unable to read RDB block 0 [ 2088.143260][T30876] loop6: unable to read partition table [ 2088.150437][T30876] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 2088.159579][T25851] usb 5-1: new full-speed USB device number 66 using dummy_hcd [ 2088.185701][T25851] usb 5-1: device descriptor read/8, error -71 [ 2088.295402][T25851] usb usb5-port1: unable to enumerate USB device [ 2088.732541][T19061] gspca_ov534_9: reg_r err -32 [ 2088.753831][T19069] usb 7-1: new high-speed USB device number 51 using dummy_hcd [ 2088.917750][T19069] usb 7-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 2088.927093][T19069] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2088.935607][T19069] usb 7-1: Product: syz [ 2088.940042][T19069] usb 7-1: Manufacturer: syz [ 2088.944880][T19069] usb 7-1: SerialNumber: syz [ 2089.053799][T19061] gspca_ov534_9: Unknown sensor 0000 [ 2089.053921][T19061] ov534_9 1-1:0.0: probe with driver ov534_9 failed with error -22 [ 2089.353831][T17399] gspca_ov534_9: reg_r err -71 [ 2089.362246][T19069] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 2089.374394][T19069] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 2089.587746][T30883] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2089.597099][T30883] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2089.673809][T17399] gspca_ov534_9: Unknown sensor 0000 [ 2089.673925][T17399] ov534_9 6-1:0.0: probe with driver ov534_9 failed with error -22 [ 2089.707621][T17399] usb 6-1: USB disconnect, device number 118 [ 2089.840499][T25851] usb 1-1: USB disconnect, device number 17 [ 2089.845003][T30888] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7337'. [ 2089.964618][T30883] i2c i2c-0: DVB: adapter 0 frontend 0 symbol rate 0 out of range (1000000..45000000) [ 2090.193993][T19069] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000000. ret = -EPROTO [ 2090.235973][T19069] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 2090.278730][T19069] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 2090.336830][T19069] lan78xx 7-1:1.0: probe with driver lan78xx failed with error -71 [ 2090.399114][T19069] usb 7-1: USB disconnect, device number 51 [ 2090.620666][T30910] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7343'. [ 2090.894301][T19069] usb 6-1: new high-speed USB device number 119 using dummy_hcd [ 2090.907199][T30914] loop6: detected capacity change from 0 to 2640 [ 2090.930327][T30914] buffer_io_error: 48 callbacks suppressed [ 2090.930346][T30914] Buffer I/O error on dev loop6, logical block 0, async page read [ 2090.958885][T30914] Buffer I/O error on dev loop6, logical block 0, async page read [ 2090.981861][T30914] Buffer I/O error on dev loop6, logical block 0, async page read [ 2091.001775][T30914] Buffer I/O error on dev loop6, logical block 0, async page read [ 2091.015942][T30914] Buffer I/O error on dev loop6, logical block 0, async page read [ 2091.040301][T30914] Buffer I/O error on dev loop6, logical block 0, async page read [ 2091.048674][T19069] usb 6-1: device descriptor read/64, error -71 [ 2091.064899][T30914] Buffer I/O error on dev loop6, logical block 0, async page read [ 2091.077385][T30914] Buffer I/O error on dev loop6, logical block 0, async page read [ 2091.113794][T30914] ldm_validate_partition_table(): Disk read failed. [ 2091.132795][T30914] Buffer I/O error on dev loop6, logical block 0, async page read [ 2091.160957][T30914] Buffer I/O error on dev loop6, logical block 0, async page read [ 2091.176757][T30914] Dev loop6: unable to read RDB block 0 [ 2091.188325][T30914] loop6: unable to read partition table [ 2091.203347][T30914] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 2091.304431][T19069] usb 6-1: new high-speed USB device number 120 using dummy_hcd [ 2091.462545][T30924] netlink: 14 bytes leftover after parsing attributes in process `syz.0.7347'. [ 2091.472669][T19069] usb 6-1: device descriptor read/64, error -71 [ 2091.536820][T30927] x_tables: duplicate underflow at hook 1 [ 2091.584030][T19069] usb usb6-port1: attempt power cycle [ 2091.733915][T25851] usb 7-1: new high-speed USB device number 52 using dummy_hcd [ 2091.886160][T30931] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7349'. [ 2091.904142][T25851] usb 7-1: Using ep0 maxpacket: 32 [ 2091.919641][T25851] usb 7-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 2091.935918][T19069] usb 6-1: new high-speed USB device number 121 using dummy_hcd [ 2091.953703][T25851] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2091.964479][T19069] usb 6-1: device descriptor read/8, error -71 [ 2091.975544][T25851] usb 7-1: Product: syz [ 2091.994042][T25851] usb 7-1: Manufacturer: syz [ 2092.003958][T25851] usb 7-1: SerialNumber: syz [ 2092.022571][T25851] usb 7-1: config 0 descriptor?? [ 2092.047045][T25851] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 2092.203908][T19069] usb 6-1: new high-speed USB device number 122 using dummy_hcd [ 2092.246169][T19069] usb 6-1: device descriptor read/8, error -71 [ 2092.295162][T30924] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2092.307439][T30924] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2092.319977][T30924] bond0 (unregistering): Released all slaves [ 2092.354601][T19069] usb usb6-port1: unable to enumerate USB device [ 2092.624802][T30939] IPVS: Error joining to the multicast group [ 2092.753775][T25844] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 2092.917821][T25844] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 2092.932782][T25844] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2092.947542][T25844] usb 5-1: Product: syz [ 2092.955842][T25844] usb 5-1: Manufacturer: syz [ 2092.967040][T25844] usb 5-1: SerialNumber: syz [ 2092.983408][T25844] usb 5-1: config 0 descriptor?? [ 2093.460286][T25851] gspca_ov534_9: reg_r err -32 [ 2093.608544][T25844] usb 5-1: Firmware version (0.0) predates our first public release. [ 2093.619393][T25844] usb 5-1: Please update to version 0.2 or newer [ 2093.693978][T19069] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 2093.723770][T25851] gspca_ov534_9: Unknown sensor 0000 [ 2093.723854][T25851] ov534_9 7-1:0.0: probe with driver ov534_9 failed with error -22 [ 2093.858835][T19069] usb 1-1: config 0 has an invalid descriptor of length 105, skipping remainder of the config [ 2093.881436][T19069] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2093.909984][T19069] usb 1-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice=2f.dc [ 2093.930841][T19069] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2093.955614][T19069] usb 1-1: config 0 descriptor?? [ 2093.978960][T30955] netlink: 'syz.4.7352': attribute type 13 has an invalid length. [ 2094.181666][T30941] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7353'. [ 2094.215050][T30941] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2094.238463][T30941] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2094.272955][T19069] usb 1-1: string descriptor 0 read error: -71 [ 2094.289243][T19069] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 2094.301329][T19069] usb 1-1: USB disconnect, device number 18 [ 2094.522879][T30960] loop6: detected capacity change from 0 to 2640 [ 2094.541956][T25851] usb 7-1: USB disconnect, device number 52 [ 2094.545170][T30960] ldm_validate_partition_table(): Disk read failed. [ 2094.560601][T30960] Dev loop6: unable to read RDB block 0 [ 2094.577682][T30960] loop6: unable to read partition table [ 2094.589521][T30960] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 2094.994730][T30971] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7360'. [ 2095.097227][T30975] FAULT_INJECTION: forcing a failure. [ 2095.097227][T30975] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2095.185662][T30975] CPU: 1 UID: 0 PID: 30975 Comm: syz.7.7362 Tainted: G L syzkaller #0 PREEMPT(full) [ 2095.185697][T30975] Tainted: [L]=SOFTLOCKUP [ 2095.185706][T30975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2095.185718][T30975] Call Trace: [ 2095.185726][T30975] [ 2095.185735][T30975] dump_stack_lvl+0xe8/0x150 [ 2095.185773][T30975] should_fail_ex+0x412/0x560 [ 2095.185810][T30975] _copy_to_user+0x31/0xb0 [ 2095.185838][T30975] simple_read_from_buffer+0xe1/0x170 [ 2095.185866][T30975] proc_fail_nth_read+0x1bb/0x230 [ 2095.185893][T30975] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2095.185921][T30975] ? rw_verify_area+0x2a6/0x4d0 [ 2095.185945][T30975] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2095.185970][T30975] vfs_read+0x20c/0xa70 [ 2095.186008][T30975] ? __pfx___mutex_lock+0x10/0x10 [ 2095.186038][T30975] ? __pfx_vfs_read+0x10/0x10 [ 2095.186066][T30975] ? __fget_files+0x2a/0x420 [ 2095.186092][T30975] ? __fget_files+0x3a0/0x420 [ 2095.186121][T30975] ? __fget_files+0x2a/0x420 [ 2095.186151][T30975] ksys_read+0x150/0x270 [ 2095.186179][T30975] ? __pfx_ksys_read+0x10/0x10 [ 2095.186209][T30975] ? asm_int80_emulation+0x1a/0x20 [ 2095.186234][T30975] do_int80_emulation+0x181/0x530 [ 2095.186262][T30975] ? trace_irq_disable+0x3b/0x140 [ 2095.186287][T30975] ? asm_int80_emulation+0x1a/0x20 [ 2095.186306][T30975] ? clear_bhb_loop+0x40/0x90 [ 2095.186327][T30975] ? clear_bhb_loop+0x40/0x90 [ 2095.186352][T30975] asm_int80_emulation+0x1a/0x20 [ 2095.186372][T30975] RIP: 0023:0xf7125cab [ 2095.186392][T30975] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 2095.186411][T30975] RSP: 002b:00000000f53dd4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 2095.186440][T30975] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f53dd5d0 [ 2095.186454][T30975] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 2095.186466][T30975] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2095.186479][T30975] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2095.186491][T30975] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2095.186523][T30975] [ 2095.543807][T25844] usb 7-1: new high-speed USB device number 53 using dummy_hcd [ 2095.551681][T25851] usb 6-1: new high-speed USB device number 123 using dummy_hcd [ 2095.586632][T25850] usb 5-1: USB disconnect, device number 67 [ 2095.659996][T30983] netlink: 28 bytes leftover after parsing attributes in process `syz.7.7365'. [ 2095.703738][T25844] usb 7-1: Using ep0 maxpacket: 8 [ 2095.711384][T25844] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2095.724296][T25851] usb 6-1: Using ep0 maxpacket: 32 [ 2095.741742][T25844] usb 7-1: config 1 interface 0 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 2095.787213][T25851] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 2095.813528][T25851] usb 6-1: config 0 has no interface number 0 [ 2095.819973][T25844] usb 7-1: config 1 interface 0 has no altsetting 0 [ 2095.845067][T25851] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 2095.854987][T25844] usb 7-1: New USB device found, idVendor=05ac, idProduct=0262, bcdDevice= 0.40 [ 2095.874210][T25851] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2095.908602][T25844] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2095.917532][T25851] usb 6-1: Product: syz [ 2095.921784][T25844] usb 7-1: Product: syz [ 2095.927007][T25851] usb 6-1: Manufacturer: syz [ 2095.932131][T25844] usb 7-1: Manufacturer: syz [ 2095.940534][T25851] usb 6-1: SerialNumber: syz [ 2095.945945][T25844] usb 7-1: SerialNumber: syz [ 2095.955865][T25851] usb 6-1: config 0 descriptor?? [ 2095.973446][T25851] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 2096.188252][T25851] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 2096.213527][T25851] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 2096.234283][T25850] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 2096.336199][T25844] input: bcm5974 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/input/input112 [ 2096.358825][ T5195] bcm5974 7-1:1.0: could not read from device [ 2096.367463][ T5195] bcm5974 7-1:1.0: could not read from device [ 2096.392062][T25844] usb 7-1: USB disconnect, device number 53 [ 2096.399316][ T5195] bcm5974 7-1:1.0: could not read from device [ 2096.432162][T25850] usb 5-1: New USB device found, idVendor=09e8, idProduct=0062, bcdDevice= 0.40 [ 2096.461445][T25850] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2096.471959][T27310] udevd[27310]: Error opening device "/dev/input/event4": No such file or directory [ 2096.484971][T25850] usb 5-1: Product: syz [ 2096.493409][T27310] udevd[27310]: Unable to EVIOCGABS device "/dev/input/event4" [ 2096.501680][T25850] usb 5-1: SerialNumber: syz [ 2096.510255][T27310] udevd[27310]: Unable to EVIOCGABS device "/dev/input/event4" [ 2096.520900][T27310] udevd[27310]: Unable to EVIOCGABS device "/dev/input/event4" [ 2096.529656][T27310] udevd[27310]: Unable to EVIOCGABS device "/dev/input/event4" [ 2096.611600][ C0] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 2096.620343][T25851] usb 6-1: USB disconnect, device number 123 [ 2096.631301][T25851] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 2096.652577][T25851] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 2096.673069][T25851] quatech2 6-1:0.51: device disconnected [ 2096.729767][T25850] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 2096.778487][T25850] usb 5-1: USB disconnect, device number 68 [ 2097.184113][T19069] usb 7-1: new high-speed USB device number 54 using dummy_hcd [ 2097.257129][T31003] loop6: detected capacity change from 0 to 2640 [ 2097.276889][T31003] buffer_io_error: 32 callbacks suppressed [ 2097.276910][T31003] Buffer I/O error on dev loop6, logical block 0, async page read [ 2097.306333][T31003] Buffer I/O error on dev loop6, logical block 0, async page read [ 2097.315799][T31003] Buffer I/O error on dev loop6, logical block 0, async page read [ 2097.324992][T31003] Buffer I/O error on dev loop6, logical block 0, async page read [ 2097.333424][T31003] Buffer I/O error on dev loop6, logical block 0, async page read [ 2097.334147][T25850] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 2097.342284][T31003] Buffer I/O error on dev loop6, logical block 0, async page read [ 2097.358113][T19069] usb 7-1: Using ep0 maxpacket: 32 [ 2097.374386][T19069] usb 7-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 2097.390593][T19069] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2097.399433][T31003] Buffer I/O error on dev loop6, logical block 0, async page read [ 2097.407743][T19069] usb 7-1: Product: syz [ 2097.418342][T19069] usb 7-1: Manufacturer: syz [ 2097.423276][T19069] usb 7-1: SerialNumber: syz [ 2097.428680][T31003] Buffer I/O error on dev loop6, logical block 0, async page read [ 2097.442011][T19069] usb 7-1: config 0 descriptor?? [ 2097.464156][T19069] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 2097.476240][T31003] ldm_validate_partition_table(): Disk read failed. [ 2097.495175][T31003] Buffer I/O error on dev loop6, logical block 0, async page read [ 2097.506294][T31003] Buffer I/O error on dev loop6, logical block 0, async page read [ 2097.514996][T31003] Dev loop6: unable to read RDB block 0 [ 2097.522819][T31003] loop6: unable to read partition table [ 2097.532665][T25850] usb 1-1: config 0 has an invalid descriptor of length 105, skipping remainder of the config [ 2097.540012][T31003] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 2097.565462][T25850] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2097.585308][T25850] usb 1-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice=2f.dc [ 2097.614090][T25850] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2097.637039][T25850] usb 1-1: config 0 descriptor?? [ 2097.868913][T31001] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7371'. [ 2097.899747][T31013] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7374'. [ 2097.903190][T31001] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2097.919761][T31001] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2097.951019][T25850] usb 1-1: string descriptor 0 read error: -71 [ 2097.967176][T25850] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 2097.979579][T25850] usb 1-1: USB disconnect, device number 19 [ 2098.137371][T31016] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7375'. [ 2098.176244][T31016] libceph: resolve '0..' (ret=-3): failed [ 2098.623761][T25850] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 2098.646470][T31024] netlink: 24 bytes leftover after parsing attributes in process `syz.7.7378'. [ 2098.788223][T25850] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 2098.800046][T25850] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2098.817499][T25850] usb 5-1: Product: syz [ 2098.826196][T25850] usb 5-1: Manufacturer: syz [ 2098.835950][T25850] usb 5-1: SerialNumber: syz [ 2098.848187][T25850] usb 5-1: config 0 descriptor?? [ 2098.883328][T19069] gspca_ov534_9: reg_r err -32 [ 2099.163720][T19069] gspca_ov534_9: Unknown sensor 0000 [ 2099.163842][T19069] ov534_9 7-1:0.0: probe with driver ov534_9 failed with error -22 [ 2099.368726][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 2099.375775][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 2099.459238][T25850] usb 5-1: Firmware version (0.0) predates our first public release. [ 2099.467842][T25850] usb 5-1: Please update to version 0.2 or newer [ 2099.795417][T31036] netlink: 'syz.4.7376': attribute type 13 has an invalid length. [ 2099.958958][T19061] usb 7-1: USB disconnect, device number 54 [ 2100.042281][T31043] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7383'. [ 2100.052897][T31043] netlink: 6 bytes leftover after parsing attributes in process `syz.6.7383'. [ 2100.065259][T31043] ip6tnl0: Caught tx_queue_len zero misconfig [ 2100.143758][T19069] usb 6-1: new high-speed USB device number 124 using dummy_hcd [ 2100.186927][T31045] loop6: detected capacity change from 0 to 2640 [ 2100.195308][T31045] ldm_validate_partition_table(): Disk read failed. [ 2100.203105][T31045] Dev loop6: unable to read RDB block 0 [ 2100.209685][T31045] loop6: unable to read partition table [ 2100.217410][T31045] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 2100.305588][T19069] usb 6-1: Using ep0 maxpacket: 32 [ 2100.315256][T19069] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 2100.324423][T19069] usb 6-1: config 0 has no interface number 0 [ 2100.338569][T19069] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 2100.356288][T19069] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2100.373035][T19069] usb 6-1: Product: syz [ 2100.382147][T19069] usb 6-1: Manufacturer: syz [ 2100.392381][T19069] usb 6-1: SerialNumber: syz [ 2100.403766][T19069] usb 6-1: config 0 descriptor?? [ 2100.413393][T19069] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 2100.510162][T31050] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7385'. [ 2100.635741][T19069] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 2100.651374][T19069] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 2101.023748][T19069] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 2101.045927][ C1] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 2101.057881][T19061] usb 6-1: USB disconnect, device number 124 [ 2101.070511][T19061] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 2101.090214][T19061] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 2101.107639][T19061] quatech2 6-1:0.51: device disconnected [ 2101.185705][T19069] usb 1-1: config 0 has an invalid descriptor of length 105, skipping remainder of the config [ 2101.196634][T19069] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2101.210060][T19069] usb 1-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice=2f.dc [ 2101.219521][T19069] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2101.230487][T19069] usb 1-1: config 0 descriptor?? [ 2101.399276][T19061] usb 5-1: USB disconnect, device number 69 [ 2101.449026][T31055] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7387'. [ 2101.466282][T31055] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2101.478712][T31055] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2101.545973][T19069] usb 1-1: string descriptor 0 read error: -71 [ 2101.565922][T19069] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 2101.584941][T19069] usb 1-1: USB disconnect, device number 20 [ 2101.608329][T31059] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7388'. [ 2101.773310][T31061] netlink: 32 bytes leftover after parsing attributes in process `syz.6.7389'. [ 2101.786263][T31063] syzkaller0: entered promiscuous mode [ 2101.792365][T31063] syzkaller0: entered allmulticast mode [ 2101.845994][T31061] loop5: detected capacity change from 0 to 7 [ 2101.859303][T31061] Dev loop5: unable to read RDB block 7 [ 2101.866651][T31061] loop5: AHDI p1 p2 [ 2101.872297][T31061] loop5: partition table partially beyond EOD, truncated [ 2101.882112][T31061] loop5: p1 size 150995456 extends beyond EOD, truncated [ 2102.014190][T19061] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 2102.053790][T25850] usb 6-1: new full-speed USB device number 125 using dummy_hcd [ 2102.144145][T17399] usb 7-1: new high-speed USB device number 55 using dummy_hcd [ 2102.165395][T19061] usb 5-1: device descriptor read/64, error -71 [ 2102.216569][T25850] usb 6-1: not running at top speed; connect to a high speed hub [ 2102.225897][T25850] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2102.239896][T25850] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2102.249592][T25850] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2102.258600][T25850] usb 6-1: Product: 臥힘㵑瑷㟮韛⢮㬡鷷혘౯ᚱ㇪ᚦ䯊ᰨ㣇咒묪ⱄ᪅砎ꉍ亃閳ףּ球ᩆ䎹ʚ弇ꓯ曡鴿䡓꿅덊춙⾄牦➨`㻞㚧⓼炮签퓿 [ 2102.277602][T25850] usb 6-1: Manufacturer: 䄮豉댣贜勶‡쓙䨥㳔帖퀸蝽핎ꉑ솲쏻얝㣇臙臤ᛒꎜ엮ኤ䊒敏枱འꇪී螅껮쨶 [ 2102.292024][T25850] usb 6-1: SerialNumber: syz [ 2102.305587][T17399] usb 7-1: Using ep0 maxpacket: 8 [ 2102.313483][T17399] usb 7-1: unable to get BOS descriptor or descriptor too short [ 2102.323972][T17399] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 2102.335368][T17399] usb 7-1: config 1 interface 0 altsetting 0 has a duplicate endpoint with address 0x6, skipping [ 2102.353072][T17399] usb 7-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 2102.363346][T17399] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2102.372735][T17399] usb 7-1: Manufacturer: 哻헣ꘌ㯥쉎省㔄뎁牉䒊Ὣﴥ焝뉣嚙ｑꕗᮏ쇲ﹽ槉෮绷縻肷쳽䘂銑ឌ䋦 [ 2102.413976][T19061] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 2102.507400][T25850] cdc_ncm 6-1:1.0: bind() failure [ 2102.522153][T25850] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 2102.530867][T25850] cdc_ncm 6-1:1.1: bind() failure [ 2102.542899][T25850] usb 6-1: USB disconnect, device number 125 [ 2102.557482][T19061] usb 5-1: device descriptor read/64, error -71 [ 2102.610852][T17399] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 2102.628294][T17399] usb 7-1: MIDIStreaming interface descriptor not found [ 2102.674340][T19061] usb usb5-port1: attempt power cycle [ 2102.690120][T17399] usb 7-1: USB disconnect, device number 55 [ 2102.752081][T27172] udevd[27172]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2103.015757][T19061] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 2103.047042][T19061] usb 5-1: device descriptor read/8, error -71 [ 2103.236594][T17399] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 2103.284458][T19061] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 2103.314698][T19061] usb 5-1: device descriptor read/8, error -71 [ 2103.320428][T31080] __nla_validate_parse: 1 callbacks suppressed [ 2103.320447][T31080] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7396'. [ 2103.414093][T17399] usb 1-1: Using ep0 maxpacket: 32 [ 2103.429343][T17399] usb 1-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 2103.440996][T19061] usb usb5-port1: unable to enumerate USB device [ 2103.447682][T17399] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2103.457829][T17399] usb 1-1: Product: syz [ 2103.462101][T17399] usb 1-1: Manufacturer: syz [ 2103.468148][T17399] usb 1-1: SerialNumber: syz [ 2103.479614][T17399] usb 1-1: config 0 descriptor?? [ 2103.500361][T17399] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 2104.705498][T19061] usb 6-1: new high-speed USB device number 126 using dummy_hcd [ 2104.751697][T31095] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7401'. [ 2104.867942][T19061] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 2104.877406][T19061] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2104.885595][T19061] usb 6-1: Product: syz [ 2104.889855][T19061] usb 6-1: Manufacturer: syz [ 2104.894652][T19061] usb 6-1: SerialNumber: syz [ 2104.901769][T19061] usb 6-1: config 0 descriptor?? [ 2104.964019][T19069] usb 7-1: new high-speed USB device number 56 using dummy_hcd [ 2105.055363][T25850] usb 5-1: new full-speed USB device number 74 using dummy_hcd [ 2105.113720][T19069] usb 7-1: Using ep0 maxpacket: 32 [ 2105.121519][T19069] usb 7-1: config 0 has an invalid interface number: 51 but max is 0 [ 2105.130255][T19069] usb 7-1: config 0 has no interface number 0 [ 2105.139613][T19069] usb 7-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 2105.149298][T19069] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2105.157475][T19069] usb 7-1: Product: syz [ 2105.161955][T19069] usb 7-1: Manufacturer: syz [ 2105.166768][T19069] usb 7-1: SerialNumber: syz [ 2105.174511][T19069] usb 7-1: config 0 descriptor?? [ 2105.182908][T19069] quatech2 7-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 2105.225143][T25850] usb 5-1: unable to get BOS descriptor or descriptor too short [ 2105.236324][T25850] usb 5-1: not running at top speed; connect to a high speed hub [ 2105.246769][T25850] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1024, setting to 1023 [ 2105.260952][T25850] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 58, changing to 4 [ 2105.280594][T25850] usb 5-1: New USB device found, idVendor=0763, idProduct=2031, bcdDevice= 0.40 [ 2105.290230][T25850] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2105.299512][T25850] usb 5-1: Product: syz [ 2105.304123][T25850] usb 5-1: Manufacturer: syz [ 2105.308982][T25850] usb 5-1: SerialNumber: syz [ 2105.396565][T19069] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 2105.411828][T19069] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 2105.515360][T19061] usb 6-1: Firmware version (0.0) predates our first public release. [ 2105.524625][T19061] usb 6-1: Please update to version 0.2 or newer [ 2105.595983][T31095] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7401'. [ 2105.698675][T25850] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 2105.726848][T17399] gspca_ov534_9: reg_r err -71 [ 2105.756090][T31089] netlink: 'syz.5.7398': attribute type 13 has an invalid length. [ 2105.826641][T25850] usb 5-1: USB disconnect, device number 74 [ 2105.827328][ C1] usb 7-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 2105.845228][T19069] usb 7-1: USB disconnect, device number 56 [ 2105.884620][T19069] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 2105.919340][T19069] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 2105.941299][T19069] quatech2 7-1:0.51: device disconnected [ 2105.963685][T17399] gspca_ov534_9: Unknown sensor 0000 [ 2105.963798][T17399] ov534_9 1-1:0.0: probe with driver ov534_9 failed with error -22 [ 2105.998503][T17399] usb 1-1: USB disconnect, device number 21 [ 2106.041427][T19061] usb 6-1: USB disconnect, device number 126 [ 2106.138368][T27795] udevd[27795]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2106.979605][T31124] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7409'. [ 2107.003738][T25850] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 2107.108699][ T29] audit: type=1326 audit(1776932077.913:1548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31126 comm="syz.5.7410" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf701f01c code=0x0 [ 2107.164002][T25850] usb 5-1: Using ep0 maxpacket: 32 [ 2107.172959][T25850] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 2107.187521][T25850] usb 5-1: config 0 has no interface number 0 [ 2107.199748][T25850] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2107.224937][T25850] usb 5-1: config 0 interface 85 has no altsetting 0 [ 2107.244477][T25850] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 2107.270938][T25850] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2107.274377][T17399] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 2107.279889][T25850] usb 5-1: Product: syz [ 2107.291247][T25850] usb 5-1: Manufacturer: syz [ 2107.309930][T25850] usb 5-1: SerialNumber: syz [ 2107.325945][T25850] usb 5-1: config 0 descriptor?? [ 2107.434764][T17399] usb 1-1: device descriptor read/64, error -71 [ 2107.673806][T17399] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 2107.805790][T31130] FAULT_INJECTION: forcing a failure. [ 2107.805790][T31130] name failslab, interval 1, probability 0, space 0, times 0 [ 2107.819283][T17399] usb 1-1: device descriptor read/64, error -71 [ 2107.823921][T31130] CPU: 0 UID: 0 PID: 31130 Comm: syz.6.7411 Tainted: G L syzkaller #0 PREEMPT(full) [ 2107.823954][T31130] Tainted: [L]=SOFTLOCKUP [ 2107.823962][T31130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2107.823973][T31130] Call Trace: [ 2107.823986][T31130] [ 2107.823995][T31130] dump_stack_lvl+0xe8/0x150 [ 2107.824030][T31130] should_fail_ex+0x412/0x560 [ 2107.824064][T31130] should_failslab+0xa8/0x100 [ 2107.824091][T31130] __kmalloc_noprof+0xe8/0x760 [ 2107.824115][T31130] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 2107.824146][T31130] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 2107.824177][T31130] genl_family_rcv_msg_doit+0xd9/0x330 [ 2107.824207][T31130] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 2107.824238][T31130] ? apparmor_capable+0x126/0x170 [ 2107.824264][T31130] ? bpf_lsm_capable+0x9/0x20 [ 2107.824289][T31130] ? security_capable+0x7e/0x2c0 [ 2107.824323][T31130] genl_rcv_msg+0x61c/0x7a0 [ 2107.824353][T31130] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2107.824374][T31130] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 2107.824393][T31130] ? __pfx_nl80211_add_tx_ts+0x10/0x10 [ 2107.824410][T31130] ? __pfx_nl80211_post_doit+0x10/0x10 [ 2107.824443][T31130] netlink_rcv_skb+0x232/0x4b0 [ 2107.824472][T31130] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2107.824509][T31130] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2107.824552][T31130] ? down_read+0x270/0x2e0 [ 2107.824577][T31130] ? genl_rcv+0xd/0x40 [ 2107.824600][T31130] genl_rcv+0x28/0x40 [ 2107.824621][T31130] netlink_unicast+0x75c/0x8e0 [ 2107.824657][T31130] netlink_sendmsg+0x813/0xb40 [ 2107.824685][T31130] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2107.824714][T31130] ? aa_sock_msg_perm+0xf1/0x1b0 [ 2107.824735][T31130] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2107.824760][T31130] ____sys_sendmsg+0x972/0x9f0 [ 2107.824789][T31130] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2107.824814][T31130] ? kstrtoull+0x12f/0x1d0 [ 2107.824849][T31130] ___sys_sendmsg+0x2a5/0x360 [ 2107.824868][T31130] ? __lock_acquire+0x6b5/0x2cf0 [ 2107.824900][T31130] ? __pfx____sys_sendmsg+0x10/0x10 [ 2107.824923][T31130] ? get_pid_task+0x20/0x1f0 [ 2107.824944][T31130] ? get_pid_task+0x20/0x1f0 [ 2107.824963][T31130] ? get_pid_task+0x20/0x1f0 [ 2107.825008][T31130] ? __fget_files+0x2a/0x420 [ 2107.825027][T31130] ? __fget_files+0x3a0/0x420 [ 2107.825055][T31130] __sys_sendmsg+0x183/0x260 [ 2107.825078][T31130] ? __pfx___sys_sendmsg+0x10/0x10 [ 2107.825118][T31130] __do_fast_syscall_32+0x229/0x6e0 [ 2107.825144][T31130] ? do_fast_syscall_32+0x33/0x70 [ 2107.825167][T31130] ? lockdep_hardirqs_on+0x7a/0x110 [ 2107.825189][T31130] ? asm_int80_emulation+0x1a/0x20 [ 2107.825207][T31130] ? do_int80_emulation+0x286/0x530 [ 2107.825230][T31130] ? trace_irq_disable+0x3b/0x140 [ 2107.825257][T31130] do_fast_syscall_32+0x33/0x70 [ 2107.825282][T31130] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2107.825305][T31130] RIP: 0023:0xf70bf01c [ 2107.825323][T31130] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 2107.825340][T31130] RSP: 002b:00000000f54ad50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 2107.825362][T31130] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000180 [ 2107.825375][T31130] RDX: 0000000000028040 RSI: 0000000000000000 RDI: 0000000000000000 [ 2107.825387][T31130] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2107.825399][T31130] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2107.825410][T31130] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2107.825439][T31130] [ 2107.947763][T25850] appletouch 5-1:0.85: Geyser mode initialized. [ 2108.074181][T17399] usb usb1-port1: attempt power cycle [ 2108.200229][T25850] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.85/input/input113 [ 2108.232927][T25850] usb 5-1: USB disconnect, device number 75 [ 2108.233015][ C1] appletouch 5-1:0.85: atp_complete: usb_submit_urb failed with result -19 [ 2108.299187][T25850] appletouch 5-1:0.85: input: appletouch disconnected [ 2108.413819][T17399] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 2108.444434][T17399] usb 1-1: device descriptor read/8, error -71 [ 2108.694022][T17399] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 2108.715229][T17399] usb 1-1: device descriptor read/8, error -71 [ 2108.836817][T17399] usb usb1-port1: unable to enumerate USB device [ 2108.845210][T19061] usb 7-1: new high-speed USB device number 57 using dummy_hcd [ 2109.029235][T19061] usb 7-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 2109.042747][T19061] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2109.051270][T19061] usb 7-1: Product: syz [ 2109.056045][T19061] usb 7-1: Manufacturer: syz [ 2109.060735][T19061] usb 7-1: SerialNumber: syz [ 2109.068315][T19061] usb 7-1: config 0 descriptor?? [ 2109.173031][T31161] FAULT_INJECTION: forcing a failure. [ 2109.173031][T31161] name failslab, interval 1, probability 0, space 0, times 0 [ 2109.189567][T31161] CPU: 0 UID: 0 PID: 31161 Comm: syz.5.7420 Tainted: G L syzkaller #0 PREEMPT(full) [ 2109.189602][T31161] Tainted: [L]=SOFTLOCKUP [ 2109.189618][T31161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2109.189627][T31161] Call Trace: [ 2109.189632][T31161] [ 2109.189639][T31161] dump_stack_lvl+0xe8/0x150 [ 2109.189667][T31161] should_fail_ex+0x412/0x560 [ 2109.189702][T31161] should_failslab+0xa8/0x100 [ 2109.189729][T31161] ? skb_clone+0x212/0x3a0 [ 2109.189751][T31161] kmem_cache_alloc_noprof+0x87/0x650 [ 2109.189775][T31161] ? __netlink_lookup+0xc6/0x8b0 [ 2109.189802][T31161] skb_clone+0x212/0x3a0 [ 2109.189828][T31161] __netlink_deliver_tap+0x404/0x850 [ 2109.189858][T31161] ? netlink_deliver_tap+0x2e/0x1b0 [ 2109.189880][T31161] netlink_deliver_tap+0x19c/0x1b0 [ 2109.189902][T31161] netlink_unicast+0x730/0x8e0 [ 2109.189941][T31161] netlink_sendmsg+0x813/0xb40 [ 2109.189964][T31161] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2109.189979][T31161] ? aa_sock_msg_perm+0xf1/0x1b0 [ 2109.189993][T31161] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2109.190010][T31161] ____sys_sendmsg+0x972/0x9f0 [ 2109.190041][T31161] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2109.190069][T31161] ? kstrtoull+0x12f/0x1d0 [ 2109.190104][T31161] ___sys_sendmsg+0x2a5/0x360 [ 2109.190120][T31161] ? __lock_acquire+0x6b5/0x2cf0 [ 2109.190141][T31161] ? __pfx____sys_sendmsg+0x10/0x10 [ 2109.190156][T31161] ? get_pid_task+0x20/0x1f0 [ 2109.190171][T31161] ? get_pid_task+0x20/0x1f0 [ 2109.190190][T31161] ? get_pid_task+0x20/0x1f0 [ 2109.190239][T31161] ? __fget_files+0x2a/0x420 [ 2109.190259][T31161] ? __fget_files+0x3a0/0x420 [ 2109.190281][T31161] __sys_sendmsg+0x183/0x260 [ 2109.190296][T31161] ? __pfx___sys_sendmsg+0x10/0x10 [ 2109.190322][T31161] __do_fast_syscall_32+0x229/0x6e0 [ 2109.190349][T31161] ? do_fast_syscall_32+0x33/0x70 [ 2109.190374][T31161] ? lockdep_hardirqs_on+0x7a/0x110 [ 2109.190398][T31161] ? asm_int80_emulation+0x1a/0x20 [ 2109.190480][T31161] ? do_int80_emulation+0x286/0x530 [ 2109.190517][T31161] ? trace_irq_disable+0x3b/0x140 [ 2109.190553][T31161] do_fast_syscall_32+0x33/0x70 [ 2109.190583][T31161] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2109.190607][T31161] RIP: 0023:0xf701f01c [ 2109.190672][T31161] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 2109.190685][T31161] RSP: 002b:00000000f540d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 2109.190720][T31161] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800007c0 [ 2109.190736][T31161] RDX: 0000000024000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2109.190749][T31161] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2109.190761][T31161] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2109.190773][T31161] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2109.190811][T31161] [ 2109.640701][T31165] netlink: 20 bytes leftover after parsing attributes in process `syz.5.7421'. [ 2109.654020][T31165] FAULT_INJECTION: forcing a failure. [ 2109.654020][T31165] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2109.671684][T31165] CPU: 1 UID: 0 PID: 31165 Comm: syz.5.7421 Tainted: G L syzkaller #0 PREEMPT(full) [ 2109.671719][T31165] Tainted: [L]=SOFTLOCKUP [ 2109.671727][T31165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2109.671740][T31165] Call Trace: [ 2109.671753][T31165] [ 2109.671762][T31165] dump_stack_lvl+0xe8/0x150 [ 2109.671800][T31165] should_fail_ex+0x412/0x560 [ 2109.671836][T31165] _copy_from_user+0x2d/0xb0 [ 2109.671861][T31165] kstrtouint_from_user+0xd6/0x180 [ 2109.671895][T31165] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 2109.671940][T31165] proc_fail_nth_write+0x8e/0x210 [ 2109.671970][T31165] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 2109.671997][T31165] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 2109.672018][T31165] vfs_write+0x29a/0xb90 [ 2109.672050][T31165] ? __pfx_vfs_write+0x10/0x10 [ 2109.672074][T31165] ? __fget_files+0x2a/0x420 [ 2109.672099][T31165] ? __fget_files+0x3a0/0x420 [ 2109.672118][T31165] ? __fget_files+0x2a/0x420 [ 2109.672148][T31165] ksys_write+0x150/0x270 [ 2109.672175][T31165] ? __pfx_ksys_write+0x10/0x10 [ 2109.672201][T31165] ? asm_int80_emulation+0x1a/0x20 [ 2109.672227][T31165] do_int80_emulation+0x181/0x530 [ 2109.672254][T31165] ? trace_irq_disable+0x3b/0x140 [ 2109.672278][T31165] ? asm_int80_emulation+0x1a/0x20 [ 2109.672297][T31165] ? clear_bhb_loop+0x40/0x90 [ 2109.672316][T31165] ? clear_bhb_loop+0x40/0x90 [ 2109.672341][T31165] asm_int80_emulation+0x1a/0x20 [ 2109.672360][T31165] RIP: 0023:0xf7155cab [ 2109.672379][T31165] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 2109.672395][T31165] RSP: 002b:00000000f540d4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 2109.672418][T31165] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f540d5d0 [ 2109.672433][T31165] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 2109.672444][T31165] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2109.672455][T31165] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2109.672467][T31165] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2109.672495][T31165] [ 2109.954110][T25850] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 2109.957367][T31169] FAULT_INJECTION: forcing a failure. [ 2109.957367][T31169] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2109.977092][T31169] CPU: 1 UID: 0 PID: 31169 Comm: syz.5.7424 Tainted: G L syzkaller #0 PREEMPT(full) [ 2109.977127][T31169] Tainted: [L]=SOFTLOCKUP [ 2109.977135][T31169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2109.977148][T31169] Call Trace: [ 2109.977157][T31169] [ 2109.977166][T31169] dump_stack_lvl+0xe8/0x150 [ 2109.977207][T31169] should_fail_ex+0x412/0x560 [ 2109.977242][T31169] _copy_from_iter+0x1d3/0x1670 [ 2109.977276][T31169] ? __pfx__copy_from_iter+0x10/0x10 [ 2109.977303][T31169] ? raw_sendmsg+0x74d/0x1a50 [ 2109.977329][T31169] raw_sendmsg+0x112c/0x1a50 [ 2109.977366][T31169] ? __pfx_raw_sendmsg+0x10/0x10 [ 2109.977402][T31169] ? aa_sk_perm+0x6d5/0x900 [ 2109.977434][T31169] ? __might_fault+0xaf/0x130 [ 2109.977462][T31169] ? __pfx_aa_sk_perm+0x10/0x10 [ 2109.977491][T31169] ? tomoyo_socket_sendmsg_permission+0x215/0x300 [ 2109.977519][T31169] ? sock_rps_record_flow+0x19/0x350 [ 2109.977546][T31169] ? inet_sendmsg+0x2f4/0x370 [ 2109.977568][T31169] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2109.977597][T31169] ____sys_sendmsg+0x80a/0x9f0 [ 2109.977631][T31169] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2109.977668][T31169] ___sys_sendmsg+0x2a5/0x360 [ 2109.977690][T31169] ? __lock_acquire+0x6b5/0x2cf0 [ 2109.977726][T31169] ? __pfx____sys_sendmsg+0x10/0x10 [ 2109.977754][T31169] ? kstrtoull+0x12f/0x1d0 [ 2109.977811][T31169] ? __fget_files+0x2a/0x420 [ 2109.977832][T31169] ? __fget_files+0x3a0/0x420 [ 2109.977864][T31169] __sys_sendmmsg+0x2e7/0x4e0 [ 2109.977894][T31169] ? __pfx___sys_sendmmsg+0x10/0x10 [ 2109.977954][T31169] ? fput+0xa0/0xd0 [ 2109.977975][T31169] ? ksys_write+0x242/0x270 [ 2109.978009][T31169] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 2109.978037][T31169] __do_fast_syscall_32+0x229/0x6e0 [ 2109.978066][T31169] ? do_fast_syscall_32+0x33/0x70 [ 2109.978091][T31169] ? lockdep_hardirqs_on+0x7a/0x110 [ 2109.978116][T31169] ? asm_int80_emulation+0x1a/0x20 [ 2109.978136][T31169] ? do_int80_emulation+0x286/0x530 [ 2109.978163][T31169] ? trace_irq_disable+0x3b/0x140 [ 2109.978194][T31169] do_fast_syscall_32+0x33/0x70 [ 2109.978222][T31169] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2109.978247][T31169] RIP: 0023:0xf701f01c [ 2109.978266][T31169] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 2109.978284][T31169] RSP: 002b:00000000f540d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000159 [ 2109.978309][T31169] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080001240 [ 2109.978324][T31169] RDX: 0000000000000002 RSI: 0000000000008000 RDI: 0000000000000000 [ 2109.978337][T31169] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2109.978350][T31169] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2109.978363][T31169] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2109.978394][T31169] [ 2110.275931][T19061] usb 7-1: Firmware version (0.0) predates our first public release. [ 2110.284164][T19061] usb 7-1: Please update to version 0.2 or newer [ 2110.381491][T25850] usb 5-1: config 0 has an invalid descriptor of length 105, skipping remainder of the config [ 2110.394434][T25850] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2110.408906][T25850] usb 5-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice=2f.dc [ 2110.418628][T25850] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2110.460304][T25850] usb 5-1: config 0 descriptor?? [ 2110.482679][T31177] input: syz0 as /devices/virtual/input/input114 [ 2110.500555][T31177] input: failed to attach handler leds to device input114, error: -6 [ 2110.511013][T31149] netlink: 'syz.6.7417': attribute type 13 has an invalid length. [ 2110.561951][T19061] usb 7-1: USB disconnect, device number 57 [ 2110.611657][T31181] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 2110.679734][T31167] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7423'. [ 2110.694690][T31167] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2110.706211][T31167] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2110.788437][T25850] usb 5-1: string descriptor 0 read error: -71 [ 2110.803156][T25850] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 2110.817548][T25850] usb 5-1: USB disconnect, device number 76 [ 2111.004960][T31188] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7429'. [ 2111.015456][T31189] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7429'. [ 2111.027340][T31188] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 2111.140475][T31191] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7430'. [ 2111.151111][T31191] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7430'. [ 2111.200615][T31193] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7431'. [ 2111.213347][T31193] binder: BINDER_SET_CONTEXT_MGR already set [ 2111.233037][T31193] binder: 31192:31193 ioctl 4018620d 80004a80 returned -16 [ 2111.272874][T31191] loop5: detected capacity change from 0 to 7 [ 2111.278339][T31195] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7432'. [ 2111.282624][T31191] Dev loop5: unable to read RDB block 7 [ 2111.295952][T31191] loop5: AHDI p1 p2 [ 2111.304021][T31191] loop5: partition table partially beyond EOD, truncated [ 2111.321715][T31191] loop5: p1 size 150995456 extends beyond EOD, truncated [ 2111.448496][T13853] Bluetooth: hci1: unexpected event 0x30 length: 255 > 3 [ 2111.484513][T25850] usb 6-1: new high-speed USB device number 127 using dummy_hcd [ 2111.620411][T31206] netlink: 28 bytes leftover after parsing attributes in process `syz.7.7435'. [ 2111.633912][T25850] usb 6-1: device descriptor read/64, error -71 [ 2111.663795][T19061] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 2111.692310][T13853] Bluetooth: hci3: command 0x0406 tx timeout [ 2111.816805][T19061] usb 1-1: Using ep0 maxpacket: 8 [ 2111.830957][T19061] usb 1-1: unable to get BOS descriptor or descriptor too short [ 2111.840631][T19061] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 2111.854689][T19061] usb 1-1: config 1 interface 0 altsetting 0 has a duplicate endpoint with address 0x6, skipping [ 2111.873053][T19061] usb 1-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 2111.873959][T25850] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 2111.882484][T19061] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2111.899550][T19061] usb 1-1: Manufacturer: 哻헣ꘌ㯥쉎省㔄뎁牉䒊Ὣﴥ焝뉣嚙ｑꕗᮏ쇲ﹽ槉෮绷縻肷쳽䘂銑ឌ䋦 [ 2112.045344][T25850] usb 6-1: device descriptor read/64, error -71 [ 2112.138926][T19061] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 2112.153738][T19061] usb 1-1: MIDIStreaming interface descriptor not found [ 2112.155083][T25850] usb usb6-port1: attempt power cycle [ 2112.215633][T19061] usb 1-1: USB disconnect, device number 26 [ 2112.267711][T25851] usb 7-1: new high-speed USB device number 58 using dummy_hcd [ 2112.276114][T27172] udevd[27172]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2112.424026][T25851] usb 7-1: Using ep0 maxpacket: 32 [ 2112.439173][T25851] usb 7-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 2112.454155][T25851] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2112.463941][T25851] usb 7-1: Product: syz [ 2112.472545][T25851] usb 7-1: Manufacturer: syz [ 2112.482696][T25851] usb 7-1: SerialNumber: syz [ 2112.503096][T25851] usb 7-1: config 0 descriptor?? [ 2112.514030][T25850] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 2112.528539][T25851] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 2112.555395][T25850] usb 6-1: device descriptor read/8, error -71 [ 2112.557339][T31220] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7441'. [ 2112.794264][T25850] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 2112.813096][ T36] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2112.830429][T25850] usb 6-1: device descriptor read/8, error -71 [ 2112.884043][T25844] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 2112.944349][T25850] usb usb6-port1: unable to enumerate USB device [ 2113.037755][T25844] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 2113.047820][T25844] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2113.056445][T25844] usb 5-1: Product: syz [ 2113.060974][T25844] usb 5-1: Manufacturer: syz [ 2113.066661][T25844] usb 5-1: SerialNumber: syz [ 2113.073986][T25844] usb 5-1: config 0 descriptor?? [ 2113.083825][T19069] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 2113.233831][T19069] usb 1-1: Using ep0 maxpacket: 32 [ 2113.243237][T19069] usb 1-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 2113.252475][T19069] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2113.260581][T19069] usb 1-1: Product: syz [ 2113.264880][T19069] usb 1-1: Manufacturer: syz [ 2113.269520][T19069] usb 1-1: SerialNumber: syz [ 2113.278897][T19069] usb 1-1: config 0 descriptor?? [ 2113.292396][T19069] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 2113.691206][T25844] usb 5-1: Firmware version (0.0) predates our first public release. [ 2113.699815][T25844] usb 5-1: Please update to version 0.2 or newer [ 2113.910573][T31222] netlink: 'syz.4.7442': attribute type 13 has an invalid length. [ 2113.980405][T25844] usb 5-1: USB disconnect, device number 77 [ 2114.283151][ T29] audit: type=1326 audit(1776932085.083:1549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31227 comm="syz.5.7444" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf701f01c code=0x0 [ 2114.743002][T25851] gspca_ov534_9: sccb_write failed [ 2114.823785][T19061] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 2114.952448][T25851] gspca_ov534_9: reg_w failed -71 [ 2114.983724][T19061] usb 5-1: Using ep0 maxpacket: 32 [ 2114.991742][T19061] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 2115.001756][T19061] usb 5-1: config 0 has no interface number 0 [ 2115.014314][T19061] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 2115.025152][T19061] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2115.040165][T19061] usb 5-1: Product: syz [ 2115.046922][T19061] usb 5-1: Manufacturer: syz [ 2115.053008][T19061] usb 5-1: SerialNumber: syz [ 2115.068118][T19061] usb 5-1: config 0 descriptor?? [ 2115.083232][T19061] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 2115.204350][T25851] gspca_ov534_9: Unknown sensor 0000 [ 2115.204482][T25851] ov534_9 7-1:0.0: probe with driver ov534_9 failed with error -22 [ 2115.240870][T25851] usb 7-1: USB disconnect, device number 58 [ 2115.321724][T19061] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 2115.351664][T19061] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 2115.521918][T19069] gspca_ov534_9: reg_r err -71 [ 2115.574256][T25850] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 2115.662072][T31244] netlink: 16 bytes leftover after parsing attributes in process `syz.6.7449'. [ 2115.724571][ C1] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 2115.733235][T19061] usb 5-1: USB disconnect, device number 78 [ 2115.733985][T25850] usb 6-1: Using ep0 maxpacket: 16 [ 2115.746644][T19061] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 2115.748759][T25850] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 2115.774419][T25850] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2115.780861][T19069] gspca_ov534_9: Unknown sensor 0000 [ 2115.789308][T25850] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 2115.792028][T19069] ov534_9 1-1:0.0: probe with driver ov534_9 failed with error -22 [ 2115.795997][T25850] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2115.822044][T25850] usb 6-1: Product: syz [ 2115.823083][T19061] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 2115.826787][T25850] usb 6-1: Manufacturer: syz [ 2115.847966][T25850] usb 6-1: SerialNumber: syz [ 2115.854934][T19069] usb 1-1: USB disconnect, device number 27 [ 2115.860919][T25850] usb 6-1: config 0 descriptor?? [ 2115.890525][T19061] quatech2 5-1:0.51: device disconnected [ 2115.898771][T25850] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 2115.909858][T25850] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 2116.397279][T31255] netlink: 'syz.4.7451': attribute type 27 has an invalid length. [ 2116.454540][T31257] sctp: [Deprecated]: syz.4.7451 (pid 31257) Use of int in max_burst socket option deprecated. [ 2116.454540][T31257] Use struct sctp_assoc_value instead [ 2116.489153][T25850] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 2116.498296][T31255] vlan0: left promiscuous mode [ 2116.498615][T25850] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 2116.533485][T31258] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7452'. [ 2116.612500][T31257] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2116.622426][T31257] 8021q: adding VLAN 0 to HW filter on device team0 [ 2116.641158][T31257] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2116.733456][T25850] em28xx 6-1:0.0: AC97 chip type couldn't be determined [ 2116.755076][T25850] em28xx 6-1:0.0: No AC97 audio processor [ 2116.954088][T19061] usb 7-1: new high-speed USB device number 59 using dummy_hcd [ 2117.020814][T31269] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2117.057372][T31269] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2117.103824][T19061] usb 7-1: device descriptor read/64, error -71 [ 2117.130460][T31272] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7456'. [ 2117.321968][ T29] audit: type=1326 audit(1776932088.123:1550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31274 comm="syz.6.7457" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70bf01c code=0x0 [ 2117.349409][T31273] netlink: 'syz.0.7454': attribute type 23 has an invalid length. [ 2117.403751][T25850] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 2117.543874][T25850] usb 5-1: device descriptor read/64, error -71 [ 2117.793778][T25850] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 2117.934481][T25850] usb 5-1: device descriptor read/64, error -71 [ 2118.044340][T25850] usb usb5-port1: attempt power cycle [ 2118.346463][T19069] usb 6-1: USB disconnect, device number 5 [ 2118.355841][T19069] em28xx 6-1:0.0: Disconnecting em28xx [ 2118.383294][T19069] em28xx 6-1:0.0: Freeing device [ 2118.396707][T25850] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 2118.444710][T25850] usb 5-1: device descriptor read/8, error -71 [ 2118.556322][T19061] usb 7-1: new high-speed USB device number 61 using dummy_hcd [ 2118.694135][T25850] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 2118.726993][T25850] usb 5-1: device descriptor read/8, error -71 [ 2118.753778][T19061] usb 7-1: Using ep0 maxpacket: 16 [ 2118.767360][T19061] usb 7-1: New USB device found, idVendor=05d1, idProduct=2002, bcdDevice= 5.00 [ 2118.786620][T19061] usb 7-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 2118.801413][T19061] usb 7-1: Product: syz [ 2118.808226][T19061] usb 7-1: SerialNumber: syz [ 2118.819368][T19061] usb 7-1: config 0 descriptor?? [ 2118.836558][T19061] ftdi_sio 7-1:0.0: FTDI USB Serial Device converter detected [ 2118.847630][T25850] usb usb5-port1: unable to enumerate USB device [ 2118.859302][T19061] usb 7-1: Detected FT2232C/D [ 2118.953801][T25851] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 2119.084149][T31286] vim2m vim2m.0: Fourcc format (0x47425247) invalid. [ 2119.113752][T25851] usb 6-1: Using ep0 maxpacket: 8 [ 2119.122762][T31298] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7464'. [ 2119.123323][T25851] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2119.150519][T25851] usb 6-1: New USB device found, idVendor=0421, idProduct=798f, bcdDevice=86.54 [ 2119.161886][T19061] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 2119.168104][T25851] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2119.178610][T25851] usb 6-1: Product: syz [ 2119.180372][T19061] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 2119.183213][T25851] usb 6-1: Manufacturer: syz [ 2119.197482][T25851] usb 6-1: SerialNumber: syz [ 2119.208435][T25851] usb 6-1: config 0 descriptor?? [ 2119.219461][T25851] cdc_phonet 6-1:0.0: probe with driver cdc_phonet failed with error -22 [ 2119.220447][T19061] usb 7-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 2119.264665][T19061] usb 7-1: USB disconnect, device number 61 [ 2119.278867][T19061] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 2119.301386][T19061] ftdi_sio 7-1:0.0: device disconnected [ 2119.431107][T31296] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2119.452218][T31296] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2119.486384][T31296] syzkaller0: entered promiscuous mode [ 2119.492256][T31296] syzkaller0: entered allmulticast mode [ 2119.657189][T19061] usb 6-1: USB disconnect, device number 6 [ 2119.798889][T31305] x_tables: duplicate underflow at hook 2 [ 2119.875976][T31307] FAULT_INJECTION: forcing a failure. [ 2119.875976][T31307] name failslab, interval 1, probability 0, space 0, times 0 [ 2119.889373][T31307] CPU: 0 UID: 0 PID: 31307 Comm: syz.6.7467 Tainted: G L syzkaller #0 PREEMPT(full) [ 2119.889396][T31307] Tainted: [L]=SOFTLOCKUP [ 2119.889401][T31307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2119.889409][T31307] Call Trace: [ 2119.889414][T31307] [ 2119.889421][T31307] dump_stack_lvl+0xe8/0x150 [ 2119.889447][T31307] should_fail_ex+0x412/0x560 [ 2119.889470][T31307] should_failslab+0xa8/0x100 [ 2119.889489][T31307] __kmalloc_cache_noprof+0x88/0x660 [ 2119.889506][T31307] ? nfnetlink_rcv+0xfdf/0x27b0 [ 2119.889528][T31307] nfnetlink_rcv+0xfdf/0x27b0 [ 2119.889565][T31307] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 2119.889616][T31307] ? netlink_deliver_tap+0x2e/0x1b0 [ 2119.889635][T31307] ? netlink_deliver_tap+0x2e/0x1b0 [ 2119.889647][T31307] ? netlink_deliver_tap+0x2e/0x1b0 [ 2119.889662][T31307] netlink_unicast+0x75c/0x8e0 [ 2119.889686][T31307] netlink_sendmsg+0x813/0xb40 [ 2119.889704][T31307] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2119.889719][T31307] ? aa_sock_msg_perm+0xf1/0x1b0 [ 2119.889734][T31307] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2119.889752][T31307] ____sys_sendmsg+0x972/0x9f0 [ 2119.889772][T31307] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2119.889788][T31307] ? kstrtoull+0x12f/0x1d0 [ 2119.889811][T31307] ___sys_sendmsg+0x2a5/0x360 [ 2119.889824][T31307] ? __lock_acquire+0x6b5/0x2cf0 [ 2119.889848][T31307] ? __pfx____sys_sendmsg+0x10/0x10 [ 2119.889863][T31307] ? get_pid_task+0x20/0x1f0 [ 2119.889877][T31307] ? get_pid_task+0x20/0x1f0 [ 2119.889889][T31307] ? get_pid_task+0x20/0x1f0 [ 2119.889918][T31307] ? __fget_files+0x2a/0x420 [ 2119.889930][T31307] ? __fget_files+0x3a0/0x420 [ 2119.889949][T31307] __sys_sendmsg+0x183/0x260 [ 2119.889964][T31307] ? __pfx___sys_sendmsg+0x10/0x10 [ 2119.889990][T31307] __do_fast_syscall_32+0x229/0x6e0 [ 2119.890008][T31307] ? do_fast_syscall_32+0x33/0x70 [ 2119.890024][T31307] ? lockdep_hardirqs_on+0x7a/0x110 [ 2119.890039][T31307] ? asm_int80_emulation+0x1a/0x20 [ 2119.890051][T31307] ? do_int80_emulation+0x286/0x530 [ 2119.890068][T31307] ? trace_irq_disable+0x3b/0x140 [ 2119.890086][T31307] do_fast_syscall_32+0x33/0x70 [ 2119.890104][T31307] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2119.890119][T31307] RIP: 0023:0xf70bf01c [ 2119.890132][T31307] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 2119.890143][T31307] RSP: 002b:00000000f54ad50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 2119.890158][T31307] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0 [ 2119.890167][T31307] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2119.890174][T31307] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2119.890182][T31307] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2119.890189][T31307] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2119.890207][T31307] [ 2120.341794][ T29] audit: type=1326 audit(1776932091.143:1551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31308 comm="syz.0.7469" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf6fef01c code=0x0 [ 2120.379379][T31313] FAULT_INJECTION: forcing a failure. [ 2120.379379][T31313] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2120.393393][T31313] CPU: 0 UID: 0 PID: 31313 Comm: syz.6.7470 Tainted: G L syzkaller #0 PREEMPT(full) [ 2120.393427][T31313] Tainted: [L]=SOFTLOCKUP [ 2120.393435][T31313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2120.393448][T31313] Call Trace: [ 2120.393456][T31313] [ 2120.393465][T31313] dump_stack_lvl+0xe8/0x150 [ 2120.393500][T31313] should_fail_ex+0x412/0x560 [ 2120.393536][T31313] prepare_alloc_pages+0x22a/0x650 [ 2120.393566][T31313] __alloc_frozen_pages_noprof+0x12f/0x380 [ 2120.393644][T31313] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 2120.393670][T31313] ? __pfx_policy_nodemask+0x10/0x10 [ 2120.393693][T31313] ? trace_kmem_cache_alloc+0x29/0xe0 [ 2120.393714][T31313] ? kmem_cache_alloc_node_noprof+0x3ce/0x690 [ 2120.393737][T31313] alloc_pages_mpol+0x235/0x490 [ 2120.393762][T31313] alloc_pages_noprof+0xac/0x2a0 [ 2120.393787][T31313] alloc_skb_with_frags+0x265/0x760 [ 2120.393813][T31313] sock_alloc_send_pskb+0x878/0x990 [ 2120.393849][T31313] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 2120.393878][T31313] ? iov_iter_advance+0x8b/0x1c0 [ 2120.393896][T31313] tun_get_user+0x5df/0x43e0 [ 2120.393932][T31313] ? aa_file_perm+0x192/0x15e0 [ 2120.393955][T31313] ? aa_file_perm+0x50e/0x15e0 [ 2120.393971][T31313] ? __pfx_tun_get_user+0x10/0x10 [ 2120.393997][T31313] ? __lock_acquire+0x6b5/0x2cf0 [ 2120.394026][T31313] ? kstrtoull+0x12f/0x1d0 [ 2120.394053][T31313] ? ref_tracker_alloc+0x35c/0x4c0 [ 2120.394072][T31313] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 2120.394090][T31313] ? tun_get+0x1c/0x2f0 [ 2120.394114][T31313] ? tun_get+0x1c/0x2f0 [ 2120.394141][T31313] ? tun_get+0x1c/0x2f0 [ 2120.394165][T31313] ? tun_get+0x1c/0x2f0 [ 2120.394191][T31313] tun_chr_write_iter+0x113/0x200 [ 2120.394217][T31313] vfs_write+0x61d/0xb90 [ 2120.394245][T31313] ? __pfx_vfs_write+0x10/0x10 [ 2120.394272][T31313] ? __fget_files+0x2a/0x420 [ 2120.394296][T31313] ksys_write+0x150/0x270 [ 2120.394318][T31313] ? __pfx_ksys_write+0x10/0x10 [ 2120.394345][T31313] __do_fast_syscall_32+0x229/0x6e0 [ 2120.394369][T31313] ? do_fast_syscall_32+0x33/0x70 [ 2120.394390][T31313] ? lockdep_hardirqs_on+0x7a/0x110 [ 2120.394410][T31313] ? asm_int80_emulation+0x1a/0x20 [ 2120.394425][T31313] ? do_int80_emulation+0x286/0x530 [ 2120.394446][T31313] ? trace_irq_disable+0x3b/0x140 [ 2120.394471][T31313] do_fast_syscall_32+0x33/0x70 [ 2120.394494][T31313] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2120.394513][T31313] RIP: 0023:0xf70bf01c [ 2120.394529][T31313] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 2120.394544][T31313] RSP: 002b:00000000f54ad50c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 2120.394563][T31313] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0 [ 2120.394575][T31313] RDX: 0000000000000ffe RSI: 0000000000000000 RDI: 0000000000000000 [ 2120.394594][T31313] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2120.394603][T31313] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2120.394613][T31313] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2120.394636][T31313] [ 2120.837158][T19061] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 2120.963790][T25851] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 2121.009011][T19061] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2121.024433][T19061] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2121.042023][T19061] usb 5-1: Product: syz [ 2121.050884][T19061] usb 5-1: Manufacturer: syz [ 2121.056818][T19061] usb 5-1: SerialNumber: syz [ 2121.116425][T25851] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2121.130031][T25851] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2121.174596][T25851] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2121.193083][T25851] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2121.366963][T19061] cdc_ncm 5-1:1.0: bind() failure [ 2121.414426][T19061] cdc_ncm 5-1:1.1: probe with driver cdc_ncm failed with error -71 [ 2121.438870][T25851] usb 6-1: usb_control_msg returned -32 [ 2121.449696][T19061] cdc_mbim 5-1:1.1: probe with driver cdc_mbim failed with error -71 [ 2121.458485][T25851] usbtmc 6-1:16.0: can't read capabilities [ 2121.460228][T19061] usbtest 5-1:1.1: probe with driver usbtest failed with error -71 [ 2121.507941][T19061] usb 5-1: USB disconnect, device number 83 [ 2121.985970][T31339] vlan0: entered promiscuous mode [ 2122.361893][T31349] netlink: 28 bytes leftover after parsing attributes in process `syz.7.7478'. [ 2122.513358][ T29] audit: type=1326 audit(1776932093.313:1552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31352 comm="syz.6.7483" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70bf01c code=0x0 [ 2122.561003][T31357] FAULT_INJECTION: forcing a failure. [ 2122.561003][T31357] name failslab, interval 1, probability 0, space 0, times 0 [ 2122.574838][T31357] CPU: 1 UID: 0 PID: 31357 Comm: syz.4.7484 Tainted: G L syzkaller #0 PREEMPT(full) [ 2122.574872][T31357] Tainted: [L]=SOFTLOCKUP [ 2122.574879][T31357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2122.574891][T31357] Call Trace: [ 2122.574899][T31357] [ 2122.574909][T31357] dump_stack_lvl+0xe8/0x150 [ 2122.574944][T31357] should_fail_ex+0x412/0x560 [ 2122.574983][T31357] should_failslab+0xa8/0x100 [ 2122.575008][T31357] ? skb_clone+0x212/0x3a0 [ 2122.575022][T31357] kmem_cache_alloc_noprof+0x87/0x650 [ 2122.575038][T31357] ? __netlink_lookup+0xc6/0x8b0 [ 2122.575055][T31357] skb_clone+0x212/0x3a0 [ 2122.575071][T31357] __netlink_deliver_tap+0x404/0x850 [ 2122.575091][T31357] ? netlink_deliver_tap+0x2e/0x1b0 [ 2122.575104][T31357] netlink_deliver_tap+0x19c/0x1b0 [ 2122.575117][T31357] netlink_unicast+0x730/0x8e0 [ 2122.575144][T31357] netlink_sendmsg+0x813/0xb40 [ 2122.575174][T31357] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2122.575199][T31357] ? aa_sock_msg_perm+0xf1/0x1b0 [ 2122.575221][T31357] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2122.575249][T31357] ____sys_sendmsg+0x972/0x9f0 [ 2122.575270][T31357] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2122.575294][T31357] ? kstrtoull+0x12f/0x1d0 [ 2122.575418][T31357] ___sys_sendmsg+0x2a5/0x360 [ 2122.575435][T31357] ? __lock_acquire+0x6b5/0x2cf0 [ 2122.575458][T31357] ? __pfx____sys_sendmsg+0x10/0x10 [ 2122.575473][T31357] ? get_pid_task+0x20/0x1f0 [ 2122.575488][T31357] ? get_pid_task+0x20/0x1f0 [ 2122.575500][T31357] ? get_pid_task+0x20/0x1f0 [ 2122.575563][T31357] ? __fget_files+0x2a/0x420 [ 2122.575577][T31357] ? __fget_files+0x3a0/0x420 [ 2122.575596][T31357] __sys_sendmsg+0x183/0x260 [ 2122.575612][T31357] ? __pfx___sys_sendmsg+0x10/0x10 [ 2122.575639][T31357] __do_fast_syscall_32+0x229/0x6e0 [ 2122.575657][T31357] ? do_fast_syscall_32+0x33/0x70 [ 2122.575674][T31357] ? lockdep_hardirqs_on+0x7a/0x110 [ 2122.575757][T31357] ? asm_int80_emulation+0x1a/0x20 [ 2122.575770][T31357] ? do_int80_emulation+0x286/0x530 [ 2122.575786][T31357] ? trace_irq_disable+0x3b/0x140 [ 2122.575818][T31357] do_fast_syscall_32+0x33/0x70 [ 2122.575836][T31357] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2122.575852][T31357] RIP: 0023:0xf6fef01c [ 2122.575865][T31357] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 2122.575877][T31357] RSP: 002b:00000000f53dd50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 2122.575892][T31357] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 2122.575902][T31357] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2122.575910][T31357] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2122.575917][T31357] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2122.575925][T31357] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2122.575943][T31357] [ 2122.753850][T19061] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 2122.915894][T19061] usb 1-1: config 0 has an invalid descriptor of length 105, skipping remainder of the config [ 2122.930667][T17399] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 2122.939306][T19061] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2122.954193][T19061] usb 1-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice=2f.dc [ 2122.963504][T19061] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2122.975834][T19061] usb 1-1: config 0 descriptor?? [ 2123.113767][T17399] usb 5-1: Using ep0 maxpacket: 32 [ 2123.125797][T17399] usb 5-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 2123.135268][T17399] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2123.144097][T17399] usb 5-1: Product: syz [ 2123.148438][T17399] usb 5-1: Manufacturer: syz [ 2123.153105][T17399] usb 5-1: SerialNumber: syz [ 2123.161038][T17399] usb 5-1: config 0 descriptor?? [ 2123.172875][T17399] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 2123.192756][T31354] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2123.205576][T31354] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2123.221060][T19061] usb 1-1: string descriptor 0 read error: -71 [ 2123.231628][T19061] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 2123.245454][T19061] usb 1-1: USB disconnect, device number 28 [ 2123.693758][T25851] usb 7-1: new high-speed USB device number 62 using dummy_hcd [ 2123.757754][T25850] usb 6-1: USB disconnect, device number 7 [ 2123.844100][T25851] usb 7-1: Using ep0 maxpacket: 32 [ 2123.856264][T25851] usb 7-1: config 0 has an invalid interface number: 51 but max is 0 [ 2123.869688][T25851] usb 7-1: config 0 has no interface number 0 [ 2123.879982][T25851] usb 7-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 2123.890541][T25851] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2123.899620][T25851] usb 7-1: Product: syz [ 2123.904426][T25851] usb 7-1: Manufacturer: syz [ 2123.909477][T25851] usb 7-1: SerialNumber: syz [ 2123.910909][T31366] FAULT_INJECTION: forcing a failure. [ 2123.910909][T31366] name failslab, interval 1, probability 0, space 0, times 0 [ 2123.919840][T25851] usb 7-1: config 0 descriptor?? [ 2123.927330][T31366] CPU: 1 UID: 0 PID: 31366 Comm: syz.0.7488 Tainted: G L syzkaller #0 PREEMPT(full) [ 2123.927365][T31366] Tainted: [L]=SOFTLOCKUP [ 2123.927372][T31366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2123.927383][T31366] Call Trace: [ 2123.927394][T31366] [ 2123.927403][T31366] dump_stack_lvl+0xe8/0x150 [ 2123.927440][T31366] should_fail_ex+0x412/0x560 [ 2123.927474][T31366] should_failslab+0xa8/0x100 [ 2123.927500][T31366] ? skb_clone+0x212/0x3a0 [ 2123.927522][T31366] kmem_cache_alloc_noprof+0x87/0x650 [ 2123.927552][T31366] ? dev_queue_xmit_nit+0x2d/0xad0 [ 2123.927579][T31366] skb_clone+0x212/0x3a0 [ 2123.927599][T31366] ? dev_queue_xmit_nit+0x268/0xad0 [ 2123.927620][T31366] dev_queue_xmit_nit+0x29a/0xad0 [ 2123.927639][T31366] ? dev_queue_xmit_nit+0x2d/0xad0 [ 2123.927668][T31366] dev_hard_start_xmit+0x1c1/0x830 [ 2123.927706][T31366] __dev_queue_xmit+0x14d9/0x3950 [ 2123.927728][T31366] ? ksys_write+0x150/0x270 [ 2123.927757][T31366] ? __dev_queue_xmit+0x2b6/0x3950 [ 2123.927793][T31366] ? __pfx___dev_queue_xmit+0x10/0x10 [ 2123.927825][T31366] ? __copy_skb_header+0xa3/0x4a0 [ 2123.927847][T31366] ? __asan_memcpy+0x40/0x70 [ 2123.927865][T31366] ? __skb_clone+0x63/0x7a0 [ 2123.927890][T31366] ? __skb_clone+0x483/0x7a0 [ 2123.927917][T31366] ? skb_clone+0x246/0x3a0 [ 2123.927941][T31366] __netlink_deliver_tap+0x5ad/0x850 [ 2123.927973][T31366] ? netlink_deliver_tap+0x2e/0x1b0 [ 2123.927993][T31366] netlink_deliver_tap+0x19c/0x1b0 [ 2123.928013][T31366] netlink_unicast+0x730/0x8e0 [ 2123.928050][T31366] netlink_sendmsg+0x813/0xb40 [ 2123.928078][T31366] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2123.928100][T31366] ? kstrtouint+0x6e/0xe0 [ 2123.928124][T31366] ? aa_sock_msg_perm+0xf1/0x1b0 [ 2123.928146][T31366] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2123.928170][T31366] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2123.928189][T31366] sock_write_iter+0x49b/0x4f0 [ 2123.928215][T31366] ? __pfx_sock_write_iter+0x10/0x10 [ 2123.928248][T31366] ? bpf_lsm_file_permission+0x9/0x20 [ 2123.928271][T31366] ? security_file_permission+0x75/0x260 [ 2123.928303][T31366] vfs_write+0x61d/0xb90 [ 2123.928335][T31366] ? __pfx_vfs_write+0x10/0x10 [ 2123.928367][T31366] ? __fget_files+0x2a/0x420 [ 2123.928395][T31366] ksys_write+0x150/0x270 [ 2123.928421][T31366] ? __pfx_ksys_write+0x10/0x10 [ 2123.928453][T31366] __do_fast_syscall_32+0x229/0x6e0 [ 2123.928480][T31366] ? do_fast_syscall_32+0x33/0x70 [ 2123.928503][T31366] ? lockdep_hardirqs_on+0x7a/0x110 [ 2123.928526][T31366] ? asm_int80_emulation+0x1a/0x20 [ 2123.928550][T31366] ? do_int80_emulation+0x286/0x530 [ 2123.928573][T31366] ? trace_irq_disable+0x3b/0x140 [ 2123.928601][T31366] do_fast_syscall_32+0x33/0x70 [ 2123.928627][T31366] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2123.928650][T31366] RIP: 0023:0xf6fef01c [ 2123.928669][T31366] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 2123.928685][T31366] RSP: 002b:00000000f53dd50c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 2123.928706][T31366] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 2123.928719][T31366] RDX: 0000000000033fe0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2123.928731][T31366] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2123.928742][T31366] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2123.928754][T31366] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2123.928782][T31366] [ 2124.004442][T31366] netlink: 'syz.0.7488': attribute type 22 has an invalid length. [ 2124.055203][T25851] quatech2 7-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 2124.271127][ C1] ================================================================== [ 2124.290773][T25851] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 2124.297169][ C1] BUG: KASAN: use-after-free in qdisc_pkt_len_segs_init+0x7f8/0xa30 [ 2124.297206][ C1] Read of size 2 at addr ffff88817e767474 by task syz.5.7487/31371 [ 2124.297224][ C1] [ 2124.297238][ C1] CPU: 1 UID: 0 PID: 31371 Comm: syz.5.7487 Tainted: G L syzkaller #0 PREEMPT(full) [ 2124.297263][ C1] Tainted: [L]=SOFTLOCKUP [ 2124.297270][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2124.297281][ C1] Call Trace: [ 2124.297291][ C1] [ 2124.297299][ C1] dump_stack_lvl+0xe8/0x150 [ 2124.297330][ C1] print_address_description+0x55/0x1e0 [ 2124.297355][ C1] ? qdisc_pkt_len_segs_init+0x7f8/0xa30 [ 2124.297375][ C1] print_report+0x58/0x70 [ 2124.297397][ C1] kasan_report+0x117/0x150 [ 2124.297420][ C1] ? __netif_receive_skb_list_core+0x24d/0x810 [ 2124.297445][ C1] ? qdisc_pkt_len_segs_init+0x7f8/0xa30 [ 2124.297468][ C1] qdisc_pkt_len_segs_init+0x7f8/0xa30 [ 2124.297494][ C1] __dev_queue_xmit+0x29a/0x3950 [ 2124.297516][ C1] ? rcu_is_watching+0x15/0xb0 [ 2124.297535][ C1] ? trace_kmem_cache_alloc+0x29/0xe0 [ 2124.297555][ C1] ? kmem_cache_alloc_node_noprof+0x3ce/0x690 [ 2124.297576][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 2124.297595][ C1] ? __asan_memcpy+0x40/0x70 [ 2124.297612][ C1] ? __pskb_copy_fclone+0xb1a/0x1120 [ 2124.297634][ C1] ? __asan_memcpy+0x40/0x70 [ 2124.297653][ C1] ? __pskb_copy_fclone+0xb1a/0x1120 [ 2124.297675][ C1] ? hsr_create_tagged_frame+0x500/0xe10 [ 2124.297697][ C1] ? __asan_memmove+0x40/0x70 [ 2124.297715][ C1] ? hsr_create_tagged_frame+0x8cd/0xe10 [ 2124.297739][ C1] hsr_forward_skb+0x167e/0x2a80 [ 2124.297763][ C1] ? hsr_forward_skb+0xbb/0x2a80 [ 2124.297782][ C1] ? __pfx_hsr_forward_skb+0x10/0x10 [ 2124.297826][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 2124.297849][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 2124.297871][ C1] ? hsr_addr_is_self+0x26/0x3f0 [ 2124.297896][ C1] ? hsr_handle_frame+0x6ab/0xa50 [ 2124.297916][ C1] hsr_handle_frame+0x6b8/0xa50 [ 2124.297937][ C1] ? __pfx_hsr_handle_frame+0x10/0x10 [ 2124.297956][ C1] __netif_receive_skb_core+0x98f/0x3170 [ 2124.297983][ C1] ? lock_acquire+0x106/0x350 [ 2124.298009][ C1] ? unwind_next_frame+0xa6/0x2550 [ 2124.298028][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 2124.298053][ C1] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 2124.298077][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 2124.298104][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 2124.298129][ C1] ? kernel_text_address+0xa5/0xe0 [ 2124.298153][ C1] ? __kernel_text_address+0xd/0x30 [ 2124.298175][ C1] __netif_receive_skb_list_core+0x24d/0x810 [ 2124.298198][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 2124.298227][ C1] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 2124.298251][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 2124.298273][ C1] ? stack_depot_save_flags+0x3f3/0x810 [ 2124.298292][ C1] netif_receive_skb_list_internal+0x995/0xcf0 [ 2124.298315][ C1] ? lock_acquire+0x106/0x350 [ 2124.298339][ C1] ? netif_receive_skb_list_internal+0x501/0xcf0 [ 2124.298362][ C1] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 2124.298384][ C1] ? dev_gro_receive+0x1108/0x23c0 [ 2124.298410][ C1] ? dev_gro_receive+0x1773/0x23c0 [ 2124.298437][ C1] napi_complete_done+0x299/0x730 [ 2124.298461][ C1] ? __pfx_napi_complete_done+0x10/0x10 [ 2124.298484][ C1] ? gro_cell_poll+0x16c/0x5d0 [ 2124.298509][ C1] gro_cell_poll+0x5a9/0x5d0 [ 2124.298535][ C1] ? gro_cell_poll+0x16c/0x5d0 [ 2124.298558][ C1] __napi_poll+0xae/0x340 [ 2124.298579][ C1] ? skb_defer_free_flush+0x233/0x260 [ 2124.298603][ C1] net_rx_action+0x627/0xf70 [ 2124.298626][ C1] ? lock_acquire+0x106/0x350 [ 2124.298655][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 2124.298684][ C1] ? sched_clock+0x3f/0x60 [ 2124.298710][ C1] handle_softirqs+0x22a/0x840 [ 2124.298736][ C1] ? do_softirq+0x76/0xd0 [ 2124.298760][ C1] ? tun_rx_batched+0x185/0x790 [ 2124.298792][ C1] do_softirq+0x76/0xd0 [ 2124.298816][ C1] [ 2124.298822][ C1] [ 2124.298829][ C1] __local_bh_enable_ip+0xf8/0x130 [ 2124.298852][ C1] ? tun_rx_batched+0x185/0x790 [ 2124.298875][ C1] tun_rx_batched+0x617/0x790 [ 2124.298902][ C1] ? __pfx_tun_rx_batched+0x10/0x10 [ 2124.298926][ C1] ? tun_get_user+0x2787/0x43e0 [ 2124.298951][ C1] ? tun_get_user+0x2787/0x43e0 [ 2124.298975][ C1] ? tun_get_user+0x2394/0x43e0 [ 2124.298999][ C1] ? tun_get_user+0x2394/0x43e0 [ 2124.299023][ C1] ? __local_bh_enable_ip+0xd0/0x130 [ 2124.299048][ C1] tun_get_user+0x2bbc/0x43e0 [ 2124.299074][ C1] ? tun_get_user+0x2787/0x43e0 [ 2124.299100][ C1] ? aa_file_perm+0x192/0x15e0 [ 2124.299121][ C1] ? aa_file_perm+0x50e/0x15e0 [ 2124.299139][ C1] ? __pfx_tun_get_user+0x10/0x10 [ 2124.299165][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 2124.299191][ C1] ? do_vfs_ioctl+0x1166/0x1530 [ 2124.299216][ C1] ? ref_tracker_alloc+0x35c/0x4c0 [ 2124.299236][ C1] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 2124.299255][ C1] ? tun_get+0x1c/0x2f0 [ 2124.299278][ C1] ? tun_get+0x1c/0x2f0 [ 2124.299303][ C1] ? tun_get+0x1c/0x2f0 [ 2124.299325][ C1] ? tun_get+0x1c/0x2f0 [ 2124.299350][ C1] tun_chr_write_iter+0x113/0x200 [ 2124.299375][ C1] vfs_write+0x61d/0xb90 [ 2124.299398][ C1] ? __pfx_vfs_write+0x10/0x10 [ 2124.299421][ C1] ? __fget_files+0x2a/0x420 [ 2124.299442][ C1] ksys_write+0x150/0x270 [ 2124.299463][ C1] ? __pfx_ksys_write+0x10/0x10 [ 2124.299487][ C1] __do_fast_syscall_32+0x229/0x6e0 [ 2124.299511][ C1] ? do_fast_syscall_32+0x33/0x70 [ 2124.299533][ C1] ? irqentry_exit+0x10f/0x730 [ 2124.299554][ C1] ? trace_irq_disable+0x3b/0x140 [ 2124.299577][ C1] do_fast_syscall_32+0x33/0x70 [ 2124.299600][ C1] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2124.299622][ C1] RIP: 0023:0xf701f01c [ 2124.299639][ C1] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 2124.299655][ C1] RSP: 002b:00000000f53ec50c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 2124.299677][ C1] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000440 [ 2124.299690][ C1] RDX: 000000000000fdef RSI: 0000000000000000 RDI: 0000000000000000 [ 2124.299701][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2124.299712][ C1] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2124.299724][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2124.299741][ C1] [ 2124.299748][ C1] [ 2124.962226][ C1] The buggy address belongs to the physical page: [ 2124.969399][ C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x17e767 [ 2124.978272][ C1] flags: 0x57ff00000000000(node=1|zone=2|lastcpupid=0x7ff) [ 2124.985593][ C1] raw: 057ff00000000000 ffffea0005f9d9c8 ffffea0005f9d9c8 0000000000000000 [ 2124.994385][ C1] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 2125.003180][ C1] page dumped because: kasan: bad access detected [ 2125.009975][ C1] page_owner info is not present (never set?) [ 2125.016058][ C1] [ 2125.018397][ C1] Memory state around the buggy address: [ 2125.024207][ C1] ffff88817e767300: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 2125.032278][ C1] ffff88817e767380: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 2125.040343][ C1] >ffff88817e767400: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 2125.048460][ C1] ^ [ 2125.056451][ C1] ffff88817e767480: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 2125.064932][ C1] ffff88817e767500: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 2125.073102][ C1] ================================================================== [ 2125.081427][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 2125.088759][ C1] CPU: 1 UID: 0 PID: 31371 Comm: syz.5.7487 Tainted: G L syzkaller #0 PREEMPT(full) [ 2125.100106][ C1] Tainted: [L]=SOFTLOCKUP [ 2125.104470][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2125.114559][ C1] Call Trace: [ 2125.118057][ C1] [ 2125.121017][ C1] vpanic+0x56c/0xa60 [ 2125.125040][ C1] ? __pfx_vpanic+0x10/0x10 [ 2125.129595][ C1] ? irqentry_exit+0x218/0x730 [ 2125.134525][ C1] panic+0xc5/0xd0 [ 2125.138320][ C1] ? __pfx_panic+0x10/0x10 [ 2125.142772][ C1] ? qdisc_pkt_len_segs_init+0x7f8/0xa30 [ 2125.148628][ C1] ? qdisc_pkt_len_segs_init+0x7f8/0xa30 [ 2125.154469][ C1] check_panic_on_warn+0x89/0xb0 [ 2125.159647][ C1] ? qdisc_pkt_len_segs_init+0x7f8/0xa30 [ 2125.165308][ C1] end_report+0x73/0x170 [ 2125.169582][ C1] ? qdisc_pkt_len_segs_init+0x7f8/0xa30 [ 2125.175238][ C1] kasan_report+0x128/0x150 [ 2125.179942][ C1] ? __netif_receive_skb_list_core+0x24d/0x810 [ 2125.186340][ C1] ? qdisc_pkt_len_segs_init+0x7f8/0xa30 [ 2125.192110][ C1] qdisc_pkt_len_segs_init+0x7f8/0xa30 [ 2125.197617][ C1] __dev_queue_xmit+0x29a/0x3950 [ 2125.202585][ C1] ? rcu_is_watching+0x15/0xb0 [ 2125.207702][ C1] ? trace_kmem_cache_alloc+0x29/0xe0 [ 2125.213202][ C1] ? kmem_cache_alloc_node_noprof+0x3ce/0x690 [ 2125.219480][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 2125.224954][ C1] ? __asan_memcpy+0x40/0x70 [ 2125.229601][ C1] ? __pskb_copy_fclone+0xb1a/0x1120 [ 2125.235172][ C1] ? __asan_memcpy+0x40/0x70 [ 2125.239768][ C1] ? __pskb_copy_fclone+0xb1a/0x1120 [ 2125.245167][ C1] ? hsr_create_tagged_frame+0x500/0xe10 [ 2125.251012][ C1] ? __asan_memmove+0x40/0x70 [ 2125.255810][ C1] ? hsr_create_tagged_frame+0x8cd/0xe10 [ 2125.261550][ C1] hsr_forward_skb+0x167e/0x2a80 [ 2125.266604][ C1] ? hsr_forward_skb+0xbb/0x2a80 [ 2125.271559][ C1] ? __pfx_hsr_forward_skb+0x10/0x10 [ 2125.276935][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 2125.282090][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 2125.287578][ C1] ? hsr_addr_is_self+0x26/0x3f0 [ 2125.292531][ C1] ? hsr_handle_frame+0x6ab/0xa50 [ 2125.297570][ C1] hsr_handle_frame+0x6b8/0xa50 [ 2125.302432][ C1] ? __pfx_hsr_handle_frame+0x10/0x10 [ 2125.307818][ C1] __netif_receive_skb_core+0x98f/0x3170 [ 2125.313474][ C1] ? lock_acquire+0x106/0x350 [ 2125.318431][ C1] ? unwind_next_frame+0xa6/0x2550 [ 2125.323559][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 2125.328781][ C1] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 2125.334872][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 2125.339911][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 2125.345131][ C1] ? kernel_text_address+0xa5/0xe0 [ 2125.350540][ C1] ? __kernel_text_address+0xd/0x30 [ 2125.355858][ C1] __netif_receive_skb_list_core+0x24d/0x810 [ 2125.361873][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 2125.366857][ C1] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 2125.373397][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 2125.379326][ C1] ? stack_depot_save_flags+0x3f3/0x810 [ 2125.385002][ C1] netif_receive_skb_list_internal+0x995/0xcf0 [ 2125.391457][ C1] ? lock_acquire+0x106/0x350 [ 2125.396275][ C1] ? netif_receive_skb_list_internal+0x501/0xcf0 [ 2125.402711][ C1] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 2125.409667][ C1] ? dev_gro_receive+0x1108/0x23c0 [ 2125.414887][ C1] ? dev_gro_receive+0x1773/0x23c0 [ 2125.420013][ C1] napi_complete_done+0x299/0x730 [ 2125.425138][ C1] ? __pfx_napi_complete_done+0x10/0x10 [ 2125.430693][ C1] ? gro_cell_poll+0x16c/0x5d0 [ 2125.435475][ C1] gro_cell_poll+0x5a9/0x5d0 [ 2125.440092][ C1] ? gro_cell_poll+0x16c/0x5d0 [ 2125.444890][ C1] __napi_poll+0xae/0x340 [ 2125.449246][ C1] ? skb_defer_free_flush+0x233/0x260 [ 2125.454630][ C1] net_rx_action+0x627/0xf70 [ 2125.459250][ C1] ? lock_acquire+0x106/0x350 [ 2125.464114][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 2125.469240][ C1] ? sched_clock+0x3f/0x60 [ 2125.473933][ C1] handle_softirqs+0x22a/0x840 [ 2125.478743][ C1] ? do_softirq+0x76/0xd0 [ 2125.483098][ C1] ? tun_rx_batched+0x185/0x790 [ 2125.488060][ C1] do_softirq+0x76/0xd0 [ 2125.492258][ C1] [ 2125.495227][ C1] [ 2125.498205][ C1] __local_bh_enable_ip+0xf8/0x130 [ 2125.503436][ C1] ? tun_rx_batched+0x185/0x790 [ 2125.508414][ C1] tun_rx_batched+0x617/0x790 [ 2125.513111][ C1] ? __pfx_tun_rx_batched+0x10/0x10 [ 2125.518353][ C1] ? tun_get_user+0x2787/0x43e0 [ 2125.523317][ C1] ? tun_get_user+0x2787/0x43e0 [ 2125.528209][ C1] ? tun_get_user+0x2394/0x43e0 [ 2125.533077][ C1] ? tun_get_user+0x2394/0x43e0 [ 2125.537939][ C1] ? __local_bh_enable_ip+0xd0/0x130 [ 2125.543285][ C1] tun_get_user+0x2bbc/0x43e0 [ 2125.548185][ C1] ? tun_get_user+0x2787/0x43e0 [ 2125.553183][ C1] ? aa_file_perm+0x192/0x15e0 [ 2125.558151][ C1] ? aa_file_perm+0x50e/0x15e0 [ 2125.562926][ C1] ? __pfx_tun_get_user+0x10/0x10 [ 2125.567965][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 2125.573048][ C1] ? do_vfs_ioctl+0x1166/0x1530 [ 2125.578009][ C1] ? ref_tracker_alloc+0x35c/0x4c0 [ 2125.583134][ C1] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 2125.588699][ C1] ? tun_get+0x1c/0x2f0 [ 2125.592871][ C1] ? tun_get+0x1c/0x2f0 [ 2125.597062][ C1] ? tun_get+0x1c/0x2f0 [ 2125.601359][ C1] ? tun_get+0x1c/0x2f0 [ 2125.605553][ C1] tun_chr_write_iter+0x113/0x200 [ 2125.610781][ C1] vfs_write+0x61d/0xb90 [ 2125.615041][ C1] ? __pfx_vfs_write+0x10/0x10 [ 2125.619929][ C1] ? __fget_files+0x2a/0x420 [ 2125.624559][ C1] ksys_write+0x150/0x270 [ 2125.628915][ C1] ? __pfx_ksys_write+0x10/0x10 [ 2125.633784][ C1] __do_fast_syscall_32+0x229/0x6e0 [ 2125.639081][ C1] ? do_fast_syscall_32+0x33/0x70 [ 2125.644131][ C1] ? irqentry_exit+0x10f/0x730 [ 2125.649120][ C1] ? trace_irq_disable+0x3b/0x140 [ 2125.654173][ C1] do_fast_syscall_32+0x33/0x70 [ 2125.659051][ C1] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2125.665378][ C1] RIP: 0023:0xf701f01c [ 2125.669457][ C1] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 2125.689327][ C1] RSP: 002b:00000000f53ec50c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 2125.698306][ C1] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000440 [ 2125.706586][ C1] RDX: 000000000000fdef RSI: 0000000000000000 RDI: 0000000000000000 [ 2125.714664][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2125.722826][ C1] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2125.731162][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2125.739234][ C1] [ 2125.742763][ C1] Kernel Offset: disabled [ 2125.747119][ C1] Rebooting in 86400 seconds..