last executing test programs: 3m5.544219414s ago: executing program 1 (id=115): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001200), 0x8a400, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) ioctl$PPPIOCGDEBUG(r0, 0x80047441, &(0x7f0000000000)) (fail_nth: 3) 3m4.619964348s ago: executing program 1 (id=119): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmmsg$unix(r1, &(0x7f0000003900)=[{{0x0, 0x0, &(0x7f0000003bc0)=[{&(0x7f0000000340)=""/12, 0xc}, {&(0x7f0000000700)=""/218, 0xda}, {&(0x7f0000003ac0)=""/222, 0xde}], 0x3}}, {{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f00000008c0)=""/148, 0x94}, {&(0x7f0000000600)=""/223, 0xdf}, {&(0x7f0000000a80)=""/16, 0x10}, {&(0x7f0000004880)=""/141, 0x8d}], 0x4}}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000c80)=""/166, 0xa6}, {&(0x7f0000000d40)=""/81, 0x51}], 0x2}}, {{0x0, 0x0, &(0x7f0000003480)=[{&(0x7f0000000300)=""/47, 0x2f}, {&(0x7f0000002f40)=""/107, 0x6b}, {&(0x7f0000002fc0)=""/241, 0xf1}, {&(0x7f00000030c0)=""/94, 0x5e}, {&(0x7f0000003140)=""/207, 0xcf}, {&(0x7f0000003340)=""/181, 0xb5}], 0x6}}, {{0x0, 0x0, &(0x7f00000038c0)=[{&(0x7f0000003600)=""/72, 0x48}, {&(0x7f0000003680)=""/235, 0xeb}, {&(0x7f0000003780)=""/28, 0x1c}, {&(0x7f00000037c0)=""/222, 0xde}], 0x4}}], 0x5, 0x41, 0x0) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (fail_nth: 12) 3m3.459741481s ago: executing program 1 (id=122): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x2, @empty, 0x8ac2d78a}}, 0x0, 0x0, 0x43, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) r2 = syz_open_dev$loop(&(0x7f0000000200), 0x7fffffff7ffffffd, 0x901) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/pm_freeze_timeout', 0x68a41, 0x3) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000080)={r3, 0x0, {0x0, 0x0, 0x0, 0x4, 0x4000000000000ffd, 0x0, 0x0, 0xa, 0xc, "faf98357e5a1149989fc8dbec3bd02b82a128bbad0099cebdc25f5abb534464c516bdd8a0f3500", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "715237641a8ccf162e43ac61f700000000009b4100", [0x9, 0xa]}}) io_submit(0x0, 0x1, &(0x7f0000000880)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x8, r2, &(0x7f0000000400)="e4a6368b847b1d966690470a05fe338225497087bf3f2b1ddc033b9d3c12cf319a19bec08cbac5f3d3f3610379ef6c40aa09", 0x32, 0x5, 0x0, 0x2, r3}]) socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r4, 0xfffffffc) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000000), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7a, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) close_range(r3, r6, 0x200000000000000) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x3d70000000, &(0x7f0000ffe000/0x2000)=nil}) 3m1.981750396s ago: executing program 1 (id=125): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000015ac0)={0x0, 0x0, &(0x7f0000015a80)={&(0x7f000000c300)={0x24, 0xd, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x6}]}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x40014}, 0x40) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$HIDIOCGPHYS(r3, 0x80404812, &(0x7f0000000100)) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00') close(0x3) 3m1.260380035s ago: executing program 1 (id=129): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x1, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x10000000, 0xfffffffe}, 0x800}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x24c4436d5a174b6d, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x4004000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_clone(0xa000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ptrace(0x10, r4) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000000)=0x1d6f4194, 0x8, 0x3) r5 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r5, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x42804}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)=ANY=[@ANYRESHEX=r0, @ANYRESHEX, @ANYBLOB="094f4a703aeaef00000000318032ff00"/26, @ANYRES32, @ANYRES32, @ANYRES8=0x0], 0x50) r6 = socket(0x10, 0x3, 0x4) r7 = gettid() kcmp(r7, r7, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@newqdisc={0x2c, 0x14, 0xf0b, 0x4, 0x0, {0x2, 0x0, 0x0, 0x0, {0x4, 0xf}, {0xd, 0xa}, {0xffe2}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x3ff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2048006}, 0x0) socket$xdp(0x2c, 0x3, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mtu(r8, 0x0, 0xa, &(0x7f0000000040)=0x3, 0x4) 3m0.987733789s ago: executing program 1 (id=131): socket$nl_xfrm(0x10, 0x3, 0x6) socket(0x400000000010, 0x3, 0x0) socket$tipc(0x1e, 0x5, 0x0) socket$tipc(0x1e, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) socket(0x2, 0xa, 0xbfffffe6) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x803, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="4433000041000701fefffffffeffffff017c0000040042800c00018006000600800a0000203302801c3317800400150004008b80080086800400b2800633018024", @ANYRES8=r0, @ANYRES64=r0], 0x3344}, 0x1, 0x1000000000000000, 0x0, 0x4040044}, 0xc000) 3m0.430367226s ago: executing program 32 (id=131): socket$nl_xfrm(0x10, 0x3, 0x6) socket(0x400000000010, 0x3, 0x0) socket$tipc(0x1e, 0x5, 0x0) socket$tipc(0x1e, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) socket(0x2, 0xa, 0xbfffffe6) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x803, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="4433000041000701fefffffffeffffff017c0000040042800c00018006000600800a0000203302801c3317800400150004008b80080086800400b2800633018024", @ANYRES8=r0, @ANYRES64=r0], 0x3344}, 0x1, 0x1000000000000000, 0x0, 0x4040044}, 0xc000) 2m53.289328657s ago: executing program 2 (id=157): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0xffffffffffffffff, 0x4000000}, 0x50) r1 = syz_io_uring_setup(0xf00, &(0x7f00000002c0)={0x0, 0x57b0, 0x80, 0xfffffffd, 0x80025b}, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000304fcffffff3f00000000000000", @ANYRES32=0x0, @ANYBLOB="a57dad88900a0000050014a42b000000"], 0x28}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0) 2m53.023117617s ago: executing program 2 (id=158): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7901}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6364, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x5c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r5, {0x0, 0xe}, {0x2, 0xb}, {0xffe0, 0x484c10e0d22b6613}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xfffffffffffffdc3, 0x2, [@TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x10006}, @TCA_FQ_PIE_ALPHA={0x8, 0x5, 0x12}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x6}, @TCA_FQ_PIE_DQ_RATE_ESTIMATOR={0x8, 0xc, 0x1}, @TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0x6}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20004061}, 0x4008000) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r8, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600602fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x4000000000) 2m52.415741394s ago: executing program 2 (id=161): r0 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r2 = memfd_create(&(0x7f0000000180)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbeYL&\xa6\xba\xea\x01\x98\x00\x00\x00', 0xd) ftruncate(r2, 0x2000000) fcntl$addseals(r2, 0x409, 0x7) ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000000)={r2, 0x1f, 0x1f00, 0x1000000}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200)) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x690}, 0x20008040) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x69) sendmsg$nl_route(r3, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@gettaction={0x64, 0x32, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x44, 0x1, [{0xc, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0x10, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8000}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}]}, 0x64}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2m49.229193599s ago: executing program 2 (id=169): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x30004001) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x49, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040)={0x3, 0x0, 0x9, 0xb5e}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r1, 0x0, 0x0, 0x0, 0x3000000}]) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) write$vhost_msg_v2(0xffffffffffffffff, 0x0, 0x0) 2m48.621566571s ago: executing program 2 (id=170): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)={0x1018, 0x10, 0xb, 0x70ad26, 0x4000, {0x3}, [@nested={0x1004, 0x1, 0x0, 0x1, [@nested={0x1000, 0x74, 0x0, 0x1, [@nested={0xff9, 0x125, 0x0, 0x1, [@generic="3ec4811b8692a8c8e3340437d0eea0bc4bcb", @nested={0x71, 0x1b, 0x0, 0x1, [@typed={0x8, 0xa, 0x0, 0x0, @pid}, @generic="0c1145e4139665f31eb62b46668ba46cb71cc978696a79450685f1ce3173aec96e2c38c4a11e8f1a37c8b61c108d48f5c2bf21bf65e141f9fb029ddaaa3ad02b0815876ab25c019849f6e2d03b941945e3b849effaad28e35d78c74e1a6bce9598b047b0e1"]}, @generic="aae529878ebaa1eb4a199411014c86a0cbfc8f9515b998923c666fa4dd153149248e7ca1bf7853c3e9b8babb5af5d6", @nested={0xf3d, 0x145, 0x0, 0x1, [@generic="7a0b95b26c5b514ba5c3c90e68cc5f37c6f285f1a1580229b27ef5109ecf6cf518b0857a04765b3189278e9f438362b2a1dbb58a02f54ca00988d6d62890927dd7dabb1510", @nested={0xef4, 0x10, 0x0, 0x1, [@nested={0xeed, 0xf5, 0x0, 0x1, [@nested={0x1f9, 0x31, 0x0, 0x1, [@typed={0x1e, 0xf4, 0x0, 0x0, @binary="254a52c2bf7d3a30d7972773e23eed1bc9e50f5e515a66f258c2"}, @typed={0x8, 0x76, 0x0, 0x0, @pid}, @generic="34e6e34d80d60ea6c78a1c724ad2e9fcbd328f2190de013a95090e91bb5ce635fb154b638cc7680196aaeba6eafe0b224cfa08f742a5aef5f076f187a61e0d99c001a488f946110939268ed9c070fa3a947e36cdbafe925b708b1269e0ea25463951d511f2491070f9a06a6cf28b353f4a29770014b9e40890a70feac9b5ab2b828fb35a97c9b20782d346ac04f451b4360947123fea54a06e49d95ffabf29d44a4a0efad35b3457b4c9e7fc05bb7991e9c92d7f0b253d59ad435cf14f563192605bfe34132148", @typed={0x4, 0x9f}, @generic="b5acddca810c6fc165893de1174473de258222d83996d19a8117e9b13f93a4007644070f3c5a06f5f260be6e75d0a9ba387412eb2523a3a870c2fe5982b303bcb3476d6f73cbe344feb85389513d4fe22eb57670db3b7dcf8c88c7f51535cade991c4ca5d77c8aa5f27420743f5523dae89751981bbced91c4cb3f1cb58a782eb3156bcfcd173ed60c6b41ae3472727a901dfa60159aa492e6e180ed50abeff8fba14564310fb36723021a667307f7ae4291e129c11e33b23888ac45c9b0419e8ece245d7d00e4d2cc256bf8f91ca7b157a49042", @generic="e3e57a82da27396f98cf3b0eea16e4bfa39b779c97b1a75c11edb4da6d38a5418edfb594a23936e5e9cab5d77308"]}, @typed={0x14, 0xa4, 0x0, 0x0, @ipv6=@empty}, @generic="c602264af91e9e80d7193593da190db0baab207123e09967a1ea618eaed61f2fa6fd34b9b384bd07d8671462649fdf3b43ee153c54130cf1755be4dd70", @nested={0x4, 0x10a}, @typed={0x8, 0x42, 0x0, 0x0, @u32=0xd6}, @generic="de5b43de111318d3121cc5d739b31eb7a0b80fd378fa3f281072e8694c508726efc69171de9094915640e58b66a4d98da11277c67878b202913b0e41eb2d84463574d8459ac24b389f6e27fa5e3273531037662090bac66ec39e9d806e26d28c5963d8f5cf2a7bfec25a70f5e57e367ce0c1e2c2b65f234b6982b909711c396b9d9de1b89f191b6fb4dc7275b79eac5465db3c14efc8fde9369560bde8ffccd1f4129fc79f44e437388a6a7dd3dbf84e641fbdae6a64090ab8dca7679be1d79c9f8e0283be5a3cdbd78ef7c2d9ec42020c10b846e1a0ea4f32b9ae2952ba40df525d7afd4b287b199528780703acc0a4", @nested={0xb9d, 0xb2, 0x0, 0x1, [@nested={0xc, 0x85, 0x0, 0x1, [@typed={0x8, 0x3a, 0x0, 0x0, @ipv4=@remote}]}, @typed={0xa, 0x13e, 0x0, 0x0, @str='!}(^[\x00'}, @generic="ad94af3ff222c7eb585b5dd6a7a6d4ed027f48d6f7baea23e33970d414dc956139213d303ac717ef16eb1d3a5a89356e5c2aa8d598765c36c288c858b746f3f26f3dea143994e61b94", @nested={0xb35, 0x6a, 0x0, 0x1, [@generic="2dab5d208ca5a81a140ab44fadcc9d67f26b2c2aafa53fd3567e0de3be1a0816", @generic="2c6c3627ad785ad8b64dc16129759296e4f0f8f25b067806960161e575651534285af3886826b08cbf036a5e313c8c72bc75c1ee1bb5983d4e6b", @nested={0x2c, 0x86, 0x0, 0x1, [@nested={0x4, 0x27}, @typed={0x8, 0x158, 0x0, 0x0, @pid}, @nested={0x4, 0x1f}, @nested={0x4, 0x51}, @nested={0x4, 0x15f}, @typed={0x8, 0xe8, 0x0, 0x0, @fd}, @nested={0x4, 0x169}, @nested={0x4, 0x30}]}, @generic="d712f1da05146aeea515b5121bbb18ec60d5969145734a5d4f90291dd216d27342b343cbf63e6debf5b2ab780fa43177e2d1a442a0d817c36b0d002a8fd994e0ee04be915f5787e58ea9bae7e62414924b557237ef84f4e993f5edcb0c41bdab25c99cb32a6df03e83fe89804519d7679f0f43880ac66eb5b953f2fb53b8c0fc7bf97a239c1bac38b177032c1365e0508e51c7697f8347997397e14f810dc75e86dbecdb9cb7c97317712d45d06c8e4fb3e71465f36cb273f468090d968a2a9b94ebdc1deb6602bdb7b81551e57d50ec8d16795cc1b0e6395cebbee0af86659bdf526e9604b393ac6976bf2e7e7bde93a3ffc3d31f602edfcb97742180e499dbab762bfda53124c6f5e891ef4856aefa1e14df9befe67767f3dc236809265b1ea9d659a1def208fa9d41b2f0092a712f4aea5a18b8f9bdb6c1ed6d969bf2dda14cf6ad3aa3dafa54f4a5d5171aa5c5b21a498df400bc8130bb261f171da8acdceb029b65295ec1dffecd89d3e7a03500e4d4377b938dd3bf47c889aaadf077f8f344b85d9d157abe6285f059eebfe5eaab21394e7a1b2890f6cc7f197431a00dbcc47974e2da5bfde735f80bc514a4ab4e7ecd47e115bd60747857a3abe6a1b6a9a7707d8ba4f871775fc73b4923fde71155d9f7d384a3512981738aa546f6c5cd7b9dddde605757e5919cf49b48fda2971c8e9260fe880c995f9e4ab875489a090a74a31861058e6ba93387472fbf348b1a1618544e7bbeb5f82de9eda3546229b534f29ccf899af080976350d969d8495344e0d4c7d482d7ef3a616cc2d1989c56439e6a0df9f420299465ec7c70b1563476e1aced144fa9347f26909f3e9cc40c2493096aaa264570393bd236940db28194e1d974bc116f27eb5ce9b91478b428a02eba0079c971f340984ede685ac998865936b4d9e6cc62b08032839fd3ef6ab398a50201b739b0b3653e89c3eb622efc68f8d7c4eff2d401044c82bfc975eb31f8b5d254405ffef99dbd834d41c6ed307b44fa59b1c5695a1bf40a1f79e08c79761380bc55c82dad87ef8696851794e51c6026f9cbeec7e11e0163a6847e84f72b492a719f7ec7a56fb746c4fc811e70680fcad5faf774b6ca1272cb54206738027f570b3276cb4913663d8fe178a311f5a28208e685ae6147e9b674492ab7e9499368733ef8961db8dc4a557597602962ff98edc58c944a144a85581c2781321c13d0b309383a23c87d3f9a5db0a4a7137980d29d0369d842622e543de30b2373d3e16e59532218f4865be95e620e40582778b73bb7df8adc8b2c80b45177d22a333009cd8ba179ca25f735ba1d7d5eb3552733bcdd59c7d10deb66afeefe9425c6bab6c2bd7ca7e8a58183a49eac67c58589919b08e8a8a78d347b40857f4acd90beb9bc37b6c249dbd9f5cb9a19daf4913c10b322474622b89093524a9109c7f7bc24e000e7d2a632a50ff5024cccd941078ae618d66a515559fd6ea3f29bfc0c083b4c59bfaf00ee105adca9f95f0c8622a835b4ea55ee595d035d5c1680f055fadaee7721a3fd8fe7580c65b9494a481c740d9e97e1d62d25e45f800c0342c30426596fc01c92440abae3373e9a866a8e8f69016524106bd1a1c312e49643e2031ac21e9bcc281bcb079d9027ecf83aa86345488d8384b758f385b5a6acaa66216cd8644b447758fcddd7e8c8597e174780b3020bc80a6a6494fac64110681e004d782c16959a07a2f8183083df6d9982cb25eaa9d891a2b9fa37cc3edb21c6ff52038f4981f786f58f45d90bd8808169a5851ee736f5cc7aade4354db280f693f34a64d6ad85ab7c7cf58146f9029ebbac17b502ec1e28f16f84e0344481ab9548e9e4117327d4a29ac35bd46ddff666b901b5b4daa30b0d893a68226f728c4378706262714575efe21bf14133e0174fc6c8b5583fa460366bd7915de59374b9bbf3d44406991cf122667df074130c98fe1ecd258a2e040f5eda4b704119dd76c106344a798a4efab31a6724da39c6ebe9a07180e2b6de8f1432557a718060aee65cdc664560cf0cce8be5df08ac4354e7f96dae608efcb01805591ae46c4fcb51b8ed25d3454904c1449e6e548ae8f19d51e10559f7c95cdfdb2454f6b24f08dc1f48039e5fec8c185c450d9602997d3a09e219250c2406aae0bdab350cb18b36302698b15ced0234ca61940108a7294fd0a42ca8ba70112b6af4166cc0bc557e69935cea91a0ab960d3148f9ca0a3d3151d28db9015c50e31f43a5a1fd9eaf23f1b778fdb57d00d92454431601ae9cf79bb8a9842ad509422cacfb092a9c3b30c7b087fe714a6f2b6e235d36269bfe9fd3c93f955bf21a5fc55819ec811b48e558dd7d26783e5eec07d3ab7cc73c86ab75f08a39d2e751571030e7153034a0d960c2157d719d379c7aeb9ec4b99cd4bb84f4bd3d7386b46c4e97e921ccb16aad56b98940a498b7944f44f3a14efbdf34531e11363f17ebc8d42935b1378d03b4bcecae2e74c2d0f97003104c305ab34d24accc8855b7e011cd02f2b8fd2406559f5527907e0901de93a8162a4d54323e383ceea31bc081fdfb0b72fc2008f5a27ce739c7af5c682a5cedd3830643887b69126ced8d4b9ae2634b0c6abfc95d40c09b53843ff7eb96bc2b1b262366433542d8ed6eca302ae50e7207c30d94a2e75c71652e30a751ffc473a5fda8e64852e5c99ca62663b9f30ca267dee2bbe3e884e53d676afe8dddbb9ac5f9e3e8d5499b0cb8213186c899542a431d080bb5f70dd761cfafc2c96d495264c72c80fa698fb801badea7090e2dd7d032387257c890c8fa565a64a81aea3f0cfc2d65af887b7b44b845b4f791dfc0860d7fc4bce5699e979c8439cb052ff8046f782376a3263dce650d04d7034eea7491acde4110298bf22c5862866bf7ac0b9efb510bffc34db5b58d2e210737ad8c837a18a5ea2c5e0f34ed2082c69b6960fce511a64784814030910c3c444eb0e486d30e1fa7c36db1cbda1963f72870e20e033d046723dac060a846a1cc53686128d7ae9d745bda8a495bcc64f447a3730f6b37e4738b8919209f41d2bcf3dadf65bafd64b2e642b32e46d2fac724549c31e920ec35ba119e3ec4bbe1ac20603bc397930bc601140a6d9e325fecee984145cca50250afb75b8ba4b804f619455b8f6468b0c11a17b773054ed377328a0ef7cd37122b92d05e564974c46e73032c8d18754a0865f8a2bdf7a4a1ff658a3c4d4a057032d5f3d76a83d691db36170e34a319fdd7653bba400345a051eeedae2d2d819ac504e7c965b30cced403e0cdd74f66fe61b94c8e594e44c2714c2b4fdb7f5a4df9093e944e4cd8e957efd11b9889e9c5633332b0b5f36206ac475ffd15e0875b44548ff50683ba2b31f91a29df320a93a3bc4a6a3f69aa2434746a93ae7c09ecd6b04a7ea60addc95fffb99f941861d9605ac450c97d086c2faac65ee5a84278cec5522f4179e1b45d1230be5cfa4761add00e95de36af519ed83c875e29dbc84d9eee82d49dc8176e5ef65c4ed96e8c5fc215e58b33f5b8c96abf420475adbb968ab7bdddd7bf41df1a9969f1b2b11f9610cf37c854d6517f0838fc0f75edbfe6141e1ad443bf3df629a9a84559fffc7e0937c2872d4d43db2e9adf3ab59d838c9067f598e80c54cd29bf20e7a084492b8efe3e23ca5b27b9130fddfb3dffee79ddfd05d40e45d6a231d238cea03c3fb697a1da198817dd1850f44093bb008ceca00298bdb9ca655497bcf0a9f4229785cf46bc4e68092622dd05b824303e0a56f17100f86d8bb25be201ee0ec622f41834c07e6bc68da365c860b685a5bea85de29bf5e2d5b94cbbe08e4c31f3c7ea3c3b761d09"]}]}]}]}]}]}]}]}]}, 0x1018}, 0x1, 0x0, 0x0, 0x48d1}, 0x4040080) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newsa={0x150, 0x10, 0x413, 0x70bd29, 0x0, {{@in=@multicast2, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e24, 0x0, 0x2, 0x20, 0x20}, {@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x32}, @in6=@private1, {0x4, 0x8001, 0x0, 0xffffffffffffff45, 0xffffffffffffffff, 0xfffffffffffffffe, 0x7f}, {0x0, 0x7, 0xcc, 0x8}, {0x5}, 0x0, 0x0, 0x2, 0x1, 0x1}, [@algo_aead={0x5f, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0x98, 0x40, "92ed85d6e6f036131ca9bd79ef58d999d13068"}}]}, 0x150}}, 0x20040084) 2m47.511503119s ago: executing program 2 (id=173): set_mempolicy(0x3, &(0x7f0000000140)=0x3, 0x5) socket$nl_netfilter(0x10, 0x3, 0xc) capset(&(0x7f0000000080)={0xeeebb9e507898c23}, 0x0) memfd_create(&(0x7f0000000280)='\x02A\x9c\xc5U\x1dp\x0e\x13\xc9r\xb7\x1b\x04\'\xc2\aWz\xe4\x01\xd5u\x02\xeb\xd5\x9f\xfd\a\x9d\x9c\x80Nr\xd4\x1b( \xe9\xa2\x9a\xe0\xd3o%\xa2S\aQ\x99\xec7\xe5\x89A\xc4\x06\x9b\xce\xb1\xa5\xe4\x94\xf9\xe8\xa6\x81\xef\xcf\xcf\x87\xb2p\xf1{/\x04\'\x95sS\xae\t\xe1{\b?~\xcb\xa1\xa0\x94\x96\xc0}\xeau\xf6+\xfd\xfe\x93^~1\x0e\x10\xf43\xc7\xca\x88\xfc!n\x10\x81\xf3\x89s\xb7Y\x12=0p\xe8\xe6+k\xce\x0eVu\x80u\xe7\x12@*\b\xa5\f\x9e}\xda\xf7\x9d\x11\x02\xd2\x9eY{\x94p0\x06F\xdcC\x02\v\xe1\x84\xdd\xcd\x92\x16tj\xf6\x19\vg_\xb8\xb7%U\xca\xbe\x1al\x96\xb8%4\vR\xaa\xbb\xf8\x9d\xda\xfa6\xffhE\xdc\'\x0es\x8bs\xf5D\n\x14\xde\xc6\xfe\r\x12IH\x8f5F\x90B\xfeZ<\xe5\xcaw\x18\r\xb6QF\x83\n\x86\xd5\xf7\xf7\xcdW\xd7>\x17\xd7\xd9\xebh]\x89_D\x00i\x86\x9e\xe1Z\xe2F\xf6\xef\xfc`\x9c\xfe_\x8e\f\xb1\xe9\xda|u\xf6\xd2\x9b\xd2\xb1M\xc3U\x97\x90\xc9\x94\x85\x83\x81\xfd1o\xea\xfbN\b2\xb7\xe8\xe6\aLZ\x99\xfb)\x1e\x8c-\xd0\x89\xdf\xdf\xff\\_\xfem9\x00\xb9\x14\x98\x9f|\xef\x97\xa6@I2y\x91\xb9\xac\xe7\xf5\xc9\xe16\xee\xca\x12=\x1c\x90a\x0fi ~\xd1\xe5\xb7\x86\xdf\xa9\xe9|y\x98Tr1, 0x1, 0x7e8b, 0xfffffffffffffffa}) read$FUSE(r8, &(0x7f0000004500)={0x2020}, 0x2020) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000691000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f000068f000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000691000/0x3000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r9 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0x0, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r9, 0x2219, 0x7721, 0x16, 0x0, 0x0) fallocate(r2, 0x11, 0x600, 0x200000007c000) 2m39.520113751s ago: executing program 5 (id=198): syz_emit_ethernet(0x5e, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000380)={0xfffc, 0x0, 0x3, 0xffff}, 0x8) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)='w', 0x1, 0x94, &(0x7f0000000000)={0xa, 0x1, 0x3, @private1, 0x8}, 0x1c) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x16, &(0x7f0000000180)=0xb3f1, 0x4) r0 = syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x400, 0x40, 0x7f, 0x2c0000, 0x0, 0xfffffff9}) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000240)='./file0/../file0/../file0/../file0\x00', 0x80801) move_mount(r1, &(0x7f0000000140)='.\x00', r0, &(0x7f0000000340)='./file0\x00', 0x0) chroot(&(0x7f00000001c0)='./file0/../file0/../file0/../file0\x00') r2 = syz_clone(0x70ae6000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="cf6d8dee2f180e0d533d28a187a5a0", @ANYRES64, @ANYRESOCT=0x0, @ANYRES8=r2], 0xb4}, 0x1, 0x0, 0x0, 0x20040055}, 0x40) ioctl$XFS_IOC_FSGROWFSLOG(r3, 0x4008586f, &(0x7f00000001c0)={0x152, 0x7}) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="013d45ab603be356b32007d21cecf547161f00d2116e0e651ba94499ea1f4e61c6334477f72698d490f7d14cf452af1ad6618af91e27b53a496602"], 0x5c}, 0x1, 0x6c}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r6 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r6) syz_usb_connect$rtl8150(0x0, 0x3f, &(0x7f0000000240)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) ioctl$EVIOCRMFF(r6, 0xc0085508, 0x0) write$cgroup_subtree(r5, &(0x7f0000000280)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r7, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x5}, &(0x7f0000000140)=0x8) syz_80211_inject_frame(&(0x7f00000003c0), &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x356) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000000d0a010300000000000000000a0000010900020073797a31000002000000000000007a3100000000"], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) recvmsg(r8, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x40000100) 2m35.995770981s ago: executing program 5 (id=206): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000003c0)=[{0x800, 0x0, 0x80000000}], 0x10, 0x40004}, 0x94) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="021800000b0000000000000000070000030005000000000002000000e00000010000000000000000030012000000000002000000000000000000000000000000030006000000000002"], 0x58}}, 0x24000894) 2m35.696312525s ago: executing program 5 (id=207): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r0}, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) 2m35.406921248s ago: executing program 5 (id=208): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00!', @ANYRES16=r1, @ANYBLOB="010025bd7000fcdbdf250300000018000180140002"], 0x44}, 0x1, 0x0, 0x0, 0x20009085}, 0x40040c4) 2m35.096567562s ago: executing program 5 (id=209): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) mkdir(0x0, 0x22) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x1}, 0x10) write(r3, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000fe000000000000000800040001000000", 0x24) 2m32.40555689s ago: executing program 33 (id=173): set_mempolicy(0x3, &(0x7f0000000140)=0x3, 0x5) socket$nl_netfilter(0x10, 0x3, 0xc) capset(&(0x7f0000000080)={0xeeebb9e507898c23}, 0x0) memfd_create(&(0x7f0000000280)='\x02A\x9c\xc5U\x1dp\x0e\x13\xc9r\xb7\x1b\x04\'\xc2\aWz\xe4\x01\xd5u\x02\xeb\xd5\x9f\xfd\a\x9d\x9c\x80Nr\xd4\x1b( \xe9\xa2\x9a\xe0\xd3o%\xa2S\aQ\x99\xec7\xe5\x89A\xc4\x06\x9b\xce\xb1\xa5\xe4\x94\xf9\xe8\xa6\x81\xef\xcf\xcf\x87\xb2p\xf1{/\x04\'\x95sS\xae\t\xe1{\b?~\xcb\xa1\xa0\x94\x96\xc0}\xeau\xf6+\xfd\xfe\x93^~1\x0e\x10\xf43\xc7\xca\x88\xfc!n\x10\x81\xf3\x89s\xb7Y\x12=0p\xe8\xe6+k\xce\x0eVu\x80u\xe7\x12@*\b\xa5\f\x9e}\xda\xf7\x9d\x11\x02\xd2\x9eY{\x94p0\x06F\xdcC\x02\v\xe1\x84\xdd\xcd\x92\x16tj\xf6\x19\vg_\xb8\xb7%U\xca\xbe\x1al\x96\xb8%4\vR\xaa\xbb\xf8\x9d\xda\xfa6\xffhE\xdc\'\x0es\x8bs\xf5D\n\x14\xde\xc6\xfe\r\x12IH\x8f5F\x90B\xfeZ<\xe5\xcaw\x18\r\xb6QF\x83\n\x86\xd5\xf7\xf7\xcdW\xd7>\x17\xd7\xd9\xebh]\x89_D\x00i\x86\x9e\xe1Z\xe2F\xf6\xef\xfc`\x9c\xfe_\x8e\f\xb1\xe9\xda|u\xf6\xd2\x9b\xd2\xb1M\xc3U\x97\x90\xc9\x94\x85\x83\x81\xfd1o\xea\xfbN\b2\xb7\xe8\xe6\aLZ\x99\xfb)\x1e\x8c-\xd0\x89\xdf\xdf\xff\\_\xfem9\x00\xb9\x14\x98\x9f|\xef\x97\xa6@I2y\x91\xb9\xac\xe7\xf5\xc9\xe16\xee\xca\x12=\x1c\x90a\x0fi ~\xd1\xe5\xb7\x86\xdf\xa9\xe9|y\x98Tr1, 0x1, 0x7e8b, 0xfffffffffffffffa}) read$FUSE(r8, &(0x7f0000004500)={0x2020}, 0x2020) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000691000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f000068f000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000691000/0x3000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r9 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0x0, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r9, 0x2219, 0x7721, 0x16, 0x0, 0x0) fallocate(r2, 0x11, 0x600, 0x200000007c000) 2m32.23466207s ago: executing program 5 (id=215): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="3000000041000701fefffffffeffffff017c0000040042800c00018006000600800a00000c000280050014801e000000852779d58ef92302bda57fec865151bebda4331ec282350dd163305b81ce47a7264f64d5baa35fe1ad7997426b1b0b4945e7b1a81df59269cfb29400"/117], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0x4000000) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x341881, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x0, &(0x7f0000000340)}) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x404000, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000011c0), 0x2c05) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000001200)={0x1, 0x1, 0x0, 0x3, 0x4}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000003c0)={&(0x7f00000000c0)=[0x0, 0x0, 0x0], 0x3}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x1c3902, 0x0) sendfile(r3, r3, 0x0, 0x200000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000000100), 0x0, 0x8000) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r4 = memfd_create(&(0x7f0000000180)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xaaSc\xf3]WhI\xf4\x89\x85!mPl\x90\xa5\x93\x19\f\x9a\xae\xd5a\x9bU5\x1a\x86\x9d)5y\xef\x90\xea5\x81\xfeO;\xd4zh?\xbdW\xe0\x84\xe6\x9d\xcb\xcd\xb6\xad3\x7fWY\x02\xa2\x8baG\x00\x0e\x8e/\xc1\xaf\xd0\xbcH9\x04\x00\x00\x00z\x16\xdf\xf3hLpLaA\x89n]>,^M\x82\x8e\xe40\x97_\x809y)Z\xeb\x9d\xbawv\xe9\xc0\x16\xdc\xf5\xcb\xdb\x96\xd6\xba@\xa7\x1bl\xca\xe0\x1e3\x81\xc6S\x86\xf7\xf0\xba\x1b\x14N\xa2\x04\xdb\xb5X\xe4y\xef\xe8\xdb\xd5r\x11\xfb\xe4v\xbcV\xbb\x00\x96CR\xe0~5\x16=:A2\x9c\b\xd9\xa0CB\r\xe9\xb8$\xfe\x8d\xb1Gg\xa9\xac<\xbf\x10]\b9\xd9\x89\xaf\xa6\xd1\x10\x1fq\xba\x06_NW\xdb67Xv(\xa8\xce\x1b\xe6\xbd\x947\x8f)8\xe5\xb3\xac;\x7f+\xf67\xea\x1ei\x92w-)\xa1B/M\x0e7:9\xdb~V\xb7\xd5\x13^v\x14\xe6O\xea\x00\x87\x8dkG\xdf%\xebe\x83\xb97\x01| \xb3\xd8W\xe8o\x17\x97\xd9\x14o\x92\xb9\x9a\x8c\xd7\xcf\xa2\x11\xc3\xa5\xb3\xd2\xdeQ\xa7\x05\x7f\x99Lq(\xcd\\\xa2y\x14or\x1efn\xf2\x97\x96c\xda7\t,', 0x5) r5 = syz_open_dev$swradio(&(0x7f0000000540), 0x0, 0x2) ioctl$VIDIOC_TRY_FMT(r5, 0xc0d05640, &(0x7f0000000440)={0xb, @raw_data="2632da1f0277781c3c812b1e7671057d0556351a43af2e3df303c3327d0eba474580aac36eb76ca84e5615cf94842512c5e90c44c7a4ff7193706b9cd57a0414643a05ef9a9ffb73fa4dafea44b93320ebf18f719a40de6ef3a4f5a2d62343b8dab64cf5e709a57089e4c72fe7c75db122f16b6bd99e8f6e9040b92f83ce89c4b8ee25d2ccaa06f1587e17c8580cf9611a4319566aa69be41930b6cee2f9bde7cd194aa5b658f8ce765fa3b758e0d963addcf35475c402d7147560d5f92ef27815fd54c2ac820645"}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000002, 0x4010012, r4, 0x0) syz_clone3(&(0x7f00000002c0)={0x801400, &(0x7f0000000040), 0x0, 0x0, {0x19}, 0x0, 0x0, 0x0, 0x0}, 0x58) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) ftruncate(r4, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) 2m17.056395353s ago: executing program 34 (id=215): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="3000000041000701fefffffffeffffff017c0000040042800c00018006000600800a00000c000280050014801e000000852779d58ef92302bda57fec865151bebda4331ec282350dd163305b81ce47a7264f64d5baa35fe1ad7997426b1b0b4945e7b1a81df59269cfb29400"/117], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0x4000000) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x341881, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x0, &(0x7f0000000340)}) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x404000, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000011c0), 0x2c05) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000001200)={0x1, 0x1, 0x0, 0x3, 0x4}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000003c0)={&(0x7f00000000c0)=[0x0, 0x0, 0x0], 0x3}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x1c3902, 0x0) sendfile(r3, r3, 0x0, 0x200000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000000100), 0x0, 0x8000) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r4 = memfd_create(&(0x7f0000000180)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xaaSc\xf3]WhI\xf4\x89\x85!mPl\x90\xa5\x93\x19\f\x9a\xae\xd5a\x9bU5\x1a\x86\x9d)5y\xef\x90\xea5\x81\xfeO;\xd4zh?\xbdW\xe0\x84\xe6\x9d\xcb\xcd\xb6\xad3\x7fWY\x02\xa2\x8baG\x00\x0e\x8e/\xc1\xaf\xd0\xbcH9\x04\x00\x00\x00z\x16\xdf\xf3hLpLaA\x89n]>,^M\x82\x8e\xe40\x97_\x809y)Z\xeb\x9d\xbawv\xe9\xc0\x16\xdc\xf5\xcb\xdb\x96\xd6\xba@\xa7\x1bl\xca\xe0\x1e3\x81\xc6S\x86\xf7\xf0\xba\x1b\x14N\xa2\x04\xdb\xb5X\xe4y\xef\xe8\xdb\xd5r\x11\xfb\xe4v\xbcV\xbb\x00\x96CR\xe0~5\x16=:A2\x9c\b\xd9\xa0CB\r\xe9\xb8$\xfe\x8d\xb1Gg\xa9\xac<\xbf\x10]\b9\xd9\x89\xaf\xa6\xd1\x10\x1fq\xba\x06_NW\xdb67Xv(\xa8\xce\x1b\xe6\xbd\x947\x8f)8\xe5\xb3\xac;\x7f+\xf67\xea\x1ei\x92w-)\xa1B/M\x0e7:9\xdb~V\xb7\xd5\x13^v\x14\xe6O\xea\x00\x87\x8dkG\xdf%\xebe\x83\xb97\x01| \xb3\xd8W\xe8o\x17\x97\xd9\x14o\x92\xb9\x9a\x8c\xd7\xcf\xa2\x11\xc3\xa5\xb3\xd2\xdeQ\xa7\x05\x7f\x99Lq(\xcd\\\xa2y\x14or\x1efn\xf2\x97\x96c\xda7\t,', 0x5) r5 = syz_open_dev$swradio(&(0x7f0000000540), 0x0, 0x2) ioctl$VIDIOC_TRY_FMT(r5, 0xc0d05640, &(0x7f0000000440)={0xb, @raw_data="2632da1f0277781c3c812b1e7671057d0556351a43af2e3df303c3327d0eba474580aac36eb76ca84e5615cf94842512c5e90c44c7a4ff7193706b9cd57a0414643a05ef9a9ffb73fa4dafea44b93320ebf18f719a40de6ef3a4f5a2d62343b8dab64cf5e709a57089e4c72fe7c75db122f16b6bd99e8f6e9040b92f83ce89c4b8ee25d2ccaa06f1587e17c8580cf9611a4319566aa69be41930b6cee2f9bde7cd194aa5b658f8ce765fa3b758e0d963addcf35475c402d7147560d5f92ef27815fd54c2ac820645"}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000002, 0x4010012, r4, 0x0) syz_clone3(&(0x7f00000002c0)={0x801400, &(0x7f0000000040), 0x0, 0x0, {0x19}, 0x0, 0x0, 0x0, 0x0}, 0x58) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) ftruncate(r4, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) 1m34.899620485s ago: executing program 7 (id=423): r0 = syz_usb_connect$hid(0x1, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000003400)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000003e40)=[{{&(0x7f00000006c0)=@file={0x1, './file1/file0\x00'}, 0x6e, &(0x7f00000032c0)=[{&(0x7f0000000f00)="ce805fb62b21aa556598f8fcd9ef81300edec5c922c81f972c91214d095ade418af2440fd1fcbd5c8adfd93691dd507845e359123d370b41457942d943562adf58ca1c7871385509fcd507628406a2647cd70e80109b8523b55be269c7c705045cfb508263d677bb3a118a0dc337c961347a59ac7bd207cbe99140712531bf46c4052ac3736cb4541ad2e79990601755d4c9540fb2834404fb469020ead5d6f3af1a00593aea810937d79285a8ef35f9cc9595d850f9308ee8c3e5fe4456371dd06dc368b6bfcf5d4dd5e547ac970f8dcfd8a2deed278699a9fbf9009397fda723e9edac375e5ad85b20f92648d443fbb6efec671de12b7ad2dbd385d6ba6f3e0e8675ac40c9d42bc90964ed7d0ca320a82739deeb35546cbe1ac7ee01d267385ae55f67cc79d679fbc36bca9582ce9f8af8d9183b8597fe7174f1c65f9c708178b695c16ed5d2bf70cb82aa170a6db49d346ce81037d853192b46fe8064ae6cc89d2815b514efecd4ed4fb3a22d2b7cdd80c00c07b0a50551a5c9868c370e43bf1af59cd91195f9ef84b52232d958bdb09978283bdfc55520c759257250d9b2b876934a703d9fda0ac9a252376f1106da7cce03f45266b00a3d012c71bdd60523807ec86df7af425eb961a72ce90d311e95d0439cccb7f3a7a252d485288953b3c062aa562dfb0d8ac21229bc89c854411e010d92c3b04a729324956e24101876cef56b58121a9ded278a36d444665206dd3fd19eb4b75f7f061b973f5fe231c397904f9510f01eb983d9d8487e525361478e14ef2e7231c5a9afbfe82bdcb99a558be0a81a8a985f8a23f36bb824f227734e796960499f2708c11c5389913c35fdeb9709bb8d3deb112820ee0294bd4a8d674bded4ac1b7df53b580e816fb66e228f9209c50c2fe42adc5a64ddb05327182c32d3e453db72315df9785cb9b088cd12e96190e8c12a2729de2c14b4568ac6f6a3e5f6615535ec32691a3d736e022bff32da6c0ea1c2944ac5633b1e0b7f7c2cf99b74c398d39f2b86d9ec30d137485943b05120d2c68e3be2359d7d5d1c07d0142d9b31f7541ae3fcfe937c776f41783cf714cce7220419cd85a41eddae0ba7456488a00260d326ce8d0b6236bfca46f5906e110535644dc72f4eedb10966767d771baa9919b3846d6f4625753c4ef4c6734a07ce51bed0f8942c2692a986bda9c1d4945c73320ffaaddaf732789d1f8f423d8b12a98cf53f28f6a93a636edbd6cc5e274c58b2002af2563aefa2aaf433c4b44da7dee8bfd0dbdc20f9af483acb17a0c47ea4d6f13cf7d45e280abcd99b08a5a3c4a7f5db7504e61056e5f4b5232039e402ed7126aa42da817cf3b2dcacb8d4e2354284a0d59746b950efc33707e27f725f468b1ad6fc727edd257518060b306db21c89c15d6031aae06baf71942275a7419920b4ae320f4f35d4b0514152cc753cc0f66d1b6b109a56f43e456c8f5ec5d62523308a8a5ca9415d2cd4143d13cbffbcc17b53b89a3d80cc8f0de3c14861b8a78739d3efb8a1a1726c10cdab7229345c2bdc40f6379b67943e5b87892395796275543e1ca4449c619ef115bbdc718284fe68e43f142cfd10b86fbe43f99d0b19c423349f0b286dd2f3be71e6bd7ce0d0318b49a845a99b3631bee46237e613508ea8a8fbb896ba4f3a28e3e5a2392308c7ca5cf41cc7869c593642fb5144cacc69112efe96224654d08cbfdeae77cf14169215acd798cc0a5afebb8064ef602a7eddaf5606fc27737e5540cdefaf578a23e67eb3adc6a6f651a7ecea5f0ce0e47a833ab919e232ae7d98d3250b37d269c3fee0c3e665dafccb533737b322aa29f3608758de7f9c81f4701fd99dff876b6fe894c6a86729bd8a266f8900ac9f9fe748543fe86b74c925d2bd35e21b2847e3696f716d16bea842813d68dd6a7d4e4027dbd372ae0ba90c7a539b560ab77d7c43d9e23a82f2a808e3559e5cdfd256aacdf5efa14aecc856ad002c54fed26f678b52838cbd31d34971358c90579694549efa8fcebae6ea2bf8312f690637d121863cd4214a3f400ce3eab77afead5618c27837ec4f4024bbe878808764ee57c2a83a24a8d185b430a6591d05facf821440856ce7c63b76fe8ec270ce0cce49ea4eb98b7600ab70ad4a6de1926d542d7b5fde5311d6d063cfedaf918d23b3d6bfef8720ca70c72764a0b90c090d2443906d41bb4463588cd9770c0b1ae9652fcac8f8cd112f6e60b9fb529f4bfd46138546e50644868c9ed69031a0f7b3c8286145a886e9c9d7233bbaf532dc24b448fb919b7ec0a2ea6efa84d40ade1a2b74bb5b93ec6dc9a349ee790ab1602d30daae07cd358b7bdf1f7c1d20696a5c9b94d1fe85902c22167cd5396f498e0da55aa93a7b0b242d2f9ee3171da8b6c5b3c1709495312b354e2445b28154c4e268ad255fa3e119beacde32229fc629fd82abbefd018c64e95ff893792b711e927db27af647454c15a37972a18d169ae6ca010d5ee9ca1683fd6c35e3f0fa56e15d5cf292497122314fe59890300f1ab5761cf7d854fa1a9872299912e901d658f01de8eeee1d4211c497b3237e6784d9213bd5a51a1953116db38b94f871fa7a13e30d791ffec939a2edb6f9c9424fa28769fa04fa92cceb7cde46c27a91acd89743ab9bffc1681c7754bb0ee00169ae8d7847dc5582e49b9fb5c231bb882c88431fd543b4726b0a4b97b90d52a7b1e8989fc342cd769cb4396a45eca6211509fb83dc263e6dfca1ec3c4f926f5164b65588c319abe821e3d67220217ffa123313f3e94c6807e036de5b9f984dd85f7b5fe4f1ff41dd630c66b4c287c1fca5fc532d79b4eca2d651b1b6a594a58070f102e43ecd7ad4027ee8edeaa72e1e6d307a1fa008edb784fc6d2864671259018eb37ee22e676abc61725cc98348ab0ec80c8fde6f1040495bbc2d1211937065c4afb2c5221396eec8c5f43e0c408462535c367b5b1201e08e876c414d04c67dc9c4fe31c60596ff74a9503723db5bafa3d003c9d8570c689d4e4cccf65308b460ae573333bcca322f43dbf5751bea0e8ef21ee6889799e53d28782dcf3dd57191b80ee8cd11c5a1d96a04920cac9ea5f7fc1ee6a84911fd29530ffa778c9ed4de325dc885ac2737d3c427f744c54b7519fe511a5e976c8b0c52d1f6f42b5d143ea8cf4f7c38d6d1837fccd4a94aae058f560eebbe34cd59432be3d1e3f12b584190252cfe4419c5edcd87f015dd348e164bac1eb9d89e02321dcc04074fe4e321f1ebb3353a19ecd321b3dae6bcd63c693cd9dd851081286840a47e684a72a89173ca8cdffc742aa85350a73d83b103e2762aa90d6860ab92413896cb23da6b2d556a9465252884ddfbbd5031485ba8da25b6907a3727c74e5a42e16833f61125bfc8db1ed272a4dbc6e75fb5f72a60a57d96452151ffdbf6c7f7fe74dc9fc330c9c8c300a2ebaa53f0b30c254038508574c58807ccdbff44c621fe5b4efc402d61f622e03b15fd7a079ad2750839766b22def8c8471544ae288035d7462ffa0391452d6fe07c072ac21403b27c58e6585d7d1303efa4e11c1a39da2751fb979e2f1950b835d18293ae71cf7804063454c46d4b6a6c40bbb12a1c1a5f6641eae39f0ec5caa2fa82d9a53ded84026218f715db381c3d1a4fcb2ec14b28be1b529c4e2dd81f63748d8f1c022c3f64ef6ffbbeed7e7882d3c6dc5ef9e44dbef4a205c6b5f723e26bdf94802be0c4e9910ae64cf672821ca924f2066024638b49e95c5807e5f8e5f3893aaa23c52a1341be1db49d38eb5e1bcd6009d9f9f2265cee0f5743b959b83fc7a1eb05043ff93ff31f674523d602827a32c0320111ecbd011483a58b8d9dcb50a894fe44d9b6fd9f10302bce79eca4b34bc6d390257dbd9925c35511b5927944888a1df550c154beed2178cec509c6b92fa3efe44087eee99f67454b24c9907e4c20ad4587c5f7f393bc16c299ca32fbd5a3a8e85c17d9e466b18df2f892a3137fd82161e0aadb5ae834b96d5d362e07d4ab9c3219e216a0c1c7645871f20e9ecf97026b96d7c4aba8aa3aeb0dedbdb7b972eee51d6abd300020ebecc39247c094634f0ec1814c0aedb2e56fd0c2e59dfc60843330a9cdb3fcd1002cac9b097d46a5e146e039c7b32535368df5790e5cc9df298c109cbbd232e7407d346089c420b0b0177da4293f653a015121b964d209d981d02719646d488afbaa48fe866075ef1164496c949726cb1420c3b4651aaaeb766778cfc8235fd90c49a1ec907f7a3326898750dd6217bc097762b46e6f0b7f8991d2f0858588b5e57871b0b41aaae2b0152479d7745e64ef4c17ffc8d5446d1e0993830524558adef6fdafc7ac0370751ef0968d450644aa553a0dd6523b000ef8a70fa5deec2e61294ed93e59c9e9ae4eaf71c96ffd3eda674715d32bb908722abc926f62dbc2faf320df6f50652a4267ea249f11f56d6c5558044df8eab07dae74036b2faafc77b011cb44be433a4e093592c2c4c8d7091c69c7ebd4ab07f10a04fc8c6401530d55f169069d79cc0c68f0ff0cb7911f66b9ff072765221a95fed571462f051a3124338c99f85235b946bab9244ab93ffc7dc7f2227867d51374ef9356f1f02eb00c05b73e9fc5ceb1a07aba8ee5d7fc11f7a8bdb9f188532d18afe43eedba5a756230a27c0f5b1083c88b12e3a5ecced9bb7af32ae7dbdce3c101e27aebf704f07ceae24f706a43b2f8c091231654815958e2a2631372d7009b9cae30b3085c565fe8b3515edc59f65ebafcce920064fd263315936efcb9cdefd59d5b68d6438aff30d8931f4b674df9efb386021ef18494bd52da45f30e139e7ec30805c2826065e7fc17cdd00b125e59505e54636469d4e73fd21969df6d67eb4c33838b2c2f7a0f7865ba6bae7287e1c9a8350e3b3e1b42ae21c00f67b22ad3ad300cd87c0b2a4b46c7bbc97228577f227c34e1eb8a02e6192a9559d768e9f0886c201cba6ba819d06f681e481bf4aeb7467c2626bba6851313077fee5ac13d368dc0cc187945583281daa1396aaabcd923a427bbac961c947486e9dce1abe2ef7f2c2fe87922b901549fd6ed402d2e967aa0b70c24b4314ffdfa5ce0aa2ac888b482ef61cbfa447322dd47996088eb7910476f11d4b81457235ddd65ebc94e3f825648e5dd6ed6e72f3d51accef268ad11baccc590a1fef8add88d6a70e17df5d8dc8dfce8824485ffdeb5682d04350c080f4a6dd89a72bd4f53cede04ba6dfe2f4b83c58db7ae25989c02182d1cd9b4bb31c266947690e3a31fc3ded82f19512b83f7092f5ffab2fe87eb52cf9c4e72be257945d2642e993eb26c47209d5aeb512630589b9bcd2bd76dd0a8e09d7cb24c35f826d7d47005a41b700f5320f03a1b48cf347cad108cb08dd48b574bc149ee1fe033d1794c7f97a4f537373f1c030829bf59dfdf23b58dc7bba2239c64063a386b2b664015dc7abb75ea6130c184876acf67182a6b6feec2c80d8025e4566d8c7f005974b7fe64aa3074b1106c2a67caa2e474045a91667e6e612e76db32e46f2422a0586201ce0b19356ed0d4e39909bfbd417a844e69171c3f623173a00c2d5de655ca24a79971b5b503c9b265c0106ba0cdc14ec41c2badc43dbeb73c912faf80ebc0cc41949555d00803ba351d91744c65c54e2403ef8610d7c7e3a0534a757c9dedb2d5f7f296fef04e5f577881a8daaab96146660fbe7ea579eeb93fb58a992d82dba044414c3d10cce9af35d86227a0e64dd5bf10c9e29635ea986f2a840e4fbf5b314dc0f586", 0x1000}, {&(0x7f0000001f00)="f155c69ceb5d1dbf143b60161e8eb7629937e914495cc6f94d4be79e238c1324d12756f3d6d47f108545980491df0fe70700ad918b0d9e3e7f776db023cebd5c71173aa5f946b1a638d906e49a1f6ee990ce8e854e7b9098cf17505b500c10665a5e13579d445959b6a1a5f859639c664e845016e37173c98148c5f8c6692aba2822fb8e29e1993d4684e00b163eef43c2ac2f214059e1187222fa91988e8cfe3a92d9148ceec2a8fc7ee54124c271b0ccefe95605ee63befcfc9059f7f254bdbb7ce0465dfee272b1b3ad5ac303265b6766c3ee81751d77b09a34edc33912781d04c37a1850dba8733c475a7a5ae981a5e0f73ef69d31c9", 0xf8}, {&(0x7f0000002000)="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", 0x1000}, {&(0x7f0000003000)="455e2b90f2f743fd6395714c541535bdba08c073faa649d343f4015a32de68eb42b8ac6722ab5c4b423f21440ffaee9f954848950e765a10b3122f259e3ba6d26df6c35100b33b472d002aec5f0fccd33e11ff1f5905bea33c4e24ad79f1ebc25d48223f0723a038e9b3dd", 0x6b}, {&(0x7f0000003080)="7c3a36909400a96912170a507b3c07947868237514a32f46cbca29bf22e146c69625cae8a948ccbedc60521199211b30c401737d791fccba3b6933f3beeb188e1a11a15333a97b58ad737d6d2eac4078c61be6d69b3f23f5adce5fbcfb85950a2dd5135ebb012f17e56d509e0e652b581f7a30741f0f9af93e0a49529e3f22eb07251ae589c51e7a43341de2a4d6d0fc1396cbfe840318275882e8da3db2bd2bdfb999809ab47ee80ed6d2f3080b9c5d6d474019ed3902e503", 0xb9}, {&(0x7f0000003140)="0fb1dc4aaead41d222a3345ef9086d99d90cf9590f0e4421e75a639c619e9b1a55331b2905097ed685cd1d3c880a06189bc795fe35996992402255984b42910057a87163725a0e8bc786b9b61962dce84b255cb22649b8cf4e6e8804", 0x5c}, {&(0x7f00000031c0)="c4a8c0431ee5524228b8956ee90f13ccbe5746fa4583bf96443ddc1a6b08b286d5903b5d9cead6b91308fa2758289af771d9e2c26fdc15340eca7e12d5b2c527dce456d19b83a4a4730de7eee139a517f3075de7695f58c3f906f0e6d64cf696d2b28aaf30a576603c685b98b4c00208e42d0c452b1496d95e6522d37eab7b80921c8fd02ccd70733970f25d86bad39a921bdf59659d106f4d9269523e", 0x9d}, {&(0x7f0000003340)="0e532a70ed611591e5517135a19213f715ddf3f69ea3894ff00aac85d49712c2d010bd872de821f36da3aece94f248a8cb00107f000000020000000000000000000000000000000000000000f8d8c81e6d193dc3f12e9549acb11ec1ffd8f956640f6554bee7cf05c88077204ab620c8908723bd0dd9cea265167c0e95b11a3324d78ee757742ae583b258d2b9add4d883fe3f72", 0x94}], 0x8, &(0x7f0000000b40)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002000000000000000010000000100000092856c59916c9d8a37b7cd4eb9fc0534a6eda509d0c86443bedf0d7485d14b7031daa76e64a3f25ea149aabc9f445f274b193a18c2438588180acc832a09c015d4a125a414", @ANYRES32=r2, @ANYRES32, @ANYRES32=r2, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYBLOB="377065e8a64b13b906063f570036297accf876f02420705b4086cbfa0d22a48ebe51980d08399e67c93749e938a06d7b2fabb1b94102f512109ea207a65cf15fce3c38bf760bac0b8a9972b4dd6b8ac33192ac443f799956ab46332b9f0e4d643265a2554cbc05c50f93f967fe1789f47c3bd6fc9a59f4bad19eb141a9204bc086da178b89daffde459042897d2b1314f4dc", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x60, 0x44010}}], 0x1, 0x4000000) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x8000050, 0x80000, 0x4, 0xb47, 0x9, 0xffff, 0x80000001, 0xffffffff}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f00000000c0)=[{0x20, 0xf, 0x0, 0x7ff}, {0x121e, 0x0, 0x0, 0x7effffff}]}, 0x10) timer_create(0x1, 0x0, &(0x7f0000000000)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x5) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000240)=@l2tp={0x2, 0x0, @initdev}, 0x80, &(0x7f0000000980)=[{&(0x7f0000000600)=""/102, 0x66}, {&(0x7f0000000080)=""/19, 0x13}, {&(0x7f0000000800)=""/21, 0x15}, {&(0x7f0000000840)=""/128, 0x80}, {&(0x7f00000008c0)=""/182, 0xb6}], 0x5, &(0x7f0000000a00)=""/237, 0xed}, 0x20) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = getpid() fstat(r2, &(0x7f00000002c0)) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001100010026bd7000ffdbdf0500000000", @ANYRES32=0x0, @ANYBLOB="23de00000000040014003d"], 0x34}, 0x1, 0x200000000000000, 0x0, 0x10}, 0x0) getgroups(0x1, &(0x7f00000005c0)=[0xee01]) r8 = syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_G_TUNER(r8, 0xc054561d, &(0x7f00000003c0)={0x1, "16809f2e04865e4f0eb0f0a01415a98efac4e085ab9eeec24bf1362d808125d2", 0x2, 0x800, 0xfffffffe, 0x140000, 0x10, 0x3, 0x7fff, 0x5}) sendmsg$unix(r3, &(0x7f0000000780)={&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000500)=[{&(0x7f0000000380)="9f6970686f25a30d4cb265f0889f4dca1412c3ae610b692a5baa2d71644fbec448c0daff872360bcf4a67a461363f8c282fcf8cfb56f298b2d03fe9d69d22fbe0d2b4616657d4542f89be1fe63feeaed2a0440c75d93071954e8e0c95b27e8ab1a17ba80ede109c06e3ad8411c6e1c61824cc7512ef9088a631a0888495151c471f6894e31e43e2d44cec7dd96aedf07dac696e122c5471a0aac5acc8365ed8ec66a2025f3f8c1a71e23d91dd4b4a0f230e4e4e03020a812d74954a9e37da2e1f15250d94d7fcb7de812706ec3cb1e0e12038ee21f77bd", 0xd7}, {&(0x7f0000000480)="9b5c7b633af9d92e33432634bfd3fc8bd34bebd5880eaf84fc7a51ac50c1b6dc59f58465821d78528ee560d358c37e434c8c7bd843fb5c05d2ce966876dd17c69e01a638f3bfd2ab0f06f387aa9bc10161eef1b395ce640bad29f935", 0x5c}], 0x2, &(0x7f0000003640)=ANY=[@ANYBLOB="00486b6941a75a08032fc1a95d31b15efb01466c30d6a5d5830381424700000000000018f5c86420738b3dbc67e1e001be1e135c56beae42199e2ff69cfb5e885a04f951d09cfcb1f2add67277da389a1098cf123302237fff67a4711f2cb66cc8c768d47a5b6a208d89d8a19310b09715e84ff09d3cf6b201811f41a19d014a100722261751a1d7829b18944760f4325d32e18b877af9410688bac3b87b2ce48281", @ANYRES32=r4, @ANYRES32=r2, @ANYRES32=r8, @ANYRES32=r5, @ANYRES32=r2, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r6, @ANYRES32=r5, @ANYBLOB="6c601eb2e80f3e35d756bfbb9f0dcb2285c6cfcbded74bb7787ba7803c53e2cf1fbe0a0f9eaabfa2b9039d680d5f05", @ANYBLOB="00100000000000010000000100000000000000005b", @ANYRES32=r1, @ANYRES32=r2, @ANYRES32=r4, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32=r2, @ANYRES32, @ANYRES32=r5, @ANYRES32=r1], 0x88}, 0x40001) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=@delchain={0x70, 0x65, 0x200, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x8, 0xfff3}, {0xffff, 0xfff1}, {0xfff1, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x40, 0x2, [@TCA_FLOWER_KEY_CVLAN_PRIO={0x5, 0x4e, 0x1}, @TCA_FLOWER_KEY_ARP_OP={0x5, 0x3d, 0x3}, @TCA_FLOWER_KEY_CT_MARK_MASK={0x8, 0x60, 0x7}, @TCA_FLOWER_KEY_ARP_SHA={0xa, 0x3f, @random="ecfe25a4dcac"}, @TCA_FLOWER_KEY_ENC_IP_TOS={0x5, 0x50, 0x6}, @TCA_FLOWER_KEY_SCTP_SRC_MASK={0x6}, @TCA_FLOWER_FLAGS={0x8, 0x16, 0xc}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x20040001}, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)) rt_tgsigqueueinfo(0x0, 0x0, 0x30, &(0x7f0000000000)={0x7, 0x87, 0x10001000}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'geneve0\x00'}) socket$nl_route(0x10, 0x3, 0x0) 1m31.505416178s ago: executing program 7 (id=435): socket$inet6(0xa, 0x3, 0x8000000003c) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20940, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000002000000000000000000000000000500000000000000fbffffffffffffff0018000000000000000000000000400000000000000000020000000000000000020000000000000000000000000000000000000000000000000002b70e7129775965833daa0919eba03fae67e5e095096f1c71ba97610bef7b0a3be9"], 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) 1m30.035639425s ago: executing program 7 (id=440): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x48, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0xfffd}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x48}}, 0xc044) 1m29.539598863s ago: executing program 7 (id=441): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000980)=@newqdisc={0x45c, 0x24, 0xd0f, 0x1, 0x0, {0x60, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x3, 0x1, 0x8, 0x2, 0xff, 0x7}, {0x4, 0x2, 0x3, 0xa159, 0x1000, 0x7}, 0x3, 0x8, 0x243}}, @TCA_TBF_PTAB={0x404, 0x3, [0x4, 0x2, 0x8, 0xfff, 0x0, 0x8ba, 0xa1, 0x4d91, 0x7fffffff, 0x3, 0x0, 0x7, 0x4000000, 0x255, 0x6, 0xa, 0xd81, 0x3, 0xa, 0xa, 0x7, 0x108e, 0x2, 0x200, 0x1, 0x5, 0xb96, 0x7, 0x0, 0xffffffff, 0x200, 0x3, 0x3, 0x7c, 0xfffffffc, 0x10005, 0x1, 0x2, 0x8, 0x6, 0x1, 0xa, 0x80, 0xe, 0x80, 0x90000000, 0x3800000, 0x0, 0xfffff30b, 0x0, 0xf5, 0x81, 0xfffffff8, 0x80, 0x80000000, 0x3f, 0xfffffbff, 0x36a5, 0x7, 0x6, 0x200, 0x1ba, 0x9, 0xab, 0x6, 0xfffffff7, 0x6, 0x0, 0x3, 0x1, 0x963, 0x1ff, 0x2, 0xfffffffd, 0x6, 0x9, 0x0, 0x3, 0x0, 0xb09, 0x3ff, 0xfffffffe, 0x8000, 0x4, 0x8, 0x5, 0x101, 0x5, 0xc, 0x6, 0x9, 0x3, 0x1, 0x8762, 0x8e, 0x2, 0xfffff76b, 0x1, 0x4, 0x4275c4e8, 0x8, 0x5, 0x800, 0x0, 0x951, 0x5, 0x6cdf13a0, 0x9, 0x3, 0x5, 0x10001, 0xff, 0x80000002, 0xed2, 0x5, 0xfffffffa, 0x2, 0x18d1, 0x0, 0x3, 0x9486, 0x80, 0x2, 0x80000000, 0xdb, 0x3, 0x80, 0xffff8000, 0x5, 0x7, 0x7, 0x1, 0x2, 0xe, 0x2, 0x7, 0x2, 0x81, 0x3, 0x1, 0x6bf, 0x7, 0xea, 0x4, 0xc2, 0x9, 0x3, 0x4, 0x283, 0xb, 0x7, 0x40, 0x7, 0x1, 0x0, 0xff, 0x7f, 0x8, 0x7fffffff, 0xfffffff8, 0x8, 0xfffffff4, 0x8, 0xc, 0x96, 0x6, 0x4, 0x62cc, 0x2, 0x8, 0x2eb7, 0x10001, 0xcbf, 0x10000, 0x101, 0x9, 0xfffffffa, 0x1, 0x8, 0x800, 0x8001, 0xf, 0x5, 0x8, 0x8d, 0xffffffff, 0x2, 0x7, 0x1, 0x61, 0xffffffff, 0x494, 0xd, 0x1, 0xffffffff, 0xd1, 0xd, 0x9, 0x1002, 0xffffffff, 0x6, 0x3, 0xfffffffb, 0xffff, 0xff, 0x5, 0xe, 0x401, 0x2, 0x8cc5, 0x8, 0x159, 0xb4f3, 0x9, 0x382ae49b, 0xbb, 0xffffffff, 0xffff, 0xdf3b, 0xfffffffb, 0x6, 0xfffffeff, 0x8dc3, 0x20000001, 0x5, 0x9, 0x2, 0xfffff801, 0x8a, 0x5, 0x5, 0x7, 0x7, 0x0, 0x7, 0x1, 0x0, 0xffffffff, 0xdfeb, 0xb, 0x77, 0x101, 0xff, 0xb331, 0x9, 0x6, 0x9, 0x7, 0x5, 0x400, 0x10001, 0x1, 0x800, 0x6000, 0xfe000000, 0xfffffffd]}]}}]}, 0x45c}}, 0x0) 1m29.007501564s ago: executing program 7 (id=444): setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) linkat(r2, &(0x7f0000000000)='\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1400) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r5, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r6 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x56, r5}) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_inet6_SIOCSIFADDR(r9, 0x8916, &(0x7f0000000180)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2d, r7}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WOWLAN(r2, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, r10, 0x100, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x9, 0x32}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x408c0) syz_emit_ethernet(0x7a, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd61a7000200442f00fe8000000000000000000000000000bbfe80000000000000000000000000008a0c2088be0000000201009900000086dd080088be000000031c0885140100000000007b40080022eb0000000223022309020000008000000300ebb41b"], 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r11 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r11, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x1, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) ioctl$KVM_RUN(r11, 0xae80, 0x0) r12 = dup(r11) ioctl$KVM_SET_VCPU_EVENTS(r11, 0x4400ae8f, &(0x7f0000000040)=@x86={0x0, 0x9, 0xc, 0x0, 0x6, 0x1, 0x86, 0x2, 0x1, 0x0, 0x2, 0x4, 0x0, 0x7, 0x8004, 0xa, 0x5, 0xff, 0x3b, '\x00', 0x8, 0x7ffffffffffffffe}) ioctl$KVM_SET_VAPIC_ADDR(r12, 0x4008ae93, &(0x7f00000000c0)=0xffff) 1m26.927966912s ago: executing program 7 (id=448): r0 = socket(0x11, 0xa, 0x2) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000040)=0x3, 0x4) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f00000005c0)={0x2000a210}) socket$qrtr(0x2a, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000100), 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, 0x0) pipe2$9p(0x0, 0x81800) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r6, {0xee01, 0xee00}}, './file0\x00'}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000a80)={0xa0, 0x19, 0x1, {0x8, {0x0, 0x2, 0x6}, 0x38, r7, 0x0, 0x6, 0x3ff, 0x9, 0x4, 0xf8b, 0xa3f7, 0x7, 0x1000, 0x0, 0x9, 0x100, 0x800000000000, 0x2, 0x6, 0x3}}, 0xa0) socket$inet_udp(0x2, 0x2, 0x0) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r9 = dup(r8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r9, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x14) socket$inet6_tcp(0xa, 0x1, 0x0) r12 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r12, 0x11c, 0x4, 0x0, &(0x7f00000001c0)=0x28) r13 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r13, r14, r15, r16, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)) r17 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r17) 1m11.807224601s ago: executing program 35 (id=448): r0 = socket(0x11, 0xa, 0x2) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000040)=0x3, 0x4) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f00000005c0)={0x2000a210}) socket$qrtr(0x2a, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000100), 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, 0x0) pipe2$9p(0x0, 0x81800) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r6, {0xee01, 0xee00}}, './file0\x00'}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000a80)={0xa0, 0x19, 0x1, {0x8, {0x0, 0x2, 0x6}, 0x38, r7, 0x0, 0x6, 0x3ff, 0x9, 0x4, 0xf8b, 0xa3f7, 0x7, 0x1000, 0x0, 0x9, 0x100, 0x800000000000, 0x2, 0x6, 0x3}}, 0xa0) socket$inet_udp(0x2, 0x2, 0x0) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r9 = dup(r8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r9, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x14) socket$inet6_tcp(0xa, 0x1, 0x0) r12 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r12, 0x11c, 0x4, 0x0, &(0x7f00000001c0)=0x28) r13 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r13, r14, r15, r16, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)) r17 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r17) 1m1.892877488s ago: executing program 6 (id=548): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x20902, 0x0) write$sequencer(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="37645fb875da63608c1e77346a72f4e321e97d8f77e24e30ced806d7e245e378778e4dd3340277c9f2dc70a9817005e65cf13d4af42d3dde670472519b0d39fd13e207e01349339c13340aa8d516133a7acb4b126b78bdf19d38632254073747cd37e17d5ba9194247660108e37aa56f014a9ba283a05170adfe"], 0x10) r1 = memfd_create(&(0x7f0000000600)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x8dy\xf3\xb2\xe6b \x00\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\xfe\xe6\xd2SLR\xa1\x00\x00\x17\x1f$^\xe1\x00\x00\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\xfd\xc7\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x16\x8e-k\x12\xdf\xb9\xb6Pr\xd4\xb5X\\\xdbD\n\x03Gh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba$v\x8e\x9e\xef\xbc\x86f)\x01\xba\xdb\x9em\xe9\"\x03\x933P\x9b\xcc\x9b\f\xa7\x8f9\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\xdbU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x1b1\x9c\t\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x13\x9ajWt\xc9\xecd\r\xd5)\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I\xfa\x12\xfc\x96\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8fg\xf3\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm4\x19t\xbds\xae\xdf\x1c2\xf79\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4\x83Mav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xe4', 0x6) fallocate(r1, 0x0, 0x0, 0x400001) bind$alg(0xffffffffffffffff, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) socket$packet(0x11, 0x3, 0x300) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x20, 0x1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c67726f75705f69643d3759d3b0cf0c9042c23ec096cea4c8e82f31b881b03f520f87210ec7a170ff", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(r2, &(0x7f0000004280)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r2, &(0x7f00000062c0)="23db5037805f177d136115e6a1a5903469af39c1fb9cb38215fe64cff9f2f0444a57e22b0cc5cb4f74c9792365400d9e1c68539ea5eff0a5ed0864814d39251bee8dfea69aa052d900bc0c792e1c9752b7d3a3222f6a1ad3e44c1f65617b128aea51911861ca36ba7c96b96b2fba0fdaa49ffb2612f3e81fe565327dd9965a60046442c9dcd0d552c6a00388be3b438a08883c7349761531880294ad9887db97d8c2f74921c57910cf1f5cc528e17bd5c3746b6202f26d621535aac5f7872c2cb3295e42524b5acb249b2d1ac1b53a4e31271decfca3fad2e2f740768adf00875c18cb7d115150f83ceb73f77a1f61f1666c2bb9f6bd9f0fb55b3a619446e32bae2a1d99aa49e5f3822e048f8be44b707f2db10d7916ec9a10a695d573d871cf24959c3d15e61344a68309d186956537c6ea8532fc2e1c7649f8409d8dcde4c8ee1530470ac9c870f9f1837574e444ba6addf5ddb2dec67c0e76df79f265b403818dddb4efc27c90985ed69a48b12056e548f9c99edf80d2b195d26acb1127661727a0600257f4b2546513d03930a0638a71bd3223e51fbb75c832ef737907f2f4d3f0505f431ea02783c798b5c4579c99961fb73dc623a0d99c1b306435464d413b537d42c6444851b36482597140b22fbc0ebc7e795b2f96739bf139f5823bc869ede547da4f394fa1b1787836095e1013264042e53d5006ea059d0488cb2f5ccd44b30d25ea53c2dda71d112d7d441dbfc9f8462c99c098b1958c80b237d83c32f2759c9a9c081d7d7666a477cfda59354309b09f2a8b9f6c3077b0df1e8d0c71ac07232de4f437107cb0eb9b47b2267efe31938a337cf11cadad72ced56895bb14763cca5bdadd245d801e829a1eb3bb4ed851a345918efd2dcf8d38f66badc773068e6a2ef59b2bb838abd8b043cf6ac54550f3fde1bbb9e761095e4b8ef1891757d376be1f778142610c0acbbfc697f51fbb7a1602ed46e82813c74f41ee2bae818174809f3692084bea7310ebec3d6166702ae62aad84313e19b4d145167185ea8d53cb21d099fb592d7d7f8bc305dd375b5c0cd73be44f49ff53cee220085d4706bbf50c6f63b02e7e805e8fa4c73046a57a8700886da29ea53e5a316e7b011c44a0f7be5cc5cb5641ba0069ff591eee18966c7f005ef40046a5fe2bf325b2545b009867761264aa9611d184fa372ba3c5c33d9a50717210f7cec7f6dc4418a87a797eb6aaf6ab3892bd3f559547c88d8c29646c8173fad1588f52beb34ff863be65e7ec1598cfb465f270bd5532fa7035aae077eedbc846058fa19f58ffb1cf0f1863f6d33f2e5c454d18b66be766ca369af2cc9656fa34c6c10e4d4da44ce5e2370aaf60c4e130da331d3489e8f44c600246323409fdd35d11da27128c9d64be65dd3a90c1546a6eb9185cb6d3a4a9cfad0e41ea03896fd2346f745eb3563d7a79fd345b037c040e56f0677840bf9b0d295bcfa98b931464c5ce9fcaf745720deac2d8b4edeffc0fe6f089ed7c3880959fcf8e31f7b7054bc4f5c9d3ed3f66c968d0bc20b2d66c374f030f3f1965f43a98519e527caf693362412d523eeb38c8b016ff77f78f833d7513e4b5a53d5ed5143916673f822ceac9967b8788bc6428283181eaf8d99e48286aacf4f658a903e9f08659450f7f9483807c2e013a1d9d199f18886a8cb4e14d41c71e5731455a4394551281eca12a1bb6ae717f5da2949175d0f1f3d718b761dfc1099c7d9d8928c899ac8e936e69d19fcbfcfdee83b68ef8e15eed41a8ac0d54aa92d7d2ee58bb4799f378225ec9ba4709e5ce2b77208ecc85c22c64967a9ef3360c54d311b8917ceb7b432c90cc5e98de9327c1400f8ec89261b1d77d8874b0bbdd2c5eb59df415705de52b08b0e12c07fb7367c6d461c19f282d51e482cb4fb9ceb0249ac2d6400ca170fbd6c0063224179c616bb030a5c10102aa2eea92f1e6f5828590b250b09e6d1a9535c298a68160b7c281fecdd295dc3396c4e6eb3395d5a677d5fa95a732dfdef81f4346545dd1a74bb3aa9b516699bdf0a59165077ab459a5ffe0dbb3ef8afa7a8382a8441e0c36ffabbed8f93f4bbeb97e5f6a704bf63a0de9ccf8fef643ebc530a80920931002003b027014de317c42f861d98ef4fef66d232d9706e6bd263347384dadadaa43a7e106bbb21bd822d468ace171b3f04b996112135b63dcbd612b5888ec40da583ab549c340ddaf5d7406c3e99322c68874214356c1fd9b5f84348e629cc3487a901d1b7a2fa531b1509ac1c93de3da9f1c3773e3a2aba2b29d2419f240ae6d24ed9f14bf0b9b0f1e740a2db06dab64d6386f950bff4e4c94160ef4b832bbde3af4937b7528658b5c16a51cb22193fe99385721ce5b048d9338e289dcb40683140c413eca52c8e4b64b306f47569477379c864cfb3aa3e349262407d3935ab9a0916eb0f6db2be71a7eb8f9968dfac44995d5bff8ef617fceeaa448f5e5f8d4b39e3512fe7ae9ee1d8a0d5912b6148969ab0325f3f76e2340fbd67ce156bdf638140b3ccdb08e5049db15957915cb05db8901249b10c59cc5c3ff836290e3334eee2df387e44c57b4d6198c3749f5dc57f6c3de115ced6b43cbddd762b58f1fb40b2baf3b381febdc073142e30d2e9a1a69e8d86314221e540f195509d223b206173dc5406865d8064817c30c284c034035a63190ab86df3bae4168c58e01d2251748fd5d9d610024129e83a5730fe83cf0918790e6854ab765c78649b91c06655f0cb9e26d8432df78bbadd99583b6a8afcf177ed6f339e08c0b36a16c6d31d8a24cb6f2bc3ba58d7711b6f8b988dc3e3144be619548457d4f40509f17eeb186cb93a2928ecb951593d1907c8bbb9f4c8999caba3059c8e73dce54ad6f87bcd51d559f7759902b14e68d3b845c0b179b38f4e6f0bd3a89cbcd5ebed9972102048647da1eda5c8456442369f4ae871d4037ba26f27d27371ce57e23adca5af8dc93f934f2ef8d69ad3b2db66657b3868dd839c2b522f5461f24407ef091b77242fc70a48b7eec45f3bcbcfbc6bdc36e4b67295020a345233a32a0a0af4d03a53ef67e69716d5ae35342722afbe7558946475a9ebf5b39c18558a0011f68bc8a78590b0cb63618379a512790c42d94bb239dd3ef5b8d1036cf0391aded8802a7a447c38f231ae611aeeab9bba44cd14369473758b64108d0bc9b6bc9e9b497c2d1d2acbae7c620a55c226cf371331688eaddec61fe961c5fcef71dad45820ed0ac8dc7641d82150f1318ac15aa41e7be585b6a50da1b3cd95239ee61cfde15aba80ae8ebc21ba4540883c6f44cd35b6b97da4640c97f5a2b6efa8d184fec823abc754ab8a0db6c45c2293e90d9c154c4a3e0b9ec2b6113ce6583b80f0d234dec9a9815067244733e2134b9ba93bb9692fb44200bb5501bb109f2401e8baaf0115d795bb0346dfafaf953bed8e9a52a5b9b02d490c55fd89daf311ad5e08b070a9571f696d6df4715c8b69b840e4e03d6f361326e20d9546c47b3a63163e7df9bd260621358c166177ee7c69ed63a8c43dd4a78543aa9f922c0ef527f4aa61ff65bb14595f518412ce25a1e103df89cd4b363593da16c11d80a23a9b5ad8e3a7be8f697cecf82c8fbd889a4f743c839b67f7ba5453b10bbf59b1e4f4e821872c061a4125c0c15c1ca5164efe61a58bb54dcedc849800a6021a448d4660c3b85e2362b7cd8ce95156fbf408a09a30a8ccfc3554004e9f9a35382907eec00617e2ae1f8803146bc8c28b4f3bf3c6b183ae9248e7f05c4adce3e0b7ff29252b5be9b19431e3fe612d471f52c5c34cc12c83049189f4d2e5ca516df78766ba3449d07ef9436c68052c986d9dde8802c931194e2ce34acb8cc26663a09348b15c6c145d26306bded0d1f482803ae6dee26562b03fcb183b69ee4a0491e8776ecdadfca395cb4eac2948d4d64321a4e669f2f663eb54f05f12ed9c685835c3e79f982152dbe701073b9a4ab2932b46ee2424a5e18bbe5f25ce0b898ff6937927f4670defe430ac86021226ae055daf39b535cdc0899fcc99d15e67d66bd2dd89bb21b8d2689a8af10a1b0bd44103c469922c36fc0228d7b6febf5e366dceecf8bb1db385c8ab95d86ff09b76c2fa6282de81fd6864c495a4c8295df61a2548e1b81c3e3f30d7a41216801d6c2d1743f66ae2055756083e8bf403d436b8244ac214f4d84a693d13f299ba267401d094f2df70840e8a980622794212f0992ecf5a47980ab2cf7d5a6f12b0a489af3c3c847ac59bc89f36fbb0e08bf283b68213a17de38b3a45eade6f0b198def408f7711c16367bcc0ded794a9a323c7e7f07fad96ea9c4d7344c26e43844a27c21076b8d7cd07677602d91eac825eb5fd0631755c2dd1dbf7bce3eb3c3f7377fc6080ecd0b894e29769845725943e25932d4249abb4ab78d4e2ff2e2df42c8d884cd6bd13886cef080c6491c217abae0eec6e9d4d49eab6657f15cfd38e6cd6d0bd33198c4685ab302d0f46e42f4a5d5bb7d2840a0a8817b98a856700d4de74351896fe7d7d5a0d1bc57fb4c828aa51f9637807aeb905780f239527ed4affd83f68be8b7ad1e10d9e797ba39cdee24f7be0a0ab0ac22ea3968dac61eb4bdd522c9ce570edf63a439abfd9954bf6a16c88d86157d05477200a83255cde279b454979cee4de00e81cb44acdc4295c877566a749ab5b91d250f03d46ecc14210c196700338eea028c930ce104f20a9e7fabb0ad1d314ec1a2d97d1d1b9e09114dee0e3e513eacede01971ff85dc98634156073df4e8acd6c3aadd615adaffa7a81573813bc4ca21886ddd532021bba5c84b34c34665534db48d61903a03c1cca4ed955ca92c1e33b7664b494e3db6d1e637a49e537808a2669ebeca301691acd4fab0af197b9c7db01b7862466b568ab3a4712a25210264fb297a6b679dfc3fceb65bddd1a23d5b507a0d6da83d73b716d971c5179a92e57b9b93451eb943845a549de737f2d082a83682c32649b4941e787758ead9d2c256b2b4ed1e0255952ce83cccecc39e5bbdd38490f1960b26e5379943be3d9a64b5149c84d577e5fd099560baa292befa06ce9065fb03ed432a9e055ca4ad0e952f8368b3d230fd5239726f79f4c98a0b4a9648382b245d324cb61049562f765f923fc657ef36747658494d78590a1e27a2d09856acf50c3b26271c6d5aa96e8ff9bdb9043859665e21ea53a050c335cac414bbf27b0328ac2c7450acb26b093bf232358afd1135ee50ac3fb26b5f0256ccdd37033c8a59740607cfd549d4c6540afe4a6b4425ae1f633872dcfb5da8d0547cf0c4888817b71fbc7c45b2a641e9c1a76b6a6be124402422ada35edc02ed997d6b87b361aee95a16d2c528d89a52fe40dfd83434969bd86f02e63fc1ae72941209af39a08cfbb4c320bc47d853f5dbaf0cd60ec54608aadbc382fa6b5cab3e9cac57bea26609f4c79f6a6b4eb4a9336fa95783b0c0c366f36d5d6b8310b3cfdb800207919a131bc7f984f7fa11fd0bf2c89e060e9d1286e453fe97363ef72bd6eba29a85ffeccdc3bee72e12284333a5a40622c01619558d2750fc45abfa22059ebdf743f8e50ad29770d19f84d8a34232d6918514769b3bb2a1ea5e59e9556332ba669675764458e9349a1835c501a93e91dd3b31018979880a9913f54ec1e8526b8cffcb776b97fbb9424faa5c5eb60d2ac74955bba4b5182571d0d9f84f0df1baa722b20a78c9c0011c667f688b58489c9e450d83e40ac5eb41c5564b6d76a226448abe4a3f499927074125aa9c0e7e704c36df5bb110a0f15f8433a470e81db414827d5ce21ca1da1c8d51d746d1e1ca110127c15e92afd75d3cd05ce0b632cfa03745de3cdd4b57373d46676583c89f045c26c6fc5793e5489555ced08f83ba351135834a2028113c319af30cc85bc01a7f8208822d7d607aed0d2e12c80aa009100441b75beaccfe0adbda7e8bb870edf4963158794c8c3a5baacf6eec7b5efaefb7602dab8409d161beeb281cba21f1da0ccdc092d0433fb940d79699ffeb87ea775829a6e7e3b308a2ee0b7aec8ac5f35eed61be374c7c77196f7119a8882deff68230f461cb917b0ccb2b8597efcbdd1003b7b77b2c601ebd4b45c35b8426f7b9138ab3df0ec00819604ab8e1e64cf2aa2282b1269585af127a268cd207f964edff172e555398a16df44bdc52889538c3a27f8fbfffb61f7aeb55b259952bbfea81d73058d8b0f78ece9dc08e660437d21d4e3ec38b19e5afda7a6e33023f9158db8a1c14dabd9b8b307ddc66927f7b19df5e0da2237d98ddd890b81f1963808977d02198e8ae2e97419dbb1f8e51cad36a3424b955500fbdaab6ff8dbf028708b1f951fe43864b59b6c2368b816c98023d4480a91b3f1059e9c214bf55a7f8c7da907f79ff5568fd787d3aa022ab9d03cde551f7e3295f02c4f3aa37e4cebdd968c0f82f09eb004fbdb1a4ef3a0d426691bde3964c29ea65622f5d3ffd854053545ba1ec164495e4bef4845439c058f9438d13be7922b656db499c246ee6176a15b97e6a68e42f0c703033b699504e1f92b43054c7237199bd013d96faab47433b6b3f91dc66368706439d4ef7da3942ce8b9c1c9a9d0643fc4540e7d3f1c3821267e866cacd3e904be9f9df80381eec09eb2b0d745ff03ffb199b917a14fdd8fbfbffe8bfb0cf7023aa7183301a8a41e7097ff9f5247f8b78f7d08bbfc596a81047807cf0929677222e7e9e921b294e04088c3746d8dc19294645f1c093a21b4c5e6d92e54dd90465b11dd5d9d42af849070edff4ec63970f4088daaa33afdebb28d01df5ee043a8150ab1b25d864ef31e20c84696596cfbea92d02ea29c4a3933c41ec68aee7d68d7eea7f30d8920e14e62be42bcf856d7a58f46fdb2438b023e974f77281c5a462553627e9614504cbd3f1cae6e0fd9f7e89d9bce48946d0508616fbe542303dc542982c61d7bb4afbf3e76bf1fb2381cdc99f2175ef944dcd826aabdca2b7678db5262733c69ce504c38e7deb7adfb9b6d8bb00d8e4251e0438417ea615cde58bd76c2427b3d7a0578bbbff9fde2abbc5d60307aff0050b18176158aaedb34e283886378ff798b4f74e0a0c95d64271f1916280dd247304d9201c67f5e2640d9706add8703cac81795a0190107e2bb2941ed13738595da1c86ba0f68e2283a435cb5f162c74071a13dfe2266d05abaef080dd6b1dade115e883e04f0bb4be4d91f535ae6f822b02e814e65d2b7807d199a23d3f26209f6c9f93602a3a93ccfdebb5f8161b7928059674e15820d1848a980c8d1af5a73aadc5c402fbb6e730ba51227913ca27f0d78d331d6325d0a7926c238296b2a22b10a69cdffeb087dfe175511ed8e2cde8d7dae140e4ce92f892b129d9940e4a30b19f822ef7611b8750eaea8e55502604b7d2358c09a217af8be6c86d67cf6ff6130c971c9765d56631fe6224fbe1e833d497b534fbf6b030af93691f59295279aa1bdfb5d5d9d4668d5aea70e2b8fc117df0042e91c7e6225f27329727ed6e14a87c7943c040dfee4e5c06a20251c39a45ab4865951b0daefb9c05571fdcc21d1761945bd2b8047ccedd6f1e708646fbe61e75bb2728e8cee893d7e6f642119e786155a6cbab057d6d83b77716145119e974ad7355179d2adc3d748fa249cb58e32e6791d646240c05da4427b2f359976c8fd1486c604cb7ee647e24633d8fca8314cf1f85110ca6351156a2b26e44b040f7d2810acd36f45a3969c1fafd1a7e0bc14fd9b26593375be8e750c3f6534ffb85904d15d75fba05dac4a673de97f7543ee931724cd35474cd7ff5cf3e8abaf206f3030e92895633fa9d8499ea763601560260109dad18bd64b990531fc5377e6eaa5da050b98e1c6515ea48c7de1a15b63283d4a694cbad379356bfdac50e6c343879e29f6b9ab425600d51f257ceb35d0ca00f83cf5bd734223de716747614666ba1f1a8fa756e5f3ff0fc94fa4bd4073bddb0098cf565ee40af5732ee9218d262e5b64ad6b8118c54eeaf7072f2e15514a401779b425fa89d8abb1750e56cc3108dffdcf2d3fd86b8af4560d56f7ff0702154211f9949e3992d93e66892b297fa2d4bfe18de3fd74e96c9d30eb14fd458fdbc9e9a34e00f3280dd732520147fa2a8fa83e91dd0687501466a300015bf888c03fc08190c2753d7719acf6f84885c4c5642f466c1984f15a7716a9b608ee5f1b395726bcc8519766667d24d11e396e62ea39640c9e73e4e9e9e5076d7019ca1bebbd7097807f46b3b6fcb96ed4b433b25ec551fb176a5fa252ed1d81b0350cfdfb8069c9916495bef3a262b6668910896c0b37eee40547c663a901e92f41b417ac50e88d058d021a8f9a5783bd936cca4962bec1c9886689cc547970f9215232596392515182e563f720bb79d29baaabf0e2697de6500bc677e346847011ee3450358c0b16ca528368b5cbb8df5ab974a3cef072d20c9906fa585e0f3083ec6d8507b8561f64e65aa1aecf825fc47ad1459c87771549fd5c9a9cc094e7b1179ee1e90eff7158f28f59f029d90e708f4ec50b4f67d8b4bb7140065528354a7e25d63e92977183a0284ec22aa923210f0bfea89cca53547137381e5de0f60bc484bc2daf129b0380244f1ed4bfb674eb2791e76dce33cae684ad36620d5d67cb587f840caed316b7439b0e8c3de0e065e62680f3997369be3466670278168c9a1a644d870e3a8d0a79b2b720e8c3c51bb9133532beee64319e98714bb2e6d5c0b723962d923b0ef454361d4b3cb470bf8c39031ed4a75267f499741be15aacac92d8e6afdcb01a2e7d2dbf549ceb2a2108c4079c620f05ca1bd31d631c2c8d35ca0d73155f56ed020c25e389db356edf510ae088d11b5e4fed51d0dce4d3aa04924b09c28200ede5bec1a8f38cc5f081055e0f28d75afc4d588ca0e828d00085d150beafdda17b8df9e7d9218ea7d81f2e076412901c5ae04d6929d717fea2fcc8e5a1e69dbd7b5258799a2fa5eb108b6cc35dfab599fb27e6d75f1030b83f452af8137830337141f031942eba83123d3f87b5f01623d4613e5a44b4952c300baf3d4d3dbbfb0ad024a19b3810a174ef8453d85a25822f66e45eba2490f29de1077683ccc32e3517f88b51e010672a982f7c8591450c9ab1573143aefb61c17ebb0c92dcb0494d116b970c2a827a6b3608ae10d583d1f7d092263fa873de9f31cd59bc9491ff012059b63a9120af89477f2ccc34eee7bd66de60af64730c879128b49d31da6400c2471e0d5abf707e560574b477b8e20ca45d92182d639eb434e14aea1a3f91ad8fb60e4859b77389753990513181ea3a82884235e8520294359435cfba220502b591fc28ac36ec697442657d290bd7aad7fce53a3f1766f2bf7d55c24d7c0e9c7a71d6f1282ea1478e0a36378b50e4fee281f686bc53f50138036e2a5d6199d40caff084fde7b63b3c0a47da0791107c3218330f7c2e2c7609aba202fae5290243b6033379eb15edc572eee452008e04c9b53efd5f3d88327317b38934745bc3de4c55bd818febc7a7953bf03c4029f77177c2a974310f0485aa46252f1000dc71934947287c38ea5854f29c7b82f630afb8caf1fd880670307b155a6e7feddc019cfbbbdc18f3bc03da3bd371d93ccbf56bcb39eea55c2d113efc148127c30089d21ce6a5088dbfbcf8f8d75c19456bc962c371548634a95382acb5a0886efc46a87bdc111dc0d1e54084cea0d58054f00762c91d7fe0f0fbcf4c280f29f9cd5999a5e8c6f507f8080d7c7ea9a8685be50722cf1a082f3728dec8d6152cdc72f8da6b1805643c042f4f6780ba79cc8a2165d9d7acec8ab2f421bc3e77b51c62c4bbb262b5674ea7d2dcf9acb894d050e91b052364322a5b08bd9667249571c004fb495da7e24fc5620adda3af6848ccf238911a52bdbff766e4e279ac274afa2c2302faba25b5fe98d972a04aa13f77c0c05d7dd82b0a19f1ded8cf5f99c80e392b0aab1264a29e9fbcf0b69f6b0a9f2332e09ab74dea7277106d0883bb264e279c67e5bc69009225bf4fd1a8532f9392a011b55a73a7cf8d16a59d695b2a65b57fad64a2041f8c28804ee1a48845c5dab757d04f1d95520aa9ddb69904d6529c0e14bd789dfe37067073b3e0e136ae2aebb1c34c55b94ce942f786be4b45f801f35f7c768d91a460b92ffa57ff675f0b4b00437a07f871a8650f21b2bf7c722c1d9e860e8955fef5699ee53a5f6fe46fb9e5e17a1c69fe2538af4718b7215ad2c00c3d420589a8653ee511b809945451fb8205b19ce377c8d0253b05493c557cf2bd8ef208e8fc01beceea1acca38d025f328f28d69bcfaa3adc6d9573a3832dc3f3c758fe08cf9cd0c32acfddae81b3682869e8aa9725b64336252aeb2ee8eb78f0721aa3158217a3009948adb297c5ea45ec26cb6d963c7be47ee1b93fa136ebe73a21936df0148fa311206f8bca2e80719aeca8745ff74ddaad5182644762c66333f942d9a93c467d5f9fd5d0dbbe57480362d4bb0f760294f4eba3e1b08047d256dbda157635d21a43aff3a71f6ad574b402bb36e5270d7ed082c6fbae07771721513ae9ddb22d23b00733046c898ee6ac05ef8a51ce41919e1f241cb98e0592ace68214620ba1a748ef81131661f58f1635713ca2873e150a3e848c8d2ebd039769fda112b73050efa4d1c35dbb46ca5a7b7ccbed1dcded36af272f6838b4c1e7e6778e7e9ca3d794f275d49c9e32e768097349118d2337e7c031ada38d0cc5c04c286ff93083f6d58d73a821118c93432fda9a8c76fa2cbcc093a7decac8e4f001ecc9f67faf1c2f102120f0618469cf653bbd5fcefd4ef2bae86dc4f5393b840f9f47140cf7f46a186c21878a43612a71d3b540b9994f010ab623f878264cf46c7366d0bec5d43d481b47846091fd3cda73a9a28ceb7f839eca695c9f084a16c812475f6575ef2368c88cc6655f47663ef69ce4779fe3ccc4dd85a07a9e4c6f39f42690d231f5727f45c247a53fd8df029fcefda4f328658435892519c17205a3c715ad6bb7387d09a5e387c83f008daf626f5977c66203af1143ef7b59ccd8e3c17bb156bca317861f0b9f222ea63c044075a3a74beaf05c23d0a75caa60397d831bbe507234fff154960faf0f02776d3f9038c955bf0c1ec9c92523cf0b855c18d6ac3b35d437796420ba3dfd581dc6adac64315c1cb1a2c3a45ec4655bb2bd6e0b4a3082281ed0697a213d1d93142e96b4fd57431d2f4547451d008ab58bcd9765ccf3ca3297becd5de9e2be0263cfca09935c9334b5e687bc7e7057dc2ed03873be22200c9fe32a9497dd00a336cf4c723ead302340b5cd1fef8cd88330a9089fc93af4ef739295b94407b291bf33f4f39c936736e1166106428f8796a4b92805f4dfcf46d8692b54e40a9e8584c0eaac4caada87bb33f553eafeef5051b889402176ab766936a38ddd7e5205d2c87e133a02e84ab24ba2d889a4c4db8cbe18b271455e84da716f4a32acdbc0a5aaba25a2ec757c73847dd1c4ccb2967c651e5257692a4553dde227846bfe2977021805f46a287c835ea8dc5", 0x2000, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x10, 0xffffffffffffffda, 0x3ff, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r2, &(0x7f0000000180)={0x50, 0x0, r3, {0x7, 0x2b, 0xffffffde, 0xffffffffa0000004, 0xf3, 0xfffe, 0x2, 0xfffffff6, 0x0, 0x0, 0x8, 0x100}}, 0x50) openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x4402c0, 0x1) close(r2) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x85) syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') syz_open_dev$video(&(0x7f0000000440), 0xffffffffffff2027, 0x8040) unshare(0x22020600) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000, 0x401}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x18c6}, 0x0, 0x0) 50.658249753s ago: executing program 6 (id=584): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0) 50.406719137s ago: executing program 6 (id=585): unshare(0xb4060380) r0 = socket(0x80000000000000a, 0x2, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x3) chdir(&(0x7f0000000000)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x181603, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) connect$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x5, 0x0, 0x1, 0x48, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, 0x14) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000000, 0x100010, r4, 0xa94000) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) ioctl$TCSETS(r5, 0x40045431, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000040)=@e={0xff, 0xa, 0xb, 0x3, @generic=0x73, 0x7, 0x73, 0xff}) write(r1, &(0x7f0000000000)="1546b2000000000001008043f3526b13f78ada17aefbbfc13bc888a3a46e8f0e809292ee0739b4f20800b179aa901b5d500d63", 0x58) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f0000000000)={'nat\x00', 0x0, 0x0, 0x0, [0x4000000009, 0x1000, 0xfff, 0x8, 0x7fff, 0x9], 0x0, 0x0}, 0x78) 47.083906607s ago: executing program 6 (id=598): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1ff, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) syz_emit_ethernet(0x9a, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, '\x00', 0x64, 0x11, 0x0, @local, @mcast2, {[], {0x4e1d, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x3, 0x2, "54e90dade0f83f43817a33a14e885678a5f38ab436a174d6f2369fc532f6c82b", "fc7dfb6e5293418dd950af36edd6dc1c", {"9cf20b4958f15cd0a3eddaf23b2e0eaf", "6272f64f06756f4bee7a8933b1524843"}}}}}}}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="c4417d290ddada01ca48b8a9884315c2c245040f23c00f21f835000002000f23f8c4a2e0f3db0f07d2c74424001e09000000442402e4000000654c0fc72ef3410fc777d365420fc7700066b8502466ef", 0x6e}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x60, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x38000000) 46.684460122s ago: executing program 6 (id=600): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r1) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x1c, r2, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x40000) sendmsg$inet6(r0, &(0x7f0000000400)={&(0x7f0000000040)={0xa, 0x4e20, 0x7a, @mcast2, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="3000000000000000290000000400000084020000ff0000000402000304"], 0x30}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001a40)=[{&(0x7f0000000100)={0x18, 0x58, 0x30d, 0x0, 0x0, "", [@nested={0x4}, @nested={0x4, 0x3}]}, 0x18}], 0x1}, 0x40040) sendmsg$inet6(r0, &(0x7f00000019c0)={&(0x7f0000000000)={0xa, 0x4e20, 0x0, @remote, 0x2}, 0x1c, &(0x7f00000018c0)=[{&(0x7f0000000080)="ccfdddbc852e70f5086f546ad06d61ff8108638af6927ee90e37fa22c2adcb0a2044428b44ba93217e79d0b17f24dd63d47dc2e6068a8a5f5ea113fe54ddaf944b991fcae3a50ecf5cb8088ace908f1af0f0d99be5e5fa4bab42d8fe4e7d29d94a95a577e2a494c86eab777947553c78ca89c65d47952854e6fb38ee412c7fa994b086b0284cfbb7bce95e36b0a20eb039ef7749c97563b791cdb35d6090e8e3a411b88b497fd99f24b39a0bef9d1ff694fe82a92322032a97628b9bec9257197ddf696dc401d70cd0bf69", 0xcb}, {&(0x7f0000001a00)="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", 0x1029}, {&(0x7f0000001440)="096b71524ba7ece25fc575df2357ba688e6cf9d915befee26755ca6cabfaf4787da6dda90661614a88d0f99608db9ac680b6ded30591776702f9c7e418afa7970f73401369c2d64f88c89631a1d25c", 0x4f}, {&(0x7f00000014c0)="dbbd04b497a2d589ae4b428deea13129f86d3e120074dfc5b6d993545e7fa541c49fb18260d4c2fa9736b0fde03142b93f4ad98dbe883fb7bd113a7efee782fbcd9d4714f2860791500d93f0054477247cb5d72c5963387c075b4e399e4b992c1655e712f3cd17006f2c1a8dca68aea18704e3654906b8cf229d705b3a3d3e6364679bc0ed2426e649667e90b6ef22f03547f726d72c24fa060062fa2be23531196a31a870dac880976822cebf", 0xad}, {&(0x7f0000001580)="b90f720956f178b2a2bcdda3b6d7f669beda39569d3d50a4f5795368b42fc2327a4669c85e5dfcaaf7f32953af2dc47bc848acce478577f7a620641a8cf928d4de9c07f8c623b71a80c8c010b1212cbf03f191e8813e620d48f28db35a86a4371c1d51f40c9362211cc57011097a6d9f825d46e23dffcb523a5471721889e9dc21eabe958262bcd3fe0831ed6822bd57135487fdcfc6cac5d8ed846bc2235c04136834924342ed73ddb1dfd56f3a3d9641db24139ef9403b04e020bf55dbd0664f8132f3d58436099eca2e6e1d66b4daf68907d3383658f12ce979c2d58d4ba141a12c2c74a2733cc88a17c5403909da67", 0xf1}, {&(0x7f0000001680)="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", 0xfb}, {&(0x7f0000001780)="b51eb27b34c3495c7a1c09b75e868f3e4f205e68f037204495ee070bdfcf1ccdbe044349891683191088faa3dcbacacf9db992dc9acec26d9ecdf73d16888e76efbb866de2a4962802ea48e3252de019ccd196059d9b881ba89c9cf6117a966f3b18b5001948444ea537fbd5c9c0c1970c5f24652cf4ccdc2a093f56244c774ba537ba1c85f85140", 0x88}, {&(0x7f0000001840)="df1c6de37afb3aadd31de020b71b70924d02e993f557062ea4be77e44d5dbd06626d1e64b81f4258b39fdd4c78276afbb0379af0fc65989caf66d753852d196772cded55120b2a5f973be8612f314849e440e5934a622c2552d0f94c870a4d0728d83e7fc49686f5846c7cd6723c30315db73248abcde6", 0x77}], 0x8, &(0x7f0000001940)=[@rthdr_2292={{0x78, 0x29, 0x39, {0x21, 0xc, 0x0, 0x3, 0x0, [@dev={0xfe, 0x80, '\x00', 0x31}, @remote, @private0, @private2, @private2, @mcast1]}}}], 0x78}, 0x20000000) 46.347452745s ago: executing program 6 (id=601): keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x103002, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x0, 0x0}) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x404000, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000100)={0x0}) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000000340)=0x2) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x1c3902, 0x0) sendfile(r2, r2, 0x0, 0x20f4ff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$netlink(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="900000005a000d030000000000000000040000806b00"], 0x90}], 0x1}, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x1, 0x0, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r5, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYRES32=r3], 0x20}, 0x1, 0x0, 0x0, 0x20064014}, 0x0) r6 = syz_open_dev$swradio(&(0x7f0000000540), 0x0, 0x2) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80080) tee(r7, r8, 0xe, 0x4) ioctl$VIDIOC_TRY_FMT(r6, 0xc0d05640, &(0x7f0000000440)={0xb, @pix_mp={0x38305345, 0x8, 0x78110513, 0x0, 0x9, [{0xffff, 0x7}, {0x9}, {0x0, 0x7fffffff}, {0x9, 0xda}, {0x4, 0x8}, {0x8, 0x4}, {0x2, 0x400}, {0x6, 0x1000}], 0xff, 0x9, 0x3, 0x1, 0x3}}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000002, 0x4010012, 0xffffffffffffffff, 0x0) syz_clone3(&(0x7f00000002c0)={0x801400, &(0x7f0000000040), 0x0, 0x0, {0x19}, 0x0, 0x0, 0x0, 0x0}, 0x58) 31.010207306s ago: executing program 36 (id=601): keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x103002, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x0, 0x0}) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x404000, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000100)={0x0}) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000000340)=0x2) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x1c3902, 0x0) sendfile(r2, r2, 0x0, 0x20f4ff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$netlink(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="900000005a000d030000000000000000040000806b00"], 0x90}], 0x1}, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x1, 0x0, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r5, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYRES32=r3], 0x20}, 0x1, 0x0, 0x0, 0x20064014}, 0x0) r6 = syz_open_dev$swradio(&(0x7f0000000540), 0x0, 0x2) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80080) tee(r7, r8, 0xe, 0x4) ioctl$VIDIOC_TRY_FMT(r6, 0xc0d05640, &(0x7f0000000440)={0xb, @pix_mp={0x38305345, 0x8, 0x78110513, 0x0, 0x9, [{0xffff, 0x7}, {0x9}, {0x0, 0x7fffffff}, {0x9, 0xda}, {0x4, 0x8}, {0x8, 0x4}, {0x2, 0x400}, {0x6, 0x1000}], 0xff, 0x9, 0x3, 0x1, 0x3}}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000002, 0x4010012, 0xffffffffffffffff, 0x0) syz_clone3(&(0x7f00000002c0)={0x801400, &(0x7f0000000040), 0x0, 0x0, {0x19}, 0x0, 0x0, 0x0, 0x0}, 0x58) 24.180453662s ago: executing program 4 (id=658): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) mkdir(&(0x7f0000000000)='./cgroup/file0\x00', 0xd0939199c36b4d28) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110c230000) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r3 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000180)=0x10, 0x80800) bind$tipc(r3, &(0x7f0000000200)=@id={0x1e, 0x3, 0x3, {0x4e22, 0x3}}, 0x10) ioctl$TUNSETOFFLOAD(r2, 0x4004743d, 0x110e22fff6) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f00000002c0)="91f8a9849519def2f8eb48d9173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de25000000000000000000f38a6a4cb6b275ee91bd0196db0af38f2665cbbb4e66534143d02eac997657cf0a3df3cc8df5281ca813b255039632532f021a46b78fb7892513e4d3307f2dc6eca9986be03dfdd7dea5a59b3af0f59c39d0edaaf273933db78b8653e664f28ca6a3f8803662958348e8bef4a1370e5fc0c803eeb3e1154bab13b362", 0xbd}, {&(0x7f0000000700)="44900000000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61d442035db81e18c2d2462d0bb25fff9d3b1ce90b597992b2a4d541611ce77f58dce7c9500118229e7cdf4ca7f6adca92c73d97ce54164c1942b2568635bec8e020b41fb2f8000000000000000000000000000000001c8a9f7956583e26f6f0edc415851d0b8305fe66c2b7c114e3712d87744938848f24a13cb6040000", 0xf6}, {&(0x7f00000000c0)="641a6a2b863c080000003a3f97a834ebb75a925ab48c844231d2145fd53bc4254cf0", 0x22}, {&(0x7f00000001c0)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b4", 0x3a}], 0x4}}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000b80)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001129dbacbfd4924d7545517fd18b5d29978f32a5b5c81755cb89cc0490958ba3211eb99df5cdbbc0f9c941aaa1495893dada02d8188acd26b5afd7476413f322c8f79de769debb56343f3eded2dca", 0xac}, {&(0x7f0000001300)="e0cda6472d1ccfb4", 0x8}, {&(0x7f0000001e00)="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", 0x5ba}], 0x3}}], 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 22.887847325s ago: executing program 4 (id=660): r0 = socket$inet(0x2, 0x3, 0x100) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000500)=0x8, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0xffdf, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="ae", 0xffeb}], 0x1) (fail_nth: 42) 22.52681618s ago: executing program 4 (id=661): syz_usb_connect(0x5, 0x24, &(0x7f0000000900)={{0x12, 0x1, 0x300, 0x52, 0x5e, 0x74, 0x20, 0x979, 0x270, 0xed31, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7, 0x8, 0x0, 0x3f, "", [{{0x9, 0x4, 0xdb, 0x4, 0x0, 0x3f, 0x3e, 0x46}}]}}]}}, &(0x7f0000000f80)={0x0, 0x0, 0x0, 0x0}) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x3) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f00000000c0)={0x2, &(0x7f0000000100)=[{0x48, 0xfb, 0x0, 0xfdeffffe}, {0x6, 0x60, 0x10, 0x8}]}) write$ppp(r0, &(0x7f0000000300)="5af9", 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r1, 0x5404) write$sequencer(r1, &(0x7f0000000080)=[@t={0x81, 0x5, 0x0, 0x9}], 0x8) r2 = io_uring_setup(0x6ed6, &(0x7f0000000000)={0x0, 0xbf54, 0x1, 0x400000, 0x26d}) r3 = socket(0x400000000010, 0x3, 0x0) io_uring_register$IORING_REGISTER_SEND_MSG_RING(0xffffffffffffffff, 0x1f, &(0x7f00000003c0)={0x28, 0x0, 0x0, r2, 0x0, 0x0, 0x8, 0x2, 0x1, {0x0, 0x0, r3}}, 0x1) syz_usb_connect$uac3(0x3, 0xd0, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x499, 0x150a, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xbe, 0x3, 0x1, 0x2, 0x20, 0x0, {0x8, 0xb, 0x0, 0x0, 0x1, 0x1, 0x30, 0x9}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x6, 0x3d, 0x8}, [@processing_unit={0x15, 0x24, 0x9, 0x4, 0x5, [0x3, 0x1, 0x0, 0x1]}, @feature_unit={0x11, 0x24, 0x7, 0x1, 0x3, [0x4, 0x2, 0x10]}, @feature_unit={0xd, 0x24, 0x7, 0x6, 0x5, [0x8, 0xf]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x3a, 0x40, 0x9, {0xa, 0x25, 0x25, 0x1, 0xa7, 0x9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x8, 0x3, 0x46, 0x9, 'R'}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0xe, 0x4, 0xe, 0x17, "e13fcf"}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0xfc, 0x3, 0x2, 0x3, "", "7f"}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0xe, 0x9, 0x4, {0xa, 0x25, 0x25, 0x4, 0x9, 0xfff9}}}}}}}}]}}, &(0x7f00000003c0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x210, 0x5, 0x40, 0x6, 0x8, 0x5}, 0x6e, &(0x7f0000000140)={0x5, 0xf, 0x6e, 0x6, [@ssp_cap={0x1c, 0x10, 0xa, 0x6d, 0x4, 0x5, 0xf00f, 0xf, [0x3f30, 0x3f00, 0xc0c0, 0xbeff]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x9, 0x4, 0x3, 0x7, 0xa3}, @ext_cap={0x7, 0x10, 0x2, 0x1c, 0x2, 0x0, 0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "9b0d9c67385896a9f768e14d97a81f07"}, @ptm_cap={0x3}, @ssp_cap={0x24, 0x10, 0xa, 0x0, 0x6, 0x1, 0xf00, 0x5, [0xffc030, 0xffffcf, 0x0, 0xc000, 0x3f00, 0xff3f30]}]}, 0x7, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x419}}, {0x4, &(0x7f0000000200)=@lang_id={0x4}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x439}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x480a}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x407}}, {0x2d, &(0x7f0000000300)=@string={0x2d, 0x3, "e83b887dc66d0b7ee195eb869e4fcb34c5e45c464f1d2602910270f41da241727ea757fc7f1067cbfab283"}}, {0x74, &(0x7f0000000340)=@string={0x74, 0x3, "ce707e5ad9f403d5a107c32fc04803e8027349d80adacead29ecf43a86ecff19f862b7b73fbab113094fe83b3127a16a9953c2975a0b6dad518d9c5c17db2ee95d2b3905dea39d502246a9552042fb223bf1a30dd9bab1bf633a3fa4cc77d0e7c3a8fc2b303e34679239df0b21a292c610b4"}}]}) 19.035785144s ago: executing program 4 (id=670): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_ext={0x1c, 0xa, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000500000000000000ff070000185900000d000000004cc9000000000085200000010000002ba00c00080000001831000002000000000000000000000090473000000000009500000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000200)={0x5, 0x8, 0xffffffff, 0x1}, 0x10, 0xbed7, 0xffffffffffffffff, 0x4, 0x0, &(0x7f0000000240)=[{0x2, 0x5, 0x5, 0xa}, {0x3, 0x1, 0x2, 0x2}, {0x3, 0x5, 0x8000}, {0x4, 0x2, 0x7, 0x6}], 0x10, 0x8}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELSET={0x0, 0xb, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFTA_SET_NAME={0x0, 0x2, 'syz0\x00'}, @NFTA_SET_GC_INTERVAL={0x0, 0xc, 0x1, 0x0, 0xffffffff}, @NFTA_SET_HANDLE={0x0, 0x10, 0x1, 0x0, 0x2}, @NFTA_SET_DATA_TYPE={0x0, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_KEY_LEN={0x0, 0x5, 0x1, 0x0, 0x2d}, @NFTA_SET_DESC={0x0, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x0, 0x2, 0x0, 0x1, [{0x0, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x0, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x0, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x0, 0x1, 0x1, 0x0, 0x80}, @NFTA_SET_FIELD_LEN={0x0, 0x1, 0x1, 0x0, 0x200}]}, {0x0, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x0, 0x1, 0x1, 0x0, 0xb}, @NFTA_SET_FIELD_LEN={0x0, 0x1, 0x1, 0x0, 0x1ff}]}, {0x0, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN, @NFTA_SET_FIELD_LEN={0x0, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x0, 0x1, 0x1, 0x0, 0xe}, @NFTA_SET_FIELD_LEN={0x0, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x0, 0x1, 0x1, 0x0, 0x8}]}]}]}, @NFTA_SET_POLICY]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xbc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r4, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/seq/timer\x00', 0x0, 0x0) sendmsg$nl_netfilter(r6, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000003c0)={&(0x7f0000000180)={0x144, 0x0, 0x6, 0x5, 0x70bd28, 0x25dfdbfc, {0x1, 0x0, 0x100}, [@typed={0x8, 0x48, 0x0, 0x0, @fd}, @nested={0x14, 0xdf, 0x0, 0x1, [@typed={0xc, 0x67, 0x0, 0x0, @u64=0x7e}, @nested={0x4, 0x13}]}, @nested={0xfc, 0xf6, 0x0, 0x1, [@nested={0x4, 0xba}, @nested={0x4, 0xdb}, @generic="2f93ab29a2e694eb9fc7d847642e41e915824a619364a3ed159bcad5a7d727701d40e5817381f33e064cec82b5a360366c8c2ab0616159d4717cd46a9a9df3af16c00b5a8523287b8bef860560174206ff6204019be9e5dcbf1f31d938b9f67f76134ed8234247732d34f1e83125091769c7a59883dce29bce1e35c8674048215cf5615a", @nested={0x4, 0x13d}, @nested={0x4, 0x36}, @generic="5d5857f96f2d8cc04d944614153d94d542c7a8f3be964688a0f623fa6e4e82361e5479858c31fbb91785a7d72101e77f7ffca734571a1c5fd41d91012ae328530221e21a18df6308b1a86b90ae9e6a5a5b27ed2be180658859fd929690ba3334c0af1eff"]}, @nested={0xc, 0xeb, 0x0, 0x1, [@typed={0x8, 0xf0, 0x0, 0x0, @fd=r5}]}, @typed={0xc, 0x38, 0x0, 0x0, @u64=0x100000000000000}]}, 0x144}, 0x1, 0x0, 0x0, 0x4008041}, 0x4) connect$vsock_stream(r5, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$sock_linger(r5, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x20000}, 0x8) close_range(r3, 0xffffffffffffffff, 0x0) 18.594398029s ago: executing program 4 (id=671): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000980)=@newqdisc={0x45c, 0x24, 0xd0f, 0x1, 0x0, {0x60, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x3, 0x1, 0x8, 0x2, 0xff, 0x7}, {0x4, 0x2, 0x3, 0xa159, 0x1000, 0x7}, 0x3, 0x8, 0x243}}, @TCA_TBF_PTAB={0x404, 0x3, [0x4, 0x2, 0x8, 0xfff, 0x0, 0x8ba, 0xa1, 0x4d91, 0x7fffffff, 0x3, 0x0, 0x7, 0x8, 0x255, 0x6, 0xa, 0xd81, 0x3, 0xa, 0xa, 0x7, 0x108e, 0x2, 0x200, 0x1, 0x5, 0xb96, 0x7, 0xf1, 0xffffffff, 0x200, 0x3, 0x3, 0x7c, 0xfffffffc, 0x10005, 0x1, 0x2, 0x8, 0x6, 0x1, 0xa, 0x80, 0xe, 0x80, 0x90000000, 0x3800000, 0x0, 0xfffff30b, 0x0, 0xf5, 0x81, 0xfffffff8, 0x80, 0x80000000, 0x3f, 0xfffffbff, 0x36a5, 0x7, 0x6, 0x200, 0x1ba, 0x9, 0xab, 0x6, 0xfffffff7, 0x6, 0x0, 0x3, 0x1, 0x963, 0x1ff, 0x2, 0xfffffffd, 0x6, 0x9, 0x0, 0x3, 0x0, 0xb09, 0x3ff, 0xfffffffe, 0x8000, 0x4, 0x8, 0x5, 0x101, 0x5, 0xc, 0x6, 0x9, 0x3, 0x1, 0x8762, 0x8e, 0x2, 0xfffff76b, 0x1, 0x4, 0x4275c4e8, 0x8, 0x5, 0x800, 0x0, 0x951, 0x5, 0x6cdf13a0, 0x9, 0x3, 0x5, 0x10001, 0xff, 0x80000002, 0xed2, 0x5, 0xfffffffa, 0x2, 0x18d1, 0x0, 0x3, 0x9486, 0x80, 0x2, 0x80000000, 0xdb, 0x3, 0x80, 0xffff8000, 0x5, 0x7, 0x7, 0x1, 0x2, 0xe, 0x2, 0x7, 0x2, 0x81, 0x3, 0x1, 0x6bf, 0x7, 0xea, 0x4, 0xc2, 0x9, 0x3, 0x4, 0x283, 0xb, 0x7, 0x40, 0x7, 0x1, 0x0, 0xff, 0x7f, 0x8, 0x7fffffff, 0xfffffff8, 0x8, 0xfffffff4, 0x8, 0xc, 0x96, 0x6, 0x4, 0x62cc, 0x2, 0x8, 0x2eb7, 0x10001, 0xcbf, 0x10000, 0x101, 0x9, 0xfffffffa, 0x1, 0x8, 0x800, 0x8001, 0xf, 0x5, 0x8, 0x8d, 0xffffffff, 0x2, 0x7, 0x1, 0x61, 0xffffffff, 0x494, 0xd, 0x1, 0xffffffff, 0xd1, 0xd, 0x9, 0x1002, 0xffffffff, 0x6, 0x3, 0xfffffffb, 0xffff, 0xff, 0x5, 0xe, 0x401, 0x2, 0x8cc5, 0x8, 0x159, 0xb4f3, 0x9, 0x382ae49b, 0xbb, 0xffffffff, 0xffff, 0xdf3b, 0xfffffffb, 0x6, 0xfffffeff, 0x8dc3, 0x20000001, 0x5, 0x9, 0x2, 0xfffff801, 0x8a, 0x5, 0x5, 0x7, 0x7, 0x0, 0x7, 0x1, 0x0, 0xffffffff, 0xdfeb, 0xb, 0x77, 0x101, 0xff, 0xb331, 0x9, 0x6, 0x9, 0x7, 0x5, 0x400, 0x10001, 0x1, 0x800, 0x6000, 0xfe000000, 0xfffffffd]}]}}]}, 0x45c}}, 0x0) 18.183640095s ago: executing program 4 (id=673): unshare(0x60000000) r0 = socket$packet(0x11, 0x3, 0x300) unshare(0x10480) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r1, 0x1, 0x2, @broadcast}, 0x10) r2 = io_uring_setup(0x1208, &(0x7f0000000080)={0x0, 0x8a77, 0x2, 0x1, 0x13}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYRESDEC=r2, @ANYRES8=r2, @ANYRESHEX=r0], 0x50) syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000200)={r3, &(0x7f0000000680)="9c38e825ac87bcc0a4b0e5055acbbcbb442d44bd713be708c3c0d25ab4a517740d51944ac9b8fc5a4aa636aec715517b6ee30db31b77b7a9759cff604214959b05d809", 0x0}, 0xfffffffffffffd90) syz_emit_ethernet(0x237, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x0) r4 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0xa803) write$binfmt_aout(r4, 0x0, 0x31c8) ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b0f, &(0x7f0000000040)={'team_slave_0\x00', @random="0100"}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x4a82, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r6, 0x3ba0, 0x0) r7 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x1f) set_mempolicy(0x8000, &(0x7f0000000380)=0xfff, 0x3) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) r9 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x4000000004102, 0x0) r10 = dup(r9) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r10, 0x84, 0x1a, &(0x7f0000000780)={0x0, 0x1c, "f681455ab7265a7e40626dec3a5eb4e05a78043d2cc23339f74b72ff"}, &(0x7f00000007c0)=0x24) socket$unix(0x1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r10, 0x2000) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x10) ioctl$KVM_PRE_FAULT_MEMORY(r8, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) 17.126492886s ago: executing program 9 (id=676): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRES32=r1], 0x7c}, 0x1, 0x0, 0x0, 0x8084}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000c00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}, @NFT_MSG_DELSETELEM={0x40, 0xe, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "cd9a"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xe4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000900), r3) sendmsg$FOU_CMD_GET(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000940)={0x30, r4, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @rand_addr=' \x01\x00'}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x2880) sendmsg$FOU_CMD_GET(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x3c, r4, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_AF={0x5, 0x2, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) 16.864638112s ago: executing program 9 (id=678): r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="1201100100000008bd28780000000000000109022d000100004000090401100703000900092104000c0122280009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000180)={0x0, 0x7, 0x28, {0x85, 0x31, "f70ba381030000000000000000cb4fdca0560f920d54f365c5b1d43ee44fbf6fc93f0808251f"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 16.169791687s ago: executing program 3 (id=681): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) syz_emit_ethernet(0x3e, &(0x7f0000000f00)={@local, @link_local, @void, {@ipv4={0x800, @generic={{0xc, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x73, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x36}, {[@ssrr={0x89, 0x7, 0xef, [@multicast1]}, @cipso={0x86, 0x15, 0x0, [{0x7, 0xf, "3332432bd3028cdf502ba5d40c"}]}]}}}}}}, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000180)={r1, 0x1, 0x9, 0x3}) setsockopt$inet_sctp6_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f0000000200)={0x5, 0x1, 0x3, 0x5}, 0x8) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$TUNSETLINK(r6, 0x400454cd, 0x104) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000300)={'wg2\x00', &(0x7f0000000140)=@ethtool_perm_addr={0x15}}) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_netdev_private(r4, 0x89f2, &(0x7f0000000600)="4f48d732ae00634300eae94367625e86898ee87a59ac88ce27653ffb004c755e8f80d6f49b6e1d8c36625fb1827b95cd06d06c237b48f69451575f41a7280d9d282561389ed16430e557f3ef3b5dec00cb1f2f2aa330a0e2afa7052eac65dc16bfcb8d4f97d69e434bd452d6fa6c386a7e42187ca3284100b827379c7c5626ba526e98a08fbf7a2d5d878ce80546a57be2a56f779b4301c46491308dab79ed") r10 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r10, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r10, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r11, 0x9801}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0xbf}]}}}]}, 0x40}}, 0x0) sendto$packet(r8, &(0x7f0000000240)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc9", 0x26, 0x40, &(0x7f0000000540)={0xc9, 0x0, r11, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xffde}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000ac0)=@newtfilter={0x244, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xe, 0x7}, {}, {0x7, 0xb}}, [@filter_kind_options=@f_flower={{0xb}, {0x214, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x108, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x24, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xdd13}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x1af}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x1c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0xd}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x2}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4c, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xa}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x400}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x800}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xffff}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0xcc}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x2c, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0xf}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0xa44a}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x3c, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xe147}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x8}]}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x4c, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x3c, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x30000}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x7}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xe}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x7b}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x6}]}]}, @TCA_FLOWER_KEY_ICMPV6_TYPE_MASK={0x5}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0x9c, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x2c, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x4000086}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x8}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x34, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x8c}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x3}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x9b}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x3}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0xe7}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x3}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x400}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x1c, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x7fff}]}]}, @TCA_FLOWER_KEY_ENC_IPV4_SRC_MASK={0x8, 0x1c, 0xffffffff}, @TCA_FLOWER_KEY_TCP_SRC={0x6}, @TCA_FLOWER_KEY_MPLS_TC={0x5, 0x45, 0x80}]}}]}, 0x244}, 0x1, 0x0, 0x0, 0x80}, 0x0) 14.982946601s ago: executing program 0 (id=687): r0 = syz_open_dev$dri(&(0x7f0000000000), 0xaf51, 0x28400) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000006c0)={0x0, &(0x7f0000000600)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000780)={r1, 0x0, 0x4, 0x101, 0x81}) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r4, 0x8953, &(0x7f0000000300)={{0x2, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x1, @remote}, 0x28, {0x2, 0x0, @private}}) syz_usb_disconnect(0xffffffffffffffff) ioctl$FS_IOC_RESVSP(r3, 0x40305828, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000a40)=@newqdisc={0x434, 0x24, 0xd0f, 0x70bd28, 0x25dfdbfc, {0x60, 0x0, 0x0, 0x0, {}, {0xffe0, 0xa}, {0x1, 0xe}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x1, 0x3, 0x9, 0x4, 0x6, 0x40, 0x4, 0x40, 0x6, 0x482e3068, 0xff, 0xfffffbea, 0x6, 0x542, 0x400040, 0xe0000, 0x1, 0xc, 0x1, 0x800, 0xd, 0x0, 0x7ff, 0xb3e, 0x3, 0x7, 0x7, 0x400, 0x7, 0xa45, 0xc, 0x7f, 0x401, 0x5, 0xfffffff7, 0xfffffff2, 0xdf8, 0x9, 0x7436, 0x7, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x5, 0x1, 0x1, 0x2bf7, 0x6, 0x7, 0x0, 0x3, 0x3, 0x1, 0x9, 0x1, 0x4, 0x4, 0x6, 0x3, 0x10000, 0x7, 0x5, 0x3, 0x80000001, 0x9, 0x5, 0x1cb, 0x5, 0x7, 0x7, 0x7, 0xfff, 0x2, 0x7, 0x9, 0xffff, 0x1, 0x3, 0x4, 0x8, 0xe1cc, 0x9, 0xc7, 0x7, 0x55, 0x6, 0x75a, 0x8, 0x2, 0x6, 0x40, 0x8, 0x7, 0x5, 0x0, 0xf03, 0x7, 0x8, 0x9, 0x3, 0x7, 0x21931f93, 0x1, 0x800, 0x10, 0xfffffffd, 0x0, 0x2, 0xffffffc0, 0x2, 0x7ff, 0x6ed4, 0xffffff80, 0x3, 0x200, 0xcc4, 0x2, 0x3, 0x10b, 0x2, 0x9, 0xac21, 0x0, 0x8, 0xc33, 0xff, 0x2f, 0x8, 0x85, 0x2, 0xf1c6, 0x8, 0x5, 0x6, 0x40, 0x4, 0x2, 0xa, 0x80000001, 0x7, 0x7, 0x3, 0x9, 0x7, 0xa93, 0x80000000, 0x80000001, 0x7f, 0x1ff, 0x0, 0x3, 0x870, 0x67bae144, 0x9, 0x4, 0x6a8, 0xe4b, 0x1, 0x13, 0x1, 0x6, 0x4a68, 0xe, 0x10, 0xffffffff, 0x7f, 0x0, 0xa0a, 0x9, 0x3, 0xffffffe8, 0xc71, 0x8, 0xffffff5b, 0x8, 0x0, 0x80000001, 0x5, 0x6, 0x0, 0x30869cc6, 0x0, 0x3ff, 0x4, 0x80, 0x5, 0x15bf41b1, 0xf, 0x6, 0xfffffffe, 0x8, 0x0, 0x943, 0x7, 0xe, 0x5, 0x9, 0x2, 0x0, 0x1, 0x1000, 0x1000, 0x7ff, 0x6, 0x2, 0x0, 0x7, 0xb263, 0x1, 0x7, 0x4, 0x1, 0xc, 0x1, 0x200, 0x8001, 0x5, 0x303f, 0x5d, 0x3, 0x4, 0x3, 0x4, 0x2, 0x7, 0x39b1e32c, 0x0, 0x8a84, 0x9, 0x40, 0x10000, 0x1, 0xb, 0xfffffffd, 0x4, 0x6, 0x5, 0xf2, 0x1834, 0x10000, 0x7ff, 0x1, 0xeb7, 0x67f1, 0x9, 0xffff, 0x3ff, 0x80000000, 0xd, 0x3, 0x10001, 0x2]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0xc5}, 0xc010) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x72bd29, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0xe7be759}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x2, 0x2, 0x6, 0x3, 0x1}, {0x5, 0x1, 0x1, 0xa, 0xe2, 0x1}, 0x26, 0x4b3b, 0x19c5}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xc068fa965e4d9ca}]}}]}, 0x6c}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'macsec0\x00', 0x0}) gettid() sendmsg$nl_route(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[], 0x28}}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000940)={0xffffffffffffffff, 0x58, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000e80)={'syztnl0\x00', &(0x7f0000000980)={'syztnl0\x00', 0x0, 0x20, 0x20, 0x8, 0x2, {{0x1b, 0x4, 0x2, 0x4, 0x6c, 0x66, 0x0, 0xa, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}, @loopback, {[@end, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x14, 0x95, 0x1, 0x6, [{@private=0xa010100, 0xb96}, {@loopback, 0x1}]}, @timestamp_prespec={0x44, 0x2c, 0x7c, 0x3, 0xd, [{@loopback, 0x8}, {@private=0xa010100, 0x40}, {@remote, 0x5}, {@private=0xa010101, 0x10001}, {@multicast2, 0xffffbdbd}]}, @generic={0x88, 0x10, "6324eff308fc2ac081c7f12adf8b"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000fc0)={'syztnl0\x00', &(0x7f0000000ec0)={'syztnl2\x00', 0x0, 0x10, 0x1, 0x5d, 0x758c, {{0x19, 0x4, 0x2, 0x30, 0x64, 0x66, 0x0, 0x8, 0x2f, 0x0, @loopback, @remote, {[@timestamp_addr={0x44, 0x2c, 0x24, 0x1, 0x6, [{@remote, 0xffff}, {@local, 0xffff7fff}, {@dev={0xac, 0x14, 0x14, 0x18}, 0x5}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xf0}, {@local}]}, @timestamp_prespec={0x44, 0xc, 0xef, 0x3, 0x0, [{@remote, 0xffff3189}]}, @lsrr={0x83, 0x17, 0xe8, [@loopback, @local, @multicast1, @loopback, @local]}, @noop]}}}}}) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000001980)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x820040}, 0xc, &(0x7f0000001940)={&(0x7f0000001300)={0x638, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [{{0x8}, {0x4}}, {{0x8}, {0x130, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x72}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}]}}, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6e}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x400}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}]}}, {{0x8}, {0x178, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x84, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x54, 0x4, [{0x5, 0x9, 0xf8, 0x7a6fd536}, {0xe4a, 0x8, 0x3, 0x101}, {0x11, 0x3, 0xf1, 0x6}, {0x9, 0xbf, 0x40, 0x10001}, {0x9, 0xe9, 0x7, 0x5}, {0x2, 0x2, 0x4, 0x9}, {0x41, 0x1, 0x8, 0x10001}, {0x7f, 0x9, 0x5, 0xfff}, {0x9, 0xa1, 0x0, 0x7}, {0x9, 0x4, 0x3, 0x9}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xe}}}]}}, {{0x8, 0x1, r6}, {0xd0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8, 0x6, r7}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x0, 0x7, 0x1, 0x8}, {0x35f, 0x0, 0x60, 0x8}, {0xa}]}}}]}}, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1000}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x638}, 0x1, 0x0, 0x0, 0xc001}, 0x10) r10 = socket$inet_smc(0x2b, 0x1, 0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r11, &(0x7f0000000880)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r11, 0x0) setsockopt$IPT_SO_SET_REPLACE(r10, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x9, 0x3, 0x200, 0x0, 0xffffffff, 0xffffffff, 0x118, 0xffffffff, 0x208, 0xffffffff, 0xffffffff, 0x208, 0xffffffff, 0x3, 0x0, {[{{@ip={@multicast1, @multicast2, 0xffffffff, 0xff000000, 'team_slave_1\x00', 'pim6reg\x00', {}, {}, 0x1d, 0x3}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0xa, 0x2, 0xfffffffe, 0x435, 'netbios-ns\x00', 'syz0\x00', {0x7fff}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010101, 0x0, 0x0, 'ip6tnl0\x00', 'ip_vti0\x00', {0xff}, {0xff}, 0x33, 0x3, 0x8}, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x309f) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) 14.755679732s ago: executing program 9 (id=688): ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000480)={'syztnl2\x00', &(0x7f0000000380)={'syztnl0\x00', 0x0, 0x8, 0x10, 0xffff, 0x5, {{0x34, 0x4, 0x1, 0x6, 0xd0, 0x68, 0x0, 0x1, 0x29, 0x0, @private=0xa010102, @multicast2, {[@cipso={0x86, 0x67, 0x1, [{0x2, 0x10, "aa928ee075defa355eb8f7f99856"}, {0x288827b15a592da, 0x8, "d3ec1a2b7fa4"}, {0x0, 0x4, "dbfe"}, {0x0, 0xa, "b5276918f95414e2"}, {0x1, 0x2}, {0x1, 0x8, "44ca94b7168b"}, {0x0, 0xd, "8387cbb4d84f9d29171ae5"}, {0x1, 0xb, "d960e71758e82c3fdb"}, {0x5, 0xe, "ed7117a7245f5fb339c7fee4"}, {0x6, 0xb, "93bc5f09ec8dcc36ea"}]}, @generic={0x94, 0x8, "ad0c5da2c368"}, @rr={0x7, 0x1f, 0xeb, [@dev={0xac, 0x14, 0x14, 0x20}, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101, @private=0xa010100, @broadcast, @multicast1, @rand_addr=0x64010100]}, @lsrr={0x83, 0xb, 0xa9, [@rand_addr=0x64010101, @local]}, @rr={0x7, 0x7, 0xa, [@broadcast]}, @lsrr={0x83, 0x7, 0xf7, [@broadcast]}, @ssrr={0x89, 0xb, 0x46, [@loopback, @broadcast]}, @lsrr={0x83, 0x7, 0x3e, [@private=0xa010102]}]}}}}}) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0xe22, 0x0, @loopback={0xff00000000000000}}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac710aa7d0000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f00000004c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', r0}, 0x14) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="90000000", @ANYRES16=0x0, @ANYBLOB="00022dbd7000fcdbdf25140000007c0001802c0004001400010002004e210000000000000000000000001400020002004e21640101020000000000000000130001006574683a69703665727370616e3000000d0001007564703a73797a30001f0400110001006574683a6d6163766c616e4f000000000000008008000300050000000800030000000000"], 0x90}, 0x1, 0x0, 0x0, 0x4000064}, 0xc010) r3 = socket$tipc(0x1e, 0x2, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000980)=ANY=[@ANYBLOB="a0010000100001000000000000000000ac1e0101000000000000000000000000fc0200000000000000000000000000000000ecdf000000030000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff0000000000000000000000000000000032000000640100fe00000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000004000fcffffffffffffff0000000000000000000000000000000000000000000000000100000000000000000000800000000002000000000000001000000000000000020000000000000000000000020001734c000000000000004c001400686d61632873686132353629000000000000000000000000000000000000000000000000000000000000000000000000000000000021000000000000000000000000000080000000480002006362632873657270656e742900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c000402000000000000000064010100"/344], 0x1a0}}, 0x0) bind$tipc(r3, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x0, 0xfffffffd}}, 0x10) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r5, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) bind$tipc(r3, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000003}}}, 0x10) bind$tipc(r5, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) r6 = socket$tipc(0x1e, 0x5, 0x0) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') lseek(r7, 0x8000000000000000, 0x2) ioctl$VIDIOC_ENUM_FMT(r7, 0xc0405602, &(0x7f0000000240)={0x7f, 0x9, 0x192, "379ceca5580942813ef58c1d8758a2b84d56be731e251be5d8aa4e26011bf797", 0x32314247}) bind$tipc(r6, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x200, 0xfffffffd}}, 0x10) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000100), 0x208e24b) preadv(r8, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x40}, 0x1, 0x0, 0x0, 0x2000c801}, 0x40000c1) 13.740315203s ago: executing program 9 (id=689): r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) fsopen(0x0, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x2c, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'xfrm0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x0, 0x0, 0x2000}}}}, @TCA_STAB={0x80, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}]}, 0x6c}, 0x1, 0x0, 0x3000000}, 0x0) timer_settime(r4, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) renameat(0xffffffffffffffff, &(0x7f0000000140)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffffff, &(0x7f0000009d80)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) syz_80211_inject_frame(&(0x7f0000000040)=@broadcast, &(0x7f00000001c0)=ANY=[@ANYRES16=r5, @ANYRES64=r2], 0x3a) r8 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000440)={'#! ', './file1/../file0', [{0x20, 'cgroup.stat\x00'}, {0x20, '\x00#a\xe2\xa0&E\te\xec\xd4\xd4<\xdf\xb0\xa9k0\x8f~BsZ\x91\x7ft\xdb\xac\x9d\x87\fC\xcf\x9d\x94n\x1fP\x7f2\xb28\x00\x1a\xd2'}]}, 0x4f) write$UHID_INPUT(r9, &(0x7f00000007c0)={0x8, {"dc5d3b0169633d3eba3eabbc09167be55101d4af4b22a373236464d2dbfaa84399b77bd438a54364a7ebc5bdaab4f9decb7c044318cd59a0af8279bcab35dd7daf7a0ceb381df2c32eff45b13e2c8f40e1895355bf6f165200cb1ca41a155730ee2e9f83183e9fafe029d0401b0770618254a8b2dc87b630072b1e2de160d1afed51b74c14b71ec1b226a324482d14ad586b1a4ce80e458fe45244c01eddeddf3564af838d6d5324f8a77023d6eb7aa14397a0e1413ea1c3dfdf063a35b709e627f36fe403ee3117365be5017682f53595f28543062c740a94a794312f5cebc315044b8ea000a5d0f27812ab0ce149d11e6f6f7620c5f3e250bf67d13a1ca39dbb7b8b5a31e3d7ba7ebe5849a7a09b61fc9f2cfc54b89e9cd0105bca49483ce55e0187ce2ad692a18219d881057c838587b915337169ee054655f26a04df913a658fccbf4def6aad750ca4796b74d322c67e9d4ee6a530a22dcc35db850b424d6ec9f62495b9f9fd2b000feadd57d26dbd505798c208d91eb0aab0fd97537631b8bf81ce0e2241c4272be4ff69b390e4485d574146b76d1fdbf7fc5334906805534cdae1e47240af7761a18fc8bd0a694be47529da98bc0f98eb7db3fc4a74cbb6e486f4de90fbf2452e72c2e1dca44543ad9ad094b8bc861eef1e814662d0b350339e3a510d459c6f83aabd5fd3dcb38224056d761e7df9b482b9905f1e2135c1929be328ecdb69c007a3efd548502c83106f6df1ab1178fac499eda92ad4373155227ec2df150c919d322ecb3ea37e659285f18a3e2f79b59900ca438df3a1381380a12d3ad7678e0a8d3bdfb40651389b4ac8c66138d442d70eafdc2df8b080028006b124e4ebe0d9883ef100f1934e425a4146056d800975675bb1913142adbc039a9c68c2f146a0e8903447313f5e5549905f397a9b1f21a93b80c4d04a8ea7a29a50fbc5407a9305bba420edf898ea678d6879489c39692c99bb6dacf61f5f97637b94c1031d635b5423d27f7b78fafa060000006eadc21466af5a10281e6a808748969d29efb444c99a4cb2111732a792dbca4376a125a68f7cdac065cc6173dc21caafba48c742d9a7df2f771ff2f5725b22c247d4e0c6106f9f5f6929b69929ab37e9a9b326ce618bb702b883b12026f1300f21f2c7440cac8c5f1210a78aa067211d2827f5dcc7578252c2ccc3f67bab9d1bb6939b21b550788ef550acfed4bf50c0b4fb3ca4d2872ee64f95d611a317d9daaf373a10d868680b2226396c95fa2b0ab4d6fce06c3b42cb97d17a7b5089061537fdeb1a53040869f7befca330358fdba86754fc2e46c2113e1484cb37534af8f0408a7ee313778dab49f08229964298f847ea66c4ec319f64b6a12da585bc59e82e0263c507b397d3efee3b4066f4d25566aa1549f6185f6375f84b65fa8945148b90430c86a5b6fdf58d5c812b98d9dc621fd9a3d9f1a577495356516d1cbcf5e8bb8923b54b247225b9c3892b18a9e137f3620c734052af9dc8f1ea36f0d4592d5ee32e35676a84dc891f97456f2ac3a4ab58a42bcdc221a4ac8bb28d428add2fcbe5b110a8afd5d23b31e827bd16167b2d88cae024afc04a722ac0b4d45c52512e6b6f102aac4be21bc89ce246539048370553665b0a4336a6db99d0d19399be6437bf21419304331b4342b2c1db580f0c9bf681fdb8e9fa3e025454197bbc82ef93ee2f385660818ec5127080675a8013766469afe3b1e36e81bf2f04c3a26eaf4517551e734d21ba3bc90e48aea0891792970c39f3f528397e9b7ae190f1760fe5960dc763ee0a17939c60bfcac0a8914be82c749e4fe85d1ac5fa733413468fb8941085e8c4d6e0b6d1e62e20da58440facd640ddbb6c1f694b3ca48757a34c5a11668368711a1d4f3a81d31ac30d71277d7ae77882b6841cfa6289e6cce84a3ad57eeb328f831888ac7d3cfcd3a472a48d903f20cec8c8ae8d0bea04ebf7413ef7693f8ed876e49bd5f89d7e1078208ff62712e330fc0341b9ccf26845578d44b1e0c66d1bebc14742baedfabb8e9a2c8f42730360c72997efe0ce786ff330c2eb6e0ff20896f813c2a515ce76f87d2a1a1c1588eb369231ddeb4a2f9f9591ecdecc74d20aeb50047beb3ab89a9e4e1b805a20b645c79d0bc5d0247fab8ba46a97a07630b1f1cb69b42b568af746733d2c581f057873d64fe6e659b00b4a26745f5fba1fe7406a86b007936c7cfdac53a4c5b0ea9f6604863c8e3f174eddbb09175f6e13cda9a860cf400ef9ed02b895502ac6e6de6a658249c3c6e8a653517eae2231e56e0f120547923c6549ebc1ed14c623637ce3d96af5c93a32e58e2d9659d8b5b145888b52d9a5b5cb3cdf594eb137bcef2ba068cfd2c6ccf7ab6e5b4ec55e9197bfb91c9b8729f7b50cf0b0326f7ea3e712c77674d48545ca2a86744c3c38f149d69cf811beacf7e5f49c7bfba20f1dcf3d7bc0b9c796016820a46495d244c9606a06fe2e14233eda78d69ae4523ad7b708b0c7ead44d7fd376fed60e3cc2ee25e9600adfbe87ac7c8fb8269aec9459602af0f420becda6120ce7d9626c65ae7f860639e8bf664eb4301ec18add0e436c0356c12ab6b4ca35da2b43c4a8c239fd0b59a2ce94843cdfa1667053165053633b062844dbb0d00070fde74fa3178eb5f1f5fd02e2088d8690379f39ab22c080cdcb29d700bac74fabd8a356fe99afe83a5d99aa5024e9158a299eda6c99b6701e64f1d68e7e2c0c6e88396bb535a02d0948f0a250a6e090041c96d9c9acd6134d44d516fd1010c39e572b86b05bb1326a2a4f23f11181186f9c2a01dc7b58c0129f4b851ca9b1e3dc35db7364e29ef646211796b1651511e041345abce427fa5d6e48b8fb078c8432061a4cc518a8f2a2caf709a5c1473a62112a6650afc64eec12f8f9c08cff1b6fbf7a1209fc8661f62303b7c5d49c1d0b32a9f37e81ed9ab6193816d40995ed49c10b9f5752e04d57535a3d16f06c65d32846c31ec9787ec4a965679eb804e86b45d007f38d8104550770dc6f313bc846e43a14a8c21d0628c744e3e83cb998d1b7acfe996541a8c03852dadf9326444c582b481cae844e4f3fe3d638903b38f24633b63adbad841ac6c4c1169d781a0e271e8a967b1c7e986fcb3a66168e86e3559a44fcfa92452260491da9397659af60453f4cd4be2d15439445ec2b4366a79d3283da912d9d499df1242bd174edc235848caa21d2c997aff0e95c7e5cc0803c90fab84e7be7b37909d0388acb6800baba183ecc8eea8c71c0d65d669e41f99ceae523b7a6b772f3b8ebba1d2127ccc3ddb7ddcb4ec73cbdc26fc87c3848e258a0b5484d3a13e40ec4e4a65dd92f09e9fe1e3e2f8b96c4e363aa3683860dee62dfcf8823ee4a3593a092e0bd9c4cedacf44a272faa164447b01f46a7795642a40c61b0034a37f0e9b792428a0ddcd144fe8263088eaac8016f8f1cd30b55ac90a8f10d785b7570dd9e639a4a068d3fe98a42010e24f69de817f676c2a224300d749571ad43f49d1fbe838f4566bc7b5f104c384ad87189213152b644d9fcbdf98bafeee569d640ce9045779f1d90024c023a7480a358dee276fba139c14b4fdb12885240903d0e61dc161659a68f62c92b899007e0f2b65bf0a069e9e57c9b6ae50a3b30dd1003fb0eead73ae2f6010b3b356b4060579a4f29935e1f00c01d12e5f44e8e3163d81dfef7ca8560604240c7e96e4454c6971614df306c768121abb3f628e3f1d2d026f58d1087334c5bdb74d7c949b0ee66a4531ba4e9b922aee3d0f802ed034734507a5913c52966f1f8bd4577840de0253aabc23299dced2a299859c07af9fb0f9c29b6533b9d84d471390d59ab315f5ddb226f6b8dd7889295f0fb1f7bd1adafe4cc520a1e84bf2a59d5b9795aeafc8d6fd66a8228aba8653b98622617ddfeb5d6795c9bd2f35d4a0c386e862675a50e3314c3fbb17aca151c13c7fc8b1d1b72ed0a958537b5ddc9e74bddc2b9571ec3f2b7775b125338d4852a75a63941564c65bb36dfb6bea4aab1ae7a4f285c2177aa98406eb2cc10934aa92d5a9612d4455c84ad200841d289b5c2d5deab0d8e2459598ef183d3dc46f6bad0b9513710600cfa4d69fcd5763cdcc4f2c2b7cd7d4491fd52f4aec82ce846c0988f6f0123e21e900d39c61085e68c9badc350b44004f6c042d64b0d0cbf91ad0592b198f1eeea1e52200bc8e6d62848d6884b10bdde72466039da488be6b340c23148f666f2fe6e032c07dac43586df182aca9116f4600313fa8375c76337ba86bdc391dae6450218f58f047ced64befc6bb5c2a60024669630a6279fedf2fe45e7e19ce582ad96ae0d023eb9b39f5f1e666e73bb038ae38157275be5eb3e7cbc8b05adf53e817646bdc2cfce98e5d162bf7faaca787db8717ab8b27b9e35609c5fb9fe9def07f010df8b43cf5c96851eadfdeff0b7bc5826e7e15490ae9c3d14166ee81bef007070e7981235a673804ad89943ee6b51ac63364f7870e121e6ff23a0c7d179527cd58dd7a4ca37247c2bd9efc79b720bb1ee2d39862e98cb81e93cf5b48d5d02ee8ac737ab504c867a1c49e678300803c94fbe978dea918a1e71b9791ee1e4d30056e86c26a4670b451a13ece52a89a7057fe2052e11c6666eb916d823ea66bf217c320acba3b714910734b2d27c2fa586bd7f7664b0d1422adabad2ce2afc10270057f11940fac1a51d023ce48bd04ea39b7f99381b239fd0ddeea0dce7863ec1f8f61775013b6414ecf86e686a340a3148f87a9d7d60a1f2da53436d16fc88d6a4e7c3d55e0dd004cbecc15a5558eb705d82aacb1862ddc251dd5d9cbf1d78f97900ce6e8dab0ea678cb823bd1e7bbd1e927878c19f4f322228f9b36287fc13e7c1293ea875ae73815e052d6c2ebc40df8f7b9d1f76e0b10e35aa160944983d8e6b790df0d9b13f3460657336d81f7d83c0350324b930ec9c7557ce12887f76372e126f504b0980fea27f31a780c05187b9b5353dafc6b101543b24332b96e15bc26b19062e52fa9f86d260ee3a3bc92a133e328407bb85357ee5c45cb87228f44888b14941b5911b050e9319fe88033f830a8490917a9c0572ebbc5492b4e1083a2e3d77215a34abef947b5b9a950e780662de18873e55899c92db3ad3d437e8407890afa6b0c04ef861b8bc85fbbe1bb67b3d9ef001409f84b8ec4f01d861cecc143a805b981ab5cf5b605057b63cb2c84ec358e510a69cd8c33a8a62fe4680d0c980145cc709157832bfaef261cb0466c237376ca2944ce9affffd4b1dc7cc9511da0b34bffb9ac216fb8cf7c6572d95627787720d1ba67c6512fcdb16f6329e9668681c404efebad559f81f05971b5efb6b4cca97ad0346753cc0a40a877242d8a808c602b03dc962cee38e646cb18abb079c70d357c30738a70f55cd3c5956a83a1bfcd6649dd765f16bfe968066345df7380bbc0c16b3b5af513d6458c791343952f33a051c5d711c1f35af1b47f3db9bbfb5c7c636b3a2b52805d606479879be0b404a28ade5649a3185e0f85a85fc15cd824671c2befdd0da509597c87d869f0bd7ad163ad93ca28fc0c4025eccaafe385ec3fc06c54ebcd7b07b6c7e0197c5b9ef886159a1585ae45248f865be760db6f5bc8f868fc6aefd04e34ecb51159e4cdcc2214b42b1ca9caec13ba3e1b2e7a3c736977b226213d265c2873195122a9b448088c8b50edd549be41c38ab176807b75e7267f86e400000000000000000000000000000001df00", 0x1000}}, 0x1006) ioctl$LOOP_CONFIGURE(r8, 0x4c0a, &(0x7f00000002c0)={r9, 0x0, {0x2a00, 0x80010000, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd0000000300", [0x10, 0x4]}}) mmap(&(0x7f0000cda000/0x4000)=nil, 0x4000, 0x9, 0x12, r0, 0x173b000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x4000, 0x0) 10.944158089s ago: executing program 9 (id=690): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x20902, 0x0) write$sequencer(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="37645fb875da63608c1e77346a72f4e321e97d8f77e24e30ced806d7e245e378778e4dd3340277c9f2dc70a9817005e65cf13d4af42d3dde670472519b0d39fd13e207e01349339c13340aa8d516133a7acb4b126b78bdf19d38632254073747cd37e17d5ba9194247660108e37aa56f014a9ba283a05170adfe"], 0x10) r1 = memfd_create(&(0x7f0000000600)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x8dy\xf3\xb2\xe6b \x00\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\xfe\xe6\xd2SLR\xa1\x00\x00\x17\x1f$^\xe1\x00\x00\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\xfd\xc7\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x16\x8e-k\x12\xdf\xb9\xb6Pr\xd4\xb5X\\\xdbD\n\x03Gh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba$v\x8e\x9e\xef\xbc\x86f)\x01\xba\xdb\x9em\xe9\"\x03\x933P\x9b\xcc\x9b\f\xa7\x8f9\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\xdbU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x1b1\x9c\t\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x13\x9ajWt\xc9\xecd\r\xd5)\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I\xfa\x12\xfc\x96\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8fg\xf3\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm4\x19t\xbds\xae\xdf\x1c2\xf79\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4\x83Mav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xe4', 0x6) fallocate(r1, 0x0, 0x0, 0x400001) bind$alg(0xffffffffffffffff, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) socket$packet(0x11, 0x3, 0x300) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x20, 0x1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c67726f75705f69643d3759d3b0cf0c9042c23ec096cea4c8e82f31b881b03f520f87210ec7a170ff", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(r2, &(0x7f0000004280)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r2, &(0x7f00000062c0)="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", 0x2000, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x10, 0xffffffffffffffda, 0x3ff, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r2, &(0x7f0000000180)={0x50, 0x0, r3, {0x7, 0x2b, 0xffffffde, 0xffffffffa0000004, 0xf3, 0xfffe, 0x2, 0xfffffff6, 0x0, 0x0, 0x8, 0x100}}, 0x50) openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x4402c0, 0x1) close(r2) syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') syz_open_dev$video(&(0x7f0000000440), 0xffffffffffff2027, 0x8040) unshare(0x22020600) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000, 0x401}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x18c6}, 0x0, 0x0) 9.723659809s ago: executing program 0 (id=692): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000040)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000000)="03684a7b99a4fde940f3ec0d105ea2c8267323117153aa4a4f099c3835a607cd5cbd77b83cc33d13bbb6c6bcae59db739af84a4b5d34bffc145f3cc27ed3d4f9d9b3103699a1e1cc4ddfb6c1afd07ddfc18e358cd62649479724ce867fefc0a15041bee9f6084842fb982d5c2cf1488d668b741c64f0a6fd2643e729ac5a56462a6b64d5a0a751fda4fadf63ba0dc2fd14ecbf546918db77095545b41ab170e5d6e8ec8bf9ce9b8d53b832e90c701fe52af7999f8fd509577ead1be27891ada8564167f2c7d2eea1c1c9c65d8e151c58ddee43ec34e74d330ec50cbbb2bb21892c7ca995066e3cbea8a69d94dc6bcef5f3c0ef630e774d092ea58627f3e09c66a9c7d1abcf4f8f8af87f4269df288aca9bbf758275ce9695256e764d185a91a7570fca3aab16c75ecaff6b8dda371c3226d6ec6e55c5c4d8cfc5c33892bacc956a3613bcfa849da1b5e070a7911d7488b3e628d9339718e8b821f1bb5d5c45f0316bb563d0a442801412dfd5a4d61ca657e04d6686f7d5863d57954400aeee8e79be8f3cc4cbb3d4b91269df039c3d3543e500b90a2bdc6eb60cc7afab7b5187d88fbd76e6212ea29e872b73f925287bdc808b4a4f8ec7f8aa08bc90b29e217c3eef69d8deae4141f4f9bd110b7bde9320e7b45f422e9a6111bcaf99c9911e46e219d3bab477926bd5d2e78d4cd0eca133c232b1e863fd7799dbf609f3670b323e5518e8f4bd36e9b3da2c68a28eaec9cac688b4dd0b73adc24a8c7acc264399b7facbc2f43e8e40b6cae9f8e956d1dbfe259f12bae75ad362c354050ffdd6e954f2d7615fafce888bd6f672a81c9fd4318caba765069c0a425e898bf7611b77f0fe61c27d318159dba42f011900246c64557d27b77aef928ab04a147baca37863cf998a2ac30b903c0314449ddb218887c309ec7184c8c733f5d4e7b2d79516e9531c9a5becf8294d6ccd777f285b13160e1c949d3069c6c66c0daa62bac679bc9b69825398d1c290d765e882fa2c8708b20ccec885ab6785dc22696b61c109ff84bc5407932c3e5bf12069a68b8e3333a26d3dd390ef9bc01b86013fbcb5c28a1f4d2b8084f1502fccc4027a124c3629d8f4a8befd14b597cebda5f94f36050a31b95087cbac347788a71a90e87f2187fae600aa42719c05c2859cb30ae0fd58a7bba681f7a6027a00583071def2c9a94456e5d9acb9fd2d11fdea524582489c02377bf7f590948985c769b3822cb6366681d79113c6a6c752f2475caba77b7b2e8f293d7fd9b991f63e254c98dec94f4f3def4fee9cdb56ff3ba7fe6a718cbe9a7f04710e257ea8a49d6605266048fc122d4f3173d4b04b3e282bd3c5198d7fcb72ec38e0b07dd8a541b2807e601e5a0a01f07a281e0e1a261c65977088a54597efd0997c59647aeebb2605a89705eeff3ec780e302e24b23a0cbe4f81367c3f118545f01328d22eb8e802667389143166a9db9477c9b58eb5c76a19b8f8b2692b0d356003f08ae54dfc820d8e357ecbf91fb7e212cbef1262171abaf2f613a5bb59b783cad476fec50d16ca0ac13c08a59a3097e6e3fde700a4b987d10311fc22d4aa210956cd859799f78010e4c0f25b715876aa253df15009490f71be3b0022875161f537c70b14bdb9e2d87a5a11b414a1198533c7de6fc4d22228133bc26b19d9f1e7627b14c72e3c39d3fa2186a42e50a0d1867dc312f94c7209d51475ed4aa80b2ccb0557a40422bf7317de2fdf3296727723a2d23babd5e23f7c3edf4942bb485b95a122e6aba41b8f80f684f84605462448d5a4fd66dfe9bbf80590b9999b4780d4f4f189a20f4400b2975df85b584c8c8f9fa3095f13aede1f52dac98be358b0a0d72bed4df71cd23973e326179580268c4e5d1be4b2ae2e1e2dba913998faa6088af128fc8fd3ae26203a898882b67d86d63f6ee8f8e216337330db6d928facf9d0ca273845ee5b33a0a136aeb48b7c52d3b95fe73efaf06197ec8753ee0349f19db8730917d0f18a2de9602d3b887bc583ff64dfee67e2bdf4d5cc1c341b89acd3dd5176d2c15ec2a77120b8a49591ca438ae36c52845e5dca550e539da9ba2a2eda49be316f3d6d4b7c83666bd4759940347c29dedd273adac722630a940e104316b4806553ded47132be4e31a50600f5a4dd56825b245b7aae853f56f79e0ec31f7b5db945ee3bb92865acb0d8828598e77446ee50ecd8bf5e7ccbd963445a09e3be215709b0b3bff2e9d12e6549924338f236b4ff973682e2e03fbf6b167e3b3a0f8c3f3c1e8d0e21a71937c918cabab50dd74c011a1a5531cfcf88a5df5fa58f17715f7c7b3a64d9dab6f20a596288969191420ed71daccbae7c1ec88bf74811b5e1f4bd306f3d810c4f3600df2903ffdf8db40ac7153fd93327a1065cf2c4590c8ba9f9391eb6aa600cb42aff8793e4721afeb3d470beda45dad9adfc6f4fdb24eafc63792f5015c656ca37cee82b7ee382bda31d786d6e03d4c8611c4ca464e2360ca747815c9eebd38c8fc7d5eea2db96b29d771a96dc5c884029077125bcc31980564555d21ecce5d0388e1bc1e618c7dfb31b02b1a6730db7eda387dd4ceb96f65178bb088e81133e5086f73c458f84139685ef930945a51979faeab539e4964244709dcb8b38f575d3a3ec1328a0df65fb34241db7cb3250b8ae0dbc44670d2b5cc3a1785d8d281c05256ef2beee3b202d8bce053e55ce1fb2bb208e65d488ae24484b00c2e343fc3544ca546406688022db6e29ceca9539ec095a2a2cfc5f516230f75fc961c5de1e8d33222331f57db02cac5f9208029c6114d041bb1cc7f959f77511f5790a564600c018afc253e5ecd5010bd769b45a04296ca09e87fb63bf3d3b51dd8b3f6d4426a03c0944d09dff654c5718ab1fef063caba34029be6811502e8bb785011dd1e34b0c192915adeeb40faad0725a8f9a62acf61b944a271d20567f350cdee22d76e3cc5966ba742d9c43823af19ba74c60da0df0c5f4e7e26af7224147774a1f8ae09f929066e1769ffb3c40ba9fed13d2670b9e865a155426ed5c83648c0ad34e46f5308b455e0835730fe529668b606f3f52b0d04534d0e14bc0ff0f742359550e6980ac9978455adb3de0f292af12a3700453e035a49eafe98fc0d7f26e42a6c41f380448607b7c96291f98fa6bbd7e32c249a49171f8fa81762a490a1ce5c39d66d35c6ed6c0679440c06197c2e24d48e1de81c711164c02820816afb5393d3d6c801c3c062ac46d1494f52c45ca36faf94894eec9d71e1be6c7256f4aee8dc080156b28623c821ef8d1826ebf0a41332620f42589270e142561374c825e828e2bd9ae41fd34959db48319d54ffe7a1b58ae8f7361cbaee8e26e0e7e1b7f125f8cd99788825efd01c38ec987904190a0ad52bc20cd36cc7209f9269ac87b2fa44d2456661d3056d893cf912c69ae6b2b83d0c781a6d6c33df1910867b71257ab74e244e3ebbac07445069418fe2e440a384e16feedf8e3165676e67866430eb6a8a5334620d8c2cda15b0328bb0c50630886353f95241cf4f3b647a4ff812c70e1b074c4befdc70fbfdbf868bcc81652034b5bfa831f1b686724046dcd17ac91ace83711e9ec7465d14c9d508bce93676a58ef7dae37221436865ad34ac2fd691e3b3e12aee6736dbdeec9b1c05fcedf8b9ced547259a1a40471ebe8b4bfda69d2f884da025e2809fb9f159150bbcb331ca3c502012a7fe76b4fc2771976aeb624ad7f2d72c707f5f19d8ded84581ac5afa697ff99d27d88c9588fe769839c9cc9d6786a0f814667527c53b6253b1825bfe17e7d734d96d61da0ae7349d0922774fa9b4baf332a4568e32cafa417ec659c4ad72cd656a1e2c59c8dee38890ed3acd8b4f8657de41f670106c38c38ba1a553f0f589a57c61f5105d70e0c0953459383cb9337ca972cda1d2cd3056eb07f21c1f5b995a04997fecf501bb201c67fd2afe4d44fedea595969b6b3706087b0f59d2ddbb099d60436a94f0ba33282b29f6e914fe92add4b33cf70b680b905cfa2b2ccb00b9967f99806e8d69783fd35a2d7fbb424e9fde2647609aecb0208bc3864bf95f05e50ba12123edaca8de927b338dfcb3cc597947c606c08315061a7fec98c48f480e2febd26fcc8dc12289aeb0adefa2c2be1766a5bc74ef1aab6c2cdbdfbf1810d956bc889c8e614b7b933ff6e336bb208db5b592775fe71c3ebfad5f47e0d074e1c0cb36761481ec677794f23c3698bd35875719f242e3fc939bc3668f9723f31effe189dabdf4ebbed073eab952c88f13059eee22230bc7724d7266b15726a0b0898cdd274e3e56d0a356166b5d16456249e9e92e84e39f61c0ecdf99ec2cd230440c03fd21cf68f27306628d35ea47367775f39d20a07f3959b38d49e3674061fc1018b647047ad39f77027878badd29927c5806f95aebde5f070fed28ed34052550678d3c6b677a3b5a46f76a98264c42206bf62caa95df5437092b68e025ee9ce2ad733b6db3ec97fd33cdc3b2f77ee90dd86d8bd289ae1a437c86f4153ddcff5e846347bfecc1499bb42980e4fa91790faee1b1991dfead5d7c460348631f0469b2b9e8f65207a00985511e0c41f441d9a3154f5a0298c172fd7135d4bf95c11cdf1769db1cc55f392aec309037599327a7c53c10a56d1ace8ad19186a2fc75dfa9d657c114eae99c1c1a6b4a58440718bea82290bd1c2a67048938c381648ea2b2c7110d748c9c8d782f20430b1427b51d7036e55b0997c6f75717db67a82c88d3647ee036b49392f0467d6010b32f9de3e5e79ef082c5bb975d11d2bf76a97f7159c11a7753db8a065d3126ccda9abbebd2c54374e389942c24b27435868fadb45bb060d3c1084b211e2afa8dfaa2d8dab8dc47fe10e6c32afece7c4976176a7c66d704125c0948c238c843b41b0246be1f50f8e07884cfe7ae8885ca06339a339c8d5978b079e0eb78facfa1dc67ca70733dfefc6c868ca149e0661b70e0134870a3107c8c46711fed14f892d6fc66d95306838688f13b19e904416a8d161cc33527878b38ad10b1c08db21457b2075608be7300d39748e4fcebe02b190f3e8ed32a0ef734b11ca43a21f5f809bba795f5aa0ea01050021d0f5213620af5b08fda6421a42b7c82804a20a6ef6d471babf76f46538327f943476d1d109a3f0dc531233d6f93d8dc27f4745735085f92adf63d617b373fba24f289035710e69eb80da12d36e8eaec22620ffaabadfb824bd5fc309a2c74959505856b5b890bba8f22bc571a9d87e93ba3b9aba6dcf26f7076c0c2e271641835ea25fd49d96c69d4fb8bb8731bd2cbc75146aed10d269f9060462339cde8830b535920be3dbf143eace0f1ea9469b95a64fbd7e5057eb880d4422cbf97cfc3f7140251d4923580ca2113f345cf24a66499ceffd2e39dc4fd74cf448638962957b409f0d218c165c13ffe107aa1dd1d9a02092cd46cf2b353dd2d2ca7b8a7ae8eda0ee18bba269bbffed0c7d400497aee4da0896cf6329d76ccea098fbef9075412d1c2a3644cf0f202b884303d204314ae92c56217b2feb5e7c1e15a99fbdd655fb8f6bbc3ab1259bf03b2ee17c5b7e9443695177ec5040eeff3fc36ceafe143393d76a3d735cfe6c9b632e52dbe64dc1265961e8a27ee9f76c0add9e0581e474d7678214f5b64c932903715befc6b766611f1d7e495573b9a3e009cfcb0ffef7ac57c3561badbfa41c119e541180aa2364de61a601699cd1bf3de01d15794b728e1444efd6ffa1e57d95489c8df91fbc057b66dd6d9f3a01b19f36bc99f0b54ed1f9905067dd1608bce47f5ff1981a25184aacd39e331d8ff3dfa7c012d7e667a69249cb4803b23f7eeaab8ed29c69ba3d2a1b88821ffefc5825650c53b6364f38e0a178312f5d29d5375423cceabc8e1c4e51a566ba3f9b176b858c8860440ff8ebdde725640d2dff6b9160bb69f188755b0ff766b410704cda4c33e1ae2c73b5799a00d2f55de73109728b350302b64df2ce3eaf2e0c6561009b60c2701ac493076305e97ed20c3b42f40b2bc7f13bba4ab8181e2085b07930c6f5579205dff696902be824e65ddc774e886e8d261fe74712a31e406b0f7725b4559d7ad0f27a1a870261aa5bb8a720e7c89ba933770d48821416de070df1abcc6eee1147c20bda090d940aeee2bd48c0f3d94675d9b9cf1a62ba50e31a7af0714dd8325d5fb7142e88c4d22ddb8f0278ee6ba88e361524e291b6d000f6523ad4188b021da9ef4a634ed09eb2002b9c726746c9ffc32f261edb448106aa1e2daaed865255fd1d296fedbbb2de3f7c1f15935e52006492b632ad125aa1e000c9d71bdb945792668e16b26122a3fd7cba1a40db8083068c5c48fd2aaa621c87d9f5621bba442fc26839030dbe4e37fda4046d6503bb03e0f928de25d4cd4e2a40ec93c9021dfcbb25f6e2c943cc85eba8123340d6364949581e8c8c2913d59dafe4297672c0b9e7418485f00cbcf672a588904beb3c074bebf339815b91c7c374ceed5a701e1ade8f5d87ca536120116307ac259577a8e12958425317c482d2c7089bf3d83e12318d1526107a050f3c094492de7255b22e18ca2ff261b3ed197f2f8e67b71b1c5a6a04b99158b58e9baad75201aabe13254617d0de0a9073af62491c67fc18d1ccbf7686a85a99b39e9d7d9c85a0777e47c9fd0e10c932c20f13ef287b44b9b706ec818aa0c48a10caac58a9b8355e84bc820698c2501f0c12e1b67df701cfcbe72dc47a2c87d43753ebfdb24cc838507e241d9fcd3d4955a373209ccda903a3ffced05e4232f2cca9bba197fdba8a9357cb1d6da6d9b4095027dc03e17d59ebc2d358e171da0044df102b193c79390ebcb58023b40c621df71e064b0056bfcf1eaee1eca85357cd1ac78feaa54bbbd85596977ba85003ea60d8685f4e3b756e4f81453077396590fa214f672929e81569442023667b798c24e06ee20dbf64cfccb51b2bca4e2a5b0df137bb37ab3e2854dc7e1b879866a72a5809b563596cc9fd3e53abdbccfd5dbc60662252ddc5c290d72230d79b7504b40fdb45ded2f02e926652c1e04ea4c1c488025ad1098adeebe98e385ab1caec4b9eb4d3bbd5ef3ddf1fd0d72784604a989558fd37f6d4fee20609090b3331e254fec98414a2c54589ee01c9429b7cb574b9167efede1d966a227bf2a8e422f38680d77d3c555cf1117e7d7e804ad730c36a78b7846473d6481bd0839bd3e6982ed47246c370a90b76e5b88de202346fb20b8b6b5ecb6a90b8478d17b175a1821df75b48ecc34866fe5c8960bf64d5ff92831bb9357474bec65e0dd1699b0f0340ee5ac5e9e9d3df66edca20201371fc21ad80aacd49c6b0abcfee9c876c15edcfccde823b55b61cb7b254487ef8c8781a22043f4adaf25df34580a6b3904fd014b50c59fa90eff75fa5fd32aaec9aa10df8a2b9b824952e475c964533942bbe30f4167a11fc15d548e0a31f911030569722f0c67e79e90483f6f0bee1c7f80face1a1b0f940c891be688cb16394f6c07fd29b5f248c211d1f76ec1292755d8bd963e191b3a8851472fbbd2cb732f4fd9fef3a8fb29aea097328173fdeaf56fa2279e86fb954306b040c960d0b601b3a741c96cf1f0bd1172f848585cb3b57d7d2e2a84914526f5a6f9895cf5aa4425b4dbf9f59037756a0321bba204a737e36277e86fd268f6047921f4f8fab69dfee137c07874f12f89084e7117e2c9221690a27f880f17d08d56f9dbc96ffef3920b55fb773dde72e1ba35f3e0c9872e339508281426ab04941df4885f7e0293149f1642c2573e2b6594b8fd953ae2468cf917cdaa0692cf461e3628860935def39af78af5e1540147ab1c70c3ab7f7c76abea0d8541feb43e632d7a2cc7bef15a4700304048ecf135968d0a9644ce899aad05b186a2224bab3836248cc6137472203ebceb29b3e87610df12417ee722f309c54b2e65591d8b929440f3ec43ee9ff8f7b7710668e4312610d1591303d5270394da0ab61e4515af5215dc81137f0dc90f951972731f8d98ceb8b4ea38da7d8dc153ccbae5068781eaf9a4a7b11b4319090261b61aa65a8536292eb5392020eb285b2db07f81e7f764d65037050f1e3748593474c6c1dc11cfcb56e1c916157280098a437265e1c682cbfed717e7275bc6c3bb6c6ef7f0f9fdd19ef82ff2c82284c3a061f57b21d3705aff97710108a7d1217a7ea3feda021d20f1fdca94bbef67e0aeaa3db6ccc2d060f7b33707fe19cb2d0232f1239373bb38e666cbbbf3a697c6d0e957ec6730f56034440e789a7a37304d09eb742f21019a77c608cf578162a55d0aea113c051b110b5281ed8b6638d2b31604e965cb019f2f106bc4e96d1313c70612f1ff18afdce7926270dd242c49cc53792f160d1e143e04d7eb3ca40828b153fac466bc53a084281987b47b806a4ef668859eb9035ef68e9c20bd6bb790fdf6f921569b4e97fae5b7edc761b4944c1d6d90f4df40bc3203ed838d4c61cdeb7a9bbb68d59b2cc00125eecaf06b759ac1b9dd68028225d0a60efa499e4436962362727011eef6cc55962dd4ffe2fd3892907e837045883cc9ba8892ab265a31924f3055d4dee68feff05d9f10ebdf1e8c1c1e7001b5b02a7fe26b9c0641e054ae37854187fb1bb6e9fae05b09e85a1e0e14bc801f2d8b9a178a9a72b147e137e0d83192664a88a3aca4fb6a4f0c5787b20c31bc5975dfbc8bcff8987573bd14b1ca434d93452e67ed01c60be99e535bb3f848888d224520b61cfc1de2d6b2ebef9f24674c31aada52784a0b7b60f351653c71d546cf951e6b4a0d917ac6afd0a713f41833f9f74a3a7d3c19b523299666da2b48676ca7aafebadef05b3bbf4b6b62834046f51d3d4582fb4c9de27a3f5e992853368e4f17f9dba27c8c4438307fc7405f53fb27cc81c1521452a1a5edb0cabdf7a73b1cab0675b619fd5a0fadb7147776e74695c042d9d8bfda045bcef7542b42249f34c7590605d0201a762390f2fee5f3cdb488426609c663c9fc4dc2a5277f3f589a14e6dcc202dfcd89bb148a368ff1792d230c19934143d2c260dbdfb334af863b856e415febd22fba01c568d8f48dba6d92f493cd1164a376f006d55db609cc2c9532a9f56da3b06e3db2a05f797eed57892e2fb677541324bcd763cf4669e7a871e322d0cc6e21befe3c767976f058dbe7a059d673c94c7ac5d49178bf19d32907b6fe66a92cc8ea30a858da43f74354390d6e97021da50812c59a78915e5b33221531bfa054c594ce3a2300e5a7d712773181901dfcf6922e980566fa62b1f2b669a27fbecce29e9be6d22058463e350163f33d18ce92a72d1b470857b6a37998aec5672521a8f0d66ab2bd01de516036ec47d1f63b95b437dc6d5a0168189d5a963cb0a80a9a5f20b03515396e3525f0ab13b0c1e5dd051b4c930da6d57ab6f7dd94ab3e689e0355af0b34871296152a76cce170d7b14d471ee4d9daa93de4ed755f30d45344f724288c17e4b22583158f1305ff55fecf7d526e207fa609886e14c9a168bf364b049409f63590f18a5515de8c1fd8c5a9710b6e33d2ecd01466b799f14be787612b8f17df0c05483a16097c0a504880249e28f1e067663c640a550a8c7ad9d090f7b2e902c5c20936869a5f3d3a014817f90babf847b43cf67ec23f120ae4abc63a418d1d99f359fc2c33a5bb34e1f5780576111a88c5ede834bc41e498548ddd128f9e884f4cd3e1bf1aaa1204079ce74e709306f38f2d6859128fc35d3a74c534ff1dccadfc8fe41f1be9510349af8710eb6d2dbc758be12b65622dad1cf48abc2fc409f5ed6a3af8d0b6548643c46dfba9db4e5827475e6e317c9c018a4dd5de391cc9cca85ec527537e26949e5091baca4f0b563d4c3969f15115e5ccdeb9e40788fe12f9d32d9488a70ae53b819726e4483ea6bbcb76f99775ca5e4f93c76edae462c08d596209f985aa55ef5e786701edcee8d831dd6dc0fee9ad01b6bdd63e886a5e55bdc593390c81e18dfd8c685b81306bad6b7a19a86b2bab5cbf4754708422e99f8f2497d798b3db565e709bcbba4c376c1c60b22b994fe8fdcb25215d505511cc1927f6a35344023d5da0a3ac0830e6aa80f5f7f0d94a67c99c6b22717078aecba2a599daa2acc054cda25e3965172e5fef464ec19aa71de5e84b6de30cc673fbab8c441ea37bfb3fc321a504371bc0996702e9be38db762e339ad7ad66dc2caa887e4ab60272d7963f85b14c941d31e545b85c640427302efe7142f0e0897a8c623ce57da213fbc2d1f90677142fd48cafca0b2934e572833ed6473218d0513dd1f6ecc578e5a1109ddae552b3be0cfe7246d7682a59fe9ae783a0f318d1800d5c466c80c5fd3facd0340f455f081068dd2cda5cda744018d902217152b6c05d37c090f8348b0471053152c2a4570fbab3f6dc30c8e49a63b88a00b3aac75180a633692e35ea976821694e133eb8bb4d31237d002fce1dd2ce55528dafcef2f0e00690562d144bb0e19576ce6ab72deac22067d8edac916b1b07e4eb57ff0b885b1b79f37dcf88135eedc17ffd948b61e4df4985033bcf891dd5b1448c8668947a271d93d03ce31216810a6bb45a6c5a12e290d97a60ad4b5c7384cf19421ac1ca64d346b50771e0b50e5caf1d9dfe056e8da247aa502ff04c8e29ca810a1d3ec7a89bc17dba2936f03a80228171f7999b3f2768617970efe57b14011c80666ac4999a568ebef74e2ca14df0ff6f0fcd47c538be96aaca1e65b53b98447101e49672b48167c0afc1afffe669b0f9718bd3305805c292db9738740b362564e4691cbdf061db1ed3f9db1f8bed82939f835d14f46818e3eb4e25f7a8d77d9d0d7913c45d8a81115c1a5e37b1d3bd1b7b5e6afaaefc81d9700bf83506fbf15457bc0f59f7008cc803efdcb6d39e388f6b28e80d47134265cc5438804b12d50e61a489da829dca05792d2ac182ba747331e88a7118f7dd38067f7d38f37be362260effacbc33863bb47aeebbadeae648a1090718266eedd2ed5a2c23f168759198aa92b2ac45c2a68ff212f29260e641a38541b066d39df4e95cd1c8e7e6ffae1b8017e6f629db3910b07496c8a81e4e66ac2321fd9e7ebfecf5bf6e922d7a79fb710a2d42dad1916c9b186c2c50c818fdb1afa19be867d943ee98f732fe3a01364281c0f6d0eb64a278721dc7bff5316256b0f4251abbd9b8ba7c7c12a3bf02a1fbc9ca94b965588fbc82343d07df8e06eaa5ed2137fec129351d80a9048a7d78b31ffaf2e388864a763c4af7aa53000e0bb2eb8ac0e4272cbb79dc6a7d65890f125c523c7cfddacdedbe87938aca915c92c807dab26be7d748827d4e3188676312ef1ac8460b29e8e715f4075e33104ce82e6785aadf17a7cf82d2a705e9f2d0fd25810ba33d76e54b48eda3effc01f37c89db38af81922fadc8c3361fe74ed51eac5e4437108106ffdedb339b406c082d62a8bf718989846d23f966e1ea39103010f767b3a6f0a0a2041b1dafcb787e69ffad75ed2a0081b92a4136ad5ae557c55a4b6219a390103428181ab36f329ad182a92957495c", 0x2000, 0x0) openat(0xffffffffffffff9c, 0x0, 0x103a42, 0x32) r3 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x2c}}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) futex(0x0, 0xb, 0x0, &(0x7f0000000240)={0x77359400}, &(0x7f0000048000)=0x1, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000080)={0x48, 0x7, r2, 0x0, 0x10000, 0x0, 0x8, 0xdc74, 0x3d4e17}) 9.422036297s ago: executing program 0 (id=693): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x32) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="060000ed03010000ff0f000005930f548a522f2e9b4e81f95da8d32aa4e9c28cad21683ae234074601372995317c292ba0ea8a6f46e618850aab007ac9c806638c834579006033e6c21b4bb66e9c666b6081f2999ce63e01e4444ee4c18e9af300"/110], 0x50) socket$kcm(0x11, 0x200000000000002, 0x300) socket$packet(0x11, 0x3, 0x300) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x60, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x6}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000003, 0x204031, 0xffffffffffffffff, 0xb80a7000) syz_open_dev$vim2m(&(0x7f00000000c0), 0x8, 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000040601010000000013000000000000000500010007fc00"], 0x1c}}, 0x0) 9.348035227s ago: executing program 3 (id=694): r0 = syz_open_dev$sg(&(0x7f0000000000), 0xf9ba, 0x501) ioctl$SG_SET_COMMAND_Q(r0, 0x2271, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) removexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@random={'osx.', ':%%}.\x00'}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r4 = dup(r3) r5 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000034709d405f0530c6acb60102030109021200fd000000000904"], 0x0) syz_usb_control_io$hid(r5, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000440)=ANY=[@ANYBLOB="20007e78044101af3d00e4866a94f2ebcd9e619244678a8c320d0904e0d33437db5856d7c7307fd31011a03fda7b293eda4eb16780d32796283c937fae01abe423800967748f8db062746c9274edefd3d60d9f04d5d9856e3b34113809cd78ead51adecccd8bfa639852be9cfcda7b8477e750ea365faf2fedb5a3330fc419a37ff08ddc4a406a2d0f4002c0a1f33a70277b57bc4917b12065c71e89f2c7b0a75d47b6173efabfa00e3e4dc91da7c032cd0a4d6a4084ae567280a95178771ab8d4ce3904f6"], 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x30, r4, 0xfec22000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) 5.446690775s ago: executing program 0 (id=696): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r1, 0x29, 0x10, 0x0, 0x0) syz_usb_disconnect(r0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[], 0x0) syz_usb_control_io$cdc_ncm(r2, &(0x7f0000000180)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ncm(r2, &(0x7f0000000880)={0x14, &(0x7f0000000740)={0x40, 0x23, 0xc8, {0xc8, 0x22, "930df128fdbf4c981caa6a256b941d2c9666e10a39c670c8bfca7ca2533fdbe25a5961a69ddc15c5c86c72201c5c32cadaeccb4586045069dbc279d37ef46ff767615ab123c02531cd60269137935f816a21fbf0fc03761b145add6d690518ade93afbd63668b945b7317bc32a485a5ed9039502b3fcd3e697ddcbc73ed64b0c972af8aeafdb4d6cbf6e030b7676596e2f3e4d3b2d19b4418cc89dadccc1ef0695d784e9a26bdbaf6597910e6297dc4046a684a440a29ad44897468539bd3ee3a9f7f5e39b92"}}, 0x0}, &(0x7f0000000b80)={0x44, 0x0, &(0x7f00000009c0)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000a00)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000a40)={0x20, 0x80, 0x1c, {0x8, 0x1b, 0x0, 0x9a, 0x9, 0x1, 0x3, 0x81, 0x6, 0x4, 0x731e, 0x9}}, &(0x7f0000000a80)={0x20, 0x85, 0x4, 0x6}, 0x0, &(0x7f0000000b00)={0x20, 0x87, 0x2}, &(0x7f0000000b40)={0x20, 0x89, 0x2}}) syz_usb_ep_write(r0, 0x81, 0xffffffffffffff6d, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d90000000000") gettid() r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'hsr0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@ipv6_newnexthop={0x40, 0x68, 0x1, 0x0, 0x25dfdbfd, {0x2, 0x0, 0x3}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x5}, @NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @SEG6_LOCAL_NH6={0x14, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}}}, @NHA_OIF={0x8, 0x5, r4}]}, 0x40}, 0x1, 0x0, 0x0, 0x404cc83}, 0x0) 5.099693273s ago: executing program 3 (id=697): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x4400c0) r2 = syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r2, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff0100000001", 0x15}], 0x1) r4 = open_tree(r1, &(0x7f0000000100)='\x00', 0x89901) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x4e23, 0x8000002, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000000c0), 0x4) unshare(0x2040400) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, 0x0}, 0x94) r6 = socket(0x40000000015, 0x5, 0x0) recvmmsg(r6, &(0x7f0000000b40)=[{{0x0, 0x38, 0x0, 0x0, &(0x7f0000000280)=""/11, 0xb}}], 0x5df, 0x2001, 0x0) ppoll(&(0x7f0000000080)=[{r6}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000540)=@gcm_128={{0x303}, "ffffffffffffffe2", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9", "12772541f8eb02bb"}, 0x28) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x3d8, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x308, 0x2e8, 0x2e8, 0x308, 0x2e8, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, [], [0xff, 0x0, 0x0, 0xff000000], 'erspan0\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1f8, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "cfcfcf0c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1a, 0x0, {0x80000}}}, @inet=@rpfilter={{0x28}, {0x6}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x17, 0x3, 0x6, 0x80000000, 'snmp\x00', 'syz0\x00', {0xe6}}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @broadcast}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xff, 0xff000000, 0xff000000, 0xff], [0xffffff00, 0x0, 0xffffff00], 'wg0\x00', 'nicvf0\x00', {0xff}, {0xff}, 0x0, 0xc0, 0x0, 0x14}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x4, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x438) shutdown(r5, 0x1) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000000), 0xffffff6a) sendfile(r5, r8, 0x0, 0xffffffff004) fchdir(r4) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81802) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000380)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r3, 0x3ba0, &(0x7f0000000040)={0x48, 0x2, r9}) syz_open_procfs(r2, &(0x7f0000000300)='net/unix\x00') 4.656757955s ago: executing program 8 (id=698): socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x5) r0 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r0, 0x28, 0xfffffffe, &(0x7f0000001680)=""/56, &(0x7f0000000280)=0x38) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x94, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0x42060680) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x40500, 0x0) ioctl$PTP_EXTTS_REQUEST(r1, 0x40103d02, 0x0) socket(0x11, 0x6, 0xc) r2 = syz_open_dev$cec(0x0, 0x0, 0x0) ioctl$CEC_S_MODE(r2, 0x40046109, &(0x7f0000000240)=0x20) gettid() add_key$fscrypt_provisioning(&(0x7f00000002c0), 0x0, &(0x7f0000000140)=ANY=[@ANYRES64=r1], 0x48, 0xfffffffffffffffe) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x1, 0xa) fchdir(r4) r5 = open(&(0x7f0000000080)='./bus\x00', 0x1031c2, 0x0) close(r5) r6 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x1) r7 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000751c0110e60f00979ad1010203010902240001000000000904290202b48cbb0009050402100000fa000905820240"], 0x0) syz_usb_control_io$printer(r7, 0x0, 0x0) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_control_io(r7, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000140)=ANY=[@ANYBLOB="200507"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$notify(r6, 0x402, 0x8000003d) fcntl$setsig(r6, 0xa, 0x21) openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) 4.374875425s ago: executing program 0 (id=699): ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000480)={'syztnl2\x00', &(0x7f0000000380)={'syztnl0\x00', 0x0, 0x8, 0x10, 0xffff, 0x5, {{0x34, 0x4, 0x1, 0x6, 0xd0, 0x68, 0x0, 0x1, 0x29, 0x0, @private=0xa010102, @multicast2, {[@cipso={0x86, 0x67, 0x1, [{0x2, 0x10, "aa928ee075defa355eb8f7f99856"}, {0x288827b15a592da, 0x8, "d3ec1a2b7fa4"}, {0x0, 0x4, "dbfe"}, {0x0, 0xa, "b5276918f95414e2"}, {0x1, 0x2}, {0x1, 0x8, "44ca94b7168b"}, {0x0, 0xd, "8387cbb4d84f9d29171ae5"}, {0x1, 0xb, "d960e71758e82c3fdb"}, {0x5, 0xe, "ed7117a7245f5fb339c7fee4"}, {0x6, 0xb, "93bc5f09ec8dcc36ea"}]}, @generic={0x94, 0x8, "ad0c5da2c368"}, @rr={0x7, 0x1f, 0xeb, [@dev={0xac, 0x14, 0x14, 0x20}, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101, @private=0xa010100, @broadcast, @multicast1, @rand_addr=0x64010100]}, @lsrr={0x83, 0xb, 0xa9, [@rand_addr=0x64010101, @local]}, @rr={0x7, 0x7, 0xa, [@broadcast]}, @lsrr={0x83, 0x7, 0xf7, [@broadcast]}, @ssrr={0x89, 0xb, 0x46, [@loopback, @broadcast]}, @lsrr={0x83, 0x7, 0x3e, [@private=0xa010102]}]}}}}}) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0xe22, 0x0, @loopback={0xff00000000000000}}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac710aa7d0000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f00000004c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', r0}, 0x14) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="90000000", @ANYRES16=0x0, @ANYBLOB="00022dbd7000fcdbdf25140000007c0001802c0004001400010002004e210000000000000000000000001400020002004e21640101020000000000000000130001006574683a69703665727370616e3000000d0001007564703a73797a30001f0400110001006574683a6d6163766c616e4f000000000000008008000300050000000800030000000000"], 0x90}, 0x1, 0x0, 0x0, 0x4000064}, 0xc010) r3 = socket$tipc(0x1e, 0x2, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000980)=ANY=[@ANYBLOB="a0010000100001000000000000000000ac1e0101000000000000000000000000fc0200000000000000000000000000000000ecdf000000030000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff0000000000000000000000000000000032000000640100fe00000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000004000fcffffffffffffff0000000000000000000000000000000000000000000000000100000000000000000000800000000002000000000000001000000000000000020000000000000000000000020001734c000000000000004c001400686d61632873686132353629000000000000000000000000000000000000000000000000000000000000000000000000000000000021000000000000000000000000000080000000480002006362632873657270656e742900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c000402000000000000000064010100"/344], 0x1a0}}, 0x0) bind$tipc(r3, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x0, 0xfffffffd}}, 0x10) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r5, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) bind$tipc(r3, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000003}}}, 0x10) bind$tipc(r5, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) r6 = socket$tipc(0x1e, 0x5, 0x0) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') lseek(r7, 0x8000000000000000, 0x2) ioctl$VIDIOC_ENUM_FMT(r7, 0xc0405602, &(0x7f0000000240)={0x7f, 0x9, 0x192, "379ceca5580942813ef58c1d8758a2b84d56be731e251be5d8aa4e26011bf797", 0x32314247}) bind$tipc(r6, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x200, 0xfffffffd}}, 0x10) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000100), 0x208e24b) preadv(r8, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x40}, 0x1, 0x0, 0x0, 0x2000c801}, 0x40000c1) 3.493172765s ago: executing program 3 (id=700): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x1000000, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x4f}, @NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}, 0x1, 0x0, 0x0, 0x40}, 0x24000840) 3.109819486s ago: executing program 0 (id=701): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a3100000000090003007379"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4040000) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x4044840}, 0x8000) listen(0xffffffffffffffff, 0x732) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x2, @mcast2, 0x804}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, 0x0, 0x0) r4 = fsopen(&(0x7f00000000c0)='minix\x00', 0x200000000000000) fsconfig$FSCONFIG_SET_STRING(r4, 0x300, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000200), 0xfffffd9d) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f00009c0000/0x1000)=nil, 0x1000, 0xc) r5 = syz_open_dev$dvb_demux(&(0x7f0000000040), 0x7, 0x361d41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r5, 0x40146f2c, &(0x7f0000000000)={0xfff, 0x0, 0x3, 0x14, 0x4}) ioctl$DVB_DEMUX_DMX_ADD_PID(r5, 0x40026f33, &(0x7f00000000c0)=0x7) ioctl$DVB_DEMUX_DMX_START(r5, 0x6f29) fanotify_init(0x200, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) 3.026629441s ago: executing program 37 (id=673): unshare(0x60000000) r0 = socket$packet(0x11, 0x3, 0x300) unshare(0x10480) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r1, 0x1, 0x2, @broadcast}, 0x10) r2 = io_uring_setup(0x1208, &(0x7f0000000080)={0x0, 0x8a77, 0x2, 0x1, 0x13}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYRESDEC=r2, @ANYRES8=r2, @ANYRESHEX=r0], 0x50) syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000200)={r3, &(0x7f0000000680)="9c38e825ac87bcc0a4b0e5055acbbcbb442d44bd713be708c3c0d25ab4a517740d51944ac9b8fc5a4aa636aec715517b6ee30db31b77b7a9759cff604214959b05d809", 0x0}, 0xfffffffffffffd90) syz_emit_ethernet(0x237, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x0) r4 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0xa803) write$binfmt_aout(r4, 0x0, 0x31c8) ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b0f, &(0x7f0000000040)={'team_slave_0\x00', @random="0100"}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x4a82, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r6, 0x3ba0, 0x0) r7 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x1f) set_mempolicy(0x8000, &(0x7f0000000380)=0xfff, 0x3) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) r9 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x4000000004102, 0x0) r10 = dup(r9) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r10, 0x84, 0x1a, &(0x7f0000000780)={0x0, 0x1c, "f681455ab7265a7e40626dec3a5eb4e05a78043d2cc23339f74b72ff"}, &(0x7f00000007c0)=0x24) socket$unix(0x1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r10, 0x2000) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x10) ioctl$KVM_PRE_FAULT_MEMORY(r8, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) 2.979500555s ago: executing program 3 (id=703): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe5, 0xc}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0xfffd}}}]}, 0x38}}, 0x0) timer_create(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, 0x0}, 0x3e8) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000010029bd7000ffdbdf2500000000", @ANYRES32=r5, @ANYBLOB="100804002010000024001280110001006272696467655f736c618c65000000000c000580050019"], 0x44}, 0x1, 0x0, 0x0, 0x40cc1}, 0x40040d4) timer_create(0x7, 0x0, &(0x7f0000000080)) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4001}, 0x24040040) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {}, {0x8, 0x6}}, [@filter_kind_options=@f_flow={{0x9}, {0x8, 0x2, [@TCA_FLOW_POLICE={0x4}]}}]}, 0x38}}, 0x0) r6 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r6, &(0x7f0000000040)={0x18, 0x0, {0x1, @link_local, 'macvtap0\x00'}}, 0x1e) sendmmsg(r6, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, 0x0) 2.540144604s ago: executing program 8 (id=704): socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x7}, 0x10) r1 = socket(0x1e, 0x3, 0x2) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) recvmmsg(r0, 0x0, 0x0, 0x2120, 0x0) sendmmsg(r1, &(0x7f0000005dc0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000004440)=@generic={0x1e, "ead50ab17d3e560810e16a6f3d65e94d4ae26e21cf7ce42dac2cc1112d4bd534190a04acf3a6218f0c4090aef611a3916b6349f9942afafc81b6fae0c7a7109d132ad48bbc1e567df7b33bf41ccdcc28bd33ee90cf66b7884021cb0452f4a7aa733e81d7b753927fdc32692315c6eaceb89823822bf746736314d3901e8f"}, 0x80, 0x0}}], 0x2, 0x4000800) set_mempolicy(0x3, &(0x7f0000000000)=0x7, 0x7) syz_emit_ethernet(0x3e, &(0x7f00000002c0)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb43054500003000000000000190780a010102ac1414aa0b00907801000000450000000000000000e974bf6db91b2ba3fe4ec2752f4211000001000000e00000"], 0x0) r2 = socket(0x2a, 0x2, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000240)="f2435f0100088000000000850800", 0xe, 0x1, &(0x7f0000000200)={0x11, 0x5, r4, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}}, 0x14) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CREATE_PIT2(r5, 0x4040ae77, &(0x7f0000000040)={0x56fa9599}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) ioctl$KVM_GET_VCPU_EVENTS(r8, 0x4048aecb, &(0x7f00000001c0)) ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) 1.818384381s ago: executing program 3 (id=705): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0xe264}]}) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x20902, 0x0) write$sequencer(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="fd01"], 0x10) time(0x0) syz_usb_connect$uac1(0x5, 0x99, &(0x7f0000000180)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x87, 0x3, 0x1, 0x3, 0x20, 0x10}}]}}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) 1.644808998s ago: executing program 8 (id=706): r0 = socket$inet_udp(0x2, 0x2, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0x104, 0x4, 0x3f8, 0x0, 0x0, 0x0, 0x310, 0x310, 0x310, 0x4, 0x0, {[{{@uncond, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x8, 0xfeffff07, 0x8, 0x2}}}, {{@arp={@loopback, @local, 0x0, 0x0, 0x0, 0x0, {}, {@empty, {[0x0, 0x0, 0xff, 0x0, 0x0, 0xff]}}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth1_to_batadv\x00', 'veth0\x00', {}, {}, 0x0, 0x20}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @empty, @broadcast, @local, 0xf, 0x1}}}, {{@arp={@rand_addr=0x64010100, @loopback, 0xff, 0x0, 0x1, 0x1, {@mac=@broadcast, {[0xff, 0xff, 0xff, 0xff]}}, {@mac=@broadcast, {[0x0, 0x0, 0x88ede4f229c5de10, 0xff, 0xff]}}, 0x0, 0x7, 0xfff7, 0x8, 0x9, 0xf, 'wg0\x00', 'pim6reg0\x00', {0xff}, {0xff}, 0x0, 0x200}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@local, @empty, @local, @rand_addr=0x64010100, 0x1, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x473) 1.331989553s ago: executing program 8 (id=707): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31"], 0x7c}, 0x1, 0x0, 0x0, 0x40003}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a31000000001400048008000240e7b140bb08000140000000030a000700726f757465"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r1 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r1, &(0x7f0000001c00)={&(0x7f0000000140)={0xa, 0xa, 0x7, @mcast2}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000180)="671723d7c6012c", 0x7}], 0x1}, 0x20008b88) 1.183993798s ago: executing program 8 (id=708): syz_emit_ethernet(0x3e, &(0x7f00000016c0)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x8, 0x3a, 0x0, @dev, @local, {[], @echo_request}}}}}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x6040, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)=0x202, 0x12) syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c76133", 0xc5}], 0x1, &(0x7f00000008c0)=ANY=[@ANYBLOB="b800000000d983fd49e32f4399000000a0000000bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f4a0342bed8a3c79acd4bb1f9f46ef28a63b329e09a86c62f907539c9af6f1b0bc00510c"], 0xb8, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6ae", 0x3c}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457", 0x10}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a88", 0x15}], 0x3, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r2 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$loop(&(0x7f0000000500), 0x6, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x19, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xeb7f}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @map_fd={0x18, 0x1}, @ringbuf_query, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x7}, @map_fd={0x18, 0x9}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x3}]}, &(0x7f0000000080)='GPL\x00', 0x7fff, 0x0, 0x0, 0x41100, 0x3}, 0x94) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be521634", 0xc}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934125728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x0, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 424.301317ms ago: executing program 8 (id=709): r0 = syz_usb_connect$uac2(0x2, 0x0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x3ca8, 0x0) r2 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x7a22, 0xc000, 0x7, 0x337, 0x0, r1}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='9', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) socket$unix(0x1, 0x2, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000001880), 0x20800, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000001000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0xfffffffffffffed1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r4 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x20c89e, 0xc000, 0x8, 0xc1, 0x0, r2}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x22f, &(0x7f0000000140)={0x0, 0x1a75, 0x100, 0x0, 0x25c}, 0x0, 0x0, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @hyper}, 0x10) syz_usb_control_io(r0, 0x0, 0x0) socket$unix(0x1, 0x5, 0x0) 0s ago: executing program 9 (id=710): socket$igmp6(0xa, 0x3, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000700)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="580000000206010200000000000000000c0000000c00078008001240000200000500010006000000050005000a00000005002000000040000900020073797a310000000011000300686173683a69702c6d61726b00"], 0x58}}, 0x0) kernel console output (not intermixed with test programs): m="syz.3.197" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7fad33b9de99 code=0x7ffc0000 [ 150.951700][ T30] audit: type=1326 audit(1784514883.524:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6598 comm="syz.3.197" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad33b9de99 code=0x7ffc0000 [ 151.182700][ T24] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 151.211970][ T24] usb 1-1: selecting invalid altsetting 0 [ 151.262586][ T5724] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 151.445665][ T5724] usb 6-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 151.472972][ T5724] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.490130][ T5724] usb 6-1: Product: syz [ 151.506022][ T5724] usb 6-1: Manufacturer: syz [ 151.521603][ T5724] usb 6-1: SerialNumber: syz [ 152.187066][ T6626] netlink: 20 bytes leftover after parsing attributes in process `syz.3.202'. [ 152.197591][ T6626] netlink: 8 bytes leftover after parsing attributes in process `syz.3.202'. [ 152.208731][ T6626] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 152.231386][ T6628] vim2m vim2m.0: Fourcc format (0x47524247) invalid. [ 152.352036][ T5710] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 152.568066][ T6624] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.603184][ T6624] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.679314][ T5710] usb 5-1: unable to get BOS descriptor or descriptor too short [ 152.736318][ T5710] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 152.755282][ T5724] rtl8150 6-1:1.0: couldn't reset the device [ 152.770942][ T5724] rtl8150 6-1:1.0: probe with driver rtl8150 failed with error -5 [ 152.800871][ T5710] usb 5-1: can't read configurations, error -71 [ 153.138034][ T6642] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 153.619946][ T5724] usb 6-1: USB disconnect, device number 5 [ 153.693831][ T6652] netlink: 16 bytes leftover after parsing attributes in process `syz.4.205'. [ 153.967023][ T6642] netlink: 12 bytes leftover after parsing attributes in process `syz.0.203'. [ 154.291809][ T5710] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 154.451713][ T5710] usb 5-1: device descriptor read/64, error -71 [ 154.703388][ T5710] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 154.869336][ T5710] usb 5-1: device descriptor read/64, error -71 [ 155.013039][ T5710] usb usb5-port1: attempt power cycle [ 155.381714][ T5710] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 155.424475][ T5710] usb 5-1: device descriptor read/8, error -71 [ 155.691349][ T5710] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 155.757564][ T5710] usb 5-1: device descriptor read/8, error -71 [ 155.894879][ T5710] usb usb5-port1: unable to enumerate USB device [ 157.710681][ T6707] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 157.753453][ T4941] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 157.769263][ T4941] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 157.778794][ T4941] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 157.794923][ T4941] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 157.806962][ T4941] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 158.087496][ T6716] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.123568][ T6716] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.219260][ T6716] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.267769][ T6716] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.343601][ T6716] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.354680][ T6716] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.364230][ T6709] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.415458][ T6709] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.438897][ T6709] bridge_slave_0: entered allmulticast mode [ 159.451754][ T6709] bridge_slave_0: entered promiscuous mode [ 159.467850][ T6709] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.485775][ T6709] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.514805][ T6709] bridge_slave_1: entered allmulticast mode [ 159.546528][ T6709] bridge_slave_1: entered promiscuous mode [ 159.735324][ T6709] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 159.797359][ T6709] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 159.901749][ T51] Bluetooth: hci5: command tx timeout [ 159.960840][ T6709] team0: Port device team_slave_0 added [ 160.053854][ T6709] team0: Port device team_slave_1 added [ 160.087193][ T6735] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 160.113883][ T6735] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 160.221584][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 160.378974][ T6709] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 160.424312][ T6709] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 160.513596][ T6709] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 160.564206][ T6709] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 160.574441][ T6709] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 160.602021][ T6709] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 160.919843][ T6709] hsr_slave_0: entered promiscuous mode [ 160.968096][ T6709] hsr_slave_1: entered promiscuous mode [ 160.995914][ T6709] debugfs: 'hsr0' already exists in 'hsr' [ 161.008534][ T6709] Cannot create hsr debugfs directory [ 161.972700][ T51] Bluetooth: hci5: command tx timeout [ 162.118727][ T6760] batadv_slave_0: entered promiscuous mode [ 162.139196][ T6760] netlink: 4 bytes leftover after parsing attributes in process `syz.4.228'. [ 162.213239][ T6760] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 162.267132][ T6760] batadv_slave_0 (unregistering): left promiscuous mode [ 162.279249][ T6760] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 162.496974][ T6762] fuse: Bad value for 'fd' [ 162.624850][ T6709] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 162.793540][ T6709] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 162.867163][ T6709] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 162.919093][ T6709] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 162.934629][ T6709] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 162.970657][ T6709] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 163.008768][ T6709] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 163.040188][ T6709] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 163.133444][ T5710] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 163.316320][ T5710] usb 5-1: config 0 has an invalid interface number: 33 but max is 0 [ 163.337943][ T6709] 8021q: adding VLAN 0 to HW filter on device bond0 [ 163.344796][ T5710] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 163.375210][ T5710] usb 5-1: config 0 has no interface number 0 [ 163.387790][ T5710] usb 5-1: config 0 interface 33 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1023 [ 163.413042][ T5710] usb 5-1: config 0 interface 33 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 163.445876][ T6709] 8021q: adding VLAN 0 to HW filter on device team0 [ 163.502987][ T5710] usb 5-1: New USB device found, idVendor=2040, idProduct=4901, bcdDevice=68.64 [ 163.540343][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.547626][ T5828] bridge0: port 1(bridge_slave_0) entered forwarding state [ 163.576391][ T5710] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.608067][ T5710] usb 5-1: Product: syz [ 163.624401][ T5710] usb 5-1: Manufacturer: syz [ 163.640952][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.648125][ T5828] bridge0: port 2(bridge_slave_1) entered forwarding state [ 163.657490][ T5710] usb 5-1: SerialNumber: syz [ 163.677063][ T5710] usb 5-1: config 0 descriptor?? [ 163.694877][ T6765] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 163.708551][ T5710] hdpvr 5-1:0.33: Could not find bulk-in endpoint [ 163.716784][ T5710] hdpvr 5-1:0.33: probe with driver hdpvr failed with error -12 [ 163.989039][ T6765] fuse: Unknown parameter ' ' [ 164.057349][ T51] Bluetooth: hci5: command tx timeout [ 164.122633][ T5724] usb 5-1: USB disconnect, device number 18 [ 164.165428][ T6762] syz.3.229 (6762): drop_caches: 2 [ 164.236952][ T6709] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 164.424053][ T6709] veth0_vlan: entered promiscuous mode [ 164.478753][ T6709] veth1_vlan: entered promiscuous mode [ 164.585331][ T6709] veth0_macvtap: entered promiscuous mode [ 164.628968][ T6709] veth1_macvtap: entered promiscuous mode [ 164.662492][ T6709] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 164.681052][ T6709] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 164.710578][ T5814] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.744666][ T5814] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.785791][ T5814] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.823299][ T5814] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.117911][ T6784] syz.0.234 (6784) used obsolete PPPIOCDETACH ioctl [ 165.175495][ T9] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 165.267128][ T5814] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 165.319000][ T5814] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 165.364369][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 165.378800][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 165.397356][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 165.460098][ T9] usb 5-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice= 0.40 [ 165.496171][ T5829] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 165.504597][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.518424][ T5829] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 165.526320][ T9] usb 5-1: Product: syz [ 165.536818][ T9] usb 5-1: Manufacturer: syz [ 165.558491][ T9] usb 5-1: SerialNumber: syz [ 165.602899][ T9] hub 5-1:1.0: bad descriptor, ignoring hub [ 165.612095][ T6788] FAULT_INJECTION: forcing a failure. [ 165.612095][ T6788] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 165.637057][ T9] hub 5-1:1.0: probe with driver hub failed with error -5 [ 165.729443][ T6788] CPU: 1 UID: 0 PID: 6788 Comm: syz.0.235 Not tainted syzkaller #0 PREEMPT(full) [ 165.729474][ T6788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 165.729488][ T6788] Call Trace: [ 165.729497][ T6788] [ 165.729506][ T6788] dump_stack_lvl+0xe8/0x150 [ 165.729545][ T6788] should_fail_ex+0x40c/0x560 [ 165.729567][ T6788] _copy_to_user+0x31/0xb0 [ 165.729593][ T6788] rng_dev_read+0x3f0/0x7c0 [ 165.729615][ T6788] ? __pfx_rng_dev_read+0x10/0x10 [ 165.729635][ T6788] ? bpf_lsm_file_permission+0x9/0x20 [ 165.729653][ T6788] ? security_file_permission+0x75/0x260 [ 165.729676][ T6788] ? rw_verify_area+0x24a/0x4c0 [ 165.729702][ T6788] ? __pfx_rng_dev_read+0x10/0x10 [ 165.729722][ T6788] vfs_read+0x213/0xa80 [ 165.729751][ T6788] ? __pfx_vfs_read+0x10/0x10 [ 165.729775][ T6788] ? __fget_files+0x2a/0x420 [ 165.729797][ T6788] ? __fget_files+0x2a/0x420 [ 165.729838][ T6788] ? __fget_files+0x3a2/0x420 [ 165.729857][ T6788] ? __fget_files+0x2a/0x420 [ 165.729883][ T6788] ksys_read+0x150/0x270 [ 165.729916][ T6788] ? __pfx_ksys_read+0x10/0x10 [ 165.729945][ T6788] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.729962][ T6788] do_syscall_64+0x174/0x580 [ 165.729977][ T6788] ? trace_irq_disable+0x3b/0x140 [ 165.729996][ T6788] ? clear_bhb_loop+0x40/0x90 [ 165.730015][ T6788] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.730031][ T6788] RIP: 0033:0x7f7832d9de99 [ 165.730045][ T6788] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 165.730057][ T6788] RSP: 002b:00007f7833c54028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 165.730073][ T6788] RAX: ffffffffffffffda RBX: 00007f7833026090 RCX: 00007f7832d9de99 [ 165.730084][ T6788] RDX: 00000000fffffe0c RSI: 0000200000004500 RDI: 0000000000000008 [ 165.730094][ T6788] RBP: 00007f7833c54090 R08: 0000000000000000 R09: 0000000000000000 [ 165.730103][ T6788] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 165.730112][ T6788] R13: 00007f7833026128 R14: 00007f7833026090 R15: 00007f783314fa48 [ 165.730134][ T6788] [ 166.083210][ T9] usb 5-1: USB disconnect, device number 19 [ 166.132817][ T51] Bluetooth: hci5: command tx timeout [ 166.590167][ T6794] netlink: 36 bytes leftover after parsing attributes in process `syz.6.213'. [ 166.874165][ T6803] netlink: 4 bytes leftover after parsing attributes in process `syz.0.240'. [ 166.883281][ T9] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 167.053792][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 167.077890][ T9] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 167.089098][ T9] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 167.100162][ T9] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 167.119645][ T9] usb 7-1: New USB device found, idVendor=1235, idProduct=8201, bcdDevice= 0.40 [ 167.146029][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.168308][ T9] usb 7-1: Product: syz [ 167.186729][ T9] usb 7-1: Manufacturer: syz [ 167.220203][ T9] usb 7-1: SerialNumber: syz [ 167.241777][ T10] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 167.430850][ T10] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 167.451143][ T10] usb 5-1: config 0 has no interface number 0 [ 167.495112][ T10] usb 5-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 167.504692][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.514039][ T10] usb 5-1: Product: syz [ 167.518484][ T10] usb 5-1: Manufacturer: syz [ 167.523419][ T10] usb 5-1: SerialNumber: syz [ 167.540565][ T10] usb 5-1: config 0 descriptor?? [ 167.586270][ T10] usb 5-1: selecting invalid altsetting 1 [ 167.636142][ T10] dvb_ttusb_budget: ttusb_init_controller: error [ 167.674236][ T10] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 167.883034][ T6805] program syz.4.241 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 167.913758][ T10] DVB: Unable to find symbol stv0299_attach() [ 167.980487][ T10] DVB: Unable to find symbol tda8083_attach() [ 167.987433][ T10] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 168.024767][ T6818] sit0: entered promiscuous mode [ 168.037605][ T6818] netlink: 'syz.3.244': attribute type 1 has an invalid length. [ 168.046683][ T6818] netlink: 1 bytes leftover after parsing attributes in process `syz.3.244'. [ 168.134269][ T9] usb 7-1: 0:10 : does not exist [ 168.164360][ T9] usb 7-1: 0:36 : does not exist [ 168.189253][ T6820] netlink: 24 bytes leftover after parsing attributes in process `syz.3.245'. [ 168.366745][ T9] usb 7-1: USB disconnect, device number 2 [ 168.469703][ T6618] udevd[6618]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 168.496304][ T5743] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 168.664492][ T5743] usb 4-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 168.705115][ T5743] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.743195][ T5743] usb 4-1: Product: syz [ 168.761207][ T5743] usb 4-1: Manufacturer: syz [ 168.790072][ T5743] usb 4-1: SerialNumber: syz [ 168.824602][ T5743] usb 4-1: config 0 descriptor?? [ 168.884429][ T5743] gspca_main: sonixb-2.14.0 probing 0c45:6005 [ 169.062830][ T5743] sonixb 4-1:0.0: Error reading register 00: -71 [ 169.085228][ T5743] usb 4-1: USB disconnect, device number 8 [ 169.388737][ T6834] bridge_slave_0: left allmulticast mode [ 169.411251][ T6834] bridge_slave_0: left promiscuous mode [ 169.445175][ T6834] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.492187][ T6834] bridge_slave_1: left allmulticast mode [ 169.515038][ T6834] bridge_slave_1: left promiscuous mode [ 169.544011][ T6834] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.638453][ T6834] bond0: (slave bond_slave_0): Releasing backup interface [ 169.737881][ T6834] bond0: (slave bond_slave_1): Releasing backup interface [ 169.848881][ T6834] team0: Port device team_slave_0 removed [ 169.896611][ T6834] team0: Port device team_slave_1 removed [ 169.908600][ T6834] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 169.916679][ T6834] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 169.939980][ T6834] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 169.950852][ T6834] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 170.024146][ T6834] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 170.050052][ T6839] netlink: 'syz.3.250': attribute type 4 has an invalid length. [ 170.109296][ T5743] usb 5-1: USB disconnect, device number 20 [ 170.276688][ T6836] team0: Port device xfrm0 added [ 170.310919][ T6837] tipc: Started in network mode [ 170.318690][ T6837] tipc: Node identity 06ed5e2ed95c, cluster identity 4711 [ 170.327079][ T6837] tipc: Enabled bearer , priority 0 [ 170.441578][ T0] NOHZ tick-stop error: local softirq work is pending, handler #102!!! [ 171.162265][ T9] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 171.291238][ T6858] x_tables: unsorted entry at hook 2 [ 171.363052][ T6853] netlink: 'syz.4.256': attribute type 5 has an invalid length. [ 171.382624][ T9] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 171.416805][ T9] usb 7-1: config 0 has no interface number 0 [ 171.427823][ T9] usb 7-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 171.440843][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.449933][ T9] usb 7-1: Product: syz [ 171.454421][ T9] usb 7-1: Manufacturer: syz [ 171.459211][ T9] usb 7-1: SerialNumber: syz [ 171.492707][ T9] usb 7-1: config 0 descriptor?? [ 171.513359][ T9] usb 7-1: selecting invalid altsetting 1 [ 171.519535][ T9] dvb_ttusb_budget: ttusb_init_controller: error [ 171.529559][ T9] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 171.550580][ T24] tipc: Node number set to 3752943150 [ 171.670319][ T9] DVB: Unable to find symbol stv0299_attach() [ 171.857754][ T9] DVB: Unable to find symbol tda8083_attach() [ 171.871372][ T9] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 171.881578][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 171.911919][ T9] usb 7-1: USB disconnect, device number 3 [ 172.880352][ T6884] process 'syz.0.264' launched './file1' with NULL argv: empty string added [ 173.112683][ T6891] netlink: 4 bytes leftover after parsing attributes in process `syz.4.268'. [ 173.195441][ T9] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 173.213751][ T4941] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 173.238882][ T4941] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 173.254054][ T4941] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 173.278329][ T4941] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 173.286827][ T4941] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 173.363228][ T6891] netlink: 8 bytes leftover after parsing attributes in process `syz.4.268'. [ 173.431275][ T9] usb 7-1: unable to get BOS descriptor or descriptor too short [ 173.446702][ T9] usb 7-1: config 66 has an invalid descriptor of length 0, skipping remainder of the config [ 173.457492][ T9] usb 7-1: config 66 has 1 interface, different from the descriptor's value: 2 [ 173.473767][ T9] usb 7-1: config 66 interface 0 altsetting 16 bulk endpoint 0x7 has invalid maxpacket 16 [ 173.483901][ T9] usb 7-1: config 66 interface 0 has no altsetting 0 [ 173.495109][ T9] usb 7-1: New USB device found, idVendor=0471, idProduct=0602, bcdDevice=a4.95 [ 173.508414][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.566053][ T9] usb 7-1: Product: syz [ 173.591826][ T9] usb 7-1: Manufacturer: syz [ 173.633483][ T9] usb 7-1: SerialNumber: syz [ 173.671170][ T6888] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 173.913523][ T6888] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 173.946958][ T6888] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.004616][ T6888] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.083151][ T6888] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.189278][ T9] ati_remote2 7-1:66.0: ati_remote2_probe(): need 2 interfaces, found 1 [ 174.221317][ T30] kauditd_printk_skb: 109 callbacks suppressed [ 174.221335][ T30] audit: type=1326 audit(1784514906.804:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6901 comm="syz.3.271" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fad33b9de99 code=0x0 [ 174.295961][ T9] usb 7-1: USB disconnect, device number 4 [ 174.421658][ T5743] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 175.332002][ T51] Bluetooth: hci6: command tx timeout [ 175.422174][ T6893] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.467254][ T6893] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.496282][ T6893] bridge_slave_0: entered allmulticast mode [ 175.535822][ T6893] bridge_slave_0: entered promiscuous mode [ 175.546495][ T6893] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.554999][ T6893] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.562678][ T6893] bridge_slave_1: entered allmulticast mode [ 175.588234][ T6893] bridge_slave_1: entered promiscuous mode [ 175.780906][ T6893] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 175.811773][ T9] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 175.830672][ T6893] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 175.950672][ T6893] team0: Port device team_slave_0 added [ 175.990764][ T6893] team0: Port device team_slave_1 added [ 176.011343][ T9] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 176.034990][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.044787][ T9] usb 7-1: Product: syz [ 176.049265][ T9] usb 7-1: Manufacturer: syz [ 176.055029][ T9] usb 7-1: SerialNumber: syz [ 176.126223][ T9] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 176.224971][ T6893] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 176.249764][ T6893] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 176.285168][ T6893] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 176.303354][ T6893] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 176.310631][ T6893] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 176.337824][ T6893] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 176.338026][ T6916] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 176.423143][ T6916] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 176.459975][ T5725] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 176.510314][ T6916] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 176.603642][ T6916] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 176.642391][ T6917] iommufd_mock iommufd_mock2: Adding to iommu group 2 [ 176.660357][ T6893] hsr_slave_0: entered promiscuous mode [ 176.684507][ T6893] hsr_slave_1: entered promiscuous mode [ 176.716366][ T6893] debugfs: 'hsr0' already exists in 'hsr' [ 176.725804][ T6893] Cannot create hsr debugfs directory [ 177.411836][ T51] Bluetooth: hci6: command tx timeout [ 177.496615][ T5725] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 177.571481][ T5725] ath9k_htc: Failed to initialize the device [ 177.612269][ T5744] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 177.723738][ T5725] usb 7-1: ath9k_htc: USB layer deinitialized [ 177.814178][ T5744] usb 5-1: Using ep0 maxpacket: 8 [ 177.863746][ T5744] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 177.898895][ T5744] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 177.945823][ T5744] usb 5-1: New USB device found, idVendor=0e41, idProduct=4249, bcdDevice= 0.40 [ 177.964211][ T5744] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.989001][ T5744] usb 5-1: Product: syz [ 177.999088][ T5744] usb 5-1: Manufacturer: syz [ 178.014927][ T5744] usb 5-1: SerialNumber: syz [ 178.104922][ T6893] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 178.197680][ T6893] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 178.234910][ T6893] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 178.266701][ T6893] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 178.282746][ T6893] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 178.352459][ T6893] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 178.365406][ T6893] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 178.397318][ T6893] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 178.516216][ T6932] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.540897][ T6932] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 178.717130][ T5724] usb 7-1: USB disconnect, device number 5 [ 178.745694][ T6893] 8021q: adding VLAN 0 to HW filter on device bond0 [ 178.790946][ T6893] 8021q: adding VLAN 0 to HW filter on device team0 [ 178.811090][ T5813] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.818402][ T5813] bridge0: port 1(bridge_slave_0) entered forwarding state [ 178.941415][ T5813] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.948658][ T5813] bridge0: port 2(bridge_slave_1) entered forwarding state [ 179.260363][ T6945] tipc: Enabled bearer , priority 10 [ 179.366728][ T6893] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 179.492240][ T51] Bluetooth: hci6: command tx timeout [ 179.628344][ T6893] veth0_vlan: entered promiscuous mode [ 179.682790][ T6893] veth1_vlan: entered promiscuous mode [ 179.797217][ T6952] fuse: Bad value for 'group_id' [ 179.802454][ T6952] fuse: Bad value for 'group_id' [ 179.844112][ T6893] veth0_macvtap: entered promiscuous mode [ 179.862877][ T6893] veth1_macvtap: entered promiscuous mode [ 179.907377][ T6893] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 179.939958][ T6893] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 180.034057][ T5832] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.064638][ T5832] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.094045][ T5832] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.104446][ T5832] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.433389][ T5744] usb 5-1: unit 0 not found! [ 180.497965][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 180.551788][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 180.631128][ T5744] usb 5-1: USB disconnect, device number 21 [ 180.706646][ T6963] netlink: 12 bytes leftover after parsing attributes in process `syz.3.286'. [ 180.833566][ T6618] udevd[6618]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 181.171265][ T5830] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 181.207663][ T5830] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 181.472343][ T6973] netlink: 'syz.3.290': attribute type 6 has an invalid length. [ 181.572800][ T51] Bluetooth: hci6: command tx timeout [ 181.637287][ T6976] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 181.680813][ T6978] netlink: 'syz.4.291': attribute type 1 has an invalid length. [ 181.777365][ T6976] fuse: Bad value for 'user_id' [ 181.784108][ T6976] fuse: Bad value for 'user_id' [ 182.326940][ T6978] bridge3: entered promiscuous mode [ 182.363104][ T6978] bond3: (slave bridge3): making interface the new active one [ 182.371210][ T6991] netlink: 20 bytes leftover after parsing attributes in process `syz.0.292'. [ 182.390854][ T6978] bond3: (slave bridge3): Enslaving as an active interface with an up link [ 182.797402][ T7003] netlink: 5 bytes leftover after parsing attributes in process `syz.0.295'. [ 182.855130][ T7002] faux_driver vkms: [drm] Unknown color mode 11; guessing buffer size. [ 183.011875][ T7005] netlink: 144 bytes leftover after parsing attributes in process `syz.4.294'. [ 183.138613][ T51] Bluetooth: hci2: connection err: -111 [ 183.522853][ T7017] netlink: 'syz.0.298': attribute type 3 has an invalid length. [ 184.071690][ T5723] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 184.258638][ T5723] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 184.283988][ T5723] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 184.309620][ T5723] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 184.347790][ T5723] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 184.357390][ T5723] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.368169][ T5723] usb 4-1: Product: syz [ 184.375969][ T5723] usb 4-1: Manufacturer: syz [ 184.380744][ T5723] usb 4-1: SerialNumber: syz [ 184.418111][ T5723] hub 4-1:1.0: bad descriptor, ignoring hub [ 184.431676][ T5744] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 184.438012][ T5723] hub 4-1:1.0: probe with driver hub failed with error -5 [ 184.595179][ T5744] usb 5-1: unable to get BOS descriptor or descriptor too short [ 184.606940][ T5744] usb 5-1: config 1 interface 0 altsetting 8 bulk endpoint 0x82 has invalid maxpacket 8 [ 184.619209][ T5744] usb 5-1: config 1 interface 0 altsetting 8 bulk endpoint 0x3 has invalid maxpacket 16 [ 184.632137][ T5723] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 10 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 184.634970][ T5744] usb 5-1: config 1 interface 0 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 184.656541][ T5744] usb 5-1: config 1 interface 0 has no altsetting 0 [ 184.667952][ T5744] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 184.685619][ T5744] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.739577][ T5744] usb 5-1: Product: syz [ 184.762334][ T5744] usb 5-1: Manufacturer: syz [ 184.789701][ T5744] usb 5-1: SerialNumber: syz [ 184.810548][ T7027] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 184.818967][ T7019] FAULT_INJECTION: forcing a failure. [ 184.818967][ T7019] name failslab, interval 1, probability 0, space 0, times 0 [ 184.829378][ T7027] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 184.843256][ T7019] CPU: 1 UID: 0 PID: 7019 Comm: syz.3.299 Not tainted syzkaller #0 PREEMPT(full) [ 184.843283][ T7019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 184.843298][ T7019] Call Trace: [ 184.843306][ T7019] [ 184.843315][ T7019] dump_stack_lvl+0xe8/0x150 [ 184.843359][ T7019] should_fail_ex+0x40c/0x560 [ 184.843392][ T7019] should_failslab+0xa8/0x100 [ 184.843428][ T7019] __kmalloc_noprof+0xfe/0x720 [ 184.843455][ T7019] ? rcu_is_watching+0x15/0xb0 [ 184.843488][ T7019] ? tomoyo_realpath_from_path+0xef/0x640 [ 184.843513][ T7019] ? tomoyo_realpath_from_path+0xef/0x640 [ 184.843555][ T7019] tomoyo_realpath_from_path+0xef/0x640 [ 184.843595][ T7019] tomoyo_check_open_permission+0x229/0x470 [ 184.843631][ T7019] ? tomoyo_check_open_permission+0x1d3/0x470 [ 184.843665][ T7019] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 184.843701][ T7019] ? __asan_memset+0x22/0x50 [ 184.843770][ T7019] security_file_open+0xa9/0x240 [ 184.843806][ T7019] do_dentry_open+0x4a0/0x1380 [ 184.843846][ T7019] vfs_open+0x3b/0x340 [ 184.843871][ T7019] ? path_openat+0x2e2d/0x3830 [ 184.843909][ T7019] path_openat+0x2e44/0x3830 [ 184.843949][ T7019] ? kasan_save_track+0x3e/0x80 [ 184.843980][ T7019] ? do_sys_openat2+0xcc/0x200 [ 184.844008][ T7019] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.844060][ T7019] do_file_open+0x23e/0x4a0 [ 184.844102][ T7019] ? __pfx_do_file_open+0x10/0x10 [ 184.844162][ T7019] ? _raw_spin_unlock+0x28/0x50 [ 184.844193][ T7019] ? alloc_fd+0x651/0x6c0 [ 184.844233][ T7019] do_sys_openat2+0x115/0x200 [ 184.844266][ T7019] ? __pfx_do_sys_openat2+0x10/0x10 [ 184.844296][ T7019] ? exc_page_fault+0x6a/0xc0 [ 184.844335][ T7019] ? do_user_addr_fault+0xc4a/0x1340 [ 184.844374][ T7019] __x64_sys_openat+0x138/0x170 [ 184.844407][ T7019] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.844433][ T7019] do_syscall_64+0x174/0x580 [ 184.844455][ T7019] ? trace_irq_disable+0x3b/0x140 [ 184.844485][ T7019] ? clear_bhb_loop+0x40/0x90 [ 184.844513][ T7019] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.844544][ T7019] RIP: 0033:0x7fad33b5e6ce [ 184.844566][ T7019] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 184.844586][ T7019] RSP: 002b:00007fad34ac4b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 184.844610][ T7019] RAX: ffffffffffffffda RBX: 00007fad34ac56c0 RCX: 00007fad33b5e6ce [ 184.844627][ T7019] RDX: 0000000000000002 RSI: 00007fad34ac4c00 RDI: ffffffffffffff9c [ 184.844642][ T7019] RBP: 00007fad34ac5090 R08: 0000000000000000 R09: 0000000000000000 [ 184.844656][ T7019] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 184.844670][ T7019] R13: 00007fad33e26038 R14: 00007fad33e25fa0 R15: 00007fad33f4fa48 [ 184.844706][ T7019] [ 184.847680][ T7019] ERROR: Out of memory at tomoyo_realpath_from_path. [ 185.189794][ T7027] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 185.231774][ T7027] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 185.255029][ T5744] cdc_ether 5-1:1.0: Descriptor too short [ 185.289093][ T5744] usb 5-1: USB disconnect, device number 22 [ 185.297566][ T10] usb 4-1: USB disconnect, device number 10 [ 185.343682][ T10] usblp0: removed [ 187.644280][ T7052] input: syz0 as /devices/virtual/input/input8 [ 188.017584][ T7062] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 189.138210][ T7069] vivid-000: disconnect [ 189.182211][ T7068] vivid-000: reconnect [ 189.473518][ T5724] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 189.656011][ T5724] usb 4-1: config 0 interface 0 altsetting 255 endpoint 0x4 has an invalid bInterval 0, changing to 4 [ 189.708047][ T5724] usb 4-1: config 0 interface 0 has no altsetting 0 [ 189.761703][ T5724] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 189.805420][ T5724] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 189.838438][ T5724] usb 4-1: Product: syz [ 189.852411][ T5724] usb 4-1: Manufacturer: syz [ 189.863452][ T5724] usb 4-1: SerialNumber: syz [ 189.888030][ T5724] usb 4-1: config 0 descriptor?? [ 189.975061][ T5724] usb 4-1: selecting invalid altsetting 0 [ 190.259500][ T7079] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 191.094424][ T6952] sound midiC3D0: rawmidi drain error (avail = 3968, buffer_size = 4096) [ 192.012964][ T5724] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 192.204186][ T5724] usb 8-1: config index 0 descriptor too short (expected 45, got 36) [ 192.249445][ T5724] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 192.341951][ T5724] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 192.370131][ T5724] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 192.424275][ T5724] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 192.469842][ T5724] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.522183][ T10] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 192.538580][ T5724] usb 8-1: config 0 descriptor?? [ 192.671804][ T5723] usb 4-1: USB disconnect, device number 11 [ 192.722504][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 192.755694][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 192.784023][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 192.818938][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 192.897924][ T10] usb 5-1: New USB device found, idVendor=056e, idProduct=00fe, bcdDevice= 0.00 [ 192.975171][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.048850][ T10] usb 5-1: config 0 descriptor?? [ 193.244886][ T5724] usbhid 8-1:0.0: can't add hid device: -71 [ 193.273613][ T5724] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 193.351101][ T5724] usb 8-1: USB disconnect, device number 2 [ 193.605539][ T7115] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 193.674273][ T7115] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 193.733881][ T7113] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 193.874649][ T7113] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 194.079239][ T10] usbhid 5-1:0.0: can't add hid device: -71 [ 194.091418][ T10] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 194.181103][ T10] usb 5-1: USB disconnect, device number 23 [ 194.296954][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.303793][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.683804][ T7129] fuse: Unknown parameter 'Q^%N{hkЎ7:35mu' [ 194.944401][ T7129] mac80211_hwsim hwsim16 wlan0: entered promiscuous mode [ 195.046533][ T7129] mac80211_hwsim hwsim16 wlan0: entered allmulticast mode [ 195.163652][ T7129] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 195.715593][ T7155] xt_TCPMSS: Only works on TCP SYN packets [ 196.844451][ T7176] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 197.481743][ T5743] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 197.643164][ T5743] usb 8-1: not running at top speed; connect to a high speed hub [ 197.665751][ T5743] usb 8-1: config 7 has an invalid interface number: 116 but max is 0 [ 197.681586][ T5743] usb 8-1: config 7 has no interface number 0 [ 197.709919][ T5743] usb 8-1: config 7 interface 116 has no altsetting 0 [ 197.773779][ T5743] usb 8-1: New USB device found, idVendor=1f71, idProduct=3301, bcdDevice=ca.2d [ 197.806958][ T5743] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.829077][ T5743] usb 8-1: Product: syz [ 197.855059][ T5743] usb 8-1: Manufacturer: syz [ 197.881986][ T5743] usb 8-1: SerialNumber: syz [ 198.070001][ T7207] netdevsim netdevsim3 : renamed from netdevsim0 (while UP) [ 198.242107][ T5743] usb-storage 8-1:7.116: USB Mass Storage device detected [ 198.642929][ T5743] usb 8-1: USB disconnect, device number 3 [ 198.720439][ T7196] netlink: 48 bytes leftover after parsing attributes in process `syz.3.354'. [ 199.586547][ T7208] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 200.641570][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 201.162399][ T7249] syzkaller1: entered promiscuous mode [ 201.201766][ T7249] syzkaller1: entered allmulticast mode [ 201.752944][ T7254] team0: Port device xfrm0 removed [ 201.814438][ T7254] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 201.961844][ T5830] tipc: Resetting bearer [ 201.980861][ T7256] team0: Port device xfrm0 added [ 201.987999][ T7257] tipc: Enabling of bearer rejected, already enabled [ 202.264479][ T7267] IPv6: addrconf: prefix option has invalid lifetime [ 202.324965][ T7269] loop9: detected capacity change from 0 to 7 [ 202.338077][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 202.347946][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 202.364734][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 202.374432][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 202.384341][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 202.394058][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 202.404972][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 202.414719][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 202.421940][ T24] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 202.432896][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 202.442723][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 202.452861][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 202.462583][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 202.474360][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 202.484048][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 202.492718][ T7269] ldm_validate_partition_table(): Disk read failed. [ 202.515900][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 202.525656][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 202.536817][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 202.546518][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 202.555518][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 202.565286][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 202.573604][ T7269] Dev loop9: unable to read RDB block 0 [ 202.583245][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 202.602643][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 202.618892][ T7269] loop9: unable to read partition table [ 202.626909][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 202.641883][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 202.657956][ T24] usb 4-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 202.662875][ T7269] loop9: partition table beyond EOD, [ 202.667181][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.689343][ T7269] truncated [ 202.709490][ T24] usb 4-1: config 0 descriptor?? [ 202.727719][ T7269] loop_reread_partitions: partition scan of loop9 () failed (rc=-5) [ 203.139850][ T24] hid (null): invalid report_size 49420 [ 203.150843][ T24] hid (null): global environment stack underflow [ 203.214193][ T24] hid (null): unknown global tag 0xc [ 203.262020][ T24] hid (null): report_id 0 is invalid [ 203.325646][ T24] input: HID 0458:5011 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5011.0003/input/input9 [ 203.601651][ T24] input: HID 0458:5011 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5011.0003/input/input10 [ 203.849164][ T24] kye 0003:0458:5011.0003: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.3-1/input0 [ 203.864014][ T7287] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 204.165716][ T7276] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 204.498852][ T7298] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 204.537833][ C1] kye 0003:0458:5011.0003: usb_submit_urb(ctrl) failed: -1 [ 204.563318][ T7298] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 204.723929][ T5724] usb 4-1: reset high-speed USB device number 12 using dummy_hcd [ 205.301881][ T7305] netlink: 16 bytes leftover after parsing attributes in process `syz.7.379'. [ 205.507082][ T7309] netlink: 48 bytes leftover after parsing attributes in process `syz.3.381'. [ 205.580424][ T9] usb 4-1: USB disconnect, device number 12 [ 205.903623][ T5723] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 206.081691][ T5723] usb 5-1: Using ep0 maxpacket: 8 [ 206.119294][ T5723] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 206.148945][ T5723] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 206.174363][ T5723] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.214329][ T7319] netlink: 'syz.3.385': attribute type 4 has an invalid length. [ 206.233838][ T5723] usb 5-1: config 0 descriptor?? [ 206.481615][ T5723] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 206.742874][ T9] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 206.937761][ T5743] usb 5-1: USB disconnect, device number 24 [ 206.938037][ C0] iowarrior 5-1:0.0: iowarrior_callback - usb_submit_urb failed with result -19 [ 206.975911][ T9] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 207.001238][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 207.065697][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 207.087294][ T9] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 207.117015][ T9] usb 8-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 207.143158][ T9] usb 8-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 207.172108][ T9] usb 8-1: Manufacturer: syz [ 207.211039][ T9] usb 8-1: config 0 descriptor?? [ 207.656241][ T9] appleir 0003:05AC:8243.0004: unknown main item tag 0x0 [ 207.670098][ T9] appleir 0003:05AC:8243.0004: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.7-1/input0 [ 207.789981][ T7347] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 208.016118][ T24] usb 8-1: USB disconnect, device number 4 [ 208.397260][ T7354] netlink: 'syz.0.391': attribute type 11 has an invalid length. [ 208.978430][ T7359] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 209.050448][ T7359] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 209.340088][ T7362] team0: Port device xfrm0 removed [ 209.358057][ T7362] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 209.490713][ T7364] team0: Port device xfrm0 added [ 211.157251][ T7385] bond0: (slave wlan0): Enslaving as an active interface with an up link [ 211.992227][ T7399] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 212.044005][ T7399] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 212.358388][ T7411] syzkaller0: entered promiscuous mode [ 212.374607][ T7411] syzkaller0: entered allmulticast mode [ 212.532595][ T5627] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 212.715562][ T5627] usb 5-1: unable to get BOS descriptor or descriptor too short [ 212.742899][ T5627] usb 5-1: config 13 has an invalid interface number: 50 but max is 3 [ 212.781702][ T5627] usb 5-1: config 13 has an invalid descriptor of length 0, skipping remainder of the config [ 212.793068][ T5627] usb 5-1: config 13 has 1 interface, different from the descriptor's value: 4 [ 212.803692][ T5627] usb 5-1: config 13 has no interface number 0 [ 212.809993][ T5627] usb 5-1: config 13 interface 50 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 212.826298][ T5627] usb 5-1: config 13 interface 50 has no altsetting 0 [ 212.836406][ T5627] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=a9.e8 [ 212.850014][ T5627] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.860091][ T5627] usb 5-1: Product: syz [ 212.871618][ T5627] usb 5-1: Manufacturer: syz [ 212.883648][ T5627] usb 5-1: SerialNumber: syz [ 213.011649][ T9] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 213.044779][ T7415] netlink: 48 bytes leftover after parsing attributes in process `syz.0.414'. [ 213.121938][ T7415] vlan2: entered promiscuous mode [ 213.151755][ T7415] bridge0: entered promiscuous mode [ 213.171770][ T9] usb 8-1: Using ep0 maxpacket: 32 [ 213.198265][ T9] usb 8-1: config 0 has no interfaces? [ 213.208360][ T30] audit: type=1326 audit(1784514945.784:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7403 comm="syz.4.411" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ffbcd797c17 code=0x7ffc0000 [ 213.278032][ T9] usb 8-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 213.294230][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.307403][ T9] usb 8-1: Product: syz [ 213.311739][ T9] usb 8-1: Manufacturer: syz [ 213.316372][ T9] usb 8-1: SerialNumber: syz [ 213.326876][ T9] usb 8-1: config 0 descriptor?? [ 213.332082][ T30] audit: type=1326 audit(1784514945.784:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7403 comm="syz.4.411" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ffbcd73f219 code=0x7ffc0000 [ 213.419260][ T30] audit: type=1326 audit(1784514945.784:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7403 comm="syz.4.411" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ffbcd797c17 code=0x7ffc0000 [ 213.448915][ T30] audit: type=1326 audit(1784514945.784:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7403 comm="syz.4.411" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ffbcd73f219 code=0x7ffc0000 [ 213.489145][ T30] audit: type=1326 audit(1784514945.784:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7403 comm="syz.4.411" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ffbcd797c17 code=0x7ffc0000 [ 213.514392][ T30] audit: type=1326 audit(1784514945.804:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7403 comm="syz.4.411" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ffbcd73f219 code=0x7ffc0000 [ 213.539064][ T30] audit: type=1326 audit(1784514945.804:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7403 comm="syz.4.411" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ffbcd797c17 code=0x7ffc0000 [ 213.563481][ T30] audit: type=1326 audit(1784514945.804:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7403 comm="syz.4.411" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ffbcd73f219 code=0x7ffc0000 [ 213.669784][ T30] audit: type=1326 audit(1784514945.804:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7403 comm="syz.4.411" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ffbcd797c17 code=0x7ffc0000 [ 213.700120][ T7423] FAULT_INJECTION: forcing a failure. [ 213.700120][ T7423] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 213.719760][ T7423] CPU: 0 UID: 0 PID: 7423 Comm: syz.6.417 Tainted: G L syzkaller #0 PREEMPT(full) [ 213.719804][ T7423] Tainted: [L]=SOFTLOCKUP [ 213.719812][ T7423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 213.719826][ T7423] Call Trace: [ 213.719834][ T7423] [ 213.719844][ T7423] dump_stack_lvl+0xe8/0x150 [ 213.719876][ T7423] should_fail_ex+0x40c/0x560 [ 213.719902][ T7423] _copy_from_user+0x2d/0xb0 [ 213.719935][ T7423] video_usercopy+0x359/0x1430 [ 213.719968][ T7423] ? hook_file_ioctl+0x1f0/0x5f0 [ 213.719997][ T7423] ? __pfx___video_do_ioctl+0x10/0x10 [ 213.720020][ T7423] ? __pfx_video_usercopy+0x10/0x10 [ 213.720049][ T7423] ? __fget_files+0x2a/0x420 [ 213.720075][ T7423] ? __fget_files+0x2a/0x420 [ 213.720096][ T7423] ? __fget_files+0x3a2/0x420 [ 213.720122][ T7423] v4l2_ioctl+0x18d/0x1e0 [ 213.720142][ T7423] ? __pfx_v4l2_ioctl+0x10/0x10 [ 213.720161][ T7423] __se_sys_ioctl+0xfc/0x170 [ 213.720178][ T7423] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.720197][ T7423] do_syscall_64+0x174/0x580 [ 213.720213][ T7423] ? trace_irq_disable+0x3b/0x140 [ 213.720236][ T7423] ? clear_bhb_loop+0x40/0x90 [ 213.720257][ T7423] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.720276][ T7423] RIP: 0033:0x7f49b919de99 [ 213.720292][ T7423] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 213.720307][ T7423] RSP: 002b:00007f49ba0fe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 213.720325][ T7423] RAX: ffffffffffffffda RBX: 00007f49b9425fa0 RCX: 00007f49b919de99 [ 213.720338][ T7423] RDX: 00002000000000c0 RSI: 00000000c0d05640 RDI: 0000000000000003 [ 213.720350][ T7423] RBP: 00007f49ba0fe090 R08: 0000000000000000 R09: 0000000000000000 [ 213.720360][ T7423] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 213.720370][ T7423] R13: 00007f49b9426038 R14: 00007f49b9425fa0 R15: 00007f49b954fa48 [ 213.720396][ T7423] [ 213.926894][ T30] audit: type=1326 audit(1784514945.804:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7403 comm="syz.4.411" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ffbcd73f219 code=0x7ffc0000 [ 214.175729][ T9] usb 8-1: USB disconnect, device number 5 [ 215.509959][ T5627] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 215.545331][ T5814] usb 5-1: Failed to submit usb control message: -71 [ 215.565124][ T5814] usb 5-1: unable to send the bmi data to the device: -71 [ 215.623271][ T5627] usb 5-1: USB disconnect, device number 25 [ 215.632958][ T5814] usb 5-1: unable to get target info from device [ 215.697908][ T5814] usb 5-1: could not get target info (-71) [ 215.724077][ T5814] usb 5-1: could not probe fw (-71) [ 216.862228][ T7463] openvswitch: netlink: IP tunnel dst address not specified [ 216.871247][ T7463] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 217.158478][ T7471] netlink: 12 bytes leftover after parsing attributes in process `syz.3.430'. [ 217.522155][ T5710] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 217.705782][ T5710] usb 4-1: config 0 has no interfaces? [ 217.721096][ T5710] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 217.734468][ T5710] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.742956][ T5710] usb 4-1: Product: syz [ 217.748057][ T5710] usb 4-1: Manufacturer: syz [ 217.754543][ T5710] usb 4-1: SerialNumber: syz [ 217.766938][ T5710] usb 4-1: config 0 descriptor?? [ 218.076524][ T7471] netlink: 'syz.3.430': attribute type 5 has an invalid length. [ 218.120597][ T5710] usb 4-1: USB disconnect, device number 13 [ 219.070362][ T7497] kAFS: unable to lookup cell '' [ 219.470706][ T7497] netlink: 28 bytes leftover after parsing attributes in process `syz.3.436'. [ 220.530566][ T7512] sch_tbf: peakrate 7 is lower than or equals to rate 7 ! [ 221.121491][ T7517] netlink: 'syz.7.444': attribute type 1 has an invalid length. [ 221.462888][ T7511] bond1: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 221.600349][ T7511] bond1 (unregistering): Released all slaves [ 222.086825][ T7517] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 222.391560][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 223.118668][ T7540] netlink: 'syz.6.449': attribute type 16 has an invalid length. [ 223.136710][ T7540] netlink: 44 bytes leftover after parsing attributes in process `syz.6.449'. [ 223.225785][ T7541] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 223.241770][ T5723] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 223.255054][ T7540] bond0: entered promiscuous mode [ 223.356101][ T7540] batadv_slave_0: entered promiscuous mode [ 223.421660][ T5723] usb 5-1: Using ep0 maxpacket: 32 [ 223.460477][ T5723] usb 5-1: config 0 has an invalid interface number: 119 but max is 0 [ 223.491930][ T5723] usb 5-1: config 0 has no interface number 0 [ 223.498107][ T5723] usb 5-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 223.516147][ T5723] usb 5-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 223.540995][ T5723] usb 5-1: config 0 interface 119 altsetting 0 endpoint 0x83 has an invalid bInterval 74, changing to 10 [ 223.578907][ T5723] usb 5-1: config 0 interface 119 altsetting 0 endpoint 0x83 has invalid maxpacket 57855, setting to 1024 [ 223.647034][ T5723] usb 5-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 223.708017][ T7544] openvswitch: netlink: Missing valid actions attribute. [ 223.729293][ T5723] usb 5-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 223.766045][ T7544] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 223.780794][ T5723] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.817469][ T5723] usb 5-1: Product: syz [ 223.828296][ T5723] usb 5-1: Manufacturer: syz [ 223.835943][ T5723] usb 5-1: SerialNumber: syz [ 223.846667][ T5723] usb 5-1: config 0 descriptor?? [ 223.888798][ T5723] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.119/input/input13 [ 224.671549][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 224.993653][ T5723] usb 5-1: USB disconnect, device number 26 [ 225.042695][ T5743] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 225.236410][ T5743] usb 4-1: Using ep0 maxpacket: 8 [ 225.290445][ T5743] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 225.325897][ T5743] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 225.373757][ T5743] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 225.421662][ T5743] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 225.474816][ T5743] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 225.539198][ T5743] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 225.585914][ T5743] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.868665][ T5743] usb 4-1: usb_control_msg returned -32 [ 225.880980][ T5743] usbtmc 4-1:16.0: can't read capabilities [ 226.045455][ T7563] netdevsim netdevsim6 netdevsim0: entered allmulticast mode [ 226.058442][ T7563] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 226.297237][ T7565] usbtmc 4-1:16.0: usb_control_msg returned -32 [ 226.398012][ T10] usb 4-1: USB disconnect, device number 14 [ 226.480354][ T7567] netlink: 32 bytes leftover after parsing attributes in process `syz.4.459'. [ 227.964018][ T7580] binder: 7576:7580 ioctl c0306201 0 returned -14 [ 228.531536][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 229.201308][ T7590] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 229.207904][ T7590] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 229.219383][ T7590] vhci_hcd vhci_hcd.0: Device attached [ 229.264025][ T7591] vhci_hcd: cannot find the pending unlink 8 [ 229.289382][ T7591] vhci_hcd: connection closed [ 229.290230][ T5831] vhci_hcd vhci_hcd.0: stop threads [ 229.303119][ T5831] vhci_hcd vhci_hcd.0: release socket [ 229.308590][ T5831] vhci_hcd vhci_hcd.0: disconnect device [ 231.666270][ T7605] netlink: 'syz.4.471': attribute type 13 has an invalid length. [ 231.826522][ T7580] syz.3.461 (7580): drop_caches: 2 [ 232.041086][ T30] kauditd_printk_skb: 1187 callbacks suppressed [ 232.041107][ T30] audit: type=1400 audit(1784514964.624:1512): apparmor="DENIED" operation="setprocattr" info="invalid" error=-22 profile="unconfined" pid=7604 comm="syz.4.471" [ 233.147371][ T7632] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 233.158371][ T7632] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 233.906855][ T7643] netlink: 4 bytes leftover after parsing attributes in process `syz.6.482'. [ 235.124542][ T7665] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 235.166377][ T7665] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 236.033392][ T7685] xt_CT: You must specify a L4 protocol and not use inversions on it [ 236.049895][ T7686] xt_CT: You must specify a L4 protocol and not use inversions on it [ 236.128700][ T7687] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 236.176989][ T7687] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 237.119843][ T7701] syzkaller0: entered promiscuous mode [ 237.130794][ T7701] syzkaller0: entered allmulticast mode [ 237.154998][ T7701] netlink: 44 bytes leftover after parsing attributes in process `syz.3.501'. [ 237.658321][ T7709] syzkaller0: entered promiscuous mode [ 237.665119][ T7709] syzkaller0: entered allmulticast mode [ 237.703497][ T7713] netlink: 'syz.3.504': attribute type 1 has an invalid length. [ 237.859092][ T7713] 8021q: adding VLAN 0 to HW filter on device bond2 [ 238.059468][ T7707] bond2: (slave gretap1): making interface the new active one [ 238.131358][ T7707] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 238.254597][ T7717] netlink: 52 bytes leftover after parsing attributes in process `syz.0.507'. [ 238.310039][ T7717] netlink: 76 bytes leftover after parsing attributes in process `syz.0.507'. [ 238.366192][ T7717] netlink: 52 bytes leftover after parsing attributes in process `syz.0.507'. [ 238.432729][ T4941] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 238.444760][ T4941] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 238.454284][ T4941] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 238.467369][ T4941] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 238.483816][ T4941] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 238.884424][ T7733] netlink: 4 bytes leftover after parsing attributes in process `syz.4.512'. [ 239.148384][ T7738] FAULT_INJECTION: forcing a failure. [ 239.148384][ T7738] name failslab, interval 1, probability 0, space 0, times 0 [ 239.272750][ T7738] CPU: 0 UID: 0 PID: 7738 Comm: syz.3.514 Tainted: G L syzkaller #0 PREEMPT(full) [ 239.272786][ T7738] Tainted: [L]=SOFTLOCKUP [ 239.272794][ T7738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 239.272818][ T7738] Call Trace: [ 239.272827][ T7738] [ 239.272836][ T7738] dump_stack_lvl+0xe8/0x150 [ 239.272877][ T7738] should_fail_ex+0x40c/0x560 [ 239.272909][ T7738] should_failslab+0xa8/0x100 [ 239.272943][ T7738] __kmalloc_cache_noprof+0xa8/0x660 [ 239.272970][ T7738] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 239.273002][ T7738] ? __kmalloc_cache_noprof+0x150/0x660 [ 239.273029][ T7738] ? sctp_add_bind_addr+0x8c/0x370 [ 239.273058][ T7738] ? sctp_add_bind_addr+0x8c/0x370 [ 239.273096][ T7738] sctp_add_bind_addr+0x8c/0x370 [ 239.273150][ T7738] sctp_copy_local_addr_list+0x31a/0x4e0 [ 239.273186][ T7738] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 239.273224][ T7738] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 239.273258][ T7738] ? sctp_v6_is_any+0x64/0x80 [ 239.273291][ T7738] ? sctp_copy_one_addr+0x93/0x360 [ 239.273330][ T7738] sctp_bind_addr_copy+0xb3/0x3c0 [ 239.273363][ T7738] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 239.273396][ T7738] sctp_connect_new_asoc+0x2ff/0x6b0 [ 239.273424][ T7738] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 239.273457][ T7738] ? __local_bh_enable_ip+0xd0/0x130 [ 239.273515][ T7738] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 239.273540][ T7738] ? security_sctp_bind_connect+0x7e/0x2c0 [ 239.273576][ T7738] sctp_sendmsg+0x159b/0x2d00 [ 239.273616][ T7738] ? __pfx_sctp_sendmsg+0x10/0x10 [ 239.273646][ T7738] ? aa_sk_perm+0x6d5/0x900 [ 239.273688][ T7738] ? __might_fault+0xaf/0x130 [ 239.273718][ T7738] ? sock_rps_record_flow+0x19/0x350 [ 239.273754][ T7738] ? inet_sendmsg+0x298/0x320 [ 239.273787][ T7738] ? __pfx_inet_sendmsg+0x10/0x10 [ 239.273817][ T7738] sock_sendmsg_nosec+0x10e/0x180 [ 239.273849][ T7738] __sys_sendto+0x408/0x5a0 [ 239.273882][ T7738] ? ksys_write+0x1e6/0x270 [ 239.273919][ T7738] ? __pfx___sys_sendto+0x10/0x10 [ 239.273948][ T7738] ? __mutex_unlock_slowpath+0x731/0x900 [ 239.274002][ T7738] ? __pfx_ksys_write+0x10/0x10 [ 239.274042][ T7738] __x64_sys_sendto+0xde/0x100 [ 239.274075][ T7738] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.274100][ T7738] do_syscall_64+0x174/0x580 [ 239.274120][ T7738] ? trace_irq_disable+0x3b/0x140 [ 239.274149][ T7738] ? clear_bhb_loop+0x40/0x90 [ 239.274177][ T7738] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.274199][ T7738] RIP: 0033:0x7fad33b9de99 [ 239.274221][ T7738] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 239.274239][ T7738] RSP: 002b:00007fad34ac5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 239.274263][ T7738] RAX: ffffffffffffffda RBX: 00007fad33e25fa0 RCX: 00007fad33b9de99 [ 239.274279][ T7738] RDX: 0000000000000001 RSI: 0000200000000280 RDI: 0000000000000003 [ 239.274293][ T7738] RBP: 00007fad34ac5090 R08: 0000200000000040 R09: 000000000000001c [ 239.274308][ T7738] R10: 00000000200400d0 R11: 0000000000000246 R12: 0000000000000002 [ 239.274322][ T7738] R13: 00007fad33e26038 R14: 00007fad33e25fa0 R15: 00007fad33f4fa48 [ 239.274357][ T7738] [ 239.835631][ T7746] netlink: 8 bytes leftover after parsing attributes in process `syz.0.517'. [ 239.861689][ T7746] netlink: 28 bytes leftover after parsing attributes in process `syz.0.517'. [ 239.870640][ T7746] netlink: 28 bytes leftover after parsing attributes in process `syz.0.517'. [ 239.882699][ T7746] netlink: 88 bytes leftover after parsing attributes in process `syz.0.517'. [ 240.531650][ T51] Bluetooth: hci7: command tx timeout [ 240.667599][ T7727] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.720929][ T7727] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.775909][ T7727] bridge_slave_0: entered allmulticast mode [ 240.844947][ T7727] bridge_slave_0: entered promiscuous mode [ 240.861268][ T7727] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.873376][ T7727] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.887563][ T7727] bridge_slave_1: entered allmulticast mode [ 240.899183][ T7727] bridge_slave_1: entered promiscuous mode [ 241.059473][ T7727] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 241.153409][ T7727] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 241.467821][ T7727] team0: Port device team_slave_0 added [ 241.525044][ T7727] team0: Port device team_slave_1 added [ 241.646854][ T7727] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 241.673155][ T5723] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 241.700606][ T7727] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 241.739302][ T7727] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 241.827385][ T7727] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 241.884372][ T7727] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 241.920918][ T5723] usb 5-1: Using ep0 maxpacket: 8 [ 241.968012][ T5723] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 241.996300][ T7727] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 242.020752][ T5723] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 242.070233][ T5723] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 242.127381][ T5723] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 242.192092][ T5723] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 242.232633][ T5723] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 242.253884][ T5723] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 242.270451][ T5723] usb 5-1: config 168 interface 0 has no altsetting 0 [ 242.279158][ T7727] hsr_slave_0: entered promiscuous mode [ 242.294511][ T7727] hsr_slave_1: entered promiscuous mode [ 242.309666][ T5723] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 242.320606][ T7727] debugfs: 'hsr0' already exists in 'hsr' [ 242.344472][ T5723] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 242.356608][ T7727] Cannot create hsr debugfs directory [ 242.369977][ T5723] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 242.407631][ T5723] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 242.452893][ T5723] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 242.478838][ T5723] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 242.491008][ T5723] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 242.504949][ T5723] usb 5-1: config 168 interface 0 has no altsetting 0 [ 242.547406][ T5723] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 242.577633][ T5723] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 242.611601][ T51] Bluetooth: hci7: command tx timeout [ 242.636213][ T5723] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 242.695577][ T5723] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 242.730954][ T5723] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 242.798330][ T5723] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 242.842926][ T5723] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 242.858806][ T5723] usb 5-1: config 168 interface 0 has no altsetting 0 [ 242.870142][ T5723] usb 5-1: string descriptor 0 read error: -22 [ 242.877039][ T5723] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 242.888243][ T5723] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.919934][ T5723] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 243.256524][ T7727] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 243.340753][ T7727] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 243.371216][ T7784] netlink: 'syz.0.528': attribute type 4 has an invalid length. [ 243.394760][ T7727] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 243.428741][ T7727] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 243.529065][ T7727] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 243.582647][ T7727] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 243.604393][ T5723] usb 5-1: USB disconnect, device number 27 [ 243.799274][ T7727] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 243.834435][ T7727] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 244.365057][ T7727] 8021q: adding VLAN 0 to HW filter on device bond0 [ 244.533914][ T7727] 8021q: adding VLAN 0 to HW filter on device team0 [ 244.567034][ T5813] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.574292][ T5813] bridge0: port 1(bridge_slave_0) entered forwarding state [ 244.663318][ T5820] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.670609][ T5820] bridge0: port 2(bridge_slave_1) entered forwarding state [ 244.691751][ T51] Bluetooth: hci7: command tx timeout [ 244.759799][ T7808] netlink: 56 bytes leftover after parsing attributes in process `syz.0.534'. [ 245.081912][ T7727] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 245.301268][ T7727] veth0_vlan: entered promiscuous mode [ 245.350731][ T7727] veth1_vlan: entered promiscuous mode [ 245.557175][ T7727] veth0_macvtap: entered promiscuous mode [ 245.595480][ T7727] veth1_macvtap: entered promiscuous mode [ 245.719433][ T7727] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 245.798422][ T7727] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 245.890807][ T5831] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.923687][ T5831] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.955081][ T5831] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.006915][ T5831] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.077901][ T7822] syzkaller0: entered promiscuous mode [ 246.091384][ T7822] syzkaller0: entered allmulticast mode [ 246.113698][ T7824] netlink: 5 bytes leftover after parsing attributes in process `syz.0.539'. [ 246.609036][ T7831] netlink: 'syz.3.541': attribute type 29 has an invalid length. [ 246.638301][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 246.656813][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 246.773671][ T51] Bluetooth: hci7: command tx timeout [ 246.926945][ T5825] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 246.965442][ T5825] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 247.537257][ T7843] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 247.674363][ T7843] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 248.102176][ T7855] fuse: Bad value for 'group_id' [ 248.134580][ T7855] fuse: Bad value for 'group_id' [ 249.074875][ T7867] bond5: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 249.139429][ T7867] bond5 (unregistering): Released all slaves [ 249.265357][ T10] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 249.443081][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 249.485841][ T10] usb 4-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 249.505269][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.516032][ T10] usb 4-1: Product: syz [ 249.520282][ T10] usb 4-1: Manufacturer: syz [ 249.525410][ T10] usb 4-1: SerialNumber: syz [ 249.536570][ T10] usb 4-1: config 0 descriptor?? [ 249.555730][ T10] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 250.921894][ T5710] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 251.101610][ T5710] usb 9-1: Using ep0 maxpacket: 32 [ 251.110791][ T5710] usb 9-1: unable to get BOS descriptor or descriptor too short [ 251.121398][ T5710] usb 9-1: config 1 has an invalid descriptor of length 109, skipping remainder of the config [ 251.132825][ T5710] usb 9-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 251.135158][ T10] gspca_topro: reg_w err -110 [ 251.165845][ T5710] usb 9-1: New USB device found, idVendor=0763, idProduct=2003, bcdDevice= 0.40 [ 251.224585][ T10] gspca_topro: Sensor soi763a [ 251.242366][ T5710] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.254674][ T5710] usb 9-1: Product: syz [ 251.259330][ T5710] usb 9-1: Manufacturer: syz [ 251.265079][ T5710] usb 9-1: SerialNumber: syz [ 251.339271][ T10] usb 4-1: USB disconnect, device number 15 [ 251.522918][ T7884] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 251.593208][ T7884] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 252.069487][ T5627] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 252.110406][ T5627] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 252.694740][ T4941] Bluetooth: hci3: command 0x0406 tx timeout [ 252.854654][ T5710] usb 9-1: 1:1 : unsupported format bits 0x2002 [ 252.861042][ T5710] usb 9-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 252.881479][ T5710] usb 9-1: unit 37 not found! [ 252.886926][ T5710] usb 9-1: unit 0 not found! [ 252.963085][ T7905] netlink: 4 bytes leftover after parsing attributes in process `syz.0.559'. [ 253.028957][ T5710] usb 9-1: USB disconnect, device number 2 [ 253.348960][ T5627] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 253.427305][ T7901] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 253.441936][ T5627] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 254.014737][ T7913] binder: 7912:7913 ioctl 5412 200000000040 returned -22 [ 254.239695][ T7919] program syz.8.564 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 255.111182][ T7932] netlink: 268 bytes leftover after parsing attributes in process `syz.4.566'. [ 255.151882][ T7932] netlink: 4 bytes leftover after parsing attributes in process `syz.4.566'. [ 255.216474][ T7932] netlink: 8 bytes leftover after parsing attributes in process `syz.4.566'. [ 255.249928][ T7934] binder: 7933:7934 ioctl c0306201 200000000100 returned -22 [ 255.496773][ T7939] netlink: 'syz.8.569': attribute type 9 has an invalid length. [ 255.746592][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.756863][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.890136][ T7945] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 255.970218][ T7949] netlink: 28 bytes leftover after parsing attributes in process `syz.0.574'. [ 256.068465][ T7949] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 256.289898][ T7954] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 256.327344][ T5744] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 256.354044][ T5744] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 256.366429][ T5744] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 256.394752][ T5744] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 256.408346][ T5744] rtc rtc0: __rtc_set_alarm: err=-22 [ 257.322725][ T5724] usb 5-1: new full-speed USB device number 28 using dummy_hcd [ 257.524973][ T5724] usb 5-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 257.557376][ T5724] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.578280][ T5724] usb 5-1: Product: syz [ 257.599331][ T5724] usb 5-1: Manufacturer: syz [ 257.633866][ T5724] usb 5-1: SerialNumber: syz [ 257.685690][ T5724] usb 5-1: config 0 descriptor?? [ 257.724745][ T5724] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 257.841982][ T10] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 258.012889][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 258.030726][ T10] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 258.060129][ T10] usb 4-1: config 0 has no interface number 0 [ 258.082023][ T10] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 258.130348][ T10] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 258.154981][ T10] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 258.166174][ T10] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 258.179551][ T10] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 258.188878][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.209554][ T10] usb 4-1: config 0 descriptor?? [ 258.245918][ T10] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 258.323526][ T5744] usb 9-1: new full-speed USB device number 3 using dummy_hcd [ 258.504837][ T5744] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 258.524264][ T5744] usb 9-1: config 0 has no interfaces? [ 258.545938][ T5744] usb 9-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 258.561322][ T5744] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.576769][ T5744] usb 9-1: Product: syz [ 258.595830][ T5744] usb 9-1: Manufacturer: syz [ 258.602481][ T5744] usb 9-1: SerialNumber: syz [ 258.618913][ T5744] usb 9-1: config 0 descriptor?? [ 258.851151][ T5744] usb 9-1: USB disconnect, device number 3 [ 258.932982][ T7855] sound midiC3D0: rawmidi drain error (avail = 3968, buffer_size = 4096) [ 259.774151][ T5724] gspca_stk1135: reg_w 0x203 err -71 [ 259.806866][ T5724] gspca_stk1135: serial bus timeout: status=0x00 [ 259.824602][ T5724] gspca_stk1135: Sensor write failed [ 259.830394][ T5724] gspca_stk1135: serial bus timeout: status=0x00 [ 259.864615][ T5724] gspca_stk1135: Sensor write failed [ 259.870215][ T5724] gspca_stk1135: serial bus timeout: status=0x00 [ 259.877858][ T5724] gspca_stk1135: Sensor read failed [ 259.885832][ T5724] gspca_stk1135: serial bus timeout: status=0x00 [ 259.895184][ T5724] gspca_stk1135: Sensor read failed [ 259.900652][ T5724] gspca_stk1135: Detected sensor type unknown (0x0) [ 259.909022][ T5724] gspca_stk1135: serial bus timeout: status=0x00 [ 259.916138][ T5724] gspca_stk1135: Sensor read failed [ 259.921993][ T5724] gspca_stk1135: serial bus timeout: status=0x00 [ 259.928433][ T5724] gspca_stk1135: Sensor read failed [ 259.934390][ T5724] gspca_stk1135: serial bus timeout: status=0x00 [ 259.940780][ T5724] gspca_stk1135: Sensor write failed [ 259.949014][ T5724] gspca_stk1135: serial bus timeout: status=0x00 [ 259.966657][ T5724] gspca_stk1135: Sensor write failed [ 259.989905][ T5724] stk1135 5-1:0.0: probe with driver stk1135 failed with error -71 [ 260.037899][ T5724] usb 5-1: USB disconnect, device number 28 [ 260.657195][ T5723] usb 4-1: USB disconnect, device number 16 [ 260.708374][ T7990] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 260.756543][ T5723] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 261.522550][ T5723] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 261.704169][ T5723] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 261.752629][ T5723] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 261.779933][ T5723] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 261.799155][ T5723] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.844643][ T8000] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 261.900607][ T8007] fuse: Bad value for 'group_id' [ 261.935086][ T5723] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 262.013351][ T8007] fuse: Bad value for 'group_id' [ 262.085251][ T7992] netlink: 4 bytes leftover after parsing attributes in process `syz.3.588'. [ 263.164273][ T5723] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 263.229157][ T8024] netlink: 'syz.6.600': attribute type 3 has an invalid length. [ 263.312592][ T5723] usb 9-1: device descriptor read/64, error -71 [ 263.584391][ T5723] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 263.741906][ T5723] usb 9-1: device descriptor read/64, error -71 [ 263.863678][ T5723] usb usb9-port1: attempt power cycle [ 264.223666][ T5723] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 264.253166][ T5723] usb 9-1: device descriptor read/8, error -71 [ 264.368048][ T8032] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 264.512459][ T5723] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 264.581617][ T5723] usb 9-1: device descriptor read/8, error -71 [ 264.713452][ T5723] usb usb9-port1: unable to enumerate USB device [ 264.995626][ T30] audit: type=1326 audit(1784514997.584:1513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8030 comm="syz.3.602" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fad33b9de99 code=0x0 [ 265.964087][ T8039] FAULT_INJECTION: forcing a failure. [ 265.964087][ T8039] name failslab, interval 1, probability 0, space 0, times 0 [ 265.980056][ T8038] binder_alloc: 8036: pid 8036 spamming oneway? 1 buffers allocated for a total size of 4096 [ 265.999883][ T8038] binder_alloc: 8036: pid 8036 spamming oneway? 2 buffers allocated for a total size of 5120 [ 266.005535][ T8039] CPU: 1 UID: 0 PID: 8039 Comm: syz.3.603 Tainted: G L syzkaller #0 PREEMPT(full) [ 266.005617][ T8039] Tainted: [L]=SOFTLOCKUP [ 266.005639][ T8039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 266.005671][ T8039] Call Trace: [ 266.005699][ T8039] [ 266.005721][ T8039] dump_stack_lvl+0xe8/0x150 [ 266.005866][ T8039] should_fail_ex+0x40c/0x560 [ 266.005949][ T8039] should_failslab+0xa8/0x100 [ 266.006034][ T8039] __kmalloc_noprof+0xfe/0x720 [ 266.006110][ T8039] ? tomoyo_encode+0x2ad/0x570 [ 266.006173][ T8039] ? tomoyo_encode+0x2ad/0x570 [ 266.006261][ T8039] tomoyo_encode+0x2ad/0x570 [ 266.006335][ T8039] tomoyo_realpath_from_path+0x5fa/0x640 [ 266.006429][ T8039] ? tomoyo_path_number_perm+0x219/0x5f0 [ 266.006519][ T8039] tomoyo_path_number_perm+0x246/0x5f0 [ 266.006612][ T8039] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 266.006696][ T8039] ? __lock_acquire+0x683/0x2cf0 [ 266.006814][ T8039] ? hook_file_ioctl+0x1f0/0x5f0 [ 266.006981][ T8039] ? __fget_files+0x2a/0x420 [ 266.007076][ T8039] ? __fget_files+0x2a/0x420 [ 266.007173][ T8039] ? __fget_files+0x3a2/0x420 [ 266.007270][ T8039] ? __fget_files+0x2a/0x420 [ 266.007354][ T8039] security_file_ioctl+0xc3/0x2a0 [ 266.007453][ T8039] __se_sys_ioctl+0x47/0x170 [ 266.007518][ T8039] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.007582][ T8039] do_syscall_64+0x174/0x580 [ 266.007636][ T8039] ? trace_irq_disable+0x3b/0x140 [ 266.007711][ T8039] ? clear_bhb_loop+0x40/0x90 [ 266.007789][ T8039] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.007844][ T8039] RIP: 0033:0x7fad33b9de99 [ 266.007904][ T8039] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 266.007948][ T8039] RSP: 002b:00007fad34ac5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 266.008012][ T8039] RAX: ffffffffffffffda RBX: 00007fad33e25fa0 RCX: 00007fad33b9de99 [ 266.008054][ T8039] RDX: 00002000000019c0 RSI: 00000000c018937e RDI: 0000000000000003 [ 266.008094][ T8039] RBP: 00007fad34ac5090 R08: 0000000000000000 R09: 0000000000000000 [ 266.008126][ T8039] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 266.008159][ T8039] R13: 00007fad33e26038 R14: 00007fad33e25fa0 R15: 00007fad33f4fa48 [ 266.008239][ T8039] [ 266.009615][ T8039] ERROR: Out of memory at tomoyo_realpath_from_path. [ 266.354425][ T5723] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 266.436438][ T8041] x_tables: ip6_tables: cgroup match: used from hooks PREROUTING, but only valid from INPUT/OUTPUT/POSTROUTING [ 266.524755][ T5723] usb 9-1: device descriptor read/64, error -71 [ 266.783406][ T5723] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 266.942101][ T5723] usb 9-1: device descriptor read/64, error -71 [ 267.046509][ T8049] netlink: 4 bytes leftover after parsing attributes in process `syz.3.608'. [ 267.063463][ T5723] usb usb9-port1: attempt power cycle [ 267.412149][ T5723] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 267.452829][ T5723] usb 9-1: device descriptor read/8, error -71 [ 267.625277][ T8053] netlink: 5 bytes leftover after parsing attributes in process `syz.3.610'. [ 267.637109][ T8053] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 267.664853][ T8053] netlink: 'syz.3.610': attribute type 13 has an invalid length. [ 267.672763][ T8053] netlink: 'syz.3.610': attribute type 17 has an invalid length. [ 267.699902][ T5723] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 267.741619][ T5723] usb 9-1: device descriptor read/8, error -71 [ 267.873197][ T5723] usb usb9-port1: unable to enumerate USB device [ 268.087166][ T8053] veth0_to_team: entered promiscuous mode [ 268.096852][ T8053] 8021q: adding VLAN 0 to HW filter on device bond1 [ 269.402932][ T5725] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 269.599160][ T5725] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 269.653179][ T5725] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 269.676805][ T5725] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 269.688639][ T5725] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.746658][ T8060] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 269.790551][ T5725] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 270.024775][ T5725] usb 9-1: USB disconnect, device number 12 [ 270.287709][ T8072] sit0: left promiscuous mode [ 271.282019][ T5724] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 271.453527][ T5724] usb 9-1: Using ep0 maxpacket: 16 [ 271.478136][ T5724] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 271.522005][ T5724] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 271.553084][ T5724] usb 9-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x24, changing to 0x4 [ 271.596662][ T5724] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 60930, setting to 1024 [ 271.648673][ T5724] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 271.681168][ T5724] usb 9-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 271.724215][ T5724] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 271.755419][ T5724] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 271.807534][ T5724] usb 9-1: SerialNumber: syz [ 271.863864][ T8078] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 271.871348][ T8078] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 272.093148][ T5724] cdc_acm 9-1:1.0: ttyACM0: USB ACM device [ 272.142040][ T5724] usb 9-1: USB disconnect, device number 13 [ 273.026030][ T8008] sound midiC3D0: rawmidi drain error (avail = 3968, buffer_size = 4096) [ 273.066627][ T5627] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 273.135287][ T5725] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 273.207067][ T8089] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 273.224083][ T8089] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 273.248232][ T5710] usb 5-1: USB disconnect, device number 29 [ 273.256731][ T5627] usb 9-1: Using ep0 maxpacket: 8 [ 273.298695][ T5627] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 273.321677][ T5725] usb 4-1: Using ep0 maxpacket: 16 [ 273.343196][ T5725] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 273.354773][ T5627] usb 9-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 273.391001][ T5725] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 273.404914][ T5627] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 273.434807][ T5627] usb 9-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 273.449777][ T5627] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 273.469073][ T5725] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 273.503125][ T5725] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 273.516546][ T5725] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.539185][ T5627] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 273.558537][ T5725] usb 4-1: config 0 descriptor?? [ 273.576555][ T5627] usb 9-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 273.599386][ T5627] usb 9-1: config 168 interface 0 has no altsetting 0 [ 273.607642][ T5627] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 273.615867][ T5627] usb 9-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 273.628014][ T5627] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 273.639544][ T5627] usb 9-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 273.654007][ T5627] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 273.673945][ T5627] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 273.694745][ T5627] usb 9-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 273.749565][ T5627] usb 9-1: config 168 interface 0 has no altsetting 0 [ 273.768909][ T5627] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 273.785605][ T5627] usb 9-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 273.810025][ T5627] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 273.880080][ T5627] usb 9-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 273.892443][ T5627] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 273.932591][ T5627] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 273.947012][ T5627] usb 9-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 273.979086][ T8096] fuse: Bad value for 'fd' [ 274.022460][ T5627] usb 9-1: config 168 interface 0 has no altsetting 0 [ 274.036795][ T5627] usb 9-1: string descriptor 0 read error: -22 [ 274.043350][ T5627] usb 9-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 274.087530][ T5627] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.110056][ T5725] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 274.122631][ T5725] microsoft 0003:045E:07DA.0007: ignoring exceeding usage max [ 274.134504][ T5725] microsoft 0003:045E:07DA.0007: unknown main item tag 0x4 [ 274.142351][ T5725] microsoft 0003:045E:07DA.0007: unknown main item tag 0x5 [ 274.150488][ T5725] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 274.158237][ T5725] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 274.167379][ T5725] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 274.174792][ T5725] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 274.186187][ T5725] microsoft 0003:045E:07DA.0007: implement() called with n (123) > 32! (kworker/0:8) [ 274.234393][ T5627] adutux 9-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 274.315114][ T5725] microsoft 0003:045E:07DA.0007: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 274.329711][ T5725] microsoft 0003:045E:07DA.0007: no inputs found [ 274.338483][ T5725] microsoft 0003:045E:07DA.0007: could not initialize ff, continuing anyway [ 274.379927][ T5725] usb 4-1: USB disconnect, device number 17 [ 274.567438][ T8100] fido_id[8100]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 275.077617][ T8096] syz.4.625 (8096): drop_caches: 2 [ 275.158307][ T8107] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 275.223017][ T8107] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 275.852693][ T8118] netlink: 'syz.4.632': attribute type 26 has an invalid length. [ 275.892290][ T24] usb 9-1: USB disconnect, device number 14 [ 276.192182][ T8121] fuse: Bad value for 'group_id' [ 276.201288][ T8121] fuse: Bad value for 'group_id' [ 277.449248][ T8131] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 277.455838][ T8131] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 277.820307][ T8131] vhci_hcd vhci_hcd.0: Device attached [ 278.111787][ T24] usb 40-1: SetAddress Request (2) to port 0 [ 278.143830][ T24] usb 40-1: new SuperSpeed USB device number 2 using vhci_hcd [ 278.384675][ T8132] vhci_hcd: connection reset by peer [ 278.390403][ T5827] vhci_hcd vhci_hcd.3: stop threads [ 278.411963][ T5827] vhci_hcd vhci_hcd.3: release socket [ 278.420810][ T5827] vhci_hcd vhci_hcd.3: disconnect device [ 278.481373][ T8146] netlink: 32 bytes leftover after parsing attributes in process `syz.0.639'. [ 279.376319][ T4941] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 279.389049][ T4941] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 279.406652][ T4941] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 279.419187][ T4941] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 279.427638][ T4941] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 280.435822][ T8159] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 280.546835][ T8159] netlink: 8 bytes leftover after parsing attributes in process `syz.0.642'. [ 280.645385][ T8159] netlink: 72 bytes leftover after parsing attributes in process `syz.0.642'. [ 280.766158][ T8152] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.788348][ T8152] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.802230][ T8152] bridge_slave_0: entered allmulticast mode [ 280.804797][ T8152] bridge_slave_0: entered promiscuous mode [ 280.810593][ T8152] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.810762][ T8152] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.810958][ T8152] bridge_slave_1: entered allmulticast mode [ 280.816125][ T8152] bridge_slave_1: entered promiscuous mode [ 280.950911][ T8166] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 280.979244][ T8166] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 281.033834][ T8152] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 281.094220][ T8152] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 281.191001][ T8152] team0: Port device team_slave_0 added [ 281.205234][ T8152] team0: Port device team_slave_1 added [ 281.308127][ T8152] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 281.327824][ T8152] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 281.435322][ T8152] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 281.464596][ T8152] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 281.495363][ T51] Bluetooth: hci8: command tx timeout [ 281.511844][ T8152] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 281.571266][ T8152] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 281.694988][ T8172] FAULT_INJECTION: forcing a failure. [ 281.694988][ T8172] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 281.712535][ T8172] CPU: 1 UID: 0 PID: 8172 Comm: syz.0.647 Tainted: G L syzkaller #0 PREEMPT(full) [ 281.712569][ T8172] Tainted: [L]=SOFTLOCKUP [ 281.712577][ T8172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 281.712590][ T8172] Call Trace: [ 281.712599][ T8172] [ 281.712612][ T8172] dump_stack_lvl+0xe8/0x150 [ 281.712650][ T8172] should_fail_ex+0x40c/0x560 [ 281.712682][ T8172] _copy_to_user+0x31/0xb0 [ 281.712718][ T8172] simple_read_from_buffer+0xe1/0x170 [ 281.712755][ T8172] proc_fail_nth_read+0x1bb/0x230 [ 281.712789][ T8172] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 281.712824][ T8172] ? rw_verify_area+0x24a/0x4c0 [ 281.712859][ T8172] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 281.712888][ T8172] vfs_read+0x213/0xa80 [ 281.712926][ T8172] ? __pfx___mutex_lock+0x10/0x10 [ 281.712950][ T8172] ? __pfx_vfs_read+0x10/0x10 [ 281.712985][ T8172] ? __fget_files+0x2a/0x420 [ 281.713019][ T8172] ? __fget_files+0x3a2/0x420 [ 281.713047][ T8172] ? __fget_files+0x2a/0x420 [ 281.713086][ T8172] ksys_read+0x150/0x270 [ 281.713121][ T8172] ? __pfx_ksys_read+0x10/0x10 [ 281.713163][ T8172] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.713189][ T8172] do_syscall_64+0x174/0x580 [ 281.713209][ T8172] ? trace_irq_disable+0x3b/0x140 [ 281.713237][ T8172] ? clear_bhb_loop+0x40/0x90 [ 281.713265][ T8172] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.713287][ T8172] RIP: 0033:0x7f7832d5e6ce [ 281.713308][ T8172] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 281.713327][ T8172] RSP: 002b:00007f7833c74fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 281.713356][ T8172] RAX: ffffffffffffffda RBX: 00007f7833c756c0 RCX: 00007f7832d5e6ce [ 281.713372][ T8172] RDX: 000000000000000f RSI: 00007f7833c750a0 RDI: 0000000000000004 [ 281.713386][ T8172] RBP: 00007f7833c75090 R08: 0000000000000000 R09: 0000000000000000 [ 281.713400][ T8172] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 281.713413][ T8172] R13: 00007f7833026038 R14: 00007f7833025fa0 R15: 00007f783314fa48 [ 281.713449][ T8172] [ 282.090884][ T8152] hsr_slave_0: entered promiscuous mode [ 282.104913][ T8152] hsr_slave_1: entered promiscuous mode [ 282.111667][ T8152] debugfs: 'hsr0' already exists in 'hsr' [ 282.126727][ T8152] Cannot create hsr debugfs directory [ 282.188809][ T8175] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 282.231456][ T8175] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 282.745357][ T8179] fuse: Bad value for 'user_id' [ 282.763211][ T8179] fuse: Bad value for 'user_id' [ 283.019501][ T8183] netlink: 104 bytes leftover after parsing attributes in process `syz.3.651'. [ 283.254798][ T24] usb 40-1: device descriptor read/8, error -110 [ 283.269056][ T8152] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 283.328783][ T8152] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 283.350146][ T8189] input: syz0 as /devices/virtual/input/input15 [ 283.357542][ T8187] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 283.371355][ T8152] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 283.385782][ T8187] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 283.411010][ T30] audit: type=1326 audit(1784515015.994:1514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8190 comm="syz.3.653" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad33b9de99 code=0x7ffc0000 [ 283.445925][ T8189] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 283.479318][ T8152] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 283.491289][ T8152] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 283.531396][ T30] audit: type=1326 audit(1784515015.994:1515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8190 comm="syz.3.653" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad33b9de99 code=0x7ffc0000 [ 283.556884][ T30] audit: type=1326 audit(1784515015.994:1516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8190 comm="syz.3.653" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad33b9de99 code=0x7ffc0000 [ 283.576473][ T51] Bluetooth: hci8: command tx timeout [ 283.586487][ T30] audit: type=1326 audit(1784515015.994:1517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8190 comm="syz.3.653" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad33b9de99 code=0x7ffc0000 [ 283.586573][ T30] audit: type=1326 audit(1784515015.994:1518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8190 comm="syz.3.653" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fad33b9de99 code=0x7ffc0000 [ 283.658137][ T30] audit: type=1326 audit(1784515016.244:1519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8195 comm="syz.3.653" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fad33b5e6ce code=0x7ffc0000 [ 283.693731][ T30] audit: type=1326 audit(1784515016.274:1520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8190 comm="syz.3.653" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad33b9de99 code=0x7ffc0000 [ 283.720620][ T30] audit: type=1326 audit(1784515016.274:1521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8190 comm="syz.3.653" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fad33b9dc02 code=0x7ffc0000 [ 283.748259][ T30] audit: type=1326 audit(1784515016.274:1522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8190 comm="syz.3.653" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fad33b9dc97 code=0x7ffc0000 [ 283.758699][ T24] usb usb40-port1: attempt power cycle [ 283.778672][ T30] audit: type=1326 audit(1784515016.274:1523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8190 comm="syz.3.653" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fad33b5ab91 code=0x7ffc0000 [ 283.809973][ T8152] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 283.865602][ T8152] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 283.932245][ T8152] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 284.418619][ T8152] 8021q: adding VLAN 0 to HW filter on device bond0 [ 284.477551][ T24] usb usb40-port1: unable to enumerate USB device [ 284.581942][ T8152] 8021q: adding VLAN 0 to HW filter on device team0 [ 284.678812][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.686044][ T5825] bridge0: port 1(bridge_slave_0) entered forwarding state [ 284.699412][ T8206] syzkaller1: entered promiscuous mode [ 284.736491][ T8206] syzkaller1: entered allmulticast mode [ 284.819238][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.826514][ T5827] bridge0: port 2(bridge_slave_1) entered forwarding state [ 284.899275][ T8206] netlink: 200 bytes leftover after parsing attributes in process `syz.4.656'. [ 285.656293][ T51] Bluetooth: hci8: command tx timeout [ 286.019124][ T8216] bond3: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 286.106616][ T8216] bond3 (unregistering): Released all slaves [ 286.439623][ T8152] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 286.465172][ T8121] sound midiC3D0: rawmidi drain error (avail = 3968, buffer_size = 4096) [ 286.847112][ T8152] veth0_vlan: entered promiscuous mode [ 286.872431][ T8152] veth1_vlan: entered promiscuous mode [ 286.970457][ T8152] veth0_macvtap: entered promiscuous mode [ 287.034427][ T8152] veth1_macvtap: entered promiscuous mode [ 287.071361][ T8228] binder: 8224:8228 ioctl 8903 0 returned -22 [ 287.084353][ T8152] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 287.133615][ T8152] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 287.215184][ T5820] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.263368][ T5820] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.345449][ T5820] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.387206][ T5813] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.701858][ T5744] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 287.734793][ T51] Bluetooth: hci8: command tx timeout [ 287.833876][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 287.889855][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 287.903474][ T5744] usb 5-1: Using ep0 maxpacket: 32 [ 287.923104][ T5744] usb 5-1: unable to get BOS descriptor or descriptor too short [ 287.938408][ T5744] usb 5-1: config 7 has an invalid interface number: 219 but max is 0 [ 287.946920][ T5744] usb 5-1: config 7 has no interface number 0 [ 287.954776][ T5744] usb 5-1: config 7 interface 219 has no altsetting 0 [ 287.965763][ T5744] usb 5-1: New USB device found, idVendor=0979, idProduct=0270, bcdDevice=ed.31 [ 287.984313][ T5744] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.000917][ T5744] usb 5-1: Product: syz [ 288.006207][ T5744] usb 5-1: Manufacturer: syz [ 288.010954][ T5744] usb 5-1: SerialNumber: syz [ 288.057283][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 288.108132][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 288.430338][ T8232] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 288.459885][ T8232] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 288.943151][ T10] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 289.111629][ T10] usb 10-1: Using ep0 maxpacket: 16 [ 289.150077][ T10] usb 10-1: config 1 has an invalid interface number: 105 but max is 0 [ 289.170828][ T10] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 289.220597][ T10] usb 10-1: config 1 has no interface number 0 [ 289.262501][ T10] usb 10-1: config 1 interface 105 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 289.293486][ T10] usb 10-1: config 1 interface 105 has no altsetting 0 [ 289.306226][ T10] usb 10-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 289.317595][ T10] usb 10-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 289.326184][ T10] usb 10-1: Product: syz [ 289.330570][ T10] usb 10-1: Manufacturer: syz [ 289.341066][ T10] usb 10-1: SerialNumber: syz [ 289.579346][ T30] kauditd_printk_skb: 172 callbacks suppressed [ 289.579366][ T30] audit: type=1326 audit(1784515022.164:1696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8239 comm="syz.9.641" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9c40f9de99 code=0x0 [ 289.763003][ T10] aqc111 10-1:1.105: probe with driver aqc111 failed with error -22 [ 290.367366][ T8261] fuse: Bad value for 'group_id' [ 290.396242][ T8261] fuse: Bad value for 'group_id' [ 290.489018][ T5744] gspca_main: jeilinj-2.14.0 probing 0979:0270 [ 290.524014][ T5744] usb 5-1: USB disconnect, device number 30 [ 291.362190][ T8273] sch_tbf: peakrate 7 is lower than or equals to rate 7 ! [ 291.890830][ T8281] batadv_slave_1: entered promiscuous mode [ 291.911827][ T5744] usb 10-1: USB disconnect, device number 2 [ 292.275154][ T8288] netlink: 72 bytes leftover after parsing attributes in process `syz.9.675'. [ 293.233363][ T5725] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 293.413689][ T5725] usb 10-1: Using ep0 maxpacket: 8 [ 293.430870][ T5725] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 293.448106][ T5725] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 293.470095][ T5725] usb 10-1: config 0 has no interface number 0 [ 293.512515][ T5725] usb 10-1: config 0 interface 1 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 293.576747][ T5725] usb 10-1: config 0 interface 1 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 293.623151][ T5725] usb 10-1: config 0 interface 1 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 293.639702][ T5725] usb 10-1: config 0 interface 1 has no altsetting 0 [ 293.651110][ T5725] usb 10-1: New USB device found, idVendor=28bd, idProduct=0078, bcdDevice= 0.00 [ 293.705313][ T5725] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.733299][ T5725] usb 10-1: config 0 descriptor?? [ 293.893880][ T8301] syzkaller0: entered promiscuous mode [ 293.899481][ T8301] syzkaller0: entered allmulticast mode [ 294.191788][ T5725] usbhid 10-1:0.1: can't add hid device: -71 [ 294.226214][ T5725] usbhid 10-1:0.1: probe with driver usbhid failed with error -71 [ 294.248129][ T5725] usb 10-1: USB disconnect, device number 3 [ 296.507819][ T8330] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 296.550589][ T8330] loop8: detected capacity change from 0 to 7 [ 296.768175][ T8330] Dev loop8: unable to read RDB block 7 [ 296.777075][ T8330] loop8: unable to read partition table [ 296.799666][ T8330] loop8: partition table beyond EOD, truncated [ 296.810747][ T8330] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 298.777178][ T4941] Bluetooth: hci6: command 0x0406 tx timeout [ 298.999626][ T8333] fuse: Bad value for 'group_id' [ 299.013160][ T8333] fuse: Bad value for 'group_id' [ 300.211147][ T30] audit: type=1326 audit(1784515032.794:1697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8338 comm="syz.0.692" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7832d9de99 code=0x7ffc0000 [ 300.299716][ T30] audit: type=1326 audit(1784515032.834:1698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8338 comm="syz.0.692" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7832d9de99 code=0x7ffc0000 [ 300.379869][ T30] audit: type=1326 audit(1784515032.834:1699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8338 comm="syz.0.692" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7832d9de99 code=0x7ffc0000 [ 300.414792][ T30] audit: type=1326 audit(1784515032.834:1700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8338 comm="syz.0.692" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7832d9de99 code=0x7ffc0000 [ 300.442011][ T30] audit: type=1326 audit(1784515032.834:1701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8338 comm="syz.0.692" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7832d9de99 code=0x7ffc0000 [ 300.469819][ T30] audit: type=1326 audit(1784515032.834:1702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8338 comm="syz.0.692" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7832d9de99 code=0x7ffc0000 [ 300.496731][ T30] audit: type=1326 audit(1784515032.834:1703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8338 comm="syz.0.692" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7832d9de99 code=0x7ffc0000 [ 300.524121][ T30] audit: type=1326 audit(1784515032.834:1704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8338 comm="syz.0.692" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7832d9de99 code=0x7ffc0000 [ 300.553326][ T30] audit: type=1326 audit(1784515032.834:1705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8338 comm="syz.0.692" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7832d9de99 code=0x7ffc0000 [ 300.582206][ T30] audit: type=1326 audit(1784515032.834:1706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8338 comm="syz.0.692" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7832d9de99 code=0x7ffc0000 [ 301.131907][ T5723] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 301.299015][ T5723] usb 4-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 301.330784][ T5723] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 301.381155][ T5723] usb 4-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 301.393867][ T5723] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.403492][ T5723] usb 4-1: Product: syz [ 301.409313][ T5723] usb 4-1: Manufacturer: syz [ 301.416457][ T5723] usb 4-1: SerialNumber: syz [ 301.432888][ T5723] usb 4-1: config 0 descriptor?? [ 301.445469][ T5723] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 304.021733][ T5725] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 304.182554][ T5725] usb 9-1: Using ep0 maxpacket: 16 [ 304.195919][ T5725] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 304.209754][ T5725] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 304.227662][ T5725] usb 9-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 304.258645][ T5725] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 304.271608][ T5725] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.279737][ T5725] usb 9-1: Product: ࠊ [ 304.286842][ T5725] usb 9-1: Manufacturer: ᐉ [ 304.292096][ T5725] usb 9-1: SerialNumber: а [ 304.406302][ T8356] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 304.433266][ T8356] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 304.521034][ T5725] cdc_ncm 9-1:1.0: skipping garbage [ 304.534509][ T5725] cdc_ncm 9-1:1.0: CDC Union missing and no IAD found [ 304.557441][ T5725] cdc_ncm 9-1:1.0: bind() failure [ 304.584930][ T5724] usb 4-1: USB disconnect, device number 18 [ 304.613892][ T5725] usb 9-1: USB disconnect, device number 15 [ 304.698808][ T8356] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 304.722503][ T8356] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 304.907092][ T8360] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 305.622483][ T5724] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 305.813251][ T5724] usb 9-1: Using ep0 maxpacket: 16 [ 305.843220][ T5724] usb 9-1: config 0 has an invalid interface number: 41 but max is 0 [ 305.871093][ T5724] usb 9-1: config 0 has no interface number 0 [ 305.902086][ T5724] usb 9-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 305.947969][ T5724] usb 9-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 305.968668][ T5724] usb 9-1: config 0 interface 41 has no altsetting 0 [ 305.983984][ T5724] usb 9-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 305.994883][ T5724] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.018423][ T5724] usb 9-1: Product: syz [ 306.035671][ T5724] usb 9-1: Manufacturer: syz [ 306.058976][ T5724] usb 9-1: SerialNumber: syz [ 306.097761][ T5724] usb 9-1: config 0 descriptor?? [ 306.123069][ T8364] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 306.143227][ T8364] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 306.448171][ T5724] sr9700 9-1:0.41: probe with driver sr9700 failed with error -71 [ 306.512212][ T5724] usb 9-1: USB disconnect, device number 16 [ 307.073494][ T4941] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 307.086985][ T4941] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 307.097821][ T4941] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 307.113233][ T4941] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 307.122923][ T4941] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 308.165661][ T30] kauditd_printk_skb: 32 callbacks suppressed [ 308.165681][ T30] audit: type=1326 audit(1784515040.754:1739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8387 comm="syz.3.705" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fad33b9de99 code=0x0 [ 308.541971][ T5724] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 308.715063][ T5724] usb 4-1: unable to get BOS descriptor or descriptor too short [ 308.747749][ T5724] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 308.779474][ T5724] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 308.819717][ T5724] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 308.887973][ T5724] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 308.977492][ T5724] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 309.008701][ T5724] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.027104][ T5724] usb 4-1: Product: syz [ 309.035192][ T5724] usb 4-1: Manufacturer: syz [ 309.039856][ T5724] usb 4-1: SerialNumber: syz [ 309.172646][ T4941] Bluetooth: hci5: command tx timeout [ 309.495464][ T8333] sound midiC3D0: rawmidi drain error (avail = 3968, buffer_size = 4096) [ 309.680422][ T8383] bridge0: port 1(bridge_slave_0) entered blocking state [ 309.722144][ T8383] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.762663][ T8383] bridge_slave_0: entered allmulticast mode [ 309.774015][ T8383] bridge_slave_0: entered promiscuous mode [ 309.786033][ T8383] bridge0: port 2(bridge_slave_1) entered blocking state [ 309.797981][ T8383] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.806089][ T8383] bridge_slave_1: entered allmulticast mode [ 309.823288][ T8383] bridge_slave_1: entered promiscuous mode [ 309.994208][ T8383] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 310.009741][ T8383] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 310.132823][ T31] INFO: task syz.5.215:6710 blocked for more than 143 seconds. [ 310.142401][ T31] Tainted: G L syzkaller #0 [ 310.149022][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 310.159027][ T31] task:syz.5.215 state:D stack:27992 pid:6710 tgid:6706 ppid:6295 task_flags:0x440040 flags:0x00080002 [ 310.171686][ T31] Call Trace: [ 310.176399][ T31] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 310.179438][ T31] __schedule+0x17d9/0x56c0 [ 310.184355][ T31] ? __pfx___schedule+0x10/0x10 [ 310.206994][ T31] ? schedule+0x90/0x2b0 [ 310.224239][ T31] schedule+0x164/0x2b0 [ 310.236160][ T31] schedule_preempt_disabled+0x13/0x30 [ 310.265219][ T31] rwsem_down_read_slowpath+0x6ba/0x920 [ 310.290930][ T31] ? rwsem_down_read_slowpath+0x57f/0x920 [ 310.345198][ T31] ? __pfx_rwsem_down_read_slowpath+0x10/0x10 [ 310.368814][ T8383] team0: Port device team_slave_0 added [ 310.386488][ T8383] team0: Port device team_slave_1 added [ 310.444759][ T31] ? page_cache_ra_order+0x3eb/0xee0 [ 310.488927][ T31] down_read+0x9c/0x330 [ 310.517298][ T31] page_cache_ra_order+0x3eb/0xee0 [ 310.597081][ T31] filemap_get_pages+0x4a9/0x1ec0 [ 310.617005][ T31] ? kernel_text_address+0xa5/0xe0 [ 310.622391][ T31] ? __kernel_text_address+0xd/0x30 [ 310.627851][ T31] ? arch_stack_walk+0xfb/0x150 [ 310.633843][ T31] ? __pfx_filemap_get_pages+0x10/0x10 [ 310.639860][ T31] ? stack_depot_save_flags+0x33/0x800 [ 310.653932][ T31] filemap_splice_read+0x61b/0xd60 [ 310.734572][ T31] ? __pfx_filemap_splice_read+0x10/0x10 [ 310.798836][ T31] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 310.855230][ T31] ? alloc_pipe_info+0x35d/0x4c0 [ 310.892019][ T31] ? __pfx_filemap_splice_read+0x10/0x10 [ 310.912004][ T31] splice_direct_to_actor+0x48b/0xcb0 [ 310.917574][ T31] ? __pfx_direct_splice_actor+0x10/0x10 [ 310.925974][ T31] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 310.932970][ T31] do_splice_direct+0x195/0x290 [ 310.941280][ T31] ? __pfx_do_splice_direct+0x10/0x10 [ 310.947353][ T31] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 310.953434][ T31] ? bpf_lsm_file_permission+0x9/0x20 [ 310.959479][ T31] ? security_file_permission+0x75/0x260 [ 310.965370][ T31] ? rw_verify_area+0x203/0x4c0 [ 310.970389][ T31] do_sendfile+0x52e/0x7c0 [ 310.977251][ T31] ? __pfx_do_sendfile+0x10/0x10 [ 310.986705][ T31] ? __se_sys_futex+0x3a8/0x450 [ 310.992488][ T31] __se_sys_sendfile64+0x144/0x1a0 [ 310.997706][ T31] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 311.005816][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.033519][ T31] do_syscall_64+0x174/0x580 [ 311.058655][ T31] ? trace_irq_disable+0x3b/0x140 [ 311.076264][ T31] ? clear_bhb_loop+0x40/0x90 [ 311.096189][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.121351][ T31] RIP: 0033:0x7f585819de99 [ 311.140382][ T31] RSP: 002b:00007f585904c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 311.171228][ T31] RAX: ffffffffffffffda RBX: 00007f5858426090 RCX: 00007f585819de99 [ 311.192404][ T31] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000007 [ 311.216940][ T31] RBP: 00007f5858233eaf R08: 0000000000000000 R09: 0000000000000000 [ 311.240497][ T31] R10: 0000000000200000 R11: 0000000000000246 R12: 0000000000000000 [ 311.252842][ T4941] Bluetooth: hci5: command tx timeout [ 311.276168][ T31] R13: 00007f5858426128 R14: 00007f5858426090 R15: 00007f585854fa48 [ 311.314144][ T31] [ 311.331225][ T31] [ 311.331225][ T31] Showing all locks held in the system: [ 311.485673][ T31] 1 lock held by khungtaskd/31: [ 311.526121][ T31] #0: ffffffff8eb59c60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 311.585948][ T31] 2 locks held by getty/5378: [ 311.591578][ T31] #0: ffff888036c4f0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 311.615772][ T31] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 311.632650][ T31] 3 locks held by kworker/1:4/5627: [ 311.637966][ T31] #0: ffff88801b02b140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 311.649223][ T31] #1: ffffc90004787c40 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 311.666815][ T31] #2: ffffffff8eb5ff68 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 311.685647][ T31] 4 locks held by kworker/0:7/5724: [ 311.690928][ T31] #0: ffff888020ada540 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 311.702976][ T31] #1: ffffc9000546fc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 311.716918][ T31] #2: ffff88802a5191d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4d30 [ 311.725973][ T31] #3: ffff8880207f71d8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 311.738297][ T31] 3 locks held by kworker/1:6/5743: [ 311.750653][ T31] 2 locks held by kworker/u8:14/5791: [ 311.807372][ T31] #0: ffff88801e795140 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 311.906820][ T31] #1: ffffc90005c4fc40 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 311.942437][ T31] 3 locks held by kworker/u8:42/5825: [ 311.947937][ T31] #0: ffff88801b06c140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 311.959803][ T31] #1: ffffc90005effc40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 312.005717][ T31] #2: ffffffff9002cf40 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 312.035031][ T31] 4 locks held by kworker/u8:43/5826: [ 312.056783][ T31] 3 locks held by kworker/u8:45/5828: [ 312.114991][ T31] #0: ffff8880b863b160 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xb2/0x160 [ 312.184878][ T31] #1: ffffc90005f3fc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 312.213342][ T31] #2: ffff8880b8726058 (&base->lock){-.-.}-{2:2}, at: __mod_timer+0x1a9/0xed0 [ 312.224160][ T31] 5 locks held by kworker/u8:48/5831: [ 312.229643][ T31] 2 locks held by syz.2.173/6514: [ 312.235156][ T31] 4 locks held by udevd/6618: [ 312.239970][ T31] #0: ffff8880773c8998 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xa4/0xca0 [ 312.262586][ T31] #1: ffff888068045880 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x5d/0x420 [ 312.333444][ T31] #2: ffff88804b1f4788 (kn->active#31){++++}-{0:0}, at: kernfs_seq_start+0xb2/0x420 [ 312.363719][ T31] #3: ffff8880207f71d8 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 312.374637][ T31] 1 lock held by syz.5.215/6710: [ 312.379828][ T31] #0: ffff888027a69500 (mapping.invalidate_lock){++++}-{4:4}, at: page_cache_ra_order+0x3eb/0xee0 [ 312.390886][ T31] 1 lock held by syz.7.448/7536: [ 312.396086][ T31] #0: ffff888027a69500 (mapping.invalidate_lock){++++}-{4:4}, at: page_cache_ra_order+0x3eb/0xee0 [ 312.407212][ T31] 1 lock held by syz.7.448/7537: [ 312.412362][ T31] #0: ffff888027a69500 (mapping.invalidate_lock){++++}-{4:4}, at: page_cache_ra_order+0x3eb/0xee0 [ 312.437116][ T31] 1 lock held by syz-executor/7727: [ 312.443805][ T31] 1 lock held by syz.6.601/8028: [ 312.449204][ T31] #0: ffff888027a69500 (mapping.invalidate_lock){++++}-{4:4}, at: page_cache_ra_order+0x3eb/0xee0 [ 312.460748][ T31] 1 lock held by syz.4.673/8278: [ 312.466112][ T31] #0: ffff888027a69500 (mapping.invalidate_lock){++++}-{4:4}, at: page_cache_ra_order+0x3eb/0xee0 [ 312.480764][ T31] 1 lock held by syz.3.705/8391: [ 312.494981][ T31] [ 312.502526][ T31] ============================================= [ 312.502526][ T31] [ 312.587950][ T31] NMI backtrace for cpu 1 [ 312.587978][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 312.588008][ T31] Tainted: [L]=SOFTLOCKUP [ 312.588015][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 312.588028][ T31] Call Trace: [ 312.588036][ T31] [ 312.588046][ T31] dump_stack_lvl+0xe8/0x150 [ 312.588083][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 312.588123][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 312.588158][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x380 [ 312.588191][ T31] sys_info+0x135/0x170 [ 312.588217][ T31] watchdog+0xfd7/0x1030 [ 312.588253][ T31] ? watchdog+0x1c7/0x1030 [ 312.588292][ T31] kthread+0x388/0x470 [ 312.588330][ T31] ? __pfx_watchdog+0x10/0x10 [ 312.588354][ T31] ? __pfx_kthread+0x10/0x10 [ 312.588386][ T31] ret_from_fork+0x514/0xb70 [ 312.588421][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 312.588458][ T31] ? __switch_to+0xc89/0x1420 [ 312.588487][ T31] ? __pfx_kthread+0x10/0x10 [ 312.588519][ T31] ret_from_fork_asm+0x1a/0x30 [ 312.588556][ T31] [ 312.588565][ T31] Sending NMI from CPU 1 to CPUs 0: [ 312.718080][ C0] NMI backtrace for cpu 0 [ 312.718101][ C0] CPU: 0 UID: 0 PID: 8383 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 312.718127][ C0] Tainted: [L]=SOFTLOCKUP [ 312.718135][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 312.718147][ C0] RIP: 0010:check_preemption_disabled+0x1/0xe0 [ 312.718178][ C0] Code: 20 da 4b 8c 48 c7 c6 60 da 4b 8c eb 1c 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 55 <41> 57 41 56 53 65 8b 05 f7 dd 9c 07 65 8b 0d ec dd 9c 07 f7 c1 ff [ 312.718195][ C0] RSP: 0018:ffffc900039774f0 EFLAGS: 00000282 [ 312.718212][ C0] RAX: 0000000000000001 RBX: ffffc900039775d8 RCX: ffff888031d5dd00 [ 312.718225][ C0] RDX: ffffc90003977601 RSI: ffffffff8c4bda60 RDI: ffffffff8c4bda20 [ 312.718239][ C0] RBP: 1ffffffff21f7501 R08: ffffc90003977968 R09: 0000000000000000 [ 312.718253][ C0] R10: ffffc90003977618 R11: fffff5200072eec5 R12: ffffc90003970000 [ 312.718266][ C0] R13: ffffffff8176f27f R14: ffffc900039775c8 R15: ffffc90003977978 [ 312.718280][ C0] FS: 0000000000000000(0000) GS:ffff888124f54000(0000) knlGS:0000000000000000 [ 312.718296][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 312.718308][ C0] CR2: 000020000022f030 CR3: 000000000e946000 CR4: 00000000003526f0 [ 312.718325][ C0] Call Trace: [ 312.718331][ C0] [ 312.718339][ C0] rcu_is_watching+0x15/0xb0 [ 312.718368][ C0] unwind_next_frame+0x1b66/0x2550 [ 312.718391][ C0] ? free_pages_bulk+0x48/0x120 [ 312.718416][ C0] ? unwind_next_frame+0x8f/0x2550 [ 312.718435][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 312.718463][ C0] arch_stack_walk+0x11b/0x150 [ 312.718484][ C0] ? vfree+0x224/0x4a0 [ 312.718505][ C0] stack_trace_save+0xa9/0x100 [ 312.718526][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 312.718549][ C0] ? stack_depot_save_flags+0x33/0x800 [ 312.718574][ C0] save_stack+0x122/0x230 [ 312.718598][ C0] ? __pfx_save_stack+0x10/0x10 [ 312.718620][ C0] ? page_ext_get+0x22/0x2e0 [ 312.718646][ C0] ? free_pages_prepare+0x960/0xa60 [ 312.718670][ C0] ? __free_contig_range_common+0x174/0x340 [ 312.718699][ C0] ? free_pages_bulk+0x48/0x120 [ 312.718729][ C0] ? page_ext_put+0x97/0xc0 [ 312.718754][ C0] __reset_page_owner+0x71/0x1f0 [ 312.718779][ C0] free_pages_prepare+0x960/0xa60 [ 312.718802][ C0] __free_contig_range_common+0x174/0x340 [ 312.718834][ C0] free_pages_bulk+0x48/0x120 [ 312.718860][ C0] vfree+0x224/0x4a0 [ 312.718880][ C0] ? __pfx_kcov_close+0x10/0x10 [ 312.718901][ C0] kcov_close+0x28/0x50 [ 312.718921][ C0] __fput+0x418/0xa50 [ 312.718948][ C0] task_work_run+0x1d9/0x270 [ 312.718978][ C0] ? __pfx_task_work_run+0x10/0x10 [ 312.719005][ C0] ? do_exit+0x735/0x2360 [ 312.719029][ C0] ? kmem_cache_free+0x182/0x650 [ 312.719053][ C0] ? put_net+0x191/0x260 [ 312.719075][ C0] do_exit+0x73a/0x2360 [ 312.719104][ C0] ? netlink_sendmsg+0x84e/0xb40 [ 312.719123][ C0] ? __pfx_do_exit+0x10/0x10 [ 312.719152][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 312.719177][ C0] do_group_exit+0x22d/0x2f0 [ 312.719203][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 312.719232][ C0] get_signal+0x121b/0x12c0 [ 312.719263][ C0] arch_do_signal_or_restart+0xbb/0x860 [ 312.719288][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 312.719323][ C0] exit_to_user_mode_loop+0x104/0x730 [ 312.719346][ C0] ? rcu_is_watching+0x15/0xb0 [ 312.719374][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.719394][ C0] do_syscall_64+0x353/0x580 [ 312.719413][ C0] ? clear_bhb_loop+0x40/0x90 [ 312.719433][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.719452][ C0] RIP: 0033:0x7f967355e6ce [ 312.719467][ C0] Code: Unable to access opcode bytes at 0x7f967355e6a4. [ 312.719476][ C0] RSP: 002b:00007f967394f638 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 312.719494][ C0] RAX: 000000000000008c RBX: 000055557eddc500 RCX: 00007f967355e6ce [ 312.719508][ C0] RDX: 000000000000008c RSI: 00007f9674354670 RDI: 0000000000000003 [ 312.719520][ C0] RBP: 0000000000000001 R08: 00007f967394f6b4 R09: 000000000000000c [ 312.719531][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 312.719543][ C0] R13: 0000000000000000 R14: 00007f9674354670 R15: 0000000000000000 [ 312.719564][ C0] [ 313.373455][ T4941] Bluetooth: hci5: command tx timeout [ 313.379968][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 313.386874][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 313.397589][ T31] Tainted: [L]=SOFTLOCKUP [ 313.401938][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 313.412029][ T31] Call Trace: [ 313.415428][ T31] [ 313.418390][ T31] vpanic+0x56c/0xa60 [ 313.422421][ T31] ? __pfx___schedule+0x10/0x10 [ 313.427759][ T31] ? __pfx_vpanic+0x10/0x10 [ 313.432335][ T31] ? nmi_trigger_cpumask_backtrace+0x207/0x380 [ 313.438734][ T31] panic+0xc5/0xd0 [ 313.442508][ T31] ? __pfx_panic+0x10/0x10 [ 313.446971][ T31] ? preempt_schedule_common+0x82/0xd0 [ 313.452648][ T31] ? preempt_schedule_thunk+0x16/0x40 [ 313.458060][ T31] ? nmi_trigger_cpumask_backtrace+0x314/0x380 [ 313.464281][ T31] ? nmi_trigger_cpumask_backtrace+0x319/0x380 [ 313.470482][ T31] watchdog+0x1030/0x1030 [ 313.474859][ T31] ? watchdog+0x1c7/0x1030 [ 313.479308][ T31] kthread+0x388/0x470 [ 313.483425][ T31] ? __pfx_watchdog+0x10/0x10 [ 313.488150][ T31] ? __pfx_kthread+0x10/0x10 [ 313.492776][ T31] ret_from_fork+0x514/0xb70 [ 313.497428][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 313.502580][ T31] ? __switch_to+0xc89/0x1420 [ 313.507738][ T31] ? __pfx_kthread+0x10/0x10 [ 313.512378][ T31] ret_from_fork_asm+0x1a/0x30 [ 313.517282][ T31] [ 313.520515][ T31] Kernel Offset: disabled [ 313.524866][ T31] Rebooting in 86400 seconds..