last executing test programs: 37m20.903734946s ago: executing program 0 (id=1448): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$DVB_DVR_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000000)={0x81, 0x0, r0}) r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) syz_usb_connect$lan78xx(0x6, 0x3f, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) r3 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x47f, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}, {{}, [{{0x9, 0x5, 0x2, 0x3, 0x8}}]}}}]}}]}}, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x18, {[@global=@item_012={0x1, 0x1, 0x0, "01"}, @global=@item_012={0x1, 0x1, 0x1, '\x00'}, @global=@item_012={0x1, 0x1, 0x2, "ff"}, @local=@item_012={0x1, 0x2, 0x0, "04"}, @main=@item_012={0x1, 0x0, 0xa, "01"}, @local=@item_012={0x1, 0x2, 0x0, "01"}, @main=@item_012={0x1, 0x0, 0xa, '\x00'}, @global=@item_012={0x1, 0x1, 0x7, '\b'}, @global=@item_012={0x1, 0x1, 0x9, "01"}, @local=@item_012={0x1, 0x2, 0x0, '0'}, @main=@item_012={0x1, 0x0, 0x9, "02"}, @main=@item_012={0x0, 0x0, 0xc}, @main=@item_012={0x0, 0x0, 0xc}]}}, 0x0}, 0x0) syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000100)={{0x12, 0x1, 0x340, 0x0, 0x0, 0x0, 0xff, 0x3f0, 0x4, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xe5, 0xb0, 0x2, "", [{{0x9, 0x4, 0x0, 0x3, 0x2, 0x7, 0x1, 0x2, 0xf7, "", {{{0x9, 0x5, 0x1, 0x2, 0x58, 0x9, 0x3, 0x3}}}}}]}}]}}, &(0x7f00000003c0)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x250, 0xf9, 0x0, 0xa, 0x40, 0x9}, 0xf, &(0x7f00000002c0)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x9, 0x3}]}, 0x2, [{0x0, 0x0}, {0x2, &(0x7f0000000340)=@string={0x2}}]}) syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2) syz_usb_connect$hid(0x3, 0x36, 0x0, 0x0) r4 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCSREPORT(r4, 0x400c4808, &(0x7f0000000400)={0x2, 0x100}) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f0000000440)=0x4) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0) r6 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r6, 0xc0684113, &(0x7f0000000080)={0x1, 0xfffff802, 0x3, 0xa, 0x5, 0xb20, 0x520, 0xe, 0x9, 0x3c, 0xffffffff, 0x2}) r7 = mmap$IORING_MAP_OFF_PARAM_REGION(0x0, 0x51b, 0x0, 0x30, r1, 0x20000000) r8 = socket(0x10, 0x3, 0x0) sendto$inet6(r8, &(0x7f0000000240)="7800000018001f07b9409b0dffff000d0216be0402030605060140034300080012000000fac8388827a685a168d0bf46d323456511000000caaf6c26c274214549935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160000000000403622a590ef62f6b0f8eca0faed00000000", 0x78, 0x4000000, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_URING_CMD=@ublk_cmd_sqes=@ublk_io_fetch_sqe={0x2e, 0x20, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x2}, 0x0, 0x0, '\x00', {0x4, 0x5c2, 0x0, 0x0}}) syz_io_uring_submit(r7, 0x0, 0x0, &(0x7f0000000540)=@IORING_OP_RENAMEAT={0x23, 0x1, 0x0, r1, &(0x7f0000000180)='./file0\x00', &(0x7f00000004c0)='./file0\x00', r1, 0x4}) r9 = syz_clone(0x1100000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r9) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000340)={[0x3, 0x6af, 0x7, 0x8, 0x5, 0x200, 0x4, 0x8, 0x8, 0x0, 0xff3, 0x8, 0x8, 0x9, 0x7ff], 0x41000}) ptrace$setregset(0x4205, r9, 0x1, &(0x7f00000001c0)={&(0x7f0000000280)="c94522e546f93f6dedf11f1509683b4ff6ed90bb6d8ca47dc829c0daa3feec0f1f88d7547f05841e3705582bc58e46799f2f99244be64d25e9fed38fc2d23411a1d3630f9c4563f7415abe92ba0f2f575c1fe2f987f4224ff7dc937253dc5598275597e7207bea32c4c7cf884c2fcd814228e4d1c211d167b8713f83fbff0f000000000000d85468f02e8b5ad561098840402f168e1012bdfd6977a7fe9cd5b8a3ed012d8e74a3479f", 0x34}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000200)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) ioctl$UBLK_U_CMD_ADD_DEV(r1, 0xc0207504, &(0x7f0000000100)={0xffffffff, 0xffff, 0x40, &(0x7f0000000080)=@any_dev={0x1, 0x75d, 0x0, 0x0, 0x1000, 0x1, r9, 0x0, 0x18}}) 37m19.711295019s ago: executing program 0 (id=1455): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt/del2\x00', 0x42, 0x1ff) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_sctp(0x2, 0x1, 0x84) dup(r0) syz_io_uring_setup(0x80000d3a, &(0x7f0000000080)={0x0, 0x2, 0x3010, 0x3, 0x4003}, 0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f00000002c0)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r2, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x50000000}, 0x1c, &(0x7f0000000680)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x81) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f00000009c0)=ANY=[@ANYBLOB="12e03c681337", @ANYRES32=r1], 0x1000f) 37m18.763796896s ago: executing program 0 (id=1459): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040), 0xc, 0x0}, 0x0) r0 = socket(0x1, 0x80802, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bond_slave_0\x00', 0x0}) r2 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r2, 0xc1205531, &(0x7f0000000340)={0x0, 0x80006, 0xfffffff7, 0x2, '\x00', '\x00', '\x00', 0x7, 0x0, 0x2000100, 0x2, "a900"}) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000), 0x8) r4 = socket$packet(0x11, 0x2, 0x300) bind$packet(r4, &(0x7f00000000c0)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000), 0x8) 37m18.606673916s ago: executing program 0 (id=1460): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f000009de40), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000000c0)={0x1, 0x0, 0xfffffffd, 0x3}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a310000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a310000000058000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d61637674617000000008000140000000050a000700726f757465"], 0xf4}}, 0x10) r2 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES8], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='coredump_filter\x00') syz_usb_control_io$hid(r2, &(0x7f00000003c0)={0x14, &(0x7f00000001c0)={0x40, 0x8, 0x69, {0x69, 0x31, "a008bb8e97b95690dc09bf41941761cf367f078c30d2c264b6d0333c493e932ad908a4b5a11efc2ae49f58f2e0f17ca03d783b3923b9ab03b102968f013fdf58d8e56d490fbaaaf4cb7d2e63a3d1eb0e4a2e91a34c6a16c83fda988f8ed57fb481120b4c6b8f0d"}}, &(0x7f0000000240)={0x0, 0x3, 0x94, @string={0x94, 0x3, "0be263cc2f21009007cb67d46ebb6bf21fd6f0f77b4432ee6473fb25400f49e6c9803b52907b67cee8536dfffa0740f6086f9a7dcf49b3dd4774fbf30ff8b663ce26b6413b7649b17affd99ac83169749f405aa801790f249bfa22998f34587a3ddff8692156909c62b4fa441224800b01049fb70a3cfef0119636155a4680fe0ec66a223fed7fdbd1bbb03eccb51b264bca"}}, &(0x7f0000000340)={0x0, 0x22, 0xf, {[@global=@item_4={0x3, 0x1, 0x2, "f35fc2e2"}, @global=@item_4={0x3, 0x1, 0x6, "1c678093"}, @local=@item_4={0x3, 0x2, 0x4, "cb52ee39"}]}}, &(0x7f0000000380)={0x0, 0x21, 0x9, {0x9, 0x21, 0x0, 0x48, 0x1, {0x22, 0x9fb}}}}, &(0x7f0000000700)={0x18, &(0x7f00000008c0)=ANY=[@ANYBLOB="400896000000c4651f3e2268fe874d6285b786a77213dea226d02cc7d26105b950a20a25071a688735954a18d2bc28608a79a12aa87ae2a5c6bffd79d6cea6c806deae75df4b6d7e78e2a67a6f7932acd169d655de210e46283af58d0dbe193ca3cc0d96e477b256fe9e2c005c79bd14ec9cd4e8686624dcac3b370ae53523c619ee3dc50aa4ea3c30b2bc72fcd7bdb6965ef4cc8e58320a00"/163], &(0x7f0000000600)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000640)={0x0, 0x8, 0x1, 0xd}, &(0x7f0000000680)={0x20, 0x1, 0x8, "c42a009867e3d34a"}, &(0x7f00000006c0)={0x20, 0x3, 0x1, 0x7}}) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x2000000000000183, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000d57bdfa200000000040000008510"], &(0x7f0000000300)='GPL\x00', 0xe, 0xff8, &(0x7f0000000cc0)=""/4088, 0x41085, 0x5b}, 0x94) listns(&(0x7f0000000080)={0x20, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, &(0x7f0000000040)=[0x0], 0x1, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000004600)='map_files\x00') fchdir(r5) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmmsg$unix(r4, &(0x7f0000002d80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x408d4}}, {{&(0x7f0000000080)=@abs={0x1, 0x30, 0x30}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4004}}], 0x2, 0x40000004) r6 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ef17a3600000090000010902240003000921fdff08012223000905810340000c08fb00"/54], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) pwritev(r3, &(0x7f0000000500)=[{&(0x7f0000000000)='0', 0x1}, {0x0, 0xa00}], 0x2, 0x0, 0x0) r7 = socket(0x10, 0x3, 0xc) write(r7, &(0x7f0000000040)="effd00001000ff00fd4344c007110000f3050a00dbfd010000000001ffdf00", 0xfdef) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r5, &(0x7f0000000880)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x64, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x27}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x19}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x68}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x78}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x20008001) r9 = syz_open_dev$hiddev(&(0x7f0000000000), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r9, 0xd01c4813, &(0x7f0000000100)={0xffffffff, 0xffffffff, 0x0, 0x1, 0x0, 0x44}) 37m17.726922356s ago: executing program 0 (id=1469): ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)=0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$tty1(0xc, 0x4, 0x4) syz_usb_connect(0x2, 0x2d, &(0x7f00000018c0)={{0x12, 0x1, 0x250, 0xc7, 0x77, 0xdc, 0x8, 0x5ac, 0x8501, 0x13a2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0xff, 0x9, 0x50, 0xb, "", [{{0x9, 0x4, 0xd1, 0xa, 0x1, 0xe, 0x1, 0x0, 0xc2, [], [{{0x9, 0x5, 0x2, 0x0, 0x3ff, 0x3, 0xfd, 0x5}}]}}]}}]}}, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) syz_open_dev$audion(&(0x7f00000002c0), 0x3, 0x1) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_mnt\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_mnt\x00', 0x0, 0x0) r3 = fsopen(&(0x7f0000000000)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) move_mount(r4, 0x0, r2, 0x0, 0x44) openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_mnt/bus/usb/drivers/sisusb/unbind\x00', 0x1, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) ptrace$getregset(0x4204, r0, 0x6, &(0x7f00000001c0)={&(0x7f0000000040)=""/217, 0xd9}) r5 = socket(0x18, 0x8, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x870b525, 0x8000, {0x0, 0x0, 0x0, r6, {0xfff3, 0xc}, {}, {0xa, 0x8}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x8, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2204402c}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, 0x0, 0x0) 37m16.803111448s ago: executing program 0 (id=1474): r0 = syz_usb_connect(0x2, 0x24, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012"], 0x3c}}, 0x0) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) r4 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/ptype\x00') preadv(r4, &(0x7f0000000680)=[{&(0x7f0000000000)=""/57, 0x39}], 0x1, 0x5, 0x880) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, &(0x7f0000001040)={0xc, 0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2831}}}, &(0x7f00000011c0)={0x18, &(0x7f0000001080)={0x20, 0x31, 0x24, "86b61cf89dbd9ea6a32eb36b5db1e726f217a27b934c6b0ac9a38899ee89341b356b8c6b"}, &(0x7f00000010c0)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000001100)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000001140)={0xc0, 0x5, 0x1, "d5"}, &(0x7f0000001180)={0x40, 0x5, 0x3, "2f9b03"}}) unlink(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') ioctl$MEDIA_REQUEST_IOC_REINIT(r4, 0x7c81, 0x0) 37m1.664986478s ago: executing program 32 (id=1474): r0 = syz_usb_connect(0x2, 0x24, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012"], 0x3c}}, 0x0) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) r4 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/ptype\x00') preadv(r4, &(0x7f0000000680)=[{&(0x7f0000000000)=""/57, 0x39}], 0x1, 0x5, 0x880) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, &(0x7f0000001040)={0xc, 0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2831}}}, &(0x7f00000011c0)={0x18, &(0x7f0000001080)={0x20, 0x31, 0x24, "86b61cf89dbd9ea6a32eb36b5db1e726f217a27b934c6b0ac9a38899ee89341b356b8c6b"}, &(0x7f00000010c0)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000001100)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000001140)={0xc0, 0x5, 0x1, "d5"}, &(0x7f0000001180)={0x40, 0x5, 0x3, "2f9b03"}}) unlink(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') ioctl$MEDIA_REQUEST_IOC_REINIT(r4, 0x7c81, 0x0) 22m39.256208916s ago: executing program 4 (id=6229): r0 = openat$tcp_mem(0xffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) writev(r0, 0x0, 0x0) 22m39.180993028s ago: executing program 4 (id=6230): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xc817}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x5c}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x5c}}, 0x0) dup(r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8b1b, &(0x7f0000000000)={'wlan1\x00', @random="13f5afcf2100"}) 22m39.087439063s ago: executing program 4 (id=6231): r0 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) r2 = fsopen(&(0x7f0000000180)='hugetlbfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000240)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x80000000, 0x0, 0x0, 0x9, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d9600010000000000000000000000000000000000000000000000000400", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00000000170000000400", "f4bd000000801900", [0x100000000, 0x8000000000000000]}}) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet(0x2, 0x3, 0x33) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000540)=ANY=[@ANYBLOB="380114ff210001002abd7000fedbdf25fc020000000000000000000000000001e00000020000000000000000000000004e240001000700000a0080803b000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="af6b6e0001000000e800110064010100000000000000000000000000ffffffff000000000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000bbff040000053500000a000800ac1414aa0000000000000000000000007f00000100000000000000000000000020010000000000000000000000000002ac1414aa0000000000000000000000006c0000000535000002000f0064010100000000000000000000000000ffffffff0000000000000000000000007f000001000000000000000000000000fc0100000000000000000000000000012b0400000435000002000a00"], 0x138}, 0x1, 0x0, 0x0, 0x400c000}, 0x20000000) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) getsockopt$inet_mreqsrc(r3, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0xc) ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) mmap$IORING_OFF_SQ_RING(0x1000000, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x2}) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r8 = dup3(r7, r6, 0x0) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r9, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r9, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, 0x0}}], 0x0, 0x0, 0x0}) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) 22m38.659424215s ago: executing program 4 (id=6234): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'virt_wifi0\x00'}) ptrace(0x10, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xffeffffffffffffa]}, 0x8, 0x800) r4 = syz_io_uring_setup(0xf07, &(0x7f0000000400)={0x0, 0x595d, 0x1000, 0x20002, 0x1000051, 0x0, r3}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000280)=@IORING_OP_SEND={0x1a, 0x44, 0x0, r2, &(0x7f0000000680)="d11836bb04514ff5f8e23e684b40c2e1e0e9ed13e0b1ca2dbe747bd3912d7bd1e7f866db8a47617808e245c5b6fb377afb6b92dd90b6cad4ff98d2184ecfd7d58a18be46d340ec0979fa2b1e27557df3ba", &(0x7f0000000700)="0641f9be35e0e2f7d58e421210ca4bac9b390f9a6e294d987f18f03b9b", 0x1d, 0x4004880, 0x0, {0x0, 0x0, 0xbd30}}) io_uring_enter(r4, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42792000) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r8, 0x0, 0x39000, 0x0) write$binfmt_elf64(r8, &(0x7f0000000580)=ANY=[], 0xfffffe3e) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) setresuid(0x0, 0xee00, 0xffffffffffffffff) sendmsg$nl_xfrm(r9, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@acquire={0x278, 0x17, 0x1, 0x70bd27, 0x25dfdbfe, {{@in6=@mcast2, 0x4d5, 0xff}, @in=@local, {@in=@multicast2, @in=@local, 0x4e21, 0x100, 0x4e20, 0x0, 0x2, 0xe0, 0x20, 0x87, 0x0, 0xffffffffffffffff}, {{@in6=@mcast2, @in=@broadcast, 0x4e24, 0x9, 0x4e21, 0x83, 0x2, 0x0, 0x0, 0x29}, {0x7f, 0xec2b, 0x5, 0xa, 0xd5, 0x2, 0x6, 0xb}, {0x8, 0xa0, 0x200000000009, 0x200000000000000}, 0xba, 0x2, 0x2}, 0x8, 0x1, 0x1fc, 0x70bd29}, [@algo_crypt={0x115, 0x2, {{'pcbc-aes-aesni\x00'}, 0x668, "cd538e230dad65e0d86e104fcf43cfcb8332a5ef697813b716ee208407a7fcb4e8fea1e5876854db05cafcf74a52837e7b9133a91d4a186041f072635c2932c341b6c2761e092ad645c0d673bd8c9a4a09e4dcac229462d9b176fe53d896a1cabb823b1958209bd1933be5521b80c3542d8b5c987b93bf115513ca2d8d860890c18af75d61d03ec3ea7630327210ac8a453280f7266cf3366fde394d42b30b1f4f25643d9d0f431ac436844277538eba559cad49f7628966e948343cd323d203289f93f469d7d87d5bfe11a215"}}, @iptfs_dont_frag={0x4}, @etimer_thresh={0x8, 0xc, 0x8001}, @sec_ctx={0x26, 0x8, {0x22, 0x8, 0x0, 0x80, 0x1a, "2f421b6f40d525b151c2c879d8cf980d6e21082c557711204d1b"}}, @sa_dir={0x5, 0x21, 0x2}]}, 0x278}, 0x1, 0x0, 0x0, 0x24040040}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r10 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r10, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r11 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r11, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000200)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000080)='./file0\x00') r12 = fsopen(&(0x7f0000000040)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r12, 0x1, &(0x7f0000000100)='addr\x00', &(0x7f0000000140)='1270.0.1\x00', 0x0) 22m37.606350793s ago: executing program 4 (id=6238): r0 = socket(0x2b, 0x80801, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)={0x34, r2, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8}, @ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}]}, 0x34}}, 0x10000800) sendmsg$kcm(0xffffffffffffffff, &(0x7f000001b480)={&(0x7f00000001c0)=@phonet={0x23, 0x7, 0x7, 0x2}, 0x80, &(0x7f000001b440)=[{&(0x7f000001a240)="b9c694dba831cd701bfe5fd34ee9e85e35794e2b80e57f663b9e41cb09ed577c102e6fba94a5468cfcae852d17f4e052a1db87d90273a77d34174e2fce549f034ee33cbb271148ba44e312c1fb39ed1492cf7f490ffd41ba93c0d5f8d3d05a4b2a40217f6f571bbaeb039fd0f20e15e279b1d25f14b9ea64d8be780e42360396c0d2ea7bcf3f481fe6862064e6c8c4558605e500234061089e758ffb5ceceaf164622033738c9e10de094e73673615591369f657d9189247f8d0f05178d4792abdfcb09a7fa37425cf4c3a87ad084212998d0a13c5c0979fc06caf393dbd98746785f426e03f42df3b6f7ab9b02c99ed0be2dad24b952f10c48bb3f250b582f96f67256f5e6053a17353233a1749b4ed92ca5e73e7009085b3074bc15ac2c9274cc844af4f6023596270061011e2770f51fd0c23576b602fb18f834a08f25a6b164efb5e00a4437d7bfa1e54ce139ce64d01a9658c51f24b4487cf3b78f18d68f986a15d3450a43b9dc55fd67cbc4591ab1538ef5bb52101c180b5e1f8b2f4f8533d9b1860a32fd283e339a07e6fb8bc018b99d43bbb1c9915e06e0c7c669814039c28c9286d1a26188819632604bb692357a233f6aa65a51b37a013703a1209ebeadcfce7cf363073eb35d586e4bfa7c8bdf4fed9f736dcf95e77d81e0dc9b427a4a85ad526aa2ab4b7871f7dd3dc971fa0e65e20dd195c122966133c0dd76a3fe826e803bc72af68acb9d10ed00970157a3b9d1ae6a09e2dae0cfbe0a91ab885c8d1768ecb8e8fa11c4ce49b1b7bc7f4873aae5b50f36001eb270443cfc291ccabcb0a6ec33cbd14f7215b1c0d39596abcac2a35717c9d7facc1add341e856ace1dc519759c10d49a45a1e25614fc2e248b22142b3b6dfd9df9168c3d33855c01bd0cc95a2411db047aecdd6d90495d3db169e8c072164e9d21208f41d73069f3e46c0e58476607d28a16a466a7a2ae382e638c66a28aee7ee81ec348050e5aa44d7118a116550a9bb079221861c8cbbbd49f0b5d2330feeecf9780c897b7f7ab339c33e22161c621ac25da0e26350b90ca5cc9a372f489f43b2e30c68c440f93fd459eabeedf865619ccd495166ebd43540000096036a8059fe31a688fac66cc514bb418e0c6feb6835b90423bcb3468fdb9636266a4ffc515689a23490e34ce9ae1bee9d302fd07ca4d831ddbccd74a67e16a09ed40048c8e972109f06a8c18f2c0b8a8813eff0a2e6d9f6882e7b210a55c45228df75149465b5e0ef889c8a26f80182650c1850e0f0a34a3be38953cc3e2837f5d2f3ad3391b6bf30441be3cf391743cf859c5f0726e01b9103c00848a4d212d7cfbbe84c631a5bd3d274b184df1a886ba5c67346c4fda97912fcfbe23433c6ac1327d15e9d0045157e70c957d6aa94e5a4b7f2288d78e7c5467d0a1387747f5bbb2cfdd1263fc438f766ede2d6ce3ab55e47d1b9a7d8e8c7d1e8989b73ca044f64092f06740d085c5a52d5b03128cf37c67656b52e8416652fc28461c4eeb2776b06cd624053c7cdd7e458efe9b1bde1511f068371d35d7fcbaf833347cef807fa42583690e1e50947fbb69a8f81d2134e3dad019af8421a0f1b23fd2d46f12b27409efd9ec7821041b444f281e38fe1b78192617801d05cb67d23c5d4535276c60e0378e433720dcdaf351ed7adec73b2e7eace8faec3f98aafd890f96f88bf6c044820b4f92104e7b0a2e59a3c2cd3e5185f436a887bab95b4bd63a622cd3f4b7fa504af88d1e1cfd217cbaec9d608cac46e7f2b73d949ab524be0f562b1b54a8e89043082955bcbe6bc51d46df9f5bc39549f3b6da93e63dae8d31b9d386363453552a6db5938ad7c2c70acfddc69a00dc53699969325e9160f1fa1e6fa0346b563502d3b0e91e5a975bd240311c994ce2090c0e1362a1e91f0fdbc84e9ec29f163b9677d3b22bfc5ef588d318de6ff60a3f504da324cf41b31f69a9017d57ece96ac3340803de07ce138b86fd5fe9b12a9d4b6a2ea3ec388432089b70afa30b3d2e8eb1b36613f0367d2e0c2f182a5968ba85016102fdb4156b335784cc074fbafd440a04dcaa24b3f049b84f89baf5da72ff9aa81508009bbf7a9ed640b48faadc5f84b77044720dab5652887da579c5f95a7f9c3b46b239f56f3e6bea8fb77f70035eba41e658e2184f739323752a995afe54c13991cd32f6023e745c8b1a486b8b997407bb3145fc8eda408de29d78bf9504f556c35a85e60a473aaf090716c6237deac1295b36de6c935cc9eba39ddf0c81501550ff0bdfd32a45ecdf592a047cf84192e900b74c7cbf73a4734fbaa0a924f450d0a586062239181f1ef2e6618020d368d9ec9cc621e6ac7de4cd583c53149a6b0ff65dda6276be741046875e9287e70c2221c772dd146985b1a373743bc499a0111c336aea0d9caebc5fdcd1b89361f572b91dbe534088b9afd22fc49cc83ba5de6c6486d4b8daf1fdc4d5a46f67cbbc205c4fc3cdb39ce1c8dda5b26c7c9a72e826be5af09b79f4ee85b1444c819079064a0417604df59718fe54687aef9e42fce3e1f1af380f89e3b9aca4aa90751fb49bfb9ca9d4fba2be010e7f1403543d630717806eabae3545dcfdc3b812230243e4c740d2a7a7b74b4fff098d610285764e19363487beb162c433d0d725e71cc3bcb41926b2b991a064931dbb479c37d0878de8f64045a9d8c694e50e6ec88f28a37c90d60fffb21ffb56500af963220a3aee86e49186e0e93af25b1003fdb8b59752202a938347c0f24f936ca5ea88e53131934b2ba33c24c7df19ec1f86b5ac6001bc3e02ebfc94b69f2d2f5bc8214735c8776754cde0a6893ce308a4cc09bd9c8fe01dc208b4a32852111e8e1bb7f4a48e585f3e534ffd05fc34741fd2ae731e93dc672fa3a44e57404655ad949e2d1ba5377ef50a0ce6c3eba8728fcc4867b0d42ba9feb1ba8fce3c9c4f52a58d10404b662b7015b03258dd6df3cb83a8af60b26dd2f72953af0bc64833445d79c47dda368f4e92376ebacff26837b2f8de685668b9c7bb23dc0c2f3235985f78da06b2c6479b0f34bbe8c01eb73f5f577916841cb336de3837518639ea03b58bd9be9986d800af08b926b189cde5ba8c8d31194b1a315b7284770a0eec70195ea7c177254a60705290eaf6bc9bbe48c3899c8dae52bec0267bdf68884ed060676b227633e55611faff8b281f5df2c4920dd40bea6e13d2b2adfec59ff7930fcc000b66e266cc36190b3a86f4a8f58a3dd9bc276b7cb8c404e3707a37f90dbfe3caa6797de9f3ce6ff41b38f8e9b7a317474ada0887f7bea9ef06988870ae259aa4cc47a8d484e0bf8f55629c040b0ed5d960040929b861de9de81b39da9e4e6bcf6dcba3095cec17e9605012d9d3cd63c3d8954a8474d5ab25c3234ae1f68aafdcb05a05a0b951aeed88a0d9c2aaa81414c5935c9b434dbd45ba67e4221b6cb25e80a6f2b8616c141535153e5c1d160970a0ff7c2e8fb7fa58a8303efad06b30caa6675dd2d8f2be46c857e124c38ced1b6bdaade7f3f210b723f8b20427e6195b177573fea868a8fd00b476e7076f990ae7c34c43e50821f645db2318b124ceccec6ae07bf4f4cbeda059d593f55bc563523b8175ea04071b4adde39a837e7f7f1b4f72871fe4f8ccc29a66577fc35c53dc62b770d5e0532683485854a1d8ea4d0fc2416d55d855332bf9912d4ca7e33724bc557aed4993e7d176712a1fb2f38a67b863477cf85ee49a1c8f59bd3cc18a634a22d2bcf12a6f29a6a5b06e61fa8f6900144f8e81cc6f116b95caae3ee250b0ec04046273d16d1a24e03c7837c864503bceccb103701623286bafb5b41c2300fe79e9e1b51b2feb7d4882b996da875ad77ebab0b716b518aa9866adc94999210f11258dfcdeba65fa9d89844c56f3ce222238e738ae098742bfe1537f6f3fef2438badce09ffa834aae8a9c933947947eab5ce2edb158a7cfa918c33db1ffe6278521d7678932f7af3645bd53f386ea8775e1e64ca4e202076991e357081bfcc9a231474650d8354ad946b7d73e8eca00580d92c0dfee5ea2965b1933e6ce58fa205530088653f8bbe1243d08b7feae072321b0f644de6ed61f66b44d9cbfb1c3252c1b81ebdf5ec2159d09910777f3e13426912ce545a812906d6375a9356961981bfe3860c2f799dc33f048e3bea859b098e511f336cfb628fb4b5e0128786955772e8f9168216d02f9fe218379eeb407d6d5f99e8b7ffe572c501d5aa32ca55bf3906bece9d8538c9ee15da5f9f336afda772cda576b4fbd482198512c971acd7576a47e68616b74cb5e15ddffe6e1ecaa16f0f5d50fc1a6cb90a603da37009d2b04ed366998d6ba797404085867340a5e1485ae419ad8d409d2aa6f6f61886f79e40703d8eac40b91880cb21f9160b85a99f033618cbc31e0a640e2164216443d05c4c725c981bb578fd800c32939761559fbf636adde5fe670027c0a2a3f8d0d35b8019fac4270a2e523bca7ff345a4511044eae69b519856055f4d3dabb620a16f443789e007732364dc2b8f7aadefdf4436b8ccc88c718ebd370187afdc49dd288f9d4bd30d038be3ed868e0dbb0c27f8d642b74b0b6b036bfabe6c41186b4d80068c83225beb59e4aacc3b330e4ea755ccafe456e1e2addd3be56e6073b024e5889f47c5b7c357ff9fcb15855e77e78f6ba9190dd1b2a7f6a38eeee60cbde5f3210d142585450526b2d5eb1b5cb5de22b925f04213d6842bd9d29578869884af340144c2852584639ae2d9183c156a292109b1b9ab56f10f74ca143ca1b953b39eab6bc3b36de73df888684ed63372ac71d6ef5629a8e8541d7e6faae5b4d7cd33eede5d4240d3a73896691a0216359da9a139715e45409ed3fa961a165a18b71dc83e932fbd16c9ed4ced422b8f4daf6d2a21b345b80662d1c1ba318000f068a975448bdbcf42193d21e1f9e2f7594175768aadca784764aee9a2c05f7dc445b5cc2fd9a4db0413e27afc7f84827d1bd5600eac283123b377006355b4cd312e62fc29821a20e63b19256b0a6902024318f59aa9546b7837112652abddd060e1a5edbfe93c7194c02e42792e637a1c7fdbd90cf9984a47dbd1e49f41da95bc9cf057ab290b02eb5f8b790600752d0b5254abb53f96083f0a75635385f0947fb210a71f690560374eee7238330643286210efa8852f6c77487b9cf97221878146130a635afec0e829d9a3f2af4fc7fd32b14d9c6b9ddf6b7a9e2faef012a057a5da374e7a2a77c50cc0cc11a29fbff91ced369302b13a2225eb526d5286fceb9921c9c23d68beb6876e03555193d5a0afcb1453298943cf6adae0c5d9cab552da5b703ab1b8f8cb832f2edce765b08d092f9b688171fae064602025b2a025f1c2535e40151f4c9600de077a1044941268e72ec5b5f4a8de1e3ca1d54754472a91e064c9a8ade04f66bda0340eb804c937245d38cb543fdd8f7e9a84929ab0fa230b5ffb68e5f12ef1a70d18ad9082ea894cd5ad8d0bb9df2644f9da79b0991394f19c706d03ee07dfd68be9b2fdd823ea5c29b5f11bad56dbdcdd5845f0ec374a6f24152dcb3593291d67b75528ffaa3b6c044d773183ecc2fb6f1b7848d4763133f50f22912242055c7748eb057cca78ae8cf1f9d01b8639d6d509b35cf27298c859fa466f99771aad54a04385f9a85d6f1020ebe55012d306dead3b056ba2d39ea97195695deb080043fac7f0ff52fc7c94e199f6f8979e7ec549f2427e67abd16e2f983e88c4ceb04e635042edd45fec751186cd26ae67c29938fa", 0x1000}, {&(0x7f000001b240)="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", 0xfc}, {&(0x7f000001b340)="87f629aeb2794484ad1d6a17eaccd0b1e5c7d0315443e454a19cfc05f8656c9288e410431cc98ceb78732d2c48", 0x2d}, {&(0x7f000001b380)="86791a6cd5a8d887bdb4e02e2eba2d06d91f2e", 0x13}, {&(0x7f000001b3c0)="1aa7618d2a987b4a2b4c718c11319a21f7588ba644bd8f5234f2a529e1e3b93a37eecb4c95de2711e76631403fed1fa1e8a66cba3078721fe5049ea603b872266b3913d46ee97040a4391259432772167b202abae817674d57389432b004435162fa10a36f8b04d5c010a4af", 0x6c}], 0x5}, 0x4000) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f000001b4c0)=ANY=[@ANYBLOB="000010e46c304f478504fb4c570e07bac136baa1aa2a09b55eb2787d7a46ccfba8eed4d59c85c61073c8cc79632437f4d5f772ce492648c9f76b9eb61aca30c463a0c06e86f95b726cb65e4dc089822bf44fbaad3b82512801a80c90eb3b58bbd0e28292b94d8599859b0b50d78a20de3df83ec4db57b1aa9a6de3035300d79a4f22899d15a2fc125aee2e20f96ec1d6c7dc26b8b16f45b2501323b3e99bb499a8a5f2a7099a16d751dbc43ac8d156df5e8efb155989b58b683131da030e4a2f2076edb51ee83bb85f0635a67bc1d18d4de88b64d79f127d97da14c31743c5369ca8884ce1315822f7860000000000e4a3b92bc7fb0e3d5438f665465de44b046969ef9bf17dc1d20c7d59d9776c091e59ba26af54d703d2e1974fd5f57c8d8ccbbb8daf720cf08b19712674666c6e632bf7c1d5d70f999ec980b193103e4d67ee3379cd39b6367d6da043cf92e6ba87215a6abb41076e2e48729a3f33f5e7c874307d37ea3e5b63167cb661", @ANYRES64=0x0, @ANYBLOB="0108350006ab", @ANYRES32=r4, @ANYRESOCT=r1], 0x7c}, 0x1, 0x0, 0x0, 0x40804}, 0x4008084) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000001800)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000017c0)={&(0x7f000001b680)=ANY=[@ANYBLOB="b0100000", @ANYRES16=0x0, @ANYBLOB="020025bd7000fedbdf2565000000080003009b6e400845edc7aae669f9e42982a35946202c52a72ada575d96ed8ef8861d5945e025aa12c05ccffd721224aac73df131c48dacd6eb914ff33343bef1", @ANYRES32=r4, @ANYBLOB="0400038070100380640000805f0002000a2764448b8c0bc708dab155f041be62e761112f8298f3b252f0c5d45700e039fb6d71cf3be7124cfdbe0ba3610d58b9fde28e7ff5d12c416524bfd27bc24c370fb2187e6cf99e2a3db93df3051c35cec13e65aff186a0580d97890008100080041002001930940e855454672d57f1a9760961759122bd3ddade7c05f21e372dbad5a03958a8d191728f92e2f5e48d089d4f95645650ac5c5e3f177ec94ea4e7f3ea40d5b2af12ebce9a401a1b7d2354bcfdffe9dd077a87d4704f0b822d5d12db99b1d638ddd857583e4908af97b9e1dde7ce82043ffe3a3f1f8dbf06e80bc7e9d26109edb1aa8500400f75af67eff6bf6326c445e91685969ae4d758e790a047ac86a6c2111477efe2fd7c3f991f335ace52216a11666cb42bbd62aa5652a92d1850d8404e8ba10138e563fc443377a499282ed2c7b6a71f82269c12c0889f205945bbed91e80375e6bf82850e9831d9f43214964e8a2ce84d094cff8630c54ff032505f104d96c86d46845eb50de1210785e429c7ecf4fa2704bb13b4dfd1492c7d0abb3e27e9c343ad0ecf656179f6881cbd6f4b82bacfa99a946a17f7860c0b426b491973a6fe6c1c0184b72a95ededa459c16a89aa90f155f8dc13d5883aa2c3e0af567e0f542f3da7e119444a25220b3c145193963d06c59ff5999dadf4c836ce5016916853009167fd2c573fd62b3c02172b37ecefbae2ba175fefa99a230d2e5ad20f6ca584403bb5795449254a72b36cc7bfa583bddfe409d37826fb580bb7b7082008ec30b731c2194bcc3c091f05c7656f1cf76ec6d19b55350943749fc25ff4e720e766e625ce942b8a97d0eed7d3d5df25257d1e751dc66aa3583e39bda0a115920699a2f98dbde91827601fb4e952c2a0868d419d853eef084f92d7c0cc3c14eab306cb65c86b6ddcb3d8ac72dbe87f8c0e821528d01c9d702b0f0789b70e76c0730c9c9fb19fe5b9c472ba34f2ea71813d8807e43a55235f802376bd8a56790fffe4598350cdbd4b919c1755036c9458eed13530c61846ff1fc55c64e4e5e20626cfe9ba8382a13bfd8a2c8c1ffc72efa86b7e5bb5a2144a2a1600eeb12917068730d5fe383bb3aca79a0deb35d45ae3dcf58fc268128b2fe2d621aa90451e18e4cdc68e7bc3b4550ec9da0ff6b6435f287aefbe1acde1349e9e130db672eb6f5c07e376398b4bf46c6a39e4ac757a7dbbcc3d3e0d5f3572361d77b1e8e84dce0722f95d0f3cf9c471aa5fa4ce060ec9bec4fc4d50e067163077395f0274f4c4d96cf13ee2b8b694a277c1a98882e3336cd9a2dd25500a8e36f9939a04c4ebf572cd059a36694d76655d239ed7423b5f0e7d599c25e16535a9f7c21a443f803aee840c6599483644670508a085764b7337039f6c372f9e07780fa6d3932a55579c9bdf049627913d883c83ccb0679fb1b0c06453d27b08ae4640f576a692a3715bc56c0213e0380138ce6fc2593bd4a7f7dc29b1110dc3ee4e6b7bbc42b3e4ae131a9c71dbad5db152ee1335fb24dc5b1ea96cbb271871a91e44972b25871f9760b9e1edea710db75fdba02b38ee5fda293ec2fbd52835e6187a9893b6bbe12001fb07f3b761a85abda8d1e378a88dd18ce60603308763f41d7c6217acef0ffbf976f6be679caca41f4f7d01c57290ec329f3d8c9317c2fa08413a209e6fa3cb9952ff717150daa15e24d0676fe3e9107290432261a00ca6b59f1ac43fecd442f8b077e65a0ef98d95c8abab6d07e007c7302191a4885185d73ec5d4dc9961fe79026968d7a40c52df258282bb12b664dab1c4af203398bd4c8fc53ada262813be4d6015f3b734cd200174e8611814e1f963a9a658363fb824ae8cf918d24ad38c515f797fcf59558a66c07e28d60cd280484b628922ad7d77ae52f71bde2a022b0864f03ec9546e334bd1b7289877c802df159790ffbb38ce60ca525550f4e60bff3dfa3688d4dd802566cd68119fbe1591bd700643918a31df53612997c0729f537582c7e5dd71bef78c59cdef4e3775e934108c48d04b42335c3474b0e1ecf315157618de0c2e644125e79518ec5e97d7910dd0a7c311bfd5d6b94fbdb2f0336cee525f5b657d511443e9cb4db69306f5fec7c7c1242904cf28ae2061cbb973b86e044a5a1cf3fd98e84e56c0ccced81cdf8eb8e232424b73bf8646a6072931e04cfa196daafd1a702d9c7c1685369017e985f658edddc4e31bb928e252026505c843ee8e7aa7bd2c4f1270634682d72bbd96a91ed6d265313953a87e2ea86e5f4de18a1b5f35b9fa7a035fbb90dac38f5b366b46789baf29c2774acb09d38d6ee22877c800f3073e22238d29f7ecc334b04e08fa762348fbe2a8814cc0b2d9b102991e63f4e37944144f8505f2df1b0c0e9d9b398ffcb55623b1e1ec86aff157d61f8199ff3026e35e9523d38b0b2bb611ea9f4dc524a9fcd5dca27738ee599fca496f780180ba90b94e61dd8f3fd73a701edac25082f9b32cefd8da48af09fcb365647365447982d0ed20b04efd58b145011b0c54253437b886bdfa8b6621d78e51df938491671cdb2f692fb77aba7403ae9b25145f9c35356d8951587ee708fe4394f0e583a6708f88c108e91a3287976dcc3f1452e683012babd262c0844094953bb670b6f8e7b4f4665fe2095a320f6d1522d8acc47e35552987ce4e2723a44eeea014999c2412238f5eac033637143a5eb78025a293373af5d8fd833d22ae301e62500189097a0a7f8d1f40fb24148cbbcbe06c92cc3c302db0071de880fc4c66efa8c247860d4c4a58b4888e07ee661e3dd1ce90f035b3e518ba960a68b04872742b454a0fc93ded42364d801710d18d0003335f0df2e2e522502e924cbc3804b8330e7a850cf9df2712be993e0d40ad34bea778d5b6449d019d41136d285ee0273bb8675a1e4e9eaa58223eb2e45ff8a3a443663dd52bed1c20eae7a8c7620900a26574df1e00ba3fe45f73e5d0c505b91aea52cf1eafea8cc15cd3a18be2c7e83311eaced158eb78a03adc64cf4d776ef8bc29b86dfa9b6e8813e9a72d28dbbf1ff31df21bb26bafbe5f6611a99ba7dc7ed97cb8de3a05e1601208ff7a03c8d95f3d52f1a6a89e3c5ad4affbb9574ef435b533c35c2288ae368e9f48059ea81b009a660ccf9cebbd8acbad43b76893df8a57ec0afe5717542b42f6702f662f1f31d90cb313c3dddd047ecbbbb7b942e99773412cb84a8aadf40fff83b12e3482e47d77745d77e7d8026c3aa0ea577193b4e9659d37ede566d60315705d8fd9ad65e58bd76ad918280dc9f82458c7aca54ce5b43c37c1c6d698b2c208fc54d7fa235ed4208c37087c5bf82458c6a12459829b18a0cff7da03efee5b274b34396afe936d23bc3f5f388a1a0d19a2a6ef1c0e6849a3548f5277dfc1116bb5aee0fbff60d904e7d72a52e94288ec55c84def1fbc28525fa404c32da56765543d8c8d5f25490b409f42effc9399a06c4643dd2b45c0541d517b00fcdf154390f50dbfaa2d9ce7b8c3826bb791c1aeb51bc080c7c5189c61f924ba0cb2ee5192a609a778277bfe2e8db6c45762790baa8e1daf45d46c44ed099cdb6042a179ebd61c93ea217cbb3638d8aaedf03413106cfa15ee7649b3a58b28eff6eaec36ed51471956fc7073e982469aef650a04d77bccab7bf6d5c08b50f1d3bf1832a86ccb3cd7eb96f57e7a2403fc2419cad2d98954db2d836cc602725959aaed45e090cb595868fd21259aaf1eedc2882c6967f969f812766923675a40fd7a9d88367783ce2ad575c268f1f339aa9a1d74f6caae51853f669eae2fd5f34b3dd0ea4f4e5fc8ef54949c47521ae3e922a18b382b59f7a678b1f467bb2a2b044bcf342583342f76ee161492ac09ca1b3bd943e4900763067bd4e609e253320a7fa038eed791dae074e4b8344ecda8e21973c397ec3a828780f5df5938336f16d76061f40f73687ced97c512ec8c45f7af103d5ad13aca51481de4d9debfe70f388d383ab1b887fab05582194f9049b3baa32ea49f8130d27042066ecb01d672dce6d63a6a069bfe8488a9e984682df6518ad3ea62afb4d34b2dc2aec905d2f80c239d7b010e0c3858a4f8ca3ee94a5cc5e48e2f38015e0e41ce9a59137f16f5f0d7f98af841a7cedd9d4dd4fd80824ec672c2e0fd23281a0f8ab2fa2ab7cad25d5c26714aa2a875e413862ae638514e446129b1f173b84b8b6d356c3e2d1ed3d77ec8d66c64c4f53ae5d4b0a71b63b61e59e8d7cc72503dde38b96921fe80aadd4d44f9927102626755d8cde10ca61b4d078c8eb62480fa9d9c3718d95390d68781d918d578c8e1acca0020f97b226baa7001cd3a525094c2aeebe364678d41d7c453ce4fdef9757fe4059d9d602a9ea0f93cee5572394fc0c9f1e412734a5665a8f4c14aa829a8f9ec4134fc81c62dd455f181c987b6e0d2f1cc97f321438e39f203bfc07f429ff5c7e9f9e6a2afc0e84036ade7fb24faafa2589d5566d94046b11b7b807f1ab40ab24184db591a055bfbdbd005c5ec23c5b35ed824ef534266f81b2fab39fa14b105082c1f2eb3eeeb272e00fb9f7dd5f951d9889c3f91fb3c8a42b97d4acc2148ad92cf1c5d1ae05b04e730d0d55cd76ca3093c0be718dd54a68f5f5a9a9d25b2a1a0aa5c5aa91bc752430ea7e4f642c8050308a2d458e3ec3857dbed7f14d58f39e38933bc3cb37712b90472cc1f4092a032bc4b247f6e3bdf9684016ac93faad64098ec2f83c81b1aa9e4d5b2e5754965eee7f1cf6ba93fd9e7137f3053ad3479fd40b1bb5664c92940e1fbcc2fa99dd9467a686b989d8e354901f53104a3789804b9243918f39e774dd4fa8ad08abddaa1c7b9cdb1e74d217ae8656ff6d44f32bca82e9f1993e37556bbfdb1528bf710200d86b1cbf6eb313646d6a1c371ab6f9ce34151e6a4cc3ae27dde600d464273b3d232f126c01288a22f0f07d8d67af11b1872e79c56e0cab97bbbdb580eefe306a54f32520bb8548edf7177a43a75ba7707bc8e36de4f16868d8383b5adaf659cca62262d0677edc38eb14f5adb554e2fea40f4239d4515ea484fa5caa042c5a622b75190143240e9256836c259266751d9d7aedb9dc823b762f752a7a777633f62966dd961155f133c55d8154cca2233cff497eab9b1cb679e37002bf04a6b91d6934291dde5a241155ac4aedc749ef93ff68bd7420e8f03845345c5c651637c6920b17aefb8f2459cb3f300506fc2773e28e46c52e1890fd05a9fbfb69e4016ce1c78f57f3cd836a06326594b7839451c8e4ddf9f4bddb3ffce8d81966277068f0485df2097cff9a2fc2100020e2b6d9974e1b10f004836892b33018779d28f717e4b27e208fc463afbd69062c03167e1fe6a37ae07942594a45e9a69edd4939bf70fd09cd76a4632c77e9866b2b892bbf81615182da6eebe2e2e25532c2fd7cc2ad2f05f2787ce67921bc7124dd595c27fd232eb181971b9fbc50e2efd2fa35cc1ef8c2f43588311fc94785a49180e9cbc3f88a1b3596eba204c1ade51ce2ad6a44c7bd6f208a7541d4cd5ba292df5c493d0f509f09fa6b3e27a04417ca65a456475fa1322a41305ef1c856f9d92fb6899a47a960a61d61b4f98694ab65ea9680d948eab2bc99c8e00ad4cf4309b81c88972dcbea87cba326d93d0f725beb4ad8826ea6dd595dea831d230f92e67302bc81d787e97e4a4f42dcdacbddcaff3276726c9ff307b319bf9210850ba357bbd1098de0b575eb843eb4d618773e03eee93ca6023e03ddafc3568cf45d98ab7d4eddeb49cd6bae82492d5c4dada658ac4ac1fd627a1cfd6fdc507059f45484749b3c628d12ae1038943eb29b7f6537ae4f4d2ddea40a7f9e2319f0083e974375feaf7cedb46cae60795b14228c0e5e271c3ea46008f76e81f0a7a276f2c81b96acac7e9c0ecdc51f6fae8ec187fd04fad162308000200ffffffff080001000600000008000200000000000800010008000000"], 0x10b0}, 0x1, 0x0, 0x0, 0x48088}, 0x40081) openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x40180, 0x0) r5 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x88002, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f000001f000/0x2000)=nil, 0x2000, 0x4) r6 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r6, 0x10c000) r7 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r7, &(0x7f0000001240)=""/102400, 0xffffff8c, 0x200000) r8 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x882) ioctl$EVIOCGMASK(r8, 0x80104592, &(0x7f00000000c0)={0x1, 0xe4ff71c170d132d5, &(0x7f0000000400)="fccdccc6aefa"}) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000100)=0xd) r9 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x20, 0x0, 0xff, 0x800, 0xfffffffffffffffb, 0x2}, 0x0, &(0x7f0000000240)={0x1f, 0x3, 0x0, 0x0, 0x800, 0x10000000, 0x4c, 0x3}, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) setreuid(0x0, 0x0) r10 = dup(r9) write$UHID_INPUT(r10, &(0x7f0000001040)={0x18, {"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", 0x100d}}, 0xfffffdef) syz_open_dev$radio(&(0x7f0000000000), 0x0, 0x2) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, 0xfffffffe}, 0x1c) 22m37.323137911s ago: executing program 4 (id=6243): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000076) socket$netlink(0x10, 0x3, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$alg(0x26, 0x5, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xb04, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) writev(r0, &(0x7f00000006c0)=[{&(0x7f0000000400)="5157a1667465e9783b4e7f878bbc29583d5d972ee84ec25127a64c38195639d7210e236f7c7127ee9a9867bc", 0x2c}, {&(0x7f0000000500)="e504adff081ae6cb8d8681699e8234f75c53704720cab09609003ef9141e9cda9302f0eb40241c", 0x27}, {&(0x7f0000000540)="d208461b035240d486c7b29794", 0xd}, {&(0x7f0000000700)="ca551325ceae621a2f4d9f2b8c96f47df7c306e483df3ecd57bfc2ca9400b25aec23f58ee877e360970b", 0x2a}], 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r5, r4, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x20200, 0x0, 0x1f0, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5880, 0x8200, 0x2, 0x367, 0x0, r0}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, r6, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) inotify_add_watch(0xffffffffffffffff, &(0x7f00000000c0)='.\x00', 0x27000351) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000000104010200000180000000000000000008000540000000000500010001"], 0x24}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r7, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000280)=ANY=[@ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000808) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet(0x2, 0x3, 0x4) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x2, 0x200000000000001, 0x106) socket$kcm(0xa, 0x1, 0x106) r8 = syz_open_dev$vbi(&(0x7f0000000300), 0x0, 0x2) ioctl$VIDIOC_G_FMT(r8, 0xc0cc5604, &(0x7f0000000580)={0x4, @win={{0x0, 0x5, 0x62, 0x8000}, 0x3, 0xffff13fa, &(0x7f0000000140)={{0x3, 0xc, 0x9, 0xd}}, 0x2, 0x0, 0x6}}) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r9 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x40202, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r9, 0x40045010, &(0x7f00000004c0)=0x4) ioctl$SNDCTL_DSP_GETISPACE(r9, 0x8010500d, &(0x7f0000000100)) socket$can_raw(0x1d, 0x3, 0x1) socket$netlink(0x10, 0x3, 0x0) 22m37.113519968s ago: executing program 33 (id=6243): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000076) socket$netlink(0x10, 0x3, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$alg(0x26, 0x5, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xb04, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) writev(r0, &(0x7f00000006c0)=[{&(0x7f0000000400)="5157a1667465e9783b4e7f878bbc29583d5d972ee84ec25127a64c38195639d7210e236f7c7127ee9a9867bc", 0x2c}, {&(0x7f0000000500)="e504adff081ae6cb8d8681699e8234f75c53704720cab09609003ef9141e9cda9302f0eb40241c", 0x27}, {&(0x7f0000000540)="d208461b035240d486c7b29794", 0xd}, {&(0x7f0000000700)="ca551325ceae621a2f4d9f2b8c96f47df7c306e483df3ecd57bfc2ca9400b25aec23f58ee877e360970b", 0x2a}], 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r5, r4, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x20200, 0x0, 0x1f0, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5880, 0x8200, 0x2, 0x367, 0x0, r0}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, r6, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) inotify_add_watch(0xffffffffffffffff, &(0x7f00000000c0)='.\x00', 0x27000351) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000000104010200000180000000000000000008000540000000000500010001"], 0x24}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r7, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000280)=ANY=[@ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000808) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet(0x2, 0x3, 0x4) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x2, 0x200000000000001, 0x106) socket$kcm(0xa, 0x1, 0x106) r8 = syz_open_dev$vbi(&(0x7f0000000300), 0x0, 0x2) ioctl$VIDIOC_G_FMT(r8, 0xc0cc5604, &(0x7f0000000580)={0x4, @win={{0x0, 0x5, 0x62, 0x8000}, 0x3, 0xffff13fa, &(0x7f0000000140)={{0x3, 0xc, 0x9, 0xd}}, 0x2, 0x0, 0x6}}) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r9 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x40202, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r9, 0x40045010, &(0x7f00000004c0)=0x4) ioctl$SNDCTL_DSP_GETISPACE(r9, 0x8010500d, &(0x7f0000000100)) socket$can_raw(0x1d, 0x3, 0x1) socket$netlink(0x10, 0x3, 0x0) 8.792954084s ago: executing program 6 (id=13222): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x80800) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x2, 0x0, 0x0, r2}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_RUN(r4, 0xae80, 0x1000000) 8.616123795s ago: executing program 6 (id=13224): socket$tipc(0x1e, 0x2, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x14, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00222200000096231b26e53f07030000002a900683749e821dab8b9236592b0004000093"], 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000003880), 0x4, 0x2) ioctl$EVIOCSKEYCODE(r1, 0x40084504, &(0x7f0000000180)=[0x3ff, 0x7]) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) 5.638244198s ago: executing program 2 (id=13236): mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) ftruncate(r0, 0xc17a) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x80) r3 = syz_open_dev$sndpcmc(0x0, 0x1, 0x80) ioctl$SNDRV_PCM_IOCTL_UNLINK(r3, 0x4161, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) get_mempolicy(&(0x7f0000000000), &(0x7f0000000040), 0x7, &(0x7f0000bf7000/0x4000)=nil, 0x5) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x3, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) dup3(0xffffffffffffffff, r4, 0x0) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x3000, 0x6, &(0x7f0000100000/0x3000)=nil) 5.575175729s ago: executing program 3 (id=13237): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x800010, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="0011"]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000080)={0x50, 0x0, r2, {0x7, 0x29, 0x9, 0xffffffff90a4edc6, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x2c) syz_fuse_handle_req(r1, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fff2000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000236c52aef7bb4300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x0, 0x8000000000000, {0x0, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getdents64(r3, &(0x7f0000000100)=""/134, 0x86) close_range(r0, 0xffffffffffffffff, 0x0) 5.552967618s ago: executing program 6 (id=13238): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket(0x2, 0x80805, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x40001}, 0x881) getsockopt$bt_hci(r0, 0x84, 0x82, &(0x7f0000000000)=""/4087, &(0x7f0000001080)=0xff7) 5.453747475s ago: executing program 3 (id=13239): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0xa) fchdir(r1) r2 = syz_open_dev$vim2m(&(0x7f0000000080), 0x25405d26, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f00000002c0)=0x1) close_range(r2, r2, 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x1031c2, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)=0xe) ioctl$TIOCSLCKTRMIOS(r4, 0x80047437, &(0x7f00000010c0)) ftruncate(r3, 0x2007ffb) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000100)={0x5, "0dafcabbbf00b5f39f12b228c8dda70abf1b55157490e9a52645050056be3bad"}) open(&(0x7f0000000040)='./bus\x00', 0x40000, 0x18) 4.663298091s ago: executing program 6 (id=13242): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="6800000042000100000000000000000003010000060000002600010000112233445566778899aabb88a8450088a800000e0001170000010203040506070800000c00020006002000080000000c0003"], 0x68}}, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x82ab01) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000000080)={0x0, 0x0, 0x0}) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_IOCTL(r2, 0xc00c5512, &(0x7f0000000000)=@usbdevfs_connect={0x8000}) ioctl$USBDEVFS_SUBMITURB(r2, 0x802c550a, &(0x7f0000000480)=@urb_type_iso={0x0, {0xf, 0x1}, 0x8, 0xc6, &(0x7f0000000040)="8b3deb158cada2089ea94d3a280bd80cab161cdbc1dd1b4059f4a4601f42baaade01ccf91a560e5bd7f2be7b5c73ab7e1f3c6cdfd12593cfc6beb19b8efa01833e77c888e0eafd", 0x47, 0x1, 0xc4, 0x28, 0x8001, 0x9, &(0x7f0000000380)="bc320962984a31db623a5e9c590deb319dd6616249c96b76c2f84b3bb36a8d5818838e7ec0ed3ebea8cb8da5c2472a13f2b677e6e8f5f83770d3520293f3f2b2c8835d100150e866961039f587845ff01532ea7e29a72baf9bdcad5360f0f1a77c9f277c29e36dd4916e3f8d830c0ad3823e7d7244dae6a71eaffeda90231ba3b97aa716b16f80f31b9fb8884d4e747c4973d5b0360466dd50865b9762a23a8371ae1baabc17595eaaa4f6b4a0ad363e4e6667af74383d836e942678ec8d0c0c3d7febb67011d6554f3d613887917a33700e0ffc4012fc16", [{0x3, 0x6bc, 0x4}, {0x0, 0x0, 0x9}, {0x3, 0x3ff, 0x6}, {0xffffffff, 0x2, 0x40}, {0x4, 0x53cb, 0x5}, {0xfff, 0x1, 0x6}, {0x28, 0x7fffffff, 0x92}, {0x6}, {0x2, 0x9, 0x1}, {0xff, 0x0, 0xc}, {0x81, 0x0, 0x4}, {0x7, 0x4, 0xfff}, {0x7ff, 0x102, 0x23fcf980}, {0xc, 0x9}, {0x3, 0x4, 0x1}, {0x2, 0x7, 0xb583}, {0x2, 0x8, 0x2}, {0x8, 0xc, 0x1}, {0x9, 0x1, 0x404}, {0xfffffff8, 0x7, 0x7}, {0x8001, 0xffffffff, 0x4e17}, {0x4, 0x7, 0x9}, {0x71a7, 0x437b4198, 0x9}, {0x8f8, 0x80, 0x7ffc}, {0x6, 0xb, 0x3}, {0x2, 0x7, 0xffff7fff}, {0x4, 0x0, 0x3}, {0x8, 0x43c9, 0xe}, {0x5, 0x9, 0x6}, {0x6, 0x101, 0x61}, {0x0, 0x2, 0x3cf8ca9b}, {0x0, 0x4, 0x33e}, {0x7f000000, 0x8001, 0xc}, {0x9, 0x80000001, 0x8}, {0x1, 0x2, 0x9}, {0x0, 0x56e4, 0x5}, {0x4, 0x6, 0x1}, {0x5, 0xfc, 0xe}, {0x9, 0x8, 0x5}, {0xfffffeff, 0xd161, 0xc0}]}) r3 = openat$sndseq(0xffffff9c, &(0x7f0000000140), 0x7c002) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r3, 0xc04c5349, &(0x7f0000000180)={0x2, 0x0, 0x5}) 4.540182742s ago: executing program 6 (id=13245): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000600), r1) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000002f00090027ad70000000000004"], 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x4000014) r2 = socket$kcm(0x29, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0xfecc) r3 = syz_usb_connect$uac1(0x0, 0xb1, &(0x7f0000000040)=ANY=[@ANYRES16=0x0, @ANYRESOCT=0x0], 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2400, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r6, 0xc008ae88, &(0x7f0000000240)={0x1, 0x0, [{0x17b, 0x0, 0x400000000000}]}) syz_usb_control_io(r3, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000200)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x804}}, 0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) splice(r8, 0x0, r10, 0x0, 0x6, 0x0) splice(r9, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0xc) vmsplice(r10, &(0x7f0000000200)=[{&(0x7f0000001740)='\x00', 0x1}], 0x1, 0x6) write(r7, &(0x7f0000000080)="a5", 0x1) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(r9, &(0x7f0000000080)={&(0x7f0000001340)=@hci={0x1f, 0x300, 0x37}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000100)="0000000000000000000000fa88", 0xd}], 0x1}, 0x4000080) r11 = socket$alg(0x26, 0x5, 0x0) bind$alg(r11, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r11, 0x117, 0x1, 0x0, 0x0) r12 = accept4(r11, 0x0, 0x0, 0x800) sendmmsg$alg(r12, &(0x7f0000000040), 0x0, 0x40800) recvmsg(r12, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 3.107175818s ago: executing program 3 (id=13248): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x6, 0x8, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x24) mkdirat(0xffffffffffffff9c, &(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x3}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="260020001200010a000000000000010007000000"], 0x26}}, 0x0) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file0\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x1, 0x0, 0x0, 0x0, {0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}}}, 0x32) getpeername(r2, 0x0, &(0x7f0000000280)) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) pread64(r1, &(0x7f0000001c00)=""/4108, 0x100c, 0x3) 3.084596664s ago: executing program 5 (id=13249): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x800010, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="0011"]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000080)={0x50, 0x0, r2, {0x7, 0x29, 0x9, 0xffffffff90a4edc6, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x2c) syz_fuse_handle_req(r1, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fff2000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000236c52aef7bb4300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x0, 0x8000000000000, {0x0, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getdents64(r3, &(0x7f0000000100)=""/134, 0x86) close_range(r0, 0xffffffffffffffff, 0x0) 2.97471003s ago: executing program 5 (id=13250): setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f00000003c0)=0x1, 0x4) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x5ac, 0x247, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xfb, 0x10, 0x7, "", [{{0x9, 0x4, 0x0, 0xd, 0x2, 0x3, 0x1, 0x1, 0x0, {0x9, 0x21, 0x5, 0x9, 0x1, {0x22, 0x1fc}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x8, 0x8, 0x64}}}}}]}}]}}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_MPU={0x8, 0xe, 0xb7}, @TCA_CAKE_RTT={0x8, 0x7, 0x7}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x48801}, 0x0) r3 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r3, 0x403c6f2b, 0x0) r4 = dup2(0xffffffffffffffff, r3) read$FUSE(r4, &(0x7f0000000440)={0x2020}, 0x2020) read$FUSE(r4, &(0x7f0000004d80)={0x2020}, 0x2020) write$vhost_msg_v2(r4, &(0x7f0000000380)={0x2, 0x0, {0x0, 0x0, 0x0, 0x1, 0x2}}, 0x48) sendmsg$nl_route_sched_retired(r4, &(0x7f00000015c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001580)={&(0x7f0000001440)=@delqdisc={0x11c, 0x25, 0x200, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0xffe0, 0xa}, {0x6, 0xf}, {0x9, 0xd}}, [@q_dsmark={{0xb}, {0x20, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x308c}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x6}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x2d}]}}, @q_dsmark={{0xb}, {0x38, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x7}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x21}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x20}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x27}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x5}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x2}]}}, @q_dsmark={{0xb}, {0x38, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x23}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x14}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x800}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x14}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x1}]}}, @q_dsmark={{0xb}, {0x1c, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x14}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x1a}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x2}]}}, @q_dsmark={{0xb}, {0x10, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x437f}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}]}, 0x11c}, 0x1, 0x0, 0x0, 0x40000}, 0x10) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r5 = syz_open_dev$swradio(&(0x7f0000000080), 0x0, 0x2) r6 = dup(r5) read$FUSE(r6, &(0x7f0000003500)={0x2020}, 0xfffffe94) mmap$binder(&(0x7f00000c8000/0x1000)=nil, 0x1000, 0x1, 0x11, r6, 0x1) write$binfmt_script(r6, &(0x7f0000000400)={'#! ', './file0', [{0x20, '/dev/net/tun\x00'}, {0x20, '/dev/net/tun\x00'}, {0x20, 'erspan0\x00'}], 0xa, "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"}, 0x1030) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'team_slave_1\x00', 0x200}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'syz_tun\x00'}) sendmsg$nl_route(r7, 0x0, 0x8000002) 2.869356676s ago: executing program 2 (id=13251): socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.76347331s ago: executing program 2 (id=13252): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket(0x2, 0x80805, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40001}, 0x881) getsockopt$bt_hci(r0, 0x84, 0x82, &(0x7f0000000000)=""/4087, &(0x7f0000001080)=0xff7) 2.279421883s ago: executing program 3 (id=13254): r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[], 0x1a000}}, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) close_range(r2, 0xffffffffffffffff, 0x0) 2.185058434s ago: executing program 2 (id=13255): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@jmp={0x7, 0x0, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffffff}]}, &(0x7f0000000000)='syzkaller\x00', 0x1}, 0x94) set_mempolicy(0x5, &(0x7f0000000000)=0x2, 0x6) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@loopback={0xfec0ffff00000000}, 0x8000000, 0x0, 0x2, 0x1}, 0x20) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x8000000, 0x0, 0x2, 0x8, 0x0, 0x2}, 0x20) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x4000010) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)='a', 0xff2c}], 0x20, &(0x7f0000000000)=ANY=[@ANYBLOB="2c0000008400000001000000000000000c"], 0x2c}], 0x1, 0x890) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="180019b6b39301031dbd7002fadfdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x4) recvmmsg(r2, &(0x7f000000b400)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001a80)=""/4076, 0xfec}], 0x1}, 0x5dd7}], 0x1, 0x40, 0x0) 2.173795329s ago: executing program 3 (id=13256): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) socket$xdp(0x2c, 0x3, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x400c080) r3 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r3, 0x0, 0x42, &(0x7f0000000040)={'ipvs\x00'}, &(0x7f0000000080)=0x1e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffffff, 0x0, 0x40, 0x10) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f00000000c0)=0x47) sendmsg$nl_generic(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="8002000043000701fefffffffcdbdf25017c0000040045806802018064029f8004002f805c02b5804502378008004200", @ANYBLOB="7501b0808d001c8004008c80", @ANYBLOB='\b\x00i\x00', @ANYRES32, @ANYRES32, @ANYBLOB="08009600", @ANYRES32=0x0, @ANYBLOB="0800a100", @ANYRESHEX=r4, @ANYBLOB="8708c8e339d794ed9adc67ed148a0b9f92c24a0879e3b7427ada6a212a30fc6fbe729f741ae4111437957ab1b351035fd5930a5acc1e001e80a55b3e436517a02ac511d4a2a934f9196ae16d27e05a8afa51e2000000000008001a00", @ANYRES32, @ANYBLOB="2200ec0085abe5dd4f565397591c5c49b8a10546ac218800c3af8a2dc1601d0b952400002552869e228a94da22cd735e3bba5fea1c3ff1a45d8bc0ee0ca29b8c2ec63199ff514fef47d8da0e25fd9ea73c082394001bc21d9307122008b2957b7c98342f502a152beff1e14e77a7b22f03a6077d5edca5369a8498fda2668720376446994b059f73e95cddbde3bbb4679414fecee67c8602f27054d5a955421b8ed287d79af8273a3e8b9e406fe06378560095cb9b27076ea1b79c739c7c4abc7aff9222096fbf172d08004900", @ANYRES32=0x0, @ANYRES8=r0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00'], 0x280}, 0x1, 0x0, 0x0, 0xc004}, 0xc000) socket$inet6_sctp(0xa, 0x5, 0x84) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r5, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x2, 0x3d4, 0x3, 0x3}, 0x7}) r6 = fsopen(&(0x7f0000000180)='hfsplus\x00', 0x1) socket$nl_route(0x10, 0x3, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) fsopen(&(0x7f0000001280)='ntfs3\x00', 0x0) close(r6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r8, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c0001000600060008000000100007007f0000017f00000191"], 0x48}, 0x1, 0x0, 0x0, 0x24004894}, 0x4040) close_range(r7, r8, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040b7cb3c9008ca6b3bd0f00416c"], 0xe) 1.523616932s ago: executing program 1 (id=13257): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000011c0)={@map, 0xffffffffffffffff, 0x25, 0x38}, 0x20) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@ipv6_newaddr={0x48, 0x14, 0x119, 0x70bd26, 0x25dfdbf5, {0xa, 0x8, 0xd9, 0xfe}, [@IFA_CACHEINFO={0x14, 0x6, {0xfffffffe, 0xffffffff, 0x7, 0x7}}, @IFA_ADDRESS={0x14, 0x1, @remote}, @IFA_FLAGS={0x8, 0x8, 0x28}]}, 0x48}, 0x1, 0x0, 0x0, 0x4c051}, 0x8004) ptrace$pokeuser(0x6, r0, 0x108, 0x4) ptrace$pokeuser(0x6, r0, 0x118, 0x20000000) 1.450916183s ago: executing program 6 (id=13258): socket$key(0xf, 0x3, 0x2) r0 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(0xffffffffffffffff, 0xc0245720, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x3, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x4a) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_PORTS(0xffffffffffffffff, 0x0, 0x4000000) socket$igmp(0x2, 0x3, 0x2) syz_emit_vhci(0x0, 0xf) r3 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, 0x0, 0x8050) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000000)=[{&(0x7f00000001c0)="580000001400add427323b472545b45602117fffffff81000e224e217f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71036000000ffffffffffffffff", 0x48}], 0x1) r5 = syz_open_dev$video4linux(&(0x7f0000001140), 0x92e2, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r5, 0xc040564a, &(0x7f0000000140)={0xfffffffc, 0x0, 0x3011, 0xfffffffe, 0xa, 0x0, 0x5af}) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000200)) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a052e62a6000a05000000000000000000050000000900010073797a30000000002c000000030a01010000000000000000050000000900010073797a30000000000900030073797a3000000000140000001100010000000000000000000000000a"], 0x74}}, 0x0) r7 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$6lowpan_control(r7, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 1', 0x1b) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(0xffffffffffffffff, 0x40405514, &(0x7f00000003c0)={0x9, 0x2, 0xfff, 0x5, '\x00', 0x13}) 1.380699062s ago: executing program 1 (id=13259): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x3, 0x3]}, 0x8, 0x800) ioctl$TUNSETLINK(r0, 0x400454cd, 0x313) (async) ioctl$TUNSETLINK(r0, 0x400454cd, 0x313) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000040)) (async) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000040)) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080), 0x4) (async) r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080), 0x4) fallocate(r1, 0x858de457327878de, 0x2, 0x3ff) (async) fallocate(r1, 0x858de457327878de, 0x2, 0x3ff) ioctl$NILFS_IOCTL_SET_ALLOC_RANGE(r1, 0x40106e8c, &(0x7f00000000c0)=[0x6]) getpeername$netlink(r0, &(0x7f0000000100), &(0x7f0000000140)=0xc) ioctl$BTRFS_IOC_QUOTA_CTL(r1, 0xc0109428, &(0x7f0000000180)={0x2, 0x80000000}) r2 = syz_open_dev$vbi(&(0x7f00000001c0), 0x1, 0x2) ioctl$VIDIOC_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000200)={0x8, 0x0, '\x00', {0x0, @bt={0xd8, 0x1, 0x1, 0x1, 0x9, 0x60ab, 0xba, 0x4, 0x3, 0x4, 0x9, 0x0, 0x5, 0x194, 0x0, 0x24, {0x4, 0xf4d}, 0xd, 0xff}}}) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x20, &(0x7f00000002c0)=[@in={0x2, 0x4e22, @loopback}, @in={0x2, 0x4e24, @loopback}]}, &(0x7f0000000340)=0xc) (async) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x20, &(0x7f00000002c0)=[@in={0x2, 0x4e22, @loopback}, @in={0x2, 0x4e24, @loopback}]}, &(0x7f0000000340)=0xc) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000380)={r3, 0x7, 0x6, [0x4, 0x3ff, 0x7, 0x6, 0x1, 0x5]}, &(0x7f00000003c0)=0x14) pwrite64$ublk_bdev(r0, &(0x7f0000000400)="84a8686596fba88cf8d80ed549c7e359ba540f3df2f93e050d183ef68dfc265882058523f1e7d4645158e2da9aeebb", 0x2f, 0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)) sendmsg$NFT_BATCH(r0, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWOBJ={0x4c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0xa}, @NFT_OBJECT_CT_HELPER=@NFTA_OBJ_DATA={0x38, 0x4, 0x0, 0x1, [@NFTA_CT_HELPER_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_CT_HELPER_NAME={0xe, 0x1, 'snmp_trap\x00'}, @NFTA_CT_HELPER_L4PROTO={0x5, 0x3, 0x3a}, @NFTA_CT_HELPER_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x888e}, @NFTA_CT_HELPER_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6558}]}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x6}}}, 0x74}, 0x1, 0x0, 0x0, 0x4}, 0x8800) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r0, 0x4010ae68, &(0x7f00000005c0)={0x100000, 0x2000}) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000600)={r3, 0xb}, 0x8) (async) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000600)={r3, 0xb}, 0x8) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000680), r2) sendmsg$DEVLINK_CMD_RATE_DEL(r0, &(0x7f0000000800)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000007c0)={&(0x7f00000006c0)={0xe0, r4, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@handle=@pci={{0x8}, {0x11}}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_NODE_NAME={0x58, 0xa8, @random="3bf0b72595fbe33e2042327af93e12cd5cf8ffafd7d42b299f319cf1e2c8e7e7cf61081803767722fa47437b69ff592ec92341498cfc115d4ced5e36aceae1c6ca3a9307ee1f28ff033fd07edf8477dff942e503"}, @handle=@pci={{0x8}, {0x11}}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0xe0}}, 0x40040) (async) sendmsg$DEVLINK_CMD_RATE_DEL(r0, &(0x7f0000000800)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000007c0)={&(0x7f00000006c0)={0xe0, r4, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@handle=@pci={{0x8}, {0x11}}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_NODE_NAME={0x58, 0xa8, @random="3bf0b72595fbe33e2042327af93e12cd5cf8ffafd7d42b299f319cf1e2c8e7e7cf61081803767722fa47437b69ff592ec92341498cfc115d4ced5e36aceae1c6ca3a9307ee1f28ff033fd07edf8477dff942e503"}, @handle=@pci={{0x8}, {0x11}}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0xe0}}, 0x40040) syz_genetlink_get_family_id$nl80211(&(0x7f0000000880), r0) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000880), r0) sendmsg$NL80211_CMD_SET_WOWLAN(r0, &(0x7f0000004b40)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000004b00)={&(0x7f00000008c0)={0x4234, r5, 0x600, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x53}, @val={0x8}, @void}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0xc, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}, @NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x1f7c, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}, @NL80211_WOWLAN_TRIG_PKT_PATTERN={0xd8, 0x4, 0x0, 0x1, [{0xd4, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_PATTERN={0x7, 0x2, "7630b7"}, @NL80211_PKTPAT_PATTERN={0xb5, 0x2, "cd318cf0882be03b7d81f187f12105d17944ad70fd8b922b0b8b7fcddc8f8c268517ed177957c97a4a23ab904318faa16ef50f6b72001167bfc5c5ccce42640be7a614d0b7f101f91fb9c3789915075d1f8d00662801e4099ad0e1174a549ada4bc6782422ebac93be261495c0f701a5f103dc493fcf9b1e81699024c93d9b635f8ecb13ea9781100045250feccc4891d91e9d6a974c0dd30b665b84ff0b4fba70bdeba500ecd653f57715b8d458c86f62"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x4}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0xffffffff}]}]}, @NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}, @NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}, @NL80211_WOWLAN_TRIG_PKT_PATTERN={0x1e94, 0x4, 0x0, 0x1, [{0x358, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_MASK={0x69, 0x1, "24d74d17fd07125da8f1faf3646b7ab3ee2b87d98ef5f76e47d868151e50c943d116f34af12b09537494e0fd0ec2c6b86760d22b542d1bf7cf3a00387616348501827e6c73e948eceb8e27cf0ec151cf5a9e60ec8b017d581b9e2221ec7f23956108a5a13c"}, @NL80211_PKTPAT_PATTERN={0xbe, 0x2, "22edbedc80119eeb87b290e256350f70e90e94f8457e61c07b5f6714b16693d090ee1f80c4797d636906ead294621f2f2c99376e239f384658b33e28c9e7a5abdab0c64ff8b04dec01bfd47848da3ad92cfe0cf4489419ee1c491bc3edcd4e4c5ec6f67c7b44d98e2ef96e8fb654b2c178df39fe2473a78f9042b62a2d38fc5d1a5961906b0d2f4fa3b244cf5891082e9fb217cb32a0057200cd7d217764a18d5893b741e6f539a106a2b257add683a1c020eea7a3bf25daf9fe"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x7}, @NL80211_PKTPAT_PATTERN={0x7e, 0x2, "469285c3c0eb2348236fe60c3500761efab9f5ac16039a70b1a1f463f8393075d1990245b2f62eceaebdbd3ab12598dbb78b1310d94f24016a54c61035f1335e81933fdbb24756943c175970a9b19d8f74b292cb60d72797620a1465728a2bd2bd06f2931f3de661ac1f7b4605db6795dcc1d0651db70db07345"}, @NL80211_PKTPAT_MASK={0xa8, 0x1, "b959c5a5e88eac71791c15d1369ec41ea4f3c0ce98029eb37342056914d5947f171d2e255ebeae6596b261d1c842bcfdb119a6024edd68488270e0deef2750f1ce5fddd4ac97c9202657f4c5f0f9d8423a3b3455d09db7171a6cfba8a5503e6f094dda512cdebf258c63e372b2a3e0dfa2f278064c25eb3b7518e85e0a2d42f545e280fe63e3ddd6e21b885119e5a8ceae27661c1a4ec7178093b8768a41d5221165c31c"}, @NL80211_PKTPAT_PATTERN={0xf0, 0x2, "925988cf864873d9ab60eda3f021321a377129dcac716aac828257b2b7391fbb1e0ae24be57e4fad9d934f472753a3ffdd12d70984c8e4a2ce8a9b9ad75f0e783f9a67f4099846a74fde7eae64b56f6e714ba0a43b5421de3e2981bbd92f9df3682939e4be50e11edb542a4849cf5e38f996e2d58a4bd034d51603a87287c2073a4be8759510df7f31e08cf28e3f54b633254b46a625049cec3a646e0c94e1b9de047d286ea8a40c88a7bb5142a3d1eda6ec753ee6da020eb37d300a77e4162661433dbe3f5ab92510c81e7b2a1eec83df5fb68c320fd811822e5affe7641aae160cd1b1bcd238fb0dae365f"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x9}]}, {0x234, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_MASK={0x6b, 0x1, "c9985eea1790b3d6f08f863a80e923b1c67c2d794fc1708cea253059377145b14221c1db304eb6a56f0172aeb99f6872b1869c5df1b2c62c10d5715d7f73904bc38a0b12124d287e81d94fe58d360b890002dc37d3976ada3149ed02d4ad7c13732ca922703880"}, @NL80211_PKTPAT_PATTERN={0x7c, 0x2, "a6bc448464039d1a6d4240e421fa8e9c80dc85e6b8a8a3487f64fffe630035ed2a3fd592d66dacd514475316d112511d72533b5ecffc3801b2db82e6d50109f1721f80da7491bb1d2dcc280169b1703568c3bcc0e7bedc8b3a5c8acdc2dc4c7fcfbdea261b907519d23e5778e74a6f86cde1c1d04e55a7a1"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x3ff}, @NL80211_PKTPAT_PATTERN={0x37, 0x2, "21a38a3215cfb945ff80674e230a9ded378b6f87b449c75c653a97d3c541043b5500bd23cbe0b318400fb014aaeee01d30a113"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x5}, @NL80211_PKTPAT_PATTERN={0x76, 0x2, "44fc88f0ffd59196754b8e3ad8b5439a80745376f18bab478a11de7c009653e8703ae344f6987be669cf75935c640759e0ddb3dda9dba5c5cfae2daa9ed2ff1da9ea9f61b746c930dfdc00a26ee5e9ffeb92ed81b449d5c3d47f85c3cb80adcd4749a2cded9bd0c58a4d4dd170d5a1deac8d"}, @NL80211_PKTPAT_MASK={0x85, 0x1, "28c3aacf1b9cdc3c07fc6025fe83c4cba1bd73429ecba0dc7ead46ddbedcb87f3722f5b97ea1b215862cbea3d9e0f4f2577ff2606779ebaee21dd6aac8d761140c35770474a0ed47988e8015b9773f19582a23b4ff0b2ea2ca4796babc8b0b88a35254f51080dbd3128d7e3b317ad2d34950be35087ec27bb0b9e23493fe2e435e"}]}, {0x98, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_PATTERN={0x28, 0x2, "0192877d6587c769e036517dc4457cf7969e3635d18da58f3a2e37fe78e701684b359fae"}, @NL80211_PKTPAT_PATTERN={0x6b, 0x2, "182607be61c96a7f76819e97304ba30dab2677e6ca03e436e14cea7711d0ee86ce21b6c219eb111070e632a391639c006098af2bfb675fde33bc660f970a91d6ddced54cc922f2b37ad1dc4f8a502a09446c0cb9ded6e768853e7b949bf053f28bd55c2fe6314f"}]}, {0x11b8, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x6207}, @NL80211_PKTPAT_MASK={0x22, 0x1, "da9d5cc6211615858fbed9c70a34c7e956600d3c8d3201f9efe9fbe549b5"}, @NL80211_PKTPAT_PATTERN={0x79, 0x2, "53c9ca7f63821eabe95f99329fb46f1d38facaccb1482af2f3ce45633a13d29bba375ddf4f5a87b1498fbe6f6c4faa215001d228a12da419cc0f042f4a889cab17f63368f937d39e4ac6cf5dc2f6e76a73204f7891c750e436b639dcc99ad81b6f89e76eb6b2139104e8c08219ea41a36d26c4e22c"}, @NL80211_PKTPAT_PATTERN={0x52, 0x2, "abda3a832adbc78a662e3062b504f8a5413b50ba8f4165b24b09ebe7a1075b7d31cc3b5243fb19247f7259ea8a7a4777ed140a2729c63e0f2f0d198a2e603aabc41eac8f109e4dea6dbb80c20e4a"}, @NL80211_PKTPAT_MASK={0x2a, 0x1, "f2a87f47ce48e99606a8095d0fc8905cc9b725750ae3838a411e30148ae2a51e0993695fb852"}, @NL80211_PKTPAT_PATTERN={0x85, 0x2, "15bbc735af1b3ac0fc5f9f7afa677179fa3a201119b15ac62ba46205e2768b1c0d753d8010fab6a810a96f24e3722bf03a1cb8b484b140641c83293b7ca3a00fb0d0d3c995d0331fa9d36904052ed8457c33be2989f3b085b37db2ae13b7a3f0f211c201150c3d68e5324e525b6dd9088dd2d91ab3ee811666aae72ce5654e387f"}, @NL80211_PKTPAT_PATTERN={0x1004, 0x2, "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"}]}, {0x554, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_PATTERN={0xe8, 0x2, "3cb53d5bba56f53a100a3a4f021fca8bbbaeeb2b913556445e4f1b1ee6064ad28e649e642f0580daa1f37c5471774f7a9d1fb11f483bb9702332e0853aa128e1d38ca1dcc4af212929c9a4dee21bd49b556c19d00e3d8a0e63e5e3e42e18daf10761d86ce870d915d99bd7945356fb7dd1410bf42f23927a284cefe56de8ef7f2f03050f2d88d3de561f620bf363ecd03da88be06bd41781c7758f43677ce18e4585d4b66b97ef90aecb546a5392d658a0580c15425e84eadee3942c0fc0f853c713b65a5b5b9fc606728e2e925a7d60a98cf4d027b35f0bf038f94709abe8ed27bc4a9b"}, @NL80211_PKTPAT_MASK={0xf2, 0x1, "8fe3748aa56f8e7df5e5e8676f7ad9a92c4ae3d7ddf8c2197b7a3c28809201366dbacc43c62f21df3b46feeec882d16bd23fdb248d4e9f136d2028a41d5b736d37a378259e680853f48a88b0e147f12637fb937054e33118ade8187b0976749cdfac4230211eb74129d434b822daea5a42c18f2bd288356e325619e1f9af54ee699a3aa8a5dfc59eca38e37702c21d47e82b5baee95b33412f43388a9edb341a1177136dd629a2d45e9c9ab7887b93b48e8d5877d3ee37f695d4fb21f3d674be60e8b97fa3636dacd76d3f4710b3f0057d2526736412b4620a1bf5e1165dfae7cd54868aaa0b931c65e45d51fa25"}, @NL80211_PKTPAT_PATTERN={0xaa, 0x2, "85dfd2958784f937af320b66cbdb446070a8d6e4925a9a308adf5feef28edc1e0bfe3e58654ef64010f7f1c1ef888ce5e9fa21687a982aa5ac54290247812656277f1ebd1581459b107402c5cb9d3fd8bfb85fc1cde0b0df3f2145bb34f43ba527c846eda4be43a792234d1304cea948ea10366950cfa246fa5581b70746f7cb145dd3f49de32a29f232e524aa44e059b68e37209ac48b702657fe6f0c4fa0847b33446402f9"}, @NL80211_PKTPAT_PATTERN={0x9e, 0x2, "9c5aa2ab29867ae561777ff1fbc10d149f4b193b4fa9b544b1234cbce0b244379271a82d12285b50c7a312853056bb58a28e019370abc44519bfde195de94fc899d17b22f13553c056393e885c3faae9cd3b3c760ada0e982c936d31305044e0dc81a24776c2885e76f35810b977a89aaa325725eeb62dab9afdf189c038abb4584621b377ac564a6da7ad7a2beeda86eefe488539b00ed8c2d6"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x8000}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0xa}, @NL80211_PKTPAT_MASK={0x2c, 0x1, "c6e674a95db50cdae45810d49fa87ee115b5453bd28c25b3226ccd7a5ee7a68741ad29b2e38cf722"}, @NL80211_PKTPAT_PATTERN={0xd7, 0x2, "8abefa363c0e3a9bd1f2acc39eb76385696ea855a1a541c268a8cb9ac5361384743fec838638ef8baa1fac42c9ed962fcaf78e5a9f28ce7af38968705eedc1e17c3a5906ebdf18e5db6e97ca0c86f9229c7bb648978ea7e1850b35844425f3dc37a673364a8e7efd36e0db7b3137f4f57f657e247783048fc4dc639159bc61e0a8139facae6d35c64bf5acc304d36d35f87535adb81d3271144be72e35098363b1fb895c630518da44013db13e28da7fb986c52b0e60656389c3d825d6a8da7489f390cccd74bc2027efefeb8354f68c816183"}, @NL80211_PKTPAT_MASK={0x78, 0x1, "e5d8b26777d65135bad09ccb0704f7e597ba444603637bc78adf530dab89c8cc35aa142ebd02eacd8f826316a44b0d32a37602fed370982ab23d19f451908037e267ae896955a35e292608176f86f2a2a7ca1155fa2b4f2a9b0832702af632323d43fa56cdbb3f77b507c5c4eff870c0eddee928"}, @NL80211_PKTPAT_PATTERN={0x9c, 0x2, "2cfb89c2420fcea17cefb7cbd97c5209ee6831523251ab6334f450759461b2dab79a4d88bc6188849115cd9297a0a9ecf80ad9fb8381c09e71a6f9077a1bf8bd55f1609082822ba8f0fb974416620a9e91fe7fc045f745a2a386d89785f722a64da17cc4f7f3a2eb8c7ad8fa55a2aabb19eb659aa4ece602830ea3e317eb93cd9f65f9082951573f33cb5fd598d3f7230ce8dd86f0982d5c"}]}, {0x160, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_MASK={0x4c, 0x1, "6504f581a6cf65f99f49852f3e36359e7b523643f724859a1cbc4b6f0640913bd87a3fd89f563dba2fad4d3de284482c828fc625dde313aa963e9ecc24109bb2752492cc8700dbe5"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x80000001}, @NL80211_PKTPAT_PATTERN={0x78, 0x2, "b5b562c7b8623177a77cf09299e969d89a38be77a8c7d43b35259435bc924034533c344724a8ab93aaf4bbdb1d45296a07d5e9d34d3660ef8ad832db0dcb4d7fabfc5c8e2f038c21d853ee0cea30fc5e67da84b575fea93409466cf11af6b477f4b9e1911952361fa56045512cc9e6c879b5cf2b"}, @NL80211_PKTPAT_MASK={0x7d, 0x1, "fbd8cf1d1dc46ece7abb20cf329ceff45f8050775c3f6f838b2b8a407c0d9bc0531ffd1a44073994ce0e09a5dc291b4f9b3c7f5b918ad0755b290080d303604049f7be570e8ed31f030bf46a459604dfdcfa1b1cfb2d7590453e00d20d05f7f9a22fc78ad992b0bc2faec16cebdcc30a03abfd8f4a8b81e773"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x7}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x80}]}]}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x584, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_PKT_PATTERN={0x580, 0x4, 0x0, 0x1, [{0xc4, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x9}, @NL80211_PKTPAT_MASK={0xb8, 0x1, "c1bc26ccb65c769c6b1ba989f79b5e6e2cc01b199d9663a62e9a2395570085db80a78be6bc0a6f1f08211b3beb741296f4c77c194813dbebd45861922088154da2fa32f64b553a9296e66b42cd35349b07bb6772d8b2f0b460bd373d0d16820522f33e64dbdb845c6133eb56066f23a719d90b9873761f1fc11e5547ea9f84e8e031dc9d1d437fc7ee16db4c4ff7d9ac9aa45cea6047e0de23e16922556c7ed04e2150c85834ebe34bd2e78829c2aec60e55aa30"}]}, {0x10c, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x7}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0xc275}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x200}, @NL80211_PKTPAT_MASK={0x39, 0x1, "af5f97c89c0941a7aceeb0f9ecc5e728cd9fa86b4631da4b2e4e7b771603f38bc2108932da56524f028d4eea475518ea967045f5fd"}, @NL80211_PKTPAT_PATTERN={0x3e, 0x2, "59b015b1e827c3c06e09de3540ac691e6481138fc63f883fd729eeea4202a25e19307cd6d19db22d75c76c6ff809dbadc554acf29a519730dd22"}, @NL80211_PKTPAT_MASK={0x15, 0x1, "ccd2cb39a8771559dc469a665b2eb4cf36"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0xf}, @NL80211_PKTPAT_MASK={0x53, 0x1, "aae0dee8b2949e27343ab25e867f604f1b208530cb9f158391153b22090e5d767c660a952de1102ce3ba49bc2fb174a9c5ec5b1ef181d7d6c12a40c9c4300409010f40b502e4e37ef9aa459f90291c"}]}, {0x344, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_OFFSET={0x8, 0x3, 0xffff}, @NL80211_PKTPAT_PATTERN={0x94, 0x2, "ce365898ccaef77019fdf0228c9909add090d85f179c9f6a81f1a3ad08087a98062cd89412b0dc36ba27296a9872437884d001105c40e04e4bf13155d9c3d906d4194531b2e1d9b049b93dd9caa33b96995c7f618149ac95a34ad5f0eaab5f5cff307499d33622e6f6c55533c7f1fff376548ffb49ee9c2e25a89de548ae91f625fec24bf19948aae6b4011d7de87c54"}, @NL80211_PKTPAT_PATTERN={0xa1, 0x2, "61b403f2925afdd101611d0dadbde45ff2f83a2107d6f170c61cca5cc52a92eeb054fb72626a34a77db2a5b8e0ecb77dc30b867844a1f45ce8a8d8ca617c17e74a2d226f2066d467fc2a69357487facaff8f1ca4488d653cec654624258cfc580443b815af48dd58af2585c220a0e74c644af10be009372a8f4ee0c50f0533710ae1d160ddce456e032b023d0ea8ad39ec68c2b6dd87f8daef03c1c9da"}, @NL80211_PKTPAT_PATTERN={0xe2, 0x2, "85e92609c311540601aa0cb09447ee7097eba05030fc414f634017fe07ab3b64ebea4558a7fe7045f8f448fd8b8b544191fbceddaf9288299fd9dfdf05116d144540cc49cae58ab687ddc1d69f40ec31b2f6872c9ec67b8c9543b748ded8fe3cc1ef5acd929a657cf504448d65d3a1606d10f6db1160c8a1a54d84e7d24a34fbdd8020076e4797b97d893af2ff5ea85ed61f28bfe19a18043de9be0f95ad1c96078a1174bf969120ed243ec3b24ea65bd63e5744a02d0a514b992ded0c481626d48d9737461bd418dbc24cc0370a63c93875fe63fedddff025d7a432fc87"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x6}, @NL80211_PKTPAT_MASK={0xbe, 0x1, "c71083d4879331ca221d8414e56ad77ab52cf3bae688071ba505a6ac59984dadfa9d07a12380e75e34f0be08c5945e68104fb1e0005352c0ca78a7fc0dc6f578c439550e76df6154cf011e580ce49df60c45e53f04d7574899b40233ec8fbc3bcb943eafd93e8d43695bb7973901b6ee8cde6307d04b06a49b95d1c7f698218f21b77a9bb9fd082934c1fc56868e3afb76ec365efba23b6d60f8153f20ba09b840fa501047110661beeb4878d2288e2e8351fbbc68d650d7bf16"}, @NL80211_PKTPAT_MASK={0x43, 0x1, "93d0972507f9f114c7d5f671abdb24675199ee303b2846014b17fe087d8ce00482382eaa7e08fd62e531dd06553b718b05d62ca3a9a6e1b08398d1128f21f6"}, @NL80211_PKTPAT_OFFSET={0x8}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x8}]}, {0x5c, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_MASK={0x37, 0x1, "57920b0fb06a67965a75801f23746d61c92b33a9b19d90650f4d507f7b2f0de4f6115fef11f9a85a1b30ba182be2a1a09087ac"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x8}, @NL80211_PKTPAT_MASK={0x10, 0x1, "10c70545d105b9c2226c37de"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x1}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x9}]}]}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x220, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_TCP_CONNECTION={0x1b8, 0xe, 0x0, 0x1, [@NL80211_WOWLAN_TCP_SRC_IPV4={0x8, 0x1, @rand_addr=0x64010102}, @NL80211_WOWLAN_TCP_DST_MAC={0xa, 0x3, @device_b}, @NL80211_WOWLAN_TCP_DATA_PAYLOAD={0x40, 0x6, "07e8053bab35c397ffd2f41e26cc76cd853b1c5a12f6901845c8094f72687b5f364783e8069dcc63555a7dd1b92f567c55bff2f399945690bcda3afe"}, @NL80211_WOWLAN_TCP_WAKE_MASK={0xae, 0xb, "e40c4c880ea3f16583f050d614ff5fb84fb1ec4f951c62bb17f8559a19e9dcf554628a40f9b5c0818f2125cf129f168aa9161d49ff67fc141b01a171d976b375882e491d9aad7ef0bff91bf8818e6ae80cb8663e49853d8c78f4e0bb005a9e854bb37d590ffe0aceb591ec9880fd5a848740b660071d6267c3941d3999e8cdfa9eb785af04abdb21f631ddc08732ac7d09f43ff96b60b10fe83a2302e46822f3a2e5a0fb84d10873ca59"}, @NL80211_WOWLAN_TCP_DATA_PAYLOAD_SEQ={0x10, 0x7, {0x5, 0x1, 0x7fffffff}}, @NL80211_WOWLAN_TCP_DST_MAC={0xa, 0x3, @device_b}, @NL80211_WOWLAN_TCP_WAKE_PAYLOAD={0x91, 0xa, "85c229f10726d42147ecdc92f3ce789a33be84db61970b0c34145be75560ebcfdd010b0561f55ac23e18ceefab3862351d5016f348500ef6f178f0fcc3c8188c1260c8390c24b3fd1da58648bae907b830863df909170e4f700061b74e0e8064db8e3f87831d6ae5985e2bb36200107b495be7796562e2363b91a3073210d55d6dc0f72608c37264e4b1b0754b"}]}, @NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}, @NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}, @NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}, @NL80211_WOWLAN_TRIG_NET_DETECT={0x54, 0x12, 0x0, 0x1, [@NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_SCAN_SSIDS={0x4c, 0x2d, 0x0, 0x1, [{0x15, 0x0, @random="96fbe23baefc6ff7fba056e6c73816d019"}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ap_ssid}]}]}, @NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x654, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}, @NL80211_WOWLAN_TRIG_NET_DETECT={0xc, 0x12, 0x0, 0x1, [@NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x9}]}, @NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}, @NL80211_WOWLAN_TRIG_DISCONNECT={0x4}, @NL80211_WOWLAN_TRIG_PKT_PATTERN={0x638, 0x4, 0x0, 0x1, [{0xa0, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x8}, @NL80211_PKTPAT_OFFSET={0x8}, @NL80211_PKTPAT_PATTERN={0x74, 0x2, "edb0abc89fcbf19426cf55aac01824c6961816379f37381fe34e5a513d5db0b6e5d9ec7532f5ced16771e2c7492c9b025850bc0c51e9d9ad4eac0a70d69c4a6cca1257486754496e2b01a803e254b2688164c880c6566af91b1416cfe1b8a2292e2b385dc2cdaf976cd1a5edd0821c49"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x5aa0965b}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0xfffffffd}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x8000}]}, {0x324, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_PATTERN={0xaa, 0x2, "9a93bd0a4012ff85ae646b0b17a2f758a0aec945a2e6edaae18e614cfce04b9e1dd3c2c9b4e6036bb23299c204d89955d90d06790126f07725abea4a98f94f74d24deaf9ad0bd256416ac40b0bde489b1a7b8d284c25f3ae878fe7fa818768c8822a6d660083bec40e4eaf41ef772b16530e9edc2c568dac309aa73fbcedcc06ae9ed11cef1d41d928f83c321bce9fc462e88778c9553a8eb9f0c07b90fb5879089c6b7388de"}, @NL80211_PKTPAT_PATTERN={0x20, 0x2, "98312a0ea27be2d15ec7b168b83436314b7930629d5da592cb367010"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0xfe}, @NL80211_PKTPAT_MASK={0xf2, 0x1, "00764fe01060a6ddcaa0cda0c2d039b8238ba8899d6d70c73afd6e4b716c7fa273cb4a63c3bac3ba6bea3b362b06571b329f5fe78446b8e8097dcaf89be419329684c1d9cb0ec9ff1b1312adf6525b3912933ae9ba48ba6b1ad690d730c99ccc902c95dca5b83e0517b09447a8f2bb1f54cc7b07a87082441b52e3e6dce8bacfc638666561f2a680b1ea9445cbda6cd491e3ccce2b2723ad1f63d19b032dec6a2044db93fa884fdf7f47c410504a6c3b8cac7d0fa2983f1c9624c49c38e5578e3bcc40855d7d5033849096f4e6c8d71e9a927b150698f74f3af193f9f25381d942bd8b2725aca0d08a8b0553be0f"}, @NL80211_PKTPAT_MASK={0x4}, @NL80211_PKTPAT_MASK={0xba, 0x1, "826b29e34ca8b0381a1a56096a609ac48e8d8ef506a021f644214781426d27f63cd0f8128c45090c6555d84977e19ed647da1584c4c709c714b88ec463c69dc09ca3b88fcfd7e1880a5802995d87c9c220f327c71c77f4633459469db3b6d09e305c9ef48cdf296cab6960786ba88af5489b9e832ee7b218621019dc07bd5bb57d70eb62254a03f2f5da462b161cd8d95c23f8dc6e693331447d07584a462e7b30362bb9854e62f330c9af77c64081e12d868106999e"}, @NL80211_PKTPAT_PATTERN={0x97, 0x2, "de28ed85c0c53740c291e677f61609f10d1269811d71a80a3c99f9ffd74c64a5186aae12b8e319da765ead828cfc9c6f607979a857947cb0189028f1fe7b9e50c3f3df286832aa4cbca314aec3e2b824217d79f4d271896abd75a1ec6a35e9f6cecd48213d58e3c983bf90e171d41d9ffb4b09926ac5afe45617caf428fe870258195c81a7a5a2c7ec7dfc40f96032bf270123"}]}, {0x184, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_MASK={0x100, 0x1, "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"}, @NL80211_PKTPAT_PATTERN={0x7e, 0x2, "01994ab7a6ae7b4c27d25008d3f852cfd2719189f42efa3012f2d71331668bc6fd5aa274946e3805b81db5bcd026cd924eb2dd7cecd4553ecde52f69c8b40aea2ea33433443aa338461a60e0f5badc147f86dde2b996f9bf238a0367214e51ad3f8728048a9dc71a16661c048d073d637e116cd55ead57e17d05"}]}, {0xec, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_PATTERN={0xae, 0x2, "55f2b9cbdd3d6309533cc6ca9da70e02c27061d6c8cb0c3316dd6c9189515345857a823e42d512fa7244002feaff9e600ad2c4615b08b8f2dce3f18ce2161dc8fb6870f93ea76ec045a8c757880aa939bfaf3814927bf3f81a2ed66dcba4d86416c130fe9619969fde0793e7cc8d69de9331080c30c1e68ad3d1bb9e6e1bb10b0d947fb371b856a3c504c3759b7e133e891738e6099d733d7209e2499d9fbab3c64c12c3b3d283b88506"}, @NL80211_PKTPAT_MASK={0x38, 0x1, "de591d1c5bcfe7aae4cfaecfea670f5f2492761d2b4ae1706228e7c91130c67785ac14cdd816d43ddcbb22ee0b44ec7e4ef5a34c"}]}]}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x20, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}, @NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}, @NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}, @NL80211_WOWLAN_TRIG_TCP_CONNECTION={0xc, 0xe, 0x0, 0x1, [@NL80211_WOWLAN_TCP_DATA_INTERVAL={0x8, 0x9, 0x80000000}]}, @NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x44, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_DISCONNECT={0x4}, @NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}, @NL80211_WOWLAN_TRIG_TCP_CONNECTION={0x1c, 0xe, 0x0, 0x1, [@NL80211_WOWLAN_TCP_DST_IPV4={0x8, 0x2, @multicast1}, @NL80211_WOWLAN_TCP_DATA_INTERVAL={0x8, 0x9, 0x5}, @NL80211_WOWLAN_TCP_SRC_PORT={0x6, 0x4, 0x523}]}, @NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}, @NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}, @NL80211_WOWLAN_TRIG_TCP_CONNECTION={0x14, 0xe, 0x0, 0x1, [@NL80211_WOWLAN_TCP_DATA_PAYLOAD_SEQ={0x10, 0x7, {0x2, 0x6, 0x4bd}}]}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x80, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}, @NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}, @NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}, @NL80211_WOWLAN_TRIG_DISCONNECT={0x4}, @NL80211_WOWLAN_TRIG_TCP_CONNECTION={0x6c, 0xe, 0x0, 0x1, [@NL80211_WOWLAN_TCP_WAKE_MASK={0x65, 0xb, "2b7fbcb6532051cf946e1ae002df55af3abc1c72f0fd99c9ea6dcdacd1238eaffd72981bf88401c03b714edaf5a33dc7317ad5a2cc0c72348a488b5f1f4c037bb3a3e8635be76d2601f83c9f281ea8362f8af45f9dcde1ad4826b63f4c54aaae36"}]}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x13ac, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}, @NL80211_WOWLAN_TRIG_ANY={0x4}, @NL80211_WOWLAN_TRIG_PKT_PATTERN={0x139c, 0x4, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_MASK={0x3b, 0x1, "c83d3d2f554653c43a35b017aa151d7fc0e3dd4bbba0fa47ce7a9bfee834db4f91d4a7c413f4363236c61b704ddf46b615c0d57b7e9f75"}]}, {0x120, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_PATTERN={0x3d, 0x2, "111c03188243925030fea1bd5f590d07aeccfa9bb532660390d267fbc96530c9e4f632e6db7e953fd9c28cbf98ce55f0c51552a2ad7587e74f"}, @NL80211_PKTPAT_PATTERN={0xd1, 0x2, "0058b8bfec7a51beb6bf4f3da97b4c91288208c65f8de00008a80195d3fbf98486a888c14a55135bfae803e74270029642e43f2685d71833c948a110c07f760f83d0e9f054d81906b33db943b5c212083f293f67769971855fe802d9126591b1197828931a50942ebf0cda88c205d9b03262ed4dfcff10cc5398de50a4276772c2965393d1e0c436b08882ce3da8ebaa1e914e6ef6cdcbffd8070ec7ebe8f2d8a2aeee21383aeef0ea1af0dc7630df4058cffc64a3da37b3fcd68ee1423bd91c942463f933e4b58d13e752bfa0"}, @NL80211_PKTPAT_OFFSET={0x8}]}, {0x1238, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x48000000}, @NL80211_PKTPAT_PATTERN={0x79, 0x2, "9f20fd088b9806cfe5de7c4a2a9a480a9d446e702bac5bd7e06952c6dea9c984d54dcce5fb499c7e90ae8c10b6df1a19a54379bb31c07b0fbb37562f9a0aa39796e326584cf1673a1ebb6611aedab096a143536198c296e88c913af907263b700aa7aa8e42e42c9e9a46a91ddf174978744a9e233d"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x5}, @NL80211_PKTPAT_MASK={0x6b, 0x1, "15cc6e36eb1890b31a7e9b8cb8abac50b4d623cb7de6d2febf4b3da173d3f4e2ef98ec9839209f43144f7e3be8a21a41249e4d06f5a95563f4cdf815a637e6941e2163960e8cef1ae73616a1593d3020df166c5d68c696160fb4357e930b64e54fa085c0e6e499"}, @NL80211_PKTPAT_PATTERN={0x1004, 0x2, "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"}, @NL80211_PKTPAT_OFFSET={0x8}, @NL80211_PKTPAT_PATTERN={0xcd, 0x2, "9baff0689fd431896ac2d0c640084561f9c2cee8c485277091def1a2588a0d9ac84a9fddaf5448b6adebb56ad86ae05e89fe7e7ac3caccbac66893b5329a3437455a405f4cd6a690e7634735a64c470f840ec23cdc903c754d810f4e3dca1c88b8bc3c139cdb9438e9b0ba331f0c690aa1ebafb9bf27308370db755b7626af3ae90b6949c598211cbf9cb369a021c9d639f3806e28f5d700bc432de34d5b499fea632d9025d829b9756862c7bcbf0ad5d6fc87d171ae10fa9fe363c134cb3a8ab97f1b7abe42d89f48"}, @NL80211_PKTPAT_PATTERN={0x4e, 0x2, "10fba2c2f820a0bfe6c832dc39fcfe0c37c1781a8f27f0e65b81b2cc5cbe87d891e80c3e9d2158acc4f543e74969ca4423ad2130c818b16e86ba809b9df4cb1e73bcebdc33c847cc234c"}, @NL80211_PKTPAT_OFFSET={0x8}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0xf}]}]}, @NL80211_WOWLAN_TRIG_ANY={0x4}]}]}, 0x4234}, 0x1, 0x0, 0x0, 0x8801}, 0x40045) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000004b80)=0x0) fcntl$lock(r0, 0x7, &(0x7f0000004bc0)={0x0, 0x2, 0x35fa, 0x6, r6}) (async) fcntl$lock(r0, 0x7, &(0x7f0000004bc0)={0x0, 0x2, 0x35fa, 0x6, r6}) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000004cc0)={&(0x7f0000004c00)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000004c80)={&(0x7f0000004c40)={0x14, 0x0, 0x2, 0x201, 0x0, 0x0, {0x5, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000004d00)={0x3, 0x6, 0x3}) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x13, r2, 0x6d71b000) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000004d40)={0x158b, 0x1, 0x0, 'queue1\x00', 0x2fa8}) ioctl$XFS_IOC_FSBULKSTAT(r1, 0xc0105865, &(0x7f00000053c0)={&(0x7f0000004e00)=0x3, 0x8, &(0x7f0000004e40)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f0000005380)}) (async) ioctl$XFS_IOC_FSBULKSTAT(r1, 0xc0105865, &(0x7f00000053c0)={&(0x7f0000004e00)=0x3, 0x8, &(0x7f0000004e40)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f0000005380)}) ioctl$KVM_CAP_HYPERV_SEND_IPI(r0, 0x4068aea3, &(0x7f0000005400)) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000055c0)={0x0, @in6={{0xa, 0x4e23, 0xa11, @local, 0x8}}}, &(0x7f0000005680)=0x84) 1.219328566s ago: executing program 1 (id=13260): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r1 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x800010, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="0011"]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000080)={0x50, 0x0, r2, {0x7, 0x29, 0x9, 0xffffffff90a4edc6, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x2c) syz_fuse_handle_req(r1, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fff2000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000236c52aef7bb4300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x0, 0x8000000000000, {0x0, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getdents64(r3, &(0x7f0000000100)=""/134, 0x86) close_range(r0, 0xffffffffffffffff, 0x0) 1.20516498s ago: executing program 5 (id=13261): bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="18640041fd3f000000000000070000008510"], &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) 1.155148242s ago: executing program 2 (id=13262): socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.033413782s ago: executing program 1 (id=13263): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_emit_ethernet(0x22, &(0x7f0000000000)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x42}, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0x0, 0xc84cf8fe4733a687, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0xc}}}}}}, 0x0) (fail_nth: 7) 975.96855ms ago: executing program 5 (id=13264): syz_emit_ethernet(0x56, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3286dd6018232500202c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa08020209"], 0x0) r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000040)="3a03000018002551075c0165ff0ffc02802000030004000500e1000c0400070080000900", 0x33a) syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="a8d18142778f", @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "182325", 0x10, 0x2c, 0x0, @remote, @local, {[@routing={0x89, 0x0, 0x2, 0x1}, @hopopts]}}}}}, 0x0) 974.840517ms ago: executing program 2 (id=13265): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket(0x2, 0x80805, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40001}, 0x881) getsockopt$bt_hci(r0, 0x84, 0x82, &(0x7f0000000000)=""/4087, &(0x7f0000001080)=0xff7) 316.42999ms ago: executing program 5 (id=13266): r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[], 0x1a000}}, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) close_range(r2, 0xffffffffffffffff, 0x0) 315.975272ms ago: executing program 1 (id=13267): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000940)={0x48, r1, 0x1, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x985}], @key_params=[@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}], @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x48}, 0x1, 0x0, 0x30000, 0x4040000}, 0x0) 85.175931ms ago: executing program 3 (id=13268): ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/vlan/vlan0\x00') preadv(r0, &(0x7f0000000300)=[{&(0x7f0000000000)=""/196, 0xc4}], 0x1, 0xa3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000002c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f00000000c0)=ANY=[], 0x6a) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0xab, 0x37, 0x94, 0x8, 0x1199, 0x28, 0xe525, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x2, 0x1, 0xf0, 0x0, 0x4, "", [{{0x9, 0x4, 0x36, 0x7, 0x0, 0xe4, 0xd2, 0xc3, 0x1}}, {{0x9, 0x4, 0x36, 0x1, 0x0, 0x2f, 0x5c, 0xa3, 0x5}}]}}]}}, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0}) 55.340527ms ago: executing program 1 (id=13269): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'lo\x00'}) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x9, &(0x7f00000000c0)=0x1, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@ipv4_newroute={0x38, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1500}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_GENEVE={0xc, 0x2, 0x0, 0x1, @LWTUNNEL_IP_OPT_GENEVE_TYPE={0x5}}}}]}, 0x38}}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={0x0}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r6 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) 0s ago: executing program 5 (id=13270): close(0xffffffffffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000c80)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x6}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0x0, 0x40}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0xfff1, 0xb}, {0x9, 0x3}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_MEMORY_LIMIT={0x8, 0x9, 0xd}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40040a1}, 0x4890) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r7, 0x103e}, 0x80, &(0x7f0000000080)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1}, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'veth1_to_hsr\x00'}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = socket$packet(0x11, 0x3, 0x300) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)={0x2, 0x16, 0x5, 0x5, 0xa, 0x0, 0x70bd25, 0x25dfdbfd, [@sadb_x_policy={0x8, 0x12, 0x1, 0x4, 0x0, 0x0, 0x0, {0x6, 0x2b, 0x7, 0xf9, 0x0, 0x6, 0x0, @in6=@remote, @in=@private=0xa010102}}]}, 0x50}}, 0x4c040) setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r8, &(0x7f00000002c0)="0503e5fdd3fc14e803004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x8100, r10, 0x1, 0x0, 0x6, @multicast}, 0x14) kernel console output (not intermixed with test programs): 000000 [ 2548.875510][T15578] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2548.875539][T15578] [ 2549.032029][T15578] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2549.134971][ T2134] usb 4-1: Using ep0 maxpacket: 32 [ 2549.357746][ T10] usb 6-1: string descriptor 0 read error: -22 [ 2549.375724][ T2134] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 2549.518112][ T2134] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 2549.542762][ T2134] usb 4-1: config 0 has no interface number 0 [ 2549.562462][ T2134] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2549.563086][T15578] binder: 15577:15578 ioctl c0306201 80000040 returned -14 [ 2549.571681][ T2134] usb 4-1: Product: syz [ 2549.582631][ T2134] usb 4-1: Manufacturer: syz [ 2549.583284][ T10] uclogic 0003:256C:006D.007F: failed retrieving string descriptor #200: -71 [ 2549.623185][ T10] uclogic 0003:256C:006D.007F: failed retrieving pen parameters: -71 [ 2549.642931][ T10] uclogic 0003:256C:006D.007F: failed probing pen v2 parameters: -71 [ 2549.676508][ T10] uclogic 0003:256C:006D.007F: failed probing parameters: -71 [ 2549.688481][ T2134] usb 4-1: SerialNumber: syz [ 2549.704523][ T10] uclogic 0003:256C:006D.007F: probe with driver uclogic failed with error -71 [ 2549.755477][ T2134] usb 4-1: config 0 descriptor?? [ 2549.765457][ T10] usb 6-1: USB disconnect, device number 99 [ 2549.870445][T15586] syz_tun: entered promiscuous mode [ 2549.876386][T15586] macvtap1: entered promiscuous mode [ 2549.876568][T15586] macvtap1: entered allmulticast mode [ 2550.195581][ T2134] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 2550.218730][ T2134] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 2550.261807][T15606] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12690'. [ 2550.300219][T15604] binder: 15602:15604 ioctl c0306201 80000040 returned -14 [ 2551.114268][T15616] netlink: 40 bytes leftover after parsing attributes in process `syz.6.12693'. [ 2552.226553][ T1326] lwtunnel_output(): recursion limit reached on datapath [ 2552.293450][ T2134] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000006c: -61 [ 2552.314232][ T2134] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -61 [ 2552.584955][ T10] usb 3-1: new full-speed USB device number 32 using dummy_hcd [ 2552.775125][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2552.786220][ T10] usb 3-1: not running at top speed; connect to a high speed hub [ 2552.796797][ T10] usb 3-1: New USB device found, idVendor=18d1, idProduct=2d04, bcdDevice= 0.40 [ 2552.825018][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2552.837248][ T10] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 2552.868325][T12268] lwtunnel_output(): recursion limit reached on datapath [ 2552.878671][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2552.891703][ T10] usb 3-1: Product: syz [ 2552.903531][ T10] usb 3-1: Manufacturer: syz [ 2552.908482][ T10] usb 3-1: SerialNumber: syz [ 2552.918815][T15645] netlink: 'syz.3.12678': attribute type 5 has an invalid length. [ 2552.988521][T15648] FAULT_INJECTION: forcing a failure. [ 2552.988521][T15648] name failslab, interval 1, probability 0, space 9, times 0 [ 2553.005752][T15648] CPU: 1 UID: 0 PID: 15648 Comm: syz.1.12703 Tainted: G L syzkaller #0 PREEMPT(full) [ 2553.005786][T15648] Tainted: [L]=SOFTLOCKUP [ 2553.005794][T15648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2553.005807][T15648] Call Trace: [ 2553.005816][T15648] [ 2553.005825][T15648] dump_stack_lvl+0xe8/0x150 [ 2553.005869][T15648] should_fail_ex+0x410/0x560 [ 2553.005901][T15648] should_failslab+0xa8/0x100 [ 2553.005932][T15648] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 2553.005957][T15648] ? do_getname+0x2e/0x250 [ 2553.005980][T15648] ? do_getname+0x2e/0x250 [ 2553.006005][T15648] ? __mutex_unlock_slowpath+0x731/0x900 [ 2553.006033][T15648] do_getname+0x2e/0x250 [ 2553.006055][T15648] ? getname_flags+0x11/0x20 [ 2553.006082][T15648] do_sys_openat2+0xcc/0x200 [ 2553.006110][T15648] ? __pfx_do_sys_openat2+0x10/0x10 [ 2553.006138][T15648] ? ksys_write+0x242/0x270 [ 2553.006174][T15648] __ia32_sys_creat+0x8f/0xc0 [ 2553.006204][T15648] __do_fast_syscall_32+0x27a/0x6a0 [ 2553.006228][T15648] ? do_fast_syscall_32+0x33/0x70 [ 2553.006250][T15648] ? asm_int80_emulation+0x1a/0x20 [ 2553.006269][T15648] ? do_int80_emulation+0x299/0x500 [ 2553.006290][T15648] ? trace_irq_disable+0x3b/0x140 [ 2553.006320][T15648] do_fast_syscall_32+0x33/0x70 [ 2553.006343][T15648] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2553.006368][T15648] RIP: 0023:0xf7fa90ec [ 2553.006387][T15648] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 2553.006404][T15648] RSP: 002b:00000000f544550c EFLAGS: 00000206 ORIG_RAX: 0000000000000008 [ 2553.006426][T15648] RAX: ffffffffffffffda RBX: 0000000080000080 RCX: 0000000000000001 [ 2553.006440][T15648] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2553.006452][T15648] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2553.006464][T15648] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2553.006476][T15648] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2553.006505][T15648] [ 2553.533635][T21325] usb 4-1: USB disconnect, device number 119 [ 2554.566256][T15672] FAULT_INJECTION: forcing a failure. [ 2554.566256][T15672] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2554.668812][T15672] CPU: 0 UID: 0 PID: 15672 Comm: syz.5.12712 Tainted: G L syzkaller #0 PREEMPT(full) [ 2554.668848][T15672] Tainted: [L]=SOFTLOCKUP [ 2554.668856][T15672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2554.668868][T15672] Call Trace: [ 2554.668876][T15672] [ 2554.668886][T15672] dump_stack_lvl+0xe8/0x150 [ 2554.668927][T15672] should_fail_ex+0x410/0x560 [ 2554.668961][T15672] _copy_to_user+0x31/0xb0 [ 2554.669000][T15672] simple_read_from_buffer+0xe1/0x170 [ 2554.669036][T15672] proc_fail_nth_read+0x1bb/0x230 [ 2554.669061][T15672] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2554.669086][T15672] ? rw_verify_area+0x24a/0x4c0 [ 2554.669118][T15672] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2554.669138][T15672] vfs_read+0x213/0xa80 [ 2554.669172][T15672] ? __pfx___mutex_lock+0x10/0x10 [ 2554.669197][T15672] ? __pfx_vfs_read+0x10/0x10 [ 2554.669229][T15672] ? __fget_files+0x2a/0x420 [ 2554.669260][T15672] ? __fget_files+0x3a2/0x420 [ 2554.669286][T15672] ? __fget_files+0x2a/0x420 [ 2554.669323][T15672] ksys_read+0x150/0x270 [ 2554.669354][T15672] ? __pfx_ksys_read+0x10/0x10 [ 2554.669378][T15672] ? asm_int80_emulation+0x1a/0x20 [ 2554.669394][T15672] do_int80_emulation+0x198/0x500 [ 2554.669408][T15672] ? asm_int80_emulation+0x1a/0x20 [ 2554.669420][T15672] ? clear_bhb_loop+0x70/0xc0 [ 2554.669432][T15672] ? clear_bhb_loop+0x70/0xc0 [ 2554.669447][T15672] asm_int80_emulation+0x1a/0x20 [ 2554.669459][T15672] RIP: 0023:0xf71974eb [ 2554.669472][T15672] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 2554.669484][T15672] RSP: 002b:00000000f54354bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 2554.669503][T15672] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000f54355d0 [ 2554.669512][T15672] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 2554.669520][T15672] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2554.669528][T15672] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2554.669535][T15672] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2554.669553][T15672] [ 2555.374891][ T10] usb 3-1: 1:1 : no or invalid class specific endpoint descriptor [ 2555.401686][ T10] usb 3-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 2555.516403][ T10] usb 3-1: unit 2 not found! [ 2555.530094][ T10] usb 3-1: unit 8 not found! [ 2555.677614][ T10] usb 3-1: USB disconnect, device number 32 [ 2555.775686][T21325] usb 6-1: new high-speed USB device number 100 using dummy_hcd [ 2555.967954][T21325] usb 6-1: Using ep0 maxpacket: 32 [ 2555.992908][T21325] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 2556.025564][T21325] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 2556.042468][T21325] usb 6-1: config 0 has no interface number 0 [ 2556.071355][T21325] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2556.099906][T21325] usb 6-1: Product: syz [ 2556.113234][T21325] usb 6-1: Manufacturer: syz [ 2556.132184][T21325] usb 6-1: SerialNumber: syz [ 2556.154934][T21325] usb 6-1: config 0 descriptor?? [ 2556.197398][T15694] FAULT_INJECTION: forcing a failure. [ 2556.197398][T15694] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2556.211919][T15694] CPU: 0 UID: 0 PID: 15694 Comm: syz.2.12720 Tainted: G L syzkaller #0 PREEMPT(full) [ 2556.211958][T15694] Tainted: [L]=SOFTLOCKUP [ 2556.211966][T15694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2556.211979][T15694] Call Trace: [ 2556.211988][T15694] [ 2556.211997][T15694] dump_stack_lvl+0xe8/0x150 [ 2556.212035][T15694] should_fail_ex+0x410/0x560 [ 2556.212067][T15694] _copy_from_user+0x2d/0xb0 [ 2556.212097][T15694] kcmp_epoll_target+0xa6/0x1f0 [ 2556.212126][T15694] ? __pfx_kcmp_epoll_target+0x10/0x10 [ 2556.212167][T15694] __se_sys_kcmp+0x668/0x8f0 [ 2556.212204][T15694] __do_fast_syscall_32+0x27a/0x6a0 [ 2556.212231][T15694] ? do_fast_syscall_32+0x33/0x70 [ 2556.212253][T15694] ? asm_int80_emulation+0x1a/0x20 [ 2556.212273][T15694] ? do_int80_emulation+0x299/0x500 [ 2556.212294][T15694] ? trace_irq_disable+0x3b/0x140 [ 2556.212326][T15694] do_fast_syscall_32+0x33/0x70 [ 2556.212350][T15694] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2556.212384][T15694] RIP: 0023:0xf704f0ec [ 2556.212404][T15694] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 2556.212422][T15694] RSP: 002b:00000000f543d50c EFLAGS: 00000206 ORIG_RAX: 000000000000015d [ 2556.212446][T15694] RAX: ffffffffffffffda RBX: 000000000000027a RCX: 000000000000027b [ 2556.212460][T15694] RDX: 0000000000000007 RSI: 0000000000000003 RDI: 0000000080000040 [ 2556.212474][T15694] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2556.212486][T15694] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2556.212499][T15694] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2556.212531][T15694] [ 2556.588905][T21325] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 2556.601166][T21325] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 2557.499273][T15719] fuse: Bad value for 'rootmode' [ 2557.607222][T15720] bridge0: port 2(bridge_slave_1) entered listening state [ 2557.617924][T15720] bridge0: port 2(bridge_slave_1) entered disabled state [ 2557.987736][ T1326] lwtunnel_output(): recursion limit reached on datapath [ 2558.626905][T13687] lwtunnel_output(): recursion limit reached on datapath [ 2558.643855][T21325] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000006c: -61 [ 2558.657639][T21325] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -61 [ 2558.815155][ T10] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 2558.950728][T12290] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2558.970885][T12290] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2558.987603][T12290] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2558.997822][T12290] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2559.005839][ T10] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2559.017083][T12290] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2559.036094][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2559.047511][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2559.054236][ T4927] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2559.068472][ T4927] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2559.072321][ T10] usb 4-1: config 0 descriptor?? [ 2559.076592][ T4927] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2559.092992][ T4927] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2559.107489][ T4927] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2559.146430][T12563] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 2559.238125][T15747] netlink: 'syz.5.12716': attribute type 5 has an invalid length. [ 2559.305757][ T10] usbhid 4-1:0.0: can't add hid device: -71 [ 2559.318807][ T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 2559.336008][T12563] usb 3-1: Using ep0 maxpacket: 16 [ 2559.337016][ T10] usb 4-1: USB disconnect, device number 120 [ 2559.343145][T12563] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 2559.383661][T12563] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2559.396204][T12563] usb 3-1: config 0 interface 0 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2559.412933][T12563] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2559.421360][T10534] syz_tun (unregistering): left allmulticast mode [ 2559.428668][T12563] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2559.445367][T12563] usb 3-1: config 0 descriptor?? [ 2559.458770][T12563] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 2559.612310][T12268] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2559.720623][T12268] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2559.818103][T12563] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 2559.846194][T12268] bond0: (slave netdevsim1): Releasing backup interface [ 2559.856803][T12268] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2559.910549][T15746] bridge0: port 1(bridge_slave_0) entered blocking state [ 2559.917849][T15746] bridge0: port 1(bridge_slave_0) entered disabled state [ 2559.930988][T15746] bridge_slave_0: entered allmulticast mode [ 2559.939257][T15746] bridge_slave_0: entered promiscuous mode [ 2559.948185][T15746] bridge0: port 2(bridge_slave_1) entered blocking state [ 2559.955886][T15746] bridge0: port 2(bridge_slave_1) entered disabled state [ 2559.963234][T15746] bridge_slave_1: entered allmulticast mode [ 2559.971445][T15746] bridge_slave_1: entered promiscuous mode [ 2559.999410][T12563] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 2560.013437][T12268] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2560.026697][T12563] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2560.049705][T15756] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2560.050101][T12563] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2560.074695][T15756] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2560.076194][T12563] usb 4-1: config 0 descriptor?? [ 2560.138726][T15744] input: syz1 as /devices/virtual/input/input118 [ 2560.171405][T15746] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2560.189193][T15746] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2560.378297][ T10] usb 6-1: USB disconnect, device number 100 [ 2560.483315][T15746] team0: Port device team_slave_0 added [ 2560.530471][T15735] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2560.573748][T15735] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2560.598177][T15762] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2560.658539][T15746] team0: Port device team_slave_1 added [ 2560.686434][T15762] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2560.843536][T12757] usb 3-1: USB disconnect, device number 33 [ 2560.887613][T15746] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2560.898003][T15746] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2560.928898][ T10] usb 6-1: new high-speed USB device number 101 using dummy_hcd [ 2560.954279][T15746] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2560.975277][T15746] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2560.984996][T15746] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2561.030070][T15746] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2561.056974][T12563] aiptek 4-1:0.0: Aiptek using 400 ms programming speed [ 2561.068155][T12563] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input117 [ 2561.116616][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 2561.133627][ T10] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2561.185080][T12290] Bluetooth: hci1: command tx timeout [ 2561.218534][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2561.246282][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2561.259212][ T10] usb 6-1: config 0 descriptor?? [ 2561.307493][T12268] bridge_slave_1: left allmulticast mode [ 2561.319698][T12268] bridge_slave_1: left promiscuous mode [ 2561.331532][T12268] bridge0: port 2(bridge_slave_1) entered disabled state [ 2561.349885][T12268] bridge_slave_0: left allmulticast mode [ 2561.355924][T12268] bridge_slave_0: left promiscuous mode [ 2561.361839][T12268] bridge0: port 1(bridge_slave_0) entered disabled state [ 2561.478658][T12563] usb 4-1: USB disconnect, device number 121 [ 2561.484774][ C1] aiptek 4-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 2561.485868][ T10] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 2561.561380][ T10] usb 6-1: USB disconnect, device number 101 [ 2561.852755][T12268] erspan0 (unregistering): left promiscuous mode [ 2561.983850][T12268] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2562.022612][T12268] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2562.107338][T12268] bond0 (unregistering): (slave wlan0): Releasing backup interface [ 2562.122107][T12268] bond0 (unregistering): Released all slaves [ 2562.148147][T12268] bond1 (unregistering): Released all slaves [ 2562.173353][T12268] bond2 (unregistering): Released all slaves [ 2562.204054][ T5273] 8021q: adding VLAN 0 to HW filter on device eth5 [ 2562.417577][T15746] hsr_slave_0: entered promiscuous mode [ 2562.450427][T15746] hsr_slave_1: entered promiscuous mode [ 2562.488589][T15746] debugfs: 'hsr0' already exists in 'hsr' [ 2562.494494][T15746] Cannot create hsr debugfs directory [ 2563.265622][T12290] Bluetooth: hci1: command tx timeout [ 2563.667214][T13806] lwtunnel_output(): recursion limit reached on datapath [ 2563.746528][T12276] lwtunnel_output(): recursion limit reached on datapath [ 2564.317953][T12268] dummy0: left promiscuous mode [ 2564.345374][T12268] hsr_slave_0: left promiscuous mode [ 2564.354400][T12268] hsr_slave_1: left promiscuous mode [ 2564.389218][T12757] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 2564.574905][T12757] usb 4-1: Using ep0 maxpacket: 16 [ 2564.610235][T12757] usb 4-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 2564.651675][T12757] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2564.693793][T12757] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2564.740419][T12757] usb 4-1: config 0 descriptor?? [ 2564.775685][T12268] team0 (unregistering): Port device team_slave_1 removed [ 2564.799158][T12268] team0 (unregistering): Port device team_slave_0 removed [ 2564.965133][ T1891] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 2564.985451][T15823] netlink: 44 bytes leftover after parsing attributes in process `syz.3.12752'. [ 2565.157798][ T1891] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2565.198479][ T1891] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2565.222389][ T1891] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 2565.249570][ T1891] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2565.288312][ T1891] usb 3-1: Product: syz [ 2565.301468][ T1891] usb 3-1: Manufacturer: syz [ 2565.307058][ T1891] usb 3-1: SerialNumber: syz [ 2565.345014][T12290] Bluetooth: hci1: command tx timeout [ 2565.360253][ T1891] cdc_mbim 3-1:1.0: skipping garbage [ 2565.559212][T15830] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 2565.982635][ T1891] cdc_mbim 3-1:1.0: bind() failure [ 2566.018493][ T1891] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 2566.028443][ T1891] cdc_ncm 3-1:1.1: bind() failure [ 2566.060073][ T1891] usb 3-1: USB disconnect, device number 34 [ 2566.515031][ T1891] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 2566.620882][T15746] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 2566.659543][T15746] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2566.669045][T15746] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 2566.680766][T15746] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2566.695134][ T1891] usb 3-1: Using ep0 maxpacket: 8 [ 2566.697996][T15746] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 2566.722068][ T1891] usb 3-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 2566.748147][ T1891] usb 3-1: config 0 has an invalid interface number: 255 but max is 0 [ 2566.767000][ T1891] usb 3-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 2566.769910][T15746] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 2566.803740][ T1891] usb 3-1: config 0 has no interface number 0 [ 2566.819529][T12757] usbhid 4-1:0.0: can't add hid device: -71 [ 2566.834742][ T1891] usb 3-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 2566.846568][T12757] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 2566.870100][T15746] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 2566.875798][ T1891] usb 3-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 2566.893586][T12757] usb 4-1: USB disconnect, device number 122 [ 2566.930376][ T1891] usb 3-1: config 0 interface 255 has no altsetting 0 [ 2566.951149][T15746] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2566.957930][ T1891] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2567.003573][T15858] netlink: 16 bytes leftover after parsing attributes in process `syz.3.12759'. [ 2567.015843][T15857] netlink: 20 bytes leftover after parsing attributes in process `syz.5.12758'. [ 2567.029890][ T1891] usb 3-1: Product: syz [ 2567.038005][ T1891] usb 3-1: Manufacturer: syz [ 2567.049015][ T1891] usb 3-1: SerialNumber: syz [ 2567.065381][ T1891] usb 3-1: config 0 descriptor?? [ 2567.382814][T15746] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2567.415213][ T2134] usb 6-1: new high-speed USB device number 102 using dummy_hcd [ 2567.425009][T12290] Bluetooth: hci1: command tx timeout [ 2567.444342][T12276] IPVS: starting estimator thread 0... [ 2567.474417][T15746] 8021q: adding VLAN 0 to HW filter on device team0 [ 2567.543531][T12268] bridge0: port 1(bridge_slave_0) entered blocking state [ 2567.550762][T12268] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2567.561746][T15876] IPVS: using max 49 ests per chain, 117600 per kthread [ 2567.605873][ T2134] usb 6-1: Using ep0 maxpacket: 16 [ 2567.619604][T12268] bridge0: port 2(bridge_slave_1) entered blocking state [ 2567.626818][T12268] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2567.650452][ T2134] usb 6-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 2567.696782][ T2134] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2567.742236][ T2134] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2567.796613][ T2134] usb 6-1: config 0 descriptor?? [ 2567.997274][T15746] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2568.280649][T15746] veth0_vlan: entered promiscuous mode [ 2568.333976][T15746] veth1_vlan: entered promiscuous mode [ 2568.462379][T15746] veth0_macvtap: entered promiscuous mode [ 2568.497817][T15746] veth1_macvtap: entered promiscuous mode [ 2568.576504][T15746] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2568.620266][T15746] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2568.705878][T13681] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2568.786614][T13687] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2568.888081][ T1326] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2568.901798][T13687] lwtunnel_output(): recursion limit reached on datapath [ 2568.947118][ T1326] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2569.239795][T12276] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2569.279976][T12276] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2569.371329][ T1891] usb 3-1: USB disconnect, device number 35 [ 2569.439279][T12276] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2569.471470][T12276] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2569.506584][T13687] lwtunnel_output(): recursion limit reached on datapath [ 2569.928898][ T2134] usbhid 6-1:0.0: can't add hid device: -71 [ 2569.955478][ T2134] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 2570.006555][ T2134] usb 6-1: USB disconnect, device number 102 [ 2570.454929][ T2134] usb 6-1: new high-speed USB device number 103 using dummy_hcd [ 2570.626700][ T2134] usb 6-1: Using ep0 maxpacket: 32 [ 2570.640878][ T2134] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 2570.664257][ T2134] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 2570.675088][ T2134] usb 6-1: config 0 has no interface number 0 [ 2570.684128][ T2134] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2570.694724][ T2134] usb 6-1: Product: syz [ 2570.700059][ T2134] usb 6-1: Manufacturer: syz [ 2570.706743][ T2134] usb 6-1: SerialNumber: syz [ 2570.726051][ T2134] usb 6-1: config 0 descriptor?? [ 2570.780798][T15945] FAULT_INJECTION: forcing a failure. [ 2570.780798][T15945] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2570.815426][T15945] CPU: 0 UID: 0 PID: 15945 Comm: syz.1.12777 Tainted: G L syzkaller #0 PREEMPT(full) [ 2570.815462][T15945] Tainted: [L]=SOFTLOCKUP [ 2570.815471][T15945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2570.815484][T15945] Call Trace: [ 2570.815492][T15945] [ 2570.815502][T15945] dump_stack_lvl+0xe8/0x150 [ 2570.815539][T15945] should_fail_ex+0x410/0x560 [ 2570.815571][T15945] _copy_from_user+0x2d/0xb0 [ 2570.815602][T15945] __sys_bpf+0x2e7/0xd90 [ 2570.815642][T15945] ? __pfx___sys_bpf+0x10/0x10 [ 2570.815675][T15945] ? ksys_write+0x1e6/0x270 [ 2570.815709][T15945] ? __mutex_unlock_slowpath+0x731/0x900 [ 2570.815753][T15945] ? fput+0xa0/0xd0 [ 2570.815779][T15945] ? ksys_write+0x242/0x270 [ 2570.815816][T15945] __ia32_sys_bpf+0xba/0xd0 [ 2570.815847][T15945] __do_fast_syscall_32+0x27a/0x6a0 [ 2570.815873][T15945] ? do_fast_syscall_32+0x33/0x70 [ 2570.815896][T15945] ? asm_int80_emulation+0x1a/0x20 [ 2570.815916][T15945] ? do_int80_emulation+0x299/0x500 [ 2570.815943][T15945] do_fast_syscall_32+0x33/0x70 [ 2570.815967][T15945] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2570.815992][T15945] RIP: 0023:0xf7fa90ec [ 2570.816012][T15945] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 2570.816029][T15945] RSP: 002b:00000000f546650c EFLAGS: 00000206 ORIG_RAX: 0000000000000165 [ 2570.816053][T15945] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000340 [ 2570.816068][T15945] RDX: 0000000000000094 RSI: 0000000000000000 RDI: 0000000000000000 [ 2570.816082][T15945] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2570.816095][T15945] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2570.816108][T15945] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2570.816140][T15945] [ 2571.140099][ T2134] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 2571.171811][ T2134] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 2571.767247][T15967] FAULT_INJECTION: forcing a failure. [ 2571.767247][T15967] name failslab, interval 1, probability 0, space 9, times 0 [ 2571.784230][T15967] CPU: 0 UID: 0 PID: 15967 Comm: syz.1.12786 Tainted: G L syzkaller #0 PREEMPT(full) [ 2571.784265][T15967] Tainted: [L]=SOFTLOCKUP [ 2571.784272][T15967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2571.784284][T15967] Call Trace: [ 2571.784293][T15967] [ 2571.784302][T15967] dump_stack_lvl+0xe8/0x150 [ 2571.784338][T15967] should_fail_ex+0x410/0x560 [ 2571.784370][T15967] should_failslab+0xa8/0x100 [ 2571.784401][T15967] __kmalloc_cache_noprof+0xa8/0x660 [ 2571.784426][T15967] ? xfrm_lookup_with_ifid+0x180f/0x1b40 [ 2571.784449][T15967] ? ip6_setup_cork+0x613/0xf60 [ 2571.784472][T15967] ? ip6_setup_cork+0x613/0xf60 [ 2571.784501][T15967] ip6_setup_cork+0x613/0xf60 [ 2571.784524][T15967] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 2571.784556][T15967] ip6_append_data+0x175/0x270 [ 2571.784580][T15967] ? __pfx_raw6_getfrag+0x10/0x10 [ 2571.784609][T15967] rawv6_sendmsg+0x1298/0x18c0 [ 2571.784651][T15967] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 2571.784713][T15967] ? sock_rps_record_flow+0x19/0x350 [ 2571.784749][T15967] ? inet_sendmsg+0x298/0x320 [ 2571.784781][T15967] ? __pfx_inet_sendmsg+0x10/0x10 [ 2571.784814][T15967] sock_sendmsg_nosec+0x10e/0x180 [ 2571.784841][T15967] __sys_sendto+0x408/0x5a0 [ 2571.784873][T15967] ? __pfx___sys_sendto+0x10/0x10 [ 2571.784910][T15967] ? __fget_files+0x3a2/0x420 [ 2571.784950][T15967] ? ksys_write+0x242/0x270 [ 2571.784987][T15967] __ia32_sys_sendto+0xdd/0x100 [ 2571.785017][T15967] __do_fast_syscall_32+0x27a/0x6a0 [ 2571.785042][T15967] ? do_fast_syscall_32+0x33/0x70 [ 2571.785064][T15967] ? asm_int80_emulation+0x1a/0x20 [ 2571.785094][T15967] ? do_int80_emulation+0x299/0x500 [ 2571.785115][T15967] ? trace_irq_disable+0x3b/0x140 [ 2571.785145][T15967] do_fast_syscall_32+0x33/0x70 [ 2571.785168][T15967] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2571.785193][T15967] RIP: 0023:0xf7fa90ec [ 2571.785211][T15967] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 2571.785229][T15967] RSP: 002b:00000000f546650c EFLAGS: 00000206 ORIG_RAX: 0000000000000171 [ 2571.785252][T15967] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000a80 [ 2571.785268][T15967] RDX: 0000000000000018 RSI: 0000000004000000 RDI: 0000000000000000 [ 2571.785281][T15967] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2571.785293][T15967] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2571.785305][T15967] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2571.785337][T15967] [ 2572.181746][T12756] hid-generic 0000:0000:0001.0080: unknown main item tag 0x0 [ 2572.191049][T12756] hid-generic 0000:0000:0001.0080: unknown main item tag 0x0 [ 2572.198564][T12756] hid-generic 0000:0000:0001.0080: unknown main item tag 0x0 [ 2572.206087][T12756] hid-generic 0000:0000:0001.0080: unknown main item tag 0x0 [ 2572.213509][T12756] hid-generic 0000:0000:0001.0080: unknown main item tag 0x0 [ 2572.221173][T12756] hid-generic 0000:0000:0001.0080: unknown main item tag 0x0 [ 2572.229311][T12756] hid-generic 0000:0000:0001.0080: unknown main item tag 0x0 [ 2572.236884][T12756] hid-generic 0000:0000:0001.0080: unknown main item tag 0x0 [ 2572.247618][T12756] hid-generic 0000:0000:0001.0080: hidraw0: HID v0.10 Device [syz0] on syz1 [ 2572.590618][T15975] fido_id[15975]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 2573.234076][ T2134] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000006c: -61 [ 2573.263605][ T2134] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -61 [ 2573.652840][T15991] openvswitch: netlink: Missing key (keys=c0, expected=500) [ 2573.832549][T15998] netlink: 'syz.5.12769': attribute type 5 has an invalid length. [ 2574.514061][T16015] netlink: 12 bytes leftover after parsing attributes in process `syz.6.12803'. [ 2574.535397][T16015] netlink: 12 bytes leftover after parsing attributes in process `syz.6.12803'. [ 2574.627610][ T1326] lwtunnel_output(): recursion limit reached on datapath [ 2574.912889][ T1891] usb 6-1: USB disconnect, device number 103 [ 2575.002569][ T29] audit: type=1326 audit(1787304879.273:4204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16026 comm="syz.5.12809" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f930ec code=0x0 [ 2575.054938][T12757] usb 3-1: new full-speed USB device number 36 using dummy_hcd [ 2575.235723][T12757] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2575.246195][T12757] usb 3-1: config 1 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 2575.258278][T12757] usb 3-1: config 1 interface 0 altsetting 6 endpoint 0x82 has invalid maxpacket 2038, setting to 64 [ 2575.277188][T13681] lwtunnel_output(): recursion limit reached on datapath [ 2575.294914][T12757] usb 3-1: config 1 interface 0 altsetting 6 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 2575.308287][T12757] usb 3-1: config 1 interface 0 has no altsetting 0 [ 2575.318749][T12757] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2575.328155][T12757] usb 3-1: Product: syz [ 2575.332426][T12757] usb 3-1: Manufacturer: syz [ 2575.337358][T12757] usb 3-1: SerialNumber: syz [ 2575.347692][T16024] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 2575.355414][T16024] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 2575.362780][T16024] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 2575.634527][T16035] netlink: 'syz.6.12811': attribute type 1 has an invalid length. [ 2575.645569][T16036] netlink: 24 bytes leftover after parsing attributes in process `syz.3.12812'. [ 2575.661168][T16035] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2576.604953][T12563] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 2576.775056][T12563] usb 4-1: Using ep0 maxpacket: 32 [ 2576.792571][T12563] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 2576.818580][T12563] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 2576.832705][T12563] usb 4-1: config 0 has no interface number 0 [ 2576.843053][T12563] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2576.853269][T12563] usb 4-1: Product: syz [ 2576.859861][T12563] usb 4-1: Manufacturer: syz [ 2576.864749][T12563] usb 4-1: SerialNumber: syz [ 2576.882175][T12563] usb 4-1: config 0 descriptor?? [ 2576.924718][T16059] syz_tun: entered allmulticast mode [ 2576.938589][T16059] netlink: 24 bytes leftover after parsing attributes in process `syz.6.12823'. [ 2576.962829][T16058] syz_tun: left allmulticast mode [ 2577.227017][ T29] audit: type=1326 audit(1787304881.503:4205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16065 comm="syz.6.12825" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f770ec code=0x0 [ 2577.300899][T12563] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 2577.328054][T12563] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 2577.828650][T12757] usb 3-1: No union descriptors [ 2577.897221][T12757] usb 3-1: USB disconnect, device number 36 [ 2578.594394][T16088] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12834'. [ 2578.638585][T16092] netlink: 'syz.5.12833': attribute type 1 has an invalid length. [ 2578.677942][T16092] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2579.445495][T12563] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000006c: -61 [ 2579.477868][T12563] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -61 [ 2579.750329][T13687] lwtunnel_output(): recursion limit reached on datapath [ 2579.752098][T16108] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12841'. [ 2580.016687][T16118] netlink: 'syz.3.12819': attribute type 5 has an invalid length. [ 2580.522419][T16138] netlink: 'syz.6.12851': attribute type 1 has an invalid length. [ 2580.563907][T16138] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2581.027487][T13687] lwtunnel_output(): recursion limit reached on datapath [ 2581.162026][ T2134] usb 4-1: USB disconnect, device number 123 [ 2581.985717][ T2134] usb 6-1: new high-speed USB device number 104 using dummy_hcd [ 2582.165403][ T2134] usb 6-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice= 0.40 [ 2582.198371][ T2134] usb 6-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2582.224627][ T2134] usb 6-1: config 1 interface 0 has no altsetting 0 [ 2582.247237][ T2134] usb 6-1: string descriptor 0 read error: -22 [ 2582.265115][ T2134] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2582.399878][ T29] audit: type=1326 audit(1787304886.673:4206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16163 comm="syz.3.12866" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf6fdf0ec code=0x0 [ 2582.749352][T16148] macvtap15: entered promiscuous mode [ 2582.769992][T16148] macvtap15: entered allmulticast mode [ 2582.784174][T16180] netlink: 'syz.2.12870': attribute type 1 has an invalid length. [ 2582.831131][ T2134] usbhid 6-1:1.0: can't add hid device: -71 [ 2582.863838][ T2134] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 2582.901677][ T2134] usb 6-1: USB disconnect, device number 104 [ 2584.191777][ T29] audit: type=1326 audit(1787304888.463:4207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16211 comm="syz.6.12881" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f770ec code=0x0 [ 2584.245372][T16210] netlink: 'syz.5.12888': attribute type 1 has an invalid length. [ 2584.665076][T12563] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 2584.828090][T12563] usb 3-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice= 0.40 [ 2584.842171][T12563] usb 3-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2584.857175][T12563] usb 3-1: config 1 interface 0 has no altsetting 0 [ 2584.871384][ T1326] lwtunnel_output(): recursion limit reached on datapath [ 2584.875011][T12563] usb 3-1: string descriptor 0 read error: -22 [ 2584.902587][T12563] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2585.642417][T16217] macvtap7: entered promiscuous mode [ 2585.699205][T16217] macvtap7: entered allmulticast mode [ 2585.801435][T12563] usbhid 3-1:1.0: can't add hid device: -71 [ 2585.844402][T12563] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 2585.917148][T12563] usb 3-1: USB disconnect, device number 37 [ 2586.067897][T13681] lwtunnel_output(): recursion limit reached on datapath [ 2586.468723][ T4927] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2586.489561][ T4927] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2586.503746][ T4927] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2586.515880][ T4927] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2586.517340][ T4927] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2587.142381][ T29] audit: type=1326 audit(1787304891.413:4208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16255 comm="syz.6.12896" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f770ec code=0x0 [ 2587.229359][ T9984] syz_tun (unregistering): left allmulticast mode [ 2588.245896][T12756] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 2588.435520][T12756] usb 4-1: Using ep0 maxpacket: 32 [ 2588.447602][T12756] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 2588.452178][T16270] netlink: 'syz.6.12899': attribute type 1 has an invalid length. [ 2588.470033][T12756] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 2588.508837][T12756] usb 4-1: config 0 has no interface number 0 [ 2588.580719][T12756] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2588.595187][T12756] usb 4-1: Product: syz [ 2588.599648][T12756] usb 4-1: Manufacturer: syz [ 2588.604314][T12756] usb 4-1: SerialNumber: syz [ 2588.615073][T12756] usb 4-1: config 0 descriptor?? [ 2588.625520][T12290] Bluetooth: hci0: command tx timeout [ 2588.986724][T13681] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2589.006918][T13681] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2589.037705][T12756] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 2589.071097][T12756] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 2589.463382][T13681] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2589.505247][T13681] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2589.530113][T16280] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12901'. [ 2589.904842][T13681] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2589.927875][T13681] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2590.002379][T16291] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12913'. [ 2590.023459][T16247] bridge0: port 1(bridge_slave_0) entered blocking state [ 2590.042370][T16247] bridge0: port 1(bridge_slave_0) entered disabled state [ 2590.068693][T16247] bridge_slave_0: entered allmulticast mode [ 2590.087119][T16247] bridge_slave_0: entered promiscuous mode [ 2590.108222][T16247] bridge0: port 2(bridge_slave_1) entered blocking state [ 2590.119762][T16247] bridge0: port 2(bridge_slave_1) entered disabled state [ 2590.138799][T16247] bridge_slave_1: entered allmulticast mode [ 2590.172058][T16247] bridge_slave_1: entered promiscuous mode [ 2590.306238][T13681] netdevsim netdevsim5 netdevsim0 (unregistering): left promiscuous mode [ 2590.306951][T13681] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2590.307000][T13681] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2590.359911][T16247] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2590.464414][T16247] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2590.577195][T16247] team0: Port device team_slave_0 added [ 2590.588923][T16247] team0: Port device team_slave_1 added [ 2590.644299][ T1326] lwtunnel_output(): recursion limit reached on datapath [ 2590.646007][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 2590.646079][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 2590.709795][T16247] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2590.709811][T16247] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2590.709828][T16247] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2590.721421][T12290] Bluetooth: hci0: command tx timeout [ 2591.035559][T16247] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2591.056257][T16247] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2591.115477][T16247] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2591.293101][T12756] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000006c: -61 [ 2591.321164][T12756] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -61 [ 2591.612841][T16247] hsr_slave_0: entered promiscuous mode [ 2591.619971][T16247] hsr_slave_1: entered promiscuous mode [ 2591.632326][T16247] debugfs: 'hsr0' already exists in 'hsr' [ 2591.648880][T16247] Cannot create hsr debugfs directory [ 2591.662767][T13681] bridge_slave_1: left allmulticast mode [ 2591.666716][ T29] audit: type=1326 audit(1787304895.933:4209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16312 comm="syz.1.12908" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fa90ec code=0x0 [ 2591.674618][T13681] bridge_slave_1: left promiscuous mode [ 2591.701820][T13681] bridge0: port 2(bridge_slave_1) entered disabled state [ 2591.717629][T13681] bridge_slave_0: left allmulticast mode [ 2591.724479][T13681] bridge_slave_0: left promiscuous mode [ 2591.731912][T13681] bridge0: port 1(bridge_slave_0) entered disabled state [ 2591.907978][T13799] lwtunnel_output(): recursion limit reached on datapath [ 2592.107808][T13681] erspan0 (unregistering): left promiscuous mode [ 2592.211861][T13681] team0: Port device bridge1 removed [ 2592.259337][T13681] bond1 (unregistering): (slave batadv1): Releasing active interface [ 2592.279755][T13681] bond1 (unregistering): Released all slaves [ 2592.304634][T13681] bond2 (unregistering): Released all slaves [ 2592.348659][T13681] bond0 (unregistering): (slave wlan0): Releasing backup interface [ 2592.362896][T13681] mac80211_hwsim hwsim49 wlan0: left allmulticast mode [ 2592.383226][T13681] bond0 (unregistering): Released all slaves [ 2592.401963][T16329] netlink: 'syz.3.12898': attribute type 5 has an invalid length. [ 2592.414348][ T5273] 8021q: adding VLAN 0 to HW filter on device eth5 [ 2592.508723][T13681] ovs-s!: left promiscuous mode [ 2592.785088][T12290] Bluetooth: hci0: command tx timeout [ 2593.013036][T16346] netlink: 'syz.2.12914': attribute type 1 has an invalid length. [ 2593.104892][T21334] usb 4-1: USB disconnect, device number 124 [ 2594.754084][T16366] netlink: 24 bytes leftover after parsing attributes in process `syz.3.12916'. [ 2594.866116][T12290] Bluetooth: hci0: command tx timeout [ 2596.402677][T13806] lwtunnel_output(): recursion limit reached on datapath [ 2596.506216][T16247] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 2596.584292][T16247] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2596.615430][T16247] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 2596.644008][T16247] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2596.700570][T16247] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 2596.758959][T16247] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 2596.935731][T13681] hsr_slave_0: left promiscuous mode [ 2596.985550][T13681] hsr_slave_1: left promiscuous mode [ 2597.012175][T13681] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2597.034283][T13806] lwtunnel_output(): recursion limit reached on datapath [ 2597.053531][T13681] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2597.093937][T13681] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2597.127519][T13681] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2597.240641][T13681] veth1_macvtap: left promiscuous mode [ 2597.262955][T13681] veth0_macvtap: left promiscuous mode [ 2597.285265][T13681] veth1_vlan: left promiscuous mode [ 2597.299258][T13681] veth0_vlan: left promiscuous mode [ 2597.510395][T16416] netlink: 'syz.6.12924': attribute type 1 has an invalid length. [ 2598.519288][T13681] team0 (unregistering): Port device team_slave_1 removed [ 2598.589808][T13681] team0 (unregistering): Port device team_slave_0 removed [ 2598.699628][T16437] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12927'. [ 2598.841819][ T29] audit: type=1326 audit(1787304903.113:4210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16440 comm="syz.6.12928" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f770ec code=0x0 [ 2598.960811][T16247] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 2598.979268][T16247] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2599.410119][T16247] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2599.469050][T16247] 8021q: adding VLAN 0 to HW filter on device team0 [ 2599.548003][T13687] bridge0: port 1(bridge_slave_0) entered blocking state [ 2599.555385][T13687] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2599.598806][T13687] bridge0: port 2(bridge_slave_1) entered blocking state [ 2599.606145][T13687] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2599.684980][T12756] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 2599.856682][T16247] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2599.885285][T12756] usb 3-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice= 0.40 [ 2599.913852][T12756] usb 3-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2599.963328][T12756] usb 3-1: config 1 interface 0 has no altsetting 0 [ 2600.004475][T12756] usb 3-1: string descriptor 0 read error: -22 [ 2600.022876][T12756] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2600.058477][T16247] veth0_vlan: entered promiscuous mode [ 2600.174600][T16247] veth1_vlan: entered promiscuous mode [ 2600.382163][T16247] veth0_macvtap: entered promiscuous mode [ 2600.490414][T16247] veth1_macvtap: entered promiscuous mode [ 2600.597554][T16247] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2600.762154][T16462] macvtap8: entered promiscuous mode [ 2600.808143][T16462] macvtap8: entered allmulticast mode [ 2600.859788][T16247] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2600.880122][T12756] usbhid 3-1:1.0: can't add hid device: -71 [ 2600.920063][T12756] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 2600.982175][T12756] usb 3-1: USB disconnect, device number 38 [ 2601.026012][T13806] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2601.063983][T13806] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2601.188783][T13799] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2601.366250][T12276] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2601.397037][T13806] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2601.437800][T13806] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2601.492706][T13681] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2601.511797][T13681] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2601.765317][T16489] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12936'. [ 2601.777871][ T5690] hid-generic 0000:0000:0001.0081: unknown main item tag 0x0 [ 2601.777915][ T5690] hid-generic 0000:0000:0001.0081: unknown main item tag 0x0 [ 2601.777942][ T5690] hid-generic 0000:0000:0001.0081: unknown main item tag 0x0 [ 2601.778002][ T5690] hid-generic 0000:0000:0001.0081: unknown main item tag 0x0 [ 2601.778031][ T5690] hid-generic 0000:0000:0001.0081: unknown main item tag 0x0 [ 2601.778058][ T5690] hid-generic 0000:0000:0001.0081: unknown main item tag 0x0 [ 2601.778085][ T5690] hid-generic 0000:0000:0001.0081: unknown main item tag 0x0 [ 2601.778111][ T5690] hid-generic 0000:0000:0001.0081: unknown main item tag 0x0 [ 2601.791133][ T5690] hid-generic 0000:0000:0001.0081: hidraw0: HID v0.10 Device [syz0] on syz1 [ 2601.893690][T16483] bridge1: port 1(erspan0) entered blocking state [ 2601.893815][T16483] bridge1: port 1(erspan0) entered disabled state [ 2601.894004][T16483] erspan0: entered allmulticast mode [ 2601.904491][T16483] erspan0: entered promiscuous mode [ 2602.107906][T16501] netlink: 'syz.2.12937': attribute type 1 has an invalid length. [ 2602.148841][T12276] lwtunnel_output(): recursion limit reached on datapath [ 2602.788375][T13806] lwtunnel_output(): recursion limit reached on datapath [ 2602.818993][T16508] input: syz0 as /devices/virtual/input/input120 [ 2603.005412][T16508] program syz.1.12940 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2603.635085][T12757] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 2603.825865][T12757] usb 4-1: New USB device found, idVendor=046d, idProduct=0821, bcdDevice= 1.00 [ 2603.860641][T12757] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2603.892449][T12757] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 2603.914897][T12757] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2603.950329][T12757] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2603.963521][T12757] usb 4-1: Product: syz [ 2603.963547][T12757] usb 4-1: Manufacturer: syz [ 2603.963574][T12757] usb 4-1: SerialNumber: syz [ 2603.981745][T12757] uvcvideo 4-1:1.0: probe with driver uvcvideo failed with error -22 [ 2604.309115][T16511] netlink: 'syz.3.12941': attribute type 10 has an invalid length. [ 2604.516570][T12757] usb 4-1: USB disconnect, device number 125 [ 2604.530506][T16532] FAULT_INJECTION: forcing a failure. [ 2604.530506][T16532] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2604.568529][T16532] CPU: 1 UID: 0 PID: 16532 Comm: syz.5.12949 Tainted: G L syzkaller #0 PREEMPT(full) [ 2604.568564][T16532] Tainted: [L]=SOFTLOCKUP [ 2604.568573][T16532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2604.568585][T16532] Call Trace: [ 2604.568594][T16532] [ 2604.568603][T16532] dump_stack_lvl+0xe8/0x150 [ 2604.568643][T16532] should_fail_ex+0x410/0x560 [ 2604.568678][T16532] _copy_from_user+0x2d/0xb0 [ 2604.568708][T16532] memdup_user+0x5e/0xd0 [ 2604.568738][T16532] ucma_set_option+0x2cb/0xca0 [ 2604.568779][T16532] ? __pfx_ucma_set_option+0x10/0x10 [ 2604.568806][T16532] ? __lock_acquire+0x683/0x2cf0 [ 2604.568844][T16532] ? aa_file_perm+0x4ed/0x15f0 [ 2604.568875][T16532] ? aa_file_perm+0x18b/0x15f0 [ 2604.568916][T16532] ? __might_fault+0xaf/0x130 [ 2604.568943][T16532] ? __might_fault+0xaf/0x130 [ 2604.568988][T16532] ucma_write+0x24e/0x2f0 [ 2604.569021][T16532] ? __pfx_ucma_write+0x10/0x10 [ 2604.569048][T16532] ? security_file_permission+0x75/0x260 [ 2604.569082][T16532] ? rw_verify_area+0x203/0x4c0 [ 2604.569118][T16532] vfs_writev+0x4bb/0x990 [ 2604.569144][T16532] ? __pfx_ucma_write+0x10/0x10 [ 2604.569177][T16532] ? __pfx_vfs_writev+0x10/0x10 [ 2604.569217][T16532] ? __fget_files+0x2a/0x420 [ 2604.569250][T16532] ? __fget_files+0x3a2/0x420 [ 2604.569276][T16532] ? __fget_files+0x2a/0x420 [ 2604.569312][T16532] do_writev+0x154/0x2e0 [ 2604.569337][T16532] ? __pfx_do_writev+0x10/0x10 [ 2604.569372][T16532] __do_fast_syscall_32+0x27a/0x6a0 [ 2604.569401][T16532] ? do_fast_syscall_32+0x33/0x70 [ 2604.569423][T16532] ? asm_int80_emulation+0x1a/0x20 [ 2604.569445][T16532] ? do_int80_emulation+0x299/0x500 [ 2604.569466][T16532] ? trace_irq_disable+0x3b/0x140 [ 2604.569499][T16532] do_fast_syscall_32+0x33/0x70 [ 2604.569522][T16532] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2604.569547][T16532] RIP: 0023:0xf70bf0ec [ 2604.569567][T16532] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 2604.569585][T16532] RSP: 002b:00000000f54ad50c EFLAGS: 00000206 ORIG_RAX: 0000000000000092 [ 2604.569608][T16532] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 2604.569624][T16532] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000000 [ 2604.569635][T16532] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2604.569647][T16532] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2604.569660][T16532] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2604.569691][T16532] [ 2605.606718][T21325] hid-generic 0000:0000:0001.0082: unknown main item tag 0x0 [ 2605.628687][T21325] hid-generic 0000:0000:0001.0082: unknown main item tag 0x0 [ 2605.684400][T21325] hid-generic 0000:0000:0001.0082: hidraw0: HID v0.10 Device [syz0] on syz1 [ 2605.956192][ T2134] usb 6-1: new high-speed USB device number 105 using dummy_hcd [ 2606.125622][ T2134] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2606.150266][ T2134] usb 6-1: too many configurations: 191, using maximum allowed: 8 [ 2606.176213][ T2134] usb 6-1: config index 0 descriptor too short (expected 153, got 72) [ 2606.199136][ T2134] usb 6-1: config index 1 descriptor too short (expected 153, got 72) [ 2606.228342][ T2134] usb 6-1: config index 2 descriptor too short (expected 153, got 72) [ 2606.265139][ T2134] usb 6-1: config index 3 descriptor too short (expected 153, got 72) [ 2606.283948][ T2134] usb 6-1: config index 4 descriptor too short (expected 153, got 72) [ 2606.299425][ T2134] usb 6-1: config index 5 descriptor too short (expected 153, got 72) [ 2606.313861][ T2134] usb 6-1: config index 6 descriptor too short (expected 153, got 72) [ 2606.335696][ T2134] usb 6-1: config index 7 descriptor too short (expected 153, got 72) [ 2606.355330][ T2134] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2606.374115][ T2134] usb 6-1: Product: syz [ 2606.380680][ T2134] usb 6-1: Manufacturer: syz [ 2606.405020][ T2134] usb 6-1: SerialNumber: syz [ 2606.458480][T12563] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2606.694355][T16571] netlink: 180 bytes leftover after parsing attributes in process `syz.1.12963'. [ 2606.718948][T16571] netlink: 20 bytes leftover after parsing attributes in process `syz.1.12963'. [ 2607.456970][T21334] usb 6-1: USB disconnect, device number 105 [ 2607.916168][ T202] lwtunnel_output(): recursion limit reached on datapath [ 2607.924634][T13687] lwtunnel_output(): recursion limit reached on datapath [ 2607.985617][T12563] usb 6-1: Service connection timeout for: 257 [ 2608.000702][T12563] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 2608.020859][T16591] FAULT_INJECTION: forcing a failure. [ 2608.020859][T16591] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2608.037922][T12563] ath9k_htc: Failed to initialize the device [ 2608.055694][T21334] usb 6-1: ath9k_htc: USB layer deinitialized [ 2608.069907][T16591] CPU: 0 UID: 0 PID: 16591 Comm: syz.5.12970 Tainted: G L syzkaller #0 PREEMPT(full) [ 2608.069943][T16591] Tainted: [L]=SOFTLOCKUP [ 2608.069951][T16591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2608.069964][T16591] Call Trace: [ 2608.069973][T16591] [ 2608.069982][T16591] dump_stack_lvl+0xe8/0x150 [ 2608.070018][T16591] should_fail_ex+0x410/0x560 [ 2608.070051][T16591] _copy_from_iter+0x4ff/0x1660 [ 2608.070088][T16591] ? kmem_cache_alloc_node_noprof+0x3bc/0x620 [ 2608.070114][T16591] ? __pfx__copy_from_iter+0x10/0x10 [ 2608.070138][T16591] ? __alloc_skb+0x27a/0x7a0 [ 2608.070165][T16591] ? __alloc_skb+0x27a/0x7a0 [ 2608.070194][T16591] ? netlink_sendmsg+0x650/0xb40 [ 2608.070225][T16591] ? skb_put+0x112/0x210 [ 2608.070253][T16591] netlink_sendmsg+0x6c0/0xb40 [ 2608.070291][T16591] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2608.070324][T16591] ? aa_sock_msg_perm+0xf6/0x1c0 [ 2608.070358][T16591] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2608.070387][T16591] sock_sendmsg_nosec+0x13a/0x180 [ 2608.070412][T16591] ____sys_sendmsg+0x54e/0x850 [ 2608.070446][T16591] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2608.070489][T16591] ___sys_sendmsg+0x2a5/0x360 [ 2608.070515][T16591] ? __lock_acquire+0x683/0x2cf0 [ 2608.070558][T16591] ? __pfx____sys_sendmsg+0x10/0x10 [ 2608.070584][T16591] ? get_pid_task+0x20/0x1f0 [ 2608.070614][T16591] ? get_pid_task+0x20/0x1f0 [ 2608.070639][T16591] ? get_pid_task+0x20/0x1f0 [ 2608.070696][T16591] ? __fget_files+0x2a/0x420 [ 2608.070724][T16591] ? __fget_files+0x3a2/0x420 [ 2608.070762][T16591] __sys_sendmsg+0x177/0x240 [ 2608.070792][T16591] ? __pfx___sys_sendmsg+0x10/0x10 [ 2608.070839][T16591] __do_fast_syscall_32+0x27a/0x6a0 [ 2608.070863][T16591] ? do_fast_syscall_32+0x33/0x70 [ 2608.070885][T16591] ? asm_int80_emulation+0x1a/0x20 [ 2608.070905][T16591] ? do_int80_emulation+0x299/0x500 [ 2608.070926][T16591] ? trace_irq_disable+0x3b/0x140 [ 2608.070958][T16591] do_fast_syscall_32+0x33/0x70 [ 2608.070982][T16591] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2608.071011][T16591] RIP: 0023:0xf70bf0ec [ 2608.071031][T16591] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 2608.071046][T16591] RSP: 002b:00000000f54ad50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 2608.071068][T16591] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000040 [ 2608.071081][T16591] RDX: 0000000000004000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2608.071094][T16591] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2608.071105][T16591] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2608.071118][T16591] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2608.071147][T16591] [ 2608.968719][T16605] netlink: 'syz.2.12975': attribute type 8 has an invalid length. [ 2609.144934][T16609] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12976'. [ 2609.770100][T16627] FAULT_INJECTION: forcing a failure. [ 2609.770100][T16627] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2609.795327][T16627] CPU: 1 UID: 0 PID: 16627 Comm: syz.2.12982 Tainted: G L syzkaller #0 PREEMPT(full) [ 2609.795362][T16627] Tainted: [L]=SOFTLOCKUP [ 2609.795371][T16627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2609.795383][T16627] Call Trace: [ 2609.795393][T16627] [ 2609.795406][T16627] dump_stack_lvl+0xe8/0x150 [ 2609.795442][T16627] should_fail_ex+0x410/0x560 [ 2609.795475][T16627] _copy_from_iter+0x1d3/0x1660 [ 2609.795506][T16627] ? n_hdlc_tty_write+0x183/0x8e0 [ 2609.795539][T16627] ? __pfx__copy_from_iter+0x10/0x10 [ 2609.795582][T16627] file_tty_write+0x48c/0x9f0 [ 2609.795616][T16627] vfs_write+0x612/0xba0 [ 2609.795656][T16627] ? __pfx_vfs_write+0x10/0x10 [ 2609.795698][T16627] ? __fget_files+0x2a/0x420 [ 2609.795735][T16627] ksys_write+0x150/0x270 [ 2609.795770][T16627] ? __pfx_ksys_write+0x10/0x10 [ 2609.795812][T16627] __do_fast_syscall_32+0x27a/0x6a0 [ 2609.795839][T16627] ? do_fast_syscall_32+0x33/0x70 [ 2609.795862][T16627] ? asm_int80_emulation+0x1a/0x20 [ 2609.795882][T16627] ? do_int80_emulation+0x299/0x500 [ 2609.795903][T16627] ? trace_irq_disable+0x3b/0x140 [ 2609.795936][T16627] do_fast_syscall_32+0x33/0x70 [ 2609.795960][T16627] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2609.795985][T16627] RIP: 0023:0xf704f0ec [ 2609.796006][T16627] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 2609.796024][T16627] RSP: 002b:00000000f543d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 2609.796047][T16627] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080001040 [ 2609.796071][T16627] RDX: 00000000fffffdef RSI: 0000000000000000 RDI: 0000000000000000 [ 2609.796085][T16627] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2609.796097][T16627] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2609.796110][T16627] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2609.796143][T16627] [ 2611.095292][T21325] usb 3-1: new full-speed USB device number 39 using dummy_hcd [ 2611.125032][T21334] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 2611.245665][T21325] usb 3-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 2611.265387][T12757] usb 6-1: new full-speed USB device number 106 using dummy_hcd [ 2611.285689][T21325] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2611.285787][T21334] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2611.341605][T21325] usb 3-1: config 1 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2611.361285][T21334] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2611.386521][T21325] usb 3-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 2611.418991][T21334] usb 4-1: config 0 descriptor?? [ 2611.459368][T21334] cp210x 4-1:0.0: cp210x converter detected [ 2611.497933][T21325] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2611.537261][T21325] usb 3-1: Product: syz [ 2611.581927][T21325] usb 3-1: Manufacturer: syz [ 2611.603575][T21325] usb 3-1: SerialNumber: syz [ 2611.897669][T21334] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 2611.928811][T21325] snd-usb-caiaq 3-1:1.0: invalid EPs [ 2611.966500][T21334] usb 4-1: cp210x converter now attached to ttyUSB0 [ 2612.024167][T21325] usb 3-1: unable to init card! (ret=-22) [ 2612.096459][T21325] snd-usb-caiaq 3-1:1.0: probe with driver snd-usb-caiaq failed with error -22 [ 2612.228599][T21325] usb 3-1: USB disconnect, device number 39 [ 2612.289979][ T5690] usb 4-1: USB disconnect, device number 126 [ 2612.341272][ T5690] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2612.374943][ T5690] cp210x 4-1:0.0: device disconnected [ 2613.666535][ T202] lwtunnel_output(): recursion limit reached on datapath [ 2613.686051][ T202] lwtunnel_output(): recursion limit reached on datapath [ 2613.854992][T21334] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 2614.041956][T21334] usb 3-1: New USB device found, idVendor=046d, idProduct=0821, bcdDevice= 1.00 [ 2614.066904][T21334] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2614.077471][T21334] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 2614.090828][T21334] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2614.103920][ C1] vcan0: j1939_tp_rxtimer: 0xffff888026160400: rx timeout, send abort [ 2614.112661][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888026160400: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 2614.159573][T21334] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2614.171475][T21334] usb 3-1: Product: syz [ 2614.176434][T21334] usb 3-1: Manufacturer: syz [ 2614.181149][T21334] usb 3-1: SerialNumber: syz [ 2614.232383][T21334] uvcvideo 3-1:1.0: probe with driver uvcvideo failed with error -22 [ 2614.281556][ T29] audit: type=1326 audit(1787304918.553:4211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16708 comm="syz.5.13010" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf70bf0ec code=0x0 [ 2614.486076][T21325] usb 4-1: new full-speed USB device number 127 using dummy_hcd [ 2614.655981][T21325] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2614.684714][T21325] usb 4-1: config 1 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 2614.706671][T21325] usb 4-1: config 1 interface 0 altsetting 6 endpoint 0x82 has invalid maxpacket 2038, setting to 64 [ 2614.739562][T21325] usb 4-1: config 1 interface 0 altsetting 6 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 2614.739602][T21325] usb 4-1: config 1 interface 0 has no altsetting 0 [ 2614.742919][T21325] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2614.742949][T21325] usb 4-1: Product: syz [ 2614.742966][T21325] usb 4-1: Manufacturer: syz [ 2614.742982][T21325] usb 4-1: SerialNumber: syz [ 2614.770515][T16705] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 2614.770668][T16705] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 2614.770809][T16705] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 2614.802056][T16689] netlink: 'syz.2.13006': attribute type 10 has an invalid length. [ 2615.040870][ T1892] usb 3-1: USB disconnect, device number 40 [ 2615.842534][T16755] netlink: 'syz.1.13018': attribute type 1 has an invalid length. [ 2616.325110][T21334] usb 6-1: new high-speed USB device number 107 using dummy_hcd [ 2616.497127][T21334] usb 6-1: Using ep0 maxpacket: 32 [ 2616.517663][T21334] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 2616.551863][T21334] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 2616.588874][T21334] usb 6-1: config 0 has no interface number 0 [ 2616.644547][T21334] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2616.672050][T21334] usb 6-1: Product: syz [ 2616.695275][T21334] usb 6-1: Manufacturer: syz [ 2616.711035][T21334] usb 6-1: SerialNumber: syz [ 2616.733458][T21334] usb 6-1: config 0 descriptor?? [ 2617.171550][T21334] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 2617.208411][T21334] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 2617.236686][T21325] usb 4-1: No union descriptors [ 2617.270863][T21325] usb 4-1: USB disconnect, device number 127 [ 2618.787121][ T202] lwtunnel_output(): recursion limit reached on datapath [ 2618.787895][T13687] lwtunnel_output(): recursion limit reached on datapath [ 2619.250240][T21334] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000006c: -61 [ 2619.261529][T21334] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -61 [ 2619.810028][T16815] netlink: 'syz.5.13023': attribute type 5 has an invalid length. [ 2620.735593][T16819] netlink: 68 bytes leftover after parsing attributes in process `syz.2.13045'. [ 2620.776259][T16822] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2620.789748][T16822] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2620.821913][T16824] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13045'. [ 2620.850740][T21325] usb 6-1: USB disconnect, device number 107 [ 2621.090028][T16831] netlink: 52 bytes leftover after parsing attributes in process `syz.1.13048'. [ 2622.677647][T16848] trusted_key: encrypted_key: master key parameter '' is invalid [ 2622.695702][T16848] netlink: 8 bytes leftover after parsing attributes in process `syz.6.13055'. [ 2622.716239][T16848] netlink: del zone limit has 8 unknown bytes [ 2623.099471][T16858] macsec1: entered allmulticast mode [ 2623.125230][T16858] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 2623.168066][T16858] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 2623.204525][T16858] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 2623.257207][T16858] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 2623.319977][T21334] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 2623.781036][T16865] netlink: 48 bytes leftover after parsing attributes in process `syz.5.13061'. [ 2623.833478][T16867] netlink: 68 bytes leftover after parsing attributes in process `syz.6.13062'. [ 2624.194910][T21325] usb 6-1: new full-speed USB device number 108 using dummy_hcd [ 2624.355621][T21325] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2624.373928][T21325] usb 6-1: config 1 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 2624.400883][T21325] usb 6-1: config 1 interface 0 altsetting 6 endpoint 0x82 has invalid maxpacket 2038, setting to 64 [ 2624.423585][T21325] usb 6-1: config 1 interface 0 altsetting 6 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 2624.439839][T21325] usb 6-1: config 1 interface 0 has no altsetting 0 [ 2624.458355][T21325] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2624.478087][T21325] usb 6-1: Product: syz [ 2624.486874][T21325] usb 6-1: Manufacturer: syz [ 2624.499486][T21325] usb 6-1: SerialNumber: syz [ 2624.515129][T16872] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 2624.534703][T16872] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 2624.547572][T13685] lwtunnel_output(): recursion limit reached on datapath [ 2624.550980][T16872] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 2624.557684][T12268] lwtunnel_output(): recursion limit reached on datapath [ 2624.961716][T16884] ip6erspan1: entered allmulticast mode [ 2625.425111][T15581] usb 3-1: new full-speed USB device number 41 using dummy_hcd [ 2625.586068][T15581] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 2625.623986][T15581] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 2625.654664][T15581] usb 3-1: config 0 has no interface number 0 [ 2625.664719][T15581] usb 3-1: config 0 interface 41 has no altsetting 0 [ 2625.684043][T15581] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2625.705249][T15581] usb 3-1: Product: syz [ 2625.711668][T15581] usb 3-1: Manufacturer: syz [ 2625.720364][T15581] usb 3-1: SerialNumber: syz [ 2625.740796][T15581] usb 3-1: config 0 descriptor?? [ 2625.747843][T16903] fuse: Bad value for 'fd' [ 2625.792909][T16904] misc userio: Begin command sent, but we're already running [ 2625.942043][T16909] FAULT_INJECTION: forcing a failure. [ 2625.942043][T16909] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2625.973210][T16909] CPU: 1 UID: 0 PID: 16909 Comm: syz.3.13076 Tainted: G L syzkaller #0 PREEMPT(full) [ 2625.973246][T16909] Tainted: [L]=SOFTLOCKUP [ 2625.973351][T16909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2625.973368][T16909] Call Trace: [ 2625.973380][T16909] [ 2625.973391][T16909] dump_stack_lvl+0xe8/0x150 [ 2625.973430][T16909] should_fail_ex+0x410/0x560 [ 2625.973462][T16909] _copy_from_user+0x2d/0xb0 [ 2625.973492][T16909] kvm_vm_ioctl+0x74b/0xd30 [ 2625.973525][T16909] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 2625.973552][T16909] ? kasan_save_free_info+0x40/0x50 [ 2625.973573][T16909] ? __kasan_slab_free+0x5c/0x80 [ 2625.973597][T16909] ? kfree+0x1c5/0x640 [ 2625.973617][T16909] ? tomoyo_path_number_perm+0x4ba/0x5f0 [ 2625.973641][T16909] ? security_file_ioctl_compat+0xc3/0x2a0 [ 2625.973662][T16909] ? __ia32_compat_sys_ioctl+0x139/0x950 [ 2625.973685][T16909] ? __do_fast_syscall_32+0x27a/0x6a0 [ 2625.973708][T16909] ? do_fast_syscall_32+0x33/0x70 [ 2625.973729][T16909] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2625.973780][T16909] ? kvm_arch_vm_compat_ioctl+0x169/0x2b0 [ 2625.973810][T16909] ? __pfx_kvm_arch_vm_compat_ioctl+0x10/0x10 [ 2625.973863][T16909] ? kasan_quarantine_put+0xbb/0x1f0 [ 2625.973902][T16909] ? tomoyo_path_number_perm+0x219/0x5f0 [ 2625.973929][T16909] ? do_vfs_ioctl+0x116f/0x1530 [ 2625.973954][T16909] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 2625.973990][T16909] ? hook_file_ioctl_compat+0x1f0/0x5f0 [ 2625.974030][T16909] kvm_vm_compat_ioctl+0x2b1/0x3a0 [ 2625.974066][T16909] ? __pfx_kvm_vm_compat_ioctl+0x10/0x10 [ 2625.974099][T16909] ? __fget_files+0x3a2/0x420 [ 2625.974126][T16909] ? __fget_files+0x2a/0x420 [ 2625.974158][T16909] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 2625.974187][T16909] __ia32_compat_sys_ioctl+0x5ea/0x950 [ 2625.974214][T16909] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 2625.974238][T16909] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2625.974262][T16909] ? __fget_files+0x3a2/0x420 [ 2625.974297][T16909] ? fput+0xa0/0xd0 [ 2625.974323][T16909] ? ksys_write+0x242/0x270 [ 2625.974366][T16909] __do_fast_syscall_32+0x27a/0x6a0 [ 2625.974390][T16909] ? do_fast_syscall_32+0x33/0x70 [ 2625.974412][T16909] ? asm_int80_emulation+0x1a/0x20 [ 2625.974432][T16909] ? do_int80_emulation+0x299/0x500 [ 2625.974452][T16909] ? trace_irq_disable+0x3b/0x140 [ 2625.974483][T16909] do_fast_syscall_32+0x33/0x70 [ 2625.974505][T16909] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2625.974529][T16909] RIP: 0023:0xf6fdf0ec [ 2625.974550][T16909] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 2625.974568][T16909] RSP: 002b:00000000f53ac50c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 2625.974592][T16909] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000004040ae79 [ 2625.974607][T16909] RDX: 00000000800002c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2625.974621][T16909] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2625.974633][T16909] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2625.974646][T16909] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2625.974677][T16909] [ 2626.508710][T15581] CoreChips 3-1:0.41: probe with driver CoreChips failed with error -32 [ 2626.915203][T16922] binder: 16917:16922 ioctl c0306201 800003c0 returned -14 [ 2626.949820][T21325] usb 6-1: No union descriptors [ 2626.984394][T16921] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13080'. [ 2627.002305][T21325] usb 6-1: USB disconnect, device number 108 [ 2627.218127][T16927] loop5: detected capacity change from 0 to 2640 [ 2627.226760][T16927] Buffer I/O error on dev loop5, logical block 0, async page read [ 2627.237578][T16927] Buffer I/O error on dev loop5, logical block 0, async page read [ 2627.248120][T16927] Buffer I/O error on dev loop5, logical block 0, async page read [ 2627.256866][T16927] Buffer I/O error on dev loop5, logical block 0, async page read [ 2627.265252][T16927] Buffer I/O error on dev loop5, logical block 0, async page read [ 2627.276769][T16927] Buffer I/O error on dev loop5, logical block 0, async page read [ 2627.288811][T16927] Buffer I/O error on dev loop5, logical block 0, async page read [ 2627.320303][T16927] Buffer I/O error on dev loop5, logical block 0, async page read [ 2627.359993][T16927] loop5: unable to read partition table [ 2627.383336][T16929] Buffer I/O error on dev loop5, logical block 0, lost async page write [ 2627.398569][T16927] loop_reread_partitions: partition scan of loop5 (3 ) failed (rc=-5) [ 2627.425142][T16929] Buffer I/O error on dev loop5, logical block 1, lost async page write [ 2628.079554][ T4978] ldm_validate_partition_table(): Disk read failed. [ 2628.087972][ T4978] Dev loop5: unable to read RDB block 0 [ 2628.093777][ T4978] loop5: unable to read partition table [ 2628.214973][T12563] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 2628.364953][T12563] usb 4-1: Using ep0 maxpacket: 32 [ 2628.372645][T12563] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 2628.387728][T12563] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 2628.396829][T12563] usb 4-1: config 0 has no interface number 0 [ 2628.406454][T12563] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2628.417271][T12563] usb 4-1: Product: syz [ 2628.421695][T12563] usb 4-1: Manufacturer: syz [ 2628.427343][T12563] usb 4-1: SerialNumber: syz [ 2628.456527][T12563] usb 4-1: config 0 descriptor?? [ 2628.583493][ T4978] ldm_validate_partition_table(): Disk read failed. [ 2628.591578][ T4978] Dev loop5: unable to read RDB block 0 [ 2628.598171][ T4978] loop5: unable to read partition table [ 2628.696203][ T1892] usb 3-1: USB disconnect, device number 41 [ 2628.880260][T12563] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 2628.891984][T12563] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 2629.161723][ T29] audit: type=1326 audit(1787304933.433:4212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16956 comm="syz.2.13092" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf704f0ec code=0x0 [ 2629.164127][T12290] Bluetooth: hci0: Malformed LE Event: 0x02 [ 2629.518561][T16966] netlink: 24 bytes leftover after parsing attributes in process `syz.1.13096'. [ 2629.588883][T16968] syzkaller0: entered promiscuous mode [ 2629.594544][T16968] syzkaller0: entered allmulticast mode [ 2630.309309][T12268] lwtunnel_output(): recursion limit reached on datapath [ 2630.317984][T13687] lwtunnel_output(): recursion limit reached on datapath [ 2630.938174][T12563] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000006c: -61 [ 2630.953560][T12563] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -61 [ 2631.293119][T16999] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13109'. [ 2631.321681][ T29] audit: type=1326 audit(1787304935.593:4213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17000 comm="syz.6.13110" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f770ec code=0x0 [ 2631.373792][T17003] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13109'. [ 2631.513103][T17006] netlink: 'syz.3.13087': attribute type 5 has an invalid length. [ 2632.581901][T15893] usb 4-1: USB disconnect, device number 2 [ 2633.002106][T17045] netlink: 20 bytes leftover after parsing attributes in process `syz.2.13123'. [ 2633.307391][T15893] usb 6-1: new high-speed USB device number 109 using dummy_hcd [ 2633.311784][ T29] audit: type=1800 audit(1787304937.583:4214): pid=17032 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.13121" name="bus" dev="ramfs" ino=264654 res=0 errno=0 [ 2633.646379][ T29] audit: type=1326 audit(1787304937.923:4215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17051 comm="syz.3.13127" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf6fdf0ec code=0x0 [ 2633.768371][ T4927] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2633.789714][ T4927] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2633.808370][ T4927] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2633.817102][ T4927] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2633.830274][ T4927] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2633.918119][T17058] fuse: Bad value for 'fd' [ 2634.067768][T17061] netlink: 16 bytes leftover after parsing attributes in process `syz.2.13130'. [ 2634.308573][T15440] syz_tun (unregistering): left allmulticast mode [ 2634.334580][T17065] bridge1: entered promiscuous mode [ 2634.506517][T12563] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 2634.699885][T12563] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2634.723864][T12563] usb 3-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 2634.760354][T12563] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 2634.808942][T12563] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2634.818547][T12563] usb 3-1: Product: syz [ 2634.822825][T12563] usb 3-1: Manufacturer: syz [ 2634.828442][T12563] usb 3-1: SerialNumber: syz [ 2634.948245][ T202] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2634.965222][ T5690] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 2635.070794][T12563] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 2635.135113][ T5690] usb 4-1: Using ep0 maxpacket: 32 [ 2635.136436][ T202] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2635.141298][ T5690] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 2635.164100][ T5690] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 2635.172887][ T5690] usb 4-1: config 0 has no interface number 0 [ 2635.183067][ T5690] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2635.199801][ T5690] usb 4-1: Product: syz [ 2635.204180][ T5690] usb 4-1: Manufacturer: syz [ 2635.209883][ T5690] usb 4-1: SerialNumber: syz [ 2635.224503][ T5690] usb 4-1: config 0 descriptor?? [ 2635.232226][T17059] bridge0: port 1(bridge_slave_0) entered blocking state [ 2635.240848][T17059] bridge0: port 1(bridge_slave_0) entered disabled state [ 2635.248900][T17059] bridge_slave_0: entered allmulticast mode [ 2635.258481][T17059] bridge_slave_0: entered promiscuous mode [ 2635.271187][T17059] bridge0: port 2(bridge_slave_1) entered blocking state [ 2635.278824][T17059] bridge0: port 2(bridge_slave_1) entered disabled state [ 2635.286470][T17059] bridge_slave_1: entered allmulticast mode [ 2635.294553][T17059] bridge_slave_1: entered promiscuous mode [ 2635.347269][ T202] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2635.408545][T17059] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2635.424351][T17059] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2635.438878][T13685] lwtunnel_output(): recursion limit reached on datapath [ 2635.520984][ T202] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2635.550982][T17059] team0: Port device team_slave_0 added [ 2635.561861][T17059] team0: Port device team_slave_1 added [ 2635.635165][T17059] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2635.642271][T17059] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2635.674345][T17059] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2635.690119][ T5690] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 2635.693866][T17059] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2635.709992][ T5690] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 2635.712503][T17059] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2635.722086][T17059] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2635.879789][T12563] usb 3-1: failed to enable PITCH for EP 0x82 [ 2635.895610][T12563] usb 3-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 2635.905089][T12290] Bluetooth: hci4: command tx timeout [ 2635.967030][T12563] usb 3-1: clock source 0 is not valid, cannot use [ 2636.000357][T12563] usb 3-1: 2:1: cannot get freq (v2/v3): err -71 [ 2636.019846][T12563] usb 3-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 2636.067585][T13799] lwtunnel_output(): recursion limit reached on datapath [ 2636.076948][T17082] kAFS: unable to lookup cell '' [ 2636.192665][T12563] usb 3-1: USB disconnect, device number 42 [ 2636.310817][T17059] hsr_slave_0: entered promiscuous mode [ 2636.321176][T17059] hsr_slave_1: entered promiscuous mode [ 2636.336022][T17059] debugfs: 'hsr0' already exists in 'hsr' [ 2636.356553][T17059] Cannot create hsr debugfs directory [ 2636.472300][T13459] udevd[13459]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2636.826602][T17091] netlink: 'syz.2.13137': attribute type 1 has an invalid length. [ 2637.184285][ T202] bridge_slave_1: left allmulticast mode [ 2637.205304][ T202] bridge_slave_1: left promiscuous mode [ 2637.233064][ T202] bridge0: port 2(bridge_slave_1) entered disabled state [ 2637.272338][ T202] bridge_slave_0: left allmulticast mode [ 2637.290580][ T202] bridge0: port 1(bridge_slave_0) entered disabled state [ 2637.320090][ T202] erspan0: left allmulticast mode [ 2637.332169][ T202] erspan0: left promiscuous mode [ 2637.343383][ T202] bridge1: port 1(erspan0) entered disabled state [ 2637.806653][ T5690] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000006c: -61 [ 2637.884375][ T5690] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -61 [ 2637.982741][ T202] bond2 (unregistering): (slave gretap1): Releasing active interface [ 2637.997632][T12290] Bluetooth: hci4: command tx timeout [ 2638.077973][T17097] fuse: Bad value for 'fd' [ 2638.234608][ T202] bond1 (unregistering): Released all slaves [ 2638.283914][ T202] bond2 (unregistering): Released all slaves [ 2638.565281][T12563] usb 6-1: new high-speed USB device number 110 using dummy_hcd [ 2638.622400][ T202] tipc: Left network mode [ 2638.762951][T12563] usb 6-1: Using ep0 maxpacket: 16 [ 2638.764686][ T29] audit: type=1326 audit(1787304943.033:4216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17105 comm="syz.2.13142" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf704f0ec code=0x0 [ 2638.834067][T12563] usb 6-1: unable to get BOS descriptor or descriptor too short [ 2638.859363][T12563] usb 6-1: New USB device found, idVendor=0458, idProduct=501a, bcdDevice= 0.40 [ 2638.915499][T12563] usb 6-1: config 1 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 213, changing to 11 [ 2638.950283][T12563] usb 6-1: config 1 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2639.047422][T12563] usb 6-1: config 1 interface 0 has no altsetting 0 [ 2639.091053][T12563] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2639.104476][T12563] usb 6-1: Product: 뇩숢逗厥엪莜Β盕檶켄纕꽻죇ⲱ贷㙚埸嫺魎賟﵍ḽ⬑⢖離捍是퀉昛㪔窲駻맷ᴏ종兿ꗱￖ苬䱍ो舠짷럠⑤褅씜܂ [ 2639.251034][T12563] usb 6-1: Manufacturer: 㐁 [ 2639.276245][T12563] usb 6-1: SerialNumber: ᅦጐઞﶝ⨧瞹朞埏䧮๮㎷ಽ䧂⸿蘒铃⠓솫睋쉿紩애椒腒鯁ᓭꊽ籉㢺푈︪㬉䖤愼ꡇ蔂ꚍ㷎ﷻ欄ビ磴쐚결뗡ᶤ궁拵ୈ蝹␄ [ 2639.627667][ T2134] usb 4-1: USB disconnect, device number 3 [ 2639.668462][T12563] usbhid 6-1:1.0: can't add hid device: -71 [ 2639.709682][T12563] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 2639.864243][T12563] usb 6-1: USB disconnect, device number 110 [ 2639.981945][T17130] fuse: Bad value for 'user_id' [ 2640.031678][T17130] fuse: Bad value for 'user_id' [ 2640.068223][T12290] Bluetooth: hci4: command tx timeout [ 2640.320950][T17139] netlink: 16 bytes leftover after parsing attributes in process `syz.2.13148'. [ 2640.367595][T12563] usb 6-1: new high-speed USB device number 111 using dummy_hcd [ 2640.401125][ T5273] 8021q: adding VLAN 0 to HW filter on device eth5 [ 2640.430979][ T202] hsr_slave_0: left promiscuous mode [ 2640.453286][ T202] hsr_slave_1: left promiscuous mode [ 2640.459061][T17141] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13149'. [ 2640.471036][ T202] veth1_macvtap: left promiscuous mode [ 2640.471310][T17141] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13149'. [ 2640.477536][ T202] veth0_macvtap: left promiscuous mode [ 2640.491381][ T202] veth1_vlan: left promiscuous mode [ 2640.497354][ T202] veth0_vlan: left promiscuous mode [ 2640.512329][T17142] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13149'. [ 2640.521553][T17142] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13149'. [ 2640.552174][T13806] lwtunnel_output(): recursion limit reached on datapath [ 2640.560482][T12563] usb 6-1: Using ep0 maxpacket: 8 [ 2640.572710][T12563] usb 6-1: unable to get BOS descriptor or descriptor too short [ 2640.590018][T12563] usb 6-1: New USB device found, idVendor=8086, idProduct=0b63, bcdDevice=b6.be [ 2640.611053][T12563] usb 6-1: config 3 has an invalid interface number: 20 but max is 0 [ 2640.652595][T12563] usb 6-1: config 3 has no interface number 0 [ 2640.660317][T12563] usb 6-1: config 3 interface 20 altsetting 67 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 2640.673615][T12563] usb 6-1: config 3 interface 20 has no altsetting 0 [ 2640.709796][T12563] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2640.722723][T17144] fuse: Bad value for 'fd' [ 2640.727445][T12563] usb 6-1: Product: syz [ 2640.731670][T12563] usb 6-1: Manufacturer: syz [ 2640.738373][T12563] usb 6-1: SerialNumber: syz [ 2640.950713][ T202] team0 (unregistering): Port device team_slave_1 removed [ 2640.968714][T17148] netlink: 'syz.3.13151': attribute type 1 has an invalid length. [ 2640.980183][T17130] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2640.997915][ T202] team0 (unregistering): Port device team_slave_0 removed [ 2641.007497][T17130] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2641.188111][T13806] lwtunnel_output(): recursion limit reached on datapath [ 2641.608441][T13685] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 2641.661405][T13806] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 2641.722788][T12563] ljca 6-1:3.20: bulk endpoints not found [ 2641.729222][T13806] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 2641.755642][T12563] usb 6-1: USB disconnect, device number 111 [ 2641.775023][T13806] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 2641.948415][ T1892] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 2642.136263][ T1892] usb 3-1: Using ep0 maxpacket: 32 [ 2642.145062][T12290] Bluetooth: hci4: command tx timeout [ 2642.156838][ T1892] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 2642.193568][ T1892] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 2642.226124][ T1892] usb 3-1: config 0 has no interface number 0 [ 2642.249153][ T1892] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2642.269950][ T1892] usb 3-1: Product: syz [ 2642.276335][ T1892] usb 3-1: Manufacturer: syz [ 2642.289910][ T1892] usb 3-1: SerialNumber: syz [ 2642.309184][ T1892] usb 3-1: config 0 descriptor?? [ 2642.749907][ T1892] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 2642.768946][T17059] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2642.780882][ T1892] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 2642.807978][T17059] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2642.832597][T17059] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2642.853899][T17059] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2642.875353][T17059] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2642.917321][T17059] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 2642.942879][T17059] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2642.981111][T17059] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2643.336422][T17177] netlink: 'syz.3.13156': attribute type 1 has an invalid length. [ 2643.390261][T17182] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13156'. [ 2643.513187][T17184] netlink: 'syz.3.13156': attribute type 10 has an invalid length. [ 2643.528385][T17184] netlink: 40 bytes leftover after parsing attributes in process `syz.3.13156'. [ 2643.562353][T17177] bond1: option mode: invalid value (7) [ 2643.571600][T17177] bond1 (unregistering): Released all slaves [ 2643.643110][T17184] dummy0: entered promiscuous mode [ 2643.722792][T17059] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2643.769057][T17059] 8021q: adding VLAN 0 to HW filter on device team0 [ 2643.799739][T13799] bridge0: port 1(bridge_slave_0) entered blocking state [ 2643.806995][T13799] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2643.843530][T17193] program syz.3.13160 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2643.860948][T13799] bridge0: port 2(bridge_slave_1) entered blocking state [ 2643.868236][T13799] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2644.021667][T17059] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2644.136383][T17059] veth0_vlan: entered promiscuous mode [ 2644.168468][T17059] veth1_vlan: entered promiscuous mode [ 2644.236881][T17059] veth0_macvtap: entered promiscuous mode [ 2644.253042][T17059] veth1_macvtap: entered promiscuous mode [ 2644.297599][T17059] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2644.316870][T17059] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2644.440958][T13799] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2644.471016][T13799] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2644.492205][T17208] netlink: 'syz.3.13164': attribute type 1 has an invalid length. [ 2644.539264][T13799] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2644.598923][T17208] netlink: 20 bytes leftover after parsing attributes in process `syz.3.13164'. [ 2644.608344][T17208] openvswitch: netlink: Flow actions attr not present in new flow. [ 2644.687263][T13687] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2644.697058][T13685] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2644.714371][T13687] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2644.734054][T17210] fuse: Bad value for 'user_id' [ 2644.750897][T17210] fuse: Bad value for 'user_id' [ 2644.773210][T17210] fuse: Bad value for 'user_id' [ 2644.794443][T17210] fuse: Bad value for 'user_id' [ 2644.870550][ T1892] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000006c: -61 [ 2644.881850][T13806] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2644.903363][ T1892] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -61 [ 2644.919891][T13806] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2645.129283][T17218] macsec1: entered allmulticast mode [ 2645.150622][T17218] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 2645.195554][T17218] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 2645.233779][T17218] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 2645.259716][T17218] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 2645.303403][T15581] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 2645.643228][T17230] program syz.1.13171 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2646.305716][T13687] lwtunnel_output(): recursion limit reached on datapath [ 2646.503224][T15581] usb 3-1: USB disconnect, device number 43 [ 2646.614119][T17246] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2646.630612][T17246] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2646.951603][T12276] lwtunnel_output(): recursion limit reached on datapath [ 2647.270298][T17267] netlink: 'syz.3.13183': attribute type 1 has an invalid length. [ 2647.312921][T17270] netlink: 128 bytes leftover after parsing attributes in process `syz.2.13185'. [ 2647.323871][T17267] netlink: 20 bytes leftover after parsing attributes in process `syz.3.13183'. [ 2647.343547][T17267] openvswitch: netlink: Flow actions attr not present in new flow. [ 2647.597000][T17273] binder: 17262:17273 ioctl c0306201 800003c0 returned -14 [ 2647.642680][T17272] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13184'. [ 2647.775039][T15893] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 2647.935088][T15893] usb 3-1: Using ep0 maxpacket: 32 [ 2647.943070][T15893] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 2647.961175][T15893] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 2647.979992][T15893] usb 3-1: config 0 has no interface number 0 [ 2648.005674][T15893] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2648.029134][T15893] usb 3-1: Product: syz [ 2648.039756][T15893] usb 3-1: Manufacturer: syz [ 2648.055813][T15893] usb 3-1: SerialNumber: syz [ 2648.075774][T15893] usb 3-1: config 0 descriptor?? [ 2648.502584][T15893] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 2648.549094][T15893] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 2648.874965][ T1892] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 2649.035678][ T1892] usb 4-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice= 0.40 [ 2649.058183][ T1892] usb 4-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2649.098855][ T1892] usb 4-1: config 1 interface 0 has no altsetting 0 [ 2649.118028][T17289] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13193'. [ 2649.119439][ T1892] usb 4-1: string descriptor 0 read error: -22 [ 2649.152455][ T1892] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2649.633966][T17281] macvtap0: entered promiscuous mode [ 2649.639916][T17281] macvtap0: entered allmulticast mode [ 2649.645589][T15581] usb 6-1: new high-speed USB device number 113 using dummy_hcd [ 2649.671084][ T1892] usbhid 4-1:1.0: can't add hid device: -71 [ 2649.677747][ T1892] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 2649.690348][ T1892] usb 4-1: USB disconnect, device number 4 [ 2649.804981][T15581] usb 6-1: Using ep0 maxpacket: 8 [ 2649.813468][T15581] usb 6-1: New USB device found, idVendor=5140, idProduct=5015, bcdDevice= 0.00 [ 2649.823972][T15581] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2649.835750][T15581] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2649.849229][T15581] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2649.864834][T15581] usb 6-1: config 0 descriptor?? [ 2650.403964][T17304] netlink: 'syz.3.13198': attribute type 1 has an invalid length. [ 2650.424708][T17304] netlink: 20 bytes leftover after parsing attributes in process `syz.3.13198'. [ 2650.446871][T17304] openvswitch: netlink: Flow actions attr not present in new flow. [ 2650.614239][T15893] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000006c: -61 [ 2650.631361][T15893] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -61 [ 2651.722211][T17311] KVM: debugfs: duplicate directory 17311-4 [ 2651.838777][T17313] FAULT_INJECTION: forcing a failure. [ 2651.838777][T17313] name failslab, interval 1, probability 0, space 9, times 0 [ 2651.852767][T17313] CPU: 0 UID: 0 PID: 17313 Comm: syz.6.13201 Tainted: G L syzkaller #0 PREEMPT(full) [ 2651.852805][T17313] Tainted: [L]=SOFTLOCKUP [ 2651.852813][T17313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2651.852827][T17313] Call Trace: [ 2651.852835][T17313] [ 2651.852845][T17313] dump_stack_lvl+0xe8/0x150 [ 2651.852895][T17313] should_fail_ex+0x410/0x560 [ 2651.852927][T17313] should_failslab+0xa8/0x100 [ 2651.852959][T17313] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 2651.852984][T17313] ? skb_clone+0x212/0x3a0 [ 2651.853013][T17313] ? skb_clone+0x212/0x3a0 [ 2651.853048][T17313] skb_clone+0x212/0x3a0 [ 2651.853081][T17313] __netlink_deliver_tap+0x413/0x860 [ 2651.853127][T17313] ? netlink_deliver_tap+0x2e/0x1b0 [ 2651.853159][T17313] netlink_deliver_tap+0x19c/0x1b0 [ 2651.853190][T17313] netlink_unicast+0x781/0x940 [ 2651.853230][T17313] netlink_sendmsg+0x813/0xb40 [ 2651.853271][T17313] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2651.853305][T17313] ? aa_sock_msg_perm+0xf6/0x1c0 [ 2651.853339][T17313] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2651.853368][T17313] sock_sendmsg_nosec+0x13a/0x180 [ 2651.853394][T17313] ____sys_sendmsg+0x54e/0x850 [ 2651.853429][T17313] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2651.853475][T17313] ___sys_sendmsg+0x2a5/0x360 [ 2651.853501][T17313] ? __lock_acquire+0x683/0x2cf0 [ 2651.853536][T17313] ? __pfx____sys_sendmsg+0x10/0x10 [ 2651.853564][T17313] ? get_pid_task+0x20/0x1f0 [ 2651.853592][T17313] ? get_pid_task+0x20/0x1f0 [ 2651.853618][T17313] ? get_pid_task+0x20/0x1f0 [ 2651.853678][T17313] ? __fget_files+0x2a/0x420 [ 2651.853706][T17313] ? __fget_files+0x3a2/0x420 [ 2651.853745][T17313] __sys_sendmsg+0x177/0x240 [ 2651.853777][T17313] ? __pfx___sys_sendmsg+0x10/0x10 [ 2651.853826][T17313] __do_fast_syscall_32+0x27a/0x6a0 [ 2651.853853][T17313] ? do_fast_syscall_32+0x33/0x70 [ 2651.853885][T17313] ? asm_int80_emulation+0x1a/0x20 [ 2651.853905][T17313] ? do_int80_emulation+0x299/0x500 [ 2651.853926][T17313] ? trace_irq_disable+0x3b/0x140 [ 2651.853959][T17313] do_fast_syscall_32+0x33/0x70 [ 2651.853982][T17313] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2651.854007][T17313] RIP: 0023:0xf7f770ec [ 2651.854028][T17313] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 2651.854046][T17313] RSP: 002b:00000000f543650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 2651.854070][T17313] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000140 [ 2651.854085][T17313] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 2651.854098][T17313] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2651.854111][T17313] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2651.854124][T17313] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2651.854156][T17313] [ 2652.072809][T13685] lwtunnel_output(): recursion limit reached on datapath [ 2652.105903][ T202] lwtunnel_output(): recursion limit reached on datapath [ 2652.168174][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 2652.174582][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 2652.361809][T15893] usb 3-1: USB disconnect, device number 44 [ 2652.681517][T17318] program syz.2.13203 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2652.927462][T17329] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13207'. [ 2652.954984][ T5690] fq: likely mono tstamp with tstamp_type 0 [ 2653.432383][ T5690] fq: likely mono tstamp with tstamp_type 0 [ 2653.529573][T15581] usbhid 6-1:0.0: can't add hid device: -71 [ 2653.554994][T15581] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 2653.613597][T15581] usb 6-1: USB disconnect, device number 113 [ 2654.136540][T15581] usb 6-1: new high-speed USB device number 114 using dummy_hcd [ 2654.266148][T15893] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 2654.315080][T15581] usb 6-1: Using ep0 maxpacket: 32 [ 2654.323153][T15581] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 2654.333769][T15581] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 2654.341954][T15581] usb 6-1: config 0 has no interface number 0 [ 2654.350464][T15581] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2654.358730][T15581] usb 6-1: Product: syz [ 2654.362939][T15581] usb 6-1: Manufacturer: syz [ 2654.368916][T15581] usb 6-1: SerialNumber: syz [ 2654.382630][T15581] usb 6-1: config 0 descriptor?? [ 2654.424982][T15893] usb 3-1: Using ep0 maxpacket: 16 [ 2654.432277][T15893] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2654.440752][T15893] usb 3-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 0.40 [ 2654.451401][T15893] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2654.475602][T15893] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 2654.487729][T15893] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2654.497444][T15893] usb 3-1: Product: syz [ 2654.501674][T15893] usb 3-1: Manufacturer: syz [ 2654.506503][T15893] usb 3-1: SerialNumber: syz [ 2654.534261][ T5690] fq: likely mono tstamp with tstamp_type 0 [ 2654.733051][T17350] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13214'. [ 2654.806461][T15581] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 2654.811759][T15893] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 2654.817597][T15581] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 2654.842804][T15893] usb 3-1: selecting invalid altsetting 1 [ 2654.850192][T15893] snd-usb-caiaq 3-1:1.0: can't set alt interface. [ 2654.856961][T15893] usb 3-1: unable to init card! (ret=-5) [ 2654.863090][T15893] snd-usb-caiaq 3-1:1.0: probe with driver snd-usb-caiaq failed with error -5 [ 2654.877131][T15893] usb 3-1: selecting invalid altsetting 1 [ 2654.885271][T15893] snd-usb-caiaq 3-1:1.1: can't set alt interface. [ 2654.891738][T15893] usb 3-1: unable to init card! (ret=-5) [ 2654.898035][T15893] snd-usb-caiaq 3-1:1.1: probe with driver snd-usb-caiaq failed with error -5 [ 2654.910490][T15893] usb 3-1: USB disconnect, device number 45 [ 2654.933777][T13819] udevd[13819]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2655.830532][T17356] hub 8-0:1.0: USB hub found [ 2655.838550][T17356] hub 8-0:1.0: 1 port detected [ 2656.235637][ T5690] fq: likely mono tstamp with tstamp_type 0 [ 2656.832770][T15581] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000006c: -61 [ 2656.844041][T15581] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -61 [ 2657.044912][ T5690] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 2657.191110][T13687] lwtunnel_output(): recursion limit reached on datapath [ 2657.214901][ T5690] usb 3-1: Using ep0 maxpacket: 32 [ 2657.221019][ T5690] usb 3-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 2657.231647][ T5690] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2657.243286][ T5690] usb 3-1: config 0 descriptor?? [ 2657.252892][ T5690] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 2657.337933][T21334] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 2657.417610][T17376] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13213'. [ 2657.475057][T21334] usb 4-1: device descriptor read/64, error -71 [ 2657.715840][T21334] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 2657.826060][T13685] lwtunnel_output(): recursion limit reached on datapath [ 2657.844924][T21334] usb 4-1: device descriptor read/64, error -71 [ 2657.955413][T21334] usb usb4-port1: attempt power cycle [ 2658.295757][T21334] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 2658.316954][T21334] usb 4-1: device descriptor read/8, error -71 [ 2658.479232][T15893] usb 6-1: USB disconnect, device number 114 [ 2658.555142][T21334] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 2658.587098][T21334] usb 4-1: device descriptor read/8, error -71 [ 2658.631240][T17380] binder: 17379:17380 unknown command 1074553622 [ 2658.638545][T17380] binder: 17379:17380 ioctl c0306201 80000640 returned -22 [ 2658.705488][T21334] usb usb4-port1: unable to enumerate USB device [ 2659.060755][ T5690] gspca_vc032x: reg_r err -32 [ 2659.069293][ T5690] gspca_vc032x: I2c Bus Busy Wait 00 [ 2659.080477][ T5690] gspca_vc032x: I2c Bus Busy Wait 00 [ 2659.086208][ T5690] gspca_vc032x: I2c Bus Busy Wait 00 [ 2659.091786][ T5690] gspca_vc032x: I2c Bus Busy Wait 00 [ 2659.099469][ T5690] gspca_vc032x: I2c Bus Busy Wait 00 [ 2659.114030][ T5690] gspca_vc032x: I2c Bus Busy Wait 00 [ 2659.128122][ T5690] gspca_vc032x: I2c Bus Busy Wait 00 [ 2659.146924][ T5690] gspca_vc032x: I2c Bus Busy Wait 00 [ 2659.162561][ T5690] gspca_vc032x: I2c Bus Busy Wait 00 [ 2659.171857][ T5690] gspca_vc032x: I2c Bus Busy Wait 00 [ 2659.192977][ T5690] gspca_vc032x: I2c Bus Busy Wait 00 [ 2659.200128][ T5690] gspca_vc032x: I2c Bus Busy Wait 00 [ 2659.208398][T17390] dlm: no locking on control device [ 2659.215521][ T5690] gspca_vc032x: I2c Bus Busy Wait 00 [ 2659.223699][ T5690] gspca_vc032x: I2c Bus Busy Wait 00 [ 2659.229373][ T5690] gspca_vc032x: I2c Bus Busy Wait 00 [ 2659.235791][ T5690] gspca_vc032x: I2c Bus Busy Wait 00 [ 2659.241125][ T5690] gspca_vc032x: I2c Bus Busy Wait 00 [ 2659.247752][ T5690] gspca_vc032x: I2c Bus Busy Wait 00 [ 2659.253073][ T5690] gspca_vc032x: Unknown sensor... [ 2659.262866][ T5690] vc032x 3-1:0.0: probe with driver vc032x failed with error -22 [ 2659.677271][T26170] fq: likely mono tstamp with tstamp_type 0 [ 2660.102853][T21334] usb 3-1: USB disconnect, device number 46 [ 2660.455473][ T29] audit: type=1804 audit(1787304964.733:4217): pid=17415 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.13239" name="bus" dev="ramfs" ino=267103 res=1 errno=0 [ 2661.129569][T17423] netlink: 16 bytes leftover after parsing attributes in process `syz.6.13242'. [ 2662.166287][T17438] FAULT_INJECTION: forcing a failure. [ 2662.166287][T17438] name failslab, interval 1, probability 0, space 9, times 0 [ 2662.179506][T17438] CPU: 1 UID: 0 PID: 17438 Comm: syz.5.13247 Tainted: G L syzkaller #0 PREEMPT(full) [ 2662.179540][T17438] Tainted: [L]=SOFTLOCKUP [ 2662.179547][T17438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2662.179559][T17438] Call Trace: [ 2662.179568][T17438] [ 2662.179576][T17438] dump_stack_lvl+0xe8/0x150 [ 2662.179611][T17438] should_fail_ex+0x410/0x560 [ 2662.179642][T17438] should_failslab+0xa8/0x100 [ 2662.179671][T17438] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 2662.179695][T17438] ? kmem_cache_alloc_noprof+0x152/0x5f0 [ 2662.179724][T17438] ? __kvm_mmu_topup_memory_cache+0x1b2/0x600 [ 2662.179751][T17438] ? __kvm_mmu_topup_memory_cache+0x1b2/0x600 [ 2662.179786][T17438] __kvm_mmu_topup_memory_cache+0x1b2/0x600 [ 2662.179828][T17438] mmu_topup_memory_caches+0x21/0x170 [ 2662.179859][T17438] kvm_mmu_load+0x9d/0x2270 [ 2662.179889][T17438] ? kvm_msr_allowed+0x9a/0x490 [ 2662.179908][T17438] ? kvm_msr_allowed+0x3f4/0x490 [ 2662.179927][T17438] ? kvm_msr_allowed+0x9a/0x490 [ 2662.179944][T17438] ? kvm_msr_allowed+0x9a/0x490 [ 2662.179970][T17438] ? kvm_apic_has_interrupt+0x740/0x770 [ 2662.180004][T17438] vcpu_run+0x4e34/0x7950 [ 2662.180102][T17438] ? __pfx_vcpu_run+0x10/0x10 [ 2662.180124][T17438] ? kvm_arch_vcpu_ioctl_run+0x2ba/0x2010 [ 2662.180149][T17438] ? kvm_arch_vcpu_ioctl_run+0x2ba/0x2010 [ 2662.180175][T17438] ? fpu_swap_kvm_fpstate+0xcb/0x510 [ 2662.180209][T17438] kvm_arch_vcpu_ioctl_run+0x13ed/0x2010 [ 2662.180233][T17438] ? __lock_acquire+0x683/0x2cf0 [ 2662.180276][T17438] ? kvm_arch_vcpu_ioctl_run+0x2ba/0x2010 [ 2662.180301][T17438] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 2662.180329][T17438] ? __lock_acquire+0x683/0x2cf0 [ 2662.180365][T17438] ? __mutex_lock+0x30b/0x1550 [ 2662.180411][T17438] ? do_raw_write_lock+0x11d/0x260 [ 2662.180458][T17438] kvm_vcpu_ioctl+0xa61/0xfd0 [ 2662.180487][T17438] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 2662.180507][T17438] ? do_vfs_ioctl+0x116f/0x1530 [ 2662.180534][T17438] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 2662.180573][T17438] ? hook_file_ioctl_compat+0x1f0/0x5f0 [ 2662.180619][T17438] kvm_vcpu_compat_ioctl+0x204/0x390 [ 2662.180645][T17438] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 2662.180670][T17438] ? __fget_files+0x3a2/0x420 [ 2662.180697][T17438] ? __fget_files+0x2a/0x420 [ 2662.180736][T17438] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 2662.180765][T17438] __ia32_compat_sys_ioctl+0x5ea/0x950 [ 2662.180793][T17438] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 2662.180818][T17438] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2662.180842][T17438] ? __fget_files+0x3a2/0x420 [ 2662.180876][T17438] ? fput+0xa0/0xd0 [ 2662.180902][T17438] ? ksys_write+0x242/0x270 [ 2662.180946][T17438] __do_fast_syscall_32+0x27a/0x6a0 [ 2662.180972][T17438] ? do_fast_syscall_32+0x33/0x70 [ 2662.180995][T17438] ? asm_int80_emulation+0x1a/0x20 [ 2662.181015][T17438] ? do_int80_emulation+0x299/0x500 [ 2662.181036][T17438] ? trace_irq_disable+0x3b/0x140 [ 2662.181067][T17438] do_fast_syscall_32+0x33/0x70 [ 2662.181091][T17438] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2662.181115][T17438] RIP: 0023:0xf70bf0ec [ 2662.181135][T17438] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 2662.181153][T17438] RSP: 002b:00000000f54ad50c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 2662.181177][T17438] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 000000000000ae80 [ 2662.181191][T17438] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2662.181204][T17438] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2662.181215][T17438] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2662.181228][T17438] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2662.181261][T17438] [ 2662.869246][T12268] lwtunnel_output(): recursion limit reached on datapath [ 2662.946918][T13685] lwtunnel_output(): recursion limit reached on datapath [ 2663.164899][T15581] usb 6-1: new high-speed USB device number 115 using dummy_hcd [ 2663.327963][T15581] usb 6-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice= 0.40 [ 2663.343778][T15581] usb 6-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2663.384376][T15581] usb 6-1: config 1 interface 0 has no altsetting 0 [ 2663.408710][T15581] usb 6-1: string descriptor 0 read error: -22 [ 2663.438747][T15581] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2663.771777][T17465] netlink: 'syz.3.13256': attribute type 1 has an invalid length. [ 2663.810713][T17465] netlink: 20 bytes leftover after parsing attributes in process `syz.3.13256'. [ 2663.838582][T17465] openvswitch: netlink: Flow actions attr not present in new flow. [ 2663.945095][T15581] usbhid 6-1:1.0: can't add hid device: -71 [ 2663.956984][T15581] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 2663.981652][T15581] usb 6-1: USB disconnect, device number 115 [ 2664.633594][T17476] fuse: Bad value for 'fd' [ 2664.870132][ T29] audit: type=1326 audit(1787304969.143:4218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17482 comm="syz.1.13263" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff60ec code=0x7ffc0000 [ 2664.920088][T17485] FAULT_INJECTION: forcing a failure. [ 2664.920088][T17485] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2664.964123][ T29] audit: type=1326 audit(1787304969.143:4219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17482 comm="syz.1.13263" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff60ec code=0x7ffc0000 [ 2664.995242][T17486] netlink: 666 bytes leftover after parsing attributes in process `syz.5.13264'. [ 2664.997957][T17485] CPU: 1 UID: 0 PID: 17485 Comm: syz.1.13263 Tainted: G L syzkaller #0 PREEMPT(full) [ 2664.997989][T17485] Tainted: [L]=SOFTLOCKUP [ 2664.997997][T17485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2664.998008][T17485] Call Trace: [ 2664.998017][T17485] [ 2664.998025][T17485] dump_stack_lvl+0xe8/0x150 [ 2664.998058][T17485] should_fail_ex+0x410/0x560 [ 2664.998088][T17485] _copy_from_iter+0x1d3/0x1660 [ 2664.998112][T17485] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 2664.998143][T17485] ? __pfx_policy_nodemask+0x10/0x10 [ 2664.998169][T17485] ? is_bpf_text_address+0x292/0x2b0 [ 2664.998196][T17485] ? is_bpf_text_address+0x26/0x2b0 [ 2664.998214][T17485] ? __pfx__copy_from_iter+0x10/0x10 [ 2664.998240][T17485] ? alloc_pages_mpol+0x24a/0x390 [ 2664.998275][T17485] copy_page_from_iter+0x219/0x2d0 [ 2664.998304][T17485] tun_get_user+0x1c16/0x44d0 [ 2664.998334][T17485] ? tun_get_user+0x70a/0x44d0 [ 2664.998373][T17485] ? aa_file_perm+0x4ed/0x15f0 [ 2664.998399][T17485] ? __pfx_tun_get_user+0x10/0x10 [ 2664.998424][T17485] ? __lock_acquire+0x683/0x2cf0 [ 2664.998465][T17485] ? ref_tracker_alloc+0x341/0x4b0 [ 2664.998493][T17485] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 2664.998520][T17485] ? tun_get+0x1c/0x2f0 [ 2664.998542][T17485] ? tun_get+0x1c/0x2f0 [ 2664.998569][T17485] ? tun_get+0x1c/0x2f0 [ 2664.998590][T17485] ? tun_get+0x1c/0x2f0 [ 2664.998616][T17485] tun_chr_write_iter+0x113/0x200 [ 2664.998641][T17485] vfs_write+0x612/0xba0 [ 2664.998677][T17485] ? __pfx_vfs_write+0x10/0x10 [ 2664.998714][T17485] ? __fget_files+0x2a/0x420 [ 2664.998748][T17485] ksys_write+0x150/0x270 [ 2664.998778][T17485] ? __pfx_ksys_write+0x10/0x10 [ 2664.998809][T17485] ? __seccomp_permit_syscall+0xe7/0x2b0 [ 2664.998834][T17485] do_int80_emulation+0x198/0x500 [ 2664.998856][T17485] ? trace_irq_disable+0x3b/0x140 [ 2664.998879][T17485] ? asm_int80_emulation+0x1a/0x20 [ 2664.998897][T17485] ? clear_bhb_loop+0x70/0xc0 [ 2664.998916][T17485] ? clear_bhb_loop+0x70/0xc0 [ 2664.998939][T17485] asm_int80_emulation+0x1a/0x20 [ 2664.998957][T17485] RIP: 0023:0xf71f74eb [ 2664.998975][T17485] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 2664.998990][T17485] RSP: 002b:00000000f54b644c EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 2664.999012][T17485] RAX: ffffffffffffffda RBX: 00000000000000c8 RCX: 0000000080000000 [ 2664.999025][T17485] RDX: 0000000000000022 RSI: 0000000000000000 RDI: 0000000000000000 [ 2664.999037][T17485] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2664.999048][T17485] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2664.999059][T17485] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2664.999087][T17485] [ 2665.285121][ T29] audit: type=1326 audit(1787304969.143:4220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17482 comm="syz.1.13263" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=125 compat=1 ip=0xf7ff60ec code=0x7ffc0000 [ 2665.309874][ T29] audit: type=1326 audit(1787304969.143:4221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17482 comm="syz.1.13263" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff60ec code=0x7ffc0000 [ 2665.413451][ T29] audit: type=1326 audit(1787304969.143:4222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17482 comm="syz.1.13263" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff60ec code=0x7ffc0000 [ 2665.495008][ T29] audit: type=1326 audit(1787304969.193:4223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17482 comm="syz.1.13263" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf71f74eb code=0x7ffc0000 [ 2665.522033][ T29] audit: type=1326 audit(1787304969.193:4224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17482 comm="syz.1.13263" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf71f74eb code=0x7ffc0000 [ 2665.551001][ T29] audit: type=1326 audit(1787304969.193:4225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17482 comm="syz.1.13263" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf71f74eb code=0x7ffc0000 [ 2665.626713][ T29] audit: type=1326 audit(1787304969.273:4226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17482 comm="syz.1.13263" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=3 compat=1 ip=0xf71f74eb code=0x7ffc0000 [ 2665.772748][ T29] audit: type=1326 audit(1787304969.273:4227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17482 comm="syz.1.13263" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf71f74eb code=0x7ffc0000 [ 2665.836822][T17493] hub 8-0:1.0: USB hub found [ 2665.864034][ T29] audit: type=1326 audit(1787304969.273:4228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17482 comm="syz.1.13263" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=6 compat=1 ip=0xf71f74eb code=0x7ffc0000 [ 2665.893410][T17493] hub 8-0:1.0: 1 port detected [ 2665.945311][ T29] audit: type=1326 audit(1787304969.273:4229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17482 comm="syz.1.13263" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff60ec code=0x7ffc0000 [ 2665.983862][T17499] syzkaller0: entered promiscuous mode [ 2665.996721][T17499] syzkaller0: entered allmulticast mode [ 2666.094382][ T29] audit: type=1326 audit(1787304969.273:4230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17482 comm="syz.1.13263" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff60ec code=0x7ffc0000 [ 2666.160722][T17500] [ 2666.163075][T17500] ====================================================== [ 2666.170156][T17500] WARNING: possible circular locking dependency detected [ 2666.177205][T17500] syzkaller #0 Tainted: G L [ 2666.183186][T17500] ------------------------------------------------------ [ 2666.190241][T17500] syz.3.13268/17500 is trying to acquire lock: [ 2666.196382][T17500] ffffffff8ec67520 (pcpu_alloc_mutex){+.+.}-{4:4}, at: pcpu_alloc_noprof+0x231/0x1900 [ 2666.205961][T17500] [ 2666.205961][T17500] but task is already holding lock: [ 2666.213316][T17500] ffff888027033bc0 (&q->blkcg_mutex){+.+.}-{4:4}, at: blkg_conf_prep+0xa3/0xd80 [ 2666.222429][T17500] [ 2666.222429][T17500] which lock already depends on the new lock. [ 2666.222429][T17500] [ 2666.232828][T17500] [ 2666.232828][T17500] the existing dependency chain (in reverse order) is: [ 2666.241838][T17500] [ 2666.241838][T17500] -> #3 (&q->blkcg_mutex){+.+.}-{4:4}: [ 2666.249495][T17500] __mutex_lock+0x19d/0x1550 [ 2666.254611][T17500] blkcg_activate_policy+0x1cb/0x8e0 [ 2666.260507][T17500] blk_throtl_init+0x2f7/0x420 [ 2666.265819][T17500] tg_set_conf+0x1db/0x4e0 [ 2666.270773][T17500] cgroup_file_write+0x331/0x8f0 [ 2666.276289][T17500] kernfs_fop_write_iter+0x3a4/0x540 [ 2666.282145][T17500] vfs_write+0x612/0xba0 [ 2666.286920][T17500] ksys_write+0x150/0x270 [ 2666.291773][T17500] __do_fast_syscall_32+0x27a/0x6a0 [ 2666.297490][T17500] do_fast_syscall_32+0x33/0x70 [ 2666.302857][T17500] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2666.309705][T17500] [ 2666.309705][T17500] -> #2 (&q->q_usage_counter(io)#17){++++}-{0:0}: [ 2666.318307][T17500] blk_alloc_queue+0x544/0x690 [ 2666.323653][T17500] __blk_mq_alloc_disk+0x194/0x390 [ 2666.329324][T17500] loop_add+0x480/0xb40 [ 2666.334035][T17500] loop_init+0xd7/0x160 [ 2666.338768][T17500] do_one_initcall+0x250/0x870 [ 2666.344060][T17500] do_initcall_level+0x10a/0x1a0 [ 2666.349535][T17500] do_initcalls+0x59/0xa0 [ 2666.354400][T17500] kernel_init_freeable+0x29d/0x3e0 [ 2666.360120][T17500] kernel_init+0x22/0x1d0 [ 2666.364995][T17500] ret_from_fork+0x514/0xb70 [ 2666.370141][T17500] ret_from_fork_asm+0x1a/0x30 [ 2666.375427][T17500] [ 2666.375427][T17500] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 2666.382632][T17500] fs_reclaim_acquire+0x71/0x100 [ 2666.388092][T17500] prepare_alloc_pages+0x15b/0x650 [ 2666.393717][T17500] __alloc_frozen_pages_noprof+0x12f/0x380 [ 2666.400038][T17500] __alloc_pages_noprof+0x10/0x100 [ 2666.405666][T17500] pcpu_populate_chunk+0x181/0xb30 [ 2666.411321][T17500] pcpu_alloc_noprof+0xbca/0x1900 [ 2666.416873][T17500] __alloc+0x80/0x170 [ 2666.421422][T17500] alloc_bulk+0x319/0x4f0 [ 2666.426286][T17500] bpf_mem_alloc_init+0x4a5/0xc90 [ 2666.431831][T17500] htab_map_alloc+0x8a5/0xc90 [ 2666.437021][T17500] map_create+0xf3d/0x1b70 [ 2666.441972][T17500] __sys_bpf+0xaea/0xd90 [ 2666.446730][T17500] __ia32_sys_bpf+0xba/0xd0 [ 2666.451752][T17500] __do_fast_syscall_32+0x27a/0x6a0 [ 2666.457469][T17500] do_fast_syscall_32+0x33/0x70 [ 2666.462842][T17500] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2666.469692][T17500] [ 2666.469692][T17500] -> #0 (pcpu_alloc_mutex){+.+.}-{4:4}: [ 2666.477417][T17500] __lock_acquire+0x1520/0x2cf0 [ 2666.482792][T17500] lock_acquire+0x106/0x350 [ 2666.487814][T17500] __mutex_lock+0x19d/0x1550 [ 2666.492919][T17500] pcpu_alloc_noprof+0x231/0x1900 [ 2666.498454][T17500] percpu_ref_init+0x42/0x350 [ 2666.503645][T17500] blkg_alloc+0xee/0x8f0 [ 2666.508405][T17500] blkg_conf_prep+0x60b/0xd80 [ 2666.513595][T17500] tg_set_conf+0x20b/0x4e0 [ 2666.518524][T17500] cgroup_file_write+0x331/0x8f0 [ 2666.523976][T17500] kernfs_fop_write_iter+0x3a4/0x540 [ 2666.529777][T17500] vfs_write+0x612/0xba0 [ 2666.534535][T17500] ksys_write+0x150/0x270 [ 2666.539394][T17500] __do_fast_syscall_32+0x27a/0x6a0 [ 2666.545112][T17500] do_fast_syscall_32+0x33/0x70 [ 2666.550495][T17500] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2666.557353][T17500] [ 2666.557353][T17500] other info that might help us debug this: [ 2666.557353][T17500] [ 2666.567581][T17500] Chain exists of: [ 2666.567581][T17500] pcpu_alloc_mutex --> &q->q_usage_counter(io)#17 --> &q->blkcg_mutex [ 2666.567581][T17500] [ 2666.581709][T17500] Possible unsafe locking scenario: [ 2666.581709][T17500] [ 2666.589201][T17500] CPU0 CPU1 [ 2666.594559][T17500] ---- ---- [ 2666.599927][T17500] lock(&q->blkcg_mutex); [ 2666.604334][T17500] lock(&q->q_usage_counter(io)#17); [ 2666.612219][T17500] lock(&q->blkcg_mutex); [ 2666.619145][T17500] lock(pcpu_alloc_mutex); [ 2666.623642][T17500] [ 2666.623642][T17500] *** DEADLOCK *** [ 2666.623642][T17500] [ 2666.631778][T17500] locks held by syz.3.13268/17500: 6, last CPU#1: [ 2666.638236][T17500] #0: ffff88805d9c95f0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 2666.647305][T17500] #1: ffff8880363ee460 (sb_writers#10){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 2666.656266][T17500] #2: ffff88802c165880 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d8/0x540 [ 2666.666012][T17500] #3: ffff88807f69af08 (kn->active#100){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22b/0x540 [ 2666.676136][T17500] #4: ffff888027033a40 (&q->rq_qos_mutex){+.+.}-{4:4}, at: blkg_conf_open_bdev+0x2a8/0x3c0 [ 2666.686222][T17500] #5: ffff888027033bc0 (&q->blkcg_mutex){+.+.}-{4:4}, at: blkg_conf_prep+0xa3/0xd80 [ 2666.695701][T17500] [ 2666.695701][T17500] stack backtrace: [ 2666.701583][T17500] CPU: 1 UID: 0 PID: 17500 Comm: syz.3.13268 Tainted: G L syzkaller #0 PREEMPT(full) [ 2666.701604][T17500] Tainted: [L]=SOFTLOCKUP [ 2666.701609][T17500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2666.701616][T17500] Call Trace: [ 2666.701622][T17500] [ 2666.701629][T17500] dump_stack_lvl+0xe8/0x150 [ 2666.701649][T17500] print_circular_bug+0x2e1/0x300 [ 2666.701664][T17500] check_noncircular+0x12e/0x150 [ 2666.701684][T17500] __lock_acquire+0x1520/0x2cf0 [ 2666.701704][T17500] ? do_raw_spin_lock+0x12b/0x2f0 [ 2666.701720][T17500] ? pcpu_alloc_noprof+0x231/0x1900 [ 2666.701734][T17500] lock_acquire+0x106/0x350 [ 2666.701750][T17500] ? pcpu_alloc_noprof+0x231/0x1900 [ 2666.701766][T17500] __mutex_lock+0x19d/0x1550 [ 2666.701779][T17500] ? pcpu_alloc_noprof+0x231/0x1900 [ 2666.701792][T17500] ? __do_fast_syscall_32+0x27a/0x6a0 [ 2666.701805][T17500] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2666.701822][T17500] ? pcpu_alloc_noprof+0x231/0x1900 [ 2666.701836][T17500] ? __pfx___mutex_lock+0x10/0x10 [ 2666.701853][T17500] pcpu_alloc_noprof+0x231/0x1900 [ 2666.701867][T17500] ? __kasan_kmalloc+0x93/0xb0 [ 2666.701884][T17500] ? __kmalloc_cache_node_noprof+0x3d2/0x630 [ 2666.701899][T17500] ? __kmalloc_cache_node_noprof+0x1f4/0x630 [ 2666.701914][T17500] ? __pfx_blkg_release+0x10/0x10 [ 2666.701931][T17500] percpu_ref_init+0x42/0x350 [ 2666.701945][T17500] blkg_alloc+0xee/0x8f0 [ 2666.701960][T17500] ? _raw_spin_unlock_irq+0x23/0x50 [ 2666.701978][T17500] blkg_conf_prep+0x60b/0xd80 [ 2666.701995][T17500] tg_set_conf+0x20b/0x4e0 [ 2666.702007][T17500] ? kernfs_root+0x1c/0x230 [ 2666.702020][T17500] ? __pfx_tg_set_conf+0x10/0x10 [ 2666.702033][T17500] ? kernfs_root+0x1c/0x230 [ 2666.702043][T17500] ? kernfs_root+0x1c/0x230 [ 2666.702053][T17500] ? kernfs_root+0x1c/0x230 [ 2666.702064][T17500] ? kernfs_root+0x1ea/0x230 [ 2666.702075][T17500] ? __pfx_tg_set_conf_uint+0x10/0x10 [ 2666.702087][T17500] cgroup_file_write+0x331/0x8f0 [ 2666.702102][T17500] ? kernfs_fop_write_iter+0x22b/0x540 [ 2666.702118][T17500] ? __pfx_cgroup_file_write+0x10/0x10 [ 2666.702132][T17500] ? __kmalloc_noprof+0x39a/0x720 [ 2666.702146][T17500] ? vfs_write+0x22b/0xba0 [ 2666.702162][T17500] ? __kmalloc_noprof+0x1af/0x720 [ 2666.702178][T17500] ? __pfx_cgroup_file_write+0x10/0x10 [ 2666.702191][T17500] kernfs_fop_write_iter+0x3a4/0x540 [ 2666.702207][T17500] vfs_write+0x612/0xba0 [ 2666.702225][T17500] ? __pfx_vfs_write+0x10/0x10 [ 2666.702244][T17500] ? __fget_files+0x2a/0x420 [ 2666.702263][T17500] ksys_write+0x150/0x270 [ 2666.702280][T17500] ? __pfx_ksys_write+0x10/0x10 [ 2666.702299][T17500] __do_fast_syscall_32+0x27a/0x6a0 [ 2666.702313][T17500] ? do_fast_syscall_32+0x33/0x70 [ 2666.702326][T17500] ? asm_int80_emulation+0x1a/0x20 [ 2666.702337][T17500] ? do_int80_emulation+0x299/0x500 [ 2666.702350][T17500] ? trace_irq_disable+0x3b/0x140 [ 2666.702366][T17500] do_fast_syscall_32+0x33/0x70 [ 2666.702379][T17500] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2666.702394][T17500] RIP: 0023:0xf6fdf0ec [ 2666.702406][T17500] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 2666.702418][T17500] RSP: 002b:00000000f53cd50c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 2666.702432][T17500] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000800000c0 [ 2666.702441][T17500] RDX: 000000000000006a RSI: 0000000000000000 RDI: 0000000000000000 [ 2666.702449][T17500] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2666.702457][T17500] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2666.702465][T17500] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2666.702476][T17500] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 2667.140386][T15581] fq: likely mono tstamp with tstamp_type 0 [ 2667.194936][ T1892] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 2667.418801][ T1892] usb 4-1: Using ep0 maxpacket: 8 [ 2667.497541][T14240] [U] Yd ojE9cM G-bAv