last executing test programs: 11m34.567164106s ago: executing program 4 (id=3533): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x2c, 0x11, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x101}]}}}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x88}}, 0x0) 11m34.416124309s ago: executing program 4 (id=3534): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x8008af00, &(0x7f0000000000)) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r3 = syz_io_uring_setup(0xcaf, &(0x7f0000000100)={0x0, 0xb601, 0x1, 0x5, 0x9c3}, &(0x7f00000001c0)=0x0, &(0x7f00000000c0)=0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r2, 0xc000000, &(0x7f0000000000), 0x0, 0x1e}) io_uring_enter(r3, 0x847ba, 0x0, 0xe, 0x0, 0x0) 11m32.863464593s ago: executing program 4 (id=3535): socket$nl_xfrm(0x10, 0x3, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f00000001c0)=0x2) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000a40)={'ip6tnl0\x00', &(0x7f00000009c0)={'syztnl0\x00', 0x0, 0x4, 0x6, 0x2, 0x4, 0x31, @mcast2, @mcast1, 0x7, 0x10, 0xe03, 0x1}}) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000200)={'\x00', 0x401, 0x8, 0x1, 0x6, 0x5}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r4, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f00000000c0)=""/34, &(0x7f00000002c0)=0x22) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_emit_ethernet(0x52, &(0x7f0000000280)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x1c, 0x2c, 0x0, @remote, @local, {[], {{0x600, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}, {"5e4cd36bb96bd2b9"}}}}}}}, 0x0) ioctl$KVM_SET_MSRS(r6, 0xc008ae88, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000000000000b6000040"]) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000010) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x2, 0xb49, 0x9, 0x9, 0x4, 0x6}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, {0xb, 0x6}, {0xffff, 0xfff9}, {0x1}}}, 0x24}}, 0x4) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r2, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x142000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="88ffe600", @ANYRES16=0x0, @ANYBLOB="00042abd7000fcdbdf250d0000007400018008000100", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="140002006970365f7674693000000000000000001400020064766d727031000000000000000000001400020076657468305f6d61637674617000000008000100", @ANYRES32=0x0, @ANYBLOB="0800030000000000140002006873723000"/28], 0x88}, 0x1, 0x0, 0x0, 0x80}, 0x4040001) socket$inet6_tcp(0xa, 0x1, 0x0) 11m30.029532556s ago: executing program 4 (id=3543): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = syz_io_uring_setup(0x10d, &(0x7f0000000540)={0x0, 0xd4bb, 0x0, 0xfffffffd}, &(0x7f0000000380)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0x10000, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x80800}) listen(r1, 0x5) io_uring_enter(r2, 0x3517, 0xc2de, 0x9, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$inet6_tcp(0xa, 0x1, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c230000, 0x3, 0x2}) write$tun(r0, &(0x7f0000000140)={@val={0x3, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x8016, 0x1400, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x11, 0x0, @local, @loopback}}}}, 0xfdef) syz_usb_connect(0x0, 0x24, &(0x7f0000004200)=ANY=[@ANYRESHEX=0x0], 0x0) 11m26.330471362s ago: executing program 4 (id=3560): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000000)) fchdir(r0) timer_create(0x6, &(0x7f0000000180)={0x0, 0x11, 0x1, @thr={&(0x7f0000000040)="8c90215da50a83abf8d49d575797b3a2d36e28d8f58b0a6a2d9b79a7430a68c577e4d45063ec71ad46758c9a08962a882f1e1d245785fd4360655b6e94860174dcc2251268037476c170fa2c0ec8195f600787a139367212815b3010d2523a342f7b3f915ea065d277bdf848d73fa612bc085fe49df8dcd04cae4e9223cd75c12886e0ea2145482c8584cf5fa6a550364888b274be1b60772edcb5c3a121c36611776a860bef8f8b94edb596afe49ec49a0f20dad43e09d84940b2458ead4a8cd2174e8639827a", &(0x7f0000000140)="724f16a0a895863ce6e14f576a81468aa207bdceda89337f612ea37e7bfe17e2"}}, &(0x7f00000001c0)) r1 = mq_open(&(0x7f0000000200)='#\x00', 0x80, 0x102, &(0x7f0000000240)={0x4, 0x6, 0x10001, 0x9}) mq_getsetattr(r1, &(0x7f0000000280)={0x80000001, 0x9, 0x6, 0x5}, &(0x7f00000002c0)) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000000300)=""/188) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40046607, &(0x7f00000003c0)=0xfffffffe) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000400)={{0x1, 0x1, 0x18, r1, {0x247}}, './file0\x00'}) r3 = openat(r2, &(0x7f0000000440)='./file0\x00', 0x2, 0x14) getpeername$packet(r3, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000540)={{{@in, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6}}, &(0x7f0000000640)=0xe4) sendmsg$nl_xfrm(r2, &(0x7f0000000b00)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000680)=@polexpire={0x414, 0x1b, 0x10, 0x70bd2c, 0x25dfdbfc, {{{@in6=@remote, @in=@remote, 0x4e22, 0x2000, 0x4e22, 0x0, 0x2, 0x0, 0x20, 0x5, r4, r6}, {0x2, 0x6, 0x4, 0xffff, 0x2, 0xac04, 0xa, 0x7}, {0x7, 0x2, 0x2, 0x7ff}, 0x7, 0x0, 0x1, 0x0, 0x1, 0x3}, 0xd}, [@algo_crypt={0x143, 0x2, {{'ctr-twofish-avx\x00'}, 0x7d8, "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"}}, @sec_ctx={0x33, 0x8, {0x2f, 0x8, 0x0, 0x0, 0x27, "f6e5b7690260ba4e6dfa17bcd9b06a602da3181cc4d96d63105bdf0c0411302225c4a88b2c6a65"}}, @algo_auth_trunc={0xf1, 0x14, {{'blake2s-224-generic\x00'}, 0x528, 0xc0, "2556eff4aaae54d19475ec82aaab0629f0768b6c3be83857c0a1748e647a2d1617fe3c55849787bca1fd53bfc0567c6e07ee273e3150570d0f237030081d35fb1b5838d114f4369f5871d20714c3b7f327e9c6cce4b3830d36e947b5159ac8b39d777b5086aed9c1d28f422d7e039937213f12fec076e0aff12d45e189dfe8d3190493a0ea7e3e00dbbbf8fa3724cee953abc6c5d7ce0fd44e5a1cba608f5b688eab298c32"}}, @policy_type={0xa, 0x10, {0x1}}, @address_filter={0x28, 0x1a, {@in=@empty, @in=@empty, 0xa, 0x9, 0xa}}, @user_kmaddress={0x2c, 0x13, {@in6=@loopback, @in6=@private2, 0x0, 0xa}}, @algo_auth_trunc={0x7c, 0x14, {{'blake2s-224-x86\x00'}, 0x180, 0x180, "94ca8afc802c97319ddcf6ded5985ecc8af6f59321be816e86cc348983a97703320d4ce15ff707a44194fbbbbf5fd59d"}}, @srcaddr={0x14, 0xd, @in6=@loopback}]}, 0x414}, 0x1, 0x0, 0x0, 0x8000}, 0x20042015) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000b80), r2) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000cc0)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000bc0)={0xb4, r7, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x9}, @ETHTOOL_A_LINKMODES_OURS={0x98, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x8d, 0x5, "73a041f30742c35cee470179406e8fb82c0522a33d94390440be2cec42cfe819533dd4cd379cbf272b5ba5c3c193feed3c0961840d0a0ac2cb4f9290d8350069bae59015f16a0e05c5c13edfce25b8f28dcb67d5f3a3b16ff160698a004725fb64b5e81d79b6f73c334530bd070bffdf14d5dc355ff6f77049142e7541c32bd90747560ded2b168b94"}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x88000}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000e40)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d40)={0xb0, 0x0, 0x1, 0x101, 0x0, 0x0, {0x3, 0x0, 0x9}, [@CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x7}, @CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @rand_addr=0x64010100}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}, @CTA_PROTOINFO={0x10, 0x4, 0x0, 0x1, @CTA_PROTOINFO_DCCP={0xc, 0x2, 0x0, 0x1, [@CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0x2}]}}, @CTA_SEQ_ADJ_REPLY={0x14, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x3}]}, @CTA_TUPLE_ORIG={0x38, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x1d}}, {0x8, 0x2, @rand_addr=0x64010100}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @local}}}]}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xf, 0x1, 'tftp-20000\x00'}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x10}, 0x20000040) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000ec0), 0xffffffffffffffff) getpeername$packet(r2, &(0x7f0000000f00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000f40)=0x14) getsockopt$inet6_mreq(r2, 0x29, 0x15, &(0x7f0000000f80)={@initdev, 0x0}, &(0x7f0000000fc0)=0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r2, &(0x7f00000012c0)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001280)={&(0x7f0000001000)={0x264, r8, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}]}]}, 0x264}, 0x1, 0x0, 0x0, 0x4000}, 0x80) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000001300)={0x11, 0x3, '\x00', [@ra={0x5, 0x2, 0x1}, @hao={0xc9, 0x10, @loopback}, @pad1]}, 0x28) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000001340)={'ip6gretap0\x00', 0x2000}) r11 = syz_genetlink_get_family_id$smc(&(0x7f00000013c0), r3) sendmsg$SMC_PNETID_FLUSH(r3, &(0x7f0000001480)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001440)={&(0x7f0000001400)={0x20, r11, 0xbc4f91be1e3a68a0, 0x70bd27, 0x25dfdbfe, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x20048005) write$UHID_INPUT(r2, &(0x7f00000014c0)={0x8, {"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", 0x1000}}, 0x1006) r12 = syz_genetlink_get_family_id$team(&(0x7f0000002540), r2) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000002580)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(r3, &(0x7f0000002840)={&(0x7f0000002500)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002800)={&(0x7f00000025c0)={0x210, r12, 0x400, 0x70bd2b, 0x25dfdbff, {}, [{{0x8, 0x1, r13}, {0x1b0, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r10}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r10}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}, {{0x8, 0x1, r9}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xad}}}]}}]}, 0x210}, 0x1, 0x0, 0x0, 0x20044001}, 0x4004011) r14 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_ADD(r14, 0x1, 0xffffffffffffffff, &(0x7f00000028c0)={0x10}) 11m25.985511118s ago: executing program 4 (id=3564): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) ioctl$KVM_X86_SET_MSR_FILTER(0xffffffffffffffff, 0x4188aec6, 0x0) r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109801, 0x0) r3 = syz_io_uring_setup(0x2f1, &(0x7f0000000300)={0x0, 0x200000, 0x10100, 0x3}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x50, 0x0, @fd_index=0x3}) io_uring_enter(r3, 0x25e7, 0x4000, 0x0, 0x0, 0x0) write$dsp(r2, &(0x7f0000002000)='`', 0x88020) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) syz_usb_connect$hid(0x6, 0x0, 0x0, 0x0) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1, 0x0, {}, 0x1}, 0x18) r6 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000340)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x50) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) readahead(r6, 0x800, 0x3) sendmmsg(r0, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000880)="75f60520bd952f2aef", 0x9}], 0x1}}], 0x1, 0x4000048) recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 11m10.797888612s ago: executing program 32 (id=3564): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) ioctl$KVM_X86_SET_MSR_FILTER(0xffffffffffffffff, 0x4188aec6, 0x0) r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109801, 0x0) r3 = syz_io_uring_setup(0x2f1, &(0x7f0000000300)={0x0, 0x200000, 0x10100, 0x3}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x50, 0x0, @fd_index=0x3}) io_uring_enter(r3, 0x25e7, 0x4000, 0x0, 0x0, 0x0) write$dsp(r2, &(0x7f0000002000)='`', 0x88020) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) syz_usb_connect$hid(0x6, 0x0, 0x0, 0x0) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1, 0x0, {}, 0x1}, 0x18) r6 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000340)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x50) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) readahead(r6, 0x800, 0x3) sendmmsg(r0, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000880)="75f60520bd952f2aef", 0x9}], 0x1}}], 0x1, 0x4000048) recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 4m17.382200378s ago: executing program 3 (id=5037): r0 = socket(0x10, 0x80002, 0x0) sendmsg(r0, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000040)="24000000180003041dfffd946f610500020100000005fe060c10880008000f00fff3c0", 0x23}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, &(0x7f00000010c0)=[{&(0x7f0000000bc0)=""/187, 0xbb}, {&(0x7f0000000380)=""/201, 0xc9}, {&(0x7f0000002a80)=""/4080, 0xff0}, {&(0x7f0000000dc0)=""/200, 0xc8}, {&(0x7f0000000ec0)=""/214, 0xd6}], 0x5}, 0x8}, {{0x0, 0x0, 0x0}, 0x8}], 0x3, 0x20, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001bc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40010140, 0x0) 4m16.303267275s ago: executing program 3 (id=5046): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x42082) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000002140)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r2, &(0x7f0000006e80)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2082) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) r6 = syz_io_uring_setup(0x233, &(0x7f0000000280)={0x0, 0x0, 0x10100}, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r7, r8, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x2}) io_uring_enter(r6, 0x7a98, 0x0, 0x0, 0x0, 0x0) write$FUSE_INIT(r2, &(0x7f0000004300)={0x50, 0x0, r3, {0x7, 0x29, 0x0, 0x11812410, 0x0, 0x0, 0x81}}, 0x50) lchown(&(0x7f0000003700)='./file0/file0\x00', r4, r5) syz_fuse_handle_req(r2, &(0x7f0000000000)="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", 0x2000, &(0x7f0000006dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004480)={0x90, 0x0, 0x6, {0x3, 0x0, 0x7fffffff, 0x1fffffffffffd, 0x400, 0xc, {0x1, 0x9, 0x8, 0x1, 0x1, 0x4, 0x8, 0x123, 0xdab5, 0xa000, 0x0, r4, r5, 0x6, 0xffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000005c0)={{{@in6=@ipv4={""/10, ""/2, @remote}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@mcast2}}, &(0x7f00000006c0)=0xe4) setreuid(r4, r9) r10 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) readv(r10, &(0x7f0000000240)=[{&(0x7f0000000480)=""/14, 0xe}, {&(0x7f0000002680)=""/4097, 0x1001}, {&(0x7f0000001680)=""/4082, 0xff2}], 0x3) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r1, 0x8982, &(0x7f00000003c0)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r11 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) ppoll(&(0x7f00000000c0)=[{r11, 0x747}], 0x1, 0x0, 0x0, 0x0) ioctl$IOC_PR_CLEAR(r11, 0x401070cd, &(0x7f0000000000)={0x49c}) r12 = accept4(r11, &(0x7f0000000240)=@nfc_llcp, &(0x7f00000001c0)=0x80, 0x0) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f00000036c0)=0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r12, 0x50009417, &(0x7f0000004540)={{r12}, r13, 0x4, @unused=[0xfffffffffffffff9, 0x200, 0x8, 0x4a], @name="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"}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r11, 0x89f9, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000100)={@local, @empty, 0x14, 0x12}}) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0xc0f85403, &(0x7f0000000040)) write$binfmt_misc(r11, &(0x7f00000002c0)="6419c9d6fff848174f74718fbffe7be00dc0569e95644faae94d957b32340d7a17a0e2749bc1a6388797a935822701ba65912da5743f1951edd1fc288976894c72a471d1be5815de1c72356b96d8e753da4137dfd1b2ccf2e0669f948dde3c7989612de530a044fc171fd66497e73331d9176b6a2ce4f89b5680db33be92ec88c5b284f8ecbf1654e4dd878cf1a34dc8a1fb0d69ceaa589eaf6e4f3d248c8a96cc2933141eba9e4bd074469a664052bfced8e04d0b6bb49ce0a06e2f333d2e453a", 0xc1) timer_create(0x0, &(0x7f0000000540)={0x0, 0xd, 0x4, @thr={&(0x7f0000000400)="7393a28afdd1330fa03241bc76d40ab8db47a06447c1491f8bdb41ffa55e611bc3d4c8e8bd00cd43b56c5f0ab34fdfc0b7a2bc807ca4d124eb02289348279a06b414b04e31176df0d844", &(0x7f00000004c0)="10c2f1906feac54d6b01be0b4e8f2fb6b9bd926fd5cb15aa080f2b2360dc39a0107e2d7da91568647b9009c54deb7c4756da152ee5be38566647d9df0edb81be104c5843b49c71aa634af814e6a4ecb30be7cd2c1158086e779742620421968451c34e4585f5090b02f2a8366bf1275f0ee4c96fe36907f242003661c5"}}, &(0x7f0000000580)) 4m15.332040199s ago: executing program 3 (id=5051): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56441, 0x70b928, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0x2, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c061}, 0x8000) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x4, r4, 0x3e, 0xe000000}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96d", 0xe}], 0x1}, 0x0) 4m14.68961771s ago: executing program 3 (id=5059): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x400c4) r3 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r3, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='=', @ANYRESHEX=r4, @ANYBLOB=',rootmo0000000000000000040000,usey_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00'], 0x0, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) io_uring_enter(r5, 0x47c7, 0xb359, 0x65, &(0x7f0000000080)={[0x6, 0x5]}, 0x8) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0) syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000040)) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x30, r1, 0xb97534d5fe9704cf, 0x70bd2b, 0x25dfdbfe, {{0x12}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0xe}]}, 0x30}}, 0x0) 4m14.134705204s ago: executing program 3 (id=5061): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/dev_mcast\x00') syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) (async) syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, 0x0) userfaultfd(0x801) (async) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, 0x0) (async) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, 0x0) ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00001b1000/0x4000)=nil, 0x400000, 0x2, 0x2}) r5 = openat$sndtimer(0xffffff9c, &(0x7f00000001c0), 0x8000) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r5, 0xc0145401, &(0x7f0000000280)={0x1, 0x3, 0x2, 0x2, 0x5}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, 0x0, 0x2000c840) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sysvipc/msg\x00', 0x0, 0x0) pread64(r7, &(0x7f0000000a00)=""/126, 0x7e, 0x7) read$FUSE(r0, &(0x7f0000000080)={0x2020}, 0x2020) (async) read$FUSE(r0, &(0x7f0000000080)={0x2020}, 0x2020) pread64(r0, &(0x7f000001a240)=""/102388, 0x18ff4, 0x100008) (async) pread64(r0, &(0x7f000001a240)=""/102388, 0x18ff4, 0x100008) syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) syz_io_uring_setup(0x4e1, &(0x7f0000000380)={0x0, 0x33f8, 0x10}, &(0x7f0000000180), &(0x7f00000001c0)) (async) r8 = syz_io_uring_setup(0x4e1, &(0x7f0000000380)={0x0, 0x33f8, 0x10}, &(0x7f0000000180), &(0x7f00000001c0)) io_uring_enter(r8, 0x708, 0x41e3, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000080)) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000080)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r9, 0xc01864c6, &(0x7f00000020c0)={&(0x7f00000021c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4326, 0x800}) 4m13.795384613s ago: executing program 3 (id=5062): socket$nl_xfrm(0x10, 0x3, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f00000001c0)=0x2) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000a40)={'ip6tnl0\x00', &(0x7f00000009c0)={'syztnl0\x00', 0x0, 0x4, 0x6, 0x2, 0x4, 0x31, @mcast2, @mcast1, 0x7, 0x10, 0xe03, 0x1}}) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000200)={'\x00', 0x401, 0x8, 0x1, 0x6, 0x5}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r4, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f00000000c0)=""/34, &(0x7f00000002c0)=0x22) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_emit_ethernet(0x52, &(0x7f0000000280)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x1c, 0x2c, 0x0, @remote, @local, {[], {{0x600, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}, {"5e4cd36bb96bd2b9"}}}}}}}, 0x0) ioctl$KVM_SET_MSRS(r6, 0xc008ae88, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000000000000b6000040"]) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000010) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x2, 0xb49, 0x9, 0x9, 0x4, 0x6}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, {0xb, 0x6}, {0xffff, 0xfff9}, {0x1}}}, 0x24}}, 0x4) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r2, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x142000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="88ffe600", @ANYRES16=0x0, @ANYBLOB="00042abd7000fcdbdf250d0000007400018008000100", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="140002006970365f7674693000000000000000001400020064766d727031000000000000000000001400020076657468305f6d61637674617000000008000100", @ANYRES32=0x0], 0x88}, 0x1, 0x0, 0x0, 0x80}, 0x4040001) socket$inet6_tcp(0xa, 0x1, 0x0) 4m12.09453377s ago: executing program 33 (id=5062): socket$nl_xfrm(0x10, 0x3, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f00000001c0)=0x2) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000a40)={'ip6tnl0\x00', &(0x7f00000009c0)={'syztnl0\x00', 0x0, 0x4, 0x6, 0x2, 0x4, 0x31, @mcast2, @mcast1, 0x7, 0x10, 0xe03, 0x1}}) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000200)={'\x00', 0x401, 0x8, 0x1, 0x6, 0x5}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r4, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f00000000c0)=""/34, &(0x7f00000002c0)=0x22) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_emit_ethernet(0x52, &(0x7f0000000280)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x1c, 0x2c, 0x0, @remote, @local, {[], {{0x600, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}, {"5e4cd36bb96bd2b9"}}}}}}}, 0x0) ioctl$KVM_SET_MSRS(r6, 0xc008ae88, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000000000000b6000040"]) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000010) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x2, 0xb49, 0x9, 0x9, 0x4, 0x6}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, {0xb, 0x6}, {0xffff, 0xfff9}, {0x1}}}, 0x24}}, 0x4) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r2, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x142000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="88ffe600", @ANYRES16=0x0, @ANYBLOB="00042abd7000fcdbdf250d0000007400018008000100", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="140002006970365f7674693000000000000000001400020064766d727031000000000000000000001400020076657468305f6d61637674617000000008000100", @ANYRES32=0x0], 0x88}, 0x1, 0x0, 0x0, 0x80}, 0x4040001) socket$inet6_tcp(0xa, 0x1, 0x0) 3m16.080033683s ago: executing program 1 (id=5243): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x34, 0x11, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x101}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}]}}}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x98}}, 0x0) 3m15.676185613s ago: executing program 1 (id=5245): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x54, 0x10, 0x403, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x74, 0x0, 0x1810, 0x55007}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x24, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_SNOOPING={0x5}, @IFLA_BR_AGEING_TIME={0x8, 0x4, 0x84}, @IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}, @IFLA_BR_NF_CALL_ARPTABLES={0x5, 0x26, 0x1}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x4800) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="5d5b0000000000001848128008000100767469000c0002800800050064010100"], 0x38}, 0x1, 0x0, 0x0, 0x58840}, 0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, &(0x7f0000000140)={0x1, 'ip6tnl0\x00', {}, 0x7ff}) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x98f907, 0x0, '\x00', @p_u8=&(0x7f0000000180)}}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x101, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) r7 = dup(r6) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r6, 0x0, 0x4048043) r8 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r7, 0x84, 0x23, 0x0, 0x0) connect$pppoe(r4, &(0x7f0000000040)={0x18, 0x0, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}, 'lo\x00'}}, 0x1e) syz_emit_ethernet(0x4e, &(0x7f0000000540)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd64fde9e200180000fc01000000000000000000000000000000000000000000000000ffffac1414aa3b02010300000000fc010000000000000000000000000001142898878544aeedc06d4d6568398d21e229b6c2c2d092c2489601ddd4dd10527981d07d5b7896f6e65a784c84369f"], 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03080000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021440000000c0a09030000000000000000070000000900020073797a31000000000900010073797a300000000018000380140000800800034000000002050006405200000014000000110001"], 0xc8}}, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) 3m13.292107944s ago: executing program 1 (id=5252): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000001740)=[0x0], 0x1}) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0x5, 0x10009}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x10, 0x28ca41) r3 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0106434, &(0x7f0000000140)={0x3, 0x0, 0x2}) ioctl$DRM_IOCTL_AGP_BIND(r3, 0x40086436, &(0x7f0000000180)={r4, 0x9}) ioctl$DRM_IOCTL_SG_FREE(r1, 0x40086439, &(0x7f0000000040)={0x1, r4}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r1, 0x100000) r5 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r5, 0x40047211, &(0x7f0000000100)=0x1) r6 = socket(0x10, 0x80002, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x2) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r11, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="ffffffffffffffff140012800900010076657468000000000400028008000a00", @ANYRES32=r12], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmmsg$alg(r6, &(0x7f00000000c0), 0x492492492492627, 0x0) write$char_usb(r5, &(0x7f0000000140)="6015f5bf02000000000000e2f2b6a1b0c4278f6d53540c75f4e25c59f9f4e1f544ccaa4d18484e69552f4d7ab03353f2285dfedc8101f6d20aee706fdfda9c0131ab803048097377739ec5b220fdae11fbad868671176615810000000000000000", 0x55) 3m11.557409417s ago: executing program 1 (id=5261): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = syz_mount_image$fuse(&(0x7f0000000100), &(0x7f00000001c0)='./file0\x00', 0x20000, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}, 0x2c, {'group_id', 0x3d, 0xffffffffffffffff}, 0x2c, {[{@default_permissions}, {@blksize={'blksize', 0x3d, 0x800}}, {@blksize={'blksize', 0x3d, 0x800}}, {@blksize}, {@max_read={'max_read', 0x3d, 0x1}}], [{@permit_directio}]}}, 0x0, 0x0, &(0x7f0000000400)="015c7c3acaecb1408497b95152b3267cd05d5f931066d565e3a6882e01489eadd72b095f2b86b917c70afbd39dbe9eb16d11f0126518b48a23724e367cbb8cf2c4a878307098224a8dc2f7b0e9224c7ecae2f5e39438a06790d8ddac9465b9368a665315e993206cc0df6e0a368d1fefca14e9ed969682e55b5e6c806d377e4d040f80e4639c98d871fc3bde0674a7347228bcc0b81a870fa6d1005e62fda9e6c50eb414446ac90517a8d427d4052c4c") open_tree(r2, &(0x7f0000000200)='./file0\x00', 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0xc0686611, &(0x7f0000000180)={0x1e0, 0x0, 0x3129c2436ada6840, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000940)={0x60, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0x0, 0x1}}) unshare(0x26020480) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x80000, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0) umount2(&(0x7f0000000140)='./file0\x00', 0xa) 3m10.217630428s ago: executing program 1 (id=5265): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0xc8}, 0x1, 0x0, 0x0, 0x10}, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x105) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r5 = syz_io_uring_setup(0x497, &(0x7f0000002c80)={0x0, 0x3dc4, 0x8, 0x800005, 0x1f0}, &(0x7f0000000440)=0x0, &(0x7f0000002d00)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r5, 0x3516, 0x0, 0x41, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0xf0b, 0x2000, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xc}, {0xffff, 0xffff}, {0xd, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x24040080}, 0x4000) r7 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) r9 = dup(r8) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f00000003c0)=ANY=[@ANYBLOB="0100000059d03d06b7000040"]) r10 = socket$inet6_udplite(0xa, 0x2, 0x88) mmap(&(0x7f000000d000/0x1000)=nil, 0x1000, 0x0, 0x11, r10, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d05c164a534308", 0x10) r11 = accept4(r3, 0x0, 0x0, 0x0) recvmmsg(r11, &(0x7f0000000340)=[{{0x0, 0x0, &(0x7f0000000240), 0x10e}, 0x2ca998c3}], 0x4000032, 0x0, 0x0) r12 = socket(0x26, 0x2, 0xa) setsockopt$inet6_group_source_req(r12, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) setsockopt$inet6_group_source_req(r12, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) close(r12) socket(0x80000000000000a, 0x2, 0x0) 3m9.939248095s ago: executing program 1 (id=5268): r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsetxattr$system_posix_acl(r0, 0x0, &(0x7f0000000840)={{}, {0x1, 0x4}, [], {}, [], {0x10, 0x2}, {0x20, 0x2}}, 0x24, 0x1) 3m9.069276648s ago: executing program 34 (id=5268): r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsetxattr$system_posix_acl(r0, 0x0, &(0x7f0000000840)={{}, {0x1, 0x4}, [], {}, [], {0x10, 0x2}, {0x20, 0x2}}, 0x24, 0x1) 11.65093668s ago: executing program 2 (id=5894): socket$kcm(0x10, 0x2, 0x0) io_setup(0x8, &(0x7f00000001c0)=0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/disk', 0x1, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000dc0)={@local, @remote, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "06cbef", 0x18, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}, @rand_addr=' \x01\x00', {[@hopopts={0x0, 0x1, '\x00', [@generic, @enc_lim, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}]}]}}}}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x2, 0x5, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x6c}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x43, 0xb}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @remote}}]}, 0x50}, 0x1, 0x7}, 0x4) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x80000001, 0x4, 0x32, 0x0, 0xff}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x6, 0x8a}, 0x9c) sendto$inet6(r3, &(0x7f0000000840)="94", 0x1, 0x4065851, &(0x7f0000000340)={0xa, 0x4e21, 0x10000005, @local, 0x6}, 0x1c) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f00000000c0)=0xa0000) openat$vmci(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000200)={@host, 0x1}) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000240)={@hyper, 0x3}) syz_usb_connect(0x2, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12011001c7a67d40b1134200ec000102030109022400013600000009049a00027ed72592090503f532"], 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r4, 0x7a4, &(0x7f0000000040)={{@local, 0x8daf}, 0x0, 0x2, 0x5, 0x3}) openat$cgroup_ro(r1, &(0x7f0000000100)='cpuset.memory_pressure\x00', 0x0, 0x0) io_submit(r0, 0x0, &(0x7f0000000400)) 11.283237476s ago: executing program 0 (id=5897): syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005ceda240d80408fdb34c010203010902"], 0x0) socket$rds(0x15, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x3010}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000340)={0x2c, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3c01}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(r2, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) 9.468497717s ago: executing program 2 (id=5902): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000001740)=[0x0], 0x1}) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x80, 0x5, 0x10009}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x10, 0x28ca41) r3 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0106434, &(0x7f0000000140)={0x3, 0x0, 0x2}) ioctl$DRM_IOCTL_AGP_BIND(r3, 0x40086436, &(0x7f0000000180)={r4, 0x9}) ioctl$DRM_IOCTL_SG_FREE(r1, 0x40086439, &(0x7f0000000040)={0x1, r4}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r1, 0x100000) r5 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r5, 0x40047211, &(0x7f0000000100)=0x1) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r9) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r10, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="ffffffffffffffff140012800900010076657468000000000400028008000a00", @ANYRES32=r11], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000000c0), 0x492492492492627, 0x0) write$char_usb(r5, &(0x7f0000000140)="6015f5bf02000000000000e2f2b6a1b0c4278f6d53540c75f4e25c59f9f4e1f544ccaa4d18484e69552f4d7ab03353f2285dfedc8101f6d20aee706fdfda9c0131ab803048097377739ec5b220fdae11fbad868671176615810000000000000000", 0x55) 9.121769983s ago: executing program 7 (id=5903): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000001740)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x80, 0x5, 0x10009}) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x10, 0x28ca41) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0106434, &(0x7f0000000140)={0x3, 0x0, 0x2}) ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40086439, &(0x7f0000000040)={0x1, r2}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, 0xffffffffffffffff, 0x100000) r3 = socket(0x10, 0x80002, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="ffffffffffffffff140012800900010076657468000000000400028008000a00", @ANYRES32=r9], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmmsg$alg(r3, &(0x7f00000000c0), 0x492492492492627, 0x0) write$char_usb(0xffffffffffffffff, &(0x7f0000000140)="6015f5bf02000000000000e2f2b6a1b0c4278f6d53540c75f4e25c59f9f4e1f544ccaa4d18484e69552f4d7ab03353f2285dfedc8101f6d20aee706fdfda9c0131ab803048097377739ec5b220fdae11fbad868671176615810000000000000000", 0x55) 8.331596127s ago: executing program 7 (id=5904): syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000300), 0x4) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x20000ff, 0x0, 0x0, 0x0, 0xfffffffb}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x5}}, {}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f00000002c0)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x46, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x7d) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, 0x0, 0x300, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x200000c0) sendmsg$kcm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a00100000000280", 0x2a}, {&(0x7f0000000400)="6a6f8e5e", 0x4}], 0x2}, 0x0) 8.331261427s ago: executing program 5 (id=5905): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000044402, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, r2, {0x7, 0x2b, 0x0, 0x40080000, 0x0, 0x0, 0x7, 0xa15, 0x0, 0x0, 0x2}}, 0x50) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0x5}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=@getnexthop={0x28, 0x6a, 0x501, 0xfffffdfe, 0x25dfdbff, {}, [@NHA_MASTER={0x8, 0xa, 0x2}, @NHA_OIF={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x44}, 0x20008000) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r6, {0xf, 0xfff2}, {}, {0xa, 0x6}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x20, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x1c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0xc2}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0/file0\x00', 0x0) syz_fuse_handle_req(r1, &(0x7f000000a200)="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", 0x2000, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x90, 0x0, 0x1, {0x1, 0x0, 0x1000000, 0x105, 0x3fe, 0x3, {0x86, 0x3, 0x0, 0xfe2b25d, 0x0, 0x0, 0x0, 0x4, 0x80000001, 0x1000, 0x7, 0x0, 0x0, 0x8, 0x800}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) mlock2(&(0x7f0000549000/0x1000)=nil, 0x1000, 0x0) 8.027582498s ago: executing program 0 (id=5906): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x501280, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0x3}}, './file0\x00'}) ioctl$KVM_GET_PIT(r2, 0xc048ae65, &(0x7f0000000080)) 7.873697091s ago: executing program 5 (id=5908): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x80040, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000380), 0x9) sendmmsg$sock(r3, &(0x7f0000000340)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="05000000eeca06ad54c456350da0a5f21f55e46e", 0x14}, {&(0x7f00000006c0)="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", 0xfc}], 0x2}}], 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mremap(&(0x7f000065a000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000339000/0x3000)=nil) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) syz_genetlink_get_family_id$wireguard(&(0x7f0000000840), 0xffffffffffffffff) r4 = syz_open_dev$vim2m(&(0x7f0000000300), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000340)={0x1, @pix_mp={0x328, 0x1, 0x31424752, 0x7, 0x7, [{0xa, 0x2}, {0xfffffffe, 0x1ff}, {0x0, 0x6}, {0x8, 0x8}, {0x1, 0x4}, {0x6, 0x5}, {0xfffffff9, 0x40}, {0x3, 0x2ba}], 0x0, 0x7, 0x1, 0x1, 0x1}}) r5 = open(&(0x7f0000000780)='./bus\x00', 0x400141042, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000180)='yeah', 0x4) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f00000000c0)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000040)={@host}) r7 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r7, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r7, 0x7a0, &(0x7f0000000140)={@host}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r7, 0x7a8, &(0x7f00000001c0)={{@host}, @host, 0x4, 0xabc, 0x2449, 0x0, 0x0, 0x4}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r7, 0x7a8, &(0x7f0000000080)={{@hyper, 0x10400000}, @hyper, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_DETACH(r6, 0x7a5, &(0x7f0000000140)={{@host, 0x25}, 0x1}) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x7800007, 0x12, r5, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/address_bits', 0x0, 0x0) 7.80332295s ago: executing program 0 (id=5909): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="ffffffffffffffff1400128009000100", @ANYRES32], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 7.696016913s ago: executing program 2 (id=5910): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f00000003c0)={@val={0x0, 0x800}, @val={0x3, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x86, 0x66, 0x0, 0x0, 0x1, 0x0, @private=0xa010000, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x0, 0xf, 0x0, {0x1a, 0x4, 0x0, 0x3a, 0x584, 0x65, 0x9, 0x25, 0x16, 0x3313, @empty, @multicast2, {[@end, @generic={0x94, 0xf, "4fcf02d60e646404e8e478505e"}, @end, @noop, @cipso={0x86, 0x31, 0x3, [{0x1, 0x11, "97e3eedcb1b4f0f6c3fb95c6087f31"}, {0x5, 0xa, "2d3110a90aa230a1"}, {0x5e232c06587b5052, 0x10, "66079e88e964c34418c418a7ed5b"}]}, @rr={0x7, 0xf, 0x16, [@dev={0xac, 0x14, 0x14, 0x41}, @multicast1, @loopback]}]}}, "c819"}}}, 0x94) 7.687297569s ago: executing program 6 (id=5911): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000100)={{0x8100}, 'syz1\x00', 0xa}) ioctl$UI_SET_LEDBIT(r2, 0x40045569, 0x4) ioctl$UI_SET_LEDBIT(r2, 0x40045569, 0xf) statx(0xffffffffffffffff, &(0x7f0000000cc0)='./file0\x00', 0x800, 0x100, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000e00)='./file0\x00', &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000001180)="6a1b7742d6811672a8b6b0ebd7715d96787ff2c1ad8d629b6cbe082ac694ec71faf0f25dbc0f0b549e02019161ecebc8d96140fa48daed5c484b7670aa65b00da3fcbc47ed4e9d4cc0f4648fa50fa98d121e06662f254e48368dc6677a6a14548ae79d8851da2ca555705dde46ee700912d9684e89e4e53055235ad16a1a797bee540ce104b2466eb5214fae27c55735707b964b233e2dcb43468be04a233f7181ca2751afac38f35e0368aaae4adbb6bf48b996a4d3707000c3caaf4946baabe438bada6d259caa1ccada11d2f6212749f16abecbf77a202269dd26d8d668a7dc3c23736dbae4582448a6962db0b461282b16f0fca8f8c49e37a275b7d0e52c6f6679fd2865782135222e71356364e9a0277fba128f92b366a32359b8e6935f20347fb60adfb6c0f88505add1d92355f36f82da05e8bc2e495def64aefba905cd8e3d75941252773a77884642809e0b82cd1d694d7195557b341826e4fc7002f288da8deece57a21ab7d948e7852a22906912f53dc3a167e5d7670f593674acdcf8e39c171bb93563aeed60ef12d41c77f85fe026a0d6d6da29bc8f0bd7e901522b741d1d9fa95101a84143ba610409b8b03833e3c9fc891afee2d00fffac227e747e07b0530065672c100cce1ce220ff32de53129b818e41c571ac3567cddf8008fffeee98e01997cd7ffcaecef3dd4ae62dcb86189c7c01bdabdf27ea84a2a23350d1f08de918edf4cd3c0c4a4655641cdcd2490cf7778de08559182c4dc63faed49c07a36bd93a3d1751ce41514c9737aac505a62123e90ebf2d50d62580cbb48d16e6015420ab8ea3085bea6c8182bb5ddde81f8ecaa02671270f98ae0926f910f4eb63e43e0b2c1ff0984193e982e54a871b5069c36022e1a0dcd3f7241383c6cf0449183f69e768c9fc45fe4e0d1cf32c7704780180d91f97c59f20781833404d2fc3ed96ca3eb8629fb464fc205991a3426ce8dfdfc70fbbadceb58ff056388a0d106f51f977dd29bf8009befbe6c208eb95845688c2fd7a274897d0740c14e206590936af907498728d9d3d5a1653223c1c64236022adca1fed4075a87238dc78be0bfb7f6967592a03a143eb5ccaf5a461fdeadcb8a31683c7f62b8e1ff74af8e5b6134168f158503a5396b8aa6da09382c38d431863ef2736e82e88bbab1880eaff456b90a5edde04374eabe1a489bedfc5f2584e045ad84117dbe8fbb885436141c4edce98a78a73824e30a6b422837d174ae12f86d8d62ba1b31d019b5467d211614966d0b379ff29ea94955eccb8c177629d594b17c4a54accdd4b92873ec97cb2790820611864aba245369d8dbfc41969cae2659d5e10b65785fbe77f71990e0297b80ff741d8f146f8024b764eaf7754286187365f332ce5b7df82da23a4cae8047622ec8dfb640ec9d4ed3a83dc30e4606b207f6f5b8eef69ce3371c2e66e65cca166682b24f6f925e0a51ba6744726f962397658d62520b76a637a48a5c66516edc5713265e7f65e6c720ae57973f8d9b31527bf1d19d39eb8a95b39749c5b5bc31412be1b143314b58731301c670103176fccd762a7da81fcb29517a7f7b3e6258b10a51f967bf8c4ce02923ad8cea47228b1d3d73ac1fd0542bcc6ef575187f8815419287839ebc7c6a1fb88f5fa70099420899e7ff49f21ab44ce0ce223f14061a7013027cc883a297aa6cd941cd8eb2f30fac76dd19c562a88f1a4022496ead3fedef1f9393ccf8203cfdb5d6e247958ebcb38fc04c9bfd250bf66efe13b912a847b5e823a02aa0bf9df9ca64ac1230ee88cad747d410a221cfe7073fa2218cdc033d458af49fa7275ddaac64d2ddc5d1436e0b3e7505e6ab22b15c5419dd68bf8f7619521067a724f10cdfb4f271367ecb9c9365c03724e7964efb023894d4b87b45c5b74e9f2dae6789d98fc7e098d34ffff91bca54c92fff03b18e76a6a7099cf79a692364cf157f61491d46c8a3c0fd89c4a259bf00ec6e8484e1a3796cb78eb276ef36c6aa6d63e8a7d9b6aebe8a98b025601f497e0478bface618a15f67225c1ed2bd544ab692393fe3b72f59b3ae8180c0fc841c06cdbe79181eb7193baa37c159e775078ae0608eee3541cc2a92a7fa5173bd723ead5e13ca7d5f42cd2ebf423909a278c8a1236c98c3a87a8ef2ac52b5f8694324ac35b4e2053e285264c374fbab3de98e1e017da3ddd88b52cd0ea2bddaa3079e30febad5d063dd49eec2826abea9cd5b861a36aeea2250ceb2c24474c00895496f4dbb500c54afff5e81ed80030f0add25694d3108faaccbbe3424cc4431d649dcce602659de471b958f6f8b79d4a68397337611149a4e1c970f5995efc9ac73afcbd7aa8c132fb6e75c092a8910efbf3405b4127cd4cbd8a9605fa0dab15c6df4bdbe5d85e7ffda6c49f356ab77bc81063f2fcd178fae1ced5cc9b6e2788d9c2111a47e560fe0640597f9405d4964352a6b4b636f414226792de3e12a3ba0c3f9d5d5a76dcd571dcd2a2b990df02781e72cbdbacb06915b6716be8c2b1466c5a96f45abbcc9c2eaa1f5192b39aaf0fd9175778270b83127fedb908eb10de668986e33c7028b086941eca2368ad2d3349bf6c5ad2d65e299fd7e92df06bbcec941f5085a57fcca9884aae5e49f70c8334329b267724d3328ba25c9b190a520cac42c98ff5295d6aff8f3cf295bfb592424892343042faf9a89a0bde491607fd944e3978ffe8d59dd82a0517a0d96fe9d707f80da1bb291eb538ab1c961be0875fe2f07fca7419d471e7f279e40086fb3e7ce3d763e1ecb3fda6565cdab7497bb94c7cd9663ce994b1487c5fd2bb19dfd0d6a3efb36f9c0ddfdca4a430f5e35c2b9bf4ceeeccbf8c0e8e00d2aa7d49904bc91af8c462c47efcde28a3ad27bf490419412d66c2a7dc3a775e97bd075caf8fee952fccb067d617c32c615af55a1beac1a9d963989f3db5fc0357803b898c6d9274c7908ceb5ab014c3e15e40d017092bfb1430c703301493fa79c718f746ffcbe9ddc02c28bbd34e750ee5de2956468f81bb7959aafa7fc3f1164ef8a234edc31c076c7ddf893aeabb1a9dc53999a12ef5f03a6d1699e6d0c1b7c8e5ebc05f37b8271a25f5c0c9fc7251182a2e06deb2bcf9d3ecbb1e07d310ac4d86c9b2ddf4b6010e7441d4b7b434b7bc016424c7257f48754853a50bf49e0df9251f83eef0ae8e230b1eb204a7e2da5c6c8253dc8e514bb0e66b0b839f6f4d353ef1d69d87dc1c9c3a8a4a2313890d7ec04329db26aff356435f6b439c14925b29f0cfadf61513a660a375b10613cdbf45e01fc1aa367b90cbb6a83096573136f138acc29f77e0ce77bb06cf943a16fb3a48c82acaeceba366fdc82c52cd54c160b8ef8ad406a8c599dcb9a2807bbd2b0d8452dcf326a4a95c5bd3db25e029a895ed026e9e07a8c7fc6b29e838cbdd272c5f2cbad0008d2f1d0373a8050d24c7caf983580e89c7c69996b570cffeb12284d27fdfb0bd5ea7e7cf7d0b785bbc4924ad623979d9331da61e46c0646e2ab6a09375f5a783ab2a6cdf4164f3a7c9767294a76c5a59af8a7042fb3f16d2e8230122b3d12769ad76f8a8f6dd09be82b3cb56595ad59bf206d90520432fbc056816c650b98d07a790b50ffc32168d6d0d04bb82a5bffe12d543f75d1299f8ef49a5a4a91b29d07c4f8ff455bd2d65e588d825b1f66499eaeb2dd89685d43b8727194d6448b76e66ac8e04c995d066e59345cb939144c3b14d68e4faa654f67b7b80aabd09cc026d6a6c751631001738c488bd14407223f3551133729608873b1e03b1d8c318786b4166392126eb904c19b0b9ccbf2f98911a1b77b4886ce76c6498e202ae5423b98ec9caab486a49c5ca19cad14bc98d7d8bd0a3a3cc8087419b727bf3f1ba34528dc7a19d09b27bbd2259d4803812aeef290af61a2b200e448faf0b36d5614a931ca00928cc00ce9acd0fc182eb8a4f84d36cb971f34f5bd6ace1d2340c17ce6edec2f80cf353db0a8b31c8a4446f8f151bd28ac6b067cd4a6f722983a72508735b28e80251b1a7f1146928939ac9b7f4876d42f9fd9f08c1520a2b013f47af4ad056385c35f42171c618f0eaeb24d30aa137d927dc1edde5a5d76ea6ba40381af5add42796bbe751a46c5057b41fdfa8cd0ee1271d44cdd67ea5a77ebe76edb3be0bba6309ee3abd2c57b073783bf846e2fc6d09b560018c866178e396ac1a3bf718e3a40755c0a8cd1c886cd7b5fce8526a836c2bc32875d34f6ca7c5716d37dae6a37fc8acaa2fd68975e992f962fc4ef8f189d6d58fa2ea81868f51399fde0c2d7e9e1f3944d50e893363455e28112cb35679f7cab2f01ea08fa132a8e9f66ca3e9c4ea4f0ba5fb59440bade54bec15fd08b871627d91aa1fa6be4bc71bba81fa13efba573044bc031995de01d493e39d2428192499caf3371cf9bb03772ded2f641f03bb22bc8da96486d6db39b624d5777c8bf2fa89878c69aa78f2cb64c0b0330b3e6a8bebea61591466b9530d5dec0ae6c18faa31f749166c80849b2e38c2649f55822a55aea3569de35761d8e097a23f37447561d67abbf82ae6a1a5d5e7c602d91c4695d251f50a285a5d68a4db128af9fdd03c2977da9138d9226754c881b46c43fcecfd9163ac19e864c2490d59398850e8c932876139010a64a463881917756721a953a34e45bfe9cabaf984e1060a06a5a86df08be1b76817b7daf65e9ee341907d0ae872da6abf2674c70f46b6457190a618764d35c5e238d8b4b69b126bed1fa0eb7f9fdfd0f9b745c477143e0fc89cc0f4c739eff72995f133ecc6f028e7be67d9b4b908840a874b9aa6a1586f5f92ce9e5fdd719da54918781ce26bd066fc86bb5030ad190808e7364b77e4720bb4fb5e13e501396e2caf3645ef5c976881be9b1fddb0363779229c7bbb613e5d447d60daa596e492a1312f19f3d73458b63c7ac665a71cfef042dcae0fa320b701eb6c40f8b04b617453157902a945e14f75a879ce8eb01782ef7636ef9ef8391a7a92a5102223069b23ce03706327c20d1520e2fbda74fa5147a1d092cf7877f4a80bcc87e5f1da25c1d2dc28e85ccaaf72c5f55d6296b4506a225e628a620cb664cd768f374cd8f6005b6a8f0f63f0a0672f8d60e02f28df87d1a54072e8fa900922710ff11870d7c47242163478549eaa49272b7e4d203ac1a58a66bebbdbd8dd076855ebb06d01f3ee846b8ba87b048d28e26b8b57e8915f1681d453cd4ef8a7a5620e7b7535c28ae2493a313ca34f70fe77a8c3020e01104d5a6d0880313374f6b71998b3ae656652019abe1d6119d226c4607b711e49c506a6957ec92ee23dc8e371de9ae862b1f210ba4d0daca3eb4dc6555e699e6ed1402060c438ef1246bfbee64f134c46bbb2dbd54521238fc91ee942f37984de7cba7043a8a89d24e48fdcdb26c0169f262f67d36becbe0cc6fa01d6b03f4f42ca9ce56722e62d07d9ea9f87953cb81ca433a312cfce5ef9b3f53123a91fb09a3f0eb4a4175f4bb9d3ee91c662ea94cc4210eabdb6d90aa4e3ad70b7cedae32ad1485449203b1dfc0c9bd508e3e765d715b803284aff4b58e2c67943c0abd6e2c803353ab1fc39221c047618306e8fc14516b2943f40eceee3264541de752d7a8602f7884afad864443838679fec970035fd134b96f03e980c28afbf9da33bf9000df35a0a1db030b7320436fd20bb37c2e1e81165e4c6b49e8df8918ae6a3d098fc69f42d58c1a701ff32c78ecd964da517307cf82cb9aead669c6f1c878c6fe3366d3d14a266a0efa3c37f27861bb60d95ad4877015ed99fabf584f724b0587bd43e0af423eeaa7906f2b12111b3a358439f8eac0336a2b052b92d37adbea893da23410b08e8d98b59055347afbad369437f18ccda6d60dab6ea6b3b5c3cdb6d13a2ba362dcdb2afaf3555a8a800a4fdae713da5ebea90c202f8389e9737d0f9731b8e8a56b5af255956b08f98a2d73d3392459da19da052a9645747594d1692eb56247c3ad0f6105535365a4f4df1edc9182c009e9983ae6b63b7b4c02759a5bf63d10671c81ca0757e9b700ba42ee884787e0285223d599a9d908de6b21a4d44b63cdeb3dd6d5a009b7407c0a82db2e2369b30d1a832a679a7f6ca9dcea79b008438fc295f2da4657f3423caedf2c1e5d12c5b75bc38c7b4043ff146d0e1bcb42a2c12a6e39ba2831cd31ee086614b8b8e8b17a0c6d9f73f5b511bc08084e478a364c69c167d626e39084084f4795a6eb068622e98b1f8749cf9cdcc8e368eda8627c06afe51f0b691102c51fb620ad4e70ea6f53a93acb086e595f8eaca41e2159323d3f3c37a61898e7457b4dc039c85eb5ce84f69a5567cffd04033e2e5f2d7aaa4e85b718fe370c642db2590277da90dfe87deb4a3810c04113d791e39421239671e9ba51e8473469e1a973c12a8e7add151caabe21ab93e4647ed6d321ebe297b3ba73e42d0b2cefe1da8f73000d8f67ccba2c0949f417ae9343b2f30aa6b80960935ec6adfe047e3629d03a4ae4b1b293bc26c5654251dd75ec4edffb43fdb4a0ba5746bcbea0260ad7d92c3a5c59011d85b82299b14a6bac1b01f5db580bce4d848c8d82907ea1eb20e269b14f49b90804ac3e3fede5590ccf3d8b0c8acc40ac8cf8855bbf4c37fe8829bcc3c22fe281e439dfce53a8934dcaa773749dfdb31949fb49a9f62a7f7489b420de171c2965975a316348fc13c33ff47b726de90f345c2dac2aaaac3ae8a149c25650aa48411493527794fab237eb793a4c938df3bcb398e63d9d7b5ac11e176cdab7fb82552af5da716bc12ded6ea91b02e3772038601ef0438ca48d7e81e2ba0c5635bcb18dbf9e7a627fa274c343be2872455304dc1b316cad59bc9372529f849d66c1e2f8ce458ce9695070abc42c30880528cf25762e1d4ef95287c8dad71783341606c49fe0e095c78e813c8cbd679e1a444ee46b582c50f1c6762ef63019451b18d8d0bef41801fd187ec59a926204df0c5efadef29623301207dbfb4bd81f50739c601963c59fbe5094fc93f50f66834a40cbae62018b95969bb3ef603c6d4f67cf86e96f3f6f07e6878cd7fbbb145385eacd7d812503ccf4530ac59b6678e41bf8cf7ba4f5ea4778f3cc1a276ab8ccb0e83623aecb9897cfc1ee0c2688bd7ded4755fe63feabe6cae97db2359e33ea28b181629bf31a5306993b3ed2d3519945b53f0a64681379b890aca041e786f074426896bdd586d69d64ddd5bb88c9422dc0f01653522cee6d943565f6b0b823e8ab9d5aa68cc1535af9f46cfebaab551a4569e3a7c9b1335dd16e9bfcb2fa2ae7d07aa8bcec1d75b95910af8cbaf705e70e7afda54c33ff951a2921f0e6c14e8bac27a75ce21c8023325f0fd58723c762c875b04434f800b60e56bbe69fc5c3f12df3b6d62275b5c9387e28de41687790dff8fe38135bf731a1ada9cab8382b9cfc5c047c0fae10f30769e6993af4dd5b8a970bad6f0a6cc9c38095c22622c99098e144c764322235f12d88dde98aab5e952215f202643be58a696180c47670973742afa85a292b6b549dae905caa5d5fc01bb2d5d4ef3e16368da6a140cc60dd91d2db351f045e5259da6f069291cf3198d5cb1e42d0391e78ee18224f16bd0ee169e643e0cd87bf7bbba230aeac4a89039177dc124def30c9930f7fe221cb9d8a546a37247e3ea1efb428a842e8b6dc759019232f5bbffa8c9cced80ef04a0ab329ac5a4295f093077cb8a68e4d8331846a6d24365b6d00df067b306d9c4c86984e93dd832e4a887ed92dc369d3ebdac5bdd4976be9f446f5b52b906c6bacc6753b411a8905226d60a7ddb31fd350f46dab401c8e0cc69fc891fc48ae0a012c566989a1d0af2c64a5bedc6de176965600b2550a672292c732951288447cd4ec2a3384177da80ad79979c99dee13ee302e20b1df17620fa2e83c9959a4a020382d3dacd7d9a1e391210c291d2a24d869ad0d77c11f567d422e7401d9bf6f42a777cc8486a6ea900b0c850490efccf40464efcdd4efd798612d3de1306498d50c0a763d6af66554886bf875e2c17b6770dc84b8d24a9e26df5e8006002f436cf9450c4deeba05f914c852485791512e1b0ac98cfe87310384c86d63796eb2363ededf10e9e589b656f54bf525ebc2a681f07be66d9ec67c1bf71ad5e0cd94cbcc457e6ac0a4e1a35d67a541e6876252ab3162e08d4e88aa3c9682a8c4846e5efd1c150832390e3008eec877836c657cc99216adbe99d1552acb51a56c33a577b449b79877802cebcb356b6363e0cc0da4d5187b977364d9bc75334481d609a0da9c229cb18d2855170cced5d44e820baadf38eb0be2367ba721b6de4f3fe3c5715ae1d4ec03419c7e7fa751fb545acdd7c98dbe86fad2c02a746e05c91750643b470488180e0b32fd0ecbde3ddab1e8a527cd4c124a248b8b161299b6af32590953b7b9d7d698f080a9bd86a891fe8505df001a80bee31461f2d084976e5e500f74f11d7dcc0ee08f307aae0215b94b49d046bb2337d4ca7ffa04bbd757b76030e66aa30adbdd786bd02fc318d97461315c5ea18a2c64ec2ffa368d40e6d17d05d4edcd33234f2ba1a95f393712179fe36789493e9da60f0f0f5a08d51fb8fc051835f430dce469d3f3f9251f402f703d722e5f04618473e18060fbdfdf9d8282e02623049ca5d24a5452f6546526fe1e85dc4f2ace43b81db9091783ee5fae621458dabbab0eab2165fe24bfc5d649c633affc4c0e9608cf03823f96683946e81b4da53c2ef5aa59944e0be3ed0590825c08d39f8a1dbe2b39a82582ee0afa05e2c4a515c43db5ac973f2fc3eb87abf606db78d92e53eb2ef4bb874607d4a5fcc25386c17b4eee10e7077164646252b4ff32d60d4564700dbd21ab029afab555b00db1a1988c6d36686fe78d52cf383cb59f3cfda8f2acc6ebe62ff25c366da63d9a4d5b801579a482428e1ea204ec87df51ec446426d3f41f1cc8a7e948467ec278733ec8440d045b048ff497c64afc80fe9382f7590050fec9d9e2a40bebc5bbecfef3f604d1db86c24773422248c3f5d0b3719d36e268dcfd177ab2c4241a238e1e7838fe4c96e6208c83e96b194078b207748d002976731b6a68653d9a837dcc277c68fa614e3a76e6206275ee2c0086d5289108a22f9ce8cfe1ed8dd02ca4f8ba50c7df24baea0f7c7404e9b5c93ecdd0875c3fe4d763658e5fa7a0f8f6d7dbb78c1acac26ad646b6eba0c5bc6f7a80ea71a43b79527efcd098c4c89da9b9875ad41888517ed99b6f85c4839fed12fc200bc624077349022696bfbbc89be47f770396a9835684728ec1e0e13c3ca6582b0c4ea4777c8506d9fc7cf2145178eccfa84344a6146ebd2eee51248216c57dabab0392b3f70906ebd7bbf7f7215724097f506fc4d080b1e2a357153d38245d671b68d224dc0214132e54bf281da1b303d6c0b8e89bc81624299252a79b937cccac2e480d4bf0ff05ac3ce56021766ce2e458e6d42d6f983aaa87e57b0cb1dcd088f0ecdbe1af2646c5cdf508de42338b71ce7352f672834d3518ebac6608f41388947ffcddc3f1836ac3a35bca2219898b95f7515ad598254435e1772c96d417b6122399c5ed05ed1f24f7bdc7bd1fbd09675e851da08ad0bd9e554af9a29d16d4e1c6a38b16ff1e4d90ce9972a1c811e4398bd0aea278c6021e5bb1cf676d58955781c878021bc896a686de0e903d29964b3cb56e74067b4e6edfb703844eea150cc352633619cfc9d9168a3224771f443760c91c66f0843e96e434bcc08411a271fd36b0c6b0a44ee9c4cb7ad271b8f720d286a71e9032b5233146f77f8df767fd94bcf7a880be1d71e8c16a1406ab84e02b4c684070e3ad6277d1f12019ffda4d5947c2f7398aeea673bb26e9a0d0c68dd2b862a3e6a988e816b8feaef5b528b8a0dc2ff39a0dfff93cf5dfe4277c5c86d116d30e50757cc5dce3c48c298e068bbf6dd4663ff08a71c074f4f8be4080a07361c43cd3365f950313ce5e92485e12197e21f6706cce4b7e81fff26cfdeeb406818d9a936313374697c840725f6e241e63340430d86db3075299ab1ee9735029ec9eceb907796c52f6589f7aaecdc1c49f346b549f3006fc79708aef23029d6e322bfe959f844d68f39d2e4472e5684ee4121e8d9743fa6f80192c3797b85bf543bb2345728520260171c2fd7df79ba84f1bbdf89cafb74782cfe43f364abca3a92bb4c77f1f41f3ff86e7cfb1af27a422556f3c58afa5599929152999404a0239d874d9ecd1f3d3abdf8450bc3998b2aeca76b714fe4800346ab1b2dc75d1913ca43627c3905290d8894ca0c39a94942d07d203fcb252360e6a316f1dd6fd6fdcdd7ca0da886feccd26c1c947416d7c6510ea8398f4449de165f1ea0406c1650ff0a533a575a9e7d49ae405f5825ea0e4458f2dfe26c68310b9e1c9fde565856938dc29750e4f2a33e96dc2c50b96e9efc9a4bbd82c612a2ab3685c84161c56d23fbf4c022d9551f62c0da1b414c940e9592b0ce32052d6eba5653038ac7148ed968ad48fa5afac3ee77684dcef3a147d55c6fbdc291c0e2491aefc93c9245116c3122936fb7f6e5b171ede44430e0f06ef3574914835cc36240e0703e91ff0c08955f36aff93da0659bd36dc0b4d80b2f0892928c6a6cf5e8e513d57ed0c2f69bd5aa97c482f9f07a3f8a91aca1a9e98e534f4453579140aec9fe835b3c5d0fc7d88b5b15f2a34273e8421496b304522c406f78f80fc1b13a6d7928fc51425ef0907841c711afd9c806bb702ccb7ad85038ab3339eb29fb7b8b250527c636583e296049ab403aa579cd36fd08994d359df68cca3f6cec41f2ca7ae53658f08ae2cacdb0b7d3f84e87945a0aa962f9a78c8a02c0a4d9c2751e898fb80682b4ade83ec9e102a76eaaf2c27b4ae5ccad47ce1c7534232bcf235d9f66ff82d1916b33c1ede65488c1256c41c5dba658db3857217a1694de7f8ded5f631d0e1a1402af584c508dea13969647880ec7c27f402ef06ed37655f13f3329144ef27f0914be635fbbe58ecb831218bcf34f3955b3b17b5f759238fb25eebd32ef3c77db3ba5dbca413872978aae2ac51975d57e8365ba9d15556b8c36d4c581d71937d6a1da7adf3d98364a7fa980793cc2887c2f065c01c7254814f585e33382ce45df441cb3b4e43863f8b29046985faf700907d55e682b6fcfa121488fbf146dde971a0c670434513e38beae0e5eeefc0e1e42998b035df401b10eaea6359b77bfb3f8b2e0c4591b43570b245fe8e8def190f905da1dac4d6ad879480f6159a03d2341d591b4c61916ce0eb93acbb6b9f16f8d057f7f6fad662a6c5cf109063d6cc5fe344be29defeafee24ec87ba46aa229a99460267f56bb59cdecea4a12d6db5159a9db39682e7018dfb69b76e34194c6de712d21224ca571159d01e1f885944ac2e4d40ece2c881dac96dca277201c67492efc24dec59536faca8e9b04ab74e28618c5f14c0f930cf2d1a733428bf14205a96d0d6ca7042b3264bc55f70d847e1804b0f3c5491e398e350f75e023772f6d976cf7083ccaa4a77c8ec9f39b0c80", 0x2000, &(0x7f0000001000)={&(0x7f00000002c0)={0x50, 0x0, 0x7000, {0x7, 0x2b, 0x4, 0x1, 0x7f, 0x81, 0x7ff, 0x5, 0x0, 0x0, 0x80, 0x3}}, &(0x7f00000001c0)={0x18, 0x0, 0x0, {0x6}}, &(0x7f0000000240)={0x18, 0x0, 0x1, {0x4}}, &(0x7f0000000340)={0x18, 0xfffffffffffffff5, 0x7, {0x8}}, &(0x7f0000000380)={0x18, 0x0, 0xe8, {0xf}}, &(0x7f0000000400)={0x28, 0x0, 0x0, {{0x7, 0x8, 0x2}}}, &(0x7f0000000440)={0x60, 0x0, 0x5, {{0xffffffffffffffff, 0x0, 0x7f, 0x4, 0x566f, 0x2, 0x3ff, 0x5}}}, &(0x7f00000004c0)={0x18, 0x0, 0x4, {0x3ff}}, &(0x7f0000000a80)={0xcb, 0x0, 0x1, {'\xf3yz1\x00\xa7\xf2{6\xc4\xd2\x9f\xff\x85\xfc_\'\xacI\xdb+\xa2=\x8a\x80\x9f\x02\x8eW\x11l~\xaf\x1d\x9d\xfa\xe1\xc5\xef\xfd}\x86\x1d\xa5\xbf\xed=\xff\xd0\xe1\xa1I\xed\x96r\xfe\x13\xe9\n\x84\xb4Yt0P\xee\x9b}\x98\x03@\xae\x16\xccR\xe4\xe4\xce\xc8\x81\xfal\x9a9b7\xa9\x9f\xf3\x8d\x8e\r\xb3\x18g\x171 \x88\xcd\xf0\x9b\x81#\xa6\xc0\xb4\xfa\x17\x8f\xd24\xdf\xb0\x7f\x96\xfd\x99\xec\xe6\'\xec\xcb9e\x18\x11/\xc5\x05\xbf\x86\xc5c\xbei\x89\xd3M\xe4+g\xa3\xc3\xbcJ\xae%\x14S\xc6\xf6\xb1\x1eT\x1d\x189\xffm\xff\xd8*\x96\x1ax1\xd1X\xb0\xb6\x81`\xa1\xff\xf3\x9a\xb0\x99tF\xbf$O\xc5w\x00'}}, &(0x7f0000000680)={0x20, 0xffffffffffffffda, 0x7fff, {0x0, 0xa}}, &(0x7f0000000780)={0x78, 0xfffffffffffffffe, 0xd, {0x308, 0x3ff, 0x0, {0x0, 0xd4e0, 0x5, 0x142, 0x6, 0x6, 0x2, 0xbe, 0x8, 0xc000, 0x9, 0x0, 0x0, 0x4, 0x5c1}}}, &(0x7f0000000940)={0x90, 0x0, 0x1000, {0x4, 0x0, 0x5, 0xffffffff, 0xd49, 0xfffffff7, {0x1, 0x3, 0x4, 0x3, 0xc5, 0x3, 0x0, 0x8, 0x5, 0xa000, 0x80000000, 0x0, 0x0, 0x6, 0x3}}}, &(0x7f0000000a00)={0x50, 0x0, 0x0, [{0x1, 0x6, 0x1, 0x2, '$'}, {0x0, 0x9, 0x2, 0x5, '%$'}]}, &(0x7f0000000800)=ANY=[@ANYBLOB="b80000000000000000000000000000800300000000000000010000000000000000000000000010000800000000000000bc7cffff0400000000000000000000000100000000000000000000000000000003000000000000000600000000000000ffff00000000000000010000020000000300000000a0000014020000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000700000000000000050000000000000009000000000000000c000000040000002f6465762f75696e7075740000000000e64a28150be54c336d340a60cec40ab9f2ea"], &(0x7f0000000bc0)={0xa0, 0xfffffffffffffffe, 0x0, {{0x3, 0x0, 0x1, 0x5, 0x6, 0xe, {0x1, 0x2, 0x0, 0x70, 0x9, 0x7fffffff, 0xa, 0x101, 0x7fffffff, 0x8000, 0x6, 0xee01, 0x0, 0x7fff, 0xe}}, {0x0, 0x2}}}, &(0x7f0000000c80)={0x20, 0xfffffffffffffffe, 0x3, {0x7, 0x0, 0xd, 0x5}}, &(0x7f0000000ec0)={0x130, 0x0, 0x70f, {0xf, 0xffffffff, 0x0, '\x00', {0x100, 0x81, 0x15, 0x63b4, r3, r4, 0xa000, '\x00', 0x4, 0x5, 0x3, 0xfe16, {0x4, 0xc8}, {0xfb, 0x1}, {0x4, 0x704d}, {0x2, 0x4}, 0x2, 0x7, 0x6, 0x400}}}}) ioctl$UI_DEV_CREATE(r2, 0x5501) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=@ipv4_newroute={0x3c, 0x18, 0x20, 0x70bd2d, 0x25dfdbff, {0x2, 0x14, 0x0, 0x6, 0xfc, 0x2, 0xc8, 0xb, 0x400}, [@RTA_IP_PROTO={0x5, 0x1b, 0x11}, @RTA_PREFSRC={0x8, 0x7, @loopback}, @RTA_PREFSRC={0x8, 0x7, @remote}, @RTA_OIF={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x4000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = syz_open_dev$sndctrl(&(0x7f0000000200), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r6, 0xc1205531, &(0x7f0000000540)={0x1, 0x6, 0x0, 0x5, '\x00', '\x00', '\x00', 0x0, 0x0, 0x0, 0x0, "b6855a32474ffa64f778ddcf29c94337"}) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$key(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000006c0)=ANY=[], 0x33fe0}}, 0x40010) r7 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x80082, 0x0) write$vga_arbiter(r7, 0x0, 0xa) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000740)='./binderfs/binder1\x00', 0x1802, 0x0) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_DEV_SETUP(r8, 0x405c5503, &(0x7f0000000180)={{0x4, 0x7, 0xc}, 'syz1\x00'}) 7.362891131s ago: executing program 7 (id=5912): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000036c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x172f, 0x32, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0xb1, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0xc}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) rt_sigtimedwait(&(0x7f00000001c0)={[0x4, 0x3]}, 0x0, &(0x7f0000000200)={0x0, 0x989680}, 0x8) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000040)=ANY=[], 0x118) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r3 = socket$inet6(0xa, 0x3, 0x88) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newqdisc={0x150, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x9}}, [@qdisc_kind_options=@q_red={{0x8}, {0x124, 0x2, [@TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_MAX_P={0x8, 0x3, 0x7}, @TCA_RED_PARMS={0x14, 0x1, {0x1, 0x1, 0x371, 0xa, 0x1b, 0x11}}]}}]}, 0x150}, 0x1, 0x0, 0x0, 0x20000002}, 0x20004004) socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x83, 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x88fd537e5e114b6f, 0x12, r2, 0x0) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000000)={0x4, 0x89727a31546dcc4b, 0x4}) sendmmsg$inet6(r1, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0xc, &(0x7f00000000c0)={0x20, 0x12, 0x5, {0x5, 0x1, "a0f4eaea4ea165f3f96a4f009940bd8b922a1daa44fb13de86afaafc2324c33a5a67ef43a5dbd186d3f6d3437d654bbeca95b95ea980546e3df62336ff9b25e86df67edb1518b089bf83b3ac4fc76abe72d7dd43770bc90900123770808ca807938ddf6d6603c90bc1af1a6553eff3a1c7a904635fbd2be73110ae2c"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 6.807511888s ago: executing program 2 (id=5913): socket$kcm(0x10, 0x2, 0x0) io_setup(0x8, &(0x7f00000001c0)=0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/disk', 0x1, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000dc0)={@local, @remote, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "06cbef", 0x18, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}, @rand_addr=' \x01\x00', {[@hopopts={0x0, 0x2, '\x00', [@ra, @generic, @enc_lim, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}]}]}}}}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, 0x0, 0x4) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x80000001, 0x4, 0x32, 0x0, 0xff}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x6, 0x8a}, 0x9c) sendto$inet6(r3, &(0x7f0000000840)="94", 0x1, 0x4065851, &(0x7f0000000340)={0xa, 0x4e21, 0x10000005, @local, 0x6}, 0x1c) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f00000000c0)=0xa0000) openat$vmci(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000200)={@host, 0x1}) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000240)={@hyper, 0x3}) syz_usb_connect(0x2, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12011001c7a67d40b1134200ec000102030109022400013600000009049a00027ed72592090503f532"], 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r4, 0x7a4, &(0x7f0000000040)={{@local, 0x8daf}, 0x0, 0x2, 0x5, 0x3}) openat$cgroup_ro(r1, &(0x7f0000000100)='cpuset.memory_pressure\x00', 0x0, 0x0) io_submit(r0, 0x0, &(0x7f0000000400)) 6.802357667s ago: executing program 0 (id=5914): socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000580)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) io_setup(0x7, &(0x7f0000000280)) openat$sysfs(0xffffff9c, 0x0, 0x42, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_rdma(0x10, 0x3, 0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff69}, 0x94) r2 = syz_open_dev$usbfs(&(0x7f0000000340), 0x76, 0x101341) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x110, r3, 0x625a9000) ioctl$USBDEVFS_IOCTL(r2, 0x80045515, &(0x7f0000000040)=@usbdevfs_connect) r4 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$printer(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000000680)={0x44, &(0x7f0000000240)={0x40, 0x12, 0x2, "2ce8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.903910568s ago: executing program 5 (id=5915): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x80, 0x5, 0x10009}) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x10, 0x28ca41) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0106434, &(0x7f0000000140)={0x3, 0x0, 0x2}) ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40086439, &(0x7f0000000040)={0x1, r2}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, 0xffffffffffffffff, 0x100000) r3 = socket(0x10, 0x80002, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="ffffffffffffffff140012800900010076657468000000000400028008000a00", @ANYRES32=r9], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmmsg$alg(r3, &(0x7f00000000c0), 0x492492492492627, 0x0) write$char_usb(0xffffffffffffffff, &(0x7f0000000140)="6015f5bf02000000000000e2f2b6a1b0c4278f6d53540c75f4e25c59f9f4e1f544ccaa4d18484e69552f4d7ab03353f2285dfedc8101f6d20aee706fdfda9c0131ab803048097377739ec5b220fdae11fbad868671176615810000000000000000", 0x55) 5.570522125s ago: executing program 6 (id=5916): prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xb, 0x16, &(0x7f0000000380)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf670000000000001507"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x26}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1313b, r0, 0x0, 0x0, &(0x7f00000003c0)}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff7) ioctl$TUNGETVNETLE(r1, 0x4010744d, &(0x7f0000000180)) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) 5.076040928s ago: executing program 6 (id=5917): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) r2 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', r1, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00', @private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x80, 0xfffffffc, 0xdc67}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x8943, &(0x7f0000000080)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl1\x00', r3, 0x0, 0x0, 0x0, 0x0, 0xd, @dev={0xfe, 0x80, '\x00', 0x29}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x700, 0x8000, 0xfffffffc}}) 5.075802854s ago: executing program 5 (id=5918): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) read(r0, &(0x7f0000000440)=""/247, 0x26) r2 = open(&(0x7f0000000080)='./bus\x00', 0x145542, 0x40) ftruncate(r2, 0x2007ffd) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000040)={r2, &(0x7f0000001000)="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", &(0x7f0000000000)=""/52}, 0x1c) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x48, 0x8}, 0x50) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r8 = ioctl$KVM_GET_STATS_FD_cpu(r7, 0xaece) read$FUSE(r8, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000085000000a000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r3) 5.013258813s ago: executing program 2 (id=5919): socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000580)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) io_setup(0x7, &(0x7f0000000280)) openat$sysfs(0xffffff9c, 0x0, 0x42, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_rdma(0x10, 0x3, 0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff69}, 0x94) r2 = syz_open_dev$usbfs(&(0x7f0000000340), 0x76, 0x101341) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x110, r3, 0x625a9000) ioctl$USBDEVFS_IOCTL(r2, 0x80045515, &(0x7f0000000040)=@usbdevfs_connect) r4 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$printer(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000000680)={0x44, &(0x7f0000000240)={0x40, 0x12, 0x2, "2ce8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.812964132s ago: executing program 6 (id=5920): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup2(r0, r3) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f0000000140)={r2}, 0x8) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000000)={r2, 0x6}, &(0x7f0000000040)=0xc) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r8, 0x107, 0x1, &(0x7f0000000080)={r9, 0x13, 0x6, @local}, 0x10) setsockopt$packet_add_memb(r8, 0x107, 0x1, &(0x7f0000000040)={r9, 0x1, 0x6, @random="e7232d5c368d"}, 0x10) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=@getchain={0x24, 0x11, 0x1, 0x70bd29, 0x1fffffd, {0x0, 0x0, 0x0, r9, {0xd}, {0xf}, {0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000051}, 0x8008004) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="580000001000030400"/20, @ANYRES32, @ANYRESDEC, @ANYRESDEC], 0x58}}, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new user:syz 00000000000'], 0x2a, 0xfffffffffffffffc) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) setsockopt$inet_sctp6_SCTP_RTOINFO(r10, 0x84, 0x0, &(0x7f0000000080)={r5, 0x80101, 0xfffffffe}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r11 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r10, 0x84, 0x6, &(0x7f00000002c0)={r5, @in6={{0xa, 0x4e20, 0x9, @private2, 0x6a14}}}, 0x84) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1, 0xb, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8a06, 0x0, 0x0, 0x0, 0x4}, [@printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}]}, &(0x7f0000000000)='syzkaller\x00', 0x8, 0xfed, &(0x7f0000001840)=""/4077}, 0x94) setsockopt$EBT_SO_SET_COUNTERS(r11, 0x0, 0x81, &(0x7f0000000200)={'filter\x00', 0x0, 0x0, 0x0, [0x3, 0x8, 0x9bc6, 0x8, 0x4, 0x7fffffff], 0x1, 0x0, 0x0, [{}]}, 0x60) 3.683542766s ago: executing program 7 (id=5921): r0 = syz_open_procfs(0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000004c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ff8}]}) bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0)=@o_path={&(0x7f0000000280)='./file0\x00', 0x0, 0x8, r0}, 0x14) 3.607539396s ago: executing program 5 (id=5922): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) sendmmsg$inet(r1, &(0x7f0000000780)=[{{0x0, 0x300, &(0x7f0000000cc0)=[{&(0x7f0000000800)="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", 0x2de}, {&(0x7f0000000e80)="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", 0x24a}, {&(0x7f00000006c0)="5be08105437c98b91b9455046f57b5fc090014bde2bb01000000000000001a7838d859207067c30aa7352abbdf98e9bf033a3184a11e84639d3b9164d9c5d729f3", 0x41}, {&(0x7f00000007c0)="5a118cf21a0000ffffffffffffff8100dd6786b792e122", 0x17}], 0x4, 0x0, 0x0, 0x900}}], 0x1, 0x0) 3.342640408s ago: executing program 5 (id=5923): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x206) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x79) close_range(r2, 0xffffffffffffffff, 0x2) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x30000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r5, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r5, 0x0, 0x0) syz_usb_control_io$lan78xx(r5, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000040)=ANY=[@ANYBLOB="f8300000006dcc73935823b2fb7703633007f025de94adccff020600"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r5, 0x0, 0x0) syz_usb_control_io(r5, 0x0, &(0x7f0000003f00)={0x44, &(0x7f0000000140)=ANY=[@ANYBLOB="40012000000036"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mkdir(0x0, 0x0) r6 = syz_io_uring_setup(0x111, &(0x7f0000000140)={0x0, 0x0, 0x800, 0x3, 0x1}, &(0x7f0000000340)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f00000001c0)='./file0/../file0\x00', 0x26, 0x80, 0x0, {0x0, r9}}) syz_open_dev$mouse(&(0x7f0000000100), 0x0, 0x800) r10 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r11, r12, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) io_uring_enter(r10, 0x48e9, 0x0, 0x2, 0x0, 0x0) io_uring_enter(r6, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) 3.325372858s ago: executing program 7 (id=5924): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f00000003c0)={@val={0x0, 0x800}, @val={0x3, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x86, 0x66, 0x0, 0x0, 0x1, 0x0, @private=0xa010000, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x0, 0xf, 0x0, {0x1a, 0x4, 0x0, 0x3a, 0x584, 0x65, 0x9, 0x25, 0x16, 0x3313, @empty, @multicast2, {[@end, @generic={0x94, 0xf, "4fcf02d60e646404e8e478505e"}, @end, @noop, @cipso={0x86, 0x31, 0x3, [{0x1, 0x11, "97e3eedcb1b4f0f6c3fb95c6087f31"}, {0x5, 0xa, "2d3110a90aa230a1"}, {0x5e232c06587b5052, 0x10, "66079e88e964c34418c418a7ed5b"}]}, @rr={0x7, 0xf, 0x16, [@dev={0xac, 0x14, 0x14, 0x41}, @multicast1, @loopback]}]}}, "c819"}}}, 0x94) 2.466663761s ago: executing program 7 (id=5925): syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005ceda240d80408fdb34c01020301090224"], 0x0) socket$rds(0x15, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x3010}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000340)={0x2c, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3c01}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(r2, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) 2.462042021s ago: executing program 0 (id=5935): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000440)=@security={'security\x00', 0xe, 0x4, 0x358, 0xffffffff, 0x138, 0x248, 0x248, 0xffffffff, 0xffffffff, 0x388, 0x388, 0x388, 0xffffffff, 0x4, 0x0, {[{{@ip={@multicast2, @rand_addr=0x64010100, 0x0, 0xffffff00, 'nicvf0\x00', 'pimreg0\x00', {}, {}, 0xc, 0x2, 0x20}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x3, [0x610b8915cf53baa7, 0x0, 0x6, 0x3, 0x3], 0x0, 0x7}, {0x3, [0x0, 0x0, 0x2, 0x0, 0x1, 0x5], 0x2, 0x1}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x0, 0x2, {0x184d29f7}}}}, {{@ip={@empty, @private=0xa010101, 0xffffff00, 0xffff00, 'syzkaller0\x00', 'gretap0\x00', {}, {0xff}, 0x89, 0x0, 0x11}, 0x0, 0xdc, 0x13c, 0x0, {}, [@common=@set={{0x40}, {{0xffffffffffffffff, [0x4, 0x4, 0x4, 0x6, 0x2, 0x4], 0x3, 0x3}}}, @common=@addrtype={{0x2c}, {0x804, 0xa1d, 0x0, 0x1}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x4, 0x7, 0x2, 0x5, 0x4, 0x1], 0x0, 0x4}, {0x4, [0x0, 0x0, 0x4, 0x1, 0x1, 0x6], 0x0, 0x6}}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x3b4) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_open_dev$vbi(&(0x7f0000000240), 0x3, 0x2) bind$xdp(0xffffffffffffffff, 0x0, 0x0) (async) bind$xdp(0xffffffffffffffff, 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) (async) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000340)={0x1d, r4, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) sendmmsg(r3, &(0x7f00000038c0)=[{{&(0x7f0000000440)=@can={0x1d, 0x0, 0xc8}, 0x80, &(0x7f0000001b00)=[{0x0}, {&(0x7f0000000680)="740a661ddefd", 0x6}], 0x2}}], 0x1, 0x881) (async) sendmmsg(r3, &(0x7f00000038c0)=[{{&(0x7f0000000440)=@can={0x1d, 0x0, 0xc8}, 0x80, &(0x7f0000001b00)=[{0x0}, {&(0x7f0000000680)="740a661ddefd", 0x6}], 0x2}}], 0x1, 0x881) r5 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) r7 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x147082, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x20400, 0x0) r9 = syz_open_dev$dri(&(0x7f0000000200), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r9, 0xc04064a0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0}) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) (async) r10 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$KVM_GET_DIRTY_LOG(r5, 0x4010ae42, &(0x7f0000000180)={0x10200, 0x0, &(0x7f0000ffc000/0x3000)=nil}) ioctl$KVM_SET_CLOCK(r10, 0x4188aec6, &(0x7f0000000040)={0x1, 0x8, 0x0, 0x20000000000000}) (async) ioctl$KVM_SET_CLOCK(r10, 0x4188aec6, &(0x7f0000000040)={0x1, 0x8, 0x0, 0x20000000000000}) ioctl$BTRFS_IOC_RM_DEV(r9, 0x5000940b, &(0x7f0000000800)={{r7}, "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"}) (async) ioctl$BTRFS_IOC_RM_DEV(r9, 0x5000940b, &(0x7f0000000800)={{r7}, "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"}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, 0xffffffffffffffff, 0x1a3b5000) ioctl$KVM_PRE_FAULT_MEMORY(r6, 0xc040aed5, &(0x7f00000001c0)={0x3000, 0x101000}) 1.747953721s ago: executing program 6 (id=5926): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x54, 0x10, 0x403, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x74, 0x0, 0x1810, 0x55007}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x24, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_SNOOPING={0x5}, @IFLA_BR_AGEING_TIME={0x8, 0x4, 0x84}, @IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}, @IFLA_BR_NF_CALL_ARPTABLES={0x5, 0x26, 0x1}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x4800) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="5d5b0000000000001848128008000100767469000c0002800800050064010100"], 0x38}, 0x1, 0x0, 0x0, 0x58840}, 0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, &(0x7f0000000140)={0x1, 'ip6tnl0\x00', {}, 0x7ff}) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x98f907, 0x0, '\x00', @p_u8=&(0x7f0000000180)}}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x101, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) r7 = dup(r6) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r6, 0x0, 0x4048043) r8 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r7, 0x84, 0x23, &(0x7f0000000100)={0x0, 0x3}, 0x8) connect$pppoe(r4, &(0x7f0000000040)={0x18, 0x0, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}, 'lo\x00'}}, 0x1e) syz_emit_ethernet(0x4e, &(0x7f0000000540)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd64fde9e200180000fc01000000000000000000000000000000000000000000000000ffffac1414aa3b02010300000000fc010000000000000000000000000001142898878544aeedc06d4d6568398d21"], 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03080000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021440000000c0a09030000000000000000070000000900020073797a31000000000900010073797a300000000018000380140000800800034000000002050006405200000014000000110001"], 0xc8}}, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) 306.94885ms ago: executing program 0 (id=5927): syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x80, 0x5, 0x10009}) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x10, 0x28ca41) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0106434, &(0x7f0000000140)={0x3, 0x0, 0x2}) ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40086439, &(0x7f0000000040)={0x1, r1}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, 0xffffffffffffffff, 0x100000) r2 = socket(0x10, 0x80002, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="ffffffffffffffff140012800900010076657468000000000400028008000a00", @ANYRES32=r8], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmmsg$alg(r2, &(0x7f00000000c0), 0x492492492492627, 0x0) write$char_usb(0xffffffffffffffff, &(0x7f0000000140)="6015f5bf02000000000000e2f2b6a1b0c4278f6d53540c75f4e25c59f9f4e1f544ccaa4d18484e69552f4d7ab03353f2285dfedc8101f6d20aee706fdfda9c0131ab803048097377739ec5b220fdae11fbad868671176615810000000000000000", 0x55) 274.235355ms ago: executing program 6 (id=5928): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = socket$can_bcm(0x1d, 0x2, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r3, 0x400, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c1200, 0xf0) fcntl$setlease(r3, 0x400, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000000)={@local, 0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r4, 0x7a5, &(0x7f00000000c0)={{@my=0x0}, 0x1, 0x2}) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff) ioctl$SNDCTL_DSP_CHANNELS(r5, 0xc0045006, &(0x7f0000000080)=0x7f) ioctl$SNDCTL_DSP_SPEED(r5, 0xc0045002, &(0x7f00000000c0)=0x6) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') openat$sw_sync(0xffffff9c, &(0x7f0000000040), 0x80, 0x0) r8 = openat$vicodec0(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r8, 0xc0185648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x98f90f, 0x20, '\x00', @p_u8=&(0x7f0000000040)=0x1}}) lseek(r7, 0x14, 0x0) getsockopt$inet6_buf(r6, 0x29, 0x6, 0x0, &(0x7f0000000400)) read$dsp(r5, &(0x7f00000011c0)=""/4117, 0x200021d5) openat$audio1(0xffffff9c, &(0x7f0000000040), 0x400000, 0x0) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) 0s ago: executing program 2 (id=5929): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x2, 0x180, 0x4, 0x10, 0xf1, 0x50, 0x12, 0x5, 0x0, 0x29, 0x0, 0x6, 0x0, 0xbdb], 0xffff1001, 0x43100}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000003c0)={[0x7, 0x1000000000, 0x0, 0x43, 0x2000001, 0x0, 0x2004cb, 0x0, 0xa7c, 0x68ff, 0x5, 0x9, 0x3, 0x0, 0x401], 0xeeee8000, 0x202}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x3000, 0xeeee0000, 0x8, 0x8, 0xb, 0xe6, 0x40, 0xff, 0x0, 0x81, 0x3}, {0x5000, 0xf000, 0x0, 0x0, 0x42, 0x5, 0x7d, 0x6, 0x16, 0x0, 0x2, 0x87}, {0x0, 0xdddd0000, 0xe, 0x5, 0x3, 0x7, 0x0, 0x9, 0x1, 0xa3, 0x5, 0x5}, {0x1, 0xeeef0000, 0x9, 0x6, 0x5, 0x42, 0xb, 0xff, 0x8, 0x7, 0xe}, {0xeeee0000, 0xd000, 0xf, 0x3, 0x15, 0x7, 0xab, 0x8, 0x6, 0x9, 0xf7, 0x8}, {0xeeefa000, 0xdddd0000, 0x0, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x82, 0x2f, 0x1, 0x7}, {0x3000, 0x3000, 0x4, 0x5, 0x7, 0x5, 0x7, 0x3, 0x8, 0x81, 0x40, 0x70}, {0xd000, 0x4000, 0xa, 0x5, 0xcd, 0x7, 0x0, 0x9, 0x2, 0xc, 0xb0, 0x9}, {0xeeef0000, 0x2e}, {0x8000000, 0x7}, 0x80000031, 0x0, 0x0, 0x2024, 0x2, 0x0, 0x100000, [0x6800000000000000, 0x4, 0x3, 0x8]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = syz_io_uring_setup(0x4e3, &(0x7f0000000480)={0x0, 0x938c, 0x10100, 0x3, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x9}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x58}}, 0x0) io_uring_enter(r5, 0x708, 0xec72, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) kernel console output (not intermixed with test programs): 0] packet_setsockopt+0xafe/0x12c0 [ 1744.147840][T27770] ? __pfx_packet_setsockopt+0x10/0x10 [ 1744.147873][T27770] ? __lock_acquire+0xab9/0xd20 [ 1744.147892][T27770] ? aa_sk_perm+0x81e/0x950 [ 1744.147917][T27770] ? __pfx_aa_sk_perm+0x10/0x10 [ 1744.147939][T27770] ? __fget_files+0x2a/0x420 [ 1744.147953][T27770] ? aa_sock_opt_perm+0xff/0x1b0 [ 1744.147978][T27770] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1744.147993][T27770] ? __pfx_packet_setsockopt+0x10/0x10 [ 1744.148017][T27770] do_sock_setsockopt+0x17c/0x1b0 [ 1744.148037][T27770] __ia32_sys_setsockopt+0x13f/0x1b0 [ 1744.148057][T27770] __do_fast_syscall_32+0xb6/0x2b0 [ 1744.148080][T27770] ? lockdep_hardirqs_on+0x9c/0x150 [ 1744.148103][T27770] do_fast_syscall_32+0x34/0x80 [ 1744.148125][T27770] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1744.148144][T27770] RIP: 0023:0xf7ff3539 [ 1744.148157][T27770] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1744.148171][T27770] RSP: 002b:00000000f54e655c EFLAGS: 00000206 ORIG_RAX: 000000000000016e [ 1744.148187][T27770] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000107 [ 1744.148198][T27770] RDX: 0000000000000012 RSI: 0000000080000000 RDI: 0000000000000004 [ 1744.148208][T27770] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1744.148217][T27770] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1744.148226][T27770] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1744.148249][T27770] [ 1744.666318][T27773] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5699'. [ 1744.835906][ T5927] usb 7-1: new low-speed USB device number 29 using dummy_hcd [ 1744.997466][ T5927] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 1745.006078][ T5927] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1745.032230][ T5927] usb 7-1: config 0 has no interface number 0 [ 1745.040338][ T5927] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1745.053127][ T5927] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 1745.065410][ T5927] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1745.077589][ T5927] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1745.089801][ T5927] usb 7-1: config 0 descriptor?? [ 1745.100122][ T5927] ldusb 7-1:0.55: Interrupt in endpoint not found [ 1745.306913][ T5927] usb 7-1: USB disconnect, device number 29 [ 1745.545649][T15804] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 1745.625753][ T5927] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 1745.697883][T15804] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1745.709000][T15804] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1745.721109][T15804] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1745.730424][T15804] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1745.738664][T15804] usb 6-1: Manufacturer: syz [ 1745.745498][T15804] usb 6-1: config 0 descriptor?? [ 1745.775601][ T5927] usb 7-1: Using ep0 maxpacket: 8 [ 1745.782471][ T5927] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1745.791411][ T5927] usb 7-1: config 0 has no interface number 0 [ 1745.797713][ T5927] usb 7-1: config 0 interface 1 altsetting 0 has an endpoint descriptor with address 0xB6, changing to 0x86 [ 1745.809546][ T5927] usb 7-1: config 0 interface 1 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 1023 [ 1745.819626][ T5927] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 1745.830685][ T5927] usb 7-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 1745.839855][ T5927] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1745.848019][ T5927] usb 7-1: SerialNumber: syz [ 1745.856143][ T5927] usb 7-1: config 0 descriptor?? [ 1745.862021][T27775] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 1745.872305][ T5927] hso 7-1:0.1: Failed to find BULK OUT ep [ 1745.966161][T15804] usbhid 6-1:0.0: can't add hid device: -71 [ 1745.972346][T15804] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1745.983113][T15804] usb 6-1: USB disconnect, device number 68 [ 1746.081809][T18489] usb 7-1: USB disconnect, device number 30 [ 1746.355650][T18476] usb 1-1: new full-speed USB device number 19 using dummy_hcd [ 1746.519000][T18476] usb 1-1: config 54 has an invalid interface number: 154 but max is 0 [ 1746.531546][T18476] usb 1-1: config 54 has an invalid descriptor of length 0, skipping remainder of the config [ 1746.541967][T18476] usb 1-1: config 54 has no interface number 0 [ 1746.548259][T18476] usb 1-1: config 54 interface 154 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 4 [ 1746.559895][T18476] usb 1-1: config 54 interface 154 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1746.578176][T18476] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice= 0.ec [ 1746.596947][T18476] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1746.615916][T18476] usb 1-1: Product: syz [ 1746.620162][T18476] usb 1-1: Manufacturer: syz [ 1746.624782][T18476] usb 1-1: SerialNumber: syz [ 1746.762782][T27806] FAULT_INJECTION: forcing a failure. [ 1746.762782][T27806] name failslab, interval 1, probability 0, space 0, times 0 [ 1746.826021][T27806] CPU: 0 UID: 0 PID: 27806 Comm: syz.6.5712 Not tainted syzkaller #0 PREEMPT(full) [ 1746.826051][T27806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1746.826064][T27806] Call Trace: [ 1746.826073][T27806] [ 1746.826082][T27806] dump_stack_lvl+0x189/0x250 [ 1746.826114][T27806] ? __pfx____ratelimit+0x10/0x10 [ 1746.826141][T27806] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1746.826169][T27806] ? __pfx__printk+0x10/0x10 [ 1746.826197][T27806] ? __pfx___might_resched+0x10/0x10 [ 1746.826231][T27806] should_fail_ex+0x414/0x560 [ 1746.826268][T27806] should_failslab+0xa8/0x100 [ 1746.826292][T27806] kmem_cache_alloc_lru_noprof+0x79/0x6d0 [ 1746.826321][T27806] ? mas_update_gap+0x1ed/0xac0 [ 1746.826349][T27806] ? __d_alloc+0x36/0x7a0 [ 1746.826386][T27806] __d_alloc+0x36/0x7a0 [ 1746.826415][T27806] d_alloc_parallel+0xe1/0x1610 [ 1746.826441][T27806] ? __lock_acquire+0xab9/0xd20 [ 1746.826473][T27806] ? __lock_acquire+0xab9/0xd20 [ 1746.826500][T27806] ? __pfx_d_alloc_parallel+0x10/0x10 [ 1746.826529][T27806] ? __raw_spin_lock_init+0x45/0x100 [ 1746.826559][T27806] ? __init_waitqueue_head+0xa9/0x150 [ 1746.826593][T27806] __lookup_slow+0x116/0x3d0 [ 1746.826623][T27806] ? __pfx___lookup_slow+0x10/0x10 [ 1746.826659][T27806] ? d_lookup+0x8a/0xa0 [ 1746.826683][T27806] ? lookup_noperm+0x112/0x220 [ 1746.826712][T27806] simple_start_creating+0xfd/0x1e0 [ 1746.826735][T27806] ? __pfx_simple_start_creating+0x10/0x10 [ 1746.826770][T27806] debugfs_start_creating+0x10f/0x180 [ 1746.826805][T27806] __debugfs_create_file+0x79/0x4f0 [ 1746.826840][T27806] debugfs_create_file_full+0x3f/0x60 [ 1746.826874][T27806] ref_tracker_dir_debugfs+0x14e/0x270 [ 1746.826922][T27806] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 1746.826971][T27806] ? trace_kmalloc+0x1f/0xd0 [ 1746.826995][T27806] ? __kvmalloc_node_noprof+0x5ed/0x910 [ 1746.827030][T27806] ? __raw_spin_lock_init+0x45/0x100 [ 1746.827058][T27806] alloc_netdev_mqs+0x272/0x11b0 [ 1746.827083][T27806] ? __pfx_br_dev_setup+0x10/0x10 [ 1746.827118][T27806] rtnl_create_link+0x31f/0xd10 [ 1746.827149][T27806] rtnl_newlink_create+0x25c/0xb00 [ 1746.827175][T27806] ? __lock_acquire+0xab9/0xd20 [ 1746.827200][T27806] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 1746.827223][T27806] ? __pfx___mutex_lock+0x10/0x10 [ 1746.827262][T27806] ? ns_capable+0x8a/0xf0 [ 1746.827287][T27806] rtnl_newlink+0x16e4/0x1c80 [ 1746.827318][T27806] ? netlink_deliver_tap+0x19c/0x1b0 [ 1746.827350][T27806] ? __pfx_rtnl_newlink+0x10/0x10 [ 1746.827405][T27806] ? kasan_quarantine_put+0xdd/0x220 [ 1746.827432][T27806] ? lockdep_hardirqs_on+0x9c/0x150 [ 1746.827464][T27806] ? nlmon_xmit+0xb0/0x100 [ 1746.827487][T27806] ? kmem_cache_free+0x19b/0x690 [ 1746.827522][T27806] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1746.827544][T27806] ? lockdep_hardirqs_on+0x9c/0x150 [ 1746.827570][T27806] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1746.827595][T27806] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 1746.827621][T27806] ? __dev_queue_xmit+0x27b/0x3b50 [ 1746.827643][T27806] ? __dev_queue_xmit+0x27b/0x3b50 [ 1746.827664][T27806] ? __dev_queue_xmit+0x27b/0x3b50 [ 1746.827687][T27806] ? __dev_queue_xmit+0x1d79/0x3b50 [ 1746.827708][T27806] ? kasan_save_track+0x3e/0x80 [ 1746.827734][T27806] ? __kasan_slab_alloc+0x6c/0x80 [ 1746.827766][T27806] ? __lock_acquire+0xab9/0xd20 [ 1746.827811][T27806] ? __pfx_rtnl_newlink+0x10/0x10 [ 1746.827839][T27806] rtnetlink_rcv_msg+0x7cf/0xb70 [ 1746.827873][T27806] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 1746.827908][T27806] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1746.827935][T27806] ? ref_tracker_free+0x63a/0x7d0 [ 1746.827954][T27806] ? __asan_memcpy+0x40/0x70 [ 1746.827978][T27806] ? __pfx_ref_tracker_free+0x10/0x10 [ 1746.828008][T27806] netlink_rcv_skb+0x208/0x470 [ 1746.828040][T27806] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1746.828070][T27806] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1746.828111][T27806] ? netlink_deliver_tap+0x2e/0x1b0 [ 1746.828138][T27806] netlink_unicast+0x82f/0x9e0 [ 1746.828176][T27806] ? __pfx_netlink_unicast+0x10/0x10 [ 1746.828206][T27806] ? netlink_sendmsg+0x642/0xb30 [ 1746.828223][T27806] ? skb_put+0x11b/0x210 [ 1746.828245][T27806] netlink_sendmsg+0x805/0xb30 [ 1746.828275][T27806] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1746.828296][T27806] ? __lock_acquire+0xab9/0xd20 [ 1746.828314][T27806] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1746.828345][T27806] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1746.828365][T27806] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1746.828385][T27806] __sock_sendmsg+0x21c/0x270 [ 1746.828414][T27806] sock_write_iter+0x279/0x360 [ 1746.828442][T27806] ? __pfx_sock_write_iter+0x10/0x10 [ 1746.828477][T27806] ? bpf_lsm_file_permission+0x9/0x20 [ 1746.828498][T27806] ? security_file_permission+0x75/0x290 [ 1746.828530][T27806] vfs_write+0x5c9/0xb30 [ 1746.828562][T27806] ? __pfx_sock_write_iter+0x10/0x10 [ 1746.828587][T27806] ? __pfx_vfs_write+0x10/0x10 [ 1746.828624][T27806] ? __fget_files+0x2a/0x420 [ 1746.828652][T27806] ksys_write+0x145/0x250 [ 1746.828678][T27806] ? exc_page_fault+0x82/0x100 [ 1746.828704][T27806] ? __pfx_ksys_write+0x10/0x10 [ 1746.828735][T27806] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 1746.828763][T27806] ? lockdep_hardirqs_on+0x9c/0x150 [ 1746.828792][T27806] __do_fast_syscall_32+0xb6/0x2b0 [ 1746.828821][T27806] ? lockdep_hardirqs_on+0x9c/0x150 [ 1746.828850][T27806] do_fast_syscall_32+0x34/0x80 [ 1746.828879][T27806] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1746.828910][T27806] RIP: 0023:0xf7ff3539 [ 1746.828927][T27806] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1746.828944][T27806] RSP: 002b:00000000f54e655c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 1746.828965][T27806] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000040 [ 1746.828978][T27806] RDX: 000000000000033a RSI: 0000000000000000 RDI: 0000000000000000 [ 1746.828991][T27806] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1746.829002][T27806] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1746.829013][T27806] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1746.829043][T27806] [ 1747.628365][T18476] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1747.640389][T16286] usb 1-1: Failed to submit usb control message: -71 [ 1747.672122][T16286] usb 1-1: unable to send the bmi data to the device: -71 [ 1747.753930][T16286] usb 1-1: unable to get target info from device [ 1747.772172][T18476] usb 1-1: USB disconnect, device number 19 [ 1747.793329][T16286] usb 1-1: could not get target info (-71) [ 1747.865796][T16286] usb 1-1: could not probe fw (-71) [ 1748.391791][T27825] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5716'. [ 1748.533781][T27825] veth13: entered promiscuous mode [ 1748.539221][T27825] veth13: entered allmulticast mode [ 1748.558808][T27825] bridge9: port 1(veth13) entered blocking state [ 1748.577641][T27825] bridge9: port 1(veth13) entered disabled state [ 1748.610317][T27825] bridge9: port 1(veth13) entered blocking state [ 1748.616972][T27825] bridge9: port 1(veth13) entered forwarding state [ 1748.679369][T27833] FAULT_INJECTION: forcing a failure. [ 1748.679369][T27833] name failslab, interval 1, probability 0, space 0, times 0 [ 1748.713900][T27833] CPU: 1 UID: 0 PID: 27833 Comm: syz.5.5719 Not tainted syzkaller #0 PREEMPT(full) [ 1748.713928][T27833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1748.713940][T27833] Call Trace: [ 1748.713948][T27833] [ 1748.713957][T27833] dump_stack_lvl+0x189/0x250 [ 1748.713989][T27833] ? __pfx____ratelimit+0x10/0x10 [ 1748.714014][T27833] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1748.714041][T27833] ? __pfx__printk+0x10/0x10 [ 1748.714068][T27833] ? __pfx___might_resched+0x10/0x10 [ 1748.714095][T27833] should_fail_ex+0x414/0x560 [ 1748.714129][T27833] should_failslab+0xa8/0x100 [ 1748.714150][T27833] __kmalloc_cache_noprof+0x6f/0x6f0 [ 1748.714179][T27833] ? nft_trans_table_add+0x56/0x430 [ 1748.714210][T27833] nft_trans_table_add+0x56/0x430 [ 1748.714241][T27833] nf_tables_newtable+0xce3/0x1890 [ 1748.714284][T27833] nfnetlink_rcv+0x11d9/0x2590 [ 1748.714346][T27833] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1748.714450][T27833] ? netlink_deliver_tap+0x2e/0x1b0 [ 1748.714490][T27833] netlink_unicast+0x82f/0x9e0 [ 1748.714529][T27833] ? __pfx_netlink_unicast+0x10/0x10 [ 1748.714561][T27833] ? netlink_sendmsg+0x642/0xb30 [ 1748.714579][T27833] ? skb_put+0x11b/0x210 [ 1748.714602][T27833] netlink_sendmsg+0x805/0xb30 [ 1748.714633][T27833] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1748.714656][T27833] ? __import_iovec+0x5d4/0x7f0 [ 1748.714681][T27833] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1748.714714][T27833] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1748.714735][T27833] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1748.714757][T27833] __sock_sendmsg+0x21c/0x270 [ 1748.714788][T27833] ____sys_sendmsg+0x505/0x830 [ 1748.714816][T27833] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1748.714855][T27833] ___sys_sendmsg+0x21f/0x2a0 [ 1748.714882][T27833] ? __pfx____sys_sendmsg+0x10/0x10 [ 1748.714943][T27833] ? __fget_files+0x2a/0x420 [ 1748.714963][T27833] ? __fget_files+0x3a0/0x420 [ 1748.714994][T27833] __sys_sendmsg+0x164/0x220 [ 1748.715019][T27833] ? __pfx___sys_sendmsg+0x10/0x10 [ 1748.715051][T27833] ? __pfx_ksys_write+0x10/0x10 [ 1748.715084][T27833] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 1748.715117][T27833] ? lockdep_hardirqs_on+0x9c/0x150 [ 1748.715148][T27833] __do_fast_syscall_32+0xb6/0x2b0 [ 1748.715179][T27833] ? lockdep_hardirqs_on+0x9c/0x150 [ 1748.715211][T27833] do_fast_syscall_32+0x34/0x80 [ 1748.715240][T27833] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1748.715266][T27833] RIP: 0023:0xf70bd539 [ 1748.715284][T27833] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1748.715303][T27833] RSP: 002b:00000000f54ad55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1748.715326][T27833] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0 [ 1748.715341][T27833] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1748.715352][T27833] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1748.715364][T27833] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1748.715376][T27833] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1748.715408][T27833] [ 1749.031545][T18232] bridge9: port 1(veth13) entered disabled state [ 1749.643396][T27827] veth15: entered promiscuous mode [ 1749.672059][T27827] veth15: entered allmulticast mode [ 1749.697388][T27827] bridge9: port 2(veth15) entered blocking state [ 1749.726098][T27827] bridge9: port 2(veth15) entered disabled state [ 1749.806723][T27827] bridge9: port 2(veth15) entered blocking state [ 1749.813291][T27827] bridge9: port 2(veth15) entered forwarding state [ 1749.925717][ T5922] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 1749.993078][T18232] bridge9: port 2(veth15) entered disabled state [ 1749.999760][T18476] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 1750.099884][ T5922] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1750.112048][ T5922] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1750.123839][ T5922] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1750.143873][ T5922] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1750.161296][ T5922] usb 6-1: Manufacturer: syz [ 1750.175099][ T5922] usb 6-1: config 0 descriptor?? [ 1750.183888][T27848] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5723'. [ 1750.185627][T18476] usb 3-1: Using ep0 maxpacket: 32 [ 1750.204197][T18476] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 1750.241959][T18476] usb 3-1: config 0 has no interface number 0 [ 1750.288218][T18476] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1750.329759][T18476] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1750.387870][T18476] usb 3-1: Product: syz [ 1750.392095][T18476] usb 3-1: Manufacturer: syz [ 1750.429795][T18476] usb 3-1: SerialNumber: syz [ 1750.462529][T18476] usb 3-1: config 0 descriptor?? [ 1750.497085][T18476] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1750.760839][T27845] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1750.794929][T27845] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1750.839270][T27845] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1750.849925][ T5922] uclogic 0003:256C:006D.003B: failed retrieving Huion firmware version: -71 [ 1750.850312][T27845] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1750.868812][ T5922] uclogic 0003:256C:006D.003B: failed probing parameters: -71 [ 1750.899473][ T5922] uclogic 0003:256C:006D.003B: probe with driver uclogic failed with error -71 [ 1751.119195][ T5922] usb 6-1: USB disconnect, device number 69 [ 1751.381546][T18476] usb 3-1: qt2_attach - failed to power on unit: -71 [ 1751.436066][T27870] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 1751.454912][T18476] quatech2 3-1:0.51: probe with driver quatech2 failed with error -71 [ 1751.542535][T18476] usb 3-1: USB disconnect, device number 38 [ 1751.729199][T27876] fuse: Bad value for 'fd' [ 1751.744072][T27873] syzkaller0: entered promiscuous mode [ 1751.749790][T27873] syzkaller0: entered allmulticast mode [ 1751.780464][T27873] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5729'. [ 1752.715762][T18345] Bluetooth: hci4: command 0x040f tx timeout [ 1753.215887][T27892] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5735'. [ 1753.289340][T27895] veth17: entered promiscuous mode [ 1753.294481][T27895] veth17: entered allmulticast mode [ 1753.300979][T27895] bridge10: port 1(veth17) entered blocking state [ 1753.313199][T27895] bridge10: port 1(veth17) entered disabled state [ 1753.331303][T27895] bridge10: port 1(veth17) entered blocking state [ 1753.338113][T27895] bridge10: port 1(veth17) entered forwarding state [ 1753.409998][T27892] veth19: entered promiscuous mode [ 1753.430080][T27892] veth19: entered allmulticast mode [ 1753.452535][T27892] bridge10: port 2(veth19) entered blocking state [ 1753.485443][T27892] bridge10: port 2(veth19) entered disabled state [ 1753.523626][T27892] bridge10: port 2(veth19) entered blocking state [ 1753.530221][T27892] bridge10: port 2(veth19) entered forwarding state [ 1753.887731][T12359] bridge10: port 1(veth17) entered disabled state [ 1753.916753][T12359] bridge10: port 2(veth19) entered disabled state [ 1753.976875][T27908] FAULT_INJECTION: forcing a failure. [ 1753.976875][T27908] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1754.032285][T27908] CPU: 1 UID: 0 PID: 27908 Comm: syz.0.5740 Not tainted syzkaller #0 PREEMPT(full) [ 1754.032315][T27908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1754.032328][T27908] Call Trace: [ 1754.032337][T27908] [ 1754.032346][T27908] dump_stack_lvl+0x189/0x250 [ 1754.032380][T27908] ? __pfx____ratelimit+0x10/0x10 [ 1754.032409][T27908] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1754.032437][T27908] ? __pfx__printk+0x10/0x10 [ 1754.032460][T27908] ? __might_fault+0xb0/0x130 [ 1754.032502][T27908] should_fail_ex+0x414/0x560 [ 1754.032542][T27908] _copy_from_user+0x2d/0xb0 [ 1754.032571][T27908] kstrtouint_from_user+0xc4/0x170 [ 1754.032597][T27908] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1754.032639][T27908] proc_fail_nth_write+0x88/0x200 [ 1754.032667][T27908] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1754.032701][T27908] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1754.032742][T27908] vfs_write+0x27e/0xb30 [ 1754.032779][T27908] ? __pfx_vfs_write+0x10/0x10 [ 1754.032809][T27908] ? __fget_files+0x2a/0x420 [ 1754.032834][T27908] ? __fget_files+0x3a0/0x420 [ 1754.032852][T27908] ? __fget_files+0x2a/0x420 [ 1754.032881][T27908] ksys_write+0x145/0x250 [ 1754.032921][T27908] ? __pfx_ksys_write+0x10/0x10 [ 1754.032954][T27908] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 1754.032986][T27908] ? lockdep_hardirqs_on+0x9c/0x150 [ 1754.033019][T27908] __do_fast_syscall_32+0xb6/0x2b0 [ 1754.033049][T27908] ? lockdep_hardirqs_on+0x9c/0x150 [ 1754.033081][T27908] do_fast_syscall_32+0x34/0x80 [ 1754.033111][T27908] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1754.033136][T27908] RIP: 0023:0xf7f01539 [ 1754.033155][T27908] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1754.033174][T27908] RSP: 002b:00000000f53f6590 EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 1754.033196][T27908] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f53f6620 [ 1754.033211][T27908] RDX: 0000000000000001 RSI: 00000000f7395ff4 RDI: 0000000000000000 [ 1754.033223][T27908] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 1754.033235][T27908] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1754.033247][T27908] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1754.033278][T27908] [ 1754.265725][ T5922] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 1754.411119][T26592] hid-generic 0000:0000:0000.003C: unknown main item tag 0x0 [ 1754.429727][T26592] hid-generic 0000:0000:0000.003C: unknown main item tag 0x0 [ 1754.437552][ T5922] usb 3-1: Using ep0 maxpacket: 8 [ 1754.451295][ T5922] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1754.465015][T26592] hid-generic 0000:0000:0000.003C: unknown main item tag 0x0 [ 1754.479126][ T5922] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1754.498080][T26592] hid-generic 0000:0000:0000.003C: unknown main item tag 0x0 [ 1754.512331][ T5922] usb 3-1: Product: syz [ 1754.521121][T26592] hid-generic 0000:0000:0000.003C: unknown main item tag 0x0 [ 1754.525697][T18476] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 1754.528941][ T5922] usb 3-1: Manufacturer: syz [ 1754.541381][T26592] hid-generic 0000:0000:0000.003C: unknown main item tag 0x0 [ 1754.549248][ T5922] usb 3-1: SerialNumber: syz [ 1754.554128][T26592] hid-generic 0000:0000:0000.003C: unknown main item tag 0x0 [ 1754.565327][ T5922] usb 3-1: config 0 descriptor?? [ 1754.580612][T26592] hid-generic 0000:0000:0000.003C: unknown main item tag 0x0 [ 1754.588535][T26592] hid-generic 0000:0000:0000.003C: unknown main item tag 0x0 [ 1754.610286][T26592] hid-generic 0000:0000:0000.003C: unknown main item tag 0x0 [ 1754.624603][T26592] hid-generic 0000:0000:0000.003C: hidraw0: HID v0.03 Device [syz1] on syz1 [ 1754.695640][T18476] usb 7-1: Using ep0 maxpacket: 16 [ 1754.703924][T18476] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1754.722851][T18476] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1754.747683][T18476] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1754.775251][T18476] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1754.784551][T18476] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1754.798870][T18476] usb 7-1: config 0 descriptor?? [ 1754.816778][ T5922] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1754.880962][T27916] fido_id[27916]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1754.933799][ T5922] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1754.991475][ T5922] usb 3-1: USB disconnect, device number 39 [ 1755.315634][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 1755.315653][ T30] audit: type=1326 audit(1762144218.301:1914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27905 comm="syz.6.5739" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7ff3558 code=0x7ffc0000 [ 1755.563216][ T30] audit: type=1326 audit(1762144218.311:1915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27905 comm="syz.6.5739" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7ff3558 code=0x7ffc0000 [ 1755.656370][ T30] audit: type=1326 audit(1762144218.311:1916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27905 comm="syz.6.5739" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff3539 code=0x7ffc0000 [ 1755.682692][ T30] audit: type=1326 audit(1762144218.311:1917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27905 comm="syz.6.5739" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7ff3558 code=0x7ffc0000 [ 1755.705338][ T30] audit: type=1326 audit(1762144218.311:1918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27905 comm="syz.6.5739" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7ff3558 code=0x7ffc0000 [ 1755.739892][ T30] audit: type=1326 audit(1762144218.311:1919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27905 comm="syz.6.5739" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff3539 code=0x7ffc0000 [ 1755.809113][ T30] audit: type=1326 audit(1762144218.311:1920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27905 comm="syz.6.5739" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7ff3558 code=0x7ffc0000 [ 1755.832885][ T30] audit: type=1326 audit(1762144218.311:1921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27905 comm="syz.6.5739" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7ff3558 code=0x7ffc0000 [ 1755.845713][ T5922] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 1755.855779][ T30] audit: type=1326 audit(1762144218.311:1922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27905 comm="syz.6.5739" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff3539 code=0x7ffc0000 [ 1755.887954][ T30] audit: type=1326 audit(1762144218.311:1923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27905 comm="syz.6.5739" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7ff3558 code=0x7ffc0000 [ 1756.098918][T27937] create_pit_timer: 5 callbacks suppressed [ 1756.098939][T27937] kvm: requested 81295 ns i8254 timer period limited to 200000 ns [ 1756.115759][ T5922] usb 1-1: device descriptor read/64, error -71 [ 1756.148329][T27937] kvm: requested 184381 ns i8254 timer period limited to 200000 ns [ 1756.159413][T27937] kvm: requested 53638 ns i8254 timer period limited to 200000 ns [ 1756.171599][T18476] usbhid 7-1:0.0: can't add hid device: -71 [ 1756.184873][T18476] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1756.202363][T27937] kvm: requested 171809 ns i8254 timer period limited to 200000 ns [ 1756.215841][T18476] usb 7-1: USB disconnect, device number 31 [ 1756.355648][ T5922] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 1756.495625][ T5922] usb 1-1: device descriptor read/64, error -71 [ 1756.616109][ T5922] usb usb1-port1: attempt power cycle [ 1756.823688][T27946] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5750'. [ 1756.857404][T27946] veth21: entered promiscuous mode [ 1756.862717][T27946] veth21: entered allmulticast mode [ 1756.869503][T27946] bridge11: port 1(veth21) entered blocking state [ 1756.876864][T27946] bridge11: port 1(veth21) entered disabled state [ 1756.889255][T27946] bridge11: port 1(veth21) entered blocking state [ 1756.895863][T27946] bridge11: port 1(veth21) entered forwarding state [ 1756.917727][T27947] veth23: entered promiscuous mode [ 1756.922987][T27947] veth23: entered allmulticast mode [ 1756.929279][T27947] bridge11: port 2(veth23) entered blocking state [ 1756.935950][T27947] bridge11: port 2(veth23) entered disabled state [ 1756.944797][T27947] bridge11: port 2(veth23) entered blocking state [ 1756.951397][T27947] bridge11: port 2(veth23) entered forwarding state [ 1756.965275][T18232] bridge11: port 1(veth21) entered disabled state [ 1756.974647][T18232] bridge11: port 2(veth23) entered disabled state [ 1756.975668][ T5922] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 1757.006260][ T5922] usb 1-1: device descriptor read/8, error -71 [ 1757.091921][T27949] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5751'. [ 1757.126902][T27949] bridge12: port 1(veth25) entered blocking state [ 1757.133681][T27949] bridge12: port 1(veth25) entered disabled state [ 1757.140764][T27949] veth25: entered allmulticast mode [ 1757.147831][T27949] veth25: entered promiscuous mode [ 1757.162063][T27949] bridge12: port 2(veth0_to_bond) entered blocking state [ 1757.169494][T27949] bridge12: port 2(veth0_to_bond) entered disabled state [ 1757.177155][T27949] veth0_to_bond: entered allmulticast mode [ 1757.184659][T27949] veth0_to_bond: entered promiscuous mode [ 1757.210328][T27949] bridge12: port 3(veth27) entered blocking state [ 1757.217419][T27949] bridge12: port 3(veth27) entered disabled state [ 1757.224042][T27949] veth27: entered allmulticast mode [ 1757.231439][T27949] veth27: entered promiscuous mode [ 1757.255840][ T5922] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 1757.292014][ T5922] usb 1-1: device descriptor read/8, error -71 [ 1757.491321][ T5922] usb usb1-port1: unable to enumerate USB device [ 1757.942462][ T5922] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 1758.136804][ T5922] usb 7-1: Using ep0 maxpacket: 32 [ 1758.161259][ T5922] usb 7-1: config 0 has an invalid interface number: 132 but max is 0 [ 1758.171623][ T5922] usb 7-1: config 0 has no interface number 0 [ 1758.181125][ T5922] usb 7-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1758.244304][T27967] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5757'. [ 1758.291149][ T5922] usb 7-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1758.326083][ T5922] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1758.346236][ T5922] usb 7-1: Product: syz [ 1758.350616][ T5922] usb 7-1: Manufacturer: syz [ 1758.357680][ T5922] usb 7-1: SerialNumber: syz [ 1758.416309][ T5922] usb 7-1: config 0 descriptor?? [ 1758.553856][ T5922] em28xx 7-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1758.575831][ T5922] em28xx 7-1:0.132: Video interface 132 found: [ 1758.705429][T27977] FAULT_INJECTION: forcing a failure. [ 1758.705429][T27977] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1758.750394][T27977] CPU: 0 UID: 0 PID: 27977 Comm: syz.0.5760 Not tainted syzkaller #0 PREEMPT(full) [ 1758.750420][T27977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1758.750433][T27977] Call Trace: [ 1758.750441][T27977] [ 1758.750451][T27977] dump_stack_lvl+0x189/0x250 [ 1758.750486][T27977] ? __pfx____ratelimit+0x10/0x10 [ 1758.750511][T27977] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1758.750537][T27977] ? __pfx__printk+0x10/0x10 [ 1758.750558][T27977] ? __might_fault+0xb0/0x130 [ 1758.750595][T27977] should_fail_ex+0x414/0x560 [ 1758.750630][T27977] _copy_from_iter+0x1de/0x1790 [ 1758.750664][T27977] ? rcu_is_watching+0x15/0xb0 [ 1758.750690][T27977] ? kmalloc_reserve+0xbd/0x290 [ 1758.750708][T27977] ? __pfx__copy_from_iter+0x10/0x10 [ 1758.750750][T27977] ? __build_skb_around+0x262/0x3f0 [ 1758.750785][T27977] ? netlink_sendmsg+0x642/0xb30 [ 1758.750803][T27977] ? skb_put+0x11b/0x210 [ 1758.750826][T27977] netlink_sendmsg+0x6b2/0xb30 [ 1758.750856][T27977] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1758.750878][T27977] ? __lock_acquire+0xab9/0xd20 [ 1758.750897][T27977] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1758.750929][T27977] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1758.750949][T27977] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1758.750970][T27977] __sock_sendmsg+0x21c/0x270 [ 1758.751001][T27977] sock_write_iter+0x279/0x360 [ 1758.751029][T27977] ? __pfx_sock_write_iter+0x10/0x10 [ 1758.751066][T27977] ? bpf_lsm_file_permission+0x9/0x20 [ 1758.751087][T27977] ? security_file_permission+0x75/0x290 [ 1758.751120][T27977] vfs_write+0x5c9/0xb30 [ 1758.751154][T27977] ? __pfx_sock_write_iter+0x10/0x10 [ 1758.751179][T27977] ? __pfx_vfs_write+0x10/0x10 [ 1758.751219][T27977] ? __fget_files+0x2a/0x420 [ 1758.751247][T27977] ksys_write+0x145/0x250 [ 1758.751274][T27977] ? exc_page_fault+0x82/0x100 [ 1758.751301][T27977] ? __pfx_ksys_write+0x10/0x10 [ 1758.751332][T27977] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 1758.751362][T27977] ? lockdep_hardirqs_on+0x9c/0x150 [ 1758.751393][T27977] __do_fast_syscall_32+0xb6/0x2b0 [ 1758.751424][T27977] ? lockdep_hardirqs_on+0x9c/0x150 [ 1758.751454][T27977] do_fast_syscall_32+0x34/0x80 [ 1758.751484][T27977] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1758.751509][T27977] RIP: 0023:0xf7f01539 [ 1758.751526][T27977] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1758.751544][T27977] RSP: 002b:00000000f53f655c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 1758.751565][T27977] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 1758.751580][T27977] RDX: 0000000000000024 RSI: 0000000000000000 RDI: 0000000000000000 [ 1758.751592][T27977] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1758.751604][T27977] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1758.751615][T27977] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1758.751645][T27977] [ 1759.040792][ C0] vkms_vblank_simulate: vblank timer overrun [ 1759.085253][ T5922] em28xx 7-1:0.132: unknown em28xx chip ID (0) [ 1759.139507][T27964] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5756'. [ 1759.943460][T27984] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5762'. [ 1760.437006][T27984] veth19: entered promiscuous mode [ 1760.452964][T27984] veth19: entered allmulticast mode [ 1760.469912][T27984] bridge30: port 1(veth19) entered blocking state [ 1760.483713][T27984] bridge30: port 1(veth19) entered disabled state [ 1760.500166][T27984] bridge30: port 1(veth19) entered blocking state [ 1760.506742][T27984] bridge30: port 1(veth19) entered forwarding state [ 1760.524751][T12359] bridge30: port 1(veth19) entered disabled state [ 1760.561864][T27992] veth21: entered promiscuous mode [ 1760.567834][T27992] veth21: entered allmulticast mode [ 1760.576431][T27992] bridge30: port 2(veth21) entered blocking state [ 1760.583081][T27992] bridge30: port 2(veth21) entered disabled state [ 1760.595417][T27992] bridge30: port 2(veth21) entered blocking state [ 1760.602099][T27992] bridge30: port 2(veth21) entered forwarding state [ 1760.613177][T22273] bridge30: port 2(veth21) entered disabled state [ 1760.636180][ T5922] em28xx 7-1:0.132: failed to trigger write to i2c address 0xa0 (error=-5) [ 1760.645181][ T5922] em28xx 7-1:0.132: failed to read eeprom (err=-5) [ 1760.656619][ T5922] em28xx 7-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-5] [ 1760.737009][ T5922] em28xx 7-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1760.765307][ T5922] em28xx 7-1:0.132: analog set to bulk mode. [ 1760.774376][ T5927] em28xx 7-1:0.132: Registering V4L2 extension [ 1760.934952][ T5927] em28xx 7-1:0.132: failed to trigger read from i2c address 0x4a (error=-5) [ 1760.960170][ T5927] em28xx 7-1:0.132: failed to trigger read from i2c address 0x48 (error=-5) [ 1760.983041][ T5927] em28xx 7-1:0.132: failed to trigger read from i2c address 0x42 (error=-5) [ 1761.002611][ T5927] em28xx 7-1:0.132: failed to trigger read from i2c address 0x40 (error=-5) [ 1761.081539][ T5927] em28xx 7-1:0.132: failed to trigger read from i2c address 0x84 (error=-5) [ 1761.094971][ T5927] em28xx 7-1:0.132: failed to trigger read from i2c address 0x86 (error=-5) [ 1761.119298][ T5927] em28xx 7-1:0.132: failed to trigger read from i2c address 0x94 (error=-5) [ 1761.141642][ T5927] em28xx 7-1:0.132: failed to trigger read from i2c address 0x96 (error=-5) [ 1761.215636][ T10] usb 1-1: new full-speed USB device number 24 using dummy_hcd [ 1761.224106][ T5927] em28xx 7-1:0.132: failed to trigger read from i2c address 0xc0 (error=-5) [ 1761.249643][ T5927] em28xx 7-1:0.132: failed to trigger read from i2c address 0xc2 (error=-5) [ 1761.281137][ T5927] em28xx 7-1:0.132: failed to trigger read from i2c address 0xc4 (error=-5) [ 1761.290491][ T5927] em28xx 7-1:0.132: failed to trigger read from i2c address 0xc6 (error=-5) [ 1761.300604][ T5927] em28xx 7-1:0.132: failed to trigger read from i2c address 0xc8 (error=-5) [ 1761.314327][ T5927] em28xx 7-1:0.132: Config register raw data: 0xfffffffb [ 1761.323250][ T5927] em28xx 7-1:0.132: AC97 chip type couldn't be determined [ 1761.331187][ T5927] em28xx 7-1:0.132: No AC97 audio processor [ 1761.367353][ T5927] usb 7-1: Decoder not found [ 1761.373273][ T5927] em28xx 7-1:0.132: failed to create media graph [ 1761.381089][ T5927] em28xx 7-1:0.132: V4L2 device video103 deregistered [ 1761.390969][ T10] usb 1-1: config 54 has an invalid interface number: 154 but max is 0 [ 1761.402370][ T5927] em28xx 7-1:0.132: Remote control support is not available for this card. [ 1761.414944][ T10] usb 1-1: config 54 has an invalid descriptor of length 0, skipping remainder of the config [ 1761.427230][ T10] usb 1-1: config 54 has no interface number 0 [ 1761.445047][ T10] usb 1-1: config 54 interface 154 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 4 [ 1761.480120][ T10] usb 1-1: config 54 interface 154 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1761.512889][ T10] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice= 0.ec [ 1761.522714][ T5922] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 1761.538246][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1761.547022][ T10] usb 1-1: Product: syz [ 1761.551294][ T10] usb 1-1: Manufacturer: syz [ 1761.558366][ T10] usb 1-1: SerialNumber: syz [ 1761.656877][ T5927] usb 7-1: USB disconnect, device number 32 [ 1761.685620][ T5922] usb 6-1: Using ep0 maxpacket: 16 [ 1761.693762][ T5922] usb 6-1: config 0 has an invalid interface number: 6 but max is 0 [ 1761.704346][ T5922] usb 6-1: config 0 has no interface number 0 [ 1761.712042][ T5927] em28xx 7-1:0.132: Disconnecting em28xx [ 1761.717977][ T5927] em28xx 7-1:0.132: Closing input extension [ 1761.725014][ T5922] usb 6-1: config 0 interface 6 has no altsetting 0 [ 1761.737430][ T5927] em28xx 7-1:0.132: Freeing device [ 1761.749295][ T5922] usb 6-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 1761.769178][ T5922] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1761.789525][ T5922] usb 6-1: Product: syz [ 1761.794101][ T5922] usb 6-1: Manufacturer: syz [ 1761.799928][ T5922] usb 6-1: SerialNumber: syz [ 1761.826536][ T5922] usb 6-1: config 0 descriptor?? [ 1761.833922][ T10] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1761.837980][T18232] usb 1-1: Failed to submit usb control message: -71 [ 1761.857890][ T5922] ums-onetouch 6-1:0.6: USB Mass Storage device detected [ 1761.870178][T18232] usb 1-1: unable to send the bmi data to the device: -71 [ 1761.888264][T18232] usb 1-1: unable to get target info from device [ 1761.900167][T18232] usb 1-1: could not get target info (-71) [ 1761.906410][T18232] usb 1-1: could not probe fw (-71) [ 1761.956217][ T10] usb 1-1: USB disconnect, device number 24 [ 1762.140671][ T5922] usb 6-1: USB disconnect, device number 70 [ 1762.145672][T28024] netlink: 'syz.2.5771': attribute type 10 has an invalid length. [ 1762.186327][T28024] bond0: (slave wlan1): Opening slave failed [ 1762.435715][T26592] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 1762.455697][T18488] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 1762.588578][T26592] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1762.604396][T26592] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1762.614652][T26592] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1762.726656][T18488] usb 7-1: Using ep0 maxpacket: 32 [ 1762.734597][T26592] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1762.740261][T18488] usb 7-1: config 2 has an invalid interface number: 1 but max is 0 [ 1762.756908][T18488] usb 7-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1762.756921][T26592] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1762.779400][T26592] usb 3-1: config 0 descriptor?? [ 1762.789305][T18488] usb 7-1: config 2 has 2 interfaces, different from the descriptor's value: 1 [ 1762.814223][T18488] usb 7-1: New USB device found, idVendor=22b8, idProduct=2d97, bcdDevice=51.64 [ 1762.823696][T18488] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1762.847032][T18488] usb 7-1: Product: syz [ 1762.857035][T18488] usb 7-1: Manufacturer: syz [ 1762.876853][T18488] usb 7-1: SerialNumber: syz [ 1762.897773][T18488] cdc_acm 7-1:2.1: probe with driver cdc_acm failed with error -22 [ 1762.969778][T18488] cdc_acm 7-1:2.0: probe with driver cdc_acm failed with error -22 [ 1762.998283][T28030] FAULT_INJECTION: forcing a failure. [ 1762.998283][T28030] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1763.045859][T28030] CPU: 1 UID: 0 PID: 28030 Comm: syz.5.5773 Not tainted syzkaller #0 PREEMPT(full) [ 1763.045886][T28030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1763.045899][T28030] Call Trace: [ 1763.045908][T28030] [ 1763.045917][T28030] dump_stack_lvl+0x189/0x250 [ 1763.045949][T28030] ? __pfx____ratelimit+0x10/0x10 [ 1763.045976][T28030] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1763.046013][T28030] ? __pfx__printk+0x10/0x10 [ 1763.046034][T28030] ? __might_fault+0xb0/0x130 [ 1763.046075][T28030] should_fail_ex+0x414/0x560 [ 1763.046113][T28030] _copy_from_user+0x2d/0xb0 [ 1763.046145][T28030] kstrtouint_from_user+0xc4/0x170 [ 1763.046170][T28030] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1763.046209][T28030] proc_fail_nth_write+0x88/0x200 [ 1763.046236][T28030] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1763.046269][T28030] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1763.046297][T28030] vfs_write+0x27e/0xb30 [ 1763.046334][T28030] ? __pfx_vfs_write+0x10/0x10 [ 1763.046365][T28030] ? __fget_files+0x2a/0x420 [ 1763.046390][T28030] ? __fget_files+0x3a0/0x420 [ 1763.046408][T28030] ? __fget_files+0x2a/0x420 [ 1763.046437][T28030] ksys_write+0x145/0x250 [ 1763.046469][T28030] ? __pfx_ksys_write+0x10/0x10 [ 1763.046500][T28030] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 1763.046532][T28030] ? lockdep_hardirqs_on+0x9c/0x150 [ 1763.046564][T28030] __do_fast_syscall_32+0xb6/0x2b0 [ 1763.046594][T28030] ? lockdep_hardirqs_on+0x9c/0x150 [ 1763.046625][T28030] do_fast_syscall_32+0x34/0x80 [ 1763.046654][T28030] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1763.046680][T28030] RIP: 0023:0xf70bd539 [ 1763.046699][T28030] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1763.046716][T28030] RSP: 002b:00000000f54ad590 EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 1763.046738][T28030] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 00000000f54ad620 [ 1763.046752][T28030] RDX: 0000000000000001 RSI: 00000000f7455ff4 RDI: 0000000000000000 [ 1763.046764][T28030] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 1763.046776][T28030] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1763.046789][T28030] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1763.046821][T28030] [ 1763.358273][T26592] plantronics 0003:047F:FFFF.003D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 1763.421606][ T5922] usb 7-1: USB disconnect, device number 33 [ 1763.624012][T28035] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1763.977642][T28040] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5777'. [ 1764.030587][T28040] veth23: entered promiscuous mode [ 1764.035952][T28040] veth23: entered allmulticast mode [ 1764.042420][T28040] bridge31: port 1(veth23) entered blocking state [ 1764.049850][T28040] bridge31: port 1(veth23) entered disabled state [ 1764.072826][T28040] bridge31: port 1(veth23) entered blocking state [ 1764.079484][T28040] bridge31: port 1(veth23) entered forwarding state [ 1764.136744][ T5922] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 1764.154757][T28042] veth25: entered promiscuous mode [ 1764.162187][T28042] veth25: entered allmulticast mode [ 1764.172160][T28042] bridge31: port 2(veth25) entered blocking state [ 1764.186197][T28042] bridge31: port 2(veth25) entered disabled state [ 1764.206179][T28042] bridge31: port 2(veth25) entered blocking state [ 1764.212826][T28042] bridge31: port 2(veth25) entered forwarding state [ 1764.352249][ T5922] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1764.365723][ T5922] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1764.389865][ T5922] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1764.401394][ T5922] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1764.414496][ T5922] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1764.424090][ T5922] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1764.432730][ T5922] usb 6-1: Product: syz [ 1764.438087][ T5922] usb 6-1: Manufacturer: syz [ 1764.450863][ T5922] cdc_wdm 6-1:1.0: skipping garbage [ 1764.456148][ T5922] cdc_wdm 6-1:1.0: skipping garbage [ 1764.472646][ T5922] cdc_wdm 6-1:1.0: cdc-wdm1: USB WDM device [ 1764.478732][ T5922] cdc_wdm 6-1:1.0: Unknown control protocol [ 1764.519406][T28050] fuse: Unknown parameter 'u00000000000000000000' [ 1764.625785][T18488] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 1764.628238][ C0] plantronics 0003:047F:FFFF.003D: usb_submit_urb(ctrl) failed: -1 [ 1764.656041][ T5922] usb 6-1: USB disconnect, device number 71 [ 1764.719000][T16287] bridge31: port 1(veth23) entered disabled state [ 1764.732799][T16287] bridge31: port 2(veth25) entered disabled state [ 1764.782904][T18488] usb 1-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 1764.792481][T18488] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1764.813672][T18488] usb 1-1: Product: syz [ 1764.818061][T18488] usb 1-1: Manufacturer: syz [ 1764.822853][T18488] usb 1-1: SerialNumber: syz [ 1764.834010][T18488] usb 1-1: config 0 descriptor?? [ 1764.842107][T18488] hub 1-1:0.0: bad descriptor, ignoring hub [ 1764.848350][T18488] hub 1-1:0.0: probe with driver hub failed with error -5 [ 1765.045379][T18488] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 1765.080083][T18488] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1765.110163][T18488] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 1765.122340][T18488] usb 1-1: media controller created [ 1765.212192][T18488] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1765.412574][T18476] usb 3-1: USB disconnect, device number 40 [ 1765.494564][T18488] DVB: Unable to find symbol dib7000p_attach() [ 1765.514784][T18488] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 1765.556026][T15804] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 1765.657716][T18488] rc_core: IR keymap rc-dib0700-rc5 not found [ 1765.663915][T18488] Registered IR keymap rc-empty [ 1765.669820][T18488] dvb-usb: could not initialize remote control. [ 1765.677688][T18488] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 1765.694133][T18488] usb 1-1: USB disconnect, device number 25 [ 1765.715777][T15804] usb 6-1: Using ep0 maxpacket: 8 [ 1765.737553][T15804] usb 6-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1765.752569][T15804] usb 6-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1765.774328][T15804] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1765.785040][T18488] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 1765.795044][T15804] usb 6-1: too many endpoints for config 1 interface 1 altsetting 2: 229, using maximum allowed: 30 [ 1765.818459][T15804] usb 6-1: config 1 interface 1 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 229 [ 1765.849664][T15804] usb 6-1: config 1 interface 1 has no altsetting 0 [ 1765.865841][ T5922] usb 3-1: new full-speed USB device number 41 using dummy_hcd [ 1765.867474][T15804] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1765.882780][T15804] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1765.890889][T15804] usb 6-1: Product: Х [ 1765.894986][T15804] usb 6-1: Manufacturer: 딮抪ὲ𢡄ꨛ㶴ꤘ섮遐೰詩న꽷됱際䲊舨勼ॸ䙥䇴컹沱䕓맃쫕┌覵馒嚨燝᜚鈌੔᥉İ済䫖忰䜰䲏펫⢊뤼ݴ佥솛䆐虺⪸秉꯲앩ᗹ䆵婶⃌컞蒟ᐮ娂有ጒ䁜ꮫ殑踂렧쐅납圍堣镲퍜켩ᕤ彂鏞텂Թ [ 1765.922618][T15804] usb 6-1: SerialNumber: 䡚㳫醦恏笱嵆ড়ꊩ⺌쩁⿪笅夤媲褀ሽ匷ߒ዁쏪쭱뷘쭆䮓㵤糿ᰶ៘老衩禩ꈚ凰銧⎊뷿럆尩㚏驎썆꼌웲䊸毢湩鷋랅⨟蟿册酝㜩딛␛쳞쥺㋄Ｏ䢙ィ⼮Ⳇ䀝ੑⶲ炐曡튣狑㩺簪춊谀넏꧵篶ꆷ嶙⫿憟ꪪ઄闇㱗솣㑺贤阠优퓣㖾ᾩ莌ᴉ某꯺浣Ḵ중鬝墵䤆鍆疡皂༓ᒂ⶝ [ 1766.017314][ T5922] usb 3-1: config 54 has an invalid interface number: 154 but max is 0 [ 1766.025947][ T5922] usb 3-1: config 54 has an invalid descriptor of length 0, skipping remainder of the config [ 1766.036578][ T5922] usb 3-1: config 54 has no interface number 0 [ 1766.042889][ T5922] usb 3-1: config 54 interface 154 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 4 [ 1766.054061][ T5922] usb 3-1: config 54 interface 154 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1766.071791][ T5922] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice= 0.ec [ 1766.082983][ T5922] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1766.091090][ T5922] usb 3-1: Product: syz [ 1766.095293][ T5922] usb 3-1: Manufacturer: syz [ 1766.099959][ T5922] usb 3-1: SerialNumber: syz [ 1766.328616][ T5922] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1766.332390][T16286] usb 3-1: Failed to submit usb control message: -71 [ 1766.346273][T16286] usb 3-1: unable to send the bmi data to the device: -71 [ 1766.347162][ T5922] usb 3-1: USB disconnect, device number 41 [ 1766.353537][T16286] usb 3-1: unable to get target info from device [ 1766.369938][T16286] usb 3-1: could not get target info (-71) [ 1766.376971][T16286] usb 3-1: could not probe fw (-71) [ 1766.505979][T18488] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 1766.553051][ T30] kauditd_printk_skb: 270 callbacks suppressed [ 1766.553095][ T30] audit: type=1326 audit(1762144229.551:2194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28075 comm="syz.6.5787" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff3539 code=0x7ffc0000 [ 1766.581781][ T30] audit: type=1326 audit(1762144229.551:2195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28075 comm="syz.6.5787" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff3539 code=0x7ffc0000 [ 1766.581861][ T30] audit: type=1326 audit(1762144229.551:2196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28075 comm="syz.6.5787" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7ff3539 code=0x7ffc0000 [ 1766.581904][ T30] audit: type=1326 audit(1762144229.551:2197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28075 comm="syz.6.5787" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff3539 code=0x7ffc0000 [ 1766.581987][ T30] audit: type=1326 audit(1762144229.551:2198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28075 comm="syz.6.5787" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff3539 code=0x7ffc0000 [ 1766.582032][ T30] audit: type=1326 audit(1762144229.551:2199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28075 comm="syz.6.5787" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7ff3539 code=0x7ffc0000 [ 1766.582075][ T30] audit: type=1326 audit(1762144229.551:2200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28075 comm="syz.6.5787" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff3539 code=0x7ffc0000 [ 1766.582143][ T30] audit: type=1326 audit(1762144229.551:2201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28075 comm="syz.6.5787" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff3539 code=0x7ffc0000 [ 1766.582187][ T30] audit: type=1326 audit(1762144229.551:2202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28075 comm="syz.6.5787" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7ff3539 code=0x7ffc0000 [ 1766.582233][ T30] audit: type=1326 audit(1762144229.551:2203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28075 comm="syz.6.5787" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff3539 code=0x7ffc0000 [ 1766.584006][T28057] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1766.585724][T28057] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1766.658640][T28079] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 1766.719406][T18488] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1767.144384][T18488] usb 1-1: config 0 has no interfaces? [ 1767.160052][T18488] usb 1-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=4c.b3 [ 1767.170025][T28082] syzkaller1: entered promiscuous mode [ 1767.175630][T18488] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1767.191509][T18488] usb 1-1: Product: syz [ 1767.204422][T28082] syzkaller1: entered allmulticast mode [ 1767.210247][T18488] usb 1-1: Manufacturer: syz [ 1767.214916][T18488] usb 1-1: SerialNumber: syz [ 1767.243568][T18488] usb 1-1: config 0 descriptor?? [ 1767.458907][T15804] usb 6-1: 0:2 : does not exist [ 1767.525634][T15804] usb 6-1: USB disconnect, device number 72 [ 1768.247750][T28102] FAULT_INJECTION: forcing a failure. [ 1768.247750][T28102] name failslab, interval 1, probability 0, space 0, times 0 [ 1768.260830][T28102] CPU: 1 UID: 0 PID: 28102 Comm: syz.7.5794 Not tainted syzkaller #0 PREEMPT(full) [ 1768.260854][T28102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1768.260866][T28102] Call Trace: [ 1768.260874][T28102] [ 1768.260881][T28102] dump_stack_lvl+0x189/0x250 [ 1768.260913][T28102] ? __pfx____ratelimit+0x10/0x10 [ 1768.260938][T28102] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1768.260964][T28102] ? __pfx__printk+0x10/0x10 [ 1768.260980][T28102] ? netlink_sendmsg+0x805/0xb30 [ 1768.261000][T28102] ? __sys_sendmsg+0x164/0x220 [ 1768.261019][T28102] ? do_fast_syscall_32+0x34/0x80 [ 1768.261054][T28102] should_fail_ex+0x414/0x560 [ 1768.261088][T28102] should_failslab+0xa8/0x100 [ 1768.261110][T28102] kmem_cache_alloc_noprof+0x74/0x6e0 [ 1768.261135][T28102] ? skb_clone+0x212/0x3a0 [ 1768.261160][T28102] skb_clone+0x212/0x3a0 [ 1768.261183][T28102] __netlink_deliver_tap+0x404/0x850 [ 1768.261213][T28102] ? netlink_deliver_tap+0x2e/0x1b0 [ 1768.261232][T28102] netlink_deliver_tap+0x19c/0x1b0 [ 1768.261251][T28102] netlink_sendskb+0x68/0x140 [ 1768.261280][T28102] netlink_unicast+0x397/0x9e0 [ 1768.261305][T28102] ? __asan_memcpy+0x40/0x70 [ 1768.261338][T28102] ? __pfx_netlink_unicast+0x10/0x10 [ 1768.261375][T28102] netlink_rcv_skb+0x28c/0x470 [ 1768.261403][T28102] ? __lock_acquire+0xab9/0xd20 [ 1768.261423][T28102] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1768.261447][T28102] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1768.261496][T28102] ? down_read+0x1ad/0x2e0 [ 1768.261527][T28102] genl_rcv+0x28/0x40 [ 1768.261548][T28102] netlink_unicast+0x82f/0x9e0 [ 1768.261588][T28102] ? __pfx_netlink_unicast+0x10/0x10 [ 1768.261617][T28102] ? netlink_sendmsg+0x642/0xb30 [ 1768.261634][T28102] ? skb_put+0x11b/0x210 [ 1768.261656][T28102] netlink_sendmsg+0x805/0xb30 [ 1768.261684][T28102] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1768.261712][T28102] ? __import_iovec+0x5d4/0x7f0 [ 1768.261735][T28102] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1768.261765][T28102] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1768.261784][T28102] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1768.261803][T28102] __sock_sendmsg+0x21c/0x270 [ 1768.261833][T28102] ____sys_sendmsg+0x505/0x830 [ 1768.261860][T28102] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1768.261896][T28102] ___sys_sendmsg+0x21f/0x2a0 [ 1768.261919][T28102] ? __pfx____sys_sendmsg+0x10/0x10 [ 1768.261976][T28102] ? __fget_files+0x2a/0x420 [ 1768.261993][T28102] ? __fget_files+0x3a0/0x420 [ 1768.262021][T28102] __sys_sendmsg+0x164/0x220 [ 1768.262045][T28102] ? __pfx___sys_sendmsg+0x10/0x10 [ 1768.262074][T28102] ? __pfx_ksys_write+0x10/0x10 [ 1768.262104][T28102] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 1768.262132][T28102] ? lockdep_hardirqs_on+0x9c/0x150 [ 1768.262160][T28102] __do_fast_syscall_32+0xb6/0x2b0 [ 1768.262189][T28102] ? lockdep_hardirqs_on+0x9c/0x150 [ 1768.262217][T28102] do_fast_syscall_32+0x34/0x80 [ 1768.262243][T28102] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1768.262266][T28102] RIP: 0023:0xf704d539 [ 1768.262281][T28102] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1768.262298][T28102] RSP: 002b:00000000f543d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1768.262318][T28102] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080006800 [ 1768.262331][T28102] RDX: 0000000004000800 RSI: 0000000000000000 RDI: 0000000000000000 [ 1768.262343][T28102] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1768.262354][T28102] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1768.262365][T28102] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1768.262393][T28102] [ 1769.086429][T28104] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 1769.092035][T28104] dvmrp1: linktype set to 780 [ 1769.130817][T28106] FAULT_INJECTION: forcing a failure. [ 1769.130817][T28106] name failslab, interval 1, probability 0, space 0, times 0 [ 1769.185708][T28106] CPU: 0 UID: 0 PID: 28106 Comm: syz.7.5796 Not tainted syzkaller #0 PREEMPT(full) [ 1769.185733][T28106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1769.185742][T28106] Call Trace: [ 1769.185749][T28106] [ 1769.185756][T28106] dump_stack_lvl+0x189/0x250 [ 1769.185780][T28106] ? __pfx____ratelimit+0x10/0x10 [ 1769.185800][T28106] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1769.185821][T28106] ? __pfx__printk+0x10/0x10 [ 1769.185838][T28106] ? __pfx___might_resched+0x10/0x10 [ 1769.185855][T28106] ? fs_reclaim_acquire+0x7d/0x100 [ 1769.185883][T28106] should_fail_ex+0x414/0x560 [ 1769.185909][T28106] ? __pfx_proc_alloc_inode+0x10/0x10 [ 1769.185928][T28106] should_failslab+0xa8/0x100 [ 1769.185944][T28106] ? __pfx_proc_alloc_inode+0x10/0x10 [ 1769.185962][T28106] kmem_cache_alloc_lru_noprof+0x79/0x6d0 [ 1769.185982][T28106] ? proc_alloc_inode+0x2a/0xc0 [ 1769.186005][T28106] ? __pfx_proc_alloc_inode+0x10/0x10 [ 1769.186023][T28106] proc_alloc_inode+0x2a/0xc0 [ 1769.186043][T28106] alloc_inode+0x6a/0x1b0 [ 1769.186067][T28106] new_inode+0x22/0x170 [ 1769.186084][T28106] proc_get_inode+0x22/0x6a0 [ 1769.186125][T28106] proc_lookup_de+0x251/0x340 [ 1769.186150][T28106] proc_tgid_net_lookup+0x63/0xf0 [ 1769.186176][T28106] path_openat+0x1101/0x3830 [ 1769.186233][T28106] ? __pfx_path_openat+0x10/0x10 [ 1769.186266][T28106] do_filp_open+0x1fa/0x410 [ 1769.186283][T28106] ? __lock_acquire+0xab9/0xd20 [ 1769.186299][T28106] ? __pfx_do_filp_open+0x10/0x10 [ 1769.186326][T28106] ? __pfx_kfree_link+0x10/0x10 [ 1769.186355][T28106] ? _raw_spin_unlock+0x28/0x50 [ 1769.186373][T28106] ? alloc_fd+0x64c/0x6c0 [ 1769.186404][T28106] do_sys_openat2+0x121/0x1c0 [ 1769.186423][T28106] ? __pfx_do_sys_openat2+0x10/0x10 [ 1769.186441][T28106] ? ksys_write+0x22a/0x250 [ 1769.186460][T28106] ? exc_page_fault+0x82/0x100 [ 1769.186479][T28106] ? __pfx_ksys_write+0x10/0x10 [ 1769.186502][T28106] __ia32_compat_sys_openat+0x131/0x160 [ 1769.186524][T28106] __do_fast_syscall_32+0xb6/0x2b0 [ 1769.186546][T28106] ? lockdep_hardirqs_on+0x9c/0x150 [ 1769.186568][T28106] do_fast_syscall_32+0x34/0x80 [ 1769.186589][T28106] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1769.186607][T28106] RIP: 0023:0xf704d539 [ 1769.186625][T28106] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1769.186638][T28106] RSP: 002b:00000000f543d490 EFLAGS: 00000206 ORIG_RAX: 0000000000000127 [ 1769.186653][T28106] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f543d4e0 [ 1769.186664][T28106] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 00000000f73e5ff4 [ 1769.186673][T28106] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 1769.186682][T28106] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1769.186691][T28106] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1769.186712][T28106] [ 1769.478355][ C0] vkms_vblank_simulate: vblank timer overrun [ 1769.808013][T18476] usb 1-1: USB disconnect, device number 26 [ 1769.865256][T28110] netlink: 'syz.6.5798': attribute type 1 has an invalid length. [ 1770.010381][T28110] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1770.161295][T28122] input: syz1 as /devices/virtual/input/input82 [ 1770.249585][T28117] bond2: (slave gretap1): making interface the new active one [ 1770.371180][T28117] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 1770.445842][T18476] usb 6-1: new full-speed USB device number 73 using dummy_hcd [ 1770.677830][T18476] usb 6-1: config 54 has an invalid interface number: 154 but max is 0 [ 1770.688263][T18476] usb 6-1: config 54 has an invalid descriptor of length 0, skipping remainder of the config [ 1770.699758][T18476] usb 6-1: config 54 has no interface number 0 [ 1770.706555][T18476] usb 6-1: config 54 interface 154 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 4 [ 1770.719806][T18476] usb 6-1: config 54 interface 154 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1770.735092][T18476] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice= 0.ec [ 1770.747215][T18476] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1770.755349][T18476] usb 6-1: Product: syz [ 1770.764256][T18476] usb 6-1: Manufacturer: syz [ 1770.769395][T18476] usb 6-1: SerialNumber: syz [ 1770.790526][T28128] syzkaller1: entered promiscuous mode [ 1770.796379][T28128] syzkaller1: entered allmulticast mode [ 1771.046332][T18476] usb 6-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1771.048938][T22269] usb 6-1: Failed to submit usb control message: -71 [ 1771.097337][T18476] usb 6-1: USB disconnect, device number 73 [ 1771.135875][T22269] usb 6-1: unable to send the bmi data to the device: -71 [ 1771.143240][T22269] usb 6-1: unable to get target info from device [ 1771.151266][T22269] usb 6-1: could not get target info (-71) [ 1771.157382][T22269] usb 6-1: could not probe fw (-71) [ 1771.356653][T28140] netlink: 32 bytes leftover after parsing attributes in process `syz.6.5806'. [ 1771.407518][T28142] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1772.699072][T28152] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5810'. [ 1772.727584][T28152] FAULT_INJECTION: forcing a failure. [ 1772.727584][T28152] name failslab, interval 1, probability 0, space 0, times 0 [ 1772.792579][T28152] CPU: 0 UID: 0 PID: 28152 Comm: syz.2.5810 Not tainted syzkaller #0 PREEMPT(full) [ 1772.792606][T28152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1772.792619][T28152] Call Trace: [ 1772.792627][T28152] [ 1772.792636][T28152] dump_stack_lvl+0x189/0x250 [ 1772.792684][T28152] ? __pfx____ratelimit+0x10/0x10 [ 1772.792712][T28152] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1772.792740][T28152] ? __pfx__printk+0x10/0x10 [ 1772.792768][T28152] ? __pfx___might_resched+0x10/0x10 [ 1772.792796][T28152] should_fail_ex+0x414/0x560 [ 1772.792833][T28152] should_failslab+0xa8/0x100 [ 1772.792857][T28152] __kmalloc_cache_noprof+0x6f/0x6f0 [ 1772.792897][T28152] ? xfrm_policy_alloc+0x78/0x2b0 [ 1772.792923][T28152] xfrm_policy_alloc+0x78/0x2b0 [ 1772.792944][T28152] xfrm_policy_construct+0x39/0x6b0 [ 1772.792997][T28152] xfrm_add_policy+0x267/0x800 [ 1772.793029][T28152] ? __pfx_xfrm_add_policy+0x10/0x10 [ 1772.793060][T28152] ? __nla_parse+0x40/0x60 [ 1772.793088][T28152] xfrm_user_rcv_msg+0x7a3/0xab0 [ 1772.793119][T28152] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 1772.793180][T28152] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1772.793222][T28152] ? rcu_is_watching+0x15/0xb0 [ 1772.793245][T28152] ? trace_contention_end+0x39/0x120 [ 1772.793277][T28152] ? __mutex_lock+0x335/0x1350 [ 1772.793317][T28152] netlink_rcv_skb+0x208/0x470 [ 1772.793367][T28152] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 1772.793393][T28152] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1772.793440][T28152] ? netlink_deliver_tap+0x2e/0x1b0 [ 1772.793460][T28152] ? netlink_deliver_tap+0x2e/0x1b0 [ 1772.793483][T28152] xfrm_netlink_rcv+0x79/0x90 [ 1772.793507][T28152] netlink_unicast+0x82f/0x9e0 [ 1772.793546][T28152] ? __pfx_netlink_unicast+0x10/0x10 [ 1772.793577][T28152] ? netlink_sendmsg+0x642/0xb30 [ 1772.793596][T28152] ? skb_put+0x11b/0x210 [ 1772.793624][T28152] netlink_sendmsg+0x805/0xb30 [ 1772.793656][T28152] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1772.793680][T28152] ? __import_iovec+0x5d4/0x7f0 [ 1772.793703][T28152] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1772.793735][T28152] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1772.793756][T28152] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1772.793778][T28152] __sock_sendmsg+0x21c/0x270 [ 1772.793808][T28152] ____sys_sendmsg+0x505/0x830 [ 1772.793837][T28152] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1772.793877][T28152] ___sys_sendmsg+0x21f/0x2a0 [ 1772.793903][T28152] ? __pfx____sys_sendmsg+0x10/0x10 [ 1772.793964][T28152] ? __fget_files+0x2a/0x420 [ 1772.793983][T28152] ? __fget_files+0x3a0/0x420 [ 1772.794014][T28152] __sys_sendmsg+0x164/0x220 [ 1772.794038][T28152] ? __pfx___sys_sendmsg+0x10/0x10 [ 1772.794070][T28152] ? __pfx_ksys_write+0x10/0x10 [ 1772.794103][T28152] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 1772.794134][T28152] ? lockdep_hardirqs_on+0x9c/0x150 [ 1772.794166][T28152] __do_fast_syscall_32+0xb6/0x2b0 [ 1772.794196][T28152] ? lockdep_hardirqs_on+0x9c/0x150 [ 1772.794227][T28152] do_fast_syscall_32+0x34/0x80 [ 1772.794256][T28152] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1772.794279][T28152] RIP: 0023:0xf7f47539 [ 1772.794303][T28152] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1772.794321][T28152] RSP: 002b:00000000f543655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1772.794341][T28152] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000480 [ 1772.794355][T28152] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1772.794368][T28152] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1772.794379][T28152] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1772.794392][T28152] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1772.794421][T28152] [ 1774.142375][T28163] syzkaller1: entered promiscuous mode [ 1774.164384][T28163] syzkaller1: entered allmulticast mode [ 1774.333277][T18488] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 1774.731850][T18488] usb 7-1: New USB device found, idVendor=172f, idProduct=0032, bcdDevice= 0.00 [ 1774.748287][T18488] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1774.810837][T18488] usb 7-1: config 0 descriptor?? [ 1775.414355][T18488] waltop 0003:172F:0032.003E: item fetching failed at offset 3/5 [ 1775.446482][ T30] kauditd_printk_skb: 25 callbacks suppressed [ 1775.446502][ T30] audit: type=1326 audit(1762144238.351:2229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28157 comm="syz.6.5814" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff3539 code=0x7ffc0000 [ 1775.462695][T18488] waltop 0003:172F:0032.003E: probe with driver waltop failed with error -22 [ 1775.620747][T28170] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5819'. [ 1775.662383][T18488] usb 7-1: USB disconnect, device number 34 [ 1775.695446][ T30] audit: type=1326 audit(1762144238.351:2230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28157 comm="syz.6.5814" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7ff3539 code=0x7ffc0000 [ 1775.886670][ T30] audit: type=1326 audit(1762144238.351:2231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28157 comm="syz.6.5814" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff3539 code=0x7ffc0000 [ 1775.985593][ T30] audit: type=1326 audit(1762144238.351:2232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28157 comm="syz.6.5814" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7ff3539 code=0x7ffc0000 [ 1776.058853][ T30] audit: type=1326 audit(1762144238.351:2233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28157 comm="syz.6.5814" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff3539 code=0x7ffc0000 [ 1776.239160][ T30] audit: type=1326 audit(1762144238.351:2234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28157 comm="syz.6.5814" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7ff3539 code=0x7ffc0000 [ 1776.459581][ T30] audit: type=1326 audit(1762144238.351:2235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28157 comm="syz.6.5814" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff3539 code=0x7ffc0000 [ 1776.579426][ T30] audit: type=1326 audit(1762144238.351:2236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28157 comm="syz.6.5814" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7ff3539 code=0x7ffc0000 [ 1776.693424][ T30] audit: type=1326 audit(1762144238.491:2237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28157 comm="syz.6.5814" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff3539 code=0x7ffc0000 [ 1776.745670][ T30] audit: type=1326 audit(1762144238.491:2238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28157 comm="syz.6.5814" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff3539 code=0x7ffc0000 [ 1776.829818][T26592] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 1777.012865][T26592] usb 1-1: Using ep0 maxpacket: 32 [ 1777.036691][T26592] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 1777.065352][T26592] usb 1-1: config 0 has no interface number 0 [ 1777.087718][T26592] usb 1-1: config 0 interface 184 has no altsetting 0 [ 1777.131209][T26592] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1777.184892][T26592] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1777.193394][T26592] usb 1-1: Product: syz [ 1777.198595][T26592] usb 1-1: Manufacturer: syz [ 1777.203309][T26592] usb 1-1: SerialNumber: syz [ 1777.332353][T28200] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5831'. [ 1777.346338][T28198] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5830'. [ 1777.365437][T28192] bond2: option ad_actor_sys_prio: invalid value (0) [ 1777.392985][T26592] usb 1-1: config 0 descriptor?? [ 1777.428189][T26592] smsc75xx v1.0.0 [ 1777.516610][T28203] IPv4: Oversized IP packet from 172.20.20.24 [ 1777.528487][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 1777.535629][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 1777.544123][T28192] bond2: option ad_actor_sys_prio: allowed values 1 - 65535 [ 1777.565720][ T10] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 1777.585194][ T5922] IPVS: starting estimator thread 0... [ 1777.614835][T28192] bond2 (unregistering): Released all slaves [ 1777.675956][T28205] IPVS: using max 26 ests per chain, 62400 per kthread [ 1777.750920][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 1777.802417][ T10] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 1777.846841][ T10] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1777.897257][ T10] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1777.932978][ T10] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1777.985746][ T10] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1778.014835][ T10] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1778.030222][T28201] veth11: entered promiscuous mode [ 1778.037165][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1778.046104][T28201] veth11: entered allmulticast mode [ 1778.049308][T26592] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 1778.090674][T26592] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1778.202893][T26592] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -61 [ 1778.228687][T28201] bridge20: port 1(veth11) entered blocking state [ 1778.241381][T26592] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -61 [ 1778.258808][T28201] bridge20: port 1(veth11) entered disabled state [ 1778.268141][T26592] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 1778.292400][T26592] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -61 [ 1778.338765][T26592] usb 1-1: USB disconnect, device number 27 [ 1778.364745][T28201] bridge20: port 1(veth11) entered blocking state [ 1778.371359][T28201] bridge20: port 1(veth11) entered forwarding state [ 1778.406711][ T10] usb 3-1: usb_control_msg returned -32 [ 1778.446240][ T10] usbtmc 3-1:16.0: can't read capabilities [ 1778.708724][T28204] veth13: entered promiscuous mode [ 1778.724360][T28204] veth13: entered allmulticast mode [ 1778.751100][T28204] bridge20: port 2(veth13) entered blocking state [ 1778.797873][T28204] bridge20: port 2(veth13) entered disabled state [ 1778.816848][T28192] usbtmc 3-1:16.0: INITIATE_ABORT_BULK_OUT returned 0 [ 1778.837117][T28204] bridge20: port 2(veth13) entered blocking state [ 1778.843700][T28204] bridge20: port 2(veth13) entered forwarding state [ 1778.938752][T16286] bridge20: port 1(veth11) entered disabled state [ 1778.983460][T16286] bridge20: port 2(veth13) entered disabled state [ 1779.022262][T26592] usb 3-1: USB disconnect, device number 42 [ 1779.095833][ T10] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 1779.259751][ T10] usb 7-1: Using ep0 maxpacket: 32 [ 1779.281302][ T10] usb 7-1: config 0 has an invalid interface number: 51 but max is 0 [ 1779.298716][ T10] usb 7-1: config 0 has no interface number 0 [ 1779.319458][ T10] usb 7-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1779.342033][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1779.355827][ T10] usb 7-1: Product: syz [ 1779.360129][ T10] usb 7-1: Manufacturer: syz [ 1779.396135][ T10] usb 7-1: SerialNumber: syz [ 1779.417884][ T10] usb 7-1: config 0 descriptor?? [ 1779.518613][ T10] quatech2 7-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1779.747438][ T10] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1779.799170][ T10] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1780.168588][ C0] usb 7-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1780.187170][ T10] usb 7-1: USB disconnect, device number 35 [ 1780.228762][ T10] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1780.285420][ T10] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1780.360458][ T10] quatech2 7-1:0.51: device disconnected [ 1780.468062][T28231] netlink: 'syz.5.5842': attribute type 10 has an invalid length. [ 1780.510724][T28231] team0: Port device netdevsim0 added [ 1780.519872][T18488] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 1780.559869][T28233] FAULT_INJECTION: forcing a failure. [ 1780.559869][T28233] name failslab, interval 1, probability 0, space 0, times 0 [ 1780.573658][T28233] CPU: 0 UID: 0 PID: 28233 Comm: syz.2.5841 Not tainted syzkaller #0 PREEMPT(full) [ 1780.573686][T28233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1780.573699][T28233] Call Trace: [ 1780.573709][T28233] [ 1780.573718][T28233] dump_stack_lvl+0x189/0x250 [ 1780.573751][T28233] ? __pfx____ratelimit+0x10/0x10 [ 1780.573779][T28233] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1780.573807][T28233] ? __pfx__printk+0x10/0x10 [ 1780.573841][T28233] should_fail_ex+0x414/0x560 [ 1780.573877][T28233] should_failslab+0xa8/0x100 [ 1780.573901][T28233] kmem_cache_alloc_noprof+0x74/0x6e0 [ 1780.573931][T28233] ? inet_bind_bucket_create+0x30/0x240 [ 1780.573951][T28233] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1780.573985][T28233] inet_bind_bucket_create+0x30/0x240 [ 1780.574010][T28233] inet_csk_get_port+0xbaf/0x1750 [ 1780.574040][T28233] ? __ipv6_chk_addr_and_flags+0x187/0x7e0 [ 1780.574079][T28233] ? __inet6_bind+0x455/0xf60 [ 1780.574108][T28233] __inet6_bind+0x6e5/0xf60 [ 1780.574142][T28233] kernel_bind+0x114/0x180 [ 1780.574171][T28233] ? __pfx_kernel_bind+0x10/0x10 [ 1780.574217][T28233] smc_bind+0x26e/0x370 [ 1780.574243][T28233] __sys_bind+0x2c6/0x3e0 [ 1780.574276][T28233] ? __pfx___sys_bind+0x10/0x10 [ 1780.574319][T28233] ? __pfx_ksys_write+0x10/0x10 [ 1780.574357][T28233] __ia32_sys_bind+0x7a/0x90 [ 1780.574388][T28233] __do_fast_syscall_32+0xb6/0x2b0 [ 1780.574419][T28233] ? lockdep_hardirqs_on+0x9c/0x150 [ 1780.574464][T28233] do_fast_syscall_32+0x34/0x80 [ 1780.574495][T28233] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1780.574519][T28233] RIP: 0023:0xf7f47539 [ 1780.574538][T28233] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1780.574557][T28233] RSP: 002b:00000000f543655c EFLAGS: 00000206 ORIG_RAX: 0000000000000169 [ 1780.574578][T28233] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000040 [ 1780.574592][T28233] RDX: 000000000000001c RSI: 0000000000000000 RDI: 0000000000000000 [ 1780.574604][T28233] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1780.574617][T28233] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1780.574629][T28233] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1780.574660][T28233] [ 1780.800131][ C0] vkms_vblank_simulate: vblank timer overrun [ 1780.941276][T18488] usb 1-1: Using ep0 maxpacket: 16 [ 1781.278759][T28236] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5843'. [ 1781.321745][T18488] usb 1-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 1781.379350][T18488] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1781.398529][T18488] usb 1-1: Product: syz [ 1781.402733][T18488] usb 1-1: Manufacturer: syz [ 1781.426346][T18488] usb 1-1: SerialNumber: syz [ 1781.442344][T18488] usb 1-1: config 0 descriptor?? [ 1781.647822][T28241] FAULT_INJECTION: forcing a failure. [ 1781.647822][T28241] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1781.651874][T18488] ssu100 1-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 1781.818144][T28241] CPU: 1 UID: 0 PID: 28241 Comm: syz.2.5845 Not tainted syzkaller #0 PREEMPT(full) [ 1781.818173][T28241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1781.818185][T28241] Call Trace: [ 1781.818194][T28241] [ 1781.818206][T28241] dump_stack_lvl+0x189/0x250 [ 1781.818237][T28241] ? __pfx____ratelimit+0x10/0x10 [ 1781.818262][T28241] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1781.818287][T28241] ? __pfx__printk+0x10/0x10 [ 1781.818316][T28241] should_fail_ex+0x414/0x560 [ 1781.818358][T28241] _copy_to_user+0x31/0xb0 [ 1781.818396][T28241] simple_read_from_buffer+0xe1/0x170 [ 1781.818426][T28241] proc_fail_nth_read+0x1b3/0x220 [ 1781.818452][T28241] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1781.818478][T28241] ? rw_verify_area+0x2a6/0x4d0 [ 1781.818500][T28241] ? __lock_acquire+0xab9/0xd20 [ 1781.818516][T28241] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1781.818539][T28241] vfs_read+0x200/0xa30 [ 1781.818562][T28241] ? fdget_pos+0x247/0x320 [ 1781.818583][T28241] ? __pfx___mutex_lock+0x10/0x10 [ 1781.818611][T28241] ? __pfx_vfs_read+0x10/0x10 [ 1781.818637][T28241] ? __fget_files+0x2a/0x420 [ 1781.818658][T28241] ? __fget_files+0x3a0/0x420 [ 1781.818674][T28241] ? __fget_files+0x2a/0x420 [ 1781.818699][T28241] ksys_read+0x145/0x250 [ 1781.818726][T28241] ? __pfx_ksys_read+0x10/0x10 [ 1781.818754][T28241] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 1781.818781][T28241] ? lockdep_hardirqs_on+0x9c/0x150 [ 1781.818808][T28241] __do_fast_syscall_32+0xb6/0x2b0 [ 1781.818835][T28241] ? lockdep_hardirqs_on+0x9c/0x150 [ 1781.818863][T28241] do_fast_syscall_32+0x34/0x80 [ 1781.818889][T28241] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1781.818911][T28241] RIP: 0023:0xf7f47539 [ 1781.818927][T28241] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1781.818942][T28241] RSP: 002b:00000000f5436590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 1781.818961][T28241] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f5436620 [ 1781.818974][T28241] RDX: 000000000000000f RSI: 00000000f73d5ff4 RDI: 0000000000000000 [ 1781.818984][T28241] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 1781.818994][T28241] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1781.819005][T28241] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1781.819032][T28241] [ 1782.309395][ T30] audit: type=1326 audit(1762144245.311:2239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28249 comm="syz.6.5848" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff3539 code=0x7ffc0000 [ 1782.331504][ C0] vkms_vblank_simulate: vblank timer overrun [ 1782.344713][T28251] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5847'. [ 1782.528707][ T30] audit: type=1326 audit(1762144245.311:2240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28249 comm="syz.6.5848" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff3539 code=0x7ffc0000 [ 1782.895788][ T30] audit: type=1326 audit(1762144245.311:2241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28249 comm="syz.6.5848" exe="/root/syz-executor" sig=0 arch=40000003 syscall=449 compat=1 ip=0xf7ff3539 code=0x7ffc0000 [ 1782.946558][T28252] veth15: entered promiscuous mode [ 1782.996238][T28252] veth15: entered allmulticast mode [ 1783.037628][ T30] audit: type=1326 audit(1762144245.311:2242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28249 comm="syz.6.5848" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff3539 code=0x7ffc0000 [ 1783.182266][ T30] audit: type=1326 audit(1762144245.311:2243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28249 comm="syz.6.5848" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff3539 code=0x7ffc0000 [ 1783.302765][T28229] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5840'. [ 1783.711082][T18488] ssu100 1-1:0.0: probe with driver ssu100 failed with error -110 [ 1783.737128][ T30] audit: type=1326 audit(1762144245.311:2244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28249 comm="syz.6.5848" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff3539 code=0x7ffc0000 [ 1785.422673][ T30] audit: type=1326 audit(1762144245.311:2245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28249 comm="syz.6.5848" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff3539 code=0x7ffc0000 [ 1786.295127][ T30] audit: type=1326 audit(1762144245.311:2246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28249 comm="syz.6.5848" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff3539 code=0x7ffc0000 [ 1786.329577][ T5922] usb 1-1: USB disconnect, device number 28 [ 1786.341852][ T30] audit: type=1326 audit(1762144245.311:2247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28249 comm="syz.6.5848" exe="/root/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf7ff3539 code=0x7ffc0000 [ 1786.363953][ C0] vkms_vblank_simulate: vblank timer overrun [ 1786.370749][ T30] audit: type=1326 audit(1762144245.311:2248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28249 comm="syz.6.5848" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff3539 code=0x7ffc0000 [ 1786.960662][T28253] veth15: entered promiscuous mode [ 1786.986029][T28253] veth15: entered allmulticast mode [ 1786.992315][T28253] bridge21: port 1(veth15) entered blocking state [ 1787.033627][T28253] bridge21: port 1(veth15) entered disabled state [ 1787.075393][T28253] bridge21: port 1(veth15) entered blocking state [ 1787.082023][T28253] bridge21: port 1(veth15) entered forwarding state [ 1787.125382][T28258] geneve2: entered promiscuous mode [ 1787.130891][T28258] geneve2: entered allmulticast mode [ 1787.434992][ T5922] IPVS: starting estimator thread 0... [ 1787.527394][T16286] bridge21: port 1(veth15) entered disabled state [ 1787.543907][T28272] IPVS: using max 31 ests per chain, 74400 per kthread [ 1787.665103][T28276] FAULT_INJECTION: forcing a failure. [ 1787.665103][T28276] name failslab, interval 1, probability 0, space 0, times 0 [ 1787.689029][T28278] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5856'. [ 1787.715741][ T5922] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 1787.766466][T28276] CPU: 0 UID: 0 PID: 28276 Comm: syz.2.5852 Not tainted syzkaller #0 PREEMPT(full) [ 1787.766497][T28276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1787.766511][T28276] Call Trace: [ 1787.766521][T28276] [ 1787.766530][T28276] dump_stack_lvl+0x189/0x250 [ 1787.766566][T28276] ? __pfx____ratelimit+0x10/0x10 [ 1787.766595][T28276] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1787.766624][T28276] ? __pfx__printk+0x10/0x10 [ 1787.766653][T28276] ? __pfx___might_resched+0x10/0x10 [ 1787.766676][T28276] ? fs_reclaim_acquire+0x7d/0x100 [ 1787.766714][T28276] should_fail_ex+0x414/0x560 [ 1787.766752][T28276] should_failslab+0xa8/0x100 [ 1787.766783][T28276] kmem_cache_alloc_noprof+0x74/0x6e0 [ 1787.766814][T28276] ? alloc_vfsmnt+0x23/0x430 [ 1787.766847][T28276] alloc_vfsmnt+0x23/0x430 [ 1787.766887][T28276] clone_mnt+0x4b/0x9a0 [ 1787.766915][T28276] ? is_subdir+0x78/0x2a0 [ 1787.766956][T28276] copy_tree+0x3d4/0x930 [ 1787.767015][T28276] copy_mnt_ns+0x19d/0x870 [ 1787.767047][T28276] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 1787.767076][T28276] ? create_new_namespaces+0x31/0x720 [ 1787.767103][T28276] create_new_namespaces+0xd1/0x720 [ 1787.767129][T28276] ? bpf_lsm_capable+0x9/0x20 [ 1787.767153][T28276] ? security_capable+0x7e/0x2e0 [ 1787.767190][T28276] unshare_nsproxy_namespaces+0x11c/0x170 [ 1787.767216][T28276] ksys_unshare+0x4c8/0x8c0 [ 1787.767250][T28276] ? __pfx_ksys_unshare+0x10/0x10 [ 1787.767277][T28276] ? __pfx_ksys_write+0x10/0x10 [ 1787.767310][T28276] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 1787.767346][T28276] __ia32_sys_unshare+0x37/0x40 [ 1787.767373][T28276] __do_fast_syscall_32+0xb6/0x2b0 [ 1787.767403][T28276] ? lockdep_hardirqs_on+0x9c/0x150 [ 1787.767436][T28276] do_fast_syscall_32+0x34/0x80 [ 1787.767465][T28276] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1787.767490][T28276] RIP: 0023:0xf7f47539 [ 1787.767508][T28276] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1787.767528][T28276] RSP: 002b:00000000f543655c EFLAGS: 00000206 ORIG_RAX: 0000000000000136 [ 1787.767561][T28276] RAX: ffffffffffffffda RBX: 0000000022020600 RCX: 0000000000000000 [ 1787.767575][T28276] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1787.767587][T28276] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1787.767598][T28276] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1787.767610][T28276] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1787.767639][T28276] [ 1788.025387][ C0] vkms_vblank_simulate: vblank timer overrun [ 1788.318680][T28265] Bluetooth: hci4: command 0x040f tx timeout [ 1788.374259][ T5922] usb 6-1: Using ep0 maxpacket: 32 [ 1788.404081][ T5922] usb 6-1: too many endpoints for config 0 interface 0 altsetting 32: 253, using maximum allowed: 30 [ 1788.589188][ T5922] usb 6-1: config 0 interface 0 altsetting 32 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1788.651311][ T5922] usb 6-1: config 0 interface 0 altsetting 32 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1788.684458][ T5922] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1788.702564][ T5922] usb 6-1: New USB device found, idVendor=0c12, idProduct=0030, bcdDevice= 0.00 [ 1788.838929][ T5922] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1788.906784][ T5922] usb 6-1: config 0 descriptor?? [ 1788.973423][T28291] netlink: 'syz.6.5859': attribute type 10 has an invalid length. [ 1789.008966][T28291] team0: Port device netdevsim0 added [ 1789.015829][T26592] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 1789.192775][T26592] usb 3-1: config 0 has no interfaces? [ 1789.205176][T26592] usb 3-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=4c.b3 [ 1789.283438][T26592] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1789.312890][T26592] usb 3-1: Product: syz [ 1789.334167][T26592] usb 3-1: Manufacturer: syz [ 1789.366723][ T5922] zeroplus 0003:0C12:0030.003F: hidraw0: USB HID v0.03 Device [HID 0c12:0030] on usb-dummy_hcd.5-1/input0 [ 1789.389932][T26592] usb 3-1: SerialNumber: syz [ 1789.420045][T26592] usb 3-1: config 0 descriptor?? [ 1789.443006][ T5922] zeroplus 0003:0C12:0030.003F: no inputs found [ 1790.725693][ T5922] usb 7-1: new full-speed USB device number 36 using dummy_hcd [ 1790.760707][T26592] usb 6-1: USB disconnect, device number 74 [ 1790.990558][ T5922] usb 7-1: config 54 has an invalid interface number: 154 but max is 0 [ 1791.102232][ T5922] usb 7-1: config 54 has an invalid descriptor of length 0, skipping remainder of the config [ 1791.145653][ T5922] usb 7-1: config 54 has no interface number 0 [ 1791.151982][ T5922] usb 7-1: config 54 interface 154 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 4 [ 1791.228306][ T5922] usb 7-1: config 54 interface 154 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1791.267327][ T5922] usb 7-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice= 0.ec [ 1791.288308][T28303] FAULT_INJECTION: forcing a failure. [ 1791.288308][T28303] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1791.302350][ T5922] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1791.324774][ T5922] usb 7-1: Product: syz [ 1791.341744][ T5922] usb 7-1: Manufacturer: syz [ 1791.358475][ T5922] usb 7-1: SerialNumber: syz [ 1791.363168][T28303] CPU: 0 UID: 0 PID: 28303 Comm: syz.7.5862 Not tainted syzkaller #0 PREEMPT(full) [ 1791.363195][T28303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1791.363209][T28303] Call Trace: [ 1791.363218][T28303] [ 1791.363227][T28303] dump_stack_lvl+0x189/0x250 [ 1791.363261][T28303] ? __pfx____ratelimit+0x10/0x10 [ 1791.363288][T28303] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1791.363317][T28303] ? __pfx__printk+0x10/0x10 [ 1791.363339][T28303] ? __might_fault+0xb0/0x130 [ 1791.363380][T28303] should_fail_ex+0x414/0x560 [ 1791.363417][T28303] _copy_from_iter+0x1de/0x1790 [ 1791.363464][T28303] ? __pfx__copy_from_iter+0x10/0x10 [ 1791.363505][T28303] tun_get_user+0x488/0x3e90 [ 1791.363550][T28303] ? aa_file_perm+0x44d/0x1550 [ 1791.363571][T28303] ? __pfx_tun_get_user+0x10/0x10 [ 1791.363595][T28303] ? _parse_integer_limit+0x1ae/0x1f0 [ 1791.363625][T28303] ? __lock_acquire+0xab9/0xd20 [ 1791.363652][T28303] ? ref_tracker_alloc+0x318/0x460 [ 1791.363670][T28303] ? __lock_acquire+0xab9/0xd20 [ 1791.363692][T28303] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1791.363718][T28303] ? tun_get+0x1c/0x2f0 [ 1791.363749][T28303] ? tun_get+0x1c/0x2f0 [ 1791.363771][T28303] ? tun_get+0x1c/0x2f0 [ 1791.363801][T28303] tun_chr_write_iter+0x113/0x200 [ 1791.363829][T28303] vfs_write+0x5c9/0xb30 [ 1791.363863][T28303] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 1791.363889][T28303] ? __pfx_vfs_write+0x10/0x10 [ 1791.363928][T28303] ? __fget_files+0x2a/0x420 [ 1791.363958][T28303] ksys_write+0x145/0x250 [ 1791.363986][T28303] ? exc_page_fault+0x82/0x100 [ 1791.364014][T28303] ? __pfx_ksys_write+0x10/0x10 [ 1791.364046][T28303] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 1791.364077][T28303] ? lockdep_hardirqs_on+0x9c/0x150 [ 1791.364108][T28303] __do_fast_syscall_32+0xb6/0x2b0 [ 1791.364138][T28303] ? lockdep_hardirqs_on+0x9c/0x150 [ 1791.364170][T28303] do_fast_syscall_32+0x34/0x80 [ 1791.364201][T28303] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1791.364226][T28303] RIP: 0023:0xf704d539 [ 1791.364245][T28303] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1791.364263][T28303] RSP: 002b:00000000f543d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 1791.364284][T28303] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800024c0 [ 1791.364298][T28303] RDX: 00000000000000a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1791.364310][T28303] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1791.364323][T28303] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1791.364335][T28303] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1791.364366][T28303] [ 1791.629598][ C0] vkms_vblank_simulate: vblank timer overrun [ 1791.818786][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1791.825217][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1794.442896][ T5922] usb 7-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1794.481849][T16287] usb 7-1: Failed to submit usb control message: -71 [ 1794.516025][T16287] usb 7-1: unable to send the bmi data to the device: -71 [ 1794.523308][T16287] usb 7-1: unable to get target info from device [ 1794.532867][ T5927] usb 3-1: USB disconnect, device number 43 [ 1794.756402][ T5922] usb 7-1: USB disconnect, device number 36 [ 1794.780591][T16287] usb 7-1: could not get target info (-71) [ 1794.805677][T16287] usb 7-1: could not probe fw (-71) [ 1795.815958][T28322] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5867'. [ 1796.467577][T28339] netlink: 'syz.0.5872': attribute type 1 has an invalid length. [ 1796.645924][T26592] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 1796.945789][T26592] usb 6-1: Using ep0 maxpacket: 32 [ 1796.978462][T26592] usb 6-1: too many endpoints for config 0 interface 0 altsetting 32: 253, using maximum allowed: 30 [ 1796.994439][T28339] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1797.007948][T26592] usb 6-1: config 0 interface 0 altsetting 32 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1797.020713][T26592] usb 6-1: config 0 interface 0 altsetting 32 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1797.042079][T26592] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1797.049644][T26592] usb 6-1: New USB device found, idVendor=0c12, idProduct=0030, bcdDevice= 0.00 [ 1797.101279][T26592] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1797.115745][T28345] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5875'. [ 1797.129507][T26592] usb 6-1: config 0 descriptor?? [ 1797.552732][T28341] bond2: (slave veth27): Enslaving as an active interface with a down link [ 1797.574445][T26592] zeroplus 0003:0C12:0030.0040: hidraw0: USB HID v0.03 Device [HID 0c12:0030] on usb-dummy_hcd.5-1/input0 [ 1797.621725][T26592] zeroplus 0003:0C12:0030.0040: no inputs found [ 1797.653720][T28342] bond2: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 1797.753350][T28339] vlan3: entered allmulticast mode [ 1797.766574][T28339] veth1: entered allmulticast mode [ 1797.794869][T26592] usb 6-1: USB disconnect, device number 75 [ 1797.802556][T28339] bond2: (slave vlan3): Opening slave failed [ 1798.050286][T28346] veth23: entered promiscuous mode [ 1798.060604][T28346] veth23: entered allmulticast mode [ 1798.070384][T28346] bridge34: port 1(veth23) entered blocking state [ 1798.078837][T28346] bridge34: port 1(veth23) entered disabled state [ 1798.090474][T28346] bridge34: port 1(veth23) entered blocking state [ 1798.097181][T28346] bridge34: port 1(veth23) entered forwarding state [ 1798.139836][T28347] veth25: entered promiscuous mode [ 1798.145191][T28347] veth25: entered allmulticast mode [ 1798.152448][T28347] bridge34: port 2(veth25) entered blocking state [ 1798.159721][T28347] bridge34: port 2(veth25) entered disabled state [ 1798.174011][T28347] bridge34: port 2(veth25) entered blocking state [ 1798.180752][T28347] bridge34: port 2(veth25) entered forwarding state [ 1798.236829][T18232] bridge34: port 1(veth23) entered disabled state [ 1798.316568][T18232] bridge34: port 2(veth25) entered disabled state [ 1798.866722][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 1798.866742][ T30] audit: type=1326 audit(1762144261.851:2250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28361 comm="syz.6.5879" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff3539 code=0x7ffc0000 [ 1798.894963][ C0] vkms_vblank_simulate: vblank timer overrun [ 1799.090095][ T30] audit: type=1326 audit(1762144261.851:2251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28361 comm="syz.6.5879" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff3539 code=0x7ffc0000 [ 1799.112212][ C0] vkms_vblank_simulate: vblank timer overrun [ 1799.191060][T28368] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5881'. [ 1799.294658][ T30] audit: type=1326 audit(1762144261.861:2252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28361 comm="syz.6.5879" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7ff3539 code=0x7ffc0000 [ 1799.364747][ T30] audit: type=1326 audit(1762144261.861:2253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28361 comm="syz.6.5879" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff3539 code=0x7ffc0000 [ 1799.434476][ T30] audit: type=1326 audit(1762144261.861:2254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28361 comm="syz.6.5879" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff3539 code=0x7ffc0000 [ 1799.480112][T28364] FAULT_INJECTION: forcing a failure. [ 1799.480112][T28364] name failslab, interval 1, probability 0, space 0, times 0 [ 1799.493015][T26592] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 1799.626021][T28364] CPU: 0 UID: 0 PID: 28364 Comm: syz.5.5880 Not tainted syzkaller #0 PREEMPT(full) [ 1799.626050][T28364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1799.626064][T28364] Call Trace: [ 1799.626072][T28364] [ 1799.626082][T28364] dump_stack_lvl+0x189/0x250 [ 1799.626113][T28364] ? __pfx____ratelimit+0x10/0x10 [ 1799.626140][T28364] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1799.626169][T28364] ? __pfx__printk+0x10/0x10 [ 1799.626196][T28364] ? __pfx___might_resched+0x10/0x10 [ 1799.626223][T28364] should_fail_ex+0x414/0x560 [ 1799.626260][T28364] should_failslab+0xa8/0x100 [ 1799.626283][T28364] kmem_cache_alloc_node_noprof+0x77/0x710 [ 1799.626313][T28364] ? __alloc_skb+0x112/0x2d0 [ 1799.626338][T28364] __alloc_skb+0x112/0x2d0 [ 1799.626361][T28364] netlink_ack+0x146/0xa50 [ 1799.626391][T28364] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1799.626439][T28364] netlink_rcv_skb+0x28c/0x470 [ 1799.626469][T28364] ? __lock_acquire+0xab9/0xd20 [ 1799.626490][T28364] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1799.626522][T28364] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1799.626579][T28364] ? netlink_deliver_tap+0x2e/0x1b0 [ 1799.626607][T28364] netlink_unicast+0x82f/0x9e0 [ 1799.626646][T28364] ? __pfx_netlink_unicast+0x10/0x10 [ 1799.626677][T28364] ? netlink_sendmsg+0x642/0xb30 [ 1799.626695][T28364] ? skb_put+0x11b/0x210 [ 1799.626718][T28364] netlink_sendmsg+0x805/0xb30 [ 1799.626747][T28364] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1799.626771][T28364] ? __import_iovec+0x5d4/0x7f0 [ 1799.626794][T28364] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1799.626826][T28364] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1799.626846][T28364] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1799.626867][T28364] __sock_sendmsg+0x21c/0x270 [ 1799.626899][T28364] ____sys_sendmsg+0x505/0x830 [ 1799.626928][T28364] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1799.626967][T28364] ___sys_sendmsg+0x21f/0x2a0 [ 1799.627002][T28364] ? __pfx____sys_sendmsg+0x10/0x10 [ 1799.627057][T28364] ? __fget_files+0x2a/0x420 [ 1799.627074][T28364] ? __fget_files+0x3a0/0x420 [ 1799.627103][T28364] __sys_sendmsg+0x164/0x220 [ 1799.627126][T28364] ? __pfx___sys_sendmsg+0x10/0x10 [ 1799.627156][T28364] ? __pfx_ksys_write+0x10/0x10 [ 1799.627186][T28364] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 1799.627216][T28364] ? lockdep_hardirqs_on+0x9c/0x150 [ 1799.627245][T28364] __do_fast_syscall_32+0xb6/0x2b0 [ 1799.627273][T28364] ? lockdep_hardirqs_on+0x9c/0x150 [ 1799.627303][T28364] do_fast_syscall_32+0x34/0x80 [ 1799.627331][T28364] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1799.627355][T28364] RIP: 0023:0xf70bd539 [ 1799.627372][T28364] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1799.627389][T28364] RSP: 002b:00000000f54ad55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1799.627410][T28364] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 1799.627423][T28364] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1799.627435][T28364] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1799.627446][T28364] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1799.627457][T28364] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1799.627485][T28364] [ 1799.951923][ C0] vkms_vblank_simulate: vblank timer overrun [ 1800.035988][T28378] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5877'. [ 1800.121365][T26592] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1800.134107][T26592] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 1800.141894][T26592] usb 7-1: can't read configurations, error -71 [ 1801.560039][T28385] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5885'. [ 1801.792307][T28385] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5885'. [ 1802.123058][T28394] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5887'. [ 1802.619779][T28395] netlink: 196 bytes leftover after parsing attributes in process `syz.6.5886'. [ 1802.751525][T28397] veth29: entered promiscuous mode [ 1802.865961][T28397] veth29: entered allmulticast mode [ 1803.235772][T26592] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 1803.515763][T26592] usb 6-1: Using ep0 maxpacket: 32 [ 1803.639559][T26592] usb 6-1: too many endpoints for config 0 interface 0 altsetting 32: 253, using maximum allowed: 30 [ 1803.661148][T26592] usb 6-1: config 0 interface 0 altsetting 32 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1803.802626][T26592] usb 6-1: config 0 interface 0 altsetting 32 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1803.925729][T26592] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1803.984762][T26592] usb 6-1: New USB device found, idVendor=0c12, idProduct=0030, bcdDevice= 0.00 [ 1804.030973][T28398] veth29: entered promiscuous mode [ 1804.055668][T28398] veth29: entered allmulticast mode [ 1804.070927][T26592] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1804.253837][T26592] usb 6-1: config 0 descriptor?? [ 1804.730407][T26592] zeroplus 0003:0C12:0030.0041: hidraw0: USB HID v0.03 Device [HID 0c12:0030] on usb-dummy_hcd.5-1/input0 [ 1804.805681][T26592] zeroplus 0003:0C12:0030.0041: no inputs found [ 1804.959583][ T10] usb 6-1: USB disconnect, device number 76 [ 1805.013064][T28421] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5895'. [ 1805.022268][T28421] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5895'. [ 1805.031371][ T30] audit: type=1326 audit(1762144268.021:2255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28418 comm="syz.0.5892" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f01539 code=0x7ffc0000 [ 1805.085663][ T30] audit: type=1326 audit(1762144268.021:2256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28418 comm="syz.0.5892" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f01539 code=0x7ffc0000 [ 1805.107880][ C0] vkms_vblank_simulate: vblank timer overrun [ 1805.145015][ T30] audit: type=1326 audit(1762144268.071:2257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28418 comm="syz.0.5892" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f01539 code=0x7ffc0000 [ 1805.179440][ T30] audit: type=1326 audit(1762144268.071:2258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28418 comm="syz.0.5892" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f01539 code=0x7ffc0000 [ 1805.205547][ T30] audit: type=1326 audit(1762144268.071:2259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28418 comm="syz.0.5892" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f01539 code=0x7ffc0000 [ 1805.308083][T26592] usb 3-1: new full-speed USB device number 44 using dummy_hcd [ 1805.392011][T28432] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5896'. [ 1805.487680][T26592] usb 3-1: config 54 has an invalid interface number: 154 but max is 0 [ 1805.496328][ T10] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 1805.508094][T26592] usb 3-1: config 54 has an invalid descriptor of length 0, skipping remainder of the config [ 1805.520931][T26592] usb 3-1: config 54 has no interface number 0 [ 1805.528732][T26592] usb 3-1: config 54 interface 154 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 4 [ 1805.544042][T26592] usb 3-1: config 54 interface 154 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1805.560715][T26592] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice= 0.ec [ 1805.574236][T26592] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1805.584394][T26592] usb 3-1: Product: syz [ 1805.589464][T26592] usb 3-1: Manufacturer: syz [ 1805.594301][T26592] usb 3-1: SerialNumber: syz [ 1805.657660][ T10] usb 1-1: config 0 has no interfaces? [ 1805.666287][ T10] usb 1-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=4c.b3 [ 1805.681927][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1805.699875][ T10] usb 1-1: Product: syz [ 1805.709501][ T10] usb 1-1: Manufacturer: syz [ 1805.723009][ T10] usb 1-1: SerialNumber: syz [ 1805.762113][ T10] usb 1-1: config 0 descriptor?? [ 1805.930006][T28436] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5899'. [ 1806.332960][T26592] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1806.354808][T22270] usb 3-1: Failed to submit usb control message: -71 [ 1806.385367][T22270] usb 3-1: unable to send the bmi data to the device: -71 [ 1806.418398][T26592] usb 3-1: USB disconnect, device number 44 [ 1806.455652][T22270] usb 3-1: unable to get target info from device [ 1806.500677][T22270] usb 3-1: could not get target info (-71) [ 1806.517433][T22270] usb 3-1: could not probe fw (-71) [ 1807.404508][T28447] kvm: requested 81295 ns i8254 timer period limited to 200000 ns [ 1807.418495][T28447] kvm: requested 184381 ns i8254 timer period limited to 200000 ns [ 1807.442175][T28447] kvm: requested 53638 ns i8254 timer period limited to 200000 ns [ 1807.487865][T28447] kvm: requested 162590 ns i8254 timer period limited to 200000 ns [ 1807.531709][T28447] kvm: requested 156723 ns i8254 timer period limited to 200000 ns [ 1807.545163][T28447] kvm: requested 23466 ns i8254 timer period limited to 200000 ns [ 1807.579261][T28447] kvm: requested 24304 ns i8254 timer period limited to 200000 ns [ 1807.601212][T28447] kvm: requested 18438 ns i8254 timer period limited to 200000 ns [ 1807.610997][T28447] kvm: requested 25980 ns i8254 timer period limited to 200000 ns [ 1807.620917][T28447] kvm: requested 63695 ns i8254 timer period limited to 200000 ns [ 1807.735954][T28455] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5903'. [ 1807.922160][T28456] veth11: entered promiscuous mode [ 1807.940170][T28456] veth11: entered allmulticast mode [ 1807.962420][T28456] bridge5: port 1(veth11) entered blocking state [ 1807.985669][T28456] bridge5: port 1(veth11) entered disabled state [ 1808.013166][T28456] bridge5: port 1(veth11) entered blocking state [ 1808.019664][T28456] bridge5: port 1(veth11) entered forwarding state [ 1808.051865][T28457] veth13: entered promiscuous mode [ 1808.057191][T28457] veth13: entered allmulticast mode [ 1808.063210][T28457] bridge5: port 2(veth13) entered blocking state [ 1808.069788][T28457] bridge5: port 2(veth13) entered disabled state [ 1808.078692][T28457] bridge5: port 2(veth13) entered blocking state [ 1808.085151][T28457] bridge5: port 2(veth13) entered forwarding state [ 1808.095284][T18232] bridge5: port 1(veth11) entered disabled state [ 1808.122624][T18232] bridge5: port 2(veth13) entered disabled state [ 1808.172277][T28450] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5902'. [ 1808.282215][T28450] veth27: entered promiscuous mode [ 1808.288154][T28450] veth27: entered allmulticast mode [ 1808.300274][T28450] bridge35: port 1(veth27) entered blocking state [ 1808.309597][T28450] bridge35: port 1(veth27) entered disabled state [ 1808.320502][T28450] bridge35: port 1(veth27) entered blocking state [ 1808.327099][T28450] bridge35: port 1(veth27) entered forwarding state [ 1808.342565][T28462] netlink: 'syz.7.5904': attribute type 10 has an invalid length. [ 1808.430755][T28462] team0: Port device netdevsim0 added [ 1808.437939][T26592] usb 1-1: USB disconnect, device number 29 [ 1808.742512][ T30] audit: type=1326 audit(1762144271.741:2260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28466 comm="syz.6.5907" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff3539 code=0x7ffc0000 [ 1808.797742][ T30] audit: type=1326 audit(1762144271.741:2261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28466 comm="syz.6.5907" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff3539 code=0x7ffc0000 [ 1808.843374][T28470] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5909'. [ 1808.895599][ T30] audit: type=1326 audit(1762144271.741:2262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28466 comm="syz.6.5907" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7ff3539 code=0x7ffc0000 [ 1808.896932][T28470] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5909'. [ 1808.940566][T28475] syzkaller1: entered promiscuous mode [ 1808.948826][T28475] syzkaller1: entered allmulticast mode [ 1808.970543][ T30] audit: type=1326 audit(1762144271.741:2263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28466 comm="syz.6.5907" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff3539 code=0x7ffc0000 [ 1808.992699][ C0] vkms_vblank_simulate: vblank timer overrun [ 1809.016870][T28479] Failed to get privilege flags for destination (handle=0x2:0x25) [ 1809.030582][ T30] audit: type=1326 audit(1762144271.741:2264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28466 comm="syz.6.5907" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff3539 code=0x7ffc0000 [ 1809.140400][T28481] input: syz1 as /devices/virtual/input/input84 [ 1809.199632][T22269] bridge35: port 1(veth27) entered disabled state [ 1810.085628][T18476] usb 3-1: new full-speed USB device number 45 using dummy_hcd [ 1810.235655][T18489] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 1810.267293][T18476] usb 3-1: config 54 has an invalid interface number: 154 but max is 0 [ 1810.276303][T18476] usb 3-1: config 54 has an invalid descriptor of length 0, skipping remainder of the config [ 1810.295694][T18476] usb 3-1: config 54 has no interface number 0 [ 1810.302491][T18476] usb 3-1: config 54 interface 154 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 4 [ 1810.335677][T18476] usb 3-1: config 54 interface 154 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1810.371654][T18476] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice= 0.ec [ 1810.381324][T18476] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1810.389804][T18476] usb 3-1: Product: syz [ 1810.396232][T18489] usb 1-1: Using ep0 maxpacket: 32 [ 1810.511808][T18489] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 1810.525633][T18489] usb 1-1: config 0 has no interface number 0 [ 1810.535565][T18476] usb 3-1: Manufacturer: syz [ 1810.540550][T18476] usb 3-1: SerialNumber: syz [ 1810.566432][T18489] usb 1-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1810.607308][T18489] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1810.616912][T18489] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1810.624984][T18489] usb 1-1: Product: syz [ 1810.629399][T18489] usb 1-1: Manufacturer: syz [ 1810.634059][T18489] usb 1-1: SerialNumber: syz [ 1810.659796][T18489] usb 1-1: config 0 descriptor?? [ 1810.741619][T18489] em28xx 1-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1810.752310][T18489] em28xx 1-1:0.132: Video interface 132 found: [ 1810.822303][T18476] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1810.825486][T16287] usb 3-1: Failed to submit usb control message: -71 [ 1810.832129][T16287] usb 3-1: unable to send the bmi data to the device: -71 [ 1810.832152][T16287] usb 3-1: unable to get target info from device [ 1810.832177][T16287] usb 3-1: could not get target info (-71) [ 1810.832203][T16287] usb 3-1: could not probe fw (-71) [ 1810.839427][T28493] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5915'. [ 1810.925914][T18476] usb 3-1: USB disconnect, device number 45 [ 1811.094808][T28493] veth17: entered promiscuous mode [ 1811.101729][T28493] veth17: entered allmulticast mode [ 1811.108878][T28493] bridge23: port 1(veth17) entered blocking state [ 1811.116858][T28493] bridge23: port 1(veth17) entered disabled state [ 1811.136992][T28493] bridge23: port 1(veth17) entered blocking state [ 1811.143581][T28493] bridge23: port 1(veth17) entered forwarding state [ 1811.168963][T16287] bridge23: port 1(veth17) entered disabled state [ 1811.180242][T18489] em28xx 1-1:0.132: unknown em28xx chip ID (0) [ 1811.203722][T28499] veth19: entered promiscuous mode [ 1811.209107][T28499] veth19: entered allmulticast mode [ 1811.214980][T28499] bridge23: port 2(veth19) entered blocking state [ 1811.222797][T28499] bridge23: port 2(veth19) entered disabled state [ 1811.232660][T28499] bridge23: port 2(veth19) entered blocking state [ 1811.239304][T28499] bridge23: port 2(veth19) entered forwarding state [ 1811.342251][T18232] bridge23: port 2(veth19) entered disabled state [ 1812.325671][T26592] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 1812.485628][T26592] usb 3-1: Using ep0 maxpacket: 32 [ 1812.493919][T26592] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 1812.502453][T26592] usb 3-1: config 0 has no interface number 0 [ 1812.508697][T26592] usb 3-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1812.651646][T18489] em28xx 1-1:0.132: failed to trigger write to i2c address 0xa0 (error=-5) [ 1812.660893][T18489] em28xx 1-1:0.132: failed to read eeprom (err=-5) [ 1812.675679][T18489] em28xx 1-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-5] [ 1812.705249][T26592] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1812.715398][T26592] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1812.724612][T26592] usb 3-1: Product: syz [ 1812.729350][T26592] usb 3-1: Manufacturer: syz [ 1812.738537][T26592] usb 3-1: SerialNumber: syz [ 1812.749475][T26592] usb 3-1: config 0 descriptor?? [ 1812.789281][T18489] em28xx 1-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1812.803021][T18489] em28xx 1-1:0.132: analog set to bulk mode. [ 1812.822631][T26592] em28xx 3-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1812.828811][T18488] em28xx 1-1:0.132: Registering V4L2 extension [ 1812.835297][T26592] em28xx 3-1:0.132: Video interface 132 found: [ 1812.967215][T18488] em28xx 1-1:0.132: failed to trigger read from i2c address 0x4a (error=-5) [ 1813.015721][T18488] em28xx 1-1:0.132: failed to trigger read from i2c address 0x48 (error=-5) [ 1813.056335][T18488] em28xx 1-1:0.132: failed to trigger read from i2c address 0x42 (error=-5) [ 1813.076260][T18488] em28xx 1-1:0.132: failed to trigger read from i2c address 0x40 (error=-5) [ 1813.095717][ T30] audit: type=1326 audit(1762144276.081:2265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28517 comm="syz.7.5921" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 1813.205633][ T30] audit: type=1326 audit(1762144276.081:2266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28517 comm="syz.7.5921" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 1813.227734][ C0] vkms_vblank_simulate: vblank timer overrun [ 1813.247354][T26592] em28xx 3-1:0.132: unknown em28xx chip ID (0) [ 1813.276225][T18488] em28xx 1-1:0.132: failed to trigger read from i2c address 0x84 (error=-5) [ 1813.281310][ T30] audit: type=1326 audit(1762144276.081:2267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28517 comm="syz.7.5921" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 1813.307067][ C0] vkms_vblank_simulate: vblank timer overrun [ 1813.313452][T18488] em28xx 1-1:0.132: failed to trigger read from i2c address 0x86 (error=-5) [ 1813.329695][T18488] em28xx 1-1:0.132: failed to trigger read from i2c address 0x94 (error=-5) [ 1813.378264][T18488] em28xx 1-1:0.132: failed to trigger read from i2c address 0x96 (error=-5) [ 1813.568188][T18476] usb 1-1: USB disconnect, device number 30 [ 1813.581239][T18476] em28xx 1-1:0.132: Disconnecting em28xx [ 1813.644818][T18488] em28xx 1-1:0.132: Config register raw data: 0xffffffed [ 1813.653212][T18488] em28xx 1-1:0.132: AC97 chip type couldn't be determined [ 1813.661180][T18488] em28xx 1-1:0.132: No AC97 audio processor [ 1813.668613][T28526] syzkaller1: entered promiscuous mode [ 1813.695680][T28526] syzkaller1: entered allmulticast mode [ 1813.780588][T18488] usb 1-1: Decoder not found [ 1813.791831][T18488] em28xx 1-1:0.132: failed to create media graph [ 1813.807172][T28512] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5920'. [ 1813.825866][T18488] em28xx 1-1:0.132: V4L2 device video103 deregistered [ 1813.835723][ T5927] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 1813.896550][T18488] em28xx 1-1:0.132: Remote control support is not available for this card. [ 1813.954193][T18476] em28xx 1-1:0.132: Closing input extension [ 1813.969792][T18476] em28xx 1-1:0.132: Freeing device [ 1814.052339][ T5927] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1814.072244][ T5927] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1814.144245][ T5927] usb 6-1: Product: syz [ 1814.299879][ T5927] usb 6-1: Manufacturer: syz [ 1814.314996][ T5927] usb 6-1: SerialNumber: syz [ 1814.780377][ T5927] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1814.795028][ T5927] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1814.877694][T26592] em28xx 3-1:0.132: failed to trigger write to i2c address 0xa0 (error=-5) [ 1814.902450][T26592] em28xx 3-1:0.132: failed to read eeprom (err=-5) [ 1814.952094][T26592] em28xx 3-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-5] [ 1815.053710][T26592] em28xx 3-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1815.730339][T26592] em28xx 3-1:0.132: analog set to bulk mode. [ 1815.753268][T28540] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5926'. [ 1815.811973][ T5922] em28xx 3-1:0.132: Registering V4L2 extension [ 1815.889493][ T5922] em28xx 3-1:0.132: failed to trigger read from i2c address 0x4a (error=-5) [ 1816.009588][ T5922] em28xx 3-1:0.132: failed to trigger read from i2c address 0x48 (error=-5) [ 1816.079220][ T5922] em28xx 3-1:0.132: failed to trigger read from i2c address 0x42 (error=-5) [ 1816.133676][ T5922] em28xx 3-1:0.132: failed to trigger read from i2c address 0x40 (error=-5) [ 1816.289771][T28545] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5927'. [ 1816.316836][ T5922] em28xx 3-1:0.132: failed to trigger read from i2c address 0x84 (error=-5) [ 1816.385630][ T5922] em28xx 3-1:0.132: failed to trigger read from i2c address 0x86 (error=-5) [ 1816.405086][ T5922] em28xx 3-1:0.132: failed to trigger read from i2c address 0x94 (error=-5) [ 1816.406466][T18488] usb 3-1: USB disconnect, device number 46 [ 1816.453900][ T5922] em28xx 3-1:0.132: failed to trigger read from i2c address 0x96 (error=-19) [ 1816.510096][T18488] em28xx 3-1:0.132: Disconnecting em28xx [ 1816.614540][T28545] veth29: entered promiscuous mode [ 1816.625408][ T5922] em28xx 3-1:0.132: Config register raw data: 0xffffffed [ 1816.629086][T28545] veth29: entered allmulticast mode [ 1816.643664][T28545] bridge33: port 1(veth29) entered blocking state [ 1816.655061][ T5922] em28xx 3-1:0.132: AC97 chip type couldn't be determined [ 1816.674359][T28545] bridge33: port 1(veth29) entered disabled state [ 1816.728772][T28545] bridge33: port 1(veth29) entered blocking state [ 1816.735408][T28545] bridge33: port 1(veth29) entered forwarding state [ 1816.780995][ T5922] em28xx 3-1:0.132: No AC97 audio processor [ 1816.803314][ T5922] usb 3-1: Decoder not found [ 1816.812608][ T5922] em28xx 3-1:0.132: failed to create media graph [ 1816.843608][ T5922] em28xx 3-1:0.132: V4L2 device video103 deregistered [ 1816.990610][ T5922] em28xx 3-1:0.132: Remote control support is not available for this card. [ 1816.999673][T18488] em28xx 3-1:0.132: Closing input extension [ 1817.018662][T18488] ================================================================== [ 1817.026771][T18488] BUG: KASAN: slab-use-after-free in media_device_unregister+0x141/0x400 [ 1817.035225][T18488] Read of size 8 at addr ffff888035bc4210 by task kworker/1:11/18488 [ 1817.043314][T18488] [ 1817.045688][T18488] CPU: 1 UID: 0 PID: 18488 Comm: kworker/1:11 Not tainted syzkaller #0 PREEMPT(full) [ 1817.045715][T18488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1817.045731][T18488] Workqueue: usb_hub_wq hub_event [ 1817.045755][T18488] Call Trace: [ 1817.045765][T18488] [ 1817.045774][T18488] dump_stack_lvl+0x189/0x250 [ 1817.045804][T18488] ? rcu_is_watching+0x15/0xb0 [ 1817.045827][T18488] ? __kasan_check_byte+0x12/0x40 [ 1817.045848][T18488] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1817.045874][T18488] ? rcu_is_watching+0x15/0xb0 [ 1817.045898][T18488] ? lock_release+0x4b/0x3e0 [ 1817.045920][T18488] ? __virt_addr_valid+0x1c8/0x5c0 [ 1817.045950][T18488] ? __virt_addr_valid+0x4a5/0x5c0 [ 1817.045979][T18488] print_report+0xca/0x240 [ 1817.046005][T18488] ? media_device_unregister+0x141/0x400 [ 1817.046032][T18488] kasan_report+0x118/0x150 [ 1817.046053][T18488] ? media_device_unregister+0x141/0x400 [ 1817.046085][T18488] media_device_unregister+0x141/0x400 [ 1817.046116][T18488] em28xx_release_resources+0xac/0x240 [ 1817.046147][T18488] em28xx_usb_disconnect+0x19f/0x2f0 [ 1817.046175][T18488] usb_unbind_interface+0x26e/0x910 [ 1817.046202][T18488] ? __pfx_usb_unbind_interface+0x10/0x10 [ 1817.046225][T18488] device_release_driver_internal+0x4d9/0x800 [ 1817.046258][T18488] bus_remove_device+0x34d/0x410 [ 1817.046283][T18488] device_del+0x511/0x8e0 [ 1817.046322][T18488] ? __pfx_device_del+0x10/0x10 [ 1817.046345][T18488] ? kobject_put+0x446/0x480 [ 1817.046381][T18488] usb_disable_device+0x3e9/0x8a0 [ 1817.046406][T18488] usb_disconnect+0x330/0x950 [ 1817.046439][T18488] hub_event+0x1cf5/0x4a20 [ 1817.046471][T18488] ? do_raw_spin_lock+0x121/0x290 [ 1817.046502][T18488] ? register_lock_class+0x51/0x320 [ 1817.046530][T18488] ? __pfx_hub_event+0x10/0x10 [ 1817.046548][T18488] ? process_scheduled_works+0x9ef/0x17b0 [ 1817.046574][T18488] ? _raw_spin_unlock_irq+0x23/0x50 [ 1817.046599][T18488] ? process_scheduled_works+0x9ef/0x17b0 [ 1817.046628][T18488] ? process_scheduled_works+0x9ef/0x17b0 [ 1817.046652][T18488] process_scheduled_works+0xae1/0x17b0 [ 1817.046689][T18488] ? __pfx_process_scheduled_works+0x10/0x10 [ 1817.046722][T18488] worker_thread+0x8a0/0xda0 [ 1817.046758][T18488] kthread+0x711/0x8a0 [ 1817.046787][T18488] ? __pfx_worker_thread+0x10/0x10 [ 1817.046810][T18488] ? __pfx_kthread+0x10/0x10 [ 1817.046838][T18488] ? _raw_spin_unlock_irq+0x23/0x50 [ 1817.046864][T18488] ? lockdep_hardirqs_on+0x9c/0x150 [ 1817.046902][T18488] ? __pfx_kthread+0x10/0x10 [ 1817.046928][T18488] ret_from_fork+0x4bc/0x870 [ 1817.046949][T18488] ? __pfx_ret_from_fork+0x10/0x10 [ 1817.046971][T18488] ? __switch_to_asm+0x39/0x70 [ 1817.046988][T18488] ? __switch_to_asm+0x33/0x70 [ 1817.047004][T18488] ? __pfx_kthread+0x10/0x10 [ 1817.047030][T18488] ret_from_fork_asm+0x1a/0x30 [ 1817.047056][T18488] [ 1817.047064][T18488] [ 1817.319913][T18488] Allocated by task 5922: [ 1817.324291][T18488] kasan_save_track+0x3e/0x80 [ 1817.329025][T18488] __kasan_kmalloc+0x93/0xb0 [ 1817.333664][T18488] __kmalloc_cache_noprof+0x3d5/0x6f0 [ 1817.339082][T18488] em28xx_v4l2_init+0x10b/0x2e70 [ 1817.344058][T18488] em28xx_init_extension+0x120/0x1c0 [ 1817.349394][T18488] process_scheduled_works+0xae1/0x17b0 [ 1817.354968][T18488] worker_thread+0x8a0/0xda0 [ 1817.359578][T18488] kthread+0x711/0x8a0 [ 1817.363674][T18488] ret_from_fork+0x4bc/0x870 [ 1817.368294][T18488] ret_from_fork_asm+0x1a/0x30 [ 1817.373088][T18488] [ 1817.375432][T18488] Freed by task 5922: [ 1817.379427][T18488] kasan_save_track+0x3e/0x80 [ 1817.384152][T18488] __kasan_save_free_info+0x46/0x50 [ 1817.389383][T18488] __kasan_slab_free+0x5c/0x80 [ 1817.394180][T18488] kfree+0x19a/0x6d0 [ 1817.398108][T18488] em28xx_v4l2_init+0x1683/0x2e70 [ 1817.403171][T18488] em28xx_init_extension+0x120/0x1c0 [ 1817.408572][T18488] process_scheduled_works+0xae1/0x17b0 [ 1817.414146][T18488] worker_thread+0x8a0/0xda0 [ 1817.418771][T18488] kthread+0x711/0x8a0 [ 1817.422874][T18488] ret_from_fork+0x4bc/0x870 [ 1817.427500][T18488] ret_from_fork_asm+0x1a/0x30 [ 1817.432291][T18488] [ 1817.434635][T18488] The buggy address belongs to the object at ffff888035bc4000 [ 1817.434635][T18488] which belongs to the cache kmalloc-8k of size 8192 [ 1817.448716][T18488] The buggy address is located 528 bytes inside of [ 1817.448716][T18488] freed 8192-byte region [ffff888035bc4000, ffff888035bc6000) [ 1817.462810][T18488] [ 1817.465160][T18488] The buggy address belongs to the physical page: [ 1817.471609][T18488] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x35bc0 [ 1817.480397][T18488] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1817.488920][T18488] ksm flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1817.496865][T18488] page_type: f5(slab) [ 1817.500874][T18488] raw: 00fff00000000040 ffff88801a027280 ffffea0001b73e00 dead000000000003 [ 1817.509483][T18488] raw: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000 [ 1817.518170][T18488] head: 00fff00000000040 ffff88801a027280 ffffea0001b73e00 dead000000000003 [ 1817.526871][T18488] head: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000 [ 1817.535596][T18488] head: 00fff00000000003 ffffea0000d6f001 00000000ffffffff 00000000ffffffff [ 1817.544294][T18488] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 1817.552979][T18488] page dumped because: kasan: bad access detected [ 1817.559414][T18488] page_owner tracks the page as allocated [ 1817.565148][T18488] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 25046, tgid 25044 (syz.1.4999), ts 1551657532337, free_ts 1549653812348 [ 1817.586911][T18488] post_alloc_hook+0x240/0x2a0 [ 1817.591744][T18488] get_page_from_freelist+0x2365/0x2440 [ 1817.597341][T18488] __alloc_frozen_pages_noprof+0x181/0x370 [ 1817.603180][T18488] alloc_pages_mpol+0x232/0x4a0 [ 1817.608063][T18488] allocate_slab+0x96/0x350 [ 1817.612613][T18488] ___slab_alloc+0xe94/0x18a0 [ 1817.617323][T18488] __slab_alloc+0x65/0x100 [ 1817.621779][T18488] __kmalloc_cache_noprof+0x411/0x6f0 [ 1817.627195][T18488] audit_log_d_path+0xb8/0x1a0 [ 1817.632020][T18488] audit_log_d_path_exe+0x42/0x70 [ 1817.637083][T18488] audit_log_task+0x2b3/0x3c0 [ 1817.641793][T18488] audit_seccomp+0x86/0x190 [ 1817.646333][T18488] __seccomp_filter+0xce4/0x1e10 [ 1817.651312][T18488] syscall_trace_enter+0xaa/0x160 [ 1817.656379][T18488] do_int80_emulation+0x101/0x390 [ 1817.661465][T18488] asm_int80_emulation+0x1a/0x20 [ 1817.666438][T18488] page last free pid 25030 tgid 25029 stack trace: [ 1817.672962][T18488] __free_frozen_pages+0xbc4/0xd30 [ 1817.678114][T18488] __put_partials+0x146/0x170 [ 1817.682828][T18488] put_cpu_partial+0x1f2/0x2e0 [ 1817.687622][T18488] __slab_free+0x2b9/0x390 [ 1817.692068][T18488] qlist_free_all+0x97/0x140 [ 1817.696703][T18488] kasan_quarantine_reduce+0x148/0x160 [ 1817.702202][T18488] __kasan_slab_alloc+0x22/0x80 [ 1817.707090][T18488] kmem_cache_alloc_node_noprof+0x433/0x710 [ 1817.713019][T18488] __alloc_skb+0x112/0x2d0 [ 1817.717464][T18488] alloc_skb_with_frags+0xca/0x890 [ 1817.722610][T18488] sock_alloc_send_pskb+0x84d/0x980 [ 1817.727837][T18488] unix_dgram_sendmsg+0x461/0x1850 [ 1817.732978][T18488] __sock_sendmsg+0x21c/0x270 [ 1817.737703][T18488] ____sys_sendmsg+0x52d/0x830 [ 1817.742500][T18488] ___sys_sendmsg+0x21f/0x2a0 [ 1817.747223][T18488] __sys_sendmmsg+0x28e/0x430 [ 1817.751936][T18488] [ 1817.754285][T18488] Memory state around the buggy address: [ 1817.759961][T18488] ffff888035bc4100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1817.768070][T18488] ffff888035bc4180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1817.776164][T18488] >ffff888035bc4200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1817.784255][T18488] ^ [ 1817.788873][T18488] ffff888035bc4280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1817.796977][T18488] ffff888035bc4300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1817.805060][T18488] ================================================================== [ 1818.265161][T28551] veth31: entered promiscuous mode [ 1818.295576][T28551] veth31: entered allmulticast mode [ 1818.312235][T28551] bridge33: port 2(veth31) entered blocking state [ 1818.345154][T28551] bridge33: port 2(veth31) entered disabled state [ 1818.378790][T28551] bridge33: port 2(veth31) entered blocking state [ 1818.385420][T28551] bridge33: port 2(veth31) entered forwarding state [ 1818.464863][ T5927] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 1818.471539][T18488] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1818.471570][T18488] CPU: 1 UID: 0 PID: 18488 Comm: kworker/1:11 Not tainted syzkaller #0 PREEMPT(full) [ 1818.471605][T18488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1818.471626][T18488] Workqueue: usb_hub_wq hub_event [ 1818.471661][T18488] Call Trace: [ 1818.471672][T18488] [ 1818.471682][T18488] dump_stack_lvl+0x99/0x250 [ 1818.471724][T18488] ? __asan_memcpy+0x40/0x70 [ 1818.471754][T18488] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1818.471784][T18488] ? __pfx__printk+0x10/0x10 [ 1818.471812][T18488] vpanic+0x237/0x6d0 [ 1818.471863][T18488] ? __pfx_vpanic+0x10/0x10 [ 1818.471896][T18488] ? preempt_schedule+0xae/0xc0 [ 1818.471926][T18488] ? __pfx_preempt_schedule+0x10/0x10 [ 1818.471960][T18488] panic+0xb9/0xc0 [ 1818.471992][T18488] ? __pfx_panic+0x10/0x10 [ 1818.472028][T18488] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 1818.472065][T18488] ? media_device_unregister+0x141/0x400 [ 1818.472102][T18488] check_panic_on_warn+0x89/0xb0 [ 1818.472149][T18488] ? media_device_unregister+0x141/0x400 [ 1818.472192][T18488] end_report+0x78/0x160 [ 1818.472219][T18488] kasan_report+0x129/0x150 [ 1818.472242][T18488] ? media_device_unregister+0x141/0x400 [ 1818.472277][T18488] media_device_unregister+0x141/0x400 [ 1818.472313][T18488] em28xx_release_resources+0xac/0x240 [ 1818.472349][T18488] em28xx_usb_disconnect+0x19f/0x2f0 [ 1818.472383][T18488] usb_unbind_interface+0x26e/0x910 [ 1818.472449][T18488] ? __pfx_usb_unbind_interface+0x10/0x10 [ 1818.472476][T18488] device_release_driver_internal+0x4d9/0x800 [ 1818.472529][T18488] bus_remove_device+0x34d/0x410 [ 1818.472561][T18488] device_del+0x511/0x8e0 [ 1818.472608][T18488] ? __pfx_device_del+0x10/0x10 [ 1818.472646][T18488] ? kobject_put+0x446/0x480 [ 1818.472704][T18488] usb_disable_device+0x3e9/0x8a0 [ 1818.472740][T18488] usb_disconnect+0x330/0x950 [ 1818.472795][T18488] hub_event+0x1cf5/0x4a20 [ 1818.472838][T18488] ? do_raw_spin_lock+0x121/0x290 [ 1818.472885][T18488] ? register_lock_class+0x51/0x320 [ 1818.472927][T18488] ? __pfx_hub_event+0x10/0x10 [ 1818.472954][T18488] ? process_scheduled_works+0x9ef/0x17b0 [ 1818.473003][T18488] ? _raw_spin_unlock_irq+0x23/0x50 [ 1818.473035][T18488] ? process_scheduled_works+0x9ef/0x17b0 [ 1818.473061][T18488] ? process_scheduled_works+0x9ef/0x17b0 [ 1818.473090][T18488] process_scheduled_works+0xae1/0x17b0 [ 1818.473134][T18488] ? __pfx_process_scheduled_works+0x10/0x10 [ 1818.473171][T18488] worker_thread+0x8a0/0xda0 [ 1818.473215][T18488] kthread+0x711/0x8a0 [ 1818.473260][T18488] ? __pfx_worker_thread+0x10/0x10 [ 1818.473295][T18488] ? __pfx_kthread+0x10/0x10 [ 1818.473342][T18488] ? _raw_spin_unlock_irq+0x23/0x50 [ 1818.473378][T18488] ? lockdep_hardirqs_on+0x9c/0x150 [ 1818.473411][T18488] ? __pfx_kthread+0x10/0x10 [ 1818.473445][T18488] ret_from_fork+0x4bc/0x870 [ 1818.473473][T18488] ? __pfx_ret_from_fork+0x10/0x10 [ 1818.473503][T18488] ? __switch_to_asm+0x39/0x70 [ 1818.473524][T18488] ? __switch_to_asm+0x33/0x70 [ 1818.473545][T18488] ? __pfx_kthread+0x10/0x10 [ 1818.473588][T18488] ret_from_fork_asm+0x1a/0x30 [ 1818.473618][T18488] [ 1818.477167][T18488] Kernel Offset: disabled