last executing test programs: 4m32.966823303s ago: executing program 32 (id=2682): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25cfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000900)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x70bd28, 0x25dfdbf9, {0x0, 0x0, 0x0, r4, {0xffff, 0xfff3}, {0xf2ff}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_STATE={0x6, 0x5b, 0xff}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x8080) 4m15.664001519s ago: executing program 33 (id=2754): syz_usb_connect(0x5, 0x27, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000003440)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000300)="11f0fc0fde60f9fd2829046c014d2479df1921cf0e6444706ecb4ac4c6bcad526501957401eb29d0956e9c84cbea40bc306650a3517eedea789a46af1822863b9362daf96b14a0a5d27cc52d943b4b94fcc94c267f3e9ca0492606ee72873d1a5ab06d689c713ab7ff6f3c1d8ae2297b78d043b41ff1b95c", 0x78}, {&(0x7f0000000440)="c55d4062eae423df2a19e97ea668d4b5d129f20ea091e5a4c08f83e08e07744f65a61eb410c6cd9bc3dcfb443737c9b0eec6521fe25e7ab8478779d4a2b45ed229d231806d5640133b45178a450a01270103472718e34b05fd83fab333955f79a24b084ab1577da6e879c47ccf0e20558943bba648329d2011c0", 0x7a}, {&(0x7f00000004c0)="4ba624ebd0d91b18d32c3009407af4f7ff17096a5e72f3e935e087cafc44a4e9ae9f852da9ede4e984e924cd8c5fded1cbd352afd93b6bab8c716fd225ae06ecf843cb19738185d077eb6fea65f6b2254e8699ab4cb57175243da31670ced3129aff3508f20aa88756be9b29beaf383d1124dca16b610d51b20d11863e726ec8320bf969f0903ab2d888606708", 0x8d}, {0x0}], 0x4, &(0x7f0000000680)=[@ip_retopts={{0xc4, 0x0, 0x7, {[@rr={0x7, 0x17, 0xba, [@multicast1, @private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @rr={0x7, 0xf, 0xa, [@empty, @dev={0xac, 0x14, 0x14, 0xb}, @remote]}, @noop, @cipso={0x86, 0x68, 0x3, [{0x7, 0xe, "edb3f0ae5bd69e11765288e4"}, {0x7, 0xa, "407ec7e8bdf5fdcf"}, {0x7, 0x12, "b7847508a10531a52ac32940e7a174f1"}, {0x5da6c9286ff2c777, 0x4, "966d"}, {0x6, 0xf, "155879e949f4659a374f857f98"}, {0x2, 0x12, "d67bc47c27dbf3c11324a39cf1659289"}, {0x1, 0xb, "c569557a9658f7cb4b"}, {0x0, 0x8, "89ca95ae6b73"}]}, @generic={0x83, 0x4, "e107"}, @timestamp={0x44, 0x4, 0x23, 0x0, 0x9}, @timestamp_addr={0x44, 0x14, 0xf5, 0x1, 0x3, [{@initdev={0xac, 0x1e, 0x1, 0x0}}, {@empty, 0x10}]}, @timestamp_prespec={0x44, 0xc, 0x55, 0x3, 0x7, [{@dev={0xac, 0x14, 0x14, 0x40}, 0x10}]}]}}}, @ip_pktinfo={{0x18, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0xdc}}, {{&(0x7f0000000780)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000002900)=[{&(0x7f00000007c0)="c00e3f3583fef3e02f42b37345f4273f1302f4", 0x13}, {&(0x7f0000000800)="1f24a8e3a4c4d67b77de2e451a07a0537788d376a73f0b502789ad4839227388e53efe6f5872e67ef3472a1fbd93c57ab8cd4c85518c941d74", 0x39}, {&(0x7f0000000840)="f2b5f66df85d4b4897cebdc2b491210caec5fc04822d0b", 0x17}, {&(0x7f0000000880)="8a7e5a534daedbed94e306e44971956f0036aa39337136e6f9b8850e3a981912e0efaf106063ccab06d4b863a302b5c38e303a3597f916f938567675ac1b240f0e6b3afb7fc30648aa8f41e0ddd22fbf033ed3f08989f403734a250f0d63701dfa9713f3eac18c463fd8864e9255ac5a6017ff37d3fbb1752a99630c3c9de363452304957f087acc3130eff75715f13f4e753f6de23e7da2", 0x98}, {&(0x7f0000001900)="21954f36f33a20f41c1a2f5ccbabb6aae726407c38db581d02bd23b331983f4733bbf50f0ed2751b3e98f5ced8247ee0331b0cd07b1dfa6f028243e7e343d4cf92ceb2446ed89550032ba101e96cfddf3c3f3f85cbd0a8ba46c890a0d6bc9fee97a2f976d84d85aa71871fdc3ab4296febc8d4e76c0d921f6085f2d99e17d4cba7583b92be8b76a156d0a03985e85091e7964ff092fc2ae315aa97b3512b9fa331ec526aee3464acffb1bfd509bb4b7b1a119e81b798889cd0024026e00e13e5bb7635c9fa0bca7f5cf18ffbe28c3de0d47a80be31231e128d3bada39372439eb73882912ebb5a434dc15cc535c7f13f923808e0362bbe1df725dc431fa81b5b9cd7918084c6898c533da80eb1570c65faf7b315c51423622f53a2d30b934a10c2825cc4f2ccb11fc701253cc656320c1ce41441ca23d7ba70e0dcc697bf0b94e94d175a106c71ad94a8b0883a68bb551e5bacc8572ee7d586862995e218aeb053813367c5dfd29c0d6805b0c47f9f43b36d1e705407929fb212da97640e2ad0aef719fb701956cc41d40dd7179d862c3d8ed72ed9e8ab34351b4b5907d16da21d7cb4c4c2ae327c222c9d4da9bf23fcef79842027b1e8f6ce0b6084d10d3e78864bf9360b35f3dce97ede2ebac414f82e2d0ca5ca31b503b3cd2875f59a124b1a6c93939f20d32e73f10759a9682ba642b9ee461f5ff590da47d856fe8c3d66ecae5c17efa165ba9dba2c25edafe9fb386f065183c39a7a15dc32ab82fb7c1c725d67d0105c27164df1dfe912e31a99a2172fb62509cce9f2c3b39b6760b93f49b9c87786ed286d3a785aa9f8c8ae02ecfe3f57a885acde8fd22552556512ddea6e919f02782303efb5e3f44098c295d693fe6c421efdd559311c364803c6d3fea87d2c42ca22d138a7e0b3bce3ee5eecbbc794186b88594f85bcf01aec6d18faf0d245066e39ae5fd61c34c504b1aae15d0180946a687945b3cc740948adba9fe8ef5c6eac5c5a7dede89b38fa7d2a415b3365449d555461dc587d458f8fbc506abfca3041d30bd35306ad5e452cf9e1695d2690c903e8d90aa45884480c5d929423dd7a830bf441991ce2114a0758788a2f14b0783e35bcdde10d340194a5726d39015c4d42f66ba5d81537bfdb5196f21c98f32e6fb551fb94735c5581d1d224a85d71804c1aab4e88e962589f4c78519afea3450b209217bc7a5113234ada7d7ec41d3212ff1c37e1d7aa62ca0dd49d8457b425db53569288ef888ba984183257f039f43dc4d77f6de38d7b10e2b812ea47501a8593b1156d7772c777d7ac0415d7018a191c01ff0ef659d5418c74a7b82a74ed43bf35896cfe4c74b5042b15c5c75f670776e24b6391f3a98c6028bd584464014c0e6c57844da963cb2b215a56a47f9a6997286eb36f1accbccd4a289899b3dc7508271ead0e7fcbe74a76962e20d5c246251577584d17a845fbd617b54b8e6379d900a21eedf050c28ea371c03a4aa35428b49b0b9cd148f9c3d37e1303321151f6c3931acdb04a0bf6bd2a86bbb8c75de2a658543edb87fcc48bc06ac8bd6710276184a486759fbf8bfad56889a008ffa9dabe3ca9293b0e5bbae0ce0287b8ac28dc4fe263d3277e3c6a3b6d94b4db3b2844367c9bd3a2244b9c47e97df905de30888a1ad54346ba599c808a70357887bf0c0cbe653f21c964d6eb5bbd5dad68a9ef2752635b6bb32cfa0647bba298f13375197ead970e098b97298107e55c3d60a7fe81ac95ba7c8a09a6e99b0f86d284b54c0b403098c1b8e6e9ef6f1008f3b81de45fce5c88e5b6bd1d6d9f08ed8ad5df445373133076c9a87716c38b3e3c8bd8e2eb6196c563e4e3c67423f8eabdf6c7e93d56e86d7b04e9d7d704d79ff8b5040d18512c60054a2d92494445061c2449ca417912dc44ec5f1b511784bcb037ed4ab1d987e7e58e58af9de54cc85b52c17d66b6d07df837162ae91801df3ebc86bccb70abbee180c9f3e22a4fcaaf17cdb4641a23ae78152f87d461c224918d24d9a9d8f15473f66f44a55afe461f897f10737c2de39332aa377f2db5419819d6c8861078626ca3e154af78ef6fad85e1d1fefcc5267887c97e5dfbe07deb48c6fe080638409321beef1abbfc232114e015e10e27a59d349df3ee3ab5951a849a23c47e07a8706dbcfcc1f1f92a25f4b72bdbb8a49e14595e7647e28d4bacc05f4b439fe7c835a1de6d3f762b92b41ed63c73df0b22258ba13b0bd82544f9294e4b36e6bab4999d5f407b569e41372024b87d331de82e4f72c52bfd20ba0e4443f7d9c145fa26ba828e3b26dacae2c5ae4598c981cce2bba60dfa2b48c5a25cf4df6b5607930b9ca9d66533bc5508f35792599cb9a581b4ffdcf6153ca1c072abe88115652ea5363fb6428d291f0637e679178560ed19ffb6da0d62c10f6d800d2397e91ced6f8e0813c02036b5ea73d71372b04c87be2684b05737319c978ad4c435d1244463e3c2371212d71ca62f7f4299dba85c8c2f69a76c13c0da53a99ffaea2555e1fe3ab5286424b23c5426905888049fd10c465817ba1e9f62d3151b0a8f372457ca0e60a531ea7a7f7f22d9ddf8dbaef153cccb607524d368f35c1d58e8089a88ad2f328bd71b5ef7c8ae76598c667f7b6c80864faf8c5f92f954058486d9bb029eeb6de06533eaab90ed88966becf2bbc3ce329951c6641656baa799a72f8ee4b1c6821a31f21605bc6945323653c48398f57380db3dd2b40b0c006fe385fdbef0ae4649203b1b58c60a3ded6194f1a91b055291cdc649d957f48297529e6c457c71ae54bf592a1d612ffe74da6866142585b8f12cc2ff75717130a3841d6e2d07871966dba702e0b4653e39de58809d59926a9799d53668a9ca09281b8a301c53fc740e016b5ae064d2ba13761808e814a971345619654b562bee166901670c75ee9b088fa98d4ce7b4e61907555d9dde938dbda0126865c74520e2e4301b421312bbe51b7147f47dd372fe670fae37bd4b2220c68cb0787b63d23ad8930eefe9287c4740a9b68487b180e13d2b77cf5cfd61b5c2f27f976bef39cb3653b4275ca13b710f7c5819342df61b79b251b37053028ef25636102f0bb47b18f0085d20f735efd77a7e0ad52fc47ea2016d2b0e6274724640f6299d090217afa68f18649e938db7a7912b9e053a1b60d46b4f01227fa880081fcc79560e69cae2fc72b0ce5b1d24e9180768c803893f3ec3efe10764107c1748c3525f4dc04e448725d39949ad24c2f53ca08f4320ae7b77491b0ad68170c37ac86172f652fd920677761cbd31548dce50bf2e3f60c7b5892532f99ef23fc04525d6bc781ceb2b99c080a1cba0cf772e0e954688b9bd8d8da7727db928f9db4c9b9e1dcd5d24bdf1ad717274864479c8059f0cbb5b3f77651a35423f3665df0b8999a2bc0f18618242debca2939f3d71ffb945cd32a6e44408f32802b096e2e44b755186df24133affe2a3dfd9a9514effbfa66541e1976c74dea747e57b370c785edbb34b575e040c177c43d9a631ec871725a06d03a16252e79637e4541cbde8e6469fe14aeeb81d16833cb09b970edb36bf8845bc8f659568234f375bf79e23146938e70e3dfdb39e2850844c97700ece904daf553feda22a262b16746d9b4c31222796bf1bc0f3bac95e96db9be0dcf75fe6d1ba64a62bfc2f0eeaf4540240c2f0d1c47e36e291ad4c607a9941a0fa8a15f557756bc8f353eb39647505e0d7d99e6fa344eeaae0a3e68bbb9354bbb06e583143762ca60557e2a7cba0aac41f318e23245da683da08d14acfe0f32cf33e80bcc36576fe61d66b7a43a508a33944da28b163c227581aaf0e1d22ded7621fe750eeeed24af84a05c4a56559caca6291e13dd5ef87559d5bee878e31bb932adebdf076cf2d6109793106cc25c8587750f1d6c0b8c9bef423074660ad35f215dd6218949ca2297018112f07d2a73ee7eb3aa135c4ec858d9e1327b1d9017453d9e7dae87b690b16129a97c543c10d18d0a7fc55e4585141bdb3e3be06993a516b3d876a2b6ac2163972de9efa685a3206c8b1b3b7d657fa584d32d40c5b6b08c57911024225c398115ddc92e204f359d7d6439bfc919c8d9c995d266b4280671dbf1d1ebc37c5ea7a68fc7e0d1c1c2364aa2ed67ca31d221414fc586ffb844d70efead9e6cbb6d3a7c38990261803b0b79ca8efff377f03a10b4abbd3163880cd94e53ff06a99d5d4d707f96e79757fec4574abdf7fbc6abe8c081e2e5f69d61eec20b53a0abc97dc92546799bb5536e6eed652f9120b1eac0cd1433e24829d448398bb05c0bce7f6d49e2945f9ab449cbc862bcf9b85cc50f1bb8056d166e44c2c1c39a139cb2dd4838e5ebe51605007243f38ec88808859ec40c8b1cad833b83eab9eb7363fe878a208ff7bee8080f14d88762348814652ea0d76acd69e19bb4b8540194c3f7b498fa82a723070d540ad874e00f5c4ebe996a97402f0d284a7862b83899fbbc2b8b30dcbc1b774a28fb47f39dfaff28f481043985fe9137c093665927ca8a04c30ff09505bafbd741e356d20bc77790334225dcb3120a219a50e1213b8f28b6b3c0581509babf0d7f070d8d3e9d00e7f618f6a5cb41fe7ceb12fbba151e5d69f128a2cb3e34d90f7f94349c63914138de2ac7348938df9d6f3a9534c515be87798efb1d9e678695cc5f6e65be25edb6cf513f67c00a71893948aaa5976c7e68a90f557144a2034f8c58a010cc0f7d6261c5c11bf19517c3e0df89b0f664d91fab95fb96690094229248fff6367762b62efbf02b5356e045de309e124194cb9995782f2df1deabd89545c804a2d9fd9dd8e7041812ce78349bd1b9603b80c0bd686805bed351008a32ca3dc10dcdbe079769b711365fc09dfe0161eaba3a2c62c0227af3d00ba1c1a44bae91d69d4a2f99a63d315acc6b783ee2f38b0467f0f8a6010b43fd0257a7aefe9aa0ea454802804992cec931b130e970e8f940bafbb89e85e0e7878d1424c79df0537446e08ebb40ee29bae689b01e6e41d3092efe8ba516c3c9a60973db0739b995284d05e8983e3aa85f01ff937f0ab36d6c57b34af43fd0c65f5752704d809358ad83332a51799138573b4f753e5e63f3b167d8fb3b870c3ab7a6f88622ce34a9521726b3d068aa3f78b12a787acbd4b0523245e22378de848afe0b2a01a6a35b0c09e19098b130248b184cf0ab570962283f8ccad601cceffd38c378a6efd54828b399465c3c6480db80d43c1e2d74294471bc3581b7f9bed02e57dfa2c698d42f325e81816109d5c139fd3d765cafb0269a84feb88428d45451c9cf830767e38a50a6bf8210a84b630a3a922011b6d34ad601738db1265eea407bea2c216476f44fd3f049a2cf66e628c4e4c82df7282dfe5bb38eabd5f3d4a6bdcb9365404d9a70bf31cdcae376ebb03b0e3bf85af51450f3c9a8f04344631e1f6e9a7c87f1fa7d4fb953fae59c185dd44d93493aa8770afd3442f434df7d304acf1962ead784f2a0b715f2cb9573974467b0c80309bf00ae9042cb864896ff56f6d7d92182d63fe9053362d0ae8f0c774472ac5c3ab78a629aaffe2284d69e67c9594b77d561a5a1fe80a72dce85150cb45820a0dbbd01d334dc57c2cd916fa376850e23aa90b727eb2181e35d05b064360040d8ea68fadbe3f9b09f0bb47d1292834e61528a14385dd5ccac4ba2cc9665914c6793744b1e1f1797cf7bac73847d5c6dd2c490f8dd98ed44c26caeaaee79fb9e1c1eb110a2a422b4969f7287ea693066cfcdb5781de559c", 0x1000}], 0x5, &(0x7f0000002940)=ANY=[@ANYBLOB="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"/278, @ANYRES32=0x0, @ANYBLOB="ac1414aaac1414410000000000000000010000000002000000000000"]}}, {{&(0x7f0000002ac0)={0x2, 0x4e22, @local}, 0x10, &(0x7f0000002e40)=[{&(0x7f0000002b00)="9c2bbdaad5b1b18544b24f2a673c283be7da8d064a5b54c10b150a811d9f5ae33fc6f617c5a8ea23711d1e6f359f52d42898d311b3a52eed83aa0518dda2f101e0fce7bf4bb2ee7a83900a3ca0ae52d091284c42bede1b6d04122557ca9e55bf7859698f39164187f23df2e3ad5b2bff763eca4b5d5ebccae44ae856ac2656d1228de536f46e52b62c7bebba88bcab6f96152023f34056fb58d6131be811a9d6df63241a22a326dc20e49aa0", 0xac}, {&(0x7f0000002bc0)="4b0be7b17de6e485fe134240952ef2c8ad2197edb262cf39be494384ec4ec0248af1722a10a90983ca315de431e18ffa0fe6ba9fec5c36b62933566c0f57f2121e5ce884adcf8e4cd15f79639544b7c0a093652bb7adb250924179e2e50804751a189806142cb3074d4317bd542c560712aa", 0x72}, {&(0x7f0000002c40)="bee0af8153f91d9db79b3f274dd31a9ddcfde91edf63e580b4252c4a0a86", 0x1e}, {&(0x7f0000002d40)="cbc9e7b61a3cb0d0f3a25be7f779e25f0fd21c87ff8abb9a1ba0774830e6f52875487a51957aac6e970d339b18c9da0f1bfb61ec14cf5ada103db88af9b5a19bd7d08ab028abb0db09990df934da7bf3b4fcd4f955c090e96b7ef3dc8df3a6d3e1280112f6b20fcf64460f134c4ab328d396345b63d47dc9f0f4477da0c73a9fade3dc86f1d01911f9b5b8139028e95f7a52a31a327477cfba3227d4d1b79c6d93b0508fcc68d3e96e1dc2efcdf7094b5a822c0d0ecc689905d03c38784ae18a2b59d7b13ea3dda3467f11e7d0d318faa77220cb17daa0aed0450748556e81af9a35d3751eff8cd59547530816", 0xed}], 0x4}}, {{&(0x7f0000002e80)={0x2, 0x4e20, @private=0xa010100}, 0x10, &(0x7f00000032c0)=[{&(0x7f0000002ec0)="a7d84c41ce05b4979c812ed105c59aec61d4687d0be98f3de5e0d4463906ea01454698a8943e64", 0x27}, {&(0x7f0000002f00)="791275f0385b021a3df2b16297cb639faa6fbbed2e77e3e599e35ea7ac70b71c203e6c623c6a36b568d55e006d4a13efde3ddef00ecd95db0e81749736af96b130ba49ade68c1327fab593bf51b7402db103e6f34f21694ef940d267", 0x5c}, {&(0x7f0000002f80)="2dfd55ed67eab869ff2866e1a233356034ac70304909b6fd8ff86a5ab1114795b43e7c5ddd9418a0b844470b0ee377e8ef049be761b8bfce3be2ed99ebc36401cdd3c5239ccfde39f42522af10b154f65c2f3e4c8aa1da", 0x57}, {&(0x7f0000003000)="f81a4e449ada1f377130a0d6ddbf7d6aec00a5855fbd80740c794610b1c148efa16092ea9690ef0bbedd1525831aed5832bc69cbb311c373d2a7555781cd4606c3972475ecd8cba5d770d8c33ffc5192174284bc5948f2870e47d941b18bc32b02658cd082896ad3c4c0d8ac54463ecf1999e200ed09592f1d2c382c242050f218a651a3c9310a68c09deec32b559466", 0x90}, {0x0}, {&(0x7f0000003200)="dfedb6872407e81b06505dff542d92809e1f4d7a9c6f382a35e2c6248df989cefd01368f88a90551a1c787ef0872ee3cfb0780dc340a70d90d171a1bf87b1c9b5309bbf73024fdc7b2794179d296a6617dfbc7535bbc7b8f50012d2e6e2ad16809d9ae354f300dd2ed1772b2dab9bdd5c4208a75c6b654ddf19336cb19be254cff126728951f3d3820ab12db623b1471e2c89e5a3638dff782754e8ae9ab8d91a6e167de259e", 0xa6}], 0x6, &(0x7f00000033c0)=[@ip_tos_u8={{0xd, 0x0, 0x1, 0x5}}, @ip_pktinfo={{0x18, 0x0, 0x8, {0x0, @multicast2, @multicast2}}}, @ip_ttl={{0x10, 0x0, 0x2, 0x9}}, @ip_pktinfo={{0x18, 0x0, 0x8, {0x0, @multicast1, @multicast1}}}, @ip_pktinfo={{0x18, 0x0, 0x8, {0x0, @local, @private=0xa010100}}}], 0x68}}], 0x4, 0x4811) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0xc, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x150}, 0x1, 0x0, 0x0, 0x612fc0b6c779297b}, 0x0) r3 = openat$vim2m(0xffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r3, 0xc0f8565c, &(0x7f0000000000)={0x10000, 0xbd5, 0x2, {0x2, @pix_mp={0x8, 0x4, 0x585452c9, 0x2, 0x1, [{0x40, 0x1}, {0x8, 0xa}, {0x7, 0x1000}, {0x80000000, 0xa}, {0x100, 0x3}, {0x2, 0x4}, {0x1000301, 0x81}, {0xc, 0x8}], 0x10, 0x7e, 0x1, 0x0, 0x3}}}) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r4, 0xc02064b9, &(0x7f0000000dc0)={0x0, 0x0, 0x0, r5}) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x0, &(0x7f0000000100)}) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r8 = fanotify_init(0x200, 0x0) fanotify_mark(r8, 0x1, 0x40000033, r7, 0x0) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x0) sendfile(r7, r9, 0x0, 0x4) close_range(r6, 0xffffffffffffffff, 0x0) 4m5.682209052s ago: executing program 34 (id=2784): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000001dc0)={0x8, {"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", 0x1000}}, 0x1006) rseq(&(0x7f0000002340), 0x20, 0x0, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000200)=ANY=[@ANYBLOB="bbbbbbbbbbbbbbbbbbbbbbbb86dd6003000000182c00fe8000000000000000000000000000bbfe8000000000000000005af40000000000aa0202000100000000fc0100"/80], 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002e80)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="1998ff44416c95e42d3a3f1c9ca71aeff651eebf8dcc75911d4a3d8b01c20aaa4ad75910ffc194e1000000000000000000", @ANYRESDEC=0x0, @ANYBLOB=',\x00'], 0x0, 0x0, 0x0) write$FUSE_INIT(r1, &(0x7f0000002140)={0x50, 0xfffffffffffffff5, 0x0, {0x7, 0x27, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x50) read$FUSE(r1, &(0x7f000000b040)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r1, &(0x7f0000002240)={0x10, 0x0, r2}, 0x10) syz_fuse_handle_req(r1, &(0x7f0000009040)="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", 0x2000, &(0x7f0000002280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002700)={0x90, 0x0, 0x0, {0x1, 0x400000, 0x0, 0x3, 0x0, 0x0, {0x0, 0x80000000, 0x0, 0x2, 0x0, 0x3, 0x400, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x9}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) open_by_handle_at(r1, &(0x7f00000021c0)=ANY=[@ANYBLOB="1c000000810000000000000006"], 0xfeffffff) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000000000002bbd7000fedbdf250000000000"], 0x14}}, 0x4004000) socket$nl_route(0x10, 0x3, 0x0) set_mempolicy(0x8006, &(0x7f00000001c0)=0x1, 0x3) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000002400)=@mmap={0x6, 0x6, 0x4, 0x1, 0x1c94, {0x0, 0xea60}, {0x3, 0x2, 0x7, 0xdb, 0x5, 0x2, "fe690b70"}, 0x0, 0x1, {}, 0x1}) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x800) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000140)={0xb000000d}) r4 = open(&(0x7f0000002e00)='./file0\x00', 0x2802, 0x1c0) setxattr$system_posix_acl(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000180)='system.posix_acl_default\x00', &(0x7f0000000440)=ANY=[@ANYBLOB="0200000020"], 0xff3c, 0x1) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x4, &(0x7f0000002e40)=0x7, 0x4) socket$inet_udp(0x2, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @broadcast}, 0x10) socket$kcm(0x2, 0x3, 0x2) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r6 = accept4(r5, 0x0, 0x0, 0x80800) sendmmsg$inet6(r6, &(0x7f000000a440)=[{{0x0, 0x0, &(0x7f000000a3c0)=[{&(0x7f00000090c0)="9a4037055e1d2207e96d56db2b87dc0f58811431433ec0e2435dab2ea838935a599486af8d13ab2df30ff8d0a89465852ec7abbeffae9462a84e0967d932a92cccb35fdc84", 0x45}, {&(0x7f0000009140)="14b48e5b08fd6c6c9c03031067a0f6194cf12963721ad167aa845aa732510bdfc2795ea40719d18c35e44298992aafa50921ae2de7ce25d85f96044894250e8a684d06c37ca05fddbafd651f2f0ab91dadf0ed44f422cf", 0x57}, {&(0x7f0000000080)="59058e8bf0cc944add2bc5e92c2a324f8f63fd7000", 0x15}], 0x3}}], 0x1, 0x44051) 4m0.994299688s ago: executing program 1 (id=2797): socket$nl_generic(0x10, 0x3, 0x10) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x10) r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000300), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000400)={0x0, 0x41, &(0x7f0000000040)={&(0x7f0000001080)={0x14, 0x2f, 0x9, 0x70bd25, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4002014}, 0x40880c0) 3m59.984686106s ago: executing program 1 (id=2799): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='cdg', 0x3) socket$inet6(0xa, 0x4, 0x1f2) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 3m59.778719562s ago: executing program 1 (id=2800): syz_usb_connect(0xb, 0x24, &(0x7f0000000640)=ANY=[@ANYBLOB="1201000097ff8208582005109bc10000000109021200010000000009048f0004bf575a00584fe54f048be536588f6335bc10fffaf348f7bbdbc8ddbe5dd4fe3b88fec21d59bee8438cadfe238c78ddd84bb7d71ff97ae83198e48010ca55e810dff23c36b77f000000a90556a0167bd35aaf1b0164949b47e4f511ea554a8db326206d56aab696557596b9be021909ef0d6eb0b248bb46b46ac313a8a83c1944c3127b4ab3fd7e6feb13b3d05f00cb841669c2ea386bdd5b44a7"], 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xf, 0x204031, 0xffffffffffffffff, 0x2d5c000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f00001a9000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000160000/0x2000)=nil, &(0x7f00000f2000/0x4000)=nil, &(0x7f0000afd000/0x1000)=nil, &(0x7f00006b6000/0x1000)=nil, &(0x7f00001dd000/0x4000)=nil, &(0x7f000004e000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f00000c4000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x2) r0 = io_uring_setup(0x1b7c, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0xee}) preadv(r0, &(0x7f0000000600)=[{&(0x7f0000000240)=""/235, 0xeb}, {&(0x7f00000003c0)=""/134, 0x86}, {&(0x7f0000000480)=""/227, 0xe3}, {&(0x7f0000000580)=""/71, 0x47}], 0x4, 0x4, 0x1) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) r3 = syz_clone(0x95008100, 0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ptrace(0x10, r3) wait4(r3, 0x0, 0x80000000, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r4 = syz_open_dev$usbfs(0x0, 0xb, 0x2) ioctl$USBDEVFS_DISCONNECT_CLAIM(r4, 0x8108551b, 0x0) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x91b47000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001880), 0x0, 0xa, r5}, 0x38) ioctl$USBDEVFS_ALLOW_SUSPEND(r4, 0x5522) ioctl$USBDEVFS_FORBID_SUSPEND(r4, 0x5521) close(r4) 3m58.845587661s ago: executing program 1 (id=2807): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) r2 = open_tree(r1, &(0x7f0000001280)='./file0\x00', 0x0) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x41) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) unshare(0x2c020400) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) fanotify_mark(0xffffffffffffffff, 0x80, 0x50000022, r4, 0x0) 3m57.78257288s ago: executing program 1 (id=2812): socket$nl_generic(0x10, 0x3, 0x10) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x10) r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000300), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001080)={0x14, 0x2f, 0x9, 0x70bd25, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4002014}, 0x40880c0) 3m57.193532805s ago: executing program 1 (id=2814): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$NILFS_IOCTL_GET_SUINFO(r1, 0x80186e84, &(0x7f00000004c0)={&(0x7f0000000440)=[{0x441, 0x8}, {0x0, 0x1}, {0x4, 0x0, 0x2}, {0x3f6, 0x6}, {0x0, 0x7b}, {0x2, 0x3}, {0x7, 0x1}], 0x7, 0x10, 0x9, 0x3}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'syzkaller0\x00'}) ioctl$sock_SIOCADDDLCI(r2, 0x8980, &(0x7f0000000240)={'veth1_to_team\x00', 0x5}) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c0100000000000000000000000000000000000000000000000100"/51, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000001000004d23300000000000000000000000000000000000001ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000004c001400686d616328736861312900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000"], 0x13c}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=@newpolicy={0xf8, 0x13, 0x401, 0x0, 0x0, {{@in6=@loopback, @in6=@loopback, 0x1234, 0x1234, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@loopback, 0x4d2, 0x33}, 0xa, @in6=@loopback}]}]}, 0xf8}}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r3, &(0x7f0000000200)={&(0x7f0000000040)={0xa, 0x1234, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="200000000000000029000000360000000001000000000000c00400000000010020"], 0x40}, 0x10) 3m56.65075696s ago: executing program 35 (id=2814): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$NILFS_IOCTL_GET_SUINFO(r1, 0x80186e84, &(0x7f00000004c0)={&(0x7f0000000440)=[{0x441, 0x8}, {0x0, 0x1}, {0x4, 0x0, 0x2}, {0x3f6, 0x6}, {0x0, 0x7b}, {0x2, 0x3}, {0x7, 0x1}], 0x7, 0x10, 0x9, 0x3}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'syzkaller0\x00'}) ioctl$sock_SIOCADDDLCI(r2, 0x8980, &(0x7f0000000240)={'veth1_to_team\x00', 0x5}) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c0100000000000000000000000000000000000000000000000100"/51, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000001000004d23300000000000000000000000000000000000001ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000004c001400686d616328736861312900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000"], 0x13c}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=@newpolicy={0xf8, 0x13, 0x401, 0x0, 0x0, {{@in6=@loopback, @in6=@loopback, 0x1234, 0x1234, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@loopback, 0x4d2, 0x33}, 0xa, @in6=@loopback}]}]}, 0xf8}}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r3, &(0x7f0000000200)={&(0x7f0000000040)={0xa, 0x1234, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="200000000000000029000000360000000001000000000000c00400000000010020"], 0x40}, 0x10) 3m47.192183789s ago: executing program 5 (id=2848): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newlink={0x40, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @private=0xa010101}, @IFLA_IPTUN_FLAGS={0x6, 0x8, 0x3}]}}}]}, 0x40}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x141000, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) write$binfmt_aout(r3, &(0x7f0000000380)=ANY=[], 0x20) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0cc5605, &(0x7f0000000500)={0x0, @pix_mp={0xd, 0x3c, 0x42474752, 0x4, 0x8, [{0x5, 0xffffffff}, {0x8, 0x6}, {0xeae361ec, 0x5}, {0x1, 0x1}, {0xae9, 0x75}, {0x0, 0x1}, {0x7f, 0x3}, {0x5, 0xfffffff7}], 0x66, 0x37, 0x8, 0x2}}) splice(r3, 0x0, r5, 0x0, 0x809, 0x1) sendmsg$TIPC_CMD_GET_NODES(r3, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x184, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@local, 0x0, 0x33}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x4, {{'ecb(cipher_null)\x00'}}}, @algo_auth_trunc={0x4c, 0x14, {{'sha1\x00'}}}]}, 0x184}}, 0x0) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x4e24, 0x8, @private0, 0x6}, 0x1c) syz_usb_connect(0x0, 0xf2, &(0x7f0000000a80)=ANY=[@ANYBLOB="1201000296fdcf084f1712521040010203010902e0000106e370130904dc02000e0100010a2401ff0729000201020b240406bea33c2d2031e80b240304020205000a0010092403040404010503052406000105"], 0x0) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f0000000080)={0x2, 0xffffffff, 0x3ff, 0x0, 0x11}) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x20, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000280)=@gcm_128={{0x303}, "bb63a658b6fdc80e", "2a1e619dcc04b3487ab02cec8dd9fce7", "d8d2cd5d", "3ecb525b0f4163e3"}, 0x28) 3m45.835357055s ago: executing program 5 (id=2851): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = landlock_create_ruleset(&(0x7f00000000c0)={0x3564}, 0x18, 0x0) landlock_restrict_self(r1, 0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000880)=ANY=[@ANYBLOB="180000002f00090028bd70000000000004000000040010"], 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x20000004) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) close(0x3) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) kcmp$KCMP_EPOLL_TFD(0x0, r0, 0x7, 0xffffffffffffffff, 0x0) 3m45.126632104s ago: executing program 5 (id=2855): open(&(0x7f0000000280)='.\x00', 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x2) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f00000003c0)={0x0, 0xfff, 0x5b}) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f00000000c0)=r2, 0x4) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'ipvlan1\x00', 0x0}) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xfffbffff, {0x0, 0x0, 0x0, r6, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}]}]}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x2}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040010) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0xffff, 0xffe0}, {}, {0x1, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8848}, 0x80) preadv(r1, &(0x7f0000000440)=[{&(0x7f00000003c0)=""/92, 0x5c}], 0x1, 0x158, 0x80) r10 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r10, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x4bd1bfda, 0x0, 0x6}, 0x1c) setsockopt$packet_tx_ring(r10, 0x107, 0xd, 0x0, 0x0) r11 = gettid() kcmp(r11, r11, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) r12 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="39000000140081ae10003c000500018311001f9f660fcf066505acb612f691f3bd3508abca1be6eeb89c44ebb37358582bdbb7d553b4e92155", 0x39}], 0x1}, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, 0x0, 0x0) 3m44.410762237s ago: executing program 5 (id=2870): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) r2 = open_tree(r1, &(0x7f0000001280)='./file0\x00', 0x0) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x41) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) unshare(0x2c020400) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r4 = fanotify_init(0x200, 0x0) fanotify_mark(r4, 0x80, 0x50000022, 0xffffffffffffffff, 0x0) 3m43.597932658s ago: executing program 3 (id=2862): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) close(r0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt(r1, 0x84, 0x80, &(0x7f0000000000)="1400000009000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @ipv4={'\x00', '\xff\xff', @empty}}], 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)={0x20002015}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000140)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r7], 0x68}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x7, &(0x7f0000000300)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x839, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xf, 0xa}, {0xd, 0xffff}, {0x1, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0xc5}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000200)={'syztnl2\x00', &(0x7f0000000180)={'tunl0\x00', 0x0, 0x80, 0x700, 0x100, 0x5, {{0xf, 0x4, 0x0, 0x1, 0x3c, 0x68, 0x0, 0x5, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010102, {[@timestamp={0x44, 0x8, 0x6c, 0x0, 0xa, [0x80]}, @timestamp={0x44, 0x1c, 0xe2, 0x0, 0x4, [0x4d7, 0x890, 0x49c, 0x80000000, 0x3, 0xfffffffa]}, @noop, @end]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000340)={'erspan0\x00', &(0x7f00000002c0)={'ip_vti0\x00', 0x0, 0x8b2365b79bc691c1, 0x7, 0xfffff5fd, 0x7, {{0xb, 0x4, 0x2, 0x7, 0x2c, 0x68, 0x0, 0x5, 0x29, 0x0, @multicast2, @rand_addr=0x64010101, {[@ssrr={0x89, 0x17, 0xf0, [@broadcast, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @broadcast]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6gre0\x00', 0x0, 0x29, 0xa3, 0x5, 0x6, 0x20, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40, 0x700, 0x80000000, 0x100000}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000440)={'wg2\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f0000000480)={'sit0\x00', 0x0, 0x7, 0x8008, 0x2, 0x6, {{0x1c, 0x4, 0x1, 0x31, 0x70, 0x67, 0x0, 0x4, 0x2f, 0x0, @broadcast, @multicast2, {[@ssrr={0x89, 0xb, 0xcd, [@empty, @loopback]}, @timestamp_prespec={0x44, 0x1c, 0xa4, 0x3, 0x1, [{@broadcast}, {@private=0xa010101, 0x4}, {@multicast1, 0x7684}]}, @timestamp_prespec={0x44, 0x14, 0xe5, 0x3, 0xa, [{@local, 0x208}, {@multicast2, 0x81}]}, @rr={0x7, 0x1f, 0xe, [@local, @multicast2, @local, @local, @dev={0xac, 0x14, 0x14, 0x35}, @remote, @broadcast]}]}}}}}) sendmsg$nl_route(r2, &(0x7f0000000700)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000580)=@RTM_DELMDB={0x138, 0x55, 0x2, 0x70bd2d, 0x25dfdbfb, {0x7, r4}, [@MDBA_SET_ENTRY={0x20, 0x1, {r7, 0x1, 0x0, 0x1, {@ip4=@multicast1, 0x8edd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x0, 0x3, {@ip4=@remote, 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r8, 0x1, 0x0, 0x3, {@in6_addr=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r9, 0x1, 0x3, 0x3, {@in6_addr=@mcast2, 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r10, 0x0, 0x3, 0x1, {@ip4=@broadcast}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x3, 0x2, {@in6_addr=@private2={0xfc, 0x2, '\x00', 0x1}, 0x8edd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r11, 0x1, 0x1, 0x4, {@ip4=@private=0xa010100, 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r12, 0x1, 0x2, 0x2, {@ip4=@broadcast, 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x2, 0x2, {@ip4=@local, 0x8edd}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x4000000}, 0x810) sendto$inet6(r1, &(0x7f0000000080)="af45a0d0ebf561de97c648a422ee07", 0xf, 0x40851, &(0x7f0000000240)={0xa, 0x4e21, 0x1ff, @loopback, 0x5}, 0x1c) write(r1, &(0x7f0000000040)="8fa0a1", 0x3) 3m43.464701918s ago: executing program 5 (id=2863): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x13) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000540)) r1 = socket$inet6(0xa, 0x3, 0x3a) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) r4 = socket$inet(0x2, 0x2, 0x0) ioctl$TIOCSCTTY(r2, 0x540e, 0xffff) ioctl$sock_ifreq(r4, 0x8935, &(0x7f0000000040)={'pimreg\x00', @ifru_mtu=0x3}) ioctl$sock_ifreq(r4, 0x89a2, &(0x7f00000000c0)={'bridge0\x00', @ifru_ivalue=0xa}) ioctl$sock_ifreq(r4, 0x89a2, &(0x7f0000000100)={'bridge0\x00', @ifru_ivalue=0xb}) getsockname$packet(r3, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) ioctl$sock_ifreq(r1, 0x89a2, &(0x7f0000000340)={'bridge0\x00', @ifru_flags=0x1}) ioctl$sock_ifreq(r4, 0x89a2, &(0x7f0000000180)={'bridge0\x00', @ifru_ivalue=0xd}) ioctl$sock_ifreq(r4, 0x89a2, &(0x7f00000001c0)={'bridge0\x00', @ifru_ivalue=0xe}) ioctl$sock_ifreq(r4, 0x891a, &(0x7f00000004c0)={'bridge0\x00', @ifru_data=&(0x7f0000000500)="15144be88e62e25614838394d026285059399f6757c73a8216677a39c3e78590"}) io_uring_setup(0x3b7e, &(0x7f0000000280)={0x0, 0xaf7, 0x400, 0x2, 0x20e}) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x20040, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000840)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xffe3, 0xfff1}, {0xffff, 0xffff}, {0xf}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}]}, 0x30}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0xe3ca, 0x6, 0x1, 0x1, 0xd, 0xfff, 0xfffffffa, 0x8}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000b0}, 0x46890) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56561, 0x70bd2f, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {0x0, 0x8}, {0xc}}}, 0x24}}, 0x4008090) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r10) r11 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x42801, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r11, 0x8008330e, 0x0) 3m43.224466403s ago: executing program 3 (id=2865): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r4, 0xc2c45512, &(0x7f0000000080)={{0x8, 0x5, 0x80, 0x1, '\x00', 0xf9b}, 0x0, [0xffffffff, 0x1000, 0x7fffffff, 0x81, 0x71, 0x1, 0x6, 0x4b, 0x6206, 0x3, 0x5, 0x2, 0xbb, 0x0, 0x4, 0x4, 0x45600b3d, 0x31, 0x4, 0x1ff, 0x800, 0x5, 0x0, 0x2, 0x403, 0xb, 0x9, 0x0, 0x3, 0x10001, 0x7, 0x9, 0x21c, 0x1, 0x9, 0xa0ba, 0xfffffffe, 0xd83, 0x2, 0x52c, 0xfe9, 0xc000, 0x3, 0xb78, 0x2ed, 0xc, 0x100, 0x10000, 0x7, 0x5, 0x81, 0x60bca849, 0x6, 0x1, 0x7, 0x5, 0x1f97, 0xfffffff8, 0x7fffffff, 0x1, 0xc07, 0x9, 0xfff, 0x5, 0x4, 0x6, 0x3d, 0x40, 0x5, 0xe3, 0xfff, 0xc0d, 0x58, 0x8, 0x1000, 0x200000, 0x7ff, 0xe, 0x4, 0x7, 0x2, 0x4, 0xe0b, 0x6, 0x0, 0x1, 0x1, 0xffff, 0x7, 0xdc3, 0x0, 0x8, 0x8001, 0x1000, 0x0, 0x8, 0xb, 0x800, 0x1, 0xf04, 0x7fff, 0xe, 0xfffffff8, 0x2, 0x5, 0x0, 0x7ff, 0x1ff, 0x9, 0x40, 0x1, 0x5, 0x2, 0x5, 0x80, 0x6, 0x2, 0x1, 0x7, 0x4, 0x9, 0x6, 0x0, 0x5, 0x9, 0xfffffff1, 0x100, 0x3]}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="343e934d7000ffdbdf250c000000200003801800038014dd00800500020000000000080001000c0000000400010018000180140002007465616d5f736c6176655f3000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x4001019}, 0x20000004) 3m43.109491447s ago: executing program 5 (id=2866): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = signalfd4(r0, &(0x7f0000000000)={[0x1, 0x5]}, 0x8, 0x0) sendmsg$IPSET_CMD_GET_BYNAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0xe, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20008044}, 0x4008000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000050000000900010073797a300000000040000000030a01010000000000000000050000000900010073797a30000000000900030073797a300000000014000480080001400000000008000240521deb0b68000000060a010400000000000000000500000008000b400000000040000480240001800b00010074756e6e656c000014000280080001400000001008000240000000091800018008000100667764000c00028008000140000000090900010073797a30"], 0xf0}}, 0x0) syz_clone3(&(0x7f0000000580)={0x200000000, &(0x7f00000002c0), &(0x7f0000000300)=0x0, &(0x7f0000000340), {0x10}, &(0x7f0000000380)=""/187, 0xbb, &(0x7f0000000440)=""/254, &(0x7f0000000540)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3, {r1}}, 0x58) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000700)={r2}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r4, 0x1000) r5 = openat$cgroup(r1, &(0x7f0000000680)='syz1\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000006c0)={r4, r5, 0x18, 0x0, @void}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x3, &(0x7f0000000600)) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x70, r6, 0x1, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0xff, 0x2b}}}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x8}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x3}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x70}, 0x1, 0x0, 0x0, 0x8000000}, 0xc041) 3m42.132080072s ago: executing program 36 (id=2866): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = signalfd4(r0, &(0x7f0000000000)={[0x1, 0x5]}, 0x8, 0x0) sendmsg$IPSET_CMD_GET_BYNAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0xe, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20008044}, 0x4008000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000050000000900010073797a300000000040000000030a01010000000000000000050000000900010073797a30000000000900030073797a300000000014000480080001400000000008000240521deb0b68000000060a010400000000000000000500000008000b400000000040000480240001800b00010074756e6e656c000014000280080001400000001008000240000000091800018008000100667764000c00028008000140000000090900010073797a30"], 0xf0}}, 0x0) syz_clone3(&(0x7f0000000580)={0x200000000, &(0x7f00000002c0), &(0x7f0000000300)=0x0, &(0x7f0000000340), {0x10}, &(0x7f0000000380)=""/187, 0xbb, &(0x7f0000000440)=""/254, &(0x7f0000000540)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3, {r1}}, 0x58) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000700)={r2}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r4, 0x1000) r5 = openat$cgroup(r1, &(0x7f0000000680)='syz1\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000006c0)={r4, r5, 0x18, 0x0, @void}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x3, &(0x7f0000000600)) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x70, r6, 0x1, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0xff, 0x2b}}}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x8}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x3}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x70}, 0x1, 0x0, 0x0, 0x8000000}, 0xc041) 3m42.098192142s ago: executing program 3 (id=2872): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = epoll_create1(0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MON_PEER_GET(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)=ANY=[@ANYRESHEX=r2, @ANYRES64=r1, @ANYRES64=r2], 0x20}, 0x1, 0x0, 0x0, 0x44011}, 0x20040000) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0xe, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x100007ff, 0xf83, 0xd3}, 0x1c) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x2, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x33, &(0x7f000002eff0)={0x3, &(0x7f0000000040)=[{}, {0x7f, 0xf, 0xb, 0x3}, {0xa121, 0x3, 0x81, 0x1}]}, 0x10) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=ANY=[@ANYBLOB="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", @ANYRES32=r3, @ANYRES32=r1, @ANYRESOCT=r4], 0x144}, 0x1, 0x0, 0x0, 0x8850}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, 0x0, 0x0) connect$inet(r5, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0xfffffffffffffffa}, {}, 0x3, 0x0, 0x1}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x39}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0xfffffffe, 0xfffffffe}}, 0xe4) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x1c) sendmsg$NL80211_CMD_RELOAD_REGDB(r2, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, 0x0, 0x20, 0x70bd2b, 0x25dfdbff, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4004021) socket$nl_netfilter(0x10, 0x3, 0xc) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000800)={0x30000000}) socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e20, @remote}], 0x10) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r6, 0x84, 0x7, &(0x7f0000000000)={0x3}, 0x4) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r7) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e20, 0x1000b, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4008010) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x8, 0x2, 0x157}, &(0x7f0000000180), &(0x7f0000000280), &(0x7f0000000140)) 3m40.980754868s ago: executing program 3 (id=2875): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) r2 = open_tree(r1, &(0x7f0000001280)='./file0\x00', 0x0) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x41) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) unshare(0x2c020400) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r5 = fanotify_init(0x200, 0x0) fanotify_mark(r5, 0x80, 0x50000022, r4, 0x0) 3m39.775600621s ago: executing program 3 (id=2879): r0 = socket(0x10, 0x803, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x40090) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0xbc, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x78, 0x12, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x1000}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x8b}]}}}, {0x48, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x38, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0xd236}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_LIMIT_FLAGS={0x8}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x3}]}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x5, 0x84}}}, 0x104}, 0x1, 0x0, 0x0, 0x20004010}, 0x20050800) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000007c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_MATCH_INFO={0x4}, @NFTA_MATCH_NAME={0x8, 0x1, 'u32\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="280000001d0001002bbd7000fcdbdf250a000000e90e53324c01decd2f348b50e145814ecf2840d1b3eb675f63e9a3428f4c96b41e5c72c204d224521aeb1ab4f8155129afa20a8fad7d33c5dcd313b1b5cb7141d280be5ca987a6b4f1556c1336e420b7db60b1accdba9a903223d47b43b254d49aa7610253089131078752cc41d91a21d9152febc4", @ANYRES32=0x0, @ANYBLOB="000048000a000100d1ab46f0fd530000"], 0x28}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYRES64=r0], &(0x7f00002bf000)='GPL\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x8}, 0x8}, 0x94) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000180)={&(0x7f0000000100)=""/82, 0x216000, 0x0, 0xfffffffe}, 0x1c) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r3, 0x0, 0x3b, 0x8, @void}, 0x10) 3m39.057687109s ago: executing program 3 (id=2881): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x2481, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), r4) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r4, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40044}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r5, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private2}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x80}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x20000014) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r7) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x78b926, 0x25dfdc01, {0x0, 0x0, 0x0, r9, {0x0, 0xd}, {0xffff, 0xb}, {0x2, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x1007fff}}]}, 0x38}}, 0x4890) ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 3m38.773783085s ago: executing program 37 (id=2881): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x2481, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), r4) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r4, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40044}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r5, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private2}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x80}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x20000014) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r7) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x78b926, 0x25dfdc01, {0x0, 0x0, 0x0, r9, {0x0, 0xd}, {0xffff, 0xb}, {0x2, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x1007fff}}]}, 0x38}}, 0x4890) ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 3m38.340009002s ago: executing program 7 (id=2885): r0 = epoll_create1(0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0x20000014}) r2 = syz_io_uring_setup(0xf08, &(0x7f0000000300)={0x0, 0xfffffffe, 0x800, 0x3, 0x800000c3}, &(0x7f0000000580)=0x0, &(0x7f0000000540)=0x0, &(0x7f0000000f40)=0x0) syz_io_uring_submit(r3, r4, r5, 0x0) io_uring_enter(r2, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) 3m38.196893535s ago: executing program 7 (id=2886): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r4, 0xc2c45512, &(0x7f0000000080)={{0x8, 0x5, 0x80, 0x1, '\x00', 0xf9b}, 0x0, [0xffffffff, 0x1000, 0x7fffffff, 0x81, 0x71, 0x1, 0x6, 0x4b, 0x6206, 0x3, 0x5, 0x2, 0xbb, 0x0, 0x4, 0x4, 0x45600b3d, 0x31, 0x4, 0x1ff, 0x800, 0x5, 0x0, 0x2, 0x403, 0xb, 0x9, 0x0, 0x3, 0x10001, 0x7, 0x9, 0x21c, 0x1, 0x9, 0xa0ba, 0xfffffffe, 0xd83, 0x2, 0x52c, 0xfe9, 0xc000, 0x3, 0xb78, 0x2ed, 0xc, 0x100, 0x10000, 0x7, 0x5, 0x81, 0x60bca849, 0x6, 0x1, 0x7, 0x5, 0x1f97, 0xfffffff8, 0x7fffffff, 0x1, 0xc07, 0x9, 0xfff, 0x5, 0x4, 0x6, 0x3d, 0x40, 0x5, 0xe3, 0xfff, 0xc0d, 0x58, 0x8, 0x1000, 0x200000, 0x7ff, 0xe, 0x4, 0x7, 0x2, 0x4, 0xe0b, 0x6, 0x0, 0x1, 0x1, 0xffff, 0x7, 0xdc3, 0x0, 0x8, 0x8001, 0x1000, 0x0, 0x8, 0xb, 0x800, 0x1, 0xf04, 0x7fff, 0xe, 0xfffffff8, 0x2, 0x5, 0x0, 0x7ff, 0x1ff, 0x9, 0x40, 0x1, 0x5, 0x2, 0x5, 0x80, 0x6, 0x2, 0x1, 0x7, 0x4, 0x9, 0x6, 0x0, 0x5, 0x9, 0xfffffff1, 0x100, 0x3]}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="343e934d7000ffdbdf250c000000200003801800038014dd00800500020000000000080001000c0000000400010018000180140002007465616d5f736c6176655f3000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x4001019}, 0x20000004) 3m37.915138949s ago: executing program 7 (id=2888): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) close(r0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x2, 0x0, 0x2, 0x1, {0xa, 0x4e24, 0x4, @empty, 0x1f}}}, 0x3a) ioctl$PPPIOCGMRU(r2, 0x80047453, &(0x7f0000000540)) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r3, 0x0, 0x58) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x5ac, 0x25b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x7, 0xc0, 0x2, "", [{{0x9, 0x4, 0x0, 0x8, 0x1, 0x3, 0x1, 0x2, 0xc9, {0x9, 0x21, 0xe4, 0x3, 0x1, {0x22, 0x49b}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x7, 0x7, 0x5}}}}}]}}]}}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0}) 3m34.78886658s ago: executing program 6 (id=2899): r0 = socket(0x10, 0x803, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x40090) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0xbc, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x78, 0x12, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x1000}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x8b}]}}}, {0x48, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x38, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x7}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_LIMIT_FLAGS={0x8}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x3}]}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x5, 0x84}}}, 0x104}, 0x1, 0x0, 0x0, 0x20004010}, 0x20050800) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000007c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_MATCH_INFO={0x4}, @NFTA_MATCH_NAME={0x8, 0x1, 'u32\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="280000001d0001002bbd7000fcdbdf250a000000e90e53324c01decd2f348b50e145814ecf2840d1b3eb675f63e9a3428f4c96b41e5c72c204d224521aeb1ab4f8155129afa20a8fad7d33c5dcd313b1b5cb7141d280be5ca987a6b4f1556c1336e420b7db60b1accdba9a903223d47b43b254d49aa7610253089131078752cc41d91a21d9152febc4", @ANYRES32=0x0, @ANYBLOB="000048000a000100d1ab46f0fd530000"], 0x28}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYRES64=r0], &(0x7f00002bf000)='GPL\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x8}, 0x8}, 0x94) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000180)={&(0x7f0000000100)=""/82, 0x216000, 0x0, 0xfffffffe}, 0x1c) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r3, 0x0, 0x3b, 0x8, @void}, 0x10) 3m34.759985382s ago: executing program 7 (id=2900): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) r2 = open_tree(r1, &(0x7f0000001280)='./file0\x00', 0x0) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x41) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r5 = fanotify_init(0x200, 0x0) fanotify_mark(r5, 0x80, 0x50000022, r4, 0x0) 3m34.438442639s ago: executing program 6 (id=2901): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, 0x0) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, 0x0) ioctl$KVM_GET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee2, 0x0) r0 = openat$kvm(0xffffff9c, &(0x7f0000000140), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f00000000c0)={[{0x200000, 0xff, 0x2, 0x4, 0x0, 0x7, 0xc4, 0x3, 0xe, 0x6, 0xc, 0x8, 0x100}, {0x8, 0xaef2, 0x6, 0xc, 0xc, 0xde, 0x2, 0x3, 0x0, 0x13, 0x1, 0x6, 0x7}, {0xffffd, 0x6, 0xc, 0xf, 0x1, 0x5, 0x0, 0xfb, 0x7a, 0x15, 0x1, 0x1, 0x2}], 0x5}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x1, 0x6, 0x0, 0xfffffffffffffc00, 0x8000000000010004, 0xfffffffffffffffd, 0x4002004c3, 0x167a, 0x0, 0xfff, 0x10, 0x4, 0x0, 0x0, 0x8, 0x3], 0xeeee8000, 0x301084}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @broadcast}) write$tun(r3, &(0x7f0000001440)={@val={0x8, 0x800}, @val={0x5, 0x0, 0x6, 0x0, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x2, 0xfde1, 0x66, 0x0, 0xb, 0x89, 0x0, @rand_addr=0x64010102, @broadcast}, "3297e3ba"}}, 0xfdef) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r7, 0x4400ae8f, &(0x7f0000000300)={"7591273db7f9b25f105102d88c110b5a4a3ef6cb30e9df379ca600fee7429cd446f75fcab66c011295e024c81ecd0ce96d616dc461476ee77aeba5a0eb231ccca6dbc5a95a209956794cf6e04d5222b287320239d8160839d54a14530cd0216cf4ee6612c5454b8e578f6e11e0cd422842577d27683d4dfc8d6b07fb1220b0f9beb2d05724bba04a5d387c612b1ff798d84cd93701a30933fb7547126cc5bfb6c36fa21bcf6153b89cbc399e2ccfc085ce3f6abf678511584195f45a2a23506dd044e3f9ad51c1558c664a462ea3c7f3439117a7b6a579f04b4fe7a66b98191e0446f7363bb3476b502e6816aac03015d1bbe024575e510f7e3ee6c6e7dfff125182472402198548763f74f049945aea74a2c73f9dccce0bc3a17592883738bd41fdb831423e2779576eb2db93485e6499e84a2a88479bf7bed2dce066ba220e4b9a84dfcaa609fdf9f182beaf7d64f152f3ff7b48b3d35b64e5aa789af425e771e98e05d5164cd26a190fe05f6b9c1351e491738ef6475b713b55aeaedf3e692857a25506bb3757adc192d76fac58e95455843c88c89428219fecc44ccc62165b1238953554eaa0e0dc9ca7ad044243df81ba55989363cdbf8878091761923a46072ea851bc951bfee1c4507b9e2c841b27486f7c408d75ad7361e0103ff9f446309b5ed1b6ea8d26ea76ae6bffa730560d0c1afbe1d234d84cbc4b936078adef0875373d7a8d7ca374d0d04dc87c4fb0436d19d8a865d9e95267e92b0d4002074ff4bcfbea9f6d704b9d0f58fde50d59aa59b2500ff1158ee533b52534e3b49032c2d4615b518e3bf95951728ef7da07fdfa9530cd7f960e044cccfca64895db312a9b2152b2ba9e00baf16ff9bedc5373fc23e5fade6ba077037d42cc30fd5ac0cb0b5f3396327e8d08fc8a73899989c1ad1ba2fc9c84a9cf741a0af1e63000e99823f971d19d61f7e90117589d84834f009fa8fa9a352e386b0bb98ed1846b22d8387d00d1b0ca4cf380052982423405b9ff00767735655b1940b1a6be241cf37422a77de496a8a9e9a9f27c04b9ab0aa03e7aa1173d45c3a6af4d97cf68b5244d77d9629bf93b15bba5cd0c0ce3c3c27b44bc4ed2cf1298cefaf49d364d93943d1a6b9afdf13f3399958df20083931ef7aa6274daeabc58f108a7721be95350e09565987a4244f7fcdd76554ab57070561a33b36bd0cc22bf403171a0485c4f21fcaeb616f5d683f595615790bc38a271c768ef5d755c13934229a7b7ffda0ba53e610d7436d9525296c5a031c9e5a5eb5453fb2b54055b6e6eb6ad81d4340ea178c2acfa95752b8d24976fe238230064e1d6cccc36830c6f84f53c400e6e1155d6b6f4cd044f3e19ca7755a12369fd95672ec45c42eb1ffba25f4392aa9ad75bc0bb37cd24f7f8330800"}) r8 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc513, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x8, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x81, 0x10, 0x1, {0x22, 0x23}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x8, 0xc0}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) syz_usb_control_io(r8, &(0x7f0000000000)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$KVM_SET_CPUID2(r7, 0x4008ae90, &(0x7f0000000100)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x0, 0x0, 0x1200000}]}) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000200)={0x2, 0x0, [{0x1b, 0x0, 0xfee00d00}, {0x832, 0x0, 0x40000}]}) syz_emit_ethernet(0x4e, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaabbbb86dd67da712000181101fc02000000000000000000000000000100000000000000000000ffff000000004e234e210018907804000000b5080000ff0700000000000039e11cfb92c0c9243f619feca09f54d30a1400000000000000"], 0x0) 3m33.763707606s ago: executing program 7 (id=2902): modify_ldt$write2(0x11, &(0x7f0000000100)={0x1d30, 0x0, 0x2000, 0x1}, 0x10) syz_clone(0x85840000, 0x0, 0xfffffffffffffdc1, 0x0, 0x0, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x268}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x0, 0x40055}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) socket(0x840000000002, 0x3, 0x100) socket$nl_generic(0x10, 0x3, 0x10) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) splice(r6, 0x0, r5, 0x0, 0x1, 0x0) syz_io_uring_setup(0xf04, &(0x7f0000000400)={0x0, 0x595f, 0x80, 0x0, 0x10000051}, &(0x7f0000000200), &(0x7f0000000000), &(0x7f00000000c0)) syz_io_uring_submit(r2, r3, r4, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x2011}}) io_uring_enter(r1, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) read(r0, &(0x7f0000000300)=""/172, 0xdc) 3m33.285667575s ago: executing program 7 (id=2903): modify_ldt$write2(0x11, &(0x7f0000000100)={0x1d30, 0x0, 0x2000, 0x1}, 0x10) syz_clone(0x85840000, 0x0, 0xfffffffffffffdc1, 0x0, 0x0, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x268}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x0, 0x40055}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) socket(0x840000000002, 0x3, 0x100) socket$nl_generic(0x10, 0x3, 0x10) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) splice(r6, 0x0, r5, 0x0, 0x1, 0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x2011}}) io_uring_enter(r1, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) read(r0, &(0x7f0000000300)=""/172, 0xdc) 3m32.996664307s ago: executing program 38 (id=2903): modify_ldt$write2(0x11, &(0x7f0000000100)={0x1d30, 0x0, 0x2000, 0x1}, 0x10) syz_clone(0x85840000, 0x0, 0xfffffffffffffdc1, 0x0, 0x0, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x268}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x0, 0x40055}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) socket(0x840000000002, 0x3, 0x100) socket$nl_generic(0x10, 0x3, 0x10) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) splice(r6, 0x0, r5, 0x0, 0x1, 0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x2011}}) io_uring_enter(r1, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) read(r0, &(0x7f0000000300)=""/172, 0xdc) 3m32.017029359s ago: executing program 6 (id=2908): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, 0x0) write$tun(r1, &(0x7f0000002780)=ANY=[@ANYBLOB="1c0008200203000014"], 0xfb5) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) 3m31.372049187s ago: executing program 6 (id=2910): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) r2 = open_tree(r1, &(0x7f0000001280)='./file0\x00', 0x0) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x41) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r5 = fanotify_init(0x200, 0x0) fanotify_mark(r5, 0x80, 0x50000022, r4, 0x0) 3m30.391835481s ago: executing program 6 (id=2911): modify_ldt$write2(0x11, &(0x7f0000000100)={0x1d30, 0x0, 0x2000, 0x1}, 0x10) syz_clone(0x85840000, 0x0, 0xfffffffffffffdc1, 0x0, 0x0, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x268}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x0, 0x40055}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) socket(0x840000000002, 0x3, 0x100) socket$nl_generic(0x10, 0x3, 0x10) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) splice(r6, 0x0, r5, 0x0, 0x1, 0x0) syz_io_uring_setup(0xf04, &(0x7f0000000400)={0x0, 0x595f, 0x80, 0x0, 0x10000051}, &(0x7f0000000200), &(0x7f0000000000), &(0x7f00000000c0)) syz_io_uring_submit(r2, r3, r4, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x2011}}) io_uring_enter(r1, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) read(r0, &(0x7f0000000300)=""/172, 0xdc) 3m29.979698488s ago: executing program 6 (id=2912): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) syz_open_dev$loop(&(0x7f0000000080), 0x4, 0xaa440) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000cbd70100400000005000000080009000200000008000c00a80a000008000b00000000000600010007"], 0x6c}, 0x1, 0x0, 0x0, 0x40811}, 0x20) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x34, r2, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) 3m29.376487162s ago: executing program 39 (id=2912): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) syz_open_dev$loop(&(0x7f0000000080), 0x4, 0xaa440) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000cbd70100400000005000000080009000200000008000c00a80a000008000b00000000000600010007"], 0x6c}, 0x1, 0x0, 0x0, 0x40811}, 0x20) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x34, r2, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) 7.739993969s ago: executing program 0 (id=3967): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) syz_open_procfs$namespace(0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x3) writev(0xffffffffffffffff, 0x0, 0x0) memfd_secret(0x80000) syz_usb_connect(0x5, 0x24, &(0x7f0000000a40)={{0x12, 0x1, 0x340, 0x19, 0xe9, 0xf4, 0x20, 0x781, 0x1, 0x200, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x6, 0xff, 0x50, 0x3, "", [{{0x9, 0x4, 0xfd, 0x8, 0x0, 0x84, 0x5e, 0x7c, 0x7}}]}}]}}, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000ac0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x2c, r1, 0x1, 0x70bd27, 0x25dedbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x5, 0x0, "16"}, @NL80211_BAND_60GHZ={0x4}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x46b2d3ba8e12a610}, 0x4048840) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480f0000005e140602000000000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) r4 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x9}, 0x20) setsockopt$inet6_int(r4, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r4, &(0x7f0000001700)={&(0x7f0000000000)={0xa, 0x4e22, 0x81, @private0, 0x40}, 0x1c, &(0x7f00000005c0)=[{&(0x7f0000000380)='\"', 0x1}], 0x1}, 0x20000854) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r4, 0x84, 0x16, &(0x7f0000000000)={0x4, [0xc, 0xfff7, 0x7, 0x2588]}, &(0x7f0000000040)=0xc) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r5, 0x107, 0xd, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) 6.53594211s ago: executing program 8 (id=3972): rseq(&(0x7f0000000300), 0x20, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_procfs(0x0, &(0x7f0000000700)='fdinfo\x00') getdents64(r0, &(0x7f00000008c0)=""/4096, 0x1000) r1 = gettid() r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r4, @ANYBLOB="00000016010000001800120008000100736974000c0002000800030036"], 0x38}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x439, 0x70bd2d, 0xffffffea, {0x0, 0x0, 0xe403, r4, 0x40083}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FWMARK={0x8, 0x14, 0x5}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008004}, 0x4040) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x80842, 0x20) mmap(&(0x7f0000341000/0x9000)=nil, 0x9000, 0x17ffffe, 0x4012011, r5, 0x0) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) tkill(0x0, 0x13) process_vm_writev(r1, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x310, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0) r7 = open(&(0x7f0000000100)='./bus\x00', 0x143142, 0xa2) write$FUSE_INIT(r7, &(0x7f0000000140)={0x5e}, 0xffd3) r8 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r8, 0xc0145608, &(0x7f00000003c0)={0x40201, 0xa, 0x4, 0x0, 0xbd}) write$FUSE_NOTIFY_INVAL_ENTRY(r7, 0x0, 0x2e) read$FUSE(r7, &(0x7f0000004ac0)={0x2020}, 0x2020) 5.5936438s ago: executing program 8 (id=3975): ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0186405, &(0x7f0000000000)={0x5, 0x7, {0xffffffffffffffff}, {0xee01}, 0xca063279, 0xffffff67}) socket$nl_route(0x10, 0x3, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x1) openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x42000, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) write$cgroup_devices(r0, 0x0, 0xffdd) syz_usb_connect$cdc_ncm(0x0, 0x72, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x40000000}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e21, 0x63, @loopback, 0x7}, 0x1c) syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/fib_triestat\x00') getsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f00000001c0), &(0x7f0000000240)=0x4) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/tracing', 0x0, 0x0) getdents64(r5, &(0x7f0000000940)=""/4096, 0x1000) lseek(r5, 0x24, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @multicast1}}, 0xa, 0x0, 0xdd5, 0x7ff, 0x38fa8b00d923ddd5}, 0x9c) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r6, &(0x7f0000000180)={0xa, 0x4001, 0x6, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) connect$unix(r6, &(0x7f00000001c0)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) socket$nl_route(0x10, 0x3, 0x0) ioctl$VIDIOC_QUERYBUF(r5, 0xc0585609, &(0x7f0000000240)=@userptr={0x7, 0xa, 0x4, 0x2, 0x3b55, {}, {0x1, 0x8, 0x7, 0x8, 0x3, 0x16, "f7daba30"}, 0x4, 0x2, {0x0}, 0x2, 0x0, r5}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 4.405845143s ago: executing program 0 (id=3981): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) (async) socket$inet6(0xa, 0x3, 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_open_procfs(0x0, &(0x7f0000002380)='net/ip_mr_cache\x00') ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) syz_io_uring_setup(0x246a, &(0x7f00000000c0)={0x0, 0xba2a, 0x80, 0x3, 0x1c4, 0x0, r5}, &(0x7f0000000140)=0x0, &(0x7f0000000180), 0x0) syz_io_uring_modify_offsets$generic(r6, 0x0, 0x68, 0x2) pread64(r5, &(0x7f00000003c0)=""/262, 0x106, 0x4) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000a840}, 0x5) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="020000000400000006000000aa0b"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, &(0x7f00000002c0)=""/251, &(0x7f0000000940), &(0x7f0000000200), 0xa7c, r7}, 0x38) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x8d5}, 0x0) (async) link(0x0, &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001022010000000000000000000000000a4c000000060a0904200000000000000002000003200004800c000180080001006c6f6700100001800c000100636f756e746572000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x74}, 0x1, 0x0, 0x0, 0x40010}, 0x0) r9 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r9, 0x110, 0x3, &(0x7f0000000080), 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000003000000000000000600000040000080060000009500000200000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.124639273s ago: executing program 2 (id=3984): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x2, &(0x7f0000000040)=0xfff, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r1, &(0x7f00000001c0)={0x1d, r2}, 0x10) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000000)="2400000011005f0414f9f4070009041f810000000e0000000000000008000f0001000000", 0x24) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000240), 0x1) sendto$inet6(r0, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) 3.984632328s ago: executing program 2 (id=3985): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = fsopen(&(0x7f0000000300)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x9) fchdir(r2) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1000000, 0x32, 0xffffffffffffffff, 0x33ed0000) syz_usb_connect$uac1(0x3, 0xbc, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x1235, 0x10, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xaa, 0x3, 0x1, 0x4, 0x0, 0xff, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x3, 0x33}, [@processing_unit={0xc, 0x24, 0x7, 0x6, 0x4, 0x0, "9c4d5de953"}, @mixer_unit={0x7, 0x24, 0x4, 0x4, 0xf7, "f258"}, @selector_unit={0xa, 0x24, 0x5, 0x1, 0x5, "303e835237"}, @input_terminal={0xc, 0x24, 0x2, 0x4, 0x100, 0x1, 0x5, 0x0, 0x80, 0x4}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x3, 0x6, 0x37, 0x9, 0x9}, @as_header={0x7, 0x24, 0x1, 0x3b, 0x2, 0x5}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x9, 0x2, 0xa, 0x3, "b1", "cb"}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x5, 0x9d, 0xfa, {0x7, 0x25, 0x1, 0x6f4b5413efe4ee76, 0x9, 0x7fff}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x9, 0x6, 0x2}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x0, 0x8, 0x8, {0x7, 0x25, 0x1, 0x8, 0xc6, 0x51}}}}}}}}]}}, &(0x7f00000007c0)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x310, 0x2, 0x0, 0x81, 0x40, 0x4}, 0x5, &(0x7f0000000340)={0x5, 0xf, 0x5}, 0x5, [{0xf4, &(0x7f0000000380)=@string={0xf4, 0x3, "7251a5669e7266ac1a7f7f6a91ee5ab2b6b61423361f88b2301c27705f4c587dac716bca10a0c6212f0a76b4573f1955133e786f8233c5cfef583ec5eca167bb918a57b450f5eec06bd62c8c0162759ecc23513dbe0be63abb19e7af2c8fb447b181114ba741160c7db43a1923ad2a8f0cdb68c47b9f4eaf6a72296184daca976b9f3f27c03a2ed978a0c3fb2e60d42c91d198cdbd0c4253e6aecfff8e5f73c3405c74cdc3f75759464c0bc827e3a23bfa6478283d4f0b43d36f87c4c49404646d9829139aa678bcab87d0e6516f3143dd5e133df40e354e067678d3a8c3bfeb33ea624ed78a183d6c6b9728f214220a001c"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x100c}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x3c61}}, {0xd1, &(0x7f00000005c0)=@string={0xd1, 0x3, "44faa03b8379d1ae02d527d04019adada546ebb70eb927f9f426a50e783a322065cc95c2907c367744ad310bd939b744db91227ed2e177a15add56a64da7bc40e6c8d6ffbdcfcb42b159067cee58b3a64c659ba8f5c5557e5b9882f372405027c58509d0099676e20d9fbbf0a59793f9e3228e7e14206be93c466b9617af99f6780ea6dccb303e84f503b5622fd67695c7fdcee33ac9eeb9c46f4d8d767c85085c2b5e08561d06340fb07b61b2a30946e67d5ea62a4f7642e42a2d6a609cea274f4d71ac456c6840492bac1fb1846e"}}, {0xe9, &(0x7f00000006c0)=@string={0xe9, 0x3, "fd2fc2773ec108d357d1336458bab575245fd45a1db66e743413f31079044cc984357b356744da607878dee21da4b25e1a8c0259c54581a244783826b2b20c9307944dc269857897e5de7a19c45da245ec861602be774312c7a91d57bdbb6c08cdb101576d334e257c014f6e584ee2c8e57054de4e745cd511df9517f29d7eea23f4ef53f4e2752ded4da50b24f8d7077205661c9f8aa3f8a8c9806a7cd8c3813f8cca3bb1fdf7f9b59238fab474ade632651659aaa81c972219120f954531f71a893c24beb01d9d115c652adc797fdf2ee10b04c6422387a79929b0986906c6ccd2bd54e37923"}}]}) r3 = open(&(0x7f0000000040)='.\x00', 0x20000, 0x0) getdents64(r3, &(0x7f0000000fc0)=""/224, 0xe0) getdents64(r3, &(0x7f0000000fc0)=""/224, 0xe0) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0xd}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x80) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000000c0)=0x14) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x6c, r4, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @multicast1}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @empty}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x1}, @FOU_ATTR_TYPE={0x5}, @FOU_ATTR_IFINDEX={0x8, 0xb, r5}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @local}]}, 0x6c}}, 0x0) 3.843531329s ago: executing program 9 (id=3986): ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000b00)=0x6) io_setup(0x7, &(0x7f0000000280)=0x0) set_mempolicy(0x5, &(0x7f0000000000)=0x2, 0x6) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x88002, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0xd) r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000040), 0x103902, 0x0) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f0000001040)={0x18, {"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", 0x100d}}, 0xfffffdef) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(0xffffffffffffffff, 0xc1205531, &(0x7f00000002c0)={0x0, 0x2d4, 0x0, 0x1, '\x00', '\x00', '\x00', 0x6, 0x8, 0x768, 0x52, "4ee763cdafe4101b23c5311c62559862"}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x200000a, 0xc3072, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000400000/0x3000)=nil, 0x3000, 0x9, 0x4d032, 0xffffffffffffffff, 0x0) io_submit(r0, 0x1, &(0x7f0000000540)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f0000000580)={{0x5, 0x3, 0x3, 0xfffffffe, 'syz0\x00', 0x2}, 0x1, [0xd44, 0x7fffffffffffffff, 0x0, 0x2, 0x4, 0x4, 0x7ff, 0x2, 0x2, 0x101, 0x2, 0xd, 0xf, 0x8, 0x1, 0x7, 0x4, 0x2, 0x2, 0x9, 0x0, 0xfffffffffefffffe, 0xfe7, 0x8000000000000000, 0x2, 0x8, 0x7ff, 0x9, 0xfffffffffffffffa, 0x2, 0xfffffffffffffff7, 0x5, 0x7, 0x403, 0x2, 0x10000, 0xe, 0x5, 0x8, 0x88, 0x2, 0x6, 0x4, 0xffffffff, 0x0, 0x9, 0x7, 0x6, 0xa, 0x4, 0x7fff, 0x6, 0x8001, 0xffa1, 0x6, 0x8, 0x1, 0xfffffffbfffff800, 0x244, 0xffffffffffffffff, 0x20, 0xc, 0xffffffffffffffff, 0xffffffffffffffff, 0x8f, 0x5, 0x1, 0x4, 0x4, 0x4, 0xf, 0xae9, 0x3, 0xfffffffffffffffe, 0x4000000006, 0x9, 0x7, 0x4000000000000000, 0x0, 0x7ff, 0x4, 0x7, 0x205d, 0x9, 0x63, 0x3, 0x3, 0x6, 0xf8, 0xfffffffffffffff9, 0xfffffffffffffffb, 0xfff, 0x93, 0x6, 0x4, 0x8000000000000000, 0x800000000209, 0x2, 0x7ff, 0x7, 0x8, 0x1ff, 0x0, 0x6, 0x4, 0x5, 0x796a, 0xb0b, 0x9, 0x7, 0x4, 0x4, 0x0, 0x8, 0x4, 0x2dd, 0x4, 0x4, 0x8, 0x10000, 0x1da0, 0x38, 0x7, 0x5, 0x5, 0x8000000000000001, 0xfffffffffeffffff, 0x7]}) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e23, 0xfffffffc, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f00000001c0)={0x0, 0x7}, 0x8) listen(r4, 0x4) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x4}, 0x8) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r6 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r6, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f0000087000/0x3000)=nil, &(0x7f0000678000/0x3000)=nil, 0x3, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x3, 0xaa}) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r5, 0x84, 0x79, &(0x7f0000000140)={0x0, 0xb, 0xa9a}, 0x8) 3.492891623s ago: executing program 9 (id=3987): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r1 = gettid() rt_sigtimedwait(&(0x7f0000000040)={[0xffffffff]}, 0x0, 0x0, 0x8) timer_create(0x2, &(0x7f0000000180)={0x0, 0x4, 0x4, @tid=r1}, &(0x7f0000000140)=0x0) timer_settime(r2, 0xe54aef35e9c2845d, &(0x7f000006b000)={{0x77359400}, {0x0, 0x9}}, 0x0) r3 = syz_open_dev$dvb_demux(&(0x7f0000000400), 0x0, 0x700) ioctl$DVB_DEMUX_DMX_SET_BUFFER_SIZE(r3, 0x6f2d, 0x2000001) 3.174498675s ago: executing program 0 (id=3988): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x30, r1, 0x5, 0x70bd2b, 0x21dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0xd}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x5}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x20004044}, 0x0) 3.17225349s ago: executing program 0 (id=3989): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0) read$FUSE(r0, &(0x7f0000008300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000004300)="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", 0x2000, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x90, 0x0, 0x3, {0x3, 0x4000000000, 0x0, 0x4000000004, 0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffdc, 0x103, 0x9, 0x1000, 0x0, 0x0, r2, 0x0, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000006300)="c4acef607b9ddcfd235a03c6db2c1419c3332fd94e60bb741ab4a8750cdb46d41965ca8c176409eae88e4d142adc35d20aeb6cee87b470c46a623ffd2c7b92b7b2026c8a2d3a08f7c376bba66ea2fd6bd26a5903aab1fd5f08c5c80a017bd0a1f16e11ed288e1f71fd8f904cd60c2bad8ba59003a9216f171640535484f6706eda84c4a11c63565004ac33cb6040901b5f14b2406a1ddc7ca78fa91f3d575ec92c1c73d56c7d02de887a84a9b88c9b70f0bf2141e1f624e8222a9a63ba199362c8bff33780e6c79435460ada699e037ee7894aeecf7d3b089fa428a18edfe239134a244f69ecda10834e06e1466d95effc76211b61514522c429e80691780744f5e470e417559879fd7c7cdbde84361bb2491dc53a481b3bb5c071926f0c57af8745b52e6b07b053daad9e52a29869f3bee8c9ff43b2e9c20a26035ac89169b7058ee967b44365648f510555c701188079c745776f55748c32867df6e4e78890a32f126197f55113ce4e8c5397224ab6fb9124bdb0050fdb92a42237292668a7aa615216e39f78210b2774f0849a79fd446bdf2ec38d7c61e5384ca5ca6c040522d42102515d86c7743a8f384bf18efffb69d0ad0abb7c48fc8f770152226d05363ea26a7aabb3450905bf28dbc5fadbebe2ea45a4d82e2bcc574bcfd3e3164ee9ce2eb86cf356bd2822699a21dde91d2117e3647d926db9c7bece2484bd81a972c293226a1cbe15f233822fdfd042d6b6515b49f9f1d585b1f0fb596e50eea60ea3f4cc8808b576a1de2c7111df3cef7b090e5b5db7f616d5bc83428b4f55f97e87e43b3360c5099455193584fd94568890e87224bfc9b117d0172d85a176dd2c6828c0144b5398e7354d5923f8014bc3d30860c153696cc776c3982fdef7641bc61d3b21baf0f76adfb94d135ff87393174fd9ca5363e2834a24a06c16522bffb0f60d69cc8440d8a0dfbb47c7d8d6707cd7cbb34fbc8f8d3c4490b31b92806e0d56f83b2a2c7ad88ddb4d0e7dcff8aac6416e8be9c2c9855d5a441f4b34d55fb08306a8fa2832d70023ab0f63ff75629c0e98d64870fd4cd242a6f27fa6163994ec50e18071f5344c6786b01f2d7268930375188e04e0408c973d4872330b96aa88db2fc1860accbccb65f771ced5305891c44ac410541ac980ba50f419503aa058774737c77965db9ec9af213e516fa0a2468d788289337c5babad8c418a3af875ffc8bc39c62e94acf6b1bcbd28274a2e62092f87095958c8bc657ba788907902746872a6441966c9663198d1b54ce5c660ed0b7cfa1d6d3a81de7d16fd017d7f041c30b7f334889feca18596cbf344286563dd59b7c65697c4a3cf587c0682de6fc105628bdd1990dcb3fed18e1192ca07fe4a05be1efbc4057476257a59fcdd24eb040acef0f94ededf984978413ede4793255c0e6b24a5ee1713692149849e60f65c10e437db0a8e97807ea27f0a42f60b5ec86e85ab4eb9a81e2463b00afe7d20cbd30ee600b57202434e1fed80ef2cb45eec5362178b9e490dc0b8a45e10feb8a08138778364a2983a113b671e04d60ab4f18f383300228631cab01302c20c624c8e74bdb6ac3a7cf062f8db96416ff19e42ebb72aed1b46a063cbcb1b16b76abfa628e885cad99ca26b23929ed4602b5e897b019da855b58691503d3021f9c1b314105037a2be7e73d49f8ee9f0a3c3e6e2cec44cb6258d1862c3341b053db1b67640ec14afbbbca41b1b500ee3a0c22a712a02a1b2bfbaaa62ed542fceecc1ee426f9ed748d8656ceab891a9d5a8784ee78e18159abaf531c44829374b4814176534af4adfedb5efead99e214f52b0b2eb9e217c6bbda92a01edb0d5037e2038d8a0fb61f95c377817cf2af1568a66e395596c4045d4be3619adcf70879827dd90c45386c39b0248832254b2f7e646289ecd0aba2a56213e504bcf536ee6567baa25db9fbab142b4a333441778db9b672ccf0154f3f5adaffbf9a36472713077a90fa7828fe58c157593235de0617b7a13c0f269401bceb6f3a5c3eb151c97f3d8ef579f665777f4d801f0df77ae72433c488dabe2504ac0fd0e9703e9b960fcac1063704268e24a40890d627e0f6c38c0cf99b4d11436642dab9452834b13686e8b90cc07e4588c60aed21b90bcf73de85fddd85926557c6aec3510adf2d82f411b16b8013c408cfcb88d519daf256dce2c8a460e82bd0e6bf05c7d901157123dc9b8b1581fbb7bb8127f7adc01c926f6f79bbf666dd35df271cb0816418e71b18653bb1f246d07af5becaeb81abd83ebfce8f874daaf6b6acca7f313ed43570dd6a81548c2d7a0e1cf56124a7a441fe92fd12a5963cf6718543d429499a76f7613cfb7c7f638fbcee879929126cf1cca0c263320d8f34dcd1af2345b9801fcb38b44570bd855dff15ac3c7c11fd18982102258c1ec8941a4eb04b2ecdafa01b8f9fe39e65e40adb8d9a5d972da57a3e716a9518b890845160ca42419e8ce1261a855638e6db7a188c04a68b2afaa9de470283922bd6beadc9ddff314516f0c4e39977f97d79a291bf9d626b471d8bbfe0668cdde8f54a24f31d3928e4e659caebb403902cb27d829bbff401e533bc93d406b6a7113c91d680d424d679df00b9694cfe497cbdabd16841aa1b08e9076ffca9bed761455324fd89338f6cc3223b79a46c8e52aca9a4408edf745c3a02ff52e5314d2f2ecd88d91a45a906bb21dbfe490ca8691dce636424694cdfb7c3cc9e354148b852c52a99d59012bb80360e11d92e9ce2220776f21cce91ba2c1a0c9bd456fad2c17a62bc1ae32ae189b7baf5eafdd0903a02d74e8027c8e884127d0b94ef12e940e3ca65b3d174ba25201b28fe6ca36189e7ed93a6985859463e2d35411957e5c24aa474bac60844aa2828c3c0f8e9199b143ebcd7d56a28794ab54dce479cfe2989838b3fcbfdf146e85cc6176ab35c0da942b5d9351a2fb87266b4870124e38305583bd0e838b31bcaa54ce0c724fc99f2acc3b28d2095f4745a94b94c89489bed29116839d2ab6a152eadd2a30e71c3a014f41e1554ba238358ba1867e089dd6def8aee0ac338e6da5eb0d0c815c5991a9155ba3f73859eecf57024b5dd65c6d2ec31c9e7339f98ddbad954b121be83cef5cca1606c47e8e8a431615e0d75eface7772d28e3185cdf87581d3f8adf33784aa80880940d86ab881b22b971535f7b83a9f7015e86790dc2520eecf3d1abf1c0dd8c207a22a656b98cb6ec51d8791166d18ab1d6ed43c16050b136d7f55d42492af94d07b1adb562ef07f6a309d884ca55316cbd810905171dd8c6f9a36b855e907b302343d06f0a0d081ad3a710ee9cfc1abfe8005dab815cd26c13236cfa01a7c072e30bab37cc7ab2f3d23796c2a1202f30500a516633e8072483a6d44bdd8fae4622c7e58f083bd70b97f4db8e9bd907be321737b21f18ae1a4d14366131e641851bffdabd5b22e5b731f4c65283ee5403bc31317045372a4fbec67d26df95e0a14888f2bdcb440cd42de4e0bf389a393fc318e18d393310d5aa3778df0fdca87a5801e5e5b891adb64646011f7693b4b0e9b1cbfa1fbc847f9939271c19b8fb4fc9b15b9397a7e221987417ba13a9fc2902ac3a1d58d65b58968df285ad3b3875949857a67d7b33dc1861bd18383428c9ed41c474f3f316c0df272c55806f4454460e64c37adaff5d712ec376ae5d0d1e91bd3bbdf2a0a5507429d53e13de0562a5ba4b02103c12dab0bd4b85bdd290b98c7e1fd9f494501d2c4b824c007f67bc2e8993d4f163b40515da8f2111f4fa519230713844d170f12b4077324312da2ca1c51c8fe1fff0d6dd68eeebae22ad6681a5f277711db0064d3fa25d09cac0e4b280b58c150e73b3885ab3964837cfc34cb29e215bade71b45e19505b356bf8de9f69c4a3741ab016f77a55869edd76bb33edc34a68959c37bdf60926530d3284688aeb17a347251d5501c034dd3902eef528f167cfc5913d02c430d76b50a6860eb84ee5eca2458ce862ad9fcda642b8df177defe8abacebb4bda07c040b4ccd773fd5c9026ac98243ea2a00f8760a2dacf1c371589b7e32f2d2094543a7d87414813f54ab98cf738ed3b3c1f9e9fdc4fe97bab52d172fad00dff94b0b72fa87b2a3372c8fc9af326f4d05ca131dc254d378eaaf2da3aada8815fedc18d252d95629f7b455cfc54983c2f042e5dd2c22d0f70addcc45c03fa3a52e0937e9590722cedcef23401824dd3f2537d28fb10ff13f6e9641c23075a5ca68125e67df28b3231a65d32a97f00117020debb14e19511acbb52e56be81595f8e74eab72e36b8dfc37678c309bb84221e480c9348f6977f8e3f8a47421184276eba93e84e8b7e2105a5a89c08708c0eb8ba7bfe4dd715278be217fafde8047652ab69544bc2d63d72060ac40f104bc5b509b7501ae7ea36e0d19149645d15b5abc68fad73a542662b3df07ab506746d7343e405370238b657cdb960223752b62e86758143474a78ff92696ad8b5c9d2637c8d9810cfa4faf2765efcd7a1a435a60bbf5962223b1fb0975e227abdc7bf80e3adeabc6ead120922beabd707e6d7a42e233c0788c680190e9ffaf0cc145c010c33438121e8206e25342413dddd02ff2c2e4e5299a82e8e85d181148e1e98db886103810230c6a8687de33c4cf7753c333b8d7b6b6b1a18eab53cc395104818709fc11f4995e057d4517828dcb5a9f3baf41ade7101ef40df27c680c8bcbe8bf2368f1d19b46036bf8419516789dc69ee2573ddec41d9ca00fcc710f5635afcf088e0107fb09a87db9ca6fccd0655ec0816ead48371d64e8318b767b95ed6ea89ff919c68cd33cdfa0381b8b7caa545de948b8c46bb879c4470feed0a990056fb2db739225fc768e83d15568d73694e6888da65870e79c4f5e1287f1a8cce359f82c9860e13ff900833dc556d8fd005c38a855ed1efec66b4ba8d1e65db9a999e172101062081354625cea8f1ac0da70d7f2dca34c4204dfdefe456822ae2cd1349f1a2251292ddbb287c5b9ca41c75f45bb4ddd82c277afd37422cc00fe8b7221168b04b6275f8e530757c673b3f515059f8c8421872d07a156a9d061bdbe0c549a52acfb0708682a2573c259225d0e95a16b8d13dcec60ae91c09537e8bea549f748d2e060d8ef856bb496a53f1cee7a7b716c95e7310ff9fa56180f0259df99b5fe06c030015d9cb5bc9ece0cd907d724e1d1a89d3d875970bf144c58260c0dde163a26d4769b33f6de7f181ecabc050797a105fd1ce73ac4d26a153297305b8a3c150beee4b563f468694cf3895c44df56fc8753e3c8182e8e3c9da0314eac9c288978847b92015ddc5711c09210e1f5a684b7f1f149fb0fe8471c30f8a35a58ffc6e2fb797acf9c686fbb8d1ee8d6dac14de44c22a3cdda239235c24ff23de17228aeb354939a80e4a1397b316da5e18f077cc7b8497df214290c33c4b8593db1ab1638698059f29477a091b070f139b3fd2fe3ff55803b6e65abe6dae32eddb18e898e63743ed256801c8bbbf26e21bdff9491ef743341a5159b36b616ea9c700aca9b6486278c7811729e3df91147ad0e25c44e03c9f4b2385aa6cbfc70d8f68d17ac0925d8fe8737b212f708633bacda57b3848667a4f624a4c7edd33a060f82aabe6ac6a19a81a2cf6403189f08d2632260d72630da6ffe46ab9c19456e95e3cfc423940023ba0ad6f1fe2a8755509441e248b291e02e85f7173054ec6597cc712e80751b4078bf8db1177130f0b170be8f3ac79d579e012caed707156f3ba28ddd5ca5d18320fc9f361e88aa93de9127752ea04c7c77425ad30522dfb5f1f10f802c1a9668812ee9e6b4acab25e10dfd2b18387e9f6ac725cd72f5100b6c15265dcfa1dd45f538b76346209e6cab4441013e36e861ae677e980ddd08e9366426f410428b9b0828c9805bcbb667209191e79305ecc15ce9cf30aa829373e4a8152e2c68294dc71b6ab7b551addc661a5a040ca7b79993cf1060c8410fac1e9d3b209319f22c4bab53b1a6585ebb72a579dbce64b107b280b529439cde9d1fa29333ce63dbfd693e0b2fb3633e37304e70fd5b8d04bf47f6630cfdfbf8ad9f7778c88d7ca9705f4694b1d3355c8406adc99e15bb39fdaa8df214e1730b6d05bd5f93349ecbf5b0db04a5fb1bd66c5bc30671a564d46fbfceacc074bb14c31d471593172ffe28c39912ece3f718864ab9e300ca172a7ebfad6fe28a0ef5aafcd3f966a5d7d4d6ff164434b649cfe149505159018d8c00e82afaf7657402109549f7a5a4c8c7dd02d7d2b005a3be97f0a32bdf3d8e449fb4146c9e38a509781246d9fb67ed087148fd8b8fa1abcc5771148c0483aca397b36302459ae43f6f5aff98bd784b8a1e19a05acc632672bdabb32f2aa4d66ba731d6e219d880f4ceb63d30ee61e5e13919352ee32254d48bab3566e13788689e35c3e4c71c244c34b457fa8a23248b9be6fa195a055137a587e73afd4ee521af95040e72851d3b6c06a15c3464c755cba079f1f53d807bedd0382e36c975793bf3f78690cf408a7c502b872a05a5988e6a96b0aaeb0c0075576f295e55a9002caecab04331d06cb042cbe87375e557933e3d5e8763baffb71bab63343e432f62e82bc51b4bcbb8fb93c72dbe0ee310bd0d776109700007d0a1bcbf1655e1354f2f5dbae7d2d569b099003347f9c3f6c5ceadfb113ae3daea860f61e233e68c63386ecafe74c1a7386c97725bb650f298c06ad648662940daa3abf0c6f460bd2875984858a97c1fa921d2a73f6d207163cffb573dd59ef815605824d3e44eb74e22e865c975b5d8b923b063934960d62fa9907baa28c9f0a24f1e5bf731eabe1f6b076ae19b150d5632b307de0741116d5af8c5b4dae3c8ae01808d1a9925cf185c55a335820c1d8b80736bec9a9562d269ff273a040d77babad128d2b71a64d084dd93be96e3b99ffcc037a6db0f296f63438c83789e54635e0c69fe3ebfd3022130523ffa6f2805747b4e97c2fa38e04decd1b037123814be9a38d322d342d07baa37d5b484c32517b74fc636441a08d8424aaeeefb6bb47a8c010d6f1442a6632e808520308ec7ce7f7607ba18cd8b897ca3814834b2f088cde073d93261dac3bb624bcc6839d6249b51a58fcc4db00058484e0c5814004c5da1d4cda1c025883c999fd2ef171a5c3a438cc0fccff03bae681775421d49ddbfb4f74ffcf88992abd6168e58295b91e7cbd442bbf8d7cfb5d3ce080dc2b90961edbca462e843343d129e45cfa28eeb426eeef08a5ee84d7b48c59a6687b8c0f7549375033398a65eb6336e40423c12a55b5bf732a65bcaae27a91fde89318727cd769c0cbece6371b611a0b40a6b14aa40ceb5848b738c13258fb0765cf83c62a2081d3c363cd7d48da0f0b19e884045c44e78bb61bd673c4522e1c50a2a944115a57f4670b8c388858c7f4babae8052ff86f2b6b780e3b1b5e4302fe7aa7321b3a45ae98ba5a74e87ef4cf13046c7b67bff56f9ff6f4224c4d24bd438eb92e3a1a786c50b6d1dbb302b237618ad008fa5aba8c4778ec3735dc483adc99d19ce1c87634d5ff86f06acece91c7a79e1400b6b483285c8e478f43c3fdf22ccf792aec034ffd47e60080e7d4a27b6e48bb0a15aed15d6b84e9b6af83d4de502d70026533db7c881d0b344ce7b732fbb69348aadf44b22dd3921f8eefd5ef2914a7eac8d36b5420163258fc2be1d34bbf49ef5c4c7ad6a09c7292690f569621bfba1c4d9e484acd7d92f58b79bde01dd6ba98f4cad801e902bff0e81ae787c595969187b58ed9bf68b0aeaec069b64f6facbf7f0a4a8a5d3fc401c0e1ac3bef9bafa512e36d5c8d8b135f1a05368255c15b1c976ae93c9c99288fecf018505eed0f089aec2a9ca7b198a0a89671f095092d2a9e7fb90dde3bf586a2f168f2a8329118d04bffb6adabd53f87df50275981c9fd5d69020c8e9750287e5119c1cf347d1c3e4adba1d598446b4c0a479a5475859383e8c82bfe4c6b8560ad55e27f3323d857efcad4b5ee4d83b4dd74458414d2a9ce74ffda8042038caba0098bcfd6b2e2bda9afcc4c5890f38773726aa94791642ff492f8d11c736f397c080d63e2dd24baa37aff0ae46d9c77c5097f84d6e5a90c554436cfa5311e4f31e2386c2c4b04cf44fd118b4eee2326cd1f0a48efeb4c51fbe0f395694b2b40aca9fccfc1eb84283fd53671955b251bcc2253ed3a3fbb906b2b25944fbe6c5b226b05052fec7c9e6b2d4c0a1ae1029ff70900d4634954f025a345731a76ebcfc4e61499d91b888292e6c59a16c34e4d96ac23dbad628988fcb777c4e9c6348389decbce8c9c03420c01bd670280ce1d4d641d2d4b9c3c11ade9d196f8e49290094ed55382b09f0cf0397ffcd9006e38980ee0b3882e7d93e33643c1ed2429cbefba0e1720f69a20024aff6070acd25a3d68b129e3d7699641d20c5b93e8d4b784669e3a22727d687ff1dadfd19c5b44dcf776561eecf2d28c01e683f49b1c204ba45aadf5d84bdde7d2cd53dad97d060664ddefff75f5e413f72be41d6e7c13fcbc481eefdab31fbc500109c8c24756227ff5bb18b148d0a31576d2e427c43472624312a7568d5ad9b5f9a2274549e5180288dbc0c7e046766c174fca0aca1d867fce966bf4d1097efe62ae23c925ac387b368345999a92cd1d44055e178430fad19cbf8b53756df5584503d848e13ab90c338c2aa8346e2b499e5790926cbe359dc30a3d5336293c4990832e998c2901fae3df81ad4f1ec6fd17baf25fa25fa08bb71345a1fec99299e4ee962dab091c16138fe01d5403230fd896b0992a2474fe38e5a7ff15b372e2a7a4a0ff34defe1fba14bfb6f56630aaef274b57fd0999bf77aa79f743e29c60b7d5d1774ffa9591286f809ea6c0dcc1520f5766851e0f9233b4a2e1329e93e043837510f5ef85676590b0540aa7b2b5211d7d38fbc45e2fe3d7993c6bec4ba2205a40819f8a3ef2e71af85162e39f0f859ed446947bc8516eb527c496244488f8663dee31973d91c7be81b7e895e97294cbf94e09d155354af76ecac1d968038ed961843350524dbfd6ff46e4e0991aed94c144a403a5be126279a6469f9b7854b839933163c83672275491445ccc81bcabf91a6851101593bdfa0930e1058c972e7e41ad390cc4666575ce29fa80095eceb4cbb035e7e7e5a02be4606004e176db167fb67889912b8381e311c39d4378a088328f3e2cd4733dc55fc2e5a0afa7c928b98f95187a7200d8f78a2619df22a4f9fb433fb4a3a848651abfa90adc22c3bc29c1c386c0bc168c0c7873719f3cd76c49c77a5624a288022ebc89998c94f3bad87cd8bcd58502c38b0ff7ed312614f65ca1ea2f999fdcf2432e49b56c635f78514d9be0a5416e2b1ca8aa1b6f6c15d4ba022e5486afb79935d7021eea7b5d8e41a52b514af162a8b79a65efded6720126b9a5b3965f672d8da1bd9692bc14da0b29bc052e9ad22a59edbd0cb3c71fc304b0b8e296cdde1b259ac35a2e30e0741ec6a1cc4699d956959cfdfe4a91f6460271a70ba883f1b8eb3c1f52c60c361696056a411b74104960528caaa338066d823eec164c9c69d7b80c4d0c2ec7a739155c913810b3f5eb147e89e3b8699a29ca192f20cf8db8a1d7c01cbffdceb9d1a5045f55c8328966b91ee2b8e373d35ce74d35c1bea66316a2c0ea561844dcd6a027c6991038623ef894ed3489b4e04ab7e116973380fff9066eac58a406f78c4656367b57081f7b99030b0b087cbac6fd705d2d135ae4505ebb3c8b5ff3e226c9aa8896ba16600ba3dc89b73f07f9968a05045b34218a9f14a3e507103916f3a0b1f8989ab057b8907041cc1c31905b6e87f10e74e4c196c17e31450419040df59bee49aa554f9661f38435effa292f7ef01cd6173e08a3186f04018c23f37b7953c3f5ca7f83389ccbd539405ace7abb99aa29537eedb79000ee04fe5b72999ee606238874f0fa1b14d8cfc9d9c0c1a1666ca7ccceaefe1cf583157ae6e7dbd70425f487340386cbd141261ecc838482daec473b685e6ec71a23c42fbe89521360d6c6ed42284627655d2eceb9cd0f65df549b0c4efec101dd359ddb53dc99d94df991093459f7842c878b7b49fff2cf850bd924a06d3a3a420ee82dcb39e487c0f61de92ae6f0c8d12cdcc7365f2bee4300ac3842188ec82c76164c33c1d11362c1d9e136e516ae0b91172e252f73958be0913777a29be7da26ae2f7ba9e2a80a67974fe30fde3f6b9aa0b21aedbe0f23f074f962ee846d64116eb14d886ad4aa4166c779e6bf3e7d5ee3d7ff2519351f07595531ac10da596268f65434d9a4779fd8c326a847a44d0ca1cb1d1e764a56c99df167901695de6f07ffa94edf874233b340a524449b19f4cda7712cea6c7e0fcd7879edeec3ea24073354e31989ed1c08bb4bb1bec053c4c6fd352b0c91007623635619e05375728bf575f2e26bf617644f0239123f8ac1ed06767ca7b3096ec91ec1d530b7a0ec855a341ba4f72fdbd40cae0727581dfaf25b00282131bc82b5c44d4089b0b3274520a40c0053b5dd10e59a811023b660ffcb2d7e79b32af9f55ae030eb845a64361d25b175cacb07389957f23c9ff3e52e2bea41a75305377af233336d9a7bf7f9939441b76898b9aa8a596e9261f71c5176aae31270d80576885119fa6324856f1ceef3c6cb2db8a10aadea3c801c267e9987afa360958514bc85bc69c6d59211bbcf2b1312399f74f340fdf10a19145f0129d9cccfa4194bf148493db3a01b81f19aeca63e1074d94cfbb289ba9823646201ce9eb234167086a90241bfaf57c3216fcfcaf39824ff97545135f42c443b65b6369349d89de333fd015507c3a03cd3ee5253abd8fef6fe2248a002f9c70a51ddb89e7fe476163c6b1cce417be229b0e5533b81088370f7ec9468ee0de1f6feedb371dfa850ea5fe35c83ee58533c52a7c758c7adbb0329b3d7b4180be6df7f1d1881fad5a52cd807922d7eaddb13fa65cec8684a2321a4d923fc3fc657bf2ff3c02ffa6845f2eda3e736bed70e6984387cf77531b2e6ac6d67c706f43bb3944b618851abbff019ad48d116a7ca56fa436a58adc82dd5f8cc63fcd56076442ca88e3b3702ad99d6e2c46a561b87c5ac8a94ad77100be0c5d80887ba1283f38017b421c6456ac90bf90c8ce31d011ab997db7215520dda972ff1a78fcc5122e140e51a20bd361566276ae614643344e5b395bed67d8bde8957429c6ffb9147ad00d99ed2baa6766feb100c8b2601fa5f34f6428b9cec3262ee29dd220642df5fdcf2e43cf72ce7c710cce7de6099d76bf0d01f68f60d9fec99f69c0db0465ab3cf4e7a623676dac5fee48f55059140139bc210b1d5a9b2dae02eea4b799f36142286ff85ebffe76ee562d3af670c78633cf314e4d8792a8c6eb40bed1fd7d99603b22f216e260cc7dd59eb226b2a59d946c02b5458e358470be9e8c4fcd5f6403bebbd5de5421f082b39fd77cd590ad96d5ff7d3f1ac38f244742662726cfe70909d04867c869332ded36bac3f819fe173dd7f00", 0x2000, &(0x7f00000005c0)={&(0x7f00000002c0)={0x50, 0xfffffffffffffffc, 0x200, {0x7, 0x28, 0x1, 0x2008b2a4, 0xff, 0x2, 0x803, 0xb6, 0x0, 0x0, 0x10, 0xd}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000e00)={0x50, 0x0, r1, {0x7, 0x28, 0x800073, 0xc0000, 0xffff, 0x5, 0x0, 0x8000}}, 0x50) unlink(&(0x7f0000000100)='./file0/file0\x00') 2.935753447s ago: executing program 9 (id=3990): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) pipe2(&(0x7f00000002c0)={0xffffffffffffffff}, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x2200, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x8031, 0xffffffffffffffff, 0x6a855000) mremap(&(0x7f0000dde000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000bb3000/0x1000)=nil) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mmap(&(0x7f000095f000/0x3000)=nil, 0x3000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_GUEST_MEMFD(r5, 0xc040aed4, &(0x7f00000001c0)={0x1000200001ee0000, 0x3}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r6, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) mbind(&(0x7f0000008000/0x7000)=nil, 0x7000, 0x1, 0x0, 0x2, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000000, 0x8013, r3, 0x0) munmap(&(0x7f0000a88000/0x1000)=nil, 0x1000) mremap(&(0x7f000061c000/0x13000)=nil, 0x13000, 0x4000, 0x3, &(0x7f0000fb0000/0x4000)=nil) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x9) mremap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) tee(r1, r2, 0x53, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="040e040a260c"], 0x7) 2.934677667s ago: executing program 0 (id=3991): connect$unix(0xffffffffffffffff, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = accept4$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, &(0x7f0000000240)=0x6e, 0x80000) sendmmsg$unix(r0, &(0x7f00000bd000), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x2fffffffb}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a28000000000a010200000000000000000200000908000240000000030900010073797a300000000098000000160a030000000000000000000200000a6c000380180003801400010064756d6d7930000000000000000000000800014000000000400003801400010073797a6b616c6c65723100000000000014000100697036677265746170edffadf3000000140001006970366772657461703000000000000008000240000000020900020073797a31000000000900010073797a300000000014000000110001"], 0xe8}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) write$tun(r2, &(0x7f00000002c0)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x0, 0x2b}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1b, 0x2d, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x16}}, {0x4e20, 0x4e20, 0x19, 0x0, @opaque="1190995bd7d45c763cda290e6443bf0dff"}}}, 0x3b) 2.690408475s ago: executing program 0 (id=3992): socket(0x200000000000011, 0x2, 0x8001) syz_usb_connect$uac2(0x5, 0x91, &(0x7f0000000580)=ANY=[@ANYBLOB="12011003000000401e04403040000102030109027f000301057009280b0001010700800904000000010120000924010040041f00070c24030306032301010600071a240901800003dc8414090401000001022000090401010101022000090501090002030b0808250100004004000904020000010220000904020101010220000905820908004007030825018203f30600"], &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000040)={0xf0f009, 0x6}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION2(r5, 0x40a0ae49, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000}) ioctl$KVM_SET_USER_MEMORY_REGION2(r5, 0x40a0ae49, &(0x7f0000000080)={0x1, 0x0, 0x1000, 0x1000}) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r5, 0x4020aed2, &(0x7f0000000140)={0xe000, 0x112000, 0x8}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r2, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r3, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket(0x200000000000011, 0x2, 0xd) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001000010700000000000000000a000000060001002500000008000a0002"], 0x24}}, 0x0) r7 = socket$inet(0x2, 0x80001, 0x84) r8 = socket$inet(0x2, 0x80001, 0x84) setsockopt$sock_int(r8, 0x1, 0x0, &(0x7f00000002c0)=0x3, 0x4) bind$inet(r8, &(0x7f0000000180)={0x2, 0xce20, @empty}, 0x10) listen(r8, 0x3) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000280)=0x3, 0x4) bind$inet(r7, &(0x7f0000000180)={0x2, 0xce20, @local}, 0x10) listen(r7, 0x3) listen(r7, 0x0) r9 = open$dir(&(0x7f0000000200)='./file0\x00', 0x400, 0x1) openat(r9, &(0x7f0000000240)='./file0\x00', 0x20000, 0x0) 2.488234992s ago: executing program 8 (id=3993): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_GUEST_MEMFD(r2, 0xc040aed4, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION2(r2, 0x40a0ae49, &(0x7f0000000180)={0x1ff, 0x4, 0xeeee0000, 0x1000, &(0x7f0000fff000/0x1000)=nil, 0x0, r3}) close_range(r0, 0xffffffffffffffff, 0x0) 2.331561551s ago: executing program 8 (id=3994): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000140)="8495c6c69275", 0x6, 0x20008015, &(0x7f0000000100)={0x2, 0x4e22}, 0x10) shutdown(r0, 0x1) recvfrom$inet(r0, 0x0, 0xcb2f7236, 0x43, 0x0, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1f010000000000406a0535030000000000010902240001000010000904000002030000000921000000012218000905810300"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r5 = dup3(r4, r3, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000f00)={'dummy0\x00', &(0x7f0000000240)=@ethtool_gfeatures}) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x80}) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022180000000501150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}], {0x14}}, 0xac}, 0x1, 0x20, 0x0, 0x8040}, 0x0) 2.194541279s ago: executing program 4 (id=3996): prctl$PR_SET_NAME(0xf, &(0x7f0000002380)='>\xc6\xab\xb5>\xc6Z\v\xb5Zw\xde\xce\xc6/\x7fende') r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0xd, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) setsockopt$packet_int(r0, 0x107, 0xe, &(0x7f0000000100), 0x4) socket$inet_mptcp(0x2, 0x1, 0x106) 1.960683121s ago: executing program 4 (id=3997): r0 = socket(0x10, 0x803, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x40090) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0xc8, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x84, 0x12, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x1000}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x8b}]}}}, {0x54, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0xd236}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x7}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_LIMIT_FLAGS={0x8}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x3}]}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x5, 0x84}}}, 0x110}, 0x1, 0x0, 0x0, 0x20004010}, 0x20050800) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000007c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_MATCH_INFO={0x4}, @NFTA_MATCH_NAME={0x8, 0x1, 'u32\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="280000001d0001002bbd7000fcdbdf250a000000e90e53324c01decd2f348b50e145814ecf2840d1b3eb675f63e9a3428f4c96b41e5c72c204d224521aeb1ab4f8155129afa20a8fad7d33c5dcd313b1b5cb7141d280be5ca987a6b4f1556c1336e420b7db60b1accdba9a903223d47b43b254d49aa7610253089131078752cc41d91a21d9152febc4", @ANYRES32=0x0, @ANYBLOB="000048000a000100d1ab46f0"], 0x28}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYRES64=r0], &(0x7f00002bf000)='GPL\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x8}, 0x8}, 0x94) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000180)={&(0x7f0000000100)=""/82, 0x216000, 0x0, 0xfffffffe}, 0x1c) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r3, 0x0, 0x3b, 0x8, @void}, 0x10) 1.86479515s ago: executing program 4 (id=3998): fchdir(0xffffffffffffffff) socket(0x200000000000011, 0x2, 0xd) r0 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @random="518440db9de1"}, 0x14) syz_emit_ethernet(0x1e, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@can={0xc, {{0x3, 0x1, 0x1, 0x1}, 0x2, 0x1, 0x0, 0x0, "42c541e433ad93b5"}}}}, 0x0) 1.842349393s ago: executing program 9 (id=3999): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r1 = inotify_init1(0x800) inotify_add_watch(r1, &(0x7f0000000000)='.\x00', 0x50007a2) (async) write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="7f454c4604040b00010000000000000003003e00ebfffffff00100000000000000040000000000000000000000000000000000002d8f38003b00feff020007000300000004000000f2000000000000000c000000000000000000000000000000e50000000000000006000000000000070000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000"/376], 0xcb) (async) close(r0) (async) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x6, 0x0, 0x0) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) (async, rerun: 64) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x19, &(0x7f00000000c0)=0x94a, 0x4) (rerun: 64) r2 = syz_open_dev$sndpcmc(&(0x7f00000003c0), 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) (async, rerun: 32) listns(&(0x7f00000000c0)={0x20, 0x0, 0xc, 0x4000000, 0x0, 0x3}, 0x0, 0xf4240, 0x0) (async, rerun: 32) rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) (async) mq_open(&(0x7f0000002500)='--*.!\b}\xf0\x93#\xac\x13\x00', 0x40, 0x3c, &(0x7f0000002540)={0x10001, 0x93, 0x2, 0x2}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000006f00)=@file={0x1, './file0\x00'}, 0x6e) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) io_setup(0x3ff, &(0x7f0000000500)=0x0) (rerun: 64) io_getevents(r4, 0x4, 0x4, &(0x7f00000019c0)=[{}, {}, {}, {}], 0x0) (async) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) io_submit(r4, 0x1, &(0x7f00000009c0)=[&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x9, r5, 0x0, 0x0, 0x8}]) (async) read$FUSE(0xffffffffffffffff, 0x0, 0x0) (async) r6 = fcntl$dupfd(r2, 0x0, r2) ppoll(&(0x7f0000000000)=[{r6, 0x8048}], 0x1, &(0x7f0000000080), &(0x7f0000000100)={[0xf81, 0x4]}, 0x8) (async) openat$uhid(0xffffff9c, 0x0, 0x802, 0x0) (async) sync() sync() sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x4, 0x200ac5) 1.518390187s ago: executing program 4 (id=4000): ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000b00)=0x6) io_setup(0x7, &(0x7f0000000280)=0x0) set_mempolicy(0x5, &(0x7f0000000000)=0x2, 0x6) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x88002, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0xd) r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000040), 0x103902, 0x0) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f0000001040)={0x18, {"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", 0x100d}}, 0xfffffdef) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(0xffffffffffffffff, 0xc1205531, &(0x7f00000002c0)={0x0, 0x2d4, 0x0, 0x1, '\x00', '\x00', '\x00', 0x6, 0x8, 0x768, 0x52, "4ee763cdafe4101b23c5311c62559862"}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x200000a, 0xc3072, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000400000/0x3000)=nil, 0x3000, 0x9, 0x4d032, 0xffffffffffffffff, 0x0) io_submit(r0, 0x1, &(0x7f0000000540)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f0000000580)={{0x5, 0x3, 0x3, 0xfffffffe, 'syz0\x00', 0x2}, 0x1, [0xd44, 0x7fffffffffffffff, 0x0, 0x2, 0x4, 0x4, 0x7ff, 0x2, 0x2, 0x101, 0x2, 0xd, 0xf, 0x8, 0x1, 0x7, 0x4, 0x2, 0x2, 0x9, 0x0, 0xfffffffffefffffe, 0xfe7, 0x8000000000000000, 0x2, 0x8, 0x7ff, 0x9, 0xfffffffffffffffa, 0x2, 0xfffffffffffffff7, 0x5, 0x7, 0x403, 0x2, 0x10000, 0xe, 0x5, 0x8, 0x88, 0x2, 0x6, 0x4, 0xffffffff, 0x0, 0x9, 0x7, 0x6, 0xa, 0x4, 0x7fff, 0x6, 0x8001, 0xffa1, 0x6, 0x8, 0x1, 0xfffffffbfffff800, 0x244, 0xffffffffffffffff, 0x20, 0xc, 0xffffffffffffffff, 0xffffffffffffffff, 0x8f, 0x5, 0x1, 0x4, 0x4, 0x4, 0xf, 0xae9, 0x3, 0xfffffffffffffffe, 0x4000000006, 0x9, 0x7, 0x4000000000000000, 0x0, 0x7ff, 0x4, 0x7, 0x205d, 0x9, 0x63, 0x3, 0x3, 0x6, 0xf8, 0xfffffffffffffff9, 0xfffffffffffffffb, 0xfff, 0x93, 0x6, 0x4, 0x8000000000000000, 0x800000000209, 0x2, 0x7ff, 0x7, 0x8, 0x1ff, 0x0, 0x6, 0x4, 0x5, 0x796a, 0xb0b, 0x9, 0x7, 0x4, 0x4, 0x0, 0x8, 0x4, 0x2dd, 0x4, 0x4, 0x8, 0x10000, 0x1da0, 0x38, 0x7, 0x5, 0x5, 0x8000000000000001, 0xfffffffffeffffff, 0x7]}) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e23, 0xfffffffc, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f00000001c0)={0x0, 0x7}, 0x8) listen(r4, 0x4) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x4}, 0x8) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r6 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r6, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f0000087000/0x3000)=nil, &(0x7f0000678000/0x3000)=nil, 0x3, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x3, 0xaa}) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r5, 0x84, 0x79, &(0x7f0000000140)={0x0, 0xb, 0xa9a}, 0x8) 891.999058ms ago: executing program 2 (id=4001): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r1 = gettid() rt_sigtimedwait(&(0x7f0000000040)={[0xffffffff]}, 0x0, 0x0, 0x8) timer_create(0x2, &(0x7f0000000180)={0x0, 0x4, 0x4, @tid=r1}, &(0x7f0000000140)=0x0) timer_settime(r2, 0xe54aef35e9c2845d, &(0x7f000006b000)={{0x77359400}, {0x0, 0x9}}, 0x0) r3 = syz_open_dev$dvb_demux(&(0x7f0000000400), 0x0, 0x700) ioctl$DVB_DEMUX_DMX_SET_BUFFER_SIZE(r3, 0x6f2d, 0x2000001) 805.642096ms ago: executing program 9 (id=4002): prctl$PR_SET_NAME(0xf, &(0x7f0000002380)='>\xc6\xab\xb5>\xc6Z\v\xb5Zw\xde\xce\xc6/\x7fende') r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xe, &(0x7f0000000100), 0x4) close(0x3) 777.121796ms ago: executing program 4 (id=4003): r0 = socket(0x10, 0x803, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x40090) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0xc8, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x84, 0x12, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x1000}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x8b}]}}}, {0x54, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0xd236}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x7}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_LIMIT_FLAGS={0x8}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x3}]}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x5, 0x84}}}, 0x110}, 0x1, 0x0, 0x0, 0x20004010}, 0x20050800) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000007c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_MATCH_INFO={0x4}, @NFTA_MATCH_NAME={0x8, 0x1, 'u32\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="280000001d0001002bbd7000fcdbdf250a000000e90e53324c01decd2f348b50e145814ecf2840d1b3eb675f63e9a3428f4c96b41e5c72c204d224521aeb1ab4f8155129afa20a8fad7d33c5dcd313b1b5cb7141d280be5ca987a6b4f1556c1336e420b7db60b1accdba9a903223d47b43b254d49aa7610253089131078752cc41d91a21d9152febc4", @ANYRES32=0x0, @ANYBLOB="000048000a000100d1ab46f0fd53"], 0x28}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYRES64=r0], &(0x7f00002bf000)='GPL\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x8}, 0x8}, 0x94) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000180)={&(0x7f0000000100)=""/82, 0x216000, 0x0, 0xfffffffe}, 0x1c) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r3, 0x0, 0x3b, 0x8, @void}, 0x10) 697.824069ms ago: executing program 9 (id=4004): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) readv(r0, &(0x7f0000000600)=[{&(0x7f0000000540)=""/165, 0xa5}], 0x1) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8004, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_X86_SETUP_MCE(r3, 0x4008ae9c, &(0x7f0000000000)={0xf, 0x4, 0x4}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000180)={0x1, 0x0, [{0x17a, 0x0, 0x7fffffff}]}) ioctl$KVM_X86_SET_MCE(r3, 0x4040ae9e, &(0x7f00000002c0)={0xed80000000000000, 0xeeef0000, 0xfffffffffffffffd, 0x0, 0x2}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) r4 = socket$tipc(0x1e, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x14, 0x4, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0x20008010) bind$tipc(r4, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x1, 0x2}}, 0x10) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x101000, 0x88) getdents64(r6, 0x0, 0x0) r7 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x8) fchdir(r8) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r9 = socket(0x200000000000011, 0x2, 0xd) r10 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) bind$packet(r10, &(0x7f0000000080)={0x11, 0x800, r11, 0x1, 0x0, 0x6, @random="518440db9de1"}, 0x14) bind$packet(r9, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2f}}, 0x14) syz_emit_ethernet(0x1e, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@can={0xc, {{0x3, 0x1, 0x1, 0x1}, 0x2, 0x1, 0x0, 0x0, "42c541e433ad93b5"}}}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000680)='./file0\x00', 0x59b801, 0x1ce) 636.125774ms ago: executing program 4 (id=4005): socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x52, &(0x7f00000000c0)={@local, @random="8608119827c1", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x1c, 0x3a, 0x0, @private2, @mcast2, {[], @mlv2_query={0x82, 0x0, 0x0, 0x0, 0x0, @loopback, 0x0, 0x0, 0x0, 0xfd}}}}}}, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x4, 0xffffffff, 0xfffffff8, 0xd}, 0x54) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0x70bd27, 0x25dfdc04, {0x2, 0x20, 0x20, 0x1}, [@RTA_SPORT={0xffffffc2, 0x1c, 0x4e21}, @RTA_DPORT={0x6, 0x1d, 0x4e23}]}, 0x42}}, 0x40050) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}, {r1, r2+10000000}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r4 = socket(0x40000000015, 0x5, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) recvmsg$kcm(r4, &(0x7f0000000dc0)={&(0x7f0000000180)=@x25, 0x80, &(0x7f0000000d80)=[{&(0x7f0000000400)=""/94, 0x5e}, {&(0x7f0000000540)=""/2, 0x2}, {&(0x7f00000005c0)=""/44, 0x2c}, {&(0x7f0000000600)=""/177, 0xb1}, {&(0x7f00000006c0)=""/26, 0x1a}, {&(0x7f0000000700)=""/229, 0xe5}, {&(0x7f0000000800)=""/106, 0x6a}, {&(0x7f0000000d00)=""/84, 0x54}], 0x8}, 0x10000) setsockopt$SO_RDS_TRANSPORT(r4, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r4, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000004c0)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000e00)="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"/1318, 0x526}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}], 0x4e}, 0x0) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r5, 0x5404) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x19) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r6, 0x8010661b, &(0x7f0000000200)) write$sequencer(r5, &(0x7f0000000140)=ANY=[@ANYBLOB="8103"], 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0xd0, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xa, 0x80000006, 0x400}, 0x0, 0x0) 466.874608ms ago: executing program 8 (id=4006): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x8002, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000540), 0x1, 0x0) sendfile(r1, r0, 0x0, 0x80009) 450.780202ms ago: executing program 2 (id=4007): prctl$PR_SET_NAME(0xf, &(0x7f0000002380)='>\xc6\xab\xb5>\xc6Z\v\xb5Zw\xde\xce\xc6/\x7fende') r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0xd, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) setsockopt$packet_int(r0, 0x107, 0xe, &(0x7f0000000100), 0x4) socket$inet_mptcp(0x2, 0x1, 0x106) 352.127124ms ago: executing program 8 (id=4008): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)=ANY=[@ANYBLOB="580000000206050000000000000000000400f7000500010006000000050005000200000005000400000000000900020073797a31000000000c00078008000840000000d811000300686173683a69702c6d61726b00000000"], 0x58}}, 0x0) r1 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r1) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f2110"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write(r2, 0x81, 0x0, &(0x7f00000002c0)) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="240000002f0009002abd700000000000040000000e00118031f9e05e2f826cfc31940090d2274477c892f0e7aa2b506168c92fc0e8785760f971660fb23e002360df2990c3eb304ec127d41a14b519639e53357090ddf1d0fcca3bdab3cec28316c9c8cf68169c29abe901a53b903966aa3dd7cda59bbd9f3ba86f87b587e9c91174cb2fa780851797c42fef8b37177f027151b6912bab0817a2822f2bcd5a25d259dcb3d77b75399ee4a29abff8462d4f00e9611a5a49a827c9d9460247c59100"], 0x24}, 0x1, 0x0, 0x0, 0x42804}, 0x84) syz_usb_ep_write(r1, 0x81, 0x8, &(0x7f0000000080)="00012c615bc20000") syz_usb_control_io(r1, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000480)=ANY=[@ANYBLOB="2007010000000bb6265128aad84dc01bfd83ef6ba965340d7f6c6ccb2c87ee6ed9fd723e0282eb3d450df78f30146a304dd7c7cfb80bcfce944654a59c8783ce0dc3cc805c420a35e0045c09145461648f04591a176181416a08825064fe15788e45031ae259f474d2dc7a3f7bf850572903fe325832e09bf0bfd3d0b1"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = socket$kcm(0x10, 0x2, 0x4) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x3c}) sendmsg$inet(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="5c00000014006b04000000d86e6c1d000a847ea6ea6567e75110623400cdd46b44dacff32c6e020075e300250002000f00000017d34460bc24eab55600000000000000bf9367b4fa51f60a64c9f4d4938037e786a6d0bdd700000000", 0x5c}], 0x1, 0x0, 0x35, 0x1f00c00e}, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$uac2(0x1, 0xbc, &(0x7f0000000380)=ANY=[@ANYBLOB="120105eb0040000102030109fcaa000301002081080b010001ff20060904000000010120000924010100041c00090d240d0502000600000300020007240b0d0237260904010000010220000904010101010220000a2402010802029e7e040624020101081224020207000400fae7b9b5bc4f67a594df09050109000209040608250180068001000904020000010220000904020101010220000b240202f8ff050005614b090582090800050809082501800008090000000000000000"], &(0x7f0000000580)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x250, 0x2c, 0x80, 0x1, 0x10}, 0x117, &(0x7f0000000cc0)=ANY=[@ANYRESHEX=r3], 0x1, [{0x4c, &(0x7f0000000500)=@string={0x4c, 0x3, "150a363ca7437abd5f462539125fc7f4d7482f3953a07e0c58aea64cba3bbf7c880008e996ec742032ae062cc6da044d555fd96ef683187b8a79d5982b08bd69f05097e9e9d33e238ec9"}}]}) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000ec0000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a310000000028000480080002400000000008000140000000051413030076657468315f6d6163767461700000000900010073797a310000000058000000050a03000000000000000000010020000900030073797a31000000000900010073797a3100000000200004801400030076657468315f6d61637674617000000008000140000000050b00070066696c"], 0xf4}}, 0x0) read$char_usb(r5, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) r7 = accept4$inet(0xffffffffffffffff, &(0x7f0000000600)={0x2, 0x0, @dev}, &(0x7f00000005c0)=0xfe70, 0x0) getsockopt$inet_pktinfo(r7, 0x0, 0x8, &(0x7f0000000140)={0x0, @loopback, @remote}, &(0x7f0000000300)=0xc) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan1\x00'}) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) socket$nl_route(0x10, 0x3, 0x0) 131.942678ms ago: executing program 2 (id=4009): r0 = socket(0x10, 0x803, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x40090) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0xc8, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x84, 0x12, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x1000}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x8b}]}}}, {0x54, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0xd236}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x7}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_LIMIT_FLAGS={0x8}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x3}]}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x5, 0x84}}}, 0x110}, 0x1, 0x0, 0x0, 0x20004010}, 0x20050800) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000007c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_MATCH_INFO={0x4}, @NFTA_MATCH_NAME={0x8, 0x1, 'u32\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="280000001d0001002bbd7000fcdbdf250a000000e90e53324c01decd2f348b50e145814ecf2840d1b3eb675f63e9a3428f4c96b41e5c72c204d224521aeb1ab4f8155129afa20a8fad7d33c5dcd313b1b5cb7141d280be5ca987a6b4f1556c1336e420b7db60b1accdba9a903223d47b43b254d49aa7610253089131078752cc41d91a21d9152febc4", @ANYRES32=0x0, @ANYBLOB="000048000a000100d1ab46f0"], 0x28}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYRES64=r0], &(0x7f00002bf000)='GPL\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x8}, 0x8}, 0x94) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000180)={&(0x7f0000000100)=""/82, 0x216000, 0x0, 0xfffffffe}, 0x1c) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r3, 0x0, 0x3b, 0x8, @void}, 0x10) 0s ago: executing program 2 (id=4010): fchdir(0xffffffffffffffff) socket(0x200000000000011, 0x2, 0xd) r0 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @random="518440db9de1"}, 0x14) syz_emit_ethernet(0x1e, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@can={0xc, {{0x3, 0x1, 0x1, 0x1}, 0x2, 0x1, 0x0, 0x0, "42c541e433ad93b5"}}}}, 0x0) kernel console output (not intermixed with test programs): 19.312707][T19247] copy_page_from_iter+0x219/0x2d0 [ 719.312737][T19247] skb_copy_datagram_from_iter+0x2f4/0x720 [ 719.312769][T19247] packet_sendmsg+0x35e2/0x4f80 [ 719.312806][T19247] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 719.312851][T19247] ? __lock_acquire+0x6df/0x2e50 [ 719.312878][T19247] ? __lock_acquire+0x6df/0x2e50 [ 719.312897][T19247] ? kstrtoull+0x137/0x1d0 [ 719.312925][T19247] ? kstrtouint+0x6e/0xe0 [ 719.312951][T19247] ? __pfx_packet_sendmsg+0x10/0x10 [ 719.312974][T19247] ? aa_sk_perm+0x713/0x900 [ 719.312997][T19247] ? lockdep_unlock+0x60/0xd0 [ 719.313024][T19247] ? __pfx_aa_sk_perm+0x10/0x10 [ 719.313053][T19247] ? aa_sock_msg_perm+0x144/0x210 [ 719.313077][T19247] ? apparmor_socket_sendmsg+0x98/0x360 [ 719.313106][T19247] ? __pfx_packet_sendmsg+0x10/0x10 [ 719.313129][T19247] sock_sendmsg_nosec+0x13a/0x180 [ 719.313155][T19247] __sys_sendto+0x408/0x5a0 [ 719.313187][T19247] ? __pfx___sys_sendto+0x10/0x10 [ 719.313225][T19247] ? __fget_files+0x3a2/0x420 [ 719.313258][T19247] ? ksys_write+0x242/0x270 [ 719.313288][T19247] __ia32_sys_sendto+0xdd/0x100 [ 719.313319][T19247] __do_fast_syscall_32+0x27a/0x6a0 [ 719.313347][T19247] ? do_fast_syscall_32+0x33/0x70 [ 719.313373][T19247] ? asm_int80_emulation+0x1a/0x20 [ 719.313391][T19247] ? do_int80_emulation+0x299/0x500 [ 719.313416][T19247] ? trace_irq_disable+0x3b/0x140 [ 719.313441][T19247] do_fast_syscall_32+0x33/0x70 [ 719.313468][T19247] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 719.313490][T19247] RIP: 0023:0xf703f0ec [ 719.313507][T19247] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 719.313524][T19247] RSP: 002b:00000000f542d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000171 [ 719.313545][T19247] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000800002c0 [ 719.313559][T19247] RDX: 000000000000fdef RSI: 0000000000000004 RDI: 0000000080000140 [ 719.313572][T19247] RBP: 0000000000000014 R08: 0000000000000000 R09: 0000000000000000 [ 719.313584][T19247] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 719.313596][T19247] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 719.313624][T19247] [ 719.356210][ T5708] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 719.516363][ T5708] usb 5-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 719.518230][ T5708] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 719.518287][ T5708] usb 5-1: config 1 interface 0 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 719.518307][ T5708] usb 5-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 719.521128][ T5708] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 719.521150][ T5708] usb 5-1: Product: syz [ 719.521163][ T5708] usb 5-1: Manufacturer: syz [ 719.521177][ T5708] usb 5-1: SerialNumber: syz [ 719.533503][ T5708] usb-storage 5-1:1.0: USB Mass Storage device detected [ 719.572504][ T5708] usb-storage 5-1:1.0: Quirks match for vid 174c pid 55aa: 400000 [ 719.577805][ T5708] scsi host1: usb-storage 5-1:1.0 [ 719.765207][T19257] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 719.774436][T19257] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 719.775422][T19257] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 719.788770][T19257] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 719.789731][T19257] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 719.797891][T19257] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 719.799333][T19257] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 719.807509][T19257] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 719.811211][T19257] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 719.814989][T19257] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 720.027809][T13510] usb 5-1: USB disconnect, device number 102 [ 720.139327][ T5679] usb 10-1: new high-speed USB device number 25 using dummy_hcd [ 720.306555][ T5679] usb 10-1: New USB device found, idVendor=056a, idProduct=0335, bcdDevice= 0.00 [ 720.307889][ T5679] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 720.307917][ T5679] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 720.307938][ T5679] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 720.307974][ T5679] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 720.310603][ T5679] usb 10-1: config 0 descriptor?? [ 720.709467][T19282] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3508'. [ 720.713739][T19282] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3508'. [ 720.738092][T19262] binder: 19261:19262 ioctl c018aa3f 80000180 returned -22 [ 720.774546][T19283] syzkaller1: entered promiscuous mode [ 720.774585][T19283] syzkaller1: entered allmulticast mode [ 720.789727][T19283] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3508'. [ 720.854598][ T5679] wacom 0003:056A:0335.003E: hidraw0: USB HID v0.00 Joystick [HID 056a:0335] on usb-dummy_hcd.9-1/input0 [ 721.040124][ T5679] usb 10-1: USB disconnect, device number 25 [ 721.137401][ T7057] usb 9-1: new high-speed USB device number 42 using dummy_hcd [ 721.289825][ T7057] usb 9-1: unable to get BOS descriptor or descriptor too short [ 721.289888][ T7057] usb 9-1: New USB device found, idVendor=041e, idProduct=3040, bcdDevice= 0.40 [ 721.291189][ T7057] usb 9-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 721.291209][ T7057] usb 9-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 721.291225][ T7057] usb 9-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 721.291242][ T7057] usb 9-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 721.293841][ T7057] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 721.293862][ T7057] usb 9-1: Product: syz [ 721.293875][ T7057] usb 9-1: Manufacturer: syz [ 721.293889][ T7057] usb 9-1: SerialNumber: syz [ 721.582996][ T7057] usb 9-1: USB disconnect, device number 42 [ 721.835604][ T5736] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 722.043667][T19303] tipc: Enabled bearer , priority 0 [ 722.196816][T19308] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(3) [ 722.196844][T19308] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 722.197126][T19308] vhci_hcd vhci_hcd.0: Device attached [ 722.377144][ T5678] vhci_hcd vhci_hcd.8: vhci_device speed not set [ 722.445676][ T5678] usb 49-1: new full-speed USB device number 2 using vhci_hcd [ 722.494244][T19309] vhci_hcd: connection reset by peer [ 722.495074][T14145] vhci_hcd vhci_hcd.8: stop threads [ 722.495098][T14145] vhci_hcd vhci_hcd.8: release socket [ 722.496691][T14145] vhci_hcd vhci_hcd.8: disconnect device [ 722.864685][T19302] tipc: Disabling bearer [ 722.933179][T19335] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3520'. [ 722.943665][T19335] netlink: 32 bytes leftover after parsing attributes in process `syz.9.3520'. [ 722.952923][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 722.952949][ T30] audit: type=1326 audit(1788323528.480:1931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19334 comm="syz.9.3520" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf703f0ec code=0x0 [ 723.061736][T19341] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3520'. [ 723.093025][T19341] w: renamed from gre0 (while UP) [ 723.104544][T19341] w: entered promiscuous mode [ 723.110742][T19341] w: entered allmulticast mode [ 723.142566][T19341] net_ratelimit: 56 callbacks suppressed [ 723.142608][T19341] A link change request failed with some changes committed already. Interface w may have been left with an inconsistent configuration, please check. [ 723.283647][T19345] syzkaller0: entered promiscuous mode [ 723.283674][T19345] syzkaller0: entered allmulticast mode [ 723.298942][T13510] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 723.328282][ T5708] usb 9-1: new high-speed USB device number 43 using dummy_hcd [ 723.447369][T13510] usb 5-1: New USB device found, idVendor=056a, idProduct=0335, bcdDevice= 0.00 [ 723.448728][T13510] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 723.448756][T13510] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 723.448777][T13510] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 723.448815][T13510] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 723.462314][T13510] usb 5-1: config 0 descriptor?? [ 723.516162][ T5708] usb 9-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 723.531138][ T5708] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 723.539439][ T5708] usb 9-1: Product: syz [ 723.544837][ T5708] usb 9-1: Manufacturer: syz [ 723.550098][ T5708] usb 9-1: SerialNumber: syz [ 723.915364][T19337] binder: 19336:19337 ioctl c018aa3f 80000180 returned -22 [ 723.979214][T13510] wacom 0003:056A:0335.003F: hidraw0: USB HID v0.00 Joystick [HID 056a:0335] on usb-dummy_hcd.4-1/input0 [ 724.110396][ T5708] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 724.135663][ T5708] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 724.154154][T13510] usb 5-1: USB disconnect, device number 103 [ 724.522654][T19361] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3528'. [ 724.523819][T19361] netlink: 44 bytes leftover after parsing attributes in process `syz.9.3528'. [ 724.586962][T19362] syzkaller1: entered promiscuous mode [ 724.592547][T19362] syzkaller1: entered allmulticast mode [ 724.604608][T19362] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3528'. [ 724.805209][T19366] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3531'. [ 724.808681][T19366] netlink: 44 bytes leftover after parsing attributes in process `syz.9.3531'. [ 724.933094][T19368] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0 [ 724.933148][T19354] IPVS: stopping backup sync thread 19368 ... [ 724.969763][T19371] syzkaller1: entered promiscuous mode [ 724.969812][T19371] syzkaller1: entered allmulticast mode [ 724.974899][T19371] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3531'. [ 725.018555][T19374] netlink: 88 bytes leftover after parsing attributes in process `syz.2.3532'. [ 725.051482][T19374] tipc: Enabling of bearer rejected, already enabled [ 725.154037][ T5708] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x0000011c. ret = -EPIPE [ 725.154110][ T5708] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 725.154785][ T5708] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 725.180332][ T5708] lan78xx 9-1:1.0: probe with driver lan78xx failed with error -32 [ 725.987633][T19401] vcan0: tx drop: invalid sa for name 0x0102030405060708 [ 726.233183][ T123] usb 9-1: USB disconnect, device number 43 [ 726.696793][ T123] usb 9-1: new high-speed USB device number 44 using dummy_hcd [ 726.813199][T19422] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3543'. [ 726.829259][T19422] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3543'. [ 726.882562][ T123] usb 9-1: New USB device found, idVendor=056a, idProduct=0335, bcdDevice= 0.00 [ 726.883631][ T123] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 726.884101][ T123] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 726.884298][ T123] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 726.884509][ T123] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 726.890941][ T123] usb 9-1: config 0 descriptor?? [ 727.029710][T19423] syzkaller1: entered promiscuous mode [ 727.029756][T19423] syzkaller1: entered allmulticast mode [ 727.037486][T19423] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3543'. [ 727.311126][T19408] binder: 19407:19408 ioctl c018aa3f 80000180 returned -22 [ 727.351858][ T123] wacom 0003:056A:0335.0040: hidraw0: USB HID v0.00 Joystick [HID 056a:0335] on usb-dummy_hcd.8-1/input0 [ 727.395686][T19431] tipc: Enabled bearer , priority 0 [ 727.532810][T13510] usb 9-1: USB disconnect, device number 44 [ 727.595613][ T5678] vhci_hcd vhci_hcd.8: vhci_device speed not set [ 728.141423][T19430] tipc: Disabling bearer [ 728.368524][ T30] audit: type=1326 audit(1788323533.900:1932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19465 comm="syz.4.3554" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f670ec code=0x0 [ 728.442417][T19470] syzkaller1: entered promiscuous mode [ 728.442457][T19470] syzkaller1: entered allmulticast mode [ 728.473948][T19471] w: renamed from gre0 [ 728.482525][T19471] w: entered allmulticast mode [ 728.486045][T19471] A link change request failed with some changes committed already. Interface w may have been left with an inconsistent configuration, please check. [ 729.705418][T19499] __nla_validate_parse: 12 callbacks suppressed [ 729.713407][T19499] netlink: 87 bytes leftover after parsing attributes in process `syz.8.3563'. [ 729.722917][T19499] netlink: 87 bytes leftover after parsing attributes in process `syz.8.3563'. [ 729.725602][ T5736] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 729.732126][T19499] netlink: 87 bytes leftover after parsing attributes in process `syz.8.3563'. [ 729.732260][T19499] netlink: 87 bytes leftover after parsing attributes in process `syz.8.3563'. [ 729.732392][T19499] netlink: 87 bytes leftover after parsing attributes in process `syz.8.3563'. [ 729.732485][T19499] netlink: 87 bytes leftover after parsing attributes in process `syz.8.3563'. [ 729.732574][T19499] netlink: 87 bytes leftover after parsing attributes in process `syz.8.3563'. [ 729.732671][T19499] netlink: 87 bytes leftover after parsing attributes in process `syz.8.3563'. [ 729.732761][T19499] netlink: 87 bytes leftover after parsing attributes in process `syz.8.3563'. [ 729.732850][T19499] netlink: 87 bytes leftover after parsing attributes in process `syz.8.3563'. [ 729.916493][ T5736] usb 5-1: New USB device found, idVendor=056a, idProduct=0335, bcdDevice= 0.00 [ 729.924503][ T5736] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 729.924552][ T5736] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 729.924604][ T5736] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 729.924646][ T5736] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 729.974870][ T5736] usb 5-1: config 0 descriptor?? [ 730.406384][T19522] tipc: Enabled bearer , priority 0 [ 730.413398][T19488] binder: 19487:19488 ioctl c018aa3f 80000180 returned -22 [ 730.423503][T19522] syzkaller0: entered promiscuous mode [ 730.429350][T19522] syzkaller0: entered allmulticast mode [ 730.438647][T19522] syzkaller0: mtu greater than device maximum [ 730.451423][T19520] tipc: Resetting bearer [ 730.454174][ T5736] wacom 0003:056A:0335.0041: hidraw0: USB HID v0.00 Joystick [HID 056a:0335] on usb-dummy_hcd.4-1/input0 [ 730.493131][T19520] tipc: Disabling bearer [ 730.824410][ T5736] usb 5-1: USB disconnect, device number 104 [ 730.824505][T19533] syzkaller1: entered promiscuous mode [ 730.824526][T19533] syzkaller1: entered allmulticast mode [ 731.273915][ T30] audit: type=1326 audit(1788323536.800:1933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19539 comm="syz.0.3571" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf70bf0ec code=0x0 [ 731.394321][T19548] w: renamed from gre0 (while UP) [ 731.412333][T19548] w: entered promiscuous mode [ 731.418777][T19548] w: entered allmulticast mode [ 731.449737][T19548] A link change request failed with some changes committed already. Interface w may have been left with an inconsistent configuration, please check. [ 731.707069][ T123] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 731.890663][ T123] usb 5-1: unable to get BOS descriptor or descriptor too short [ 731.899501][ T123] usb 5-1: New USB device found, idVendor=041e, idProduct=3040, bcdDevice= 0.40 [ 731.910642][ T123] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 731.919962][ T123] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 731.919995][ T123] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 731.920016][ T123] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 731.923530][ T123] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 731.923552][ T123] usb 5-1: Product: syz [ 731.923566][ T123] usb 5-1: Manufacturer: syz [ 731.923583][ T123] usb 5-1: SerialNumber: syz [ 732.157540][ T5736] usb 10-1: new high-speed USB device number 26 using dummy_hcd [ 732.236839][ T123] usb 5-1: USB disconnect, device number 105 [ 732.337398][ T5736] usb 10-1: Using ep0 maxpacket: 32 [ 732.343226][ T5736] usb 10-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 732.344752][ T5736] usb 10-1: config index 0 descriptor too short (expected 19, got 18) [ 732.348650][ T5736] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 732.348672][ T5736] usb 10-1: Product: syz [ 732.348685][ T5736] usb 10-1: Manufacturer: syz [ 732.348699][ T5736] usb 10-1: SerialNumber: syz [ 732.352675][ T5736] usb 10-1: config 0 descriptor?? [ 732.361165][ T5736] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 732.361226][ T5736] dvb-usb: bulk message failed: -22 (2/0) [ 732.367163][ T5736] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 732.368012][ T5736] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 732.368060][ T5736] usb 10-1: media controller created [ 732.383020][ T5736] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 732.397355][ T5736] usb 10-1: selecting invalid altsetting 7 [ 732.397373][ T5736] cxusb: set interface failed [ 732.397386][ T5736] dvb-usb: bulk message failed: -22 (1/0) [ 732.459225][ T5736] DVB: Unable to find symbol lgdt330x_attach() [ 732.460967][ T5736] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 732.545649][ T5736] rc_core: IR keymap rc-dvico-portable not found [ 732.545686][ T5736] Registered IR keymap rc-empty [ 732.546983][ T5736] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.9/usb10/10-1/rc/rc0 [ 732.552688][ T5736] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.9/usb10/10-1/rc/rc0/input103 [ 732.555443][ T5736] dvb-usb: schedule remote query interval to 100 msecs. [ 732.562487][ T5736] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 732.600211][T19562] cxusb: i2c rd: len=160 is too big! [ 732.600211][T19562] [ 732.662338][ T5678] dvb-usb: bulk message failed: -22 (1/0) [ 732.766026][ T5678] dvb-usb: bulk message failed: -22 (1/0) [ 732.876636][ T5678] dvb-usb: bulk message failed: -22 (1/0) [ 732.986923][ T5708] dvb-usb: bulk message failed: -22 (1/0) [ 732.987143][ T5736] usb 10-1: USB disconnect, device number 26 [ 733.102710][ T5736] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 733.195756][ T5678] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 733.346392][ T5678] usb 5-1: New USB device found, idVendor=056a, idProduct=0335, bcdDevice= 0.00 [ 733.347496][ T5678] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 733.347524][ T5678] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 733.347545][ T5678] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 733.347604][ T5678] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 733.353562][ T5678] usb 5-1: config 0 descriptor?? [ 733.782818][T19576] binder: 19575:19576 ioctl c018aa3f 80000180 returned -22 [ 733.801149][ T5678] wacom 0003:056A:0335.0042: hidraw0: USB HID v0.00 Joystick [HID 056a:0335] on usb-dummy_hcd.4-1/input0 [ 733.994395][ T123] usb 5-1: USB disconnect, device number 106 [ 734.261457][T19609] tipc: Enabled bearer , priority 0 [ 735.111626][T19608] tipc: Disabling bearer [ 735.206680][ T5678] usb 9-1: new high-speed USB device number 45 using dummy_hcd [ 735.376683][ T5678] usb 9-1: Using ep0 maxpacket: 16 [ 735.384520][ T5678] usb 9-1: unable to get BOS descriptor or descriptor too short [ 735.392868][ T5678] usb 9-1: New USB device found, idVendor=0856, idProduct=ac32, bcdDevice=d8.41 [ 735.394357][ T5678] usb 9-1: config 251 has an invalid interface number: 95 but max is 0 [ 735.394380][ T5678] usb 9-1: config 251 has no interface number 0 [ 735.394406][ T5678] usb 9-1: config 251 interface 95 has no altsetting 0 [ 735.439381][ T5678] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 735.439411][ T5678] usb 9-1: Product: syz [ 735.439439][ T5678] usb 9-1: Manufacturer: syz [ 735.439455][ T5678] usb 9-1: SerialNumber: syz [ 735.705252][T19617] __nla_validate_parse: 64 callbacks suppressed [ 735.712070][T19617] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3593'. [ 735.728191][T19617] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3593'. [ 735.748743][T19627] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3597'. [ 735.758811][T19627] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3597'. [ 735.864484][ T5678] mos7840 9-1:251.95: required endpoints missing [ 735.877624][ T5678] usb 9-1: USB disconnect, device number 45 [ 735.896848][T19631] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3597'. [ 736.175573][T13510] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 736.315569][T13510] usb 5-1: device descriptor read/64, error -71 [ 736.565838][T13510] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 736.695891][T13510] usb 5-1: device descriptor read/64, error -71 [ 736.806000][T13510] usb usb5-port1: attempt power cycle [ 736.945576][ T48] usb 9-1: new full-speed USB device number 46 using dummy_hcd [ 737.086129][ T48] usb 9-1: device descriptor read/64, error -71 [ 737.096232][T19654] netlink: 88 bytes leftover after parsing attributes in process `syz.0.3605'. [ 737.107538][T19654] tipc: Started in network mode [ 737.107592][T19654] tipc: Node identity c64534ca0fd6, cluster identity 4711 [ 737.107739][T19654] tipc: Enabled bearer , priority 0 [ 737.145633][T13510] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 737.166337][T13510] usb 5-1: device descriptor read/8, error -71 [ 737.335578][ T48] usb 9-1: new full-speed USB device number 47 using dummy_hcd [ 737.407001][T13510] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 737.436105][T13510] usb 5-1: device descriptor read/8, error -71 [ 737.475649][ T48] usb 9-1: device descriptor read/64, error -71 [ 737.546043][T13510] usb usb5-port1: unable to enumerate USB device [ 737.585870][ T48] usb usb9-port1: attempt power cycle [ 737.911903][T19652] tipc: Disabling bearer [ 737.926833][ T48] usb 9-1: new full-speed USB device number 48 using dummy_hcd [ 737.953221][ T48] usb 9-1: device descriptor read/8, error -71 [ 738.185682][ T48] usb 9-1: new full-speed USB device number 49 using dummy_hcd [ 738.216132][ T48] usb 9-1: device descriptor read/8, error -71 [ 738.326110][ T48] usb usb9-port1: unable to enumerate USB device [ 738.345591][ T5708] usb 10-1: new high-speed USB device number 27 using dummy_hcd [ 738.499021][ T5708] usb 10-1: New USB device found, idVendor=056a, idProduct=0335, bcdDevice= 0.00 [ 738.500000][ T5708] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 738.500028][ T5708] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 738.500048][ T5708] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 738.500087][ T5708] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 738.502775][ T5708] usb 10-1: config 0 descriptor?? [ 738.913584][T19679] binder: 19678:19679 ioctl c018aa3f 80000180 returned -22 [ 738.941185][ T5708] wacom 0003:056A:0335.0043: hidraw0: USB HID v0.00 Joystick [HID 056a:0335] on usb-dummy_hcd.9-1/input0 [ 739.057542][T19689] FAULT_INJECTION: forcing a failure. [ 739.057542][T19689] name failslab, interval 1, probability 0, space 0, times 0 [ 739.057600][T19689] CPU: 1 UID: 0 PID: 19689 Comm: syz.2.3613 Tainted: G L syzkaller #0 PREEMPT(full) [ 739.057624][T19689] Tainted: [L]=SOFTLOCKUP [ 739.057630][T19689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 739.057639][T19689] Call Trace: [ 739.057646][T19689] [ 739.057653][T19689] dump_stack_lvl+0xe8/0x150 [ 739.057680][T19689] should_fail_ex+0x410/0x560 [ 739.057705][T19689] ? __alloc_skb+0x1db/0x7a0 [ 739.057727][T19689] should_failslab+0xa8/0x100 [ 739.057747][T19689] ? __alloc_skb+0x1db/0x7a0 [ 739.057768][T19689] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 739.057795][T19689] ? __alloc_skb+0x18d/0x7a0 [ 739.057821][T19689] ? __alloc_skb+0x1db/0x7a0 [ 739.057853][T19689] __alloc_skb+0x1db/0x7a0 [ 739.057882][T19689] netlink_ack+0x136/0xb30 [ 739.057908][T19689] ? __kmalloc_cache_noprof+0x14d/0x600 [ 739.057934][T19689] ? nfnetlink_rcv+0x1021/0x28c0 [ 739.057958][T19689] nfnetlink_rcv+0x260c/0x28c0 [ 739.058003][T19689] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 739.058037][T19689] ? ref_tracker_free+0x689/0x830 [ 739.058074][T19689] ? skb_clone+0x246/0x3a0 [ 739.058096][T19689] ? __netlink_deliver_tap+0x811/0x860 [ 739.058123][T19689] ? netlink_deliver_tap+0x2e/0x1b0 [ 739.058143][T19689] ? netlink_deliver_tap+0x2e/0x1b0 [ 739.058167][T19689] netlink_unicast+0x7bd/0x940 [ 739.058191][T19689] netlink_sendmsg+0x813/0xb40 [ 739.058220][T19689] ? __pfx_netlink_sendmsg+0x10/0x10 [ 739.058247][T19689] ? apparmor_socket_sendmsg+0x98/0x360 [ 739.058274][T19689] ? __pfx_netlink_sendmsg+0x10/0x10 [ 739.058295][T19689] sock_sendmsg_nosec+0x13a/0x180 [ 739.058320][T19689] ____sys_sendmsg+0x54e/0x850 [ 739.058354][T19689] ? __pfx_____sys_sendmsg+0x10/0x10 [ 739.058395][T19689] ___sys_sendmsg+0x2a5/0x360 [ 739.058414][T19689] ? __lock_acquire+0x6df/0x2e50 [ 739.058439][T19689] ? __pfx____sys_sendmsg+0x10/0x10 [ 739.058457][T19689] ? get_pid_task+0x20/0x1f0 [ 739.058473][T19689] ? get_pid_task+0x20/0x1f0 [ 739.058488][T19689] ? get_pid_task+0x20/0x1f0 [ 739.058534][T19689] ? __fget_files+0x2a/0x420 [ 739.058558][T19689] ? __fget_files+0x3a2/0x420 [ 739.058591][T19689] __sys_sendmsg+0x177/0x240 [ 739.058613][T19689] ? __pfx___sys_sendmsg+0x10/0x10 [ 739.058651][T19689] __do_fast_syscall_32+0x27a/0x6a0 [ 739.058679][T19689] ? do_fast_syscall_32+0x33/0x70 [ 739.058706][T19689] ? asm_int80_emulation+0x1a/0x20 [ 739.058724][T19689] ? do_int80_emulation+0x299/0x500 [ 739.058749][T19689] ? trace_irq_disable+0x3b/0x140 [ 739.058772][T19689] do_fast_syscall_32+0x33/0x70 [ 739.058815][T19689] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 739.058838][T19689] RIP: 0023:0xf701f0ec [ 739.058855][T19689] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 739.058871][T19689] RSP: 002b:00000000f540d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 739.058892][T19689] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000240 [ 739.058905][T19689] RDX: 0000000000008040 RSI: 0000000000000000 RDI: 0000000000000000 [ 739.058917][T19689] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 739.058929][T19689] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 739.058941][T19689] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 739.058969][T19689] [ 739.169184][ T5679] usb 10-1: USB disconnect, device number 27 [ 739.247082][ T5736] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 739.398310][ T5736] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 739.401182][ T5736] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 739.401207][ T5736] usb 5-1: config 220 descriptor has 1 excess byte, ignoring [ 739.401224][ T5736] usb 5-1: config 220 has no interface number 2 [ 739.401279][ T5736] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 739.401303][ T5736] usb 5-1: config 220 interface 0 has no altsetting 0 [ 739.401319][ T5736] usb 5-1: config 220 interface 76 has no altsetting 0 [ 739.401334][ T5736] usb 5-1: config 220 interface 1 has no altsetting 0 [ 739.408750][ T5736] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 739.408774][ T5736] usb 5-1: Product: syz [ 739.408787][ T5736] usb 5-1: Manufacturer: syz [ 739.408800][ T5736] usb 5-1: SerialNumber: syz [ 741.828007][ T5736] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 741.828058][ T5736] uvcvideo 5-1:220.0: No valid video chain found. [ 741.828130][ T5736] usb 5-1: selecting invalid altsetting 0 [ 741.846700][ T5736] usb 5-1: selecting invalid altsetting 0 [ 741.846727][ T5736] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 741.853948][ T5736] usb 5-1: USB disconnect, device number 111 [ 742.015794][T19745] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3625'. [ 742.346159][T19762] netlink: zone id is out of range [ 742.346190][T19762] netlink: zone id is out of range [ 742.346213][T19762] netlink: zone id is out of range [ 742.346246][T19762] netlink: zone id is out of range [ 742.346258][T19762] netlink: zone id is out of range [ 742.346268][T19762] netlink: zone id is out of range [ 742.346563][T19762] netlink: zone id is out of range [ 742.346576][T19762] netlink: zone id is out of range [ 742.346588][T19762] netlink: zone id is out of range [ 742.346599][T19762] netlink: zone id is out of range [ 743.737985][ T7057] hid_parser_main: 27 callbacks suppressed [ 743.744492][ T7057] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 743.758224][ T7057] hid-generic 0000:0000:0000.0044: hidraw0: HID v0.00 Device [syz1] on syz0 [ 743.794584][T19790] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3636'. [ 743.867064][T19790] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3636'. [ 744.129806][T19790] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3636'. [ 745.369873][T19816] FAULT_INJECTION: forcing a failure. [ 745.369873][T19816] name failslab, interval 1, probability 0, space 0, times 0 [ 745.369928][T19816] CPU: 0 UID: 0 PID: 19816 Comm: syz.8.3641 Tainted: G L syzkaller #0 PREEMPT(full) [ 745.369952][T19816] Tainted: [L]=SOFTLOCKUP [ 745.369958][T19816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 745.369967][T19816] Call Trace: [ 745.369973][T19816] [ 745.369979][T19816] dump_stack_lvl+0xe8/0x150 [ 745.370011][T19816] should_fail_ex+0x410/0x560 [ 745.370041][T19816] ? __alloc_skb+0x1db/0x7a0 [ 745.370066][T19816] should_failslab+0xa8/0x100 [ 745.370089][T19816] ? __alloc_skb+0x1db/0x7a0 [ 745.370112][T19816] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 745.370138][T19816] ? __alloc_skb+0x18d/0x7a0 [ 745.370163][T19816] ? __alloc_skb+0x1db/0x7a0 [ 745.370194][T19816] __alloc_skb+0x1db/0x7a0 [ 745.370223][T19816] netlink_ack+0x136/0xb30 [ 745.370258][T19816] netlink_rcv_skb+0x2a4/0x4a0 [ 745.370280][T19816] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 745.370302][T19816] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 745.370333][T19816] ? bpf_lsm_capable+0x9/0x20 [ 745.370357][T19816] ? security_capable+0x7e/0x2c0 [ 745.370399][T19816] nfnetlink_rcv+0x2b9/0x28c0 [ 745.370421][T19816] ? kernel_text_address+0xa5/0xe0 [ 745.370441][T19816] ? __kernel_text_address+0xd/0x30 [ 745.370460][T19816] ? unwind_get_return_address+0x4d/0x90 [ 745.370481][T19816] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 745.370508][T19816] ? arch_stack_walk+0xfb/0x150 [ 745.370539][T19816] ? stack_trace_save+0xa9/0x100 [ 745.370566][T19816] ? __lock_acquire+0x6df/0x2e50 [ 745.370585][T19816] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 745.370602][T19816] ? __lock_acquire+0x6df/0x2e50 [ 745.370623][T19816] ? kasan_save_track+0x4f/0x80 [ 745.370639][T19816] ? kasan_save_track+0x3e/0x80 [ 745.370655][T19816] ? __kasan_slab_alloc+0x6c/0x80 [ 745.370672][T19816] ? kmem_cache_alloc_node_noprof+0x354/0x610 [ 745.370697][T19816] ? __alloc_skb+0x27a/0x7a0 [ 745.370720][T19816] ? netlink_sendmsg+0x5d4/0xb40 [ 745.370739][T19816] ? sock_sendmsg_nosec+0x13a/0x180 [ 745.370760][T19816] ? ____sys_sendmsg+0x54e/0x850 [ 745.370785][T19816] ? __lock_acquire+0x6df/0x2e50 [ 745.370813][T19816] ? __netlink_lookup+0xc6/0x8b0 [ 745.370844][T19816] ? lock_acquire+0x115/0x350 [ 745.370862][T19816] ? netlink_deliver_tap+0x2e/0x1b0 [ 745.370888][T19816] ? netlink_deliver_tap+0x2e/0x1b0 [ 745.370908][T19816] ? netlink_deliver_tap+0x2e/0x1b0 [ 745.370934][T19816] netlink_unicast+0x7bd/0x940 [ 745.370962][T19816] netlink_sendmsg+0x813/0xb40 [ 745.370991][T19816] ? __pfx_netlink_sendmsg+0x10/0x10 [ 745.371019][T19816] ? apparmor_socket_sendmsg+0x98/0x360 [ 745.371048][T19816] ? __pfx_netlink_sendmsg+0x10/0x10 [ 745.371068][T19816] sock_sendmsg_nosec+0x13a/0x180 [ 745.371093][T19816] ____sys_sendmsg+0x54e/0x850 [ 745.371117][T19816] ? __pfx_____sys_sendmsg+0x10/0x10 [ 745.371150][T19816] ___sys_sendmsg+0x2a5/0x360 [ 745.371168][T19816] ? __lock_acquire+0x6df/0x2e50 [ 745.371189][T19816] ? __pfx____sys_sendmsg+0x10/0x10 [ 745.371207][T19816] ? get_pid_task+0x20/0x1f0 [ 745.371223][T19816] ? get_pid_task+0x20/0x1f0 [ 745.371239][T19816] ? get_pid_task+0x20/0x1f0 [ 745.371281][T19816] ? __fget_files+0x2a/0x420 [ 745.371303][T19816] ? __fget_files+0x3a2/0x420 [ 745.371334][T19816] __sys_sendmsg+0x177/0x240 [ 745.371355][T19816] ? __pfx___sys_sendmsg+0x10/0x10 [ 745.371395][T19816] __do_fast_syscall_32+0x27a/0x6a0 [ 745.371423][T19816] ? do_fast_syscall_32+0x33/0x70 [ 745.371448][T19816] ? asm_int80_emulation+0x1a/0x20 [ 745.371466][T19816] ? do_int80_emulation+0x299/0x500 [ 745.371490][T19816] ? trace_irq_disable+0x3b/0x140 [ 745.371511][T19816] do_fast_syscall_32+0x33/0x70 [ 745.371544][T19816] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 745.371565][T19816] RIP: 0023:0xf703f0ec [ 745.371582][T19816] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 745.371597][T19816] RSP: 002b:00000000f542d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 745.371617][T19816] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000040 [ 745.371630][T19816] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 745.371641][T19816] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 745.371651][T19816] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 745.371662][T19816] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 745.371687][T19816] [ 745.502811][T19809] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3639'. [ 746.202718][T19843] FAULT_INJECTION: forcing a failure. [ 746.202718][T19843] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 746.216421][T19843] CPU: 1 UID: 0 PID: 19843 Comm: syz.2.3648 Tainted: G L syzkaller #0 PREEMPT(full) [ 746.216451][T19843] Tainted: [L]=SOFTLOCKUP [ 746.216457][T19843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 746.216468][T19843] Call Trace: [ 746.216476][T19843] [ 746.216484][T19843] dump_stack_lvl+0xe8/0x150 [ 746.216514][T19843] should_fail_ex+0x410/0x560 [ 746.216544][T19843] _copy_from_user+0x2d/0xb0 [ 746.216563][T19843] get_compat_msghdr+0xb3/0x4c0 [ 746.216587][T19843] ? __pfx_get_compat_msghdr+0x10/0x10 [ 746.216618][T19843] ___sys_sendmsg+0x201/0x360 [ 746.216636][T19843] ? __lock_acquire+0x6df/0x2e50 [ 746.216657][T19843] ? __pfx____sys_sendmsg+0x10/0x10 [ 746.216674][T19843] ? get_pid_task+0x20/0x1f0 [ 746.216690][T19843] ? get_pid_task+0x20/0x1f0 [ 746.216704][T19843] ? get_pid_task+0x20/0x1f0 [ 746.216746][T19843] ? __fget_files+0x2a/0x420 [ 746.216766][T19843] ? __fget_files+0x3a2/0x420 [ 746.216795][T19843] __sys_sendmsg+0x177/0x240 [ 746.216814][T19843] ? __pfx___sys_sendmsg+0x10/0x10 [ 746.216848][T19843] __do_fast_syscall_32+0x27a/0x6a0 [ 746.216874][T19843] ? do_fast_syscall_32+0x33/0x70 [ 746.216896][T19843] ? asm_int80_emulation+0x1a/0x20 [ 746.216913][T19843] ? do_int80_emulation+0x299/0x500 [ 746.216935][T19843] ? trace_irq_disable+0x3b/0x140 [ 746.216955][T19843] do_fast_syscall_32+0x33/0x70 [ 746.216980][T19843] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 746.217000][T19843] RIP: 0023:0xf701f0ec [ 746.217017][T19843] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 746.217032][T19843] RSP: 002b:00000000f540d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 746.217050][T19843] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000c00 [ 746.217063][T19843] RDX: 0000000000008010 RSI: 0000000000000000 RDI: 0000000000000000 [ 746.217073][T19843] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 746.217083][T19843] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 746.217093][T19843] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 746.217119][T19843] [ 746.285595][ T48] usb 9-1: new high-speed USB device number 50 using dummy_hcd [ 746.470957][ T48] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 746.481162][ T48] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 746.481225][ T48] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 746.503095][ T48] usb 9-1: config 0 descriptor?? [ 746.724397][ T48] usbhid 9-1:0.0: can't add hid device: -71 [ 746.732109][ T48] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 746.744822][ T48] usb 9-1: USB disconnect, device number 50 [ 747.168032][ T48] usb 9-1: new high-speed USB device number 51 using dummy_hcd [ 747.211364][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.211880][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.327704][ T48] usb 9-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 747.339887][ T48] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 747.339948][ T48] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 747.364699][ T48] usb 9-1: config 0 descriptor?? [ 747.656443][ T5736] usb 5-1: new high-speed USB device number 112 using dummy_hcd [ 747.818025][ T5736] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 747.819464][ T5736] usb 5-1: config 0 has an invalid interface number: 106 but max is 0 [ 747.819488][ T5736] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 747.819506][ T5736] usb 5-1: config 0 has no interface number 0 [ 747.819532][ T5736] usb 5-1: too many endpoints for config 0 interface 106 altsetting 74: 216, using maximum allowed: 30 [ 747.819564][ T5736] usb 5-1: config 0 interface 106 altsetting 74 has 0 endpoint descriptors, different from the interface descriptor's value: 216 [ 747.819588][ T5736] usb 5-1: config 0 interface 106 has no altsetting 0 [ 747.819618][ T5736] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 747.826467][ T5736] usb 5-1: config 0 descriptor?? [ 747.877178][ T5736] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 748.186938][ T48] aiptek 9-1:0.0: Aiptek using 400 ms programming speed [ 748.198170][T19835] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 748.213570][T19835] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 748.224422][ T48] input: Aiptek as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/input/input110 [ 748.558458][T19835] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 748.571419][T19835] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 748.585348][ T7057] usb 9-1: USB disconnect, device number 51 [ 748.591431][ C1] aiptek 9-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 748.966057][T14155] usb 5-1: Failed to submit usb control message: -110 [ 748.966946][T14155] usb 5-1: unable to send the bmi data to the device: -110 [ 748.968536][T14155] usb 5-1: unable to get target info from device [ 748.968560][T14155] usb 5-1: could not get target info (-110) [ 748.968588][T14155] usb 5-1: could not probe fw (-110) [ 749.223162][T19908] netlink: 11575 bytes leftover after parsing attributes in process `syz.0.3660'. [ 749.457886][T19916] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3665'. [ 749.459587][T19916] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3665'. [ 749.605892][T19916] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3665'. [ 750.522777][ T7057] usb 5-1: USB disconnect, device number 112 [ 750.796782][T19946] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 750.797218][T19946] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 751.075738][ T7057] usb 5-1: new high-speed USB device number 113 using dummy_hcd [ 751.213688][ T7057] usb 5-1: device descriptor read/64, error -71 [ 751.466736][ T7057] usb 5-1: new high-speed USB device number 114 using dummy_hcd [ 751.596271][ T7057] usb 5-1: device descriptor read/64, error -71 [ 751.705812][ T7057] usb usb5-port1: attempt power cycle [ 752.075907][ T7057] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 752.106540][ T7057] usb 5-1: device descriptor read/8, error -71 [ 752.148515][T19985] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 752.249293][T19985] CUSE: unknown device info "€" [ 752.249332][T19985] CUSE: unknown device info "Ö" [ 752.249363][T19985] CUSE: unknown device info "" [ 752.249371][T19985] CUSE: unknown device info "€" [ 752.249378][T19985] CUSE: unknown device info "ðÿÿÿ" [ 752.249385][T19985] CUSE: unknown device info "" [ 752.249391][T19985] CUSE: unknown device info "" [ 752.249399][T19985] CUSE: unknown device info "" [ 752.249406][T19985] CUSE: zero length info key specified [ 752.359130][ T7057] usb 5-1: new high-speed USB device number 116 using dummy_hcd [ 752.376378][ T7057] usb 5-1: device descriptor read/8, error -71 [ 752.497292][ T7057] usb usb5-port1: unable to enumerate USB device [ 753.705620][ T5708] usb 10-1: new high-speed USB device number 28 using dummy_hcd [ 753.832641][T20022] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3690'. [ 753.834145][T20022] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3690'. [ 753.938842][ T5708] usb 10-1: unable to get BOS descriptor or descriptor too short [ 753.938911][ T5708] usb 10-1: New USB device found, idVendor=041e, idProduct=3040, bcdDevice= 0.40 [ 753.940208][ T5708] usb 10-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 753.940228][ T5708] usb 10-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 753.940245][ T5708] usb 10-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 753.940262][ T5708] usb 10-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 753.942587][ T5708] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 753.942608][ T5708] usb 10-1: Product: syz [ 753.942622][ T5708] usb 10-1: Manufacturer: syz [ 753.942640][ T5708] usb 10-1: SerialNumber: syz [ 754.067151][T20022] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3690'. [ 754.290701][ T5708] usb 10-1: USB disconnect, device number 28 [ 754.555733][ T5736] usb 5-1: new full-speed USB device number 117 using dummy_hcd [ 754.707311][ T5736] usb 5-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 754.711647][ T5736] usb 5-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 754.711673][ T5736] usb 5-1: Product: syz [ 754.711687][ T5736] usb 5-1: Manufacturer: syz [ 754.711700][ T5736] usb 5-1: SerialNumber: syz [ 754.722821][ T5736] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 754.746202][ T5708] usb 9-1: new high-speed USB device number 52 using dummy_hcd [ 754.897715][ T5708] usb 9-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 754.906053][ T5708] usb 9-1: config 220 has an invalid interface number: 76 but max is 2 [ 754.906107][ T5708] usb 9-1: config 220 descriptor has 1 excess byte, ignoring [ 754.906124][ T5708] usb 9-1: config 220 has no interface number 2 [ 754.906185][ T5708] usb 9-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 754.906209][ T5708] usb 9-1: config 220 interface 0 has no altsetting 0 [ 754.906247][ T5708] usb 9-1: config 220 interface 76 has no altsetting 0 [ 754.906264][ T5708] usb 9-1: config 220 interface 1 has no altsetting 0 [ 754.921375][ T5708] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 754.921401][ T5708] usb 9-1: Product: syz [ 754.921415][ T5708] usb 9-1: Manufacturer: syz [ 754.921429][ T5708] usb 9-1: SerialNumber: syz [ 755.784983][T20052] net_ratelimit: 26 callbacks suppressed [ 755.785045][T20052] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 756.729101][T20061] FAULT_INJECTION: forcing a failure. [ 756.729101][T20061] name failslab, interval 1, probability 0, space 0, times 0 [ 756.743342][T20061] CPU: 1 UID: 0 PID: 20061 Comm: syz.2.3703 Tainted: G L syzkaller #0 PREEMPT(full) [ 756.743371][T20061] Tainted: [L]=SOFTLOCKUP [ 756.743379][T20061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 756.743390][T20061] Call Trace: [ 756.743398][T20061] [ 756.743407][T20061] dump_stack_lvl+0xe8/0x150 [ 756.743437][T20061] should_fail_ex+0x410/0x560 [ 756.743470][T20061] should_failslab+0xa8/0x100 [ 756.743494][T20061] __kmalloc_cache_noprof+0xa3/0x600 [ 756.743528][T20061] ? rcu_is_watching+0x16/0xb0 [ 756.743552][T20061] ? __hw_addr_create+0x62/0x240 [ 756.743570][T20061] ? __hw_addr_create+0x62/0x240 [ 756.743596][T20061] __hw_addr_create+0x62/0x240 [ 756.743620][T20061] __hw_addr_add_ex+0x1ce/0x520 [ 756.743645][T20061] dev_addr_init+0x15a/0x240 [ 756.743666][T20061] ? __pfx_dev_addr_init+0x10/0x10 [ 756.743689][T20061] ? __kvmalloc_node_noprof+0x345/0x820 [ 756.743717][T20061] alloc_netdev_mqs+0x2b4/0x12a0 [ 756.743739][T20061] ? __pfx_snprintf+0x10/0x10 [ 756.743760][T20061] ? __pfx_vlan_setup+0x10/0x10 [ 756.743790][T20061] rtnl_create_link+0x321/0xd70 [ 756.743821][T20061] rtnl_newlink_create+0x258/0x7b0 [ 756.743844][T20061] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 756.743865][T20061] ? __pfx___mutex_lock+0x10/0x10 [ 756.743898][T20061] ? ns_capable+0x89/0xe0 [ 756.743928][T20061] rtnl_newlink+0x166d/0x1c30 [ 756.743968][T20061] ? __pfx_rtnl_newlink+0x10/0x10 [ 756.743993][T20061] ? __do_fast_syscall_32+0x27a/0x6a0 [ 756.744018][T20061] ? do_fast_syscall_32+0x33/0x70 [ 756.744043][T20061] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 756.744103][T20061] ? kasan_quarantine_put+0xbb/0x1f0 [ 756.744131][T20061] ? lockdep_hardirqs_on+0x7b/0x110 [ 756.744158][T20061] ? nlmon_xmit+0xb0/0x100 [ 756.744182][T20061] ? kmem_cache_free+0x182/0x650 [ 756.744211][T20061] ? __lock_acquire+0x6df/0x2e50 [ 756.744235][T20061] ? __dev_queue_xmit+0x29b/0x3820 [ 756.744259][T20061] ? __local_bh_enable_ip+0xd6/0x140 [ 756.744283][T20061] ? lockdep_hardirqs_on+0x7b/0x110 [ 756.744307][T20061] ? __dev_queue_xmit+0x29b/0x3820 [ 756.744327][T20061] ? __local_bh_enable_ip+0xd6/0x140 [ 756.744349][T20061] ? __dev_queue_xmit+0x29b/0x3820 [ 756.744377][T20061] ? lock_acquire+0x115/0x350 [ 756.744409][T20061] ? __pfx_rtnl_newlink+0x10/0x10 [ 756.744434][T20061] rtnetlink_rcv_msg+0x802/0xc00 [ 756.744464][T20061] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 756.744490][T20061] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 756.744514][T20061] ? ref_tracker_free+0x689/0x830 [ 756.744542][T20061] ? __pfx_ref_tracker_free+0x10/0x10 [ 756.744573][T20061] netlink_rcv_skb+0x226/0x4a0 [ 756.744597][T20061] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 756.744625][T20061] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 756.744658][T20061] ? netlink_deliver_tap+0x2e/0x1b0 [ 756.744677][T20061] ? netlink_deliver_tap+0x2e/0x1b0 [ 756.744701][T20061] netlink_unicast+0x7bd/0x940 [ 756.744732][T20061] netlink_sendmsg+0x813/0xb40 [ 756.744764][T20061] ? __pfx_netlink_sendmsg+0x10/0x10 [ 756.744794][T20061] ? apparmor_socket_sendmsg+0x98/0x360 [ 756.744824][T20061] ? __pfx_netlink_sendmsg+0x10/0x10 [ 756.744845][T20061] sock_sendmsg_nosec+0x13a/0x180 [ 756.744874][T20061] ____sys_sendmsg+0x54e/0x850 [ 756.744900][T20061] ? __pfx_____sys_sendmsg+0x10/0x10 [ 756.744937][T20061] ___sys_sendmsg+0x2a5/0x360 [ 756.744956][T20061] ? __lock_acquire+0x6df/0x2e50 [ 756.744979][T20061] ? __pfx____sys_sendmsg+0x10/0x10 [ 756.744999][T20061] ? get_pid_task+0x20/0x1f0 [ 756.745016][T20061] ? get_pid_task+0x20/0x1f0 [ 756.745032][T20061] ? get_pid_task+0x20/0x1f0 [ 756.745079][T20061] ? __fget_files+0x2a/0x420 [ 756.745103][T20061] ? __fget_files+0x3a2/0x420 [ 756.745137][T20061] __sys_sendmsg+0x177/0x240 [ 756.745159][T20061] ? __pfx___sys_sendmsg+0x10/0x10 [ 756.745198][T20061] __do_fast_syscall_32+0x27a/0x6a0 [ 756.745227][T20061] ? do_fast_syscall_32+0x33/0x70 [ 756.745253][T20061] ? asm_int80_emulation+0x1a/0x20 [ 756.745271][T20061] ? do_int80_emulation+0x299/0x500 [ 756.745296][T20061] ? trace_irq_disable+0x3b/0x140 [ 756.745316][T20061] do_fast_syscall_32+0x33/0x70 [ 756.745344][T20061] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 756.745367][T20061] RIP: 0023:0xf701f0ec [ 756.745384][T20061] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 756.745400][T20061] RSP: 002b:00000000f540d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 756.745421][T20061] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000080 [ 756.745434][T20061] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 756.745445][T20061] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 756.745456][T20061] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 756.745467][T20061] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 756.745491][T20061] [ 757.113894][T20067] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3704'. [ 757.123505][T20067] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3704'. [ 757.290497][ T5736] vp7045: USB control message 'in' went wrong. [ 757.290541][ T5736] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 757.290585][ T5736] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 757.425753][ T5708] uvcvideo 9-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 757.425805][ T5708] uvcvideo 9-1:220.0: No valid video chain found. [ 757.425852][ T5708] usb 9-1: selecting invalid altsetting 0 [ 757.445424][ T5708] usb 9-1: selecting invalid altsetting 0 [ 757.445450][ T5708] usbtest 9-1:220.1: probe with driver usbtest failed with error -22 [ 757.449229][T20068] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3704'. [ 757.463207][ T5708] usb 9-1: USB disconnect, device number 52 [ 757.635448][ T7057] usb 5-1: USB disconnect, device number 117 [ 757.927434][ T5708] usb 9-1: new high-speed USB device number 53 using dummy_hcd [ 758.076310][ T5708] usb 9-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 758.077446][ T5708] usb 9-1: config 0 has an invalid interface number: 106 but max is 0 [ 758.077469][ T5708] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 758.077487][ T5708] usb 9-1: config 0 has no interface number 0 [ 758.077513][ T5708] usb 9-1: too many endpoints for config 0 interface 106 altsetting 74: 216, using maximum allowed: 30 [ 758.077546][ T5708] usb 9-1: config 0 interface 106 altsetting 74 has 0 endpoint descriptors, different from the interface descriptor's value: 216 [ 758.077571][ T5708] usb 9-1: config 0 interface 106 has no altsetting 0 [ 758.077600][ T5708] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 758.094595][ T5708] usb 9-1: config 0 descriptor?? [ 758.146367][ T5708] usb 9-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 759.157541][T20105] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3710'. [ 759.208717][ T13] usb 9-1: Failed to submit usb control message: -110 [ 759.208764][ T13] usb 9-1: unable to send the bmi data to the device: -110 [ 759.208781][ T13] usb 9-1: unable to get target info from device [ 759.208795][ T13] usb 9-1: could not get target info (-110) [ 759.208808][ T13] usb 9-1: could not probe fw (-110) [ 759.407125][T20111] tipc: Enabling of bearer rejected, failed to enable media [ 759.541966][T20116] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3714'. [ 759.551595][T20116] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3714'. [ 759.783675][T20116] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3714'. [ 760.670355][ T5736] usb 9-1: USB disconnect, device number 53 [ 760.728372][T20129] netlink: 36 bytes leftover after parsing attributes in process `syz.8.3718'. [ 760.767208][ T5708] usb 10-1: new high-speed USB device number 29 using dummy_hcd [ 760.926389][ T5708] usb 10-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice=77.db [ 760.926451][ T5708] usb 10-1: too many configurations: 164, using maximum allowed: 8 [ 760.948604][ T5708] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 760.951182][ T5708] usb 10-1: config 0 descriptor?? [ 761.174776][ T5708] usb 10-1: USB disconnect, device number 29 [ 761.601889][T20155] FAULT_INJECTION: forcing a failure. [ 761.601889][T20155] name failslab, interval 1, probability 0, space 0, times 0 [ 761.644659][T20155] CPU: 0 UID: 0 PID: 20155 Comm: syz.4.3722 Tainted: G L syzkaller #0 PREEMPT(full) [ 761.644688][T20155] Tainted: [L]=SOFTLOCKUP [ 761.644694][T20155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 761.644707][T20155] Call Trace: [ 761.644714][T20155] [ 761.644722][T20155] dump_stack_lvl+0xe8/0x150 [ 761.644751][T20155] should_fail_ex+0x410/0x560 [ 761.644780][T20155] should_failslab+0xa8/0x100 [ 761.644799][T20155] __kmalloc_cache_noprof+0xa3/0x600 [ 761.644819][T20155] ? __kernel_text_address+0xd/0x30 [ 761.644834][T20155] ? madvise_collapse+0x15a/0x790 [ 761.644848][T20155] ? madvise_collapse+0x15a/0x790 [ 761.644864][T20155] ? arch_stack_walk+0xfb/0x150 [ 761.644882][T20155] madvise_collapse+0x15a/0x790 [ 761.644896][T20155] ? lock_acquire+0x115/0x350 [ 761.644916][T20155] madvise_vma_behavior+0x115f/0x4170 [ 761.644937][T20155] ? ima_match_policy+0x21a6/0x2230 [ 761.644955][T20155] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 761.644979][T20155] ? lock_acquire+0x115/0x350 [ 761.645006][T20155] ? process_measurement+0x7b2/0x1c10 [ 761.645030][T20155] ? up_write+0x19d/0x4a0 [ 761.645052][T20155] ? __lock_acquire+0x6df/0x2e50 [ 761.645073][T20155] ? __lock_acquire+0x6df/0x2e50 [ 761.645094][T20155] ? __pfx_process_measurement+0x10/0x10 [ 761.645122][T20155] ? lock_acquire+0x115/0x350 [ 761.645157][T20155] ? mas_prev_slot+0xb76/0xbf0 [ 761.645194][T20155] ? find_vma_prev+0x123/0x1b0 [ 761.645219][T20155] ? __pfx_find_vma_prev+0x10/0x10 [ 761.645249][T20155] ? __lock_acquire+0x6df/0x2e50 [ 761.645275][T20155] madvise_walk_vmas+0x576/0xb00 [ 761.645308][T20155] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 761.645334][T20155] ? blk_start_plug+0x6e/0x1b0 [ 761.645364][T20155] madvise_do_behavior+0x385/0x540 [ 761.645391][T20155] ? __pfx_madvise_do_behavior+0x10/0x10 [ 761.645420][T20155] ? down_read+0x2be/0x330 [ 761.645447][T20155] do_madvise+0x327/0x3a0 [ 761.645468][T20155] ? __pfx_do_madvise+0x10/0x10 [ 761.645494][T20155] ? __fget_files+0x3a2/0x420 [ 761.645522][T20155] ? fput+0xa0/0xd0 [ 761.645541][T20155] ? ksys_write+0x242/0x270 [ 761.645573][T20155] __ia32_sys_madvise+0xa6/0xc0 [ 761.645595][T20155] __do_fast_syscall_32+0x27a/0x6a0 [ 761.645624][T20155] ? do_fast_syscall_32+0x33/0x70 [ 761.645649][T20155] ? asm_int80_emulation+0x1a/0x20 [ 761.645667][T20155] ? do_int80_emulation+0x299/0x500 [ 761.645693][T20155] ? trace_irq_disable+0x3b/0x140 [ 761.645716][T20155] do_fast_syscall_32+0x33/0x70 [ 761.645743][T20155] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 761.645765][T20155] RIP: 0023:0xf7f670ec [ 761.645783][T20155] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 761.645799][T20155] RSP: 002b:00000000f540550c EFLAGS: 00000206 ORIG_RAX: 00000000000000db [ 761.645820][T20155] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 0000000000600003 [ 761.645834][T20155] RDX: 0000000000000019 RSI: 0000000000000000 RDI: 0000000000000000 [ 761.645846][T20155] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 761.645857][T20155] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 761.645869][T20155] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 761.645897][T20155] [ 761.962788][T20158] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3723'. [ 761.973761][T20158] netlink: 44 bytes leftover after parsing attributes in process `syz.9.3723'. [ 762.127307][T20158] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3723'. [ 762.206046][T20165] syzkaller1: entered allmulticast mode [ 762.708465][T20176] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3728'. [ 762.730761][T20176] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3728'. [ 762.926997][T20177] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3728'. [ 763.196143][ T5708] usb 9-1: new high-speed USB device number 54 using dummy_hcd [ 763.355993][ T5708] usb 9-1: Using ep0 maxpacket: 16 [ 763.358245][ T5708] usb 9-1: unable to get BOS descriptor or descriptor too short [ 763.358290][ T5708] usb 9-1: New USB device found, idVendor=0856, idProduct=ac32, bcdDevice=d8.41 [ 763.359261][ T5708] usb 9-1: config 251 has an invalid interface number: 95 but max is 0 [ 763.359283][ T5708] usb 9-1: config 251 has no interface number 0 [ 763.359310][ T5708] usb 9-1: config 251 interface 95 has no altsetting 0 [ 763.361184][ T5708] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 763.361205][ T5708] usb 9-1: Product: syz [ 763.361218][ T5708] usb 9-1: Manufacturer: syz [ 763.361231][ T5708] usb 9-1: SerialNumber: syz [ 763.573474][T20180] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3729'. [ 763.574934][T20180] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3729'. [ 763.594416][ T5708] mos7840 9-1:251.95: required endpoints missing [ 763.620037][ T5708] usb 9-1: USB disconnect, device number 54 [ 763.634025][T20195] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3736'. [ 763.635548][ T5678] usb 5-1: new high-speed USB device number 118 using dummy_hcd [ 763.652804][T20195] netlink: 44 bytes leftover after parsing attributes in process `syz.9.3736'. [ 763.769004][T20196] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3736'. [ 763.780070][ T5678] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 763.783634][ T5678] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 763.783686][ T5678] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 763.788888][ T5678] usb 5-1: config 0 descriptor?? [ 763.917997][T20201] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3737'. [ 764.040203][ T5678] usbhid 5-1:0.0: can't add hid device: -71 [ 764.046375][ T5678] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 764.061971][ T5678] usb 5-1: USB disconnect, device number 118 [ 764.212478][T20210] tipc: Enabled bearer , priority 0 [ 764.565983][ T5678] usb 5-1: new high-speed USB device number 119 using dummy_hcd [ 764.716241][ T5678] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 764.727856][ T5678] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 764.727928][ T5678] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 764.757387][ T5678] usb 5-1: config 0 descriptor?? [ 765.027930][T20209] tipc: Disabling bearer [ 765.596572][ T5678] aiptek 5-1:0.0: Aiptek using 400 ms programming speed [ 765.606812][T20193] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 765.607249][T20193] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 765.631642][ T5678] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input111 [ 765.702884][T20224] netlink: Failed to add helper -22 [ 765.712302][T20224] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 765.989131][T20193] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 765.999145][T20193] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 766.013129][ T5679] usb 5-1: USB disconnect, device number 119 [ 766.019341][ C0] aiptek 5-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 766.058985][ T5678] usb 10-1: new high-speed USB device number 30 using dummy_hcd [ 766.228461][ T5678] usb 10-1: Using ep0 maxpacket: 16 [ 766.239274][ T5678] usb 10-1: unable to get BOS descriptor or descriptor too short [ 766.239339][ T5678] usb 10-1: New USB device found, idVendor=0856, idProduct=ac32, bcdDevice=d8.41 [ 766.259005][ T5678] usb 10-1: config 251 has an invalid interface number: 95 but max is 0 [ 766.259046][ T5678] usb 10-1: config 251 has no interface number 0 [ 766.259096][ T5678] usb 10-1: config 251 interface 95 has no altsetting 0 [ 766.285287][ T5678] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 766.285327][ T5678] usb 10-1: Product: syz [ 766.285357][ T5678] usb 10-1: Manufacturer: syz [ 766.285375][ T5678] usb 10-1: SerialNumber: syz [ 766.577407][ T5678] mos7840 10-1:251.95: required endpoints missing [ 766.593539][ T5678] usb 10-1: USB disconnect, device number 30 [ 766.955555][ T5679] usb 5-1: new high-speed USB device number 120 using dummy_hcd [ 767.126049][ T5679] usb 5-1: Using ep0 maxpacket: 16 [ 767.135909][ T5679] usb 5-1: unable to get BOS descriptor or descriptor too short [ 767.135970][ T5679] usb 5-1: New USB device found, idVendor=0856, idProduct=ac32, bcdDevice=d8.41 [ 767.154367][ T5679] usb 5-1: config 251 has an invalid interface number: 95 but max is 0 [ 767.154406][ T5679] usb 5-1: config 251 has no interface number 0 [ 767.154453][ T5679] usb 5-1: config 251 interface 95 has no altsetting 0 [ 767.164212][T20251] tipc: Enabling of bearer rejected, already enabled [ 767.188011][ T5679] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 767.188050][ T5679] usb 5-1: Product: syz [ 767.188084][ T5679] usb 5-1: Manufacturer: syz [ 767.188102][ T5679] usb 5-1: SerialNumber: syz [ 767.446426][T20240] __nla_validate_parse: 9 callbacks suppressed [ 767.446476][T20240] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3749'. [ 767.450332][T20240] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3749'. [ 767.498655][ T5679] mos7840 5-1:251.95: required endpoints missing [ 767.512649][ T5679] usb 5-1: USB disconnect, device number 120 [ 767.795838][ T48] usb 10-1: new high-speed USB device number 31 using dummy_hcd [ 767.945652][ T48] usb 10-1: Using ep0 maxpacket: 8 [ 767.951674][ T48] usb 10-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 767.965100][ T48] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 767.973324][ T48] usb 10-1: Product: syz [ 767.973345][ T48] usb 10-1: Manufacturer: syz [ 767.973359][ T48] usb 10-1: SerialNumber: syz [ 767.975740][ T5679] usb 9-1: new high-speed USB device number 55 using dummy_hcd [ 768.003163][ T48] usb 10-1: config 0 descriptor?? [ 768.013320][ T48] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 768.128167][ T5679] usb 9-1: unable to get BOS descriptor or descriptor too short [ 768.128239][ T5679] usb 9-1: New USB device found, idVendor=041e, idProduct=3040, bcdDevice= 0.40 [ 768.129366][ T5679] usb 9-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 768.129386][ T5679] usb 9-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 768.129403][ T5679] usb 9-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 768.129420][ T5679] usb 9-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 768.131678][ T5679] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 768.131700][ T5679] usb 9-1: Product: syz [ 768.131712][ T5679] usb 9-1: Manufacturer: syz [ 768.131726][ T5679] usb 9-1: SerialNumber: syz [ 768.468850][ T5679] usb 9-1: USB disconnect, device number 55 [ 768.715969][ T48] gspca_sonixj: reg_r err -110 [ 768.716066][ T48] sonixj 10-1:0.0: probe with driver sonixj failed with error -110 [ 769.345571][ T48] usb 9-1: new high-speed USB device number 56 using dummy_hcd [ 769.346419][T20298] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3767'. [ 769.347530][T20298] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3767'. [ 769.499883][T20300] netlink: 32 bytes leftover after parsing attributes in process `syz.9.3754'. [ 769.514829][T20299] syzkaller1: entered promiscuous mode [ 769.514878][T20299] syzkaller1: entered allmulticast mode [ 769.518533][T20299] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3767'. [ 769.606601][ T48] usb 9-1: Using ep0 maxpacket: 16 [ 769.616799][ T48] usb 9-1: unable to get BOS descriptor or descriptor too short [ 769.616859][ T48] usb 9-1: New USB device found, idVendor=0856, idProduct=ac32, bcdDevice=d8.41 [ 769.620075][ T48] usb 9-1: config 251 has an invalid interface number: 95 but max is 0 [ 769.620099][ T48] usb 9-1: config 251 has no interface number 0 [ 769.620126][ T48] usb 9-1: config 251 interface 95 has no altsetting 0 [ 769.622248][ T48] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 769.622269][ T48] usb 9-1: Product: syz [ 769.622282][ T48] usb 9-1: Manufacturer: syz [ 769.622295][ T48] usb 9-1: SerialNumber: syz [ 769.714034][T20307] netlink: 88 bytes leftover after parsing attributes in process `syz.0.3769'. [ 769.734086][T20307] tipc: Enabled bearer , priority 0 [ 769.841771][T20290] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3765'. [ 769.843784][T20290] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3765'. [ 769.865708][ T48] mos7840 9-1:251.95: required endpoints missing [ 769.870999][ T48] usb 9-1: USB disconnect, device number 56 [ 769.885610][ T123] usb 5-1: new high-speed USB device number 121 using dummy_hcd [ 770.035594][ T123] usb 5-1: Using ep0 maxpacket: 32 [ 770.037561][ T123] usb 5-1: New USB device found, idVendor=1235, idProduct=8214, bcdDevice= 0.40 [ 770.040863][ T123] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 770.040886][ T123] usb 5-1: Product: Є [ 770.040899][ T123] usb 5-1: Manufacturer: 踀핒軃岂㗋Ẹ埦囵î‡íŸ€å”ìšî‰ãµ¦æ†‘î¨á™¾ä»¢í’⫪혂廨秼ᇖ愩㢈볂ꚅ﬊ⵧ䡼ḇǙᾅå²â”Œë±¸ë»Ÿäž…ゼ캳ç°é¯ç‘•ë„›è‘Ÿî–¬èŽ”嘄煦￀ᵯ䉭î«ìŸ¯ä†¯å¾¢ç… å„­áŽ‹é­œå²—ç½å ‹å¯¿ê¯®ä…î­¤íœå¿Œê¸•ì’¼äŽ’ꛊ㣹틱ݣ脯ﳡ奧闊榧汵䧒é¿ç¹‘鴆‾å†á¹•ï¾¼ï±¤å²…ᶬ婄螲ᜉටޙ乀憗쒮å˜ã· [ 770.040927][ T123] usb 5-1: SerialNumber: 丅ₑ툕ݭ蹃á†é²ªê®¯ã´‚婜㛘ç¢ã°¢â¨½è¹…盠 [ 770.263650][ T123] usb 5-1: Audio class v2/v3 interfaces need an interface association [ 770.300633][ T123] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 770.310276][ T123] usb 5-1: USB disconnect, device number 121 [ 770.337944][T11423] udevd[11423]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 770.524769][ T5708] usb 10-1: USB disconnect, device number 31 [ 770.546424][T20306] tipc: Disabling bearer [ 770.666087][ T5679] usb 9-1: new high-speed USB device number 57 using dummy_hcd [ 770.816508][ T5679] usb 9-1: Using ep0 maxpacket: 16 [ 770.818619][ T5679] usb 9-1: unable to get BOS descriptor or descriptor too short [ 770.818665][ T5679] usb 9-1: New USB device found, idVendor=0856, idProduct=ac32, bcdDevice=d8.41 [ 770.819744][ T5679] usb 9-1: config 251 has an invalid interface number: 95 but max is 0 [ 770.819765][ T5679] usb 9-1: config 251 has no interface number 0 [ 770.819791][ T5679] usb 9-1: config 251 interface 95 has no altsetting 0 [ 770.822586][ T5679] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 770.822608][ T5679] usb 9-1: Product: syz [ 770.822623][ T5679] usb 9-1: Manufacturer: syz [ 770.822636][ T5679] usb 9-1: SerialNumber: syz [ 771.030494][T20310] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3770'. [ 771.043985][ T5679] mos7840 9-1:251.95: required endpoints missing [ 771.064600][ T5679] usb 9-1: USB disconnect, device number 57 [ 771.095555][ T5708] usb 5-1: new high-speed USB device number 122 using dummy_hcd [ 771.246075][ T5708] usb 5-1: New USB device found, idVendor=056a, idProduct=0335, bcdDevice= 0.00 [ 771.247272][ T5708] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 771.247300][ T5708] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 771.247321][ T5708] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 771.247383][ T5708] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 771.251172][ T5708] usb 5-1: config 0 descriptor?? [ 771.673762][ T5708] wacom 0003:056A:0335.0045: hidraw0: USB HID v0.00 Joystick [HID 056a:0335] on usb-dummy_hcd.4-1/input0 [ 771.923124][ T5708] usb 5-1: USB disconnect, device number 122 [ 772.496313][T20346] __nla_validate_parse: 1 callbacks suppressed [ 772.496357][T20346] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3782'. [ 772.521096][T20346] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3782'. [ 772.619509][T20348] netlink: 88 bytes leftover after parsing attributes in process `syz.4.3783'. [ 772.630562][T20348] tipc: Enabled bearer , priority 0 [ 773.448804][T20347] tipc: Disabling bearer [ 774.250109][T20389] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3793'. [ 774.269974][T20389] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3793'. [ 774.463411][T20393] syzkaller1: entered promiscuous mode [ 774.463455][T20393] syzkaller1: entered allmulticast mode [ 774.507642][T20393] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3793'. [ 774.709345][T20398] batadv_slave_0: entered promiscuous mode [ 774.901748][T20404] netlink: 88 bytes leftover after parsing attributes in process `syz.8.3797'. [ 774.931168][T20404] tipc: Enabled bearer , priority 0 [ 774.945889][ T48] usb 10-1: new high-speed USB device number 32 using dummy_hcd [ 775.098587][ T48] usb 10-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 775.099876][ T48] usb 10-1: config 0 has an invalid interface number: 106 but max is 0 [ 775.099897][ T48] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 775.099915][ T48] usb 10-1: config 0 has no interface number 0 [ 775.099941][ T48] usb 10-1: too many endpoints for config 0 interface 106 altsetting 74: 216, using maximum allowed: 30 [ 775.099973][ T48] usb 10-1: config 0 interface 106 altsetting 74 has 0 endpoint descriptors, different from the interface descriptor's value: 216 [ 775.099997][ T48] usb 10-1: config 0 interface 106 has no altsetting 0 [ 775.100026][ T48] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 775.120151][ T48] usb 10-1: config 0 descriptor?? [ 775.201861][ T48] usb 10-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 775.470818][T20395] batadv_slave_0: left promiscuous mode [ 775.498516][T20425] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 775.518973][T20425] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 775.549081][ T5679] usb 10-1: USB disconnect, device number 32 [ 775.556109][T14145] usb 10-1: Failed to submit usb control message: -71 [ 775.556155][T14145] usb 10-1: unable to send the bmi data to the device: -71 [ 775.556172][T14145] usb 10-1: unable to get target info from device [ 775.556189][T14145] usb 10-1: could not get target info (-71) [ 775.556203][T14145] usb 10-1: could not probe fw (-71) [ 775.754912][T20403] tipc: Disabling bearer [ 776.197490][ T48] usb 5-1: new high-speed USB device number 123 using dummy_hcd [ 776.408280][ T48] usb 5-1: unable to get BOS descriptor or descriptor too short [ 776.408342][ T48] usb 5-1: New USB device found, idVendor=041e, idProduct=3040, bcdDevice= 0.40 [ 776.429759][ T48] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 776.429799][ T48] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 776.429831][ T48] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 776.429852][ T48] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 776.445021][ T48] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 776.445047][ T48] usb 5-1: Product: syz [ 776.445062][ T48] usb 5-1: Manufacturer: syz [ 776.445075][ T48] usb 5-1: SerialNumber: syz [ 776.979859][ T48] usb 5-1: USB disconnect, device number 123 [ 777.044631][T20455] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3806'. [ 777.062087][T20455] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3806'. [ 777.248425][T20455] syzkaller1: entered promiscuous mode [ 777.248465][T20455] syzkaller1: entered allmulticast mode [ 777.278908][T20455] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3806'. [ 778.482973][T20488] FAULT_INJECTION: forcing a failure. [ 778.482973][T20488] name failslab, interval 1, probability 0, space 0, times 0 [ 778.483036][T20488] CPU: 1 UID: 0 PID: 20488 Comm: syz.4.3811 Tainted: G L syzkaller #0 PREEMPT(full) [ 778.483060][T20488] Tainted: [L]=SOFTLOCKUP [ 778.483066][T20488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 778.483077][T20488] Call Trace: [ 778.483084][T20488] [ 778.483092][T20488] dump_stack_lvl+0xe8/0x150 [ 778.483122][T20488] should_fail_ex+0x410/0x560 [ 778.483154][T20488] should_failslab+0xa8/0x100 [ 778.483173][T20488] ? skb_clone+0x212/0x3a0 [ 778.483191][T20488] kmem_cache_alloc_noprof+0xa1/0x600 [ 778.483217][T20488] ? skb_clone+0x212/0x3a0 [ 778.483240][T20488] skb_clone+0x212/0x3a0 [ 778.483264][T20488] __netlink_deliver_tap+0x413/0x860 [ 778.483299][T20488] ? netlink_deliver_tap+0x2e/0x1b0 [ 778.483320][T20488] netlink_deliver_tap+0x19c/0x1b0 [ 778.483344][T20488] netlink_dump+0x95b/0xee0 [ 778.483376][T20488] ? __pfx_netlink_dump+0x10/0x10 [ 778.483412][T20488] ? genl_start+0x497/0x6d0 [ 778.483444][T20488] __netlink_dump_start+0x589/0x7b0 [ 778.483470][T20488] genl_family_rcv_msg_dumpit+0x213/0x310 [ 778.483501][T20488] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 778.483528][T20488] ? genl_get_cmd+0x4d6/0x960 [ 778.483558][T20488] ? __pfx_genl_start+0x10/0x10 [ 778.483583][T20488] ? __pfx_genl_dumpit+0x10/0x10 [ 778.483607][T20488] ? __pfx_genl_done+0x10/0x10 [ 778.483634][T20488] ? __dev_queue_xmit+0x29b/0x3820 [ 778.483663][T20488] genl_rcv_msg+0x5e1/0x7a0 [ 778.483693][T20488] ? __pfx_genl_rcv_msg+0x10/0x10 [ 778.483717][T20488] ? __pfx_netdev_nl_queue_get_dumpit+0x10/0x10 [ 778.483740][T20488] ? __pfx_ref_tracker_free+0x10/0x10 [ 778.483767][T20488] netlink_rcv_skb+0x226/0x4a0 [ 778.483788][T20488] ? __pfx_genl_rcv_msg+0x10/0x10 [ 778.483822][T20488] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 778.483858][T20488] ? down_read+0x2be/0x330 [ 778.483879][T20488] genl_rcv+0x28/0x40 [ 778.483903][T20488] netlink_unicast+0x7bd/0x940 [ 778.483932][T20488] netlink_sendmsg+0x813/0xb40 [ 778.483961][T20488] ? __pfx_netlink_sendmsg+0x10/0x10 [ 778.483993][T20488] ? apparmor_socket_sendmsg+0x98/0x360 [ 778.484023][T20488] ? __pfx_netlink_sendmsg+0x10/0x10 [ 778.484042][T20488] sock_sendmsg_nosec+0x13a/0x180 [ 778.484070][T20488] ____sys_sendmsg+0x54e/0x850 [ 778.484095][T20488] ? __pfx_____sys_sendmsg+0x10/0x10 [ 778.484129][T20488] ___sys_sendmsg+0x2a5/0x360 [ 778.484146][T20488] ? __lock_acquire+0x6df/0x2e50 [ 778.484171][T20488] ? __pfx____sys_sendmsg+0x10/0x10 [ 778.484190][T20488] ? get_pid_task+0x20/0x1f0 [ 778.484208][T20488] ? get_pid_task+0x20/0x1f0 [ 778.484224][T20488] ? get_pid_task+0x20/0x1f0 [ 778.484270][T20488] ? __fget_files+0x2a/0x420 [ 778.484293][T20488] ? __fget_files+0x3a2/0x420 [ 778.484326][T20488] __sys_sendmsg+0x177/0x240 [ 778.484349][T20488] ? __pfx___sys_sendmsg+0x10/0x10 [ 778.484389][T20488] __do_fast_syscall_32+0x27a/0x6a0 [ 778.484418][T20488] ? do_fast_syscall_32+0x33/0x70 [ 778.484444][T20488] ? asm_int80_emulation+0x1a/0x20 [ 778.484462][T20488] ? do_int80_emulation+0x299/0x500 [ 778.484487][T20488] ? trace_irq_disable+0x3b/0x140 [ 778.484509][T20488] do_fast_syscall_32+0x33/0x70 [ 778.484536][T20488] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 778.484558][T20488] RIP: 0023:0xf7f670ec [ 778.484575][T20488] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 778.484592][T20488] RSP: 002b:00000000f542650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 778.484612][T20488] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 778.484624][T20488] RDX: 0000000004004040 RSI: 0000000000000000 RDI: 0000000000000000 [ 778.484635][T20488] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 778.484645][T20488] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 778.484655][T20488] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 778.484681][T20488] [ 778.779821][T20487] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3812'. [ 778.849382][T20493] netlink: 88 bytes leftover after parsing attributes in process `syz.2.3814'. [ 779.078899][T20493] tipc: Enabling of bearer rejected, already enabled [ 779.310613][ T123] usb 5-1: new high-speed USB device number 124 using dummy_hcd [ 779.475586][ T123] usb 5-1: Using ep0 maxpacket: 8 [ 779.476334][ T123] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 779.477802][ T123] usb 5-1: config 0 has an invalid interface number: 31 but max is 0 [ 779.477829][ T123] usb 5-1: config 0 has no interface number 0 [ 779.480114][ T123] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 779.480137][ T123] usb 5-1: Product: syz [ 779.480150][ T123] usb 5-1: Manufacturer: syz [ 779.480162][ T123] usb 5-1: SerialNumber: syz [ 779.521763][ T123] usb 5-1: config 0 descriptor?? [ 779.852841][T20492] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3813'. [ 779.863640][T20492] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3813'. [ 780.019257][T20519] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3818'. [ 780.023081][T20519] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3818'. [ 780.157550][ T123] uvcvideo 5-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 780.157679][ T123] uvcvideo 5-1:0.31: No valid video chain found. [ 780.201648][T20519] syzkaller1: entered promiscuous mode [ 780.201692][T20519] syzkaller1: entered allmulticast mode [ 780.204789][T20519] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3818'. [ 780.468525][ T123] usb 5-1: USB disconnect, device number 124 [ 781.210754][T20544] netlink: 88 bytes leftover after parsing attributes in process `syz.4.3829'. [ 781.296387][T20544] tipc: Enabled bearer , priority 0 [ 781.332861][T20543] tipc: Disabling bearer [ 781.754755][T20566] fuse: Unknown parameter 'gr÷Uxjid' [ 782.355604][ T5679] usb 10-1: new high-speed USB device number 33 using dummy_hcd [ 782.506252][ T5679] usb 10-1: Using ep0 maxpacket: 8 [ 782.514373][ T5679] usb 10-1: New USB device found, idVendor=084f, idProduct=0001, bcdDevice=c4.c0 [ 782.524926][ T5679] usb 10-1: config 1 has an invalid interface number: 174 but max is 1 [ 782.524971][ T5679] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 782.524989][ T5679] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 782.525008][ T5679] usb 10-1: config 1 has no interface number 0 [ 782.525056][ T5679] usb 10-1: config 1 interface 174 altsetting 0 endpoint 0x3 has invalid maxpacket 487, setting to 64 [ 782.525082][ T5679] usb 10-1: config 1 interface 174 altsetting 0 has a duplicate endpoint with address 0x3, skipping [ 782.525101][ T5679] usb 10-1: config 1 interface 174 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 12 [ 782.532159][ T5679] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 782.532183][ T5679] usb 10-1: Product: syz [ 782.532197][ T5679] usb 10-1: Manufacturer: syz [ 782.532210][ T5679] usb 10-1: SerialNumber: syz [ 782.623278][T20585] netlink: 88 bytes leftover after parsing attributes in process `syz.8.3846'. [ 782.639937][T20585] tipc: Enabled bearer , priority 0 [ 782.648132][T20584] tipc: Disabling bearer [ 782.718821][T20587] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3847'. [ 783.330592][ T5679] empeg 10-1:1.174: empeg converter detected [ 783.339382][ T5679] empeg 10-1:1.174: probe with driver empeg failed with error -71 [ 783.361555][ T5679] usb 10-1: USB disconnect, device number 33 [ 783.511782][T20610] fuse: Bad value for 'fd' [ 783.594362][T20613] tipc: Enabled bearer , priority 0 [ 783.601978][T20611] tipc: Disabling bearer [ 783.916399][T20619] __nla_validate_parse: 3 callbacks suppressed [ 783.924232][T20619] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3860'. [ 784.204046][T20627] netlink: 'syz.0.3862': attribute type 32 has an invalid length. [ 784.212028][T20627] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3862'. [ 784.257099][T20627] bond1: Setting coupled_control to off (0) [ 784.584897][T20645] xt_hashlimit: Unknown mode mask A000000, kernel too old? [ 784.814993][T20652] fuse: Bad value for 'fd' [ 784.999922][T20661] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3871'. [ 785.016121][T20661] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3871'. [ 785.192272][T20666] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3871'. [ 785.250453][T20669] fuse: Bad value for 'rootmode' [ 785.423197][T20672] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3873'. [ 785.459709][T20672] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3873'. [ 785.861717][T20690] FAULT_INJECTION: forcing a failure. [ 785.861717][T20690] name failslab, interval 1, probability 0, space 0, times 0 [ 785.861783][T20690] CPU: 1 UID: 0 PID: 20690 Comm: syz.2.3879 Tainted: G L syzkaller #0 PREEMPT(full) [ 785.861808][T20690] Tainted: [L]=SOFTLOCKUP [ 785.861814][T20690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 785.861823][T20690] Call Trace: [ 785.861830][T20690] [ 785.861837][T20690] dump_stack_lvl+0xe8/0x150 [ 785.861869][T20690] should_fail_ex+0x410/0x560 [ 785.861902][T20690] should_failslab+0xa8/0x100 [ 785.861924][T20690] __kmalloc_cache_noprof+0xa3/0x600 [ 785.861950][T20690] ? __kmalloc_cache_noprof+0x14d/0x600 [ 785.861976][T20690] ? sctp_add_bind_addr+0x8c/0x370 [ 785.861996][T20690] ? sctp_add_bind_addr+0x8c/0x370 [ 785.862022][T20690] sctp_add_bind_addr+0x8c/0x370 [ 785.862047][T20690] sctp_copy_local_addr_list+0x31a/0x4e0 [ 785.862071][T20690] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 785.862094][T20690] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 785.862118][T20690] ? sctp_v6_is_any+0x64/0x80 [ 785.862141][T20690] ? sctp_copy_one_addr+0x93/0x360 [ 785.862165][T20690] sctp_bind_addr_copy+0xb3/0x3c0 [ 785.862187][T20690] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 785.862219][T20690] sctp_connect_new_asoc+0x2ff/0x6b0 [ 785.862247][T20690] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 785.862278][T20690] ? __local_bh_enable_ip+0xd6/0x140 [ 785.862301][T20690] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 785.862324][T20690] ? security_sctp_bind_connect+0x7e/0x2c0 [ 785.862351][T20690] sctp_sendmsg+0x159b/0x2d00 [ 785.862390][T20690] ? __pfx_sctp_sendmsg+0x10/0x10 [ 785.862417][T20690] ? lock_acquire+0x115/0x350 [ 785.862450][T20690] ? aa_sock_msg_perm+0xf5/0x210 [ 785.862468][T20690] ? sock_rps_record_flow+0x19/0x350 [ 785.862493][T20690] ? inet_sendmsg+0x298/0x320 [ 785.862518][T20690] ? __pfx_inet_sendmsg+0x10/0x10 [ 785.862539][T20690] sock_sendmsg_nosec+0x10e/0x180 [ 785.862565][T20690] __sys_sendto+0x408/0x5a0 [ 785.862597][T20690] ? __pfx___sys_sendto+0x10/0x10 [ 785.862640][T20690] ? __fget_files+0x3a2/0x420 [ 785.862673][T20690] ? ksys_write+0x242/0x270 [ 785.862704][T20690] __ia32_sys_sendto+0xdd/0x100 [ 785.862734][T20690] __do_fast_syscall_32+0x27a/0x6a0 [ 785.862761][T20690] ? do_fast_syscall_32+0x33/0x70 [ 785.862791][T20690] ? asm_int80_emulation+0x1a/0x20 [ 785.862808][T20690] ? do_int80_emulation+0x299/0x500 [ 785.862832][T20690] ? trace_irq_disable+0x3b/0x140 [ 785.862853][T20690] do_fast_syscall_32+0x33/0x70 [ 785.862880][T20690] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 785.862901][T20690] RIP: 0023:0xf701f0ec [ 785.862918][T20690] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 785.862934][T20690] RSP: 002b:00000000f540d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000171 [ 785.862953][T20690] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000240 [ 785.862966][T20690] RDX: 0000000000000001 RSI: 0000000000000051 RDI: 0000000080000080 [ 785.862978][T20690] RBP: 000000000000001c R08: 0000000000000000 R09: 0000000000000000 [ 785.862989][T20690] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 785.863000][T20690] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 785.863028][T20690] [ 785.917661][ T5736] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 786.055686][T13510] usb 10-1: new high-speed USB device number 34 using dummy_hcd [ 786.176900][T20695] fuse: Bad value for 'fd' [ 786.217214][T13510] usb 10-1: New USB device found, idVendor=056a, idProduct=0335, bcdDevice= 0.00 [ 786.219437][T13510] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 786.219465][T13510] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 786.219486][T13510] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 786.219524][T13510] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 786.229206][T13510] usb 10-1: config 0 descriptor?? [ 786.245612][ T5736] usb 5-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 786.278050][ T5736] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 786.278105][ T5736] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 786.327458][ T5736] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 786.345522][T20698] veth1_macvtap: entered promiscuous mode [ 786.663129][T20687] binder: 20686:20687 ioctl c018aa3f 80000180 returned -22 [ 786.697202][T13510] wacom 0003:056A:0335.0046: hidraw0: USB HID v0.00 Joystick [HID 056a:0335] on usb-dummy_hcd.9-1/input0 [ 786.892191][T13510] usb 10-1: USB disconnect, device number 34 [ 787.134739][T20711] netlink: 144 bytes leftover after parsing attributes in process `syz.4.3875'. [ 787.174264][T20711] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 787.220049][T20711] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 787.229607][T20711] kvm: requested 88838 ns i8254 timer period limited to 200000 ns [ 787.237662][T20711] kvm: requested 6704 ns i8254 timer period limited to 200000 ns [ 787.259894][T20711] kvm: requested 41904 ns i8254 timer period limited to 200000 ns [ 787.260205][T20711] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 787.260674][T20711] kvm: requested 139123 ns i8254 timer period limited to 200000 ns [ 787.260879][T20711] kvm: requested 3352 ns i8254 timer period limited to 200000 ns [ 787.304325][T20711] kvm: requested 100571 ns i8254 timer period limited to 200000 ns [ 787.305133][T20711] kvm: requested 53638 ns i8254 timer period limited to 200000 ns [ 787.434077][T20708] binfmt_misc: register: failed to install interpreter ./file0 [ 787.587452][T20720] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3887'. [ 787.617286][T20720] syzkaller1: entered promiscuous mode [ 787.622915][T20720] syzkaller1: entered allmulticast mode [ 787.631640][T20720] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3887'. [ 787.876697][ T5736] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -110 [ 787.876739][ T5736] stv0680 5-1:4.0: STV(e): camera ping failed!! [ 787.885380][ T5736] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 787.885405][ T5736] stv0680 5-1:4.0: last error: 0, command = 0x0 [ 787.911283][ T5736] usb 5-1: USB disconnect, device number 125 [ 788.065598][ T48] usb 9-1: new high-speed USB device number 58 using dummy_hcd [ 788.205889][ T123] usb 10-1: new high-speed USB device number 35 using dummy_hcd [ 788.231846][ T48] usb 9-1: unable to get BOS descriptor or descriptor too short [ 788.231914][ T48] usb 9-1: New USB device found, idVendor=041e, idProduct=3040, bcdDevice= 0.40 [ 788.250432][ T48] usb 9-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 788.250464][ T48] usb 9-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 788.250498][ T48] usb 9-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 788.250515][ T48] usb 9-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 788.252838][ T48] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 788.252861][ T48] usb 9-1: Product: syz [ 788.252874][ T48] usb 9-1: Manufacturer: syz [ 788.252888][ T48] usb 9-1: SerialNumber: syz [ 788.368537][ T123] usb 10-1: unable to get BOS descriptor or descriptor too short [ 788.368610][ T123] usb 10-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 788.369890][ T123] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 788.369911][ T123] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 788.377981][ T123] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 788.378005][ T123] usb 10-1: Product: syz [ 788.378019][ T123] usb 10-1: Manufacturer: syz [ 788.378055][ T123] usb 10-1: SerialNumber: syz [ 788.419453][ T123] usb 10-1: selecting invalid altsetting 1 [ 788.426462][ T123] usb 10-1: unit 6 not found! [ 788.592604][ T48] usb 9-1: USB disconnect, device number 58 [ 788.626589][T20735] loop5: detected capacity change from 0 to 7 [ 788.637939][T20735] Dev loop5: unable to read RDB block 7 [ 788.638023][T20735] loop5: unable to read partition table [ 788.638258][T20735] loop5: partition table beyond EOD, truncated [ 788.638309][T20735] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 789.525648][ T5708] usb 9-1: new high-speed USB device number 59 using dummy_hcd [ 789.676360][ T5708] usb 9-1: New USB device found, idVendor=056a, idProduct=0335, bcdDevice= 0.00 [ 789.688393][ T5708] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 789.688447][ T5708] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 789.688472][ T5708] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 789.688511][ T5708] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 789.702675][ T5708] usb 9-1: config 0 descriptor?? [ 789.831689][T20755] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3899'. [ 789.853751][T20755] syzkaller1: entered promiscuous mode [ 789.853794][T20755] syzkaller1: entered allmulticast mode [ 789.857893][T20755] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3899'. [ 790.163393][T20747] binder: 20746:20747 ioctl c018aa3f 80000180 returned -22 [ 790.204404][ T5708] wacom 0003:056A:0335.0047: hidraw0: USB HID v0.00 Joystick [HID 056a:0335] on usb-dummy_hcd.8-1/input0 [ 790.400173][ T5708] usb 9-1: USB disconnect, device number 59 [ 790.695571][ T5678] usb 5-1: new full-speed USB device number 126 using dummy_hcd [ 790.847373][ T5678] usb 5-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 790.850213][ T5678] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 790.850383][ T5678] usb 5-1: Product: syz [ 790.850397][ T5678] usb 5-1: Manufacturer: syz [ 790.850411][ T5678] usb 5-1: SerialNumber: syz [ 790.853133][ T5678] usb 5-1: config 0 descriptor?? [ 791.137601][T20769] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3905'. [ 791.147183][ T5678] usb 5-1: USB disconnect, device number 126 [ 791.219476][ T123] snd-usb-audio 10-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 791.235437][ T123] usb 10-1: USB disconnect, device number 35 [ 791.335571][ T48] usb 9-1: new high-speed USB device number 60 using dummy_hcd [ 791.344985][T11423] udevd[11423]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 791.457150][ T5725] udevd[5725]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 791.486600][ T48] usb 9-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 791.499775][ T48] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 791.510407][ T48] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 791.520168][ T48] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 791.520195][ T48] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 791.520239][ T48] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 791.763896][ T48] gud 9-1:1.0: Protocol version 9 is not supported [ 791.993277][ T30] audit: type=1326 audit(1788323597.520:1934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20774 comm="syz.8.3908" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703f0ec code=0x7ffc0000 [ 792.019178][ T30] audit: type=1326 audit(1788323597.550:1935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20774 comm="syz.8.3908" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=153 compat=1 ip=0xf703f0ec code=0x7ffc0000 [ 792.044539][ T30] audit: type=1326 audit(1788323597.570:1936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20774 comm="syz.8.3908" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703f0ec code=0x7ffc0000 [ 792.044600][ T30] audit: type=1326 audit(1788323597.570:1937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20774 comm="syz.8.3908" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703f0ec code=0x7ffc0000 [ 792.068631][ T30] audit: type=1326 audit(1788323597.600:1938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20774 comm="syz.8.3908" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=248 compat=1 ip=0xf703f0ec code=0x7ffc0000 [ 792.068679][ T30] audit: type=1326 audit(1788323597.600:1939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20774 comm="syz.8.3908" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703f0ec code=0x7ffc0000 [ 792.069816][ T30] audit: type=1326 audit(1788323597.600:1940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20774 comm="syz.8.3908" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf703f0ec code=0x7ffc0000 [ 792.069858][ T30] audit: type=1326 audit(1788323597.600:1941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20774 comm="syz.8.3908" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703f0ec code=0x7ffc0000 [ 792.069894][ T30] audit: type=1326 audit(1788323597.600:1942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20774 comm="syz.8.3908" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703f0ec code=0x7ffc0000 [ 792.073868][ T30] audit: type=1326 audit(1788323597.600:1943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20774 comm="syz.8.3908" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf703f0ec code=0x7ffc0000 [ 792.411609][T20792] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3913'. [ 792.565912][ T5736] usb 10-1: new high-speed USB device number 36 using dummy_hcd [ 792.694802][T20799] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3916'. [ 792.715110][T20799] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3916'. [ 792.717551][ T5736] usb 10-1: unable to get BOS descriptor or descriptor too short [ 792.717600][ T5736] usb 10-1: New USB device found, idVendor=041e, idProduct=3040, bcdDevice= 0.40 [ 792.718535][ T5736] usb 10-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 792.718555][ T5736] usb 10-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 792.718571][ T5736] usb 10-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 792.718588][ T5736] usb 10-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 792.720444][ T5736] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 792.720467][ T5736] usb 10-1: Product: syz [ 792.720481][ T5736] usb 10-1: Manufacturer: syz [ 792.720494][ T5736] usb 10-1: SerialNumber: syz [ 792.973456][T20804] syzkaller0: entered promiscuous mode [ 792.973499][T20804] syzkaller0: entered allmulticast mode [ 792.993463][T20804] tipc: Enabled bearer , priority 0 [ 793.025413][T20804] tipc: Resetting bearer [ 793.044762][T20803] tipc: Resetting bearer [ 793.083760][ T5736] usb 10-1: USB disconnect, device number 36 [ 793.096757][T20803] tipc: Disabling bearer [ 793.446889][T20810] FAULT_INJECTION: forcing a failure. [ 793.446889][T20810] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 793.446925][T20810] CPU: 0 UID: 0 PID: 20810 Comm: syz.2.3920 Tainted: G L syzkaller #0 PREEMPT(full) [ 793.446949][T20810] Tainted: [L]=SOFTLOCKUP [ 793.446955][T20810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 793.446965][T20810] Call Trace: [ 793.446972][T20810] [ 793.446979][T20810] dump_stack_lvl+0xe8/0x150 [ 793.447007][T20810] should_fail_ex+0x410/0x560 [ 793.447039][T20810] _copy_from_user+0x2d/0xb0 [ 793.447063][T20810] snd_seq_write+0x309/0x820 [ 793.447097][T20810] ? __pfx_snd_seq_write+0x10/0x10 [ 793.447119][T20810] ? bpf_lsm_file_permission+0x9/0x20 [ 793.447142][T20810] ? security_file_permission+0x75/0x260 [ 793.447169][T20810] ? rw_verify_area+0x203/0x4c0 [ 793.447198][T20810] vfs_writev+0x4bb/0x990 [ 793.447220][T20810] ? __pfx_snd_seq_write+0x10/0x10 [ 793.447245][T20810] ? __pfx_vfs_writev+0x10/0x10 [ 793.447278][T20810] ? __fget_files+0x2a/0x420 [ 793.447305][T20810] ? __fget_files+0x3a2/0x420 [ 793.447326][T20810] ? __fget_files+0x2a/0x420 [ 793.447357][T20810] do_writev+0x154/0x2e0 [ 793.447379][T20810] ? __pfx_do_writev+0x10/0x10 [ 793.447407][T20810] __do_fast_syscall_32+0x27a/0x6a0 [ 793.447435][T20810] ? do_fast_syscall_32+0x33/0x70 [ 793.447460][T20810] ? asm_int80_emulation+0x1a/0x20 [ 793.447477][T20810] ? do_int80_emulation+0x299/0x500 [ 793.447501][T20810] ? trace_irq_disable+0x3b/0x140 [ 793.447523][T20810] do_fast_syscall_32+0x33/0x70 [ 793.447549][T20810] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 793.447570][T20810] RIP: 0023:0xf701f0ec [ 793.447587][T20810] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 793.447603][T20810] RSP: 002b:00000000f540d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000092 [ 793.447623][T20810] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000580 [ 793.447635][T20810] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 793.447645][T20810] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 793.447656][T20810] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 793.447666][T20810] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 793.447693][T20810] [ 794.213354][ T5678] usb 9-1: USB disconnect, device number 60 [ 794.545638][ T7057] usb 5-1: new high-speed USB device number 127 using dummy_hcd [ 794.567457][T20831] FAULT_INJECTION: forcing a failure. [ 794.567457][T20831] name failslab, interval 1, probability 0, space 0, times 0 [ 794.567518][T20831] CPU: 0 UID: 0 PID: 20831 Comm: syz.2.3927 Tainted: G L syzkaller #0 PREEMPT(full) [ 794.567541][T20831] Tainted: [L]=SOFTLOCKUP [ 794.567549][T20831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 794.567558][T20831] Call Trace: [ 794.567564][T20831] [ 794.567570][T20831] dump_stack_lvl+0xe8/0x150 [ 794.567609][T20831] should_fail_ex+0x410/0x560 [ 794.567642][T20831] should_failslab+0xa8/0x100 [ 794.567665][T20831] __kmalloc_cache_noprof+0xa3/0x600 [ 794.567699][T20831] ? nfulnl_recv_config+0xd98/0x1680 [ 794.567723][T20831] ? nfulnl_recv_config+0xd98/0x1680 [ 794.567753][T20831] nfulnl_recv_config+0xd98/0x1680 [ 794.567787][T20831] nfnetlink_rcv_msg+0xcc2/0x12b0 [ 794.567806][T20831] ? unwind_get_return_address+0x4d/0x90 [ 794.567829][T20831] ? nfnetlink_rcv_msg+0x228/0x12b0 [ 794.567865][T20831] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 794.567930][T20831] netlink_rcv_skb+0x226/0x4a0 [ 794.567952][T20831] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 794.567973][T20831] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 794.568005][T20831] ? bpf_lsm_capable+0x9/0x20 [ 794.568030][T20831] ? security_capable+0x7e/0x2c0 [ 794.568064][T20831] nfnetlink_rcv+0x2b9/0x28c0 [ 794.568086][T20831] ? __dev_queue_xmit+0x29b/0x3820 [ 794.568110][T20831] ? __local_bh_enable_ip+0xd6/0x140 [ 794.568133][T20831] ? lockdep_hardirqs_on+0x7b/0x110 [ 794.568161][T20831] ? __dev_queue_xmit+0x29b/0x3820 [ 794.568179][T20831] ? __local_bh_enable_ip+0xd6/0x140 [ 794.568200][T20831] ? __dev_queue_xmit+0x29b/0x3820 [ 794.568220][T20831] ? __dev_queue_xmit+0x1edc/0x3820 [ 794.568239][T20831] ? __do_fast_syscall_32+0x27a/0x6a0 [ 794.568265][T20831] ? do_fast_syscall_32+0x33/0x70 [ 794.568301][T20831] ? __dev_queue_xmit+0x29b/0x3820 [ 794.568322][T20831] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 794.568347][T20831] ? __pfx___dev_queue_xmit+0x10/0x10 [ 794.568375][T20831] ? ref_tracker_free+0x689/0x830 [ 794.568395][T20831] ? __pfx_ref_tracker_free+0x10/0x10 [ 794.568422][T20831] ? __skb_clone+0x449/0x6c0 [ 794.568448][T20831] ? skb_clone+0x246/0x3a0 [ 794.568470][T20831] ? __netlink_deliver_tap+0x811/0x860 [ 794.568490][T20831] ? netlink_deliver_tap+0x2e/0x1b0 [ 794.568518][T20831] ? netlink_deliver_tap+0x2e/0x1b0 [ 794.568538][T20831] ? netlink_deliver_tap+0x2e/0x1b0 [ 794.568565][T20831] netlink_unicast+0x7bd/0x940 [ 794.568599][T20831] netlink_sendmsg+0x813/0xb40 [ 794.568630][T20831] ? __pfx_netlink_sendmsg+0x10/0x10 [ 794.568659][T20831] ? apparmor_socket_sendmsg+0x98/0x360 [ 794.568688][T20831] ? __pfx_netlink_sendmsg+0x10/0x10 [ 794.568708][T20831] sock_sendmsg_nosec+0x13a/0x180 [ 794.568744][T20831] ____sys_sendmsg+0x54e/0x850 [ 794.568769][T20831] ? __pfx_____sys_sendmsg+0x10/0x10 [ 794.568805][T20831] ___sys_sendmsg+0x2a5/0x360 [ 794.568824][T20831] ? __lock_acquire+0x6df/0x2e50 [ 794.568846][T20831] ? __pfx____sys_sendmsg+0x10/0x10 [ 794.568865][T20831] ? get_pid_task+0x20/0x1f0 [ 794.568882][T20831] ? get_pid_task+0x20/0x1f0 [ 794.568897][T20831] ? get_pid_task+0x20/0x1f0 [ 794.568942][T20831] ? __fget_files+0x2a/0x420 [ 794.568965][T20831] ? __fget_files+0x3a2/0x420 [ 794.568998][T20831] __sys_sendmsg+0x177/0x240 [ 794.569018][T20831] ? __pfx___sys_sendmsg+0x10/0x10 [ 794.569056][T20831] __do_fast_syscall_32+0x27a/0x6a0 [ 794.569082][T20831] ? do_fast_syscall_32+0x33/0x70 [ 794.569107][T20831] ? asm_int80_emulation+0x1a/0x20 [ 794.569124][T20831] ? do_int80_emulation+0x299/0x500 [ 794.569149][T20831] ? trace_irq_disable+0x3b/0x140 [ 794.569171][T20831] do_fast_syscall_32+0x33/0x70 [ 794.569197][T20831] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 794.569218][T20831] RIP: 0023:0xf701f0ec [ 794.569235][T20831] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 794.569251][T20831] RSP: 002b:00000000f540d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 794.569270][T20831] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000300 [ 794.569284][T20831] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 794.569295][T20831] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 794.569305][T20831] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 794.569316][T20831] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 794.569344][T20831] [ 794.726440][ T5678] usb 10-1: new high-speed USB device number 37 using dummy_hcd [ 794.744241][T20833] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3928'. [ 794.749407][ T7057] usb 5-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 794.751685][T20833] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3928'. [ 794.813835][ T48] usb 9-1: new high-speed USB device number 61 using dummy_hcd [ 794.824822][ T7057] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 794.824852][ T7057] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 794.824875][ T7057] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 794.824897][ T7057] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 794.824932][ T7057] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 794.829038][T20823] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 794.829164][T20823] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 794.834867][ T7057] pl2303 5-1:1.0: pl2303 converter detected [ 794.845016][ T7057] usb 5-1: pl2303 converter now attached to ttyUSB0 [ 795.005574][ T48] usb 9-1: Using ep0 maxpacket: 8 [ 795.006260][ T48] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 795.008387][ T48] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 795.008430][ T48] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 795.012779][ T48] usb 9-1: config 0 descriptor?? [ 795.049150][ T5678] usb 10-1: unable to get BOS descriptor or descriptor too short [ 795.049198][ T5678] usb 10-1: New USB device found, idVendor=041e, idProduct=3040, bcdDevice= 0.40 [ 795.086150][ T5678] usb 10-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 795.086175][ T5678] usb 10-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 795.086192][ T5678] usb 10-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 795.086208][ T5678] usb 10-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 795.127153][T20812] raw_sendmsg: syz.4.3921 forgot to set AF_INET. Fix it! [ 795.130745][ T7057] usb 5-1: USB disconnect, device number 127 [ 795.158758][ T5678] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 795.158786][ T5678] usb 10-1: Product: syz [ 795.158800][ T5678] usb 10-1: Manufacturer: syz [ 795.158814][ T5678] usb 10-1: SerialNumber: syz [ 795.167424][ T7057] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 795.174890][ T7057] pl2303 5-1:1.0: device disconnected [ 795.302746][ T48] iowarrior 9-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 795.502489][T20828] fuse: Unknown parameter 'fuse' [ 795.643122][ T5678] usb 10-1: USB disconnect, device number 37 [ 795.653745][ T5618] udevd[5618]: setting mode of /dev/bus/usb/010/037 to 020664 failed: No such file or directory [ 795.666029][ T5618] udevd[5618]: setting owner of /dev/bus/usb/010/037 to uid=0, gid=0 failed: No such file or directory [ 796.304081][T20857] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3934'. [ 796.337618][T20857] syzkaller1: entered promiscuous mode [ 796.343721][T20857] syzkaller1: entered allmulticast mode [ 796.356415][T20857] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3934'. [ 796.480546][T20864] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3937'. [ 796.531113][ T48] usb 10-1: new high-speed USB device number 38 using dummy_hcd [ 796.550087][T20864] syzkaller1: entered promiscuous mode [ 796.550124][T20864] syzkaller1: entered allmulticast mode [ 796.553261][T20864] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3937'. [ 796.680364][T20869] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3780442281 (7560884562 ns) > initial count (4669583980 ns). Using initial count to start timer. [ 796.698905][ T48] usb 10-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 796.711586][ T48] usb 10-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 796.711676][ T48] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 796.743832][ T48] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 796.931871][T20879] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3943'. [ 797.886413][ T5736] usb 9-1: USB disconnect, device number 61 [ 798.162977][T20896] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 798.165456][T20886] netlink: 144 bytes leftover after parsing attributes in process `syz.9.3933'. [ 798.181732][T20896] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3948'. [ 798.181928][T20896] FAULT_INJECTION: forcing a failure. [ 798.181928][T20896] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 798.181956][T20896] CPU: 0 UID: 0 PID: 20896 Comm: syz.8.3948 Tainted: G L syzkaller #0 PREEMPT(full) [ 798.181980][T20896] Tainted: [L]=SOFTLOCKUP [ 798.181987][T20896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 798.181999][T20896] Call Trace: [ 798.182007][T20896] [ 798.182015][T20896] dump_stack_lvl+0xe8/0x150 [ 798.182045][T20896] should_fail_ex+0x410/0x560 [ 798.182077][T20896] _copy_to_user+0x31/0xb0 [ 798.182099][T20896] simple_read_from_buffer+0xe1/0x170 [ 798.182128][T20896] proc_fail_nth_read+0x1bb/0x230 [ 798.182153][T20896] ? common_file_perm+0x20e/0x2b0 [ 798.182174][T20896] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 798.182204][T20896] ? rw_verify_area+0x24a/0x4c0 [ 798.182230][T20896] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 798.182255][T20896] vfs_read+0x213/0xa80 [ 798.182284][T20896] ? __pfx___mutex_lock+0x10/0x10 [ 798.182311][T20896] ? __pfx_vfs_read+0x10/0x10 [ 798.182337][T20896] ? __fget_files+0x2a/0x420 [ 798.182363][T20896] ? __fget_files+0x3a2/0x420 [ 798.182385][T20896] ? __fget_files+0x2a/0x420 [ 798.182416][T20896] ksys_read+0x150/0x270 [ 798.182443][T20896] ? __pfx_ksys_read+0x10/0x10 [ 798.182471][T20896] ? asm_int80_emulation+0x1a/0x20 [ 798.182497][T20896] do_int80_emulation+0x198/0x500 [ 798.182524][T20896] ? asm_int80_emulation+0x1a/0x20 [ 798.182541][T20896] ? clear_bhb_loop+0x70/0xc0 [ 798.182559][T20896] ? clear_bhb_loop+0x70/0xc0 [ 798.182580][T20896] asm_int80_emulation+0x1a/0x20 [ 798.182597][T20896] RIP: 0023:0xf71775ab [ 798.182614][T20896] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 798.182630][T20896] RSP: 002b:00000000f542d4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 798.182654][T20896] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f542d5d0 [ 798.182666][T20896] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 798.182677][T20896] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 798.182688][T20896] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 798.182699][T20896] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 798.182726][T20896] [ 798.235216][T20886] create_pit_timer: 10 callbacks suppressed [ 798.235233][T20886] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 798.298254][T20856] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 798.298656][T20856] kvm: requested 88838 ns i8254 timer period limited to 200000 ns [ 798.298713][T20856] kvm: requested 6704 ns i8254 timer period limited to 200000 ns [ 798.299038][T20856] kvm: requested 41904 ns i8254 timer period limited to 200000 ns [ 798.299312][T20856] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 798.299784][T20856] kvm: requested 139123 ns i8254 timer period limited to 200000 ns [ 798.299992][T20856] kvm: requested 3352 ns i8254 timer period limited to 200000 ns [ 798.300162][T20856] kvm: requested 100571 ns i8254 timer period limited to 200000 ns [ 798.300906][T20856] kvm: requested 53638 ns i8254 timer period limited to 200000 ns [ 798.575721][ T48] gspca_stv0680: usb_control_msg error 2, request = 0x6, error = -110 [ 798.584205][ T48] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -32 [ 798.584228][ T48] stv0680 10-1:4.0: last error: 86, command = 0x78 [ 798.680267][T20904] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3950'. [ 798.727251][T20904] syzkaller1: entered promiscuous mode [ 798.727308][T20904] syzkaller1: entered allmulticast mode [ 798.737411][T20904] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3950'. [ 799.077194][ T48] usb 10-1: USB disconnect, device number 38 [ 799.527695][ T5678] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 799.565190][T20931] netlink: 88 bytes leftover after parsing attributes in process `syz.8.3960'. [ 799.611323][T20931] tipc: Enabled bearer , priority 0 [ 799.677375][ T5678] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 799.681414][ T5678] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 799.681508][ T5678] usb 5-1: Product: syz [ 799.681522][ T5678] usb 5-1: Manufacturer: syz [ 799.681536][ T5678] usb 5-1: SerialNumber: syz [ 800.140768][ T5678] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 800.140863][ T5678] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 800.380434][T20930] tipc: Disabling bearer [ 800.967226][ T7057] usb 10-1: new high-speed USB device number 39 using dummy_hcd [ 801.135662][ T7057] usb 10-1: Using ep0 maxpacket: 16 [ 801.141733][ T7057] usb 10-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 801.152191][ T7057] usb 10-1: config index 0 descriptor too short (expected 16456, got 72) [ 801.152237][ T7057] usb 10-1: config 0 has an invalid interface number: 125 but max is 1 [ 801.152271][ T7057] usb 10-1: config 0 has an invalid interface number: 125 but max is 1 [ 801.152293][ T7057] usb 10-1: config 0 has an invalid interface number: 125 but max is 1 [ 801.152314][ T7057] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 801.152335][ T7057] usb 10-1: config 0 has no interface number 0 [ 801.152377][ T7057] usb 10-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 801.152408][ T7057] usb 10-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 801.152433][ T7057] usb 10-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 801.152465][ T7057] usb 10-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 801.152488][ T7057] usb 10-1: config 0 interface 125 has no altsetting 0 [ 801.254031][ T7057] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 801.254058][ T7057] usb 10-1: Product: syz [ 801.254074][ T7057] usb 10-1: Manufacturer: syz [ 801.254088][ T7057] usb 10-1: SerialNumber: syz [ 801.278601][ T7057] usb 10-1: config 0 descriptor?? [ 801.352834][ T5678] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 801.692517][T20961] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3971'. [ 801.699679][ T48] usb 10-1: USB disconnect, device number 39 [ 801.757153][ T5678] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPIPE [ 802.260630][ T5678] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 802.260702][ T5678] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 802.289565][ T5678] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 802.306622][ T5678] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 802.329499][ T5678] usb 5-1: USB disconnect, device number 2 [ 803.192080][T20981] netlink: 88 bytes leftover after parsing attributes in process `syz.9.3978'. [ 803.219228][T20981] tipc: Enabled bearer , priority 0 [ 803.704332][T20994] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3982'. [ 803.891972][T21000] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3984'. [ 804.023120][T20979] tipc: Disabling bearer [ 804.086115][ T123] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 804.235889][ T123] usb 5-1: Using ep0 maxpacket: 32 [ 804.236703][ T123] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 804.244187][ T123] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 804.244211][ T123] usb 5-1: config 0 has no interface number 0 [ 804.249694][ T123] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 804.249717][ T123] usb 5-1: Product: syz [ 804.249731][ T123] usb 5-1: Manufacturer: syz [ 804.249744][ T123] usb 5-1: SerialNumber: syz [ 804.261600][ T123] usb 5-1: config 0 descriptor?? [ 804.677766][ T123] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 804.677805][ T123] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 804.889041][ T123] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 804.889292][ T123] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -61 [ 805.082342][T21016] syzkaller1: entered promiscuous mode [ 805.082372][T21016] syzkaller1: entered allmulticast mode [ 805.093378][T21016] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3991'. [ 805.115686][ T5679] usb 5-1: USB disconnect, device number 3 [ 805.997256][ T123] usb 9-1: new high-speed USB device number 62 using dummy_hcd [ 806.158013][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 806.158054][ T30] audit: type=1326 audit(1788323611.680:1947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21036 comm="syz.9.3999" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf703f0ec code=0x7ffc0000 [ 806.190659][ T123] usb 9-1: New USB device found, idVendor=056a, idProduct=0335, bcdDevice= 0.00 [ 806.201405][ T123] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 806.201450][ T123] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 806.201474][ T123] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 806.201516][ T123] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 806.248166][ T123] usb 9-1: config 0 descriptor?? [ 806.262314][ T30] audit: type=1326 audit(1788323611.790:1948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21036 comm="syz.9.3999" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf703f0ec code=0x7ffc0000 [ 806.269421][ T30] audit: type=1326 audit(1788323611.800:1949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21036 comm="syz.9.3999" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf703f0ec code=0x7ffc0000 [ 806.269469][ T30] audit: type=1326 audit(1788323611.800:1950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21036 comm="syz.9.3999" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf703f0ec code=0x7ffc0000 [ 806.269505][ T30] audit: type=1326 audit(1788323611.800:1951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21036 comm="syz.9.3999" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf703f0ec code=0x7ffc0000 [ 806.269540][ T30] audit: type=1326 audit(1788323611.800:1952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21036 comm="syz.9.3999" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf703f0ec code=0x7ffc0000 [ 806.269576][ T30] audit: type=1326 audit(1788323611.800:1953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21036 comm="syz.9.3999" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf703f0ec code=0x7ffc0000 [ 806.427791][ T30] audit: type=1326 audit(1788323611.950:1954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21036 comm="syz.9.3999" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf703f0ec code=0x7ffc0000 [ 806.427867][ T30] audit: type=1326 audit(1788323611.960:1955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21036 comm="syz.9.3999" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf703f0ec code=0x7ffc0000 [ 806.431523][ T30] audit: type=1326 audit(1788323611.960:1956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21036 comm="syz.9.3999" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf703f0ec code=0x7ffc0000 [ 806.717165][T21026] binder: 21025:21026 ioctl c018aa3f 80000180 returned -22 [ 806.786110][ T123] wacom 0003:056A:0335.0048: hidraw0: USB HID v0.00 Joystick [HID 056a:0335] on usb-dummy_hcd.8-1/input0 [ 806.949989][ T5679] usb 9-1: USB disconnect, device number 62 [ 807.908144][ T5679] usb 9-1: new high-speed USB device number 63 using dummy_hcd [ 808.010079][ T31] INFO: task kworker/0:0:9 blocked for more than 143 seconds. [ 808.010121][ T31] Tainted: G L syzkaller #0 [ 808.010147][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 808.010161][ T31] task:kworker/0:0 stat ** replaying previous printk message ** [ 808.010161][ T31] task:kworker/0:0 state:D stack:20576 pid:9 tgid:9 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 808.010228][ T31] Workqueue: events_freezable mmc_rescan [ 808.010263][ T31] Call Trace: [ 808.010273][ T31] [ 808.010288][ T31] __schedule+0x17db/0x58f0 [ 808.010332][ T31] ? __pfx___schedule+0x10/0x10 [ 808.010362][ T31] ? schedule+0x90/0x2b0 [ 808.010389][ T31] schedule+0x164/0x2b0 [ 808.010414][ T31] schedule_timeout+0xc0/0x2c0 [ 808.010436][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 808.010458][ T31] ? preempt_schedule_thunk+0x16/0x40 [ 808.010478][ T31] ? wait_for_completion+0x272/0x5e0 [ 808.010503][ T31] ? preempt_schedule_common+0x7f/0xd0 [ 808.010528][ T31] ? preempt_schedule_thunk+0x16/0x40 [ 808.010560][ T31] ? wait_for_completion+0x272/0x5e0 [ 808.010586][ T31] wait_for_completion+0x2ca/0x5e0 [ 808.010622][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 808.010648][ T31] ? vub300_mmc_request+0x1000/0x1910 [ 808.010676][ T31] ? trace_mmc_request_start+0x81/0x1e0 [ 808.010698][ T31] mmc_wait_for_req_done+0x37/0x490 [ 808.010722][ T31] ? mmc_start_request+0x202/0x2d0 [ 808.010742][ T31] ? mmc_wait_for_req+0x1b5/0x240 [ 808.010763][ T31] mmc_wait_for_cmd+0x183/0x2a0 [ 808.010785][ T31] ? __pfx_mmc_wait_for_cmd+0x10/0x10 [ 808.010822][ T31] ? __pfx_mmc_wait_done+0x10/0x10 [ 808.010852][ T31] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 808.010884][ T31] sdio_reset+0xf4/0x3a0 [ 808.010905][ T31] ? __pfx_sdio_reset+0x10/0x10 [ 808.010932][ T31] ? __mmc_claim_host+0x162/0x650 [ 808.010961][ T31] ? mmc_power_up+0x5d/0x650 [ 808.010980][ T31] ? mmc_attach_sd_uhs2+0x5e/0x900 [ 808.011010][ T31] mmc_rescan+0x6eb/0x1040 [ 808.011049][ T31] ? process_scheduled_works+0x97a/0x1630 [ 808.011073][ T31] process_scheduled_works+0xc3d/0x1630 [ 808.011125][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 808.011167][ T31] ? assign_work+0x3cf/0x5d0 [ 808.011196][ T31] worker_thread+0xa47/0xfb0 [ 808.011245][ T31] kthread+0x38b/0x480 [ 808.011263][ T31] ? __pfx_worker_thread+0x10/0x10 [ 808.011285][ T31] ? __pfx_kthread+0x10/0x10 [ 808.011305][ T31] ret_from_fork+0x514/0xb70 [ 808.011326][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 808.011354][ T31] ? __switch_to+0xc89/0x1420 [ 808.011380][ T31] ? __pfx_kthread+0x10/0x10 [ 808.011400][ T31] ret_from_fork_asm+0x1a/0x30 [ 808.011442][ T31] [ 808.011491][ T31] INFO: task kworker/0:2:988 blocked for more than 143 seconds. [ 808.011507][ T31] Tainted: G L syzkaller #0 [ 808.011518][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 808.011527][ T31] task:kworker/0:2 state:D stack:20136 pid:988 tgid:988 ppid:2 task_flags:0x4288060 flags:0x00080000 [ 808.011578][ T31] Workqueue: usb_hub_wq hub_event [ 808.011596][ T31] Call Trace: [ 808.011602][ T31] [ 808.011614][ T31] __schedule+0x17db/0x58f0 [ 808.019241][ T31] ? __pfx___schedule+0x10/0x10 [ 808.019285][ T31] ? schedule+0x90/0x2b0 [ 808.019313][ T31] schedule+0x164/0x2b0 [ 808.019340][ T31] schedule_timeout+0xc0/0x2c0 [ 808.019361][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 808.019383][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 808.019416][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 808.019440][ T31] ? wait_for_completion+0x272/0x5e0 [ 808.019465][ T31] wait_for_completion+0x2ca/0x5e0 [ 808.019500][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 808.019532][ T31] ? __flush_work+0x101/0xca0 [ 808.019570][ T31] __flush_work+0xa63/0xca0 [ 808.019597][ T31] ? __flush_work+0x101/0xca0 [ 808.019623][ T31] ? __pfx___flush_work+0x10/0x10 [ 808.019650][ T31] ? __pfx_wq_barrier_func+0x10/0x10 [ 808.019695][ T31] ? __cancel_work_sync+0x5c/0x110 [ 808.019723][ T31] __cancel_work_sync+0xbf/0x110 [ 808.019751][ T31] mmc_stop_host+0xd9/0x460 [ 808.019778][ T31] mmc_remove_host+0x15/0x60 [ 808.019803][ T31] vub300_disconnect+0x154/0x2f0 [ 808.019828][ T31] usb_unbind_interface+0x295/0x9f0 [ 808.019848][ T31] ? kernfs_remove_by_name_ns+0x101/0x140 [ 808.019875][ T31] ? kernfs_remove_by_name_ns+0x101/0x140 [ 808.019897][ T31] ? __pfx_usb_unbind_interface+0x10/0x10 [ 808.019916][ T31] device_release_driver_internal+0x4f5/0x880 [ 808.019942][ T31] bus_remove_device+0x444/0x560 [ 808.019971][ T31] ? __pfx_bus_remove_device+0x10/0x10 [ 808.019997][ T31] ? kernfs_remove_by_name_ns+0x101/0x140 [ 808.020021][ T31] device_del+0x524/0x8f0 [ 808.020055][ T31] ? __pfx_device_del+0x10/0x10 [ 808.020080][ T31] ? kobject_put+0x516/0x550 [ 808.020107][ T31] usb_disable_device+0x3d4/0x8d0 [ 808.020144][ T31] usb_disconnect+0x346/0x9a0 [ 808.020178][ T31] hub_event+0x1bbb/0x4d30 [ 808.020194][ T31] ? do_raw_spin_unlock+0xf5/0x200 [ 808.020230][ T31] ? register_lock_class+0x31/0x2e0 [ 808.020280][ T31] ? __pfx_hub_event+0x10/0x10 [ 808.020305][ T31] ? rcu_is_watching+0x16/0xb0 [ 808.020328][ T31] ? process_scheduled_works+0x97a/0x1630 [ 808.020352][ T31] process_scheduled_works+0xc3d/0x1630 [ 808.020404][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 808.020434][ T31] ? assign_work+0x3cf/0x5d0 [ 808.020462][ T31] worker_thread+0xa47/0xfb0 [ 808.020499][ T31] ? __kthread_parkme+0x71/0x1f0 [ 808.020534][ T31] kthread+0x38b/0x480 [ 808.020558][ T31] ? __pfx_worker_thread+0x10/0x10 [ 808.020580][ T31] ? __pfx_kthread+0x10/0x10 [ 808.020599][ T31] ret_from_fork+0x514/0xb70 [ 808.020620][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 808.020648][ T31] ? __switch_to+0xc89/0x1420 [ 808.020675][ T31] ? __pfx_kthread+0x10/0x10 [ 808.020694][ T31] ret_from_fork_asm+0x1a/0x30 [ 808.020735][ T31] [ 808.027049][ T31] [ 808.027049][ T31] Showing all locks held in the system: [ 808.027064][ T31] locks held by kworker/0:0/9: 2, on CPU#0: [ 808.027078][ T31] #0: ffff88801b06a140 ((wq_completion)events_freezable){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 808.027136][ T31] #1: ffffc900000e7c40 ((work_completion)(&(&host->detect)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 808.027187][ T31] locks held by pr/ttyS0/16: 2, last CPU#1: [ 808.027199][ T31] #0: ffffffff8ec362b8 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x30/0x60 [ 808.027244][ T31] #1: ffffffff9ad31098 (&port_lock_key){-.-.}-{3:3}, at: univ8250_console_device_lock+0x67/0xc0 [ 808.027293][ T31] locks held by khungtaskd/31: 1, last CPU#0: [ 808.027306][ T31] #0: ffffffff8ed5c6e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 808.027356][ T31] locks held by kworker/0:2/988: 5, on CPU#0: [ 808.027369][ T31] #0: ffff88801f29c140 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 808.027417][ T31] #1: ffffc90004d07c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 808.027464][ T31] #2: ffff8880299f41d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4d30 [ 808.027504][ T31] #3: ffff8880223061d8 (&dev->mutex){....}-{4:4}, at: usb_disconnect+0xfc/0x9a0 [ 808.027557][ T31] #4: ffff8880527951a0 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb9/0x880 [ 808.027619][ T31] locks held by getty/5372: 2, on CPU#1: [ 808.027632][ T31] #0: ffff888035c510a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 808.027678][ T31] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 808.027722][ T31] locks held by kworker/0:5/5679: 6, on CPU#0: [ 808.027735][ T31] #0: ffff88801f29c140 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 808.027782][ T31] #1: ffffc90004b9fc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 808.027829][ T31] #2: ffff88802a07b1d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4d30 [ 808.027868][ T31] #3: ffff88802a07f568 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x20a1/0x4d30 [ 808.027910][ T31] #4: ffff888029f7dd60 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x20c9/0x4d30 [ 808.027950][ T31] #5: ffffffff8fafa788 (ehci_cf_port_reset_rwsem){.+.+}-{4:4}, at: hub_port_reset+0x14d/0x1810 [ 808.027993][ T31] locks held by udevd/11423: 1, last CPU#1: [ 808.028019][ T31] #0: ffffffff8f4ef8f8 (tomoyo_ss){.+.+}-{0:0}, at: tomoyo_path_perm+0x251/0x560 [ 808.028087][ T31] [ 808.028092][ T31] ============================================= [ 808.028092][ T31] [ 808.028101][ T31] NMI backtrace for cpu 0 [ 808.028116][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 808.028140][ T31] Tainted: [L]=SOFTLOCKUP [ 808.028147][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 808.028157][ T31] Call Trace: [ 808.028165][ T31] [ 808.028173][ T31] dump_stack_lvl+0xe8/0x150 [ 808.028199][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 808.028221][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 808.028250][ T31] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 808.028274][ T31] sys_info+0x135/0x170 [ 808.028292][ T31] watchdog+0xfd7/0x1030 [ 808.028317][ T31] ? watchdog+0x1c7/0x1030 [ 808.028343][ T31] kthread+0x38b/0x480 [ 808.028360][ T31] ? __pfx_watchdog+0x10/0x10 [ 808.028375][ T31] ? __pfx_kthread+0x10/0x10 [ 808.028395][ T31] ret_from_fork+0x514/0xb70 [ 808.028415][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 808.028441][ T31] ? __switch_to+0xc89/0x1420 [ 808.028467][ T31] ? __pfx_kthread+0x10/0x10 [ 808.028486][ T31] ret_from_fork_asm+0x1a/0x30 [ 808.028525][ T31] [ 808.028552][ T31] Sending NMI from CPU 0 to CPUs 1: [ 808.028582][ C1] NMI backtrace for cpu 1 [ 808.028597][ C1] CPU: 1 UID: 0 PID: 16 Comm: pr/ttyS0 Tainted: G L syzkaller #0 PREEMPT(full) [ 808.028623][ C1] Tainted: [L]=SOFTLOCKUP [ 808.028630][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 808.028642][ C1] RIP: 0010:io_serial_in+0x77/0xc0 [ 808.028674][ C1] Code: e8 0e db 55 fc 44 89 f9 d3 e3 49 83 c6 40 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 5f a4 c5 fc 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f e9 5a e8 74 06 cc 44 89 f9 80 e1 07 [ 808.028692][ C1] RSP: 0000:ffffc900001578b8 EFLAGS: 00000002 [ 808.028709][ C1] RAX: 1ffffffff35a6200 RBX: 00000000000003fd RCX: 0000000000000000 [ 808.028723][ C1] RDX: 00000000000003fd RSI: 0000000000000000 RDI: 0000000000000020 [ 808.028736][ C1] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 808.028750][ C1] R10: dffffc0000000000 R11: ffffffff8571dfc0 R12: dffffc0000000000 [ 808.028765][ C1] R13: 0000000000000000 R14: ffffffff9ad310c0 R15: 0000000000000000 [ 808.028779][ C1] FS: 0000000000000000(0000) GS:ffff888124dda000(0000) knlGS:0000000000000000 [ 808.028795][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 808.028809][ C1] CR2: 00000000f723ea66 CR3: 0000000052c0c000 CR4: 00000000003526f0 [ 808.028826][ C1] Call Trace: [ 808.028834][ C1] [ 808.028842][ C1] wait_for_lsr+0x184/0x2f0 [ 808.028874][ C1] __serial8250_console_fifo_write+0xcd/0x3e0 [ 808.028901][ C1] serial8250_console_write+0xaa1/0x1200 [ 808.028930][ C1] ? lockdep_hardirqs_on+0x7b/0x110 [ 808.028962][ C1] ? __pfx_serial8250_console_write+0x10/0x10 [ 808.028990][ C1] ? __schedule+0x17f1/0x58f0 [ 808.029023][ C1] nbcon_emit_next_record+0xef5/0x1a90 [ 808.029058][ C1] ? __pfx_nbcon_emit_next_record+0x10/0x10 [ 808.029083][ C1] ? nbcon_context_try_acquire+0x819/0xbd0 [ 808.029112][ C1] ? _raw_spin_lock_irqsave+0x4c/0x60 [ 808.029138][ C1] nbcon_kthread_func+0x679/0x880 [ 808.029162][ C1] ? nbcon_kthread_func+0x163/0x880 [ 808.029182][ C1] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 808.029205][ C1] ? __kthread_parkme+0x71/0x1f0 [ 808.029234][ C1] ? __kthread_parkme+0x199/0x1f0 [ 808.029264][ C1] kthread+0x38b/0x480 [ 808.029283][ C1] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 808.029301][ C1] ? __pfx_kthread+0x10/0x10 [ 808.029320][ C1] ret_from_fork+0x514/0xb70 [ 808.029339][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 808.029370][ C1] ? __switch_to+0xc89/0x1420 [ 808.029397][ C1] ? __pfx_kthread+0x10/0x10 [ 808.029416][ C1] ret_from_fork_asm+0x1a/0x30 [ 808.029454][ C1] [ 808.037968][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 809.210854][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 809.221525][ T31] Tainted: [L]=SOFTLOCKUP [ 809.225832][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 809.235870][ T31] Call Trace: [ 809.239136][ T31] [ 809.242052][ T31] vpanic+0x56d/0xa60 [ 809.246031][ T31] ? __pfx___schedule+0x10/0x10 [ 809.250874][ T31] ? __pfx_vpanic+0x10/0x10 [ 809.255376][ T31] panic+0xc5/0xd0 [ 809.259092][ T31] ? __pfx_panic+0x10/0x10 [ 809.263500][ T31] ? preempt_schedule_common+0x7f/0xd0 [ 809.268949][ T31] ? preempt_schedule_thunk+0x16/0x40 [ 809.274310][ T31] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 809.280455][ T31] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 809.286601][ T31] watchdog+0x1030/0x1030 [ 809.290924][ T31] ? watchdog+0x1c7/0x1030 [ 809.295329][ T31] kthread+0x38b/0x480 [ 809.299382][ T31] ? __pfx_watchdog+0x10/0x10 [ 809.304041][ T31] ? __pfx_kthread+0x10/0x10 [ 809.308632][ T31] ret_from_fork+0x514/0xb70 [ 809.313215][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 809.318321][ T31] ? __switch_to+0xc89/0x1420 [ 809.322995][ T31] ? __pfx_kthread+0x10/0x10 [ 809.327576][ T31] ret_from_fork_asm+0x1a/0x30 [ 809.332356][ T31] [ 809.335648][ T31] Kernel Offset: disabled [ 809.339979][ T31] Rebooting in 86400 seconds..