last executing test programs: 34m30.744660664s ago: executing program 1 (id=2243): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x35}}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) writev(r0, 0x0, 0x0) 34m30.051283961s ago: executing program 1 (id=2245): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000000480)={0xbcd5, {{0x2, 0x4e21, @loopback}}}, 0x88) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000180)={'nat\x00', 0x0, 0x4, 0x79, [0x401, 0x1, 0x2, 0x2, 0xffffffff], 0x1, &(0x7f0000000300)=[{}], &(0x7f00000000c0)=""/121}, &(0x7f0000000200)=0x78) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000b00)={{{@in6=@remote, @in=@initdev={0xac, 0x1e, 0x5, 0x0}, 0x0, 0x5, 0x0, 0x0, 0x2, 0x0, 0x10, 0x1}, {0x7fe000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff}, {0x0, 0x0, 0x3}, 0x0, 0x0, 0x1, 0x1}, {{@in=@rand_addr=0xffffffff, 0x4d5, 0x32}, 0x2, @in6=@remote, 0x0, 0x2, 0x0, 0xb7, 0xb, 0x81}}, 0xe8) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000340)=0x152, 0x4) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f00000000c0)="1c0000001d005f0214fffffffffffff8070000000d00000002000600", 0x1c) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000200)=0x7fff, 0x4) sendmmsg$inet6(r1, &(0x7f00000002c0)=[{{&(0x7f0000000b00)={0xa, 0x4e23, 0x7, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c, 0x0}}], 0x1, 0x24000000) recvmmsg(r1, &(0x7f0000000040)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001f80)=""/129, 0x81}, 0xdb31}], 0x1, 0x40002042, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r3, 0x11b, 0x7, &(0x7f0000000380), &(0x7f00000003c0)=0x30) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000340)={0x5, 0x4, 0xf69d, 0x800, 0x2}, 0x14) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x48) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000044}, 0x4000880) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB='t\x00\x00\x00\n'], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581"], 0x0) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) 34m28.07072646s ago: executing program 1 (id=2255): creat(&(0x7f0000000000)='./file0\x00', 0x6a) inotify_init1(0xc0800) socket$inet(0x10, 0xa, 0x7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000ad8000000060a010400000000000000000a0000010900010073797a3100000000ac0004802000018007000100637400001400028008000240000000070800014000000009540001800a00010072656469720000084400028008f101400000001108000240000000170800034000000061080003400000000608000140000000000800024000000008080002400000000f08000340000000303400018011000100666c6f775f6f66666c6f616400ffff001c0002800900010057797a32000000000900010073797a31000000000900020073797a32"], 0x100}, 0x1, 0x0, 0x0, 0x8001}, 0x24000000) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) socket$packet(0x11, 0x3, 0x300) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c000000100001080000000074e630bb00000000", @ANYRES32=0x0, @ANYBLOB="312000000000000014002b80", @ANYRES32, @ANYBLOB="080003000200000008001b0000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="ac1e010100000000010094cd49fe704c23ffbf000006000000e0000001e00000010a010100640101"], 0x28) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) r5 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000340)={0x2, @vbi={0x4, 0x5, 0x6, 0x3447504d, [0x8000, 0x8], [0xffffffff, 0xdb], 0x13a}}) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000000)='cubic', 0x6) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r4, &(0x7f0000000580)="17", 0xfdef, 0x10008095, 0x0, 0x0) r6 = socket(0x11, 0x800000002, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000540)={'wlan0\x00', {0x2, 0x0, @private=0xf30a4000}}) 34m26.039882377s ago: executing program 1 (id=2261): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x418000) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, 0x3, 0x6, 0x401, 0x0, 0x0, {0xa, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20040000}, 0x400c002) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000240), 0x2000, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r3 = syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r3) syz_usb_connect(0x2, 0x24, &(0x7f00000000c0)=ANY=[], 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_DELTABLE={0x110, 0x2, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_USERDATA={0xf1, 0x6, "79ac3741a101ed457e8ca13ed567ccf68e65fc2f2bd9b892756b73b5549953a402ff1ce51cba9e44d81147efaef84bb5199c7f98e548f550a735c6dc65ecddb96fb03ee6206acad1d73c2a4706f911d25885df04847bb62e70d7466a0abb8b63cd375dca453eacfae3a1b397807acd849cc9fbdf9a31f5e0ee8485a9c0ba3913495699a708bf78cd5ac2a9fff04e2f55274a80030bb2a39522b9081f9f576497564fe3718c9a5b0610a3b3dcc149d4cb26fd913f421c130c0a5e77f59af8962f4d0964e065448ba9e5de714e58b8b6ef76b7fe5af5b451a330def735862a05f8170368a14616c8b9c071291c85"}]}, @NFT_MSG_NEWFLOWTABLE={0x14, 0x2, 0xa, 0x201}, @NFT_MSG_DELFLOWTABLE={0x30, 0x16, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x4}]}, @NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}}], {0x14, 0x10}}, 0x190}}, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x800, 0x1c00c0) 34m22.38709419s ago: executing program 1 (id=2271): creat(&(0x7f0000000000)='./file0\x00', 0x6a) inotify_init1(0xc0800) socket$inet(0x10, 0xa, 0x7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000ad8000000060a010400000000000000000a0000010900010073797a3100000000ac0004802000018007000100637400001400028008000240000000070800014000000009540001800a00010072656469720000084400028008f101400000001108000240000000170800034000000061080003400000000608000140000000000800024000000008080002400000000f08000340000000303400018011000100666c6f775f6f66666c6f616400ffff001c0002800900010057797a32000000000900010073797a31000000000900020073797a32"], 0x100}, 0x1, 0x0, 0x0, 0x8001}, 0x24000000) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) socket$packet(0x11, 0x3, 0x300) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c000000100001080000000074e630bb00000000", @ANYRES32=0x0, @ANYBLOB="312000000000000014002b80", @ANYRES32, @ANYBLOB="080003000200000008001b0000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="ac1e010100000000010094cd49fe704c23ffbf000006000000e0000001e00000010a010100640101"], 0x28) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) r5 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000340)={0x2, @vbi={0x4, 0x5, 0x6, 0x3447504d, [0x8000, 0x8], [0xffffffff, 0xdb], 0x13a}}) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000000)='cubic', 0x6) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r4, &(0x7f0000000580)="17", 0xfdef, 0x10008095, 0x0, 0x0) r6 = socket(0x11, 0x800000002, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000540)={'wlan0\x00', {0x2, 0x0, @private=0xf30a4000}}) 34m21.898292563s ago: executing program 1 (id=2273): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$FBIOPAN_DISPLAY(r2, 0x4606, &(0x7f0000000000)={0x2000, 0x240, 0xf0, 0x0, 0xffffffff, 0x0, 0x0, 0x200000, {0x0, 0x401}, {0x0, 0x3bb}, {}, {0x0, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000000)=0x201, 0x4) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c832, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x100000000, 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000f, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@ipv6_getaddrlabel={0x30, 0x4a, 0x3, 0x0, 0x0, {0xa, 0x0, 0x80}, [@IFAL_ADDRESS={0x14, 0x1, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x20044090}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) close(r1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f00000001c0)={'wg1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000300)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r4, &(0x7f00000004c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0x8c, r5, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x5}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x9}, @ETHTOOL_A_CHANNELS_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x6}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x3}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x6}, @ETHTOOL_A_CHANNELS_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}]}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x200}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8000}, 0x24004040) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000011200000000000000000000000a58000000060a0b0400000000000000000200fffe2c0004802800018007000100637400001c0002800800024000000008080001400000001205000300110000000900010073080030000000000900020073797a32"], 0x80}, 0x1, 0x0, 0x0, 0x840}, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000500), r4) 34m20.188545357s ago: executing program 32 (id=2273): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$FBIOPAN_DISPLAY(r2, 0x4606, &(0x7f0000000000)={0x2000, 0x240, 0xf0, 0x0, 0xffffffff, 0x0, 0x0, 0x200000, {0x0, 0x401}, {0x0, 0x3bb}, {}, {0x0, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000000)=0x201, 0x4) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c832, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x100000000, 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000f, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@ipv6_getaddrlabel={0x30, 0x4a, 0x3, 0x0, 0x0, {0xa, 0x0, 0x80}, [@IFAL_ADDRESS={0x14, 0x1, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x20044090}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) close(r1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f00000001c0)={'wg1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000300)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r4, &(0x7f00000004c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0x8c, r5, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x5}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x9}, @ETHTOOL_A_CHANNELS_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x6}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x3}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x6}, @ETHTOOL_A_CHANNELS_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}]}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x200}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8000}, 0x24004040) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000011200000000000000000000000a58000000060a0b0400000000000000000200fffe2c0004802800018007000100637400001c0002800800024000000008080001400000001205000300110000000900010073080030000000000900020073797a32"], 0x80}, 0x1, 0x0, 0x0, 0x840}, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000500), r4) 25m21.498473442s ago: executing program 5 (id=3967): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="40000000190001090000000000000000021800000000fd010000000008000100ac141400080005000a0101ea0b00168008000300e0000002060015"], 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) epoll_create(0x7) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c01000019000100fcffffff10000000ffffffff000000000000000000000000ac1414bb00000000000000000000000000000000ffff20000a00800000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"/363], 0x13c}}, 0x0) 25m21.256180029s ago: executing program 5 (id=3969): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40}, 0x0) r1 = socket(0x2, 0x80805, 0x0) setsockopt(r1, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00\t\x00\x00\x00', 0x8) sendto$inet(r1, &(0x7f0000000340)='j', 0x1, 0x0, &(0x7f0000000040)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) syz_io_uring_setup(0x12e, &(0x7f0000000340)={0x0, 0x33e, 0x2, 0x3, 0xfffffffd}, &(0x7f0000000140), &(0x7f0000000280)) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) connect$inet6(r2, &(0x7f0000000300)={0xa, 0x4e23, 0x7, @local, 0x2}, 0x1c) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @mcast2, 0x4}, 0x2f) syz_emit_ethernet(0x46, &(0x7f0000000100)={@random="79ee7ca42eea", @multicast, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, '\x00', 0x10, 0x11, 0xff, @private0, @mcast2, {[], {0x4e21, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x1, 0x3, 0x6, 0x100}}}}}}}}, 0x0) 25m21.001241064s ago: executing program 5 (id=3971): r0 = syz_open_dev$vbi(&(0x7f00000001c0), 0x1, 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000000000009b02"]) r4 = fcntl$dupfd(r0, 0x0, r0) ioctl$VIDIOC_ENUMSTD(r0, 0xc0485619, &(0x7f0000000000)={0x2, 0x10000, "8871d6ee7db83fd307b751ac7bc2a251efd301c52d9fca3a", {0x6}, 0xfffffbfe}) write$binfmt_script(r4, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000440)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000002000)={'batadv_slave_0\x00', 0x0}) sendmmsg$inet(r4, &(0x7f00000035c0)=[{{&(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)="ba8f59009ea8da906e277f9cc39bb0e676ffda5fec8d9356a7dc0d94877a343c9d", 0x21}], 0x1, &(0x7f0000003780)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8001}}, @ip_retopts={{0x3c, 0x0, 0x7, {[@timestamp={0x44, 0x10, 0x32, 0x0, 0x9, [0x0, 0x6, 0x80]}, @timestamp_prespec={0x44, 0x1c, 0xbf, 0x3, 0x0, [{@multicast1}, {@multicast1, 0xffff}, {@loopback, 0xe}]}]}}}], 0x88}}, {{&(0x7f0000000200)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000240)="e5470c36b5d892d151f8f24c937a2a3aba8f6c11", 0x14}], 0x1}}, {{&(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000003840)="19f45506f2f2c266ec513da95ff9a400f5a2efa276a488a574968f981bbaaa6772c0d387a97aae6610672db11db2c222cd19a6e4ef2f3135c56fd2938680c3116c2f7c849f43415ef33c61cff797f05b5785afb4a923d18b36a308a4ca10ed8aa8e864aa12a25cb6c96f67e2c2a700a64c803376cb76d876a88e8ef0d1b89e1a87135e357fc0ba243f99edea3142e2d4b973", 0x92}], 0x1, &(0x7f0000000480)=[@ip_pktinfo={{0x4b, 0x0, 0x8, {r5, @multicast2, @rand_addr=0x64010102}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_retopts={{0xa4, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x3c, 0x2a, 0x3, 0x4, [{@private=0xa010100, 0x59a}, {@private=0xa010102, 0x7fff}, {@local, 0x1}, {@broadcast, 0x3}, {@multicast1, 0x6}, {@loopback, 0x7}, {@dev={0xac, 0x14, 0x14, 0x3b}, 0x8}]}, @ssrr={0x89, 0x2b, 0xe9, [@empty, @remote, @private=0xa010102, @broadcast, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x28}, @broadcast, @local, @empty, @multicast2]}, @timestamp={0x44, 0x1c, 0x65, 0x0, 0x0, [0xffff, 0xc, 0x1, 0x16ff039c, 0x7ff, 0x22]}, @cipso={0x86, 0x10, 0x3, [{0x5, 0xa, "3384784a3382ae3a"}]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xcb}}], 0x110}}, {{&(0x7f00000005c0)={0x2, 0x4e20, @loopback}, 0x10, &(0x7f00000019c0)=[{&(0x7f0000000600)="d3ee3a34d1e86851b318e32f64fb242799760c4ebc615ac16ee189c3a923edbb204d781716302b1442411c9d31006bae58d85d4cb73efd5cac97be33b3b901da23ff52d07dec9ddb81447d3c20b1969d3fd476cf56ec430db77ab453dde5eed339c3f3e27ddea65fc90d3af191d628783b1602a644891e7cfa8b509fa7c12e5dc0c0147379201922e3480683a054607320de10f09e2578a9506227d0f6f02c80e82768779c2f1f71edb4418454eb38bf5e93bbc3a75c5176f3d5cccbbfa7615c5205b79677ea8f244a6ff0b35a9f2c28df7bd9fecf5c418f2afd1b54bbaae446fc4d7d4fd963179645b575d7da134d71e1ea89b26134cc", 0xf7}, {&(0x7f0000000700)="c6c5c8f312b497d43e0d76dbde48c10e487e6dd4a2163931e27795a0e000420f7068de18a547f925acaf57602c6baff889722754368f18d617e77ef8f3d215e88e9dd1a8cce286ce80ecdaa710b6fac61ed292e838c294473febbe671ee0bd56fef1663aa919e9d3faf99e271e72d9bc529d21ac58cdd0b8b9697d391f49d48caecc35bf923d3ad7e7caa4c6d6c9ad9ae862c4744fa5355c0163f397", 0x9c}, {&(0x7f00000007c0)="74e6c9b31e23f10f9f5851aaa7a9c56e96ea25a001921333e793e0a27dd3ab6ddafc03a842c297d1cf6db2dec09a3c6443a2f894931db467d6120d7408ea49c5ed84fda26456dde77701b64c2c57ef76be4c3161e75d9f1735d5c7273e1a16ff37380f17a7", 0x65}, {&(0x7f0000000840)="7b582b746b15c4d048fa6a65f2e8eabc6c21c91f86d6bb1f8114e1b7a3f1b603e5c395592b27de27f5db79d7818d4d51b26f77aa33fb7a6ec60015161e87bb08630a9996b9e26dcac20b9dc0550e6a5b2472c844a3a50d9249b86ed465e00bb1cf7b10d427b9d1f8a18663ed8b614290f521b75af9e88c53637ffbc10f68791a49cfcf9aa84e618bf02ae0cda06dea1698249e09a22282606ccd9b1bc64e72a5872c7e509172c758e3b0077a4abc63c5866eae", 0xb3}, {&(0x7f0000000900)="614022e9c70a8ed5cbd727ca10be48dd9db9a7cc8ddad1bafeadd375b13cfc3c94c8b4e34ab9c3f1dd747c4a8b2d8d2acd91cb71255202d777bbf7679fdbc4d5a7529d8f43228e6845c780ac71f747b007ca41bc8dfb4f6684e06e3fff88c6e109999c13ba11c64f3bef730399b3aeab202a10356f81e4cbd032dce493f29aba52db434a9623bbc7899bcf0148dac1ca4130e49eda29639069a591156bce62a58f0a9187d390d20aa63f9931e8a323ec671bdbc725", 0xb5}, {&(0x7f00000009c0)="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", 0x1000}], 0x6, &(0x7f0000001a40)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}], 0x18}}, {{&(0x7f0000001a80)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000001f40)=[{&(0x7f0000001ac0)="c5e2e309", 0x4}, {&(0x7f0000001b00)="be2626820580cffd305b0cff9dbdbd1e4779651baab0840c79edfb210e8c7ad54aa07d2de0ec55927cd53f8212ebf18a6970f6a9a6b7166fd46e4ccc0c0432213a78fc", 0x43}, {&(0x7f0000001b80)="41f44dd4e481dce2c1bfe4e21cd1daf508d27b2df7da70980215ca6f25d89c22d972a7cb0205f422e7e723d32c01ad46eb719352ad54f20acf5c2fbd0ad3046911fbfa89f9b0d0ae544d4a500cc2157b8e640e8515f23763cf1fbfe5ab4831607bdde155e083477808a51340edc28cb09110055ef1420e016c3953d85ce649a9b35b9e0a63ffee868b770b9342449cbfcc0341877a31b21980e2f359c8f3cb55af1d9fab291c56", 0xa7}, {&(0x7f0000001c40)="c7b11fc3aa295028b42cd23f07406e522923f7df99e62a71707b1e7b78", 0x1d}, {&(0x7f0000001c80)="4e19babb1900964c922332239d41761570968d37746b57a0350f77ca4ad5a34b6db2", 0x22}, {&(0x7f0000001cc0)="bccc2ddb0ebcc6683efc743ad281679fb804eeb6df122aa791a35f067638811aa704a1cbe8566f5e67bbf5", 0x2b}, {&(0x7f0000001d00)="75001fc39cecd419de96408327dd85ea8663ebfe5f916e73e3ed07af3b12fe6e6960e75f4ef70fb1432ca87faf8a4d8c7cb044fa9066a76d", 0x38}, {&(0x7f0000001d40)="a15e810f64130224b6203daa73422c351fa32d81e3191fce5b0141945af2c4dedd610c40af386c9911499c7fd2577bb90aed658946d6cc0fc75e94c832a1bc0db7aa53fcf0943cd2b768dc31b8192340ea2b1740f8b1c56c4b9156b0eac06b193486c61feb29ae42cc76d4fa531ac50776deea0d075395a956e5f86c086e6107ab542cfe25400eb9737070776f1d0d910ba9d2677485bb89f67c46b1720fdb921a13b4475d497d54af172fe59ebc15a6ef0a8bdb3ebd20c33d08b498c21ba691d562", 0xc2}, {&(0x7f0000001e40)="3e02e9a534fcd8e7f32d1c86026f5c9ee225842b3d8ae8f5276a1015cdc85ab2cb72b87e7b34d1f085cfdf9218ac09a81421765733bc44dcbd485fcab9288799f024f23948654b2949d3b48286409ee13e080af6324d3584e3db2e4aea12535a7f3cf84002cd43994e14abc5003538415d7f570ba59b4ad4c5614a153aaa6f5c4b40dd0bc2e88e79034f115b02fb5fbe050fcb37c5eef223ef7cf25fa910c2882a12404a2de73633323874bf47c7b3e178da4053d2d5c53d621b3141cab647f451fd4905f5f05b6cf6f5ed7eb7e76f42c2ffdabcb5f8eba921368d73ff039a5a3fdb6ba796276fcdc88147afe1c5d30a0772cd7c63440224", 0xf8}], 0x9, &(0x7f0000002040)=[@ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @loopback, @empty}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7f}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}], 0x98}}, {{0x0, 0x0, &(0x7f0000002300)=[{&(0x7f0000002100)="80cbb5dd873fe65989f19759c4cb53cdea2d7048cc25650e13ce6e844fecbed12f6108b49828930530bbbb88b18ea97a097913e15dcca7e30666131b235e56276ffdd9be6b3a57d27140278755c3e7d7ffa3a2a244dea602b44d8d006ee0fa9f8736ec0c903b6e726a557e6cc5f16fdd125f72c129c6eb757061344f259c958d2bf3db", 0x83}, {&(0x7f00000021c0)="428bc14128f81015d5cb8877eb4d11eb89ef52a71cb91b261ea653fd1ec060c5a799be23fd2804ad98d2b3d7037f95b74399e6b004cc6220b88a3ffb4c1fab27fcfe46113039e2b5ce7501b0fcb94a3f44515e981deaad7363e32535d65181fb302d1a8b4176422fbae021a081", 0x6d}, {&(0x7f0000002240)="09a6aec74c0916404d035d0c82509d45f96b13bf118fd2172110cadd1532323757153e27adadffb3d5dea828eb910b0a2d19a6d6ea1515254e45fe289f0b9e3d5d8fdd17aee8a4379019d7a85c3866890931ccfc8e7d2c392b1e8221c84c76e9b68ca362c6f666e8dc93e0a7b7c4199c126346900bd65f389a2227202711feca83d3be949f52214878b07bf39e7bcb20f939aaf5440f7e7086a8e1867317a039700fcf5b8f3da4d5160b04cad46ba51d9125", 0xb2}], 0x3, &(0x7f0000002340)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7}}, @ip_retopts={{0x50, 0x0, 0x7, {[@lsrr={0x83, 0x23, 0xa7, [@local, @loopback, @multicast2, @multicast2, @multicast2, @loopback, @multicast2, @multicast1]}, @lsrr={0x83, 0x1b, 0xae, [@loopback, @remote, @broadcast, @dev={0xac, 0x14, 0x14, 0x1e}, @multicast1, @remote]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_retopts={{0x58, 0x0, 0x7, {[@cipso={0x86, 0x45, 0x0, [{0x7, 0x5, "839689"}, {0x4, 0xa, "e4d5e48700af9b9b"}, {0x0, 0x6, "03616400"}, {0x6, 0x6, "116f7bc9"}, {0x7, 0x12, "d474b6bed99de48cd62d29156bbcaab5"}, {0x7, 0x4, "8b89"}, {0x1, 0x4, '\\C'}, {0x7, 0x3, "b5"}, {0x7, 0x7, "aa2532b514"}]}]}}}], 0xf0}}, {{&(0x7f0000002440)={0x2, 0x4e24, @local}, 0x10, &(0x7f0000003580)=[{&(0x7f0000002480)="791c51e0cac281298fd5fc477303009fbd11686dd498f5a5bb44de52f80ce14ff6e2e5018bad15aea66c19494b1f4573c727dc5efdd0e8ff02bcda990cdef2e6a6a3ec3ea93cc2f3a43406da3641ee92bf5ac51d554ff5bc286f1ecca28116255d73547e836c850d14303bc3838d64c1325516603a95911748d9e6994220ae4386af86e4fb939b7953e3f73815214fb196244ba34e137f4cead7f785b84222320b1a6a48a5f8fa97e18e2fc74500f934354d7b1d95dbf13838b5828a0c6ed33d2e31549e35a96a6a07de0690ad7b237d0be2b324dad98b3597bc59efaff7fe16450f10a3ad998789ff6a3187e37281672be8ba3d97985eeface2fb8f189951fb1dca2a80106408f2233a73fc9721adcb3d61c08971e3992a86c83c8651a5cffc2e3b3da299f31a176e07bac80985af4316ec49cedd1f8dbc666b86b55baf66d67e9d8615f820f7092614bba41de09c8686f9c434b659b8b69120ff26d36fece3d6ced935a3fd307c2f4010573db15071b59b1829948e704fe27fd65854a8c78b2fb05846c003ab4161a7775220d347e669d3e9e5948fc50e56672dc4b546ac595117e30d6e175f47724937edd99d779c7673c80b443c21ddc1b888ccda5f16952f6e68695baf050bbe0c50097a2df85abf66951586d6f9cecc89b08ef8ae0d7b668e793c652b774281f5789dcbd0d2e09ed7e6929c947e5c6e876ae1237f8ae434d51bb2099bfac2f03bbf3b48c9860c0d8c45f3c9d9eaf02c02de47714de0876822ee96b69af905e6307ec772a7d8503abac7c65f45de5116be94170b4803eafea0ae0283a3e0dfaceb55056081e11ceada60a51fc2a527dee64e4d74d16f15a2d7d98ff63883478b8e67732ad30fa9f43f3caecd99a3ecc00e9208631f0146549b9ca3d6aa3c17bcfbc822779a1c8eb20b0f5617a902aefe3b41833013b9ee8955129222578269425c416306a3d86bb41634385d64d388b79016d96fefc2d510caf24b78ca4a350efc7c0b593e2149ea45cea3ffecc74ee5a5a6922929717e09454b91a921504db1c4c1c5af4760a3a0b232c84fe478621a797a31e0ed02ddfa081f8c8b972c5feb9d4fafe11cb3c031aff3b18efbd4337872c6cca91b07b43e612b7a9d3344f2cf32928cc395cbec6a1c46c97042d091c13f202dbf71be1d5f4a5d7460e6cedebc4846778a8daf2fd3b9de469be1938cc2a77a6d9eb17cfee6155a700928b4c86251e2e56f229cad7762604b739063090fc714b818fad03de531e1d5a2e7b011f47bd69b8d136217339d6979c36466a38242b124d1de709b2c392108770eb228c2b9df5e64cd993fe74e8ac8ecda0d148a428215d2f287af3a8e4bd8368ee002c8c7e8538ac061777028f486dae9192cb5e554d0b421ca50fa438c8fa6aa2d28f55df8c765710fda52f32be0206e2fa6b4df89770c5ba1b1ba84c0a0dfaf2ceaab516754ce578a7951c21464c9ac74ed18736a290ff8b2e22e9a194e6193079340c97b41f9a275c61bd476b1519601107c80c08b3bd011327ae358acf4e885528639ddecfd91515cf545ddfa09de433d6626296af71572e405ef6ce8e295a483c781e2c23724be8a8a2c08234af418e1ca4199543350a905cf65f917e56d95493a8d8f8660f14a0bf7acf8411b8039c7d08893e2e490fe61b7e1a0ed1da343138ed74811a5b3fa5b758cdf40cb1c35900e1007542fd3e23b17c1de80016f2198a3f1b5ade9e19c7bef773c1872d97aa1115bcf4c728c06b6130ccccb311600d5287e07cc6bd0b07c5c0a9aa338a8592c6436e129da1f5f993064854d37a3d87102f643901be5c756c7efbc1e05b338e47bc12ad744902c9a44430e8d2e13e283e9947fc46830419d28fd3d183b28e2ec39e65ba46a6a207f0c66651fd2a1e4b3d53d4670d39b73b1e4acaca8916d4a9fcc016bbdd9006e4b6515d26891353d2fdab5d60b86aad5a493f8a0fae3b6c81df58e4d8cdd3ed9fdebb6a7a6578ee7e7145dcd5ce9ff3c1421162e6a59b6fe57895aba4ef71f0fa95555215827e95ef51017001d7094bfd21a96283bceb02f06ba0845e6c322b1e170d0fde86880e597e2f1f67676cc805a9e770c521164783160b7aacda7ba1f81add14ddeff22ea6e1ce8f75d60d5a339537c868f3098b98318d9a2d9aadb6bddb67d1311b2ebd11ce6439445f6735f47e8ba2d712744b862b3850c1582a29402e413c8f2ace5b600ab6315b597a5089dc339cae876484097683d6533e532813ce1b48de4c36951d74a31adc1157a4573723846868e014798925fb552cb754c2e35a44d8c58bd57f6f0345539156479bf0e7a7a9b14052255a345dfe603398d043fad47018eeb4908e671cf462e5305f4d26267f93c599f6367d5e9082cfa31b7f87ac22352de0884916746b8df497b04ef324f2a376b26c51c3a81f732e378c4c1877e0ad17333f7879dcb7c0b81ac3c0e79f447dd8162b0d97c452ac71fd24fc0978ff2bfa7aeb3beef3e0bbef1c5162ea612685f39eabbf7afcadbee5e365b1bf469a33274ab475b60eb488ca536e06995bede2ee87ce02ced97c418d9ae7609c73b2ee149dd5b546832f6f71f1e8479202b3acc2787c75b7bb087419e5b1ba98f04fbfe771d69167009d00495afdd467b58c58c1c95b60e2b5a87e1751375d8f7857d2966724a8fd6efd03793cb141ef2c3523f90a2d2b81b0b99ca42febe031c07a9aff7890bea2209471644d7b6017dc5822a70d882ee421539b14fd2115b3781399b210c75a1ad45bda4a0ac1563a42253909d7ed586fc2420b84e94e11ac19ae060759a017af34508a208870cbd618162c099902985d42aa9bae57f97f2b61f4bd6c569760ea6d92f290334f365ee02e9a9befe380d793d362acd9b1a6b4ffe3a51be2efbd2f7cd3b70ae3051f1432f3853617a6550a047ae6a3e86a7b1677e265f14805ed223640e9098334dee16194d935a7a3d13fe36d9b016a0cc55c6ff2b5db796a3af53d8105de5d8af982f1e3493b8fb3642b949b4ab6f72655b598d0ab15e397bf9a27051fa40bdfc300569adc2e1c826cf9beb7273cc95b027e6e57038f6904d36cdd1a23fd3dfc1f7ce047ef1f08ff1494f55ee7a9780b86a8f6189ec7c4822b49c032bb4f6c34449a1be0f3be2b99fd456001032f1cee2bab1307a11e8946f09db363a84320ea35b945dafe682ca3d465ad94842300cc7b90463104d0aa2779a541b58fcbfda51f95aaf5ca47529d14cf7af052a5aba2c6e271254c8b2438f9f54311d7fa6d28a4dba7a36a578834a3554ee001ee973f2d9704e00ab875901021b1c5230177b9520a5ae5ba8c1c459db184e2b2d62e7f3e57e09d9f4420d392d510af5cb762dcf72672f5e6447728d537a2ec76e9440f3a302d350a83e0056962d01d559e250dcfa1938bbf22d3f66699166892aa9b6c7c36c344bf6a03d1c8f0291e39192500fd15320b197bfbdecc9e65513409aee8851fcc903f60f59a561521f59842974c733c355eea68132564e0f23e5a1c86c9b3ccf1fe776ae2d4976c32737a4fe05ecd47e03700ab3bb4c8a1474007c83f011bf633d0da66f8eb56050a1ef8d19e60e447f878d81268d91b9b08ecda8cfd135897b944a7db1eaca7e91b453a6d6701ed0917ba3f24687c98cc475ea6b1488ed4ce89bdaab407afe3d7a5c9008a6f530545ad20e9a3cb0ded62cc4d738afaf6e4b3ff085211138d2ffb447772f62564de2e767b297f27a1bb26b8835c36691991e71a1811c9242458420b59f759fe63237d33a27b223a451f6dddb6c14e0890144794097cf728c1189cda0f7215df6a5ddddb9c8a571de501bc5dc42fa325fa5d6d07e7d692e636d3fa2f7b2f8184a87b86f305dbcf1459c5eab06cac9f78fcf20c1cd064ddffd2cf9be601e255fc49da0a67de2c93ed4fce562369b0439af2dd3baee3c669b01f1195cb6b4d35b45e8dfc4e22ffd3561d704b63e1c860ed1519da6087309c948422dbddb42c36b131bd6478bcf2d3651be217fa2e74475b92bcf010b8c8b86b590a4c2fefa1c7ab7e482aa97815d767ec15817c39fc0146daf35b76b20193db34a33f285c0971201a9c8fa9b95fa4ae284caafba71d2ea8ec475f53b2f64da821970e48908db96f1de5499a746f99fdd789a7220d488e892bfa285d4e6ae0b24a76c13300c848f75a9a6f3d4e85894cb6729d7f9cd590951db23e6b6ad0ab3aa0ba225bba7b82801d20c052fe2c5dbbbb6e76e696547380ced898bc0d99cbd47dcca608160ad19d48ae9597dc0338c4566bd5f478bc8dc268709d5f27482065b63ff7645c72d54488080f36c85fc2487cad86f6ff74ec2e496e4a9c8d83e57dac22a2310c346fbd50514f294aff53b1f965151a27d0a300650ebf62f027d5a80c78249b746e54a628da9d371164047d240a419c27a7e0d8b7747bfb73ef1eb2bde11fa0651b8a622b22ebd44ec46a6cf6cfac1bf2e8f68478b255c451847e51561157e02604843085f55f0982e75eba40edee5cff41c63833ec6ef735287749d1bf3f703297a7d19e61a75946f235eeafad431eb68bb33fdc1e99678f6f99067cb1b714f2830af5633c28b994ea084ce5d772a5b7f0e49c12043ae864c75082140d79d0ddf052d6b44c0c4b273fc400e3eb9a6cd9540361b180329f04d32bf9ecf345e5769e9bf810365c39d97e560577629dbb940fa8cfa1e51ff71d5b45f91c76dcf22671099499c06150684c984f3396e31eed9bbd5cbf6c6e1f8e18ef3671855b170c7ddcfcea7f768d8f94052576529b8e4bb7f957735489810d8b24139ec9c5bcd96d6c3f66b3c2aefb57352c32f9450168d5f8af7c05837314eb58fe8fc2ad604829aa3841ed3b02c734f99a437e0b76647d6016fd861617c24b42b7c48d1dce0ec6fd44705e85e71d1c90535f632b696c43de82c4e9d8596adacd6a91ded5af2827abddcc6bc842c7240dc14317ad5e22212be74cb28febafe29239e3f4100333615ff2816b9ebf480ec5380bbb3f87195c797ec0ec995aa617f21e87b52e9b25125b6e0c10bd81149e1fe27c7a62d2cb0733a9ba5ea1b70a74b8f6cf99ce5827168fb5f072380e236b06f167935d63569a01d87d328c7efa3411160bd9aef919bf38f5fb54f43a12c6ed45a25789d3d39a30357d77ce9dc5a009cb556db6f801110c815f829b41d0cfc390c115c0b531c58ba5adb1504022d0c4e15ee52a4135c89358f0cb2ede6268ad5263a4ecc540fb3a0f46f1402b3aacecf61268097fe4c91388f19acd378bd6b876b206293575efafb4c8fc5a09c62bcf4e446f039074e6a609a5b0ce271dd547b43a3dfac8881ebc2480123019d7357563d2aaf7d362b651b1ecabcc12c30e9cd317c2511f5509a993dee052d3e7cf48a6e73b2b621eb13e17d07845e04cdbf691cbcac3d516e852277c95884ce0bd948ca4339f6555c60c96e5e30836a112c1aece324f76491bb2a1ba3b5aacc573fd2b0ed1642b53b970b614897da3aece3504f19636784d2d20ea863de3f90d4ec0ca38e83cf0726f82507bc9a1a81c2bb5713df3195b07a9e0be766f89b89d16b8d0079e17e7363b5a25661f11c88ccb2ff88831f407ecf31552b56edabcf751af1ed7becbf9331de8148ebd8ecfcf3fc25348bdf64537de1096ed8b1bcab2afea473087c2f292d22f06688b9b45510b48023789606c667d86220f3923d30276c3d786d7ae32f222570e01bb24f74ec0cfb8d1ee216c40c2dd5f37f2b39e5e15c6616035805fd6425e29e264d77fe07812980a12a487a5fd440301b", 0x1000}, {&(0x7f0000003480)="b0a4698709179ec0cc2b62", 0xb}, {&(0x7f00000034c0)="84f60fe7ee7944191c18681ad495975deb819434ca592ee4572e7990e340d58eaa2ab8abbf8d63e687d87dd2841a2bdd413bb90dcccba10315b9a989b2cfb43bef8972d213d44abcaf807a6194cb", 0x4e}, {&(0x7f0000003540)="c2cc512850afc5b4061876", 0xb}], 0x4}}], 0x7, 0x800) 25m20.284054936s ago: executing program 5 (id=3972): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000090000008500000050000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002200)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) (async) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async, rerun: 32) unshare(0x2c020400) (rerun: 32) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x226) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) (async, rerun: 32) r5 = socket$igmp6(0xa, 0x3, 0x3a) (rerun: 32) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) setsockopt$inet_int(r6, 0x0, 0x31, &(0x7f0000000fc0)=0x10000, 0x4) setsockopt$MRT6_ADD_MFC(r5, 0x29, 0x22, &(0x7f0000000200)={{0xa, 0x0, 0x101, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x18000}, {0xa, 0x0, 0xfffffffd, @dev={0xfe, 0x80, '\x00', 0x3}, 0x4}, 0x0, {[0x6, 0x200, 0x1, 0xcd3, 0x0, 0x1, 0x5de052e6, 0x200000]}}, 0x5c) (async, rerun: 64) r7 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) (rerun: 64) ioctl$vim2m_VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f0000000600)={0x2, @pix={0x8, 0x3, 0x3132564e, 0x4, 0x1, 0xffffffff, 0xa, 0x6, 0x0, 0x1, 0x5, 0x5}}) (async) r8 = syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000b5403340861a2275363501020301090212000100000000090400"], 0x0) syz_usb_control_io$cdc_ecm(r8, 0x0, &(0x7f0000000040)={0x1c, &(0x7f0000000180)=ANY=[@ANYBLOB="400323"], 0x0, 0x0}) (async) syz_usb_control_io$hid(r8, 0x0, 0x0) syz_usb_control_io$printer(r8, 0x0, 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r8, 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0x4c) (async) ioctl$int_in(r0, 0x5421, &(0x7f0000000040)=0x6) (async, rerun: 64) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000440)={"c0e251eda28d34b8ef748cf1f54cb15308b630b61a4dd4b092ebf2a94f798f45902ecfd3473e9c388a8492461e356e103c2b342a109531dbe3449e533a4f90c19a1971edfe359028575ddbfb01dfacfdcf8f476bea0cb0ec49100c23420cb8a85c4c52a39b6714044dc493bbf6cbd9a06159eccc94ca6e0233db0a4d428addcd281a1295328150500722da1e6753297da0c4ee694c9f7cfa1bd1b438838fab9727023501a71a58f6dba4c85f5ce2511513e96003f6dbc0080c924bc151e719333de5a15a5a4e31ac8f56a62596eb5f60a08e3d534092996c4fe44e7efd55920e3a7c22510de26df75766a57c660ea872755a7598bc2e4a0c0c748ccde14fbe99bc722789d20e555b7be570e9cca46a994252e7bb4591ef0b3baaa974c6246e5886ec61dd78ab89956d340a5bdaa5209212f6c0e07367c83b11a92cfd431a1485cc1ec004bbc2e71027f0380c68c4bd5f2030443965e50bb1b6ddb8e299c79b8943e5fd5c4bca804dbe4cef39b7a30ce25dff8e8cf4514903cc109801b38f02ea4ae084a42d48bc3a9b5d70563fc82b2425b09640bc28cc0e7e40b740a567e528eb9a0b0dec0dab0c8f3a939146c8133d84ad9b99ad605994c6e81598491af6035842efc380361d46c2a50fff4d56a4dd7a0a170ffbe6867ee21cece64a266ff35f6b5b7a7c78244180d9fc2894cb81daec7044a52109bb7e3f2eb3d41d9759a580a4800b0c97712eda947e6fa9b093111186f5c152ee17fa00c46d71ae8a9e4f632eb85599dd7b087df9c5ffff9884978bfe6f06199b1ed0ddf1e2c0ff7ab0beb992c553951c339f129cf2cf87e502c7635d3397b6f0070d47aa341212a0a77e42711ee6c6999dfa2543cfae2e4b1ba440739c18a91f7b1339b0f53eb346e99c112cd3d5ca908ad3875e56b63721a03e157e0b943a5e249f7f3ab1aaa6cf8ac53e979e95754c50246c593cb9205165b5b73305f61a9dfaf51c9b5dd69dfe71708ad6503700c165a75959a40c6423bb585c450e848def385022cdf2528a2a24cdf88ca04a914b368da1bd3b533974a310b74ed4a81af972401235117fb73f62a8dc2171ebc079ff9622078e10b66ead6c8ee1a777e7cc9f7ec12556d056c2e3d1f7b2e0500f849ba751a7e9045c0deb3fdda081f9e8334acaedcc78c25592a7bf14ae507de886927537826e48cfa8ed25182e2b8181e02940139f69d41e467fbe398be605a60b4b83f2b89300b77d39e9d02a2d6378b5a4d8a4ceb795d39da3a190a15115c433b5e947440cd0e4d4d9fb93d20d463d93cc9c7db45c99d04ca76c5dd583c657216f4c8fb847196f632fabf682d1037a80fd0601253cd580bcdba89ab58f51c19beab9410bd5157aa9e1ce701862448949c532b7f15b579c660d0538e0ea3ccd4a29d4ae9223321bb64f4a7e8fcc5c725d5ab5ce58fde0bb1f9d8f"}) (rerun: 64) prctl$PR_SCHED_CORE(0x4e, 0x1, 0x0, 0x1, 0x0) (async) r9 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000000000106a05310300000000000109022400010000800009040080010300010009210000000122f804090581034000040000ee1a1a796335537056fdd9b1ffce4aab0c3966f420a6d160765e3faa49b672337e30547b63029fe47f8d2786c59021873257bd718d67f36aa63110128f8fbfb25ec722421b316ec806c2446ecf010dbc0ecdbe31f03d421482de066374e0d5"], 0x0) syz_usb_control_io(r9, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io$hid(r9, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) (async, rerun: 64) syz_usb_control_io$hid(r9, &(0x7f0000001040)={0x24, &(0x7f0000000dc0)={0x20, 0x6, 0xda, {0xda, 0x22, "c206328997aeb9583178db4c64578d2479783118ee44fd9bc45516f53d0a29af83ca842f59b4b78b21ac6dc0a8c76214bbd0d589e3530e9789e1d0b1fa8c7fbb0de653ed3428818432aced8ea3c7becfaa7df46f91a154d0fe996b72cc7c3d5ba0006803564f10a8f21dfba3d30e3ee2a0608fce626677a139001803ecb7304a4bce70c6eaa015e03bb8de9488077ac9259730d4f8c25e32a8a3317d3ebc9448908b9d7b668babb2c92dae8f6ba6e1d8b22545e7fe66ce394e2e46675d7081c05582ffadf589f0beed006d85340a82c97baca10d1ee779f8"}}, &(0x7f0000000ec0)=ANY=[@ANYBLOB="0003e0800000e00378dbc98a74c7381de160a2cc2697c026ef51fabfead4313228c5f1c4661b9a8a1729ff96f383e8565769aa4892ad6688ea6effe1a300413c884584857fcb414762aca4550bd50dd387aace836d241cb6758862c54f370e0dcfb853b41d0dbdb0232b92ed10a819c7298988c6b2adb25a413ab17bbc84bddea7d6795fe0f6172d674d82a8527e5e5f76f55ace46a120dbdddf8f9da47de94c42086af23f4f2c39858327559afbaa25ca3d0051842f7ffed32ce2578943171524352adcaf53e133c4e95470ff9d254fa00bf6cfaaf9aa9d2bb4f356fd85ccc6b5a5cfd08f2c"], &(0x7f0000006440)=ANY=[@ANYBLOB="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"], &(0x7f0000001000)={0x0, 0x21, 0x9, {0x9, 0x21, 0x5, 0x10, 0x1, {0x22, 0xdaf}}}}, &(0x7f0000001240)={0x2c, &(0x7f0000001080)={0x20, 0x0, 0xa, "21d536f6555af2871d7f"}, &(0x7f00000010c0)={0x0, 0xa, 0x1, 0xff}, &(0x7f0000001100)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000001140)={0x20, 0x1, 0x81, "6c980008f13a2d5b6fbb8cc7fad96b6da25d12baafe53cde2b048c625922d4d79e04ce2a165f00f8f49c9a3ff72a24dffd3461c6e12236290c7d8e39c9ab76774097a868d7c93ef7a9f19393d1646e2fc6a3700a8f3a1cc627db8755f3bf01dc1bd65da5eccb32ffbe05bd096e3f44055944bc6d7c531492986bb9ee73d5d29416"}, &(0x7f0000001200)={0x20, 0x3, 0x1, 0xff}}) 25m19.873069183s ago: executing program 5 (id=3973): r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xe, 0x2010, r1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xa, 0x8000, 0x0, 0x9, 0x1, 0xfffffdffffffffff, 0xfa0f, 0xffffffff}, 0x0) mremap(&(0x7f00007f1000/0x4000)=nil, 0x4000, 0x1000, 0x2, &(0x7f00007f3000/0x1000)=nil) syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000100)={0x0, 0x0, 0xfffffffffffffffd, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="370000001000010000000000000000000000000a78000000060a0b04000000000000000002000000500004804c00018011000100666c6f775f6f66666c6f616400000000340002800900010073797a30000000000900010073797a30000000000900010073797a30000000000900010073797a32000000000900010073797a300000000008000a7f61d68f0acb6d69001100010000000000000000000300000a"], 0xa0}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/power/mem_sleep', 0xa0502, 0x49) io_setup(0x1, &(0x7f00000016c0)=0x0) io_submit(r9, 0x1, &(0x7f0000000140)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x8, r8, &(0x7f0000000180)="282fa8c2", 0x4, 0x5}]) sendfile(r4, r5, 0x0, 0x20000023896) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@flushsa={0x208, 0x1c, 0x200, 0x70bd2a, 0x25dfdbfd, {0x2b}, [@extra_flags={0x8, 0x18, 0x5}, @tfcpad={0x8, 0x16, 0x5213}, @algo_aead={0xfb, 0x12, {{'morus640-sse2\x00'}, 0x578, 0x180, "b7f597c265a6da23b7648101fff141e39b472bfc32cf55143067e8a7bdf55fd2cdf1389c39cf355984d0ad372756392d30b3daa20a1982757cc0f19f3319b1c1bbff1b328c7013f22e3dc09e888c6b989f859d233e9f83df6aed9d53300df5a975649cfb8692f2bf22c5a066c077cf8f9d7729d7e6392195d321e24bc14789625195f6a89a52da0efa5193873d9fee9ef90501f7248968a4b48636d726bfec9df9895ad2d771aa41502080335d5a66"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x401}, @lastused={0xc, 0xf, 0x7}, @algo_auth={0xd1, 0x1, {{'xcbc-aes-ce\x00'}, 0x448, "71c54459a7c96940997b6fa968d7e1a02c833e0db4b012fb9bf4397a04cc6db984839ba16f8e842316757420ef7debad8d78567c06aeaaecb18e064594b81f0a3d026e30cf7ef3ca5de783b39e82ffb9fe4a3ef46eec4de77a9f8909bbcb9fb332a50657f5bd69de448a93fb030bed8a1b1da1f8e1408c059cde04c6e92eb66a1515c638ab49e77478"}}]}, 0x208}, 0x1, 0x0, 0x0, 0x880}, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @empty, 'lo\x00'}}, 0x1e) sendmmsg(r0, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) writev(r10, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) 25m19.247938059s ago: executing program 5 (id=3979): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000790000000000000000e50000000000000095"], &(0x7f0000000040)='GPL\x00'}, 0x94) syz_usb_connect$cdc_ncm(0x3, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001020000082505a1a44000010203010902"], 0xfffffffffffffffc) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r0, 0xffffffffffffffff, 0x22, 0x0, @void}, 0x10) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r4, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x20, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x240, 0x25018}}, 0x20}}, 0x80) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0x0, 0x7, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x5, 0x6, 0x1], 0xd5d5c004, 0x8340}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000001c0)={0x68, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r1, 0x3ba0, &(0x7f00000006c0)={0x48, 0x1, r5, 0x0, 0x7, 0x401}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r1, 0x3ba0, &(0x7f0000000340)={0x48, 0x1, r5, 0x0, 0x6, 0x100000000}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000080)={0x28, 0x6, r5, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x1000}) r6 = add_key(&(0x7f0000000080)='big_key\x00', &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000200)="475a251bdb1e", 0x6, 0xfffffffffffffffb) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r10, {0x0, 0xe}, {0xffff, 0xffff}, {0xf, 0x6}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xf2dd, 0x8}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x20040084) r11 = socket(0x400000000010, 0x3, 0x0) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r13, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x0, 0xfff1}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) keyctl$revoke(0x3, r6) add_key$user(&(0x7f0000000000), 0x0, 0x0, 0x0, r6) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) syz_io_uring_setup(0x4ac, &(0x7f0000000380)={0x0, 0xcd2c, 0x8, 0x2, 0x13a}, &(0x7f0000000000), &(0x7f0000000200)) 25m17.362638103s ago: executing program 33 (id=3979): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000790000000000000000e50000000000000095"], &(0x7f0000000040)='GPL\x00'}, 0x94) syz_usb_connect$cdc_ncm(0x3, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001020000082505a1a44000010203010902"], 0xfffffffffffffffc) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r0, 0xffffffffffffffff, 0x22, 0x0, @void}, 0x10) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r4, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x20, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x240, 0x25018}}, 0x20}}, 0x80) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0x0, 0x7, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x5, 0x6, 0x1], 0xd5d5c004, 0x8340}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000001c0)={0x68, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r1, 0x3ba0, &(0x7f00000006c0)={0x48, 0x1, r5, 0x0, 0x7, 0x401}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r1, 0x3ba0, &(0x7f0000000340)={0x48, 0x1, r5, 0x0, 0x6, 0x100000000}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000080)={0x28, 0x6, r5, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x1000}) r6 = add_key(&(0x7f0000000080)='big_key\x00', &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000200)="475a251bdb1e", 0x6, 0xfffffffffffffffb) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r10, {0x0, 0xe}, {0xffff, 0xffff}, {0xf, 0x6}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xf2dd, 0x8}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x20040084) r11 = socket(0x400000000010, 0x3, 0x0) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r13, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x0, 0xfff1}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) keyctl$revoke(0x3, r6) add_key$user(&(0x7f0000000000), 0x0, 0x0, 0x0, r6) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) syz_io_uring_setup(0x4ac, &(0x7f0000000380)={0x0, 0xcd2c, 0x8, 0x2, 0x13a}, &(0x7f0000000000), &(0x7f0000000200)) 1m27.028097729s ago: executing program 2 (id=8124): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000080)) (async) r0 = socket(0x848000000015, 0x805, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x400006}, 0x1c) (async) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) (async) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000340), 0xf2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000040)={r3, r3, r3}, &(0x7f0000000000)=""/50, 0x32, &(0x7f0000000100)={&(0x7f0000000080)={'sha384\x00'}}) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0xfffffffffffffffe, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000200)='\x00\x00\x00\x00\x00\x00', 0x0, 0x3, 0x0, 0x3, 0x0}) (async) r4 = socket(0x1a, 0x5, 0x4) (async) sched_rr_get_interval(0x0, &(0x7f00000000c0)) (async) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x0) (async) syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x0, 0x10100, 0x0, 0x81}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000003c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x20, 0x4004, @fd=r5, 0x823, &(0x7f00000001c0)=[{0x0, 0x10}], 0x1}) ioctl$RTC_EPOCH_READ(r5, 0x8008700d, &(0x7f0000000140)) (async) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) futex(&(0x7f0000000240)=0x2, 0xc, 0x1, &(0x7f0000000380)={r8, r9+10000000}, &(0x7f0000000400), 0x0) (async) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x54, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x54}}, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000100)=0x9, 0x4) 1m26.822977838s ago: executing program 2 (id=8125): r0 = socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000000)={'ip6tnl0\x00', &(0x7f0000000080)={'ip6_vti0\x00', 0x0, 0x2f, 0x2, 0x6, 0x0, 0x19, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x1, 0x0, 0x9}}) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0xe, r1, 0x20, r0}, 0x10) getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x3f, 0x0, &(0x7f0000000040)) 1m26.447449128s ago: executing program 2 (id=8129): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f00000000c0)={'filter\x00', 0x7, 0x2, 0x3e0, 0x1f8, 0x2f8, 0x1f8, 0x2f8, 0x2f8, 0x2f8, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {@mac=@broadcast}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'vxcan1\x00', 'nr0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac, @broadcast}}}, {{@arp={@remote, @multicast2, 0x0, 0x0, 0x0, 0x0, {@mac}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pim6reg\x00', 'vcan0\x00'}, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "dcbc4f0fcafe5fd600342efa7968d220b64d039e8a81d171eeb2e9630554"}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x430) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000080)=0x6, 0x4) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r0, 0x8002f515, &(0x7f0000000000)) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000440)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x26fe9}], 0x1, 0x0, 0x0, 0x804c040}, 0x0) 1m25.474807061s ago: executing program 2 (id=8133): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x9, 0x0, 0x5, 0x0, 0x5, 0x0, 0xfd, 0x0, 0x0, 0xfc, 0x1}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000500)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000002c0)={r1, 0x4, 0x30}, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x7, 0x0, 0x8, 0x5}, 0x48) sendmsg$NFT_BATCH(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWOBJ={0xcc, 0x12, 0xa, 0x201, 0x0, 0x0, {0xf}, @NFT_OBJECT_TUNNEL=@NFTA_OBJ_DATA={0xb8, 0x4, 0x0, 0x1, [@NFTA_TUNNEL_KEY_TOS={0x5, 0x5, 0x4}, @NFTA_TUNNEL_KEY_OPTS={0x28, 0x9, 0x0, 0x1, @NFTA_TUNNEL_KEY_OPTS_VXLAN={0x24, 0x1, 0x0, 0x1, [@NFTA_TUNNEL_KEY_VXLAN_GBP={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_TUNNEL_KEY_VXLAN_GBP={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_TUNNEL_KEY_VXLAN_GBP={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_TUNNEL_KEY_VXLAN_GBP={0x8, 0x1, 0x1, 0x0, 0x1}]}}, @NFTA_TUNNEL_KEY_IP6={0x7c, 0x3, 0x0, 0x1, [@NFTA_TUNNEL_KEY_IP6_DST={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NFTA_TUNNEL_KEY_IP6_DST={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x32}}, @NFTA_TUNNEL_KEY_IP6_DST={0x14, 0x2, @empty}, @NFTA_TUNNEL_KEY_IP6_DST={0x14, 0x2, @private0}, @NFTA_TUNNEL_KEY_IP6_DST={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NFTA_TUNNEL_KEY_IP6_DST={0x14, 0x2, @mcast1}]}, @NFTA_TUNNEL_KEY_FLAGS={0x8}]}}, @NFT_MSG_DELOBJ={0x24, 0x14, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x9}]}, @NFT_MSG_DELRULE={0x7c, 0x8, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0xa8e}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x7}, @NFTA_NG_TYPE={0x8}]}}}, {0x18, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x12}]}}}]}]}, @NFT_MSG_NEWRULE={0x10c, 0x6, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0xe0, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @numgen={{0xb}, @void}}, {0x48, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x38, 0x2, 0x0, 0x1, [@NFTA_DYNSET_OP={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_DYNSET_OP={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_DYNSET_SET_ID={0x8}, @NFTA_DYNSET_SREG_KEY={0x8}, @NFTA_DYNSET_FLAGS={0x8, 0x9, 0x1, 0x0, 0x2}, @NFTA_DYNSET_TIMEOUT={0xc, 0x6, 0x1, 0x0, 0x5}]}}}, {0x4c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_TYPE={0x5, 0x2, 0x83}, @NFTA_EXTHDR_FLAGS={0x8}, @NFTA_EXTHDR_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_FLAGS={0x8}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x83}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x94}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xf}]}}}, {0x38, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_EXPRESSIONS={0x10, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @ct={{0x7}, @void}}]}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}]}], {0x14}}, 0x2a0}, 0x1, 0x0, 0x0, 0x24004055}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) (async) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x9, 0x0, 0x5, 0x0, 0x5, 0x0, 0xfd, 0x0, 0x0, 0xfc, 0x1}, 0xe) (async) shutdown(r0, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000500)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) (async) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000002c0)={r1, 0x4, 0x30}, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x7, 0x0, 0x8, 0x5}, 0x48) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWOBJ={0xcc, 0x12, 0xa, 0x201, 0x0, 0x0, {0xf}, @NFT_OBJECT_TUNNEL=@NFTA_OBJ_DATA={0xb8, 0x4, 0x0, 0x1, [@NFTA_TUNNEL_KEY_TOS={0x5, 0x5, 0x4}, @NFTA_TUNNEL_KEY_OPTS={0x28, 0x9, 0x0, 0x1, @NFTA_TUNNEL_KEY_OPTS_VXLAN={0x24, 0x1, 0x0, 0x1, [@NFTA_TUNNEL_KEY_VXLAN_GBP={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_TUNNEL_KEY_VXLAN_GBP={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_TUNNEL_KEY_VXLAN_GBP={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_TUNNEL_KEY_VXLAN_GBP={0x8, 0x1, 0x1, 0x0, 0x1}]}}, @NFTA_TUNNEL_KEY_IP6={0x7c, 0x3, 0x0, 0x1, [@NFTA_TUNNEL_KEY_IP6_DST={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NFTA_TUNNEL_KEY_IP6_DST={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x32}}, @NFTA_TUNNEL_KEY_IP6_DST={0x14, 0x2, @empty}, @NFTA_TUNNEL_KEY_IP6_DST={0x14, 0x2, @private0}, @NFTA_TUNNEL_KEY_IP6_DST={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NFTA_TUNNEL_KEY_IP6_DST={0x14, 0x2, @mcast1}]}, @NFTA_TUNNEL_KEY_FLAGS={0x8}]}}, @NFT_MSG_DELOBJ={0x24, 0x14, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x9}]}, @NFT_MSG_DELRULE={0x7c, 0x8, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0xa8e}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x7}, @NFTA_NG_TYPE={0x8}]}}}, {0x18, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x12}]}}}]}]}, @NFT_MSG_NEWRULE={0x10c, 0x6, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0xe0, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @numgen={{0xb}, @void}}, {0x48, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x38, 0x2, 0x0, 0x1, [@NFTA_DYNSET_OP={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_DYNSET_OP={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_DYNSET_SET_ID={0x8}, @NFTA_DYNSET_SREG_KEY={0x8}, @NFTA_DYNSET_FLAGS={0x8, 0x9, 0x1, 0x0, 0x2}, @NFTA_DYNSET_TIMEOUT={0xc, 0x6, 0x1, 0x0, 0x5}]}}}, {0x4c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_TYPE={0x5, 0x2, 0x83}, @NFTA_EXTHDR_FLAGS={0x8}, @NFTA_EXTHDR_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_FLAGS={0x8}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x83}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x94}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xf}]}}}, {0x38, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_EXPRESSIONS={0x10, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @ct={{0x7}, @void}}]}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}]}], {0x14}}, 0x2a0}, 0x1, 0x0, 0x0, 0x24004055}, 0x0) (async) 1m25.223412969s ago: executing program 2 (id=8135): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r0, 0x11c, 0x4, 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x122102, 0x0) setsockopt$RDS_FREE_MR(r1, 0x114, 0x3, &(0x7f0000000040)={{0x0, 0x7}, 0x22}, 0x10) accept$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, &(0x7f0000000140)=0x10) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000080)=@userptr={0xfffff364, 0x3, 0x4, 0x8, 0x5, {0x77359400}, {0x2, 0x8, 0x8, 0x1, 0x2, 0x4, "f2eb8719"}, 0x5, 0x2, {&(0x7f0000000040)}}) 1m25.171932741s ago: executing program 2 (id=8136): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xa0) r1 = syz_open_dev$vbi(&(0x7f0000000040), 0x2, 0x2) ioctl$VIDIOC_G_SLICED_VBI_CAP(r1, 0xc0745645, &(0x7f0000000100)={0x6, [0xff, 0x9, 0x8, 0x7fff, 0x5, 0x800, 0x7, 0xfffa, 0x7, 0x1, 0x2, 0x10, 0x400, 0xa, 0x5, 0x2, 0x7, 0xa, 0x81, 0x9, 0x4, 0x83, 0x97, 0x4577, 0x2, 0x5, 0xff19, 0x1, 0x4, 0x8544, 0x5, 0x5, 0x6, 0x7685, 0x98bd, 0x0, 0x7fff, 0x8, 0x5, 0x2, 0x0, 0x9, 0xe9da, 0xf, 0x6, 0x3, 0x4000, 0x5], 0x4}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000080)={0x1, 0x5, 0xf7fffff7}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newtfilter={0x30, 0x2c, 0xd2b, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x3, 0x4}, {}, {0xe, 0x1}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x893}, 0x20040084) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001300)=@newtfilter={0x24, 0x2c, 0xd2b, 0x70bd2a, 0x25df9bfd, {0x0, 0x0, 0x0, r8, {0x9, 0xfff1}, {}, {0xe, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x8000) unshare(0x2c020400) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYRESHEX], 0x7c}, 0x1, 0x0, 0x0, 0x804}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x1c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x14, 0x18, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x8}}], {0x14}}, 0xa8}}, 0x0) r10 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340), 0x63682, 0x0) fallocate(r10, 0x11, 0x0, 0x100000000000e) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x6, 0x0, 0x0) 1m16.700270501s ago: executing program 4 (id=8164): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x34, r3, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}]}, 0x34}}, 0x20) sendmsg$L2TP_CMD_TUNNEL_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x14, r3, 0x325, 0x0, 0x0, {0x8}}, 0x14}, 0x1, 0x0, 0xc00e, 0x40001}, 0x0) 1m16.544080019s ago: executing program 4 (id=8165): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x129c81, 0x0) ppoll(&(0x7f0000000280)=[{r1, 0x6200}], 0x1, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x15) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x4, @empty, 0x2, 0x3}, 0x20) r2 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r2, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x6}, 0x20) socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000001000500050007000000000008000900030000001400200000000000000000000000e1ffe000000108000a0000000000060002000100000014001f"], 0x5c}, 0x1, 0x6c}, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000004c0)="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", 0xfb}, {&(0x7f0000000900)="0f198d5aa5caa1c55b84b414797cbdd4e8c576a921a070fc828060506683fd1106a961ac55b5b8ea3342ca7de5559ca2c14e05e42aed8ba14b2c78cb540f71a817d80fbf1945a046ebda494a8048a106a4d49d7f214735ada53397db3b203885ce39ee48d69465935eade21ce36e61826c52c82f038341d9bab5687c740ed3c18897094e7e1391eb84a4052e03c0c7c39ae86d454938f65e284620b99481c33d9f5e5b7a6c0d7548723f55b213c76be37f40c850c38e265758ebd8238257a146d6eced16fd658a784c928fea7a841db1a7fd6520442dae5fc0d3a3d3a5f16fcf6fe4f062ecdad7d0f3c6cd339339533c0ef28ad1e2729907094c3de93c1b1b00ad6df89507000000fb7565d3a8e9eaea020ed173c2179fb03e0944460989240a689c7fe795d310be4e7a6b778a903280dbf426b39c3603c49049980767e31edb997f59785184cbd7b9070400000073c745f71db0906cb51780f908fa61634af8ac85d9f04f3dff0a948e81cd3229a59aaeb00995358155343e3239588a0383e4df109d5ca24276d0d83a27d0e9bf681c1bbea12a6f3c20ad50f63430333bb327eb6ae32fe8809065bce26d2dc2fbb2b48d404637d61fd86852e0e1b6ccc6f75b1107aaa5f60ef45f94e953b3f213c3cb4ca4c716565078c666f84e1a99bb4cb5c7190648132f6ff1f6cb79b93f20752753c938da6241607a742361d995188b23cb4b8269e98e82258569d962620673433748e476f7cc3e37db88639c525ff3a502c82c283b00aecfe7734ab369e1ed7c75e27a5a333641817baa3ea37844e20e6266c5095abf9d47ca5f8ad93f1a4d8795daec222ada00d65cf91425fae7939ceaa8d94ec1ab5082e1d251c27b3132119b350e81771f3733be232ffb90c03a818bf458aac3314007a8e58e404bed6b897608b01e7e26a54433e5f5c74a2ee3c2fc50067be05a677f122b7dba7010830b879a41b579d44158fbc84589ea05761d2d369853bea84dfb8081ed7b891dcb3bb3361534fdc5252e4964aed936ad2838e7af14fc65c7c1c6d44c6256f2462ae83cfd6a6b2651da607fe79d345e5080098e9e6e7482cc5c267e00d8d09dcde70b60fe6220fe953054720185010000f1885ecc2f106b66cd99131523c99f6102ddd7403791b3a7ac59b256cc4c938fe01740ae4f19b5204ca305b1666b0c2a7e5015d6d530995843adfbac39543043fc623c58bdced533123b870554cd9b1868e7999132d3c1650b2b97afab309f42a410d24a213d2cd0", 0x386}], 0x2}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40) r5 = syz_io_uring_setup(0x51c, &(0x7f0000000140)={0x0, 0xaee2, 0x8000, 0xfffffffd, 0xb7}, &(0x7f0000000100)=0x0, &(0x7f00000003c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000040)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r5, 0x3926, 0x2000, 0x4, 0x0, 0x3e) 1m15.584345119s ago: executing program 4 (id=8169): r0 = socket$packet(0x11, 0x3, 0x300) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000f400cf1077c877d474ca010203010902240001000000000904d800020805010009050a02100000fa00090582025004000035bdf9e3ddddd04400"], 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000480)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x81, 0x1, "ea"}, 0x0, &(0x7f00000003c0)={0x20, 0x83, 0x1, '@'}, 0x0, 0x0}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x3, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000000300)) r4 = inotify_init() readv(r4, &(0x7f0000000140)=[{&(0x7f0000000340)=""/263, 0x107}], 0x1) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) fcntl$setstatus(r4, 0x4, 0x42800) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSBRKP(r5, 0x5425, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x4b301, 0x0) write(r6, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000014d000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000080)="65660fc736b9230200000f320fc5b0040000000f0f10970fe8fa6426660f35c4e21d4501c744240000000000c74424021c320000c744240600000000c4e17de69222ad2eec0e476e04b8200fae82ef66bafc0c66b8004066ef66b8296c", 0x5d}], 0x1, 0x10, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 1m12.67769439s ago: executing program 4 (id=8177): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r2, 0x11c, 0x4, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b7000000df000000bfa300000000000007030000f0ffffff720af0fff8ffffff71a4f0ff000000005d040200000000001d400500000000004704000001ed0000620300ff000000003f440000000000007a0a00fe00ffffffc3af000010010000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710e4d58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00c37dfca3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebba2c598b4fc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a1074649c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c0dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6acdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c3bfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fed000000007baa5b6a686b50f0937f778af083e055f6138a757ebd0ed93517a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c25000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca485683252b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a0032f37ff559be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee07751532d5e7d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e2fa3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef907000000f01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e015cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130b51d6c9b94c5513df2d85e8c01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb581012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef670000000000000000ba470bfe62fe2933082149d42e8a000000000000"], &(0x7f00000001c0)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r3) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000840)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000240)=ANY=[@ANYBLOB="60010000", @ANYRES16=r5, @ANYBLOB="010028bd7000fedbdf2544000000080003", @ANYRES32=r6, @ANYBLOB="0a0018000303030303030000080070000400070030015a8054000080130002"], 0x160}, 0x1, 0x0, 0x0, 0x18000}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x100000000009, 0xa, 0x0, 0x3}, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4043, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) syz_usb_connect(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120101029b95de207d077a621000010203010902240001380880040904dae00203"], &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0}) r8 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r8) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000640)={0x2020}, 0x2020) setsockopt$inet6_tcp_int(r7, 0x6, 0x10, &(0x7f00000001c0)=0x8, 0x4) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r9 = syz_open_dev$swradio(&(0x7f0000000380), 0x0, 0x2) bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x18}, 0x18) ioctl$VIDIOC_QUERYBUF(r9, 0xc0585609, &(0x7f0000000440)=@userptr={0x0, 0xa, 0x4, 0x0, 0x18aec3a0, {}, {0x1, 0xc, 0x6, 0x3, 0x2, 0x7, 'wCZb'}, 0x6, 0x2, {&(0x7f0000000400)}, 0x3}) 1m9.991339149s ago: executing program 34 (id=8136): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xa0) r1 = syz_open_dev$vbi(&(0x7f0000000040), 0x2, 0x2) ioctl$VIDIOC_G_SLICED_VBI_CAP(r1, 0xc0745645, &(0x7f0000000100)={0x6, [0xff, 0x9, 0x8, 0x7fff, 0x5, 0x800, 0x7, 0xfffa, 0x7, 0x1, 0x2, 0x10, 0x400, 0xa, 0x5, 0x2, 0x7, 0xa, 0x81, 0x9, 0x4, 0x83, 0x97, 0x4577, 0x2, 0x5, 0xff19, 0x1, 0x4, 0x8544, 0x5, 0x5, 0x6, 0x7685, 0x98bd, 0x0, 0x7fff, 0x8, 0x5, 0x2, 0x0, 0x9, 0xe9da, 0xf, 0x6, 0x3, 0x4000, 0x5], 0x4}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000080)={0x1, 0x5, 0xf7fffff7}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newtfilter={0x30, 0x2c, 0xd2b, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x3, 0x4}, {}, {0xe, 0x1}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x893}, 0x20040084) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001300)=@newtfilter={0x24, 0x2c, 0xd2b, 0x70bd2a, 0x25df9bfd, {0x0, 0x0, 0x0, r8, {0x9, 0xfff1}, {}, {0xe, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x8000) unshare(0x2c020400) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYRESHEX], 0x7c}, 0x1, 0x0, 0x0, 0x804}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x1c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x14, 0x18, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x8}}], {0x14}}, 0xa8}}, 0x0) r10 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340), 0x63682, 0x0) fallocate(r10, 0x11, 0x0, 0x100000000000e) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x6, 0x0, 0x0) 1m8.737630223s ago: executing program 4 (id=8184): socket$inet6(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000280)={'ip6_vti0\x00', 0x0, 0x4, 0x0, 0x3, 0x5, 0x12, @mcast2, @private0, 0x0, 0x8007, 0x100, 0x5}}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80021}, 0xc, &(0x7f0000000380)={&(0x7f0000000a40)=ANY=[@ANYBLOB="741000002100100027bd7000fddbdf2500000000000000000000ffffac1e0001fe8000000000000000000000000000bb", @ANYRES32, @ANYBLOB="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"], 0x1074}, 0x1, 0x0, 0x0, 0x20000000}, 0x28880) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) setns(0xffffffffffffffff, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r2, &(0x7f0000000a00)=[{{&(0x7f0000000240)={0xa, 0x4e20, 0xc52, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4}, 0x1c, &(0x7f0000000200)=[{&(0x7f00000004c0)="f3", 0x1}], 0x1}}], 0x1, 0x4000841) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) fsopen(&(0x7f0000000100)='aio\x00', 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @last={{0x9}, @void}}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xe8}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x2, 0x0) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x20) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004300)="00e7a0633e8438bafa888b9b02144af32e296a0a01dc194d649b6fa26d6d5e63bac4a04baeeb8aacb22c6eec461b67db6a737737c6d2687acb00572f92e3fdb5d0cb2f11121c557a943020200755bcab77b39c406b733239e2bb1175b9322ba39dc7d67da8f77aed1714dae2e6c24c3ea96be9d151c6ab7b3c54bbe507b8b2461fb4be8dc90042184af6d48f8ace16abb5e3fc943cf61cdb75624a259bdb5f7829b9775820f85f2d1a6ee6c6c2af4fd41ab8a41ecb2612abf13cd2c6f9f3e6db505e4bbe68cc000cf5fa6d5636191a4b366ab59af52132a3f9678d4ed1bd577bacffb3b52850804005eebf3dfa4763168ff30490a11acdbbf4c3312a45f30139f6b72b1e7cdec185006bb30e0e8fa88da2cefc718cae7e9830f7ca101e4e23c6bd16bfacf4a9927fb13af4b79c86ab999beda4ad396abdda354a42fb4ef21d6749175dc21a0cf9191aa4f90d274b50370a580ad8dcd166d2b06c0d8b071973c3fde30f7e2bc371a51ca5866bf8b24eaac75bf482dd4436b214ff62d32e20df223b0b680ede28b3a49e66e330a8a3ecace0db9855d235d5ff23765e742d1a739c2ac8743f4c62664a3b347279da55a1a5b16e1e2828b584a013577d50f890e3894d9e8d6bfccdfb2b70221f12a7fac24b7a8818edce72b65f622c77bf1312771a2c0d805ec9a25c536c91868762032255be78903b77b2c1a773a03996fabba69214e76f5df6df0375b592692a2c3c86c75a3be56fe598ddaea0b9901d20db7e43e128e04e5509283f833c24c625887288459db5727210ba9a301fb8c934dd1d8dca68039fe5b2e1a8d7cdfc6d875e5851098100c3cd42544ed90bb55b58d20a501fabbc485d148c615a3b070fa0520da2ed68ee115a4411d5418b47f3d95616096f67a7a36d68f1e8df82eca8ef96fb4a96b3422fe046a37ea5f5967513a559bd770fecab7228b0692f439765c9e9c6ea4fc608e0b27f9b49064daa2bac06f83f6d87ebc61fa3a29bb5ed39641245ce8cf43770df32a84838802b0827ca5a40e2003915e2ed108a005637bb028d29bd2cfd28a1bd55e67ed1b6b7b72163c27c4b0e36d1b134d6dfdb165a66fb46498fc04bb8053b84098af5b18758631d1318d625a6fa4d3ce5a4d3a90e10c6363a26b5ae96c2d56f87ad21a6118af6847d041f88f852ddc3f250c088ef5cb31198f3ac81cff9a5bab26ed56c09f8416188974e08349f7da28fc754b98c1ac4ea0060ac1e1b1c49f7dbadbc59254b265dc418cab9ac14e2bbecc4c3103543e37984efb1f61315e10d2b422732217d3a9b0cfe4561f3765d3bda60be239e02bdc164dd631582e8c87dd8fa60d63dcf9e7f3dadc4ce5e4433a42425b8ee8cb8a2defab0bf9b6109c90b5655b79b18c06884f2670a985d454e08e54de69f645cb0cbb70620bd988ee717c310ae77b4abe81c01c6e7f47268ee20bc30b9062830917705682eba2c5ef966b877f33294aa5f8b29d3dd5ed92302087f34fa18d19a005de05f925e3e93c8c0f24507ff20cd23d9ae5452c32ff58c78ccdb1ab32c98edfaa6d2c3971934ca8f849ac360c286566eb72b0793f12cef84bd282368d533247ee750f18aeda484167f3d680e4aaa3aa0694441d4ff6a71531f1a30f87eeb71afd04c5d686e1f86f27586f4e2c8ff77c09612ba1af9b3fb93efd31af42f8e0498f35d07c662b743a08f2839cad8f95b90cbb4fc0ed2ca45dd093a549cde4c6ff08ce09a2cbc6f9f78b6f96643357f92f8f403202742057731fd3e343a87c0affe803cfdbddb8c2694ab63f2dc35da705624747e30a943000fc82c40f10e1975d2e2ec15aefd531b6dbc053606b054dc976f44d5b5a5f37e9c08532ce16cf8bca55ab6c814ceb855ab50b8b52620f8645a9dc25fcb732080d84bf39c3ebb235b4d96da527b64ec4b72f69e91d16a4efcaf76f2e1f968ca68a06f60b01ec7becc9ffd7877c0992cb0f80fb3daabc039513896bd7697843be06aba53e7761e11e075c61ef2d897d4d9f90041c14283746feeb3f0d456ba4be27843350fe43e7c1110b4439489139f6dae01c43f23ec71f08d3042663c65e059d368e4e2c6e49de45bf078d3182a1bc1208bc59379e705aa3309579947409f2a8b3d79099c8619f916e7a6fa333d2312a274247156b8c25cbcfcc59ef13339c700f56a8691dff39bd4338789001872c0d90929037dc0ad99b380a6ba73f331f73f9274f4c2bf5233d7482edf37bf6ffed4f2c0ee44a1d57cae0d644f25591dc03bf837571a82d0c31b61be7ff85a5b3843e8f96a50eaa43f5c137ecfc4e4530d08a2afa4ba02fcc50117a4ad0d5862302017639344c82749f673dbd650e49b35302d0acbab45c0973198291bb42b4cfcd3b0c272074341ea8eca19e122cd234da6d41bf5eedb706e16c17687ed8b84db67130796d26b94eac83bbcd785b603242bd6252c155711efd7dd22cc54e1eaf6d910d0f22c701f3d4da0314dd2829c6ee13bbcbd126558b47b8066bf0766c792a012315bd29bfeda8f28a2c1f4e638b701758e19a0e5bd5b4f19048b00a877d956292e345f8a3a8367892f955bcb5e50ca145ec5e2c9309e25941bd277e393aaad38f9b72a42514b27da6856223c37a1fc1327fa760551d3fdeb0b222ab180b16c9eea138cf4f327e88fdfee293c5b6b007028eb796a60772148282dcd17ffc1c90ed8b6540ede933545ed5a5301d6ff39734444ff3d85cda4ac3befa5083a4685e9e231eba4a91a35f4f7f48fd5ac2447c64c010e2a9f8e80691c95460e1995444466ec5f3cd71fe509a26ff0b7f3254bc8c3255e903834e841b37c70b267fb33deb0d1ed4ea84a869453ba508fc255b12cf847103d5195046c930ae4a75c956f22fcfe4186d547686b54bd7a534940d5d62216994eac0e8ed3bd2bd59354e6b9c6b5b10511d54a8b928040f1e1024a423b0cf519fc6e9673df5c48c0778c7edb8fa8d8ace77463a77d2d6313160e1ee72742953e433b6732ced59c93464fd91520847db238610ed0c289fc55647881a7d6257cf28090c75a6f19df079cfd35742a74a5ab270314f7c8039c20ff0f3f543d029b75a741b5dc6425241ac2ffabf1f96288e6d4ba34da09fb6049c2c8753fbd41fdb4bc68c57bf374ef4feb0df00c41319debb26afba2ff39e1799a1c2137f4e920ee5b02d93789b6b0c853e8143dae5b08ee85da2ea7c31803610ce797293ea95c16ade6dae2afb008e59d8b9505737f008b5227df5f1e4eb5d707f502698a17ead9b1f5ec09dff34248ff2fb153dc6df4812e39754a4baa42e1d8b77fbddef3ca091701ac28ae5fd422dbd8db5b122d3965383abc37a52d2fca5ce56eba974dba3d059cefe40e3c35c9daa8ae31198214303c1dcb90d58fc983ccfd504fa43925636f94b128d44e8aa5cd3ecfabd50a84062d03f7508a0575ab65ecc749d3ef566fdbc529a8139b7a7fb3a9bd784df52cddc6f2699044ba47615163fbbe19f3d88d38a8b71fe52b2611ca74341429d1cef1a7e350545be29d2caa560e60352cab074c298c44ca2c07f9795ce52f10aa3e2fcdef371f24e309b19e52218881f25a4674527edbe3b3bd0b9b536d810c6f9500c0c81bcfd9a440dd91c1d35c52758d2b2ae1a8497bb394c4f09d3947cf777727b0d1daf5ac4fe4fa3c247a791702cb84b96321b7fec81bf549d4eb5d6dafe019b26187417c68b064e4308908535a3e77b6cd3e28caaf12d726f15590b7958e40134d045a38cbb689131a7e85532f1c63dd4bac9e4d00645cd7b2b71704563f3738b92044a8153f6ba717800ab7cb238175c376d7add2c5ec38e4c856f1ab9c3ee33f6ca6d576ae908dd290e4bae23470182e253765e04e8eb02a791c4396a511ef467879a9e2818b8a4b1b0b39a6c44e816e3ebf6e3be93929dfcb38d5dad7d20b60215447674d0608b8b02331ac20e57083cb9b4449fecbb149441aea0ad82f00a82d87d743fc80d410922bc20923516885440f43c9f32beb81ce148def6140952583a7825c2d2fe012d52d30ef66d32a8a0864ac5c1737e2506228d41ff0515ee80be4cf012927dde0fd2a07cac68eff8c4437f2844d4df07936fd8753e5909f962c5c767f8719cc295bdfa8a16f3f36ff56e34d7b14b6b8c46d5af248b04a9c5396f84990e23d145670950bce5f5638e5e2cea37c371a4483729338f1305cbb32fa1c05dd9d21d2a69e5fa3abe9a2dad2237be20b4088393c04aa66cf13718de4bffac72f641a8c017a1d5568fa15a6a06e4dc833874ec95af6f115bdadf15179bfc8c4e3e64f26f1299e282c4ab397340934efc1e601afc630fe195e8ae7d8da1310568cab4f2fad085d0ec39710d8b7c812b3fd55c6f50925bcfc90fbcb35b8daa0f1e1f69d82fae2034039f7ad6921694ed48a55a68bc541e6d86f1e33c261a92d48b50eb58a03d8e31b2f6564a4ddc3ee988d0dc47b4b610a9a9dcb87571b5c1edb3362df0ec3d58872157e0f7247dfa8100b4478b705702a5620c9201010f40232327550db333e845dbecd6aadbd0a94c064862b1100b4dd45ece811b8c0275e3753e11b4bcd8bc5ed7668e72afa5bc5cc17b4c313273755f532ecfdefdf2d5c47999453a3b7c158d98332f0bd3a820cfb2c8c3bcd43197e7395a032cec6e41662079f2f654965aebc393e22b5c8516d9b8ad01e33ee481a4ac46a2df304dadeaa9e5274d340aaebe14dcea315fe1279f1a41a5c7aa8c94bf4b3d48757503171f53488e01210145e62c0de7c39737848dbdb1b207d4d33b8de180b020e8a76b1b521905e5e3ce97292f8558fb68efdee774681bfffcf1dc3eef35f660dd1659a32950de2d50e762313beee330d9c2a9fe8ce5e4e61ddd86378d3551335f6ef62053d3b248a8c33a11abdf3f3aa1975a15f4a6957a13d5b12a44d0f2b52b9a2d996e98c630c0f2abca80c7ae89efcf81ae284a0d19582cb1319d207077e5657d245533181ed6e07e0f7647123fc46c37bd75b4f4d181112b4a08acdcf445332cb9dde69a0923dd9244dd2ecd818b19588939922e3b2d8dd9d9fed95fa55b0e4564b38aca2c4d24eebc634664400177fbdeaeb278bb1d8eb11baf4be5c87d4f8d9a855bfa75df4c51fb4eec87a27c59df9a47d82523b08022a1c0fb22ff6f93c3d2cc22a4111a6ec5be428cba33617be65739c2240248f3a02d01ddf2d6aca9e537a2296b16d082d2b868504371dd5e41898885b03ebfaca73b40e8924ece83c1c80de6ce14943e1199c6f81bf359f44c3ed5ae3c6eacb730b1039f0b6555347bd566dfff45a7a2176420ab2b40916a73b66a3ad07af6e1ac5597393d203fa1ad34d4564af956a0a3e2997e27a4e5eff67dd89cce8875d995e00c1858234f149f6ad4cac2b8056966f726df57b8c4ee8f22f23097ba1471b1f1036e3a499400fccdb75b56eb13e9eca1407d5bff4b075b06d00fcbfcafc28431eb33156232e73c6577e3eca437330c494ede57b9609e1f40634918dea767338b5542197410cdc000143ace89ca0b7bf645b3267f74767d7c7fce05d2f59c137204e56bfa711f66903c511f681cf7a1b4f9fc0f42b7c438ff8957e1059375321df5b0c5c884f46d94c21686e1300582d34928bc398653118f79bfeea2e7cfbbf31a7718f4aab50fae57db94203d43e060365c9a7455241be03d828ffc3783d0f6aa170c0866eb0dad07485831526922d8348a7a16e2e9903a2ac93c58c6dce83127fab17703ec004a519ae5675baffb31bf4b52f9ca992a84017a44d68dc693abd829947342f277fdcbc87168bcc03c32b8b1e81a1915af2517c464af07d52b79d1b0e53164c82ba049f81e92ed1dc20a88fd72e9ce7aa4b22a7cc57dc5527d14f62bc29cfc9d57ed26fd523cac39ac00ba12d3a49d694709924275fc0793d56acf9558818dc9eb210649fa5307d45886b879257d627cee0542b51c2ce6ce134100efb47c92456ece5b73cdc051f570810a8d534222649eb56cf73a377162b753de6c282bcd4a25dda21dd10901bd8dfe8fd4ba8a70811c39707beded23dd60f23e2933372e3a6bce099899b07f0a4c4956fd98e956a8649622c77717de099463c0c6c9389ab4a1ae10f8ddd086d876af2943ee0b6b402ae5f89e09922e8c510ec0caa0a83e366e916400bfec88a52ab457037a35ddc6a8e2289c33684a5915c37bf5d227cbc65a737b52bdcb4fbbb7b4e7f965db116b46044d0870846c730dce12e120b1fe6dd5798ced24cad72c59a3f44de4978b8bc05a1dbeb766be6e2abf6ef46c67a58a370e54e92d89e5f44525e82b94a388d8d0cb20c3469a258c1633c9dddb6854aee255f93f59435ff317622f6899250aa185c207644275278580c5d32401741fe264a2e03b80f442ed58fd0704ebac923ac6a5abb7f0c695252f82e3fbcf2b99d721589a8fe3fad4d5926aee3d7bfafb6739e525faae3d25b12841fa2cc61dddc44d36acb9a8b72d60ecdd9c8cf04f9bac341b5e0f9bc59042db8126324888b07afe72b18cce36d61eec975b6b4ef5dc4a16ac14440cf770599bd4db630bd110eb63a03a80cd95c16d314a4de60cc5115bf0754cb7ab84a827ecefafa96069c721a5979f227fdc2467b4cd1975dafb5b28e1d6f3c1c3a2816ad831dd98c1378a03798c128f176426eaa0e361571e758d54bf4ec2c988355f016e16d6cd5cf97bb4891ab33f5623b7e796af313cc7a9e2f9510cd2bead1ea5dd080d9de1f595b2629ebccf69a0feaed3963ae8a6c89edd66fbf6e566379898185828925f8669668d6bddff961b08aaedbbe7fc196931a887ec740da6bcdab8f826a34aa2aa1e406a258558f3baf022a64222df4d6ee8726c79ba3dd6e11a19e4b4bb49b4a8cd99c189e6392f08ad731e415b65d0ccb919dca46efe9f79e21437111ab09e926d3038182044ae047bf1cc92e2d2644c528985719667a1a8abaf65d0f211172ea789b2fa016e1a88325d1ed706239da4dbb9e2079e3598b4ae5885667587ba1e0921c9ba55d7a3be4c47bc2f2f3547ce9efe32e5a22855f761bd4cbe1cd9337eda4bd7d82a918084d7e116b656104ca87e64b1b8c62323c3c296c5b5b98051feb607b872edf9f789744aff710c4b7279711182bcac6b76c05f5cd982f52f451e7e29046550e012e01d8cdd3e305427030f4247488c9136303084c12175c5c781cdd08aede5a356ea0ccdd05a460be3c7b4bfd62c3ce9ab68e285a36c1546d0b18edad71f69f5bedb340772e1bbb035514b085067259e39f59dc292a12557350c66904b253efee29a5eb7a6920f583c899dc46a1d3e2af2db3a3d1a0e8d1f98722a16c6cc1e401058d60c8c436d8f1166ba53bdde5810f9d0288528affd486c266546a864c92af3df8abd451cc1e0d6bfea534865cea9d49b3ea5e390fa823118df8a61e31022f5fbb8ceee870bf2e60890263c4d14e24d053d0fddf665ff80a66fa00a5957f8a30fe82a4b82cf2f6b4d49def98f66bfcdaa0aef13314e950ca9f3849b1edf3b82eaf74a0dbcf45c3dba9bd2d853281a78484f1efaf4150da1207ec3cb61fbcbf759f8182b7052b28d7164b73197b0a440759fe9d5ddf827f1897a174e82fb968a9a07c61bee44bc1f7f9ee5c6de04c02d57735c5fab741b36aec7c8642e56cba932a08b8e8a9d3eb066a4ee7cbf22e5abbd4346de59eca1f24ad9f7f9ff7621e5f30dd08f4cddda8e80e496908109f5212a72bab1378d1237def07bdda4178719975346c68405de15153031fb17535894e5e3c1de6fdd507333f0226b78ba7cae509cfb48d6735ede9392650bf85ac1db919b1e9fe0a823119d8253204dbb2f7a8f524be6d419f3a45c5051a7a88ef0bd41586d90c11a894d647f03895f671a6e19f1c70e32668653aba8366a3d372522f49844081a9637db080663ab02f4a8af502955d5411461b62f85308c91852f8fb9f0bdddd500b4a133791d3a2f91a82dc4b09f5ad2196a9172ab0cd3fafe7266e9f6d159110d99ca8da8a34b17be17a04ad4509a9fffab1e45e10f10e0cf9cfbd9c761ad044064c07e473fdc626289cfb88b13a11455c069b70aa02426d9119ac878a14c9483be9c0d5bcbb5fa76c8d06531f59c7cf7c26372e750e2f332418ca769e5e7fbeb3ada7bb58b573a0635e2e3ad9a53ddb809ea01086a3fa993ad57e89da6f9c5e61bd0f8ba69212a386b2aa1ae17520d7fb989dbe14021885eb50fa3048aebd42c861a09a308b660d382c0480ead8a52a1a14927c7c77957f94bb59ccfd557f8c4a7af23360a298a603d20ebc386db041d8c306b3e32b0bff541bdec5ff75c3b40950815cf9f89d48a382f67e44c409d046c01fb1262aca0df6f5238a3c3c09977261494f7361ba326815d6e23f49e4d6d4b54665081067332265fff59cf54af9da0db9d19bc611cbcb6e6f3f1e2e1ffb6cdd6253578d78d06a2ff5f9250f1994c5749e3ce49231fbd63bba28e948f9150933e3ae31299babaa41043b181a100882e613b4b4b8f49ceeb742d22f860853a9b917f5a323a8a1fb1f3363a7be4407fba44b408f259b5db79a055b92ce3d7a0649cc59f4afa2b1f69959d5c6f5eef1fa7987a47bee4491f685c52e9db1ee1a231ab5a4bae1019c97868a409dd0d57b32525394a233023c4a7ac429808bbcb57a34b41883202744c3bdebc0a637773273f19c2be6e806bef7fc1002846db762ee4e16867773808c5477987d5851d5b1641d070feabc203cb3d7943ffb206272fcac1bccb616352d85975f5a22c0f247548535ad9fb83fb2be17689453f10691143c060cd964df63c3c70e7b1cfc7e2b468015f327f9869353477bfeeed330b03ddd9e4e0a2441182244da283d7a59d2b2b20e6de3e3a47c26aeef4944c1190bba674523a6c3c4ed6bac53b9edffcb0e9fb19d8bf36949d03ef6a7e59eb903a00d9614f642d1932c766421906f5b177963c71e881453560e3ffcec792e8dc46b1832a8fcb2ab2268a9c1fb648d1c6fa1c8cbd50d5a2d8264fbc6c063e6daac5519d362da389dcd3d12c8039f991de91e728abf5bab95c3aef66dd8cc36c60e73cb10afb02eff6df20ff12c59b142b07fc48fe94612de80b8b958f78256fd7cf3c6f79a83867f3bb5f70da392957badadecefdf7b6e4ebd39ff945397c7d302ca0a5a3918d8abb893cd9cdd680916a50fe19699ff0476ad82e6ba46523f26ccc5eb65313c1df1077c8876d2b73bf86ba311862d12b0c557a92ef827197121512e87f817167d4b17c7e225a48b3f8fbbf4187438e0e9b78e905cdbeb72e80dfb37ec0104f5186b39b4ff34f0cdf4b74dc915acd3f98874cd6a67308d0ad9697121ac477550b1affe004f433705933f9647522be65cb5a7471120ec942aeb956f195be0c1783102cf7d842f2968222ae1a7fa6513f200d3fa85d71724956ed697f0673ee3b40a4d46ba4850439ec125b708ed52b52b9f72906477d520c90a9f5dd49a7a33a328537a183f439895532b78ae451a8c3db789bc862fbc37241d523027e1a008629c969380f6eb55f9cf3f0675bca6851f00df6aaf90de9f62d5c179945ef81d1073850301f97e379ea415d830e3f3751cf83e2dba541cb6cdd89e6b674f2c53e329e5f3dd418d534ada6469a5b3bca5b7cfbdfdd6df4abaf77d4520d0311e801145c91b52586a56086e663841b702f52cef9fff8cfb7b33dfa125688ba6b4fadd1dca8defaf4259ca85323b23d3bbb45933562c25af3e8d7bc6ad4a50ae974f8d207994b3bd74a6812ab6a40fcaf96bb4e17bd20d742b14c72226caef3e0f5c56c4930071e9f9a894f18650fbb785c6f707605c86b634c9722c8690cf3a954f68d7c2db3a257339ade67a41259f6f878dd0ab7876deffa77f6f00819282a8f4c4da84c6cf4f335cd0410770a2b1a1fbb3f85f4489eeceb78bbfddb2d1866c57b41f6ed179a0bc3750a486403d23473f2feef43ebc5af1018d9c20089e277d77fb9c34f425c8f8af4c49864b57572fa8c232e61ef37194251a1ddc2f73ffecd57e638751cb72bcb2c40d22540166ca1e8588f24b010c9fbd962e3a2c23a7e93f131df61b8703ce326ed80cc87912d3c6aaa27574bbe8d65bcaecd660c31cead132a44b1d0e4a53cacc0b82a263c4e7783944af0af08ea9e68e8e25ed9111cfef841f1b2fd24164f9097f70efe09b1109e5cb91fe68a2760381fd63a7fd422dd578a60661abc9ee3a5db1c2cde2fb21f2040f1ed3fc27b99e254256949d0560e8b98fa028fca50768caa951a87bf8969af498d50a9ee773c9caa7d9f7d8e1955506013f198cda316d79b177e59f233b98f727afd2494fc18642f0015adab756ea6742690c7d00f28655b915ce4eb8b3ba2e8559ba23e1ff1ccc9f79ae2df85f924459c56715dec78ef4592352eb1a850cd65ecd36e1a9121e888586b7b2fa84da920b8cf44480433e61ab076b10171c0537524bb170a4b99b0b0c437418a665b7ef909652b6483b20362e557c1480c2a2a0efa221fc59054a48122b52d38245f9bd026001635be5b155f5c766a59306fbde231fa72b4d74449a2fe8fb969496ee26af5881adaafb4189b439877ab8f78709cfd32c10ea576a010bfc137b7a4aae137ea3d29070ce3bc8dbe6655e967115ca3461ad9d28b9cf8af07441e68a54ec5e889846f3978f07ba51f7d5af5da78c5c675dc5d0c1a4a399ff4247203573a46fb903eaf7bc886e6cbd3126fa4a3fe3bb13bbdfea7da871f6563aa750f6ad7895b34b2809563dcf5ed30f1c60cef4138aa49d4f55e396534ed10cf4d857723a2b442f47d79de162c30ec6c4daf939b4c88649494e3682d1da81b4a5928d8e18a16c46707a685305e592589acb484e28e9d5af89c44b6e563d125ec97c0155410527406d94b90bc9576a662db99da1cb82b04d610d02187ce08f22ea0e8fd31919d53fa6aaf980e31ca7f8610e695a41919c24136a8406c62d5f15fca36507002b54ece17664b5247583ad60d863f283f3c288946139575dcaedc978762e85f534e56334ef0221c34ffae054ddf79339b8f08701e9699b11041df8f518dd33203363c8098fbefb01555bcc2542422777b38d8dff11b15aadb0c251ce2c5b32f8735b3cb784f2e5731b48feb5a0e791a1106abdea0f7d1f087737cbe7fdf523fa14c9be2a2987511004c5b7ac1814ef6961db16799698242452c469a07c30e4a1f73193c74a41bdd88aef50035e4648bc9dfa276951798420a45e4085932bdb9381af3cc4678bd962af616549e4020d2c9fd25e2117a6d8934fde2218273d7833d60ea492e251417a27e7fb32012a940a6b6487af4b64958bf05f1b1107732149d227eeda5ca5a43cf583dc297d66072a1acd75e93a7caefd36a0d581e21d5cb08654c4ecef46ebac5391546e0b7d2a6418548d8f816446bcf237f676e873e6bae9107234abe5ab24c53ea472ad10653cef068fd9f4e729fc0d526e489f8df13af5575f1e70e0ec22899728b0659d70fc2dd509d9df3ec170638f89e540f4d3f02aa9b1b1819f84da596e0d7b45a5818061728f8eeccd2bea0f460dd7e18cb95f2364c50e351f0690e184eb63ebbb14a0b4b2117e44f3b2b3", 0xb5, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) pivot_root(0x0, 0x0) read$FUSE(r4, &(0x7f0000006300)={0x2020}, 0x402) r5 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r5, 0xc0045516, 0x0) r6 = openat$mixer(0xffffffffffffff9c, 0x0, 0x101180, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r6, 0xc0040d07, &(0x7f0000000040)=0x121) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3000001, 0x32, 0xffffffffffffffff, 0x0) 1m6.549833949s ago: executing program 3 (id=8187): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp256-generic\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$sock(r1, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000340)="8224aca5f41b9e0ec5e7a706c919e7c0e343f0cd0a779c17e7f992396b09252009d2d12e9475a57ec39f71417044cf4151af34ac1dfd5d87cdd80bc4c24478821f64d4d971bbc1fc7bdd181a839344917165bb9cd0fa568aac55d8e38ee30fd3a9bc63e2656b6941c812e6ea0692ec276deb2b7b817906cf8c5429a42164e8bb521e216e554d509a0fd0", 0x8a}, {0x0}, {&(0x7f00000005c0)="f2b314c96d500b66f7fd46493862d9eb", 0x10}], 0x3}}], 0x1, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300)=[{0x0}], 0x1, &(0x7f0000000b40)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @dstopts_2292={{0xe0, 0x29, 0x4, {0x4, 0x18, '\x00', [@calipso={0x7, 0x10, {0x1, 0x2, 0x9, 0x9f, [0x8]}}, @generic={0xfe, 0x72, "f4a4a3142ee1e12b9826287997a6b33d89f3d60da1641d9fe3896c3c1b6c130ef4f01be8f5836d417874540898619050b14420ab124b11de36afb16ef4fc1cf3f4e4fa0e647cd1b07b068d3894180b6aa7527a4a8252f6836a0d67a7782c675a838ea989e567e4774de1f52d188e0b0888c5"}, @enc_lim={0x4, 0x1, 0xf8}, @generic={0x80}, @calipso={0x7, 0x8, {0x1, 0x0, 0x7a, 0x8001}}, @ra={0x5, 0x2, 0xa7e}, @pad1, @hao={0xc9, 0x10, @private2}, @generic={0x93, 0x11, "e80ee304ecb784ec4655260cecea14e498"}]}}}, @hoplimit={{0x14}}, @hopopts={{0x1c8, 0x29, 0x36, {0x5e, 0x35, '\x00', [@generic={0xff, 0x45, "50d650847249ad288702ebd0d654b985e8908defb7ec6c5ff115c58e128b9e3a21c34b45ef9de99984e143ca7c3509a971b2ec429ee1edc0bb903fe94b32c28f70dac43574"}, @pad1, @pad1, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x38, {0x3, 0xc, 0x0, 0xfff, [0x2, 0x4, 0x966, 0x7, 0xfffffffffffffff7, 0x1]}}, @calipso={0x7, 0x10, {0x0, 0x2, 0x7, 0x6, [0x7fff]}}, @generic={0x8, 0xdf, "c8a110995d439fbfac9716a99c357bcb2d59a850490739734f6b321d19b3754df39cc2dc26cf263cbebbddb9a7f17b6771f74c46623f9e38bd23e6f0a2fd3a9a017f66738394aca44d1a9f0b35d9df0a964360ab0900a5e6fcac1cd41c91c97f6826ff706c41edc4e00205bbb53218ed58a1122d993b55a1b9a870a17e7869e3fc704b388202add651f628963a90fea5d8196d5e0373fd13584ae57b4f1c03d4f67005cdb5938591d5ea712014e358ea0808807873fd7290c6d4f033de64c7e86ab309f93fd8146e6672c844ca0c43cde3afb3f9b0e9c19b929779fe65f579"}, @calipso={0x7, 0x20, {0x3, 0x6, 0x3, 0x7, [0x0, 0x8000, 0xffffffffffffff04]}}, @generic={0x1, 0x4, "2bdb86d1"}]}}}, @rthdrdstopts={{0x20, 0x29, 0x37, {0x73, 0x0, '\x00', [@pad1]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @rthdr={{0x18}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x3a, 0x4, 0x2, 0x70, 0x0, [@mcast1, @mcast2]}}}], 0x378}}], 0x1, 0x810) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x600) 1m6.275286229s ago: executing program 4 (id=8189): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x38011, r0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f0000000180)={&(0x7f0000000340)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000280)=[@rdma_args={0x48, 0x114, 0x1, {{0x9, 0xb2}, {0x0}, &(0x7f0000000940)=[{&(0x7f0000000600)=""/194, 0xc2}], 0x1, 0x6, 0xe}}], 0x48}, 0x0) (fail_nth: 20) 1m6.176354365s ago: executing program 3 (id=8190): r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c00009040000020701010009050102"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4-generic)\x00'}, 0x58) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x5, 0xc, 0x9, 0x1}, 0x0) io_uring_setup(0x664c, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x2, 0x1d8}) r4 = mq_open(&(0x7f0000000000)=']$\\ ', 0x40, 0x6, 0x0) mq_notify(r4, &(0x7f0000000040)={0x0, 0xd}) syz_usb_connect(0x5, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="120100003b7431087d077a62010001020301090224000100000000090400"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[], 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) socket$qrtr(0x2a, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_CT_DIRECTION={0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x40000080}, 0x40000) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r5, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0xe3, 0x1a3807, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x4f2a7b1674a2054a}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r5, 0x4058534c, &(0x7f0000000000)={0x80, 0x9, 0x2, 0xe05, 0x20000, 0x28e7}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) 1m2.00741313s ago: executing program 3 (id=8196): socket$kcm(0x10, 0x2, 0x0) socket(0x2, 0x80805, 0x4) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f00000003c0)=[@in6={0xa, 0x4e21, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1f2}], 0x1c) socket$l2tp6(0xa, 0x2, 0x73) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="850000002e00000084000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040)=r2, 0x4) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x4}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000080)={@mcast2, 0x300, 0x0, 0x2, 0x9, 0x0, 0x4}, 0x20) close_range(r5, 0xffffffffffffffff, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000080)={@mcast2, 0x300, 0x0, 0x2, 0x9, 0x0, 0x4}, 0x20) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r3], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1m1.31678768s ago: executing program 3 (id=8198): socket$inet6(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000280)={'ip6_vti0\x00', 0x0, 0x4, 0x0, 0x3, 0x5, 0x12, @mcast2, @private0, 0x0, 0x8007, 0x100, 0x5}}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80021}, 0xc, &(0x7f0000000380)={&(0x7f0000000a40)=ANY=[@ANYBLOB="741000002100100027bd7000fddbdf2500000000000000000000ffffac1e0001fe8000000000000000000000000000bb", @ANYRES32, @ANYBLOB="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"], 0x1074}, 0x1, 0x0, 0x0, 0x20000000}, 0x28880) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) setns(0xffffffffffffffff, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r2, &(0x7f0000000a00)=[{{&(0x7f0000000240)={0xa, 0x4e20, 0xc52, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4}, 0x1c, &(0x7f0000000200)=[{&(0x7f00000004c0)="f3", 0x1}], 0x1}}], 0x1, 0x4000841) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) fsopen(&(0x7f0000000100)='aio\x00', 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @last={{0x9}, @void}}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xe8}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x2, 0x0) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x20) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004300)="00e7a0633e8438bafa888b9b02144af32e296a0a01dc194d649b6fa26d6d5e63bac4a04baeeb8aacb22c6eec461b67db6a737737c6d2687acb00572f92e3fdb5d0cb2f11121c557a943020200755bcab77b39c406b733239e2bb1175b9322ba39dc7d67da8f77aed1714dae2e6c24c3ea96be9d151c6ab7b3c54bbe507b8b2461fb4be8dc90042184af6d48f8ace16abb5e3fc943cf61cdb75624a259bdb5f7829b9775820f85f2d1a6ee6c6c2af4fd41ab8a41ecb2612abf13cd2c6f9f3e6db505e4bbe68cc000cf5fa6d5636191a4b366ab59af52132a3f9678d4ed1bd577bacffb3b52850804005eebf3dfa4763168ff30490a11acdbbf4c3312a45f30139f6b72b1e7cdec185006bb30e0e8fa88da2cefc718cae7e9830f7ca101e4e23c6bd16bfacf4a9927fb13af4b79c86ab999beda4ad396abdda354a42fb4ef21d6749175dc21a0cf9191aa4f90d274b50370a580ad8dcd166d2b06c0d8b071973c3fde30f7e2bc371a51ca5866bf8b24eaac75bf482dd4436b214ff62d32e20df223b0b680ede28b3a49e66e330a8a3ecace0db9855d235d5ff23765e742d1a739c2ac8743f4c62664a3b347279da55a1a5b16e1e2828b584a013577d50f890e3894d9e8d6bfccdfb2b70221f12a7fac24b7a8818edce72b65f622c77bf1312771a2c0d805ec9a25c536c91868762032255be78903b77b2c1a773a03996fabba69214e76f5df6df0375b592692a2c3c86c75a3be56fe598ddaea0b9901d20db7e43e128e04e5509283f833c24c625887288459db5727210ba9a301fb8c934dd1d8dca68039fe5b2e1a8d7cdfc6d875e5851098100c3cd42544ed90bb55b58d20a501fabbc485d148c615a3b070fa0520da2ed68ee115a4411d5418b47f3d95616096f67a7a36d68f1e8df82eca8ef96fb4a96b3422fe046a37ea5f5967513a559bd770fecab7228b0692f439765c9e9c6ea4fc608e0b27f9b49064daa2bac06f83f6d87ebc61fa3a29bb5ed39641245ce8cf43770df32a84838802b0827ca5a40e2003915e2ed108a005637bb028d29bd2cfd28a1bd55e67ed1b6b7b72163c27c4b0e36d1b134d6dfdb165a66fb46498fc04bb8053b84098af5b18758631d1318d625a6fa4d3ce5a4d3a90e10c6363a26b5ae96c2d56f87ad21a6118af6847d041f88f852ddc3f250c088ef5cb31198f3ac81cff9a5bab26ed56c09f8416188974e08349f7da28fc754b98c1ac4ea0060ac1e1b1c49f7dbadbc59254b265dc418cab9ac14e2bbecc4c3103543e37984efb1f61315e10d2b422732217d3a9b0cfe4561f3765d3bda60be239e02bdc164dd631582e8c87dd8fa60d63dcf9e7f3dadc4ce5e4433a42425b8ee8cb8a2defab0bf9b6109c90b5655b79b18c06884f2670a985d454e08e54de69f645cb0cbb70620bd988ee717c310ae77b4abe81c01c6e7f47268ee20bc30b9062830917705682eba2c5ef966b877f33294aa5f8b29d3dd5ed92302087f34fa18d19a005de05f925e3e93c8c0f24507ff20cd23d9ae5452c32ff58c78ccdb1ab32c98edfaa6d2c3971934ca8f849ac360c286566eb72b0793f12cef84bd282368d533247ee750f18aeda484167f3d680e4aaa3aa0694441d4ff6a71531f1a30f87eeb71afd04c5d686e1f86f27586f4e2c8ff77c09612ba1af9b3fb93efd31af42f8e0498f35d07c662b743a08f2839cad8f95b90cbb4fc0ed2ca45dd093a549cde4c6ff08ce09a2cbc6f9f78b6f96643357f92f8f403202742057731fd3e343a87c0affe803cfdbddb8c2694ab63f2dc35da705624747e30a943000fc82c40f10e1975d2e2ec15aefd531b6dbc053606b054dc976f44d5b5a5f37e9c08532ce16cf8bca55ab6c814ceb855ab50b8b52620f8645a9dc25fcb732080d84bf39c3ebb235b4d96da527b64ec4b72f69e91d16a4efcaf76f2e1f968ca68a06f60b01ec7becc9ffd7877c0992cb0f80fb3daabc039513896bd7697843be06aba53e7761e11e075c61ef2d897d4d9f90041c14283746feeb3f0d456ba4be27843350fe43e7c1110b4439489139f6dae01c43f23ec71f08d3042663c65e059d368e4e2c6e49de45bf078d3182a1bc1208bc59379e705aa3309579947409f2a8b3d79099c8619f916e7a6fa333d2312a274247156b8c25cbcfcc59ef13339c700f56a8691dff39bd4338789001872c0d90929037dc0ad99b380a6ba73f331f73f9274f4c2bf5233d7482edf37bf6ffed4f2c0ee44a1d57cae0d644f25591dc03bf837571a82d0c31b61be7ff85a5b3843e8f96a50eaa43f5c137ecfc4e4530d08a2afa4ba02fcc50117a4ad0d5862302017639344c82749f673dbd650e49b35302d0acbab45c0973198291bb42b4cfcd3b0c272074341ea8eca19e122cd234da6d41bf5eedb706e16c17687ed8b84db67130796d26b94eac83bbcd785b603242bd6252c155711efd7dd22cc54e1eaf6d910d0f22c701f3d4da0314dd2829c6ee13bbcbd126558b47b8066bf0766c792a012315bd29bfeda8f28a2c1f4e638b701758e19a0e5bd5b4f19048b00a877d956292e345f8a3a8367892f955bcb5e50ca145ec5e2c9309e25941bd277e393aaad38f9b72a42514b27da6856223c37a1fc1327fa760551d3fdeb0b222ab180b16c9eea138cf4f327e88fdfee293c5b6b007028eb796a60772148282dcd17ffc1c90ed8b6540ede933545ed5a5301d6ff39734444ff3d85cda4ac3befa5083a4685e9e231eba4a91a35f4f7f48fd5ac2447c64c010e2a9f8e80691c95460e1995444466ec5f3cd71fe509a26ff0b7f3254bc8c3255e903834e841b37c70b267fb33deb0d1ed4ea84a869453ba508fc255b12cf847103d5195046c930ae4a75c956f22fcfe4186d547686b54bd7a534940d5d62216994eac0e8ed3bd2bd59354e6b9c6b5b10511d54a8b928040f1e1024a423b0cf519fc6e9673df5c48c0778c7edb8fa8d8ace77463a77d2d6313160e1ee72742953e433b6732ced59c93464fd91520847db238610ed0c289fc55647881a7d6257cf28090c75a6f19df079cfd35742a74a5ab270314f7c8039c20ff0f3f543d029b75a741b5dc6425241ac2ffabf1f96288e6d4ba34da09fb6049c2c8753fbd41fdb4bc68c57bf374ef4feb0df00c41319debb26afba2ff39e1799a1c2137f4e920ee5b02d93789b6b0c853e8143dae5b08ee85da2ea7c31803610ce797293ea95c16ade6dae2afb008e59d8b9505737f008b5227df5f1e4eb5d707f502698a17ead9b1f5ec09dff34248ff2fb153dc6df4812e39754a4baa42e1d8b77fbddef3ca091701ac28ae5fd422dbd8db5b122d3965383abc37a52d2fca5ce56eba974dba3d059cefe40e3c35c9daa8ae31198214303c1dcb90d58fc983ccfd504fa43925636f94b128d44e8aa5cd3ecfabd50a84062d03f7508a0575ab65ecc749d3ef566fdbc529a8139b7a7fb3a9bd784df52cddc6f2699044ba47615163fbbe19f3d88d38a8b71fe52b2611ca74341429d1cef1a7e350545be29d2caa560e60352cab074c298c44ca2c07f9795ce52f10aa3e2fcdef371f24e309b19e52218881f25a4674527edbe3b3bd0b9b536d810c6f9500c0c81bcfd9a440dd91c1d35c52758d2b2ae1a8497bb394c4f09d3947cf777727b0d1daf5ac4fe4fa3c247a791702cb84b96321b7fec81bf549d4eb5d6dafe019b26187417c68b064e4308908535a3e77b6cd3e28caaf12d726f15590b7958e40134d045a38cbb689131a7e85532f1c63dd4bac9e4d00645cd7b2b71704563f3738b92044a8153f6ba717800ab7cb238175c376d7add2c5ec38e4c856f1ab9c3ee33f6ca6d576ae908dd290e4bae23470182e253765e04e8eb02a791c4396a511ef467879a9e2818b8a4b1b0b39a6c44e816e3ebf6e3be93929dfcb38d5dad7d20b60215447674d0608b8b02331ac20e57083cb9b4449fecbb149441aea0ad82f00a82d87d743fc80d410922bc20923516885440f43c9f32beb81ce148def6140952583a7825c2d2fe012d52d30ef66d32a8a0864ac5c1737e2506228d41ff0515ee80be4cf012927dde0fd2a07cac68eff8c4437f2844d4df07936fd8753e5909f962c5c767f8719cc295bdfa8a16f3f36ff56e34d7b14b6b8c46d5af248b04a9c5396f84990e23d145670950bce5f5638e5e2cea37c371a4483729338f1305cbb32fa1c05dd9d21d2a69e5fa3abe9a2dad2237be20b4088393c04aa66cf13718de4bffac72f641a8c017a1d5568fa15a6a06e4dc833874ec95af6f115bdadf15179bfc8c4e3e64f26f1299e282c4ab397340934efc1e601afc630fe195e8ae7d8da1310568cab4f2fad085d0ec39710d8b7c812b3fd55c6f50925bcfc90fbcb35b8daa0f1e1f69d82fae2034039f7ad6921694ed48a55a68bc541e6d86f1e33c261a92d48b50eb58a03d8e31b2f6564a4ddc3ee988d0dc47b4b610a9a9dcb87571b5c1edb3362df0ec3d58872157e0f7247dfa8100b4478b705702a5620c9201010f40232327550db333e845dbecd6aadbd0a94c064862b1100b4dd45ece811b8c0275e3753e11b4bcd8bc5ed7668e72afa5bc5cc17b4c313273755f532ecfdefdf2d5c47999453a3b7c158d98332f0bd3a820cfb2c8c3bcd43197e7395a032cec6e41662079f2f654965aebc393e22b5c8516d9b8ad01e33ee481a4ac46a2df304dadeaa9e5274d340aaebe14dcea315fe1279f1a41a5c7aa8c94bf4b3d48757503171f53488e01210145e62c0de7c39737848dbdb1b207d4d33b8de180b020e8a76b1b521905e5e3ce97292f8558fb68efdee774681bfffcf1dc3eef35f660dd1659a32950de2d50e762313beee330d9c2a9fe8ce5e4e61ddd86378d3551335f6ef62053d3b248a8c33a11abdf3f3aa1975a15f4a6957a13d5b12a44d0f2b52b9a2d996e98c630c0f2abca80c7ae89efcf81ae284a0d19582cb1319d207077e5657d245533181ed6e07e0f7647123fc46c37bd75b4f4d181112b4a08acdcf445332cb9dde69a0923dd9244dd2ecd818b19588939922e3b2d8dd9d9fed95fa55b0e4564b38aca2c4d24eebc634664400177fbdeaeb278bb1d8eb11baf4be5c87d4f8d9a855bfa75df4c51fb4eec87a27c59df9a47d82523b08022a1c0fb22ff6f93c3d2cc22a4111a6ec5be428cba33617be65739c2240248f3a02d01ddf2d6aca9e537a2296b16d082d2b868504371dd5e41898885b03ebfaca73b40e8924ece83c1c80de6ce14943e1199c6f81bf359f44c3ed5ae3c6eacb730b1039f0b6555347bd566dfff45a7a2176420ab2b40916a73b66a3ad07af6e1ac5597393d203fa1ad34d4564af956a0a3e2997e27a4e5eff67dd89cce8875d995e00c1858234f149f6ad4cac2b8056966f726df57b8c4ee8f22f23097ba1471b1f1036e3a499400fccdb75b56eb13e9eca1407d5bff4b075b06d00fcbfcafc28431eb33156232e73c6577e3eca437330c494ede57b9609e1f40634918dea767338b5542197410cdc000143ace89ca0b7bf645b3267f74767d7c7fce05d2f59c137204e56bfa711f66903c511f681cf7a1b4f9fc0f42b7c438ff8957e1059375321df5b0c5c884f46d94c21686e1300582d34928bc398653118f79bfeea2e7cfbbf31a7718f4aab50fae57db94203d43e060365c9a7455241be03d828ffc3783d0f6aa170c0866eb0dad07485831526922d8348a7a16e2e9903a2ac93c58c6dce83127fab17703ec004a519ae5675baffb31bf4b52f9ca992a84017a44d68dc693abd829947342f277fdcbc87168bcc03c32b8b1e81a1915af2517c464af07d52b79d1b0e53164c82ba049f81e92ed1dc20a88fd72e9ce7aa4b22a7cc57dc5527d14f62bc29cfc9d57ed26fd523cac39ac00ba12d3a49d694709924275fc0793d56acf9558818dc9eb210649fa5307d45886b879257d627cee0542b51c2ce6ce134100efb47c92456ece5b73cdc051f570810a8d534222649eb56cf73a377162b753de6c282bcd4a25dda21dd10901bd8dfe8fd4ba8a70811c39707beded23dd60f23e2933372e3a6bce099899b07f0a4c4956fd98e956a8649622c77717de099463c0c6c9389ab4a1ae10f8ddd086d876af2943ee0b6b402ae5f89e09922e8c510ec0caa0a83e366e916400bfec88a52ab457037a35ddc6a8e2289c33684a5915c37bf5d227cbc65a737b52bdcb4fbbb7b4e7f965db116b46044d0870846c730dce12e120b1fe6dd5798ced24cad72c59a3f44de4978b8bc05a1dbeb766be6e2abf6ef46c67a58a370e54e92d89e5f44525e82b94a388d8d0cb20c3469a258c1633c9dddb6854aee255f93f59435ff317622f6899250aa185c207644275278580c5d32401741fe264a2e03b80f442ed58fd0704ebac923ac6a5abb7f0c695252f82e3fbcf2b99d721589a8fe3fad4d5926aee3d7bfafb6739e525faae3d25b12841fa2cc61dddc44d36acb9a8b72d60ecdd9c8cf04f9bac341b5e0f9bc59042db8126324888b07afe72b18cce36d61eec975b6b4ef5dc4a16ac14440cf770599bd4db630bd110eb63a03a80cd95c16d314a4de60cc5115bf0754cb7ab84a827ecefafa96069c721a5979f227fdc2467b4cd1975dafb5b28e1d6f3c1c3a2816ad831dd98c1378a03798c128f176426eaa0e361571e758d54bf4ec2c988355f016e16d6cd5cf97bb4891ab33f5623b7e796af313cc7a9e2f9510cd2bead1ea5dd080d9de1f595b2629ebccf69a0feaed3963ae8a6c89edd66fbf6e566379898185828925f8669668d6bddff961b08aaedbbe7fc196931a887ec740da6bcdab8f826a34aa2aa1e406a258558f3baf022a64222df4d6ee8726c79ba3dd6e11a19e4b4bb49b4a8cd99c189e6392f08ad731e415b65d0ccb919dca46efe9f79e21437111ab09e926d3038182044ae047bf1cc92e2d2644c528985719667a1a8abaf65d0f211172ea789b2fa016e1a88325d1ed706239da4dbb9e2079e3598b4ae5885667587ba1e0921c9ba55d7a3be4c47bc2f2f3547ce9efe32e5a22855f761bd4cbe1cd9337eda4bd7d82a918084d7e116b656104ca87e64b1b8c62323c3c296c5b5b98051feb607b872edf9f789744aff710c4b7279711182bcac6b76c05f5cd982f52f451e7e29046550e012e01d8cdd3e305427030f4247488c9136303084c12175c5c781cdd08aede5a356ea0ccdd05a460be3c7b4bfd62c3ce9ab68e285a36c1546d0b18edad71f69f5bedb340772e1bbb035514b085067259e39f59dc292a12557350c66904b253efee29a5eb7a6920f583c899dc46a1d3e2af2db3a3d1a0e8d1f98722a16c6cc1e401058d60c8c436d8f1166ba53bdde5810f9d0288528affd486c266546a864c92af3df8abd451cc1e0d6bfea534865cea9d49b3ea5e390fa823118df8a61e31022f5fbb8ceee870bf2e60890263c4d14e24d053d0fddf665ff80a66fa00a5957f8a30fe82a4b82cf2f6b4d49def98f66bfcdaa0aef13314e950ca9f3849b1edf3b82eaf74a0dbcf45c3dba9bd2d853281a78484f1efaf4150da1207ec3cb61fbcbf759f8182b7052b28d7164b73197b0a440759fe9d5ddf827f1897a174e82fb968a9a07c61bee44bc1f7f9ee5c6de04c02d57735c5fab741b36aec7c8642e56cba932a08b8e8a9d3eb066a4ee7cbf22e5abbd4346de59eca1f24ad9f7f9ff7621e5f30dd08f4cddda8e80e496908109f5212a72bab1378d1237def07bdda4178719975346c68405de15153031fb17535894e5e3c1de6fdd507333f0226b78ba7cae509cfb48d6735ede9392650bf85ac1db919b1e9fe0a823119d8253204dbb2f7a8f524be6d419f3a45c5051a7a88ef0bd41586d90c11a894d647f03895f671a6e19f1c70e32668653aba8366a3d372522f49844081a9637db080663ab02f4a8af502955d5411461b62f85308c91852f8fb9f0bdddd500b4a133791d3a2f91a82dc4b09f5ad2196a9172ab0cd3fafe7266e9f6d159110d99ca8da8a34b17be17a04ad4509a9fffab1e45e10f10e0cf9cfbd9c761ad044064c07e473fdc626289cfb88b13a11455c069b70aa02426d9119ac878a14c9483be9c0d5bcbb5fa76c8d06531f59c7cf7c26372e750e2f332418ca769e5e7fbeb3ada7bb58b573a0635e2e3ad9a53ddb809ea01086a3fa993ad57e89da6f9c5e61bd0f8ba69212a386b2aa1ae17520d7fb989dbe14021885eb50fa3048aebd42c861a09a308b660d382c0480ead8a52a1a14927c7c77957f94bb59ccfd557f8c4a7af23360a298a603d20ebc386db041d8c306b3e32b0bff541bdec5ff75c3b40950815cf9f89d48a382f67e44c409d046c01fb1262aca0df6f5238a3c3c09977261494f7361ba326815d6e23f49e4d6d4b54665081067332265fff59cf54af9da0db9d19bc611cbcb6e6f3f1e2e1ffb6cdd6253578d78d06a2ff5f9250f1994c5749e3ce49231fbd63bba28e948f9150933e3ae31299babaa41043b181a100882e613b4b4b8f49ceeb742d22f860853a9b917f5a323a8a1fb1f3363a7be4407fba44b408f259b5db79a055b92ce3d7a0649cc59f4afa2b1f69959d5c6f5eef1fa7987a47bee4491f685c52e9db1ee1a231ab5a4bae1019c97868a409dd0d57b32525394a233023c4a7ac429808bbcb57a34b41883202744c3bdebc0a637773273f19c2be6e806bef7fc1002846db762ee4e16867773808c5477987d5851d5b1641d070feabc203cb3d7943ffb206272fcac1bccb616352d85975f5a22c0f247548535ad9fb83fb2be17689453f10691143c060cd964df63c3c70e7b1cfc7e2b468015f327f9869353477bfeeed330b03ddd9e4e0a2441182244da283d7a59d2b2b20e6de3e3a47c26aeef4944c1190bba674523a6c3c4ed6bac53b9edffcb0e9fb19d8bf36949d03ef6a7e59eb903a00d9614f642d1932c766421906f5b177963c71e881453560e3ffcec792e8dc46b1832a8fcb2ab2268a9c1fb648d1c6fa1c8cbd50d5a2d8264fbc6c063e6daac5519d362da389dcd3d12c8039f991de91e728abf5bab95c3aef66dd8cc36c60e73cb10afb02eff6df20ff12c59b142b07fc48fe94612de80b8b958f78256fd7cf3c6f79a83867f3bb5f70da392957badadecefdf7b6e4ebd39ff945397c7d302ca0a5a3918d8abb893cd9cdd680916a50fe19699ff0476ad82e6ba46523f26ccc5eb65313c1df1077c8876d2b73bf86ba311862d12b0c557a92ef827197121512e87f817167d4b17c7e225a48b3f8fbbf4187438e0e9b78e905cdbeb72e80dfb37ec0104f5186b39b4ff34f0cdf4b74dc915acd3f98874cd6a67308d0ad9697121ac477550b1affe004f433705933f9647522be65cb5a7471120ec942aeb956f195be0c1783102cf7d842f2968222ae1a7fa6513f200d3fa85d71724956ed697f0673ee3b40a4d46ba4850439ec125b708ed52b52b9f72906477d520c90a9f5dd49a7a33a328537a183f439895532b78ae451a8c3db789bc862fbc37241d523027e1a008629c969380f6eb55f9cf3f0675bca6851f00df6aaf90de9f62d5c179945ef81d1073850301f97e379ea415d830e3f3751cf83e2dba541cb6cdd89e6b674f2c53e329e5f3dd418d534ada6469a5b3bca5b7cfbdfdd6df4abaf77d4520d0311e801145c91b52586a56086e663841b702f52cef9fff8cfb7b33dfa125688ba6b4fadd1dca8defaf4259ca85323b23d3bbb45933562c25af3e8d7bc6ad4a50ae974f8d207994b3bd74a6812ab6a40fcaf96bb4e17bd20d742b14c72226caef3e0f5c56c4930071e9f9a894f18650fbb785c6f707605c86b634c9722c8690cf3a954f68d7c2db3a257339ade67a41259f6f878dd0ab7876deffa77f6f00819282a8f4c4da84c6cf4f335cd0410770a2b1a1fbb3f85f4489eeceb78bbfddb2d1866c57b41f6ed179a0bc3750a486403d23473f2feef43ebc5af1018d9c20089e277d77fb9c34f425c8f8af4c49864b57572fa8c232e61ef37194251a1ddc2f73ffecd57e638751cb72bcb2c40d22540166ca1e8588f24b010c9fbd962e3a2c23a7e93f131df61b8703ce326ed80cc87912d3c6aaa27574bbe8d65bcaecd660c31cead132a44b1d0e4a53cacc0b82a263c4e7783944af0af08ea9e68e8e25ed9111cfef841f1b2fd24164f9097f70efe09b1109e5cb91fe68a2760381fd63a7fd422dd578a60661abc9ee3a5db1c2cde2fb21f2040f1ed3fc27b99e254256949d0560e8b98fa028fca50768caa951a87bf8969af498d50a9ee773c9caa7d9f7d8e1955506013f198cda316d79b177e59f233b98f727afd2494fc18642f0015adab756ea6742690c7d00f28655b915ce4eb8b3ba2e8559ba23e1ff1ccc9f79ae2df85f924459c56715dec78ef4592352eb1a850cd65ecd36e1a9121e888586b7b2fa84da920b8cf44480433e61ab076b10171c0537524bb170a4b99b0b0c437418a665b7ef909652b6483b20362e557c1480c2a2a0efa221fc59054a48122b52d38245f9bd026001635be5b155f5c766a59306fbde231fa72b4d74449a2fe8fb969496ee26af5881adaafb4189b439877ab8f78709cfd32c10ea576a010bfc137b7a4aae137ea3d29070ce3bc8dbe6655e967115ca3461ad9d28b9cf8af07441e68a54ec5e889846f3978f07ba51f7d5af5da78c5c675dc5d0c1a4a399ff4247203573a46fb903eaf7bc886e6cbd3126fa4a3fe3bb13bbdfea7da871f6563aa750f6ad7895b34b2809563dcf5ed30f1c60cef4138aa49d4f55e396534ed10cf4d857723a2b442f47d79de162c30ec6c4daf939b4c88649494e3682d1da81b4a5928d8e18a16c46707a685305e592589acb484e28e9d5af89c44b6e563d125ec97c0155410527406d94b90bc9576a662db99da1cb82b04d610d02187ce08f22ea0e8fd31919d53fa6aaf980e31ca7f8610e695a41919c24136a8406c62d5f15fca36507002b54ece17664b5247583ad60d863f283f3c288946139575dcaedc978762e85f534e56334ef0221c34ffae054ddf79339b8f08701e9699b11041df8f518dd33203363c8098fbefb01555bcc2542422777b38d8dff11b15aadb0c251ce2c5b32f8735b3cb784f2e5731b48feb5a0e791a1106abdea0f7d1f087737cbe7fdf523fa14c9be2a2987511004c5b7ac1814ef6961db16799698242452c469a07c30e4a1f73193c74a41bdd88aef50035e4648bc9dfa276951798420a45e4085932bdb9381af3cc4678bd962af616549e4020d2c9fd25e2117a6d8934fde2218273d7833d60ea492e251417a27e7fb32012a940a6b6487af4b64958bf05f1b1107732149d227eeda5ca5a43cf583dc297d66072a1acd75e93a7caefd36a0d581e21d5cb08654c4ecef46ebac5391546e0b7d2a6418548d8f816446bcf237f676e873e6bae9107234abe5ab24c53ea472ad10653cef068fd9f4e729fc0d526e489f8df13af5575f1e70e0ec22899728b0659d70fc2dd509d9df3ec170638f89e540f4d3f02aa9b1b1819f84da596e0d7b45a5818061728f8eeccd2bea0f460dd7e18cb95f2364c50e351f0690e184eb63ebbb14a0b4b2117e44f3b2b3", 0xb5, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) pivot_root(0x0, 0x0) read$FUSE(r4, &(0x7f0000006300)={0x2020}, 0x402) r5 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r5, 0xc0045516, 0x0) r6 = openat$mixer(0xffffffffffffff9c, 0x0, 0x101180, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r6, 0xc0040d07, &(0x7f0000000040)=0x121) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3000001, 0x32, 0xffffffffffffffff, 0x0) 59.416632934s ago: executing program 3 (id=8200): socket$l2tp6(0xa, 0x2, 0x73) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x0, 0x0}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)=@generic={0x0, 0x0, 0x8}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32, @ANYBLOB="000000000000000010010c8013000c800ca3488008000000000000000800038064001d80050006000000000014000500714abbd2547de97cbbf6efb226f19bf90d0002003a288e5e5b5b5a40000000006000078014000400293a02149f3b75a67093c28fd6f55a2314000400e48f01e49713f0c2d839f940d9f088d8050006000000003bd000020062726964"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) recvmsg$can_raw(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000300)=""/144, 0x90}, {&(0x7f00000003c0)=""/15, 0xf}, {&(0x7f0000000b00)=""/130, 0x82}, {0x0}, {0x0}, {&(0x7f00000008c0)=""/235, 0xeb}], 0x6, &(0x7f0000000280)=""/7, 0x7}, 0x2040) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x5}, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r2, 0xc01c64ae, &(0x7f0000000100)={0x0, 0x4, 0x9, 0x3, 0x8, 0xa, 0xfffffffc}) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x71) unshare(0x40000080) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x8000002) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r3, &(0x7f0000000580)='1\x00', 0x2) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12011900000000406a0563000000000000010902"], 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f000009d000/0x1000)=nil, 0x1000, 0x2, 0x110, 0xffffffffffffffff, 0x8000000) write$sysctl(r3, &(0x7f00000000c0)='2\x00', 0x2) 57.485540573s ago: executing program 3 (id=8202): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x38011, r0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x40000042, 0xfffffffd}, 0x10) r2 = userfaultfd(0x80801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) r3 = syz_io_uring_setup(0xa1, &(0x7f0000000640)={0x0, 0xe8ce, 0x0, 0x20, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000020c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x6007, @fd=r2, 0x0, 0x0}) io_uring_enter(r3, 0x6f85, 0x0, 0x69, 0x0, 0x0) syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) readv(r6, &(0x7f0000000300)=[{&(0x7f00000019c0)=""/196, 0xc4}], 0x1) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xc6, &(0x7f0000000400)={@local, @link_local, @val={@val, {0x8100, 0x2, 0x1, 0x2}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x1, 0xb0, 0x200, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e24, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x1, "65a252e7cb7a5918c004a9971a4696ced2c32242b1ec9fe34818d8ccd82041b7", "c930713c550e74ee13c2638ac75b2a9666efd31a34fce4498df8105d8bd8ed283a220c3a9becd8a70d3607ea8270d351", "ae12e16b560f2f8ac4ca3e745ce285f12f6e8719e7f1e7f286a68f76", {"980aa8fb8f80d69f1fb587086447e93e", "55e824bb69e8333100300b088233545a"}}}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000240)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x8}}}}}, 0x0) recvmmsg(r7, &(0x7f0000004680)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000005c0)=""/4096, 0x1000}], 0x1}, 0x1}], 0x1, 0x0, 0x0) r8 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x1, 0xbfdffffc}, &(0x7f00000000c0)=0x0, &(0x7f00000003c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x95e3}, 0x1}) io_uring_enter(r8, 0x47f6, 0x0, 0x0, 0x0, 0x0) r11 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r11, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x8) socket$inet6_tcp(0xa, 0x1, 0x0) r12 = socket$rds(0x15, 0x5, 0x0) bind$rds(r12, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r12, &(0x7f0000000180)={&(0x7f0000000340)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000280)=[@rdma_args={0x48, 0x114, 0x1, {{0x9, 0xb2}, {0x0}, &(0x7f0000000940)=[{&(0x7f0000000600)=""/194, 0xc2}], 0x1, 0x6, 0xe}}], 0x48}, 0x0) socket(0x10, 0x803, 0x0) 50.519486723s ago: executing program 35 (id=8189): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x38011, r0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f0000000180)={&(0x7f0000000340)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000280)=[@rdma_args={0x48, 0x114, 0x1, {{0x9, 0xb2}, {0x0}, &(0x7f0000000940)=[{&(0x7f0000000600)=""/194, 0xc2}], 0x1, 0x6, 0xe}}], 0x48}, 0x0) (fail_nth: 20) 42.196601953s ago: executing program 36 (id=8202): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x38011, r0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x40000042, 0xfffffffd}, 0x10) r2 = userfaultfd(0x80801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) r3 = syz_io_uring_setup(0xa1, &(0x7f0000000640)={0x0, 0xe8ce, 0x0, 0x20, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000020c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x6007, @fd=r2, 0x0, 0x0}) io_uring_enter(r3, 0x6f85, 0x0, 0x69, 0x0, 0x0) syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) readv(r6, &(0x7f0000000300)=[{&(0x7f00000019c0)=""/196, 0xc4}], 0x1) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xc6, &(0x7f0000000400)={@local, @link_local, @val={@val, {0x8100, 0x2, 0x1, 0x2}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x1, 0xb0, 0x200, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e24, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x1, "65a252e7cb7a5918c004a9971a4696ced2c32242b1ec9fe34818d8ccd82041b7", "c930713c550e74ee13c2638ac75b2a9666efd31a34fce4498df8105d8bd8ed283a220c3a9becd8a70d3607ea8270d351", "ae12e16b560f2f8ac4ca3e745ce285f12f6e8719e7f1e7f286a68f76", {"980aa8fb8f80d69f1fb587086447e93e", "55e824bb69e8333100300b088233545a"}}}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000240)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x8}}}}}, 0x0) recvmmsg(r7, &(0x7f0000004680)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000005c0)=""/4096, 0x1000}], 0x1}, 0x1}], 0x1, 0x0, 0x0) r8 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x1, 0xbfdffffc}, &(0x7f00000000c0)=0x0, &(0x7f00000003c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x95e3}, 0x1}) io_uring_enter(r8, 0x47f6, 0x0, 0x0, 0x0, 0x0) r11 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r11, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x8) socket$inet6_tcp(0xa, 0x1, 0x0) r12 = socket$rds(0x15, 0x5, 0x0) bind$rds(r12, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r12, &(0x7f0000000180)={&(0x7f0000000340)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000280)=[@rdma_args={0x48, 0x114, 0x1, {{0x9, 0xb2}, {0x0}, &(0x7f0000000940)=[{&(0x7f0000000600)=""/194, 0xc2}], 0x1, 0x6, 0xe}}], 0x48}, 0x0) socket(0x10, 0x803, 0x0) 28.66428356s ago: executing program 9 (id=8266): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x129c81, 0x0) ppoll(&(0x7f0000000280)=[{r1, 0x6200}], 0x1, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x15) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x4, @empty, 0x2, 0x3}, 0x20) r2 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r2, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x6}, 0x20) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000001000500050007000000000008000900030000001400200000000000000000000000e1ffe000000108000a0000000000060002000100000014001f"], 0x5c}, 0x1, 0x6c}, 0x0) 27.676177346s ago: executing program 9 (id=8271): fsopen(&(0x7f0000000280)='ceph\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r0, &(0x7f00000bd000), 0x400000000000100, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) sync() ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000000008ef54476020000000000109022400010000000009040000012300000009210000000122050009058309"], 0x0) syz_open_dev$midi(0x0, 0x500, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0100000002000000050000000700000000000000", @ANYRESDEC=r1, @ANYBLOB='\x00'/20, @ANYRES8=r1, @ANYBLOB="448978b9fca64dae1e2690bd48c297a352b531f6858a6b323fc20507cbb8b67787063ae7d304a3e0db3078847876c22bfed0b8541b081cc61dd5a2cc73d8e68d", @ANYBLOB="0000000ed2ebd7580be51f13ca6c1249dc6b4f1f4467cb6bc0c7d8cad6095c87643e8806fb76c1a28d44c48e4506a5d843087705972345103825abdd287648fec794e40dea3b06c7559e9d0f0a0cb3a4a9a02f046ecf49fe877743c05956bff6ae58c446d289628fb9097d100000000000bf52f29ada705f3da7307c457b31"], 0x50) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(0xffffffffffffffff, 0xc0a85352, &(0x7f00000002c0)={{0x14, 0x8}, 'port0\x00', 0x80, 0x80010, 0x9, 0x1, 0x7, 0x5, 0x4, 0x0, 0x2, 0x10}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100), &(0x7f00000004c0), 0x83f, r2}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000280)={r2, &(0x7f0000000300), &(0x7f0000000200)=""/35}, 0x20) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="01000000000000008f02"]) epoll_create1(0x0) r7 = syz_open_dev$video(&(0x7f0000001980), 0xe, 0x280) ioctl$VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f00000019c0)={0x0, 0x9, 0x1, 0x0, 0x3}) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f00000000c0)="ad56fa8ef1d91a4574758ecefbe1d7083403c8319f9406dfc1f3f74f65176174b61252fdc74379bf419e83c706e59c1600"/64, 0x40) accept4(r1, 0x0, 0x0, 0x80400) 24.990041864s ago: executing program 6 (id=8277): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) getsockopt$inet_tcp_buf(r1, 0x6, 0x21, &(0x7f0000000140)=""/166, &(0x7f0000000000)=0xa6) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), r1) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r2, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000480)=ANY=[@ANYBLOB="ac000000", @ANYRES16=r3, @ANYBLOB="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"], 0xac}, 0x1, 0x0, 0x0, 0x48800}, 0x4000) socket$unix(0x1, 0x5, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) socket$rxrpc(0x21, 0x2, 0x2) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000840)=@gettfilter={0x2c, 0x2e, 0x10, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x9, 0xd}, {0xe, 0xc}, {0xf, 0xf}}, [{0x8, 0xb, 0xe844}]}, 0x2c}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) 24.467026204s ago: executing program 9 (id=8280): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x135) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x4, &(0x7f0000000400)=""/4096, &(0x7f0000000000)=0x1000) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) r3 = socket$netlink(0x10, 0x3, 0x10) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000300), 0x4) r4 = socket(0x2b, 0x5, 0x0) sendmmsg$inet(r4, &(0x7f0000000040)=[{{0x0, 0x1b, 0x0}}], 0x1, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r3) mq_notify(0xffffffffffffffff, &(0x7f0000000140)={0x110c230000, 0x3, 0x2, @thr={0x0, 0x0}}) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000040), 0x3, 0x200800) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000100)={0x0, 0x101, 0x1b6}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f00000001c0)={r5, 0xfffffffa}, &(0x7f0000000200)=0x8) 24.466479713s ago: executing program 6 (id=8281): capset(0x0, &(0x7f0000000040)={0x200000, 0x220000, 0xc, 0x0, 0x2, 0xfffffffe}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000, 0x100, 0x1}, 0x20) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000000040)=0x9186, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'netdevsim0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10) r4 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r4, 0x400c6615, &(0x7f0000000200)={0x0, @adiantum, 0x0, @desc4}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d00)=ANY=[@ANYBLOB="6801000000010104000000000000000002000000080003400000100e080007400000000024000280140001800800010000000000080002007f0000010c00028005000100000000001400108008000140000000000800024000000000240001801400018008000100e000000108000200e00000010c000280050001000000000034000f800800014000000f7508000140fffffffd08000340000009c7080003400000008108000240000000e5"], 0x168}}, 0x0) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), 0xffffffffffffffff) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_INFO(r5, 0x0, 0x481, &(0x7f0000000140), &(0x7f0000000180)=0xc) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000080)=""/152) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000040)=ANY=[@ANYBLOB="d8010000", @ANYRES16=r6, @ANYBLOB="010000000000fbdbdf25010000000800050001000000060006004e220000140002007767320000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5427c"], 0x1d8}}, 0x0) 24.204815976s ago: executing program 9 (id=8282): syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) socket$key(0xf, 0x3, 0x2) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f0000003580)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) (async) setsockopt$sock_int(r0, 0x1, 0xc, &(0x7f0000000100)=0x6a05, 0x4) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async, rerun: 64) r1 = socket(0x10, 0x3, 0x0) (async, rerun: 64) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)={0xb4, r3, 0x1, 0x70bd27, 0x0, {}, [@WGDEVICE_A_PEERS={0x68, 0x8, 0x0, 0x1, [{0x64, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ALLOWEDIPS={0x3c, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}]}]}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0xb4}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) (async) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x2}, 0x10) (async) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="200000001600010a00000000000000000a0000000c0000800800", @ANYRES16=r1], 0x20}, 0x1, 0x0, 0x0, 0x200c0801}, 0x0) 23.736535805s ago: executing program 9 (id=8285): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = syz_io_uring_setup(0x70ca, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x3, 0x179}, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x40, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="1a", 0x1}], 0x1}) unshare(0x22020600) socket$packet(0x11, 0x2, 0x300) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="17"], 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000007c"], 0x0, 0x97, 0x0, 0x1}, 0x28) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ptrace(0x10, r5) ptrace$setregs(0xd, r5, 0xfffffffffffffffc, &(0x7f00000003c0)) ptrace$getregset(0x4205, r5, 0x200, &(0x7f0000000080)={0x0}) connect$netlink(r4, &(0x7f00000005c0)=@proc={0x10, 0x0, 0x25dfdbfd, 0x1000}, 0x5) ioctl$SIOCGSKNS(r0, 0x894c, &(0x7f0000000140)={'bond0\x00'}) io_uring_enter(r1, 0x4d10, 0x2, 0x2, 0x0, 0x0) 23.471012212s ago: executing program 6 (id=8287): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r2, 0x11c, 0x4, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r3) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000840)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000240)=ANY=[@ANYRES16=r5, @ANYBLOB="010028bd7000fedbdf2544000000080003", @ANYRES32=r6, @ANYBLOB="0a0018000303030303030000080070000400070030015a8054000080130002"], 0x160}, 0x1, 0x0, 0x0, 0x18000}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x100000000009, 0xa, 0x0, 0x3}, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4043, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) syz_usb_connect(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120101029b95de207d077a621000010203010902240001380880040904dae00203"], &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0}) r8 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r8) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000640)={0x2020}, 0x2020) setsockopt$inet6_tcp_int(r7, 0x6, 0x10, &(0x7f00000001c0)=0x8, 0x4) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r9 = syz_open_dev$swradio(&(0x7f0000000380), 0x0, 0x2) bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x18}, 0x18) ioctl$VIDIOC_QUERYBUF(r9, 0xc0585609, &(0x7f0000000440)=@userptr={0x0, 0xa, 0x4, 0x0, 0x18aec3a0, {}, {0x1, 0xc, 0x6, 0x3, 0x2, 0x7, 'wCZb'}, 0x6, 0x2, {&(0x7f0000000400)}, 0x3}) 22.627505228s ago: executing program 9 (id=8288): io_setup(0x10000, &(0x7f0000000800)) (async) io_setup(0x9, &(0x7f0000002e40)) (async) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x40002, 0x0) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000040)="f6f57e863ded82f78b7e71ce51421f0c19a1d603ee58ab4fee588ad267046aad2f178441efba07f91548953f19", 0x2d}, {&(0x7f0000000080)="6543d0aaab830722ac8993839d6bdfe9acc14b91df8f92d6158fa107629a355a1529d0284f2c03eef8eece5857f1866f5b50060ea98c9ac8f911644bb47998a9c848ef476822d50527b5311f7bb0c5825b185b5336472915146c91e664774fade01b04b095e60bdc1cee9450fb345d926420eb05ca5a781c57086e3a7b985f2a6aa6fdc6b5028eaf27034d45a4d835c2c304", 0x92}], 0x2, 0x0, 0xf) 19.622909504s ago: executing program 6 (id=8291): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@fallback=r0, 0x20, 0x0, 0x2, &(0x7f0000000000)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0]}, 0x40) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/65, 0x328000, 0x800}, 0x20) syz_clone(0x80040000, 0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x2000004, 0x31, 0xffffffffffffffff, 0x0) r3 = creat(&(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) unlink(&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r4 = open(&(0x7f00000000c0)='.\x00', 0x20800, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x490882, 0x0) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r5) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r3, &(0x7f0000000540)={&(0x7f0000000440), 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x3c, r6, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48880}, 0x0) r7 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) ptrace$getregset(0x4204, r2, 0x202, &(0x7f00000002c0)={&(0x7f0000000280)=""/57, 0x39}) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r7, 0x84, 0xa, &(0x7f0000000400)={0x93de, 0x1, 0x0, 0x3, 0x1ff, 0x7, 0xdff8, 0xb, r8}, 0x20) getdents(r4, &(0x7f0000001fc0)=""/184, 0xb8) ptrace$poke(0x5, r2, &(0x7f0000000200), 0x0) 18.304400947s ago: executing program 6 (id=8295): unshare(0x22020400) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') write$sysctl(r0, &(0x7f0000000000)='5\x00', 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0xc0686611, 0x0) 17.919552637s ago: executing program 6 (id=8296): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x38011, r0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) r5 = socket$inet6_udp(0xa, 0x2, 0x0) dup3(r1, r5, 0x80000) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000680)={0x0, 0x0, r4, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, &(0x7f0000000700)={0x0, 0x0, r4, r6, 0xe, 0x81, 0xa, 0x9, {0x4, 0x2, 0x2, 0x4, 0x6, 0xebe9, 0x8, 0x8000, 0x5, 0x90, 0xaf36, 0x7, 0x2, 0x8, "0002891a2b0e4b9935069338a9b12ef0d295d0e6bfd080808779e7cd8966615d"}}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = syz_open_procfs(0x0, &(0x7f0000000000)='task\x00') getdents64(r9, &(0x7f0000000280)=""/208, 0xd0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r9, 0x6, 0x23, &(0x7f0000000380)={&(0x7f0000773000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000100)=""/124, 0x7c, 0x0, &(0x7f0000000200)=""/236, 0xec}, &(0x7f00000003c0)=0x40) sendto$unix(r7, &(0x7f0000000080)="008e", 0x2, 0xd1, 0x0, 0x0) recvfrom$unix(r8, 0x0, 0x0, 0x10102, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r10 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r10, &(0x7f000001a240)=""/102400, 0x19000, 0x1000000000) 10.108269572s ago: executing program 8 (id=8312): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x4000800) 9.961522994s ago: executing program 8 (id=8314): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$P9_RRENAMEAT(r2, &(0x7f0000000180)={0x7, 0x4b, 0x2}, 0x7) syz_open_dev$dri(&(0x7f0000000580), 0x10000000007fc, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) close(r3) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x4000000) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000400)='.\x00', 0xa4000021) r8 = epoll_create1(0x80000) r9 = fcntl$dupfd(0xffffffffffffffff, 0x406, r8) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r9, &(0x7f0000000040)={0x10000000}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r3, 0xc02064b9, &(0x7f0000000280)={&(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0], 0x6, 0x0, 0xcccccccc}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r3, 0xc01064bd, &(0x7f0000000340)={&(0x7f00000002c0)="5e32c950c2ff61e2994655d1156daea715318877b34f03884216f7058d5901a3f141f60d564430d50aac824e674750be8303981c3c16e6bc77532d851368ec6305346e49e48497d26f45f0fa89f4c1340cdf65be472c2b48edd9d906e3ef091d7e489bb84a33f3445b7e03f8", 0x6c, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r9, 0xc01864ba, &(0x7f0000000380)={0x3, r10, r11, 0xb0b0b0b0}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r1, 0x8934, &(0x7f00000001c0)={'veth1_virt_wifi\x00', 0x6}) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r13, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4088, 0xff8}, 0x0) r14 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r15 = io_uring_setup(0x2c93, &(0x7f0000000100)={0x0, 0xf0ce, 0x3480, 0xfffffffc, 0x14}) io_uring_enter(r15, 0x0, 0xcb, 0xf, &(0x7f0000000000)={[0x20]}, 0x18) ioctl$ifreq_SIOCGIFINDEX_team(r13, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r14, 0x8916, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x22, r16}) 9.635639315s ago: executing program 8 (id=8315): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000a8f4acdd08590492082a871c00000108021b00010000000009ae613745db7c5cefe5b5de889a07386d3ccabbc7a12cdc2f91b86deb54bf22d97eba06636387efa26bcbc50355df0ba38076"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$printer(r0, 0x0, 0x0) (async) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000006c0)={0x18, &(0x7f0000000500)={0x0, 0x18}, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, &(0x7f0000000040)=ANY=[@ANYBLOB="00150100000005b3cfd90e73f56e92e6177ac70f4f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 7.210966889s ago: executing program 37 (id=8288): io_setup(0x10000, &(0x7f0000000800)) (async) io_setup(0x9, &(0x7f0000002e40)) (async) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x40002, 0x0) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000040)="f6f57e863ded82f78b7e71ce51421f0c19a1d603ee58ab4fee588ad267046aad2f178441efba07f91548953f19", 0x2d}, {&(0x7f0000000080)="6543d0aaab830722ac8993839d6bdfe9acc14b91df8f92d6158fa107629a355a1529d0284f2c03eef8eece5857f1866f5b50060ea98c9ac8f911644bb47998a9c848ef476822d50527b5311f7bb0c5825b185b5336472915146c91e664774fade01b04b095e60bdc1cee9450fb345d926420eb05ca5a781c57086e3a7b985f2a6aa6fdc6b5028eaf27034d45a4d835c2c304", 0x92}], 0x2, 0x0, 0xf) 6.899885707s ago: executing program 7 (id=8318): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/meminfo\x00', 0x0, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000280), 0x1, 0x161201) ioctl$USBDEVFS_ALLOW_SUSPEND(r5, 0x5522) ptrace$peek(0x2, 0x0, &(0x7f0000000440)) r6 = syz_io_uring_setup(0x284, &(0x7f00000000c0)={0x0, 0xf7fa, 0x3180, 0x8000, 0x1d8, 0x0, r4}, &(0x7f0000000240)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd=r4, 0xffffffffffffffff, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) fsopen(0x0, 0x1) io_uring_enter(r6, 0x627, 0x4c1, 0x43, 0x0, 0x30) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r9 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r9, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r9, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0x3}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) r10 = syz_usb_connect$cdc_ncm(0x0, 0x97, &(0x7f0000001a80)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902850002010000000904000001020d0000052406000105240004000d240f01fcffdfff000000000006241a00002a052415000008241c0d000d0b00052415b40807240a010347050c241b040006004a000100060424020d0905810300020000100904010000020d00000904010102020d0000090582020002000000090503020002030000e806d794495279ca8dd0dd6653f7697ef831ca0e05eb958cb87742937789ecba4bb4dc"], 0x0) syz_usb_control_io$cdc_ncm(r10, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r10, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r10, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x6, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r10, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r10, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) 6.435418725s ago: executing program 8 (id=8319): socket$l2tp6(0xa, 0x2, 0x73) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)=@generic={0x0, 0x0, 0x8}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008014}, 0x4) recvmsg$can_raw(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/7, 0x7}, 0x2040) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x5}, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(0xffffffffffffffff, 0xc01c64ae, &(0x7f0000000100)={0x0, 0x4, 0x9, 0x3, 0x8, 0xa, 0xfffffffc}) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x71) unshare(0x40000080) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) r3 = fsopen(&(0x7f00000004c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r4, &(0x7f0000000140)='./file0\x00') readlinkat(r4, &(0x7f00000001c0)='./file0/../file0\x00', &(0x7f00000002c0)=""/204, 0xcc) write$sysctl(r2, &(0x7f0000000580)='1\x00', 0x2) shutdown(0xffffffffffffffff, 0x1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12011900000000406a0563000000000000010902"], 0x0) write$sysctl(r2, &(0x7f00000000c0)='2\x00', 0x2) 5.15939905s ago: executing program 0 (id=8320): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="440000001000010800"/19, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000004001a80180002"], 0x44}}, 0x4) 4.370349723s ago: executing program 0 (id=8321): setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000580)={{0x84, @broadcast, 0x4e23, 0x3, 'lc\x00', 0x2, 0x4, 0x7b}, {@private=0xa010102, 0x4e22, 0x2, 0xc8, 0x80012d58, 0x12d5c}}, 0x44) 3.915954099s ago: executing program 0 (id=8322): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x4000, 0x64) syz_clone(0x668c7400, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = semget(0x3, 0x2, 0x140) semctl$IPC_RMID(r0, 0x0, 0x0) 2.962230887s ago: executing program 7 (id=8323): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, 0x0) (fail_nth: 2) 2.912994812s ago: executing program 0 (id=8324): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x4000800) 2.6508261s ago: executing program 38 (id=8296): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x38011, r0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) r5 = socket$inet6_udp(0xa, 0x2, 0x0) dup3(r1, r5, 0x80000) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000680)={0x0, 0x0, r4, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, &(0x7f0000000700)={0x0, 0x0, r4, r6, 0xe, 0x81, 0xa, 0x9, {0x4, 0x2, 0x2, 0x4, 0x6, 0xebe9, 0x8, 0x8000, 0x5, 0x90, 0xaf36, 0x7, 0x2, 0x8, "0002891a2b0e4b9935069338a9b12ef0d295d0e6bfd080808779e7cd8966615d"}}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = syz_open_procfs(0x0, &(0x7f0000000000)='task\x00') getdents64(r9, &(0x7f0000000280)=""/208, 0xd0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r9, 0x6, 0x23, &(0x7f0000000380)={&(0x7f0000773000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000100)=""/124, 0x7c, 0x0, &(0x7f0000000200)=""/236, 0xec}, &(0x7f00000003c0)=0x40) sendto$unix(r7, &(0x7f0000000080)="008e", 0x2, 0xd1, 0x0, 0x0) recvfrom$unix(r8, 0x0, 0x0, 0x10102, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r10 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r10, &(0x7f000001a240)=""/102400, 0x19000, 0x1000000000) 2.16170313s ago: executing program 8 (id=8326): syz_usb_connect(0x2, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x44, 0xe2, 0x20, 0x8, 0x13d3, 0x3224, 0xcb0d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0x0, 0x20, 0x0, [{{0x9, 0x4, 0xe7, 0x0, 0x0, 0x20, 0x1, 0xd6}}]}}]}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0x1000, 0x0, 0x0, 0x7, 0x8, 0x0, 0x0, 0x3, 0x0, 0x8, 0x6}, {0xffff1000, 0x10000, 0xc, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7, 0xff}, {0xeeee0000, 0x8080000, 0xb, 0x4, 0x7, 0xc4, 0x0, 0x0, 0x8, 0x3, 0x0, 0xfc}, {0x0, 0xdddd1000, 0x18592cbc7c573fc6, 0x9, 0x1, 0x0, 0x9, 0x0, 0x8, 0x0, 0x4, 0x2}, {0x80a0000, 0x6000, 0x8, 0x0, 0x8, 0x4, 0x0, 0x0, 0x0, 0x3c, 0x2}, {0x100000, 0xeeee0000, 0x0, 0x2, 0x80, 0x1, 0x2, 0x0, 0x0, 0xff, 0x1}, {0x0, 0xeeee0000, 0xa, 0x4, 0x1, 0x0, 0xa5, 0x20, 0x0, 0xff, 0x5}, {0x2, 0x6000, 0xc, 0x0, 0x0, 0x7, 0x8, 0x40, 0x26, 0x0, 0x0, 0x2}, {0x80a0000, 0x8cc}, {0xdddd1000}, 0xddf8ffdb, 0x0, 0x0, 0x130, 0xc, 0xf801, 0x0, [0x80000001, 0x0, 0xffffffffffffffff, 0x1]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_usb_connect$cdc_ecm(0x5, 0x59, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x47, 0x1, 0x1, 0x5d, 0x10, 0x5, [{{0x9, 0x4, 0x0, 0xe0, 0x3, 0x2, 0x6, 0x0, 0xd, {{0x8, 0x24, 0x6, 0x0, 0x0, "3324ee"}, {0x5, 0x24, 0x0, 0xff}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x6, 0x2, 0x8}}, {[{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x8, 0x0, 0x1}}], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x5, 0x0, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x5, 0xde, 0x4}}}}}]}}]}}, &(0x7f0000000500)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x250, 0xb, 0x81, 0x9, 0xff, 0x3}, 0x5, &(0x7f0000000100)={0x5, 0xf, 0x5}, 0x7, [{0xcc, &(0x7f0000000140)=@string={0xcc, 0x3, "cf05c69f423d30ffbd11c70379cd32f50161cf22a2d44c3effa226ffd97f0500f7fabdfc7d05174a7a6248fd1650dd4585c3354fbbdf6fdb9863cb315d1e005f654081237eef822bf735694d4926db7f08e46aef2f16c2a0e580fede919d936f77e79908a838118a9cdaf5eecf1c088b5087cda717ffadfa41f43a7a8b2a3fae353e92cc08bca234427c6cad4d55b744e528b3ce4fb9e2716f62eeaa54bf2eaac8dd56b17199778697efc78059ee98dd8bc74e5ce2eb081ec19a6130aff473fd01e1b9415829b1e0425b"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x2c01}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x4774634fae059b53}}, {0xe1, &(0x7f00000002c0)=@string={0xe1, 0x3, "98796ea8e443658c366ab41ffe718c1fedfa9c6a67d37fa1c5b8a7f933c1db31be9d4b141f144b13d4364d98de288394d00cc487707da37f573be8cf5c8011caaad77cb002267440481f44c2dd88f09e4b08725d1f03c562989f2b6b4bd93a3bb9220a07dd339b4a6ae99e983eb1c9822cef0a7f8a02c919792cf84fac8493dabc0bbbcf5a880ea688c5e80553204c6f914d7024dc0f1e415dc64ffbf1ae0921a474f441dbc51431ea8c66f96f25a0eec4f4132c3b80d92193262453f273c70c1d39c4a8a2eb319d2b788a4b14ea353918bd131726650d94b7a8ed2cc9dc8b"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x436}}, {0x35, &(0x7f0000000400)=@string={0x35, 0x3, "6d5a516b01bab15d348ed4e39778cc5ca20fd041ee473473463ccfc2474c3641f76d6f93814b7e384becd80d99a4b0c58cf4df"}}, {0xa2, &(0x7f0000000440)=@string={0xa2, 0x3, "daf49c2ca6f5113595fe22c52b9777bb3fc7a0af5056d2af25cfc80de684ee9db4e933463fadfd5c27e2524b4b9d89030e9467dd747ce3f956933aee7bfdc649cbb9955a8d94aff968e4841c77d2306534da26925cf3b79064bb67b3f604ee4b15924e8fc9695bb65cf80dbd4c9653893eb0d0bb5731495d122605f6464c481053701bd7cc1abf63dd997653f70638f55239c79efb64eccafc4292d3f1d14ce3"}}]}) 2.135063922s ago: executing program 0 (id=8327): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) fcntl$lock(r0, 0x25, &(0x7f0000000080)={0x0, 0x2, 0x9, 0x1fd}) fcntl$lock(r0, 0x7, &(0x7f0000000280)={0x1, 0x0, 0x2f, 0x9}) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000000)=0xb0000) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0xee6, {0x1, 0xf0, 0x4}, 0xfe}, 0x18) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000007c0)}, 0x4048081) 2.124162699s ago: executing program 7 (id=8328): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xc1b}, 0x28) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) r4 = eventfd2(0xc44, 0x0) ioctl$VHOST_SET_VRING_CALL(r3, 0x4008af21, &(0x7f00000002c0)={0x1, r4}) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000100)={0x1, r4}) close_range(r3, r3, 0x0) io_uring_setup(0x5dd5, &(0x7f00000001c0)={0x0, 0xeec2, 0x1, 0x3, 0x115}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x6, 0x400e, 0x4, 0x4, 0x2, 0x1000, 0xf1, 0x0, 0x7fffffffffffb, 0x5, 0x4, 0x1, 0xfffffffffffffffc, 0x5, 0x0, 0xbde], 0x1000, 0x3c4210}) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x408d6}, 0x24000010) 1.731144613s ago: executing program 7 (id=8329): sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)=[{0x0}], 0x1}, 0x44000) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100), 0x10000, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)={0x2, 0x13, 0x9, 0x7, 0x21b, 0x0, 0x70bd2c, 0x25dfdbfb, [@sadb_ident={0x2, 0x0, 0x6, 0x0, 0x3}, @sadb_x_nat_t_port={0x1, 0x2a, 0x4e23}, @sadb_x_filter={0x5, 0x1a, @in=@private=0xa010100, @in=@empty, 0x15, 0x14}, @sadb_x_sec_ctx={0x201, 0x18, 0xff, 0x7f, 0x1000, "4b5ca588977c2e82b86c1c46038667d12c8392b859ff515bde2fec5af485b1148c9e0e8aa5c521e852bd8f421450a66faa16f5d568ecdd2e7b25ea1943b3296cf464f6df432fa8d2e5bdfb60bf7c7babae601b0f48c950820b67ec65d6ad3428a996b907ff06ab174ead4a19e12782a3b4667e90ee525607cee4f3e7bae1603f7ab7b90ea1bcd1b0bf6a6b049072db30c9410a8b642ed50b7c49d1f6dc357f289c61abf93b8476cb401b2a2675b303d9b5997adb56fcbd21e3f79010bbc9504b4b2a827dc5ece1d347ecdedbe22fc8a4c377f512d069910c36499804411e90ecf74304511d79711dd1f863cebbe91a2f2f82e537cdae8772dd516fd6b0f11075e41568a666c1f613f9b9586a4889059863672193d3b315ed575e894e871eb345de55ba7a17cba7086f05e3db596fa66d5b49566314ed6272fc7ce70f5f300f1b1f982890de6cae9fb92dd6e9eed4e0429483de795123cce11e958dd45c40236aff890d66e12a48b5b9ce9d585b58c95ac94a9b0a30db74e804f49d47800ee11673ca057caea6e00eb8dbbfaf4e3afb2eee6404ba811b247bc466f6224ecb8bc7f92deea69fc435476cc75c33e1cbdbf5586358747ba086231ae4172f7ff726b8fa8aa7c3603aa553d0b6c53028a2e779e60bf42e6d219e7a6fe806292a57019b91c122e52a8ae3f31a1f7782a1e3bb49f283cd2a448d2b66ef52fcea0b31b10737c52cfa06ee287c9eba52a435cd791fae2be99a4476127511d0e603ce30fb30b8330db7ee48d9bbbd1c35e6e8437f40e4ac2a83de75fe47357a3bdc10106c819d5b5d34b5528b6c7254d97efa3c063f79fb20c8f0f31858bbe1dcb4dd36a32b9e3a0c76f67fa5854e3adc905bc4124fee92426766328626e5a52992de0c6c55f9d7d440d051c4c6a59437b197267d8c2c699f6d688bd55b33a2f5026277a6ef92e54447ea29ed0a38bfc7b69ec9763a27153c376ff04741af582d32e115f4858b126b587a26b7d4d164fef957029bda1e781a9616b7417337c39e801189e16231a01a96eb3ed25ee5daec969b0588cadd9b4d8713ff96603ceb1553b8200c57aa9d7c09afbb596c821a78729d0e0b67a1b1a083f7c3100c732eca0d6d8618c44a31a9af87254a5a61efabc93397d4bfa8ae45de2180540f055621770478307783e8fe48fc5092cf409849f6c62b3f9c0383922be23cc468bde12b896f0ab2ea55e1a18789e7061212144b243ee3ce0792bfcedf2a0b6dfde4d88964af0e09f0a4a90c5a320e3bf52bc88183028479c89f503be92d33c4c1438da396e2a6429d2555f97dda172b8e890a8be3d742b93b73715e956ab60b0c9fc69424f6c13476c4357c1e61b7a5000f4db1888baa70bdcf261d9b34ee0ebcc96eac7e0739180fa523f4c83df6c5f94ff772ecba0db8cfc6355a9bb110b996c4dbfd3a6126cc81f8cc41ec4b49470227981ff71f931565bb0311f7a935df73519949f86ac4c605f1497401bd9c17e1c3395ef3af55ffffcf3f5f16d0259fb9426818d52034336581cb936f6804736e2e7cd9c25bc0c122fa511342d528b681213c82542878337661307e991a0bb963220f866056e92a61163f7ce5fd9c5c18e3f9181a553a14863ba076bc2803c62b1919bf71a72f4fee9ccf2ceacf3155707067a592936e061723fd84f13bb9a037161c0b9ed3e8e6bb98451dea70f36fe77065be691a7b6d58767fe85515103c5a467c57efe808102208069ce250e8de8ba639df8f95f7006a95a467eeecf9b5b451002043a484c5457844915d541252f99b44fad56361fd4bb40b7c45c59e1af2558c919c04d860f4973503b1dd928af75b55cb000d1318a177265c8c1e610ab0d84f93a1fa059fe57e0ce08ab8ff104ea561b9707d91b7319fead54b55a28485942ffeb4dba8ff1001ce52a76fff64b05a44cf91e367186cc0775ac3fd2f94399b9aaf206234dfd42801b3755d2b182c91ed1df3e76fae7492bfee030a47f6bd088fc24bb229f9bc34807e973c7c13cc813a91c3ead7a6d2d69a17293b61019608ba5e6bbdd30b099bb628672d00215d1841a67aa886d33c9d39cca6d1770681fcbc8afd4ce8830017445f1260820d2032d0e006fef2f8b5cc1560cff18bde0a5328bce1140fc09fbad18d9521b1baf941f49702e9e721ea9a72c26c747fa1db032728d2171d9c70bd13a1e7fcd0abbab8eab0885d384f242913536569829399440cde56ab7dd1e8c894c1907a2d1ed31e84cd9ada1315440972d41d817df85f46174d737e35607d66f985865b0e384960916960daa72af7dc43bb9ef0b6018b497a3cef25f9cdd370d16f03f9dda2e5d2e59319e4293ad11d9c037112740cdb65f0e0cc48e76e7eb3f2d6be28aa0039262164e380e58f7b88c8f0e79bafeb42485bfdec84abfaa123eadded51f2e322d28b0e87e3f1496c3919504373e663436d9ea2fd64d3e7e97b191fc9432d90e97a14d6df37606fbea08e00871627ad263af14188364ee09584f9002f0047fc4e72f8ba4f501a26e39d3fc2c94ec2e8d0154d926aebd0a2ba2fb75d3360e3661141c290424d857512efa668b6f7382bf1360fda99906e5a572bc6f5a44d480e3ad2239c734eace8668c3082ae8930e26fd43fc8721fa0588e899acf2930d37694a440edb1d47b811589e33f4a2576008ed5f22e6d393b9bc12ce0f498317aad5ce1147b49023e9b44facc5d8e64038d7b3465868d1f830eb8ddfd27bb7023c3b13d1f615d5d00180d68883e2b60ad2f956824d5408b7ff69149db6f60e6005f468718ece0539d18ba187eaddb1ce62b7fbd81ab71bcc3c5716eed8fad6e8b13f5318a92896d12477aa8691c291039eb98793c608809311da43f1f263d042af32f61cbb52c60dc20b7309c223b9101dd0408d16478235b24c19ac6a7efc96f1f0112bcc83bf1be0c40f3fc5e2eaa666463cdcbbfdc2bd0868c574fb8c93804595ec11616d98b8923276c8b95e7302b5261628f05b0830e4ba33719c5a460442923636b42b259418af3004b0743a8d1ae7abccd1204ce71ec3e292aca3b1bd030b979857a8ba68860c5d480455e1bc514f169c06b26c7d42663d9bb5dd8bb82d7ac00020061a034c8172bb21ba83869820ac98a93e093be7e7e07ed0f993999f69026d285afe7b677d3d405796017e88ca9c1c30712da2171888c8881a6b8bfcbfe65509a8f9af794e30e715ea2227b6779e61257db70db90fb6c7f2745d4117311b9de20e06d98aca56c3006c1edf06c3b8a5eb83ad75a7e44a20d89742d7424b08f175848696cc75edbea091ad62db38da0b4ba2c0ed8a7875912c6a15c3b50df77a3aaf73d9a8f261b57d6cff0e62b9350039e4c276c1ea8206cbb962e2c7ac55a1cdf55cba9f2e9e2f9e2146649153f70f6d62d82fcfbbaaa5e7e67270fe2f03c4c10608a4384dbe491e0c17447c266c9531e0bfa01e08b8cca2493a629ffe7150533b9d2af3ab3935c6ae6089df2abebc8742001f9c351b2fbdb4b7baffd274ab63c685b15d40761463734103a28cb835440beeb8378a4b3c99dabdbc5456dbd3c0c095075656b55ea16e6aa453b0064ebdeba13a8b072e1352ccec5e62ca4984770b5db89e9f884aaaa88f203a6db368f1eab60642af681dc90edc14c37f353773e0cd8f01596c24fe8a65a58f4e2313a88150b2fde364b6a9877a6e923e518333e273e565250f0753cd7db48d4c91cd72cb4285a3fce454195dbf9e4158c5f062ffe2948244e4442a84c980c308396bf9502b1f06b8daf89e9ac84864a27fb3832c7ec8e3cefb6098c29cd8c72afbbfc293b3110d0db2a9d5b19c6cda5837ddf2caa941e284c1722b154bff98b62761ab6b6c81e5272cc5901ca2b32c155162d7ace618becc39cb93f841c2a2ab9f55dbb0ad94753fd312b82530440f3a150fde0e6474c494c24f927b970efb7af2d2863d3de77d93f27b2c3d16981f23c03644d7feedbbfdb24fddd653748f0f62f2c2703735908f1e69344e422e894cdaebc3e0562d737fefbfb3da8d54ef6f8b65b89182d4a79a21e44f6a16626575933ccca220c9f13eda7aa0cbaf30d6309f76f0faf03cf51bfd018bb10e84e5a8ea73cb89a4dd5ffacff4c0382cc6620a0ea17400759a78cc65cceb7d5c1bdbcc09bee07fe6e784f4677b8a4bfda3814ebdcb66541a0931595027dabe9641e6bea5366f366d6c037eb33016d4b00f260f5871c2c5417b2c648b9d2b8e0813abee67f55708260bb08356caf6d67134171324cec5bfdcb5d4697211b206694ff1a660605be464e5e23388f12edf69ac7a7bdf46f08dbe727d7d517498ccee270d6ccb461e23683192a6c9b9199cc6f5b2cdd0578844e78b12d72d600485915356f3bad6b948318476169381ec7541f4ab31722ee7b2a89da7ceac899a6186d1bbbb335c365d98e93b6ce8d342aa0e7a127bb451186decbbc12f522d478d1a120b2fb516724ea38edc8d66a7aa1ad148f2a911dc5e818fe77cb81888f39c5cf03597417292319f86e3e4f164475122eb59fedfb2303122e4daf9bb00f304aa9fd1d2c1e1adda397f3e4060b3f54873239e787c2801a1cc0168f7d2dc8dd672f167ec0fbb71b569c3c010b8b621e51ecb2bd54a514572172cc48b7bf565cf1ee5e696d6b7eb4478b074cfda0ae44eef206afd6633041f0571f394ed6ea2cb3c33f4a259c211a9dfa1074eef7c99e4bc76ed24de76b18aa55d58bf7c69d5bc5fe30b1430b8046e6da6575ca2b158465843fef659968766ecb6c459395ba71cc9513eb041403d5c276d227a0e3f052160824cae9dc9896435167d2dd8150069422d9dd2a20929075b98b9737f2003ab0199116e227786b984440deae69af5fc496a85dd94d5bcb4af03575c67cc6370f13c5fc10cfa042506371115d930de6db38850fd2bac64610b2413a5645bdca23580c07149b2ec9e173e9b2b41fc6503cd68dc78fc47a1a67f1c0c28ec9304aa9cd50b669d73cbe74fd29025dda4237df0ea8725943ad13c69ac212bf6f6415362902494523d0bf54dba19d4f7a4c98a90d5ef1023d569618b18e0b6d5044352da52435d241c9753250c1582ec0b0a91f85865451a257ee78655d0bf8a734046f067063fd30667d114320fc97e54c7c18649ea6f56a57aec4cceea5d4a5f4281dc1db7760cf1ddfbdea4ea83eea70be3586def07f4abece195c7bd46e6f1a1d75f04eb7e2a2a4e10827e7fd6e373a5a4fe689cdc34ebcfc83e0a5aa17cc31037e0e49c07fc8c88654256c203e5f22dea52ace7831d3347ad0e319409e92beaecd7c604155e341a412ccc4365d2bbe8f6c430b08587cc01801cf3bbf1d2fc17464cc001ee455ac9219dfbc414b1e02f519ac27c4ce93fa56b6e33c7819a24f556695ae966e7c47bf4114495dc3cfa0afbf34472e685f01745747bfa8a98eced3cbe2f5e6b3835773572e400b38352dab654324e431895c1f116e51cce390df0196d243dafa65f9786045ae14cb4e0325f3cd6fddce7ce4ae0819901d9d462a3b6e1f13750926ac4806e3063d7cbed237744bde616c028fbad9cd5e3c9f0888bb86a3592bd8ea626823efe8739a0bcbe01ca6a191c262e98bbb6e9db12884bba0de8ed5ee662cc42ac7f0253840d13dfe9891fa4ed5839d8afc274c0d042eb239e6c9f4b754c96977cb37b6f7c2ef9853d0a65a8a61e774b75e9d64fb285e656ea8fd5aed30d1e7585d42adea29cc8f850a0d29d96b4021f7834e5583be11561109dea837936ed54bb928f4990c26882a8deca4805134c35772824fa0a2"}, @sadb_x_policy={0x8, 0x12, 0x5, 0x0, 0x0, 0x6e6bbe, 0x8, {0x6, 0xff, 0x15, 0x2, 0x0, 0xe, 0x0, @in=@broadcast, @in=@dev={0xac, 0x14, 0x14, 0x35}}}, @sadb_x_kmaddress={0x7, 0x19, 0x0, @in6={0xa, 0x4e20, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}, 0xe}, @in={0x2, 0x4e21, @loopback}}, @sadb_x_nat_t_type={0x1, 0x14, 0xff}]}, 0x10d8}}, 0x40) r1 = socket$kcm(0x11, 0x2, 0x0) sendmsg$sock(r1, &(0x7f00000000c0)={&(0x7f0000000040)=@phonet={0x23, 0x0, 0x0, 0x27}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@timestamping={{0x14, 0x1, 0x25, 0x2}}], 0x18}, 0x0) recvmsg$kcm(r1, &(0x7f0000000700)={0x0, 0xfffffffffffffe60, &(0x7f0000000580), 0xb1}, 0x2020) 955.249228ms ago: executing program 0 (id=8330): timer_create(0x1, &(0x7f0000000080)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x200000, @mcast2={0xff, 0x3}}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000340)=ANY=[], 0x8) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000000140)="8369", 0x2, 0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) clock_gettime(0x0, &(0x7f0000000180)) clock_gettime(0x0, &(0x7f00000001c0)) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x3b, 0x6b, 0xc0, 0x40, 0xb95, 0x772b, 0xa24c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x81, 0x38, 0x7f}}]}}]}}, 0x0) r2 = openat$rdma_cm(0xffffff9c, &(0x7f00000006c0), 0x2, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000000), &(0x7f0000000140)=0x4) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000380)={0xc, 0x8, 0x144, {&(0x7f0000001140)}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000540)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000500)={0xffffffffffffffff}, 0x106}}, 0x20) syz_usb_connect$cdc_ecm(0x2, 0x55, &(0x7f0000000200)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x43, 0x1, 0x1, 0x6, 0x20, 0x8, [{{0x9, 0x4, 0x0, 0x5b, 0x2, 0x2, 0x6, 0x0, 0x5, {{0x6, 0x24, 0x6, 0x0, 0x0, 'j'}, {0x5, 0x24, 0x0, 0x35d3}, {0xd, 0x24, 0xf, 0x1, 0x8000, 0x80, 0x3, 0x4}, [@dmm={0x7, 0x24, 0x14, 0x2, 0x2}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x400, 0x3, 0x4, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x6, 0x4, 0x6}}}}}]}}]}}, &(0x7f0000000880)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x110, 0xdf, 0x3, 0x6, 0x20, 0x3}, 0x5, &(0x7f00000003c0)={0x5, 0xf, 0x5}, 0x6, [{0xe8, &(0x7f0000000580)=@string={0xe8, 0x3, "0cbed8653ca7f3c30f125d34d0ff9d0de008307e8d9fb58fefd522f0d734f650cf35bf29352d6db34848b8df730ffcd9b8686f483de1a3ace0c0d794db8dba879ce7b4dc7b4482cc5de8ede8c6361d6109e069b922e236fd927914b2c6fad6f7aacc9b25b5612f98eb0803aa69a8307592f078dc30422bdc5168034ce3cbc60b4b04b37d6268a27e4629f3a2d3de265c206df57577a5e5bfea45303cc2dacf63c2d0110e9db626d81c9a19b630b2047a14faa09a437908969a247b5be36bda1be79a639f5ec47b81334ceff867a7a49924a7b893c10504f4099ea63fe03b3a351e72ce5ce1d4"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x340a}}, {0x4d, &(0x7f0000000480)=@string={0x4d, 0x3, "ff6957624a5ad17ec11c95cd48827584e8d75e29e0e2e7fc49ab7433e06d45ac8afd2eac43b8e9f3cabdd1e22d1cf3bbdba43cffbdf320e426adcdfd8829d09d0107ae9d771a6427c4ee4c"}}, {0x85, &(0x7f0000000700)=@string={0x85, 0x3, "ab3b0983ec9bb61ea159dc1815e263991b188a1c8f370fd162ae44e4f9f6e1f0606888c82f29ac005c7dfc31cfff5d42724e3d28580ccc08e7a5a7794930f95b3c22da1c5a29ff0ac9b1aba48247ec32f40747047effb6a563faf9b1f177d4f791a2053226aa3243749e2b630473c9e783963aa59acd599cac655ce5a55f98d5742f86"}}, {0xab, &(0x7f00000007c0)=@string={0xab, 0x3, "e4a1ce35ce3f050072c4783b7fb5671f37d7b876b77d8542fe1219958b6e406832d6471e33986431e23230ae98b38f13c32f663b6f640afd188251a5353ab7b96a74210f94d57cb5e1f13d9c2a83972ff6965616d4dcfbd496328bd4f73c85d8f73b8d06f29fe0ff39d35495b76faaf88153e4c8ffce549d9b1ea3093b50c948fb4d753ad4cd3951320d90b2399b7f41d2775a436f2cef2271815431105246222e977e438106d7e921"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x827}}]}) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x1, @loopback, 0x100009}, {0xa, 0x4e22, 0xfffffffc, @mcast1}, r3}}, 0x48) 319.824374ms ago: executing program 7 (id=8331): setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000580)={{0x84, @broadcast, 0x4e23, 0x3, 'lc\x00', 0x2, 0x4, 0x7b}, {@private=0xa010102, 0x4e22, 0x2, 0xc8, 0x80012d58, 0x12d5c}}, 0x44) 214.247137ms ago: executing program 8 (id=8332): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0xfffff000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) faccessat2(0xffffffffffffff9c, 0x0, 0x3, 0x300) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89d, 0xc000, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff0}, {0xe, 0xffff}}}, 0x24}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x610800, 0x0) ioctl$TUNSETCARRIER(r3, 0x400454e2, &(0x7f0000000140)) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/\x00et/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44\x8cm\xa0\x8dN\xd4\xa2\x88\x00\xd1l,'}, 0x30) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r4) getdents64(0xffffffffffffffff, 0x0, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r5 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) getdents(r5, &(0x7f0000001fc0)=""/184, 0xb8) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) syz_usb_connect(0x5, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x61, 0x3b, 0xd1, 0x8, 0x19d2, 0xff7d, 0x8c7c, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xba, 0x0, 0x0, 0xff, 0xff, 0xff}}]}}]}}, 0x0) 0s ago: executing program 7 (id=8333): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet6_opts(r3, 0x29, 0x1, 0x0, &(0x7f0000000600)) close(r2) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r5, 0x28, 0x6, &(0x7f0000000380), 0x10) sendmsg$NL80211_CMD_NEW_KEY(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16, @ANYBLOB="0108"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r3, 0x0, 0x4ffe2, 0x0) kernel console output (not intermixed with test programs): 2803.512207][ T4833] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 2803.559867][ T4833] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 2803.593343][T31328] usb-storage 4-1:0.216: USB Mass Storage device detected [ 2803.626292][T31328] scsi host1: usb-storage 4-1:0.216 [ 2805.690513][ T4852] FAULT_INJECTION: forcing a failure. [ 2805.690513][ T4852] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2805.731960][ T4852] CPU: 1 UID: 0 PID: 4852 Comm: syz.3.7942 Not tainted syzkaller #0 PREEMPT(full) [ 2805.731991][ T4852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2805.732002][ T4852] Call Trace: [ 2805.732009][ T4852] [ 2805.732016][ T4852] dump_stack_lvl+0x189/0x250 [ 2805.732044][ T4852] ? __pfx____ratelimit+0x10/0x10 [ 2805.732066][ T4852] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2805.732087][ T4852] ? __pfx__printk+0x10/0x10 [ 2805.732113][ T4852] should_fail_ex+0x414/0x560 [ 2805.732141][ T4852] _copy_to_user+0x31/0xb0 [ 2805.732163][ T4852] simple_read_from_buffer+0xe1/0x170 [ 2805.732192][ T4852] proc_fail_nth_read+0x1b3/0x220 [ 2805.732216][ T4852] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2805.732239][ T4852] ? rw_verify_area+0x2a6/0x4d0 [ 2805.732259][ T4852] ? __lock_acquire+0xab9/0xd20 [ 2805.732273][ T4852] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2805.732294][ T4852] vfs_read+0x200/0xa30 [ 2805.732315][ T4852] ? fdget_pos+0x247/0x320 [ 2805.732333][ T4852] ? __pfx___mutex_lock+0x10/0x10 [ 2805.732357][ T4852] ? __pfx_vfs_read+0x10/0x10 [ 2805.732379][ T4852] ? __fget_files+0x2a/0x420 [ 2805.732397][ T4852] ? __fget_files+0x3a0/0x420 [ 2805.732410][ T4852] ? __fget_files+0x2a/0x420 [ 2805.732432][ T4852] ksys_read+0x145/0x250 [ 2805.732455][ T4852] ? __pfx_ksys_read+0x10/0x10 [ 2805.732479][ T4852] ? do_syscall_64+0xbe/0xfa0 [ 2805.732504][ T4852] do_syscall_64+0xfa/0xfa0 [ 2805.732525][ T4852] ? lockdep_hardirqs_on+0x9c/0x150 [ 2805.732546][ T4852] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2805.732561][ T4852] ? clear_bhb_loop+0x60/0xb0 [ 2805.732580][ T4852] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2805.732599][ T4852] RIP: 0033:0x7fe3c138e15c [ 2805.732621][ T4852] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 2805.732640][ T4852] RSP: 002b:00007fe3c22ec030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2805.732666][ T4852] RAX: ffffffffffffffda RBX: 00007fe3c15e5fa0 RCX: 00007fe3c138e15c [ 2805.732678][ T4852] RDX: 000000000000000f RSI: 00007fe3c22ec0a0 RDI: 0000000000000004 [ 2805.732687][ T4852] RBP: 00007fe3c22ec090 R08: 0000000000000000 R09: 0000000000000000 [ 2805.732697][ T4852] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2805.732707][ T4852] R13: 00007fe3c15e6038 R14: 00007fe3c15e5fa0 R15: 00007fe3c170fa28 [ 2805.732732][ T4852] [ 2806.295056][T32346] usb 4-1: USB disconnect, device number 35 [ 2807.351871][ T4863] fuse: Unknown parameter 'roo*Be' [ 2808.066079][ T4870] FAULT_INJECTION: forcing a failure. [ 2808.066079][ T4870] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2808.093552][ T4870] CPU: 0 UID: 0 PID: 4870 Comm: syz.4.7947 Not tainted syzkaller #0 PREEMPT(full) [ 2808.093586][ T4870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2808.093602][ T4870] Call Trace: [ 2808.093612][ T4870] [ 2808.093623][ T4870] dump_stack_lvl+0x189/0x250 [ 2808.093658][ T4870] ? __pfx____ratelimit+0x10/0x10 [ 2808.093689][ T4870] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2808.093720][ T4870] ? __pfx__printk+0x10/0x10 [ 2808.093743][ T4870] ? __might_fault+0xb0/0x130 [ 2808.093786][ T4870] should_fail_ex+0x414/0x560 [ 2808.093825][ T4870] _copy_from_user+0x2d/0xb0 [ 2808.093855][ T4870] do_sys_poll+0x242/0x1070 [ 2808.093884][ T4870] ? __lock_acquire+0xab9/0xd20 [ 2808.093912][ T4870] ? __pfx_do_sys_poll+0x10/0x10 [ 2808.093958][ T4870] ? __lock_acquire+0xab9/0xd20 [ 2808.094054][ T4870] ? seqcount_lockdep_reader_access+0x122/0x1c0 [ 2808.094111][ T4870] ? __pfx_timespec64_add_safe+0x10/0x10 [ 2808.094131][ T4870] ? do_sys_openat2+0x154/0x1c0 [ 2808.094165][ T4870] __se_sys_poll+0x128/0x320 [ 2808.094199][ T4870] ? __pfx___se_sys_poll+0x10/0x10 [ 2808.094236][ T4870] ? do_syscall_64+0xbe/0xfa0 [ 2808.094272][ T4870] do_syscall_64+0xfa/0xfa0 [ 2808.094302][ T4870] ? lockdep_hardirqs_on+0x9c/0x150 [ 2808.094333][ T4870] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2808.094355][ T4870] ? clear_bhb_loop+0x60/0xb0 [ 2808.094382][ T4870] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2808.094404][ T4870] RIP: 0033:0x7fe4bd78f749 [ 2808.094424][ T4870] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2808.094444][ T4870] RSP: 002b:00007fe4be6c0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000007 [ 2808.094467][ T4870] RAX: ffffffffffffffda RBX: 00007fe4bd9e5fa0 RCX: 00007fe4bd78f749 [ 2808.094484][ T4870] RDX: 0000000000000009 RSI: 20000000000000b5 RDI: 0000200000000000 [ 2808.094499][ T4870] RBP: 00007fe4be6c0090 R08: 0000000000000000 R09: 0000000000000000 [ 2808.094513][ T4870] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2808.094527][ T4870] R13: 00007fe4bd9e6038 R14: 00007fe4bd9e5fa0 R15: 00007fe4bdb0fa28 [ 2808.094563][ T4870] [ 2810.944571][T31322] usb 3-1: new full-speed USB device number 72 using dummy_hcd [ 2811.166073][T31322] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2811.183170][T31322] usb 3-1: not running at top speed; connect to a high speed hub [ 2811.235883][T31322] usb 3-1: config 56 has an invalid interface number: 218 but max is 0 [ 2811.262339][T31322] usb 3-1: config 56 has an invalid descriptor of length 0, skipping remainder of the config [ 2811.384257][T31322] usb 3-1: config 56 has no interface number 0 [ 2811.633658][T31322] usb 3-1: config 56 interface 218 altsetting 224 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 2811.854832][T31322] usb 3-1: config 56 interface 218 has no altsetting 0 [ 2811.927149][ T4918] netlink: 304 bytes leftover after parsing attributes in process `syz.3.7955'. [ 2811.944813][T31322] usb 3-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.10 [ 2811.974211][T31322] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2812.060136][T31322] usb 3-1: Product: syz [ 2812.074702][T31322] usb 3-1: Manufacturer: syz [ 2812.099620][T31322] usb 3-1: SerialNumber: syz [ 2812.565150][T15798] usb 4-1: new full-speed USB device number 36 using dummy_hcd [ 2812.756822][T15798] usb 4-1: config 150 has an invalid interface number: 204 but max is 2 [ 2812.767533][T15798] usb 4-1: config 150 has 2 interfaces, different from the descriptor's value: 3 [ 2812.839608][T15798] usb 4-1: config 150 has no interface number 0 [ 2812.899556][T15798] usb 4-1: config 150 interface 204 has no altsetting 0 [ 2812.972008][T15798] usb 4-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 2812.985096][T15798] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2813.000717][T15798] usb 4-1: Product: syz [ 2813.011686][T15798] usb 4-1: Manufacturer: syz [ 2813.024826][T15798] usb 4-1: SerialNumber: syz [ 2813.488997][T15798] xr_serial 4-1:150.204: skipping garbage [ 2813.520054][T15798] xr_serial 4-1:150.204: xr_serial converter detected [ 2813.542376][T31322] radioshark2 3-1:56.218: Invalid radioSHARK2 device [ 2813.567110][T15798] xr_serial ttyUSB0: Failed to set reg 0x60: -71 [ 2813.616082][T15798] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 2813.634563][T31322] radioshark2 3-1:56.218: probe with driver radioshark2 failed with error -22 [ 2813.687898][T15798] usb 4-1: USB disconnect, device number 36 [ 2813.687968][T31322] usbhid 3-1:56.218: couldn't find an input interrupt endpoint [ 2813.751127][T31322] usb 3-1: USB disconnect, device number 72 [ 2813.838170][T15798] xr_serial 4-1:150.204: device disconnected [ 2814.716877][ T4950] fuse: Bad value for 'user_id' [ 2814.721933][ T4950] fuse: Bad value for 'user_id' [ 2814.850701][ T4945] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7963'. [ 2814.963499][T15812] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 2815.184328][T15812] usb 4-1: device descriptor read/64, error -71 [ 2815.424159][T15812] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 2815.950347][T15812] usb 4-1: device descriptor read/64, error -71 [ 2816.197797][T15812] usb usb4-port1: attempt power cycle [ 2816.654519][T15812] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 2816.725477][T15812] usb 4-1: device descriptor read/8, error -71 [ 2817.054172][T15812] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 2817.114160][T15812] usb 4-1: device descriptor read/8, error -71 [ 2817.267001][T15812] usb usb4-port1: unable to enumerate USB device [ 2817.444610][T25726] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 2817.724362][T25726] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2817.742870][T25726] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has an invalid bInterval 128, changing to 11 [ 2817.772034][T25726] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2817.799262][T25726] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2817.821987][T25726] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2817.836740][T25726] usb 1-1: Product: syz [ 2817.861708][T25726] usb 1-1: Manufacturer: syz [ 2817.882069][T25726] usb 1-1: SerialNumber: syz [ 2818.691131][T25726] cdc_ncm 1-1:1.0: failed GET_NTB_PARAMETERS [ 2818.714213][T31322] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 2818.815276][T25726] cdc_ncm 1-1:1.0: bind() failure [ 2818.929648][T25726] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 2819.078397][T31322] usb 5-1: config index 0 descriptor too short (expected 28277, got 36) [ 2819.088317][T31322] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2819.104712][T31322] usb 5-1: config 0 has no interfaces? [ 2819.110334][T25726] cdc_ncm 1-1:1.1: bind() failure [ 2819.124848][T31322] usb 5-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 2819.164191][T31322] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2819.185638][T31322] usb 5-1: config 0 descriptor?? [ 2819.872399][T15798] usb 1-1: USB disconnect, device number 60 [ 2819.997032][ T30] kauditd_printk_skb: 74 callbacks suppressed [ 2819.997055][ T30] audit: type=1400 audit(1764001136.704:6027): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=2328251E8A2F2F28405C292F2F26407D2C5B272525665C232A pid=5024 comm="syz.2.7988" [ 2820.628269][ T5037] FAULT_INJECTION: forcing a failure. [ 2820.628269][ T5037] name failslab, interval 1, probability 0, space 0, times 0 [ 2820.744146][ T5037] CPU: 0 UID: 0 PID: 5037 Comm: syz.2.7992 Not tainted syzkaller #0 PREEMPT(full) [ 2820.744178][ T5037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2820.744192][ T5037] Call Trace: [ 2820.744202][ T5037] [ 2820.744212][ T5037] dump_stack_lvl+0x189/0x250 [ 2820.744246][ T5037] ? __pfx____ratelimit+0x10/0x10 [ 2820.744277][ T5037] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2820.744307][ T5037] ? __pfx__printk+0x10/0x10 [ 2820.744336][ T5037] ? __pfx___might_resched+0x10/0x10 [ 2820.744359][ T5037] ? fs_reclaim_acquire+0x7d/0x100 [ 2820.744398][ T5037] should_fail_ex+0x414/0x560 [ 2820.744437][ T5037] should_failslab+0xa8/0x100 [ 2820.744462][ T5037] kmem_cache_alloc_node_noprof+0x77/0x710 [ 2820.744494][ T5037] ? __alloc_skb+0x112/0x2d0 [ 2820.744522][ T5037] __alloc_skb+0x112/0x2d0 [ 2820.744547][ T5037] tipc_nl_compat_doit+0x15d/0x5f0 [ 2820.744580][ T5037] ? is_bpf_text_address+0x26/0x2b0 [ 2820.744608][ T5037] ? __pfx_tipc_nl_compat_doit+0x10/0x10 [ 2820.744647][ T5037] ? apparmor_capable+0x137/0x1b0 [ 2820.744675][ T5037] ? bpf_lsm_capable+0x9/0x20 [ 2820.744703][ T5037] ? security_capable+0x7e/0x2e0 [ 2820.744741][ T5037] tipc_nl_compat_recv+0x83c/0xbe0 [ 2820.744775][ T5037] ? __pfx_tipc_nl_compat_recv+0x10/0x10 [ 2820.744802][ T5037] ? __mutex_trylock_common+0x153/0x260 [ 2820.744834][ T5037] ? __pfx___mutex_trylock_common+0x10/0x10 [ 2820.744861][ T5037] ? __pfx___tipc_nl_net_set+0x10/0x10 [ 2820.744895][ T5037] ? __pfx_tipc_nl_compat_net_set+0x10/0x10 [ 2820.744932][ T5037] ? trace_contention_end+0x39/0x120 [ 2820.744971][ T5037] genl_family_rcv_msg_doit+0x215/0x300 [ 2820.745009][ T5037] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 2820.745053][ T5037] ? stack_trace_save+0x9c/0xe0 [ 2820.745093][ T5037] genl_rcv_msg+0x60e/0x790 [ 2820.745129][ T5037] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2820.745156][ T5037] ? __pfx_tipc_nl_compat_recv+0x10/0x10 [ 2820.745202][ T5037] netlink_rcv_skb+0x208/0x470 [ 2820.745222][ T5037] ? __lock_acquire+0xab9/0xd20 [ 2820.745243][ T5037] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2820.745274][ T5037] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2820.745318][ T5037] ? down_read+0x1ad/0x2e0 [ 2820.745343][ T5037] genl_rcv+0x28/0x40 [ 2820.745370][ T5037] netlink_unicast+0x82f/0x9e0 [ 2820.745414][ T5037] ? __pfx_netlink_unicast+0x10/0x10 [ 2820.745449][ T5037] ? netlink_sendmsg+0x642/0xb30 [ 2820.745470][ T5037] ? skb_put+0x11b/0x210 [ 2820.745494][ T5037] netlink_sendmsg+0x805/0xb30 [ 2820.745526][ T5037] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2820.745552][ T5037] ? aa_sock_msg_perm+0xf1/0x1d0 [ 2820.745586][ T5037] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2820.745606][ T5037] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2820.745629][ T5037] __sock_sendmsg+0x21c/0x270 [ 2820.745662][ T5037] ____sys_sendmsg+0x505/0x830 [ 2820.745692][ T5037] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2820.745725][ T5037] ? import_iovec+0x74/0xa0 [ 2820.745757][ T5037] ___sys_sendmsg+0x21f/0x2a0 [ 2820.745786][ T5037] ? __pfx____sys_sendmsg+0x10/0x10 [ 2820.745851][ T5037] ? __fget_files+0x2a/0x420 [ 2820.745872][ T5037] ? __fget_files+0x3a0/0x420 [ 2820.745911][ T5037] __x64_sys_sendmsg+0x19b/0x260 [ 2820.745939][ T5037] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2820.745974][ T5037] ? __pfx_ksys_write+0x10/0x10 [ 2820.746011][ T5037] ? do_syscall_64+0xbe/0xfa0 [ 2820.746048][ T5037] do_syscall_64+0xfa/0xfa0 [ 2820.746079][ T5037] ? lockdep_hardirqs_on+0x9c/0x150 [ 2820.746111][ T5037] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2820.746134][ T5037] ? clear_bhb_loop+0x60/0xb0 [ 2820.746160][ T5037] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2820.746182][ T5037] RIP: 0033:0x7f441ef8f749 [ 2820.746203][ T5037] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2820.746223][ T5037] RSP: 002b:00007f441fdc4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2820.746246][ T5037] RAX: ffffffffffffffda RBX: 00007f441f1e5fa0 RCX: 00007f441ef8f749 [ 2820.746263][ T5037] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 2820.746277][ T5037] RBP: 00007f441fdc4090 R08: 0000000000000000 R09: 0000000000000000 [ 2820.746291][ T5037] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2820.746305][ T5037] R13: 00007f441f1e6038 R14: 00007f441f1e5fa0 R15: 00007f441f30fa28 [ 2820.746341][ T5037] [ 2821.206470][ T5040] netlink: 52 bytes leftover after parsing attributes in process `syz.3.7994'. [ 2821.726065][ T5040] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7994'. [ 2822.158554][ T5052] input: syz0 as /devices/virtual/input/input340 [ 2822.200420][ T5054] netlink: 'syz.2.7998': attribute type 10 has an invalid length. [ 2822.258062][T32346] usb 5-1: USB disconnect, device number 97 [ 2822.286043][ T5054] netlink: 152 bytes leftover after parsing attributes in process `syz.2.7998'. [ 2822.306195][ T5054] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 2822.332305][ T5052] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7997'. [ 2823.198539][ T5071] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8001'. [ 2823.315399][ T30] audit: type=1326 audit(1764001139.914:6028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5058 comm="syz.2.8001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f441ef8f749 code=0x7ffc0000 [ 2823.420397][ T30] audit: type=1326 audit(1764001139.914:6029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5058 comm="syz.2.8001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f441ef8f749 code=0x7ffc0000 [ 2823.468406][ T30] audit: type=1326 audit(1764001139.914:6030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5058 comm="syz.2.8001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f441ef8f749 code=0x7ffc0000 [ 2823.768407][ T30] audit: type=1326 audit(1764001139.914:6031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5058 comm="syz.2.8001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f441ef8f749 code=0x7ffc0000 [ 2823.823965][ T5078] FAULT_INJECTION: forcing a failure. [ 2823.823965][ T5078] name failslab, interval 1, probability 0, space 0, times 0 [ 2823.894821][ T5078] CPU: 1 UID: 0 PID: 5078 Comm: syz.0.8005 Not tainted syzkaller #0 PREEMPT(full) [ 2823.894853][ T5078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2823.894867][ T5078] Call Trace: [ 2823.894876][ T5078] [ 2823.894886][ T5078] dump_stack_lvl+0x189/0x250 [ 2823.894923][ T5078] ? __pfx____ratelimit+0x10/0x10 [ 2823.894955][ T5078] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2823.894985][ T5078] ? __pfx__printk+0x10/0x10 [ 2823.895014][ T5078] ? __pfx___might_resched+0x10/0x10 [ 2823.895043][ T5078] should_fail_ex+0x414/0x560 [ 2823.895083][ T5078] should_failslab+0xa8/0x100 [ 2823.895108][ T5078] __kmalloc_noprof+0xcb/0x7f0 [ 2823.895138][ T5078] ? kfree+0x4d/0x6d0 [ 2823.895163][ T5078] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 2823.895205][ T5078] tomoyo_realpath_from_path+0xe3/0x5d0 [ 2823.895242][ T5078] ? tomoyo_domain+0xd9/0x130 [ 2823.895269][ T5078] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 2823.895298][ T5078] tomoyo_path_number_perm+0x1e8/0x5a0 [ 2823.895331][ T5078] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2823.895364][ T5078] ? sb_end_write+0xe9/0x1c0 [ 2823.895389][ T5078] ? vfs_write+0x956/0xb30 [ 2823.895458][ T5078] ? ksys_write+0x1e1/0x250 [ 2823.895495][ T5078] security_file_ioctl+0xcb/0x2d0 [ 2823.895525][ T5078] __se_sys_ioctl+0x47/0x170 [ 2823.895557][ T5078] do_syscall_64+0xfa/0xfa0 [ 2823.895636][ T5078] ? lockdep_hardirqs_on+0x9c/0x150 [ 2823.895669][ T5078] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2823.895691][ T5078] ? clear_bhb_loop+0x60/0xb0 [ 2823.895718][ T5078] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2823.895739][ T5078] RIP: 0033:0x7f734118f749 [ 2823.895758][ T5078] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2823.895778][ T5078] RSP: 002b:00007f7341fe5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2823.895801][ T5078] RAX: ffffffffffffffda RBX: 00007f73413e5fa0 RCX: 00007f734118f749 [ 2823.895818][ T5078] RDX: 0000000000000000 RSI: 00000000000007a8 RDI: 0000000000000003 [ 2823.895831][ T5078] RBP: 00007f7341fe5090 R08: 0000000000000000 R09: 0000000000000000 [ 2823.895844][ T5078] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2823.895861][ T5078] R13: 00007f73413e6038 R14: 00007f73413e5fa0 R15: 00007f734150fa28 [ 2823.895897][ T5078] [ 2823.895933][ T5078] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2824.184556][ T30] audit: type=1326 audit(1764001139.914:6032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5058 comm="syz.2.8001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=48 compat=0 ip=0x7f441ef8f749 code=0x7ffc0000 [ 2824.302313][ T30] audit: type=1326 audit(1764001139.914:6033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5058 comm="syz.2.8001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f441ef8f749 code=0x7ffc0000 [ 2824.518369][ T30] audit: type=1326 audit(1764001139.914:6034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5058 comm="syz.2.8001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f441ef8f749 code=0x7ffc0000 [ 2824.629974][ T30] audit: type=1326 audit(1764001139.914:6035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5058 comm="syz.2.8001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f441ef8f749 code=0x7ffc0000 [ 2824.652403][ C1] vkms_vblank_simulate: vblank timer overrun [ 2824.711262][ T30] audit: type=1326 audit(1764001139.914:6036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5058 comm="syz.2.8001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f441ef8f749 code=0x7ffc0000 [ 2824.733735][ C1] vkms_vblank_simulate: vblank timer overrun [ 2825.944046][T15798] usb 3-1: new full-speed USB device number 73 using dummy_hcd [ 2826.286800][T15798] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2826.299005][T15798] usb 3-1: not running at top speed; connect to a high speed hub [ 2826.320139][T15798] usb 3-1: config 56 has an invalid interface number: 218 but max is 0 [ 2826.330247][T15798] usb 3-1: config 56 has an invalid descriptor of length 0, skipping remainder of the config [ 2826.351709][T15798] usb 3-1: config 56 has no interface number 0 [ 2826.391232][T15798] usb 3-1: config 56 interface 218 altsetting 224 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 2826.474414][T15798] usb 3-1: config 56 interface 218 has no altsetting 0 [ 2826.501665][T15798] usb 3-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.10 [ 2826.514497][T15798] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2826.522539][T15798] usb 3-1: Product: syz [ 2826.548293][T15798] usb 3-1: Manufacturer: syz [ 2826.564803][T15798] usb 3-1: SerialNumber: syz [ 2827.018337][ T5103] netlink: 52 bytes leftover after parsing attributes in process `syz.6.8012'. [ 2827.575437][ T5110] fuse: Unknown parameter 'use00000000000000000000' [ 2828.035625][ T5113] netlink: 180 bytes leftover after parsing attributes in process `syz.3.8014'. [ 2828.047542][ T5113] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8014'. [ 2828.384849][T25989] usb 1-1: new full-speed USB device number 61 using dummy_hcd [ 2828.436828][T15798] radioshark2 3-1:56.218: Invalid radioSHARK2 device [ 2828.514776][T15798] radioshark2 3-1:56.218: probe with driver radioshark2 failed with error -22 [ 2828.580933][T25989] usb 1-1: unable to get BOS descriptor or descriptor too short [ 2828.679582][T25989] usb 1-1: not running at top speed; connect to a high speed hub [ 2828.695853][T15798] usbhid 3-1:56.218: couldn't find an input interrupt endpoint [ 2828.754190][T25989] usb 1-1: config 56 has an invalid interface number: 218 but max is 0 [ 2828.764534][T15798] usb 3-1: USB disconnect, device number 73 [ 2828.875066][T25989] usb 1-1: config 56 has an invalid descriptor of length 0, skipping remainder of the config [ 2828.887770][T25989] usb 1-1: config 56 has no interface number 0 [ 2828.898270][T25989] usb 1-1: config 56 interface 218 altsetting 224 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 2829.035093][T25989] usb 1-1: config 56 interface 218 has no altsetting 0 [ 2829.089649][T25989] usb 1-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.10 [ 2829.089686][T25989] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2829.089709][T25989] usb 1-1: Product: syz [ 2829.089727][T25989] usb 1-1: Manufacturer: syz [ 2829.089745][T25989] usb 1-1: SerialNumber: syz [ 2829.236857][ T5135] input: syz0 as /devices/virtual/input/input341 [ 2829.239865][ T5135] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8019'. [ 2829.874742][T32346] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 2830.167040][T32346] usb 3-1: Using ep0 maxpacket: 16 [ 2830.176771][T32346] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 2830.186606][T32346] usb 3-1: config 0 has no interface number 0 [ 2830.196106][T32346] usb 3-1: config 0 interface 1 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 2830.228348][T32346] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 2830.255146][T32346] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 2830.278599][T32346] usb 3-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice=2d.4d [ 2830.291191][T32346] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2830.327039][T32346] usb 3-1: Product: syz [ 2830.331573][T32346] usb 3-1: Manufacturer: syz [ 2830.339946][T32346] usb 3-1: SerialNumber: syz [ 2830.369579][T32346] usb 3-1: config 0 descriptor?? [ 2830.409332][T32346] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 2830.538340][T32346] snd-usb-audio 3-1:0.1: probe with driver snd-usb-audio failed with error -12 [ 2830.668045][T32346] usb 3-1: USB disconnect, device number 74 [ 2830.745743][T20712] udevd[20712]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2830.787360][T25989] radioshark2 1-1:56.218: Invalid radioSHARK2 device [ 2830.824977][T25989] radioshark2 1-1:56.218: probe with driver radioshark2 failed with error -22 [ 2830.911758][T25989] usbhid 1-1:56.218: couldn't find an input interrupt endpoint [ 2830.981379][T25989] usb 1-1: USB disconnect, device number 61 [ 2831.452503][ T5154] input: syz0 as /devices/virtual/input/input342 [ 2831.466906][ T5154] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8024'. [ 2832.804562][T25726] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 2832.966809][T25726] usb 4-1: config 0 has no interfaces? [ 2832.972741][T25726] usb 4-1: New USB device found, idVendor=056a, idProduct=0045, bcdDevice= 0.00 [ 2832.981823][T25726] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2833.036944][T25726] usb 4-1: config 0 descriptor?? [ 2833.154464][ T5184] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8033'. [ 2833.267063][ T5164] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2833.302096][ T5169] netlink: 180 bytes leftover after parsing attributes in process `syz.6.8028'. [ 2833.315984][ T5164] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2833.335334][ T5192] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8034'. [ 2833.345942][ T5169] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8028'. [ 2833.361610][T25726] usb 4-1: USB disconnect, device number 41 [ 2834.097019][T25726] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 2834.364267][T25726] usb 4-1: config index 0 descriptor too short (expected 72, got 36) [ 2834.374483][T25726] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 2834.410790][T25726] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2834.432708][T25726] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2834.440768][T25726] usb 4-1: Product: syz [ 2834.474913][T25726] usb 4-1: Manufacturer: syz [ 2834.479585][T25726] usb 4-1: SerialNumber: syz [ 2834.599957][T25726] usb 4-1: ath9k_htc: Device endpoint numbers are not the expected ones [ 2834.885554][T25726] usb 4-1: USB disconnect, device number 42 [ 2835.086993][ T5211] netlink: 64 bytes leftover after parsing attributes in process `syz.4.8038'. [ 2835.360445][ T5211] bridge0: port 3(syz_tun) entered blocking state [ 2835.367290][ T5211] bridge0: port 3(syz_tun) entered listening state [ 2835.381999][ T5211] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2835.395991][ T5211] 8021q: adding VLAN 0 to HW filter on device team0 [ 2835.513802][ T5211] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2838.225983][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 2838.226005][ T30] audit: type=1326 audit(1764001154.924:6051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5244 comm="syz.0.8045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f734118f749 code=0x7ffc0000 [ 2838.377631][ T30] audit: type=1326 audit(1764001154.924:6052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5244 comm="syz.0.8045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f734118f749 code=0x7ffc0000 [ 2838.494337][ T30] audit: type=1326 audit(1764001154.924:6053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5244 comm="syz.0.8045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f734118f749 code=0x7ffc0000 [ 2838.604123][ T30] audit: type=1326 audit(1764001154.924:6054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5244 comm="syz.0.8045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f734118f749 code=0x7ffc0000 [ 2838.805780][ T30] audit: type=1326 audit(1764001154.924:6055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5244 comm="syz.0.8045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f734118f749 code=0x7ffc0000 [ 2839.049044][ T30] audit: type=1326 audit(1764001154.924:6056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5244 comm="syz.0.8045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f734118f749 code=0x7ffc0000 [ 2839.144936][ T30] audit: type=1326 audit(1764001154.924:6057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5244 comm="syz.0.8045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f734118f749 code=0x7ffc0000 [ 2839.167418][ C0] vkms_vblank_simulate: vblank timer overrun [ 2839.273897][ T30] audit: type=1326 audit(1764001154.934:6058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5244 comm="syz.0.8045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f734118f749 code=0x7ffc0000 [ 2839.299730][ T5254] netlink: 180 bytes leftover after parsing attributes in process `syz.0.8047'. [ 2839.311275][ T5254] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8047'. [ 2839.324074][T31322] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 2839.374263][ T30] audit: type=1326 audit(1764001154.934:6059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5244 comm="syz.0.8045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f734118f749 code=0x7ffc0000 [ 2839.417773][ T30] audit: type=1326 audit(1764001154.934:6060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5244 comm="syz.0.8045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f734118f749 code=0x7ffc0000 [ 2839.500527][T31322] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2839.514164][T31322] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 2839.647431][T31322] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2839.780643][T31322] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 2839.794346][T31322] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 2839.835826][T31322] usb 5-1: Product: syz [ 2839.872675][T31322] usb 5-1: Manufacturer: syz [ 2839.880889][T31322] usb 5-1: SerialNumber: syz [ 2840.126488][T31322] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 98 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 2840.344380][ T5264] netlink: 64 bytes leftover after parsing attributes in process `syz.3.8050'. [ 2840.454952][ T5267] "syz.4.8048" (5267) uses obsolete ecb(arc4) skcipher [ 2840.530057][ T5269] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2840.541108][ T5269] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2840.947743][T25989] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 2841.244325][T25989] usb 4-1: Using ep0 maxpacket: 8 [ 2841.328390][T25989] usb 4-1: too many configurations: 249, using maximum allowed: 8 [ 2841.459640][T25989] usb 4-1: New USB device found, idVendor=055f, idProduct=a800, bcdDevice=b3.ff [ 2841.471055][T25989] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=2 [ 2841.480838][T25989] usb 4-1: Product: syz [ 2841.517905][T25989] usb 4-1: Manufacturer: syz [ 2841.528649][T25989] usb 4-1: SerialNumber: syz [ 2841.605389][T25989] usb 4-1: config 0 descriptor?? [ 2841.836369][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 2841.844626][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 2842.016765][ T5271] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8050'. [ 2842.424792][T31322] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 2842.430437][ T5271] vim2m vim2m.0: vidioc_s_fmt queue busy [ 2842.705376][ T5286] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8053'. [ 2842.742261][ T5286] vim2m vim2m.0: vidioc_s_fmt queue busy [ 2842.830333][T31322] usb 1-1: config index 0 descriptor too short (expected 28277, got 36) [ 2842.877180][T31322] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2843.521123][T31322] usb 1-1: config 0 has no interfaces? [ 2843.548097][T31322] usb 1-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 2843.591847][T31322] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2843.637801][T31322] usb 1-1: config 0 descriptor?? [ 2844.649051][T15798] usb 5-1: USB disconnect, device number 98 [ 2844.659416][T15798] usblp0: removed [ 2845.471982][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 2845.472004][ T30] audit: type=1326 audit(1764001162.174:6080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5290 comm="syz.4.8055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4bd78f749 code=0x7ffc0000 [ 2845.652701][ T30] audit: type=1326 audit(1764001162.174:6081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5290 comm="syz.4.8055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe4bd78f749 code=0x7ffc0000 [ 2845.734410][T31322] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 2845.760538][T25989] mdc800 4-1:0.0: probe fails -> wrong Number of Configuration [ 2845.815159][ T30] audit: type=1326 audit(1764001162.174:6082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5290 comm="syz.4.8055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4bd78f749 code=0x7ffc0000 [ 2845.867662][T25989] usb 4-1: USB disconnect, device number 43 [ 2845.904247][T31322] usb 5-1: Using ep0 maxpacket: 16 [ 2845.915044][T31322] usb 5-1: config 153 has an invalid descriptor of length 0, skipping remainder of the config [ 2845.944269][ T30] audit: type=1326 audit(1764001162.174:6083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5290 comm="syz.4.8055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fe4bd78f749 code=0x7ffc0000 [ 2846.059106][T31322] usb 5-1: config 153 has 0 interfaces, different from the descriptor's value: 3 [ 2846.200104][T31322] usb 5-1: New USB device found, idVendor=10b8, idProduct=1e80, bcdDevice=4a.31 [ 2846.442708][T31322] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2846.445087][ T30] audit: type=1326 audit(1764001162.174:6084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5290 comm="syz.4.8055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4bd78f749 code=0x7ffc0000 [ 2846.486363][T31322] usb 5-1: Product: syz [ 2846.490603][T31322] usb 5-1: Manufacturer: syz [ 2846.524804][ T30] audit: type=1326 audit(1764001162.174:6085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5290 comm="syz.4.8055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe4bd78f749 code=0x7ffc0000 [ 2846.556674][T31322] usb 5-1: SerialNumber: syz [ 2846.575295][T25726] usb 1-1: USB disconnect, device number 62 [ 2846.680919][ T30] audit: type=1326 audit(1764001162.174:6086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5290 comm="syz.4.8055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4bd78f749 code=0x7ffc0000 [ 2847.072391][ T5310] input: syz0 as /devices/virtual/input/input343 [ 2847.252528][ T30] audit: type=1326 audit(1764001162.174:6087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5290 comm="syz.4.8055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe4bd78f749 code=0x7ffc0000 [ 2847.358612][ T5314] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8059'. [ 2847.374255][ T5314] netlink: 64 bytes leftover after parsing attributes in process `syz.0.8059'. [ 2847.390768][ T5315] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8058'. [ 2847.448498][T31322] usb 5-1: USB disconnect, device number 99 [ 2847.504615][ T5314] netlink: 'syz.0.8059': attribute type 1 has an invalid length. [ 2847.514289][ T5314] netlink: 'syz.0.8059': attribute type 1 has an invalid length. [ 2847.529529][ T5314] netlink: 'syz.0.8059': attribute type 1 has an invalid length. [ 2847.624217][ T30] audit: type=1326 audit(1764001162.184:6088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5290 comm="syz.4.8055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4bd78f749 code=0x7ffc0000 [ 2847.975613][ T30] audit: type=1326 audit(1764001162.184:6089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5290 comm="syz.4.8055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fe4bd78f749 code=0x7ffc0000 [ 2848.331653][ T5319] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8060'. [ 2849.392051][ T5337] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8066'. [ 2849.902767][ T5341] netlink: 180 bytes leftover after parsing attributes in process `syz.6.8067'. [ 2849.914825][ T5341] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8067'. [ 2850.680979][ T5351] netlink: 56 bytes leftover after parsing attributes in process `syz.3.8062'. [ 2850.702158][T15798] usb 3-1: new full-speed USB device number 75 using dummy_hcd [ 2851.046575][T15798] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 34838, setting to 64 [ 2851.097425][T15798] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 2851.189080][T15798] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2851.451046][T15798] aiptek 3-1:17.0: Aiptek using 400 ms programming speed [ 2851.484808][T15798] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:17.0/input/input345 [ 2851.824967][ C1] aiptek 3-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 2851.844130][T31322] usb 5-1: new full-speed USB device number 100 using dummy_hcd [ 2851.852537][T15798] usb 3-1: USB disconnect, device number 75 [ 2852.067580][T31322] usb 5-1: config 0 has an invalid interface number: 120 but max is 0 [ 2852.134167][T31322] usb 5-1: config 0 has no interface number 0 [ 2852.216360][T31322] usb 5-1: New USB device found, idVendor=0ab4, idProduct=0011, bcdDevice=c6.7f [ 2852.232665][T31322] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2852.302171][T31322] usb 5-1: Product: syz [ 2852.340005][T31322] usb 5-1: Manufacturer: syz [ 2852.360408][T31322] usb 5-1: SerialNumber: syz [ 2852.475575][T31322] usb 5-1: config 0 descriptor?? [ 2852.569875][T31322] esd_usb 5-1:0.120: sending version message failed [ 2852.689701][T31322] esd_usb 5-1:0.120: probe with driver esd_usb failed with error -8 [ 2852.757987][T31322] usb 5-1: USB disconnect, device number 100 [ 2853.894666][T25989] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 2854.054219][T25989] usb 5-1: Using ep0 maxpacket: 16 [ 2854.075661][T25989] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 2854.095382][T25989] usb 5-1: config 0 has no interface number 0 [ 2854.125872][T25989] usb 5-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 2854.145059][T25989] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2854.186397][T25989] usb 5-1: Product: syz [ 2854.190630][T25989] usb 5-1: Manufacturer: syz [ 2854.209886][T25989] usb 5-1: SerialNumber: syz [ 2854.364415][T25989] usb 5-1: config 0 descriptor?? [ 2854.535192][T25989] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 2854.667170][T25726] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 2854.857024][T25726] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2854.877808][T25726] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.33 [ 2854.889383][T25726] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2855.186795][T25726] usb 3-1: Product: syz [ 2855.199231][T25726] usb 3-1: Manufacturer: syz [ 2855.209797][T25726] usb 3-1: SerialNumber: syz [ 2855.216328][T25989] gspca_spca1528: reg_w err -110 [ 2855.250126][T25989] spca1528 5-1:0.1: probe with driver spca1528 failed with error -110 [ 2856.859858][T25989] usb 5-1: USB disconnect, device number 101 [ 2857.347779][T25726] cdc_ncm 3-1:1.0: failed GET_NTB_PARAMETERS [ 2857.355874][T25726] cdc_ncm 3-1:1.0: bind() failure [ 2857.406639][T25726] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 2857.459143][T25726] cdc_ncm 3-1:1.1: bind() failure [ 2857.561233][T25726] usb 3-1: USB disconnect, device number 76 [ 2857.624766][T25989] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 2857.785884][T25989] usb 5-1: Using ep0 maxpacket: 16 [ 2857.795784][T25989] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2857.825265][T25989] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2857.844977][T25989] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2857.857817][T25989] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2857.879274][T25989] usb 5-1: Product: syz [ 2857.887710][T25989] usb 5-1: Manufacturer: syz [ 2857.892503][T25989] usb 5-1: SerialNumber: syz [ 2858.159963][T25989] usb 5-1: 0:2 : does not exist [ 2858.175297][T25989] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 2858.240965][T25989] usb 5-1: USB disconnect, device number 102 [ 2858.480512][T26959] udevd[26959]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2859.409286][ T5436] netlink: 56 bytes leftover after parsing attributes in process `syz.2.8089'. [ 2859.996111][ T5440] input: syz0 as /devices/virtual/input/input346 [ 2860.015536][ T5440] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8094'. [ 2860.835366][ T5450] IPVS: ip_vs_edit_dest(): server weight less than zero [ 2861.158221][ T5455] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 2861.162734][T31322] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 2861.396837][T31322] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 2861.412636][T31322] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2861.438866][T31322] usb 4-1: Product: syz [ 2861.468694][T31322] usb 4-1: Manufacturer: syz [ 2861.504746][T31322] usb 4-1: SerialNumber: syz [ 2861.554899][T31322] usb 4-1: config 0 descriptor?? [ 2861.564232][T31322] ch341 4-1:0.0: ch341-uart converter detected [ 2862.489040][T31322] usb 4-1: failed to send control message: -71 [ 2862.500332][T31322] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 2862.577896][T31322] usb 4-1: USB disconnect, device number 44 [ 2863.012170][T31322] ch341 4-1:0.0: device disconnected [ 2863.845191][ T30] kauditd_printk_skb: 49 callbacks suppressed [ 2863.845213][ T30] audit: type=1326 audit(1764001180.554:6139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5479 comm="syz.0.8106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f734118f749 code=0x7ffc0000 [ 2863.854911][T32346] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 2864.368823][T32346] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 2864.379098][ T30] audit: type=1326 audit(1764001180.554:6140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5479 comm="syz.0.8106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f734118f749 code=0x7ffc0000 [ 2864.383593][T32346] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 2864.434847][T32346] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 2864.559439][T32346] usb 4-1: config 220 has no interface number 2 [ 2864.573054][ T30] audit: type=1326 audit(1764001180.554:6141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5479 comm="syz.0.8106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f734118f749 code=0x7ffc0000 [ 2864.595452][ C0] vkms_vblank_simulate: vblank timer overrun [ 2864.631923][T32346] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 2864.650547][ T30] audit: type=1326 audit(1764001180.554:6142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5479 comm="syz.0.8106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f734118f749 code=0x7ffc0000 [ 2864.712673][ T30] audit: type=1326 audit(1764001180.554:6143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5479 comm="syz.0.8106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f734118df90 code=0x7ffc0000 [ 2864.765453][ T30] audit: type=1326 audit(1764001180.554:6144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5479 comm="syz.0.8106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f734118f749 code=0x7ffc0000 [ 2864.789655][T32346] usb 4-1: config 220 interface 0 has no altsetting 0 [ 2864.819101][T32346] usb 4-1: config 220 interface 76 has no altsetting 0 [ 2864.873240][ T30] audit: type=1326 audit(1764001180.554:6145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5479 comm="syz.0.8106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f734118f749 code=0x7ffc0000 [ 2864.895801][ C0] vkms_vblank_simulate: vblank timer overrun [ 2864.935091][T32346] usb 4-1: config 220 interface 1 has no altsetting 0 [ 2864.968436][ T30] audit: type=1326 audit(1764001180.554:6146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5479 comm="syz.0.8106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f734118f749 code=0x7ffc0000 [ 2865.005444][T32346] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 2865.031338][T32346] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2865.064606][ T30] audit: type=1326 audit(1764001180.554:6147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5479 comm="syz.0.8106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f734118f749 code=0x7ffc0000 [ 2865.116367][ T30] audit: type=1326 audit(1764001180.554:6148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5479 comm="syz.0.8106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f734118f749 code=0x7ffc0000 [ 2865.166547][T32346] usb 4-1: Product: syz [ 2865.209321][T32346] usb 4-1: Manufacturer: syz [ 2865.241422][T32346] usb 4-1: SerialNumber: syz [ 2865.442987][ C1] bridge0: port 3(syz_tun) entered learning state [ 2865.576623][ T5478] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2865.595034][ T5478] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2865.608515][ T5478] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2865.620267][ T5478] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2865.652142][T32346] uvcvideo 4-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 2865.715488][T32346] uvcvideo 4-1:220.0: No valid video chain found. [ 2865.722039][T32346] usb 4-1: selecting invalid altsetting 0 [ 2865.836233][T32346] usb 4-1: selecting invalid altsetting 0 [ 2865.854206][T32346] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 2865.916773][T32346] usb 4-1: USB disconnect, device number 45 [ 2866.217152][ T5501] netlink: 324 bytes leftover after parsing attributes in process `syz.0.8111'. [ 2866.460199][ T5504] netlink: 64 bytes leftover after parsing attributes in process `syz.3.8112'. [ 2866.593964][ T5506] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2866.640377][ T5506] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2867.061642][ T5517] netlink: 56 bytes leftover after parsing attributes in process `syz.4.8110'. [ 2867.747074][ T5527] FAULT_INJECTION: forcing a failure. [ 2867.747074][ T5527] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2867.789957][ T5527] CPU: 0 UID: 0 PID: 5527 Comm: syz.0.8117 Not tainted syzkaller #0 PREEMPT(full) [ 2867.789981][ T5527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2867.789991][ T5527] Call Trace: [ 2867.789998][ T5527] [ 2867.790005][ T5527] dump_stack_lvl+0x189/0x250 [ 2867.790031][ T5527] ? __pfx____ratelimit+0x10/0x10 [ 2867.790054][ T5527] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2867.790075][ T5527] ? __pfx__printk+0x10/0x10 [ 2867.790092][ T5527] ? __might_fault+0xb0/0x130 [ 2867.790122][ T5527] should_fail_ex+0x414/0x560 [ 2867.790150][ T5527] _copy_from_user+0x2d/0xb0 [ 2867.790172][ T5527] snd_pcm_oss_write+0x84f/0x1190 [ 2867.790194][ T5527] ? get_pid_task+0x20/0x1f0 [ 2867.790227][ T5527] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 2867.790251][ T5527] ? security_file_permission+0x75/0x290 [ 2867.790270][ T5527] ? rw_verify_area+0x255/0x4d0 [ 2867.790291][ T5527] ? __lock_acquire+0xab9/0xd20 [ 2867.790305][ T5527] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 2867.790328][ T5527] vfs_write+0x27e/0xb30 [ 2867.790356][ T5527] ? __pfx_vfs_write+0x10/0x10 [ 2867.790379][ T5527] ? __fget_files+0x2a/0x420 [ 2867.790396][ T5527] ? __fget_files+0x2a/0x420 [ 2867.790417][ T5527] ? __fget_files+0x3a0/0x420 [ 2867.790431][ T5527] ? __fget_files+0x2a/0x420 [ 2867.790452][ T5527] ksys_write+0x145/0x250 [ 2867.790476][ T5527] ? __pfx_ksys_write+0x10/0x10 [ 2867.790501][ T5527] ? do_syscall_64+0xbe/0xfa0 [ 2867.790526][ T5527] do_syscall_64+0xfa/0xfa0 [ 2867.790548][ T5527] ? lockdep_hardirqs_on+0x9c/0x150 [ 2867.790570][ T5527] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2867.790586][ T5527] ? clear_bhb_loop+0x60/0xb0 [ 2867.790605][ T5527] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2867.790620][ T5527] RIP: 0033:0x7f734118f749 [ 2867.790634][ T5527] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2867.790647][ T5527] RSP: 002b:00007f7341fc4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2867.790667][ T5527] RAX: ffffffffffffffda RBX: 00007f73413e6090 RCX: 00007f734118f749 [ 2867.790679][ T5527] RDX: 0000000000004000 RSI: 00002000000012c0 RDI: 0000000000000003 [ 2867.790689][ T5527] RBP: 00007f7341fc4090 R08: 0000000000000000 R09: 0000000000000000 [ 2867.790698][ T5527] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2867.790707][ T5527] R13: 00007f73413e6128 R14: 00007f73413e6090 R15: 00007f734150fa28 [ 2867.790732][ T5527] [ 2868.030728][ C0] vkms_vblank_simulate: vblank timer overrun [ 2869.857350][ T5553] RDS: rds_bind could not find a transport for fe88::103, load rds_tcp or rds_rdma? [ 2869.905114][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 2869.905131][ T30] audit: type=1326 audit(1764001186.574:6168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5551 comm="syz.2.8124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f441ef8f749 code=0x7ffc0000 [ 2869.988770][ T30] audit: type=1326 audit(1764001186.574:6169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5551 comm="syz.2.8124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f441ef8f749 code=0x7ffc0000 [ 2870.114839][ T30] audit: type=1326 audit(1764001186.574:6170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5551 comm="syz.2.8124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f441ef8f749 code=0x7ffc0000 [ 2870.255361][ T30] audit: type=1326 audit(1764001186.574:6171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5551 comm="syz.2.8124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f441ef8f749 code=0x7ffc0000 [ 2870.329382][ T30] audit: type=1326 audit(1764001186.574:6172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5551 comm="syz.2.8124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f441ef8f749 code=0x7ffc0000 [ 2870.360979][ T30] audit: type=1326 audit(1764001186.574:6173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5551 comm="syz.2.8124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f441ef8f749 code=0x7ffc0000 [ 2870.604838][ T5575] input: syz0 as /devices/virtual/input/input347 [ 2870.641241][ T5575] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8128'. [ 2870.815334][T25726] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 2870.994215][T25726] usb 1-1: Using ep0 maxpacket: 16 [ 2871.005069][T25726] usb 1-1: config 0 has an invalid interface number: 216 but max is 0 [ 2871.018025][T25726] usb 1-1: config 0 has no interface number 0 [ 2871.026235][T25726] usb 1-1: config 0 interface 216 altsetting 0 bulk endpoint 0xA has invalid maxpacket 16 [ 2871.037909][T25726] usb 1-1: config 0 interface 216 altsetting 0 endpoint 0x82 has invalid maxpacket 1104, setting to 1024 [ 2871.052085][T25726] usb 1-1: config 0 interface 216 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 2871.069309][T25726] usb 1-1: New USB device found, idVendor=c877, idProduct=d477, bcdDevice=ca.74 [ 2871.079767][T25726] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2871.089457][T25726] usb 1-1: Product: syz [ 2871.098240][T25726] usb 1-1: Manufacturer: syz [ 2871.106506][T25726] usb 1-1: SerialNumber: syz [ 2871.117717][T25726] usb 1-1: config 0 descriptor?? [ 2871.127785][ T5573] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 2871.136744][ T5573] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 2871.148422][T25726] usb-storage 1-1:0.216: USB Mass Storage device detected [ 2871.184538][T25726] scsi host1: usb-storage 1-1:0.216 [ 2872.429392][ T5582] usb 1-1: reset high-speed USB device number 63 using dummy_hcd [ 2872.620359][ T5607] netlink: 'syz.4.8137': attribute type 1 has an invalid length. [ 2873.104512][ T5607] bond1: entered promiscuous mode [ 2873.111542][ T5607] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2873.255437][T25726] usb 1-1: USB disconnect, device number 63 [ 2873.720227][ T5619] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8141'. [ 2874.024849][ T5623] batadv_slave_1: entered promiscuous mode [ 2874.218434][ T5628] FAULT_INJECTION: forcing a failure. [ 2874.218434][ T5628] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2874.258128][ T5628] CPU: 0 UID: 0 PID: 5628 Comm: syz.6.8143 Not tainted syzkaller #0 PREEMPT(full) [ 2874.258159][ T5628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2874.258173][ T5628] Call Trace: [ 2874.258182][ T5628] [ 2874.258192][ T5628] dump_stack_lvl+0x189/0x250 [ 2874.258226][ T5628] ? __pfx____ratelimit+0x10/0x10 [ 2874.258258][ T5628] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2874.258288][ T5628] ? __pfx__printk+0x10/0x10 [ 2874.258333][ T5628] should_fail_ex+0x414/0x560 [ 2874.258375][ T5628] _copy_to_user+0x31/0xb0 [ 2874.258407][ T5628] simple_read_from_buffer+0xe1/0x170 [ 2874.258451][ T5628] proc_pid_attr_read+0x1fe/0x290 [ 2874.258482][ T5628] ? __pfx_proc_pid_attr_read+0x10/0x10 [ 2874.258521][ T5628] ? rw_verify_area+0x2a6/0x4d0 [ 2874.258551][ T5628] ? __lock_acquire+0xab9/0xd20 [ 2874.258573][ T5628] ? __pfx_proc_pid_attr_read+0x10/0x10 [ 2874.258602][ T5628] vfs_read+0x200/0xa30 [ 2874.258632][ T5628] ? fdget_pos+0x247/0x320 [ 2874.258658][ T5628] ? __pfx___mutex_lock+0x10/0x10 [ 2874.258694][ T5628] ? __pfx_vfs_read+0x10/0x10 [ 2874.258727][ T5628] ? __fget_files+0x2a/0x420 [ 2874.258754][ T5628] ? __fget_files+0x3a0/0x420 [ 2874.258775][ T5628] ? __fget_files+0x2a/0x420 [ 2874.258806][ T5628] ksys_read+0x145/0x250 [ 2874.258840][ T5628] ? __pfx_ksys_read+0x10/0x10 [ 2874.258875][ T5628] ? do_syscall_64+0xbe/0xfa0 [ 2874.258912][ T5628] do_syscall_64+0xfa/0xfa0 [ 2874.258943][ T5628] ? lockdep_hardirqs_on+0x9c/0x150 [ 2874.258975][ T5628] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2874.258998][ T5628] ? clear_bhb_loop+0x60/0xb0 [ 2874.259025][ T5628] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2874.259054][ T5628] RIP: 0033:0x7fce0818f749 [ 2874.259076][ T5628] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2874.259096][ T5628] RSP: 002b:00007fce090c2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2874.259121][ T5628] RAX: ffffffffffffffda RBX: 00007fce083e5fa0 RCX: 00007fce0818f749 [ 2874.259138][ T5628] RDX: 0000000000002020 RSI: 0000200000003040 RDI: 0000000000000003 [ 2874.259153][ T5628] RBP: 00007fce090c2090 R08: 0000000000000000 R09: 0000000000000000 [ 2874.259168][ T5628] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2874.259182][ T5628] R13: 00007fce083e6038 R14: 00007fce083e5fa0 R15: 00007fce0850fa28 [ 2874.259219][ T5628] [ 2874.642460][ T5622] batadv_slave_1: left promiscuous mode [ 2874.829721][ T5637] futex_wake_op: syz.6.8145 tries to shift op by 32; fix this program [ 2874.944431][T25726] usb 1-1: new full-speed USB device number 64 using dummy_hcd [ 2875.115963][T25726] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 2875.134993][T25726] usb 1-1: config 0 has no interface number 0 [ 2875.170567][T25726] usb 1-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 2875.211322][T25726] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2875.265118][T25726] usb 1-1: config 0 descriptor?? [ 2875.311838][T25726] usb 1-1: selecting invalid altsetting 1 [ 2875.321610][T25726] dvb_ttusb_budget: ttusb_init_controller: error [ 2875.330477][T25726] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 2875.511424][ T5634] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2875.531560][T25726] DVB: Unable to find symbol cx22700_attach() [ 2875.564563][ T5634] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2875.745105][T25726] DVB: Unable to find symbol tda10046_attach() [ 2875.776588][T25726] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 2875.790951][T25726] usb 1-1: USB disconnect, device number 64 [ 2876.214496][ T5656] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8150'. [ 2879.284736][T32346] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 2879.425418][ T5679] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8157'. [ 2879.454560][T32346] usb 1-1: Using ep0 maxpacket: 32 [ 2879.472297][T32346] usb 1-1: config index 0 descriptor too short (expected 8228, got 36) [ 2879.494096][T32346] usb 1-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 2879.509061][T32346] usb 1-1: config 9 has no interfaces? [ 2879.520218][T32346] usb 1-1: New USB device found, idVendor=856a, idProduct=0094, bcdDevice= 0.00 [ 2879.532239][T32346] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2879.707448][ T5688] netlink: 212148 bytes leftover after parsing attributes in process `syz.3.8160'. [ 2881.341317][ T5711] netlink: 24 bytes leftover after parsing attributes in process `syz.6.8168'. [ 2881.447992][ T5712] netlink: 'syz.6.8168': attribute type 3 has an invalid length. [ 2881.459903][ T5712] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8168'. [ 2881.576294][T25989] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 2881.754876][T25989] usb 5-1: Using ep0 maxpacket: 16 [ 2881.761933][T25989] usb 5-1: config 0 has an invalid interface number: 216 but max is 0 [ 2881.779234][T25989] usb 5-1: config 0 has no interface number 0 [ 2881.805075][T25989] usb 5-1: config 0 interface 216 altsetting 0 bulk endpoint 0xA has invalid maxpacket 16 [ 2881.818627][T25989] usb 5-1: config 0 interface 216 altsetting 0 endpoint 0x82 has invalid maxpacket 1104, setting to 1024 [ 2881.831798][T25989] usb 5-1: config 0 interface 216 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 2881.847385][T25989] usb 5-1: New USB device found, idVendor=c877, idProduct=d477, bcdDevice=ca.74 [ 2881.859979][T25989] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2881.905190][T25989] usb 5-1: Product: syz [ 2881.910285][T25989] usb 5-1: Manufacturer: syz [ 2881.919760][T25989] usb 5-1: SerialNumber: syz [ 2881.941633][T25989] usb 5-1: config 0 descriptor?? [ 2881.955393][ T5710] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 2881.964816][ T5710] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 2881.976216][T25989] usb-storage 5-1:0.216: USB Mass Storage device detected [ 2882.000704][T25989] scsi host1: usb-storage 5-1:0.216 [ 2882.109991][T32346] usb 1-1: string descriptor 0 read error: -71 [ 2882.150580][T32346] usb 1-1: USB disconnect, device number 65 [ 2882.541770][ T5733] netlink: 'syz.6.8173': attribute type 72 has an invalid length. [ 2882.580809][ T5733] netlink: 300 bytes leftover after parsing attributes in process `syz.6.8173'. [ 2883.334422][ T5718] usb 5-1: reset high-speed USB device number 103 using dummy_hcd [ 2883.495266][T25726] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 2883.636764][T25726] usb 1-1: device descriptor read/64, error -71 [ 2883.925378][T25726] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 2884.144140][T25726] usb 1-1: device descriptor read/64, error -71 [ 2884.226785][T32346] usb 5-1: USB disconnect, device number 103 [ 2884.254426][T25726] usb usb1-port1: attempt power cycle [ 2884.290981][ T5748] netlink: 324 bytes leftover after parsing attributes in process `syz.4.8177'. [ 2884.677585][T25726] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 2884.771884][T25726] usb 1-1: device descriptor read/8, error -71 [ 2885.015331][T32346] usb 5-1: new full-speed USB device number 104 using dummy_hcd [ 2885.036707][T25726] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 2885.087154][T25726] usb 1-1: device descriptor read/8, error -71 [ 2885.179530][T32346] usb 5-1: unable to get BOS descriptor or descriptor too short [ 2885.207008][T32346] usb 5-1: not running at top speed; connect to a high speed hub [ 2885.236332][T32346] usb 5-1: config 56 has an invalid interface number: 218 but max is 0 [ 2885.247519][T32346] usb 5-1: config 56 has an invalid descriptor of length 0, skipping remainder of the config [ 2885.284057][T25726] usb usb1-port1: unable to enumerate USB device [ 2885.332009][T32346] usb 5-1: config 56 has no interface number 0 [ 2885.384254][T32346] usb 5-1: config 56 interface 218 altsetting 224 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 2885.464794][T32346] usb 5-1: config 56 interface 218 has no altsetting 0 [ 2885.481927][T32346] usb 5-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.10 [ 2885.494315][T32346] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2885.502387][T32346] usb 5-1: Product: syz [ 2885.508577][T32346] usb 5-1: Manufacturer: syz [ 2885.517873][T32346] usb 5-1: SerialNumber: syz [ 2885.942530][ T5756] FAULT_INJECTION: forcing a failure. [ 2885.942530][ T5756] name failslab, interval 1, probability 0, space 0, times 0 [ 2885.958833][ T5756] CPU: 0 UID: 0 PID: 5756 Comm: syz.6.8179 Not tainted syzkaller #0 PREEMPT(full) [ 2885.958866][ T5756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2885.958880][ T5756] Call Trace: [ 2885.958888][ T5756] [ 2885.958898][ T5756] dump_stack_lvl+0x189/0x250 [ 2885.958934][ T5756] ? __pfx____ratelimit+0x10/0x10 [ 2885.958963][ T5756] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2885.958995][ T5756] ? __pfx__printk+0x10/0x10 [ 2885.959024][ T5756] ? __pfx___might_resched+0x10/0x10 [ 2885.959047][ T5756] ? fs_reclaim_acquire+0x7d/0x100 [ 2885.959087][ T5756] should_fail_ex+0x414/0x560 [ 2885.959127][ T5756] should_failslab+0xa8/0x100 [ 2885.959152][ T5756] __kvmalloc_node_noprof+0x158/0x910 [ 2885.959197][ T5756] ? traverse+0xde/0x580 [ 2885.959234][ T5756] traverse+0xde/0x580 [ 2885.959271][ T5756] ? aa_file_perm+0x13a/0x1550 [ 2885.959298][ T5756] ? aa_file_perm+0x13a/0x1550 [ 2885.959322][ T5756] seq_read_iter+0xd08/0xe20 [ 2885.959364][ T5756] ? __asan_memset+0x22/0x50 [ 2885.959402][ T5756] seq_read+0x369/0x480 [ 2885.959428][ T5756] ? __lock_acquire+0xab9/0xd20 [ 2885.959461][ T5756] ? __pfx_seq_read+0x10/0x10 [ 2885.959511][ T5756] ? __pfx_seq_read+0x10/0x10 [ 2885.959538][ T5756] proc_reg_read+0x1e9/0x2e0 [ 2885.959575][ T5756] vfs_readv+0x5aa/0x850 [ 2885.959601][ T5756] ? __pfx_proc_reg_read+0x10/0x10 [ 2885.959637][ T5756] ? __pfx_vfs_readv+0x10/0x10 [ 2885.959678][ T5756] ? __fget_files+0x2a/0x420 [ 2885.959705][ T5756] ? __fget_files+0x3a0/0x420 [ 2885.959735][ T5756] ? __fget_files+0x2a/0x420 [ 2885.959767][ T5756] __x64_sys_preadv+0x197/0x2a0 [ 2885.959805][ T5756] ? __pfx___x64_sys_preadv+0x10/0x10 [ 2885.959845][ T5756] ? do_syscall_64+0xbe/0xfa0 [ 2885.959883][ T5756] do_syscall_64+0xfa/0xfa0 [ 2885.959915][ T5756] ? lockdep_hardirqs_on+0x9c/0x150 [ 2885.959949][ T5756] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2885.959972][ T5756] ? clear_bhb_loop+0x60/0xb0 [ 2885.959996][ T5756] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2885.960018][ T5756] RIP: 0033:0x7fce0818f749 [ 2885.960040][ T5756] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2885.960060][ T5756] RSP: 002b:00007fce09080038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 2885.960084][ T5756] RAX: ffffffffffffffda RBX: 00007fce083e6180 RCX: 00007fce0818f749 [ 2885.960101][ T5756] RDX: 0000000000000001 RSI: 0000200000000300 RDI: 0000000000000005 [ 2885.960116][ T5756] RBP: 00007fce09080090 R08: 0000000000000002 R09: 0000000000000000 [ 2885.960130][ T5756] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000001 [ 2885.960144][ T5756] R13: 00007fce083e6218 R14: 00007fce083e6180 R15: 00007fce0850fa28 [ 2885.960181][ T5756] [ 2886.945109][ T5759] netlink: 312 bytes leftover after parsing attributes in process `syz.0.8180'. [ 2888.020156][T32346] radioshark2 5-1:56.218: Invalid radioSHARK2 device [ 2888.065717][T29198] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2888.078969][T29198] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2888.103645][T32346] radioshark2 5-1:56.218: probe with driver radioshark2 failed with error -22 [ 2888.119692][T29198] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2888.132104][T29198] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2888.144981][T32346] usbhid 5-1:56.218: couldn't find an input interrupt endpoint [ 2888.154885][T29198] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2888.177162][T32346] usb 5-1: USB disconnect, device number 104 [ 2888.387373][T14826] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2888.397967][T14826] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2888.409049][T14826] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2888.440194][T14826] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2888.457338][T14826] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2888.485648][T31322] usb 4-1: new full-speed USB device number 46 using dummy_hcd [ 2888.821224][T31322] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2888.832199][T31322] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 2888.845211][T31322] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 10 [ 2889.028499][T31322] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 65535, setting to 64 [ 2889.065039][T31322] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 2889.080626][T31322] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 2889.092696][T31322] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2889.117357][T31322] usb 4-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 2889.134691][T31322] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2889.160353][T31322] usb 4-1: Product: syz [ 2889.167333][T31322] usb 4-1: Manufacturer: syz [ 2889.173718][T31322] usb 4-1: SerialNumber: syz [ 2889.205734][T31322] usb 4-1: config 0 descriptor?? [ 2889.215521][ T5769] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 2889.232097][T31322] ati_remote 4-1:0.0: Initializing ati_remote hardware failed. [ 2889.262005][T31322] ati_remote 4-1:0.0: probe with driver ati_remote failed with error -5 [ 2889.546014][T31322] usb 4-1: USB disconnect, device number 46 [ 2889.755002][ T5773] chnl_net:caif_netlink_parms(): no params data found [ 2890.221910][ T5773] bridge0: port 1(bridge_slave_0) entered blocking state [ 2890.250771][ T5773] bridge0: port 1(bridge_slave_0) entered disabled state [ 2890.285268][ T5773] bridge_slave_0: entered allmulticast mode [ 2890.299753][ T5773] bridge_slave_0: entered promiscuous mode [ 2890.317333][ T5773] bridge0: port 2(bridge_slave_1) entered blocking state [ 2890.335204][ T5773] bridge0: port 2(bridge_slave_1) entered disabled state [ 2890.347372][ T5773] bridge_slave_1: entered allmulticast mode [ 2890.364534][ T5773] bridge_slave_1: entered promiscuous mode [ 2890.395047][ T5790] fuse: Unknown parameter 'default_pe' [ 2890.484114][T29198] Bluetooth: hci3: command tx timeout [ 2890.518478][ T5773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2890.540730][ T5773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2890.648924][ T5773] team0: Port device team_slave_0 added [ 2890.698150][ T5773] team0: Port device team_slave_1 added [ 2890.820489][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2890.852367][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2890.881264][ T5773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2890.900488][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2890.931844][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2890.958776][T31322] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 2890.970884][ T5773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2891.097560][ T5773] hsr_slave_0: entered promiscuous mode [ 2891.109634][ T5773] hsr_slave_1: entered promiscuous mode [ 2891.149132][ T5773] debugfs: 'hsr0' already exists in 'hsr' [ 2891.159044][ T5773] Cannot create hsr debugfs directory [ 2891.161703][T31322] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2891.225607][T31322] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 2891.261891][T31322] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2891.299893][T31322] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 2891.345395][T31322] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 2891.365965][T31322] usb 4-1: Product: syz [ 2891.370404][T31322] usb 4-1: Manufacturer: syz [ 2891.383523][T31322] usb 4-1: SerialNumber: syz [ 2891.606844][T31322] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 47 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 2891.888430][ T5801] "syz.3.8190" (5801) uses obsolete ecb(arc4) skcipher [ 2892.048923][ T5773] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 2892.131233][ T5802] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2892.145482][ T5802] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2892.159870][ T5773] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 2892.246635][ T5773] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 2892.433293][ T5773] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 2892.527677][T32346] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 2892.579107][T29198] Bluetooth: hci3: command tx timeout [ 2892.924910][T32346] usb 1-1: Using ep0 maxpacket: 32 [ 2892.936874][T32346] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 2892.950878][T32346] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 2892.978863][T32346] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 2892.990077][T32346] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2893.010939][T32346] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 2893.069510][T32346] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 14385, setting to 1024 [ 2893.140483][ T5773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2893.178431][T32346] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 2893.200094][T32346] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 2893.236233][T32346] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 2893.259659][T32346] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2893.305835][T32346] usb 1-1: config 0 descriptor?? [ 2893.312369][ T5806] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 2893.494284][ T5773] 8021q: adding VLAN 0 to HW filter on device team0 [ 2893.511856][ T1819] bridge0: port 1(bridge_slave_0) entered blocking state [ 2893.519335][ T1819] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2893.558985][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 2893.566194][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2893.670304][T32346] usblp 1-1:0.0: usblp1: USB Bidirectional printer dev 70 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 2893.803186][T25726] usb 1-1: USB disconnect, device number 70 [ 2893.824717][T25726] usblp1: removed [ 2893.876632][ T5773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2894.422108][ T5773] veth0_vlan: entered promiscuous mode [ 2894.540165][ T5773] veth1_vlan: entered promiscuous mode [ 2894.651727][T29198] Bluetooth: hci3: command tx timeout [ 2894.675129][T32346] usb 4-1: USB disconnect, device number 47 [ 2894.685482][T32346] usblp0: removed [ 2894.707722][ T5828] ip6gretap0: entered promiscuous mode [ 2894.755480][ T5828] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 2894.849019][ T5773] veth0_macvtap: entered promiscuous mode [ 2894.949819][ T5773] veth1_macvtap: entered promiscuous mode [ 2895.017557][ T5834] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2895.076652][ T5834] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2895.159698][ T5834] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2895.177608][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2895.195707][ T5834] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2895.239479][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2895.329683][T17490] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2895.360213][ T5834] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2895.371361][ T8526] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2895.397394][ T5834] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2895.437137][ T8526] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2895.456838][ T8526] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2895.473615][ T5834] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2895.522708][ C1] bridge0: port 3(syz_tun) entered forwarding state [ 2895.529364][ C1] bridge0: topology change detected, propagating [ 2895.615341][ T5834] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2895.635502][ T5834] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2895.656178][ T5834] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2896.382279][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2896.438396][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2896.533767][ T1814] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2896.542459][ T1814] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2896.737173][T29198] Bluetooth: hci3: command tx timeout [ 2897.902033][ T5857] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8199'. [ 2897.915496][T31322] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 2897.926400][ T5857] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8199'. [ 2898.168336][T31322] usb 4-1: config index 0 descriptor too short (expected 28277, got 36) [ 2898.203646][T31322] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2898.309130][T31322] usb 4-1: config 0 has no interfaces? [ 2898.338550][T31322] usb 4-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 2898.352432][T31322] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2898.371142][T31322] usb 4-1: config 0 descriptor?? [ 2898.658791][T25989] usb 4-1: USB disconnect, device number 48 [ 2901.170387][ T5882] netlink: 'syz.0.8205': attribute type 9 has an invalid length. [ 2901.180555][ T5882] netlink: 'syz.0.8205': attribute type 6 has an invalid length. [ 2901.190608][ T5882] netlink: 'syz.0.8205': attribute type 7 has an invalid length. [ 2901.200430][ T5882] netlink: 'syz.0.8205': attribute type 8 has an invalid length. [ 2901.495560][T15798] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 2901.531836][ T5885] netlink: 76 bytes leftover after parsing attributes in process `syz.6.8206'. [ 2901.653731][T15798] usb 1-1: device descriptor read/64, error -71 [ 2901.894867][T15798] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 2902.042188][T15798] usb 1-1: device descriptor read/64, error -71 [ 2902.174534][T15798] usb usb1-port1: attempt power cycle [ 2902.544187][T15798] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 2902.675467][T15798] usb 1-1: device descriptor read/8, error -71 [ 2902.923976][T15798] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 2902.957312][T15798] usb 1-1: device descriptor read/8, error -71 [ 2903.097669][T15798] usb usb1-port1: unable to enumerate USB device [ 2903.208420][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 2903.217181][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 2906.154330][T15798] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 2906.364043][T15798] usb 1-1: Using ep0 maxpacket: 8 [ 2906.414247][T15798] usb 1-1: config 1 interface 0 has no altsetting 0 [ 2906.440784][T15798] usb 1-1: New USB device found, idVendor=044f, idProduct=b320, bcdDevice= 0.40 [ 2906.531769][T15798] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2906.614203][T15798] usb 1-1: Product: 㐊 [ 2906.618425][T15798] usb 1-1: Manufacturer: ꐴ铠噄Ꙕ੝螬愶㴴䢢핦൯汞朌擔與⛊겥픀蛮ኴ㦀ᅚỲ爱℞ؿ俻ꊗ풶 [ 2907.082351][ T5913] fuse: Unknown parameter '0x0000000000000008' [ 2907.866568][T14826] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 2907.881268][T14826] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 2907.891093][T14826] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 2907.900550][T14826] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 2907.909296][T14826] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 2908.267829][T15798] usbhid 1-1:1.0: can't add hid device: -71 [ 2908.285779][T15798] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 2908.319715][T15798] usb 1-1: USB disconnect, device number 75 [ 2908.714788][ T5932] usb usb8: usbfs: process 5932 (syz.0.8218) did not claim interface 0 before use [ 2908.748201][ T5923] chnl_net:caif_netlink_parms(): no params data found [ 2909.116792][ T5923] bridge0: port 1(bridge_slave_0) entered blocking state [ 2909.128879][ T5923] bridge0: port 1(bridge_slave_0) entered disabled state [ 2909.160102][ T5923] bridge_slave_0: entered allmulticast mode [ 2909.207150][ T5923] bridge_slave_0: entered promiscuous mode [ 2909.248087][ T5923] bridge0: port 2(bridge_slave_1) entered blocking state [ 2909.256763][ T5923] bridge0: port 2(bridge_slave_1) entered disabled state [ 2909.266587][ T5923] bridge_slave_1: entered allmulticast mode [ 2909.277088][ T5923] bridge_slave_1: entered promiscuous mode [ 2909.341722][ T5923] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2909.372496][ T5923] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2909.464066][T31322] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 2909.498524][ T5923] team0: Port device team_slave_0 added [ 2909.510433][ T5923] team0: Port device team_slave_1 added [ 2909.625390][ T5923] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2909.632402][ T5923] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2909.665120][ T5923] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2909.670676][T31322] usb 1-1: Using ep0 maxpacket: 16 [ 2909.681276][ T5923] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2909.699078][ T5923] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2909.728681][ T5923] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2909.745579][T31322] usb 1-1: config 0 has an invalid interface number: 214 but max is 0 [ 2909.768959][T31322] usb 1-1: config 0 has no interface number 0 [ 2909.784465][T31322] usb 1-1: config 0 interface 214 altsetting 0 has an endpoint descriptor with address 0xC1, changing to 0x81 [ 2909.816923][T31322] usb 1-1: config 0 interface 214 altsetting 0 endpoint 0x81 has an invalid bInterval 193, changing to 11 [ 2909.837236][T31322] usb 1-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice=fd.f5 [ 2909.854001][T31322] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 2909.865770][T31322] usb 1-1: Product: syz [ 2909.871889][T31322] usb 1-1: SerialNumber: syz [ 2909.884469][T31322] usb 1-1: config 0 descriptor?? [ 2909.917431][ T5945] netlink: 68 bytes leftover after parsing attributes in process `syz.6.8222'. [ 2909.948665][ T5923] hsr_slave_0: entered promiscuous mode [ 2909.961289][ T5923] hsr_slave_1: entered promiscuous mode [ 2909.970057][ T5923] debugfs: 'hsr0' already exists in 'hsr' [ 2909.978274][ T5923] Cannot create hsr debugfs directory [ 2910.007253][T14826] Bluetooth: hci6: command tx timeout [ 2910.097077][T31322] usbtouchscreen 1-1:0.214: Failed to read FW rev: -71 [ 2910.127249][T31322] usbtouchscreen 1-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 2910.131192][T31322] usb 1-1: USB disconnect, device number 76 [ 2910.406886][ T5923] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 2910.436160][ T5923] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 2910.476979][ T5923] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 2910.499748][ T5923] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 2910.548098][ T5953] netlink: 180 bytes leftover after parsing attributes in process `syz.6.8224'. [ 2910.566004][ T5953] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8224'. [ 2910.851806][ T5923] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2910.909381][ T5923] 8021q: adding VLAN 0 to HW filter on device team0 [ 2910.958327][ T8526] bridge0: port 1(bridge_slave_0) entered blocking state [ 2910.965592][ T8526] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2911.061977][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 2911.069217][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2911.458371][ T5923] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2911.527181][ T5923] veth0_vlan: entered promiscuous mode [ 2911.620151][ T5923] veth1_vlan: entered promiscuous mode [ 2911.708525][ T5923] veth0_macvtap: entered promiscuous mode [ 2911.778999][ T5923] veth1_macvtap: entered promiscuous mode [ 2911.896304][ T5923] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2911.916917][ T5923] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2912.037685][T17490] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2912.061163][T17490] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2912.098064][T14826] Bluetooth: hci6: command tx timeout [ 2912.218708][T17490] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2912.543388][T15798] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 2912.642526][T17490] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2912.882074][T15798] usb 1-1: config index 0 descriptor too short (expected 28277, got 36) [ 2912.929924][T15798] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2912.959979][T15798] usb 1-1: config 0 has no interfaces? [ 2912.967791][T15798] usb 1-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 2912.981927][T15798] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2913.051133][T15798] usb 1-1: config 0 descriptor?? [ 2914.168079][T14826] Bluetooth: hci6: command tx timeout [ 2914.239965][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2914.418655][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2914.738635][T17490] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2914.756234][T17490] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2916.196028][T32346] usb 1-1: USB disconnect, device number 77 [ 2916.244843][T14826] Bluetooth: hci6: command tx timeout [ 2916.465452][T29198] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 2916.555014][T29198] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 2916.619122][T29198] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 2916.628004][T29198] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 2916.638640][T29198] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 2916.743656][T15798] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 2917.425878][T15798] usb 9-1: config index 0 descriptor too short (expected 28277, got 36) [ 2917.547316][T15798] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2917.610096][T15798] usb 9-1: config 0 has no interfaces? [ 2917.617909][T15798] usb 9-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 2917.965683][T15798] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2918.216712][ T6009] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8234'. [ 2918.278147][ T30] audit: type=1326 audit(1764001234.924:6174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6000 comm="syz.0.8234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f734118f749 code=0x7ffc0000 [ 2918.308180][T15798] usb 9-1: config 0 descriptor?? [ 2918.374895][ T30] audit: type=1326 audit(1764001234.924:6175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6000 comm="syz.0.8234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f734118f749 code=0x7ffc0000 [ 2918.588026][ T30] audit: type=1326 audit(1764001234.924:6176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6000 comm="syz.0.8234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f734118f749 code=0x7ffc0000 [ 2918.686601][ T30] audit: type=1326 audit(1764001234.924:6177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6000 comm="syz.0.8234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=48 compat=0 ip=0x7f734118f749 code=0x7ffc0000 [ 2918.712008][ T30] audit: type=1326 audit(1764001234.924:6178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6000 comm="syz.0.8234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f734118f749 code=0x7ffc0000 [ 2918.744925][ T30] audit: type=1326 audit(1764001234.924:6179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6000 comm="syz.0.8234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f734118f749 code=0x7ffc0000 [ 2918.745473][T14826] Bluetooth: hci7: command tx timeout [ 2918.768381][ T30] audit: type=1326 audit(1764001234.934:6180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6000 comm="syz.0.8234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f734118f749 code=0x7ffc0000 [ 2918.768437][ T30] audit: type=1326 audit(1764001234.934:6181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6000 comm="syz.0.8234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f734118f749 code=0x7ffc0000 [ 2918.768489][ T30] audit: type=1326 audit(1764001234.934:6182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6000 comm="syz.0.8234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f734118f749 code=0x7ffc0000 [ 2918.768548][ T30] audit: type=1326 audit(1764001234.934:6183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6000 comm="syz.0.8234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f734118f749 code=0x7ffc0000 [ 2919.352007][ T6003] chnl_net:caif_netlink_parms(): no params data found [ 2920.082198][ T6003] bridge0: port 1(bridge_slave_0) entered blocking state [ 2920.126908][ T6003] bridge0: port 1(bridge_slave_0) entered disabled state [ 2920.154501][ T6003] bridge_slave_0: entered allmulticast mode [ 2920.176373][ T6003] bridge_slave_0: entered promiscuous mode [ 2920.232104][ T6003] bridge0: port 2(bridge_slave_1) entered blocking state [ 2920.244715][ T6029] netlink: 180 bytes leftover after parsing attributes in process `syz.7.8237'. [ 2920.271138][ T6029] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8237'. [ 2920.274412][ T6003] bridge0: port 2(bridge_slave_1) entered disabled state [ 2920.391195][ T6003] bridge_slave_1: entered allmulticast mode [ 2920.465986][ T6003] bridge_slave_1: entered promiscuous mode [ 2920.622339][ T6003] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2920.686776][ T6003] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2920.757066][T31322] usb 9-1: USB disconnect, device number 2 [ 2920.886504][T14826] Bluetooth: hci7: command tx timeout [ 2920.979041][ T6039] netlink: 12 bytes leftover after parsing attributes in process `syz.8.8241'. [ 2921.097989][ T6003] team0: Port device team_slave_0 added [ 2921.170945][ T6003] team0: Port device team_slave_1 added [ 2921.186109][ T6040] netlink: 63 bytes leftover after parsing attributes in process `syz.8.8241'. [ 2921.281295][ T6003] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2921.297435][ T6003] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2921.326175][ T6003] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2921.369526][ T6003] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2921.379266][ T6003] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2921.411278][ T6003] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2921.891421][ T6052] netlink: 8 bytes leftover after parsing attributes in process `syz.8.8244'. [ 2922.108453][ T6003] hsr_slave_0: entered promiscuous mode [ 2922.148521][ T6003] hsr_slave_1: entered promiscuous mode [ 2922.191329][ T6003] debugfs: 'hsr0' already exists in 'hsr' [ 2922.200950][ T6003] Cannot create hsr debugfs directory [ 2922.583874][T15798] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 2922.882412][ T6071] FAULT_INJECTION: forcing a failure. [ 2922.882412][ T6071] name failslab, interval 1, probability 0, space 0, times 0 [ 2922.886017][T15798] usb 1-1: Using ep0 maxpacket: 8 [ 2922.899356][ T6071] CPU: 0 UID: 0 PID: 6071 Comm: syz.8.8250 Not tainted syzkaller #0 PREEMPT(full) [ 2922.899391][ T6071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2922.899408][ T6071] Call Trace: [ 2922.899418][ T6071] [ 2922.899429][ T6071] dump_stack_lvl+0x189/0x250 [ 2922.899471][ T6071] ? __pfx____ratelimit+0x10/0x10 [ 2922.899507][ T6071] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2922.899548][ T6071] ? __pfx__printk+0x10/0x10 [ 2922.899582][ T6071] ? __pfx___might_resched+0x10/0x10 [ 2922.899609][ T6071] ? fs_reclaim_acquire+0x7d/0x100 [ 2922.899655][ T6071] should_fail_ex+0x414/0x560 [ 2922.899699][ T6071] should_failslab+0xa8/0x100 [ 2922.899727][ T6071] __kmalloc_noprof+0xcb/0x7f0 [ 2922.899762][ T6071] ? io_cache_alloc_new+0x40/0x100 [ 2922.899797][ T6071] io_cache_alloc_new+0x40/0x100 [ 2922.899828][ T6071] io_msg_alloc_async+0x1b2/0x2d0 [ 2922.899860][ T6071] io_recvmsg_prep+0x7cc/0x10a0 [ 2922.899906][ T6071] ? __pfx_io_recvmsg_prep+0x10/0x10 [ 2922.899933][ T6071] ? __pfx___io_alloc_req_refill+0x10/0x10 [ 2922.899966][ T6071] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 2922.900008][ T6071] ? percpu_counter_add_batch+0x190/0x1e0 [ 2922.900051][ T6071] ? io_task_refs_refill+0xbb/0x180 [ 2922.900087][ T6071] io_submit_sqes+0x935/0x1e60 [ 2922.900161][ T6071] __se_sys_io_uring_enter+0x2df/0x2b20 [ 2922.900219][ T6071] ? ksys_write+0x1cb/0x250 [ 2922.900260][ T6071] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 2922.900293][ T6071] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 2922.900331][ T6071] ? __pfx_vfs_write+0x10/0x10 [ 2922.900369][ T6071] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2922.900413][ T6071] ? __fget_files+0x3a0/0x420 [ 2922.900444][ T6071] ? fput+0xa0/0xd0 [ 2922.900474][ T6071] ? ksys_write+0x22a/0x250 [ 2922.900512][ T6071] ? __pfx_ksys_write+0x10/0x10 [ 2922.900558][ T6071] ? __x64_sys_io_uring_enter+0x21/0xf0 [ 2922.900597][ T6071] do_syscall_64+0xfa/0xfa0 [ 2922.900632][ T6071] ? lockdep_hardirqs_on+0x9c/0x150 [ 2922.900667][ T6071] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2922.900693][ T6071] ? clear_bhb_loop+0x60/0xb0 [ 2922.900723][ T6071] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2922.900746][ T6071] RIP: 0033:0x7ff3c238f749 [ 2922.900770][ T6071] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2922.900792][ T6071] RSP: 002b:00007ff3c31d6038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2922.900818][ T6071] RAX: ffffffffffffffda RBX: 00007ff3c25e5fa0 RCX: 00007ff3c238f749 [ 2922.900837][ T6071] RDX: 000000000000effd RSI: 0000000000003516 RDI: 0000000000000004 [ 2922.900853][ T6071] RBP: 00007ff3c31d6090 R08: 0000000000000000 R09: 0000000000000000 [ 2922.900868][ T6071] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2922.900884][ T6071] R13: 00007ff3c25e6038 R14: 00007ff3c25e5fa0 R15: 00007ff3c270fa28 [ 2922.900923][ T6071] [ 2922.983795][T14826] Bluetooth: hci7: command tx timeout [ 2923.005256][T15798] usb 1-1: unable to get BOS descriptor or descriptor too short [ 2923.255329][T15798] usb 1-1: config 12 interface 0 altsetting 7 bulk endpoint 0x3 has invalid maxpacket 108 [ 2923.294592][T15798] usb 1-1: config 12 interface 0 has no altsetting 0 [ 2923.316101][T15798] usb 1-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 2923.334193][T15798] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2923.344483][T15798] usb 1-1: Product: syz [ 2923.368123][T15798] usb 1-1: Manufacturer: syz [ 2923.375684][T15798] usb 1-1: SerialNumber: syz [ 2923.387369][ T6061] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 2923.649905][T15798] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 2923.686963][T15798] usb 1-1: selecting invalid altsetting 0 [ 2923.800040][T15798] usb 1-1: USB disconnect, device number 78 [ 2924.158211][T20834] udevd[20834]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:12.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2924.210487][ T6003] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 2924.239691][ T6003] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 2924.335977][ T6003] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 2924.416416][ T6003] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 2924.888118][ T6003] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2924.982186][ T6003] 8021q: adding VLAN 0 to HW filter on device team0 [ 2925.015845][ T1806] bridge0: port 1(bridge_slave_0) entered blocking state [ 2925.023113][ T1806] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2925.055080][T14826] Bluetooth: hci7: command tx timeout [ 2925.140309][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 2925.147584][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2925.462411][ T6003] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2925.716073][ T6003] veth0_vlan: entered promiscuous mode [ 2925.741944][ T6003] veth1_vlan: entered promiscuous mode [ 2925.788644][ T6003] veth0_macvtap: entered promiscuous mode [ 2925.801562][ T6003] veth1_macvtap: entered promiscuous mode [ 2925.841650][ T6003] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2925.875646][ T6003] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2925.899054][ T8526] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2925.954801][ T8526] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2926.017982][ T8526] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2926.034290][ T6093] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8256'. [ 2926.080096][ T8526] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2926.140051][ T6093] bridge0: port 2(bridge_slave_1) entered disabled state [ 2926.147504][ T6093] bridge0: port 1(bridge_slave_0) entered disabled state [ 2926.581312][ T6099] netlink: 180 bytes leftover after parsing attributes in process `syz.8.8257'. [ 2926.592041][ T6099] netlink: 8 bytes leftover after parsing attributes in process `syz.8.8257'. [ 2926.848164][ T1819] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2926.881490][ T1819] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2927.251886][ T1806] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2927.336758][ T1806] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2928.009457][ T6130] fuse: Unknown parameter '0x0000000000000008' [ 2929.694209][T31322] usb 10-1: new low-speed USB device number 2 using dummy_hcd [ 2930.150465][ T6161] netlink: 8 bytes leftover after parsing attributes in process `syz.8.8272'. [ 2930.187648][ T30] kauditd_printk_skb: 38 callbacks suppressed [ 2930.187672][ T30] audit: type=1326 audit(1764001246.864:6222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6156 comm="syz.8.8272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3c238f749 code=0x7ffc0000 [ 2930.266322][ T30] audit: type=1326 audit(1764001246.864:6223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6156 comm="syz.8.8272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3c238f749 code=0x7ffc0000 [ 2930.310296][T31322] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 4 [ 2930.325106][T31322] usb 10-1: New USB device found, idVendor=54ef, idProduct=6047, bcdDevice= 0.20 [ 2930.366525][ T30] audit: type=1326 audit(1764001246.864:6224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6156 comm="syz.8.8272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff3c238f749 code=0x7ffc0000 [ 2930.393124][T31322] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2930.404839][ T30] audit: type=1326 audit(1764001246.864:6225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6156 comm="syz.8.8272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3c238f749 code=0x7ffc0000 [ 2930.433888][ T30] audit: type=1326 audit(1764001246.864:6226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6156 comm="syz.8.8272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=48 compat=0 ip=0x7ff3c238f749 code=0x7ffc0000 [ 2930.465834][T31322] usb 10-1: config 0 descriptor?? [ 2930.500781][ T30] audit: type=1326 audit(1764001246.864:6227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6156 comm="syz.8.8272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3c238f749 code=0x7ffc0000 [ 2930.563094][ T30] audit: type=1326 audit(1764001246.864:6228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6156 comm="syz.8.8272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff3c238f749 code=0x7ffc0000 [ 2930.697634][ T30] audit: type=1326 audit(1764001246.864:6229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6156 comm="syz.8.8272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3c238f749 code=0x7ffc0000 [ 2930.732383][ T30] audit: type=1326 audit(1764001246.864:6230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6156 comm="syz.8.8272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7ff3c238f749 code=0x7ffc0000 [ 2930.759947][ T30] audit: type=1326 audit(1764001246.864:6231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6156 comm="syz.8.8272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3c238f749 code=0x7ffc0000 [ 2930.889505][T31322] usb 10-1: USB disconnect, device number 2 [ 2931.838205][ T6173] netlink: 36 bytes leftover after parsing attributes in process `syz.7.8276'. [ 2932.149790][ T6180] vivid-002: disconnect [ 2932.157986][ T6180] vivid-002: reconnect [ 2932.261366][ T6180] netlink: 24 bytes leftover after parsing attributes in process `syz.8.8278'. [ 2932.335900][ T6180] netlink: 84 bytes leftover after parsing attributes in process `syz.8.8278'. [ 2932.589586][ T6192] netlink: 180 bytes leftover after parsing attributes in process `syz.6.8281'. [ 2932.634623][ T6192] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8281'. [ 2933.742412][T31322] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 2933.938405][T31322] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2933.981939][T31322] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2934.088060][T31322] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2934.184684][T31322] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2934.198422][T31322] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2934.266305][T31322] usb 1-1: config 0 descriptor?? [ 2935.086004][T31322] plantronics 0003:047F:FFFF.0078: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 2936.484453][T31322] usb 1-1: reset high-speed USB device number 79 using dummy_hcd [ 2937.782128][T25726] usb 1-1: USB disconnect, device number 79 [ 2938.475891][ T6250] random: crng reseeded on system resumption [ 2940.740723][ T6268] netlink: 180 bytes leftover after parsing attributes in process `syz.0.8297'. [ 2940.752188][ T6268] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8297'. [ 2941.667483][ T6276] bridge0: port 3(syz_tun) entered blocking state [ 2941.674171][ T6276] bridge0: port 3(syz_tun) entered forwarding state [ 2941.710788][ T6276] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2941.733675][ T6276] 8021q: adding VLAN 0 to HW filter on device team0 [ 2941.759721][ T6276] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2943.124732][T32346] usb 1-1: new full-speed USB device number 80 using dummy_hcd [ 2943.416571][T32346] usb 1-1: unable to get BOS descriptor or descriptor too short [ 2943.428507][T32346] usb 1-1: not running at top speed; connect to a high speed hub [ 2943.587042][T32346] usb 1-1: config 56 has an invalid interface number: 218 but max is 0 [ 2943.605556][T32346] usb 1-1: config 56 has an invalid descriptor of length 0, skipping remainder of the config [ 2943.619370][T32346] usb 1-1: config 56 has no interface number 0 [ 2943.626833][T32346] usb 1-1: config 56 interface 218 altsetting 224 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 2943.641684][T32346] usb 1-1: config 56 interface 218 has no altsetting 0 [ 2943.661506][T32346] usb 1-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.10 [ 2943.674087][T32346] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2943.682135][T32346] usb 1-1: Product: syz [ 2943.726153][T32346] usb 1-1: Manufacturer: syz [ 2943.730793][T32346] usb 1-1: SerialNumber: syz [ 2945.706076][T32346] radioshark2 1-1:56.218: Invalid radioSHARK2 device [ 2945.750037][T32346] radioshark2 1-1:56.218: probe with driver radioshark2 failed with error -22 [ 2945.771263][T32346] usbhid 1-1:56.218: couldn't find an input interrupt endpoint [ 2945.781866][T32346] usb 1-1: USB disconnect, device number 80 [ 2945.957969][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 2945.957989][ T30] audit: type=1326 audit(1764001262.664:6245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6301 comm="syz.7.8308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22e6d8f749 code=0x7ffc0000 [ 2946.034936][ T30] audit: type=1326 audit(1764001262.664:6246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6301 comm="syz.7.8308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f22e6d8f749 code=0x7ffc0000 [ 2946.066269][ T30] audit: type=1326 audit(1764001262.664:6247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6301 comm="syz.7.8308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22e6d8f749 code=0x7ffc0000 [ 2946.096196][ T30] audit: type=1326 audit(1764001262.664:6248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6301 comm="syz.7.8308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f22e6d8f749 code=0x7ffc0000 [ 2946.121525][ T30] audit: type=1326 audit(1764001262.664:6249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6301 comm="syz.7.8308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22e6d8f749 code=0x7ffc0000 [ 2946.145517][ T30] audit: type=1326 audit(1764001262.664:6250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6301 comm="syz.7.8308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7f22e6d8f749 code=0x7ffc0000 [ 2946.169751][ T30] audit: type=1326 audit(1764001262.674:6251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6301 comm="syz.7.8308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22e6d8f749 code=0x7ffc0000 [ 2946.226338][ T30] audit: type=1326 audit(1764001262.674:6252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6301 comm="syz.7.8308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f22e6d8f749 code=0x7ffc0000 [ 2946.255918][ T30] audit: type=1326 audit(1764001262.674:6253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6301 comm="syz.7.8308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22e6d8f749 code=0x7ffc0000 [ 2946.284640][ T30] audit: type=1326 audit(1764001262.674:6254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6301 comm="syz.7.8308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f22e6d8df90 code=0x7ffc0000 [ 2946.958762][ T6315] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 2946.989871][ T6315] block device autoloading is deprecated and will be removed. [ 2947.414895][T25726] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 2947.554226][T25726] usb 9-1: device descriptor read/64, error -71 [ 2947.814157][T25726] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 2947.964817][T25726] usb 9-1: device descriptor read/64, error -71 [ 2948.086552][T25726] usb usb9-port1: attempt power cycle [ 2948.144626][T31322] usb 1-1: new full-speed USB device number 81 using dummy_hcd [ 2948.309786][T31322] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 2948.321587][T31322] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2948.337079][T31322] usb 1-1: Product: syz [ 2948.345428][T31322] usb 1-1: Manufacturer: syz [ 2948.350102][T31322] usb 1-1: SerialNumber: syz [ 2948.365509][T31322] usb 1-1: config 0 descriptor?? [ 2948.444513][T25726] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 2948.485989][T25726] usb 9-1: device descriptor read/8, error -71 [ 2948.580690][T31322] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 2948.744625][T25726] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 2948.789723][T25726] usb 9-1: device descriptor read/8, error -71 [ 2948.918374][T25726] usb usb9-port1: unable to enumerate USB device [ 2950.069466][ T6002] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 2950.112425][ T6002] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 2950.127025][ T6002] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 2950.136822][ T6002] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 2950.154225][ T6002] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 2950.257249][ T6335] binder: 6329:6335 ioctl c0306201 0 returned -14 [ 2950.558665][T31322] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 2950.738153][T31322] usb 1-1: USB disconnect, device number 81 [ 2951.008752][ T6334] chnl_net:caif_netlink_parms(): no params data found [ 2951.105321][T15812] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 2951.395099][T15812] usb 9-1: config index 0 descriptor too short (expected 28277, got 36) [ 2951.414637][T15812] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2951.477381][T15812] usb 9-1: config 0 has no interfaces? [ 2951.484531][T15812] usb 9-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 2951.497188][T15812] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2951.600608][T15812] usb 9-1: config 0 descriptor?? [ 2951.872345][ T6349] netlink: 36 bytes leftover after parsing attributes in process `syz.0.8320'. [ 2951.908917][ T6334] bridge0: port 1(bridge_slave_0) entered blocking state [ 2952.049915][ T6334] bridge0: port 1(bridge_slave_0) entered disabled state [ 2952.184186][ T6334] bridge_slave_0: entered allmulticast mode [ 2952.258619][ T6002] Bluetooth: hci8: command tx timeout [ 2952.276269][ T6334] bridge_slave_0: entered promiscuous mode [ 2952.315695][ T6334] bridge0: port 2(bridge_slave_1) entered blocking state [ 2952.375028][ T6334] bridge0: port 2(bridge_slave_1) entered disabled state [ 2952.507066][ T6334] bridge_slave_1: entered allmulticast mode [ 2952.717435][ T6334] bridge_slave_1: entered promiscuous mode [ 2952.906133][ T6334] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2952.941452][ T6334] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2953.212223][ T6334] team0: Port device team_slave_0 added [ 2953.285751][ T6334] team0: Port device team_slave_1 added [ 2953.420248][ T6334] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2953.430544][ T6334] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2953.463737][ T6334] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2953.483613][ T6334] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2953.491452][ T6334] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2953.521741][ T6334] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2953.780285][ T6334] hsr_slave_0: entered promiscuous mode [ 2953.831330][ T6334] hsr_slave_1: entered promiscuous mode [ 2953.839867][ T6334] debugfs: 'hsr0' already exists in 'hsr' [ 2953.849385][ T6334] Cannot create hsr debugfs directory [ 2953.967655][ T6358] FAULT_INJECTION: forcing a failure. [ 2953.967655][ T6358] name failslab, interval 1, probability 0, space 0, times 0 [ 2953.983077][ T6358] CPU: 0 UID: 0 PID: 6358 Comm: syz.7.8323 Not tainted syzkaller #0 PREEMPT(full) [ 2953.983107][ T6358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2953.983122][ T6358] Call Trace: [ 2953.983132][ T6358] [ 2953.983142][ T6358] dump_stack_lvl+0x189/0x250 [ 2953.983180][ T6358] ? __pfx____ratelimit+0x10/0x10 [ 2953.983210][ T6358] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2953.983241][ T6358] ? __pfx__printk+0x10/0x10 [ 2953.983269][ T6358] ? __pfx___might_resched+0x10/0x10 [ 2953.983291][ T6358] ? fs_reclaim_acquire+0x7d/0x100 [ 2953.983331][ T6358] should_fail_ex+0x414/0x560 [ 2953.983370][ T6358] should_failslab+0xa8/0x100 [ 2953.983395][ T6358] __kmalloc_noprof+0xcb/0x7f0 [ 2953.983425][ T6358] ? tomoyo_encode+0x28b/0x550 [ 2953.983466][ T6358] tomoyo_encode+0x28b/0x550 [ 2953.983506][ T6358] tomoyo_realpath_from_path+0x58d/0x5d0 [ 2953.983552][ T6358] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 2953.983580][ T6358] tomoyo_path_number_perm+0x1e8/0x5a0 [ 2953.983612][ T6358] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2953.983645][ T6358] ? sb_end_write+0xe9/0x1c0 [ 2953.983669][ T6358] ? vfs_write+0x956/0xb30 [ 2953.983737][ T6358] ? ksys_write+0x1e1/0x250 [ 2953.983774][ T6358] security_file_ioctl+0xcb/0x2d0 [ 2953.983803][ T6358] __se_sys_ioctl+0x47/0x170 [ 2953.983834][ T6358] do_syscall_64+0xfa/0xfa0 [ 2953.983865][ T6358] ? lockdep_hardirqs_on+0x9c/0x150 [ 2953.983896][ T6358] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2953.983917][ T6358] ? clear_bhb_loop+0x60/0xb0 [ 2953.983943][ T6358] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2953.983973][ T6358] RIP: 0033:0x7f22e6d8f749 [ 2953.983994][ T6358] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2953.984013][ T6358] RSP: 002b:00007f22e7c9e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2953.984037][ T6358] RAX: ffffffffffffffda RBX: 00007f22e6fe5fa0 RCX: 00007f22e6d8f749 [ 2953.984057][ T6358] RDX: 0000000000000000 RSI: 00000000000007a8 RDI: 0000000000000003 [ 2953.984071][ T6358] RBP: 00007f22e7c9e090 R08: 0000000000000000 R09: 0000000000000000 [ 2953.984085][ T6358] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2953.984098][ T6358] R13: 00007f22e6fe6038 R14: 00007f22e6fe5fa0 R15: 00007f22e710fa28 [ 2953.984135][ T6358] [ 2953.984378][ T6358] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2954.332640][ T6002] Bluetooth: hci8: command tx timeout [ 2954.425686][T32346] usb 9-1: USB disconnect, device number 7 [ 2955.035400][T14826] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 2955.059974][ T5921] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 2955.075794][ T5921] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 2955.091581][ T5921] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 2955.101584][ T5921] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 2955.114093][T15812] usb 9-1: new full-speed USB device number 8 using dummy_hcd [ 2955.277657][T15812] usb 9-1: config 4 has an invalid interface number: 231 but max is 0 [ 2955.297734][T15812] usb 9-1: config 4 has no interface number 0 [ 2955.319665][T15812] usb 9-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 2955.344688][T15812] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2955.409731][T15812] usb 9-1: Product: syz [ 2955.430693][T15812] usb 9-1: Manufacturer: syz [ 2955.471196][T15812] usb 9-1: SerialNumber: syz [ 2955.541378][T15812] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 2955.746941][ T6366] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2955.787172][ T6366] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2955.845336][T15812] vp7045: USB control message 'out' went wrong. [ 2955.851649][T15812] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 2955.914182][T15812] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 2955.955658][T15812] usb 9-1: USB disconnect, device number 8 [ 2956.424768][ T6002] Bluetooth: hci8: command tx timeout [ 2957.203352][ T6002] Bluetooth: hci9: command tx timeout [ 2957.569641][ T6374] chnl_net:caif_netlink_parms(): no params data found [ 2957.974349][T15812] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 2958.273003][ T6374] bridge0: port 1(bridge_slave_0) entered blocking state [ 2958.285710][ T6374] bridge0: port 1(bridge_slave_0) entered disabled state [ 2958.312934][ T6374] bridge_slave_0: entered allmulticast mode [ 2958.337456][ T6374] bridge_slave_0: entered promiscuous mode [ 2958.435960][ T6334] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2958.484285][ T6002] Bluetooth: hci8: command tx timeout [ 2958.539009][ T6334] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2958.605072][ T6374] bridge0: port 2(bridge_slave_1) entered blocking state [ 2958.627754][ T6374] bridge0: port 2(bridge_slave_1) entered disabled state [ 2958.657123][ T6374] bridge_slave_1: entered allmulticast mode [ 2958.684920][T32346] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 2958.707892][ T6374] bridge_slave_1: entered promiscuous mode [ 2958.888201][T32346] usb 9-1: Using ep0 maxpacket: 8 [ 2958.913917][ T6334] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2958.970962][T32346] usb 9-1: unable to get BOS descriptor or descriptor too short [ 2959.001907][ T6334] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2959.051967][T32346] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 2959.077316][T32346] usb 9-1: can't read configurations, error -71 [ 2959.154552][ T6374] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2959.198273][ T6374] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2959.295392][ T6002] Bluetooth: hci9: command tx timeout [ 2959.398153][ T6374] team0: Port device team_slave_0 added [ 2959.480359][ T6374] team0: Port device team_slave_1 added [ 2960.008269][ T6374] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2960.106206][ T6374] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2960.152185][ T6374] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2960.311340][ T6374] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2960.325375][ T6374] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2960.356791][ T6374] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2960.801378][ T6374] hsr_slave_0: entered promiscuous mode [ 2960.826741][ T6374] hsr_slave_1: entered promiscuous mode [ 2960.835667][ T6374] debugfs: 'hsr0' already exists in 'hsr' [ 2960.851788][ T6374] Cannot create hsr debugfs directory [ 2961.364377][ T6002] Bluetooth: hci9: command tx timeout [ 2961.428947][ T6334] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2961.835694][ T6460] x_tables: duplicate underflow at hook 3 [ 2962.039579][ T6334] 8021q: adding VLAN 0 to HW filter on device team0 [ 2962.411560][ T1814] bridge0: port 1(bridge_slave_0) entered blocking state [ 2962.418839][ T1814] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2962.497796][ T1814] bridge0: port 2(bridge_slave_1) entered blocking state [ 2962.504993][ T1814] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2963.443046][ T6002] Bluetooth: hci9: command tx timeout [ 2963.476127][ T6334] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2963.656074][ T6334] veth0_vlan: entered promiscuous mode [ 2963.747829][ T6334] veth1_vlan: entered promiscuous mode [ 2963.999970][ T6334] veth0_macvtap: entered promiscuous mode [ 2964.017725][ T6374] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 2964.068503][ T6334] veth1_macvtap: entered promiscuous mode [ 2964.097171][ T6374] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 2964.138411][ T6374] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 2964.171254][ T6374] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 2964.317285][ T6334] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2964.359990][ T6334] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2964.426585][ T1806] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2964.478369][ T1806] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2964.512394][ T1806] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2964.547189][ T1806] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2964.660917][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 2964.669535][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 2964.878025][ T8526] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2964.903956][ T8526] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2964.948423][ T6374] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2964.996665][ T8526] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2965.032185][ T8526] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2965.034807][ T6374] 8021q: adding VLAN 0 to HW filter on device team0 [ 2965.116898][ T1806] bridge0: port 1(bridge_slave_0) entered blocking state [ 2965.124146][ T1806] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2965.188895][ T1806] bridge0: port 2(bridge_slave_1) entered blocking state [ 2965.196148][ T1806] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2965.480662][ T6374] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2965.792453][ T6374] veth0_vlan: entered promiscuous mode [ 2965.931387][ T6374] veth1_vlan: entered promiscuous mode [ 2966.170149][ T6374] veth0_macvtap: entered promiscuous mode [ 2966.195999][ T6374] veth1_macvtap: entered promiscuous mode [ 2966.275776][ T6374] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2966.321347][ T6374] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2966.351156][ T8526] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2966.377103][ T8526] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2966.464054][ T8526] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2966.478904][ T8526] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2966.794554][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2966.802430][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2966.986863][ T1819] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2967.029593][ T1819] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2967.425307][ T6522] netlink: 24 bytes leftover after parsing attributes in process `syz.5.8325'. [ 3012.820247][ T6002] Bluetooth: hci3: command 0x0406 tx timeout [ 3026.094296][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 3026.100680][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 3033.294279][ T5921] Bluetooth: hci6: command 0x0406 tx timeout [ 3040.804439][ T31] INFO: task syz.4.8189:5792 blocked for more than 143 seconds. [ 3040.816652][ T31] Not tainted syzkaller #0 [ 3040.821757][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 3040.842310][ T31] task:syz.4.8189 state:D stack:25608 pid:5792 tgid:5792 ppid:29613 task_flags:0x440040 flags:0x00080002 [ 3040.856766][ T31] Call Trace: [ 3040.860105][ T31] [ 3040.864850][ T31] __schedule+0x1798/0x4cc0 [ 3040.870820][ T31] ? __pfx___schedule+0x10/0x10 [ 3040.878234][ T31] ? schedule+0x91/0x360 [ 3040.884581][ T31] schedule+0x165/0x360 [ 3040.888829][ T31] schedule_preempt_disabled+0x13/0x30 [ 3040.895616][ T31] rwsem_down_read_slowpath+0x5fd/0x8f0 [ 3040.907072][ T31] ? rwsem_down_read_slowpath+0x4b8/0x8f0 [ 3040.915883][ T31] ? __pfx_rwsem_down_read_slowpath+0x10/0x10 [ 3040.922032][ T31] ? page_cache_ra_order+0x3a2/0xe70 [ 3040.931152][ T31] down_read+0x98/0x2e0 [ 3040.937256][ T31] page_cache_ra_order+0x3a2/0xe70 [ 3040.942448][ T31] do_sync_mmap_readahead+0x25e/0x7a0 [ 3040.949898][ T31] ? __pfx_do_sync_mmap_readahead+0x10/0x10 [ 3040.956984][ T31] ? count_memcg_event_mm+0x1d/0x250 [ 3040.962333][ T31] ? count_memcg_event_mm+0x1d/0x250 [ 3040.977018][ T31] filemap_fault+0x6b9/0x12b0 [ 3040.981780][ T31] ? __pfx_filemap_fault+0x10/0x10 [ 3040.989367][ T31] ? kmem_cache_alloc_noprof+0x3b8/0x6e0 [ 3040.998283][ T31] ? __raw_spin_lock_init+0x45/0x100 [ 3041.008804][ T31] ? pte_alloc_one+0x1f9/0x310 [ 3041.017106][ T31] __do_fault+0x138/0x390 [ 3041.025363][ T31] __handle_mm_fault+0x1847/0x5400 [ 3041.032081][ T31] ? lock_vma_under_rcu+0x1a3/0x450 [ 3041.040911][ T31] ? __pfx___handle_mm_fault+0x10/0x10 [ 3041.049537][ T31] ? lock_vma_under_rcu+0x3d2/0x450 [ 3041.056503][ T31] ? __pfx_do_futex+0x10/0x10 [ 3041.061839][ T31] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 3041.069532][ T31] handle_mm_fault+0x40a/0x8e0 [ 3041.076007][ T31] do_user_addr_fault+0xa7c/0x1380 [ 3041.081180][ T31] ? rcu_is_watching+0x15/0xb0 [ 3041.087827][ T31] ? trace_page_fault_user+0x84/0x1e0 [ 3041.095787][ T31] exc_page_fault+0x82/0x100 [ 3041.106197][ T31] asm_exc_page_fault+0x26/0x30 [ 3041.115040][ T31] RIP: 0033:0x7fe4bd655543 [ 3041.121034][ T31] RSP: 002b:00007fe4bdb0fb50 EFLAGS: 00010246 [ 3041.130048][ T31] RAX: 0000200000000040 RBX: 0000000000000002 RCX: 0000000000000000 [ 3041.140723][ T31] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000555577c293c8 [ 3041.150410][ T31] RBP: 00007fe4bdb0fc58 R08: 0000000000000000 R09: 0000000000000000 [ 3041.161283][ T31] R10: 0000000000000000 R11: 0000000000000000 R12: 00007fe4bd9e5fac [ 3041.171360][ T31] R13: 00007fe4bd9e5fa0 R14: fffffffffffffffe R15: 00007fe4bdb0fca0 [ 3041.181605][ T31] [ 3041.186773][ T31] [ 3041.186773][ T31] Showing all locks held in the system: [ 3041.196890][ T31] 1 lock held by khungtaskd/31: [ 3041.201802][ T31] #0: ffffffff8df3d6e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 3041.219100][ T31] 2 locks held by getty/5587: [ 3041.225575][ T31] #0: ffff8880332cc0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 3041.239351][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 3041.251710][ T31] 2 locks held by syz.2.8136/5600: [ 3041.259481][ T31] 1 lock held by syz.4.8189/5792: [ 3041.266417][ T31] #0: ffff888022912bc8 (mapping.invalidate_lock){++++}-{4:4}, at: page_cache_ra_order+0x3a2/0xe70 [ 3041.279348][ T31] 1 lock held by syz.3.8202/5865: [ 3041.285841][ T31] #0: ffff888022912bc8 (mapping.invalidate_lock){++++}-{4:4}, at: page_cache_ra_order+0x3a2/0xe70 [ 3041.299559][ T31] 1 lock held by syz.9.8288/6221: [ 3041.309862][ T31] #0: ffff888022912a28 (&sb->s_type->i_mutex_key#8){++++}-{4:4}, at: blkdev_write_iter+0x50b/0x710 [ 3041.324723][ T31] 1 lock held by syz.6.8296/6260: [ 3041.331502][ T31] #0: ffff888022912bc8 (mapping.invalidate_lock){++++}-{4:4}, at: page_cache_ra_order+0x3a2/0xe70 [ 3041.346286][ T31] 1 lock held by syz.6.8296/6263: [ 3041.355187][ T31] #0: ffff888022912bc8 (mapping.invalidate_lock){++++}-{4:4}, at: page_cache_ra_order+0x3a2/0xe70 [ 3041.367793][ T31] [ 3041.370180][ T31] ============================================= [ 3041.370180][ T31] [ 3041.381610][ T31] NMI backtrace for cpu 1 [ 3041.381633][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 3041.381658][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 3041.381672][ T31] Call Trace: [ 3041.381681][ T31] [ 3041.381691][ T31] dump_stack_lvl+0x189/0x250 [ 3041.381730][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3041.381760][ T31] ? __pfx__printk+0x10/0x10 [ 3041.381797][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 3041.381826][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 3041.381879][ T31] ? __pfx__printk+0x10/0x10 [ 3041.381907][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 3041.381952][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 3041.381981][ T31] watchdog+0xf60/0xfa0 [ 3041.382009][ T31] ? watchdog+0x1e2/0xfa0 [ 3041.382038][ T31] kthread+0x711/0x8a0 [ 3041.382073][ T31] ? __pfx_watchdog+0x10/0x10 [ 3041.382094][ T31] ? __pfx_kthread+0x10/0x10 [ 3041.382125][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 3041.382155][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 3041.382185][ T31] ? __pfx_kthread+0x10/0x10 [ 3041.382216][ T31] ret_from_fork+0x4bc/0x870 [ 3041.382241][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 3041.382272][ T31] ? __switch_to_asm+0x39/0x70 [ 3041.382290][ T31] ? __switch_to_asm+0x33/0x70 [ 3041.382307][ T31] ? __pfx_kthread+0x10/0x10 [ 3041.382338][ T31] ret_from_fork_asm+0x1a/0x30 [ 3041.382376][ T31] [ 3041.382384][ T31] Sending NMI from CPU 1 to CPUs 0: [ 3041.567722][ C0] NMI backtrace for cpu 0 [ 3041.567757][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 3041.567778][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 3041.567790][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 3041.567823][ C0] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 93 91 21 00 f3 0f 1e fa fb f4 c8 e6 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 3041.567839][ C0] RSP: 0018:ffffffff8dc07d80 EFLAGS: 000002c6 [ 3041.567856][ C0] RAX: fc6469ee474ff200 RBX: ffffffff81967b47 RCX: fc6469ee474ff200 [ 3041.567871][ C0] RDX: 0000000000000001 RSI: ffffffff8d70e87c RDI: ffffffff8bbf08e0 [ 3041.567884][ C0] RBP: ffffffff8dc07ea8 R08: ffff8880b8832fdb R09: 1ffff110171065fb [ 3041.567898][ C0] R10: dffffc0000000000 R11: ffffed10171065fc R12: ffffffff8f7cf070 [ 3041.567912][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1b92a40 [ 3041.567924][ C0] FS: 0000000000000000(0000) GS:ffff888126139000(0000) knlGS:0000000000000000 [ 3041.567939][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 3041.567953][ C0] CR2: 00007ffcaf41cc14 CR3: 000000006184e000 CR4: 00000000003526f0 [ 3041.567969][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 3041.567980][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 3041.567992][ C0] Call Trace: [ 3041.568000][ C0] [ 3041.568007][ C0] default_idle+0x13/0x20 [ 3041.568026][ C0] default_idle_call+0x73/0xb0 [ 3041.568045][ C0] do_idle+0x1e7/0x510 [ 3041.568066][ C0] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 3041.568086][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 3041.568113][ C0] ? __pfx_do_idle+0x10/0x10 [ 3041.568137][ C0] ? do_idle+0x5/0x510 [ 3041.568156][ C0] cpu_startup_entry+0x44/0x60 [ 3041.568176][ C0] rest_init+0x2de/0x300 [ 3041.568205][ C0] start_kernel+0x3ae/0x410 [ 3041.568229][ C0] x86_64_start_reservations+0x24/0x30 [ 3041.568258][ C0] x86_64_start_kernel+0x143/0x1c0 [ 3041.568285][ C0] common_startup_64+0x13e/0x147 [ 3041.568320][ C0] [ 3043.535667][ T5921] Bluetooth: hci7: command 0x0406 tx timeout