last executing test programs: 11m21.077993598s ago: executing program 1 (id=322): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xc0, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in6=@dev={0xfe, 0x80, '\x00', 0x3b}, 0x0, 0x0, 0x0, 0x1, 0xa, 0x0, 0x0, 0x33}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0x0, 0x0, 0x200000000000000}, 0xb}, [@mark={0xc, 0x15, {0x35075d, 0x81}}]}, 0xc0}, 0x1, 0x0, 0x0, 0x40800}, 0x2c040010) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x0, 0x0, 0xa, 0x10}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, 0x0, 0x6e6bb5}}, 0xb8}}, 0x0) (fail_nth: 4) 11m20.554419165s ago: executing program 1 (id=325): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) syz_io_uring_setup(0xed9, &(0x7f0000000280)={0x0, 0x0, 0x10100, 0x1, 0x3}, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010000305160000000000000000008847", @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100626f6e6400000000340002800500010004000000050016000000000008001c000000000005000c00000000000a001a"], 0xc3}, 0x1, 0x100000000000000, 0x0, 0x8040}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) (async) syz_io_uring_setup(0xed9, &(0x7f0000000280)={0x0, 0x0, 0x10100, 0x1, 0x3}, 0x0, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010000305160000000000000000008847", @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100626f6e6400000000340002800500010004000000050016000000000008001c000000000005000c00000000000a001a"], 0xc3}, 0x1, 0x100000000000000, 0x0, 0x8040}, 0x0) (async) socket(0x10, 0x3, 0x0) (async) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) (async) 11m20.028172133s ago: executing program 1 (id=326): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$L2TP_CMD_SESSION_DELETE(r0, 0x0, 0x40080) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)={0x78, r2, 0x8, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CSA_IES={0x38, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_BEACON={0x10, 0xba, [0xc1, 0x112, 0x7ff, 0xfff9, 0x8, 0xfbff]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0x6, 0xbb, [0xfffb]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0xa, 0xbb, [0x72, 0x3, 0x0]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0x10, 0xba, [0x401, 0xffff, 0x7ff, 0x7, 0x35, 0x6]}]}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x39e}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xf}]]}, 0x78}, 0x1, 0x0, 0x0, 0x20000000}, 0xc008) socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r3, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="021300000200000000000000e95e20ad7aae0a32000020387ffa4dc95736439300fa945cc34e9a8e2c9618c92745334bec1b8ac6633edb498430558f05add5c423cd5209aa3ea48c0f629f816fbbc96068251f717afe0498fcbd56ad4bef9905d2261b1ffa13e36e7336e82ec82c9b5cd020da56dd16f2807dfd3588555ed5813958c2bc3a66ff552d190675306706000000849dbefe4d4d6ebab086b9987a00ae76ef911ad33a70d520ae3ce9c12072a44816e2a129c34d757cd6bab34991d474a62fac6875df986cfeac169eba2cf874efa2698eb6b6bd8036f0bf768fcf14c750db0b61e2006a051f60ab48bc5b7c1c6951aed41fe11f24c0c53126eb88584eff0ecdafbd10b11d9072d733675e9ba53a7e7945d9707fb20773e3e0db0661cd38e6cf91d49a72aa4b2b07ab9d6a42aa0af8be9f38487ba3b2"], 0x10}}, 0x0) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f00000001c0), 0x4) close_range(r3, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800"], 0x18}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002300)=[{{0x0, 0x0, &(0x7f0000000f80)=[{&(0x7f0000000900)=""/82, 0x52}], 0x1}, 0x7f}], 0x1, 0x11102, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x80000001, @private0={0xfc, 0x0, '\x00', 0x1}, 0x6566}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x404, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_i', @ANYRESDEC=0x0, @ANYBLOB=',@']) umount2(&(0x7f0000000040)='./file0/file1\x00', 0xc) read$FUSE(r5, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r8 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000200)) fchmod(r8, 0x80) write$FUSE_INIT(r5, &(0x7f0000001dc0)={0x50, 0x0, r6, {0x7, 0x2b, 0x0, 0x2b418842, 0x6, 0x0, 0x0, 0x8, 0x0, 0x0, 0x80, 0x2}}, 0x50) syz_fuse_handle_req(r5, &(0x7f0000008e80)="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", 0x2000, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x90, 0x0, 0x9, {0x5, 0x3, 0xfdfffffffffffffd, 0x802, 0xfffffffd, 0x3, {0x2, 0xfffffffffffffffd, 0x2000000000104, 0x100100000002004, 0x40000007, 0x84, 0x6, 0x9, 0x8, 0xa000, 0x28002, 0x0, r7, 0x5, 0x881}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file1\x00', 0x880cc2, 0x20) 11m19.598194615s ago: executing program 1 (id=328): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x26020480) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x80000, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x40, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000540)=ANY=[@ANYRESHEX=0x0, @ANYRESHEX=r3, @ANYRESHEX=r0, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x14, 0x0, 0x1, 0x0, 0x80000007, {0x1b}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x8040000) read$FUSE(0xffffffffffffffff, &(0x7f0000002980)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x2000, 0xa68d7c519f800ff1, 0xffbc, 0x6, 0x1d45, 0x0, 0x0, 0x0, 0x40}}, 0x50) syz_fuse_handle_req(r3, &(0x7f0000008380)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x68cc, {0x0, 0x14}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r5, &(0x7f0000000280)=[{&(0x7f00000049c0)="a1ff7625c4a67c2ce177313091a4b00b3e712e", 0x13}], 0x3f) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) close(r3) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) unshare(0x2c020400) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000700)=ANY=[], 0xc0}, 0x1, 0x0, 0x0, 0x40800}, 0x2c040010) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="6486e117aa1c35ffff000000009c5e0c00000000000000", @ANYRES32=0x0, @ANYBLOB="2801000040000000300012800c0001006d6163766c616e00200002800a000400063154a3e049000008000100100000000800030000000000140035006d6163766c616e300000000000000000"], 0x64}}, 0x8000) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) 11m18.564900437s ago: executing program 1 (id=333): r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000380)=@conn_svc_rsp={0x0, 0x0, 0xa, "96329bb8", {0x3, 0x106, 0x0, 0x5, 0x9, 0x3d, 0x15}}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x20, &(0x7f0000000140)=ANY=[@ANYBLOB="0c00004e1560254722cb66187f3b68d00c08004e15"]) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001800010600000000000000001c140000fe000001000000000800010000000000"], 0x24}, 0x1, 0x0, 0x0, 0x4009}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc01100, 0x0, 0x0, 0x0, 0x2) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x19, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b405000000000000611018000000000062000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000), 0x10, &(0x7f00000001c0)={&(0x7f0000000100)=@can={{0x3, 0x1}, 0x0, 0x1, 0x0, 0x0, "62ef521506070cb5"}, 0x10}, 0x1, 0x0, 0x0, 0x24048017}, 0x48811) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000019100), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000740)={0x44, r3, 0x1, 0x72bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x4, 0x23}}}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x9, 0x800, 0x3, 0x2, 0x2, 0x3, 0x1]}}]}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x44091}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_IBSS(r2, &(0x7f0000000700)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000006c0)={&(0x7f00000003c0)=ANY=[], 0x2b0}, 0x1, 0x0, 0x0, 0x11}, 0x40080) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket(0x40000000015, 0x805, 0x0) getsockopt(r5, 0x114, 0x5, &(0x7f0000000100)=""/102400, &(0x7f00000000c0)=0x19000) r6 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r8 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r8, 0x0, 0x488, &(0x7f0000000100)={{0x6, @loopback, 0x4e21, 0x4, 'wlc\x00', 0x24, 0x1f38, 0xf}, {@remote, 0x4e21, 0x10000, 0x6, 0x0, 0x4}}, 0x44) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f00000002c0)={0x1, 0x0, [{0x4b564d07}]}) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r9, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x6, 0x6, 0x1, 0x8, 0x10, @private1, @private2, 0x7020, 0x40, 0x4, 0x7}}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e}, 0x48) 11m18.126359412s ago: executing program 1 (id=336): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r1, &(0x7f0000002f80)=[{{&(0x7f0000000080)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{&(0x7f0000000300)={0x2, 0x4e23, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_retopts={{0x14, 0x0, 0x7, {[@cipso={0x86, 0x6, 0x1}]}}}], 0x14}}], 0x2, 0x20000044) r2 = epoll_create(0x6) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000180)={0x9}) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x68, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x19, 0x2, {{0xd, 0x3, 0x0, 0x6, 0xfffffffa, 0x22}, [@TCA_NETEM_RATE={0x14, 0x6, {0xe1, 0x79d, 0x0, 0x3}}, @TCA_NETEM_ECN={0x8, 0x7, 0x1}]}}}]}, 0x68}}, 0x0) r6 = epoll_create(0x3) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r0, &(0x7f0000000040)={0x10000004}) 11m17.063155072s ago: executing program 32 (id=336): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r1, &(0x7f0000002f80)=[{{&(0x7f0000000080)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{&(0x7f0000000300)={0x2, 0x4e23, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_retopts={{0x14, 0x0, 0x7, {[@cipso={0x86, 0x6, 0x1}]}}}], 0x14}}], 0x2, 0x20000044) r2 = epoll_create(0x6) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000180)={0x9}) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x68, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x19, 0x2, {{0xd, 0x3, 0x0, 0x6, 0xfffffffa, 0x22}, [@TCA_NETEM_RATE={0x14, 0x6, {0xe1, 0x79d, 0x0, 0x3}}, @TCA_NETEM_ECN={0x8, 0x7, 0x1}]}}}]}, 0x68}}, 0x0) r6 = epoll_create(0x3) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r0, &(0x7f0000000040)={0x10000004}) 16.660874332s ago: executing program 3 (id=2900): socket$nl_xfrm(0x10, 0x3, 0x6) syz_emit_ethernet(0x7e, &(0x7f0000000000)={@broadcast, @random="1ab9006c00", @val={@void}, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "b70bff", 0x44, 0x2f, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast2, {[], {{}, {}, {}, {0x8, 0x88be, 0x0, {{}, 0x1, {0x8000}}}, {0x8, 0x22eb, 0x0, {{}, 0x2, {0x0, 0x0, 0x0, 0x0, 0x1}}}}}}}}}, 0x0) 16.497109521s ago: executing program 3 (id=2901): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c80)=@delchain={0x16c, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x6}, {0x0, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0xd4, 0x2, [@TCA_BPF_FLAGS={0x8, 0x8, 0x1}, @TCA_BPF_POLICE={0x48, 0x2, [@TCA_POLICE_RESULT={0x8, 0x5, 0x2}, @TCA_POLICE_RATE64={0xc, 0x8, 0xb}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x9}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xfffffffffffffffe}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7}, @TCA_POLICE_RATE64={0xc, 0x8, 0x1}]}, @TCA_BPF_OPS={{0x6, 0x4, 0x5}, {0x2c, 0x5, [{0xfd12, 0x7f, 0xe, 0x6}, {0x800, 0xc0, 0x7, 0x9}, {0xf, 0x9, 0x2, 0x10000}, {0x5, 0x1, 0x5, 0x3}, {0x2, 0x4, 0x2, 0x8}]}}, @TCA_BPF_OPS={{0x6, 0x4, 0x3}, {0x1c, 0x5, [{0x3, 0x49, 0x7, 0x4}, {0x3, 0x9, 0x9, 0xb24}, {0x6, 0x8, 0x8, 0x6}]}}, @TCA_BPF_FLAGS={0x8}, @TCA_BPF_POLICE={0x18, 0x2, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x2}, @TCA_POLICE_RESULT={0x8, 0x5, 0x4}]}, @TCA_BPF_FLAGS={0x8, 0x8, 0x80000000}]}}, @filter_kind_options=@f_bpf={{0x8}, {0x5c, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x38, 0x1, [@m_connmark={0x34, 0x5, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}, @TCA_BPF_OPS={{0x6}, {0x4}}]}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000980)=@base={0xe, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1}, 0x50) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r1) r3 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0xfffd, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x1, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@broadcast, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="020100000a0000000600000000000000030006000000000002000000ffffffff0000000000000000030005000000000002000000ac1e00010000000000000000020013"], 0x50}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 16.062714686s ago: executing program 3 (id=2902): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) 15.949037409s ago: executing program 3 (id=2903): openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) read$FUSE(r0, &(0x7f0000002980)={0x2020, 0x0, 0x0}, 0x2020) r2 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r2, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r2, 0xda90) accept4(r2, 0x0, 0x0, 0x0) unshare(0x2c020400) pselect6(0x40, &(0x7f00000002c0)={0x0, 0x0, 0xfffffffffffffffe, 0x3, 0x800, 0x0, 0x100000}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0xffff, 0x8, 0x4, 0x80000000000000, 0x6a9}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x2000, 0xa68d7c519f800ff1, 0xffbc, 0x6, 0x1d45, 0x0, 0x0, 0x0, 0x40}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x68cc, {0x0, 0x14}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@ipv6_getaddrlabel={0x24, 0x1a, 0x1, 0x0, 0x1, {}, [@IFAL_LABEL={0x8, 0x2, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4010}, 0x10) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r4, &(0x7f0000000280)=[{&(0x7f00000049c0)="a1ff7625c4a67c2ce177313091a4b00b3e712e", 0x13}], 0x3f) r5 = socket$packet(0x11, 0x2, 0x300) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net\x00') mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x2172, 0xffffffffffffffff, 0x0) r7 = socket(0x2b, 0x80801, 0x1) connect$inet6(r7, &(0x7f00000001c0)={0xa, 0x4e23, 0x3ff, @empty, 0xfffffffe}, 0x1c) setsockopt$IP_VS_SO_SET_STOPDAEMON(r7, 0x0, 0x48c, &(0x7f00000000c0)={0x4, 'bridge_slave_1\x00', 0x102002}, 0x18) getdents64(r6, &(0x7f0000001cc0)=""/4120, 0x1018) bind$packet(r5, &(0x7f0000000300)={0x11, 0x63dcbf62d8600606, 0x0, 0x1, 0x8, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}}, 0x14) syz_emit_ethernet(0x111, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) close(r0) 8.662750847s ago: executing program 0 (id=2926): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, r1, 0x800, 0x55007}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MLD_VERSION={0x5, 0x2c, 0x2}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) (fail_nth: 6) 8.598354687s ago: executing program 4 (id=2928): r0 = socket(0x2b, 0x80801, 0x1) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0xab, @loopback, 0x7}, 0x1c) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd24, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_POLICE={0x4}, @TCA_BPF_FD={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8848}, 0x80) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000000)={0x0, 0x0, 0x6, r3, 0x4}, 0xc) setsockopt$inet_tcp_int(r0, 0x6, 0x6, 0x0, 0x4f) 7.954271324s ago: executing program 4 (id=2930): r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) r1 = dup(r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000000c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$dri(0x0, 0x1, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r4, &(0x7f0000000780)=ANY=[], 0x2c2) write$UHID_INPUT(r1, &(0x7f0000002080)={0xf, {"a2e3ad21e08eeb661b5d300987f70e06d038e7ff7fc6e5539b0d650e8b089b3f313b6c090890e0878f0e1ac6e7049b3b46959b649a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d07410936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c554336909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f6777478bc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15ffffffffffffffff1243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5dc29a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f6435f7590000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9a53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f423500c7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02da93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d0300000000000000b378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d678746383074c6bc1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b3c7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0da42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9cc8036cbd65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f90000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000400", 0x1000}}, 0x1006) r5 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r5, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10) r6 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r6, &(0x7f0000000340)={0x28, 0x0, 0x2710, @host}, 0x10) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp\x00') r8 = socket$inet_tcp(0x2, 0x1, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000180)='-*\x00', 0x0, r0) setsockopt$inet_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) connect$inet(r8, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x58}}, 0x10) pread64(r7, &(0x7f0000000200)=""/123, 0x9e, 0xc8) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r9 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r9, 0x40345410, &(0x7f00000083c0)={{0x3, 0x0, 0x0, 0x1, 0x2000}}) socket$netlink(0x10, 0x3, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x2c, 0xb, 0x6, 0x801, 0x0, 0x0, {0x2, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48}, 0x4800) 7.894276651s ago: executing program 0 (id=2931): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0xfffe, 0x3000001, @mcast2, 0x6}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000001440), 0x0, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000180)=0x6f) r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$dsp(r2, &(0x7f00000002c0)=""/4096, 0x1000) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) close(0x3) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) splice(r4, 0x0, r3, 0x0, 0x7, 0xc) r5 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_SET_MASTER(r5, 0x641e) write$dsp(r1, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x1, 0x3, 0x100000000, 0x0, 0x9, 0x7f, 0xfffffffffffffff9}, 0x0, &(0x7f00000000c0)={0x3ff, 0x200000000, 0x5, 0x4f, 0x200000400000000, 0x4, 0x344}, 0x0, 0x0) syz_usb_connect$uac1(0x0, 0x0, 0x0, 0x0) r6 = syz_usb_connect$hid(0x6, 0x3f, &(0x7f0000001480)=ANY=[@ANYBLOB="1201100100000008580411503b000102030109022d00010118d00109040004020301000d09210700010122ea0209058103200003dd0309050203080069f804de66420445c222970f176d52607e5b9f752177963a8329cfc9e2aa43924fd653a565d33670d1b9046046b924da5da5466765c32c386da1a1760e074f052b92ab97d4ccb39adf28f5cd6f63d381dac27bac6070a757b28caf8ebc63abd5a86da106ded46dfbdfd72cc61818cb5f8958d1d50a9a235925fc838585b1a16cf47135b0f1346ce9f79abde9239dba0c46b96ed6e8dbfe9785921831db21463b3320902d06782864412d95d7"], &(0x7f0000000400)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x250, 0x7, 0x1, 0xf8, 0xff, 0x8}, 0x28, &(0x7f0000000080)={0x5, 0xf, 0x28, 0x5, [@wireless={0xb, 0x10, 0x1, 0xc, 0x40, 0x9, 0x0, 0x7fff, 0xff}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0xc, 0x3, 0x8, 0xfff3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0xd8, 0x5, 0x101}, @generic={0x4, 0x10, 0xb, 'L'}]}, 0x4, [{0xe5, &(0x7f0000000100)=@string={0xe5, 0x3, "790ef94c018fa5486054296ae58f0e256b14091730398aa0601eeed3daea1762c630d8655245765ff6d911d1ed7ba12608afceba19d01e12a19529edc113b4fb4856800221ceeb02013cded4f9027b16ec64cf58ff816e6f1ddf0779baa58c65d87d6c0deb93b45740cac56f9f95cdd67c8c17c6eaa0b7565981218bbf760049e19398028f4cf73186a77c048a17d45f121ffb4b43c37a5a9b0ce0d374a601002a41561769f9125d296658acf044f5d5292a493a304f9944f7e31bd1b654816f1d2727a40cccf81b76a67a3fec1c94b21f06ffabaa43b2bfa622a4286a025f8132873e"}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x436}}, {0x43, &(0x7f0000000280)=@string={0x43, 0x3, "1f953f2ae548845f7fe73c9681159fec1f7dfa4f2dc3ac99a8255275bf7731848a99af7928122413a0c6cec62fd4af1111885096c799cedcdbe2960569ba6e832f"}}, {0xb5, &(0x7f0000000300)=@string={0xb5, 0x3, "cdaa3c9b6eff881b8308e6233121efbe2238dde6170e494aaa53621222e66f674f6092fd691a6cb70576242d1daf985437f7f2ee22391bb22cda54b32d426e7acd0298bb662f97157fb1d7c0b0a6701217bf0d17a74932adaebf9f6ead1e4800ff71fe30534847ac5b3d2cbfdceeb7591eb1447f079f57460a8efbc8fd00a9ccf5a4b830b263362044454cca258271b546c09ed5cddf32f8e3f9adbbfbe11e01dc33d813829c76f6b1ba700b8252588fff9747"}}]}) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x17c, 0x19, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@empty, 0x0, 0x3, 0x0, 0x0, 0xa, 0x0, 0x20, 0x5e}, {0x0, 0x800, 0x0, 0x7, 0x0, 0x0, 0x3, 0x7}, {0x0, 0x0, 0x3}}, [@tmpl={0xc4, 0x5, [{{@in=@private=0xa010101, 0x0, 0x6c}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x8}, 0x0, 0x0, 0x0, 0x56, 0x0, 0xfffffffd, 0x1}, {{@in6=@mcast1, 0x0, 0x3c}, 0x2, @in=@dev={0xac, 0x14, 0x14, 0x44}, 0x0, 0x1, 0x3}, {{@in=@empty, 0x0, 0x32}, 0x2, @in=@dev, 0xffffffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3}]}]}, 0x17c}}, 0x0) syz_usb_control_io$hid(r6, &(0x7f00000005c0)={0x14, &(0x7f0000001580)=ANY=[@ANYBLOB="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"], &(0x7f0000000500)={0x0, 0x3, 0x31, @string={0x31, 0x3, "2876b1c6ed76bc364d8449a15463d92738028f4be409a401e6b4e5e198fcfefdcc0daa3e8d2438b3196fb823bc44c2"}}, &(0x7f0000000540)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x2, "4488dfe1"}]}}, &(0x7f0000000580)={0x0, 0x21, 0x9, {0x9, 0x21, 0x3, 0x7, 0x1, {0x22, 0xd83}}}}, &(0x7f00000007c0)={0x18, &(0x7f0000000600)={0x0, 0x3, 0x64, "e102a040281d0c4799fddcd9ea959903f41dbaedc75d8a29070aa1dd1d4ec7b3f4671dcbba705d9e79757b3b229906c7accfebbb29d1bd9809d50f5d9c6c9fbfecaa02bc60ec89e94e9e9dc74e9ff3e2bac384b4e9597de4c86d1bd348102f1471a2743d"}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0x10}, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000700)={0x20, 0x1, 0x48, "0bc37e2c54a8232fcbf64504d64990cfc3ddbae1a9790c75d0735194d158bfb8efec8004961c39aea2999210b6ff12fffce7890d4ff9af5e54ded34713131a65d3ff0829e911a237"}, &(0x7f0000000780)={0x20, 0x3, 0x1, 0x84}}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r8) syz_open_dev$rtc(&(0x7f0000000140), 0x0, 0x0) ioctl$TUNGETVNETLE(r8, 0x80086601, 0x0) 7.771706504s ago: executing program 2 (id=2932): ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6}}, './file0\x00'}) recvmsg$can_raw(r0, &(0x7f0000001480)={&(0x7f0000000040)=@sco={0x1f, @none}, 0x80, &(0x7f0000001440)=[{&(0x7f00000000c0)=""/78, 0x4e}, {&(0x7f0000000340)=""/192, 0xc0}, {&(0x7f00000014c0)=""/92, 0x5c}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000000440)=""/227, 0xe3}], 0x5}, 0x10003) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_io_uring_setup(0x386, &(0x7f0000000080)={0x0, 0x0, 0x13100, 0x2, 0x2de}, &(0x7f0000000100)=0x0, &(0x7f0000000200)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r8, 0x12b084226d2dad07, 0x0, 0x0, {{}, {}, {0x500, 0x13, @udp='udp:syz0\x00'}}}, 0x2c}}, 0x0) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000c00), &(0x7f0000000c40)=0x8) sendmsg$TIPC_CMD_SHOW_PORTS(r6, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r8, 0x100, 0x70bd2b, 0x25dfdbfb, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x888}, 0x10) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0xa}}) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) io_setup(0x9, &(0x7f0000000400)=0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r11 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r11, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r11, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r11, &(0x7f0000004380)="4e5350994ebf71ce3049a58c5d050078bf16b0757a4c27b455e2a547739587dd3380b5df8f40a0696c5bd6cdb672cffe4d870c5c90ca92095b9ebf3e92fe31d8cd74275d857d34a74f7eecc7fac15e2f148d4e9d47bb45b858bbf078999970d180f28d7b2cefd92635d45a563d9229c9fd770efdc0848e52fa5efd9ada5c94a1ba94b4b7c7507f8b0819bb20910f9f50a83a010abbe126dd9f6a7b84eab6b0d5ce78d2ade77a5f7e4e997df1d03ffab4b4c945d803e4457909013127a98769c938c237f37263bc509a42bc56ff2dbf80e847e2c407009eef94f18e1e59069d62298fdbadae007ffbdf403c5049a4530ac0abecceb5608da02754c9a575af52c0b7e41226e2d642a814861c4310c935bcbae413516dde2132652b39c7aa0218a6ce65dabb4494965209ce879ba7e7e59039db5c1d36d6a7f86d72dd59954fd6f46124a2506b245a0db11aa89d2feb312a6596ea2fecaa7b6021f37a255f628da7ff6b6c36b514d3b6be34e505f9dac6acfb888198004699fb350ac93431533554658c4957df36703591438d6488bc03dd8290a75ebb367a481a50e79a46b04d005649cabd79e5c6326c066bc2b6fc5febb87ef66d832ef31a16c2a450a0b990fb549a5d810c928d1a81fa1dc795db2607ac7d46cb5716b68acdeb00987e429fe6a394632c83b43336e7b51d9cfdb50e83d8c6ba1784d9f74c16b476e048e65e7ac0af683b347d7377ac1795422e00e5bd8da9b313af83abb3348861116de7a99959169b7dff9f7d9b7a6d107f2e76670a6214a419bf8298f80eb570fa29264ba57a383c5ec5836ce33104ecaf1aec76e311280a1d2c8bd7abff3a5a242e6a637f7db63038ef5d78aca9c680d72b60da4dbeb0e1e683ddc82898647c589a81b8f92db06711d8a0af05560cd77fa7005283db71e8da21713fccd450822062b994d152aaed2cdcf0dec9c60617e15ba4df628da4e71279bf9d1eee5c7f055c27cddfdd45f9225d5d5529ef7119e2e3c9838e7362971e069be487797e949b24297de19c61340d1cd7a2bfa3880b91a71e934720a59e1e0ea992d2a1633a0852ad8addfcab73a291e35745e694a6471f429b124305886c1f79f67c78de3f3ec998c91e7fc59d26766cd446f6f0de603f2c6892e13cdaa37d9e8e118d098b6986ccd991993ec152193e7d77394b05b99e7d310c506707f1be52249438fba9615f6dad2ec7244fedf36e34ec311b7d6bee64271d6491079e161190ded7e28e2ada4307a9b2986c267b1a30d2f720ff23408011f1d589ce9ee77f981c7833656ccf7df5b3a87ec253ff7c7ef1e67ceeb10c93e3fa683cdadad65850ffbc402b7744e94cdecef9db9d264c755c53d36278df23d4c9685fdefa69f7588a33b8a64b35191ee81abcb9765577d175cb06e31c582807ff7243bfef44961fbc0f8a235242f51ee991ea621803d4dcfed90d26f004b299425bf219f6d185fe6e088ae44601b03defada18794feac93787696a5d419f09f769bc590f43d2df6a131f6895da2de120c2644685e57b1d476c6aba5881e954fb2575356452b118b942cb02b4ea0fcf8f1bbb9a23b6e32c9d0accd3dd861452a3ad77b38fe709e216974932deb5397fd8033ff0e073d93ac0b4be762bca0424d69bd57b22ba914133f87671a29498b268c2911e793215463ca2164e38059456107dcb29beedfd6277e2b41a11d1c6f1361b19875c9384f04f9c53c1856d71f360a8fafe05f7aef750ec0cf2bfcfa971c017ad071b69a18fdaf970b384d4c889cfa5a0397dbe89543a5c6302645d6edf959aa60709ce0225fe6c3266c7ef62157ac8e78fddcd8a1f2ca5b58128218d19276885515775326aeeee0226cc810843eb05144bf8e2fe3340cf60b32cafd96d23cd7d0d3adcbdfec9a2a3d88307c362633b1c5637608ea8476d900b3f836a9734bc5862ef52983577128d3f74b903b0e3bf64326c1b564ae42aeeb0c07702b63a9ff74a2af6b45e5185a53f36c17bc29dfbc0ea28ca5cca43a15d751e9887ad3e6a87faacb6a278c4c8a8d21b9a77b9776f33102a6e645e99cc5cbc543ed0674282c2b9f8e5d14c2599aa9ac8f81438c77f2b9368bdac82edcdc5366f39adec9e9a3fbd55b79abc16d2ebff26b7d0c88f18b486e5836333575e3fc7808cb423b44781c57965767862922b4ff32d9bae76296843a46f430211c27ef9db168430026a5691623284dfd459dbdd1f1a6ec9bfad666507e6eacb1e2a7866da2e12e6d596d0bbb150500590013d9288af20596447f97bf1744eb9cfb244d8fca269b1fb71e14de664be4e95d83fff1d7abcfebcf3e78c1c66d28f260fb0c19f9fbcd2abbdd7dd7246e49dc25d954bf25f810a2ff6f9069dfdc62e7170fe3b0964b2ac95024256dfa3e7a426be5bb5f707fd82c2b3afec5d5dcf5bbb8fcb6dbc1b59f6c5330966c70d8b016956903a4278817414ba3652a102d7e7e37ecc79400267fc3bf7601c0731f87d479c33f100735e748874155267f708cea49d549e93cf7a398b20373dc90ad9afd56d9c77cd24e2c4a18f7130b366c7fe5b26bc4d11ca1ed1b98fa0b4d7396f82ae6593f4575d19f4d8fd586c991129e5cbe15c8bacc89c3ee15ca471dea966b5c48ede0d3ba2a7e28c75c04e6a4aa49a61f4e391ffe78eb5e40a5ef349f3aa4d15f2291cc86ec7e47ae301bf0b6083dae44b695820a893d46732553ef15ed1c16d28268d52a7e3a7e7c009d0c0708a356d3310c1ebcbcca4d7acf433e34bfc9fc115498142dcc725e7a16879c75e4c2f01c6c98b39619f3248bf530e6ee593467e38cf4026cfdc4db6296565722d587f3c580750b1453ecc141c0461495551297d88ae034acbd4f5e80ce198e6640c4c1e9501529988109cef006eb2090a6fcd974d7f60290b78f1a8ce3051ac2d69636c3219f0a6ad8c254764396a1684b2fd9805b1853525f2e640e513197283cc4d4073ac033e0539a88f08aabe1423cd40b8a7e073437d812b57a5d39a0531dcbe13f4466e89efc66c2a1e4b39a3e0b3073c9d44e6cf9b85f4df5c4e03628d05bc0f94ec04234c9eca4ed17463f190406834b02888728f625371cda75d15ec19efebd59f00ab659eb94eb88bcb2110862a369ad599610c1530fcc118f5b82205bc5215fe3623ac8ec297d8ff4eee75ace20731c5d505e6605c26203b7f754164c9463f0a6eefe3a2880b8e06e7bc66bb2adcc1a3f9b0325f5ec31d12a25f1f73c2aa6bb3a7680d786a082a63b13cce1822fa6a4b085a871ae3409eecbc1fd8661b5d52bb2b8b72f23e24a225075f272ed2ba0c6c5c693811a0ef8db6da7cfe7c966c647f0187ad223eedb1012a5b7af103e98464ac768c79b21ca45b12a52cf261de0d367442cda71c4b8ee39c94ded1b22ba06c13836cb467ebab4efea07bdf1e3de8da56a0ee6d4f848011253cc21fac10700003513d3167b7a73e0d752b861c49814bc5410ebe53a0264f76068c91ee6ec9e2daa343482b2f0f06e605c5aaf81f2a3cd570efc2094b4bc452f9526f1bbe7b22b694fb8109a5a987fabf6250912d6099e67da9cac79e8b6f2cce4702d1f17cbc5d06c38b8a48155ec758369c185ded839fb58cd736fbb74105fe5baf44e7e3ed06843f23601b60a43b1f88fd29e9b3f58479f9b95392a39d5ba1a31ee4441ca2d1fb57c0a8678a07a724b7a65b2ab16d1da197f435bce3ef003fce27fa2f0a67c9dd6c930a4bcf59e79e57b010000006fe34972958c28b56642d14ea89bf4d7d6f7fcbcf4fda8bd08fc9fe424de4359112b11f81fbdc1505658363697713ff6e1f8ca3c4be34a79993a9091f6017cda6c7489ae5c07062555231427c3eb42a049f42d22a060983b044a7d34ab5d2b5386cca79af72396a48aad6b8dcd7855410fc6106e4a165994f26efff1e7ea0aa8f560333b5dfdb2a0d899b0fda955155f90c75effd3c9535d88508e836feb7807d57b2a57cca42d3d08fe7de60d2a33376f49bdacdd3f814bd0927f417f15ad62a10b302f1cb390aaf82b0bc6af46bbf990b6ada45ef83ce13029d167c65134e7b82b59ddfdc367e61c40defd2732ccebb1d4000f6c742df964e1fb390c255d2b1dfc745c6ab34af8096b5b67aa179e3f341854f7a69f7bf47664c832037ec7a78f8e27209e3f20f833fb6e8c0fc4a40920a5ad2b0618982ff72540009d5db82f0f5bcaed2a27f35d1e50eaa0cf8e48c7a2d43c25d0264db750a7f33b44a4bfaae576cf9ee7594ed204513899566564ed8bbc97ed18b1d8868f926a5c70ac06fbac1eade46792186be7bf8ffa3301239edd093449b7d77192782b5111c14169d2b4a1b3443ad62e4abdf11aac6a5b89a5b20ab0ad0abd949b9d64582c67ffce018e7e46de4091fcc77a65b971fc67c8d9cbf0c341ca764b1056ee5014d9865059616a525a1d46ae2fad159afe86dd1df9b8246411827e19535ca0aa9f83050b06e70aa2737f27e93d584a9cef878a642e9361efaa5d20bd8da901fa2e064656f686d3b3ea31d1d850ae9196b7764548f5c6450a32a717e09b6b7e75d43fbbda76e43a24f186d5578933f408bfa28e0435cde525fb91e71d92d704cc5a9b5e3db7aaec46d2b1f8dcb3f921f69bd7397c96a1e132c39c8f1656cea4365c779abf76199cb5b6aada022edec5c901cdafa2e7f3765af9c8b20cb1a6785085fcb0dc901367b89051bdfdc6b68c5215fd04e2b3c7e1c454a4d21132953b25c50995af0f7159a5a8d0a1621f4808f126a5bd40ddc79fed90f49925ee367a57a05c070fbe39fe2c213e7c1724a907ecfa69efe6e021c06a262471a4377f3c9809e9fee4f375e27c31b6afbb2151da86b7cab63c7b4fa4b77fb30172b9d0d78b1c0535ec0639c4910b5eeecbb5b8b5c8aa74c140e7ad347812e36db3097a7ff85c09ab2c0020202307f50efefcdb497b9c060ca68c4be54a9165b4cebc6b2e2e14e5ffb9213142418faedcdf26fd326b7672399e71cfffe3ed712ced5317c254f9199ee10c24c802d102bd8749513d3145201ca4e01bc7c8bbcf430afa541ec5665f86dfb143be648521bb0f2b029018201444787f644f8c88b79e754e6ea9c797babdaec72a9680abadf3a41684cdd57c2b6e833acc0846be5aa927f1b1b36562d2acb9ecfb758455230d050daec6748ba280a5edc86d48e3f8af0f8f4ffb18ae3cd3c19a82d504a4fd52bb62289ae8026572a497fe268f87ef4b4b5886aa07eeb698b7cbf99683f710afc9ed1f8a488883ce0eb8f7fd055b82a9fe21a409caa231c41ba151008e9658919c611e157d7f3926a5e4248532a6860e615b9c86e9fea212128d96ed58c9b84ef22706071eb69f492e4d8321ed9faf6c6a8928f86172bdc930244583ea15be497d9ce4ae79cb3e6293a8512ffaa9e8e358f3c7c7117001fb92891a40b84f9126cc3def5cde67f463bbac9668b9f56c3e4ee72fceebb47e52fc226bab213d8193516e7064459fd1365350a95c5a1c3ac44a73bbba2a4c17ebe49dd781bff1995cd706b77bb533117594ad63566f4c0730beab85ff4c713b7f10b95480fe99a0f676c51ca11116b21e87887b462aa9770e85509e4e60f198148115f0a3ce6028516a946178d1acacf7767f6be7277891369eff67762aa58f928d48b7231e44d899cea8289003349117a53d61bc27b207fdc91c9db61e677d1e1a1bc6a1b6e8564130b335233db4b5de8d62324e6d0ccb2b08c2ff922324eb8c506711142d4b8d7a21223ef0a3d534fdb0de58be95cd827152f71bdd0a82766b62b4c87536f0b7e7df343c4263187da887de6e65d11d0360e2376c1d71c367ae85edeed8f767d24c644b1a9b455ded1dc3cc224f99936a6ee66931c45e5e3db2427719ab2d5cd9c20d9bb0ec004b69bccb00649f3d8e34a3572c257de114b9f027d76bc7db9007175cc03b9e2061b6b3fe7409e009b5371544e56fe438cbd361e5b11efbf2d79d1c250a1e73ca8c601c4f4d1e3761290950421c48c7daa45965e472f5ef3c4b8597444dc5dc01cd25358055b5000617f3e7291da3413e3f0853b1271366612405c35ff1b785b984d921b518425628a533a29ab65d3c11f44c6daa86f8b6457ebb9419274c481aa6f3fa4547641670aff58b9cc62c0993d49a509f02dee755ee5f1fd2710c995c43a91c4f873afa1bbdff14427cba2641052a8f361ecbc72e8a6cf587e83f8bd3110c95fb080edc77a6d43cd58c447b0e02261e4109500c6458dce70acb17aa8f9dc1d15b94a61354164031b5d563c25d0246fc45e6401cefceb501e1468903e5d677759dbe3f24bd48ce55ff8b8f26529fb3b2d669202a1e8a498984b449b4830a0126b18f0e78182c9ce78fe0c448c0e27845b926cfde28fa85e156fa98fefaeb19ed1247c9643b447b4342c97cba5ca94ef1c555d5b49aa70e6aad45bfb557f15e8fdb2d6e3d10d8338a13fe3f187751985b37a5bb10b750f79e36fc2e2ee9bdecc3ed156e202ed7b45a94809d77edaa398042fc6a825a4848c334c557303d24eb3f8e01be06995ceb283c70272b00da61c3381628f0e372fe2fcc779ff7daf7e4b7f2686c39d3fab674b8867b62b0bf9d5cfd0c1d3b270521f55f147de75142ffd7fc9ac7e5dae7ca2fdf26a9222d060823852409dd040cfd1f66f218c6dbdaaacddab34b123af22f97384d64fac64d84fd638c96378c8f9532a11927d48440bc777ff8b8b9be88f930f3b579a713c0bc449dca3a3bd5f2efa98240ccc594299e44451dc60c6c5c9edd0d7b777912b3dc40c57e0ea5f4425cd7047e686c7304f04ba9f7b5de6ad2bd524f1d29f8802a524441fa286015adf4589431710aa4d76de8a956dc1d39c0a13abb7fc309d24222d036e204ab6bb46ef8a7595d9e4512e0b9d5f8fd719a4e3072e1d806967045789c67a1681f2a9f1f4b19f4f5e1afdafc17db7a6d5196161499e62ab4b0ec27648f3eeb1fb2b78f8ecf9b05cf9509a3b9e2a361238deb1c91bdbc8b1d11bbeb939fd9da811cd439069da0ecc00665d72357aac01f259a0325409b201859cc0569e0eba67a7a9ca7e8b78078d9370bd3e37f0571680ede60cb6bbfe69435d6ab5efd80cf051d119a7004fc0b600844d49218d844de8f521524a47ee50229c7da25e42a8639b5db225e7f23967f5d4f8a297aff04a3cbedc2985b6393a5ba0b26b6c7b4ca22d369b35b410799d1ad02825104d34f73408db1948438597931ed1c1c260e78340517bfa2f734537dbdf5ec303518ff4640efe7f7b1c2f46babdb9247ce8eabad9718a8b9ddb7a18d5e87ced554c9d6de78f85d293349590c6c32483534bc968b24a28eb54b9515589d6dd8eb51a5ad0b4d896ce92250397cbc404323fcdf0ee47ed634e0c58213bc5b35a72b21a098e11b79c061430dc817c1e0c79a5b6ed3b002979933f1b83a17f250b1bd5c4958df4d75531ca03efbda89f6a92fe08c23ad9014ff562a7f3dcde578d6825b9847b5df04dbca4f2aa52d8e0f4cf8183ce121e39b50358a9796acde0372a8ff97769874a80ab997cd889145aad4888c06963c2f5b82f53a748a6729fbc79d35c06d84e05c62e44ff78040e56ebfc6efcf0d8b49337d5a17c4041f0d5a8b616244d585a162b69db073accd9071d12df5b326a43b834bbffc2f2a60deafcbddf1c6438a1769d6fb09fbe1990e89da12164ef237f326edb5be64bb64b143a030de8a99b3c5e543c871cb581e2be090a92134aa587701f864907cadd7c1ce20fcf8f5dc7f7ecd06a6c19d89a92ca0ad4393c208b80bba990c7a3702a9c79bddde75d5db244719ac32191b6ceb041ab541fb47680a97dc0422b8a50d91e32cb08cd341b0b099aca5bd12b69d4f89d10b755b351a6489180b786a3bebac926532a4a2d85b07bce6c090d1aaaff079e36d5394a612f1351b90c13a0fa6bf9d188d548dfe6fa51a9026edb52009c03ed45ac51d05c58a957bcc67e05a588985ba00d79f33ae9cdd5f5721d9fdc72ee6e880708be87e8a60c3c035c146f2091d1b9a4c2cfa56f292fe1ba62290d4e56c05669291bbe917f3cac51802a2cc8e9c90dadfe666c233c5a5bb71ee17deec51ce60c73f57bf9ecb84873afcc44815131810c6c1217bea485ef9aa2785e859b25315ef8aa3a274982786e45d622ae831fb76010d69a181b069e4cc55d4436edb10d1119b0c6000c6d5cff7c72f740a59dc0507e7a952b69403c62673f122c9d1264fac6ce2262e86cd8d6a402672f88530fc2d16f31736dd497a4e853253ac8d5aff8d1376895e9f5519b2490cc2a2412ba0c99cec855f668837310035e92fb646486de1b0acffb91ae7516df3eeef381456b55e65baa58e71461c928687e699d2b21814805591382e95e1b970aaa53259917f070281f2336b7d570249d838b3f1a32753c336864e15f4561badf8fee034a29c52ff3fca7456ae140f83e3b2fd5b57c9aef3f20c664200d235f236ec47dd2fc20b14dc6000812237aea992d987e5460679e8c5b76d931ef6d951e6c7087e3106b6ce2db9de6f228fdf3ffc38710c0e8d5000a195a79d1fa2301038f5b27c40b09c34c025e5099d40c2204ea0eae985263c9101cab88d6857a320c9e497f22348a24861a5fb8d734e08cad09f9933748ff01eab22f17756f58688dc1b486a397563ee9ad0784b8833cdb5f7c6bcf76d9c1105f71c3c6aabefd70dc6cd5c66d31caf916145ac5ed7fa070b4277c0448ab1eb78c943be9aeab0587d321a4bcb7754f070881178f8be668b686124899fac252519f4b60ec42db766a908755040463125c26850177402a977246d36d23afac0a11889d54640bd8f6f670d686cfd33f6fc5d90cf6cbd63d9d0fd201dd4c74dbbab899f3c23c0b7e37ea0b2aff421327200d0da58b5893a4186ae3652cc6e11c2c2a0e52184a3872532acce98c94cebf4f31333663a620f0dba0ffd89c3124380075bd28caa6d449a050b3661b8fbaf4747b77c4928b1378fdc8c7a7b38ade1aeec44bdfacc8271d0b132b2029b0f3582f9919f5c8cd543abc9caf6b82b197cd482c3ef61a64743506342bf50a3c1ff544563bb8b2002911ee1fad698f4ac133ffed5bfe81239c918207a03c7a8bd71a0a502aea78d38e970e3ab2abf754b598acb79cf276792aa08724d0ba24f2a694912ab795b3f45f52dec50d9bfbc99ae27e1d2c2216afec6709d6513a64b29ef58255bbe18478c5d4f15f74ea63a1e15487752eec8fd019f1d4a7aa25277664754bd2d7cd3a7a018b92c56d965a1974885363757286da9e055ef7fac17876f0a64c1026a597733b897a9155ecbf420159ae8e5209aa83a3544fff1fb4566f2d54f95e3bbd30dcca5f24397e4bd47ff01292f0d6fe9dd47a810e0c25382fa69b4987d1afd9b69ef125110ad6b240eaa9c85829a2646f9ab7874bc02bfa8346cc9190943e9d46b44880670b1e2aa3a29e83be5472d7418885a353faade6e8b18f4b588607bbb758588d1e2f11a9dfa1c4d61be50249f1ee32e6ff8c0c7722aaec1bc79654a4772efc578bd6a14c79abcc77a4e09c8b6c6ea35cd3ab31e35268fb55db843176f8042f8ce7be0ddd4ead6dbdad0ef9e7cb2323db5cc48119a72b27306b8ff6366c0bc682a85ab9e2cf2238b6d6eb2e38a97d5577e6334cb2aa6e7c86e489e876f9d7053577a5cb57f52812fab7c4bd7b19a34c228ffb67dcac9281612f778b58c580c140542200fd00cb3ad81d93420df93c5af2493f646d8de797102fa0a65247317882fbf171520f00b2c7638623b823ff11444fdde453570f99f9099b60061a908b83383ba8b82bb78edd074dccf9342afdf8d11a6129ba6ea7030f3629056264f1736c2b926171b6dc7e1fa455a473de656390495f3b6ad2f9f46f35eacb075628ff739ef78f28ba683448068c7f18fb63f28ba7dbbb78999100dde0a94e8b8570817c7114c13e139ceb333782b29a84a5b19497fa785915c7680dd7f972cb59ba22161f60886e5cb3c3e808726cbf96bc4da78914eee565c6d9d18e70d22cf8c0244cf3cf488c3550eaa400bc0f26d64e0f1bc8d0301a841d954073a641f3ef883d81f4d5db8e9df708e64e640b38df7295f7fe573863653086bae5507c880ab7fdb7a6c5ce77027ffa7395233d3ce536d77ae6c2e9c8ffb6fee78a3bcb3b5f888bd595caa3a5586948776b950a89cde4db8247ffff27491c882b430afdd60e7a22324f6635a9aa7139f3e624c6d9ece60f7f8153b2080cf0544fbf8e1c436503766e670b902604ab521e11aa5a65cedd64cfaf898ac5f55c08c87693c323517bcb0d99c28f5e072d4f6540c7ead70138d47c1a67fd72bd6ef5613af33a0af311c3d0a631ca2a2dfbe35d1021eb610e40b9be128683235a788b5a4cacf99babee382458d59e8aa1dd7bba7e09dd30c055a3df8ed721a1778b2c6ed587a403566325cd19962edd7831caa44a6b716517bad502130e7cf6a5ce5288dc84c0170f622ae0b1e1166a9c2c0771d91df9f9dd82ae210469602ce38964746c1c1d04321aae7d464eb801dbea7ec39505457e778208774d72673626c998b002c46a9b4b1e390d9344f0ca62212a1b6d41043a2100b35196bce42d40caa0ea9a486bf8526fd1f0f0d362c2cac463ea7377a20b54b9435442ca529fc00da4fd7e27c4eaf14215a06857b54254c26346956fd7fe215a5ce57ec38cedf50a3c759e563a4fd87494f00e7bd9b44f3b7e99c6ef67187056a21d2fe1ac9d24125b1947eb293189fdc448b591af4d9b8eb091d6bbb5e50fae79d000044e282bb2ab6c63cc9562b151c214e45015354e62be63e1881238b907f7bdb791ff44a4e03fa29dbd26db2f49d0f4729b7cd9ba69a65b0b493466d35d09b3f590c67c31660d95e2ab4af2c9f1df91f04ce5a57dde2d75206b42e3423126774d76593c2f713ae279d7092506b513fd5b38f0f52d3fafd7141dfd4a0de1063754dba865faf8dc0f6be9d90ef21ec86a275533f6ad4b4e360dc775413f29eab8b3daac6279b9abfe163ea2f183e09ed91ef67fbb090875109288a182cfdcc46d90678efe5edceda6518335e678438cac4bb47d376f3f0e12aa55301735d7f42653c073d6a4a37b2e17d332dc1be6b50918c007b14886307cc39250e81efecd63d24067a49994572725a9df1760caac13a28f5255556b27ec245e93969b85cdec7cd1c2d2a433d3f9572b93054a7ce8adff81bc1d30884d5fc4791e251bd907e37af5bec74235c3e2f804e4e0450b715289942b7859ad207bafcfec1b586dc15e7911fe6d20aa3d02fcd47e9956780e300d7c53c17dfa15754deb4c20efebc7270bda0fa6b37fc88c6be4250cac38c1b8186b364482026ab52d65d3a691903fccc39772277011bfaa421adba76bed9731077bec885ce88d40f36bbd2a839c67dc4b862c968491b877d4fd13fc90f8da57a29121e12f78e85af765cd66e72ba513593fe1cdf20019985b065d828707d8e509c6834eab188deea5c9ee97955f4b07d37b6fc7beed73be94887d423a349f35bb8782bc670ceaec870d97f061bda02ae73f6d575f81e0b6326eae6c1b3085cc584686120e12dd9ad8ce44036bec8a189f9", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x4000000000000, {0x0, 0x200000000, 0x9, 0x4, 0x6, 0x0, {0x0, 0x10001, 0x0, 0x40d, 0xffffffffffffffff, 0x102, 0x101, 0x804, 0x4, 0xc000, 0xfffffffc, r13, 0x0, 0x7, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r11, &(0x7f0000004300)={0x50, 0x0, r12, {0x7, 0x26, 0x4, 0xffffffffb3aada3c, 0xe00, 0xfffc, 0x6, 0x5d3186cc, 0x0, 0x0, 0x1, 0xfac1}}, 0x50) creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) syz_fuse_handle_req(r11, &(0x7f000000a400)="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", 0x2000, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0xa0, 0x0, 0x16, {{0x4, 0x0, 0x0, 0x9, 0xfffffffc, 0x6, {0x3, 0xa8, 0x6, 0x3, 0x3, 0x1, 0xfff, 0xffffff61, 0x1c, 0x8000, 0x0, r13, r14, 0xff7ffff9, 0x4}}, {0x0, 0x10}}}, 0x0, 0x0}) r15 = socket$nl_crypto(0x10, 0x3, 0x15) r16 = syz_open_dev$hiddev(&(0x7f0000000940), 0x7ff, 0x4800) io_submit(r10, 0x7, &(0x7f0000000bc0)=[&(0x7f0000000580)={0x0, 0x0, 0x0, 0x7, 0xb3, r7, &(0x7f0000000540)="fe767316f3778c374a5449ac", 0xc, 0x1000, 0x0, 0x0, r0}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x5, 0x8, r2, &(0x7f00000005c0)="92e1c57b76a54297acd3b915e9bc92e8d0c22fdb7d9eb2d461d372ededc3cc7281becf8e0ae51fbdc8b273fdb89e4e7cfaf19fc9a8b7688ddb16cfdc087832d9edac4b686180a71daa8887ed1d165e2f026368", 0x53, 0x2, 0x0, 0x0, r0}, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x9f697bc3ef41368e, 0xfff8, r7, &(0x7f0000000680)="d2d5ba3c6705d28142d1f602d44bf8e108665a0046ef93b6f09f9bbc3d02770950ffb87f394c4c2ef5f141f459dfabefc3f03ee9d92b39fe7487ddc5ea317c7279498b0fda8d9441d5c37fd2ade08fcacd2f5dcad6d184a569d69267e9ab0c443c64324a05f5d5167d53359a57f5215338f18f8968a5719b6642604bd8f01e321b1f631dc2590dc08195f505c4f1723757e1dc97d63de1c4049b75fa6caf0c218363d8a0df6dfd4954978efe5091f44f", 0xb0, 0xffffffffffffffff, 0x0, 0x2, r0}, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x5, 0x8, r2, &(0x7f0000000780)="bcb8b9be93078fd751d85ed99a201976ec954c3c4fe3e104cd5c9e6db38c77c2844a6c976951c9787a142b455e30c3aa2a2c2adc5582367d349e0294e58828d26e75ea89e1a88a69167b487545dd22ce79a43bdff3ca8f0fae949288bb5badd1415ce608c930f138b9d303cf2bd3bb34fb9e63412f995ed04e0290afcdc2cf40ce73beb7c769950aa8e50895ada906565434edc20e36806dc4b870816a8a01b6b7ad", 0xa2, 0x8, 0x0, 0x1, r0}, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x3, r15, &(0x7f0000000880)="40ad0207871da7cf357e366800b2c2ad3756530e02144408818793b50671d2a0487d2836170ba8456778917f070fee71ddd92ba742e933f432bc85c2fb464ef96708104a9a830f7e351a", 0x4a, 0x3ff, 0x0, 0x3}, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x1, 0x0, r16, &(0x7f0000000980)="a005486397d44a0a0b113426d0fc33fb382ca9a79f483ecf8df89da26cc3a1f4ee6339c3476ad4af26fcef280f62f656486f06a87cddca4a30a6093ef8b59f431212c5759303c04a9d7102e54f854060f7f6f0f02ac5853fd16d7d38a9ceb6b9f6a7f9a1513fbb49f4ae38f361ceff117281a8a019f1aace96068c91a2814b274d2478ff597517eae6239d548eaac0cd", 0x90, 0xfffffffffffffff9, 0x0, 0x1}, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x6, 0x2, r7, &(0x7f0000000a80)="af41601caff373cf306b335b6a4b13981c99392813fd037e0ab74a90300299f28a649f90f95e6e97d3b6a0617aa9e0736808f72926f319bbac7f7aec7ba6108ced4c7cc6cac11e3f96b64d951f4dd8297ed83b80644d59be06f69e64215be3700ec0f016a9e8ce79e6f68229429dea970a56f93a647839d0d12c98344c2a3b2734874026a081759ae3fdff14487ecfa89d2480de71b288fc4e573c8d296119b9782b2ca70fda9c32d0e4f45594ee65ff05f3057b88fa528d026b8231f302c8b1071f348a330d10e4ead0b24f7a1d98973c5e64508bf6c1e330c6c20a", 0xdc, 0x7fffffff, 0x0, 0x2, r0}]) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r9, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x3}, 0xc) io_uring_enter(r3, 0x2def, 0xb80c, 0x4e, 0x0, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r17 = socket$inet6(0xa, 0x80000, 0x1ff) setsockopt$sock_int(r17, 0x1, 0x5, &(0x7f0000000180)=0x178, 0x4) sendmsg$inet(r17, &(0x7f0000000140)={&(0x7f0000000240)={0x2, 0x4e21, @multicast2}, 0x10, 0x0}, 0x40010) 6.968951442s ago: executing program 4 (id=2935): r0 = openat$nvram(0xffffff9c, &(0x7f00000000c0), 0x60000, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0f8565c, &(0x7f00000003c0)={0x6, 0xc55, 0x2, {0x2, @pix={0xa38, 0x0, 0x41414770, 0x4, 0x9, 0x9, 0x3, 0xbf89, 0x1, 0x2, 0x0, 0x3}}, 0x1}) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) socket$l2tp6(0xa, 0x2, 0x73) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) close(0x4) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r7, 0x0, 0xf3a, 0x0) splice(r4, 0x0, r7, 0x0, 0x80, 0x6) write(r5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) r8 = socket(0x8000000010, 0x2, 0x0) write(r8, &(0x7f00000002c0)="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", 0xfc) socket$inet_tcp(0x2, 0x1, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x80, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_SEQ_ADJ_REPLY={0x1c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x5, 0x2, 0x1, 0x0, 0x800}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x5805}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x9}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x80}}, 0x0) 5.539131855s ago: executing program 4 (id=2939): socket$packet(0x11, 0x2, 0x300) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000002c80)={{0x12, 0x1, 0x0, 0x41, 0x7, 0xf5, 0x40, 0xcf3, 0x9375, 0x1a9e, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xbe, 0xe4, 0xf9}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000700)={0x44, &(0x7f0000000080)={0x0, 0x0, 0x8, "fa0fffffffffffff"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x5761, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0}, 0x68) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0041, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r4, &(0x7f0000000080)=ANY=[], 0xfdef) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x8, 0x0, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='ns\x00') r6 = open_tree(r5, &(0x7f0000000640)='\x00', 0x89901) move_mount(r6, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2025, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d00)={{0x14}, [@NFT_MSG_DELFLOWTABLE={0x1ec, 0x18, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'pimreg0\x00'}, {0x14, 0x1, 'ip6tnl0\x00'}, {0x14, 0x1, 'veth1_to_team\x00'}, {0x14, 0x1, 'netpci0\x00'}, {0x14}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xffff0001}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'nr0\x00'}, {0x14, 0x1, 'geneve1\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6gre0\x00'}, {0x14, 0x1, 'gre0\x00'}, {0x14, 0x1, 'veth1_to_batadv\x00'}, {0x14, 0x1, 'nicvf0\x00'}, {0x14, 0x1, 'macsec0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'gre0\x00'}, {0x14, 0x1, 'bond_slave_0\x00'}]}]}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_HOOK={0x4}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x7}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_HOOK={0x44, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x4}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6tnl0\x00'}, {0x14, 0x1, 'veth0_to_bridge\x00'}]}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0xe0, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_RT_KEY={0x8}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_RULE_USERDATA={0x7d, 0x7, 0x1, 0x0, "89c90bed569a1222634139ba9057adc786d1ea43f2022cf5628b5307da8ce5fa718ee55031ee62b6c5954d464977d4ac17d1ba04c74ccc317850f4cf89ce12b757ff2b32fb1f39e4dfda61e32d82fd08f1be0eb2fba036f92980cca0b3541105525bd9337849e0d3acbc569372a87e79ce569edfb0eac1fe94"}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x320}}, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, r8, {0x7, 0x1f, 0x0, 0x10408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.370003971s ago: executing program 5 (id=2940): r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha384\x00'}, 0x58) r2 = openat$sndseq(0xffffff9c, &(0x7f0000000000), 0x40000) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000200)={0x1, @pix={0x2, 0xd09, 0x31435750, 0x0, 0x48, 0x88, 0x8, 0x8, 0x0, 0x1, 0x0, 0x5}}) r3 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x107734, 0x80, 0x0, 0x34e}, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2d, 0x0, 0x0, 0x6}]}, 0xfffffffffffffeea) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r3, 0x47bc, 0xfac7, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r9 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, r8) add_key(&(0x7f0000000000)='rxrpc\x00', 0x0, &(0x7f0000000240)="0000000000000002ff69000000000001000000180000000100861f4104bfeacdd5a9007d16dcdc2850b536f0", 0x2c, r9) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x403, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88adfda5, 0x14200}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_CSUM={0x5}, @IFLA_GENEVE_COLLECT_METADATA={0x4}, @IFLA_GENEVE_LABEL={0x8}, @IFLA_GENEVE_PORT={0x6, 0x5, 0x4e24}]}}}]}, 0x50}}, 0x0) r11 = socket$inet(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r11, 0x0, 0x81, &(0x7f00000001c0)={'nat\x00', 0x0, 0x0, 0x0, [0x4, 0x80, 0xffffffffffffffc0, 0xfff, 0xfffffffffffffff7, 0xd], 0x0, 0x0, 0x0}, &(0x7f0000000240)=0xe0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r2, 0x404c534a, &(0x7f00000001c0)={0xffffffff, 0x5, 0xfffff938}) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000300)="c9", 0x1) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8982, &(0x7f0000000e00)={0x7, 'vlan1\x00', {0x2}}) 4.789661602s ago: executing program 0 (id=2941): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000700)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xd368a6acfbb9f167}}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3000000}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x50}, 0x1, 0x0, 0x0, 0x24000080}, 0x8000) (fail_nth: 6) 4.121417645s ago: executing program 0 (id=2942): sendmsg$inet6(0xffffffffffffffff, 0x0, 0x4048043) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='map_files\x00') timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = openat$dsp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000000)) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9, 0x11, r0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000140)) ioctl$SNDCTL_DSP_GETIPTR(r0, 0x800c5011, &(0x7f0000000040)) mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) 3.726510415s ago: executing program 2 (id=2943): socket$inet(0xa, 0x801, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x103001, 0x0) syz_io_uring_setup(0x49b, &(0x7f0000000380)={0x0, 0x2c0c, 0x400, 0x7, 0x2000284}, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000e51f3e10d219341163d3010203010902"], 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000180), 0x200001, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x54}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x700) 3.08140076s ago: executing program 5 (id=2944): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x800000, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x5, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0x2, 0xb}, {0x9, 0x4}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x3, 0x81, 0x8001, 0x8, 0x8}, 0x0, 0x1, 0x40, 0x6, 0x21, 0x7, 0x3, 0x0, 0x0, 0x400, {0x5, 0x7, 0x7, 0x6, 0x9}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x2000c0e9}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2.227451351s ago: executing program 0 (id=2945): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0xc, 0x0, 0x8}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f00000000c0)={r1, 0x80}, &(0x7f0000000100)=0x8) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) unshare(0x2040400) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) inotify_rm_watch(r4, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c00000010000304ffff000000000000", @ANYRES32=0x0, @ANYBLOB="a5fdad88004201001c0012800b00010067656e65766500000c00028005000d0002000000"], 0x3c}}, 0x0) r6 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r6, 0x5393, &(0x7f0000000000)) syz_clone(0x200, &(0x7f0000000180)="f1cb278e196d97451112339607c2acfb8da090252afa4b53a433769b36578ec0ff2b6c3e9e838552b8c1d6ccb55bb259d03698d550ac56ed8472fb51106c253baefb2c83f494d0d39dbf4f170770b08c41e976aedccf723d4ece84e6dc26f89566032f625c6709fa5cfea58edff9aeb51b9e726f54ce9c2b772dc7a8b24c4307ab52967d13c1c8e69e", 0x89, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000002c0)="d8fa8e58ee7ee7025e12b0dfa4c6832a0ee058d0fc97e2d831aa3989fbf0733aa01b954e1500a7f8c605ec728c9e69824195f482cf792f68b649d3b550fde235dd518c6bee879024cb24305039740c1483344e4cecd13cdfe676d401a56f") sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c0008001000fe0300000000fedbdf2500007400", @ANYRES64=r2, @ANYBLOB="00080000075005001c0012800b00010062626964676500000c00028005002c0002000080"], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) preadv(r0, &(0x7f0000000500)=[{&(0x7f0000000380)=""/182, 0xb6}, {&(0x7f0000000480)=""/17, 0x11}, {&(0x7f00000006c0)=""/4096, 0x1000}, {&(0x7f00000004c0)=""/10, 0xa}], 0x4, 0xb45, 0x0) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$sock_timeval(r7, 0x1, 0x42, &(0x7f0000000240)={0x77359400}, 0x8) 2.11076825s ago: executing program 5 (id=2946): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) process_madvise(r1, &(0x7f0000000140)=[{&(0x7f0000000000)='v', 0x1}], 0x1, 0x66, 0x1f00) 2.018357455s ago: executing program 4 (id=2947): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)={0x34, r2, 0x1, 0x1070bd0c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x40811}, 0x20) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x50, &(0x7f0000001080)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0xff, @remote, @local, {[], {0x0, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, "7e581ba68817"}}}}}}}, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$inet(r5, &(0x7f0000008f40)=[{{0x0, 0x0, &(0x7f0000001b40)=[{&(0x7f0000000b40)="3c1a1a6f794d8d57542b812db97786586e950a89fd0759b43b332a299283062a", 0x20}], 0x1}}], 0x1, 0x1) r6 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000280)='ns/time_for_children\x00') r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r8, 0x4188aec6, 0x0) r9 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0) r10 = fsmount(r9, 0x1, 0x18) symlinkat(&(0x7f0000000000)='.\x00', r10, &(0x7f0000000140)='./file0\x00') r11 = socket$inet(0xa, 0x801, 0x84) connect$inet(r11, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r11, 0x8) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000020000082505a3a440000102030109023b000101000000090400000302060000052406000005240000000d240f01000000004b0000000009058209400000000009050302"], 0x0) sendmsg$NFT_BATCH(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_EXPRESSIONS={0x4}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xd0}}, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x3}, 0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000002c0), &(0x7f0000000300)=0x8) readlinkat(r10, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)=""/59, 0x3b) fchown(r6, 0x0, 0x0) 1.90416526s ago: executing program 5 (id=2948): r0 = openat$nvram(0xffffff9c, &(0x7f00000000c0), 0x60000, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0f8565c, &(0x7f00000003c0)={0x6, 0xc55, 0x2, {0x2, @pix={0xa38, 0x0, 0x41414770, 0x4, 0x9, 0x9, 0x3, 0xbf89, 0x1, 0x2, 0x0, 0x3}}, 0x1}) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) socket$l2tp6(0xa, 0x2, 0x73) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) close(0x4) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r7, 0x0, 0xf3a, 0x0) splice(r4, 0x0, r7, 0x0, 0x80, 0x6) write(r5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) r8 = socket(0x8000000010, 0x2, 0x0) write(r8, &(0x7f00000002c0)="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", 0xfc) socket$inet_tcp(0x2, 0x1, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x80, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_SEQ_ADJ_REPLY={0x1c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x5, 0x2, 0x1, 0x0, 0x800}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x5805}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x9}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x80}}, 0x0) 1.854790471s ago: executing program 0 (id=2949): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000080)=@s={0x5, @generic=0xff}) (async) ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000080)=@s={0x5, @generic=0xff}) r3 = add_key$keyring(&(0x7f00000005c0), &(0x7f0000001100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) syz_clone3(&(0x7f0000000740)={0x3a048000, &(0x7f0000000240), &(0x7f0000000280), &(0x7f0000000540), {0x11}, &(0x7f0000000600)=""/227, 0xe3, &(0x7f0000000580)=""/59, &(0x7f0000000700)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2}, 0x58) (async) syz_clone3(&(0x7f0000000740)={0x3a048000, &(0x7f0000000240)=0xffffffffffffffff, &(0x7f0000000280), &(0x7f0000000540), {0x11}, &(0x7f0000000600)=""/227, 0xe3, &(0x7f0000000580)=""/59, &(0x7f0000000700)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2}, 0x58) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000008, 0x10, r4, 0x5) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0xe501, 0x3, 0x208, 0xb8, 0xa, 0x1000000, 0x0, 0x0, 0x170, 0x230, 0x230, 0x170, 0x223, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x3b9, 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x3c0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f0000000080)=0x5) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000300)="300e3080", 0x4, r3) (async) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000300)="300e3080", 0x4, r3) r6 = socket(0x10, 0x2, 0x0) syz_io_uring_setup(0x3986, &(0x7f0000000800)={0x0, 0xfc63, 0x200, 0x1, 0xd9}, &(0x7f0000000200), &(0x7f00000007c0)) write(r6, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r6, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) syz_open_dev$ttys(0xc, 0x2, 0x1) r7 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TCSETS2(r7, 0x80045440, &(0x7f0000000000)={0x80, 0x10000, 0x2, 0xfffffff5, 0xff, "6d091b89605eef382e9da8cc978b7bb9389cb4", 0x3ff, 0x22df}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r9 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) (async) r10 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a00)=@newtfilter={0x124, 0x2c, 0xd27, 0x70bd21, 0x25dfdbfc, {0x0, 0x0, 0x0, r11, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x4c, 0x2, [@TCA_FLOWER_ACT={0x48, 0x3, [@m_bpf={0x44, 0x1, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x9, 0x9, 0xffffffffffffffff, 0x9}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @filter_kind_options=@f_route={{0xa}, {0x9c, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0x2f}, @TCA_ROUTE4_FROM={0x8, 0x3, 0xc5}, @TCA_ROUTE4_FROM={0x8, 0x3, 0x47}, @TCA_ROUTE4_IIF={0x8, 0x4, r11}, @TCA_ROUTE4_POLICE={0x70, 0x5, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x9}, @TCA_POLICE_RESULT={0x8, 0x5, 0x4e74f131}, @TCA_POLICE_RESULT={0x8, 0x5, 0x2}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x80}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3}, @TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0xffffffffffffffff, 0x1, 0x3, 0x109, {0x5, 0x0, 0x7, 0x1, 0xc, 0x9}, {0x4, 0x1, 0x9, 0x0, 0x7, 0xffffffff}, 0x1, 0x10000, 0xfffffffd}}]}, @TCA_ROUTE4_FROM={0x8, 0x3, 0xe2}]}}]}, 0x124}, 0x1, 0x0, 0x0, 0x8848}, 0x20000084) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bridge0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bridge0\x00'}) 1.678674036s ago: executing program 2 (id=2950): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a00)={0x14, 0x15, 0x301, 0x8000000, 0x0, {0xb}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) 1.534824654s ago: executing program 2 (id=2951): ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)={0x6, 'wlan1\x00', {}, 0x108}) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0xc00) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) vmsplice(r1, &(0x7f0000000680)=[{0x0}, {&(0x7f0000000100)="ad80ff3ebb2cd04e488e828520", 0xd}, {0x0}, {0x0}], 0x4, 0x8) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x10000, 0x0, 0x4002004c4, 0xffe, 0x0, 0x0, 0xfffffffffffffffd, 0x900f, 0xfffffffffffffffd, 0xd57b, 0x0, 0x7], 0xeeee8000, 0x2113c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000001}, 0x1004) 1.241811866s ago: executing program 2 (id=2952): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x204, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006200)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, r1, {0x7, 0x2b, 0x0, 0x40488102, 0x0, 0x0, 0x7, 0xa15, 0x0, 0x0, 0x1, 0x6}}, 0x50) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f0000000280)='./file0/file1\x00', 0x40c0, &(0x7f00000007c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id', 0x3d, 0xffffffffffffffff}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1000}}]}}, 0x0, 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x90, 0x0, 0x0, {0xffffffffffffffff, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, {0x0, 0x0, 0x0, 0x0, 0x7, 0x8000000000000000, 0x0, 0x0, 0x0, 0x1000, 0xfffffffc}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f000000a200)="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", 0x2000, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x90, 0x0, 0x3, {0xffffffffffffffff, 0x0, 0xfffffe, 0x3, 0x3fe, 0xffffffff, {0x1, 0x8000000000400000, 0x2000, 0xfe2b2df, 0x3, 0x100000001, 0x2, 0x6, 0x0, 0x2000, 0xffffffff, r2, 0x0, 0x4, 0xdffffffe}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 914.610491ms ago: executing program 2 (id=2953): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) (fail_nth: 14) 914.401243ms ago: executing program 3 (id=2914): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000000)=0x80000002, 0x4) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_int(r1, 0x0, 0x33, &(0x7f0000000000)=0x80000002, 0x4) r2 = syz_io_uring_setup(0x773, &(0x7f00000003c0)={0x0, 0x4a68, 0xc08, 0x0, 0x37b}, &(0x7f0000000440), &(0x7f0000000480)) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x8, 0x32, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_IOWQ_AFF(r2, 0x11, &(0x7f0000000500)="93", 0x1) listen(r0, 0x9) sendto$inet(r1, &(0x7f0000000040)='@', 0x1, 0x20044890, &(0x7f0000000080)={0x2, 0x4e23, @remote}, 0x10) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f00000038c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) r4 = eventfd(0x80000001) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000040)={0x1, r4}) ioctl$VHOST_RESET_OWNER(r3, 0xaf02, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000100)={0x0, 0xfffffffffffffe69, 0xfa00, {0x3, &(0x7f0000000040), 0x106, 0x5}}, 0xfffffffffffffc2d) 698.853763ms ago: executing program 3 (id=2954): sendmsg$inet6(0xffffffffffffffff, 0x0, 0x4048043) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='map_files\x00') timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, 0x0) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9, 0x11, r0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000140)) ioctl$SNDCTL_DSP_GETIPTR(r0, 0x800c5011, &(0x7f0000000040)) mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) 689.700506ms ago: executing program 5 (id=2955): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x2c, 0xb, 0x6, 0x801, 0x0, 0x0, {0x2, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48}, 0x4800) 55.239214ms ago: executing program 5 (id=2957): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000000020000000a"]) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f00000005c0)={0x4}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000300)={0x0, 0x19, &(0x7f0000000240)={&(0x7f00000000c0)=@migrate={0x154, 0x21, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, [@encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@multicast2}}, @migrate={0xe8}]}, 0x154}}, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 0s ago: executing program 4 (id=2958): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r2) splice(0xffffffffffffffff, &(0x7f0000000140)=0x8c, 0xffffffffffffffff, &(0x7f00000002c0)=0x6cd, 0x9, 0xc) sendmsg$TIPC_NL_BEARER_ENABLE(r3, 0x0, 0x0) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="41010000", @ANYRES16=r4, @ANYBLOB="0100000000000000000017000000440006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca4198904000500"], 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'veth1_macvtap\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000001c0)={0xffffffff, 0x40000, 0x0, 'queue0\x00'}) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0186405, &(0x7f0000000280)={0xffff, 0x10000, {0xffffffffffffffff}, {0xee01}, 0x9, 0x6}) process_vm_writev(r5, &(0x7f00000005c0)=[{&(0x7f0000000380)=""/122, 0x7a}, {&(0x7f0000000400)=""/207, 0xcf}, {&(0x7f0000000500)=""/123, 0x7b}, {&(0x7f0000000980)=""/171, 0xab}, {&(0x7f00000007c0)=""/210, 0xd2}, {&(0x7f0000000a40)=""/49, 0x31}, {&(0x7f00000008c0)=""/173, 0xad}, {&(0x7f0000001bc0)=""/264, 0x108}], 0x8, &(0x7f0000001b80)=[{&(0x7f0000000a40)}, {&(0x7f0000000700)=""/141, 0x8d}, {&(0x7f0000000b80)=""/4096, 0x1000}], 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000300), 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x18) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8000, &(0x7f0000000000)=0x5, 0x8, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) socket$kcm(0x10, 0x2, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x0) unshare(0x6a040000) syz_usb_connect(0x0, 0x24, &(0x7f0000000680)=ANY=[@ANYBLOB="1201000017dcb4401e04114098af00000001090212000100000000090400000082dd9700c73401badb7e0e7e0fd39b8c8ef520e1b5baa6fa50a6570fe0df8ad7d9257e101f5dbdc299903149a24bf9eecf0b8f"], 0x0) kernel console output (not intermixed with test programs): a failure. [ 805.781089][T15051] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 805.804178][T15051] CPU: 0 UID: 0 PID: 15051 Comm: syz.5.2549 Not tainted syzkaller #0 PREEMPT(full) [ 805.804207][T15051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 805.804222][T15051] Call Trace: [ 805.804231][T15051] [ 805.804242][T15051] dump_stack_lvl+0x189/0x250 [ 805.804276][T15051] ? __pfx____ratelimit+0x10/0x10 [ 805.804309][T15051] ? __pfx_dump_stack_lvl+0x10/0x10 [ 805.804333][T15051] ? __pfx__printk+0x10/0x10 [ 805.804377][T15051] should_fail_ex+0x414/0x560 [ 805.804411][T15051] _copy_to_user+0x31/0xb0 [ 805.804437][T15051] simple_read_from_buffer+0xe1/0x170 [ 805.804467][T15051] proc_fail_nth_read+0x1b3/0x220 [ 805.804505][T15051] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 805.804543][T15051] ? rw_verify_area+0x2a6/0x4d0 [ 805.804575][T15051] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 805.804611][T15051] vfs_read+0x200/0xa30 [ 805.804642][T15051] ? fdget_pos+0x247/0x320 [ 805.804672][T15051] ? __pfx___mutex_lock+0x10/0x10 [ 805.804695][T15051] ? __pfx_vfs_read+0x10/0x10 [ 805.804729][T15051] ? __fget_files+0x2a/0x420 [ 805.804759][T15051] ? __fget_files+0x3a0/0x420 [ 805.804784][T15051] ? __fget_files+0x2a/0x420 [ 805.804819][T15051] ksys_read+0x145/0x250 [ 805.804850][T15051] ? exc_page_fault+0x82/0x100 [ 805.804884][T15051] ? __pfx_ksys_read+0x10/0x10 [ 805.804919][T15051] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 805.804944][T15051] ? lockdep_hardirqs_on+0x98/0x140 [ 805.804981][T15051] __do_fast_syscall_32+0xb6/0x300 [ 805.805004][T15051] ? lockdep_hardirqs_on+0x98/0x140 [ 805.805049][T15051] do_fast_syscall_32+0x34/0x80 [ 805.805072][T15051] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 805.805098][T15051] RIP: 0023:0xf7f22539 [ 805.805118][T15051] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 805.805139][T15051] RSP: 002b:00000000f53f5590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 805.805163][T15051] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f53f5620 [ 805.805178][T15051] RDX: 000000000000000f RSI: 00000000f73b6ff4 RDI: 0000000000000000 [ 805.805192][T15051] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 805.805206][T15051] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 805.805219][T15051] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 805.805252][T15051] [ 805.806901][ T7134] snd-usb-6fire 4-1:0.0: unknown device firmware state received from device: [ 805.818229][ T5854] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 805.844793][ T7134] b3 c1 69 eb 50 3d 29 15 [ 806.131678][ T7134] snd-usb-6fire 4-1:0.0: probe with driver snd-usb-6fire failed with error -5 [ 806.163608][ T7134] usb 4-1: USB disconnect, device number 98 [ 806.191831][T15057] netlink: 'syz.0.2551': attribute type 10 has an invalid length. [ 806.199844][T15057] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2551'. [ 806.213688][T15057] team0: entered promiscuous mode [ 806.218796][T15057] team_slave_0: entered promiscuous mode [ 806.226309][T15057] team_slave_1: entered promiscuous mode [ 806.232449][T15057] dummy0: entered promiscuous mode [ 806.237843][T15057] team0: entered allmulticast mode [ 806.243111][T15057] team_slave_0: entered allmulticast mode [ 806.248865][T15057] team_slave_1: entered allmulticast mode [ 806.254993][T15057] dummy0: entered allmulticast mode [ 806.263038][T15057] 8021q: adding VLAN 0 to HW filter on device team0 [ 806.270839][T15057] bridge0: port 4(team0) entered blocking state [ 806.277453][T15057] bridge0: port 4(team0) entered disabled state [ 806.286957][T15057] bridge0: port 4(team0) entered blocking state [ 806.293398][T15057] bridge0: port 4(team0) entered forwarding state [ 806.540653][T15065] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2555'. [ 807.049742][ T5854] zl10353_read_register: readreg error (reg=127, ret==0) [ 807.258900][ T5854] usb 3-1: USB disconnect, device number 2 [ 807.469479][T15074] syzkaller0: entered promiscuous mode [ 807.477065][T15074] syzkaller0: entered allmulticast mode [ 807.890944][T15080] FAULT_INJECTION: forcing a failure. [ 807.890944][T15080] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 807.979253][T15080] CPU: 1 UID: 0 PID: 15080 Comm: syz.3.2559 Not tainted syzkaller #0 PREEMPT(full) [ 807.979281][T15080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 807.979292][T15080] Call Trace: [ 807.979300][T15080] [ 807.979308][T15080] dump_stack_lvl+0x189/0x250 [ 807.979329][T15080] ? __pfx____ratelimit+0x10/0x10 [ 807.979353][T15080] ? __pfx_dump_stack_lvl+0x10/0x10 [ 807.979370][T15080] ? __pfx__printk+0x10/0x10 [ 807.979392][T15080] ? __might_fault+0xb0/0x130 [ 807.979423][T15080] should_fail_ex+0x414/0x560 [ 807.979447][T15080] copy_fpstate_to_sigframe+0xa70/0xcc0 [ 807.979478][T15080] ? copy_fpstate_to_sigframe+0x181/0xcc0 [ 807.979515][T15080] ? __pfx_copy_fpstate_to_sigframe+0x10/0x10 [ 807.979559][T15080] ? lapic_next_event+0x11/0x20 [ 807.979604][T15080] ? do_raw_spin_lock+0x121/0x290 [ 807.979632][T15080] ? fpu__alloc_mathframe+0xad/0x130 [ 807.979663][T15080] get_sigframe+0x58d/0x7d0 [ 807.979696][T15080] ? __pfx_get_sigframe+0x10/0x10 [ 807.979739][T15080] ia32_setup_frame+0x10b/0x940 [ 807.979776][T15080] ? get_signal+0x1150/0x1340 [ 807.979813][T15080] ? __pfx_ia32_setup_frame+0x10/0x10 [ 807.979849][T15080] ? arch_do_signal_or_restart+0x385/0x790 [ 807.979882][T15080] arch_do_signal_or_restart+0x417/0x790 [ 807.979915][T15080] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 807.979944][T15080] ? _raw_spin_unlock_irq+0x23/0x50 [ 807.979993][T15080] ? exit_to_user_mode_loop+0x40/0x130 [ 807.980031][T15080] exit_to_user_mode_loop+0x72/0x130 [ 807.980064][T15080] ? asm_int80_emulation+0x1a/0x20 [ 807.980084][T15080] do_int80_emulation+0x2aa/0x3f0 [ 807.980108][T15080] ? clear_bhb_loop+0x60/0xb0 [ 807.980130][T15080] ? clear_bhb_loop+0x60/0xb0 [ 807.980157][T15080] asm_int80_emulation+0x1a/0x20 [ 807.980179][T15080] RIP: 0023:0xf7f84539 [ 807.980198][T15080] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 807.980218][T15080] RSP: 002b:00000000f547655c EFLAGS: 00000206 [ 807.980239][T15080] RAX: 00000000fffffffc RBX: 0000000000000003 RCX: 0000000080000180 [ 807.980255][T15080] RDX: 00000000000000e6 RSI: 0000000000000002 RDI: 0000000000000000 [ 807.980268][T15080] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 807.980282][T15080] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 807.980296][T15080] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 807.980329][T15080] [ 808.933801][T15094] netlink: 'syz.0.2560': attribute type 12 has an invalid length. [ 808.948743][T15094] netlink: 'syz.0.2560': attribute type 2 has an invalid length. [ 809.291054][T11596] usb 5-1: new full-speed USB device number 92 using dummy_hcd [ 809.454854][T11596] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 809.464227][T11596] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 809.472435][T11596] usb 5-1: Product: syz [ 809.476924][T11596] usb 5-1: Manufacturer: syz [ 809.481761][T11596] usb 5-1: SerialNumber: syz [ 809.490058][T11596] usb 5-1: config 0 descriptor?? [ 809.591069][ T7134] usb 3-1: new low-speed USB device number 3 using dummy_hcd [ 809.715179][T11596] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 809.780582][ T7134] usb 3-1: Invalid ep0 maxpacket: 32 [ 809.930832][ T7134] usb 3-1: new low-speed USB device number 4 using dummy_hcd [ 810.098212][T15115] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2568'. [ 810.108862][T15115] netlink: 'syz.3.2568': attribute type 13 has an invalid length. [ 810.117870][T15115] netlink: 'syz.3.2568': attribute type 17 has an invalid length. [ 810.120498][ T7134] usb 3-1: Invalid ep0 maxpacket: 32 [ 810.142194][T15115] 8021q: adding VLAN 0 to HW filter on device team0 [ 810.150911][ T7134] usb usb3-port1: attempt power cycle [ 810.170051][T15115] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 810.510723][ T7134] usb 3-1: new low-speed USB device number 5 using dummy_hcd [ 810.531406][ T7134] usb 3-1: Invalid ep0 maxpacket: 32 [ 810.551406][T15123] netlink: 72 bytes leftover after parsing attributes in process `syz.5.2569'. [ 810.638680][T15124] netlink: 'syz.0.2579': attribute type 2 has an invalid length. [ 810.691133][ T7134] usb 3-1: new low-speed USB device number 6 using dummy_hcd [ 810.722166][ T7134] usb 3-1: Invalid ep0 maxpacket: 32 [ 810.733703][ T7134] usb usb3-port1: unable to enumerate USB device [ 811.121646][T15128] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2570'. [ 811.141240][T15128] bond0: ARP target 170.170.170.170 is already present [ 811.155463][T15128] bond0: option arp_ip_target: invalid value (2863311530) [ 811.473611][ T30] kauditd_printk_skb: 61 callbacks suppressed [ 811.473632][ T30] audit: type=1326 audit(1764710216.062:2980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15129 comm="syz.5.2571" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22539 code=0x7ffc0000 [ 811.584402][T11596] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 811.590554][ T30] audit: type=1326 audit(1764710216.062:2981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15129 comm="syz.5.2571" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22539 code=0x7ffc0000 [ 811.611677][T11596] usb 5-1: USB disconnect, device number 92 [ 811.700732][ T30] audit: type=1326 audit(1764710216.062:2982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15129 comm="syz.5.2571" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22539 code=0x7ffc0000 [ 811.727307][ T30] audit: type=1326 audit(1764710216.062:2983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15129 comm="syz.5.2571" exe="/root/syz-executor" sig=0 arch=40000003 syscall=286 compat=1 ip=0xf7f22539 code=0x7ffc0000 [ 811.788397][ T30] audit: type=1326 audit(1764710216.062:2984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15129 comm="syz.5.2571" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22539 code=0x7ffc0000 [ 811.922294][ T30] audit: type=1326 audit(1764710216.062:2985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15129 comm="syz.5.2571" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22539 code=0x7ffc0000 [ 811.946565][ T30] audit: type=1326 audit(1764710216.062:2986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15129 comm="syz.5.2571" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22539 code=0x7ffc0000 [ 811.969298][ T30] audit: type=1326 audit(1764710216.062:2987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15129 comm="syz.5.2571" exe="/root/syz-executor" sig=0 arch=40000003 syscall=288 compat=1 ip=0xf7f22539 code=0x7ffc0000 [ 811.992955][ T30] audit: type=1326 audit(1764710216.062:2988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15129 comm="syz.5.2571" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22539 code=0x7ffc0000 [ 812.015992][ T30] audit: type=1326 audit(1764710216.062:2989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15129 comm="syz.5.2571" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22539 code=0x7ffc0000 [ 812.051018][ T7134] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 812.200514][ T7134] usb 6-1: Using ep0 maxpacket: 8 [ 812.208005][ T7134] usb 6-1: unable to get BOS descriptor or descriptor too short [ 812.218745][ T7134] usb 6-1: config 9 has an invalid interface number: 5 but max is 0 [ 812.228628][ T7134] usb 6-1: config 9 has no interface number 0 [ 812.235128][ T7134] usb 6-1: config 9 interface 5 altsetting 9 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 812.246967][ T7134] usb 6-1: config 9 interface 5 altsetting 9 endpoint 0x87 has invalid wMaxPacketSize 0 [ 812.257052][ T7134] usb 6-1: config 9 interface 5 has no altsetting 0 [ 812.266280][ T7134] usb 6-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice=5d.a8 [ 812.275751][ T7134] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 812.283907][ T7134] usb 6-1: Product: syz [ 812.288146][ T7134] usb 6-1: Manufacturer: syz [ 812.292919][ T7134] usb 6-1: SerialNumber: syz [ 812.536413][ T7134] usb 6-1: USB disconnect, device number 77 [ 813.624606][T15165] netlink: 'syz.5.2581': attribute type 10 has an invalid length. [ 813.945884][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 813.952654][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 814.081745][ T6170] batadv1: left promiscuous mode [ 814.090613][ T5854] usb 6-1: new high-speed USB device number 78 using dummy_hcd [ 814.138937][T15169] netlink: 'syz.3.2583': attribute type 2 has an invalid length. [ 814.254227][ T5854] usb 6-1: New USB device found, idVendor=041e, idProduct=4011, bcdDevice=af.98 [ 814.263722][ T5854] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 814.289747][ T5854] usb 6-1: config 0 descriptor?? [ 814.304923][ T5854] pwc: Creative Labs Webcam Pro Ex detected. [ 814.510773][ T5989] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 814.670622][ T5989] usb 3-1: Using ep0 maxpacket: 32 [ 814.682944][ T5989] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 814.751301][ T5989] usb 3-1: config 0 has no interface number 0 [ 814.764566][ T5989] usb 3-1: config 0 interface 184 has no altsetting 0 [ 814.801131][ T5989] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 814.818836][ T5989] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 814.842575][ T5989] usb 3-1: Product: syz [ 814.856780][T15176] FAULT_INJECTION: forcing a failure. [ 814.856780][T15176] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 814.872179][ T5989] usb 3-1: Manufacturer: syz [ 814.887112][ T5989] usb 3-1: SerialNumber: syz [ 814.900566][T15176] CPU: 0 UID: 0 PID: 15176 Comm: syz.4.2585 Not tainted syzkaller #0 PREEMPT(full) [ 814.900595][T15176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 814.900608][T15176] Call Trace: [ 814.900618][T15176] [ 814.900627][T15176] dump_stack_lvl+0x189/0x250 [ 814.900657][T15176] ? __pfx____ratelimit+0x10/0x10 [ 814.900690][T15176] ? __pfx_dump_stack_lvl+0x10/0x10 [ 814.900714][T15176] ? __pfx__printk+0x10/0x10 [ 814.900742][T15176] ? __might_fault+0xb0/0x130 [ 814.900784][T15176] should_fail_ex+0x414/0x560 [ 814.900817][T15176] _copy_from_user+0x2d/0xb0 [ 814.900841][T15176] get_compat_msghdr+0xad/0x4a0 [ 814.900880][T15176] ? __pfx_get_compat_msghdr+0x10/0x10 [ 814.900918][T15176] ? kstrtouint+0x6e/0xe0 [ 814.900954][T15176] ___sys_sendmsg+0x193/0x2a0 [ 814.901003][T15176] ? __pfx____sys_sendmsg+0x10/0x10 [ 814.901072][T15176] ? __fget_files+0x2a/0x420 [ 814.901094][T15176] ? __fget_files+0x3a0/0x420 [ 814.901134][T15176] __sys_sendmsg+0x164/0x220 [ 814.901168][T15176] ? __pfx___sys_sendmsg+0x10/0x10 [ 814.901210][T15176] ? __pfx_ksys_write+0x10/0x10 [ 814.901358][T15176] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 814.901391][T15176] ? lockdep_hardirqs_on+0x98/0x140 [ 814.901428][T15176] __do_fast_syscall_32+0xb6/0x300 [ 814.901453][T15176] ? lockdep_hardirqs_on+0x98/0x140 [ 814.901491][T15176] do_fast_syscall_32+0x34/0x80 [ 814.901513][T15176] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 814.901539][T15176] RIP: 0023:0xf705d539 [ 814.901557][T15176] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 814.901576][T15176] RSP: 002b:00000000f544d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 814.901600][T15176] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000100 [ 814.901615][T15176] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 814.901628][T15176] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 814.901641][T15176] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 814.901655][T15176] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 814.901685][T15176] [ 814.902847][ T5989] usb 3-1: config 0 descriptor?? [ 815.138863][ T5989] smsc75xx v1.0.0 [ 815.383566][T15186] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2588'. [ 815.396149][T15186] netlink: 'syz.3.2588': attribute type 13 has an invalid length. [ 815.404701][T15186] netlink: 'syz.3.2588': attribute type 17 has an invalid length. [ 815.442323][T15186] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 816.613587][ T5854] pwc: Failed to set LED on/off time (-71) [ 816.680624][ T5854] pwc: send_video_command error -71 [ 816.705043][ T5854] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 816.840603][ T5854] Philips webcam 6-1:0.0: probe with driver Philips webcam failed with error -71 [ 816.949413][ T5854] usb 6-1: USB disconnect, device number 78 [ 817.125854][T15203] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2592'. [ 817.355552][T15205] netlink: 71 bytes leftover after parsing attributes in process `syz.4.2593'. [ 817.735034][ T5989] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 817.776137][T15209] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2595'. [ 817.801171][ T5989] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 817.830493][ T5989] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 817.869641][ T5989] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 817.905979][ T5989] usb 3-1: USB disconnect, device number 7 [ 818.200088][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 818.200109][ T30] audit: type=1326 audit(1764710222.782:3003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15221 comm="syz.5.2598" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22539 code=0x7ffc0000 [ 818.310663][ T30] audit: type=1326 audit(1764710222.792:3004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15221 comm="syz.5.2598" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22539 code=0x7ffc0000 [ 818.448796][ T30] audit: type=1326 audit(1764710222.792:3005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15221 comm="syz.5.2598" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f22539 code=0x7ffc0000 [ 818.540799][ T30] audit: type=1326 audit(1764710222.792:3006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15221 comm="syz.5.2598" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22539 code=0x7ffc0000 [ 818.632717][ T30] audit: type=1326 audit(1764710222.792:3007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15221 comm="syz.5.2598" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22539 code=0x7ffc0000 [ 818.746814][ T30] audit: type=1326 audit(1764710222.792:3008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15221 comm="syz.5.2598" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f22539 code=0x7ffc0000 [ 818.813047][ T30] audit: type=1326 audit(1764710222.802:3009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15221 comm="syz.5.2598" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22539 code=0x7ffc0000 [ 818.866416][ T30] audit: type=1326 audit(1764710222.802:3010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15221 comm="syz.5.2598" exe="/root/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf7f22539 code=0x7ffc0000 [ 818.952092][ T30] audit: type=1326 audit(1764710222.802:3011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15221 comm="syz.5.2598" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22539 code=0x7ffc0000 [ 819.033648][T15236] netlink: 'syz.4.2602': attribute type 10 has an invalid length. [ 819.326406][ T30] audit: type=1326 audit(1764710222.802:3012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15221 comm="syz.5.2598" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22539 code=0x7ffc0000 [ 819.480616][ T7134] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 819.757580][ T7134] usb 5-1: New USB device found, idVendor=041e, idProduct=4011, bcdDevice=af.98 [ 819.804498][ T7134] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 819.882999][ T7134] usb 5-1: config 0 descriptor?? [ 819.943779][ T7134] pwc: Creative Labs Webcam Pro Ex detected. [ 820.421459][T15249] fuse: Bad value for 'fd' [ 822.058186][T15258] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 822.084323][T15261] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2610'. [ 822.134453][T15261] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2610'. [ 822.267871][ T7134] pwc: Failed to set LED on/off time (-71) [ 822.303431][ T7134] pwc: send_video_command error -71 [ 822.308709][ T7134] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 822.350568][ T7134] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71 [ 822.390836][ T7134] usb 5-1: USB disconnect, device number 93 [ 822.522084][T15267] syzkaller0: entered promiscuous mode [ 822.527634][T15267] syzkaller0: entered allmulticast mode [ 822.893272][T15286] FAULT_INJECTION: forcing a failure. [ 822.893272][T15286] name failslab, interval 1, probability 0, space 0, times 0 [ 822.919506][T15286] CPU: 0 UID: 0 PID: 15286 Comm: syz.3.2620 Not tainted syzkaller #0 PREEMPT(full) [ 822.919537][T15286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 822.919552][T15286] Call Trace: [ 822.919561][T15286] [ 822.919572][T15286] dump_stack_lvl+0x189/0x250 [ 822.919602][T15286] ? __pfx____ratelimit+0x10/0x10 [ 822.919636][T15286] ? __pfx_dump_stack_lvl+0x10/0x10 [ 822.919660][T15286] ? __pfx__printk+0x10/0x10 [ 822.919697][T15286] ? __pfx___might_resched+0x10/0x10 [ 822.919719][T15286] ? fs_reclaim_acquire+0x7d/0x100 [ 822.919746][T15286] should_fail_ex+0x414/0x560 [ 822.919780][T15286] should_failslab+0xa8/0x100 [ 822.919805][T15286] kmem_cache_alloc_noprof+0x74/0x6e0 [ 822.919838][T15286] ? mas_alloc_nodes+0x291/0x350 [ 822.919875][T15286] mas_alloc_nodes+0x291/0x350 [ 822.919911][T15286] mas_preallocate+0x2e0/0x670 [ 822.919950][T15286] ? __pfx_mas_preallocate+0x10/0x10 [ 822.919979][T15286] ? rcu_is_watching+0x15/0xb0 [ 822.920015][T15286] ? __mas_set_range+0x12f/0x3c0 [ 822.920050][T15286] __split_vma+0x2fa/0xa00 [ 822.920089][T15286] ? __pfx___split_vma+0x10/0x10 [ 822.920129][T15286] ? mas_find+0xb0e/0xd30 [ 822.920168][T15286] vms_gather_munmap_vmas+0x4c6/0x12e0 [ 822.920215][T15286] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 822.920250][T15286] ? __pfx___might_resched+0x10/0x10 [ 822.920284][T15286] do_vmi_align_munmap+0x268/0x440 [ 822.920308][T15286] ? get_old_pud+0x2a0/0x3d0 [ 822.920353][T15286] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 822.920417][T15286] do_vmi_munmap+0x253/0x2e0 [ 822.920449][T15286] move_vma+0x10eb/0x1820 [ 822.920515][T15286] ? arch_get_unmapped_area_topdown+0x251/0xbc0 [ 822.920550][T15286] ? __pfx_move_vma+0x10/0x10 [ 822.920597][T15286] ? cap_mmap_addr+0xb0/0x100 [ 822.920619][T15286] ? bpf_lsm_mmap_addr+0x9/0x20 [ 822.920656][T15286] mremap_to+0x6ce/0x790 [ 822.920688][T15286] ? mtree_load+0x101/0x6f0 [ 822.920721][T15286] ? __pfx_mremap_to+0x10/0x10 [ 822.920747][T15286] ? may_expand_vm+0x1b6/0x2f0 [ 822.920783][T15286] ? check_prep_vma+0x8bb/0xb00 [ 822.920821][T15286] __se_sys_mremap+0xd45/0xfb0 [ 822.920858][T15286] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 822.920895][T15286] ? __pfx___se_sys_mremap+0x10/0x10 [ 822.920926][T15286] ? fput+0xa0/0xd0 [ 822.920952][T15286] ? ksys_write+0x22a/0x250 [ 822.920983][T15286] ? exc_page_fault+0x82/0x100 [ 822.921017][T15286] ? __pfx_ksys_write+0x10/0x10 [ 822.921053][T15286] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 822.921077][T15286] ? lockdep_hardirqs_on+0x98/0x140 [ 822.921108][T15286] ? __ia32_sys_mremap+0x20/0xc0 [ 822.921136][T15286] __do_fast_syscall_32+0xb6/0x300 [ 822.921160][T15286] ? lockdep_hardirqs_on+0x98/0x140 [ 822.921199][T15286] do_fast_syscall_32+0x34/0x80 [ 822.921221][T15286] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 822.921249][T15286] RIP: 0023:0xf7f84539 [ 822.921269][T15286] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 822.921288][T15286] RSP: 002b:00000000f547655c EFLAGS: 00000206 ORIG_RAX: 00000000000000a3 [ 822.921311][T15286] RAX: ffffffffffffffda RBX: 0000000080ffa000 RCX: 0000000000001000 [ 822.921327][T15286] RDX: 0000000000004000 RSI: 0000000000000003 RDI: 0000000080ffb000 [ 822.921342][T15286] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 822.921355][T15286] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 822.921369][T15286] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 822.921402][T15286] [ 823.500977][ T7134] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 823.680856][ T7134] usb 3-1: Using ep0 maxpacket: 16 [ 823.718907][ T7134] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 823.757773][ T7134] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 823.792853][ T7134] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 823.944200][ T7134] usb 3-1: config 0 descriptor?? [ 824.049381][T15304] loop5: detected capacity change from 0 to 7 [ 824.256939][T15304] Dev loop5: unable to read RDB block 7 [ 824.301478][T15304] loop5: unable to read partition table [ 824.661900][T15304] loop5: partition table beyond EOD, truncated [ 824.719721][T15285] tipc: Enabling of bearer rejected, already enabled [ 824.734599][ T7134] mcp2221 0003:04D8:00DD.0026: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 824.795758][T15304] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 825.207640][ T5927] usb 3-1: USB disconnect, device number 8 [ 825.664443][T15312] 8021q: adding VLAN 0 to HW filter on device bond2 [ 826.517886][T15331] loop5: detected capacity change from 0 to 7 [ 826.547802][T15326] netlink: 'syz.2.2629': attribute type 2 has an invalid length. [ 826.637906][T15331] Dev loop5: unable to read RDB block 7 [ 826.649834][T15331] loop5: unable to read partition table [ 826.666946][T15331] loop5: partition table beyond EOD, truncated [ 826.700847][T15331] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 826.850508][ T7134] usb 5-1: new full-speed USB device number 94 using dummy_hcd [ 826.958474][T15344] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2635'. [ 826.979466][T15346] Cannot find add_set index 2 as target [ 827.010795][ T7134] usb 5-1: device descriptor read/64, error -71 [ 827.251511][ T7134] usb 5-1: new full-speed USB device number 95 using dummy_hcd [ 827.361995][T15354] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2639'. [ 827.372842][T15354] netlink: 'syz.2.2639': attribute type 13 has an invalid length. [ 827.381276][T15354] netlink: 'syz.2.2639': attribute type 17 has an invalid length. [ 827.395908][T15354] 8021q: adding VLAN 0 to HW filter on device team0 [ 827.402789][ T7134] usb 5-1: device descriptor read/64, error -71 [ 827.413371][T15354] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 827.530973][ T7134] usb usb5-port1: attempt power cycle [ 827.884148][ T7134] usb 5-1: new full-speed USB device number 96 using dummy_hcd [ 827.921256][ T7134] usb 5-1: device descriptor read/8, error -71 [ 827.950980][ T5918] usb 6-1: new high-speed USB device number 79 using dummy_hcd [ 828.123161][ T5918] usb 6-1: config 0 has an invalid interface number: 117 but max is 0 [ 828.140538][ T5918] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 828.161576][ T7134] usb 5-1: new full-speed USB device number 97 using dummy_hcd [ 828.170179][ T5918] usb 6-1: config 0 has no interface number 0 [ 828.181438][ T5918] usb 6-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 828.192418][ T7134] usb 5-1: device descriptor read/8, error -71 [ 828.210841][ T5918] usb 6-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 828.239570][ T5918] usb 6-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 828.260159][ T5918] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 828.270269][ T5918] usb 6-1: Product: syz [ 828.279149][ T5918] usb 6-1: Manufacturer: syz [ 828.289272][ T5918] usb 6-1: SerialNumber: syz [ 828.305781][ T5918] usb 6-1: config 0 descriptor?? [ 828.311443][ T7134] usb usb5-port1: unable to enumerate USB device [ 829.087045][T15367] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 829.096214][T15367] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 829.122957][ T5854] usb 6-1: USB disconnect, device number 79 [ 829.424170][T15375] netlink: 'syz.5.2644': attribute type 2 has an invalid length. [ 829.450562][T15381] syzkaller1: entered promiscuous mode [ 829.475146][T15381] syzkaller1: entered allmulticast mode [ 829.726186][T15383] tipc: Enabling of bearer rejected, already enabled [ 830.080659][ T5854] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 830.240760][ T5854] usb 5-1: Using ep0 maxpacket: 32 [ 830.248260][ T5854] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 830.272800][ T5854] usb 5-1: config 0 has no interface number 0 [ 830.291308][ T5854] usb 5-1: config 0 interface 184 has no altsetting 0 [ 830.333008][ T5854] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 830.347154][ T5854] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 830.359876][ T5854] usb 5-1: Product: syz [ 830.364570][ T5854] usb 5-1: Manufacturer: syz [ 830.370084][ T5854] usb 5-1: SerialNumber: syz [ 830.379782][ T5854] usb 5-1: config 0 descriptor?? [ 830.390220][ T5854] smsc75xx v1.0.0 [ 830.506507][ T5918] usb 6-1: new high-speed USB device number 80 using dummy_hcd [ 830.630948][ T7134] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 830.676915][ T5918] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 830.697837][ T5918] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 830.724865][ T5918] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 830.746804][ T5918] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 830.772764][ T5918] usb 6-1: Manufacturer: syz [ 830.795821][ T5918] usb 6-1: config 0 descriptor?? [ 830.900830][ T5918] rc_core: IR keymap rc-hauppauge not found [ 830.917256][ T5918] Registered IR keymap rc-empty [ 830.926760][ T5918] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 830.941028][ T5918] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input40 [ 831.026871][ T5854] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 831.190922][ T5854] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 831.261241][T15416] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2659'. [ 831.293733][T15416] netlink: 'syz.3.2659': attribute type 13 has an invalid length. [ 831.302257][T15416] netlink: 'syz.3.2659': attribute type 17 has an invalid length. [ 831.324859][T15416] 8021q: adding VLAN 0 to HW filter on device team0 [ 831.334521][T15416] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 831.384940][ C0] igorplugusb 6-1:0.0: receive overflow, at least 23 lost [ 831.603388][ T5918] usb 6-1: USB disconnect, device number 80 [ 831.996930][T15385] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2649'. [ 832.362989][T15427] atomic_op ffff888029289198 conn xmit_atomic 0000000000000000 [ 832.578713][T15430] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2662'. [ 833.106501][ T5854] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 833.129065][ T5854] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 833.190575][ T5854] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 833.219978][ T5854] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 833.262843][ T5854] usb 5-1: USB disconnect, device number 98 [ 833.326805][T15446] tipc: Enabling of bearer rejected, already enabled [ 833.774608][T15457] xt_CT: You must specify a L4 protocol and not use inversions on it [ 833.790144][T15457] netlink: 188 bytes leftover after parsing attributes in process `syz.4.2666'. [ 836.391003][ T7134] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 836.560567][ T7134] usb 4-1: Using ep0 maxpacket: 32 [ 836.562643][ T7134] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 836.562679][ T7134] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 836.562712][ T7134] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 836.562746][ T7134] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 836.562764][ T7134] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 836.568352][ T7134] usb 4-1: config 0 descriptor?? [ 836.572222][T15493] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 836.574212][ T7134] hub 4-1:0.0: USB hub found [ 836.807374][ T7134] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 836.833995][ T7134] usbhid 4-1:0.0: can't add hid device: -71 [ 836.850179][ T7134] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 836.907127][ T7134] usb 4-1: USB disconnect, device number 99 [ 836.971299][T15502] netlink: 'syz.0.2681': attribute type 12 has an invalid length. [ 836.972177][T15502] netlink: 'syz.0.2681': attribute type 2 has an invalid length. [ 837.618146][T15517] IPVS: set_ctl: invalid protocol: 375 172.20.20.170:0 [ 838.304323][T15526] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 838.617579][T15530] netlink: 'syz.0.2689': attribute type 10 has an invalid length. [ 839.003379][T15533] team0 (unregistering): Port device team_slave_0 removed [ 839.033580][T15533] team0 (unregistering): Port device team_slave_1 removed [ 839.106601][T15533] team0 (unregistering): Port device dummy0 removed [ 839.133760][T15533] bond2: left allmulticast mode [ 839.140046][T15533] ip6gretap1: left allmulticast mode [ 839.146683][T15533] bond2: left promiscuous mode [ 839.153863][T15533] ip6gretap1: left promiscuous mode [ 839.174877][T15533] team0 (unregistering): Port device macvlan2 removed [ 839.951661][T11596] usb 4-1: new full-speed USB device number 100 using dummy_hcd [ 840.069020][T15551] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2693'. [ 840.113693][T15551] lo: entered promiscuous mode [ 840.120667][T11596] usb 4-1: device descriptor read/64, error -71 [ 840.143864][T15551] tunl0: entered promiscuous mode [ 840.167111][T15551] gre0: entered promiscuous mode [ 840.252796][T15551] gretap0: entered promiscuous mode [ 840.302244][T15551] erspan0: entered promiscuous mode [ 840.331861][T15551] ip_vti0: entered promiscuous mode [ 840.343822][T15551] ip6_vti0: entered promiscuous mode [ 840.380513][T11596] usb 4-1: new full-speed USB device number 101 using dummy_hcd [ 840.429301][T15551] sit0: entered promiscuous mode [ 840.510614][T11596] usb 4-1: device descriptor read/64, error -71 [ 840.519830][T15551] ip6tnl0: entered promiscuous mode [ 840.583327][T15551] ip6gre0: entered promiscuous mode [ 840.620876][T11596] usb usb4-port1: attempt power cycle [ 840.846427][T15551] syz_tun: entered promiscuous mode [ 841.080600][T11596] usb 4-1: new full-speed USB device number 102 using dummy_hcd [ 841.101712][T11596] usb 4-1: device descriptor read/8, error -71 [ 841.167677][T15551] ip6gretap0: entered promiscuous mode [ 841.239117][T15551] bridge0: port 2(bridge_slave_1) entered disabled state [ 841.246792][T15551] bridge0: port 1(bridge_slave_0) entered disabled state [ 841.340523][T11596] usb 4-1: new full-speed USB device number 103 using dummy_hcd [ 841.361480][T11596] usb 4-1: device descriptor read/8, error -71 [ 841.376563][T15551] bridge0: entered promiscuous mode [ 841.400077][T15551] bond_slave_0: left promiscuous mode [ 841.409089][T15551] bond_slave_1: left promiscuous mode [ 841.414712][T15551] bond0: entered promiscuous mode [ 841.420023][T15551] bond_slave_0: entered promiscuous mode [ 841.444360][T15551] bond_slave_1: entered promiscuous mode [ 841.456354][T15551] dummy0: entered promiscuous mode [ 841.462791][T15551] nlmon0: entered promiscuous mode [ 841.471738][T15551] caif0: entered promiscuous mode [ 841.477731][T15551] batadv0: entered promiscuous mode [ 841.488899][T15551] vxcan0: entered promiscuous mode [ 841.491385][T11596] usb usb4-port1: unable to enumerate USB device [ 841.513412][T15551] vxcan1: entered promiscuous mode [ 841.579679][T15551] veth0: entered promiscuous mode [ 841.612501][T15551] veth1: entered promiscuous mode [ 841.642100][T15551] wg0: entered promiscuous mode [ 841.667538][T15551] wg1: entered promiscuous mode [ 841.677849][T15551] wg2: entered promiscuous mode [ 841.687610][T15551] veth0_to_bridge: entered promiscuous mode [ 841.701596][T15566] netlink: 'syz.2.2697': attribute type 2 has an invalid length. [ 841.724210][T15551] veth1_to_bridge: entered promiscuous mode [ 841.743102][T15551] veth0_to_bond: entered promiscuous mode [ 841.758478][T15551] veth1_to_bond: entered promiscuous mode [ 841.787058][T15551] veth0_to_team: entered promiscuous mode [ 841.799152][T15551] team_slave_0: entered promiscuous mode [ 841.805887][T15551] veth1_to_team: entered promiscuous mode [ 841.831660][T15551] team_slave_1: entered promiscuous mode [ 841.838645][T15551] veth0_to_batadv: entered promiscuous mode [ 841.849470][T15551] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 841.860057][T15551] batadv_slave_0: entered promiscuous mode [ 841.884630][T15551] veth1_to_batadv: entered promiscuous mode [ 841.896854][T15551] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 841.905592][T15551] batadv_slave_1: entered promiscuous mode [ 841.917509][T15551] xfrm0: entered promiscuous mode [ 841.938991][T15551] veth0_to_hsr: entered promiscuous mode [ 841.954082][T15551] veth1_to_hsr: entered promiscuous mode [ 841.985625][T15551] hsr0: entered promiscuous mode [ 841.998779][T15551] veth1_virt_wifi: entered promiscuous mode [ 842.015063][T15551] veth0_virt_wifi: entered promiscuous mode [ 842.039335][T15551] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 842.074071][T15551] vlan0: entered promiscuous mode [ 842.079972][T15551] vlan1: entered promiscuous mode [ 842.109992][T15551] macvlan0: entered promiscuous mode [ 842.123416][T15551] macvlan1: entered promiscuous mode [ 842.136101][T15551] ipvlan0: entered promiscuous mode [ 842.141927][T15551] ipvlan1: entered promiscuous mode [ 842.172517][T15551] macvtap0: entered promiscuous mode [ 842.183461][T15551] macsec0: entered promiscuous mode [ 842.195635][T15551] geneve0: entered promiscuous mode [ 842.206350][T15551] geneve1: entered promiscuous mode [ 842.243949][T15551] netdevsim netdevsim4 netdevsim1: entered promiscuous mode [ 842.258384][T15551] netdevsim netdevsim4 netdevsim2: entered promiscuous mode [ 842.269417][T15551] netdevsim netdevsim4 netdevsim3: entered promiscuous mode [ 842.279114][T15551] mac80211_hwsim hwsim9 wlan0: entered promiscuous mode [ 842.292653][T15551] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 842.299881][T15551] bond1: entered promiscuous mode [ 842.306212][T15551] macsec1: entered promiscuous mode [ 842.312446][T15551] gre1: entered promiscuous mode [ 842.362244][T15551] vlan2: entered promiscuous mode [ 842.369608][T15551] syztnl2: entered promiscuous mode [ 842.376062][T15551] vxlan0: entered promiscuous mode [ 842.383791][T15551] bond2: entered promiscuous mode [ 842.388862][T15551] ip6gretap1: entered promiscuous mode [ 842.415861][T15551] macvlan2: left allmulticast mode [ 842.423746][T15551] bridge1: entered promiscuous mode [ 842.429315][T15551] erspan1: entered promiscuous mode [ 842.443845][T15551] ip6gretap2: entered promiscuous mode [ 842.449565][T15551] bond3: entered promiscuous mode [ 842.466270][T15551] ip6gre1: entered promiscuous mode [ 842.474015][T15551] bridge2: entered promiscuous mode [ 842.482312][T15551] geneve2: left allmulticast mode [ 842.508589][T15565] netlink: 'syz.2.2697': attribute type 12 has an invalid length. [ 842.521845][ T292] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 842.531797][ T292] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 256 - 0 [ 842.605417][ T292] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 842.647619][ T292] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 256 - 0 [ 842.670294][ T292] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 842.694346][ T292] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 256 - 0 [ 842.706125][ T292] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 842.715689][ T292] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 256 - 0 [ 842.936258][T15575] syzkaller1: entered promiscuous mode [ 842.954427][T15575] syzkaller1: entered allmulticast mode [ 843.271083][T15587] tipc: Enabled bearer , priority 0 [ 843.302486][T15587] tipc: Resetting bearer [ 843.345530][T15586] tipc: Disabling bearer [ 843.512114][ T30] kauditd_printk_skb: 49 callbacks suppressed [ 843.512134][ T30] audit: type=1400 audit(1764710248.102:3062): apparmor="DENIED" operation="stack" class="file" info="label not found" error=-2 profile="unconfined" name=3A3A0AE10CCA7C2B08C9DFF78977F306B457CA93031D371D06D2E59E863E2FE54118A4EE43068DF6BA88E1B6DC3A552C91AE1C817D6B6014270B8BC51F73363852F4F12EE955F464599F0C485D pid=15576 comm="syz.2.2702" [ 843.900577][ T5854] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 843.992034][T15610] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2708'. [ 844.050707][ T5854] usb 3-1: Using ep0 maxpacket: 16 [ 844.149548][ T5854] usb 3-1: unable to get BOS descriptor or descriptor too short [ 844.159421][ T5854] usb 3-1: config 1 has an invalid interface number: 160 but max is 0 [ 844.170217][ T5854] usb 3-1: config 1 has no interface number 0 [ 844.175007][T15611] netlink: 'syz.4.2709': attribute type 12 has an invalid length. [ 844.190487][ T5854] usb 3-1: config 1 interface 160 has no altsetting 0 [ 844.199142][T15611] netlink: 'syz.4.2709': attribute type 2 has an invalid length. [ 844.211431][ T5854] usb 3-1: New USB device found, idVendor=0c88, idProduct=0021, bcdDevice=19.47 [ 844.562945][ T5854] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 844.576791][ T5854] usb 3-1: Product: syz [ 844.584529][ T5854] usb 3-1: Manufacturer: syz [ 844.592867][ T5854] usb 3-1: SerialNumber: syz [ 844.825286][ T5854] usb 3-1: palm_os_4_probe - error -71 getting connection info [ 844.842896][ T5854] visor 3-1:1.160: Handspring Visor / Palm OS converter detected [ 844.867900][ T5854] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 844.899233][ T5854] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 844.929606][ T5854] usb 3-1: USB disconnect, device number 10 [ 844.952167][ T5854] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 845.075484][ T5854] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 845.101366][ T5854] visor 3-1:1.160: device disconnected [ 845.238118][T15626] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 845.533029][T15631] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2715'. [ 846.381620][T15649] netlink: 'syz.5.2721': attribute type 12 has an invalid length. [ 846.435943][T15649] netlink: 'syz.5.2721': attribute type 2 has an invalid length. [ 846.510043][T15660] input: syz0 as /devices/virtual/input/input41 [ 846.570000][T15663] FAULT_INJECTION: forcing a failure. [ 846.570000][T15663] name failslab, interval 1, probability 0, space 0, times 0 [ 846.619096][T15663] CPU: 0 UID: 0 PID: 15663 Comm: syz.4.2725 Not tainted syzkaller #0 PREEMPT(full) [ 846.619129][T15663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 846.619143][T15663] Call Trace: [ 846.619152][T15663] [ 846.619162][T15663] dump_stack_lvl+0x189/0x250 [ 846.619193][T15663] ? __pfx____ratelimit+0x10/0x10 [ 846.619225][T15663] ? __pfx_dump_stack_lvl+0x10/0x10 [ 846.619248][T15663] ? __pfx__printk+0x10/0x10 [ 846.619282][T15663] ? __pfx___might_resched+0x10/0x10 [ 846.619309][T15663] should_fail_ex+0x414/0x560 [ 846.619343][T15663] should_failslab+0xa8/0x100 [ 846.619368][T15663] __kmalloc_noprof+0xcb/0x7e0 [ 846.619399][T15663] ? rcu_is_watching+0x15/0xb0 [ 846.619419][T15663] ? snd_pcm_hw_refine+0x967/0x1640 [ 846.619459][T15663] snd_pcm_hw_refine+0x967/0x1640 [ 846.619506][T15663] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 846.619545][T15663] ? __pfx_snd_pcm_hw_refine+0x10/0x10 [ 846.619617][T15663] ? __asan_memset+0x22/0x50 [ 846.619646][T15663] ? snd_pcm_oss_change_params_locked+0x7a0/0x3e40 [ 846.619675][T15663] ? snd_pcm_oss_change_params_locked+0x800/0x3e40 [ 846.619707][T15663] snd_pcm_oss_change_params_locked+0xa84/0x3e40 [ 846.619754][T15663] ? __mutex_lock+0x335/0x1350 [ 846.619777][T15663] ? unwind_get_return_address+0x4d/0x90 [ 846.619802][T15663] ? arch_stack_walk+0xfc/0x150 [ 846.619829][T15663] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 846.619871][T15663] ? aa_file_perm+0x13a/0x1540 [ 846.619899][T15663] ? aa_file_perm+0x44d/0x1540 [ 846.619932][T15663] snd_pcm_oss_write+0x2fb/0x1190 [ 846.619955][T15663] ? io_submit_sqes+0x935/0x1e40 [ 846.619987][T15663] ? __pfx_aa_file_perm+0x10/0x10 [ 846.620023][T15663] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 846.620055][T15663] ? __lock_acquire+0x6b6/0x2cf0 [ 846.620093][T15663] loop_rw_iter+0x425/0x660 [ 846.620139][T15663] io_write+0x1234/0x16d0 [ 846.620176][T15663] ? __pfx_io_write+0x10/0x10 [ 846.620204][T15663] ? __fget_files+0x2a/0x420 [ 846.620228][T15663] ? __fget_files+0x3a0/0x420 [ 846.620256][T15663] __io_issue_sqe+0x181/0x4b0 [ 846.620278][T15663] ? io_file_get_normal+0xe9/0x2d0 [ 846.620296][T15663] io_issue_sqe+0x165/0x1060 [ 846.620321][T15663] io_submit_sqes+0xa44/0x1e40 [ 846.620360][T15663] __se_sys_io_uring_enter+0x2df/0x2b00 [ 846.620395][T15663] ? ksys_write+0x1cb/0x250 [ 846.620431][T15663] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 846.620453][T15663] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 846.620475][T15663] ? __pfx_vfs_write+0x10/0x10 [ 846.620518][T15663] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 846.620543][T15663] ? __fget_files+0x3a0/0x420 [ 846.620568][T15663] ? fput+0xa0/0xd0 [ 846.620586][T15663] ? ksys_write+0x22a/0x250 [ 846.620611][T15663] ? __pfx_ksys_write+0x10/0x10 [ 846.620636][T15663] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 846.620654][T15663] ? __ia32_sys_io_uring_enter+0x21/0xf0 [ 846.620674][T15663] __do_fast_syscall_32+0xb6/0x300 [ 846.620691][T15663] ? lockdep_hardirqs_on+0x98/0x140 [ 846.620718][T15663] do_fast_syscall_32+0x34/0x80 [ 846.620734][T15663] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 846.620754][T15663] RIP: 0023:0xf705d539 [ 846.620768][T15663] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 846.620782][T15663] RSP: 002b:00000000f542c55c EFLAGS: 00000206 ORIG_RAX: 00000000000001aa [ 846.620798][T15663] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000000007898 [ 846.620809][T15663] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000000 [ 846.620818][T15663] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 846.620827][T15663] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 846.620836][T15663] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 846.620859][T15663] [ 847.250521][ T5854] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 847.347129][T15673] program syz.0.2729 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 847.410524][ T5854] usb 5-1: Using ep0 maxpacket: 32 [ 847.417969][ T5854] usb 5-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 847.449261][ T5854] usb 5-1: config 155 interface 0 has no altsetting 0 [ 847.470047][ T5854] usb 5-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 847.481199][ T5854] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 847.489314][ T5854] usb 5-1: Product: syz [ 847.499533][ T5854] usb 5-1: Manufacturer: syz [ 847.509862][ T5854] usb 5-1: SerialNumber: syz [ 847.560623][ T5927] usb 6-1: new full-speed USB device number 81 using dummy_hcd [ 847.741020][T15685] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2734'. [ 847.744292][ T5854] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 847.760831][ T5927] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 847.773664][ T5854] imon 5-1:155.0: unable to initialize intf0, err -19 [ 847.783724][ T5927] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 847.794199][ T5854] imon:imon_probe: failed to initialize context! [ 847.801281][ T5927] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 847.814368][ T5854] imon 5-1:155.0: unable to register, err -19 [ 847.824879][ T5854] usb 5-1: USB disconnect, device number 99 [ 847.831960][ T5927] usb 6-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 847.846092][ T5927] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 847.865213][ T5927] usb 6-1: config 0 descriptor?? [ 848.070158][T15694] netlink: 'syz.0.2737': attribute type 10 has an invalid length. [ 848.333842][ T5927] hid-multitouch 0003:0457:07DA.0027: unknown main item tag 0x0 [ 848.343983][ T5927] hid-multitouch 0003:0457:07DA.0027: unknown main item tag 0x0 [ 848.359005][ T5927] hid-multitouch 0003:0457:07DA.0027: unknown main item tag 0x0 [ 848.372708][ T5927] hid-multitouch 0003:0457:07DA.0027: unknown main item tag 0x0 [ 848.384093][ T5927] hid-multitouch 0003:0457:07DA.0027: unknown main item tag 0x0 [ 848.400605][ T5927] hid-multitouch 0003:0457:07DA.0027: unknown main item tag 0x0 [ 848.408640][ T5927] hid-multitouch 0003:0457:07DA.0027: unknown main item tag 0x0 [ 848.431825][ T5927] hid-multitouch 0003:0457:07DA.0027: unknown main item tag 0x0 [ 848.441842][ T5927] hid-multitouch 0003:0457:07DA.0027: unknown main item tag 0x0 [ 848.453511][ T5927] hid-multitouch 0003:0457:07DA.0027: unknown main item tag 0x0 [ 848.479218][ T5927] hid-multitouch 0003:0457:07DA.0027: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.5-1/input0 [ 848.611000][T15702] netlink: 'syz.2.2738': attribute type 12 has an invalid length. [ 848.636124][T15702] netlink: 'syz.2.2738': attribute type 2 has an invalid length. [ 849.280684][ T5927] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 849.442753][ T5927] usb 5-1: config 0 has an invalid interface number: 23 but max is 0 [ 849.522575][ T5927] usb 5-1: config 0 has no interface number 0 [ 849.529163][ T5927] usb 5-1: config 0 interface 23 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 849.570134][ T5927] usb 5-1: config 0 interface 23 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1023 [ 849.751040][ T5927] usb 5-1: New USB device found, idVendor=03f0, idProduct=0307, bcdDevice= 0.01 [ 849.760313][ T5927] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 849.810793][ T5927] usb 5-1: Product: syz [ 849.816455][ T5927] usb 5-1: Manufacturer: syz [ 849.825837][ T5927] usb 5-1: SerialNumber: syz [ 849.843949][ T5927] usb 5-1: config 0 descriptor?? [ 849.867101][T15714] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 849.875825][T15714] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 849.960603][ T5927] ums-usbat 5-1:0.23: USB Mass Storage device detected [ 850.186545][T15714] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 850.196585][T15714] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 850.239275][ T7134] usb 6-1: USB disconnect, device number 81 [ 850.258848][ T5927] ums-usbat 5-1:0.23: probe with driver ums-usbat failed with error -5 [ 850.290281][ T5927] usb 5-1: USB disconnect, device number 100 [ 850.654437][T15732] fuse: Bad value for 'rootmode' [ 851.522101][T15751] netlink: 'syz.5.2753': attribute type 12 has an invalid length. [ 851.541798][T15751] netlink: 'syz.5.2753': attribute type 2 has an invalid length. [ 852.390581][ T5854] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 852.594997][ T5854] usb 3-1: Using ep0 maxpacket: 32 [ 852.613053][ T5854] usb 3-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 852.630807][ T5854] usb 3-1: config 155 interface 0 has no altsetting 0 [ 852.652266][ T5854] usb 3-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 852.665151][ T5854] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 852.681972][ T5854] usb 3-1: Product: syz [ 852.694305][ T5854] usb 3-1: Manufacturer: syz [ 852.704417][ T5854] usb 3-1: SerialNumber: syz [ 853.075887][ T5854] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 853.108667][T15783] netlink: 'syz.4.2761': attribute type 10 has an invalid length. [ 853.120561][ T5854] imon 3-1:155.0: unable to initialize intf0, err -19 [ 853.157907][ T5854] imon:imon_probe: failed to initialize context! [ 853.168121][ T5854] imon 3-1:155.0: unable to register, err -19 [ 853.180098][ T5854] usb 3-1: USB disconnect, device number 11 [ 853.188471][T15783] dummy0: left promiscuous mode [ 853.672770][ T7134] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 853.890521][ T7134] usb 5-1: New USB device found, idVendor=041e, idProduct=4011, bcdDevice=af.98 [ 853.899848][ T7134] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 853.936371][ T7134] usb 5-1: config 0 descriptor?? [ 853.986041][ T7134] pwc: Creative Labs Webcam Pro Ex detected. [ 854.697496][T15813] No buffer was provided with the request [ 855.203994][T15821] netlink: 'syz.5.2771': attribute type 12 has an invalid length. [ 855.217062][T15821] netlink: 'syz.5.2771': attribute type 2 has an invalid length. [ 855.772343][T15834] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2773'. [ 856.138557][ T7134] pwc: Failed to set LED on/off time (-71) [ 856.170964][ T7134] pwc: send_video_command error -71 [ 856.196291][ T7134] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 856.252232][ T7134] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71 [ 856.291153][ T7134] usb 5-1: USB disconnect, device number 101 [ 856.657665][ T7134] usb 5-1: new full-speed USB device number 102 using dummy_hcd [ 856.823472][ T7134] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 856.840850][ T7134] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 856.852527][ T7134] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 857.100522][ T7134] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 857.144021][ T7134] usb 5-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 857.160336][ T7134] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 857.200055][ T7134] usb 5-1: config 0 descriptor?? [ 857.235250][T15838] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 857.305318][T15849] input: syz0 as /devices/virtual/input/input42 [ 857.498908][ T7134] usbhid 5-1:0.0: can't add hid device: -71 [ 857.529664][ T7134] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 857.679412][ T7134] usb 5-1: USB disconnect, device number 102 [ 858.150565][ T5854] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 858.290560][ T7134] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 858.310614][ T5854] usb 4-1: Using ep0 maxpacket: 32 [ 858.322573][ T5854] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 858.360800][ T5854] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 858.382679][ T5854] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 858.400513][ T5854] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 858.421869][ T5854] usb 4-1: config 0 descriptor?? [ 858.456306][ T5854] hub 4-1:0.0: USB hub found [ 858.471469][ T7134] usb 5-1: Using ep0 maxpacket: 32 [ 858.491508][ T7134] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 858.510917][ T7134] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 858.522760][ T7134] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 858.526623][T15864] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2783'. [ 858.536552][ T7134] usb 5-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 858.570874][T15864] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2783'. [ 858.582430][ T7134] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 858.596225][ T7134] usb 5-1: config 0 descriptor?? [ 858.629901][ T5854] hub 4-1:0.0: 1 port detected [ 858.681240][T15865] fuse: Unknown parameter '0x000000000000000b' [ 858.978302][T15870] netlink: 'syz.2.2784': attribute type 10 has an invalid length. [ 859.000032][T15870] team0: Port device netdevsim0 added [ 859.019481][T15870] netlink: 'syz.2.2784': attribute type 10 has an invalid length. [ 859.037478][ T7134] hid-multitouch 0003:0EEF:72C4.0028: reserved main item tag 0xd [ 859.058302][ T7134] hid-multitouch 0003:0EEF:72C4.0028: hidraw0: USB HID v0.00 Device [HID 0eef:72c4] on usb-dummy_hcd.4-1/input0 [ 859.085041][T15870] team0: Port device netdevsim0 removed [ 859.154683][T15870] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 859.263668][ T5854] hub 4-1:0.0: activate --> -90 [ 859.310266][T15838] netlink: 'syz.4.2774': attribute type 32 has an invalid length. [ 859.330074][T15838] netlink: 'syz.4.2774': attribute type 32 has an invalid length. [ 859.344339][ T30] audit: type=1326 audit(1764710263.932:3063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15837 comm="syz.4.2774" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 859.391447][ T30] audit: type=1326 audit(1764710263.952:3064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15837 comm="syz.4.2774" exe="/root/syz-executor" sig=0 arch=40000003 syscall=183 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 859.418625][ T30] audit: type=1326 audit(1764710263.952:3065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15837 comm="syz.4.2774" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 859.484840][ T30] audit: type=1326 audit(1764710263.952:3066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15837 comm="syz.4.2774" exe="/root/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 859.628452][ T5927] usb 4-1: USB disconnect, device number 104 [ 859.655969][ T30] audit: type=1326 audit(1764710263.952:3067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15837 comm="syz.4.2774" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 859.688087][ T30] audit: type=1326 audit(1764710263.952:3068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15837 comm="syz.4.2774" exe="/root/syz-executor" sig=0 arch=40000003 syscall=369 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 860.331701][T15881] tipc: Enabled bearer , priority 0 [ 860.363989][T15881] syzkaller0: entered promiscuous mode [ 860.369554][T15881] syzkaller0: entered allmulticast mode [ 860.392056][T15879] tipc: Resetting bearer [ 860.412149][T15879] tipc: Disabling bearer [ 860.506467][T15889] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2788'. [ 860.666978][ T7134] usb 5-1: USB disconnect, device number 103 [ 860.924645][T15904] netlink: 'syz.5.2791': attribute type 1 has an invalid length. [ 861.141421][ T5927] usb 6-1: new high-speed USB device number 82 using dummy_hcd [ 861.980715][ T5926] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 862.031758][T15924] netlink: 'syz.0.2796': attribute type 10 has an invalid length. [ 862.056576][T15924] .`: (slave netdevsim0): Releasing backup interface [ 862.077888][T15924] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 862.093273][T15924] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 862.093433][T15925] netlink: 'syz.0.2796': attribute type 10 has an invalid length. [ 862.105324][T15924] team0: Port device netdevsim0 added [ 862.140582][ T5926] usb 4-1: Using ep0 maxpacket: 16 [ 862.146148][T15925] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 862.179656][ T5926] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 862.191245][T15925] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 862.212897][ T5926] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 862.287332][ T5926] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 862.328519][ T5926] usb 4-1: config 0 descriptor?? [ 862.370886][T15925] team0: Port device netdevsim0 removed [ 862.400939][T15925] .`: (slave netdevsim0): Enslaving as an active interface with an up link [ 862.504538][T15929] tipc: Enabled bearer , priority 0 [ 862.513185][T15929] syzkaller0: entered promiscuous mode [ 862.518796][T15929] syzkaller0: entered allmulticast mode [ 862.579743][T15928] tipc: Resetting bearer [ 862.590571][ T5918] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 862.768158][ T5918] usb 5-1: Using ep0 maxpacket: 8 [ 862.912644][ T5918] usb 5-1: no configurations [ 862.917665][ T5918] usb 5-1: can't read configurations, error -22 [ 862.951396][T15928] tipc: Disabling bearer [ 862.962287][T15917] tipc: Enabling of bearer rejected, already enabled [ 863.003806][ T5926] mcp2221 0003:04D8:00DD.0029: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 863.060709][ T5918] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 863.200830][T11596] usb 4-1: USB disconnect, device number 105 [ 863.220478][ T5918] usb 5-1: Using ep0 maxpacket: 8 [ 863.244065][ T5918] usb 5-1: no configurations [ 863.250154][ T5918] usb 5-1: can't read configurations, error -22 [ 863.276729][ T5918] usb usb5-port1: attempt power cycle [ 863.546662][T15940] tipc: Enabled bearer , priority 0 [ 863.554722][T15940] syzkaller0: entered promiscuous mode [ 863.560354][T15940] syzkaller0: entered allmulticast mode [ 863.593812][T15940] tipc: Resetting bearer [ 863.620807][ T5918] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 863.661150][ T5918] usb 5-1: Using ep0 maxpacket: 8 [ 863.667114][ T5918] usb 5-1: no configurations [ 863.671944][ T5918] usb 5-1: can't read configurations, error -22 [ 863.820580][ T5918] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 863.852763][ T5918] usb 5-1: Using ep0 maxpacket: 8 [ 863.861727][ T5918] usb 5-1: no configurations [ 863.866403][ T5918] usb 5-1: can't read configurations, error -22 [ 863.892864][ T5918] usb usb5-port1: unable to enumerate USB device [ 864.011379][T15950] syzkaller0: entered promiscuous mode [ 864.017160][T15950] syzkaller0: entered allmulticast mode [ 864.051926][T15950] tipc: Enabled bearer , priority 0 [ 864.063513][T15949] tipc: Resetting bearer [ 864.117914][T15949] tipc: Disabling bearer [ 864.334519][T15953] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 864.523416][T15937] tipc: Resetting bearer [ 864.567961][T15937] tipc: Disabling bearer [ 865.751009][ T5918] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 865.921506][ T5918] usb 5-1: Using ep0 maxpacket: 32 [ 865.937548][ T5918] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 865.959123][ T5918] usb 5-1: config 0 has no interface number 0 [ 865.982611][ T5918] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 866.017429][ T5918] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 866.055200][ T5918] usb 5-1: Product: syz [ 866.061105][ T5927] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 866.074601][ T5918] usb 5-1: Manufacturer: syz [ 866.091231][ T5918] usb 5-1: SerialNumber: syz [ 866.135738][ T5918] usb 5-1: config 0 descriptor?? [ 866.151899][ T5918] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 866.244161][ T5927] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 866.274032][ T5927] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 866.302503][ T5927] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 866.325137][ T5927] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 866.341035][ T5927] usb 4-1: SerialNumber: syz [ 866.365959][ T5918] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 866.406583][ T5918] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 866.602630][T15973] delete_channel: no stack [ 866.662577][ T5927] usb 4-1: 0:2 : does not exist [ 866.693188][ T5927] usb 4-1: USB disconnect, device number 106 [ 866.795840][ T5986] udevd[5986]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 866.801841][T15984] netlink: 'syz.0.2817': attribute type 12 has an invalid length. [ 866.802936][T15984] netlink: 'syz.0.2817': attribute type 2 has an invalid length. [ 867.235244][T15998] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2819'. [ 867.264972][T15998] lo: entered promiscuous mode [ 867.308598][ C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 867.316994][ T5918] usb 5-1: USB disconnect, device number 108 [ 867.342024][ T5918] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 867.373073][T15998] tunl0: entered promiscuous mode [ 867.389033][T15998] gre0: entered promiscuous mode [ 867.512693][ T5918] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 867.529959][T15998] gretap0: entered promiscuous mode [ 867.591647][T15998] erspan0: entered promiscuous mode [ 867.615919][T15998] ip_vti0: entered promiscuous mode [ 867.633270][T15998] ip6_vti0: entered promiscuous mode [ 867.648887][T15998] sit0: entered promiscuous mode [ 867.670349][T15998] ip6tnl0: entered promiscuous mode [ 867.686148][T15998] ip6gre0: entered promiscuous mode [ 867.708142][T15998] ip6gretap0: entered promiscuous mode [ 867.723616][T15998] bridge0: port 2(bridge_slave_1) entered disabled state [ 867.731114][T15998] bridge0: port 1(bridge_slave_0) entered disabled state [ 867.744562][T15998] bridge0: entered promiscuous mode [ 867.753922][ T5918] quatech2 5-1:0.51: device disconnected [ 867.867192][T15998] dummy0: entered promiscuous mode [ 868.156101][T15998] nlmon0: entered promiscuous mode [ 868.388551][T16011] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2821'. [ 868.761081][T15998] caif0: entered promiscuous mode [ 868.769973][T15998] batadv0: entered promiscuous mode [ 869.125118][T15998] vxcan0: entered promiscuous mode [ 869.163075][T15998] vxcan1: entered promiscuous mode [ 869.172575][T15998] wg0: entered promiscuous mode [ 869.182037][T15998] wg1: entered promiscuous mode [ 869.190034][T15998] wg2: entered promiscuous mode [ 869.197858][T15998] veth0_to_bridge: entered promiscuous mode [ 869.209928][T15998] veth1_to_bridge: entered promiscuous mode [ 869.228538][T15998] veth0_to_bond: entered promiscuous mode [ 869.242713][T15998] veth1_to_bond: entered promiscuous mode [ 869.260311][T15998] veth0_to_team: entered promiscuous mode [ 869.330917][T15998] team_slave_0: entered promiscuous mode [ 869.337870][T15998] veth1_to_team: entered promiscuous mode [ 869.382768][T15998] team_slave_1: entered promiscuous mode [ 869.397251][T15998] veth0_to_batadv: entered promiscuous mode [ 869.460920][T15998] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 869.491482][T15998] batadv_slave_0: entered promiscuous mode [ 869.505514][T15998] veth1_to_batadv: entered promiscuous mode [ 869.519895][T15998] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 869.532949][T15998] batadv_slave_1: entered promiscuous mode [ 869.549992][T15998] veth0_to_hsr: entered promiscuous mode [ 869.568676][T15998] veth1_to_hsr: entered promiscuous mode [ 869.664319][T15998] hsr0: entered promiscuous mode [ 869.673154][T15998] veth1_virt_wifi: entered promiscuous mode [ 869.685751][T15998] veth0_virt_wifi: entered promiscuous mode [ 869.695233][T15998] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 869.718979][T15998] vlan0: entered promiscuous mode [ 869.726658][T15998] vlan1: entered promiscuous mode [ 869.773815][T15998] macvlan0: entered promiscuous mode [ 869.799370][T15998] macvlan1: entered promiscuous mode [ 869.853518][T15998] ipvlan0: entered promiscuous mode [ 869.870934][T15998] ipvlan1: entered promiscuous mode [ 869.912205][T15998] macvtap0: entered promiscuous mode [ 870.105614][T15998] macsec0: entered promiscuous mode [ 870.114918][T15998] geneve0: entered promiscuous mode [ 870.126295][T15998] geneve1: entered promiscuous mode [ 870.135250][T15998] netdevsim netdevsim5 : entered promiscuous mode [ 870.144029][T15998] netdevsim netdevsim5 netdevsim1: entered promiscuous mode [ 870.155226][T15998] netdevsim netdevsim5 netdevsim2: entered promiscuous mode [ 870.166656][T15998] netdevsim netdevsim5 netdevsim3: entered promiscuous mode [ 870.176843][T15998] mac80211_hwsim hwsim13 wlan0: entered promiscuous mode [ 870.185070][T15998] syztnl0: entered promiscuous mode [ 870.191522][T15998] vxlan0: entered promiscuous mode [ 870.196980][T15998] erspan1: entered promiscuous mode [ 870.203154][T15998] bond1: entered promiscuous mode [ 870.208851][T15998] ip6gretap1: entered promiscuous mode [ 870.215980][T15998] bond2: entered promiscuous mode [ 870.232874][T16014] bond3: option mode: unable to set because the bond device has slaves [ 870.287217][T16015] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 870.306459][ T292] netdevsim netdevsim5 : unset [1, 0] type 2 family 0 port 6081 - 0 [ 870.314867][ T292] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 870.347301][ T292] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 870.378722][ T292] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 870.467748][T16017] tipc: Enabled bearer , priority 0 [ 870.487935][T16017] syzkaller0: entered promiscuous mode [ 870.494133][T16017] syzkaller0: entered allmulticast mode [ 870.509273][T16017] tipc: Resetting bearer [ 870.527686][T16016] tipc: Resetting bearer [ 870.656098][T16016] tipc: Disabling bearer [ 870.889996][T16033] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2829'. [ 870.947500][T16033] netlink: 'syz.4.2829': attribute type 13 has an invalid length. [ 870.978854][T16033] netlink: 'syz.4.2829': attribute type 17 has an invalid length. [ 871.010367][T16033] tunl0: left promiscuous mode [ 871.028359][T16033] gre0: left promiscuous mode [ 871.067212][T16033] gretap0: left promiscuous mode [ 871.072569][T11596] usb 6-1: new high-speed USB device number 83 using dummy_hcd [ 871.117730][T16033] erspan0: left promiscuous mode [ 871.135063][T16033] ip_vti0: left promiscuous mode [ 871.149755][T16033] ip6_vti0: left promiscuous mode [ 871.173573][T16033] sit0: left promiscuous mode [ 871.205168][T16033] ip6tnl0: left promiscuous mode [ 871.221740][T16033] ip6gre0: left promiscuous mode [ 871.243450][T11596] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 871.261116][T16033] syz_tun: left promiscuous mode [ 871.266265][T11596] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 871.294313][T16033] bridge0: left promiscuous mode [ 871.311823][T16033] bond0: left promiscuous mode [ 871.319353][T16033] 8021q: adding VLAN 0 to HW filter on device bond0 [ 871.350642][T16033] nlmon0: left promiscuous mode [ 871.365594][T16033] caif0: left promiscuous mode [ 871.377269][T16033] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 871.402819][T11596] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 871.422053][T11596] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 871.723837][T11596] usb 6-1: config 0 descriptor?? [ 871.793903][T16044] gretap0: entered promiscuous mode [ 871.810335][T16044] vlan0: entered promiscuous mode [ 872.097004][T11596] usbhid 6-1:0.0: can't add hid device: -71 [ 872.110920][T11596] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 872.154841][T11596] usb 6-1: USB disconnect, device number 83 [ 872.216889][T16050] netlink: 'syz.3.2835': attribute type 12 has an invalid length. [ 872.238104][T16050] netlink: 'syz.3.2835': attribute type 2 has an invalid length. [ 872.406916][T16063] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2838'. [ 872.673862][T16074] FAULT_INJECTION: forcing a failure. [ 872.673862][T16074] name failslab, interval 1, probability 0, space 0, times 0 [ 872.686817][T16074] CPU: 1 UID: 0 PID: 16074 Comm: syz.2.2842 Not tainted syzkaller #0 PREEMPT(full) [ 872.686838][T16074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 872.686848][T16074] Call Trace: [ 872.686855][T16074] [ 872.686861][T16074] dump_stack_lvl+0x189/0x250 [ 872.686883][T16074] ? __pfx____ratelimit+0x10/0x10 [ 872.686906][T16074] ? __pfx_dump_stack_lvl+0x10/0x10 [ 872.686923][T16074] ? __pfx__printk+0x10/0x10 [ 872.686948][T16074] ? __pfx___might_resched+0x10/0x10 [ 872.686962][T16074] ? fs_reclaim_acquire+0x7d/0x100 [ 872.686989][T16074] should_fail_ex+0x414/0x560 [ 872.687024][T16074] should_failslab+0xa8/0x100 [ 872.687051][T16074] __kvmalloc_node_noprof+0x158/0x900 [ 872.687074][T16074] ? alloc_netdev_mqs+0x8a6/0x11b0 [ 872.687110][T16074] alloc_netdev_mqs+0x8a6/0x11b0 [ 872.687133][T16074] ppp_ioctl+0x634/0x19a0 [ 872.687150][T16074] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 872.687168][T16074] ? __pfx_ppp_ioctl+0x10/0x10 [ 872.687184][T16074] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 872.687212][T16074] ppp_compat_ioctl+0x166/0x490 [ 872.687233][T16074] ? __pfx_ppp_compat_ioctl+0x10/0x10 [ 872.687250][T16074] ? __fget_files+0x2a/0x420 [ 872.687278][T16074] ? __fget_files+0x3a0/0x420 [ 872.687295][T16074] ? __fget_files+0x2a/0x420 [ 872.687315][T16074] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 872.687337][T16074] __ia32_compat_sys_ioctl+0x543/0x840 [ 872.687363][T16074] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 872.687387][T16074] ? __fget_files+0x3a0/0x420 [ 872.687409][T16074] ? fput+0xa0/0xd0 [ 872.687428][T16074] ? ksys_write+0x22a/0x250 [ 872.687450][T16074] ? exc_page_fault+0x82/0x100 [ 872.687475][T16074] ? __pfx_ksys_write+0x10/0x10 [ 872.687499][T16074] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 872.687517][T16074] ? lockdep_hardirqs_on+0x98/0x140 [ 872.687543][T16074] __do_fast_syscall_32+0xb6/0x300 [ 872.687559][T16074] ? lockdep_hardirqs_on+0x98/0x140 [ 872.687586][T16074] do_fast_syscall_32+0x34/0x80 [ 872.687602][T16074] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 872.687621][T16074] RIP: 0023:0xf7f61539 [ 872.687635][T16074] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 872.687650][T16074] RSP: 002b:00000000f545655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 872.687667][T16074] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000c004743e [ 872.687678][T16074] RDX: 0000000080000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 872.687688][T16074] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 872.687698][T16074] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 872.687707][T16074] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 872.687730][T16074] [ 872.963966][ C1] vkms_vblank_simulate: vblank timer overrun [ 873.557453][T16094] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2849'. [ 874.141429][T16111] netlink: 'syz.4.2854': attribute type 12 has an invalid length. [ 874.172319][T16111] netlink: 'syz.4.2854': attribute type 2 has an invalid length. [ 874.243577][T16119] netlink: 76 bytes leftover after parsing attributes in process `syz.5.2858'. [ 874.255783][T16119] netlink: 'syz.5.2858': attribute type 13 has an invalid length. [ 874.302380][T16119] netlink: 'syz.5.2858': attribute type 17 has an invalid length. [ 874.403671][T16119] tunl0: left promiscuous mode [ 874.413880][T16119] gre0: left promiscuous mode [ 874.425312][T16119] gretap0: left promiscuous mode [ 874.536129][T16119] erspan0: left promiscuous mode [ 874.588587][T16119] ip_vti0: left promiscuous mode [ 874.623030][T16119] ip6_vti0: left promiscuous mode [ 874.654409][T16119] sit0: left promiscuous mode [ 874.705917][T16119] ip6tnl0: left promiscuous mode [ 874.790541][ T5918] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 875.023550][ T5918] usb 3-1: Using ep0 maxpacket: 16 [ 875.142685][ T5918] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 875.153399][T16119] ip6gre0: left promiscuous mode [ 875.165642][T16119] ip6gretap0: left promiscuous mode [ 875.185859][T16119] bridge0: left promiscuous mode [ 875.191418][ T5918] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 875.195869][T16119] 8021q: adding VLAN 0 to HW filter on device bond0 [ 875.209736][T16119] dummy0: left promiscuous mode [ 875.222193][ T5918] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 875.226925][T16119] nlmon0: left promiscuous mode [ 875.250514][ T5918] usb 3-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 875.273397][T16119] caif0: left promiscuous mode [ 875.278477][T16119] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 875.280049][ T5918] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 875.366214][ T5918] usb 3-1: config 0 descriptor?? [ 875.382334][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 875.389047][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 875.890607][ T5918] hid_parser_main: 17 callbacks suppressed [ 875.890634][ T5918] hid-multitouch 0003:0457:07DA.002A: unknown main item tag 0x0 [ 875.921978][ T5918] hid-multitouch 0003:0457:07DA.002A: unknown main item tag 0x0 [ 875.944569][ T5918] hid-multitouch 0003:0457:07DA.002A: unknown main item tag 0x0 [ 875.971157][ T5918] hid-multitouch 0003:0457:07DA.002A: unknown main item tag 0x0 [ 875.990894][ T5918] hid-multitouch 0003:0457:07DA.002A: unknown main item tag 0x0 [ 876.009972][ T5918] hid-multitouch 0003:0457:07DA.002A: unknown main item tag 0x0 [ 876.032566][ T5918] hid-multitouch 0003:0457:07DA.002A: unknown main item tag 0x0 [ 876.052939][ T5918] hid-multitouch 0003:0457:07DA.002A: unknown main item tag 0x0 [ 876.074412][ T5918] hid-multitouch 0003:0457:07DA.002A: unknown main item tag 0x0 [ 876.098159][ T5918] hid-multitouch 0003:0457:07DA.002A: unknown main item tag 0x0 [ 876.137483][ T5918] hid-multitouch 0003:0457:07DA.002A: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.2-1/input0 [ 876.209589][T16131] fuse: Unknown parameter 'flR0x000000000000000e' [ 876.605976][T16137] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2862'. [ 876.662746][ T5918] usb 3-1: USB disconnect, device number 12 [ 876.870851][T16139] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2864'. [ 877.250294][T16151] netlink: 'syz.3.2867': attribute type 10 has an invalid length. [ 877.630601][ T5926] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 877.810008][ T5926] usb 4-1: New USB device found, idVendor=041e, idProduct=4011, bcdDevice=af.98 [ 877.854415][ T5926] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 877.896730][ T5926] usb 4-1: config 0 descriptor?? [ 877.919976][ T5926] pwc: Creative Labs Webcam Pro Ex detected. [ 878.143906][ T30] audit: type=1326 audit(1764710282.682:3069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16163 comm="syz.2.2873" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f61539 code=0x0 [ 879.078977][ T5154] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 879.090238][ T5154] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 879.177228][ T5154] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 879.186775][ T5154] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 879.194901][ T5154] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 879.267707][ T52] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 879.288143][ T52] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 879.297293][ T52] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 879.322274][ T52] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 879.358080][ T52] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 879.544332][T16178] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2876'. [ 880.367629][T16192] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2879'. [ 880.431601][T16196] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2881'. [ 880.460275][T16196] netlink: 'syz.0.2881': attribute type 13 has an invalid length. [ 880.466420][T16179] chnl_net:caif_netlink_parms(): no params data found [ 880.469209][T16196] netlink: 'syz.0.2881': attribute type 17 has an invalid length. [ 880.546456][T16196] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 880.681903][T16199] tipc: Enabled bearer , priority 0 [ 880.705588][T16202] syzkaller0: entered promiscuous mode [ 880.723559][T16202] syzkaller0: entered allmulticast mode [ 880.808660][T16199] tipc: Resetting bearer [ 880.824370][T16198] tipc: Resetting bearer [ 880.852427][T16198] tipc: Disabling bearer [ 880.867058][T16179] bridge0: port 1(bridge_slave_0) entered blocking state [ 880.875270][T16179] bridge0: port 1(bridge_slave_0) entered disabled state [ 880.889087][T16179] bridge_slave_0: entered allmulticast mode [ 880.898431][T16179] bridge_slave_0: entered promiscuous mode [ 880.910730][T16179] bridge0: port 2(bridge_slave_1) entered blocking state [ 880.918250][T16179] bridge0: port 2(bridge_slave_1) entered disabled state [ 880.928584][T16179] bridge_slave_1: entered allmulticast mode [ 880.938034][T16179] bridge_slave_1: entered promiscuous mode [ 881.065253][T16179] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 881.092781][T16179] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 881.164457][ T5926] pwc: Failed to set LED on/off time (-71) [ 881.188674][ T5926] pwc: send_video_command error -71 [ 881.208629][ T5926] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 881.217687][ T5926] Philips webcam 4-1:0.0: probe with driver Philips webcam failed with error -71 [ 881.235448][ T5926] usb 4-1: USB disconnect, device number 107 [ 881.390741][T16207] gretap0: entered promiscuous mode [ 881.396375][T16207] vlan0: entered promiscuous mode [ 881.440792][ T5918] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 881.454678][ T5154] Bluetooth: hci5: command tx timeout [ 881.479419][T16210] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 881.517315][T16179] team0: Port device team_slave_0 added [ 881.568590][T16179] team0: Port device team_slave_1 added [ 881.612774][ T5918] usb 3-1: not running at top speed; connect to a high speed hub [ 881.626750][ T5918] usb 3-1: config 1 interface 0 altsetting 7 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 881.666494][ T5918] usb 3-1: config 1 interface 0 has no altsetting 0 [ 881.675738][T16179] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 881.691406][ T5918] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.40 [ 881.700501][T16179] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 881.702331][ T5918] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 881.745080][T16213] IPv6: NLM_F_CREATE should be specified when creating new route [ 881.765377][ T5918] usb 3-1: Product: Э [ 881.769607][ T5918] usb 3-1: Manufacturer: ឃ馾엕￑⿬푎퐟嶡᧬嵜챻↍蘬箭ᴲ䣇ೈ䢷䶱噉ᚈ犧䯱팸䫿䥹껖柃햆ퟺ麮贎耫烲횯긞阘ﳼ쨏㰬뒗憤㑥㣮彿눊⛭紥ᬬ間ᬁ铤꜓鯤뛮ͼ蔡‍棠纽雩䉬맙㏵舾△靖䚉蟃쵕⣽昱 [ 881.796147][ C0] vkms_vblank_simulate: vblank timer overrun [ 881.818852][T16179] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 881.821795][ T5918] usb 3-1: SerialNumber: syz [ 881.844386][T16205] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 881.872863][T16179] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 881.879913][T16179] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 881.942182][T16179] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 882.107821][T16179] hsr_slave_0: entered promiscuous mode [ 882.125602][T16179] hsr_slave_1: entered promiscuous mode [ 882.142348][T16179] debugfs: 'hsr0' already exists in 'hsr' [ 882.152176][T16179] Cannot create hsr debugfs directory [ 882.333551][ T5918] usbhid 3-1:1.0: can't add hid device: -71 [ 882.346373][ T5918] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 882.394994][ T5918] usb 3-1: USB disconnect, device number 13 [ 882.692632][T16222] netlink: 144 bytes leftover after parsing attributes in process `syz.5.2890'. [ 882.717666][T16222] netlink: 144 bytes leftover after parsing attributes in process `syz.5.2890'. [ 883.466583][T16233] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2894'. [ 883.533751][ T5154] Bluetooth: hci5: command tx timeout [ 883.548111][ T30] audit: type=1326 audit(1764710288.132:3070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16237 comm="syz.0.2897" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 883.628970][ T30] audit: type=1326 audit(1764710288.162:3071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16237 comm="syz.0.2897" exe="/root/syz-executor" sig=0 arch=40000003 syscall=245 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 883.709990][ T30] audit: type=1326 audit(1764710288.162:3072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16237 comm="syz.0.2897" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 883.732330][T16179] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 883.747490][T16179] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 883.800547][ T5989] usb 6-1: new high-speed USB device number 84 using dummy_hcd [ 883.823268][T16179] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 883.843545][ T30] audit: type=1326 audit(1764710288.162:3073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16237 comm="syz.0.2897" exe="/root/syz-executor" sig=0 arch=40000003 syscall=247 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 883.913152][ T30] audit: type=1326 audit(1764710288.162:3074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16237 comm="syz.0.2897" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 883.967971][T16179] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 883.978214][ T30] audit: type=1326 audit(1764710288.162:3075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16237 comm="syz.0.2897" exe="/root/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 884.000340][ C0] vkms_vblank_simulate: vblank timer overrun [ 884.031581][ T5989] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 884.048044][ T5989] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 884.076950][ T30] audit: type=1326 audit(1764710288.162:3076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16237 comm="syz.0.2897" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 884.078628][ T5989] usb 6-1: New USB device found, idVendor=046d, idProduct=c532, bcdDevice= 0.00 [ 884.099383][ C0] vkms_vblank_simulate: vblank timer overrun [ 884.141331][ T5989] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 884.170996][T16248] netlink: 'syz.0.2898': attribute type 12 has an invalid length. [ 884.179999][T16248] netlink: 'syz.0.2898': attribute type 2 has an invalid length. [ 884.217980][ T5989] usb 6-1: config 0 descriptor?? [ 884.313656][T16179] 8021q: adding VLAN 0 to HW filter on device bond0 [ 884.411090][T16179] 8021q: adding VLAN 0 to HW filter on device team0 [ 884.474451][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 884.481730][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 884.515817][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 884.523123][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 884.664451][ T5989] hid (null): usage index exceeded [ 884.744087][ T5989] logitech-djreceiver 0003:046D:C532.002B: ignoring exceeding usage max [ 884.791333][ T5989] logitech-djreceiver 0003:046D:C532.002B: ignoring exceeding usage max [ 884.802727][T16179] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 884.811778][ T5989] logitech-djreceiver 0003:046D:C532.002B: usage index exceeded [ 884.886975][ T5989] logitech-djreceiver 0003:046D:C532.002B: item 0 1 2 2 parsing failed [ 884.902237][ T5989] logitech-djreceiver 0003:046D:C532.002B: logi_dj_probe: parse failed [ 884.912673][ T5989] logitech-djreceiver 0003:046D:C532.002B: probe with driver logitech-djreceiver failed with error -22 [ 885.050858][T16179] veth0_vlan: entered promiscuous mode [ 885.075553][T16179] veth1_vlan: entered promiscuous mode [ 885.160067][T16179] veth0_macvtap: entered promiscuous mode [ 885.184460][T16179] veth1_macvtap: entered promiscuous mode [ 885.239482][T16179] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 885.281346][T16179] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 885.457179][ T1096] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 885.467683][ T1096] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 885.478726][ T1096] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 885.549536][ T1096] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 885.615363][ T5154] Bluetooth: hci5: command tx timeout [ 885.675353][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 885.706468][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 885.826210][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 885.835561][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 885.930875][ T10] usb 6-1: USB disconnect, device number 84 [ 886.096882][T16268] syzkaller0: entered promiscuous mode [ 886.102706][T16268] syzkaller0: entered allmulticast mode [ 886.128815][T16268] tipc: Started in network mode [ 886.136513][T16268] tipc: Node identity 827e35a7dc51, cluster identity 4711 [ 886.144938][T16268] tipc: Enabled bearer , priority 0 [ 886.172080][T16267] tipc: Resetting bearer [ 886.215544][T16267] tipc: Disabling bearer [ 886.270814][ T5926] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 886.422255][ T5926] usb 3-1: config 0 has an invalid interface number: 64 but max is 0 [ 886.430658][ T5926] usb 3-1: config 0 has no interface number 0 [ 886.439229][ T5926] usb 3-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 886.452293][ T5926] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 886.461234][ T5926] usb 3-1: Product: syz [ 886.465524][ T5926] usb 3-1: Manufacturer: syz [ 886.470347][ T5926] usb 3-1: SerialNumber: syz [ 886.477575][ T5926] usb 3-1: config 0 descriptor?? [ 886.577346][T16271] FAULT_INJECTION: forcing a failure. [ 886.577346][T16271] name failslab, interval 1, probability 0, space 0, times 0 [ 886.590270][T16271] CPU: 1 UID: 0 PID: 16271 Comm: syz.5.2905 Not tainted syzkaller #0 PREEMPT(full) [ 886.590292][T16271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 886.590303][T16271] Call Trace: [ 886.590309][T16271] [ 886.590316][T16271] dump_stack_lvl+0x189/0x250 [ 886.590337][T16271] ? __pfx____ratelimit+0x10/0x10 [ 886.590361][T16271] ? __pfx_dump_stack_lvl+0x10/0x10 [ 886.590387][T16271] ? __pfx__printk+0x10/0x10 [ 886.590431][T16271] should_fail_ex+0x414/0x560 [ 886.590464][T16271] should_failslab+0xa8/0x100 [ 886.590488][T16271] kmem_cache_alloc_noprof+0x74/0x6e0 [ 886.590520][T16271] ? skb_clone+0x212/0x3a0 [ 886.590549][T16271] skb_clone+0x212/0x3a0 [ 886.590568][T16271] ? pfkey_broadcast_one+0x7d/0x360 [ 886.590599][T16271] pfkey_broadcast_one+0x9b/0x360 [ 886.590625][T16271] ? pfkey_broadcast+0x39c/0x3e0 [ 886.590654][T16271] pfkey_broadcast+0x3a9/0x3e0 [ 886.590681][T16271] ? pfkey_broadcast+0x48/0x3e0 [ 886.590710][T16271] pfkey_spdflush+0xca/0x290 [ 886.590743][T16271] ? __pfx_pfkey_spdflush+0x10/0x10 [ 886.590788][T16271] pfkey_sendmsg+0xbfe/0x1090 [ 886.590833][T16271] ? __lock_acquire+0x6b6/0x2cf0 [ 886.590874][T16271] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 886.590926][T16271] ? __asan_memset+0x22/0x50 [ 886.590957][T16271] ? __import_iovec+0x5d4/0x7f0 [ 886.590978][T16271] ? aa_sock_msg_perm+0xf1/0x1b0 [ 886.591008][T16271] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 886.591031][T16271] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 886.591061][T16271] __sock_sendmsg+0x21c/0x270 [ 886.591091][T16271] ____sys_sendmsg+0x505/0x820 [ 886.591129][T16271] ? __pfx_____sys_sendmsg+0x10/0x10 [ 886.591168][T16271] ? kstrtouint+0x6e/0xe0 [ 886.591205][T16271] ___sys_sendmsg+0x21f/0x2a0 [ 886.591242][T16271] ? __pfx____sys_sendmsg+0x10/0x10 [ 886.591283][T16271] ? rcu_read_lock_any_held+0xb3/0x120 [ 886.591337][T16271] ? __fget_files+0x2a/0x420 [ 886.591361][T16271] ? __fget_files+0x3a0/0x420 [ 886.591397][T16271] __sys_sendmsg+0x164/0x220 [ 886.591432][T16271] ? __pfx___sys_sendmsg+0x10/0x10 [ 886.591473][T16271] ? __pfx_ksys_write+0x10/0x10 [ 886.591502][T16271] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 886.591522][T16271] ? lockdep_hardirqs_on+0x98/0x140 [ 886.591552][T16271] __do_fast_syscall_32+0xb6/0x300 [ 886.591577][T16271] do_fast_syscall_32+0x34/0x80 [ 886.591595][T16271] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 886.591617][T16271] RIP: 0023:0xf7f22539 [ 886.591634][T16271] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 886.591650][T16271] RSP: 002b:00000000f541655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 886.591668][T16271] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000080000180 [ 886.591681][T16271] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 886.591692][T16271] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 886.591703][T16271] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 886.591732][T16271] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 886.591758][T16271] [ 886.631142][T16272] fuse: Unknown parameter 'group_i00000000000000000000' [ 886.953459][ T5926] uvcvideo 3-1:0.64: Found UVC 0.08 device syz (046d:0823) [ 886.967057][ T5926] uvcvideo 3-1:0.64: Entity type for entity Output 3 was not initialized! [ 886.984600][ T5926] uvcvideo 3-1:0.64: Failed to create links for entity 3 [ 886.995415][ T5926] uvcvideo 3-1:0.64: Failed to register entities (-22). [ 887.019747][ T5926] usb 3-1: USB disconnect, device number 14 [ 887.071939][T16276] netlink: 104 bytes leftover after parsing attributes in process `syz.5.2906'. [ 887.082736][T16276] netlink: 104 bytes leftover after parsing attributes in process `syz.5.2906'. [ 887.232887][T16283] snd_dummy snd_dummy.0: control 1:-1:-8:syz0:32 is already present [ 887.415625][T16284] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2908'. [ 887.677851][T16286] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2909'. [ 887.690517][ T5154] Bluetooth: hci5: command tx timeout [ 887.705391][T16286] netlink: 'syz.2.2909': attribute type 13 has an invalid length. [ 887.723508][T16286] netlink: 'syz.2.2909': attribute type 17 has an invalid length. [ 887.755048][T16286] 8021q: adding VLAN 0 to HW filter on device team0 [ 887.822207][T16286] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 888.439202][T16298] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2913'. [ 889.502899][T16317] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2919'. [ 889.535004][ T52] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 889.537662][T16318] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2919'. [ 889.573500][ T52] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 889.583516][ T52] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 889.592869][ T52] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 889.605058][ T52] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 889.647266][ T8896] bond0: (slave syz_tun): Releasing backup interface [ 889.723376][T16323] netlink: 'syz.0.2917': attribute type 12 has an invalid length. [ 889.740545][ T5918] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 889.827019][T16323] netlink: 'syz.0.2917': attribute type 2 has an invalid length. [ 889.844410][T16327] loop2: detected capacity change from 0 to 7 [ 889.873154][T16327] Dev loop2: unable to read RDB block 7 [ 889.877534][ T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 889.890815][ T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 889.892102][T16327] loop2: AHDI p1 p2 p3 [ 889.911689][ T5918] usb 5-1: device descriptor read/64, error -71 [ 889.938567][T16327] loop2: partition table partially beyond EOD, truncated [ 889.950062][T16327] loop2: p1 start 1601398130 is beyond EOD, truncated [ 889.959048][T16327] loop2: p2 start 1702059890 is beyond EOD, truncated [ 890.035814][ T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 890.047373][ T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 890.119805][ T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 890.132362][ T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 890.161397][ T5918] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 890.233569][ T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 890.246450][ T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 890.300558][ T5918] usb 5-1: device descriptor read/64, error -71 [ 890.421123][ T5918] usb usb5-port1: attempt power cycle [ 890.492314][T16324] chnl_net:caif_netlink_parms(): no params data found [ 890.803466][ T5918] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 890.843099][ T5918] usb 5-1: device descriptor read/8, error -71 [ 891.100910][ T5918] usb 5-1: new high-speed USB device number 112 using dummy_hcd [ 891.123187][ T5918] usb 5-1: device descriptor read/8, error -71 [ 891.194319][ T13] bond1 (unregistering): (slave bridge1): Removing an active aggregator [ 891.206126][ T13] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 891.215144][ T13] bridge1 (unregistering): left promiscuous mode [ 891.222896][ T13] bridge1 (unregistering): left allmulticast mode [ 891.230869][ T5918] usb usb5-port1: unable to enumerate USB device [ 891.451410][ T13] bond0 (unregistering): Released all slaves [ 891.578249][ T13] bond1 (unregistering): Released all slaves [ 891.593089][ T13] bond2 (unregistering): Released all slaves [ 891.693752][ T5154] Bluetooth: hci2: command tx timeout [ 891.730312][ T13] bond3 (unregistering): Released all slaves [ 891.849725][ T13] bond4 (unregistering): (slave veth3): Releasing active interface [ 891.857987][ T13] batadv1: entered promiscuous mode [ 891.866349][ T13] bond4 (unregistering): (slave batadv1): Releasing active interface [ 891.876756][ T13] bond4 (unregistering): Released all slaves [ 891.973171][T16339] syzkaller0: entered promiscuous mode [ 891.978722][T16339] syzkaller0: entered allmulticast mode [ 892.019345][T16342] tipc: Enabled bearer , priority 0 [ 892.110844][ T13] tipc: Disabling bearer [ 892.119982][ T13] tipc: Left network mode [ 892.214369][T16324] bridge0: port 1(bridge_slave_0) entered blocking state [ 892.222825][T16324] bridge0: port 1(bridge_slave_0) entered disabled state [ 892.232815][T16324] bridge_slave_0: entered allmulticast mode [ 892.240677][T16324] bridge_slave_0: entered promiscuous mode [ 892.256367][T16342] tipc: Resetting bearer [ 892.291712][T16342] tipc: Disabling bearer [ 892.302084][T16324] bridge0: port 2(bridge_slave_1) entered blocking state [ 892.313163][T16324] bridge0: port 2(bridge_slave_1) entered disabled state [ 892.321294][T16324] bridge_slave_1: entered allmulticast mode [ 892.330530][T16324] bridge_slave_1: entered promiscuous mode [ 892.366786][T16349] netlink: 'syz.5.2924': attribute type 5 has an invalid length. [ 892.583168][T16324] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 892.605120][T16355] FAULT_INJECTION: forcing a failure. [ 892.605120][T16355] name failslab, interval 1, probability 0, space 0, times 0 [ 892.634616][T16324] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 892.645082][T16355] CPU: 1 UID: 0 PID: 16355 Comm: syz.0.2926 Not tainted syzkaller #0 PREEMPT(full) [ 892.645112][T16355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 892.645126][T16355] Call Trace: [ 892.645136][T16355] [ 892.645145][T16355] dump_stack_lvl+0x189/0x250 [ 892.645175][T16355] ? __pfx____ratelimit+0x10/0x10 [ 892.645207][T16355] ? __pfx_dump_stack_lvl+0x10/0x10 [ 892.645230][T16355] ? __pfx__printk+0x10/0x10 [ 892.645262][T16355] ? __pfx___might_resched+0x10/0x10 [ 892.645293][T16355] ? fs_reclaim_acquire+0x7d/0x100 [ 892.645320][T16355] should_fail_ex+0x414/0x560 [ 892.645353][T16355] should_failslab+0xa8/0x100 [ 892.645378][T16355] __kmalloc_cache_noprof+0x6f/0x6e0 [ 892.645412][T16355] ? rtnl_newlink+0xfb/0x1c80 [ 892.645442][T16355] ? kasan_save_track+0x4f/0x80 [ 892.645478][T16355] rtnl_newlink+0xfb/0x1c80 [ 892.645506][T16355] ? netlink_deliver_tap+0x19c/0x1b0 [ 892.645536][T16355] ? netlink_unicast+0x7fa/0x9e0 [ 892.645563][T16355] ? netlink_sendmsg+0x805/0xb30 [ 892.645593][T16355] ? __sock_sendmsg+0x21c/0x270 [ 892.645615][T16355] ? ____sys_sendmsg+0x505/0x820 [ 892.645645][T16355] ? ___sys_sendmsg+0x21f/0x2a0 [ 892.645674][T16355] ? __sys_sendmsg+0x164/0x220 [ 892.645704][T16355] ? __do_fast_syscall_32+0xb6/0x300 [ 892.645725][T16355] ? do_fast_syscall_32+0x34/0x80 [ 892.645745][T16355] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 892.645778][T16355] ? __pfx_rtnl_newlink+0x10/0x10 [ 892.645834][T16355] ? kasan_quarantine_put+0xdd/0x220 [ 892.645865][T16355] ? lockdep_hardirqs_on+0x98/0x140 [ 892.645901][T16355] ? nlmon_xmit+0xb0/0x100 [ 892.645920][T16355] ? kmem_cache_free+0x192/0x670 [ 892.645957][T16355] ? __local_bh_enable_ip+0x12d/0x1c0 [ 892.645987][T16355] ? lockdep_hardirqs_on+0x98/0x140 [ 892.646018][T16355] ? __local_bh_enable_ip+0x12d/0x1c0 [ 892.646050][T16355] ? __lock_acquire+0x6b6/0x2cf0 [ 892.646086][T16355] ? __dev_queue_xmit+0x259/0x3b10 [ 892.646108][T16355] ? __dev_queue_xmit+0x259/0x3b10 [ 892.646131][T16355] ? __dev_queue_xmit+0x1d47/0x3b10 [ 892.646150][T16355] ? kasan_save_track+0x3e/0x80 [ 892.646177][T16355] ? __kasan_slab_alloc+0x6c/0x80 [ 892.646195][T16355] ? kmem_cache_alloc_noprof+0x367/0x6e0 [ 892.646252][T16355] ? __pfx_rtnl_newlink+0x10/0x10 [ 892.646289][T16355] rtnetlink_rcv_msg+0x7cf/0xb70 [ 892.646323][T16355] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 892.646351][T16355] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 892.646379][T16355] ? ref_tracker_free+0x63a/0x7d0 [ 892.646408][T16355] ? __asan_memcpy+0x40/0x70 [ 892.646437][T16355] ? __pfx_ref_tracker_free+0x10/0x10 [ 892.646478][T16355] netlink_rcv_skb+0x208/0x470 [ 892.646511][T16355] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 892.646544][T16355] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 892.646587][T16355] ? netlink_deliver_tap+0x2e/0x1b0 [ 892.646627][T16355] netlink_unicast+0x82f/0x9e0 [ 892.646665][T16355] ? __pfx_netlink_unicast+0x10/0x10 [ 892.646697][T16355] ? netlink_sendmsg+0x642/0xb30 [ 892.646727][T16355] ? skb_put+0x11b/0x210 [ 892.646762][T16355] netlink_sendmsg+0x805/0xb30 [ 892.646804][T16355] ? __pfx_netlink_sendmsg+0x10/0x10 [ 892.646840][T16355] ? __import_iovec+0x5d4/0x7f0 [ 892.646859][T16355] ? aa_sock_msg_perm+0xf1/0x1b0 [ 892.646887][T16355] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 892.646909][T16355] ? __pfx_netlink_sendmsg+0x10/0x10 [ 892.646942][T16355] __sock_sendmsg+0x21c/0x270 [ 892.646971][T16355] ____sys_sendmsg+0x505/0x820 [ 892.647009][T16355] ? __pfx_____sys_sendmsg+0x10/0x10 [ 892.647045][T16355] ? kstrtouint+0x6e/0xe0 [ 892.647082][T16355] ___sys_sendmsg+0x21f/0x2a0 [ 892.647117][T16355] ? __pfx____sys_sendmsg+0x10/0x10 [ 892.647156][T16355] ? rcu_read_lock_any_held+0xb3/0x120 [ 892.647210][T16355] ? __fget_files+0x2a/0x420 [ 892.647234][T16355] ? __fget_files+0x3a0/0x420 [ 892.647271][T16355] __sys_sendmsg+0x164/0x220 [ 892.647314][T16355] ? __pfx___sys_sendmsg+0x10/0x10 [ 892.647355][T16355] ? __pfx_ksys_write+0x10/0x10 [ 892.647391][T16355] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 892.647416][T16355] ? lockdep_hardirqs_on+0x98/0x140 [ 892.647452][T16355] __do_fast_syscall_32+0xb6/0x300 [ 892.647475][T16355] ? lockdep_hardirqs_on+0x98/0x140 [ 892.647511][T16355] do_fast_syscall_32+0x34/0x80 [ 892.647533][T16355] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 892.647560][T16355] RIP: 0023:0xf702d539 [ 892.647580][T16355] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 892.647599][T16355] RSP: 002b:00000000f541d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 892.647622][T16355] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000280 [ 892.647637][T16355] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 892.647650][T16355] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 892.647663][T16355] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 892.647676][T16355] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 892.647707][T16355] [ 893.382111][T16324] team0: Port device team_slave_0 added [ 893.391982][T16324] team0: Port device team_slave_1 added [ 893.547027][T16375] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2931'. [ 893.558626][T16324] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 893.565704][T16324] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 893.591634][ C1] vkms_vblank_simulate: vblank timer overrun [ 893.601117][T16324] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 893.613577][T16324] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 893.621237][T16324] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 893.647549][T16324] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 893.771382][ T5154] Bluetooth: hci2: command tx timeout [ 893.943850][T16324] hsr_slave_0: entered promiscuous mode [ 893.958179][T16324] hsr_slave_1: entered promiscuous mode [ 893.965285][T16324] debugfs: 'hsr0' already exists in 'hsr' [ 893.971427][T16324] Cannot create hsr debugfs directory [ 894.403743][ T13] hsr_slave_0: left promiscuous mode [ 894.410197][ T13] hsr_slave_1: left promiscuous mode [ 894.419905][ T13] batman_adv: batadv0: Interface deactivated: macsec1 [ 894.427139][ T13] batman_adv: batadv0: Removing interface: macsec1 [ 894.441043][ T13] veth1_macvtap: left promiscuous mode [ 894.446918][ T13] veth0_macvtap: left promiscuous mode [ 894.454192][T16399] netlink: 'syz.4.2935': attribute type 2 has an invalid length. [ 894.977525][T16408] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2937'. [ 894.987111][T16408] unsupported nla_type 16384 [ 895.408180][T16397] netlink: 'syz.4.2935': attribute type 12 has an invalid length. [ 895.845578][ T5154] Bluetooth: hci2: command tx timeout [ 895.910602][ T5918] usb 5-1: new high-speed USB device number 113 using dummy_hcd [ 896.141400][ T5918] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 896.152173][ T5918] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 896.178420][ T5918] usb 5-1: config 0 descriptor?? [ 896.406627][T16324] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 896.433608][T16432] FAULT_INJECTION: forcing a failure. [ 896.433608][T16432] name failslab, interval 1, probability 0, space 0, times 0 [ 896.448745][T16324] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 896.461046][T16432] CPU: 1 UID: 0 PID: 16432 Comm: syz.0.2941 Not tainted syzkaller #0 PREEMPT(full) [ 896.461075][T16432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 896.461089][T16432] Call Trace: [ 896.461098][T16432] [ 896.461108][T16432] dump_stack_lvl+0x189/0x250 [ 896.461138][T16432] ? __pfx____ratelimit+0x10/0x10 [ 896.461171][T16432] ? __pfx_dump_stack_lvl+0x10/0x10 [ 896.461195][T16432] ? __pfx__printk+0x10/0x10 [ 896.461228][T16432] ? __pfx___might_resched+0x10/0x10 [ 896.461251][T16432] ? fs_reclaim_acquire+0x7d/0x100 [ 896.461278][T16432] should_fail_ex+0x414/0x560 [ 896.461311][T16432] should_failslab+0xa8/0x100 [ 896.461335][T16432] kmem_cache_alloc_noprof+0x74/0x6e0 [ 896.461368][T16432] ? skb_clone+0x212/0x3a0 [ 896.461395][T16432] skb_clone+0x212/0x3a0 [ 896.461415][T16432] ? nfnetlink_rcv+0x4ba/0x2590 [ 896.461447][T16432] nfnetlink_rcv+0x4ec/0x2590 [ 896.461478][T16432] ? __dev_queue_xmit+0x259/0x3b10 [ 896.461503][T16432] ? __dev_queue_xmit+0x1d47/0x3b10 [ 896.461524][T16432] ? kasan_save_track+0x3e/0x80 [ 896.461555][T16432] ? __kasan_slab_alloc+0x6c/0x80 [ 896.461585][T16432] ? __dev_queue_xmit+0x259/0x3b10 [ 896.461621][T16432] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 896.461668][T16432] ? ref_tracker_free+0x63a/0x7d0 [ 896.461698][T16432] ? __asan_memcpy+0x40/0x70 [ 896.461728][T16432] ? __pfx_ref_tracker_free+0x10/0x10 [ 896.461775][T16432] ? skb_clone+0x246/0x3a0 [ 896.461800][T16432] ? __netlink_deliver_tap+0x807/0x850 [ 896.461833][T16432] ? netlink_deliver_tap+0x2e/0x1b0 [ 896.461891][T16432] netlink_unicast+0x82f/0x9e0 [ 896.461928][T16432] ? __pfx_netlink_unicast+0x10/0x10 [ 896.461961][T16432] ? netlink_sendmsg+0x642/0xb30 [ 896.461990][T16432] ? skb_put+0x11b/0x210 [ 896.462020][T16432] netlink_sendmsg+0x805/0xb30 [ 896.462052][T16432] ? __pfx_netlink_sendmsg+0x10/0x10 [ 896.462088][T16432] ? __import_iovec+0x5d4/0x7f0 [ 896.462109][T16432] ? aa_sock_msg_perm+0xf1/0x1b0 [ 896.462138][T16432] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 896.462159][T16432] ? __pfx_netlink_sendmsg+0x10/0x10 [ 896.462184][T16432] __sock_sendmsg+0x21c/0x270 [ 896.462205][T16432] ____sys_sendmsg+0x505/0x820 [ 896.462243][T16432] ? __pfx_____sys_sendmsg+0x10/0x10 [ 896.462282][T16432] ? kstrtouint+0x6e/0xe0 [ 896.462316][T16432] ___sys_sendmsg+0x21f/0x2a0 [ 896.462342][T16432] ? __pfx____sys_sendmsg+0x10/0x10 [ 896.462374][T16432] ? rcu_read_lock_any_held+0xb3/0x120 [ 896.462428][T16432] ? __fget_files+0x2a/0x420 [ 896.462451][T16432] ? __fget_files+0x3a0/0x420 [ 896.462479][T16432] __sys_sendmsg+0x164/0x220 [ 896.462504][T16432] ? __pfx___sys_sendmsg+0x10/0x10 [ 896.462545][T16432] ? __pfx_ksys_write+0x10/0x10 [ 896.462580][T16432] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 896.462726][T16432] ? lockdep_hardirqs_on+0x98/0x140 [ 896.462769][T16432] __do_fast_syscall_32+0xb6/0x300 [ 896.462793][T16432] ? lockdep_hardirqs_on+0x98/0x140 [ 896.462826][T16432] do_fast_syscall_32+0x34/0x80 [ 896.462843][T16432] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 896.462863][T16432] RIP: 0023:0xf702d539 [ 896.462883][T16432] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 896.462903][T16432] RSP: 002b:00000000f541d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 896.462926][T16432] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000140 [ 896.462941][T16432] RDX: 0000000000008000 RSI: 0000000000000000 RDI: 0000000000000000 [ 896.462975][T16432] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 896.462984][T16432] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 896.462994][T16432] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 896.463016][T16432] [ 896.465026][T16324] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 896.883099][T16324] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 897.636396][T16324] 8021q: adding VLAN 0 to HW filter on device bond0 [ 897.738049][T16324] 8021q: adding VLAN 0 to HW filter on device team0 [ 897.782702][ T1167] bridge0: port 1(bridge_slave_0) entered blocking state [ 897.789935][ T1167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 897.862971][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 897.870208][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 897.922497][ T5154] Bluetooth: hci2: command tx timeout [ 897.942211][ T5926] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 898.101037][ T5926] usb 3-1: Using ep0 maxpacket: 16 [ 898.129275][ T5926] usb 3-1: config 0 has no interfaces? [ 898.148465][ T5926] usb 3-1: New USB device found, idVendor=19d2, idProduct=1134, bcdDevice=d3.63 [ 898.187936][ T5926] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 898.226174][ T5926] usb 3-1: Product: syz [ 898.250128][ T5926] usb 3-1: Manufacturer: syz [ 898.257325][T16324] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 898.277209][ T5926] usb 3-1: SerialNumber: syz [ 898.308594][ T5926] usb 3-1: config 0 descriptor?? [ 898.424542][T16453] tipc: Enabled bearer , priority 0 [ 898.474984][T16453] syzkaller0: entered promiscuous mode [ 898.494469][T16453] syzkaller0: entered allmulticast mode [ 898.547951][T16453] tipc: Resetting bearer [ 898.612446][T16449] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 898.776365][T16452] tipc: Resetting bearer [ 898.801052][ T5918] ath6kl: Failed to read usb control message: -110 [ 898.812535][ T5918] ath6kl: Unable to read the bmi data from the device: -110 [ 898.820157][ T5918] ath6kl: unable to read target info byte count: -110 [ 898.839382][ T7134] usb 3-1: USB disconnect, device number 15 [ 898.855648][ T5918] ath6kl: Failed to init ath6kl core: -110 [ 898.864457][T16452] tipc: Disabling bearer [ 898.876344][ T5918] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 899.025555][ T5918] usb 5-1: USB disconnect, device number 113 [ 899.030991][T16324] veth0_vlan: entered promiscuous mode [ 899.082329][T16324] veth1_vlan: entered promiscuous mode [ 899.189729][T16324] veth0_macvtap: entered promiscuous mode [ 899.197137][T16462] l2tp_ppp: sess 2/0: no socket in recv [ 899.233719][T16324] veth1_macvtap: entered promiscuous mode [ 899.305818][T16324] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 899.339044][T16324] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 899.407665][ T1167] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 899.451246][ T1167] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 899.484257][ T1167] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 899.531688][ T7134] usb 5-1: new high-speed USB device number 114 using dummy_hcd [ 899.531713][ T1167] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 899.632999][T16474] netlink: 'syz.5.2948': attribute type 2 has an invalid length. [ 899.651365][T16467] netlink: 'syz.5.2948': attribute type 12 has an invalid length. [ 899.710892][ T7134] usb 5-1: Using ep0 maxpacket: 8 [ 899.721888][ T7134] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 899.740566][ T7134] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 899.760978][ T7134] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 899.774249][ T7134] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 899.809386][ T7134] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 899.819829][ T7134] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 899.833173][ T7134] usb 5-1: Product: syz [ 899.839258][ T1167] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 899.858657][ T7134] usb 5-1: Manufacturer: syz [ 899.863659][ T1167] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 899.876033][ T7134] usb 5-1: SerialNumber: syz [ 899.932365][ T7134] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 899.969774][ T7134] usbtest 5-1:1.0: Linux user mode ISO test driver [ 899.988755][ T7134] usbtest 5-1:1.0: high-speed {control bulk-out iso-in} tests (+alt) [ 899.997376][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 900.015712][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 900.027218][T16485] fuse: Bad value for 'group_id' [ 900.049561][T16485] fuse: Bad value for 'group_id' [ 900.157005][ T5989] usb 5-1: USB disconnect, device number 114 [ 900.394732][T16490] FAULT_INJECTION: forcing a failure. [ 900.394732][T16490] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 900.471141][T16490] CPU: 0 UID: 0 PID: 16490 Comm: syz.2.2953 Not tainted syzkaller #0 PREEMPT(full) [ 900.471175][T16490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 900.471190][T16490] Call Trace: [ 900.471199][T16490] [ 900.471210][T16490] dump_stack_lvl+0x189/0x250 [ 900.471239][T16490] ? __pfx____ratelimit+0x10/0x10 [ 900.471274][T16490] ? __pfx_dump_stack_lvl+0x10/0x10 [ 900.471298][T16490] ? __pfx__printk+0x10/0x10 [ 900.471342][T16490] should_fail_ex+0x414/0x560 [ 900.471376][T16490] _copy_to_user+0x31/0xb0 [ 900.471402][T16490] simple_read_from_buffer+0xe1/0x170 [ 900.471433][T16490] proc_fail_nth_read+0x1b3/0x220 [ 900.471472][T16490] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 900.471510][T16490] ? rw_verify_area+0x2a6/0x4d0 [ 900.471542][T16490] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 900.471578][T16490] vfs_read+0x200/0xa30 [ 900.471616][T16490] ? fdget_pos+0x247/0x320 [ 900.471647][T16490] ? __pfx___mutex_lock+0x10/0x10 [ 900.471670][T16490] ? __pfx_vfs_read+0x10/0x10 [ 900.471703][T16490] ? __fget_files+0x2a/0x420 [ 900.471734][T16490] ? __fget_files+0x3a0/0x420 [ 900.471757][T16490] ? __fget_files+0x2a/0x420 [ 900.471792][T16490] ksys_read+0x145/0x250 [ 900.471828][T16490] ? __pfx_ksys_read+0x10/0x10 [ 900.471863][T16490] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 900.471889][T16490] ? lockdep_hardirqs_on+0x98/0x140 [ 900.471926][T16490] __do_fast_syscall_32+0xb6/0x300 [ 900.471950][T16490] ? lockdep_hardirqs_on+0x98/0x140 [ 900.471988][T16490] do_fast_syscall_32+0x34/0x80 [ 900.472011][T16490] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 900.472037][T16490] RIP: 0023:0xf7f61539 [ 900.472056][T16490] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 900.472075][T16490] RSP: 002b:00000000f5456590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 900.472098][T16490] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f5456620 [ 900.472114][T16490] RDX: 000000000000000f RSI: 00000000f73f6ff4 RDI: 0000000000000000 [ 900.472128][T16490] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 900.472141][T16490] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 900.472154][T16490] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 900.472192][T16490] [ 901.233069][T16502] program syz.5.2957 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 901.443435][T16507] netlink: 'syz.4.2958': attribute type 10 has an invalid length. [ 901.556204][T16507] team0: Port device dummy0 added [ 902.125788][ T5989] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 902.300609][ T5989] usb 5-1: New USB device found, idVendor=041e, idProduct=4011, bcdDevice=af.98 [ 902.309834][ T5989] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 902.401941][ T5989] usb 5-1: config 0 descriptor?? [ 902.434437][ T5989] pwc: Creative Labs Webcam Pro Ex detected. [ 902.581403][ T6740] bond0: (slave syz_tun): Releasing backup interface [ 902.589653][ T52] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 902.603093][ T52] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 902.614360][ T52] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 902.623020][ T52] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 902.631720][ T52] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 903.159583][ T1310] ------------[ cut here ]------------ [ 903.165725][ T1310] WARNING: net/netfilter/core.c:329 at nf_hook_entry_head+0x23e/0x2c0, CPU#1: kworker/u8:10/1310 [ 903.176674][ T1310] Modules linked in: [ 903.181025][ T1310] CPU: 1 UID: 0 PID: 1310 Comm: kworker/u8:10 Not tainted syzkaller #0 PREEMPT(full) [ 903.190667][ T1310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 903.200787][ T1310] Workqueue: netns cleanup_net [ 903.205631][ T1310] RIP: 0010:nf_hook_entry_head+0x23e/0x2c0 [ 903.211537][ T1310] Code: 4c 89 f8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 ff e8 1d 0d b7 f8 4d 39 37 74 36 e8 83 8a 51 f8 90 <0f> 0b 90 31 db 48 89 d8 5b 41 5e 41 5f 5d c3 cc cc cc cc cc e8 69 [ 903.231386][ T1310] RSP: 0018:ffffc900043cf748 EFLAGS: 00010293 [ 903.237649][ T1310] RAX: ffffffff896f5c2b RBX: ffff88807af80000 RCX: ffff888027110000 [ 903.245901][ T1310] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 903.254483][ T1310] RBP: 0000000000000000 R08: ffff888027110000 R09: 0000000000000006 [ 903.262902][ T1310] R10: 000000000000000a R11: 0000000000000000 R12: ffff8880318e4a00 [ 903.271048][ T1310] R13: 0000000000000005 R14: ffff8880318e4a00 R15: ffff88807af80108 [ 903.279043][ T1310] FS: 0000000000000000(0000) GS:ffff8881261c5000(0000) knlGS:0000000000000000 [ 903.288348][ T1310] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 903.295315][ T1310] CR2: 000000000c3f34d0 CR3: 0000000072d48000 CR4: 00000000003526f0 [ 903.303408][ T1310] Call Trace: [ 903.306781][ T1310] [ 903.309765][ T1310] __nf_unregister_net_hook+0x74/0x6f0 [ 903.315471][ T1310] ? __pfx_nf_flow_table_offload_setup+0x10/0x10 [ 903.321907][ T1310] __nft_release_hook+0x180/0x350 [ 903.327023][ T1310] nf_tables_pre_exit_net+0xa7/0x110 [ 903.332460][ T1310] ops_undo_list+0x187/0x990 [ 903.337128][ T1310] ? __pfx_ops_undo_list+0x10/0x10 [ 903.342400][ T1310] ? do_raw_spin_unlock+0x122/0x240 [ 903.347671][ T1310] cleanup_net+0x4d8/0x7a0 [ 903.352657][ T1310] ? __pfx_cleanup_net+0x10/0x10 [ 903.357653][ T1310] ? _raw_spin_unlock_irq+0x23/0x50 [ 903.363360][ T1310] ? process_scheduled_works+0x9ef/0x1770 [ 903.369169][ T1310] ? process_scheduled_works+0x9ef/0x1770 [ 903.375052][ T1310] process_scheduled_works+0xad1/0x1770 [ 903.380788][ T1310] ? __pfx_process_scheduled_works+0x10/0x10 [ 903.386882][ T1310] worker_thread+0x8a0/0xda0 [ 903.391883][ T1310] kthread+0x711/0x8a0 [ 903.396041][ T1310] ? __pfx_worker_thread+0x10/0x10 [ 903.401402][ T1310] ? __pfx_kthread+0x10/0x10 [ 903.406066][ T1310] ? _raw_spin_unlock_irq+0x23/0x50 [ 903.411459][ T1310] ? lockdep_hardirqs_on+0x98/0x140 [ 903.416699][ T1310] ? __pfx_kthread+0x10/0x10 [ 903.421335][ T1310] ret_from_fork+0x52d/0xa60 [ 903.426049][ T1310] ? __pfx_ret_from_fork+0x10/0x10 [ 903.431253][ T1310] ? __switch_to_asm+0x39/0x70 [ 903.436041][ T1310] ? __switch_to_asm+0x33/0x70 [ 903.440989][ T1310] ? __pfx_kthread+0x10/0x10 [ 903.445602][ T1310] ret_from_fork_asm+0x1a/0x30 [ 903.450499][ T1310] [ 903.453996][ T1310] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 903.461313][ T1310] CPU: 1 UID: 0 PID: 1310 Comm: kworker/u8:10 Not tainted syzkaller #0 PREEMPT(full) [ 903.470892][ T1310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 903.480970][ T1310] Workqueue: netns cleanup_net [ 903.485753][ T1310] Call Trace: [ 903.489058][ T1310] [ 903.492077][ T1310] dump_stack_lvl+0x99/0x250 [ 903.496676][ T1310] ? __asan_memcpy+0x40/0x70 [ 903.501283][ T1310] ? __pfx_dump_stack_lvl+0x10/0x10 [ 903.506496][ T1310] ? __pfx__printk+0x10/0x10 [ 903.511108][ T1310] vpanic+0x237/0x6d0 [ 903.515109][ T1310] ? __pfx_vpanic+0x10/0x10 [ 903.519633][ T1310] ? is_bpf_text_address+0x292/0x2b0 [ 903.525026][ T1310] ? is_bpf_text_address+0x26/0x2b0 [ 903.530477][ T1310] panic+0xb9/0xc0 [ 903.534229][ T1310] ? __pfx_panic+0x10/0x10 [ 903.538680][ T1310] ? ret_from_fork_asm+0x1a/0x30 [ 903.543643][ T1310] __warn+0x317/0x4b0 [ 903.547663][ T1310] ? nf_hook_entry_head+0x23e/0x2c0 [ 903.552895][ T1310] ? nf_hook_entry_head+0x23e/0x2c0 [ 903.558140][ T1310] __report_bug+0x288/0x500 [ 903.562693][ T1310] ? kasan_quarantine_put+0xdd/0x220 [ 903.567996][ T1310] ? nf_hook_entry_head+0x23e/0x2c0 [ 903.573203][ T1310] ? __pfx___report_bug+0x10/0x10 [ 903.578252][ T1310] ? nf_flow_offload_xdp_setup+0x68a/0x690 [ 903.584065][ T1310] ? kfree+0x191/0x6b0 [ 903.588145][ T1310] ? nf_flow_offload_xdp_setup+0x68a/0x690 [ 903.593970][ T1310] ? nf_hook_entry_head+0x23e/0x2c0 [ 903.599342][ T1310] report_bug+0x16a/0x220 [ 903.603687][ T1310] ? nf_hook_entry_head+0x23e/0x2c0 [ 903.608892][ T1310] ? nf_hook_entry_head+0x240/0x2c0 [ 903.614096][ T1310] handle_bug+0x98/0x200 [ 903.618344][ T1310] exc_invalid_op+0x1a/0x50 [ 903.622847][ T1310] asm_exc_invalid_op+0x1a/0x20 [ 903.627744][ T1310] RIP: 0010:nf_hook_entry_head+0x23e/0x2c0 [ 903.633741][ T1310] Code: 4c 89 f8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 ff e8 1d 0d b7 f8 4d 39 37 74 36 e8 83 8a 51 f8 90 <0f> 0b 90 31 db 48 89 d8 5b 41 5e 41 5f 5d c3 cc cc cc cc cc e8 69 [ 903.653362][ T1310] RSP: 0018:ffffc900043cf748 EFLAGS: 00010293 [ 903.659446][ T1310] RAX: ffffffff896f5c2b RBX: ffff88807af80000 RCX: ffff888027110000 [ 903.667525][ T1310] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 903.675590][ T1310] RBP: 0000000000000000 R08: ffff888027110000 R09: 0000000000000006 [ 903.683573][ T1310] R10: 000000000000000a R11: 0000000000000000 R12: ffff8880318e4a00 [ 903.691547][ T1310] R13: 0000000000000005 R14: ffff8880318e4a00 R15: ffff88807af80108 [ 903.699528][ T1310] ? nf_hook_entry_head+0x1fb/0x2c0 [ 903.705177][ T1310] ? nf_hook_entry_head+0x1fb/0x2c0 [ 903.710820][ T1310] __nf_unregister_net_hook+0x74/0x6f0 [ 903.716558][ T1310] ? __pfx_nf_flow_table_offload_setup+0x10/0x10 [ 903.722902][ T1310] __nft_release_hook+0x180/0x350 [ 903.727942][ T1310] nf_tables_pre_exit_net+0xa7/0x110 [ 903.733242][ T1310] ops_undo_list+0x187/0x990 [ 903.737842][ T1310] ? __pfx_ops_undo_list+0x10/0x10 [ 903.742959][ T1310] ? do_raw_spin_unlock+0x122/0x240 [ 903.748193][ T1310] cleanup_net+0x4d8/0x7a0 [ 903.752676][ T1310] ? __pfx_cleanup_net+0x10/0x10 [ 903.757627][ T1310] ? _raw_spin_unlock_irq+0x23/0x50 [ 903.762845][ T1310] ? process_scheduled_works+0x9ef/0x1770 [ 903.768581][ T1310] ? process_scheduled_works+0x9ef/0x1770 [ 903.774314][ T1310] process_scheduled_works+0xad1/0x1770 [ 903.780008][ T1310] ? __pfx_process_scheduled_works+0x10/0x10 [ 903.786013][ T1310] worker_thread+0x8a0/0xda0 [ 903.790801][ T1310] kthread+0x711/0x8a0 [ 903.794980][ T1310] ? __pfx_worker_thread+0x10/0x10 [ 903.800104][ T1310] ? __pfx_kthread+0x10/0x10 [ 903.804712][ T1310] ? _raw_spin_unlock_irq+0x23/0x50 [ 903.809930][ T1310] ? lockdep_hardirqs_on+0x98/0x140 [ 903.815147][ T1310] ? __pfx_kthread+0x10/0x10 [ 903.819760][ T1310] ret_from_fork+0x52d/0xa60 [ 903.824406][ T1310] ? __pfx_ret_from_fork+0x10/0x10 [ 903.830090][ T1310] ? __switch_to_asm+0x39/0x70 [ 903.835158][ T1310] ? __switch_to_asm+0x33/0x70 [ 903.840030][ T1310] ? __pfx_kthread+0x10/0x10 [ 903.844659][ T1310] ret_from_fork_asm+0x1a/0x30 [ 903.849447][ T1310] [ 903.852807][ T1310] Kernel Offset: disabled [ 903.857141][ T1310] Rebooting in 86400 seconds..