last executing test programs: 18m43.63655806s ago: executing program 32 (id=841): setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x6, 0x0, 0x1, 0x7}, 0x14) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0x6, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'erspan0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="0b032200eb2325120212475400f6a13bb1000000080086dd4803", 0x10300, 0x0, &(0x7f0000000140)={0x11, 0x0, r1}, 0x14) 10m16.843835061s ago: executing program 33 (id=3587): pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff}, 0x80) r1 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000300)={'syz', 0x3}, &(0x7f0000000340)="9cfcf5b824fbc28cf8", 0x9, 0xfffffffffffffffe) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x450a}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @mcast1}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af0", 0x30, 0x840, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010003f6fdd140402090b975f601020301090224000201005004090400f700c873b808090504105802030d580904"], &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x0}) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0xfffffffffffffffd, 0x8e, 0x4, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000440)="bf1891bc8ea3307253874a6150f8329c499c34d666e26f42e4475811261c48abf625c9412165f0174c39668d1939e3787f8e3b34e5ab7e1465d58859c73e030d8b9209486972b9c82d64f7269dc02a8ae26cbdeb739c130bf99d4fede1502a4b3bc72b1cefc705abf8fbed3ea56a4cae83c3527daaad85ce20046a9c11bc091e13b9e1acda251b41e4fa424d97b3", 0x0, 0x1000001, 0x10011, 0x200, 0x0}) sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000070000000000000000000a40000000160a05000000000000000000020000000900010073797a300000000014000380080001400000000008000240000000030900020073797a300000000014000000110001"], 0x68}}, 0x20000800) sendmsg$NFT_BATCH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a48000000160a01080000000000000000020000717d142591ba166f010900020073797a30000000000900010073797a30000000001c000380180003801400010067656e6576653000000000000000000014000000160ac9bde1747040156bba5d2d78f8000000000000000004140000001100010000000000000000000000000a00000000000000"], 0x84}}, 0x24040884) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=@newlink={0x3c, 0x10, 0x401, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2400, 0x4100}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0x3, r7}]}, 0x3c}}, 0x4000000) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r0, 0x3d) pipe2$watch_queue(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r8, 0x0) r9 = syz_open_dev$dvb_demux(&(0x7f0000000400), 0x0, 0x700) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r9, 0x40146f2c, &(0x7f0000000000)={0xefb8, 0x1, 0x2, 0x3, 0x4}) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r9, 0x40146f2c, &(0x7f0000000040)={0x3, 0x0, 0x3, 0x13}) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x70) r10 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r10, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) unshare(0x26020480) move_mount(r10, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x267) syz_usb_connect$cdc_ecm(0x1, 0x4d, &(0x7f0000000400)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x2, 0xc73ebdfa468265f4, 0x7}}]}}, &(0x7f0000000940)={0x0, 0x0, 0xf, &(0x7f0000000080)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x3, 0x3, 0x0, 0x3}]}, 0x1, [{0x0, 0x0}]}) keyctl$set_timeout(0xf, r1, 0x2) 10m12.169901117s ago: executing program 34 (id=3603): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000010c0), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r1, 0x4000) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, 0x0) io_uring_enter(0xffffffffffffffff, 0x1, 0xfffffffd, 0x9, 0x0, 0x0) write(r0, &(0x7f0000000080)='4', 0x1) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) preadv2(r3, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1fee00}], 0x2, 0xff00, 0x0, 0x0) 10m7.647499389s ago: executing program 35 (id=3613): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) readv(r0, &(0x7f00000025c0)=[{&(0x7f0000002640)=""/4108, 0x100c}, {&(0x7f00000015c0)=""/4096, 0x1000}], 0x2) sendfile(r0, r0, 0x0, 0x200000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet6_int(r3, 0x29, 0x13, &(0x7f0000000180)=0x1, 0x4) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r2, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x810}, 0x40000004) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_OCB(r5, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r4, 0x1, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x20000080) 5m53.546854687s ago: executing program 36 (id=4681): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000080)=@ipv4_newaddr={0x3c, 0x14, 0x509, 0x70bd27, 0x25dfdbfc, {0x2, 0x1f, 0x0, 0xff, r3}, [@IFA_LABEL={0x14, 0x3, 'erspan0\x00'}, @IFA_LOCAL={0x8, 0x2, @local}, @IFA_RT_PRIORITY={0x8, 0x9, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4050090}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@ipv6_delroute={0x30, 0x19, 0x1, 0x70bd2a, 0x25dfdbfd, {0xa, 0x14, 0x1c, 0x0, 0xff, 0x1, 0xc8, 0xb, 0x3e00}, [@RTA_OIF={0x8, 0x1e}, @RTA_MULTIPATH={0xc, 0x9, {0x3, 0x10}}]}, 0x30}, 0x1, 0x0, 0x0, 0x30000000}, 0x20000880) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x4, @loopback, 0x8}, 0x1c) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYRES8=r1, @ANYRESDEC=0x0], 0x2c}, 0x1, 0x0, 0x0, 0x4008885}, 0x44000) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000400)={0x5, 0x1, 0x9}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x3}, 0x8) sendto$inet6(r0, &(0x7f0000000080)='\x00', 0x1, 0x40810, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback, 0x1}, 0x1c) 3m41.943372837s ago: executing program 37 (id=5342): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x20000) ioctl$SG_BLKTRACESETUP(r0, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x201, 0xdd36, 0x80, 0x4, 0x81}) r1 = openat$fuse(0xffffff9c, &(0x7f0000000100), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000800)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000002840)={0x50, 0x0, r2, {0x7, 0x2d, 0x8000, 0xffffffff80042140, 0xfff9, 0x0, 0x6, 0x3, 0x0, 0x0, 0x80, 0x2a}}, 0x50) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$SG_BLKTRACETEARDOWN(r0, 0x1276, 0x3800) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_GET_IRQCHIP(0xffffffffffffffff, 0xc208ae62, &(0x7f00000005c0)={0x2, 0x0, @ioapic={0x0, 0x2, 0x7, 0x3, 0x0, [{0x10, 0x9, 0x18, '\x00', 0x5}, {0x5, 0x80, 0x2, '\x00', 0x6d}, {0x3, 0x7e, 0x10, '\x00', 0x8}, {0x6a, 0x16, 0x0, '\x00', 0x7}, {0x2, 0x3, 0x4d, '\x00', 0x2}, {0x0, 0x0, 0x7, '\x00', 0xff}, {0xfd, 0x3, 0x2, '\x00', 0x3}, {0x86, 0x1, 0x1, '\x00', 0x6}, {0x2, 0x1, 0x4, '\x00', 0x3}, {0x7, 0x0, 0x5, '\x00', 0x7}, {0x1e, 0xb9, 0x1, '\x00', 0xa}, {0x47, 0x3, 0x2, '\x00', 0x7}, {0x4, 0x43, 0x1, '\x00', 0x5}, {0x1, 0x0, 0xb, '\x00', 0x7}, {0x1, 0x8, 0x6, '\x00', 0x1}, {0x7, 0x0, 0x1, '\x00', 0x40}, {0x5, 0x10, 0xd, '\x00', 0x2e}, {0x3, 0x1c, 0x7f, '\x00', 0xa}, {0x92, 0x0, 0x6, '\x00', 0x9}, {0x1, 0x8, 0xff, '\x00', 0x4}, {0x7f, 0x5, 0x9, '\x00', 0xb}, {0x93, 0x9, 0x2, '\x00', 0x8}, {0xc, 0x2, 0x7, '\x00', 0x2}, {0xb, 0x6, 0x6, '\x00', 0x40}]}}) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000000)="170000000200020000ffbe8c5ee17688140032000103000aff3f000057fc5ad90200bb6a880000d6c9db0000db15000200ff01800a0000ebfc0607bdff59100ac45761547a681f009cee4a5acba400001fb700674f00c88ebbf9315033bf79ac2dfc061f15003901dee2ffffffffe9000000000000000062068f5ee50c08af9b1c568302ffff02ff03310800ab0840024f0298e9e90539062a80e605007f71174ab498a30b3e5a1b", 0xa8) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="20000000110001000000000000000000100000e60b"], 0x20}], 0x1}, 0x0) 2m44.014258264s ago: executing program 38 (id=5533): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x40282, 0x0) io_setup(0xca, &(0x7f0000000080)=0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) io_submit(r1, 0x1, &(0x7f0000000100)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xcbee, r2, 0x0, 0x0, 0x8}]) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r3, &(0x7f00000004c0), 0x48, 0x820b, 0x0) setsockopt$inet6_int(r3, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_int(r3, 0x29, 0xcf, &(0x7f0000000180)=0x8, 0x4) r5 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r6, 0x6, 0x23, &(0x7f0000000040), &(0x7f0000000200)=0x38) r7 = eventfd2(0x8000, 0x0) r8 = syz_open_dev$media(&(0x7f0000000340), 0x80000001, 0x80) r9 = eventfd(0x3) r10 = eventfd(0x9d75) r11 = openat$binder_debug(0xffffff9c, &(0x7f0000001d80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r12 = openat$sw_sync_info(0xffffff9c, &(0x7f0000001e80), 0x101801, 0x0) r13 = eventfd(0xc2) r14 = eventfd(0x8) io_submit(r1, 0x9, &(0x7f0000002040)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x5, 0x3, r12, &(0x7f0000000280)="9d4c2512b06f0d1411783afea5843ffbce5f5e0b5606adf21d4e2580701bc17bf86564fd15a3ba041fe90a075af69707ce1d76ec7c5a7515440047b66954fbf136e97b2cc3", 0x45, 0x1, 0x0, 0x4, r7}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2, 0x1, r8, &(0x7f0000000380)="fc30ed93f59500ca1093535155d25fbb36ea9f86f21c87be11d63351d7408a43468327facd0552b9dc1673bca092af3f88116afba0b2539664c4e1b882c2d0f22455fea7e408a536f7e3086995ddd34523bfaed0cd", 0x55, 0xffffffffffffffff, 0x0, 0x0, r9}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x2, 0x7fff, r4, &(0x7f0000000440)="73416fd4bca71964726ebe", 0xb, 0x9}, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x7, 0xffe0, r3, &(0x7f0000000b40)="68e084436f7136ce27126ec3067e254d3715081e6550f439d070f623652501b656a363b260225d2c344113f2105c44044021cbfe49927d4e651a30f20a640002798d59c266c70b0798832b57d1b508b7b21a7c183c9bad62fa6749c45c2e3dfac636e674c97e8d67e08a741b20f3fc3c0866b977a4476f9f8a36253c6f5f1fc94c93085a1286dac23534683c7a88943850a840b573eaac5caffa509cd799660587695bd8cdf03374670ffdf7e019ec52ec410bf5fd06c24a7b7565fcdb009587e04116befc155485188e4a58b4c47f9293b43018e86198fe7d9014731b2de6410458a3f30d0426180a62684153ffd81dcc9792c81a08260400e1bf37639a77dddfe0fd1f3b26ed8f615d69b54657069d3f7190064b4cb04242c53e3e982a68324fcfe3480dc2673ad61c9509d4d43215c7cede6157e46259fb93a01e49160936218e464c6e6454f946cb7e2e07ae1e04216397601d5d5f12d6b6f918d32b2a1efcb362328291979e98e4e2758811fd2b464324eaef0209b290d92862c02ce6a02e9802e4a8c892345e89a0947f29e37bd2334d73ac2c5c3f163ddd5b20c52c2706e4854248d01d00eb04f6818a6b8ffb055279ef2b1f4606d32346e897660b09daab53e1294fde02d4bfbbe823d5ce9ada991e2d32b8b5e63457175bc3b06432e62919f5faa1e45ace6fb46a72c212efe63b4f86fc779903eb4f8628ef24cd1f598486f7792b83cb07f5e9e0bb740e2e5661fe199a9321575204751e12e525297f1100b0bfe2068586523e68490b6bd7060b77fcad7f312644998387f8bd6b76537b78a70b3d623070044b9e9014c62f36b66ee1b6181feaa1a15bffcc550c87e5a6a707d1542b862544790096f979623305d2c78376ca670e8f07479a89c854cfa9f5840c4d2f3df4a3cc38be043026c1fa974c772617f74e8f7baaf97f2c5d082cf6b33ab734f5c24294ae10297cdf4282fdc1ddf632186834c953b0c7655631ecc7436db9862690473e67dc94a314709423f72898ee6938f9fb2a48429e1b2ee2f430b30d7beb1b9c9491e357e8b4db27df8ddfa6fe94551e0b8c04d9c7995842141d772feb0113e9476741dc76b961647a84fe3b75ff406cf1c4e150fbef6f6d20fa2fef1839e69c5d29e29278b8ddaf2ae91258e084159bc65a96304c702fa9fe8500d3983b89addad786d0da380de64392b032426211303cae3807f2a61034d6a907a3a880470a57a157d3f34cf975adf25482976d4b6383122afe2bc832174ddf89ebb0a084a498db1ccd9f9023ad0b4d696fa62ad194c2154fc73b52b5084606b1cb1f5ec3cdbd835818844ec0a08c141099ca0aacbc5a67da3b477893a4b57f527494cafc4ba95265aef3ac9a56d6b646766b1700b8aaff93c234d2ad7278ccc0bacd4df2d98d7b542bbe714e7b55a05d104c9228f8f8b456107eee996069275dfda7e9984ba095f794d4cdebd2313f3cbd36bf255ad1dfce4de65165b446a3d4dd3e4abefb54159aafead5898d9a52b3e4d54d91fdf720d946c45fe2f7a4248af6b2aef3ca05381da81f33ab7e2ffafc9ad7848b0fd5cafb53f034bc94debdbe33fd4958fa11f723473649080f4d703c28fafa85bd296a867dfc725df9266dd45b081dc08acccd1e96d531d4a914fb5ebb11f439072b91998843f30b9c55178bcb9f172f1d32522a16f7720923e9fc1ed1b5c1ff1ecd8ad9659f69f567a85e683b20ef4f25bcf061539d7b7d656b38f61cdba359039244db2d02c25690dbe20476b45fbaccf16904c4e8f6cc44bfeff2d7b21cdc6d8387fb8089c69e452e905892060fd4bca608ded3f0c0709622461e8f15101e629f505c5dea06b9b3169ff8c3e4c60764c1ad73716256e588ab6e3cc2477743ba259d5839cb18b77dbe4e5f2fd0f1ea258fdb78c2fb9f86c18484cb898a08cdff560a11e5427775bf9ba62ae79ceb6dd37717a6720d51983719ddf834333db54abff2471e36a5b628097d5f5562e197e3e70bfcfe36da2287e338c5b5df1eb986e462fd6b0605dad22e14cff7f79ba213dfb26173c050da4e2f0549cd2eb0476bcc6b5a1dbc08a6dfcdf0a0c752fdcb57bf245dccb198dfa25afce0ffa96b53d238e7ef8c1cd092cb44f523a6bc6048f1dfaf117bbd267061de4452aaa086f47de240313f179efe124b70bb123675e99af1dc9f7fcf49672a593f2a229db2cb2e248144264b8365261674bbb259115bc7b404fe500a855d8f6a5c1664dae47fb263556fa7430fc95e546c29090f3950d1357ac916ab1a930d1d1c5facc1f8e9e2dae5ecf7b09400f0e9e282737323536d944d9ee6b22e49a7ffd76460a7c1453fb245648dc37305dedbedbb377ef1390a5f5aa232f4c033517bbd6235a2f3df8e04c152c05d18d1c7ac6e2e7863d3e8bfbe020b1c9eb2830acc2aafa77b83aa77dedb0651a77de4b90bed39471686ab5962efb29066c417f44f09199bc2d7bbf4c145a1593f0f92050f2f58e91d69f61fa0567ec5bef079a6c7a3b0359bf66874837837546ec8c2c6786910f1c2d0a426d00d5628b120c1e70f694171d33693b724ca423ee9c4b10f89c27b4a12edd8881f85d4e2a1c9e8d05f0d919756b315ee0c90310113611538726ed2cbc495b0711b6719589d1054884e4744dc25eca7d45831fb52dc495fc29d75ae65bb96b590ebb8b8dcb8212b2236077197839186f3bef1ab89ec6ce16047f89b4827ae2507ec25b6c6e3a9fcb04d17af02aec2ac5fa7b7936d4aac3df19fdbec32268c196e6a7c834d60e4da564c77f7b98031d23ec9d0e74d9314711eb1f7124c92e856228e844d14a240b4fe9604226c85ccd06b4baa0ee9351ded2171af5e7b7c59bba200bd44d8336197753dd5e43707d6f0db829dc185ca98c3a8bb979aa8d03e0a4727e4ecf8a54817f2ccc2363ea10a3c70922a2a133158008ed7af31946f9f8d53db8296f4d7c8660c0c6ac124b665c0106f0f12f1b234952dc583b34ef79ea5f59d1d0bef2883c3f47dc4197351b81393b14ca631f69b239ff909597a510f8698b0f7b0ca9c4374b902c7984c1787c4da112fde04601d484197f2bacba9de583af7bc42b50e49fc4bbc5d5c762ca760895c5ccdfad6ad07501d7720bf3cfe93e2d971cd3f87deba5b0eff88ae2b106ef354567434e161d4c439ceea6adcd49f678c67b69a7bddbb71f61557b90ed8270967f3121187a81f90eb523ba15ebed72fc5eedc03a9696e69ded3e5016f5be7bf63527ea2f0052943e46c4d480bef96aedd8db960374da290d36b3e152b7bb5e8232d3693758a0123df05094dc44d639e6045ba90d8484c5098f14af36c2a944e997ddcd6036acd763b6453df8eac856066eed4d0e12bda5cd076b84f445f13286dd57279b8ea4a3c5d8db6db44f6dfe3a008755852b88332093b7b2db0e5c6ab63f336998e4e53fd7b7d12aa39f00fe460e61180ce49eda74f2989107ebfcc64cb29be551624826fb98f29210cdd187cf076b56b0a2b365698615346abe4d2eb13d4c3aa88e7a157d1bd644344e0a15aab0d332c550c830bcbaa666efb62c75d5937f0a3065c3d0369925d7f6833df142f1ebaf5ba83596da79b54ea630b1d7fe7595c27b0e75a0e44cb060c8d88ca523ce69fdf87cb5c75bbdb26ce7add2e5f7fc4da4d74a96c5387e5b7d1fe829d446d7042d9d42a88982802728e1995b8af496f2ff0aec56abefff76cc74c27cc940cdd5510379be00b4b209c5bb67e8707fd28739f69a5d496f36a1f898d4fa73a0c59cd17c2d0dc16fe94cc58e58066710dca1ca6b052475ae23acfeacc3d39a22efae70e62f55a5f683da2c80ffa007ff372d7c3b46376b32a027780af23b46a82d618e6d9d918ff34d2037ada1f70c9c897a7ab072dcb305ff2dba555327c83e3c39e5feefca0a41f69097cca09bab38a8a1294499d4e1bfd8676104d549dbe1a9bedffed02a7fa60c6088926c9bd3c71fd1890a3c2d476e4c85a91e8f6edf6f0b498e4066a43690dcd79311cfc7b1fa8b01a80405b8f9543a64603a21945bac7365e552b301a6269df9fc5a9268b05387f82ca81f3ba74eb64a3d14df1c57d9e2673d9591d2f4892e4f8db2334e62fe68a80461561dfc4789869a74b4c2d6494b788aaec0b35a701327f4a054337ca6843ed42a2c4f3bc1c08e191a5491ec7b7c75bf4effda2df4b2c2e3b14608cd2200ad0eb782f6b96c3bb1c3174945a676dc842b9ef8fc0472ae252bce0c34b213ff450d0d12315758ceaae4771b90210d23eeff9648a60d46bda1f8c8b1cdee0761a5d2dad41fa1c223214436cdaed1a999b0ae0dd37449d448797f5cf1ab968e8d8f004236f71608a89e714663e45adb2266823bbd9186dd7370e0675bbe201cab35e21cba8c214267210be11be56262cdcdc708dc4675b40aa1441666a769ef2b8d965b1693384f4c65e07f9893abb23f2753d4eda60620f3f4e06dc6a70acd7fa4d23c0b42c741398f18664ed8623168669071272d69a9f9f66e48579acad296f04fc53595fbc8db9037ecca388a53baa1cc26d2a5d1cbf8e97fb265df86837e6b809ba59bca1d7b8f47a63e0f598af761a0886583bb7b76017d2b0fc9c5790e067ab5fc425b4b1496ce00b87fd587b0d0c12a0ae39140a584294c7d82b10daeee4a04babe5420f3bc5ecc9c4bf0cda5e28bf2208a16359c4fa243d6d59e18d715fbf4454ea6ea0bc07461883843b3f00bec9de3b6ea5338d04c134d7080d4459d26f518609785fb3dc6438f23fc6c569134d1e6c4ce27e2fefdbc7cc71e1b13e70260edcdf65e1b7ba619503299039dfb7c6685963944afd5084d1b6c5acb83c8318ff2350452a69d037fdca60606070de548d031d3a418dca0e83df0c2fd33007aa62a1071a41e5a209fdca3473e388c5302d6ebcc89c2c7fada458a8c024bd759eb5279e48806260e4ecebdb968eaabf1227e9a24f86d09417ae4a10db232fbc3069651cb4502107621fde60310e188a54b7946b27e6319371244351659c694faed7946b551cebeae7dde69fe2d836e3d49eee8b316f3d77d94c5696df17aa49a1ef8e9e651e75f66fb997d5c6a9d02b4f4e059c1551f379e70a64a5c4308fd08fecf3b1fb90e1d4757b36e7da4c345336fab15b75537f3f688116d2b6e02297c08e19886e1492735bb5b5e70b7cbb1f4e5d527923ec78ac897b4e6c11692ae3db35dabaee1e3211b7c2166477d2215f3ef21890287c396f46f3e0cc2b14bf91aafd4f1843ac524bdcccda06390bb0a1946ecafc48c4552708737468262bbced779960f2b08ffa347836df14cbb39afac3781689ad88cf693d4e5d97b291dccd7fc6535db6e77757f805356d26618d37cea33f00bc53b7058ddbcb8b89a01315dead1751f9e1eaaf6014ace88c10b82bbdd934b02ae4b4e61045d64ed6c8903f9d2e5b9062e963b8dab941ee455531b3d0f92b4555c53548a66b55ef65a6107c8a1374b94d5ebdd3846e07bd21d13ca2713d2608bb54d2769c4ea646c2c930d59fe1dff46bb1186b082c4023ac1409e2bac82f7ce2330fb7b0c90e96747ddc7b64a348c11ae0f3bfc50d008aab1128f3c116a480ed7b23f4468eca24a9d1a591b1c5fb90f0db599ea83832a69195280caf17493196739b2d12a83ebbb7787cd6af704d2fdeff7eb7bd0c9d05a206e28356d0fdf43caedf7e052ffb8bcc0836b2fae7c95bb41759066707afbef82270315a83e48d9e44b185dad81164415768379970aa5941a2f5c00257103e6e116543424d69e0ed26609754b9bc6d0d4a8656e1e577", 0x1000, 0x6, 0x0, 0x1, r10}, &(0x7f0000001c40)={0x0, 0x0, 0x0, 0x7, 0x5000, r5, &(0x7f0000001b80)="6d598b21eb7906a87b25a73eba5382ed891ef8ac05748d6c1064a928f1b85ec2203a575eaad24867949a57297e70489fd53f44a82bc9693f5d130d59dbc92ab2c5ba3be2b7e0b5c89f10cf50986f7c75a570dd25db8b632171e46f1ac11fbe0ae887b42ce99bc8a0b84629e7f7e3c89049387397cb3402ea711b56ab08330b79ae6ecce9bdb9308aeb136fc096401c93735eee6875a51377f1d8ed879ff947d3dad2b8b41b2eaa9b2839f08f8d52b4de4b70f2f8fda5646df31e97c9fe3477c0", 0xc0, 0x7, 0x0, 0x2}, &(0x7f0000001dc0)={0x0, 0x0, 0x0, 0x1, 0x9, r2, &(0x7f0000001c80)="88928e8a77809b92ef7f9eace1055c36d3324c7c5a7332105627129310124b70787d8a2f5343a4b04c7e12b6dec4aeb6d360d98e4eff2ad0c451af384a34d01ecffac76103abfa4d08756c0a2ea4fd8ebd5ad0a0d0e9c538057b50c1323e3e238dbbd1e1de4ad1e7d496f7dd54f506be84f3e346ece616c3386ea1b3c5bd6a578c22fcdb23ee60e2b7fd9196e6b2cb4482eb55e098c1f25e04c614eefb6e7cc405510f167115349624bf96c0abd45db07866366306250b403c45037f193ba1a468cc328b2fd72cee6570fac5633277dc329bd51ea236907096c3ecc9a76ef3934bf39d", 0xe3, 0x1ff, 0x0, 0x2, r11}, &(0x7f0000001ec0)={0x0, 0x0, 0x0, 0x7, 0x1, r6, &(0x7f0000001e00)="82cc4414644f9100d446e8d64651b0b57876280d7eb183717f688d55d55d7b2c5d9edd22840c0011bd96046898c33c2be860a472614a2097ae45d9519fd0057a34027842c82874", 0x47, 0x2, 0x0, 0x2, r12}, &(0x7f0000001f40)={0x0, 0x0, 0x0, 0x6, 0x1, r2, &(0x7f0000001f00)="5fdfda15d351e060c79e496f40b865aedad713abeadf9bc8f9", 0x19, 0x7fff, 0x0, 0x3, r13}, &(0x7f0000001fc0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000001f80)="6ac6", 0x2, 0x4, 0x0, 0x3, r14}]) sendto$inet6(r5, &(0x7f0000000580)="0d0ad7c36d6617110e434332d6ac582208222cfb7c37ce1148f448455bc37f5f70c92774dcb201629979039d7c8943b207e5bdf9ab8eed9ace110469c51f4f211dd9fad815eb5b273ac04e1edc679bcdf0a0d24482de5454be9003cb80714a95e136bb704ee58e707d1e69b3c3a1c2c37f9c0402e14abdeb32086a49aff25e5c0f0131d59b4783316b9fa2c71c51ce76942d5f519145c9e3bf0d4182b4a62970b2ce81d35a7afc8384b387b8e21f2051d90d92323a710cabe5275d335b64453e759251a140de480541d8dd7662a14296a59eba99b95bfdf5b22992c323865b471d13ad79867e2692fd4eece299a81e2b33336b6801f51c2ae8d73e4df90c9bd70cd535b72cbdf6770600dc44b3780450308d9c5527c3314eb7b2cc38b61e96403a30a8ba0c8a357aa04d3c62bc51bcf55cf214f44a909b29c30c18c3a43c86472612086664a80f2aa8490e58352732acb96eb46deab42895d1957a6029ad86e7a5ced6bde89c158aaee721954beeebe5973059007f7dd5459029af6d3f1d73d35f07d19b7cedfc80d1d7ef37f8b113f564afd0f093202929fef43e788619ca522c7f679dd2f27949d879b4dab46581a0e054b4ed1db37e43f528748b56ec5a54b7af198d4ae551046f7814fe3a5cbc1cc7cb6655fc198939b049f3c02443148c588e34d6ebef81096b4e48f468016d2bde0828664c0874d71e2d88b3bc04079d4a504255a83c3f07a4f1c3e5a4c66f55f36e51e344392487c8299d8d1bfb568780c0d57df48990cb5d6b35c3f7445f80312186d8598faf61072d4eefc961fb5a7e72b971c8f94a8346effd27362cee8d72a98b55e317de280d2d63ee83ca7140b7913122d402c536d914c8510c81d08f0ad1c952f5b7ad5e7ef72d7c58cb4d5bafbea535b381df6ebe94c62cf782cf7ab81c017c296a88ca91d641b45748d230cf5e87e5dbee4764ea4d131ae022e6bbf3ffc3ea7b264737d9db44354bfffa63d79bc403d3ac23fb615edc382d18b0daf1bbb2fbd708d1830ddac1c3f098b8cb1ef9a0019d804bf5d953110f12f3b9a8b9b7e0c61cb5d34116add1fc9a92721ffa5fdc830aea00008aa6e56ad2dd55e0aadd827cc7b4e7242f01241f49e905e5e7451092c28c3f6560a6a0002e5d91fc253a5a8fd8f27e42f4f02f5849528b7d93df9b0c568022acaff410e797e88d2f8eeadbba66e423335b843df734d203fa62a861b712da8f33d5ea721767871aa2cd53e659e505507de9a54d7e6fa3c20bbfb28cd6dd2b314dabbb59e9ce15c0a94ec3b3efc54eaaa27bd7576a687dcaf58dc182662539943014a02e76dc89f48c9f83cc7199038418f965ad3dc866098b89cabcac8691b0f51ffb71902337e49293309c4480a8f1b32411cc1b55a0ec0fe2c2572fe9d488a25bfc12ba74048e1d7beee93321c7aa49ea17cb9728dc46e5272154b3b99dfeacbacb8885621b335274af4df9365f8c8121ff323b572d320c8fc46acd6218b9579d43005e7b0506ccb14d9a0dac4cc6efaf5366c44342eaea8b5a11457f5afbea913ce4975ab67e6a85bc46e714ca5741da38a7cceb9e85d77fd03f83f7a5ecc7241e69e2bda327f769b48ba5f13662585c72778d12bd0e9a62a3d0dbe376d1aee81e6845c2cf23f42c458ae5668c8d387bf9ab224bc9703f1c08347be810d2f19278fe8d97560b3c9f1816667d0461a25e778eb1404dcaac1ed0a6a0745f3a5d2dc1b6babf98f5135d531cb26334ef2fec4c78c95b7193935139664fc65f17b047eb3dc39e251ba52ce33f8099719f1a789db1690347355e7b02d4c522692b9597fd31abb90f973ae4eb0bd0d900cdd887ff01d4845d7f0aee39b220a65a5aeee0fd386054070723c841c042d5339cc6325f07f0f733d124c6524f388ef7419f42c06278b8fceaa3a16b202dfb539b129762397e29cdd679ca6240272fa0c3e2e8c0a27aaa407f30b4024d0638dfca1bc9483d11eb33791723d1b5bc5262dd50dd7b8c0c6059774f2c8400a6f6d5c6dd9c403f9acabd333750bb7a0a62d23083b435e322d89e", 0x5ae, 0x6d91fb6102d8910c, 0x0, 0x0) syz_clone3(&(0x7f0000000500)={0x40040000, 0x0, 0x0, 0x0, {0x19}, 0x0, 0x0, 0x0, 0x0}, 0x58) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) sendto$inet6(r5, 0x0, 0x0, 0x0, 0x0, 0x0) openat$audio(0xffffff9c, &(0x7f0000000000), 0x62001, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x402c5839, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff}) 2m24.82008033s ago: executing program 7 (id=5624): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0xa82, 0x0) syz_usb_connect(0x0, 0x46, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000f3c7c820da059a0095620102030109023400010000000009049200030f6276000905000000000000000705e37e1b82e60905f2020000060000090501"], 0x0) write$cgroup_int(r3, &(0x7f0000000040)=0x920, 0x12) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/mdstat\x00', 0x0, 0x0) preadv(r4, &(0x7f0000000340)=[{&(0x7f00000002c0)=""/43, 0x2b}], 0x1, 0x42, 0x116d) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r1, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newqdisc={0x74, 0x24, 0xe0b, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x44, 0x2, {{0x8, 0x6, 0xa00, 0x3, 0xffffffff, 0x20102}, [@TCA_NETEM_LATENCY64={0xc}, @TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x6, 0x9c3, 0x6, 0x1, 0x51d4}}]}]}}}]}, 0x74}}, 0x4000080) recvmsg$can_j1939(r2, &(0x7f0000001e40)={&(0x7f00000001c0)=@ieee802154, 0x80, &(0x7f0000001cc0)=[{&(0x7f0000000300)=""/107, 0x6b}, {&(0x7f0000000400)=""/146, 0x92}, {&(0x7f0000000500)=""/115, 0x73}, {&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000001940)=""/54, 0x36}, {&(0x7f0000001980)=""/147, 0x93}, {&(0x7f0000001a40)=""/29, 0x1d}, {&(0x7f0000001a80)=""/140, 0x8c}, {&(0x7f0000001b40)=""/167, 0xa7}, {&(0x7f0000001c00)=""/156, 0x9c}], 0xa, &(0x7f0000001d40)=""/255, 0xff}, 0x10060) bind$packet(r0, &(0x7f0000000040)={0x11, 0x16, r5, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r0, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) 2m23.800348329s ago: executing program 39 (id=5586): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000010c0), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r1, 0x4000) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, 0x0) io_uring_enter(0xffffffffffffffff, 0x1, 0xfffffffd, 0x9, 0x0, 0x0) write(r0, &(0x7f0000000080)='4', 0x1) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) setxattr$incfs_id(0x0, 0x0, &(0x7f0000000140)={'0000000000000000000000000000000', 0x32}, 0x20, 0x2) r4 = fsopen(&(0x7f0000000040)='devtmpfs\x00', 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000100)='mode\x00', &(0x7f0000000140)='7', 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8, 0x5}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x98223, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb6000) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r6, 0x8912, &(0x7f0000002c00)=@buf={0x500, &(0x7f0000002bc0)}) r7 = openat$kvm(0xffffff9c, &(0x7f0000000540), 0x8000, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0xfffff34, 0x0, [{0xf88e470f, 0xed}]}) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x1, 0x40, 0x2, 0x4002004c4, 0x1004, 0x8000000000000000, 0x8000c595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0x5, 0x8d], 0xeeee8000, 0x201051}) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) r10 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x40) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r10, 0xc058534f, &(0x7f00000001c0)={{0xf}, 0x0, 0x2, 0x1}) preadv2(r3, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1fee00}], 0x2, 0x0, 0x22, 0x0) 2m21.616695329s ago: executing program 7 (id=5631): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYRESHEX=r0], 0x7c}, 0x1, 0x0, 0x0, 0x84}, 0x10000010) syz_open_dev$dvb_dvr(&(0x7f0000000240), 0x0, 0x13f) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000180)={0x227822080, &(0x7f0000000040), 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x1, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000970001000000000095000000000000e0"], &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) bind$inet(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x4100) ioctl$SG_BLKTRACESETUP(r1, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x201, 0xdd35, 0x80, 0x1e0, 0x81}) r2 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x1) fchdir(r3) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f0000000640)={&(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[{}, {}, {}, {}], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0xa, 0x4}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r3, 0xc01c64b9, &(0x7f00000006c0)={&(0x7f00000001c0)=[0x0], &(0x7f00000002c0)=[0x0, 0x0], 0x1, r4, 0xdededede}) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x88080) socket$inet_udp(0x2, 0x2, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000140)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c0d23266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) socket(0x10, 0x3, 0x0) ioctl$KVM_CREATE_PIT2(r6, 0x4040ae77, &(0x7f0000000040)={0x1}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_PIT(r6, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x3, 0x0, 0x1}, {}, {0xeda7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x20000000, 0x3, 0x3f8, 0x0, 0x0, 0x2004cb, 0x3, 0x0, 0xfffffffffffffff8, 0x0, 0x9, 0x2000000000003ff, 0x2], 0x2000, 0x200206}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) 2m20.981728335s ago: executing program 7 (id=5633): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x24048814) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, 0x0}, 0x800) mbind(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3, &(0x7f0000000140)=0x1, 0x61, 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000854}, 0x40800) close(0x3) 2m20.628328007s ago: executing program 7 (id=5637): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x9801) move_mount(r1, &(0x7f0000000140)='.\x00', r0, &(0x7f0000000180)='./file0\x00', 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0xffeffffffffffffe}, {0x0, 0x2000000000000}, 0x0, 0x0, 0x1, 0x0, 0x2}, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x10000, 0x0, 0x2, 0xb7, 0xc4, 0xfffffffe}}, 0xe8) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x1c) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_emit_ethernet(0xfdef, &(0x7f0000000140)={@random="5b1a033f2511", @remote, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x4578, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x64, 0x0, @wg=@response={0x10, 0x0, 0x0, "fdcdae25a7a296872a8a5290e48e30acf8afc7e67d70a62c979cefa10a0028bd", "ae0000000000000000e400", {"35f3c07eeca4a20a9858ac1500", "63081fe8fe001a08ed082ad7121d696f"}}}}}}}, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)) close_range(r4, 0xffffffffffffffff, 0x200000000000000) socket$netlink(0x10, 0x3, 0x4) socket$kcm(0xa, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="4433000041000701fefffffffeffffff017c0000040042800c00018006000600800a0000203302801c3317800400150004008b80080086800400b2800633018024", @ANYRES8=r5, @ANYRES64=r5], 0x3344}, 0x1, 0x0, 0x0, 0x4040044}, 0xc000) 2m17.35710481s ago: executing program 7 (id=5644): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, 0x0, 0x0) 2m16.861283144s ago: executing program 7 (id=5647): open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5c00ffff", @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000600fc000000080011000700000008000e00800000000800", @ANYRES64=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x80) 2m16.101315419s ago: executing program 40 (id=5647): open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5c00ffff", @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000600fc000000080011000700000008000e00800000000800", @ANYRES64=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x80) 2m9.229443698s ago: executing program 4 (id=5668): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_emit_ethernet(0x11e, &(0x7f00000009c0)={@broadcast, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x42, 0x4, 0x3, 0x3, 0x110, 0x66, 0x0, 0x2, 0x1, 0x0, @broadcast, @local, {[@noop, @timestamp_prespec={0x44, 0x24, 0xad, 0x3, 0x1, [{@private=0xa010100, 0x1}, {@rand_addr=0x64010102, 0xca28}, {@multicast2, 0x2}, {@multicast2, 0x60000000}]}, @timestamp={0x44, 0x1c, 0x86, 0x0, 0x2, [0x3, 0x4a, 0x2, 0x9, 0x0, 0xb]}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x4c, 0x9a, 0x1, 0x1, [{@private=0xa010101, 0x2}, {@local, 0x5a}, {@broadcast, 0x4}, {@local, 0x6}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x10001}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5}, {@multicast1, 0x8}, {@private=0xa010100, 0x8}, {@multicast2, 0x2}]}, @timestamp={0x44, 0x20, 0x2f, 0x0, 0x9, [0x5b, 0x8, 0xffff0000, 0x1, 0x3, 0x4, 0x7f]}, @timestamp_prespec={0x44, 0x2c, 0xcc, 0x3, 0x9, [{@rand_addr=0x64010102, 0x3}, {@rand_addr=0x64010100, 0x1}, {@multicast1, 0x9}, {@dev={0xac, 0x14, 0x14, 0x16}, 0x80000000}, {@empty, 0x3}]}, @cipso={0x86, 0x11, 0x3, [{0x1, 0xb, "3e9118e89e877e997d"}]}, @ra={0x94, 0x4, 0x1}]}}, @address_reply={0x12, 0x0, 0x0, 0x9}}}}}, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x8a01) ioctl$DRM_IOCTL_MODE_ADDFB(r1, 0xc01c64ae, &(0x7f0000000080)={0x0, 0x6, 0x5, 0x4, 0x18, 0x18, 0x7}) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000140)=@generic={0x1, 0xa0, 0x8}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') getdents64(r2, &(0x7f0000000340)=""/82, 0x52) socket(0x2, 0x80805, 0x0) r3 = openat2$dir(0xffffff9c, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x800, 0x100, 0xc}, 0x18) fchmodat(r3, &(0x7f0000000400)='./file0\x00', 0xd) unshare(0x26020480) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={r4, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf1, 0x8, 0x0, 0x0}}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="400000001000010028bd7000fddbdf25000000003941e3925fbd7b8658e8e8a682c9f63d35d649afebd1593ccfecc386d57947a47d253b7dbdf8d07c5279e2b887acb78e1dcf2307a37b28f34b3bdcfc4602e25e03dfd750276178c0fa", @ANYRES32=0x0, @ANYBLOB="00bc520410200012800b0001006772657461700000100002800400120006000e0002000000"], 0x40}, 0x1, 0x8100, 0x0, 0x20000010}, 0x20048000) r6 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r6, &(0x7f0000000500)={0x0, {'syz1\x00', 'syz0\x00', 'syz1\x00', &(0x7f00000006c0)=""/101, 0x65, 0x0, 0x0, 0x4, 0x3, 0x10000001}}, 0x120) r7 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0) landlock_restrict_self(r7, 0x0) writev(r6, &(0x7f0000000780)=[{&(0x7f00000003c0)="0e000000", 0x4}, {&(0x7f00000006c0), 0x1000000}], 0x2) 2m8.51921475s ago: executing program 4 (id=5670): socket$nl_route(0x10, 0x3, 0x0) clock_gettime(0xa, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000280)={0x9}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000100)={[{0x4, 0xc000, 0x4, 0x5, 0xff, 0x9, 0x3, 0x8, 0xb9, 0x3, 0x8e, 0x5, 0xc50}, {0x804, 0x1, 0x1, 0x45, 0xff, 0x6, 0x2, 0xff, 0x0, 0x4, 0x6, 0x7f, 0x20c}, {0xf1c2, 0x3, 0x38, 0x9, 0x84, 0x7, 0x3, 0x50, 0x0, 0x7, 0x4, 0x5, 0x3a}], 0xffffffff}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x1fd, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x2, 0x7c8, 0x0, 0x61, 0x200002000001, 0x0, 0x2004c8, 0x0, 0x0, 0x7, 0x5, 0x7fff, 0x3, 0x400000000, 0x0, 0x20000], 0xeeee8000, 0x120010}) ioctl$KVM_RUN(r2, 0xae80, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1) r3 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_S_OUTPUT(r3, 0xc004562f, 0x0) ioctl$VIDIOC_S_DV_TIMINGS(r3, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x2d0, 0x191, 0x1, 0x0, 0xdd9f83, 0x1, 0x2f, 0xf3, 0x2, 0x8, 0x1000008e, 0x3, 0x7, 0x7f, 0x27, 0x20, {0x0, 0x6fd8e84d}, 0x3, 0xed}}) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x80) mbind(&(0x7f00005f7000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="5801000010000100feffffff00010000fe880000000000000000000000000001fc010000000000000000000000000001000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x158}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)=ANY=[@ANYBLOB="400100001a80ac1e0101000000000000000000000000fc010000000000000000000000000001000107174e2300050a0000203a00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000fc02000000000000000000000000000007000000000000009201000000000010a39b000000000000ffff0000000000001c250800000000000500000000000000fcffffffffffffff0400000000000000ffffffffffffffff00000000000000001f000000000000000500000000000000fefffffffc030000000000007e000000053500000200010020000000480003006465666c6174650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001f0002000000"], 0x140}, 0x1, 0x0, 0x0, 0x84}, 0x844) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 2m6.451915405s ago: executing program 4 (id=5674): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e23, 0x100002, @ipv4={'\x00', '\xff\xff', @empty}, 0x1e}, 0x1c) (async, rerun: 32) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000200)={0x0, 0x100000, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000b21119f142e776ab62be7fd9c60fd3bee20cbbb096a0c0dc5d6b198998b1ee3ee75a7c6a6d61c6797ee1a26d876809f113a42dcaf8283e0b8e8c5223280fd72833d0af53bf9c90d6b20ec07791033faad5d9a2c5d626233447bee9403a82d40653e99e567199bff22ad809d174357e123295e0d75a9a", @ANYRES16=r5, @ANYBLOB="010000000000000000000800000008000300", @ANYRES32=r4, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async, rerun: 32) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async, rerun: 32) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) pwritev2(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0) (async) ioctl$FE_GET_INFO(0xffffffffffffffff, 0x80a86f3d, &(0x7f0000000480)) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000003, 0xfa10, 0xffffffff}, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x20000) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r6, 0x40146f2c, &(0x7f0000000000)={0xfff, 0x0, 0x3, 0x5, 0x4}) ioctl$DVB_DEMUX_DMX_ADD_PID(r6, 0x40026f33, &(0x7f00000000c0)=0x7) (async) r7 = openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x109000, 0x121) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r7, 0x6, 0x16, &(0x7f0000000400)=[@timestamp, @window={0x3, 0xfffb, 0x5a5f}, @sack_perm, @mss={0x2, 0x1}, @window={0x3, 0x8, 0x7fff}, @mss={0x2, 0xc8c}, @window={0x3, 0x4, 0x79b}, @timestamp, @mss={0x2, 0x2}], 0x9) (async) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x80, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async, rerun: 64) r9 = socket(0x400000000010, 0x3, 0x0) (rerun: 64) socket$unix(0x1, 0x5, 0x0) (async, rerun: 64) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async, rerun: 64) sendmsg$nl_route_sched(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=@newtfilter={0x64, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x8}, {}, {0x8, 0x3}}, [@filter_kind_options=@f_fw={{0x7}, {0x38, 0x2, [@TCA_FW_ACT={0x34, 0x4, [@m_ctinfo={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x26044028}, 0x800) (async) ioctl$DVB_DEMUX_DMX_START(r6, 0x6f29) r10 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r10, 0x107, 0x7, 0x0, 0x0) 2m6.158894207s ago: executing program 4 (id=5675): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000180)) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000101050005000a000000050001000700000005000400000000000900020073797a310000000016000300686173683a6e65742c706f72742c6e6574"], 0x5c}}, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000003a40), 0x2, 0x0) preadv(r2, &(0x7f0000003ac0)=[{&(0x7f0000003a80)=""/60, 0x3c}], 0x1, 0x5e4, 0x8001) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000001, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe800000"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x20000040) r3 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) r5 = dup(r0) r6 = syz_usb_connect(0x3, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100007e9eb4104c053800f516010203010902120001000000000904"], 0x0) syz_usb_control_io$sierra_net(r6, 0x0, &(0x7f0000000240)={0x1c, &(0x7f0000000e80)={0x0, 0x30}, 0x0, 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r5) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x1c, r7, 0x800, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, [""]}, 0x1c}}, 0x80) write$UHID_INPUT(r5, &(0x7f0000002080)={0x200f, {"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", 0x1000}}, 0x1006) socket$nl_route(0x10, 0x3, 0x0) r8 = getpid() r9 = syz_pidfd_open(r8, 0x0) pidfd_send_signal(r9, 0x30, &(0x7f0000000280)={0x0, 0x400000, 0xfffffffb}, 0x0) r10 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="5c0000000206010400000000000000001a00000214000780080008000000000008000640000000000500010006000000050005000200000005000400000000000900020073797a32000000000d000300686173683a6e657400000000"], 0x5c}}, 0x0) name_to_handle_at(r10, &(0x7f0000000380)='./mnt\x00', &(0x7f0000000340)=@xfs={0x18, 0x81, {0x5, 0x1000, 0xc, 0xfffffffd}}, 0x0, 0x200) 2m2.917112997s ago: executing program 4 (id=5680): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@delsa={0x48, 0x12, 0x1, 0x0, 0x0, {@in=@dev}, [@srcaddr={0x14, 0xd, @in6=@rand_addr=' \x01\x00'}, @mark={0xc}]}, 0x48}}, 0x0) timerfd_create(0x9, 0x80800) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x3, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x190, 0xf1f80502f07a58b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PACKETS_PER_SLAVE={0x8, 0x14, 0xff}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40010}, 0x240080c1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00000018"], 0x50}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000300), 0x3, 0x400) ioctl$SNDRV_PCM_IOCTL_WRITEN_FRAMES(r1, 0x400c4152, &(0x7f00000005c0)={0x0, &(0x7f0000000580)=[&(0x7f0000000380)="bf0de5b436fd902fe64619ba4ec4d64e7610d148d8f97ae9d5dd36549dea0a855a213bf20f0aaf242529eadc984718220b30c24f06446465418f67c5ef3dbe5da1cd167998fcde3c7759d5a6c70380f9fb084878e0508587346f198c8c7e6bdcf49b3e9fd5f6cfe53598195c836e041ae55d3a96733fdf008efa87d6c012dbaa5ff2390c4d6f676ec904a6c1d31aa22a234ceb0643d00defd80e4b9ec10276376f1556e3784d4bce33106d8df62854baa31ee5f44d1e8beb64f942e36c7f76afa591922dea68200bb41b666ef2f6145646619567d49e0f8610ab1f184bc4b58022a6dd5b3589403d", &(0x7f0000000480)="0041ef7455166f75e3eed774a85022f5e2bf32f87e861b4aaee8fab719770b3e401cf8179c6642d44d2be9da33c75b18b2e0b1828eebac5bc5859f1437d0f6ca3ad340a9d40d3a773f93a5dc68838e6d33447e00f67c6c4e87fcd0102e0434c18425c4a39b24bd020c2dea3ac72fc5bd82e9c0cff452a75af79948cc2868e16cf4bdfabdd22bfd84f6b571e842210bdc80c8ed0ec945602f919346572572572181c2d758e49925ae3edf070da85bdc612683604e33fadab281b74ecace07740d76a969e5413f573646b76e454950ec156c619a6a031f51bc9d848719d05db9f6"], 0x600000}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r3, 0x733, 0x70bd25, 0x259fdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20040080}, 0x4000) sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, r4, 0x10, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7, 0x1c}}}}, [@NL80211_ATTR_TDLS_INITIATOR={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x4c001) 2m2.73182603s ago: executing program 4 (id=5681): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r1, &(0x7f0000001380)={&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000000180)=[@rdma_map={0x2c, 0x10c, 0x3, {{0x0}, 0x0, 0x10}}, @rdma_dest={0x18, 0x114, 0x2, {0xaef, 0x4}}], 0x44}, 0x0) (fail_nth: 10) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000140)={0x1}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x58) ioctl$VIDIOC_S_SELECTION(r2, 0xc040565f, &(0x7f0000000100)={0xe, 0x3, 0x1, {0x5, 0x9964, 0x3, 0x100}}) listen(r2, 0x5) r3 = syz_open_dev$loop(&(0x7f00000014c0), 0x4, 0x2) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000001540)={0xffffffffffffffff, 0x9, {0x0, 0x0, 0x0, 0xbb, 0x1b99, 0x0, 0x3, 0x4, 0x13, "b7f8ada941fbfa24b230324b3122fe227031c9fb2622e97099e554942542690fb0219cbefea4d3a5c75b831367cbd848f5a1b04aff3568c826ed63af1057abf6", "e5774ce57e1395c66549c09e1a753713979872f8b081a61f3a2ce683ee7b6ead66b72f1365216f05a2ea09d6cd61fc85ebf757186da4d22874517bf0100dd87b", "8cbcf6468f994f1274302174ba4d9ee37a68f48b1ba174b75fe8178e0debfa0a", [0x80000000, 0xffffffffffffff4e]}}) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000dc0)={0x0, 0x3, 0x1000002, 0x0, 0x5, "d52c2000000102000300ecffffff0100"}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0) r6 = syz_open_dev$sndctrl(&(0x7f0000000240), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r6, 0xc2c45512, &(0x7f0000000340)={{0x3, 0x0, 0x0, 0xfffffffc, 'syz0\x00'}, 0x0, [0x0, 0xffffffff, 0xffff, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x200080, 0x4000, 0x3, 0x0, 0xfffffffc, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1fb, 0x0, 0xffffffff, 0xfffffffe, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x20, 0x401, 0x400, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0xfffdffc7, 0x8, 0xffff, 0x3, 0x401, 0x5, 0x3, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x65, 0x80000001, 0x0, 0x0, 0x5, 0xf1e9, 0x0, 0x0, 0x2147, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, 0x1ff, 0xfffffffc, 0x0, 0x0, 0x7, 0x0, 0xffffffff, 0x5, 0x0, 0x0, 0x0, 0x1, 0xfffffffd, 0x800, 0x1, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0xfffffffe, 0x200040]}) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x40001, 0x0) ioctl$BLKZEROOUT(r7, 0x127f, &(0x7f0000000240)={0x600, 0x1000000}) io_setup(0x5, &(0x7f0000000240)=0x0) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/disk', 0x8401, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000200)='cubic', 0x5) io_submit(r8, 0x1, &(0x7f0000000400)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x8, 0x0, r9, &(0x7f0000000300)="87992d800d80", 0x6, 0x4}]) sendto$inet6(r4, 0x0, 0x0, 0x24040014, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) close_range(r2, 0xffffffffffffffff, 0x0) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f00000000c0)) 1m47.657262635s ago: executing program 41 (id=5681): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r1, &(0x7f0000001380)={&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000000180)=[@rdma_map={0x2c, 0x10c, 0x3, {{0x0}, 0x0, 0x10}}, @rdma_dest={0x18, 0x114, 0x2, {0xaef, 0x4}}], 0x44}, 0x0) (fail_nth: 10) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000140)={0x1}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x58) ioctl$VIDIOC_S_SELECTION(r2, 0xc040565f, &(0x7f0000000100)={0xe, 0x3, 0x1, {0x5, 0x9964, 0x3, 0x100}}) listen(r2, 0x5) r3 = syz_open_dev$loop(&(0x7f00000014c0), 0x4, 0x2) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000001540)={0xffffffffffffffff, 0x9, {0x0, 0x0, 0x0, 0xbb, 0x1b99, 0x0, 0x3, 0x4, 0x13, "b7f8ada941fbfa24b230324b3122fe227031c9fb2622e97099e554942542690fb0219cbefea4d3a5c75b831367cbd848f5a1b04aff3568c826ed63af1057abf6", "e5774ce57e1395c66549c09e1a753713979872f8b081a61f3a2ce683ee7b6ead66b72f1365216f05a2ea09d6cd61fc85ebf757186da4d22874517bf0100dd87b", "8cbcf6468f994f1274302174ba4d9ee37a68f48b1ba174b75fe8178e0debfa0a", [0x80000000, 0xffffffffffffff4e]}}) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000dc0)={0x0, 0x3, 0x1000002, 0x0, 0x5, "d52c2000000102000300ecffffff0100"}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0) r6 = syz_open_dev$sndctrl(&(0x7f0000000240), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r6, 0xc2c45512, &(0x7f0000000340)={{0x3, 0x0, 0x0, 0xfffffffc, 'syz0\x00'}, 0x0, [0x0, 0xffffffff, 0xffff, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x200080, 0x4000, 0x3, 0x0, 0xfffffffc, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1fb, 0x0, 0xffffffff, 0xfffffffe, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x20, 0x401, 0x400, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0xfffdffc7, 0x8, 0xffff, 0x3, 0x401, 0x5, 0x3, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x65, 0x80000001, 0x0, 0x0, 0x5, 0xf1e9, 0x0, 0x0, 0x2147, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, 0x1ff, 0xfffffffc, 0x0, 0x0, 0x7, 0x0, 0xffffffff, 0x5, 0x0, 0x0, 0x0, 0x1, 0xfffffffd, 0x800, 0x1, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0xfffffffe, 0x200040]}) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x40001, 0x0) ioctl$BLKZEROOUT(r7, 0x127f, &(0x7f0000000240)={0x600, 0x1000000}) io_setup(0x5, &(0x7f0000000240)=0x0) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/disk', 0x8401, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000200)='cubic', 0x5) io_submit(r8, 0x1, &(0x7f0000000400)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x8, 0x0, r9, &(0x7f0000000300)="87992d800d80", 0x6, 0x4}]) sendto$inet6(r4, 0x0, 0x0, 0x24040014, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) close_range(r2, 0xffffffffffffffff, 0x0) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f00000000c0)) 1m41.804322193s ago: executing program 6 (id=5750): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x40, 0x801, &(0x7f0000006680)) r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0xa, 0x1, 0x4, 0x0, 0x7}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405668, &(0x7f0000000140)={0x6, 0x6, 0x1, "0000087aba10fd00000000008000"}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x89f9b000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ioprio_get$pid(0x0, 0x0) 1m41.78324427s ago: executing program 0 (id=5751): socket(0x2b, 0x1, 0x3) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$SNDCTL_SEQ_GETINCOUNT(r0, 0x80045105, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x6, &(0x7f0000000000)=0x9, 0x8, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/keys\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000000240)={0x2020}, 0xffffffffffffff07) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xac5) syz_clone3(&(0x7f0000000180)={0x23800000, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) unshare(0x4020400) r2 = epoll_create1(0x80000) ppoll(&(0x7f00000000c0)=[{r2, 0x402}], 0x1, &(0x7f0000000100)={0x0, 0x3938700}, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000002280)=ANY=[@ANYBLOB="0000009bfaf42a6892c6772c89332473e71f7e5c7404fae8d2bf88eea14e5c406d1d6dab098fa12261885014151572aa3b853609d7c4ea11a0de682a222e1a698a7d0e353f9e2c67d2e0b8bc26a13c819b71d321403283a7e24133fb2ba7ab293ec6dcc3c62d48a9722bf6bee3793e05667559dc6457bf6eb3fec1a1da683a4ee74ff8cb3811f22b4f4b", @ANYRES16=r6, @ANYBLOB="030328bd7000fbdbdf250a00000008000300", @ANYRES32=r5, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x44}, 0x4080) io_submit(0x0, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x1, 0x2) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map, 0xffffffffffffffff, 0x7, 0x2014}, 0x20) close(0x5) munlockall() mprotect(&(0x7f00000ee000/0x1000)=nil, 0x1000, 0x6) 1m39.836296397s ago: executing program 6 (id=5755): r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f00000003c0)) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x0, @local}, 0x2}}, 0x26) r3 = syz_open_dev$swradio(&(0x7f0000000140), 0x0, 0x2) r4 = dup(r3) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) read$midi(r6, 0x0, 0x3b) landlock_restrict_self(0xffffffffffffffff, 0xc) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x80383, 0x0) ioctl$SNDCTL_SEQ_RESET(r7, 0x5100) setsockopt$inet_sctp6_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, 0x0, &(0x7f0000000640)) socket$inet6_tcp(0xa, 0x1, 0x0) r8 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_fuse_handle_req(r8, 0x0, 0x0, &(0x7f0000006b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r9 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x32a}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r9, r10, r11, r12, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x2a, &(0x7f00000004c0)=@any_dev={0x4, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r14 = socket$inet6_tcp(0xa, 0x1, 0x0) r15 = dup(r14) syz_emit_vhci(&(0x7f0000001940)=ANY=[@ANYBLOB="0012080ed3c732ac7be992"], 0xb) syz_ublk_setup_queues(r15, r13, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x257, 0x0, r4}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x80, 0x1, 0x10000004, 0x0, r15}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x20, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1b39, 0x0, 0x0, 0x1f0, 0x0, r15}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x316}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) cachestat(r16, 0x0, &(0x7f0000000300), 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004", @ANYRES32=0x0], 0x48) read$FUSE(r4, &(0x7f0000008180)={0x2020}, 0x2020) 1m39.709732021s ago: executing program 0 (id=5756): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0xfc, 0x0, 0x7fff0000}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) close_range(r1, 0xffffffffffffffff, 0x0) (async) epoll_create1(0x80000) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000079db8540da0b77010b7d000000010902120001000000000904", @ANYRES32, @ANYRES8=r2], 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a03000000000000000000"], 0xe8}}, 0x0) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)={0x20, 0xd, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x40084) 1m38.61244945s ago: executing program 6 (id=5757): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x24048814) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000"], 0xb4}}, 0x800) mbind(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3, &(0x7f0000000140)=0x1, 0x61, 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000854}, 0x40800) close(0x3) 1m38.336079462s ago: executing program 6 (id=5758): r0 = syz_open_dev$loop(&(0x7f0000000180), 0x8, 0x80000) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) unshare(0x22020600) pipe(&(0x7f0000000400)={0xffffffffffffffff}) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000100)={@map=r2, r2, 0x37, 0x200c}, 0x20) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r3, @ANYBLOB="0008000007500500580012800b0001006272696467650000480002800500190002000000050017"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) gettid() getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f00000004c0)=""/65, &(0x7f0000000600)=0x41) syz_io_uring_setup(0x34b7, &(0x7f0000000540)={0x0, 0x7243, 0xc00, 0x2, 0x12f}, 0x0, &(0x7f0000000080), &(0x7f0000000200)) r5 = add_key(0x0, &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r5, r6, 0x58) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) r8 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000080)={'veth1_macvtap\x00', {0x2, 0x0, @rand_addr=0xac140001}}) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r9 = socket$inet_sctp(0x2, 0x1, 0x84) bind(r9, &(0x7f0000000000)=@in={0x2, 0x3210, @rand_addr=0xac140001}, 0x10) listen(r9, 0x5) write$tun(r7, &(0x7f0000000200)=ANY=[@ANYBLOB="00000800010000000000140008004500003c000000004084ca2502020202ac14000104d2321000000000000000000100001c11223344000080000005000500000001c001000811223344"], 0x4a) socket$igmp(0x2, 0x3, 0x2) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r11, 0xae60) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000000c0)=@x86={0x2, 0xfb, 0x80, 0x0, 0x4, 0x6, 0x2, 0x0, 0x4, 0x8, 0x10, 0x3, 0x0, 0xfffffff8, 0x8, 0x4, 0x6, 0x8, 0x0, '\x00', 0x0, 0x7}) ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r11, 0x4020ae46, &(0x7f0000000140)={0x2710, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 1m37.325062979s ago: executing program 6 (id=5761): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r1 = io_uring_setup(0x3c46, &(0x7f0000000880)={0x0, 0xeb7f, 0x10400, 0x2, 0x1a4}) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r1, 0xd, &(0x7f0000000140)={0x7, 0x0, 0x0, 0x0}, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r1, 0xe, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], &(0x7f0000000080)=[0x3fffffffffff], 0x1}, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r1, 0xe, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x0, 0x1}, 0x20) syz_usb_connect(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100004107f540f30c7593de1a000000010902240001000000000904000002bee4f9000905031d96"], 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x20000040}, 0x24004000) sendmsg$NFT_BATCH(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000100)={&(0x7f000000c300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000d00020073027a317a48fb23f74848b4040004000900010073797a3000000000080003"], 0x64}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x439, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21801, 0x6536d5ef40a93735}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0x4}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x410c0}, 0x4000020) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080010000000e8fe55a1180015000600142603600e1205002100d8000401a8001600a400014020000300036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) r4 = socket(0xa, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r5, 0xffffffffffffffff, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001400030400000000000000000a3f0000", @ANYRES32=r7, @ANYBLOB="14000200ff2300000000000000000000000000011400060000000000060000000000000000000000080008000004"], 0x48}}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000180)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x29, r7}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0xfffffffe, &(0x7f0000006680)) execve(&(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0)={[&(0x7f0000000280)='(*&$]$\x00']}, &(0x7f0000000580)={[&(0x7f0000000300)='\xff\xff', &(0x7f00000003c0)='batadv_slave_0\x00', &(0x7f0000000400)='bridge0\x00', &(0x7f0000000440)='+\x00', &(0x7f0000000480)='\xff\xff', &(0x7f00000004c0)='})]\'+[()\x00', &(0x7f0000000500)='\xff\xff', &(0x7f0000000540)='(\\*!^+:\x12\'@R-%/(,}}\'-%*-:^{\x00']}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) map_shadow_stack(&(0x7f0000489000/0x1000)=nil, 0x1000, 0x1) r8 = openat$sw_sync_info(0xffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r8, 0x40806685, 0x0) 1m36.496055461s ago: executing program 0 (id=5762): r0 = syz_open_dev$loop(&(0x7f0000000180), 0x8, 0x80000) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r2, @ANYBLOB="0008000007500500580012800b0001006272696467650000480002800500190002000000050017"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) gettid() getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f00000004c0)=""/65, &(0x7f0000000600)=0x41) syz_io_uring_setup(0x34b7, &(0x7f0000000540)={0x0, 0x7243, 0xc00, 0x2, 0x12f}, 0x0, &(0x7f0000000080), &(0x7f0000000200)) r4 = add_key(0x0, &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r5, 0x58) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) r7 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r8 = socket$inet_sctp(0x2, 0x1, 0x84) bind(r8, &(0x7f0000000000)=@in={0x2, 0x3210, @rand_addr=0xac140001}, 0x10) listen(r8, 0x5) write$tun(r6, &(0x7f0000000200)=ANY=[@ANYBLOB="00050800010000000000140008004500003c000000004084ca2502020202ac14000104d2321000000000000000000100001c11223344000080000005000500000001c001000811223344"], 0x4a) socket$igmp(0x2, 0x3, 0x2) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r10, 0xae60) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000000c0)=@x86={0x2, 0xfb, 0x80, 0x0, 0x4, 0x6, 0x2, 0x0, 0x4, 0x8, 0x10, 0x3, 0x0, 0xfffffff8, 0x8, 0x4, 0x6, 0x8, 0x0, '\x00', 0x0, 0x7}) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000140)={0x2710, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r10, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @pic={0x3, 0x7, 0xe1, 0x81, 0x9, 0xf9, 0x40, 0x42, 0xfb, 0x0, 0xc, 0x0, 0xfb, 0x4, 0xfc, 0x38}}) ioctl$KVM_SET_REGS(r11, 0x4090ae82, &(0x7f0000000000)={[0x6d, 0x0, 0x100000000005, 0x20, 0x3, 0x2, 0x80000000106c, 0x100, 0x9, 0x80000004400080, 0x1c00000, 0x6, 0x0, 0x4, 0x0, 0x8000], 0x1, 0x3c4210}) 1m35.540031337s ago: executing program 0 (id=5765): socket(0x840000000002, 0x3, 0x100) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0xba01, 0x0, 0x4000050}, 0x0) socket(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000080)={0xf0f03f, 0x6e}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a24010000060a010400000000000000000a000004fc00048034000180090001006d65746100000000240002800800034000000017080003400000000a0800024000000012080003400000000b140001800e000100636f6e6e6c696d6974000000100001800c000100636f756e746572000c0001800700010063740000400001800700010063740000340002800500030001000000050003000100000008000140000000030500030000000000080003000000000708000440000000002c0001800b0001006c6f6f6b757000001c0002800800034000000016080002400000000108000240000000010c0001800700010063740000100001800900010068617368000000000c000180070001007274000008000940000000020900020073797a320000000014000000110001000000000000000000000000110e28a58bdb71b601a907aa494561b7f76e03d95d195adaf55649fa947e6f596c59e0f17ee7285a7cb4e76a682d26a2524f821eca2c04b96c13ae536c7f1bbeecdc8daef914fd060eb0980be4b26caf4e023e6fcd70dcd1920df1e6ebb7491e985c97738efb198c85d7376ac1e25373d68c7a"], 0x14c}, 0x1, 0x0, 0x0, 0x40}, 0x24000840) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x34, 0x71, 0x10, 0x33}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x3, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000400)={0x0, &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r4, 0xc06864a2, &(0x7f00000002c0)={0x0, 0x0, r5, 0x0, 0x80, 0x5, 0x9, 0x0, {0x9, 0x1000, 0x101c, 0x10, 0x4, 0x401, 0x100, 0xa, 0x0, 0x52, 0x43, 0x7e9, 0x401, 0x9aa5, "cb630dab3a0338057401a192419598961f50dc45c87d55a52a28b8f01c0e0e7a"}}) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x1, 0x12, 0xffffffff}]}, 0x8) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000200000000000000000000000000a20000000000a01030000000000000000010000010900010073797a310000000054000000030a01040000000000000000010000000900030000000031000000000900010073797a310000000028000480080002401886c3010800014000000005140003006d61637674617030000000000000000028000000000a05000000000000000000010000080900010073797a310000000008000240000000011400000011000100"], 0xc4}, 0x1, 0x0, 0x0, 0x20004040}, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r10 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast}) r11 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') open_by_handle_at(r11, &(0x7f0000000000)=@FILEID_NILFS_WITHOUT_PARENT={0x20, 0xf1, {0x1, 0xfffffffffffffffe, 0x9, 0xfffffff8, 0x3d}}, 0x94101) write$tun(r8, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd0900300003003000000060ce902d9f0c88"], 0xfdef) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f00000003c0)={&(0x7f0000000280)=[r5, r6], 0x2}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4, &(0x7f0000000040)=0xb, 0x4) 1m35.119545154s ago: executing program 0 (id=5766): r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_fuse_handle_req(r0, &(0x7f0000004180)="92756f43b31ffe542788ef586b7c5a344424e3acac2590be6bbe37adface4a8f2e534ffe76a83a93f0b3680a72fddfde83f96d01982384e8d689219cb9669b14dbaa1b799f82ea1fc926126a4163618e16d4f94143a4e0f27c44fcef3920a0b3805ed4e78098d8689cc7791bd86648070718d238664332948d87866c8d2590fc0f017f9853abd9ed60b99f1aa6ae2dbd24ab6dbcebdb055246815ace147cc50fa3b2861148fcda374d5b203e51d72c45e4dde3e9ee9a47ffe458baf7bb49035135a8194aa1f0a83fa2abed56398f90daff679634619453f533f22583a6e0a4dc09e9de46684d5e0136e229510f3702cf3a4cd0065d3e5d3c419e38a80b070ca55010e082a9c510fd18cc0b26bb5e8e459e747befbc5c6b60ace80bf41417b7b78cf57e5b3984f0cdddc615c5e0000454d3f4a196fb6d18aa629cf0b0245f95ba958d86dc175616f8cd3ac473057dc3a5ff7107973326350107f4468e7ecd48d689b82c12d22ae5f1858302a1b4cfde8fd347a99ddcde40d1c49d9b5099fbccf09e782212be4b2ce36a2bc3c9ee794abffe72a5501e6c4f3f7f68b74761ffd6620609224a3bf11f655dadb5c8a5813b02fb46830e9ac6825f5d0e89910352eb3a58c0dd82d094f94dd2c85666f684a8f437bbd0e66b9f4d366117b67a054d212c4fbc287848cb0578391335d5d616b14d99a2e3df8e8a152d5de99bcefcaab5bb5cc71f3ddd66b379c104648e190e0b28a180d3aecc5423575d4ba7dbf31215c717da7b87dd454b6efcd36c91aaa631127f5bd88723d221752f102bc0c7ac6c5c7a1ad6747af40d01b6d39eab7b0e1292b44683c586386ad00acf60fb8f9bac551a6eb5bab7317b5d89f64db10bd9018dfa6d65d93862e851afbc30fd70fe5f0de322462045177231852ca80e4e78da4fea0c79ba354333026c8bc77d308a8d256a19ec45d2088c196691d3f9aac28ded36004a65ee1ce49ba9599ceee84534bb61d02d04a6732f1e27d72962f74b59f3522bf844c5022986d55934e48b8681b7f5b7532391448caeef00315d28320a46d8bd7813544e1e4bf994e14a519c2654ff20b42bdb69c262897e28eca528f0999840b00ed8256597d27cfc20d71d5f40d0bbca759f7594c6034aa1e16a84ed152fad0fdc1c303a7f61225712714f823afc5ea241d482d3585759623af8c97ca6a84a2033b3d7314ea0ef7ba9b288b362a294c92c8b9736829c16f61c5a1ee04aca965d71162292274595ea62c9c2918e8279c99f5d2830c617c58211fd7452330184b9428d5ec1d5cd75ddcc6de3326fdc70e891104b3b013c30ffccfaf3308d9671b01f6b080a930dac2052c6f39817a662121d90d40d6a1facfb50bec7d408030b6d0ae3e744f3bcc327c35dc43cf86b743db78ff2e593b19923235ed6467f299b08718fe1840c16a748935dff941150fb08b30573b37bf9af5c86cc8d9e229a832e4ef25ec91f71120f2b3e9062485976c280a2d172386029e2f2a4801197fca0a13514edacf5ddbac5a62e8bb13dd1572657a821a8739297f72e29239d1cdddf3e30cbe9af3141f2275ee4ae85d86ec888fe9a6751f252057e95b8beb055e276439581afee93cd44f1e92f70e5f725451d3ab662918ffbb1269509fbd511e95a00ec717f9d60d643864abd6ad1cc4dd7f933379a6078a86c2158db8076e7b660366fca7b1c46d09d2c8e67a6494bfb4c2c6750e76593895b5e2b2bc78093840c3c4a807826bc2750a96b4e1dd5b82b492bb2215518c92064d1763c37132604e52e73fac3f4511f791753aeecfbb19816e0da7a1bfbea9eeaa0f256eaedcb119a61f7d0ea0f5cd4969d45cb014800f2c888d5c2217cf0f69a7507779883b57352bb8883cc584891950d6e792537074f4fc4337aa19b9bf60e18edd939d289fb4a6b7aa6c66da20774e249ca4f779d3c910b1a9a8e4c38af6adecc87d5481d181fd66023ffff246f4e2556b218fe8110acebe20b1675f1de6f265b6d1d8514a53522396bf0e2f2b153c498e48b36d16f8b9bd56f45d7f5b9397d7f1339117a176d0bad0b68e800682416d3e18fe2197c7f8dc20600feb95cc6ba86ad47f113e159bd4389e30eab2874bd27eebc56020c4dab9973b13f3e82aa62a7e0a151d73de48cb811e32be63ffd303f5a6ea6f097ed763fbf36c430821e451146de79922348354ce285af0997bf3c66e6ef02942e24b8f1ccdd542f09cfe65c0da0094c0b5fd26bbc061538b41e5ed2cbb390ee29b10a4b7a696009e1b5b86c44c0a561a257c15415feaeb1433ea275ed6e4b228503fe71ee5942665164faaed6697112206be0fe7863aebd4bbe951d5dea1da294dba0793196385f4d5141c9d6c4b0fa22b2e200cfb70b52aca31655e71e5a576ccb8ccb5b1364748aa981edbb81a813b1aebc67be1f7619e7e197622d981280429f6ca5145c5b3b05e6bace9191e5c58fbf140f71f594cbfd4db0e9f6923f1758ff9464a61a720a5d4f09c622c3ce3f5d0d3a1d191111168108f41f12b16e9eaf3617c353715cd35260560cbfd0555d51ce5c40bbdb7c95ceaeadadb8902974de50b0863348183864f5ea682e678286a06a6f396af29a7c7fb33a3579e25835963612f3c0d4cf369d85959a0adeda94d35824050e6fba7f83f90867583f713d7783323c7010e94c9be331f860db395dbde6face5bfdb616fcefa9c6b01f6963daa840a31ff554a458c0c50cb5e09f91f54f63234589decaf45bbfbaef0dcbff4ae6e65ca26a530261c491ef8eb9a855a1d7463391c9b66be96cf24c3c321ee5a5bdc857f60b582683c6ae1e3775b62a9f19ff8fa51380ca8a2a3c6de79012f5727ba12025e7e6723a23a81e067ca6e54c7b38ff64880d235d21e7ee5258953dcbf9e2a962f006ca4ffe870859242c850cbae4222b3b72c4f86934379ba2ead1dcde906241b994d95c88355af5a9a30ace9c933a6942f341ad221dd825846a8fd44c03e2eaa9311c26e15a1bd7cbba961a22ef23d7ebba0e34cec5ef09b1ce72814a97e33bd29f3d9ec80a4f45d1d29486accf15c11f1a800bd84918e7626f678275d7c7acb02cc0e6e34bb766ba6b75c3ad14fca9352e09c3b69390c045cfc842ff9ade8ca693c07fadc7047a946e6e570c3afc5b501c964103397f5ddadc2d59a048348dd42f07cfe31bc9b5ae453f5086bb41bba4c8a3e518e30b0855184b053f923025dd72ce1bcbf41231978b34a8547c71d7313992165078903c61d312b0d9469413c9fd97ccdf0ea270fb6c47ec8861a1c8d909eeace761b5a06ba46e25785ff87f867777abb237c6c980687991f1ed0157d58492260c712cec34c1fc0962103955db4d5090b6e8409cf3c3c79d0e691cf4fbc0b2251a016dcd456969cd32e5429533bf0d6f8bda84c05f0e2040de8b53bfb8676eec4b76c3df6f46b1e43732035dda577e75f640777f6ae90fd2f1af42ba462dac732019c599bfef01acd6a0d4d1796bcb8f58519d6f9ad9a3206704a94d472516b988141f44ecd2e6f28a49aa0c449db87972fc995a97379914546ea43143ea2cf779a9cbe81f111fe89129db3610492164ab2598eca7e60d9a6963d8ba03a86729db86e420fd96d61b8fb11edc2b339b57a740074ae5b775eaf60cd85dc934e604bf2b4bd58ee01205b4df57ac20ff8db45a05982b579643882407050c005102a2e71f1e56dc76dbf5331112e83e48bfb5cf2a78a893190d78426175c162ffaa7278a43b9932318fc17fb8cb0dfac610b1ad235b91f9cb7623b155117e07f7b876a3c37627aa31eafed141cc0c5491c4f621a66b6d837a144d78719c46511c04a093cf65fce9fabe5bd6d499eceb63538ece3cf19053550a239bf978c08c879f9954485a4e3e0d5bedb84b407ced85c4dfc4d75af116815992c29f0bc927c4a990c38ae4fcc9feb90fec1b1b555e04d010423010855394d5ccfc8ed21164190cd8f83be5debb70290c3547f07e4dc42814f1e001798e6ceee2558b0c6ff8c1759f90269ee226131116332b99ac8dd104c92088e1f91ace3198c0f59bfb75c4e4a697660eed43a29c831a552de37fce6dce96fa51b6e2111f3071a4e94422d15e102e5f67da7ca6cae6bed7743ebffacb8a811a143605791d17232181a517e872f71262c3c73668f0ef83aad498f67fa26bae698cf78f24c2dbecd399a190e6b8d0684e929f2e8083765eb2c67793a1adbb89d36b58bfb197cdc5f3c894ac9d886e8f3b0936fabd233c09de8fab8099f72a74d908ba5c5e4d39790b0bf9e45b710f5587b7c937c76690c5c5fce621a53a9fd03b0a4ee6d8d1abbe2ed561820a77f12a08cad0755540ab6dd1604b7c30a8652995ab80b85e919011de9438a4637eb0291124ed4b745e782cff98510cb03be79c2a81351abf276584d75cdd96b9c97e73eb71000b3ab7c3c19c2cab4497298fcb3052b5d4503d05e7f310318be6f848547b1a4f4db82caee190801478be28065036aa4d91f290c1f396343e73a5fe8bb5ccf0a317177ed1f77acda1a4a49dccfcab8d1b5d79f015f788b6d5e9f8228a8bcdc0696e6b19f5edffbcd7e9509c87fbe1f726b93bf8c6d8d37428763e142560c46c9e894f7317859000c25abc4f3691ebcd020171e0d4911b5d97a238109aedeb00b2eb475c1e7b45175f8aa85193b5c0f43b434c15de01610c4d022646cd6e3637f349a434a77f571ac1c5d698452d1b991e267f78dca5e592ecd31ccafcad84e4e98d134b4adc525b81bd6843428883023a6ea407201738c8bf16b541ff7280274a34d4cf14819f2dbae167ca0cae8471c495e006b45194ad91c4516f21cbb10e0d26fd5d734cd7725df5b3fbe92955f4a9bb3b9b813aeeff79d6ed5db92def19d060a208c3ec8c42c110786f1e1496c50a7249b03fc792764366894a35320b99d0bef9fd0b6a246c36a357c6b985dc83a37a8d9b8b9ad643dea94860cbe763bb73cc8422b69d4d12332242c8954075fb7117a6679638073617abcdb4619855b2036af160647f66b3531645a3bf047ae290d6ae2249f114e7a8464278bae1486022bcc7c37390c8d9a0efb0e1cfa0da8ef7a5e072f99a47ecc75e4e442880375193db49bb82ba34901286ca473ed5b63e4048db4dc455e74b3fdd2e7898ca3f4c3a02d435cde6141eea645055123a7dcf0d22057f8d425701afc55859f5147954e719d58c7486b1e02ac16cb799b77632c66bb78e6e52e11017c1736424fa4d433f1e19b4c881d23f0b2a12d5fae3ae24339088088d9b496ad97bd9f6e20a8597d1452a0c72dcf43dbbda8f18166585c06d21fbffe5fe7b55f71c9b9f1b34a02bd05ca63c7c1b1bebbb9dd24fb10291b04c665d45154dd28b85d821ce7e613119128996785e1006a8dabc4899b10d2671107d5a0658ed363b9d4b39d02f8cc5e350fbf0a31048adecd1f9e2ca749bd86f195eb48e9b4605f050de03d642940d79184618f7f88a9a0a4683ad84d6134e395305bc1d4d9d17cc334b97653529d6682a87a5fac80a6d46d6e72fc22e58be7b8f8617b3372ef2622110ab1ec448717118b257acffe55d18c7855e9e8710ad977a6792b2315a189eb4468c68641e9b60c0dab7016ac1ad63cd8004b6eca8fc88b1e4263acc00499255c16b11487a0af858075f9c892dc8044c4146e5a5677c4a2cb24bde5e078985020d4ab1e4c87492e76b7e6f4bbd71d84bab1885c9702849e70cf728776b1a94c2a8fb8c7ca01b6111ef6f2032a290949bfe473fe215273b8b5b3ad540f187490f63077dccbca6f62f0a7a66717c596cdef412f2560b10685ede967b3ee68b8c951959aeb1d7564c3b9d80762ce858381393a79916b78f7e90beadae30ffc0b2b614380f1c2cc551a44565209db3516be379ef566ab00c673fd8aaeeecdcf1168c1960e9a477b9e13757498a44ff089351d1f27abf9fd76816f924504647d1247715ca861ebe624172c322146d66eb2b247f8ecb3e1b5ddca89b287c57510cec40fcf89d802cf4368a861af320e01e34f7a6177d4bc549181b5e87ecdfe02f78c9a59a3bf91ebb6364023ec06410e7b4476ec4e3685bfa3bfe9ef9ecc12dcd899abe0f3c7f16b4686801c0c0a949aa26bed57df56f2bc54ef19af7fcbc7b0d691075f42a4a67acf980b568acb2342f42249f7c1ee3527c13182b096064ecd250887a942d26f637e1c4041b139659d2462a68680bb04387a3b399e396b9fe74de10356125fa47d0a20827370cbf36a79b6fffade91c439dd6cfff4bbe0dd3efefb61c491ee32f935d62307cba369ac8c20f6fe3d4857ce6d240ece5e4d149f0587155a8350fcc18efae2ff11cdbe15218a82499a1996df8b5462ee170b284321e76bbe5c3f4158387644d95f087c598e3d46fbe27f63fa784bda239512113424045a2c5dbc6bc3662ca730a86d13cf8f6fe2743224ca7b535caf6b4701a7dae9cfad3d7290104bbba15b6a064ae6e909a099f75fbe47c9e654d8e3b8dc0f3dbffe829e6c56f7a241e565136812a857f59ab565a9991c6b1d8abcc94c6b33bba314f6e5060e657e4647f969a551dd6c51dfca0ff5d9e4f401fedbc2c927eb1ed95ef25f4e5accba4999322ba1539499310dd5875433a22835cfd42fd77fd4680b7fe767d7aa5c33acde04a65bd3a663fcde4c80e9f2af498f13bf9abbaa1c1265edc691e94abdcc92270c05811cd2a8104eb18efbfec9e4ba9ae5cde211b9b93082ce034b6cd5fbe9cfbac4f7e2404ef159766124f73017cc3600f3c81cd78db25fc3459629eaf20dfdb062c7e502aa69412381d847a9d254d5befc451cda3606f0bc8ae62e0aee928f9ed0b21d705a8d31b899e16445ee064563d32f7b6bb5ad197023cf528d9b329ec67815c6ddf27d2a6ffa7328bb993407cde3d166159fd49fe469254b84c2916daea8df9d69bef019f1351b9bce193e30278835b82ea5f60dc0bdd7f7452b7a820ae7cd6dc29d7ac6a6c1b6411711a96338b1e769146b2a385d282bfaae61b041166efafab2d89a4567b9460cc22d752f8e9aacaaa0db7c84879f5359662d55df6570d4214740851c74574ced733807cbb54571110410892394c3dea07bd4154d0e5689d57c3360207dac951f96a358e9c466a5c5113f3a632e184f57f075edef4dcc9721b963beb95df09dedf848260cbc1ebfdc7408218eaba6d2c51928cd37c4c0c9f321fbb0994a56947cfd9643056db5dbea60a241f8f004c932bc8e645b2ec2eb9bc4e9e2f4156293234d05e70cb26b8a370b0206c756bda6defc11c5eb386640f535a4ffb714168defc6d82f40d8f5ba8768537ead5773c53bd779ca899a2dd31c9138569ff5107c2fb12b804375c3b3dc9b828bfd550328adf358f71e86a0c49fb119f5ef9e06c13855cbfc7d1a62ca2ea655ed912a6dc7bb8b18656e8923fc7a1702ab36947d79384d681c31923e98cf40209f776bc2b219a7ccd139e756a905aa351e6eaae90770c8a193f96cd5c66e4d77a357985556e14333716d80204a5c390e0d76f4081afe917f99ad8a0976b3342f51854b374b4baa9a7f22124d2b82749446e30d9795acb9c3c3a305a6d273ac528e8e9c95c37a78e765fdda55982c2961fbc85a14fc095a78b4654ee6dfc3298749a639ab9c8e155af3a77f8a409ce174532a492ef550a140f774d77d732b3b4ca5bc41fa4488ce5957ce219b032ae1f585273748d81b19edcf3e6cb9a93ec24e41c6b3c472f9baf3ca46cb8b9a91df18acebe7d83bd4473750c4f26806da2f95b9ea48b342460af729ab15e9f033eda67feec645f985d4b9489cf6ceec1b100d007bf46c74be53c7ea17296f9c5b5cbae736491213c93b513009ebdecfcd60d46d7b86c6e3b5e288f2ba5867c07936e7bd1b00de52191eb8630ff82ccafb27a59295164751811bf74eff1e5e2abdf3c93bc5dc9814be83b2562477935e2fa30db7ebb6ec380170cf10c1f98f8c5eb71c730c2b31b55a1dd1c12a64802ab95b63c529e0a96cec8f38680221d6089926d8309796c79994d63b67bfb62f66b4a502f30ed12be41e896e88bc45a160a526fbd5f002e677322f116ec5740d7563cd23ee853c008b84998e38fdf158556e28a532573956e7c00f91f08ca245c295a3d5e003a99ea727f61d12893b435d4c8f2f5cce00c6a3091e2a47f290c07168975c53d7529b71d10faf42d2bac9db8d53669cf59c709c25e9e40b5feaed4c37ddc8b84c4961c00712326fb6aaa06e80d766b40b72480f3971def61d1d129676df2478e778d899ed317426ec33e496d1fdd2ec27128f8faee92828e13da72d6aee8330a7988ea1cc8b64ec4d8b20990864c16c52c4be6d00b304b87d97bffdd9c66a740b517223089d9f3f414abedc53c768dab9220b980e6c18d5f20ba8994cc8886d7bdee213442f456d79fce1b1eb48fbf600a666c8ade24d118e6328251cf7b57a6285c650e019850f392b1c29aec5c8fc489a3819d60d5de377d4c11b8ee5625b7c02c5d50d2af3397006f2e2a41a06f039229eef5878ed91f9f6be7e988924dbaeb8455f616275e8698d93fb536e2c839b203aa69bceceddbf9c53f8addba53d50ca0f7a4729a42ac6eb757f1b408ad4a0147546173e62f7621eb18a9e1681510cceb48e0a30ab7a1bf71d56742d5f034f2d725e7ea68a011dbb100fa6eefe4ee093873de366d34f4240ca027a25c5b979c9ac47dd1dcb6ed82c4aee09dcc23cf329a8644f89b5cf00e5683934b1837574e9b39b31b1009f276e15aa040959fdf100838ca3f5ab17e45036668d06044e3a13f3a0a6f68579e50d5b0164f900d7bcfcde78396cf30f0b1dff76dc397ab1a5a44b207eb1eaaf73b945c575029ae2dce20724991e6550155ded6a42672609f2439c5aab4882b2ffaf7da787b71d05d15516bd68c6f1a9d79b675395845f24ee853f877e72c14b6c6702f7b8775ca1bfabbbcf4019f7bccf07f1c211531dfc66a7a1df79e92a20dd1cbe1b22e1209e7e3ecb9d3c2450fc22a57bfe09bd735f61c361cdac2488ae0adc7885edc0712655daaf535e1de96ccbe7869d531d8bf3db512fbd17c772332a3f8cf1e052ee0202eb99a36a0f8d7219888acbb57090cdaf3b28e1e62e8fc2ec237bdf18592a7afe4d8390dcb5e7fcc31bf4f797e6f5710070902265cc2e8c459b7da1451046abd6c8c5b02c0be2d2f505a65376266563ac7b59ef3b4e2570a6cb0bd94d46ad861317c743ce1de12bfa2295a98cdded4414d87a1580b1e4675bbdf73a22cac4a1d8d456d089e0b60cbfd16158f073bd1dac481db49fa5d8801d0fb0844b4afec1bab4e61fa0f381fa667880a1cd8163953be7b591cc9dfd7f91902370b783ae8a0f3c7cbefa7d229a37c00f523529e159b11d2e240629b64af2d11404773e991207a722c320221ce23baed7cbe40a440c5680814b122cfba9092fe03478f85adcbdeacb76d6cbf2491eafae98327b278e267821a0e1cd06ef90cb0328e246c19d8c63b9332291a89bc9f989effc675c79a870ac024756c6f5a7e32babd69625d61487ae7399490b70dd0fade7d70ad9b0757300a2dde77abaff4f63a0303853589d44efa968e10d36561f04408ad0cc227fc6b2f904cead189a0fcca9b2e6cbde5498652e0b3bc9d8b7921474403718feb5cc750dc70f5a9b1a0ae2c642015b6a1a8ab0572182b4e39e0c869cbdc60c9465f5d564d18ba2f5b3bc3e05a458744077430c5ea031ee02dd8f0a65d7dd8d90dd9b8717f77d202239a5778719423fb2aec7ca86eb07c39de65a34b988d65377a7473e9145f16d79593e96903330bbf3a8024fc15519d9baa0fae2018786f4b1846fca355ff0fccf65cccad1896309a5ccf2056dd542c929850cc91cd655962360fe316557ab3fb378328f77a07d9da24447d3fa2020b382ed2e808ec9529a01273434c64b0b7c35a06a019e4ab51cdc9c0f266ab25b6984338a0ba910d1060283b636c5d7e8a3f969c1ee1c99b54bba7ff3679fbeecbb70349f076480a867cc4ee4cacaea39c80f642533599486d2ffb77b8c9109a9d25fa0b06e58eca764f7d56469eb9547036bbea9d5c3d35b4c1fbc3d39a372c2b7ad184965cad3819c8928f1588d00949949c0c4c93d30ac7f6665247c0108bd89dff3aafe780ac66febfacc8c6a3cc387d09da6de700487a80e2c8d56df94d7ebd3e1d9e06411a6c5f7eb6da41c6f52997b5ad47ba985261103fdf12eb4a2828b248f652ef00b6abccab2eb161b878b9dbc0aa911405b6f67adda83c16187748d7b524ffe6381f489f432d592e6171bd9ccb2cd52f977143f57fbf2ab0b823d449ae55f02440972334344cda01837b93afa4f46a2fdefe27e92764cf9596780846de2e3b1ea83e62ee43b1c05aee675e25363504addfaa68e7c53ed685413f5ba951f120d0a646e474872c81e5a887464c19f8460ae814ffff24cb51dd2dca28d597ab2ea60949f8dbbe67f263e722fdb51bce4e328a19f5ff1218e1f63b8da6d40dbd5490964499b2522ea323310634893ead661407966207a66ab13adfcf1a725ed14339c46011c0e0401f2386b47cd9f902fdf84bc85e74d3ae7cc544e4d65670a554a537712c6ee9f75191631d2a4c4da06fc38423b1d5b828d7201235b2974164f52aa16bee70ee509250752f4fdd6b9f8d021943df8320682a6f80ff0d67ab7a4ceea807bd5b3b7b6380b0c7f0caa67b0208ba71317f0355a3b755af0e2c007186389438615df80b7b25104a733fc90625b62682198733c0f1625dfaa08cf81e3df043094b7b5a098b3b36f803b5b0f10a057bf814ae3579932c0a5f208985bab3d817f975283b8838ae5cb709be72b58df7425e059fdbf4e0ee51b3da01fe0b44963c1196baee5ec5909ad80d9d1660f3edd90374952a0bf8b3bece2c2f944593f4de7de5e05ded096b8f4f05d65dfc2e806f78220d84b3db564fb12f4e5e8f5eab316591f004e9374cce8e787263bc3827affe6793c130b8621d3bbb2a86fd87f070ea21718281ee7aec4bb3bb71af4bf5721cecd139c4be8c9df4ec8dfb09a5cf1d86a25d39faa9f064a997c214f334e4410917fc3b4d67ada8d87a38c0f86b02bf653dddaeb5b75b300f8bcfd792858bef8ab23e063421939c59212964c9ed5dd56e215db58cef53d31a966bb8ce4ed56287fecb3a85ba435e0b41b20ba1164b9c9f2c49fa0f7b17a89e0ec47eefe992d63ee29c8c0a1ece2664fee8edadd43636a54c48519b4fcf55b0d9103602b92441a5f85cf8c5e406d0f5815f8f37309934bd78fbc2acf0a03b051b4528db4f7c09de7d0aabafca3736b8259c818ca338ca6754e0747717c2794d664a1cacc1e9c52764a308e6df73d975638630b74cce6c49b1bac16454e96852c4f9d8ed118e86d2f1c8dc33bccd4a07be128db5e80f5684ddcc1158e744411acde590f902f0987cfb750bb5bfeed53bff076868986b566d7701f48ddfcacbd325c8d930bcef26713bf60585d5c991e2a6cc33ccbc27f7ddfba18f998497c2eb378cc8f2cc07a1b4f141c5e0fb6f52e18242e505bcf6dd20e33a469d056a0b4fd5e72d0da9d0bcce1e2f9e9dc7d1c7b6cb0f3604287eca", 0x2000, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2800, 0x3) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xd7e57000) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x0) futex(&(0x7f0000000200)=0x1, 0x6, 0x0, &(0x7f0000000240)={0x77359400}, 0x0, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) 1m34.604273995s ago: executing program 0 (id=5769): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x13, r0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e22, 0x7f, @empty, 0xd34}}, [0x9, 0x7, 0x9, 0x81, 0x1080000000000000, 0x3, 0xfffffffffffffff7, 0x3, 0x4, 0x5, 0x9, 0x0, 0x3ff, 0x3ff, 0x5]}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='maps\x00') ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000800)={'syztnl0\x00', &(0x7f0000000740)={'tunl0\x00', 0x0, 0x81, 0x80, 0xffffffff, 0x1ff, {{0x27, 0x4, 0x0, 0x1a, 0x9c, 0x64, 0x0, 0xf7, 0x29, 0x0, @rand_addr=0x64010102, @rand_addr=0x64010100, {[@timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0xc, [{@loopback}, {@local}, {@local, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}, {@dev={0xac, 0x14, 0x14, 0x1f}, 0x4}, {@private=0xa010102}, {@remote, 0x40}]}, @timestamp_prespec={0x44, 0x2c, 0x68, 0x3, 0x3, [{@loopback, 0x430c000}, {@private=0xa010100, 0x2d7}, {@multicast2, 0x4}, {@broadcast, 0xd}, {@rand_addr=0x64010102, 0x80000001}]}, @lsrr={0x83, 0x1f, 0xa1, [@rand_addr=0x64010102, @local, @remote, @local, @multicast1, @private=0xa010100, @empty]}]}}}}}) sendmmsg$inet(r1, &(0x7f0000000e00)=[{{&(0x7f0000000040)={0x2, 0x4e21, @broadcast}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000200)="2a5dc6d2eda696fb0a1b72b61de3dbd9a195db572c075a30aed534d6ea9425715ada2e9a73311eef3b0c2d040334a9384922a10a77b163945e8b3f7506526def77abe7fe760a0306024d4e194c55c16976e3ceb3a757db471ad5d535e131c5fdf3ba32e861296ee3aec89cc3eeef72fe7b76dacb8d1a3a3674d231eb22456e5d247b72b07ab1362015576221da1dc8b38eb02513ccdf517c75ba9e62e4ea0580fa1f5dc59180215a9fd9b1de3f1d28ee7b6576bb835f75e48f6c236eda512858be893349d51c847cb0bf1bfe12fdc92c8bc7d1070511886332e9bb28bcdebffefd6d317a9cfb5fac", 0xe8}, {&(0x7f0000000300)="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", 0xff}, {&(0x7f00000004c0)="f686fd818e8a1c4e970ac70b0436231a6b62cae8faf03fc37e5d6bef12dab4dd896cb463d03112fac93dea4c5314a12f9cab3f373186399f6cc412c11cdf64a4b220a4815cc454ef18d15a99f1903354e02bd1d24998f260b23ca7ca6e77e1f01d1acf9dacccfcba7694b08c7e6474c83a0492b921f8eef0dc02a671a1fd96d1e13b914c29b8f9e9feeaf6cfc76b9f4ca4a108fdc73f14f2e975b449173b7902084865d7de9827a5016949903f568cc05eb3408730ec234fce2e1053970c0af6cd41902b7910f6304947c3ca74513e657416ac088dea386e073d897ac1d7be6db7", 0xe1}, {&(0x7f00000005c0)="0702043e2a8208f78725023009b18734f5e9209474498dce5a039e2e7a75e1f7d8356832df7ebab44f80c6e7e777811ddf531b9d6ff2a9a0bce37641425add2f5fb5739e3963edd71380b40605e12b3e961a072e7f45edaa6751279ff9c8360608388c4a27cff7fc7d449c4263b01e11b3d7604f4fc5788599bf83a2a37424e3d2f15e73", 0x84}, {&(0x7f0000000680)="cdcd0ba20d039f631d5969c2285d1d073a720d9870765c2b9eae73f6061baa49c94859d1", 0x24}, {&(0x7f00000006c0)="1863c4e772f850c7bce0cb20fdddadb75b62a6d65627f347b4d64acee3c9c092c5ec00000c0e26d5b622d375ada828ba0d", 0x31}], 0x6, &(0x7f0000000840)=[@ip_tos_int={{0x10, 0x0, 0x1, 0x80000001}}, @ip_ttl={{0x10, 0x0, 0x2, 0x5}}, @ip_tos_u8={{0xd}}, @ip_retopts={{0xc0, 0x0, 0x7, {[@rr={0x7, 0x1f, 0x54, [@multicast1, @broadcast, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x3d}, @dev={0xac, 0x14, 0x14, 0x32}, @broadcast, @loopback]}, @lsrr={0x83, 0x7, 0xd4, [@local]}, @end, @end, @cipso={0x86, 0x1d, 0x2, [{0x1, 0xb, "11832fdf9f35d283f4"}, {0x5, 0xc, "703a287a95508614a583"}]}, @generic={0x44, 0xf, "1b0869bd6464e37a582fa6f53d"}, @ssrr={0x89, 0xf, 0xfe, [@empty, @multicast2, @remote]}, @rr={0x7, 0x7, 0x8c, [@multicast1]}, @timestamp_prespec={0x44, 0x2c, 0xfd, 0x3, 0x8, [{@loopback, 0x6}, {@broadcast, 0x7f}, {@local, 0xf26}, {@multicast1, 0x4}, {@remote, 0x5}]}, @lsrr={0x83, 0x1b, 0x75, [@loopback, @multicast2, @remote, @multicast1, @broadcast, @private=0xa010102]}]}}}, @ip_pktinfo={{0x18, 0x0, 0x8, {r2, @local, @multicast2}}}, @ip_retopts={{0x6c, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x1c, 0xe, 0x3, 0x4, [{@rand_addr=0x64010102, 0x101}, {@multicast1, 0x2}, {@loopback, 0x8}]}, @timestamp_addr={0x44, 0x1c, 0xde, 0x1, 0x5, [{@local, 0xb569}, {@loopback, 0x80000001}, {@loopback, 0x80}]}, @noop, @timestamp_prespec={0x44, 0xc, 0x6f, 0x3, 0x9, [{@rand_addr=0x64010101, 0x8}]}, @ssrr={0x89, 0x7, 0xbe, [@empty]}, @end, @rr={0x7, 0x13, 0x5a, [@multicast2, @private=0xa010100, @empty, @multicast2]}]}}}, @ip_ttl={{0x10, 0x0, 0x2, 0x68}}], 0x184}}, {{&(0x7f0000000a00)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10, &(0x7f0000000b00)=[{&(0x7f0000000a40)="65d394034bb1490bb35093e282ef407e137d07337469792b1fe753c5840143dbce7235ed2de4b502c228c788ae936dcff6433f7906e34dfae5396ad365f2ac7209d913a78541d80f236048b15ea7757aac60f95b40c15cb2d80863d1d8b9c268b59a367182c23e21beedb747e3a687ae4b356d4b37de1fcbbf1261171cb379a47dfcf640078b620a0760e97e55d56ad9357d0ab5b849b524db048b56ab158dd73504af78a9b441db04c1dc35a004a3b7107bd4", 0xb3}], 0x1}}, {{&(0x7f0000000b40)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000d80)=[{&(0x7f0000000b80)="860f9fd92d1cdc75d55f98a4b5016c13a15c053dd25ffc0690ab50340176d73bb686cb4429bb3c3670cf18cf1b2fa8efc42117c81abdf6f90d131f93dbbb672958c65ec08664dcedd9fb6275dec6d91d86c16417353fe885bf3bc82d1762b9ea22240818be48373b697b4d813b3c9fc8e2e0e550da58586f682bf9425d0cee014a481ea33c32f499f71ee39ecd58dd2275ff759ca7f66cee2fbd7cadcf3b6c87014e0a32836dadc4dee103407ab652a3066dc6f6ae1e20b4632c88256a207c1e3a789ca038766fea052a586f3dcc529123d9de55dab4d69eb45328", 0xdb}, {&(0x7f0000000c80)="2f3cf0e90cdf0e864a7bb8e01e8c3d828d189ffaf671d672b57d4ff2320513a6d5e1f963d33ada3ab03e8d82618e8b290f68f427bbb0ae6f3c95291a38f1c65857ea9a5ad25f1b2b8627a5b46c2ccba193c1d130dd1b22ea7e385b9d3a980a67178f24ab0b8aa1289d2b4adfeffad9fbbfd3f1d0bff454bd528ecb0a83036a855a09922e956eb2e5dcec5d228393120d66a64654aeff367c42f537a520eb69ea608c431cbba6dd422655a0b6e8be4de5c372ed490d4376739776c001d24871615b28d3be0b28ed3bd9ee", 0xca}], 0x2, &(0x7f0000000dc0)}}], 0x3, 0x20040011) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002b80)={&(0x7f0000002c00)={0x2, 0x6, 0x7f, 0x9, 0xb, 0x0, 0x70bd2a, 0x25dfdbfe, [@sadb_x_sec_ctx={0x1, 0x18, 0xa, 0x80}, @sadb_x_sa2={0x2, 0x13, 0xfb, 0x0, 0x0, 0x80000000, 0x3502}, @sadb_x_nat_t_port={0x1, 0x16, 0x4e23}, @sadb_address={0x4, 0x17, 0x0, 0x80, 0x0, @in6={0xa, 0x4e24, 0x30, @mcast1, 0xf}}]}, 0x58}}, 0x80) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0xc0686611, &(0x7f0000000180)={0x68, 0x0, 0x17, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x13, r0, 0x0) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e22, 0x7f, @empty, 0xd34}}, [0x9, 0x7, 0x9, 0x81, 0x1080000000000000, 0x3, 0xfffffffffffffff7, 0x3, 0x4, 0x5, 0x9, 0x0, 0x3ff, 0x3ff, 0x5]}, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000480)='maps\x00') (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000800)={'syztnl0\x00', &(0x7f0000000740)={'tunl0\x00', 0x0, 0x81, 0x80, 0xffffffff, 0x1ff, {{0x27, 0x4, 0x0, 0x1a, 0x9c, 0x64, 0x0, 0xf7, 0x29, 0x0, @rand_addr=0x64010102, @rand_addr=0x64010100, {[@timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0xc, [{@loopback}, {@local}, {@local, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}, {@dev={0xac, 0x14, 0x14, 0x1f}, 0x4}, {@private=0xa010102}, {@remote, 0x40}]}, @timestamp_prespec={0x44, 0x2c, 0x68, 0x3, 0x3, [{@loopback, 0x430c000}, {@private=0xa010100, 0x2d7}, {@multicast2, 0x4}, {@broadcast, 0xd}, {@rand_addr=0x64010102, 0x80000001}]}, @lsrr={0x83, 0x1f, 0xa1, [@rand_addr=0x64010102, @local, @remote, @local, @multicast1, @private=0xa010100, @empty]}]}}}}}) (async) sendmmsg$inet(r1, &(0x7f0000000e00)=[{{&(0x7f0000000040)={0x2, 0x4e21, @broadcast}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000200)="2a5dc6d2eda696fb0a1b72b61de3dbd9a195db572c075a30aed534d6ea9425715ada2e9a73311eef3b0c2d040334a9384922a10a77b163945e8b3f7506526def77abe7fe760a0306024d4e194c55c16976e3ceb3a757db471ad5d535e131c5fdf3ba32e861296ee3aec89cc3eeef72fe7b76dacb8d1a3a3674d231eb22456e5d247b72b07ab1362015576221da1dc8b38eb02513ccdf517c75ba9e62e4ea0580fa1f5dc59180215a9fd9b1de3f1d28ee7b6576bb835f75e48f6c236eda512858be893349d51c847cb0bf1bfe12fdc92c8bc7d1070511886332e9bb28bcdebffefd6d317a9cfb5fac", 0xe8}, {&(0x7f0000000300)="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", 0xff}, {&(0x7f00000004c0)="f686fd818e8a1c4e970ac70b0436231a6b62cae8faf03fc37e5d6bef12dab4dd896cb463d03112fac93dea4c5314a12f9cab3f373186399f6cc412c11cdf64a4b220a4815cc454ef18d15a99f1903354e02bd1d24998f260b23ca7ca6e77e1f01d1acf9dacccfcba7694b08c7e6474c83a0492b921f8eef0dc02a671a1fd96d1e13b914c29b8f9e9feeaf6cfc76b9f4ca4a108fdc73f14f2e975b449173b7902084865d7de9827a5016949903f568cc05eb3408730ec234fce2e1053970c0af6cd41902b7910f6304947c3ca74513e657416ac088dea386e073d897ac1d7be6db7", 0xe1}, {&(0x7f00000005c0)="0702043e2a8208f78725023009b18734f5e9209474498dce5a039e2e7a75e1f7d8356832df7ebab44f80c6e7e777811ddf531b9d6ff2a9a0bce37641425add2f5fb5739e3963edd71380b40605e12b3e961a072e7f45edaa6751279ff9c8360608388c4a27cff7fc7d449c4263b01e11b3d7604f4fc5788599bf83a2a37424e3d2f15e73", 0x84}, {&(0x7f0000000680)="cdcd0ba20d039f631d5969c2285d1d073a720d9870765c2b9eae73f6061baa49c94859d1", 0x24}, {&(0x7f00000006c0)="1863c4e772f850c7bce0cb20fdddadb75b62a6d65627f347b4d64acee3c9c092c5ec00000c0e26d5b622d375ada828ba0d", 0x31}], 0x6, &(0x7f0000000840)=[@ip_tos_int={{0x10, 0x0, 0x1, 0x80000001}}, @ip_ttl={{0x10, 0x0, 0x2, 0x5}}, @ip_tos_u8={{0xd}}, @ip_retopts={{0xc0, 0x0, 0x7, {[@rr={0x7, 0x1f, 0x54, [@multicast1, @broadcast, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x3d}, @dev={0xac, 0x14, 0x14, 0x32}, @broadcast, @loopback]}, @lsrr={0x83, 0x7, 0xd4, [@local]}, @end, @end, @cipso={0x86, 0x1d, 0x2, [{0x1, 0xb, "11832fdf9f35d283f4"}, {0x5, 0xc, "703a287a95508614a583"}]}, @generic={0x44, 0xf, "1b0869bd6464e37a582fa6f53d"}, @ssrr={0x89, 0xf, 0xfe, [@empty, @multicast2, @remote]}, @rr={0x7, 0x7, 0x8c, [@multicast1]}, @timestamp_prespec={0x44, 0x2c, 0xfd, 0x3, 0x8, [{@loopback, 0x6}, {@broadcast, 0x7f}, {@local, 0xf26}, {@multicast1, 0x4}, {@remote, 0x5}]}, @lsrr={0x83, 0x1b, 0x75, [@loopback, @multicast2, @remote, @multicast1, @broadcast, @private=0xa010102]}]}}}, @ip_pktinfo={{0x18, 0x0, 0x8, {r2, @local, @multicast2}}}, @ip_retopts={{0x6c, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x1c, 0xe, 0x3, 0x4, [{@rand_addr=0x64010102, 0x101}, {@multicast1, 0x2}, {@loopback, 0x8}]}, @timestamp_addr={0x44, 0x1c, 0xde, 0x1, 0x5, [{@local, 0xb569}, {@loopback, 0x80000001}, {@loopback, 0x80}]}, @noop, @timestamp_prespec={0x44, 0xc, 0x6f, 0x3, 0x9, [{@rand_addr=0x64010101, 0x8}]}, @ssrr={0x89, 0x7, 0xbe, [@empty]}, @end, @rr={0x7, 0x13, 0x5a, [@multicast2, @private=0xa010100, @empty, @multicast2]}]}}}, @ip_ttl={{0x10, 0x0, 0x2, 0x68}}], 0x184}}, {{&(0x7f0000000a00)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10, &(0x7f0000000b00)=[{&(0x7f0000000a40)="65d394034bb1490bb35093e282ef407e137d07337469792b1fe753c5840143dbce7235ed2de4b502c228c788ae936dcff6433f7906e34dfae5396ad365f2ac7209d913a78541d80f236048b15ea7757aac60f95b40c15cb2d80863d1d8b9c268b59a367182c23e21beedb747e3a687ae4b356d4b37de1fcbbf1261171cb379a47dfcf640078b620a0760e97e55d56ad9357d0ab5b849b524db048b56ab158dd73504af78a9b441db04c1dc35a004a3b7107bd4", 0xb3}], 0x1}}, {{&(0x7f0000000b40)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000d80)=[{&(0x7f0000000b80)="860f9fd92d1cdc75d55f98a4b5016c13a15c053dd25ffc0690ab50340176d73bb686cb4429bb3c3670cf18cf1b2fa8efc42117c81abdf6f90d131f93dbbb672958c65ec08664dcedd9fb6275dec6d91d86c16417353fe885bf3bc82d1762b9ea22240818be48373b697b4d813b3c9fc8e2e0e550da58586f682bf9425d0cee014a481ea33c32f499f71ee39ecd58dd2275ff759ca7f66cee2fbd7cadcf3b6c87014e0a32836dadc4dee103407ab652a3066dc6f6ae1e20b4632c88256a207c1e3a789ca038766fea052a586f3dcc529123d9de55dab4d69eb45328", 0xdb}, {&(0x7f0000000c80)="2f3cf0e90cdf0e864a7bb8e01e8c3d828d189ffaf671d672b57d4ff2320513a6d5e1f963d33ada3ab03e8d82618e8b290f68f427bbb0ae6f3c95291a38f1c65857ea9a5ad25f1b2b8627a5b46c2ccba193c1d130dd1b22ea7e385b9d3a980a67178f24ab0b8aa1289d2b4adfeffad9fbbfd3f1d0bff454bd528ecb0a83036a855a09922e956eb2e5dcec5d228393120d66a64654aeff367c42f537a520eb69ea608c431cbba6dd422655a0b6e8be4de5c372ed490d4376739776c001d24871615b28d3be0b28ed3bd9ee", 0xca}], 0x2, &(0x7f0000000dc0)}}], 0x3, 0x20040011) (async) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002b80)={&(0x7f0000002c00)={0x2, 0x6, 0x7f, 0x9, 0xb, 0x0, 0x70bd2a, 0x25dfdbfe, [@sadb_x_sec_ctx={0x1, 0x18, 0xa, 0x80}, @sadb_x_sa2={0x2, 0x13, 0xfb, 0x0, 0x0, 0x80000000, 0x3502}, @sadb_x_nat_t_port={0x1, 0x16, 0x4e23}, @sadb_address={0x4, 0x17, 0x0, 0x80, 0x0, @in6={0xa, 0x4e24, 0x30, @mcast1, 0xf}}]}, 0x58}}, 0x80) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0xc0686611, &(0x7f0000000180)={0x68, 0x0, 0x17, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) (async) 1m33.812315249s ago: executing program 6 (id=5771): pipe(&(0x7f00000000c0)) r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40004}, 0x800) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r1, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r0, r1, 0x0, 0x1ff) write$uinput_user_dev(r0, &(0x7f0000000a00)={'syz1\x00', {0x5c30, 0x7, 0x5, 0x5}, 0x3e, [0x9, 0x5, 0x8, 0x2, 0x5334, 0x400, 0x80000000, 0x8ef7, 0x8, 0x0, 0x6, 0xf5, 0x5, 0x39, 0x747d5a13, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x4, 0x3, 0x4, 0xf252, 0x4, 0x800, 0x300000, 0x7, 0xe, 0x5, 0x0, 0x0, 0x1ff, 0x8000, 0x3ff, 0x3, 0x4, 0x3, 0xba55, 0x2, 0x2, 0x200, 0x2, 0x400008, 0x8, 0x4, 0x2, 0x0, 0x8, 0x1009, 0x0, 0x199f, 0x8, 0x2, 0x9, 0x1, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x9, 0x7, 0x5], [0x6, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x5, 0x24, 0xfffffffe, 0x4, 0x7fff, 0x72c, 0x1c32, 0x3, 0x9, 0x10000, 0x400, 0x8001, 0x2, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x100, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0x0, 0x5, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffffd, 0x101, 0x0, 0x2, 0xffffffff, 0xc, 0x3, 0x379, 0x9, 0xe, 0x400003, 0xb, 0x6, 0x2, 0x1, 0x1, 0x8, 0x6, 0x200, 0x3], [0x401, 0xc584, 0x34711b8a, 0xcd4, 0xffff, 0x20, 0x7, 0x4, 0x8, 0x13, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0x1, 0x1000, 0x2, 0xe, 0x1, 0xfffffff9, 0xe55, 0x10, 0x80000001, 0x4, 0x4, 0x7, 0x9, 0x2, 0x20000005, 0x80, 0x9, 0xb, 0x47, 0x2, 0x3, 0x4, 0x40, 0x6d7e, 0x3, 0x8, 0x8001, 0xbf23, 0x6, 0x8, 0x95a, 0xffffffff, 0x4, 0x3, 0x6, 0x100fffd, 0x2005, 0x7, 0x4, 0xea, 0x9, 0x9, 0x10, 0xd9, 0x0, 0x7ff, 0x401, 0x5], [0x108e, 0x7fff, 0x3, 0x3, 0x88, 0x2, 0x6, 0x4, 0x40, 0x2, 0x763, 0xb, 0x402, 0x800, 0x2, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x8e8, 0x5, 0x9, 0x4, 0xe47, 0x4, 0x0, 0x4, 0x200, 0x1000, 0x20003b, 0x2, 0x5, 0x800, 0xa80e, 0x65f413f9, 0x4, 0x8, 0x8a8, 0x2, 0x40, 0x7, 0x2, 0x4, 0x4, 0x10, 0x7, 0x4, 0x7fff, 0x1, 0xfffffff8, 0x401, 0x0, 0x200, 0x7, 0x4edf, 0xfffffffd, 0x7, 0xe, 0x2, 0xe, 0xf, 0x133, 0x6]}, 0x45c) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000340)={{0x1, 0x1, 0x10000}}) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) io_setup(0x7, &(0x7f0000000280)=0x0) r3 = openat$sysfs(0xffffff9c, &(0x7f00000001c0)='/sys/power/pm_trace', 0x42, 0x0) io_submit(r2, 0x1, &(0x7f0000000500)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0xfffffc98}]) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000080)) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x1, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r5 = socket(0x15, 0x5, 0x0) bind$l2tp6(r5, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000180)=@gcm_256={{0x303}, "0200", "ab02a1a449283e8a3bc95815ece487ebcc5bb6a8d8a744e4b7edb45c7e7336ab", 'vb q', "9900000100"}, 0x38) shutdown(r4, 0x1) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000000), 0xffffff6a) sendfile(r4, r6, 0x0, 0xffffffff004) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r7, 0xffffffffffffffff, 0x0) 1m19.571748453s ago: executing program 42 (id=5769): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x13, r0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e22, 0x7f, @empty, 0xd34}}, [0x9, 0x7, 0x9, 0x81, 0x1080000000000000, 0x3, 0xfffffffffffffff7, 0x3, 0x4, 0x5, 0x9, 0x0, 0x3ff, 0x3ff, 0x5]}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='maps\x00') ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000800)={'syztnl0\x00', &(0x7f0000000740)={'tunl0\x00', 0x0, 0x81, 0x80, 0xffffffff, 0x1ff, {{0x27, 0x4, 0x0, 0x1a, 0x9c, 0x64, 0x0, 0xf7, 0x29, 0x0, @rand_addr=0x64010102, @rand_addr=0x64010100, {[@timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0xc, [{@loopback}, {@local}, {@local, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}, {@dev={0xac, 0x14, 0x14, 0x1f}, 0x4}, {@private=0xa010102}, {@remote, 0x40}]}, @timestamp_prespec={0x44, 0x2c, 0x68, 0x3, 0x3, [{@loopback, 0x430c000}, {@private=0xa010100, 0x2d7}, {@multicast2, 0x4}, {@broadcast, 0xd}, {@rand_addr=0x64010102, 0x80000001}]}, @lsrr={0x83, 0x1f, 0xa1, [@rand_addr=0x64010102, @local, @remote, @local, @multicast1, @private=0xa010100, @empty]}]}}}}}) sendmmsg$inet(r1, &(0x7f0000000e00)=[{{&(0x7f0000000040)={0x2, 0x4e21, @broadcast}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000200)="2a5dc6d2eda696fb0a1b72b61de3dbd9a195db572c075a30aed534d6ea9425715ada2e9a73311eef3b0c2d040334a9384922a10a77b163945e8b3f7506526def77abe7fe760a0306024d4e194c55c16976e3ceb3a757db471ad5d535e131c5fdf3ba32e861296ee3aec89cc3eeef72fe7b76dacb8d1a3a3674d231eb22456e5d247b72b07ab1362015576221da1dc8b38eb02513ccdf517c75ba9e62e4ea0580fa1f5dc59180215a9fd9b1de3f1d28ee7b6576bb835f75e48f6c236eda512858be893349d51c847cb0bf1bfe12fdc92c8bc7d1070511886332e9bb28bcdebffefd6d317a9cfb5fac", 0xe8}, {&(0x7f0000000300)="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", 0xff}, {&(0x7f00000004c0)="f686fd818e8a1c4e970ac70b0436231a6b62cae8faf03fc37e5d6bef12dab4dd896cb463d03112fac93dea4c5314a12f9cab3f373186399f6cc412c11cdf64a4b220a4815cc454ef18d15a99f1903354e02bd1d24998f260b23ca7ca6e77e1f01d1acf9dacccfcba7694b08c7e6474c83a0492b921f8eef0dc02a671a1fd96d1e13b914c29b8f9e9feeaf6cfc76b9f4ca4a108fdc73f14f2e975b449173b7902084865d7de9827a5016949903f568cc05eb3408730ec234fce2e1053970c0af6cd41902b7910f6304947c3ca74513e657416ac088dea386e073d897ac1d7be6db7", 0xe1}, {&(0x7f00000005c0)="0702043e2a8208f78725023009b18734f5e9209474498dce5a039e2e7a75e1f7d8356832df7ebab44f80c6e7e777811ddf531b9d6ff2a9a0bce37641425add2f5fb5739e3963edd71380b40605e12b3e961a072e7f45edaa6751279ff9c8360608388c4a27cff7fc7d449c4263b01e11b3d7604f4fc5788599bf83a2a37424e3d2f15e73", 0x84}, {&(0x7f0000000680)="cdcd0ba20d039f631d5969c2285d1d073a720d9870765c2b9eae73f6061baa49c94859d1", 0x24}, {&(0x7f00000006c0)="1863c4e772f850c7bce0cb20fdddadb75b62a6d65627f347b4d64acee3c9c092c5ec00000c0e26d5b622d375ada828ba0d", 0x31}], 0x6, &(0x7f0000000840)=[@ip_tos_int={{0x10, 0x0, 0x1, 0x80000001}}, @ip_ttl={{0x10, 0x0, 0x2, 0x5}}, @ip_tos_u8={{0xd}}, @ip_retopts={{0xc0, 0x0, 0x7, {[@rr={0x7, 0x1f, 0x54, [@multicast1, @broadcast, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x3d}, @dev={0xac, 0x14, 0x14, 0x32}, @broadcast, @loopback]}, @lsrr={0x83, 0x7, 0xd4, [@local]}, @end, @end, @cipso={0x86, 0x1d, 0x2, [{0x1, 0xb, "11832fdf9f35d283f4"}, {0x5, 0xc, "703a287a95508614a583"}]}, @generic={0x44, 0xf, "1b0869bd6464e37a582fa6f53d"}, @ssrr={0x89, 0xf, 0xfe, [@empty, @multicast2, @remote]}, @rr={0x7, 0x7, 0x8c, [@multicast1]}, @timestamp_prespec={0x44, 0x2c, 0xfd, 0x3, 0x8, [{@loopback, 0x6}, {@broadcast, 0x7f}, {@local, 0xf26}, {@multicast1, 0x4}, {@remote, 0x5}]}, @lsrr={0x83, 0x1b, 0x75, [@loopback, @multicast2, @remote, @multicast1, @broadcast, @private=0xa010102]}]}}}, @ip_pktinfo={{0x18, 0x0, 0x8, {r2, @local, @multicast2}}}, @ip_retopts={{0x6c, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x1c, 0xe, 0x3, 0x4, [{@rand_addr=0x64010102, 0x101}, {@multicast1, 0x2}, {@loopback, 0x8}]}, @timestamp_addr={0x44, 0x1c, 0xde, 0x1, 0x5, [{@local, 0xb569}, {@loopback, 0x80000001}, {@loopback, 0x80}]}, @noop, @timestamp_prespec={0x44, 0xc, 0x6f, 0x3, 0x9, [{@rand_addr=0x64010101, 0x8}]}, @ssrr={0x89, 0x7, 0xbe, [@empty]}, @end, @rr={0x7, 0x13, 0x5a, [@multicast2, @private=0xa010100, @empty, @multicast2]}]}}}, @ip_ttl={{0x10, 0x0, 0x2, 0x68}}], 0x184}}, {{&(0x7f0000000a00)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10, &(0x7f0000000b00)=[{&(0x7f0000000a40)="65d394034bb1490bb35093e282ef407e137d07337469792b1fe753c5840143dbce7235ed2de4b502c228c788ae936dcff6433f7906e34dfae5396ad365f2ac7209d913a78541d80f236048b15ea7757aac60f95b40c15cb2d80863d1d8b9c268b59a367182c23e21beedb747e3a687ae4b356d4b37de1fcbbf1261171cb379a47dfcf640078b620a0760e97e55d56ad9357d0ab5b849b524db048b56ab158dd73504af78a9b441db04c1dc35a004a3b7107bd4", 0xb3}], 0x1}}, {{&(0x7f0000000b40)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000d80)=[{&(0x7f0000000b80)="860f9fd92d1cdc75d55f98a4b5016c13a15c053dd25ffc0690ab50340176d73bb686cb4429bb3c3670cf18cf1b2fa8efc42117c81abdf6f90d131f93dbbb672958c65ec08664dcedd9fb6275dec6d91d86c16417353fe885bf3bc82d1762b9ea22240818be48373b697b4d813b3c9fc8e2e0e550da58586f682bf9425d0cee014a481ea33c32f499f71ee39ecd58dd2275ff759ca7f66cee2fbd7cadcf3b6c87014e0a32836dadc4dee103407ab652a3066dc6f6ae1e20b4632c88256a207c1e3a789ca038766fea052a586f3dcc529123d9de55dab4d69eb45328", 0xdb}, {&(0x7f0000000c80)="2f3cf0e90cdf0e864a7bb8e01e8c3d828d189ffaf671d672b57d4ff2320513a6d5e1f963d33ada3ab03e8d82618e8b290f68f427bbb0ae6f3c95291a38f1c65857ea9a5ad25f1b2b8627a5b46c2ccba193c1d130dd1b22ea7e385b9d3a980a67178f24ab0b8aa1289d2b4adfeffad9fbbfd3f1d0bff454bd528ecb0a83036a855a09922e956eb2e5dcec5d228393120d66a64654aeff367c42f537a520eb69ea608c431cbba6dd422655a0b6e8be4de5c372ed490d4376739776c001d24871615b28d3be0b28ed3bd9ee", 0xca}], 0x2, &(0x7f0000000dc0)}}], 0x3, 0x20040011) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002b80)={&(0x7f0000002c00)={0x2, 0x6, 0x7f, 0x9, 0xb, 0x0, 0x70bd2a, 0x25dfdbfe, [@sadb_x_sec_ctx={0x1, 0x18, 0xa, 0x80}, @sadb_x_sa2={0x2, 0x13, 0xfb, 0x0, 0x0, 0x80000000, 0x3502}, @sadb_x_nat_t_port={0x1, 0x16, 0x4e23}, @sadb_address={0x4, 0x17, 0x0, 0x80, 0x0, @in6={0xa, 0x4e24, 0x30, @mcast1, 0xf}}]}, 0x58}}, 0x80) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0xc0686611, &(0x7f0000000180)={0x68, 0x0, 0x17, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x13, r0, 0x0) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e22, 0x7f, @empty, 0xd34}}, [0x9, 0x7, 0x9, 0x81, 0x1080000000000000, 0x3, 0xfffffffffffffff7, 0x3, 0x4, 0x5, 0x9, 0x0, 0x3ff, 0x3ff, 0x5]}, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000480)='maps\x00') (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000800)={'syztnl0\x00', &(0x7f0000000740)={'tunl0\x00', 0x0, 0x81, 0x80, 0xffffffff, 0x1ff, {{0x27, 0x4, 0x0, 0x1a, 0x9c, 0x64, 0x0, 0xf7, 0x29, 0x0, @rand_addr=0x64010102, @rand_addr=0x64010100, {[@timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0xc, [{@loopback}, {@local}, {@local, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}, {@dev={0xac, 0x14, 0x14, 0x1f}, 0x4}, {@private=0xa010102}, {@remote, 0x40}]}, @timestamp_prespec={0x44, 0x2c, 0x68, 0x3, 0x3, [{@loopback, 0x430c000}, {@private=0xa010100, 0x2d7}, {@multicast2, 0x4}, {@broadcast, 0xd}, {@rand_addr=0x64010102, 0x80000001}]}, @lsrr={0x83, 0x1f, 0xa1, [@rand_addr=0x64010102, @local, @remote, @local, @multicast1, @private=0xa010100, @empty]}]}}}}}) (async) sendmmsg$inet(r1, &(0x7f0000000e00)=[{{&(0x7f0000000040)={0x2, 0x4e21, @broadcast}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000200)="2a5dc6d2eda696fb0a1b72b61de3dbd9a195db572c075a30aed534d6ea9425715ada2e9a73311eef3b0c2d040334a9384922a10a77b163945e8b3f7506526def77abe7fe760a0306024d4e194c55c16976e3ceb3a757db471ad5d535e131c5fdf3ba32e861296ee3aec89cc3eeef72fe7b76dacb8d1a3a3674d231eb22456e5d247b72b07ab1362015576221da1dc8b38eb02513ccdf517c75ba9e62e4ea0580fa1f5dc59180215a9fd9b1de3f1d28ee7b6576bb835f75e48f6c236eda512858be893349d51c847cb0bf1bfe12fdc92c8bc7d1070511886332e9bb28bcdebffefd6d317a9cfb5fac", 0xe8}, {&(0x7f0000000300)="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", 0xff}, {&(0x7f00000004c0)="f686fd818e8a1c4e970ac70b0436231a6b62cae8faf03fc37e5d6bef12dab4dd896cb463d03112fac93dea4c5314a12f9cab3f373186399f6cc412c11cdf64a4b220a4815cc454ef18d15a99f1903354e02bd1d24998f260b23ca7ca6e77e1f01d1acf9dacccfcba7694b08c7e6474c83a0492b921f8eef0dc02a671a1fd96d1e13b914c29b8f9e9feeaf6cfc76b9f4ca4a108fdc73f14f2e975b449173b7902084865d7de9827a5016949903f568cc05eb3408730ec234fce2e1053970c0af6cd41902b7910f6304947c3ca74513e657416ac088dea386e073d897ac1d7be6db7", 0xe1}, {&(0x7f00000005c0)="0702043e2a8208f78725023009b18734f5e9209474498dce5a039e2e7a75e1f7d8356832df7ebab44f80c6e7e777811ddf531b9d6ff2a9a0bce37641425add2f5fb5739e3963edd71380b40605e12b3e961a072e7f45edaa6751279ff9c8360608388c4a27cff7fc7d449c4263b01e11b3d7604f4fc5788599bf83a2a37424e3d2f15e73", 0x84}, {&(0x7f0000000680)="cdcd0ba20d039f631d5969c2285d1d073a720d9870765c2b9eae73f6061baa49c94859d1", 0x24}, {&(0x7f00000006c0)="1863c4e772f850c7bce0cb20fdddadb75b62a6d65627f347b4d64acee3c9c092c5ec00000c0e26d5b622d375ada828ba0d", 0x31}], 0x6, &(0x7f0000000840)=[@ip_tos_int={{0x10, 0x0, 0x1, 0x80000001}}, @ip_ttl={{0x10, 0x0, 0x2, 0x5}}, @ip_tos_u8={{0xd}}, @ip_retopts={{0xc0, 0x0, 0x7, {[@rr={0x7, 0x1f, 0x54, [@multicast1, @broadcast, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x3d}, @dev={0xac, 0x14, 0x14, 0x32}, @broadcast, @loopback]}, @lsrr={0x83, 0x7, 0xd4, [@local]}, @end, @end, @cipso={0x86, 0x1d, 0x2, [{0x1, 0xb, "11832fdf9f35d283f4"}, {0x5, 0xc, "703a287a95508614a583"}]}, @generic={0x44, 0xf, "1b0869bd6464e37a582fa6f53d"}, @ssrr={0x89, 0xf, 0xfe, [@empty, @multicast2, @remote]}, @rr={0x7, 0x7, 0x8c, [@multicast1]}, @timestamp_prespec={0x44, 0x2c, 0xfd, 0x3, 0x8, [{@loopback, 0x6}, {@broadcast, 0x7f}, {@local, 0xf26}, {@multicast1, 0x4}, {@remote, 0x5}]}, @lsrr={0x83, 0x1b, 0x75, [@loopback, @multicast2, @remote, @multicast1, @broadcast, @private=0xa010102]}]}}}, @ip_pktinfo={{0x18, 0x0, 0x8, {r2, @local, @multicast2}}}, @ip_retopts={{0x6c, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x1c, 0xe, 0x3, 0x4, [{@rand_addr=0x64010102, 0x101}, {@multicast1, 0x2}, {@loopback, 0x8}]}, @timestamp_addr={0x44, 0x1c, 0xde, 0x1, 0x5, [{@local, 0xb569}, {@loopback, 0x80000001}, {@loopback, 0x80}]}, @noop, @timestamp_prespec={0x44, 0xc, 0x6f, 0x3, 0x9, [{@rand_addr=0x64010101, 0x8}]}, @ssrr={0x89, 0x7, 0xbe, [@empty]}, @end, @rr={0x7, 0x13, 0x5a, [@multicast2, @private=0xa010100, @empty, @multicast2]}]}}}, @ip_ttl={{0x10, 0x0, 0x2, 0x68}}], 0x184}}, {{&(0x7f0000000a00)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10, &(0x7f0000000b00)=[{&(0x7f0000000a40)="65d394034bb1490bb35093e282ef407e137d07337469792b1fe753c5840143dbce7235ed2de4b502c228c788ae936dcff6433f7906e34dfae5396ad365f2ac7209d913a78541d80f236048b15ea7757aac60f95b40c15cb2d80863d1d8b9c268b59a367182c23e21beedb747e3a687ae4b356d4b37de1fcbbf1261171cb379a47dfcf640078b620a0760e97e55d56ad9357d0ab5b849b524db048b56ab158dd73504af78a9b441db04c1dc35a004a3b7107bd4", 0xb3}], 0x1}}, {{&(0x7f0000000b40)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000d80)=[{&(0x7f0000000b80)="860f9fd92d1cdc75d55f98a4b5016c13a15c053dd25ffc0690ab50340176d73bb686cb4429bb3c3670cf18cf1b2fa8efc42117c81abdf6f90d131f93dbbb672958c65ec08664dcedd9fb6275dec6d91d86c16417353fe885bf3bc82d1762b9ea22240818be48373b697b4d813b3c9fc8e2e0e550da58586f682bf9425d0cee014a481ea33c32f499f71ee39ecd58dd2275ff759ca7f66cee2fbd7cadcf3b6c87014e0a32836dadc4dee103407ab652a3066dc6f6ae1e20b4632c88256a207c1e3a789ca038766fea052a586f3dcc529123d9de55dab4d69eb45328", 0xdb}, {&(0x7f0000000c80)="2f3cf0e90cdf0e864a7bb8e01e8c3d828d189ffaf671d672b57d4ff2320513a6d5e1f963d33ada3ab03e8d82618e8b290f68f427bbb0ae6f3c95291a38f1c65857ea9a5ad25f1b2b8627a5b46c2ccba193c1d130dd1b22ea7e385b9d3a980a67178f24ab0b8aa1289d2b4adfeffad9fbbfd3f1d0bff454bd528ecb0a83036a855a09922e956eb2e5dcec5d228393120d66a64654aeff367c42f537a520eb69ea608c431cbba6dd422655a0b6e8be4de5c372ed490d4376739776c001d24871615b28d3be0b28ed3bd9ee", 0xca}], 0x2, &(0x7f0000000dc0)}}], 0x3, 0x20040011) (async) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002b80)={&(0x7f0000002c00)={0x2, 0x6, 0x7f, 0x9, 0xb, 0x0, 0x70bd2a, 0x25dfdbfe, [@sadb_x_sec_ctx={0x1, 0x18, 0xa, 0x80}, @sadb_x_sa2={0x2, 0x13, 0xfb, 0x0, 0x0, 0x80000000, 0x3502}, @sadb_x_nat_t_port={0x1, 0x16, 0x4e23}, @sadb_address={0x4, 0x17, 0x0, 0x80, 0x0, @in6={0xa, 0x4e24, 0x30, @mcast1, 0xf}}]}, 0x58}}, 0x80) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0xc0686611, &(0x7f0000000180)={0x68, 0x0, 0x17, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) (async) 1m18.738495028s ago: executing program 43 (id=5771): pipe(&(0x7f00000000c0)) r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40004}, 0x800) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r1, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r0, r1, 0x0, 0x1ff) write$uinput_user_dev(r0, &(0x7f0000000a00)={'syz1\x00', {0x5c30, 0x7, 0x5, 0x5}, 0x3e, [0x9, 0x5, 0x8, 0x2, 0x5334, 0x400, 0x80000000, 0x8ef7, 0x8, 0x0, 0x6, 0xf5, 0x5, 0x39, 0x747d5a13, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x4, 0x3, 0x4, 0xf252, 0x4, 0x800, 0x300000, 0x7, 0xe, 0x5, 0x0, 0x0, 0x1ff, 0x8000, 0x3ff, 0x3, 0x4, 0x3, 0xba55, 0x2, 0x2, 0x200, 0x2, 0x400008, 0x8, 0x4, 0x2, 0x0, 0x8, 0x1009, 0x0, 0x199f, 0x8, 0x2, 0x9, 0x1, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x9, 0x7, 0x5], [0x6, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x5, 0x24, 0xfffffffe, 0x4, 0x7fff, 0x72c, 0x1c32, 0x3, 0x9, 0x10000, 0x400, 0x8001, 0x2, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x100, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0x0, 0x5, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffffd, 0x101, 0x0, 0x2, 0xffffffff, 0xc, 0x3, 0x379, 0x9, 0xe, 0x400003, 0xb, 0x6, 0x2, 0x1, 0x1, 0x8, 0x6, 0x200, 0x3], [0x401, 0xc584, 0x34711b8a, 0xcd4, 0xffff, 0x20, 0x7, 0x4, 0x8, 0x13, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0x1, 0x1000, 0x2, 0xe, 0x1, 0xfffffff9, 0xe55, 0x10, 0x80000001, 0x4, 0x4, 0x7, 0x9, 0x2, 0x20000005, 0x80, 0x9, 0xb, 0x47, 0x2, 0x3, 0x4, 0x40, 0x6d7e, 0x3, 0x8, 0x8001, 0xbf23, 0x6, 0x8, 0x95a, 0xffffffff, 0x4, 0x3, 0x6, 0x100fffd, 0x2005, 0x7, 0x4, 0xea, 0x9, 0x9, 0x10, 0xd9, 0x0, 0x7ff, 0x401, 0x5], [0x108e, 0x7fff, 0x3, 0x3, 0x88, 0x2, 0x6, 0x4, 0x40, 0x2, 0x763, 0xb, 0x402, 0x800, 0x2, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x8e8, 0x5, 0x9, 0x4, 0xe47, 0x4, 0x0, 0x4, 0x200, 0x1000, 0x20003b, 0x2, 0x5, 0x800, 0xa80e, 0x65f413f9, 0x4, 0x8, 0x8a8, 0x2, 0x40, 0x7, 0x2, 0x4, 0x4, 0x10, 0x7, 0x4, 0x7fff, 0x1, 0xfffffff8, 0x401, 0x0, 0x200, 0x7, 0x4edf, 0xfffffffd, 0x7, 0xe, 0x2, 0xe, 0xf, 0x133, 0x6]}, 0x45c) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000340)={{0x1, 0x1, 0x10000}}) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) io_setup(0x7, &(0x7f0000000280)=0x0) r3 = openat$sysfs(0xffffff9c, &(0x7f00000001c0)='/sys/power/pm_trace', 0x42, 0x0) io_submit(r2, 0x1, &(0x7f0000000500)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0xfffffc98}]) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000080)) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x1, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r5 = socket(0x15, 0x5, 0x0) bind$l2tp6(r5, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000180)=@gcm_256={{0x303}, "0200", "ab02a1a449283e8a3bc95815ece487ebcc5bb6a8d8a744e4b7edb45c7e7336ab", 'vb q', "9900000100"}, 0x38) shutdown(r4, 0x1) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000000), 0xffffff6a) sendfile(r4, r6, 0x0, 0xffffffff004) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r7, 0xffffffffffffffff, 0x0) 51.084344537s ago: executing program 2 (id=5900): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x3, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0x6b7, 0x80, 0x800, 0xffffffff, 0x91b1}}}}]}, 0x4c}, 0x1, 0x0, 0xf1, 0x4000400}, 0x800) 50.838664686s ago: executing program 2 (id=5902): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan1\x00'}) r1 = fsopen(&(0x7f0000000140)='cgroup\x00', 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f00000001c0)) ioctl$SNDCTL_DSP_CHANNELS(r4, 0xc0045006, &(0x7f0000000040)=0xc) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000640)=0x10) close(r4) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000b40)='sour:e', &(0x7f0000000040)='c:::\x00', 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) poll(&(0x7f00000002c0)=[{r6, 0x80ad}], 0x1, 0x2) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'geneve0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0x401, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, 0x60823}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x4c}}, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000240)={0x64, 0x0, &(0x7f00000003c0)=[@release={0x40046306, 0x2}, @request_death={0x400c630e, 0xfffffffc}, @increfs={0x40046304, 0xfffffffd}, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0xd0664646e2745034, 0x0, 0x0, 0x78, 0x18, &(0x7f0000000740)={@ptr={0x70742a85, 0x1, &(0x7f0000000000)=""/21, 0x15, 0x2, 0xa}, @ptr={0x70742a85, 0x1, &(0x7f0000000440)=""/255, 0xff, 0x1, 0x3c}, @ptr={0x70742a85, 0xffffffff, &(0x7f0000000300)=""/187, 0xbb, 0x2, 0x2a}}, &(0x7f0000000700)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x10000000) fsopen(&(0x7f0000000200)='befs\x00', 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) inotify_init() 47.652232571s ago: executing program 2 (id=5916): r0 = fsopen(&(0x7f0000000100)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000200)='secret\x00', &(0x7f0000000300)='AQB1+345678=0\a23456789012345678901234567=\x00', 0x0) 47.433370001s ago: executing program 2 (id=5918): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@newlink={0x40, 0x10, 0xffffffffffffffff, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0xc6da5938055fa6fd, 0x21}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0x1}, @IFLA_GTP_FD0={0x8}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x44}, 0x2000c000) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x440d}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa}]}, 0x40}}, 0x0) 46.808233475s ago: executing program 2 (id=5921): mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x8, 0x0) get_mempolicy(0x0, 0x0, 0x2, &(0x7f0000240000/0x1000)=nil, 0x3) landlock_create_ruleset(&(0x7f0000000000)={0x12f85, 0x4, 0x3, 0x28d5, 0x3}, 0x30, 0x3) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x401c2103, &(0x7f00000001c0)={0x0, 0x0, 0xffffffffffffffff, 0x4, 0x4000000}) 46.584280713s ago: executing program 2 (id=5922): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r1 = dup(r0) mmap(&(0x7f00005fe000/0x2000)=nil, 0x2000, 0x2, 0x28011, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f00000000c0)={0x600, 0x80600}) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x14d802, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x402c5839, &(0x7f00000004c0)={0x20, 0x1, 0x0, 0x400}) syz_usb_connect(0x5, 0x53b, &(0x7f0000000000)={{0x12, 0x1, 0x700, 0x95, 0x92, 0xab, 0x8, 0x93b, 0xa002, 0xdef7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x529, 0x3, 0x0, 0x7, 0x38, 0x81, "", [{{0x9, 0x4, 0xff, 0x40, 0x10, 0xda, 0x46, 0xb3, 0x1, [], [{{0x9, 0x5, 0xe, 0x0, 0x200, 0x7, 0x0, 0x10, [@generic={0x9b, 0x11, "96d8aa49136261a8efb3c4c09ab17782f3754e206000ceb957b297b8cb6ba76104f1051e75ea4a8121fccc3f5e021ffda9e89b7fd7be8110fc95cc229c5a1a991e8dd08858ae6a9bed216f6c58b240b9da3f53bbeb81dbba2039dc993d3ce1d719ac9f9caf7d345134daf36e80e7d9f755fca062a9aa7089cd57da64a5f9aef864af1ef1d1a63e8233280eaec73476494a84d5baa8a22cf8a4"}, @generic={0xed, 0x23, "c2c729f0dad48020bdcebb326b9d1cb3fd91be317096c8ac2fe8d1fad09fd415f35e583b1961897036573158330084ebe458d27efd10d25c6b829506db66e911d4cd83470735441c1953b2097ee04511a0002f1a28bf181c1daca92d1c2c07089fe9ca1cb3b5a67c233a665390d8f750dc4b08cf37f27321ceb4784653b28244c6d7699baa4268013b0eb75a9281610e6fd0069d502f1bc3d892795704deb5736f64758ebda30422485a274992a4d4ba27321d746c581a88d233c958483c14d8385e6e15c0289aaac53aafcd932585536026b2d7d6daaa1bacc9efe160d6b36c5b0e0c929ad8295c1a529c"}]}}, {{0x9, 0x5, 0x9, 0x9d0d551def1d941e, 0x10, 0x9, 0xc2, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x40, 0x7}]}}, {{0x9, 0x5, 0xe, 0x10, 0x10, 0x8, 0x0, 0x2}}, {{0x9, 0x5, 0x3, 0x3, 0x8, 0x7e, 0x7, 0x9f, [@generic={0xd2, 0x10, "73be36d858e0a9131010f5d44f1de8e6088b9c73c43427ce8d60ffefa4d87d432243170572e4eb15e1055f38047dc36edcdd8daa75f02de4aa47202c5f0d4bc378f7bf5a72a1212b36b1eeb8c7f737405d5b9ccf78d53ba31bf374253aac64714580d51548cd4c92cd7ad0cb2f892659bf6ee479804d417d061a75f42976587e9c9c2157fba6e7eb28f1015d809c07dbe6ca13aad4bf283ceef7ab0bf405ada6e4aa1105371dca12364729c3350d51fa7c6ad9d09d6e85492d45e83b605c48183b8412d45ecec6f88192560aaf245760"}]}}, {{0x9, 0x5, 0xf, 0x8, 0x40, 0x8, 0x5, 0xe0, [@generic={0x92, 0x5, "e8b71f7dcdab850a045bf6705b17e664c9cdf89c40842ce454ff8587c97a0de0b0c9ea437c412221ec26e4fa8c5926c06083da893050c21f53ea61de67811cbc6c4949d94a46b5e312d2c78e44e0ee2927663dff0d7bdea0b6d877904ecb5853def5c167e1025c1110424c9c0fa1f6abcb6b7616f86c407d7248361682c5d8212d5210f66090f46ab14c7bbb5cf9d798"}]}}, {{0x9, 0x5, 0x5, 0xc, 0x200, 0x25, 0x7, 0x3, [@generic={0x5e, 0x9, "3d9b6d6cc0103c92737a62a83416c16a6e8ec083faf0115ebcf00b98b6d9e2690a770b3363f3218c3e5859e76c1a071ea101d58159b405f8708d473d7172a6685c713b1bbfb833dcba27abafa3529c4498609b09d3880834f92e7f71"}, @generic={0x3a, 0x22, "49299e5692f6a97818f63933f609060c8376d29022f3bfd0657050726885dcfdeeaa4876c81249e2d1ce65f4274fcb6e7a7790b9c55f2342"}]}}, {{0x9, 0x5, 0x7, 0x10, 0x8, 0x5, 0x9, 0x1}}, {{0x9, 0x5, 0x9, 0x10, 0x10, 0xae, 0x5, 0x1, [@generic={0xc7, 0x22, "3da8a00740f7c5fae34e5dbf56db473ede3cfe6f1231e597ae08305ed80673e6ed08c13543fba6d52d2a8d7d4bef664af9db9b1f0f3b4ab3c7c2c62b2ff5b612c0bbe0ae4e8bb594e5e73f1f9611685a63d8f7c0a7da40eaa77fe6192d07cb61fd8196d564c61212a7ae7c6503c60b2f8e585973b99c699d69c336982991037928acf5dde83ad7a4f5a8b445579add93c8f577f399eb046f16db5702fd3e9a9527c6330d601f5eebeb6713a832ea053181cf496d73ffc36ff35c981b4e31c77287ac951ace"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x68, 0x3}]}}, {{0x9, 0x5, 0x4, 0x10, 0x40, 0x1, 0xd9, 0x34, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0xf, 0x4}]}}, {{0x9, 0x5, 0xa, 0x1, 0x20, 0x80, 0x3, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x2, 0x6}]}}, {{0x9, 0x5, 0x0, 0x0, 0x400, 0x8, 0x4, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x7, 0x6}]}}, {{0x9, 0x5, 0x7, 0x4, 0x10, 0x4, 0x55, 0x6}}, {{0x9, 0x5, 0xa, 0x2, 0x5be, 0xf8, 0x5, 0x5}}, {{0x9, 0x5, 0xf, 0x10, 0x40, 0x4, 0x2, 0x57}}, {{0x9, 0x5, 0x0, 0xc, 0x10, 0x2, 0x10, 0x17}}, {{0x9, 0x5, 0x8, 0x8, 0x8, 0x1, 0x8, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x0, 0x9}]}}]}}, {{0x9, 0x4, 0x2e, 0x10, 0x0, 0xff, 0xff, 0xff, 0x7}}, {{0x9, 0x4, 0x1c, 0x6, 0x0, 0x3, 0x50, 0xda, 0x9a}}]}}]}}, &(0x7f0000001880)={0x0, 0x0, 0x0, 0x0}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) (async) dup(r0) (async) mmap(&(0x7f00005fe000/0x2000)=nil, 0x2000, 0x2, 0x28011, r1, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f00000000c0)={0x600, 0x80600}) (async) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x14d802, 0x0) (async) ioctl$FS_IOC_RESVSP(r2, 0x402c5839, &(0x7f00000004c0)={0x20, 0x1, 0x0, 0x400}) (async) syz_usb_connect(0x5, 0x53b, &(0x7f0000000000)={{0x12, 0x1, 0x700, 0x95, 0x92, 0xab, 0x8, 0x93b, 0xa002, 0xdef7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x529, 0x3, 0x0, 0x7, 0x38, 0x81, "", [{{0x9, 0x4, 0xff, 0x40, 0x10, 0xda, 0x46, 0xb3, 0x1, [], [{{0x9, 0x5, 0xe, 0x0, 0x200, 0x7, 0x0, 0x10, [@generic={0x9b, 0x11, "96d8aa49136261a8efb3c4c09ab17782f3754e206000ceb957b297b8cb6ba76104f1051e75ea4a8121fccc3f5e021ffda9e89b7fd7be8110fc95cc229c5a1a991e8dd08858ae6a9bed216f6c58b240b9da3f53bbeb81dbba2039dc993d3ce1d719ac9f9caf7d345134daf36e80e7d9f755fca062a9aa7089cd57da64a5f9aef864af1ef1d1a63e8233280eaec73476494a84d5baa8a22cf8a4"}, @generic={0xed, 0x23, "c2c729f0dad48020bdcebb326b9d1cb3fd91be317096c8ac2fe8d1fad09fd415f35e583b1961897036573158330084ebe458d27efd10d25c6b829506db66e911d4cd83470735441c1953b2097ee04511a0002f1a28bf181c1daca92d1c2c07089fe9ca1cb3b5a67c233a665390d8f750dc4b08cf37f27321ceb4784653b28244c6d7699baa4268013b0eb75a9281610e6fd0069d502f1bc3d892795704deb5736f64758ebda30422485a274992a4d4ba27321d746c581a88d233c958483c14d8385e6e15c0289aaac53aafcd932585536026b2d7d6daaa1bacc9efe160d6b36c5b0e0c929ad8295c1a529c"}]}}, {{0x9, 0x5, 0x9, 0x9d0d551def1d941e, 0x10, 0x9, 0xc2, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x40, 0x7}]}}, {{0x9, 0x5, 0xe, 0x10, 0x10, 0x8, 0x0, 0x2}}, {{0x9, 0x5, 0x3, 0x3, 0x8, 0x7e, 0x7, 0x9f, [@generic={0xd2, 0x10, "73be36d858e0a9131010f5d44f1de8e6088b9c73c43427ce8d60ffefa4d87d432243170572e4eb15e1055f38047dc36edcdd8daa75f02de4aa47202c5f0d4bc378f7bf5a72a1212b36b1eeb8c7f737405d5b9ccf78d53ba31bf374253aac64714580d51548cd4c92cd7ad0cb2f892659bf6ee479804d417d061a75f42976587e9c9c2157fba6e7eb28f1015d809c07dbe6ca13aad4bf283ceef7ab0bf405ada6e4aa1105371dca12364729c3350d51fa7c6ad9d09d6e85492d45e83b605c48183b8412d45ecec6f88192560aaf245760"}]}}, {{0x9, 0x5, 0xf, 0x8, 0x40, 0x8, 0x5, 0xe0, [@generic={0x92, 0x5, "e8b71f7dcdab850a045bf6705b17e664c9cdf89c40842ce454ff8587c97a0de0b0c9ea437c412221ec26e4fa8c5926c06083da893050c21f53ea61de67811cbc6c4949d94a46b5e312d2c78e44e0ee2927663dff0d7bdea0b6d877904ecb5853def5c167e1025c1110424c9c0fa1f6abcb6b7616f86c407d7248361682c5d8212d5210f66090f46ab14c7bbb5cf9d798"}]}}, {{0x9, 0x5, 0x5, 0xc, 0x200, 0x25, 0x7, 0x3, [@generic={0x5e, 0x9, "3d9b6d6cc0103c92737a62a83416c16a6e8ec083faf0115ebcf00b98b6d9e2690a770b3363f3218c3e5859e76c1a071ea101d58159b405f8708d473d7172a6685c713b1bbfb833dcba27abafa3529c4498609b09d3880834f92e7f71"}, @generic={0x3a, 0x22, "49299e5692f6a97818f63933f609060c8376d29022f3bfd0657050726885dcfdeeaa4876c81249e2d1ce65f4274fcb6e7a7790b9c55f2342"}]}}, {{0x9, 0x5, 0x7, 0x10, 0x8, 0x5, 0x9, 0x1}}, {{0x9, 0x5, 0x9, 0x10, 0x10, 0xae, 0x5, 0x1, [@generic={0xc7, 0x22, "3da8a00740f7c5fae34e5dbf56db473ede3cfe6f1231e597ae08305ed80673e6ed08c13543fba6d52d2a8d7d4bef664af9db9b1f0f3b4ab3c7c2c62b2ff5b612c0bbe0ae4e8bb594e5e73f1f9611685a63d8f7c0a7da40eaa77fe6192d07cb61fd8196d564c61212a7ae7c6503c60b2f8e585973b99c699d69c336982991037928acf5dde83ad7a4f5a8b445579add93c8f577f399eb046f16db5702fd3e9a9527c6330d601f5eebeb6713a832ea053181cf496d73ffc36ff35c981b4e31c77287ac951ace"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x68, 0x3}]}}, {{0x9, 0x5, 0x4, 0x10, 0x40, 0x1, 0xd9, 0x34, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0xf, 0x4}]}}, {{0x9, 0x5, 0xa, 0x1, 0x20, 0x80, 0x3, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x2, 0x6}]}}, {{0x9, 0x5, 0x0, 0x0, 0x400, 0x8, 0x4, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x7, 0x6}]}}, {{0x9, 0x5, 0x7, 0x4, 0x10, 0x4, 0x55, 0x6}}, {{0x9, 0x5, 0xa, 0x2, 0x5be, 0xf8, 0x5, 0x5}}, {{0x9, 0x5, 0xf, 0x10, 0x40, 0x4, 0x2, 0x57}}, {{0x9, 0x5, 0x0, 0xc, 0x10, 0x2, 0x10, 0x17}}, {{0x9, 0x5, 0x8, 0x8, 0x8, 0x1, 0x8, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x0, 0x9}]}}]}}, {{0x9, 0x4, 0x2e, 0x10, 0x0, 0xff, 0xff, 0xff, 0x7}}, {{0x9, 0x4, 0x1c, 0x6, 0x0, 0x3, 0x50, 0xda, 0x9a}}]}}]}}, &(0x7f0000001880)={0x0, 0x0, 0x0, 0x0}) (async) 31.44748776s ago: executing program 44 (id=5922): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r1 = dup(r0) mmap(&(0x7f00005fe000/0x2000)=nil, 0x2000, 0x2, 0x28011, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f00000000c0)={0x600, 0x80600}) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x14d802, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x402c5839, &(0x7f00000004c0)={0x20, 0x1, 0x0, 0x400}) syz_usb_connect(0x5, 0x53b, &(0x7f0000000000)={{0x12, 0x1, 0x700, 0x95, 0x92, 0xab, 0x8, 0x93b, 0xa002, 0xdef7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x529, 0x3, 0x0, 0x7, 0x38, 0x81, "", [{{0x9, 0x4, 0xff, 0x40, 0x10, 0xda, 0x46, 0xb3, 0x1, [], [{{0x9, 0x5, 0xe, 0x0, 0x200, 0x7, 0x0, 0x10, [@generic={0x9b, 0x11, "96d8aa49136261a8efb3c4c09ab17782f3754e206000ceb957b297b8cb6ba76104f1051e75ea4a8121fccc3f5e021ffda9e89b7fd7be8110fc95cc229c5a1a991e8dd08858ae6a9bed216f6c58b240b9da3f53bbeb81dbba2039dc993d3ce1d719ac9f9caf7d345134daf36e80e7d9f755fca062a9aa7089cd57da64a5f9aef864af1ef1d1a63e8233280eaec73476494a84d5baa8a22cf8a4"}, @generic={0xed, 0x23, "c2c729f0dad48020bdcebb326b9d1cb3fd91be317096c8ac2fe8d1fad09fd415f35e583b1961897036573158330084ebe458d27efd10d25c6b829506db66e911d4cd83470735441c1953b2097ee04511a0002f1a28bf181c1daca92d1c2c07089fe9ca1cb3b5a67c233a665390d8f750dc4b08cf37f27321ceb4784653b28244c6d7699baa4268013b0eb75a9281610e6fd0069d502f1bc3d892795704deb5736f64758ebda30422485a274992a4d4ba27321d746c581a88d233c958483c14d8385e6e15c0289aaac53aafcd932585536026b2d7d6daaa1bacc9efe160d6b36c5b0e0c929ad8295c1a529c"}]}}, {{0x9, 0x5, 0x9, 0x9d0d551def1d941e, 0x10, 0x9, 0xc2, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x40, 0x7}]}}, {{0x9, 0x5, 0xe, 0x10, 0x10, 0x8, 0x0, 0x2}}, {{0x9, 0x5, 0x3, 0x3, 0x8, 0x7e, 0x7, 0x9f, [@generic={0xd2, 0x10, "73be36d858e0a9131010f5d44f1de8e6088b9c73c43427ce8d60ffefa4d87d432243170572e4eb15e1055f38047dc36edcdd8daa75f02de4aa47202c5f0d4bc378f7bf5a72a1212b36b1eeb8c7f737405d5b9ccf78d53ba31bf374253aac64714580d51548cd4c92cd7ad0cb2f892659bf6ee479804d417d061a75f42976587e9c9c2157fba6e7eb28f1015d809c07dbe6ca13aad4bf283ceef7ab0bf405ada6e4aa1105371dca12364729c3350d51fa7c6ad9d09d6e85492d45e83b605c48183b8412d45ecec6f88192560aaf245760"}]}}, {{0x9, 0x5, 0xf, 0x8, 0x40, 0x8, 0x5, 0xe0, [@generic={0x92, 0x5, "e8b71f7dcdab850a045bf6705b17e664c9cdf89c40842ce454ff8587c97a0de0b0c9ea437c412221ec26e4fa8c5926c06083da893050c21f53ea61de67811cbc6c4949d94a46b5e312d2c78e44e0ee2927663dff0d7bdea0b6d877904ecb5853def5c167e1025c1110424c9c0fa1f6abcb6b7616f86c407d7248361682c5d8212d5210f66090f46ab14c7bbb5cf9d798"}]}}, {{0x9, 0x5, 0x5, 0xc, 0x200, 0x25, 0x7, 0x3, [@generic={0x5e, 0x9, "3d9b6d6cc0103c92737a62a83416c16a6e8ec083faf0115ebcf00b98b6d9e2690a770b3363f3218c3e5859e76c1a071ea101d58159b405f8708d473d7172a6685c713b1bbfb833dcba27abafa3529c4498609b09d3880834f92e7f71"}, @generic={0x3a, 0x22, "49299e5692f6a97818f63933f609060c8376d29022f3bfd0657050726885dcfdeeaa4876c81249e2d1ce65f4274fcb6e7a7790b9c55f2342"}]}}, {{0x9, 0x5, 0x7, 0x10, 0x8, 0x5, 0x9, 0x1}}, {{0x9, 0x5, 0x9, 0x10, 0x10, 0xae, 0x5, 0x1, [@generic={0xc7, 0x22, "3da8a00740f7c5fae34e5dbf56db473ede3cfe6f1231e597ae08305ed80673e6ed08c13543fba6d52d2a8d7d4bef664af9db9b1f0f3b4ab3c7c2c62b2ff5b612c0bbe0ae4e8bb594e5e73f1f9611685a63d8f7c0a7da40eaa77fe6192d07cb61fd8196d564c61212a7ae7c6503c60b2f8e585973b99c699d69c336982991037928acf5dde83ad7a4f5a8b445579add93c8f577f399eb046f16db5702fd3e9a9527c6330d601f5eebeb6713a832ea053181cf496d73ffc36ff35c981b4e31c77287ac951ace"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x68, 0x3}]}}, {{0x9, 0x5, 0x4, 0x10, 0x40, 0x1, 0xd9, 0x34, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0xf, 0x4}]}}, {{0x9, 0x5, 0xa, 0x1, 0x20, 0x80, 0x3, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x2, 0x6}]}}, {{0x9, 0x5, 0x0, 0x0, 0x400, 0x8, 0x4, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x7, 0x6}]}}, {{0x9, 0x5, 0x7, 0x4, 0x10, 0x4, 0x55, 0x6}}, {{0x9, 0x5, 0xa, 0x2, 0x5be, 0xf8, 0x5, 0x5}}, {{0x9, 0x5, 0xf, 0x10, 0x40, 0x4, 0x2, 0x57}}, {{0x9, 0x5, 0x0, 0xc, 0x10, 0x2, 0x10, 0x17}}, {{0x9, 0x5, 0x8, 0x8, 0x8, 0x1, 0x8, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x0, 0x9}]}}]}}, {{0x9, 0x4, 0x2e, 0x10, 0x0, 0xff, 0xff, 0xff, 0x7}}, {{0x9, 0x4, 0x1c, 0x6, 0x0, 0x3, 0x50, 0xda, 0x9a}}]}}]}}, &(0x7f0000001880)={0x0, 0x0, 0x0, 0x0}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) (async) dup(r0) (async) mmap(&(0x7f00005fe000/0x2000)=nil, 0x2000, 0x2, 0x28011, r1, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f00000000c0)={0x600, 0x80600}) (async) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x14d802, 0x0) (async) ioctl$FS_IOC_RESVSP(r2, 0x402c5839, &(0x7f00000004c0)={0x20, 0x1, 0x0, 0x400}) (async) syz_usb_connect(0x5, 0x53b, &(0x7f0000000000)={{0x12, 0x1, 0x700, 0x95, 0x92, 0xab, 0x8, 0x93b, 0xa002, 0xdef7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x529, 0x3, 0x0, 0x7, 0x38, 0x81, "", [{{0x9, 0x4, 0xff, 0x40, 0x10, 0xda, 0x46, 0xb3, 0x1, [], [{{0x9, 0x5, 0xe, 0x0, 0x200, 0x7, 0x0, 0x10, [@generic={0x9b, 0x11, "96d8aa49136261a8efb3c4c09ab17782f3754e206000ceb957b297b8cb6ba76104f1051e75ea4a8121fccc3f5e021ffda9e89b7fd7be8110fc95cc229c5a1a991e8dd08858ae6a9bed216f6c58b240b9da3f53bbeb81dbba2039dc993d3ce1d719ac9f9caf7d345134daf36e80e7d9f755fca062a9aa7089cd57da64a5f9aef864af1ef1d1a63e8233280eaec73476494a84d5baa8a22cf8a4"}, @generic={0xed, 0x23, "c2c729f0dad48020bdcebb326b9d1cb3fd91be317096c8ac2fe8d1fad09fd415f35e583b1961897036573158330084ebe458d27efd10d25c6b829506db66e911d4cd83470735441c1953b2097ee04511a0002f1a28bf181c1daca92d1c2c07089fe9ca1cb3b5a67c233a665390d8f750dc4b08cf37f27321ceb4784653b28244c6d7699baa4268013b0eb75a9281610e6fd0069d502f1bc3d892795704deb5736f64758ebda30422485a274992a4d4ba27321d746c581a88d233c958483c14d8385e6e15c0289aaac53aafcd932585536026b2d7d6daaa1bacc9efe160d6b36c5b0e0c929ad8295c1a529c"}]}}, {{0x9, 0x5, 0x9, 0x9d0d551def1d941e, 0x10, 0x9, 0xc2, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x40, 0x7}]}}, {{0x9, 0x5, 0xe, 0x10, 0x10, 0x8, 0x0, 0x2}}, {{0x9, 0x5, 0x3, 0x3, 0x8, 0x7e, 0x7, 0x9f, [@generic={0xd2, 0x10, "73be36d858e0a9131010f5d44f1de8e6088b9c73c43427ce8d60ffefa4d87d432243170572e4eb15e1055f38047dc36edcdd8daa75f02de4aa47202c5f0d4bc378f7bf5a72a1212b36b1eeb8c7f737405d5b9ccf78d53ba31bf374253aac64714580d51548cd4c92cd7ad0cb2f892659bf6ee479804d417d061a75f42976587e9c9c2157fba6e7eb28f1015d809c07dbe6ca13aad4bf283ceef7ab0bf405ada6e4aa1105371dca12364729c3350d51fa7c6ad9d09d6e85492d45e83b605c48183b8412d45ecec6f88192560aaf245760"}]}}, {{0x9, 0x5, 0xf, 0x8, 0x40, 0x8, 0x5, 0xe0, [@generic={0x92, 0x5, "e8b71f7dcdab850a045bf6705b17e664c9cdf89c40842ce454ff8587c97a0de0b0c9ea437c412221ec26e4fa8c5926c06083da893050c21f53ea61de67811cbc6c4949d94a46b5e312d2c78e44e0ee2927663dff0d7bdea0b6d877904ecb5853def5c167e1025c1110424c9c0fa1f6abcb6b7616f86c407d7248361682c5d8212d5210f66090f46ab14c7bbb5cf9d798"}]}}, {{0x9, 0x5, 0x5, 0xc, 0x200, 0x25, 0x7, 0x3, [@generic={0x5e, 0x9, "3d9b6d6cc0103c92737a62a83416c16a6e8ec083faf0115ebcf00b98b6d9e2690a770b3363f3218c3e5859e76c1a071ea101d58159b405f8708d473d7172a6685c713b1bbfb833dcba27abafa3529c4498609b09d3880834f92e7f71"}, @generic={0x3a, 0x22, "49299e5692f6a97818f63933f609060c8376d29022f3bfd0657050726885dcfdeeaa4876c81249e2d1ce65f4274fcb6e7a7790b9c55f2342"}]}}, {{0x9, 0x5, 0x7, 0x10, 0x8, 0x5, 0x9, 0x1}}, {{0x9, 0x5, 0x9, 0x10, 0x10, 0xae, 0x5, 0x1, [@generic={0xc7, 0x22, "3da8a00740f7c5fae34e5dbf56db473ede3cfe6f1231e597ae08305ed80673e6ed08c13543fba6d52d2a8d7d4bef664af9db9b1f0f3b4ab3c7c2c62b2ff5b612c0bbe0ae4e8bb594e5e73f1f9611685a63d8f7c0a7da40eaa77fe6192d07cb61fd8196d564c61212a7ae7c6503c60b2f8e585973b99c699d69c336982991037928acf5dde83ad7a4f5a8b445579add93c8f577f399eb046f16db5702fd3e9a9527c6330d601f5eebeb6713a832ea053181cf496d73ffc36ff35c981b4e31c77287ac951ace"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x68, 0x3}]}}, {{0x9, 0x5, 0x4, 0x10, 0x40, 0x1, 0xd9, 0x34, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0xf, 0x4}]}}, {{0x9, 0x5, 0xa, 0x1, 0x20, 0x80, 0x3, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x2, 0x6}]}}, {{0x9, 0x5, 0x0, 0x0, 0x400, 0x8, 0x4, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x7, 0x6}]}}, {{0x9, 0x5, 0x7, 0x4, 0x10, 0x4, 0x55, 0x6}}, {{0x9, 0x5, 0xa, 0x2, 0x5be, 0xf8, 0x5, 0x5}}, {{0x9, 0x5, 0xf, 0x10, 0x40, 0x4, 0x2, 0x57}}, {{0x9, 0x5, 0x0, 0xc, 0x10, 0x2, 0x10, 0x17}}, {{0x9, 0x5, 0x8, 0x8, 0x8, 0x1, 0x8, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x0, 0x9}]}}]}}, {{0x9, 0x4, 0x2e, 0x10, 0x0, 0xff, 0xff, 0xff, 0x7}}, {{0x9, 0x4, 0x1c, 0x6, 0x0, 0x3, 0x50, 0xda, 0x9a}}]}}]}}, &(0x7f0000001880)={0x0, 0x0, 0x0, 0x0}) (async) 13.288107283s ago: executing program 8 (id=6050): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1000, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'xfrm0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newqdisc={0x60, 0x24, 0x20, 0xdfffffff, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {0xffff, 0xffff}, {0xf}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x2, 0x9}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1, 0x1, 0xa, 0x400, 0x1, 0x7, 0x80000000}}, {0x4}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x44000}, 0x9000) (async) close(r3) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) (async) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200fffe540004802800018007000100637400001c0002800800014000000002080002400000001405000300010000002800018007000100637400001c0002800800024000000011080004400000000c05000300010000000900010073797a30000000000900020073797a320000000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x0) (async) sendmsg$NFT_MSG_GETRULE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="14004000190a01010000000000002a0ee3e8af39"], 0x14}, 0x1, 0x0, 0x0, 0x40c0}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0x0, 0x8}, {0xc, 0xb}, {0x7, 0xffe2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x2004c090) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r9) sendmsg$TIPC_CMD_ENABLE_BEARER(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r11) r12 = socket$unix(0x1, 0x5, 0x0) (async) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56441, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r14, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0xfff, 0x7, 0x5, 0x5, 0xfffffdff, 0x6}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x9, 0xfffd, 0x5, 0x96, 0xfff, 0xc}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) (async) r15 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r15, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) 12.592482157s ago: executing program 8 (id=6053): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x8000) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000680)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014020d000a00000000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d00d00000000000000bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000008c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000240)={0x50, r8, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x8000, 0x30}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'nicvf0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x1}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}]]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x40048a4) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000a40)={0x44, &(0x7f00000007c0)={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 11.548240633s ago: executing program 1 (id=6057): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) unlinkat(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) socket(0x1000000010, 0x80002, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x3c1, 0x3, 0x4cc, 0x0, 0x940c, 0x3002, 0x0, 0x2c0, 0x404, 0x3d8, 0x3d8, 0x404, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x28c, 0x2d4, 0x0, {}, [@common=@inet=@recent0={{0xf4}, {0x0, 0x3f, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@recent0={{0xf4}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@ipv6={@loopback, @private0, [0x0, 0x0, 0xffffff, 0xff], [0xffffff00, 0xffffff00, 0xff000000, 0xffffffff], 'veth0_to_team\x00', 'veth0_to_hsr\x00', {0xff}, {}, 0x886215f4d37bb4bb, 0x90, 0x1, 0x69}, 0x0, 0xc8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x24}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x1, 0xc, 0x0, 'syz1\x00', 'syz1\x00', {0x9}}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x528) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x8, 0xffff, 0x3fd, 0x0, 0xb2, 0x2, 0x6}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r3, 0x2) syz_usb_connect(0x6, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120141014813442024040001000010000904b8070259d1ca000905060200020d00060905820200020d320ca0dd6ca2e0f78c14008db45e3f86e911489248b400660ceb55"], 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000010000), 0x20080, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r4, 0x400454d1, &(0x7f00000000c0)={0x0, 0x0}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f0000000780)={'pim6reg0\x00', 0x400}) 9.399618187s ago: executing program 8 (id=6062): openat$ptmx(0xffffffffffffff9c, 0x0, 0x482, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 9.289869246s ago: executing program 8 (id=6063): prlimit64(0x0, 0x7, &(0x7f0000000440), 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1, 0x3, &(0x7f0000000280)=@framed, &(0x7f00000003c0)='syzkaller\x00', 0x2}, 0x94) migrate_pages(0x0, 0x3, &(0x7f0000000300)=0x3, &(0x7f0000000340)=0x13e) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@ipv4_newroute={0x34, 0x1a, 0x1, 0x70bd28, 0x0, {0x2, 0x20, 0x20, 0x2, 0xff, 0x1, 0x0, 0x7, 0x200}, [@RTA_IIF={0x8, 0x3, r2}, @RTA_DST={0x8, 0x1, @broadcast}, @RTA_SRC={0x8, 0x2, @private=0xa010100}]}, 0x34}, 0x1, 0x0, 0x0, 0x6408c010}, 0xea5bc50b6199d77e) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0xa}}, 0x20) 8.972684578s ago: executing program 8 (id=6065): r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000840)={&(0x7f0000000100)=@phonet={0x23, 0x5, 0xff, 0x13}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000740)}], 0x1}, 0x894) 8.764865103s ago: executing program 8 (id=6067): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0x8040480) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000004, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x14) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f0000000280)={&(0x7f00000059c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6}) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000008280), r4) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="aad91e3be7b0234aa785c18453615effc2f3f2e4c36d3c7e24bc1e1030fda3130c45d871e0aa04a9aa00abe57cd00c10ab9a6a2bf4ced3bd0901c230745d4c8ff1ee1863d589f41f70292464f55ef42889c9ad818af24946d22ebe9baa80788a2a21aae2511f08aa1897daef73f10f5f64b14dba7384de836f8228d9fdc1dbc74c480d86b7b1d9d57a9cd5b5ca00e19a", @ANYRES16=r7, @ANYBLOB="00022bbd7000fddbdf251c000000080001007063690011000200303030303a30303a31302e300000000008000b000c080000080001007063690011000200303030303a30303a31302e300000000008000b0000000000080001007063690011000200303030303a30303a31302e300000000008000b000c0000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b0008000000"], 0xa8}, 0x1, 0x0, 0x0, 0x10}, 0x4000004) fsetxattr$trusted_overlay_redirect(r3, &(0x7f0000000240), &(0x7f00000002c0)='./file0\x00', 0x8, 0x1) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r5, 0xc01864c1, &(0x7f0000000100)) r10 = dup(r9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x12, r10, 0x2000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x20902, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000002340), 0x40800) 7.587295528s ago: executing program 1 (id=6070): r0 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @multicast1}, {0x1, @local}, 0x4a, {0x2, 0x4e23, @dev}}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x8, [@enum64={0xf, 0x3, 0x0, 0x13, 0x0, 0x2, [{0xf, 0x4, 0x3}, {0xa, 0x4, 0x9}, {0x10, 0x2, 0x7}]}, @func={0x6, 0x0, 0x0, 0xc, 0x3}]}, {0x0, [0x0, 0x30, 0x0, 0x61, 0x30, 0x0]}}, &(0x7f0000000180)=""/133, 0x5c, 0x85, 0x0, 0x7fff}, 0x28) r2 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004898b610c2154100201f0102030109021b0001000500ea09040002018c78fd00090582f3c6"], 0x0) syz_usb_control_io$cdc_ncm(r2, &(0x7f0000000600)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x1a, {0xfffffffffffffdd4}}}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x8, &(0x7f0000000300)=ANY=[]) preadv(r1, &(0x7f0000000080)=[{&(0x7f0000000b40)=""/119, 0x77}], 0x1, 0x4000ffe, 0x0) 6.399518038s ago: executing program 3 (id=6074): openat$ptmx(0xffffffffffffff9c, 0x0, 0x482, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 6.1551104s ago: executing program 3 (id=6085): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) r1 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r2, 0x5) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r4, &(0x7f0000000100)='\x00', 0x1, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000180)) sendto$inet6(r3, &(0x7f0000000080)="2ebd", 0x2, 0xe0, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000100)) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r7 = dup3(r6, r5, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs2/binder0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r8, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) close_range(r0, 0xffffffffffffffff, 0x0) 5.738753326s ago: executing program 3 (id=6076): socket$nl_generic(0x10, 0x3, 0x10) preadv2(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x100000000000000d, 0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0xedc9, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x118d7, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000000)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e22, 0xfffffffe, @empty, 0x5e}, 0x1c) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000080)={0xa, 0x14e22, 0xfffffff8, @ipv4}, 0x1c) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32ef", 0x45}], 0x1}, 0x440c1) setsockopt$inet_udp_int(r4, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4) sendmmsg$inet(r4, &(0x7f00000006c0)=[{{&(0x7f0000000600)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x2000c844) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000780)={0x0, 0x4}, 0x8) r8 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f0000000640)=@generic={0x1, 0x5, 0x8000000000000001}) writev(r8, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) sendto$inet(r4, &(0x7f00000000c0)="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", 0xffe3, 0x6000000000000000, 0x0, 0x0) unshare(0x42040200) syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902"], 0x0) unshare(0x40000400) 5.157825426s ago: executing program 9 (id=6077): r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000840)={&(0x7f0000000100)=@phonet={0x23, 0x5, 0xff, 0x13}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000740)="2705020059feff", 0x7}], 0x1}, 0x894) 5.02863884s ago: executing program 5 (id=6078): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x8dc3, 0x900) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045520, &(0x7f0000000080)=0xffffbf7f) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x5, &(0x7f00000000c0)=@raw=[@map_idx={0x18, 0x6}, @cb_func={0x18, 0x1, 0x4, 0x0, 0xfffffffffffffffe}, @call={0x85, 0x0, 0x0, 0xe}], &(0x7f0000000100)='GPL\x00', 0xf, 0x8e, &(0x7f0000000140)=""/142, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[0xffffffffffffffff], &(0x7f0000000240)=[{0x0, 0x2, 0x7, 0x9}], 0x10, 0x8bc5}, 0x94) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000340)={"111275b2a59b0cc62374135be7972009baa71e0c46664c90de94d92fa4f841af", 0xffffffffffffffff, 0xffffffffffffffff}) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000380)=@o_path={&(0x7f0000000040)='./file0\x00', r1, 0x4000, r2}, 0x14) 5.00511729s ago: executing program 9 (id=6079): syz_usb_connect$uac3(0x0, 0xf0, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x17cc, 0x1915, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x95, 0x3, 0x1, 0xff, 0x0, 0x10, {0x8, 0xb, 0x0, 0x2, 0x1, 0x1, 0x30, 0x7}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x5, 0x31, 0xd12}, [@output_terminal={0x13, 0x24, 0x3, 0xc2, 0x306, 0x6, 0x1, 0x2, 0x3, 0x5, 0x7f, 0x80}, @input_terminal={0x14, 0x24, 0x2, 0x2, 0x200, 0x3, 0x6, 0x6, 0x8, 0x8, 0x1}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x40, 0xd2, 0x1, {0xa, 0x25, 0x25, 0x6, 0x1, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0xfa, 0xa, 0x1, {0xa, 0x25, 0x25, 0x0, 0x5, 0x9}}}}}}}}]}}, 0x0) 4.937280141s ago: executing program 5 (id=6080): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8400, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f000012d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00005a4000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f000012d000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x0) syz_80211_join_ibss(&(0x7f0000000440)='wlan0\x00', &(0x7f00000004c0)=@default_ap_ssid, 0x6, 0x2) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x2, 0x325}) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x20bc, 0x5500, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xb0, 0x0, "", [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x4, 0xa, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0xc4, 0x8, 0xfe}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io(r4, &(0x7f0000000000)={0x2c, &(0x7f0000000180)={0x20, 0x30, 0x28, {0x28, 0xd, "f70ba381030000000000000000cb4fdca0560f920d54f365c5b1d43ee44ebf6fc93f0808751f"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 4.766107867s ago: executing program 1 (id=6081): socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, 0x0, 0x2000c004) quotactl$Q_QUOTAON(0xffffffff80000200, 0x0, 0x0, 0x0) semctl$SETALL(0x0, 0x0, 0x14, &(0x7f0000000040)) socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x0) unshare(0x2c020600) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r3 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/card0/oss_mixer\x00', 0x2, 0x0) write$proc_mixer(r3, &(0x7f0000000280)=ANY=[@ANYBLOB='VOLUME \t'], 0x23) close(r3) r4 = io_uring_setup(0x5ab1, &(0x7f0000000540)={0x0, 0xcc08, 0x8, 0x2, 0xb2}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000002c0), 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) pipe2$watch_queue(0x0, 0x80) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="28000000090601169b740e201f59d76c1a80115bbe015308000000000000000007000000090002007304005e0843f8b038000100070000005fa26c19d7e7513b181051339dc05ca6133ca4eeb68bb02852e3c80a1d134d37048e49a1944cfcca8ca54ca15e791f2aeaed859ff065f54aca4544ac66e449d093d72775107ffafd54433174a9"], 0x28}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) r5 = socket(0x10, 0x2, 0x0) write(r5, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r5, 0x0, 0x0, 0x2, 0x0) 3.392031493s ago: executing program 9 (id=6082): r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r5 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x8aab41) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000001018610f4205ae06d6c011703010902240001010000000904690202ff5aa30009050402100000fa000905820240"], 0x0) ioctl$EVIOCSMASK(r5, 0x40104593, &(0x7f0000000140)={0x0, 0x0, 0x0}) ioctl$EVIOCGMASK(r5, 0x80104592, &(0x7f0000000180)={0x0, 0xa3, &(0x7f0000000740)="7fa88fedbcb48ef29ef3bfde224dda89d97f114526a05860b5e73918a6e963aa70af984a86af31643e7fbdcf76b5686d68937edf627bfe10c60574736dabfe259f959d0f89e5a28c1a618724a51596ddcda2e66a497e61cf4b53a25556cb607d382cb01606b2adc9b08a4ada029bd4957d0cbe4696516e3e27d36d8753dfdf874eb7d3c1f72583ab29bec6c654c1cbecbaa98447adf1f58bd0d0fbc453494360cdeb97"}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r3, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r8, @ANYBLOB="08002600ad1600004000330010000000080211000000080211000000080211000001000000000000010001002d1a40000b0000000000000000040003000b0000000600500000000304006c"], 0x68}}, 0x0) fsopen(&(0x7f0000000280)='omfs\x00', 0x1) r9 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x400) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r9, 0xc00464c9, &(0x7f00000000c0)) write$rfkill(r1, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000140)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f0000000240)=[r10], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)=[0x0, 0x80000000, 0x4, 0xffffffffffffffc0, 0xde4e, 0x7ff, 0x90b4, 0x9, 0x27], 0x0, 0x2}) 2.550036345s ago: executing program 5 (id=6083): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x8}, 0x809}, {0xa, 0x8, 0x0, @empty}, 0x2, {[0x0, 0x1, 0xfffffffe, 0x0, 0xffffffff, 0x8, 0x40]}}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e21, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, {0xa, 0x4e21, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x95}, 0x1, {[0x7, 0xffffffff, 0x4, 0x9, 0x4, 0x1ff, 0x33ba8, 0x7]}}, 0x5c) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x1e, 0xa01, 0x0, 0xffffffff, {0xb}}, 0x14}}, 0xc0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r1, &(0x7f0000002d00)=[{{&(0x7f0000001080)={0xa, 0x4e22, 0x2, @private2, 0x11001}, 0x1c, &(0x7f00000010c0)=[{&(0x7f0000001300)="e6", 0x1}], 0x1}}], 0x1, 0x0) shutdown(r1, 0x1) getsockopt$bt_hci(r1, 0x84, 0x0, &(0x7f0000000080)=""/4057, &(0x7f0000001100)=0xfd9) ioctl$NILFS_IOCTL_SYNC(r0, 0x80086e8a, 0x0) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x1, 0x0, 0xfffffffc, 0x0, 0x9]}}, 0x5c) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000140)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0x9c}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, 0x0, 0x0) syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x0) ioctl$EXT4_IOC_GETFSUUID(r0, 0x8008662c, &(0x7f0000000100)) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000340)=0x6, 0x4) syz_emit_ethernet(0x82, &(0x7f0000000000)={@local, @empty, @val, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "5f1060", 0x24, 0x2f, 0x0, @private0, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x100}, {}, {0x8, 0x88be, 0x86ddffff}}}}}}}, 0x0) 2.406167277s ago: executing program 5 (id=6084): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="840000000002010400000000000000000a00000004000180300003802c00018014000300fc00000000000000000000100000000014004400fe800000001f610000000000000000bb3c0002800c00028005000100000000002c00018014000300fc020000000000000000000000000000140004"], 0x84}}, 0x0) r0 = socket(0x10, 0x803, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x437, 0x2, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_STATS_PER_PORT={0x5, 0x2d, 0x3}]}}}]}, 0x3c}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x9) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r2, @ANYBLOB="0200000000008000800012000800010076746936740002"], 0xa0}}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), r0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000018}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x60, r5, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x13b}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xbd}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x5}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x16}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x11}, 0x4004000) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x5c, 0x2, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0x1}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) 2.117022585s ago: executing program 1 (id=6086): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f000000b300)=[{{&(0x7f0000000140)=@qipcrtr, 0x80, &(0x7f0000000940)=[{&(0x7f0000000840)=""/38, 0x26}, {&(0x7f0000000880)=""/132, 0x84}], 0x2, &(0x7f00000082c0)=""/4096, 0x1000}, 0x20005}, {{&(0x7f0000002b00)=@nl, 0x80, &(0x7f0000002b80), 0x0, &(0x7f0000002bc0)=""/74, 0x4a}, 0x28f}, {{&(0x7f0000001ac0)=@qipcrtr, 0x80, &(0x7f0000002d00)=[{&(0x7f0000002cc0)=""/43, 0x2b}], 0x1, &(0x7f0000002d40)=""/119, 0x77}, 0x80000000}, {{&(0x7f0000000700)=@qipcrtr, 0x80, &(0x7f0000001a40), 0x0, &(0x7f0000002f80)=""/64, 0x40}, 0xfff}, {{&(0x7f0000002fc0)=@un=@abs, 0x80, &(0x7f0000000640)=[{&(0x7f00000006c0)=""/39, 0x27}, {&(0x7f0000003080)=""/124, 0x7c}, {&(0x7f0000003100)=""/111, 0x6f}, {&(0x7f0000001a80)=""/30, 0x1e}], 0x4, &(0x7f0000001b40)=""/102, 0x66}, 0x6000}, {{&(0x7f0000003280)=@phonet, 0x80, &(0x7f0000004580)=[{&(0x7f0000000980)=""/80, 0x50}, {&(0x7f00000045c0)=""/4096, 0x1000}, {&(0x7f0000004380)=""/137, 0x89}, {&(0x7f0000004440)=""/116, 0x74}, {&(0x7f00000044c0)=""/132, 0x84}], 0x5, &(0x7f0000000a00)=""/4099, 0x1003}, 0x2}, {{0x0, 0x0, &(0x7f0000005740)=[{&(0x7f00000055c0)=""/127, 0x7f}, {&(0x7f0000005640)=""/250, 0xfa}], 0x2, &(0x7f0000000780)=""/100, 0x64}, 0x2}, {{&(0x7f0000005800)=@can, 0x80, &(0x7f000000a2c0)=[{&(0x7f0000001a40)=""/30, 0x1e}, {&(0x7f00000058c0)=""/116, 0x74}, {&(0x7f0000005940)=""/228, 0xe4}, {&(0x7f0000005a40)=""/115, 0x73}, {&(0x7f0000005ac0)}, {&(0x7f0000003300)=""/4108, 0x100c}, {&(0x7f00000092c0)=""/4096, 0x1000}], 0x7, &(0x7f000000a300)=""/4096, 0x1000}, 0x8}], 0x8, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x0, 0x1, 0x0, 0x0, 0x9, 0x8d56, 0x80000001, 0x1}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x6cc0c2, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x20000800) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000062c0)="23db5037805f177d136115e6a1a5903469af39c1fb9cb38215fe64cff9f2f0444a57e22b0cc5cb4f74c9792365400d9e1c68539ea5eff0a5ed0864814d39251bee8dfea69aa052d900bc0c792e1c9752b7d3a3222f6a1ad3e44c1f65617b128aea51911861ca36ba7c96b96b2fba0fdaa49ffb2612f3e81fe565327dd9965a60046442c9dcd0d552c6a00388be3b438a08883c7349761531880294ad9887db97d8c2f74921c57910cf1f5cc528e17bd5c3746b6202f26d621535aac5f7872c2cb3295e42524b5acb249b2d1ac1b53a4e31271decfca3fad2e2f740768adf00875c18cb7d115150f83ceb73f77a1f61f1666c2bb9f6bd9f0fb55b3a619446e32bae2a1d99aa49e5f3822e048f8be44b707f2db10d7916ec9a10a695d573d871cf24959c3d15e61344a68309d186956537c6ea8532fc2e1c7649f8409d8dcde4c8ee1530470ac9c870f9f1837574e444ba6addf5ddb2dec67c0e76df79f265b403818dddb4efc27c90985ed69a48b12056e548f9c99edf80d2b195d26acb1127661727a0600257f4b2546513d03930a0638a71bd3223e51fbb75c832ef737907f2f4d3f0505f431ea02783c798b5c4579c99961fb73dc623a0d99c1b306435464d413b537d42c6444851b36482597140b22fbc0ebc7e795b2f96739bf139f5823bc869ede547da4f394fa1b1787836095e1013264042e53d5006ea059d0488cb2f5ccd44b30d25ea53c2dda71d112d7d441dbfc9f8462c99c098b1958c80b237d83c32f2759c9a9c081d7d7666a477cfda59354309b09f2a8b9f6c3077b0df1e8d0c71ac07232de4f437107cb0eb9b47b2267efe31938a337cf11cadad72ced56895bb14763cca5bdadd245d801e829a1eb3bb4ed851a345918efd2dcf8d38f66badc773068e6a2ef59b2bb838abd8b043cf6ac54550f3fde1bbb9e761095e4b8ef1891757d376be1f778142610c0acbbfc697f51fbb7a1602ed46e82813c74f41ee2bae818174809f3692084bea7310ebec3d6166702ae62aad84313e19b4d145167185ea8d53cb21d099fb592d7d7f8bc305dd375b5c0cd73be44f49ff53cee220085d4706bbf50c6f63b02e7e805e8fa4c73046a57a8700886da29ea53e5a316e7b011c44a0f7be5cc5cb5641ba0069ff591eee18966c7f005ef40046a5fe2bf325b2545b009867761264aa9611d184fa372ba3c5c33d9a50717210f7cec7f6dc4418a87a797eb6aaf6ab3892bd3f559547c88d8c29646c8173fad1588f52beb34ff863be65e7ec1598cfb465f270bd5532fa7035aae077eedbc846058fa19f58ffb1cf0f1863f6d33f2e5c454d18b66be766ca369af2cc9656fa34c6c10e4d4da44ce5e2370aaf60c4e130da331d3489e8f44c600246323409fdd35d11da27128c9d64be65dd3a90c1546a6eb9185cb6d3a4a9cfad0e41ea03896fd2346f745eb3563d7a79fd345b037c040e56f0677840bf9b0d295bcfa98b931464c5ce9fcaf745720deac2d8b4edeffc0fe6f089ed7c3880959fcf8e31f7b7054bc4f5c9d3ed3f66c968d0bc20b2d66c374f030f3f1965f43a98519e527caf693362412d523eeb38c8b016ff77f78f833d7513e4b5a53d5ed5143916673f822ceac9967b8788bc6428283181eaf8d99e48286aacf4f658a903e9f08659450f7f9483807c2e013a1d9d199f18886a8cb4e14d41c71e5731455a4394551281eca12a1bb6ae717f5da2949175d0f1f3d718b761dfc1099c7d9d8928c899ac8e936e69d19fcbfcfdee83b68ef8e15eed41a8ac0d54aa92d7d2ee58bb4799f378225ec9ba4709e5ce2b77208ecc85c22c64967a9ef3360c54d311b8917ceb7b432c90cc5e98de9327c1400f8ec89261b1d77d8874b0bbdd2c5eb59df415705de52b08b0e12c07fb7367c6d461c19f282d51e482cb4fb9ceb0249ac2d6400ca170fbd6c0063224179c616bb030a5c10102aa2eea92f1e6f5828590b250b09e6d1a9535c298a68160b7c281fecdd295dc3396c4e6eb3395d5a677d5fa95a732dfdef81f4346545dd1a74bb3aa9b516699bdf0a59165077ab459a5ffe0dbb3ef8afa7a8382a8441e0c36ffabbed8f93f4bbeb97e5f6a704bf63a0de9ccf8fef643ebc530a80920931002003b027014de317c42f861d98ef4fef66d232d9706e6bd263347384dadadaa43a7e106bbb21bd822d468ace171b3f04b996112135b63dcbd612b5888ec40da583ab549c340ddaf5d7406c3e99322c68874214356c1fd9b5f84348e629cc3487a901d1b7a2fa531b1509ac1c93de3da9f1c3773e3a2aba2b29d2419f240ae6d24ed9f14bf0b9b0f1e740a2db06dab64d6386f950bff4e4c94160ef4b832bbde3af4937b7528658b5c16a51cb22193fe99385721ce5b048d9338e289dcb40683140c413eca52c8e4b64b306f47569477379c864cfb3aa3e349262407d3935ab9a0916eb0f6db2be71a7eb8f9968dfac44995d5bff8ef617fceeaa448f5e5f8d4b39e3512fe7ae9ee1d8a0d5912b6148969ab0325f3f76e2340fbd67ce156bdf638140b3ccdb08e5049db15957915cb05db8901249b10c59cc5c3ff836290e3334eee2df387e44c57b4d6198c3749f5dc57f6c3de115ced6b43cbddd762b58f1fb40b2baf3b381febdc073142e30d2e9a1a69e8d86314221e540f195509d223b206173dc5406865d8064817c30c284c034035a63190ab86df3bae4168c58e01d2251748fd5d9d610024129e83a5730fe83cf0918790e6854ab765c78649b91c06655f0cb9e26d8432df78bbadd99583b6a8afcf177ed6f339e08c0b36a16c6d31d8a24cb6f2bc3ba58d7711b6f8b988dc3e3144be619548457d4f40509f17eeb186cb93a2928ecb951593d1907c8bbb9f4c8999caba3059c8e73dce54ad6f87bcd51d559f7759902b14e68d3b845c0b179b38f4e6f0bd3a89cbcd5ebed9972102048647da1eda5c8456442369f4ae871d4037ba26f27d27371ce57e23adca5af8dc93f934f2ef8d69ad3b2db66657b3868dd839c2b522f5461f24407ef091b77242fc70a48b7eec45f3bcbcfbc6bdc36e4b67295020a345233a32a0a0af4d03a53ef67e69716d5ae35342722afbe7558946475a9ebf5b39c18558a0011f68bc8a78590b0cb63618379a512790c42d94bb239dd3ef5b8d1036cf0391aded8802a7a447c38f231ae611aeeab9bba44cd14369473758b64108d0bc9b6bc9e9b497c2d1d2acbae7c620a55c226cf371331688eaddec61fe961c5fcef71dad45820ed0ac8dc7641d82150f1318ac15aa41e7be585b6a50da1b3cd95239ee61cfde15aba80ae8ebc21ba4540883c6f44cd35b6b97da4640c97f5a2b6efa8d184fec823abc754ab8a0db6c45c2293e90d9c154c4a3e0b9ec2b6113ce6583b80f0d234dec9a9815067244733e2134b9ba93bb9692fb44200bb5501bb109f2401e8baaf0115d795bb0346dfafaf953bed8e9a52a5b9b02d490c55fd89daf311ad5e08b070a9571f696d6df4715c8b69b840e4e03d6f361326e20d9546c47b3a63163e7df9bd260621358c166177ee7c69ed63a8c43dd4a78543aa9f922c0ef527f4aa61ff65bb14595f518412ce25a1e103df89cd4b363593da16c11d80a23a9b5ad8e3a7be8f697cecf82c8fbd889a4f743c839b67f7ba5453b10bbf59b1e4f4e821872c061a4125c0c15c1ca5164efe61a58bb54dcedc849800a6021a448d4660c3b85e2362b7cd8ce95156fbf408a09a30a8ccfc3554004e9f9a35382907eec00617e2ae1f8803146bc8c28b4f3bf3c6b183ae9248e7f05c4adce3e0b7ff29252b5be9b19431e3fe612d471f52c5c34cc12c83049189f4d2e5ca516df78766ba3449d07ef9436c68052c986d9dde8802c931194e2ce34acb8cc26663a09348b15c6c145d26306bded0d1f482803ae6dee26562b03fcb183b69ee4a0491e8776ecdadfca395cb4eac2948d4d64321a4e669f2f663eb54f05f12ed9c685835c3e79f982152dbe701073b9a4ab2932b46ee2424a5e18bbe5f25ce0b898ff6937927f4670defe430ac86021226ae055daf39b535cdc0899fcc99d15e67d66bd2dd89bb21b8d2689a8af10a1b0bd44103c469922c36fc0228d7b6febf5e366dceecf8bb1db385c8ab95d86ff09b76c2fa6282de81fd6864c495a4c8295df61a2548e1b81c3e3f30d7a41216801d6c2d1743f66ae2055756083e8bf403d436b8244ac214f4d84a693d13f299ba267401d094f2df70840e8a980622794212f0992ecf5a47980ab2cf7d5a6f12b0a489af3c3c847ac59bc89f36fbb0e08bf283b68213a17de38b3a45eade6f0b198def408f7711c16367bcc0ded794a9a323c7e7f07fad96ea9c4d7344c26e43844a27c21076b8d7cd07677602d91eac825eb5fd0631755c2dd1dbf7bce3eb3c3f7377fc6080ecd0b894e29769845725943e25932d4249abb4ab78d4e2ff2e2df42c8d884cd6bd13886cef080c6491c217abae0eec6e9d4d49eab6657f15cfd38e6cd6d0bd33198c4685ab302d0f46e42f4a5d5bb7d2840a0a8817b98a856700d4de74351896fe7d7d5a0d1bc57fb4c828aa51f9637807aeb905780f239527ed4affd83f68be8b7ad1e10d9e797ba39cdee24f7be0a0ab0ac22ea3968dac61eb4bdd522c9ce570edf63a439abfd9954bf6a16c88d86157d05477200a83255cde279b454979cee4de00e81cb44acdc4295c877566a749ab5b91d250f03d46ecc14210c196700338eea028c930ce104f20a9e7fabb0ad1d314ec1a2d97d1d1b9e09114dee0e3e513eacede01971ff85dc98634156073df4e8acd6c3aadd615adaffa7a81573813bc4ca21886ddd532021bba5c84b34c34665534db48d61903a03c1cca4ed955ca92c1e33b7664b494e3db6d1e637a49e537808a2669ebeca301691acd4fab0af197b9c7db01b7862466b568ab3a4712a25210264fb297a6b679dfc3fceb65bddd1a23d5b507a0d6da83d73b716d971c5179a92e57b9b93451eb943845a549de737f2d082a83682c32649b4941e787758ead9d2c256b2b4ed1e0255952ce83cccecc39e5bbdd38490f1960b26e5379943be3d9a64b5149c84d577e5fd099560baa292befa06ce9065fb03ed432a9e055ca4ad0e952f8368b3d230fd5239726f79f4c98a0b4a9648382b245d324cb61049562f765f923fc657ef36747658494d78590a1e27a2d09856acf50c3b26271c6d5aa96e8ff9bdb9043859665e21ea53a050c335cac414bbf27b0328ac2c7450acb26b093bf232358afd1135ee50ac3fb26b5f0256ccdd37033c8a59740607cfd549d4c6540afe4a6b4425ae1f633872dcfb5da8d0547cf0c4888817b71fbc7c45b2a641e9c1a76b6a6be124402422ada35edc02ed997d6b87b361aee95a16d2c528d89a52fe40dfd83434969bd86f02e63fc1ae72941209af39a08cfbb4c320bc47d853f5dbaf0cd60ec54608aadbc382fa6b5cab3e9cac57bea26609f4c79f6a6b4eb4a9336fa95783b0c0c366f36d5d6b8310b3cfdb800207919a131bc7f984f7fa11fd0bf2c89e060e9d1286e453fe97363ef72bd6eba29a85ffeccdc3bee72e12284333a5a40622c01619558d2750fc45abfa22059ebdf743f8e50ad29770d19f84d8a34232d6918514769b3bb2a1ea5e59e9556332ba669675764458e9349a1835c501a93e91dd3b31018979880a9913f54ec1e8526b8cffcb776b97fbb9424faa5c5eb60d2ac74955bba4b5182571d0d9f84f0df1baa722b20a78c9c0011c667f688b58489c9e450d83e40ac5eb41c5564b6d76a226448abe4a3f499927074125aa9c0e7e704c36df5bb110a0f15f8433a470e81db414827d5ce21ca1da1c8d51d746d1e1ca110127c15e92afd75d3cd05ce0b632cfa03745de3cdd4b57373d46676583c89f045c26c6fc5793e5489555ced08f83ba351135834a2028113c319af30cc85bc01a7f8208822d7d607aed0d2e12c80aa009100441b75beaccfe0adbda7e8bb870edf4963158794c8c3a5baacf6eec7b5efaefb7602dab8409d161beeb281cba21f1da0ccdc092d0433fb940d79699ffeb87ea775829a6e7e3b308a2ee0b7aec8ac5f35eed61be374c7c77196f7119a8882deff68230f461cb917b0ccb2b8597efcbdd1003b7b77b2c601ebd4b45c35b8426f7b9138ab3df0ec00819604ab8e1e64cf2aa2282b1269585af127a268cd207f964edff172e555398a16df44bdc52889538c3a27f8fbfffb61f7aeb55b259952bbfea81d73058d8b0f78ece9dc08e660437d21d4e3ec38b19e5afda7a6e33023f9158db8a1c14dabd9b8b307ddc66927f7b19df5e0da2237d98ddd890b81f1963808977d02198e8ae2e97419dbb1f8e51cad36a3424b955500fbdaab6ff8dbf028708b1f951fe43864b59b6c2368b816c98023d4480a91b3f1059e9c214bf55a7f8c7da907f79ff5568fd787d3aa022ab9d03cde551f7e3295f02c4f3aa37e4cebdd968c0f82f09eb004fbdb1a4ef3a0d426691bde3964c29ea65622f5d3ffd854053545ba1ec164495e4bef4845439c058f9438d13be7922b656db499c246ee6176a15b97e6a68e42f0c703033b699504e1f92b43054c7237199bd013d96faab47433b6b3f91dc66368706439d4ef7da3942ce8b9c1c9a9d0643fc4540e7d3f1c3821267e866cacd3e904be9f9df80381eec09eb2b0d745ff03ffb199b917a14fdd8fbfbffe8bfb0cf7023aa7183301a8a41e7097ff9f5247f8b78f7d08bbfc596a81047807cf0929677222e7e9e921b294e04088c3746d8dc19294645f1c093a21b4c5e6d92e54dd90465b11dd5d9d42af849070edff4ec63970f4088daaa33afdebb28d01df5ee043a8150ab1b25d864ef31e20c84696596cfbea92d02ea29c4a3933c41ec68aee7d68d7eea7f30d8920e14e62be42bcf856d7a58f46fdb2438b023e974f77281c5a462553627e9614504cbd3f1cae6e0fd9f7e89d9bce48946d0508616fbe542303dc542982c61d7bb4afbf3e76bf1fb2381cdc99f2175ef944dcd826aabdca2b7678db5262733c69ce504c38e7deb7adfb9b6d8bb00d8e4251e0438417ea615cde58bd76c2427b3d7a0578bbbff9fde2abbc5d60307aff0050b18176158aaedb34e283886378ff798b4f74e0a0c95d64271f1916280dd247304d9201c67f5e2640d9706add8703cac81795a0190107e2bb2941ed13738595da1c86ba0f68e2283a435cb5f162c74071a13dfe2266d05abaef080dd6b1dade115e883e04f0bb4be4d91f535ae6f822b02e814e65d2b7807d199a23d3f26209f6c9f93602a3a93ccfdebb5f8161b7928059674e15820d1848a980c8d1af5a73aadc5c402fbb6e730ba51227913ca27f0d78d331d6325d0a7926c238296b2a22b10a69cdffeb087dfe175511ed8e2cde8d7dae140e4ce92f892b129d9940e4a30b19f822ef7611b8750eaea8e55502604b7d2358c09a217af8be6c86d67cf6ff6130c971c9765d56631fe6224fbe1e833d497b534fbf6b030af93691f59295279aa1bdfb5d5d9d4668d5aea70e2b8fc117df0042e91c7e6225f27329727ed6e14a87c7943c040dfee4e5c06a20251c39a45ab4865951b0daefb9c05571fdcc21d1761945bd2b8047ccedd6f1e708646fbe61e75bb2728e8cee893d7e6f642119e786155a6cbab057d6d83b77716145119e974ad7355179d2adc3d748fa249cb58e32e6791d646240c05da4427b2f359976c8fd1486c604cb7ee647e24633d8fca8314cf1f85110ca6351156a2b26e44b040f7d2810acd36f45a3969c1fafd1a7e0bc14fd9b26593375be8e750c3f6534ffb85904d15d75fba05dac4a673de97f7543ee931724cd35474cd7ff5cf3e8abaf206f3030e92895633fa9d8499ea763601560260109dad18bd64b990531fc5377e6eaa5da050b98e1c6515ea48c7de1a15b63283d4a694cbad379356bfdac50e6c343879e29f6b9ab425600d51f257ceb35d0ca00f83cf5bd734223de716747614666ba1f1a8fa756e5f3ff0fc94fa4bd4073bddb0098cf565ee40af5732ee9218d262e5b64ad6b8118c54eeaf7072f2e15514a401779b425fa89d8abb1750e56cc3108dffdcf2d3fd86b8af4560d56f7ff0702154211f9949e3992d93e66892b297fa2d4bfe18de3fd74e96c9d30eb14fd458fdbc9e9a34e00f3280dd732520147fa2a8fa83e91dd0687501466a300015bf888c03fc08190c2753d7719acf6f84885c4c5642f466c1984f15a7716a9b608ee5f1b395726bcc8519766667d24d11e396e62ea39640c9e73e4e9e9e5076d7019ca1bebbd7097807f46b3b6fcb96ed4b433b25ec551fb176a5fa252ed1d81b0350cfdfb8069c9916495bef3a262b6668910896c0b37eee40547c663a901e92f41b417ac50e88d058d021a8f9a5783bd936cca4962bec1c9886689cc547970f9215232596392515182e563f720bb79d29baaabf0e2697de6500bc677e346847011ee3450358c0b16ca528368b5cbb8df5ab974a3cef072d20c9906fa585e0f3083ec6d8507b8561f64e65aa1aecf825fc47ad1459c87771549fd5c9a9cc094e7b1179ee1e90eff7158f28f59f029d90e708f4ec50b4f67d8b4bb7140065528354a7e25d63e92977183a0284ec22aa923210f0bfea89cca53547137381e5de0f60bc484bc2daf129b0380244f1ed4bfb674eb2791e76dce33cae684ad36620d5d67cb587f840caed316b7439b0e8c3de0e065e62680f3997369be3466670278168c9a1a644d870e3a8d0a79b2b720e8c3c51bb9133532beee64319e98714bb2e6d5c0b723962d923b0ef454361d4b3cb470bf8c39031ed4a75267f499741be15aacac92d8e6afdcb01a2e7d2dbf549ceb2a2108c4079c620f05ca1bd31d631c2c8d35ca0d73155f56ed020c25e389db356edf510ae088d11b5e4fed51d0dce4d3aa04924b09c28200ede5bec1a8f38cc5f081055e0f28d75afc4d588ca0e828d00085d150beafdda17b8df9e7d9218ea7d81f2e076412901c5ae04d6929d717fea2fcc8e5a1e69dbd7b5258799a2fa5eb108b6cc35dfab599fb27e6d75f1030b83f452af8137830337141f031942eba83123d3f87b5f01623d4613e5a44b4952c300baf3d4d3dbbfb0ad024a19b3810a174ef8453d85a25822f66e45eba2490f29de1077683ccc32e3517f88b51e010672a982f7c8591450c9ab1573143aefb61c17ebb0c92dcb0494d116b970c2a827a6b3608ae10d583d1f7d092263fa873de9f31cd59bc9491ff012059b63a9120af89477f2ccc34eee7bd66de60af64730c879128b49d31da6400c2471e0d5abf707e560574b477b8e20ca45d92182d639eb434e14aea1a3f91ad8fb60e4859b77389753990513181ea3a82884235e8520294359435cfba220502b591fc28ac36ec697442657d290bd7aad7fce53a3f1766f2bf7d55c24d7c0e9c7a71d6f1282ea1478e0a36378b50e4fee281f686bc53f50138036e2a5d6199d40caff084fde7b63b3c0a47da0791107c3218330f7c2e2c7609aba202fae5290243b6033379eb15edc572eee452008e04c9b53efd5f3d88327317b38934745bc3de4c55bd818febc7a7953bf03c4029f77177c2a974310f0485aa46252f1000dc71934947287c38ea5854f29c7b82f630afb8caf1fd880670307b155a6e7feddc019cfbbbdc18f3bc03da3bd371d93ccbf56bcb39eea55c2d113efc148127c30089d21ce6a5088dbfbcf8f8d75c19456bc962c371548634a95382acb5a0886efc46a87bdc111dc0d1e54084cea0d58054f00762c91d7fe0f0fbcf4c280f29f9cd5999a5e8c6f507f8080d7c7ea9a8685be50722cf1a082f3728dec8d6152cdc72f8da6b1805643c042f4f6780ba79cc8a2165d9d7acec8ab2f421bc3e77b51c62c4bbb262b5674ea7d2dcf9acb894d050e91b052364322a5b08bd9667249571c004fb495da7e24fc5620adda3af6848ccf238911a52bdbff766e4e279ac274afa2c2302faba25b5fe98d972a04aa13f77c0c05d7dd82b0a19f1ded8cf5f99c80e392b0aab1264a29e9fbcf0b69f6b0a9f2332e09ab74dea7277106d0883bb264e279c67e5bc69009225bf4fd1a8532f9392a011b55a73a7cf8d16a59d695b2a65b57fad64a2041f8c28804ee1a48845c5dab757d04f1d95520aa9ddb69904d6529c0e14bd789dfe37067073b3e0e136ae2aebb1c34c55b94ce942f786be4b45f801f35f7c768d91a460b92ffa57ff675f0b4b00437a07f871a8650f21b2bf7c722c1d9e860e8955fef5699ee53a5f6fe46fb9e5e17a1c69fe2538af4718b7215ad2c00c3d420589a8653ee511b809945451fb8205b19ce377c8d0253b05493c557cf2bd8ef208e8fc01beceea1acca38d025f328f28d69bcfaa3adc6d9573a3832dc3f3c758fe08cf9cd0c32acfddae81b3682869e8aa9725b64336252aeb2ee8eb78f0721aa3158217a3009948adb297c5ea45ec26cb6d963c7be47ee1b93fa136ebe73a21936df0148fa311206f8bca2e80719aeca8745ff74ddaad5182644762c66333f942d9a93c467d5f9fd5d0dbbe57480362d4bb0f760294f4eba3e1b08047d256dbda157635d21a43aff3a71f6ad574b402bb36e5270d7ed082c6fbae07771721513ae9ddb22d23b00733046c898ee6ac05ef8a51ce41919e1f241cb98e0592ace68214620ba1a748ef81131661f58f1635713ca2873e150a3e848c8d2ebd039769fda112b73050efa4d1c35dbb46ca5a7b7ccbed1dcded36af272f6838b4c1e7e6778e7e9ca3d794f275d49c9e32e768097349118d2337e7c031ada38d0cc5c04c286ff93083f6d58d73a821118c93432fda9a8c76fa2cbcc093a7decac8e4f001ecc9f67faf1c2f102120f0618469cf653bbd5fcefd4ef2bae86dc4f5393b840f9f47140cf7f46a186c21878a43612a71d3b540b9994f010ab623f878264cf46c7366d0bec5d43d481b47846091fd3cda73a9a28ceb7f839eca695c9f084a16c812475f6575ef2368c88cc6655f47663ef69ce4779fe3ccc4dd85a07a9e4c6f39f42690d231f5727f45c247a53fd8df029fcefda4f328658435892519c17205a3c715ad6bb7387d09a5e387c83f008daf626f5977c66203af1143ef7b59ccd8e3c17bb156bca317861f0b9f222ea63c044075a3a74beaf05c23d0a75caa60397d831bbe507234fff154960faf0f02776d3f9038c955bf0c1ec9c92523cf0b855c18d6ac3b35d437796420ba3dfd581dc6adac64315c1cb1a2c3a45ec4655bb2bd6e0b4a3082281ed0697a213d1d93142e96b4fd57431d2f4547451d008ab58bcd9765ccf3ca3297becd5de9e2be0263cfca09935c9334b5e687bc7e7057dc2ed03873be22200c9fe32a9497dd00a336cf4c723ead302340b5cd1fef8cd88330a9089fc93af4ef739295b94407b291bf33f4f39c936736e1166106428f8796a4b92805f4dfcf46d8692b54e40a9e8584c0eaac4caada87bb33f553eafeef5051b889402176ab766936a38ddd7e5205d2c87e133a02e84ab24ba2d889a4c4db8cbe18b271455e84da716f4a32acdbc0a5aaba25a2ec757c73847dd1c4ccb2967c651e5257692a4553dde227846bfe2977021805f46a287c835ea8dc5", 0x2000, 0x0) r3 = syz_open_dev$sndctrl(0x0, 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r3, 0x40045542, &(0x7f00000000c0)=0xfc) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x2201) r4 = openat$btrfs_control(0xffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$SNDCTL_SEQ_NRSYNTHS(r4, 0x8004510a, 0x0) write$binfmt_misc(r2, &(0x7f0000000240), 0xfffffecc) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000800)={0xffffffffffffffff}) recvmsg(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x20, 0x0, 0x0, 0x200000}, 0x1f00) fcntl$lock(0xffffffffffffffff, 0x22, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r5, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) memfd_create(&(0x7f00000001c0)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0\xbc]\x12\xc0D\x9f\x80\x8f\xfe\xf2\xc2)\xccm\xacz\xc1\xad\xe4\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x0) ioctl$sock_SIOCADDRT(r4, 0x890b, &(0x7f0000000580)={0x0, @ethernet={0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}, @qipcrtr={0x2a, 0x2, 0x4000}, @nl=@proc={0x10, 0x0, 0x25dfdbfc, 0x400000}, 0x9, 0x0, 0x0, 0x0, 0x36, 0x0, 0x7fffffff, 0x400, 0x8}) ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 1.835761965s ago: executing program 5 (id=6087): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) r1 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r2, 0x5) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r4, &(0x7f0000000100)='\x00', 0x1, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000180)) sendto$inet6(r3, &(0x7f0000000080)="2ebd", 0x2, 0xe0, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000100)) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r7 = dup3(r6, r5, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs2/binder0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r8, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) close_range(r0, 0xffffffffffffffff, 0x0) 1.770746897s ago: executing program 3 (id=6088): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f0000000400)={0x0, 0x3, 0x80, 0x0, 0x0}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x2ff, 0x0, 0x7ee69d08}]}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000280)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async, rerun: 64) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 64) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x500) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) write$dsp(r4, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a", 0x10) (async, rerun: 64) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000080)=0x80000003) (async, rerun: 64) dup2(r3, r3) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r5, &(0x7f00000025c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private0, 0xa}, 0x1c, &(0x7f00000004c0)=[{&(0x7f00000022c0)='p', 0x1}], 0x1}}, {{&(0x7f0000000400)={0xa, 0x4e24, 0xffff, @local, 0x8}, 0x1c, &(0x7f0000000f00)=[{&(0x7f0000000b80)='D', 0x1}], 0x1}}], 0x2, 0x0) shutdown(r5, 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000100)={0x0, 0x7f, 0x1}, 0x8) (async) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) (async) r8 = fsopen(&(0x7f0000000000)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) (async) r9 = fsmount(r8, 0x0, 0x0) fchdir(r9) (async) r10 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r10, &(0x7f0000000380)=""/28, 0x1c) getdents64(r10, 0xfffffffffffffffe, 0x29) (async, rerun: 64) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (rerun: 64) 1.606256837s ago: executing program 5 (id=6089): r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) preadv(r0, &(0x7f00000001c0)=[{&(0x7f0000001a80)=""/102400, 0x19000}, {0x0}], 0x2, 0x0, 0x0) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) poll(&(0x7f0000000280)=[{r1, 0x9510}], 0x1, 0x9) ioctl$VIDIOC_S_STD(r1, 0xc0405626, &(0x7f0000000200)=0x320000) r2 = landlock_create_ruleset(&(0x7f0000000040)={0x1400, 0x24ce53180ec933d9, 0x0, 0x1000}, 0x30, 0x1) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000140)={r5, 0x1, 0xe35}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000000)={r5, 0xf791}, &(0x7f0000000080)=0x8) landlock_restrict_self(r2, 0xe) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_buf(r6, 0x0, 0x2f, &(0x7f0000000040)="3b745106af2fb44a747cea3726eb40db4fe51fe1410cdd70b1c8e7f299355420ff0e565e0533110b562d676001ef1f21d381505be400d7aeb79f8e9f9d432f8891c070e1dd0c87921b3cf9924962fe793e581e95f1cec3293cf0fb96190d7434aba1fde35536a45adbe8", 0x6a) socket$inet6_sctp(0xa, 0x1, 0x84) r7 = socket$inet6_sctp(0xa, 0x801, 0x84) fcntl$lock(r7, 0x26, &(0x7f0000000040)={0x2, 0x0, 0x4, 0x5}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet6_int(r8, 0x29, 0x3a, 0x0, &(0x7f0000000080)) r9 = syz_usb_connect(0x3, 0x64, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000cb8be7406d04230848390102030109025200010000000009044000000e0100000a240608000b020102000600040007000300390c2402050302", @ANYRESOCT=0x0], 0x0) syz_usb_control_io$rtl8150(r9, &(0x7f0000000440)={0x14, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0600000000000000"]}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r12 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r12, 0xae60) ioctl$KVM_GET_IRQCHIP(r12, 0xc208ae62, &(0x7f0000000380)={0x0, 0x0, @ioapic={0xeeee8000, 0x6, 0xad51, 0x71, 0x0, [{0xc, 0x97, 0x0, '\x00', 0x4e}, {0x1, 0xfa, 0x3, '\x00', 0x4}, {0x0, 0x3, 0x4d, '\x00', 0x3}, {0x6, 0xa, 0x8, '\x00', 0x3}, {0xc, 0x9, 0x0, '\x00', 0x1}, {0xff, 0x7d, 0x3, '\x00', 0xf9}, {0xfb, 0x8, 0x1d, '\x00', 0x2}, {0x87, 0x24, 0xa, '\x00', 0xff}, {0x1d, 0x7, 0x3, '\x00', 0x5}, {0x1, 0x9, 0x3e, '\x00', 0xb}, {0x4, 0xd, 0xef, '\x00', 0x10}, {0x3, 0x2, 0x59, '\x00', 0x7}, {0x2, 0x6, 0x0, '\x00', 0x3}, {0xc, 0x0, 0x74, '\x00', 0xf}, {0x6, 0x40, 0x8, '\x00', 0xc0}, {0xf8, 0xc, 0x4, '\x00', 0xe}, {0xb0, 0x0, 0x52, '\x00', 0x7}, {0x3, 0x6, 0x9, '\x00', 0x55}, {0x7f, 0x0, 0x29}, {0x2, 0x4, 0x5, '\x00', 0xf7}, {0x7, 0x9, 0xc, '\x00', 0x5}, {0x0, 0x2, 0xf9, '\x00', 0xa}, {0xd6, 0x81, 0x1, '\x00', 0x4}, {0x4, 0x7, 0x4, '\x00', 0x6}]}}) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB='(\x00', @ANYBLOB, @ANYRES32=r11, @ANYBLOB='\f\x00X'], 0x28}, 0x1, 0x0, 0x0, 0x4040}, 0x20040044) 1.492115321s ago: executing program 9 (id=6090): r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000840)={&(0x7f0000000100)=@phonet={0x23, 0x5, 0xff, 0x13}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000740)="2705020059feff", 0x7}], 0x1}, 0x894) 1.279279874s ago: executing program 9 (id=6091): r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000200)='.\x00', 0x10000a0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000), 0x560c89bb) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x20) splice(r1, 0x0, r3, 0x0, 0x8000, 0x8800000) 669.625284ms ago: executing program 1 (id=6092): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) sendmmsg(r0, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}, 0x2000}], 0x34000, 0x0) 411.908989ms ago: executing program 1 (id=6093): openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) shutdown(r0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x1, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x600, 0x0, 0x6c815, 0x40103}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x40800}, 0x4000000) sendmsg$IPSET_CMD_CREATE(r1, 0x0, 0x40880) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5c01000010000100feffffff00010000fe880000000000000000000000000001fc010000000000000000000000000001000107144e230005", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x4000, &(0x7f0000000380)={&(0x7f00000006c0)=ANY=[@ANYBLOB="400100001a000100feffffff00010000ac1e0101000000000000000000000000fc010000000000000000000000000001000107174e2300050a0000203a000000a4cdbc79a98b75010ffa18f64b31ee7feab37078dd0ef599089d6470da82d7dc0c6ad74fb712bef530ddd9513f670b3de7b66e3f65bbeedc64b64d73c93cd79a2dbdf406", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000fc010000000000000000000000000001fe0000000000000092010000000000100800000000000000fcffffffffffffff1c250800000000000500000000000000fcffffffffffffff0400000000000000ffffffffffffffff00000000000000001f00000000000000fefffffffffffffffefffffff9030000000000007e000000000000000200010020000000480003006465666c6174650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001f0002000000"], 0x140}}, 0x20000844) r5 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_MCAST_MSFILTER(r5, 0x29, 0x30, &(0x7f0000000500)={0x6, {{0xa, 0x4e21, 0xffffffda, @mcast2, 0x72}}, 0x1, 0x2, [{{0xa, 0x4e20, 0x8000, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5}}, {{0xa, 0x4e20, 0x1ff, @private0}}]}, 0x190) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) connect$inet(r0, 0x0, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x4c241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, 0x0) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) socket$igmp6(0xa, 0x3, 0x2) write$tun(r6, &(0x7f00000003c0)=ANY=[@ANYBLOB="000022f0ffffffffffff0180c200000e8100350008004500001c000000000011907800000000e0000001000017c10008907809ed9adb4ebee6cd871a4f51ff0a2b646b9dca724d5f"], 0x32) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a00)) 307.222473ms ago: executing program 9 (id=6094): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) socket(0x400000000010, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x2, 0x2, 0x0, 0x2, 0xd, 0xfffd, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x20, 0x0, @in={0x2, 0x0, @rand_addr=0x64010101}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x9}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}, @sadb_key={0x2, 0x8, 0x10, 0x0, '4-'}, @sadb_x_nat_t_type={0x1, 0x14, 0xfe}]}, 0x68}, 0x1, 0x7}, 0x4000000) 302.537638ms ago: executing program 3 (id=6095): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @empty, 0x4}, 0x1c) listen(r0, 0x5) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f00000000c0), 0x8) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (fail_nth: 20) 0s ago: executing program 3 (id=6096): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000002c0)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(twofish-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmsg$AUDIT_MAKE_EQUIV(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x28, 0x3f7, 0x300, 0x70bd29, 0x25dfdbfe, {0x7, 0x7, './file0', './file0'}}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0xc050) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$BLKZEROOUT(r2, 0x127f, 0x0) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0xc001}, 0x81) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x20}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz2\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000207d1eed2c00000000000109022400010000000009040000010300080009210000040122050009058103"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$rtl8150(r4, &(0x7f0000000240)={0xc, &(0x7f0000000080)={0x0, 0xc, 0x3d, {0x3d, 0xb1b06b31e90358f1, "898cf568b6138d7540e8323d34d1666fc0bb7ba4ef3d227c45dc0293432bf9ee301c8fae727a6354eafa3675ceeff03cb6cc7d80174247bf6b658a"}}, 0x0}, 0x0) kernel console output (not intermixed with test programs): r parsing attributes in process `syz.3.5759'. [ 1327.070657][T26329] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5759'. [ 1327.352304][ T9] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 1327.417677][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1327.465969][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1327.511770][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1327.521072][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1327.547799][ T9] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1327.592491][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 4 [ 1327.672837][ T9] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1327.711187][ T9] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 1327.729526][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1327.742694][ T9] usb 7-1: config 0 descriptor?? [ 1327.774902][T26368] netlink: 52 bytes leftover after parsing attributes in process `syz.0.5762'. [ 1327.805121][T26329] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5759'. [ 1327.901234][T26368] bridge0: port 2(bridge_slave_1) entered disabled state [ 1327.908695][T26368] bridge0: port 1(bridge_slave_0) entered disabled state [ 1327.927337][T26329] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5759'. [ 1328.158117][ T9] ath6kl: Failed to submit usb control message: -71 [ 1328.168861][ T9] ath6kl: unable to send the bmi data to the device: -71 [ 1328.177474][ T9] ath6kl: Unable to send get target info: -71 [ 1328.205327][T22039] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 1328.209469][ T9] ath6kl: Failed to init ath6kl core: -71 [ 1328.226625][ T9] ath6kl_usb 7-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1328.279178][T11912] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 1328.312770][ T9] usb 7-1: USB disconnect, device number 4 [ 1328.405747][T22039] usb 6-1: Using ep0 maxpacket: 32 [ 1328.429315][T22039] usb 6-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 1328.446079][T11912] usb 3-1: device descriptor read/64, error -71 [ 1328.454081][T22039] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1328.490177][T22039] usb 6-1: Product: syz [ 1328.500602][T22039] usb 6-1: Manufacturer: syz [ 1328.515027][T22039] usb 6-1: SerialNumber: syz [ 1328.522947][T22039] usb 6-1: config 0 descriptor?? [ 1328.531511][T22039] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 1328.716029][T11912] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 1328.727736][T26388] syzkaller1: entered promiscuous mode [ 1328.749354][T26388] syzkaller1: entered allmulticast mode [ 1328.888082][T11912] usb 3-1: device descriptor read/64, error -71 [ 1329.037415][T11912] usb usb3-port1: attempt power cycle [ 1329.312315][T26400] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5767'. [ 1329.328730][T26400] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5767'. [ 1329.343019][T26400] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5767'. [ 1329.422572][T11912] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 1329.521389][T11912] usb 3-1: device descriptor read/8, error -71 [ 1329.774568][T11912] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 1329.807784][T11912] usb 3-1: device descriptor read/8, error -71 [ 1329.944793][T11912] usb usb3-port1: unable to enumerate USB device [ 1330.021944][T22039] gspca_ov534_9: reg_r err -32 [ 1330.284839][T22039] gspca_ov534_9: Unknown sensor 0000 [ 1330.284937][T22039] ov534_9 6-1:0.0: probe with driver ov534_9 failed with error -22 [ 1331.130905][T11912] usb 6-1: USB disconnect, device number 68 [ 1331.161739][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 1331.161766][ T29] audit: type=1326 audit(1785434450.911:5111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26440 comm="syz.3.5774" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc60ec code=0x7ffc0000 [ 1331.289865][ T29] audit: type=1326 audit(1785434450.941:5112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26440 comm="syz.3.5774" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc60ec code=0x7ffc0000 [ 1331.314825][ T29] audit: type=1326 audit(1785434450.941:5113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26440 comm="syz.3.5774" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf7fc60ec code=0x7ffc0000 [ 1331.347139][ T29] audit: type=1326 audit(1785434450.941:5114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26440 comm="syz.3.5774" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc60ec code=0x7ffc0000 [ 1331.448756][ T29] audit: type=1326 audit(1785434450.941:5115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26440 comm="syz.3.5774" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc60ec code=0x7ffc0000 [ 1331.474572][ T29] audit: type=1326 audit(1785434450.941:5116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26440 comm="syz.3.5774" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=434 compat=1 ip=0xf7fc60ec code=0x7ffc0000 [ 1331.490710][T26446] bridge0: port 3(vlan2) entered blocking state [ 1331.508410][ T29] audit: type=1326 audit(1785434450.941:5117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26440 comm="syz.3.5774" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc60ec code=0x7ffc0000 [ 1331.534940][T26446] bridge0: port 3(vlan2) entered disabled state [ 1331.547707][T26446] vlan2: entered allmulticast mode [ 1331.558723][T26446] geneve0: entered allmulticast mode [ 1331.560061][ T29] audit: type=1326 audit(1785434450.941:5118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26440 comm="syz.3.5774" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc60ec code=0x7ffc0000 [ 1331.573106][T26446] vlan2: entered promiscuous mode [ 1331.598649][T26446] geneve0: entered promiscuous mode [ 1331.628245][ T29] audit: type=1326 audit(1785434450.941:5119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26440 comm="syz.3.5774" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=424 compat=1 ip=0xf7fc60ec code=0x7ffc0000 [ 1331.654014][ T29] audit: type=1326 audit(1785434450.941:5120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26440 comm="syz.3.5774" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc60ec code=0x7ffc0000 [ 1331.818840][T26460] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5778'. [ 1331.838809][T26460] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5778'. [ 1331.869750][T26460] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5778'. [ 1332.845431][ T5694] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 1333.030332][ T5694] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1333.077145][ T5694] usb 6-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 1333.103300][ T5694] usb 6-1: config 220 interface 0 has no altsetting 0 [ 1333.119931][ T5694] usb 6-1: New USB device found, idVendor=8086, idProduct=0b03, bcdDevice=6c.b9 [ 1333.135676][ T5694] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1333.144026][ T5694] usb 6-1: Product: syz [ 1333.152153][ T5694] usb 6-1: Manufacturer: syz [ 1333.159457][ T5694] usb 6-1: SerialNumber: syz [ 1333.412762][T26481] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5783'. [ 1335.689197][ T5694] uvcvideo 6-1:220.0: probe with driver uvcvideo failed with error -22 [ 1335.708292][ T5694] usb 6-1: USB disconnect, device number 69 [ 1336.720858][T26543] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5792'. [ 1337.026316][T26561] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5794'. [ 1337.474723][ T5715] usb 3-1: new full-speed USB device number 108 using dummy_hcd [ 1337.682094][ T5715] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1337.726344][ T5715] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1337.740673][ T5715] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1337.748012][ T5715] usb 3-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 1337.759667][ T5715] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1337.773117][ T5715] usb 3-1: config 0 descriptor?? [ 1338.363067][ T5715] usbhid 3-1:0.0: can't add hid device: -71 [ 1338.393077][ T5715] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1338.449637][ T5715] usb 3-1: USB disconnect, device number 108 [ 1338.664875][ T5694] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 1338.837987][ T5694] usb 4-1: Using ep0 maxpacket: 16 [ 1338.855530][ T5694] usb 4-1: config 166 has an invalid interface number: 177 but max is 1 [ 1338.870688][ T5694] usb 4-1: config 166 has an invalid interface number: 34 but max is 1 [ 1338.881498][ T5694] usb 4-1: config 166 has an invalid descriptor of length 0, skipping remainder of the config [ 1338.895964][ T5694] usb 4-1: config 166 has no interface number 0 [ 1338.902287][ T5694] usb 4-1: config 166 has no interface number 1 [ 1338.909658][ T5694] usb 4-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 1338.923590][ T5694] usb 4-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 1338.940462][ T5694] usb 4-1: config 166 interface 34 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 1338.954025][ T5694] usb 4-1: config 166 interface 34 altsetting 1 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1338.977420][ T5694] usb 4-1: config 166 interface 34 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 0 [ 1338.989333][ T5694] usb 4-1: config 166 interface 34 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 1339.013647][ T5694] usb 4-1: config 166 interface 177 has no altsetting 0 [ 1339.023547][ T5694] usb 4-1: config 166 interface 34 has no altsetting 0 [ 1339.033579][ T5694] usb 4-1: New USB device found, idVendor=0bda, idProduct=0138, bcdDevice=30.12 [ 1339.036852][ T5715] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 1339.043462][ T5694] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1339.059007][ T5694] usb 4-1: Product: syz [ 1339.063216][ T5694] usb 4-1: Manufacturer: syz [ 1339.069183][ T5694] usb 4-1: SerialNumber: syz [ 1339.246641][ T5715] usb 6-1: Using ep0 maxpacket: 16 [ 1339.284112][ T5715] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1339.317382][ T5715] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1339.343853][T26585] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1339.344603][ T5715] usb 6-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 1339.366074][T26585] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1339.379721][ T5715] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1339.390103][ T5715] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1339.417810][ T5694] ums-realtek 4-1:166.177: USB Mass Storage device detected [ 1339.442398][ T5715] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1339.517614][ T5694] ums-realtek 4-1:166.34: USB Mass Storage device detected [ 1339.559858][ T5715] usb 6-1: config 0 descriptor?? [ 1339.590407][ T5694] uvcvideo 4-1:166.34: Found UVC 0.00 device syz (0bda:0138) [ 1339.608186][ T5694] uvcvideo 4-1:166.34: No valid video chain found. [ 1339.630246][ T5694] usb 4-1: USB disconnect, device number 83 [ 1340.119999][T26621] IPVS: Unknown mcast interface: $ [ 1340.182783][ T5715] usbhid 6-1:0.0: can't add hid device: -71 [ 1340.217412][ T5715] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1340.236677][ T5715] usb 6-1: USB disconnect, device number 70 [ 1340.560607][ T29] kauditd_printk_skb: 15 callbacks suppressed [ 1340.560621][ T29] audit: type=1326 audit(1785434460.311:5137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26627 comm="syz.2.5803" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704f0ec code=0x7ffc0000 [ 1340.642704][ T29] audit: type=1326 audit(1785434460.311:5138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26627 comm="syz.2.5803" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704f0ec code=0x7ffc0000 [ 1340.677506][ T29] audit: type=1326 audit(1785434460.311:5139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26627 comm="syz.2.5803" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704f0ec code=0x7ffc0000 [ 1340.704922][ T29] audit: type=1326 audit(1785434460.301:5136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26627 comm="syz.2.5803" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704f0ec code=0x7ffc0000 [ 1340.746400][ T29] audit: type=1326 audit(1785434460.351:5140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26627 comm="syz.2.5803" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf704f0ec code=0x7ffc0000 [ 1340.921023][ T29] audit: type=1326 audit(1785434460.351:5141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26627 comm="syz.2.5803" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704f0ec code=0x7ffc0000 [ 1341.072153][ T29] audit: type=1326 audit(1785434460.351:5142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26627 comm="syz.2.5803" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704f0ec code=0x7ffc0000 [ 1341.172769][ T29] audit: type=1326 audit(1785434460.351:5143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26627 comm="syz.2.5803" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704f0ec code=0x7ffc0000 [ 1341.270899][ T29] audit: type=1326 audit(1785434460.351:5144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26627 comm="syz.2.5803" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=304 compat=1 ip=0xf704f0ec code=0x7ffc0000 [ 1341.274486][ T5715] usb 6-1: new low-speed USB device number 71 using dummy_hcd [ 1341.297712][ T29] audit: type=1326 audit(1785434460.351:5145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26627 comm="syz.2.5803" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704f0ec code=0x7ffc0000 [ 1341.544903][ T5715] usb 6-1: Invalid ep0 maxpacket: 16 [ 1341.695808][ T5715] usb 6-1: new low-speed USB device number 72 using dummy_hcd [ 1341.864516][ T5715] usb 6-1: Invalid ep0 maxpacket: 16 [ 1341.880787][ T5715] usb usb6-port1: attempt power cycle [ 1342.234784][ T5715] usb 6-1: new low-speed USB device number 73 using dummy_hcd [ 1342.296843][ T5715] usb 6-1: Invalid ep0 maxpacket: 16 [ 1342.446841][ T5715] usb 6-1: new low-speed USB device number 74 using dummy_hcd [ 1342.501640][ T5715] usb 6-1: Invalid ep0 maxpacket: 16 [ 1342.527233][ T5715] usb usb6-port1: unable to enumerate USB device [ 1343.170319][T26682] geneve0: entered promiscuous mode [ 1343.183702][T26682] geneve0: left promiscuous mode [ 1343.217631][T26684] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5809'. [ 1343.260243][T26684] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5809'. [ 1345.006504][T26707] program syz.5.5812 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1345.017082][T13514] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1345.034199][T13514] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1345.047627][T13514] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1345.062712][T13514] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1345.081181][T13514] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1345.147824][T26707] usb usb1: usbfs: process 26707 (syz.5.5812) did not claim interface 0 before use [ 1345.178889][T16399] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1345.243192][T16399] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1345.546329][T18029] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 1345.764514][T18029] usb 4-1: Using ep0 maxpacket: 8 [ 1345.782431][T18029] usb 4-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 196, changing to 11 [ 1345.806229][T18029] usb 4-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1345.828015][T23949] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1345.844228][T18029] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1345.856084][T18029] usb 4-1: New USB device found, idVendor=20bc, idProduct=5500, bcdDevice= 0.00 [ 1345.865276][T18029] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1345.873543][T23949] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1345.886535][T23949] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1345.898753][T18029] usb 4-1: config 0 descriptor?? [ 1345.905001][T23949] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1345.918450][T23949] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1346.355758][T22039] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 1346.590572][T22039] usb 6-1: config 1 has an invalid interface number: 7 but max is 0 [ 1346.632764][T22039] usb 6-1: config 1 has no interface number 0 [ 1346.654288][T22039] usb 6-1: config 1 interface 7 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1023 [ 1346.668380][T22039] usb 6-1: config 1 interface 7 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1346.689806][T22039] usb 6-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 1346.740829][T22039] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1346.801365][T22039] usb 6-1: Product: syz [ 1346.833993][T22039] usb 6-1: Manufacturer: syz [ 1346.849010][T22039] usb 6-1: SerialNumber: syz [ 1346.866025][T26751] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1346.893699][T22039] usb 6-1: Expected 3 endpoints, found: 2 [ 1346.893930][T18029] hid_parser_main: 13 callbacks suppressed [ 1346.893949][T18029] betop 0003:20BC:5500.0040: unknown main item tag 0x0 [ 1346.916793][T18029] betop 0003:20BC:5500.0040: unknown main item tag 0x0 [ 1346.923727][T18029] betop 0003:20BC:5500.0040: unknown main item tag 0x0 [ 1346.937117][T18029] betop 0003:20BC:5500.0040: unknown main item tag 0x0 [ 1346.944160][T18029] betop 0003:20BC:5500.0040: unknown main item tag 0x0 [ 1346.952272][T18029] betop 0003:20BC:5500.0040: unknown main item tag 0x0 [ 1346.959510][T18029] betop 0003:20BC:5500.0040: unknown main item tag 0x0 [ 1346.970051][T18029] betop 0003:20BC:5500.0040: hidraw0: USB HID v0.04 Device [HID 20bc:5500] on usb-dummy_hcd.3-1/input0 [ 1346.981500][T18029] betop 0003:20BC:5500.0040: no inputs found [ 1347.146943][T22039] usb 4-1: USB disconnect, device number 84 [ 1347.155647][T13514] Bluetooth: hci1: command tx timeout [ 1347.382164][T26733] bridge0: port 1(bridge_slave_0) entered blocking state [ 1347.402196][T26733] bridge0: port 1(bridge_slave_0) entered disabled state [ 1347.424806][T26733] bridge_slave_0: entered allmulticast mode [ 1347.462428][T26733] bridge_slave_0: entered promiscuous mode [ 1347.511013][T26733] bridge0: port 2(bridge_slave_1) entered blocking state [ 1347.547123][T26733] bridge0: port 2(bridge_slave_1) entered disabled state [ 1347.591248][T26733] bridge_slave_1: entered allmulticast mode [ 1347.613803][T26733] bridge_slave_1: entered promiscuous mode [ 1347.908912][T26733] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1347.971592][T26733] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1347.975094][T26777] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5822'. [ 1347.981257][T13514] Bluetooth: hci3: unexpected event 0x03 length: 12 > 11 [ 1348.035157][T13514] Bluetooth: hci8: command tx timeout [ 1348.203095][T26733] team0: Port device team_slave_0 added [ 1348.213373][T26733] team0: Port device team_slave_1 added [ 1348.224178][T26748] bridge0: port 1(bridge_slave_0) entered blocking state [ 1348.231932][T26748] bridge0: port 1(bridge_slave_0) entered disabled state [ 1348.241289][T26748] bridge_slave_0: entered allmulticast mode [ 1348.273850][T26748] bridge_slave_0: entered promiscuous mode [ 1348.384051][T26748] bridge0: port 2(bridge_slave_1) entered blocking state [ 1348.408439][T26748] bridge0: port 2(bridge_slave_1) entered disabled state [ 1348.422267][T26787] binder: 26786:26787 ioctl c0306201 800004c0 returned -14 [ 1348.451133][T26748] bridge_slave_1: entered allmulticast mode [ 1348.474336][T26748] bridge_slave_1: entered promiscuous mode [ 1348.589220][T26733] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1348.621048][T26733] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1348.664236][T26733] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1348.709298][T26746] sg_write: data in/out 568832/136 bytes for SCSI command 0x0-- guessing data in; [ 1348.709298][T26746] program syz.5.5821 not setting count and/or reply_len properly [ 1348.798667][T26733] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1348.823317][T26733] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1348.852707][T26733] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1348.875875][T26748] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1348.894248][T26748] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1349.042112][T26733] hsr_slave_0: entered promiscuous mode [ 1349.050185][T26733] hsr_slave_1: entered promiscuous mode [ 1349.060533][T26733] debugfs: 'hsr0' already exists in 'hsr' [ 1349.070366][T26733] Cannot create hsr debugfs directory [ 1349.087982][T26748] team0: Port device team_slave_0 added [ 1349.110036][T26748] team0: Port device team_slave_1 added [ 1349.210102][T26748] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1349.227392][T26748] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1349.234882][T13514] Bluetooth: hci1: command tx timeout [ 1349.260283][T26748] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1349.262542][T26748] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1349.283141][T26748] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1349.312832][T26748] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1349.365002][ T9] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 1349.472848][T26748] hsr_slave_0: entered promiscuous mode [ 1349.479796][T26748] hsr_slave_1: entered promiscuous mode [ 1349.518280][T26748] debugfs: 'hsr0' already exists in 'hsr' [ 1349.528355][ T9] usb 3-1: config index 0 descriptor too short (expected 25183, got 144) [ 1349.549629][ T9] usb 3-1: config 116 has too many interfaces: 121, using maximum allowed: 32 [ 1349.560007][T26748] Cannot create hsr debugfs directory [ 1349.576952][ T9] usb 3-1: config 116 has an invalid descriptor of length 0, skipping remainder of the config [ 1349.590824][ T9] usb 3-1: config 116 has 0 interfaces, different from the descriptor's value: 121 [ 1349.606900][ T9] usb 3-1: New USB device found, idVendor=2a39, idProduct=3fd4, bcdDevice= 0.40 [ 1349.617120][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1349.625284][ T9] usb 3-1: Product: syz [ 1349.632996][ T9] usb 3-1: Manufacturer: syz [ 1349.641571][ T9] usb 3-1: SerialNumber: syz [ 1350.030414][T22039] usb 6-1: USB disconnect, device number 75 [ 1350.118240][T23949] Bluetooth: hci8: command tx timeout [ 1350.149503][ T9] usb 3-1: USB disconnect, device number 109 [ 1351.314697][T23949] Bluetooth: hci1: command tx timeout [ 1351.645343][T11912] usb 3-1: new full-speed USB device number 110 using dummy_hcd [ 1351.711877][T26835] bridge0: port 1(bridge_slave_0) entered disabled state [ 1351.771507][T26835] bridge0: port 1(bridge_slave_0) entered blocking state [ 1351.778824][T26835] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1351.945927][T11912] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1351.961747][T11912] usb 3-1: can't read configurations, error -71 [ 1352.058251][T26847] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5836'. [ 1352.125635][ T9] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 1352.200852][T23949] Bluetooth: hci8: command tx timeout [ 1352.285367][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 1352.293164][ T9] usb 6-1: config index 0 descriptor too short (expected 51443, got 18) [ 1352.305334][ T9] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1352.316230][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1352.324855][ T9] usb 6-1: Product: syz [ 1352.330635][ T9] usb 6-1: Manufacturer: syz [ 1352.336664][ T9] usb 6-1: SerialNumber: syz [ 1352.349555][ T9] r8152-cfgselector 6-1: Unknown version 0x0000 [ 1352.364151][ T9] r8152-cfgselector 6-1: config 0 descriptor?? [ 1352.570510][T26858] netlink: 'syz.3.5837': attribute type 2 has an invalid length. [ 1352.685880][ T9] r8152-cfgselector 6-1: Needed 2 retries to read version [ 1352.727839][ T9] r8152-cfgselector 6-1: Unknown version 0x0020 [ 1352.742711][ T9] r8152-cfgselector 6-1: No union descriptors [ 1352.815755][T11912] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 1352.999470][T11912] usb 3-1: no configurations [ 1353.013372][T11912] usb 3-1: can't read configurations, error -22 [ 1353.045014][T11912] usb usb3-port1: attempt power cycle [ 1353.397444][T23949] Bluetooth: hci1: command tx timeout [ 1353.405325][T11912] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 1353.449075][T11912] usb 3-1: no configurations [ 1353.460925][T11912] usb 3-1: can't read configurations, error -22 [ 1353.605520][T11912] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 1353.648500][T11912] usb 3-1: no configurations [ 1353.653460][T11912] usb 3-1: can't read configurations, error -22 [ 1353.678379][T11912] usb usb3-port1: unable to enumerate USB device [ 1353.994044][T26733] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1354.043988][T26733] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1354.060707][T26733] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1354.085763][T26733] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1354.105950][T26733] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1354.150077][T26733] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1354.178091][T26733] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1354.273409][T26733] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1354.283287][T23949] Bluetooth: hci8: command tx timeout [ 1354.742792][T11912] r8152-cfgselector 6-1: USB disconnect, device number 76 [ 1354.950208][T26890] FAULT_INJECTION: forcing a failure. [ 1354.950208][T26890] name failslab, interval 1, probability 0, space 0, times 0 [ 1354.964954][T26890] CPU: 1 UID: 0 PID: 26890 Comm: syz.5.5840 Tainted: G L syzkaller #0 PREEMPT(full) [ 1354.964986][T26890] Tainted: [L]=SOFTLOCKUP [ 1354.964994][T26890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1354.965007][T26890] Call Trace: [ 1354.965015][T26890] [ 1354.965023][T26890] dump_stack_lvl+0xe8/0x150 [ 1354.965055][T26890] should_fail_ex+0x40c/0x560 [ 1354.965082][T26890] should_failslab+0xa8/0x100 [ 1354.965112][T26890] __kmalloc_noprof+0xfe/0x720 [ 1354.965137][T26890] ? rcu_is_watching+0x15/0xb0 [ 1354.965155][T26890] ? tomoyo_realpath_from_path+0xef/0x640 [ 1354.965175][T26890] ? tomoyo_realpath_from_path+0xef/0x640 [ 1354.965200][T26890] tomoyo_realpath_from_path+0xef/0x640 [ 1354.965229][T26890] ? tomoyo_path_number_perm+0x219/0x5f0 [ 1354.965257][T26890] tomoyo_path_number_perm+0x246/0x5f0 [ 1354.965288][T26890] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1354.965323][T26890] ? __lock_acquire+0x683/0x2cf0 [ 1354.965361][T26890] ? hook_file_ioctl_compat+0x1f0/0x5f0 [ 1354.965398][T26890] ? __fget_files+0x2a/0x420 [ 1354.965427][T26890] ? __fget_files+0x3a2/0x420 [ 1354.965450][T26890] ? __fget_files+0x2a/0x420 [ 1354.965478][T26890] security_file_ioctl_compat+0xc3/0x2a0 [ 1354.965510][T26890] __ia32_compat_sys_ioctl+0x139/0x950 [ 1354.965534][T26890] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 1354.965555][T26890] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1354.965578][T26890] ? __fget_files+0x3a2/0x420 [ 1354.965607][T26890] ? fput+0xa0/0xd0 [ 1354.965630][T26890] ? ksys_write+0x242/0x270 [ 1354.965662][T26890] __do_fast_syscall_32+0x23e/0x6f0 [ 1354.965686][T26890] ? do_fast_syscall_32+0x33/0x70 [ 1354.965707][T26890] ? lockdep_hardirqs_on+0x7a/0x110 [ 1354.965726][T26890] ? asm_int80_emulation+0x1a/0x20 [ 1354.965744][T26890] ? do_int80_emulation+0x29f/0x550 [ 1354.965774][T26890] do_fast_syscall_32+0x33/0x70 [ 1354.965796][T26890] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1354.965817][T26890] RIP: 0023:0xf7f260ec [ 1354.965834][T26890] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1354.965850][T26890] RSP: 002b:00000000f53e650c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 1354.965870][T26890] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000002285 [ 1354.965882][T26890] RDX: 00000000800000c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1354.965892][T26890] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1354.965902][T26890] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1354.965913][T26890] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1354.965939][T26890] [ 1354.967149][T26890] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1355.010672][T26733] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1355.278472][T26748] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1355.337221][T26748] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1355.413965][T26748] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1355.439852][T26748] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1355.456944][T26748] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1355.488782][T26748] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1355.548499][T26748] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1355.597070][T26748] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1355.661395][T26733] 8021q: adding VLAN 0 to HW filter on device team0 [ 1355.753517][T16399] bridge0: port 1(bridge_slave_0) entered blocking state [ 1355.760757][T16399] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1355.871835][T12846] bridge0: port 2(bridge_slave_1) entered blocking state [ 1355.879087][T12846] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1355.924633][ T5627] usb 3-1: new low-speed USB device number 114 using dummy_hcd [ 1356.074599][ T5627] usb 3-1: Invalid ep0 maxpacket: 16 [ 1356.185444][T22205] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 1356.224582][ T5627] usb 3-1: new low-speed USB device number 115 using dummy_hcd [ 1356.278508][T26733] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1356.330629][T26748] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1356.345764][T22205] usb 6-1: Using ep0 maxpacket: 16 [ 1356.379795][T22205] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1356.413008][T22205] usb 6-1: config 1 has an invalid interface number: 62 but max is 0 [ 1356.426828][ T5627] usb 3-1: Invalid ep0 maxpacket: 16 [ 1356.442373][ T5627] usb usb3-port1: attempt power cycle [ 1356.457621][T26748] 8021q: adding VLAN 0 to HW filter on device team0 [ 1356.472903][T22205] usb 6-1: config 1 has no interface number 0 [ 1356.531398][T22205] usb 6-1: config 1 interface 62 has no altsetting 0 [ 1356.566575][T22205] usb 6-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=b6.61 [ 1356.589738][T26733] veth0_vlan: entered promiscuous mode [ 1356.649817][T22205] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1356.678619][T22205] usb 6-1: Product: syz [ 1356.684636][T22205] usb 6-1: Manufacturer: syz [ 1356.693457][ T69] bridge0: port 1(bridge_slave_0) entered blocking state [ 1356.700692][ T69] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1356.712147][T22205] usb 6-1: SerialNumber: syz [ 1356.771744][T26733] veth1_vlan: entered promiscuous mode [ 1356.794251][ T69] bridge0: port 2(bridge_slave_1) entered blocking state [ 1356.801412][ T69] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1356.816385][ T5627] usb 3-1: new low-speed USB device number 116 using dummy_hcd [ 1356.842824][T26733] veth0_macvtap: entered promiscuous mode [ 1356.865475][T26733] veth1_macvtap: entered promiscuous mode [ 1356.896833][ T5627] usb 3-1: Invalid ep0 maxpacket: 16 [ 1356.965551][T22205] visor 6-1:1.62: Sony Clie 3.5 converter detected [ 1356.998567][T22205] usb 6-1: clie_3_5_startup: get config number failed: -71 [ 1357.008246][T22205] visor 6-1:1.62: probe with driver visor failed with error -71 [ 1357.026572][T22205] usb 6-1: USB disconnect, device number 77 [ 1357.056240][ T5627] usb 3-1: new low-speed USB device number 117 using dummy_hcd [ 1357.066274][T26733] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1357.107463][ T5627] usb 3-1: Invalid ep0 maxpacket: 16 [ 1357.121663][ T5627] usb usb3-port1: unable to enumerate USB device [ 1357.211492][T26733] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1357.329793][T12846] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1357.380359][T12846] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1357.412677][T12846] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1357.428922][T12846] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1357.762776][T26748] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1357.916382][T11914] usb 6-1: new high-speed USB device number 78 using dummy_hcd [ 1357.978204][T26941] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 836 [ 1358.023813][ T69] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1358.043949][ T69] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1358.116715][T11914] usb 6-1: Using ep0 maxpacket: 8 [ 1358.138153][T11914] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 1358.154138][T21208] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1358.169564][T11914] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1358.191801][T21208] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1358.200316][T11914] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1358.232218][T11914] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1358.236407][T26748] veth0_vlan: entered promiscuous mode [ 1358.267848][T11914] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1358.280929][T26748] veth1_vlan: entered promiscuous mode [ 1358.318443][T11914] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1358.328861][T11914] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1358.398886][T26748] veth0_macvtap: entered promiscuous mode [ 1358.430989][T26748] veth1_macvtap: entered promiscuous mode [ 1358.503032][T26748] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1358.557478][T11914] usb 6-1: usb_control_msg returned -32 [ 1358.571179][T26748] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1358.585204][T11914] usbtmc 6-1:16.0: can't read capabilities [ 1358.673123][T21794] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1358.722747][T21794] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1358.753567][T21794] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1358.793756][T21794] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1358.830459][T26955] netlink: 56 bytes leftover after parsing attributes in process `syz.3.5849'. [ 1358.970412][T26957] syzkaller0: entered promiscuous mode [ 1359.017118][T26957] syzkaller0: entered allmulticast mode [ 1359.071070][T26960] usbtmc 6-1:16.0: usb_control_msg returned -32 [ 1359.176782][T11914] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 1359.202434][ T5723] usb 6-1: USB disconnect, device number 78 [ 1359.344817][T11914] usb 4-1: Using ep0 maxpacket: 32 [ 1359.359966][T11914] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1359.366352][T21208] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1359.378945][T21208] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1359.405580][T11914] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1359.427156][T11914] usb 4-1: can't read configurations, error -61 [ 1359.454502][T11912] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 1359.521064][ T3372] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1359.548942][ T3372] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1359.566823][T11914] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 1359.656902][T11912] usb 3-1: Using ep0 maxpacket: 16 [ 1359.666898][T11912] usb 3-1: config 1 interface 0 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1359.684962][T11912] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1359.694230][T11912] usb 3-1: New USB device found, idVendor=046d, idProduct=ffff, bcdDevice= 0.40 [ 1359.706331][T11912] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1359.717942][T11912] usb 3-1: Product: syz [ 1359.723951][T11912] usb 3-1: Manufacturer: ╪ո橠꒶ꌩ䥯ণ茺粟ृ㮾ἠᙉ녣䡘녍尒鯀⨑ጻ亝მ꽸듌語㷃瞌⍋땍衎ᅲ鴤좪᩽纲⬏纋꯶슂⁍馸ᄜ쁥扱삼嶐僧킚䟧踓␉䱿踩텼떶䶐蹌ᾃ䡀竢䭼柤ᱛ擼떟ꭞ䜖㧡륓ךּໜ妤櫀쪡洧ﹿ [ 1359.752098][T11914] usb 4-1: Using ep0 maxpacket: 32 [ 1359.760267][T11912] usb 3-1: SerialNumber: syz [ 1359.780049][T11914] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1359.792023][T11914] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1359.811234][T11914] usb 4-1: can't read configurations, error -61 [ 1359.856612][T11914] usb usb4-port1: attempt power cycle [ 1360.172095][ T29] kauditd_printk_skb: 62 callbacks suppressed [ 1360.172114][ T29] audit: type=1326 audit(1785434479.921:5208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26982 comm="syz.5.5855" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f260ec code=0x0 [ 1360.224633][T11914] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 1360.272847][T11912] usbhid 3-1:1.0: can't add hid device: -71 [ 1360.288305][T11912] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 1360.299383][T11914] usb 4-1: Using ep0 maxpacket: 32 [ 1360.324931][T11914] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1360.346395][T11912] usb 3-1: USB disconnect, device number 118 [ 1360.363172][T11914] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1360.379739][T11914] usb 4-1: can't read configurations, error -61 [ 1360.515157][T11914] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 1360.559012][T11914] usb 4-1: Using ep0 maxpacket: 32 [ 1360.575395][T11914] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1360.602036][T11914] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1360.745268][T11914] usb 4-1: can't read configurations, error -61 [ 1360.757194][T11914] usb usb4-port1: unable to enumerate USB device [ 1361.213435][T27013] sch_tbf: burst 25 is lower than device ip6gre0 mtu (1448) ! [ 1361.253999][T27007] fuse: Bad value for 'group_id' [ 1361.276540][T27007] fuse: Bad value for 'group_id' [ 1361.636691][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.652625][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 1362.845190][T27046] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5862'. [ 1363.691260][T27067] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5866'. [ 1363.745084][T27067] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5866'. [ 1363.834640][ T5627] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 1364.014515][ T5627] usb 3-1: Using ep0 maxpacket: 8 [ 1364.036217][ T5627] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 1364.076770][ T5627] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1364.102992][ T5627] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1364.129163][ T5627] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1364.140068][ T5627] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1364.152077][ T5627] usb 3-1: config 0 descriptor?? [ 1364.441021][T22205] usb 3-1: USB disconnect, device number 119 [ 1364.534262][T27059] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5863'. [ 1364.801428][T27094] syzkaller0: entered promiscuous mode [ 1364.830974][T27094] syzkaller0: entered allmulticast mode [ 1364.896107][T27092] syzkaller0: left promiscuous mode [ 1364.921294][T27092] syzkaller0: left allmulticast mode [ 1364.973571][ T5723] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1365.036561][ T5723] hid-generic 0000:0000:0000.0041: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1365.534513][ T5694] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 1365.725820][ T5694] usb 3-1: Using ep0 maxpacket: 8 [ 1365.750736][ T5694] usb 3-1: config 0 has an invalid descriptor of length 130, skipping remainder of the config [ 1365.801698][ T5694] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 1365.865008][ T5694] usb 3-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 1365.881157][ T5694] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1365.918249][ T5694] usb 3-1: config 0 descriptor?? [ 1365.934021][ T5694] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1366.854892][T22205] usb 6-1: new high-speed USB device number 79 using dummy_hcd [ 1367.026080][T22205] usb 6-1: Using ep0 maxpacket: 16 [ 1367.053279][T22205] usb 6-1: config 1 has an invalid interface number: 105 but max is 0 [ 1367.076017][T22205] usb 6-1: config 1 has no interface number 0 [ 1367.083221][T22205] usb 6-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1367.095481][T22205] usb 6-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1367.110995][T22205] usb 6-1: config 1 interface 105 has no altsetting 0 [ 1367.120804][T22205] usb 6-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 1367.132592][T22205] usb 6-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1367.148024][T22205] usb 6-1: Product: syz [ 1367.156683][T22205] usb 6-1: Manufacturer: syz [ 1367.166221][T22205] usb 6-1: SerialNumber: syz [ 1367.186036][T27124] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 1367.213356][T27124] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 1367.453833][T22205] aqc111 6-1:1.105: probe with driver aqc111 failed with error -71 [ 1367.513524][T22205] usb 6-1: USB disconnect, device number 79 [ 1367.873566][T27140] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1367.945118][T27140] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1368.105816][ T9] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 1368.286930][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 1368.359925][ T9] usb 2-1: New USB device found, idVendor=1039, idProduct=2120, bcdDevice= 2.a7 [ 1368.375025][ T9] usb 2-1: New USB device strings: Mfr=10, Product=2, SerialNumber=3 [ 1368.383348][ T9] usb 2-1: Product: syz [ 1368.468833][ T9] usb 2-1: Manufacturer: syz [ 1368.490036][ T9] usb 2-1: SerialNumber: syz [ 1368.517003][ T9] usb 2-1: config 0 descriptor?? [ 1368.776298][ T9] usb 2-1: USB disconnect, device number 48 [ 1369.083332][ T5627] usb 3-1: USB disconnect, device number 120 [ 1369.324733][ T9] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 1369.481162][T27194] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5884'. [ 1369.516956][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 1370.129629][T27209] netlink: 112 bytes leftover after parsing attributes in process `syz.5.5886'. [ 1370.486722][T27218] netlink: 44 bytes leftover after parsing attributes in process `syz.8.5887'. [ 1370.729307][ T9] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 1370.740993][ T9] usb 2-1: can't read configurations, error -71 [ 1371.385522][ T9] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 1371.432010][T27249] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5894'. [ 1371.551229][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1371.589338][ T9] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1371.643345][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1371.666856][ T9] usb 2-1: config 0 descriptor?? [ 1372.064938][ T29] audit: type=1326 audit(1785434491.811:5209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27255 comm="syz.2.5895" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704f0ec code=0x7ffc0000 [ 1372.113916][ T29] audit: type=1326 audit(1785434491.851:5210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27255 comm="syz.2.5895" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704f0ec code=0x7ffc0000 [ 1372.182419][ T29] audit: type=1326 audit(1785434491.851:5211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27255 comm="syz.2.5895" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf704f0ec code=0x7ffc0000 [ 1372.327376][ T29] audit: type=1326 audit(1785434491.851:5212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27255 comm="syz.2.5895" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704f0ec code=0x7ffc0000 [ 1372.395670][ T29] audit: type=1326 audit(1785434491.851:5213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27255 comm="syz.2.5895" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704f0ec code=0x7ffc0000 [ 1372.425071][ T29] audit: type=1326 audit(1785434491.851:5214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27255 comm="syz.2.5895" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf704f0ec code=0x7ffc0000 [ 1372.549768][ T29] audit: type=1326 audit(1785434491.851:5215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27255 comm="syz.2.5895" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704f0ec code=0x7ffc0000 [ 1372.589682][ T29] audit: type=1326 audit(1785434491.851:5216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27255 comm="syz.2.5895" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf704f0ec code=0x7ffc0000 [ 1372.616576][ T29] audit: type=1326 audit(1785434491.851:5217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27255 comm="syz.2.5895" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704f0ec code=0x7ffc0000 [ 1372.641537][ T29] audit: type=1326 audit(1785434491.851:5218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27255 comm="syz.2.5895" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=358 compat=1 ip=0xf704f0ec code=0x7ffc0000 [ 1372.752615][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 1372.769887][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1372.798790][ T9] usb 2-1: USB disconnect, device number 50 [ 1373.265284][ T9] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 1373.372541][T27290] netlink: 'syz.8.5901': attribute type 1 has an invalid length. [ 1373.438102][T27290] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5901'. [ 1373.461390][T27290] veth0_virt_wifi: entered allmulticast mode [ 1373.483375][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 249, changing to 11 [ 1373.512007][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1373.532658][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1373.546300][ T9] usb 2-1: New USB device found, idVendor=1e71, idProduct=200f, bcdDevice= 0.00 [ 1373.557323][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1373.578443][ T9] usb 2-1: config 0 descriptor?? [ 1373.642820][T27293] bridge1: entered promiscuous mode [ 1374.073768][T27303] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5904'. [ 1374.160735][T27309] program syz.8.5904 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1374.176165][T27281] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1374.239744][T27281] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1374.322767][T27312] binder: 27291:27312 ioctl 4018620d 0 returned -22 [ 1374.396741][T27303] ALSA: seq fatal error: cannot create timer (-19) [ 1374.424568][T27311] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1802 [ 1374.440815][T27281] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1374.484041][T27281] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1374.553999][ T9] nzxt-smart2 0003:1E71:200F.0042: unknown main item tag 0x0 [ 1374.562390][ T9] nzxt-smart2 0003:1E71:200F.0042: unknown main item tag 0x0 [ 1374.570336][ T9] nzxt-smart2 0003:1E71:200F.0042: unknown main item tag 0x0 [ 1374.577928][ T9] nzxt-smart2 0003:1E71:200F.0042: unknown main item tag 0x0 [ 1374.585394][ T9] nzxt-smart2 0003:1E71:200F.0042: unknown main item tag 0x0 [ 1374.592922][ T9] nzxt-smart2 0003:1E71:200F.0042: unknown main item tag 0x0 [ 1374.600487][ T9] nzxt-smart2 0003:1E71:200F.0042: unknown main item tag 0x0 [ 1374.608054][ T9] nzxt-smart2 0003:1E71:200F.0042: unknown main item tag 0x0 [ 1374.615520][ T9] nzxt-smart2 0003:1E71:200F.0042: item fetching failed at offset 14/235 [ 1374.624848][ T9] nzxt-smart2 0003:1E71:200F.0042: probe with driver nzxt-smart2 failed with error -22 [ 1374.728348][T27312] geneve0: entered promiscuous mode [ 1374.862593][ T5723] usb 2-1: USB disconnect, device number 51 [ 1374.886421][T27312] geneve0: left promiscuous mode [ 1375.218285][T27323] team0: Device wg0 is of different type [ 1375.563060][T27349] FAULT_INJECTION: forcing a failure. [ 1375.563060][T27349] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1375.673951][T27349] CPU: 0 UID: 0 PID: 27349 Comm: syz.5.5910 Tainted: G L syzkaller #0 PREEMPT(full) [ 1375.673985][T27349] Tainted: [L]=SOFTLOCKUP [ 1375.673993][T27349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1375.674006][T27349] Call Trace: [ 1375.674015][T27349] [ 1375.674022][T27349] dump_stack_lvl+0xe8/0x150 [ 1375.674054][T27349] should_fail_ex+0x40c/0x560 [ 1375.674084][T27349] prepare_alloc_pages+0x230/0x650 [ 1375.674118][T27349] __alloc_frozen_pages_noprof+0x12f/0x380 [ 1375.674147][T27349] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1375.674178][T27349] ? __pfx_policy_nodemask+0x10/0x10 [ 1375.674209][T27349] ? __lock_acquire+0x683/0x2cf0 [ 1375.674237][T27349] alloc_pages_mpol+0x212/0x380 [ 1375.674275][T27349] folio_alloc_mpol_noprof+0x39/0x160 [ 1375.674306][T27349] vma_alloc_folio_noprof+0xe1/0x1e0 [ 1375.674335][T27349] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 1375.674361][T27349] ? __pte_offset_map+0x29/0x240 [ 1375.674384][T27349] ? __pte_offset_map+0x29/0x240 [ 1375.674406][T27349] do_pte_missing+0x173a/0x34b0 [ 1375.674444][T27349] handle_mm_fault+0x1b36/0x3080 [ 1375.674485][T27349] ? handle_mm_fault+0xec/0x3080 [ 1375.674512][T27349] ? __pfx_handle_mm_fault+0x10/0x10 [ 1375.674547][T27349] ? lock_mm_and_find_vma+0xa7/0x340 [ 1375.674574][T27349] do_user_addr_fault+0x744/0x1340 [ 1375.674616][T27349] exc_page_fault+0x6a/0xc0 [ 1375.674638][T27349] asm_exc_page_fault+0x26/0x30 [ 1375.674656][T27349] RIP: 0010:rep_movs_alternative+0x4a/0xa0 [ 1375.674682][T27349] Code: 63 04 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 1375.674699][T27349] RSP: 0018:ffffc9000ca6fa48 EFLAGS: 00050206 [ 1375.674716][T27349] RAX: ffffffff84d3fb01 RBX: 0000000000003400 RCX: 0000000000002900 [ 1375.674730][T27349] RDX: 0000000000000000 RSI: ffff88804be00b04 RDI: 0000000080004000 [ 1375.674744][T27349] RBP: ffffc9000ca6fbc0 R08: 0000000000000003 R09: 0000000000000004 [ 1375.674755][T27349] R10: dffffc0000000000 R11: ffffed10097c0680 R12: 0000000080006900 [ 1375.674770][T27349] R13: 00007ffffffff000 R14: ffff88804be00004 R15: 0000000080003500 [ 1375.674792][T27349] ? _copy_from_user+0x41/0xb0 [ 1375.674818][T27349] _copy_to_user+0x8a/0xb0 [ 1375.674839][T27349] generic_map_lookup_batch+0xa93/0xeb0 [ 1375.674877][T27349] ? __pfx_generic_map_lookup_batch+0x10/0x10 [ 1375.674900][T27349] ? __fget_files+0x2a/0x420 [ 1375.674931][T27349] ? __pfx_generic_map_lookup_batch+0x10/0x10 [ 1375.674955][T27349] bpf_map_do_batch+0x27f/0x630 [ 1375.674981][T27349] ? bpf_lsm_bpf+0x9/0x20 [ 1375.675003][T27349] ? security_bpf+0x7e/0x2d0 [ 1375.675025][T27349] __sys_bpf+0xa9f/0xd90 [ 1375.675058][T27349] ? __pfx___sys_bpf+0x10/0x10 [ 1375.675086][T27349] ? ksys_write+0x1e6/0x270 [ 1375.675109][T27349] ? __mutex_unlock_slowpath+0x731/0x900 [ 1375.675147][T27349] ? fput+0xa0/0xd0 [ 1375.675170][T27349] ? ksys_write+0x242/0x270 [ 1375.675192][T27349] __ia32_sys_bpf+0xba/0xd0 [ 1375.675220][T27349] __do_fast_syscall_32+0x23e/0x6f0 [ 1375.675243][T27349] ? do_fast_syscall_32+0x33/0x70 [ 1375.675264][T27349] ? lockdep_hardirqs_on+0x7a/0x110 [ 1375.675284][T27349] ? asm_int80_emulation+0x1a/0x20 [ 1375.675302][T27349] ? do_int80_emulation+0x29f/0x550 [ 1375.675325][T27349] ? trace_irq_disable+0x3b/0x140 [ 1375.675353][T27349] do_fast_syscall_32+0x33/0x70 [ 1375.675377][T27349] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1375.675400][T27349] RIP: 0023:0xf7f260ec [ 1375.675418][T27349] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1375.675434][T27349] RSP: 002b:00000000f53e650c EFLAGS: 00000206 ORIG_RAX: 0000000000000165 [ 1375.675453][T27349] RAX: ffffffffffffffda RBX: 0000000000000018 RCX: 00000000800001c0 [ 1375.675474][T27349] RDX: 0000000000000038 RSI: 0000000000000000 RDI: 0000000000000000 [ 1375.675486][T27349] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1375.675498][T27349] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1375.675509][T27349] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1375.675538][T27349] [ 1376.382181][T27357] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5913'. [ 1376.474507][T22205] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 1376.674869][T22205] usb 2-1: Using ep0 maxpacket: 32 [ 1376.703871][T22205] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1376.717166][T11912] usb 6-1: new high-speed USB device number 80 using dummy_hcd [ 1376.740112][T22205] usb 2-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 1376.758375][T22205] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1376.766977][T22205] usb 2-1: Product: syz [ 1376.780660][T22205] usb 2-1: Manufacturer: syz [ 1376.785833][T22205] usb 2-1: SerialNumber: syz [ 1376.798031][T22205] usb 2-1: config 0 descriptor?? [ 1376.821724][T22205] cdc_ether 2-1:0.0: missing cdc header descriptor [ 1376.831506][T22205] usb 2-1: unsupported MDLM descriptors [ 1376.875149][T11912] usb 6-1: Using ep0 maxpacket: 16 [ 1376.885723][T11912] usb 6-1: config index 0 descriptor too short (expected 65532, got 18) [ 1376.914535][T11912] usb 6-1: config 0 has an invalid interface number: 0 but max is -1 [ 1376.949144][T11912] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1376.970982][T11912] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1376.983004][T11912] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1377.043436][T11912] usb 6-1: Product: syz [ 1377.082423][T11912] usb 6-1: Manufacturer: syz [ 1377.191410][T11912] usb 6-1: SerialNumber: syz [ 1377.250339][T11912] r8152-cfgselector 6-1: Unknown version 0x0000 [ 1377.257323][T11912] r8152-cfgselector 6-1: config 0 descriptor?? [ 1377.620875][ T5723] usb 2-1: USB disconnect, device number 52 [ 1377.664687][T24329] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 1377.756068][T11912] r8152-cfgselector 6-1: USB disconnect, device number 80 [ 1377.834326][T24329] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1377.866427][T24329] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1377.903729][T24329] usb 4-1: Product: syz [ 1377.921906][T24329] usb 4-1: Manufacturer: syz [ 1377.941207][T24329] usb 4-1: SerialNumber: syz [ 1377.976147][T24329] usb 4-1: config 0 descriptor?? [ 1378.054716][ T9] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 1378.247418][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 1378.276252][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1378.291620][ T9] usb 3-1: config 0 has an invalid interface number: 255 but max is 2 [ 1378.303212][ T9] usb 3-1: config 0 has an invalid interface number: 46 but max is 2 [ 1378.313374][ T9] usb 3-1: config 0 has an invalid interface number: 28 but max is 2 [ 1378.331817][ T9] usb 3-1: config 0 has no interface number 0 [ 1378.351737][ T9] usb 3-1: config 0 has no interface number 1 [ 1378.408877][ T9] usb 3-1: config 0 has no interface number 2 [ 1378.435901][ T9] usb 3-1: config 0 interface 255 altsetting 64 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 1378.479933][ T9] usb 3-1: config 0 interface 255 altsetting 64 bulk endpoint 0x9 has invalid maxpacket 16 [ 1378.506636][ T9] usb 3-1: config 0 interface 255 altsetting 64 has a duplicate endpoint with address 0xE, skipping [ 1378.525280][ T9] usb 3-1: config 0 interface 255 altsetting 64 endpoint 0x3 has an invalid bInterval 126, changing to 10 [ 1378.538530][ T9] usb 3-1: config 0 interface 255 altsetting 64 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 1378.555749][ T9] usb 3-1: config 0 interface 255 altsetting 64 endpoint 0x88 has an invalid bInterval 205, changing to 11 [ 1378.569236][ T9] usb 3-1: config 0 interface 255 altsetting 64 endpoint 0x88 has invalid maxpacket 25887, setting to 1024 [ 1378.583433][ T9] usb 3-1: config 0 interface 255 altsetting 64 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 1378.597154][ T9] usb 3-1: config 0 interface 255 altsetting 64 has a duplicate endpoint with address 0x9, skipping [ 1378.609208][ T9] usb 3-1: config 0 interface 255 altsetting 64 endpoint 0xA has an invalid bInterval 128, changing to 7 [ 1378.621927][ T9] usb 3-1: config 0 interface 255 altsetting 64 has an invalid descriptor for endpoint zero, skipping [ 1378.634692][ T9] usb 3-1: config 0 interface 255 altsetting 64 has a duplicate endpoint with address 0x7, skipping [ 1378.649346][ T9] usb 3-1: config 0 interface 255 altsetting 64 has a duplicate endpoint with address 0xA, skipping [ 1378.660658][ T9] usb 3-1: config 0 interface 255 altsetting 64 has a duplicate endpoint with address 0xF, skipping [ 1378.674501][ T9] usb 3-1: config 0 interface 255 altsetting 64 has an invalid descriptor for endpoint zero, skipping [ 1378.686069][ T9] usb 3-1: config 0 interface 255 altsetting 64 has a duplicate endpoint with address 0x8, skipping [ 1378.697339][ T9] usb 3-1: config 0 interface 255 altsetting 64 has 17 endpoint descriptors, different from the interface descriptor's value: 16 [ 1378.713405][ T9] usb 3-1: config 0 interface 255 has no altsetting 0 [ 1378.722863][ T9] usb 3-1: config 0 interface 46 has no altsetting 0 [ 1378.731668][ T9] usb 3-1: config 0 interface 28 has no altsetting 0 [ 1378.752275][ T9] usb 3-1: New USB device found, idVendor=093b, idProduct=a002, bcdDevice=de.f7 [ 1378.761628][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1378.769744][ T9] usb 3-1: Product: syz [ 1378.774155][ T9] usb 3-1: Manufacturer: syz [ 1378.779261][ T9] usb 3-1: SerialNumber: syz [ 1378.788072][ T9] usb 3-1: config 0 descriptor?? [ 1378.794390][T27393] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1378.811553][T27393] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1378.822465][T27393] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1379.026167][T24329] usb 4-1: Firmware version (0.0) predates our first public release. [ 1379.051743][T24329] usb 4-1: Please update to version 0.2 or newer [ 1379.062011][T27404] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1379.083872][T27404] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1379.131656][T24329] usb 4-1: USB disconnect, device number 89 [ 1379.674841][T24329] usb 6-1: new high-speed USB device number 81 using dummy_hcd [ 1379.879113][T24329] usb 6-1: config 8 has an invalid interface number: 2 but max is 0 [ 1379.891851][T24329] usb 6-1: config 8 descriptor has 1 excess byte, ignoring [ 1379.901923][T24329] usb 6-1: config 8 has no interface number 0 [ 1379.908359][T24329] usb 6-1: config 8 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1379.926308][T24329] usb 6-1: New USB device found, idVendor=00c4, idProduct=0000, bcdDevice= 0.00 [ 1379.937605][T24329] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=145 [ 1379.963246][T24329] usb 6-1: SerialNumber: syz [ 1380.315005][T22205] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 1380.407126][T24329] usb 6-1: USB disconnect, device number 81 [ 1380.476795][T22205] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1380.504125][T22205] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1380.520248][T22205] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1380.533597][T22205] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1380.550174][T22205] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1380.561639][T22205] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1380.574670][T22205] usb 4-1: Manufacturer: syz [ 1380.583658][T22205] usb 4-1: config 0 descriptor?? [ 1380.666835][T27420] FAULT_INJECTION: forcing a failure. [ 1380.666835][T27420] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1380.682252][T27420] CPU: 0 UID: 0 PID: 27420 Comm: syz.1.5933 Tainted: G L syzkaller #0 PREEMPT(full) [ 1380.682284][T27420] Tainted: [L]=SOFTLOCKUP [ 1380.682291][T27420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1380.682305][T27420] Call Trace: [ 1380.682314][T27420] [ 1380.682322][T27420] dump_stack_lvl+0xe8/0x150 [ 1380.682355][T27420] should_fail_ex+0x40c/0x560 [ 1380.682386][T27420] _copy_from_user+0x2d/0xb0 [ 1380.682407][T27420] snd_seq_oss_write+0x6e2/0x950 [ 1380.682448][T27420] ? __pfx_snd_seq_oss_write+0x10/0x10 [ 1380.682480][T27420] ? apparmor_file_permission+0x1f4/0x300 [ 1380.682512][T27420] ? security_file_permission+0x75/0x260 [ 1380.682543][T27420] odev_write+0x5a/0x80 [ 1380.682567][T27420] ? __pfx_odev_write+0x10/0x10 [ 1380.682588][T27420] vfs_write+0x296/0xba0 [ 1380.682615][T27420] ? __pfx_vfs_write+0x10/0x10 [ 1380.682635][T27420] ? __fget_files+0x2a/0x420 [ 1380.682664][T27420] ? __fget_files+0x2a/0x420 [ 1380.682686][T27420] ? __fget_files+0x3a2/0x420 [ 1380.682711][T27420] ? __fget_files+0x2a/0x420 [ 1380.682744][T27420] ksys_write+0x150/0x270 [ 1380.682766][T27420] ? __pfx_ksys_write+0x10/0x10 [ 1380.682794][T27420] __do_fast_syscall_32+0x23e/0x6f0 [ 1380.682818][T27420] ? do_fast_syscall_32+0x33/0x70 [ 1380.682840][T27420] ? lockdep_hardirqs_on+0x7a/0x110 [ 1380.682860][T27420] ? asm_int80_emulation+0x1a/0x20 [ 1380.682879][T27420] ? do_int80_emulation+0x29f/0x550 [ 1380.682901][T27420] ? trace_irq_disable+0x3b/0x140 [ 1380.682929][T27420] do_fast_syscall_32+0x33/0x70 [ 1380.682952][T27420] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1380.682975][T27420] RIP: 0023:0xf7f540ec [ 1380.682993][T27420] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1380.683010][T27420] RSP: 002b:00000000f541650c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 1380.683030][T27420] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 0000000080000980 [ 1380.683043][T27420] RDX: 000000000000023b RSI: 0000000000000000 RDI: 0000000000000000 [ 1380.683055][T27420] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1380.683066][T27420] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1380.683085][T27420] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1380.683113][T27420] [ 1380.983821][T27423] : renamed from dummy0 (while UP) [ 1381.024193][T27415] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1381.043037][T22205] usbhid 4-1:0.0: can't add hid device: -71 [ 1381.049231][T22205] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1381.089395][T22205] usb 4-1: USB disconnect, device number 90 [ 1381.504832][T11914] usb 6-1: new full-speed USB device number 82 using dummy_hcd [ 1381.549633][T27431] netlink: 'syz.8.5937': attribute type 21 has an invalid length. [ 1381.669012][T11914] usb 6-1: config 0 interface 0 altsetting 11 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1381.710846][T11914] usb 6-1: config 0 interface 0 altsetting 11 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1381.730239][T11914] usb 6-1: config 0 interface 0 altsetting 11 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1381.759829][T11914] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1381.768504][T11914] usb 6-1: New USB device found, idVendor=09da, idProduct=022b, bcdDevice= 0.00 [ 1381.788380][T11914] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1381.811224][T11914] usb 6-1: config 0 descriptor?? [ 1381.866966][T27438] loop9: detected capacity change from 0 to 2640 [ 1381.881445][T27438] buffer_io_error: 11 callbacks suppressed [ 1381.881464][T27438] Buffer I/O error on dev loop9, logical block 0, async page read [ 1381.943090][T27438] Buffer I/O error on dev loop9, logical block 0, async page read [ 1381.957545][T27441] Buffer I/O error on dev loop9, logical block 0, lost async page write [ 1381.970773][T27438] Buffer I/O error on dev loop9, logical block 1, async page read [ 1382.012229][T27438] loop9: unable to read partition table [ 1382.055907][T27438] loop_reread_partitions: partition scan of loop9 (3 ) failed (rc=-5) [ 1382.063243][T27441] Buffer I/O error on dev loop9, logical block 0, lost async page write [ 1382.085630][T27441] Buffer I/O error on dev loop9, logical block 1, lost async page write [ 1382.094163][T27441] Buffer I/O error on dev loop9, logical block 2, lost async page write [ 1382.102692][T27441] Buffer I/O error on dev loop9, logical block 3, lost async page write [ 1382.111198][T27441] Buffer I/O error on dev loop9, logical block 4, lost async page write [ 1382.170559][T27441] Buffer I/O error on dev loop9, logical block 5, lost async page write [ 1382.246181][T11914] usbhid 6-1:0.0: can't add hid device: -71 [ 1382.273768][T11914] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1382.326611][T11914] usb 6-1: USB disconnect, device number 82 [ 1382.492510][T27457] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5946'. [ 1382.542920][T27457] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5946'. [ 1382.562956][T27457] netlink: 52 bytes leftover after parsing attributes in process `syz.3.5946'. [ 1382.587322][T27457] ipip0: entered allmulticast mode [ 1383.009995][ T29] kauditd_printk_skb: 20 callbacks suppressed [ 1383.010012][ T29] audit: type=1326 audit(1785434502.761:5239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27468 comm="syz.5.5949" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f260ec code=0x7ffc0000 [ 1383.131613][ T29] audit: type=1326 audit(1785434502.801:5240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27468 comm="syz.5.5949" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f260ec code=0x7ffc0000 [ 1383.210054][ T29] audit: type=1326 audit(1785434502.801:5241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27468 comm="syz.5.5949" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=258 compat=1 ip=0xf7f260ec code=0x7ffc0000 [ 1383.309024][ T29] audit: type=1326 audit(1785434502.801:5242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27468 comm="syz.5.5949" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f260ec code=0x7ffc0000 [ 1383.335707][ T29] audit: type=1326 audit(1785434502.801:5243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27468 comm="syz.5.5949" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f260ec code=0x7ffc0000 [ 1383.367127][ T29] audit: type=1326 audit(1785434502.801:5244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27468 comm="syz.5.5949" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f260ec code=0x7ffc0000 [ 1383.479661][ T29] audit: type=1326 audit(1785434502.801:5245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27468 comm="syz.5.5949" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=289 compat=1 ip=0xf7f260ec code=0x7ffc0000 [ 1383.569108][ T29] audit: type=1326 audit(1785434502.801:5246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27468 comm="syz.5.5949" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f260ec code=0x7ffc0000 [ 1383.665414][ T29] audit: type=1326 audit(1785434502.821:5247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27468 comm="syz.5.5949" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f260ec code=0x7ffc0000 [ 1383.694934][ T29] audit: type=1326 audit(1785434502.841:5248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27468 comm="syz.5.5949" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf7f260ec code=0x7ffc0000 [ 1383.899111][ T9] go7007-loader 3-1:0.255: loading firmware go7007/px-m402u.fw [ 1383.927967][ T9] usb 3-1: Direct firmware load for go7007/px-m402u.fw failed with error -2 [ 1383.939880][ T9] usb 3-1: Falling back to sysfs fallback for: go7007/px-m402u.fw [ 1384.195337][T13514] Bluetooth: hci3: command 0x0406 tx timeout [ 1384.247141][T27496] openvswitch: netlink: Actions may not be safe on all matching packets [ 1384.459555][T27500] binder: 27497:27500 ioctl 40046205 0 returned -22 [ 1384.867213][T27512] FAULT_INJECTION: forcing a failure. [ 1384.867213][T27512] name failslab, interval 1, probability 0, space 0, times 0 [ 1384.901196][T27512] CPU: 0 UID: 0 PID: 27512 Comm: syz.1.5962 Tainted: G L syzkaller #0 PREEMPT(full) [ 1384.901226][T27512] Tainted: [L]=SOFTLOCKUP [ 1384.901232][T27512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1384.901241][T27512] Call Trace: [ 1384.901246][T27512] [ 1384.901254][T27512] dump_stack_lvl+0xe8/0x150 [ 1384.901279][T27512] should_fail_ex+0x40c/0x560 [ 1384.901298][T27512] should_failslab+0xa8/0x100 [ 1384.901319][T27512] __kmalloc_cache_noprof+0xa8/0x660 [ 1384.901334][T27512] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 1384.901352][T27512] ? __kmalloc_cache_noprof+0x150/0x660 [ 1384.901367][T27512] ? sctp_add_bind_addr+0x8c/0x370 [ 1384.901386][T27512] ? sctp_add_bind_addr+0x8c/0x370 [ 1384.901408][T27512] sctp_add_bind_addr+0x8c/0x370 [ 1384.901427][T27512] sctp_copy_local_addr_list+0x31a/0x4e0 [ 1384.901445][T27512] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 1384.901464][T27512] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 1384.901483][T27512] ? sctp_v4_is_any+0x35/0x60 [ 1384.901494][T27512] ? sctp_copy_one_addr+0x93/0x360 [ 1384.901512][T27512] sctp_bind_addr_copy+0xb3/0x3c0 [ 1384.901529][T27512] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1384.901548][T27512] sctp_connect_new_asoc+0x2ff/0x6b0 [ 1384.901565][T27512] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1384.901582][T27512] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 1384.901595][T27512] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 1384.901608][T27512] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 1384.901621][T27512] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1384.901635][T27512] ? security_sctp_bind_connect+0x7e/0x2c0 [ 1384.901655][T27512] sctp_sendmsg+0x159b/0x2d00 [ 1384.901678][T27512] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1384.901694][T27512] ? aa_sk_perm+0x6d5/0x900 [ 1384.901708][T27512] ? __might_fault+0xaf/0x130 [ 1384.901723][T27512] ? sock_rps_record_flow+0x19/0x350 [ 1384.901736][T27512] ? inet_sendmsg+0x298/0x320 [ 1384.901759][T27512] ? __pfx_inet_sendmsg+0x10/0x10 [ 1384.901770][T27512] sock_sendmsg_nosec+0x10e/0x180 [ 1384.901792][T27512] __sys_sendto+0x408/0x5a0 [ 1384.901806][T27512] ? __pfx___sys_sendto+0x10/0x10 [ 1384.901823][T27512] ? __fget_files+0x3a2/0x420 [ 1384.901844][T27512] ? ksys_write+0x242/0x270 [ 1384.901858][T27512] __ia32_sys_sendto+0xdd/0x100 [ 1384.901873][T27512] __do_fast_syscall_32+0x23e/0x6f0 [ 1384.901888][T27512] ? do_fast_syscall_32+0x33/0x70 [ 1384.901902][T27512] ? lockdep_hardirqs_on+0x7a/0x110 [ 1384.901913][T27512] ? asm_int80_emulation+0x1a/0x20 [ 1384.901924][T27512] ? do_int80_emulation+0x29f/0x550 [ 1384.901936][T27512] ? trace_irq_disable+0x3b/0x140 [ 1384.901953][T27512] do_fast_syscall_32+0x33/0x70 [ 1384.901966][T27512] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1384.901979][T27512] RIP: 0023:0xf7f540ec [ 1384.901990][T27512] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1384.902000][T27512] RSP: 002b:00000000f541650c EFLAGS: 00000206 ORIG_RAX: 0000000000000171 [ 1384.902011][T27512] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 1384.902019][T27512] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 00000000800001c0 [ 1384.902025][T27512] RBP: 0000000000000010 R08: 0000000000000000 R09: 0000000000000000 [ 1384.902031][T27512] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1384.902038][T27512] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1384.902052][T27512] [ 1385.870089][T11914] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 1386.037257][T11914] usb 2-1: Using ep0 maxpacket: 16 [ 1386.046822][T11914] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 1386.077992][T11914] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 4.00 [ 1386.087450][T11914] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1386.095997][T11914] usb 2-1: Product: syz [ 1386.101527][T11914] usb 2-1: Manufacturer: syz [ 1386.107834][T11914] usb 2-1: SerialNumber: syz [ 1386.133489][T11914] usb 2-1: config 0 descriptor?? [ 1386.165569][T11914] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 1386.181581][T11914] usb 2-1: Detected FT232B [ 1386.366380][T11914] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 1386.376573][T11914] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1386.587457][T27519] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5965'. [ 1386.869137][T11914] usb 2-1: USB disconnect, device number 53 [ 1386.900484][T11914] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1386.948690][T11914] ftdi_sio 2-1:0.0: device disconnected [ 1392.115513][T22205] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 1392.227704][T27553] FAULT_INJECTION: forcing a failure. [ 1392.227704][T27553] name failslab, interval 1, probability 0, space 0, times 0 [ 1392.245309][T27553] CPU: 1 UID: 0 PID: 27553 Comm: syz.3.5973 Tainted: G L syzkaller #0 PREEMPT(full) [ 1392.245340][T27553] Tainted: [L]=SOFTLOCKUP [ 1392.245349][T27553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1392.245362][T27553] Call Trace: [ 1392.245371][T27553] [ 1392.245378][T27553] dump_stack_lvl+0xe8/0x150 [ 1392.245412][T27553] should_fail_ex+0x40c/0x560 [ 1392.245449][T27553] should_failslab+0xa8/0x100 [ 1392.245479][T27553] __kmalloc_cache_noprof+0xa8/0x660 [ 1392.245504][T27553] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 1392.245534][T27553] ? __kmalloc_cache_noprof+0x150/0x660 [ 1392.245558][T27553] ? sctp_add_bind_addr+0x8c/0x370 [ 1392.245581][T27553] ? sctp_add_bind_addr+0x8c/0x370 [ 1392.245610][T27553] sctp_add_bind_addr+0x8c/0x370 [ 1392.245642][T27553] sctp_copy_local_addr_list+0x31a/0x4e0 [ 1392.245672][T27553] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 1392.245700][T27553] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 1392.245728][T27553] ? sctp_v6_is_any+0x64/0x80 [ 1392.245749][T27553] ? sctp_copy_one_addr+0x93/0x360 [ 1392.245781][T27553] sctp_bind_addr_copy+0xb3/0x3c0 [ 1392.245810][T27553] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1392.245838][T27553] sctp_connect_new_asoc+0x2ff/0x6b0 [ 1392.245864][T27553] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1392.245891][T27553] ? __local_bh_enable_ip+0xd0/0x130 [ 1392.245911][T27553] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1392.245933][T27553] ? security_sctp_bind_connect+0x7e/0x2c0 [ 1392.245962][T27553] sctp_sendmsg+0x159b/0x2d00 [ 1392.245999][T27553] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1392.246027][T27553] ? aa_sk_perm+0x6d5/0x900 [ 1392.246051][T27553] ? __might_fault+0xaf/0x130 [ 1392.246075][T27553] ? sock_rps_record_flow+0x19/0x350 [ 1392.246096][T27553] ? inet_sendmsg+0x298/0x320 [ 1392.246116][T27553] ? __pfx_inet_sendmsg+0x10/0x10 [ 1392.246131][T27553] sock_sendmsg_nosec+0x10e/0x180 [ 1392.246159][T27553] __sys_sendto+0x408/0x5a0 [ 1392.246184][T27553] ? __pfx___sys_sendto+0x10/0x10 [ 1392.246214][T27553] ? __fget_files+0x3a2/0x420 [ 1392.246259][T27553] ? ksys_write+0x242/0x270 [ 1392.246284][T27553] __ia32_sys_sendto+0xdd/0x100 [ 1392.246308][T27553] __do_fast_syscall_32+0x23e/0x6f0 [ 1392.246337][T27553] ? do_fast_syscall_32+0x33/0x70 [ 1392.246359][T27553] ? lockdep_hardirqs_on+0x7a/0x110 [ 1392.246380][T27553] ? asm_int80_emulation+0x1a/0x20 [ 1392.246399][T27553] ? do_int80_emulation+0x29f/0x550 [ 1392.246422][T27553] ? trace_irq_disable+0x3b/0x140 [ 1392.246450][T27553] do_fast_syscall_32+0x33/0x70 [ 1392.246474][T27553] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1392.246497][T27553] RIP: 0023:0xf7fc60ec [ 1392.246516][T27553] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1392.246537][T27553] RSP: 002b:00000000f548650c EFLAGS: 00000206 ORIG_RAX: 0000000000000171 [ 1392.246559][T27553] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000040 [ 1392.246573][T27553] RDX: 0000000000000001 RSI: 0000000020000015 RDI: 0000000080000100 [ 1392.246585][T27553] RBP: 000000000000001c R08: 0000000000000000 R09: 0000000000000000 [ 1392.246597][T27553] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1392.246609][T27553] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1392.246639][T27553] [ 1392.601103][T22205] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1392.612275][T22205] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 65327, setting to 1024 [ 1392.623489][T22205] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 1392.633590][T22205] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1392.642704][T22205] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1392.702476][T27543] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1392.735120][T22205] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1392.990159][T13514] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1393.071430][ T4946] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1393.097978][ T4946] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1393.121326][ T4946] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1393.129400][ T4946] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1393.517831][T24329] usb 2-1: USB disconnect, device number 54 [ 1395.044572][T11912] usb 4-1: new full-speed USB device number 91 using dummy_hcd [ 1395.228142][T11912] usb 4-1: config 127 has an invalid interface number: 57 but max is 0 [ 1395.238309][ T4946] Bluetooth: hci9: command tx timeout [ 1395.247318][T11912] usb 4-1: config 127 has no interface number 0 [ 1395.253832][T11912] usb 4-1: config 127 interface 57 altsetting 0 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 1395.268399][T11912] usb 4-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=d2.4b [ 1395.287997][T11912] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1395.297929][T11912] usb 4-1: Product: syz [ 1395.302635][T11912] usb 4-1: Manufacturer: syz [ 1395.307602][T11912] usb 4-1: SerialNumber: syz [ 1395.338464][T27582] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1395.779972][T27582] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1396.017074][T11912] asix 4-1:127.57 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1396.062953][T11912] asix 4-1:127.57: probe with driver asix failed with error -71 [ 1396.116146][T11912] usb 4-1: USB disconnect, device number 91 [ 1396.184110][T27605] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5989'. [ 1396.430484][T27570] bridge0: port 1(bridge_slave_0) entered blocking state [ 1396.448311][T27570] bridge0: port 1(bridge_slave_0) entered disabled state [ 1396.462978][T27570] bridge_slave_0: entered allmulticast mode [ 1396.486671][T27570] bridge_slave_0: entered promiscuous mode [ 1396.498177][T27570] bridge0: port 2(bridge_slave_1) entered blocking state [ 1396.512771][T27570] bridge0: port 2(bridge_slave_1) entered disabled state [ 1396.528166][T27570] bridge_slave_1: entered allmulticast mode [ 1396.543442][T27570] bridge_slave_1: entered promiscuous mode [ 1396.614646][T18029] usb 6-1: new high-speed USB device number 83 using dummy_hcd [ 1396.706516][T27570] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1396.739104][T27570] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1396.759689][T18029] usb 6-1: device descriptor read/64, error -71 [ 1396.855782][T27570] team0: Port device team_slave_0 added [ 1396.864198][T27570] team0: Port device team_slave_1 added [ 1396.968589][T27570] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1396.977443][T27570] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1397.007299][T27570] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1397.019270][T18029] usb 6-1: new high-speed USB device number 84 using dummy_hcd [ 1397.020762][T27570] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1397.035692][T27570] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1397.077277][T27570] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1397.196252][T18029] usb 6-1: device descriptor read/64, error -71 [ 1397.234001][T27570] hsr_slave_0: entered promiscuous mode [ 1397.271978][T27570] hsr_slave_1: entered promiscuous mode [ 1397.302648][T27570] debugfs: 'hsr0' already exists in 'hsr' [ 1397.315073][ T4946] Bluetooth: hci9: command tx timeout [ 1397.315588][T18029] usb usb6-port1: attempt power cycle [ 1397.329511][T27570] Cannot create hsr debugfs directory [ 1397.695510][T18029] usb 6-1: new high-speed USB device number 85 using dummy_hcd [ 1397.728572][T18029] usb 6-1: device descriptor read/8, error -71 [ 1397.975003][T18029] usb 6-1: new high-speed USB device number 86 using dummy_hcd [ 1397.990104][T27626] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 1398.009655][T18029] usb 6-1: device descriptor read/8, error -71 [ 1398.134902][T18029] usb usb6-port1: unable to enumerate USB device [ 1398.456936][T18029] usb 4-1: new full-speed USB device number 92 using dummy_hcd [ 1398.637631][T18029] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1398.648068][T18029] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 4 [ 1398.682158][T18029] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1398.712719][T18029] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 1398.736488][T18029] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1398.766656][T18029] usb 4-1: config 0 descriptor?? [ 1398.873196][T27570] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1398.914771][T27570] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1398.923230][T27570] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1398.946986][T27570] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1398.965365][T27570] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1398.981118][T27570] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1398.989497][T27570] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1399.003969][T27570] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1399.067587][T27636] netlink: 128 bytes leftover after parsing attributes in process `syz.3.5998'. [ 1399.116249][T27636] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1399.176658][T18029] ath6kl: Failed to submit usb control message: -71 [ 1399.193484][T18029] ath6kl: unable to send the bmi data to the device: -71 [ 1399.199571][T27649] MPI: mpi too large (113288 bits) [ 1399.202701][T18029] ath6kl: Unable to send get target info: -71 [ 1399.219395][T18029] ath6kl: Failed to init ath6kl core: -71 [ 1399.227717][T18029] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1399.247337][T18029] usb 4-1: USB disconnect, device number 92 [ 1399.399166][ T4946] Bluetooth: hci9: command tx timeout [ 1399.450599][T27570] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1399.553156][T27570] 8021q: adding VLAN 0 to HW filter on device team0 [ 1399.601202][T21794] bridge0: port 1(bridge_slave_0) entered blocking state [ 1399.608418][T21794] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1399.627439][T21794] bridge0: port 2(bridge_slave_1) entered blocking state [ 1399.634646][T21794] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1399.860259][T27570] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1399.938974][T11912] usb 6-1: new high-speed USB device number 87 using dummy_hcd [ 1399.948852][T27570] veth0_vlan: entered promiscuous mode [ 1400.004051][T27570] veth1_vlan: entered promiscuous mode [ 1400.086127][T27570] veth0_macvtap: entered promiscuous mode [ 1400.135046][T11912] usb 6-1: Using ep0 maxpacket: 16 [ 1400.136871][T27570] veth1_macvtap: entered promiscuous mode [ 1400.143982][T11912] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1400.164983][T11912] usb 6-1: config 1 has an invalid descriptor of length 142, skipping remainder of the config [ 1400.201022][T27570] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1400.206720][T11912] usb 6-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 1400.232554][T27570] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1400.243031][T11912] usb 6-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 1400.258454][T11912] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1400.288595][ T69] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1400.300880][T11912] usb 6-1: Product: syz [ 1400.320439][T11912] usb 6-1: Manufacturer: syz [ 1400.330328][ T69] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1400.347900][T11912] usb 6-1: SerialNumber: syz [ 1400.369822][ T69] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1400.384306][ T69] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1400.698097][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1400.708333][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1400.788920][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1400.799484][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1401.155591][T27665] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6005'. [ 1401.242275][T27664] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6014'. [ 1401.290686][T27664] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6014'. [ 1401.307472][T27664] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6014'. [ 1401.343509][T27667] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1401.461923][T27670] qrtr: Invalid version 93 [ 1401.486465][T23949] Bluetooth: hci9: command tx timeout [ 1402.507639][T27682] fuse: Bad value for 'fd' [ 1402.748315][T22039] usb 6-1: USB disconnect, device number 87 [ 1402.794684][T18029] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 1402.869699][T27688] FAULT_INJECTION: forcing a failure. [ 1402.869699][T27688] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1402.920778][T27688] CPU: 0 UID: 0 PID: 27688 Comm: syz.1.6011 Tainted: G L syzkaller #0 PREEMPT(full) [ 1402.920801][T27688] Tainted: [L]=SOFTLOCKUP [ 1402.920806][T27688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1402.920815][T27688] Call Trace: [ 1402.920821][T27688] [ 1402.920826][T27688] dump_stack_lvl+0xe8/0x150 [ 1402.920848][T27688] should_fail_ex+0x40c/0x560 [ 1402.920865][T27688] _copy_to_user+0x31/0xb0 [ 1402.920877][T27688] snd_ctl_ioctl_compat+0x9ca/0xd60 [ 1402.920895][T27688] ? __pfx_snd_ctl_ioctl_compat+0x10/0x10 [ 1402.920907][T27688] ? __fget_files+0x2a/0x420 [ 1402.920925][T27688] ? __fget_files+0x3a2/0x420 [ 1402.920939][T27688] ? __fget_files+0x2a/0x420 [ 1402.920954][T27688] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 1402.920972][T27688] __ia32_compat_sys_ioctl+0x5ea/0x950 [ 1402.920985][T27688] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 1402.920997][T27688] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1402.921011][T27688] ? __fget_files+0x3a2/0x420 [ 1402.921029][T27688] ? fput+0xa0/0xd0 [ 1402.921043][T27688] ? ksys_write+0x242/0x270 [ 1402.921059][T27688] __do_fast_syscall_32+0x23e/0x6f0 [ 1402.921073][T27688] ? do_fast_syscall_32+0x33/0x70 [ 1402.921085][T27688] ? lockdep_hardirqs_on+0x7a/0x110 [ 1402.921097][T27688] ? asm_int80_emulation+0x1a/0x20 [ 1402.921108][T27688] ? do_int80_emulation+0x29f/0x550 [ 1402.921123][T27688] do_fast_syscall_32+0x33/0x70 [ 1402.921136][T27688] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1402.921149][T27688] RIP: 0023:0xf7f540ec [ 1402.921160][T27688] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1402.921170][T27688] RSP: 002b:00000000f541650c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 1402.921181][T27688] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c1105511 [ 1402.921189][T27688] RDX: 0000000080000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 1402.921195][T27688] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1402.921202][T27688] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1402.921208][T27688] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1402.921222][T27688] [ 1403.164607][T18029] usb 4-1: Using ep0 maxpacket: 8 [ 1403.172304][T18029] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1403.182381][T18029] usb 4-1: config 6 interface 0 has no altsetting 0 [ 1403.192297][T18029] usb 4-1: New USB device found, idVendor=0471, idProduct=0311, bcdDevice=7e.1c [ 1403.201753][T18029] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1403.210011][T18029] usb 4-1: Product: syz [ 1403.214195][T18029] usb 4-1: Manufacturer: syz [ 1403.218830][T18029] usb 4-1: SerialNumber: syz [ 1403.460631][T18029] pwc: Philips PCVC740K (ToUCam Pro)/PCVC840 (ToUCam II) USB webcam detected. [ 1403.473113][T18029] pwc: Failed to set LED on/off time (-71) [ 1403.485758][T18029] pwc: send_video_command error -71 [ 1403.490984][T18029] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1403.505502][T18029] Philips webcam 4-1:6.0: probe with driver Philips webcam failed with error -71 [ 1403.525239][T18029] usb 4-1: USB disconnect, device number 93 [ 1404.050317][ C0] Unknown status report in ack skb [ 1404.215683][T27713] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6023'. [ 1404.690967][T23949] Bluetooth: hci6: command 0x0406 tx timeout [ 1405.743374][T11914] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 1405.904706][T11914] usb 4-1: device descriptor read/64, error -71 [ 1406.014749][T11912] usb 6-1: new high-speed USB device number 88 using dummy_hcd [ 1406.157028][T11914] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 1406.184498][T11912] usb 6-1: Using ep0 maxpacket: 32 [ 1406.201565][T11912] usb 6-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 1406.227213][T11912] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1406.250599][T11912] usb 6-1: Product: syz [ 1406.257476][T11912] usb 6-1: Manufacturer: syz [ 1406.273593][T11912] usb 6-1: SerialNumber: syz [ 1406.292263][T11912] usb 6-1: config 0 descriptor?? [ 1406.297555][T11914] usb 4-1: device descriptor read/64, error -71 [ 1406.425281][T11914] usb usb4-port1: attempt power cycle [ 1406.520771][T11912] RobotFuzz Open Source InterFace, OSIF 6-1:0.0: version d4.15 found at bus 006 address 088 [ 1406.788205][T11914] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 1406.855296][T11914] usb 4-1: device descriptor read/8, error -71 [ 1407.094725][T11914] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 1407.126946][T11914] usb 4-1: device descriptor read/8, error -71 [ 1407.236189][T11914] usb usb4-port1: unable to enumerate USB device [ 1407.464684][T24329] usb 10-1: new high-speed USB device number 46 using dummy_hcd [ 1407.517726][T18029] usb 6-1: USB disconnect, device number 88 [ 1407.628680][T24329] usb 10-1: config 0 has no interfaces? [ 1407.637698][T24329] usb 10-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1407.680610][T24329] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1407.710543][T24329] usb 10-1: config 0 descriptor?? [ 1407.792307][T27737] tipc: Started in network mode [ 1407.802720][T27737] tipc: Node identity 96b5eda26478, cluster identity 4711 [ 1407.813814][T27737] tipc: Enabled bearer , priority 0 [ 1407.862649][T27736] tipc: Disabling bearer [ 1407.935466][T24329] usb 10-1: USB disconnect, device number 46 [ 1407.987001][T27753] fuse: Bad value for 'fd' [ 1408.257026][T24329] usb 10-1: new high-speed USB device number 47 using dummy_hcd [ 1408.320722][T27760] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6037'. [ 1408.393883][T27762] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6037'. [ 1408.426733][T24329] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1408.442979][T27762] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6037'. [ 1408.470604][T24329] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1408.501619][T24329] usb 10-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1408.516439][T24329] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1408.530242][T24329] usb 10-1: string descriptor 0 read error: -22 [ 1408.536987][T24329] usb 10-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 1408.546306][T24329] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1408.680605][T27766] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6038'. [ 1408.861097][T27770] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6038'. [ 1408.971293][T24329] usb 10-1: Can't set UAC3 power state to 1 for id 10 [ 1408.988518][T24329] usb 10-1: 2:0: failed to get current value for ch 0 (-71) [ 1409.002941][T24329] usb 10-1: 2:0: cannot get min/max values for control 2 (id 2) [ 1409.013095][T24329] usb 10-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 1409.024816][T24329] usb 10-1: [2] FU [Generic Out Playback Volume] ch = 1, val = 0/1/1 [ 1409.215521][T24329] usb 10-1: USB disconnect, device number 47 [ 1409.450275][T27773] FAULT_INJECTION: forcing a failure. [ 1409.450275][T27773] name failslab, interval 1, probability 0, space 0, times 0 [ 1409.465479][T27773] CPU: 0 UID: 0 PID: 27773 Comm: syz.5.6039 Tainted: G L syzkaller #0 PREEMPT(full) [ 1409.465514][T27773] Tainted: [L]=SOFTLOCKUP [ 1409.465521][T27773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1409.465535][T27773] Call Trace: [ 1409.465543][T27773] [ 1409.465551][T27773] dump_stack_lvl+0xe8/0x150 [ 1409.465585][T27773] should_fail_ex+0x40c/0x560 [ 1409.465614][T27773] should_failslab+0xa8/0x100 [ 1409.465645][T27773] __kmalloc_cache_noprof+0xa8/0x660 [ 1409.465673][T27773] ? rtnl_newlink+0x136/0x1bd0 [ 1409.465692][T27773] ? rtnl_newlink+0x136/0x1bd0 [ 1409.465717][T27773] rtnl_newlink+0x136/0x1bd0 [ 1409.465737][T27773] ? kasan_save_track+0x4f/0x80 [ 1409.465761][T27773] ? kasan_save_track+0x3e/0x80 [ 1409.465784][T27773] ? kasan_save_free_info+0x40/0x50 [ 1409.465804][T27773] ? __kasan_slab_free+0x5c/0x80 [ 1409.465828][T27773] ? kmem_cache_free+0x182/0x650 [ 1409.465853][T27773] ? dev_hard_start_xmit+0x2cd/0x830 [ 1409.465875][T27773] ? __netlink_deliver_tap+0x5b4/0x860 [ 1409.465897][T27773] ? netlink_deliver_tap+0x19c/0x1b0 [ 1409.465918][T27773] ? netlink_unicast+0x77f/0x940 [ 1409.465935][T27773] ? netlink_sendmsg+0x813/0xb40 [ 1409.465958][T27773] ? __pfx_rtnl_newlink+0x10/0x10 [ 1409.465976][T27773] ? __do_fast_syscall_32+0x23e/0x6f0 [ 1409.466006][T27773] ? do_fast_syscall_32+0x33/0x70 [ 1409.466028][T27773] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1409.466082][T27773] ? kasan_quarantine_put+0xbb/0x1f0 [ 1409.466106][T27773] ? lockdep_hardirqs_on+0x7a/0x110 [ 1409.466129][T27773] ? nlmon_xmit+0xb0/0x100 [ 1409.466153][T27773] ? kmem_cache_free+0x182/0x650 [ 1409.466187][T27773] ? __lock_acquire+0x683/0x2cf0 [ 1409.466216][T27773] ? __dev_queue_xmit+0x29b/0x3820 [ 1409.466242][T27773] ? __local_bh_enable_ip+0xd0/0x130 [ 1409.466266][T27773] ? lockdep_hardirqs_on+0x7a/0x110 [ 1409.466287][T27773] ? __dev_queue_xmit+0x29b/0x3820 [ 1409.466309][T27773] ? __local_bh_enable_ip+0xd0/0x130 [ 1409.466330][T27773] ? __dev_queue_xmit+0x29b/0x3820 [ 1409.466358][T27773] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 1409.466378][T27773] ? __pfx_rtnl_newlink+0x10/0x10 [ 1409.466405][T27773] ? __pfx_rtnl_newlink+0x10/0x10 [ 1409.466422][T27773] rtnetlink_rcv_msg+0x802/0xc00 [ 1409.466445][T27773] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 1409.466464][T27773] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1409.466480][T27773] ? ref_tracker_free+0x689/0x830 [ 1409.466508][T27773] ? __pfx_ref_tracker_free+0x10/0x10 [ 1409.466543][T27773] netlink_rcv_skb+0x226/0x4a0 [ 1409.466566][T27773] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1409.466587][T27773] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1409.466620][T27773] ? netlink_deliver_tap+0x2e/0x1b0 [ 1409.466642][T27773] ? netlink_deliver_tap+0x2e/0x1b0 [ 1409.466673][T27773] netlink_unicast+0x7bb/0x940 [ 1409.466702][T27773] netlink_sendmsg+0x813/0xb40 [ 1409.466730][T27773] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1409.466756][T27773] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1409.466781][T27773] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1409.466800][T27773] sock_sendmsg_nosec+0x13a/0x180 [ 1409.466828][T27773] ____sys_sendmsg+0x54e/0x850 [ 1409.466852][T27773] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1409.466885][T27773] ___sys_sendmsg+0x2a5/0x360 [ 1409.466905][T27773] ? __lock_acquire+0x683/0x2cf0 [ 1409.466935][T27773] ? __pfx____sys_sendmsg+0x10/0x10 [ 1409.466957][T27773] ? get_pid_task+0x20/0x1f0 [ 1409.466984][T27773] ? get_pid_task+0x20/0x1f0 [ 1409.467016][T27773] ? get_pid_task+0x20/0x1f0 [ 1409.467070][T27773] ? __fget_files+0x2a/0x420 [ 1409.467096][T27773] ? __fget_files+0x3a2/0x420 [ 1409.467127][T27773] __sys_sendmsg+0x177/0x240 [ 1409.467149][T27773] ? __pfx___sys_sendmsg+0x10/0x10 [ 1409.467182][T27773] __do_fast_syscall_32+0x23e/0x6f0 [ 1409.467206][T27773] ? do_fast_syscall_32+0x33/0x70 [ 1409.467228][T27773] ? lockdep_hardirqs_on+0x7a/0x110 [ 1409.467248][T27773] ? asm_int80_emulation+0x1a/0x20 [ 1409.467267][T27773] ? do_int80_emulation+0x29f/0x550 [ 1409.467289][T27773] ? trace_irq_disable+0x3b/0x140 [ 1409.467317][T27773] do_fast_syscall_32+0x33/0x70 [ 1409.467341][T27773] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1409.467365][T27773] RIP: 0023:0xf7f260ec [ 1409.467383][T27773] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1409.467399][T27773] RSP: 002b:00000000f53e650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1409.467418][T27773] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800006c0 [ 1409.467431][T27773] RDX: 0000000024000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1409.467442][T27773] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1409.467452][T27773] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1409.467462][T27773] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1409.467486][T27773] [ 1410.335816][T24329] usb 10-1: new full-speed USB device number 48 using dummy_hcd [ 1410.499006][T24329] usb 10-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1410.514543][T24329] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1410.526333][T24329] usb 10-1: Product: syz [ 1410.532943][T24329] usb 10-1: Manufacturer: syz [ 1410.540936][T24329] usb 10-1: SerialNumber: syz [ 1410.560636][T24329] usb 10-1: config 0 descriptor?? [ 1410.574798][T11914] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 1410.744650][T11914] usb 4-1: Using ep0 maxpacket: 8 [ 1410.761468][T11914] usb 4-1: New USB device found, idVendor=0582, idProduct=002f, bcdDevice= 0.40 [ 1410.773872][T24329] usb 10-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1410.795845][T11914] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1410.804235][T11914] usb 4-1: Product: syz [ 1410.828735][T11914] usb 4-1: Manufacturer: syz [ 1410.843156][T11914] usb 4-1: SerialNumber: syz [ 1410.975656][T18029] usb 6-1: new high-speed USB device number 89 using dummy_hcd [ 1410.993106][T24329] dvb_usb_rtl28xxu 10-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1411.047307][T27801] syzkaller0: entered promiscuous mode [ 1411.069696][T24329] usb 10-1: USB disconnect, device number 48 [ 1411.085069][T11914] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1411.091800][T27801] syzkaller0: entered allmulticast mode [ 1411.094702][T11914] usb 4-1: invalid MIDI in EP 0 [ 1411.142610][T27804] tipc: Started in network mode [ 1411.161370][T27804] tipc: Node identity 429dfd7bd9da, cluster identity 4711 [ 1411.168914][T18029] usb 6-1: Using ep0 maxpacket: 16 [ 1411.177718][T27804] tipc: Enabled bearer , priority 0 [ 1411.186128][T18029] usb 6-1: config 0 has an invalid interface number: 34 but max is 0 [ 1411.200782][T18029] usb 6-1: config 0 has no interface number 0 [ 1411.216666][T18029] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 1411.233258][T18029] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 1411.300286][T18029] usb 6-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 1411.337827][T18029] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1411.381877][T18029] usb 6-1: Product: syz [ 1411.394947][T18029] usb 6-1: Manufacturer: syz [ 1411.405652][T18029] usb 6-1: SerialNumber: syz [ 1411.418641][T27805] tipc: Resetting bearer [ 1411.429199][T18029] usb 6-1: config 0 descriptor?? [ 1411.439391][T27796] raw-gadget.5 gadget.5: fail, usb_ep_enable returned -22 [ 1411.442030][T11914] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1411.446824][T27796] raw-gadget.5 gadget.5: fail, usb_ep_enable returned -22 [ 1411.503297][T11914] usb 4-1: USB disconnect, device number 98 [ 1411.537735][T27805] tipc: Disabling bearer [ 1411.627458][T23850] udevd[23850]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1411.680717][T27796] raw-gadget.5 gadget.5: fail, usb_ep_enable returned -22 [ 1411.704189][T27796] raw-gadget.5 gadget.5: fail, usb_ep_enable returned -22 [ 1411.804584][T24329] usb 10-1: new high-speed USB device number 49 using dummy_hcd [ 1411.954981][T24329] usb 10-1: Using ep0 maxpacket: 32 [ 1411.967420][T24329] usb 10-1: config 0 has an invalid interface number: 188 but max is 0 [ 1411.976638][T24329] usb 10-1: config 0 has no interface number 0 [ 1411.994021][T24329] usb 10-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1412.017252][T24329] usb 10-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1412.041102][T24329] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1412.070519][T24329] usb 10-1: Product: syz [ 1412.079292][T24329] usb 10-1: Manufacturer: syz [ 1412.090322][T24329] usb 10-1: SerialNumber: syz [ 1412.111123][T24329] usb 10-1: config 0 descriptor?? [ 1412.126659][T27811] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 1412.294523][ T5723] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 1412.342211][T27811] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 1412.464501][ T5723] usb 4-1: Using ep0 maxpacket: 16 [ 1412.482394][ T5723] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1412.510348][ T5723] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1412.529300][ T5723] usb 4-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 1412.541375][ T5723] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1412.568647][T24329] asix 10-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 1412.583230][ T5723] usb 4-1: Product: syz [ 1412.596527][ T5723] usb 4-1: Manufacturer: syz [ 1412.603323][T24329] asix 10-1:0.188: probe with driver asix failed with error -61 [ 1412.613382][ T5723] usb 4-1: SerialNumber: syz [ 1412.632639][ T5723] usb 4-1: config 0 descriptor?? [ 1412.793400][T27811] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1412.810917][T27811] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1412.867360][ T5723] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input182 [ 1413.040061][T22039] usb 10-1: USB disconnect, device number 49 [ 1413.194498][ T5723] rc_core: IR keymap rc-imon-pad not found [ 1413.202365][ T5723] Registered IR keymap rc-empty [ 1413.214372][ T5723] imon 4-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 1413.242640][ T5723] imon 4-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1413.289309][ T5723] rc rc0: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1413.307767][ T5723] input: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input183 [ 1413.330501][ T5723] imon 4-1:0.0: iMON device (15c2:0041, intf0) on usb<4:99> initialized [ 1413.528608][T27796] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1413.556049][T27796] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1413.740150][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 1413.740735][ T5694] usb 4-1: USB disconnect, device number 99 [ 1414.787836][T27839] fuse: Bad value for 'fd' [ 1414.918031][ T4946] Bluetooth: hci0: command 0x0406 tx timeout [ 1414.929047][ T5723] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 1415.064596][T11914] usb 10-1: new high-speed USB device number 50 using dummy_hcd [ 1415.088356][T18029] asix 6-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1415.128440][ T5723] usb 4-1: Using ep0 maxpacket: 32 [ 1415.152120][T18029] asix 6-1:0.34: probe with driver asix failed with error -71 [ 1415.175137][ T5723] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1415.222910][T18029] usb 6-1: USB disconnect, device number 89 [ 1415.250680][ T5723] usb 4-1: config 0 has no interfaces? [ 1415.266651][T11914] usb 10-1: Using ep0 maxpacket: 8 [ 1415.282237][T11914] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1415.288099][ T5723] usb 4-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 1415.292739][T11914] usb 10-1: config 6 interface 0 has no altsetting 0 [ 1415.328114][T11914] usb 10-1: New USB device found, idVendor=0471, idProduct=0311, bcdDevice=7e.1c [ 1415.339055][T11914] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1415.347449][T11914] usb 10-1: Product: syz [ 1415.351932][T11914] usb 10-1: Manufacturer: syz [ 1415.358046][T11914] usb 10-1: SerialNumber: syz [ 1415.360856][ T5723] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1415.427435][ T5723] usb 4-1: config 0 descriptor?? [ 1415.586573][T11914] pwc: Philips PCVC740K (ToUCam Pro)/PCVC840 (ToUCam II) USB webcam detected. [ 1415.619815][T27853] loop8: detected capacity change from 0 to 8 [ 1415.635072][T11914] pwc: Failed to set LED on/off time (-71) [ 1415.646654][T11914] pwc: send_video_command error -71 [ 1415.664682][T27853] Dev loop8: unable to read RDB block 8 [ 1415.673333][T11914] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1415.682226][T11914] Philips webcam 10-1:6.0: probe with driver Philips webcam failed with error -71 [ 1415.708228][T11914] usb 10-1: USB disconnect, device number 50 [ 1415.717273][T27853] loop8: unable to read partition table [ 1415.777637][T27853] loop8: partition table beyond EOD, truncated [ 1415.827841][T27853] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 1416.324755][ T5723] usb 6-1: new low-speed USB device number 90 using dummy_hcd [ 1416.484606][ T5723] usb 6-1: Invalid ep0 maxpacket: 16 [ 1416.624705][ T5723] usb 6-1: new low-speed USB device number 91 using dummy_hcd [ 1416.775284][ T5723] usb 6-1: Invalid ep0 maxpacket: 16 [ 1416.783039][ T5723] usb usb6-port1: attempt power cycle [ 1416.874875][T11914] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 1417.044715][T11914] usb 2-1: Using ep0 maxpacket: 16 [ 1417.057159][T11914] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1417.071621][T11914] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1417.096562][T11914] usb 2-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 1417.107348][T11914] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1417.117153][T11914] usb 2-1: Product: syz [ 1417.122580][T11914] usb 2-1: Manufacturer: syz [ 1417.127377][T11914] usb 2-1: SerialNumber: syz [ 1417.138773][T11914] usb 2-1: config 0 descriptor?? [ 1417.146204][ T5723] usb 6-1: new low-speed USB device number 92 using dummy_hcd [ 1417.186057][ T5723] usb 6-1: Invalid ep0 maxpacket: 16 [ 1417.327392][ T5723] usb 6-1: new low-speed USB device number 93 using dummy_hcd [ 1417.363406][T27871] sctp: [Deprecated]: syz.9.6071 (pid 27871) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1417.363406][T27871] Use struct sctp_sack_info instead [ 1417.369443][T11914] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input184 [ 1417.408849][ T5723] usb 6-1: Invalid ep0 maxpacket: 16 [ 1417.414789][ T5723] usb usb6-port1: unable to enumerate USB device [ 1417.662241][ T5723] usb 4-1: USB disconnect, device number 100 [ 1417.684530][T11914] rc_core: IR keymap rc-imon-pad not found [ 1417.695455][T11914] Registered IR keymap rc-empty [ 1417.706454][T11914] imon 2-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 1417.833956][T11914] imon 2-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1417.858096][T11914] rc rc0: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 1417.917012][T11914] input: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input185 [ 1417.932382][T11914] imon 2-1:0.0: iMON device (15c2:0041, intf0) on usb<2:55> initialized [ 1418.674079][T27891] netlink: 'syz.3.6076': attribute type 4 has an invalid length. [ 1418.739018][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 1418.757050][ T5723] usb 2-1: USB disconnect, device number 55 [ 1419.084817][ T5627] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 1419.265515][ T5627] usb 4-1: Using ep0 maxpacket: 16 [ 1419.292378][ T5627] usb 4-1: config 0 has no interfaces? [ 1419.325920][ T5627] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1419.364132][ T5627] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1419.389746][ T5627] usb 4-1: Manufacturer: syz [ 1419.421198][T12842] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1419.421214][ T5627] usb 4-1: config 0 descriptor?? [ 1419.441206][T12842] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1419.544641][T11914] usb 10-1: new high-speed USB device number 51 using dummy_hcd [ 1419.715220][T11914] usb 10-1: Using ep0 maxpacket: 32 [ 1419.730507][T11914] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 1419.762553][T11914] usb 10-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7 [ 1419.857099][T11914] usb 10-1: New USB device found, idVendor=17cc, idProduct=1915, bcdDevice= 0.40 [ 1419.894903][ T5627] usb 6-1: new high-speed USB device number 94 using dummy_hcd [ 1419.903705][T11914] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1419.924875][T11914] usb 10-1: Product: syz [ 1419.933554][T11914] usb 10-1: Manufacturer: syz [ 1419.941946][T11914] usb 10-1: SerialNumber: syz [ 1420.066553][ T5627] usb 6-1: Using ep0 maxpacket: 8 [ 1420.082637][ T5627] usb 6-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 196, changing to 11 [ 1420.102413][ T5627] usb 6-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1420.126127][ T5627] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1420.140911][ T5627] usb 6-1: New USB device found, idVendor=20bc, idProduct=5500, bcdDevice= 0.00 [ 1420.156305][ T5627] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1420.173814][T11914] usb 10-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1420.193030][ T5627] usb 6-1: config 0 descriptor?? [ 1420.200961][T11914] usb 10-1: unit 1 not found! [ 1420.291337][T11914] usb 10-1: selecting invalid altsetting 1 [ 1420.298304][T11914] snd-usb-caiaq 10-1:1.2: can't set alt interface. [ 1420.307191][T11914] usb 10-1: unable to init card! (ret=-5) [ 1420.316376][T11914] snd-usb-caiaq 10-1:1.2: probe with driver snd-usb-caiaq failed with error -5 [ 1420.341482][T11914] usb 10-1: USB disconnect, device number 51 [ 1420.769867][ T5627] betop 0003:20BC:5500.0043: unknown main item tag 0x0 [ 1420.787937][ T5627] betop 0003:20BC:5500.0043: unknown main item tag 0x0 [ 1420.818839][ T5627] betop 0003:20BC:5500.0043: unknown main item tag 0x0 [ 1420.842881][ T5627] betop 0003:20BC:5500.0043: unknown main item tag 0x0 [ 1420.861530][ T5627] betop 0003:20BC:5500.0043: unknown main item tag 0x0 [ 1420.879663][ T5627] betop 0003:20BC:5500.0043: unknown main item tag 0x0 [ 1420.908414][ T5627] betop 0003:20BC:5500.0043: unknown main item tag 0x0 [ 1420.958933][ T5627] betop 0003:20BC:5500.0043: hidraw0: USB HID v0.04 Device [HID 20bc:5500] on usb-dummy_hcd.5-1/input0 [ 1421.018940][ T5627] betop 0003:20BC:5500.0043: no inputs found [ 1421.031234][ T5627] usb 6-1: USB disconnect, device number 94 [ 1421.106101][T27911] fido_id[27911]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 1421.124503][T11914] usb 10-1: new high-speed USB device number 52 using dummy_hcd [ 1421.294959][T11914] usb 10-1: Using ep0 maxpacket: 16 [ 1421.308258][T11914] usb 10-1: config 1 has an invalid interface number: 105 but max is 0 [ 1421.332327][T11914] usb 10-1: config 1 has no interface number 0 [ 1421.353589][T11914] usb 10-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1421.387982][T11914] usb 10-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1421.415310][T11914] usb 10-1: config 1 interface 105 has no altsetting 0 [ 1421.439506][T11914] usb 10-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 1421.461118][T11914] usb 10-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1421.488304][T11914] usb 10-1: Product: syz [ 1421.507660][T11914] usb 10-1: Manufacturer: syz [ 1421.519241][T11914] usb 10-1: SerialNumber: syz [ 1421.537972][T27910] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 1421.560799][T27910] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 1421.941125][T27918] netlink: 92 bytes leftover after parsing attributes in process `syz.5.6084'. [ 1421.988351][T27919] netlink: 92 bytes leftover after parsing attributes in process `syz.5.6084'. [ 1422.077272][T11914] aqc111 10-1:1.105: probe with driver aqc111 failed with error -71 [ 1422.127257][T11914] usb 10-1: USB disconnect, device number 52 [ 1422.135460][T27920] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6084'. [ 1422.339285][T22039] usb 4-1: USB disconnect, device number 101 [ 1423.082260][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.094298][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.174519][T11914] usb 6-1: new high-speed USB device number 95 using dummy_hcd [ 1423.347113][T11914] usb 6-1: config 0 has an invalid interface number: 64 but max is 0 [ 1423.364722][T11914] usb 6-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 1423.386064][T11914] usb 6-1: config 0 has no interface number 0 [ 1423.412367][T11914] usb 6-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 1423.437340][T11914] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1423.446631][T11914] usb 6-1: Product: syz [ 1423.456598][T11914] usb 6-1: Manufacturer: syz [ 1423.465452][T11914] usb 6-1: SerialNumber: syz [ 1423.486774][T11914] usb 6-1: config 0 descriptor?? [ 1423.935842][T27950] netlink: 80 bytes leftover after parsing attributes in process `syz.1.6093'. [ 1423.961157][T27953] FAULT_INJECTION: forcing a failure. [ 1423.961157][T27953] name failslab, interval 1, probability 0, space 0, times 0 [ 1423.974557][T27953] CPU: 1 UID: 0 PID: 27953 Comm: syz.3.6095 Tainted: G L syzkaller #0 PREEMPT(full) [ 1423.974593][T27953] Tainted: [L]=SOFTLOCKUP [ 1423.974602][T27953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1423.974615][T27953] Call Trace: [ 1423.974624][T27953] [ 1423.974633][T27953] dump_stack_lvl+0xe8/0x150 [ 1423.974667][T27953] should_fail_ex+0x40c/0x560 [ 1423.974696][T27953] should_failslab+0xa8/0x100 [ 1423.974728][T27953] __kmalloc_cache_noprof+0xa8/0x660 [ 1423.974753][T27953] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 1423.974782][T27953] ? __kmalloc_cache_noprof+0x150/0x660 [ 1423.974807][T27953] ? sctp_add_bind_addr+0x8c/0x370 [ 1423.974835][T27953] ? sctp_add_bind_addr+0x8c/0x370 [ 1423.974870][T27953] sctp_add_bind_addr+0x8c/0x370 [ 1423.974902][T27953] sctp_copy_local_addr_list+0x31a/0x4e0 [ 1423.974935][T27953] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 1423.974965][T27953] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 1423.974995][T27953] ? sctp_v6_is_any+0x64/0x80 [ 1423.975017][T27953] ? sctp_copy_one_addr+0x93/0x360 [ 1423.975047][T27953] sctp_bind_addr_copy+0xb3/0x3c0 [ 1423.975077][T27953] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1423.975106][T27953] sctp_connect_new_asoc+0x2ff/0x6b0 [ 1423.975140][T27953] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1423.975171][T27953] ? __local_bh_enable_ip+0xd0/0x130 [ 1423.975193][T27953] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1423.975215][T27953] ? security_sctp_bind_connect+0x7e/0x2c0 [ 1423.975243][T27953] sctp_sendmsg+0x159b/0x2d00 [ 1423.975275][T27953] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1423.975301][T27953] ? aa_sk_perm+0x6d5/0x900 [ 1423.975325][T27953] ? __might_fault+0xaf/0x130 [ 1423.975350][T27953] ? sock_rps_record_flow+0x19/0x350 [ 1423.975369][T27953] ? inet_sendmsg+0x298/0x320 [ 1423.975388][T27953] ? __pfx_inet_sendmsg+0x10/0x10 [ 1423.975403][T27953] sock_sendmsg_nosec+0x10e/0x180 [ 1423.975431][T27953] __sys_sendto+0x408/0x5a0 [ 1423.975457][T27953] ? __pfx___sys_sendto+0x10/0x10 [ 1423.975486][T27953] ? __fget_files+0x3a2/0x420 [ 1423.975521][T27953] ? ksys_write+0x242/0x270 [ 1423.975544][T27953] __ia32_sys_sendto+0xdd/0x100 [ 1423.975565][T27953] __do_fast_syscall_32+0x23e/0x6f0 [ 1423.975588][T27953] ? do_fast_syscall_32+0x33/0x70 [ 1423.975609][T27953] ? lockdep_hardirqs_on+0x7a/0x110 [ 1423.975627][T27953] ? asm_int80_emulation+0x1a/0x20 [ 1423.975644][T27953] ? do_int80_emulation+0x29f/0x550 [ 1423.975666][T27953] ? trace_irq_disable+0x3b/0x140 [ 1423.975692][T27953] do_fast_syscall_32+0x33/0x70 [ 1423.975710][T27953] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1423.975731][T27953] RIP: 0023:0xf7fc60ec [ 1423.975749][T27953] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1423.975764][T27953] RSP: 002b:00000000f548650c EFLAGS: 00000206 ORIG_RAX: 0000000000000171 [ 1423.975782][T27953] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080847fff [ 1423.975796][T27953] RDX: 0000000000034000 RSI: 0000000000000000 RDI: 000000008005ffe4 [ 1423.975808][T27953] RBP: 000000000000001c R08: 0000000000000000 R09: 0000000000000000 [ 1423.975820][T27953] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1423.975832][T27953] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1423.975861][T27953] [ 1423.977386][T27954] netlink: 'syz.9.6094': attribute type 13 has an invalid length. [ 1424.366803][ T30] INFO: task syz.9.5586:25230 blocked for more than 143 seconds. [ 1424.374963][ T30] Tainted: G L syzkaller #0 [ 1424.381644][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1424.390721][ T30] task:syz.9.5586 state:D stack:25608 pid:25230 tgid:25230 ppid:21791 task_flags:0x440040 flags:0x08080002 [ 1424.406322][ T30] Call Trace: [ 1424.409810][ T30] [ 1424.414189][ T30] __schedule+0x17d9/0x56c0 [ 1424.419367][ T30] ? __pfx___schedule+0x10/0x10 [ 1424.424507][ T30] ? schedule+0x90/0x2b0 [ 1424.428947][ T30] schedule+0x164/0x2b0 [ 1424.433434][ T30] schedule_preempt_disabled+0x13/0x30 [ 1424.440593][ T30] rwsem_down_read_slowpath+0x6ba/0x920 [ 1424.448062][ T30] ? rwsem_down_read_slowpath+0x57f/0x920 [ 1424.453988][ T30] ? __pfx_rwsem_down_read_slowpath+0x10/0x10 [ 1424.460504][ T30] ? page_cache_ra_order+0x3eb/0xee0 [ 1424.467682][ T30] down_read+0x9c/0x330 [ 1424.472221][ T30] page_cache_ra_order+0x3eb/0xee0 [ 1424.477653][ T30] ? maybe_unlock_mmap_for_io+0x20b/0x290 [ 1424.483741][ T30] do_sync_mmap_readahead+0x75e/0x990 [ 1424.489397][ T30] ? __pfx_do_sync_mmap_readahead+0x10/0x10 [ 1424.495700][ T30] ? count_memcg_event_mm+0x1d/0x250 [ 1424.501201][ T30] ? count_memcg_event_mm+0x1d/0x250 [ 1424.506915][ T30] filemap_fault+0x7d9/0x13b0 [ 1424.511884][ T30] ? __pfx_filemap_fault+0x10/0x10 [ 1424.524347][ T30] ? lruvec_stat_mod_folio+0x6e/0x3e0 [ 1424.536589][ T30] ? lruvec_stat_mod_folio+0x6e/0x3e0 [ 1424.549334][ T30] ? lruvec_stat_mod_folio+0x28b/0x3e0 [ 1424.564474][ T30] ? pte_alloc_one+0x1e0/0x370 [ 1424.574354][ T30] __do_fault+0x138/0x2a0 [ 1424.580221][ T30] do_pte_missing+0x684/0x34b0 [ 1424.585130][ T30] ? __pfx___thp_vma_allowable_orders+0x10/0x10 [ 1424.591513][ T30] ? lock_vma_under_rcu+0x1d1/0x500 [ 1424.594951][T11912] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 1424.598319][ T30] handle_mm_fault+0x1b36/0x3080 [ 1424.609493][ T30] ? handle_mm_fault+0xec/0x3080 [ 1424.614523][ T30] ? __pfx_handle_mm_fault+0x10/0x10 [ 1424.619831][ T30] ? lock_vma_under_rcu+0x45a/0x500 [ 1424.625136][ T30] ? lockdep_hardirqs_on+0x7a/0x110 [ 1424.630378][ T30] do_user_addr_fault+0xa4d/0x1340 [ 1424.635898][ T30] ? trace_page_fault_user+0x84/0x1e0 [ 1424.641353][ T30] exc_page_fault+0x6a/0xc0 [ 1424.645961][ T30] asm_exc_page_fault+0x26/0x30 [ 1424.650835][ T30] RIP: 0023:0xf717619a [ 1424.654983][ T30] RSP: 002b:00000000f753fb3c EFLAGS: 00010247 [ 1424.661073][ T30] RAX: 0000000000000000 RBX: 00000000f73e6ff4 RCX: 0000000000000000 [ 1424.669140][ T30] RDX: 0000000000000001 RSI: 000000002d1200da RDI: 0000000080000080 [ 1424.682362][ T30] RBP: 00000000f753fd98 R08: 0000000000000000 R09: 0000000000000000 [ 1424.690559][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1424.699797][ T30] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1424.714491][ T30] [ 1424.720454][ T30] [ 1424.720454][ T30] Showing all locks held in the system: [ 1424.738346][ T30] 6 locks held by kworker/0:0/9: [ 1424.749924][ T30] #0: ffff888022ecb140 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1424.790406][ T30] #1: ffffc900000e7c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1424.804517][T11912] usb 4-1: Using ep0 maxpacket: 32 [ 1424.813456][T11912] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1424.818609][ T30] #2: [ 1424.829428][T11912] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1424.831444][ T30] ffff888029f931d8 [ 1424.834192][T11912] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 1424.853084][ T30] (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4d30 [ 1424.867232][ T30] #3: ffff8880360331d8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 1424.871458][T11912] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1424.884572][ T30] #4: ffff88803afb11a0 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 1424.906770][ T30] #5: ffffffff8e9f5988 (umhelper_sem){++++}-{4:4}, at: usermodehelper_read_trylock+0xfc/0x2c0 [ 1424.916027][T11912] usb 4-1: config 0 descriptor?? [ 1424.919244][ T30] 1 lock held by khungtaskd/30: [ 1424.929004][ T30] #0: ffffffff8eb59c60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1424.942895][ T30] 2 locks held by kworker/1:2/1562: [ 1424.954465][ T30] #0: ffff88801b02b140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1424.968477][ T30] #1: ffffc900061f7c40 ((work_completion)(&m->mpeg_thread)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1424.972266][T27948] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1424.988793][ T30] 2 locks held by getty/5383: [ 1425.020581][ T30] #0: ffff888035a8f0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1425.042644][ T30] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 1425.066879][ T30] 3 locks held by kworker/0:3/5627: [ 1425.078230][ T30] #0: ffff88801b02b140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1425.105371][ T30] #1: ffffc9000398fc40 (netdev_work){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1425.125433][ T30] #2: ffffffff9002d8c0 (rtnl_mutex){+.+.}-{4:4}, at: netdev_work_proc+0x6f/0x770 [ 1425.145786][ T30] 5 locks held by kworker/1:10/11912: [ 1425.170263][ T30] #0: ffff888022ecb140 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1425.195956][ T30] #1: ffffc9000cfc7c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1425.217566][ T30] #2: ffff88802a18d1d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4d30 [ 1425.242224][ T30] #3: ffff8880499b41d8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 1425.264018][ T30] #4: ffff88803363b1a0 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 1425.283452][ T30] 5 locks held by kworker/1:12/11914: [ 1425.289212][ T30] #0: ffff888022ecb140 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1425.301487][ T30] #1: ffffc9000e5d7c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1425.313512][ T30] #2: ffff88802a2361d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4d30 [ 1425.322986][ T30] #3: ffff88802bc351d8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 1425.332439][ T30] #4: ffff88807e2991a0 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 1425.348295][ T30] 4 locks held by udevd/23917: [ 1425.355280][ T30] #0: ffff88802bc87f38 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xa4/0xca0 [ 1425.355876][T11912] kone 0003:1E7D:2CED.0044: item fetching failed at offset 4/5 [ 1425.364166][ T30] #1: ffff88807b6e6480 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x5d/0x420 [ 1425.364239][ T30] #2: ffff88807c1bed28 (kn->active#31){++++}-{0:0} [ 1425.376684][T11912] kone 0003:1E7D:2CED.0044: parse failed [ 1425.398745][T11912] kone 0003:1E7D:2CED.0044: probe with driver kone failed with error -22 [ 1425.403309][ T30] , at: kernfs_seq_start+0xb2/0x420 [ 1425.415173][ T30] #3: ffff8880360331d8 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 1425.426784][ T30] 4 locks held by udevd/24193: [ 1425.432874][ T30] #0: ffff88804bb3c998 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xa4/0xca0 [ 1425.443602][ T30] #1: ffff8880206d4c80 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x5d/0x420 [ 1425.459005][ T30] #2: ffff8880a069ae18 (kn->active#31){++++}-{0:0}, at: kernfs_seq_start+0xb2/0x420 [ 1425.470023][ T30] #3: ffff88802bc351d8 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 1425.482544][ T30] 4 locks held by syz.1.5533/25032: [ 1425.489468][ T30] 1 lock held by syz.9.5586/25230: [ 1425.497429][ T30] #0: ffff88802388ac00 (mapping.invalidate_lock){++++}-{4:4}, at: page_cache_ra_order+0x3eb/0xee0 [ 1425.509996][ T30] 1 lock held by syz.4.5681/25854: [ 1425.516923][ T30] #0: ffff88802388aa68 (&sb->s_type->i_mutex_key#10){++++}-{4:4}, at: blkdev_common_ioctl+0x22a9/0x3250 [ 1425.529935][ T30] 1 lock held by syz.0.5769/26407: [ 1425.535414][ T30] #0: ffff88802388ac00 (mapping.invalidate_lock){++++}-{4:4}, at: page_cache_ra_order+0x3eb/0xee0 [ 1425.566482][T18029] usb 4-1: USB disconnect, device number 102 [ 1425.587123][ T30] 1 lock held by syz.6.5771/26426: [ 1425.600515][ T30] #0: ffff88802388ac00 (mapping.invalidate_lock){++++}-{4:4}, at: page_cache_ra_order+0x3eb/0xee0 [ 1425.616739][ T30] 1 lock held by syz.2.5922/27392: [ 1425.621938][ T30] #0: ffff88802388aa68 (&sb->s_type->i_mutex_key#10){++++}-{4:4}, at: blkdev_fallocate+0x260/0x530 [ 1425.633405][ T30] 1 lock held by syz.2.5922/27393: [ 1425.646301][ T30] #0: ffff88802388aa68 (&sb->s_type->i_mutex_key#10){++++}-{4:4}, at: blkdev_fallocate+0x260/0x530 [ 1425.658956][ T30] 1 lock held by syz.8.6067/27854: [ 1425.667286][ T30] #0: ffff88802388ac00 (mapping.invalidate_lock){++++}-{4:4}, at: page_cache_ra_order+0x3eb/0xee0 [ 1425.696214][ T30] 1 lock held by syz.8.6067/27857: [ 1425.701419][ T30] #0: ffff88802388ac00 (mapping.invalidate_lock){++++}-{4:4}, at: page_cache_ra_order+0x3eb/0xee0 [ 1425.717367][ T30] 1 lock held by syz.8.6067/27859: [ 1425.724507][T11914] uvcvideo 6-1:0.64: Found UVC 0.00 device syz (046d:0823) [ 1425.731784][T11914] uvcvideo 6-1:0.64: No valid video chain found. [ 1425.743467][ T30] #0: ffff88802388ac00 (mapping.invalidate_lock){++++}-{4:4}, at: page_cache_ra_order+0x3eb/0xee0 [ 1425.755706][T11914] usb 6-1: USB disconnect, device number 95 [ 1425.763986][ T30] 3 locks held by syz.5.6089/27938: [ 1425.770655][ T30] 1 lock held by syz.1.6093/27950: [ 1425.778955][ T30] #0: ffffffff9002d8c0 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 1425.789206][ T30] 1 lock held by syz.1.6093/27956: [ 1425.794368][ T30] #0: ffffffff9002d8c0 (rtnl_mutex){+.+.}-{4:4}, at: devinet_ioctl+0x2fb/0x1c50 [ 1425.804216][ T30] 2 locks held by syz.9.6094/27949: [ 1425.810092][ T30] #0: ffff888076e44740 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: sock_close+0x82/0x220 [ 1425.822126][ T30] #1: ffffffff8eb5ff68 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 1425.837128][ T30] 2 locks held by syz.9.6094/27951: [ 1425.843982][ T30] #0: ffffffff9002d8c0 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 1425.856781][ T30] #1: ffffffff8eb5ff68 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 1425.869175][ T30] 1 lock held by syz.9.6094/27954: [ 1425.877489][ T30] #0: ffffffff9002d8c0 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8a3/0x1bd0 [ 1425.887155][ T30] 3 locks held by syz.3.6096/27957: [ 1425.892400][ T30] #0: ffff8880553852c0 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: sock_close+0x82/0x220 [ 1425.904188][ T30] #1: ffffffff9009c248 ((netlink_chain).rwsem){++++}-{4:4}, at: blocking_notifier_call_chain+0x54/0x90 [ 1425.918461][ T30] #2: ffff88804e8554d0 (&nft_net->commit_mutex){+.+.}-{4:4}, at: nft_rcv_nl_event+0x148/0xe60 [ 1425.930662][ T30] [ 1425.936297][ T30] ============================================= [ 1425.936297][ T30] [ 1425.944813][ T30] NMI backtrace for cpu 1 [ 1425.944836][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1425.944864][ T30] Tainted: [L]=SOFTLOCKUP [ 1425.944873][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1425.944886][ T30] Call Trace: [ 1425.944895][ T30] [ 1425.944904][ T30] dump_stack_lvl+0xe8/0x150 [ 1425.944938][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 1425.944968][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1425.945000][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x380 [ 1425.945031][ T30] sys_info+0x135/0x170 [ 1425.945056][ T30] watchdog+0xfd7/0x1030 [ 1425.945087][ T30] ? watchdog+0x1c7/0x1030 [ 1425.945116][ T30] kthread+0x388/0x470 [ 1425.945143][ T30] ? __pfx_watchdog+0x10/0x10 [ 1425.945165][ T30] ? __pfx_kthread+0x10/0x10 [ 1425.945193][ T30] ret_from_fork+0x514/0xb70 [ 1425.945223][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1425.945250][ T30] ? __switch_to+0xc89/0x1420 [ 1425.945277][ T30] ? __pfx_kthread+0x10/0x10 [ 1425.945304][ T30] ret_from_fork_asm+0x1a/0x30 [ 1425.945337][ T30] [ 1425.945344][ T30] Sending NMI from CPU 1 to CPUs 0: [ 1426.063537][ C0] NMI backtrace for cpu 0 [ 1426.063563][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 1426.063588][ C0] Tainted: [L]=SOFTLOCKUP [ 1426.063596][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1426.063608][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 1426.063635][ C0] Code: bc 7e 02 e9 93 06 03 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d d3 6e 18 00 fb f4 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 1426.063650][ C0] RSP: 0018:ffffffff8e807de0 EFLAGS: 00000242 [ 1426.063666][ C0] RAX: 0000000001ffa149 RBX: ffffffff819b5450 RCX: 0000000080000001 [ 1426.063679][ C0] RDX: 0000000000000001 RSI: ffffffff8e22d5e4 RDI: ffffffff8c4bdd80 [ 1426.063691][ C0] RBP: ffffffff8e807eb8 R08: ffff8880b86338db R09: 1ffff110170c671b [ 1426.063705][ C0] R10: dffffc0000000000 R11: ffffed10170c671c R12: 0000000000000000 [ 1426.063718][ C0] R13: 1ffffffff1d11de8 R14: 1ffffffff1d00fc4 R15: dffffc0000000000 [ 1426.063732][ C0] FS: 0000000000000000(0000) GS:ffff888124f4e000(0000) knlGS:0000000000000000 [ 1426.063745][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1426.063758][ C0] CR2: 000000000c41c501 CR3: 000000000e946000 CR4: 00000000003526f0 [ 1426.063774][ C0] Call Trace: [ 1426.063782][ C0] [ 1426.063788][ C0] default_idle+0x9/0x20 [ 1426.063810][ C0] default_idle_call+0x72/0xb0 [ 1426.063832][ C0] do_idle+0x2e0/0x540 [ 1426.063858][ C0] ? __pfx_do_idle+0x10/0x10 [ 1426.063885][ C0] cpu_startup_entry+0x43/0x60 [ 1426.063908][ C0] rest_init+0x2de/0x300 [ 1426.063932][ C0] start_kernel+0x392/0x3e0 [ 1426.064001][ C0] x86_64_start_reservations+0x24/0x30 [ 1426.064097][ C0] x86_64_start_kernel+0x137/0x1b0 [ 1426.064115][ C0] common_startup_64+0x13e/0x157 [ 1426.064143][ C0] [ 1426.080165][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 1426.080190][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1426.080218][ T30] Tainted: [L]=SOFTLOCKUP [ 1426.080227][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1426.080241][ T30] Call Trace: [ 1426.080249][ T30] [ 1426.080258][ T30] vpanic+0x56c/0xa60 [ 1426.080293][ T30] ? __pfx___schedule+0x10/0x10 [ 1426.080315][ T30] ? __pfx_vpanic+0x10/0x10 [ 1426.080350][ T30] panic+0xc5/0xd0 [ 1426.080377][ T30] ? __pfx_panic+0x10/0x10 [ 1426.080403][ T30] ? preempt_schedule_common+0x82/0xd0 [ 1426.080424][ T30] ? preempt_schedule_thunk+0x16/0x40 [ 1426.080449][ T30] ? nmi_trigger_cpumask_backtrace+0x314/0x380 [ 1426.080481][ T30] ? nmi_trigger_cpumask_backtrace+0x319/0x380 [ 1426.080512][ T30] watchdog+0x1030/0x1030 [ 1426.080543][ T30] ? watchdog+0x1c7/0x1030 [ 1426.080572][ T30] kthread+0x388/0x470 [ 1426.080599][ T30] ? __pfx_watchdog+0x10/0x10 [ 1426.080621][ T30] ? __pfx_kthread+0x10/0x10 [ 1426.080649][ T30] ret_from_fork+0x514/0xb70 [ 1426.080678][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1426.080706][ T30] ? __switch_to+0xc89/0x1420 [ 1426.080732][ T30] ? __pfx_kthread+0x10/0x10 [ 1426.080766][ T30] ret_from_fork_asm+0x1a/0x30 [ 1426.080798][ T30] [ 1426.375867][ T30] Kernel Offset: disabled [ 1426.380178][ T30] Rebooting in 86400 seconds..