last executing test programs: 28m3.752791303s ago: executing program 4 (id=779): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x400) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f0000000140)={0x4000000, 0x4000002, 0x2}) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f0000000040)={0x4000000, 0x400000}) close(r1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000100010ac05470200000000000109024300010000000009040000010300000009210000000122a00009058103"], 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000000)={0x2c, &(0x7f0000000240)=ANY=[@ANYBLOB="0024290000002907ad6667e44bb2cd263ca19db35b64ef7517ef18a5c7f872b2a6ba743febfd81b6a5ceb58e9c8690a491aa0bee8829380a9cbec20c9b732df0723107c8ec32fe96755f9dbf2e201ef7fc519ecd617e002242088bd9e6984b5bc3cd29031860b653327125f815e71491f20813e15bc7cdbbcd307d3543c4baac7323743a4d173232ae549c"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="0000d2"], 0x0, 0x0, 0x0, 0x0}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x0, 0x0, 0x1, 0x7}, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xffffffffff7ffff8, 0x4000010, r1, 0x67799000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) chown(&(0x7f0000000200)='./cgroup/cgroup.procs\x00', 0xee01, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000bc0)={'ip_vti0\x00', &(0x7f0000000980)=@ethtool_per_queue_op={0x4b, 0xf, [0x3, 0x9, 0x3, 0xe, 0x2, 0x3, 0x4, 0x1, 0x6, 0x1, 0xba3, 0x1, 0x5, 0x9ff, 0x8, 0x5, 0x0, 0x0, 0x2, 0x49, 0xffffa532, 0x3c, 0x8, 0xffff, 0x7f, 0x4e3, 0x5, 0x2, 0x0, 0x7fff, 0x6, 0x7, 0x7, 0x1, 0x4, 0x81, 0x8, 0x9, 0x9, 0x8, 0x0, 0x10001, 0x5, 0xfc000000, 0x2, 0x200, 0x5, 0x855e, 0x49, 0x3, 0x5, 0x6, 0xb728, 0x960, 0x8, 0x5, 0x50, 0x8, 0x8001, 0x2a, 0x9, 0x800, 0xfd8, 0xbf29, 0x1d49, 0x1000, 0x1, 0x3, 0x22, 0x10001, 0x2, 0x5, 0x5, 0x6, 0x8, 0x1, 0x9, 0xffffb9c0, 0x288, 0x1000, 0xca1b, 0x1, 0x8005, 0xfff, 0x3, 0x1e300000, 0x8, 0x80000000, 0x3, 0x40, 0x401, 0x6, 0x6c0c, 0x5, 0x6, 0x7fff, 0x7, 0x2, 0x1, 0x8, 0x1, 0x0, 0xc, 0x40, 0xa, 0x8, 0x3, 0x8, 0x10000, 0x5, 0xcb3a, 0x80000000, 0x10000, 0x3, 0x7, 0x0, 0xfffffff8, 0x1, 0x8, 0xff, 0x3, 0xfffffff8, 0x2, 0x7dc, 0x4, 0xe6, 0x5, 0x6]}}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) r6 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_DSP_SPEED(r6, 0xc0045002, &(0x7f00000001c0)) ioctl$SNDCTL_DSP_CHANNELS(r6, 0xc0045006, &(0x7f0000000040)=0xc) ioctl$SNDCTL_DSP_SETFMT(r6, 0xc0045005, &(0x7f0000000640)=0x10) socket(0x2, 0xa, 0x300) 28m0.670720149s ago: executing program 4 (id=790): syz_open_dev$evdev(&(0x7f0000000240), 0x20, 0x0) syz_usb_connect$uac1(0x3, 0x87, &(0x7f0000000100)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x75, 0x3, 0x1, 0xcb, 0x60, 0x6, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x101, 0x16}, [@input_terminal={0xc, 0x24, 0x2, 0x5, 0x1ff, 0x3, 0x4c, 0xffff, 0x5, 0x7f}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x8a, 0x5, 0x6, 0x4, 0x4}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x7a, 0x2, 0x1, {0x7, 0x25, 0x1, 0xc, 0x0, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x7, 0x3, 0x7f, {0x7, 0x25, 0x1, 0xc, 0x9, 0x2e3}}}}}}}}]}}, &(0x7f0000000600)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x201, 0x1, 0x7f, 0x8, 0xff, 0x7}, 0xa8, &(0x7f0000000280)={0x5, 0xf, 0xa8, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x1, 0x8b}, @wireless={0xb, 0x10, 0x1, 0x2, 0x50, 0x7, 0xf, 0xfff7, 0x6}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x7, 0x3, 0x8}, @generic={0x73, 0x10, 0x4, "c7aac14b4024a3f50504358123f90abd97395ed4ce4030b107c9c5899b5b7a58c246a87d890062960709f8bed981e7787863b5daa86c03064278a4d6093decd582760842d92b864f378eed65ab249e8c3704f754e661f8b2b37972b65c3fd0dd27a956ed66014a5c3e01b573cf6df932"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xa95c15941a63c179, 0xd, 0x10, 0x3b88}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x4, 0x8, 0x800}]}, 0x6, [{0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x804}}, {0x4, &(0x7f0000000380)=@lang_id={0x4}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x2c0a}}, {0xf2, &(0x7f0000000400)=@string={0xf2, 0x3, "16e50ec3b4a336a5182b051d6e165fed0193f70df3b6bc08c3e7d41174bf1acc1bf8451d9a73d51285f65d1f7b2dcdf65d0af3b474a7f51ea35fabacad646aa8470f2c00bedbcdf38f7abb0c95c1202ff320a190345b0f26f6451022c704bffa431cfddf9d59eeee72cf924323815e5309e0b61336805239283901ee236cd893c3aca31cf1956330b11827bfc85ba6ffcd9ca5fee3aefa53e778304d320ae2d152a6365490329138ff01a42dfe1fd683c060be8f290faace2c3ad25a09f279ff2d9497c0a12d807fe10e364b28f015d01f86f9307807be12144ba088810544f52b6c8c9bd851d704506b8db73a2b376c"}}, {0xb6, &(0x7f0000000500)=@string={0xb6, 0x3, "128a7d405933cdb529b692100dc1422a431dbbcf7b258b9dd9904009f9b8562daaa4da29188b169bb4c2c57ac5062cc125a0d7ed2d6dc700e46db4e0d3f6316c2a8a376a45476d33839e636ea51d0cba8c32c340803e79eb8b408d6efec89c75f5f971aa9a8c5f62e02c4f300732603e6445e34e3df46941ba5a03bb8c5957e82090d339adf9755d0b9dccb80ad9e40647d1a332b6c264dd34301d7b523286a9372879bf56707e439905db1ccbdb8d4211749502"}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x41d}}]}) syz_emit_ethernet(0x46, &(0x7f0000000280)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x7, 0x4, 0x3, 0x24, 0x38, 0x66, 0x0, 0x0, 0x1, 0x0, @broadcast, @multicast1, {[@cipso={0x86, 0x6, 0xffffffffffffffff}]}}, @parameter_prob={0xc, 0x0, 0x0, 0xfb, 0x9c, 0x0, {0x5, 0x4, 0x1, 0x3, 0x4, 0x67, 0x2, 0x1, 0xc, 0x5, @dev={0xac, 0x14, 0x14, 0x1e}, @loopback}}}}}}, 0x0) r0 = syz_usb_connect$cdc_ecm(0x1, 0x74, &(0x7f0000000080)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x62, 0x1, 0x1, 0x0, 0xc0, 0x2, "", [{{0x9, 0x4, 0x0, 0x4, 0x3, 0x2, 0x6, 0x0, 0x6, {{0xb, 0x24, 0x6, 0x0, 0x0, "497e611616d4"}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x800, 0xf, 0x80, 0x7}, [@network_terminal={0x7, 0x24, 0xa, 0x8, 0x9, 0x39, 0xeb}, @obex={0x5, 0x24, 0x15, 0x3}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0xb}, @network_terminal={0x7, 0x24, 0xa, 0x5f, 0x80, 0x5, 0x4}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x20, 0x9, 0xb}}], {{0x9, 0x5, 0x82, 0x2, 0x8, 0x7, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x5e, 0x8, 0xe5}}}}}]}}]}}, &(0x7f0000000600)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x201, 0x5, 0x9a, 0x6, 0x40, 0x6}, 0xb, &(0x7f0000000180)={0x5, 0xf, 0xb, 0x2, [@ptm_cap={0x3}, @ptm_cap={0x3}]}, 0x5, [{0xe2, &(0x7f00000002c0)=@string={0xe2, 0x3, "c5a1d6994e5c3a118fde8e18729a7b243e77b275993f71c3cf383ccf8fc2f250659a8ad226058f81f2a8a46f32b8f78aff97db01de89dc2837861a0361d6312a1825c681cc681e9dd650d5b3c6d5775ea399b2b8883596ff360f84e408e44203110160950a4d842158b21eff19386cea47aa166df66c3388b3d3e694c2bfc67550987c1d653d69c0f3bf1c9b8d032cd9388bcc2ac9aad196e80b9340684a0affce2d797dced8122f24a9e2281c7232d3cd582cfa7c985e7e8a1fc7b85c0f6a11da3fecc4d47f466f2f648e6c1649f638b192aeb751867b0f49d46c472f00a9bc"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x820}}, {0x0, 0x0}, {0xa3, &(0x7f0000000500)=@string={0xa3, 0x3, "83ffef4cbd18c23a4ff0e8c4c33dfe7d707fff0d92e96e5c6e1d9251507a8a290bdfd3538db5186db2c87045b9faa7feaa43ef5997ccf2840f6026cf2d7f8b1966145196c443854fcfd3a270c1409e63ad82efec45e37aab3d3db4bd838a6d9ed39c86ba948c7741752669cc7fe463d0f2d74104122ba3d439d2afd971105d847a8a17ac892d981b80d92d0b2f4b3200131f9684a30983f557d49771de6155046b"}}, {0x4, &(0x7f0000000000)=@lang_id={0x4, 0x3, 0x813}}]}) syz_emit_ethernet(0x96, &(0x7f0000000200)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x4d, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x18, 0xd0, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x2, 0x98ca}, @timestamp={0x8, 0xa, 0x5, 0x1a}, @sack={0x5, 0xe, [0x220, 0x130c, 0xabd]}, @md5sig={0x13, 0x12, "8098cf093cc9cd7b8ec814f9bcfdfea9"}, @sack={0x5, 0x16, [0x1, 0xfffffffe, 0x3, 0x6, 0x1]}]}}}}}}}}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000280)={0x1c, &(0x7f00000001c0)={0x0, 0x15, 0x1e, "00d53079c503e871a9d8a39e6a7e968c53061d5c9f97330a2acb36102d52"}, 0x0, 0x0}) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010029bd7000fadbdf2500000000", @ANYRES32, @ANYBLOB="1388000023b201002400128009000100626f6e6400000000140002800800070081000000080003"], 0x44}, 0x1, 0x0, 0x0, 0x404c8e0}, 0xc094) syz_usb_connect$hid(0x5, 0x36, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) readv(0xffffffffffffffff, &(0x7f0000001800)=[{&(0x7f0000000400)=""/198, 0xc6}], 0x1) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r3, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @loopback}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x58, r3, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x6c, r5, 0x1, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) 27m58.958789634s ago: executing program 4 (id=799): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x110, 0xffffffffffffffff, 0xfffff000) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r3, 0x4068aea3, &(0x7f0000000180)={0x8f, 0x0, 0x2}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000400)=[@textreal={0x8, 0x0}], 0x1, 0x10, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x640c7400, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0xc, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmmsg(r5, &(0x7f00000094c0)=[{{&(0x7f00000007c0)=@nl=@kern={0x10, 0x0, 0x0, 0x10000}, 0x80, &(0x7f0000000e00)=[{&(0x7f0000000880)="f3", 0x1}], 0x1}}, {{&(0x7f00000011c0)=@nl=@kern={0x10, 0x0, 0x0, 0x10000}, 0x80, &(0x7f00000043c0)=[{&(0x7f0000001240)="1f", 0x1}], 0x1, &(0x7f0000004400)=ANY=[@ANYBLOB="10"], 0x10}}], 0x2, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000100)={0x0, 0x72, "4bf798983dfbee71f4fce4126c93a98fda3d07cdce844c647b0e5c640e21dfeff356d5b93ab53efd072a5f09b49fbca886f331ed14d906493860e9aac12bc7c66011b678f609c9a4379728f1eb368becec56e96b5c5b6e0def6a6471a689e688617145557be027343e69851a76ce1f47018e"}, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x48981, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r8, 0xae9a) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000440)={[0x0, 0xffffffff, 0x0, 0x5, 0xffffc, 0x0, 0x1, 0x8000002, 0x4, 0x0, 0x7, 0x0, 0x5, 0xffffffffffffffff, 0x2, 0x1], 0x0, 0x200}) ioctl$KVM_RUN(r8, 0xae80, 0x0) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x10200, 0x0, 0x0, 0x2000, &(0x7f00006d0000/0x2000)=nil}) 27m58.123330929s ago: executing program 4 (id=802): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f00000002c0)={0x1, 0x5}, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r1, &(0x7f00000001c0)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x10) r2 = landlock_create_ruleset(&(0x7f0000000040)={0x7f4a, 0x0, 0x2}, 0x18, 0x0) landlock_restrict_self(r2, 0x5) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) write$USERIO_CMD_REGISTER(r0, &(0x7f00000000c0), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000580)={0x2, 0xfc}, 0x2) open_tree(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x0) r3 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000100)=ANY=[@ANYRES8=r0, @ANYRES8=r0], 0x48) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x45b3fc7cc9838f3, &(0x7f0000000000)=0x209, 0x4) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x200000a, 0x13, r3, 0x0) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r4, 0x40000000af01, 0x0) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r5, 0x84, 0x16, &(0x7f0000000140)={0x7, [0x3, 0x7f, 0x7, 0x1ff, 0x9, 0x401, 0x1]}, &(0x7f00000001c0)=0x12) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f00000016c0)) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f00000003c0)={0x1}) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) 27m57.943170488s ago: executing program 4 (id=803): r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0xf1, @loopback, 0x19f49a9}], 0x1c) sendmsg$inet_sctp(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0xff, @loopback, 0x5}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000100)="e6", 0x1}], 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000008400000007000000ac1414aa000000002000000000000000840000000800000020010000000000000000000000000000200001"], 0x58, 0x4855}, 0x24000052) 27m57.575886094s ago: executing program 4 (id=804): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x0) prctl$PR_SET_MM_MAP(0x49, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000000440)=@svm={0x1, 0x1, 0x1080, {0xd000}, {"fb3686c6445e26adc09740cc5cd29ca241bcc9000ab3c6568e6910eab75905a0e44b430891081c7e87bfa27f187d5d9f5e69ade356d039e28a8188caf32420736254467b69d7e3d6963def9e93c41906fd811c6ed8c9445ccda696f8d5e335dfc319370b248d1252fdf57ea15590eb7a10532d3ed2b32e127ebb3127a7dfcbfb8d32a1965d9e184203966df935d5358804fb829d1717336a342ac8a495aed3df888afd326b3b83db376a78d5fb803484bab9003bae01d31e46dc141dfbcc11581cfb30118f956c514117d216273ff35a1f29519fa1595c0de937290eb55cbd9299a766ffce2147d3018236d8182ae14f3801654a82eddfdfd225f609f523c3cc0e3aa4cdbe29433edfbbcca696608a4ecb12e1ae3ef09848bd98664d8b26871f8c8cf3334de8421699b7b1f1036ee214bd02229c6c976a46e4349221061bc5590cc57c6680864cd00e64c74ad73a757c29fdbea4c80ef10c4997faf95342e540ab4147e76e0f4c72bd393f54d02ed0a1ab549d08c94b796a2f38fa4273b101143efef90dad62ddb54297963f05520303a3964f2214a6c3666ff6b642f34f9bc372826393dedaf250d949667fc08c7c06241feba1d2f64545aa8def2f5e438254a42df1b5d51460c1b3ed2f89e640c8eb6de70e420de83303400ed392f4f13caa0a2a37335964570be5a2d2d9219e90f652ba29ee70085ccb453f0440901610ef2c61db5635e58adcc3af6c9f878ea7cea177b4de407f0b9da4a95f10e708855f2543c2343c074c6aef82bd8e06c5c6439282a85a6c2fe657943ac47651b041a3f5b0eb8eb97706209d3ea9ead297ea73df8e5a2d9a54e84ba9bed8375f5a4871b2afc40202eebbb2a3896356cbefe426fd7441519b3566dadcce24f7aed6ceb4ecef5c2f10e5ca0129d1b812bfd050607eebe24fdee6446736cb618a6325c56658ea11b9faf77d59a45e9449070d5598448ef03b5c2336c0f66f423b63f66c401f5c2a0f2fe448423a282e44bf4abe92a8d26cc3680326df7de415d769b23c561d0e7d6ce0252b3699ae0708672a7a41a58cc84f4b8dce8b35ad466788f47e198050ed9529f3e39335be1500c1c49acba82c9d8a580804d1b9d8cc676b98e7c4c9d2894373acd04cb477c0864fdb62a58976e3638e981536a2189073eac45760ebf881777cb302e8d9ca12dda133ff79a45afa6e7b9956d84593489f0d9563f8ad845b1956de92c70775646e97eaa81483935e03f29b37794a0ad6ee7c520e71b3f0a88f3add4b00928dbf276591ea8cb70f8bc9c77a2bae35bcf3be2e852a5d25fb5162d52ab653ccfe1539c4d9a1ef64168ed9c7eb04c6f09e58e88bed4d01da8b765f4ba995f4f936c4136a33971794bd64f45ba84e787b356aa2f5c05ffc91a2df192545b9697713231a296cb6e0ec6d319113a38c9a2c50f1fa5803edecc3091fa6293edda8d59c2d07f404faa3396cf2bf8b6e388e2124ed744443193ff999e1729eb9cab7bee861b3a8348355abd814962ca6af115a8709b5788b866ccfc1aa3dc7e5a4fad874f2b1117bbaaa1b14e6f27fd87f4828de0ba3f3b2222bdb7fb1305305761988b133cf2db463057062629b98617b377166854c761d49ce5745c89b0a3f0526fb0898ddb44396a1f45c4b15bf2035e03a570411d8a734e03da39d4540cd9ac9ecdfa6c55518f80aeb8028ecb6bd756011a43575930d4b549e281891c7839ea84f54f423d770134a761cdc1195b28471c31e2e73e938e88406f1ec75d925aa784933482a724620dde773f1bd006aacef34d99d873feed30ecbfd262b8990fd30f9c19af808ad9b317ab4457cc95ffed41717d790fd60441aff647b21a3d4b173b65068adbe03d5c211665d4976c598479cd3c0ca66e48aa0632944f5bc57dc49bf629071dff2cd2bf99810f5ca9671daa71fdc7aa590953bfb08a910e5636cb4063ddfcc688e7ecb58780a093958d72ff255199f6714792dd8f9a6d54768ae2faf31ecd428d9c2d3443ba857341f75a83f8c7b83a20ca3829975d3c7c9c2090fab4d34a544d721d83a371119df97a6e05d347eb45bb911a68e47997fcb49857cd57613cd5f3c21cee8fd2b0b2dfffde8b226437176e6e2c73b1fab16efe1b216fe83469404d4c49f9492bab3ef05d4e0353df276b09da346d939d5c7e7b7bd78ed4a126261e1dd37255ad7ee178d57eece51a926e555ae76bcf11490265f54f80bdc2a42c49577d9d76458d6caf24c2ca921f25e6e1dff6664f17f828e2f2f0f5bc0eeea361cc4760e95ba589948f2099ab05de874ccdf9035183f3933a83e4676d426d07fa033cea7eec7357f1ef18ed8f4b1230f82ce786439eba8c2030f96185308c1d3ea6a2405ed90d27cf77909b6b8e66560ae469294ee786f3cd81a4e1c313d8dfe5cb6be96806753a0480b31edb6f128576703fc58eb68651e55b12e919003ac68bfbf8208f0e231e14681f6e25ac38aeaa90a7913b198364b3326f9f14a04f7b50d87d62386346b3724c1ed6d02941e3b39b4014232d8fb818acec0bfdc03478fa8a78ec601268c855d17cf1c23bfa570ac357c5f3eeb9f72b535a743c3758196f9a025929902a943aad11716394f147aac1a7ecbc4d932fc746b9660f14c65a48ffbe7da56af80ed3a1f63e9f8482dd8092b8f7434c044e99678ebcb34a9659510fd5a447a950999327c555d4e652331c4ba3232220f6a0a3092a8de41a16f26e544dfdec282616e5b4bac69d81d6fa55d8bcd4d4ae34c2a5941396b462ac6582dda3f2aa4e44305adb2c16df9ace31d9397b2c740904db70cfc116ecc8359b6d6325b7563f5a1bdf684a383aa2f6ac1e1ec987baec62a9a8f763028cf2feb63ad7d4eb5bc08cd56c1db65856ccda703588f214bf74dfe2e40336c3aa1a8d9f55c12ef39544bb792276a2bf53d905f01a14f35d55f80f1d50ad9ed4630f01fe1927a1e7a8b4a199e709ee8ce8635ec6879c0db443eb0f18af5c0d09b5dcd54e93f4cae108678c937d054a0d35268fc0247d5d421af1e9738abb30caefb5ba90fb64150e94b23d8d24085473d755a8fbb4487ba4b590bbb68ed2b8731889029b9a99e92968bf9da5d565d3bcad0a0108d264ca9d15e4411919d6ba66c58c2548b69d3996308a27c951c62dbe9c82f9e9237bd0f586ade18eb44f3289693ca2c8450613fa08e76106ca89ad50620f093db844e9794610bb7a5cd8c9df68c6b02552b06f2860c81422214982de90f358f9aa93f113d2d2c44a5700ff897c3facc03ba1726a1b34aed46397221232bca0040f8596bdba2b96a0c4356fcbcf9e9f91ec0235826b89161385701bc4809badbc8ec0b8ecf13c1954cc4698f33d27eeaf9ef4fe46178aae7154ce22ed32f7b088d9e418ee1e981f9530691147cd79af8a5a9d69cd6473ba4f4507ad0306da0cb554533a18fd5ea968d08e7c80ab3f7f1885b6919534d024e663a0542c1819d0bd6d32769566fbdf64ec8edbe2c1736449f890d260080de324cb001549eb4869b5db7f948ce244c8b130d082e0f932dc4af9091028aed73774a689a5176fbb7fcf03e829462b0f98040fe517916a890167820642c5917c37a12f079f67513fb1160e0f9543c6958ab9b644d037413d58dbc74e96ab6217032f158327df144a6175f9b6dde66320101fa434be1eea68580d67354ceced043766091e6daa7eb64abdb0b599f06ede32bf1af882a8c77f41e88453bc04bd7e01856282aeffc007a814389119bdbaf76d82849b91dd07b097165a08d7be32ca01421be3287520d369b99f5dfacfb573911afce3dc000208d825dd063ad2cd9ee89062bf0b54e409f5f6a4937ae57033f8d44260aa09f8ed5874a228238efce39f4c7a369c1119413388c755e2fd51f1717ddffbdaf4ffa5e95529f08e393f1fc1fcc985546a46a22e809364bdc5b95a9dc6476f0ccda072470a58ed0191f5c8a56d69e391c4ab7b81d3dc4ca358b9e2954177e96e64e3867877b34795c5ddfe5eec8fe3f37cba3b268c57a8441d494395c76e580c811bc702a67c1db0e6ddc426daa95185101de3a6105250ae930da88e944ec2edd6613eeb9d6e1fedfab882f053f89dc7139c1068ec8c75778ee771b86886620c1b2f6cd7d3c5bafb34e269dbd119a6adc499a7c4a6abe0c681d9c97ad5878bbee813c06545cbd4d05648db97268b08a85c9bbfc566e695f32c0ee6e3b4d6fbb2388cc2a984fb92e992602eb55d92655ddd01a9763258bb0642171c88dfa59b8e598ab8cb9e16311347711c30b6757cfed1df0c5b3db854097b87e888927b46060f99b5bab4473509f2a5ee40f166ab8b14d7812fa44cdf72789dc52d91fc35c653380fb58a74bebcbb56ad0750419d2359ad4d4c53e747c4780aa6bf9fbd02d4fcaf96861f9567d0e2e480c84c51037f7c3c8b86069ea563dbe665c836bfc0e2ffa91f5b28269526401f3549bd9bde2a4f162244e9acf363b490434cb698d8d51840e4fc303b1320e9a5fa90ddebbe31205590d2d19a93916e5502897005d7b5883ce1b52bdbe8dda396113f83f3f5263dae5e7e160b65c54f348b8aa21f0da16fcbeda849caa2aaa0aa106c563775eb724024e6e21605409489dda139e92432559da8bfc04b2069491c285ea4c2de00af3ce4726aec10f0d8cb02272d9a418d00eaa7222843e336c70a7078eb51769afa098fac5f47b21a8a269ec2836210a574022ff5c1dc706e7f6c2d1197c88846dfa46b888cd057ac0eacd81ad75c1c8212ff869266446580f397cc938915117d1b9ece172984433d9a4d82570fab5dc11ffe8395eee3a03769948bd3321a41858e6b2af32774c9fdd022a476c1970a331dd58e9a082132b931a2ff2fccaa9c459f43777143d87f207a3d4bc20f25e83f5ce758375eef4b7a7f328bdd32c19af7d37bd2f2078c8a7bdb5c14a57e46e1cb877c89fbdc35e9508dc234df834fd6214d8034da24cf322182225278f2b833911adf1808ac9d113a330e55aecae096f8dbfd524f5ba101b24302870de62071b6147f923a4e3fcc7749a45228a23642ae18c0a00e18be471f45bdfe355fe703af27bcb30497f221448aa8ebec54f8bfedb72d78624e8ce2b2858bf4fcc73356e1d1987009aebdf3af1d1aed9e80545afe511f4ac45aca4dd108dc106f0ecf1b1106d149725e5e8e35e3789e73bdbb367298a11e37e2be6618d53eb22dcf77e0a4bd9e20b567d62185547d3a04c85eba63e05b11e2714fe5bac3d8628eecdf8f88f525c98706bbb96214faf5981302a5647bd87d6ed5f4531760d50ac29cf3b48a90e2c70b18aca2da8b00a5c2315c7120d1a9b17398cf999de0d10eeb785c24ee62227c750547e02bc78cc33054a0f963e6abb1e9a3403e7f9f3597d5b492a62f35bda28e2b347ea54854420af1db46bf5472edb835a4050babc53ef447bfe7b26a0668e9c8bb58f7c9562a446cc5d285ff5ca3952aad42c5de684a25d5893b058b5fdd48ad7ef62bdeadea99bf9543f61eb60aeaf5cfbecc6a2f420b38d1d16bd9084173184df114eb8944fbb0756a051a868da8ca1079086c823b21d5de60aa84c896e004632cd574f24059e657cec0592926bd95bf7230322c881150e4e0dd5376fd8836e6d0e942806beb93fe4cab17c34ce31b49f943afa752054370d3c5530f7e5c52763bbcbbfcb84cecde8942f5cbd5fe8fe29a72fd2f8767694b9f8f066043c9a4cb88cb40d000db9604a1b431d9a3b04d84786a69134ec2664ce0564b4ee300d8fecaadb21b12caa74f8a799b08bfba0aa5b059f"}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000240)={[0x5836, 0x8, 0x7, 0x4000000000000e51, 0x101, 0x5479, 0x103d, 0x200000000006, 0x0, 0x32a, 0x1, 0x1, 0x1, 0x40000000009, 0x8000000000005, 0x800000068], 0x8080000, 0xdd1}) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000100)={0x9, 0x1, {0xffffffffffffffff}, {}, 0x0, 0x151}) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4050) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r5, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r5, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r6 = io_uring_setup(0x344c, &(0x7f0000000080)={0x0, 0xbf6e, 0x0, 0x7}) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) ioctl$KVM_RUN(r4, 0xae80, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000bed000/0x4000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f00001a1000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x0, r4}, 0x68) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0x25, 0x2, 0x38, 0xb68c}, {0x60}, {0x2}, {0x6, 0x0, 0x0, 0x2}]}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x30bd, 0xc000, 0x8, 0x68}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 27m57.238333066s ago: executing program 32 (id=804): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x0) prctl$PR_SET_MM_MAP(0x49, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000000440)=@svm={0x1, 0x1, 0x1080, {0xd000}, {"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"}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000240)={[0x5836, 0x8, 0x7, 0x4000000000000e51, 0x101, 0x5479, 0x103d, 0x200000000006, 0x0, 0x32a, 0x1, 0x1, 0x1, 0x40000000009, 0x8000000000005, 0x800000068], 0x8080000, 0xdd1}) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000100)={0x9, 0x1, {0xffffffffffffffff}, {}, 0x0, 0x151}) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4050) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r5, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r5, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r6 = io_uring_setup(0x344c, &(0x7f0000000080)={0x0, 0xbf6e, 0x0, 0x7}) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) ioctl$KVM_RUN(r4, 0xae80, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000bed000/0x4000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f00001a1000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x0, r4}, 0x68) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0x25, 0x2, 0x38, 0xb68c}, {0x60}, {0x2}, {0x6, 0x0, 0x0, 0x2}]}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x30bd, 0xc000, 0x8, 0x68}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 6m59.659451997s ago: executing program 5 (id=6670): pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000240)=0x1) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fd/4\x00') ioctl$int_in(r1, 0x5452, &(0x7f0000000040)=0x7) close(0x3) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002001100000004000100080004"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x8090) 6m59.388575143s ago: executing program 5 (id=6672): syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007e3dc410cd0621013ddd0102030109021b000100094000090485000189fe1f0009058202"], 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='smaps_rollup\x00') read$FUSE(r1, &(0x7f0000004900)={0x2020}, 0x2020) munmap(&(0x7f0000695000/0x3000)=nil, 0x3000) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000005e000ffb28bd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB='\v'], 0x1c}, 0x1, 0x0, 0x0, 0x4048885}, 0x44040) read$FUSE(r2, &(0x7f0000001540)={0x2020, 0x0, 0x0, 0x0}, 0xf1e) r4 = socket(0x200000000000011, 0x2, 0x0) bind$packet(r4, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @random="518440db9de1"}, 0x14) r5 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/3\x00') r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000040)) getresgid(&(0x7f00000055c0)=0x0, &(0x7f0000005600), &(0x7f0000005640)) write$FUSE_ENTRY(r6, &(0x7f0000005680)={0x90, 0x0, 0x0, {0x1, 0x2, 0x0, 0x7fff, 0x9, 0xe49, {0x3, 0x5, 0x3913, 0xf, 0x7, 0x9ff, 0x84a, 0x81, 0x7, 0xc000, 0x200, r3, r8, 0x3, 0x10e92e51}}}, 0x90) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r10 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r10, 0xc0184800, &(0x7f0000000100)={0x20004, r9, 0x2}) r12 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r12, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r11}) ioctl$DRM_IOCTL_MODE_ADDFB2(r5, 0xc06864b8, &(0x7f0000000340)={0x0, 0x20bf, 0x10080, 0x20203843, 0x2, [r13, r13], [0x10, 0x6, 0x367afe9c, 0x9], [0x0, 0xfffffffe], [0x6, 0x2]}) syz_emit_ethernet(0xfed0, &(0x7f0000000180)=ANY=[@ANYBLOB="0180c200000ebbbbbbbbbbbb81004e000800450800780000000200119078e0000001010000004e20fffc00649078020000000000000002000000e5410e86db87a41f716be8e1fa0fe2fb313899778cc5c15c1337404bb397c0fc0c17d7b0eb591c2a7eb609eb8d2d9d1528cbbe8b3bc8849d1e6124e7e591328300802000003211817ada1e97297a54f5"], 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f00000002c0)={{0x29, @multicast1, 0x4e24, 0x0, 'lblcr\x00', 0x8, 0x9, 0xa}, {@private=0xa010100, 0x4e23, 0x2000, 0x7f, 0x9, 0x7}}, 0x44) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x185d, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x1, 0x800000c1}) 6m56.125843355s ago: executing program 5 (id=6692): r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000080)={0x0, 0x5}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000100)={r1, 0x4}, &(0x7f0000000140)=0x8) r2 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12011001000000407d1e383100000000000109022400010000100309040002fe0300000009210000020122050009058103"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r8 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, 0x0) socket$packet(0x11, 0x3, 0x300) write$FUSE_INIT(r4, &(0x7f0000000040)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r4, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r4, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0x8, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3966, 0x1, 0x8000, 0xfffffffc, r6, r7, 0x1, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) write$tcp_congestion(r9, &(0x7f00000000c0)='lp\x00', 0xfffffdef) r10 = dup2(r9, r4) listen(0xffffffffffffffff, 0x50) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x8040) write$FUSE_NOTIFY_POLL(r4, &(0x7f0000000100)={0xfffffffffffffeab, 0x1, 0x0, {0x2}}, 0xffffffe8) close_range(r3, 0xffffffffffffffff, 0x2) syz_usb_connect(0x3, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x18}}, 0x20004000) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) socket$packet(0x11, 0x2, 0x300) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r10, 0x89f2, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f00000003c0)={'ip6_vti0\x00', 0x0, 0x4, 0x4, 0x6, 0xd, 0x41, @private1, @mcast2, 0x1, 0x7, 0x56d}}) 6m52.005167099s ago: executing program 5 (id=6696): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)={0x1, &(0x7f0000000040)=[{0x6, 0x1, 0xa, 0x7ff00003}]}) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) sendmsg$AUDIT_SIGNAL_INFO(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x10, 0x3f2, 0x901, 0x70bd2b, 0x25dfdbfb}, 0x10}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x2, 0x0, 0x8b, "000000000000000000000400004800"}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) clock_gettime(0x0, &(0x7f0000001a00)={0x0, 0x0}) recvmmsg(r2, &(0x7f0000001980)=[{{&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @private2}, 0x80, &(0x7f0000001500)=[{&(0x7f0000000080)=""/98, 0x62}, {&(0x7f00000001c0)=""/172, 0xac}, {&(0x7f0000000280)=""/241, 0xf1}, {&(0x7f0000000380)=""/199, 0xc7}, {&(0x7f0000000480)=""/86, 0x56}, {&(0x7f0000000500)=""/4096, 0x1000}], 0x6, &(0x7f0000001580)=""/17, 0x11}, 0x4}, {{&(0x7f00000015c0)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000001900)=[{&(0x7f0000001640)=""/17, 0x11}, {&(0x7f0000001680)=""/64, 0x40}, {&(0x7f00000016c0)=""/214, 0xd6}, {&(0x7f00000017c0)=""/21, 0x15}, {&(0x7f0000001800)=""/247, 0xf7}], 0x5}, 0x6}], 0x2, 0x10040, &(0x7f0000001a40)={r3, r4+60000000}) r5 = syz_open_pts(r0, 0x0) r6 = socket$pppl2tp(0x18, 0x1, 0x1) mmap(&(0x7f0000d30000/0x4000)=nil, 0x4000, 0x1000000, 0x1010, r6, 0x245d9000) r7 = dup3(r0, r5, 0x80000) read$FUSE(r7, &(0x7f0000003f80)={0x2020}, 0x2020) openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) 6m50.955545701s ago: executing program 5 (id=6703): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x9801) fchdir(r0) close(r0) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4c) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r2 = syz_clone(0x23940200, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) rt_sigqueueinfo(r2, 0x2b, &(0x7f0000000040)={0x29, 0x6, 0xfff00000}) ptrace$peeksig(0x4209, r2, &(0x7f0000000200)={0x0, 0x1, 0x1}, &(0x7f0000000240)=[{}]) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r1, 0x8002f515, &(0x7f0000000080)) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0xa9525000) link(&(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x1c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@CTA_ZONE={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000040}, 0x40) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x0) 6m49.712434484s ago: executing program 5 (id=6714): r0 = socket$nl_generic(0x10, 0x3, 0x10) fcntl$getflags(r0, 0xb) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_open_dev$dmmidi(&(0x7f0000000300), 0x2, 0x80081) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r2, 0x40045731, &(0x7f00000000c0)=0x40) recvmmsg(r0, &(0x7f0000003300)=[{{&(0x7f0000000080)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x80, &(0x7f0000002540)=[{&(0x7f0000000540)=""/4096, 0x1000}, {&(0x7f0000001540)=""/4096, 0x1000}], 0x2}, 0x2}, {{&(0x7f0000002580)=@sco={0x1f, @none}, 0x80, &(0x7f0000002800)=[{&(0x7f0000002600)=""/117, 0x75}, {&(0x7f0000002680)=""/107, 0x6b}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/160, 0xa0}], 0x4, &(0x7f0000002840)=""/82, 0x52}, 0x8}, {{&(0x7f00000028c0)=@caif=@dgm, 0x80, &(0x7f0000002b80)=[{&(0x7f0000002940)=""/66, 0x42}, {&(0x7f00000029c0)=""/224, 0xe0}, {&(0x7f0000002ac0)=""/61, 0x3d}, {&(0x7f0000002b00)=""/36, 0x24}, {&(0x7f0000002b40)=""/31, 0x1f}], 0x5, &(0x7f0000002c00)=""/170, 0xaa}, 0x8000}, {{&(0x7f0000002cc0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000003240)=[{&(0x7f0000002d40)=""/89, 0x59}, {&(0x7f0000002dc0)=""/234, 0xea}, {&(0x7f0000002ec0)=""/95, 0x5f}, {&(0x7f0000002f40)=""/217, 0xd9}, {&(0x7f0000003040)=""/39, 0x27}, {&(0x7f0000003080)=""/60, 0x3c}, {&(0x7f00000030c0)=""/202, 0xca}, {&(0x7f00000031c0)=""/118, 0x76}], 0x8, &(0x7f00000032c0)=""/36, 0x24}, 0x7fff}], 0x4, 0x40001121, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x28, r1, 0x1, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x3ff}]}]}, 0x28}}, 0x0) 6m34.604784752s ago: executing program 33 (id=6714): r0 = socket$nl_generic(0x10, 0x3, 0x10) fcntl$getflags(r0, 0xb) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_open_dev$dmmidi(&(0x7f0000000300), 0x2, 0x80081) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r2, 0x40045731, &(0x7f00000000c0)=0x40) recvmmsg(r0, &(0x7f0000003300)=[{{&(0x7f0000000080)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x80, &(0x7f0000002540)=[{&(0x7f0000000540)=""/4096, 0x1000}, {&(0x7f0000001540)=""/4096, 0x1000}], 0x2}, 0x2}, {{&(0x7f0000002580)=@sco={0x1f, @none}, 0x80, &(0x7f0000002800)=[{&(0x7f0000002600)=""/117, 0x75}, {&(0x7f0000002680)=""/107, 0x6b}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f0000002740)=""/160, 0xa0}], 0x4, &(0x7f0000002840)=""/82, 0x52}, 0x8}, {{&(0x7f00000028c0)=@caif=@dgm, 0x80, &(0x7f0000002b80)=[{&(0x7f0000002940)=""/66, 0x42}, {&(0x7f00000029c0)=""/224, 0xe0}, {&(0x7f0000002ac0)=""/61, 0x3d}, {&(0x7f0000002b00)=""/36, 0x24}, {&(0x7f0000002b40)=""/31, 0x1f}], 0x5, &(0x7f0000002c00)=""/170, 0xaa}, 0x8000}, {{&(0x7f0000002cc0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000003240)=[{&(0x7f0000002d40)=""/89, 0x59}, {&(0x7f0000002dc0)=""/234, 0xea}, {&(0x7f0000002ec0)=""/95, 0x5f}, {&(0x7f0000002f40)=""/217, 0xd9}, {&(0x7f0000003040)=""/39, 0x27}, {&(0x7f0000003080)=""/60, 0x3c}, {&(0x7f00000030c0)=""/202, 0xca}, {&(0x7f00000031c0)=""/118, 0x76}], 0x8, &(0x7f00000032c0)=""/36, 0x24}, 0x7fff}], 0x4, 0x40001121, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x28, r1, 0x1, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x3ff}]}]}, 0x28}}, 0x0) 10.583995064s ago: executing program 0 (id=8679): unshare(0x6a040000) syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902"], 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x600, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) 8.059943842s ago: executing program 6 (id=8697): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x40, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}, @action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e000000180002"], 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x8000010}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0x6, 0xffff}, {0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x50}}, 0x4008840) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r4, 0x201, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x58}, 0x1, 0x0, 0x0, 0x10010}, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000020000000700000a20000000000a01030000000000000000010000000900010073797ac15500000040"], 0xc0}, 0x1, 0x0, 0x0, 0x60040004}, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r7, 0x5393, &(0x7f0000000000)) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 7.733934034s ago: executing program 6 (id=8700): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1, 0x21, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000000000000000000050100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fdffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000bf91000000000000b7020000000000e28700000000000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 7.554535367s ago: executing program 6 (id=8702): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xe, 0x4, 0x8, 0x7}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xc, 0xd, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xaa9a}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xa0000000}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x26}}, @call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_cmd={0xe, 0x1, 0x7fff, 0x0, 0x3, 0x4, 0x41, 0x5, 0x8, 0x6, 0x7, 0x4, 0xfff3, 0x80, 0x84, 0x7f, [0x7fffffff, 0x4]}}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r3, 0x84, 0x7f, &(0x7f0000000140)="000000000d800000", 0x8) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x3c, r4, 0x300, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xb}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x1}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000091) 7.427463339s ago: executing program 0 (id=8703): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0xfffffffffffffff0, 0x4}, 0x4008014) 7.153840968s ago: executing program 0 (id=8704): syz_open_dev$admmidi(&(0x7f0000000140), 0x8000000000000000, 0xba040) mbind(&(0x7f0000789000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x56, 0x2) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$UHID_INPUT(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) fgetxattr(r1, &(0x7f0000000080)=@known='system.posix_acl_default\x00', &(0x7f0000000740)=""/4096, 0x1000) syz_usb_connect(0x0, 0x3b, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001b3ebd40d80483009c0001020301090229"], 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x22020400) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ppoll(&(0x7f00000000c0)=[{r4, 0x844a}], 0x1, 0x0, 0x0, 0x0) r5 = socket(0x5, 0x2, 0x40000) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) socket$kcm(0x29, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@RTM_NEWMDB={0x38, 0x54, 0x1e5, 0x0, 0xfffffffd, {0x7, r6}, [@MDBA_SET_ENTRY={0x20, 0x1, {r8, 0x1, 0x1, 0x1, {@ip4=@broadcast, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x801, 0x0, 0x200000, {0x0, 0x0, 0x0, 0x0, 0x90, 0x800}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x4000880) 6.507221257s ago: executing program 6 (id=8708): unshare(0x6a040000) socket$inet_sctp(0x2, 0x1, 0x84) rt_sigprocmask(0x2, &(0x7f0000000000)={[0x3]}, &(0x7f0000000040), 0x8) socket$nl_xfrm(0x10, 0x3, 0x6) syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="120100004b41460860163209ea800102030109021e0001000000000904"], 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x281, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) ioctl$KVM_GET_MSRS_cpu(r1, 0xc008ae88, &(0x7f0000000340)={0x10000000000000e6, 0x0, [{0x40000091, 0x0, 0x3}]}) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000080)=@s={0x5, @generic=0x7, 0x2, 0x4}) r2 = syz_open_dev$I2C(&(0x7f00000003c0), 0x1, 0x2603) ioctl$I2C_RDWR(r2, 0x707, &(0x7f0000000000)={&(0x7f00000013c0)=[{0x1000, 0x5820, 0x4, &(0x7f0000000280)="11055f2b"}], 0x1}) r3 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x40004990) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80000) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r4, 0xc0145401, &(0x7f0000000180)={0x3, 0x0, 0x3, 0x0, 0x10000}) syz_emit_ethernet(0x2e, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f00000002c0)=ANY=[@ANYBLOB="3f930dbffa77ccf2db9ceb9bcc8be9c24cf74fd8868d60fb08353fb548a9489d2fb83b9fdcf7462327ec3c441419c9ff6d59eec9fb0ca338b681dc48", @ANYRESHEX=r0, @ANYRES8=r3], 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000100), 0x2, 0x8}}, 0x20) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)}) ioctl$DRM_IOCTL_MODE_GETPLANE(r5, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @ipv4={'\x00', '\xff\xff', @local}, 0x4}, 0x1c) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @private0, 0x1}, 0x1c) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r7, 0x1, 0x23, &(0x7f0000f59ffc)=0x6, 0x4) bind$inet6(0xffffffffffffffff, 0x0, 0x0) 5.784898318s ago: executing program 3 (id=8715): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x40, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}, @action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e000000180002"], 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x8000010}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0x6, 0xffff}, {0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x50}}, 0x4008840) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) (fail_nth: 11) 5.542908084s ago: executing program 3 (id=8717): syz_usb_connect(0x1, 0x3d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) landlock_create_ruleset(0x0, 0x0, 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2000, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000016c0)=ANY=[@ANYBLOB="280000001100010027bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="30a000001300010008002e000000fffbd0ef"], 0x28}}, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) r3 = io_uring_setup(0x1c6c, &(0x7f0000000040)={0x0, 0xaebb, 0xd000, 0x20000a, 0x20002f8}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xd}, {0xe, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) 4.48960707s ago: executing program 3 (id=8720): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_clone(0x100000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$setregs(0xd, r2, 0xfffffffffffffffe, &(0x7f0000000140)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178c0900000000000000f39ed4b41924dc225ad4028dd63debb87d698be5c749450b350a789dcfc6b2d6a69600026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fbf057bb711116e53eb0b55667f1a28c2d6506cf26422d389b") r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000340)=0x63ba, 0x4) sendto$inet6(r4, 0x0, 0x5a, 0x14004804, &(0x7f0000000140)={0xa, 0x4e20, 0x765, @mcast2, 0x3}, 0x1c) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000014c0)=[@text64={0x40, &(0x7f0000001500)="267600410f01b00000000066b88e000f00d066420f3a14ce5736430f0164b107b805000000b9060000000f01c1f30f01330f015b7548b80c000000000000000f23d80f21f835800000000f23f8f30fc733", 0x51}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 4.396572278s ago: executing program 2 (id=8721): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'seqiv(rfc4106(gcm(aes)))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="000826bd7000fedbdf9241000000"], 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x1) recvmsg(r1, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001240)=""/47, 0x2f}], 0x1}, 0x10002) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) fcntl$getown(r0, 0x9) r3 = epoll_create1(0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0xe, 0x102) ioctl$USBDEVFS_SETINTERFACE(r4, 0x80085504, &(0x7f0000000140)={0x8, 0x2}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000000)={0x20000008}) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x20c01, 0x0) write$rfkill(r5, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) 4.238737678s ago: executing program 3 (id=8722): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) unshare(0x20000400) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x94, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x2, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {0xffff, 0xffff}, {0xffe0, 0x4}}, [@TCA_STAB={0x70, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x3, 0x7, 0x7, 0x4, 0x1, 0x5, 0x0, 0x4}}, {0xc, 0x2, [0x0, 0x5, 0x8, 0x7]}}, {{0x1c, 0x1, {0x3, 0xe3, 0x0, 0x4, 0x1, 0x1, 0x37, 0x2}}, {0x8, 0x2, [0x8, 0x0]}}, {{0x1c, 0x1, {0x9, 0x2, 0xff, 0xcb15, 0x0, 0x0, 0x6}}, {0x4}}]}]}, 0x94}}, 0x4000010) syz_usb_connect(0x3, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="120100005ae4c41096050100f5fd0002030109021b0001000000000904d60001b5e145000905"], 0x0) r2 = syz_open_dev$media(&(0x7f00000006c0), 0x7, 0x0) ioctl$OCFS2_IOC_GROUP_ADD(r2, 0x40186f02, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) openat$rdma_cm(0xffffff9c, 0x0, 0x2, 0x0) socket$inet6(0xa, 0x1, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$PTP_PIN_SETFUNC2(0xffffffffffffffff, 0x40603d10, &(0x7f00000001c0)={'\x00', 0x1, 0x2, 0x9}) fsmount(0xffffffffffffffff, 0x0, 0x9) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r4}) ioctl$sock_ifreq(r1, 0x8924, &(0x7f0000000040)={'batadv_slave_0\x00', @ifru_hwaddr=@broadcast}) unshare(0x4020400) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0xdc}}, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r6, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) unshare(0x2c020400) move_mount(r6, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x267) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f00000007c0)={0x28, 0x3, r4, 0x0, &(0x7f0000000000/0x800000)=nil, 0x800000, 0x1004000}) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f0000000100)=0x3) 3.99581804s ago: executing program 0 (id=8724): madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xc) r0 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r0, 0x0, 0x0) getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, 0x0, 0x4000010) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x2, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7fffffff, 0x1}}]}}]}, 0x48}}, 0x8d0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f000000a680)=@newtfilter={0x4a14, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xc}, {0xfff2}, {0xfff1, 0x3d}}, [@filter_kind_options=@f_basic={{0xa}, {0x49e4, 0x2, [@TCA_BASIC_POLICE={0xc64, 0x4, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x2, 0x8000, 0x40, 0x3, 0xff, 0x7, 0x80, 0xf421, 0x5, 0x0, 0x9, 0xd7c1, 0x4, 0x6, 0x3, 0x65, 0x5, 0x3, 0x3, 0x3, 0x5, 0xfdc2, 0x7, 0x1, 0x2, 0x5, 0x6, 0x101, 0x5, 0x4, 0x2, 0x2, 0x2, 0x5, 0x100, 0xffffff00, 0x7, 0x7, 0x7, 0x0, 0x7, 0x4, 0x8b, 0x5, 0x8, 0xe, 0x7ff, 0xff, 0x4, 0x100, 0x2, 0x1000000, 0x9, 0x7, 0x0, 0xecd0, 0x80000000, 0x44, 0x5, 0x5, 0x8, 0x7f, 0x401, 0x8, 0x3, 0xfffffff7, 0x5, 0x4, 0x0, 0xdc0, 0x20, 0x1504000, 0x958, 0x6, 0x10000, 0xffff7115, 0x4, 0x7, 0x6, 0xf, 0x4, 0x6c8b, 0x4, 0xf, 0x5, 0x0, 0x1ff, 0xfffffbff, 0x6, 0x2, 0x8, 0x9, 0x8e, 0xd, 0xc40, 0xd, 0x0, 0x101, 0x48, 0x7, 0xffff, 0x4, 0x6e4, 0x800, 0x4, 0x1a70, 0x5, 0x3, 0x80000001, 0x5, 0x1, 0x5, 0x3, 0x9, 0x5, 0x5, 0xb, 0xaacd, 0x9, 0x94, 0x9, 0x8000, 0xfffffffc, 0x8, 0xf66, 0x1, 0x4, 0xc, 0x3, 0x80000000, 0x4, 0x1000, 0x10001, 0x6, 0x1, 0x1, 0x0, 0x5, 0x5, 0x3, 0x5, 0x9, 0x131, 0x3, 0xff, 0x7, 0x4a1, 0x8, 0x7fff, 0x8001, 0x6, 0x0, 0xffffffff, 0x6, 0x0, 0x1, 0xa14, 0x0, 0x7, 0xfffff578, 0xcf, 0x2, 0x2, 0x3fff80, 0x0, 0x5, 0x2, 0x7, 0x1, 0x2, 0x7f, 0xffffffff, 0x5, 0x7fffffff, 0x800, 0xd, 0x7, 0x7, 0x9, 0x9, 0xeee9, 0x6, 0x80000001, 0x5, 0x6, 0x7, 0x0, 0x400, 0x0, 0x8, 0x6, 0x0, 0x9, 0xfffffff4, 0x3, 0x80000001, 0xdd4, 0x362, 0x1, 0x4, 0x3, 0x65f, 0xfffffff5, 0x1, 0x5, 0xfff, 0x7, 0x2, 0x4, 0xf675, 0x1, 0x4, 0x3, 0x1, 0x10000, 0xb, 0xca8b, 0x80, 0x0, 0x7f, 0xfffffff9, 0x1, 0x3ff, 0x8001, 0xff, 0x2, 0x40, 0xfffffffa, 0x9, 0xa49a, 0x4, 0xa, 0xfffffe00, 0xe0, 0xda22, 0x2, 0x3, 0xd11a, 0x0, 0x2, 0x6, 0x6, 0x9, 0xa0, 0x7, 0x1ff, 0x9, 0x8001, 0x3, 0x1ff, 0xc, 0x8000, 0x6, 0xa, 0xdd0c, 0x5]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x8000}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xdb}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x321, 0x8, 0x0, 0x8, 0x7, 0x6d8, 0xffff0001, 0x6, 0x3, 0x96c, 0x5000000, 0x8, 0x7f, 0x0, 0x4, 0x4, 0x1, 0x2, 0x3, 0x0, 0x10000000, 0x2, 0x8, 0x1, 0x0, 0x3ff, 0x0, 0xeb, 0x9, 0x4, 0xffffffff, 0x4f, 0xc7, 0x6, 0xa, 0xaa, 0x2, 0x81, 0x80, 0x401, 0xffffffff, 0x9, 0x3cd7, 0x3, 0x8001, 0x8, 0x59f3, 0x4, 0x100, 0x84a, 0x3, 0xffff, 0x1c, 0x7bd, 0x7, 0x7, 0xffffffff, 0x0, 0x5, 0x9, 0x8001, 0x6, 0xd, 0x3, 0xc1d9, 0x4, 0x7d7, 0x2, 0xfffffffd, 0x1, 0xa79, 0x0, 0x100, 0x400, 0xfffffff8, 0x1, 0x0, 0x0, 0x33, 0x40, 0x9, 0x64, 0x28, 0x1000, 0xfffffffe, 0xf408, 0x400, 0x4, 0xffffffff, 0x0, 0x8, 0xe3a1, 0xffff, 0x400, 0x156, 0x0, 0x1000, 0xd3, 0x4, 0xffffff00, 0x0, 0x3, 0x5, 0x3a5, 0x10, 0x7, 0x6, 0xcb, 0x9, 0x9, 0x0, 0x0, 0x80000000, 0xffffff81, 0x10001, 0x5, 0xf3cc, 0x8, 0x8, 0x2, 0x3, 0x4, 0x7, 0xf6, 0x3ff, 0x8, 0x2, 0xfffffffa, 0x2, 0xfffff0f6, 0x8, 0xfffffff8, 0x80000000, 0x3, 0x9, 0xfffffff3, 0xffff, 0x42adcf38, 0x4, 0xff, 0x9, 0x40, 0x0, 0x2, 0x0, 0x4, 0x3, 0x6, 0x0, 0x2, 0x101, 0x1aa, 0x6c, 0x40, 0x8, 0x8, 0xfffffff8, 0xfa, 0x3, 0x1, 0x6, 0x1, 0x3, 0x5, 0x9, 0x5, 0x5, 0x81, 0x0, 0x3f, 0x5, 0xda, 0x3, 0x6, 0x1ff, 0x28, 0x0, 0x6, 0x26fcfb3, 0x9, 0xb, 0x80000001, 0xc00, 0xffff0001, 0x10, 0x3, 0x25, 0xffffffff, 0x5c00000, 0xd, 0x0, 0xd, 0xcdc5, 0xd, 0x2, 0x8, 0x7, 0xc, 0x200, 0x4, 0xb, 0x5, 0xb9, 0xfffffffc, 0x4, 0x3, 0x8, 0x6, 0x4, 0xc, 0x0, 0x631, 0xc, 0x6, 0x3, 0x3, 0x100, 0x9, 0x8, 0x7, 0x9, 0x1, 0x30000000, 0xffff5511, 0x3, 0x7, 0x9c2, 0x4, 0x5, 0x8, 0xfffffffe, 0x7, 0x4, 0x5, 0x80000000, 0x2, 0x8001, 0x9, 0xfffffffd, 0x6, 0x7, 0x3, 0x1, 0x7, 0x0, 0x1, 0x9, 0x6, 0xfffffff1, 0x51, 0x320b, 0x6, 0x580, 0x740b, 0x3]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x3, 0x2, 0x10, 0x2, {0x56, 0x1, 0xa, 0x9, 0x401, 0xb}, {0xe, 0x0, 0x1, 0x5, 0x4, 0x1}, 0xd7, 0x9, 0xc}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7f, 0xf9, 0x3, 0x1, 0xffffffff, 0x8, 0x8, 0x5412, 0x4, 0xffffffff, 0xfffffff5, 0x9, 0x4, 0x4, 0x5, 0xf9, 0x4, 0x10, 0x1, 0x6, 0xb2, 0x7, 0x10000, 0x101, 0x80, 0x6940, 0xd667, 0x0, 0x3, 0x7ff, 0x7, 0x7, 0xffffffff, 0x5, 0x6, 0x6, 0x6000, 0x8, 0xffff, 0x3, 0x0, 0x4, 0x9, 0x6e66, 0x800, 0x5, 0xfffffffe, 0x7ff, 0x7fffffff, 0x1, 0x200, 0x1, 0xe, 0x9, 0x81, 0x85, 0x10000, 0xffffffff, 0xffffff68, 0x3, 0x9, 0x7fff, 0x6, 0x5, 0x1, 0x5e0d, 0x638c, 0xbb, 0x9, 0xae4, 0x4, 0x101, 0x2, 0x9, 0x1, 0x6, 0x4, 0xd, 0x8, 0x7, 0x6, 0x4, 0x9, 0x3, 0x0, 0x4, 0x98, 0xa0e, 0x2, 0x4, 0x8, 0xffff4f95, 0x5, 0x0, 0x3ff, 0x7, 0x4, 0x8, 0x0, 0x0, 0x97, 0x9, 0xfffffffd, 0x947a, 0x9c7a, 0x6, 0x0, 0xf, 0x2, 0x1, 0x2, 0xf, 0x3, 0x8, 0xfffffff6, 0x1ff, 0x7, 0xfffffffb, 0x2, 0x0, 0x5, 0x0, 0x81, 0x8, 0x9a, 0x6, 0xffff, 0x17, 0x8, 0x7, 0xd000, 0x3, 0xe, 0x200, 0x0, 0x8, 0x4, 0x6, 0x6, 0xde7cdc9, 0x1ff, 0xafc, 0x0, 0x6, 0xd, 0x2, 0x9, 0x5f, 0x3, 0x5, 0x81, 0x2, 0xa344, 0x3d0, 0x3, 0x3, 0x8c4, 0x800, 0x6, 0xffffffb7, 0x71b9, 0x6, 0x285, 0xcf4, 0x4, 0xd18, 0x0, 0x1, 0x8391, 0xfffffff8, 0x2, 0x2, 0x3, 0x3, 0x4, 0x10001, 0x0, 0x9, 0x2, 0x3, 0x3, 0x8, 0xa2cc, 0x1, 0x4, 0x9, 0x0, 0xac, 0x5, 0xf3f, 0x3ff, 0xfff, 0x2, 0x8, 0xd, 0xfffffeff, 0x7, 0x7ff, 0x1ff, 0x1, 0xfffffffd, 0xa, 0xb, 0x1b73, 0x3, 0xa755, 0xffffffc0, 0x0, 0x5, 0xfffffffd, 0xe, 0xd5f, 0x1, 0x5, 0x6c, 0x3, 0x1, 0x3, 0x3df, 0x7, 0x7, 0x4, 0x7, 0x3a2a665c, 0x8, 0x5, 0x0, 0x5, 0x7, 0xb, 0x1, 0x1, 0x0, 0xf09b, 0x7, 0xffff9f03, 0x1, 0x8, 0x1, 0x2, 0x103, 0x0, 0x80, 0x8, 0x7fffffff, 0xd, 0x4ca, 0x3e4f, 0x3, 0x5db9, 0x10, 0x1, 0x40, 0x1, 0x8, 0x8000]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x8001}]}, @TCA_BASIC_ACT={0x3c48, 0x3, [@m_csum={0xf8, 0x16, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x800, 0x2, 0x5}, 0x34}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x6, 0x2, 0x0, 0x1, 0x9}, 0x7d}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0x9, 0xb, 0x1000, 0x1}, 0x5e}}]}, {0x77, 0x6, "0cfb5dd7595fd3c66a22ed1329008965b55bdb7e516087a40980aa87374ee84aebdad005ac285ccc1ac49fc5320f274ee1973da2694bc6e9df2da0dee72adb2d2450f8d6350872893c11615c0dd6762d686caacf12e7896132c3f7bbb604eda6cd8001d8c25d2d4adf4a3678a258dfeea8c1a7"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_pedit={0x3b4c, 0xb, 0x0, 0x0, {{0xa}, {0x3adc, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xf10, 0x4, {{{0x1, 0x7, 0x5, 0x9, 0xfff}, 0x9, 0x4, [{0x9, 0x30e, 0xcc, 0x884, 0x9, 0xe}, {0x45c, 0x2, 0x343, 0x5, 0x4aec, 0xfffffffd}, {0x5, 0x7, 0xf, 0x0, 0x3, 0x6}, {0xef65, 0xffffffff, 0x10, 0x2, 0x4, 0x5}, {0x10, 0x2, 0x531, 0x56, 0x8, 0xcf}, {0x10001, 0x0, 0x4, 0x874c, 0x8, 0x7f}, {0x3ff, 0x81, 0x9, 0x734, 0x6, 0xba2}, {0x3ff, 0x8, 0x0, 0x2, 0x1}, {0x8, 0x341, 0xe4, 0x2, 0x3, 0x6}, {0x9, 0x7ff, 0x7, 0x1eeb9507, 0xa809, 0xb73}]}, [{0x8, 0x10000, 0x80000, 0x2ca, 0x4, 0x1}, {0x10, 0x1, 0x1, 0x1, 0x809, 0x2}, {0x0, 0x80000000, 0x4, 0x3, 0x7d, 0x9}, {0xb2f3, 0x5, 0xdab3, 0x100, 0x9, 0x1}, {0x4, 0x6, 0x9011, 0x7, 0x5, 0x10001}, {0x2, 0x3eb0, 0x3, 0x520b, 0x0, 0x2}, {0x5, 0x0, 0xfbee, 0xa, 0x4c, 0x6}, {0x101, 0x6, 0x1, 0x6, 0x7, 0x8}, {0x7, 0x7f, 0x2, 0x3, 0x6, 0x2}, {0x5, 0x2, 0x0, 0x11, 0x1fa6, 0x5}, {0x5, 0x7, 0x3c5, 0x10001, 0x3, 0xfffffffa}, {0x6, 0x7ff, 0xfff, 0x3, 0x4, 0x2}, {0x3, 0x2686, 0x4, 0xbfd4, 0x8, 0x8000}, {0x6, 0x9, 0x5, 0x1f, 0x1, 0x80000001}, {0xb, 0x760c, 0x5, 0x7ff, 0x8, 0x5}, {0xfffffff9, 0x9, 0x7d8, 0x0, 0x81, 0xa}, {0x6a, 0x5, 0x8, 0x2, 0x3ff}, {0xc, 0x7, 0x7, 0x7, 0x72, 0x3}, {0x1, 0xef6, 0xddd5, 0xffffffff, 0x0, 0x5}, {0x5, 0x7, 0xc8, 0x1000, 0x0, 0xbdb}, {0x7fff, 0x7, 0x1, 0x11ba, 0x1000}, {0x7, 0x6, 0x2, 0x800, 0x0, 0x4}, {0x9, 0x6, 0x3ff, 0x9, 0x3, 0x7}, {0x0, 0x0, 0x3, 0x3, 0x755, 0x24}, {0x2, 0x8, 0x1, 0xecf, 0x8, 0xa2c5}, {0x4, 0x90c9, 0xffb, 0x1, 0x1, 0xffff}, {0x5, 0x2, 0x9, 0x8, 0x0, 0x80000000}, {0x5, 0x5, 0x0, 0x8, 0xfffff40b, 0x2}, {0x508f, 0x2, 0x401, 0x7fff, 0x4, 0x6}, {0x9, 0x80000001, 0x0, 0x9, 0xb, 0x8}, {0x6, 0x47d, 0x1, 0x0, 0xfe25, 0x20000}, {0x10000, 0x3, 0x2, 0x3, 0x1, 0x4b2d}, {0x5, 0xffffffff, 0xdf35, 0x9, 0x5, 0x8}, {0x7f, 0x1e906939, 0x0, 0xfffffff3, 0x1000, 0x3}, {0x3, 0x1ff, 0x4, 0xb, 0xc6e1, 0xffff}, {0x1, 0x1ff, 0x3, 0x2c404433, 0x10000, 0x8}, {0x2, 0x0, 0x4, 0x80000001, 0x2f, 0x6}, {0x5d, 0x5, 0x5, 0x1, 0x7fff, 0x81}, {0xc0000, 0x9, 0x6, 0x7, 0xfc0000, 0x1}, {0x1000, 0x10000, 0x7, 0x8, 0x232}, {0x80000001, 0x3, 0xffffffff, 0x7, 0x6}, {0x1, 0x5, 0x5, 0x0, 0x200, 0x80000000}, {0x3, 0xfb850eb, 0xb, 0x1, 0x5, 0xef49}, {0xffffffa2, 0x7, 0x3a5, 0xffffffff, 0x8, 0x1000}, {0x3ff, 0x94, 0x101, 0x3d, 0x2e85, 0x7}, {0xc352, 0x401, 0x4, 0x9, 0x7, 0x3ff}, {0x4, 0x5, 0xc, 0xfffffe01, 0x8623, 0x1d}, {0x6, 0xe, 0x9, 0x5, 0x6}, {0xff, 0x5, 0x4, 0x8, 0x76, 0x8}, {0x7, 0x1, 0x8000, 0x1800000, 0x6a4, 0x9}, {0x6, 0x0, 0x80000000, 0x1, 0x8, 0x5}, {0x7, 0x7, 0x4, 0xfff, 0x8, 0x9}, {0x5, 0x2, 0x5c2, 0x4, 0x1000, 0x6}, {0x3, 0x6, 0x4, 0x8, 0x7f}, {0x9, 0x4, 0x5, 0xffffffff, 0x80, 0x7}, {0x4, 0xc34, 0xc9, 0x6, 0x1, 0x4}, {0x101, 0x9, 0x8, 0x5, 0x3, 0x4}, {0x7a7eee3b, 0xe, 0xfffff176, 0x7, 0x3}, {0x2, 0x5, 0x7708, 0x6, 0x3, 0xb1b9}, {0x8, 0x2, 0x4, 0xffffff01, 0x0, 0x4}, {0x9, 0x5, 0x3, 0xa, 0x3, 0xfffffffc}, {0x6, 0x8, 0x401, 0x6e, 0x25, 0xfffffffa}, {0x8, 0x8, 0x8, 0xfffffffe, 0x387d, 0xfbfc}, {0x1, 0x0, 0xc, 0x1000, 0x8, 0x100}, {0x3, 0x57, 0x7, 0x1, 0x8, 0x45}, {0x9, 0x5, 0xb1a, 0x9, 0x8, 0x240000}, {0x9, 0x8, 0x6, 0x2, 0x5, 0x3}, {0x7, 0x7, 0x1, 0x8, 0x0, 0x5}, {0x10001, 0xb820, 0xe3, 0x80000001, 0xc000000}, {0x2, 0x9, 0xd6, 0xd, 0x3, 0x1111}, {0x2, 0xfff, 0x3749, 0x1, 0x9, 0x7fff}, {0x8, 0xa75, 0x1, 0xbacd, 0x1, 0x6}, {0x10000, 0xfff, 0x3, 0x2, 0x5, 0x2}, {0x4, 0x1, 0x5405, 0x200, 0xa16, 0x1}, {0x3, 0x8, 0x9, 0x0, 0x5, 0x8}, {0xd, 0xa, 0x10000, 0x2, 0x0, 0x2000000}, {0x5, 0x7fffffff, 0x7, 0x5, 0x2, 0x520}, {0x4, 0x6, 0xfffffff8, 0x8, 0x10001, 0x800}, {0x9, 0x9, 0x6, 0x5, 0x44b, 0x1}, {0x8, 0xfffffffc, 0x0, 0x200, 0xa3e, 0x2}, {0x5, 0xbc654eb, 0x3, 0x9, 0x1, 0x4}, {0x2, 0xd434, 0x7, 0x5c, 0x1, 0x3}, {0x719, 0x80000001, 0x3, 0x10, 0x7de, 0x7}, {0x7, 0xfffffffc, 0x9, 0x8, 0xffff, 0x40}, {0x2, 0x0, 0x4, 0x0, 0x4, 0x6}, {0x5, 0x9, 0x7, 0x5, 0xafe, 0x7fffffff}, {0x2, 0x81, 0x2, 0x81, 0x2, 0x4}, {0x0, 0xb, 0x1, 0x81, 0x8001, 0x2ade}, {0x100, 0x3, 0xe, 0x1, 0x1, 0x7ff}, {0x8, 0x10, 0xff, 0x6, 0x8000, 0x6}, {0xfffffffd, 0x7240, 0x3, 0xe1d, 0x5, 0x7}, {0x8, 0x101, 0x20000, 0x6, 0x7}, {0x6, 0x7, 0xff, 0xd1c7, 0x200, 0x5}, {0x1, 0x8, 0x2, 0x0, 0xa90d, 0x3}, {0x9, 0x3, 0x0, 0xa, 0x100, 0xb}, {0x3, 0x100, 0x3ff, 0x5, 0x9}, {0x4, 0x7, 0xc, 0xffffffff, 0xb28, 0x8000}, {0x5, 0x0, 0x0, 0x81, 0x3, 0x7}, {0x5b, 0x8, 0x1000000, 0x4, 0x3, 0x4}, {0x0, 0x0, 0x3, 0x4, 0x1, 0x4}, {0x9, 0x7609, 0x80000001, 0x7}, {0x6, 0x7ff, 0x0, 0xd0, 0xe2, 0x8}, {0x7, 0x8, 0x9, 0x3, 0x9, 0x7}, {0x5, 0x4, 0x7fffffff, 0x7ff, 0x2, 0x2}, {0xffffffff, 0x80000001, 0x527, 0x9, 0x800, 0x6}, {0xfffffffb, 0xfffffffb, 0x8001, 0x3, 0x70f, 0x6}, {0x1, 0x8, 0x2, 0xfffffff9, 0x7, 0x8}, {0x8, 0x3, 0x5, 0xde9, 0x33, 0x1}, {0x87, 0x7, 0x49, 0x87b5, 0x6, 0x8001}, {0x4, 0x3, 0x3, 0xc, 0x4}, {0x0, 0x8, 0x3, 0x4, 0x4, 0x401}, {0x3, 0x7ff, 0x2, 0x3, 0xe56}, {0x6, 0x4, 0x7, 0x800, 0xf, 0x1}, {0xffffffff, 0x2, 0x37abc71d, 0xffd4, 0x3, 0x1e}, {0x8, 0x800, 0x97dd, 0x3, 0x4, 0x8}, {0x3, 0x800, 0x80, 0x4, 0x8000, 0xc}, {0xdcae, 0x2, 0x695, 0x7fff, 0x6, 0xe9}, {0x4a3a, 0xd1c, 0x2, 0x80000001, 0x2, 0x401}, {0x401, 0x80000001, 0xd, 0x56, 0x4, 0x3}, {0x5, 0x3, 0x2, 0x3, 0x8001, 0x8}, {0x7, 0x101, 0xaada, 0x6, 0x5, 0x3}, {0x4cb6, 0x8, 0x1d2b, 0x800, 0xae, 0xfffffffa}, {0xfffffff9, 0xfffffffb, 0x4, 0x401, 0x6}, {0x6, 0x6e, 0x9, 0x2, 0x100, 0x10}, {0xd, 0x9, 0x0, 0x6, 0x400, 0x4}, {0x575b, 0x7f, 0x92, 0x2, 0x3c6, 0x7}, {0xffff, 0x64, 0xfffff77e, 0x6e, 0xa4c, 0x7}, {0x1, 0xf, 0x3, 0xfffff801, 0x7ff, 0x2}], [{0x4, 0x1}, {}, {0x5, 0x1}, {0x3}, {0x4}, {0x2, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x6, 0x1}, {}, {0x2, 0x1}, {0x1}, {0x2, 0x1}, {0x4}, {0x2}, {0x5}, {0x4}, {0x0, 0x1}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x1}, {0x5}, {0x4, 0x1}, {}, {0x3, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x3, 0x1}, {0x2}, {0x0, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0xab8dcdf96fe3b46c}, {}, {0x5}, {0x0, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {}, {0x1, 0x1}, {0x3}, {0x3, 0x1}, {0x2, 0x1}, {0x4}, {0x4}, {0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x2}, {0x5, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x1}, {0x1, 0x1}, {}, {0x1, 0x1}, {0x5}, {0x0, 0x1}, {0x2}, {0x3}, {0x4, 0x1}, {}, {0x2, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x1}, {0x2}, {0x4, 0x1}, {0x2, 0x1}, {0x2}, {0x1, 0x1}, {0x3}, {0x5}, {0x0, 0x1}, {0x3}, {0x1, 0x1}, {0x3}, {0x2, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x2, 0x1}, {0x3, 0x1}, {0x1}, {0x4}, {0x2}, {0x0, 0x1}, {0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x3}, {0x4, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x1}, {0x2}, {0x5, 0x1}, {0x1}, {0x2}, {0x0, 0x1}, {0x0, 0x1}], 0x1}}, @TCA_PEDIT_PARMS={0xec8, 0x2, {{{0x6, 0x800, 0x5, 0x800, 0x8}, 0x2, 0x4, [{0x8001, 0x68c, 0x6, 0x7f, 0x9, 0x4}, {0x6, 0x1, 0x1, 0xe7, 0x1, 0x9}, {0x7, 0x1ff, 0xfffffffe, 0x40601276, 0x9316, 0xc8}, {0x1, 0x7, 0x4, 0xa91d, 0x11dc, 0x9}, {0xff8, 0x0, 0x5, 0xfffffff9, 0xe475, 0xbf}, {0x8f, 0x4, 0x0, 0x200, 0x1, 0x2}, {0x6, 0xffff, 0x8, 0xffff, 0x3, 0x1}]}, [{0x80, 0x8, 0xf, 0xb24, 0xfffffffb, 0xce1}, {0x6, 0xf, 0x80000001, 0x1, 0x843, 0x8}, {0xffffff80, 0xffff5080, 0x2, 0xb, 0x4}, {0x5, 0x2, 0x9, 0x4, 0x7, 0x8000}, {0xd973, 0x1, 0xb86f5da, 0x1, 0x2, 0x6}, {0x57, 0x8, 0x9, 0x5, 0x9, 0x1}, {0x2, 0xfffffffb, 0x10, 0x3, 0x3, 0x8}, {0x5, 0x1ff, 0x0, 0x56d6a1ee, 0x2, 0x5}, {0x3f7, 0x1, 0x7f, 0x3, 0x1000, 0x8}, {0x5, 0x5, 0x7, 0x7fffffff, 0x7fffffff, 0x2205}, {0x80000000, 0x3, 0x7fffffff, 0xa7, 0x8, 0x3}, {0xfac, 0xffff, 0x200, 0x24, 0x1ff, 0x10}, {0x4a0, 0x2, 0x7, 0xa}, {0x2, 0x0, 0x8, 0xffffffff, 0xca82, 0x9}, {0x893f, 0xfffffffb, 0x10, 0xc2, 0x0, 0x8}, {0x8, 0x1, 0x8, 0x5, 0x100, 0x2}, {0x3, 0x0, 0x4, 0x605, 0x431a, 0x7fff}, {0x1510, 0x5, 0x2, 0x100, 0xe, 0x5}, {0x10001, 0x3, 0xb, 0x80000001, 0x7, 0x8}, {0x5, 0xfffffffc, 0x4, 0x4, 0x3, 0x4}, {0x9, 0xfffffffb, 0xfffffff2, 0xfff, 0x3, 0x800}, {0x3, 0xb, 0x0, 0x6, 0x93, 0x3}, {0x4, 0x3, 0x9, 0x6, 0x9}, {0x0, 0x81, 0x7, 0x1, 0x8, 0x7}, {0x7f, 0x6, 0x5, 0xeba0, 0x6, 0x101}, {0x10000, 0x7, 0x8, 0xffffffff, 0xd, 0x5}, {0xffff55dc, 0x80, 0x3, 0x1, 0x8001, 0x9}, {0xfffff87a, 0x7ff, 0x7, 0xc706, 0x1ff, 0xc}, {0x0, 0x401, 0xfffffff2, 0x2, 0x8ff5, 0x1}, {0x5, 0x1, 0x9, 0x0, 0xfffffffe, 0x3}, {0x430000, 0x800, 0x3, 0x5, 0x0, 0x4}, {0x9, 0x4, 0x7, 0x0, 0x7, 0xc}, {0x2, 0x7, 0x421, 0x14162228, 0x9, 0x19f}, {0x4, 0xffc00000, 0x7, 0x0, 0xe739, 0x5}, {0x4, 0x3d67, 0x81, 0x7, 0x8, 0x2}, {0x3, 0x5, 0x9, 0x5, 0x7, 0x5}, {0x2, 0x53ff, 0xfffffffe, 0x8, 0xa00, 0x94b}, {0x2, 0x401, 0x66a1, 0x7, 0x4, 0x3}, {0xff, 0x0, 0x6, 0x1, 0x93c7, 0x2}, {0x7, 0x80000001, 0x2, 0x4, 0x80000000, 0x4}, {0xbae, 0x6, 0xfffffffb, 0x4, 0x93ae, 0x10000}, {0x1, 0x5, 0x2, 0x3, 0x0, 0x3}, {0x8, 0xb3, 0x4b4, 0x7bb, 0x31a3fba1}, {0x605a7e18, 0x9, 0x0, 0x5, 0x2, 0x5}, {0x1, 0xee, 0x1, 0x200, 0x7, 0x3}, {0x6, 0x7, 0x46af, 0x5, 0x200, 0x8}, {0x3, 0xffffffff, 0xe8, 0x2, 0x5, 0x8}, {0x8001, 0xfffffffe, 0x8, 0x8, 0xfffffff0, 0x3}, {0x4, 0xa, 0xbc, 0x0, 0x7ff, 0x800}, {0x3, 0x3, 0x7, 0x7fffffff, 0x1000, 0x9}, {0x63ffa770, 0x7, 0x3, 0x0, 0x1, 0x7}, {0x7, 0xfd4f, 0xe0000000, 0x83a3, 0x3, 0x4}, {0xfffffff7, 0x8, 0x0, 0x478800, 0x2, 0x1}, {0x7fff, 0x1, 0xff6, 0x4, 0x7, 0x7ff}, {0x2, 0x101, 0xa6, 0x5f1e, 0xf, 0x38000}, {0x773d, 0xc1c1, 0x0, 0x4, 0x9, 0x6}, {0x9, 0x7, 0x5, 0xda, 0x6, 0x8}, {0xa7, 0x0, 0xfffffffc, 0x9, 0x0, 0x5}, {0xc, 0x2, 0x0, 0x10001, 0x9, 0x800}, {0x8, 0x0, 0x5, 0x1, 0x10001, 0x6f}, {0x74c, 0x1, 0x6, 0x1000, 0x9, 0x3}, {0x29, 0x7, 0x99, 0x2, 0x7, 0xf9}, {0x2, 0x3, 0x0, 0xa, 0x1, 0x4}, {0x1000, 0x6, 0x1, 0x3, 0xfffffe01, 0x3}, {0x7, 0x5, 0x3, 0x3, 0x0, 0x4}, {0x5, 0x3, 0x5, 0x401, 0x4, 0xb91}, {0x3581, 0x401, 0x5, 0xe2, 0x7, 0x4}, {0x1, 0x70f, 0x6, 0x2, 0x11b73be, 0x2}, {0x7, 0x9, 0x0, 0x40, 0x5, 0x2}, {0xff, 0x18, 0x7, 0x9, 0x5, 0x6}, {0x0, 0x10, 0x0, 0x6, 0x6, 0x6b}, {0xff, 0x10000, 0xdffffffb, 0x9, 0xffffffdf, 0x2}, {0x80000000, 0x5, 0xa2, 0x8001, 0x9, 0xfffffffc}, {0x6, 0x0, 0x67, 0x0, 0xcef, 0x7}, {0x4, 0x3, 0x8000, 0x10000, 0x6, 0x3d1}, {0x5, 0xafd, 0x1, 0x8, 0x9, 0x3}, {0x5, 0x8, 0xfff00000, 0x0, 0xd2, 0x101}, {0x8000, 0x40, 0x5, 0x0, 0x3, 0x4}, {0xe, 0x80000001, 0x4, 0x280, 0x4, 0x5}, {0x1, 0x9690, 0x8, 0x40, 0x7}, {0x8, 0x3ff, 0x3, 0x7, 0x6, 0x6}, {0x9, 0x4, 0x9, 0x8001, 0x6, 0x10001}, {0x2, 0xe, 0x3, 0x9, 0x17, 0x3}, {0x6, 0x7f, 0x9, 0x746d, 0x2, 0x7f}, {0x2, 0xf, 0x7f, 0x10000, 0x8, 0x8}, {0x7, 0x4, 0x100, 0x8, 0x8, 0xefe4}, {0x9, 0x1c, 0x8, 0x0, 0x8001, 0x1}, {0x32, 0xb8, 0x1ff, 0x2, 0x6, 0x800}, {0x3, 0x2b4869ab, 0x93e, 0x8d86, 0x38, 0x1}, {0x7, 0x1, 0x4, 0x5, 0x80000000, 0x5402}, {0x2d290004, 0x3, 0x9, 0x7, 0xff, 0x71}, {0x8, 0x1f4b51cf, 0x8, 0x7, 0x8000, 0xfffffff8}, {0xfffffffa, 0x7, 0x4, 0x4, 0x400, 0x3e6c}, {0x1, 0xffff, 0x8, 0x7f, 0x2, 0x8}, {0x3, 0xc, 0xc885, 0x0, 0x1, 0x6}, {0x0, 0x7, 0xb, 0x4, 0x4, 0x4}, {0x3, 0x6, 0x7, 0x9, 0x8000, 0xff}, {0x4, 0xdf, 0x200, 0x401, 0x7ff, 0x6}, {0x6ab, 0x8, 0x9, 0xc, 0x3, 0x3ff}, {0x2, 0x6, 0x0, 0x0, 0x4}, {0x1, 0x10001, 0x7ff, 0xf, 0x7, 0x2}, {0x7, 0xffffffff, 0x7ea20224, 0xf, 0x44e, 0x1200}, {0x1, 0x6, 0x4, 0x800, 0x0, 0x80}, {0x3, 0x7, 0x5, 0x10001, 0x81, 0x2}, {0x600, 0x7, 0x8, 0x1, 0xe6fc}, {0x3, 0x4, 0x5, 0x4, 0x1, 0x5}, {0x9, 0x8, 0x3, 0x6, 0x6, 0x7}, {0x2, 0x4, 0x7, 0xdec, 0x2, 0x9}, {0x7, 0x49, 0x2, 0x301, 0x1, 0xa}, {0x7f, 0x3, 0x80, 0x6, 0x4, 0xdf}, {0xc9, 0xab, 0xcbf3, 0x5, 0x5, 0x8}, {0x8001, 0x9, 0x8, 0x7, 0xacdd, 0x6}, {0x1000, 0x1, 0x6, 0x7, 0x4, 0xb}, {0x101, 0x5, 0x7, 0x59, 0x7fff, 0x7}, {0xfffffffd, 0x9, 0xfffffff7, 0x2, 0x10, 0x6}, {0xfff, 0x38, 0x8, 0x5, 0x1}, {0xae35, 0x8, 0xfffffff7, 0x100, 0x4, 0x4}, {0x7ff, 0x2, 0x0, 0x6, 0x0, 0x7fffffff}, {0x0, 0x8, 0x400, 0x8000, 0x9d0c, 0x2}, {0x1ff, 0x3, 0x1000, 0x5, 0x7, 0x10}, {0x5, 0x257, 0x7, 0x2, 0x0, 0xa74c}, {0x2, 0x5, 0x0, 0x3, 0xb, 0x40000000}, {0x4, 0xb5a, 0xb, 0xc7, 0x8001, 0x8}, {0xff, 0xb50d, 0xc, 0x4, 0x7, 0x3}, {0x800, 0x1, 0x2, 0x1ee, 0x354, 0x4}, {0x3, 0x3, 0x7, 0x1, 0x8, 0xf44}, {0x732a, 0x0, 0x1, 0x9, 0x5c43d063, 0x4}, {0xbb30, 0x40, 0x5b8, 0x0, 0x16, 0xb15}], [{0x2}, {0x1}, {0x0, 0x1}, {0x6}, {0x3, 0x2}, {0x4}, {0x3, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x1}, {0x4, 0x1}, {0x3}, {0x3, 0x1}, {0x2}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {}, {0x1, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x3}, {0x3, 0x1}, {0x5}, {0x4}, {0x4, 0x1}, {0x1, 0x1}, {0x2}, {0x5, 0x1}, {0x5}, {0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x3}, {0x4, 0x3}, {0x0, 0x1}, {0x4}, {0x3}, {}, {0x0, 0x1}, {0x1, 0x1}, {0x1}, {0x4, 0x1}, {}, {0x1}, {0x2, 0x1}, {0x1}, {0x0, 0x1}, {0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x4}, {}, {0x3}, {0x2}, {0x2}, {0x1}, {0x4, 0x1}, {0x3}, {0x4}, {0x1, 0x1}, {0x3}, {0x3, 0x1}, {}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x4}, {0x3, 0x1}, {0x4, 0x1}, {0x1}, {0x3, 0x1}, {0x2}, {0x2}, {0x2}, {0x4, 0x1}, {0x2}, {0x5, 0x1}, {0x2}, {0x3}, {}, {}, {0x2}, {0x1, 0x1}, {0x1, 0x1}, {0x4}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x3}, {0x5, 0xd0341debddf00996}, {0x5}, {0x5, 0x1}, {0x1, 0x1}, {0x4}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x4}, {}, {0x3, 0x1}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x2}, {0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x5}, {0x4, 0x1}, {0x3, 0x1}, {0x5}, {0x1, 0x1}, {0x1, 0x1}], 0x1}}, @TCA_PEDIT_PARMS_EX={0xe80, 0x4, {{{0x5, 0xc, 0x20000000, 0x6, 0x80000000}, 0x9, 0x6, [{0x9, 0xe, 0x9, 0xfffffffc, 0x1, 0x7fff}, {0x7fffffff, 0x8, 0xe93a, 0xf2, 0x9, 0xa24}, {0x69, 0x0, 0x4, 0xa53, 0x1ff, 0xaf1}, {0x536d, 0x9, 0x80000001, 0x0, 0x0, 0x3}]}, [{0x8, 0x7, 0x9, 0x2, 0x6, 0x8c}, {0x8, 0x101, 0x5, 0x6, 0x6}, {0xfff, 0x2, 0x100, 0xc43e, 0x6, 0xbe5b}, {0x0, 0xffff7fff, 0x7367, 0x0, 0x120, 0x9}, {0x58, 0xfffffffc, 0xa0b, 0x0, 0x8, 0xf51}, {0x7, 0x8, 0x80000001, 0x2c9, 0x11, 0x4}, {0xfffffffc, 0x37, 0x2f5, 0x7, 0x0, 0x800000}, {0x0, 0x3ff, 0x782, 0x3ff, 0x4, 0x7}, {0x2, 0x2, 0x9, 0x8, 0x8, 0xc2f}, {0x8, 0x8f46, 0x636b, 0x7, 0xfffffff8, 0xfffffff1}, {0x401, 0xffff, 0xffffffff, 0x4, 0x2, 0xa14}, {0x1, 0x0, 0x10000, 0x1, 0x100000, 0x5}, {0x7018df89, 0x2, 0x0, 0xbda, 0x8, 0xf479}, {0xffffffff, 0x94b7, 0x2, 0x101, 0x9, 0x4}, {0x1, 0x0, 0x3, 0x8, 0x4}, {0x0, 0x5, 0x2, 0x7f8, 0xfffffffb, 0x10001}, {0x7, 0x7f, 0xfffffffa, 0x7, 0x9a3, 0x4}, {0x6, 0xffff, 0x1, 0x2, 0x9, 0x9}, {0x3, 0x3, 0xe, 0x9, 0x7, 0x7}, {0x1, 0x80, 0xdf8, 0x8, 0x6, 0xda8a}, {0x2b, 0x9, 0x8, 0x9, 0x1, 0x200}, {0x7, 0xd7, 0x30, 0x8, 0xc1, 0x677f}, {0x7, 0x8, 0x8, 0x7, 0x38c, 0x22}, {0x2, 0x80, 0x9, 0x5, 0x80000001, 0xfffffff7}, {0x6, 0x3ff, 0x1, 0x2, 0x4241, 0x2}, {0x6dd, 0x3, 0x51, 0xa, 0x4}, {0xf1, 0x7f, 0xdf, 0x5, 0x7, 0x5}, {0x6, 0xbcf, 0x1, 0x8fc, 0x8000, 0x6}, {0x2, 0xfffffff9, 0xfffffffe, 0x8, 0x6, 0x6}, {0xffffffff, 0x3, 0xcece, 0x6, 0x0, 0x8}, {0x2c, 0x8, 0x8, 0x9, 0x7cd, 0x1}, {0x7f, 0x1c0, 0x7dc, 0x5, 0x40, 0x2}, {0x7e0, 0x1, 0x3ff, 0x3ff, 0x2, 0x2}, {0x1, 0x7fffffff, 0x79, 0x990, 0x0, 0x6}, {0x0, 0x6, 0xa, 0x200, 0x9, 0x1}, {0x9, 0x1, 0x6, 0x41bc, 0x1, 0x80}, {0x9cc, 0x8, 0x6, 0x8, 0xd52, 0x9}, {0x9, 0xffffffff, 0xff, 0xfffffff9, 0x7, 0x2}, {0x0, 0x7, 0x2, 0xff, 0xddb1, 0x8001}, {0x8, 0xaea, 0x2, 0x17e4, 0x9f65}, {0xa659, 0xffff04ae, 0x400080, 0x2, 0x470d}, {0x7f, 0x917, 0xffffffff, 0x1, 0x1, 0x80000}, {0x7fff, 0x8, 0x3, 0x80000000, 0x9403}, {0x42, 0x1, 0xff, 0x9, 0x7, 0x5}, {0x3, 0x7, 0x9b42, 0x8, 0x7, 0x5}, {0x9, 0x1, 0x1000, 0x3, 0x4, 0x7}, {0x7, 0x7fffffff, 0x3ff, 0x4, 0x1, 0x1}, {0x3, 0x4, 0x9, 0x8, 0x1, 0x8}, {0x8, 0x3, 0x5e29beb0, 0x100, 0x7fffffff, 0x7}, {0xd3, 0x9, 0xc82, 0x3, 0x9, 0x5}, {0x8, 0xffffffff, 0x7f, 0x73a, 0x81a6, 0xa}, {0x8, 0x8, 0x6, 0x5, 0x3, 0x82}, {0x40, 0x97be, 0x0, 0x3, 0x7ff, 0xf369}, {0x3ff, 0x1, 0x1, 0x5316, 0xfffffffd, 0xe0}, {0x2, 0x100, 0xfffffffa, 0x6, 0x7fff, 0x5}, {0x1, 0x800, 0x7f, 0x5, 0x8, 0x6b7}, {0x7fff, 0x8001, 0x800, 0x1000, 0x3, 0x3}, {0x5, 0x80000001, 0x1, 0x5, 0x58f, 0x9}, {0x3, 0xc, 0x7ff, 0x10001, 0xf14, 0x2}, {0x5, 0x4, 0x80000000, 0xfffffffa, 0x9}, {0x4, 0x9, 0x5, 0x2, 0x7, 0xffffffff}, {0x80000000, 0x65, 0x4, 0xb1, 0x10, 0x3}, {0xfff, 0x6, 0x2, 0x0, 0x1000, 0x8b54}, {0x4, 0xfffffff7, 0x4, 0x5, 0x0, 0x10001}, {0x9b, 0x200, 0x1, 0x8, 0x6, 0x6}, {0x3, 0x8, 0x9, 0x0, 0x9, 0x8000}, {0x1, 0x7fffffff, 0x7, 0x5, 0x1, 0x8f}, {0xa, 0x9, 0x7fff, 0x10001, 0x6, 0x7fffffff}, {0x447, 0x5, 0x7, 0x3, 0x5, 0x6}, {0x0, 0xffff, 0x8000, 0x8, 0x3, 0x9}, {0x4, 0x7800, 0x9, 0x40, 0x799a, 0x6}, {0x1, 0x9, 0x3, 0x3, 0x3, 0x2}, {0x8, 0x401, 0x3, 0xffffffff, 0x4, 0x400000}, {0xa0e, 0xd061, 0x2, 0x9, 0x3, 0x5}, {0x3, 0x80000000, 0x3, 0x2, 0x3, 0x1}, {0xf8000, 0xd, 0x8, 0x7, 0x7, 0x2}, {0x8000, 0xb, 0x5, 0xfffffff9, 0x2, 0x9}, {0x9, 0x736b, 0x100, 0x0, 0x4010, 0x8}, {0x5, 0xf, 0x1, 0x1, 0xffff43bf, 0x6}, {0x5, 0x5, 0x3de4e382, 0xd800, 0x3, 0x6}, {0xe6bd, 0x10000, 0x0, 0x588, 0xc2, 0x7595}, {0x81, 0x1000, 0x5, 0x1ff, 0x9, 0x81}, {0x3, 0x1, 0xc6c, 0x7}, {0x9, 0x7, 0xeca, 0x8, 0x1, 0x2}, {0x9, 0x2, 0x0, 0x8, 0x0, 0x6}, {0x3, 0x4, 0x8e3, 0xf85a, 0x5, 0x7fff}, {0x151f, 0x55, 0x80000000, 0x8, 0x81, 0x240000}, {0xffffffff, 0x80, 0x8c7, 0xfffffffa, 0xc9, 0x6}, {0x1, 0x1, 0x6, 0x4, 0x8, 0xffff}, {0xe4, 0x7ff, 0x9, 0x7, 0xb4, 0x8}, {0x7c7, 0x6abd, 0x4, 0x1, 0xa827, 0x8000}, {0x81, 0x1, 0x4, 0x2458b67f, 0x8}, {0x5, 0x4, 0x7fff, 0xf473, 0x915, 0x1000}, {0x7, 0x8f17, 0x80000001, 0x8, 0x4, 0x400}, {0x47, 0x4, 0x8001, 0x0, 0xfffff69b, 0x410f}, {0x8001, 0xd2, 0xc219, 0x3, 0x4, 0x71}, {0x47d, 0x9, 0x8, 0x3, 0xfff, 0x3}, {0x1ff, 0xc, 0x3, 0x7, 0x3, 0xa20}, {0xc, 0x1, 0x7f, 0x3, 0x2, 0x5}, {0x0, 0x400, 0x1ff}, {0xb, 0xffffffff, 0xffff, 0x3, 0x6, 0x6}, {0x0, 0x4, 0x6, 0xc, 0x9, 0x2}, {0x7fffffff, 0x3, 0x8, 0x8, 0x1a4c, 0x6}, {0x9, 0x7ff, 0x33, 0x2f, 0x7, 0x3}, {0x3, 0x6, 0x7, 0xffffffff, 0x6, 0x8}, {0x2, 0x0, 0x10, 0x2, 0x5, 0x8}, {0x1, 0xf4, 0x2, 0x2, 0x6879a5a9, 0x80000001}, {0x7, 0x3, 0x3, 0x5, 0x3, 0x8}, {0x40, 0x406, 0x4, 0x3bbf, 0xfffffffa, 0x4}, {0x5, 0x8, 0x5, 0xcb6, 0x15, 0x64f}, {0xea, 0x1, 0x2, 0x906, 0x3, 0x1}, {0x8, 0x6, 0x859, 0x7, 0x3ff, 0x1}, {0x5, 0x7, 0xb, 0x0, 0x7, 0x5}, {0x38, 0x1, 0x0, 0x7fff, 0x5, 0x6}, {0x9, 0x1000, 0x5, 0x3, 0x40, 0x6bc8}, {0xfffffff8, 0x4c, 0x0, 0x6, 0xef, 0x2}, {0x7f, 0x2cacbd14, 0x0, 0x3, 0x8, 0x1}, {0x6, 0x2, 0x8, 0xf36, 0xd4c7, 0x3}, {0x1, 0x7, 0xe0, 0x3, 0x6, 0x8}, {0x6, 0xa47, 0x5, 0x3, 0x800, 0x6}, {0x0, 0xb892, 0xca8, 0x2, 0xbbd9, 0x9413}, {0xfffffffe, 0x1ff, 0x1, 0x9, 0x1000, 0xfffffff7}, {0x7, 0x1, 0x10001, 0x7, 0x1, 0xff}, {0x6, 0xf, 0x7, 0x2, 0x1, 0x9}, {0xfffffffa, 0xffff, 0x2, 0x1e, 0xfffffffd, 0x1}, {0x7, 0x8, 0x7, 0xf, 0x6, 0x80000001}, {0x1, 0x357000, 0x8000, 0x1ff, 0x8, 0x8e6c}, {0x8000, 0x4, 0x7, 0x2, 0xffffffff, 0x7}], [{0x0, 0x1}, {0x1}, {0x4, 0x1}, {0x4}, {0x1, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x2}, {0x2}, {0x5}, {0x3, 0x1}, {0x3, 0x1}, {0x2}, {0x2, 0x1}, {0x3}, {0x4}, {0x4}, {0x3}, {0x5}, {0x4}, {0x3}, {0x5}, {0x3}, {0x0, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {}, {0x5}, {0x1}, {0x5}, {0x1, 0x1}, {0xef279a776664bab1}, {}, {0x5, 0x1}, {0x2}, {0x4, 0x1}, {0x4, 0x1}, {}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x6}, {0x2}, {0x3, 0x1}, {0x7, 0x1}, {0x0, 0x1}, {0x2}, {0x2}, {}, {0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x5}, {0x1}, {0x4, 0x1}, {0x4}, {0x1, 0x1}, {0x1}, {0x3}, {0x5, 0x1}, {0x5}, {0x2, 0x1}, {0x5}, {0x5}, {0x3}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x0, 0x1}, {0x5}, {0x2}, {0x5, 0x1}, {0x5, 0x1}, {0x2}, {0x2}, {0x5}, {0x5}, {0x1}, {0x1}, {0x0, 0x1}, {0x1}, {0x4, 0x1}, {0x3}, {0x4}, {0x3, 0x1}, {0x1, 0x1}, {0x1}, {0x2}, {0x2, 0x1}, {0x3}, {0x4, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x5}, {0x1}, {0x2}, {0x4}, {0x3}, {0x5, 0x1}, {0x3}, {0x4, 0x1}, {0x2}, {0x3, 0x1}, {0x1, 0x1}, {0x1}, {}, {0x5}, {0x4, 0x1}, {0x4, 0x1}, {}, {0x2, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0xf86c24dd81583735, 0x1}, {}, {0x1, 0x1}, {0x2, 0x1}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x5}, {0x5}, {0x5, 0x1}, {0x1}, {0x2}, {0x2, 0x1}], 0x1}}, @TCA_PEDIT_PARMS_EX={0xe80, 0x4, {{{0x10001, 0x3, 0x20000000, 0xc4, 0x2}, 0x9, 0x2f, [{0x0, 0x6, 0x4, 0x7ff, 0x418, 0x1000}, {0x7, 0xfffff000, 0x5, 0xf, 0x80000000, 0x8}, {0x39, 0x2, 0x5, 0x7fd0, 0x4, 0x9}, {0x7, 0x3, 0x7ff, 0x8000, 0x8, 0x5}]}, [{0x44b6, 0x7, 0xfffffffa, 0x2, 0x2, 0x80000000}, {0x1, 0x8, 0x0, 0xffffffd2, 0x80000000, 0xffffffff}, {0x6, 0x2, 0x3, 0x401, 0x9d12, 0xe1}, {0x8, 0x0, 0x2, 0x0, 0x1, 0x3}, {0x4, 0xa, 0x4, 0x8, 0x5e76, 0xffffffff}, {0x8, 0x2, 0x0, 0x5, 0x9, 0xb6}, {0x0, 0x3, 0x5, 0x1, 0x5, 0x800}, {0xa, 0x1, 0x1, 0x6, 0xf, 0x4}, {0x1, 0x4, 0xfffffffb, 0x18, 0x100, 0x8}, {0x100, 0x81, 0xd01, 0x1, 0xf, 0x1}, {0x7, 0xfffffff0, 0x8000, 0x1, 0x8, 0x60}, {0x4, 0x2, 0x0, 0x200, 0xffff, 0x3}, {0x400, 0x2, 0x9, 0x200, 0x9, 0x3}, {0x2, 0x8, 0x7f, 0x4, 0x4, 0x1}, {0x4, 0xfffffffa, 0x5, 0x400, 0x8, 0x55}, {0x8, 0x6, 0x25aa, 0xffffffff, 0x2, 0x4}, {0x7, 0x200, 0x6, 0x800, 0x3, 0x2944}, {0x5, 0x8001, 0x99, 0x0, 0xa, 0x8}, {0x7, 0x5, 0x2, 0x5, 0x8, 0x5}, {0x6, 0x8, 0x8, 0x2, 0x3, 0x10001}, {0x0, 0x2, 0x0, 0x3, 0x40, 0x4}, {0x9, 0x5302, 0xe, 0x1ff, 0x2b, 0x200}, {0x6, 0xf, 0xa, 0x10000, 0x9, 0xc}, {0x80, 0x8c9e, 0x2, 0x3, 0x4}, {0xffff, 0x4, 0x3, 0xfffffff6, 0x7ff}, {0x0, 0x7, 0x8, 0x437, 0x3, 0x789e69c1}, {0x3, 0x8000, 0x3, 0x8, 0x7, 0x7}, {0x7, 0x6, 0x1, 0x5, 0x0, 0x400}, {0x401, 0x7, 0x7, 0x87, 0x4, 0x3663fd1c}, {0x7, 0x3, 0x4, 0xa, 0x9, 0x3}, {0x4, 0xfff, 0x1d4b6c0e, 0x5, 0x1, 0x7}, {0xe, 0x1, 0x80, 0x3, 0x8, 0x6}, {0x8, 0x8, 0x2, 0x40, 0x8, 0xce0}, {0x6, 0x2, 0x8, 0xcdb, 0x5, 0x1}, {0x4, 0xfffffff7, 0x3, 0x4, 0x1}, {0x8, 0x3, 0x9, 0x7, 0x2, 0xfffffff8}, {0x3ff, 0x94d, 0x2, 0x4, 0x5, 0x19c}, {0x9, 0x5, 0x9, 0x2, 0x0, 0x6}, {0x795, 0x8, 0x3bcd619a, 0xfffffffd, 0x7, 0x2}, {0x9, 0x2, 0x9, 0x7, 0x2, 0x4}, {0x6, 0x5, 0x7ff, 0x0, 0xbc15, 0xfffffffc}, {0x4, 0x3, 0x9, 0x4, 0x4, 0x6}, {0x38, 0xfc96, 0x9, 0x5, 0x3, 0x7}, {0x4, 0x80000001, 0x4, 0x8, 0x484, 0x6}, {0xffffff80, 0xffff0001, 0x7, 0xd4, 0x4, 0x2}, {0x7fffffff, 0x6, 0x736, 0x7fffffff, 0xfffffff8, 0x80000000}, {0x2, 0x3, 0x401, 0x2c49, 0x6e88, 0x7f}, {0x1, 0x5, 0xd3, 0x800, 0x7, 0x4}, {0x1, 0x8, 0x6eb, 0xffffffff, 0x3, 0x2}, {0x2, 0x6, 0xffffffff, 0xc8, 0x7fffffff, 0x5}, {0x10, 0x10000, 0xffff0000, 0x6, 0x9, 0x6df}, {0x6, 0x4, 0x7, 0x1, 0x4, 0x7}, {0x5, 0x7, 0x7, 0x227e00, 0x0, 0x5}, {0x111, 0xb, 0x3, 0xf, 0x7, 0x4b}, {0x0, 0x10, 0x5, 0xffffffff, 0x111e, 0x1}, {0x7, 0x6, 0x357, 0xa1fc, 0xc0000000, 0x8}, {0x3, 0xd3, 0x61c7986c, 0x0, 0x5, 0xff}, {0x7, 0x9, 0xa, 0xf96, 0x1000, 0xb36a}, {0xb, 0x5, 0x6c, 0x7, 0x3, 0xfc}, {0x1, 0x8, 0x2, 0x0, 0x7, 0x267d}, {0xee, 0x1, 0xffff7fff, 0x0, 0x7, 0x9}, {0x80000000, 0xf, 0x9, 0x400}, {0x9, 0x8001, 0x6000000, 0x4, 0x1, 0x3}, {0x1, 0xd67, 0x100, 0x336f, 0x4, 0x20b}, {0x40ee, 0xffffffff, 0x7, 0xff, 0x3, 0x10000}, {0x3, 0x5, 0xd, 0x10bf, 0xa, 0x4}, {0x0, 0x4, 0x40, 0x3ff, 0x7f, 0x9}, {0x0, 0x1, 0x6, 0x586a, 0x2, 0x3}, {0x9, 0x3, 0x31f94b76, 0x200, 0xfffffff7, 0x10001}, {0x0, 0x7, 0xfffffffb, 0x2, 0x10001, 0x86}, {0xffffffff, 0x5, 0x2, 0x5, 0x7, 0x7ff}, {0x0, 0x6b7, 0x0, 0xffffff08, 0x2}, {0x3, 0xc4, 0x0, 0x0, 0xa, 0x2}, {0x3, 0xff, 0x3, 0x3, 0x7, 0x100}, {0x6, 0x9, 0x80000000, 0x8, 0x3, 0xffff100e}, {0x5, 0x4, 0x10000, 0x3, 0x400, 0xfffffff5}, {0xfff, 0x7, 0x7, 0x5, 0x0, 0x8}, {0x3, 0x80000001, 0x7, 0x0, 0x6, 0x7}, {0x7, 0x6cf, 0x4, 0x2, 0x3, 0x4}, {0xfffffff9, 0x5, 0x4, 0x4, 0x7, 0x6}, {0x0, 0x1, 0x8, 0x3, 0x4, 0x4}, {0x5, 0x7, 0x2, 0x5, 0x0, 0x2ab9}, {0x1, 0xfffffff0, 0x9, 0x3, 0xb7, 0x7}, {0x8, 0xc, 0x5, 0x4, 0x8, 0x6}, {0x3, 0xb535, 0x1, 0x4, 0x3, 0x3}, {0x1, 0x3, 0x1af, 0xb3d, 0x4, 0x17}, {0x1, 0x7, 0x1, 0x7, 0x3, 0x1}, {0xc, 0x6, 0xfffffffc, 0xffff, 0x40, 0x6}, {0xfffeffff, 0x9, 0x2, 0xffffffff, 0x6, 0x8001}, {0x2, 0x6, 0x9, 0x6, 0x2, 0x9}, {0x899, 0xffffffff, 0x40, 0x0, 0x6, 0x7}, {0x3, 0x5, 0x7ff, 0x74, 0xb48, 0xfffffbff}, {0x45, 0x4, 0x5, 0x9d7, 0x2, 0x4}, {0x0, 0x2, 0xa1c, 0xfff, 0x2, 0x2}, {0x2f, 0x5f, 0xd7, 0x9b8, 0x1, 0x9}, {0x7, 0x2, 0x0, 0x5, 0x1, 0xffff}, {0x6200, 0x200, 0x4, 0x6, 0xc, 0x7}, {0x3, 0x200, 0x9, 0x3ff, 0xfff, 0x7}, {0x5, 0x200, 0x10001, 0x7, 0x8, 0x80}, {0x2, 0x9, 0x4, 0x1ff, 0x3ff, 0xff}, {0x8001, 0x8, 0x4d, 0xc2, 0x8a7a, 0x7}, {0x4, 0x8, 0xfffffff8, 0x8, 0x100, 0x4}, {0x4, 0xaab, 0xfd1, 0x7, 0x6ecee297}, {0x3ff, 0x1, 0x1, 0xb2f, 0x4, 0x436}, {0x8, 0xfff, 0x0, 0x1, 0x81, 0xe}, {0x7, 0x8, 0x7, 0x6aa2, 0xfffffffb, 0x4}, {0xd, 0x62bf, 0x338, 0xffff0001, 0x7, 0x5}, {0x9, 0x6, 0x800, 0x2, 0x6, 0x8}, {0x7, 0x81, 0x80000001, 0x3}, {0x8, 0x7, 0x7, 0x4, 0x4, 0x1}, {0x6, 0x3, 0x4, 0x6, 0x7f, 0x7}, {0x1, 0x8b1a, 0x80000001, 0x3e, 0x0, 0x400}, {0x80000000, 0x7, 0x1, 0x8, 0x5, 0x401}, {0x9, 0x5, 0x2, 0x0, 0xf8d9, 0x3}, {0x0, 0x0, 0x8, 0x7ff, 0x3, 0x180}, {0x1a5, 0x7, 0xd459, 0x1, 0xfffffff8, 0x3}, {0x6000, 0x4e4, 0x0, 0x7ff, 0xb22b, 0x1}, {0xfff, 0x3ff, 0x6, 0xe, 0x6}, {0x6, 0x5, 0x5, 0x7, 0x9, 0x6}, {0x7fffffff, 0x802d, 0x4, 0x21, 0x8, 0x6e}, {0x6, 0x5, 0x40, 0x6, 0x8, 0x5}, {0x3, 0x10000, 0x10001, 0xffffffff, 0xc05, 0x4}, {0x6e, 0x4, 0xc1, 0x2, 0x9}, {0x7f, 0x22aa5b0e, 0x4800, 0xfffffffb, 0xfff, 0xf27}, {0x9, 0xb8, 0x8f, 0x1, 0xc, 0x7}, {0x4, 0xdf, 0xeb0, 0x7ff, 0x8001, 0xff6}, {0x6, 0x2, 0x4, 0x2, 0x7c, 0x7}, {0x7fffffff, 0x0, 0x2, 0x5, 0x0, 0x2}], [{0x4}, {0x2}, {0x3, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {}, {0x4}, {0x3, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x61b1f2ff6480aeed}, {0x2, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x2}, {0x1}, {0x2, 0x1}, {}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x0, 0x3}, {0x3, 0x1}, {}, {0x1}, {0x7, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x1}, {0x5}, {0x1}, {0x2}, {0x1}, {0x2}, {0x5, 0x1}, {0x4}, {0x2, 0x1}, {0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x4}, {0x1, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x4}, {0x4, 0x1}, {}, {0x4}, {0x1}, {0x4}, {0x5}, {0x5, 0x1}, {}, {0x4, 0x1}, {0x4}, {0x4, 0x1}, {0x1}, {0x3}, {0x5, 0x1}, {0x3}, {0x3, 0x1}, {0x5, 0x1}, {0x4}, {0x2}, {0x1, 0x1}, {0x1}, {0x5}, {0x4}, {0x4, 0x1}, {0x4}, {0x1}, {0x2, 0x1}, {0x5, 0x1}, {}, {0x1}, {0x2}, {0x0, 0x1}, {0x3, 0x1}, {0x2}, {0x1}, {0x1}, {0x2}, {0x4}, {0x4}, {0x1}, {}, {0x0, 0x1}, {0x5, 0x1}, {}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x2}, {0x2, 0x1}, {0x2}, {0x6, 0x1}, {0x3}, {0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {}, {0x2, 0x1}, {0x2}, {0x3, 0x1}, {}, {0x5}, {0x5, 0x1}, {0x5, 0x1}, {0x5, 0x1}]}}]}, {0x47, 0x6, "02fc692c0b775ad745f957819406ed278289893bb12fda96e40523c6d009dada1e9888d1ec17aabe2e9a1398bc8ef73d1f9c96e319fe8d938de726e23e899f337a746e"}, {0xc}, {0xc, 0x8, {0x2}}}}]}, @TCA_BASIC_EMATCHES={0x134, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x10c, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x400, 0x8, 0x1}, {0x4, 0x2, 0x4}}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0xcb21, 0x8, 0x3}, {0x3, 0x5}}}, @TCF_EM_META={0x14, 0x1, 0x0, 0x0, {{0x8, 0x4, 0x8}, [@TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_VAR, @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_VAR, @TCF_META_TYPE_VAR]}]}}, @TCF_EM_IPT={0xd4, 0x2, 0x0, 0x0, {{0x800, 0x9, 0x99}, [@TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x40}, @TCA_EM_IPT_MATCH_DATA={0x55, 0x5, "81298572eb3380c81ac66eedb3ff23164ca70577e927593abb2030c0d04445708ba0cacf3ca5748268bfe5d5986acbace8391eedeba13ab992c7c7ec40e9a01ece6773e6066bfd22f1da6ed2ce788ec4ba"}, @TCA_EM_IPT_MATCH_DATA={0x49, 0x5, "55f19120a56c2f895b05530d5b2c7bb1526896a5862c5ac3cb4bfcebeaf822fead51f1670e987ab4278ce0d5f0fc66fd8ea47da92707bfe967037b6c23bc81bb063177aa1b"}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x7}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}]}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x2, 0x1, 0x5}, {0x2, 0x5, 0x9b93, 0x5, 0xe, 0x0, 0x1}}}]}, @TCA_EMATCH_TREE_LIST={0x4}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x4a14}}, 0x0) 3.670931843s ago: executing program 0 (id=8726): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000e00)=ANY=[@ANYBLOB="12010000000000402509668000000000000109022400010000100309040000010300020009210000080122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\"\a\x00\x00\x00\b\x00W'], 0x0}, 0x0) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00') setns(r1, 0x0) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000e00)=ANY=[@ANYBLOB="12010000000000402509668000000000000109022400010000100309040000010300020009210000080122070009058103"], 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\"\a\x00\x00\x00\b\x00W'], 0x0}, 0x0) (async) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00') (async) setns(r1, 0x0) (async) 3.355265598s ago: executing program 6 (id=8728): syz_usb_connect$uac2(0x0, 0x87, &(0x7f0000000e80)=ANY=[@ANYBLOB="12010002000000208205b200400001020301090275000301098007080b0101010620ca0904000000010120000924010900001500fe0c2403050603070490f64aff0904010000010220000904010101010220000905010940000108f008250185272d0180090402f2ffffff200009040201010102200009058209"], 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000c40)) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000340)=0x1) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000000)=0x200000000) sendto$inet6(r1, &(0x7f00000001c0)="c2", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) shutdown(r1, 0x1) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0xfffffffe}, 0x14) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000000000e8ffffffffffff05000000", @ANYRES32=0x1], 0x48) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8916, &(0x7f0000000000)={r0}) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000240), 0x104080, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, &(0x7f0000000400)={'syztnl0\x00', &(0x7f0000000380)={'gretap0\x00', 0x0, 0x1, 0x7, 0xd, 0x7, {{0x10, 0x4, 0x1, 0x1e, 0x40, 0x65, 0x0, 0x8, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}, {[@timestamp={0x44, 0x10, 0x46, 0x0, 0x8, [0x2, 0x2, 0x7]}, @noop, @ssrr={0x89, 0x17, 0xfc, [@multicast2, @local, @multicast1, @empty, @local]}, @noop, @generic={0x88, 0x3, "92"}]}}}}}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x10, 0x803, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0xc, 0x4}, {0x0, 0x9}, {0xfff3, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x18, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x7}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_TTL={0x5, 0x2, 0x4}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4040005}, 0x20040054) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@private1, @in6=@private0}}, {{@in6=@initdev}, 0x0, @in=@empty}}, &(0x7f0000000540)=0xe8) 3.349242996s ago: executing program 2 (id=8729): socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r4, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0xfe12) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x14) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r5, 0xae80, 0x0) 2.227742771s ago: executing program 2 (id=8732): unshare(0x6a040000) r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0xb, 0x1, 0x4, 0x0, 0x7}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)=0x1) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000200)=@multiplanar_userptr={0x9, 0x1, 0x4, 0x8, 0x4, {0x0, 0x2710}, {0x0, 0xd, 0xf8, 0x2, 0x6, 0x0, "3b051c46"}, 0x1, 0x2, {0x0}, 0x400, 0x0, 0xffffffffffffffff}) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000040)={0xf0f046}) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000c80), r4) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="640000001000370403000000ffffffff00000000", @ANYRES32=r5, @ANYBLOB="0b1b050000000000440012800b00010069703667726500003400028008000100", @ANYRES32, @ANYBLOB="14000600fe8000000000000000000000000000aa1400070000000000000000000000000000bb"], 0x64}, 0x1, 0x0, 0x0, 0x48810}, 0x4000010) mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x80, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x96) sendmmsg$inet(r3, &(0x7f0000000d80)=[{{&(0x7f0000000000)={0x2, 0x4e21, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="100000000000000000000000070000001c000000000000000000000008000000", @ANYRES8=r1], 0x30}}, {{&(0x7f0000000080)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0}}], 0x2, 0x4000) unshare(0x14020800) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_usb_connect$uac2(0x8, 0x8e, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001000000081e0400304000010203010902"], 0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r6, 0x0, 0x81, &(0x7f0000000200)={'filter\x00', 0x0, 0x0, 0x0, [0xa2, 0xb, 0x4, 0xc, 0x4, 0x6], 0x0, 0x0}, 0x78) 1.779286388s ago: executing program 1 (id=8735): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x4c0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f0, 0xffffffff, 0xffffffff, 0x3f0, 0xffffffff, 0xb, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x81, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x1c8, 0x230, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@set2={{0x28}, {{0x0, 0x40}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) 1.715298734s ago: executing program 1 (id=8736): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x10f, 0x4}) (async, rerun: 32) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) (rerun: 32) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) (async) dup3(r1, r0, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) (async) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@flushsa={0x64, 0x1c, 0x20, 0x70bd2b, 0x25dfdbfb, {0x32}, [@user_kmaddress={0x2c, 0x13, {@in6=@loopback, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x2}}, @offload={0xc, 0x1c, {0x0, 0x2}}, @policy_type={0xa}, @mark={0xc, 0x15, {0x35075c, 0x9}}]}, 0x64}}, 0x0) (async) connect$pppoe(r2, &(0x7f0000000040)={0x18, 0x0, {0x4001, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, 'gre0\x00'}}, 0x1e) (async) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x20000000) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async, rerun: 64) gettid() (async, rerun: 64) r6 = request_key(&(0x7f0000000180)='dns_resolver\x00', &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000200)='gre0\x00', 0xffffffffffffffff) (async) r7 = socket(0x10, 0x3, 0x0) keyctl$instantiate(0xc, r6, &(0x7f0000001500)=ANY=[@ANYRES16], 0x2a, 0x0) (async) write(r7, &(0x7f00000002c0)="240000001e005f02140c00fffffffff80700000001000000000000000500e99c11e85637", 0x24) (async) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r8, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x6a, 0x4) bind$inet(r8, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x41, &(0x7f0000000180)=0xb27, 0x4) (async) connect$inet(r8, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) sendmmsg(r8, &(0x7f0000004fc0)=[{{0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000000380)="f2a3caf12c99b40132fd592132e08f0f952c87a30e5747a2d122cb755867e6eb5188ea264a07a2f38b58c6338ec4f67c78fcd77e9f7d11fd8d50fb354b4d31782546ce2b3be2c5fbca0f7f7b57063937aff9c2d3f560c35c4351633c58424e3bde9c932ebdd66045b093dce8bfae552a94248d75a06c0d41803451c4a2381c8a76c0172996b2411d070e5f6a334fead34442bbfb5593f3783b6f2315f2f638402afcfb2288b3f68b1e7b007fb5784296e68a40a21a6f8449b075b7", 0xbb}], 0x1}}], 0x1, 0xc840) r9 = add_key$user(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, &(0x7f00000002c0)="1fd95dbb5ba8919d5eb0dffdba99cc96aeeaca56703a444ae9b13f9798594a96119a0f7695a64247c04357fe12ad4fcabd3c9e296b6ee10be4b597af77865e28e603005d919659a3df60da6b22d1ed331fb77f0bc6c8eb97e559483fd71ffde9e243a01a01076a822cabb779b29c58a67411d0019c75b965fb0282c5f4479b", 0x7f, 0xfffffffffffffffd) r10 = add_key$user(&(0x7f0000000340), 0x0, &(0x7f00000003c0)="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", 0x1000, 0xfffffffffffffffe) (async) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r7) sendmsg$DEVLINK_CMD_PORT_SET(r7, &(0x7f00000017c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001780)={&(0x7f0000001580)=ANY=[@ANYBLOB="e0010000", @ANYRES16=r11, @ANYBLOB="000128bd7000ffdbdf25060000000e00010400657464657673696d0000000f0002006e657464657673696d300000080003000000000006000400000000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000300000006000477e00000000e0001006e657464657673696d0000000f0002006e6574657673696d30000008000300010000000600040003000000080001007063690011000200303030303a30303a31302e0400030000000e0001006e657464657673696d008f594d47e4c7d8d44e9e616ee48000000f0002006e657464657673696d300000080003000300040003000000080001007063690011000200303030303a30303a31302e30000000000800030003000000060004000000000008ee00007063690011000200303030303a30303a310717791b302e300000000008000300020000000600040001000000080001007063690011000200303030303a30303a31302e3000000000080003000100000006000400000000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000300020000000600040003000000080001007063690011000200303030303a30303a31302e30000000000800030001000000060004000300000000"], 0x1e0}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) keyctl$dh_compute(0x17, &(0x7f00000013c0)={r6, r9, r10}, &(0x7f0000001400)=""/134, 0x86, &(0x7f0000001540)={&(0x7f00000014c0)={'sha3-224-ce\x00'}, &(0x7f0000001500)}) (async) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r5, &(0x7f0000000140)={0x10, 0x30, 0xfa00, {&(0x7f0000000080), 0x0, {0xa, 0x4e24, 0x4, @remote, 0xffff2ea6}}}, 0x38) 1.661060568s ago: executing program 1 (id=8737): connect$inet(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0xdb86af4cea0add1e, 0x46d, 0xc262, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x40, 0x9, "", [{{0x9, 0x4, 0x0, 0x81, 0x2, 0x3, 0x1, 0x2, 0x4, {0x9, 0x21, 0x7bd, 0x0, 0x1, {0x22, 0xdae}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x0, 0xc, 0xe7}}}}}]}}]}}, &(0x7f0000000480)={0xfffffffffffffdb5, 0x0, 0x0, 0x0}) 1.475221384s ago: executing program 2 (id=8738): syz_open_dev$evdev(&(0x7f0000000240), 0x20, 0x0) syz_usb_connect$uac1(0x3, 0xae, &(0x7f0000000100)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9c, 0x3, 0x1, 0xcb, 0x60, 0x6, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x101, 0x16}, [@input_terminal={0xc, 0x24, 0x2, 0x5, 0x1ff, 0x3, 0x4c, 0xffff, 0x5, 0x7f}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x8a, 0x5, 0x6, 0x4, 0x4}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x7a, 0x2, 0x1, {0x7, 0x25, 0x1, 0xc, 0x0, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x3, 0xc, 0x40, "7a5c97775b305c75dd"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x9, 0x2, 0x0, 0x1, "8965", 'b'}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x71e, 0x7, 0x5f, 0x7}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x7, 0x3, 0x7f, {0x7, 0x25, 0x1, 0xc, 0x9, 0x2e3}}}}}}}}]}}, &(0x7f0000000600)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x201, 0x1, 0x7f, 0x8, 0xff, 0x7}, 0xa8, &(0x7f0000000280)={0x5, 0xf, 0xa8, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x1, 0x8b}, @wireless={0xb, 0x10, 0x1, 0x2, 0x50, 0x7, 0xf, 0xfff7, 0x6}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x7, 0x3, 0x8}, @generic={0x73, 0x10, 0x4, "c7aac14b4024a3f50504358123f90abd97395ed4ce4030b107c9c5899b5b7a58c246a87d890062960709f8bed981e7787863b5daa86c03064278a4d6093decd582760842d92b864f378eed65ab249e8c3704f754e661f8b2b37972b65c3fd0dd27a956ed66014a5c3e01b573cf6df932"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xa95c15941a63c179, 0xd, 0x10, 0x3b88}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x4, 0x8, 0x800}]}, 0x6, [{0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x804}}, {0x4, &(0x7f0000000380)=@lang_id={0x4}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x2c0a}}, {0xf2, &(0x7f0000000400)=@string={0xf2, 0x3, "16e50ec3b4a336a5182b051d6e165fed0193f70df3b6bc08c3e7d41174bf1acc1bf8451d9a73d51285f65d1f7b2dcdf65d0af3b474a7f51ea35fabacad646aa8470f2c00bedbcdf38f7abb0c95c1202ff320a190345b0f26f6451022c704bffa431cfddf9d59eeee72cf924323815e5309e0b61336805239283901ee236cd893c3aca31cf1956330b11827bfc85ba6ffcd9ca5fee3aefa53e778304d320ae2d152a6365490329138ff01a42dfe1fd683c060be8f290faace2c3ad25a09f279ff2d9497c0a12d807fe10e364b28f015d01f86f9307807be12144ba088810544f52b6c8c9bd851d704506b8db73a2b376c"}}, {0xb6, &(0x7f0000000500)=@string={0xb6, 0x3, "128a7d405933cdb529b692100dc1422a431dbbcf7b258b9dd9904009f9b8562daaa4da29188b169bb4c2c57ac5062cc125a0d7ed2d6dc700e46db4e0d3f6316c2a8a376a45476d33839e636ea51d0cba8c32c340803e79eb8b408d6efec89c75f5f971aa9a8c5f62e02c4f300732603e6445e34e3df46941ba5a03bb8c5957e82090d339adf9755d0b9dccb80ad9e40647d1a332b6c264dd34301d7b523286a9372879bf56707e439905db1ccbdb8d4211749502"}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x41d}}]}) syz_emit_ethernet(0x46, &(0x7f0000000280)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x7, 0x4, 0x3, 0x24, 0x38, 0x66, 0x0, 0x0, 0x1, 0x0, @broadcast, @multicast1, {[@cipso={0x86, 0x6, 0xffffffffffffffff}]}}, @parameter_prob={0xc, 0x0, 0x0, 0xfb, 0x9c, 0x0, {0x5, 0x4, 0x1, 0x3, 0x4, 0x67, 0x2, 0x1, 0xc, 0x5, @dev={0xac, 0x14, 0x14, 0x1e}, @loopback}}}}}}, 0x0) r0 = syz_usb_connect$cdc_ecm(0x1, 0x74, &(0x7f0000000080)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x62, 0x1, 0x1, 0x0, 0xc0, 0x2, "", [{{0x9, 0x4, 0x0, 0x4, 0x3, 0x2, 0x6, 0x0, 0x6, {{0xb, 0x24, 0x6, 0x0, 0x0, "497e611616d4"}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x800, 0xf, 0x80, 0x7}, [@network_terminal={0x7, 0x24, 0xa, 0x8, 0x9, 0x39, 0xeb}, @obex={0x5, 0x24, 0x15, 0x3}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0xb}, @network_terminal={0x7, 0x24, 0xa, 0x5f, 0x80, 0x5, 0x4}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x20, 0x9, 0xb}}], {{0x9, 0x5, 0x82, 0x2, 0x8, 0x7, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x5e, 0x8, 0xe5}}}}}]}}]}}, &(0x7f0000000600)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x201, 0x5, 0x9a, 0x6, 0x40, 0x6}, 0xb, &(0x7f0000000180)={0x5, 0xf, 0xb, 0x2, [@ptm_cap={0x3}, @ptm_cap={0x3}]}, 0x5, [{0xe2, &(0x7f00000002c0)=@string={0xe2, 0x3, "c5a1d6994e5c3a118fde8e18729a7b243e77b275993f71c3cf383ccf8fc2f250659a8ad226058f81f2a8a46f32b8f78aff97db01de89dc2837861a0361d6312a1825c681cc681e9dd650d5b3c6d5775ea399b2b8883596ff360f84e408e44203110160950a4d842158b21eff19386cea47aa166df66c3388b3d3e694c2bfc67550987c1d653d69c0f3bf1c9b8d032cd9388bcc2ac9aad196e80b9340684a0affce2d797dced8122f24a9e2281c7232d3cd582cfa7c985e7e8a1fc7b85c0f6a11da3fecc4d47f466f2f648e6c1649f638b192aeb751867b0f49d46c472f00a9bc"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x820}}, {0x0, 0x0}, {0xa3, &(0x7f0000000500)=@string={0xa3, 0x3, "83ffef4cbd18c23a4ff0e8c4c33dfe7d707fff0d92e96e5c6e1d9251507a8a290bdfd3538db5186db2c87045b9faa7feaa43ef5997ccf2840f6026cf2d7f8b1966145196c443854fcfd3a270c1409e63ad82efec45e37aab3d3db4bd838a6d9ed39c86ba948c7741752669cc7fe463d0f2d74104122ba3d439d2afd971105d847a8a17ac892d981b80d92d0b2f4b3200131f9684a30983f557d49771de6155046b"}}, {0x4, &(0x7f0000000000)=@lang_id={0x4, 0x3, 0x813}}]}) syz_emit_ethernet(0x92, &(0x7f0000000200)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x5c, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x17, 0xd0, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x2, 0x98ca}, @timestamp={0x8, 0xa, 0x5, 0x1a}, @sack={0x5, 0xe, [0x220, 0x130c, 0xabd]}, @md5sig={0x13, 0x12, "8098cf093cc9cd7b8ec814f9bcfdfea9"}, @sack={0x5, 0x12, [0x1, 0xfffffffe, 0x3, 0x1]}]}}}}}}}}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000280)={0x1c, &(0x7f00000001c0)={0x0, 0x15, 0x1e, "00d53079c503e871a9d8a39e6a7e968c53061d5c9f97330a2acb36102d52"}, 0x0, 0x0}) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010029bd7000fadbdf250000", @ANYRES32, @ANYBLOB="1388000023b201002400128009000100626f6e64"], 0x44}, 0x1, 0x0, 0x0, 0x404c8e0}, 0xc094) syz_usb_connect$hid(0x5, 0x36, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) readv(0xffffffffffffffff, &(0x7f0000001800)=[{&(0x7f0000000400)=""/198, 0xc6}], 0x1) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r3, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @loopback}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x58, r3, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x6c, r5, 0x1, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) 1.091310422s ago: executing program 1 (id=8739): unshare(0x6a040000) syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902"], 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8080, 0x0) ioctl$KDSETLED(r1, 0x4b32, 0x1) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x58, 0x10, 0x1, 0x1, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x2c, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffff8, 0x3}}, {0xa, 0x1b, [0x0, 0x0, 0x3]}}]}]}, 0x58}}, 0x0) 1.088746429s ago: executing program 3 (id=8740): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002ec0)=ANY=[@ANYBLOB="02000000040000000700000009"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="0d00000003000000040000000100000000000000", @ANYRES32=r0], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000840), &(0x7f0000000880)=r0}, 0x20) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xffe, r2, 0x4}, 0x38) syz_usb_connect(0x2, 0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="12011001c0000002f0ff010804a08109045c090090936d0500f7a2b20e7b176e91400800"], 0x0) 819.036825ms ago: executing program 2 (id=8741): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x2, 0x2, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000140)='\x00u', 0x2, 0x24008084, &(0x7f00000001c0)={0xa, 0x2, 0xdfff, @loopback, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='bbr', 0x3) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x7a22, 0xc000, 0x7, 0x337}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x60040000}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='9', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) r3 = signalfd4(r1, &(0x7f0000000180)={[0x8]}, 0x8, 0x800) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000240)=0x2) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) r5 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x200) ioctl$BTRFS_IOC_RM_DEV(r5, 0x5000940b, 0x0) shutdown(r0, 0x1) 590.506071ms ago: executing program 2 (id=8742): socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r4, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0xfe12) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x14) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r5, 0xae80, 0x0) 501.134987ms ago: executing program 0 (id=8743): openat$kvm(0xffffffffffffff9c, 0x0, 0x60540, 0x0) ioprio_set$pid(0x3, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r0, 0xc040aed5, &(0x7f0000000000)={0xfee00000, 0x10000}) syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870f500090582020002"], 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0xc0a4) r3 = openat$kvm(0xffffff9c, &(0x7f0000000540), 0x8000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x3, 0x0) ioctl$PPPIOCSMRRU(0xffffffffffffffff, 0x4004743b, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$TIOCGRS485(0xffffffffffffffff, 0x542e, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x10, 0x7fff0000}]}) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000001c0), 0x12) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) 422.35224ms ago: executing program 3 (id=8744): openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) socket$packet(0x11, 0x3, 0x300) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x8, 0x2, 0xfffffffffffffffd, 0x1, 0x2000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x4, 0x0, 0x1136f858, 0x0, 0xffffffffffffffff}, 0x0, 0x0) 219.301525ms ago: executing program 1 (id=8745): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB='<\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="01000000000000001c00128009000100626f6e64000000000c00028005001b0000000000"], 0x3c}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg(r1, &(0x7f0000000540)=[{{&(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x11}, 0xa}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000300)='>', 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x20}}], 0x2, 0xc88c4) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB='<\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="01000000000000001c00128009000100626f6e64000000000c00028005001b0000000000"], 0x3c}}, 0x0) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) sendmmsg(r1, &(0x7f0000000540)=[{{&(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x11}, 0xa}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000300)='>', 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x20}}], 0x2, 0xc88c4) (async) 176.175436ms ago: executing program 6 (id=8746): unshare(0x64000600) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x17d4}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x100}, 0x1, 0x0, 0x0, 0x20044080}, 0x48000) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="4801000042000100fffffffffddbdf250200000004003880100001800c00c8000200000000000000200104801c01"], 0x148}, 0x1, 0x0, 0x0, 0x8800}, 0x4040) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r1) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)={0x30, r2, 0x1, 0x70bd27, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x4}]}, 0x30}}, 0x804) 0s ago: executing program 1 (id=8747): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x20402) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000200)=0x4) write$evdev(r0, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) kernel console output (not intermixed with test programs): misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1869.994556][ T2244] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8429'. [ 1870.021271][ T2244] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8429'. [ 1870.187611][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1870.202421][ T2251] bond1: entered promiscuous mode [ 1870.690159][ T5693] usb 3-1: Audio class v2/v3 interfaces need an interface association [ 1870.916920][ T5693] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1870.964770][ T5693] usb 3-1: USB disconnect, device number 100 [ 1870.972176][T22780] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 1871.071360][ T2093] udevd[2093]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1871.090397][ T2277] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1871.130523][ T2277] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1871.188154][T22780] usb 2-1: Using ep0 maxpacket: 32 [ 1871.191346][ T2277] loop9: detected capacity change from 0 to 2640 [ 1871.200172][T22780] usb 2-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 1871.200207][T22780] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1871.200229][T22780] usb 2-1: Product: 웊隷葶緇䧂퀨ꦕ砇躲 [ 1871.200247][T22780] usb 2-1: Manufacturer: ã [ 1871.200263][T22780] usb 2-1: SerialNumber: syz [ 1871.229584][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1871.245412][ T2277] buffer_io_error: 5 callbacks suppressed [ 1871.245432][ T2277] Buffer I/O error on dev loop9, logical block 0, async page read [ 1871.259753][ T2277] Buffer I/O error on dev loop9, logical block 0, async page read [ 1871.312203][ T2277] Buffer I/O error on dev loop9, logical block 0, async page read [ 1871.342683][ T2282] Buffer I/O error on dev loop9, logical block 0, lost async page write [ 1871.410882][ T2277] loop9: unable to read partition table [ 1871.434682][ T2287] Buffer I/O error on dev loop9, logical block 0, lost async page write [ 1871.443635][ T2287] Buffer I/O error on dev loop9, logical block 1, lost async page write [ 1871.444863][ T2277] loop_reread_partitions: partition scan of loop9 (3Ÿ ¾‚³˜) failed (rc=-5) [ 1871.454415][ T2287] Buffer I/O error on dev loop9, logical block 2, lost async page write [ 1871.470290][ T2287] Buffer I/O error on dev loop9, logical block 3, lost async page write [ 1871.480744][ T2287] Buffer I/O error on dev loop9, logical block 4, lost async page write [ 1871.490212][ T2287] Buffer I/O error on dev loop9, logical block 5, lost async page write [ 1871.570909][ T2286] bond4: entered promiscuous mode [ 1871.599184][ T2294] netlink: 72 bytes leftover after parsing attributes in process `syz.3.8445'. [ 1872.258140][ T2302] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8448'. [ 1872.270233][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1872.361695][ T2302] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 1873.307673][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1873.601928][ T2318] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1873.642169][ T2318] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1873.756262][T22780] usb 2-1: Audio class v2/v3 interfaces need an interface association [ 1873.884375][T22780] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1873.923179][T22780] usb 2-1: USB disconnect, device number 65 [ 1873.983868][ T2093] udevd[2093]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1874.037531][ T5693] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 1874.069504][ T2174] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 1874.197494][ T5693] usb 3-1: Using ep0 maxpacket: 32 [ 1874.212970][ T5693] usb 3-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 1874.227920][ T2174] usb 4-1: Using ep0 maxpacket: 32 [ 1874.232414][ T5693] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1874.244256][ T2174] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 1874.248994][ T5693] usb 3-1: Product: 웊隷葶緇䧂퀨ꦕ砇躲 [ 1874.268962][ T5693] usb 3-1: Manufacturer: ã [ 1874.269314][ T2174] usb 4-1: config 0 has no interface number 0 [ 1874.275600][ T5693] usb 3-1: SerialNumber: syz [ 1874.294034][ T2174] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1874.312260][ T2174] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1874.328140][ T2174] usb 4-1: Product: syz [ 1874.340138][ T2174] usb 4-1: Manufacturer: syz [ 1874.347625][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1874.360753][ T2174] usb 4-1: SerialNumber: syz [ 1874.389103][ T2174] usb 4-1: config 0 descriptor?? [ 1874.403882][ T2174] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1874.604555][ T2323] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1874.623335][ T2323] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1875.387587][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1875.786574][ T2347] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1875.821090][ T2347] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1876.427626][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1876.657220][ T2358] fuse: Invalid gid '00000000000000000003' [ 1876.768793][ T2360] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1876.794012][ T5693] usb 3-1: Audio class v2/v3 interfaces need an interface association [ 1876.804790][ T2360] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1876.948047][ T2366] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1876.988282][ T5693] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1877.008114][ T2366] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1877.037541][ T5693] usb 3-1: USB disconnect, device number 101 [ 1877.151207][ T2093] udevd[2093]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1877.232429][ T2360] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1877.258812][ T2360] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1877.467578][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1877.547582][ T5693] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 1877.707496][ T5693] usb 3-1: Using ep0 maxpacket: 32 [ 1877.720140][ T5693] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 1877.737488][ T5693] usb 3-1: config 0 has no interface number 0 [ 1877.746314][ T5693] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1877.767675][ T5693] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1877.787530][ T5693] usb 3-1: Product: syz [ 1877.791788][ T5693] usb 3-1: Manufacturer: syz [ 1877.796429][ T5693] usb 3-1: SerialNumber: syz [ 1877.817066][ T5693] usb 3-1: config 0 descriptor?? [ 1877.831517][ T5693] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1878.039782][ T5693] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1878.059241][ T5693] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1878.242473][ T2371] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1878.253105][ T2371] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1878.271280][ C1] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1878.279472][ T5693] usb 3-1: USB disconnect, device number 102 [ 1878.290432][ T5693] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1878.332067][ T5693] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1878.354604][ T5693] quatech2 3-1:0.51: device disconnected [ 1878.517586][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1878.955446][ T2376] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8469'. [ 1879.193443][ T2386] netlink: 144 bytes leftover after parsing attributes in process `syz.6.8470'. [ 1879.468712][ T2174] usb 4-1: qt2_attach - failed to power on unit: -110 [ 1879.478232][ T2174] quatech2 4-1:0.51: probe with driver quatech2 failed with error -110 [ 1879.547587][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1879.597527][ T5693] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 1879.677570][T22584] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 1879.738392][ T5693] usb 2-1: device descriptor read/64, error -71 [ 1879.839273][T22584] usb 3-1: Using ep0 maxpacket: 32 [ 1879.856149][T22584] usb 3-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 1879.888191][T22584] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1879.907611][T22584] usb 3-1: Product: 웊隷葶緇䧂퀨ꦕ砇躲 [ 1879.924251][T22584] usb 3-1: Manufacturer: ã [ 1879.940903][T22584] usb 3-1: SerialNumber: syz [ 1879.990010][ T5693] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 1880.124388][ T2405] Invalid argument reading file caps for ./file0 [ 1880.142020][ T5693] usb 2-1: device descriptor read/64, error -71 [ 1880.268700][ T5693] usb usb2-port1: attempt power cycle [ 1880.330317][ T2413] bond10: entered promiscuous mode [ 1880.587603][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1880.627619][ T5693] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 1880.661135][ T5693] usb 2-1: device descriptor read/8, error -71 [ 1880.907747][ T5693] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 1880.938448][ T5693] usb 2-1: device descriptor read/8, error -71 [ 1881.047969][ T5693] usb usb2-port1: unable to enumerate USB device [ 1881.355868][ T2432] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1881.627915][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1881.771346][ T2449] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8492'. [ 1881.845950][ T2455] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1881.858247][ T2455] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1882.190888][ T2461] bond21: entered promiscuous mode [ 1882.336714][ T2471] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8497'. [ 1882.356675][ T2471] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1882.369520][ T2471] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1882.405981][ T2471] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1882.449203][ T2471] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1882.488933][T22584] usb 3-1: Audio class v2/v3 interfaces need an interface association [ 1882.532634][ T2471] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8497'. [ 1882.667614][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1882.714233][T22584] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1882.764272][T22584] usb 3-1: USB disconnect, device number 103 [ 1882.940643][ T2093] udevd[2093]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1883.034316][ T2496] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1883.058019][ T2496] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1883.151346][ T2495] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1883.173785][ T2495] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1883.368272][T22584] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 1883.537749][T22584] usb 3-1: Using ep0 maxpacket: 32 [ 1883.552077][T22584] usb 3-1: config 0 has an invalid interface number: 40 but max is 0 [ 1883.572863][T22584] usb 3-1: config 0 has no interface number 0 [ 1883.592535][T22584] usb 3-1: config 0 interface 40 altsetting 96 has 0 endpoint descriptors, different from the interface descriptor's value: 19 [ 1883.623384][T22584] usb 3-1: config 0 interface 40 has no altsetting 0 [ 1883.642990][T22584] usb 3-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice= e.22 [ 1883.656156][T22584] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1883.672005][T22584] usb 3-1: Product: syz [ 1883.680824][T22584] usb 3-1: Manufacturer: syz [ 1883.689798][T22584] usb 3-1: SerialNumber: syz [ 1883.709623][T22584] usb 3-1: config 0 descriptor?? [ 1883.717635][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1884.058719][ T2521] netlink: 'syz.1.8508': attribute type 2 has an invalid length. [ 1884.067154][ T2521] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8508'. [ 1884.638568][ T5693] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 1884.757564][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1884.817833][ T5693] usb 2-1: Using ep0 maxpacket: 16 [ 1884.832559][ T5693] usb 2-1: config 1 has an invalid interface number: 19 but max is 0 [ 1884.854128][ T5693] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1884.874530][ T5693] usb 2-1: config 1 has no interface number 0 [ 1884.890149][ T5693] usb 2-1: config 1 interface 19 altsetting 2 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 1884.914467][ T5693] usb 2-1: config 1 interface 19 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1884.942931][ T5693] usb 2-1: config 1 interface 19 has no altsetting 0 [ 1884.963263][ T5693] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice= 7.c9 [ 1884.988614][ T5693] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1885.009919][ T5693] usb 2-1: Product: syz [ 1885.020024][ T5693] usb 2-1: Manufacturer: syz [ 1885.031143][ T5693] usb 2-1: SerialNumber: syz [ 1885.070976][ T5693] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1885.252096][T12937] usb 2-1: Failed to submit usb control message: -71 [ 1885.253498][ T5693] usb 2-1: USB disconnect, device number 70 [ 1885.260252][T12937] usb 2-1: unable to send the bmi data to the device: -71 [ 1885.275557][T12937] usb 2-1: unable to get target info from device [ 1885.286077][T12937] usb 2-1: could not get target info (-71) [ 1885.297021][T12937] usb 2-1: could not probe fw (-71) [ 1885.787992][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1885.885373][T22584] hub 3-1:0.40: bad descriptor, ignoring hub [ 1885.908820][T22584] hub 3-1:0.40: probe with driver hub failed with error -5 [ 1885.931721][T22584] usb 3-1: selecting invalid altsetting 3 [ 1885.947810][T22584] comedi comedi5: could not set alternate setting 3 in high speed [ 1885.956861][T22584] usbdux 3-1:0.40: driver 'usbdux' failed to auto-configure device. [ 1886.059934][T22584] usbdux 3-1:0.40: probe with driver usbdux failed with error -22 [ 1886.110018][T22584] usb 3-1: USB disconnect, device number 104 [ 1886.231159][ T2554] netem: change failed [ 1886.240794][ T2558] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1886.252350][ T2558] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1886.292639][ T2558] netlink: 'syz.3.8517': attribute type 13 has an invalid length. [ 1886.319439][ T2558] netlink: 'syz.3.8517': attribute type 17 has an invalid length. [ 1886.399271][ T2558] 8021q: adding VLAN 0 to HW filter on device team0 [ 1886.413817][ T2558] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1886.450220][T22584] usb 3-1: new full-speed USB device number 105 using dummy_hcd [ 1886.519109][ T2566] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1886.545421][ T2558] veth1_macvtap: left promiscuous mode [ 1886.552121][ T2566] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1886.562573][ T2558] veth0_macvtap: left promiscuous mode [ 1886.570690][ T2558] veth0_macvtap: entered promiscuous mode [ 1886.584298][ T2558] veth1_macvtap: entered promiscuous mode [ 1886.598529][ T2558] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 1886.606087][ T2558] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1886.617273][ T2558] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1886.629533][ T2558] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1886.644193][ T2558] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1886.647060][ T2551] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1886.671078][ T2558] bond1: left promiscuous mode [ 1886.676514][ T2558] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1886.684833][ T2551] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1886.702394][ T2558] virt_wifi0: entered promiscuous mode [ 1886.703200][ T2551] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1886.708264][ T2558] virt_wifi0: entered allmulticast mode [ 1886.722384][ T2558] macsec1: left promiscuous mode [ 1886.726243][ T2551] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1886.730036][ T2558] macsec1: left allmulticast mode [ 1886.740530][ T2558] virt_wifi0: left allmulticast mode [ 1886.752185][T22584] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1886.770487][T22584] usb 3-1: can't read configurations, error -71 [ 1886.778735][ T2558] bond3: left promiscuous mode [ 1886.792774][ T2558] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1886.800998][ T2558] bond4: left promiscuous mode [ 1886.805821][ T2558] bond4: left allmulticast mode [ 1886.811951][ T2558] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1886.827657][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1886.827836][ T2558] bond5: left promiscuous mode [ 1886.839888][ T2558] bond5: left allmulticast mode [ 1886.845157][ T2558] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1886.855506][ T2558] bond6: left promiscuous mode [ 1886.860722][ T2558] bond6: left allmulticast mode [ 1886.866398][ T2558] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1886.876552][ T2558] bond7: left promiscuous mode [ 1886.882877][ T2558] bond7: left allmulticast mode [ 1886.888514][ T2558] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1886.905940][ T2558] bond8: left promiscuous mode [ 1886.911615][ T2558] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1886.919802][ T2558] bond9: left promiscuous mode [ 1886.924737][ T2558] bond9: left allmulticast mode [ 1886.930513][ T2558] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1886.941791][ T2558] bond0: left promiscuous mode [ 1886.946991][ T2558] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1886.956896][ T2558] bond10: left promiscuous mode [ 1886.962583][ T2558] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1887.024580][T23016] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1887.033744][T23016] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1887.043367][T23016] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1887.064929][T23016] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1887.107274][T23016] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1887.120745][T23016] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1887.130921][T23016] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1887.141382][T23016] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1887.566160][ T2587] openvswitch: netlink: Message has 4 unknown bytes. [ 1887.576451][ T2589] netlink: 'syz.6.8527': attribute type 1 has an invalid length. [ 1887.578847][ T2587] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1887.620049][ T2174] usb 2-1: new full-speed USB device number 71 using dummy_hcd [ 1887.641257][ T2589] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1887.682672][ T2589] netlink: 28 bytes leftover after parsing attributes in process `syz.6.8527'. [ 1887.692987][ T2589] bond5: entered promiscuous mode [ 1887.693050][ T2589] bond5: entered allmulticast mode [ 1887.742672][ T2589] bond3: (slave dummy0): Releasing active interface [ 1887.742705][ T2589] dummy0: left promiscuous mode [ 1887.742908][ T2589] dummy0: left allmulticast mode [ 1887.764816][ T2589] bond5: (slave dummy0): making interface the new active one [ 1887.790952][ T2589] dummy0: entered promiscuous mode [ 1887.791223][ T2589] dummy0: entered allmulticast mode [ 1887.803598][ T2589] bond5: (slave dummy0): Enslaving as an active interface with an up link [ 1887.822107][ T2585] kvm_intel: kvm [2584]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0xa25a [ 1887.825505][ T2585] kvm: kvm [2584]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0xa25a [ 1887.825802][ T2174] usb 2-1: config 0 has an invalid interface number: 205 but max is 0 [ 1887.825827][ T2174] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1887.825851][ T2174] usb 2-1: config 0 has no interface number 0 [ 1887.825882][ T2174] usb 2-1: config 0 interface 205 has no altsetting 0 [ 1887.826263][ T2585] kvm: kvm [2584]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x933e [ 1887.829240][ T2174] usb 2-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a [ 1887.829273][ T2174] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1887.829295][ T2174] usb 2-1: Product: syz [ 1887.829310][ T2174] usb 2-1: Manufacturer: syz [ 1887.829326][ T2174] usb 2-1: SerialNumber: syz [ 1887.845065][ T2174] usb 2-1: config 0 descriptor?? [ 1887.845602][ T2585] kvm_intel: kvm [2584]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0x90af [ 1887.863267][ T2174] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state. [ 1887.863327][ T2174] dvb-usb: bulk message failed: -22 (3/0) [ 1887.867650][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1887.900128][ T2174] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1887.902140][ T2174] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device) [ 1887.902206][ T2174] usb 2-1: media controller created [ 1887.910847][ T2174] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1888.069963][ T2568] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1888.070584][ T2568] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1888.141669][ T2571] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1888.142194][ T2571] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1888.294632][ T2174] dvb-usb: bulk message failed: -22 (6/0) [ 1888.294735][ T2174] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' [ 1888.299108][ T2174] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input153 [ 1888.356233][ T2174] dvb-usb: schedule remote query interval to 150 msecs. [ 1888.356298][ T2174] dvb-usb: bulk message failed: -22 (3/0) [ 1888.377676][ T2174] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected. [ 1888.513362][ T2174] dvb-usb: bulk message failed: -22 (1/0) [ 1888.513428][ T2174] dvb-usb: error while querying for an remote control event. [ 1888.670289][ T2174] dvb-usb: bulk message failed: -22 (1/0) [ 1888.670335][ T2174] dvb-usb: error while querying for an remote control event. [ 1888.857939][ T2174] dvb-usb: bulk message failed: -22 (1/0) [ 1888.874869][ T2174] dvb-usb: error while querying for an remote control event. [ 1888.883395][T22593] usb 2-1: USB disconnect, device number 71 [ 1888.917566][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1888.975843][ T2616] netlink: 'syz.0.8532': attribute type 1 has an invalid length. [ 1889.006173][T22593] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected. [ 1889.054068][ T2622] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8532'. [ 1889.140507][ T2616] 8021q: adding VLAN 0 to HW filter on device bond22 [ 1889.195403][ T2622] bond22: entered promiscuous mode [ 1889.212457][ T2622] bond22: entered allmulticast mode [ 1889.243368][ T2625] bond20: (slave dummy0): Releasing active interface [ 1889.250485][ T2625] dummy0: left promiscuous mode [ 1889.256079][ T2625] dummy0: left allmulticast mode [ 1889.290126][ T2625] bond22: (slave dummy0): making interface the new active one [ 1889.309124][ T2625] dummy0: entered promiscuous mode [ 1889.323277][ T2625] dummy0: entered allmulticast mode [ 1889.340637][ T2625] bond22: (slave dummy0): Enslaving as an active interface with an up link [ 1889.429187][T22780] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 1889.616294][ T2634] FAULT_INJECTION: forcing a failure. [ 1889.616294][ T2634] name failslab, interval 1, probability 0, space 0, times 0 [ 1889.628225][T22780] usb 3-1: Using ep0 maxpacket: 16 [ 1889.639078][ T2634] CPU: 0 UID: 0 PID: 2634 Comm: syz.3.8535 Tainted: G L syzkaller #0 PREEMPT(full) [ 1889.639113][ T2634] Tainted: [L]=SOFTLOCKUP [ 1889.639121][ T2634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1889.639131][ T2634] Call Trace: [ 1889.639140][ T2634] [ 1889.639150][ T2634] dump_stack_lvl+0xe8/0x150 [ 1889.639180][ T2634] should_fail_ex+0x412/0x560 [ 1889.639206][ T2634] should_failslab+0xa8/0x100 [ 1889.639228][ T2634] __kmalloc_noprof+0xe8/0x760 [ 1889.639255][ T2634] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1889.639282][ T2634] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1889.639302][ T2634] ? tomoyo_domain+0xd7/0x130 [ 1889.639328][ T2634] ? tomoyo_path_number_perm+0x219/0x630 [ 1889.639353][ T2634] tomoyo_path_number_perm+0x246/0x630 [ 1889.639381][ T2634] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1889.639403][ T2634] ? __lock_acquire+0x6b5/0x2cf0 [ 1889.639441][ T2634] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 1889.639485][ T2634] ? __fget_files+0x2a/0x420 [ 1889.639512][ T2634] ? __fget_files+0x2a/0x420 [ 1889.639534][ T2634] ? __fget_files+0x3a0/0x420 [ 1889.639556][ T2634] ? __fget_files+0x2a/0x420 [ 1889.639583][ T2634] security_file_ioctl+0xc3/0x2a0 [ 1889.639611][ T2634] __se_sys_ioctl+0x47/0x170 [ 1889.639640][ T2634] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1889.639662][ T2634] do_syscall_64+0x174/0x580 [ 1889.639685][ T2634] ? clear_bhb_loop+0x40/0x90 [ 1889.639710][ T2634] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1889.639729][ T2634] RIP: 0033:0x7ff648d9ce59 [ 1889.639751][ T2634] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1889.639766][ T2634] RSP: 002b:00007ff649bd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1889.639790][ T2634] RAX: ffffffffffffffda RBX: 00007ff649015fa0 RCX: 00007ff648d9ce59 [ 1889.639804][ T2634] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1889.639816][ T2634] RBP: 00007ff649bd5090 R08: 0000000000000000 R09: 0000000000000000 [ 1889.639829][ T2634] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1889.639841][ T2634] R13: 00007ff649016038 R14: 00007ff649015fa0 R15: 00007ff64913fa48 [ 1889.639875][ T2634] [ 1889.732527][T22780] usb 3-1: New USB device found, idVendor=14f7, idProduct=0500, bcdDevice=44.85 [ 1889.736693][ T2634] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1889.743100][T22780] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1889.893670][ T5693] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 1889.902985][T22780] usb 3-1: Product: syz [ 1889.908210][T22780] usb 3-1: Manufacturer: syz [ 1889.912878][T22780] usb 3-1: SerialNumber: syz [ 1889.922597][T22780] usb 3-1: config 0 descriptor?? [ 1889.947939][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1889.984050][ T2640] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8537'. [ 1889.993891][T22780] usb 3-1: selecting invalid altsetting 1 [ 1890.040411][T22780] technisat-usb2: could not set alternate setting to 0 [ 1890.057702][ T5693] usb 2-1: Using ep0 maxpacket: 16 [ 1890.077874][ T5693] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1890.089568][ T5693] usb 2-1: config 127 has an invalid interface number: 16 but max is 0 [ 1890.098020][ T5693] usb 2-1: config 127 has no interface number 0 [ 1890.104386][ T5693] usb 2-1: config 127 interface 16 has no altsetting 0 [ 1890.119818][ T5693] usb 2-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=70.8a [ 1890.145528][ T5693] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1890.155212][ T5693] usb 2-1: Product: syz [ 1890.160372][ T5693] usb 2-1: Manufacturer: syz [ 1890.167328][ T5693] usb 2-1: SerialNumber: syz [ 1890.202937][T22780] technisat-usb2: firmware version: 0.0 [ 1890.208890][T22780] dvb-usb: found a 'Technisat SkyStar USB HD (DVB-S/S2)' in warm state. [ 1890.374450][ T2654] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8540'. [ 1890.376317][ T2646] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1890.434462][ T2656] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1890.434897][ T2646] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1890.444172][ T2656] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1890.497935][ T5693] usb_ehset_test 2-1:127.16: probe with driver usb_ehset_test failed with error -32 [ 1890.509345][ T2663] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8542'. [ 1890.525300][ T5693] usb 2-1: USB disconnect, device number 72 [ 1890.548457][ T2663] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8542'. [ 1890.619299][T22780] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1890.648545][T22780] dvbdev: DVB: registering new adapter (Technisat SkyStar USB HD (DVB-S/S2)) [ 1890.661866][T22780] usb 3-1: media controller created [ 1890.667220][T22780] technisat-usb2: i2c-error: out failed 53 = -22 [ 1890.676277][T22780] dvb-usb: MAC address reading failed. [ 1890.703951][T22780] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1890.786251][T22780] DVB: Unable to find symbol stv090x_attach() [ 1890.795598][T22780] dvb-usb: no frontend was attached by 'Technisat SkyStar USB HD (DVB-S/S2)' [ 1890.877668][T22780] rc_core: IR keymap rc-technisat-usb2 not found [ 1890.884483][T22780] Registered IR keymap rc-empty [ 1890.894921][T22780] rc rc0: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 1890.916321][T22780] input: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input154 [ 1890.932964][T22780] dvb-usb: schedule remote query interval to 100 msecs. [ 1890.941760][T22780] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully initialized and connected. [ 1890.959287][T22780] usb 3-1: USB disconnect, device number 107 [ 1890.997633][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1891.166868][T22780] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully deinitialized and disconnected. [ 1891.245031][ T2684] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1891.284980][ T2684] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1891.440046][ T2687] FAULT_INJECTION: forcing a failure. [ 1891.440046][ T2687] name failslab, interval 1, probability 0, space 0, times 0 [ 1891.467956][ T2687] CPU: 0 UID: 0 PID: 2687 Comm: syz.2.8548 Tainted: G L syzkaller #0 PREEMPT(full) [ 1891.467990][ T2687] Tainted: [L]=SOFTLOCKUP [ 1891.467998][ T2687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1891.468010][ T2687] Call Trace: [ 1891.468019][ T2687] [ 1891.468029][ T2687] dump_stack_lvl+0xe8/0x150 [ 1891.468059][ T2687] should_fail_ex+0x412/0x560 [ 1891.468088][ T2687] should_failslab+0xa8/0x100 [ 1891.468112][ T2687] __kmalloc_noprof+0xe8/0x760 [ 1891.468141][ T2687] ? tomoyo_encode+0x28b/0x550 [ 1891.468167][ T2687] tomoyo_encode+0x28b/0x550 [ 1891.468194][ T2687] tomoyo_realpath_from_path+0x58d/0x5d0 [ 1891.468217][ T2687] ? tomoyo_domain+0xd7/0x130 [ 1891.468243][ T2687] ? tomoyo_path_number_perm+0x219/0x630 [ 1891.468269][ T2687] tomoyo_path_number_perm+0x246/0x630 [ 1891.468296][ T2687] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1891.468322][ T2687] ? __lock_acquire+0x6b5/0x2cf0 [ 1891.468362][ T2687] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 1891.468407][ T2687] ? __fget_files+0x2a/0x420 [ 1891.468435][ T2687] ? __fget_files+0x2a/0x420 [ 1891.468457][ T2687] ? __fget_files+0x3a0/0x420 [ 1891.468478][ T2687] ? __fget_files+0x2a/0x420 [ 1891.468506][ T2687] security_file_ioctl+0xc3/0x2a0 [ 1891.468532][ T2687] __se_sys_ioctl+0x47/0x170 [ 1891.468571][ T2687] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1891.468594][ T2687] do_syscall_64+0x174/0x580 [ 1891.468615][ T2687] ? trace_irq_disable+0x3b/0x140 [ 1891.468643][ T2687] ? clear_bhb_loop+0x40/0x90 [ 1891.468667][ T2687] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1891.468685][ T2687] RIP: 0033:0x7f209e39ce59 [ 1891.468705][ T2687] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1891.468721][ T2687] RSP: 002b:00007f209f300028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1891.468743][ T2687] RAX: ffffffffffffffda RBX: 00007f209e615fa0 RCX: 00007f209e39ce59 [ 1891.468756][ T2687] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1891.468767][ T2687] RBP: 00007f209f300090 R08: 0000000000000000 R09: 0000000000000000 [ 1891.468779][ T2687] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1891.468790][ T2687] R13: 00007f209e616038 R14: 00007f209e615fa0 R15: 00007f209e73fa48 [ 1891.468820][ T2687] [ 1891.468914][ T2687] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1892.037595][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1892.274812][ T2711] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1892.319958][ T2711] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1892.337303][ T2715] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1892.346180][ T2715] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1892.547558][T22593] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 1892.727698][T22593] usb 3-1: Using ep0 maxpacket: 8 [ 1892.736113][T22593] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1892.750130][T22593] usb 3-1: string descriptor 0 read error: -22 [ 1892.756572][T22593] usb 3-1: New USB device found, idVendor=0499, idProduct=100c, bcdDevice= 0.40 [ 1892.765864][T22593] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1892.784293][T22593] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1892.794014][T22593] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 1892.810920][T22593] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1892.823895][T22593] snd-usb-audio 3-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 1892.839483][T22593] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1892.897517][ T2174] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 1892.911128][T22593] snd-usb-audio 3-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 1892.956318][ T2722] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8559'. [ 1892.965696][ T2722] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8559'. [ 1892.994571][ T2713] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1893.008987][ T2713] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1893.019908][T22593] usb 3-1: USB disconnect, device number 108 [ 1893.077596][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1893.095494][ T2174] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1893.105065][ T2174] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1893.116427][ T2174] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1893.125972][ T2174] usb 2-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 1893.137782][ T2174] usb 2-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 1893.152900][ T2174] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1893.164449][ T2174] usb 2-1: config 1 interface 1 has no altsetting 0 [ 1893.178401][ T2174] usb 2-1: string descriptor 0 read error: -22 [ 1893.185169][ T2174] usb 2-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 1893.195640][ T2174] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1893.692350][ T2736] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1893.693061][ T2734] FAULT_INJECTION: forcing a failure. [ 1893.693061][ T2734] name failslab, interval 1, probability 0, space 0, times 0 [ 1893.704466][ T2736] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1893.718969][ T2734] CPU: 0 UID: 0 PID: 2734 Comm: syz.2.8563 Tainted: G L syzkaller #0 PREEMPT(full) [ 1893.719002][ T2734] Tainted: [L]=SOFTLOCKUP [ 1893.719009][ T2734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1893.719022][ T2734] Call Trace: [ 1893.719042][ T2734] [ 1893.719051][ T2734] dump_stack_lvl+0xe8/0x150 [ 1893.719078][ T2734] should_fail_ex+0x412/0x560 [ 1893.719105][ T2734] should_failslab+0xa8/0x100 [ 1893.719126][ T2734] __kmalloc_cache_noprof+0x88/0x660 [ 1893.719153][ T2734] ? vhost_task_create+0x123/0x380 [ 1893.719182][ T2734] vhost_task_create+0x123/0x380 [ 1893.719205][ T2734] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 1893.719258][ T2734] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 1893.719282][ T2734] ? __pfx_vhost_task_create+0x10/0x10 [ 1893.719313][ T2734] ? __pfx_vhost_task_fn+0x10/0x10 [ 1893.719340][ T2734] ? __lock_acquire+0x6b5/0x2cf0 [ 1893.719362][ T2734] ? kasan_save_track+0x4f/0x80 [ 1893.719384][ T2734] ? kasan_save_track+0x3e/0x80 [ 1893.719405][ T2734] ? kasan_save_free_info+0x46/0x50 [ 1893.719423][ T2734] ? __kasan_slab_free+0x5c/0x80 [ 1893.719445][ T2734] ? kfree+0x1c5/0x640 [ 1893.719469][ T2734] kvm_mmu_post_init_vm+0x147/0x2d0 [ 1893.719497][ T2734] kvm_arch_vcpu_ioctl_run+0x106/0x20d0 [ 1893.719531][ T2734] ? __mutex_trylock_common+0x158/0x260 [ 1893.719555][ T2734] ? look_up_lock_class+0x57/0x110 [ 1893.719575][ T2734] ? register_lock_class+0x31/0x2e0 [ 1893.719594][ T2734] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 1893.719621][ T2734] ? __lock_acquire+0x6b5/0x2cf0 [ 1893.719643][ T2734] ? __mutex_lock+0x319/0x1550 [ 1893.719669][ T2734] ? kasan_quarantine_put+0xbb/0x1f0 [ 1893.719704][ T2734] ? do_raw_write_lock+0x11d/0x260 [ 1893.719744][ T2734] kvm_vcpu_ioctl+0xa62/0xfd0 [ 1893.719774][ T2734] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1893.719794][ T2734] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 1893.719834][ T2734] ? __fget_files+0x2a/0x420 [ 1893.719858][ T2734] ? __fget_files+0x2a/0x420 [ 1893.719877][ T2734] ? __fget_files+0x3a0/0x420 [ 1893.719897][ T2734] ? __fget_files+0x2a/0x420 [ 1893.719921][ T2734] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1893.719946][ T2734] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1893.719969][ T2734] __se_sys_ioctl+0xfc/0x170 [ 1893.719994][ T2734] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1893.720015][ T2734] do_syscall_64+0x174/0x580 [ 1893.720044][ T2734] ? clear_bhb_loop+0x40/0x90 [ 1893.720066][ T2734] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1893.720084][ T2734] RIP: 0033:0x7f209e39ce59 [ 1893.720103][ T2734] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1893.720117][ T2734] RSP: 002b:00007f209f300028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1893.720138][ T2734] RAX: ffffffffffffffda RBX: 00007f209e615fa0 RCX: 00007f209e39ce59 [ 1893.720150][ T2734] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1893.720161][ T2734] RBP: 00007f209f300090 R08: 0000000000000000 R09: 0000000000000000 [ 1893.720172][ T2734] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1893.720183][ T2734] R13: 00007f209e616038 R14: 00007f209e615fa0 R15: 00007f209e73fa48 [ 1893.720213][ T2734] [ 1894.117580][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1894.274690][ T2747] loop2: detected capacity change from 0 to 7 [ 1894.292630][ T2749] ip6tnl0: Caught tx_queue_len zero misconfig [ 1894.300857][ T2747] Dev loop2: unable to read RDB block 7 [ 1894.306635][ T2747] loop2: unable to read partition table [ 1894.313601][ T2747] loop2: partition table beyond EOD, truncated [ 1894.320489][ T2747] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1894.491951][ T2174] usb 2-1: 2:0: failed to get current value for ch 1 (-71) [ 1894.558984][T22593] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 1894.567930][ T2174] usb 2-1: USB disconnect, device number 73 [ 1894.718267][T22593] usb 3-1: Using ep0 maxpacket: 32 [ 1894.728191][T22593] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 1894.736572][T22593] usb 3-1: config 0 has no interface number 0 [ 1894.745538][T22593] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1894.755555][T22593] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1894.767028][T22593] usb 3-1: Product: syz [ 1894.771998][T22593] usb 3-1: Manufacturer: syz [ 1894.776723][T22593] usb 3-1: SerialNumber: syz [ 1894.784770][T22593] usb 3-1: config 0 descriptor?? [ 1894.799548][T22593] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1895.021459][T22593] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1895.063400][T22593] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1895.147697][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1895.272987][ C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1895.283933][T22593] usb 3-1: USB disconnect, device number 109 [ 1895.325674][T22593] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1895.345795][T22593] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1895.365744][ T2769] loop2: detected capacity change from 0 to 7 [ 1895.373146][T22593] quatech2 3-1:0.51: device disconnected [ 1895.397581][ T2769] loop2: [ 1895.409073][ T2769] loop2: partition table partially beyond EOD, truncated [ 1895.875773][ T5003] loop2: [ 1895.887830][ T5003] loop2: partition table partially beyond EOD, truncated [ 1895.941195][ T2795] netlink: 'syz.3.8578': attribute type 1 has an invalid length. [ 1896.025331][ T2795] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1896.033551][ T2800] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8578'. [ 1896.074678][ T5003] loop2: [ 1896.078008][ T5003] loop2: partition table partially beyond EOD, truncated [ 1896.081667][ T2804] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1896.144759][ T2804] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1896.172081][ T2800] bond11: entered promiscuous mode [ 1896.187601][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1896.198310][ T2800] bond11: entered allmulticast mode [ 1896.265680][ T2795] bond11: (slave dummy0): making interface the new active one [ 1896.282626][ T2795] dummy0: entered promiscuous mode [ 1896.289611][ T2795] dummy0: entered allmulticast mode [ 1896.296224][ T2795] bond11: (slave dummy0): Enslaving as an active interface with an up link [ 1896.449484][T22578] usb 3-1: new full-speed USB device number 110 using dummy_hcd [ 1896.629649][T22578] usb 3-1: too many endpoints for config 0 interface 0 altsetting 2: 254, using maximum allowed: 30 [ 1896.648073][T22578] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1896.687476][T22578] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1896.705795][T22578] usb 3-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 1896.749002][T22578] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1896.755866][T22578] usb 3-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 1896.777510][T22578] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1896.800939][T22578] usb 3-1: config 0 descriptor?? [ 1897.227680][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1897.504030][ T2847] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8589'. [ 1897.645430][ T2847] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1897.685711][ T2847] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1897.926591][ T2826] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1897.955131][ T2826] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1898.267680][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1898.980996][ T2866] bond12: entered promiscuous mode [ 1899.307588][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1899.330288][ T2873] netlink: 'syz.3.8594': attribute type 1 has an invalid length. [ 1899.341130][T28774] raw-gadget.2 gadget.0: failed to queue disconnect event [ 1899.379770][ T2874] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8594'. [ 1899.545113][ T2873] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1899.604048][T19937] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1899.622525][T19937] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1899.636525][T19937] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1899.651106][T19937] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1899.663453][T19937] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1899.737642][ T2874] bond13: entered promiscuous mode [ 1899.748284][ T2874] bond13: entered allmulticast mode [ 1899.811621][ T2878] bond11: (slave dummy0): Releasing active interface [ 1899.836865][T22578] usbhid 3-1:0.0: can't add hid device: -71 [ 1899.857104][T22578] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1899.878537][ T2878] dummy0: left promiscuous mode [ 1899.910218][ T2878] dummy0: left allmulticast mode [ 1899.930952][T22578] usb 3-1: USB disconnect, device number 110 [ 1900.019166][ T2878] bond13: (slave dummy0): making interface the new active one [ 1900.051425][ T2878] dummy0: entered promiscuous mode [ 1900.068364][ T2878] dummy0: entered allmulticast mode [ 1900.094602][ T2878] bond13: (slave dummy0): Enslaving as an active interface with an up link [ 1900.347616][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1900.462365][ T2890] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1900.489601][ T2890] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1900.530695][T29764] bond0: (slave syz_tun): Releasing backup interface [ 1901.036054][ T2902] FAULT_INJECTION: forcing a failure. [ 1901.036054][ T2902] name failslab, interval 1, probability 0, space 0, times 0 [ 1901.111762][ T2902] CPU: 1 UID: 0 PID: 2902 Comm: syz.2.8599 Tainted: G L syzkaller #0 PREEMPT(full) [ 1901.111788][ T2902] Tainted: [L]=SOFTLOCKUP [ 1901.111793][ T2902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1901.111800][ T2902] Call Trace: [ 1901.111806][ T2902] [ 1901.111812][ T2902] dump_stack_lvl+0xe8/0x150 [ 1901.111833][ T2902] should_fail_ex+0x412/0x560 [ 1901.111851][ T2902] should_failslab+0xa8/0x100 [ 1901.111865][ T2902] __kmalloc_noprof+0xe8/0x760 [ 1901.111882][ T2902] ? security_task_alloc+0x4d/0x330 [ 1901.111903][ T2902] security_task_alloc+0x4d/0x330 [ 1901.111920][ T2902] copy_process+0x1d12/0x4440 [ 1901.111950][ T2902] ? copy_process+0xd87/0x4440 [ 1901.111969][ T2902] ? __pfx_copy_process+0x10/0x10 [ 1901.111987][ T2902] ? mutex_init_lockdep+0xdf/0x110 [ 1901.112004][ T2902] vhost_task_create+0x1f9/0x380 [ 1901.112020][ T2902] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 1901.112036][ T2902] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 1901.112052][ T2902] ? __pfx_vhost_task_create+0x10/0x10 [ 1901.112079][ T2902] ? __pfx_vhost_task_fn+0x10/0x10 [ 1901.112098][ T2902] ? __lock_acquire+0x6b5/0x2cf0 [ 1901.112112][ T2902] ? kasan_save_track+0x4f/0x80 [ 1901.112127][ T2902] ? kasan_save_track+0x3e/0x80 [ 1901.112141][ T2902] ? kasan_save_free_info+0x46/0x50 [ 1901.112155][ T2902] ? __kasan_slab_free+0x5c/0x80 [ 1901.112170][ T2902] ? kfree+0x1c5/0x640 [ 1901.112186][ T2902] kvm_mmu_post_init_vm+0x147/0x2d0 [ 1901.112206][ T2902] kvm_arch_vcpu_ioctl_run+0x106/0x20d0 [ 1901.112228][ T2902] ? __mutex_trylock_common+0x158/0x260 [ 1901.112244][ T2902] ? look_up_lock_class+0x57/0x110 [ 1901.112258][ T2902] ? register_lock_class+0x31/0x2e0 [ 1901.112270][ T2902] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 1901.112289][ T2902] ? __lock_acquire+0x6b5/0x2cf0 [ 1901.112304][ T2902] ? __mutex_lock+0x319/0x1550 [ 1901.112321][ T2902] ? kasan_quarantine_put+0xbb/0x1f0 [ 1901.112345][ T2902] ? do_raw_write_lock+0x11d/0x260 [ 1901.112371][ T2902] kvm_vcpu_ioctl+0xa62/0xfd0 [ 1901.112391][ T2902] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1901.112405][ T2902] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 1901.112431][ T2902] ? __fget_files+0x2a/0x420 [ 1901.112448][ T2902] ? __fget_files+0x2a/0x420 [ 1901.112462][ T2902] ? __fget_files+0x3a0/0x420 [ 1901.112475][ T2902] ? __fget_files+0x2a/0x420 [ 1901.112491][ T2902] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1901.112509][ T2902] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1901.112525][ T2902] __se_sys_ioctl+0xfc/0x170 [ 1901.112543][ T2902] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1901.112556][ T2902] do_syscall_64+0x174/0x580 [ 1901.112568][ T2902] ? trace_irq_disable+0x3b/0x140 [ 1901.112586][ T2902] ? clear_bhb_loop+0x40/0x90 [ 1901.112600][ T2902] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1901.112612][ T2902] RIP: 0033:0x7f209e39ce59 [ 1901.112625][ T2902] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1901.112635][ T2902] RSP: 002b:00007f209f300028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1901.112650][ T2902] RAX: ffffffffffffffda RBX: 00007f209e615fa0 RCX: 00007f209e39ce59 [ 1901.112659][ T2902] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1901.112666][ T2902] RBP: 00007f209f300090 R08: 0000000000000000 R09: 0000000000000000 [ 1901.112674][ T2902] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1901.112681][ T2902] R13: 00007f209e616038 R14: 00007f209e615fa0 R15: 00007f209e73fa48 [ 1901.112700][ T2902] [ 1901.417636][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1901.624688][ T2907] netlink: 'syz.3.8601': attribute type 10 has an invalid length. [ 1901.788421][T28747] Bluetooth: hci1: command tx timeout [ 1901.911072][T23015] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1901.949090][T23015] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1902.025838][ T2907] team0: Port device vxcan0 added [ 1902.131267][ T2914] bond11: entered promiscuous mode [ 1902.204857][ T2920] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1902.241018][ T2920] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1902.305940][ T2920] fuse: Bad value for 'fd' [ 1902.355370][ T2924] netlink: 'syz.2.8606': attribute type 1 has an invalid length. [ 1902.372351][T23015] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1902.406019][T23015] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1902.427085][ T2926] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8606'. [ 1902.437623][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1902.548917][ T2924] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1902.633873][ T2926] bond12: entered promiscuous mode [ 1902.654513][ T2926] bond12: entered allmulticast mode [ 1902.689068][ T2928] bond12: (slave dummy0): making interface the new active one [ 1902.697852][ T2928] dummy0: entered promiscuous mode [ 1902.704314][ T2928] dummy0: entered allmulticast mode [ 1902.712792][ T2928] bond12: (slave dummy0): Enslaving as an active interface with an up link [ 1902.818204][T23015] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1902.829225][T23015] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1903.167906][T22593] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 1903.180879][T23015] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1903.191518][T23015] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1903.278391][ T2174] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 1903.329247][T22593] usb 3-1: Using ep0 maxpacket: 8 [ 1903.335703][ T2880] bridge0: port 1(bridge_slave_0) entered blocking state [ 1903.345890][ T2880] bridge0: port 1(bridge_slave_0) entered disabled state [ 1903.356809][T22593] usb 3-1: config index 0 descriptor too short (expected 9, got 0) [ 1903.370734][T22593] usb 3-1: can't read configurations, error -22 [ 1903.377233][ T2880] bridge_slave_0: entered allmulticast mode [ 1903.390288][ T2880] bridge_slave_0: entered promiscuous mode [ 1903.404626][ T2880] bridge0: port 2(bridge_slave_1) entered blocking state [ 1903.412597][ T2880] bridge0: port 2(bridge_slave_1) entered disabled state [ 1903.420070][ T2880] bridge_slave_1: entered allmulticast mode [ 1903.428921][ T2880] bridge_slave_1: entered promiscuous mode [ 1903.449493][ T2174] usb 2-1: Using ep0 maxpacket: 32 [ 1903.469192][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1903.496284][ T2174] usb 2-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 1903.509264][ T2174] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1903.527063][T22593] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 1903.533660][ T2880] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1903.546017][ T2174] usb 2-1: Product: syz [ 1903.558943][ T2174] usb 2-1: Manufacturer: syz [ 1903.559258][ T2880] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1903.569294][ T2174] usb 2-1: SerialNumber: syz [ 1903.612960][ T2174] usb 2-1: config 0 descriptor?? [ 1903.634441][ T2174] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 1903.704340][T22593] usb 3-1: Using ep0 maxpacket: 8 [ 1903.728353][T22593] usb 3-1: config index 0 descriptor too short (expected 9, got 0) [ 1903.736630][T22593] usb 3-1: can't read configurations, error -22 [ 1903.744991][T22593] usb usb3-port1: attempt power cycle [ 1903.790015][ T2880] team0: Port device team_slave_0 added [ 1903.806982][ T2880] team0: Port device team_slave_1 added [ 1903.868185][T28747] Bluetooth: hci1: command tx timeout [ 1903.938744][ T2880] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1903.958820][ T2880] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1903.986160][ T2880] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1904.087545][T22593] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 1904.111460][T22593] usb 3-1: Using ep0 maxpacket: 8 [ 1904.133656][T22593] usb 3-1: config index 0 descriptor too short (expected 9, got 0) [ 1904.150915][T22593] usb 3-1: can't read configurations, error -22 [ 1904.319839][T22593] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 1904.352837][T22593] usb 3-1: Using ep0 maxpacket: 8 [ 1904.366552][T22593] usb 3-1: config index 0 descriptor too short (expected 9, got 0) [ 1904.382984][T22593] usb 3-1: can't read configurations, error -22 [ 1904.393224][T22593] usb usb3-port1: unable to enumerate USB device [ 1904.517782][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1904.647145][ T2941] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1904.682445][ T2941] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1904.691154][T23015] bond0 (unregistering): (slave geneve1): Releasing backup interface [ 1904.737331][ T2174] gspca_ov534_9: reg_w failed -71 [ 1904.829290][ T2962] FAULT_INJECTION: forcing a failure. [ 1904.829290][ T2962] name failslab, interval 1, probability 0, space 0, times 0 [ 1904.851276][ T2962] CPU: 0 UID: 0 PID: 2962 Comm: syz.1.8611 Tainted: G L syzkaller #0 PREEMPT(full) [ 1904.851309][ T2962] Tainted: [L]=SOFTLOCKUP [ 1904.851317][ T2962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1904.851328][ T2962] Call Trace: [ 1904.851337][ T2962] [ 1904.851347][ T2962] dump_stack_lvl+0xe8/0x150 [ 1904.851377][ T2962] should_fail_ex+0x412/0x560 [ 1904.851407][ T2962] should_failslab+0xa8/0x100 [ 1904.851427][ T2962] ? alloc_pid+0x1ae/0x1300 [ 1904.851451][ T2962] kmem_cache_alloc_noprof+0x87/0x650 [ 1904.851476][ T2962] ? copy_process+0x1d12/0x4440 [ 1904.851496][ T2962] ? vhost_task_create+0x1f9/0x380 [ 1904.851529][ T2962] alloc_pid+0x1ae/0x1300 [ 1904.851559][ T2962] ? __lock_acquire+0x6b5/0x2cf0 [ 1904.851582][ T2962] ? __pfx_alloc_pid+0x10/0x10 [ 1904.851624][ T2962] ? fpu_clone+0x347/0xb90 [ 1904.851664][ T2962] ? __asan_memcpy+0x40/0x70 [ 1904.851688][ T2962] ? copy_thread+0x74f/0x9a0 [ 1904.851719][ T2962] copy_process+0x21d1/0x4440 [ 1904.851760][ T2962] ? copy_process+0xd87/0x4440 [ 1904.851794][ T2962] ? __pfx_copy_process+0x10/0x10 [ 1904.851824][ T2962] ? mutex_init_lockdep+0xdf/0x110 [ 1904.851853][ T2962] vhost_task_create+0x1f9/0x380 [ 1904.851879][ T2962] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 1904.851905][ T2962] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 1904.851933][ T2962] ? __pfx_vhost_task_create+0x10/0x10 [ 1904.851968][ T2962] ? __pfx_vhost_task_fn+0x10/0x10 [ 1904.852000][ T2962] ? __lock_acquire+0x6b5/0x2cf0 [ 1904.852034][ T2962] ? kasan_save_track+0x4f/0x80 [ 1904.852060][ T2962] ? kasan_save_track+0x3e/0x80 [ 1904.852084][ T2962] ? kasan_save_free_info+0x46/0x50 [ 1904.852106][ T2962] ? __kasan_slab_free+0x5c/0x80 [ 1904.852131][ T2962] ? kfree+0x1c5/0x640 [ 1904.852159][ T2962] kvm_mmu_post_init_vm+0x147/0x2d0 [ 1904.852192][ T2962] kvm_arch_vcpu_ioctl_run+0x106/0x20d0 [ 1904.852232][ T2962] ? __mutex_trylock_common+0x158/0x260 [ 1904.852259][ T2962] ? look_up_lock_class+0x57/0x110 [ 1904.852282][ T2962] ? register_lock_class+0x31/0x2e0 [ 1904.852304][ T2962] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 1904.852337][ T2962] ? __lock_acquire+0x6b5/0x2cf0 [ 1904.852361][ T2962] ? __mutex_lock+0x319/0x1550 [ 1904.852391][ T2962] ? kasan_quarantine_put+0xbb/0x1f0 [ 1904.852433][ T2962] ? do_raw_write_lock+0x11d/0x260 [ 1904.852480][ T2962] kvm_vcpu_ioctl+0xa62/0xfd0 [ 1904.852513][ T2962] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1904.852541][ T2962] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 1904.852586][ T2962] ? __fget_files+0x2a/0x420 [ 1904.852615][ T2962] ? __fget_files+0x2a/0x420 [ 1904.852638][ T2962] ? __fget_files+0x3a0/0x420 [ 1904.852661][ T2962] ? __fget_files+0x2a/0x420 [ 1904.852689][ T2962] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1904.852718][ T2962] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1904.852742][ T2962] __se_sys_ioctl+0xfc/0x170 [ 1904.852771][ T2962] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1904.852794][ T2962] do_syscall_64+0x174/0x580 [ 1904.852813][ T2962] ? trace_irq_disable+0x3b/0x140 [ 1904.852841][ T2962] ? clear_bhb_loop+0x40/0x90 [ 1904.852866][ T2962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1904.852886][ T2962] RIP: 0033:0x7fc4db39ce59 [ 1904.852907][ T2962] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1904.852924][ T2962] RSP: 002b:00007fc4dc1b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1904.852946][ T2962] RAX: ffffffffffffffda RBX: 00007fc4db615fa0 RCX: 00007fc4db39ce59 [ 1904.852961][ T2962] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1904.852973][ T2962] RBP: 00007fc4dc1b6090 R08: 0000000000000000 R09: 0000000000000000 [ 1904.852986][ T2962] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1904.852998][ T2962] R13: 00007fc4db616038 R14: 00007fc4db615fa0 R15: 00007fc4db73fa48 [ 1904.853040][ T2962] [ 1905.244915][T23015] bond11 (unregistering): (slave bridge2): Releasing backup interface [ 1905.443312][T23015] bond0 (unregistering): Released all slaves [ 1905.449586][ T2174] gspca_ov534_9: Unknown sensor 0000 [ 1905.449747][ T2174] ov534_9 2-1:0.0: probe with driver ov534_9 failed with error -22 [ 1905.474587][ T2174] usb 2-1: USB disconnect, device number 74 [ 1905.522189][T23015] bond1 (unregistering): Released all slaves [ 1905.557557][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1905.588431][T23015] bond2 (unregistering): Released all slaves [ 1905.614677][T23015] bond3 (unregistering): Released all slaves [ 1905.642096][T23015] bond4 (unregistering): Released all slaves [ 1905.666862][T23015] bond5 (unregistering): Released all slaves [ 1905.699678][T23015] bond6 (unregistering): Released all slaves [ 1905.727024][T23015] bond7 (unregistering): Released all slaves [ 1905.755836][T23015] bond8 (unregistering): Released all slaves [ 1905.780819][T23015] bond9 (unregistering): Released all slaves [ 1905.820564][T23015] bond10 (unregistering): Released all slaves [ 1905.843809][T23015] bond11 (unregistering): Released all slaves [ 1905.873643][T23015] bond12 (unregistering): Released all slaves [ 1905.899400][T23015] bond13 (unregistering): Released all slaves [ 1905.949919][T28747] Bluetooth: hci1: command tx timeout [ 1905.962965][T23015] bond14 (unregistering): Released all slaves [ 1906.039111][T23015] bond15 (unregistering): Released all slaves [ 1906.044150][ T2976] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8616'. [ 1906.054834][ T2976] netlink: 'syz.2.8616': attribute type 7 has an invalid length. [ 1906.062854][ T2976] netlink: 'syz.2.8616': attribute type 8 has an invalid length. [ 1906.070971][ T2976] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8616'. [ 1906.088721][T23015] bond16 (unregistering): Released all slaves [ 1906.114431][T23015] bond17 (unregistering): Released all slaves [ 1906.137287][T23015] bond18 (unregistering): Released all slaves [ 1906.162987][T23015] bond19 (unregistering): Released all slaves [ 1906.193230][T23015] bond20 (unregistering): Released all slaves [ 1906.218763][T23015] bond21 (unregistering): Released all slaves [ 1906.242750][T23015] bond22 (unregistering): (slave dummy0): Releasing active interface [ 1906.256553][T23015] dummy0: left promiscuous mode [ 1906.262079][T23015] dummy0: left allmulticast mode [ 1906.275973][T23015] bond22 (unregistering): Released all slaves [ 1906.294385][ T2880] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1906.301713][ T2880] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1906.328522][ T2880] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1906.342861][ T5298] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1906.430047][ T2973] bond2: entered promiscuous mode [ 1906.465104][ T2976] erspan0: entered promiscuous mode [ 1906.491839][ T2976] gretap0: entered promiscuous mode [ 1906.533348][ T2976] erspan0: left promiscuous mode [ 1906.553472][ T2980] netlink: 'syz.6.8617': attribute type 1 has an invalid length. [ 1906.571032][ T2976] gretap0: left promiscuous mode [ 1906.589196][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1906.624519][ T2981] netlink: 28 bytes leftover after parsing attributes in process `syz.6.8617'. [ 1906.675748][ T2983] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8618'. [ 1906.792036][ T2988] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1906.803891][ T2988] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1906.815558][ T2988] fuse: Bad value for 'fd' [ 1906.935980][ T2980] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1906.964791][T23015] tipc: Disabling bearer [ 1906.971281][T23015] tipc: Disabling bearer [ 1906.979892][T23015] tipc: Disabling bearer [ 1907.014276][T23015] tipc: Left network mode [ 1907.019209][ T2981] bond6: entered promiscuous mode [ 1907.037940][ T2981] bond6: entered allmulticast mode [ 1907.090530][ T2984] bond5: (slave dummy0): Releasing active interface [ 1907.102694][ T2984] dummy0: left promiscuous mode [ 1907.111251][ T2998] loop9: detected capacity change from 0 to 7 [ 1907.122099][ T2984] dummy0: left allmulticast mode [ 1907.132253][ C1] blk_print_req_error: 5 callbacks suppressed [ 1907.132272][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1907.147612][ C1] buffer_io_error: 324 callbacks suppressed [ 1907.147630][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 1907.182428][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1907.191721][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1907.228632][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1907.237912][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1907.263656][ T2984] bond6: (slave dummy0): making interface the new active one [ 1907.290007][ T2984] dummy0: entered promiscuous mode [ 1907.307305][ T2984] dummy0: entered allmulticast mode [ 1907.359269][ T2984] bond6: (slave dummy0): Enslaving as an active interface with an up link [ 1907.374135][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1907.383365][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1907.392350][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1907.401566][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1907.414919][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1907.424096][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1907.436830][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1907.446015][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1907.466288][ T2998] ldm_validate_partition_table(): Disk read failed. [ 1907.487019][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1907.496142][ T2880] hsr_slave_0: entered promiscuous mode [ 1907.496353][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 1907.510191][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1907.519391][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1907.569534][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1907.578836][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1907.587936][ T2880] hsr_slave_1: entered promiscuous mode [ 1907.590541][ T3002] loop5: detected capacity change from 0 to 7 [ 1907.593688][ T5691] usb 2-1: new full-speed USB device number 75 using dummy_hcd [ 1907.608458][ T2998] Dev loop9: unable to read RDB block 0 [ 1907.611813][ T2998] loop9: unable to read partition table [ 1907.627576][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1907.634039][ T2998] loop9: partition table beyond EOD, truncated [ 1907.635757][ T2880] debugfs: 'hsr0' already exists in 'hsr' [ 1907.651487][ T2880] Cannot create hsr debugfs directory [ 1907.685020][ T3002] Dev loop5: unable to read RDB block 7 [ 1907.712192][ T3002] loop5: AHDI p1 p2 [ 1907.713705][ T2998] loop_reread_partitions: partition scan of loop9 (úù) failed (rc=-5) [ 1907.718496][ T3002] loop5: partition table partially beyond EOD, truncated [ 1907.741361][ T3002] loop5: p1 size 256 extends beyond EOD, truncated [ 1907.900056][ T5691] usb 2-1: not running at top speed; connect to a high speed hub [ 1907.920165][ T5691] usb 2-1: config 0 has too many interfaces: 251, using maximum allowed: 32 [ 1907.938829][ T5691] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 251 [ 1907.955576][ T2093] udevd[2093]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 1907.989808][ T5691] usb 2-1: config 0 interface 0 altsetting 129 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 1908.028812][T28747] Bluetooth: hci1: command tx timeout [ 1908.029120][ T5691] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1908.079836][T22593] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 1908.127099][ T5691] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.40 [ 1908.165288][ T5691] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1908.214201][ T5691] usb 2-1: Product: Ɔ芯敯ꊖﺡﯪﵠ펊ⴸ볟⋞æ©â«“ꨩî…⨣溠ℯ帅˔ [ 1908.242483][ T5691] usb 2-1: Manufacturer: 졲ï¡å´±â•¢è—Šâ’–ౠ럱ꈧ燮島간롘⸡ᱹꆅ鳋뜣潶淿ã’筨ꋕ䨯퀽롭횹ｖ첄ী䳌晌䈽î„뻜딋槯鹕伖޵狸뇑⇟♋ä•çš™ê°™á®µá‡ï‘—쀪ኔ쓿诶瓛â–á€à´…ë¢æš¾é€¯é¥Ÿëž¼ï¶¸ç‚꼸é çŒ²ï¬§çˆ¯â¸´î˜»î­é‘溴㸕⨑î‡ã½°æ‚œì—ƒè¦¥ì™áŠ¢à¸µëƒï¼¦è­¤ä‡¿ê¹¥ï¾éˆ¡ï ¿á©¤åŒˆè³è˜´ïˆšå ¾âœå­“殭韥 [ 1908.297515][T22593] usb 3-1: Using ep0 maxpacket: 32 [ 1908.336522][T22593] usb 3-1: config 0 has no interfaces? [ 1908.346221][ T5691] usb 2-1: SerialNumber: ဉ [ 1908.364657][T22593] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1908.377816][T22593] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1908.396128][T22593] usb 3-1: Product: syz [ 1908.400499][T22593] usb 3-1: Manufacturer: syz [ 1908.406312][ T5691] usb 2-1: config 0 descriptor?? [ 1908.448015][T22593] usb 3-1: SerialNumber: syz [ 1908.466045][ T3000] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1908.470718][T23015] batman_adv: batadv0: Removing interface: macvtap1 [ 1908.475382][T22593] usb 3-1: config 0 descriptor?? [ 1908.551635][T23015] batman_adv: batadv0: Removing interface: macvtap2 [ 1908.672916][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1908.719961][ T3005] netlink: 'syz.2.8622': attribute type 13 has an invalid length. [ 1908.765354][ T3005] netlink: 'syz.2.8622': attribute type 17 has an invalid length. [ 1909.085805][ T3005] 8021q: adding VLAN 0 to HW filter on device team0 [ 1909.178735][ T3005] virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1909.259118][ T3005] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1909.324354][ T3005] virt_wifi0: entered promiscuous mode [ 1909.336322][ T3005] virt_wifi0: entered allmulticast mode [ 1909.346530][ T3005] macsec1: left promiscuous mode [ 1909.352424][ T3005] macsec1: left allmulticast mode [ 1909.358438][ T3005] virt_wifi0: left allmulticast mode [ 1909.380433][ T3005] bond1: left promiscuous mode [ 1909.391887][ T3005] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1909.402942][ T3005] bond2: left promiscuous mode [ 1909.408171][ T3005] bond2: left allmulticast mode [ 1909.413724][ T3005] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1909.423860][ T3005] bond3: left promiscuous mode [ 1909.429976][ T3005] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1909.441767][ T3005] mac80211_hwsim hwsim43 wlan1: entered promiscuous mode [ 1909.453632][ T3005] macvtap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1909.470515][ T3005] geneve1: entered promiscuous mode [ 1909.495233][ T3005] bond4: left promiscuous mode [ 1909.501062][ T3005] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1909.509958][ T3005] bond5: left promiscuous mode [ 1909.514921][ T3005] bond5: left allmulticast mode [ 1909.520715][ T3005] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1909.536208][ T3005] bond6: left promiscuous mode [ 1909.541317][ T3005] bond6: left allmulticast mode [ 1909.546815][ T3005] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1909.559817][ T3005] bond7: left promiscuous mode [ 1909.564684][ T3005] bond7: left allmulticast mode [ 1909.570386][ T3005] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1909.578847][ T3005] ip6tnl1: left allmulticast mode [ 1909.588221][ T3005] bond8: left promiscuous mode [ 1909.593618][ T3005] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1909.604151][ T3005] macvtap0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1909.623428][ T3005] bond9: left promiscuous mode [ 1909.629111][ T3005] bond9: left allmulticast mode [ 1909.634418][ T3005] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1909.644108][ T3005] bond10: left promiscuous mode [ 1909.650063][ T3005] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1909.661229][ T3005] bond11: left promiscuous mode [ 1909.666747][ T3005] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1909.679128][ T3005] bond12: left promiscuous mode [ 1909.684162][ T3005] dummy0: left promiscuous mode [ 1909.689728][ T3005] bond12: left allmulticast mode [ 1909.694725][ T3005] dummy0: left allmulticast mode [ 1909.701594][ T3005] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1909.717568][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1909.763204][ T5298] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1909.772290][T23016] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1909.785297][T23016] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1909.831142][T23016] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1909.840428][T23016] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1909.886217][T22780] usb 3-1: USB disconnect, device number 115 [ 1909.905792][T23015] hsr_slave_0: left promiscuous mode [ 1909.913219][T23015] hsr_slave_1: left promiscuous mode [ 1909.924499][T23015] virt_wifi0: left promiscuous mode [ 1909.930527][T23015] veth1_macvtap: left promiscuous mode [ 1909.936046][T23015] veth0_macvtap: left promiscuous mode [ 1909.942270][T23015] veth1_vlan: left promiscuous mode [ 1909.952834][T23015] veth0_vlan: left promiscuous mode [ 1910.020686][ T5691] usbhid 2-1:0.0: can't add hid device: -71 [ 1910.035310][ T5691] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1910.081596][ T5691] usb 2-1: USB disconnect, device number 75 [ 1910.136661][ T3029] FAULT_INJECTION: forcing a failure. [ 1910.136661][ T3029] name failslab, interval 1, probability 0, space 0, times 0 [ 1910.157706][ T3029] CPU: 0 UID: 0 PID: 3029 Comm: syz.1.8625 Tainted: G L syzkaller #0 PREEMPT(full) [ 1910.157738][ T3029] Tainted: [L]=SOFTLOCKUP [ 1910.157746][ T3029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1910.157758][ T3029] Call Trace: [ 1910.157766][ T3029] [ 1910.157775][ T3029] dump_stack_lvl+0xe8/0x150 [ 1910.157812][ T3029] should_fail_ex+0x412/0x560 [ 1910.157845][ T3029] should_failslab+0xa8/0x100 [ 1910.157869][ T3029] ? skb_clone+0x212/0x3a0 [ 1910.157895][ T3029] kmem_cache_alloc_noprof+0x87/0x650 [ 1910.157924][ T3029] ? __netlink_lookup+0xc6/0x8b0 [ 1910.157956][ T3029] skb_clone+0x212/0x3a0 [ 1910.157981][ T3029] __netlink_deliver_tap+0x404/0x850 [ 1910.158024][ T3029] ? netlink_deliver_tap+0x2e/0x1b0 [ 1910.158057][ T3029] netlink_deliver_tap+0x19c/0x1b0 [ 1910.158088][ T3029] netlink_unicast+0x730/0x8e0 [ 1910.158128][ T3029] netlink_sendmsg+0x813/0xb40 [ 1910.158158][ T3029] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1910.158183][ T3029] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1910.158216][ T3029] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1910.158249][ T3029] ____sys_sendmsg+0x972/0x9f0 [ 1910.158271][ T3029] ? __might_fault+0xaf/0x130 [ 1910.158302][ T3029] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1910.158333][ T3029] ? import_iovec+0x73/0xa0 [ 1910.158361][ T3029] ___sys_sendmsg+0x2a5/0x360 [ 1910.158382][ T3029] ? __lock_acquire+0x6b5/0x2cf0 [ 1910.158411][ T3029] ? __pfx____sys_sendmsg+0x10/0x10 [ 1910.158467][ T3029] ? __fget_files+0x2a/0x420 [ 1910.158493][ T3029] ? __fget_files+0x3a0/0x420 [ 1910.158528][ T3029] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1910.158552][ T3029] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1910.158593][ T3029] ? __pfx_ksys_write+0x10/0x10 [ 1910.158632][ T3029] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1910.158656][ T3029] do_syscall_64+0x174/0x580 [ 1910.158680][ T3029] ? trace_irq_disable+0x3b/0x140 [ 1910.158709][ T3029] ? clear_bhb_loop+0x40/0x90 [ 1910.158735][ T3029] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1910.158756][ T3029] RIP: 0033:0x7fc4db39ce59 [ 1910.158777][ T3029] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1910.158795][ T3029] RSP: 002b:00007fc4dc1b6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1910.158817][ T3029] RAX: ffffffffffffffda RBX: 00007fc4db615fa0 RCX: 00007fc4db39ce59 [ 1910.158831][ T3029] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 1910.158843][ T3029] RBP: 00007fc4dc1b6090 R08: 0000000000000000 R09: 0000000000000000 [ 1910.158856][ T3029] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1910.158869][ T3029] R13: 00007fc4db616038 R14: 00007fc4db615fa0 R15: 00007fc4db73fa48 [ 1910.158902][ T3029] [ 1910.747614][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1910.839361][ T3031] loop5: detected capacity change from 0 to 7 [ 1910.865721][ T3031] Dev loop5: unable to read RDB block 7 [ 1910.878505][ T3031] loop5: AHDI p1 p2 [ 1910.899420][ T3031] loop5: partition table partially beyond EOD, truncated [ 1910.910453][ T3031] loop5: p1 size 256 extends beyond EOD, truncated [ 1910.969245][ T2093] udevd[2093]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 1911.328627][ C1] vcan0: j1939_tp_rxtimer: 0xffff888025722400: rx timeout, send abort [ 1911.534550][ T3049] netlink: 'syz.6.8631': attribute type 1 has an invalid length. [ 1911.556151][ T3050] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1911.591013][ T3050] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1911.609812][ T3052] netlink: 28 bytes leftover after parsing attributes in process `syz.6.8631'. [ 1911.676062][ T3041] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1911.680282][ T3049] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1911.770007][ T3041] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1911.783953][ T3052] bond7: entered promiscuous mode [ 1911.797595][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1911.799407][ T3052] bond7: entered allmulticast mode [ 1911.828806][ C1] vcan0: j1939_tp_rxtimer: 0xffff888025720800: rx timeout, send abort [ 1911.837156][ C1] vcan0: j1939_tp_rxtimer: 0xffff888025722400: abort rx timeout. Force session deactivation [ 1911.850928][ T3049] bond6: (slave dummy0): Releasing active interface [ 1911.860497][ T3049] dummy0: left promiscuous mode [ 1911.865785][ T3049] dummy0: left allmulticast mode [ 1911.902312][ T3049] bond7: (slave dummy0): making interface the new active one [ 1911.910394][ T3049] dummy0: entered promiscuous mode [ 1911.914814][ T3060] loop5: detected capacity change from 0 to 7 [ 1911.915997][ T3049] dummy0: entered allmulticast mode [ 1911.932589][ T3049] bond7: (slave dummy0): Enslaving as an active interface with an up link [ 1911.956794][ T3060] Dev loop5: unable to read RDB block 7 [ 1912.007201][ T3060] loop5: AHDI p1 p2 [ 1912.012430][ T3060] loop5: partition table partially beyond EOD, truncated [ 1912.049571][ T3060] loop5: p1 size 256 extends beyond EOD, truncated [ 1912.249068][ T2093] udevd[2093]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 1912.334475][ C1] vcan0: j1939_tp_rxtimer: 0xffff888025721800: rx timeout, send abort [ 1912.343982][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888025721800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1912.367710][ C1] vcan0: j1939_tp_rxtimer: 0xffff888025720800: abort rx timeout. Force session deactivation [ 1912.532717][T23015] IPVS: stop unused estimator thread 0... [ 1912.707727][T22780] usb 3-1: new full-speed USB device number 116 using dummy_hcd [ 1912.827587][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1912.870908][T22780] usb 3-1: too many endpoints for config 0 interface 0 altsetting 2: 254, using maximum allowed: 30 [ 1912.894587][T22780] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1912.916525][T22780] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1912.937582][T22780] usb 3-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 1912.970783][ T5691] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 1912.971308][T22780] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1913.019580][T22780] usb 3-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 1913.038494][T22780] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1913.067236][T22780] usb 3-1: config 0 descriptor?? [ 1913.160000][ T5691] usb 2-1: Using ep0 maxpacket: 32 [ 1913.171032][ T5691] usb 2-1: config 0 has no interfaces? [ 1913.194264][ T5691] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1913.204510][ T5691] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1913.213927][ T5691] usb 2-1: Product: syz [ 1913.218507][ T5691] usb 2-1: Manufacturer: syz [ 1913.223202][ T5691] usb 2-1: SerialNumber: syz [ 1913.295238][ T5691] usb 2-1: config 0 descriptor?? [ 1913.441097][ T3088] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1913.494524][ T3089] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1913.505210][ T3072] fuse: Bad value for 'fd' [ 1913.552043][ T3088] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1913.595578][ T3075] netlink: 'syz.1.8636': attribute type 13 has an invalid length. [ 1913.613118][ T3075] netlink: 'syz.1.8636': attribute type 17 has an invalid length. [ 1913.622854][ T3089] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1913.715549][T22578] usb 2-1: USB disconnect, device number 76 [ 1913.868052][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1913.960734][ T2880] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1914.001781][ T2880] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1914.029997][ T2880] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1914.061983][ T2880] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1914.080123][ T3107] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1914.089338][ T2880] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1914.101684][ T3107] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1914.129084][ T2880] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1914.148473][ T2880] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1914.167292][ T2880] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1914.436762][ T3118] loop2: detected capacity change from 0 to 7 [ 1914.484120][ T3118] Dev loop2: unable to read RDB block 7 [ 1914.495909][ T3118] loop2: unable to read partition table [ 1914.526807][ T3118] loop2: partition table beyond EOD, truncated [ 1914.553509][ T3118] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1914.648830][ T2880] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1914.724255][ T2880] 8021q: adding VLAN 0 to HW filter on device team0 [ 1914.756601][ T3304] bridge0: port 1(bridge_slave_0) entered blocking state [ 1914.763925][ T3304] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1914.805042][ T3304] bridge0: port 2(bridge_slave_1) entered blocking state [ 1914.812316][ T3304] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1914.911185][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 1914.918153][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1914.926271][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 1915.007198][ T2880] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1915.118906][ T2880] veth0_vlan: entered promiscuous mode [ 1915.160321][ T2880] veth1_vlan: entered promiscuous mode [ 1915.299944][ T2880] veth0_macvtap: entered promiscuous mode [ 1915.349538][ T2880] veth1_macvtap: entered promiscuous mode [ 1915.386795][ T3132] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8642'. [ 1915.398802][ T3131] loop5: detected capacity change from 0 to 7 [ 1915.414962][ T3132] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8642'. [ 1915.426911][ T2880] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1915.432533][ T3131] Dev loop5: unable to read RDB block 7 [ 1915.447202][ T3132] FAULT_INJECTION: forcing a failure. [ 1915.447202][ T3132] name failslab, interval 1, probability 0, space 0, times 0 [ 1915.467748][ T3131] loop5: AHDI p1 p2 [ 1915.474170][ T3131] loop5: partition table partially beyond EOD, truncated [ 1915.491198][ T3132] CPU: 1 UID: 0 PID: 3132 Comm: syz.1.8642 Tainted: G L syzkaller #0 PREEMPT(full) [ 1915.491233][ T3132] Tainted: [L]=SOFTLOCKUP [ 1915.491241][ T3132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1915.491251][ T3132] Call Trace: [ 1915.491259][ T3132] [ 1915.491270][ T3132] dump_stack_lvl+0xe8/0x150 [ 1915.491301][ T3132] should_fail_ex+0x412/0x560 [ 1915.491329][ T3132] should_failslab+0xa8/0x100 [ 1915.491349][ T3132] ? skb_clone+0x212/0x3a0 [ 1915.491370][ T3132] kmem_cache_alloc_noprof+0x87/0x650 [ 1915.491406][ T3132] skb_clone+0x212/0x3a0 [ 1915.491430][ T3132] __netlink_deliver_tap+0x404/0x850 [ 1915.491473][ T3132] ? netlink_deliver_tap+0x2e/0x1b0 [ 1915.491517][ T3132] netlink_deliver_tap+0x19c/0x1b0 [ 1915.491548][ T3132] netlink_sendskb+0x68/0x140 [ 1915.491578][ T3132] netlink_rcv_skb+0x2b6/0x4b0 [ 1915.491608][ T3132] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1915.491639][ T3132] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1915.491682][ T3132] ? netlink_deliver_tap+0x2e/0x1b0 [ 1915.491709][ T3132] ? netlink_deliver_tap+0x2e/0x1b0 [ 1915.491740][ T3132] netlink_unicast+0x75c/0x8e0 [ 1915.491778][ T3132] netlink_sendmsg+0x813/0xb40 [ 1915.491807][ T3132] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1915.491830][ T3132] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1915.491860][ T3132] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1915.491888][ T3132] ____sys_sendmsg+0x972/0x9f0 [ 1915.491907][ T3132] ? __might_fault+0xaf/0x130 [ 1915.491937][ T3132] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1915.491966][ T3132] ? import_iovec+0x73/0xa0 [ 1915.491993][ T3132] ___sys_sendmsg+0x2a5/0x360 [ 1915.492012][ T3132] ? __lock_acquire+0x6b5/0x2cf0 [ 1915.492038][ T3132] ? __pfx____sys_sendmsg+0x10/0x10 [ 1915.492063][ T3132] ? kstrtouint+0x6e/0xe0 [ 1915.492122][ T3132] ? __fget_files+0x2a/0x420 [ 1915.492145][ T3132] ? __fget_files+0x3a0/0x420 [ 1915.492179][ T3132] __sys_sendmmsg+0x27c/0x4e0 [ 1915.492206][ T3132] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1915.492223][ T3132] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 1915.492273][ T3132] ? ksys_write+0x242/0x270 [ 1915.492304][ T3132] ? __pfx_ksys_write+0x10/0x10 [ 1915.492340][ T3132] __x64_sys_sendmmsg+0xa0/0xc0 [ 1915.492359][ T3132] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1915.492377][ T3132] do_syscall_64+0x174/0x580 [ 1915.492400][ T3132] ? clear_bhb_loop+0x40/0x90 [ 1915.492426][ T3132] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1915.492443][ T3132] RIP: 0033:0x7fc4db39ce59 [ 1915.492462][ T3132] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1915.492477][ T3132] RSP: 002b:00007fc4dc1b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1915.492508][ T3132] RAX: ffffffffffffffda RBX: 00007fc4db615fa0 RCX: 00007fc4db39ce59 [ 1915.492522][ T3132] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000004 [ 1915.492535][ T3132] RBP: 00007fc4dc1b6090 R08: 0000000000000000 R09: 0000000000000000 [ 1915.492547][ T3132] R10: 000000000000fff0 R11: 0000000000000246 R12: 0000000000000001 [ 1915.492558][ T3132] R13: 00007fc4db616038 R14: 00007fc4db615fa0 R15: 00007fc4db73fa48 [ 1915.492589][ T3132] [ 1915.493396][ T2880] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1915.530701][ T3131] loop5: p1 size 256 extends beyond EOD, [ 1915.644962][T23016] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1915.699616][ T3131] truncated [ 1915.863072][ T3138] netlink: 'syz.1.8644': attribute type 1 has an invalid length. [ 1915.939194][ T3138] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1915.947675][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1915.962977][ T1332] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1915.987001][ T1332] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1916.087077][ T2093] udevd[2093]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 1916.129988][ T3140] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1916.245803][ T3136] macvlan2: entered promiscuous mode [ 1916.273548][ T3136] macvlan2: entered allmulticast mode [ 1916.304276][ T3136] bond3: entered promiscuous mode [ 1916.318699][ T3136] veth0_to_bond: entered promiscuous mode [ 1916.344989][ T3136] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1916.367030][ T3136] bond3: left promiscuous mode [ 1916.378054][ T3147] fuse: Unknown parameter '0x00000000000000090x000000000000000b' [ 1916.383267][ T3136] veth0_to_bond: left promiscuous mode [ 1916.432656][ T1332] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1916.685330][ T1332] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1916.715025][ T1332] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1916.921954][ T1332] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1916.951206][ T1332] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1916.982217][T22780] usbhid 3-1:0.0: can't add hid device: -71 [ 1916.997632][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1917.008507][T22780] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1917.054173][T22780] usb 3-1: USB disconnect, device number 116 [ 1917.436896][ T3168] fuse: Unknown parameter 'gro‘p_id' [ 1917.493857][ T3174] loop2: detected capacity change from 0 to 7 [ 1917.537314][ T3174] Dev loop2: unable to read RDB block 7 [ 1917.569365][ T3174] loop2: unable to read partition table [ 1917.609825][ T3174] loop2: partition table beyond EOD, truncated [ 1917.646326][ T3174] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1917.989315][ T3185] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8653'. [ 1918.035040][ T3185] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8653'. [ 1918.037939][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1918.061584][ T3185] FAULT_INJECTION: forcing a failure. [ 1918.061584][ T3185] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1918.203645][ T3185] CPU: 1 UID: 0 PID: 3185 Comm: syz.3.8653 Tainted: G L syzkaller #0 PREEMPT(full) [ 1918.203679][ T3185] Tainted: [L]=SOFTLOCKUP [ 1918.203686][ T3185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1918.203697][ T3185] Call Trace: [ 1918.203705][ T3185] [ 1918.203714][ T3185] dump_stack_lvl+0xe8/0x150 [ 1918.203745][ T3185] should_fail_ex+0x412/0x560 [ 1918.203773][ T3185] _copy_from_user+0x2d/0xb0 [ 1918.203798][ T3185] kstrtouint_from_user+0xd6/0x180 [ 1918.203891][ T3185] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1918.203929][ T3185] proc_fail_nth_write+0x8e/0x210 [ 1918.203955][ T3185] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1918.203984][ T3185] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1918.204008][ T3185] vfs_write+0x29a/0xb90 [ 1918.204041][ T3185] ? __pfx_vfs_write+0x10/0x10 [ 1918.204068][ T3185] ? __fget_files+0x2a/0x420 [ 1918.204098][ T3185] ? __fget_files+0x3a0/0x420 [ 1918.204118][ T3185] ? __fget_files+0x2a/0x420 [ 1918.204149][ T3185] ksys_write+0x150/0x270 [ 1918.204178][ T3185] ? __pfx_ksys_write+0x10/0x10 [ 1918.204213][ T3185] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1918.204236][ T3185] do_syscall_64+0x174/0x580 [ 1918.204256][ T3185] ? trace_irq_disable+0x3b/0x140 [ 1918.204280][ T3185] ? clear_bhb_loop+0x40/0x90 [ 1918.204304][ T3185] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1918.204321][ T3185] RIP: 0033:0x7ff648d5d68e [ 1918.204341][ T3185] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1918.204357][ T3185] RSP: 002b:00007ff649bd4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1918.204379][ T3185] RAX: ffffffffffffffda RBX: 00007ff649bd56c0 RCX: 00007ff648d5d68e [ 1918.204392][ T3185] RDX: 0000000000000001 RSI: 00007ff649bd50a0 RDI: 0000000000000005 [ 1918.204404][ T3185] RBP: 00007ff649bd5090 R08: 0000000000000000 R09: 0000000000000000 [ 1918.204415][ T3185] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1918.204427][ T3185] R13: 00007ff649016038 R14: 00007ff649015fa0 R15: 00007ff64913fa48 [ 1918.204458][ T3185] [ 1918.669806][ T3194] openvswitch: netlink: Unexpected mask (mask=20440, allowed=10048) [ 1918.786857][ T3189] bond13 (unregistering): Released all slaves [ 1919.067601][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1919.147678][ T2174] usb 2-1: new full-speed USB device number 77 using dummy_hcd [ 1919.319722][ T2174] usb 2-1: too many endpoints for config 0 interface 0 altsetting 2: 254, using maximum allowed: 30 [ 1919.358619][ T2174] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1919.378500][ T3218] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1919.388597][ T2174] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1919.418970][ T2174] usb 2-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 1919.430616][ T3218] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1919.462187][ T2174] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1919.505140][ T2174] usb 2-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 1919.505515][ T3218] netlink: 'syz.3.8658': attribute type 13 has an invalid length. [ 1919.553170][ T2174] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1919.570098][ T2174] usb 2-1: config 0 descriptor?? [ 1919.587678][ T3218] netlink: 'syz.3.8658': attribute type 17 has an invalid length. [ 1920.107650][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1920.514498][ T3246] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1920.563834][ T3246] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1920.700948][ T3245] af_packet: tpacket_rcv: packet too big, clamped from 1 to 4294967272. macoff=96 [ 1921.147576][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1921.347616][T16992] usb 3-1: new full-speed USB device number 117 using dummy_hcd [ 1921.491754][ T3251] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1921.500887][T16992] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1921.502017][ T3251] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1921.516349][T16992] usb 3-1: can't read configurations, error -61 [ 1921.524429][ T29] audit: type=1326 audit(1781200716.839:6246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3250 comm="syz.3.8665" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff648d9ce59 code=0x7ffc0000 [ 1921.550017][ T29] audit: type=1326 audit(1781200716.849:6247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3250 comm="syz.3.8665" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=37 compat=0 ip=0x7ff648d9ce59 code=0x7ffc0000 [ 1921.575111][ T29] audit: type=1326 audit(1781200716.849:6248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3250 comm="syz.3.8665" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff648d9ce59 code=0x7ffc0000 [ 1921.601074][ T29] audit: type=1326 audit(1781200716.849:6249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3250 comm="syz.3.8665" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff648d9ce59 code=0x7ffc0000 [ 1921.626404][ T29] audit: type=1326 audit(1781200716.849:6250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3250 comm="syz.3.8665" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff648d9ce59 code=0x7ffc0000 [ 1921.652720][ T29] audit: type=1326 audit(1781200716.849:6251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3250 comm="syz.3.8665" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=70 compat=0 ip=0x7ff648d9ce59 code=0x7ffc0000 [ 1921.678094][T16992] usb 3-1: new full-speed USB device number 118 using dummy_hcd [ 1921.686386][ T29] audit: type=1326 audit(1781200716.849:6252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3250 comm="syz.3.8665" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff648d9ce59 code=0x7ffc0000 [ 1921.711395][ T29] audit: type=1326 audit(1781200716.849:6253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3250 comm="syz.3.8665" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff648d9ce59 code=0x7ffc0000 [ 1921.882006][T16992] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1921.890757][T16992] usb 3-1: can't read configurations, error -61 [ 1921.897673][T16992] usb usb3-port1: attempt power cycle [ 1922.112273][ T3254] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1922.123323][ T3254] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1922.187622][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1922.237707][T16992] usb 3-1: new full-speed USB device number 119 using dummy_hcd [ 1922.257233][ T3261] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1922.268245][ T3261] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1922.271687][T16992] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1922.285599][T16992] usb 3-1: can't read configurations, error -61 [ 1922.417542][T16992] usb 3-1: new full-speed USB device number 120 using dummy_hcd [ 1922.450613][T16992] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1922.458361][T16992] usb 3-1: can't read configurations, error -61 [ 1922.465153][T16992] usb usb3-port1: unable to enumerate USB device [ 1922.647031][ T2174] usbhid 2-1:0.0: can't add hid device: -71 [ 1922.655689][ T2174] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1922.669192][ T2174] usb 2-1: USB disconnect, device number 77 [ 1922.922442][ T3265] fuse: Bad value for 'fd' [ 1923.123330][ T3274] binder_alloc: 3273: pid 3273 spamming oneway? 1 buffers allocated for a total size of 4096 [ 1923.135029][ T3274] binder_alloc: 3273: binder_alloc_buf size -944 failed, no address space [ 1923.147314][ T3274] binder_alloc: allocated: 5120 (num: 2 largest: 4096), free: 7168 (num: 1 largest: 7168) [ 1923.228191][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1923.267894][T22780] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 1923.356294][ T3279] kvm_intel: kvm [3278]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0x68ce [ 1923.369081][ T3279] kvm: kvm [3278]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x103a [ 1923.380979][ T3279] kvm: kvm [3278]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x103e [ 1923.427469][T22780] usb 2-1: Using ep0 maxpacket: 16 [ 1923.439925][T22780] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1923.459202][T22780] usb 2-1: config 0 has no interfaces? [ 1923.477550][T22780] usb 2-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 1923.486754][T22780] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1923.510044][T22780] usb 2-1: config 0 descriptor?? [ 1923.802094][ T5691] usb 2-1: USB disconnect, device number 78 [ 1923.914063][ T3283] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1923.929838][ T3283] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1924.267603][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1924.559491][ T3302] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8682'. [ 1924.569623][T22593] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 1924.757035][ T3313] bond14: entered promiscuous mode [ 1924.769617][T22593] usb 3-1: Using ep0 maxpacket: 32 [ 1924.788747][T22593] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 1924.797876][T22593] usb 3-1: config 0 has no interface number 0 [ 1924.806425][T22593] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1924.816133][T22593] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1924.824785][T22593] usb 3-1: Product: syz [ 1924.829317][T22593] usb 3-1: Manufacturer: syz [ 1924.834021][T22593] usb 3-1: SerialNumber: syz [ 1924.843195][T22593] usb 3-1: config 0 descriptor?? [ 1924.857762][T22593] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1924.865361][ T3316] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8686'. [ 1924.876324][ T3316] netlink: 'syz.3.8686': attribute type 29 has an invalid length. [ 1924.884932][ T3316] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8686'. [ 1924.902781][ T3316] binder: 3315:3316 ioctl c004ae02 200000000140 returned -22 [ 1924.987849][ T5691] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 1925.052973][ T3297] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1925.062853][ T3297] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1925.159825][ T5691] usb 2-1: config index 0 descriptor too short (expected 29993, got 41) [ 1925.168842][ T5691] usb 2-1: config 116 has too many interfaces: 108, using maximum allowed: 32 [ 1925.178106][ T5691] usb 2-1: config 116 has an invalid descriptor of length 0, skipping remainder of the config [ 1925.188461][ T5691] usb 2-1: config 116 has 0 interfaces, different from the descriptor's value: 108 [ 1925.200354][ T5691] usb 2-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice= 0.9c [ 1925.209477][ T5691] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1925.217639][ T5691] usb 2-1: Product: syz [ 1925.221883][ T5691] usb 2-1: Manufacturer: syz [ 1925.226508][ T5691] usb 2-1: SerialNumber: syz [ 1925.317588][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1925.463153][ T3311] bridge_slave_0: left allmulticast mode [ 1925.469974][ T3311] bridge_slave_0: left promiscuous mode [ 1925.475862][ T3311] bridge0: port 1(bridge_slave_0) entered disabled state [ 1925.490848][ T3311] bridge_slave_1: left allmulticast mode [ 1925.496580][ T3311] bridge_slave_1: left promiscuous mode [ 1925.502758][ T3311] bridge0: port 2(bridge_slave_1) entered disabled state [ 1925.521576][ T3311] bond3: (slave veth0_to_bond): Releasing backup interface [ 1925.539558][ T3311] bond0: (slave bond_slave_0): Releasing backup interface [ 1925.565472][ T3311] bond0: (slave bond_slave_1): Releasing backup interface [ 1925.590413][ T3311] team0: Port device team_slave_0 removed [ 1925.612763][ T3311] team0: Port device team_slave_1 removed [ 1925.628078][ T3311] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1925.635561][ T3311] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1925.648466][ T3311] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1925.656667][ T3311] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1925.687736][ T3311] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1925.739927][T22780] usb 2-1: USB disconnect, device number 79 [ 1925.974230][ T3331] netlink: 'syz.6.8690': attribute type 1 has an invalid length. [ 1926.023840][ T3331] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1926.025878][ T3334] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8691'. [ 1926.049822][ T3334] netlink: 'syz.3.8691': attribute type 29 has an invalid length. [ 1926.060060][ T3334] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8691'. [ 1926.065922][ T3331] netlink: 28 bytes leftover after parsing attributes in process `syz.6.8690'. [ 1926.094532][ T3331] bond8: entered promiscuous mode [ 1926.100354][ T3331] bond8: entered allmulticast mode [ 1926.112779][ T3334] FAULT_INJECTION: forcing a failure. [ 1926.112779][ T3334] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1926.129199][ T3334] CPU: 0 UID: 0 PID: 3334 Comm: syz.3.8691 Tainted: G L syzkaller #0 PREEMPT(full) [ 1926.129230][ T3334] Tainted: [L]=SOFTLOCKUP [ 1926.129235][ T3334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1926.129246][ T3334] Call Trace: [ 1926.129254][ T3334] [ 1926.129262][ T3334] dump_stack_lvl+0xe8/0x150 [ 1926.129292][ T3334] should_fail_ex+0x412/0x560 [ 1926.129317][ T3334] _copy_from_user+0x2d/0xb0 [ 1926.129337][ T3334] ___sys_sendmsg+0x1c6/0x360 [ 1926.129354][ T3334] ? __lock_acquire+0x6b5/0x2cf0 [ 1926.129376][ T3334] ? __pfx____sys_sendmsg+0x10/0x10 [ 1926.129390][ T3334] ? __lock_acquire+0x6b5/0x2cf0 [ 1926.129411][ T3334] ? kstrtouint+0x6e/0xe0 [ 1926.129470][ T3334] __sys_sendmmsg+0x27c/0x4e0 [ 1926.129493][ T3334] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1926.129508][ T3334] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 1926.129550][ T3334] ? ksys_write+0x242/0x270 [ 1926.129576][ T3334] ? __pfx_ksys_write+0x10/0x10 [ 1926.129606][ T3334] __x64_sys_sendmmsg+0xa0/0xc0 [ 1926.129624][ T3334] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1926.129642][ T3334] do_syscall_64+0x174/0x580 [ 1926.129662][ T3334] ? clear_bhb_loop+0x40/0x90 [ 1926.129682][ T3334] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1926.129698][ T3334] RIP: 0033:0x7ff648d9ce59 [ 1926.129717][ T3334] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1926.129730][ T3334] RSP: 002b:00007ff649bd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1926.129751][ T3334] RAX: ffffffffffffffda RBX: 00007ff649015fa0 RCX: 00007ff648d9ce59 [ 1926.129763][ T3334] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003 [ 1926.129774][ T3334] RBP: 00007ff649bd5090 R08: 0000000000000000 R09: 0000000000000000 [ 1926.129785][ T3334] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1926.129794][ T3334] R13: 00007ff649016038 R14: 00007ff649015fa0 R15: 00007ff64913fa48 [ 1926.129822][ T3334] [ 1926.133180][ T3331] bond7: (slave dummy0): Releasing active interface [ 1926.270673][ T3338] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1926.283844][ T3331] dummy0: left promiscuous mode [ 1926.299579][ T3338] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1926.325959][ T3338] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1926.339581][ T3331] dummy0: left allmulticast mode [ 1926.357531][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1926.368278][ T3338] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1926.410400][ T3331] bond8: (slave dummy0): making interface the new active one [ 1926.419894][ T3331] dummy0: entered promiscuous mode [ 1926.425470][ T3331] dummy0: entered allmulticast mode [ 1926.434097][ T3331] bond8: (slave dummy0): Enslaving as an active interface with an up link [ 1926.660310][ T3346] bond9: entered promiscuous mode [ 1926.774680][ T3351] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8697'. [ 1926.784931][ T3351] netlink: 'syz.6.8697': attribute type 29 has an invalid length. [ 1926.793025][ T3351] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8697'. [ 1927.008103][T22578] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 1927.102462][ T3357] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1927.120996][ T3357] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1927.197529][T22578] usb 2-1: Using ep0 maxpacket: 32 [ 1927.211842][T22578] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 1927.227640][T22578] usb 2-1: config 0 has no interface number 0 [ 1927.241447][T22578] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1927.258705][T22578] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1927.269112][T22578] usb 2-1: Product: syz [ 1927.273491][T22578] usb 2-1: Manufacturer: syz [ 1927.278719][T22578] usb 2-1: SerialNumber: syz [ 1927.293276][T22578] usb 2-1: config 0 descriptor?? [ 1927.312803][T22578] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1927.387570][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1927.440039][ T29] audit: type=1804 audit(1781200722.759:6254): pid=3363 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.8701" name="/newroot/466/file1" dev="fuse" ino=1 res=1 errno=0 [ 1927.514972][ T3350] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1927.526673][ T3350] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1927.978740][ T3373] netlink: 'syz.3.8705': attribute type 1 has an invalid length. [ 1928.024746][ T3373] 8021q: adding VLAN 0 to HW filter on device bond15 [ 1928.044736][ T3373] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8705'. [ 1928.067859][ T3373] bond15: entered promiscuous mode [ 1928.073158][ T3373] bond15: entered allmulticast mode [ 1928.085219][ T3373] bond13: (slave dummy0): Releasing active interface [ 1928.094364][ T3373] dummy0: left promiscuous mode [ 1928.101020][ T3373] dummy0: left allmulticast mode [ 1928.119142][ T3373] bond15: (slave dummy0): making interface the new active one [ 1928.126817][ T3373] dummy0: entered promiscuous mode [ 1928.133915][ T3373] dummy0: entered allmulticast mode [ 1928.141156][ T3373] bond15: (slave dummy0): Enslaving as an active interface with an up link [ 1928.360051][ T3377] bond16: entered promiscuous mode [ 1928.427595][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1928.573590][ T3391] xt_NFQUEUE: number of queues (65323) out of range (got 67370) [ 1928.625071][ T3389] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1928.651992][ T3389] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1928.742575][ T3394] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8712'. [ 1928.888992][ T3400] mac80211_hwsim hwsim40 syzkaller0: entered promiscuous mode [ 1928.901436][ T3400] mac80211_hwsim hwsim40 syzkaller0: entered allmulticast mode [ 1929.048906][ T3402] netlink: 'syz.3.8715': attribute type 29 has an invalid length. [ 1929.059787][ T3402] FAULT_INJECTION: forcing a failure. [ 1929.059787][ T3402] name failslab, interval 1, probability 0, space 0, times 0 [ 1929.068509][ T3404] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1929.073086][ T3402] CPU: 1 UID: 0 PID: 3402 Comm: syz.3.8715 Tainted: G L syzkaller #0 PREEMPT(full) [ 1929.073115][ T3402] Tainted: [L]=SOFTLOCKUP [ 1929.073122][ T3402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1929.073132][ T3402] Call Trace: [ 1929.073140][ T3402] [ 1929.073148][ T3402] dump_stack_lvl+0xe8/0x150 [ 1929.073180][ T3402] should_fail_ex+0x412/0x560 [ 1929.073206][ T3402] should_failslab+0xa8/0x100 [ 1929.073226][ T3402] __kmalloc_cache_noprof+0x88/0x660 [ 1929.073250][ T3402] ? __pfx_stack_trace_save+0x10/0x10 [ 1929.073275][ T3402] ? rtnl_newlink+0x136/0x1bb0 [ 1929.073304][ T3402] rtnl_newlink+0x136/0x1bb0 [ 1929.073330][ T3402] ? kasan_save_track+0x3e/0x80 [ 1929.073352][ T3402] ? kasan_save_free_info+0x46/0x50 [ 1929.073370][ T3402] ? __kasan_slab_free+0x5c/0x80 [ 1929.073393][ T3402] ? dev_hard_start_xmit+0x2cd/0x830 [ 1929.073411][ T3402] ? __dev_queue_xmit+0x14d9/0x3950 [ 1929.073429][ T3402] ? __netlink_deliver_tap+0x5ad/0x850 [ 1929.073453][ T3402] ? netlink_deliver_tap+0x19c/0x1b0 [ 1929.073476][ T3402] ? netlink_unicast+0x730/0x8e0 [ 1929.073497][ T3402] ? netlink_sendmsg+0x813/0xb40 [ 1929.073514][ T3402] ? __pfx_rtnl_newlink+0x10/0x10 [ 1929.073536][ T3402] ? do_syscall_64+0x174/0x580 [ 1929.073555][ T3402] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1929.073605][ T3402] ? kasan_quarantine_put+0xbb/0x1f0 [ 1929.073627][ T3402] ? lockdep_hardirqs_on+0x7a/0x110 [ 1929.073657][ T3402] ? nlmon_xmit+0xb0/0x100 [ 1929.073676][ T3402] ? kmem_cache_free+0x182/0x650 [ 1929.073709][ T3402] ? __lock_acquire+0x6b5/0x2cf0 [ 1929.073733][ T3402] ? __dev_queue_xmit+0x2b6/0x3950 [ 1929.073755][ T3402] ? __local_bh_enable_ip+0xd0/0x130 [ 1929.073775][ T3402] ? lockdep_hardirqs_on+0x7a/0x110 [ 1929.073792][ T3402] ? __dev_queue_xmit+0x2b6/0x3950 [ 1929.073810][ T3402] ? __local_bh_enable_ip+0xd0/0x130 [ 1929.073826][ T3402] ? __dev_queue_xmit+0x2b6/0x3950 [ 1929.073852][ T3402] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 1929.073889][ T3402] ? __pfx_rtnl_newlink+0x10/0x10 [ 1929.073912][ T3402] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 1929.073940][ T3402] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 1929.073963][ T3402] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1929.073984][ T3402] ? ref_tracker_free+0x693/0x840 [ 1929.074010][ T3402] ? __pfx_ref_tracker_free+0x10/0x10 [ 1929.074029][ T3402] ? __asan_memcpy+0x40/0x70 [ 1929.074050][ T3402] ? __skb_clone+0x63/0x7a0 [ 1929.074077][ T3402] netlink_rcv_skb+0x232/0x4b0 [ 1929.074104][ T3402] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1929.074130][ T3402] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1929.074168][ T3402] ? netlink_deliver_tap+0x2e/0x1b0 [ 1929.074193][ T3402] ? netlink_deliver_tap+0x2e/0x1b0 [ 1929.074224][ T3402] netlink_unicast+0x75c/0x8e0 [ 1929.074258][ T3402] netlink_sendmsg+0x813/0xb40 [ 1929.074285][ T3402] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1929.074307][ T3402] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1929.074335][ T3402] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1929.074362][ T3402] ____sys_sendmsg+0x972/0x9f0 [ 1929.074381][ T3402] ? __might_fault+0xaf/0x130 [ 1929.074409][ T3402] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1929.074437][ T3402] ? import_iovec+0x73/0xa0 [ 1929.074463][ T3402] ___sys_sendmsg+0x2a5/0x360 [ 1929.074481][ T3402] ? __lock_acquire+0x6b5/0x2cf0 [ 1929.074504][ T3402] ? __pfx____sys_sendmsg+0x10/0x10 [ 1929.074521][ T3402] ? __lock_acquire+0x6b5/0x2cf0 [ 1929.074544][ T3402] ? kstrtouint+0x6e/0xe0 [ 1929.074608][ T3402] __sys_sendmmsg+0x27c/0x4e0 [ 1929.074632][ T3402] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1929.074657][ T3402] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 1929.074700][ T3402] ? ksys_write+0x242/0x270 [ 1929.074728][ T3402] ? __pfx_ksys_write+0x10/0x10 [ 1929.074759][ T3402] __x64_sys_sendmmsg+0xa0/0xc0 [ 1929.074778][ T3402] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1929.074797][ T3402] do_syscall_64+0x174/0x580 [ 1929.074817][ T3402] ? clear_bhb_loop+0x40/0x90 [ 1929.074840][ T3402] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1929.074857][ T3402] RIP: 0033:0x7ff648d9ce59 [ 1929.074876][ T3402] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1929.074892][ T3402] RSP: 002b:00007ff649bd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1929.074912][ T3402] RAX: ffffffffffffffda RBX: 00007ff649015fa0 RCX: 00007ff648d9ce59 [ 1929.074925][ T3402] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003 [ 1929.074937][ T3402] RBP: 00007ff649bd5090 R08: 0000000000000000 R09: 0000000000000000 [ 1929.074948][ T3402] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1929.074959][ T3402] R13: 00007ff649016038 R14: 00007ff649015fa0 R15: 00007ff64913fa48 [ 1929.074988][ T3402] [ 1929.467822][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1929.547822][ T3404] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1929.562567][ T3409] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1929.577197][ T3409] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1929.723451][ T3413] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1929.732776][ T3413] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1929.744057][ T3413] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1929.753327][ T3413] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1929.879335][T22593] usb 3-1: qt2_attach - failed to power on unit: -110 [ 1929.886386][T22593] quatech2 3-1:0.51: probe with driver quatech2 failed with error -110 [ 1930.478045][ T3421] usb usb4: usbfs: process 3421 (syz.2.8721) did not claim interface 8 before use [ 1930.507572][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1930.575289][ T3423] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1930.613483][ T3423] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1931.334641][ T3437] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1931.421365][ T3439] __nla_validate_parse: 2 callbacks suppressed [ 1931.421387][ T3439] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8727'. [ 1931.462747][ T3439] netlink: 'syz.1.8727': attribute type 29 has an invalid length. [ 1931.489003][ T3439] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8727'. [ 1931.547642][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1931.592743][ T3441] FAULT_INJECTION: forcing a failure. [ 1931.592743][ T3441] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1931.613826][ T3441] CPU: 0 UID: 0 PID: 3441 Comm: syz.1.8727 Tainted: G L syzkaller #0 PREEMPT(full) [ 1931.613861][ T3441] Tainted: [L]=SOFTLOCKUP [ 1931.613870][ T3441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1931.613882][ T3441] Call Trace: [ 1931.613890][ T3441] [ 1931.613900][ T3441] dump_stack_lvl+0xe8/0x150 [ 1931.613931][ T3441] should_fail_ex+0x412/0x560 [ 1931.613959][ T3441] _copy_from_iter+0x1d3/0x1670 [ 1931.613986][ T3441] ? rcu_is_watching+0x15/0xb0 [ 1931.614018][ T3441] ? __pfx__copy_from_iter+0x10/0x10 [ 1931.614049][ T3441] ? netlink_sendmsg+0x650/0xb40 [ 1931.614067][ T3441] ? skb_put+0x11b/0x210 [ 1931.614107][ T3441] netlink_sendmsg+0x6c0/0xb40 [ 1931.614138][ T3441] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1931.614161][ T3441] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1931.614192][ T3441] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1931.614222][ T3441] ____sys_sendmsg+0x972/0x9f0 [ 1931.614243][ T3441] ? __might_fault+0xaf/0x130 [ 1931.614274][ T3441] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1931.614305][ T3441] ? import_iovec+0x73/0xa0 [ 1931.614333][ T3441] ___sys_sendmsg+0x2a5/0x360 [ 1931.614352][ T3441] ? __lock_acquire+0x6b5/0x2cf0 [ 1931.614377][ T3441] ? __pfx____sys_sendmsg+0x10/0x10 [ 1931.614395][ T3441] ? __lock_acquire+0x6b5/0x2cf0 [ 1931.614420][ T3441] ? kstrtouint+0x6e/0xe0 [ 1931.614492][ T3441] __sys_sendmmsg+0x27c/0x4e0 [ 1931.614518][ T3441] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1931.614536][ T3441] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 1931.614585][ T3441] ? ksys_write+0x242/0x270 [ 1931.614616][ T3441] ? __pfx_ksys_write+0x10/0x10 [ 1931.614650][ T3441] __x64_sys_sendmmsg+0xa0/0xc0 [ 1931.614670][ T3441] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1931.614691][ T3441] do_syscall_64+0x174/0x580 [ 1931.614711][ T3441] ? trace_irq_disable+0x3b/0x140 [ 1931.614739][ T3441] ? clear_bhb_loop+0x40/0x90 [ 1931.614763][ T3441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1931.614783][ T3441] RIP: 0033:0x7fc4db39ce59 [ 1931.614807][ T3441] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1931.614823][ T3441] RSP: 002b:00007fc4dc195028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1931.614845][ T3441] RAX: ffffffffffffffda RBX: 00007fc4db616090 RCX: 00007fc4db39ce59 [ 1931.614859][ T3441] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003 [ 1931.614872][ T3441] RBP: 00007fc4dc195090 R08: 0000000000000000 R09: 0000000000000000 [ 1931.614884][ T3441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1931.614895][ T3441] R13: 00007fc4db616128 R14: 00007fc4db616090 R15: 00007fc4db73fa48 [ 1931.614926][ T3441] [ 1931.972085][ T3444] kvm: kvm [3443]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xc95a [ 1932.045461][ T3444] kvm_intel: kvm [3443]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0x100b [ 1932.067185][ T3444] kvm: kvm [3443]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0xd956 [ 1932.087242][ T3444] kvm: kvm [3443]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x9c5 [ 1932.120700][ T3444] kvm: kvm [3443]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0xe1ea [ 1932.145949][ T3444] kvm: kvm [3443]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x4939 [ 1932.170218][ T3444] kvm: kvm [3443]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 1932.191302][ T3444] kvm: kvm [3443]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0xca56 [ 1932.213949][ T3450] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1932.229993][ T3444] kvm: kvm [3443]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x10c8 [ 1932.239377][ T3450] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1932.253694][ T3450] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1932.272248][ T3450] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1932.282915][ T3444] kvm: kvm [3443]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0xa262 [ 1932.292515][ T3444] kvm: kvm [3443]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 1932.347734][T22578] usb 2-1: qt2_attach - failed to power on unit: -110 [ 1932.354749][T22578] quatech2 2-1:0.51: probe with driver quatech2 failed with error -110 [ 1932.376257][ T3444] kvm_intel: kvm [3443]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0x19c2 [ 1932.587612][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1932.720259][ T3454] ip6gre1: entered promiscuous mode [ 1932.725571][ T3454] ip6gre1: entered allmulticast mode [ 1932.733870][ T1332] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1932.744516][ T1332] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1932.759978][T22593] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1933.027047][ T3466] set match dimension is over the limit! [ 1933.063112][ T3468] binder: BINDER_SET_CONTEXT_MGR already set [ 1933.069554][ T3468] binder: 3467:3468 ioctl 4018620d 200000000000 returned -16 [ 1933.123746][ T3473] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1933.132956][ T3473] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1933.207704][T22593] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1933.357068][ T3475] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1933.366612][ T3475] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1933.376809][ T3475] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1933.385935][ T3475] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1933.398388][ T3475] tipc: Enabling of bearer rejected, already enabled [ 1933.411678][ T3475] tipc: Enabling of bearer rejected, failed to enable media [ 1933.627573][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1933.737939][ T3479] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1933.749138][ T3479] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1933.763252][ T3480] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1933.773695][ T3480] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1933.796251][ T3480] netlink: 'syz.1.8739': attribute type 13 has an invalid length. [ 1933.805202][ T3480] netlink: 'syz.1.8739': attribute type 17 has an invalid length. [ 1933.814390][ T3480] netlink: 'syz.1.8739': attribute type 27 has an invalid length. [ 1933.894289][ T3480] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1934.395922][ T3487] kvm_intel: kvm [3486]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0x100b [ 1934.530328][ T3487] kvm_intel: kvm [3486]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0x19c2 [ 1934.667611][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1934.791589][ T3500] netlink: 'syz.6.8746': attribute type 1 has an invalid length. [ 1934.831978][ T3500] netlink: 'syz.6.8746': attribute type 2 has an invalid length. [ 1934.901884][ T3500] netlink: 'syz.6.8746': attribute type 1 has an invalid length. [ 1934.927669][ T3500] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8746'. [ 1934.955160][ T3503] [ 1934.957541][ T3503] ===================================================== [ 1934.964519][ T3503] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 1934.972081][ T3503] syzkaller #0 Tainted: G L [ 1934.978055][ T3503] ----------------------------------------------------- [ 1934.985048][ T3503] syz.1.8747/3503 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 1934.992721][ T3503] ffff8880a6c358a0 (&new->fa_lock){....}-{3:3}, at: kill_fasync+0x199/0x4d0 [ 1935.001508][ T3503] [ 1935.001508][ T3503] and this task is already holding: [ 1935.008872][ T3503] ffff888054c5c028 (&client->buffer_lock){....}-{3:3}, at: evdev_pass_values+0xb9/0xbd0 [ 1935.018686][ T3503] which would create a new lock dependency: [ 1935.024573][ T3503] (&client->buffer_lock){....}-{3:3} -> (&new->fa_lock){....}-{3:3} [ 1935.032751][ T3503] [ 1935.032751][ T3503] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 1935.042196][ T3503] (&dev->event_lock#2){..-.}-{3:3} [ 1935.042226][ T3503] [ 1935.042226][ T3503] ... which became SOFTIRQ-irq-safe at: [ 1935.055125][ T3503] lock_acquire+0x106/0x350 [ 1935.059723][ T3503] _raw_spin_lock_irqsave+0x40/0x60 [ 1935.065017][ T3503] input_event+0x71/0xc0 [ 1935.069486][ T3503] xpad360_process_packet+0x1fe/0xdc0 [ 1935.075059][ T3503] xpad_irq_in+0x14b7/0x2540 [ 1935.079755][ T3503] __usb_hcd_giveback_urb+0x376/0x540 [ 1935.085270][ T3503] dummy_timer+0xbc0/0x4650 [ 1935.089873][ T3503] __hrtimer_run_queues+0x3c0/0xa20 [ 1935.095163][ T3503] hrtimer_run_softirq+0x17a/0x240 [ 1935.100366][ T3503] handle_softirqs+0x22a/0x840 [ 1935.105223][ T3503] do_softirq+0x76/0xd0 [ 1935.109465][ T3503] __local_bh_enable_ip+0xf8/0x130 [ 1935.114663][ T3503] hash_ipportnet4_add+0x1c1d/0x2a60 [ 1935.120118][ T3503] hash_ipportnet4_uadt+0xf7d/0x13c0 [ 1935.125496][ T3503] call_ad+0x398/0xb60 [ 1935.129716][ T3503] ip_set_ad+0x824/0x9d0 [ 1935.134056][ T3503] nfnetlink_rcv_msg+0xc03/0x12c0 [ 1935.139172][ T3503] netlink_rcv_skb+0x232/0x4b0 [ 1935.144033][ T3503] nfnetlink_rcv+0x2c0/0x27b0 [ 1935.148801][ T3503] netlink_unicast+0x75c/0x8e0 [ 1935.153657][ T3503] netlink_sendmsg+0x813/0xb40 [ 1935.158505][ T3503] ____sys_sendmsg+0x972/0x9f0 [ 1935.163380][ T3503] ___sys_sendmsg+0x2a5/0x360 [ 1935.168140][ T3503] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1935.173164][ T3503] do_syscall_64+0x174/0x580 [ 1935.177840][ T3503] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1935.183819][ T3503] [ 1935.183819][ T3503] to a SOFTIRQ-irq-unsafe lock: [ 1935.191494][ T3503] (tasklist_lock){.+.+}-{3:3} [ 1935.191521][ T3503] [ 1935.191521][ T3503] ... which became SOFTIRQ-irq-unsafe at: [ 1935.204148][ T3503] ... [ 1935.204156][ T3503] lock_acquire+0x106/0x350 [ 1935.211325][ T3503] _raw_read_lock+0x36/0x50 [ 1935.215971][ T3503] __do_wait+0xde/0x740 [ 1935.220217][ T3503] do_wait+0x1e7/0x510 [ 1935.224379][ T3503] kernel_wait+0xd6/0x1c0 [ 1935.228797][ T3503] call_usermodehelper_exec_work+0xbe/0x230 [ 1935.234788][ T3503] process_scheduled_works+0xb5d/0x1860 [ 1935.240419][ T3503] worker_thread+0xa53/0xfc0 [ 1935.245107][ T3503] kthread+0x389/0x470 [ 1935.249264][ T3503] ret_from_fork+0x514/0xb70 [ 1935.253943][ T3503] ret_from_fork_asm+0x1a/0x30 [ 1935.258827][ T3503] [ 1935.258827][ T3503] other info that might help us debug this: [ 1935.258827][ T3503] [ 1935.269079][ T3503] Chain exists of: [ 1935.269079][ T3503] &dev->event_lock#2 --> &client->buffer_lock --> tasklist_lock [ 1935.269079][ T3503] [ 1935.282670][ T3503] Possible interrupt unsafe locking scenario: [ 1935.282670][ T3503] [ 1935.291032][ T3503] CPU0 CPU1 [ 1935.296394][ T3503] ---- ---- [ 1935.301775][ T3503] lock(tasklist_lock); [ 1935.306024][ T3503] local_irq_disable(); [ 1935.312785][ T3503] lock(&dev->event_lock#2); [ 1935.320072][ T3503] lock(&client->buffer_lock); [ 1935.327457][ T3503] [ 1935.331083][ T3503] lock(&dev->event_lock#2); [ 1935.336015][ T3503] [ 1935.336015][ T3503] *** DEADLOCK *** [ 1935.336015][ T3503] [ 1935.344176][ T3503] 7 locks held by syz.1.8747/3503: [ 1935.349296][ T3503] #0: ffff88802c3ca110 (&evdev->mutex){+.+.}-{4:4}, at: evdev_write+0x1ae/0x4c0 [ 1935.358483][ T3503] #1: ffff88801fbb8230 (&dev->event_lock#2){..-.}-{3:3}, at: input_inject_event+0xa4/0x330 [ 1935.368592][ T3503] #2: ffffffff8e95cd20 (rcu_read_lock){....}-{1:3}, at: input_inject_event+0xb5/0x330 [ 1935.378264][ T3503] #3: ffffffff8e95cd20 (rcu_read_lock){....}-{1:3}, at: input_pass_values+0x8d/0x890 [ 1935.387841][ T3503] #4: ffffffff8e95cd20 (rcu_read_lock){....}-{1:3}, at: evdev_events+0x79/0x340 [ 1935.397011][ T3503] #5: ffff888054c5c028 (&client->buffer_lock){....}-{3:3}, at: evdev_pass_values+0xb9/0xbd0 [ 1935.407225][ T3503] #6: ffffffff8e95cd20 (rcu_read_lock){....}-{1:3}, at: kill_fasync+0x53/0x4d0 [ 1935.416299][ T3503] [ 1935.416299][ T3503] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 1935.426700][ T3503] -> (&dev->event_lock#2){..-.}-{3:3} { [ 1935.432355][ T3503] IN-SOFTIRQ-W at: [ 1935.436515][ T3503] lock_acquire+0x106/0x350 [ 1935.442844][ T3503] _raw_spin_lock_irqsave+0x40/0x60 [ 1935.449875][ T3503] input_event+0x71/0xc0 [ 1935.455948][ T3503] xpad360_process_packet+0x1fe/0xdc0 [ 1935.463165][ T3503] xpad_irq_in+0x14b7/0x2540 [ 1935.469606][ T3503] __usb_hcd_giveback_urb+0x376/0x540 [ 1935.476810][ T3503] dummy_timer+0xbc0/0x4650 [ 1935.483144][ T3503] __hrtimer_run_queues+0x3c0/0xa20 [ 1935.490287][ T3503] hrtimer_run_softirq+0x17a/0x240 [ 1935.497228][ T3503] handle_softirqs+0x22a/0x840 [ 1935.503815][ T3503] do_softirq+0x76/0xd0 [ 1935.509794][ T3503] __local_bh_enable_ip+0xf8/0x130 [ 1935.516728][ T3503] hash_ipportnet4_add+0x1c1d/0x2a60 [ 1935.523840][ T3503] hash_ipportnet4_uadt+0xf7d/0x13c0 [ 1935.530952][ T3503] call_ad+0x398/0xb60 [ 1935.536849][ T3503] ip_set_ad+0x824/0x9d0 [ 1935.542924][ T3503] nfnetlink_rcv_msg+0xc03/0x12c0 [ 1935.549782][ T3503] netlink_rcv_skb+0x232/0x4b0 [ 1935.556378][ T3503] nfnetlink_rcv+0x2c0/0x27b0 [ 1935.562881][ T3503] netlink_unicast+0x75c/0x8e0 [ 1935.569474][ T3503] netlink_sendmsg+0x813/0xb40 [ 1935.576069][ T3503] ____sys_sendmsg+0x972/0x9f0 [ 1935.582658][ T3503] ___sys_sendmsg+0x2a5/0x360 [ 1935.589166][ T3503] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1935.595925][ T3503] do_syscall_64+0x174/0x580 [ 1935.602347][ T3503] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1935.610062][ T3503] INITIAL USE at: [ 1935.614046][ T3503] lock_acquire+0x106/0x350 [ 1935.620288][ T3503] _raw_spin_lock_irqsave+0x40/0x60 [ 1935.627229][ T3503] input_inject_event+0xa4/0x330 [ 1935.633907][ T3503] kbd_led_trigger_activate+0xbc/0x100 [ 1935.641105][ T3503] led_trigger_set+0x535/0x960 [ 1935.647677][ T3503] led_trigger_set_default+0x260/0x2a0 [ 1935.654876][ T3503] led_classdev_register_ext+0x787/0x9c0 [ 1935.662249][ T3503] input_leds_connect+0x517/0x790 [ 1935.669016][ T3503] input_register_device+0xce0/0x1140 [ 1935.676133][ T3503] atkbd_connect+0x71e/0xa10 [ 1935.682508][ T3503] serio_driver_probe+0x82/0xb0 [ 1935.689100][ T3503] really_probe+0x267/0xaf0 [ 1935.695383][ T3503] __driver_probe_device+0x1ef/0x380 [ 1935.702410][ T3503] driver_probe_device+0x4f/0x240 [ 1935.709174][ T3503] __driver_attach+0x34c/0x640 [ 1935.715674][ T3503] bus_for_each_dev+0x23b/0x2c0 [ 1935.722353][ T3503] serio_handle_event+0x1af/0xf80 [ 1935.729115][ T3503] process_scheduled_works+0xb5d/0x1860 [ 1935.736399][ T3503] worker_thread+0xa53/0xfc0 [ 1935.742729][ T3503] kthread+0x389/0x470 [ 1935.748545][ T3503] ret_from_fork+0x514/0xb70 [ 1935.754875][ T3503] ret_from_fork_asm+0x1a/0x30 [ 1935.761377][ T3503] } [ 1935.763963][ T3503] ... key at: [] input_allocate_device.__key.7+0x0/0x20 [ 1935.773197][ T3503] -> (&client->buffer_lock){....}-{3:3} { [ 1935.778938][ T3503] INITIAL USE at: [ 1935.782830][ T3503] lock_acquire+0x106/0x350 [ 1935.788897][ T3503] _raw_spin_lock+0x2e/0x40 [ 1935.794971][ T3503] evdev_pass_values+0xb9/0xbd0 [ 1935.801389][ T3503] evdev_events+0x1e6/0x340 [ 1935.807455][ T3503] input_pass_values+0x288/0x890 [ 1935.813965][ T3503] input_event_dispose+0x330/0x6b0 [ 1935.820641][ T3503] input_inject_event+0x1dc/0x330 [ 1935.827234][ T3503] evdev_write+0x325/0x4c0 [ 1935.833212][ T3503] vfs_write+0x29a/0xb90 [ 1935.839028][ T3503] ksys_write+0x150/0x270 [ 1935.844925][ T3503] do_syscall_64+0x174/0x580 [ 1935.851080][ T3503] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1935.858545][ T3503] } [ 1935.861042][ T3503] ... key at: [] evdev_open.__key.27+0x0/0x20 [ 1935.869201][ T3503] ... acquired at: [ 1935.873005][ T3503] _raw_spin_lock+0x2e/0x40 [ 1935.877687][ T3503] evdev_pass_values+0xb9/0xbd0 [ 1935.882797][ T3503] evdev_events+0x1e6/0x340 [ 1935.887471][ T3503] input_pass_values+0x288/0x890 [ 1935.892584][ T3503] input_event_dispose+0x330/0x6b0 [ 1935.897870][ T3503] input_inject_event+0x1dc/0x330 [ 1935.903090][ T3503] evdev_write+0x325/0x4c0 [ 1935.907678][ T3503] vfs_write+0x29a/0xb90 [ 1935.912103][ T3503] ksys_write+0x150/0x270 [ 1935.916625][ T3503] do_syscall_64+0x174/0x580 [ 1935.921388][ T3503] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1935.927456][ T3503] [ 1935.929777][ T3503] [ 1935.929777][ T3503] the dependencies between the lock to be acquired [ 1935.929786][ T3503] and SOFTIRQ-irq-unsafe lock: [ 1935.943296][ T3503] -> (tasklist_lock){.+.+}-{3:3} { [ 1935.948603][ T3503] HARDIRQ-ON-R at: [ 1935.952764][ T3503] lock_acquire+0x106/0x350 [ 1935.959270][ T3503] _raw_read_lock+0x36/0x50 [ 1935.965776][ T3503] __do_wait+0xde/0x740 [ 1935.971931][ T3503] do_wait+0x1e7/0x510 [ 1935.978005][ T3503] kernel_wait+0xd6/0x1c0 [ 1935.984337][ T3503] call_usermodehelper_exec_work+0xbe/0x230 [ 1935.992234][ T3503] process_scheduled_works+0xb5d/0x1860 [ 1935.999781][ T3503] worker_thread+0xa53/0xfc0 [ 1936.006371][ T3503] kthread+0x389/0x470 [ 1936.012437][ T3503] ret_from_fork+0x514/0xb70 [ 1936.019026][ T3503] ret_from_fork_asm+0x1a/0x30 [ 1936.025812][ T3503] SOFTIRQ-ON-R at: [ 1936.029988][ T3503] lock_acquire+0x106/0x350 [ 1936.036491][ T3503] _raw_read_lock+0x36/0x50 [ 1936.043019][ T3503] __do_wait+0xde/0x740 [ 1936.049177][ T3503] do_wait+0x1e7/0x510 [ 1936.055245][ T3503] kernel_wait+0xd6/0x1c0 [ 1936.061574][ T3503] call_usermodehelper_exec_work+0xbe/0x230 [ 1936.069567][ T3503] process_scheduled_works+0xb5d/0x1860 [ 1936.077141][ T3503] worker_thread+0xa53/0xfc0 [ 1936.083749][ T3503] kthread+0x389/0x470 [ 1936.089819][ T3503] ret_from_fork+0x514/0xb70 [ 1936.096410][ T3503] ret_from_fork_asm+0x1a/0x30 [ 1936.103193][ T3503] INITIAL USE at: [ 1936.107266][ T3503] lock_acquire+0x106/0x350 [ 1936.113684][ T3503] _raw_write_lock_irq+0x3d/0x50 [ 1936.120533][ T3503] copy_process+0x2b4c/0x4440 [ 1936.127120][ T3503] kernel_clone+0x2d7/0x940 [ 1936.133554][ T3503] user_mode_thread+0x110/0x180 [ 1936.140317][ T3503] rest_init+0x23/0x300 [ 1936.146389][ T3503] start_kernel+0x38a/0x3e0 [ 1936.152899][ T3503] x86_64_start_reservations+0x24/0x30 [ 1936.160296][ T3503] x86_64_start_kernel+0x143/0x1c0 [ 1936.167322][ T3503] common_startup_64+0x13e/0x147 [ 1936.174184][ T3503] INITIAL READ USE at: [ 1936.178710][ T3503] lock_acquire+0x106/0x350 [ 1936.185576][ T3503] _raw_read_lock+0x36/0x50 [ 1936.192443][ T3503] __do_wait+0xde/0x740 [ 1936.198975][ T3503] do_wait+0x1e7/0x510 [ 1936.205439][ T3503] kernel_wait+0xd6/0x1c0 [ 1936.212124][ T3503] call_usermodehelper_exec_work+0xbe/0x230 [ 1936.220371][ T3503] process_scheduled_works+0xb5d/0x1860 [ 1936.228261][ T3503] worker_thread+0xa53/0xfc0 [ 1936.235196][ T3503] kthread+0x389/0x470 [ 1936.241613][ T3503] ret_from_fork+0x514/0xb70 [ 1936.248548][ T3503] ret_from_fork_asm+0x1a/0x30 [ 1936.255664][ T3503] } [ 1936.258335][ T3503] ... key at: [] tasklist_lock+0x18/0x40 [ 1936.266336][ T3503] ... acquired at: [ 1936.270309][ T3503] _raw_read_lock+0x36/0x50 [ 1936.274998][ T3503] send_sigio+0x101/0x370 [ 1936.279506][ T3503] dnotify_handle_event+0x169/0x440 [ 1936.284900][ T3503] fsnotify+0x1831/0x1ae0 [ 1936.289498][ T3503] path_openat+0x15c2/0x3860 [ 1936.294283][ T3503] do_file_open+0x23e/0x4a0 [ 1936.298993][ T3503] do_sys_openat2+0x113/0x200 [ 1936.303852][ T3503] __x64_sys_openat+0x138/0x170 [ 1936.308881][ T3503] do_syscall_64+0x174/0x580 [ 1936.313648][ T3503] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1936.319713][ T3503] [ 1936.322046][ T3503] -> (&f_owner->lock){....}-{3:3} { [ 1936.327354][ T3503] INITIAL USE at: [ 1936.331344][ T3503] lock_acquire+0x106/0x350 [ 1936.337587][ T3503] _raw_write_lock_irq+0x3d/0x50 [ 1936.344435][ T3503] __f_setown+0x67/0x370 [ 1936.350422][ T3503] generic_setlease+0xacf/0xfd0 [ 1936.357024][ T3503] do_fcntl_add_lease+0x35e/0x470 [ 1936.363789][ T3503] fcntl_setlease+0x123/0x180 [ 1936.370207][ T3503] do_fcntl+0x8b3/0x1a20 [ 1936.376193][ T3503] __se_sys_fcntl+0xc8/0x150 [ 1936.382522][ T3503] do_syscall_64+0x174/0x580 [ 1936.388850][ T3503] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1936.396504][ T3503] INITIAL READ USE at: [ 1936.400936][ T3503] lock_acquire+0x106/0x350 [ 1936.407611][ T3503] _raw_read_lock_irqsave+0x48/0x60 [ 1936.414987][ T3503] send_sigio+0x38/0x370 [ 1936.421405][ T3503] kill_fasync+0x24d/0x4d0 [ 1936.428001][ T3503] lease_break_callback+0x26/0x30 [ 1936.435222][ T3503] __break_lease+0x81f/0x1ea0 [ 1936.442071][ T3503] vfs_truncate+0x449/0x540 [ 1936.448752][ T3503] ksys_truncate+0xf3/0x1c0 [ 1936.455432][ T3503] __x64_sys_truncate+0x5b/0x70 [ 1936.462466][ T3503] do_syscall_64+0x174/0x580 [ 1936.469226][ T3503] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1936.477288][ T3503] } [ 1936.479870][ T3503] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 1936.488911][ T3503] ... acquired at: [ 1936.492823][ T3503] _raw_read_lock_irqsave+0x48/0x60 [ 1936.498210][ T3503] send_sigio+0x38/0x370 [ 1936.502636][ T3503] kill_fasync+0x24d/0x4d0 [ 1936.507266][ T3503] lease_break_callback+0x26/0x30 [ 1936.512473][ T3503] __break_lease+0x81f/0x1ea0 [ 1936.517335][ T3503] vfs_truncate+0x449/0x540 [ 1936.522025][ T3503] ksys_truncate+0xf3/0x1c0 [ 1936.526706][ T3503] __x64_sys_truncate+0x5b/0x70 [ 1936.531738][ T3503] do_syscall_64+0x174/0x580 [ 1936.536501][ T3503] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1936.542579][ T3503] [ 1936.544908][ T3503] -> (&new->fa_lock){....}-{3:3} { [ 1936.550046][ T3503] INITIAL USE at: [ 1936.553947][ T3503] lock_acquire+0x106/0x350 [ 1936.560021][ T3503] _raw_write_lock_irq+0x3d/0x50 [ 1936.566607][ T3503] fasync_remove_entry+0xf1/0x1c0 [ 1936.573199][ T3503] lease_modify+0x4f7/0x6c0 [ 1936.579269][ T3503] locks_remove_file+0x5f0/0xf70 [ 1936.585774][ T3503] __fput+0x3ae/0xa60 [ 1936.591343][ T3503] task_work_run+0x1d9/0x270 [ 1936.597499][ T3503] exit_to_user_mode_loop+0x193/0x680 [ 1936.604435][ T3503] do_syscall_64+0x353/0x580 [ 1936.610602][ T3503] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1936.618062][ T3503] INITIAL READ USE at: [ 1936.622388][ T3503] lock_acquire+0x106/0x350 [ 1936.628887][ T3503] _raw_read_lock_irqsave+0x48/0x60 [ 1936.636090][ T3503] kill_fasync+0x199/0x4d0 [ 1936.642601][ T3503] lease_break_callback+0x26/0x30 [ 1936.649743][ T3503] __break_lease+0x81f/0x1ea0 [ 1936.656510][ T3503] vfs_truncate+0x449/0x540 [ 1936.663019][ T3503] ksys_truncate+0xf3/0x1c0 [ 1936.669525][ T3503] __x64_sys_truncate+0x5b/0x70 [ 1936.676379][ T3503] do_syscall_64+0x174/0x580 [ 1936.682970][ T3503] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1936.690861][ T3503] } [ 1936.693370][ T3503] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 1936.702060][ T3503] ... acquired at: [ 1936.705871][ T3503] _raw_read_lock_irqsave+0x48/0x60 [ 1936.711421][ T3503] kill_fasync+0x199/0x4d0 [ 1936.716019][ T3503] evdev_pass_values+0x627/0xbd0 [ 1936.721220][ T3503] evdev_events+0x1e6/0x340 [ 1936.725897][ T3503] input_pass_values+0x288/0x890 [ 1936.731008][ T3503] input_event_dispose+0x330/0x6b0 [ 1936.736299][ T3503] input_inject_event+0x1dc/0x330 [ 1936.741510][ T3503] evdev_write+0x325/0x4c0 [ 1936.746099][ T3503] vfs_write+0x29a/0xb90 [ 1936.750521][ T3503] ksys_write+0x150/0x270 [ 1936.755033][ T3503] do_syscall_64+0x174/0x580 [ 1936.759812][ T3503] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1936.765880][ T3503] [ 1936.768213][ T3503] [ 1936.768213][ T3503] stack backtrace: [ 1936.774115][ T3503] CPU: 0 UID: 0 PID: 3503 Comm: syz.1.8747 Tainted: G L syzkaller #0 PREEMPT(full) [ 1936.774137][ T3503] Tainted: [L]=SOFTLOCKUP [ 1936.774142][ T3503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1936.774152][ T3503] Call Trace: [ 1936.774159][ T3503] [ 1936.774166][ T3503] dump_stack_lvl+0xe8/0x150 [ 1936.774184][ T3503] __lock_acquire+0x2a94/0x2cf0 [ 1936.774208][ T3503] ? kill_fasync+0x199/0x4d0 [ 1936.774228][ T3503] lock_acquire+0x106/0x350 [ 1936.774242][ T3503] ? kill_fasync+0x199/0x4d0 [ 1936.774263][ T3503] ? do_raw_spin_lock+0x12b/0x2f0 [ 1936.774285][ T3503] _raw_read_lock_irqsave+0x48/0x60 [ 1936.774307][ T3503] ? kill_fasync+0x199/0x4d0 [ 1936.774326][ T3503] kill_fasync+0x199/0x4d0 [ 1936.774346][ T3503] ? kill_fasync+0x53/0x4d0 [ 1936.774366][ T3503] evdev_pass_values+0x627/0xbd0 [ 1936.774384][ T3503] ? evdev_pass_values+0x671/0xbd0 [ 1936.774401][ T3503] evdev_events+0x1e6/0x340 [ 1936.774415][ T3503] ? evdev_events+0x79/0x340 [ 1936.774429][ T3503] ? input_pass_values+0x8d/0x890 [ 1936.774443][ T3503] input_pass_values+0x288/0x890 [ 1936.774458][ T3503] ? input_handle_event+0x70c/0xf30 [ 1936.774479][ T3503] input_event_dispose+0x330/0x6b0 [ 1936.774499][ T3503] input_inject_event+0x1dc/0x330 [ 1936.774518][ T3503] ? input_inject_event+0xb5/0x330 [ 1936.774537][ T3503] evdev_write+0x325/0x4c0 [ 1936.774551][ T3503] ? __lock_acquire+0x6b5/0x2cf0 [ 1936.774567][ T3503] ? __pfx_evdev_write+0x10/0x10 [ 1936.774582][ T3503] ? bpf_lsm_file_permission+0x9/0x20 [ 1936.774602][ T3503] ? security_file_permission+0x75/0x260 [ 1936.774625][ T3503] ? rw_verify_area+0x255/0x4d0 [ 1936.774645][ T3503] ? __pfx_evdev_write+0x10/0x10 [ 1936.774661][ T3503] vfs_write+0x29a/0xb90 [ 1936.774685][ T3503] ? __pfx_vfs_write+0x10/0x10 [ 1936.774705][ T3503] ? __fget_files+0x2a/0x420 [ 1936.774724][ T3503] ? __fget_files+0x2a/0x420 [ 1936.774742][ T3503] ? __fget_files+0x3a0/0x420 [ 1936.774759][ T3503] ? __fget_files+0x2a/0x420 [ 1936.774780][ T3503] ksys_write+0x150/0x270 [ 1936.774801][ T3503] ? __pfx_ksys_write+0x10/0x10 [ 1936.774824][ T3503] ? __secure_computing+0xe1/0x2a0 [ 1936.774841][ T3503] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1936.774857][ T3503] do_syscall_64+0x174/0x580 [ 1936.774873][ T3503] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1936.774888][ T3503] ? clear_bhb_loop+0x40/0x90 [ 1936.774906][ T3503] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1936.774921][ T3503] RIP: 0033:0x7fc4db39ce59 [ 1936.774937][ T3503] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1936.774951][ T3503] RSP: 002b:00007fc4dc1b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1936.774976][ T3503] RAX: ffffffffffffffda RBX: 00007fc4db615fa0 RCX: 00007fc4db39ce59 [ 1936.774988][ T3503] RDX: 0000000000000037 RSI: 0000200000000040 RDI: 0000000000000003 [ 1936.774999][ T3503] RBP: 00007fc4db432d6f R08: 0000000000000000 R09: 0000000000000000 [ 1936.775010][ T3503] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1936.775020][ T3503] R13: 00007fc4db616038 R14: 00007fc4db615fa0 R15: 00007fc4db73fa48 [ 1936.775036][ T3503] [ 1937.083908][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1938.117684][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1939.157748][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1940.187686][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1941.227882][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1942.267697][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1943.307839][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1944.347947][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available