last executing test programs: 2m28.866127642s ago: executing program 0 (id=411): r0 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x4, @loopback={0xff00000000000000}, 0xffffffff, 0x1}, 0x80, 0x0}, 0x0) 2m28.835446337s ago: executing program 0 (id=412): syz_open_dev$vbi(0x0, 0x2, 0x2) (async, rerun: 64) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newspdinfo={0x1c, 0x24, 0x801, 0x70bd2d, 0x25dfdbfa, 0xc, [@XFRMA_SPD_IPV6_HTHRESH={0x6, 0x4, {0xfd}}]}, 0x1c}}, 0x40050) (async) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) r4 = userfaultfd(0x80801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x749}) (async, rerun: 64) r5 = epoll_create1(0x0) (rerun: 64) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000040)={0x40000008}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) (async) madvise(&(0x7f0000c0c000/0x1000)=nil, 0x1000, 0x4) (async, rerun: 32) readv(r4, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/163, 0xa3}], 0x1) (rerun: 32) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) io_uring_setup(0x1004c55, &(0x7f0000000180)={0x0, 0x7c70, 0x10000, 0x2, 0x2ba}) (async) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0401273, &(0x7f0000000200)={'\x00', 0xff4a, 0x8, 0x4, 0x7, 0xfffffffffffffffb, 0xffffffffffffffff}) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x2000775) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) (rerun: 64) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x28, r6, 0x5, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}]]}, 0x28}, 0x1, 0x0, 0x0, 0x40895}, 0x0) sendmsg$NL80211_CMD_PROBE_CLIENT(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340), 0xc, &(0x7f0000000300)={&(0x7f0000000380)={0x34, 0x0, 0x20, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x8801}, 0x2) (async, rerun: 32) r8 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@delneigh={0x44, 0x1a, 0x1, 0x70bd2b, 0x0, {0xa, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4}, [@NDA_CACHEINFO={0x14, 0x3, {0x7}}, @NDA_DST_IPV6={0x14, 0x1, @mcast1}]}, 0x44}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'bond0\x00'}) (async, rerun: 64) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x8001, 0x0, 0x0, 0x0, 0x0) (rerun: 64) 2m28.537596442s ago: executing program 0 (id=413): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000002e00090027bd7000000000000400", @ANYRES32=0x0, @ANYBLOB="0c0016"], 0x28}, 0x1, 0x0, 0x0, 0x42804}, 0x0) 2m27.974772245s ago: executing program 0 (id=416): r0 = socket(0x400000000010, 0x3, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=@newtfilter={0x24, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0x4}, {}, {0x7, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20041091}, 0xc000) r1 = socket$kcm(0x10, 0x2, 0x4) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) ioctl$SNDCTL_TMR_TEMPO(r2, 0xc0045405, &(0x7f0000000080)=0x148) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x258, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000140081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) 2m27.506367246s ago: executing program 0 (id=419): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) ioctl$SNAPSHOT_FREE(r1, 0x3305) r2 = socket(0x1, 0x803, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x11, 0x4, 0x4, 0x9}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x5, 0x6, 0x8, 0xae, 0x0, 0x1, 0x20727ff}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0xd, 0x2, 0x4, 0x4006, 0x5, r3, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x8000000}, 0x50) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x34, 0x24, 0x800, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {0x0, 0x6}, {0xd, 0xd}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}, 0x1, 0x0, 0x0, 0x20008801}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r5, &(0x7f0000000000), 0xfffffecc) splice(r4, 0x0, r6, 0x0, 0x4ffe6, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r8 = openat$hwrng(0xffffff9c, &(0x7f0000000000), 0x80000, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f00000005c0)={{{@in, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@empty}}, &(0x7f0000000480)=0xe4) setsockopt$inet6_IPV6_IPSEC_POLICY(r8, 0x29, 0x22, &(0x7f00000004c0)={{{@in6=@remote, @in6=@private1, 0x4e21, 0x1, 0x4e20, 0x8, 0xa, 0x80, 0x0, 0x33, r7, r9}, {0x3, 0x1, 0x1, 0x4, 0x5, 0x1, 0x81, 0x8}, {0x80, 0x2, 0x800000000000, 0x5}, 0xffffffff, 0x6e6bb8, 0x1, 0x0, 0x1, 0x3}, {{@in=@multicast1, 0x4d2, 0x33}, 0x8, @in=@local, 0x3501, 0x3, 0x2, 0x3, 0x101, 0x7fffffff, 0x31}}, 0xe4) r10 = open(&(0x7f0000000040)='./file0\x00', 0x2a080, 0x21) flock(r10, 0x2) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r12 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f00000040c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r12, &(0x7f00000041c0)={0x0, 0x0, &(0x7f0000004180)={&(0x7f0000004100)={0x24, r11, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x80) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0xef}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x44}}, 0x8000) 2m26.534755491s ago: executing program 0 (id=424): syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100008e88052086800095d89301020301090212000100000000090401"], 0x0) syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) r0 = openat$iommufd(0xffffff9c, &(0x7f0000000000), 0x8480, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f00000000c0)={0xc, 0x0}) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f0000000100)={0x28, 0x4, r1, 0x0, 0x6, 0x8, 0x8000}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0xb, 0x8000000000000000, 0x6, 0xfa11, 0xffffffff}, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x13, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@ldst={0x1, 0x3, 0x3, 0x8, 0x1, 0xa8}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x4, &(0x7f0000000480)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x28, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, 0x3b) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) ioctl$USBDEVFS_IOCTL(r4, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) 2m18.381239835s ago: executing program 2 (id=456): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'wg1\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r3 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r1, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x10, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x4}, @TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0x1}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40001}, 0x10) 2m18.261120211s ago: executing program 2 (id=457): syz_emit_ethernet(0x4e, &(0x7f0000000100)=ANY=[@ANYBLOB="0180c20000000180c200000086dd60081f2000183aff20010000000000000000000000000001ff02000000000000000000000000000188009078ff000000fc02000000ff00"/78], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r1, 0x114, 0x6, &(0x7f0000000680)=0x1, 0x4) ppoll(&(0x7f0000000080)=[{r1, 0x800}], 0x1, &(0x7f0000000180)={0x0, 0x3938700}, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000006c0)={0x0, 0x600, &(0x7f0000000280)={&(0x7f0000000140)=@newlink={0x34, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1, 0x53f}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}]}, 0x34}}, 0x0) connect$netlink(r4, &(0x7f0000000040)=@proc={0x10, 0x0, 0x25dfdbfe, 0x200000}, 0xc) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r5, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, &(0x7f0000000480)=[{&(0x7f0000000180)="f7", 0x6d47}], 0x1}, 0x0) ioctl$TIOCPKT(r3, 0x5420, &(0x7f0000000580)=0x8) r6 = syz_open_dev$ptys(0xc, 0x3, 0x0) syz_usb_connect(0x0, 0x7a, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e25f01403767010066de0102030109026800020002000009044a00037d998b070524060000"], 0x0) ioctl$TCXONC(r6, 0x540a, 0x0) ioctl$TCXONC(r6, 0x540a, 0x1) ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r7, 0x4004ae99, &(0x7f0000000040)=0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r7, 0x0) clock_gettime(0xfffffffffffffffb, 0x0) ioctl$KVM_INTERRUPT(r7, 0x4004ae86, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000050000000000000000000000000a54000000060a0b04000000000000000002000000200004801c0001800960ca674c84244af8c70001006d617371000000000c000280080003400000000a0900010073797a30000000000900020080797a3200000000050007400000000000000100000a00"/133], 0x7c}}, 0x0) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000000c0)={[0x8, 0x100000b, 0x9, 0x0, 0x1, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x6, 0x1, 0x3], 0x0, 0x8340}) ioctl$KVM_RUN(r7, 0xae80, 0x0) 2m16.286741486s ago: executing program 2 (id=470): shutdown(0xffffffffffffffff, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100955b2e843be1f9d418d84131aae8020200000010550726260000000000010902240009210000000122290009058103100000fce900"/69], 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x800) accept4$unix(r2, 0x0, 0x0, 0x80800) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f0000000980)=ANY=[@ANYBLOB="2023a000"], 0x0, 0x0, 0x0, 0x0}, 0x0) 2m13.19350828s ago: executing program 2 (id=474): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000600)={0x18, 0x110, 0xfa00, {0xffffffffffffffff, 0x7fffffff, 0x12, 0x0, 0x0, @in={0x2, 0x4e21, @broadcast}, @in={0x2, 0x4e20, @loopback}}}, 0x118) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x100000b, 0x8010, r0, 0xf9990000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x439, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0x9801}, [@IFLA_LINK_NETNSID={0x8, 0x25, 0xffffffff}]}, 0x28}, 0x1, 0x0, 0x0, 0xc811}, 0x8000) r2 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000040)={0x0, 0x4}, &(0x7f00000000c0)=0x8) r4 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x80000) ioctl$IOC_PR_RESERVE(r4, 0x401070c9, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000100)={r3, 0x20fc00}, 0x8) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000d80)=@filter={'filter\x00', 0xe, 0x5, 0x6e6, [0x0, 0x200000000680, 0x20000000094c, 0x200000000bf0], 0x0, 0x0, 0x0}, 0x807) 2m13.137488573s ago: executing program 2 (id=476): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.avg_queue_size\x00', 0x26e1, 0x0) close(r0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10, 0x0}, 0x3000c085) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f0000000100)=r2, 0x4) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000740)={0x14, 0x0, 0x2, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x40804}, 0x80) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x14, 0x7, 0xa, 0x201, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x41020000, 0x0, 0x2400c804}, 0x10) 2m13.02612559s ago: executing program 2 (id=478): syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100008e88052086800095d89301020301090212000100000000090401"], 0x0) syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) r0 = openat$iommufd(0xffffff9c, &(0x7f0000000000), 0x8480, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f00000000c0)={0xc, 0x0}) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f0000000100)={0x28, 0x4, r1, 0x0, 0x6, 0x8, 0x8000}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0xb, 0x8000000000000000, 0x6, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r4 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) writev(r4, &(0x7f0000000380)=[{&(0x7f0000000400)}, {&(0x7f00000004c0)="ea70918135eaab3a884242c9d1d25114aa96787c02826ef6ca3afcb0b9dcdf64e03e2d393b8f9ce9a5e0ad21c8e307f9e4bb018c5b22023f073f9fbe1508819dd448be8d9873aa90426f3cf4c187d10215395e8a7807e5893b0bd80f4ff745fe7f9c316d18f69265662694", 0x6b}], 0x2) syz_open_dev$sndpcmc(0x0, 0x0, 0x42c001) r5 = syz_open_procfs(0xffffffffffffffff, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp6\x00') read$FUSE(r6, &(0x7f00000051c0)={0x2020}, 0x2020) pread64(r6, 0x0, 0x0, 0xadc) mount_setattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r7 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x13, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@ldst={0x1, 0x3, 0x3, 0x8, 0x1, 0xa8}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x4, &(0x7f0000000480)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x28, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, 0x3b) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) ioctl$USBDEVFS_IOCTL(r7, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) 2m11.446289436s ago: executing program 32 (id=424): syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100008e88052086800095d89301020301090212000100000000090401"], 0x0) syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) r0 = openat$iommufd(0xffffff9c, &(0x7f0000000000), 0x8480, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f00000000c0)={0xc, 0x0}) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f0000000100)={0x28, 0x4, r1, 0x0, 0x6, 0x8, 0x8000}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0xb, 0x8000000000000000, 0x6, 0xfa11, 0xffffffff}, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x13, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@ldst={0x1, 0x3, 0x3, 0x8, 0x1, 0xa8}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x4, &(0x7f0000000480)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x28, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, 0x3b) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) ioctl$USBDEVFS_IOCTL(r4, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) 1m57.976460522s ago: executing program 33 (id=478): syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100008e88052086800095d89301020301090212000100000000090401"], 0x0) syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) r0 = openat$iommufd(0xffffff9c, &(0x7f0000000000), 0x8480, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f00000000c0)={0xc, 0x0}) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f0000000100)={0x28, 0x4, r1, 0x0, 0x6, 0x8, 0x8000}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0xb, 0x8000000000000000, 0x6, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r4 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) writev(r4, &(0x7f0000000380)=[{&(0x7f0000000400)}, {&(0x7f00000004c0)="ea70918135eaab3a884242c9d1d25114aa96787c02826ef6ca3afcb0b9dcdf64e03e2d393b8f9ce9a5e0ad21c8e307f9e4bb018c5b22023f073f9fbe1508819dd448be8d9873aa90426f3cf4c187d10215395e8a7807e5893b0bd80f4ff745fe7f9c316d18f69265662694", 0x6b}], 0x2) syz_open_dev$sndpcmc(0x0, 0x0, 0x42c001) r5 = syz_open_procfs(0xffffffffffffffff, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp6\x00') read$FUSE(r6, &(0x7f00000051c0)={0x2020}, 0x2020) pread64(r6, 0x0, 0x0, 0xadc) mount_setattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r7 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x13, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@ldst={0x1, 0x3, 0x3, 0x8, 0x1, 0xa8}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x4, &(0x7f0000000480)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x28, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, 0x3b) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) ioctl$USBDEVFS_IOCTL(r7, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) 1m27.438618424s ago: executing program 1 (id=644): r0 = socket(0x3e, 0x6, 0xe) connect$tipc(r0, &(0x7f0000000040)=@id, 0x10) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000340)=""/108, 0x6c}], 0x1, &(0x7f0000000600)=""/214, 0xd6}, 0x2}], 0x1, 0x80000000, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) ioctl$TIOCL_SETVESABLANK(r2, 0x560e, &(0x7f0000000140)) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x8084) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x8}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0xfff2}, {}, {0x10, 0x2}}, [@filter_kind_options=@f_flow={{0x9}, {0x54, 0x2, [@TCA_FLOW_EMATCHES={0x50, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x405}}, @TCA_EMATCH_TREE_LIST={0x44, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{0xe6a7}, "fe"}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x2}, {0x4, 0x80, 0x1, 0x9}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x6, 0x7, 0xfff8}, {{0x1, 0x1, 0x1, 0x1}, {0x0, 0x1, 0x1}}}}]}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20048084}, 0x2008c010) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'vlan0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002640)=@newtaction={0x131c, 0x30, 0x810, 0x70bd25, 0x25dfdbfc, {}, [{0x1308, 0x1, [@m_mirred={0x10b0, 0x13, 0x0, 0x0, {{0xb}, {0x84, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0xfffff5c4, 0x1, 0x0, 0x8}, 0x2, r11}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x872, 0x10000000, 0x6, 0x80}, 0x3, r11}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xcf, 0x80, 0x6, 0x7ff, 0x1}, 0x2, r11}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0x3, 0x5, 0x0, 0x6}, 0x3, r8}}]}, {0x1004, 0x6, "524b21d5dc743589d5b03a106fc57c5177a10495824775226ba63184b40eca465e04f746ced1750506733c3e106dd4d0765d7f734c1dc0a1ea0060904ff13e773c8f7b4fd6c71c0e277eb7fb7885c00f877b9c78169eb6f65f2154ee1dacc18bd316ffedba646a9741318847e657e72ed6bbbd78f35521437fb9aa85b7fb1824f6057a6ff83c4c3f92c6b23053e005cec52410ed0adf11b2028136899782395977d4aeafef3fdf54752ff5bcf45be780f1a2a0e080e6e67e3b05f7072264965d22c8eb12ab3a2ec9e49574f67b96df7e0590cd4daf20f2f2ea4cdac591f9761a4c723187496fb1461288aba1c920ae6ceef5a6d5275c1d3efbc4432c02ae589bae29b53610ab5b06053d105bb612f67e965035f498c6c86f3d6b735f59dc7f24a381d0cad38df45844de71d06108531523ee2534cbdce0497fbe17cb0d8b52682dcd0176752b775a3947c84dfeaf24fc05bbd7d6e4855775e6b43e17ecdcee1fb33bfd600797af04c2cc248f07aeb669e44686d0fabb291510c848892ef0de18f5e19a3c0c994a10b291ad1975dd7e3b87fbe88abed758a8df1be214fcb1015d78fccbfe686e938e13a2b39df7432ee287df63032172eb2131287c0e27c2cad190828ee31f62dd644d8fd2db6829e5eca7e22d75a4652ed640eeb91ab600d377ae6741569f80cc9c9559b9926ef85bb3ea089f561036faeaffecf05e757b17e32f89ae24bb1bf3772964fd5062b88f9aab3ee2995bc1218b561cefecbd3528bccb5e61581b7b01ad9999dcb2011354bc33b2e65d3711c2255533a9e7d11a89f137d15af18d8d14e3f6f951eb816b376f68f253b01e9599b85f7be0cbe526d277482790b44b190e2d2621c5aedd682e65c1b8d17fa77cba1aabf351d99ed2f4146edc8c55a270c02f894c0759f703c054767554e659cc3b34111321fd0bb454bbcb024abf52dbe67f2696175a99bcc089d91574e29d1e65f2b06890d049b8ce01f887cc1e688b0a2c53b96f63650ff0a08d4efb813940a65c1df7148ad6814edcf1215125b2f0a5c19df21e0dfabbce989bbe544c36b033cf1ecbe35115a852d38899b88f96f08a6f19f5a9e5ba5dfc0985cf6a2f0aa19a2f7d216b20b4f815b26297508dd38a8b0621ca126b829db42d4d99ac11780d6eecfa735f6dac772da12e653a2fcce957d5ad00d47207808678e6dea6824daacc0fa73a26539ada07e6991e28635c7a9b9ef56fd796dedca468c87e1b287a14894c9999811e8a5c8dd2e69282a40c9cd5fff91dc3b2e1f2e718039310583183ba40eea01814e4496bee2277ecca12d127757cd96020ac30b15a77a2d82f44aa50cc3465ae033787dc74c4d6757c794c2327bfd5f8987f0022b3477f57c7d991a11af59c439e534428e682288a071a835158eecb118a6754bcd5d7daac10fd0a9884dc80061abefc18479567bcbdbac93f4771d169da94438ad9b2ec9cd9018111bc979503d1a8852e8c8c13b38992e805e8be50fcd44a9ae4bc948f0df4f30261ccf4dbe5c96c561562958eef4b9244a90345b406cd66072b18aacebb4a65c7d357c29e5f4aee1f63b6019502619d4122f673a58a880c2a74b2247bb783257e06f2bbe55c95cc069970c72ad636a47cc222e6754b8331df18c184cdefb9b6cfc12a32a20495cc6be41ee95e849de54566b1393f8c9a7f1cb9d3e075280b5fab8986f15da546467fa7f9810856234853d776eef9138b6c65ec9e2c95551df83467ce1b10ae976a7314908fd4d4fa389ac12a67fcf53aa114989e5cd70ee3d356b8636c0fc81d3ebc1088d72299feece389bf1bf3db9fd77e85f15c0a4959dc1fbbefb001a2b393634583607f0a04650cae657607f969e09825bcda8795ecc9384523e0d3dad2559876d6dee6b5bfe598c3febe12e8e0843aeeb121eadb26fbc513c7cf28051c75b8dbb4b1625d523af037ed4d6b841aa7ea29e9856bc50d0338709f17dfc63f8021dcd64a74098b0db18427bdcd51de338134e709733b4e441268bc9645e3f7fb5f804726bffcbca30da56f2b07150b1553e3cbfd90e0d248b2540eeb60932774870252f108d98585fb4a7ef6c8f38323ebe76f779d30d138d19f70106f179ee7f937d330ae3a62b9ce3361ecdfc3908a528c1823a02c057df2dbafcb8011da840c02bb1548a121b4fbcb343ccd30754def17882ab051dea83db0bd24c9f71226b3f349c8d186c3a600477bc4a99a21b3b5178d02b846e3960627a302b9a64cad087fa8e4648eb0701b9133eef25e4227126e4eb08af6b3c97d1d9f7fc52da6dc9d818418dda895ef3a0d849939039a5f00928da04d3c5fd34caccf83513c2c9fd676b5fd38f557f509212ff014b410d965de70665868fc8d6e7d7902a296bd3548e3c975f9becd93ee16ad709d1349ff26772a16e20961837765670d8b52042b7909e560fff17e136aa8c8b476e89f51e83a26cea98cff038bee0564535ebf89bd5baf9a4ed4d54dfaf485e65cf2497dffbbbca11f68f0327bf86603f0748ffb6e717576a83e124be4a315ef581a91f63de0e3303e5301cd3e81bc92e21377f4f5e9999081d499317fb49eb73854637713521fdf1def7ff80dce628b73400595c845a761d6b27e7e57318fa0f7f4486046a6db7ff3486206297efd43b70f9cfe389a46704a89e397533d39935a640425618fde8f623784b5ab29bd863bec96fea583f30caa52a16c82b222d77cba1dc5c592513c9225be903a2d0103cae709a9503bbd561c174e95506d3c8bea821bf723f905b4511fba93a6b6e6d676b98902dbdb298c73344352ba64b3d392a5f9ef54628f51260df5b7840abfa87ab569c12dbf849bd7349ab188b3acd3b5329141bda46522d59c18e7b5b68acbc954eda9fd47e17b9ddb0cfed7ea236e19fc8ae3df396e05577a86c4a0f28f7583808e18f990d2ec0ac3d9fd17bd788585653763dc646136c1530c6bd1f0c40eced73b5dafe782ce1a80a84d2b6fba414e03ca5721e069478edc30715907fd0fb1d178546301bc232114fd5dd25ebbca732c5c8c15c0c5f6c1283120471161028b6c8bb818ab57af1525dd84fc26ee67215d9f4b153285ac538ee8a89325b4dc7dc96725446e77b6cb4296d9216e1bf3610d0f1c179fec484dcfe0ccb2f0ec01b8915fb979a811e25ce60ff4a02b4f1fd910198994687b76c8d30890fe8ae8040fbe45d066095fc8467e02ffd8b4fad45c8a8fcea09e26dd04d3c2092f01b64e6a7267d925871a5ee1a32f07fd632727de13531421285dc484ff5f83633ff8aec01e2704edc49a6ef7d58ef16c68a7065d23d17752205e7b790ac764ec1d21cbe345eff5be8bfeaf0b96a0066056d6200118543b186b88a2370ab224459272abb6deff39c897571185a02714156ef7552a42c8b6354732fb7723e13bdf8ff09ddeeb215176af5047ca5b59b1d4e5c89a57eee49f0a388b759e951eeb535eb261a826f26891bc945c5ed20c40d922c5abd1c529aecc1fed6afe2d48bf581fb1d302fe0b47b75e0f36d130663409eb844666bdb6c04957377319e09bba1e5eb28a0b6f0fbe0c887526c86a3f8a42216164be2c830a63b746f2ed040e3d2cd9b7c5bb6634e00a5df542f4526812766b8da1d1866a8bd22a3b6b7d9b36d6bde4399de168162ff04ab4d1f9c8511ae816128a54ba0d7b667c15c07bed8c12fb2c1121bcc7e4ff36d7bb36b013bb4f1898f1d7fd7486ad9924aed44c247d56bdeb22a074efc15283fae7267d43088a0f69008ca740c2de72379dae8b0c65c707a4e37ad5b95bc14607333cbf5021f9f957147503164efdb6d7e5119ad7c72aa299f49671924c93868c06a5f547e24a5a0ea00165727e1349fb0422398f436647d632777d491a8daf88430f7efb8a1a1d13ea25ff5f8a21087c54d15e0350ae456bee0fb3f175ce6ba0074d99f76598e10cc5d3e8abbb24f19234c8b5b112d3b0f6fedf2d2652c779da6d113484de2fab48cc19d2ca824b7ff6a64212d51e1b03636d46323040e333e40c97528c8fd7020c0313aefaf1ab976bc07da4015850a4d01b2249998a7385c6445b3e7eec64c7f5006dac4c96859e5cb4bf0a721cea51cee65c49644eab34b3828f777b2b7bb9e41201b4c803e27ae1bf6c25ddc66cc90818c0aace44afa30ca595831afdd130aeaa419da730ade1a583ad4686b50d171b23f8bbf20b0d89b587f1a83bdd278179b9f5afc6ce65ff0f2e3dafa86c28dccdb956df64ac46aba00d8ac360a358d53f2c5dba46004fd5e184bb33603769aa0db0c91021b101d059c41f2cb8b425940d0545fe97907f06f616a5e2b8e3b8f6936e6efada134de185ee939ac2f1ebf576a2cfa457d41ee766446b3f7d44364f5d1bce17de1239a98f2c77737909280787aad303e8f1893a6b582678ed47ae35b4970f83bdb9fd330d9289e7e48c9a720535da4ecca4ee2bccb832604cbb193d7ebbbcd4e02ca0e2939fa81273859356de6fb8e2b4ef20d56f1f002aae52e85ff382f469caf7f32c2fb2b83477f7ae83db936d7bb84aab2bb8cd2182102df8fe41d0670882a667849ddc33c002d6cea508f2216d419fa531378ad31526929b12a4192ee470185260e636ac80b8327b92dd5a6097a1421e7e484f99962828abfdb8ba011615084757091e430c545930c1be83b3df5f1e68d9b66b5ff6f4e357be88a476d84a2a170c0d9b0cedc4023ec69795d3e178ee5c48e5a82722de2839c228ed2019bfe584a72b76c367c998614a39831a2ea2001bb6fe608b7ac4284e93f5975dc578b75c2a41b8f11edd8528bbfb887fbb3ee2aa9067d6473bf9b73c9171e46300a1941dc898deedb73f7c67610a988d87562cac9689d5b27e318e88f7c324a1e923972304e207718cba8554f5630630ee5a758f5fedac57ba8dc89b7f9efddc06062cd07270140b9f6f74f4eeffaf7db39e0744c4395de6a6ddec289c8b653c86bbedd459b3c6014f40a24b7f25a5cef7e85293331f525c894724fb84aa9e052edc51e62b24ddd3b393fa585aa8fa57a847c3e9ecdab665cac261704be5b73ea6eb6ca71d60a7139ad41b65d0787e533ca7b029273a4a4bb45aedde0b80ed75388dbf99fd556f6c88c536fd78ee85a7661a0eba662be7a9239f33426ffa02933cdfa3d1747b1d8d442fe9bc5c983b95f455f8bd5341e79aa901957cbc296a825acf8cc4307efa700a2de5adb2334089bbd5bf7c840d041d6afb75cbc47cd8af6c9990d63bc300482c87599510a196278adaacd28e5c097f5fd368bb098c7389eea758a99cf276933c47283aa1b4784ca9abf4579c2aa374575b88b273a9bb835edf3fead763e26f592c7043060c4447f075dcc24478b4f1b0a129013f01190e98efdb7fc2e6d887d380f5a8d7171719bd79877d9ef84560e3e08cf99a2a0f03da4fae4787c80d7667a19006793e06248046909edfa834bd392d6f2e09eaa662c455f910105de7cb03e7d57fbb66e084177bab3de24dee0595b07133b632f09cbd6e6166c3846ff3fd7cd0f501f3aee2f35a477d88dfda14812786a845010f13e01e6d05caef4dd55fac405c1451fd4bfb482cd4a9d8a61d4f3266a8d6a0535a49a05967a8fbd06ce7025cbf04489707516cb547d59b4f7b0c54d6ec8ba7ff5ba04136d714474e275ce5fc23b7910c2ec8d152e810723ab28df383baab861779ed3ec9bdf07b185ab3d4c2eabc0b3743da8b8cd673ad1660a0e7b567062aae2d6a8799e0a54bea40ab35f61e65453208690e7e3b6c6f3d92159b1c7447d4f41e1fea49f9edb303"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x7, 0x2}}}}, @m_ife={0xa8, 0x5, 0x0, 0x0, {{0x8}, {0x38, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x9, 0x5, 0x6, 0x3ff, 0x5}, 0x1}}, @TCA_IFE_SMAC={0xa, 0x4, @broadcast}, @TCA_IFE_DMAC={0xa, 0x3, @random="2ff375e99c8c"}]}, {0x4c, 0x6, "953f153a022f4c8a4bdc01c735d8bae2292a19442ee28530df965c48ba74585bbf928fa5f30b1b45ccba07dbd3e6f53d29c2f32994abf6103385c63cf3b199ff8a18fbe1f829f262"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_nat={0x114, 0x13, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x7, 0x0, 0xffffffff}, @remote, @remote}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x6, 0x8, 0x1, 0x9}, @empty, @loopback, 0xff000000, 0x1}}]}, {0x9a, 0x6, "ab1307eb8df108d0ba7142732988e8e5ffcfa72003822589a3f5ebb465e892c8df164ef052da4664665ae1dcb19a5efde20d12ec2ca258ca9641c72519a1b4a059f327e03ee905cc46b1bd86deb183f8c476191fdadf53b9e61287f80629d5be1f440183a270db1146bf68e9cf2e2e72c5089d07aabc329e553494d91d121f9ec97965d141a4694f760b4b6c10af29293f5b0e283276"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0xa156710c7ce8af5d}}}}, @m_vlan={0x98, 0x15, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x4ca}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0xe6000000, 0x3, 0x8, 0x271d689f, 0x5}, 0x3}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}]}, {0x40, 0x6, "ebdb300342c6535cf7a8912eb83f19ecc3f4f0962c9efae70391f19b9cd5aa4c46438f1c4543fd237626600b62031a519a00290d7c178f66619313d2"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}]}, 0x131c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r9, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r11, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000003c0)) getsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000400)={@initdev, @dev}, &(0x7f0000000440)=0xc) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'ip6gre0\x00', 0x0, 0x0, 0x5, 0x81, 0x1, 0xc, @loopback, @dev={0xfe, 0x80, '\x00', 0x32}, 0x8000, 0x8, 0xe, 0x8}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000780)={'ip6_vti0\x00', &(0x7f0000000700)={'syztnl2\x00', 0x0, 0x4, 0x6, 0xdd, 0x8, 0x0, @mcast2, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x30, 0x1, 0xa9b0, 0x6}}) sendmsg$TEAM_CMD_OPTIONS_GET(r4, &(0x7f0000000bc0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000c00)=ANY=[], 0x3a8}, 0x1, 0x0, 0x0, 0x81}, 0x4000000) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ASSOCIATE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="3c000000b1691fbad460d4342278e4e24407dd57aeb1feabadb36d578428bb90c37cc3c196b36fdaa33d010bb5718afcb3e696fc0a191d0f5e5772fee9d2c3ea533ab395c224486cb9a851092ec53d0aade22173cb9fdd53454bdd90203c85", @ANYRES16=r5, @ANYBLOB="01002abd7000ffdbdf252600000008000300", @ANYRES32=r12, @ANYBLOB="0a003400010101010101000008004200000000000a004f005050505050500000"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0xc00) sendmsg$NL80211_CMD_DEAUTHENTICATE(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000008}, 0xc, &(0x7f0000000140)={&(0x7f0000000980)=ANY=[@ANYBLOB="48120000", @ANYRES16=r3, @ANYRESDEC=r9, @ANYRESHEX=r7, @ANYBLOB="0a000600b5cb7ddea024000006003600050000000a000600dfe461bec0a700000a0006000802110000010000"], 0x48}, 0x1, 0x0, 0x0, 0x40040}, 0xc0001) shutdown(r0, 0x2) 1m26.493356008s ago: executing program 1 (id=649): syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201100100000008ac0569020000000000010902240703000100092108000f01222800090580030800000bfe00"/54], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x94173000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000000)=ANY=[@ANYBLOB="9beb01031800000000000000000000008000000002"], 0x0, 0x1a}, 0x28) r0 = socket$inet(0x2, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="180000001600156f000000000000000003000000c8"], 0x18}}, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local}, 0xc) 1m24.289301362s ago: executing program 1 (id=656): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711294000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) r1 = socket(0x11, 0x3, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x15c, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x800, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x7}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @lifetime_val={0x24, 0x9, {0xf, 0xedcb, 0x9, 0x100}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)=@newsa={0x140, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x717, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0xfe, 0x1000000000000192, 0xf, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc, 0x4}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3fc}, 0x7e, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0x140}}, 0x844) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000100)={'bond0\x00', &(0x7f0000000180)=@ethtool_link_settings={0x4c, 0x0, 0x0, 0x0, 0x0, 0x4, 0x10, 0x0, 0x0, 0x4, [0x7, 0x7, 0xc60, 0xffffffff, 0x0, 0x2, 0x0, 0x1000]}}) sync_file_range(r3, 0x9, 0x4, 0x4) sendmsg$inet6(r0, &(0x7f0000000000)={&(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0x2000008}, 0x1c, 0x0, 0x0, &(0x7f00000002c0)=[@rthdr_2292={{0x24, 0x29, 0x5, {0x2c, 0x2, 0x2, 0x1, 0x0, [@empty]}}}], 0x24}, 0x0) 1m23.964028172s ago: executing program 1 (id=657): bind$alg(0xffffffffffffffff, &(0x7f0000000400)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(sm4)\x00'}, 0x58) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x55, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, 0x0) r3 = syz_open_dev$mouse(0x0, 0x800, 0x4000) ioctl$KVM_HYPERV_EVENTFD(r3, 0x4018aebd, 0x0) syz_emit_ethernet(0x12, &(0x7f0000000180)=ANY=[@ANYBLOB="bb474b00002817b8896e8abbdc708402666d"], 0x0) r4 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x40883, 0x0) ioctl$TIOCSETD(r4, 0x5423, 0x0) r5 = socket(0x80000000000000a, 0x2, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(0xffffffffffffffff, 0x4020aed2, &(0x7f00000000c0)={0xf000, 0x10000, 0x8}) ioctl$KVM_HAS_DEVICE_ATTR_vm(0xffffffffffffffff, 0x4018aee3, &(0x7f00000003c0)=@attr_other={0x0, 0x2, 0x6, &(0x7f0000000380)=0x1}) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000280)={0x3, 'wlan0\x00', {0x8}, 0x5}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0xfff3}}}, 0x24}}, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0xe, 0x6) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_NESTED_STATE(r0, 0x4080aebf, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000005c0)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r8 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x84, 0x0, 0x1, 0x101, 0x0, 0x0, {0xa, 0x0, 0xa}, [@CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x7a5}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x2}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x1}, @CTA_LABELS_MASK={0xc, 0x17, [0x81, 0xfffffffb]}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x1}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x2}, @CTA_NAT_SRC={0x3c, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @remote}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @CTA_NAT_V4_MINIP={0x8, 0x1, @local}, @CTA_NAT_V6_MINIP={0x14, 0x4, @mcast2}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x48d0}, 0x8000) sendmsg$NL80211_CMD_SET_CQM(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)={0x60, 0x0, 0x2, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x6d}}}}, [@NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x676}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xf7ffffff}, @NL80211_ATTR_CQM_RSSI_HYST={0x8}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x45}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x224}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x2}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x20068090}, 0x24004151) recvmsg(r8, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000001900)=[{&(0x7f0000000700)=""/4096, 0x1000}], 0x1}, 0x40000000) 1m23.65396288s ago: executing program 1 (id=659): ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) syz_emit_ethernet(0x2a, &(0x7f00000001c0)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1}, @val={@void, {0x806}}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x3, 0x9, 0x18, 0x65, 0x0, 0x76, 0x29, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}}, "d98fa880"}}}}, 0x0) 1m23.539515666s ago: executing program 1 (id=660): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x402) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000040)={0x0, 0x3, 0x5, 0x2, 0x0, 0x9, 0x0}) 1m8.447361754s ago: executing program 34 (id=660): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x402) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000040)={0x0, 0x3, 0x5, 0x2, 0x0, 0x9, 0x0}) 50.057561818s ago: executing program 3 (id=800): bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={0xffffffffffffffff, 0x58, &(0x7f0000000140)}, 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x6}, 0x8}, 0x94) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x1c0102, 0x0) write$vga_arbiter(r1, &(0x7f0000000280)=ANY=[@ANYBLOB='lock io'], 0xc) write$vga_arbiter(r1, &(0x7f0000000040)=@other={'lock', ' ', 'io'}, 0x3c) close_range(r1, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002c00)={r0, 0x18000000000002a0, 0x42, 0x0, &(0x7f0000000500)="b9ff0300600d698cb89e14f008001f000c0cae0e4000632177fbac14140ee934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010108038da1924425181aa5", 0x0, 0x100, 0x60000000, 0x5c, 0xc0, &(0x7f0000000000), &(0x7f0000002c80)="8dc92a8ff39080a675b6565efa3ed46f2a2756e43abbfd8c44686c04d6a0c42f2599fc2b73f432c834dac249597b646035045af99decf86f5b32dc0404e599f56091e15e581ff6805ee283c0313298a5b8ba1c84f1850c217b5a2c2bc547eaf4585e5ba878d1660fa871a275fb61d1fec75942919083919f8d8fdad79615bc5d2d3fa40e054d38d49dfbebc2f137fc7110"}, 0x48) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), r2) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r2, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000000340)={0x30, r3, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x20080080}, 0x20) r4 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) fchdir(r5) epoll_pwait2(r5, &(0x7f0000000200)=[{}, {}], 0x2, &(0x7f00000002c0)={0x0, 0x3938700}, &(0x7f0000000380)={[0x4, 0xfffffff9]}, 0x8) ioctl$XFS_IOC_BULKSTAT(r1, 0x8040587f, &(0x7f0000000940)={{0xbdbc, 0x3, 0x7df, 0x40, 0x4}, &(0x7f0000000580)=[{}, {}, {}, {}, {}]}) ioctl$PPPIOCGFLAGS1(r5, 0x8004745a, &(0x7f00000001c0)) 49.949835767s ago: executing program 3 (id=802): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0000}]}) r1 = open(&(0x7f00009e1000)='./file0\x00', 0xc8141, 0x8) removexattr(&(0x7f0000000940)='./file0\x00', &(0x7f0000000000)=@known='system.posix_acl_access\x00') r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x2012, r3, 0x2000000) ioctl$MON_IOCX_MFETCH(r3, 0xc00c9207, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x66}]}, &(0x7f0000000100)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="6000000002060300000000000000000007000000140007800800084000000010080012400000ffff0500010006000000050005000200000005000400000000000900020073797a310000000013000300686173683a6e6574", @ANYBLOB="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", @ANYRESOCT=0x0, @ANYRESDEC=r1], 0x60}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) ioctl$int_out(r0, 0x5462, &(0x7f0000000080)) 49.729746914s ago: executing program 3 (id=803): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @loopback}, 0xc) r1 = socket$inet_tcp(0x2, 0x1, 0x0) pivot_root(0x0, 0x0) timer_create(0xfffffffc, 0x0, &(0x7f0000000040)=0x0) timer_settime(r2, 0x1, &(0x7f0000000080)={{}, {0x77359400}}, 0x0) timer_create(0xfffffffc, 0x0, &(0x7f0000000040)=0x0) timer_settime(r3, 0x0, &(0x7f000006b000)={{}, {0x0, 0x989680}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c000000000801040000000000000000000000000c00048008000140040000020900010073797a3000000000050003002f0000000600024088f8000020f320470cb10ae290abb2e7599cf19f7d88e743d1ae7bf13dabf1ec7974654f7cb9d1515d01166dc9c83b2ecad6ffc7b4fa45f76e818ca018f679cf44856c938659e3b95e9bcf6cd1d10dc2b1d0be8f493c88f4c076b5d65e209e52df0a9a65727deef4e58246416d803c745985cd33afa82099b31ecc27d02578b7b51c4b30efc1077cbfeea67ba0a69da921533d581e7539a7d848061c44cc640dbd807e836600ef8cfef0ebd5"], 0x3c}, 0x1, 0x0, 0x0, 0x80c}, 0x40) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000040)={'lo\x00'}) accept4$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000100)=0x1c, 0x800) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e00000027f0007000000000002"], 0x18) 49.537827116s ago: executing program 3 (id=806): socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0xff, 0xfffff00c}, {0xb1, 0x20, 0x40, 0xffffefff}, {0x6, 0x0, 0x0, 0x2}]}, 0x8) sendmmsg(0xffffffffffffffff, &(0x7f0000000700)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="9365fe5a", 0x33fe0}], 0x1}}], 0x80000af, 0x0) 49.398422958s ago: executing program 3 (id=807): r0 = creat(&(0x7f0000000000)='./file0\x00', 0x6b) lsetxattr$security_capability(&(0x7f0000002580)='./file0\x00', &(0x7f00000025c0), 0x0, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0xf3a, 0x0) write(r2, &(0x7f0000000240)="94", 0x1) vmsplice(r5, &(0x7f0000000380)=[{&(0x7f0000013580)="0dd2e7c8926dc6acd0ae6c178054e95986faff9544de5fc4c30adf404da41181a77466ac5075905ea5f50134fdd517a957fe2ee59b61f9fe8d7aabe595ea23de2723e437af0423a56686a4c2d957be1a0ab922fbbd3cb1d8c6ab0d58440a327c8eb05d445b4ac5f20abe449e4084f8b996268d0564f67980d3ed3479e0edfe5cec7b4f89bface391c9c4c58ad123b91c33173c72326d1df18804a9ea20f9ece48f784d8ca2318e3d2b316666b5dfb7295c4915989d5bcb120e8fedaa97b93a137c256ce4", 0x20013644}, {&(0x7f0000013680)="c578381bf5113dad8319d9ea5294285ae9a90384ce23866477bef9de4399237d8b3522c9c194e71edaf3332a2f169682f9d8fa271683d4d441b710409e506333e0c3b64e52e8720734b6787f4a84f5bebb046649c6c697d978affd349031b2cd874c7a8961a586a9f2d62f945e7a5bf2f5f7a31684c0503704881d2578a2a98ac3ef4e4a4b0dcdb70db735d5c1652eed3848b2dd4131bb0eb7cfadfaf5", 0x9d}], 0x2, 0x0) tee(r1, r5, 0x8f5, 0x0) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_generic(r1, &(0x7f0000000580)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000540)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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", @ANYRES32=r6, @ANYBLOB='\f\x00D\x00\t\x00\x00\x00\x00\x00\x00\x00'], 0x174}, 0x1, 0x0, 0x0, 0x240000c0}, 0x4000) write(r3, 0x0, 0x0) r7 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r7, 0x10c000) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) vmsplice(r4, 0x0, 0x0, 0x6) r8 = syz_open_dev$swradio(&(0x7f0000000280), 0x0, 0x2) mmap$snddsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r8, 0xe000) r9 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r9, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r9, 0xc05064a7, &(0x7f0000000280)={&(0x7f00000059c0)=[0x0], 0x0, 0x0, 0x0, 0x8e, 0x0, 0x1}) write$binfmt_elf32(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="7f454c460004020d60d300000000000003000600080000001b00000038000000a40100000a0400000400200002000500008000020000000046ff3b1136de173200010000040000000600000020000000030000000002000051e57464ff00"], 0x78) close(r0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000002640)=ANY=[@ANYBLOB="12011003265d5d20030473da0900000003010902240001060050040904"], &(0x7f0000002a80)={0x0, 0x0, 0x0, 0x0}) 47.464210016s ago: executing program 3 (id=816): pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS2(r3, 0x4068aea3, &(0x7f0000000000)={0xd5, 0x0, 0x10}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f00000001c0)={{0xb000, 0xdddd0000, 0x0, 0xf0, 0x40, 0xfd, 0x5, 0xd4, 0x0, 0x4, 0xa, 0x6}, {0xffff1000, 0x2, 0xd, 0x9, 0x8, 0x40, 0x6, 0x8, 0x5, 0x2, 0x3, 0xca}, {0xeeee0000, 0x9000, 0xb, 0x0, 0x2, 0x3, 0x4, 0x1, 0x8c, 0x0, 0x6, 0x5}, {0xeeef0000, 0x3000, 0xd, 0xf, 0x43, 0x46, 0x2, 0xd, 0x6, 0x3, 0x76, 0x1}, {0x100000, 0x50000, 0x3, 0x1, 0x3, 0x9, 0x9, 0x7, 0x5, 0x4, 0x1e, 0x4b}, {0x2, 0xd000, 0x9, 0x7, 0x4, 0x6e, 0x1, 0xfb, 0x4, 0x80, 0x4, 0xfc}, {0x6000, 0x2000, 0xf, 0x9d, 0x3, 0x0, 0x1, 0xb, 0x5, 0x7, 0x0, 0xf8}, {0xffff1000, 0x8000000, 0xd, 0x5, 0x3, 0x3, 0xa, 0x9, 0x57, 0x6, 0x2, 0x7}, {0x100000, 0x5}, {0xdddd0000, 0x9}, 0x40010000, 0x0, 0xf000, 0x300, 0x9, 0x0, 0xeeef0000, [0x4, 0x2, 0x80000008, 0x8]}) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f0000000480)={0x1, 0x0, [{0x1, 0x9, 0x7, 0x0, 0x6, 0xd310, 0xb}]}) close(r1) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1}, 0x50) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x28011, r6, 0x0) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00007fe000/0x800000)=nil) connect$inet(r5, &(0x7f0000000200)={0x2, 0x4e24, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmsg$NL80211_CMD_SET_BEACON(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[], 0x220}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) r7 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ioctl$USBDEVFS_GET_CAPABILITIES(r7, 0x8004551a, &(0x7f0000000100)) syz_emit_ethernet(0x16, 0x0, 0x0) openat$cgroup_int(r0, &(0x7f0000000000)='hugetlb.2MB.limit_in_bytes\x00', 0x2, 0x0) r8 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r8, 0x40085112, &(0x7f0000000140)=@l={0x92, 0x0, 0xe0}) sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000180)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x20008140) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x9, 0xd, 0x7, 0x1, 0x3e2}, &(0x7f0000000080)=0x14) setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000100)={r9, 0x2, 0x5, 0xffffffff}, 0x10) 32.411294384s ago: executing program 35 (id=816): pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS2(r3, 0x4068aea3, &(0x7f0000000000)={0xd5, 0x0, 0x10}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f00000001c0)={{0xb000, 0xdddd0000, 0x0, 0xf0, 0x40, 0xfd, 0x5, 0xd4, 0x0, 0x4, 0xa, 0x6}, {0xffff1000, 0x2, 0xd, 0x9, 0x8, 0x40, 0x6, 0x8, 0x5, 0x2, 0x3, 0xca}, {0xeeee0000, 0x9000, 0xb, 0x0, 0x2, 0x3, 0x4, 0x1, 0x8c, 0x0, 0x6, 0x5}, {0xeeef0000, 0x3000, 0xd, 0xf, 0x43, 0x46, 0x2, 0xd, 0x6, 0x3, 0x76, 0x1}, {0x100000, 0x50000, 0x3, 0x1, 0x3, 0x9, 0x9, 0x7, 0x5, 0x4, 0x1e, 0x4b}, {0x2, 0xd000, 0x9, 0x7, 0x4, 0x6e, 0x1, 0xfb, 0x4, 0x80, 0x4, 0xfc}, {0x6000, 0x2000, 0xf, 0x9d, 0x3, 0x0, 0x1, 0xb, 0x5, 0x7, 0x0, 0xf8}, {0xffff1000, 0x8000000, 0xd, 0x5, 0x3, 0x3, 0xa, 0x9, 0x57, 0x6, 0x2, 0x7}, {0x100000, 0x5}, {0xdddd0000, 0x9}, 0x40010000, 0x0, 0xf000, 0x300, 0x9, 0x0, 0xeeef0000, [0x4, 0x2, 0x80000008, 0x8]}) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f0000000480)={0x1, 0x0, [{0x1, 0x9, 0x7, 0x0, 0x6, 0xd310, 0xb}]}) close(r1) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1}, 0x50) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x28011, r6, 0x0) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00007fe000/0x800000)=nil) connect$inet(r5, &(0x7f0000000200)={0x2, 0x4e24, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmsg$NL80211_CMD_SET_BEACON(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[], 0x220}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) r7 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ioctl$USBDEVFS_GET_CAPABILITIES(r7, 0x8004551a, &(0x7f0000000100)) syz_emit_ethernet(0x16, 0x0, 0x0) openat$cgroup_int(r0, &(0x7f0000000000)='hugetlb.2MB.limit_in_bytes\x00', 0x2, 0x0) r8 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r8, 0x40085112, &(0x7f0000000140)=@l={0x92, 0x0, 0xe0}) sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000180)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x20008140) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x9, 0xd, 0x7, 0x1, 0x3e2}, &(0x7f0000000080)=0x14) setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000100)={r9, 0x2, 0x5, 0xffffffff}, 0x10) 9.879701807s ago: executing program 5 (id=943): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c"], 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000040)={0x0, 0xcc3e, 0x30}, 0xc) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x1c1102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x200000000000003, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4e21, 0x9, @mcast1, 0x9}, r3, 0x8001}}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r6 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r6, 0xc06864ce, &(0x7f00000004c0)={r7, 0x0, 0x0, 0x0, 0x0, [], [0xfffffffc, 0x7, 0x3]}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000540)={0x0, r5, r7, 0x0, 0x0, 0x0, &(0x7f0000000500)}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r9, r8, 0x25, 0x0, @void}, 0x10) unshare(0x28011dc0) r10 = syz_open_dev$video(&(0x7f0000000040), 0x101, 0xab02) ioctl$VIDIOC_S_CROP(r10, 0x4014563c, &(0x7f0000000080)={0x9, {0x40, 0x80003, 0x8d0, 0x300}}) 7.908661758s ago: executing program 7 (id=959): socket$nl_route(0x10, 0x3, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x40) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a64000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a31000000001400048008000240a04b3d02080001400000000308000540000000001c0008800c00014000000000000000090c000240000000000018ab6e14000000110001"], 0x8c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r1 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r1, &(0x7f0000001c00)={&(0x7f0000000000)={0xa, 0xa, 0x7, @mcast2}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000040)="671723d7c6012c", 0x7}, {&(0x7f0000000100)="9e91d93a92dc7c8fff658bb539e2a1480400000000000000a2e2fea2", 0x1c}, {&(0x7f0000000480)="777a47cd828d126eb1", 0x9}], 0x3}, 0x20008b88) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="580000001000010029bd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="c5af07000f0e0000140003006e657464657673696d300000000000001800168014000180100006000400000000100000081a00000a000100aa"], 0x58}, 0x1, 0x0, 0x0, 0x8c1}, 0x0) socket$inet6(0xa, 0x2, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000005a80), 0xce5, 0x2400) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)={0x38, 0x7, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_COMPAT={0x24, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x88e7}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x1d}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x22eb}]}]}, 0x38}}, 0x20000000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140000000075c0000000e0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c0000"], 0xec}}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a0104000000000000000001001b780900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a3200000000a8000000060a010400000000000000000100000008000b400000000080000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020007000000480001800c00010062697477697365003800028008000340000000020800014000000014080002400000001410000580090001008faad8723e0000000c000480060002008a9500000900010073797a30"], 0x11c}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=ANY=[@ANYBLOB="0c04000010000104000000000000000000480000", @ANYRES32=r4, @ANYBLOB="101000000000000008000d0005000000e4031680a40001800c00070000000000adffffff0c00", @ANYRES64=r3], 0x40c}}, 0x0) 7.63400045s ago: executing program 7 (id=960): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB="58010000", @ANYRES16=r1, @ANYBLOB="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"], 0x158}, 0x1, 0x0, 0x0, 0x44001}, 0x4c020) (fail_nth: 4) 7.155826166s ago: executing program 7 (id=962): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e010203010902"], 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000040)={0x0, 0xcc3e, 0x30}, 0xc) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x1c1102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x200000000000003, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4e21, 0x9, @mcast1, 0x9}, r3, 0x8001}}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r6 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r6, 0xc06864ce, &(0x7f00000004c0)={r7, 0x0, 0x0, 0x0, 0x0, [], [0xfffffffc, 0x7, 0x3]}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000540)={0x0, r5, r7, 0x0, 0x0, 0x0, &(0x7f0000000500)}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r9, r8, 0x25, 0x0, @void}, 0x10) r10 = syz_open_dev$video(&(0x7f0000000040), 0x101, 0xab02) ioctl$VIDIOC_S_CROP(r10, 0x4014563c, &(0x7f0000000080)={0x9, {0x40, 0x80003, 0x8d0, 0x300}}) 7.155413212s ago: executing program 6 (id=963): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r3, {0xffff}, {}, {0x2, 0xc}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x1c, 0x2, [@TCA_CBS_PARMS={0x18, 0x1, {0x81, '\x00', 0xfffff000, 0x31, 0x3, 0x581}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40098}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r9, {0x5, 0xffff}, {}, {0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x9200}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0xc010) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001780)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r12, {0x2}, {}, {0xa, 0x1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x8, 0x8, 0x8, 0xcfe, 0x3, 0x80000000, 0x8a5, 0x6, 0x10, 0x8, 0xb, 0x2, 0xf6cb, 0x6ab, 0x5, 0x9, 0x8, 0x6, 0x0, 0x4, 0x7fffffff, 0x10000, 0x7, 0x0, 0x0, 0x7, 0x6, 0xfffffffe, 0x372b, 0xfffffffe, 0x1000, 0xfffffffa, 0x8, 0xae6, 0x6, 0xfffffffc, 0x1, 0x0, 0x7e, 0x8, 0x9d, 0x3, 0x240, 0x1, 0x7, 0x7, 0x6, 0x1000, 0x7, 0xb, 0x401, 0x789f, 0x7ff, 0x3, 0x8, 0x800, 0x9, 0x10000, 0x6, 0xff, 0x8, 0x8226, 0x400, 0x401, 0xc709, 0x7, 0x5, 0x3, 0x7, 0x10000, 0x4, 0x40, 0x8, 0xc1, 0x7, 0x3ff, 0x200, 0x1, 0x6, 0x7fffffff, 0xfffffff9, 0x3, 0xa, 0xfffffffc, 0x1, 0x0, 0x9, 0x2, 0x4, 0x2, 0xc, 0x7b, 0xff, 0x800, 0x4, 0x80, 0x5, 0x4, 0x5, 0x1000, 0x5, 0x7, 0x40, 0x8, 0x2, 0x6, 0x8226, 0xe, 0x81, 0x3, 0x5, 0x3800000, 0xf12, 0x0, 0x2, 0x8911, 0x9, 0x7f43, 0x9, 0x2, 0x0, 0x3, 0x8, 0x2, 0x2, 0x2, 0xd098, 0x9, 0x8, 0x3, 0xa, 0xf7, 0x4, 0x3, 0x3, 0x0, 0xfffffffc, 0x0, 0x1, 0x81, 0xffff6660, 0x1, 0x3, 0x4, 0x0, 0x9, 0x3, 0x6, 0x5, 0xd7a, 0xfffffff9, 0x3, 0x8, 0x2, 0xfffffffd, 0x3864, 0x4, 0xb, 0x1, 0x4, 0x4c, 0x82ca, 0x4eeb, 0x6, 0xbdd, 0x5fdf, 0xc, 0x3, 0x10000, 0x9, 0x54, 0x8, 0x8, 0x800, 0x1ff, 0x9, 0xccc, 0x1, 0x7, 0x7ff, 0x4, 0xe, 0xc, 0xb, 0x80000001, 0x8001, 0x4, 0x9, 0xfffffffe, 0xfffffffa, 0x6, 0xb, 0x7ff, 0x1, 0x10, 0x2, 0x1, 0x4a0, 0x3, 0x0, 0x3ff, 0x9, 0x7, 0x1, 0x5, 0x7, 0x1, 0xfffffe01, 0x8001, 0x6, 0x3, 0x3, 0x9, 0x2, 0x4, 0x0, 0x1, 0x100, 0x4, 0x3, 0xffffff00, 0x6, 0x4, 0x3, 0x6, 0x5, 0x5c49, 0x7f, 0x7, 0x8cc7, 0x7, 0x0, 0x1, 0xcc99, 0x3, 0xb, 0x0, 0xffff, 0x0, 0xb64, 0x4, 0xf, 0x9, 0x77dc, 0x8, 0x1, 0x4, 0x7ff, 0x676, 0x10, 0x8, 0xffff, 0xfff, 0x8, 0x7]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x2004009c}, 0x0) ioctl$XFS_IOC_GET_RESBLKS(r11, 0x80105873, &(0x7f00000000c0)) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0xfff1}, {}, {0x2, 0x1}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x80, '\x00', 0x8, 0x461b, 0xa, 0xfffffff9}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x480d8}, 0x4000000) close(0x4) 6.92817261s ago: executing program 6 (id=965): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_MAP_GET_NEXT_ID(0xc, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0xffe, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200060000001f000000060001000000000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0) syz_emit_ethernet(0x79, &(0x7f0000001600)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa86dd60f4adf700433a00fe800000000000000000000000000000fe80000000000000000000000016ad127659b15667ec847cc8a5da0000aa040090780000000060fd906300003300ff000000000000000000000000000001ff0500000000800000000000000000012b00040000000000c2a2b6f7ce288d42293db2"], 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newlink={0x30, 0x10, 0x503, 0x20000000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x880}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @vti={{0x8}, {0x4}}}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x4000) mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, &(0x7f0000001480)=0x7, 0xf8a3, 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES32=r3, @ANYRES16=0x0, @ANYRES32=r4, @ANYBLOB="0800c3007413000008eda24ade5e5a66ccd0a9"], 0x30}}, 0x4000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000002b40), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r5, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f0000002b80)={0x24, r6, 0x1, 0x70bd25, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40081}, 0x80) socket(0x27, 0x80000, 0xd) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000001440)={&(0x7f0000000240), 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x78, r6, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x80000001}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x20, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x28, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}]}]}, 0x78}}, 0x20008000) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmmsg(r0, &(0x7f0000002500)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)=""/4092, 0xffc}, {&(0x7f0000001e40)=""/232, 0xe8}, {&(0x7f0000001700)=""/161, 0xa1}], 0x3}, 0x5}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f0000003340)=""/4085, 0xff5}, {&(0x7f0000001840)=""/165, 0xa5}, {&(0x7f0000001c00)=""/155, 0x9b}, {&(0x7f0000002e80)=""/246, 0xf6}, {&(0x7f0000001500)=""/245, 0xf5}, {&(0x7f0000001d40)=""/249, 0xf9}, {&(0x7f00000000c0)=""/82, 0x52}], 0x7}, 0x7f}], 0x4, 0x40012032, 0x0) 6.836249998s ago: executing program 6 (id=968): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x7f, 0x7ffc0002}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$rds(0x15, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000480), 0xf2ef, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r4, 0xc01064bd, &(0x7f0000000080)={&(0x7f0000000140)="9ce1", 0x2}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r4, 0xc01064bd, &(0x7f00000000c0)={&(0x7f0000000680)}) close(r4) sendmsg$NL80211_CMD_DEL_KEY(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYRES32=r3, @ANYBLOB, @ANYRES32, @ANYBLOB="0c005080fd004200000000"], 0x34}, 0x1, 0x0, 0x0, 0x48810}, 0x20008001) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000280)={0x3, 0x2}) r5 = fsopen(&(0x7f0000000040)='binder\x00', 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0xc0686611, &(0x7f0000000300)={0x0, 0x0, 0xdddd0000, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) ioctl$VIDIOC_ENUMAUDIO(0xffffffffffffffff, 0xc0345641, &(0x7f0000000000)={0x1, "98dac412b14c8541a22d321154bbc61dad8ed5953c251d88e59140a71e987547", 0x1, 0x1}) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) ioctl$FE_GET_EVENT(0xffffffffffffffff, 0x80286f4e, &(0x7f00000000c0)) ioctl$FE_SET_FRONTEND(0xffffffffffffffff, 0x40246f4c, &(0x7f0000000080)={0x30a32c0, 0x1, @qam={0x3, 0x2, 0xa}}) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) r6 = syz_open_dev$dvb_frontend(&(0x7f0000000040), 0x0, 0x8000) ioctl$FE_DISEQC_RECV_SLAVE_REPLY(r6, 0x800c6f40, &(0x7f0000000080)={""/4, 0x4}) 6.835982195s ago: executing program 5 (id=969): r0 = socket$inet_sctp(0x2, 0x5, 0x84) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, 0x0, &(0x7f0000000080)) 6.722147315s ago: executing program 5 (id=970): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x0, 0x204031, 0xffffffffffffffff, 0xec778000) vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETMIFCNT_IN6(r2, 0x89e0, &(0x7f0000000100)={0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) setsockopt$inet_opts(r0, 0x0, 0x1, &(0x7f0000000000)="b5adac", 0x3) 6.489545979s ago: executing program 8 (id=971): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r2 = socket(0xa, 0x3, 0x3a) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000640)={0xa4, r4, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x74, 0x8, 0x0, 0x1, [{0x70, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x64, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}]}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4084}, 0x2008040) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) setsockopt$packet_int(r5, 0x107, 0xa, &(0x7f0000000000), 0x4) setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x1, 0x4}, 0xc) syz_emit_ethernet(0x56, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f00000001c0), 0xa00, 0x0) r6 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x10000}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x11}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x5c}}, 0x4004804) ioctl$BLKTRACESTART(r6, 0x1274, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000740)={'#! ', './file0', [], 0xa, "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"}, 0x13d) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TCSETS(r8, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "00009200000000000000000000000058b200"}) epoll_create(0x8) 6.445826427s ago: executing program 5 (id=972): r0 = socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$userio(0xffffffffffffff9c, &(0x7f0000000300), 0x22242, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) syz_open_dev$mouse(&(0x7f0000000080), 0x0, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x6020400) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd, 0x400000, 0x0, 0xffffffffffffff1b, 0x7b}, 0x0, &(0x7f0000000280)={0x3fc, 0x0, 0xffffffffffffffff, 0x1, 0x400, 0x0, 0x7fffffff}, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="740000001000ff"], 0x74}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) ioctl$NILFS_IOCTL_SET_SUINFO(r0, 0x40186e8d, &(0x7f0000000200)={&(0x7f00000000c0)=[{0xfffffffffffffff9, 0x1, 0x0, {0x3, 0x1}}, {0x1, 0x1, 0x0, {0x8, 0x3ff, 0x2}}, {0x1, 0x0, 0x0, {0x3, 0x2, 0x2}}, {0x4, 0x1, 0x0, {0x1f, 0x8}}, {0xfffffffffffffffa}], 0x5, 0x20, 0x8, 0xffffffffffffffb0}) 5.690856983s ago: executing program 4 (id=973): r0 = fsopen(&(0x7f0000000500)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_io_uring_setup(0x12e, &(0x7f0000000180)={0x0, 0x5cae, 0x2, 0x3, 0xffffff7d}, &(0x7f0000000100), &(0x7f0000000280), &(0x7f0000000000)) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000080), 0x8, 0x602102) ioctl$EVIOCGABS0(r4, 0x80184540, &(0x7f0000000200)=""/34) r5 = mmap$KVM_VCPU(&(0x7f0000ffc000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r6 = userfaultfd(0x80001) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r7, 0x84, 0x83, 0x0, &(0x7f0000000300)) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="01000100"/20, @ANYRES32, @ANYRES32=r1, @ANYBLOB="03000000050000000500"/28], 0x50) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) read(r6, &(0x7f0000000540)=""/158, 0x9e) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) syz_memcpy_off$KVM_EXIT_MMIO(r5, 0x20, &(0x7f00000004c0)="9266b789d2a124c788f903c38e5f6d010600de5d1cb86feb", 0x0, 0x18) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r8, 0x84, 0x6e, &(0x7f00000005c0)=[@in6={0xa, 0x4e22, 0x10, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3e}}, 0x68}], 0x1c) syz_memcpy_off$KVM_EXIT_HYPERCALL(r5, 0x20, &(0x7f0000000000)="aafc361abad74318502891c4c26423fb18e301de0a534d0136cd3295dd6a6d299206fef236153a6fb9f3ddaf173b35381663ab6d9a0d7eda9ebe3f5459c0c467048e63a19e308071", 0x0, 0x48) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_BEACON(r9, &(0x7f00000016c0)={0x0, 0x0, 0x0}, 0x0) ioctl$UFFDIO_ZEROPAGE(r6, 0xc020aa04, &(0x7f0000000140)={{&(0x7f0000ffb000/0x1000)=nil, 0x1000}}) io_uring_enter(r3, 0x1e76, 0xf728, 0x5, 0x0, 0x0) fchdir(r1) syz_open_dev$vim2m(&(0x7f0000000040), 0x8, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f00000000c0)={0x34, 0x2, 0x201, "f7b817716daef7e53fa4f9a9dad13c74c3f001fd3600000200", 0x41495043}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x40) socket(0x3, 0x26fde2c97175c3f5, 0x0) 5.441706534s ago: executing program 5 (id=974): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="24000000b03ada7e633b1feb62fa720304a818c87aff801f9ff1b04e26", @ANYRES16=r1, @ANYBLOB="04002abd7000fedbdf250400000005000500000000000500060009000000"], 0x24}}, 0x4000) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) r2 = socket$kcm(0xf, 0x3, 0x2) r3 = syz_usb_connect(0x2, 0x24, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r3, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000240)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) syz_usb_control_io$sierra_net(r3, 0x0, &(0x7f0000002040)={0x1c, &(0x7f0000000280)={0x40, 0x8}, 0x0, 0x0}) sendmsg$kcm(r2, &(0x7f0000002480)={0x0, 0x0, &(0x7f0000000ac0)=[{0x0}, {&(0x7f00000009c0)="32613fbff704da847e4ce74b1b47bf94", 0x10}], 0x2}, 0x80) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x6, @local, 0xb}, 0x1c) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"/273], 0x6c}, 0x1, 0x0, 0x0, 0x40850}, 0x24000000) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) setns(r5, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4) syz_usb_connect$uac2(0x5, 0x8c, &(0x7f0000000380)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x1235, 0x4661, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7a, 0x3, 0x1, 0xcf, 0x20, 0x81, {0x8, 0xb, 0x0, 0x2, 0x1, 0x2, 0x20, 0x1}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0xefd1, 0x1, 0x1a, 0x44}, [@mixer_unit={0x5, 0x24, 0x4, 0x6, 0x8}, @output_terminal={0xc, 0x24, 0x3, 0x4, 0x1ff, 0x7, 0x3, 0x6, 0x3ff}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x1, 0x7, 0x2c, {0x8, 0x25, 0x1, 0x3, 0x0, 0x7, 0x33}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x3, 0x5, 0x7, {0x8, 0x25, 0x1, 0x0, 0xc, 0x0, 0x6}}}}}}}}]}}, 0x0) r6 = socket$can_raw(0x1d, 0x3, 0x1) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0xeffd}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0xa4}}, 0x0) r9 = fcntl$dupfd(r8, 0x0, r8) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WDS_PEER(r9, &(0x7f0000000cc0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r10, 0x100, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @random="8ebea9a4e1b9"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @random="8629dc4f2405"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="03b02109e990"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="7f43de530cc7"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="83a504c191d2"}]}, 0x70}, 0x1, 0x0, 0x0, 0x440c4}, 0x4000000) sendmsg$NL80211_CMD_GET_WIPHY(r7, &(0x7f00000004c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x20, r10, 0x10, 0x70bd26, 0x25dfdbfd, {{}, {@void, @void, @val={0xc, 0x99, {0x1, 0x26}}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x180ede9b764a4993}, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) sendmsg$can_raw(r6, &(0x7f0000000080)={&(0x7f0000000180)={0x1d, r11}, 0x10, &(0x7f0000000140)={&(0x7f0000000200)=@can={{}, 0x4, 0x0, 0x4, 0x0, "000000cef4949800"}, 0x10}, 0x2, 0x0, 0x0, 0x40080}, 0x4000855) 5.055343111s ago: executing program 6 (id=975): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000d00)={0x0, 0x41, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB="58010000", @ANYRES16=r1, @ANYBLOB="01002cbd7000fcdbdf2501000000060006004e2300000800050001000000200108801c011380f400098070000003060001000a00000014000200fc0200000000000000000000000000010500030002000000060001000a00000014000200000000000000000000000000000000010500030001000000060001000a0000001400020000000000000000000000ffff0a010102050003000200000028000080060001000a00000014000200fe8000000000000000000000000000bb050003000200000034000080060001000200000008000200ac1414bb05000300020000000600010002000000080002000a01010005000300020000001c000080060001000223000008000200ac1414aa0500030003000000040000800400008024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b392214000200776731"], 0x158}, 0x1, 0x0, 0x0, 0x44001}, 0x4c020) 5.002239658s ago: executing program 6 (id=976): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0x4e20, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0xfffffffffffffe7d, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x1fffffd, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x7, 0xfff2}, {0x0, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x8040}, 0x0) syz_emit_ethernet(0xbe, &(0x7f00000000c0)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0x300, @empty}, {0x0, 0x17c1, 0x9c, 0x0, @wg=@initiation={0x1, 0x1, "717c72635f3b384bdfc23b7cdbd1617d39980ae0343d91a3756391fe0a9a66d4", "0838dbc96ba13dd069ce9c1099890915a06c22e110516ac8db72cf46be8a2cd2288112c641ae96fd6321aabb617c7209", "7b8d57a7c7bce1276d915e2d6d05e53c86a47b318a3ac04c5dd38853", {"7719eecd7b1f5591c287cd8bdc5cb100", "705e0032bb769f2581b5b6ae81bd7bad"}}}}}}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xfd, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) r4 = socket(0x2000000015, 0x80005, 0x0) sendmsg$kcm(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x4008084) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000008e002, 0x0) r6 = dup(r5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r6, 0x2000) getsockopt$CAN_RAW_LOOPBACK(r6, 0x65, 0x3, 0x0, &(0x7f0000000040)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x64, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}]}, 0x64}}, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r10, 0x4008ae8a, &(0x7f0000000000)={0x1, 0x0, [{0x1, 0x7, 0xa1f3, 0x68, 0x800}]}) ioctl$KVM_GET_MSRS_cpu(r10, 0xc008ae88, &(0x7f0000000400)={0x1, 0x0, [{0x480, 0x0, 0x5e}]}) openat$autofs(0xffffff9c, &(0x7f0000000500), 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@ipv6_newrule={0x24, 0x20, 0x2d2c6d60ea1da725, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0x0, 0xcd, 0xff, 0x0, 0x0, 0x1, 0x10002}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8, 0x6, 0xfffffffc}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040090}, 0x4040000) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d01020301090212000100000000090401"], 0x0) 4.763362107s ago: executing program 8 (id=977): r0 = socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$userio(0xffffffffffffff9c, &(0x7f0000000300), 0x22242, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) syz_open_dev$mouse(&(0x7f0000000080), 0x0, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x6020400) pselect6(0x40, &(0x7f00000001c0)={0x1000000, 0x2, 0x3, 0xfffffffffffffffd, 0x400000, 0x0, 0xffffffffffffff1b, 0x7b}, 0x0, &(0x7f0000000280)={0x3fc, 0x0, 0xffffffffffffffff, 0x1, 0x400, 0x0, 0x7fffffff}, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="740000001000ff"], 0x74}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) 4.681624975s ago: executing program 4 (id=978): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x2, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0cc5605, &(0x7f00000001c0)={0x3, @vbi={0x3, 0x0, 0x400, 0x3247504d, [0x8000, 0x401], [0xffffffff, 0xffff1680], 0x2}}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x2}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc0f8565c, &(0x7f00000000c0)={0x9, 0x2, 0x6, {0x1, @sdr={0x59565955, 0x800}}, 0x2bb}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x965, &(0x7f0000000380)=[{0xbed7, 0x0, 0x0, 0x7ffffffd}]}) 4.493710581s ago: executing program 4 (id=979): bind$inet6(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x3) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000380)=0x2, 0x4) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x40}, @in6=@empty, 0x0, 0x0, 0xffff, 0x0, 0xa}, {0x0, 0x40000000004}, {0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x6c}, 0x0, @in6=@empty, 0x0, 0x0, 0x0, 0x3}}, 0xe4) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x28040041, &(0x7f0000000040)={0x2, 0x24e23, @loopback}, 0x10) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)="1f", 0x1}], 0x1}, 0x48c0) recvmmsg(r0, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/72, 0x48}, 0x6}], 0x41f, 0x40, 0x0) 4.484891195s ago: executing program 8 (id=980): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905"], 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000040)={0x0, 0xcc3e, 0x30}, 0xc) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x1c1102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x200000000000003, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4e21, 0x9, @mcast1, 0x9}, r3, 0x8001}}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r6 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r6, 0xc06864ce, &(0x7f00000004c0)={r7, 0x0, 0x0, 0x0, 0x0, [], [0xfffffffc, 0x7, 0x3]}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000540)={0x0, r5, r7, 0x0, 0x0, 0x0, &(0x7f0000000500)}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r9, r8, 0x25, 0x0, @void}, 0x10) unshare(0x28011dc0) r10 = syz_open_dev$video(&(0x7f0000000040), 0x101, 0xab02) ioctl$VIDIOC_S_CROP(r10, 0x4014563c, &(0x7f0000000080)={0x9, {0x40, 0x80003, 0x8d0, 0x300}}) 4.378111783s ago: executing program 4 (id=981): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x2, 0x3f, &(0x7f0000000340)=ANY=[@ANYBLOB="120110012cae9308da040d39dffa0102030109022d0001c94080010904f90403c0da26ff0905f10f40000300bf09050300ff030507200905821010"], 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELSET={0x64, 0xb, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_SET_POLICY={0x8}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x5}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x80}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x14}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_POLICY={0xffffffffffffff86, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x8c}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB="600000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800b000100697036746e8500103000028014000200fc020000000000000000000000000000140003002001000000000000000000000000000104001300"], 0x60}}, 0x0) 3.23459697s ago: executing program 6 (id=982): r0 = syz_usb_connect$lan78xx(0x0, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000940)={0x1c, &(0x7f0000000100)=ANY=[@ANYRES64], 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/config', 0x0, 0x0) getdents(r2, &(0x7f0000000200)=""/226, 0x13) getdents(r2, 0x0, 0x18) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x13, &(0x7f0000000180)={0xffffffffffffffff}, 0x106, 0x9}}, 0x20) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r5, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f6003300", 0x10) listen(r5, 0x0) accept4(r5, 0x0, 0x0, 0x80800) shutdown(r5, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r1, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {0x0, r4, r1}}, 0x18) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000003b00)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000880)={0x34, &(0x7f00000006c0)={0x40, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000b80)={0x84, &(0x7f0000000040)=ANY=[@ANYBLOB="20130300000004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000ac0)={0x84, &(0x7f0000000380)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) 3.23363081s ago: executing program 7 (id=992): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x2, 0xfffffffc, @empty, 0x80000001}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000200)=0x6, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) socket$packet(0x11, 0x2, 0x300) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000240)={0x0, @in6={{0xa, 0x4e23, 0x2d, @empty, 0xfeb}}, 0x5, 0x9, 0x1, 0x0, 0x2d78c081}, &(0x7f0000000300)=0x98) setsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000340)={r3, 0x9, 0x6, 0x9e, 0x2, 0xe}, 0x14) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r2) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x2844, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac14140f00000000000000001400020002000000ffffffff00000000000000000d0001007564703a73797a3200000000"], 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100280000000000000002000000200001800d0001007564703a73797a32"], 0x34}}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_smc(0x2b, 0x1, 0x0) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000100)={{}, {0x0, 0x989680}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="380000001800010029bd700000000000020000000000000700100000060015000200000014001680100008"], 0x38}}, 0x0) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000780)) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100003521ab20cd0caf104a38010203010902"], 0x0) write(r6, &(0x7f0000000040)='f', 0x1) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r8, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) tee(r5, r1, 0x827, 0x8) dup(r0) socket$nl_generic(0x10, 0x3, 0x10) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)={[&(0x7f00000000c0)='=\x8d5\x10\xe4\x00\bj\xfb', &(0x7f0000000080)='=\x8d5\x10\xe4\x00\bj\xfb']}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) socket$igmp(0x2, 0x3, 0x2) 3.016591365s ago: executing program 4 (id=983): setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000300)="c9", 0x1) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) setsockopt(0xffffffffffffffff, 0x84, 0x81, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={@mcast2, @private=0xa010101, 0x9, 0x7}}) sendmsg$key(r1, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x1c) syz_usb_connect(0x0, 0x3f, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) 1.856930687s ago: executing program 7 (id=984): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/consoles\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = memfd_create(&(0x7f0000000240)='\xa3\xcb\x04=\x827\xe7\x81S\bDVK| \x8b\xdb\xb1\x03\xd0\x9d2\x9es4_=#n_\xeb\xbdR\xea\xb9o\xdbM\x11ca\v\xeb#\xaf\xcf\xb5\xfd`U\xa7k\xd0\xd8\xd2\xc0\x91\xc1\x98#\r\xa7\x16\xfd@\xd7V*^\xcf\x9f\b1\xce3\vN\xa6\x01\xb5\xb5\xba\xdc\xc8\xda\xd2\apY\vu\x80\xa9\x14X\xcf!\xd3W\'\xb44#\xf6\x7fHS\xa6l\x17\x97\x80\xea\xc5+T\xe3\"\xda\x14\xfe,\xf3\\\xeb\x1cp\xd6\xc1\b\xec\xe1\x94\xdf\xdb\xa1\xf7=B\xb2\x94o\xd5{\xd2_\x93\xa1)\xdem\'H\\e\x8bu\xbcVw\xaeb\xa1b\xb1\xc1\f\x9f0\x93\x0f\x16,\xeb!Z\xa9\\\xf7B\xf8L\x05\xc7\xf7q\x9d_\xb4\xbb3i[t\xb6\xbc\x824\x7f\xd7\xb7 \xd4\x7fUE\xcb7\xe3\xb4\xb6\xa0\xd8\x1b\a8\xfe$\xa1\x12&\xb2\xfc\xfb\x12U\xb9u\xb4=\xc4\xc5q\x8bk\xf1\x9c\xc3\xa4w\xf9!^#\x8c', 0x4) ftruncate(r3, 0x200000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000380), 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x11a, 0x23, 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = epoll_create1(0x0) r8 = fcntl$dupfd(r6, 0x0, r5) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r5, &(0x7f0000000200)={0x4000200a}) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f00000002c0)={0xa0000013}) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r8, &(0x7f0000000580)) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3, 0x40010, r1, 0xa86a3000) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x5) ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, &(0x7f00000002c0)={0xe400000000000000, 0x5000, 0xfffffffffffffffd, 0x0, 0x5}) r9 = openat$nullb(0xffffff9c, &(0x7f00000013c0), 0x400000, 0x0) ioctl$BLKCRYPTOIMPORTKEY(r9, 0xc0401289, &(0x7f0000001380)={&(0x7f0000001340)="953cf4bbd321bd323c1942f329efaa404473e4a849e9d543c69e5dfe4329e3e6aa050098c723bdddd701aa2c006cac2d891a00"/64, 0x40, &(0x7f0000001400)=""/70, 0xfffffffffffffe1a}) ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, &(0x7f0000000140)={0xd200000000000000, 0x58000, 0x5, 0x3}) r10 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010102c9ccf310c80a01c305d40102030109021200010c0190060904"], &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r10, &(0x7f0000000780)={0x14, 0x0, &(0x7f0000000740)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io$cdc_ecm(r10, 0x0, 0x0) syz_clone(0x20203000, &(0x7f0000000040)="47c92961930796ddd75590bb6a5b071bf316af2dce3d61f37d3033d7a91b7aea0ec45d1441a3c9f77e419c1d58cf485c66815b06ee437274174b5575e633e8f77b4dedcada69bc784976ec7fcae9b2a4eba5dac7a99003da77497125c84f55362f5f534655c9490ce5977aa794a6597b085b1d58cdcc0a43cc6a90b6e77407b6cec7ee08119aa6c20a635cc4a83d3d0a36598fb2be20810c2cf1cb759149927ec77e2f0b59e9019b1967cc0722394c", 0xaf, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000340)="96b61cc05bb5df38fbd8322924efa20133e187d854de3fc902809310710abb4ecd068a3cd434abde3f5286f003ebdd197dabb3d9accbb69210b37cc34c2af49434fa0660be762ccfa555111413efbe187382dbbb7d7940fd95642c318abf4b0ad2b15ab20de9fac785af87ca8912c4ceb0349cedd1f50c20a35e723ab558e790a36c9ca3e0f48c22f2ae15aa69068ccfe5990d399ff6ef13f00a5a3760a8b246065fd36899e939680fb5aa0065ed01fdd4aded34df61af1b09c78befd7b6f2a24bd439c6664e5f230156746cffb672970b74a008b3a84c15aaa45b3ac8139811dca442d262be5656f101f6a88c70218a43a3fc3ff8b5e123f759239223e41246925c25938384f4c8a7d04cfaf1cc9333b1d4e649624a7a5c39a2e9bd4afb8888c7eb1ac7193207fbe3167504f2ff96a1a458ae51855ea60a31d1bf85cef39abb6b404a3974b95abecee591c44216c54cc726ad74fe39ad614eaaa5f47e0f9f3ad6e5217deefd387625ce78ee779fe9e29a8e1875066ba01302105e361e2dd37dc51272ce8f665afe1b409185ddd1bfdb5556f6c9ee9fe31bb5fc9b759bf2f16a7a408f0b51d56cc60b3cb9a1018a0a464d9d3daabe29a5a3c417d19d16141acf3a35a06b651238583784b199b335cb334615cbb807026bb7f349b3dbed5abc61da7de8b754091d3349939bd788b5dd727b981c8c484f3e2140a3a6e14e6638cb1b477d748969dba9724d9052f1762a6710db680a2afe2c896e014b55550e2561ffbb17b2b4f30161d14158b78438049a236dad242a76f7af392120ab5d82b154c12564db4251d43753c3508704fefef3a46cdb64a041c17df71becb8a39a4f5c02e4e7092add72a83a81d3c9e32111d21c5dbe765c2ec73af7b9dee9f932edb7e824caeda9b149e06588006122fb47512979ec1f9945f96bb29704deb0d165f3d55bb6b53f1a6e8871c711af64590a65ed56fc0d8492d2012b376e44604c94dcf7a84f4b93b9f02b534be15aafdbe2cb04d62272607133dbb7aabf67f29bc66fa0e3b8acad94245e6508f31de27a2aa1fae8b788ad441c0e3da3cbfc803bfbe4d24f00b57682b84dd7eaa30bcf4f640c78097c5cd53885e571fe3c6809e319763b4aa2cf5989222de0e36e4b0cc8a530d59fc4ca5b0009ac052d7b20ca1c4ae03f664010e381cde8b12fcaad1c7e0df5f7be655c902474cb917655736b16459150c9ff5fe89509684e4416dd8537cd0030e82d4954a43aab4a233e1ec56caad9be3624d7a86329ab506dbdd0e88fd4910f9675504b50bc7bb2240ecf54bcb6b29174b261d8f403c851435c47f4751e2c1a83d0b4eeed7cbd3216bb8fbf0494e14a0ed3eb0abd09f7cfa326e5e34a2e2e6b0f1d56b634ccf33bb282ff888358a8de77a5b1d8bb704e1c48309c38b2771bc597ada74b90afda5a007e8f0fd4e5a5e289f3085d190b284bf645cc868a81498110f9bfdf1b267c64a888ba1fe91f9e421974e16f0d91bc6a2297f09dd517608c0703a9d2c440157693bf5ca5c82980aebe5619d37933523fa10404d5a88fc6795bf2896021a20d8c57111814544a283d7532efc66ccde71821c947ea967d566cb9d42a5e141e786a99996bebab98ccbc479be13d55050beca2dac256ca07cd476c5a4f4ea01362cc71181b529ae396b77372b8a11f880f3e02ab12ce53b05b1e6dd952a39972fae33dfcffe143d12010018cfa916095b63e06df9fb0d0d7b03e08842f19d1f800b0ae8d1f18d001165235fdc7080014317c3c13a5fbcfd48221cb963ef7d22722e62127e06e9ea54c777b4cedc1b91820a16bb0e2e81a39d2fbde96789b2f1b365fb93aa5181a6778f2d15b8d78d0467ac84602389602b52475648bd553a2e94867298a8a8b6444b84344b3b03ef723a61e6ab0a1d7d06a23686547045df08771f60a9e843fd18c62157911690b186f79f73063e0677861c231b9d207274b513ee5558ad32b040db8a00f882db38042ff5bd9e4a63391db6e6b8112f6e246010b3868c3a5dfa1ab4633877d3ed01b89c492971f3599608fdb541cd003dc16eb1a869476172814e401241ecdc2e8ad02c03ef91a8236ae4402093e4be09fcc0ce0da7c24a50c5aa995e663e02d93437c486d6e7f75aeec6210adc7864818c47bc7568a0c6862b28266f6d42c6f33fa9a786642681b568ccbc0d048303ada3e774b375dfb6fe77dfb84e1cfc9a036a427ebda859f1def4649d2880f2712c244c3822c4b468abbefaa939b1a166490c3f0069197c6c23c027f094ff0ecfe40edd17da79cfac076bc764cad5c6ea41e6818d2673bd7250ec01b0e720f39f0843294d42180ea82ca8717a3dba69a4115b908bb617d4528a8436599c0a3b95bf2f495b9921b358a6e5c128a2dc29ae66f169841ad3d6c984d6f6824a22611dd5f7329151ca3af338ae488cc50860b966fa9fd033c50dc61aea56a51baf8492bd607256d59d865062dce7b0049a51f8835a4d7f883b43f7b701428f10241b22fcea6a549ba8689d20f92821a831f7f2868a1d3bac9029cdabc130da0d4cf27d009a5f57eb663424a5f28addbc15c42c29b70f5b65117fdab40be2d3a8d66ffe3712ea5d79967a4b8eef05d9b0885d73012d6763fbf40f1415a9071cc5e32590e36b7e6d727b8773461e24ff6859bddaeb8590e73e9577fe3dab08f712a43d409d43a9f788ca2e1ef4076380ddfcd9db2c0cbac5c1a24b881847fab8c08667beee3fe016fe5eb07d18cecfba8de7354f752159ab42443bc0d5bd9807bef74c6f8d6f7878f4c4bc1ac6ad9d17d9eb38f1cf5cfed21457f8417aceca6ba86228e33e1c0e8e259c6230865bb5e0a604325fdab190681463e7e9898093de6815b9b01ce37af106046591f1d1b5a5b787f80834b576b38e0d9bc23329f6dd73753225b3e53bb5a4f3f1ac4eea11432bfa1910f7d0c653478d1e678f8a32ab6190c3ce28ea750cf3376bc0a06ea54149d6e949326ee77124618dc53a551010a638eceeff48e9dcdc9cba853f4dcf768a18ba28c08d0304c198fd4cdc02ca21f3eb5d6b8ec2fa545d1e4c66760d6357141f4e40aadfb2579fd2cc0d1368948c11d07e05ff7844ed8a861af73702f1246a61fca0cb1d4049306abae44d40bf64b99ca7194e5249342501e0333cad1252ed75d19e561efcaefca2371d06c85e7448dd7a4134f89a40fa130024f9ec39081602163a4ede97c4a5f9eeecb4bcb551eae1a9e17f141d2989c7cc9edf5aa946aa81b410b1767785d4ecddfa68e853ffc81895ce0f7746c88dc8f0d4707ba6bbd5e43ea91053c57f7aa2ca1c96a59f2ce2a09cd6816a379bf0dddd7144773a4735c3995728666a0d48372f12c1e2edb5656509d6239cb373199cfeaece5286b842ae2b63691c84967d066a66566027dcc37c85bab31fe4fe6b05bd933f66d08647c81787228e1e6f65dce9006258e10c2d740d7563952d3bfe0a2e5aec294255046f437f2366dc30d1999a20a04e1fc7179ff2d00c498ab2b4c7ee00f2624027be777782aeef3977d99d001dde359435072ac67ed1f00675691ab13b146a592c7122a8965dffbe6bf3359b187ce494f99e8dc0f47a2ef59613567707ab8477433910211f02d8cf5f7db598924c7762583de6f1418039ef6c4a80f7949806002deb010a651afe495b10860a7ba33ad74f1e0ed76cb52ee1eb0becd340784c9645311500678821c25c0fe8c766f1e845a25cff83a64a93676001add920e48788a53d5d6d4e9b9a503170b55f21d8b53ffa2d84c3ef5894c2298a7ea2a95067b343d6ec9d7d9b89733c7b896d4d2d720242270b963061a79b0196d1ad897f17aa2ae316cd3fe44b06519d8bdf68a00c39e88df14e42c81d33b8dd8c2ec97e6fc4a9dfc1b8b36d1f4e4c4bb204ca13cc9444031be2f655a93396961603762b318ca844556b715e9457a6583517d4a3b8f67afcff28980e92dd48e20e3cd21b7e190f6b8b2e9c11ba782600de4ab4486ae920dfd0397f614c0ce4615df8c54f5eda4fde1f7557507cd8dc1e81ae0e6ce68a590b55424f5db54f337e20aaf457dc42fd513439163b5cf387e4fac9980d2dae7126db068f7ba54b5c23dc77a6c1ab2ef0341110352cb2293c4cef984219387750cdd32b6cb5d262ee0a7189df9d7f7105de5c2de4431e144cdc548b495eef94a5f463b32ed7d315740a58faa1c467b94805b062bea6cba4d348c5f46f7c6ccd1f9ffcfce0dc97ce1fee8c3a9dcb26b48c96b954a75f4ca3b0bf37f27539964c8826558c7bd3520db94209454420e442dc0c2a9305846408a9737f2675df0c4dba2c51dadf068bc045b0868003fde60e0ada406e5bfeead3bed28c3edd203b3530af5e6b3ad59c6d3cedeedf4d26888297985762d85eaac3e681717bc70ae393d16aa48e575756e241f6dfbcc278c612fb7ba3fb904f1c213269093927e8fcd5d17b2228a34520f316ee5bf2751c7460d79157fa19684af4c911cc7ec41e34035cd73552906f1c2e73cd4484305829665261d848466b0f3d836404ed3d1a74ce9f04b5c8e31335091029bf94f395e524d5caf4cb4b40aa3f256cd1cffc8a1a0a06378966ad520e3bb68121e6e8f6f5020a7d0d4b888b3cd94ec54dbe0352fb20e2116aa8bd4c21763e2f61e142dcfcda1364b3c327f5568e8932bf4672b6233669e7926b04ad1f759f7b1108958d893720c0e991bf2a0cdd6dc18fef300027de9bfc2893366932a3a14b0155ad3ce4e514f25811c85a23d8b8eef2b8e309badc95b37b5db871924159fc84e79708879bd836d615ecebaefd4a771ea4607b6f311fea944c0a331c651340a5db549601fc316ca9be3a6dbd56f3e539104adff5a540b7dac75b65753f66270a91be22e873d17c5c8ca30d47e84cf56b52f116d27271b7b417a5fbba32aba41f0935095d622fc34dcc044006bcee1af357921134665ba0c18446e09bf662f1e4788197a90a4e2747ce836f8b3a88962963f0117e55dfed986a016aee2ad3b05f2d5b72c4010f3e4f5eebcb606e4282baab40326192ce7727e2ab0b1ada98e23d510ada6f6b4c1a4a5101c041e2ce556f8075024a98c72dcdda7e46e82ccbf9fc2daa66c4b4654550dfe2731cf362e93d769f33897d0b6a8ed3f51a67ed2ab23436d9d75c86d8b05680e22c7a3bb4d922fac6a34641b82a01a52c68bbe4adc10712a246896a1b5058e04af506cb479f7f730b9fcb32ab9fc7d483c6cafa34e2c47636d3529d4d982ab32606295bb0d792d19c91b6c9ee760ab3d409ff89ef1cb23dcbb739cdee15b35466b22cecabb4ed46f231ef3eed41ebf10135331dab4a1d686416820c07a3aadaec91e555182f60a886b59b05e17389e83d9f8dff07cd1a59bc1987d0b7a825ded500a8719ee8ad8c37d0415305b507326210d480980227be312557375dc3426323454a30376aa229eb14e475a2d570e7b3000bf873e03c48777a145505c4694655ab2026f219a7ff70a587a6c5cfee0e2c03e94b12d4da70538c1d9cd1bf3db6c95ba8f12fea08b6ed0d1db67e7b1b5b2df19219b6c5e1c8784fda7702a1cbb0cf393619a63da04722da15256633f38f597d98b81648e52cbfe074d034f3b1903eb7af73d9279ba78ff1afe850c8f5d334b847835845bf39da242d9ef0b49be79f73073a00fdc112b92af849b88261cd877327303d419041dcf43e209b8700265ece8c3702d46a583869cbc2c3d27af63051c14b7c22c11edb7f397c823df02ce57587daf463201b708e8bf9887bcfcbda8f334415bdf1e295953261165") 1.798663552s ago: executing program 5 (id=985): r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f00000000c0)=0x1, 0x4) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x900) ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, &(0x7f0000000200)={0x1, 0x0, &(0x7f00000001c0)=[0x0]}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000001600)={r2, 0x200, 0x6, 0x5, 0x0, [], [0x3, 0x800, 0x4], [0x0, 0x1df5, 0x7, 0x3], [0x0, 0xf, 0xfff]}) mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f0000000640)={0x24, &(0x7f0000000500)={0x40, 0xf, 0xa1, "f0803bb547c4098a8ce8d71e5f7b47824adb0a81a2c94690d8009c981bf96a293ba677513d0210bd73f368a97e93fb67e2141e7ab7e55e761cf1cf0edf585495a30dd215e6b7e7a30a15bcae2b5ffaf49cf55a2c697e0a1f796d66106ac68e8f8c3786bd20e17c2653cc2f629022e1d1922c5f92577cfb41cbc6337765da2bc25f2864e857b5b81d5d7b097cd32f87f53195423cf00841033dd7dc6f4c0f56edcb"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000440)={0x34, &(0x7f00000002c0)={0x40, 0x8, 0x2, "2bec"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r3, 0x0, 0x0) syz_usb_control_io$uac1(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000300)={0x40, 0x11, 0x2, "b9d5"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$printer(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000840)={0x2c, &(0x7f0000000700)={0x40, 0x9, 0x2, "6ef1"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) syz_usb_control_io$lan78xx(r3, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x10, 0x1416, 0x1}, 0x10}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x15, 0x0, 0x0, &(0x7f00000000c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x94) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) syz_usb_control_io$printer(r3, 0x0, &(0x7f00000005c0)={0x1c, &(0x7f0000000180)={0x0, 0xe, 0x2, "1972"}, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r5, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) syz_io_uring_setup(0x2970, &(0x7f00000000c0)={0x0, 0xf62b, 0x40, 0x2, 0x3a4}, &(0x7f0000000140), &(0x7f0000000180), &(0x7f0000000240)) 1.372426803s ago: executing program 8 (id=986): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000240)=0x5000, 0x4) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="30000000a5c3a3454467d16cdc72abd8b599255d46efa0ab0e367a52c63574a050168704d86399c9cd6afdd02c76e9f0b081853093ffb1a6a9d4c1d3edce935096a27bfd7588c138a024957c4b9e638e591bd3e6eccedbaaf0243df160086f1607064e157644b6055d7e1e562f7d0e3c68237f7ba3148403243d3f69931f80be9bc9b4000000", @ANYRES16=r1, @ANYBLOB="050027bd7000000000004400000008000300", @ANYRES32=r2, @ANYBLOB="0a001800030303030303000008000d000c000000"], 0x30}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f00000003c0)={r5, 0x0, 0x10, 0x0, 0x9}, &(0x7f0000000380)=0x18) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r1, 0x8, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8041}, 0x200000c1) 1.221967634s ago: executing program 8 (id=987): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000010280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x800c1}, 0x8004) accept4(r1, 0x0, 0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000000)={0x1000}, 0x4) unshare(0x8040480) socket(0x1d, 0x2, 0x6) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb69, 0xc1, 0x4, 0x1, 0x3, 0x5, 0x101, 0x1000, 0x9, 0x3, 0x3, 0x1, 0xfffffffa, 0x0, 0x6, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x762, 0x3, 0xd, 0xe, 0x2b12, 0x100, 0x6, 0x1c00, 0xb, 0x7, 0xbed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x8, 0x5, 0x79b, 0x2, 0x1, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x2, 0x180000, 0x14007, 0x8b, 0x5, 0x2af, 0xf7, 0x5, 0x2, 0x6, 0x9, 0x4, 0x7, 0x4009, 0x0, 0x4, 0x100002, 0x8, 0x3, 0x0, 0x5, 0x0, 0x10001, 0x2, 0xffffffff, 0x6, 0x6, 0xa, 0x80000000, 0xfdffffff, 0x2, 0x2, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x5, 0x20006, 0x5, 0x2, 0xb, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x88, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8, 0x1, 0x1fc, 0xc5c, 0xffffffff]}}) openat$uinput(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) syz_usb_connect(0x2, 0x3e, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000001180)=ANY=[@ANYBLOB="3d0200007d00000005fc000000faffffff000000000000000000000000000000ac1b000000000000000000000000000000002500046e6fc866c97d609906000000000000009000001df6db0000000000003dd30000000000003800704a86cec602007dfa673effeb09b5351f5bde054000000000187b8200b500003b595fcb14034354b9fd9ef196a51cd5157adc8106b494e11700cfc2001000000000000000000f580502b66e00f313f6005500f8f669fb716dcf31bfb8841709c4eb5824857454b414175ecaf385409ac65b9408678c2c3b9e1d52c36cde7ba4a400b4b0b4f174a63b641a73cf0bd62bc766a8529a451b3407dbdab2884baf050000000000000047ec21cabff20f9c1cbe36f4fd1a4cc280e8d489da649a37002c016f6465762d6eb17b2300f9daa5ee23266ecf85fea65e42d979a3fde5f475daf03b1172d97badc7095afd76fe4f0441f7f7741eac030000ecff0000dba0c2f7f09ff53c7e4d1ad66e2d070198019f30118447aa9a74f5160500000000000000c267d5a1298d792c4a37f2e1cbbd2482929a0d8972b5cf732ea5b0d723859dba3f93aed3b42ee7cac07de09d1d68a60333a882467d2b31aacdf9188549b1125d6c4c9b18c2fb56c57d7dc626e4390796a1eb48274669ab13f8b11d146059f310e2634d593fec65d529f382066664df244e4c90570a70049f319f061f75b7797ce1fe11ea919609d51a41dd3de304bd7c7ed0a456f0ae12516105c9ce887df5a6e0b6a77d596cf88ba6e5c6397c7d5021d7989528fd", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x23d) socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000180)) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0xfffffffc, @ipv4={'\x00', '\xff\xff', @remote}, 0x1}, 0x1c) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 1.221528047s ago: executing program 4 (id=988): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r2 = socket(0xa, 0x3, 0x3a) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000640)={0xa4, r4, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x74, 0x8, 0x0, 0x1, [{0x70, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x64, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}]}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4084}, 0x2008040) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) setsockopt$packet_int(r5, 0x107, 0xa, &(0x7f0000000000), 0x4) setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x1, 0x4}, 0xc) syz_emit_ethernet(0x56, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f00000001c0), 0xa00, 0x0) r6 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x10000}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x11}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x5c}}, 0x4004804) ioctl$BLKTRACESTART(r6, 0x1274, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000740)={'#! ', './file0', [], 0xa, "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"}, 0x13d) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TCSETS(r8, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "00009200000000000000000000000058b200"}) epoll_create(0x8) 474.989502ms ago: executing program 8 (id=989): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000010280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x800c1}, 0x8004) accept4(r1, 0x0, 0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000000)={0x1000}, 0x4) unshare(0x8040480) socket(0x1d, 0x2, 0x6) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb69, 0xc1, 0x4, 0x1, 0x3, 0x5, 0x101, 0x1000, 0x9, 0x3, 0x3, 0x1, 0xfffffffa, 0x0, 0x6, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x762, 0x3, 0xd, 0xe, 0x2b12, 0x100, 0x6, 0x1c00, 0xb, 0x7, 0xbed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x8, 0x5, 0x79b, 0x2, 0x1, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x2, 0x180000, 0x14007, 0x8b, 0x5, 0x2af, 0xf7, 0x5, 0x2, 0x6, 0x9, 0x4, 0x7, 0x4009, 0x0, 0x4, 0x100002, 0x8, 0x3, 0x0, 0x5, 0x0, 0x10001, 0x2, 0xffffffff, 0x6, 0x6, 0xa, 0x80000000, 0xfdffffff, 0x2, 0x2, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x5, 0x20006, 0x5, 0x2, 0xb, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x88, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8, 0x1, 0x1fc, 0xc5c, 0xffffffff]}}) openat$uinput(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) syz_usb_connect(0x2, 0x3e, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000001180)=ANY=[@ANYBLOB="3d0200007d00000005fc000000faffffff000000000000000000000000000000ac1b000000000000000000000000000000002500046e6fc866c97d609906000000000000009000001df6db0000000000003dd30000000000003800704a86cec602007dfa673effeb09b5351f5bde054000000000187b8200b500003b595fcb14034354b9fd9ef196a51cd5157adc8106b494e11700cfc2001000000000000000000f580502b66e00f313f6005500f8f669fb716dcf31bfb8841709c4eb5824857454b414175ecaf385409ac65b9408678c2c3b9e1d52c36cde7ba4a400b4b0b4f174a63b641a73cf0bd62bc766a8529a451b3407dbdab2884baf050000000000000047ec21cabff20f9c1cbe36f4fd1a4cc280e8d489da649a37002c016f6465762d6eb17b2300f9daa5ee23266ecf85fea65e42d979a3fde5f475daf03b1172d97badc7095afd76fe4f0441f7f7741eac030000ecff0000dba0c2f7f09ff53c7e4d1ad66e2d070198019f30118447aa9a74f5160500000000000000c267d5a1298d792c4a37f2e1cbbd2482929a0d8972b5cf732ea5b0d723859dba3f93aed3b42ee7cac07de09d1d68a60333a882467d2b31aacdf9188549b1125d6c4c9b18c2fb56c57d7dc626e4390796a1eb48274669ab13f8b11d146059f310e2634d593fec65d529f382066664df244e4c90570a70049f319f061f75b7797ce1fe11ea919609d51a41dd3de304bd7c7ed0a456f0ae12516105c9ce887df5a6e0b6a77d596cf88ba6e5c6397c7d5021d7989528fd", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x23d) socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000180)) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0xfffffffc, @ipv4={'\x00', '\xff\xff', @remote}, 0x1}, 0x1c) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 0s ago: executing program 7 (id=990): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x0, 0x8]}, 0x8, 0x180000) sendmsg$can_bcm(r0, &(0x7f0000000140)={&(0x7f0000000040), 0x10, &(0x7f0000000100)={&(0x7f0000000080)={0x4, 0x801, 0x0, {0x0, 0x2710}, {0x0, 0x2710}, {0x1, 0x1, 0x1, 0x1}, 0x1, @canfd={{0x3, 0x0, 0x1}, 0x6, 0x1, 0x0, 0x0, "867f695e38df7aeab280d3e3ea4877183bfeb5ed644b73a35f615a6fbbb6c41d231bda8bf2c9c8d7f2e0cc6e8ea62387fa538e16a1a426c39ef55e539d24a467"}}, 0x6c}, 0x1, 0x0, 0x0, 0x40000}, 0x40890) write$uinput_user_dev(r0, &(0x7f0000000180)={'syz0\x00', {0xff, 0x0, 0x7b9e, 0x6}, 0x36, [0x8, 0x3, 0x5, 0xa80, 0x401, 0x8e3e, 0x7f, 0x4, 0x10000, 0x40, 0x8, 0x2, 0x5, 0x7f, 0x2, 0x2, 0x8, 0x8, 0x8, 0xaea6, 0x6, 0x5, 0x8, 0x6c7, 0x8000, 0x5, 0x0, 0x6, 0x6, 0x2, 0x3, 0x8, 0x4, 0x0, 0x81e00000, 0x10, 0x3a0, 0xfffffffb, 0x9c, 0x9, 0x80, 0x4, 0xac7, 0x89, 0x7, 0x8, 0x2, 0x2, 0x8, 0x1b2, 0x800, 0x44, 0x1, 0x9, 0x3, 0xf, 0x7, 0x5, 0x0, 0x8001, 0x7, 0xfffffffb, 0x14, 0x107], [0xd, 0x667d, 0x3, 0x32d, 0x80000000, 0x1, 0x4, 0x10001, 0x1, 0x4, 0x3, 0x8, 0x25cf, 0x6, 0xd97, 0x0, 0x6, 0x38, 0x6, 0x400, 0x51, 0x6, 0x1, 0x6, 0x400, 0xffffffff, 0x7fff, 0x80000001, 0x3, 0xfff, 0x2, 0x4, 0x3ff, 0xfff, 0x190c7b14, 0xb3, 0xffff75f4, 0x0, 0xd, 0xaa, 0x4, 0x5a70, 0xfffffff9, 0xffffb596, 0xfff, 0x47, 0x7, 0x824b, 0x80000001, 0x2, 0x1, 0x4, 0x7f, 0x0, 0x6, 0x0, 0x0, 0x2, 0x8, 0x7, 0x7f, 0x80000001, 0x3, 0x5], [0x100, 0x7, 0x5, 0xffff, 0x8, 0x2, 0x1, 0x9, 0xfffffffc, 0x0, 0x3, 0xfff, 0x1ff, 0x23cb, 0x3, 0x7, 0xcbc, 0x8b0d, 0xb9, 0xb, 0x101, 0x87a0, 0x401, 0x8, 0x1, 0x1ff, 0xbd, 0x9, 0x9, 0x2, 0x2, 0xffff11e6, 0xefa2, 0x8, 0x4, 0x1, 0x0, 0x1, 0xffffffff, 0x4173, 0x7, 0x7c3, 0x37e, 0x7, 0x4, 0x1, 0xb05, 0xff, 0x6, 0xf, 0x200, 0xffff, 0x3, 0x80000001, 0x5f, 0x4, 0x17, 0xf688, 0x10000, 0x8, 0x0, 0x5, 0xc, 0x8000], [0x5, 0x1, 0x5, 0x4, 0x5, 0x8, 0x7, 0xb6, 0x5, 0xc08, 0x10000, 0x6, 0xfffffffd, 0x14000, 0x9, 0x400000, 0xa0f2, 0x84, 0x0, 0x9, 0xfffffffc, 0x951, 0x8, 0x32, 0x9, 0x4, 0xffffff7e, 0x7, 0x101, 0x3, 0x5, 0x4a1, 0x266, 0x837e, 0x2, 0xffffffff, 0xffffffff, 0x1ff, 0x4, 0x6, 0xc3, 0x3, 0x854a, 0x1, 0xfffffffd, 0x4, 0x3fff, 0xb0, 0x2, 0xf0df, 0x64b, 0x10001, 0x8000, 0x10001, 0x9, 0x7, 0xff, 0x7, 0x6, 0x100, 0x10001, 0x5, 0x6, 0x1]}, 0x45c) (async) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000600)={0x8, 0x2, 0x1, 0x39, 0x3d, "75e691ac35b03afa75f010f53591dbe15860e0", 0x6, 0x80}) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000640)=@gcm_128={{0x303}, "3c2e4a141463ba3e", "09138b343a5c219bba79ff8a6e990e87", '562[', "b561f285617c3a2a"}, 0x28) (async) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000680)=0x0) tkill(r1, 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) (async) tgkill(r1, r1, 0x24) (async) sync_file_range(r0, 0x0, 0x4790, 0x3) (async) sendmsg$AUDIT_SET(r0, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x3c, 0x3e9, 0x400, 0x70bd25, 0x25dfdbfe, {0x4a, 0x0, 0x1, r1, 0x7, 0x3, 0x8, 0x4, 0x0, 0x10001, 0x7fffffff}, ["", "", "", "", "", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f00000007c0)) (async) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000840)=@req={0x20, &(0x7f0000000800)={'dummy0\x00', @ifru_hwaddr=@local}}) (async) r3 = syz_open_dev$audion(&(0x7f0000000880), 0x81, 0x80) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000008c0)=0x1, 0x4) (async) r4 = dup(r0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc00c64b5, &(0x7f0000000940)={&(0x7f0000000900)=[0x0], 0x1}) (async) r5 = syz_open_dev$sndpcmc(&(0x7f0000000980), 0x1, 0x121000) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r5, 0xc0804124, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) (async) ioctl$USBDEVFS_CONNECTINFO(r3, 0x40085511, &(0x7f0000000a40)) (async) socket$pppoe(0x18, 0x1, 0x0) (async) socket$netlink(0x10, 0x3, 0x15) (async) setns(r0, 0x40000000) (async) ptrace$peeksig(0x4209, r1, &(0x7f0000000a80)={0x7, 0x0, 0x9}, &(0x7f0000000ac0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}]) ioctl$BLKFRAGET(r0, 0x1265, &(0x7f0000000f40)) (async) r6 = openat$dlm_plock(0xffffff9c, &(0x7f0000000f80), 0x80800, 0x0) (async) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000fc0)={0x42, 0x0, 0x2}, 0x10) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$VIDIOC_QUERYBUF_DMABUF(r6, 0xc04c5609, &(0x7f0000001000)={0x8001, 0xc, 0x4, 0x8, 0x200, {}, {0x2, 0xc, 0x1, 0x6, 0xfb, 0x2, "35fb6c24"}, 0x5, 0x4, {}, 0x2, 0x0, 0xffffffffffffffff}) ioctl$F2FS_IOC_FLUSH_DEVICE(r7, 0x4008f50a, &(0x7f0000001080)={0x400, 0x10000}) kernel console output (not intermixed with test programs): 245.323139][ T5702] usb 6-1: USB disconnect, device number 11 [ 245.345876][ T24] usb usb5-port1: unable to enumerate USB device [ 245.375646][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 245.486166][ T5686] usb 7-1: new low-speed USB device number 16 using dummy_hcd [ 245.647035][ T5686] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 245.658863][ T5686] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 245.667858][ T5686] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 245.678828][ T5686] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 245.687980][ T5686] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.704385][ T8103] raw-gadget.5 gadget.6: fail, usb_ep_enable returned -22 [ 245.725429][ T5686] hub 7-1:1.0: bad descriptor, ignoring hub [ 245.731710][ T5686] hub 7-1:1.0: probe with driver hub failed with error -5 [ 245.739631][ T5686] cdc_wdm 7-1:1.0: skipping garbage [ 245.745679][ T5686] cdc_wdm 7-1:1.0: skipping garbage [ 245.766246][ T5686] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 245.772303][ T5686] cdc_wdm 7-1:1.0: Unknown control protocol [ 246.115443][ T808] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 246.265408][ T808] usb 4-1: Using ep0 maxpacket: 32 [ 246.273359][ T808] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 246.285440][ T8110] netlink: 92 bytes leftover after parsing attributes in process `syz.5.707'. [ 246.294415][ T808] usb 4-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 246.306599][ T808] usb 4-1: config 0 interface 0 has no altsetting 0 [ 246.315331][ T808] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 246.324947][ T808] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.333066][ T808] usb 4-1: Product: syz [ 246.337592][ T808] usb 4-1: Manufacturer: syz [ 246.342189][ T808] usb 4-1: SerialNumber: syz [ 246.348987][ T808] usb 4-1: config 0 descriptor?? [ 247.085930][ T24] usb 5-1: new full-speed USB device number 44 using dummy_hcd [ 247.151770][ T8119] binder: 8118:8119 ioctl c0306201 80000700 returned -14 [ 247.250679][ T24] usb 5-1: unable to get BOS descriptor or descriptor too short [ 247.267563][ T24] usb 5-1: not running at top speed; connect to a high speed hub [ 247.282654][ T24] usb 5-1: config index 0 descriptor too short (expected 28771, got 10) [ 247.299561][ T24] usb 5-1: config 114 has too many interfaces: 95, using maximum allowed: 32 [ 247.318111][ T24] usb 5-1: config 114 descriptor has 1 excess byte, ignoring [ 247.326505][ T24] usb 5-1: config 114 has 0 interfaces, different from the descriptor's value: 95 [ 247.339985][ T24] usb 5-1: New USB device found, idVendor=0ac8, idProduct=0323, bcdDevice=a7.8f [ 247.349484][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.358711][ T24] usb 5-1: Product: syz [ 247.363096][ T24] usb 5-1: Manufacturer: syz [ 247.367772][ T24] usb 5-1: SerialNumber: syz [ 247.578830][ T8113] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 247.587690][ T8113] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 247.616003][ T808] gs_usb 4-1:0.0: Couldn't get device config: (err=-110) [ 247.626239][ T808] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -110 [ 247.735928][ T24] usb 5-1: USB disconnect, device number 44 [ 248.195966][ T5686] usb 7-1: USB disconnect, device number 16 [ 248.323788][ T8136] syzkaller0: entered promiscuous mode [ 248.329584][ T8136] syzkaller0: entered allmulticast mode [ 248.367671][ T8132] syzkaller0: entered promiscuous mode [ 248.373151][ T8132] syzkaller0: entered allmulticast mode [ 248.564432][ T8138] loop5: detected capacity change from 0 to 7 [ 248.589731][ T8138] Dev loop5: unable to read RDB block 7 [ 248.596316][ T8138] loop5: unable to read partition table [ 248.602966][ T8138] loop5: partition table beyond EOD, truncated [ 248.611620][ T8138] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 248.803423][ T8141] geneve2: entered promiscuous mode [ 248.874778][ T24] usb 4-1: USB disconnect, device number 40 [ 249.131962][ T4994] Dev loop5: unable to read RDB block 7 [ 249.150813][ T4994] loop5: unable to read partition table [ 249.155406][ T5702] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 249.172633][ T4994] loop5: partition table beyond EOD, truncated [ 249.311660][ T4994] Dev loop5: unable to read RDB block 7 [ 249.321349][ T4994] loop5: unable to read partition table [ 249.336357][ T4994] loop5: partition table beyond EOD, truncated [ 249.341237][ T8154] FAULT_INJECTION: forcing a failure. [ 249.341237][ T8154] name failslab, interval 1, probability 0, space 0, times 0 [ 249.362142][ T5702] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 249.390143][ T5702] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.411184][ T8154] CPU: 0 UID: 0 PID: 8154 Comm: syz.5.720 Tainted: G L syzkaller #0 PREEMPT(full) [ 249.411211][ T8154] Tainted: [L]=SOFTLOCKUP [ 249.411217][ T8154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 249.411231][ T8154] Call Trace: [ 249.411238][ T8154] [ 249.411245][ T8154] dump_stack_lvl+0xe8/0x150 [ 249.411272][ T8154] should_fail_ex+0x412/0x560 [ 249.411301][ T8154] should_failslab+0xa8/0x100 [ 249.411328][ T8154] __kmalloc_noprof+0xe8/0x760 [ 249.411353][ T8154] ? tomoyo_encode+0x28b/0x550 [ 249.411385][ T8154] tomoyo_encode+0x28b/0x550 [ 249.411414][ T8154] tomoyo_realpath_from_path+0x58d/0x5d0 [ 249.411448][ T8154] ? tomoyo_path2_perm+0x299/0x760 [ 249.411468][ T8154] tomoyo_path2_perm+0x2c5/0x760 [ 249.411495][ T8154] ? __pfx_tomoyo_path2_perm+0x10/0x10 [ 249.411517][ T8154] ? __asan_memset+0x22/0x50 [ 249.411539][ T8154] ? current_check_refer_path+0x402/0x11f0 [ 249.411576][ T8154] ? __lock_acquire+0x6b5/0x2cf0 [ 249.411628][ T8154] tomoyo_path_rename+0x14e/0x1b0 [ 249.411656][ T8154] ? __pfx_tomoyo_path_rename+0x10/0x10 [ 249.411682][ T8154] ? do_raw_spin_unlock+0xf5/0x210 [ 249.411708][ T8154] ? _raw_spin_unlock+0x28/0x50 [ 249.411734][ T8154] security_path_rename+0x248/0x460 [ 249.411763][ T8154] filename_renameat2+0x4c1/0x9c0 [ 249.411797][ T8154] ? __pfx_filename_renameat2+0x10/0x10 [ 249.411828][ T8154] ? strncpy_from_user+0x150/0x2b0 [ 249.411853][ T8154] ? do_getname+0x151/0x250 [ 249.411875][ T8154] __se_sys_renameat2+0x5a/0x2c0 [ 249.411899][ T8154] __do_fast_syscall_32+0x229/0x6e0 [ 249.411922][ T8154] ? do_fast_syscall_32+0x33/0x70 [ 249.411943][ T8154] ? lockdep_hardirqs_on+0x7a/0x110 [ 249.411964][ T8154] ? asm_int80_emulation+0x1a/0x20 [ 249.411980][ T8154] ? do_int80_emulation+0x286/0x530 [ 249.412001][ T8154] ? trace_irq_disable+0x3b/0x140 [ 249.412029][ T8154] do_fast_syscall_32+0x33/0x70 [ 249.412054][ T8154] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 249.412074][ T8154] RIP: 0023:0xf709f01c [ 249.412091][ T8154] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 249.412105][ T8154] RSP: 002b:00000000f546c50c EFLAGS: 00000206 ORIG_RAX: 0000000000000161 [ 249.412124][ T8154] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000480 [ 249.412136][ T8154] RDX: 00000000ffffff9c RSI: 00000000800004c0 RDI: 0000000000000002 [ 249.412146][ T8154] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 249.412156][ T8154] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 249.412166][ T8154] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 249.412194][ T8154] [ 249.802785][ T8154] ERROR: Out of memory at tomoyo_realpath_from_path. [ 249.887015][ T4944] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 249.899179][ T4944] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 249.909386][ T4944] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 249.922108][ T4944] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 249.938495][ T4944] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 249.997250][ T5702] usb 5-1: config 0 descriptor?? [ 250.006664][ T4994] Dev loop5: unable to read RDB block 7 [ 250.031900][ T4994] loop5: unable to read partition table [ 250.043363][ T4994] loop5: partition table beyond EOD, truncated [ 250.225448][ T5702] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 250.631971][ T8158] binder: 8157:8158 ioctl c0306201 80000700 returned -14 [ 250.796762][ T5709] usb 4-1: new low-speed USB device number 41 using dummy_hcd [ 250.958367][ T4994] Dev loop5: unable to read RDB block 7 [ 250.958968][ T5709] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 250.990528][ T4994] loop5: unable to read partition table [ 250.996540][ T4994] loop5: partition table beyond EOD, truncated [ 251.001071][ T5709] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 251.023709][ T5709] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 251.050574][ T5709] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 251.074395][ T5709] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.102189][ T8165] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 251.123639][ T5709] hub 4-1:1.0: bad descriptor, ignoring hub [ 251.134049][ T5709] hub 4-1:1.0: probe with driver hub failed with error -5 [ 251.166119][ T5709] cdc_wdm 4-1:1.0: skipping garbage [ 251.171362][ T5709] cdc_wdm 4-1:1.0: skipping garbage [ 251.189904][ T5709] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 251.205460][ T5709] cdc_wdm 4-1:1.0: Unknown control protocol [ 251.398328][ T808] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 251.561727][ T808] usb 6-1: Using ep0 maxpacket: 16 [ 251.576662][ T808] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 251.613427][ T808] usb 6-1: New USB device found, idVendor=046d, idProduct=0721, bcdDevice=9c.25 [ 251.631269][ T808] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.647128][ T808] usb 6-1: Product: syz [ 251.651538][ T808] usb 6-1: Manufacturer: syz [ 251.663412][ T808] usb 6-1: SerialNumber: syz [ 251.685410][ T808] usb 6-1: config 0 descriptor?? [ 251.700208][ T808] uvcvideo 6-1:0.0: Found UVC 0.00 device syz (046d:0721) [ 251.717433][ T808] uvcvideo 6-1:0.0: No valid video chain found. [ 251.737037][ T5702] [drm:udl_init] *ERROR* Selecting channel failed [ 251.910508][ T5702] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2 [ 251.925174][ T5702] [drm] Initialized udl on minor 2 [ 251.928008][ T24] usb 6-1: USB disconnect, device number 12 [ 251.973011][ T5702] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 252.015952][ T5625] Bluetooth: hci7: command tx timeout [ 252.049918][ T5702] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 252.091872][ T5709] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 252.106190][ T5702] usb 5-1: USB disconnect, device number 45 [ 252.149273][ T5709] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 252.580031][ T4994] Dev loop5: unable to read RDB block 7 [ 252.593289][ T4994] loop5: unable to read partition table [ 252.605725][ T4994] loop5: partition table beyond EOD, truncated [ 252.735516][ T5702] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 252.869572][ T4994] Dev loop5: unable to read RDB block 7 [ 252.882710][ T4994] loop5: unable to read partition table [ 252.897055][ T4994] loop5: partition table beyond EOD, truncated [ 252.915884][ T5702] usb 5-1: Using ep0 maxpacket: 8 [ 252.945821][ T5702] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 252.964958][ T5702] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 252.976990][ T5702] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 252.989417][ T5702] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 253.003837][ T5702] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 253.013265][ T5702] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.260674][ T5702] usb 5-1: GET_CAPABILITIES returned 0 [ 253.274112][ T5702] usbtmc 5-1:16.0: can't read capabilities [ 253.350311][ T8185] fuse: Unknown parameter '000000000000000000000x0000000000000003' [ 253.485656][ T24] usb 4-1: USB disconnect, device number 41 [ 253.555467][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 253.555484][ T29] audit: type=1326 audit(1778217739.981:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8175 comm="syz.4.726" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700f01c code=0x7ffc0000 [ 253.645428][ T808] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 253.645578][ T29] audit: type=1326 audit(1778217739.981:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8175 comm="syz.4.726" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf700f01c code=0x7ffc0000 [ 253.677362][ T29] audit: type=1326 audit(1778217739.981:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8175 comm="syz.4.726" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700f01c code=0x7ffc0000 [ 253.702691][ T29] audit: type=1326 audit(1778217739.981:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8175 comm="syz.4.726" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700f01c code=0x7ffc0000 [ 253.726959][ T29] audit: type=1326 audit(1778217740.021:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8175 comm="syz.4.726" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=163 compat=1 ip=0xf700f01c code=0x7ffc0000 [ 253.753317][ T29] audit: type=1326 audit(1778217740.021:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8175 comm="syz.4.726" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700f01c code=0x7ffc0000 [ 253.780340][ T29] audit: type=1326 audit(1778217740.021:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8175 comm="syz.4.726" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf700f01c code=0x7ffc0000 [ 253.815380][ T808] usb 7-1: Using ep0 maxpacket: 32 [ 253.816756][ T29] audit: type=1326 audit(1778217740.021:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8175 comm="syz.4.726" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700f01c code=0x7ffc0000 [ 253.831386][ T24] usb 5-1: USB disconnect, device number 46 [ 253.846467][ T29] audit: type=1326 audit(1778217740.021:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8175 comm="syz.4.726" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf700f01c code=0x7ffc0000 [ 253.861301][ T808] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 253.875975][ T29] audit: type=1326 audit(1778217740.031:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8175 comm="syz.4.726" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700f01c code=0x7ffc0000 [ 253.956706][ T808] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 253.985708][ T808] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 16384, setting to 1024 [ 254.020121][ T808] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 254.045962][ T808] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 254.088249][ T808] usb 7-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 254.097800][ T5625] Bluetooth: hci7: command tx timeout [ 254.098482][ T808] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.135931][ T808] usb 7-1: Product: syz [ 254.148557][ T808] usb 7-1: Manufacturer: syz [ 254.161866][ T808] usb 7-1: SerialNumber: syz [ 254.184833][ T808] usb 7-1: config 0 descriptor?? [ 254.200655][ T8156] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.208298][ T8156] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.217653][ T8156] bridge_slave_0: entered allmulticast mode [ 254.231872][ T8156] bridge_slave_0: entered promiscuous mode [ 254.267222][ T8156] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.280717][ T8156] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.288310][ T8156] bridge_slave_1: entered allmulticast mode [ 254.295793][ T8156] bridge_slave_1: entered promiscuous mode [ 254.389279][ T8156] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 254.407782][ T8156] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 254.528205][ T8199] netlink: 'syz.3.732': attribute type 1 has an invalid length. [ 254.530403][ T8156] team0: Port device team_slave_0 added [ 254.557105][ T8201] netlink: 28 bytes leftover after parsing attributes in process `syz.4.733'. [ 254.572699][ T8199] 8021q: adding VLAN 0 to HW filter on device bond2 [ 254.582120][ T8156] team0: Port device team_slave_1 added [ 254.623719][ T8199] vlan2: entered allmulticast mode [ 254.634950][ T8199] veth0_to_bond: entered allmulticast mode [ 254.652635][ T8199] bond2: (slave vlan2): making interface the new active one [ 254.678881][ T8199] bond2: (slave vlan2): Enslaving as an active interface with an up link [ 254.690056][ T8156] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 254.707853][ T8156] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 254.725832][ T5635] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 254.735152][ T8156] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 254.759018][ T8156] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 254.768241][ T8156] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 254.824756][ T8156] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 254.898181][ T5635] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 254.936865][ T5635] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 254.964056][ T8156] hsr_slave_0: entered promiscuous mode [ 254.972193][ T5635] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 254.986097][ T5635] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 254.988680][ T8156] hsr_slave_1: entered promiscuous mode [ 255.003011][ T5635] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 255.014517][ T5635] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 255.023828][ T5635] usb 6-1: Manufacturer: syz [ 255.027797][ T8156] debugfs: 'hsr0' already exists in 'hsr' [ 255.039736][ T5635] usb 6-1: config 0 descriptor?? [ 255.046861][ T8156] Cannot create hsr debugfs directory [ 255.236016][ T8206] binder: 8205:8206 ioctl c0306201 80000700 returned -14 [ 255.456501][ T808] iforce 7-1:0.0: usb_submit_urb failed: -110 [ 255.472763][ T808] input input23: Device does not respond to id packet M [ 255.499158][ T808] iforce 7-1:0.0: usb_submit_urb failed: -32 [ 255.524328][ T808] input input23: Device does not respond to id packet P [ 255.552582][ T808] iforce 7-1:0.0: usb_submit_urb failed: -32 [ 255.562282][ T8156] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 255.589109][ T808] input input23: Device does not respond to id packet B [ 255.602944][ T8156] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 255.619141][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.625831][ T808] iforce 7-1:0.0: usb_submit_urb failed: -32 [ 255.628622][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.640995][ T808] input input23: Device does not respond to id packet N [ 255.640996][ T8156] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 255.664118][ T8197] netlink: 32 bytes leftover after parsing attributes in process `syz.5.731'. [ 255.690537][ T808] iforce 7-1:0.0: usb_submit_urb failed: -32 [ 255.698162][ T8156] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 255.709742][ T808] iforce 7-1:0.0: usb_submit_urb failed: -32 [ 255.723877][ T8156] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 255.725016][ T808] iforce 7-1:0.0: usb_submit_urb failed: -32 [ 255.760960][ T808] iforce 7-1:0.0: usb_submit_urb failed: -32 [ 255.799740][ T8156] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 255.809131][ T808] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input23 [ 255.857783][ T8156] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 255.928588][ T8156] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 255.953330][ T8218] netlink: 64 bytes leftover after parsing attributes in process `syz.4.737'. [ 256.175702][ T5625] Bluetooth: hci7: command tx timeout [ 256.272648][ T8156] 8021q: adding VLAN 0 to HW filter on device bond0 [ 256.445808][ T8156] 8021q: adding VLAN 0 to HW filter on device team0 [ 256.457670][ T5702] usb 7-1: USB disconnect, device number 17 [ 256.501273][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.508461][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state [ 256.535434][ T5635] usbhid 6-1:0.0: can't add hid device: -71 [ 256.550705][ T5635] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 256.590640][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.597772][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 256.609893][ T5635] usb 6-1: USB disconnect, device number 13 [ 256.863168][ T8156] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 256.965540][ T24] usb 5-1: new low-speed USB device number 47 using dummy_hcd [ 256.987015][ T8156] veth0_vlan: entered promiscuous mode [ 257.011013][ T8156] veth1_vlan: entered promiscuous mode [ 257.047470][ T8156] veth0_macvtap: entered promiscuous mode [ 257.068983][ T8156] veth1_macvtap: entered promiscuous mode [ 257.106764][ T8156] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 257.128975][ T24] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 257.132318][ T8156] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 257.177943][ T24] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 257.182449][ T13] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.230931][ T24] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 257.232881][ T13] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.272834][ T24] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 257.334126][ T13] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.347775][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.378166][ T13] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.416558][ T8233] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 257.443503][ T24] hub 5-1:1.0: bad descriptor, ignoring hub [ 257.446656][ T47] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 257.478998][ T24] hub 5-1:1.0: probe with driver hub failed with error -5 [ 257.479565][ T47] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 257.517846][ T24] cdc_wdm 5-1:1.0: skipping garbage [ 257.525421][ T808] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 257.527663][ T47] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 257.552430][ T24] cdc_wdm 5-1:1.0: skipping garbage [ 257.552747][ T47] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 257.589365][ T24] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 257.616808][ T24] cdc_wdm 5-1:1.0: Unknown control protocol [ 257.715829][ T808] usb 6-1: Using ep0 maxpacket: 32 [ 257.729941][ T808] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 257.755897][ T808] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 257.783441][ T808] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 257.813551][ T808] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 257.844277][ T808] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 257.872490][ T808] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 257.902220][ T808] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 257.921765][ T808] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.934686][ T8248] binder_alloc: 8247: binder_alloc_buf, no vma [ 257.943228][ T808] usb 6-1: config 0 descriptor?? [ 258.031516][ T8251] netlink: 'syz.6.745': attribute type 1 has an invalid length. [ 258.063054][ T8251] 8021q: adding VLAN 0 to HW filter on device bond2 [ 258.083671][ T8251] vlan2: entered allmulticast mode [ 258.088940][ T8251] veth0_to_bond: entered allmulticast mode [ 258.099009][ T8251] bond2: (slave vlan2): making interface the new active one [ 258.109141][ T8251] bond2: (slave vlan2): Enslaving as an active interface with an up link [ 258.218540][ T808] usblp 6-1:0.0: usblp1: USB Bidirectional printer dev 14 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 258.265600][ T5625] Bluetooth: hci7: command tx timeout [ 258.440375][ T5686] usb 6-1: USB disconnect, device number 14 [ 258.462553][ T5686] usblp1: removed [ 258.475086][ T8255] binder: 8254:8255 ioctl c0306201 80000700 returned -14 [ 259.125519][ T5686] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 259.285959][ T5686] usb 8-1: Using ep0 maxpacket: 8 [ 259.293465][ T5686] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 259.306083][ T5686] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 259.320338][ T5686] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 259.330719][ T5686] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 259.344055][ T5686] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 259.353442][ T5686] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.538134][ T5730] usb 5-1: USB disconnect, device number 47 [ 259.584150][ T5686] usb 8-1: GET_CAPABILITIES returned 0 [ 259.603063][ T5686] usbtmc 8-1:16.0: can't read capabilities [ 259.674301][ T8286] usb usb8: usbfs: interface 0 claimed by hub while 'syz.6.757' resets device [ 259.713081][ T8288] netlink: 4 bytes leftover after parsing attributes in process `syz.4.758'. [ 259.759230][ T29] kauditd_printk_skb: 16 callbacks suppressed [ 259.759245][ T29] audit: type=1326 audit(1778217746.191:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8287 comm="syz.4.758" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf700f01c code=0x0 [ 259.814805][ T5686] usb 8-1: USB disconnect, device number 2 [ 260.138371][ T5686] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 260.167237][ T8292] binder: 8291:8292 ioctl c0306201 80000700 returned -14 [ 260.305889][ T5686] usb 8-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 260.326034][ T5686] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.344118][ T5686] usb 8-1: Product: syz [ 260.357861][ T5686] usb 8-1: Manufacturer: syz [ 260.373941][ T5686] usb 8-1: SerialNumber: syz [ 260.755430][ T5701] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 260.928239][ T5701] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 260.939264][ T5701] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 260.949256][ T5701] usb 6-1: New USB device found, idVendor=056a, idProduct=0059, bcdDevice= 0.00 [ 260.959584][ T5701] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.969791][ T5701] usb 6-1: config 0 descriptor?? [ 260.978962][ T5701] usbhid 6-1:0.0: can't add hid device: -22 [ 260.984943][ T5701] usbhid 6-1:0.0: probe with driver usbhid failed with error -22 [ 260.993636][ T5730] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 261.065815][ T5635] usb 4-1: new low-speed USB device number 42 using dummy_hcd [ 261.128287][ T5686] usb 8-1: unit 8 not found! [ 261.133073][ T5686] usb 8-1: unit 6 not found! [ 261.158321][ T5730] usb 5-1: Using ep0 maxpacket: 16 [ 261.180100][ T5730] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 261.201182][ T5730] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.205791][ T808] usb 6-1: USB disconnect, device number 15 [ 261.220635][ T5730] usb 5-1: Product: syz [ 261.230400][ T5635] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 261.233929][ T5686] usb 8-1: USB disconnect, device number 3 [ 261.252505][ T5730] usb 5-1: Manufacturer: syz [ 261.262934][ T5635] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 261.270210][ T5730] usb 5-1: SerialNumber: syz [ 261.293356][ T5635] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 261.331583][ T5635] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 261.350934][ T5635] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.390293][ T8312] raw-gadget.5 gadget.3: fail, usb_ep_enable returned -22 [ 261.411814][ T5635] hub 4-1:1.0: bad descriptor, ignoring hub [ 261.418155][ T5635] hub 4-1:1.0: probe with driver hub failed with error -5 [ 261.429867][ T5635] cdc_wdm 4-1:1.0: skipping garbage [ 261.435115][ T5635] cdc_wdm 4-1:1.0: skipping garbage [ 261.444108][ T5635] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 261.450879][ T5635] cdc_wdm 4-1:1.0: Unknown control protocol [ 261.655452][ T5686] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 261.825869][ T5686] usb 8-1: Using ep0 maxpacket: 16 [ 261.841122][ T5686] usb 8-1: config 0 has no interfaces? [ 261.854489][ T5686] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 261.864901][ T5686] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.873057][ T5686] usb 8-1: Product: syz [ 261.877453][ T5686] usb 8-1: Manufacturer: syz [ 261.882089][ T5686] usb 8-1: SerialNumber: syz [ 261.889296][ T5686] usb 8-1: config 0 descriptor?? [ 262.210571][ T8325] binder: 8324:8325 ioctl c0306201 80000700 returned -14 [ 263.108262][ T5730] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 263.129917][ T5730] usb 5-1: USB disconnect, device number 48 [ 263.897001][ T5701] usb 4-1: USB disconnect, device number 42 [ 264.225381][ T5701] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 264.383493][ T5635] usb 8-1: USB disconnect, device number 4 [ 264.415892][ T5701] usb 4-1: Using ep0 maxpacket: 16 [ 264.443907][ T5701] usb 4-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 264.474024][ T5701] usb 4-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 264.491842][ T5701] usb 4-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 264.513866][ T5701] usb 4-1: config 0 interface 0 has no altsetting 0 [ 264.531753][ T5701] usb 4-1: New USB device found, idVendor=5543, idProduct=0003, bcdDevice= 0.00 [ 264.556694][ T5701] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.589111][ T5701] usb 4-1: config 0 descriptor?? [ 264.803014][ T8371] binder: 8370:8371 ioctl c0306201 80000700 returned -14 [ 264.894366][ T8378] syzkaller0: entered promiscuous mode [ 264.900755][ T8378] syzkaller0: entered allmulticast mode [ 265.034464][ T5701] uclogic 0003:5543:0003.0003: item fetching failed at offset 3/41 [ 265.042916][ T5701] uclogic 0003:5543:0003.0003: parse failed [ 265.051133][ T5701] uclogic 0003:5543:0003.0003: probe with driver uclogic failed with error -22 [ 265.237316][ T5635] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 265.251905][ T5701] usb 4-1: USB disconnect, device number 43 [ 265.386524][ T5635] usb 8-1: device descriptor read/64, error -71 [ 265.584090][ T8384] tipc: Enabled bearer , priority 0 [ 265.591512][ T8384] syzkaller0: entered promiscuous mode [ 265.597955][ T8384] syzkaller0: entered allmulticast mode [ 265.609419][ T8384] tipc: Resetting bearer [ 265.621883][ T8383] tipc: Resetting bearer [ 265.637124][ T5635] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 265.647552][ T8383] tipc: Disabling bearer [ 265.786261][ T5635] usb 8-1: device descriptor read/64, error -71 [ 265.950540][ T5635] usb usb8-port1: attempt power cycle [ 266.075900][ T5701] usb 5-1: new low-speed USB device number 49 using dummy_hcd [ 266.249557][ T5701] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 266.270809][ T5701] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 266.287794][ T5701] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 266.305795][ T5635] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 266.311393][ T5701] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 266.338422][ T5701] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.360281][ T5635] usb 8-1: device descriptor read/8, error -71 [ 266.368161][ T8387] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 266.382314][ T5701] hub 5-1:1.0: bad descriptor, ignoring hub [ 266.395210][ T5701] hub 5-1:1.0: probe with driver hub failed with error -5 [ 266.410397][ T5701] cdc_wdm 5-1:1.0: skipping garbage [ 266.420602][ T5701] cdc_wdm 5-1:1.0: skipping garbage [ 266.432429][ T5701] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 266.440714][ T5701] cdc_wdm 5-1:1.0: Unknown control protocol [ 266.625435][ T5635] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 266.646178][ T5635] usb 8-1: device descriptor read/8, error -71 [ 266.779951][ T5635] usb usb8-port1: unable to enumerate USB device [ 267.322210][ T8413] binder: 8412:8413 ioctl c0306201 80000700 returned -14 [ 267.843252][ T8426] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 267.851954][ T8426] IPv6: NLM_F_CREATE should be set when creating new route [ 267.859213][ T8426] IPv6: NLM_F_CREATE should be set when creating new route [ 267.899482][ T8428] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 268.448345][ T8432] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 268.471165][ T8432] block device autoloading is deprecated and will be removed. [ 268.483082][ T5701] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 268.655509][ T5701] usb 7-1: Using ep0 maxpacket: 8 [ 268.672436][ T5701] usb 7-1: config 3 has an invalid interface number: 45 but max is 0 [ 268.697837][ T5701] usb 7-1: config 3 contains an unexpected descriptor of type 0x1, skipping [ 268.715413][ T5701] usb 7-1: config 3 has no interface number 0 [ 268.729601][ T5701] usb 7-1: config 3 interface 45 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 268.766589][ T5701] usb 7-1: config 3 interface 45 has no altsetting 0 [ 268.775996][ T8439] Invalid argument reading file caps for ./file0 [ 268.807643][ T5701] usb 7-1: New USB device found, idVendor=0582, idProduct=e6ca, bcdDevice=d3.0b [ 268.839751][ T5701] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.847876][ T5701] usb 7-1: Product: syz [ 268.852046][ T5701] usb 7-1: Manufacturer: syz [ 268.856825][ T5701] usb 7-1: SerialNumber: syz [ 268.896014][ T5709] usb 5-1: USB disconnect, device number 49 [ 269.036223][ T808] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 269.094816][ T5701] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 269.195414][ T808] usb 4-1: Using ep0 maxpacket: 32 [ 269.216952][ T808] usb 4-1: unable to get BOS descriptor or descriptor too short [ 269.229892][ T5701] usb 7-1: USB disconnect, device number 18 [ 269.242435][ T808] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 269.265244][ T808] usb 4-1: New USB device found, idVendor=0403, idProduct=da73, bcdDevice= 0.09 [ 269.282424][ T808] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 269.318087][ T808] usb 4-1: SerialNumber: syz [ 269.372820][ T808] ftdi_sio 4-1:6.0: FTDI USB Serial Device converter detected [ 269.398517][ T808] usb 4-1: Detected SIO [ 269.425076][ T808] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 269.531211][ T8453] binder: 8450:8453 ioctl c0306201 80000700 returned -14 [ 269.653317][ T808] usb 4-1: USB disconnect, device number 44 [ 269.704221][ T808] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 269.736250][ T808] ftdi_sio 4-1:6.0: device disconnected [ 269.874436][ T8462] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 269.959414][ T8462] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 270.054107][ T8463] netlink: 76 bytes leftover after parsing attributes in process `syz.6.813'. [ 270.409264][ T8476] netlink: 'syz.5.819': attribute type 1 has an invalid length. [ 270.417629][ T8476] netlink: 40 bytes leftover after parsing attributes in process `syz.5.819'. [ 270.427555][ T8476] netlink: 'syz.5.819': attribute type 1 has an invalid length. [ 270.440162][ T8478] batadv_slave_1: entered promiscuous mode [ 270.460592][ T8478] batadv_slave_1: left promiscuous mode [ 270.755479][ T5709] usb 8-1: new low-speed USB device number 9 using dummy_hcd [ 270.795131][ T8492] netlink: 20 bytes leftover after parsing attributes in process `syz.5.822'. [ 270.812972][ T8492] vxlan0: entered promiscuous mode [ 270.821983][ T63] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 270.838264][ T63] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 270.848604][ T63] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 270.863213][ T8493] ipip0: entered promiscuous mode [ 270.868346][ T8493] ipip0: entered allmulticast mode [ 270.875102][ T63] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 270.890592][ T8493] netlink: 40 bytes leftover after parsing attributes in process `syz.6.821'. [ 270.902932][ T8492] gretap0: entered promiscuous mode [ 270.912311][ T8492] gretap0: left promiscuous mode [ 270.922358][ T5709] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 270.932763][ T5709] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 270.954994][ T5709] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 270.966330][ T5709] usb 8-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 270.979178][ T8493] netlink: 4 bytes leftover after parsing attributes in process `syz.6.821'. [ 271.001286][ T8493] netlink: 4 bytes leftover after parsing attributes in process `syz.6.821'. [ 271.011888][ T5709] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.038295][ T8480] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 271.053636][ T5709] hub 8-1:1.0: bad descriptor, ignoring hub [ 271.065150][ T5709] hub 8-1:1.0: probe with driver hub failed with error -5 [ 271.081183][ T5709] cdc_wdm 8-1:1.0: skipping garbage [ 271.092080][ T5709] cdc_wdm 8-1:1.0: skipping garbage [ 271.110795][ T5709] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 271.123382][ T5709] cdc_wdm 8-1:1.0: Unknown control protocol [ 272.042450][ T8503] FAULT_INJECTION: forcing a failure. [ 272.042450][ T8503] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 272.056135][ T8503] CPU: 0 UID: 0 PID: 8503 Comm: syz.4.826 Tainted: G L syzkaller #0 PREEMPT(full) [ 272.056160][ T8503] Tainted: [L]=SOFTLOCKUP [ 272.056165][ T8503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 272.056174][ T8503] Call Trace: [ 272.056180][ T8503] [ 272.056186][ T8503] dump_stack_lvl+0xe8/0x150 [ 272.056207][ T8503] should_fail_ex+0x412/0x560 [ 272.056229][ T8503] _copy_from_iter+0x1d3/0x1670 [ 272.056250][ T8503] ? rcu_is_watching+0x15/0xb0 [ 272.056272][ T8503] ? __pfx__copy_from_iter+0x10/0x10 [ 272.056295][ T8503] ? netlink_sendmsg+0x650/0xb40 [ 272.056314][ T8503] ? skb_put+0x11b/0x210 [ 272.056335][ T8503] netlink_sendmsg+0x6c0/0xb40 [ 272.056360][ T8503] ? __pfx_netlink_sendmsg+0x10/0x10 [ 272.056380][ T8503] ? aa_sock_msg_perm+0xf1/0x1b0 [ 272.056400][ T8503] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 272.056422][ T8503] ____sys_sendmsg+0x972/0x9f0 [ 272.056447][ T8503] ? __pfx_____sys_sendmsg+0x10/0x10 [ 272.056469][ T8503] ? kstrtoull+0x12f/0x1d0 [ 272.056490][ T8503] ___sys_sendmsg+0x2a5/0x360 [ 272.056508][ T8503] ? __lock_acquire+0x6b5/0x2cf0 [ 272.056527][ T8503] ? __pfx____sys_sendmsg+0x10/0x10 [ 272.056547][ T8503] ? get_pid_task+0x20/0x1f0 [ 272.056565][ T8503] ? get_pid_task+0x20/0x1f0 [ 272.056580][ T8503] ? get_pid_task+0x20/0x1f0 [ 272.056615][ T8503] ? __fget_files+0x2a/0x420 [ 272.056632][ T8503] ? __fget_files+0x3a0/0x420 [ 272.056655][ T8503] __sys_sendmsg+0x183/0x260 [ 272.056675][ T8503] ? __pfx___sys_sendmsg+0x10/0x10 [ 272.056709][ T8503] __do_fast_syscall_32+0x229/0x6e0 [ 272.056732][ T8503] ? do_fast_syscall_32+0x33/0x70 [ 272.056749][ T8503] ? lockdep_hardirqs_on+0x7a/0x110 [ 272.056767][ T8503] ? asm_int80_emulation+0x1a/0x20 [ 272.056780][ T8503] ? do_int80_emulation+0x286/0x530 [ 272.056798][ T8503] ? trace_irq_disable+0x3b/0x140 [ 272.056820][ T8503] do_fast_syscall_32+0x33/0x70 [ 272.056839][ T8503] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 272.056856][ T8503] RIP: 0023:0xf700f01c [ 272.056869][ T8503] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 272.056881][ T8503] RSP: 002b:00000000f53fd50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 272.056897][ T8503] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000080 [ 272.056907][ T8503] RDX: 0000000024008004 RSI: 0000000000000000 RDI: 0000000000000000 [ 272.056915][ T8503] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 272.056923][ T8503] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 272.056932][ T8503] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 272.056954][ T8503] [ 272.422630][ T8505] veth1_macvtap: left promiscuous mode [ 272.523808][ T29] audit: type=1326 audit(1778217758.951:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8506 comm="syz.4.828" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700f01c code=0x7ffc0000 [ 272.597393][ T29] audit: type=1326 audit(1778217758.951:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8506 comm="syz.4.828" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700f01c code=0x7ffc0000 [ 272.625477][ T29] audit: type=1326 audit(1778217758.991:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8506 comm="syz.4.828" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf700f01c code=0x7ffc0000 [ 272.927172][ T29] audit: type=1326 audit(1778217759.361:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8506 comm="syz.4.828" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700f01c code=0x7ffc0000 [ 272.952939][ T29] audit: type=1326 audit(1778217759.361:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8506 comm="syz.4.828" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700f01c code=0x7ffc0000 [ 272.958895][ T8501] input: syz0 as /devices/virtual/input/input24 [ 273.117746][ T29] audit: type=1326 audit(1778217759.551:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8506 comm="syz.4.828" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf700f01c code=0x7ffc0000 [ 273.151905][ T29] audit: type=1326 audit(1778217759.581:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8506 comm="syz.4.828" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700f01c code=0x7ffc0000 [ 273.177744][ T29] audit: type=1326 audit(1778217759.581:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8506 comm="syz.4.828" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700f01c code=0x7ffc0000 [ 273.244226][ T29] audit: type=1326 audit(1778217759.581:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8506 comm="syz.4.828" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=362 compat=1 ip=0xf700f01c code=0x7ffc0000 [ 273.344746][ T29] audit: type=1326 audit(1778217759.581:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8506 comm="syz.4.828" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700f01c code=0x7ffc0000 [ 273.545656][ T5635] usb 8-1: USB disconnect, device number 9 [ 273.725420][ T8521] capability: warning: `syz.7.831' uses deprecated v2 capabilities in a way that may be insecure [ 273.920765][ T8527] netlink: 4 bytes leftover after parsing attributes in process `syz.6.833'. [ 273.992476][ T8532] netlink: 8 bytes leftover after parsing attributes in process `syz.6.833'. [ 274.028701][ T8527] syzkaller0: entered promiscuous mode [ 274.053156][ T8527] syzkaller0: entered allmulticast mode [ 274.225547][ T5701] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 274.405377][ T5701] usb 8-1: Using ep0 maxpacket: 16 [ 274.412977][ T5701] usb 8-1: unable to get BOS descriptor or descriptor too short [ 274.421727][ T5701] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 274.433744][ T5701] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 274.444692][ T5701] usb 8-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 274.453879][ T5701] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.462209][ T5701] usb 8-1: Product: 檼䭽嶄 [ 274.469025][ T5701] usb 8-1: Manufacturer: Н [ 274.473625][ T5701] usb 8-1: SerialNumber: 䧛蝬뽌捡뚋鑷痡繌ꖚㅁ塂瑩꜔䊱栌痟ɒ㥍䧨츉囻摒➷ꭈ敳蹉㰚䜣莝⁐퓁띪כֿひ呭収읞ఋ罵갴뫒㧛㥀궭⡝⼗咭땱麶䱣焸詷쫇ꚡ剉렉菲⾟໤Ⴌ欕䉾瘧┑臘갇娪뮎⍅㧅૪ⵉ᠃ἁ薯ꙫ㋂ [ 274.595443][ T5635] usb 7-1: new low-speed USB device number 19 using dummy_hcd [ 274.655613][ T5709] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 274.747463][ T5635] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 274.756071][ T5635] usb 7-1: config 0 has no interface number 0 [ 274.762199][ T5635] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 274.774243][ T5635] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 274.788226][ T5635] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 274.799799][ T5635] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.813568][ T5635] usb 7-1: config 0 descriptor?? [ 274.821318][ T8537] raw-gadget.3 gadget.6: fail, usb_ep_enable returned -22 [ 274.823831][ T5709] usb 5-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 274.840774][ T5635] iowarrior 7-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 274.840890][ T5709] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.859489][ T5709] usb 5-1: Product: syz [ 274.863673][ T5709] usb 5-1: Manufacturer: syz [ 274.868521][ T5709] usb 5-1: SerialNumber: syz [ 274.875206][ T5709] usb 5-1: config 0 descriptor?? [ 275.122917][ T5702] usb 7-1: USB disconnect, device number 19 [ 275.945442][ T5635] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 276.105433][ T5635] usb 7-1: Using ep0 maxpacket: 16 [ 276.119900][ T5635] usb 7-1: config 252 has an invalid interface number: 15 but max is 0 [ 276.128754][ T5635] usb 7-1: config 252 has no interface number 0 [ 276.137826][ T5635] usb 7-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=2b.29 [ 276.149322][ T5635] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.157969][ T5635] usb 7-1: Product: syz [ 276.162173][ T5635] usb 7-1: Manufacturer: syz [ 276.172440][ T5709] usb 5-1: f81604_read: reg: 100e failed: -EPROTO [ 276.176619][ T5635] usb 7-1: SerialNumber: syz [ 276.201369][ T5635] usb 7-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 276.204758][ T5709] usb 5-1: f81604_read: reg: 200f failed: -EPROTO [ 276.227271][ T5709] usb 5-1: USB disconnect, device number 50 [ 276.234832][ T5709] usb 5-1: f81604_read: reg: 100f failed: -ENODEV [ 276.284035][ T5709] usb 5-1: f81604_read: reg: 200f failed: -ENODEV [ 276.408148][ T8543] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 276.417198][ T8543] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 276.427492][ T8543] veth1: entered allmulticast mode [ 276.480585][ T2923] usb 7-1: Failed to submit usb control message: -71 [ 276.481034][ T5730] usb 7-1: USB disconnect, device number 20 [ 276.488002][ T2923] usb 7-1: unable to send the bmi data to the device: -71 [ 276.507499][ T2923] usb 7-1: unable to get target info from device [ 276.515218][ T2923] usb 7-1: could not get target info (-71) [ 276.521713][ T2923] usb 7-1: could not probe fw (-71) [ 277.012386][ T5701] usb 8-1: unit 14 not found! [ 277.095443][ T5709] usb 5-1: new low-speed USB device number 51 using dummy_hcd [ 277.128580][ T5701] usb 8-1: USB disconnect, device number 10 [ 277.200205][ T8553] netlink: 4 bytes leftover after parsing attributes in process `syz.6.842'. [ 277.278924][ T5709] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 277.301327][ T5709] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 277.319777][ T5709] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 277.340081][ T5709] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 277.349946][ T5709] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.382363][ T8549] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 277.401661][ T8565] netlink: 4 bytes leftover after parsing attributes in process `syz.6.845'. [ 277.401815][ T5709] hub 5-1:1.0: bad descriptor, ignoring hub [ 277.427532][ T5709] hub 5-1:1.0: probe with driver hub failed with error -5 [ 277.444574][ T5709] cdc_wdm 5-1:1.0: skipping garbage [ 277.450023][ T5709] cdc_wdm 5-1:1.0: skipping garbage [ 277.460110][ T5709] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 277.467253][ T5709] cdc_wdm 5-1:1.0: Unknown control protocol [ 277.485526][ T5686] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 277.635396][ T5686] usb 6-1: Using ep0 maxpacket: 32 [ 277.645811][ T5686] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 277.665049][ T5686] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.685986][ T5686] usb 6-1: config 0 descriptor?? [ 277.807025][ T5709] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 277.899734][ T5686] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 277.916238][ T5686] usb 6-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 277.925588][ T5686] usb 6-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 277.966745][ T5709] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 277.977854][ T5709] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 277.987794][ T5709] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 278.000671][ T5709] usb 8-1: New USB device found, idVendor=046d, idProduct=c22e, bcdDevice= 0.00 [ 278.012840][ T5709] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.031279][ T5709] usb 8-1: config 0 descriptor?? [ 278.453700][ T5709] lg-g15 0003:046D:C22E.0004: unknown main item tag 0x0 [ 278.470933][ T5709] lg-g15 0003:046D:C22E.0004: unknown main item tag 0x0 [ 278.485420][ T5709] lg-g15 0003:046D:C22E.0004: unknown main item tag 0x0 [ 278.505090][ T5709] lg-g15 0003:046D:C22E.0004: unknown main item tag 0x0 [ 278.515932][ T5709] lg-g15 0003:046D:C22E.0004: unknown main item tag 0x0 [ 278.535420][ T5709] lg-g15 0003:046D:C22E.0004: unknown main item tag 0x0 [ 278.551020][ T5709] lg-g15 0003:046D:C22E.0004: unknown main item tag 0x0 [ 278.558209][ T5709] lg-g15 0003:046D:C22E.0004: unknown main item tag 0x0 [ 278.565196][ T5709] lg-g15 0003:046D:C22E.0004: unknown main item tag 0x0 [ 278.572831][ T5709] lg-g15 0003:046D:C22E.0004: unknown main item tag 0x0 [ 278.581514][ T5709] lg-g15 0003:046D:C22E.0004: item fetching failed at offset 129/235 [ 278.591909][ T5709] lg-g15 0003:046D:C22E.0004: probe with driver lg-g15 failed with error -22 [ 278.646970][ T5635] usb 8-1: USB disconnect, device number 11 [ 278.845428][ T5701] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 278.997772][ T5701] usb 7-1: config 251 has an invalid interface number: 154 but max is 0 [ 279.006350][ T5701] usb 7-1: config 251 has no interface number 0 [ 279.012698][ T5701] usb 7-1: config 251 interface 154 has no altsetting 0 [ 279.021908][ T5701] usb 7-1: New USB device found, idVendor=041e, idProduct=4051, bcdDevice=6a.3e [ 279.032138][ T5701] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.042298][ T5701] usb 7-1: Product: syz [ 279.046602][ T5701] usb 7-1: Manufacturer: syz [ 279.051202][ T5701] usb 7-1: SerialNumber: syz [ 279.212052][ T8582] netlink: 288 bytes leftover after parsing attributes in process `syz.7.851'. [ 279.794458][ T5701] gspca_main: gspca_zc3xx-2.14.0 probing 041e:4051 [ 279.803163][ T5701] gspca_zc3xx: reg_w_i err -71 [ 279.810079][ T5701] gspca_zc3xx 7-1:251.154: probe with driver gspca_zc3xx failed with error -71 [ 279.823632][ T5701] usb 7-1: USB disconnect, device number 21 [ 279.946756][ T5635] usb 5-1: USB disconnect, device number 51 [ 280.185445][ T5701] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 280.347131][ T5701] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 280.362962][ T5701] usb 7-1: config 0 has no interface number 0 [ 280.374710][ T5701] usb 7-1: config 0 interface 1 has no altsetting 0 [ 280.382292][ T5701] usb 7-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 280.394054][ T5701] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.406401][ T5701] usb 7-1: config 0 descriptor?? [ 280.416398][ T5701] usb 7-1: selecting invalid altsetting 1 [ 280.422600][ T5701] dvb_ttusb_budget: ttusb_init_controller: error [ 280.430301][ T5701] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 280.492506][ T5701] DVB: Unable to find symbol cx22700_attach() [ 280.543352][ T5701] DVB: Unable to find symbol tda10046_attach() [ 280.550915][ T5701] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 280.555406][ T42] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 280.621117][ T8587] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 280.631806][ T8587] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 280.643321][ T5701] usb 7-1: USB disconnect, device number 22 [ 280.715390][ T42] usb 8-1: Using ep0 maxpacket: 32 [ 280.722024][ T42] usb 8-1: config index 0 descriptor too short (expected 29220, got 36) [ 280.731135][ T42] usb 8-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 280.740667][ T42] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 280.749780][ T42] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 280.759694][ T42] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 280.769392][ T42] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 280.783515][ T42] usb 8-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 280.792645][ T42] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.804498][ T42] usb 8-1: config 0 descriptor?? [ 281.019246][ T42] usblp 8-1:0.0: usblp0: USB Bidirectional printer dev 12 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 281.033169][ T42] usb 8-1: USB disconnect, device number 12 [ 281.042294][ T42] usblp0: removed [ 281.867723][ T8612] netlink: 44 bytes leftover after parsing attributes in process `syz.5.862'. [ 282.025486][ T808] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 282.195376][ T808] usb 7-1: Using ep0 maxpacket: 32 [ 282.201887][ T808] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 132, changing to 7 [ 282.215876][ T808] usb 7-1: New USB device found, idVendor=09e8, idProduct=0021, bcdDevice= 0.40 [ 282.225014][ T808] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.234183][ T808] usb 7-1: Product: syz [ 282.238400][ T808] usb 7-1: Manufacturer: syz [ 282.242985][ T808] usb 7-1: SerialNumber: syz [ 282.460850][ T808] usb 7-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 282.468738][ T808] usb 7-1: MIDIStreaming interface descriptor not found [ 282.542211][ T808] usb 7-1: USB disconnect, device number 23 [ 282.946972][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 282.946983][ T29] audit: type=1326 audit(1778217769.381:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8621 comm="syz.4.865" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700f01c code=0x7ffc0000 [ 283.002943][ T29] audit: type=1326 audit(1778217769.381:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8621 comm="syz.4.865" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700f01c code=0x7ffc0000 [ 283.025899][ T808] usb 8-1: new low-speed USB device number 13 using dummy_hcd [ 283.055917][ T29] audit: type=1326 audit(1778217769.421:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8621 comm="syz.4.865" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf700f01c code=0x7ffc0000 [ 283.103395][ T8624] kAFS: unable to lookup cell '' [ 283.167545][ T29] audit: type=1326 audit(1778217769.601:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8621 comm="syz.4.865" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700f01c code=0x7ffc0000 [ 283.213782][ T808] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 283.214774][ T29] audit: type=1326 audit(1778217769.601:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8621 comm="syz.4.865" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700f01c code=0x7ffc0000 [ 283.275754][ T808] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 283.295947][ T808] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 283.313861][ T29] audit: type=1326 audit(1778217769.741:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8621 comm="syz.4.865" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf700f01c code=0x7ffc0000 [ 283.314625][ T808] usb 8-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 283.350079][ T808] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.364696][ T8620] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 283.365228][ T29] audit: type=1326 audit(1778217769.741:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8621 comm="syz.4.865" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700f01c code=0x7ffc0000 [ 283.401367][ T29] audit: type=1326 audit(1778217769.741:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8621 comm="syz.4.865" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700f01c code=0x7ffc0000 [ 283.434483][ T29] audit: type=1326 audit(1778217769.791:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8621 comm="syz.4.865" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=362 compat=1 ip=0xf700f01c code=0x7ffc0000 [ 283.441111][ T808] hub 8-1:1.0: bad descriptor, ignoring hub [ 283.465273][ T29] audit: type=1326 audit(1778217769.791:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8621 comm="syz.4.865" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700f01c code=0x7ffc0000 [ 283.513115][ T808] hub 8-1:1.0: probe with driver hub failed with error -5 [ 283.527945][ T808] cdc_wdm 8-1:1.0: skipping garbage [ 283.537073][ T808] cdc_wdm 8-1:1.0: skipping garbage [ 283.549389][ T808] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 283.556283][ T808] cdc_wdm 8-1:1.0: Unknown control protocol [ 283.675439][ T5709] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 283.835400][ T5709] usb 7-1: Using ep0 maxpacket: 32 [ 283.850794][ T5709] usb 7-1: config 0 has an invalid interface number: 184 but max is 0 [ 283.859108][ T5709] usb 7-1: config 0 has no interface number 0 [ 283.871634][ T5709] usb 7-1: config 0 interface 184 has no altsetting 0 [ 283.892641][ T5709] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 283.902042][ T5709] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.919815][ T5709] usb 7-1: Product: syz [ 283.930487][ T5709] usb 7-1: Manufacturer: syz [ 283.943795][ T5709] usb 7-1: SerialNumber: syz [ 283.963443][ T5709] usb 7-1: config 0 descriptor?? [ 284.184291][ T8629] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 284.193560][ T8629] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 284.610477][ T5709] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 284.621902][ T5709] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 285.016486][ T8647] program syz.5.872 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 285.234787][ T5709] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -61 [ 285.246716][ T5709] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -61 [ 285.265730][ T5709] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 285.303148][ T5709] smsc75xx 7-1:0.184: probe with driver smsc75xx failed with error -61 [ 285.414201][ T4944] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 285.427185][ T4944] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 285.440669][ T4944] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 285.449693][ T4944] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 285.459255][ T4944] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 285.517386][ T8652] syzkaller0: entered promiscuous mode [ 285.522891][ T8652] syzkaller0: entered allmulticast mode [ 285.828253][ T8657] loop8: detected capacity change from 0 to 7 [ 285.842198][ T8657] Dev loop8: unable to read RDB block 7 [ 285.854384][ T8657] loop8: unable to read partition table [ 285.860793][ T8657] loop8: partition table beyond EOD, truncated [ 285.869414][ T5709] usb 8-1: USB disconnect, device number 13 [ 285.886066][ T8657] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 286.495178][ T5635] usb 7-1: USB disconnect, device number 24 [ 286.936495][ T5635] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 287.098285][ T5635] usb 7-1: Using ep0 maxpacket: 16 [ 287.120792][ T5635] usb 7-1: config 0 has no interfaces? [ 287.150694][ T5635] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 287.173307][ T5635] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.183763][ T5635] usb 7-1: Product: syz [ 287.188334][ T5635] usb 7-1: Manufacturer: syz [ 287.192964][ T5635] usb 7-1: SerialNumber: syz [ 287.209883][ T5635] usb 7-1: config 0 descriptor?? [ 287.539460][ T5625] Bluetooth: hci8: command tx timeout [ 288.279412][ T8681] gretap0: entered promiscuous mode [ 288.292720][ T8681] gretap0: left promiscuous mode [ 288.325642][ T808] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 288.476334][ T808] usb 8-1: Using ep0 maxpacket: 16 [ 288.483732][ T808] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 288.500619][ T808] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 288.505032][ T8654] bridge0: port 1(bridge_slave_0) entered blocking state [ 288.519060][ T8654] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.519223][ T808] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 288.526674][ T8654] bridge_slave_0: entered allmulticast mode [ 288.544079][ T8654] bridge_slave_0: entered promiscuous mode [ 288.548538][ T808] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 288.555074][ T8654] bridge0: port 2(bridge_slave_1) entered blocking state [ 288.569053][ T8654] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.573943][ T808] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 288.576947][ T8654] bridge_slave_1: entered allmulticast mode [ 288.597724][ T8654] bridge_slave_1: entered promiscuous mode [ 288.606015][ T808] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 288.615217][ T808] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 288.625421][ T808] usb 8-1: Manufacturer: syz [ 288.638595][ T808] usb 8-1: config 0 descriptor?? [ 288.638597][ T8654] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 288.641832][ T8654] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 288.698191][ T8654] team0: Port device team_slave_0 added [ 288.707544][ T8654] team0: Port device team_slave_1 added [ 288.741366][ T8654] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 288.748854][ T8654] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 288.778937][ T8654] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 288.792743][ T8654] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 288.800561][ T8654] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 288.828265][ T8654] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 288.868926][ T8674] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 288.898693][ T8674] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 288.938179][ T8654] hsr_slave_0: entered promiscuous mode [ 288.957187][ T8654] hsr_slave_1: entered promiscuous mode [ 288.972250][ T8654] debugfs: 'hsr0' already exists in 'hsr' [ 288.978526][ T8654] Cannot create hsr debugfs directory [ 289.006606][ T808] rc_core: IR keymap rc-hauppauge not found [ 289.014602][ T808] Registered IR keymap rc-empty [ 289.019899][ T808] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 289.045505][ T808] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 289.066527][ T808] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0 [ 289.086404][ T808] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0/input25 [ 289.103180][ T808] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 289.125745][ T808] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 289.155633][ T808] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 289.175907][ T808] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 289.195702][ T808] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 289.215985][ T808] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 289.235477][ T808] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 289.238828][ T8654] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 289.256703][ T8654] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 289.264687][ T8654] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 289.266490][ T808] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 289.283293][ T8654] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 289.291907][ T8654] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 289.297565][ T808] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 289.325537][ T808] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 289.326144][ T8654] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 289.366791][ T808] mceusb 8-1:0.0: Registered with mce emulator interface version 1 [ 289.367216][ T8654] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 289.404197][ T808] mceusb 8-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 289.426132][ T808] usb 8-1: USB disconnect, device number 14 [ 289.432621][ T8654] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 289.446873][ T8695] batman_adv: batadv0: Adding interface: vlan2 [ 289.454094][ T8695] batman_adv: batadv0: The MTU of interface vlan2 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 289.486288][ T8695] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active [ 289.614690][ T5635] usb 7-1: USB disconnect, device number 25 [ 289.627655][ T5625] Bluetooth: hci8: command tx timeout [ 289.705100][ T8654] 8021q: adding VLAN 0 to HW filter on device bond0 [ 289.760988][ T8654] 8021q: adding VLAN 0 to HW filter on device team0 [ 289.772180][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.779323][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 289.808469][ T2923] bridge0: port 2(bridge_slave_1) entered blocking state [ 289.815709][ T2923] bridge0: port 2(bridge_slave_1) entered forwarding state [ 290.013934][ T8654] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 290.050489][ T8654] veth0_vlan: entered promiscuous mode [ 290.063018][ T8654] veth1_vlan: entered promiscuous mode [ 290.092579][ T8654] veth0_macvtap: entered promiscuous mode [ 290.104168][ T8654] veth1_macvtap: entered promiscuous mode [ 290.120960][ T8654] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 290.134383][ T8654] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 290.149697][ T47] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.159330][ T47] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.171287][ T47] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.183528][ T47] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.206347][ T5709] usb 7-1: new low-speed USB device number 26 using dummy_hcd [ 290.225427][ T42] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 290.331699][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 290.347985][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 290.382485][ T2923] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 290.390825][ T2923] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 290.395487][ T42] usb 5-1: Using ep0 maxpacket: 16 [ 290.409252][ T5709] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 290.422733][ T42] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 290.424025][ T5709] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 290.448071][ T42] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 290.457248][ T5709] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 290.457294][ T5709] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 290.472614][ T42] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.494132][ T5709] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.520489][ T8711] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 290.526347][ T42] usb 5-1: Product: syz [ 290.540743][ T42] usb 5-1: Manufacturer: syz [ 290.552921][ T42] usb 5-1: SerialNumber: syz [ 290.570526][ T5709] hub 7-1:1.0: bad descriptor, ignoring hub [ 290.571022][ T42] usb 5-1: config 0 descriptor?? [ 290.590077][ T5709] hub 7-1:1.0: probe with driver hub failed with error -5 [ 290.616412][ T5709] cdc_wdm 7-1:1.0: skipping garbage [ 290.621762][ T5709] cdc_wdm 7-1:1.0: skipping garbage [ 290.643031][ T5709] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 290.655841][ T5709] cdc_wdm 7-1:1.0: Unknown control protocol [ 290.875575][ T42] usb 9-1: new full-speed USB device number 2 using dummy_hcd [ 291.049338][ T42] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 291.061420][ T42] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 291.076783][ T42] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 291.086566][ T42] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.312395][ T42] usb 9-1: usb_control_msg returned -32 [ 291.336587][ T42] usbtmc 9-1:16.0: can't read capabilities [ 291.509153][ T8724] syzkaller0: entered promiscuous mode [ 291.514732][ T8724] syzkaller0: entered allmulticast mode [ 291.671895][ T8727] netlink: 52 bytes leftover after parsing attributes in process `syz.8.874'. [ 291.681908][ T8727] program syz.8.874 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 291.706811][ T5625] Bluetooth: hci8: command tx timeout [ 292.480063][ T8729] FAULT_INJECTION: forcing a failure. [ 292.480063][ T8729] name failslab, interval 1, probability 0, space 0, times 0 [ 292.494592][ T8729] CPU: 1 UID: 0 PID: 8729 Comm: syz.7.890 Tainted: G L syzkaller #0 PREEMPT(full) [ 292.494610][ T8729] Tainted: [L]=SOFTLOCKUP [ 292.494615][ T8729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 292.494620][ T8729] Call Trace: [ 292.494625][ T8729] [ 292.494630][ T8729] dump_stack_lvl+0xe8/0x150 [ 292.494647][ T8729] should_fail_ex+0x412/0x560 [ 292.494664][ T8729] should_failslab+0xa8/0x100 [ 292.494681][ T8729] __kmalloc_cache_noprof+0x88/0x660 [ 292.494694][ T8729] ? __sctp_v6_cmp_addr+0x1e6/0x510 [ 292.494709][ T8729] ? sctp_add_bind_addr+0x8c/0x370 [ 292.494726][ T8729] sctp_add_bind_addr+0x8c/0x370 [ 292.494741][ T8729] sctp_copy_local_addr_list+0x314/0x4f0 [ 292.494757][ T8729] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 292.494770][ T8729] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 292.494784][ T8729] ? sctp_v6_is_any+0x64/0x80 [ 292.494798][ T8729] ? sctp_copy_one_addr+0x93/0x360 [ 292.494812][ T8729] sctp_bind_addr_copy+0xb3/0x3c0 [ 292.494825][ T8729] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 292.494839][ T8729] sctp_connect_new_asoc+0x2ff/0x6b0 [ 292.494851][ T8729] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 292.494863][ T8729] ? sctp_get_af_specific+0x29/0x80 [ 292.494875][ T8729] ? sctp_inet6_send_verify+0x80/0x300 [ 292.494887][ T8729] ? sctp_endpoint_lookup_assoc+0xd1/0x260 [ 292.494898][ T8729] __sctp_connect+0x5cb/0xdc0 [ 292.494914][ T8729] ? __pfx___sctp_connect+0x10/0x10 [ 292.494923][ T8729] ? sctp_setsockopt+0x21c/0x12c0 [ 292.494937][ T8729] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 292.494951][ T8729] ? security_sctp_bind_connect+0x7e/0x2c0 [ 292.494969][ T8729] ? __sctp_setsockopt_connectx+0xc7/0x190 [ 292.494983][ T8729] sctp_setsockopt+0x708/0x12c0 [ 292.494997][ T8729] ? sock_common_setsockopt+0x36/0xc0 [ 292.495008][ T8729] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 292.495020][ T8729] do_sock_setsockopt+0x17c/0x1b0 [ 292.495039][ T8729] __ia32_sys_setsockopt+0x13d/0x1b0 [ 292.495055][ T8729] __do_fast_syscall_32+0x229/0x6e0 [ 292.495069][ T8729] ? do_fast_syscall_32+0x33/0x70 [ 292.495081][ T8729] ? lockdep_hardirqs_on+0x7a/0x110 [ 292.495093][ T8729] ? asm_int80_emulation+0x1a/0x20 [ 292.495102][ T8729] ? do_int80_emulation+0x286/0x530 [ 292.495115][ T8729] ? trace_irq_disable+0x3b/0x140 [ 292.495130][ T8729] do_fast_syscall_32+0x33/0x70 [ 292.495143][ T8729] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 292.495156][ T8729] RIP: 0023:0xf703f01c [ 292.495165][ T8729] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 292.495173][ T8729] RSP: 002b:00000000f542d50c EFLAGS: 00000206 ORIG_RAX: 000000000000016e [ 292.495185][ T8729] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000000000084 [ 292.495192][ T8729] RDX: 000000000000006e RSI: 00000000800005c0 RDI: 000000000000001c [ 292.495198][ T8729] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 292.495203][ T8729] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 292.495209][ T8729] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 292.495224][ T8729] [ 293.041109][ T808] usb 7-1: USB disconnect, device number 26 [ 293.109083][ T808] usb 5-1: USB disconnect, device number 52 [ 293.280661][ T8739] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 293.316247][ T8747] netlink: 8 bytes leftover after parsing attributes in process `syz.7.893'. [ 293.345497][ T8739] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 293.485399][ T808] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 293.534915][ T8749] bridge1: entered promiscuous mode [ 293.655417][ T808] usb 5-1: Using ep0 maxpacket: 16 [ 293.670605][ T42] usb 9-1: USB disconnect, device number 2 [ 293.687142][ T808] usb 5-1: config 0 has no interfaces? [ 293.699633][ T808] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 293.719813][ T808] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.740557][ T808] usb 5-1: Product: syz [ 293.750300][ T808] usb 5-1: Manufacturer: syz [ 293.755213][ T808] usb 5-1: SerialNumber: syz [ 293.765030][ T808] usb 5-1: config 0 descriptor?? [ 293.775826][ T5625] Bluetooth: hci8: command tx timeout [ 293.887006][ T9] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 294.056352][ T9] usb 8-1: Using ep0 maxpacket: 8 [ 294.089710][ T9] usb 8-1: New USB device found, idVendor=0403, idProduct=fa78, bcdDevice= 0.04 [ 294.105578][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.128480][ T9] usb 8-1: config 0 descriptor?? [ 294.149729][ T9] ftdi_sio 8-1:0.0: FTDI USB Serial Device converter detected [ 294.166738][ T9] usb 8-1: Detected SIO [ 294.180777][ T9] usb 8-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 294.268566][ T8765] netlink: 24 bytes leftover after parsing attributes in process `syz.6.900'. [ 294.320289][ T8765] gretap0: entered promiscuous mode [ 294.349810][ T8765] gretap0: left promiscuous mode [ 294.359209][ T8754] netlink: 4 bytes leftover after parsing attributes in process `syz.7.897'. [ 294.531412][ T8757] binder: 8755:8757 ioctl c0306201 80000700 returned -14 [ 294.605570][ T9] usb 8-1: USB disconnect, device number 15 [ 294.630712][ T9] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 294.647560][ T9] ftdi_sio 8-1:0.0: device disconnected [ 295.349624][ T8779] netlink: 24 bytes leftover after parsing attributes in process `syz.7.903'. [ 295.380388][ T8779] gretap0: entered promiscuous mode [ 295.390995][ T8779] gretap0: left promiscuous mode [ 295.426356][ T808] usb 7-1: new low-speed USB device number 27 using dummy_hcd [ 295.592072][ T808] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 295.603930][ T808] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 295.613251][ T808] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 295.627910][ T808] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 295.637271][ T808] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.698409][ T8776] raw-gadget.3 gadget.6: fail, usb_ep_enable returned -22 [ 295.737166][ T808] hub 7-1:1.0: bad descriptor, ignoring hub [ 295.751070][ T808] hub 7-1:1.0: probe with driver hub failed with error -5 [ 295.763681][ T808] cdc_wdm 7-1:1.0: skipping garbage [ 295.778919][ T808] cdc_wdm 7-1:1.0: skipping garbage [ 295.791374][ T808] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 295.798713][ T808] cdc_wdm 7-1:1.0: Unknown control protocol [ 295.900388][ T8781] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 295.909679][ T8781] batadv_slave_1: entered promiscuous mode [ 296.064660][ T8783] loop2: detected capacity change from 0 to 7 [ 296.079775][ T8783] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 296.096188][ T8783] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 296.119541][ T8783] Dev loop2: unable to read RDB block 7 [ 296.140902][ T8783] loop2: unable to read partition table [ 296.156357][ T8783] loop2: partition table beyond EOD, truncated [ 296.175894][ T8783] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 296.231094][ T5701] usb 5-1: USB disconnect, device number 53 [ 296.681077][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 296.681107][ T29] audit: type=1326 audit(1778217783.111:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8802 comm="syz.5.909" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709f01c code=0x7ffc0000 [ 296.758606][ T808] usb 5-1: new full-speed USB device number 54 using dummy_hcd [ 296.774367][ T29] audit: type=1326 audit(1778217783.141:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8802 comm="syz.5.909" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709f01c code=0x7ffc0000 [ 296.873590][ T29] audit: type=1326 audit(1778217783.231:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8802 comm="syz.5.909" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf709f01c code=0x7ffc0000 [ 296.994949][ T808] usb 5-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 297.013512][ T808] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 297.032473][ T808] usb 5-1: Product: syz [ 297.041254][ T808] usb 5-1: SerialNumber: syz [ 297.060789][ T808] usb 5-1: config 0 descriptor?? [ 297.080521][ T808] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 297.119435][ T808] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 297.172951][ T808] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) error while loading driver (-19) [ 297.431563][ T29] audit: type=1326 audit(1778217783.861:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8802 comm="syz.5.909" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709f01c code=0x7ffc0000 [ 297.482431][ T29] audit: type=1326 audit(1778217783.861:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8802 comm="syz.5.909" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709f01c code=0x7ffc0000 [ 297.523008][ T29] audit: type=1326 audit(1778217783.951:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8802 comm="syz.5.909" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf709f01c code=0x7ffc0000 [ 297.554929][ T29] audit: type=1326 audit(1778217783.951:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8802 comm="syz.5.909" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709f01c code=0x7ffc0000 [ 297.585719][ T29] audit: type=1326 audit(1778217783.951:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8802 comm="syz.5.909" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709f01c code=0x7ffc0000 [ 297.629328][ T29] audit: type=1326 audit(1778217783.951:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8802 comm="syz.5.909" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=362 compat=1 ip=0xf709f01c code=0x7ffc0000 [ 297.654207][ T29] audit: type=1326 audit(1778217783.951:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8802 comm="syz.5.909" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709f01c code=0x7ffc0000 [ 298.195651][ T5679] usb 7-1: USB disconnect, device number 27 [ 298.386800][ T8837] 8021q: adding VLAN 0 to HW filter on device bond3 [ 298.626759][ T9] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 298.802849][ T9] usb 7-1: config 0 has an invalid interface number: 74 but max is 1 [ 298.837751][ T9] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 298.879868][ T9] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 298.890183][ T9] usb 7-1: config 0 has no interface number 0 [ 298.901865][ T9] usb 7-1: config 0 interface 74 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 298.913917][ T9] usb 7-1: config 0 interface 74 altsetting 0 has an endpoint descriptor with address 0xFE, changing to 0x8E [ 298.926076][ T9] usb 7-1: config 0 interface 74 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 298.937515][ T9] usb 7-1: config 0 interface 74 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 298.952845][ T9] usb 7-1: New USB device found, idVendor=6737, idProduct=0001, bcdDevice=de.66 [ 298.962668][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.972010][ T9] usb 7-1: Product: syz [ 298.976748][ T9] usb 7-1: Manufacturer: syz [ 298.981465][ T9] usb 7-1: SerialNumber: syz [ 299.021649][ T9] usb 7-1: config 0 descriptor?? [ 299.322471][ T8854] : entered promiscuous mode [ 299.423489][ T8837] netlink: 24 bytes leftover after parsing attributes in process `syz.6.912'. [ 299.452138][ T5679] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 299.497128][ T8837] netlink: 32 bytes leftover after parsing attributes in process `syz.6.912'. [ 299.584564][ T8837] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 299.630476][ T5701] usb 5-1: USB disconnect, device number 54 [ 299.639369][ T5679] usb 9-1: Using ep0 maxpacket: 32 [ 299.651213][ T9] cypress_m8 7-1:0.74: HID->COM RS232 Adapter converter detected [ 299.658264][ T5679] usb 9-1: config 4 has an invalid interface number: 77 but max is 2 [ 299.679191][ T5679] usb 9-1: config 4 contains an unexpected descriptor of type 0x1, skipping [ 299.713640][ T5679] usb 9-1: config 4 has an invalid interface number: 6 but max is 2 [ 299.723754][ T9] usb 7-1: HID->COM RS232 Adapter converter now attached to ttyUSB0 [ 299.749978][ T5679] usb 9-1: config 4 contains an unexpected descriptor of type 0x2, skipping [ 299.757124][ T9] usb 7-1: USB disconnect, device number 28 [ 299.783365][ T5679] usb 9-1: config 4 has an invalid interface number: 3 but max is 2 [ 299.786235][ T9] cyphidcom ttyUSB0: HID->COM RS232 Adapter converter now disconnected from ttyUSB0 [ 299.812367][ T9] cypress_m8 7-1:0.74: device disconnected [ 299.813421][ T5679] usb 9-1: config 4 has no interface number 0 [ 299.820803][ T8873] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 299.835378][ T5679] usb 9-1: config 4 has no interface number 1 [ 299.835401][ T5679] usb 9-1: config 4 has no interface number 2 [ 299.835465][ T5679] usb 9-1: config 4 interface 77 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 299.835487][ T5679] usb 9-1: config 4 interface 77 altsetting 3 has a duplicate endpoint with address 0x2, skipping [ 299.835522][ T5679] usb 9-1: config 4 interface 6 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 299.835542][ T5679] usb 9-1: config 4 interface 6 altsetting 6 has a duplicate endpoint with address 0x2, skipping [ 299.835564][ T5679] usb 9-1: config 4 interface 6 altsetting 6 has a duplicate endpoint with address 0xE, skipping [ 299.835586][ T5679] usb 9-1: config 4 interface 6 altsetting 6 has a duplicate endpoint with address 0x2, skipping [ 299.835608][ T5679] usb 9-1: config 4 interface 6 altsetting 6 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 299.835633][ T5679] usb 9-1: config 4 interface 6 altsetting 6 has a duplicate endpoint with address 0xD, skipping [ 299.835655][ T5679] usb 9-1: config 4 interface 6 altsetting 6 has a duplicate endpoint with address 0xE, skipping [ 299.835677][ T5679] usb 9-1: config 4 interface 6 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 299.835698][ T5679] usb 9-1: config 4 interface 6 altsetting 6 has a duplicate endpoint with address 0xE, skipping [ 299.835718][ T5679] usb 9-1: config 4 interface 6 altsetting 6 has a duplicate endpoint with address 0xD, skipping [ 299.835739][ T5679] usb 9-1: config 4 interface 6 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 299.835759][ T5679] usb 9-1: config 4 interface 6 altsetting 6 has a duplicate endpoint with address 0xD, skipping [ 299.835781][ T5679] usb 9-1: config 4 interface 6 altsetting 6 has a duplicate endpoint with address 0xE, skipping [ 299.835813][ T5679] usb 9-1: config 4 interface 3 altsetting 3 has a duplicate endpoint with address 0x2, skipping [ 299.835836][ T5679] usb 9-1: config 4 interface 3 altsetting 3 has a duplicate endpoint with address 0x3, skipping [ 299.835857][ T5679] usb 9-1: config 4 interface 77 has no altsetting 0 [ 299.835875][ T5679] usb 9-1: config 4 interface 6 has no altsetting 0 [ 299.835893][ T5679] usb 9-1: config 4 interface 3 has no altsetting 0 [ 299.838218][ T5679] usb 9-1: New USB device found, idVendor=2019, idProduct=ed17, bcdDevice=7f.24 [ 299.950812][ T8873] input: syz1 as /devices/virtual/input/input26 [ 300.014291][ T5679] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.123159][ T5679] usb 9-1: Product: Ԣ쟶펠ၧ哕톼趓쓩㡽소삹힊䥯ꡭ飯쨮䰣タ⽏鸣將슟菁孓㽭⠭숛驨룜콄㥫㾓瞥鰬褜ｇ꿝㝹㘴ఱ淂ᴆ载價眞혃咬쭯ꐬᄼ顓袛둻稅좘잾⽨亏掄尅靂맆㡮풆࿸䌱퓕䳾ש [ 300.152972][ T5679] usb 9-1: Manufacturer: ⒊▖ [ 300.163482][ T5679] usb 9-1: SerialNumber: Ⰱ [ 300.578534][ T8881] tipc: Failed to remove unknown binding: 66,1,1/3:3023577936/3023577938 [ 300.590098][ T8881] tipc: Failed to remove unknown binding: 66,1,1/3:3023577936/3023577938 [ 300.619044][ T5679] usb 9-1: USB disconnect, device number 3 [ 300.665664][ T9] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 300.817744][ T9] usb 7-1: Using ep0 maxpacket: 16 [ 300.835809][ T9] usb 7-1: config 0 has no interfaces? [ 300.843612][ T9] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 300.854794][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.867514][ T9] usb 7-1: Product: syz [ 300.873915][ T9] usb 7-1: Manufacturer: syz [ 300.881600][ T9] usb 7-1: SerialNumber: syz [ 300.893128][ T9] usb 7-1: config 0 descriptor?? [ 301.264322][ T9] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 301.433064][ T9] usb 8-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 301.445851][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.484429][ T9] usb 8-1: Product: syz [ 301.490593][ T9] usb 8-1: Manufacturer: syz [ 301.498557][ T9] usb 8-1: SerialNumber: syz [ 301.995563][ T9] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 302.015891][ T9] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 302.656419][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 303.171569][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 303.171586][ T29] audit: type=1326 audit(1778217789.601:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8906 comm="syz.4.924" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700f01c code=0x7ffc0000 [ 303.215314][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 303.250515][ T29] audit: type=1326 audit(1778217789.641:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8906 comm="syz.4.924" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700f01c code=0x7ffc0000 [ 303.296551][ T29] audit: type=1326 audit(1778217789.641:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8906 comm="syz.4.924" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf700f01c code=0x7ffc0000 [ 303.379953][ T8909] netlink: 24 bytes leftover after parsing attributes in process `syz.8.925'. [ 303.419530][ T8909] gretap0: entered promiscuous mode [ 303.454608][ T8909] gretap0: left promiscuous mode [ 303.570360][ T5679] usb 7-1: USB disconnect, device number 29 [ 303.643308][ T29] audit: type=1326 audit(1778217790.071:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8906 comm="syz.4.924" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700f01c code=0x7ffc0000 [ 303.693475][ T29] audit: type=1326 audit(1778217790.071:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8906 comm="syz.4.924" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700f01c code=0x7ffc0000 [ 303.719967][ T29] audit: type=1326 audit(1778217790.121:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8906 comm="syz.4.924" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf700f01c code=0x7ffc0000 [ 303.746415][ T29] audit: type=1326 audit(1778217790.121:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8906 comm="syz.4.924" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700f01c code=0x7ffc0000 [ 303.771786][ T29] audit: type=1326 audit(1778217790.121:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8906 comm="syz.4.924" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700f01c code=0x7ffc0000 [ 303.851694][ T29] audit: type=1326 audit(1778217790.121:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8906 comm="syz.4.924" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=362 compat=1 ip=0xf700f01c code=0x7ffc0000 [ 303.903979][ T29] audit: type=1326 audit(1778217790.121:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8906 comm="syz.4.924" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700f01c code=0x7ffc0000 [ 304.279513][ T8927] netlink: 4 bytes leftover after parsing attributes in process `syz.8.930'. [ 304.383388][ T8932] FAULT_INJECTION: forcing a failure. [ 304.383388][ T8932] name failslab, interval 1, probability 0, space 0, times 0 [ 304.502572][ T8932] CPU: 1 UID: 0 PID: 8932 Comm: syz.6.931 Tainted: G L syzkaller #0 PREEMPT(full) [ 304.502601][ T8932] Tainted: [L]=SOFTLOCKUP [ 304.502608][ T8932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 304.502626][ T8932] Call Trace: [ 304.502634][ T8932] [ 304.502641][ T8932] dump_stack_lvl+0xe8/0x150 [ 304.502667][ T8932] should_fail_ex+0x412/0x560 [ 304.502694][ T8932] should_failslab+0xa8/0x100 [ 304.502721][ T8932] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 304.502745][ T8932] ? __alloc_skb+0x186/0x7d0 [ 304.502765][ T8932] ? __alloc_skb+0x1d0/0x7d0 [ 304.502782][ T8932] ? __local_bh_enable_ip+0xd0/0x130 [ 304.502805][ T8932] __alloc_skb+0x1d0/0x7d0 [ 304.502825][ T8932] ? netlink_ack_tlv_len+0x6c/0x210 [ 304.502850][ T8932] netlink_ack+0x146/0xa50 [ 304.502886][ T8932] netlink_rcv_skb+0x2b6/0x4b0 [ 304.502910][ T8932] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 304.502942][ T8932] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 304.502974][ T8932] ? bpf_lsm_capable+0x9/0x20 [ 304.502992][ T8932] ? security_capable+0x7e/0x2c0 [ 304.503020][ T8932] nfnetlink_rcv+0x2c0/0x27b0 [ 304.503050][ T8932] ? __local_bh_enable_ip+0xd0/0x130 [ 304.503068][ T8932] ? lockdep_hardirqs_on+0x7a/0x110 [ 304.503090][ T8932] ? __dev_queue_xmit+0x2b6/0x3950 [ 304.503114][ T8932] ? __local_bh_enable_ip+0xd0/0x130 [ 304.503131][ T8932] ? __dev_queue_xmit+0x2b6/0x3950 [ 304.503154][ T8932] ? __dev_queue_xmit+0x1fe5/0x3950 [ 304.503177][ T8932] ? __sys_sendmsg+0x183/0x260 [ 304.503204][ T8932] ? __dev_queue_xmit+0x2b6/0x3950 [ 304.503233][ T8932] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 304.503259][ T8932] ? __pfx___dev_queue_xmit+0x10/0x10 [ 304.503290][ T8932] ? ref_tracker_free+0x693/0x840 [ 304.503315][ T8932] ? __pfx_ref_tracker_free+0x10/0x10 [ 304.503336][ T8932] ? __asan_memcpy+0x40/0x70 [ 304.503356][ T8932] ? __skb_clone+0x63/0x7a0 [ 304.503383][ T8932] ? __skb_clone+0x483/0x7a0 [ 304.503412][ T8932] ? skb_clone+0x246/0x3a0 [ 304.503438][ T8932] ? __netlink_deliver_tap+0x807/0x850 [ 304.503460][ T8932] ? netlink_deliver_tap+0x2e/0x1b0 [ 304.503488][ T8932] ? netlink_deliver_tap+0x2e/0x1b0 [ 304.503510][ T8932] ? netlink_deliver_tap+0x2e/0x1b0 [ 304.503537][ T8932] netlink_unicast+0x75c/0x8e0 [ 304.503567][ T8932] netlink_sendmsg+0x813/0xb40 [ 304.503601][ T8932] ? __pfx_netlink_sendmsg+0x10/0x10 [ 304.503627][ T8932] ? aa_sock_msg_perm+0xf1/0x1b0 [ 304.503652][ T8932] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 304.503678][ T8932] ____sys_sendmsg+0x972/0x9f0 [ 304.503710][ T8932] ? __pfx_____sys_sendmsg+0x10/0x10 [ 304.503736][ T8932] ? kstrtoull+0x12f/0x1d0 [ 304.503763][ T8932] ___sys_sendmsg+0x2a5/0x360 [ 304.503786][ T8932] ? __lock_acquire+0x6b5/0x2cf0 [ 304.503808][ T8932] ? __pfx____sys_sendmsg+0x10/0x10 [ 304.503833][ T8932] ? get_pid_task+0x20/0x1f0 [ 304.503854][ T8932] ? get_pid_task+0x20/0x1f0 [ 304.503873][ T8932] ? get_pid_task+0x20/0x1f0 [ 304.503918][ T8932] ? __fget_files+0x2a/0x420 [ 304.503945][ T8932] ? __fget_files+0x3a0/0x420 [ 304.503975][ T8932] __sys_sendmsg+0x183/0x260 [ 304.504001][ T8932] ? __pfx___sys_sendmsg+0x10/0x10 [ 304.504043][ T8932] __do_fast_syscall_32+0x229/0x6e0 [ 304.504067][ T8932] ? do_fast_syscall_32+0x33/0x70 [ 304.504089][ T8932] ? lockdep_hardirqs_on+0x7a/0x110 [ 304.504109][ T8932] ? asm_int80_emulation+0x1a/0x20 [ 304.504126][ T8932] ? do_int80_emulation+0x286/0x530 [ 304.504148][ T8932] ? trace_irq_disable+0x3b/0x140 [ 304.504174][ T8932] do_fast_syscall_32+0x33/0x70 [ 304.504197][ T8932] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 304.504219][ T8932] RIP: 0023:0xf7f9801c [ 304.504235][ T8932] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 304.504249][ T8932] RSP: 002b:00000000f545650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 304.504269][ T8932] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080001640 [ 304.504281][ T8932] RDX: 0000000000000014 RSI: 0000000000000000 RDI: 0000000000000000 [ 304.504292][ T8932] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 304.504303][ T8932] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 304.504313][ T8932] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 304.504339][ T8932] [ 305.346018][ T8942] 8021q: adding VLAN 0 to HW filter on device bond1 [ 305.564316][ T9] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x000000f0. ret = -EPROTO [ 305.583028][ T9] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to init LTM with error -EPROTO [ 305.595238][ T5701] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 305.602947][ T9] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 305.617545][ T9] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 305.627560][ T9] lan78xx 8-1:1.0: probe with driver lan78xx failed with error -71 [ 305.635730][ T5679] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 305.641906][ T9] usb 8-1: USB disconnect, device number 16 [ 305.715554][ T5702] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 305.745413][ T5701] usb 5-1: device descriptor read/64, error -71 [ 305.787323][ T5679] usb 9-1: config 0 has an invalid interface number: 74 but max is 1 [ 305.795949][ T5679] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 305.807775][ T5679] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 305.817942][ T5679] usb 9-1: config 0 has no interface number 0 [ 305.824068][ T5679] usb 9-1: config 0 interface 74 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 305.837804][ T5679] usb 9-1: config 0 interface 74 altsetting 0 has an endpoint descriptor with address 0xFE, changing to 0x8E [ 305.849433][ T5679] usb 9-1: config 0 interface 74 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 305.860748][ T5679] usb 9-1: config 0 interface 74 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 305.873329][ T5679] usb 9-1: New USB device found, idVendor=6737, idProduct=0001, bcdDevice=de.66 [ 305.875377][ T5702] usb 7-1: Using ep0 maxpacket: 8 [ 305.882878][ T5679] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.890500][ T5702] usb 7-1: unable to get BOS descriptor or descriptor too short [ 305.903534][ T5679] usb 9-1: Product: syz [ 305.905116][ T5702] usb 7-1: config 4 interface 0 has no altsetting 0 [ 305.907778][ T5679] usb 9-1: Manufacturer: syz [ 305.907796][ T5679] usb 9-1: SerialNumber: syz [ 305.919022][ T5702] usb 7-1: string descriptor 0 read error: -22 [ 305.920871][ T5702] usb 7-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 305.928477][ T5679] usb 9-1: config 0 descriptor?? [ 305.931164][ T5702] usb 7-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 305.960176][ T5702] usb 7-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 305.974108][ T5702] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 305.984894][ T5702] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 305.992268][ T5701] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 306.000212][ T5702] usb 7-1: media controller created [ 306.018004][ T5702] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 306.135454][ T5701] usb 5-1: device descriptor read/64, error -71 [ 306.173096][ T8942] netlink: 24 bytes leftover after parsing attributes in process `syz.8.934'. [ 306.185052][ T8942] netlink: 32 bytes leftover after parsing attributes in process `syz.8.934'. [ 306.216526][ T8942] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 306.231907][ T5679] cypress_m8 9-1:0.74: HID->COM RS232 Adapter converter detected [ 306.244528][ T5679] usb 9-1: HID->COM RS232 Adapter converter now attached to ttyUSB0 [ 306.256470][ T5701] usb usb5-port1: attempt power cycle [ 306.262230][ T5679] usb 9-1: USB disconnect, device number 4 [ 306.276441][ T5679] cyphidcom ttyUSB0: HID->COM RS232 Adapter converter now disconnected from ttyUSB0 [ 306.287488][ T5679] cypress_m8 9-1:0.74: device disconnected [ 306.384239][ T8953] netlink: 212408 bytes leftover after parsing attributes in process `syz.6.936'. [ 306.397265][ T8953] 8021q: VLANs not supported on ip_vti0 [ 306.435388][ T42] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 306.588538][ T42] usb 8-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 306.597715][ T42] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 306.607627][ T5701] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 306.609208][ T42] usb 8-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 306.625136][ T42] usb 8-1: config 1 has no interface number 1 [ 306.631890][ T42] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 306.647511][ T42] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 306.647697][ T5701] usb 5-1: device descriptor read/8, error -71 [ 306.657372][ T42] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.671213][ T42] usb 8-1: Product: syz [ 306.675817][ T42] usb 8-1: Manufacturer: syz [ 306.692972][ T42] usb 8-1: SerialNumber: syz [ 306.915422][ T5701] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 306.945967][ T5701] usb 5-1: device descriptor read/8, error -71 [ 306.987378][ T8964] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 307.020457][ T42] usb 8-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 307.028626][ T42] usb 8-1: MIDIStreaming interface descriptor not found [ 307.059404][ T5701] usb usb5-port1: unable to enumerate USB device [ 307.096098][ T42] usb 8-1: USB disconnect, device number 17 [ 308.513530][ T42] usb 7-1: USB disconnect, device number 30 [ 308.766693][ T5701] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 308.938742][ T5701] usb 5-1: Using ep0 maxpacket: 8 [ 308.951509][ T5701] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 308.974159][ T5701] usb 5-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 308.994954][ T5701] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.013118][ T5701] usb 5-1: Product: syz [ 309.024562][ T5701] usb 5-1: Manufacturer: syz [ 309.035386][ T808] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 309.035713][ T5701] usb 5-1: SerialNumber: syz [ 309.081608][ T5701] usb 5-1: config 0 descriptor?? [ 309.105710][ T5701] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 309.126628][ T5701] usb 5-1: selecting invalid altsetting 1 [ 309.227068][ T808] usb 7-1: config 220 has an invalid interface number: 76 but max is 2 [ 309.236137][ T808] usb 7-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 309.255194][ T808] usb 7-1: config 220 has no interface number 2 [ 309.267908][ T808] usb 7-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 309.295496][ T808] usb 7-1: config 220 interface 0 has no altsetting 0 [ 309.308283][ T5701] gspca_stk014: init reg: 0x00 [ 309.314596][ T808] usb 7-1: config 220 interface 76 has no altsetting 0 [ 309.314686][ T5701] stk014 5-1:0.0: probe with driver stk014 failed with error -5 [ 309.335977][ T808] usb 7-1: config 220 interface 1 has no altsetting 0 [ 309.361615][ T808] usb 7-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 309.383822][ T808] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.405455][ T808] usb 7-1: Product: syz [ 309.409651][ T808] usb 7-1: Manufacturer: syz [ 309.414241][ T808] usb 7-1: SerialNumber: syz [ 309.533014][ T5709] usb 5-1: USB disconnect, device number 59 [ 309.646660][ T9006] program syz.6.953 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 309.689072][ T808] usb 7-1: selecting invalid altsetting 0 [ 309.714114][ T808] uvcvideo 7-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 309.730064][ T808] uvcvideo 7-1:220.0: No valid video chain found. [ 309.750117][ T808] usb 7-1: selecting invalid altsetting 0 [ 309.760884][ T808] usbtest 7-1:220.1: probe with driver usbtest failed with error -22 [ 309.788854][ T808] usb 7-1: USB disconnect, device number 31 [ 309.858784][ T9031] netdevsim netdevsim7 netdevsim0: entered allmulticast mode [ 309.867167][ T9031] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 309.890911][ T9031] netlink: 32 bytes leftover after parsing attributes in process `syz.7.959'. [ 309.900584][ T9031] netlink: 32 bytes leftover after parsing attributes in process `syz.7.959'. [ 309.909982][ T9031] netlink: 4 bytes leftover after parsing attributes in process `syz.7.959'. [ 309.921586][ T9031] netlink: 32 bytes leftover after parsing attributes in process `syz.7.959'. [ 309.931629][ T9031] netlink: 32 bytes leftover after parsing attributes in process `syz.7.959'. [ 309.941088][ T9031] netlink: 4 bytes leftover after parsing attributes in process `syz.7.959'. [ 309.957695][ T9031] netlink: 32 bytes leftover after parsing attributes in process `syz.7.959'. [ 310.118535][ T9033] FAULT_INJECTION: forcing a failure. [ 310.118535][ T9033] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 310.155254][ T9033] CPU: 1 UID: 0 PID: 9033 Comm: syz.7.960 Tainted: G L syzkaller #0 PREEMPT(full) [ 310.155287][ T9033] Tainted: [L]=SOFTLOCKUP [ 310.155293][ T9033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 310.155304][ T9033] Call Trace: [ 310.155311][ T9033] [ 310.155318][ T9033] dump_stack_lvl+0xe8/0x150 [ 310.155343][ T9033] should_fail_ex+0x412/0x560 [ 310.155370][ T9033] _copy_from_iter+0x1d3/0x1670 [ 310.155397][ T9033] ? rcu_is_watching+0x15/0xb0 [ 310.155423][ T9033] ? __pfx__copy_from_iter+0x10/0x10 [ 310.155453][ T9033] ? netlink_sendmsg+0x650/0xb40 [ 310.155476][ T9033] ? skb_put+0x11b/0x210 [ 310.155501][ T9033] netlink_sendmsg+0x6c0/0xb40 [ 310.155533][ T9033] ? __pfx_netlink_sendmsg+0x10/0x10 [ 310.155566][ T9033] ? aa_sock_msg_perm+0xf1/0x1b0 [ 310.155591][ T9033] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 310.155618][ T9033] ____sys_sendmsg+0x972/0x9f0 [ 310.155649][ T9033] ? __pfx_____sys_sendmsg+0x10/0x10 [ 310.155677][ T9033] ? kstrtoull+0x12f/0x1d0 [ 310.155704][ T9033] ___sys_sendmsg+0x2a5/0x360 [ 310.155726][ T9033] ? __lock_acquire+0x6b5/0x2cf0 [ 310.155749][ T9033] ? __pfx____sys_sendmsg+0x10/0x10 [ 310.155774][ T9033] ? get_pid_task+0x20/0x1f0 [ 310.155796][ T9033] ? get_pid_task+0x20/0x1f0 [ 310.155814][ T9033] ? get_pid_task+0x20/0x1f0 [ 310.155859][ T9033] ? __fget_files+0x2a/0x420 [ 310.155879][ T9033] ? __fget_files+0x3a0/0x420 [ 310.155909][ T9033] __sys_sendmsg+0x183/0x260 [ 310.155935][ T9033] ? __pfx___sys_sendmsg+0x10/0x10 [ 310.155979][ T9033] __do_fast_syscall_32+0x229/0x6e0 [ 310.156003][ T9033] ? do_fast_syscall_32+0x33/0x70 [ 310.156025][ T9033] ? lockdep_hardirqs_on+0x7a/0x110 [ 310.156045][ T9033] ? asm_int80_emulation+0x1a/0x20 [ 310.156062][ T9033] ? do_int80_emulation+0x286/0x530 [ 310.156083][ T9033] ? trace_irq_disable+0x3b/0x140 [ 310.156111][ T9033] do_fast_syscall_32+0x33/0x70 [ 310.156134][ T9033] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 310.156155][ T9033] RIP: 0023:0xf703f01c [ 310.156171][ T9033] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 310.156186][ T9033] RSP: 002b:00000000f542d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 310.156205][ T9033] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000d00 [ 310.156217][ T9033] RDX: 000000000004c020 RSI: 0000000000000000 RDI: 0000000000000000 [ 310.156228][ T9033] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 310.156238][ T9033] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 310.156249][ T9033] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 310.156275][ T9033] [ 310.735406][ T5701] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 310.746712][ T9043] erspan0: entered promiscuous mode [ 310.752248][ T9043] vlan3: entered promiscuous mode [ 310.855856][ T5702] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 310.906497][ T5701] usb 5-1: Using ep0 maxpacket: 16 [ 310.921255][ T5701] usb 5-1: config index 0 descriptor too short (expected 65, got 36) [ 310.935994][ T5701] usb 5-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 310.948601][ T5701] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 310.964256][ T5701] usb 5-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 310.965373][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 310.965386][ T29] audit: type=1326 audit(1778217797.391:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9050 comm="syz.6.968" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f9801c code=0x7ffc0000 [ 310.977320][ T5701] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.012831][ T29] audit: type=1326 audit(1778217797.391:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9050 comm="syz.6.968" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f9801c code=0x7ffc0000 [ 311.055567][ T5702] usb 8-1: Using ep0 maxpacket: 16 [ 311.074582][ T5702] usb 8-1: config 0 has no interfaces? [ 311.091609][ T5702] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 311.092304][ T29] audit: type=1326 audit(1778217797.441:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9050 comm="syz.6.968" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf7f9801c code=0x7ffc0000 [ 311.109122][ T5701] usb 5-1: config 0 descriptor?? [ 311.134059][ T5702] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.153073][ T5702] usb 8-1: Product: syz [ 311.167089][ T5702] usb 8-1: Manufacturer: syz [ 311.183227][ T5702] usb 8-1: SerialNumber: syz [ 311.204440][ T5701] pxrc 5-1:0.0: Could not find endpoint [ 311.219231][ T5702] usb 8-1: config 0 descriptor?? [ 311.231260][ T5701] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 311.380703][ T9061] __nla_validate_parse: 2 callbacks suppressed [ 311.380722][ T9061] netlink: 84 bytes leftover after parsing attributes in process `syz.5.972'. [ 311.451263][ T5701] usb 5-1: USB disconnect, device number 60 [ 311.464858][ T29] audit: type=1326 audit(1778217797.901:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9050 comm="syz.6.968" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f9801c code=0x7ffc0000 [ 311.515761][ T29] audit: type=1326 audit(1778217797.901:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9050 comm="syz.6.968" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f9801c code=0x7ffc0000 [ 311.560490][ T29] audit: type=1326 audit(1778217797.991:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9050 comm="syz.6.968" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf7f9801c code=0x7ffc0000 [ 311.586329][ T29] audit: type=1326 audit(1778217797.991:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9050 comm="syz.6.968" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f9801c code=0x7ffc0000 [ 311.617548][ T29] audit: type=1326 audit(1778217797.991:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9050 comm="syz.6.968" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f9801c code=0x7ffc0000 [ 311.647855][ T29] audit: type=1326 audit(1778217798.021:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9050 comm="syz.6.968" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=362 compat=1 ip=0xf7f9801c code=0x7ffc0000 [ 311.704207][ T9062] pim6reg: entered allmulticast mode [ 311.711083][ T29] audit: type=1326 audit(1778217798.021:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9050 comm="syz.6.968" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f9801c code=0x7ffc0000 [ 312.789505][ T9085] netlink: 4 bytes leftover after parsing attributes in process `syz.6.976'. [ 312.848041][ T9086] netlink: 'syz.6.976': attribute type 10 has an invalid length. [ 313.020915][ T9089] netlink: 84 bytes leftover after parsing attributes in process `syz.8.977'. [ 313.162662][ T9086] team0: Port device dummy0 added [ 313.325385][ T808] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 313.485496][ T808] usb 7-1: Using ep0 maxpacket: 16 [ 313.492881][ T808] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 313.501561][ T808] usb 7-1: config 0 has no interface number 0 [ 313.508017][ T808] usb 7-1: config 0 interface 1 has no altsetting 0 [ 313.515664][ T5701] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 313.516884][ T808] usb 7-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 313.532923][ T808] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.541651][ T808] usb 7-1: Product: syz [ 313.546908][ T808] usb 7-1: Manufacturer: syz [ 313.551614][ T808] usb 7-1: SerialNumber: syz [ 313.558467][ T808] usb 7-1: config 0 descriptor?? [ 313.595518][ T5679] usb 5-1: new full-speed USB device number 61 using dummy_hcd [ 313.649753][ T5709] usb 8-1: USB disconnect, device number 18 [ 313.685410][ T5701] usb 9-1: Using ep0 maxpacket: 16 [ 313.692222][ T5701] usb 9-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 313.709055][ T5701] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 313.719003][ T5701] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.727891][ T5701] usb 9-1: Product: syz [ 313.732086][ T5701] usb 9-1: Manufacturer: syz [ 313.737680][ T5701] usb 9-1: SerialNumber: syz [ 313.744769][ T5701] usb 9-1: config 0 descriptor?? [ 313.779796][ T808] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 313.788449][ T5679] usb 5-1: config 201 has an invalid interface number: 249 but max is 0 [ 313.801611][ T5679] usb 5-1: config 201 has no interface number 0 [ 313.807998][ T808] gspca_spca1528: reg_w err -71 [ 313.813556][ T5679] usb 5-1: config 201 interface 249 altsetting 4 has an endpoint descriptor with address 0xF1, changing to 0x81 [ 313.826093][ T808] spca1528 7-1:0.1: probe with driver spca1528 failed with error -71 [ 313.834823][ T5679] usb 5-1: config 201 interface 249 altsetting 4 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 313.849221][ T808] usb 7-1: USB disconnect, device number 32 [ 313.859898][ T5679] usb 5-1: config 201 interface 249 has no altsetting 0 [ 313.874079][ T5679] usb 5-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=fa.df [ 313.883494][ T5679] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.891878][ T5679] usb 5-1: Product: syz [ 313.896343][ T5679] usb 5-1: Manufacturer: syz [ 313.900960][ T5679] usb 5-1: SerialNumber: syz [ 314.111306][ T9097] netlink: 8 bytes leftover after parsing attributes in process `syz.4.981'. [ 314.153541][ T5679] ath6kl: Failed to submit usb control message: -71 [ 314.162517][ T5679] ath6kl: unable to send the bmi data to the device: -71 [ 314.170257][ T5679] ath6kl: Unable to send get target info: -71 [ 314.180186][ T5679] ath6kl: Failed to init ath6kl core: -71 [ 314.188727][ T5679] ath6kl_usb 5-1:201.249: probe with driver ath6kl_usb failed with error -71 [ 314.204528][ T5679] usb 5-1: USB disconnect, device number 61 [ 314.474286][ T9105] netlink: 12 bytes leftover after parsing attributes in process `syz.7.992'. [ 314.686225][ T5701] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 314.725599][ T5679] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 314.862606][ T5701] usb 7-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 314.877361][ T5701] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.886206][ T5701] usb 7-1: Product: syz [ 314.890560][ T5701] usb 7-1: Manufacturer: syz [ 314.896053][ T5701] usb 7-1: SerialNumber: syz [ 314.899397][ T5679] usb 8-1: Using ep0 maxpacket: 32 [ 314.912978][ T5679] usb 8-1: config 0 has no interfaces? [ 314.927855][ T5679] usb 8-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 314.943386][ T5679] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.962142][ T5679] usb 8-1: Product: syz [ 314.970826][ T5679] usb 8-1: Manufacturer: syz [ 314.988695][ T5679] usb 8-1: SerialNumber: syz [ 315.011574][ T5679] usb 8-1: config 0 descriptor?? [ 315.254087][ T5720] usb 8-1: USB disconnect, device number 19 [ 315.331252][ T5701] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 315.355600][ T5701] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 316.185570][ T5702] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 316.301077][ T5709] usb 9-1: USB disconnect, device number 5 [ 316.337287][ T5702] usb 8-1: Using ep0 maxpacket: 16 [ 316.350014][ T5702] usb 8-1: unable to get BOS descriptor or descriptor too short [ 316.364867][ T5702] usb 8-1: New USB device found, idVendor=0ac8, idProduct=c301, bcdDevice=d4.05 [ 316.382039][ T5702] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.390680][ T5702] usb 8-1: Product: syz [ 316.394941][ T5702] usb 8-1: Manufacturer: syz [ 316.405522][ T5702] usb 8-1: SerialNumber: syz [ 316.633977][ T5702] gspca_main: vc032x-2.14.0 probing 0ac8:c301 [ 316.671395][ T9145] pim6reg: entered allmulticast mode [ 317.063861][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.072688][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.335651][ T5702] gspca_vc032x: reg_w err -110 [ 317.340735][ T5702] gspca_vc032x: I2c Bus Busy Wait 00 [ 317.346685][ T5702] gspca_vc032x: I2c Bus Busy Wait 00 [ 317.352374][ T5702] gspca_vc032x: I2c Bus Busy Wait 00 [ 317.358977][ T5702] gspca_vc032x: I2c Bus Busy Wait 00 [ 317.365617][ T5702] gspca_vc032x: I2c Bus Busy Wait 00 [ 317.370998][ T5702] gspca_vc032x: I2c Bus Busy Wait 00 [ 317.418322][ T5702] gspca_vc032x: I2c Bus Busy Wait 00 [ 317.437682][ T5702] gspca_vc032x: I2c Bus Busy Wait 00 [ 317.449744][ T5702] gspca_vc032x: I2c Bus Busy Wait 00 [ 317.461129][ T5702] gspca_vc032x: I2c Bus Busy Wait 00 [ 317.474370][ T5702] gspca_vc032x: I2c Bus Busy Wait 00 [ 317.487254][ T5702] gspca_vc032x: I2c Bus Busy Wait 00 [ 317.499970][ T5702] gspca_vc032x: I2c Bus Busy Wait 00 [ 317.513302][ T5702] gspca_vc032x: I2c Bus Busy Wait 00 [ 317.521087][ T5702] gspca_vc032x: I2c Bus Busy Wait 00 [ 317.527755][ T5702] gspca_vc032x: I2c Bus Busy Wait 00 [ 317.533176][ T5702] gspca_vc032x: I2c Bus Busy Wait 00 [ 317.544374][ T5702] gspca_vc032x: I2c Bus Busy Wait 00 [ 317.550896][ T5702] gspca_vc032x: I2c Bus Busy Wait 00 [ 317.556344][ T5702] gspca_vc032x: Unknown sensor... [ 317.561548][ T5702] vc032x 8-1:12.0: probe with driver vc032x failed with error -22 [ 317.697097][ T30] INFO: task kworker/1:5:5687 blocked for more than 143 seconds. [ 317.706650][ T30] Tainted: G L syzkaller #0 [ 317.733905][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 317.756480][ T30] task:kworker/1:5 state:D stack:19704 pid:5687 tgid:5687 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 317.788163][ T30] Workqueue: usb_hub_wq hub_event [ 317.798052][ T30] Call Trace: [ 317.804096][ T30] [ 317.811071][ T30] __schedule+0x17b4/0x5680 [ 317.820466][ T30] ? kasan_save_stack+0x3e/0x60 [ 317.832784][ T30] ? __device_attach_driver+0x279/0x430 [ 317.848319][ T30] ? device_initial_probe+0xa1/0xd0 [ 317.861439][ T30] ? bus_probe_device+0x12a/0x220 [ 317.870720][ T30] ? device_add+0x7e9/0xbb0 [ 317.882320][ T30] ? usb_probe_device+0x1c4/0x3b0 [ 317.894741][ T30] ? really_probe+0x267/0xaf0 [ 317.905423][ T30] ? driver_probe_device+0x4f/0x240 [ 317.920537][ T30] ? __device_attach+0x2c5/0x450 [ 317.933884][ T30] ? bus_probe_device+0x12a/0x220 [ 317.955652][ T30] ? look_up_lock_class+0x57/0x110 [ 317.970059][ T30] ? __pfx___schedule+0x10/0x10 [ 317.989159][ T30] ? schedule+0x90/0x360 [ 318.001375][ T30] schedule+0x164/0x360 [ 318.007098][ T30] schedule_timeout+0xc3/0x2c0 [ 318.012622][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 318.026724][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 318.040083][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 318.053759][ T30] ? wait_for_completion+0x274/0x5e0 [ 318.065008][ T30] wait_for_completion+0x2cc/0x5e0 [ 318.073685][ T30] ? __pfx_wait_for_completion+0x10/0x10 [ 318.088602][ T30] i2c_del_adapter+0x5c0/0x790 [ 318.103625][ T30] ? lockdep_hardirqs_on+0x7a/0x110 [ 318.118350][ T30] ? __pfx_i2c_del_adapter+0x10/0x10 [ 318.133213][ T30] ? dvb_usbv2_exit+0x94c/0xb80 [ 318.144587][ T30] dvb_usbv2_probe+0x4c3/0x3d40 [ 318.155489][ T30] ? __pfx_dvb_usbv2_probe+0x10/0x10 [ 318.162508][ T30] ? __pm_runtime_set_status+0x9d4/0xcd0 [ 318.178554][ T30] usb_probe_interface+0x659/0xc70 [ 318.191748][ T30] ? __pfx_usb_probe_interface+0x10/0x10 [ 318.209217][ T30] really_probe+0x267/0xaf0 [ 318.219504][ T30] __driver_probe_device+0x1ef/0x380 [ 318.235860][ T30] driver_probe_device+0x4f/0x240 [ 318.249168][ T30] __device_attach_driver+0x279/0x430 [ 318.262617][ T30] bus_for_each_drv+0x258/0x2f0 [ 318.272521][ T30] ? __pfx___device_attach_driver+0x10/0x10 [ 318.295944][ T30] ? __pfx_bus_for_each_drv+0x10/0x10 [ 318.313286][ T30] ? lockdep_hardirqs_on+0x7a/0x110 [ 318.333793][ T30] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 318.362259][ T30] __device_attach+0x2c5/0x450 [ 318.373256][ T30] ? __pfx___device_attach+0x10/0x10 [ 318.391255][ T30] ? _raw_spin_unlock+0x28/0x50 [ 318.405267][ T30] device_initial_probe+0xa1/0xd0 [ 318.431005][ T30] bus_probe_device+0x12a/0x220 [ 318.454035][ T30] device_add+0x7e9/0xbb0 [ 318.472180][ T30] usb_set_configuration+0x1a87/0x2110 [ 318.483643][ T5701] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x000000f0. ret = -EPROTO [ 318.499963][ T30] usb_generic_driver_probe+0x8d/0x150 [ 318.522269][ T30] usb_probe_device+0x1c4/0x3b0 [ 318.529786][ T5701] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to init LTM with error -EPROTO [ 318.547855][ T30] ? __pfx_usb_probe_device+0x10/0x10 [ 318.570553][ T30] really_probe+0x267/0xaf0 [ 318.583612][ T5701] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 318.593375][ T30] __driver_probe_device+0x1ef/0x380 [ 318.601658][ T30] driver_probe_device+0x4f/0x240 [ 318.618307][ T30] __device_attach_driver+0x279/0x430 [ 318.626404][ T5701] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 318.635178][ T30] bus_for_each_drv+0x258/0x2f0 [ 318.640177][ T30] ? __pfx___device_attach_driver+0x10/0x10 [ 318.655539][ T30] ? __pfx_bus_for_each_drv+0x10/0x10 [ 318.666822][ T30] ? lockdep_hardirqs_on+0x7a/0x110 [ 318.677133][ T30] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 318.693572][ T30] __device_attach+0x2c5/0x450 [ 318.708514][ T30] ? __pfx___device_attach+0x10/0x10 [ 318.729214][ T30] ? _raw_spin_unlock+0x28/0x50 [ 318.751048][ T30] device_initial_probe+0xa1/0xd0 [ 318.775676][ T30] bus_probe_device+0x12a/0x220 [ 318.791307][ T30] device_add+0x7e9/0xbb0 [ 318.807058][ T30] usb_new_device+0xa08/0x16f0 [ 318.830684][ T30] ? __pfx_usb_new_device+0x10/0x10 [ 318.850444][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 318.870428][ T30] hub_event+0x2a1c/0x4f30 [ 318.879811][ T30] ? do_raw_spin_unlock+0xf5/0x210 [ 318.892349][ T30] ? __pfx_hub_event+0x10/0x10 [ 318.906157][ T30] ? process_scheduled_works+0xa70/0x1860 [ 318.930617][ T30] ? process_scheduled_works+0xa70/0x1860 [ 318.962173][ T30] ? process_scheduled_works+0xa70/0x1860 [ 318.974030][ T808] usb 8-1: USB disconnect, device number 20 [ 319.005945][ T30] process_scheduled_works+0xb5d/0x1860 [ 319.031925][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 319.043982][ T30] ? assign_work+0x3d5/0x5e0 [ 319.055077][ T30] worker_thread+0xa53/0xfc0 [ 319.059994][ T30] kthread+0x388/0x470 [ 319.064201][ T30] ? __pfx_worker_thread+0x10/0x10 [ 319.070049][ T30] ? __pfx_kthread+0x10/0x10 [ 319.088565][ T30] ret_from_fork+0x514/0xb70 [ 319.100074][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 319.106349][ T30] ? __switch_to+0xc79/0x1410 [ 319.112752][ T30] ? __pfx_kthread+0x10/0x10 [ 319.124046][ T30] ret_from_fork_asm+0x1a/0x30 [ 319.129211][ T30] [ 319.132885][ T30] INFO: task syz.0.424:7126 blocked for more than 144 seconds. [ 319.141646][ T30] Tainted: G L syzkaller #0 [ 319.155871][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 319.164605][ T30] task:syz.0.424 state:D stack:28120 pid:7126 tgid:7118 ppid:5637 task_flags:0x400040 flags:0x08080002 [ 319.179740][ T30] Call Trace: [ 319.183280][ T30] [ 319.186688][ T30] __schedule+0x17b4/0x5680 [ 319.191272][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 319.196499][ T30] ? __pfx_stack_trace_save+0x10/0x10 [ 319.201921][ T30] ? kasan_save_free_info+0x46/0x50 [ 319.207398][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 319.212389][ T30] ? __pfx___schedule+0x10/0x10 [ 319.218062][ T30] ? schedule+0x90/0x360 [ 319.222339][ T30] schedule+0x164/0x360 [ 319.226868][ T30] schedule_preempt_disabled+0x13/0x30 [ 319.232441][ T30] __mutex_lock+0x7f7/0x1550 [ 319.237734][ T30] ? __mutex_lock+0x608/0x1550 [ 319.242533][ T30] ? usbdev_open+0x182/0x770 [ 319.247192][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 319.252255][ T30] ? bus_find_device+0x27d/0x2d0 [ 319.257334][ T30] ? __pfx_bus_find_device+0x10/0x10 [ 319.262657][ T30] ? usbdev_open+0xa7/0x770 [ 319.267315][ T30] ? __kmalloc_cache_noprof+0x15b/0x660 [ 319.273053][ T30] usbdev_open+0x182/0x770 [ 319.279703][ T30] ? kobject_get_unless_zero+0x167/0x1f0 [ 319.285573][ T30] ? __pfx_usbdev_open+0x10/0x10 [ 319.290548][ T30] ? do_raw_spin_unlock+0xf5/0x210 [ 319.295766][ T30] chrdev_open+0x4cd/0x5e0 [ 319.300213][ T30] ? __pfx_chrdev_open+0x10/0x10 [ 319.305158][ T30] ? fsnotify_open_perm_and_set_mode+0x135/0x6d0 [ 319.311558][ T30] ? __pfx_chrdev_open+0x10/0x10 [ 319.316585][ T30] do_dentry_open+0x785/0x14e0 [ 319.321361][ T30] vfs_open+0x3b/0x340 [ 319.325505][ T30] ? path_openat+0x2df0/0x3860 [ 319.330291][ T30] path_openat+0x2e08/0x3860 [ 319.334888][ T30] ? __pfx_stack_trace_save+0x10/0x10 [ 319.340374][ T30] ? stack_depot_save_flags+0x33/0x810 [ 319.345919][ T30] ? __pfx_path_openat+0x10/0x10 [ 319.350881][ T30] ? __ia32_compat_sys_openat+0x131/0x160 [ 319.356734][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 319.361729][ T30] do_file_open+0x23e/0x4a0 [ 319.366348][ T30] ? __pfx_do_file_open+0x10/0x10 [ 319.371393][ T30] ? _raw_spin_unlock+0x28/0x50 [ 319.376512][ T30] ? alloc_fd+0x64b/0x6c0 [ 319.382307][ T30] do_sys_openat2+0x113/0x200 [ 319.387087][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 319.392293][ T30] ? rcu_is_watching+0x15/0xb0 [ 319.397292][ T30] __ia32_compat_sys_openat+0x131/0x160 [ 319.402851][ T30] do_int80_emulation+0x181/0x530 [ 319.407930][ T30] ? trace_irq_disable+0x3b/0x140 [ 319.412980][ T30] ? asm_int80_emulation+0x1a/0x20 [ 319.418176][ T30] ? clear_bhb_loop+0x40/0x90 [ 319.422877][ T30] ? clear_bhb_loop+0x40/0x90 [ 319.427606][ T30] asm_int80_emulation+0x1a/0x20 [ 319.432548][ T30] RIP: 0023:0xf71b616b [ 319.436692][ T30] RSP: 002b:00000000f542b03c EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 319.445134][ T30] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f542b100 [ 319.453166][ T30] RDX: 0000000000101301 RSI: 0000000000000000 RDI: 0000000000000000 [ 319.461453][ T30] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 319.469508][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 319.477513][ T30] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 319.487515][ T30] [ 319.492205][ T5701] lan78xx 7-1:1.0: probe with driver lan78xx failed with error -71 [ 319.500775][ T30] [ 319.500775][ T30] Showing all locks held in the system: [ 319.528964][ T30] 1 lock held by khungtaskd/30: [ 319.534712][ T5701] usb 7-1: USB disconnect, device number 33 [ 319.548681][ T30] #0: ffffffff8e95cd60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 319.588338][ T30] 1 lock held by udevd/4994: [ 319.603979][ T30] 2 locks held by getty/5381: [ 319.613464][ T30] #0: ffff8880367570a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 319.638366][ T30] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13a0 [ 319.648949][ T30] 4 locks held by udevd/5640: [ 319.653660][ T30] #0: ffff8880358dbab8 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xb7/0xe10 [ 319.662881][ T30] #1: ffff888032168c80 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x5c/0x420 [ 319.672840][ T30] #2: ffff888036270878 (kn->active#31){++++}-{0:0}, at: kernfs_seq_start+0xb2/0x420 [ 319.682656][ T30] #3: ffff88805aa2f1d8 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 319.694866][ T30] 6 locks held by kworker/0:3/5686: [ 319.701981][ T30] #0: ffff888021eaa140 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 319.713805][ T30] #1: ffffc90003b27c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 319.726520][ T30] #2: ffff88802a6ef1d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x17f/0x4f30 [ 319.735733][ T30] #3: ffff8880511e81d8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 319.745014][ T30] #4: ffff88805a90f1a0 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 319.756362][ T30] #5: ffffffff8e7f9ae8 (umhelper_sem){++++}-{4:4}, at: usermodehelper_read_trylock+0xfc/0x2c0 [ 319.767052][ T30] 5 locks held by kworker/1:5/5687: [ 319.772280][ T30] #0: ffff888021eaa140 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 319.784359][ T30] #1: ffffc90003b37c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 319.799398][ T30] #2: ffff88823be201d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x17f/0x4f30 [ 319.809497][ T30] #3: ffff88805aa2f1d8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 319.819051][ T30] #4: ffff8880216ef1a0 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 319.828575][ T30] 2 locks held by kworker/1:7/5719: [ 319.833793][ T30] #0: ffff88813fe43140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 319.845470][ T30] #1: ffffc90004537c40 ((work_completion)(&m->mpeg_thread)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 319.863373][ T30] 1 lock held by syz.0.424/7126: [ 319.869901][ T30] #0: ffff88823be201d8 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x182/0x770 [ 319.879192][ T30] 1 lock held by syz.2.478/7315: [ 319.884160][ T30] #0: ffff88823be201d8 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x182/0x770 [ 319.896508][ T30] 1 lock held by syz.1.660/7932: [ 319.901651][ T30] #0: ffff88823be201d8 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x182/0x770 [ 319.911049][ T30] 1 lock held by syz.3.816/8469: [ 319.917098][ T30] #0: ffff88823be201d8 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x182/0x770 [ 319.926485][ T30] [ 319.928894][ T30] ============================================= [ 319.928894][ T30] [ 319.939039][ T30] NMI backtrace for cpu 0 [ 319.939056][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 319.939079][ T30] Tainted: [L]=SOFTLOCKUP [ 319.939086][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 319.939096][ T30] Call Trace: [ 319.939104][ T30] [ 319.939111][ T30] dump_stack_lvl+0xe8/0x150 [ 319.939136][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 319.939156][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 319.939183][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 319.939204][ T30] sys_info+0x135/0x170 [ 319.939228][ T30] watchdog+0xfd3/0x1030 [ 319.939259][ T30] ? watchdog+0x1c9/0x1030 [ 319.939288][ T30] kthread+0x388/0x470 [ 319.939311][ T30] ? __pfx_watchdog+0x10/0x10 [ 319.939333][ T30] ? __pfx_kthread+0x10/0x10 [ 319.939357][ T30] ret_from_fork+0x514/0xb70 [ 319.939379][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 319.939398][ T30] ? __switch_to+0xc79/0x1410 [ 319.939425][ T30] ? __pfx_kthread+0x10/0x10 [ 319.939449][ T30] ret_from_fork_asm+0x1a/0x30 [ 319.939484][ T30] [ 319.939490][ T30] Sending NMI from CPU 0 to CPUs 1: [ 320.058248][ C1] NMI backtrace for cpu 1 [ 320.058265][ C1] CPU: 1 UID: 0 PID: 9147 Comm: syz.7.984 Tainted: G L syzkaller #0 PREEMPT(full) [ 320.058286][ C1] Tainted: [L]=SOFTLOCKUP [ 320.058292][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 320.058301][ C1] RIP: 0010:folio_mapping+0x75/0x1f0 [ 320.058322][ C1] Code: ff 81 fd 00 00 00 f5 0f 84 2a 01 00 00 4c 8d 73 08 4d 89 f4 49 c1 ec 03 43 80 3c 3c 00 74 08 4c 89 f7 e8 8e b0 21 00 4d 8b 2e <4c> 89 ee 48 83 e6 01 31 ff e8 ed 79 b6 ff 49 83 e5 01 0f 85 2a 01 [ 320.058335][ C1] RSP: 0018:ffffc90003ae7258 EFLAGS: 00000246 [ 320.058349][ C1] RAX: ffffffff820f4a2c RBX: ffffea0000fc0700 RCX: 0000000000000000 [ 320.058360][ C1] RDX: ffff888059733d80 RSI: 00000000ff000000 RDI: 00000000f5000000 [ 320.058370][ C1] RBP: 00000000ff000000 R08: ffffea0000fc0733 R09: 1ffffd40001f80e6 [ 320.058381][ C1] R10: dffffc0000000000 R11: fffff940001f80e7 R12: 1ffffd40001f80e1 [ 320.058392][ C1] R13: ffffea0000fc06c8 R14: ffffea0000fc0708 R15: dffffc0000000000 [ 320.058404][ C1] FS: 0000000000000000(0000) GS:ffff888125390000(0000) knlGS:0000000000000000 [ 320.058416][ C1] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 320.058427][ C1] CR2: 00000000f73d7a54 CR3: 000000007aec8000 CR4: 00000000003526f0 [ 320.058440][ C1] Call Trace: [ 320.058446][ C1] [ 320.058454][ C1] folio_needs_release+0x1f/0xc0 [ 320.058471][ C1] truncate_cleanup_folio+0x43/0x190 [ 320.058487][ C1] truncate_inode_folio+0x55/0x70 [ 320.058502][ C1] shmem_undo_range+0x42f/0x1660 [ 320.058522][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 320.058539][ C1] ? __pfx_shmem_undo_range+0x10/0x10 [ 320.058578][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 320.058599][ C1] shmem_evict_inode+0x289/0xae0 [ 320.058621][ C1] ? inode_wait_for_writeback+0x16d/0x3b0 [ 320.058643][ C1] ? __pfx_shmem_evict_inode+0x10/0x10 [ 320.058662][ C1] ? __pfx_inode_wait_for_writeback+0x10/0x10 [ 320.058682][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 320.058705][ C1] ? do_raw_spin_unlock+0xf5/0x210 [ 320.058724][ C1] ? __pfx_shmem_evict_inode+0x10/0x10 [ 320.058744][ C1] evict+0x61e/0xb10 [ 320.058767][ C1] ? __pfx_evict+0x10/0x10 [ 320.058785][ C1] ? do_raw_spin_unlock+0xf5/0x210 [ 320.058805][ C1] ? _raw_spin_unlock+0x28/0x50 [ 320.058821][ C1] ? iput+0xb25/0xe80 [ 320.058841][ C1] __dentry_kill+0x1a2/0x690 [ 320.058856][ C1] ? finish_dput+0xad/0x480 [ 320.058873][ C1] finish_dput+0xc9/0x480 [ 320.058890][ C1] __fput+0x691/0xa60 [ 320.058917][ C1] task_work_run+0x1d9/0x270 [ 320.058938][ C1] ? __pfx_task_work_run+0x10/0x10 [ 320.058957][ C1] ? do_exit+0x70a/0x22c0 [ 320.058974][ C1] ? kmem_cache_free+0x182/0x650 [ 320.058994][ C1] ? put_net+0x191/0x260 [ 320.059011][ C1] do_exit+0x70f/0x22c0 [ 320.059032][ C1] ? __pfx_do_exit+0x10/0x10 [ 320.059056][ C1] do_group_exit+0x21b/0x2d0 [ 320.059073][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 320.059091][ C1] get_signal+0x1284/0x1330 [ 320.059114][ C1] arch_do_signal_or_restart+0xbc/0x830 [ 320.059139][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 320.059169][ C1] irqentry_exit+0x284/0x730 [ 320.059187][ C1] ? trace_irq_disable+0x3b/0x140 [ 320.059210][ C1] asm_exc_page_fault+0x26/0x30 [ 320.059225][ C1] RIP: 0023:0x4c3922 [ 320.059237][ C1] Code: Unable to access opcode bytes at 0x4c38f8. [ 320.059244][ C1] RSP: 002b:00000000800000f0 EFLAGS: 00010206 [ 320.059256][ C1] RAX: 0000000000000000 RBX: 0000000020203000 RCX: 0000000007cc6719 [ 320.059266][ C1] RDX: 000000009b01e959 RSI: 00000000800001c0 RDI: 0000000080000340 [ 320.059276][ C1] RBP: 000000000b2f7ec7 R08: 0000000000000000 R09: 0000000000000000 [ 320.059286][ C1] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 320.059295][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 320.059311][ C1] [ 320.443349][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 320.450219][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 320.460873][ T30] Tainted: [L]=SOFTLOCKUP [ 320.465179][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 320.475212][ T30] Call Trace: [ 320.478475][ T30] [ 320.481395][ T30] vpanic+0x56c/0xa60 [ 320.485362][ T30] ? __pfx___schedule+0x10/0x10 [ 320.490246][ T30] ? __pfx_vpanic+0x10/0x10 [ 320.494732][ T30] ? nmi_trigger_cpumask_backtrace+0x1f4/0x300 [ 320.500883][ T30] panic+0xc5/0xd0 [ 320.504613][ T30] ? __pfx_panic+0x10/0x10 [ 320.509016][ T30] ? preempt_schedule_thunk+0x16/0x30 [ 320.514384][ T30] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 320.520524][ T30] watchdog+0x102c/0x1030 [ 320.524853][ T30] ? watchdog+0x1c9/0x1030 [ 320.529279][ T30] kthread+0x388/0x470 [ 320.533333][ T30] ? __pfx_watchdog+0x10/0x10 [ 320.537994][ T30] ? __pfx_kthread+0x10/0x10 [ 320.542571][ T30] ret_from_fork+0x514/0xb70 [ 320.547156][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 320.552263][ T30] ? __switch_to+0xc79/0x1410 [ 320.556935][ T30] ? __pfx_kthread+0x10/0x10 [ 320.561518][ T30] ret_from_fork_asm+0x1a/0x30 [ 320.566284][ T30] [ 320.569864][ T30] Kernel Offset: disabled [ 320.574179][ T30] Rebooting in 86400 seconds..