last executing test programs: 27m27.817169712s ago: executing program 4 (id=3106): syz_emit_ethernet(0x46, &(0x7f0000000140)={@multicast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c6dd00", 0x10, 0x3a, 0xff, @remote={0xfe, 0xe0}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x3, 0x401, 0x63, 0x8}}}}}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELCHAIN={0x174, 0x5, 0xa, 0x0, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_CHAIN_COUNTERS={0x64, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xffff}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1ff}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xf}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x3}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x6}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7a}]}, @NFTA_CHAIN_HOOK={0x5c, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'wlan1\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'netdevsim0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'dvmrp1\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_CHAIN_HOOK={0x70, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'geneve0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2524c65e}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5862632a}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth0_to_team\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth0_to_bridge\x00'}]}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffc}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}]}, @NFT_MSG_DELOBJ={0x48, 0x14, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_OBJ_USERDATA={0x15, 0x8, "cdd1f1a4a7140e630609a088c9abc5b9c0"}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x8}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x1e4}, 0x1, 0x0, 0x0, 0x80}, 0x1) 27m27.218035527s ago: executing program 4 (id=3156): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x1, 0x70bd25, 0x25dfdbfa, {0x0, 0x0, 0x0, r1, 0x8000, 0x1b223}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x200448e0}, 0x4000) 27m27.001454519s ago: executing program 4 (id=3158): r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) recvmmsg(r0, &(0x7f0000004140)=[{{&(0x7f0000000180)=@sco={0x1f, @none}, 0x80, &(0x7f00000003c0)=[{&(0x7f00000000c0)=""/31, 0x1f}, {&(0x7f0000000240)=""/107, 0x6b}, {&(0x7f00000002c0)=""/176, 0xb0}, {&(0x7f0000000380)=""/22, 0x16}], 0x4, &(0x7f0000000400)}, 0xd}, {{&(0x7f0000000440)=@pptp={0x18, 0x2, {0x0, @local}}, 0x80, &(0x7f00000004c0), 0x0, &(0x7f0000000500)=""/137, 0x89}, 0x8}, {{&(0x7f00000005c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000640)=""/125, 0x7d}, {&(0x7f00000006c0)=""/71, 0x47}], 0x2, &(0x7f0000000780)=""/172, 0xac}, 0x8001}, {{&(0x7f0000000840)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x80, &(0x7f0000001980)=[{&(0x7f00000008c0)=""/58, 0x3a}, {&(0x7f0000000900)=""/4096, 0x1000}, {&(0x7f0000001900)=""/84, 0x54}], 0x3, &(0x7f00000019c0)=""/156, 0x9c}, 0x9}, {{&(0x7f0000001a80)=@nl, 0x80, &(0x7f0000003e80)=[{&(0x7f0000001b00)=""/16, 0x10}, {&(0x7f0000001b40)=""/92, 0x5c}, {&(0x7f0000001bc0)=""/86, 0x56}, {&(0x7f0000001c40)=""/64, 0x40}, {&(0x7f0000001c80)=""/182, 0xb6}, {&(0x7f0000001d40)=""/4096, 0x1000}, {&(0x7f0000002d40)=""/99, 0x63}, {&(0x7f0000002dc0)=""/4096, 0x1000}, {&(0x7f0000003dc0)=""/154, 0x9a}], 0x9, &(0x7f0000003f00)=""/177, 0xb1}, 0x4}], 0x5, 0x20, &(0x7f0000004200)) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace5ffb2e9fc603dd282100000002ff02000000000000000000000000000104004e20004db0"], 0x0) 27m26.001958236s ago: executing program 4 (id=3162): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000180)={0x1, 0x0, [{0x486, 0x0, 0x40}]}) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000240), 0x0, 0x4) ioctl$SCSI_IOCTL_SEND_COMMAND(r5, 0x1, &(0x7f0000000340)=ANY=[@ANYBLOB="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"]) connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @multicast2}, 0x3, 0x0, 0x4}}, 0x2e) connect$pppl2tp(r0, &(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0xe4, r4, 0x4e04, 0x0, 0x0, 0x0, {0xa, 0x4e22, 0xa, @private2={0xfc, 0x2, '\x00', 0x1}, 0x77f}}}, 0x32) r6 = socket(0x10, 0x3, 0x0) write(r6, &(0x7f0000000200)="240000001a005f0400f9f4070009040180202000000000000000000008000f0000000000", 0x24) r7 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r8, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r9 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r9, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0/../file0\x00') syz_emit_ethernet(0x5e, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd6000400000280600fe880000000000000000000000000001fe8000000000000000000000000000aa4e240000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="a0000000907800001312d4c466b340e28b05c93a07252823071800002d61b05ed16a2037"], 0x0) r10 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="871000000000000000000100000008000300000001000500060000000000050005"], 0x30}, 0x1, 0x0, 0x0, 0x94}, 0x8808) sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="08002bbd7000fbdbdf2501000000080700000200000016000400fbffffff7d0000674b0bddccf586400007000000"], 0x34}, 0x1, 0x0, 0x0, 0x40885}, 0x20000040) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) r11 = socket(0x200000000000011, 0x2, 0xd) r12 = socket(0x200000000000011, 0x2, 0x0) syz_emit_ethernet(0x122, &(0x7f0000000480)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}, @val={@val={0x88a8, 0x7, 0x0, 0x4}, {0x8100, 0x6, 0x1}}, {@ipv4={0x800, @udp={{0x37, 0x4, 0x0, 0x4, 0x10c, 0x65, 0x0, 0x2c, 0x11, 0x0, @remote, @loopback, {[@ssrr={0x89, 0x7, 0xc4, [@loopback]}, @timestamp_prespec={0x44, 0x34, 0x1e, 0x3, 0x0, [{@empty, 0x14}, {@remote, 0x400}, {@local, 0x2}, {@loopback, 0x4}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}, {@empty, 0x400}]}, @noop, @timestamp_addr={0x44, 0x2c, 0xec, 0x1, 0x5, [{@local, 0x37}, {@multicast2, 0xe8}, {@remote, 0x3}, {@local, 0xb}, {@loopback, 0x3ff}]}, @cipso={0x86, 0x1e, 0xffffffffffffffff, [{0x1, 0x2}, {0x2, 0x4, "c816"}, {0x7, 0xc, "5daa48c63505182409bf"}, {0x1, 0x6, "514116cc"}]}, @cipso={0x86, 0x1b, 0xffffffffffffffff, [{0x7, 0xa, "2c23ea0e97e3442c"}, {0x2, 0xb, "81d949286eea2e55b0"}]}, @timestamp_addr={0x44, 0x24, 0x79, 0x1, 0x7, [{@multicast2, 0x7}, {@dev={0xac, 0x14, 0x14, 0x3e}}, {@dev={0xac, 0x14, 0x14, 0x42}, 0x8}, {@multicast2, 0x4800}]}]}}, {0x4e23, 0x4e24, 0x30, 0x0, @gue={{0x1, 0x0, 0x1, 0x2, 0x100, @void}, "b73c6d41afeaf73f8fa6c19bad7a1571dbbdb9bee6b6f3f7a6655caa8ec0282cf2697896"}}}}}}, &(0x7f00000005c0)={0x1, 0x88, [0xd84, 0x830, 0xf5b, 0xa7a]}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'bond0\x00', 0x0}) bind$packet(r12, &(0x7f0000000080)={0x11, 0x800, r13, 0x1, 0x0, 0x6, @random="518440db9de1"}, 0x14) bind$packet(r11, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) 27m25.561955395s ago: executing program 4 (id=3163): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000010c0)={0x9, &(0x7f0000001040)=[{0x10, 0x44, 0x7, 0x8}, {0xfff, 0x6, 0xe, 0x200}, {0x6, 0xc, 0x81, 0xce8d}, {0x6, 0xf, 0x2, 0x1}, {0xf, 0x4, 0x8, 0xf}, {0x8, 0x7, 0x2, 0x7}, {0x401, 0x17, 0x6, 0x6}, {0xa, 0x5, 0xe, 0x7}, {0x9, 0x7, 0x0, 0x9}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000001100)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000001180)={r3, 0x1, r0, 0x1}) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000000)={0x3, {{0x2, 0x0, @multicast2}}}, 0x88) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_buf(r1, 0x0, 0x30, &(0x7f0000000000)=""/4091, &(0x7f0000001000)=0xffb) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000c00)={0x20, r4, 0x1, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x20008040) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000010c0)={0x9, &(0x7f0000001040)=[{0x10, 0x44, 0x7, 0x8}, {0xfff, 0x6, 0xe, 0x200}, {0x6, 0xc, 0x81, 0xce8d}, {0x6, 0xf, 0x2, 0x1}, {0xf, 0x4, 0x8, 0xf}, {0x8, 0x7, 0x2, 0x7}, {0x401, 0x17, 0x6, 0x6}, {0xa, 0x5, 0xe, 0x7}, {0x9, 0x7, 0x0, 0x9}]}) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000001100)) (async) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000001180)={r3, 0x1, r0, 0x1}) (async) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000000)={0x3, {{0x2, 0x0, @multicast2}}}, 0x88) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) getsockopt$inet_buf(r1, 0x0, 0x30, &(0x7f0000000000)=""/4091, &(0x7f0000001000)=0xffb) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000c00)={0x20, r4, 0x1, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x20008040) (async) 27m25.315952722s ago: executing program 4 (id=3164): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x83, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000000)='source', &(0x7f00000000c0)='%(,:', 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f0000000000)={0x8001, 0x5, 0xde, 0xffff}, 0x8) sendto$inet6(r4, &(0x7f00000001c0)="ad", 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f0000000680), 0x4) shutdown(r4, 0x1) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}, 0x1c) r8 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r8, 0x0, 0x8081) r9 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r9, 0x6, 0x13, &(0x7f0000000140), 0x4) ioctl$KVM_SET_CPUID(r7, 0x4008ae8a, &(0x7f0000000000)=ANY=[@ANYBLOB]) splice(r0, &(0x7f00000002c0)=0xff, r2, 0x0, 0x8b, 0x0) r10 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet6_buf(r10, 0x29, 0x0, &(0x7f00000001c0)="5e69e0c56e6221c26a5d571e2bab386f1ef52ded3dbd20975bfa8475538a769552907d49bba39e0a9d4e9dd165ae013c083974b18247c281a32d5d907a8328655909e0048de763272c912fff251eebe51aaf9bcf5807c74761b27b94b7e47e001cfdeac01a71bff14289e9405ad459a6933dcded8e929f4b8ff5cd993d40275715a9049f2e6e3b456c531ecf38e8e4179020b4a045814f533b7c17fc700beeba130df8624cd18fb6639267292c8e47f9cd7a674ef211f41e9fde9f074ec5f8688eb008976265ec9519ba18bdf3e94e34bc9d699a22714a96757ee019dfe313ebdb4d255a3b7f243545", 0xe9) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r10, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r10, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x2a000}], 0x1, 0x0, 0x0, 0x804c040}, 0x0) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r10, 0x84, 0x21, &(0x7f0000000000)=0x4, 0x4) 27m24.820351047s ago: executing program 32 (id=3164): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x83, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000000)='source', &(0x7f00000000c0)='%(,:', 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f0000000000)={0x8001, 0x5, 0xde, 0xffff}, 0x8) sendto$inet6(r4, &(0x7f00000001c0)="ad", 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f0000000680), 0x4) shutdown(r4, 0x1) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}, 0x1c) r8 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r8, 0x0, 0x8081) r9 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r9, 0x6, 0x13, &(0x7f0000000140), 0x4) ioctl$KVM_SET_CPUID(r7, 0x4008ae8a, &(0x7f0000000000)=ANY=[@ANYBLOB]) splice(r0, &(0x7f00000002c0)=0xff, r2, 0x0, 0x8b, 0x0) r10 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet6_buf(r10, 0x29, 0x0, &(0x7f00000001c0)="5e69e0c56e6221c26a5d571e2bab386f1ef52ded3dbd20975bfa8475538a769552907d49bba39e0a9d4e9dd165ae013c083974b18247c281a32d5d907a8328655909e0048de763272c912fff251eebe51aaf9bcf5807c74761b27b94b7e47e001cfdeac01a71bff14289e9405ad459a6933dcded8e929f4b8ff5cd993d40275715a9049f2e6e3b456c531ecf38e8e4179020b4a045814f533b7c17fc700beeba130df8624cd18fb6639267292c8e47f9cd7a674ef211f41e9fde9f074ec5f8688eb008976265ec9519ba18bdf3e94e34bc9d699a22714a96757ee019dfe313ebdb4d255a3b7f243545", 0xe9) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r10, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r10, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x2a000}], 0x1, 0x0, 0x0, 0x804c040}, 0x0) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r10, 0x84, 0x21, &(0x7f0000000000)=0x4, 0x4) 18m46.790102891s ago: executing program 0 (id=5350): unshare(0x20000400) (async) syz_open_dev$loop(0x0, 0xdf6, 0x0) (async) syz_open_dev$usbfs(0x0, 0x76, 0x101301) (async, rerun: 64) r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000000010d804dd000000000000010902240001000000e9090400000103000000092105000001220500090581030002"], 0x0) (rerun: 64) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000280)="10b1") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5b5d}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VTI_REMOTE={0x8, 0x5, @rand_addr=0x64010100}, @vti_common_policy]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x58840}, 0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r2, 0x8982, 0x0) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) (async) syz_emit_ethernet(0x4e, &(0x7f0000000480)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd64fde9e200180000fc0100000000000000000000000000000000000000000000000000000000fc01e7ffffffffffffff00000000000100"/78], 0x0) (async) syz_usb_connect(0x0, 0x5a, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000ec13b2106d04f308280b0102030109024800010000000009046900000e"], 0x0) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, 0x0, 0x0) (async) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000440)={0x1, @pix_mp={0x62, 0x1, 0x3031334d, 0x3, 0xa, [{0x3, 0x6}, {0x2, 0x2}, {0x3, 0x411}, {0x10001, 0x8}, {0x6, 0x8}, {0x4, 0xd}, {0x8, 0xfffffff8}, {0x5, 0x1}], 0xc, 0x2, 0x1, 0x0, 0x2}}) close(0xffffffffffffffff) (async) r6 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r6, 0xc0405602, &(0x7f0000000040)={0x0, 0x2, 0x0, "e5e81571c97b166978ff61fcfd2409b2b73e0f936ed774de107de8a9041b5113"}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r7, 0x8983, &(0x7f0000000540)={0x0, 'veth0_to_hsr\x00', {0x3}, 0x7}) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 18m45.861990993s ago: executing program 0 (id=5353): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[], 0x1e0}, 0x1, 0x0, 0x0, 0x1}, 0x4000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001000010025bd706086dbdf2500000000", @ANYRES32=0x0, @ANYBLOB="158804000300040008001b000000000008000d"], 0x30}, 0x1, 0x0, 0x0, 0x46801}, 0x4000000) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) sendmsg$RDMA_NLDEV_CMD_RES_GET(r2, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000000914100027bd7000fcdbdf5af22cdf00020000100800010001000300000001ea0200000a08000100020000000800010000000000"], 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x28040800) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000300)={0x42, 0x3}, 0x10) r4 = openat$cgroup_ro(r2, &(0x7f00000002c0)='cpuacct.stat\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x4c, &(0x7f0000000000), 0x4) shutdown(r5, 0x0) r7 = openat$uinput(0xffffff9c, &(0x7f0000000180), 0x802, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, 0x0, 0x60044090) r9 = socket(0x10, 0x2, 0xfffff801) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x16c, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r11, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@TCA_STAB={0x148, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0x8, 0x3, 0x80000000, 0x1, 0x400, 0x9, 0x4}}, {0xc, 0x2, [0x6, 0x6, 0x7, 0x80]}}, {{0x1c, 0x1, {0x9, 0x7, 0x2, 0x7fff, 0x1, 0x3af, 0x4, 0x2}}, {0x8, 0x2, [0x7, 0x3]}}, {{0x1c, 0x1, {0x80, 0x8, 0x3, 0x1, 0x2, 0x40, 0x9984, 0x1}}, {0x6, 0x2, [0x0]}}, {{0x1c, 0x1, {0x8, 0x4, 0xfffb, 0xc21, 0x2, 0x0, 0xc00000, 0x3}}, {0xa, 0x2, [0x46ef, 0x800, 0x0]}}, {{0x1c, 0x1, {0x4, 0x8, 0x2, 0x0, 0x0, 0x1000, 0x1, 0x4}}, {0xc, 0x2, [0x4, 0x765, 0x4, 0xc]}}, {{0x1c, 0x1, {0x2, 0xd, 0xd, 0x3ff, 0x2, 0x3ff, 0x7fffffff, 0x7}}, {0x12, 0x2, [0x1, 0x4, 0x9, 0x0, 0x5, 0x3, 0x631]}}, {{0x1c, 0x1, {0x1, 0xf, 0x3, 0xb, 0x2, 0x1, 0x2, 0x6}}, {0x10, 0x2, [0x3, 0x5, 0x6, 0x8, 0x2, 0x1]}}, {{0x1c, 0x1, {0x0, 0x2, 0x6, 0x3, 0x1, 0x7, 0x4, 0x3}}, {0xa, 0x2, [0x9, 0x8000, 0x7]}}]}]}, 0x16c}}, 0x44080) sendmsg$nl_route_sched(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x20, 0x70bd25, 0x0, {0x60, 0x0, 0x0, r11, {}, {0x0, 0xa}, {0xfff1, 0x10}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_QUANTUM={0x8, 0x2, 0xf2}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x55}, 0x4000) ioctl$UI_DEV_SETUP(r7, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_SET_ABSBIT(r7, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r7, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r7, 0x5501) ioctl$UI_DEV_DESTROY(r7, 0x5502) r12 = syz_open_dev$audion(&(0x7f0000000040), 0x200, 0x2000) r13 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/kernel/kexec_crash_size', 0xc1200, 0x3a) ioctl$sock_kcm_SIOCKCMATTACH(r12, 0x89e0, &(0x7f00000000c0)={r4, r13}) write$cgroup_int(r4, &(0x7f0000000000), 0xffffff6a) 18m44.937275377s ago: executing program 0 (id=5359): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000600)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x8}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0xc0d1}, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f0000000140)={0x8}, 0x1) sendto$inet6(r1, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r1, 0x1) 18m44.744343004s ago: executing program 0 (id=5360): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = fsopen(&(0x7f00000003c0)='sysfs\x00', 0x0) fremovexattr(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="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"]) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000780)=ANY=[], 0x148}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803001d000b63d25a80648c2594f90124fc60100c030002000000053582c137153e370248078000f01700d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x4000}, 0x3500000000000000) add_key(&(0x7f0000000140)='encrypted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) r6 = userfaultfd(0x80001) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r6, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) openat$vcs(0xffffff9c, &(0x7f00000001c0), 0x46201, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0) timer_create(0xfffffffd, 0x0, &(0x7f0000000040)) r7 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000700), 0x101, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r7, 0xc0040d07, &(0x7f0000000040)=0x121) r8 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') lseek(r8, 0x4, 0x1) getdents64(r8, 0xffffffffffffffff, 0x43) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x14, 0x0, &(0x7f0000000100)=0x4) 18m43.839459133s ago: executing program 0 (id=5361): syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb80393884f01a506, 0x4008032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) ioctl$UFFDIO_MOVE(r0, 0xc028aa05, &(0x7f0000000080)={&(0x7f0000db1000/0x1000)=nil, &(0x7f0000631000/0x2000)=nil, 0x1000}) 18m43.452859138s ago: executing program 0 (id=5365): connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x20040, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000300)={&(0x7f00000001c0)=[0x0], 0x1}) io_uring_enter(0xffffffffffffffff, 0x1, 0xffffffff, 0x1, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000003c0)={r3, 0x0, 0x0, 0x0, 0x0, 0x45, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0086426, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{}, {}, {}]}) connect$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @mcast2, 0x5}, 0x1c) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) write$UHID_INPUT(r6, &(0x7f0000001080)={0xf, {"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", 0x1000}}, 0x1006) sendmmsg$inet6(r4, &(0x7f0000003bc0)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}, 0x1c, &(0x7f0000000880)=[{&(0x7f0000000140)}, {&(0x7f0000000400)="66380aca3ab76e237a136ad78759048469bb59f2fa2ec3ff05a500cc711ecd1f5ef692116a800e7cb79e940731ef5cf1609b4348a068263adcab54a3c0dd59463520128669a334b1ae7a992f3e71429604d5543af6aad1d60e8b61906fed21053cc7242c021e826ba9ce89df4e78dfab8de60aedf7c9d280b917d1e534e41ff38e103a9626cf9b2bf1d9cd0ca4f0cccb", 0x90}, {&(0x7f0000000240)="5ab4509172326d04edb0207534f997ab421157a77b74437a14c351dcb86dba249c8c6c704da0ef214fd6ed124f", 0x2d}, {&(0x7f00000002c0)}, {&(0x7f0000000580)}, {0x0}, {&(0x7f0000000680)="6387b6ff919c76786e7869de6ae431b7c12bcd47784b70f3a5881cb1779309547cca0bf89fe26596", 0x28}, {&(0x7f00000006c0)="de8be3f8e375552c302507568aff90588e716c86781ef234e03c251c1a837c2e902d481db263799eca7e92233e28185e7bdf5e3e696e3fc728adf9945bd0dcf7c12405c60380fa84ddbff8b467b933f56033f192128a33412f51a647f93b2f98c5946fe9f0f24da7432c059d1acb97f97a385fd04b8e384e7a27c4236949fddd52dfa69782408e", 0x87}, {&(0x7f0000000780)="5bfd41d290d92dd48ca8ceae67d1540c0adde438b279c1a3c1357de9e88cf6260fd396f264c513008a4adb1ff02723a477cea1aff7324eb8dc0fcf3619bb48f1ab4693f5e902896c12b3c082cc380de9b7cc5b665175d8af448c62680523e3c4297fbd98fd57b5998b5640603fc9430f1a40e2781115915dd6eaa9af5ffbf9c00e2f6e91b42276", 0x87}], 0x9, &(0x7f0000000900)}}, {{&(0x7f0000000940)={0xa, 0x4e22, 0x2, @dev={0xfe, 0x80, '\x00', 0x2c}, 0x4}, 0x1c, &(0x7f0000000c40)=[{&(0x7f0000000980)="7e0d783387b54770b2b8d55cf1459787517d712a7f528f6b4385dbf4a2aa2cee1f0fe375c810f8e61f6b4255feb6978258897fdd6a484d986e11647512e29510bc3f05e4c0be968e9982bcaa960794dc2322e0beaefb962e095b5ace26b12850303b45", 0x63}, {&(0x7f0000000a00)="a1047661558d3672e34b32b137c9ae3afc045c402189832193d38c284547e3dfc5b718e9945133261237d4727e4c858e8b24762ed49ddd6d245771ad8d03a2c2b4db06c33055c8b0e94ec5199b2f1cc79fa0d599e06fbee5d23c30f7bc27d44e3527313b27f82600bd3b9ad02198d022907400c9068ac1eb376fae5d06ac87698ef178336083ef5faac4e2dd10036500e4e431cf58f9b07467", 0x99}, {&(0x7f0000000ac0)}, {&(0x7f0000000b40)="f8530739cf560e03e7454a08acd9e90daff3dd0fb473c7148b3886589d72ced8030a243b9d4438583d8f1c0260b4bda71e769f736cae89fa9cfcdb3a48a4d8b8a3346f70244d36db4b411ffc7dc0d9dc533ea3d3f6286d481df420f88cc53e471976f0d795e8f7387ce5f6966e3c77501a2542d8c309b50159767abfd2a6eac0bd92675866ca004ab5110311e13722d1d7b3b03a20e7312fbd8d753e3b8b05e86a745a6eac884ce7a3816ec49af14c0de06170847459ee82c7a1913f21271c0b8d718ae64a3a", 0xc6}], 0x4}}, {{&(0x7f0000000c80)={0xa, 0x4e21, 0x59132a5d, @mcast2, 0x38dc}, 0x1c, &(0x7f0000000e40)}}, {{0x0, 0x0, &(0x7f00000034c0)=[{&(0x7f0000000ec0)="99c63438b2d3f1fa909dd67eb6f8285ea42e2bbef19fe9dcf724634d2d3b0d5223fde0a125ddfabf00bba0b15866244ec29763057f02400920683c77cc6d31a1dafd63c6bef172b601fbcc5797c59f9a91f45fe5e946dcbc963f2d90be9003a975dbe717c2df7d3f91dc00ed4d44abbf9dcf0da4b6e5f17ff8181349bb0339", 0x7f}, {&(0x7f0000000f40)="b6bf7adf76fcffd60c8ee53ca623d172d9ddfe4b80e455f222b2ac5e49c3110fb049070ae4475e58098abb30d6e87d6181a7cdaca6fc37259decb4a6568ee113225805d5406fc94e848f69148d8fa125455a589972afcb1881875531a81ca7d4fc175e8933b56d2c3d364f225af49ff28d3909a1872157f6ff3967c30ba3b902caf0c4302de6e5519b10902a7951776f25c0baf34f22e47b50dd45d0628fbf5c9a8649b15c3662f29c1d29e35979eddc36a34b9b3904a863b05fdbf1f73701e40133a15ccfaf5d3a69eb728a0162c7d9f9464af7d7661c8749a0f674ab8c27bc975feeef6325dbc8b7d3fa", 0xeb}, {&(0x7f0000001040)="17af4946921f8bae2a81", 0xa}, {&(0x7f00000030c0)="e9afbe548479bb7766a8196ece9b2a0ace71be8ad9fdb60fe1f09dc281a185cc66e97616d93765e76accc18689c90316aff866c9b0370b2c677024e3517eb7b38f788a7e412699845b66f6a61a3c968813a80260910eaa3d9c4f7dd1dbd7c2d980f41e1796ebc5e34f9901c1408a53c695846cd430e5c6c798ba29bf0cdab16de77478d202da7bd21f", 0x89}, {&(0x7f0000003180)="8d7931c31c3eafa67c252a70aea04150d86d1904e300d4f4a2273ea0d925a42b5fa2", 0x22}, {&(0x7f00000031c0)="7482db609a855fd2773099b46e88c2fb4f9bb258c969d7f5cbb434fdda6c8c3a5d260a9b28fc12ab193cf16804f20600991fd24fba537a88fed8cb5a4a3f16e50f08a2d2ea824730f5aa09464dbf3c0690a5fbd0214cb53d56c482dbdfa220e6dc003d040732377c7b4cb3b70bae483588213b17c1c6cf5f5db5f4fc27975d80168d7379f2961029a82e769c08685d7227fd3d54839d1c406333a6929d6fb0b2a9", 0xa1}, {&(0x7f0000003340)="18f888ddfcb5228056992673df16498e9271de6204de0179827353b2", 0x1c}, {&(0x7f0000003380)="33ae63d35826bd4ec0dbd0c5df6b58d0c57a151efcaec072eec19527b792de1e3586270341f2a1b91eab0c3ab7de7f4dd35e542935534279f518ec99b16b6005934e617dc270ab55c9fd3ae798f8d57823a0fd5d3c", 0x55}, {&(0x7f0000003440)="b99b4fa3ef1e5baa0a3ad7c0506949ba90c6558a7edc5b82de425ff4de0a38fa88802feeb07360223e2a8200b995096ff488d1c2a4c91c150ef49dc364e31d3a6cf96eb4aae0a6668c174b0bce234e4ca284ecb97c798b00f1ac93", 0x5b}], 0x9}}, {{&(0x7f00000035c0)={0xa, 0x4e23, 0x1, @remote, 0x9}, 0x1c, &(0x7f00000038c0)=[{&(0x7f0000003600)="92946e66b7ad21864afcf3b7ac93a1fc1af0c3994b9113aac9a2cba10dc68522e2e42455de30cecf0dda21a0128c7dbb8bd58165a506e86fce97ef693c76d315a39ada2d60ef034ac22ded73e96892a40bc80b11786919a3c92eb47c6f33aa02f59a42bfb6945444287cea3c2cbb86380685dd0bd174cbe8c393a782de36ad38c10dcb2e895df2a7fb", 0x89}, {&(0x7f00000036c0)="163b3ac1273d44a7e872c4c8bfe9c330fe84d9bebe4cfc1d3b9f0b929024e20d0d2fbd90111b80a448680c6d1b8de2e2014686bef8f8d2182edf0d747cb6ab6116bbcaf40f176ed91c10d53ded0f99e28fb767ffe4252240fdec77e92090272fa47d684e0a708d3c1a8a043c9de8d3dd01bb8f432ed8a66eb7ad018fd1d5e21ac8005be26453693c20e580804aefe125d94c173866cfd448bb69bf4581a6a5dbdf394d452cbb6e042257668fc4e16017d072e0aa58d84a3097e007b283d791ffe54b64b0697f91964cbdb892267dda9ec5becf386a83dc8e85876581f5bf55fb03e84ec6ce23256df18c7fb094078e04", 0xf0}, {&(0x7f00000037c0)="ae007d4f", 0x4}, {&(0x7f0000003800)="b9c1dd980fe83e95b9596d86b147274b39a8e84ec1467498e78eaef1a2038b1d49679f8c81631c1db32a075636278cc1", 0x30}, {&(0x7f0000003880)="ccd07e0baa985bcc4973a08ba9622a65c9b6fd5b6b429921bce79855db7d0c12bfb256efe9c13cb9da2bca9063c7cf401e", 0x31}], 0x5, &(0x7f0000003900)=[@hoplimit={{0x10, 0x29, 0x34, 0x2}}, @hoplimit_2292={{0x10}}, @rthdr_2292={{0x64, 0x29, 0x39, {0x2f, 0xa, 0x1, 0x9, 0x0, [@remote, @empty, @private1, @mcast1, @mcast2]}}}, @rthdrdstopts={{0xcc, 0x29, 0x37, {0x0, 0x16, '\x00', [@padn={0x1, 0x2, [0x0, 0x0]}, @ra={0x5, 0x2, 0x8}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @generic={0x40, 0x9c, "5fa90693823c1086d969b46cd40b953b887be8ed0bdaa3a79c1ea8f09307f9c3ab3cfd24d44c66e9611bfab7ffd2fc36b565c4977ee4abdde804062a2c3cd2d76d8d3fb8d8d0a0a6115e6eed927e13cbeadda96af72b0d177bfa9b7170047c10f09f46e1df1851c843ebcbe4f8d1b343c165e1bfac2478c7433d6f1f85c2ce04ec307242edd78a97474e67608fc0c67d0252c1f1b38c18d956ecde64"}, @ra={0x5, 0x2, 0x5}, @enc_lim={0x4, 0x1, 0x8}]}}}, @dstopts_2292={{0xdc, 0x29, 0x4, {0x84, 0x18, '\x00', [@pad1, @ra={0x5, 0x2, 0x8efc}, @calipso={0x7, 0x30, {0x2, 0xa, 0x4, 0x9, [0x3, 0xf56, 0x100000000, 0x9, 0x8]}}, @generic={0x8, 0x7f, "7c23a5944231418e76b873526536b320e16ed3488013dc4997e34af3ebe40e155ca52bac385d1c49d41e956fdad92deda21840ca4d22ab16884677813bc49fd9cb5ec0d5b6d331b14e12847949951ebaef478c41711da96aac216f8a06bbc25a3def83fe0dd4d388f4d82c9213ff6f9f4a9a72b0f9fb2d52920a9fa01f7182"}, @ra={0x5, 0x2, 0x200}, @pad1, @pad1]}}}], 0x22c}}], 0x5, 0x4001c00) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_NMI(r8, 0xae9a) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 18m28.392170719s ago: executing program 33 (id=5365): connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x20040, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000300)={&(0x7f00000001c0)=[0x0], 0x1}) io_uring_enter(0xffffffffffffffff, 0x1, 0xffffffff, 0x1, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000003c0)={r3, 0x0, 0x0, 0x0, 0x0, 0x45, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0086426, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{}, {}, {}]}) connect$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @mcast2, 0x5}, 0x1c) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) write$UHID_INPUT(r6, &(0x7f0000001080)={0xf, {"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", 0x1000}}, 0x1006) sendmmsg$inet6(r4, &(0x7f0000003bc0)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}, 0x1c, &(0x7f0000000880)=[{&(0x7f0000000140)}, {&(0x7f0000000400)="66380aca3ab76e237a136ad78759048469bb59f2fa2ec3ff05a500cc711ecd1f5ef692116a800e7cb79e940731ef5cf1609b4348a068263adcab54a3c0dd59463520128669a334b1ae7a992f3e71429604d5543af6aad1d60e8b61906fed21053cc7242c021e826ba9ce89df4e78dfab8de60aedf7c9d280b917d1e534e41ff38e103a9626cf9b2bf1d9cd0ca4f0cccb", 0x90}, {&(0x7f0000000240)="5ab4509172326d04edb0207534f997ab421157a77b74437a14c351dcb86dba249c8c6c704da0ef214fd6ed124f", 0x2d}, {&(0x7f00000002c0)}, {&(0x7f0000000580)}, {0x0}, {&(0x7f0000000680)="6387b6ff919c76786e7869de6ae431b7c12bcd47784b70f3a5881cb1779309547cca0bf89fe26596", 0x28}, {&(0x7f00000006c0)="de8be3f8e375552c302507568aff90588e716c86781ef234e03c251c1a837c2e902d481db263799eca7e92233e28185e7bdf5e3e696e3fc728adf9945bd0dcf7c12405c60380fa84ddbff8b467b933f56033f192128a33412f51a647f93b2f98c5946fe9f0f24da7432c059d1acb97f97a385fd04b8e384e7a27c4236949fddd52dfa69782408e", 0x87}, {&(0x7f0000000780)="5bfd41d290d92dd48ca8ceae67d1540c0adde438b279c1a3c1357de9e88cf6260fd396f264c513008a4adb1ff02723a477cea1aff7324eb8dc0fcf3619bb48f1ab4693f5e902896c12b3c082cc380de9b7cc5b665175d8af448c62680523e3c4297fbd98fd57b5998b5640603fc9430f1a40e2781115915dd6eaa9af5ffbf9c00e2f6e91b42276", 0x87}], 0x9, &(0x7f0000000900)}}, {{&(0x7f0000000940)={0xa, 0x4e22, 0x2, @dev={0xfe, 0x80, '\x00', 0x2c}, 0x4}, 0x1c, &(0x7f0000000c40)=[{&(0x7f0000000980)="7e0d783387b54770b2b8d55cf1459787517d712a7f528f6b4385dbf4a2aa2cee1f0fe375c810f8e61f6b4255feb6978258897fdd6a484d986e11647512e29510bc3f05e4c0be968e9982bcaa960794dc2322e0beaefb962e095b5ace26b12850303b45", 0x63}, {&(0x7f0000000a00)="a1047661558d3672e34b32b137c9ae3afc045c402189832193d38c284547e3dfc5b718e9945133261237d4727e4c858e8b24762ed49ddd6d245771ad8d03a2c2b4db06c33055c8b0e94ec5199b2f1cc79fa0d599e06fbee5d23c30f7bc27d44e3527313b27f82600bd3b9ad02198d022907400c9068ac1eb376fae5d06ac87698ef178336083ef5faac4e2dd10036500e4e431cf58f9b07467", 0x99}, {&(0x7f0000000ac0)}, {&(0x7f0000000b40)="f8530739cf560e03e7454a08acd9e90daff3dd0fb473c7148b3886589d72ced8030a243b9d4438583d8f1c0260b4bda71e769f736cae89fa9cfcdb3a48a4d8b8a3346f70244d36db4b411ffc7dc0d9dc533ea3d3f6286d481df420f88cc53e471976f0d795e8f7387ce5f6966e3c77501a2542d8c309b50159767abfd2a6eac0bd92675866ca004ab5110311e13722d1d7b3b03a20e7312fbd8d753e3b8b05e86a745a6eac884ce7a3816ec49af14c0de06170847459ee82c7a1913f21271c0b8d718ae64a3a", 0xc6}], 0x4}}, {{&(0x7f0000000c80)={0xa, 0x4e21, 0x59132a5d, @mcast2, 0x38dc}, 0x1c, &(0x7f0000000e40)}}, {{0x0, 0x0, &(0x7f00000034c0)=[{&(0x7f0000000ec0)="99c63438b2d3f1fa909dd67eb6f8285ea42e2bbef19fe9dcf724634d2d3b0d5223fde0a125ddfabf00bba0b15866244ec29763057f02400920683c77cc6d31a1dafd63c6bef172b601fbcc5797c59f9a91f45fe5e946dcbc963f2d90be9003a975dbe717c2df7d3f91dc00ed4d44abbf9dcf0da4b6e5f17ff8181349bb0339", 0x7f}, {&(0x7f0000000f40)="b6bf7adf76fcffd60c8ee53ca623d172d9ddfe4b80e455f222b2ac5e49c3110fb049070ae4475e58098abb30d6e87d6181a7cdaca6fc37259decb4a6568ee113225805d5406fc94e848f69148d8fa125455a589972afcb1881875531a81ca7d4fc175e8933b56d2c3d364f225af49ff28d3909a1872157f6ff3967c30ba3b902caf0c4302de6e5519b10902a7951776f25c0baf34f22e47b50dd45d0628fbf5c9a8649b15c3662f29c1d29e35979eddc36a34b9b3904a863b05fdbf1f73701e40133a15ccfaf5d3a69eb728a0162c7d9f9464af7d7661c8749a0f674ab8c27bc975feeef6325dbc8b7d3fa", 0xeb}, {&(0x7f0000001040)="17af4946921f8bae2a81", 0xa}, {&(0x7f00000030c0)="e9afbe548479bb7766a8196ece9b2a0ace71be8ad9fdb60fe1f09dc281a185cc66e97616d93765e76accc18689c90316aff866c9b0370b2c677024e3517eb7b38f788a7e412699845b66f6a61a3c968813a80260910eaa3d9c4f7dd1dbd7c2d980f41e1796ebc5e34f9901c1408a53c695846cd430e5c6c798ba29bf0cdab16de77478d202da7bd21f", 0x89}, {&(0x7f0000003180)="8d7931c31c3eafa67c252a70aea04150d86d1904e300d4f4a2273ea0d925a42b5fa2", 0x22}, {&(0x7f00000031c0)="7482db609a855fd2773099b46e88c2fb4f9bb258c969d7f5cbb434fdda6c8c3a5d260a9b28fc12ab193cf16804f20600991fd24fba537a88fed8cb5a4a3f16e50f08a2d2ea824730f5aa09464dbf3c0690a5fbd0214cb53d56c482dbdfa220e6dc003d040732377c7b4cb3b70bae483588213b17c1c6cf5f5db5f4fc27975d80168d7379f2961029a82e769c08685d7227fd3d54839d1c406333a6929d6fb0b2a9", 0xa1}, {&(0x7f0000003340)="18f888ddfcb5228056992673df16498e9271de6204de0179827353b2", 0x1c}, {&(0x7f0000003380)="33ae63d35826bd4ec0dbd0c5df6b58d0c57a151efcaec072eec19527b792de1e3586270341f2a1b91eab0c3ab7de7f4dd35e542935534279f518ec99b16b6005934e617dc270ab55c9fd3ae798f8d57823a0fd5d3c", 0x55}, {&(0x7f0000003440)="b99b4fa3ef1e5baa0a3ad7c0506949ba90c6558a7edc5b82de425ff4de0a38fa88802feeb07360223e2a8200b995096ff488d1c2a4c91c150ef49dc364e31d3a6cf96eb4aae0a6668c174b0bce234e4ca284ecb97c798b00f1ac93", 0x5b}], 0x9}}, {{&(0x7f00000035c0)={0xa, 0x4e23, 0x1, @remote, 0x9}, 0x1c, &(0x7f00000038c0)=[{&(0x7f0000003600)="92946e66b7ad21864afcf3b7ac93a1fc1af0c3994b9113aac9a2cba10dc68522e2e42455de30cecf0dda21a0128c7dbb8bd58165a506e86fce97ef693c76d315a39ada2d60ef034ac22ded73e96892a40bc80b11786919a3c92eb47c6f33aa02f59a42bfb6945444287cea3c2cbb86380685dd0bd174cbe8c393a782de36ad38c10dcb2e895df2a7fb", 0x89}, {&(0x7f00000036c0)="163b3ac1273d44a7e872c4c8bfe9c330fe84d9bebe4cfc1d3b9f0b929024e20d0d2fbd90111b80a448680c6d1b8de2e2014686bef8f8d2182edf0d747cb6ab6116bbcaf40f176ed91c10d53ded0f99e28fb767ffe4252240fdec77e92090272fa47d684e0a708d3c1a8a043c9de8d3dd01bb8f432ed8a66eb7ad018fd1d5e21ac8005be26453693c20e580804aefe125d94c173866cfd448bb69bf4581a6a5dbdf394d452cbb6e042257668fc4e16017d072e0aa58d84a3097e007b283d791ffe54b64b0697f91964cbdb892267dda9ec5becf386a83dc8e85876581f5bf55fb03e84ec6ce23256df18c7fb094078e04", 0xf0}, {&(0x7f00000037c0)="ae007d4f", 0x4}, {&(0x7f0000003800)="b9c1dd980fe83e95b9596d86b147274b39a8e84ec1467498e78eaef1a2038b1d49679f8c81631c1db32a075636278cc1", 0x30}, {&(0x7f0000003880)="ccd07e0baa985bcc4973a08ba9622a65c9b6fd5b6b429921bce79855db7d0c12bfb256efe9c13cb9da2bca9063c7cf401e", 0x31}], 0x5, &(0x7f0000003900)=[@hoplimit={{0x10, 0x29, 0x34, 0x2}}, @hoplimit_2292={{0x10}}, @rthdr_2292={{0x64, 0x29, 0x39, {0x2f, 0xa, 0x1, 0x9, 0x0, [@remote, @empty, @private1, @mcast1, @mcast2]}}}, @rthdrdstopts={{0xcc, 0x29, 0x37, {0x0, 0x16, '\x00', [@padn={0x1, 0x2, [0x0, 0x0]}, @ra={0x5, 0x2, 0x8}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @generic={0x40, 0x9c, "5fa90693823c1086d969b46cd40b953b887be8ed0bdaa3a79c1ea8f09307f9c3ab3cfd24d44c66e9611bfab7ffd2fc36b565c4977ee4abdde804062a2c3cd2d76d8d3fb8d8d0a0a6115e6eed927e13cbeadda96af72b0d177bfa9b7170047c10f09f46e1df1851c843ebcbe4f8d1b343c165e1bfac2478c7433d6f1f85c2ce04ec307242edd78a97474e67608fc0c67d0252c1f1b38c18d956ecde64"}, @ra={0x5, 0x2, 0x5}, @enc_lim={0x4, 0x1, 0x8}]}}}, @dstopts_2292={{0xdc, 0x29, 0x4, {0x84, 0x18, '\x00', [@pad1, @ra={0x5, 0x2, 0x8efc}, @calipso={0x7, 0x30, {0x2, 0xa, 0x4, 0x9, [0x3, 0xf56, 0x100000000, 0x9, 0x8]}}, @generic={0x8, 0x7f, "7c23a5944231418e76b873526536b320e16ed3488013dc4997e34af3ebe40e155ca52bac385d1c49d41e956fdad92deda21840ca4d22ab16884677813bc49fd9cb5ec0d5b6d331b14e12847949951ebaef478c41711da96aac216f8a06bbc25a3def83fe0dd4d388f4d82c9213ff6f9f4a9a72b0f9fb2d52920a9fa01f7182"}, @ra={0x5, 0x2, 0x200}, @pad1, @pad1]}}}], 0x22c}}], 0x5, 0x4001c00) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_NMI(r8, 0xae9a) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 29.693174611s ago: executing program 1 (id=10072): socket$nl_audit(0x10, 0x3, 0x9) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='io\x00') lseek(r0, 0x9, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$KVM_CAP_HYPERV_DIRECT_TLBFLUSH(r0, 0x4068aea3, &(0x7f00000001c0)) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a32"], 0x54}}, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000480)=0x2) close_range(r2, 0xffffffffffffffff, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x3c, 0x1) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x24000008}, 0xc, &(0x7f00000000c0)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1408d790}]}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELSET={0x1c, 0xb, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x187}]}, @NFT_MSG_NEWFLOWTABLE={0x68, 0x16, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELCHAIN={0x80, 0x5, 0xa, 0xb00, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_COUNTERS={0x58, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x6}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xffff}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x8}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xe}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x3000000}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xeb0f}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0xcc, 0x18, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_HOOK={0x98, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'lo\x00'}, {0x14, 0x1, 'macvtap0\x00'}, {0x14, 0x1, 'batadv0\x00'}, {0x14, 0x1, 'netdevsim0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6erspan0\x00'}, {0x14, 0x1, 'macvlan0\x00'}, {0x14, 0x1, 'veth1_macvtap\x00'}]}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x238}, 0x1, 0x0, 0x0, 0x2804080d}, 0x8000) r3 = socket$nl_generic(0x10, 0x3, 0x10) write$tun(r0, &(0x7f0000000940)=ANY=[@ANYBLOB="000008e2b8f5d7950071ff50fbfaedf92f5ddd9da696427b4067ae5a09bfc673f1bd3f69563d131e292266e4609510b91581fe421d09e2aca5183267d3354a6db58a21625189199b3b6327ae8556d97689608ef0b190a138293ffbd9d73c075ecd7a51e27087f5aa2b54c964b855525970b031b03ee5388d94df3d8541a9951133546f18c124b66ca005e646b2373bdfcdd3ceb5a1e12f1516ee05a8017c9207429602f607b9d00158fd39be7a666b95879352cebaf841ca7ca895993f63f5440c2633037599d047f82dc2f5cfdbefc5c6010f333a3f157799f1095794d63fe228dc3d8c40897ab16999adc2134bd8b8430000"], 0xc) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)={0x2c, r4, 0x1, 0x0, 0x0, {0x1a}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r6, 0xc02c564a, &(0x7f0000000080)={0x80000002, 0x32314742, 0x2, @discrete={0x7, 0xbe78}}) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c007a35d45d97bd289340a548159500001000010400000000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000000004000000140012800b00010062726964676500000400028008000300", @ANYRES32=0x0, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x20044001}, 0x240080d0) r7 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) readv(r7, &(0x7f0000000300)=[{0x0}, {&(0x7f0000019380)=""/4096, 0x1000}], 0x2) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a38000000060a01040000000000000000020000000900020073797a32000000000900010073797a30000000000c0006"], 0x60}, 0x1, 0x0, 0x0, 0x20040804}, 0x0) 29.52933646s ago: executing program 1 (id=10073): r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x0, 0x1, 0x401, 0x0, 0x92, 0x55, 0x6, 0x1000006, 0x4}, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0x30, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000003000000000000000800000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000ffffff7f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000456810", @ANYRES32, @ANYBLOB="0000000000000000b7080000030000007b8af8ff00000000bfa200000000000007020000f8ffff", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000a500000018", @ANYRES32=r4, @ANYRES32=r4, @ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) clock_settime(0xfffffffb, &(0x7f0000000140)={0x77359400}) ftruncate(0xffffffffffffffff, 0x6) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r6, 0x4068aea3, &(0x7f0000000240)) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x0, 0x2) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r7, 0xae03, 0xbf) socket$alg(0x26, 0x5, 0x0) 28.267673152s ago: executing program 1 (id=10077): socket(0x10, 0x803, 0x0) unshare(0x26000400) syz_io_uring_setup(0x186, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, 0x0, 0x4000) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'wg2\x00', 0x0}) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000280)=0x1006ce, 0x4) 28.133708428s ago: executing program 1 (id=10078): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) keyctl$join(0x1, &(0x7f0000000280)={'syz', 0x1}) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000ddc0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) mkdir(&(0x7f0000000080)='./file0/../file0/file0\x00', 0xb2) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0/../file0/file0\x00', 0x40000, 0xc2) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0) open_tree(r4, &(0x7f00000001c0)='./file0\x00', 0x89901) creat(&(0x7f0000000000)='./file0\x00', 0x40) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0xfffffffffffffffe, r1, {0x7, 0x24, 0x0, 0x41046100, 0xffff, 0x0, 0xf7, 0x0, 0x0, 0x0, 0x1}}, 0x50) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r6, &(0x7f0000000040), 0xc) recvmmsg(r6, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x2, 0x0) ioctl$sock_qrtr_TIOCINQ(r6, 0x8916, 0x0) syz_fuse_handle_req(r0, &(0x7f00000021c0)="1827dacb7cd53e01b4852de2d748e21fa033071acb841f449efc23d452101807ae5c485596338a6d31388444ae8ade7b60a85a37d3db29ef19ae4c4d4db9c2c82c7908debb2e2b5ebef336aad77bef942d064955079af4e914f372cec8ed0440f6ee0bded3c565283bdb75124011227712d5f01e8c1eb86cf69205a8b5b374edee58ebaf09d62191cf41190260c30a719bbc9bc29be0d60c678791de6b236c9b5a057247c281937c2b2ae747c858532113e0a1e7af49298ef54f15572301d3c907b02529bc470beab8f9208cf92b17a9df99ceff90a1e384d6bda3fe823d8eff0e2229a43c31781935de69466b1082c0f88d3716f234e1d6e17e1360f6621e686d661af20eaf08cc97c261590ac3291667a87bbf66f86d9005f034ea5517b2187b6dfecebc1cb8fc4dab511a2890a68ed185483c548168803f353520cc6f820d1349ac985e12a3ff6e8a78b29ed97213962fca3ba7d04d1ab4dbcfe93a88831f784ed278d079eb3e2e69d3161600fc7b0dae825b510a59c14315fc6ca0ce68dafd088f02a92ae0ab3f15ca1a863b640e8e4a89407a8b8d752892e1f8b0e793d430c3ec46cbe2b6a4bdad728c34e734864aeac2b6b2eb51c3a2f9e6773c5834166511086dc35847cfa17974889795ed305353d41c9399bb95936a3c1be1099f21795cfc04d9699929eca65a0edcae5d4e564404e5292dc15f40d78d94be9e8dca92983bc71729ab30a70455bbfd5a98d97cab9778d9b7b69fb20019e7e7c7bc17c84da1dab53a187a116ac229e00312c95b1074afff18a8771a4ab47be2205745836dc3cc1ce531fe697e9a734698fb2343b331ad9f13214d1d7d511dc646fb8b3b70fb4611e6d102a0e2bda6311ca824537f699efdefbd8a3a523e26272f07abd75504188edc788af9c75aabf77f4ac883573f63ded319fa5a8b6317d4490391879629446fa5ea4c695f3db9739f7bc1da7a19f3e1c0ccca98307b3a7a38272b7455c8957b17138c9e170c27895fcf47eb5530948b7cc43d61a621293b0c83dc893f02def2b42a8bd7ad6c9cdfeb7a3bde141e98e5af7500b07d85c6314949b754c88cc666bdaaec89271f56ec11bfa0aa337feb1140b8a07fbd5c79bdd0239f8aa1d454c0e5a16e99d38d1212ff709bb1964c317c98bfef37b56944666f0320ec85b5b1e07731de5584901f8c65e14fd2ba83b500fdbb137c7cdf91d66400688a5da6405ca7e0b8107ed65be0ef5c6234b62f613e7e76d6f3d5cc12bde4342391524e25bab6ec0a358c6c66b7cdbdd9301f91589af65cb7c02fe8271a798c5e122fef9e7581d28884d33d01f0475c9ac052d2d014bdc09e2738487742f7bff40facf2e96dcdfefa336c46923b77b334daf7b01a9fd5d957a29b83adf6f23acc507a58dabe6b2804532bc1a865a01b1126127f7c6a8029531db8a51d8472c0abffca5be97b9b5433ad220ab9ad65cf94a1167f3fb2b8804ce66f9f5cae212724b2b3a04343580f5919f446f40eaa0177f25ebe68ee7c7a35d9d5ef6e1cb220eaf8ad9b269b15c2ab9692c345f3c3bd5965f06adfdfa2d672b5e3184ebe192f73e70e829adfac2e6318d238dceb6e3d7d1422d57ff7124793b92966bd229c0725b0d591e59c57f98841b5ffad16d0ae903406014d3e632d0654e9084f870e124046f3ebae3ecbf5c5365aa32ebf169ccf1243dc8fb296cef006d5f00447ecd2980abb98e3b6e6bf6181e5df7994ea1c1273784af0d92a57394c71926dc143228a8ade103ff61860d21ffd467b2c41bbbd2490dd36add865828fb64396f16831a3a74f57ee2254cc93b25b7219bc00339a2518be3caa4765ed63295c84f1d59144e96aacfb57c6441f64f29729bb7d68127ae2472bbf089570003b1e820191878ab6f53db01c180751e34672cf5a96edfefe164580d6101672281b59f58f3c7b1222f2b6d19c8a8e5f9ad539045f7dbadaa767f993da974dae20744bf5ad0e0ec71ee97696659981e067463c78bd9337b8bcfc070e7e5b47303eaaf9651c19f19a15eab8e2c47041828be50994b5695ee5fbc9a9ecacf9de714215eb7992c07f262db8843937934fdf6fdd31d0f3a44f074f3a1dd6622dbdb3364df79d5ec90ead64c29e05a6c5358cc6b9d8493b7e1c53a91c37aa3653cf2002072461f4b99fcdec142e53b87f61ea55cdb834dd4e03f2f57a206cabe2f3f3cbfad3b4117bf4434718022b09a8419959a9bb97fba50a6b3b9a844cd1301de7bae89f8d1bf549b88dd2bd0697e70ce89cc2e383221ca2ae9d3671a730466c250a8963f6411a42ecc85a00c01b2b43c39432d5065a5fd11c29a23169891cd674cf3a31e82587a26c8d48aa3debeaf067a26669599fae850126dd516512e0cf5ab556b5582add7d2f665723a2244007ddc302f0ec29da73578a80c998849be2f766a334c7ade4dd46f37d648899da5cf7437af2d6e8d03d934903387c4c7e260909d59b546dfac9ffdce11fb92e5bb6ff6836fa0e6d0c5942b4660fdd68d3cc8a76ce0960584dbf634695ca75752b19067ba535e4779189b111c9a3e0ea877067c046d10021b0e60eae8d5dd7536b4474d8ab74679e2d8e68bc9208db5561e28d0bec177cda1e2f944a4cd97b6432033ce40063cbced6b36e486b096adffd699c9fdf58d5ec54bf4afdf52493fbfcd91e807da31ff675b567058697aa088118a6ecf1b7c7dceba3ba87d59d882fce3b3b676763ed658e991c4fd5746946815af0a2c1e96aeb27383cf6638d6d7e1932b3a028250fee18db7c46acd7fab33ab22ff91cf78029a4ed96494151652213fb7dcca0a8944568bf84aded113e20e6897d6b8f6f9fe5f6975c7cbf999d15ce5f8d50454d58e7a5b285fce4ef9d14758cf4a9619b17275fa66f2c6c48d44da95657708062bec9b633ba2df082766f549c5c1b661fc8a5f7b8b6699503da733a66df44f116c4a470b73648cb64bf04101e7bc1d048d230addbf22a5b98aea08beda847e33552faf771d9b181f610ce34530543096257856ea3a08276bec1ea40e7bf6957143623ef47b5c41e61d076eef0a5195431b49beab9fd7f07b1a153491a7250a889b26ce657df550b226fb94cb5f52306f47ee3af4627ef0cdc0c50536af7b386440b878ed5d672670abdb3ea3e3c3c031e67293104a4d6476cf325f6fe4762ce2351dffac116387baadb82f987cab7fe88ce1be7d44ccd572bfd29114d2ce4d5e90f4d6bf7be39ce25ab7de52815e4059d783564d518dd208714de1c524ff69a4ec5f29bb631eff605cc6f30a0bcfba44810a3a6fc263891791b51cb4be0d60d3d0798e38b01b9a21150589a436fb4df4584bf6e7094176884921bbb0f87b1bcdfb6df8aef8f58393800816c15647650448da0ba5bb76f7bf76c3be83aceab79eedae80e1fb46a2557a9485aa7a8053a5835e609fdf54222f5b43cba63c9508dbbd0e22953768f88e2070236d7255f682464d09c7ba12b2e8787a1bc889af686d2c355961d8f92f877bb09baef09d70b5b306047d8d3cb97fb06ba8d09bfbae02314dddf98092b6ef275743e9deb391995003d83b549ecd604daa9bd34ef311aeced5db504242241c0717f8302efedcd3fd43686a7ee21c73ba3c5af98c93d09158c9011e11bc4b51a3a4e904c4b6ced1a786adf310073405c27df6aae6d5da4398d78622ba9144ad09902da49b77046ad22fd303f07c1533f271eb82794b402382d2971f46c7907069907a7afb9e94dd4071685f91cfca10d86aad7c385e4d90f0d44d37588a8f1f267c1d8445634ca4194d1a0c5894a6d00cae3af3aec991cfefda59e3f46c0a6e2fac55b35259a9960ec7dbd1c7dd128368393f0de1e0994ba1f5b41762c22213f56bbf4c2cca458dd5731f9379f0651ba61fbf17a5861eb417e20a7fc9df12c6771f5ab322213ec95beff96dc1811dd0f45be8fb1ed93c2cc01e694620b550e45bd265fb357f52699cf9ca3ddf331fe4d11c5e97bb57631d9c7620b5c19562c85ef8e04ecd5cd5b713fbd94b6b76331a83f304cd8ae1a903ffa722cf5697b1e1bde206735656ce57254744daff8013f47f9aa4f062d8c5956fa8df5ee79d6e6ffbc0c47cd0c99517a6d92fe8ad18c001be4b55af7a6533712c6a2ccb7e813016e7cb74a94bf2a2ce9b3b440faae19210d43320cb81a6472d1da775ca27f2b5bbe5964271eefccdfa0bd6b163357af4539fdb5d5e2e7e1795040776d4d75b70928b8efa954556f4d225bd9b6f9e5a71a8e7a3ef5c36d459233c66650ada1c55dfa02bca3997f93b92028881d9c3ec0e7e1a42c587482b0cfbc77e8520c6ca0f3e5127c96b41056b7279d9e62358e39dc95e779affaaaddc8e9ee66ba336feca8b957ccb4f352c0d162390e3bde27b15132407c97c3a6b5f1704e1e559ee12655a71d7dce3711c8af907d7d2875e2407ff8c59c5457678058d3d00a7971d239c1b1c67dac3ff3fbcc2d8c8035e31040118ac46ba5110a16aedd0b7f731a4f86a63a697501a664946eaf7da6d3cc2a296f294ee765b8f26363ba6116e0ea0ef8eabb0f1e7cc429611194cf0bb66463d26a82dd118cbbd3f1040dca2f5f82ac5eb5df41a4658fcb34b68066c5708a4a16c48fd290b32e392e7f5b662f4e3fa2d79a814f52824cf737872604672bdaf80fc527deb1f690339c92b6c6c6c8635de5a2e1a7ff617d0f1c11bc3a3504d0de94d77678025ab5bea511d783df148e58b0793251db3b7b9e03bb201be89d5939c0a60ab548460d543d015082e00ad9d05418c327ebafbad7924aaf70e5fa6eb0be359b65ac2fbbcad495b17712e033cbf1853d1e2450ac4c8d19287074e76ca3d087d376b0f861b525d4949098dd4e3a3cc50118c8587adf6587ed9aa0352b7d812fe66bb64eb0c0f4d46822aa9c3d4848454d49b61cca24d7d6b82fafc5d8eb4e40e3665f24a95182b70b22c5f9303a49d1278f25de9855246c729fc8ba300fad799a949b9b0ce303477d22337d599d4c8441461d25725965183210a729fc59c4e5ddb45c0b9db06a09619e6009aa0653cd1e8b06d0e55c133d5022dcf91f12a21e9f977de2485f886c5133a8837987e7bc90662156b0250cc76cb03ad9fa36733ef371479ea9c1313682866b963f1f96bba8c658e2c6a10e5e29d8a07d4999b735bdef7f60326aa64fc198c3f2670fa4a44717fc613f1282fc324fd9476e6da7866cb6ce1efa8a1577088f2aa757584b8ade9f2ba34a2287870da2cc7704008b6e057eaf8bfe2fd0d6d60cf03e1751d2284c6439ee6079708451e64b1f7e7dc8400ae99e0d834a7daba6c3a8219812adff0760129e18a41eb0448c57a909714cd395933436e9ae040277f213e30ab7b6e7e3109642ffa051b3c423f6ffa7830c75d229acd617d6bc1f7948f09238f5437ff4fb302034fec1fed96c55c46c7d70d6ab3018c1a3d76120077f815fa67ec8815f44fd0cae7d1509d217a432ce904c778f201a508fdea4672e9cff797bd1d0f58d46f39396e148573ae9b2468e4ee5bd9a5abce8166333c524f0a104da2e3c99ddbc51fc6f4e7c628af79c93d0fbe61b1c4a72b11fe423597f126467a01ee6dad848f24abdfe453592f02c84e017fe553f27e639f88824d70aeeaca54758184f95f12d696291798046bb075fefd6876e8ef893f5b9340e21fc63c67feb6f03055f2f394a591164a61b1aab14c468998175b75974543e79b241dc69a6e346374dec5eebae154e36f29d17273e608ce69d539a5e4702f474bad66fbf3348f0c859bf884576faeeac754e290ec97e863526e55420da72b6b6cd209e6685ffb64e9865d00eb017c843d3c0cf3ab26f53f76316fbe009f0b2c4932b0694fecf1a148dbead458ca9f5f6d678d6c6fbd23fb6aea9e951914300eaaaf69bf35d4ce11c0349a02aa14529a083e701eac0177d4ddb305a9f9a5cf8bacd96327a161bb8b877813ea022d62bac8f0ab9eb5e9d145dda4b1fe79c0bee34c8bbfe866ba376d3a71b9809adda06e64eafaa6cf53fff8ed63e15525fd409e13b1809ae6e6e937acf858a59d2073b304171d5ab35ec92f66fbb2d4e34d46e886c3546c1026d0ff27821a15aa397dbc686540d546ea66fb43dcb9beaeadde6250cfe8e563f9033b432018c88bec07279c6a0228f3eb11031d3435d95c9c1789a5338f74aa6db2c853c87f8f2397f9067fa59774770f64b8ae42b9a07f85f1bcabbc6d3b3456a253bdb73ad3de0aa416589b722053c81db90e7b66a835d636615701e6869fef016bfaba9da0a869005ffc3174b605fdabdb8c7346262ce78a64aa7036960913edfffad202d664d1771018de43b6548a6672f48979b8e30017a93da2c093266306e09eb203fb37d7d54466fb26d4414ba88346d02d8811f100dcb0a3e50ae46247b986b928f12c1ad506c6b33b49d7e6955ae9619f73c79b72a95b053d53c4c54d36dceb8ae780b321aa41b5d61caa21a6c65329f08da522bbbb3d07501b39cc6bfbe4a2ef8054d7c57666bc805ed451517a1432b958141f3ce94752a67a17aadb41590037da8efdb251eb56de30b0e0e75adfbf4e06d4777f843a8d7c31e2ab62d98764217491d46960d67d3ee1213d150c28e75d1f440d41ffc3cf876554e2d4a354f70fce17e4c0fdc64992c32e785263ca4ffcab57d3d46d220627ed05f1628551e9843137996bc7a0b773e1ccfe5364216a8003757ffdc052d93793a3463baf4eef5dd283826f8510bb1f20505a6e61cb3d571d0f77e67ff3c0aa5ca91f6d68c7e0d2d79c649b091b30b2911c5c47157c9c531296eba681e039eaecab83722cc2fd5b91913a463ba9f693e34da60b1adb8ee9f4a83fa67e25f19e4cd6e19ed1381cba8b5b4591109637ae1f7f29b5495fc5f8057da565d937e7577735bd98fe626ce8568897d240f054ad69c8e0ca424d1be51b17d5e639253fb2fe6791e01edcf9c4f8404233d7f98b52c31c4996b6b63112d0126036ca20cf52a2da2478683c41bfd8fb5b34de59d5e87b5075e5e1d78ad06c6a2f6e662145be3d30d140b62c49df203350ea4412c97aaeec7aaa00d81b89f3b7295607840de2a8386f52012b5c4e6e0e1986565bc4f99b6bc10f3a2ab59783a8b9f3c696f741af0f51b6592c68ddff861fc7d2b16876b05a54eae9ec0e170fbf26d9358941c6cba50a5c41e77f72c7f41e0bbf6023f04f7701f676a64cb63ea1a8d373ee6a99ba56449699ccdf8a11dc7d840d695cd5ef987f74e5b16594cc8c6c2251c47b429281b6e34c0288c7242052ac3c9c63213f6ddb08726001e0afe1fb312d463db8722f1617972dc7f365de498027ef0b5c6d100e583348cd777a2afbfd60ef59969c8f88358b6995c177a7d7e69d86b11e36f42bae8c9af599d3f828447c31004000163bb74ef20f656f6a1c8159bd0f867f2e283c10656a40a397b2e514c19efb5d5a5f54316509801bd8208a2c84b2ef13e54d7b8af8787b826b50095a15e33a5e8e306454312a83af7869b7ba0039ca601751b580a9190435d35a8ce9d8e9558ca1bcea3cc3604f4e991aee79fd0d2393b9f87e8dac7782e837e1de5e88a7c79385a2b14556041f49c1113df43efd8aea14c4b651d713fc9989b2fd77ce13a98efef5e83cc6843d313117753d82870c5efec8cc6fd855ab6e0fc6d48c66874fdcb2d007db7fbb9371da3836eb23da1106283a20e32617bcaba574b7b6298d48334eaeef905ff348c2bfbc1c83a88d6915b644d1854161ab4f1d1db12e74de2853e48d1a10f9835c226bca6944d0de6a18e0e07df45ad72a7d354045a6997ffdee010e37091a3a5280e5db8aeea0245217a6f1160a6287d9a28c0eeabaebe755b9485da5b7ccb85166ed902e63200e5e8ac464124bef0196eddee6cfe90fce770b416817e1ca78494786bdaeafa3538841f74bbdb2585d63f667ef227287efa56c030c0999e9ead590f1ce383a138233235494ecec0aed97c803b4d7c4fb80ac9a3bcb1dd2bab51382a94195bee034c3f3d3d9efc44add83ec580a5cfe8f5942b1694b0ab3ef4b2d9f7c0b8634b056c6b6eeb946be1825fa452abdbc1545cd94774abed3fdc2b0399929298221030f6cd0a2b38490f5e4bfd53ee20de10eeb2ffacca980d40e0885cb91c94a4d81a61d863efd0f7a12da233e1dacf7af728950892ef887abcc5e4d08c6b57834a1e5dd1dfc69418fc681b47d8cd34c6a3846b0e1afdc7c7f9033ff817a72ac617c0a1e59e4e6ea40bd668c499f221c5f63700e74b68ba3045b4460f0fa60308cf8964d95237d888d5c1b1be0fa7bd2703eaeb0d2914b8d22cbd8693c16f21bb72566f38aa97e86f212557d40e10b285e1d4de0b153c8f91e168e9d0031bb7ee7fec5f0c3fbf15bc6fbceeae6dd363b7e9835b175b0be16a3348a2c2d07468449fbb2fcfca9e7d8b72b623355715a6a1edc87ea4c699ffeacb2277fbb5658a1eb12d0a7a93bf100ab11cf49b35c16a14044ac8e5bd69af05b252325f0eca41f90681b4a1ec399096939a96685926655a0c4d172d06646c87f35b65c0d7654882b79838f78c35febbdb378f9f28d7e6ba1c1fa191bbcdbf991731f546439a966e4f7a15c77367161bde14b731c9f2b91114fa46e02e70f07d3c40988e8140866ed3dcd98ef5524700deb75c1a6414016da0ce6845e936a8692b7beac01bc855a72a490c667c3b755ffaaa57af54af1bd07ae7b203be85f3653aa63cc5ae10f6e585c7bd8a5257604e82fad6c7be6f1a47eb665c1422c03d3263f351671a48bd5eed22077b8c16e706f009880941c29b90c29a11ef008a371b29200f32523b9847d911fab4ee1468bf98a49ff73703e2d9d7bbf6ae37459c3cb502541f304e1d5918518a06225b65f3b38b91f8e0b49a29ef9aacca369ce5cf8b45738e29118ab06078b885189acf4d0a5200b86cb2269dde90dfada27975dbe6ded12232c0faf7ea12ecacbdf416cff8632e48346478a75c0279c1920b7556fc6670704d5d97912c75d3a9cffe6891abdf747a6850ba7d9668e56c7e7ecc03c5c388e886bc984c8bfd9f470b7e4ea4d146c3c28e4f8ff82b9558266343036e6239a26f567f7633911ccc51522c29ff3ca36ad5b8cfd6ec1c86ae08f30d87a503c909e66dc278e9d14f3fae4bfa4813f315b1610ed76fc149d92f319044e813c3769d4978637e0ee732d3bb86e9fa584181f41d4304c07a1cb71d10f07da649288275a213eff161c536c7366d4c010cf9a4b1c2f2940607dc7468e51204c6983c554d616d48f93ae51e6a7769b3285785ae7bcba3cfb27879df1d7f1f18849a70814eb51df6d1d8cbe80b736cb38326f7db7a06e49cd4fe41b3f7a9156cfac9222ac23d13765e7f2910a365fb23a208f192cfca97b2b8a3de44a2d90d3c865bec109f4bdfb1d37216cf5f71a27c39a83b5562b0c06d76b46b2d8f5b15cb1765d6c78d065d24bedf72405dcb8e795fe183196a6b620f918a2dd7fdfac142aa653fd431ec153e3daac8f615a45b3a0d665d5fe36efb6e2f18b8399429e4f363748eddd5cd2a637e9a0a553fac6d05a3e2bd1b26f2f99433f8f59a3691417a4f35ff7d46a22e39e94641d942706850cb2843ff4a34122e37dcc8224ae9f6ab7f64ff4a0bcb0aaff2f429e4f0f5fcf90ab6a2c45e8f2408d9bbd4f60d6b01a0cf527895e1cd063b178b8973930b9488d81d3f0f7985b900d0a894c29642b809ef39294bfaaa5401f5ed50cbb91a047b60ad54b323a2f2ada04d19d6dbda02e0f22d4d6520f9db2263181c97c9bb74dd8a90adedc80bfd064eb103f67d02ea17571f870c779470bb6460c658da4c502b9a10c8050fc26ad5cc1ae1eb02f0d703d05b48f48ab8c9f9a1bd000181ccf929d45544b44e9a3cd0bcd412ad639323283ed229e5486a2a93babb165880a0a7329834bb51a0631cba5caa30637ca3f07074051c608b7c7170c8c415c2eb88bd6a798bd86953ff71052506ccf0e2357deff6cef24de5b7f68a17082c08d096e43fbe727ab0ab1aa27a703ccd58168039e50dce2d400ed7f2a217c1eea7b29455fbf910d36db324d1c6b53343a78484883ad100a0b5b28c74ab6296df5bf8048fb916e8ddda0ded3f5b08d262b9b1cb1ecb149c02a21490ebebe8856c844d448d2a3878dcc930c3c88d9addf73917e9d3f878fb12fba3e602cfde199a0e69eab56e3d4ffa01135b3145baa613be01f0b94af5bd3b8b432339c954f52b8551fd13790bc1ee18be226b819d8001a3da8e097f84c166e4002e4c1043d3a3721f05105cd17a278b9509d7a04826e8a5b4956bbf976ffb4857fd88da99cfea8d2e0a1c4f52f71f87cbee8c02fbf59b12bdaccb67d0b95f0a56693eafafeefce1953d708b56532ed5bbe12626a3d041c031b48a47b34c504f7dd57e21147b920c058385ddc8cbea5332086c269b0d5c2439f30fa431f88d1a10e25eba0df70d8617ecd5546314ffeae9c4baab872ab82a45eeaf0e1e1533e8a6189c324f31b652aeadc52981b66161313999c5a7bd7c79ef4ee55c7cb00ebd9637ffe01924508a44ab72ab16b70b8b815ce7d27772db315122f4a5a7679af5ac685c26320a71cdd8066b19f749705e2e35d1d9166ecb066053dd05a759270e119944cf99b918cb5e4e6c931031ae2eeffe349ac246c92174091c687c58879e1f05c43b010f7ec3f204c106cf60740b0bc2d355f57bbaec7d060dedab9aebaa4094e72ebffbf61cdfb7d69fbd146daea59339fa83c19c5f75b866af5e7f387740e675e1e2ba29c261d9e7237c6e9ef1b39a8fdacb44de0eaff5f4f9e3e42b75d0a37834eab0cf47acf65e882f0962e01982e783c0dae7efbc95dccb235562e5a2e04fd2b4b43388c0292e6e8198c6df0348920d6e1c8acdd2e892d3f7aef7703824dbb08695642f0e444ade6c4f1ec1e267feb5135cccd50fcde643acb66dbd18f507496957ced435e0db0a8e8441a8e2ebc365f995c32399f7d180b6faeb85ee1921b95f82f3194bed7d157e842257d2da26dfac90f32fb53147e48e232d5115f1cd12b45c55330b29775ab776599afa504b7fe114cd7fb3ab4eb6c30becb82f448b284b20010bea918019af99b2a9ccab1585aec19fd1abe8365a6023f96dddf1a37cce2734bb6585143729850bcd811787bd07cb5fdd57cc987f9278b7f5ef3c7529a9b6d20d18cc4446f1036cf7635da6732986c38df4785e2e428f14b84957319772bdbb7d2d2d20321e522b1ec6c807f3a3f575643d4b71e1bbd1e843b5816aa68900298f5058c65a9fe1022978a44a77bde2b99e221de97cd7fa6a2ea440220bac20e3e4c1e4224958aca15681d3a18f74218114c3e5eefa1fc16de8c07f1d1297b0e772d05f205337175c1dbe88dfc876dcfce367304afac68c41b98ed2ba3f04fd1b37db27dd5d9c9aafaeadfcc44585908ea655ffce1fc2516b060256777e8953e2a6861ec4460034691aed001ea2971627615fc7972773d6a8c343117bae3fc68cfd1f187c478c0f52e86b118c65c39848a8c582ed908fb1242ad3455288cc858e52e119d368e00783c2b8c2916ba564a3501326baefe1dcadac8b4b8b666f20a3a245ca171b43af", 0x2000, &(0x7f0000006d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0xfffffffffffffffe, 0x7, {0x0, 0x0, 0x1ffffffd, 0x7, 0xfffffefd, 0xfffffffe, {0xffffffffffffffff, 0x0, 0x7, 0x0, 0x5, 0x3, 0x2, 0x0, 0x0, 0x2000, 0x0, r2, 0x0, 0x403}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004280)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x90, 0x0, 0xe81, {0x6, 0x3, 0x2, 0x800000000400000, 0x81, 0x0, {0x1, 0xfffffffffffffffd, 0x80000000000, 0x80000000004, 0x1000400000000000, 0x4000000000006, 0x0, 0xfffffffd, 0x1, 0x4000, 0x4000000, r2, r3, 0x0, 0x5}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 27.252723149s ago: executing program 1 (id=10084): socket$nl_audit(0x10, 0x3, 0x9) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='io\x00') lseek(r0, 0x9, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$KVM_CAP_HYPERV_DIRECT_TLBFLUSH(r0, 0x4068aea3, &(0x7f00000001c0)) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a32"], 0x54}}, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000480)=0x2) close_range(r2, 0xffffffffffffffff, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x3c, 0x1) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x24000008}, 0xc, &(0x7f00000000c0)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1408d790}]}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELSET={0x1c, 0xb, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x187}]}, @NFT_MSG_NEWFLOWTABLE={0x68, 0x16, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELCHAIN={0x80, 0x5, 0xa, 0xb00, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_COUNTERS={0x58, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x6}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xffff}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x8}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xe}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x3000000}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xeb0f}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0xcc, 0x18, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_HOOK={0x98, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'lo\x00'}, {0x14, 0x1, 'macvtap0\x00'}, {0x14, 0x1, 'batadv0\x00'}, {0x14, 0x1, 'netdevsim0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6erspan0\x00'}, {0x14, 0x1, 'macvlan0\x00'}, {0x14, 0x1, 'veth1_macvtap\x00'}]}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x238}, 0x1, 0x0, 0x0, 0x2804080d}, 0x8000) r3 = socket$nl_generic(0x10, 0x3, 0x10) write$tun(r0, &(0x7f0000000940)=ANY=[@ANYBLOB="000008e2b8f5d7950071ff50fbfaedf92f5ddd9da696427b4067ae5a09bfc673f1bd3f69563d131e292266e4609510b91581fe421d09e2aca5183267d3354a6db58a21625189199b3b6327ae8556d97689608ef0b190a138293ffbd9d73c075ecd7a51e27087f5aa2b54c964b855525970b031b03ee5388d94df3d8541a9951133546f18c124b66ca005e646b2373bdfcdd3ceb5a1e12f1516ee05a8017c9207429602f607b9d00158fd39be7a666b95879352cebaf841ca7ca895993f63f5440c2633037599d047f82dc2f5cfdbefc5c6010f333a3f157799f1095794d63fe228dc3d8c40897ab16999adc2134bd8b8430000"], 0xc) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)={0x2c, r4, 0x1, 0x0, 0x0, {0x1a}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r6, 0xc02c564a, &(0x7f0000000080)={0x80000002, 0x32314742, 0x2, @discrete={0x7, 0xbe78}}) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c007a35d45d97bd289340a548159500001000010400000000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000000004000000140012800b00010062726964676500000400028008000300", @ANYRES32=0x0, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x20044001}, 0x240080d0) r7 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) readv(r7, &(0x7f0000000300)=[{0x0}, {&(0x7f0000019380)=""/4096, 0x1000}], 0x2) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a38000000060a01040000000000000000020000000900020073797a32000000000900010073797a30000000000c0006"], 0x60}, 0x1, 0x0, 0x0, 0x20040804}, 0x0) 24.369000203s ago: executing program 1 (id=10097): set_mempolicy(0x2, 0x0, 0xf5) socket$nl_generic(0x10, 0x3, 0x10) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x2, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc, 0x2}, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @rand_addr=0x64010102}, 0x10) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=0x0) timer_settime(r4, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) setsockopt$sock_int(r2, 0x1, 0x8, 0x0, 0x0) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000e80)="632a1eb3f0c0d7e1f3e8d83e8279b7e98f2a563510c1fcfd07c0d1e58d723f809bb0322337f15e8d329d0926517a3148030a1d29dd671ac729d9cef6e520827a2201ccd77c7dc703e9116d512859f12dceb0dad478a2369aba7403b262e45c11c1290b59d473d3beb8d3a31bc7f5dcd1a708ed0be6f4770112b98b16c93db109594b2a4b04efb89f5ef215ff6d9d93fb8edbcf8d1c62b39759c68e1a184914791d5462c363b80e38ea6cd8556c46c6252445e967b63edceb1040badab4eef2ef162c734cb8052dabd2bfedbdfd0b22bdc6b9dc0fca9b566b32c4dc85d26161877f60652000000031ae091ccaa53c0faf409dee0d109e684a93bc32e715052d24d7349df7bdaa7aea658d7b0a53376ca1c71ad1a878ceacf5ce8a8c64ace50f4d18f1027b9efc61a4b4a61e4b323fad5c47e4341c1292d0d1c1e15582399572a3f2983e1a15eb78767b87da6d3da400d215326419919de0df00007736000000000000000000edd0c789d37a7dcf3f5b8c9aa5329c38e2ed4c0fe3a0eae2a169c0322b4e5b96dd251a4477da4961b81a965463617e444bfac080d03ac4fbf2d0c40e22aed01bea5ce1b4ca5e0b249366f1b777a13fcfad3d0a047371d2169230d0d0597e10f58c8e2b20cf205740044c15fab6d52121b0a6b2c122096848d4e29e968e20c1615b1e11c61d8e0c58fe667224e89b83ef29e04c0c6fdf73c50bf051d8651613e5bf65f9e91a91f5ce1080bcbad3aa36f82e9d367cb537444e25cdc8c21b60216d540ac605f39e02950b5af27d81a80cddc1a96754465fe43887165f7dc70939eefaf15dce85857c9329b2bbdcf10f5c85f110a42bcc3489b45f3ffd8a8fadf90cf9", 0x266}, {&(0x7f0000000580)="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", 0x1ab}], 0x2, 0x0, 0x0, 0x4090}, 0x0) sendmsg$alg(r2, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) read$alg(r2, &(0x7f0000003780)=""/4096, 0x1000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sysvipc/sem\x00', 0x0, 0x0) pread64(r6, 0x0, 0x0, 0xf27b) openat2$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x400480, 0x3, 0x14}, 0x18) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010100000000000000000a0000000900010073797a300000000050000000030a010200000000000000000a0000000900010073797a30000000000900030073797a3100000000080007006e6174001c00048008000140000000000800024000000000080002400eb489d814000000020a010800000027f00000000000000114000000110001000f000000000000"], 0xac}}, 0x0) socket(0x10, 0x2, 0x0) r7 = syz_open_procfs(r3, &(0x7f0000000140)='net/rt6_stats\x00') read$alg(r7, &(0x7f0000000e80)=""/4096, 0x1000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) 24.087953118s ago: executing program 34 (id=10097): set_mempolicy(0x2, 0x0, 0xf5) socket$nl_generic(0x10, 0x3, 0x10) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x2, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc, 0x2}, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @rand_addr=0x64010102}, 0x10) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=0x0) timer_settime(r4, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) setsockopt$sock_int(r2, 0x1, 0x8, 0x0, 0x0) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000e80)="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", 0x266}, {&(0x7f0000000580)="1eac4d20f8509e8f36d2842c8fae7bbe58c5bf73985d5106bf5b5e7e5761716e35b468ea79633c916c4a8026f9408d0558de77df67c0e6fd0b1b3da5de5d003382ac95eade5dadad870ce3749452d2c1c3651ffff244be3078fdbfeb97d093bbbe0131e733d91c4ad38e7b52aa7afa9cb8e2351bd3f8a7a2a0425b071f6790992b8c2a51d964b0161c1856697820eb52f55c97fcdc19c2ef7c66ccc23c77a28a34b216c429444343ea056f171399dc03d56a1131ba74d31fc1012d3deff0e43309fc9e3b88bec90a7680aa74ccd581e02eb436a0009fa62097513d0c9533256d81978fae39288edcb833739d2988ccf5a564bc00edd1ab0853b873cbab3ef227f11325d72dbe2f435351610d09d0f74e180df6eaa94651336e7713414e49956fcb68a973e8239e343684255efba0d1b149b22c2d81f1ac5eaccaab01ab108178e97eb8a45d5d6cdeca0d6b9af9f88cfee58935be6902ac7c6915d60548367d164990b142d472b9b5700191b1f978fbe071de646385dcf5cb7adf1ec70baef4061d2da93d2f5eef8b1081374d58ab54532755c1b8bf303584296145e9aad2e3ccef93f30da9c109db5cfe34", 0x1ab}], 0x2, 0x0, 0x0, 0x4090}, 0x0) sendmsg$alg(r2, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) read$alg(r2, &(0x7f0000003780)=""/4096, 0x1000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sysvipc/sem\x00', 0x0, 0x0) pread64(r6, 0x0, 0x0, 0xf27b) openat2$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x400480, 0x3, 0x14}, 0x18) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010100000000000000000a0000000900010073797a300000000050000000030a010200000000000000000a0000000900010073797a30000000000900030073797a3100000000080007006e6174001c00048008000140000000000800024000000000080002400eb489d814000000020a010800000027f00000000000000114000000110001000f000000000000"], 0xac}}, 0x0) socket(0x10, 0x2, 0x0) r7 = syz_open_procfs(r3, &(0x7f0000000140)='net/rt6_stats\x00') read$alg(r7, &(0x7f0000000e80)=""/4096, 0x1000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) 10.598599132s ago: executing program 2 (id=10143): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x200) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_tables_names\x00') syz_io_uring_setup(0x2335, &(0x7f00000002c0)={0x0, 0x79af, 0x3380, 0x1, 0x36, 0x0, r5}, &(0x7f0000000340), &(0x7f0000000040)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x30}}, 0x0) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x84400) mprotect(&(0x7f00001b5000/0x2000)=nil, 0x2000, 0x1) preadv2(r1, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1fee00}], 0x2, 0x0, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r6, &(0x7f0000004340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="310300200000000000400800000008000300", @ANYRES32=r8, @ANYBLOB="070006"], 0x2c}, 0x1, 0x0, 0x0, 0x400400c}, 0x4000010) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) ioctl$EVIOCGPROP(r9, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSMRU1(r9, 0x40047454, 0x0) 8.746316299s ago: executing program 2 (id=10148): r0 = socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) prlimit64(0x0, 0x8, &(0x7f00000001c0), 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) r3 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00220f"], 0x0}, 0x0) r4 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGNAME(r4, 0x80404806, &(0x7f00000001c0)) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0x7ffffffff000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00', 0x0}) sendto$packet(r5, &(0x7f0000000180)="0b032200e0ff25000200475400f6a13bb10000a8880008004803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r6}, 0x14) 6.027373988s ago: executing program 2 (id=10163): set_mempolicy(0x2, 0x0, 0xf5) socket$nl_generic(0x10, 0x3, 0x10) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x2, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc, 0x2}, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @rand_addr=0x64010102}, 0x10) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=0x0) timer_settime(r4, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000e80)="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", 0x266}, {&(0x7f0000000580)="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", 0x184}], 0x2, 0x0, 0x0, 0x4090}, 0x0) sendmsg$alg(r2, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) read$alg(r2, &(0x7f0000003780)=""/4096, 0x1000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) pread64(0xffffffffffffffff, 0x0, 0x0, 0xf27b) openat2$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x400480, 0x3, 0x14}, 0x18) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010100000000000000000a0000000900010073797a300000000050000000030a010200000000000000000a0000000900010073797a30000000000900030073797a3100000000080007006e6174001c00048008000140000000000800024000000000080002400eb489d814000000020a010800000027f00000000000000114000000110001000f000000000000"], 0xac}}, 0x0) socket(0x10, 0x2, 0x0) r6 = syz_open_procfs(r3, &(0x7f0000000140)='net/rt6_stats\x00') read$alg(r6, &(0x7f0000000e80)=""/4096, 0x1000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) 4.649745883s ago: executing program 3 (id=10172): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r4 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7f, 0x2) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x4) (async) write$UHID_CREATE2(r5, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x11, r5, 0x0) (async) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0cc5605, &(0x7f00000000c0)={0x0, @pix={0x0, 0x0, 0x35315258, 0x0, 0x0, 0x0, 0x7, 0x400}}) (async) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWCHAIN={0x74, 0x3, 0xa, 0x6a12eab2c6443048, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFTA_CHAIN_COUNTERS={0x4c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xffffffffffffffff}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x92}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7fff}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x7}]}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffc}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xd8}, 0x1, 0x0, 0x0, 0x80}, 0x40) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c0001800600010058c6000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async, rerun: 64) r6 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f0000000240)=0x0) (rerun: 64) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) (async) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x94}, 0x80, 0x0}, 0x0, 0x4040000, 0x1}) (async, rerun: 64) io_uring_enter(r6, 0x847ba, 0x0, 0xe, 0x0, 0x0) (async, rerun: 64) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24044815}, 0x0) 4.586745156s ago: executing program 3 (id=10173): r0 = socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) prlimit64(0x0, 0x8, &(0x7f00000001c0), 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) r3 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00220f"], 0x0}, 0x0) r4 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGNAME(r4, 0x80404806, &(0x7f00000001c0)) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0x7ffffffff000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00', 0x0}) sendto$packet(r5, &(0x7f0000000180)="0b032200e0ff25000200475400f6a13bb10000a8880008004803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r6}, 0x14) 4.452282941s ago: executing program 2 (id=10175): r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x0, 0x1, 0x401, 0x0, 0x92, 0x55, 0x6, 0x1000006, 0x4}, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0x30, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000003000000000000000800000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000ffffff7f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000045", @ANYRES32, @ANYBLOB="0000000000000000b7080000030000007b8af8ff00000000bfa200000000000007020000f8ffff", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000a500000018", @ANYRES32=r4, @ANYRES32=r4, @ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) clock_settime(0xfffffffb, &(0x7f0000000140)={0x77359400}) ftruncate(0xffffffffffffffff, 0x6) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r6, 0x4068aea3, &(0x7f0000000240)) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x0, 0x2) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r7, 0xae03, 0xbf) socket$alg(0x26, 0x5, 0x0) 4.289967033s ago: executing program 7 (id=10177): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x200) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) pread64(0xffffffffffffffff, &(0x7f0000001240)=""/102400, 0x19000, 0x18) syz_io_uring_setup(0x2335, &(0x7f00000002c0)={0x0, 0x79af, 0x3380, 0x1, 0x36}, &(0x7f0000000340), &(0x7f0000000040)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x30}}, 0x0) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x84400) mprotect(&(0x7f00001b5000/0x2000)=nil, 0x2000, 0x1) preadv2(r1, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1fee00}], 0x2, 0x0, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r5, &(0x7f0000004340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="310300200000000000400800000008000300", @ANYRES32=r7, @ANYBLOB="070006"], 0x2c}, 0x1, 0x0, 0x0, 0x400400c}, 0x4000010) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) ioctl$EVIOCGPROP(r8, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSMRU1(r8, 0x40047454, 0x0) 3.94996107s ago: executing program 5 (id=10178): r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_DEL_RULE(r0, 0x0, 0x4001) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='io\x00') lseek(r1, 0x9, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$KVM_CAP_HYPERV_DIRECT_TLBFLUSH(r1, 0x4068aea3, &(0x7f00000001c0)) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a32"], 0x54}}, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000480)=0x2) close_range(r3, 0xffffffffffffffff, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x3c, 0x1) sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x24000008}, 0xc, &(0x7f00000000c0)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1408d790}]}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELSET={0x1c, 0xb, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x187}]}, @NFT_MSG_NEWFLOWTABLE={0x68, 0x16, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELCHAIN={0x80, 0x5, 0xa, 0xb00, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_COUNTERS={0x58, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x6}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xffff}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x8}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xe}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x3000000}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xeb0f}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0xcc, 0x18, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_HOOK={0x98, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'lo\x00'}, {0x14, 0x1, 'macvtap0\x00'}, {0x14, 0x1, 'batadv0\x00'}, {0x14, 0x1, 'netdevsim0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6erspan0\x00'}, {0x14, 0x1, 'macvlan0\x00'}, {0x14, 0x1, 'veth1_macvtap\x00'}]}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x238}, 0x1, 0x0, 0x0, 0x2804080d}, 0x8000) r4 = socket$nl_generic(0x10, 0x3, 0x10) write$tun(r1, &(0x7f0000000940)=ANY=[@ANYBLOB="000008e2b8f5d7950071ff50fbfaedf92f5ddd9da696427b4067ae5a09bfc673f1bd3f69563d131e292266e4609510b91581fe421d09e2aca5183267d3354a6db58a21625189199b3b6327ae8556d97689608ef0b190a138293ffbd9d73c075ecd7a51e27087f5aa2b54c964b855525970b031b03ee5388d94df3d8541a9951133546f18c124b66ca005e646b2373bdfcdd3ceb5a1e12f1516ee05a8017c9207429602f607b9d00158fd39be7a666b95879352cebaf841ca7ca895993f63f5440c2633037599d047f82dc2f5cfdbefc5c6010f333a3f157799f1095794d63fe228dc3d8c40897ab16999adc2134bd8b8430000"], 0xc) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)={0x2c, r5, 0x1, 0x0, 0x0, {0x1a}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r7, 0xc02c564a, &(0x7f0000000080)={0x80000002, 0x32314742, 0x2, @discrete={0x7, 0xbe78}}) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c007a35d45d97bd289340a548159500001000010400000000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000000004000000140012800b00010062726964676500000400028008000300", @ANYRES32=0x0, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x20044001}, 0x240080d0) r8 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) readv(r8, &(0x7f0000000300)=[{0x0}, {&(0x7f0000019380)=""/4096, 0x1000}], 0x2) sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a38000000060a01040000000000000000020000000900020073797a32000000000900010073797a30000000000c0006"], 0x60}, 0x1, 0x0, 0x0, 0x20040804}, 0x0) 3.674386097s ago: executing program 6 (id=10180): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[], 0x1e0}, 0x1, 0x0, 0x0, 0x1}, 0x4000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001000010025bd706086dbdf2500000000", @ANYRES32=0x0, @ANYBLOB="158804000300040008001b000000000008000d"], 0x30}, 0x1, 0x0, 0x0, 0x46801}, 0x4000000) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) sendmsg$RDMA_NLDEV_CMD_RES_GET(r2, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000000914100027bd7000fcdbdf5af22cdf00020000100800010001000300000001ea0200000a08000100020000000800010000000000"], 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x28040800) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000300)={0x42, 0x3}, 0x10) r4 = openat$cgroup_ro(r2, &(0x7f00000002c0)='cpuacct.stat\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x4c, &(0x7f0000000000), 0x4) shutdown(r5, 0x0) r7 = openat$uinput(0xffffff9c, &(0x7f0000000180), 0x802, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, 0x0, 0x60044090) r9 = socket(0x10, 0x2, 0xfffff801) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x16c, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r11, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@TCA_STAB={0x148, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0x8, 0x3, 0x80000000, 0x1, 0x400, 0x9, 0x4}}, {0xc, 0x2, [0x6, 0x6, 0x7, 0x80]}}, {{0x1c, 0x1, {0x9, 0x7, 0x2, 0x7fff, 0x1, 0x3af, 0x4, 0x2}}, {0x8, 0x2, [0x7, 0x3]}}, {{0x1c, 0x1, {0x80, 0x8, 0x3, 0x1, 0x2, 0x40, 0x9984, 0x1}}, {0x6, 0x2, [0x0]}}, {{0x1c, 0x1, {0x8, 0x4, 0xfffb, 0xc21, 0x2, 0x0, 0xc00000, 0x3}}, {0xa, 0x2, [0x46ef, 0x800, 0x0]}}, {{0x1c, 0x1, {0x4, 0x8, 0x2, 0x0, 0x0, 0x1000, 0x1, 0x4}}, {0xc, 0x2, [0x4, 0x765, 0x4, 0xc]}}, {{0x1c, 0x1, {0x2, 0xd, 0xd, 0x3ff, 0x2, 0x3ff, 0x7fffffff, 0x7}}, {0x12, 0x2, [0x1, 0x4, 0x9, 0x0, 0x5, 0x3, 0x631]}}, {{0x1c, 0x1, {0x1, 0xf, 0x3, 0xb, 0x2, 0x1, 0x2, 0x5}}, {0xe, 0x2, [0x3, 0x5, 0x6, 0x8, 0x1]}}, {{0x1c, 0x1, {0x0, 0x2, 0x6, 0x3, 0x1, 0x7, 0x4, 0x3}}, {0xa, 0x2, [0x9, 0x8000, 0x7]}}]}]}, 0x16c}}, 0x44080) sendmsg$nl_route_sched(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x20, 0x70bd25, 0x0, {0x60, 0x0, 0x0, r11, {}, {0x0, 0xa}, {0xfff1, 0x10}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_QUANTUM={0x8, 0x2, 0xf2}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x55}, 0x4000) ioctl$UI_DEV_SETUP(r7, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_SET_ABSBIT(r7, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r7, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r7, 0x5501) ioctl$UI_DEV_DESTROY(r7, 0x5502) r12 = syz_open_dev$audion(&(0x7f0000000040), 0x200, 0x2000) r13 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/kernel/kexec_crash_size', 0xc1200, 0x3a) ioctl$sock_kcm_SIOCKCMATTACH(r12, 0x89e0, &(0x7f00000000c0)={r4, r13}) write$cgroup_int(r4, &(0x7f0000000000), 0xffffff6a) sendfile(r6, r4, 0x0, 0xffffffff000) 3.583899205s ago: executing program 5 (id=10181): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000, 0x2, &(0x7f0000005000/0x1000)=nil) r2 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r2, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f00000007c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000140)=r3, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x7ffe, 0x0, 0x7, 0x1, 0xfffffe0000000001, 0x6c, 0xfffffffb}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x4000)=nil, 0x0, 0x3, 0x11, 0xffffffffffffffff, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x20000, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r6, 0x4008ae90, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000000000000100"/26]) ioctl$KVM_SET_NESTED_STATE(r6, 0x4080aebf, &(0x7f0000000340)={{0x0, 0x0, 0xfffffffffffffe6d, {0xdddd0000, 0x100000}}, "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", "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"}) ioctl$KVM_GET_NESTED_STATE(r6, 0xc080aebe, &(0x7f00000024c0)={{0x1, 0x0, 0xfffffffffffffec0, {0xdddd1000, 0x1000, 0x2}}, "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4ff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001700", "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000"}) 2.921268961s ago: executing program 6 (id=10182): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="050000000000080000000001fcffff", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0000000001"], 0x48}}, 0x0) sendmsg$can_bcm(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="050000000300"/16, @ANYRES64=0x0, @ANYRES64=r1, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x0) 2.838162578s ago: executing program 6 (id=10183): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c000000200025a729bd7000fddbdf250a0010d0ff00000102000100640106000000000014000200000000004600000000000000000000011400110076"], 0x4c}, 0x1, 0x0, 0x0, 0x840}, 0x4000000) 2.529950472s ago: executing program 6 (id=10184): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f4, 0x0, 0x9403, 0x0, 0x110, 0x2c0, 0x22c, 0x3d8, 0x3d8, 0x22c, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xec, 0x110, 0x0, {}, [@common=@mh={{0x24}, {"d274"}}, @common=@hl={{0x24}, {0x2, 0x85}}]}, @common=@unspec=@CLASSIFY={0x24}}, {{@uncond, 0x0, 0xd4, 0x11c, 0x0, {}, [@common=@frag={{0x30}, {[0x3, 0x747], 0x8, 0x82b53f46307aa93c, 0x3}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x3, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x350) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000005d40), 0x2, 0x0) ioctl$VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000640)=@multiplanar_userptr={0x10f0, 0x9, 0x4, 0x8, 0x7ffe, {}, {0x2, 0x8, 0x6, 0x80, 0x8, 0x1}, 0x805, 0x2, {0x0}, 0x100}) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000380), 0x3) 2.408292938s ago: executing program 3 (id=10185): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) close(r1) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r4) (async) r5 = socket$unix(0x1, 0x1, 0x0) (async) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r6, 0x11c, 0x4, &(0x7f0000000100)=""/146, &(0x7f00000001c0)=0x28) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) prctl$PR_SET_VMA(0x3c, 0x0, &(0x7f0000bda000/0x4000)=nil, 0x4000, 0x0) (async) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, r8, {}, {0xffe6, 0xb}, {0x7, 0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x24, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0xfffffc01}}, @TCA_HTB_DIRECT_QLEN={0x8}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20008021}, 0x4008050) (async) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) r9 = syz_open_dev$mouse(&(0x7f0000000080), 0x26, 0x60000) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r9, 0x4058534c, &(0x7f0000000380)={0x40, 0x6, 0x117, 0xb, 0x3e, 0x7cc5}) 2.304125152s ago: executing program 6 (id=10186): set_mempolicy(0x2, 0x0, 0xf5) socket$nl_generic(0x10, 0x3, 0x10) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x2, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc, 0x2}, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @rand_addr=0x64010102}, 0x10) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=0x0) timer_settime(r4, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000e80)="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", 0x266}, {&(0x7f0000000580)="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", 0x184}], 0x2, 0x0, 0x0, 0x4090}, 0x0) sendmsg$alg(r2, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) read$alg(r2, &(0x7f0000003780)=""/4096, 0x1000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) pread64(0xffffffffffffffff, 0x0, 0x0, 0xf27b) openat2$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x400480, 0x3, 0x14}, 0x18) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010100000000000000000a0000000900010073797a300000000050000000030a010200000000000000000a0000000900010073797a30000000000900030073797a3100000000080007006e6174001c00048008000140000000000800024000000000080002400eb489d814000000020a010800000027f00000000000000114000000110001000f000000000000"], 0xac}}, 0x0) socket(0x10, 0x2, 0x0) r6 = syz_open_procfs(r3, &(0x7f0000000140)='net/rt6_stats\x00') read$alg(r6, &(0x7f0000000e80)=""/4096, 0x1000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) 2.123620751s ago: executing program 2 (id=10187): r0 = socket(0x2, 0x80805, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89fc, &(0x7f0000000100)={'gretap0\x00', 0x0}) 2.110441073s ago: executing program 7 (id=10188): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x3, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x40004}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x94) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) dup(0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002200)={0x40, 0x3, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @rand_addr=0x64018102}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x4, 0x1, 0x2f}}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040004}, 0x48044) r3 = fanotify_init(0x200, 0x0) fanotify_mark(r3, 0x1, 0x12, r1, 0x0) (fail_nth: 1) 1.918002509s ago: executing program 3 (id=10189): r0 = syz_clone(0x80, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) wait4(r1, 0x0, 0x40000000, 0x0) waitid(0x0, r0, 0x0, 0x4, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r3 = ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00) ioctl$UFFDIO_WRITEPROTECT(r3, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000fff000/0x1000)=nil, 0x1000}}) syz_emit_ethernet(0x5e, &(0x7f0000000540)={@random="b12a73e9dc0f", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x28, 0x3a, 0xff, @initdev={0xfe, 0x4, '\x00', 0x0, 0x0}, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @private0, @loopback}}}}}}, 0x0) 1.917191201s ago: executing program 2 (id=10190): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x3, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x40004}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_usb_connect(0x0, 0x46, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000f3c7c820da059a0095620102030109023400010000000009049200030f6276000905010000000000000705e37e1b82e60905f202"], 0x0) close(r2) r3 = syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0) getpriority(0x1, r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x324) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x94) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r5 = dup(0xffffffffffffffff) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002200)={0x40, 0x3, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @rand_addr=0x64018102}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x4, 0x1, 0x2f}}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040004}, 0x48044) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}, 0x2}) r7 = fanotify_init(0x200, 0x0) fanotify_mark(r7, 0x1, 0x12, r4, 0x0) 1.617195515s ago: executing program 5 (id=10191): r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_DEL_RULE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000d80)=ANY=[@ANYBLOB="30040000f40300012cbd7000fcdbdf25070000000000000011000000020000007c00000005000000c5000000090000000600000000000000020000000500000050000000912b000001040000018000000100000008000000ff0000000200000005000000ff01000005000000b10f0000009c3b000200000003000000bb0000000100000006000000f8ffffff9b020000070000002d0000007fffffff020000000100010000000000de00000006000000000000002603000007000000070c0000000000000700000009000000000001000200000007000000080000000700000005000000020000000b000000050000000500000007000000dca3000007000000b5310000000000800c000000020000000f000000020000008f000000ff00000014f50000060000000200000080000000feffffff030000000200000081ffffffffffffff070000000500000005000000080000000180000044000000050000000700000006000000040000000080000003000000050000000800000005000000050000000800000008000000b90c000000100000010000000400000001000000e1c4000000020000000000000300000000000000000000000700000006000000030000000100000000000000010000000d0f00000e000000800000000100000001040000050000000200000008000000090000000f000000070000000a00000001000000000000000004000004000000fffffeff0200000200000008000000010400000700000026a4000004000000ad0000000000383a0400000004000000030000001800000001000000e600000001010000030000004dc20000050000000500000002000000400000009254ffff020000000600000050ffffff06000000ff7f00000000000009000000f7ffffffff070000050000e609000000080000000100000005000000e800000008000000fe4f000006000000080000009366bb2c050000000100000005000000b600000003000000feffffff07000000080000000c0000000200000005000000090000006a570000b2000000ff010000008000000100000000010000060000000500000002000000060000000a000000480000003c1900000c0000000200000001040000000001000500000005000000410000009dbb0000060000000400000008000000030000000000000002000000020000006f0900000900000000040000ff03000006000000d4ab1047ff0300000e000000f8ffffff080000000200000003000000080000000100000004000000090000002e00000000004003d031000001000000030000000200000004000000030000000600000008000000040000000300000009000000da9107aa090000000500000008000000090000000300000004000000fcffffff00000000ff000000c40000000800000001000000c900000068000000100000001f5b2c2f002e7b5c00242c5c285e290034d202c0ebcd9ff2999f830e37ca8f0f3cde7878761508dc27ded6a22054a5584a12f27eb9344f06dac416960298e21c5f54f648d3e52b5ee59205822647379b25703b586101a5580f8a7b45293f8a51e43b23b6539db3e3ecfb52ae7a31ef16b9b385101600a76c30a066131aa7a99a7301e4782e00a8ff0a0aaba0789c24f60ffee4d6141675e0255903b3c0afce033730b1f70d9b165ffa4e15d2834c305d84a1a0ab363acd83e910c5f456add384fe63857983774234dc562ae917ef3e32f42f6a27bfedacf239a637a3d0f57acc5b48b060d0d4c6a5f34c7514eafd42e07c62b1267bf26cf63e2495cdfacfe6bff547cfa5cb1285cbfb49144f5dab275e1eeac4f8d0f65b7d4aa59f92397200cd9a424a200b9e9d6ff802f9af45121b01bf24920b70882272f267b71254d39fc1eec90d1416076b9ea5157f41919202947afc48414066000000000000004ba3301a3823dbd06a407ec18c24492179e63935ffa2b0da06b0a3a94ea0bb7d65aa651678ed60727da8e95a3ef7578019a7fb1facc46fa07dbc20fd9dc4f957305feff2dc82500e4afe3683ae6d9c1e488de8f5bf6e9c26f0794a8d49446001d21525542f3dc9067a544c503a717debfe8adc2c3fc14654749a9b1b3b5ebfde8ae01e8db63e72645f3c47ba7e0f1e720ee4e9723aeef97fd9b63d2d27987bd35d450451f9affa2df794a3bd1c7f7fc484f3ab2d1321ce3c3477661d6c93e00e060823"], 0x430}, 0x1, 0x0, 0x0, 0x8804}, 0x4001) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='io\x00') lseek(r1, 0x9, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$KVM_CAP_HYPERV_DIRECT_TLBFLUSH(r1, 0x4068aea3, &(0x7f00000001c0)) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a32"], 0x54}}, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000480)=0x2) close_range(r3, 0xffffffffffffffff, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x3c, 0x1) sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x24000008}, 0xc, &(0x7f00000000c0)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1408d790}]}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELSET={0x1c, 0xb, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x187}]}, @NFT_MSG_NEWFLOWTABLE={0x68, 0x16, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELCHAIN={0x80, 0x5, 0xa, 0xb00, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_COUNTERS={0x58, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x6}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xffff}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x8}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xe}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x3000000}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xeb0f}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0xcc, 0x18, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_HOOK={0x98, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'lo\x00'}, {0x14, 0x1, 'macvtap0\x00'}, {0x14, 0x1, 'batadv0\x00'}, {0x14, 0x1, 'netdevsim0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6erspan0\x00'}, {0x14, 0x1, 'macvlan0\x00'}, {0x14, 0x1, 'veth1_macvtap\x00'}]}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x238}, 0x1, 0x0, 0x0, 0x2804080d}, 0x8000) r4 = socket$nl_generic(0x10, 0x3, 0x10) write$tun(r1, &(0x7f0000000940)=ANY=[@ANYBLOB="000008e2b8f5d7950071ff50fbfaedf92f5ddd9da696427b4067ae5a09bfc673f1bd3f69563d131e292266e4609510b91581fe421d09e2aca5183267d3354a6db58a21625189199b3b6327ae8556d97689608ef0b190a138293ffbd9d73c075ecd7a51e27087f5aa2b54c964b855525970b031b03ee5388d94df3d8541a9951133546f18c124b66ca005e646b2373bdfcdd3ceb5a1e12f1516ee05a8017c9207429602f607b9d00158fd39be7a666b95879352cebaf841ca7ca895993f63f5440c2633037599d047f82dc2f5cfdbefc5c6010f333a3f157799f1095794d63fe228dc3d8c40897ab16999adc2134bd8b8430000"], 0xc) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)={0x2c, r5, 0x1, 0x0, 0x0, {0x1a}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r7, 0xc02c564a, &(0x7f0000000080)={0x80000002, 0x32314742, 0x2, @discrete={0x7, 0xbe78}}) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c007a35d45d97bd289340a548159500001000010400000000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000000004000000140012800b00010062726964676500000400028008000300", @ANYRES32=0x0, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x20044001}, 0x240080d0) r8 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) readv(r8, &(0x7f0000000300)=[{0x0}, {&(0x7f0000019380)=""/4096, 0x1000}], 0x2) sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a38000000060a01040000000000000000020000000900020073797a32000000000900010073797a30000000000c0006"], 0x60}, 0x1, 0x0, 0x0, 0x20040804}, 0x0) 1.534581012s ago: executing program 7 (id=10192): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x3, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x40004}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x94) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) dup(0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002200)={0x40, 0x3, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @rand_addr=0x64018102}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x4, 0x1, 0x2f}}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040004}, 0x48044) r3 = fanotify_init(0x200, 0x0) fanotify_mark(r3, 0x1, 0x12, r1, 0x0) 1.45927604s ago: executing program 3 (id=10193): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[], 0x1e0}, 0x1, 0x0, 0x0, 0x1}, 0x4000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001000010025bd706086dbdf2500000000", @ANYRES32=0x0, @ANYBLOB="158804000300040008001b000000000008000d"], 0x30}, 0x1, 0x0, 0x0, 0x46801}, 0x4000000) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) sendmsg$RDMA_NLDEV_CMD_RES_GET(r2, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000000914100027bd7000fcdbdf5af22cdf00020000100800010001000300000001ea0200000a08000100020000000800010000000000"], 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x28040800) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000300)={0x42, 0x3}, 0x10) r4 = openat$cgroup_ro(r2, &(0x7f00000002c0)='cpuacct.stat\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x4c, &(0x7f0000000000), 0x4) shutdown(r5, 0x0) r7 = openat$uinput(0xffffff9c, &(0x7f0000000180), 0x802, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, 0x0, 0x60044090) r9 = socket(0x10, 0x2, 0xfffff801) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x16c, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r11, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@TCA_STAB={0x148, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0x8, 0x3, 0x80000000, 0x1, 0x400, 0x9, 0x4}}, {0xc, 0x2, [0x6, 0x6, 0x7, 0x80]}}, {{0x1c, 0x1, {0x9, 0x7, 0x2, 0x7fff, 0x1, 0x3af, 0x4, 0x2}}, {0x8, 0x2, [0x7, 0x3]}}, {{0x1c, 0x1, {0x80, 0x8, 0x3, 0x1, 0x2, 0x40, 0x9984, 0x1}}, {0x6, 0x2, [0x0]}}, {{0x1c, 0x1, {0x8, 0x4, 0xfffb, 0xc21, 0x2, 0x0, 0xc00000, 0x3}}, {0xa, 0x2, [0x46ef, 0x800, 0x0]}}, {{0x1c, 0x1, {0x4, 0x8, 0x2, 0x0, 0x0, 0x1000, 0x1, 0x4}}, {0xc, 0x2, [0x4, 0x765, 0x4, 0xc]}}, {{0x1c, 0x1, {0x2, 0xd, 0xd, 0x3ff, 0x2, 0x3ff, 0x7fffffff, 0x7}}, {0x12, 0x2, [0x1, 0x4, 0x9, 0x0, 0x5, 0x3, 0x631]}}, {{0x1c, 0x1, {0x1, 0xf, 0x3, 0xb, 0x2, 0x1, 0x2, 0x5}}, {0xe, 0x2, [0x3, 0x5, 0x6, 0x2, 0x1]}}, {{0x1c, 0x1, {0x0, 0x2, 0x6, 0x3, 0x1, 0x7, 0x4, 0x3}}, {0xa, 0x2, [0x9, 0x8000, 0x7]}}]}]}, 0x16c}}, 0x44080) sendmsg$nl_route_sched(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x20, 0x70bd25, 0x0, {0x60, 0x0, 0x0, r11, {}, {0x0, 0xa}, {0xfff1, 0x10}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_QUANTUM={0x8, 0x2, 0xf2}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x55}, 0x4000) ioctl$UI_DEV_SETUP(r7, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_SET_ABSBIT(r7, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r7, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r7, 0x5501) ioctl$UI_DEV_DESTROY(r7, 0x5502) r12 = syz_open_dev$audion(&(0x7f0000000040), 0x200, 0x2000) r13 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/kernel/kexec_crash_size', 0xc1200, 0x3a) ioctl$sock_kcm_SIOCKCMATTACH(r12, 0x89e0, &(0x7f00000000c0)={r4, r13}) write$cgroup_int(r4, &(0x7f0000000000), 0xffffff6a) sendfile(r6, r4, 0x0, 0xffffffff000) 1.199685036s ago: executing program 7 (id=10194): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="050000000000080000000001fcffff", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0000000001"], 0x48}}, 0x0) sendmsg$can_bcm(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="050000000300"/16, @ANYRES64=0x0, @ANYRES64=r1, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x0) 1.131682527s ago: executing program 5 (id=10195): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x8880, 0x0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, 0x0, 0x4000004) (async) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000300), 0x4) (async, rerun: 64) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) (rerun: 64) r2 = socket$kcm(0x10, 0x2, 0x0) (async) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x0) (async) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) (async, rerun: 64) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (rerun: 64) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'lo\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x801, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r6, 0x0, 0x42005}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x19}, @IFLA_XDP_FD={0x8}]}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0xd3b2}]}, 0x3c}}, 0x8080) (async) r7 = socket(0x400000000010, 0x3, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000c80)={@cgroup, 0xffffffffffffffff, 0x9, 0x21}, 0x20) (async) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0x48c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r9, {0xb, 0x7}, {}, {0xffff, 0x8}}, [@TCA_RATE={0x6, 0x5, {0x0, 0x5}}, @filter_kind_options=@f_fw={{0x7}, {0x458, 0x2, [@TCA_FW_POLICE={0x454, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xa45, 0xcd78, 0x2, 0x5, 0x9, 0x8, 0x7, 0x80000001, 0x8, 0x7ffffffb, 0x3, 0x10000, 0x8, 0x2, 0x0, 0x671, 0x7fffffff, 0x200, 0x8, 0x1ff, 0x8, 0x0, 0x1, 0x10000000, 0x101, 0x6, 0x4, 0x92f2, 0x1, 0x8, 0x0, 0x8001, 0x3, 0x1ff, 0x5, 0xfffffffb, 0x7f, 0x80000001, 0x8, 0x0, 0x8, 0x3, 0x8, 0x4, 0xfffffffa, 0x9, 0xb02, 0x9c8, 0x1, 0x7fff, 0x1, 0x9, 0xe, 0x66c, 0x6, 0x5, 0x1, 0x7, 0x4, 0x7, 0xff, 0x0, 0x7ff, 0x9, 0x2, 0xbe9, 0x8, 0x2, 0x401, 0x80000000, 0x10000, 0x4, 0x5, 0x9, 0x9, 0x7, 0x9, 0x7, 0x4c089cff, 0x8, 0x7, 0x7, 0x3, 0xf, 0x0, 0x8, 0x7d, 0xf, 0x7, 0x5, 0x1000, 0x80000001, 0xb8, 0x2, 0x5, 0xffff, 0x6151, 0x6, 0x0, 0x9b7, 0x56, 0x3, 0x1, 0x3, 0x3, 0x1, 0x40, 0x6, 0x9, 0x8, 0x6, 0xff27, 0xfffff800, 0xfff, 0x3, 0x5, 0x6, 0x1800000, 0xffff0566, 0xa, 0x3ff, 0x6, 0x7, 0x6ff3, 0xffffffff, 0x9d34, 0x83f, 0x0, 0x3, 0x2, 0x4, 0x9, 0x3, 0x6, 0x3ff, 0x0, 0xcf65, 0x1, 0x6, 0x5, 0xb7d, 0x0, 0x8, 0xe1, 0x1ff, 0x7ff, 0x249, 0x3, 0x3, 0x9, 0x8001, 0x8, 0x0, 0xfff, 0xb0, 0xffff7c98, 0x800, 0xf9, 0x2, 0xfffffff9, 0x1, 0x80000001, 0x6, 0x1000, 0x0, 0x9, 0x1000, 0x1, 0xef, 0x80, 0x3, 0x7, 0x10000, 0x3, 0x8c2, 0x5, 0x7f106ec6, 0x8, 0x0, 0x9, 0x101, 0xb, 0x3, 0x0, 0x26, 0x2, 0xa, 0x1, 0x507a5961, 0x800, 0x85, 0x80000001, 0x6, 0x4, 0x3, 0x2, 0x1, 0xfffffff9, 0x200, 0x1000, 0xff, 0x81, 0x9, 0x9, 0x5, 0xfab, 0x55, 0x7, 0xffff0062, 0x2b, 0x8000, 0x6, 0x7, 0x2, 0x4, 0x4, 0x9, 0x1000, 0x6, 0xffff5339, 0x1, 0x1, 0x0, 0x0, 0x4, 0x4, 0x39ee, 0x151, 0x5, 0x2, 0x5, 0x2, 0xfffffffe, 0x483a, 0x2, 0x102, 0x1, 0x2, 0x0, 0x80000001, 0x0, 0x9, 0x6, 0x5, 0x6, 0xcaf9, 0x8, 0x0, 0xfffffffc, 0x10000, 0x401, 0x2, 0x7, 0x7fffffff, 0x80000001, 0x1]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7}, @TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x1, 0x2, 0x3, 0x0, {0x5, 0x1, 0x0, 0x7, 0xad, 0x7f}, {0x1, 0x2, 0x3ff, 0x0, 0x5, 0x2}, 0x401, 0xc}}, @TCA_POLICE_RESULT={0x8, 0x5, 0xec9}]}]}}]}, 0x48c}, 0x1, 0x0, 0x0, 0x1}, 0x800) 1.028403471s ago: executing program 3 (id=10196): r0 = socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) prlimit64(0x0, 0x8, &(0x7f00000001c0), 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$packet_int(r0, 0x107, 0xa, 0x0, 0x0) r3 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00220f"], 0x0}, 0x0) r4 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGNAME(r4, 0x80404806, &(0x7f00000001c0)) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0x7ffffffff000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00', 0x0}) sendto$packet(r5, &(0x7f0000000180)="0b032200e0ff25000200475400f6a13bb10000a8880008004803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r6}, 0x14) 928.572385ms ago: executing program 7 (id=10197): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000001240)={0x24, 0x2, 0x1, 0x801, 0x0, 0x0, {0x2, 0x0, 0x7}, [@CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x3}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008844}, 0x20000080) (fail_nth: 6) 306.734928ms ago: executing program 6 (id=10198): r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x0, 0x1, 0x401, 0x0, 0x92, 0x55, 0x6, 0x1000006, 0x4}, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0x30, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000003000000000000000800000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000ffffff7f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000004568", @ANYRES32, @ANYBLOB="0000000000000000b7080000030000007b8af8ff00000000bfa200000000000007020000f8ffff", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000a500000018", @ANYRES32=r4, @ANYRES32=r4, @ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) clock_settime(0xfffffffb, &(0x7f0000000140)={0x77359400}) ftruncate(0xffffffffffffffff, 0x6) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r6, 0x4068aea3, &(0x7f0000000240)) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x0, 0x2) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r7, 0xae03, 0xbf) socket$alg(0x26, 0x5, 0x0) 189.785575ms ago: executing program 7 (id=10199): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x200) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000001240)=""/102400, 0x19000, 0x18) syz_io_uring_setup(0x2335, &(0x7f00000002c0)={0x0, 0x79af, 0x3380, 0x1, 0x36}, &(0x7f0000000340), &(0x7f0000000040)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x30}}, 0x0) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x84400) mprotect(&(0x7f00001b5000/0x2000)=nil, 0x2000, 0x1) preadv2(r1, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1fee00}], 0x2, 0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r4, &(0x7f0000004340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="310300200000000000400800000008000300", @ANYRES32=r6, @ANYBLOB="070006"], 0x2c}, 0x1, 0x0, 0x0, 0x400400c}, 0x4000010) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) ioctl$EVIOCGPROP(r7, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSMRU1(r7, 0x40047454, 0x0) 166.069496ms ago: executing program 5 (id=10200): r0 = socket(0x2, 0x3, 0xff) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @multicast1}, 0x10) sendmmsg$unix(r0, &(0x7f0000004840)=[{{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f00000008c0)="166da1949ba0ee9ee511f385427169498f9565a1", 0x14}], 0x1, 0x0, 0x11000}}], 0x1, 0x0) 0s ago: executing program 5 (id=10201): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000008540)=[{{&(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000300)=[{&(0x7f00000002c0)="d3975e833992421929a987f3c94ca1dff5cf3bdea47ecfcf8bc417bd7893234478aae6ea7151e5ef21f8c9b7663b03832c6149ef4db8d1a6e5", 0x39}], 0x1, &(0x7f0000002900)=[@rights={{0x2c, 0x1, 0x1, [r1, r0, 0xffffffffffffffff, 0xffffffffffffffff, r1, r0, r0, r1]}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @rights={{0x14, 0x1, 0x1, [r1, 0xffffffffffffffff]}}, @cred={{0x18}}, @cred={{0x18}}], 0xb8, 0x24000810}}, {{&(0x7f00000041c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000008440)=[{&(0x7f0000004240)="6b38c4b99fb288b49bfc46bc3558b9216d44cd2eba16c17b4d4695643b2503ea94ba9b85a0d77a7a6792db2bf15517f4828ee7ce35ee98831e52dbcb3653713d33272760c124a51d70119f9e2d7729687f6d1d5535fe4d8b68d4236765c1715295", 0x61}, {&(0x7f0000006340)="5347306b4054ac691c662901ab42e72598ae559b922e9765b6dad9df00", 0x1d}, {&(0x7f0000008400)="861d86ef30e4aad8189cf0d9364abe04d7b803b77b0fa2b9867fed84c93f43cf06a67c", 0x23}], 0x3, &(0x7f00000084c0)=[@cred={{0x18, 0x1, 0x2, {0xffffffffffffffff}}}, @cred={{0x18}}, @cred={{0x18}}], 0x48, 0x24000000}}], 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_GET(r2, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000640), 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000440), 0x103940) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x4058534c, &(0x7f0000000180)={0x80, 0x2a, 0x3}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x4058534c, &(0x7f0000000040)={0x80, 0x18, 0x2, 0xfffffff7, 0x0, 0x9}) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x94a12ec1) openat$dma_heap(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r4 = socket$inet6(0xa, 0x800, 0x3ff) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @loopback={0xff00000000000000}, 0x400}, 0x1c) syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79ab, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000100)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_setup(0x10a, &(0x7f0000000680)={0x0, 0xe103, 0x8, 0x2, 0x2d, 0x0, r2}, &(0x7f0000000080), &(0x7f0000000140)) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, 0x7}) write$UHID_CREATE2(r6, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118) kernel console output (not intermixed with test programs): Number=3 [ 2518.245878][ T9] usb 6-1: USB disconnect, device number 87 [ 2518.282686][T10635] usb 2-1: Product: syz [ 2518.302592][T10635] usb 2-1: Manufacturer: syz [ 2518.328270][T10635] usb 2-1: SerialNumber: syz [ 2518.363320][T10635] pwc: Philips PCVC750K (ToUCam Pro Scan) USB webcam detected. [ 2518.659210][ T9687] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2518.681465][ T9687] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2518.926328][T10635] pwc: Failed to set LED on/off time (-71) [ 2518.935633][T10635] pwc: send_video_command error -71 [ 2518.946481][T10635] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 2518.964450][T10635] Philips webcam 2-1:2.0: probe with driver Philips webcam failed with error -71 [ 2518.994906][T10635] usb 2-1: USB disconnect, device number 72 [ 2519.308560][ T9717] netlink: 'syz.6.9725': attribute type 1 has an invalid length. [ 2519.385634][ T9717] 8021q: adding VLAN 0 to HW filter on device bond2 [ 2519.428829][ T9717] netlink: 'syz.6.9725': attribute type 10 has an invalid length. [ 2519.430613][ T9721] bond2: (slave dummy0): making interface the new active one [ 2519.436747][ T9717] netlink: 40 bytes leftover after parsing attributes in process `syz.6.9725'. [ 2519.527982][ T9721] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 2519.536672][T10635] usb 6-1: new high-speed USB device number 88 using dummy_hcd [ 2519.544753][ C0] raw-gadget.0 gadget.5: ignoring, device is not running [ 2519.564360][ T9725] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9729'. [ 2519.588856][ T9725] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9729'. [ 2519.698728][T10635] usb 6-1: device descriptor read/64, error -32 [ 2519.885131][ T9735] FAULT_INJECTION: forcing a failure. [ 2519.885131][ T9735] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2519.928630][ T9735] CPU: 1 UID: 0 PID: 9735 Comm: syz.1.9734 Not tainted syzkaller #0 PREEMPT(full) [ 2519.928654][ T9735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2519.928665][ T9735] Call Trace: [ 2519.928673][ T9735] [ 2519.928683][ T9735] dump_stack_lvl+0x189/0x250 [ 2519.928721][ T9735] ? __pfx____ratelimit+0x10/0x10 [ 2519.928748][ T9735] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2519.928773][ T9735] ? __pfx__printk+0x10/0x10 [ 2519.928793][ T9735] ? __might_fault+0xb0/0x130 [ 2519.928831][ T9735] should_fail_ex+0x414/0x560 [ 2519.928867][ T9735] _copy_from_iter+0x1de/0x1790 [ 2519.928897][ T9735] ? rcu_is_watching+0x15/0xb0 [ 2519.928924][ T9735] ? kmalloc_reserve+0xbd/0x290 [ 2519.928945][ T9735] ? __pfx__copy_from_iter+0x10/0x10 [ 2519.928970][ T9735] ? __build_skb_around+0x262/0x3f0 [ 2519.928993][ T9735] ? netlink_sendmsg+0x642/0xb30 [ 2519.929012][ T9735] ? skb_put+0x11b/0x210 [ 2519.929036][ T9735] netlink_sendmsg+0x6b2/0xb30 [ 2519.929066][ T9735] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2519.929090][ T9735] ? __import_iovec+0x5d4/0x7f0 [ 2519.929111][ T9735] ? aa_sock_msg_perm+0xf1/0x1d0 [ 2519.929140][ T9735] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2519.929160][ T9735] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2519.929182][ T9735] __sock_sendmsg+0x21c/0x270 [ 2519.929213][ T9735] ____sys_sendmsg+0x505/0x830 [ 2519.929241][ T9735] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2519.929280][ T9735] ___sys_sendmsg+0x21f/0x2a0 [ 2519.929305][ T9735] ? __pfx____sys_sendmsg+0x10/0x10 [ 2519.929362][ T9735] ? __fget_files+0x2a/0x420 [ 2519.929380][ T9735] ? __fget_files+0x3a0/0x420 [ 2519.929408][ T9735] __sys_sendmsg+0x164/0x220 [ 2519.929433][ T9735] ? __pfx___sys_sendmsg+0x10/0x10 [ 2519.929533][ T9735] ? __pfx_ksys_write+0x10/0x10 [ 2519.929567][ T9735] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 2519.929600][ T9735] ? lockdep_hardirqs_on+0x9c/0x150 [ 2519.929632][ T9735] __do_fast_syscall_32+0xb6/0x2b0 [ 2519.929653][ T9735] ? lockdep_hardirqs_on+0x9c/0x150 [ 2519.929686][ T9735] do_fast_syscall_32+0x34/0x80 [ 2519.929705][ T9735] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2519.929739][ T9735] RIP: 0023:0xf7ff4539 [ 2519.929757][ T9735] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2519.929775][ T9735] RSP: 002b:00000000f54e655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 2519.929797][ T9735] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 2519.929812][ T9735] RDX: 000000000000c000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2519.929824][ T9735] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2519.929837][ T9735] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2519.929849][ T9735] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2519.929880][ T9735] [ 2519.938082][T10635] usb 6-1: new high-speed USB device number 89 using dummy_hcd [ 2520.228436][ C0] raw-gadget.0 gadget.5: ignoring, device is not running [ 2520.257474][ T9739] netlink: 'syz.3.9735': attribute type 1 has an invalid length. [ 2520.357013][T10635] usb 6-1: device descriptor read/64, error -32 [ 2520.374962][ T9747] netlink: 'syz.3.9735': attribute type 10 has an invalid length. [ 2520.383162][ T9739] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2520.401230][ T9743] bond1: (slave dummy0): making interface the new active one [ 2520.425234][ T9747] netlink: 40 bytes leftover after parsing attributes in process `syz.3.9735'. [ 2520.442754][ T9743] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 2520.466743][T10635] usb usb6-port1: attempt power cycle [ 2520.485926][ T9747] dummy0: entered promiscuous mode [ 2520.707158][ T9747] bond1: (slave dummy0): Releasing active interface [ 2520.806552][T10635] usb 6-1: new high-speed USB device number 90 using dummy_hcd [ 2520.877547][T10635] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 2520.927835][T10635] usb 6-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82 [ 2520.939576][T10635] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2520.970521][T10635] usb 6-1: config 0 descriptor?? [ 2521.091374][T10635] smsusb:smsusb_probe: board id=8, interface number 0 [ 2521.119942][T10635] smsusb:smsusb_probe: Device initialized with return code -19 [ 2522.166506][T22282] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 2522.240548][ T9768] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9741'. [ 2522.259361][ T9768] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9741'. [ 2522.338689][T22282] usb 2-1: Using ep0 maxpacket: 8 [ 2522.346290][ T9770] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2522.357719][T22282] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2522.368876][T22282] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 2522.418997][T22282] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 2522.438308][T22282] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2522.460127][T22282] usb 2-1: Product: syz [ 2522.465021][T22282] usb 2-1: Manufacturer: syz [ 2522.470020][T22282] usb 2-1: SerialNumber: syz [ 2522.484460][T22282] usb 2-1: bad CDC descriptors [ 2522.500769][T22282] usbtest 2-1:1.0: couldn't get endpoints, -22 [ 2522.528671][T22282] usbtest 2-1:1.0: probe with driver usbtest failed with error -22 [ 2522.645098][ T9777] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2522.714382][ T8932] usb 2-1: USB disconnect, device number 73 [ 2522.840181][ T9783] netlink: 40 bytes leftover after parsing attributes in process `syz.3.9748'. [ 2522.854254][ T9783] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2522.861545][ T9783] IPv6: NLM_F_CREATE should be set when creating new route [ 2522.868802][ T9783] IPv6: NLM_F_CREATE should be set when creating new route [ 2522.896852][ T9784] fuse: Bad value for 'fd' [ 2523.090011][ T9795] IPv6: Can't replace route, no match found [ 2523.315033][ T9803] 8021q: adding VLAN 0 to HW filter on device .` [ 2523.360846][ T9803] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2523.385310][T10635] usb 6-1: USB disconnect, device number 90 [ 2523.424312][ T9804] input: syz1 as /devices/virtual/input/input276 [ 2523.720162][ T24] IPVS: starting estimator thread 0... [ 2523.816812][ T9814] IPVS: using max 49 ests per chain, 117600 per kthread [ 2523.976764][T10635] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 2524.096675][ T30] audit: type=1326 audit(1763605968.992:6737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9816 comm="syz.5.9759" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 2524.151074][ T30] audit: type=1326 audit(1763605969.002:6738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9816 comm="syz.5.9759" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 2524.219001][T10635] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2524.247582][ T30] audit: type=1326 audit(1763605969.002:6739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9816 comm="syz.5.9759" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 2524.287857][T10635] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2524.308363][T10635] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2524.363664][T10635] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2524.395242][ T30] audit: type=1326 audit(1763605969.002:6740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9816 comm="syz.5.9759" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 2524.410228][T10635] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2524.445768][T10635] usb 2-1: config 0 descriptor?? [ 2524.487715][ T30] audit: type=1326 audit(1763605969.002:6741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9816 comm="syz.5.9759" exe="/root/syz-executor" sig=0 arch=40000003 syscall=459 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 2524.552321][ T30] audit: type=1326 audit(1763605969.002:6742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9816 comm="syz.5.9759" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 2524.639484][ T30] audit: type=1326 audit(1763605969.002:6743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9816 comm="syz.5.9759" exe="/root/syz-executor" sig=0 arch=40000003 syscall=459 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 2524.709216][ T30] audit: type=1326 audit(1763605969.002:6744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9816 comm="syz.5.9759" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 2524.851726][ T30] audit: type=1326 audit(1763605969.002:6745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9816 comm="syz.5.9759" exe="/root/syz-executor" sig=0 arch=40000003 syscall=260 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 2524.924041][T10635] plantronics 0003:047F:FFFF.0113: unknown main item tag 0x0 [ 2524.944687][T10635] plantronics 0003:047F:FFFF.0113: unknown main item tag 0x0 [ 2524.961407][T10635] plantronics 0003:047F:FFFF.0113: unknown main item tag 0x0 [ 2524.975860][T10635] plantronics 0003:047F:FFFF.0113: unknown main item tag 0x0 [ 2524.994828][T10635] plantronics 0003:047F:FFFF.0113: unknown main item tag 0x0 [ 2525.006568][ T30] audit: type=1326 audit(1763605969.002:6746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9816 comm="syz.5.9759" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70ed558 code=0x7ffc0000 [ 2525.069674][T10635] plantronics 0003:047F:FFFF.0113: unknown main item tag 0x0 [ 2525.098792][T10635] plantronics 0003:047F:FFFF.0113: unknown main item tag 0x0 [ 2525.116611][T10635] plantronics 0003:047F:FFFF.0113: unknown main item tag 0x0 [ 2525.148139][T10635] plantronics 0003:047F:FFFF.0113: unknown main item tag 0x0 [ 2525.188487][T10635] plantronics 0003:047F:FFFF.0113: unknown main item tag 0x0 [ 2525.310628][T10635] plantronics 0003:047F:FFFF.0113: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 2525.854026][ T9841] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9764'. [ 2525.896135][ T9841] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9764'. [ 2526.028857][ T9846] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2526.061473][ T9846] input: syz1 as /devices/virtual/input/input277 [ 2526.800014][T22282] usb 2-1: USB disconnect, device number 74 [ 2527.306649][T30727] usb 2-1: new low-speed USB device number 75 using dummy_hcd [ 2527.499464][T30727] usb 2-1: Invalid ep0 maxpacket: 32 [ 2527.676615][T30727] usb 2-1: new low-speed USB device number 76 using dummy_hcd [ 2528.047196][T30727] usb 2-1: Invalid ep0 maxpacket: 32 [ 2528.056729][T30727] usb usb2-port1: attempt power cycle [ 2528.406771][T30727] usb 2-1: new low-speed USB device number 77 using dummy_hcd [ 2528.436999][T30727] usb 2-1: Invalid ep0 maxpacket: 32 [ 2528.567911][T30727] usb 2-1: new low-speed USB device number 78 using dummy_hcd [ 2528.587589][ T9903] input: syz1 as /devices/virtual/input/input278 [ 2528.654035][T30727] usb 2-1: Invalid ep0 maxpacket: 32 [ 2528.670523][T30727] usb usb2-port1: unable to enumerate USB device [ 2528.737494][ T9902] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2528.755486][ T9906] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9778'. [ 2528.807964][ T9906] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9778'. [ 2529.025202][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 2529.032115][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 2529.697794][T22282] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 2529.889237][T22282] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2529.905157][T22282] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2529.932589][T22282] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2529.983090][T22282] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2530.003359][T22282] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2530.062872][T22282] usb 4-1: config 0 descriptor?? [ 2530.595202][T22282] hid_parser_main: 5 callbacks suppressed [ 2530.595226][T22282] plantronics 0003:047F:FFFF.0114: unknown main item tag 0x0 [ 2530.654650][T22282] plantronics 0003:047F:FFFF.0114: unknown main item tag 0x0 [ 2530.697449][T22282] plantronics 0003:047F:FFFF.0114: unknown main item tag 0x0 [ 2530.715083][T22282] plantronics 0003:047F:FFFF.0114: unknown main item tag 0x0 [ 2530.731024][T22282] plantronics 0003:047F:FFFF.0114: unknown main item tag 0x0 [ 2530.742755][T22282] plantronics 0003:047F:FFFF.0114: unknown main item tag 0x0 [ 2530.816710][T22282] plantronics 0003:047F:FFFF.0114: unknown main item tag 0x0 [ 2530.907508][T22282] plantronics 0003:047F:FFFF.0114: unknown main item tag 0x0 [ 2530.936686][T22282] plantronics 0003:047F:FFFF.0114: unknown main item tag 0x0 [ 2530.953238][T22282] plantronics 0003:047F:FFFF.0114: unknown main item tag 0x0 [ 2530.982573][T22282] plantronics 0003:047F:FFFF.0114: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 2532.200701][ T9957] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9791'. [ 2532.212129][ T9957] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9791'. [ 2532.223284][ T9953] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2532.304876][ T9953] input: syz1 as /devices/virtual/input/input279 [ 2532.315003][ T30] kauditd_printk_skb: 55 callbacks suppressed [ 2532.315019][ T30] audit: type=1326 audit(1763605977.232:6802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9955 comm="syz.1.9790" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff4539 code=0x7ffc0000 [ 2532.385931][ T24] usb 4-1: USB disconnect, device number 124 [ 2532.511753][ T30] audit: type=1326 audit(1763605977.272:6803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9955 comm="syz.1.9790" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff4539 code=0x7ffc0000 [ 2532.542633][ T9969] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9795'. [ 2532.640233][ T30] audit: type=1326 audit(1763605977.272:6804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9955 comm="syz.1.9790" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7ff4539 code=0x7ffc0000 [ 2532.729443][ T30] audit: type=1326 audit(1763605977.272:6805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9955 comm="syz.1.9790" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff4539 code=0x7ffc0000 [ 2532.837426][ T30] audit: type=1326 audit(1763605977.272:6806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9955 comm="syz.1.9790" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff4539 code=0x7ffc0000 [ 2532.873046][ T30] audit: type=1326 audit(1763605977.272:6807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9955 comm="syz.1.9790" exe="/root/syz-executor" sig=0 arch=40000003 syscall=459 compat=1 ip=0xf7ff4539 code=0x7ffc0000 [ 2532.915742][ T30] audit: type=1326 audit(1763605977.272:6808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9955 comm="syz.1.9790" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff4539 code=0x7ffc0000 [ 2533.073175][ T30] audit: type=1326 audit(1763605977.272:6809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9955 comm="syz.1.9790" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff4539 code=0x7ffc0000 [ 2533.099283][ T30] audit: type=1326 audit(1763605977.282:6810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9955 comm="syz.1.9790" exe="/root/syz-executor" sig=0 arch=40000003 syscall=459 compat=1 ip=0xf7ff4539 code=0x7ffc0000 [ 2533.155567][ T30] audit: type=1326 audit(1763605977.282:6811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9955 comm="syz.1.9790" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff4539 code=0x7ffc0000 [ 2534.349856][T10000] syzkaller0: entered promiscuous mode [ 2534.355482][T10000] syzkaller0: entered allmulticast mode [ 2534.700341][T10002] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9804'. [ 2534.739617][T10002] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9804'. [ 2535.048039][T10012] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2535.056913][T10013] input: syz1 as /devices/virtual/input/input280 [ 2535.116776][T10635] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 2535.278100][T10635] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2535.328183][T10635] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2535.340323][T10635] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2535.354075][T10635] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2535.364122][T10635] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2535.377691][ T5959] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 2535.430252][T10635] usb 3-1: config 0 descriptor?? [ 2535.571509][ T5959] usb 2-1: Using ep0 maxpacket: 8 [ 2535.593988][ T5959] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 2535.640706][ T5959] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2535.726507][ T5959] usb 2-1: config 0 has no interface number 0 [ 2535.772198][ T5959] usb 2-1: config 0 interface 1 altsetting 0 has an endpoint descriptor with address 0xB6, changing to 0x86 [ 2535.784420][ T5959] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 2535.824729][ T5959] usb 2-1: config 0 interface 1 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 0 [ 2535.870151][ T5959] usb 2-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2535.888159][T10635] hid_parser_main: 5 callbacks suppressed [ 2535.888174][T10635] plantronics 0003:047F:FFFF.0115: unknown main item tag 0x0 [ 2535.964065][ T5959] usb 2-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 2535.976076][T10635] plantronics 0003:047F:FFFF.0115: unknown main item tag 0x0 [ 2536.002929][ T5959] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 2536.014318][T10635] plantronics 0003:047F:FFFF.0115: unknown main item tag 0x0 [ 2536.052814][ T5959] usb 2-1: SerialNumber: syz [ 2536.064083][T10635] plantronics 0003:047F:FFFF.0115: unknown main item tag 0x0 [ 2536.081981][T10635] plantronics 0003:047F:FFFF.0115: unknown main item tag 0x0 [ 2536.127737][ T5959] usb 2-1: config 0 descriptor?? [ 2536.172175][T10635] plantronics 0003:047F:FFFF.0115: unknown main item tag 0x0 [ 2536.217908][T10635] plantronics 0003:047F:FFFF.0115: unknown main item tag 0x0 [ 2536.226033][ T5959] hso 2-1:0.1: Failed to find BULK OUT ep [ 2536.255282][T10635] plantronics 0003:047F:FFFF.0115: unknown main item tag 0x0 [ 2536.294070][T10635] plantronics 0003:047F:FFFF.0115: unknown main item tag 0x0 [ 2536.336780][T10635] plantronics 0003:047F:FFFF.0115: unknown main item tag 0x0 [ 2536.399905][T10635] plantronics 0003:047F:FFFF.0115: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 2536.422780][ T5959] usb 2-1: USB disconnect, device number 79 [ 2536.556489][T10635] usb 3-1: USB disconnect, device number 46 [ 2536.732345][T10040] fido_id[10040]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 2537.106733][T10046] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9817'. [ 2537.185928][T10047] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9817'. [ 2537.791777][T10065] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2537.852234][T10065] input: syz1 as /devices/virtual/input/input281 [ 2538.546471][ T5959] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 2538.707187][ T5959] usb 4-1: Using ep0 maxpacket: 16 [ 2538.714797][ T5959] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2538.759761][ T5959] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2538.793911][ T5959] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2538.824136][ T5959] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2538.852636][ T5959] usb 4-1: Product: syz [ 2538.865927][ T5959] usb 4-1: Manufacturer: syz [ 2538.884593][ T5959] usb 4-1: SerialNumber: syz [ 2539.254630][ T5959] usb 4-1: 0:2 : does not exist [ 2539.270681][ T5959] usb 4-1: unit 9 not found! [ 2539.317598][ T5959] usb 4-1: USB disconnect, device number 125 [ 2539.373126][T32596] udevd[32596]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2539.883073][T10109] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2539.919398][T10109] input: syz1 as /devices/virtual/input/input282 [ 2540.321404][T10117] FAULT_INJECTION: forcing a failure. [ 2540.321404][T10117] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2540.358267][T10117] CPU: 1 UID: 0 PID: 10117 Comm: syz.3.9838 Not tainted syzkaller #0 PREEMPT(full) [ 2540.358305][T10117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2540.358318][T10117] Call Trace: [ 2540.358326][T10117] [ 2540.358335][T10117] dump_stack_lvl+0x189/0x250 [ 2540.358367][T10117] ? __pfx____ratelimit+0x10/0x10 [ 2540.358395][T10117] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2540.358422][T10117] ? __pfx__printk+0x10/0x10 [ 2540.358455][T10117] should_fail_ex+0x414/0x560 [ 2540.358491][T10117] _copy_to_user+0x31/0xb0 [ 2540.358518][T10117] simple_read_from_buffer+0xe1/0x170 [ 2540.358558][T10117] proc_fail_nth_read+0x1b3/0x220 [ 2540.358587][T10117] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2540.358614][T10117] ? rw_verify_area+0x2a6/0x4d0 [ 2540.358640][T10117] ? __lock_acquire+0xab9/0xd20 [ 2540.358658][T10117] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2540.358684][T10117] vfs_read+0x200/0xa30 [ 2540.358711][T10117] ? fdget_pos+0x247/0x320 [ 2540.358733][T10117] ? __pfx___mutex_lock+0x10/0x10 [ 2540.358762][T10117] ? __pfx_vfs_read+0x10/0x10 [ 2540.358791][T10117] ? __fget_files+0x2a/0x420 [ 2540.358814][T10117] ? __fget_files+0x3a0/0x420 [ 2540.358831][T10117] ? __fget_files+0x2a/0x420 [ 2540.358854][T10117] ksys_read+0x145/0x250 [ 2540.358876][T10117] ? exc_page_fault+0x82/0x100 [ 2540.358900][T10117] ? __pfx_ksys_read+0x10/0x10 [ 2540.358925][T10117] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 2540.358951][T10117] ? lockdep_hardirqs_on+0x9c/0x150 [ 2540.358982][T10117] __do_fast_syscall_32+0xb6/0x2b0 [ 2540.358998][T10117] ? lockdep_hardirqs_on+0x9c/0x150 [ 2540.359025][T10117] do_fast_syscall_32+0x34/0x80 [ 2540.359041][T10117] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2540.359061][T10117] RIP: 0023:0xf704d539 [ 2540.359075][T10117] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2540.359091][T10117] RSP: 002b:00000000f543d590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 2540.359109][T10117] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f543d620 [ 2540.359121][T10117] RDX: 000000000000000f RSI: 00000000f73e6ff4 RDI: 0000000000000000 [ 2540.359132][T10117] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 2540.359142][T10117] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2540.359152][T10117] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2540.359177][T10117] [ 2540.606091][ C1] vkms_vblank_simulate: vblank timer overrun [ 2542.560900][T10161] input: syz1 as /devices/virtual/input/input283 [ 2542.597638][T10160] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2543.546566][T30727] usb 2-1: new full-speed USB device number 80 using dummy_hcd [ 2543.676544][T12611] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 2543.718669][T30727] usb 2-1: config 0 has too many interfaces: 175, using maximum allowed: 32 [ 2543.759191][T30727] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2543.843816][T30727] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 175 [ 2543.882402][T30727] usb 2-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 2543.896060][T30727] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2543.911819][T30727] usb 2-1: config 0 descriptor?? [ 2543.941787][T12611] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2543.977763][T12611] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2544.034588][T12611] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2544.085655][T12611] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2544.116143][T12611] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2544.189552][T12611] usb 3-1: config 0 descriptor?? [ 2544.232226][T30727] usb 2-1: USB disconnect, device number 80 [ 2544.626865][T12611] hid_parser_main: 5 callbacks suppressed [ 2544.626887][T12611] plantronics 0003:047F:FFFF.0116: unknown main item tag 0x0 [ 2544.633855][T10191] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9858'. [ 2544.642238][T12611] plantronics 0003:047F:FFFF.0116: unknown main item tag 0x0 [ 2544.650399][T10192] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9858'. [ 2544.657920][T12611] plantronics 0003:047F:FFFF.0116: unknown main item tag 0x0 [ 2544.667758][T10188] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9858'. [ 2544.674313][T12611] plantronics 0003:047F:FFFF.0116: unknown main item tag 0x0 [ 2544.687757][T10188] bridge0: port 2(bridge_slave_1) entered disabled state [ 2544.721903][T12611] plantronics 0003:047F:FFFF.0116: unknown main item tag 0x0 [ 2544.736541][T12611] plantronics 0003:047F:FFFF.0116: unknown main item tag 0x0 [ 2544.781109][T12611] plantronics 0003:047F:FFFF.0116: unknown main item tag 0x0 [ 2544.789118][T12611] plantronics 0003:047F:FFFF.0116: unknown main item tag 0x0 [ 2544.797129][T12611] plantronics 0003:047F:FFFF.0116: unknown main item tag 0x0 [ 2544.804712][T12611] plantronics 0003:047F:FFFF.0116: unknown main item tag 0x0 [ 2544.881858][T12611] plantronics 0003:047F:FFFF.0116: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 2544.896293][T10188] bridge_slave_1 (unregistering): left allmulticast mode [ 2544.920780][T10188] bridge0: port 2(bridge_slave_1) entered disabled state [ 2545.004416][T12611] usb 3-1: USB disconnect, device number 47 [ 2545.108914][T10197] syz.5.9857 (10197): drop_caches: 2 [ 2545.151013][T10200] fido_id[10200]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 2545.215802][T10206] input: syz1 as /devices/virtual/input/input284 [ 2545.354953][T10204] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2547.851396][T10260] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2547.869725][T10261] input: syz1 as /devices/virtual/input/input285 [ 2548.138880][ T24] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 2548.286493][ T8932] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 2548.318866][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2548.340895][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2548.362784][ T24] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2548.377045][ T24] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2548.386109][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2548.406989][ T24] usb 2-1: config 0 descriptor?? [ 2548.446613][ T8932] usb 3-1: Using ep0 maxpacket: 32 [ 2548.483249][ T8932] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 2548.502734][ T8932] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2548.532309][ T8932] usb 3-1: config 0 descriptor?? [ 2548.772473][ T8932] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 2548.798142][ T8932] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2548.813065][ T8932] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 2548.834993][ T8932] usb 3-1: media controller created [ 2548.888459][ T24] plantronics 0003:047F:FFFF.0117: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 2548.899289][ T8932] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2549.150876][ T8932] DVB: Unable to find symbol dib7000p_attach() [ 2549.176794][ T8932] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 2549.180815][T12611] usb 2-1: USB disconnect, device number 81 [ 2549.316770][ T8932] rc_core: IR keymap rc-dib0700-rc5 not found [ 2549.316786][ T8932] Registered IR keymap rc-empty [ 2549.316985][ T8932] dvb-usb: could not initialize remote control. [ 2549.316991][ T8932] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 2549.710836][ T8932] usb 3-1: USB disconnect, device number 48 [ 2549.843162][ T8932] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 2551.299690][T10321] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9889'. [ 2551.391287][T10321] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9889'. [ 2551.661661][T10334] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2551.693742][T10337] input: syz1 as /devices/virtual/input/input287 [ 2552.216500][T12611] usb 6-1: new high-speed USB device number 91 using dummy_hcd [ 2552.430436][T12611] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2552.552485][T12611] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2552.587089][T12611] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2552.614715][T12611] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2552.624122][T12611] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2552.656992][T12611] usb 6-1: config 0 descriptor?? [ 2553.073370][T12611] hid_parser_main: 20 callbacks suppressed [ 2553.076166][T12611] plantronics 0003:047F:FFFF.0118: unknown main item tag 0x0 [ 2553.109442][T12611] plantronics 0003:047F:FFFF.0118: unknown main item tag 0x0 [ 2553.117954][T12611] plantronics 0003:047F:FFFF.0118: unknown main item tag 0x0 [ 2553.125495][T12611] plantronics 0003:047F:FFFF.0118: unknown main item tag 0x0 [ 2553.133504][T12611] plantronics 0003:047F:FFFF.0118: unknown main item tag 0x0 [ 2553.141894][T12611] plantronics 0003:047F:FFFF.0118: unknown main item tag 0x0 [ 2553.150100][T12611] plantronics 0003:047F:FFFF.0118: unknown main item tag 0x0 [ 2553.157943][T12611] plantronics 0003:047F:FFFF.0118: unknown main item tag 0x0 [ 2553.165918][T12611] plantronics 0003:047F:FFFF.0118: unknown main item tag 0x0 [ 2553.175656][T12611] plantronics 0003:047F:FFFF.0118: unknown main item tag 0x0 [ 2553.213408][T12611] plantronics 0003:047F:FFFF.0118: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 2553.382332][T12611] usb 6-1: USB disconnect, device number 91 [ 2554.355443][T10393] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2554.392597][T10393] input: syz1 as /devices/virtual/input/input288 [ 2554.422720][T32596] udevd[32596]: setting mode of /dev/input/js0 to 020664 failed: No such file or directory [ 2554.459967][T32596] udevd[32596]: setting owner of /dev/input/js0 to uid=0, gid=104 failed: No such file or directory [ 2555.226392][T10410] FAULT_INJECTION: forcing a failure. [ 2555.226392][T10410] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2555.278531][T10410] CPU: 0 UID: 0 PID: 10410 Comm: syz.6.9911 Not tainted syzkaller #0 PREEMPT(full) [ 2555.278559][T10410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2555.278571][T10410] Call Trace: [ 2555.278579][T10410] [ 2555.278587][T10410] dump_stack_lvl+0x189/0x250 [ 2555.278619][T10410] ? __pfx____ratelimit+0x10/0x10 [ 2555.278647][T10410] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2555.278674][T10410] ? __pfx__printk+0x10/0x10 [ 2555.278709][T10410] should_fail_ex+0x414/0x560 [ 2555.278745][T10410] _copy_from_iter+0x1de/0x1790 [ 2555.278773][T10410] ? rcu_is_watching+0x15/0xb0 [ 2555.278799][T10410] ? kmalloc_reserve+0xbd/0x290 [ 2555.278819][T10410] ? __pfx__copy_from_iter+0x10/0x10 [ 2555.278841][T10410] ? __build_skb_around+0x262/0x3f0 [ 2555.278864][T10410] ? netlink_sendmsg+0x642/0xb30 [ 2555.278883][T10410] ? skb_put+0x11b/0x210 [ 2555.278906][T10410] netlink_sendmsg+0x6b2/0xb30 [ 2555.278936][T10410] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2555.278960][T10410] ? __import_iovec+0x5d4/0x7f0 [ 2555.278983][T10410] ? aa_sock_msg_perm+0xf1/0x1d0 [ 2555.279014][T10410] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2555.279033][T10410] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2555.279055][T10410] __sock_sendmsg+0x21c/0x270 [ 2555.279085][T10410] ____sys_sendmsg+0x52d/0x830 [ 2555.279113][T10410] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2555.279152][T10410] ___sys_sendmsg+0x21f/0x2a0 [ 2555.279177][T10410] ? __pfx____sys_sendmsg+0x10/0x10 [ 2555.279200][T10410] ? __lock_acquire+0xab9/0xd20 [ 2555.279252][T10410] ? __fget_files+0x2a/0x420 [ 2555.279271][T10410] ? __fget_files+0x3a0/0x420 [ 2555.279306][T10410] __sys_sendmmsg+0x28e/0x430 [ 2555.279334][T10410] ? __pfx___sys_sendmmsg+0x10/0x10 [ 2555.279354][T10410] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 2555.279409][T10410] ? ksys_write+0x22a/0x250 [ 2555.279436][T10410] ? exc_page_fault+0x82/0x100 [ 2555.279464][T10410] ? __pfx_ksys_write+0x10/0x10 [ 2555.279499][T10410] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 2555.279525][T10410] __do_fast_syscall_32+0xb6/0x2b0 [ 2555.279543][T10410] ? lockdep_hardirqs_on+0x9c/0x150 [ 2555.279573][T10410] do_fast_syscall_32+0x34/0x80 [ 2555.279590][T10410] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2555.279612][T10410] RIP: 0023:0xf7fd7539 [ 2555.279629][T10410] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2555.279645][T10410] RSP: 002b:00000000f54c655c EFLAGS: 00000206 ORIG_RAX: 0000000000000159 [ 2555.279665][T10410] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0 [ 2555.279678][T10410] RDX: 0000000092492627 RSI: 0000000000000000 RDI: 0000000000000000 [ 2555.279690][T10410] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2555.279700][T10410] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2555.279711][T10410] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2555.279737][T10410] [ 2555.963004][T10426] tipc: Started in network mode [ 2555.974249][T10426] tipc: Node identity 4, cluster identity 4711 [ 2555.981224][T10426] tipc: Node number set to 4 [ 2556.146809][ T24] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 2556.309448][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2556.322749][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2556.333318][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2556.350006][ T24] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2556.360043][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2556.379818][ T24] usb 4-1: config 0 descriptor?? [ 2556.879543][ T24] plantronics 0003:047F:FFFF.0119: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 2557.127549][T10444] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2557.155449][ T5959] usb 4-1: USB disconnect, device number 126 [ 2557.169325][T10444] input: syz1 as /devices/virtual/input/input289 [ 2558.267422][T22282] usb 4-1: new full-speed USB device number 127 using dummy_hcd [ 2558.406779][T22282] usb 4-1: device descriptor read/64, error -71 [ 2558.419505][T12611] usb 2-1: new low-speed USB device number 82 using dummy_hcd [ 2558.566546][T12611] usb 2-1: device descriptor read/64, error -71 [ 2558.646634][T22282] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 2558.826487][T22282] usb 4-1: device descriptor read/64, error -71 [ 2558.916526][T12611] usb 2-1: new low-speed USB device number 83 using dummy_hcd [ 2558.936811][T22282] usb usb4-port1: attempt power cycle [ 2559.056631][T12611] usb 2-1: device descriptor read/64, error -71 [ 2559.104137][T10485] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9930'. [ 2559.128493][T10485] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 2559.128767][T10487] ALSA: mixer_oss: invalid OSS volume '' [ 2559.137050][T10485] netlink: 44 bytes leftover after parsing attributes in process `syz.6.9930'. [ 2559.150754][T10485] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 2559.170970][T12611] usb usb2-port1: attempt power cycle [ 2559.276778][T22282] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 2559.315977][T22282] usb 4-1: device descriptor read/8, error -71 [ 2559.426683][ T5959] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 2559.519191][T12611] usb 2-1: new low-speed USB device number 84 using dummy_hcd [ 2559.547381][T12611] usb 2-1: device descriptor read/8, error -71 [ 2559.566611][T22282] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 2559.589850][ T5959] usb 3-1: device descriptor read/64, error -71 [ 2559.589975][T22282] usb 4-1: device descriptor read/8, error -71 [ 2559.711743][T22282] usb usb4-port1: unable to enumerate USB device [ 2559.786660][T12611] usb 2-1: new low-speed USB device number 85 using dummy_hcd [ 2559.811540][T12611] usb 2-1: device descriptor read/8, error -71 [ 2559.846592][ T5959] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 2559.887183][T30727] usb 6-1: new low-speed USB device number 92 using dummy_hcd [ 2559.927046][T12611] usb usb2-port1: unable to enumerate USB device [ 2559.986570][ T5959] usb 3-1: device descriptor read/64, error -71 [ 2560.064367][T30727] usb 6-1: config index 0 descriptor too short (expected 6427, got 27) [ 2560.072926][T30727] usb 6-1: config 0 has an invalid interface number: 21 but max is 0 [ 2560.081490][T30727] usb 6-1: config 0 has no interface number 0 [ 2560.088368][T30727] usb 6-1: config 0 interface 21 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 2560.099391][ T5959] usb usb3-port1: attempt power cycle [ 2560.104945][T30727] usb 6-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2560.115489][T30727] usb 6-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 2560.124997][T30727] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2560.136616][T30727] usb 6-1: config 0 descriptor?? [ 2560.431327][T10498] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2560.455719][T10498] input: syz1 as /devices/virtual/input/input291 [ 2560.466994][ T5959] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 2560.508530][ T5959] usb 3-1: device descriptor read/8, error -71 [ 2560.746502][ T5959] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 2560.788660][ T5959] usb 3-1: device descriptor read/8, error -71 [ 2560.856285][T30727] input: USB Keyspan Remote 06cd:0202 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.21/input/input290 [ 2560.906867][ T5959] usb usb3-port1: unable to enumerate USB device [ 2561.072071][T10491] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2561.091914][T10491] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2561.297050][T30727] input: failed to attach handler kbd to device input290, error: -5 [ 2561.507521][ T5959] usb 6-1: USB disconnect, device number 92 [ 2561.858887][T30727] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 2562.018037][T30727] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2562.029129][T30727] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2562.039235][T30727] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2562.053086][T30727] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2562.062700][T30727] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2562.074463][T30727] usb 4-1: config 0 descriptor?? [ 2562.500860][T30727] hid_parser_main: 20 callbacks suppressed [ 2562.500877][T30727] plantronics 0003:047F:FFFF.011A: unknown main item tag 0x0 [ 2562.533413][T30727] plantronics 0003:047F:FFFF.011A: unknown main item tag 0x0 [ 2562.549905][T30727] plantronics 0003:047F:FFFF.011A: unknown main item tag 0x0 [ 2562.567633][T30727] plantronics 0003:047F:FFFF.011A: unknown main item tag 0x0 [ 2562.585675][T30727] plantronics 0003:047F:FFFF.011A: unknown main item tag 0x0 [ 2562.603167][T30727] plantronics 0003:047F:FFFF.011A: unknown main item tag 0x0 [ 2562.622438][T30727] plantronics 0003:047F:FFFF.011A: unknown main item tag 0x0 [ 2562.647207][T30727] plantronics 0003:047F:FFFF.011A: unknown main item tag 0x0 [ 2562.670850][T30727] plantronics 0003:047F:FFFF.011A: unknown main item tag 0x0 [ 2562.683332][T30727] plantronics 0003:047F:FFFF.011A: unknown main item tag 0x0 [ 2562.707489][T30727] plantronics 0003:047F:FFFF.011A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 2562.781511][T30727] usb 4-1: USB disconnect, device number 5 [ 2563.040740][T10527] fido_id[10527]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 2563.620005][T10535] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9945'. [ 2563.952782][T10542] input: syz1 as /devices/virtual/input/input292 [ 2564.008607][T10539] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2564.225108][T10545] bond3: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 2564.249253][T10545] bond3 (unregistering): Released all slaves [ 2565.176487][T22282] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 2565.338266][T22282] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2565.351370][T22282] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2565.362936][T22282] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2565.379240][T22282] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2565.390029][T22282] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2565.480279][T22282] usb 2-1: config 0 descriptor?? [ 2565.977829][T22282] plantronics 0003:047F:FFFF.011B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 2566.272076][T10635] usb 2-1: USB disconnect, device number 86 [ 2566.326332][T10590] fido_id[10590]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 2566.362576][T10598] FAULT_INJECTION: forcing a failure. [ 2566.362576][T10598] name failslab, interval 1, probability 0, space 0, times 0 [ 2566.375530][T10598] CPU: 0 UID: 0 PID: 10598 Comm: syz.5.9961 Not tainted syzkaller #0 PREEMPT(full) [ 2566.375547][T10598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2566.375554][T10598] Call Trace: [ 2566.375559][T10598] [ 2566.375564][T10598] dump_stack_lvl+0x189/0x250 [ 2566.375583][T10598] ? __pfx____ratelimit+0x10/0x10 [ 2566.375599][T10598] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2566.375613][T10598] ? __pfx__printk+0x10/0x10 [ 2566.375627][T10598] ? __pfx___might_resched+0x10/0x10 [ 2566.375642][T10598] should_fail_ex+0x414/0x560 [ 2566.375660][T10598] should_failslab+0xa8/0x100 [ 2566.375672][T10598] __kmalloc_noprof+0xcb/0x7f0 [ 2566.375687][T10598] ? kfree+0x4d/0x6d0 [ 2566.375697][T10598] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 2566.375718][T10598] tomoyo_realpath_from_path+0xe3/0x5d0 [ 2566.375734][T10598] ? tomoyo_domain+0xd9/0x130 [ 2566.375747][T10598] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 2566.375760][T10598] tomoyo_path_number_perm+0x1e8/0x5a0 [ 2566.375775][T10598] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2566.375798][T10598] ? __lock_acquire+0xab9/0xd20 [ 2566.375820][T10598] ? __fget_files+0x2a/0x420 [ 2566.375833][T10598] ? __fget_files+0x3a0/0x420 [ 2566.375842][T10598] ? __fget_files+0x2a/0x420 [ 2566.375854][T10598] security_file_ioctl_compat+0xcb/0x2d0 [ 2566.375869][T10598] __ia32_compat_sys_ioctl+0x128/0x840 [ 2566.375885][T10598] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 2566.375898][T10598] ? __fget_files+0x3a0/0x420 [ 2566.375912][T10598] ? fput+0xa0/0xd0 [ 2566.375924][T10598] ? ksys_write+0x22a/0x250 [ 2566.375938][T10598] ? exc_page_fault+0x82/0x100 [ 2566.375953][T10598] ? __pfx_ksys_write+0x10/0x10 [ 2566.375968][T10598] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 2566.375984][T10598] ? lockdep_hardirqs_on+0x9c/0x150 [ 2566.376003][T10598] __do_fast_syscall_32+0xb6/0x2b0 [ 2566.376014][T10598] ? lockdep_hardirqs_on+0x9c/0x150 [ 2566.376031][T10598] do_fast_syscall_32+0x34/0x80 [ 2566.376041][T10598] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2566.376054][T10598] RIP: 0023:0xf70ed539 [ 2566.376063][T10598] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2566.376073][T10598] RSP: 002b:00000000f549b55c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 2566.376085][T10598] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000005411 [ 2566.376092][T10598] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2566.376099][T10598] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2566.376105][T10598] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2566.376111][T10598] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2566.376127][T10598] [ 2566.376133][T10598] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2566.806840][T10600] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2566.833586][T10600] input: syz1 as /devices/virtual/input/input293 [ 2566.991357][T10604] netlink: 'syz.1.9963': attribute type 21 has an invalid length. [ 2566.999974][T10604] netlink: 128 bytes leftover after parsing attributes in process `syz.1.9963'. [ 2567.011662][T10604] netlink: 3 bytes leftover after parsing attributes in process `syz.1.9963'. [ 2567.059420][T10604] program syz.1.9963 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2567.612419][T10635] hid (null): unknown global tag 0xd [ 2567.619804][T10635] hid (null): invalid report_size 40648 [ 2567.625860][T10635] hid (null): unknown global tag 0xd [ 2567.631986][T10635] hid (null): unknown global tag 0x1a [ 2567.640922][T10635] hid (null): unknown global tag 0xd [ 2567.647675][T10635] hid (null): invalid report_count 1480823074 [ 2567.655612][T10635] hid (null): invalid report_size 41695 [ 2567.673649][T10635] hid (null): invalid report_count -917716710 [ 2567.688076][T10635] hid (null): invalid report_count -1621061428 [ 2567.694475][T10635] hid (null): report_id 3473656863 is invalid [ 2567.703061][T10635] hid (null): unknown global tag 0xd [ 2567.708777][T10635] hid (null): usage index exceeded [ 2567.714166][T10635] hid (null): unknown global tag 0xd [ 2567.720145][T10635] hid (null): invalid report_size -1579523039 [ 2567.727702][T10635] hid (null): report_id 525892052 is invalid [ 2567.734103][T10635] hid (null): global environment stack underflow [ 2567.741020][T10635] hid (null): unknown global tag 0xc [ 2567.748104][T10635] hid (null): global environment stack underflow [ 2567.754733][T10635] hid (null): unknown global tag 0xe [ 2567.760611][T10635] hid (null): unknown global tag 0xe [ 2567.766212][T10635] hid (null): unknown global tag 0xd [ 2567.772520][T10635] hid (null): invalid report_size -1326617285 [ 2567.788196][T10635] hid (null): unknown global tag 0xcd [ 2567.794383][T10635] hid (null): unknown global tag 0xd [ 2567.801376][T10635] hid (null): unknown global tag 0xe [ 2567.828691][T10635] hid (null): report_id 34854 is invalid [ 2567.838540][T10635] hid (null): unknown global tag 0xd [ 2567.852078][T10635] hid (null): unknown global tag 0xe [ 2567.857825][T10635] hid (null): unknown global tag 0xd [ 2567.863550][T10635] hid (null): unknown global tag 0xf1 [ 2567.870191][T10635] hid (null): invalid report_count 59418 [ 2567.883714][T10635] hid (null): unknown global tag 0xd [ 2567.891644][T10635] hid (null): report_id 2362704260 is invalid [ 2567.898471][T10635] hid (null): unknown global tag 0xdf [ 2567.904114][T10635] hid (null): unknown global tag 0xc [ 2567.909963][T10635] hid (null): unknown global tag 0xe [ 2567.916277][T10635] hid (null): report_id 14407 is invalid [ 2567.922960][T10635] hid (null): global environment stack overflow [ 2567.929667][T10635] hid (null): unknown global tag 0xc [ 2567.936300][T10635] hid (null): report_id 3676815502 is invalid [ 2567.944026][T10635] hid (null): unknown global tag 0xe [ 2567.982942][T10635] hid (null): unknown global tag 0xd [ 2568.008245][T10635] hid (null): unknown global tag 0xd [ 2568.033047][T10635] hid (null): unknown global tag 0x9b [ 2568.039750][T10635] hid (null): unknown global tag 0xd [ 2568.053324][T10635] hid (null): unknown global tag 0x76 [ 2568.103170][T10635] hid_parser_main: 20 callbacks suppressed [ 2568.103186][T10635] hid-generic 0006:0008:0916.011C: unknown main item tag 0x6 [ 2568.122320][T10635] hid-generic 0006:0008:0916.011C: unknown global tag 0xd [ 2568.132414][T10635] hid-generic 0006:0008:0916.011C: item 0 2 1 13 parsing failed [ 2568.141257][T10635] hid-generic 0006:0008:0916.011C: probe with driver hid-generic failed with error -22 [ 2568.476557][ T24] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 2568.638904][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2568.652121][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2568.663768][ T24] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2568.688438][ T24] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2568.701180][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2568.714978][ T24] usb 2-1: config 0 descriptor?? [ 2568.735033][T10646] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2568.811381][T10646] input: syz1 as /devices/virtual/input/input294 [ 2569.133828][ T24] plantronics 0003:047F:FFFF.011D: unknown main item tag 0x0 [ 2569.145536][ T24] plantronics 0003:047F:FFFF.011D: unknown main item tag 0x0 [ 2569.163357][ T24] plantronics 0003:047F:FFFF.011D: unknown main item tag 0x0 [ 2569.180309][ T24] plantronics 0003:047F:FFFF.011D: unknown main item tag 0x0 [ 2569.195170][ T24] plantronics 0003:047F:FFFF.011D: unknown main item tag 0x0 [ 2569.218477][ T24] plantronics 0003:047F:FFFF.011D: unknown main item tag 0x0 [ 2569.237159][ T24] plantronics 0003:047F:FFFF.011D: unknown main item tag 0x0 [ 2569.252572][ T24] plantronics 0003:047F:FFFF.011D: unknown main item tag 0x0 [ 2569.275123][ T24] plantronics 0003:047F:FFFF.011D: unknown main item tag 0x0 [ 2569.381807][ T24] plantronics 0003:047F:FFFF.011D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 2569.438469][T10656] fuse: Bad value for 'group_id' [ 2569.443450][T10656] fuse: Bad value for 'group_id' [ 2569.469990][ T24] usb 2-1: USB disconnect, device number 87 [ 2569.569754][T10655] fido_id[10655]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 2569.982330][T10664] tipc: Started in network mode [ 2569.988291][T10664] tipc: Node identity , cluster identity 4711 [ 2569.994498][T10664] tipc: Failed to obtain node identity [ 2570.000909][T10664] tipc: Enabling of bearer rejected, failed to enable media [ 2570.346579][ T24] usb 2-1: new full-speed USB device number 88 using dummy_hcd [ 2570.511010][ T24] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 2570.532171][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2570.555319][ T24] usb 2-1: Product: syz [ 2570.571505][ T24] usb 2-1: Manufacturer: syz [ 2570.586273][ T24] usb 2-1: SerialNumber: syz [ 2570.619969][ T24] usb 2-1: config 0 descriptor?? [ 2570.851490][ T24] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 2571.025135][T10685] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2571.138222][T10685] input: syz1 as /devices/virtual/input/input295 [ 2571.923795][ T24] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 2573.162915][T10635] usb 2-1: USB disconnect, device number 88 [ 2573.317552][T10731] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2573.392012][T10731] input: syz1 as /devices/virtual/input/input296 [ 2575.476562][T10635] usb 6-1: new high-speed USB device number 93 using dummy_hcd [ 2575.601233][T10776] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2575.660403][T10635] usb 6-1: config 0 has an invalid interface number: 23 but max is 0 [ 2575.669134][T10777] input: syz1 as /devices/virtual/input/input297 [ 2575.681083][T10635] usb 6-1: config 0 has no interface number 0 [ 2575.695291][T10635] usb 6-1: config 0 interface 23 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 2575.714625][T10635] usb 6-1: config 0 interface 23 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1023 [ 2575.737735][T10635] usb 6-1: New USB device found, idVendor=03f0, idProduct=0307, bcdDevice= 0.01 [ 2575.760046][T10635] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2575.782029][T10635] usb 6-1: Product: syz [ 2575.786283][T10635] usb 6-1: Manufacturer: syz [ 2575.807198][T10635] usb 6-1: SerialNumber: syz [ 2575.824488][T10635] usb 6-1: config 0 descriptor?? [ 2575.841575][T10774] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 2575.857693][T10774] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 2575.908737][T10635] ums-usbat 6-1:0.23: USB Mass Storage device detected [ 2576.177537][T22282] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 2576.211343][T10635] ums-usbat 6-1:0.23: probe with driver ums-usbat failed with error -5 [ 2576.268749][T10635] usb 6-1: USB disconnect, device number 93 [ 2576.349385][T22282] usb 3-1: Using ep0 maxpacket: 16 [ 2576.400014][T22282] usb 3-1: config 0 has an invalid interface number: 49 but max is 0 [ 2576.435136][T22282] usb 3-1: config 0 has no interface number 0 [ 2576.456043][T22282] usb 3-1: config 0 interface 49 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 16 [ 2576.480477][T22282] usb 3-1: config 0 interface 49 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2576.513456][T22282] usb 3-1: config 0 interface 49 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 2576.545238][T22282] usb 3-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=76.b7 [ 2576.581045][T22282] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2576.601335][T22282] usb 3-1: Product: syz [ 2576.611607][T22282] usb 3-1: Manufacturer: syz [ 2576.622930][T22282] usb 3-1: SerialNumber: syz [ 2576.643232][T22282] usb 3-1: config 0 descriptor?? [ 2576.681090][T10786] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 2577.038065][T22282] usb 3-1: USB disconnect, device number 53 [ 2577.541475][T22282] usb 4-1: new low-speed USB device number 6 using dummy_hcd [ 2577.729984][T22282] usb 4-1: No LPM exit latency info found, disabling LPM. [ 2577.740375][T22282] usb 4-1: config 1 interface 0 altsetting 60 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2577.775853][T22282] usb 4-1: config 1 interface 0 has no altsetting 0 [ 2577.800210][T22282] usb 4-1: string descriptor 0 read error: -22 [ 2577.807809][T22282] usb 4-1: New USB device found, idVendor=17ef, idProduct=60b5, bcdDevice= 0.40 [ 2577.825741][T22282] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2578.111986][T22282] usbhid 4-1:1.0: can't add hid device: -71 [ 2578.138505][T22282] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 2578.189561][T22282] usb 4-1: USB disconnect, device number 6 [ 2578.777932][T10830] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2578.788184][T10832] input: syz1 as /devices/virtual/input/input298 [ 2579.346558][T22282] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 2579.499087][T22282] usb 2-1: Using ep0 maxpacket: 8 [ 2579.527824][T22282] usb 2-1: New USB device found, idVendor=041e, idProduct=401c, bcdDevice=1d.9c [ 2579.591343][T22282] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2579.618326][T22282] usb 2-1: Product: syz [ 2579.629333][T22282] usb 2-1: Manufacturer: syz [ 2579.643814][T22282] usb 2-1: SerialNumber: syz [ 2579.672294][T22282] usb 2-1: config 0 descriptor?? [ 2579.716927][T22282] gspca_main: gspca_zc3xx-2.14.0 probing 041e:401c [ 2579.921306][T22282] gspca_zc3xx: reg_w_i err -71 [ 2580.660458][T10877] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2580.680059][T22282] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 2580.689011][T22282] gspca_zc3xx 2-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 2580.701439][T22282] usb 2-1: USB disconnect, device number 89 [ 2580.791177][T10877] input: syz1 as /devices/virtual/input/input299 [ 2580.925053][T10881] FAULT_INJECTION: forcing a failure. [ 2580.925053][T10881] name failslab, interval 1, probability 0, space 0, times 0 [ 2580.941843][T10881] CPU: 1 UID: 0 PID: 10881 Comm: syz.3.10042 Not tainted syzkaller #0 PREEMPT(full) [ 2580.941872][T10881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2580.941886][T10881] Call Trace: [ 2580.941895][T10881] [ 2580.941903][T10881] dump_stack_lvl+0x189/0x250 [ 2580.941923][T10881] ? __pfx____ratelimit+0x10/0x10 [ 2580.941938][T10881] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2580.941952][T10881] ? __pfx__printk+0x10/0x10 [ 2580.941966][T10881] ? __pfx___might_resched+0x10/0x10 [ 2580.941981][T10881] should_fail_ex+0x414/0x560 [ 2580.942000][T10881] should_failslab+0xa8/0x100 [ 2580.942012][T10881] __kmalloc_noprof+0xcb/0x7f0 [ 2580.942027][T10881] ? kfree+0x4d/0x6d0 [ 2580.942038][T10881] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 2580.942058][T10881] tomoyo_realpath_from_path+0xe3/0x5d0 [ 2580.942075][T10881] ? tomoyo_domain+0xd9/0x130 [ 2580.942088][T10881] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 2580.942101][T10881] tomoyo_path_number_perm+0x1e8/0x5a0 [ 2580.942116][T10881] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2580.942139][T10881] ? __lock_acquire+0xab9/0xd20 [ 2580.942161][T10881] ? __fget_files+0x2a/0x420 [ 2580.942174][T10881] ? __fget_files+0x3a0/0x420 [ 2580.942183][T10881] ? __fget_files+0x2a/0x420 [ 2580.942196][T10881] security_file_ioctl_compat+0xcb/0x2d0 [ 2580.942211][T10881] __ia32_compat_sys_ioctl+0x128/0x840 [ 2580.942227][T10881] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 2580.942241][T10881] ? __fget_files+0x3a0/0x420 [ 2580.942254][T10881] ? fput+0xa0/0xd0 [ 2580.942267][T10881] ? ksys_write+0x22a/0x250 [ 2580.942283][T10881] ? exc_page_fault+0x82/0x100 [ 2580.942298][T10881] ? __pfx_ksys_write+0x10/0x10 [ 2580.942314][T10881] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 2580.942330][T10881] ? lockdep_hardirqs_on+0x9c/0x150 [ 2580.942346][T10881] __do_fast_syscall_32+0xb6/0x2b0 [ 2580.942357][T10881] ? lockdep_hardirqs_on+0x9c/0x150 [ 2580.942374][T10881] do_fast_syscall_32+0x34/0x80 [ 2580.942384][T10881] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2580.942397][T10881] RIP: 0023:0xf704d539 [ 2580.942408][T10881] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2580.942417][T10881] RSP: 002b:00000000f543d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 2580.942429][T10881] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000000089f1 [ 2580.942437][T10881] RDX: 0000000080000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 2580.942443][T10881] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2580.942450][T10881] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2580.942456][T10881] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2580.942473][T10881] [ 2580.942478][T10881] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2581.426646][T22282] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 2581.494152][T10890] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2581.544129][T10890] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2581.577127][T22282] usb 2-1: Using ep0 maxpacket: 8 [ 2581.594916][T22282] usb 2-1: New USB device found, idVendor=041e, idProduct=401c, bcdDevice=1d.9c [ 2581.613291][T22282] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2581.696154][T22282] usb 2-1: Product: syz [ 2581.716658][ T5959] usb 6-1: new high-speed USB device number 94 using dummy_hcd [ 2581.725851][T22282] usb 2-1: Manufacturer: syz [ 2581.733292][T22282] usb 2-1: SerialNumber: syz [ 2581.745944][T22282] usb 2-1: config 0 descriptor?? [ 2581.753851][T22282] gspca_main: gspca_zc3xx-2.14.0 probing 041e:401c [ 2581.916522][ T5959] usb 6-1: device descriptor read/64, error -71 [ 2581.967220][T10840] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2581.986253][T10840] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2582.075503][T22282] gspca_zc3xx: reg_w_i err -71 [ 2582.177141][ T5959] usb 6-1: new high-speed USB device number 95 using dummy_hcd [ 2582.317549][ T5959] usb 6-1: device descriptor read/64, error -71 [ 2582.396531][T10635] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 2582.447428][ T5959] usb usb6-port1: attempt power cycle [ 2582.575823][T10635] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2582.616683][T10635] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2582.632684][T10635] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2582.651909][T10635] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2582.662633][T10635] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2582.693003][T10635] usb 3-1: config 0 descriptor?? [ 2582.806566][ T5959] usb 6-1: new high-speed USB device number 96 using dummy_hcd [ 2582.827327][ T5959] usb 6-1: device descriptor read/8, error -71 [ 2582.837279][T22282] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 2582.843686][T22282] gspca_zc3xx 2-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 2582.885577][T22282] usb 2-1: USB disconnect, device number 90 [ 2583.076680][ T5959] usb 6-1: new high-speed USB device number 97 using dummy_hcd [ 2583.107165][ T5959] usb 6-1: device descriptor read/8, error -71 [ 2583.127548][T10635] hid_parser_main: 6 callbacks suppressed [ 2583.127571][T10635] plantronics 0003:047F:FFFF.011E: unknown main item tag 0x0 [ 2583.151061][T10635] plantronics 0003:047F:FFFF.011E: unknown main item tag 0x0 [ 2583.161195][T10635] plantronics 0003:047F:FFFF.011E: unknown main item tag 0x0 [ 2583.173577][T10635] plantronics 0003:047F:FFFF.011E: unknown main item tag 0x0 [ 2583.211251][T10635] plantronics 0003:047F:FFFF.011E: unknown main item tag 0x0 [ 2583.219560][ T5959] usb usb6-port1: unable to enumerate USB device [ 2583.230378][T10635] plantronics 0003:047F:FFFF.011E: unknown main item tag 0x0 [ 2583.239401][T10635] plantronics 0003:047F:FFFF.011E: unknown main item tag 0x0 [ 2583.249222][T10635] plantronics 0003:047F:FFFF.011E: unknown main item tag 0x0 [ 2583.263964][T10635] plantronics 0003:047F:FFFF.011E: unknown main item tag 0x0 [ 2583.272270][T10635] plantronics 0003:047F:FFFF.011E: unknown main item tag 0x0 [ 2583.287413][T10635] plantronics 0003:047F:FFFF.011E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 2583.923299][T10925] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2583.982352][T10928] input: syz1 as /devices/virtual/input/input300 [ 2584.576949][T10635] usb 3-1: reset high-speed USB device number 54 using dummy_hcd [ 2584.910511][ T5897] usb 6-1: new high-speed USB device number 98 using dummy_hcd [ 2585.111828][ T5897] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2585.154202][ T5897] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 2585.242139][ T5897] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2585.277691][ T5897] usb 6-1: config 0 descriptor?? [ 2585.301892][ T5897] pwc: Askey VC010 type 2 USB webcam detected. [ 2585.704295][ T5897] pwc: recv_control_msg error -32 req 02 val 2b00 [ 2585.725690][ T5897] pwc: recv_control_msg error -32 req 02 val 2700 [ 2585.757469][ T5897] pwc: recv_control_msg error -32 req 02 val 2c00 [ 2585.758003][ T5959] usb 3-1: USB disconnect, device number 54 [ 2585.794743][ T5897] pwc: recv_control_msg error -32 req 04 val 1000 [ 2585.821098][ T5897] pwc: recv_control_msg error -32 req 04 val 1300 [ 2585.878231][ T5897] pwc: recv_control_msg error -32 req 04 val 1400 [ 2585.941094][ T5897] pwc: recv_control_msg error -32 req 02 val 2000 [ 2585.948627][ T5897] pwc: recv_control_msg error -32 req 02 val 2100 [ 2585.963316][ T5897] pwc: recv_control_msg error -32 req 04 val 1500 [ 2586.406496][T22282] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 2586.556505][T22282] usb 4-1: Using ep0 maxpacket: 8 [ 2586.575946][T22282] usb 4-1: config 0 has an invalid descriptor of length 41, skipping remainder of the config [ 2586.591485][T10973] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2586.621085][T22282] usb 4-1: config 0 interface 0 altsetting 68 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2586.655082][T10973] input: syz1 as /devices/virtual/input/input301 [ 2586.662454][T22282] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2586.700724][T22282] usb 4-1: New USB device found, idVendor=1b96, idProduct=0004, bcdDevice= 0.00 [ 2586.753006][T22282] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2586.802035][T22282] usb 4-1: config 0 descriptor?? [ 2586.853511][T22282] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 2586.975317][T10981] FAULT_INJECTION: forcing a failure. [ 2586.975317][T10981] name failslab, interval 1, probability 0, space 0, times 0 [ 2587.063747][T10981] CPU: 1 UID: 0 PID: 10981 Comm: syz.2.10068 Not tainted syzkaller #0 PREEMPT(full) [ 2587.063789][T10981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2587.063802][T10981] Call Trace: [ 2587.063811][T10981] [ 2587.063820][T10981] dump_stack_lvl+0x189/0x250 [ 2587.063852][T10981] ? __pfx____ratelimit+0x10/0x10 [ 2587.063881][T10981] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2587.063907][T10981] ? __pfx__printk+0x10/0x10 [ 2587.063934][T10981] ? __pfx___might_resched+0x10/0x10 [ 2587.063965][T10981] should_fail_ex+0x414/0x560 [ 2587.063999][T10981] should_failslab+0xa8/0x100 [ 2587.064022][T10981] kmem_cache_alloc_lru_noprof+0x79/0x6d0 [ 2587.064050][T10981] ? __d_alloc+0x36/0x7a0 [ 2587.064077][T10981] __d_alloc+0x36/0x7a0 [ 2587.064104][T10981] d_alloc+0x4b/0x190 [ 2587.064128][T10981] vfs_tmpfile+0x191/0x860 [ 2587.064165][T10981] do_tmpfile+0xd3/0x240 [ 2587.064192][T10981] path_openat+0x30fa/0x3830 [ 2587.064228][T10981] ? stack_trace_save+0x9c/0xe0 [ 2587.064255][T10981] ? stack_depot_save_flags+0x40/0x860 [ 2587.064296][T10981] ? getname_flags+0xb8/0x540 [ 2587.064314][T10981] ? do_sys_openat2+0xbc/0x1c0 [ 2587.064336][T10981] ? do_fast_syscall_32+0x34/0x80 [ 2587.064355][T10981] ? __pfx_path_openat+0x10/0x10 [ 2587.064400][T10981] do_filp_open+0x1fa/0x410 [ 2587.064423][T10981] ? __lock_acquire+0xab9/0xd20 [ 2587.064443][T10981] ? __pfx_do_filp_open+0x10/0x10 [ 2587.064477][T10981] ? __pfx_page_put_link+0x10/0x10 [ 2587.064506][T10981] ? _raw_spin_unlock+0x28/0x50 [ 2587.064529][T10981] ? alloc_fd+0x64c/0x6c0 [ 2587.064570][T10981] do_sys_openat2+0x121/0x1c0 [ 2587.064595][T10981] ? __pfx_do_sys_openat2+0x10/0x10 [ 2587.064620][T10981] ? ksys_write+0x22a/0x250 [ 2587.064645][T10981] ? exc_page_fault+0x82/0x100 [ 2587.064674][T10981] ? __pfx_ksys_write+0x10/0x10 [ 2587.064704][T10981] __ia32_compat_sys_openat+0x131/0x160 [ 2587.064735][T10981] __do_fast_syscall_32+0xb6/0x2b0 [ 2587.064754][T10981] ? lockdep_hardirqs_on+0x9c/0x150 [ 2587.064793][T10981] do_fast_syscall_32+0x34/0x80 [ 2587.064811][T10981] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2587.064834][T10981] RIP: 0023:0xf707d539 [ 2587.064852][T10981] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2587.064870][T10981] RSP: 002b:00000000f544c55c EFLAGS: 00000206 ORIG_RAX: 0000000000000127 [ 2587.064891][T10981] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800000c0 [ 2587.064904][T10981] RDX: 0000000000515a02 RSI: 00000000ad664fa4 RDI: 0000000000000000 [ 2587.064917][T10981] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2587.064929][T10981] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2587.064941][T10981] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2587.064973][T10981] [ 2587.621053][ T5897] pwc: recv_control_msg error -71 req 02 val 2500 [ 2587.628503][ T5897] pwc: recv_control_msg error -71 req 02 val 2400 [ 2587.635313][ T5897] pwc: recv_control_msg error -71 req 02 val 2600 [ 2587.642451][ T5897] pwc: recv_control_msg error -71 req 02 val 2900 [ 2587.650545][ T5897] pwc: recv_control_msg error -71 req 02 val 2800 [ 2587.667945][ T5897] pwc: recv_control_msg error -71 req 04 val 1100 [ 2587.691287][ T5897] pwc: recv_control_msg error -71 req 04 val 1200 [ 2587.735310][ T5897] pwc: Registered as video103. [ 2587.758784][ T5897] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input302 [ 2587.833329][ T5897] usb 6-1: USB disconnect, device number 98 [ 2588.256984][T22282] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 2588.416493][T22282] usb 3-1: Using ep0 maxpacket: 16 [ 2588.425875][T22282] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC6, changing to 0x86 [ 2588.448714][T22282] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 2588.470435][T22282] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 0 [ 2588.494987][T22282] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2588.535207][T22282] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 2588.557529][T22282] usb 3-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 2588.598250][T22282] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2588.631044][T22282] usb 3-1: Product: syz [ 2588.651179][T22282] usb 3-1: Manufacturer: syz [ 2588.655809][T22282] usb 3-1: SerialNumber: syz [ 2588.829652][T22282] usb 3-1: config 0 descriptor?? [ 2588.838194][T22282] port100 3-1:0.0: NFC: Could not get supported command types [ 2589.070227][T10635] usb 3-1: USB disconnect, device number 55 [ 2589.103067][T22282] usb 4-1: USB disconnect, device number 7 [ 2589.597652][T11024] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2589.662262][T11024] input: syz1 as /devices/virtual/input/input303 [ 2590.460889][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 2590.467457][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 2590.716460][ T8170] vhci_hcd: connection reset by peer [ 2590.824472][T17880] vhci_hcd: stop threads [ 2590.849474][T17880] vhci_hcd: release socket [ 2590.886200][T17880] vhci_hcd: disconnect device [ 2590.946585][ T5906] vhci_hcd: vhci_device speed not set [ 2591.843242][T11065] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2591.881999][T11066] input: syz1 as /devices/virtual/input/input304 [ 2592.406522][ T24] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 2592.579083][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2592.599705][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2592.623289][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2592.666667][ T24] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2592.675748][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2592.704732][ T24] usb 4-1: config 0 descriptor?? [ 2592.804300][T26022] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 2592.950208][T11080] FAULT_INJECTION: forcing a failure. [ 2592.950208][T11080] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2593.013101][T11080] CPU: 0 UID: 0 PID: 11080 Comm: syz.6.10095 Not tainted syzkaller #0 PREEMPT(full) [ 2593.013128][T11080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2593.013140][T11080] Call Trace: [ 2593.013149][T11080] [ 2593.013157][T11080] dump_stack_lvl+0x189/0x250 [ 2593.013185][T11080] ? __pfx____ratelimit+0x10/0x10 [ 2593.013210][T11080] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2593.013236][T11080] ? __pfx__printk+0x10/0x10 [ 2593.013255][T11080] ? __might_fault+0xb0/0x130 [ 2593.013291][T11080] should_fail_ex+0x414/0x560 [ 2593.013326][T11080] _copy_from_user+0x2d/0xb0 [ 2593.013351][T11080] ? __pfx_do_set_msr+0x10/0x10 [ 2593.013372][T11080] msr_io+0xa2/0x8d0 [ 2593.013399][T11080] ? kvm_arch_vcpu_ioctl+0x6e9/0x2b20 [ 2593.013422][T11080] ? __pfx_msr_io+0x10/0x10 [ 2593.013454][T11080] kvm_arch_vcpu_ioctl+0x723/0x2b20 [ 2593.013475][T11080] ? __lock_acquire+0xab9/0xd20 [ 2593.013495][T11080] ? kvm_arch_vcpu_ioctl+0x6e9/0x2b20 [ 2593.013520][T11080] ? __pfx_kvm_arch_vcpu_ioctl+0x10/0x10 [ 2593.013548][T11080] ? __lock_acquire+0xab9/0xd20 [ 2593.013582][T11080] ? __lock_acquire+0xab9/0xd20 [ 2593.013624][T11080] ? is_bpf_text_address+0x26/0x2b0 [ 2593.013652][T11080] ? is_bpf_text_address+0x292/0x2b0 [ 2593.013673][T11080] ? is_bpf_text_address+0x26/0x2b0 [ 2593.013696][T11080] ? kernel_text_address+0xa5/0xe0 [ 2593.013727][T11080] ? __kernel_text_address+0xd/0x40 [ 2593.013755][T11080] ? unwind_get_return_address+0x4d/0x90 [ 2593.013778][T11080] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 2593.013805][T11080] ? arch_stack_walk+0xfc/0x150 [ 2593.013851][T11080] ? __lock_acquire+0xab9/0xd20 [ 2593.013881][T11080] ? __mutex_trylock_common+0x153/0x260 [ 2593.013908][T11080] ? __pfx___mutex_trylock_common+0x10/0x10 [ 2593.013931][T11080] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2593.013966][T11080] ? rcu_is_watching+0x15/0xb0 [ 2593.013989][T11080] ? trace_contention_end+0x39/0x120 [ 2593.014014][T11080] ? __mutex_lock+0x335/0x1350 [ 2593.014063][T11080] ? kvm_vcpu_ioctl+0x22e/0xe90 [ 2593.014095][T11080] ? __pfx___mutex_lock+0x10/0x10 [ 2593.014133][T11080] ? lockdep_hardirqs_on+0x9c/0x150 [ 2593.014170][T11080] kvm_vcpu_ioctl+0x74d/0xe90 [ 2593.014203][T11080] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 2593.014226][T11080] ? do_vfs_ioctl+0xbe8/0x1430 [ 2593.014253][T11080] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 2593.014294][T11080] ? __lock_acquire+0xab9/0xd20 [ 2593.014334][T11080] kvm_vcpu_compat_ioctl+0x203/0x390 [ 2593.014365][T11080] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 2593.014391][T11080] ? __fget_files+0x3a0/0x420 [ 2593.014408][T11080] ? __fget_files+0x2a/0x420 [ 2593.014431][T11080] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 2593.014459][T11080] __ia32_compat_sys_ioctl+0x543/0x840 [ 2593.014489][T11080] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 2593.014517][T11080] ? __fget_files+0x3a0/0x420 [ 2593.014543][T11080] ? fput+0xa0/0xd0 [ 2593.014566][T11080] ? ksys_write+0x22a/0x250 [ 2593.014592][T11080] ? exc_page_fault+0x82/0x100 [ 2593.014620][T11080] ? __pfx_ksys_write+0x10/0x10 [ 2593.014652][T11080] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 2593.014684][T11080] ? lockdep_hardirqs_on+0x9c/0x150 [ 2593.014716][T11080] __do_fast_syscall_32+0xb6/0x2b0 [ 2593.014736][T11080] ? lockdep_hardirqs_on+0x9c/0x150 [ 2593.014769][T11080] do_fast_syscall_32+0x34/0x80 [ 2593.014788][T11080] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2593.014812][T11080] RIP: 0023:0xf7fd7539 [ 2593.014829][T11080] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2593.014846][T11080] RSP: 002b:00000000f54c655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 2593.014868][T11080] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000004008ae89 [ 2593.014882][T11080] RDX: 0000000080000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 2593.014895][T11080] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2593.014907][T11080] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2593.014919][T11080] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2593.014952][T11080] [ 2593.278427][ T24] hid_parser_main: 5 callbacks suppressed [ 2593.278450][ T24] plantronics 0003:047F:FFFF.011F: unknown main item tag 0x0 [ 2593.538681][T26022] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 2593.755459][ T24] plantronics 0003:047F:FFFF.011F: unknown main item tag 0x0 [ 2593.785053][ T24] plantronics 0003:047F:FFFF.011F: unknown main item tag 0x0 [ 2593.846618][ T24] plantronics 0003:047F:FFFF.011F: unknown main item tag 0x0 [ 2593.854063][ T24] plantronics 0003:047F:FFFF.011F: unknown main item tag 0x0 [ 2593.909440][ T24] plantronics 0003:047F:FFFF.011F: unknown main item tag 0x0 [ 2593.936443][ T24] plantronics 0003:047F:FFFF.011F: unknown main item tag 0x0 [ 2593.966565][ T24] plantronics 0003:047F:FFFF.011F: unknown main item tag 0x0 [ 2593.973993][ T24] plantronics 0003:047F:FFFF.011F: unknown main item tag 0x0 [ 2594.066492][ T24] plantronics 0003:047F:FFFF.011F: unknown main item tag 0x0 [ 2594.133734][T26022] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 2594.193354][ T24] plantronics 0003:047F:FFFF.011F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 2594.239716][ T24] usb 4-1: USB disconnect, device number 8 [ 2594.453787][T11104] fido_id[11104]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 2594.554604][ T5834] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2594.569291][ T5834] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2594.578199][ T5834] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2594.586126][ T5834] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2594.613677][ T5834] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2594.641542][T26022] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 2595.048413][T11110] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2595.088561][T11111] input: syz1 as /devices/virtual/input/input305 [ 2595.397193][T11113] netlink: 'syz.5.10105': attribute type 33 has an invalid length. [ 2595.429965][T11113] netlink: 152 bytes leftover after parsing attributes in process `syz.5.10105'. [ 2595.518162][T11113] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10105'. [ 2595.788123][T26022] bridge_slave_1: left allmulticast mode [ 2595.834821][T26022] bridge_slave_1: left promiscuous mode [ 2595.880699][T26022] bridge0: port 2(bridge_slave_1) entered disabled state [ 2596.023848][T26022] bridge_slave_0: left allmulticast mode [ 2596.041851][T26022] bridge0: port 1(bridge_slave_0) entered disabled state [ 2596.687985][ T5834] Bluetooth: hci0: command tx timeout [ 2597.478136][T26022] bond0 (unregistering): (slave geneve2): Releasing active interface [ 2597.487010][T30727] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 2597.678691][T30727] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2597.689921][T30727] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2597.699749][T30727] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2597.712768][T30727] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2597.721842][T30727] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2597.754446][T30727] usb 4-1: config 0 descriptor?? [ 2598.137883][T26022] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 2598.147241][T26022] bond_slave_0: left promiscuous mode [ 2598.152852][T26022] bond_slave_0: left allmulticast mode [ 2598.161433][T26022] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 2598.171133][T26022] bond_slave_1: left promiscuous mode [ 2598.177589][T26022] bond_slave_1: left allmulticast mode [ 2598.184587][T26022] .` (unregistering): Released all slaves [ 2598.303782][T30727] hid_parser_main: 5 callbacks suppressed [ 2598.303798][T30727] plantronics 0003:047F:FFFF.0120: unknown main item tag 0x0 [ 2598.334253][T30727] plantronics 0003:047F:FFFF.0120: unknown main item tag 0x0 [ 2598.344395][T30727] plantronics 0003:047F:FFFF.0120: unknown main item tag 0x0 [ 2598.377762][T30727] plantronics 0003:047F:FFFF.0120: unknown main item tag 0x0 [ 2598.408425][T30727] plantronics 0003:047F:FFFF.0120: unknown main item tag 0x0 [ 2598.415824][T30727] plantronics 0003:047F:FFFF.0120: unknown main item tag 0x0 [ 2598.448761][T30727] plantronics 0003:047F:FFFF.0120: unknown main item tag 0x0 [ 2598.457001][T30727] plantronics 0003:047F:FFFF.0120: unknown main item tag 0x0 [ 2598.478383][T30727] plantronics 0003:047F:FFFF.0120: unknown main item tag 0x0 [ 2598.485784][T30727] plantronics 0003:047F:FFFF.0120: unknown main item tag 0x0 [ 2598.513428][T26022] bond0 (unregistering): Released all slaves [ 2598.539945][T30727] plantronics 0003:047F:FFFF.0120: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 2598.638284][T30727] usb 4-1: USB disconnect, device number 9 [ 2598.723531][T11170] fido_id[11170]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 2598.753782][T26022] tipc: Left network mode [ 2598.767493][ T5834] Bluetooth: hci0: command tx timeout [ 2598.955311][T11173] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2599.005234][T11177] input: syz1 as /devices/virtual/input/input306 [ 2599.120646][T11108] chnl_net:caif_netlink_parms(): no params data found [ 2599.576825][T22282] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 2599.662632][T26022] hsr_slave_0: left promiscuous mode [ 2599.727087][T26022] hsr_slave_1: left promiscuous mode [ 2599.768286][T22282] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 2599.814933][T22282] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 2599.871465][T22282] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2599.928648][T22282] usb 4-1: config 0 descriptor?? [ 2599.934121][T11191] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 2600.416993][T22282] elan 0003:04F3:0755.0121: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.3-1/input0 [ 2600.855780][ T5834] Bluetooth: hci0: command tx timeout [ 2600.871610][T11218] vivid-000: disconnect [ 2601.222733][T26022] team_slave_1 (unregistering): left promiscuous mode [ 2601.229688][T26022] team_slave_1 (unregistering): left allmulticast mode [ 2601.238796][T26022] team0 (unregistering): Port device team_slave_1 removed [ 2601.306774][T26022] team_slave_0 (unregistering): left promiscuous mode [ 2601.313825][T26022] team_slave_0 (unregistering): left allmulticast mode [ 2601.322962][T26022] team0 (unregistering): Port device team_slave_0 removed [ 2601.634544][ T24] usb 4-1: reset full-speed USB device number 10 using dummy_hcd [ 2601.780832][ T24] usb 4-1: device descriptor read/64, error -32 [ 2601.833414][T11221] vivid-000: reconnect [ 2602.035581][ T24] usb 4-1: reset full-speed USB device number 10 using dummy_hcd [ 2602.176488][ T24] usb 4-1: device descriptor read/64, error -32 [ 2602.416505][ T24] usb 4-1: reset full-speed USB device number 10 using dummy_hcd [ 2602.446794][ T24] usb 4-1: device descriptor read/8, error -32 [ 2602.707642][T11240] netlink: 'syz.6.10128': attribute type 1 has an invalid length. [ 2602.888449][T11108] bridge0: port 1(bridge_slave_0) entered blocking state [ 2602.895673][T11108] bridge0: port 1(bridge_slave_0) entered disabled state [ 2602.924978][T11108] bridge_slave_0: entered allmulticast mode [ 2602.931496][ T5834] Bluetooth: hci0: command tx timeout [ 2602.972885][T11108] bridge_slave_0: entered promiscuous mode [ 2603.005750][T11108] bridge0: port 2(bridge_slave_1) entered blocking state [ 2603.037004][T11108] bridge0: port 2(bridge_slave_1) entered disabled state [ 2603.044363][T11108] bridge_slave_1: entered allmulticast mode [ 2603.053151][T11108] bridge_slave_1: entered promiscuous mode [ 2603.107227][T11248] input: syz1 as /devices/virtual/input/input307 [ 2603.139780][T11246] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2603.261379][T11108] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2603.291363][T11108] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2603.338773][T22282] usb 4-1: USB disconnect, device number 10 [ 2603.450367][T11108] team0: Port device team_slave_0 added [ 2603.508903][T11108] team0: Port device team_slave_1 added [ 2603.741885][T11108] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2603.761148][T11108] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2603.800833][T11108] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2603.836323][T11108] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2603.839459][T26022] IPVS: stop unused estimator thread 0... [ 2603.868444][T11108] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2603.923625][T11108] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2604.241655][T11108] hsr_slave_0: entered promiscuous mode [ 2604.263569][T11108] hsr_slave_1: entered promiscuous mode [ 2604.279285][T11108] debugfs: 'hsr0' already exists in 'hsr' [ 2604.296511][T11108] Cannot create hsr debugfs directory [ 2604.514245][T11277] usb usb8: usbfs: process 11277 (syz.2.10135) did not claim interface 0 before use [ 2604.818914][ T24] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 2604.986549][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 2605.008859][ T24] usb 4-1: config 0 has an invalid interface number: 49 but max is 0 [ 2605.017260][ T24] usb 4-1: config 0 has no interface number 0 [ 2605.023352][ T24] usb 4-1: config 0 interface 49 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 16 [ 2605.055465][ T24] usb 4-1: config 0 interface 49 altsetting 0 has an endpoint descriptor with address 0x69, changing to 0x9 [ 2605.069799][ T24] usb 4-1: config 0 interface 49 altsetting 0 endpoint 0x9 has an invalid bInterval 0, changing to 7 [ 2605.083550][ T24] usb 4-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=76.b7 [ 2605.103982][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2605.122727][ T24] usb 4-1: Product: syz [ 2605.127363][ T24] usb 4-1: Manufacturer: syz [ 2605.131991][ T24] usb 4-1: SerialNumber: syz [ 2605.160649][ T24] usb 4-1: config 0 descriptor?? [ 2605.161281][T11108] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 2605.167958][T11280] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 2605.227480][T11108] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 2605.274016][T11108] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 2605.322365][T11108] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 2605.462096][ T24] usb 4-1: USB disconnect, device number 11 [ 2605.721396][T11108] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2605.864182][T11108] 8021q: adding VLAN 0 to HW filter on device team0 [ 2605.887310][T30727] usb 6-1: new high-speed USB device number 99 using dummy_hcd [ 2605.957124][T26022] bridge0: port 1(bridge_slave_0) entered blocking state [ 2605.964253][T26022] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2606.056801][T30727] usb 6-1: Using ep0 maxpacket: 32 [ 2606.064695][T30727] usb 6-1: config 242 has an invalid interface number: 219 but max is 0 [ 2606.094890][T26022] bridge0: port 2(bridge_slave_1) entered blocking state [ 2606.102104][T26022] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2606.109953][T30727] usb 6-1: config 242 has no interface number 0 [ 2606.116286][T30727] usb 6-1: config 242 interface 219 altsetting 129 bulk endpoint 0x2 has invalid maxpacket 8 [ 2606.153867][T30727] usb 6-1: config 242 interface 219 has no altsetting 0 [ 2606.179679][T30727] usb 6-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=62.a4 [ 2606.196424][T30727] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2606.215096][T30727] usb 6-1: Product: syz [ 2606.246450][T30727] usb 6-1: Manufacturer: syz [ 2606.251528][T30727] usb 6-1: SerialNumber: syz [ 2606.315448][T11108] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2606.328197][ T30] kauditd_printk_skb: 147 callbacks suppressed [ 2606.328225][ T30] audit: type=1326 audit(1763606051.252:6959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11309 comm="syz.6.10139" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd7539 code=0x7ffc0000 [ 2606.390444][T11303] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 2606.452784][ T30] audit: type=1326 audit(1763606051.252:6960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11309 comm="syz.6.10139" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd7539 code=0x7ffc0000 [ 2606.471194][T11108] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2606.540948][ T30] audit: type=1326 audit(1763606051.312:6961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11309 comm="syz.6.10139" exe="/root/syz-executor" sig=0 arch=40000003 syscall=331 compat=1 ip=0xf7fd7539 code=0x7ffc0000 [ 2606.647507][ T30] audit: type=1326 audit(1763606051.322:6962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11309 comm="syz.6.10139" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd7539 code=0x7ffc0000 [ 2606.716623][ T30] audit: type=1326 audit(1763606051.322:6963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11309 comm="syz.6.10139" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd7539 code=0x7ffc0000 [ 2606.740353][ T30] audit: type=1326 audit(1763606051.322:6964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11309 comm="syz.6.10139" exe="/root/syz-executor" sig=0 arch=40000003 syscall=316 compat=1 ip=0xf7fd7539 code=0x7ffc0000 [ 2606.790696][ T30] audit: type=1326 audit(1763606051.322:6965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11309 comm="syz.6.10139" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd7539 code=0x7ffc0000 [ 2606.841713][ T30] audit: type=1326 audit(1763606051.322:6966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11309 comm="syz.6.10139" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd7539 code=0x7ffc0000 [ 2606.932466][ T30] audit: type=1326 audit(1763606051.322:6967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11309 comm="syz.6.10139" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fd7539 code=0x7ffc0000 [ 2606.968657][ T30] audit: type=1326 audit(1763606051.332:6968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11309 comm="syz.6.10139" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd7539 code=0x7ffc0000 [ 2606.993902][T11108] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2607.024064][T11325] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2607.149250][T11326] input: syz1 as /devices/virtual/input/input308 [ 2607.305508][T11108] veth0_vlan: entered promiscuous mode [ 2607.322600][T11108] veth1_vlan: entered promiscuous mode [ 2607.504003][T11108] veth0_macvtap: entered promiscuous mode [ 2607.564556][T11108] veth1_macvtap: entered promiscuous mode [ 2607.608113][T11108] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2607.625001][T11108] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2607.677856][T17880] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2607.710167][T17880] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2607.776301][T17880] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2607.812604][T17880] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2607.963289][ T1153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2608.007980][ T1153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2608.120606][ T1153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2608.138132][ T1153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2608.633155][T30727] usbserial_generic 6-1:242.219: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 2608.657437][T30727] usbserial_generic 6-1:242.219: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 2608.700304][T30727] usbserial_generic 6-1:242.219: generic converter detected [ 2608.727811][T30727] usb 6-1: generic converter now attached to ttyUSB0 [ 2608.786405][T30727] usb 6-1: USB disconnect, device number 99 [ 2608.854496][T11352] FAULT_INJECTION: forcing a failure. [ 2608.854496][T11352] name failslab, interval 1, probability 0, space 0, times 0 [ 2608.874337][T30727] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 2608.923268][T30727] usbserial_generic 6-1:242.219: device disconnected [ 2608.950034][T11352] CPU: 1 UID: 0 PID: 11352 Comm: syz.5.10146 Not tainted syzkaller #0 PREEMPT(full) [ 2608.950061][T11352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2608.950074][T11352] Call Trace: [ 2608.950081][T11352] [ 2608.950090][T11352] dump_stack_lvl+0x189/0x250 [ 2608.950124][T11352] ? __pfx____ratelimit+0x10/0x10 [ 2608.950151][T11352] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2608.950177][T11352] ? __pfx__printk+0x10/0x10 [ 2608.950200][T11352] ? __pfx___might_resched+0x10/0x10 [ 2608.950222][T11352] ? fs_reclaim_acquire+0x7d/0x100 [ 2608.950264][T11352] should_fail_ex+0x414/0x560 [ 2608.950299][T11352] should_failslab+0xa8/0x100 [ 2608.950322][T11352] __kmalloc_cache_noprof+0x6f/0x6f0 [ 2608.950351][T11352] ? nf_nat_masq_schedule+0x239/0x550 [ 2608.950371][T11352] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 2608.950403][T11352] nf_nat_masq_schedule+0x239/0x550 [ 2608.950423][T11352] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2608.950452][T11352] ? __pfx_device_cmp+0x10/0x10 [ 2608.950468][T11352] ? __pfx_nf_nat_masq_schedule+0x10/0x10 [ 2608.950485][T11352] ? nfqnl_rcv_dev_event+0x73b/0x780 [ 2608.950510][T11352] ? nfqnl_rcv_dev_event+0xb1/0x780 [ 2608.950541][T11352] masq_device_event+0xa2/0xe0 [ 2608.950557][T11352] notifier_call_chain+0x1b6/0x3e0 [ 2608.950586][T11352] __dev_notify_flags+0x18d/0x2e0 [ 2608.950610][T11352] ? __pfx___dev_notify_flags+0x10/0x10 [ 2608.950629][T11352] ? __dev_change_flags+0x4cc/0x6d0 [ 2608.950657][T11352] ? __pfx___dev_change_flags+0x10/0x10 [ 2608.950684][T11352] ? is_bpf_text_address+0x26/0x2b0 [ 2608.950712][T11352] netif_change_flags+0xe8/0x1a0 [ 2608.950739][T11352] do_setlink+0xc55/0x41c0 [ 2608.950765][T11352] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 2608.950804][T11352] ? __pfx_do_setlink+0x10/0x10 [ 2608.950826][T11352] ? stack_trace_save+0x9c/0xe0 [ 2608.950852][T11352] ? __pfx_stack_trace_save+0x10/0x10 [ 2608.950888][T11352] ? __lock_acquire+0xab9/0xd20 [ 2608.950921][T11352] ? __mutex_trylock_common+0x153/0x260 [ 2608.950949][T11352] ? __pfx___mutex_trylock_common+0x10/0x10 [ 2608.950979][T11352] ? rcu_is_watching+0x15/0xb0 [ 2608.951001][T11352] ? trace_contention_end+0x39/0x120 [ 2608.951026][T11352] ? __mutex_lock+0x335/0x1350 [ 2608.951069][T11352] ? rtnl_newlink+0x8e9/0x1c80 [ 2608.951103][T11352] ? __pfx___mutex_lock+0x10/0x10 [ 2608.951143][T11352] ? ns_capable+0x8a/0xf0 [ 2608.951167][T11352] ? rtnl_link_get_net_capable+0x16a/0x350 [ 2608.951192][T11352] rtnl_newlink+0x1619/0x1c80 [ 2608.951221][T11352] ? netlink_deliver_tap+0x19c/0x1b0 [ 2608.951260][T11352] ? __pfx_rtnl_newlink+0x10/0x10 [ 2608.951316][T11352] ? kasan_quarantine_put+0xdd/0x220 [ 2608.951363][T11352] ? lockdep_hardirqs_on+0x9c/0x150 [ 2608.951404][T11352] ? nlmon_xmit+0xb0/0x100 [ 2608.951427][T11352] ? kmem_cache_free+0x19b/0x690 [ 2608.951467][T11352] ? __local_bh_enable_ip+0x12d/0x1c0 [ 2608.951490][T11352] ? lockdep_hardirqs_on+0x9c/0x150 [ 2608.951519][T11352] ? __local_bh_enable_ip+0x12d/0x1c0 [ 2608.951541][T11352] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 2608.951568][T11352] ? __dev_queue_xmit+0x27b/0x3b50 [ 2608.951593][T11352] ? __dev_queue_xmit+0x27b/0x3b50 [ 2608.951615][T11352] ? __dev_queue_xmit+0x27b/0x3b50 [ 2608.951641][T11352] ? __dev_queue_xmit+0x1d79/0x3b50 [ 2608.951663][T11352] ? kasan_save_track+0x3e/0x80 [ 2608.951690][T11352] ? __kasan_slab_alloc+0x6c/0x80 [ 2608.951724][T11352] ? __lock_acquire+0xab9/0xd20 [ 2608.951770][T11352] ? __pfx_rtnl_newlink+0x10/0x10 [ 2608.951800][T11352] rtnetlink_rcv_msg+0x7cf/0xb70 [ 2608.951835][T11352] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 2608.951865][T11352] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 2608.951893][T11352] ? ref_tracker_free+0x63a/0x7d0 [ 2608.951914][T11352] ? __asan_memcpy+0x40/0x70 [ 2608.951940][T11352] ? __pfx_ref_tracker_free+0x10/0x10 [ 2608.951958][T11352] ? __skb_clone+0x63/0x7a0 [ 2608.951990][T11352] netlink_rcv_skb+0x208/0x470 [ 2608.952011][T11352] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 2608.952043][T11352] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2608.952076][T11352] ? netlink_deliver_tap+0x2e/0x1b0 [ 2608.952104][T11352] netlink_unicast+0x82f/0x9e0 [ 2608.952143][T11352] ? __pfx_netlink_unicast+0x10/0x10 [ 2608.952174][T11352] ? netlink_sendmsg+0x642/0xb30 [ 2608.952193][T11352] ? skb_put+0x11b/0x210 [ 2608.952216][T11352] netlink_sendmsg+0x805/0xb30 [ 2608.952253][T11352] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2608.952277][T11352] ? __import_iovec+0x5d4/0x7f0 [ 2608.952301][T11352] ? aa_sock_msg_perm+0xf1/0x1d0 [ 2608.952333][T11352] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2608.952353][T11352] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2608.952375][T11352] __sock_sendmsg+0x21c/0x270 [ 2608.952407][T11352] ____sys_sendmsg+0x505/0x830 [ 2608.952436][T11352] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2608.952475][T11352] ___sys_sendmsg+0x21f/0x2a0 [ 2608.952500][T11352] ? __pfx____sys_sendmsg+0x10/0x10 [ 2608.952561][T11352] ? __fget_files+0x2a/0x420 [ 2608.952579][T11352] ? __fget_files+0x3a0/0x420 [ 2608.952610][T11352] __sys_sendmsg+0x164/0x220 [ 2608.952635][T11352] ? __pfx___sys_sendmsg+0x10/0x10 [ 2608.952667][T11352] ? __pfx_ksys_write+0x10/0x10 [ 2608.952699][T11352] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 2608.952731][T11352] ? lockdep_hardirqs_on+0x9c/0x150 [ 2608.952763][T11352] __do_fast_syscall_32+0xb6/0x2b0 [ 2608.952783][T11352] ? lockdep_hardirqs_on+0x9c/0x150 [ 2608.952817][T11352] do_fast_syscall_32+0x34/0x80 [ 2608.952836][T11352] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2608.952861][T11352] RIP: 0023:0xf70ed539 [ 2608.952880][T11352] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2608.952897][T11352] RSP: 002b:00000000f54dd55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 2608.952919][T11352] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000140 [ 2608.952934][T11352] RDX: 0000000000008080 RSI: 0000000000000000 RDI: 0000000000000000 [ 2608.952947][T11352] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2608.952959][T11352] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2608.952971][T11352] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2608.953002][T11352] [ 2610.016541][ T5959] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 2610.196932][ T5959] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2610.218104][T11372] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2610.235777][ T5959] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2610.266651][T11372] input: syz1 as /devices/virtual/input/input309 [ 2610.284442][ T5959] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2610.319504][ T5959] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2610.340142][ T5959] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2610.355930][ T5959] usb 3-1: config 0 descriptor?? [ 2610.783259][ T5959] hid_parser_main: 5 callbacks suppressed [ 2610.783286][ T5959] plantronics 0003:047F:FFFF.0122: unknown main item tag 0x0 [ 2610.897039][ T5959] plantronics 0003:047F:FFFF.0122: unknown main item tag 0x0 [ 2610.941180][ T5959] plantronics 0003:047F:FFFF.0122: unknown main item tag 0x0 [ 2610.993854][ T5959] plantronics 0003:047F:FFFF.0122: unknown main item tag 0x0 [ 2611.036618][ T5959] plantronics 0003:047F:FFFF.0122: unknown main item tag 0x0 [ 2611.044786][ T5959] plantronics 0003:047F:FFFF.0122: unknown main item tag 0x0 [ 2611.063156][ T5959] plantronics 0003:047F:FFFF.0122: unknown main item tag 0x0 [ 2611.116562][ T5959] plantronics 0003:047F:FFFF.0122: unknown main item tag 0x0 [ 2611.124022][ T5959] plantronics 0003:047F:FFFF.0122: unknown main item tag 0x0 [ 2611.162301][ T5959] plantronics 0003:047F:FFFF.0122: unknown main item tag 0x0 [ 2611.230778][ T5959] plantronics 0003:047F:FFFF.0122: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 2611.294229][ T5959] usb 3-1: USB disconnect, device number 56 [ 2611.338271][T11401] fido_id[11401]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 2611.995289][T11416] usb usb8: usbfs: process 11416 (syz.5.10165) did not claim interface 0 before use [ 2612.244266][T11422] input: syz1 as /devices/virtual/input/input310 [ 2612.263973][T11420] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2613.326980][T12611] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 2613.527983][T12611] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2613.546864][T12611] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2613.560050][T12611] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2613.577670][T12611] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2613.587298][T12611] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2613.626612][T12611] usb 4-1: config 0 descriptor?? [ 2614.085536][T12611] plantronics 0003:047F:FFFF.0123: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 2614.208957][T11469] input: syz1 as /devices/virtual/input/input311 [ 2614.637452][T11468] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2614.660848][T12611] usb 4-1: USB disconnect, device number 12 [ 2614.982525][T11483] netlink: 48 bytes leftover after parsing attributes in process `syz.6.10183'. [ 2615.220033][T11485] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 2615.387484][T11489] syzkaller0: entered promiscuous mode [ 2615.414234][T11489] syzkaller0: entered allmulticast mode [ 2615.428866][T11488] tipc: Started in network mode [ 2615.456429][T11488] tipc: Node identity 0ef3d297fad8, cluster identity 4711 [ 2615.487861][T11488] tipc: Enabled bearer , priority 0 [ 2615.544087][T11488] tipc: Resetting bearer [ 2615.630535][T11488] tipc: Disabling bearer [ 2615.657282][T11499] netlink: 'syz.7.10188': attribute type 1 has an invalid length. [ 2615.701400][T11499] FAULT_INJECTION: forcing a failure. [ 2615.701400][T11499] name failslab, interval 1, probability 0, space 0, times 0 [ 2615.768000][T11499] CPU: 1 UID: 0 PID: 11499 Comm: syz.7.10188 Not tainted syzkaller #0 PREEMPT(full) [ 2615.768028][T11499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2615.768040][T11499] Call Trace: [ 2615.768048][T11499] [ 2615.768057][T11499] dump_stack_lvl+0x189/0x250 [ 2615.768089][T11499] ? __pfx____ratelimit+0x10/0x10 [ 2615.768125][T11499] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2615.768153][T11499] ? __pfx__printk+0x10/0x10 [ 2615.768180][T11499] ? __pfx___might_resched+0x10/0x10 [ 2615.768207][T11499] should_fail_ex+0x414/0x560 [ 2615.768243][T11499] should_failslab+0xa8/0x100 [ 2615.768266][T11499] kmem_cache_alloc_noprof+0x74/0x6e0 [ 2615.768295][T11499] ? fanotify_add_mark+0x326/0x1470 [ 2615.768330][T11499] fanotify_add_mark+0x326/0x1470 [ 2615.768360][T11499] ? fanotify_test_fsid+0x243/0x3c0 [ 2615.768399][T11499] ? fanotify_events_supported+0x372/0x400 [ 2615.768434][T11499] do_fanotify_mark+0xe54/0xfa0 [ 2615.768477][T11499] ? __pfx_do_fanotify_mark+0x10/0x10 [ 2615.768517][T11499] ? __pfx_ksys_write+0x10/0x10 [ 2615.768551][T11499] __ia32_compat_sys_fanotify_mark+0xdc/0x100 [ 2615.768583][T11499] __do_fast_syscall_32+0xb6/0x2b0 [ 2615.768602][T11499] ? lockdep_hardirqs_on+0x9c/0x150 [ 2615.768633][T11499] do_fast_syscall_32+0x34/0x80 [ 2615.768652][T11499] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2615.768677][T11499] RIP: 0023:0xf70ad539 [ 2615.768693][T11499] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2615.768711][T11499] RSP: 002b:00000000f549d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000153 [ 2615.768733][T11499] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000000001 [ 2615.768746][T11499] RDX: 0000000000000012 RSI: 0000000000000000 RDI: 0000000000000000 [ 2615.768759][T11499] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2615.768772][T11499] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2615.768784][T11499] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2615.768814][T11499] [ 2616.313234][T11511] netlink: 'syz.7.10192': attribute type 1 has an invalid length. [ 2616.316516][T16699] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 2616.368446][T11513] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2616.394443][T11515] input: syz1 as /devices/virtual/input/input312 [ 2616.559148][T16699] usb 3-1: Using ep0 maxpacket: 32 [ 2616.567941][T16699] usb 3-1: config 0 has an invalid interface number: 146 but max is 0 [ 2616.586533][T16699] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2616.611850][T16699] usb 3-1: config 0 has no interface number 0 [ 2616.619438][T16699] usb 3-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2616.646568][T16699] usb 3-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 2616.685497][T16699] usb 3-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 2616.751230][T16699] usb 3-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 2616.776676][T16699] usb 3-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 2616.792367][T11526] FAULT_INJECTION: forcing a failure. [ 2616.792367][T11526] name failslab, interval 1, probability 0, space 0, times 0 [ 2616.805895][T11526] CPU: 0 UID: 0 PID: 11526 Comm: syz.7.10197 Not tainted syzkaller #0 PREEMPT(full) [ 2616.805922][T11526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2616.805934][T11526] Call Trace: [ 2616.805941][T11526] [ 2616.805948][T11526] dump_stack_lvl+0x189/0x250 [ 2616.805978][T11526] ? __pfx____ratelimit+0x10/0x10 [ 2616.806000][T11526] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2616.806020][T11526] ? __pfx__printk+0x10/0x10 [ 2616.806039][T11526] ? __pfx___might_resched+0x10/0x10 [ 2616.806060][T11526] ? fs_reclaim_acquire+0x7d/0x100 [ 2616.806096][T11526] should_fail_ex+0x414/0x560 [ 2616.806130][T11526] should_failslab+0xa8/0x100 [ 2616.806150][T11526] __kmalloc_cache_noprof+0x6f/0x6f0 [ 2616.806179][T11526] ? __mutex_trylock_common+0x153/0x260 [ 2616.806202][T11526] ? ctnetlink_alloc_filter+0xb2/0xb20 [ 2616.806240][T11526] ctnetlink_alloc_filter+0xb2/0xb20 [ 2616.806266][T11526] ? rcu_is_watching+0x15/0xb0 [ 2616.806286][T11526] ? __pfx_ctnetlink_alloc_filter+0x10/0x10 [ 2616.806303][T11526] ? trace_contention_end+0x39/0x120 [ 2616.806316][T11526] ? __mutex_lock+0x335/0x1350 [ 2616.806332][T11526] ? is_bpf_text_address+0x26/0x2b0 [ 2616.806354][T11526] ctnetlink_del_conntrack+0x6c4/0x8e0 [ 2616.806379][T11526] ? __pfx_ctnetlink_del_conntrack+0x10/0x10 [ 2616.806422][T11526] nfnetlink_rcv_msg+0xb4d/0x1130 [ 2616.806449][T11526] ? nfnetlink_rcv_msg+0x20d/0x1130 [ 2616.806491][T11526] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 2616.806517][T11526] ? kasan_save_track+0x4f/0x80 [ 2616.806592][T11526] netlink_rcv_skb+0x208/0x470 [ 2616.806610][T11526] ? lockdep_hardirqs_on+0x9c/0x150 [ 2616.806638][T11526] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 2616.806666][T11526] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2616.806693][T11526] ? bpf_lsm_capable+0x9/0x20 [ 2616.806707][T11526] ? security_capable+0x7e/0x2e0 [ 2616.806725][T11526] nfnetlink_rcv+0x282/0x2590 [ 2616.806742][T11526] ? __dev_queue_xmit+0x27b/0x3b50 [ 2616.806755][T11526] ? __dev_queue_xmit+0x1d79/0x3b50 [ 2616.806766][T11526] ? kasan_save_track+0x3e/0x80 [ 2616.806779][T11526] ? __kasan_slab_alloc+0x6c/0x80 [ 2616.806799][T11526] ? __dev_queue_xmit+0x27b/0x3b50 [ 2616.806818][T11526] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 2616.806833][T11526] ? __pfx___dev_queue_xmit+0x10/0x10 [ 2616.806853][T11526] ? ref_tracker_free+0x63a/0x7d0 [ 2616.806864][T11526] ? __asan_memcpy+0x40/0x70 [ 2616.806878][T11526] ? __pfx_ref_tracker_free+0x10/0x10 [ 2616.806886][T11526] ? __skb_clone+0x63/0x7a0 [ 2616.806901][T11526] ? __skb_clone+0x483/0x7a0 [ 2616.806916][T11526] ? skb_clone+0x246/0x3a0 [ 2616.806930][T11526] ? __netlink_deliver_tap+0x807/0x850 [ 2616.806947][T11526] ? netlink_deliver_tap+0x2e/0x1b0 [ 2616.806972][T11526] ? netlink_deliver_tap+0x2e/0x1b0 [ 2616.806996][T11526] netlink_unicast+0x82f/0x9e0 [ 2616.807032][T11526] ? __pfx_netlink_unicast+0x10/0x10 [ 2616.807051][T11526] ? netlink_sendmsg+0x642/0xb30 [ 2616.807061][T11526] ? skb_put+0x11b/0x210 [ 2616.807073][T11526] netlink_sendmsg+0x805/0xb30 [ 2616.807089][T11526] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2616.807102][T11526] ? __import_iovec+0x5d4/0x7f0 [ 2616.807114][T11526] ? aa_sock_msg_perm+0xf1/0x1d0 [ 2616.807130][T11526] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2616.807140][T11526] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2616.807152][T11526] __sock_sendmsg+0x21c/0x270 [ 2616.807169][T11526] ____sys_sendmsg+0x505/0x830 [ 2616.807183][T11526] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2616.807204][T11526] ___sys_sendmsg+0x21f/0x2a0 [ 2616.807217][T11526] ? __pfx____sys_sendmsg+0x10/0x10 [ 2616.807255][T11526] ? __fget_files+0x2a/0x420 [ 2616.807265][T11526] ? __fget_files+0x3a0/0x420 [ 2616.807281][T11526] __sys_sendmsg+0x164/0x220 [ 2616.807294][T11526] ? __pfx___sys_sendmsg+0x10/0x10 [ 2616.807311][T11526] ? __pfx_ksys_write+0x10/0x10 [ 2616.807328][T11526] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 2616.807344][T11526] ? lockdep_hardirqs_on+0x9c/0x150 [ 2616.807360][T11526] __do_fast_syscall_32+0xb6/0x2b0 [ 2616.807371][T11526] ? lockdep_hardirqs_on+0x9c/0x150 [ 2616.807388][T11526] do_fast_syscall_32+0x34/0x80 [ 2616.807398][T11526] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2616.807411][T11526] RIP: 0023:0xf70ad539 [ 2616.807423][T11526] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2616.807432][T11526] RSP: 002b:00000000f549d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 2616.807445][T11526] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080001400 [ 2616.807453][T11526] RDX: 0000000020000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 2616.807460][T11526] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2616.807466][T11526] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2616.807472][T11526] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2616.807489][T11526] [ 2617.271767][ C0] vkms_vblank_simulate: vblank timer overrun [ 2617.300556][T16699] usb 3-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2617.370466][T16699] usb 3-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 2617.440247][T16699] usb 3-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 2617.455023][T16699] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2617.472294][T16699] usb 3-1: Product: syz [ 2617.477053][T16699] usb 3-1: Manufacturer: syz [ 2617.481771][T16699] usb 3-1: SerialNumber: syz [ 2617.496291][T16699] usb 3-1: config 0 descriptor?? [ 2617.514456][T11506] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 2617.545186][T16699] microtek usb (rev 0.4.3): can only deal with bulk endpoints; endpoint 1 is not bulk. [ 2617.596530][ T24] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 2617.609236][T16699] microtek usb (rev 0.4.3): couldn't find an output bulk endpoint. Bailing out. [ 2617.915386][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2617.945774][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2617.985747][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2618.026795][T11545] netlink: 'syz.2.10190': attribute type 1 has an invalid length. [ 2618.035520][ T24] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2618.088733][T30727] usb 3-1: USB disconnect, device number 57 [ 2618.232724][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2618.296473][ T24] usb 4-1: config 0 descriptor?? [ 2618.715331][ T24] hid_parser_main: 20 callbacks suppressed [ 2618.715354][ T24] plantronics 0003:047F:FFFF.0124: unknown main item tag 0x0 [ 2618.836635][ T24] plantronics 0003:047F:FFFF.0124: unknown main item tag 0x0 [ 2618.844118][ T24] plantronics 0003:047F:FFFF.0124: unknown main item tag 0x0 [ 2618.896598][ T24] plantronics 0003:047F:FFFF.0124: unknown main item tag 0x0 [ 2618.904038][ T24] plantronics 0003:047F:FFFF.0124: unknown main item tag 0x0 [ 2618.966509][ T24] plantronics 0003:047F:FFFF.0124: unknown main item tag 0x0 [ 2618.994571][ T24] plantronics 0003:047F:FFFF.0124: unknown main item tag 0x0 [ 2619.025032][ T24] plantronics 0003:047F:FFFF.0124: unknown main item tag 0x0 [ 2619.055539][ T24] plantronics 0003:047F:FFFF.0124: unknown main item tag 0x0 [ 2619.162479][ T24] plantronics 0003:047F:FFFF.0124: unknown main item tag 0x0 [ 2619.409821][ T24] plantronics 0003:047F:FFFF.0124: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 2619.761356][ T24] usb 4-1: USB disconnect, device number 13 [ 2620.397937][T11581] input: syz1 as /devices/virtual/input/input313 [ 2622.357300][T11599] FAULT_INJECTION: forcing a failure. [ 2622.357300][T11599] name failslab, interval 1, probability 0, space 0, times 0 [ 2622.380284][T11599] CPU: 0 UID: 0 PID: 11599 Comm: syz.3.10210 Not tainted syzkaller #0 PREEMPT(full) [ 2622.380310][T11599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2622.380322][T11599] Call Trace: [ 2622.380330][T11599] [ 2622.380338][T11599] dump_stack_lvl+0x189/0x250 [ 2622.380372][T11599] ? __pfx____ratelimit+0x10/0x10 [ 2622.380400][T11599] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2622.380424][T11599] ? __pfx__printk+0x10/0x10 [ 2622.380449][T11599] ? __pfx___might_resched+0x10/0x10 [ 2622.380470][T11599] ? fs_reclaim_acquire+0x7d/0x100 [ 2622.380505][T11599] should_fail_ex+0x414/0x560 [ 2622.380541][T11599] should_failslab+0xa8/0x100 [ 2622.380564][T11599] __kvmalloc_node_noprof+0x158/0x910 [ 2622.380596][T11599] ? fuse_readdir+0x1473/0x2bc0 [ 2622.380633][T11599] fuse_readdir+0x1473/0x2bc0 [ 2622.380661][T11599] ? __lock_acquire+0xab9/0xd20 [ 2622.380706][T11599] ? __lock_acquire+0xab9/0xd20 [ 2622.380736][T11599] ? __lock_acquire+0xab9/0xd20 [ 2622.380763][T11599] ? __pfx_fuse_readdir+0x10/0x10 [ 2622.380803][T11599] ? aa_file_perm+0x13a/0x1550 [ 2622.380824][T11599] ? aa_file_perm+0x13a/0x1550 [ 2622.380843][T11599] ? aa_file_perm+0x44d/0x1550 [ 2622.380864][T11599] ? __pfx___mutex_trylock_common+0x10/0x10 [ 2622.380892][T11599] ? look_up_lock_class+0x74/0x170 [ 2622.380923][T11599] ? register_lock_class+0x51/0x320 [ 2622.380979][T11599] ? down_read_killable+0x1d1/0x350 [ 2622.381003][T11599] iterate_dir+0x399/0x570 [ 2622.381030][T11599] __se_sys_getdents64+0xe4/0x260 [ 2622.381054][T11599] ? __pfx___se_sys_getdents64+0x10/0x10 [ 2622.381075][T11599] ? ksys_write+0x22a/0x250 [ 2622.381096][T11599] ? __pfx_filldir64+0x10/0x10 [ 2622.381119][T11599] ? __pfx_ksys_write+0x10/0x10 [ 2622.381144][T11599] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 2622.381169][T11599] ? lockdep_hardirqs_on+0x9c/0x150 [ 2622.381195][T11599] __do_fast_syscall_32+0xb6/0x2b0 [ 2622.381212][T11599] ? lockdep_hardirqs_on+0x9c/0x150 [ 2622.381238][T11599] do_fast_syscall_32+0x34/0x80 [ 2622.381254][T11599] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2622.381274][T11599] RIP: 0023:0xf704d539 [ 2622.381290][T11599] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2622.381306][T11599] RSP: 002b:00000000f543d55c EFLAGS: 00000206 ORIG_RAX: 00000000000000dc [ 2622.381323][T11599] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000000 [ 2622.381335][T11599] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2622.381345][T11599] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2622.381354][T11599] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2622.381365][T11599] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2622.381391][T11599] [ 2624.135541][T11579] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2651.891599][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 2651.898166][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 2713.330296][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 2713.339530][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 2720.526764][T11642] Bluetooth: hci0: command 0x0406 tx timeout [ 2774.769810][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 2774.776146][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 2778.606769][ T31] INFO: task kworker/1:1:43 blocked for more than 143 seconds. [ 2778.614357][ T31] Not tainted syzkaller #0 [ 2778.619863][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2778.628668][ T31] task:kworker/1:1 state:D stack:20584 pid:43 tgid:43 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 2778.640921][ T31] Workqueue: usb_hub_wq hub_event [ 2778.646000][ T31] Call Trace: [ 2778.649355][ T31] [ 2778.652303][ T31] __schedule+0x1798/0x4cc0 [ 2778.656975][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 2778.662385][ T31] ? __pfx___schedule+0x10/0x10 [ 2778.667424][ T31] ? schedule+0x91/0x360 [ 2778.671703][ T31] schedule+0x165/0x360 [ 2778.675892][ T31] usb_kill_urb+0x1be/0x2d0 [ 2778.680666][ T31] ? __pfx_usb_kill_urb+0x10/0x10 [ 2778.685725][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 2778.692548][ T31] usb_start_wait_urb+0x18c/0x4c0 [ 2778.697716][ T31] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 2778.703298][ T31] ? usb_alloc_urb+0x46/0x150 [ 2778.708123][ T31] usb_control_msg+0x232/0x3e0 [ 2778.713156][ T31] hub_port_init+0xbf9/0x2800 [ 2778.718007][ T31] hub_event+0x2532/0x4a20 [ 2778.722510][ T31] ? __pfx_hub_event+0x10/0x10 [ 2778.728190][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 2778.733941][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2778.739259][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 2778.745010][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 2778.750880][ T31] process_scheduled_works+0xae1/0x17b0 [ 2778.756602][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 2778.762627][ T31] worker_thread+0x8a0/0xda0 [ 2778.767333][ T31] kthread+0x711/0x8a0 [ 2778.771437][ T31] ? __pfx_worker_thread+0x10/0x10 [ 2778.776639][ T31] ? __pfx_kthread+0x10/0x10 [ 2778.781358][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2778.786715][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 2778.791946][ T31] ? __pfx_kthread+0x10/0x10 [ 2778.796729][ T31] ret_from_fork+0x4bc/0x870 [ 2778.801359][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 2778.806579][ T31] ? __switch_to_asm+0x39/0x70 [ 2778.811363][ T31] ? __switch_to_asm+0x33/0x70 [ 2778.816317][ T31] ? __pfx_kthread+0x10/0x10 [ 2778.821024][ T31] ret_from_fork_asm+0x1a/0x30 [ 2778.825900][ T31] [ 2778.829307][ T31] [ 2778.829307][ T31] Showing all locks held in the system: [ 2778.837509][ T31] 1 lock held by khungtaskd/31: [ 2778.842709][ T31] #0: ffffffff8df3d6e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 2778.853691][ T31] 5 locks held by kworker/1:1/43: [ 2778.858837][ T31] #0: ffff888143af6d48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 2778.870315][ T31] #1: ffffc90000b37ba0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 2778.882365][ T31] #2: ffff888028f69198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a20 [ 2778.891355][ T31] #3: ffff888028f6c518 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x21b8/0x4a20 [ 2778.902307][ T31] #4: ffff888027e2a568 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x21e5/0x4a20 [ 2778.912220][ T31] 1 lock held by klogd/5187: [ 2778.917777][ T31] 2 locks held by getty/5587: [ 2778.922474][ T31] #0: ffff88814d52d0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 2778.932607][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 2778.942857][ T31] 5 locks held by kworker/u8:7/17880: [ 2778.948784][ T31] [ 2778.951124][ T31] ============================================= [ 2778.951124][ T31] [ 2778.959828][ T31] NMI backtrace for cpu 1 [ 2778.959845][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 2778.959866][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2778.959878][ T31] Call Trace: [ 2778.959885][ T31] [ 2778.959893][ T31] dump_stack_lvl+0x189/0x250 [ 2778.959924][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2778.959949][ T31] ? __pfx__printk+0x10/0x10 [ 2778.959981][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 2778.960008][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 2778.960031][ T31] ? __pfx__printk+0x10/0x10 [ 2778.960055][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 2778.960089][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 2778.960114][ T31] watchdog+0xf60/0xfa0 [ 2778.960139][ T31] ? watchdog+0x1e2/0xfa0 [ 2778.960165][ T31] kthread+0x711/0x8a0 [ 2778.960193][ T31] ? __pfx_watchdog+0x10/0x10 [ 2778.960212][ T31] ? __pfx_kthread+0x10/0x10 [ 2778.960239][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2778.960264][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 2778.960297][ T31] ? __pfx_kthread+0x10/0x10 [ 2778.960324][ T31] ret_from_fork+0x4bc/0x870 [ 2778.960347][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 2778.960374][ T31] ? __switch_to_asm+0x39/0x70 [ 2778.960389][ T31] ? __switch_to_asm+0x33/0x70 [ 2778.960405][ T31] ? __pfx_kthread+0x10/0x10 [ 2778.960431][ T31] ret_from_fork_asm+0x1a/0x30 [ 2778.960465][ T31] [ 2778.960473][ T31] Sending NMI from CPU 1 to CPUs 0: [ 2779.105983][ C0] NMI backtrace for cpu 0 [ 2779.106013][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 2779.106032][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2779.106044][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 2779.106073][ C0] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 93 b1 21 00 f3 0f 1e fa fb f4 c8 e6 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 2779.106088][ C0] RSP: 0018:ffffffff8dc07d80 EFLAGS: 000002c6 [ 2779.106104][ C0] RAX: a41690b9910e7400 RBX: ffffffff81967b47 RCX: a41690b9910e7400 [ 2779.106117][ C0] RDX: 0000000000000001 RSI: ffffffff8d70e34e RDI: ffffffff8bbf08e0 [ 2779.106129][ C0] RBP: ffffffff8dc07ea8 R08: ffff8880b8832fdb R09: 1ffff110171065fb [ 2779.106142][ C0] R10: dffffc0000000000 R11: ffffed10171065fc R12: ffffffff8f7ced70 [ 2779.106155][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1b92a40 [ 2779.106166][ C0] FS: 0000000000000000(0000) GS:ffff88812613b000(0000) knlGS:0000000000000000 [ 2779.106180][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2779.106191][ C0] CR2: 00005558425f0168 CR3: 000000000dd38000 CR4: 00000000003526f0 [ 2779.106206][ C0] Call Trace: [ 2779.106216][ C0] [ 2779.106222][ C0] default_idle+0x13/0x20 [ 2779.106263][ C0] default_idle_call+0x73/0xb0 [ 2779.106280][ C0] do_idle+0x1e7/0x510 [ 2779.106299][ C0] ? asm_sysvec_call_function_single+0x1a/0x20 [ 2779.106318][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 2779.106341][ C0] ? __pfx_do_idle+0x10/0x10 [ 2779.106365][ C0] ? do_idle+0x5/0x510 [ 2779.106381][ C0] cpu_startup_entry+0x44/0x60 [ 2779.106398][ C0] rest_init+0x2de/0x300 [ 2779.106416][ C0] start_kernel+0x3ae/0x410 [ 2779.106436][ C0] x86_64_start_reservations+0x24/0x30 [ 2779.106462][ C0] x86_64_start_kernel+0x143/0x1c0 [ 2779.106485][ C0] common_startup_64+0x13e/0x147 [ 2779.106516][ C0]