last executing test programs: 6m15.702693294s ago: executing program 2 (id=273): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 6m14.237674902s ago: executing program 2 (id=275): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020000000000000", @ANYRES32, @ANYBLOB="feffffff00000000000000000000000000020000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="0000000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000820000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fcntl$addseals(r1, 0x409, 0x2) (async, rerun: 32) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="240000000f06010300000000ba0000000500000006000b0000000000050001"], 0x24}, 0x1, 0x0, 0x0, 0x24048815}, 0x40000000) (rerun: 32) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1d0000007294e9b6f34b6698487b18e9191879f63a3c61184567a6f2113ac4dcfc4bdecb5c2c8e8c73e0f1e8959dfd6366add169391a6c639cfd1435d0a0574405b41aea770e3f43c582", @ANYRES16=r5, @ANYRES64=r3], 0x38}, 0x1, 0x0, 0x0, 0x14}, 0x400) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000780)={0x1, &(0x7f0000000440)=[{0x16, 0x0, 0x8, 0x10001}]}) (async) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @random="ec1a00abb30b"}) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r6) socket(0x400000000010, 0x3, 0x0) (async) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) r7 = landlock_create_ruleset(&(0x7f0000000140)={0x2000}, 0x10, 0x0) landlock_restrict_self(r7, 0x0) (async) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r9 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) (async, rerun: 32) ioctl$VHOST_SET_FEATURES(r8, 0x4008af00, &(0x7f0000000000)=0x8000000) (rerun: 32) write$vhost_msg(r9, &(0x7f0000000540)={0x1, {&(0x7f0000000040)=""/62, 0x3e, 0x0, 0x2, 0x2}}, 0x48) (async) write$vhost_msg_v2(r9, &(0x7f0000000400)={0x2, 0x0, {&(0x7f0000000080)=""/169, 0xa9, 0x0, 0x2, 0x2}}, 0x48) (async) write$vhost_msg_v2(r9, &(0x7f00000005c0)={0x2, 0x0, {&(0x7f0000000340)=""/77, 0x4d, 0x0, 0x3, 0x2}}, 0x48) write$vhost_msg_v2(r9, &(0x7f00000039c0)={0x2, 0x0, {&(0x7f0000000680)=""/184, 0xfffffefd, 0x0, 0x3, 0x2}}, 0x48) (async) write$vhost_msg_v2(r9, &(0x7f0000000180)={0x2, 0x0, {&(0x7f0000000e40)=""/187, 0xbb, 0x0, 0x2, 0x3}}, 0x48) (async, rerun: 64) move_mount(0xffffffffffffff9c, 0x0, r8, 0x0, 0x64) (async, rerun: 64) syz_usb_connect(0x2, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100003d3ef720233801006aa80102030109021b0001ff00100009045b0001fbc42f0009058208"], 0x0) 6m13.078409944s ago: executing program 2 (id=280): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)=ANY=[@ANYBLOB="640000001900010000000000000000001d01090050000f80490700000000000000c18424783f3bb6a3d7a36227948e622b761acd509d61b4512bb4e36cdf07c9bc8e0d78b418a01238b454c5a4b856dfec1aae4c0b07fbb38f8040d0fa916a0826"], 0x64}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0x7c}}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x13, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000061187e000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x40}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050027bd7000000000000600000008000300", @ANYRES32=r3, @ANYRESDEC=r2], 0x24}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) sendmsg$inet(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000b80)='n', 0x1}], 0x1}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x9, 0x7a8, 0x6}, 0x14) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "db57cda808852139", "252432e72844858a068b92a5a810f4dc", "11802ff5", "5aee41448c84afb7"}, 0x28) ppoll(&(0x7f0000000100)=[{r4, 0x31}], 0x1, 0x0, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="580000000206010800000000000000000000000014000780050014007f00000005001500030000000500010006040000050005000a00000005000400000000000900020073797a31000000000c000300686173683a6970"], 0x58}, 0x1, 0x0, 0x0, 0x40004}, 0x20000000) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x40000, &(0x7f0000000140)={0xa, 0xfffc, 0xfffffff3, @private0}, 0x1c) socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) r6 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r6, &(0x7f0000000400)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x0, 0x2}}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) 6m10.617722729s ago: executing program 2 (id=288): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) ioctl$SNDCTL_FM_4OP_ENABLE(0xffffffffffffffff, 0x4004510f, &(0x7f0000000300)=0xa22) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) recvmmsg(r0, &(0x7f0000006600)=[{{&(0x7f0000000580)=@caif, 0x80, &(0x7f0000000940)=[{&(0x7f00000001c0)=""/32, 0x20}, {&(0x7f0000000280)=""/42, 0x2a}, {&(0x7f0000000600)=""/227, 0xe3}, {&(0x7f0000000700)=""/168, 0xa8}, {&(0x7f00000007c0)=""/162, 0xa2}, {&(0x7f0000000880)=""/148, 0x94}], 0x6, &(0x7f00000009c0)=""/126, 0x7e}, 0x648}, {{&(0x7f0000000a40)=@caif=@dbg, 0x80, &(0x7f0000002dc0)=[{&(0x7f0000000ac0)=""/188, 0xbc}, {&(0x7f0000000b80)=""/4096, 0x1000}, {&(0x7f0000001b80)=""/95, 0x5f}, {&(0x7f0000000500)=""/6, 0x6}, {&(0x7f0000001c00)}, {&(0x7f0000002a80)=""/147, 0x93}, {&(0x7f0000002b40)=""/194, 0xc2}, {&(0x7f0000002c40)=""/167, 0xa7}, {&(0x7f0000002d00)=""/142, 0x8e}], 0x9, &(0x7f0000002e80)=""/18, 0x12}, 0x9}, {{&(0x7f0000002ec0)=@rc={0x1f, @none}, 0x80, &(0x7f0000003140)=[{&(0x7f0000002f40)=""/35, 0x23}, {&(0x7f0000002f80)=""/123, 0x7b}, {&(0x7f0000003000)=""/189, 0xbd}, {&(0x7f00000030c0)=""/107, 0x6b}], 0x4, &(0x7f0000003180)=""/58, 0x3a}, 0x80}, {{&(0x7f00000031c0)=@can, 0x80, &(0x7f0000003880)=[{&(0x7f0000003240)=""/212, 0xd4}, {&(0x7f0000003340)=""/169, 0xa9}, {&(0x7f0000003400)=""/170, 0xaa}, {&(0x7f00000034c0)=""/110, 0x6e}, {&(0x7f0000003540)=""/59, 0x3b}, {&(0x7f0000003580)=""/231, 0xe7}, {&(0x7f0000003680)=""/63, 0x3f}, {&(0x7f00000036c0)=""/223, 0xdf}, {&(0x7f00000037c0)=""/175, 0xaf}], 0x9, &(0x7f0000003940)=""/254, 0xfe}, 0x5}, {{&(0x7f0000003a40)=@sco={0x1f, @none}, 0x80, &(0x7f0000003d80)=[{&(0x7f0000003ac0)=""/73, 0x49}, {&(0x7f0000003b40)=""/8, 0x8}, {&(0x7f0000003b80)=""/79, 0x4f}, {&(0x7f0000003c00)=""/105, 0x69}, {&(0x7f0000003c80)=""/144, 0x90}, {&(0x7f0000003d40)=""/63, 0x3f}], 0x6}, 0x770}, {{&(0x7f0000003e00)=@tipc=@id, 0x80, &(0x7f0000004080)=[{&(0x7f0000003e80)=""/197, 0xc5}, {&(0x7f0000003f80)=""/119, 0x77}, {&(0x7f0000004000)=""/126, 0x7e}], 0x3}, 0x23}, {{0x0, 0x0, &(0x7f00000053c0)=[{&(0x7f00000040c0)=""/22, 0x16}, {&(0x7f0000004100)=""/146, 0x92}, {&(0x7f00000041c0)=""/231, 0xe7}, {&(0x7f00000042c0)}, {&(0x7f0000004300)=""/94, 0x5e}, {&(0x7f0000004380)=""/39, 0x27}, {&(0x7f00000043c0)=""/4096, 0x1000}], 0x7, &(0x7f0000005440)=""/64, 0x40}, 0x6}, {{&(0x7f0000005480)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f00000065c0)=[{&(0x7f0000005500)=""/24, 0x18}, {&(0x7f0000005540)=""/78, 0x4e}, {&(0x7f0000006840)=""/4096, 0x1000}], 0x3}, 0x40}], 0x8, 0x1, &(0x7f0000006800)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$nl_route(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)=ANY=[], 0xfffffe2b}}, 0x2200c840) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x3b, 0x2, [{0xfe}, {0xfbfffffa, 0x9}]}}) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x6000003, 0x42031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000d07000/0x3000)=nil, 0x3000, 0x300000c, 0x7f, 0x1) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x5, &(0x7f0000000400)=ANY=[@ANYRES32=r4], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r10 = syz_open_dev$tty1(0xc, 0x4, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) process_mrelease(0xffffffffffffffff, 0x0) dup(r10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r9}, 0x10) io_uring_setup(0x7bda, &(0x7f0000000080)={0x0, 0x6cdf, 0x2, 0x3, 0x5}) mremap(&(0x7f0000000000/0x9000)=nil, 0x600000, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) 6m9.138360493s ago: executing program 2 (id=291): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mprotect(&(0x7f00000ad000/0x1000)=nil, 0x1000, 0x1) ioctl$FBIOPUT_CON2FBMAP(r0, 0x4610, &(0x7f0000000040)={0x29, 0xffffffff}) r1 = socket$inet6(0xa, 0x1, 0xfffffffe) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x19) ioctl$TIOCVHANGUP(r2, 0x5437, 0x2) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040)=0x10) mkdir(&(0x7f00000000c0)='./control\x00', 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) readlink(&(0x7f0000000100)='./control\x00', &(0x7f0000002240)=""/249, 0xf9) getsockopt$IP_VS_SO_GET_DAEMON(r4, 0x0, 0x30, 0x0, &(0x7f0000000200)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) unshare(0x4c040200) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000000200)={0x2020}, 0x2020) ioctl$IMDELTIMER(r5, 0x80044941, &(0x7f0000000080)=0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x442c3, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r6, 0x4b67, &(0x7f0000000000)) bind$inet6(r1, 0x0, 0x0) 6m3.414439059s ago: executing program 2 (id=300): r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000001c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x4, 0x1}, 0x80, 0x0, 0x0, &(0x7f00000006c0)=[{0x28, 0x29, 0x2, "e1f40b9430cefd6ed13a800c2a01cb97e4"}], 0x28}}], 0x1, 0x0) r1 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r1, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @mcast2, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}, {{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0801", @ANYRES64=r1], 0x108}}], 0x2, 0xc040) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)={0x14, 0x0, 0xb, 0x801, 0x0, 0x0, {0xa}}, 0x14}}, 0x800) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x14, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x14, 0x18, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x8}}], {0x14}}, 0xa0}}, 0x0) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000180), 0x40001, 0x0) mount_setattr(r2, &(0x7f0000000100)='./file0\x00', 0x1100, &(0x7f0000000140)={0x1000f6, 0x10007b, 0xc0000, {r4}}, 0x20) socket$inet6(0xa, 0x3, 0x5) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000001c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) (async) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) (async) sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x4, 0x1}, 0x80, 0x0, 0x0, &(0x7f00000006c0)=[{0x28, 0x29, 0x2, "e1f40b9430cefd6ed13a800c2a01cb97e4"}], 0x28}}], 0x1, 0x0) (async) socket$inet6(0xa, 0x3, 0x5) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) (async) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) (async) sendmmsg(r1, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @mcast2, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}, {{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0801", @ANYRES64=r1], 0x108}}], 0x2, 0xc040) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFNL_MSG_COMPAT_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)={0x14, 0x0, 0xb, 0x801, 0x0, 0x0, {0xa}}, 0x14}}, 0x800) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x14, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x14, 0x18, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x8}}], {0x14}}, 0xa0}}, 0x0) (async) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000180), 0x40001, 0x0) (async) mount_setattr(r2, &(0x7f0000000100)='./file0\x00', 0x1100, &(0x7f0000000140)={0x1000f6, 0x10007b, 0xc0000, {r4}}, 0x20) (async) 5m47.805077706s ago: executing program 32 (id=300): r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000001c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x4, 0x1}, 0x80, 0x0, 0x0, &(0x7f00000006c0)=[{0x28, 0x29, 0x2, "e1f40b9430cefd6ed13a800c2a01cb97e4"}], 0x28}}], 0x1, 0x0) r1 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r1, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @mcast2, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}, {{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0801", @ANYRES64=r1], 0x108}}], 0x2, 0xc040) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)={0x14, 0x0, 0xb, 0x801, 0x0, 0x0, {0xa}}, 0x14}}, 0x800) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x14, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x14, 0x18, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x8}}], {0x14}}, 0xa0}}, 0x0) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000180), 0x40001, 0x0) mount_setattr(r2, &(0x7f0000000100)='./file0\x00', 0x1100, &(0x7f0000000140)={0x1000f6, 0x10007b, 0xc0000, {r4}}, 0x20) socket$inet6(0xa, 0x3, 0x5) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000001c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) (async) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) (async) sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x4, 0x1}, 0x80, 0x0, 0x0, &(0x7f00000006c0)=[{0x28, 0x29, 0x2, "e1f40b9430cefd6ed13a800c2a01cb97e4"}], 0x28}}], 0x1, 0x0) (async) socket$inet6(0xa, 0x3, 0x5) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) (async) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) (async) sendmmsg(r1, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @mcast2, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}, {{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0801", @ANYRES64=r1], 0x108}}], 0x2, 0xc040) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFNL_MSG_COMPAT_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)={0x14, 0x0, 0xb, 0x801, 0x0, 0x0, {0xa}}, 0x14}}, 0x800) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x14, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x14, 0x18, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x8}}], {0x14}}, 0xa0}}, 0x0) (async) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000180), 0x40001, 0x0) (async) mount_setattr(r2, &(0x7f0000000100)='./file0\x00', 0x1100, &(0x7f0000000140)={0x1000f6, 0x10007b, 0xc0000, {r4}}, 0x20) (async) 1m57.806381034s ago: executing program 0 (id=822): r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300)='devpts\x00', 0x2, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$tmpfs(0x0, &(0x7f0000000200)='./file0/../file0/file0\x00', &(0x7f0000000440), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) mount$bind(&(0x7f00000003c0)='./file0/file0\x00', &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x1005407, 0x0) mount$fuse(0x0, &(0x7f00000005c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file0/../file0/file0\x00', 0x107) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r1}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="02000000040000000800000001000000800000000ac09bf3b0623a5436b10fd77ecaa8dffe9d760728ef88c183a2b975ef838c81fa653845bffaa0ff5087a18f83d196f8c2976a6e4ce720c35faa472a889be890f69fa86bc939bf8a0598df05ec2646362469707e436a2625be59f1d4bd3f7fc3d2e8ed6617b44ee88d22e152fe8a7ae90d180178de3df2d0e71070", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=r1, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT_BATCH(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000030301030000000000000000050000abcb219a6f00ff57466b81cd366553bc3d4cdcfc727baadcc533f18ee58efd0df0ddf07a38fc5f55758cdb6372997b3301234f8fb7e56b7f22"], 0x14}, 0x1, 0x0, 0x0, 0x20004000}, 0x4) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) read$FUSE(r4, &(0x7f0000002980)={0x2020}, 0x2020) poll(&(0x7f0000000280), 0x0, 0x40) write$FUSE_NOTIFY_RESEND(r4, &(0x7f0000002940)={0x14}, 0x14) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000480), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f00000002c0)={0x8, 0x7, 0x9}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000080)={0x2, 0x5, 0x3}) r7 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r8 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r8, 0xc02064b2, &(0x7f0000000340)={0x8, 0x8169, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1000, 0xb}) 1m57.370615394s ago: executing program 0 (id=823): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x103201, 0x0) write$P9_RSTATu(r1, &(0x7f0000000080)={0x265, 0x2, 0xafd, {{0x54f, 0x124, 0x28, 0x1f00, {}, 0x0, 0x0, 0xc, 0x401, 0xffffffffffffff7d, '\nnodev{evo\x03\xd3\x8b\x92\x00\x00\x03\x00'/27, 0x28, 'pg>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18x\x99\xa9\x16c\x88\x14\xe5p\x81\x03\xb4\x94\xe1\x00\x00\x00\x00\x00\x00\x00\x00', 0x2, '\b\x00', 0xac, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4@\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xe2\x89\xdad\x9a7\x009\x86Ac\x1dD\xf4\xa3\x9b\x11\x91\x93z(\x0e\x8d\x88\x9f\xc2 \xd1\x15\xac\x8e/\x18K\x9aau\x8d&w*\xb0\xf2\x04M\x8e\xf0&=\xdd\x97\xd3\xc4\'\xb3\xa52\xef\xab\x1d\x1c\xe3,\xa7\xc1\xfc#\x1a\xf4\x84\b\xe0+%P(\xb7\xc9\xbb\x859oM\x8a\xf0\xeb\x95\xfc\x0e\xcc\x99\xf7\x80\xe2'}, 0x12c, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0xfd85) 1m56.38666655s ago: executing program 0 (id=825): r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDGETLED(r0, 0x4b31, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000d1000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b400000095"], &(0x7f0000000300)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe}, 0x94) 1m56.119968341s ago: executing program 0 (id=826): pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x801c0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0x7, 0x4d, 0x1}, 0x7) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x6b2080, 0x0) sendmsg$TIPC_NL_MON_SET(r2, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000100)={0x2a4, 0x0, 0x0, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffffff97}]}, @TIPC_NLA_LINK={0x30, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_MEDIA={0x10, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}]}, @TIPC_NLA_NODE={0xa4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "3a4182a4d51832a103cf054974dd3e937255b5d800c0d388f4522e038fe15927b080b747"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x5}, @TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "c161a6f5dd732d64cecc35ec9c1d25787ad805dc454350bb711f"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_SOCK={0x70, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10000}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x101}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}]}, @TIPC_NLA_NODE={0x10c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xf9, 0x3, "75281c464c778b2a7283268b9e143f9d3ecad0044a59367f7e27201b48e1e420a57387fa1275e751f53994e752c9d78ac338e0fbc2267dbb2dbcb146927c3a129c2b676a115205d53561f7ac67ec7b47322445db2db8db8a4acc190a416ce98c744476dba612e2304a20c1001ac9eb5d6e36fa9aebbe56c4136b30f2cd98e6fe278787e3868917483da4aca034a5be76589645b40e3ecf22e08cf73e8a19f5a050be65332ab40a9043bdad453ce4b1ebe512786117ec560da8d6d8effbad594cf6619225478be84cab0991a65937881782dd5091d4c3f04fa35391522b08d05a517f60568d125b787de8909c9014e90d266dfe8739"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x2a4}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r3 = semget(0x2, 0x3, 0x4a) semctl$SEM_INFO(r3, 0x0, 0x13, &(0x7f0000000440)=""/253) unshare(0x40000000) setsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000540)={0x3, "a37a50"}, 0x6) r4 = semget$private(0x0, 0x4, 0x128) semctl$IPC_RMID(r4, 0x0, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000580)={0x48, 0x7, r2, 0x0, 0x10003, 0x0, 0x2, 0xbc923, 0x293a77}) semctl$GETVAL(r3, 0x1, 0xc, &(0x7f0000000600)=""/4096) semctl$IPC_INFO(r3, 0x3, 0x3, &(0x7f0000001600)=""/4096) r5 = syz_io_uring_setup(0x3f86, &(0x7f0000002600)={0x0, 0x62cd, 0x20000, 0x0, 0x109, 0x0, r2}, &(0x7f0000002680), &(0x7f00000026c0)) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000002700)={'\x00', 0x101, 0x4, 0x9, 0x1, 0x4, 0x0}) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, r6, 0x7, r0, &(0x7f0000002780)={r2, r2}) ioctl$SCSI_IOCTL_GET_PCI(r2, 0x5387, &(0x7f00000027c0)) sendmsg$NFNL_MSG_CTHELPER_NEW(r2, &(0x7f0000002a00)={&(0x7f0000002800)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000029c0)={&(0x7f0000002840)={0x15c, 0x0, 0x9, 0x101, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x1}}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}, @NFCTH_STATUS={0x8}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x18, 0x2, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1b}, @NFCTH_TUPLE={0xac, 0x2, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010102}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1e}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x70}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x8000}, 0x4008000) capset(&(0x7f0000002a40)={0x19980330, r6}, &(0x7f0000002a80)={0x1800, 0x0, 0x0, 0x8, 0x4, 0x5}) unshare(0x10000800) flistxattr(r5, &(0x7f0000002ac0)=""/248, 0xf8) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2) semctl$GETNCNT(r3, 0x0, 0xe, &(0x7f0000002bc0)=""/190) r7 = syz_genetlink_get_family_id$SEG6(&(0x7f0000002cc0), r2) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000002d80)={&(0x7f0000002c80)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000002d40)={&(0x7f0000002d00)={0x34, r7, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x8000, 0x9, 0x1000]}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x50}, 0x4000090) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000002e40)={'syztnl2\x00', &(0x7f0000002dc0)={'syztnl2\x00', 0x0, 0x29, 0x1, 0x8, 0xffffffb4, 0x4, @remote, @mcast2, 0x20, 0x8, 0x7, 0x200}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r8, 0x89f3, &(0x7f0000002f00)={'ip6gre0\x00', &(0x7f0000002e80)={'syztnl2\x00', r9, 0x29, 0x91, 0x1, 0x8000, 0x8, @mcast1, @loopback, 0x8000, 0x700, 0x1, 0x400080}}) capget(&(0x7f0000002f40)={0x20080522, r6}, &(0x7f0000002f80)={0xca, 0xb1, 0x7, 0x5, 0x5, 0x6}) read$hiddev(r2, &(0x7f0000002fc0)=""/4096, 0x1000) 1m55.174679898s ago: executing program 0 (id=829): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000800)={0x0, {0x1, 0x0, 0x4, 0x3, 0x3, 0x80000001}}) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$uinput_user_dev(r0, &(0x7f0000000900)={'syz1\x00', {0x8000}, 0x37b4, [0xfeff, 0x4, 0x0, 0x0, 0x1, 0x420000, 0x0, 0x1fd00, 0x0, 0x0, 0xfffffe00, 0xfffffffd, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x3, 0xffffffff, 0x0, 0x3, 0x0, 0x20, 0x3, 0x200, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20007], [0x0, 0x0, 0x7, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x1, 0xfffffffc, 0x1, 0x0, 0x0, 0xfffffffc, 0x0, 0x1, 0x1, 0x0, 0x0, 0x20000000, 0x40000000, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x7, 0x8, 0x0, 0xfffffffc, 0x9, 0x8c, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x8000, 0x0, 0x400, 0xfffffffc], [0x3, 0x4, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0xb78, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x3, 0x8000000, 0x520, 0xffffffff, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0xfffffffc, 0xaf, 0x10001, 0x9, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000005, 0x0, 0x5, 0x2, 0x6, 0x0, 0x0, 0x0, 0x100], [0x0, 0xfff, 0x0, 0x4, 0x0, 0x0, 0x6, 0xe, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8000001, 0x1, 0x7fff, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffd, 0x0, 0x1, 0x0, 0x3, 0x4, 0xfffffffc, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x100, 0x0, 0x3, 0x3, 0xfffffffd, 0x53591b27, 0x0, 0x0, 0x0, 0x0, 0x1000008, 0x7, 0x0, 0x0, 0x10000, 0x80000000, 0x1000000, 0x0, 0x0, 0x4]}, 0x45c) 1m55.000205033s ago: executing program 0 (id=831): socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) socketpair$unix(0x1, 0x2, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x10101) write$uinput_user_dev(r1, &(0x7f0000000800)={'syz1\x00', {0x0, 0x0, 0x1}, 0x2004a, [0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x296, 0x970, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, 0x0, 0x0, 0xf, 0x5], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x3, 0x800000, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x80000, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff], [0x11, 0x80000a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x3, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x400], [0x0, 0x0, 0x74e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x930, 0x0, 0xa, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xbd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffe900, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe]}, 0x45c) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x2000) ioctl$UI_DEV_CREATE(r1, 0x5501) syz_emit_ethernet(0x42, &(0x7f0000000c80)=ANY=[@ANYBLOB="ffffffffffff0000060000f186dd60010100000c1100fe8000000000000000000000000000bb00000000aa4e214e21000c9078010000004e6fa3a6acc26314bef70f7dd0f144b2563a4ef532db70d980f68d36ac12af5ff07d968a15afae20246efa3a4622e56198bbeaab0eec21dda2a5a9331911c0ac6f4e5177ebc2c003ccc5c0224013296542324a46f2813237d906bde0f6ed973411534f59e3b12877ceef0d1dfcae9e03bab7cbe979eeb2ab96767225a71f06e582135abb3bc4351024a242dc09ce5b4d05f80d6671336cfb2700"/219], 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) writev(r2, &(0x7f0000000600)=[{&(0x7f0000000500)}, {&(0x7f00000003c0)="cad42b95eeb22fdd1b85a5d157aea1c58d646113136c56a0c1491ad1cb72b258caa9f6f57b8fb825c95dbd1cccecd29982d52d598ea533697818df73df03705a4c0345a3c0a93e40742a69c0676313b809e938769b61b3bac355fb237d06249379596d78ae7245e90a84654d41b139de71024d6d4d838980590b95f04ba60c8425f08639bc7d8d6733534737bd4d5a1131241e19cdf513fff591d6479c7efd0e1b4c87641caedbe73d41bd60af3c1f836b70961dc50c4a7a9ff219050a331c37ee1df5e8d2439ca554b259c5082f682bea0cac7987e3024af79594f2a9d51049432081f341cfc008e54e49efd1be68d5", 0xf0}, {&(0x7f0000001b00)="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", 0x400}], 0x3) socket$key(0xf, 0x3, 0x2) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000010c0), 0x2, 0x0) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000280), 0x80a00, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000080)={0x1, "0600000000000000c64c3b6e6ff82a75e5318fca4288c2ffbdbec772020acd2c", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r5, 0xc0303e03, &(0x7f00000000c0)={"e50d1af80100007ea25edd00ff000000080000f6907ff16b7e00", r5, 0xffffffffffffffff}) r7 = epoll_create1(0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x5, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x1ff, 0x80000000, 0x20000006, 0x4d, 0x6, 0x5d, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0xd, 0x7, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x103e, 0x8c, 0x6, 0xffff, 0x0, 0x5, 0x4, 0x8008, 0x400, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x2008004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2c0, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f2e, 0xd, 0x4e2, 0x2, 0x4, 0xb, 0x4, 0x9, 0xa, 0x9, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0x81, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x7, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x83, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xca, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x3c484551], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x93a, 0x5, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x2000004, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0xfffffff9, 0xfffff000, 0x10000, 0x0, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8bf, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f00000001c0)) dup3(r5, r4, 0x0) ioctl$UI_DEV_SETUP(r3, 0x405c5503, &(0x7f0000000480)={{0x0, 0x3, 0x0, 0x3}, 'syz0\x00', 0x2}) ioctl$UI_DEV_CREATE(r3, 0x5501) 1m39.281815679s ago: executing program 33 (id=831): socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) socketpair$unix(0x1, 0x2, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x10101) write$uinput_user_dev(r1, &(0x7f0000000800)={'syz1\x00', {0x0, 0x0, 0x1}, 0x2004a, [0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x296, 0x970, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, 0x0, 0x0, 0xf, 0x5], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x3, 0x800000, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x80000, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff], [0x11, 0x80000a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x3, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x400], [0x0, 0x0, 0x74e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x930, 0x0, 0xa, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xbd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffe900, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe]}, 0x45c) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x2000) ioctl$UI_DEV_CREATE(r1, 0x5501) syz_emit_ethernet(0x42, &(0x7f0000000c80)=ANY=[@ANYBLOB="ffffffffffff0000060000f186dd60010100000c1100fe8000000000000000000000000000bb00000000aa4e214e21000c9078010000004e6fa3a6acc26314bef70f7dd0f144b2563a4ef532db70d980f68d36ac12af5ff07d968a15afae20246efa3a4622e56198bbeaab0eec21dda2a5a9331911c0ac6f4e5177ebc2c003ccc5c0224013296542324a46f2813237d906bde0f6ed973411534f59e3b12877ceef0d1dfcae9e03bab7cbe979eeb2ab96767225a71f06e582135abb3bc4351024a242dc09ce5b4d05f80d6671336cfb2700"/219], 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) writev(r2, &(0x7f0000000600)=[{&(0x7f0000000500)}, {&(0x7f00000003c0)="cad42b95eeb22fdd1b85a5d157aea1c58d646113136c56a0c1491ad1cb72b258caa9f6f57b8fb825c95dbd1cccecd29982d52d598ea533697818df73df03705a4c0345a3c0a93e40742a69c0676313b809e938769b61b3bac355fb237d06249379596d78ae7245e90a84654d41b139de71024d6d4d838980590b95f04ba60c8425f08639bc7d8d6733534737bd4d5a1131241e19cdf513fff591d6479c7efd0e1b4c87641caedbe73d41bd60af3c1f836b70961dc50c4a7a9ff219050a331c37ee1df5e8d2439ca554b259c5082f682bea0cac7987e3024af79594f2a9d51049432081f341cfc008e54e49efd1be68d5", 0xf0}, {&(0x7f0000001b00)="706b46f1e3f58054088ba9aeec94e550cd80576f37f4801bc3fd9b49aa05ed95d1e9b9aa071496abea19c36ac25bef433c75a1b55aa7d0a756b647c88f4e840314b54391c1bf1e00436f084cb360dd18916009ee4a6d6e5c1b9e09ab9b3318d8f17f73ca31ba40873b0bbfce1da6e72bd854eee5704cf7c20dd35b4a23123c14ab7d2d7e544df8a42cbc3ac5ad82e5827c3c2b9228104bff52616912469c4a0003a7e276d4353e0fa24726a084c851452e239c50fd360594e4bc417028d7384a8450dcc27f61fefd6f8bc854ed6d3a0d526cc3d0b705402869cca4d0b06662aa9703e450ad764f06177faf43b6e59fccb1d430f7c03f19552358a7ca347808acfe7a7d62878c24c5f133c470856bd0dc7db0fee7efb817aa02fdbce23ed3e4a5f37a936c9820976df9a943cd91e52003ff223d45daae6722911a25b23ecd901de1ccaf7073535fd32a4f61c349e60fd13b993268ef0fee812972eb8a6980c3b3140aa852e201a86c66697f225a5f7ae65de1cf63751d9f0a5b66a0ae804c8402b07e2545941211c98d7f86b414cd09318f3b365247b10a1570198fd44882af3e112270940b41efbfde55d2c45f4ae2edc0ace522eafe9efe77055adea96e00c8e090d6561353312811ebe0d4e98145b0f8f696c5cc04c74c3e21c5a6c5efbba85bd6f6432ac29b30740fd929f6a1ec9b6614914b8400be87c465dac074da04b899a6e830ec511660f1a155b5e680ff6dc9ac55659fc84a85752d5348dbf501eda18afa7887e1d11cb43519f4d15cc9cd78361739c14a795d7629126fb89e929a8be225873d70425acc662a6ef65e4f835fb18cb856c29d4fa5e8b736dc0d5c803c818b165e7063f60cd321d81f4fd090336c79df46631d6b6a01b22a2747f44bd0178bd7780bc889241ed163097090c17752337fed64ba687fd547150299d11de7d3ccf71166b24e8578654335259b419f1a10bb02799d0a5ee8006ef77722d46d337616dd2b85d90937d47885909ad81cce7647a30b153ffc6d3604e72595f12e2675ea13c5a8f40979e67228aa7237e586691f5476c2ed92dd211fc641a1ef42488a6581c21060ceea055f88c61f32dc35f7e567f1e6fa1c32127e8d1fca84bea56fd5c79ec6ba113d8140b61603545a645bb27ec80a3be95905ca5a330660d15c87c4af105191dc256dc855586a436fbcdae6c656c565b273315ee6fe0a4dfedd1313457b878e826a583da1ace9da303b697ace761a65f4c9b560ac03f5c30bc7d912ffded11715aecf440f484bf46e0d5d6585e02e5aa44ad10f30998e728d27c2a7d34d38e4b7e09991fc116b0cb6193bbc0600e8dbc17003cec3f8d9b04b476df3bcaae60374de0b5bcd715d80b53c97eb347c36e040aae555c50a924b5742130a59b5d4a3be82214bd1f057242c6478bd9b1eda190d984d2ff4d8e983", 0x400}], 0x3) socket$key(0xf, 0x3, 0x2) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000010c0), 0x2, 0x0) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000280), 0x80a00, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000080)={0x1, "0600000000000000c64c3b6e6ff82a75e5318fca4288c2ffbdbec772020acd2c", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r5, 0xc0303e03, &(0x7f00000000c0)={"e50d1af80100007ea25edd00ff000000080000f6907ff16b7e00", r5, 0xffffffffffffffff}) r7 = epoll_create1(0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x5, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x1ff, 0x80000000, 0x20000006, 0x4d, 0x6, 0x5d, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0xd, 0x7, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x103e, 0x8c, 0x6, 0xffff, 0x0, 0x5, 0x4, 0x8008, 0x400, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x2008004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2c0, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f2e, 0xd, 0x4e2, 0x2, 0x4, 0xb, 0x4, 0x9, 0xa, 0x9, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0x81, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x7, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x83, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xca, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x3c484551], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x93a, 0x5, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x2000004, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0xfffffff9, 0xfffff000, 0x10000, 0x0, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8bf, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f00000001c0)) dup3(r5, r4, 0x0) ioctl$UI_DEV_SETUP(r3, 0x405c5503, &(0x7f0000000480)={{0x0, 0x3, 0x0, 0x3}, 'syz0\x00', 0x2}) ioctl$UI_DEV_CREATE(r3, 0x5501) 18.998697045s ago: executing program 3 (id=1019): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000003af3850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0xc0686611, &(0x7f0000000180)={0x67, 0x0, 0x18, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='sched_switch\x00', r3}, 0x18) syz_pidfd_open(r0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2406c089}, 0x20000000) r6 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r6, &(0x7f0000000380)={&(0x7f0000000140)={0x2, 0x4e20, @remote}, 0x10, 0x0}, 0x3000d041) socket$kcm(0x10, 0x2, 0x4) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) r8 = socket(0x2, 0x805, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @rand_addr=0x64010102}]}, &(0x7f00000007c0)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r7, 0x84, 0x23, &(0x7f0000000340)={r9, 0x1ff}, 0x8) 17.899013501s ago: executing program 3 (id=1023): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020100000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a32000000001400000011001f"], 0x7c}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001380)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@ptr, @struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x0, 0x3}]}, @volatile={0x0, 0x0, 0x0, 0x10, 0x2}]}}, 0x0, 0x4a, 0x0, 0x1}, 0x28) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_DELTABLE={0x0, 0x2, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_TABLE_FLAGS={0x0, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_FLAGS={0x0, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x0, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0x0, 0x6, "63150c464d9446b63d767e76fda8ecfaeedffc9ac60046faea82aa8943eb34590b9f113234bec3fec3aee5c3e01ed39374d3947915d2659564aeafbc499a25b43e62bbf8aaf269f21359e6f1306171d9fc87bce3711d7cc2f2475b3a1d32216240b601dcfb730489e585f72735edf4c434fc34994e7257e496646f1794f6019463e676f16a06703e309a47fdb10290eb87e72a2cb3"}]}, @NFT_MSG_NEWCHAIN={0x0, 0x3, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x2}}, @NFT_MSG_DELRULE={0x0, 0x8, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x0, 0x4, 0x0, 0x1, [{0x0, 0x1, 0x0, 0x1, @lookup={{}, @void}}, {0x0, 0x1, 0x0, 0x1, @target={{}, @val={0x0, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x0, 0x3, "a146b178b964e643b92dbe1405690680d32cee5bdd0066674e4b60477655330f8f3b1ffbdc6de129528eb94c79e4db43aef22ea08e7b1b2bfb8e923e05f7d6281181c8dbba"}]}}}, {0x0, 0x1, 0x0, 0x1, @last={{}, @val={0x0, 0x2, 0x0, 0x1, [@NFTA_LAST_MSECS={0x0, 0x2, 0x1, 0x0, 0x1000}]}}}, {0x0, 0x1, 0x0, 0x1, @redir}, {0x0, 0x1, 0x0, 0x1, @redir={{}, @void}}, {0x0, 0x1, 0x0, 0x1, @counter={{}, @val={0x0, 0x2, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0x0, 0x1, 0x1, 0x0, 0x100000001}, @NFTA_COUNTER_PACKETS={0x0, 0x2, 0x1, 0x0, 0x7ff}, @NFTA_COUNTER_PACKETS={0x0, 0x2, 0x1, 0x0, 0x1}, @NFTA_COUNTER_PACKETS={0x0, 0x2, 0x1, 0x0, 0x9}, @NFTA_COUNTER_PACKETS={0x0, 0x2, 0x1, 0x0, 0x8000}, @NFTA_COUNTER_PACKETS={0x0, 0x2, 0x1, 0x0, 0xfffffffffffffffb}, @NFTA_COUNTER_BYTES={0x0, 0x1, 0x1, 0x0, 0x2}, @NFTA_COUNTER_PACKETS={0x0, 0x2, 0x1, 0x0, 0x9}, @NFTA_COUNTER_PACKETS={0x0, 0x2, 0x1, 0x0, 0x4}, @NFTA_COUNTER_BYTES={0x0, 0x1, 0x1, 0x0, 0x8}]}}}, {0x0, 0x1, 0x0, 0x1, @flow_offload={{}, @void}}, {0x0, 0x1, 0x0, 0x1, @xfrm={{}, @void}}]}, @NFTA_RULE_COMPAT={0x0, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x0, 0x2, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x0, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_RULE_POSITION_ID={0x0, 0xa, 0x1, 0x0, 0x1}, @NFTA_RULE_CHAIN={0x0, 0x2, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x0, 0x3, 0xa, 0x201, 0x0, 0x0, {0x3}, [@NFTA_CHAIN_POLICY={0x0, 0x5, 0x1, 0x0, 0xffffffffffffffff}, @NFTA_CHAIN_NAME={0x0, 0x3, 'syz1\x00'}, @NFTA_CHAIN_POLICY={0x0, 0x5, 0x1, 0x0, 0xffffffffffffffff}, @NFTA_CHAIN_TYPE={0x0, 0x7, 'nat\x00'}, @NFTA_CHAIN_COUNTERS={0x0, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0x0, 0x1, 0x1, 0x0, 0x7}, @NFTA_COUNTER_BYTES={0x0, 0x1, 0x1, 0x0, 0x7c2}, @NFTA_COUNTER_BYTES={0x0, 0x1, 0x1, 0x0, 0x1800}, @NFTA_COUNTER_BYTES={0x0, 0x1, 0x1, 0x0, 0xff}, @NFTA_COUNTER_BYTES={0x0, 0x1, 0x1, 0x0, 0x80000001}, @NFTA_COUNTER_BYTES={0x0, 0x1, 0x1, 0x0, 0x5}, @NFTA_COUNTER_PACKETS={0x0, 0x2, 0x1, 0x0, 0x8}, @NFTA_COUNTER_PACKETS={0x0, 0x2, 0x1, 0x0, 0x80000001}]}]}, @NFT_MSG_DELCHAIN={0x0, 0x5, 0xa, 0x6, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFTA_CHAIN_NAME={0x0, 0x3, 'syz2\x00'}, @NFTA_CHAIN_ID={0x0, 0xb, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x7c}}, 0x40) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r2, 0x84, 0x81, &(0x7f0000001280)=""/4107, &(0x7f00000000c0)=0x100b) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000bc00000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000008850000000f00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0xe, 0x0, &(0x7f0000000000)="feeae3a2b93f4fbc8d26fc0ed982", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000300000000000000000000850008006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mount$binderfs(0x0, 0x0, 0x0, 0x4800, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000000c0), 0x0}, 0x20) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'veth1_vlan\x00', 0x0}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000300)={0x3, 0x4, 0x4, 0xa, 0x0, r8, 0x6, '\x00', r9, 0xffffffffffffffff, 0x0, 0x1, 0x2}, 0x50) syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) 15.484302976s ago: executing program 3 (id=1030): syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) getpid() timer_create(0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sendmsg$nl_crypto(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_emit_ethernet(0x52, &(0x7f0000001b40)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dc58c", 0x1c, 0x6, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, {[], {{0xfffe, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x2, 0xfffd, 0x0, 0x0, {[@nop, @exp_fastopen={0xfe, 0x7, 0xf989, "adb18d"}]}}}}}}}}, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x80c0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000100)={0xc}) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000100), 0x24, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba", 0x10}], 0x2}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r4, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x20, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x8, 0x1}]}}}}}}}}, 0x0) 12.063269637s ago: executing program 1 (id=1033): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'vxcan0\x00', 0x0}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x5, '\x00', r1, 0xffffffffffffffff, 0x0, 0x5, 0x3}, 0x50) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c00)=@framed={{}, [@printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x8, 0x0, 0x0, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vxcan1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@delneigh={0x1c, 0x1d, 0x10, 0x70bd2b, 0x25dfdbfb, {0x7, 0x0, 0x0, r5, 0x10, 0xd8, 0x8}}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x40000) socket$inet6_udplite(0xa, 0x2, 0x88) syz_emit_ethernet(0x5e, &(0x7f0000000000)=ANY=[], 0x0) setfsgid(0xee01) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a00)=ANY=[@ANYBLOB="70010000100033060000000000000000fc000000000000000000000000000000fc0100000000000000000000000000004e220000000000000000002000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414000000000000000000000000000000000032000000fe880000000000000000000000000001020000000000000000000000000000000000000000000000000000000000000000000000008c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000affffff00000000000000000a000100000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c0020000000000000000000ac1e00010000000000000000000000001c000400"/287], 0x170}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x3, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r7, 0x113, 0x1, &(0x7f0000000140)=0x1, 0x4) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) 10.038408511s ago: executing program 4 (id=1035): r0 = socket$nl_route(0x10, 0x3, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001600)={0x8, {"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", 0x1000}}, 0x1006) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x109942, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000580)) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000be00000000000000000000008500000020000000850000005000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100)={r2, r3}, 0xc) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f00000001c0)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0xe, 0x7}]}) ioctl$PPPIOCSACTIVE(r1, 0x40107446, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6}]}) openat$binderfs(0xffffffffffffff9c, 0x0, 0x1002, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11, 0x1, 0x0, 0x89}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x5c}}, 0x22040000) close(0x3) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x38, 0x2e, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x28, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @typed={0x4, 0xe9}]}]}, 0x38}], 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0) syz_usb_connect(0x0, 0xdd5, &(0x7f0000001800)=ANY=[@ANYBLOB="120110038f08e140ac051d92bec2010203010902c30d040306104e0904080605035600a6090582031000f80d01fa"], &(0x7f0000001080)={0x0, 0x0, 0x0, 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'veth1_to_bridge\x00', 0x0}) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)={0x1c, 0x0, 0x1, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]]}, 0x1c}, 0x1, 0x0, 0x0, 0x24001040}, 0x40010) sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="c0010000100001000000000000000000000000000000000000000000000000002001000000000000000000000000000200000000000000000000008001000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="e00000010000000000000000000000000000000032000000ac1414aa00000000000000000000000000000000000000000000206b000000000100000000000000000000000000000000000000000000000000000000000000ffffffffffffffff00000000000000000000000000000000ff030000000000000000000000000000000000000000800000000000000000000000000000000000000000000a000300af0000000000000048000200656362286369706865725f6e756c6c2900333f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c00"], 0x1c0}, 0x1, 0x0, 0x0, 0x240080d4}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r6], 0x68}, 0x1, 0x0, 0x0, 0x4010}, 0x0) 9.800168208s ago: executing program 1 (id=1037): open$dir(&(0x7f00000003c0)='./file0\x00', 0x0, 0x1) r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16, @ANYBLOB="1709000000000000000001000000050007000000000008000900fffffffe060002003f00000008000a000100000008001800ac1414aa080019", @ANYRESDEC=r0, @ANYRESDEC=r0, @ANYRES16=r1], 0x58}}, 0x400c094) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0602, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYRES8=0x0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfbff}, 0x94) write$qrtrtun(0xffffffffffffffff, &(0x7f0000000300)="ca0e808bb35bdabb", 0x8) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) r6 = dup(r5) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000050000f58504"]) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r8) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000280)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x44, r9, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x3}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r10}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)={{'fd', 0x3d, r7}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) 8.365688375s ago: executing program 1 (id=1040): r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x8001, 0x101800) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000002, 0x13, r0, 0xee7b3000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8b04, &(0x7f0000000040)={'virt_wifi0\x00', @link_local}) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) 8.090749274s ago: executing program 1 (id=1041): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) openat$sndseq(0xffffff9c, &(0x7f0000000000), 0x8000) keyctl$clear(0x5, 0xffffffffffffffff) r0 = getpid() syz_pidfd_open(r0, 0x0) syz_usb_connect(0x6, 0x75, &(0x7f0000000780)=ANY=[@ANYBLOB="1201010240d85bc7b1131100345c010203010902630002040800070904880400c192fa280724060000d2cf05"], &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(r0, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r3 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_UNLINK(r3, 0x40044160, 0x3) 8.071010586s ago: executing program 4 (id=1042): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'vxcan0\x00', 0x0}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x5, '\x00', r1, 0xffffffffffffffff, 0x0, 0x5, 0x3}, 0x50) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c00)=@framed={{}, [@printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x8, 0x0, 0x0, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vxcan1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@delneigh={0x1c, 0x1d, 0x10, 0x70bd2b, 0x25dfdbfb, {0x7, 0x0, 0x0, r5, 0x10, 0xd8, 0x8}}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x40000) socket$inet6_udplite(0xa, 0x2, 0x88) syz_emit_ethernet(0x5e, &(0x7f0000000000)=ANY=[], 0x0) setfsgid(0xee01) 7.835259223s ago: executing program 5 (id=1043): socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) getsockopt$IP_SET_OP_GET_BYINDEX(r1, 0x1, 0x53, 0x0, &(0x7f0000000440)) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r3) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r4, @ANYBLOB="010000000000000000000100000008000100000000000400048008000c8004000b800800020001000000a00008801c000780080077144ebb00000800060000000000080005"], 0xd0}}, 0x0) 6.445541288s ago: executing program 4 (id=1044): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d9c000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, 0x0, 0x0, 0x0) 6.30381501s ago: executing program 5 (id=1045): prctl$PR_GET_TSC(0x19, &(0x7f00000000c0)) socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r1 = accept(r0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x8) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = syz_open_dev$swradio(&(0x7f0000000040), 0x0, 0x2) read(r5, &(0x7f0000000080)=""/94, 0x5e) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x8001}, 0x4) syz_emit_ethernet(0x2e, &(0x7f0000000300)=ANY=[@ANYRESOCT=r1], 0x0) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x1, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000009000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000340)=ANY=[@ANYRES8=r7, @ANYRESOCT=r2, @ANYBLOB="b24ad24c8e3b8db4284f1e1f3a69ffae62f27fac361ad886442544bf76426a8978025b1c00c69f53caa6f6c8c969a682e85b9d86e5c14605c26b79c7ef9b074ec1f77a9058d9f2123e65b525b04c6fee8192d620c1b1de4048d0b9eea29ab762b8be57dcb6", @ANYRES32=r6, @ANYRESOCT=r3, @ANYRESDEC=r3], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0x2000, &(0x7f0000000000)='%', 0x0, 0xd01, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) semtimedop(0x0, &(0x7f0000000180)=[{0x3, 0x1}], 0x1f4, &(0x7f0000000240)={0x0, 0x989680}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r1) ioctl$VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f00000001c0)={0xb, @raw_data="9f4a96c5fe384616f1a9e9661829ad2f00d4f42b69f5352c110a8f9da8f8e51391fd07549b270a667430288b6eb25436a35c1749b5a2ea0e58d9d9cd467fc130b3234488546f00f60d34e302195d565a8f14c0ded549e28766cb1caaef9e2499b43f59e95392f654fcbe2cf59714f89e28fd4036bc62200da3cfadf1b5e24cd5de1d45ff67ace9ce3752812de38e2eccc5680ad93af92a66556ec63abe6abaab291e60c965a3488c2b58478d627414ca29c8bb79d56ae10cdce90dc9116d27adf8ff3b05b0c0d374"}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) r9 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_CONNINFO(r9, 0x11, 0x2, 0x0, 0x0) 6.078624785s ago: executing program 6 (id=1046): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xfffffffffffff7fe}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) socketpair(0x1, 0x100000005, 0x0, 0x0) getsockopt$bt_sco_SCO_OPTIONS(0xffffffffffffffff, 0x11, 0x1, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043e0f01"], 0xf) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) socket$nl_generic(0x10, 0x3, 0x10) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) read$msr(r0, &(0x7f00000270c0)=""/102368, 0x18fe0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_open_dev$I2C(0x0, 0x0, 0x0) rseq(&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x1, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000040)={{{@in=@multicast1, @in6=@mcast2, 0x4e25, 0x0, 0x0, 0x0, 0x2}, {0x2, 0x53, 0xfff, 0x8, 0xfffffffffffffffc, 0x1e6, 0x6, 0x8004}, {0x7ffffffffffffffe, 0x0, 0xfffffffffffffffe, 0x5}, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2}, {{@in6=@empty, 0x0, 0x32}, 0xa, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x1, 0x4, 0x2, 0x0, 0x2, 0x2, 0x9}}, 0xe8) openat$ptmx(0xffffffffffffff9c, 0x0, 0x8002, 0x0) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000040)={0x191, 0x258, 0x1e0, 0x3f, 0x32, 0x1, 0x0, 0x0, {}, {}, {0x0, 0x0, 0x3e000000}, {}, 0x0, 0x10, 0x0, 0x0, 0x1, 0x0, 0x0, 0x6}) r4 = socket$nl_generic(0x10, 0x3, 0x10) getpid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x28, r5, 0x301, 0x70bd2c, 0x25dfdbfe, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x28}, 0x1, 0xffa6, 0x0, 0xd0}, 0x20008000) socket$nl_xfrm(0x10, 0x3, 0x6) 5.904785109s ago: executing program 6 (id=1047): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000800)={0x0, {0x1, 0x0, 0x4, 0x3, 0x3, 0x80000001}}) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$uinput_user_dev(r0, &(0x7f0000000900)={'syz1\x00', {0x8000}, 0x37b4, [0xfeff, 0x4, 0x0, 0x0, 0x1, 0x420000, 0x0, 0x10000, 0x0, 0x1f, 0xfffffe00, 0xfffffffd, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x3, 0xffffffff, 0x0, 0x3, 0x0, 0x20, 0x3, 0x200, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20007], [0x0, 0x0, 0x7, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x1, 0xfffffffc, 0x1, 0x0, 0x0, 0xfffffffc, 0x0, 0x1, 0x1, 0x0, 0x0, 0x20000000, 0x40000000, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x7, 0x8, 0x0, 0xfffffffc, 0x9, 0x8c, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x8000, 0x0, 0x400, 0xfffffffc], [0x3, 0x4, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0xb78, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x3, 0x8000000, 0x520, 0xffffffff, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0xfffffffc, 0xaf, 0x10001, 0x9, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000005, 0x0, 0x5, 0x2, 0x6, 0x0, 0x0, 0x0, 0x100], [0x0, 0xfff, 0x0, 0x4, 0x0, 0x0, 0x6, 0xe, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8000001, 0x1, 0x7fff, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffd, 0x0, 0x1, 0x0, 0x3, 0x4, 0xfffffffc, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x100, 0x0, 0x3, 0x3, 0xfffffffd, 0x53591b27, 0x0, 0x0, 0x0, 0x0, 0x1000008, 0x7, 0x0, 0x0, 0x10000, 0x80000000, 0x1000000, 0x0, 0x0, 0x4]}, 0x45c) 4.765492996s ago: executing program 5 (id=1048): r0 = socket$netlink(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000340)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000080], 0x0, 0x0, 0x0}, 0x78) writev(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000000)="62ea96598f9771a5c0", 0x9}], 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000380)={@ifindex, 0xffffffffffffffff, 0xa}, 0x20) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x503, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x15615, 0xef}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8}, @IFLA_GTP_FD0={0x8, 0x1, @udp6=r1}]}}}]}, 0x40}}, 0x44) 4.743063696s ago: executing program 6 (id=1049): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x6) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, &(0x7f0000000280)={0xbe, 0x0, 0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000140)="66baf80cb8044fdc87efed660f388059e0b805000000b91e4200000f01c10f20c035000000200f22c0f20fa20f01cb36263e660f381efc660f7c150c000000b805000000b9210000000f01c1c4e17929d8", 0x51}], 0x1, 0x11, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x9, @private0}, 0x1c) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000300)="363e0f01ca0f0014c90f3566ba4200ecb8000000000f23c00f21f83503000c000f23f80f01fc64f30f21740f68910000010066baf80cb8e4096580ef66bafc0c66edc4e144c6949d0050000005", 0x4d}], 0x1, 0x4d, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000002340)='mountstats\x00') r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000000200)={0x2020}, 0x2020) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000040)='binder\x00', 0x2200892, 0x0) pread64(r3, &(0x7f0000002380)=""/253, 0xfd, 0x4eb) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x2000009, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) setrlimit(0x2, &(0x7f00000000c0)={0x0, 0x2400000}) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) ioctl$COMEDI_CMDTEST(r5, 0x8050640a, &(0x7f00000000c0)={0x1, 0x1, 0x2, 0x1, 0xffffffff, 0x2, 0x0, 0xfffffff8, 0x40, 0x0, 0x4, 0xffffff92, &(0x7f0000000180), 0x0, 0x0}) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x9000, 0x0, &(0x7f0000ff5000/0x9000)=nil) 4.740607684s ago: executing program 3 (id=1050): syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) getpid() timer_create(0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sendmsg$nl_crypto(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_emit_ethernet(0x52, &(0x7f0000001b40)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dc58c", 0x1c, 0x6, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, {[], {{0xfffe, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x2, 0xfffd, 0x0, 0x0, {[@nop, @exp_fastopen={0xfe, 0x7, 0xf989, "adb18d"}]}}}}}}}}, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x80c0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000100)={0xc}) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000100), 0x24, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba", 0x10}], 0x2}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) syz_emit_ethernet(0x56, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x20, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x8, 0x1}]}}}}}}}}, 0x0) 3.973489955s ago: executing program 5 (id=1051): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x30) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) tkill(r1, 0x3e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) epoll_create1(0x80000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004084}, 0x8000002) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) io_setup(0x1, &(0x7f0000002400)) 3.644714626s ago: executing program 6 (id=1052): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x0) (async) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000200)=@bridge_delneigh={0x28, 0x1c, 0x1, 0x70bd2c, 0x25dfdbfd, {0x7, 0x0, 0x0, r5, 0x2, 0x0, 0x6}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}}]}, 0x28}, 0x1, 0x0, 0x0, 0x20040051}, 0x40c0) (async) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0xc6da5938055fa6fd}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) 3.547698917s ago: executing program 3 (id=1053): bind$alg(0xffffffffffffffff, 0x0, 0x0) ioctl$CEC_TRANSMIT(0xffffffffffffffff, 0xc0386105, 0x0) r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x8) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) syz_usb_control_io$hid(r0, &(0x7f0000000100)={0x24, 0x0, &(0x7f0000000280)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc38, &(0x7f0000002d00)=ANY=[@ANYRES32, @ANYBLOB, @ANYBLOB="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", @ANYRES16]) 3.4235426s ago: executing program 4 (id=1054): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="170000001800010600000000000000001c"], 0x1c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x1) r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000080)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000000)={@my=0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x0, 0x32, 0x0, 0xa, 0x7ff}, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) r6 = syz_open_procfs(0x0, 0x0) writev(r6, &(0x7f00000001c0)=[{&(0x7f0000000100)="fcb7", 0x2}, {0x0}], 0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="b4000000000000007910000000000000c381d150d10563a83d00e4ff500000005d2b61ecdcb38285fe9d426d7fda0e7b7ee3c83effb05f3c727c255c53a88957ad79"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet_udp(0x2, 0x2, 0x0) r8 = syz_open_procfs$namespace(0x0, &(0x7f0000000440)='ns/mnt\x00') ioctl$BTRFS_IOC_BALANCE(r8, 0x5000940c, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x8001000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x228, 0x0, 0x11, 0x148, 0xb8, 0x0, 0x190, 0x2a8, 0x2a8, 0x190, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x6, 0x6, 0xd04, 'netbios-ns\x00', {0x5}}}}, {{@ip={@multicast1, @private=0xa010102, 0xffffffff, 0xffffff00, 'veth1_to_batadv\x00', 'macsec0\x00', {0xff}, {}, 0x6, 0x2, 0x8}, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x288) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x14}]}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.253937398s ago: executing program 6 (id=1055): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/kexec_crash_size', 0x4280, 0x124) write$binfmt_script(r0, 0x0, 0x0) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0x30000000}) r2 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x8000000000008a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet(0x2, 0x1, 0x100) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, 0x0, 0x0) sendto$inet(r4, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7820fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55", 0x3f, 0x11, 0x0, 0x0) setsockopt$SO_BINDTODEVICE_wg(r2, 0x1, 0x19, &(0x7f00000003c0)='wg2\x00', 0x4) symlinkat(&(0x7f00000000c0)='./file6\x00', r0, &(0x7f0000000200)='./file6\x00') r5 = landlock_create_ruleset(&(0x7f0000000240)={0x3fff}, 0x18, 0x2) landlock_restrict_self(r5, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000b80)='./file2\x00', r0, &(0x7f0000000300)='./file6\x00', 0x2) connect$inet(r2, &(0x7f0000000400)={0x2, 0x0, @multicast2}, 0x10) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r6, 0x84, 0xb, &(0x7f0000000340)={0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0xfe}, 0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x13, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="b400000000000000611154000000000066000000000000009500000c000000000873696d33614e2ee57dd5a154a2ae94e43150a2edbe813e570040726e46d195ecec656826699bb5d9a5bd236da1d26377330a343310cf83a36df255f237ca8c218594d970fa45d4038269416583198ed13e98e6333e060a3110d547d2b46faa492e91a84ae2b4f531ab8d522e9482063299bb473f1a523acec6ff5121b7296d64af85ec07e8e810a8dd25daedaf1aa612"], &(0x7f0000000380)='GPL\x00', 0x4, 0xbe, &(0x7f0000000580)=""/190, 0x81f00, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xd1}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r7, &(0x7f0000000000), 0xd) shutdown(r6, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x4e20, 0x8, @mcast2}]}, &(0x7f0000000440)=0x10) 3.253244739s ago: executing program 1 (id=1056): syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) getpid() timer_create(0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sendmsg$nl_crypto(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_emit_ethernet(0x52, &(0x7f0000001b40)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dc58c", 0x1c, 0x6, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, {[], {{0xfffe, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x2, 0xfffd, 0x0, 0x0, {[@nop, @exp_fastopen={0xfe, 0x7, 0xf989, "adb18d"}]}}}}}}}}, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x80c0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000100)={0xc}) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000100), 0x24, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x20, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x8, 0x1}]}}}}}}}}, 0x0) 2.864071614s ago: executing program 5 (id=1057): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000280)={0x1, 0x0, [{0x3, 0x4, 0x0, 0x0, @msi={0x5, 0x3, 0xfff, 0x6}}]}) r2 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000000), 0x4) syz_emit_ethernet(0x2a, &(0x7f0000001800)=ANY=[@ANYBLOB="0180c2000000aaaaaa07aaaa08004500001c006600000402907800110000e00000021100907800000050"], 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, 0x0, &(0x7f0000000140)=0x3b) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000e00)=@phonet={0x23, 0x0, 0x0, 0x33}, 0x22, &(0x7f0000000100)=[{&(0x7f0000000180)="27050200590200000600002fb96dbcf706e105000700810000008100accb", 0x1e}, {&(0x7f00000002c0), 0x1a000}], 0x2}, 0x0) 2.375710677s ago: executing program 4 (id=1058): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002600)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000025c0)={&(0x7f0000002340)=@flushpolicy={0x280, 0x1d, 0x100, 0x70bd2b, 0x25dfdbfb, "", [@replay_val={0x10, 0xa, {0x70bd2d, 0x70bd29, 0x6}}, @tmpl={0xc4, 0x5, [{{@in=@rand_addr=0x64010101, 0x4d4, 0x32}, 0x0, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3503, 0x4, 0x0, 0xf, 0x3, 0x72e9a392}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x24}, 0x4d2, 0x32}, 0x2, @in6=@private1, 0x3503, 0x3, 0x3, 0x9, 0x7fffffff, 0x7, 0x3}, {{@in=@loopback, 0x4d3, 0x6c}, 0xa, @in=@local, 0x3507, 0x2, 0x0, 0x0, 0x0, 0x800, 0x200}]}, @algo_crypt={0xda, 0x2, {{'cbc-cast5-avx\x00'}, 0x490, "0c7dd6e4da0a5649fa3ffecb0cbdd57e91678481652fbe7415341a6cdd5edbf357e003fa303eacb7a4597dd8449147b853a584c8353177a62c986c0845416de7cfd6188ee319133ccb7ef70e4e623262f4868eea2586a88f2aab7ecee7811686e373dcaf419b02d5b0dd819add1e31a75c119bc47ed3fe5b5c479c4d529f54c6bc6c3ee6c84c9caf51f256adff142ac67d15"}}, @algo_auth={0xbf, 0x1, {{'sha256-asm\x00'}, 0x3b8, "fad7e989a3373c90de40bba9aaa7ed93911a4169604d89f0f4980a157bbb48e6450daf42e31aa04249a423908c8e10e827e418ccf59ecad30518aee00c23af5f1e9abcf9024ed4d10098e09f277ee8427adcffbb022634f5e5a30d16f4661b920d0859c1e51b7aa12d5579741701c4e8c76ea75f125c11"}}]}, 0x280}}, 0x840) syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r4, 0x0, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x4) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r7, 0x3ba0, &(0x7f0000000300)={0x48, 0x4, 0x0, 0x0, 0x4fa000000000, 0xffffff1f00000000}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r8, 0x3, 0x25, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r9 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/4\x00') preadv(r9, &(0x7f0000001240)=[{&(0x7f0000000140)=""/34, 0x22}], 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r5}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r10 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r10, 0x1, &(0x7f0000000300)='source', &(0x7f00000000c0)='%/,:', 0x0) mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0) 1.786632195s ago: executing program 1 (id=1059): prctl$PR_GET_TSC(0x19, &(0x7f00000000c0)) r0 = socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000100)={0x9, 0x2, {0xffffffffffffffff}, {0xffffffffffffffff}, 0x5459, 0x7}) capget(&(0x7f0000000540)={0x20080522, r1}, &(0x7f0000000580)={0x8001, 0x5, 0x9, 0x10001, 0xfffffeff, 0x101}) r2 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) accept(r2, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$netlink(r3, 0x10e, 0x7, 0x0, &(0x7f0000000040)) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x61, 0x10, 0x63}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000080), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x9) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = syz_open_dev$swradio(&(0x7f0000000040), 0x0, 0x2) read(r5, &(0x7f0000000080)=""/94, 0x5e) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) semtimedop(0x0, &(0x7f0000000180)=[{0x3, 0x1}], 0x1f4, &(0x7f0000000240)={0x0, 0x989680}) ioctl$VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f00000001c0)={0xb, @raw_data="9f4a96c5fe384616f1a9e9661829ad2f00d4f42b69f5352c110a8f9da8f8e51391fd07549b270a667430288b6eb25436a35c1749b5a2ea0e58d9d9cd467fc130b3234488546f00f60d34e302195d565a8f14c0ded549e28766cb1caaef9e2499b43f59e95392f654fcbe2cf59714f89e28fd4036bc62200da3cfadf1b5e24cd5de1d45ff67ace9ce3752812de38e2eccc5680ad93af92a66556ec63abe6abaab291e60c965a3488c2b58478d627414ca29c8bb79d56ae10cdce90dc9116d27adf8ff3b05b0c0d374"}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r6 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_CONNINFO(r7, 0x11, 0x2, 0x0, 0x0) r8 = dup(r6) read$FUSE(r8, &(0x7f0000003c40)={0x2020}, 0xffffff0a) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000035c0)="5c00000013006bcd9e3fe3dc4e48aa31086b8703340000001f00000000000000040014000d000a00140000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}, {&(0x7f0000000000)="23babacad9be68ef3a2def0b611aea7d50a81e906456a131d116aca66cadaf0d1225c419a2987b2aec8c215db3006fbedad53af0559540a9bffbe46eede06ff25f195122cecddd2e92ee404b2b59cb3dcb7969e2061485496ef746d6fb0f9e98a7bb05bba70ee1a1f8a944497e239590c46faa3a82951c6edd5f8a44fb04c0f5af25a140afb127556a348dcd", 0x8c}, {&(0x7f0000000180)="e30331000ceff4057923e6140673fdd286c0989d249a8ba1f5d7217aa57dad2709a4939e9b868d4d129c41dca5e0af23cd56b3c6a54f1962508e29d166b06f3eb83b76c422d91f6ccb8f78c48f52bd807e3108f65a9340b167d93c", 0x5b}, {&(0x7f00000002c0)="0dfe5ec84c1e523f1443ec5a98f1c283a7634e5acb0f9d9fb119ef1270ec64726dc30615a43aa4b305b0c86c7ae0f48cdf27ee1a327cfd1191a6cf3cbd41c54fda904ca7a03aab582c3fdb85436eec2d89b26095b15eeb7ccd7282fc174782f2af83d1c811ea5ad5fee7c17fcca921df38e9e1e534d78ee6185e9584a95900bd520e20f3ad31eb340ca1c80bd1102030e4453af7b2cd75815cadcc01c47547bdc40b3b6528f22ad99bb43f26a85f73c6d895f277b3264fdca1dfa7ad64df92ec2e59be", 0xc3}, {&(0x7f0000000440)="8830882527a5e34e282c379d81eef5880c36c9876af517a766962dc93e2737445f6ce87bbac33381bcdb0e9a92093c2a3904bdc783ba84793b825d2c38082e6ee6cb2635542c486cf9ac4c64db8aec6829b5e6b56cf2e154d9837e358968607129c72f61b091658e645099616cc0f3c1096a1bc178b65144298c9d1c6e0a687fc1ce28cf8ff35b2c500ed636656367e47a229ca6cfaead615a32b258dd5e24707d89f9bf2dee75d604ca06148c280642cca597390c488e7b6b46230512ecc26e923520eada72f9d7ff9d0f8f938e0b", 0xcf}], 0x5, 0x0, 0x0, 0x1f000801}, 0x240000c0) 1.018396528s ago: executing program 6 (id=1060): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000800)={0x0, {0x1, 0x0, 0x4, 0x3, 0x3, 0x80000001}}) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$uinput_user_dev(r0, &(0x7f0000000900)={'syz1\x00', {0x8000}, 0x37b4, [0xfeff, 0x4, 0x0, 0x0, 0x1, 0x420000, 0x0, 0x10000, 0x0, 0x2f, 0xfffffe00, 0xfffffffd, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x3, 0xffffffff, 0x0, 0x3, 0x0, 0x20, 0x3, 0x200, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20007], [0x0, 0x0, 0x7, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x1, 0xfffffffc, 0x1, 0x0, 0x0, 0xfffffffc, 0x0, 0x1, 0x1, 0x0, 0x0, 0x20000000, 0x40000000, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x7, 0x8, 0x0, 0xfffffffc, 0x9, 0x8c, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x8000, 0x0, 0x400, 0xfffffffc], [0x3, 0x4, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0xb78, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x3, 0x8000000, 0x520, 0xffffffff, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0xfffffffc, 0xaf, 0x10001, 0x9, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000005, 0x0, 0x5, 0x2, 0x6, 0x0, 0x0, 0x0, 0x100], [0x0, 0xfff, 0x0, 0x4, 0x0, 0x0, 0x6, 0xe, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8000001, 0x1, 0x7fff, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffd, 0x0, 0x1, 0x0, 0x3, 0x4, 0xfffffffc, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x100, 0x0, 0x3, 0x3, 0xfffffffd, 0x53591b27, 0x0, 0x0, 0x0, 0x0, 0x1000008, 0x7, 0x0, 0x0, 0x10000, 0x80000000, 0x1000000, 0x0, 0x0, 0x4]}, 0x45c) 130.02625ms ago: executing program 3 (id=1061): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) (async, rerun: 64) clock_adjtime(0x0, &(0x7f0000000040)={0xd51, 0xff64cd1d00000000, 0x0, 0x0, 0x2, 0x41, 0x2, 0x9797, 0xfffffffffffffffe, 0x201, 0x8, 0xa, 0x6, 0x2, 0x7f, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x100, 0x80000001, 0x7, 0x2000000000, 0x0, 0x0, 0x3}) (async, rerun: 64) creat(&(0x7f0000000100)='./file0\x00', 0x0) (async, rerun: 64) socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) (async, rerun: 64) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000100)=[0x4]) (async, rerun: 64) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='attr/current\x00') writev(r1, &(0x7f00000015c0)=[{&(0x7f00000000c0)='w', 0x1}], 0x1) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000001080)={0x200000, 0x200000, 0x0, 0x0, 0x40000}) r2 = epoll_create1(0x0) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r3, r4, 0x26, 0x0, @void}, 0x10) (async) close_range(r2, 0xffffffffffffffff, 0x0) (async) semop(0x0, &(0x7f00000003c0)=[{}], 0x1) syz_emit_ethernet(0x52, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaa2aaaaaaaaaaaa80000000000000000004080000001afe8000000080007f759285754e910a80f5bc4896", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="7002fffd90780000fe06e2d4c3d92202"], 0x0) syz_emit_ethernet(0x52, &(0x7f00000007c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd601927f2001c2c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa0000000e0000000080000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50000400004a0f"], 0x0) (async) r5 = socket$nl_audit(0x10, 0x3, 0x9) bind$netlink(r5, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfe, 0x80000000}, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r5, 0x10e, 0x1, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001e80)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r8, 0x80}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_INC_SCI={0x5, 0xf, 0x40}]}}}]}, 0x3c}}, 0x0) (async) semctl$IPC_RMID(0x0, 0x0, 0x0) (async, rerun: 32) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) (rerun: 32) write$UHID_CREATE2(r9, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118) socket$inet_sctp(0x2, 0x5, 0x84) 2.461896ms ago: executing program 5 (id=1062): ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000000000)={0x9d, "9256a37aa8a7c7a0fdd3c3bd1d53a8f81b3e2c575635218cd8702c18f0f4a1f980214a126185be90078cb01bbf0e9d205bc8e0882d97d5951295c73cb81bde80a515a14f1879076ceb07153d0f6515131585e3f0ca777b7f079fde337e015bbd4f2774b769deda2068ba9d797a745fbd2435a86b0aedaa512ae6c3f0935fba3bd324879753038bb3e250bcf3eccd41e04a67a7bee5b4ecbdc3c67caaed"}) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_DEVICE_ATTR_vcpu(r0, 0x4018aee2, &(0x7f0000000100)=@attr_irq_timer={0x0, 0x1, 0x0, &(0x7f00000000c0)=0x14}) r1 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x80000) getsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f0000000180), &(0x7f00000001c0)=0x4) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000200)={0x0, 0x5, 0x87}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000280)={r2, @in={{0x2, 0x4e21, @multicast2}}}, &(0x7f0000000340)=0x84) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000380), 0x80000, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f00000003c0)={r3, 0x8}, 0x8) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) r5 = accept$unix(r0, &(0x7f0000000440)=@abs, &(0x7f00000004c0)=0x6e) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000500)={r2, 0x7}, 0x8) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0xc10c5541, &(0x7f0000000540)={0x7f, 0x1}) io_setup(0xfffffff7, &(0x7f0000000680)) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000006c0)={'wlan1\x00'}) syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000700)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xc, 0x0, 0xc, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x7, 0x1, 0x3, 0xfe, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0x4, 0xa6, 0x2}}}}}]}}]}}, &(0x7f0000000c80)={0xa, &(0x7f0000000740)={0xa, 0x6, 0x201, 0x29, 0x4, 0x5, 0x10, 0x8}, 0xda, &(0x7f0000000780)={0x5, 0xf, 0xda, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x9, 0xf6, 0x2, 0x5}, @generic={0xac, 0x10, 0x3, "5db7e4748f1fa0aa1a76f7555695092c0c9f5aa0cb73d8140212ed679fc8573df14846d90cc2419a285efb52e98e5cf101fe7d1682919b8559884da0139a32ba82ebc7cfc083871e99d2653a7cbe0ac2575ca5d55ade548d023ca7772a5e97649bb9d668aa517893e4421db4a68fb8d0aac6e0f0ae12e10e31baca027f098f10837f2fcf6524df557dd767097632c3ab37923020c172e3e79a66664840b95446e61ab7d8b1dcfe3d87"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0xfd, 0x85, 0x7}, @wireless={0xb, 0x10, 0x1, 0x8, 0x1, 0x5, 0xf, 0x400, 0x5}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x0, 0x3, 0x8}]}, 0x8, [{0x4, &(0x7f0000000880)=@lang_id={0x4, 0x3, 0x41d}}, {0x4, &(0x7f00000008c0)=@lang_id={0x4, 0x3, 0x1c09}}, {0x99, &(0x7f0000000900)=@string={0x99, 0x3, "6ffd6f72ea37be67ac14eb8671134986d55e6e217ca6d0ad4d8098e0d1d36e9553cb2e0f726abbdab4cb8e96f2e2af6f6bb4472af611181d3fce20adde3b9ae9b003f2a4033ebc47ee4fe117eed85adff6035cf01340f2f2b23d268952f62da9b168decfaf1362516e31fa9ee96d95a259d779e395ca05c7bea2820171e79e8fa392560698e5bdecddb01ac0d06fbfe179886cef3bb191"}}, {0x4, &(0x7f00000009c0)=@lang_id={0x4, 0x3, 0x81d}}, {0xda, &(0x7f0000000a00)=@string={0xda, 0x3, "c3ec98242bd04bb942af056ad2d6dfc882878a7b55c4dd2e26d66d1c462b304e0d79a35545b9354bae2180d4d0dd5bb8bb50906212b0d1e6f221a35d6db75c20191236b762cdb204da5900bda37cf5198ad17234ce8cb5f15fadf5f4723c587389f4b61c533a8d2ccd3440040c261d09def548ffd98f8fda22b9ba833a253be439031f29c47ee818566022ac68c153def0824886c37e6275458f9139fe3727e574427ce87fc21d83d773041b7ab94768e8663422df67626546376d84e186ec965dfcbb871806f4c42a8e291b4e6b9afaaeb8dc7155fc7acc"}}, {0xf5, &(0x7f0000000b00)=@string={0xf5, 0x3, "86a358558f6526668a2146ef23140c1958128f5a26c61c6cdc86af15543c8e798139d52d424919051e5a098d909ee54ab19890d22c97ea9dbfb58dd7f7559422a381a6a973369d5c64f598f9285577ac56aeaf7edcdfc7349b360cb2b898b2987b14ede9db110345f94a374c3b615cb2b49e76d7f2c413b6a0543c9cd76d8e5c4a9ed41dd433c566d0d1671dcd6ccb3d66117e87c720ab951460dd907fa8ff469d2e972f735f6dd06f4c854a0fd0553c1fe6a4ded15ce5538d197db1ea15e6a157222ab891c609fee72d75cb9a78045808d41a8ddcc424850219b02a218876c2e9b6b6dbd39ef28a8c7c4debb74bb60ab7e55a"}}, {0x4, &(0x7f0000000c00)=@lang_id={0x4, 0x3, 0x449}}, {0x4, &(0x7f0000000c40)=@lang_id={0x4, 0x3, 0x2001}}]}) close(r1) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000d80)={r2, 0x78, &(0x7f0000000d00)=[@in={0x2, 0x4e23, @multicast1}, @in={0x2, 0x4e24, @remote}, @in={0x2, 0x4e22, @loopback}, @in6={0xa, 0x4e24, 0x6, @remote, 0x8}, @in6={0xa, 0x4e22, 0xc18, @mcast1, 0xffffffc0}, @in={0x2, 0x4e24, @empty}]}, &(0x7f0000000dc0)=0x10) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r5, 0x8982, &(0x7f0000000e00)) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000e40)={0x9, {{0xa, 0x4e24, 0x86b, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x5}}}, 0x88) recvmmsg(r5, &(0x7f0000003a00)=[{{&(0x7f0000000f00)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f0000001fc0)=[{&(0x7f0000000f80)=""/4096, 0x1000}, {&(0x7f0000001f80)=""/63, 0x3f}], 0x2, &(0x7f0000002000)=""/137, 0x89}, 0x9}, {{&(0x7f00000020c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @multicast1}}}}, 0x80, &(0x7f0000002440)=[{&(0x7f0000002140)=""/198, 0xc6}, {&(0x7f0000002240)=""/180, 0xb4}, {&(0x7f0000002300)}, {&(0x7f0000002340)=""/234, 0xea}], 0x4, &(0x7f0000002480)=""/94, 0x5e}, 0x10001}, {{&(0x7f0000002500)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f00000037c0)=[{&(0x7f0000002580)=""/149, 0x95}, {&(0x7f0000002640)=""/210, 0xd2}, {&(0x7f0000002740)=""/25, 0x19}, {&(0x7f0000002780)=""/6, 0x6}, {&(0x7f00000027c0)=""/4096, 0x1000}], 0x5, &(0x7f0000003840)=""/30, 0x1e}, 0x40000000}, {{0x0, 0x0, &(0x7f0000003980)=[{&(0x7f0000003880)=""/202, 0xca}], 0x1, &(0x7f00000039c0)=""/39, 0x27}, 0x8}], 0x4, 0x0, &(0x7f0000003b00)={0x77359400}) ioctl$MON_IOCG_STATS(r0, 0x80089203, &(0x7f0000003b40)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, &(0x7f0000003b80)={{0x1, 0x1, 0x18, r7}, './file0\x00'}) setsockopt$inet_sctp_SCTP_NODELAY(r8, 0x84, 0x3, &(0x7f0000003bc0)=0x7, 0x4) ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f0000003c00)={0xc}) r9 = getuid() quotactl_fd$Q_QUOTAON(r6, 0xffffffff80000201, r9, &(0x7f0000003c40)='./file0\x00') r10 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000003c80), 0xa100) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r10, 0xc058534b, &(0x7f0000003cc0)={0x4, 0x8, 0x400, 0x0, 0x7, 0xc0000000}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000003d80)={0x1, &(0x7f0000003d40)=[{0xf, 0xf, 0x7, 0x9}]}) 0s ago: executing program 4 (id=1063): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x2, 0x50000) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@timestamp={0x7, 0x4, 0x4}]}}, {0x0, 0x0, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0xfe}}}}}}}, 0x0) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042406024424"], 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r0, 0x40047211, &(0x7f0000000040)) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x0, &(0x7f0000007000/0x1000)=nil) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="020000000400000008"], 0x50) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r1, &(0x7f0000003880)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0x4, @remote, 0xe0000}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000440)="0c757388ba3418daa1749d12f89de6037506040645db452079d55d532f0c4c94af8ab3f571bb1937e66c40600f791f298f0fb6ff7d1e2b46c8de0f5f76deb63f5143340aab09355a43c0263dafa7336167abbe1a9ce9e99aa14a6c01aa304b34cc97b8196146233c3d6afcd912960239dea6d63658027305172814e137599fbac3ea029ea4750eacc29f27f26803e94f7fe902c0e12467a9993c0d450849d9ba33bb5a6dadf76de7ec7e49bc477a9eacc8e8f0f80b064a9ff7832bd78e01ae57448a803c7a", 0xc5}, {&(0x7f0000000580)="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", 0xfd}, {&(0x7f0000000140)="e9dd98d90ca2d85acf5475d5fbbe60a2", 0x10}], 0x3}}, {{&(0x7f00000001c0)={0xa, 0x4e22, 0x80000001, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x5}, 0x1c, &(0x7f0000000340)=[{&(0x7f0000000680)="7dcdce6de6a95c3e702689535410a90060a70371c0368a144466780feeffd70d78785e8684261d570cf097b7c9c26d3d2029eee3f6e1890d9dc1bff4860598c597a1309fbd8abbcd65cc2be1030af37eb856c2af41d893374d9919c2487dfa034a8e96a55fe3e94791f73f8a7da7ec3e7f23b4e19743132829832a2ff3c25bf7257719c94471752f74ba1ce5e958b0da2d285984adc3879d50fe5799087363f21aa3404af56645d225454c43f0e51b75e690c892fcc9692d137b0cf1dcbe9b2782f41b1b273c893c88ec1e228f7cdb4a33012396429ee78d28a7ae2ca82799d642069b7ae33838fdbfcf33ab5c9c45d2f31a4b096a23418f21472ce73ae968a0a52dcaef58a32dea8cf0a7b849412f7f072bc43b55d228a6fab7a128ff1df999f86cae4e10b8bab5ebd26726663389574af32ac583ce6284400384be3f38c03896a728f7c6e621692cf5253f47e8c808a39088872075168b36a2884c37959e630b756879cdd0bb8308c5f7b635359d47308758235eb8b7cab10fc217a762b48c9279875a0f2794028042373a8c5dde6ef5834371c0bee2d8442dc3447161c1d975613182454db9de7dd26f352c8ed01cd705b6d1860b3cf41decfde7babcdc84f4af4d6a3288e0f4ba5c6b5947cfdecd64061813bcf95d144c2141c747b6b492e79d7700b19f8ed66ba286937fe542bff861b53ae1a7fe076b4b80c7849d77299150bdd1b271f90df4dfc184d7a352c0d2d7ba652e282a6fd7634b57fcdb5bd05c7a3125b8e721bdbf2426ea1aff29a732ff4acf5efa96528ff87440803688ff2d45b18b67ecfd41ae3eeeed3ddd1e0ddf1e5633e8a32d08c70b8433b46c8245d571fe6f307db386b2c0f6dd5de096ff0b0fe629b057e400ea80d4e6b60d4215c08e0edc4a7b0fc4ba48c68cd914a0d5b6805c7d3b993532c33f36be3f25237610262200fc7b8c47a46f0ec74f64e0792f3710735bd88506789695b8b227921baa6eab16b47052cdec5d767b8fa7fa5ca7a991e5ad45b00977e48b5f1ba2c704457ecf5c843228d1ce68072b1ff791e2bb412124c4383dded4c23b8e06e3d85d6338ababa02679234cb78f71ac9f135eba5ae3b99a1c9e0d8901d19e4373cad4b4edf2e1a2b765b35cf685dad3d8268ed17f1074c4a0744a646e50cf11b4d66caece792d0896f75522c2a3d1ddc5097b19784e1cafa97b1e88da2529d7a57dc43ba90eafd6158dbaf86ec4ce75e3ec8a719aad53425923ae3d54e8f5fa567a8e6cba5df7e26b0dd0d252a63b1940658c09eb5392abad0050c73f0706c59a4d367dde7823645d026127e87f7da6072dc70698ad43751207c2ea2dbc465dedc8ebef98b1dd44175b8dcc6f4dcaed506fc2a2039109ce6b3a03ddae741ede44348cd52f04a10c4247304cae1e17bdfa10bc8888ef901b670a6cfe92ac788de1d00643edc466727d17bab144f7671dd7ffb063190932b6dc1a97104a9f4a2d8824070e07c415427b105869f55a186e21412edbcd01aedb00ccb1d59ebdcd91886a0e2b4980c1135276dfeceb01d0b45473cecd64085ad4069d63a1a389276f54ef9acbd649018da8b770fe4a5ffdcc2966509bf50f3dd80184651d43c6c1aad0b34904a2c0663a6416e2d2633e03f523feac8eb689bbf278bd9dc847932772a13f92d2bb76bb7ea8eeae8eb52d45e3e3a82c55d41160c69166c96dac1c33e9294d03380408dec02998ba82e00a1926f3edd3fad6c261352817460ea05604d830662f51b1e0db85de2ff54ca43a4e327e19ea0d32ad403a42740b6f826d5e3de07121e3aa89ec0ca7aeafdc0d5afbdc6d5b003e5460203ef7838f5146fdaa8eb0f2aa1e0e2fbea208aa06f487c62ef127e5ccb19fec715af285873df45476ba352686adab2a86e004d29b19dcc9ddc4236b264f4d6e44fa51304ba1287a07b38db1d707790fa9814e2aea1a301435c782b3aaf5ae90e41d2cb64071cfe8a27096fe1b3d8dd7b1f53db4e15ba21e9a99d05f85c915168506afae7b5022334fb7cc8fac7b07e49251eacde05f6c1870ed7b1c590a21d72564f9c77689b3df04ea61a7e3d56483e875544b5e38317a9216d6b3bf9ee6584a38e3d7d50e6bd6046fa182598e58cea4cc43f9ea98b5dc6f443dbd6f1aa5438b89852ef63453aaffe97fb596c98556119d3ca39cf3eeff13656aa878ba90edfffe146a98dd9953b7e9a4584a99ef32a4379a844fff9f11eafafd7395aeb018fe29dd0c88b568a5a47226b4bbfbb541f9b3a222d1365c0c1271cbf2ae0f9d3c46edeb71d02dc65456be952aaf1314b4e0c2110ce190998f97dfb33d14f011abc5859ce63a35b97a41beec8ac1b1b9c3d25f2e851f36cce757c4b2c5d9e83f3cb2b1c1ef897f196faf2203de8bcf49d62ad77d8f9b6751f2e8a42b9b5d118362b898ef4d6f83e89488c5dd15e730542265ce1b6ac5c0e8b0ab2e51b142d9e5a15ceafab969a2fef32462ca1fb7615e4c93af4fc6a9394c6ecc286e4e10101813c01d8ae0c1312bdc4e1184cf8f2b9160c2347733bcac61988ee391ac0b6bdbe51da3030610481022e93cb36de17dc26fae2896cfed79e7b27aabd77853215c5168cd4fe193f055a3e91b612dc4468e8c9ddc59d2582cf0b6d8228c10c1eea9f57b3b28ad9253a3ba49f3e3edd559988948ed9b9b4dde88c131c31a9668037434f3d745a05e278d441e48d15d5b2320cf4ece30a3dac1fbe86c69a3b83b619e2b1ec5e5b5c3148b43a28dea39738513c51db6835c096649f734d28e2a2ed83d8ed17c08c831c3e159a6755602a2d7202ce407c3da679f971d5c0a78870a96c1394092845cdb94a98a21422c6cefd0b096969a9fdb150cc0988cf4c250e8cd78e452425eca16cb6c9c2598b81ac918f4aa65aaeb6b402d4a9bcac92ededab002b7c5bcfbedbc6f8b6683ef8a74816fefc45b71ef623e42c2a238bfef720cc7d50da791006cdd5850ec221b2d3006abef011eabc63a7948cdc5e826d9d147698a1a15230b4f07abd6f09f58d823d94644ba92b7dfc4a18152b720b49b5ba7664697875d583479e73140abd61c65305835196c8e5c95a0fd39783f1cbb670c0c3b1ef92bdbb8584367a05a921d5fb4f0a298dec1e8b6ec1f209db56e7f984810c159b20928548acfbba0b6cafc3d3d428d1e50e288e959ca53793859b26af3b483e6b281edfd0f211ad9dc48943939c45a94996e18a492a87c004fd30806552e0d63485889295b2e7b70bb90d34d1f32a3a3bbd0d2f93268be55415034162c4d7bad4254f75aee28c2d261a7df150e2ed36885e126c0ada5203794d4a1cd4e67114bae552b58043c36e70503dfa7d46a1369bcf657a9a62ac61c15906a3e411ebfb01ea98c886ba5251bd66cf668fcd9ca4c4e8c56c7fb694465d33104e38eb42c625d96bef00cb1a33cf4d3227cd869d5f5c01e2c46ae609aaceb824f70868caa9de6bb6ff086f5a12294a04980ae9a98d9fb52fe33e449fa3fc3e6a3df4d5de61dd3076f7a0990d96a90985b55f1e0990a474ea576331291ed64d0606541b17680f59683e611e60e71c10ab70e8e1383d1b4e324c8bf0b0986427f01cf9ad7ef785a7e24dbb81deb1e8d390d7b8b68f42a1accb4928fa425b0434aba01265dc1741fc49803bc13c164ca9753d6ed4c7960b5052e5ff985461edcd92feaacd06813fa0a3d0255562f417ac041909dfefda8e54d314064c5d5c2dbc753c8744d4f66ac1ac16e7513c7ecb5ceab335635c9245a0914ccb6b640f0e5044ad019ff9090094a79133787cfc7555ea686537d7888d34df8fc32cf53dcfce4462e43ae777c87c08b099efe4dbcc818b3561c768dc849adf5e83953bb89496d7191ea38b5adfc06a106dfbb399a979b097d26911879d5b3cc10fc5c48f91f2bf302bb387821679f831e5d64523cc3803591be76cbe20e522c23e44a5f4d8e7c71c31bca327cfc909b7d0b27ab631960deb6c03d6fce3a423410fad9bba08d0cd2558b4cc2a73342213e614a44db7a4087f843b37b1257a8aef2cd0f8cfabe7d02468a70322ce1a2033e80145f2266711368af0665018213aed0aad1567f1582c797bfaa6246016f778c6ee0359153af1573fb18f10a367e14f3d63468083de9e4d780d2e30b79526302f57888a298c51a59ffed6716712f0a26b857bf649cf62bf4ed65c927ddfea5fd3968b659dfdb8b1b9957173473df693134651b634d3257f475db26ab71d635618d5e6f91f53fd66d6ab485033a53ce9d6f23210dcb9c7f983253f3760f93a3d9c29f993ccd41a7cc6c912e383f93e6327ef7113ebe13f1bc1d6814b19e7d42b319856df3eed8fd1f5eb3a32ecefbc380c605676e4abd402c14a65b43d5a9bd3ea1d4444b39e862c436245709f6d8b85451f337a8acdba5c8aaba3371a9da8ebfd8dc814d04758c905a0e42e70f056bc349899ba1a26840ae3f9e7fbf7fa6ee67ee96f0e4b922fd52ffb4d57c12b5020631949078db0db03bd0bc8d10cecf81d0079899339f90c0d224fa329811a8b15d883c96657bc7b0c72967006220af31607de8983924dd87c9f3eb0eaf750f3f0ac20f2b922033a40068e8bec34f344ddf44fb51d131f965ae2a3e0081b586a3eb17ce4f55964010ef6dfb458e4db36605253feb766b7122d216aadbc7c30890d6a8167b9520136feb7ae30eb5f8cb9d8531ccb3d95771690d32ab315d5f94667b07d40fb7605f6ae75813619f357001a33c00a0ff09543a66be2c2030f6a1bab99be9cd63762dea1dfdae46bea97af615b9a42ffb29e16c643f759d42c3d6fe730a382a10ca7539a75a8c8b3e77ab8276ebf4edb402811e01ebaf6cb901b4b7e940a9377df18c77889fc15b08be34f4635176700bb96306f4ef4bcfe4b97dc14fe0939257b0a1d74b435626133b15e63171e75ffcd68e2f5fcd8f698375cf7fdb32d467aebbeb74477355310f1eec9caeeaf7a07e4135a69f1959f3f44163282413ac038fbb15d0e6800d4a79d318889863a070e71bb1990fddd411b6be58da1e5ce4a3876d96661037dfd2b9c66905c93f5f6f5b71ac2f08439118819462fcd2ea4c2f010bae66dee95957a33494f5f4da776605f636cdd49cdd169bf2030e70c75d0d6b9b88ed6cb9b2a22fc49a7a7c5935269aa41ef957ae2be686528fac750ccae2ed0e1b9d8acc53273bc0068917f8782b18e8c795975bfdbb5a3a3b2c497c5263387142ad32a846f24262bef358bd84f470665350aeadf6cb52e176884657891f1ce65e2bb0af23bc78bf483c9a2b62e197cd3d32315a853e3619a6d930bb0c890265173c6ffe4c4ee92964366e7123b820d0b93e74fb48d244c420f3cd427a707c8cf271765ca66ac2c4c2332fbdacdfa31f7be7f5e0b3a55c21857611d5f906ecaecc78c377de373265efb95706f51ec865f45f59fb458e47c80573c7d96af18f8e16ac97f1015467b6e14140cd3c1e60fa715c901de9da0c29d7800dc32accfc4506263ad0e16c644e590833b0b2d478ddbe5b03179579663854702392d5ca46ae140a743bbce1df51f014de41c0a4395f7728d035fdb186d0268290eb082f8c7852aeedabbc9df0cb3bde68491c516c8caca96b5ec877e9e41c788f428ae76b9d50704e5cf4b574ccd88c41ea868549fe52c36b264c65804fbdbb47d25572ac0c07e58dbee5c4b5e19b1dc525a8c18c838319281f6b06509de04d7618a9a1aaac4842de3657519078b9844544b38529df93e660c12c8b243f861114c24f049045f6c72b4b07c6e07108b7e7f834f6dd7bde2b4652", 0x1000}, {&(0x7f0000001680)="01e5cbeb2c6ea3dab3da3bd3ae2c54ad3464b45dbf79e933c534b6c6f1e4f696cade0655edd1cbd976cb57dd9d6762ae25b270e3ae3311e8aedf16030fe1972bbd29776518533a410e43ce92e2e94e40cf3d1eaf8201303cf3dd1c4d05533e75424dc2ff2b71c1afe8c55612298da0e51ac61a5d07520d26c346274acbc25790f4d9aca5c65688edf57918621d01f83b835e98d1c469258b8a97a81f7a437a0804794e990ccd7393649cdd8fbe", 0xad}, {&(0x7f00000002c0)="86d8d5b4c0fe6e5b73a29e408b7940fef10de5991788e033ce31b6c16e12ad680f91390afb", 0x25}], 0x3, &(0x7f0000000380)=[@dstopts={{0x38, 0x29, 0x37, {0x2f, 0x3, '\x00', [@ra={0x5, 0x2, 0x1}, @hao={0xc9, 0x10, @mcast2}, @jumbo={0xc2, 0x4, 0x2}]}}}], 0x38}}, {{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000001740)="203d76a4e7d1ce772821b08a3ddf864b3872f482365bf4b74d2a92a1c98a1138543d0fe48f7393f24f371c807019ce2732f7d830f6762536ab126c5ca6ba59fd0dc302cd74eb555ec0379042c384349cc345ddb420bfb426a28de14713fd1b76817e5a361ba0366e9cc9d8713116464205f81a7391bf52a0750e4e5a", 0x7c}, {&(0x7f00000017c0)="838e903c49d1bc21445573fb049acabd9ad3dd87d44e532ce980f72b3726a6e9fc0d5c589bce65ab507d2ff897683090f4812ba68fafd49f940be3dc5b23cbf818578f59b007d30b8c6c128d70d3584c0869c0bcef8ae6", 0x57}, {&(0x7f0000001840)="49fc286a0b39cf762eb669f46ddf779d158ae5fb918587207c95e278b7576e4b53e48a76760c9442e96154accebf4b766ae2e9fef40827c3f392e850f4d9b304e607743f1f7ba3105d1ab50ebadf0ee06c9599f1676a5faf6ce6b08e3bbcd5d1868f6d11e9d2526c76aa5e5ad5090c976c3ff880e5406b11d013065eb9e21c890c3e5623358ceb83bc79d4929b9ee0", 0x8f}, {&(0x7f0000001900)="42f415e3e662adecfd10cf7a72414bf52d1f657bfaa0c57204a756f3086667f245f184d25dd97b61072247877821f3da5eb3c07c2d7e821198bdfc3243ed90d9c363e4cf616225af92dcdda879e35f1946d8376eafa3042dd7cba3b2bce211361ad06518bb1883011b60ef9862", 0x6d}, {&(0x7f0000001980)="2e56ee1e66657112ca154d2cd66d5a0c54b95ee5e6753d843f57eae7f7dabb1682217ff01e59e5e5ba6e034e008ec6965e937af05a2d4fb7d5e8106a9cdb35b76a0f84ccdddb83f10144c49677f38f5f4772302c603d28e5fbe9ddeb95cf4f7e430100f8a469aa7900b78c39b2c6a68838a119ead12e3bda7bcae2e04da11bebe443ed6261a88874fad82c310a3e39967c36aa80c45d783eb0308753eb0aff96", 0xa0}, {&(0x7f0000001a40)="4d372471927b", 0x6}], 0x6, &(0x7f0000001b00)=[@dontfrag={{0x14}}, @dstopts={{0xf0, 0x29, 0x37, {0x32, 0x1a, '\x00', [@generic={0x3, 0xd2, "c499ff4a82df21db49d6f378a647b0b1359ee2e75c3f735c3731587123d4d0cfd7ecc17e5a51e0bc5cca33124b4543bcd14a5d1e7a73a7be78be961d4328cb306cf10e27e9a64c54ccd2d78133eed69a9a3af81389f244ec46611d4237adcd999232fba35bf242cdd853a4023b6427d2537eb3b17372490074958e0e985ae36a21b9298c9348ea8700bea9f49dd7af68a58bc25b8d369e98737be7f2e625c1f0b8ca53ac00a38ef492da69c85489aa5a357ad487871920ff8df2b70ffa8505aa31feafadad2dbb90908649892e57b88405e9"}]}}}, @dstopts_2292={{0x50, 0x29, 0x4, {0x2b, 0x6, '\x00', [@calipso={0x7, 0x30, {0x1, 0xa, 0xff, 0x3, [0x9, 0x4, 0xa, 0x31d2f03c, 0x4]}}]}}}, @dstopts={{0x40, 0x29, 0x37, {0x0, 0x4, '\x00', [@calipso={0x7, 0x10, {0x3, 0x2, 0x4, 0x8, [0x9]}}, @jumbo={0xc2, 0x4, 0x75e62fcc}, @enc_lim={0x4, 0x1, 0xff}, @pad1, @enc_lim={0x4, 0x1, 0x2}]}}}, @hopopts={{0x98, 0x29, 0x36, {0x6c, 0xf, '\x00', [@generic={0x8, 0x1a, "3919c31f158a26a98fbd755d76e185c222ae5cef1a5ffa55e1b1"}, @pad1, @calipso={0x7, 0x58, {0x3, 0x14, 0x6, 0x0, [0x4, 0x5, 0x3, 0x0, 0xb, 0x8000, 0x10, 0x1, 0x7c23, 0x8]}}, @padn={0x1, 0x2, [0x0, 0x0]}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0xfffffff8}}, @hopopts_2292={{0x10c8, 0x29, 0x36, {0x1d, 0x215, '\x00', [@calipso={0x7, 0x50, {0x1, 0x12, 0x3, 0x8e6b, [0x8, 0xc, 0x4, 0x6, 0x101, 0x9, 0x4, 0x48, 0x0]}}, @generic={0x0, 0x7, "74172a55a56582"}, @enc_lim={0x4, 0x1, 0xc}, @enc_lim={0x4, 0x1, 0x5}, @pad1, @generic={0xed, 0x1000, "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"}, @generic={0x65, 0x45, "36529a087c7a1a63681b80a3d67b0983f5f8367244488b762d9bb045a193864d2b7efb8d7b8e06cf44e244d3021efdc260dd305391cc113c60f73ff69b3fab84deb47ee9ab"}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x5}}, @flowinfo={{0x14, 0x29, 0xb, 0x6}}], 0x1340}}, {{&(0x7f0000002e40)={0xa, 0x4e22, 0x3, @loopback, 0x8430}, 0x1c, &(0x7f0000002f80)=[{&(0x7f0000002e80)="92e8de614066dc8bd306d7506f475c35c5b5948041f4778ff7173069a173b3f431e755cbe98c6e4b21a494a935a6ccb6f6820b5392adaf718567972247a3b6a2541d53220c569ed12c69e918f1ccf6aa6d3e476a2b5c4fcdde27be352e58665458699ef6624a4e9f93eece96a42e0921fce10182d9b66c36a9605175639d3fef44f4adb91c0d265fb9e219f22f96a791efee9ba3217eb6c709bb43226b5882a0d9990c7dacc41a54302bdc868b7bebe3b78765932fecc1d86e91a60488b96b48dd85969169d10f95", 0xc8}], 0x1, &(0x7f0000002fc0)=[@flowinfo={{0x14, 0x29, 0xb, 0xb}}, @hopopts={{0x140, 0x29, 0x36, {0x3a, 0x24, '\x00', [@calipso={0x7, 0x38, {0x2, 0xc, 0x8, 0x3ff, [0x101, 0x0, 0x9, 0x6, 0x7, 0x6]}}, @generic={0x1, 0xe8, "2545793fe848689fc6aed508238cdc03449307eed6521bf272ac9a7f3b635492d85c448fa8c77592f1a889d83e070d14cf115eac7f4b6150fb88b541eb95c696dcfcc6eb67de24691ef19c089aeafdcb4bb45ba10b320d6251b69395b727bc854415252c91ace58f610f1232599e416ef7ef9cf0336029bbc16db013108edff6fffb1b5d394321718882e3b052a4bedc083f5cf47f4a80d13ae3034c6b9b89d4640b14f6e643e7da05f24ad4e4e4d2ff5eaf046d0e9053c86641ded6f2acbd7752f548c40fff6dd68ea189936e2ea1113f52e39ee51d8a89ddbbf8961363a288abf6facda7edd3c3"}]}}}, @dstopts_2292={{0x98, 0x29, 0x4, {0xff, 0xf, '\x00', [@ra={0x5, 0x2, 0x1}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x5, 0x6c, "a7989aa9b794f8b8420fee7c3f65ee62d0116f2df948983daaa846d01a3fa11960edd3433b2e479a5b30cf705c57b51ff71a90309a1c47c6d578d7c4e8d1789b97505cbc5e3cb68e5ef9e11f79edf080e7be105e6ee4a44ca84400f5f1f8745809315a001169ef224c2684f2"}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0xc03}}, @dontfrag={{0x14, 0x29, 0x3e, 0x9}}, @flowinfo={{0x14, 0x29, 0xb, 0x8000}}], 0x238}}, {{&(0x7f0000003200)={0xa, 0x4e20, 0x5, @mcast1, 0x4}, 0x1c, &(0x7f0000003480)=[{&(0x7f0000003240)="99c042b5ebcdc84370b587757da35eaba6d09f190bc1819af4ef28bc74b3ec488e357999e1186a8812db205a9005efe747bffe10a1304b564afd6696e9f57e2b0c93354783", 0x45}, {&(0x7f00000032c0)="c548a32e407f41079c4051e7763cb87ebc25298490074b53b2ed17ba76e5bf71c62577f9075dfca96c6a029bcdd1b4f46103e2873d2b8922131e84638b73acd60ccc408d2dbbc5446536bd9620322e17ba3a892225d6e30b4b745b30273e8798b8f7b11d0b19faf7cb42be2bc903e39a90c24f2190319afedfabcc80d5eebd0dd0e356d7aecdecb5470baecaf91b01340d75ee08ff40413d3e98318cc80a", 0x9e}, {&(0x7f0000003380)="73ccbe05a4426d0d29fc645af2aee8a3141f8299f1f3a5160961e287c0dcfdee0d925f3f804da3afb7b1dfbd86b7c60fbc69e21789d56c0ef78632aec2e93e1f38044ee9055fd2d8ef458ccb3ab7abf70acbbc4ac46519a3082cae24b2be2b4c4af982f423399f9c951619f7d547457bce88ff23c0c9c2d8d6245433e1d7425320303d7a764b322db7e0628f5ac9927025d47b6616ee4f71d3ace171c07e726cb4f82b4b4c2af7f8a1c00ef6f9a24ee74b1e242c12d850ce43f1b52d3395d1a0653184efccc4b7ced6bf64690d89c12cfa78a9868599a321f87fe9da35ab7c343a7ae3194974a9ec5cea31", 0xeb}], 0x3, &(0x7f00000034c0)=[@rthdr={{0x58, 0x29, 0x39, {0x2e, 0x8, 0x1, 0x3, 0x0, [@empty, @empty, @private0, @mcast1]}}}, @hopopts={{0x110, 0x29, 0x36, {0x0, 0x1f, '\x00', [@hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}, @calipso={0x7, 0x10, {0x3, 0x2, 0x9, 0xf6, [0x2]}}, @jumbo={0xc2, 0x4, 0xa2}, @jumbo={0xc2, 0x4, 0x1}, @hao={0xc9, 0x10, @remote}, @generic={0xf3}, @generic={0x1, 0xae, "99ae01c9e1809726b372fa33a7c8fcb91cf73d648e8a73f2cf4f01f65a0aefc0e69e11f17469d260df4a02e6c018b8fa024306a3826c709277f02f16b57ccb317cdda5f167bfda67a750c27bf9e3dc6d917f658056fe360f70e34e11bc16c86fd34be221c978378b2de943b17d9768968b7a5ea36d1974911f2a67f2e5b252f6c9eac18c3a2076a5e6913649297e50e6a3f48006822f060e23934dba8f2a0c7f17c1b80fa36b87c870bf76a51b0d"}, @ra={0x5, 0x2, 0x5}]}}}, @hopopts_2292={{0x208, 0x29, 0x36, {0x16, 0x3d, '\x00', [@hao={0xc9, 0x10, @mcast2}, @ra={0x5, 0x2, 0x9bb}, @calipso={0x7, 0x38, {0x3, 0xc, 0x2, 0xff, [0x6, 0x6, 0x5, 0x6, 0x5065aa35, 0x3]}}, @generic={0xd, 0x4a, "9d5e0e18ce1313771494228d095e1d0107f87b58b3a60c4f8ec12217cdece18f6c11d99f902f5834a07c53b2d6c1d258f8fd5245dd923e18198a12bf08889d86287563e55b8f79ee7a68"}, @generic={0x81, 0xca, "c7ab503997c9ad341bfc32a5dae6394eca29e66fa13e3c1e0800cfe8631269553f065a6915cda246e118f9c313361f8a9e1f6d2ff24bb5735e49ca27067227076538d76c4e2d8549209113bbee75ba1f5a96f4d2a1d9ba05040d390196c078420c04399b6329887fb6704869f516b8e2b71d3286fe20bb6fdb7ab66ccb9c5a1762a3b7ea73bea6cd4929518bacb5b13ebf9f9ca4e53d7decd8127c3dc4553c789a4c027d138c8484258ffb5e92755c029416bb843c89c341ddb7404253ee0f2b6768b08684c489abd0f0"}, @generic={0x5, 0x5f, "7f20c79360d4f0f4c277e0d5cb8336d8b87f46bbd6ffa285de686e654478c94868bbd0bcbe34bb131e1886a6384336b7956575e07ba96da04c0e84a335b23894a92ce8604a3ca767c2c52f5ff7de76b258b35962718d3d14620abfa849b07a"}, @enc_lim={0x4, 0x1, 0xd1}, @calipso={0x7, 0x20, {0x1, 0x6, 0x4, 0x5, [0x8, 0x9, 0x9]}}]}}}, @tclass={{0x14, 0x29, 0x43, 0x8}}, @tclass={{0x14, 0x29, 0x43, 0x8}}], 0x3a0}}], 0x5, 0x4000040) sendmmsg$inet6(r1, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x280020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000540)='\x00', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000300)='8', 0x1}], 0x1}}], 0x2, 0x20008050) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYRES16, @ANYRES16=r1], 0x1000f) ioctl$CEC_ADAP_G_CAPS(0xffffffffffffffff, 0xc04c6100, &(0x7f0000000080)) kernel console output (not intermixed with test programs): ocess `syz.4.255'. [ 209.728298][ T5891] usbtouchscreen 4-1:11.95: probe with driver usbtouchscreen failed with error -90 [ 209.753761][ T5891] usb 4-1: USB disconnect, device number 6 [ 210.980528][ T7087] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 211.053608][ T7092] netlink: 128 bytes leftover after parsing attributes in process `syz.3.260'. [ 211.605231][ T7087] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 212.055107][ T5841] Bluetooth: hci1: command 0x0406 tx timeout [ 212.126752][ T5841] Bluetooth: hci3: command 0x0406 tx timeout [ 212.132963][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 212.643849][ T7101] netlink: 76 bytes leftover after parsing attributes in process `syz.2.261'. [ 214.139647][ T24] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 214.402652][ T24] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 214.426495][ T24] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 214.474737][ T24] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 214.485142][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 214.494646][ T24] usb 2-1: SerialNumber: syz [ 214.782282][ T7126] netlink: 16 bytes leftover after parsing attributes in process `syz.2.267'. [ 215.362611][ T24] usb 2-1: 0:2 : does not exist [ 215.367683][ T24] usb 2-1: unit 6 not found! [ 215.395901][ T24] usb 2-1: unit 255 not found! [ 215.448015][ T24] usb 2-1: USB disconnect, device number 8 [ 215.751356][ T7134] ieee802154 phy0 wpan0: encryption failed: -22 [ 215.791825][ T7134] ieee802154 phy0 wpan0: encryption failed: -22 [ 217.668776][ T7152] syzkaller0: entered allmulticast mode [ 217.852223][ T7150] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 217.875999][ T7153] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 217.897484][ T7150] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 218.133913][ T7153] warning: `syz.3.276' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 218.987444][ T7165] netlink: 'syz.0.278': attribute type 10 has an invalid length. [ 218.995668][ T7165] netlink: 40 bytes leftover after parsing attributes in process `syz.0.278'. [ 219.079587][ T7165] batman_adv: batadv0: Adding interface: virt_wifi0 [ 219.086807][ T7165] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 219.113242][ T7165] batman_adv: batadv0: Interface activated: virt_wifi0 [ 219.530531][ T7179] netlink: 16 bytes leftover after parsing attributes in process `syz.3.281'. [ 220.659053][ T44] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 220.829204][ T44] usb 1-1: Using ep0 maxpacket: 16 [ 220.893819][ T44] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 221.129455][ T44] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 221.139716][ T44] usb 1-1: config 0 interface 0 has no altsetting 0 [ 221.147051][ T44] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 221.156196][ T44] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.169009][ T44] usb 1-1: config 0 descriptor?? [ 221.971355][ T7212] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.281305][ T7188] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 222.291117][ T7188] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 222.549239][ T979] usb 1-1: USB disconnect, device number 10 [ 222.676515][ T7224] netlink: 12 bytes leftover after parsing attributes in process `syz.4.290'. [ 226.310534][ T7239] netlink: 16 bytes leftover after parsing attributes in process `syz.3.295'. [ 226.771325][ T7242] netlink: 'syz.4.294': attribute type 10 has an invalid length. [ 226.779510][ T7242] netlink: 40 bytes leftover after parsing attributes in process `syz.4.294'. [ 228.665096][ T7261] loop9: detected capacity change from 0 to 7 [ 228.674467][ T7261] Buffer I/O error on dev loop9, logical block 0, async page read [ 228.683078][ T7261] Buffer I/O error on dev loop9, logical block 0, async page read [ 228.691688][ T7261] Buffer I/O error on dev loop9, logical block 0, async page read [ 228.700368][ T7261] Buffer I/O error on dev loop9, logical block 0, async page read [ 228.708930][ T7261] Buffer I/O error on dev loop9, logical block 0, async page read [ 228.717519][ T7261] Buffer I/O error on dev loop9, logical block 0, async page read [ 228.726068][ T7261] Buffer I/O error on dev loop9, logical block 0, async page read [ 228.734379][ T7261] ldm_validate_partition_table(): Disk read failed. [ 228.741359][ T7261] Buffer I/O error on dev loop9, logical block 0, async page read [ 228.750889][ T7261] Buffer I/O error on dev loop9, logical block 0, async page read [ 228.760029][ T7261] Buffer I/O error on dev loop9, logical block 0, async page read [ 228.769116][ T7261] Dev loop9: unable to read RDB block 0 [ 228.776363][ T7261] loop9: unable to read partition table [ 228.783265][ T7261] loop9: partition table beyond EOD, truncated [ 228.789784][ T7261] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 228.789784][ T7261] ) failed (rc=-5) [ 231.046847][ T7281] netlink: 12 bytes leftover after parsing attributes in process `syz.0.304'. [ 231.366184][ T44] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 231.546974][ T7285] netlink: 'syz.0.307': attribute type 15 has an invalid length. [ 231.602080][ T44] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 231.619213][ T44] usb 5-1: can't read configurations, error -61 [ 231.710664][ T7290] netlink: 20 bytes leftover after parsing attributes in process `syz.1.308'. [ 231.768951][ T44] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 231.941722][ T44] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 231.958895][ T44] usb 5-1: can't read configurations, error -61 [ 231.977641][ T44] usb usb5-port1: attempt power cycle [ 232.339010][ T44] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 232.399002][ T44] usb 5-1: device descriptor read/8, error -71 [ 236.563930][ T7334] netlink: 16 bytes leftover after parsing attributes in process `syz.3.321'. [ 237.316578][ T979] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 237.441367][ T7348] netlink: 'syz.1.325': attribute type 1 has an invalid length. [ 237.450777][ T7348] netlink: 228 bytes leftover after parsing attributes in process `syz.1.325'. [ 237.461298][ T979] usb 4-1: device descriptor read/64, error -71 [ 237.917319][ T979] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 238.081980][ T979] usb 4-1: device descriptor read/64, error -71 [ 238.902181][ T979] usb usb4-port1: attempt power cycle [ 239.009884][ T7357] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 239.020500][ T7357] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 239.448020][ T979] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 239.490599][ T979] usb 4-1: device descriptor read/8, error -71 [ 239.708402][ T7361] netlink: 588 bytes leftover after parsing attributes in process `syz.0.329'. [ 240.149567][ T10] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 240.843047][ T10] usb 1-1: config 0 has an invalid interface number: 4 but max is 0 [ 240.874416][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 240.978770][ T10] usb 1-1: config 0 has no interface number 0 [ 240.986761][ T10] usb 1-1: config 0 interface 4 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 241.007138][ T10] usb 1-1: New USB device found, idVendor=05c6, idProduct=9035, bcdDevice=26.4c [ 241.121857][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.205378][ T10] usb 1-1: Product: syz [ 241.218400][ T10] usb 1-1: Manufacturer: syz [ 241.244382][ T10] usb 1-1: SerialNumber: syz [ 241.263671][ T10] usb 1-1: config 0 descriptor?? [ 241.284200][ T10] qmi_wwan 1-1:0.4: probe with driver qmi_wwan failed with error -22 [ 242.920421][ T10] usb 1-1: USB disconnect, device number 11 [ 243.340433][ T7382] netlink: 16 bytes leftover after parsing attributes in process `syz.3.334'. [ 244.394421][ T7394] [U] [ 247.083717][ T7405] netlink: 'syz.1.342': attribute type 1 has an invalid length. [ 247.113036][ T7405] netlink: 144 bytes leftover after parsing attributes in process `syz.1.342'. [ 247.148962][ T7405] netlink: 28 bytes leftover after parsing attributes in process `syz.1.342'. [ 247.282530][ T5154] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 247.293145][ T5154] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 247.302477][ T5154] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 247.312956][ T5154] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 247.323134][ T5154] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 247.503048][ T7420] netlink: 48 bytes leftover after parsing attributes in process `syz.1.346'. [ 248.117268][ T7426] netlink: 16 bytes leftover after parsing attributes in process `syz.1.348'. [ 248.197147][ T6012] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.634912][ T6012] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.809249][ T30] audit: type=1326 audit(1755627568.119:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7429 comm="syz.4.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f366318ebe9 code=0x7ffc0000 [ 248.869113][ T30] audit: type=1326 audit(1755627568.119:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7429 comm="syz.4.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f366318ebe9 code=0x7ffc0000 [ 248.891722][ T30] audit: type=1326 audit(1755627568.149:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7429 comm="syz.4.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f366318ebe9 code=0x7ffc0000 [ 248.915605][ T30] audit: type=1326 audit(1755627568.149:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7429 comm="syz.4.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f366318ebe9 code=0x7ffc0000 [ 248.949381][ T30] audit: type=1326 audit(1755627568.149:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7429 comm="syz.4.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f366318ebe9 code=0x7ffc0000 [ 249.031143][ T6012] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.429098][ T5154] Bluetooth: hci5: command tx timeout [ 251.431124][ T7411] chnl_net:caif_netlink_parms(): no params data found [ 251.499043][ T5154] Bluetooth: hci5: command tx timeout [ 251.598196][ T6012] bridge_slave_1: left allmulticast mode [ 251.610895][ T6012] bridge_slave_1: left promiscuous mode [ 251.620605][ T6012] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.647661][ T6012] bridge_slave_0: left allmulticast mode [ 251.686890][ T6012] bridge_slave_0: left promiscuous mode [ 251.708538][ T6012] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.830656][ T10] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 252.019526][ T10] usb 5-1: config 48 has an invalid interface number: 4 but max is 0 [ 252.044005][ T10] usb 5-1: config 48 has an invalid descriptor of length 0, skipping remainder of the config [ 252.082554][ T10] usb 5-1: config 48 has no interface number 0 [ 252.135640][ T10] usb 5-1: config 48 interface 4 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 10 [ 252.180796][ T10] usb 5-1: config 48 interface 4 has no altsetting 0 [ 252.247166][ T7471] netlink: 16 bytes leftover after parsing attributes in process `syz.0.358'. [ 252.352027][ T10] usb 5-1: New USB device found, idVendor=1235, idProduct=0001, bcdDevice= b.d4 [ 252.377076][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.386114][ T10] usb 5-1: Product: syz [ 252.391340][ T10] usb 5-1: Manufacturer: syz [ 252.396116][ T10] usb 5-1: SerialNumber: syz [ 253.569027][ T5154] Bluetooth: hci5: command tx timeout [ 255.688964][ T5154] Bluetooth: hci5: command tx timeout [ 255.730089][ T24] usb 4-1: new low-speed USB device number 11 using dummy_hcd [ 255.733527][ T10] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 255.914815][ T24] usb 4-1: device descriptor read/64, error -71 [ 256.289312][ T24] usb 4-1: new low-speed USB device number 12 using dummy_hcd [ 256.408691][ T10] snd-usb-audio 5-1:48.4: probe with driver snd-usb-audio failed with error -2 [ 256.421774][ T10] usb 5-1: USB disconnect, device number 13 [ 256.519200][ T24] usb 4-1: device descriptor read/64, error -71 [ 256.639442][ T24] usb usb4-port1: attempt power cycle [ 256.776975][ T7504] netlink: 20 bytes leftover after parsing attributes in process `syz.3.367'. [ 257.047421][ T6012] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 257.396016][ T6012] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 257.481701][ T6012] bond0 (unregistering): Released all slaves [ 257.603148][ T7484] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 257.697495][ T7484] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 257.943618][ T7520] netlink: 16 bytes leftover after parsing attributes in process `syz.4.370'. [ 258.402819][ T7411] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.423159][ T7411] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.451628][ T7411] bridge_slave_0: entered allmulticast mode [ 258.470487][ T7411] bridge_slave_0: entered promiscuous mode [ 258.480388][ T7411] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.487588][ T7411] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.515745][ T7411] bridge_slave_1: entered allmulticast mode [ 258.531403][ T7411] bridge_slave_1: entered promiscuous mode [ 258.723003][ T6012] hsr_slave_0: left promiscuous mode [ 258.737830][ T6012] hsr_slave_1: left promiscuous mode [ 258.745971][ T6012] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 258.755152][ T6012] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 258.768208][ T6012] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 258.783769][ T6012] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 258.809874][ T6012] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 258.819452][ T6012] batman_adv: batadv0: Removing interface: virt_wifi0 [ 258.881190][ T6012] veth1_macvtap: left promiscuous mode [ 258.887073][ T6012] veth0_macvtap: left promiscuous mode [ 258.908197][ T6012] veth1_vlan: left promiscuous mode [ 258.913990][ T6012] veth0_vlan: left promiscuous mode [ 259.081365][ T7543] netlink: 20 bytes leftover after parsing attributes in process `syz.4.378'. [ 260.207665][ T24] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 260.534336][ T30] audit: type=1326 audit(1755627579.839:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7548 comm="syz.3.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f720278ebe9 code=0x7ffc0000 [ 260.554952][ T7549] netlink: 'syz.3.380': attribute type 21 has an invalid length. [ 260.557402][ T30] audit: type=1326 audit(1755627579.849:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7548 comm="syz.3.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=26 compat=0 ip=0x7f720278ebe9 code=0x7ffc0000 [ 260.586797][ T30] audit: type=1326 audit(1755627579.849:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7548 comm="syz.3.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f720278ebe9 code=0x7ffc0000 [ 261.086488][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.093042][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.286155][ T30] audit: type=1326 audit(1755627579.849:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7548 comm="syz.3.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f720278ebe9 code=0x7ffc0000 [ 261.477007][ T30] audit: type=1326 audit(1755627579.849:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7548 comm="syz.3.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f720278ebe9 code=0x7ffc0000 [ 261.498445][ C1] vkms_vblank_simulate: vblank timer overrun [ 261.611328][ T30] audit: type=1326 audit(1755627579.849:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7548 comm="syz.3.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f720278ebe9 code=0x7ffc0000 [ 261.632892][ C1] vkms_vblank_simulate: vblank timer overrun [ 261.685727][ T30] audit: type=1326 audit(1755627579.849:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7548 comm="syz.3.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f720278ebe9 code=0x7ffc0000 [ 261.715099][ T30] audit: type=1326 audit(1755627579.859:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7548 comm="syz.3.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f720278ebe9 code=0x7ffc0000 [ 261.793827][ T30] audit: type=1326 audit(1755627579.859:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7548 comm="syz.3.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f720278ebe9 code=0x7ffc0000 [ 261.816761][ T30] audit: type=1326 audit(1755627579.859:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7548 comm="syz.3.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f720278ebe9 code=0x7ffc0000 [ 262.919333][ T6012] team0 (unregistering): Port device team_slave_1 removed [ 262.972355][ T6012] team0 (unregistering): Port device team_slave_0 removed [ 263.179179][ T44] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 263.374764][ T44] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 263.386979][ T44] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 263.401980][ T44] usb 4-1: New USB device found, idVendor=05ac, idProduct=0242, bcdDevice= 0.00 [ 263.411569][ T44] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.425422][ T44] usb 4-1: config 0 descriptor?? [ 263.437378][ T7411] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 263.467097][ T7411] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 263.945309][ T7572] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 263.951522][ T7411] team0: Port device team_slave_0 added [ 264.843482][ T7581] comedi comedi3: Buffer allocation failed [ 264.944705][ T7411] team0: Port device team_slave_1 added [ 264.960764][ T7572] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 265.258606][ T44] usb 4-1: string descriptor 0 read error: -71 [ 265.316947][ T44] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input12 [ 265.351910][ T5189] bcm5974 4-1:0.0: could not read from device [ 265.377788][ T5189] bcm5974 4-1:0.0: could not read from device [ 265.433299][ T7411] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 265.464436][ T7411] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 265.574134][ T7411] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 265.587779][ T7411] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 265.594864][ T7411] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 265.624626][ T7411] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 266.307358][ T5189] bcm5974 4-1:0.0: could not read from device [ 266.347677][ T44] usb 4-1: USB disconnect, device number 14 [ 267.027108][ T7411] hsr_slave_0: entered promiscuous mode [ 267.056679][ T7411] hsr_slave_1: entered promiscuous mode [ 267.074636][ T7411] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 267.103644][ T7411] Cannot create hsr debugfs directory [ 268.310962][ T10] usb 2-1: new low-speed USB device number 10 using dummy_hcd [ 268.511375][ T10] usb 2-1: config index 0 descriptor too short (expected 1307, got 27) [ 268.649006][ T10] usb 2-1: config 0 has an invalid interface number: 0 but max is -1 [ 268.658295][ T10] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 268.671397][ T10] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 268.673691][ T7411] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 268.684889][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 268.712379][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 268.724631][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 268.752930][ T7411] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 268.766809][ T10] usb 2-1: string descriptor 0 read error: -22 [ 268.839056][ T10] usb 2-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 268.901387][ T7411] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 268.958602][ T7411] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 268.973485][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.016336][ T10] usb 2-1: config 0 descriptor?? [ 269.050217][ T10] hub 2-1:0.0: bad descriptor, ignoring hub [ 269.066147][ T10] hub 2-1:0.0: probe with driver hub failed with error -5 [ 269.134462][ T10] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input13 [ 269.383423][ T7411] 8021q: adding VLAN 0 to HW filter on device bond0 [ 269.429143][ T979] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 270.024796][ T7411] 8021q: adding VLAN 0 to HW filter on device team0 [ 270.128020][ T5920] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 270.160996][ T6970] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.168586][ T6970] bridge0: port 1(bridge_slave_0) entered forwarding state [ 270.221019][ T6970] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.228775][ T6970] bridge0: port 2(bridge_slave_1) entered forwarding state [ 270.387882][ T7655] netlink: 16 bytes leftover after parsing attributes in process `syz.0.401'. [ 270.398886][ T979] usb 4-1: device descriptor read/64, error -71 [ 270.418987][ T5920] usb 5-1: Using ep0 maxpacket: 16 [ 270.481217][ T5920] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 270.510451][ T5920] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 270.534412][ T5898] usb 2-1: USB disconnect, device number 10 [ 270.544864][ T5920] usb 5-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 270.654557][ T5920] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.680570][ T5920] usb 5-1: config 0 descriptor?? [ 270.749401][ T979] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 270.890140][ T979] usb 4-1: device descriptor read/64, error -71 [ 271.176857][ T979] usb usb4-port1: attempt power cycle [ 273.033612][ T979] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 273.364478][ T979] usb 4-1: device descriptor read/8, error -71 [ 273.398478][ T5920] usbhid 5-1:0.0: can't add hid device: -71 [ 273.421009][ T5920] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 273.447821][ T5920] usb 5-1: USB disconnect, device number 14 [ 273.558336][ T7670] netlink: 20 bytes leftover after parsing attributes in process `syz.3.405'. [ 274.082002][ T7678] netlink: 12 bytes leftover after parsing attributes in process `syz.4.407'. [ 275.005758][ T7411] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 276.055323][ T7690] binder: 7682:7690 unknown command 0 [ 276.088198][ T7690] binder: 7682:7690 ioctl c0306201 2000000003c0 returned -22 [ 276.546724][ T7705] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 276.557861][ T7705] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 277.435551][ T7707] delete_channel: no stack [ 277.699012][ T7662] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 277.713995][ T7411] veth0_vlan: entered promiscuous mode [ 277.838775][ T7411] veth1_vlan: entered promiscuous mode [ 277.918394][ T7662] usb 5-1: device descriptor read/64, error -71 [ 278.484656][ T7725] netlink: 12 bytes leftover after parsing attributes in process `syz.3.419'. [ 278.567613][ T7720] netlink: 4 bytes leftover after parsing attributes in process `syz.1.418'. [ 278.899427][ T7662] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 279.365757][ T7411] veth0_macvtap: entered promiscuous mode [ 279.418986][ T7662] usb 5-1: device descriptor read/64, error -71 [ 279.457373][ T7411] veth1_macvtap: entered promiscuous mode [ 279.557716][ T7662] usb usb5-port1: attempt power cycle [ 279.846273][ T7411] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 279.920787][ T7740] [U] [ 280.400464][ T7411] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 280.476228][ T7411] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.506832][ T7411] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.537592][ T7411] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.558124][ T7411] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.395567][ T7750] loop9: detected capacity change from 0 to 7 [ 281.405131][ T7750] buffer_io_error: 4 callbacks suppressed [ 281.405169][ T7750] Buffer I/O error on dev loop9, logical block 0, async page read [ 281.419815][ T7750] Buffer I/O error on dev loop9, logical block 0, async page read [ 281.428779][ T7750] Buffer I/O error on dev loop9, logical block 0, async page read [ 281.437435][ T7750] Buffer I/O error on dev loop9, logical block 0, async page read [ 281.446359][ T7750] Buffer I/O error on dev loop9, logical block 0, async page read [ 281.455478][ T7750] Buffer I/O error on dev loop9, logical block 0, async page read [ 281.464098][ T7750] Buffer I/O error on dev loop9, logical block 0, async page read [ 281.472388][ T7750] ldm_validate_partition_table(): Disk read failed. [ 281.479438][ T7750] Buffer I/O error on dev loop9, logical block 0, async page read [ 281.489943][ T7750] Buffer I/O error on dev loop9, logical block 0, async page read [ 281.498507][ T7750] Buffer I/O error on dev loop9, logical block 0, async page read [ 281.507469][ T7750] Dev loop9: unable to read RDB block 0 [ 281.514826][ T7750] loop9: unable to read partition table [ 281.521740][ T7750] loop9: partition table beyond EOD, truncated [ 281.528179][ T7750] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 281.528179][ T7750] ) failed (rc=-5) [ 282.089017][ T6970] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 282.150304][ T6970] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 283.525947][ T7755] delete_channel: no stack [ 283.574651][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 283.604183][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 283.645651][ T5154] Bluetooth: hci4: command 0x0406 tx timeout [ 284.294602][ T7760] delete_channel: no stack [ 285.788671][ T7779] netlink: 20 bytes leftover after parsing attributes in process `syz.4.434'. [ 291.386861][ T7800] loop9: detected capacity change from 0 to 7 [ 291.394070][ T7800] buffer_io_error: 4 callbacks suppressed [ 291.394087][ T7800] Buffer I/O error on dev loop9, logical block 0, async page read [ 291.409052][ T7800] Buffer I/O error on dev loop9, logical block 0, async page read [ 291.419000][ T7800] Buffer I/O error on dev loop9, logical block 0, async page read [ 291.427023][ T7800] Buffer I/O error on dev loop9, logical block 0, async page read [ 291.435112][ T7800] Buffer I/O error on dev loop9, logical block 0, async page read [ 291.443161][ T7800] Buffer I/O error on dev loop9, logical block 0, async page read [ 291.451478][ T7800] Buffer I/O error on dev loop9, logical block 0, async page read [ 291.459816][ T7800] ldm_validate_partition_table(): Disk read failed. [ 291.466718][ T7800] Buffer I/O error on dev loop9, logical block 0, async page read [ 291.475253][ T7800] Buffer I/O error on dev loop9, logical block 0, async page read [ 291.489440][ T7800] Buffer I/O error on dev loop9, logical block 0, async page read [ 291.497827][ T7800] Dev loop9: unable to read RDB block 0 [ 291.503875][ T7800] loop9: unable to read partition table [ 291.510045][ T7800] loop9: partition table beyond EOD, truncated [ 291.517858][ T7800] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 291.517858][ T7800] ) failed (rc=-5) [ 291.535769][ T7799] [U] [ 292.036996][ T7808] tipc: Enabling of bearer rejected, failed to enable media [ 292.690963][ T7809] delete_channel: no stack [ 297.996631][ T7860] [U] [ 299.443257][ T7856] delete_channel: no stack [ 299.538417][ T7869] loop9: detected capacity change from 0 to 7 [ 299.548858][ T7869] buffer_io_error: 4 callbacks suppressed [ 299.548878][ T7869] Buffer I/O error on dev loop9, logical block 0, async page read [ 299.564413][ T7869] Buffer I/O error on dev loop9, logical block 0, async page read [ 299.573334][ T7869] Buffer I/O error on dev loop9, logical block 0, async page read [ 299.582126][ T7869] Buffer I/O error on dev loop9, logical block 0, async page read [ 299.591251][ T7869] Buffer I/O error on dev loop9, logical block 0, async page read [ 299.600139][ T7869] Buffer I/O error on dev loop9, logical block 0, async page read [ 299.610181][ T7869] Buffer I/O error on dev loop9, logical block 0, async page read [ 299.618661][ T7869] ldm_validate_partition_table(): Disk read failed. [ 299.626982][ T7869] Buffer I/O error on dev loop9, logical block 0, async page read [ 299.636116][ T7869] Buffer I/O error on dev loop9, logical block 0, async page read [ 299.645604][ T7869] Buffer I/O error on dev loop9, logical block 0, async page read [ 299.654606][ T7869] Dev loop9: unable to read RDB block 0 [ 299.662575][ T7869] loop9: unable to read partition table [ 299.669765][ T7869] loop9: partition table beyond EOD, truncated [ 299.676119][ T7869] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 299.676119][ T7869] ) failed (rc=-5) [ 300.618963][ T5954] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 301.392976][ T7883] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check. [ 301.509179][ T5954] usb 1-1: device descriptor read/64, error -71 [ 303.375532][ T5954] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 304.471990][ T7908] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 304.483636][ T7908] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 305.348819][ T5840] Bluetooth: hci5: command tx timeout [ 306.731912][ T7915] netlink: 20 bytes leftover after parsing attributes in process `syz.3.471'. [ 308.802477][ T7929] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 309.429550][ T7942] [U] [ 309.875006][ T7941] bond0: (slave bond_slave_0): Error -28 calling ndo_bpf [ 310.100559][ T7945] binder: Unknown parameter 'eam' [ 310.335609][ T7951] netlink: 4 bytes leftover after parsing attributes in process `syz.0.480'. [ 310.838578][ T7954] netlink: 'syz.5.482': attribute type 10 has an invalid length. [ 310.961166][ T7954] team0: Cannot enslave team device to itself [ 313.008491][ T7976] netlink: 20 bytes leftover after parsing attributes in process `syz.4.488'. [ 315.349975][ T7991] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 317.518243][ T8006] netlink: 4 bytes leftover after parsing attributes in process `syz.3.496'. [ 318.049252][ T8013] netlink: 20 bytes leftover after parsing attributes in process `syz.4.493'. [ 320.880258][ T30] kauditd_printk_skb: 43 callbacks suppressed [ 320.880277][ T30] audit: type=1326 audit(1755627640.039:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8027 comm="syz.4.501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f366318ebe9 code=0x7ffc0000 [ 320.912133][ T30] audit: type=1326 audit(1755627640.039:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8027 comm="syz.4.501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=37 compat=0 ip=0x7f366318ebe9 code=0x7ffc0000 [ 320.936543][ C1] vkms_vblank_simulate: vblank timer overrun [ 320.946864][ T30] audit: type=1326 audit(1755627640.039:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8027 comm="syz.4.501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f366318ebe9 code=0x7ffc0000 [ 320.968979][ C1] vkms_vblank_simulate: vblank timer overrun [ 321.702325][ T30] audit: type=1326 audit(1755627640.039:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8027 comm="syz.4.501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f366318ebe9 code=0x7ffc0000 [ 321.834187][ T30] audit: type=1326 audit(1755627640.039:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8027 comm="syz.4.501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f366318ebe9 code=0x7ffc0000 [ 321.859962][ T30] audit: type=1326 audit(1755627640.039:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8027 comm="syz.4.501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=105 compat=0 ip=0x7f366318ebe9 code=0x7ffc0000 [ 321.881476][ C1] vkms_vblank_simulate: vblank timer overrun [ 321.936983][ T8041] XFS (nullb0): Invalid superblock magic number [ 321.972606][ T30] audit: type=1326 audit(1755627640.049:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8027 comm="syz.4.501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f366318ebe9 code=0x7ffc0000 [ 322.058958][ T5920] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 322.088116][ T30] audit: type=1326 audit(1755627640.049:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8027 comm="syz.4.501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=251 compat=0 ip=0x7f366318ebe9 code=0x7ffc0000 [ 322.172492][ T30] audit: type=1326 audit(1755627640.049:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8027 comm="syz.4.501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f366318ebe9 code=0x7ffc0000 [ 322.202965][ T30] audit: type=1326 audit(1755627640.049:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8027 comm="syz.4.501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f366318ebe9 code=0x7ffc0000 [ 322.303259][ T5855] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 322.431131][ T5920] usb 1-1: device descriptor read/64, error -71 [ 322.489174][ T8068] netlink: 4 bytes leftover after parsing attributes in process `syz.5.509'. [ 322.518450][ T24] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 322.596161][ T8068] hsr_slave_1 (unregistering): left promiscuous mode [ 322.633876][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.642191][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 323.108875][ T5855] usb 2-1: Using ep0 maxpacket: 32 [ 323.114306][ T5920] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 323.125577][ T5855] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 323.147397][ T5855] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 323.168971][ T5855] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 323.178434][ T5855] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.194135][ T5855] usb 2-1: config 0 descriptor?? [ 323.203051][ T5855] hub 2-1:0.0: USB hub found [ 323.405821][ T24] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 323.417863][ T5855] hub 2-1:0.0: config failed, can't read hub descriptor (err -90) [ 323.448699][ T24] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 323.461621][ T5920] usb 1-1: device descriptor read/64, error -71 [ 323.473431][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 323.481139][ T24] usb 5-1: New USB device found, idVendor=28bd, idProduct=0074, bcdDevice= 0.00 [ 323.819102][ T5920] usb usb1-port1: attempt power cycle [ 324.203997][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.518291][ T24] usb 5-1: config 0 descriptor?? [ 324.579693][ T5920] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 324.639376][ T8062] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 324.875010][ T5920] usb 1-1: device descriptor read/8, error -71 [ 324.892448][ T5855] usbhid 2-1:0.0: can't add hid device: -71 [ 324.908058][ T5855] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 324.951397][ T5855] usb 2-1: USB disconnect, device number 11 [ 325.056474][ T8083] netlink: 12 bytes leftover after parsing attributes in process `syz.0.512'. [ 325.750158][ T24] usbhid 5-1:0.0: can't add hid device: -71 [ 325.756456][ T24] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 325.780025][ T24] usb 5-1: USB disconnect, device number 18 [ 327.708205][ T8094] FAULT_INJECTION: forcing a failure. [ 327.708205][ T8094] name failslab, interval 1, probability 0, space 0, times 0 [ 327.721167][ T8094] CPU: 1 UID: 0 PID: 8094 Comm: syz.0.515 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 327.721197][ T8094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 327.721216][ T8094] Call Trace: [ 327.721226][ T8094] [ 327.721236][ T8094] dump_stack_lvl+0x189/0x250 [ 327.721271][ T8094] ? __pfx____ratelimit+0x10/0x10 [ 327.721297][ T8094] ? __pfx_dump_stack_lvl+0x10/0x10 [ 327.721322][ T8094] ? __pfx__printk+0x10/0x10 [ 327.721358][ T8094] ? __pfx___might_resched+0x10/0x10 [ 327.721382][ T8094] ? fs_reclaim_acquire+0x7d/0x100 [ 327.721415][ T8094] should_fail_ex+0x414/0x560 [ 327.721445][ T8094] should_failslab+0xa8/0x100 [ 327.721471][ T8094] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 327.721493][ T8094] ? lockdep_hardirqs_on+0x9c/0x150 [ 327.721516][ T8094] ? __alloc_skb+0x112/0x2d0 [ 327.721552][ T8094] __alloc_skb+0x112/0x2d0 [ 327.721588][ T8094] sock_wmalloc+0xb2/0x130 [ 327.721613][ T8094] l2tp_ip_sendmsg+0x1bb/0x1630 [ 327.721643][ T8094] ? inet_sendmsg+0x2f4/0x370 [ 327.721667][ T8094] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 327.721695][ T8094] __sock_sendmsg+0x19c/0x270 [ 327.721725][ T8094] __sys_sendto+0x3bd/0x520 [ 327.721759][ T8094] ? __pfx___sys_sendto+0x10/0x10 [ 327.721788][ T8094] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 327.721960][ T8094] ? ksys_write+0x22a/0x250 [ 327.722021][ T8094] ? __pfx_ksys_write+0x10/0x10 [ 327.722041][ T8094] ? rcu_is_watching+0x15/0xb0 [ 327.722072][ T8094] __x64_sys_sendto+0xde/0x100 [ 327.722109][ T8094] do_syscall_64+0xfa/0x3b0 [ 327.722133][ T8094] ? lockdep_hardirqs_on+0x9c/0x150 [ 327.722162][ T8094] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.722184][ T8094] ? clear_bhb_loop+0x60/0xb0 [ 327.722211][ T8094] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.722233][ T8094] RIP: 0033:0x7f1893d8ebe9 [ 327.722263][ T8094] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 327.722282][ T8094] RSP: 002b:00007f1894c14038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 327.722306][ T8094] RAX: ffffffffffffffda RBX: 00007f1893fb6180 RCX: 00007f1893d8ebe9 [ 327.722322][ T8094] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 327.722334][ T8094] RBP: 00007f1894c14090 R08: 0000200000000100 R09: 0000000000000010 [ 327.722349][ T8094] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 327.722361][ T8094] R13: 00007f1893fb6218 R14: 00007f1893fb6180 R15: 00007ffda44b44d8 [ 327.722396][ T8094] [ 329.460900][ T9] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 330.138914][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 330.148163][ T9] usb 6-1: config 0 has an invalid interface number: 205 but max is 1 [ 330.169792][ T9] usb 6-1: config 0 has an invalid interface number: 243 but max is 1 [ 330.178286][ T9] usb 6-1: config 0 has no interface number 0 [ 330.185356][ T9] usb 6-1: config 0 has no interface number 1 [ 330.951543][ T9] usb 6-1: config 0 interface 243 altsetting 250 bulk endpoint 0xF has invalid maxpacket 1023 [ 330.976750][ T9] usb 6-1: config 0 interface 243 altsetting 250 has a duplicate endpoint with address 0x2, skipping [ 330.989527][ T9] usb 6-1: config 0 interface 243 altsetting 250 has an endpoint descriptor with address 0xCE, changing to 0x8E [ 331.018917][ T9] usb 6-1: config 0 interface 243 altsetting 250 endpoint 0x8E has an invalid bInterval 180, changing to 11 [ 331.061317][ T9] usb 6-1: config 0 interface 243 altsetting 250 endpoint 0x8E has invalid maxpacket 16902, setting to 1024 [ 331.094661][ T9] usb 6-1: config 0 interface 243 altsetting 250 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 331.148999][ T9] usb 6-1: config 0 interface 205 has no altsetting 0 [ 331.159159][ T9] usb 6-1: config 0 interface 243 has no altsetting 0 [ 331.195012][ T9] usb 6-1: New USB device found, idVendor=0403, idProduct=f06c, bcdDevice=57.21 [ 331.213454][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.309009][ T8127] netlink: 20 bytes leftover after parsing attributes in process `syz.4.524'. [ 331.358880][ T9] usb 6-1: Product: syz [ 331.363674][ T9] usb 6-1: Manufacturer: syz [ 331.368422][ T9] usb 6-1: SerialNumber: syz [ 331.376571][ T9] usb 6-1: config 0 descriptor?? [ 331.442478][ T9] usb 6-1: can't set config #0, error -71 [ 331.459238][ T9] usb 6-1: USB disconnect, device number 2 [ 337.948831][ T8163] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 338.516410][ T8166] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !寿$ULvyآDUDw}z [ 340.282722][ T8183] netlink: 20 bytes leftover after parsing attributes in process `syz.4.538'. [ 342.998137][ T8203] binder: 8202:8203 unknown command 0 [ 343.009999][ T8203] binder: 8202:8203 ioctl c0306201 200000000080 returned -22 [ 343.020139][ T8203] binder: BINDER_SET_CONTEXT_MGR already set [ 343.028007][ T8203] binder: 8202:8203 ioctl 4018620d 200000000040 returned -16 [ 344.484600][ T8223] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 346.029568][ T8245] FAULT_INJECTION: forcing a failure. [ 346.029568][ T8245] name failslab, interval 1, probability 0, space 0, times 0 [ 346.052544][ T8245] CPU: 0 UID: 0 PID: 8245 Comm: syz.3.552 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 346.052573][ T8245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 346.052586][ T8245] Call Trace: [ 346.052597][ T8245] [ 346.052606][ T8245] dump_stack_lvl+0x189/0x250 [ 346.052639][ T8245] ? __pfx____ratelimit+0x10/0x10 [ 346.052665][ T8245] ? __pfx_dump_stack_lvl+0x10/0x10 [ 346.052690][ T8245] ? __pfx__printk+0x10/0x10 [ 346.052723][ T8245] ? trace_fib_table_lookup+0x85/0x200 [ 346.052767][ T8245] should_fail_ex+0x414/0x560 [ 346.052798][ T8245] should_failslab+0xa8/0x100 [ 346.052826][ T8245] kmem_cache_alloc_noprof+0x73/0x3c0 [ 346.052847][ T8245] ? dst_alloc+0x105/0x170 [ 346.052867][ T8245] ? fib_lookup+0x76/0x440 [ 346.052892][ T8245] dst_alloc+0x105/0x170 [ 346.052919][ T8245] ip_route_output_key_hash_rcu+0x1482/0x23a0 [ 346.052956][ T8245] ? ip_route_output_key_hash+0xde/0x2e0 [ 346.052982][ T8245] ip_route_output_key_hash+0x1b9/0x2e0 [ 346.053006][ T8245] ? __lock_acquire+0xab9/0xd20 [ 346.053028][ T8245] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 346.053074][ T8245] ip_route_output_flow+0x2a/0x150 [ 346.053114][ T8245] l2tp_ip_sendmsg+0xdeb/0x1630 [ 346.053140][ T8245] ? l2tp_ip_sendmsg+0x43e/0x1630 [ 346.053174][ T8245] __sock_sendmsg+0x19c/0x270 [ 346.053206][ T8245] __sys_sendto+0x3bd/0x520 [ 346.053241][ T8245] ? __pfx___sys_sendto+0x10/0x10 [ 346.053269][ T8245] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 346.053311][ T8245] ? __fget_files+0x3a0/0x420 [ 346.053357][ T8245] ? ksys_write+0x22a/0x250 [ 346.053375][ T8245] ? irq_work_single+0x1ac/0x240 [ 346.053411][ T8245] ? __pfx_ksys_write+0x10/0x10 [ 346.053439][ T8245] __x64_sys_sendto+0xde/0x100 [ 346.053475][ T8245] do_syscall_64+0xfa/0x3b0 [ 346.053502][ T8245] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.053524][ T8245] ? asm_sysvec_irq_work+0x1a/0x20 [ 346.053545][ T8245] ? clear_bhb_loop+0x60/0xb0 [ 346.053572][ T8245] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.053594][ T8245] RIP: 0033:0x7f720278ebe9 [ 346.053614][ T8245] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 346.053633][ T8245] RSP: 002b:00007f72035fa038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 346.053656][ T8245] RAX: ffffffffffffffda RBX: 00007f72029b6180 RCX: 00007f720278ebe9 [ 346.053671][ T8245] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 346.053684][ T8245] RBP: 00007f72035fa090 R08: 0000200000000100 R09: 0000000000000010 [ 346.053698][ T8245] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 346.053711][ T8245] R13: 00007f72029b6218 R14: 00007f72029b6180 R15: 00007ffd8917d948 [ 346.053746][ T8245] [ 346.330286][ C0] vkms_vblank_simulate: vblank timer overrun [ 349.520921][ T8277] netlink: 20 bytes leftover after parsing attributes in process `syz.0.561'. [ 351.002340][ T8287] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 353.065791][ T8318] FAULT_INJECTION: forcing a failure. [ 353.065791][ T8318] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 353.089748][ T8318] CPU: 1 UID: 0 PID: 8318 Comm: syz.3.571 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 353.089777][ T8318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 353.089792][ T8318] Call Trace: [ 353.089801][ T8318] [ 353.089810][ T8318] dump_stack_lvl+0x189/0x250 [ 353.089842][ T8318] ? __pfx____ratelimit+0x10/0x10 [ 353.089866][ T8318] ? __pfx_dump_stack_lvl+0x10/0x10 [ 353.089891][ T8318] ? __pfx__printk+0x10/0x10 [ 353.089920][ T8318] ? __might_fault+0xb0/0x130 [ 353.089955][ T8318] should_fail_ex+0x414/0x560 [ 353.089984][ T8318] _copy_from_iter+0x1db/0x16f0 [ 353.090016][ T8318] ? rcu_is_watching+0x15/0xb0 [ 353.090044][ T8318] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 353.090069][ T8318] ? __pfx__copy_from_iter+0x10/0x10 [ 353.090098][ T8318] ? __build_skb_around+0x257/0x3e0 [ 353.090134][ T8318] ? netlink_sendmsg+0x642/0xb30 [ 353.090164][ T8318] ? skb_put+0x11b/0x210 [ 353.090199][ T8318] netlink_sendmsg+0x6b2/0xb30 [ 353.090241][ T8318] ? __pfx_netlink_sendmsg+0x10/0x10 [ 353.090282][ T8318] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 353.090305][ T8318] ? __pfx_netlink_sendmsg+0x10/0x10 [ 353.090337][ T8318] __sock_sendmsg+0x21c/0x270 [ 353.090376][ T8318] ____sys_sendmsg+0x505/0x830 [ 353.090424][ T8318] ? __pfx_____sys_sendmsg+0x10/0x10 [ 353.090469][ T8318] ? import_iovec+0x74/0xa0 [ 353.090504][ T8318] ___sys_sendmsg+0x21f/0x2a0 [ 353.090541][ T8318] ? __pfx____sys_sendmsg+0x10/0x10 [ 353.090616][ T8318] ? __fget_files+0x2a/0x420 [ 353.090641][ T8318] ? __fget_files+0x3a0/0x420 [ 353.090678][ T8318] __x64_sys_sendmsg+0x19b/0x260 [ 353.090716][ T8318] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 353.090759][ T8318] ? __pfx_ksys_write+0x10/0x10 [ 353.090777][ T8318] ? rcu_is_watching+0x15/0xb0 [ 353.090806][ T8318] ? do_syscall_64+0xbe/0x3b0 [ 353.090832][ T8318] do_syscall_64+0xfa/0x3b0 [ 353.090856][ T8318] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.090875][ T8318] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 353.090891][ T8318] ? clear_bhb_loop+0x60/0xb0 [ 353.090911][ T8318] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.090928][ T8318] RIP: 0033:0x7f720278ebe9 [ 353.090943][ T8318] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 353.090957][ T8318] RSP: 002b:00007f72035fa038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 353.090976][ T8318] RAX: ffffffffffffffda RBX: 00007f72029b6180 RCX: 00007f720278ebe9 [ 353.090988][ T8318] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a [ 353.090998][ T8318] RBP: 00007f72035fa090 R08: 0000000000000000 R09: 0000000000000000 [ 353.091008][ T8318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 353.091018][ T8318] R13: 00007f72029b6218 R14: 00007f72029b6180 R15: 00007ffd8917d948 [ 353.091044][ T8318] [ 358.639905][ T8351] loop9: detected capacity change from 0 to 7 [ 358.702745][ T8356] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 358.796560][ T8360] netlink: 12 bytes leftover after parsing attributes in process `syz.4.578'. [ 358.838449][ T8333] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 359.203520][ T8351] Dev loop9: unable to read RDB block 7 [ 359.232734][ T8351] loop9: unable to read partition table [ 359.238683][ T8351] loop9: partition table beyond EOD, truncated [ 359.246426][ T8363] netlink: 20 bytes leftover after parsing attributes in process `syz.1.581'. [ 359.255849][ T8351] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 360.547611][ T8376] TCP: TCP_TX_DELAY enabled [ 360.553649][ T8376] program syz.5.585 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 361.545128][ T8378] netlink: 16 bytes leftover after parsing attributes in process `syz.1.584'. [ 363.469381][ T8391] loop9: detected capacity change from 0 to 7 [ 363.476494][ T8391] buffer_io_error: 4 callbacks suppressed [ 363.476518][ T8391] Buffer I/O error on dev loop9, logical block 0, async page read [ 363.493056][ T8391] Buffer I/O error on dev loop9, logical block 0, async page read [ 363.501455][ T8391] Buffer I/O error on dev loop9, logical block 0, async page read [ 363.511790][ T8391] Buffer I/O error on dev loop9, logical block 0, async page read [ 363.520300][ T8391] Buffer I/O error on dev loop9, logical block 0, async page read [ 363.528336][ T8391] Buffer I/O error on dev loop9, logical block 0, async page read [ 363.540720][ T8391] Buffer I/O error on dev loop9, logical block 0, async page read [ 363.548664][ T8391] ldm_validate_partition_table(): Disk read failed. [ 363.555564][ T8391] Buffer I/O error on dev loop9, logical block 0, async page read [ 363.563772][ T8391] Buffer I/O error on dev loop9, logical block 0, async page read [ 363.571807][ T8391] Buffer I/O error on dev loop9, logical block 0, async page read [ 363.679098][ T8391] Dev loop9: unable to read RDB block 0 [ 363.685325][ T8391] loop9: unable to read partition table [ 363.691515][ T8391] loop9: partition table beyond EOD, truncated [ 363.697829][ T8391] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 363.697829][ T8391] ) failed (rc=-5) [ 364.268339][ T8389] netlink: 'syz.3.589': attribute type 10 has an invalid length. [ 364.276761][ T8389] netlink: 40 bytes leftover after parsing attributes in process `syz.3.589'. [ 364.320445][ T8389] batman_adv: batadv0: Adding interface: virt_wifi0 [ 364.333103][ T8389] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 364.360085][ T8389] batman_adv: batadv0: Interface activated: virt_wifi0 [ 364.669460][ T8394] tmpfs: Bad value for 'mpol' [ 364.676817][ T8394] tmpfs: Bad value for 'mpol' [ 365.533360][ T8400] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 366.920528][ T8402] FAULT_INJECTION: forcing a failure. [ 366.920528][ T8402] name failslab, interval 1, probability 0, space 0, times 0 [ 367.088139][ T8402] CPU: 0 UID: 0 PID: 8402 Comm: syz.1.592 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 367.088171][ T8402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 367.088191][ T8402] Call Trace: [ 367.088204][ T8402] [ 367.088214][ T8402] dump_stack_lvl+0x189/0x250 [ 367.088246][ T8402] ? irqentry_exit+0x74/0x90 [ 367.088272][ T8402] ? __pfx_dump_stack_lvl+0x10/0x10 [ 367.088319][ T8402] should_fail_ex+0x414/0x560 [ 367.088349][ T8402] should_failslab+0xa8/0x100 [ 367.088376][ T8402] __kmalloc_node_track_caller_noprof+0xcc/0x4e0 [ 367.088400][ T8402] ? kobject_set_name_vargs+0x61/0x110 [ 367.088434][ T8402] kvasprintf+0xdc/0x190 [ 367.088479][ T8402] ? __pfx_kvasprintf+0x10/0x10 [ 367.088522][ T8402] ? kvasprintf_const+0xe1/0x240 [ 367.088557][ T8402] kobject_set_name_vargs+0x61/0x110 [ 367.088588][ T8402] dev_set_name+0xd4/0x120 [ 367.088621][ T8402] ? __pfx_dev_set_name+0x10/0x10 [ 367.088649][ T8402] ? __init_waitqueue_head+0xa9/0x150 [ 367.088686][ T8402] ? device_initialize+0x24b/0x440 [ 367.088722][ T8402] wakeup_source_sysfs_add+0x185/0x280 [ 367.088764][ T8402] wakeup_source_register+0x18a/0x380 [ 367.088799][ T8402] ep_modify+0x2c9/0xb20 [ 367.088824][ T8402] ? __pfx_ep_modify+0x10/0x10 [ 367.088844][ T8402] ? rcu_is_watching+0x15/0xb0 [ 367.088870][ T8402] ? __fget_files+0x2a/0x420 [ 367.088893][ T8402] ? safesetid_security_capable+0xa9/0x1a0 [ 367.088918][ T8402] ? bpf_lsm_capable+0x9/0x20 [ 367.088955][ T8402] do_epoll_ctl+0x6b5/0xe90 [ 367.088987][ T8402] __x64_sys_epoll_ctl+0x163/0x1a0 [ 367.089014][ T8402] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 367.089034][ T8402] ? rcu_is_watching+0x15/0xb0 [ 367.089064][ T8402] ? do_syscall_64+0xbe/0x3b0 [ 367.089093][ T8402] do_syscall_64+0xfa/0x3b0 [ 367.089117][ T8402] ? lockdep_hardirqs_on+0x9c/0x150 [ 367.089140][ T8402] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.089162][ T8402] ? clear_bhb_loop+0x60/0xb0 [ 367.089190][ T8402] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.089210][ T8402] RIP: 0033:0x7f371c78ebe9 [ 367.089228][ T8402] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 367.089245][ T8402] RSP: 002b:00007f371d6a3038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 367.089267][ T8402] RAX: ffffffffffffffda RBX: 00007f371c9b6090 RCX: 00007f371c78ebe9 [ 367.089284][ T8402] RDX: 000000000000000a RSI: 0000000000000003 RDI: 0000000000000008 [ 367.089297][ T8402] RBP: 00007f371d6a3090 R08: 0000000000000000 R09: 0000000000000000 [ 367.089310][ T8402] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000001 [ 367.089324][ T8402] R13: 00007f371c9b6128 R14: 00007f371c9b6090 R15: 00007ffe1ae5aa58 [ 367.089360][ T8402] [ 367.648475][ T8406] FAULT_INJECTION: forcing a failure. [ 367.648475][ T8406] name failslab, interval 1, probability 0, space 0, times 0 [ 367.661819][ T8406] CPU: 0 UID: 0 PID: 8406 Comm: syz.0.593 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 367.661847][ T8406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 367.661861][ T8406] Call Trace: [ 367.661873][ T8406] [ 367.661884][ T8406] dump_stack_lvl+0x189/0x250 [ 367.661915][ T8406] ? __pfx____ratelimit+0x10/0x10 [ 367.661940][ T8406] ? __pfx_dump_stack_lvl+0x10/0x10 [ 367.661966][ T8406] ? __pfx__printk+0x10/0x10 [ 367.662001][ T8406] ? ref_tracker_alloc+0x318/0x460 [ 367.662028][ T8406] should_fail_ex+0x414/0x560 [ 367.662055][ T8406] should_failslab+0xa8/0x100 [ 367.662080][ T8406] kmem_cache_alloc_noprof+0x73/0x3c0 [ 367.662100][ T8406] ? skb_clone+0x212/0x3a0 [ 367.662122][ T8406] skb_clone+0x212/0x3a0 [ 367.662141][ T8406] __netlink_deliver_tap+0x404/0x850 [ 367.662178][ T8406] ? netlink_deliver_tap+0x2e/0x1b0 [ 367.662203][ T8406] netlink_deliver_tap+0x19c/0x1b0 [ 367.662229][ T8406] netlink_unicast+0x730/0x8e0 [ 367.662260][ T8406] netlink_sendmsg+0x805/0xb30 [ 367.662284][ T8406] ? rcu_is_watching+0x15/0xb0 [ 367.662310][ T8406] ? __pfx_netlink_sendmsg+0x10/0x10 [ 367.662344][ T8406] ? irqentry_exit+0x74/0x90 [ 367.662365][ T8406] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 367.662381][ T8406] ? __pfx_netlink_sendmsg+0x10/0x10 [ 367.662406][ T8406] __sock_sendmsg+0x21c/0x270 [ 367.662430][ T8406] ____sys_sendmsg+0x505/0x830 [ 367.662462][ T8406] ? __pfx_____sys_sendmsg+0x10/0x10 [ 367.662497][ T8406] ? import_iovec+0x74/0xa0 [ 367.662524][ T8406] ___sys_sendmsg+0x21f/0x2a0 [ 367.662553][ T8406] ? __pfx____sys_sendmsg+0x10/0x10 [ 367.662618][ T8406] ? rcu_read_unlock_special+0x3fe/0x4c0 [ 367.662668][ T8406] ? __fget_files+0x2a/0x420 [ 367.662687][ T8406] ? __fget_files+0x3a0/0x420 [ 367.662716][ T8406] __x64_sys_sendmsg+0x19b/0x260 [ 367.662746][ T8406] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 367.662771][ T8406] ? irqentry_exit+0x74/0x90 [ 367.662804][ T8406] ? do_syscall_64+0xbe/0x3b0 [ 367.662827][ T8406] do_syscall_64+0xfa/0x3b0 [ 367.662847][ T8406] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.662864][ T8406] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 367.662880][ T8406] ? clear_bhb_loop+0x60/0xb0 [ 367.662901][ T8406] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.662918][ T8406] RIP: 0033:0x7f1893d8ebe9 [ 367.662933][ T8406] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 367.662948][ T8406] RSP: 002b:00007f1894c14038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 367.662967][ T8406] RAX: ffffffffffffffda RBX: 00007f1893fb6180 RCX: 00007f1893d8ebe9 [ 367.662979][ T8406] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a [ 367.662990][ T8406] RBP: 00007f1894c14090 R08: 0000000000000000 R09: 0000000000000000 [ 367.663001][ T8406] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 367.663011][ T8406] R13: 00007f1893fb6218 R14: 00007f1893fb6180 R15: 00007ffda44b44d8 [ 367.663039][ T8406] [ 368.655463][ T8408] netlink: 20 bytes leftover after parsing attributes in process `syz.3.595'. [ 369.009268][ T24] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 371.190132][ T5840] Bluetooth: hci5: command 0x0406 tx timeout [ 371.228915][ T24] usb 5-1: device descriptor read/64, error -71 [ 371.715060][ T24] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 372.005647][ T8443] [U] [ 373.734936][ T8455] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 374.932217][ T8473] netlink: 20 bytes leftover after parsing attributes in process `syz.0.609'. [ 377.731054][ T8498] loop9: detected capacity change from 0 to 7 [ 377.769419][ T8498] buffer_io_error: 4 callbacks suppressed [ 377.769580][ T8498] Buffer I/O error on dev loop9, logical block 0, async page read [ 377.789748][ T8498] Buffer I/O error on dev loop9, logical block 0, async page read [ 377.801346][ T8498] Buffer I/O error on dev loop9, logical block 0, async page read [ 377.818872][ T8498] Buffer I/O error on dev loop9, logical block 0, async page read [ 377.928933][ T8498] Buffer I/O error on dev loop9, logical block 0, async page read [ 377.940451][ T8498] Buffer I/O error on dev loop9, logical block 0, async page read [ 377.953596][ T8498] Buffer I/O error on dev loop9, logical block 0, async page read [ 377.966347][ T8498] ldm_validate_partition_table(): Disk read failed. [ 377.975036][ T8498] Buffer I/O error on dev loop9, logical block 0, async page read [ 377.988524][ T8498] Buffer I/O error on dev loop9, logical block 0, async page read [ 378.000492][ T8498] Buffer I/O error on dev loop9, logical block 0, async page read [ 378.017355][ T8498] Dev loop9: unable to read RDB block 0 [ 378.192904][ T8498] loop9: unable to read partition table [ 378.208331][ T8498] loop9: partition table beyond EOD, truncated [ 378.215801][ T8498] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 378.215801][ T8498] ) failed (rc=-5) [ 378.937876][ T5855] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 380.340345][ T8522] binfmt_misc: register: failed to install interpreter file ./file0 [ 381.262467][ T8528] netlink: 20 bytes leftover after parsing attributes in process `syz.5.623'. [ 383.964344][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 383.972948][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.939404][ T8561] loop9: detected capacity change from 0 to 7 [ 384.947695][ T8561] buffer_io_error: 4 callbacks suppressed [ 384.947712][ T8561] Buffer I/O error on dev loop9, logical block 0, async page read [ 384.961628][ T8561] Buffer I/O error on dev loop9, logical block 0, async page read [ 384.969686][ T8561] Buffer I/O error on dev loop9, logical block 0, async page read [ 384.977681][ T8561] Buffer I/O error on dev loop9, logical block 0, async page read [ 384.985856][ T8561] Buffer I/O error on dev loop9, logical block 0, async page read [ 384.993948][ T8561] Buffer I/O error on dev loop9, logical block 0, async page read [ 385.002092][ T8561] Buffer I/O error on dev loop9, logical block 0, async page read [ 385.011907][ T8561] ldm_validate_partition_table(): Disk read failed. [ 385.018613][ T8561] Buffer I/O error on dev loop9, logical block 0, async page read [ 385.026826][ T8561] Buffer I/O error on dev loop9, logical block 0, async page read [ 385.034963][ T8561] Buffer I/O error on dev loop9, logical block 0, async page read [ 385.139086][ T8561] Dev loop9: unable to read RDB block 0 [ 385.145133][ T8561] loop9: unable to read partition table [ 385.151084][ T8561] loop9: partition table beyond EOD, truncated [ 385.157306][ T8561] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 385.157306][ T8561] ) failed (rc=-5) [ 388.767789][ T8586] netlink: 4 bytes leftover after parsing attributes in process `syz.0.638'. [ 394.143105][ T7662] hid (null): unknown global tag 0xd [ 394.194776][ T7662] hid-generic 0401:F6E2:FFFFFFF6.0005: unknown main item tag 0x0 [ 394.219730][ T8607] netlink: 4 bytes leftover after parsing attributes in process `syz.5.642'. [ 394.254520][ T7662] hid-generic 0401:F6E2:FFFFFFF6.0005: unknown global tag 0xd [ 394.274628][ T7662] hid-generic 0401:F6E2:FFFFFFF6.0005: item 0 2 1 13 parsing failed [ 394.999155][ T7662] hid-generic 0401:F6E2:FFFFFFF6.0005: probe with driver hid-generic failed with error -22 [ 395.598948][ T7662] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 395.760746][ T7662] usb 6-1: Using ep0 maxpacket: 8 [ 395.780827][ T7662] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 149, changing to 11 [ 395.808119][ T7662] usb 6-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 395.845278][ T7662] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.883019][ T7662] usb 6-1: config 0 descriptor?? [ 396.138938][ T8630] netlink: 4 bytes leftover after parsing attributes in process `syz.3.650'. [ 396.940610][ T7662] logitech 0003:046D:C20E.0006: rdesc size test failed for formula gp [ 397.009516][ T7662] logitech 0003:046D:C20E.0006: unknown main item tag 0x0 [ 397.114319][ T8638] netlink: 'syz.0.651': attribute type 10 has an invalid length. [ 397.123360][ T8638] netlink: 40 bytes leftover after parsing attributes in process `syz.0.651'. [ 397.512131][ T7662] logitech 0003:046D:C20E.0006: hidraw0: USB HID v0.03 Device [HID 046d:c20e] on usb-dummy_hcd.5-1/input0 [ 397.736478][ T7662] usb 6-1: USB disconnect, device number 4 [ 398.749596][ T8642] netlink: 'syz.4.652': attribute type 10 has an invalid length. [ 398.757499][ T8642] netlink: 40 bytes leftover after parsing attributes in process `syz.4.652'. [ 405.667545][ T8680] tipc: Started in network mode [ 405.673163][ T8680] tipc: Node identity 4, cluster identity 4711 [ 405.680261][ T8680] tipc: Node number set to 4 [ 405.773394][ T8682] [U] [ 407.854072][ T8684] netlink: 'syz.4.666': attribute type 10 has an invalid length. [ 407.862688][ T8684] netlink: 40 bytes leftover after parsing attributes in process `syz.4.666'. [ 411.449245][ T9] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 411.619241][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 411.638075][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 411.664142][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 411.681432][ T9] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 411.703344][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.712664][ T9] usb 1-1: Product: syz [ 411.718910][ T9] usb 1-1: Manufacturer: syz [ 411.719031][ T44] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 411.736460][ T9] usb 1-1: SerialNumber: syz [ 412.464474][ T44] usb 5-1: config index 0 descriptor too short (expected 39186, got 18) [ 412.483953][ T44] usb 5-1: config 0 has too many interfaces: 250, using maximum allowed: 32 [ 412.484243][ T9] usb 1-1: 0:2 : does not exist [ 412.529251][ T44] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 250 [ 412.568109][ T44] usb 5-1: New USB device found, idVendor=0547, idProduct=6801, bcdDevice=43.7f [ 412.590609][ T44] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.608973][ T44] usb 5-1: Product: syz [ 412.621062][ T44] usb 5-1: Manufacturer: syz [ 412.631210][ T44] usb 5-1: SerialNumber: syz [ 412.647981][ T44] usb 5-1: config 0 descriptor?? [ 412.676871][ T44] gspca_main: touptek-2.14.0 probing 0547:6801 [ 412.711360][ T9] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 412.759686][ T9] usb 1-1: USB disconnect, device number 18 [ 412.819166][ T5906] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 412.960517][ T8727] netlink: 12 bytes leftover after parsing attributes in process `syz.3.679'. [ 413.009381][ T5906] usb 6-1: Using ep0 maxpacket: 32 [ 413.056398][ T5906] usb 6-1: config 0 has an invalid interface number: 35 but max is 0 [ 413.145373][ T5906] usb 6-1: config 0 has no interface number 0 [ 413.295659][ T44] usb 5-1: USB disconnect, device number 21 [ 413.305833][ T5906] usb 6-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 413.403831][ T5906] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.475363][ T5906] usb 6-1: Product: syz [ 413.489688][ T5906] usb 6-1: Manufacturer: syz [ 413.494364][ T5906] usb 6-1: SerialNumber: syz [ 413.512237][ T5906] usb 6-1: config 0 descriptor?? [ 413.745315][ T5906] radio-si470x 6-1:0.35: could not find interrupt in endpoint [ 413.835444][ T8732] netlink: 4 bytes leftover after parsing attributes in process `syz.1.680'. [ 414.373231][ T5906] radio-si470x 6-1:0.35: probe with driver radio-si470x failed with error -5 [ 414.444638][ T8724] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 414.469650][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 414.469672][ T30] audit: type=1800 audit(1755627733.759:83): pid=8736 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.681" name="SYSV00000000" dev="tmpfs" ino=1 res=0 errno=0 [ 414.584954][ T8732] hsr_slave_1 (unregistering): left promiscuous mode [ 414.920189][ T5906] radio-raremono 6-1:0.35: this is not Thanko's Raremono. [ 414.932289][ T5906] usbhid 6-1:0.35: couldn't find an input interrupt endpoint [ 414.938971][ T8724] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 415.287878][ T5906] usb 6-1: USB disconnect, device number 5 [ 415.329517][ T8741] netlink: 28 bytes leftover after parsing attributes in process `syz.3.682'. [ 415.423246][ T8741] netlink: 28 bytes leftover after parsing attributes in process `syz.3.682'. [ 417.638668][ T8747] netlink: 'syz.1.684': attribute type 10 has an invalid length. [ 417.647689][ T8747] netlink: 40 bytes leftover after parsing attributes in process `syz.1.684'. [ 418.153310][ T8756] netlink: 16 bytes leftover after parsing attributes in process `syz.5.685'. [ 419.318972][ T5954] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 419.690097][ T8773] loop9: detected capacity change from 0 to 7 [ 419.699741][ T8773] buffer_io_error: 4 callbacks suppressed [ 419.699789][ T8773] Buffer I/O error on dev loop9, logical block 0, async page read [ 419.714397][ T8773] Buffer I/O error on dev loop9, logical block 0, async page read [ 419.724166][ T8773] Buffer I/O error on dev loop9, logical block 0, async page read [ 419.733545][ T8773] Buffer I/O error on dev loop9, logical block 0, async page read [ 419.742186][ T8773] Buffer I/O error on dev loop9, logical block 0, async page read [ 419.750802][ T8773] Buffer I/O error on dev loop9, logical block 0, async page read [ 419.759477][ T8773] Buffer I/O error on dev loop9, logical block 0, async page read [ 419.767694][ T8773] ldm_validate_partition_table(): Disk read failed. [ 419.774818][ T8773] Buffer I/O error on dev loop9, logical block 0, async page read [ 419.784014][ T8773] Buffer I/O error on dev loop9, logical block 0, async page read [ 419.792477][ T8773] Buffer I/O error on dev loop9, logical block 0, async page read [ 419.804576][ T8773] Dev loop9: unable to read RDB block 0 [ 419.812192][ T8773] loop9: unable to read partition table [ 419.819153][ T8773] loop9: partition table beyond EOD, truncated [ 419.826377][ T8773] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 419.826377][ T8773] ) failed (rc=-5) [ 423.531569][ T8788] netlink: 'syz.3.697': attribute type 10 has an invalid length. [ 423.540584][ T8788] netlink: 40 bytes leftover after parsing attributes in process `syz.3.697'. [ 424.629648][ T8813] netlink: 32 bytes leftover after parsing attributes in process `syz.4.702'. [ 424.939905][ T8820] netlink: 8 bytes leftover after parsing attributes in process `syz.4.702'. [ 425.802252][ T8825] x_tables: unsorted underflow at hook 3 [ 425.919144][ T24] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 425.919315][ T8833] netlink: 16 bytes leftover after parsing attributes in process `syz.4.706'. [ 426.149061][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 426.167861][ T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 426.191234][ T24] usb 1-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 426.202792][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.288637][ T24] usb 1-1: config 0 descriptor?? [ 426.335038][ T24] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 427.415797][ T24] gspca_vc032x: reg_w err -110 [ 427.421898][ T24] vc032x 1-1:0.0: probe with driver vc032x failed with error -110 [ 428.306073][ T5855] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 428.449999][ T5855] usb 2-1: device descriptor read/64, error -71 [ 428.463944][ T24] usb 1-1: USB disconnect, device number 19 [ 428.567587][ T8866] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 428.709020][ T5855] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 428.837879][ T5906] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 428.989009][ T5906] usb 5-1: Using ep0 maxpacket: 16 [ 429.001407][ T5906] usb 5-1: config index 0 descriptor too short (expected 16456, got 72) [ 429.014937][ T5906] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 429.023759][ T5906] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 429.034474][ T5906] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 429.052961][ T5906] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 429.063457][ T5906] usb 5-1: config 0 has no interface number 0 [ 429.073409][ T5906] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 429.095141][ T5906] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 429.114340][ T5906] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 429.125426][ T5906] usb 5-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 429.146413][ T5906] usb 5-1: config 0 interface 125 has no altsetting 2 [ 429.157227][ T5906] usb 5-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 429.171473][ T5906] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 429.182410][ T5906] usb 5-1: Product: syz [ 429.187056][ T5906] usb 5-1: Manufacturer: syz [ 429.196889][ T5906] usb 5-1: SerialNumber: syz [ 429.215236][ T5906] usb 5-1: config 0 descriptor?? [ 429.231075][ T5906] usb 5-1: selecting invalid altsetting 2 [ 429.253994][ T5855] usb 2-1: device descriptor read/64, error -71 [ 429.479879][ T5855] usb usb2-port1: attempt power cycle [ 430.208935][ T5855] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 430.385666][ T8888] netlink: 16 bytes leftover after parsing attributes in process `syz.3.721'. [ 432.013100][ T5855] usb 2-1: device descriptor read/8, error -71 [ 432.047684][ T24] usb 5-1: USB disconnect, device number 22 [ 434.362467][ T5855] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 434.405786][ T5855] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 434.429472][ T5855] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 434.441706][ T5855] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 434.875101][ T8937] [U] [ 435.293487][ T5855] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 435.376391][ T5855] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 435.403178][ T5855] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 435.441053][ T5855] usb 2-1: Product: syz [ 435.445808][ T5855] usb 2-1: Manufacturer: syz [ 435.485863][ T5855] cdc_wdm 2-1:1.0: skipping garbage [ 435.500419][ T5855] cdc_wdm 2-1:1.0: skipping garbage [ 435.567122][ T5855] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 435.580160][ T5855] cdc_wdm 2-1:1.0: Unknown control protocol [ 436.493376][ T8947] comedi comedi3: Buffer allocation failed [ 436.979992][ T5855] usb 2-1: USB disconnect, device number 15 [ 437.680303][ T8965] netlink: 16 bytes leftover after parsing attributes in process `syz.1.738'. [ 438.794634][ T8979] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 438.821048][ T8969] overlayfs: conflicting lowerdir path [ 445.419954][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.430449][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 446.431581][ T9025] hugetlbfs: syz.0.752 (9025): Using mlock ulimits for SHM_HUGETLB is obsolete [ 447.642394][ T9032] netlink: 16 bytes leftover after parsing attributes in process `syz.1.753'. [ 448.138885][ T9036] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 448.153114][ T9036] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 450.966594][ T9070] netlink: 20 bytes leftover after parsing attributes in process `syz.5.764'. [ 451.227696][ T9074] openvswitch: netlink: IP tunnel dst address not specified [ 451.403492][ T9080] binder: 9079:9080 ioctl c0306201 200000000640 returned -22 [ 452.169643][ T5919] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 452.818072][ T5954] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 452.859048][ T5919] usb 5-1: Using ep0 maxpacket: 16 [ 452.871010][ T9098] bridge1: entered promiscuous mode [ 452.919189][ T5919] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 452.970919][ T5919] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 453.019887][ T5919] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 453.084619][ T5919] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 453.099346][ T5919] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 453.371198][ T5919] usb 5-1: config 0 descriptor?? [ 455.949381][ T5919] usbhid 5-1:0.0: can't add hid device: -71 [ 455.955493][ T5919] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 456.170402][ T5919] usb 5-1: USB disconnect, device number 23 [ 460.720647][ T9145] input: syz1 as /devices/virtual/input/input15 [ 460.926757][ T9148] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 461.217057][ T44] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 461.649015][ T44] usb 2-1: Using ep0 maxpacket: 8 [ 461.838973][ T44] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 461.895020][ T44] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 1280, setting to 64 [ 462.136131][ T44] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 462.209956][ T9160] netlink: 'syz.0.789': attribute type 10 has an invalid length. [ 462.222448][ T9160] netlink: 40 bytes leftover after parsing attributes in process `syz.0.789'. [ 462.414921][ T9163] IPVS: set_ctl: invalid protocol: 22 127.0.0.1:20001 [ 462.681916][ T44] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 462.698940][ T44] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.724758][ T44] usb 2-1: Product: syz [ 462.750571][ T44] usb 2-1: Manufacturer: syz [ 462.784430][ T9168] x_tables: ip6_tables: tcp match: only valid for protocol 6 [ 463.186052][ T44] usb 2-1: SerialNumber: syz [ 463.252449][ T44] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 464.122294][ T44] usbtest 2-1:1.0: couldn't get endpoints, -22 [ 464.157334][ T44] usbtest 2-1:1.0: probe with driver usbtest failed with error -22 [ 464.229691][ T44] usb 2-1: USB disconnect, device number 16 [ 467.974827][ T9229] loop9: detected capacity change from 0 to 7 [ 467.982351][ T9229] buffer_io_error: 4 callbacks suppressed [ 467.982400][ T9229] Buffer I/O error on dev loop9, logical block 0, async page read [ 467.996538][ T9229] Buffer I/O error on dev loop9, logical block 0, async page read [ 468.004722][ T9229] Buffer I/O error on dev loop9, logical block 0, async page read [ 468.013015][ T9229] Buffer I/O error on dev loop9, logical block 0, async page read [ 468.021535][ T9229] Buffer I/O error on dev loop9, logical block 0, async page read [ 468.029889][ T9229] Buffer I/O error on dev loop9, logical block 0, async page read [ 468.038188][ T9229] Buffer I/O error on dev loop9, logical block 0, async page read [ 468.046471][ T9229] ldm_validate_partition_table(): Disk read failed. [ 468.055331][ T9229] Buffer I/O error on dev loop9, logical block 0, async page read [ 468.064220][ T9229] Buffer I/O error on dev loop9, logical block 0, async page read [ 468.073099][ T9229] Buffer I/O error on dev loop9, logical block 0, async page read [ 468.082776][ T9229] Dev loop9: unable to read RDB block 0 [ 468.089011][ T9229] loop9: unable to read partition table [ 468.095292][ T9229] loop9: partition table beyond EOD, truncated [ 468.101630][ T9229] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 468.101630][ T9229] ) failed (rc=-5) [ 468.601396][ T9230] [U] [ 472.158814][ T24] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 472.339036][ T24] usb 5-1: device descriptor read/64, error -71 [ 472.622535][ T24] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 472.770487][ T9284] netlink: 'syz.1.819': attribute type 10 has an invalid length. [ 472.799931][ T9284] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 472.940960][ T24] usb 5-1: device descriptor read/64, error -71 [ 473.079935][ T9293] [U] [ 473.729381][ T24] usb usb5-port1: attempt power cycle [ 473.916785][ T9289] loop9: detected capacity change from 0 to 7 [ 473.944766][ T9289] buffer_io_error: 4 callbacks suppressed [ 473.944786][ T9289] Buffer I/O error on dev loop9, logical block 0, async page read [ 473.981951][ T9289] Buffer I/O error on dev loop9, logical block 0, async page read [ 473.990080][ T9289] Buffer I/O error on dev loop9, logical block 0, async page read [ 473.999532][ T9289] Buffer I/O error on dev loop9, logical block 0, async page read [ 474.007716][ T9289] Buffer I/O error on dev loop9, logical block 0, async page read [ 474.015912][ T9289] Buffer I/O error on dev loop9, logical block 0, async page read [ 474.161604][ T9289] Buffer I/O error on dev loop9, logical block 0, async page read [ 474.226700][ T9289] ldm_validate_partition_table(): Disk read failed. [ 474.276229][ T9289] Buffer I/O error on dev loop9, logical block 0, async page read [ 474.324983][ T9289] Buffer I/O error on dev loop9, logical block 0, async page read [ 474.363545][ T9289] Buffer I/O error on dev loop9, logical block 0, async page read [ 474.419945][ T24] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 474.458109][ T24] usb 5-1: device descriptor read/8, error -71 [ 474.466538][ T9289] Dev loop9: unable to read RDB block 0 [ 474.546889][ T9289] loop9: unable to read partition table [ 474.595994][ T9289] loop9: partition table beyond EOD, truncated [ 474.646050][ T9289] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 474.646050][ T9289] ) failed (rc=-5) [ 474.749006][ T24] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 474.845893][ T24] usb 5-1: device descriptor read/8, error -71 [ 475.024318][ T24] usb usb5-port1: unable to enumerate USB device [ 476.494838][ T9319] input: syz1 as /devices/virtual/input/input16 [ 477.286695][ T9330] input input17: cannot allocate more than FF_MAX_EFFECTS effects [ 477.734047][ T9336] [U] [ 479.722566][ T9330] input: syz0 as /devices/virtual/input/input18 [ 481.558779][ T9350] comedi comedi3: comedi_config --init_data is deprecated [ 481.892229][ T9354] netlink: 8 bytes leftover after parsing attributes in process `syz.3.836'. [ 482.178978][ T9353] netlink: 8 bytes leftover after parsing attributes in process `syz.3.836'. [ 486.963537][ T9382] overlayfs: conflicting options: nfs_export=on,index=off [ 487.988831][ T5906] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 488.619270][ T9391] loop9: detected capacity change from 0 to 7 [ 488.626057][ T9391] buffer_io_error: 4 callbacks suppressed [ 488.626075][ T9391] Buffer I/O error on dev loop9, logical block 0, async page read [ 488.641466][ T9391] Buffer I/O error on dev loop9, logical block 0, async page read [ 488.649496][ T9391] Buffer I/O error on dev loop9, logical block 0, async page read [ 488.657441][ T9391] Buffer I/O error on dev loop9, logical block 0, async page read [ 488.665617][ T9391] Buffer I/O error on dev loop9, logical block 0, async page read [ 488.673638][ T9391] Buffer I/O error on dev loop9, logical block 0, async page read [ 488.681736][ T9391] Buffer I/O error on dev loop9, logical block 0, async page read [ 488.689696][ T9391] ldm_validate_partition_table(): Disk read failed. [ 488.696372][ T9391] Buffer I/O error on dev loop9, logical block 0, async page read [ 488.704604][ T9391] Buffer I/O error on dev loop9, logical block 0, async page read [ 488.712860][ T9391] Buffer I/O error on dev loop9, logical block 0, async page read [ 488.818965][ T9391] Dev loop9: unable to read RDB block 0 [ 488.824888][ T9391] loop9: unable to read partition table [ 488.830913][ T9391] loop9: partition table beyond EOD, truncated [ 488.837201][ T9391] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 488.837201][ T9391] ) failed (rc=-5) [ 489.095332][ T5906] usb 5-1: Using ep0 maxpacket: 8 [ 489.149816][ T5906] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 489.184106][ T5906] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 489.227604][ T5906] usb 5-1: Product: syz [ 489.250934][ T5906] usb 5-1: Manufacturer: syz [ 489.274027][ T5906] usb 5-1: SerialNumber: syz [ 489.492350][ T5906] usb 5-1: config 0 descriptor?? [ 489.815435][ T9399] process 'syz.5.849' launched '/dev/fd/3' with NULL argv: empty string added [ 490.501384][ T5906] dvb_usb_rtl28xxu 5-1:0.0: chip type detection failed -71 [ 490.552042][ T5906] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 490.619720][ T5906] usb 5-1: USB disconnect, device number 28 [ 490.824213][ T9405] cgroup: fork rejected by pids controller in /syz3 [ 493.639726][ T979] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 494.446354][ T979] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 494.463230][ T979] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 494.511473][ T979] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 495.336364][ T979] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 495.368794][ T979] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 495.376886][ T979] usb 2-1: Product: 竐芈ﲐ药ꨛ퐷欨삑렯 [ 495.425064][ T979] usb 2-1: Manufacturer: ы [ 495.448964][ T979] usb 2-1: SerialNumber: ᠁ [ 495.858995][ T5855] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 496.829146][ T5855] usb 4-1: device descriptor read/64, error -71 [ 497.922156][ T5840] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 497.940242][ T5840] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 497.964854][ T5840] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 497.974506][ T5840] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 497.982931][ T979] usb 2-1: 0:2 : does not exist [ 497.989465][ T5840] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 498.018886][ T5855] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 498.054199][ T979] usb 2-1: USB disconnect, device number 17 [ 498.208824][ T5855] usb 4-1: device descriptor read/64, error -71 [ 498.412367][ T5855] usb usb4-port1: attempt power cycle [ 499.069329][ T5855] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 499.432404][ T5855] usb 4-1: device descriptor read/8, error -71 [ 499.971413][ T9710] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 500.024580][ T9686] chnl_net:caif_netlink_parms(): no params data found [ 500.119090][ T5154] Bluetooth: hci2: command tx timeout [ 500.210303][ T5931] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.671687][ T5931] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.198803][ T5154] Bluetooth: hci2: command tx timeout [ 502.955041][ T9686] bridge0: port 1(bridge_slave_0) entered blocking state [ 502.982099][ T9686] bridge0: port 1(bridge_slave_0) entered disabled state [ 502.996320][ T9686] bridge_slave_0: entered allmulticast mode [ 503.020905][ T9686] bridge_slave_0: entered promiscuous mode [ 503.050868][ T9686] bridge0: port 2(bridge_slave_1) entered blocking state [ 503.059038][ T9686] bridge0: port 2(bridge_slave_1) entered disabled state [ 503.067056][ T9686] bridge_slave_1: entered allmulticast mode [ 503.812606][ T9686] bridge_slave_1: entered promiscuous mode [ 504.279020][ T5154] Bluetooth: hci2: command tx timeout [ 506.359062][ T5154] Bluetooth: hci2: command tx timeout [ 506.450404][ T5931] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 506.480988][ T9742] vxcan1: entered allmulticast mode [ 506.620081][ T9754] comedi comedi3: comedi_config --init_data is deprecated [ 506.930340][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 507.218796][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 507.366370][ T9686] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 507.451060][ T9686] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 507.671898][ T5931] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.146060][ T9686] team0: Port device team_slave_0 added [ 509.743077][ T9686] team0: Port device team_slave_1 added [ 509.895438][ T9781] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 510.094013][ T9686] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 510.196223][ T9784] netlink: 12 bytes leftover after parsing attributes in process `syz.1.882'. [ 510.255816][ T9686] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 510.457820][ T9792] netlink: 16 bytes leftover after parsing attributes in process `syz.5.883'. [ 510.519219][ T9686] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 510.547741][ T9686] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 510.828908][ T9686] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 510.932854][ T9686] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 511.120089][ T9801] netlink: 12 bytes leftover after parsing attributes in process `syz.5.885'. [ 511.770581][ T9686] hsr_slave_0: entered promiscuous mode [ 511.777371][ T9686] hsr_slave_1: entered promiscuous mode [ 511.809786][ T9686] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 511.817862][ T9686] Cannot create hsr debugfs directory [ 511.968915][ T5931] bridge_slave_1: left allmulticast mode [ 511.974678][ T5931] bridge_slave_1: left promiscuous mode [ 511.999102][ T5931] bridge0: port 2(bridge_slave_1) entered disabled state [ 512.050439][ T5919] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 512.131373][ T9811] netlink: 12 bytes leftover after parsing attributes in process `syz.1.889'. [ 512.190135][ T5931] bridge_slave_0: left allmulticast mode [ 512.269198][ T5919] usb 6-1: Using ep0 maxpacket: 8 [ 512.308947][ T5919] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 512.336702][ T5919] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 512.338821][ T5931] bridge_slave_0: left promiscuous mode [ 512.351232][ T5919] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 512.446860][ T5919] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 512.447012][ T5931] bridge0: port 1(bridge_slave_0) entered disabled state [ 512.518552][ T5919] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 512.616769][ T5919] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 512.644238][ T5919] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 513.551670][ T5919] usb 6-1: usb_control_msg returned -71 [ 513.557527][ T5919] usbtmc 6-1:16.0: can't read capabilities [ 513.603973][ T5919] usb 6-1: USB disconnect, device number 7 [ 514.152818][ T9824] netlink: 4 bytes leftover after parsing attributes in process `syz.1.891'. [ 515.641104][ T9832] netlink: 36 bytes leftover after parsing attributes in process `syz.4.884'. [ 515.693589][ T9832] netlink: 44 bytes leftover after parsing attributes in process `syz.4.884'. [ 515.834646][ T979] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 515.964289][ T9839] netlink: 16 bytes leftover after parsing attributes in process `syz.4.894'. [ 516.058926][ T979] usb 4-1: device descriptor read/64, error -71 [ 516.333016][ T979] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 516.411799][ T5931] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 516.725898][ T5931] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 517.023930][ T5931] bond0 (unregistering): Released all slaves [ 517.356621][ T5931] tipc: Left network mode [ 517.451829][ T9849] FAULT_INJECTION: forcing a failure. [ 517.451829][ T9849] name failslab, interval 1, probability 0, space 0, times 0 [ 517.467328][ T9849] CPU: 0 UID: 0 PID: 9849 Comm: syz.3.899 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 517.467359][ T9849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 517.467373][ T9849] Call Trace: [ 517.467382][ T9849] [ 517.467393][ T9849] dump_stack_lvl+0x189/0x250 [ 517.467423][ T9849] ? __pfx____ratelimit+0x10/0x10 [ 517.467447][ T9849] ? __pfx_dump_stack_lvl+0x10/0x10 [ 517.467473][ T9849] ? __pfx__printk+0x10/0x10 [ 517.467508][ T9849] ? __pfx___might_resched+0x10/0x10 [ 517.467533][ T9849] ? fs_reclaim_acquire+0x7d/0x100 [ 517.467566][ T9849] should_fail_ex+0x414/0x560 [ 517.467596][ T9849] should_failslab+0xa8/0x100 [ 517.467623][ T9849] __kmalloc_noprof+0xcb/0x4f0 [ 517.467642][ T9849] ? kfree+0x4d/0x440 [ 517.467672][ T9849] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 517.467707][ T9849] tomoyo_realpath_from_path+0xe3/0x5d0 [ 517.467739][ T9849] ? tomoyo_domain+0xda/0x130 [ 517.467775][ T9849] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 517.467798][ T9849] tomoyo_path_number_perm+0x1e8/0x5a0 [ 517.467825][ T9849] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 517.467869][ T9849] ? __lock_acquire+0xab9/0xd20 [ 517.467914][ T9849] ? __fget_files+0x2a/0x420 [ 517.467942][ T9849] ? __fget_files+0x2a/0x420 [ 517.467965][ T9849] ? __fget_files+0x3a0/0x420 [ 517.467989][ T9849] ? __fget_files+0x2a/0x420 [ 517.468024][ T9849] security_file_ioctl+0xcb/0x2d0 [ 517.468053][ T9849] __se_sys_ioctl+0x47/0x170 [ 517.468089][ T9849] do_syscall_64+0xfa/0x3b0 [ 517.468113][ T9849] ? lockdep_hardirqs_on+0x9c/0x150 [ 517.468136][ T9849] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 517.468158][ T9849] ? clear_bhb_loop+0x60/0xb0 [ 517.468184][ T9849] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 517.468206][ T9849] RIP: 0033:0x7f720278ebe9 [ 517.468225][ T9849] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 517.468245][ T9849] RSP: 002b:00007f720363c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 517.468268][ T9849] RAX: ffffffffffffffda RBX: 00007f72029b5fa0 RCX: 00007f720278ebe9 [ 517.468285][ T9849] RDX: 0000200000000040 RSI: 0000000000004610 RDI: 0000000000000003 [ 517.468299][ T9849] RBP: 00007f720363c090 R08: 0000000000000000 R09: 0000000000000000 [ 517.468313][ T9849] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 517.468326][ T9849] R13: 00007f72029b6038 R14: 00007f72029b5fa0 R15: 00007ffd8917d948 [ 517.468361][ T9849] [ 517.468402][ T9849] ERROR: Out of memory at tomoyo_realpath_from_path. [ 518.069483][ T9850] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 518.095865][ T9850] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 519.450951][ T9863] FAULT_INJECTION: forcing a failure. [ 519.450951][ T9863] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 519.465390][ T9863] CPU: 1 UID: 0 PID: 9863 Comm: syz.5.901 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 519.465419][ T9863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 519.465433][ T9863] Call Trace: [ 519.465442][ T9863] [ 519.465452][ T9863] dump_stack_lvl+0x189/0x250 [ 519.465482][ T9863] ? __pfx____ratelimit+0x10/0x10 [ 519.465507][ T9863] ? __pfx_dump_stack_lvl+0x10/0x10 [ 519.465532][ T9863] ? __pfx__printk+0x10/0x10 [ 519.465562][ T9863] ? __might_fault+0xb0/0x130 [ 519.465597][ T9863] should_fail_ex+0x414/0x560 [ 519.465637][ T9863] _copy_from_user+0x2d/0xb0 [ 519.465670][ T9863] kstrtouint_from_user+0xc4/0x170 [ 519.465699][ T9863] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 519.465731][ T9863] ? preempt_schedule_common+0x83/0xd0 [ 519.465755][ T9863] ? preempt_schedule+0xae/0xc0 [ 519.465776][ T9863] ? __pfx_preempt_schedule+0x10/0x10 [ 519.465803][ T9863] proc_fail_nth_write+0x88/0x240 [ 519.465831][ T9863] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 519.465856][ T9863] ? preempt_schedule_thunk+0x16/0x30 [ 519.465888][ T9863] ? vfs_write+0x211/0xa90 [ 519.465912][ T9863] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 519.465942][ T9863] vfs_write+0x27e/0xa90 [ 519.465973][ T9863] ? __pfx_vfs_write+0x10/0x10 [ 519.465996][ T9863] ? __fget_files+0x2a/0x420 [ 519.466026][ T9863] ? __fget_files+0x3a0/0x420 [ 519.466050][ T9863] ? __fget_files+0x2a/0x420 [ 519.466085][ T9863] ksys_write+0x145/0x250 [ 519.466220][ T9863] ? __fget_files+0x3a0/0x420 [ 519.466254][ T9863] ? __pfx_ksys_write+0x10/0x10 [ 519.466280][ T9863] ? do_syscall_64+0xbe/0x3b0 [ 519.466309][ T9863] do_syscall_64+0xfa/0x3b0 [ 519.466335][ T9863] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.466358][ T9863] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 519.466377][ T9863] ? clear_bhb_loop+0x60/0xb0 [ 519.466404][ T9863] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.466426][ T9863] RIP: 0033:0x7fa56a18d69f [ 519.466447][ T9863] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 519.466467][ T9863] RSP: 002b:00007fa56b09a030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 519.466491][ T9863] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fa56a18d69f [ 519.466506][ T9863] RDX: 0000000000000001 RSI: 00007fa56b09a0a0 RDI: 0000000000000009 [ 519.466521][ T9863] RBP: 00007fa56b09a090 R08: 0000000000000000 R09: 0000000000000000 [ 519.466534][ T9863] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 519.466547][ T9863] R13: 00007fa56a3b6128 R14: 00007fa56a3b6090 R15: 00007ffce08d47c8 [ 519.466582][ T9863] [ 519.628292][ T9686] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 519.792624][ T9865] netlink: 36 bytes leftover after parsing attributes in process `syz.1.903'. [ 519.826436][ T9686] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 519.833563][ T9865] netlink: 44 bytes leftover after parsing attributes in process `syz.1.903'. [ 519.879389][ T9686] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 520.469598][ T9877] kernel profiling enabled (shift: 17) [ 521.252120][ T9873] netlink: 16 bytes leftover after parsing attributes in process `syz.4.905'. [ 522.722593][ T9885] netlink: 'syz.5.904': attribute type 32 has an invalid length. [ 522.838101][ T9886] netlink: 4 bytes leftover after parsing attributes in process `syz.3.907'. [ 523.562192][ T9894] [U] [ 525.372704][ T9686] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 526.292690][ T5931] hsr_slave_0: left promiscuous mode [ 526.299622][ T5931] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 526.307319][ T5931] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 526.323367][ T5931] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 526.339044][ T5931] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 526.429994][ T5931] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 526.478879][ T5931] batman_adv: batadv0: Removing interface: virt_wifi0 [ 526.497360][ T9917] comedi: valid board names for 8255 driver are: [ 526.508830][ T9917] 8255 [ 526.525864][ T9917] comedi: valid board names for vmk80xx driver are: [ 526.574701][ T9917] vmk80xx [ 526.577841][ T9917] comedi: valid board names for usbduxsigma driver are: [ 526.605520][ T5931] veth1_macvtap: left promiscuous mode [ 526.629315][ T5931] veth1_vlan: left promiscuous mode [ 526.635350][ T9917] usbduxsigma [ 526.644976][ T9917] comedi: valid board names for usbduxfast driver are: [ 526.652300][ T5931] veth0_vlan: left promiscuous mode [ 526.668829][ T9917] usbduxfast [ 526.688992][ T9925] i2c i2c-0: Invalid block write size 33 [ 526.717046][ T9917] comedi: valid board names for usbdux driver are: [ 526.839698][ T9917] usbdux [ 526.843094][ T9917] comedi: valid board names for ni6501 driver are: [ 526.875403][ T9917] ni6501 [ 526.883169][ T9917] comedi: valid board names for dt9812 driver are: [ 527.707724][ T9917] dt9812 [ 527.749207][ T9917] comedi: valid board names for ni_labpc_cs driver are: [ 527.757145][ T9917] ni_labpc_cs [ 527.848897][ T9917] comedi: valid board names for ni_daq_700 driver are: [ 527.910604][ T9917] ni_daq_700 [ 527.938019][ T9917] comedi: valid board names for labpc_pci driver are: [ 527.969054][ T9917] labpc_pci [ 527.972444][ T9917] comedi: valid board names for adl_pci9118 driver are: [ 527.999296][ T9917] pci9118dg [ 528.004334][ T9917] pci9118hg [ 528.007579][ T9917] pci9118hr [ 528.014972][ T9917] comedi: valid board names for 8255_pci driver are: [ 528.032926][ T9917] 8255_pci [ 528.043040][ T9917] comedi: valid board names for s526 driver are: [ 528.066073][ T9917] s526 [ 528.069192][ T9917] comedi: valid board names for multiq3 driver are: [ 528.086120][ T9917] multiq3 [ 528.096513][ T9917] comedi: valid board names for pcmuio driver are: [ 528.109061][ T9917] pcmuio48 [ 528.112270][ T9917] pcmuio96 [ 528.128918][ T9917] comedi: valid board names for pcmmio driver are: [ 528.143479][ T9917] pcmmio [ 528.149283][ T9917] comedi: valid board names for pcmda12 driver are: [ 528.173362][ T9917] pcmda12 [ 528.176508][ T9917] comedi: valid board names for pcmad driver are: [ 528.218933][ T9917] pcmad12 [ 528.222252][ T9917] pcmad16 [ 528.259407][ T9917] comedi: valid board names for ni_labpc driver are: [ 528.276961][ T9917] lab-pc-1200 [ 528.289487][ T9917] lab-pc-1200ai [ 528.293331][ T9917] lab-pc+ [ 528.306315][ T9917] comedi: valid board names for atmio16 driver are: [ 528.318862][ T9917] atmio16 [ 528.325296][ T9917] atmio16d [ 528.343224][ T9917] comedi: valid board names for ni_at_ao driver are: [ 528.352599][ T9917] at-ao-6 [ 528.367660][ T9917] at-ao-10 [ 528.382220][ T9917] comedi: valid board names for ni_at_a2150 driver are: [ 528.436858][ T9917] ni_at_a2150 [ 528.569065][ T9917] comedi: valid board names for adq12b driver are: [ 529.118913][ T9917] adq12b [ 529.178873][ T9917] comedi: valid board names for mpc624 driver are: [ 529.194251][ T9917] mpc624 [ 529.217715][ T9917] comedi: valid board names for c6xdigio driver are: [ 529.246962][ T9917] c6xdigio [ 529.255031][ T9917] comedi: valid board names for aio_iiro_16 driver are: [ 529.268797][ T9917] aio_iiro_16 [ 529.272245][ T9917] comedi: valid board names for aio_aio12_8 driver are: [ 529.287046][ T9939] netlink: 68 bytes leftover after parsing attributes in process `syz.4.918'. [ 529.297210][ T9917] aio_aio12_8 [ 529.313300][ T9917] aio_ai12_8 [ 529.317497][ T9917] aio_ao12_4 [ 529.323546][ T9917] comedi: valid board names for fl512 driver are: [ 529.331677][ T9917] fl512 [ 529.367890][ T9917] comedi: valid board names for dmm32at driver are: [ 529.385523][ T9917] dmm32at [ 529.396760][ T9917] comedi: valid board names for dt282x driver are: [ 529.404868][ T9917] dt2821 [ 529.408099][ T9917] dt2821-f [ 529.413239][ T9917] dt2821-g [ 529.416538][ T9917] dt2823 [ 529.426713][ T9917] dt2824-pgh [ 529.442487][ T9917] dt2824-pgl [ 529.446029][ T9917] dt2825 [ 529.462495][ T9917] dt2827 [ 529.465606][ T9917] dt2828 [ 529.474938][ T9917] dt2829 [ 529.491464][ T9917] dt21-ez [ 529.497014][ T9917] dt23-ez [ 529.500679][ T9917] dt24-ez [ 529.504311][ T9917] dt24-ez-pgl [ 529.508229][ T9917] comedi: valid board names for dt2817 driver are: [ 529.520408][ T9917] dt2817 [ 529.523661][ T9917] comedi: valid board names for dt2815 driver are: [ 529.534012][ T9917] dt2815 [ 529.537116][ T9917] comedi: valid board names for dt2814 driver are: [ 529.547119][ T9917] dt2814 [ 529.704260][ T9917] comedi: valid board names for dt2811 driver are: [ 529.724421][ T9917] dt2811-pgh [ 529.729094][ T9917] dt2811-pgl [ 529.743454][ T9917] comedi: valid board names for dt2801 driver are: [ 529.756408][ T9917] dt2801 [ 529.759632][ T9917] comedi: valid board names for das6402 driver are: [ 529.767193][ T9917] das6402-12 [ 529.775039][ T9917] das6402-16 [ 529.784959][ T9917] comedi: valid board names for das1800 driver are: [ 529.795867][ T9917] das-1701st [ 529.803111][ T9917] das-1701st-da [ 529.807144][ T9917] das-1702st [ 529.812924][ T9917] das-1702st-da [ 529.816741][ T9917] das-1702hr [ 529.820258][ T9917] das-1702hr-da [ 529.824057][ T9917] das-1701ao [ 529.829145][ T9917] das-1702ao [ 529.832904][ T9917] das-1801st [ 529.836380][ T9917] das-1801st-da [ 529.840346][ T9917] das-1802st [ 529.844502][ T9917] das-1802st-da [ 529.848391][ T9917] das-1802hr [ 529.852160][ T9917] das-1802hr-da [ 529.855912][ T9917] das-1801hc [ 529.864165][ T9917] das-1802hc [ 529.867649][ T9917] das-1801ao [ 529.871648][ T9917] das-1802ao [ 529.875259][ T9917] comedi: valid board names for das800 driver are: [ 529.882105][ T9917] das-800 [ 529.885499][ T9917] cio-das800 [ 529.894947][ T9917] das-801 [ 529.898224][ T9917] cio-das801 [ 529.904362][ T9917] das-802 [ 529.907665][ T9917] cio-das802 [ 529.921550][ T9917] cio-das802/16 [ 529.925366][ T9917] comedi: valid board names for isa-das08 driver are: [ 529.932924][ T9917] isa-das08 [ 529.936349][ T9917] das08-pgm [ 529.945506][ T9917] das08-pgh [ 529.949055][ T9917] das08-pgl [ 529.953656][ T9917] das08-aoh [ 529.962874][ T9917] das08-aol [ 529.966278][ T9917] das08-aom [ 529.969757][ T9917] das08/jr-ao [ 529.976799][ T9917] das08jr-16-ao [ 529.985846][ T9917] pc104-das08 [ 529.989728][ T9917] das08jr/16 [ 529.994318][ T9917] comedi: valid board names for das16m1 driver are: [ 530.008827][ T9917] das16m1 [ 530.013937][ T9917] comedi: valid board names for dac02 driver are: [ 530.014820][ T5931] team0 (unregistering): Port device team_slave_1 removed [ 530.034798][ T9917] dac02 [ 530.037881][ T9917] comedi: valid board names for rti802 driver are: [ 530.049678][ T9917] rti802 [ 530.053031][ T9917] comedi: valid board names for rti800 driver are: [ 530.061273][ T9917] rti800 [ 530.064625][ T9917] rti815 [ 530.067788][ T9917] comedi: valid board names for pcm3724 driver are: [ 530.080520][ T9917] pcm3724 [ 530.083774][ T9917] comedi: valid board names for pcl818 driver are: [ 530.090586][ T9917] pcl818l [ 530.094884][ T9917] pcl818h [ 530.103063][ T9917] pcl818hd [ 530.128882][ T9917] pcl818hg [ 530.134417][ T5931] team0 (unregistering): Port device team_slave_0 removed [ 530.148451][ T9917] pcl818 [ 530.155826][ T9917] pcl718 [ 530.188830][ T9917] pcm3718 [ 530.192029][ T9917] comedi: valid board names for pcl816 driver are: [ 530.228881][ T9917] pcl816 [ 530.232023][ T9917] pcl814b [ 530.235087][ T9917] comedi: valid board names for pcl812 driver are: [ 530.264607][ T9917] pcl812 [ 530.267640][ T9917] pcl812pg [ 530.271291][ T9917] acl8112pg [ 530.274538][ T9917] acl8112dg [ 530.277855][ T9917] acl8112hg [ 530.281879][ T9917] a821pgl [ 530.284967][ T9917] a821pglnda [ 530.288381][ T9917] a821pgh [ 530.292971][ T9917] a822pgl [ 530.303343][ T9917] a822pgh [ 530.306454][ T9917] a823pgl [ 530.359812][ T9917] a823pgh [ 530.362967][ T9917] pcl813 [ 530.376205][ T9917] pcl813b [ 530.469029][ T9917] acl8113 [ 530.472163][ T9917] iso813 [ 530.475224][ T9917] acl8216 [ 530.478366][ T9917] a826pg [ 530.502469][ T9917] comedi: valid board names for pcl730 driver are: [ 530.533689][ T9917] pcl730 [ 530.536726][ T9917] iso730 [ 530.556922][ T9917] acl7130 [ 530.564300][ T9917] pcm3730 [ 530.567379][ T9917] pcl725 [ 530.581839][ T9917] p8r8dio [ 530.590533][ T9917] acl7225b [ 530.593910][ T9917] p16r16dio [ 530.840647][ T9944] netlink: 28 bytes leftover after parsing attributes in process `syz.1.920'. [ 530.930334][ T9917] pcl733 [ 530.941952][ T9917] pcl734 [ 530.946889][ T9917] opmm-1616-xt [ 530.959035][ T9917] pearl-mm-p [ 530.970959][ T9917] ir104-pbf [ 530.980987][ T9917] comedi: valid board names for pcl726 driver are: [ 530.991733][ T9917] pcl726 [ 530.995014][ T9917] pcl727 [ 530.998497][ T9917] pcl728 [ 531.046174][ T9917] acl6126 [ 531.061666][ T9917] acl6128 [ 531.077217][ T9917] comedi: valid board names for pcl724 driver are: [ 531.110412][ T9917] pcl724 [ 531.140726][ T9917] pcl722 [ 531.163994][ T9917] pcl731 [ 531.179874][ T9917] acl7122 [ 531.197502][ T9917] acl7124 [ 531.215440][ T9917] pet48dio [ 531.237579][ T9917] pcmio48 [ 531.261054][ T9917] onyx-mm-dio [ 531.279591][ T9917] comedi: valid board names for pcl711 driver are: [ 531.295388][ T9917] pcl711 [ 531.301647][ T9917] pcl711b [ 531.304826][ T9917] acl8112hg [ 531.308521][ T9917] acl8112dg [ 531.314395][ T9917] comedi: valid board names for amplc_pc263 driver are: [ 531.325221][ T9917] pc263 [ 531.348061][ T9917] comedi: valid board names for amplc_pc236 driver are: [ 531.366758][ T9917] pc36at [ 531.370534][ T9917] comedi: valid board names for amplc_dio200 driver are: [ 531.377622][ T9917] pc212e [ 531.385609][ T9917] pc214e [ 531.389082][ T9917] pc215e [ 531.392665][ T9917] pc218e [ 531.395751][ T9917] pc272e [ 531.402702][ T9917] comedi: valid board names for comedi_parport driver are: [ 531.412128][ T9917] comedi_parport [ 531.416598][ T9917] comedi: valid board names for comedi_test driver are: [ 531.445293][ T9917] comedi_test [ 531.472027][ T9917] comedi: valid board names for comedi_bond driver are: [ 531.505855][ T9917] comedi_bond [ 531.960836][ T9954] netlink: 4 bytes leftover after parsing attributes in process `syz.4.922'. [ 532.716140][ T9912] (unnamed net_device) (uninitialized): option mode: invalid value (68) [ 532.770564][ T9930] 8021q: adding VLAN 0 to HW filter on device bond0 [ 532.784506][ T9930] bond0: (slave rose0): Enslaving as an active interface with an up link [ 533.292687][ T9954] hsr_slave_1 (unregistering): left promiscuous mode [ 533.524875][ T9970] netlink: 44 bytes leftover after parsing attributes in process `syz.5.925'. [ 533.724758][ T9686] 8021q: adding VLAN 0 to HW filter on device bond0 [ 533.793673][ T9686] 8021q: adding VLAN 0 to HW filter on device team0 [ 534.736681][ T5983] bridge0: port 1(bridge_slave_0) entered blocking state [ 534.743961][ T5983] bridge0: port 1(bridge_slave_0) entered forwarding state [ 534.784244][ T5983] bridge0: port 2(bridge_slave_1) entered blocking state [ 534.791600][ T5983] bridge0: port 2(bridge_slave_1) entered forwarding state [ 535.298166][ T9987] netlink: 'syz.3.930': attribute type 10 has an invalid length. [ 535.306900][ T9987] netlink: 40 bytes leftover after parsing attributes in process `syz.3.930'. [ 537.531594][ T9686] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 537.949888][T10014] loop9: detected capacity change from 0 to 7 [ 537.959214][T10014] buffer_io_error: 4 callbacks suppressed [ 537.959235][T10014] Buffer I/O error on dev loop9, logical block 0, async page read [ 537.974763][T10014] Buffer I/O error on dev loop9, logical block 0, async page read [ 537.983236][T10014] Buffer I/O error on dev loop9, logical block 0, async page read [ 537.993702][T10014] Buffer I/O error on dev loop9, logical block 0, async page read [ 538.003825][T10014] Buffer I/O error on dev loop9, logical block 0, async page read [ 538.012832][T10014] Buffer I/O error on dev loop9, logical block 0, async page read [ 538.022399][T10014] Buffer I/O error on dev loop9, logical block 0, async page read [ 538.031142][T10014] ldm_validate_partition_table(): Disk read failed. [ 538.039689][T10014] Buffer I/O error on dev loop9, logical block 0, async page read [ 538.048343][T10014] Buffer I/O error on dev loop9, logical block 0, async page read [ 538.056854][T10014] Buffer I/O error on dev loop9, logical block 0, async page read [ 538.066246][T10014] Dev loop9: unable to read RDB block 0 [ 538.073792][T10014] loop9: unable to read partition table [ 538.081190][T10014] loop9: partition table beyond EOD, truncated [ 538.087491][T10014] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 538.087491][T10014] ) failed (rc=-5) [ 540.821713][T10026] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 542.547762][T10047] [U] [ 543.894526][T10059] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 544.226453][ T9686] veth0_vlan: entered promiscuous mode [ 544.614631][ T9686] veth1_vlan: entered promiscuous mode [ 544.991687][ T9686] veth0_macvtap: entered promiscuous mode [ 545.026366][ T9686] veth1_macvtap: entered promiscuous mode [ 545.080429][ T9686] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 545.138526][ T9686] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 545.175296][ T9686] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.205310][ T9686] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.234337][ T9686] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.271048][ T9686] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.592781][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 545.609450][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 545.747321][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 545.758594][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 546.890980][T10098] netlink: 'syz.3.948': attribute type 10 has an invalid length. [ 546.902770][T10098] netlink: 40 bytes leftover after parsing attributes in process `syz.3.948'. [ 547.248893][T10108] netlink: 12 bytes leftover after parsing attributes in process `syz.5.951'. [ 552.207088][T10158] input: syz1 as /devices/virtual/input/input19 [ 555.232084][T10198] xt_CT: You must specify a L4 protocol and not use inversions on it [ 555.251308][T10198] netlink: 8 bytes leftover after parsing attributes in process `syz.3.972'. [ 555.264142][T10198] netlink: 168 bytes leftover after parsing attributes in process `syz.3.972'. [ 555.816104][ T979] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 556.028895][ T979] usb 2-1: Using ep0 maxpacket: 8 [ 556.060948][ T979] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 556.079195][ T979] usb 2-1: config 0 has no interface number 0 [ 556.097654][ T979] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 556.133133][ T979] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 556.158890][ T979] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 556.204604][ T979] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 556.251939][ T979] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 556.290069][T10210] overlay: Unknown parameter 'ز|uz:3"& [ 556.290069][T10210] '' [ 556.301153][ T979] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 556.335354][ T979] usb 2-1: config 0 descriptor?? [ 556.369042][ T979] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 556.748977][ T24] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 557.059537][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 557.217449][ T24] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 557.247827][ T24] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 557.299475][ T24] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 1.40 [ 557.334118][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 557.388338][ T24] usb 4-1: Product: syz [ 557.409902][ T24] usb 4-1: Manufacturer: syz [ 557.414581][ T24] usb 4-1: SerialNumber: syz [ 557.762557][ T979] usb 2-1: USB disconnect, device number 18 [ 558.298820][ T979] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 558.402779][ T24] usb 4-1: 0:2 : does not exist [ 558.431880][ T24] usb 4-1: USB disconnect, device number 26 [ 558.794681][T10226] netlink: 'syz.5.980': attribute type 10 has an invalid length. [ 558.802508][T10226] netlink: 40 bytes leftover after parsing attributes in process `syz.5.980'. [ 558.813480][T10226] batman_adv: batadv0: Adding interface: virt_wifi0 [ 558.820141][T10226] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 558.846109][ C1] vkms_vblank_simulate: vblank timer overrun [ 558.852274][T10226] batman_adv: batadv0: Interface activated: virt_wifi0 [ 560.710858][T10261] binder: 10258:10261 ioctl c0306201 200000000680 returned -14 [ 561.688806][ T5919] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 561.723892][T10268] tipc: Started in network mode [ 561.738297][T10268] tipc: Node identity 964968889886, cluster identity 4711 [ 561.757983][T10268] tipc: Enabled bearer , priority 0 [ 561.781497][T10269] syzkaller0: entered promiscuous mode [ 561.795107][T10269] syzkaller0: entered allmulticast mode [ 561.926837][T10268] tipc: Resetting bearer [ 562.019249][ T5919] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 562.029268][ T5919] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB3, changing to 0x83 [ 562.139050][ T5919] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 562.152465][ T5919] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 562.167738][ T5919] usb 6-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.10 [ 562.177729][ T5919] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 562.187756][T10268] tipc: Disabling bearer [ 562.362504][ T5919] usb 6-1: Product: syz [ 562.375898][ T5919] usb 6-1: Manufacturer: syz [ 562.404548][ T9] kernel write not supported for file /amidi2 (pid: 9 comm: kworker/0:0) [ 562.404788][ T5919] usb 6-1: SerialNumber: syz [ 562.469884][ T5919] usb 6-1: config 0 descriptor?? [ 563.200341][ T5919] radioshark2 6-1:0.0: Invalid radioSHARK2 device [ 563.206844][ T5919] radioshark2 6-1:0.0: probe with driver radioshark2 failed with error -22 [ 563.315139][ T5919] usb 6-1: USB disconnect, device number 8 [ 563.334682][T10281] netlink: 'syz.4.993': attribute type 10 has an invalid length. [ 563.345093][T10281] netlink: 40 bytes leftover after parsing attributes in process `syz.4.993'. [ 563.354465][T10281] dummy0: entered promiscuous mode [ 563.361784][T10281] bridge0: port 3(dummy0) entered blocking state [ 563.525250][T10281] bridge0: port 3(dummy0) entered disabled state [ 563.526747][ T9] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 563.539802][T10281] dummy0: entered allmulticast mode [ 563.548887][T10281] bridge0: port 3(dummy0) entered blocking state [ 563.555606][T10281] bridge0: port 3(dummy0) entered forwarding state [ 563.729208][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 564.331217][ T9] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 564.382706][ T9] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 564.420777][ T9] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 564.434876][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 564.446321][ T9] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 564.460521][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 564.706875][ T9] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 564.716790][ T9] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 564.731118][ T9] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 564.764424][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 564.893600][ T9] usb 7-1: config 0 descriptor?? [ 565.419859][T10293] netlink: 'syz.1.997': attribute type 32 has an invalid length. [ 565.510487][ T9] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 565.516542][T10315] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1001'. [ 566.084929][ T9] usb 7-1: USB disconnect, device number 2 [ 566.095557][ T9] usblp0: removed [ 566.838616][T10327] ceph: No mds server is up or the cluster is laggy [ 568.179741][ T60] wlan1: Trigger new scan to find an IBSS to join [ 568.867295][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.873914][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 569.796813][T10350] vlan2: entered promiscuous mode [ 569.802212][T10350] macvtap0: entered promiscuous mode [ 570.631489][T10367] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1011'. [ 572.612865][T10383] netlink: 'syz.1.1016': attribute type 32 has an invalid length. [ 573.685264][T10397] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1021'. [ 574.769364][T10412] netlink: 'syz.4.1025': attribute type 10 has an invalid length. [ 574.777372][T10412] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1025'. [ 574.946788][T10416] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1026'. [ 575.264153][ T5984] wlan1: Trigger new scan to find an IBSS to join [ 579.148742][ T5154] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 579.163978][ T9] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 579.834378][T10446] netlink: 128 bytes leftover after parsing attributes in process `syz.5.1032'. [ 580.406058][ T5984] wlan1: Creating new IBSS network, BSSID 4a:d4:35:c1:0f:52 [ 580.755930][T10451] netlink: 'syz.1.1033': attribute type 32 has an invalid length. [ 582.761488][T10460] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1035'. [ 583.051772][T10468] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1038'. [ 583.418953][ T9] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 583.668796][ T9] usb 7-1: Using ep0 maxpacket: 16 [ 583.680754][ T9] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 583.695734][ T9] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 583.707662][ T9] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 583.717621][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 583.733925][ T9] usb 7-1: Product: syz [ 583.835551][ T9] usb 7-1: Manufacturer: syz [ 583.840709][ T9] usb 7-1: SerialNumber: syz [ 584.944246][T10484] netlink: 128 bytes leftover after parsing attributes in process `syz.5.1043'. [ 585.319202][ T9] usb 7-1: USB disconnect, device number 3 [ 585.557438][ T5154] Bluetooth: hci2: unexpected subevent 0x01 length: 11 < 18 [ 586.299844][T10501] input: syz1 as /devices/virtual/input/input20 [ 587.603812][T10505] mmap: syz.6.1049 (10505): VmData 27201536 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 588.086710][T10520] syz_tun: entered promiscuous mode [ 588.104438][T10520] macvtap1: entered allmulticast mode [ 588.113327][T10520] syz_tun: entered allmulticast mode [ 588.140121][T10520] syz_tun: left allmulticast mode [ 588.145371][T10520] syz_tun: left promiscuous mode [ 588.595601][T10530] No such timeout policy "syz1" [ 588.668988][ T9] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 589.519528][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 589.835386][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 589.989844][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 590.128467][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 590.222636][ T9] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 590.353778][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 590.373740][ T9] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 590.558885][ T9] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 590.566976][ T9] usb 4-1: Manufacturer: syz [ 591.003460][T10544] kAFS: unable to lookup cell '/,' [ 591.466843][ T9] usb 4-1: config 0 descriptor?? [ 591.478860][ T9] usb 4-1: can't set config #0, error -71 [ 591.509477][ T9] usb 4-1: USB disconnect, device number 27 [ 591.536161][T10548] input: syz1 as /devices/virtual/input/input21 [ 697.379444][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 697.386578][ C1] rcu: 0-...!: (1 GPs behind) idle=2f94/1/0x4000000000000000 softirq=42963/42966 fqs=0 [ 697.397339][ C1] rcu: (detected by 1, t=10502 jiffies, g=35781, q=202 ncpus=2) [ 697.405626][ C1] Sending NMI from CPU 1 to CPUs 0: [ 697.405669][ C0] NMI backtrace for cpu 0 [ 697.405687][ C0] CPU: 0 UID: 0 PID: 10555 Comm: syz.3.1061 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 697.405708][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 697.405720][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x8e/0x110 [ 697.405758][ C0] Code: 83 c7 18 48 8b 75 08 e8 a0 34 35 f6 4c 89 f7 e8 f8 cb 35 f6 f7 c3 00 02 00 00 74 05 e8 fb 9b 5e f6 48 c7 44 24 20 00 00 00 00 <9c> 8f 44 24 20 f6 44 24 21 02 75 4f f7 c3 00 02 00 00 74 01 fb bf [ 697.405774][ C0] RSP: 0018:ffffc90000007c80 EFLAGS: 00000046 [ 697.405791][ C0] RAX: 0000000000000001 RBX: 0000000000000802 RCX: 0000000000000000 [ 697.405803][ C0] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffffffff99d533a0 [ 697.405815][ C0] RBP: ffffc90000007d08 R08: ffffffff99d533a3 R09: 1ffffffff33aa674 [ 697.405829][ C0] R10: dffffc0000000000 R11: fffffbfff33aa675 R12: dffffc0000000000 [ 697.405843][ C0] R13: dffffc0000000000 R14: ffffffff99d533a0 R15: 1ffff92000000f90 [ 697.405858][ C0] FS: 00007f72035fa6c0(0000) GS:ffff888125c57000(0000) knlGS:0000000000000000 [ 697.405874][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 697.405886][ C0] CR2: 00007f72035f9f98 CR3: 0000000031baa000 CR4: 00000000003526f0 [ 697.405903][ C0] Call Trace: [ 697.405911][ C0] [ 697.405921][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 697.405958][ C0] debug_deactivate+0x1d/0x200 [ 697.405982][ C0] __hrtimer_run_queues+0x2b0/0xc60 [ 697.406012][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 697.406031][ C0] ? read_tsc+0x9/0x20 [ 697.406063][ C0] hrtimer_interrupt+0x45b/0xaa0 [ 697.406099][ C0] __sysvec_apic_timer_interrupt+0x108/0x410 [ 697.406122][ C0] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 697.406141][ C0] [ 697.406147][ C0] [ 697.406154][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 697.406174][ C0] RIP: 0010:lock_release+0x89/0x3e0 [ 697.406191][ C0] Code: 9a 02 0e 00 0f 84 44 02 00 00 65 8b 05 60 85 fe 10 85 c0 0f 85 35 02 00 00 65 4c 8b 3c 25 08 90 9c 92 41 83 bf ec 0a 00 00 00 <0f> 85 1e 02 00 00 49 81 3e 00 43 60 93 0f 84 11 02 00 00 48 c7 44 [ 697.406207][ C0] RSP: 0018:ffffc9000d917710 EFLAGS: 00000246 [ 697.406222][ C0] RAX: 0000000000000000 RBX: ffffffff902fd301 RCX: 2bcf0bbc49e01200 [ 697.406235][ C0] RDX: ffffc9000d917801 RSI: ffffffff8be1ba20 RDI: ffffffff8be1b9e0 [ 697.406249][ C0] RBP: dffffc0000000000 R08: ffffc9000d917898 R09: 0000000000000000 [ 697.406262][ C0] R10: ffffc9000d9178f8 R11: fffff52001b22f21 R12: ffffc9000d9178a8 [ 697.406275][ C0] R13: ffffffff8172aae5 R14: ffffffff8e13f0e0 R15: ffff8880338a5a00 [ 697.406290][ C0] ? unwind_next_frame+0xa5/0x2390 [ 697.406318][ C0] ? deref_stack_reg+0x19f/0x230 [ 697.406340][ C0] ? unwind_next_frame+0xa5/0x2390 [ 697.406358][ C0] unwind_next_frame+0x19a9/0x2390 [ 697.406380][ C0] ? unwind_next_frame+0xa5/0x2390 [ 697.406400][ C0] ? __unwind_start+0xf8/0x760 [ 697.406422][ C0] __unwind_start+0x5b9/0x760 [ 697.406444][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 697.406468][ C0] arch_stack_walk+0xe4/0x150 [ 697.406492][ C0] ? arch_stack_walk+0xe4/0x150 [ 697.406514][ C0] stack_trace_save+0x9c/0xe0 [ 697.406537][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 697.406559][ C0] ? stack_trace_save+0x9c/0xe0 [ 697.406583][ C0] ? stack_depot_save_flags+0x40/0x900 [ 697.406605][ C0] kasan_save_track+0x3e/0x80 [ 697.406672][ C0] __kasan_kmalloc+0x93/0xb0 [ 697.406691][ C0] __kmalloc_noprof+0x27a/0x4f0 [ 697.406708][ C0] ? security_sk_alloc+0x52/0x390 [ 697.406729][ C0] security_sk_alloc+0x52/0x390 [ 697.406748][ C0] sk_prot_alloc+0x101/0x220 [ 697.406774][ C0] ? sk_alloc+0x24/0x370 [ 697.406801][ C0] sk_alloc+0x3a/0x370 [ 697.406829][ C0] __netlink_create+0x65/0x260 [ 697.406855][ C0] netlink_create+0x3ca/0x590 [ 697.406883][ C0] ? __pfx_nfnetlink_unbind+0x10/0x10 [ 697.406902][ C0] ? __pfx_nfnetlink_bind+0x10/0x10 [ 697.406923][ C0] __sock_create+0x4b0/0x9f0 [ 697.406951][ C0] __sys_socket+0xd7/0x1b0 [ 697.406976][ C0] __x64_sys_socket+0x7a/0x90 [ 697.406999][ C0] do_syscall_64+0xfa/0x3b0 [ 697.407020][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 697.407038][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 697.407057][ C0] ? clear_bhb_loop+0x60/0xb0 [ 697.407078][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 697.407097][ C0] RIP: 0033:0x7f720278ebe9 [ 697.407114][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 697.407129][ C0] RSP: 002b:00007f72035fa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 697.407147][ C0] RAX: ffffffffffffffda RBX: 00007f72029b6180 RCX: 00007f720278ebe9 [ 697.407160][ C0] RDX: 000000000000000c RSI: 0000000000000003 RDI: 0000000000000010 [ 697.407171][ C0] RBP: 00007f7202811e19 R08: 0000000000000000 R09: 0000000000000000 [ 697.407183][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 697.407194][ C0] R13: 00007f72029b6218 R14: 00007f72029b6180 R15: 00007ffd8917d948 [ 697.407217][ C0] [ 697.407653][ C1] rcu: rcu_preempt kthread starved for 10502 jiffies! g35781 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 697.926740][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 697.936747][ C1] rcu: RCU grace-period kthread stack dump: [ 697.942761][ C1] task:rcu_preempt state:R running task stack:26464 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 697.956676][ C1] Call Trace: [ 697.960005][ C1] [ 697.962999][ C1] __schedule+0x16aa/0x4c90 [ 697.967561][ C1] ? schedule+0x165/0x360 [ 697.971940][ C1] ? __pfx___schedule+0x10/0x10 [ 697.976929][ C1] ? schedule+0x91/0x360 [ 697.981209][ C1] schedule+0x165/0x360 [ 697.985407][ C1] schedule_timeout+0x12b/0x270 [ 697.990416][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 697.996115][ C1] ? __pfx_process_timeout+0x10/0x10 [ 698.001631][ C1] ? prepare_to_swait_event+0x341/0x380 [ 698.007325][ C1] rcu_gp_fqs_loop+0x301/0x1540 [ 698.012319][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 698.017310][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 698.022544][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 698.027945][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 698.033182][ C1] ? finish_swait+0xcd/0x1f0 [ 698.037819][ C1] rcu_gp_kthread+0x99/0x390 [ 698.042445][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 698.047800][ C1] ? __kthread_parkme+0x7b/0x200 [ 698.053123][ C1] ? __kthread_parkme+0x1a1/0x200 [ 698.058285][ C1] kthread+0x70e/0x8a0 [ 698.062400][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 698.067849][ C1] ? __pfx_kthread+0x10/0x10 [ 698.072515][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 698.077760][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 698.083143][ C1] ? __pfx_kthread+0x10/0x10 [ 698.087809][ C1] ret_from_fork+0x3fc/0x770 [ 698.092447][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 698.097598][ C1] ? __switch_to_asm+0x39/0x70 [ 698.102404][ C1] ? __switch_to_asm+0x33/0x70 [ 698.107652][ C1] ? __pfx_kthread+0x10/0x10 [ 698.112296][ C1] ret_from_fork_asm+0x1a/0x30 [ 698.117119][ C1] [ 698.120168][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 698.126609][ C1] CPU: 1 UID: 0 PID: 10547 Comm: syz.6.1060 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 698.136635][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 698.146726][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x8/0x70 [ 698.152850][ C1] Code: 8b 3d 74 6e fa 0b 48 89 de 5b e9 33 20 55 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 04 24 <65> 48 8b 0c 25 08 90 9c 92 65 8b 15 58 6a dc 10 81 e2 00 01 ff 00 [ 698.172603][ C1] RSP: 0018:ffffc9000ce97598 EFLAGS: 00000202 [ 698.178723][ C1] RAX: ffffffff81b4bbb0 RBX: ffff8880b873b040 RCX: ffff88802b6f1e00 [ 698.186725][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 698.194741][ C1] RBP: ffffc9000ce97700 R08: ffffffff8fa0b3f7 R09: 1ffffffff1f4167e [ 698.202757][ C1] R10: dffffc0000000000 R11: fffffbfff1f4167f R12: 1ffff110170c835d [ 698.210778][ C1] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff8880b8641ae8 [ 698.218797][ C1] FS: 0000000000000000(0000) GS:ffff888125d57000(0000) knlGS:0000000000000000 [ 698.227760][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 698.234476][ C1] CR2: 0000200000028000 CR3: 000000000df38000 CR4: 00000000003526f0 [ 698.242667][ C1] Call Trace: [ 698.245988][ C1] [ 698.248968][ C1] smp_call_function_many_cond+0xf80/0x12d0 [ 698.255018][ C1] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 698.261504][ C1] ? __kernel_text_address+0xd/0x40 [ 698.266761][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 698.273052][ C1] ? rcu_is_watching+0x15/0xb0 [ 698.277881][ C1] ? __pfx_flush_tlb_func+0x10/0x10 [ 698.283122][ C1] on_each_cpu_cond_mask+0x3f/0x80 [ 698.288273][ C1] flush_tlb_mm_range+0x6b1/0x12c0 [ 698.293511][ C1] ? free_pgd_range+0x144b/0x14c0 [ 698.298614][ C1] ? __pfx_flush_tlb_mm_range+0x10/0x10 [ 698.304255][ C1] tlb_flush_mmu+0x1a7/0x680 [ 698.308908][ C1] tlb_finish_mmu+0xc3/0x1d0 [ 698.313537][ C1] ? free_pgd_range+0x144b/0x14c0 [ 698.318633][ C1] free_ldt_pgtables+0x17b/0x320 [ 698.323612][ C1] ? __pfx_free_ldt_pgtables+0x10/0x10 [ 698.329145][ C1] ? down_read+0x1ad/0x2e0 [ 698.333602][ C1] exit_mmap+0x17c/0xb50 [ 698.337904][ C1] ? uprobe_clear_state+0x20f/0x290 [ 698.343141][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 698.347938][ C1] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 698.353623][ C1] ? __pfx_exit_aio+0x10/0x10 [ 698.358342][ C1] ? uprobe_clear_state+0x274/0x290 [ 698.363797][ C1] ? mm_update_next_owner+0xa7/0x870 [ 698.369135][ C1] __mmput+0x118/0x410 [ 698.373246][ C1] exit_mm+0x1da/0x2c0 [ 698.377354][ C1] ? __pfx_exit_mm+0x10/0x10 [ 698.381989][ C1] ? rcu_is_watching+0x15/0xb0 [ 698.386895][ C1] do_exit+0x648/0x22e0 [ 698.391111][ C1] ? preempt_schedule_common+0x83/0xd0 [ 698.396608][ C1] ? preempt_schedule+0xae/0xc0 [ 698.401504][ C1] ? __pfx_do_exit+0x10/0x10 [ 698.406153][ C1] ? preempt_schedule_thunk+0x16/0x30 [ 698.411580][ C1] do_group_exit+0x21c/0x2d0 [ 698.416320][ C1] __x64_sys_exit_group+0x3f/0x40 [ 698.421389][ C1] x64_sys_call+0x21ba/0x21c0 [ 698.426127][ C1] do_syscall_64+0xfa/0x3b0 [ 698.430737][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 698.436027][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 698.442216][ C1] ? clear_bhb_loop+0x60/0xb0 [ 698.447031][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 698.453059][ C1] RIP: 0033:0x7f4abb58ebe9 [ 698.457599][ C1] Code: Unable to access opcode bytes at 0x7f4abb58ebbf. [ 698.464654][ C1] RSP: 002b:00007ffdbd153ca8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 698.473114][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f4abb58ebe9 [ 698.481117][ C1] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 698.489115][ C1] RBP: 00007ffdbd153d0c R08: 00000006bd153d9f R09: 00000000000927c0 [ 698.497127][ C1] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000016 [ 698.505128][ C1] R13: 00000000000927c0 R14: 0000000000090033 R15: 00007ffdbd153d60 [ 698.513517][ C1]