last executing test programs: 25m22.144794218s ago: executing program 32 (id=5148): move_pages(0x0, 0x20000000000000fe, &(0x7f0000000080)=[&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0) open(&(0x7f0000000080)='./bus\x00', 0x143a42, 0xc0) socket$inet6(0xa, 0x2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r1, 0x4236}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080), 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x106, 0x8}}, 0x20) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 23m48.053568297s ago: executing program 33 (id=5367): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010000104000000000200000000000000", @ANYRES32=0x0, @ANYBLOB="00800000bcb5f31a14000300627269648702d606753d59a05f3000001c001a801800028014000180080012000b00000008001d0002000000"], 0x50}, 0x1, 0x0, 0x0, 0x20044000}, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r4, 0x4048aecb, &(0x7f00000000c0)) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r5, 0x0, 0xd4, &(0x7f0000000300), 0x4) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x200000, 0x0) r7 = syz_io_uring_setup(0x495, &(0x7f0000000400)={0x0, 0x7079, 0x0, 0x1000007, 0x428b, 0x0, r6}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_WRITE={0x17, 0x0, 0x4000, @fd_index, 0x2, &(0x7f0000001480)="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", 0x4e5}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffbfe}, 0x0) r10 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendfile(r11, r10, 0x0, 0x7ffffffd) r12 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_CONTEXT(r12, 0x84, 0x11, 0x0, &(0x7f0000000080)) syz_io_uring_setup(0x694a, &(0x7f0000000000)={0x0, 0x9552, 0x10000, 0x3, 0x3cf, 0x0, r7}, &(0x7f00000000c0), &(0x7f0000000100)) io_uring_enter(r7, 0x3516, 0x0, 0x0, 0x0, 0x0) 20m51.691524586s ago: executing program 34 (id=5887): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000006440), r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000080)={r3}) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs\x00') preadv(r4, &(0x7f0000000380), 0x0, 0xc9, 0x1) syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="120100008ac75220cf106380d2d10102030109022400010000100009048800023e3f5c0009050a02200002000009058202000200000068366f7a31b8acbf6986a0096a85985a7a7c759c0f5fb937ebb92e58e73d7e30b5a3493d2d46df41dd2a8b978d0e44ae94292ec43527b3177c44870cc862c6ac54bbc5a14d477d24db163ac8e6cbe483f24bb07913f870f4a87331efd73d0096349c44095ea6bb16c9"], 0x0) pipe2$watch_queue(0x0, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00'}) set_mempolicy(0x3, &(0x7f0000000000)=0x7, 0x7) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) shutdown(0xffffffffffffffff, 0x1) ioctl$SOUND_MIXER_READ_DEVMASK(r4, 0x80044dfe, &(0x7f0000000140)) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000000)={0x0, 0x0, 0x30, 0x8, 0x6}, &(0x7f0000000200)=0x18) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x89b1, &(0x7f0000000900)={'bond0\x00', @random="060000200005"}) 18m31.928415782s ago: executing program 35 (id=6283): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x5761, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) fcntl$getownex(r0, 0x10, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0}, 0x68) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x8, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='ns\x00') r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4004040}, 0x4000000) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000d00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x58}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f00000000c0)={0x4, &(0x7f0000000000)=[{0x45, 0x0, 0x7, 0xb}, {0x20, 0x0, 0x0, 0x7fff}, {0x0, 0x2}, {0x6}]}) r7 = open_tree(r4, &(0x7f0000000640)='\x00', 0x89901) move_mount(r7, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, 0x0, 0x0) mount$fuseblk(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2025, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}}, @NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x300, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFTA_SET_DESC={0x4}, @NFTA_SET_USERDATA={0x2d, 0xd, 0x1, 0x0, "ce77f905cfac590b3babb5a87051b1219e5317ea2f6d83cdaec74195d0ca766220b96158ce922476db"}]}, @NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}}], {0x14}}, 0x98}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_SNOOPING={0x5}]}}}, @IFLA_MTU={0x8, 0x4, 0x200}]}, 0x44}}, 0x0) syz_io_uring_setup(0x49f, &(0x7f0000000400)={0x0, 0xefa8, 0x10000, 0x7ffe, 0xc0024e}, &(0x7f0000000340), &(0x7f0000000040)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) 14m55.63856166s ago: executing program 36 (id=6816): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x63, &(0x7f0000000000)={'ipvs\x00'}, &(0x7f0000000040)=0x1e) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES32=r0, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES16], 0x5c}, 0x1, 0x0, 0x0, 0x8800}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x36b, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0xffffffff, 0x0, 0xb49, 0x9, 0xd, 0x0, 0x3}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$dsp(0xffffffffffffff9c, 0x0, 0x42, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0x40045010, &(0x7f0000000080)=0xd8eb) setsockopt$netlink_NETLINK_NO_ENOBUFS(r2, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="300000001a0001002dbd7000000000000a"], 0x30}, 0x1, 0x0, 0x0, 0x45}, 0x20044000) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c00000043000701feffff02fcdbdf25037c00000400458004000180"], 0x1c}}, 0x2004c000) socket$inet6(0xa, 0x1, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={0x0, 0x50}}, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) r6 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TCXONC(r6, 0x540a, 0x0) syz_open_dev$dri(0x0, 0x7, 0x220042) syz_open_dev$dri(&(0x7f00000000c0), 0x80000000001fc, 0x121a81) 10m48.457226908s ago: executing program 37 (id=7321): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x5761, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) fcntl$getownex(r0, 0x10, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0}, 0x68) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x8, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='ns\x00') r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4004040}, 0x4000000) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000d00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x58}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f00000000c0)={0x5, &(0x7f0000000000)=[{0x45, 0x0, 0x7, 0xb}, {0x20, 0x0, 0x0, 0x7fff}, {0x0, 0x0, 0x0, 0xa}, {0x0, 0x2}, {0x6}]}) r7 = open_tree(r4, &(0x7f0000000640)='\x00', 0x89901) move_mount(r7, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, 0x0, 0x0) mount$fuseblk(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2025, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}}, @NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x300, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFTA_SET_DESC={0x4}, @NFTA_SET_USERDATA={0x2d, 0xd, 0x1, 0x0, "ce77f905cfac590b3babb5a87051b1219e5317ea2f6d83cdaec74195d0ca766220b96158ce922476db"}]}, @NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}}], {0x14}}, 0x98}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x49f, &(0x7f0000000400)={0x0, 0xefa8, 0x10000, 0x7ffe, 0xc0024e}, &(0x7f0000000340), &(0x7f0000000040)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) 9m47.119602857s ago: executing program 5 (id=7485): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) socket(0xa, 0x5, 0x36) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x0, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r3, 0x3b8b, &(0x7f0000000140)={0x10, 0x2000000}) r4 = syz_open_dev$video(0x0, 0x1d24, 0x23635de98487b93e) r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000003c0), 0x2000, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r5, 0xc004500a, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SPEED(r5, 0xc0045002, &(0x7f00000001c0)) ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, &(0x7f0000000580)=0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f0000001d00)=[{{&(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f00000006c0)=[{0x0}, {&(0x7f00000004c0)="e7432224dd859ec9b7dbd6e3aac445879d4e04c8597d3202736a105f536f9169073c64682f53656b8800f79f40e24da9c7e3e615ed03e0bdbf2695808e6a4c964065d8eae13a2a635f9b7238feaba0e1d15f2b6814d82e56cda484676e2f6922dafe9a8a559f7c7e522a94abc3cdc10910ed3f4f50cf9e6ee6a2aea26606f7d562ad0f881859b35c19f534acb1887db0fb520d4487fff6c2b8ff806f4dc52e1ef509", 0xa2}, {&(0x7f00000002c0)="d238577f92411fbb7e1b375e170c6776baea17aa460c46faff7e7e19852bbb784647f77b5449421bf7043d6fd555de986c9c8b65b14b15277af57e5b3a31055d53432fcff254d9e9b8b3f33c09421efd88b0403d067083e759ce58fc5bb9", 0x5e}, {&(0x7f0000000400)="094c81050000009edaf82d7e5636a7a4650567e7996ce4b30118ddab4eded2bd54260910c18bb73ffae0eea0b412", 0x2e}, {&(0x7f0000000900)="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", 0x1000}, {&(0x7f0000001b00)="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", 0xfb}], 0x6, &(0x7f0000000740)}}, {{&(0x7f0000000780)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000000800)=[{&(0x7f0000001900)="cd33209c198d76b55750f96c7234ca1352b89a33810ab3d974acb17d26ec90308f779428ab91b6176e1be3734b31d482bb4fc05ae61b6c02efa012ff301cf134c9d775a31eaebc8f0a5a2e205e208e334a159766128057986aafbb50901759cf57b668349c7767ae4a7cafeadda948b64a31e79956ed671de88f6f41ef03b3b704aa23f67598461826de50cae22d9e89c6789117cfbebbe3c1f343f1970912295115c25b8781a12ffb8e77da9d3bbe5ddaf06d589fec6ea717d132f7f9cea38c3101acd6114173a5be889d2204af3b4487008c2f1cf0c2e1ab662e39b4e3caa0331bb8ddac94bb2dda49efa5d010d7bcab", 0xf1}], 0x1, &(0x7f0000001dc0)=ANY=[@ANYBLOB="01000000000000000100000001000000264a0bf4448bd08ae6a71fd0cee3eb7f7f111f6600000000000000bf1c33e2dff449bd3a123b9b8780b3cb37971cd0f01a6ee65cdf310ff24983a4e09e512b3c10edc801eef34521e6fcdfcc8d4bc66c0cb6bbdab23252d07a4ad19f7fe3e6fd379f59c75f7d4d642aa3b4e7f661c0b72ab7a4fc7ebfbf2586c61d6763566b7d266435960796c6e8ccb6a3939635dff55447a2afabd010489cf3180d444c7982760432994075", @ANYRES32=r7, @ANYRESHEX=r0, @ANYRES32, @ANYRESDEC=r5], 0x20, 0x4048080}}, {{0x0, 0x0, &(0x7f0000001c00), 0x0, &(0x7f0000001c80)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00010000000200007100"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000100000000000000001000000010000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES16=r4, @ANYBLOB], 0x70, 0x404}}], 0x3, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = syz_io_uring_setup(0x49a, &(0x7f0000000140)={0x0, 0x79b2, 0x3180, 0x1, 0x283}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x48, 0x4007, @fd_index=0x3, 0x22, 0x0, 0x0, 0x6, 0x1}) io_uring_enter(r8, 0x627, 0x4c1, 0x63, 0x0, 0x0) r11 = timerfd_create(0x0, 0x0) syz_io_uring_setup(0x58f9, &(0x7f0000001a00)={0x0, 0x0, 0x10100, 0x0, 0x104a}, &(0x7f0000000180)=0x0, &(0x7f0000000240)=0x0) r14 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r14, 0x0, &(0x7f00000010c0)={0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="00000100000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r14, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r14, 0x0, &(0x7f00000018c0)={0x1c, &(0x7f0000001800)={0x10, 0xb, 0x4a, "8eeb906a016ea85ff6d5d45c8b3e92ae2c3f287ca2df9ec3c655dcf71eff826603921928c255362f6c75398b6968f2ad827591a74d4bb98dbef63a567844642b79cb25f96d1dd40637e0"}, 0x0, 0x0}) syz_io_uring_submit(r12, r13, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r11, 0x0, &(0x7f0000002280)=""/4102, 0x1006, 0x1a}) 9m42.901157073s ago: executing program 5 (id=7491): r0 = socket$inet6(0xa, 0x3, 0x84) socket$can_raw(0x1d, 0x3, 0x1) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@mcast1, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0xb21, 0x4e21, 0x0, 0x2}, {0x7, 0x3, 0x0, 0x2, 0xfe00000000000000, 0x2000000, 0x1}, {0x5, 0x4, 0x5, 0x6082bd63}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in6=@remote, 0x0, 0x2b}, 0xa, @in=@local, 0x3507, 0x4, 0x1, 0x0, 0x4, 0x1, 0x6}}, 0xe8) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="5c000000020605000000000000000000000000000c00078005001500267d00000500010007000000050005000a000000050004"], 0x5c}}, 0x800) socket$nl_generic(0x10, 0x3, 0x10) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20008095) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) readv(r1, &(0x7f0000000240)=[{&(0x7f0000000040)=""/71, 0x47}], 0x1) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = dup(0xffffffffffffffff) write$cgroup_int(r4, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$sndpcmp(&(0x7f0000000300), 0x1, 0x203) syz_open_dev$sndmidi(0x0, 0x2, 0x34d903) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r5, 0x0, 0x0, 0x20004041, 0x0, 0x0) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x0, 0x2, @dev={0xfe, 0x80, '\x00', 0x13}, 0x7}, 0x1c) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000001640), r6) ioctl$int_in(r5, 0x5452, &(0x7f0000000000)=0xf34) recvfrom(r5, &(0x7f0000000200)=""/82, 0x52, 0x0, 0x0, 0xff43) 9m40.204168434s ago: executing program 5 (id=7496): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$igmp6(0xa, 0x3, 0x2) syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) socket$packet(0x11, 0x3, 0x300) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYRESDEC], 0x7c}}, 0x20040004) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_score_adj\x00') writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000280)='2', 0x1}, {&(0x7f0000000080)='-6', 0x3f}], 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r1, 0x0, 0x4000000a, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r3, &(0x7f0000000580)='1\x00', 0x2) socket(0xa, 0x3, 0x3a) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) write$sysctl(r3, &(0x7f00000000c0)='2\x00', 0x2) timer_settime(r2, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) r6 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000380), 0x13f, 0x1}}, 0x20) ppoll(&(0x7f0000000300)=[{r5, 0x4236}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080), 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x13f, 0x3}}, 0x20) 9m35.984263565s ago: executing program 5 (id=7503): syz_usb_connect(0x2, 0x8a3, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2f, 0xbe, 0x36, 0xff, 0xbc3, 0x1, 0xbe4b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x891, 0x3, 0x0, 0x0, 0x40, 0x0, [{{0x9, 0x4, 0xf1, 0x3, 0xd, 0xcc, 0x6b, 0x1f, 0x2, [@uac_as={[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x0, 0x2, 0x2, 0x2, "62f492", "06"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x2, 0x1, 0xc, 0x8, "94c2e1", 'H'}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x0, 0x2, 0x6, 0xf1, "f9ef"}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0xf7, 0x4, 0x2, 0x6}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x9, 0x4, 0x14, 0x9, "a2409c"}]}], [{{0x9, 0x5, 0x1, 0x10, 0x400, 0x7f, 0x0, 0x7f, [@generic={0xa2, 0x21, "8a6f78cf084b611a100f13c741ab5cad126e824ca043d4f1deaf19f0808b35258750d488082ebcb91f230149fa08da849ad6711681bbfff6675f5448adbfabaf08b60eff94a03bf364386871f28ab39d216f91f75a4000682b6322a5ffbe9512b606433ba533856d1002131d63b85bf15954e32adf08de8eca566ea05e6a4dbccf67d4931d4b395a0ff42a1660131d679a9b16573d3c266e29d92ab877a59ef1"}]}}, {{0x9, 0x5, 0x8, 0x12, 0x3ff, 0x0, 0x6}}, {{0x9, 0x5, 0x3, 0x3, 0x3ff, 0x8, 0x1, 0x81, [@generic={0xa8, 0xf, "52cee30f1474e1edc45b19ea13d610b6883a32e064a4dbe2229f6c4c52f26a849d59fd63fa6d39a808b6f8ea2cdaf3747e020bb44a0887d6b8f6c269987643b6b49c22586dc094953ffd7887a2c6f9ca9bb4fd24761f03d68b0da53d749925670f9b8ac7195d01b0bcdbe6031fc809fc51704a884194b32e7c3bfddb7855475d5ddca116a525978ecfca19f40089a855ef047731417aabad5bf7bc6dfd4bf1c29118f9913754"}]}}, {{0x9, 0x5, 0x6, 0x8, 0x400, 0xf9, 0x6, 0x10, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x9, 0x8}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xd8, 0x7}]}}, {{0x9, 0x5, 0xd, 0x0, 0x200, 0x1, 0x7f, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0xff, 0x5}]}}, {{0x9, 0x5, 0x7, 0x0, 0x400, 0xc, 0x2, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x41, 0x3}]}}, {{0x9, 0x5, 0x4, 0x10, 0x200, 0x5, 0x1, 0x8, [@generic={0x6c, 0x23, "44a4707298971247b38b5a98545bf5dad9e80f49fba2e8a032cd80c5bf16171a05efa145d412b084acbe965542c3a6b6357b56446e62727e910f60f18b9c4b2552cb8157e83c594a075f9967dc12f9751b203e7c5879da72e31727340500131033eda7a7faaeff6e9dcd"}]}}, {{0x9, 0x5, 0x80, 0x1, 0x10, 0x5, 0x8, 0x9}}, {{0x9, 0x5, 0xc, 0x0, 0x3ff, 0x8, 0xe9, 0x9}}, {{0x9, 0x5, 0xd, 0x0, 0x400, 0x5, 0x7, 0x81, [@generic={0x8, 0x22, "887a59e4a6bf"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x2, 0xa}]}}, {{0x9, 0x5, 0x7, 0x1, 0x200, 0xf7, 0x8, 0xd, [@generic={0xe2, 0x3, "14938d92683e9fad6581d035b558194fb45c73f0f069d6710e085828bef33c59260b55eb4961e58ec99490a02d1b0b8f3473f69993c4b5d7b613f9bc4ccb94d0dd2a28ed304f509d04e5cf0faa349b4437da5763f89b867fd0f4a6295d0499c706e10affa7cf86ce6697ec886fa5dc070756335fc1a9a2a2c45c81483e02e5bb5cb2fa5999a09600508e0df5dfdaf8521544bfc3112c528bb1447bae5c24827dd20d9d92d7bf86c19361a4fe8b394fa6e4855140d030fc0bc1a403edd329150ad16217a4e3e439d3a446962fea0ab2da2b0defdb0307372efcf6b32939f92b77"}, @generic={0xb1, 0x0, "2260de500d29ec05cabe0dbaf3952785d04f8ddea2a168a4169a8d2486d3e8a32c3827c4267f4b4c63ea0d7eab045639e9138ce85612f69a6050d95a6185982c2511bb04a7644b4403aa9dca7cc883e1732d4155ef28f58911e5681d82409435ac56098493be7b63e2aed5cdcc6dc14300d449c27c24516edb527ab3319bd25a0d0511df5498b5fa4fbf19d16262e8e329d1d6c5305465819e52222894b0b83b831486db84b54e3f16f5ee495aa254"}]}}, {{0x9, 0x5, 0xb, 0x10, 0x200, 0xf0, 0xf9, 0x1}}, {{0x9, 0x5, 0xa, 0x0, 0x8, 0x40, 0x7, 0xf8, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x8, 0x2}, @generic={0x70, 0x11, "5223548bb8ab81f5224b6da84fba3d124cc29bb6c5d13fea4a5916591399a30718fe56481dc799b0fb9b8dd192ceba4bd0cf3099a207f3af545901c4063c4b69f4b3a917d2c910cc9bc72e90f78881aa2b52481f9efc81ab9e09cd458c311994c0d419d0b8f741625f34ac60f066"}]}}]}}, {{0x9, 0x4, 0x7f, 0x2, 0x3, 0x39, 0x5f, 0xb2, 0x0, [@uac_as={[@format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x5, 0x2, 0x5, 0x40, "", "277f"}, @format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x5, 0x5b4, 0x1, "7f"}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x5, 0x1, 0x10, 0x4b, 'k'}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x4, 0x25d, 0x2, "895fcc23fe95cb23"}]}, @cdc_ncm={{0x9, 0x24, 0x6, 0x0, 0x1, "70baffc0"}, {0x5, 0x24, 0x0, 0x3ff}, {0xd, 0x24, 0xf, 0x1, 0xfffffff9, 0xf, 0x6, 0x2}, {0x6, 0x24, 0x1a, 0x3, 0x20}, [@obex={0x5, 0x24, 0x15, 0x7f}, @call_mgmt={0x5, 0x24, 0x1, 0x0, 0x6}, @acm={0x4, 0x24, 0x2, 0x4}]}], [{{0x9, 0x5, 0x9, 0x10, 0x40, 0x4, 0x7, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x22, 0xfff8}]}}, {{0x9, 0x5, 0x4, 0x10, 0x3ff, 0xfb, 0x84, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0xc0, 0x68, 0x81}]}}, {{0x9, 0x5, 0x9, 0x0, 0x20, 0x5, 0x80, 0x7}}]}}, {{0x9, 0x4, 0xaa, 0x4, 0xe, 0xff, 0xff, 0xff, 0x7, [@cdc_ecm={{0x8, 0x24, 0x6, 0x0, 0x0, "fc9900"}, {0x5, 0x24, 0x0, 0x8001}, {0xd, 0x24, 0xf, 0x1, 0xfffffffb, 0x2, 0xfe7c}, [@acm={0x4, 0x24, 0x2, 0x6}, @acm={0x4, 0x24, 0x2, 0x2}]}], [{{0x9, 0x5, 0xf, 0x1, 0x3ff, 0x10, 0x7, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x7, 0x8}]}}, {{0x9, 0x5, 0x1, 0x2, 0x8, 0x7b, 0x8, 0xd, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x0, 0x760}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x4b, 0x1}]}}, {{0x9, 0x5, 0x7, 0x10, 0x40, 0x3, 0x7, 0xc, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x6, 0x3}, @uac_iso={0x7, 0x25, 0x1, 0xc0, 0x8, 0xff7f}]}}, {{0x9, 0x5, 0x4, 0x0, 0x40, 0x1, 0x0, 0x7}}, {{0x9, 0x5, 0x5, 0x0, 0x400, 0x90, 0xff, 0x5, [@generic={0xe5, 0x21, "23c43530eb2c7041b3af75946d2b9f3d56390085ad0ac82952c05fa48f3655d6350fda0f810ebed88a9d0e4f290c98cb391ead195e97d3d1980b526450a5999de50d77725cf1104773788719de036f2bb8868f2a9d3d2845b99860cd6cabbd8096253af45d84f520ea4009dcb21f9f5b65b20927a1a9079e3636b29edea416fe201b9e471fc48ab2d39eb3d1bfb0d78dc7cd3ca67b764e65eca32c1f8fe6e5935f12984dd6c7ef00fa12e9ed4b05e5684eaa28dc8373a8f9af5aab4b2bc907f844c6f0a34a778f43d930fbc069377e3de43d80aceb68ed376dea95e3e4fec906837d7e"}]}}, {{0x9, 0x5, 0x7, 0x8, 0x40, 0x2, 0x7, 0x0, [@generic={0x39, 0x30, "bfa265b332445aecf685f64a52be2e7727e7c671cd84eab16dda860d9133beab56a58075a86dc18ac7461251fccbb7ad64c411c9f2b69a"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x2, 0x9}]}}, {{0x9, 0x5, 0xb, 0x10, 0x3ff, 0x8, 0x80, 0x5, [@generic={0x8b, 0x24, "202891f87a55becf96728f01291f515a1ef074a9a9366cb8f3ec545ca6ad99c89e3adf365b28b88939c05092c1488c0aec86a3378cff9724cfc83426a2c137597c7cf9789618052219f2a2bcad408860a19453c0a970b356904f7ab8f1333312b274b575adf138981051c0a825e98afcd74eaee63ac2ffda3321958c7fba040f4a0b9818a65da23da7"}]}}, {{0x9, 0x5, 0x6, 0x0, 0x8, 0x7, 0x6, 0x9, [@generic={0x2d, 0x5, "beb23e58555d2fdff117f32a4348a45f8e2cfd04c4f7d3d5d4d151725df85ae6e8c61789613e3e5a2953c0"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0xb, 0x2}]}}, {{0x9, 0x5, 0x8c, 0x10, 0x10, 0xff, 0x5, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x5, 0x5}, @generic={0x15, 0x6, "057d17cf88110030a82dcf1705c931c20d7365"}]}}, {{0x9, 0x5, 0x2, 0x3, 0x20, 0x5, 0x5, 0x0, [@generic={0x3c, 0x2, "e5f443e2c9ae58efe007d2c0961bc1eb2dd059823c8daeb800a20432b43200b85857e30f7e1b1b6e9d6f72b34d0beae821ff2340cc0f8c81b28f"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0xcf, 0x4}]}}, {{0x9, 0x5, 0x0, 0x10, 0x40, 0xe, 0x40}}, {{0x9, 0x5, 0x5, 0x10, 0x10, 0xfa, 0x1, 0x87, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x227}, @generic={0x45, 0x22, "10c181ddc366ad8da211e407c2f3b91830a538e3873f5ae9647af8c1f8f172bc9133affe7440295e138203b17a21035aaa5ce43f4b7723d2b0f5f058fcce8510134e01"}]}}, {{0x9, 0x5, 0x7, 0x1, 0x400, 0x6, 0xaf, 0x6d}}, {{0x9, 0x5, 0xa, 0x1, 0x7f7, 0xcc, 0xe7, 0x3}}]}}]}}]}}, 0x0) r0 = timerfd_create(0x0, 0x80800) ioctl$TFD_IOC_SET_TICKS(r0, 0x40085400, &(0x7f0000000040)=0x4) readv(r0, &(0x7f0000000140)=[{0x0}, {&(0x7f00000006c0)=""/199, 0xc7}], 0x2) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x8000000000000035, 0x0, 0x10000000215b9037, 0x40180, 0x1, 0x11, 0x8000000000f2, 0x0, 0x7, 0x5, 0x5, 0xc6bd, 0x566, 0x45, 0x80000000005, 0x7], 0x6006, 0x1c0293}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f00000001c0)={0x64, 0x0, [{0x295, 0x0, 0x100000002}]}) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000040)={0x2, 0xa000, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) setsockopt$inet_int(r4, 0x0, 0xf, &(0x7f00000009c0)=0x1238, 0x4) syz_usb_connect$cdc_ncm(0x6, 0x1c2, &(0x7f00000008c0)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b0, 0x2, 0x1, 0x0, 0x10, 0x80, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "201b53ea"}, {0x5, 0x24, 0x0, 0x127}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x4, 0xa, 0xfc}, {0x6, 0x24, 0x1a, 0xc3c, 0x16}, [@dmm={0x7, 0x24, 0x14, 0x1, 0x7}, @obex={0x5, 0x24, 0x15, 0xfff3}, @mdlm={0x15, 0x24, 0x12, 0x809}, @mdlm_detail={0x9f, 0x24, 0x13, 0x40, "4cdb3463786d30e35f250d06b5aaf517e8795135c57b403ced3ffb8f700e1640eb37d2951475856466651b77ba58d231a573544c7c9732c3f841be75b4ffdb99230271b7928cf5fecd42dd9f512a67d0bfabe805d2b40a6b7b2cceeb70e79a2499c638e3f8ebd53dfc7ef5ffc3b33d7f95bca09df3d589893a693d64c613c048b611a91fbb95b571e78a5f2340ee4e9ae64145a185aa353523f5ce"}, @mdlm_detail={0x90, 0x24, 0x13, 0xff, "2dfbfb8ccddf6ed67c8b24a99c492483812b128d0f7ceafc7f80339bc463120f1142f3d8b7febfeee794910e574bd5a2089a70a365247911ab7a07f523e72eef0d335156300edd03e587fa147b3289227592cb828545ee6e4eae81125b92991d1cdffdb978a9d9b35dc3d0acb87e010018ab72865e2cdc47bfecd40a4a649633b7a47a66384a1215cb457c22"}]}, {{0x9, 0x5, 0x81, 0x3, 0x8, 0x1, 0x5f, 0x79}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0x2, 0xa, 0xc8}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x0, 0xff, 0x4c}}}}}}}]}}, &(0x7f0000000c80)={0xa, &(0x7f0000000ac0)={0xa, 0x6, 0x250, 0x5, 0x0, 0xe1, 0x40, 0x32}, 0x51, &(0x7f0000000b00)={0x5, 0xf, 0x51, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x0, 0x5, 0x6}, @ssp_cap={0x18, 0x10, 0xa, 0x1, 0x3, 0xa319, 0x780, 0x7, [0xc030, 0xffc03f, 0x3f00]}, @wireless={0xb, 0x10, 0x1, 0x2, 0x2, 0x3, 0x1, 0x5, 0x2}, @wireless={0xb, 0x10, 0x1, 0x8, 0x0, 0x8, 0xb7, 0x0, 0xa4}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "62eff13c5226cc48486b8d6a2e00"}]}, 0x2, [{0x35, &(0x7f0000000b80)=@string={0x35, 0x3, "6d34dc2ff8fdcb0375809e3e1b322c4b20ec6ba10c0392e3855a5b0426ee237753f6177f7c583bc00f03e8a1dfde86913fd60d"}}, {0xa8, &(0x7f0000000bc0)=@string={0xa8, 0x3, "e3218c823d8b54eb0a53b14df24ba1728732acd2198ed00a4228dc98d6a29a2b557d6fa1b6ceb851ecd067d71772a2769de67758176f5f9a70c7adf3b6c6133426956948cc156c04fb897bc4aabe4a439439e437ecfcb1b2f5a0798574539fd8e35c361c75748689a437f04d93bac7d7764e557a77db869b4b7ae7f67e96445c3e085f0b2b75a2e1b640a592f45e4d9af830d331975e09fdbacf5624bfe3b586688f3c63f26c"}}]}) 9m32.728514252s ago: executing program 5 (id=7510): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9a, 0x0, 0x0, 0x0, 0x12345}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) socketpair$unix(0x1, 0x3, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44100010203010902bf0002010650000900000000020d001b052401082400a9b30d2d0f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c090003042402020424"], 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 9m31.077310828s ago: executing program 5 (id=7512): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/warn_count', 0xa8002, 0x82) r1 = getpid() r2 = syz_open_procfs(r1, &(0x7f0000000180)='net\x00') socket$nl_netfilter(0x10, 0x3, 0xc) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000140)={'syztnl0\x00', 0x0, 0x2f, 0x0, 0xf9, 0x1, 0x0, @loopback, @private2, 0x8, 0x40, 0x1, 0x3}}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000140)=@ethtool_sset_info={0x37, 0x9, 0x10000}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000002e00010026bdf000fcdbdf1b040000000400"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={0x0, 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), 0xffffffffffffffff) syz_open_dev$media(&(0x7f0000000040), 0x5, 0x141800) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="2c0000003f00070100000000fddbdf25027c80001800378013000300717472283414d6bba919736d34290000"], 0x2c}, 0x1, 0x0, 0x0, 0xc880}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r8 = socket$kcm(0x2, 0x5, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) syz_usb_connect$cdc_ecm(0x1, 0x69, &(0x7f0000000500)=ANY=[@ANYBLOB="12010003020000082505a1a440000102030109025700010102f404090400074202060006052406000005240001800d240b0109000000090005008107241305d361ac152412"], &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) write$tun(r7, &(0x7f0000000240)=ANY=[@ANYBLOB="3a2f080000030300010000000000450a00280068000005069078ac1e0301ffffffff4e204e21", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="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"], 0xfce) fchdir(r2) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x0) 9m19.740878946s ago: executing program 38 (id=7507): socket$unix(0x1, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x118d7, 0x0, 0x0, &(0x7f00000002c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x5, 0x0, 0xb49, 0x9, 0xdbc8, 0x2, 0x3}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000680)={0xa, 0x4e24, 0xfffffffe, @mcast2, 0x20002}, 0x1c) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x14e22, 0xfffffff8, @ipv4}, 0x1c) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x4040) setsockopt$inet_udp_int(r2, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4) sendmmsg$inet(r2, &(0x7f0000000600)=[{{&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x2000c844) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) sendto$inet(r2, &(0x7f00000000c0)="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", 0x467, 0x6000000000000000, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x22) unshare(0x62040200) syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902"], 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, 0x0, 0x4040010) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) 9m15.652069056s ago: executing program 39 (id=7512): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/warn_count', 0xa8002, 0x82) r1 = getpid() r2 = syz_open_procfs(r1, &(0x7f0000000180)='net\x00') socket$nl_netfilter(0x10, 0x3, 0xc) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000140)={'syztnl0\x00', 0x0, 0x2f, 0x0, 0xf9, 0x1, 0x0, @loopback, @private2, 0x8, 0x40, 0x1, 0x3}}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000140)=@ethtool_sset_info={0x37, 0x9, 0x10000}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000002e00010026bdf000fcdbdf1b040000000400"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={0x0, 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), 0xffffffffffffffff) syz_open_dev$media(&(0x7f0000000040), 0x5, 0x141800) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="2c0000003f00070100000000fddbdf25027c80001800378013000300717472283414d6bba919736d34290000"], 0x2c}, 0x1, 0x0, 0x0, 0xc880}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r8 = socket$kcm(0x2, 0x5, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) syz_usb_connect$cdc_ecm(0x1, 0x69, &(0x7f0000000500)=ANY=[@ANYBLOB="12010003020000082505a1a440000102030109025700010102f404090400074202060006052406000005240001800d240b0109000000090005008107241305d361ac152412"], &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) write$tun(r7, &(0x7f0000000240)=ANY=[@ANYBLOB="3a2f080000030300010000000000450a00280068000005069078ac1e0301ffffffff4e204e21", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="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"], 0xfce) fchdir(r2) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x0) 6m16.72152014s ago: executing program 2 (id=8136): r0 = socket(0x22, 0x3, 0x2) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0xc3d4, @remote, 0x7}, 0x1c) sendmsg$unix(r0, &(0x7f0000001680)={&(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x40051}, 0x2) 6m16.424212169s ago: executing program 2 (id=8137): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x810, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0xd231c4f959ad4808) ioctl$SG_GET_COMMAND_Q(0xffffffffffffffff, 0x2270, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) socket$inet6_sctp(0xa, 0x1, 0x84) mlock2(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'wp512\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x80000) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) sendmmsg$unix(r3, &(0x7f0000003dc0)=[{{&(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x0) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)="d8000000240081064e810ba1f1ffffff0200142603600e120800080024000000a80009001100014003000015036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a94c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fa215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbddd4f644ec7032de8dee5de6ccd40dd6e4edef3d93452a92954b43370e970179b1b36165fb55c82148d29e00000000", 0xcb}], 0x1}, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000100)={0xa, 0x0, @local}, 0x10) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) 6m14.560503664s ago: executing program 2 (id=8144): r0 = syz_io_uring_setup(0xe42, &(0x7f00000005c0)={0x0, 0x2119, 0x100, 0x0, 0x1f5}, &(0x7f0000000140)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000040)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f00000004c0)={0x80000, 0x0, 0x32}, 0x0, 0x18}) io_uring_enter(r0, 0x6f58, 0x0, 0x0, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x10007f, 0x20000006, 0x4d, 0x6, 0x3, 0x9, 0x2, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x8000806e, 0x7, 0x17, 0x1, 0x7, 0x200, 0x3e, 0x8e, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x1, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x8, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x1, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8020, 0x1, 0xfe000000, 0xffff, 0x7, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x43, 0x103], [0x7, 0xa, 0x4, 0x5, 0x4, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xf, 0x4, 0x6, 0x5, 0x0, 0x6, 0x5, 0x1, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x6, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x0, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x80000000, 0xb, 0x5, 0x93a, 0x6, 0x1000006, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0x10000, 0x7f, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x96, 0xffffffff, 0x80000000, 0x0, 0x5, 0xc8, 0x1, 0xfffff000, 0x10080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x2005, 0x5, 0x1, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) 6m14.308989621s ago: executing program 2 (id=8146): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x2c, r2, 0x5, 0x4000, 0x3, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @crypto_settings=[@NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x4}]]}, 0x2c}}, 0x0) (fail_nth: 10) 6m13.612199811s ago: executing program 2 (id=8147): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) syz_io_uring_setup(0x118d9, &(0x7f0000000040)={0x0, 0x4345, 0x2, 0x0, 0x25a}, 0x0, &(0x7f00000002c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x20000000) r2 = socket(0x840000000002, 0x3, 0xfa) getsockname$inet(r2, 0x0, &(0x7f0000002280)) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000200)={0xfffffffe, 0x3, 0x4}) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[], 0x50) unshare(0x62040200) syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902"], 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="5400000010001ffffcffff000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000100000000002c0012800b00010067726574617000001c00028006000e000200000006000f000700000008000700ac14142808000a00", @ANYRES32=r7, @ANYBLOB], 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r6, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x36, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="46060900000000001c00128009000100766c616e000000000c000280060001000100000008000500", @ANYRES32=r9, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r9, @ANYBLOB="9ac1bb9db33607f58f1a8d7204be1ead184f1f5b7404000000000000009e66a632db11e6c79ffba6ada1148d1361957b8d78fc05eecb40637cc92c8b78a6fe6143f9dc0454ef66b8b8209bbc4e4106c5c18a535756646d57900ae5e4ecc0c0e3d83cc41e2a2e144fd4e1430c32498bdf0b18c8778de430d8c3c61aa690c5b274464a5bbbf644f370942bcef98b3962278109c1d24c18fe04d01a0c6005b13385d4c9192c48695dccc34f2c7b8f574fa8d17ba46f134e18bddfaf468b08b92e3b65d4d57532a728af650f812680fa50121c703b81fd189bf86967322cefe3087006606a51034da3be0fb25daee8a9275121e1a511ec"], 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000040)={0x28, 0x7, 0x0, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) 6m8.345517634s ago: executing program 2 (id=8159): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r3, 0x400, 0x1) r4 = add_key$keyring(0x0, &(0x7f0000001100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0xe501, 0x3, 0x208, 0xb8, 0xa, 0x1000000, 0x0, 0x0, 0x170, 0x230, 0x230, 0x170, 0x223, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x3b9, 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x3c0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000300)="300e308002", 0x1001, r4) close(r3) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r5 = socket(0x10, 0x2, 0x0) write(r5, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r5, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) r6 = syz_usb_connect(0x0, 0x5f, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYRES32=0x1, @ANYRES8=r6, @ANYRES32=0x0, @ANYRESOCT=r4, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB, @ANYRES32=0x0, @ANYRESDEC, @ANYBLOB='\x00'/28], 0x48) preadv2(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4080, 0xff0}], 0x1, 0x0, 0x0, 0x0) dup(r5) r7 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) ioctl$SG_IO(r8, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffc, 0x5, 0x0, @buffer={0x2, 0x0, 0x0}, &(0x7f0000000380)="259374c96e", 0x0, 0x6, 0x0, 0x0, 0x0}) r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r10 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r10, 0x4c0a, &(0x7f0000001ac0)={r9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1c, "ff9f020bbe82b398b1c4369d03740250ceaac594b1b3d741dd17c1ac0d38ef2a565ef1e8336300", "a9103939c787a16c1ca43f80026d1f3c4da06963dd89d130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b7e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0xfffffffffffffffe]}}) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000980)=@migrate={0x2ec, 0x21, 0x2, 0x70bd27, 0x25dfdbfe, {{@in6=@private0, @in=@private=0xa010101, 0x4e21, 0x4, 0x4e21, 0x0, 0x2, 0x80, 0x80, 0x4}, 0x6e6bb4, 0x1}, [@migrate={0x1cc, 0x11, [{@in=@broadcast, @in6=@private1, @in6=@private2, @in6=@private0, 0x3c, 0x3, 0x0, 0x3506, 0x2, 0xa}, {@in6=@mcast1, @in6=@private1, @in6=@loopback, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x6c, 0x3, 0x0, 0x3500, 0x2, 0x2}, {@in=@multicast2, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@broadcast, 0x32, 0x0, 0x0, 0x0, 0xa, 0xa}, {@in6=@mcast2, @in=@private=0x6, @in6=@mcast1, @in=@remote, 0x0, 0x0, 0x0, 0x34ff, 0xa, 0x2}, {@in6=@dev={0xfe, 0x80, '\x00', 0x13}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@mcast1, @in6=@empty, 0x3c, 0x3, 0x0, 0x3506, 0xa, 0x2}, {@in6=@private1, @in6=@remote, @in=@local, @in6=@empty, 0x6c, 0x1, 0x0, 0x3502, 0xa, 0xa}]}, @tmpl={0x44, 0x5, [{{@in=@rand_addr=0x64010101, 0x4d4, 0x33}, 0x2, @in6=@remote, 0x3506, 0x1, 0x2, 0x7, 0x10000, 0x7, 0xe}]}, @sec_ctx={0x75, 0x8, {0x71, 0x8, 0x1, 0x10, 0x69, "a47619c91bae120bcc7c51771b1cf82be7f4d215e898b00b8dc5340cf851b4b33547548283c63612bad9ef16fbd5d7a0995f1901f991e388b2cae97dcbd7544841136b44d00f7d890339f12a9e098c3c70ff33dc2ed4992b776f723eb4a9df6de2cc9214407410ce0f"}}, @srcaddr={0x14, 0xd, @in=@remote}]}, 0x2ec}}, 0x804) 6m1.244832098s ago: executing program 3 (id=8179): r0 = dup(0xffffffffffffffff) setsockopt$MRT_DEL_MFC(r0, 0x0, 0xcd, &(0x7f0000000080)={@initdev={0xac, 0x1e, 0x1, 0x0}, @remote, 0x0, "dd2c3ce74d803f597f85fe1ad36b230a475916f2ee94bcecdb984399f2ecf287", 0x9, 0x2, 0x9}, 0x3c) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, &(0x7f00000001c0)}) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x2) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) open_tree(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x206, 0x2b4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000498000/0x1000)=nil, 0x1000, 0xc) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000002, 0x31, 0xffffffffffffffff, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) dup(r3) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000440)={0x28, 0x0, 0x2710, @host}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r5, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r6) listen(r4, 0x0) r7 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r7, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) accept4(r4, 0x0, 0x0, 0x0) 5m58.114956121s ago: executing program 3 (id=8184): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/warn_count', 0xa8002, 0x82) r1 = getpid() r2 = syz_open_procfs(r1, &(0x7f0000000180)='net\x00') socket$nl_netfilter(0x10, 0x3, 0xc) socket(0xa, 0x3, 0x3a) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000140)={'syztnl0\x00', 0x0, 0x2f, 0x0, 0xf9, 0x1, 0x0, @loopback, @private2, 0x8, 0x40, 0x1, 0x3}}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000140)=@ethtool_sset_info={0x37, 0x9, 0x10000}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000002e00010026bdf000fcdbdf1b040000000400"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={0x0, 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), 0xffffffffffffffff) syz_open_dev$media(&(0x7f0000000040), 0x5, 0x141800) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="2c0000003f00070100000000fddbdf25027c80001800378013000300717472283414d6bba919736d34290000"], 0x2c}, 0x1, 0x0, 0x0, 0xc880}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r7 = socket$kcm(0x2, 0x5, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) syz_usb_connect$cdc_ecm(0x1, 0x69, &(0x7f0000000500)=ANY=[@ANYBLOB="12010003020000082505a1a440000102030109025700010102f404090400074202060006052406000005240001800d240b0109000000090005008107241305d361ac152412"], &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) write$tun(r6, &(0x7f0000000240)=ANY=[@ANYBLOB="3a2f080000030300010000000000450a00280068000005069078ac1e0301ffffffff4e204e21", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="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"], 0xfce) fchdir(r2) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x0) 5m55.298724552s ago: executing program 3 (id=8189): socket$netlink(0x10, 0x3, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r1, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r1, 0x0, 0xffffffdb) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x40002, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) 5m54.590610766s ago: executing program 3 (id=8192): connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg$unix(r1, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) 5m54.054522919s ago: executing program 3 (id=8193): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) socket(0xa, 0x5, 0x36) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x0, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r3, 0x3b8b, &(0x7f0000000140)={0x10, 0x2000000}) r4 = syz_open_dev$video(0x0, 0x1d24, 0x23635de98487b93e) r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000003c0), 0x2000, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r5, 0xc004500a, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SPEED(r5, 0xc0045002, &(0x7f00000001c0)) ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, &(0x7f0000000580)=0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f0000001d00)=[{{&(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f00000006c0)=[{0x0}, {&(0x7f00000004c0)="e7432224dd859ec9b7dbd6e3aac445879d4e04c8597d3202736a105f536f9169073c64682f53656b8800f79f40e24da9c7e3e615ed03e0bdbf2695808e6a4c964065d8eae13a2a635f9b7238feaba0e1d15f2b6814d82e56cda484676e2f6922dafe9a8a559f7c7e522a94abc3cdc10910ed3f4f50cf9e6ee6a2aea26606f7d562ad0f881859b35c19f534acb1887db0fb520d4487fff6c2b8ff806f4dc52e1ef509", 0xa2}, {&(0x7f00000002c0)="d238577f92411fbb7e1b375e170c6776baea17aa460c46faff7e7e19852bbb784647f77b5449421bf7043d6fd555de986c9c8b65b14b15277af57e5b3a31055d53432fcff254d9e9b8b3f33c09421efd88b0403d067083e759ce58fc5bb9", 0x5e}, {&(0x7f0000000400)="094c81050000009edaf82d7e5636a7a4650567e7996ce4b30118ddab4eded2bd54260910c18bb73ffae0eea0b412", 0x2e}, {&(0x7f0000000900)="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", 0x1000}, {&(0x7f0000001b00)="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", 0xfb}], 0x6, &(0x7f0000000740)}}, {{&(0x7f0000000780)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000000800)=[{&(0x7f0000001900)="cd33209c198d76b55750f96c7234ca1352b89a33810ab3d974acb17d26ec90308f779428ab91b6176e1be3734b31d482bb4fc05ae61b6c02efa012ff301cf134c9d775a31eaebc8f0a5a2e205e208e334a159766128057986aafbb50901759cf57b668349c7767ae4a7cafeadda948b64a31e79956ed671de88f6f41ef03b3b704aa23f67598461826de50cae22d9e89c6789117cfbebbe3c1f343f1970912295115c25b8781a12ffb8e77da9d3bbe5ddaf06d589fec6ea717d132f7f9cea38c3101acd6114173a5be889d2204af3b4487008c2f1cf0c2e1ab662e39b4e3caa0331bb8ddac94bb2dda49efa5d010d7bcab", 0xf1}], 0x1, &(0x7f0000001dc0)=ANY=[@ANYBLOB="01000000000000000100000001000000264a0bf4448bd08ae6a71fd0cee3eb7f7f111f6600000000000000bf1c33e2dff449bd3a123b9b8780b3cb37971cd0f01a6ee65cdf310ff24983a4e09e512b3c10edc801eef34521e6fcdfcc8d4bc66c0cb6bbdab23252d07a4ad19f7fe3e6fd379f59c75f7d4d642aa3b4e7f661c0b72ab7a4fc7ebfbf2586c61d6763566b7d266435960796c6e8ccb6a3939635dff55447a2afabd010489cf3180d444c7982760432994075", @ANYRES32=r7, @ANYRESHEX=r0, @ANYRES32, @ANYRESDEC=r5], 0x20, 0x4048080}}, {{0x0, 0x0, &(0x7f0000001c00), 0x0, &(0x7f0000001c80)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00010000000200007100"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000100000000000000001000000010000001c000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES16=r4, @ANYBLOB='\x00\x00\x00\x00'], 0x70, 0x404}}], 0x3, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = syz_io_uring_setup(0x49a, &(0x7f0000000140)={0x0, 0x79b2, 0x3180, 0x1, 0x283}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x48, 0x4007, @fd_index=0x3, 0x22, 0x0, 0x0, 0x6, 0x1}) io_uring_enter(r8, 0x627, 0x4c1, 0x63, 0x0, 0x0) r11 = timerfd_create(0x0, 0x0) syz_io_uring_setup(0x58f9, &(0x7f0000001a00)={0x0, 0x0, 0x10100, 0x0, 0x104a}, &(0x7f0000000180)=0x0, &(0x7f0000000240)=0x0) r14 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r14, 0x0, &(0x7f00000010c0)={0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="00000100000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r14, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r14, 0x0, &(0x7f00000018c0)={0x1c, &(0x7f0000001800)={0x10, 0xb, 0x4a, "8eeb906a016ea85ff6d5d45c8b3e92ae2c3f287ca2df9ec3c655dcf71eff826603921928c255362f6c75398b6968f2ad827591a74d4bb98dbef63a567844642b79cb25f96d1dd40637e0"}, 0x0, 0x0}) syz_io_uring_submit(r12, r13, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r11, 0x0, &(0x7f0000002280)=""/4102, 0x1006, 0x1a}) 5m52.784655479s ago: executing program 40 (id=8159): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r3, 0x400, 0x1) r4 = add_key$keyring(0x0, &(0x7f0000001100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0xe501, 0x3, 0x208, 0xb8, 0xa, 0x1000000, 0x0, 0x0, 0x170, 0x230, 0x230, 0x170, 0x223, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x3b9, 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x3c0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000300)="300e308002", 0x1001, r4) close(r3) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r5 = socket(0x10, 0x2, 0x0) write(r5, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r5, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) r6 = syz_usb_connect(0x0, 0x5f, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYRES32=0x1, @ANYRES8=r6, @ANYRES32=0x0, @ANYRESOCT=r4, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB, @ANYRES32=0x0, @ANYRESDEC, @ANYBLOB='\x00'/28], 0x48) preadv2(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4080, 0xff0}], 0x1, 0x0, 0x0, 0x0) dup(r5) r7 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) ioctl$SG_IO(r8, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffc, 0x5, 0x0, @buffer={0x2, 0x0, 0x0}, &(0x7f0000000380)="259374c96e", 0x0, 0x6, 0x0, 0x0, 0x0}) r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r10 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r10, 0x4c0a, &(0x7f0000001ac0)={r9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1c, "ff9f020bbe82b398b1c4369d03740250ceaac594b1b3d741dd17c1ac0d38ef2a565ef1e8336300", "a9103939c787a16c1ca43f80026d1f3c4da06963dd89d130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b7e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0xfffffffffffffffe]}}) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000980)=@migrate={0x2ec, 0x21, 0x2, 0x70bd27, 0x25dfdbfe, {{@in6=@private0, @in=@private=0xa010101, 0x4e21, 0x4, 0x4e21, 0x0, 0x2, 0x80, 0x80, 0x4}, 0x6e6bb4, 0x1}, [@migrate={0x1cc, 0x11, [{@in=@broadcast, @in6=@private1, @in6=@private2, @in6=@private0, 0x3c, 0x3, 0x0, 0x3506, 0x2, 0xa}, {@in6=@mcast1, @in6=@private1, @in6=@loopback, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x6c, 0x3, 0x0, 0x3500, 0x2, 0x2}, {@in=@multicast2, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@broadcast, 0x32, 0x0, 0x0, 0x0, 0xa, 0xa}, {@in6=@mcast2, @in=@private=0x6, @in6=@mcast1, @in=@remote, 0x0, 0x0, 0x0, 0x34ff, 0xa, 0x2}, {@in6=@dev={0xfe, 0x80, '\x00', 0x13}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@mcast1, @in6=@empty, 0x3c, 0x3, 0x0, 0x3506, 0xa, 0x2}, {@in6=@private1, @in6=@remote, @in=@local, @in6=@empty, 0x6c, 0x1, 0x0, 0x3502, 0xa, 0xa}]}, @tmpl={0x44, 0x5, [{{@in=@rand_addr=0x64010101, 0x4d4, 0x33}, 0x2, @in6=@remote, 0x3506, 0x1, 0x2, 0x7, 0x10000, 0x7, 0xe}]}, @sec_ctx={0x75, 0x8, {0x71, 0x8, 0x1, 0x10, 0x69, "a47619c91bae120bcc7c51771b1cf82be7f4d215e898b00b8dc5340cf851b4b33547548283c63612bad9ef16fbd5d7a0995f1901f991e388b2cae97dcbd7544841136b44d00f7d890339f12a9e098c3c70ff33dc2ed4992b776f723eb4a9df6de2cc9214407410ce0f"}}, @srcaddr={0x14, 0xd, @in=@remote}]}, 0x2ec}}, 0x804) 5m49.803927932s ago: executing program 3 (id=8200): socket$netlink(0x10, 0x3, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r1, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r1, 0x0, 0xffffffdb) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x40002, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) 5m48.066979582s ago: executing program 1 (id=8203): connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg$unix(r1, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) 5m47.944842056s ago: executing program 1 (id=8204): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000480)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x1fff, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) write(r0, &(0x7f0000000080)="82ca9740893beedb3e107ff1", 0xc) 5m47.812784381s ago: executing program 1 (id=8205): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00'}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000003700)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x0) 5m46.889130889s ago: executing program 1 (id=8206): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000006180)={0x0, 0x0, &(0x7f0000006140)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="110026bd7000fddb73ede803000000000300", @ANYRES32, @ANYBLOB="0c00990001000000fcffffff0800050001000000"], 0x44}, 0x1, 0x0, 0x0, 0x4040}, 0x20004014) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4c, 0xf3, 0x8, [0x0, 0x0, 0x0, 0xc, 0x5, 0x0, 0x0, 0x40000002]}}) 5m46.545080959s ago: executing program 1 (id=8208): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet(0x2, 0x4000000000000001, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) syz_emit_ethernet(0x66, &(0x7f00000003c0)={@random="e33110495bfd", @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x30, 0x3a, 0xff, @dev, @local, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @rand_addr=' \x01\x00', @private1, [{0x4, 0x1, "9595f429ae08"}]}}}}}}, 0x0) 5m44.484679728s ago: executing program 1 (id=8210): socket$netlink(0x10, 0x3, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r1, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r1, 0x0, 0xffffffdb) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) 5m34.429222557s ago: executing program 41 (id=8200): socket$netlink(0x10, 0x3, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r1, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r1, 0x0, 0xffffffdb) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x40002, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) 5m28.923362394s ago: executing program 42 (id=8210): socket$netlink(0x10, 0x3, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r1, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r1, 0x0, 0xffffffdb) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) 4m22.52436667s ago: executing program 7 (id=8333): socket$unix(0x1, 0x5, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, 0x0, 0x0, 0x40088d4) r1 = socket$alg(0x26, 0x5, 0x0) r2 = socket(0x10, 0x3, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes-generic)\x00'}, 0x58) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) ptrace(0x10, 0x0) ptrace$poke(0x5, 0x0, 0x0, 0x0) r3 = accept4(r1, 0x0, 0x0, 0x80000) sendto$inet6(r3, &(0x7f0000000080)='\x00'/12, 0xc, 0x4008010, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x80001, 0x0) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000100)={0x1, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000000)={0x5, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r6, 0xc0303e03, &(0x7f0000000180)={"2486910284ed923431d4c5d5fbf514fd00", r7}) ioctl$SW_SYNC_IOC_INC(r4, 0x40045701, &(0x7f0000000a40)=0xfff) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x10007f, 0x20000006, 0x4d, 0x6, 0x3, 0x9, 0x2, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x25, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x8000806e, 0x7, 0x17, 0x1, 0x7, 0x200, 0x3e, 0x8c, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x1, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x7, 0x6c7, 0x8000009, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x7, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x1, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8020, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x43, 0x103], [0x7, 0xa, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xf, 0x4, 0x6, 0x5, 0x0, 0x6, 0x5, 0x1, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2002, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x1000000a, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x80000000, 0xb, 0x5, 0x93a, 0x6, 0x1000006, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0xb54, 0x101, 0x10000, 0x4, 0x7fff, 0x10000, 0x7f, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x96, 0xffffffff, 0x80000000, 0x0, 0x4, 0xc8, 0x1, 0xfffff000, 0x10080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x1, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$SW_SYNC_IOC_INC(r5, 0x40045701, &(0x7f00000002c0)=0x3) socket$nl_route(0x10, 0x3, 0x0) 4m22.180789597s ago: executing program 7 (id=8334): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet(0x2, 0x4000000000000001, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0), 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) fcntl$getown(r0, 0x9) syz_clone3(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = syz_open_dev$vim2m(0x0, 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r2, 0xc0285629, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="010000000300000004000000ff07"], 0x48) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x2) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000003c0)="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", 0xfffffffffffffd8a, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000300), 0xce4, r5}, 0x38) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = dup(r6) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r3, 0x84, 0x7, &(0x7f0000000000), &(0x7f00000000c0)=0x4) write$UHID_INPUT(r7, &(0x7f0000001980)={0xb, {"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", 0x1000}}, 0x1006) bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000600), 0x0, 0x401, r5, 0x0, 0x100000000000000}, 0x38) 4m19.06099868s ago: executing program 7 (id=8338): write$dsp(0xffffffffffffffff, &(0x7f00000001c0), 0x0) epoll_create1(0x80000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, &(0x7f00000002c0)={0x1, 0x8, 0x0, 0x0, '\x00', '\x00', '\x00', 0x0, 0x0, 0x0, 0x0, "deb926b282d41302f26892ddb0671d8b"}) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0300000003f500000000070000040900010073797a300000001288000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d44001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c0002800800010e000000000800034000000119ee"], 0xd0}}, 0x20050800) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xfffffffffffffee6}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r2 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xc4}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}, {&(0x7f0000000100)}], 0x2) r3 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000600)={{0x12, 0x1, 0x0, 0x35, 0xff, 0xaa, 0x20, 0xccd, 0x10af, 0x384e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x59, 0x2, 0x1, 0x9b, 0x1e, 0x2a, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r3, 0x0, 0x0) syz_usb_control_io$printer(r3, 0x0, 0x0) syz_usb_control_io$printer(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_control_io$uac1(r3, 0x0, 0x0) syz_usb_connect$printer(0x5, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x860}}]}) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000540)={0x2c, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r3, 0x0, &(0x7f0000003980)={0x84, &(0x7f0000000440)={0x40, 0x17}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) io_uring_enter(r2, 0x2219, 0xcf74, 0x16, 0x0, 0x0) bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10) 4m15.867466479s ago: executing program 7 (id=8344): r0 = mq_open(&(0x7f0000000180)='eth0\x00', 0x40, 0x59, 0x0) mq_notify(r0, &(0x7f00000000c0)={0x0, 0xc, 0x1}) readv(r0, &(0x7f0000000040)=[{&(0x7f00000003c0)=""/18, 0x12}], 0x1) 4m15.570569256s ago: executing program 7 (id=8345): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000480)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x1fff, 0x0, @mcast2, 0x5}, 0x1c) write(r0, &(0x7f0000000080)="82ca9740893b", 0x6) 4m15.308622539s ago: executing program 7 (id=8346): syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x550, 0x40, 0x1000, 0x0, 0x4, 0x0, {0x0, 0x3, 0x1002}, {0x350, 0xfffffffd, 0x1}, {0xf4ef}, {0x8000, 0x0, 0xffe}, 0x0, 0x100, 0x0, 0xd618, 0x0, 0x4, 0x0, 0x205, 0x0, 0x6, 0x0, 0x0, 0x8, 0x4, 0x0, 0xb}) r3 = io_uring_setup(0x3eaa, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1a3}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f0000003d40)=[{0x0, 0x0, 0x0, 0x0, 0x0}], 0x1) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) socket$nl_route(0x10, 0x3, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') syz_open_procfs(0x0, &(0x7f0000000500)='fdinfo\x00') socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="000000200000000000000000000000000000000049d7b56d9f5f3bc53657b37e503c43b5499a43d304e891008f941935153d93", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x7}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r4}, {}, {0x46, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x5, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = syz_open_dev$vim2m(&(0x7f0000000140), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f00000000c0)={0xfc, 0x2, 0x4}) ioctl$vim2m_VIDIOC_EXPBUF(r6, 0xc0405668, &(0x7f0000000100)={0x0, 0x20, 0x2}) r7 = socket$inet6(0xa, 0x80002, 0x0) r8 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0xac, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r9, {0x0, 0x300}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x1}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x3f0000}]}]}]}}]}, 0xac}, 0x1, 0x7a00}, 0x0) setsockopt$inet6_udp_int(r7, 0x11, 0x67, &(0x7f0000000180)=0x91, 0x4) 3m59.813475672s ago: executing program 43 (id=8346): syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x550, 0x40, 0x1000, 0x0, 0x4, 0x0, {0x0, 0x3, 0x1002}, {0x350, 0xfffffffd, 0x1}, {0xf4ef}, {0x8000, 0x0, 0xffe}, 0x0, 0x100, 0x0, 0xd618, 0x0, 0x4, 0x0, 0x205, 0x0, 0x6, 0x0, 0x0, 0x8, 0x4, 0x0, 0xb}) r3 = io_uring_setup(0x3eaa, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1a3}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f0000003d40)=[{0x0, 0x0, 0x0, 0x0, 0x0}], 0x1) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) socket$nl_route(0x10, 0x3, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') syz_open_procfs(0x0, &(0x7f0000000500)='fdinfo\x00') socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="000000200000000000000000000000000000000049d7b56d9f5f3bc53657b37e503c43b5499a43d304e891008f941935153d93", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x7}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r4}, {}, {0x46, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x5, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = syz_open_dev$vim2m(&(0x7f0000000140), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f00000000c0)={0xfc, 0x2, 0x4}) ioctl$vim2m_VIDIOC_EXPBUF(r6, 0xc0405668, &(0x7f0000000100)={0x0, 0x20, 0x2}) r7 = socket$inet6(0xa, 0x80002, 0x0) r8 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0xac, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r9, {0x0, 0x300}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x1}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x3f0000}]}]}]}}]}, 0xac}, 0x1, 0x7a00}, 0x0) setsockopt$inet6_udp_int(r7, 0x11, 0x67, &(0x7f0000000180)=0x91, 0x4) 13.949363851s ago: executing program 8 (id=8925): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/warn_count', 0xa8002, 0x82) r1 = getpid() r2 = syz_open_procfs(r1, &(0x7f0000000180)='net\x00') socket$nl_netfilter(0x10, 0x3, 0xc) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000004c0)={'ip6tnl0\x00', 0x0}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000140)=@ethtool_sset_info={0x37, 0x9, 0x10000}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000002e00010026bdf000fcdbdf1b040000000400"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={0x0, 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), 0xffffffffffffffff) syz_open_dev$media(&(0x7f0000000040), 0x5, 0x141800) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="2c0000003f00070100000000fddbdf25027c80001800378013000300717472283414d6bba919736d34290000"], 0x2c}, 0x1, 0x0, 0x0, 0xc880}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r9 = socket$kcm(0x2, 0x5, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) syz_usb_connect$cdc_ecm(0x1, 0x69, &(0x7f0000000500)=ANY=[@ANYBLOB="12010003020000082505a1a440000102030109025700010102f404090400074202060006052406000005240001800d240b0109000000090005008107241305d361ac152412"], &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) write$tun(r8, &(0x7f0000000240)=ANY=[@ANYBLOB="3a2f080000030300010000000000450a00280068000005069078ac1e0301ffffffff4e204e21", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="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"], 0xfce) fchdir(r2) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x0) 11.087917901s ago: executing program 9 (id=8928): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000006180)={0x0, 0x0, &(0x7f0000006140)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYBLOB="110026bd7000fddb73ede803000000000300", @ANYRES32, @ANYBLOB="0c00990001000000fcffffff0800050001000000"], 0x44}, 0x1, 0x0, 0x0, 0x4040}, 0x20004014) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4c, 0xf3, 0x8, [0x0, 0x0, 0x0, 0xc, 0x5, 0x0, 0x0, 0x40000002]}}) 10.757070459s ago: executing program 6 (id=8930): r0 = socket$unix(0x1, 0x1, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={'syzkaller0\x00', 0x7101}) (async) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000800)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x5}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {}, {0x8, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x4, 0xffffff00, 0x6, 0xc34, 0x7}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) (async) r5 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r2, 0x89f6, &(0x7f0000000140)={'sit0\x00', &(0x7f0000000040)={@empty, 0x0, 0x0, 0x10, 0x0, [{@loopback}]}}) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r7) (async) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000000)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r8, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accb", 0x26}], 0x1}, 0x4) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x19, &(0x7f00000005c0)=ANY=[@ANYBLOB="0000000000000000000004181100000000000000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000030000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000850000000e000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r10, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 10.588347604s ago: executing program 6 (id=8931): r0 = syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$cont(0x20, r1, 0x80000001, 0x0) ptrace(0x11, r1) open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb03) unshare(0x22020400) write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000004c0)={'syz0\x00', {0x7, 0x3, 0x1, 0x9}, 0x7, [0x4, 0x6, 0x802, 0x7, 0x1, 0x129, 0xa9ba, 0xc1f, 0x1, 0x7f5b, 0x3, 0x6, 0x5, 0x10000, 0x1, 0x3, 0x0, 0x3, 0xe, 0x3, 0x0, 0x2, 0x3, 0x6, 0x6, 0x3, 0x3, 0x9, 0xfff, 0x8a0, 0x6, 0x8001, 0x33b5, 0x1, 0xfffffffc, 0x0, 0x0, 0x80000000, 0xcc, 0x5, 0x80, 0x401, 0x5, 0x5, 0xfffffffd, 0x8, 0x9, 0x3, 0x7ff, 0x6, 0x3, 0x80000000, 0xd6, 0x9, 0x7, 0x0, 0x5, 0xfff, 0x1, 0x7fe, 0x7fff, 0x10003, 0x2, 0x8], [0x2, 0x1, 0x10000, 0x7, 0x2a, 0x6, 0x5, 0x4, 0xb, 0x7, 0x5, 0xdd5a, 0x6, 0x5, 0x7, 0x8, 0x5, 0xcd, 0xbc1, 0x80000, 0x2, 0x5e81339d, 0xffffc256, 0x5, 0x80000201, 0x0, 0xfffffffd, 0x4, 0x4, 0x7, 0x9, 0x1, 0x1, 0x1005, 0x5, 0xfffff966, 0xfb5, 0x2, 0x4, 0x9550, 0x2, 0x8000, 0x7fff, 0x1, 0x9425, 0x4, 0x10001, 0x80b, 0x1, 0x6, 0x525ba681, 0x4f74, 0x7, 0x1, 0x1, 0x10000, 0x100, 0x6, 0xfffc, 0x1306, 0x800, 0xffff0000, 0xfe4, 0x3ff], [0x2, 0x40, 0x4, 0xfffffff9, 0x7aa, 0x10, 0x8, 0xfffffff8, 0x5, 0x0, 0x9, 0x8, 0x7fffffff, 0x1, 0x1, 0x4, 0x8, 0x1, 0x7, 0x9, 0x6, 0x4, 0x5, 0x2, 0x3, 0x2, 0x0, 0x3, 0x4c, 0x3, 0x5, 0x2, 0xd21e, 0x9, 0x13, 0x1, 0x2, 0xfff, 0x6, 0x9, 0x7c83, 0xd, 0x1, 0x2, 0xd, 0x81, 0x47, 0x8000007, 0x0, 0x11, 0x3, 0xb5, 0x7, 0x7, 0x7ffd, 0x7ff, 0x10, 0x2, 0x10001, 0x1, 0x0, 0x6, 0x71c, 0x2000], [0x81, 0x3, 0x10, 0x4e26, 0x2, 0x40, 0x1, 0x497, 0x4, 0x1, 0x3, 0x5, 0x56, 0xc28, 0x9, 0x5, 0x5, 0xa, 0x79a, 0x40, 0x9, 0x4, 0xc41f, 0x3e1e, 0x8b6, 0xffffffff, 0x0, 0x0, 0x6a, 0x9, 0x0, 0x0, 0x1083, 0x10, 0xd, 0x6, 0x8000, 0x53, 0xf, 0x4, 0x1, 0xffffb027, 0xfffffff8, 0x7fff, 0x207, 0x7, 0x101, 0x7, 0x7, 0x4, 0x0, 0xa, 0x400, 0x8, 0x0, 0x8, 0x100007, 0x9a33247, 0x4000008, 0x0, 0x1, 0x8005, 0xfffffff7, 0x5]}, 0x45c) mknodat$null(r0, &(0x7f0000000080)='./file0\x00', 0x10, 0x103) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 10.352969047s ago: executing program 9 (id=8932): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000080)=ANY=[], 0x0) r2 = syz_open_dev$video4linux(&(0x7f0000000040), 0x7fff, 0x48b03) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xff7fffff}, 0x0) r3 = syz_open_dev$dri(0x0, 0x1, 0x0) close(0xffffffffffffffff) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x4d, 0x1, 0x0, 0x0, 0x0) r4 = epoll_create(0xb22) r5 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000001480)={0x40000000}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000000)={0x10}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000bbdffc)=0x0) lsetxattr$security_capability(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f00000000c0), &(0x7f00000001c0)=@v2={0x2000000, [{0x3, 0x45}, {0x8, 0x3}]}, 0x14, 0x3) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c00000045000900000000000000000003000000080002", @ANYRES8=r8], 0x1c}}, 0x0) ptrace(0x10, 0x0) ptrace(0x4207, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, 0x0) r9 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) r10 = syz_usb_connect(0x0, 0x3f, &(0x7f00000003c0)=ANY=[@ANYRESHEX=r1, @ANYRES64=r2, @ANYRES8=r3, @ANYRES16=r7, @ANYRES32=r4, @ANYRESDEC=r9, @ANYBLOB="5ea3f9c3b685b7940e7f13d2605bfa69e13aafba334151f9edcc9d7ad4d94da6aed25c52b0f624e29ea3c4807ee6f5872d483fc4be04e70024247337a62d77eee827888aead2644e39203cd5f24285ca15f363f7fab9e904c6fa5fa0d237a26c36734702e3035bdb0ac4", @ANYRES8=r6], 0x0) syz_usb_control_io(r10, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x10000000000) 10.094725543s ago: executing program 6 (id=8933): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) syz_io_uring_setup(0x118d9, &(0x7f0000000040)={0x0, 0x4345, 0x2, 0x0, 0x25a}, 0x0, &(0x7f00000002c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x20000000) r2 = socket(0x840000000002, 0x3, 0xfa) getsockname$inet(r2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000200)={0xfffffffe, 0x3, 0x4}) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[], 0x50) unshare(0x62040200) syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[], 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="5400000010001ffffcffff000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000100000000002c0012800b00010067726574617000001c00028006000e000200000006000f000700000008000700ac14142808000a00", @ANYRES32=r7, @ANYBLOB], 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r6, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x36, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="46060900000000001c00128009000100766c616e000000000c000280060001000100000008000500", @ANYRES32=r9, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r9, @ANYBLOB="9ac1bb9db33607f58f1a8d7204be1ead184f1f5b7404000000000000009e66a632db11e6c79ffba6ada1148d1361957b8d78fc05eecb40637cc92c8b78a6fe6143f9dc0454ef66b8b8209bbc4e4106c5c18a535756646d57900ae5e4ecc0c0e3d83cc41e2a2e144fd4e1430c32498bdf0b18c8778de430d8c3c61aa690c5b274464a5bbbf644f370942bcef98b3962278109c1d24c18fe04d01a0c6005b13385d4c9192c48695dccc34f2c7b8f574fa8d17ba46f134e18bddfaf468b08b92e3b65d4d57532a728af650f812680fa50121c703b81fd189bf86967322cefe3087006606a51034da3be0fb25daee8a9275121e1a511ec"], 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000040)={0x28, 0x7, 0x0, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) 8.813100192s ago: executing program 8 (id=8938): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/warn_count', 0xa8002, 0x82) r1 = getpid() r2 = syz_open_procfs(r1, &(0x7f0000000180)='net\x00') socket$nl_netfilter(0x10, 0x3, 0xc) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000004c0)={'ip6tnl0\x00', 0x0}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000140)=@ethtool_sset_info={0x37, 0x9, 0x10000}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000002e00010026bdf000fcdbdf1b040000000400"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={0x0, 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), 0xffffffffffffffff) syz_open_dev$media(&(0x7f0000000040), 0x5, 0x141800) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="2c0000003f00070100000000fddbdf25027c80001800378013000300717472283414d6bba919736d34290000"], 0x2c}, 0x1, 0x0, 0x0, 0xc880}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r9 = socket$kcm(0x2, 0x5, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) syz_usb_connect$cdc_ecm(0x1, 0x69, &(0x7f0000000500)=ANY=[@ANYBLOB="12010003020000082505a1a440000102030109025700010102f404090400074202060006052406000005240001800d240b0109000000090005008107241305d361ac152412"], &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) write$tun(r8, &(0x7f0000000240)=ANY=[@ANYBLOB="3a2f080000030300010000000000450a00280068000005069078ac1e0301ffffffff4e204e21", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="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"], 0xfce) fchdir(r2) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x0) 6.827726207s ago: executing program 4 (id=8939): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00'}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, 0x0, 0x0) 6.472115999s ago: executing program 4 (id=8940): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x58, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) r3 = dup(r2) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f00000003c0), r4) sendmsg$L2TP_CMD_SESSION_MODIFY(r3, 0x0, 0x20000000) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000005c0)={&(0x7f0000000940)={0x248, 0x0, 0x300, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xf}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x10000}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9ff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9d}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}]}, @TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_MEDIA={0x64, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff8}]}]}, @TIPC_NLA_SOCK={0x8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_NODE={0x14, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x6}]}, @TIPC_NLA_LINK={0xb0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff2}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xaf8c}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffe}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc3}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_BEARER={0x8c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'veth0\x00'}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0xfffffff2, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x2}}}}, @TIPC_NLA_BEARER_NAME={0xb, 0x1, @l2={'ib', 0x3a, 'nr0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}]}]}, 0x248}}, 0x1) syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100008b86d3106d04b50801d7010203030902120001000000000904"], 0x0) sendmsg$ETHTOOL_MSG_RINGS_SET(r8, 0x0, 0x0) getsockopt$inet6_mreq(r4, 0x29, 0x14, 0x0, &(0x7f0000000340)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="400000001000100000000000feffffff000000", @ANYRES32, @ANYBLOB, @ANYRES32=r7, @ANYBLOB="08000300", @ANYRES32=r7, @ANYBLOB], 0x40}, 0x1, 0xd, 0x0, 0x4000000}, 0x44050) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f00000006c0)={'syztnl2\x00', 0x0, 0x4, 0x94, 0x60, 0x7f, 0x8, @loopback, @local, 0x20, 0x30, 0xdb36, 0x40}}) read$FUSE(0xffffffffffffffff, &(0x7f0000001900)={0x2020, 0x0, 0x0, 0x0}, 0x2020) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000280)={{{@in=@remote, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4e20, 0x5, 0x4e23, 0x7, 0xa, 0x0, 0x20, 0x2e, r9, r10}, {0x1, 0x5, 0x1, 0x100000000, 0x7, 0x1, 0x800000000001, 0x3}, {0x7, 0x0, 0x0, 0x7}, 0xffffffff, 0x6e6bb0, 0x1, 0x1, 0x1, 0x2}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d6, 0x32}, 0x2, @in6=@empty, 0x3500, 0x2, 0x0, 0x9, 0x1ff, 0xb4b, 0x1efb}}, 0xe8) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000040)=@arm64={0x6, 0x4, 0x9, '\x00', 0x6}) 5.911853486s ago: executing program 0 (id=8942): socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0100000007000000008000000100000000000000", @ANYRES32, @ANYBLOB="020000ece2ce9be398ff000000000000000000000000000000dbae110d58ce1c4cbb4b94f6d192694b0f57", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r3}, 0x0, &(0x7f0000000280)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r3, &(0x7f00000005c0), &(0x7f0000000680)=""/151}, 0x20) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000001c0), 0x3) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, &(0x7f0000000040)=0x54) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYRES32, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e000300000003000000"], 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x10, 0x8000, 0x5, 0x7, {{0x6, 0x4, 0x0, 0x16, 0x18, 0x67, 0x0, 0x3, 0x2f, 0x0, @rand_addr=0x64010100, @empty, {[@end]}}}}}) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3) r5 = semget$private(0x0, 0x20000000102, 0x0) semctl$SEM_STAT(r5, 0x2, 0x12, &(0x7f0000000040)=""/177) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000000400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a30"], 0x84}, 0x1, 0x0, 0x0, 0x4d008}, 0x2000c000) 5.552462838s ago: executing program 9 (id=8943): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/warn_count', 0xa8002, 0x82) r1 = getpid() r2 = syz_open_procfs(r1, &(0x7f0000000180)='net\x00') socket$nl_netfilter(0x10, 0x3, 0xc) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000140)={'syztnl0\x00', 0x0, 0x2f, 0x0, 0xf9, 0x1, 0x0, @loopback, @private2, 0x8, 0x40, 0x1, 0x3}}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000002e00010026bdf000fcdbdf1b040000000400"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={0x0, 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), 0xffffffffffffffff) syz_open_dev$media(&(0x7f0000000040), 0x5, 0x141800) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="2c0000003f00070100000000fddbdf25027c80001800378013000300717472283414d6bba919736d34290000"], 0x2c}, 0x1, 0x0, 0x0, 0xc880}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r9 = socket$kcm(0x2, 0x5, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) syz_usb_connect$cdc_ecm(0x1, 0x69, &(0x7f0000000500)=ANY=[@ANYBLOB="12010003020000082505a1a440000102030109025700010102f404090400074202060006052406000005240001800d240b0109000000090005008107241305d361ac152412"], &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) write$tun(r8, &(0x7f0000000240)=ANY=[@ANYBLOB="3a2f080000030300010000000000450a00280068000005069078ac1e0301ffffffff4e204e21", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="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"], 0xfce) fchdir(r2) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x0) 4.788506572s ago: executing program 4 (id=8944): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000200)={0x0, &(0x7f00000009c0)=[@code={0xa, 0x6e, {"450f09c744240000000000c744240222000000c7442406000000000f01142443fd66baf80cb8787ff189ef66bafc0cb8ba1b0000ef360f20c7f30f20c466baf80cb8d741c78eef66bafc0cb0c0eef30f584e4d66b8dd008ee8430f23d1"}}, @nested_load_code={0x12e, 0x77, {0x3, "b9800000c00f3235002000000f30b9a90800000f3266b8fd000f00d0b805000000b9000000000f01c148b8449b0000000000000f23c00f21f835030003000f23f84163e366baa000ed66b85d008ee0440f20c0350d000000440f22c00f01ca"}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x0, @save_area=0x597, 0x4, 0x8, 0xe46e}}, @enable_nested={0x12c, 0x18}, @code={0xa, 0x44, {"26460f01c4363664450f01cfc4417817581566bad104b84f8bf742ef410f01c266460f20c3c4627d1c3f660fc7360fc738f2a4"}}, @rdmsr={0x66, 0x18, {0x27b}}, @nested_create_vm={0x12d, 0x18, 0x3}, @uexit={0x0, 0x18, 0x5}, @wr_drn={0x68, 0x20, {0x1, 0x9}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x7, @host64=0x2c03, 0x3755, 0x2, 0x800}}, @set_irq_handler={0xc8, 0x20, {0x82, 0x2}}, @code={0xa, 0x57, {"f04300739366baf80cb852a99389ef66bafc0c66b8000066ef470f01c20f01c80fc77a5ff0fe05f07f00008f4828a35412000666ba200066b876cb66eff2430f2179410f01c4"}}, @wr_drn={0x68, 0x20, {0x1, 0x6}}, @rdmsr={0x66, 0x18, {0x27f}}, @cpuid={0x64, 0x18, {0x6, 0x8000}}, @nested_load_code={0x12e, 0x6f, {0x2, "460f2325430fc72e66ba4200b800000000ef66b833010f00d0c744240064b9d9eec744240200400000c7442406000000000f011424266764f3450fc734e4400f78d3400f01f866baf80cb8aa6f3b86ef66bafc0cec0f30"}}, @set_irq_handler={0xc8, 0x20, {0xa7}}, @wr_drn={0x68, 0x20, {0x7, 0xd}}, @wr_crn={0x67, 0x20, {0x0, 0x9}}, @rdmsr={0x66, 0x18, {0x902}}, @wr_crn={0x67, 0x20, {0x8, 0x9}}, @wr_crn={0x67, 0x20, {0x0, 0x9}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x3, @control_area=0x10, 0xf, 0x4, 0x7}}, @enable_nested={0x12c, 0x18}, @code={0xa, 0x70, {"0f01c3470fc72d2800000036f30f00df460f01cf66baa100b099ee673e640f3266ba420066b8007066efc744240082000000c7442402e3000000ff2c2448b88000c0fe000000000f23d00f21f835200000070f23f866bad10466b8006066ef"}}], 0x4c7}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000002c0)={0x1, 0x0, [{0xc0000082, 0x0, 0x1}]}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r3, &(0x7f0000005b40)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000040)="f37481d90eeaead391345b4da9d27e24c9c670da3afc5c00000000007fffffff00"/50, 0x32}, {&(0x7f0000000140)="ead5e96719a44591801f33", 0xff02}, {&(0x7f0000000180)="f3f97053495b072215aee864193557c0dabdd253711d5ed9b131c5abd8796e5759ab1f639211e68e24bf4471b6ab1429b165c7248cded82bfb4a3f48e8d0", 0x3e}], 0x3, &(0x7f0000000240)=[@ip_retopts={{0x2c, 0x0, 0x7, {[@timestamp_addr={0x44, 0x1c, 0x93, 0x1, 0x0, [{@broadcast}, {}, {@private}]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @multicast2}}}], 0x50}}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000380)="c1ad061c5d914eadd95de7fb63eb7b0306d91c25f3fba6c97eda8ade2420dfe1fe0f5c7a01d724be33a44f1cd52028110d8f7dd4b3421a3fe4b2066d179f938ba15c3956e1aaad35035bcde7b90ed59ee2de06c8a4af3de95bda", 0x5a}], 0x1}}, {{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000480)="f41fa963edcd5e2a5d", 0x9}, {&(0x7f00000004c0)="0c71e8d7705b19c24e8c3ec98b4243ae0be48cd79f024361b8082d328363e63e360e122e7ec929c89aea0b338987609655fb5f5f91cd457584f30946f63e00fd0e8c536ae0106beb7d02fb4eb35db10c37c4bf3f2c6df9254d540598ae9b7098b74908c7da448e8891bc1b46f58553776f43370d090df693f3a4e4a724dbb498e51860bd766e36c41c0a0ee41019a0b05b519107c1fbb944f26f16f9fc127f3cd86c3fdbcf169912fc1c42a4a7051d3e85591ccd24b19681da775dc34c98ad24ab07c6feab583ba1f5efb430a06d66c039dbf40a84f04cfdfca240676e96579502925e57864815d3fe17edaf5cdbc3a4b48843c22372f9f1cf363d8428fe6341fb474ba53db6be689703ce5f7b6639b3493a5aca4c9316df8b4600d73533021932eb359ce7c1f00a54cb1318076ccb00e27ba0934db1867e078ee47b86d3e367b96ba948c3aa029c365eb0dc99685c5fd7bfbd1916b889da42d6ad1ab2466e989b5c8304b1e2190d4efeb9ccbd3a7a48c3b393470fc215e164cb91e238c5a28c4f40b4b99ee8f9481fe62e0bcf0a9831e491dc1150ad9c023217df6432487219a3083b310958cdbc217f99d02a19414987ff1bc176e3267c205827f466ea1912cbc0e304faf034602b85db010d8796d2ab18c2c4badf39db5312ad908d8555c30d0cc7d3bce8b4fcfc5764ed6e8bf4e8e4af6bbb3f82ac014f021dc6cb81cebe4b7d071e4d019719d1b0354ce0a2ff3b66ba7bf0f4598bde90a9115ddc4f197bcd881e0cd0baabb57316e75d108b14acc668ee906acf7bffdff3aef11ecf107b3eccd67a56c6b26e0a9a72d404a7a2dd3da8759e676c0eef6a95890d4f647269d1bf972d75307bd867819f385df6f57a7c28332307f444d1157c303c30a478b056d6e11111398aafcb6fff1b6a985cf888afa04586e35e7d3b292d254acf08a6bd38fbbd22bc9919052e6693c1e454aade6348679e027d1b102618476c9ab1f9928fc7f505046cb8383b9e1d79b961895502cded12f1842705102dffddc11f7bea0bd53833f1a455e661f6bda92d35b1159e1489cf762da76c125060ffedc7cc54238b3bd2d894a91d92a6c5cce9bf5417674a2bd0e38271912f7481e58ec7ab422db826482ffb80ce45dab2cb43105356c292a2fd1db8a758b37d56f46721163f24c075d980a37917cca20acce274c404828efaed50b881a5481f9ad268e99e25884db25426d5a5f338f405748817bba32b89e4c18b0f061e6758d46b5f0f2865b1c41be4f7ff999d289538a8fca45b2cf76a2fc398b7913db0ea85ee4d00156432f764ef888094dceb05c68da62fdf667b511276ac97dcf0b34819d9307cf0066267f94ab80fcc19c9f3d682e6e375ac25d7d6b71ae6d084ca1ed7e21b46b1ca0abc6cd50b3aa40e341cfc0a75f2040cc71c26e6cff3d76cc6c629051c47d8b950d01de19d324f2705e37a7a41364ecc70e5021ef955b50144860dafe6fc8b14fb6c451c0444aef66c3081097b6072c304f17206810b4e937bd5673720071d5f1d964f8bb21ab4ffbda1ece1e95005c6abdf00f78681f37c34936e8c9ba1bf420ba0dbfb84698931da95003dd2a34f59a179420ce004664f0495d1548e04e544c238599e6c41831d05c568607f0cd59153422fea60f7de8c4c1ab308b977e2280372c1f57506c22caf84ef2d912b3dbdd9d05fd1fe78ea2965f9542b0010009efea9c642f1", 0x4c6}], 0x2}}, {{0x0, 0x0, &(0x7f0000004240), 0x300}}], 0x4, 0xc080) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x439, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1010}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gre={{0x8}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_IGNORE_DF={0x5, 0x13, 0x1}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_PMTUDISC={0x5}]}}}]}, 0x44}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="2c0000001c00357428bd7000fcdbdf2502000000", @ANYRES32=r4, @ANYBLOB="1000a206080001000000000008000f0005"], 0x2c}, 0x1, 0x0, 0x0, 0x20040001}, 0x200080c0) 4.620235029s ago: executing program 6 (id=8945): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r2, 0x11c, 0x4, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r2, {0x40, 0x80000000}}, './file1\x00'}) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000000200)=0x4, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x401, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0x1}, @IFLA_GTP_FD0={0x8, 0x1, @udp6}]}}}]}, 0x40}}, 0x20000000) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x100000000009, 0xa, 0x0, 0x3}, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') syz_io_uring_setup(0x124, &(0x7f00000000c0)={0x0, 0x5885, 0x0, 0x2}, &(0x7f0000000340), 0x0) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r6, 0xc02064b6, &(0x7f00000001c0)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r6, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3, r8}) ioctl$DRM_IOCTL_MODE_ATOMIC(r6, 0xc03864bc, &(0x7f0000000580)={0x401, 0x1, &(0x7f0000000180)=[r8], &(0x7f00000000c0)=[0x3], &(0x7f0000000640)=[r10, r9, r9], &(0x7f0000000340), 0x0, 0xffffffffffffffff}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4043, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) r11 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r11) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000000640)={0x2020}, 0x2020) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) syz_open_dev$swradio(&(0x7f0000000380), 0x0, 0x2) 4.573675097s ago: executing program 8 (id=8946): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r2, 0x11c, 0x4, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r2, {0x40, 0x80000000}}, './file1\x00'}) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000000200)=0x4, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x401, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0x1}, @IFLA_GTP_FD0={0x8, 0x1, @udp6}]}}}]}, 0x40}}, 0x20000000) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x100000000009, 0xa, 0x0, 0x3}, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') syz_io_uring_setup(0x124, &(0x7f00000000c0)={0x0, 0x5885, 0x0, 0x2}, &(0x7f0000000340), 0x0) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANE(r6, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r6, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3, r7}) ioctl$DRM_IOCTL_MODE_ATOMIC(r6, 0xc03864bc, &(0x7f0000000580)={0x401, 0x1, &(0x7f0000000180)=[r7], &(0x7f00000000c0)=[0x3], &(0x7f0000000640)=[r9, r8, r8], &(0x7f0000000340), 0x0, 0xffffffffffffffff}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4043, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) r10 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r10) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000000640)={0x2020}, 0x2020) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) syz_open_dev$swradio(&(0x7f0000000380), 0x0, 0x2) 4.303056505s ago: executing program 4 (id=8947): r0 = syz_open_dev$cec(&(0x7f0000000200), 0x0, 0x4ae60) ioctl$CEC_TRANSMIT(r0, 0xc0386105, &(0x7f0000000000)={0x9, 0x3, 0x6, 0x8, 0x2, 0x4ac134b0, "7109069f4eb7a1c67ed4bfa0d2bb4c03", 0x2, 0x5, 0x89, 0x0, 0x56, 0x6, 0x7}) 3.930978673s ago: executing program 4 (id=8948): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000bfd000/0x400000)=nil) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x11, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1}, 0x4) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket(0x2, 0x80802, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) socket$inet6_tcp(0xa, 0x1, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x143fc2, 0x1d8) openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x40042, 0x121) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='pagemap\x00') prlimit64(0x0, 0x6, &(0x7f0000000140)={0x0, 0x4}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f00006ec000/0x1000)=nil, &(0x7f00002c7000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000559000/0x4000)=nil, &(0x7f000008d000/0x1000)=nil, &(0x7f00005e2000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000021a000/0x1000)=nil, &(0x7f00005e1000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r4 = io_uring_setup(0x8, &(0x7f00000002c0)={0x0, 0xc8a1, 0x4000, 0x8, 0x40c1}) pipe(&(0x7f0000000100)) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02080000040000000100000009000100000000", @ANYRES32, @ANYBLOB='\x00\x00'], 0x48) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) r5 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f0000000180)=[@wr_drn={0x68, 0x20, {0x6, 0xd}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control64=0x200a, 0x84f, 0x6}}, @in_dx={0x69, 0x20, {0x6ccc, 0x2}}, @wr_drn={0x68, 0x20}], 0x98}) ioctl$KVM_SET_CPUID2(r5, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x40000001, 0x7, 0x2, 0x31237648, 0x6, 0x2, 0x80}]}) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040)={0xffffffff, 0x0}, 0x8) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r6}, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a88000000060a010400000000000000000a0000010900010073797a31000000005c000480580001800b0001007461726765740000480002802c0003009ac420002e00000000000000009dfb78c7699c74e891a0c70000000000000000000000000000000008000240000000000e00010049444c4554494d45520000000900020073797a32"], 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) 3.301402511s ago: executing program 4 (id=8949): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f0000000a80)={{0x5, 0x6, 0x401, 0x7, 'syz1\x00', 0x81}, 0x1, [0x6, 0xfffffffffffffffa, 0x95, 0x907a, 0xffffffff, 0x60, 0x1, 0xf, 0x4, 0x4, 0xfffffffffffffffd, 0x63, 0xfff, 0x100000001, 0xfffffffffffffffa, 0xc8, 0x51, 0xa5, 0x0, 0xb6, 0x8000000000000000, 0x8, 0x7, 0x4, 0x6, 0xff, 0x1, 0x4f51, 0x0, 0x37c7, 0xc, 0xbb31, 0x76a, 0x63, 0x4, 0x4, 0x8, 0xffffffffffff7fff, 0x6, 0x8, 0x5, 0x0, 0x8, 0x401, 0x3, 0xc1bd, 0xffffffff, 0x8000000000000001, 0x3, 0x1, 0x7, 0x72, 0x9, 0x2, 0x6a44d0ea, 0xffffffffffffffff, 0x9, 0x5f0, 0xfffffffffffff2e2, 0x7, 0x6, 0xfffffffffffffffd, 0x7, 0xf0, 0x26e69303, 0x5, 0x2, 0x5, 0x2, 0x1, 0x9, 0x7, 0xe0000000000000, 0xd, 0x81, 0x80000003, 0x7fff, 0x6, 0x6, 0x4000000000003ff, 0xffffffffffffcc1c, 0x10000, 0xfffffffffffffffb, 0x6, 0x100000001, 0x1, 0xf, 0x7dd, 0xfffffffffffff000, 0x8d6, 0x1, 0x5, 0x4, 0xafae, 0x1, 0x8, 0x1, 0xb, 0x1, 0xffff, 0x5, 0x10000, 0x1ff, 0xc, 0x0, 0x7, 0x5, 0x0, 0x3, 0x7, 0xaad, 0x7, 0x1, 0x8, 0xe2, 0x6, 0x6, 0xf, 0x7, 0x0, 0x9, 0x5, 0x40, 0x52a7, 0x83d0, 0xf0, 0x100000000, 0x140000000]}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8, 0x0, 0x9, 0x3000000000, 0xfffffe0000000001, 0xfa12, 0xffffffff}, 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x12) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0xc048aeca, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000800)={{0x12, 0x1, 0x0, 0x96, 0x5d, 0x6, 0x40, 0x133e, 0x815, 0x7e66, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xff, 0x87, 0x28, 0x0, [], [{{0x9, 0x5, 0x5, 0x3}}]}}]}}]}}, 0x0) ioctl$KVM_HAS_DEVICE_ATTR_vm(r3, 0x4018aee3, &(0x7f0000000140)=@attr_other={0x0, 0xa, 0x8, &(0x7f0000000000)=0x37f}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b37221af205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb09587", 0x4b}, {&(0x7f00000003c0)='\x00\x00\b\x00\x00', 0x5}], 0x2, &(0x7f0000000380)=[@assoc={0x18, 0x117, 0x4, 0xe}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/80, 0xe}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket(0x840000000002, 0x3, 0xfa) getsockname$inet(r7, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000003880)=@nat={'nat\x00', 0x1b, 0x5, 0x470, 0x2e8, 0x128, 0xffffffff, 0x128, 0x1f8, 0x478, 0x478, 0xffffffff, 0x478, 0x478, 0x5, 0x0, {[{{@ipv6={@empty, @empty, [0xff000000, 0xff000000, 0xffffffff, 0xffffffff], [0x0, 0xff, 0xffffff00, 0xffffff00], 'dvmrp0\x00', 'batadv_slave_1\x00', {}, {}, 0x1d, 0x40, 0x3, 0x20}, 0x0, 0xa8, 0xf0}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x1a, @ipv4=@broadcast, @ipv4=@local, @gre_key=0xb, @icmp_id=0x64}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x18, @ipv4=@remote, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @icmp_id=0x65, @port=0x4e24}}}, {{@ipv6={@loopback, @local, [0x921c14750bc769d1, 0x0, 0xffffff00, 0xff], [0xff, 0xffffffff, 0xff000000, 0xff000000], 'veth0_to_bond\x00', 'pim6reg1\x00', {}, {0xff}, 0x32, 0x18, 0x1, 0xb6eeaa64506ac8d9}, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0xa, @ipv4=@remote, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, @port=0x4e24, @port=0x4e21}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x3a, 0x301, 0x70bd25, 0xfffffffc, {0x7}}, 0x14}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) 2.845400737s ago: executing program 0 (id=8950): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00'}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, 0x0, 0x0) 2.451700988s ago: executing program 0 (id=8951): r0 = socket$inet6(0xa, 0x3, 0x8) syz_emit_ethernet(0x21, &(0x7f00000010c0)={@broadcast, @link_local, @void, {@llc_tr={0x11, {@snap={0xaa, 0xaa, "1f", "86d174", 0x88a2, "de6a63cef7c41cbdba8882"}}}}}, 0x0) ioctl$SIOCGSTAMP(r0, 0x8906, 0x0) sendmmsg$inet6(r0, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='$\x00'], 0x28}}], 0x1, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x10000, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000280)=@l={0x92, 0xd, 0xe0, 0x1d, 0x59, 0x1}) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="f4000000", @ANYRES16=r2, @ANYBLOB="050026bd7000000200000000007cc7c815e60777020008000300b54b7c72debc2d2625a8a305d0bc9e9bed707267a4773f6f6ccb525596661d6caacf7bc9d4c6cc55f976ae35827e2287b7d19fb1fa28c3bafcb381eb49574a54dec3698a220720a7963c46010a02ee", @ANYRES32=r3, @ANYBLOB="33000e0080000000ffffffffffff0802110000000802110000000000000000000000000064000100030100760603e82400010400080026006c09000008000c006400000008000d000000000081000f003754f10174de46ee58670530cc07db14d6f2a74a7e6cce6d01e407fe7ac54aaf591b1603f42711dca75d6ecfa0d0cc2975b9888a773dcadaf5a7ed8f8a781dc251b44d0bccdef5bf214ed247de1b931b3e843a6e030001021298720603030303030303039c51427514000000407fd409c015fc9ba9bdabd6ae323465740000000400800004007f00"], 0xf4}, 0x1, 0x0, 0x0, 0x2400c004}, 0x20000014) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000340)={0x1d, r6, 0x0, {0x1, 0xf0, 0x4}, 0xfe}, 0x18) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) r7 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021100011800c000100636f756e74657200400000000e0a01030000000000000000070000000900020073797a31000000000900010073797a300000"], 0xd4}}, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r7, 0x40045532, &(0x7f0000000040)=0x3) r9 = openat$audio(0xffffffffffffff9c, 0x0, 0x40000000040201, 0x0) r10 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) r11 = dup2(r10, r9) write$RDMA_USER_CM_CMD_NOTIFY(r11, 0x0, 0x0) r12 = syz_io_uring_setup(0x497, &(0x7f0000000000)={0x0, 0xf62c, 0x800, 0x3, 0x2fc}, &(0x7f00000001c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r13, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r13, r14, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r12, 0x3516, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x74, r6, {0xfff3, 0x10}, {0xfff1, 0x9}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) 1.74450265s ago: executing program 6 (id=8952): openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x2, 0x0, 0x2}, {0xfffffffffffffffe, 0xffffffffffffffff}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2, 0x2b}, 0xa, @in6=@private1, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x4000}]}]}, 0xfc}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) socket$igmp(0x2, 0x3, 0x2) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000180)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0xd2}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000320, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) 1.630417987s ago: executing program 0 (id=8953): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000440000009"], 0x48) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') preadv(r0, &(0x7f0000000640)=[{&(0x7f0000000140)=""/134, 0x86}], 0x1, 0x0, 0x0) pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xfe1b) write$UHID_INPUT(r1, &(0x7f00000004c0)={0x8, {"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", 0x1000}}, 0x1006) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="18250000", @ANYRES32=r1, @ANYBLOB="000000009d000000184b00000100000000000000000000001868000007000000000000000900000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000086000000186b00"/40], &(0x7f0000000200)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41000, 0x18}, 0x94) 1.414548998s ago: executing program 8 (id=8954): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xbc, 0x15, 0x1, 0xfffffffa, 0x10, {{@in=@broadcast, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x0, 0xffff, 0x80, 0xa, 0x80, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x9, 0x8}, {0x1, 0x9, 0x80, 0x1000000}, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3}, [@tmpl={0x4}]}, 0xbc}}, 0x0) 1.40225368s ago: executing program 6 (id=8955): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) syz_io_uring_setup(0x118d9, &(0x7f0000000040)={0x0, 0x4345, 0x2, 0x0, 0x25a}, 0x0, &(0x7f00000002c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x20000000) r2 = socket(0x840000000002, 0x3, 0xfa) getsockname$inet(r2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000200)={0xfffffffe, 0x3, 0x4}) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[], 0x50) unshare(0x62040200) syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[], 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="5400000010001ffffcffff000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000100000000002c0012800b00010067726574617000001c00028006000e000200000006000f000700000008000700ac14142808000a00", @ANYRES32=r7, @ANYBLOB], 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r6, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x36, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="46060900000000001c00128009000100766c616e000000000c000280060001000100000008000500", @ANYRES32=r9, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r9, @ANYBLOB="9ac1bb9db33607f58f1a8d7204be1ead184f1f5b7404000000000000009e66a632db11e6c79ffba6ada1148d1361957b8d78fc05eecb40637cc92c8b78a6fe6143f9dc0454ef66b8b8209bbc4e4106c5c18a535756646d57900ae5e4ecc0c0e3d83cc41e2a2e144fd4e1430c32498bdf0b18c8778de430d8c3c61aa690c5b274464a5bbbf644f370942bcef98b3962278109c1d24c18fe04d01a0c6005b13385d4c9192c48695dccc34f2c7b8f574fa8d17ba46f134e18bddfaf468b08b92e3b65d4d57532a728af650f812680fa50121c703b81fd189bf86967322cefe3087006606a51034da3be0fb25daee8a9275121e1a511ec"], 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000040)={0x28, 0x7, 0x0, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) 1.076892928s ago: executing program 8 (id=8956): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x900, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000340)=ANY=[@ANYRES32=0x0, @ANYBLOB='\x00'/15], 0x50) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, 0x0, 0x18}], 0x1, 0x10, 0x0, 0x0) 1.072973726s ago: executing program 9 (id=8957): r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f00000000c0)={0x1, 0xc, 0x7, &(0x7f0000000080)={0x18, "d04237b5d17d56d147f27c442e00"}}) socket(0x2a, 0x3, 0x0) socket$inet6(0xa, 0x3, 0x5) socket$key(0xf, 0x3, 0x2) syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000001580)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x84}, @in=@local, 0x0, 0x0, 0x4e22, 0x0, 0x2, 0x0, 0x20, 0x11}, {0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x10, 0x9}, {}, 0x1, 0x0, 0x1}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4d2, 0x33}, 0x0, @in=@private=0xa010100, 0x3506, 0x0, 0x2, 0xb7, 0x2, 0xfffffff9}}, 0xe8) open$dir(0x0, 0x30040, 0x68) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0) 566.437329ms ago: executing program 0 (id=8958): r0 = syz_open_dev$cec(&(0x7f0000000200), 0x0, 0x4ae60) ioctl$CEC_TRANSMIT(r0, 0xc0386105, &(0x7f0000000000)={0x9, 0x3, 0x6, 0x8, 0x2, 0x4ac134b0, "7109069f4eb7a1c67ed4bfa0d2bb4c03", 0x2, 0x5, 0x89, 0x0, 0x56, 0x6, 0x7}) 511.728684ms ago: executing program 8 (id=8959): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000ab000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, &(0x7f0000000080)="470f23fc6541fc48b8e7320000000000000f23d80f21f80f23e1f8f30f1edd0f2221c74c24022063800000002c24f30f556797c483fd005b02ea6426470f01cf65666466430f3833af00580000", 0x4d}], 0xaaaaaaaaaaaaabf, 0x3c, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket(0x840000000002, 0x3, 0xff) close(0x3) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000600)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000002"], 0x110) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f00000004c0)={0x3, {{0x2, 0xfffd, @multicast2}}, {{0x2, 0x4e20, @local}}}, 0x108) setsockopt$inet_group_source_req(r1, 0x0, 0x2c, &(0x7f0000000000)={0x2, {{0x2, 0x4e26, @multicast2}}, {{0x2, 0x2, @multicast1}}}, 0x108) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x2, 0x2, 0x40000, 0x2000, &(0x7f00000c2000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x72, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r5, 0xffffffffffffffff, 0x0) io_uring_setup(0x299, &(0x7f0000000300)={0x0, 0xf76b, 0x4000, 0xfffffffd, 0xfffffffe, 0x0, r5}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff080047000030000000000006907800000000000000008608ffffffff0102"], 0x0) syz_usb_connect(0x0, 0x41, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000e518a708ac0501859d200000690109022f00010000000009040000000e010000152403"], 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000079db8540da0b09010b6e000000010902120001000000000904", @ANYRES32, @ANYRES8=r6], 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 387.013725ms ago: executing program 0 (id=8960): socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0100000007000000008000000100000000000000", @ANYRES32, @ANYBLOB="020000ece2ce9be398ff000000000000000000000000000000dbae110d58ce1c4cbb4b94f6d192694b0f57", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r3}, 0x0, &(0x7f0000000280)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r3, &(0x7f00000005c0), &(0x7f0000000680)=""/151}, 0x20) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000001c0), 0x3) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, &(0x7f0000000040)=0x54) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYRES32, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e000300000003000000050007"], 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x10, 0x8000, 0x5, 0x7, {{0x6, 0x4, 0x0, 0x16, 0x18, 0x67, 0x0, 0x3, 0x2f, 0x0, @rand_addr=0x64010100, @empty, {[@end]}}}}}) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3) r5 = semget$private(0x0, 0x20000000102, 0x0) semctl$SEM_STAT(r5, 0x2, 0x12, &(0x7f0000000040)=""/177) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000000400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a30"], 0x84}, 0x1, 0x0, 0x0, 0x4d008}, 0x2000c000) 230.862719ms ago: executing program 9 (id=8961): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00'}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, 0x0, 0x0) 0s ago: executing program 9 (id=8962): r0 = socket$netlink(0x10, 0x3, 0xf) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket(0x21, 0x2, 0x10000000000002) sendmmsg(r1, &(0x7f0000007840)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="100000001001000001"], 0x10, 0xe000}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000006e00)=[{0xc, 0x11, 0x6}, {0xc, 0x108, 0x3}], 0x18}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000073c0)}}], 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) uname(&(0x7f0000000040)=""/138) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) gettid() r2 = socket(0x2, 0x2, 0x1) r3 = syz_io_uring_setup(0x418d, &(0x7f0000000480)={0x0, 0xaeb3, 0x2, 0x3, 0x224}, &(0x7f00000002c0), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r3, 0x1e, &(0x7f0000000500)={r2}, 0x1) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x4001, 0x0, @loopback}, 0x1c) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) bpf$MAP_CREATE(0x0, 0x0, 0x50) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x1e3003, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r6 = memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) r7 = dup(r6) r8 = fanotify_init(0x200, 0x101000) fanotify_mark(r8, 0x1, 0x8001021, r7, 0x0) r9 = memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) r10 = dup(r9) write$binfmt_elf32(r10, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c464a030103ff0700000000000002000300040000003e03000038000000d600000097700000fe032000010007000800070000000000030000e9ffffff7f02000000000400000d00000001000080090000000700000084269064e02fda16d3040d75ff1ade9eb0791cfba6ee74ae33d9777c01c6838c14"], 0x79) execveat(r10, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000004140)=ANY=[@ANYBLOB="02000000040000", @ANYBLOB="000000000000000018004a28e495d6e91be6fb1d9a20ff730e5fe4621b87", @ANYBLOB="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", @ANYRESDEC=r0, @ANYBLOB="000000000200"/28], 0x50) kernel console output (not intermixed with test programs): ain found. [ 2694.072463][ T1378] usb 9-1: selecting invalid altsetting 0 [ 2694.108129][ T1378] usbtest 9-1:220.1: probe with driver usbtest failed with error -22 [ 2694.191964][ T1378] usb 9-1: USB disconnect, device number 33 [ 2694.658136][ T1378] usb 9-1: new high-speed USB device number 34 using dummy_hcd [ 2694.838204][ T1378] usb 9-1: Using ep0 maxpacket: 32 [ 2694.890982][ T1378] usb 9-1: config 0 has an invalid interface number: 89 but max is 0 [ 2694.930553][ T1378] usb 9-1: config 0 has no interface number 0 [ 2694.980461][ T1378] usb 9-1: config 0 interface 89 has no altsetting 0 [ 2695.032441][ T1378] usb 9-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 2695.072905][ T1378] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2695.123620][ T1378] usb 9-1: Product: syz [ 2695.123652][ T1378] usb 9-1: Manufacturer: syz [ 2695.123666][ T1378] usb 9-1: SerialNumber: syz [ 2695.140506][ T1378] usb 9-1: config 0 descriptor?? [ 2695.169110][ T1378] em28xx 9-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 2695.169154][ T1378] em28xx 9-1:0.89: Video interface 89 found: bulk [ 2695.268289][T30805] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 2695.418180][T30805] usb 1-1: Using ep0 maxpacket: 16 [ 2695.422034][T30805] usb 1-1: config 0 has no interfaces? [ 2695.423573][T30805] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2695.423598][T30805] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2695.423615][T30805] usb 1-1: Manufacturer: syz [ 2695.437710][T30805] usb 1-1: config 0 descriptor?? [ 2695.727941][ T2771] netlink: 'syz.0.8558': attribute type 1 has an invalid length. [ 2695.804678][ T1378] em28xx 9-1:0.89: unknown em28xx chip ID (0) [ 2696.848813][ T2771] 8021q: adding VLAN 0 to HW filter on device bond2 [ 2697.518538][ T1378] em28xx 9-1:0.89: writing to i2c device at 0xa0 failed (error=-5) [ 2697.549170][ T1378] em28xx 9-1:0.89: failed to read eeprom (err=-5) [ 2697.583584][ T1378] em28xx 9-1:0.89: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-5] [ 2697.713051][ T1378] em28xx 9-1:0.89: Identified as Terratec Grabby (card=67) [ 2697.734953][ T1378] em28xx 9-1:0.89: analog set to bulk mode. [ 2697.779934][ T1377] em28xx 9-1:0.89: Registering V4L2 extension [ 2697.799244][ T1378] usb 9-1: USB disconnect, device number 34 [ 2697.843524][ T1378] em28xx 9-1:0.89: Disconnecting em28xx [ 2698.076795][ T1377] em28xx 9-1:0.89: Config register raw data: 0xffffffed [ 2698.093058][ T1377] em28xx 9-1:0.89: AC97 chip type couldn't be determined [ 2698.126063][ T1377] em28xx 9-1:0.89: No AC97 audio processor [ 2698.216678][ T1377] usb 9-1: Decoder not found [ 2698.256979][ T1377] em28xx 9-1:0.89: failed to create media graph [ 2698.267156][ T1377] em28xx 9-1:0.89: V4L2 device video103 deregistered [ 2698.377815][ T1377] em28xx 9-1:0.89: Registering snapshot button... [ 2698.493679][ T1377] input: em28xx snapshot button as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.89/input/input199 [ 2698.523168][ T1377] em28xx 9-1:0.89: Remote control support is not available for this card. [ 2698.569919][ T1378] em28xx 9-1:0.89: Closing input extension [ 2698.590873][ T1378] em28xx 9-1:0.89: Deregistering snapshot button [ 2698.634794][ T2794] vivid-007: disconnect [ 2698.761765][ T1378] em28xx 9-1:0.89: Freeing device [ 2699.194878][ T2799] netlink: 80 bytes leftover after parsing attributes in process `syz.8.8566'. [ 2699.219154][ T2799] openvswitch: netlink: Flow key attr not present in new flow. [ 2699.311540][ T2787] vivid-007: reconnect [ 2699.393108][T30804] usb 1-1: USB disconnect, device number 85 [ 2699.710776][T21628] usb 5-1: USB disconnect, device number 91 [ 2700.208354][T21628] usb 9-1: new high-speed USB device number 35 using dummy_hcd [ 2700.389659][T21628] usb 9-1: Using ep0 maxpacket: 16 [ 2700.420636][T21628] usb 9-1: config 0 has no interfaces? [ 2700.469649][T30804] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 2700.487601][T21628] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2700.533764][T21628] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2700.577099][T21628] usb 9-1: Manufacturer: syz [ 2700.640463][T21628] usb 9-1: config 0 descriptor?? [ 2700.699588][T30804] usb 5-1: Using ep0 maxpacket: 16 [ 2700.746512][T30804] usb 5-1: config 0 has no interfaces? [ 2700.773910][T30804] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2700.826380][T30804] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2700.876715][T30804] usb 5-1: Manufacturer: syz [ 2700.911955][T30804] usb 5-1: config 0 descriptor?? [ 2700.931498][ T2819] netlink: 'syz.8.8569': attribute type 1 has an invalid length. [ 2701.188335][ T2824] netlink: 'syz.4.8570': attribute type 1 has an invalid length. [ 2703.477639][ T2819] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 2703.563973][ T2824] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 2703.586397][ T2843] loop5: detected capacity change from 0 to 2640 [ 2703.636571][ T2843] buffer_io_error: 6 callbacks suppressed [ 2703.636594][ T2843] Buffer I/O error on dev loop5, logical block 0, async page read [ 2703.671263][ T2843] Buffer I/O error on dev loop5, logical block 0, async page read [ 2703.702436][ T2843] loop5: unable to read partition table [ 2703.728343][ T2843] loop_reread_partitions: partition scan of loop5 (3 ) failed (rc=-5) [ 2703.746366][ T2844] Buffer I/O error on dev loop5, logical block 0, lost async page write [ 2703.782012][ T2844] Buffer I/O error on dev loop5, logical block 1, lost async page write [ 2703.795426][ T2844] Buffer I/O error on dev loop5, logical block 2, lost async page write [ 2703.804438][ T2844] Buffer I/O error on dev loop5, logical block 3, lost async page write [ 2703.814641][ T2844] Buffer I/O error on dev loop5, logical block 4, lost async page write [ 2703.825099][ T2844] Buffer I/O error on dev loop5, logical block 5, lost async page write [ 2703.841024][ T2844] Buffer I/O error on dev loop5, logical block 6, lost async page write [ 2703.851234][ T2844] Buffer I/O error on dev loop5, logical block 7, lost async page write [ 2704.197282][T30799] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2704.471009][T30799] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2704.561950][ T2865] loop6: detected capacity change from 0 to 524288000 [ 2704.629135][ T2861] netdevsim netdevsim9: loading /lib/firmware/. failed with error -22 [ 2704.693014][ T2861] netdevsim netdevsim9: Direct firmware load for . failed with error -22 [ 2704.705606][ T2861] netdevsim netdevsim9: Falling back to sysfs fallback for: . [ 2704.884339][T30799] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2705.135296][T30799] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2705.376761][T30805] usb 9-1: USB disconnect, device number 35 [ 2705.577201][T30799] bridge_slave_1: left allmulticast mode [ 2705.585146][T30799] bridge_slave_1: left promiscuous mode [ 2705.595499][T30799] bridge0: port 2(bridge_slave_1) entered disabled state [ 2705.606870][T30799] bridge_slave_0: left allmulticast mode [ 2705.615613][T30799] bridge_slave_0: left promiscuous mode [ 2705.628440][T30799] bridge0: port 1(bridge_slave_0) entered disabled state [ 2705.639100][ T1378] usb 5-1: USB disconnect, device number 92 [ 2706.772349][T30799] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2706.790330][T30799] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2706.803929][T30799] bond0 (unregistering): Released all slaves [ 2707.916466][T30799] hsr_slave_0: left promiscuous mode [ 2707.953431][T30799] hsr_slave_1: left promiscuous mode [ 2707.991106][T30799] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2708.015472][T30799] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2708.084909][T30799] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2708.132876][T30799] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2708.175082][ T2900] netlink: 132 bytes leftover after parsing attributes in process `syz.4.8587'. [ 2708.331309][T30799] veth1_macvtap: left promiscuous mode [ 2708.341633][T30799] veth0_macvtap: left promiscuous mode [ 2708.356486][T30799] veth1_vlan: left promiscuous mode [ 2708.372107][T30799] veth0_vlan: left promiscuous mode [ 2710.519852][ T5883] usb 9-1: new high-speed USB device number 36 using dummy_hcd [ 2710.708204][ T5883] usb 9-1: Using ep0 maxpacket: 32 [ 2710.723449][ T5883] usb 9-1: config 0 has an invalid interface number: 89 but max is 0 [ 2710.744893][ T5883] usb 9-1: config 0 has no interface number 0 [ 2710.788883][ T5883] usb 9-1: config 0 interface 89 has no altsetting 0 [ 2710.825264][ T5883] usb 9-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 2710.865520][ T1377] usb 5-1: new low-speed USB device number 93 using dummy_hcd [ 2710.908356][ T5883] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2710.916468][ T5883] usb 9-1: Product: syz [ 2710.967747][ T5883] usb 9-1: Manufacturer: syz [ 2710.987294][ T5883] usb 9-1: SerialNumber: syz [ 2711.016462][ T5883] usb 9-1: config 0 descriptor?? [ 2711.029745][ T5883] em28xx 9-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 2711.043675][ T5883] em28xx 9-1:0.89: Video interface 89 found: bulk [ 2711.102848][ T1377] usb 5-1: unable to get BOS descriptor or descriptor too short [ 2711.121355][ T1377] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2711.180556][ T1377] usb 5-1: too many endpoints for config 1 interface 0 altsetting 7: 66, using maximum allowed: 30 [ 2711.224523][ T1377] usb 5-1: config 1 interface 0 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 66 [ 2711.270735][ T1377] usb 5-1: config 1 interface 0 has no altsetting 0 [ 2711.336879][ T1377] usb 5-1: string descriptor 0 read error: -22 [ 2711.587088][ T1377] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2711.604911][ T1377] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2711.644051][ T1377] usb 5-1: bad CDC descriptors [ 2711.800942][ T5883] em28xx 9-1:0.89: unknown em28xx chip ID (0) [ 2712.196905][T30799] team0 (unregistering): Port device team_slave_1 removed [ 2712.304918][T30799] team0 (unregistering): Port device team_slave_0 removed [ 2713.416010][ T5883] em28xx 9-1:0.89: writing to i2c device at 0xa0 failed (error=-5) [ 2713.429306][ T5883] em28xx 9-1:0.89: failed to read eeprom (err=-5) [ 2713.439473][ T5883] em28xx 9-1:0.89: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-5] [ 2713.529823][ T5883] em28xx 9-1:0.89: Identified as Terratec Grabby (card=67) [ 2713.561678][ T5883] em28xx 9-1:0.89: analog set to bulk mode. [ 2713.569374][ T128] em28xx 9-1:0.89: Registering V4L2 extension [ 2713.584025][ T5883] usb 9-1: USB disconnect, device number 36 [ 2713.591677][ T5883] em28xx 9-1:0.89: Disconnecting em28xx [ 2713.672644][ T128] em28xx 9-1:0.89: Config register raw data: 0xffffffed [ 2713.685876][ T128] em28xx 9-1:0.89: AC97 chip type couldn't be determined [ 2713.697573][ T128] em28xx 9-1:0.89: No AC97 audio processor [ 2713.706109][ T128] usb 9-1: Decoder not found [ 2713.715462][ T128] em28xx 9-1:0.89: failed to create media graph [ 2713.723536][ T128] em28xx 9-1:0.89: V4L2 device video103 deregistered [ 2713.770315][ T128] em28xx 9-1:0.89: Registering snapshot button... [ 2713.778857][ T128] input: em28xx snapshot button as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.89/input/input201 [ 2713.820661][ T128] em28xx 9-1:0.89: Remote control support is not available for this card. [ 2713.830789][ T5883] em28xx 9-1:0.89: Closing input extension [ 2713.836679][ T5883] em28xx 9-1:0.89: Deregistering snapshot button [ 2713.882558][ T2896] gtp0: entered promiscuous mode [ 2713.890470][ T5883] em28xx 9-1:0.89: Freeing device [ 2713.902157][ T2896] gtp0: entered allmulticast mode [ 2714.199297][ T2927] QAT: failed to copy from user. [ 2714.848578][ T2931] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2714.857341][ T2931] batadv_slave_0: entered promiscuous mode [ 2714.867355][ T2931] batadv_slave_0: entered allmulticast mode [ 2714.887242][ T2931] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 2715.301183][ T2939] gtp0: entered promiscuous mode [ 2715.306633][ T2939] gtp0: entered allmulticast mode [ 2715.457898][ T5883] usb 5-1: USB disconnect, device number 93 [ 2716.249799][ T5883] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 2716.448709][ T5883] usb 5-1: Using ep0 maxpacket: 16 [ 2716.531531][ T5883] usb 5-1: New USB device found, idVendor=046d, idProduct=08b5, bcdDevice=d7.01 [ 2716.568115][ T5883] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2716.650005][ T5883] usb 5-1: Product: syz [ 2716.666614][ T5883] usb 5-1: Manufacturer: syz [ 2716.690897][ T5883] usb 5-1: SerialNumber: syz [ 2716.708585][ T5883] usb 5-1: config 0 descriptor?? [ 2716.730248][ T5883] pwc: Logitech QuickCam Orbit/Sphere USB webcam detected. [ 2716.911217][ T128] usb 10-1: new high-speed USB device number 40 using dummy_hcd [ 2716.931500][ T5883] pwc: Warning: more than 1 configuration available. [ 2716.960834][ T5883] pwc: Failed to set LED on/off time (-71) [ 2716.980856][ T5883] pwc: send_video_command error -71 [ 2717.002737][ T5883] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 2717.038495][ T5883] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71 [ 2717.077392][ T5883] usb 5-1: USB disconnect, device number 94 [ 2717.098500][ T128] usb 10-1: Using ep0 maxpacket: 16 [ 2717.120603][ T128] usb 10-1: config 0 has no interfaces? [ 2717.161838][ T128] usb 10-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2717.194049][ T128] usb 10-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2717.234377][ T128] usb 10-1: Manufacturer: syz [ 2717.255142][ T128] usb 10-1: config 0 descriptor?? [ 2717.554984][ T2955] netlink: 'syz.9.8599': attribute type 1 has an invalid length. [ 2717.588173][T30805] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 2717.758294][T30805] usb 1-1: device descriptor read/64, error -71 [ 2718.023101][ T2955] 8021q: adding VLAN 0 to HW filter on device bond2 [ 2718.108396][T30805] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 2718.289365][T30805] usb 1-1: device descriptor read/64, error -71 [ 2718.433258][T30805] usb usb1-port1: attempt power cycle [ 2718.645828][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 2718.652579][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 2718.802510][T30805] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 2718.884441][T30805] usb 1-1: device descriptor read/8, error -71 [ 2719.190899][T30805] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 2719.315904][T30805] usb 1-1: device descriptor read/8, error -71 [ 2719.449523][T30805] usb usb1-port1: unable to enumerate USB device [ 2721.023816][ T5883] usb 10-1: USB disconnect, device number 40 [ 2721.796467][ T2992] syz_tun: entered allmulticast mode [ 2721.872892][ T2992] dvmrp6: entered allmulticast mode [ 2726.666858][ T3048] netlink: 156 bytes leftover after parsing attributes in process `syz.9.8619'. [ 2727.280538][ T3060] netlink: 'syz.4.8620': attribute type 29 has an invalid length. [ 2727.299461][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 2727.299620][ T30] audit: type=1326 audit(1767021597.149:2127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3055 comm="syz.9.8621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7958f8f749 code=0x7ffc0000 [ 2727.376411][ T3060] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8620'. [ 2727.504773][ T30] audit: type=1326 audit(1767021597.149:2128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3055 comm="syz.9.8621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7958f8f749 code=0x7ffc0000 [ 2727.732423][ T30] audit: type=1326 audit(1767021597.149:2129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3055 comm="syz.9.8621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7958f8f749 code=0x7ffc0000 [ 2727.831149][ T30] audit: type=1326 audit(1767021597.149:2130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3055 comm="syz.9.8621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7958f8f749 code=0x7ffc0000 [ 2727.878191][T30804] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 2727.939371][ T30] audit: type=1326 audit(1767021597.149:2131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3055 comm="syz.9.8621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7958f8f749 code=0x7ffc0000 [ 2728.061316][T30804] usb 5-1: Using ep0 maxpacket: 32 [ 2728.071070][ T30] audit: type=1326 audit(1767021597.219:2132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3055 comm="syz.9.8621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7958f8f749 code=0x7ffc0000 [ 2728.095319][T30804] usb 5-1: config 0 has an invalid interface number: 89 but max is 0 [ 2728.095352][T30804] usb 5-1: config 0 has no interface number 0 [ 2728.095405][T30804] usb 5-1: config 0 interface 89 has no altsetting 0 [ 2728.181145][T30804] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 2728.210442][T30804] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2728.236233][T30804] usb 5-1: Product: syz [ 2728.258241][ T30] audit: type=1326 audit(1767021597.249:2133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3055 comm="syz.9.8621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7958f8f749 code=0x7ffc0000 [ 2728.264852][T30804] usb 5-1: Manufacturer: syz [ 2728.326286][T30804] usb 5-1: SerialNumber: syz [ 2728.351936][T30804] usb 5-1: config 0 descriptor?? [ 2728.381950][ T30] audit: type=1326 audit(1767021597.249:2134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3055 comm="syz.9.8621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7958f8f749 code=0x7ffc0000 [ 2728.422494][T30804] em28xx 5-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 2728.466191][ T30] audit: type=1326 audit(1767021597.269:2135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3055 comm="syz.9.8621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7958f8f749 code=0x7ffc0000 [ 2728.466209][T30804] em28xx 5-1:0.89: Video interface 89 found: bulk [ 2728.613081][ T30] audit: type=1326 audit(1767021597.269:2136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3055 comm="syz.9.8621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7958f8f749 code=0x7ffc0000 [ 2728.992278][T30804] em28xx 5-1:0.89: unknown em28xx chip ID (0) [ 2730.548475][ T5883] usb 1-1: new low-speed USB device number 90 using dummy_hcd [ 2730.642636][T30804] em28xx 5-1:0.89: writing to i2c device at 0xa0 failed (error=-5) [ 2730.742681][T30804] em28xx 5-1:0.89: failed to read eeprom (err=-5) [ 2730.839627][T30804] em28xx 5-1:0.89: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-5] [ 2730.892260][ T5883] usb 1-1: unable to get BOS descriptor or descriptor too short [ 2730.918714][ T5883] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2730.948149][T30804] em28xx 5-1:0.89: Identified as Terratec Grabby (card=67) [ 2730.955805][ T5883] usb 1-1: too many endpoints for config 1 interface 0 altsetting 7: 66, using maximum allowed: 30 [ 2730.986855][T30804] em28xx 5-1:0.89: analog set to bulk mode. [ 2730.998410][T29223] em28xx 5-1:0.89: Registering V4L2 extension [ 2731.008409][ T5883] usb 1-1: config 1 interface 0 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 66 [ 2731.031870][T30804] usb 5-1: USB disconnect, device number 95 [ 2731.058675][T30804] em28xx 5-1:0.89: Disconnecting em28xx [ 2731.071366][ T5883] usb 1-1: config 1 interface 0 has no altsetting 0 [ 2731.088921][ T24] usb 10-1: new high-speed USB device number 41 using dummy_hcd [ 2731.126913][ T5883] usb 1-1: string descriptor 0 read error: -22 [ 2731.147286][ T5883] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2731.187406][ T5883] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2731.235441][ T5883] usb 1-1: bad CDC descriptors [ 2731.252284][ T24] usb 10-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 2731.272983][T29223] em28xx 5-1:0.89: Config register raw data: 0xffffffed [ 2731.288288][T29223] em28xx 5-1:0.89: AC97 chip type couldn't be determined [ 2731.303279][T29223] em28xx 5-1:0.89: No AC97 audio processor [ 2731.309430][ T24] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2731.344949][T29223] usb 5-1: Decoder not found [ 2731.358249][T29223] em28xx 5-1:0.89: failed to create media graph [ 2731.372125][ T24] usb 10-1: Product: syz [ 2731.384092][T29223] em28xx 5-1:0.89: V4L2 device video103 deregistered [ 2731.411705][T29223] em28xx 5-1:0.89: Registering snapshot button... [ 2731.444292][T29223] input: em28xx snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.89/input/input202 [ 2731.459611][ T24] usb 10-1: Manufacturer: syz [ 2731.465505][ T24] usb 10-1: SerialNumber: syz [ 2731.513034][ T24] usb 10-1: config 0 descriptor?? [ 2731.513037][T29223] em28xx 5-1:0.89: Remote control support is not available for this card. [ 2731.563625][ T24] gspca_main: sonixb-2.14.0 probing 0c45:6005 [ 2731.581973][T30804] em28xx 5-1:0.89: Closing input extension [ 2731.600509][T30804] em28xx 5-1:0.89: Deregistering snapshot button [ 2731.684188][T30804] em28xx 5-1:0.89: Freeing device [ 2731.974970][ T24] input: sonixb as /devices/platform/dummy_hcd.9/usb10/10-1/input/input203 [ 2732.341321][ T3107] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2732.391822][ T3107] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2732.663450][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 2732.663466][ T30] audit: type=1326 audit(1767021602.509:2147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3108 comm="syz.4.8634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bde78f749 code=0x7ffc0000 [ 2732.764401][ T30] audit: type=1326 audit(1767021602.549:2148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3108 comm="syz.4.8634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bde78f749 code=0x7ffc0000 [ 2732.806769][ T30] audit: type=1326 audit(1767021602.549:2149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3108 comm="syz.4.8634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8bde78f749 code=0x7ffc0000 [ 2732.833315][ T30] audit: type=1326 audit(1767021602.559:2150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3108 comm="syz.4.8634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bde78f749 code=0x7ffc0000 [ 2732.864573][ T30] audit: type=1326 audit(1767021602.559:2151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3108 comm="syz.4.8634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8bde78f749 code=0x7ffc0000 [ 2732.916125][ T30] audit: type=1326 audit(1767021602.559:2152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3108 comm="syz.4.8634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bde78f749 code=0x7ffc0000 [ 2733.022030][ T30] audit: type=1326 audit(1767021602.569:2153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3108 comm="syz.4.8634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f8bde78f749 code=0x7ffc0000 [ 2733.138587][ T30] audit: type=1326 audit(1767021602.569:2154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3108 comm="syz.4.8634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bde78f749 code=0x7ffc0000 [ 2733.185755][ T30] audit: type=1326 audit(1767021602.569:2155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3108 comm="syz.4.8634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8bde78f749 code=0x7ffc0000 [ 2733.214603][ T30] audit: type=1326 audit(1767021602.609:2156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3108 comm="syz.4.8634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bde78f749 code=0x7ffc0000 [ 2733.565406][ T24] usb 1-1: USB disconnect, device number 90 [ 2733.866994][ T3121] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8637'. [ 2734.048451][ T24] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 2734.218150][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 2734.240370][ T24] usb 1-1: config 0 has an invalid interface number: 89 but max is 0 [ 2734.257920][ T24] usb 1-1: config 0 has no interface number 0 [ 2734.283883][ T24] usb 1-1: config 0 interface 89 has no altsetting 0 [ 2734.317086][ T24] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 2734.353340][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2734.383038][ T24] usb 1-1: Product: syz [ 2734.393870][ T24] usb 1-1: Manufacturer: syz [ 2734.408221][ T24] usb 1-1: SerialNumber: syz [ 2734.431365][ T24] usb 1-1: config 0 descriptor?? [ 2734.461126][ T24] em28xx 1-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 2734.488997][ T24] em28xx 1-1:0.89: Video interface 89 found: bulk [ 2734.537243][T29223] usb 10-1: USB disconnect, device number 41 [ 2734.709149][ T3129] netlink: 84 bytes leftover after parsing attributes in process `syz.8.8640'. [ 2735.034158][ T3138] gtp2: entered promiscuous mode [ 2735.045057][ T3138] gtp2: entered allmulticast mode [ 2735.061348][ T1378] usb 9-1: new high-speed USB device number 37 using dummy_hcd [ 2735.080588][ T24] em28xx 1-1:0.89: unknown em28xx chip ID (0) [ 2735.238335][ T1378] usb 9-1: Using ep0 maxpacket: 32 [ 2735.259729][ T1378] usb 9-1: config 0 has an invalid interface number: 89 but max is 0 [ 2735.270909][ T1378] usb 9-1: config 0 has no interface number 0 [ 2735.281724][ T1378] usb 9-1: config 0 interface 89 has no altsetting 0 [ 2735.300428][ T1378] usb 9-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 2735.311347][ T1378] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2735.322340][ T1378] usb 9-1: Product: syz [ 2735.326882][ T1378] usb 9-1: Manufacturer: syz [ 2735.332950][ T1378] usb 9-1: SerialNumber: syz [ 2735.349352][ T1378] usb 9-1: config 0 descriptor?? [ 2735.372960][ T1378] em28xx 9-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 2735.387742][ T1378] em28xx 9-1:0.89: Video interface 89 found: bulk [ 2735.983955][ T1378] em28xx 9-1:0.89: unknown em28xx chip ID (0) [ 2736.386156][ T24] em28xx 1-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 2736.429175][ T24] em28xx 1-1:0.89: board has no eeprom [ 2736.560328][ T24] em28xx 1-1:0.89: Identified as Terratec Grabby (card=67) [ 2736.598262][ T24] em28xx 1-1:0.89: analog set to bulk mode. [ 2736.636242][T23245] em28xx 1-1:0.89: Registering V4L2 extension [ 2736.665973][ T24] usb 1-1: USB disconnect, device number 91 [ 2736.667086][ T24] em28xx 1-1:0.89: Disconnecting em28xx [ 2736.974432][ T1378] em28xx 9-1:0.89: writing to i2c device at 0xa0 failed (error=-5) [ 2736.988183][ T1378] em28xx 9-1:0.89: failed to read eeprom (err=-5) [ 2737.043485][ T1378] em28xx 9-1:0.89: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-5] [ 2737.093582][T23245] em28xx 1-1:0.89: Config register raw data: 0xffffffed [ 2737.148097][T23245] em28xx 1-1:0.89: AC97 chip type couldn't be determined [ 2737.168144][ T1378] em28xx 9-1:0.89: Identified as Terratec Grabby (card=67) [ 2737.214250][ T1378] em28xx 9-1:0.89: analog set to bulk mode. [ 2737.220849][T23245] em28xx 1-1:0.89: No AC97 audio processor [ 2737.258284][ T3162] sctp: [Deprecated]: syz.9.8647 (pid 3162) Use of int in maxseg socket option. [ 2737.258284][ T3162] Use struct sctp_assoc_value instead [ 2737.304327][T23245] usb 1-1: Decoder not found [ 2737.336684][ T1378] usb 9-1: USB disconnect, device number 37 [ 2737.353976][T23245] em28xx 1-1:0.89: failed to create media graph [ 2737.379592][ T1378] em28xx 9-1:0.89: Disconnecting em28xx [ 2737.442881][T23245] em28xx 1-1:0.89: V4L2 device video103 deregistered [ 2737.449191][T29223] usb 5-1: new low-speed USB device number 96 using dummy_hcd [ 2737.529831][T23245] em28xx 1-1:0.89: Registering snapshot button... [ 2737.620616][T23245] input: em28xx snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.89/input/input204 [ 2737.648688][T29223] usb 5-1: unable to get BOS descriptor or descriptor too short [ 2737.688573][T29223] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2737.715964][T29223] usb 5-1: too many endpoints for config 1 interface 0 altsetting 7: 66, using maximum allowed: 30 [ 2737.736927][T29223] usb 5-1: config 1 interface 0 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 66 [ 2737.774768][T29223] usb 5-1: config 1 interface 0 has no altsetting 0 [ 2737.791916][T23245] em28xx 1-1:0.89: Remote control support is not available for this card. [ 2737.838325][T29223] usb 5-1: string descriptor 0 read error: -22 [ 2737.847777][T29223] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2737.892593][ T1377] em28xx 9-1:0.89: Registering V4L2 extension [ 2737.931349][T29223] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2737.960539][T29223] usb 5-1: bad CDC descriptors [ 2738.123066][ T1377] em28xx 9-1:0.89: Config register raw data: 0xffffffed [ 2738.206610][ T1377] em28xx 9-1:0.89: AC97 chip type couldn't be determined [ 2738.379948][ T1377] em28xx 9-1:0.89: No AC97 audio processor [ 2738.533974][ T1377] usb 9-1: Decoder not found [ 2738.654750][ T1377] em28xx 9-1:0.89: failed to create media graph [ 2738.773651][T15493] usb 10-1: new high-speed USB device number 42 using dummy_hcd [ 2738.801740][ T1377] em28xx 9-1:0.89: V4L2 device video103 deregistered [ 2739.132726][T15493] usb 10-1: Using ep0 maxpacket: 16 [ 2739.254384][ T1377] em28xx 9-1:0.89: Registering snapshot button... [ 2739.307325][T15493] usb 10-1: config 0 has no interfaces? [ 2739.364076][ T1377] input: em28xx snapshot button as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.89/input/input205 [ 2739.391634][T15493] usb 10-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2739.558211][T15493] usb 10-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2739.566857][ T1377] em28xx 9-1:0.89: Remote control support is not available for this card. [ 2739.667741][T15493] usb 10-1: Manufacturer: syz [ 2739.682451][ T24] em28xx 1-1:0.89: Closing input extension [ 2739.700981][ T24] em28xx 1-1:0.89: Deregistering snapshot button [ 2739.710541][T15493] usb 10-1: config 0 descriptor?? [ 2739.797306][ T1378] em28xx 9-1:0.89: Closing input extension [ 2739.806270][ T24] em28xx 1-1:0.89: Freeing device [ 2739.811600][ T1378] em28xx 9-1:0.89: Deregistering snapshot button [ 2739.856683][ T1378] em28xx 9-1:0.89: Freeing device [ 2739.995196][ T3178] netlink: 'syz.9.8650': attribute type 1 has an invalid length. [ 2740.108312][ T24] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 2740.153146][ T3178] 8021q: adding VLAN 0 to HW filter on device bond3 [ 2740.168497][ T1378] usb 9-1: new high-speed USB device number 38 using dummy_hcd [ 2740.248187][ T24] usb 1-1: device descriptor read/64, error -71 [ 2740.318337][ T1378] usb 9-1: Using ep0 maxpacket: 16 [ 2740.348301][ T1378] usb 9-1: config 0 has no interfaces? [ 2740.389855][ T1378] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2740.403015][ T3178] vlan2: entered allmulticast mode [ 2740.454777][ T3178] bond3: entered allmulticast mode [ 2740.474396][ T1378] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2740.518945][ T24] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 2740.562032][ T1378] usb 9-1: Manufacturer: syz [ 2740.577502][T29223] usb 5-1: USB disconnect, device number 96 [ 2740.655361][ T1378] usb 9-1: config 0 descriptor?? [ 2740.864631][ T3189] FAULT_INJECTION: forcing a failure. [ 2740.864631][ T3189] name failslab, interval 1, probability 0, space 0, times 0 [ 2740.899322][ T3189] CPU: 1 UID: 0 PID: 3189 Comm: syz.0.8652 Tainted: G L syzkaller #0 PREEMPT(full) [ 2740.899358][ T3189] Tainted: [L]=SOFTLOCKUP [ 2740.899367][ T3189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2740.899381][ T3189] Call Trace: [ 2740.899392][ T3189] [ 2740.899403][ T3189] dump_stack_lvl+0xe8/0x150 [ 2740.899438][ T3189] should_fail_ex+0x414/0x560 [ 2740.899479][ T3189] should_failslab+0xa8/0x100 [ 2740.899508][ T3189] kmem_cache_alloc_noprof+0x88/0x710 [ 2740.899543][ T3189] ? ksys_write+0x22a/0x250 [ 2740.899562][ T3189] ? getname_flags+0xb8/0x540 [ 2740.899593][ T3189] getname_flags+0xb8/0x540 [ 2740.899619][ T3189] __x64_sys_unlinkat+0xac/0xf0 [ 2740.899642][ T3189] do_syscall_64+0xec/0xf80 [ 2740.899665][ T3189] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2740.899687][ T3189] ? clear_bhb_loop+0x60/0xb0 [ 2740.899712][ T3189] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2740.899734][ T3189] RIP: 0033:0x7fd2e598f749 [ 2740.899755][ T3189] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2740.899775][ T3189] RSP: 002b:00007fd2e67d8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000107 [ 2740.899800][ T3189] RAX: ffffffffffffffda RBX: 00007fd2e5be5fa0 RCX: 00007fd2e598f749 [ 2740.899817][ T3189] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: ffffffffffffff9c [ 2740.899844][ T3189] RBP: 00007fd2e67d8090 R08: 0000000000000000 R09: 0000000000000000 [ 2740.899859][ T3189] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2740.899873][ T3189] R13: 00007fd2e5be6038 R14: 00007fd2e5be5fa0 R15: 00007fd2e5d0fa28 [ 2740.899909][ T3189] [ 2741.781030][T29223] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 2741.809033][ T24] usb 9-1: USB disconnect, device number 38 [ 2741.988877][T29223] usb 5-1: Using ep0 maxpacket: 16 [ 2742.035893][T29223] usb 5-1: config 0 has no interfaces? [ 2742.083211][T29223] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2742.138238][T29223] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2742.183995][T29223] usb 5-1: Manufacturer: syz [ 2742.225328][T29223] usb 5-1: config 0 descriptor?? [ 2742.566625][ T3199] netlink: 'syz.4.8653': attribute type 1 has an invalid length. [ 2742.863558][ T3199] 8021q: adding VLAN 0 to HW filter on device bond10 [ 2742.960975][ T1378] usb 10-1: USB disconnect, device number 42 [ 2743.200361][ T3216] netlink: 84 bytes leftover after parsing attributes in process `syz.6.8659'. [ 2743.498296][ T1378] usb 10-1: new high-speed USB device number 43 using dummy_hcd [ 2743.678154][ T1378] usb 10-1: Using ep0 maxpacket: 32 [ 2743.697871][ T1378] usb 10-1: config 0 has an invalid interface number: 89 but max is 0 [ 2743.722341][ T1378] usb 10-1: config 0 has no interface number 0 [ 2743.740120][ T1378] usb 10-1: config 0 interface 89 has no altsetting 0 [ 2743.760811][ T1378] usb 10-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 2743.778315][ T1378] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2743.799875][ T1378] usb 10-1: Product: syz [ 2743.811147][ T1378] usb 10-1: Manufacturer: syz [ 2743.825693][ T1378] usb 10-1: SerialNumber: syz [ 2743.850254][ T1378] usb 10-1: config 0 descriptor?? [ 2743.868602][ T1378] em28xx 10-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 2743.890506][ T1378] em28xx 10-1:0.89: Video interface 89 found: bulk [ 2744.394737][ T3228] loop5: detected capacity change from 0 to 7 [ 2744.432437][ T3228] Invalid logical block size (6) [ 2744.469005][ T1378] em28xx 10-1:0.89: unknown em28xx chip ID (0) [ 2744.713428][ T24] usb 5-1: USB disconnect, device number 97 [ 2745.689952][ T1378] em28xx 10-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 2745.709602][ T1378] em28xx 10-1:0.89: board has no eeprom [ 2745.865719][ T1378] em28xx 10-1:0.89: Identified as Terratec Grabby (card=67) [ 2745.884125][ T1378] em28xx 10-1:0.89: analog set to bulk mode. [ 2745.894265][T15493] em28xx 10-1:0.89: Registering V4L2 extension [ 2745.968632][ T1378] usb 10-1: USB disconnect, device number 43 [ 2746.008164][T29223] usb 5-1: new low-speed USB device number 98 using dummy_hcd [ 2746.107894][T15493] em28xx 10-1:0.89: reading from i2c device at 0x4a failed (error=-19) [ 2746.202899][ T1378] em28xx 10-1:0.89: Disconnecting em28xx [ 2746.214154][T29223] usb 5-1: unable to get BOS descriptor or descriptor too short [ 2746.234461][T29223] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2746.306455][T29223] usb 5-1: too many endpoints for config 1 interface 0 altsetting 7: 66, using maximum allowed: 30 [ 2746.388142][T29223] usb 5-1: config 1 interface 0 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 66 [ 2746.438311][T15493] em28xx 10-1:0.89: Config register raw data: 0xffffffed [ 2746.445733][T15493] em28xx 10-1:0.89: AC97 chip type couldn't be determined [ 2746.458647][T29223] usb 5-1: config 1 interface 0 has no altsetting 0 [ 2746.618965][T29223] usb 5-1: string descriptor 0 read error: -22 [ 2746.625796][T29223] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2746.676253][T29223] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2746.753368][T15493] em28xx 10-1:0.89: No AC97 audio processor [ 2746.812765][T29223] usb 5-1: bad CDC descriptors [ 2746.829307][T15493] usb 10-1: Decoder not found [ 2746.907612][T15493] em28xx 10-1:0.89: failed to create media graph [ 2747.245118][T15493] em28xx 10-1:0.89: V4L2 device video103 deregistered [ 2747.523844][T15493] em28xx 10-1:0.89: Registering snapshot button... [ 2747.916254][T15493] input: em28xx snapshot button as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.89/input/input206 [ 2748.581108][T15493] em28xx 10-1:0.89: Remote control support is not available for this card. [ 2748.637599][ T1378] em28xx 10-1:0.89: Closing input extension [ 2748.677966][ T1378] em28xx 10-1:0.89: Deregistering snapshot button [ 2748.821173][ T1378] em28xx 10-1:0.89: Freeing device [ 2749.017746][ T3268] gtp3: entered promiscuous mode [ 2749.042446][ T3268] gtp3: entered allmulticast mode [ 2749.418924][ T1378] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 2749.540829][ T3277] gtp1: entered promiscuous mode [ 2749.576763][ T3277] gtp1: entered allmulticast mode [ 2749.588446][ T1378] usb 1-1: Using ep0 maxpacket: 16 [ 2749.627090][ T1378] usb 1-1: config 0 has no interfaces? [ 2749.665550][ T1378] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2749.726804][ T1378] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2749.784932][ T1378] usb 1-1: Manufacturer: syz [ 2749.797842][ T1378] usb 1-1: config 0 descriptor?? [ 2749.832066][ T1378] usb 5-1: USB disconnect, device number 98 [ 2750.118879][ T3273] netlink: 'syz.0.8669': attribute type 1 has an invalid length. [ 2750.416545][ T3273] 8021q: adding VLAN 0 to HW filter on device bond3 [ 2750.459834][ T3291] netlink: 12 bytes leftover after parsing attributes in process `syz.8.8673'. [ 2750.528967][ T3282] team0: entered promiscuous mode [ 2750.559650][ T3282] team_slave_0: entered promiscuous mode [ 2750.600219][ T3282] team_slave_1: entered promiscuous mode [ 2750.649024][ T3282] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 2750.696843][ T3282] team0: left promiscuous mode [ 2750.725009][ T3282] team_slave_0: left promiscuous mode [ 2750.776973][ T3282] team_slave_1: left promiscuous mode [ 2750.807572][ T3294] fuse: Unknown parameter 'f' [ 2751.312031][ T3287] vlan2: entered allmulticast mode [ 2751.354182][ T3296] netlink: 84 bytes leftover after parsing attributes in process `syz.4.8674'. [ 2751.363657][ T3287] bond3: entered allmulticast mode [ 2751.438084][ T359] Bluetooth: hci3: command 0x0406 tx timeout [ 2751.718132][T29223] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 2751.898176][T29223] usb 5-1: Using ep0 maxpacket: 32 [ 2751.921854][T29223] usb 5-1: config 0 has an invalid interface number: 89 but max is 0 [ 2751.975494][T29223] usb 5-1: config 0 has no interface number 0 [ 2752.038177][T29223] usb 5-1: config 0 interface 89 has no altsetting 0 [ 2752.116615][T29223] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 2752.162256][T29223] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2752.235610][T29223] usb 5-1: Product: syz [ 2752.265812][T29223] usb 5-1: Manufacturer: syz [ 2752.284855][T29223] usb 5-1: SerialNumber: syz [ 2752.349815][T29223] usb 5-1: config 0 descriptor?? [ 2752.387780][T29223] em28xx 5-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 2752.494536][T29223] em28xx 5-1:0.89: Video interface 89 found: bulk [ 2752.979300][T29223] em28xx 5-1:0.89: unknown em28xx chip ID (0) [ 2753.224443][ T3312] netlink: 12 bytes leftover after parsing attributes in process `syz.9.8679'. [ 2753.268785][ T3312] tun0: tun_chr_ioctl cmd 1074025677 [ 2753.288395][ T3312] tun0: linktype set to 280 [ 2753.541403][T23245] usb 1-1: USB disconnect, device number 94 [ 2753.549221][ T1378] usb 10-1: new high-speed USB device number 44 using dummy_hcd [ 2753.698181][ T1378] usb 10-1: device descriptor read/64, error -71 [ 2753.825270][T29223] em28xx 5-1:0.89: writing to i2c device at 0xa0 failed (error=-5) [ 2753.857414][T29223] em28xx 5-1:0.89: failed to read eeprom (err=-5) [ 2753.867398][T29223] em28xx 5-1:0.89: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-5] [ 2753.938739][T29223] em28xx 5-1:0.89: Identified as Terratec Grabby (card=67) [ 2753.944604][ T1378] usb 10-1: new high-speed USB device number 45 using dummy_hcd [ 2753.980273][T29223] em28xx 5-1:0.89: analog set to bulk mode. [ 2754.009163][ T128] em28xx 5-1:0.89: Registering V4L2 extension [ 2754.039331][T29223] usb 5-1: USB disconnect, device number 99 [ 2754.053621][T29223] em28xx 5-1:0.89: Disconnecting em28xx [ 2754.125229][ T3319] FAULT_INJECTION: forcing a failure. [ 2754.125229][ T3319] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2754.148222][ T1378] usb 10-1: device descriptor read/64, error -71 [ 2754.181164][ T3319] CPU: 1 UID: 0 PID: 3319 Comm: syz.0.8682 Tainted: G L syzkaller #0 PREEMPT(full) [ 2754.181202][ T3319] Tainted: [L]=SOFTLOCKUP [ 2754.181211][ T3319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2754.181227][ T3319] Call Trace: [ 2754.181236][ T3319] [ 2754.181247][ T3319] dump_stack_lvl+0xe8/0x150 [ 2754.181283][ T3319] should_fail_ex+0x414/0x560 [ 2754.181323][ T3319] _copy_to_user+0x31/0xb0 [ 2754.181353][ T3319] simple_read_from_buffer+0xe1/0x170 [ 2754.181387][ T3319] proc_fail_nth_read+0x1b3/0x220 [ 2754.181415][ T3319] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2754.181459][ T3319] ? rw_verify_area+0x2a6/0x4d0 [ 2754.181494][ T3319] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2754.181520][ T3319] vfs_read+0x200/0xa30 [ 2754.181540][ T3319] ? fdget_pos+0x247/0x320 [ 2754.181573][ T3319] ? __pfx___mutex_lock+0x10/0x10 [ 2754.181599][ T3319] ? __pfx_vfs_read+0x10/0x10 [ 2754.181622][ T3319] ? __fget_files+0x2a/0x420 [ 2754.181653][ T3319] ? __fget_files+0x3a0/0x420 [ 2754.181687][ T3319] ? __fget_files+0x2a/0x420 [ 2754.181725][ T3319] ksys_read+0x145/0x250 [ 2754.181750][ T3319] ? __pfx_ksys_read+0x10/0x10 [ 2754.181783][ T3319] do_syscall_64+0xec/0xf80 [ 2754.181806][ T3319] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2754.181828][ T3319] ? trace_irq_disable+0x37/0x100 [ 2754.181858][ T3319] ? clear_bhb_loop+0x60/0xb0 [ 2754.181886][ T3319] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2754.181908][ T3319] RIP: 0033:0x7fd2e598e15c [ 2754.181929][ T3319] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 2754.181949][ T3319] RSP: 002b:00007fd2e67d8030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2754.181973][ T3319] RAX: ffffffffffffffda RBX: 00007fd2e5be5fa0 RCX: 00007fd2e598e15c [ 2754.181991][ T3319] RDX: 000000000000000f RSI: 00007fd2e67d80a0 RDI: 0000000000000004 [ 2754.182005][ T3319] RBP: 00007fd2e67d8090 R08: 0000000000000000 R09: 0000000000000000 [ 2754.182020][ T3319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2754.182034][ T3319] R13: 00007fd2e5be6038 R14: 00007fd2e5be5fa0 R15: 00007fd2e5d0fa28 [ 2754.182070][ T3319] [ 2754.199417][ T128] em28xx 5-1:0.89: Config register raw data: 0xffffffed [ 2754.270906][ T1378] usb usb10-port1: attempt power cycle [ 2754.525587][ T128] em28xx 5-1:0.89: AC97 chip type couldn't be determined [ 2754.551999][ T3324] FAULT_INJECTION: forcing a failure. [ 2754.551999][ T3324] name failslab, interval 1, probability 0, space 0, times 0 [ 2754.571318][ T3324] CPU: 1 UID: 0 PID: 3324 Comm: syz.8.8684 Tainted: G L syzkaller #0 PREEMPT(full) [ 2754.571353][ T3324] Tainted: [L]=SOFTLOCKUP [ 2754.571363][ T3324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2754.571376][ T3324] Call Trace: [ 2754.571385][ T3324] [ 2754.571395][ T3324] dump_stack_lvl+0xe8/0x150 [ 2754.571426][ T3324] should_fail_ex+0x414/0x560 [ 2754.571466][ T3324] should_failslab+0xa8/0x100 [ 2754.571494][ T3324] __kmalloc_noprof+0xdf/0x800 [ 2754.571513][ T3324] ? kfree+0x4d/0x660 [ 2754.571540][ T3324] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 2754.571576][ T3324] tomoyo_realpath_from_path+0xe3/0x5d0 [ 2754.571607][ T3324] ? tomoyo_domain+0xd8/0x130 [ 2754.571652][ T3324] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 2754.571675][ T3324] tomoyo_path_number_perm+0x1e8/0x5a0 [ 2754.571703][ T3324] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2754.571725][ T3324] ? __lock_acquire+0x6b6/0x2cf0 [ 2754.571765][ T3324] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 2754.571812][ T3324] ? __fget_files+0x2a/0x420 [ 2754.571842][ T3324] ? __fget_files+0x2a/0x420 [ 2754.571869][ T3324] ? __fget_files+0x3a0/0x420 [ 2754.571896][ T3324] ? __fget_files+0x2a/0x420 [ 2754.571928][ T3324] security_file_ioctl+0xcb/0x2d0 [ 2754.571954][ T3324] __se_sys_ioctl+0x47/0x170 [ 2754.571991][ T3324] do_syscall_64+0xec/0xf80 [ 2754.572014][ T3324] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2754.572036][ T3324] ? trace_irq_disable+0x37/0x100 [ 2754.572066][ T3324] ? clear_bhb_loop+0x60/0xb0 [ 2754.572094][ T3324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2754.572116][ T3324] RIP: 0033:0x7fc08118f749 [ 2754.572137][ T3324] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2754.572156][ T3324] RSP: 002b:00007fc0820d9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2754.572180][ T3324] RAX: ffffffffffffffda RBX: 00007fc0813e5fa0 RCX: 00007fc08118f749 [ 2754.572197][ T3324] RDX: 00002000000001c0 RSI: 00000000c0405602 RDI: 0000000000000003 [ 2754.572212][ T3324] RBP: 00007fc0820d9090 R08: 0000000000000000 R09: 0000000000000000 [ 2754.572227][ T3324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2754.572241][ T3324] R13: 00007fc0813e6038 R14: 00007fc0813e5fa0 R15: 00007fc08150fa28 [ 2754.572277][ T3324] [ 2754.572369][ T3324] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2754.591758][ T128] em28xx 5-1:0.89: No AC97 audio processor [ 2754.928640][ T1378] usb 10-1: new high-speed USB device number 46 using dummy_hcd [ 2754.948908][ T1378] usb 10-1: device descriptor read/8, error -71 [ 2755.057440][ T128] usb 5-1: Decoder not found [ 2755.116350][ T128] em28xx 5-1:0.89: failed to create media graph [ 2755.125134][ T3331] syz_tun: entered allmulticast mode [ 2755.131960][ T128] em28xx 5-1:0.89: V4L2 device video103 deregistered [ 2755.159789][ T3331] dvmrp6: entered allmulticast mode [ 2755.168447][ T128] em28xx 5-1:0.89: Registering snapshot button... [ 2755.208230][ T1378] usb 10-1: new high-speed USB device number 47 using dummy_hcd [ 2755.228346][ T128] input: em28xx snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.89/input/input208 [ 2755.251615][ T1378] usb 10-1: device descriptor read/8, error -71 [ 2755.277638][ T128] em28xx 5-1:0.89: Remote control support is not available for this card. [ 2755.296497][T29223] em28xx 5-1:0.89: Closing input extension [ 2755.321576][T29223] em28xx 5-1:0.89: Deregistering snapshot button [ 2755.357834][T29223] em28xx 5-1:0.89: Freeing device [ 2755.364257][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 2755.364276][ T30] audit: type=1326 audit(1767021625.209:2164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3332 comm="syz.8.8687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc08118f749 code=0x7ffc0000 [ 2755.395442][ T1378] usb usb10-port1: unable to enumerate USB device [ 2755.404562][ T3338] netlink: 24 bytes leftover after parsing attributes in process `syz.6.8688'. [ 2755.456773][ T30] audit: type=1326 audit(1767021625.269:2165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3332 comm="syz.8.8687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc08118f749 code=0x7ffc0000 [ 2755.529966][ T30] audit: type=1326 audit(1767021625.269:2166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3332 comm="syz.8.8687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc08118f749 code=0x7ffc0000 [ 2755.580928][ T30] audit: type=1326 audit(1767021625.269:2167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3332 comm="syz.8.8687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc08118f749 code=0x7ffc0000 [ 2755.659441][ T30] audit: type=1326 audit(1767021625.269:2168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3332 comm="syz.8.8687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc08118f749 code=0x7ffc0000 [ 2755.712220][ T30] audit: type=1326 audit(1767021625.269:2169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3332 comm="syz.8.8687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fc08118f749 code=0x7ffc0000 [ 2755.765944][ T30] audit: type=1326 audit(1767021625.269:2170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3332 comm="syz.8.8687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc08118f749 code=0x7ffc0000 [ 2755.789192][ T30] audit: type=1326 audit(1767021625.269:2171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3332 comm="syz.8.8687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc08118f749 code=0x7ffc0000 [ 2755.816544][ T30] audit: type=1326 audit(1767021625.269:2172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3332 comm="syz.8.8687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc08118f749 code=0x7ffc0000 [ 2755.842118][ T30] audit: type=1326 audit(1767021625.279:2173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3332 comm="syz.8.8687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc08118f749 code=0x7ffc0000 [ 2756.987658][ T3361] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8695'. [ 2757.308203][T23245] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 2757.490650][T23245] usb 5-1: Using ep0 maxpacket: 32 [ 2757.513880][T23245] usb 5-1: config 0 has an invalid interface number: 89 but max is 0 [ 2757.547317][T23245] usb 5-1: config 0 has no interface number 0 [ 2757.571772][T23245] usb 5-1: config 0 interface 89 has no altsetting 0 [ 2757.607804][T23245] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 2757.653859][T23245] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2757.683840][T23245] usb 5-1: Product: syz [ 2757.698326][T23245] usb 5-1: Manufacturer: syz [ 2757.723542][T23245] usb 5-1: SerialNumber: syz [ 2757.752433][T23245] usb 5-1: config 0 descriptor?? [ 2757.781764][T23245] em28xx 5-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 2757.820052][T23245] em28xx 5-1:0.89: Video interface 89 found: bulk [ 2758.118371][ T1378] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 2758.348355][ T1378] usb 1-1: Using ep0 maxpacket: 32 [ 2758.373851][ T1378] usb 1-1: config 0 has an invalid interface number: 89 but max is 0 [ 2758.394265][T23245] em28xx 5-1:0.89: unknown em28xx chip ID (0) [ 2758.404803][ T1378] usb 1-1: config 0 has no interface number 0 [ 2758.427511][ T1378] usb 1-1: config 0 interface 89 has no altsetting 0 [ 2758.474227][ T1378] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 2758.506672][ T1378] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2758.525303][ T1378] usb 1-1: Product: syz [ 2758.535432][ T1378] usb 1-1: Manufacturer: syz [ 2758.547546][ T1378] usb 1-1: SerialNumber: syz [ 2758.616324][ T1378] usb 1-1: config 0 descriptor?? [ 2758.653915][ T1378] em28xx 1-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 2758.689109][ T1378] em28xx 1-1:0.89: Video interface 89 found: bulk [ 2758.838993][ T3373] syz_tun: entered allmulticast mode [ 2758.880744][ T3373] dvmrp6: entered allmulticast mode [ 2759.011809][ T3375] FAULT_INJECTION: forcing a failure. [ 2759.011809][ T3375] name failslab, interval 1, probability 0, space 0, times 0 [ 2759.026471][ T3375] CPU: 1 UID: 0 PID: 3375 Comm: syz.6.8700 Tainted: G L syzkaller #0 PREEMPT(full) [ 2759.026507][ T3375] Tainted: [L]=SOFTLOCKUP [ 2759.026515][ T3375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2759.026530][ T3375] Call Trace: [ 2759.026543][ T3375] [ 2759.026553][ T3375] dump_stack_lvl+0xe8/0x150 [ 2759.026588][ T3375] should_fail_ex+0x414/0x560 [ 2759.026627][ T3375] should_failslab+0xa8/0x100 [ 2759.026656][ T3375] __kvmalloc_node_noprof+0x175/0x920 [ 2759.026684][ T3375] ? file_tty_write+0x2e7/0xa20 [ 2759.026723][ T3375] file_tty_write+0x2e7/0xa20 [ 2759.026767][ T3375] vfs_write+0x5c9/0xb30 [ 2759.026793][ T3375] ? __pfx_tty_write+0x10/0x10 [ 2759.026827][ T3375] ? __pfx_vfs_write+0x10/0x10 [ 2759.026860][ T3375] ? __fget_files+0x2a/0x420 [ 2759.026911][ T3375] ksys_write+0x145/0x250 [ 2759.026937][ T3375] ? __pfx_ksys_write+0x10/0x10 [ 2759.026971][ T3375] do_syscall_64+0xec/0xf80 [ 2759.026996][ T3375] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2759.027018][ T3375] ? trace_irq_disable+0x37/0x100 [ 2759.027048][ T3375] ? clear_bhb_loop+0x60/0xb0 [ 2759.027075][ T3375] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2759.027098][ T3375] RIP: 0033:0x7fd061b8f749 [ 2759.027118][ T3375] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2759.027138][ T3375] RSP: 002b:00007fd05fdf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2759.027162][ T3375] RAX: ffffffffffffffda RBX: 00007fd061de5fa0 RCX: 00007fd061b8f749 [ 2759.027179][ T3375] RDX: 0000000000001006 RSI: 0000200000001040 RDI: 0000000000000004 [ 2759.027194][ T3375] RBP: 00007fd05fdf6090 R08: 0000000000000000 R09: 0000000000000000 [ 2759.027208][ T3375] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2759.027277][ T3375] R13: 00007fd061de6038 R14: 00007fd061de5fa0 R15: 00007fd061f0fa28 [ 2759.027314][ T3375] [ 2759.453634][ T1378] em28xx 1-1:0.89: unknown em28xx chip ID (0) [ 2759.723143][ T3387] gtp4: entered promiscuous mode [ 2759.754575][ T3387] gtp4: entered allmulticast mode [ 2759.852888][T23245] em28xx 5-1:0.89: writing to i2c device at 0xa0 failed (error=-5) [ 2759.861233][T23245] em28xx 5-1:0.89: failed to read eeprom (err=-5) [ 2759.876112][T23245] em28xx 5-1:0.89: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-5] [ 2759.958655][T23245] em28xx 5-1:0.89: Identified as Terratec Grabby (card=67) [ 2759.984949][T23245] em28xx 5-1:0.89: analog set to bulk mode. [ 2760.012555][T25745] em28xx 5-1:0.89: Registering V4L2 extension [ 2760.046279][T23245] usb 5-1: USB disconnect, device number 100 [ 2760.080085][T23245] em28xx 5-1:0.89: Disconnecting em28xx [ 2760.274932][T25745] em28xx 5-1:0.89: Config register raw data: 0xffffffed [ 2760.305114][T25745] em28xx 5-1:0.89: AC97 chip type couldn't be determined [ 2760.350685][T25745] em28xx 5-1:0.89: No AC97 audio processor [ 2760.402148][T25745] usb 5-1: Decoder not found [ 2760.418871][ T1378] em28xx 1-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 2760.427050][ T1378] em28xx 1-1:0.89: board has no eeprom [ 2760.448449][T25745] em28xx 5-1:0.89: failed to create media graph [ 2760.469504][T25745] em28xx 5-1:0.89: V4L2 device video103 deregistered [ 2760.490708][T25745] em28xx 5-1:0.89: Registering snapshot button... [ 2760.519529][T25745] input: em28xx snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.89/input/input209 [ 2760.548297][ T1378] em28xx 1-1:0.89: Identified as Terratec Grabby (card=67) [ 2760.556055][ T1378] em28xx 1-1:0.89: analog set to bulk mode. [ 2760.608684][T25745] em28xx 5-1:0.89: Remote control support is not available for this card. [ 2760.639397][ T1378] usb 1-1: USB disconnect, device number 95 [ 2760.646366][ T1378] em28xx 1-1:0.89: Disconnecting em28xx [ 2760.669454][ T24] em28xx 1-1:0.89: Registering V4L2 extension [ 2760.872278][ T24] em28xx 1-1:0.89: Config register raw data: 0xffffffed [ 2760.911195][ T24] em28xx 1-1:0.89: AC97 chip type couldn't be determined [ 2760.935216][ T24] em28xx 1-1:0.89: No AC97 audio processor [ 2761.031576][ T24] usb 1-1: Decoder not found [ 2761.060356][ T24] em28xx 1-1:0.89: failed to create media graph [ 2761.087378][ T24] em28xx 1-1:0.89: V4L2 device video103 deregistered [ 2761.148987][ T24] em28xx 1-1:0.89: Registering snapshot button... [ 2761.194256][ T24] input: em28xx snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.89/input/input210 [ 2761.341465][ T24] em28xx 1-1:0.89: Remote control support is not available for this card. [ 2761.410910][T23245] em28xx 5-1:0.89: Closing input extension [ 2761.475502][T23245] em28xx 5-1:0.89: Deregistering snapshot button [ 2761.597196][ T1378] em28xx 1-1:0.89: Closing input extension [ 2761.661658][T23245] em28xx 5-1:0.89: Freeing device [ 2761.668101][ T1378] em28xx 1-1:0.89: Deregistering snapshot button [ 2761.738481][T29223] usb 9-1: new high-speed USB device number 39 using dummy_hcd [ 2761.844114][ T1378] em28xx 1-1:0.89: Freeing device [ 2761.978152][T29223] usb 9-1: Using ep0 maxpacket: 16 [ 2762.038569][T23245] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 2762.191901][T29223] usb 9-1: config 0 has no interfaces? [ 2762.214668][T29223] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2762.249196][T23245] usb 5-1: Using ep0 maxpacket: 16 [ 2762.285169][T29223] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2762.316052][T29223] usb 9-1: Manufacturer: syz [ 2762.327230][T23245] usb 5-1: config 0 has no interfaces? [ 2762.380700][T23245] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2762.418646][ T128] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 2762.429183][T29223] usb 9-1: config 0 descriptor?? [ 2762.470384][T23245] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2762.543133][T23245] usb 5-1: Manufacturer: syz [ 2762.600398][T23245] usb 5-1: config 0 descriptor?? [ 2762.612352][ T128] usb 1-1: Using ep0 maxpacket: 16 [ 2762.631561][ T128] usb 1-1: config 0 has no interfaces? [ 2762.642550][ T128] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2762.708566][ T128] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2762.768744][ T3413] netlink: 'syz.8.8706': attribute type 1 has an invalid length. [ 2762.782670][ T128] usb 1-1: Manufacturer: syz [ 2762.820356][ T128] usb 1-1: config 0 descriptor?? [ 2763.086190][ T3406] netlink: 'syz.4.8705': attribute type 1 has an invalid length. [ 2763.139408][ T3413] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2763.304217][ T3420] netlink: 'syz.0.8707': attribute type 1 has an invalid length. [ 2763.451653][ T3425] bond1: (slave gretap1): making interface the new active one [ 2763.586138][ T3425] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 2764.187662][ T3428] vlan2: entered allmulticast mode [ 2764.194549][ T3428] bond1: entered allmulticast mode [ 2764.202878][ T3428] gretap1: entered allmulticast mode [ 2764.237695][ T3428] bond1: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 2764.654276][ T3406] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2764.762875][ T3411] bond0: (slave gretap1): making interface the new active one [ 2764.807114][ T3411] bond0: (slave gretap1): Enslaving as an active interface with an up link [ 2764.857628][ T3420] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 2765.767693][ T128] usb 5-1: USB disconnect, device number 101 [ 2766.156437][ T3457] FAULT_INJECTION: forcing a failure. [ 2766.156437][ T3457] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2766.204952][ T3457] CPU: 1 UID: 0 PID: 3457 Comm: syz.9.8714 Tainted: G L syzkaller #0 PREEMPT(full) [ 2766.204990][ T3457] Tainted: [L]=SOFTLOCKUP [ 2766.204999][ T3457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2766.205013][ T3457] Call Trace: [ 2766.205023][ T3457] [ 2766.205034][ T3457] dump_stack_lvl+0xe8/0x150 [ 2766.205069][ T3457] should_fail_ex+0x414/0x560 [ 2766.205109][ T3457] _copy_from_user+0x2d/0xb0 [ 2766.205138][ T3457] ___sys_sendmsg+0x158/0x2a0 [ 2766.205169][ T3457] ? __pfx____sys_sendmsg+0x10/0x10 [ 2766.205229][ T3457] ? __fget_files+0x2a/0x420 [ 2766.205254][ T3457] ? __fget_files+0x3a0/0x420 [ 2766.205287][ T3457] __x64_sys_sendmsg+0x19b/0x260 [ 2766.205315][ T3457] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2766.205352][ T3457] ? __pfx_ksys_write+0x10/0x10 [ 2766.205387][ T3457] do_syscall_64+0xec/0xf80 [ 2766.205410][ T3457] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2766.205432][ T3457] ? trace_irq_disable+0x37/0x100 [ 2766.205462][ T3457] ? clear_bhb_loop+0x60/0xb0 [ 2766.205488][ T3457] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2766.205509][ T3457] RIP: 0033:0x7f7958f8f749 [ 2766.205529][ T3457] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2766.205554][ T3457] RSP: 002b:00007f7959d74038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2766.205575][ T3457] RAX: ffffffffffffffda RBX: 00007f79591e5fa0 RCX: 00007f7958f8f749 [ 2766.205591][ T3457] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000004 [ 2766.205603][ T3457] RBP: 00007f7959d74090 R08: 0000000000000000 R09: 0000000000000000 [ 2766.205615][ T3457] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2766.205626][ T3457] R13: 00007f79591e6038 R14: 00007f79591e5fa0 R15: 00007f795930fa28 [ 2766.205656][ T3457] [ 2766.625393][T15493] usb 9-1: USB disconnect, device number 39 [ 2766.752878][ T3460] netlink: 8 bytes leftover after parsing attributes in process `syz.8.8715'. [ 2766.921847][ T30] kauditd_printk_skb: 26 callbacks suppressed [ 2766.921868][ T30] audit: type=1326 audit(1767021636.769:2200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3461 comm="syz.9.8716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7958f8f749 code=0x7ffc0000 [ 2767.054790][ T30] audit: type=1326 audit(1767021636.779:2201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3461 comm="syz.9.8716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7958f8f749 code=0x7ffc0000 [ 2767.111077][ T30] audit: type=1326 audit(1767021636.789:2202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3461 comm="syz.9.8716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7958f8f749 code=0x7ffc0000 [ 2767.138263][T21628] usb 9-1: new high-speed USB device number 40 using dummy_hcd [ 2767.240053][ T30] audit: type=1326 audit(1767021636.789:2203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3461 comm="syz.9.8716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7958f8f749 code=0x7ffc0000 [ 2767.336192][ T30] audit: type=1326 audit(1767021636.789:2204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3461 comm="syz.9.8716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7958f8f749 code=0x7ffc0000 [ 2767.368845][T21628] usb 9-1: Using ep0 maxpacket: 32 [ 2767.385826][T21628] usb 9-1: config 0 has an invalid interface number: 89 but max is 0 [ 2767.396466][T21628] usb 9-1: config 0 has no interface number 0 [ 2767.402881][T21628] usb 9-1: config 0 interface 89 has no altsetting 0 [ 2767.457963][T21628] usb 9-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 2767.473574][T21628] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2767.484421][T21628] usb 9-1: Product: syz [ 2767.489697][T21628] usb 9-1: Manufacturer: syz [ 2767.493949][ T30] audit: type=1326 audit(1767021636.789:2205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3461 comm="syz.9.8716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7958f8f749 code=0x7ffc0000 [ 2767.494514][T21628] usb 9-1: SerialNumber: syz [ 2767.591533][T21628] usb 9-1: config 0 descriptor?? [ 2767.596765][ T30] audit: type=1326 audit(1767021636.819:2206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3461 comm="syz.9.8716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f7958f8f749 code=0x7ffc0000 [ 2767.659752][ T30] audit: type=1326 audit(1767021636.819:2207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3461 comm="syz.9.8716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7958f8f749 code=0x7ffc0000 [ 2767.690093][T21628] em28xx 9-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 2767.741080][ T30] audit: type=1326 audit(1767021636.829:2208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3461 comm="syz.9.8716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7958f8f749 code=0x7ffc0000 [ 2767.748253][T21628] em28xx 9-1:0.89: Video interface 89 found: bulk [ 2767.847195][ T30] audit: type=1326 audit(1767021636.829:2209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3461 comm="syz.9.8716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7958f8f749 code=0x7ffc0000 [ 2768.196689][T26705] bond0 (unregistering): (slave gretap1): Releasing active interface [ 2768.246045][T21628] em28xx 9-1:0.89: unknown em28xx chip ID (0) [ 2768.318840][ T3485] fuse: Bad value for 'fd' [ 2768.932030][T23245] usb 1-1: USB disconnect, device number 96 [ 2769.143163][T21628] em28xx 9-1:0.89: writing to i2c device at 0xa0 failed (error=-5) [ 2769.193648][T21628] em28xx 9-1:0.89: failed to read eeprom (err=-5) [ 2769.231791][T21628] em28xx 9-1:0.89: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-5] [ 2769.409710][T21628] em28xx 9-1:0.89: Identified as Terratec Grabby (card=67) [ 2769.440287][T21628] em28xx 9-1:0.89: analog set to bulk mode. [ 2769.519516][T29223] em28xx 9-1:0.89: Registering V4L2 extension [ 2769.713504][T26705] bond0 (unregistering): Released all slaves [ 2769.728536][T21628] usb 9-1: USB disconnect, device number 40 [ 2769.794962][ T3482] gtp2: entered promiscuous mode [ 2769.824060][T21628] em28xx 9-1:0.89: Disconnecting em28xx [ 2769.849083][ T3482] gtp2: entered allmulticast mode [ 2770.049992][T29223] em28xx 9-1:0.89: Config register raw data: 0xffffffed [ 2770.057461][T29223] em28xx 9-1:0.89: AC97 chip type couldn't be determined [ 2770.153783][T29223] em28xx 9-1:0.89: No AC97 audio processor [ 2770.191232][T29223] usb 9-1: Decoder not found [ 2770.228351][T29223] em28xx 9-1:0.89: failed to create media graph [ 2770.276233][T29223] em28xx 9-1:0.89: V4L2 device video103 deregistered [ 2770.301946][T29223] em28xx 9-1:0.89: Registering snapshot button... [ 2770.330129][T29223] input: em28xx snapshot button as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.89/input/input211 [ 2770.396617][T29223] em28xx 9-1:0.89: Remote control support is not available for this card. [ 2770.442449][T21628] em28xx 9-1:0.89: Closing input extension [ 2770.478205][T21628] em28xx 9-1:0.89: Deregistering snapshot button [ 2770.672261][T21628] em28xx 9-1:0.89: Freeing device [ 2771.273168][ T1378] usb 10-1: new high-speed USB device number 48 using dummy_hcd [ 2771.458453][ T1378] usb 10-1: Using ep0 maxpacket: 16 [ 2771.521230][ T1378] usb 10-1: New USB device found, idVendor=046d, idProduct=08b5, bcdDevice=d7.01 [ 2771.553485][ T1378] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2771.569869][T29223] usb 5-1: new low-speed USB device number 102 using dummy_hcd [ 2771.592700][ T1378] usb 10-1: Product: syz [ 2771.612403][ T1378] usb 10-1: Manufacturer: syz [ 2771.617344][ T1378] usb 10-1: SerialNumber: syz [ 2771.632055][T21628] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 2771.639838][ T1378] usb 10-1: config 0 descriptor?? [ 2771.673750][ T1378] pwc: Logitech QuickCam Orbit/Sphere USB webcam detected. [ 2771.752410][T29223] usb 5-1: config 0 has an invalid interface number: 245 but max is 0 [ 2771.779765][T29223] usb 5-1: config 0 has no interface number 0 [ 2771.796342][T29223] usb 5-1: New USB device found, idVendor=699b, idProduct=9cbd, bcdDevice=76.2a [ 2771.817963][T29223] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2771.818237][T21628] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2771.846111][T29223] usb 5-1: config 0 descriptor?? [ 2771.861206][ T1378] pwc: Warning: more than 1 configuration available. [ 2771.866737][T21628] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2771.895935][ T1378] pwc: Failed to set LED on/off time (-71) [ 2771.903388][ T1378] pwc: send_video_command error -71 [ 2771.908526][T21628] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2771.910947][T21628] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2771.920065][ T1378] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 2771.938843][ T1378] Philips webcam 10-1:0.0: probe with driver Philips webcam failed with error -71 [ 2771.952140][T21628] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2771.964026][T21628] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2771.975448][ T3517] input: syz0 as /devices/virtual/input/input212 [ 2771.984936][ T1378] usb 10-1: USB disconnect, device number 48 [ 2771.986413][T21628] usb 1-1: Product: syz [ 2772.001730][T21628] usb 1-1: Manufacturer: syz [ 2772.028454][T21628] cdc_wdm 1-1:1.0: skipping garbage [ 2772.044389][T21628] cdc_wdm 1-1:1.0: skipping garbage [ 2772.056833][T21628] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 2772.075021][T29223] usb 5-1: string descriptor 0 read error: -71 [ 2772.088741][T21628] cdc_wdm 1-1:1.0: Unknown control protocol [ 2772.100046][T29223] usb-storage 5-1:0.245: USB Mass Storage device detected [ 2772.208373][T29223] usb 5-1: USB disconnect, device number 102 [ 2772.233975][ T1378] usb 1-1: USB disconnect, device number 97 [ 2772.495519][ T3529] lo: entered allmulticast mode [ 2772.535491][ T3529] dvmrp6: entered allmulticast mode [ 2772.942046][ T3538] gtp3: entered promiscuous mode [ 2772.947566][ T3538] gtp3: entered allmulticast mode [ 2773.158192][T23245] usb 10-1: new high-speed USB device number 49 using dummy_hcd [ 2773.368345][T23245] usb 10-1: Using ep0 maxpacket: 8 [ 2773.381427][T23245] usb 10-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2773.445654][T23245] usb 10-1: config 0 interface 0 has no altsetting 0 [ 2773.466250][T23245] usb 10-1: New USB device found, idVendor=20a0, idProduct=4287, bcdDevice= 0.00 [ 2773.502986][T23245] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2773.550488][T23245] usb 10-1: config 0 descriptor?? [ 2774.076909][T23245] usbhid 10-1:0.0: can't add hid device: -71 [ 2774.110105][T23245] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 2774.162368][T23245] usb 10-1: USB disconnect, device number 49 [ 2775.928709][T29223] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 2776.109599][T29223] usb 5-1: Using ep0 maxpacket: 8 [ 2776.146757][T29223] usb 5-1: config 1 interface 0 altsetting 66 bulk endpoint 0x1 has invalid maxpacket 1024 [ 2776.199225][T29223] usb 5-1: config 1 interface 0 altsetting 66 bulk endpoint 0x82 has invalid maxpacket 64 [ 2776.231355][T29223] usb 5-1: config 1 interface 0 has no altsetting 0 [ 2776.283542][T29223] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2776.322606][T29223] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2776.348335][T29223] usb 5-1: Product: 뵞᝗岞Ҋ㫳䳽䄁풀ஶIJᤝ⏤퀢壋⏱ᐐᝫ죙竃羛勡⫙ij꼵禖럦⿳뤴앜ꚲ俖ᔐ柼䬗ᚕ䙞㜌恬௳읓甽粶㵊뻼훤ࢡხ锃婆슖 [ 2776.409492][T29223] usb 5-1: Manufacturer: я [ 2776.425163][T29223] usb 5-1: SerialNumber: 冑咽唁齅ꗸ瘺戢苷萄਒㓻朒賆懄俪ꆠ堔쿱 [ 2776.477978][ T3575] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 2776.518265][ T3575] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 2777.080461][T29223] usb 5-1: USB disconnect, device number 103 [ 2777.695168][T15494] usb 10-1: new high-speed USB device number 50 using dummy_hcd [ 2777.900050][T15494] usb 10-1: Using ep0 maxpacket: 8 [ 2777.945072][T15494] usb 10-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2778.005216][T15494] usb 10-1: config 0 interface 0 has no altsetting 0 [ 2778.054294][T15494] usb 10-1: New USB device found, idVendor=20a0, idProduct=4287, bcdDevice= 0.00 [ 2778.087913][T15494] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2778.180046][T15494] usb 10-1: config 0 descriptor?? [ 2778.640964][T15494] usbhid 10-1:0.0: can't add hid device: -71 [ 2778.688278][T15494] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 2778.760443][T15494] usb 10-1: USB disconnect, device number 50 [ 2780.083856][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 2780.094309][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 2780.176661][ T3618] FAULT_INJECTION: forcing a failure. [ 2780.176661][ T3618] name failslab, interval 1, probability 0, space 0, times 0 [ 2780.208812][ T3618] CPU: 1 UID: 0 PID: 3618 Comm: syz.8.8758 Tainted: G L syzkaller #0 PREEMPT(full) [ 2780.208849][ T3618] Tainted: [L]=SOFTLOCKUP [ 2780.208857][ T3618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2780.208870][ T3618] Call Trace: [ 2780.208880][ T3618] [ 2780.208889][ T3618] dump_stack_lvl+0xe8/0x150 [ 2780.208922][ T3618] should_fail_ex+0x414/0x560 [ 2780.208959][ T3618] should_failslab+0xa8/0x100 [ 2780.208985][ T3618] __kmalloc_noprof+0xdf/0x800 [ 2780.209005][ T3618] ? kfree+0x4d/0x660 [ 2780.209030][ T3618] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 2780.209064][ T3618] tomoyo_realpath_from_path+0xe3/0x5d0 [ 2780.209092][ T3618] ? tomoyo_domain+0xd8/0x130 [ 2780.209125][ T3618] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 2780.209147][ T3618] tomoyo_path_number_perm+0x1e8/0x5a0 [ 2780.209172][ T3618] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2780.209193][ T3618] ? __lock_acquire+0x6b6/0x2cf0 [ 2780.209232][ T3618] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 2780.209285][ T3618] ? __fget_files+0x2a/0x420 [ 2780.209313][ T3618] ? __fget_files+0x2a/0x420 [ 2780.209335][ T3618] ? __fget_files+0x3a0/0x420 [ 2780.209358][ T3618] ? __fget_files+0x2a/0x420 [ 2780.209387][ T3618] security_file_ioctl+0xcb/0x2d0 [ 2780.209411][ T3618] __se_sys_ioctl+0x47/0x170 [ 2780.209444][ T3618] do_syscall_64+0xec/0xf80 [ 2780.209465][ T3618] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2780.209491][ T3618] ? trace_irq_disable+0x37/0x100 [ 2780.209522][ T3618] ? clear_bhb_loop+0x60/0xb0 [ 2780.209549][ T3618] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2780.209570][ T3618] RIP: 0033:0x7fc08118f749 [ 2780.209590][ T3618] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2780.209608][ T3618] RSP: 002b:00007fc0820b8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2780.209632][ T3618] RAX: ffffffffffffffda RBX: 00007fc0813e6090 RCX: 00007fc08118f749 [ 2780.209648][ T3618] RDX: 0000200000000000 RSI: 000000000000541b RDI: 0000000000000003 [ 2780.209663][ T3618] RBP: 00007fc0820b8090 R08: 0000000000000000 R09: 0000000000000000 [ 2780.209679][ T3618] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2780.209691][ T3618] R13: 00007fc0813e6128 R14: 00007fc0813e6090 R15: 00007fc08150fa28 [ 2780.209725][ T3618] [ 2780.209735][ T3618] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2780.599614][ T3620] netlink: 'syz.4.8759': attribute type 22 has an invalid length. [ 2783.703539][ T3662] netlink: 'syz.0.8771': attribute type 4 has an invalid length. [ 2783.963252][ T3665] FAULT_INJECTION: forcing a failure. [ 2783.963252][ T3665] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2784.055020][ T3665] CPU: 1 UID: 0 PID: 3665 Comm: syz.4.8772 Tainted: G L syzkaller #0 PREEMPT(full) [ 2784.055056][ T3665] Tainted: [L]=SOFTLOCKUP [ 2784.055065][ T3665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2784.055094][ T3665] Call Trace: [ 2784.055103][ T3665] [ 2784.055112][ T3665] dump_stack_lvl+0xe8/0x150 [ 2784.055148][ T3665] should_fail_ex+0x414/0x560 [ 2784.055188][ T3665] _copy_to_user+0x31/0xb0 [ 2784.055219][ T3665] simple_read_from_buffer+0xe1/0x170 [ 2784.055252][ T3665] proc_fail_nth_read+0x1b3/0x220 [ 2784.055280][ T3665] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2784.055308][ T3665] ? rw_verify_area+0x2a6/0x4d0 [ 2784.055350][ T3665] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2784.055375][ T3665] vfs_read+0x200/0xa30 [ 2784.055394][ T3665] ? fdget_pos+0x247/0x320 [ 2784.055427][ T3665] ? __pfx___mutex_lock+0x10/0x10 [ 2784.055461][ T3665] ? __pfx_vfs_read+0x10/0x10 [ 2784.055482][ T3665] ? __fget_files+0x2a/0x420 [ 2784.055514][ T3665] ? __fget_files+0x3a0/0x420 [ 2784.055540][ T3665] ? __fget_files+0x2a/0x420 [ 2784.055582][ T3665] ksys_read+0x145/0x250 [ 2784.055606][ T3665] ? __pfx_ksys_read+0x10/0x10 [ 2784.055639][ T3665] do_syscall_64+0xec/0xf80 [ 2784.055662][ T3665] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2784.055683][ T3665] ? trace_irq_disable+0x37/0x100 [ 2784.055712][ T3665] ? clear_bhb_loop+0x60/0xb0 [ 2784.055738][ T3665] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2784.055759][ T3665] RIP: 0033:0x7f8bde78e15c [ 2784.055779][ T3665] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 2784.055799][ T3665] RSP: 002b:00007f8bdf5ca030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2784.055823][ T3665] RAX: ffffffffffffffda RBX: 00007f8bde9e5fa0 RCX: 00007f8bde78e15c [ 2784.055840][ T3665] RDX: 000000000000000f RSI: 00007f8bdf5ca0a0 RDI: 0000000000000004 [ 2784.055855][ T3665] RBP: 00007f8bdf5ca090 R08: 0000000000000000 R09: 0000000000000000 [ 2784.055869][ T3665] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000001 [ 2784.055883][ T3665] R13: 00007f8bde9e6038 R14: 00007f8bde9e5fa0 R15: 00007f8bdeb0fa28 [ 2784.055918][ T3665] [ 2784.408455][ T1378] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 2784.658137][ T1378] usb 1-1: Using ep0 maxpacket: 16 [ 2784.750359][ T1378] usb 1-1: config 0 has no interfaces? [ 2784.804788][ T1378] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2784.849277][T15494] usb 9-1: new high-speed USB device number 41 using dummy_hcd [ 2784.870496][ T1378] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2784.893875][ T3674] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8774'. [ 2784.934087][ T1378] usb 1-1: Manufacturer: syz [ 2784.954221][ T1378] usb 1-1: config 0 descriptor?? [ 2785.058119][T15494] usb 9-1: Using ep0 maxpacket: 16 [ 2785.095095][T15494] usb 9-1: config 0 has no interfaces? [ 2785.121562][T15494] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2785.159391][T15494] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2785.184367][T15494] usb 9-1: Manufacturer: syz [ 2785.211724][T15494] usb 9-1: config 0 descriptor?? [ 2785.501568][ T3672] netlink: 'syz.8.8773': attribute type 1 has an invalid length. [ 2785.772663][ T3672] 8021q: adding VLAN 0 to HW filter on device bond2 [ 2786.021860][ T3688] vlan2: entered allmulticast mode [ 2786.046206][ T3688] bond2: entered allmulticast mode [ 2786.258301][ T128] usb 10-1: new high-speed USB device number 51 using dummy_hcd [ 2786.448086][ T128] usb 10-1: Using ep0 maxpacket: 8 [ 2786.482187][ T128] usb 10-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2786.562806][ T128] usb 10-1: config 0 interface 0 has no altsetting 0 [ 2786.602395][ T128] usb 10-1: New USB device found, idVendor=20a0, idProduct=4287, bcdDevice= 0.00 [ 2786.661474][ T128] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2786.752968][ T128] usb 10-1: config 0 descriptor?? [ 2787.255569][ T128] usbhid 10-1:0.0: can't add hid device: -71 [ 2787.294451][ T128] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 2787.354228][ T128] usb 10-1: USB disconnect, device number 51 [ 2787.962886][T15494] usb 1-1: USB disconnect, device number 98 [ 2788.108765][ T3699] loop5: detected capacity change from 0 to 2640 [ 2788.138617][ T3699] buffer_io_error: 322 callbacks suppressed [ 2788.138637][ T3699] Buffer I/O error on dev loop5, logical block 0, async page read [ 2788.190069][ T128] usb 9-1: USB disconnect, device number 41 [ 2788.204521][ T3699] Buffer I/O error on dev loop5, logical block 0, async page read [ 2788.245344][ T3699] loop5: unable to read partition table [ 2788.271918][ T3699] loop_reread_partitions: partition scan of loop5 (3 ) failed (rc=-5) [ 2788.456889][ T3700] Buffer I/O error on dev loop5, logical block 0, lost async page write [ 2788.494084][ T3700] Buffer I/O error on dev loop5, logical block 1, lost async page write [ 2788.523374][ T3700] Buffer I/O error on dev loop5, logical block 2, lost async page write [ 2788.563875][ T3700] Buffer I/O error on dev loop5, logical block 3, lost async page write [ 2788.607191][ T3700] Buffer I/O error on dev loop5, logical block 4, lost async page write [ 2788.646294][ T3700] Buffer I/O error on dev loop5, logical block 5, lost async page write [ 2788.679720][ T3700] Buffer I/O error on dev loop5, logical block 6, lost async page write [ 2788.725776][ T3700] Buffer I/O error on dev loop5, logical block 7, lost async page write [ 2789.159966][ T3710] fuse: Unknown parameter '_d' [ 2789.301021][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 2789.301042][ T30] audit: type=1326 audit(1767021659.119:2217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3712 comm="syz.0.8783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2e598f749 code=0x7ffc0000 [ 2789.364989][ T30] audit: type=1326 audit(1767021659.119:2218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3712 comm="syz.0.8783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2e598f749 code=0x7ffc0000 [ 2789.513458][ T30] audit: type=1326 audit(1767021659.119:2219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3712 comm="syz.0.8783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd2e598f749 code=0x7ffc0000 [ 2789.615429][ T30] audit: type=1326 audit(1767021659.119:2220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3712 comm="syz.0.8783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2e598f749 code=0x7ffc0000 [ 2789.668720][T15494] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 2789.704153][ T30] audit: type=1326 audit(1767021659.129:2221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3712 comm="syz.0.8783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2e598f749 code=0x7ffc0000 [ 2789.838620][T15494] usb 5-1: Using ep0 maxpacket: 16 [ 2789.843986][ T30] audit: type=1326 audit(1767021659.129:2222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3712 comm="syz.0.8783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd2e598f749 code=0x7ffc0000 [ 2789.878969][T15494] usb 5-1: config 0 has no interfaces? [ 2789.912191][T15494] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2789.947448][T15494] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2789.975122][ T30] audit: type=1326 audit(1767021659.129:2223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3712 comm="syz.0.8783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2e598f749 code=0x7ffc0000 [ 2790.025902][T15494] usb 5-1: Manufacturer: syz [ 2790.093086][T15494] usb 5-1: config 0 descriptor?? [ 2790.188077][ T30] audit: type=1326 audit(1767021659.129:2224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3712 comm="syz.0.8783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2e598f749 code=0x7ffc0000 [ 2790.256558][ T30] audit: type=1326 audit(1767021659.259:2225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3712 comm="syz.0.8783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fd2e598f749 code=0x7ffc0000 [ 2790.316119][ T30] audit: type=1326 audit(1767021659.259:2226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3712 comm="syz.0.8783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2e598f749 code=0x7ffc0000 [ 2790.540313][ T3732] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8788'. [ 2790.578843][ T3724] netlink: 'syz.4.8784': attribute type 1 has an invalid length. [ 2790.594804][ T3733] netlink: 36 bytes leftover after parsing attributes in process `syz.0.8788'. [ 2790.631302][ T3732] openvswitch: netlink: Flow actions attr not present in new flow. [ 2791.026817][ T3724] 8021q: adding VLAN 0 to HW filter on device bond11 [ 2791.159385][ T3746] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8791'. [ 2791.193681][ T3740] bridge0: port 3(gretap0) entered blocking state [ 2791.212284][ T3740] bridge0: port 3(gretap0) entered disabled state [ 2791.232768][ T3740] gretap0: entered allmulticast mode [ 2791.277857][ T3740] gretap0: entered promiscuous mode [ 2791.298124][ T3740] bridge0: port 3(gretap0) entered blocking state [ 2791.305840][ T3740] bridge0: port 3(gretap0) entered forwarding state [ 2791.449166][ T3746] netlink: 8 bytes leftover after parsing attributes in process `syz.8.8791'. [ 2791.531489][ T3750] gretap0: left allmulticast mode [ 2791.558122][ T3750] gretap0: left promiscuous mode [ 2791.579929][ T3750] bridge0: port 3(gretap0) entered disabled state [ 2792.008143][T15494] usb 5-1: USB disconnect, device number 104 [ 2793.368155][ T128] usb 9-1: new high-speed USB device number 42 using dummy_hcd [ 2793.578217][T23245] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 2793.578228][ T128] usb 9-1: Using ep0 maxpacket: 32 [ 2793.620846][ T128] usb 9-1: config 0 has an invalid interface number: 89 but max is 0 [ 2793.633572][ T128] usb 9-1: config 0 has no interface number 0 [ 2793.659726][ T128] usb 9-1: config 0 interface 89 has no altsetting 0 [ 2793.699021][ T128] usb 9-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 2793.719916][ T128] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2793.731649][ T128] usb 9-1: Product: syz [ 2793.738443][T23245] usb 5-1: Using ep0 maxpacket: 16 [ 2793.754253][T23245] usb 5-1: config 0 has no interfaces? [ 2793.771317][T23245] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2793.788508][T23245] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2793.797640][T23245] usb 5-1: Manufacturer: syz [ 2793.805431][ T128] usb 9-1: Manufacturer: syz [ 2793.820603][T23245] usb 5-1: config 0 descriptor?? [ 2793.830479][ T128] usb 9-1: SerialNumber: syz [ 2793.869272][ T128] usb 9-1: config 0 descriptor?? [ 2793.903769][ T128] em28xx 9-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 2793.947290][ T128] em28xx 9-1:0.89: Video interface 89 found: bulk [ 2794.062861][ T3784] netlink: 'syz.4.8796': attribute type 1 has an invalid length. [ 2794.563358][ T128] em28xx 9-1:0.89: unknown em28xx chip ID (0) [ 2794.674343][ T3784] 8021q: adding VLAN 0 to HW filter on device bond12 [ 2795.775215][ T3798] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8800'. [ 2795.945551][ T128] em28xx 9-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 2796.026714][ T128] em28xx 9-1:0.89: board has no eeprom [ 2796.128149][ T128] em28xx 9-1:0.89: Identified as Terratec Grabby (card=67) [ 2796.180079][ T128] em28xx 9-1:0.89: analog set to bulk mode. [ 2796.187878][ T3798] netlink: 88 bytes leftover after parsing attributes in process `syz.0.8800'. [ 2796.254249][T30804] em28xx 9-1:0.89: Registering V4L2 extension [ 2796.286817][ T128] usb 9-1: USB disconnect, device number 42 [ 2796.320839][ T128] em28xx 9-1:0.89: Disconnecting em28xx [ 2796.694026][T30804] em28xx 9-1:0.89: Config register raw data: 0xffffffed [ 2796.775908][T30804] em28xx 9-1:0.89: AC97 chip type couldn't be determined [ 2796.875869][T30804] em28xx 9-1:0.89: No AC97 audio processor [ 2796.927091][T30804] usb 9-1: Decoder not found [ 2796.953514][T30804] em28xx 9-1:0.89: failed to create media graph [ 2797.051550][T30804] em28xx 9-1:0.89: V4L2 device video103 deregistered [ 2797.080668][T30804] em28xx 9-1:0.89: Registering snapshot button... [ 2797.129672][T30804] input: em28xx snapshot button as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.89/input/input213 [ 2797.235487][T30804] em28xx 9-1:0.89: Remote control support is not available for this card. [ 2797.270641][ T128] em28xx 9-1:0.89: Closing input extension [ 2797.310540][ T128] em28xx 9-1:0.89: Deregistering snapshot button [ 2797.414482][ T128] em28xx 9-1:0.89: Freeing device [ 2797.596674][T30804] usb 5-1: USB disconnect, device number 105 [ 2797.818177][ T128] usb 9-1: new high-speed USB device number 43 using dummy_hcd [ 2797.886009][ T3822] gtp3: entered promiscuous mode [ 2797.906565][ T3822] gtp3: entered allmulticast mode [ 2798.048096][ T128] usb 9-1: Using ep0 maxpacket: 8 [ 2798.074232][ T128] usb 9-1: config 0 has an invalid interface number: 186 but max is 0 [ 2798.135019][ T128] usb 9-1: config 0 has no interface number 0 [ 2798.171782][ T128] usb 9-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2798.243958][ T128] usb 9-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 2798.330495][ T128] usb 9-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 2798.392648][ T128] usb 9-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 2798.470880][ T128] usb 9-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 2798.504369][ T128] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2798.545382][ T128] usb 9-1: Product: syz [ 2798.575604][ T128] usb 9-1: Manufacturer: syz [ 2798.591847][ T128] usb 9-1: SerialNumber: syz [ 2798.625074][ T128] usb 9-1: config 0 descriptor?? [ 2798.860874][ T128] iowarrior 9-1:0.186: IOWarrior product=0x1505, serial= interface=186 now attached to iowarrior0 [ 2800.112805][ T3840] bond4 (unregistering): Released all slaves [ 2800.272129][T15493] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 2800.280525][T15494] usb 9-1: USB disconnect, device number 43 [ 2800.508200][T15493] usb 1-1: Using ep0 maxpacket: 16 [ 2800.535366][T15493] usb 1-1: config 0 has no interfaces? [ 2800.578310][T15493] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2800.626502][T15493] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2800.682944][T15493] usb 1-1: Manufacturer: syz [ 2800.698258][T15494] usb 9-1: new full-speed USB device number 44 using dummy_hcd [ 2800.737692][T15493] usb 1-1: config 0 descriptor?? [ 2800.879581][T15494] usb 9-1: device descriptor read/64, error -71 [ 2801.040937][ T3843] netlink: 'syz.0.8811': attribute type 1 has an invalid length. [ 2801.160503][T15494] usb 9-1: new full-speed USB device number 45 using dummy_hcd [ 2801.338132][T15494] usb 9-1: device descriptor read/64, error -71 [ 2801.408509][ T3843] 8021q: adding VLAN 0 to HW filter on device bond5 [ 2801.508699][T15494] usb usb9-port1: attempt power cycle [ 2801.527920][ T3859] vlan2: entered allmulticast mode [ 2801.537914][ T3859] bond5: entered allmulticast mode [ 2801.901204][T15494] usb 9-1: new full-speed USB device number 46 using dummy_hcd [ 2801.958959][T15494] usb 9-1: device descriptor read/8, error -71 [ 2802.229373][T15494] usb 9-1: new full-speed USB device number 47 using dummy_hcd [ 2802.291110][T15494] usb 9-1: device descriptor read/8, error -71 [ 2802.431701][T15494] usb usb9-port1: unable to enumerate USB device [ 2804.546897][T15494] usb 1-1: USB disconnect, device number 99 [ 2805.615782][ T3893] gtp4: entered promiscuous mode [ 2805.638539][ T3893] gtp4: entered allmulticast mode [ 2805.702575][ T3896] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8824'. [ 2805.958205][ T128] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 2806.148369][ T128] usb 5-1: Using ep0 maxpacket: 32 [ 2806.182581][ T128] usb 5-1: config 0 has an invalid interface number: 89 but max is 0 [ 2806.211619][ T128] usb 5-1: config 0 has no interface number 0 [ 2806.243806][ T128] usb 5-1: config 0 interface 89 has no altsetting 0 [ 2806.282135][ T128] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 2806.320430][ T128] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2806.359255][ T128] usb 5-1: Product: syz [ 2806.394117][ T128] usb 5-1: Manufacturer: syz [ 2806.399584][ T128] usb 5-1: SerialNumber: syz [ 2806.419993][ T128] usb 5-1: config 0 descriptor?? [ 2806.431094][ T128] em28xx 5-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 2806.458927][ T128] em28xx 5-1:0.89: Video interface 89 found: bulk [ 2807.034472][ T128] em28xx 5-1:0.89: unknown em28xx chip ID (0) [ 2807.252712][ T3905] netlink: 12 bytes leftover after parsing attributes in process `syz.9.8826'. [ 2808.728378][ T128] em28xx 5-1:0.89: writing to i2c device at 0xa0 failed (error=-5) [ 2808.763945][ T128] em28xx 5-1:0.89: failed to read eeprom (err=-5) [ 2808.802059][ T128] em28xx 5-1:0.89: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-5] [ 2808.888133][ T128] em28xx 5-1:0.89: Identified as Terratec Grabby (card=67) [ 2808.908289][ T128] em28xx 5-1:0.89: analog set to bulk mode. [ 2808.944269][T29223] em28xx 5-1:0.89: Registering V4L2 extension [ 2809.010861][ T128] usb 5-1: USB disconnect, device number 106 [ 2809.032270][ T128] em28xx 5-1:0.89: Disconnecting em28xx [ 2809.140428][T29223] em28xx 5-1:0.89: Config register raw data: 0xffffffed [ 2809.180508][T29223] em28xx 5-1:0.89: AC97 chip type couldn't be determined [ 2809.199929][T29223] em28xx 5-1:0.89: No AC97 audio processor [ 2809.233457][T29223] usb 5-1: Decoder not found [ 2809.250228][T29223] em28xx 5-1:0.89: failed to create media graph [ 2809.256632][T29223] em28xx 5-1:0.89: V4L2 device video103 deregistered [ 2809.285255][T29223] em28xx 5-1:0.89: Registering snapshot button... [ 2809.325645][T29223] input: em28xx snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.89/input/input214 [ 2809.417577][T29223] em28xx 5-1:0.89: Remote control support is not available for this card. [ 2809.466851][ T128] em28xx 5-1:0.89: Closing input extension [ 2809.513110][ T128] em28xx 5-1:0.89: Deregistering snapshot button [ 2809.622201][ T128] em28xx 5-1:0.89: Freeing device [ 2811.919059][T30804] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 2812.079962][T30804] usb 1-1: Using ep0 maxpacket: 16 [ 2812.109073][T29223] usb 10-1: new high-speed USB device number 52 using dummy_hcd [ 2812.134918][T30804] usb 1-1: New USB device found, idVendor=046d, idProduct=08b5, bcdDevice=d7.01 [ 2812.155533][T30804] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2812.172722][T30804] usb 1-1: Product: syz [ 2812.183029][T30804] usb 1-1: Manufacturer: syz [ 2812.197298][T30804] usb 1-1: SerialNumber: syz [ 2812.222060][T30804] usb 1-1: config 0 descriptor?? [ 2812.242759][T30804] pwc: Logitech QuickCam Orbit/Sphere USB webcam detected. [ 2812.288171][T29223] usb 10-1: Using ep0 maxpacket: 16 [ 2812.302535][T29223] usb 10-1: config 0 has no interfaces? [ 2812.316167][T29223] usb 10-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2812.341093][T29223] usb 10-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2812.371547][T29223] usb 10-1: Manufacturer: syz [ 2812.401487][T29223] usb 10-1: config 0 descriptor?? [ 2812.490525][T30804] pwc: Warning: more than 1 configuration available. [ 2812.516749][T30804] pwc: Failed to set LED on/off time (-71) [ 2812.536889][T30804] pwc: send_video_command error -71 [ 2812.550323][T30804] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 2812.601526][T30804] Philips webcam 1-1:0.0: probe with driver Philips webcam failed with error -71 [ 2812.635427][T30804] usb 1-1: USB disconnect, device number 100 [ 2812.646985][ T3949] netlink: 'syz.9.8833': attribute type 1 has an invalid length. [ 2812.964541][ T3949] 8021q: adding VLAN 0 to HW filter on device bond4 [ 2813.930814][ T3971] netlink: 8 bytes leftover after parsing attributes in process `syz.8.8840'. [ 2814.258145][T15493] usb 9-1: new high-speed USB device number 48 using dummy_hcd [ 2814.450693][T15493] usb 9-1: Using ep0 maxpacket: 32 [ 2814.487437][T15493] usb 9-1: config 0 has an invalid interface number: 89 but max is 0 [ 2814.529833][T15493] usb 9-1: config 0 has no interface number 0 [ 2814.545760][T15493] usb 9-1: config 0 interface 89 has no altsetting 0 [ 2814.593502][T15493] usb 9-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 2814.633382][T15493] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2814.666899][T15493] usb 9-1: Product: syz [ 2814.687269][T15493] usb 9-1: Manufacturer: syz [ 2814.712926][T15493] usb 9-1: SerialNumber: syz [ 2814.741790][T15493] usb 9-1: config 0 descriptor?? [ 2814.788705][T15493] em28xx 9-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 2814.818106][T15493] em28xx 9-1:0.89: Video interface 89 found: bulk [ 2815.059889][ T1378] usb 10-1: USB disconnect, device number 52 [ 2815.266788][ T3984] fuse: Unknown parameter 'groupqT00000000000000000000' [ 2815.403817][T15493] em28xx 9-1:0.89: unknown em28xx chip ID (0) [ 2815.494066][ T3989] netlink: 'syz.4.8842': attribute type 7 has an invalid length. [ 2815.998298][ T1378] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 2816.218148][ T1378] usb 1-1: Using ep0 maxpacket: 16 [ 2816.270216][ T1378] usb 1-1: config 0 has no interfaces? [ 2816.352168][ T1378] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2816.429166][ T1378] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2816.470258][ T1378] usb 1-1: Manufacturer: syz [ 2816.554108][ T1378] usb 1-1: config 0 descriptor?? [ 2816.845318][ T3996] netlink: 'syz.0.8845': attribute type 1 has an invalid length. [ 2817.123497][T15493] em28xx 9-1:0.89: writing to i2c device at 0xa0 failed (error=-5) [ 2817.197476][T15493] em28xx 9-1:0.89: failed to read eeprom (err=-5) [ 2817.217187][ T3996] 8021q: adding VLAN 0 to HW filter on device bond6 [ 2817.249800][T15493] em28xx 9-1:0.89: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-5] [ 2817.375594][ T4008] xt_socket: unknown flags 0xc [ 2817.383983][T15493] em28xx 9-1:0.89: Identified as Terratec Grabby (card=67) [ 2817.413934][T15493] em28xx 9-1:0.89: analog set to bulk mode. [ 2817.436551][ T1378] em28xx 9-1:0.89: Registering V4L2 extension [ 2817.469103][T15493] usb 9-1: USB disconnect, device number 48 [ 2817.494768][T15493] em28xx 9-1:0.89: Disconnecting em28xx [ 2817.572298][ T4013] vlan2: entered allmulticast mode [ 2817.608711][ T4013] bond6: entered allmulticast mode [ 2817.654487][ T1378] em28xx 9-1:0.89: Config register raw data: 0xffffffed [ 2817.703611][ T1378] em28xx 9-1:0.89: AC97 chip type couldn't be determined [ 2817.756666][ T1378] em28xx 9-1:0.89: No AC97 audio processor [ 2817.779444][ T1378] usb 9-1: Decoder not found [ 2817.801858][ T1378] em28xx 9-1:0.89: failed to create media graph [ 2817.856491][ T1378] em28xx 9-1:0.89: V4L2 device video103 deregistered [ 2817.946265][ T1378] em28xx 9-1:0.89: Registering snapshot button... [ 2817.974308][ T1378] input: em28xx snapshot button as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.89/input/input215 [ 2818.032774][ T1378] em28xx 9-1:0.89: Remote control support is not available for this card. [ 2818.082666][T15493] em28xx 9-1:0.89: Closing input extension [ 2818.125702][T15493] em28xx 9-1:0.89: Deregistering snapshot button [ 2818.385620][T15493] em28xx 9-1:0.89: Freeing device [ 2819.619917][T30804] usb 9-1: new high-speed USB device number 49 using dummy_hcd [ 2819.828961][T30804] usb 9-1: Using ep0 maxpacket: 16 [ 2819.894931][T30804] usb 9-1: config 0 has no interfaces? [ 2819.976209][T30804] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2820.038912][T30804] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2820.115973][T30804] usb 9-1: Manufacturer: syz [ 2820.195582][T30804] usb 9-1: config 0 descriptor?? [ 2820.289549][T15493] IPVS: starting estimator thread 0... [ 2820.438259][ T4056] IPVS: using max 39 ests per chain, 93600 per kthread [ 2820.438264][ T1378] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 2820.473862][ T4039] netlink: 'syz.8.8855': attribute type 1 has an invalid length. [ 2820.618690][ T1378] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2820.650248][ T1378] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2820.759234][ T1378] usb 5-1: config 0 descriptor?? [ 2820.795671][ T1378] cp210x 5-1:0.0: cp210x converter detected [ 2821.372859][ T1378] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 2821.461537][ T1378] usb 5-1: cp210x converter now attached to ttyUSB0 [ 2821.472978][ T4039] 8021q: adding VLAN 0 to HW filter on device bond3 [ 2821.586850][ T128] usb 1-1: USB disconnect, device number 101 [ 2822.005537][ T4069] gtp5: entered promiscuous mode [ 2822.014946][ T4069] gtp5: entered allmulticast mode [ 2823.927708][T30804] usb 9-1: USB disconnect, device number 49 [ 2824.031152][ T1378] usb 5-1: USB disconnect, device number 107 [ 2824.086017][ T1378] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2824.147944][ T1378] cp210x 5-1:0.0: device disconnected [ 2825.804952][ T4105] FAULT_INJECTION: forcing a failure. [ 2825.804952][ T4105] name failslab, interval 1, probability 0, space 0, times 0 [ 2825.873209][ T4105] CPU: 1 UID: 0 PID: 4105 Comm: syz.0.8869 Tainted: G L syzkaller #0 PREEMPT(full) [ 2825.873236][ T4105] Tainted: [L]=SOFTLOCKUP [ 2825.873242][ T4105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2825.873253][ T4105] Call Trace: [ 2825.873260][ T4105] [ 2825.873294][ T4105] dump_stack_lvl+0xe8/0x150 [ 2825.873330][ T4105] should_fail_ex+0x414/0x560 [ 2825.873371][ T4105] should_failslab+0xa8/0x100 [ 2825.873401][ T4105] __kmalloc_cache_noprof+0x84/0x700 [ 2825.873424][ T4105] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 2825.873461][ T4105] ? nft_trans_table_add+0x56/0x430 [ 2825.873487][ T4105] nft_trans_table_add+0x56/0x430 [ 2825.873508][ T4105] nf_tables_newtable+0xce3/0x1890 [ 2825.873547][ T4105] nfnetlink_rcv+0x11d9/0x2590 [ 2825.873590][ T4105] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 2825.873618][ T4105] ? ref_tracker_free+0x63a/0x7d0 [ 2825.873654][ T4105] ? __netlink_deliver_tap+0x807/0x850 [ 2825.873675][ T4105] ? netlink_deliver_tap+0x2e/0x1b0 [ 2825.873706][ T4105] netlink_unicast+0x82f/0x9e0 [ 2825.873730][ T4105] ? __pfx_netlink_unicast+0x10/0x10 [ 2825.873747][ T4105] ? __alloc_skb+0x198/0x3a0 [ 2825.873764][ T4105] ? netlink_sendmsg+0x642/0xb30 [ 2825.873784][ T4105] ? skb_put+0x11b/0x210 [ 2825.873804][ T4105] netlink_sendmsg+0x805/0xb30 [ 2825.873831][ T4105] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2825.873854][ T4105] ? aa_sock_msg_perm+0xf1/0x1b0 [ 2825.873876][ T4105] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2825.873892][ T4105] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2825.873913][ T4105] __sock_sendmsg+0x21c/0x270 [ 2825.873938][ T4105] ____sys_sendmsg+0x505/0x820 [ 2825.873961][ T4105] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2825.873986][ T4105] ? import_iovec+0x74/0xa0 [ 2825.874008][ T4105] ___sys_sendmsg+0x21f/0x2a0 [ 2825.874028][ T4105] ? __pfx____sys_sendmsg+0x10/0x10 [ 2825.874078][ T4105] ? __fget_files+0x2a/0x420 [ 2825.874098][ T4105] ? __fget_files+0x3a0/0x420 [ 2825.874125][ T4105] __x64_sys_sendmsg+0x19b/0x260 [ 2825.874146][ T4105] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2825.874172][ T4105] ? __pfx_ksys_write+0x10/0x10 [ 2825.874196][ T4105] do_syscall_64+0xec/0xf80 [ 2825.874212][ T4105] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2825.874227][ T4105] ? trace_irq_disable+0x37/0x100 [ 2825.874252][ T4105] ? clear_bhb_loop+0x60/0xb0 [ 2825.874271][ T4105] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2825.874287][ T4105] RIP: 0033:0x7fd2e598f749 [ 2825.874301][ T4105] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2825.874315][ T4105] RSP: 002b:00007fd2e67d8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2825.874333][ T4105] RAX: ffffffffffffffda RBX: 00007fd2e5be5fa0 RCX: 00007fd2e598f749 [ 2825.874345][ T4105] RDX: 0000000000000000 RSI: 000020000000c2c0 RDI: 0000000000000003 [ 2825.874355][ T4105] RBP: 00007fd2e67d8090 R08: 0000000000000000 R09: 0000000000000000 [ 2825.874365][ T4105] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2825.874375][ T4105] R13: 00007fd2e5be6038 R14: 00007fd2e5be5fa0 R15: 00007fd2e5d0fa28 [ 2825.874399][ T4105] [ 2827.700446][ T4122] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8872'. [ 2827.815500][ T4122] bridge_slave_1: left allmulticast mode [ 2827.851074][ T4122] bridge_slave_1: left promiscuous mode [ 2827.889526][ T4122] bridge0: port 2(bridge_slave_1) entered disabled state [ 2827.975248][ T4122] bridge_slave_0: left allmulticast mode [ 2827.982644][ T4122] bridge_slave_0: left promiscuous mode [ 2828.028741][ T4122] bridge0: port 1(bridge_slave_0) entered disabled state [ 2828.308114][T21628] usb 9-1: new high-speed USB device number 50 using dummy_hcd [ 2828.488203][T21628] usb 9-1: Using ep0 maxpacket: 16 [ 2828.516525][T21628] usb 9-1: config 0 has no interfaces? [ 2828.546293][T21628] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2828.587856][T21628] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2828.634990][T21628] usb 9-1: Manufacturer: syz [ 2828.673684][T21628] usb 9-1: config 0 descriptor?? [ 2828.995163][ T4130] netlink: 'syz.8.8874': attribute type 1 has an invalid length. [ 2830.697922][ T4130] 8021q: adding VLAN 0 to HW filter on device bond4 [ 2831.856678][ T30] kauditd_printk_skb: 31 callbacks suppressed [ 2831.856701][ T30] audit: type=1326 audit(1767021701.699:2258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4158 comm="syz.6.8882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd061b8f749 code=0x7ffc0000 [ 2831.918304][ T30] audit: type=1326 audit(1767021701.739:2259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4158 comm="syz.6.8882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd061b8f749 code=0x7ffc0000 [ 2831.979029][ T30] audit: type=1326 audit(1767021701.739:2260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4158 comm="syz.6.8882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd061b8f749 code=0x7ffc0000 [ 2832.051628][ T30] audit: type=1326 audit(1767021701.829:2261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4158 comm="syz.6.8882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd061b8f749 code=0x7ffc0000 [ 2832.144622][ T4170] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8881'. [ 2832.174381][ T30] audit: type=1326 audit(1767021701.989:2262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4158 comm="syz.6.8882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd061b8f749 code=0x7ffc0000 [ 2832.218505][ T1378] usb 5-1: new low-speed USB device number 108 using dummy_hcd [ 2832.251661][ T30] audit: type=1326 audit(1767021701.989:2263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4158 comm="syz.6.8882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd061b8f749 code=0x7ffc0000 [ 2832.324656][ T30] audit: type=1326 audit(1767021702.019:2264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4158 comm="syz.6.8882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd061b8f749 code=0x7ffc0000 [ 2832.400872][ T30] audit: type=1326 audit(1767021702.019:2265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4158 comm="syz.6.8882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd061b8f749 code=0x7ffc0000 [ 2832.478331][ T30] audit: type=1326 audit(1767021702.019:2266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4158 comm="syz.6.8882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd061b8f749 code=0x7ffc0000 [ 2832.530550][ T30] audit: type=1326 audit(1767021702.059:2267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4158 comm="syz.6.8882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7fd061b8f749 code=0x7ffc0000 [ 2833.080839][ T1378] usb 5-1: unable to get BOS descriptor or descriptor too short [ 2833.784316][ T1378] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2833.998215][ T1378] usb 5-1: too many endpoints for config 1 interface 0 altsetting 7: 66, using maximum allowed: 30 [ 2834.161208][ T1378] usb 5-1: config 1 interface 0 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 66 [ 2834.222656][ T1378] usb 5-1: config 1 interface 0 has no altsetting 0 [ 2835.269790][T15494] usb 10-1: new low-speed USB device number 53 using dummy_hcd [ 2835.498264][ T24] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 2835.526606][T15494] usb 10-1: unable to get BOS descriptor or descriptor too short [ 2835.559668][T15494] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2835.588169][T15494] usb 10-1: too many endpoints for config 1 interface 0 altsetting 7: 66, using maximum allowed: 30 [ 2835.588218][T15494] usb 10-1: config 1 interface 0 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 66 [ 2835.674643][T15494] usb 10-1: config 1 interface 0 has no altsetting 0 [ 2835.730252][T15494] usb 10-1: string descriptor 0 read error: -22 [ 2835.745125][T15494] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2835.760689][ T24] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2835.792587][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2835.810108][T15494] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2835.923526][ T24] usb 1-1: config 0 descriptor?? [ 2835.982148][T15494] usb 10-1: bad CDC descriptors [ 2835.992583][ T1378] usb 5-1: string descriptor 0 read error: -71 [ 2836.010102][ T24] cp210x 1-1:0.0: cp210x converter detected [ 2836.061343][ T1378] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2836.093601][ T1378] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2836.154422][ T1378] usb 5-1: can't set config #1, error -71 [ 2836.172086][ T1378] usb 5-1: USB disconnect, device number 108 [ 2836.422474][ T24] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 2836.462066][ T24] usb 1-1: cp210x converter now attached to ttyUSB0 [ 2836.805737][ T24] usb 9-1: USB disconnect, device number 50 [ 2836.957285][ T4213] netlink: 'syz.8.8890': attribute type 13 has an invalid length. [ 2838.440564][ T24] usb 1-1: USB disconnect, device number 102 [ 2838.483656][ T24] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2838.556448][ T1378] usb 10-1: USB disconnect, device number 53 [ 2838.600649][ T24] cp210x 1-1:0.0: device disconnected [ 2839.082438][ T4245] vivid-007: disconnect [ 2839.440784][T21628] usb 10-1: new full-speed USB device number 54 using dummy_hcd [ 2839.600510][ T5883] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 2839.639360][T21628] usb 10-1: config 0 has an invalid interface number: 207 but max is 0 [ 2839.685801][T21628] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2839.757540][ T4235] vivid-007: reconnect [ 2839.779614][T21628] usb 10-1: config 0 has no interface number 0 [ 2839.811548][T21628] usb 10-1: New USB device found, idVendor=12d1, idProduct=ed56, bcdDevice=46.dd [ 2839.848943][T21628] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2839.858234][ T5883] usb 1-1: Using ep0 maxpacket: 16 [ 2839.882853][ T5883] usb 1-1: config 0 has no interfaces? [ 2839.924167][ T5883] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2839.945024][T21628] usb 10-1: Product: syz [ 2839.976314][T21628] usb 10-1: Manufacturer: syz [ 2840.001556][ T5883] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2840.039577][T21628] usb 10-1: SerialNumber: syz [ 2840.073984][T21628] usb 10-1: config 0 descriptor?? [ 2840.079804][ T5883] usb 1-1: Manufacturer: syz [ 2840.121657][ T5883] usb 1-1: config 0 descriptor?? [ 2840.366698][T21628] qmi_wwan 10-1:0.207: probe with driver qmi_wwan failed with error -22 [ 2840.424510][T21628] usb 10-1: USB disconnect, device number 54 [ 2840.661162][ T4248] netlink: 'syz.0.8898': attribute type 1 has an invalid length. [ 2840.879586][ T4248] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2841.060936][ T4249] bond0: (slave gretap1): making interface the new active one [ 2841.134843][ T4249] bond0: (slave gretap1): Enslaving as an active interface with an up link [ 2841.522003][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 2841.533181][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 2841.869719][ T24] usb 9-1: new high-speed USB device number 51 using dummy_hcd [ 2842.038761][ T24] usb 9-1: Using ep0 maxpacket: 16 [ 2842.063532][ T24] usb 9-1: config 0 has no interfaces? [ 2842.094320][ T24] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2842.133558][ T24] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2842.184046][ T24] usb 9-1: Manufacturer: syz [ 2842.248816][ T24] usb 9-1: config 0 descriptor?? [ 2842.559574][ T4260] netlink: 'syz.8.8900': attribute type 1 has an invalid length. [ 2842.772761][ T4260] 8021q: adding VLAN 0 to HW filter on device bond5 [ 2843.372372][ T24] usb 1-1: USB disconnect, device number 103 [ 2843.961506][ T4290] netlink: 'syz.0.8906': attribute type 1 has an invalid length. [ 2844.215130][ T4290] 8021q: adding VLAN 0 to HW filter on device bond7 [ 2844.607469][ T4290] vlan2: entered allmulticast mode [ 2844.618750][ T4290] bond7: entered allmulticast mode [ 2845.582924][ T1378] usb 9-1: USB disconnect, device number 51 [ 2846.379154][ T4304] vivid-007: disconnect [ 2846.929661][ T5883] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 2847.081690][T29812] bond0 (unregistering): (slave gretap1): Releasing active interface [ 2847.158076][ T5883] usb 5-1: Using ep0 maxpacket: 16 [ 2847.190271][ T5883] usb 5-1: config 0 has no interfaces? [ 2847.259880][ T5883] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2847.272403][ T4299] vivid-007: reconnect [ 2847.301317][ T5883] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2847.347175][ T5883] usb 5-1: Manufacturer: syz [ 2847.397497][ T5883] usb 5-1: config 0 descriptor?? [ 2847.722368][ T4308] netlink: 'syz.4.8910': attribute type 1 has an invalid length. [ 2848.573264][T29812] bond0 (unregistering): Released all slaves [ 2848.745761][ T4308] 8021q: adding VLAN 0 to HW filter on device bond13 [ 2848.834121][ T4317] vlan2: entered allmulticast mode [ 2848.839762][ T4317] bond13: entered allmulticast mode [ 2849.183107][ T4322] gtp5: entered promiscuous mode [ 2849.190290][ T4322] gtp5: entered allmulticast mode [ 2849.668107][ T1378] usb 9-1: new high-speed USB device number 52 using dummy_hcd [ 2850.858446][ T1378] usb 9-1: Using ep0 maxpacket: 32 [ 2852.795384][ T1378] usb 9-1: unable to read config index 0 descriptor/all [ 2852.825128][ T1378] usb 9-1: can't read configurations, error -71 [ 2852.928234][T15493] usb 10-1: new high-speed USB device number 55 using dummy_hcd [ 2852.949556][ T4358] netlink: 'syz.0.8922': attribute type 1 has an invalid length. [ 2852.986043][T15494] usb 5-1: USB disconnect, device number 109 [ 2853.128301][T15493] usb 10-1: Using ep0 maxpacket: 32 [ 2853.160126][T15493] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2853.182072][ T4358] 8021q: adding VLAN 0 to HW filter on device bond8 [ 2853.299072][T15493] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2853.365036][ T4363] vlan2: entered allmulticast mode [ 2853.393658][T15493] usb 10-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 2853.433981][ T4363] bond8: entered allmulticast mode [ 2853.470943][T15493] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2853.556597][T15493] usb 10-1: Product: syz [ 2853.581138][T15493] usb 10-1: Manufacturer: syz [ 2853.659564][T15493] usb 10-1: SerialNumber: syz [ 2853.729348][T15493] usb 10-1: config 0 descriptor?? [ 2854.318139][ T128] usb 9-1: new low-speed USB device number 54 using dummy_hcd [ 2854.530262][ T128] usb 9-1: unable to get BOS descriptor or descriptor too short [ 2854.610892][ T128] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2854.676899][ T128] usb 9-1: too many endpoints for config 1 interface 0 altsetting 7: 66, using maximum allowed: 30 [ 2854.774427][ T128] usb 9-1: config 1 interface 0 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 66 [ 2854.913033][ T128] usb 9-1: config 1 interface 0 has no altsetting 0 [ 2854.990655][ T128] usb 9-1: string descriptor 0 read error: -22 [ 2855.025215][ T128] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2855.047835][ T128] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2855.218733][ T128] usb 9-1: bad CDC descriptors [ 2856.035140][T15494] usb 10-1: USB disconnect, device number 55 [ 2857.772549][ T4420] x_tables: duplicate underflow at hook 1 [ 2857.888103][T15494] usb 10-1: new high-speed USB device number 56 using dummy_hcd [ 2858.068860][T15494] usb 10-1: device descriptor read/64, error -71 [ 2858.152485][ T24] usb 9-1: USB disconnect, device number 54 [ 2858.338312][T15494] usb 10-1: new high-speed USB device number 57 using dummy_hcd [ 2858.458092][ T1378] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 2858.489805][T15494] usb 10-1: device descriptor read/64, error -71 [ 2858.558239][ T24] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 2858.618618][T15494] usb usb10-port1: attempt power cycle [ 2858.653011][ T1378] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2858.718117][ T1378] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2858.788186][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 2858.800678][ T1378] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2858.816439][ T1378] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2858.826133][ T24] usb 5-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2858.840999][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2858.851509][ T24] usb 5-1: New USB device found, idVendor=20a0, idProduct=4287, bcdDevice= 0.00 [ 2858.904477][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2858.917031][ T1378] usb 1-1: config 0 descriptor?? [ 2858.977456][ T24] usb 5-1: config 0 descriptor?? [ 2859.088100][T15494] usb 10-1: new high-speed USB device number 58 using dummy_hcd [ 2859.179653][T15494] usb 10-1: device descriptor read/8, error -71 [ 2859.508149][T15494] usb 10-1: new high-speed USB device number 59 using dummy_hcd [ 2859.539784][T15494] usb 10-1: device descriptor read/8, error -71 [ 2859.558646][ T1378] plantronics 0003:047F:FFFF.005B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 2859.678462][T29223] usb 9-1: new low-speed USB device number 55 using dummy_hcd [ 2859.713061][ T24] usbhid 5-1:0.0: can't add hid device: -71 [ 2859.733763][T15494] usb usb10-port1: unable to enumerate USB device [ 2859.788141][ T24] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 2859.902635][T29223] usb 9-1: unable to get BOS descriptor or descriptor too short [ 2859.939441][ T24] usb 5-1: USB disconnect, device number 110 [ 2859.951344][T29223] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2860.005602][T29223] usb 9-1: too many endpoints for config 1 interface 0 altsetting 7: 66, using maximum allowed: 30 [ 2860.074000][T29223] usb 9-1: config 1 interface 0 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 66 [ 2860.114655][ T1378] usb 1-1: USB disconnect, device number 104 [ 2860.121807][T29223] usb 9-1: config 1 interface 0 has no altsetting 0 [ 2860.173793][T29223] usb 9-1: string descriptor 0 read error: -22 [ 2860.180433][T29223] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2860.192905][T29223] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2860.294733][T29223] usb 9-1: bad CDC descriptors [ 2861.093058][T15494] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 2861.310062][T15494] usb 5-1: Using ep0 maxpacket: 16 [ 2861.384399][T15494] usb 5-1: New USB device found, idVendor=046d, idProduct=08b5, bcdDevice=d7.01 [ 2861.452462][T15494] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2861.495490][T15494] usb 5-1: Product: syz [ 2861.513018][T15494] usb 5-1: Manufacturer: syz [ 2861.527704][T15494] usb 5-1: SerialNumber: syz [ 2861.547360][T15494] usb 5-1: config 0 descriptor?? [ 2861.580997][T15494] pwc: Logitech QuickCam Orbit/Sphere USB webcam detected. [ 2861.773950][T15494] pwc: Warning: more than 1 configuration available. [ 2861.801830][T15494] pwc: Failed to set LED on/off time (-71) [ 2861.845829][T15494] pwc: send_video_command error -71 [ 2861.864549][T15494] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 2861.895628][T15494] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71 [ 2861.936809][T15494] usb 5-1: USB disconnect, device number 111 [ 2862.338342][T15494] usb 9-1: USB disconnect, device number 55 [ 2862.785219][ T4467] gtp4: entered promiscuous mode [ 2862.798414][T15494] usb 10-1: new low-speed USB device number 60 using dummy_hcd [ 2862.810496][ T4467] gtp4: entered allmulticast mode [ 2862.971226][T15494] usb 10-1: unable to get BOS descriptor or descriptor too short [ 2862.998644][T15494] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2863.031997][T15494] usb 10-1: too many endpoints for config 1 interface 0 altsetting 7: 66, using maximum allowed: 30 [ 2863.064175][T15494] usb 10-1: config 1 interface 0 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 66 [ 2863.097293][ T4475] gtp1: entered promiscuous mode [ 2863.108213][ T4475] gtp1: entered allmulticast mode [ 2863.170836][T15494] usb 10-1: config 1 interface 0 has no altsetting 0 [ 2863.246844][T15494] usb 10-1: string descriptor 0 read error: -22 [ 2863.299531][T15494] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2863.374291][T15494] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2863.461540][T15494] usb 10-1: bad CDC descriptors [ 2864.378778][T29223] usb 5-1: new full-speed USB device number 112 using dummy_hcd [ 2864.605181][T29223] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 10 [ 2864.688488][T29223] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2864.757698][T29223] usb 5-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice=7e.66 [ 2864.827707][T29223] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2864.858752][ T4487] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8951'. [ 2864.888463][T29223] usb 5-1: Product: syz [ 2864.910318][T29223] usb 5-1: Manufacturer: syz [ 2864.937263][T29223] usb 5-1: SerialNumber: syz [ 2864.978786][T29223] usb 5-1: config 0 descriptor?? [ 2864.995188][ T4488] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8951'. [ 2865.067077][T29223] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -90 [ 2865.099096][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880591be000: rx timeout, send abort [ 2865.921303][ T4497] netlink: 108 bytes leftover after parsing attributes in process `syz.8.8954'. [ 2865.964598][T29223] usb 10-1: USB disconnect, device number 60 [ 2867.289214][T15494] usb 9-1: new high-speed USB device number 56 using dummy_hcd [ 2867.483908][ T4522] [ 2867.486285][ T4522] ====================================================== [ 2867.493603][ T4522] WARNING: possible circular locking dependency detected [ 2867.500936][ T4522] syzkaller #0 Tainted: G L [ 2867.506967][ T4522] ------------------------------------------------------ [ 2867.514030][ T4522] syz.9.8962/4522 is trying to acquire lock: [ 2867.520046][ T4522] ffff8880345420a8 (&ctx->uring_lock){+.+.}-{4:4}, at: io_uring_del_tctx_node+0xf0/0x2c0 [ 2867.530069][ T4522] [ 2867.530069][ T4522] but task is already holding lock: [ 2867.537587][ T4522] ffff888030272a20 (&sig->cred_guard_mutex){+.+.}-{4:4}, at: bprm_execve+0xb9/0x1400 [ 2867.547144][ T4522] [ 2867.547144][ T4522] which lock already depends on the new lock. [ 2867.547144][ T4522] [ 2867.557565][ T4522] [ 2867.557565][ T4522] the existing dependency chain (in reverse order) is: [ 2867.566583][ T4522] [ 2867.566583][ T4522] -> #2 (&sig->cred_guard_mutex){+.+.}-{4:4}: [ 2867.574847][ T4522] __mutex_lock+0x187/0x1350 [ 2867.579974][ T4522] proc_pid_attr_write+0x547/0x630 [ 2867.585625][ T4522] vfs_write+0x27e/0xb30 [ 2867.590419][ T4522] ksys_write+0x145/0x250 [ 2867.595278][ T4522] do_syscall_64+0xec/0xf80 [ 2867.600398][ T4522] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2867.607014][ T4522] [ 2867.607014][ T4522] -> #1 (sb_writers#3){.+.+}-{0:0}: [ 2867.614595][ T4522] sb_start_write+0x4d/0x1c0 [ 2867.619750][ T4522] mnt_want_write+0x41/0x90 [ 2867.624828][ T4522] path_openat+0xadd/0x3dd0 [ 2867.629998][ T4522] do_filp_open+0x1fa/0x410 [ 2867.635028][ T4522] io_openat2+0x3e0/0x5c0 [ 2867.639886][ T4522] __io_issue_sqe+0x181/0x4b0 [ 2867.645099][ T4522] io_issue_sqe+0x165/0x1060 [ 2867.650218][ T4522] io_submit_sqes+0xbf4/0x2140 [ 2867.655508][ T4522] __se_sys_io_uring_enter+0x2e0/0x2b60 [ 2867.661585][ T4522] do_syscall_64+0xec/0xf80 [ 2867.666619][ T4522] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2867.673219][ T4522] [ 2867.673219][ T4522] -> #0 (&ctx->uring_lock){+.+.}-{4:4}: [ 2867.680983][ T4522] __lock_acquire+0x15a6/0x2cf0 [ 2867.686362][ T4522] lock_acquire+0x107/0x340 [ 2867.691407][ T4522] __mutex_lock+0x187/0x1350 [ 2867.696540][ T4522] io_uring_del_tctx_node+0xf0/0x2c0 [ 2867.702384][ T4522] io_uring_clean_tctx+0xd4/0x1a0 [ 2867.708011][ T4522] io_uring_cancel_generic+0x6ca/0x7d0 [ 2867.714033][ T4522] begin_new_exec+0x10ed/0x2440 [ 2867.719426][ T4522] load_elf_binary+0x9f8/0x2d70 [ 2867.724845][ T4522] bprm_execve+0x92e/0x1400 [ 2867.729902][ T4522] do_execveat_common+0x510/0x6a0 [ 2867.735612][ T4522] __x64_sys_execveat+0xc4/0xe0 [ 2867.741006][ T4522] do_syscall_64+0xec/0xf80 [ 2867.746054][ T4522] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2867.752473][ T4522] [ 2867.752473][ T4522] other info that might help us debug this: [ 2867.752473][ T4522] [ 2867.762710][ T4522] Chain exists of: [ 2867.762710][ T4522] &ctx->uring_lock --> sb_writers#3 --> &sig->cred_guard_mutex [ 2867.762710][ T4522] [ 2867.776213][ T4522] Possible unsafe locking scenario: [ 2867.776213][ T4522] [ 2867.783755][ T4522] CPU0 CPU1 [ 2867.789132][ T4522] ---- ---- [ 2867.794522][ T4522] lock(&sig->cred_guard_mutex); [ 2867.799581][ T4522] lock(sb_writers#3); [ 2867.806313][ T4522] lock(&sig->cred_guard_mutex); [ 2867.813895][ T4522] lock(&ctx->uring_lock); [ 2867.818411][ T4522] [ 2867.818411][ T4522] *** DEADLOCK *** [ 2867.818411][ T4522] [ 2867.826564][ T4522] 1 lock held by syz.9.8962/4522: [ 2867.831599][ T4522] #0: ffff888030272a20 (&sig->cred_guard_mutex){+.+.}-{4:4}, at: bprm_execve+0xb9/0x1400 [ 2867.841989][ T4522] [ 2867.841989][ T4522] stack backtrace: [ 2867.847907][ T4522] CPU: 0 UID: 0 PID: 4522 Comm: syz.9.8962 Tainted: G L syzkaller #0 PREEMPT(full) [ 2867.847933][ T4522] Tainted: [L]=SOFTLOCKUP [ 2867.847939][ T4522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2867.847966][ T4522] Call Trace: [ 2867.847977][ T4522] [ 2867.847987][ T4522] dump_stack_lvl+0xe8/0x150 [ 2867.848023][ T4522] print_circular_bug+0x2e2/0x300 [ 2867.848046][ T4522] check_noncircular+0x12e/0x150 [ 2867.848068][ T4522] __lock_acquire+0x15a6/0x2cf0 [ 2867.848093][ T4522] ? io_uring_del_tctx_node+0xf0/0x2c0 [ 2867.848115][ T4522] lock_acquire+0x107/0x340 [ 2867.848130][ T4522] ? io_uring_del_tctx_node+0xf0/0x2c0 [ 2867.848158][ T4522] __mutex_lock+0x187/0x1350 [ 2867.848175][ T4522] ? io_uring_del_tctx_node+0xf0/0x2c0 [ 2867.848201][ T4522] ? io_uring_del_tctx_node+0xf0/0x2c0 [ 2867.848224][ T4522] ? __pfx___mutex_lock+0x10/0x10 [ 2867.848241][ T4522] ? do_raw_spin_unlock+0x122/0x240 [ 2867.848265][ T4522] ? _raw_spin_unlock+0x28/0x50 [ 2867.848288][ T4522] ? xa_erase+0xd5/0xf0 [ 2867.848307][ T4522] io_uring_del_tctx_node+0xf0/0x2c0 [ 2867.848330][ T4522] io_uring_clean_tctx+0xd4/0x1a0 [ 2867.848353][ T4522] ? __pfx_io_uring_clean_tctx+0x10/0x10 [ 2867.848375][ T4522] ? lockdep_hardirqs_on+0x7b/0x110 [ 2867.848390][ T4522] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 2867.848414][ T4522] ? __percpu_counter_sum+0x1c2/0x1e0 [ 2867.848440][ T4522] io_uring_cancel_generic+0x6ca/0x7d0 [ 2867.848467][ T4522] ? __pfx_io_uring_cancel_generic+0x10/0x10 [ 2867.848492][ T4522] ? __pfx_autoremove_wake_function+0x10/0x10 [ 2867.848517][ T4522] ? io_uring_unreg_ringfd+0x52f/0x540 [ 2867.848537][ T4522] begin_new_exec+0x10ed/0x2440 [ 2867.848568][ T4522] ? __pfx_begin_new_exec+0x10/0x10 [ 2867.848591][ T4522] ? rw_verify_area+0x2a6/0x4d0 [ 2867.848615][ T4522] ? __kmalloc_noprof+0x43e/0x800 [ 2867.848633][ T4522] load_elf_binary+0x9f8/0x2d70 [ 2867.848663][ T4522] ? lock_acquire+0x107/0x340 [ 2867.848683][ T4522] ? __pfx_load_elf_binary+0x10/0x10 [ 2867.848713][ T4522] bprm_execve+0x92e/0x1400 [ 2867.848743][ T4522] ? __pfx_bprm_execve+0x10/0x10 [ 2867.848768][ T4522] ? copy_string_kernel+0x25f/0x2a0 [ 2867.848793][ T4522] do_execveat_common+0x510/0x6a0 [ 2867.848812][ T4522] __x64_sys_execveat+0xc4/0xe0 [ 2867.848835][ T4522] do_syscall_64+0xec/0xf80 [ 2867.848851][ T4522] ? rcu_is_watching+0x15/0xb0 [ 2867.848869][ T4522] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2867.848885][ T4522] ? clear_bhb_loop+0x60/0xb0 [ 2867.848903][ T4522] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2867.848919][ T4522] RIP: 0033:0x7f7958f8f749 [ 2867.848935][ T4522] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2867.848950][ T4522] RSP: 002b:00007f7959d74038 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 2867.848968][ T4522] RAX: ffffffffffffffda RBX: 00007f79591e5fa0 RCX: 00007f7958f8f749 [ 2867.848980][ T4522] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000010 [ 2867.848991][ T4522] RBP: 00007f7959013f91 R08: 0000000000001000 R09: 0000000000000000 [ 2867.849002][ T4522] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2867.849012][ T4522] R13: 00007f79591e6038 R14: 00007f79591e5fa0 R15: 00007f795930fa28 [ 2867.849030][ T4522] [ 2868.194273][T15494] usb 9-1: Using ep0 maxpacket: 8 [ 2868.318989][T15494] usb 9-1: config 0 has an invalid descriptor of length 234, skipping remainder of the config [ 2868.424074][T15494] usb 9-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 2868.453392][ T4522] process 'memfd:-BN4EyѧS:)' started with executable stack [ 2868.468060][T15494] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 2868.476294][T15494] usb 9-1: SerialNumber: syz [ 2868.522191][T15494] usb 9-1: config 0 descriptor?? [ 2868.601805][ T5883] usb 5-1: USB disconnect, device number 112 [ 2868.738886][ T4512] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2868.756606][ T4512] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2869.338268][T15494] uvcvideo 9-1:0.0: Found UVC 0.00 device (05ac:8501) [ 2869.348488][T15494] uvcvideo 9-1:0.0: Failed to create links for entity 255 [ 2869.366936][T15494] uvcvideo 9-1:0.0: Failed to register entities (-22). [ 2869.391189][T15494] usb 9-1: USB disconnect, device number 56