last executing test programs: 28m39.642896372s ago: executing program 3 (id=1078): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000540), 0x181440, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xe) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x200, 0x0) ioctl$PPPIOCATTCHAN(r3, 0x40047438, &(0x7f0000000040)=0x1) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r3, 0x40047211, 0x0) r4 = openat$fb0(0xffffffffffffff9c, 0x0, 0x80, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x183240, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r7, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x6a2, 0x0, 0x6}]}) ioctl$FBIOPAN_DISPLAY(r4, 0x4606, &(0x7f0000000200)={0x190, 0x640, 0x500, 0x280, 0x0, 0xc0e4, 0x18, 0x1, {0x5, 0x8001}, {0x0, 0x7}, {0x9}, {0x29}, 0x1, 0x192, 0x7e, 0x4, 0x0, 0xffffffff, 0x0, 0x0, 0x6, 0x8, 0xd, 0x7fff, 0x0, 0x0, 0x3, 0x5}) r8 = inotify_init1(0x800) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r9, 0x0, 0x17, 0x0, 0x0) inotify_rm_watch(r8, 0x0) r10 = open$dir(&(0x7f0000000100)='./mnt\x00', 0x40500, 0x48) r11 = openat(r10, &(0x7f0000000140)='./mnt\x00', 0x20a02, 0x140) syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r11, 0x89f0, &(0x7f0000000000)={'gre0\x00', &(0x7f0000000400)={'ip_vti0\x00', 0x0, 0x20, 0xf000, 0xc, 0x6, {{0x3a, 0x4, 0x0, 0x7, 0xe8, 0x68, 0x0, 0x8, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x22}, @remote, {[@generic={0x44, 0x8, "4197b08e535a"}, @timestamp={0x44, 0x2c, 0x4f, 0x0, 0x4, [0x8000, 0xff, 0x4, 0x0, 0x4, 0x4, 0x4dcf, 0x1, 0xfc9, 0x4]}, @timestamp={0x44, 0x10, 0xe, 0x0, 0x0, [0xfffffff8, 0x9, 0x1ff]}, @rr={0x7, 0x17, 0x46, [@empty, @local, @multicast2, @remote, @rand_addr=0x64010100]}, @timestamp={0x44, 0x14, 0xbc, 0x0, 0x9, [0x1, 0x9, 0x2, 0xe]}, @timestamp_prespec={0x44, 0xc, 0xf6, 0x3, 0x4, [{@rand_addr=0x64010102}]}, @cipso={0x86, 0x2a, 0x3, [{0xf5154c012cf1349f, 0xa, "d4a7b117b5a06258"}, {0x6, 0xb, "52f05e87d77cc83b71"}, {0x0, 0xf, "723ef91751b6ded6385025243a"}]}, @timestamp={0x44, 0x14, 0x11, 0x0, 0x6, [0x196, 0x9, 0x5, 0x1]}, @cipso={0x86, 0x18, 0x3, [{0x5, 0x12, "e4cc598bd65863f0c12277e782649969"}]}]}}}}}) truncate(&(0x7f0000000200)='./mnt\x00', 0x4) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x640c7400, 0x0, 0x0, 0x0, 0x0, 0x0) 28m38.177321585s ago: executing program 3 (id=1083): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r12, {0x8}, {0xffff, 0xffff}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r13, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r14, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000580)={&(0x7f0000000000), 0xc, &(0x7f0000000540)={&(0x7f0000000a40)={0x88, r14, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x6}]}, 0x88}, 0x1, 0x0, 0x0, 0x4}, 0x24044040) r15 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) dup(r15) r16 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$uinput_user_dev(r16, &(0x7f00000005c0)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47b07c7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8], [], [], [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x758, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000]}, 0x45c) ioctl$UI_DEV_CREATE(r16, 0x5501) dup(r16) 28m37.558482409s ago: executing program 3 (id=1085): r0 = socket$packet(0x11, 0x3, 0x300) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) r2 = syz_open_dev$ptys(0xc, 0x3, 0x1) dup3(r2, r1, 0x80000) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000240)="c2", 0x1}], 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000680)="f2435f010008bafb0000ac850800", 0xe, 0x0, &(0x7f0000000200)={0x11, 0xe7, r3}, 0x14) 28m37.354839325s ago: executing program 3 (id=1086): r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x1, 0x14100) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async, rerun: 32) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0xa4, &(0x7f00000001c0)=[@in6={0xa, 0x4e22, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x8}, @in={0x2, 0x4e24, @empty}, @in={0x2, 0x4e21, @rand_addr=0x64010102}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e24, @local}, @in6={0xa, 0x4e23, 0x3, @rand_addr=' \x01\x00', 0x6}, @in6={0xa, 0x4e20, 0x6773, @remote, 0x6d1}, @in={0x2, 0x4e22, @multicast2}]}, &(0x7f0000000280)=0xc) (rerun: 32) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f00000002c0)={r2, 0x2}, &(0x7f0000000340)=0x8) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') (async) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) write$uinput_user_dev(r4, &(0x7f0000000580)={'syz1\x00', {0x6ec9, 0x7, 0x5, 0x5}, 0x3e, [0x9, 0x2, 0x6, 0x2, 0x5334, 0x400, 0x80000000, 0x5, 0x8, 0x0, 0x200006, 0xf5, 0x9, 0x39, 0xf47d5a13, 0x8, 0xffffdb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x4, 0x3, 0x4, 0xf252, 0x4, 0x800, 0x300000, 0x7, 0xe, 0x4623b, 0x7, 0x0, 0x1ff, 0xc8, 0x3ff, 0x3, 0x11, 0x4, 0xba53, 0x8da8, 0x2, 0x1fd, 0x3959, 0x8, 0xe, 0x3, 0x2, 0xde, 0x8, 0x9, 0x1, 0x1, 0x80000001, 0x4, 0x200, 0x1, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x9, 0x7, 0x1], [0x0, 0x1e, 0x2, 0x8000, 0xaf5, 0x6, 0x0, 0x5, 0x7, 0xfffffffc, 0x4, 0x4, 0x72c, 0xc32, 0x3, 0x9, 0x10000, 0x401, 0x8001, 0xffffffff, 0x1, 0x8, 0x5, 0x0, 0x981, 0x4, 0x100, 0x3ff, 0x2, 0xfffffffe, 0x0, 0x1000001, 0x10, 0x1, 0x0, 0x5, 0x4, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x400006, 0x96, 0xfffffff9, 0x101, 0x0, 0x2, 0xc01, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0xe47, 0x6, 0x2, 0x1, 0x1, 0x8, 0x6, 0x89, 0xfffffffb], [0x401, 0xc584, 0xffff, 0xcd3, 0x7, 0x20, 0x7, 0x1004, 0x7, 0x10, 0x7, 0x200009, 0xe8b, 0x5, 0x7fffffff, 0x7, 0xffffffff, 0x1000, 0x2, 0x10, 0x800001, 0xfffffff9, 0xe55, 0x10, 0x80000401, 0x4, 0x4, 0x5, 0x9, 0x2, 0x5, 0x80, 0xb, 0x28e3, 0x44, 0x2, 0x3, 0x4, 0x7, 0x6d7e, 0x3, 0x8, 0x1008001, 0xbf23, 0x6, 0x8, 0x95a, 0x0, 0x3ff, 0x3, 0x6, 0x100fffd, 0x6, 0x7, 0x4, 0xea, 0x2, 0x5, 0x6, 0xd9, 0x2, 0x8, 0x401, 0x40005], [0x108e, 0x100, 0x3, 0x3, 0x1, 0x8000, 0x6, 0x3, 0x50, 0x2, 0x763, 0xb, 0x402, 0x2, 0x4, 0x1000, 0x7f, 0x25, 0x3fa6, 0x4, 0x0, 0x5, 0x1e0, 0x4, 0xe47, 0x3, 0x3, 0x4, 0x103, 0x1000, 0x3b, 0x2, 0x5, 0x800, 0xa80a, 0x65f413f9, 0x4, 0x8, 0x8a8, 0x2, 0x40, 0x7, 0x2, 0x6, 0x4, 0x10, 0x0, 0x0, 0x7fff, 0x2, 0xfffffff8, 0x3, 0x9, 0x200, 0x7, 0x4ee1, 0x7f, 0x7, 0xe, 0x4, 0xe, 0x2000b, 0x133, 0x6]}, 0x45c) (async) ioctl$UI_DEV_CREATE(r4, 0x5501) readv(r4, &(0x7f0000001900)=[{0x0, 0xea}], 0x1) (async) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) (async) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) (async) pivot_root(&(0x7f0000000a00)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00') (async) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000040)=""/143) 28m36.8066704s ago: executing program 3 (id=1087): socket$vsock_stream(0x28, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, 0x0) io_uring_enter(r2, 0x47f6, 0x0, 0x4, 0x0, 0x0) 28m36.442446471s ago: executing program 3 (id=1090): socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4004550c, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40000000, 0x1}) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) socket$netlink(0x10, 0x3, 0x0) connect$inet6(r2, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000000040)={0x0, 0xfdd0}) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a00)={0x1c, 0x1e, 0xa01, 0x0, 0x0, {0x7}, [@nested={0x8, 0x6e, 0x0, 0x1, [@nested={0x4, 0x6c}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800d1}, 0x0) 28m36.071779454s ago: executing program 32 (id=1090): socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4004550c, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40000000, 0x1}) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) socket$netlink(0x10, 0x3, 0x0) connect$inet6(r2, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000000040)={0x0, 0xfdd0}) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a00)={0x1c, 0x1e, 0xa01, 0x0, 0x0, {0x7}, [@nested={0x8, 0x6e, 0x0, 0x1, [@nested={0x4, 0x6c}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800d1}, 0x0) 27m32.00285884s ago: executing program 2 (id=1295): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "01ff"}, @main=@item_4={0x3, 0x0, 0x9, "e7e03604"}, @local=@item_012={0x2, 0x2, 0x2, '\x00\b'}, @global=@item_4={0x3, 0x1, 0x2, "0200"}, @main=@item_4={0x3, 0x0, 0x8, "0400"}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4]}}, 0x0}, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_OPENQRY(r1, 0x4b4c, &(0x7f0000000080)) 27m29.698268588s ago: executing program 2 (id=1302): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)={0x40, r2, 0x1, 0x0, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x24, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "13f7044ac15a16ef"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="db2c4de326ab9c771354c4ef6b7025b5"}]}]}, 0x40}}, 0x8000) 27m29.408412214s ago: executing program 2 (id=1303): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000022c0)=@newtfilter={0x924, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff3}, {}, {0x8, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x84c, 0x2, [@TCA_BASIC_POLICE={0x848, 0x4, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xf, 0xa, 0x0, 0x7f, 0x1, 0x7, 0x80000001, 0x6, 0x8, 0x46d, 0x400, 0x303, 0x214, 0xb0c, 0x100, 0x7, 0xe, 0x2, 0x7fff, 0x8, 0x7fff, 0x5, 0x80, 0x400, 0x4, 0x1, 0xff, 0x9, 0x1, 0x0, 0x5071, 0x1bf66fb9, 0x7, 0xf50c, 0x4, 0x0, 0x800, 0x1f01, 0x3, 0x0, 0xfffffffe, 0xffff, 0x6, 0xd17, 0x7fffffff, 0x1, 0x8, 0xc, 0xd6e1, 0xbaf5, 0x2, 0x9, 0x970c, 0xffffffb2, 0x4, 0x101, 0x5, 0x40, 0x2, 0x2, 0xd0d5, 0x0, 0x2, 0x1, 0x3b05, 0x5, 0xfffffffd, 0x7, 0xc8b8, 0x0, 0x8, 0xe42, 0x8, 0x5, 0x7, 0x401, 0x5, 0x1000, 0x4, 0x10001, 0x6, 0x7, 0x0, 0x8001, 0x0, 0x1, 0xf, 0x5, 0xc1d6, 0x5, 0x100, 0x8, 0xa411, 0x6, 0x2, 0x1, 0x1, 0x10001, 0x6, 0xa6c, 0x7, 0x1ff, 0x7ff, 0xfffffffa, 0x60, 0x6, 0x9f50, 0x400, 0x9, 0x1ff, 0x0, 0x101, 0x6, 0x1575, 0x2, 0x101, 0x6, 0xebc, 0x5, 0x5f0, 0x1, 0x2, 0x3, 0x7, 0x2, 0x6, 0x1ff, 0x80000000, 0x6, 0x86, 0x7d, 0x2, 0x9, 0xd386, 0x6, 0x10, 0x6, 0x2, 0x8001, 0x5a, 0x7, 0x8001, 0x1, 0x0, 0x4b2, 0x4, 0x1, 0xffffffff, 0x9, 0xffffffff, 0x5, 0x8000000, 0x0, 0x5, 0xcd16, 0x4, 0x1, 0x7b5000, 0x9, 0x0, 0x7, 0x4000, 0x6, 0xf497, 0x1, 0x4, 0x3, 0x9, 0x1, 0x3, 0x101, 0xa9, 0x300, 0x37, 0x4, 0x403d, 0x400, 0x0, 0x80000000, 0x10001, 0xa, 0x5, 0x4, 0x8, 0x5247bda0, 0x1afeb244, 0x6, 0x10001, 0x0, 0xd7, 0xc, 0x2, 0x10, 0x4, 0x5, 0x100, 0x0, 0x2, 0x4000000, 0xf, 0xd886, 0x10000, 0x7, 0x3, 0xf, 0x2, 0xa, 0xc, 0x101, 0x1ff, 0xfffffffb, 0x8, 0x0, 0x0, 0xc0000000, 0x6, 0x80, 0x9a3f, 0x5, 0xfffffff9, 0x5, 0x7, 0x1, 0x4, 0xf7, 0x4, 0x1, 0x81, 0x4, 0x7, 0x6, 0x15a64618, 0x7, 0x0, 0x7, 0xff, 0xae6, 0x1000, 0x6, 0x7, 0x1, 0x10000, 0x7, 0xfffffff9, 0x1, 0x3, 0x587, 0x1e1, 0x1, 0x0, 0x5, 0x5, 0x9, 0x80000000, 0x5, 0x8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xff, 0x20000000, 0x3, 0x4, 0x0, {0x4, 0x2, 0x8, 0x8, 0x4, 0x5}, {0xe, 0x2, 0xfff, 0xff00, 0x10, 0x1}, 0xb72, 0x8001, 0xdb}}, @TCA_POLICE_RATE={0x404, 0x2, [0xf, 0x1, 0x2, 0x800, 0x3b5e, 0xfffff801, 0x79, 0x8001, 0xf22, 0x0, 0x1, 0x0, 0x8, 0x4a7, 0x1, 0x2, 0x81, 0x4, 0x7, 0x2, 0xd5d, 0x5268, 0x7e, 0x3, 0x0, 0x6, 0x5, 0x3, 0xffffffc0, 0x4455, 0xffffffff, 0xfffeffff, 0x8, 0x45e, 0xff, 0x2, 0x0, 0x7f, 0x7ff, 0x2, 0x7, 0x8, 0xffffff45, 0x4, 0xc, 0x6, 0x6cff1733, 0xd39, 0x4, 0x0, 0x7, 0x8, 0x8, 0x8, 0x3, 0x2, 0x1, 0x200, 0x12000000, 0x2, 0x9c, 0x7, 0x1, 0x2, 0x5, 0x2, 0x5, 0x9, 0x96, 0x37, 0xb6, 0x6, 0x1, 0x7, 0x7d, 0x2, 0xe2b, 0x10001, 0xfff, 0x3a, 0x2, 0x10000, 0x81, 0x2, 0x7, 0x9, 0xd317, 0x9de, 0x6, 0x800, 0x1, 0x43, 0xff, 0x4, 0x0, 0x7fffffff, 0x8, 0x6, 0x10000, 0x9, 0x5, 0x7, 0xd, 0x9e5, 0x0, 0x4, 0x76, 0x5, 0xffffffff, 0x7, 0x2, 0x5f, 0x0, 0x6, 0x865feb0b, 0x2, 0x0, 0x1fb, 0x7fffffff, 0x401, 0x400, 0x5, 0xa2, 0x2, 0x195, 0x7, 0x3, 0x5, 0x6, 0xffff8c56, 0xfffffffb, 0x8, 0x2, 0x5, 0x7fffffff, 0x1, 0x6, 0x2, 0x7, 0x2, 0x4, 0x10001, 0x1, 0x48, 0x10001, 0x5, 0x1, 0x2, 0x5, 0x7, 0x7f, 0x36800, 0x0, 0x0, 0x3, 0xfffffffe, 0x6, 0xe000, 0xb1, 0x5, 0x8, 0x4, 0xffffffff, 0x1000, 0x7ff, 0xb, 0x80, 0x1, 0x5, 0x80000000, 0x53, 0x6, 0x4, 0x0, 0x3ff, 0x838, 0x9, 0xfffffffc, 0x7, 0x9, 0x2, 0x2, 0xffff, 0x1, 0xfffffff8, 0x5, 0x80000001, 0xfffffffe, 0x4, 0x2, 0x400, 0x800, 0x4, 0xfffff4bb, 0x8, 0x6, 0xc, 0x6, 0x1, 0x6, 0x9, 0x0, 0x944, 0x70, 0x6, 0x5, 0x10000, 0x5, 0x3, 0xb52f, 0xfe, 0x0, 0xa0, 0x8, 0x203, 0x4, 0x6, 0x0, 0xff, 0x3, 0x0, 0x5c, 0x6, 0x8, 0x0, 0x15, 0xffff, 0x0, 0x9, 0x7f, 0x4, 0x6, 0x6, 0x7, 0x0, 0x9, 0x8, 0x5, 0x4, 0x9, 0xffff, 0x9d1, 0x1, 0xf, 0x8, 0x40, 0x10000, 0xd3ae, 0x5f5a, 0x1, 0x6, 0xd00, 0x0, 0x24e00b6d, 0x8f3, 0x2]}]}]}}, @filter_kind_options=@f_flow={{0x9}, {0x30, 0x2, [@TCA_FLOW_POLICE={0x10, 0xa, 0x0, 0x1, [@TCA_POLICE_RATE64={0xc, 0x8, 0x10001}]}, @TCA_FLOW_EMATCHES={0x1c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x5, 0x0, 0x0, {{0x3, 0x7, 0x80}, {{0x4, 0x1}, {0x7ff, 0x0, 0x1}}}}]}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x3ff}, @TCA_CHAIN={0x8, 0xb, 0x4}, @filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_MPLS_LABEL={0x8, 0x46, 0x7}]}}, @filter_kind_options=@f_matchall={{0xd}, {0x2c, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x8}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x7}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x7, 0x8}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x3}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xc, 0x4}}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0x3}}]}, 0x924}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_CAPBSET_DROP(0x18, 0x10009) sendmsg$NFULNL_MSG_CONFIG(r9, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000740)={0x1c, 0x1, 0x4, 0x401, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFULA_CFG_CMD={0x5, 0x1, 0x4}]}, 0x1c}}, 0x90) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb00"/38, 0x26}, {&(0x7f00000004c0)="f058fe7dad777f8f", 0x300}], 0x2}, 0x5) 27m28.478256743s ago: executing program 2 (id=1306): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYRESOCT=0x0, @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00'], 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/vlan/vlan0\x00') ioctl$F2FS_IOC_GET_PIN_FILE(r3, 0x8004f50e, &(0x7f0000000080)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8923, &(0x7f0000000000)={'vlan0\x00', @local}) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000007e40)=[{{&(0x7f0000000340)={0xa, 0x4e20, 0x0, @dev}, 0x18, 0x0}}], 0x6c00, 0x48) sendto$inet6(r5, 0x0, 0x0, 0x10, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0xffffff69}, 0x1c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r7, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = gettid() timer_create(0x0, &(0x7f00000001c0)={0x0, 0x33, 0x2, @tid=r9}, &(0x7f0000bbdffc)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) recvmsg(r8, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000980)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x10000) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000840)={0x0, 0x1, 0x401, 0x1}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) 27m26.973998056s ago: executing program 2 (id=1308): copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x0) (async, rerun: 64) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 64) close(r0) (async, rerun: 32) socket$inet6_mptcp(0xa, 0x1, 0x106) (rerun: 32) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x80042, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xe) r2 = shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) shmdt(r2) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) (async, rerun: 64) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r3, 0x40047438, &(0x7f0000000180)=""/246) (async, rerun: 32) write$binfmt_aout(r3, &(0x7f00000003c0)=ANY=[], 0xfce1) (rerun: 32) fchmod(r1, 0x1) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) (async) r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x15, 0x17, 0xee, 0x40, 0xaf0, 0x7a05, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x5, 0x49}}]}}]}}, 0x0) syz_usb_control_io$printer(r5, 0x0, &(0x7f0000000540)={0x34, &(0x7f00000000c0)={0x40, 0x17, 0x11, "0a248c0291390e000000005e9ccddd623b"}, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_int(r4, 0x0, 0x1, &(0x7f0000000000)=0xffffff7e, 0x4) (async) bind$inet(r4, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) (async, rerun: 64) socket$kcm(0x10, 0x2, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) (async, rerun: 64) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) (async, rerun: 64) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x87, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffffd2a9dc6da626c0e21677ffaaaaaaaaaa2b86dd6700000100513afffe880000000000000000000000000201ff02000000000000000000000000000189009078000000002001000000000000000000000001fe800000000000000000000000000038220560aeb59d3fb13258c6f29dd7eed9c5aaa04a18f74d2a890000"], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x10000029, 0x8001, 0x0, 0x9, 0xfffffffffffffffe, 0x22, 0xfa11}, 0x0) 27m26.710523429s ago: executing program 2 (id=1309): r0 = socket$inet(0x2, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYRES32=r3, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}, 0x1, 0x0, 0x0, 0x4048020}, 0x20000) (fail_nth: 10) 27m26.136325707s ago: executing program 33 (id=1309): r0 = socket$inet(0x2, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYRES32=r3, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}, 0x1, 0x0, 0x0, 0x4048020}, 0x20000) (fail_nth: 10) 26m35.621183922s ago: executing program 4 (id=1454): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="94010000100001000000000000000000fc0000000000000000000000000000000000000000000000000100000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000032000000fe8000000000000000000000000000bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0004000000000048000200656362286369706865725f6e756c6c"], 0x194}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0xa4}, 0x1, 0x0, 0x0, 0x24000154}, 0x20000050) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x403, 0x6030, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0x2, {[@main=@item_012={0x1, 0x0, 0x7, "a4"}]}}, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000002c0)={0x84, &(0x7f00000000c0)={0x20, 0x6, 0xd, "5e6424818327b2369deca65eb2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00M'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) read(r1, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a20000000000a01080000000000000000010000090900010073797a3100000000d0000000030a030000000000000000000100000a0900010073797a31000000000900030073797a3000000000a4000300"], 0x118}, 0x1, 0x0, 0x0, 0x4040994}, 0x20000050) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2400c000}, 0x20008800) r3 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x80080, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x3) ioctl$TCSETSF2(r3, 0x5434, 0x0) r4 = syz_usb_connect$hid(0x6, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x0, 0x1e7d, 0x2c24, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x40, 0x80, 0x10, [{{0x9, 0x4, 0x0, 0x1d, 0x2, 0x3, 0x1, 0x1, 0x6, {0x9, 0x21, 0x4, 0x9, 0x1, {0x22, 0xa25}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x80, 0x6, 0xfb}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0x3, 0x9, 0x6}}]}}}]}}]}}, &(0x7f00000005c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x201, 0x15, 0x0, 0x6, 0x40, 0xfb}, 0xc4, &(0x7f0000002100)={0x5, 0xf, 0xc4, 0x4, [@generic={0xa6, 0x10, 0x1, "a1d7bae67315deed30d0e3640c971c70afaba4be86e45ee42f8fa7409d6a7e0673f2443a36bee2b1d4a76619bd1a666783c4d52fba2e6016ae2f88574c1eba622fe4b6960edd16fed96dfa5e8067774c1bbaaa8da4dba58b69a248f83a4629805d6a8332ba823f0f7ab7eb4db975c0037162fe0cc552eca436e9e1d9fec45e449abb56c16f41011d1d20d2c650f8470276b2be608a8650103537a6077f22c31c4edc47"}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x2, 0x4, 0x79, 0x8}, @wireless={0xb, 0x10, 0x1, 0xc, 0xa1, 0x4, 0x1b, 0x8, 0x9}]}, 0x5, [{0x4d, &(0x7f00000003c0)=@string={0x4d, 0x3, "8275530c8ab8bdc049724494a26fe5296a652b730dc8020c9205583996f41b972278376e27cd6978cd1edbeb978c75d54b9c4d7ec963834c897ac556bcc03fd7881d7c09ca435938ec4c48"}}, {0xf4, &(0x7f0000000440)=@string={0xf4, 0x3, "14480534ba3fd12099c091b3aa182983b435748186dc4d677beafad7c7fd85aa7188cd4cffcf0f106c8adf9cd9b99c2e1a703157bfa86aab7c883f479f3798bcaaaabc1568515a3b08f0f4e4fa81c6381883723a6fdc2b9fcce4695c95cb5c1da7c36a4f509e10df3189446388d5100311994c69a16a0df728fbb3b84b2f2d6098e353791ccbf92c3430248b43f578a835a6055bf656499d1c354dc22012547083706beee5dee05a7e4a50df6cbf8a05c367b1fa0da86478e92dc87fff67830e672f464b83c6b918d36e78fa9be0c02947594e1cc282eade01e50000b7b9fd6c67b3dd23c5130373f5e17067d326deb5f632"}}, {0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x140c}}, {0xee, &(0x7f0000002200)=@string={0xee, 0x3, "9255c35e11d4713d0118d02f6d592bb45930d64df0a2ad85b700eccdbe4d416b046e493c3a818d3d4d175271a859f7016c8088287c7300a6c777fd6c453c1fd40d1864d36e59f64df2e2a3ad35af692d0de3a99097e288b6b67cd23f6c17e5a81e3a517ff467662a970bc5382526fbf6b0730eac716ab75e70e4cb2473f6e31463c5854f076a8d9c2afe7d46c85f0be4b18e3494da400a8894ec628b0130452996259cf6c912739bbfe420caf63f4680df0d2003db7c95f4d91d00cf813fce95eb5b7c29e1a3adcea70461276370060fb229034a74cc933bff28c02a5559d12026f88a7f76162e1df86f403c"}}, {0xd, &(0x7f0000000580)=@string={0xd, 0x3, "4349ea1b89ce1c2ffd6ed5"}}]}) syz_usb_control_io$hid(r4, &(0x7f0000000800)={0x14, &(0x7f0000000600)={0x20, 0x5, 0x14, {0x14, 0xf, "fa1070862be733e111629e77b022a0df4720"}}, &(0x7f0000000680)={0x0, 0x3, 0x4a, @string={0x4a, 0x3, "e5e622db68073279f74c1413b51e4ed4fad36d246a37a4a223e35ceda281dc65c04cf08b7d608a1d16bf437aab4cc8845c0c9f9bcb90080f1de06f64abce06acc229c681261b6dd8"}}, &(0x7f00000024c0)={0x0, 0x22, 0x16, {[@local=@item_012={0x0, 0x2, 0x9}, @local=@item_012={0x1, 0x2, 0x3, 'P'}, @local=@item_4={0x3, 0x2, 0x5, "d9f1f0cf"}, @main=@item_012={0x1, 0x0, 0x5, "1f"}, @global=@item_012={0x1, 0x1, 0x8, "98"}, @local=@item_4={0x3, 0x2, 0x5, "60fa747b"}, @main=@item_4={0x3, 0x0, 0x8, "3c3492ad"}]}}, &(0x7f0000000740)={0x0, 0x21, 0x9, {0x9, 0x21, 0x5, 0x4, 0x1, {0x22, 0xd43}}}}, &(0x7f0000000ac0)={0x18, &(0x7f0000002300)={0x40, 0x15, 0xa5, "de02b99cf7a6418bdc7870b269cf91018557aedb7869be2c8c65440f1afa6e16a893ff63565aaf7ada6b968c0e386bbcf594630de3df486a6f65e3cd8936b88cec9bd39a589f3d2da511b680c13ab2e77136a8b596a4926d894c0e1435363f42f7b020cd4f60aa731a86c567d00da28ae1ec791a067bd239330b05b74792ae15958caf08d6a10c41dcd54eb72fe1d4283d94b16a3722a6e937b2dfe3b809fa60f174620a68"}, &(0x7f0000000900)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000940)={0x0, 0x8, 0x1, 0xff}, &(0x7f0000000980)={0x20, 0x1, 0xbb, "2556513e9b1146a85e0d9bf6c93b4dbbe4fd0c7690336f5f71d8fbd432fa5d5f7e3561c6dd17d3230c56cdba6c5c446088981fce25a9a2c219137b502e98a0c012ff1a2a69840d79521260a73a27a513cf2a8e5ad28c2aac5352ca780e490420be605a5f4bf16b4e4a90bb49dfa6ca9dfa549d2d726544c7d3f8db7e5b702328695e2270bcdcfd5f341721b2274a838d1c2bebfc35a749e0996839cf3586ef2326bc6c2a13e7e4a2dd96a030203a04abc02565ac402d738e3047b0"}, &(0x7f0000000a80)={0x20, 0x3, 0x1, 0x4}}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000023c0)=ANY=[@ANYBLOB="0892118ee32907b131f7b9e5fd118e3515d036be59be2bef6fb3cea84d1380a6a975e9883a6b193ed6b1cd6f72241c11d1c68117b0321490a81b8111c57a5ec36f5a3156e7733ee1fe7c28202766e0e198c2f5935848fd0b9c516df43f1badc280d78e83ad9634760622637dd6e1096bf27e5b4637c171e1a98cabf86d5cce0daac195e7640b2091b7b70693ca90e73b18c32ecb9fdb76c0bc696cdff17d0da5b4f184f6b2877fffa282ca9cf9be212a", @ANYRES16=r3, @ANYRES8=0x0, @ANYRES32=r7, @ANYRESDEC=r0, @ANYRESHEX=r5, @ANYRES64=r5], 0x38}, 0x1, 0x0, 0x0, 0x24008081}, 0x40000) r8 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp\x00') read$FUSE(r8, &(0x7f00000000c0)={0x2020}, 0x2020) read$FUSE(r8, &(0x7f0000004440)={0x2020}, 0x2020) write$UHID_CREATE2(r8, &(0x7f0000000b00)={0xb, {'syz1\x00', 'syz0\x00', 'syz1\x00', 0xda, 0x7, 0x2, 0x327, 0x4, 0x80000001, "80508f6f39c7807390d61ff621939bff18b7b6cdceb37e81d7bc72447787b0df7d5d97037d88d5beab0542c94c7101b708209224289644920bdaecb0460c4a8ebfe477692ea1c22bdcafccb440f8950731251e3b4875e3aba08e973859e2f91209d2cdb0725a58df6947feb14d6a2d44a800771b04f0c078d19ba697fe9a9c92e0d5d07a3ae8033ff4ea93ed0499d755fdafaa732d1b57adf443fe4b9628945db602dfcde7f7dab9cbf963032c975ea854f0190b0205ab8b3b4dd96fb0d89ba45fc1d22dbf492a9d260620e1e965ccd60d79d361002cd81ea08a"}}, 0x1f2) 26m32.01633576s ago: executing program 4 (id=1464): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000007e40)=[{{&(0x7f0000000340)={0xa, 0x4e20, 0x0, @dev}, 0x18, 0x0}}], 0x6c00, 0x48) sendto$inet6(r0, 0x0, 0x0, 0x10, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0xffffff69}, 0x1c) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000840)={0x0, 0x1, 0x401, 0x1}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendto$unix(r2, 0x0, 0x0, 0x2004c084, &(0x7f0000001680)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x48080}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) openat$sysctl(0xffffff9c, 0x0, 0x1, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0xb4, 0x0, &(0x7f0000001580)=[@enter_looper, @acquire, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x60, 0x18, &(0x7f00000000c0)={@flat=@binder={0x73622a85, 0x1100}, @fda={0x66646185, 0x5, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f0000000000)=""/98, 0x62, 0x0, 0x24}}, &(0x7f0000000180)={0x0, 0x18, 0x34}}, 0x400}, @register_looper, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x70, 0x0, &(0x7f00000002c0)={@fda={0x66646185, 0x2, 0x2, 0x18}, @ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/209, 0xd1, 0x1, 0x40}, @ptr={0x70742a85, 0x1, &(0x7f0000000540)=""/4096, 0x1000, 0x0, 0x28}}, 0x0}, 0x40}, @register_looper, @acquire={0x40046305, 0x1}], 0x0, 0x0, &(0x7f0000000440)}) socket$nl_route(0x10, 0x3, 0x0) mq_open(&(0x7f0000003d00)='..\x00', 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r4, 0xc038943b, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x3, &(0x7f0000000140)=[{0x35, 0x0, 0x0, 0x2}, {0x35, 0x0, 0x0, 0xe12b}, {0x16}]}) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) 26m27.592910981s ago: executing program 4 (id=1476): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r5 = socket(0x10, 0x3, 0x0) close(r4) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x7, 0x6361, 0x5, 0xffffffff, 0x2000006}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x2b65, 0x4000000000000267, 0x0, 0x25, 0x59dd, 0x9}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0xe}, {0x2, 0xb}, {0xfff3, 0x3}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000c061}, 0x40004) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r9 = openat$vcs(0xffffff9c, &(0x7f0000000040), 0x800, 0x0) r10 = syz_io_uring_setup(0x690e, &(0x7f0000000440)={0x0, 0x1, 0x10100, 0x2001}, &(0x7f0000000200), &(0x7f0000000140)=0x0) syz_io_uring_setup(0x1b67, &(0x7f00000003c0), &(0x7f0000000240)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r12, r11, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x8}) io_uring_enter(r10, 0x184c, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_int(r8, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) bind$inet6(r9, &(0x7f0000000280)={0xa, 0x4e24, 0x8af, @empty, 0x100000}, 0x1c) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r13, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000000203010100000000000000ffffff7f000800034000000000080004400000000008000540000000000900020000000000070000000800010001"], 0x40}}, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r8, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18) syz_emit_ethernet(0xba, &(0x7f00000002c0)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xac, 0x0, 0x0, 0xfd, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x24, 0x0, {0x24, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x35}, {[@cipso={0x86, 0x76, 0x0, [{0x0, 0xc, "e2560000000000000008"}, {0x0, 0x9, "789607675ca638"}, {0x6, 0xe, "7434954373561de584b703c8"}, {0x0, 0x9, "e706d30bd224f8"}, {0x6, 0x12, "4e543700003c36804100000000000000"}, {0x0, 0x10, "c600"/14}, {0x0, 0xa, "65807fe97612fe86"}, {0x0, 0x12, "73bc2300ad9d19a30000000000004000"}, {0x6, 0x6, "c8f46976"}]}, @cipso={0x86, 0x6, 0x2}]}}}}}}}, 0x0) 26m27.011764383s ago: executing program 4 (id=1477): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x2400, 0x0) lseek(r2, 0xfffffffffffffff9, 0x2) read(r2, &(0x7f00000002c0)=""/22, 0x16) socket$inet_smc(0x2b, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000000c0)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'lc\x00', 0x1, 0x400000, 0x4}, 0x2c) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x62}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x1, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) accept4(r3, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 26m25.98729408s ago: executing program 4 (id=1481): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703340000001f03000000000000040014000d000a000d0000009ee517d3334abc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb", 0x57}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20004002) 26m25.872666056s ago: executing program 4 (id=1482): openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x202) (async) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000780)={0xfffffffe, 0x0, 0x0, 'queue0\x00', 0x48}) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0xa1001) (async) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0xa1001) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) (async) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3}}) (async) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f00000001c0)={0x1, 0x1ff, 0x7f, 0x0, 0x11}) write$sndseq(r0, 0x0, 0x0) syz_open_dev$radio(&(0x7f0000000000), 0x0, 0x2) (async) syz_open_dev$radio(&(0x7f0000000000), 0x0, 0x2) socket$nl_generic(0x10, 0x3, 0x10) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug', 0x0, 0x0) (async) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug', 0x0, 0x0) fcntl$notify(r3, 0x402, 0x80000008) openat$ptp0(0xffffffffffffff9c, 0x0, 0x481, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fsopen(&(0x7f0000000300)='befs\x00', 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = syz_io_uring_setup(0x9d2, &(0x7f00000000c0)={0x0, 0x1, 0x800, 0x3, 0x1}, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r7, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) ioctl$int_in(r5, 0x5452, &(0x7f0000000040)=0x5) recvfrom(r5, 0x0, 0x0, 0x0, 0x0, 0x0) (async) recvfrom(r5, 0x0, 0x0, 0x0, 0x0, 0x0) connect$unix(r6, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a7c000000060a0b04000000000000000002000000500004802800018007000100637400001c000280050003000100000008000140000000170800024000000007240001800a00010072656469720000001400028008000140000000170800024000ffff140900010073797a30000000000900020073797a32"], 0xa4}}, 0x0) 26m10.719264852s ago: executing program 34 (id=1482): openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x202) (async) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000780)={0xfffffffe, 0x0, 0x0, 'queue0\x00', 0x48}) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0xa1001) (async) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0xa1001) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) (async) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3}}) (async) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f00000001c0)={0x1, 0x1ff, 0x7f, 0x0, 0x11}) write$sndseq(r0, 0x0, 0x0) syz_open_dev$radio(&(0x7f0000000000), 0x0, 0x2) (async) syz_open_dev$radio(&(0x7f0000000000), 0x0, 0x2) socket$nl_generic(0x10, 0x3, 0x10) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug', 0x0, 0x0) (async) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug', 0x0, 0x0) fcntl$notify(r3, 0x402, 0x80000008) openat$ptp0(0xffffffffffffff9c, 0x0, 0x481, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fsopen(&(0x7f0000000300)='befs\x00', 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = syz_io_uring_setup(0x9d2, &(0x7f00000000c0)={0x0, 0x1, 0x800, 0x3, 0x1}, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r7, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) ioctl$int_in(r5, 0x5452, &(0x7f0000000040)=0x5) recvfrom(r5, 0x0, 0x0, 0x0, 0x0, 0x0) (async) recvfrom(r5, 0x0, 0x0, 0x0, 0x0, 0x0) connect$unix(r6, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a7c000000060a0b04000000000000000002000000500004802800018007000100637400001c000280050003000100000008000140000000170800024000000007240001800a00010072656469720000001400028008000140000000170800024000ffff140900010073797a30000000000900020073797a32"], 0xa4}}, 0x0) 25m39.207216235s ago: executing program 1 (id=1581): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000a40)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(twofish)\x00'}, 0x34) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4$alg(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x240008d1}], 0x1, 0x0) io_setup(0xff, &(0x7f0000000380)=0x0) io_submit(r2, 0x2000000000000225, &(0x7f0000001440)=[&(0x7f0000000200)={0x1000600, 0x0, 0x700000000000000, 0x0, 0xfffb, r1, &(0x7f0000000340), 0x2d}]) 25m38.582274656s ago: executing program 1 (id=1583): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b"], 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x200000, 0x3}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_io_uring_setup(0x8d6, &(0x7f00000000c0)={0x0, 0x8000, 0x400, 0x0, 0x379}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r4, 0x47ba, 0x3e82, 0x60, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000340)='I', 0x1, 0x4c001, 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000300), 0x0, 0x28002) r7 = syz_io_uring_setup(0x110, &(0x7f0000000380)={0x0, 0x5885}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r7, 0x3516, 0x0, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000900)="2e552f5d9f", 0x5, 0x12, 0x0, 0x0) recvfrom$inet(r0, &(0x7f00000001c0)=""/4, 0x4, 0xc9100120, 0x0, 0x0) 25m35.46064827s ago: executing program 1 (id=1592): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x3c7401, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) write$cgroup_devices(r0, 0x0, 0xffdd) syz_usb_connect$cdc_ncm(0x0, 0x72, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e21, 0x63, @loopback, 0x7}, 0x1c) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/fib_triestat\x00') preadv(r5, &(0x7f0000000080)=[{&(0x7f0000000040)=""/46, 0x2e}], 0x1, 0x0, 0x4) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r6, 0x84, 0x21, 0x0, &(0x7f0000000240)) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @broadcast}}, 0xa, 0x0, 0xdd5, 0x7ff, 0x38fa8b00d923ddd5}, 0x9c) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB], 0x48}}, 0x0) sendmmsg$inet(r7, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8c0}, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100), 0x20081, 0x0) 25m32.295562781s ago: executing program 1 (id=1605): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x15, 0x5, 0x0) connect$l2tp6(r2, &(0x7f0000000740)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x20) r3 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @dev}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e21, @private=0xa010100}, 0x10) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x89901) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) r7 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_G_FMT(r7, 0xc0cc5604, &(0x7f0000001140)={0xc, @sliced={0x8, [0xa7d, 0x6, 0xb, 0x9, 0x8, 0x1, 0x0, 0x0, 0xf, 0x6, 0xfffd, 0x8, 0x0, 0x80, 0x3, 0xffff, 0x9, 0xb280, 0xc0a9, 0x6, 0x1, 0x6e2a, 0x7, 0x6, 0x3ff, 0xf, 0x81, 0x5, 0x8, 0x3, 0xff, 0x8152, 0x3, 0x2, 0xd487, 0xd8, 0x2, 0xa, 0x2, 0x0, 0x4, 0x9, 0x5, 0x9, 0x3ff, 0x7f4, 0x8, 0x3c], 0x8}}) write$UHID_INPUT(r6, &(0x7f0000001980)={0x765, {"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", 0x1000}}, 0x1006) mount_setattr(r4, &(0x7f0000001d80)='.\x00', 0x8000, &(0x7f0000001dc0)={0xb, 0x0, 0x80000}, 0x20) recvfrom$inet(r1, &(0x7f00000002c0)=""/227, 0xe3, 0x40000120, 0x0, 0x0) 25m31.198809842s ago: executing program 1 (id=1607): r0 = openat$dsp1(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_io_uring_setup(0x239, &(0x7f0000001080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) add_key(&(0x7f0000000100)='rxrpc\x00', 0x0, &(0x7f0000000140)="0000000000000004ff6943b8fe00000800000014f200000000861f4104bfeacd", 0x20, 0xfffffffffffffffb) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3}) r3 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x400aee2, 0x400, 0xffffffff, 0xbfe00000}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r3, 0x47f6, 0x0, 0x2, 0x0, 0x300) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000000c0)=0x17) ioctl$SNDCTL_DSP_GETFMTS(r0, 0x8004500b, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'geneve0\x00', 0x0}) sendmmsg$inet6(r6, &(0x7f0000000e40)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x7, @loopback, 0xffff}, 0x1c, &(0x7f00000005c0)=[{&(0x7f0000001100)="0e3ddddeef30a830911ada923a8ad8f55fd55dafac13b6769207b8351e306e6144d9dfbe95e17b9fe87dcbad34a87b6ceb69eda26938e0c416fe0c267e9ea26747158dbec56d8fca16fe9bebe808e34b4eeab79e4ce984ff711a0cb2c00d574ef383534777eb98c15ed9010ebf2098c723b4e0df7e82669ae45809b3e7ff07bdb85caff46c23504b9b2c6a323ef6e18fc51aec542cf0d2cf509b01d9375ed879e5cc827a108c4c664750852b3dd1ba6c1ce5d1af75d6180ebe8fe223b69b268c62ccd9c617ab084021f95d4496a87777729d675fcb41e55fa0b69757d91b30dd4b5269efef78379a67208bc7649656ddf9097ae16c1c1accd415cb55891e510ad9d8f5a3da997664e06e5493bc148516a45365d33451286bb527702517c1478ee7efc2faabfcb9a002209d40a6abdae62010ab4f54ef7ab3b5c116f1051d49d2a689d5f79bffe6bbfbb3edb79c372f9ea44c35d6166ab7f706632a154b3f9fcf7cdd5795448ba005ac88ec0e16a33014b4fb0873f843165e3944140a95b507bfb2800fbd54a170e70bf5dca094e0a1f8bffb13f6629b8a793b32356df2b40031a21406a386a2b60fbdf0be1e61536dac26b37f018e1ef24c46db713a573fda7ff4ec7e4dcf49523028c56ca2ccf471551cc9a0f58bdab304d659e4b9e169b256811e445e09197dca0ad02ab4eb6fa897642c286c2c4f65c20e843bf4794f3cbb4b87e470df92bece6a8209f17e651a3a08145d9e63e0ec737ae2fb87d721e8117c04354396dd4ea45a7b1be05fe293051d502f206cf5e94f88d5b69def2a576d9d41ed5e0ac796644ea1fa7dba06b0974b5fd925f886cb6f7c151617d84a4c3ddb822a2507be9b4812e0f5649f2435ffa4d98d04a8fb02330d64bd0a3e850574ed94ba9d5573e3ffdb04f148b31122f328a02278f6346587e6181c5b3e3748e90e4dbad863f265a177d71d1d75d5004f1c5ab3528c0ba12729caa27f2cb8a2602f7afbf6ec27df512547e9305bf007fe33d4ccfccf35e33789317954a2d4b12ab2cbbe0c19dc254f31408c22afc3f877716d72714edce9cd660baa6113c4e88d63e7a738f978b5ad1394b078c534bc59a01c365946f7a07d5e4da5bf8ca4f17c07e1db75496c210d6cd826922f4e995bafe46301857b3cef5af1d2f4fb8fbfdf57863f1e99a38f516f149c1b33450750761722597b24946a7a1af6849b0b118a704102b4bf6feaabddd1a9d32c5e61f19040555f762f29517082060d26e7b21cee67d43800629b0453aaa563b5196c258499e40e8dcf2698c0f2f6f766fde4c97dfe97be77dcf0613bd3d0b8936dd5ed354424d0431bea6b04a1ed695d15a57c2d74eff8de2d114eb015d8b9225ccc575c37eef33a0386199539527fe662afb97e4292209e401def2d66d10e3544cc7125c5c121a8a355618266ae7ed7b0f49b8c7711f91404eba6bd242a0bb480700f41e2e83656ecc5fc8885cf07b8a0b3b0451f6905a29828c943cbf072b3fefa0d46a7d7664ffd71f767509207fbe2a51a7af4426c1b024646c085a6be64a427240b80f36c6dfe669ed6aa08166a6f0152d85a8702ec39f2feec830b74e9b646199ecddf6694ace2658dd95881f41570def5c684eb3cc5d484cc8b6266efbaedcf6d1d88402deab124d90a48948d0d86096771f8eed623347539bb70b1fd1694302857248f45424b6c7752eba903e0aab16f60692b8fdf63fc4cfa068c8d92144956ba7898f3e0601fb36e20173f28d0baec16d543671d02621d868105900856d859a1bb885503c7030749c110457e2ddbbedf9e25130d45cc399f842454d70010f53fca9d05b62c14705fa356c356e19f8a3cd9d55d363dea4471b52af8bf9ee785121c383b86cfb1fabc1f92466428acd905b4f043754da238f37241caf45a1688ec65914804cfac526ae6ba824d328a0bb3b8ece523ab7a328623ce4a27c8a26f0eb3cdf98db7514c92429819da334dfb794329d3b5ba4e3db36b88cf8d701fc259c8096778b52f759f805ef6af994455ad3c21e4bc3c203875257bda955efd218acb73136a8dae90303f0cbd0ea104712b0be4fe2fed293e2025180764d13bf2c4bfe05bb930d47e53072c743faf03b12af279fa8fe4b4ca59d2d530ab4d5554d02563138db6c354147ee80274d2d3d6f05f3265456502d7d701557d1b6b631fe3b0e240fd78496d2609e139f9542d84e537a8cb1704dd2a4918c6b290ae3ed7783013d9e34fd22396f09b8da7781c2a1733ba795875fd17cccb55d712d64e729a265c9498d6cf08e67249f2bf8fe68e9ae6799534ab8cd17d759b3bf25d736df3e90fd8aa2033ff018edb6efed70ec1d91456662156fa1c3c04f69614e879f5d2e0922744ad219ecfbb666b75a8ea1405c5e30baebf75b41c5ee5021dd3a5c54919a9204b5a12cb418b90ebdbe83657a88cb8ad06697a319ca529c203283fd25192a090e1957b0296a11a2d7842c60176b0fba52f3dfd5fe0b9f7e7610f1c21396b1f63abb3bebe12ed60e3b6b5b5c74cbffb864703ef7ec4c67cfe97a4fa2bfb80a475b0b2dc54c380043528ccdbc3880e40c1a3f9c44474b397744e43aae7fc7e2b892b36b84b4a6057ee834b9a55adbc9731dc456d59a59b80a4e380d1bde5a088be405b7d46d9dc10d305ed942e10bf3a69d965106f8d0ac621f2d085265937eb2fc2481cec75d339f21c92e7af46c94646159464a4b52c869a0ce55d21de124fdc36d351b63bcf4b5bbfc0c17faac2230774e6e6151111865ac58c31d77a960ee7da5b12df9ad6e03234a7df587d35ffcdcbc58d98ee0fd6b7b47d57450b7685456457b50d7434bf04f55123b8157a65564b2fd32e6e1f71a89d98051fc97f18745b5eb39ce03fafa780a665ca5d5a50dc9fccec34e48ec8f641b4d63f92c0d26514f5931fbed0838ba09b162636df7fd463d9f0fd7adb88690764bf9f83686af9f27878174ca127d72351f4d5da7679ba6de001111e2090033cd89f6b7a10cf25e79f9a82d78d9ef577b757c21c1705ce24433254482e5a2c3f680d78def20037e223d237786e44c07520556b5e010303349f7365043b86caa05b6a60e05aa22a95e8b8fa9551b92d12290f7454988ba75233ea1d8191a65d310d325ca50757bcde43efcc875b0345eaac1acbbef42c4393672c8f553611d390a814d3418d0ea9edffc58f26c97ed48fc23f315962dda79c5e73f2126bcbd3ec6f47f699a8a1aa036ccea3ead48ae65188ac0ae5ad8bc634d013d0fbc541cc7b266baee4077a9c37b2972ebf7579a3de770b7fcb4b6ed8cf8e272fc4e79387b3df6e67b8d6706069dedc879e940801abcd6535507f0e9a37efd759d0438889e640722d41f9d9256d2c9e13ff7e0347b9f19fec2a75971628d71e5e48538c359a72e25242c18db5800097f5d54d6383f91a2c95861eb4a431a66747eb10e29203200752e9898a2e39edeabdc55c2a0a153ab0171d778c7e6f03415d9616f59caee4e6f514dc57cb03cf7ac3fa9264ab4bc63b421cdf713021efb37cd74e7cf6156fd27303aa24ee8caf53a2638f282e6677585b9c87d3233e51a47abbad648bbaece31d43a93e137aed15afc25dc68a93aeeef1b9bcb01690e981dfb4702f4f73826026a1f495662146b0aea6dbf876745a7ee9e4e3d54662c44a853e962d2d2136bc17f65190d230859c9c6483ec89d8d79884e21e2cbb8f3c0d4aa60f3ca699b1ed2fb568f369f8ea8cb89880ea092f4c0ad08891d579f15a6083a1c77444fb8f3132adfddbab0cbcf6dc2fcbde2cd1b1981932c195f08f71fd12d05eb66ae7b8baaffef018a61ca9beb3e813e705e4f8f6e2c86343f80e3afe08dd566067e2b5a52b28ec9c731e0a8518eb340c6d5405a6030c19ab7b0f3524c2f155bfa414593e1a351c175353f4262ceb1c0ef2176bdb317506ad588dff1458dee959c98ad0d838b63fb1690cf64c39cb75db77b4ca6138b6ce519147640b974068bbf898c50a94f810798f5a80b6093bb8b519fb8d4e1f1acd3728cd4ed606e4b8ae881e892dbf77f28dc2462754714fbc6abcf060671679d3f82c31a377ae072f57d8f820cd312d84c830285edff71f30f68d2f46bbd3dd402e28390cba877dd94d652f9afaefd7032e0c2c898820f91b6b53bc070ffc7d1bd6aa3a34ecbbc4c252910c3f1851f0a221fece6cf89ca6d85f62384ded0b2e0c8a4f96f4028ff6709cce46572637dba288b124ad4efe87e09d195982a2d0a0bf03c54a3c69cd6c7769a7df3657e9c49acf2c7ca72bfa0f55d8b8bf40eec538eac049faba3b123ccdae12131fbdc5ba0035e74578bcdab508f46f043ae8f5af42bd216d4d53e250c112895b9abf76150d995560c128052aa51406bed308267469409a7e0dfd8e57b7afcb89ce0152c93ebcc3d821f039950de714ff76e4ca474b16cb14eba20f1eb34725a9d47eaac0b8e7721a4753390bcebaea87e71186eedd9a591aa93e94674e8069108f6c5cc872a6506eeaba61627550c1c0ad83ded2ac4a90d1760ec6b626498c89781f054d0eed0630d6d0513fb04b2b68a4c4fa6f1d5eb13bdcb69face37ff813267da3732275833a22ac9b0fe179cb1a5027aec9b11b7a0c8531f0c6fb2599a98ab54fcd7c6a1082411898994aa43a58775089aa598a5f9d7ab9fc58c6c0c07079f0edb65191dcf2b86e232524d3930b09018528fef9442244819a30166fd624a96610e24cb5db2bf2653f165c2e668e029dcc90c089a98b85841a5be94a2960fded3e428cbd948ea439e8aa65aac63765ff7658769749c3ed7ace23eed671e5d8af9a09f9b422c160246e85fa2afbf00a0c347811492fd625df93a2c6c652b0917c0a96676cf5d9d0b3794d1d687bf75eae872aff9b749e45f09f1a11fe6e4bed6dfad15f6f90b725e85e8321e23aedf18f99d9453b1faaa884d8819688444b36d6f17e374d860f1ad3d6cfa270ae3ecff95ae3a24aaf90f4a929745d47a966153ffeb1f7be470394a52a0b314fe1a0b987326aa427a5446ffddc5bebdcb07a70c8402ccc5859cb96165fd5b728f80e5e841ef941a027d0f5486494c1f219ea3140dc27b1b01ef17042097bce2fc959c77a07d0e611001894c0d2b680030e9ce5eb62665fec0550b67f937034a1096a4ec2262902d5b74fcab676b65878bde5f42ab9778e5eddc280c72fd6175edaaccdcd5eddc71a216f1543742f97838696af8121421267aaf0ff2b0939b7cd8526b8b7f074d701ea02d75e0a31fce9f249f9b178c5e6c373968e7e85ac0126fee530b7b445e72a837b5a350711ca468c0e6b9b4f51c0b85566fde28fa63b810f2c5dbcc4cf199067304eaf3b25500c813dab2cc1cd8af2b99a4a560c9fc41f0857eaf412abfc878fbe125b5b5055bed85abfbed54158ab577b14c03c8ca71745553f6b385d8a7d93358235c24254b03c1f8b01f8406fc5da497c9057460e8d0d6a11df098e432bbca322600804a167d9530e1648833bf69341302d591c5bbb5b85ed6f96bcf1be8a7f09b2d75a30f412835a3b7977badec870bdeddc9a89ec83c6e67953b870d28021441af84646ee838412deb0aa92a34614d5545ad15efd1189347c11e2cbbbf230741a86f383e12d8213f7fa7d316c908f3cc00870dbc32057497009ef5d308660105da17483730cd694cac0adfa0aece4a0c8ba013cc636971ba014619bef8f7a459185556c8e31a1a868532c3b0e6a38e3c7fc588dcb04e0ec3256c168ff91fe8be9701e9d336af5c4e5c5711a8c3fb5a770de7c338facc9ea59", 0x1000}, {&(0x7f0000000300)="7855ff00ec41d315ec637b2b31ea6fab108dae09580564b302ef0b18e6e59a8a1f55cff3a605b58eb7f422aa1091014c8b2f51484d6c3a54830792da4181ecabe03a023f0d8945f90b36cc4e2d9b62154a8a219569878f82290371087835ba18e1aebdb822819d8da3d6b406c3a104688ec3f0644d96c6750f474aff", 0x7c}, {&(0x7f0000002100)="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", 0x1000}, {&(0x7f0000000380)="25a91c42fd4ed7004dd5458302d4d0a8c1bbd79178a4a7822e21ede98e766d4681746130eaf96ac61ce052ef2b8c60e63b6628140eb36f4a7372dd28c58c6bde39befebf675625a054ceb279cae6f2e3cb5d8df04e828079723ce3b2ee8365c99fa4e0f934d1d05589d2e391d98e1462b2f6a258d883b981386af7ce12dc0443894047d099bf", 0x86}, {&(0x7f0000000240)="0ca5cc5ed8f525e22f031c3524b2cb48c4936b07c224735e38b36c9e4d", 0x1d}, {&(0x7f0000000440)="f20ca23fc7739877ea8dd00924912a687815f2083004088065f822998dc27c1951e7d3bd2b9d67b01acb351d13d878df035cc32aa5e46d9c8aa89cc1da992b4f5f8f8390aefcb8e7996ab9e4749b0f118f8919255fd02e6b6b83bb6bdd3412ea", 0x60}, {&(0x7f00000004c0)="532dd1534fba4ce509cac21d27c45d43504e54e556a0c91c48415d7c247cf7c8c79962fb8a44222d10e4846ff832fdac974a629c3218c0263ee36966d5ac788278ec4f21cf311004425d3a0f42d1991e5147241fe3c29bcc3db66898ac5b9e7fde28542aff2e50c53b72be96363aec914fc8837f407524a3ac2434157b3e384155671a6def0142426a18a877248a4e0fc31ef8566df11d9fae0ca523702269ebe83fe94ea80e38864031bf6b5d6f7d9a6ac911b23c0ea2ed322be1d63551de521333", 0xc2}], 0x7, &(0x7f0000000640)=[@rthdr={{0x44, 0x29, 0x39, {0x89, 0x6, 0x1, 0x3, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, @local]}}}, @flowinfo={{0x10, 0x29, 0xb, 0x75b}}, @hopopts={{0x34, 0x29, 0x36, {0x4, 0x3, '\x00', [@hao={0xc9, 0x10, @mcast1}, @pad1, @ra={0x5, 0x2, 0x5}, @enc_lim={0x4, 0x1, 0x8}]}}}, @rthdr_2292={{0x74, 0x29, 0x39, {0x2c, 0xc, 0x2, 0x3, 0x0, [@private2={0xfc, 0x2, '\x00', 0x1}, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, @empty, @dev={0xfe, 0x80, '\x00', 0x25}, @empty]}}}, @hopopts_2292={{0x104, 0x29, 0x36, {0x3c, 0x1d, '\x00', [@generic={0x9, 0xe7, "69f8bd0975d4e7d576bd8ba530406fcf45bd75dd5a6ebf7275caeb740d53195e87e487549cf221f0e6daba541370e53897ba99442cf54b6fd69e615e3abfa638db76882a171dafafbfe6698933561b6ea7875867fecec146532cedc0aa9990b8fd45d60318f6b502c3b4fae26c212e85186053d5586f4e0989f389076c581087483d410157287f2cc4a9de677b71ecad19412c20f12e177669787581e2f6c176c8efff0424b656b9b4f227052392708b9b52f5c686777ec82323f2ea82b6e29a5eb8b983521d011f285d04d0cb7a21f33eac9fa9e5d7402985e77c5722c77ac153f633741cacbd"}]}}}, @hopopts={{0x74, 0x29, 0x36, {0x5e, 0xb, '\x00', [@calipso={0x7, 0x40, {0x3, 0xe, 0x0, 0x3, [0xa, 0x9, 0x815, 0x641, 0x2, 0xdd6, 0xcd40]}}, @ra={0x5, 0x2, 0x200}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @enc_lim={0x4, 0x1, 0x5}]}}}, @pktinfo={{0x20, 0x29, 0x32, {@remote, r7}}}], 0x294}}, {{0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000000900)}, {&(0x7f0000000940)="824354ffdae0ea1de215853df20308d3a0fbcedff555601ad4e5864fc61f228ac73273ffd3b380c37808b7434e43df16a7bd832ad25020acfe6d39cd82139fa5012858796e76594885656abbb8ecfa9e389a533d0fc743afac26a610c6b3303794fcbebce0afc561cd70315b782bb4754df8ce3553ee1c2eb35c3700f103f75bf728908bf1bc19b778573630b2e9fd735e1b8bbd11d5b17e808fe6cf8a93ac840b98c82e803acff97bcedc5d1fe91d8da60b20443d57a66ba242a8b163beaa", 0xbf}, {&(0x7f0000000a00)="b0d6281250da269a756b7aff55481ace5a429b5834d5076360fe35763c65c1a5a19bd078c7ac35155d2d581ecf45a0b9a2a3be941e86ade96f17b5fb4606ad0eee16ea09a938f70a6d7cd7cf38e5053fb9315a499f5d92ad01fa4a451d665a8582237be7775000af9fda6337055a2281cb", 0x71}, {&(0x7f0000000a80)="fef09a1769167d0de918f11e46ad41f000cf6be4d6c300d92f0e4d8881bf773c379f9cb2532b66517db39b7e715656057d45726121887ce8e2b64ff54f93144ffdcfeac0f938c8d13c3bbe8a39cf8d7c6d48f25c3b9e7b62efa4743955b17c20d49020f1cdb812a8aa743c4e1b8fe2c82b6a3273b7ebf31c0338205d8d8fb5f8b9971c9fc1c7dfd5cbb8ec5ec5a3975a58c5940046797ddde09d7de8115abc00537a600e16cd8e417a179c1102ce5f4816a0d2e98035eb67f372d2717181160409570bafcb0f96e7", 0xc8}, {&(0x7f0000000b80)="d1a06cc378c4e82e9cf69ef81d032dffa690c445bfaebf79d84ab48de544ba9ee85af162e289b31ec2c4d378235b53eba6c74dc9662e7e9786537576b80567b735332dc3f12145eab4d8f7859c52ff49fe927b6fa4704cb1428b658c1699b152a1875ca062591ab522ef452e6e241dae6a5d66acb720522af8b0e8a89e73aae8c3f42246", 0x84}], 0x5, &(0x7f0000000c80)=[@flowinfo={{0x10, 0x29, 0xb, 0x6}}, @hopopts={{0x1c, 0x29, 0x36, {0x8, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x5}]}}}, @hoplimit={{0x10, 0x29, 0x34, 0x8001}}, @hoplimit_2292={{0x10, 0x29, 0x8, 0x80}}, @dontfrag={{0x10, 0x29, 0x3e, 0x2}}], 0x5c}}, {{&(0x7f0000000d00)={0xa, 0x4e21, 0x7, @mcast1, 0x4}, 0x1c, &(0x7f0000000e00)=[{&(0x7f0000000d40)="6d3e7b5986084efa3af2934a18b0ba941891b3890c22cc0038", 0x19}, {&(0x7f0000000d80)}, {&(0x7f0000000dc0)="740317d5b7ccd1973fc9b68cb4d8", 0xe}], 0x3}}], 0x3, 0x4) 25m27.094855211s ago: executing program 1 (id=1611): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x58880, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="01000000000000009002"]) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file1\x00'}) open(0x0, 0x141242, 0x40) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r3, &(0x7f0000000000)={&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000b00)=""/4077, 0xfed}, {&(0x7f0000000680)=""/233, 0xe9}], 0x2, 0x0, 0x0, 0x24000050}, 0x0) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) shmget$private(0x0, 0xfffffffffeffffff, 0x4800, &(0x7f0000ffc000/0x3000)=nil) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder1\x00', 0x802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x200000b, 0x59033, 0xffffffffffffffff, 0x0) r6 = userfaultfd(0x801) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r6, 0xc028aa03, &(0x7f0000000080)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000582000/0x2000)=nil, 0x800000}) 25m25.906344992s ago: executing program 35 (id=1611): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x58880, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="01000000000000009002"]) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file1\x00'}) open(0x0, 0x141242, 0x40) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r3, &(0x7f0000000000)={&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000b00)=""/4077, 0xfed}, {&(0x7f0000000680)=""/233, 0xe9}], 0x2, 0x0, 0x0, 0x24000050}, 0x0) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) shmget$private(0x0, 0xfffffffffeffffff, 0x4800, &(0x7f0000ffc000/0x3000)=nil) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder1\x00', 0x802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x200000b, 0x59033, 0xffffffffffffffff, 0x0) r6 = userfaultfd(0x801) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r6, 0xc028aa03, &(0x7f0000000080)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000582000/0x2000)=nil, 0x800000}) 1m26.871152853s ago: executing program 7 (id=6219): r0 = socket$nl_generic(0x10, 0x3, 0x10) fsopen(0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x0, 0x1, 0x401, 0x0, 0x92, 0x55, 0x8, 0x1000006, 0x4}, 0x0) fanotify_init(0xa00, 0x0) io_uring_enter(0xffffffffffffffff, 0x47f9, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000, 0x2, &(0x7f0000ffc000/0x3000)=nil) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r3, 0x6, 0x22, 0xffffffffffffffff, &(0x7f00000002c0)=0x49) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=@newqdisc={0x2c, 0x24, 0x3fe3aa0262d8c583, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x0, 0xffe0}, {0xffff, 0x5}, {0x10}}, [@TCA_RATE={0x6, 0x5, {0x8, 0x81}}]}, 0x2c}}, 0x4048000) ioctl$IOMMU_TEST_OP_ADD_RESERVED(0xffffffffffffffff, 0x3ba0, &(0x7f0000000280)={0x48, 0x1, 0x0, 0x0, 0xffffffffffffffff, 0xa3}) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x42241, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r6, 0x800c5012, &(0x7f0000000040)) write$sysctl(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000100)) r7 = openat$random(0xffffffffffffff9c, &(0x7f00000003c0), 0x40202, 0x0) sendfile(r7, r7, 0x0, 0x4800000009) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000900)=ANY=[@ANYBLOB="180000002e00010026bdf000fcdbdf250400"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x4000010) socket$l2tp6(0xa, 0x2, 0x73) 1m24.053479696s ago: executing program 7 (id=6225): socket$nl_route(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0xfffffffffffffcb5, 0x0, 0x5, 0x4ae, 0x0, 0xb49, 0x9, 0x8, 0x7, 0x2}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x58, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x7b4d, 0x116245af0baa48c7}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'wg1\x00'}, @IFLA_MASTER={0x8}, @IFLA_VFINFO_LIST={0x1c, 0x16, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0xff8, 0x3}}]}]}]}, 0x58}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) write$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000040)={'some', 0x20, 0x17e, 0x20, 0x100002}, 0x2f) r4 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x894) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000001040)={'sit0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0xa000, 0x8, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0x0, 0x29, 0x0, @loopback, @rand_addr=0x3}}}}) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/fscaps', 0x0, 0x0) write$cgroup_int(r5, &(0x7f0000000040)=0x900, 0x12) sendmmsg$inet6(r0, &(0x7f0000000580)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000340)="f2", 0x1}], 0x1}}, {{&(0x7f0000000180)={0xa, 0x4e24, 0xff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}, 0x1c, &(0x7f0000000400)=[{&(0x7f00000001c0)='f', 0x1}], 0x1}}], 0x2, 0x0) r6 = dup(0xffffffffffffffff) write$UHID_INPUT(r6, &(0x7f0000001c00)={0x8, {"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", 0x1000}}, 0xfffffe38) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x18, &(0x7f0000000040)=ANY=[@ANYBLOB="201107000000070729bb19"], 0x0, 0x0, 0x0, 0x0}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0) 1m21.037550039s ago: executing program 7 (id=6235): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1703}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) (fail_nth: 6) 1m20.350308432s ago: executing program 7 (id=6237): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="668e3ddaf9076090476706886efbeeef23a87572791ef63edfeb36ce145070544d72005644f1833d21800beb7c2cb48932cf593e44fd7b173e7842b9ff3fc3c7617f2753e621af4892ce22b9735fbd8292a678c0ba73043f04b454553ceb661a838bc983793683a6497a68c7f3ec653576aff15a1e234eceedad66b5fc83b84510503340441b9c054a42fe39e3c185514693c8920f483c1ee69ab8307b944d9fb8286b9b30604360fc1a212bee46f632e14b80e10d47", @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00'], 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000200)=0xc) getpgid(r3) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) r5 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) ioctl$LOOP_SET_STATUS(r5, 0x1263, &(0x7f0000000540)={0x0, {}, 0x0, {}, 0x8, 0x9, 0x5, 0x9, "28f5c9ea1f1ae4be4111ab18d2da69bde58cd7af40fd150b70aac11c2e16bd5bba7663c435aff94793ddd7aae07ef35f17bf01933bdb6fd7ecdd91b59ca8d541", "07a9310900000010fe1406584afd8d74b8830793b848194e1df82d0000002000", [0x6, 0x5]}) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0) 1m20.266393153s ago: executing program 7 (id=6239): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = syz_io_uring_setup(0x10d4, &(0x7f0000000000)={0x0, 0x615e, 0x0, 0x0, 0x1000034f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000002c0)={0x1, &(0x7f0000000200)=[{0x32, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_mptcp_buf(0xffffffffffffffff, 0x11c, 0x2, 0x0, 0x0) 1m20.026440818s ago: executing program 7 (id=6241): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x80045b10, 0x0) 1m19.818411532s ago: executing program 36 (id=6241): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x80045b10, 0x0) 14.349276322s ago: executing program 5 (id=6483): r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, 0x0, 0x0) sendmmsg$sock(r0, &(0x7f00000005c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)=[@mark={{0x10, 0x1, 0x24, 0x3}}], 0x10}}], 0x1, 0x20000000) 13.746058649s ago: executing program 5 (id=6485): r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x46, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000340)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x3, 0x0, 0x7, 0xfa11, 0xffffffff}, 0x0) r4 = syz_open_procfs(0x0, 0x0) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc0f8565c, &(0x7f0000000000)={0x0, 0x6, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x41414270, 0x0, 0x0, [{}, {}, {0x0, 0xffffffff}, {}, {}, {}, {0x0, 0x7}], 0x7}}, 0xfffffffc}) openat$cgroup_procs(r4, &(0x7f0000000300)='cgroup.threads\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) r6 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r6, 0x4020565a, &(0x7f0000000180)={0x3, 0x980900, 0x1}) ioctl$VIDIOC_DQEVENT(r6, 0x80885659, &(0x7f0000000240)={0x0, @src_change}) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f00000000c0)={0x9, 0x3}, 0x10) sendmsg$nl_route_sched(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@gettaction={0x1c, 0x5a, 0xc6b747b6bf1c6b95, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8}]}, 0x1c}}, 0x0) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af60, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, &(0x7f0000000000)=0x1) sendmsg$key(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x2, 0x7, 0x0, 0x6, 0x2, 0x0, 0x70bd2c, 0x25dfdbfb}, 0x10}}, 0x20000884) syz_usb_connect(0x0, 0x12, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r9}}, 0x24}}, 0x0) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000a40)={&(0x7f0000000000)=[{0xe, 0x700, 0x22, &(0x7f0000000080)="f8ee01961e75f576db8171b7ef49df3e85d58dacbdae2ff4294114bad388e298a1df"}], 0x1}) 12.057596186s ago: executing program 9 (id=6487): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = syz_open_dev$video4linux(&(0x7f0000000400), 0x800000000401, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r2, 0xc040564a, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) setregid(0xffffffffffffffff, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) openat$vmci(0xffffffffffffff9c, &(0x7f00000020c0), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="b405000000000000711033000000000006000000000000954000000000000029c6"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x3, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) socket$inet6(0xa, 0x1, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000002c000000030a010800000000000000000100000b0900030073797a32000000000900010073797a300000000060000000060a010400000000000000000100000008000b40000000000900010073797a300000000038000480340001800a0001006d61746368000000240002800c000300b07346e358c219250b0001006367726f75700000080002"], 0xd4}}, 0x0) r6 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) r7 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x101, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r7, 0xc0405602, &(0x7f0000000300)={0x1e, 0x7, 0x2, "9807c6aa09a3d93fea070bc7378bc7e6535dc9e78a311ecb1b986ef9b5979da6", 0x50323234}) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r6, 0x0, 0x0) r9 = openat$cgroup_ro(r8, &(0x7f0000000000)='cpu.stat\x00', 0x300, 0x0) read$FUSE(r9, &(0x7f0000000480)={0x2020}, 0x2020) 10.918099666s ago: executing program 8 (id=6488): cachestat(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x7fff}, 0x0, 0x0) socket$igmp6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffff", 0xc) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) sendmmsg$inet6(r2, &(0x7f0000002940), 0x40000000000017d, 0x811) r3 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) 9.374321284s ago: executing program 0 (id=6490): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x17) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r5, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r6) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r6, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r7, 0x0) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r10, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r12, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}}, 0x800) r13 = syz_open_procfs(0x0, &(0x7f0000000400)='net/softnet_stat\x00') r14 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r14, 0x1, r13, &(0x7f0000000240)={0x80000011}) epoll_ctl$EPOLL_CTL_MOD(r14, 0x3, r13, &(0x7f0000000c40)) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0803000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="b04c82389bf4b97e0d0a1cdd8168ab989061201e918ccbf9f30531b6c0d43a3dd4b76807c99e0afc367e77aebe1cae0583ebeac35638b587440b094e246f175c72cf15b7ebff4d5852871696f05b7ed3477e361a0b35027999b7e03f520bdef1936df2d83d62903e3edfe8bda1e468616e601e2ed18bbf3aca6972fc35b0e78f6f6c98e9061cf8b17127a5956b90ac1cc3456fa353821ce1706c0f51aa99f3ff8f94fd62e794d8b574ba08f37c025279e6a8aedcd2"], 0x44}}, 0x0) 8.723476442s ago: executing program 0 (id=6491): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000100)={0x97, "5660359c3245d1c42317afadfd48ed5100000000000000608a00", 0xffffffffffffffff}) r3 = syz_io_uring_setup(0x109, &(0x7f0000000100)={0x0, 0xfffffffb, 0x80, 0x0, 0x364}, &(0x7f0000000180)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x9}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) poll(&(0x7f0000000040)=[{r2, 0x4050}], 0x1, 0xffffffb3) close_range(r1, 0xffffffffffffffff, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) r9 = openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x444080, 0x50, 0x4}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001580)={0xffffffffffffffff, 0xe0, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000280)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x8, &(0x7f0000001300)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xf5, &(0x7f0000001380)=[{}, {}, {}], 0x18, 0x10, &(0x7f00000013c0), &(0x7f0000001400), 0x8, 0xbd, 0x8, 0x8, &(0x7f0000001440)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001680)={0x3a, 0x19, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@jmp={0x5, 0x1, 0x6, 0x4, 0xa, 0xffffffffffffffff, 0x4}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000100)='GPL\x00', 0x0, 0xfb, &(0x7f00000004c0)=""/251, 0x41100, 0x6, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x5, 0x2}, 0x8, 0x10, 0x0, 0x0, r10, 0xffffffffffffffff, 0x5, &(0x7f00000015c0), &(0x7f0000001600)=[{0x4, 0x4, 0x0, 0x7}, {0x3, 0x5, 0xa, 0x5}, {0x4, 0x5, 0x5, 0x2}, {0x3, 0x4, 0x5, 0xc}, {0x5, 0x4, 0xd}], 0x10, 0xec6}, 0x94) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000600)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x8}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0xc0d1}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x8b0, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r8, {0x0, 0x2400}, {}, {0xc, 0x4}}, [@filter_kind_options=@f_bpf={{0x8}, {0x884, 0x2, [@TCA_BPF_POLICE={0x838, 0x2, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xfffffffffffffffd}, @TCA_POLICE_RATE={0x404, 0x2, [0x8, 0x9, 0x101, 0xb161, 0xfa, 0x5, 0x5b, 0x0, 0x4, 0x0, 0x5, 0x6, 0x5, 0x100, 0x6, 0x2, 0xb253, 0x2, 0x8, 0x6, 0x7, 0x8, 0x5, 0x3, 0xbd5, 0xa, 0x4, 0x4, 0x3, 0x5ed, 0x81, 0x2, 0x10, 0xffff17ec, 0x2, 0x1ff, 0x85f38c3, 0x3, 0xfffffe01, 0xf, 0x3, 0x2, 0x6, 0x81, 0x9, 0x2, 0xa09d, 0x55, 0x10001, 0x81, 0x3ff, 0x7, 0x8, 0x80, 0x9, 0x0, 0x1ff, 0xb5d, 0x8, 0xac, 0xffffffff, 0x9, 0x5, 0x2, 0x2, 0x6, 0x3, 0xffff, 0x8, 0x2, 0x566, 0x8, 0xfffffffc, 0x7000000, 0x1, 0x1, 0x0, 0x0, 0x66, 0x4, 0x4, 0xa2, 0x800, 0x9, 0x10001, 0x3, 0x0, 0x2, 0x38, 0x9, 0x4, 0x2, 0x4, 0xc, 0x6, 0x1, 0x3, 0x5, 0x7, 0x9, 0x8, 0x5, 0x10000, 0x3, 0x5b, 0x1000, 0xd, 0x1, 0x0, 0x0, 0x5, 0x9, 0x6, 0x2, 0x6, 0x401, 0x8, 0x8, 0x8, 0x81, 0xd, 0x8, 0xca, 0x7, 0xffff, 0x6, 0x7fffffff, 0x4, 0x39e, 0x7, 0x7, 0x80000001, 0x1, 0x2, 0xffff0001, 0x5628, 0xf, 0x8, 0x1, 0x6f7, 0xffffffc0, 0x400, 0xd, 0x7, 0x76, 0x4, 0x8001, 0x3, 0x9, 0x960, 0x6, 0x4, 0x4, 0xe74, 0x2, 0x4, 0x7, 0x800, 0x2, 0x4, 0x4, 0x2, 0xfff, 0xe7d9, 0x900000, 0x4, 0x1, 0x81, 0x80, 0x8, 0x0, 0xffff3f5d, 0x609, 0x80000000, 0x3ff, 0x5, 0x7251, 0x0, 0x4, 0x1ff, 0x5, 0x401, 0x1ff, 0x3, 0xfe3, 0xf, 0x8d, 0x8, 0x7, 0x1319, 0x5, 0x3, 0x700000, 0x0, 0x3, 0x5, 0xff, 0x0, 0x8000, 0x8000, 0xd78c, 0x4, 0x67b, 0x9, 0x5, 0x0, 0xfffffffb, 0x2, 0xf, 0xc, 0x9, 0x2, 0x3, 0xb58, 0x9, 0x401, 0xa, 0xffffe0f1, 0x3, 0x9, 0x359, 0x84, 0x0, 0x3, 0x0, 0x9, 0x5, 0x1, 0x8, 0x7fffffff, 0x7fffffff, 0x7, 0x0, 0x8, 0x9, 0x3f, 0x8, 0x9, 0xe11f, 0xd, 0x8, 0x3, 0x9, 0x8, 0xa, 0x3, 0x100, 0x9, 0x35b8, 0xa9, 0x2, 0x400, 0xcf9, 0xf, 0x5, 0x9]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x5}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xfffffffffffff000}, @TCA_POLICE_RATE={0x404, 0x2, [0x80000000, 0x80000000, 0xffff64d6, 0x7, 0x80000, 0x3ff, 0x2, 0xd, 0x9, 0x5, 0x85, 0x5, 0x8, 0xfffff4c8, 0x1a824c36, 0x4, 0x60, 0x0, 0xe, 0x80, 0x10000, 0x4e2b, 0x5, 0xe00, 0x8, 0x1, 0x83d, 0x4ae, 0x10001, 0x8, 0x1, 0x5, 0x6, 0x4, 0x8001, 0x3, 0x3, 0xb, 0x2, 0x41, 0x9, 0xc, 0x8, 0x8000, 0x8, 0x8, 0x1, 0x8, 0xbde, 0x7, 0x600, 0x2, 0x80000001, 0x2c8c, 0xff, 0xba5, 0x7fffffff, 0x8, 0x9, 0x8, 0x101, 0x6, 0x3d, 0xffffff80, 0xff, 0xfffffff7, 0x2, 0xcb, 0xffff8000, 0x4, 0x400, 0xfffffff0, 0x9, 0x4, 0x7f, 0x8, 0x10000, 0x5, 0x7, 0x9, 0x7, 0x4cce, 0xa994, 0x7fff, 0x10, 0x78b, 0xe2e7, 0x60000, 0x2d, 0x8, 0x2, 0x6, 0x10, 0x4, 0x10001, 0x10, 0x6, 0xb, 0x5, 0x7, 0x0, 0x9, 0x5, 0x84, 0x0, 0x0, 0xffffffff, 0x3, 0x6, 0x0, 0x7, 0x4, 0x1, 0x8, 0x8, 0xc4, 0x9, 0x6, 0x3c9, 0x9, 0x9, 0x9, 0x1ff000, 0xf, 0x1, 0x4, 0xe7, 0x9, 0xfffffffb, 0x7fff, 0xfffffff2, 0x4, 0x4, 0x4, 0x4, 0x3, 0x2cbf447c, 0x4d4e, 0x8001, 0x1, 0x78f, 0x1, 0x9, 0xfffffffe, 0xc54, 0xa, 0xe1, 0x80000001, 0x1, 0x8, 0x2, 0x6a9e, 0x4, 0x7fff, 0xffff51d3, 0x3, 0x1ff, 0x551, 0xd0, 0x6, 0x3, 0x5, 0x7fff, 0x5, 0x6, 0xffff, 0x10001, 0xfffffffc, 0x9, 0x2, 0x5, 0x64d, 0x2, 0x3, 0x10000, 0x6, 0xffe, 0x9, 0x7, 0x8, 0xfffffffe, 0x10001, 0x8, 0xffff, 0x5, 0x88, 0x15, 0x8, 0x1, 0x1fe12f91, 0x765, 0x20, 0xb, 0xd, 0x5, 0x8, 0x80, 0x6, 0xb8, 0x7ff, 0x3, 0x1, 0x8, 0x7, 0x8, 0xf8000000, 0x6, 0x5, 0x401, 0x1, 0x3, 0x5, 0xffffffff, 0x5, 0x7, 0x401, 0x4, 0x0, 0x4, 0x6, 0x0, 0x1a15, 0x8, 0x6, 0x0, 0x7, 0x3, 0x0, 0x2, 0x7, 0x6, 0x80000001, 0x1, 0x8, 0x7fffffff, 0x3, 0x10, 0x12, 0x7, 0x7, 0xa0000000, 0xdba, 0x10000, 0x5, 0x7, 0x401, 0x80000000, 0x3, 0x0, 0x9, 0x5, 0x4, 0x2, 0x548, 0xb, 0x1000]}]}, @TCA_BPF_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x0, 0x5, 0xb, 0xfffff800, {0x3, 0x0, 0x10, 0x1390, 0x200}, {0x10, 0x2, 0x0, 0x1, 0x7, 0x7}, 0x9, 0xf9, 0x3}}]}, @TCA_BPF_FD={0x8}]}}]}, 0x8b0}}, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18) syz_emit_ethernet(0xbe, &(0x7f00000002c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaa140800450000b000000000fd019078ac1e0001ac1414aa0300907803240000450000000000000003010000ac1414bbac141435867700000000000ce25600000000000000080009789607675ca638060e7403c80009e706d30bd224f806124e543700003c368041000000000000000010c600000000000000000000000000000a65807fe97612fe86001273bc2300ad9d19a300000000000040000607c8f46976e7860600000002000000"], 0x0) 8.59430232s ago: executing program 5 (id=6492): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x88042, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001640)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELRULE={0xec4, 0x8, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}, @NFTA_RULE_EXPRESSIONS={0xe9c, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @void}}, {0x14, 0x1, 0x0, 0x1, @connlimit={{0xe}, @void}}, {0x10, 0x1, 0x0, 0x1, @xfrm={{0x9}, @void}}, {0x10, 0x1, 0x0, 0x1, @objref={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}, {0x424, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x414, 0x2, 0x0, 0x1, [@NFTA_RANGE_OP={0x8}, @NFTA_RANGE_TO_DATA={0x118, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x24, 0x1, "86a77e0d8d5b5ff73769732abf2c67a412dae10cd10db0bcacab9fd9eece71e2"}, @NFTA_DATA_VALUE={0x95, 0x1, "37ce0f86dcbaa23c0c99c4b2863f5c678add0682ec2ab8701ea54b3f1795a888317a4bde25f602b102e5a59733f84b30b522f877c5d451b5de9ff6de3173866a4407d477b9582028be6b683808be36a3c10f72f546549a7ac381fcbad6898f9c105d2ac2c22456947dbddfd6b877634d0f8ba1ff0b2d18dd9b34ba0e59575b76373229a5ddf9ec3251fd8f3a41da343f47"}, @NFTA_DATA_VALUE={0x4c, 0x1, "14d09d06958651d189e5c50cc0aec33ba532cd451a3c790877f52a4aee2f56cc915342ad80cd1d4639dc13174da826c19a55315a8407164c31702ff0f6eb473934dfbce2ca4d0e18"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}]}, @NFTA_RANGE_TO_DATA={0x2f0, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0xce, 0x1, "5e811d2ea9b2ae6fa40da20543392e30a09f7013e363da6818bb7e0ed8c375456526a2f3000cbd307020ffd7aeac005291cffa031ecf4de6f4de196b00f032ddab6bac69a238f5c12253c820c80af9f8220e3d2f5ead0777f938acebbae9ec5d82645322827d20aff321cc4f6a538caa861decea1476ec95d5d386d910ae6b0f018e97fa576322b13e72db285209eedac0ef2837e2e99278befa131c377911bbd2aecda39a089931cb22f6a5ef9ec15aa409f730d3564a3b3d1a574c15f54d01ddf6e3a17fe7d8b2e757"}, @NFTA_DATA_VALUE={0x9b, 0x1, "559480d38f975fbdd882cb7f7271f8a6d135aab7a20404c8c7f97884a69f7d8d11cc52e7a7f565eb2d9e2cfa3c23c851549234bb87ae43c033873bc118eb1d3493af6d50e04bdc20bb88ab31390413a68034858dd7148edafb2870ae4a79c76b3ef2f9519e771fb2a89b11bfebce32a7d09f5d56621507b7591e9e46d2a5020dbfb73cba195ee5a161fc419791abe8f8bd599bcf672cbc"}, @NFTA_DATA_VALUE={0xfb, 0x1, "53ae9ee3c1c0baad5f83a29c1dd93c6d109ecbc11bc6741c8fc1cabaccd637dbf6530242f9d9c8b0795b9a7713c49006f2ffcc0b3375937ceabe0932171a3bdba2e249c490e47164a97a8e7720bd7068719a7b312d98934130800cfe6270ecc9d3d423b9545a30b10a89d7be146f5d604954b1f0adf0f70bc1c1059bd26efed16f0033e8ac69e9ff5a6172baba428c5544a61214639edbcd6d022599f1d9d22c0968e28dcd9bacb0b2f832ef8953cc155b999e01b0f6a72df36329c8e24945866b5e98ad9781b7fe060585c64361a48e075b92b84c0a990ea8dcba24698f1ab3bba28384e9d0b00e0a9c079fdb0ad64ed56f618edde6e6"}, @NFTA_DATA_VALUE={0x7, 0x1, "0185d1"}, @NFTA_DATA_VALUE={0x7a, 0x1, "7f9a0cdc075d7a05d773324194d549d2c2b3ac6c9846b6000000000000f4c29bf588e86d62309bbc1ee4446975b5a9d437d7280dd3fe6def627b01a63b7eee40338c9b00ea22db4862d3418362b741de02d425c70064ae17b366ee85596daf446f27c4f51b21991d17ad0a2dc556e0843b819a34e2d6"}]}]}}}, {0x2c, 0x1, 0x0, 0x1, @lookup={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_LOOKUP_FLAGS={0x8}, @NFTA_LOOKUP_SREG={0x8, 0x2, 0x1, 0x0, 0x11}]}}}, {0x620, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x610, 0x2, 0x0, 0x1, [@NFTA_BITWISE_XOR={0x2a8, 0x5, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VALUE={0xaf, 0x1, "9462bbb77e1230cd574f23bb02cecd7f3fc808430b956d5e0b34b28f739309595163cc3d7b0df615b9a5585f52cad08edb9d22c26b090311fc2ec63149e9891259343a89e5665cbd1dbc4494c11c90feb9800c2c74d8d606bed75338e71c398fd35be0571b1532d0f81281f94b20ced3481a0a7c2a1b93b6a9a97cdae6479c7a30d8c53784f8a87b7718ca00fe11b66b1cc6f927d366e4266ed260c67227f68b8981dd3762c0dd3c5f9234"}, @NFTA_DATA_VALUE={0xba, 0x1, "bc1677ee3725cf8b1aff2bef6e34da0e2a42b4651b2e4916ac61bd9ea76c9719eacb485a2bef63c528b4ad6b26034d5221c9a3c592d077b39fd5a2b224a6a2b0dd07c29c9cc59a33a120241c6022f4f8cdafb2bc6ae29c22799046ff924c0e1a92332bb7b2fbdd37414e7e1d748987c1cb1e4de91ea9d0fde7011f91982cfb32238fd5a65e9ac4b065560a5784ba59e2a7b27d5c090bb307a35bba9473b16c5b9fbba6e77d13f33fd4bb4a9946e2d4605d0e14870691"}, @NFTA_DATA_VALUE={0x18, 0x1, "a141a21fee0f9cf99e9a1ca0a8208b9652c0aade"}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VALUE={0x4e, 0x1, "093ae8f4f635ec3439b5656f1919c7d1d81e3821eb09e0eb380b34caf9df6f380e2aa84b0f6b6f4b3c8e388ce2e86bd01e46ce17563ab8184b6b426390bd1966c5219d69a01aa9f5659d"}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x7}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}, @NFTA_BITWISE_MASK={0x8c, 0x4, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x6d, 0x1, "80e791f6beed60698561cc6254acdd3d22be8055e97064090f3fdfa34ebeafe101ed03e98d4cd3d2493b47036e8f76eaebf6d6c106119415e4f92de549d976f38a61fd6460c99bb1487f9c238a80c49d75fbe92bbbe7f4a96773ca42d930e910256315bfb8e6746f9a"}]}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x15}, @NFTA_BITWISE_MASK={0x250, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0xb0, 0x1, "54ef163f922d06f758fdcbd551e75f07c8d2e17bb7df39d901430eecb3f582ac91e1ad32a2ee87edbbb68a3852c662845ae278f2bb192db696c1d2ea44b564b918035ff710c0c343fb7d3cdef6a2a54afb1e56d2e09edfef905d260cff620a834f7723520afa3271184e83edd0bafe41292b7d22283316acfdfd6323fbe903fccc69d4757f2b3308d845f59bea5040ded5f58972e2a36543f658e457cc1fec64da817fbe505eefd584fbd5cb"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0x74, 0x1, "51e249d1fae94f5ec12c56d29de04c695561f752610cb3ddf8e4179a98806522bddf77ebf73bddd67be4f1a3be72082bd19e73a949cada524fa29fa2be224fea2fb3f77397053b690e5266ec881b84da312ce48927f1266cf745ca163f586aa56d140c918a182b979b1232f778536d12"}, @NFTA_DATA_VALUE={0x20, 0x1, "bc3a02d788a654d74fabfc043fbf3b561b7333e9ad2fe43990f0a4a0"}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x800000000000000f}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffff8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}]}, @NFTA_BITWISE_DATA={0x58, 0x7, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_BITWISE_OP={0x8}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0xb}]}}}, {0x10, 0x1, 0x0, 0x1, @tunnel={{0xb}, @void}}, {0x3c8, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x3b8, 0x2, 0x0, 0x1, [@NFTA_RANGE_TO_DATA={0x26c, 0x4, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0x3c, 0x1, "e9d89b6c7087f4e28a3fe880527f0e8813dca88e752a519003526e752e8c60311e96f5674fe56d7cf76a42ac0ca7ad5aa55d41f2b00d0e4b"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0xf0, 0x1, "9a576f6cf4e523e485d4ec382f5799f6ad3ab97a114e1cfd44f55bdd526a8790e04de94051099915706668943af46cbcbb73fa3d0b6528b2d59dada8a9621107d04c1ff92ac6cc67d48fe8ebad5b9a130f229c50df375de7b36fcdad7739797786d8fd330d49018d02e894b392ac3d30ee851b46bc6eb179355e2db0d314dde4a73e06b59196fe13523d5d703b282cd2cb671ccf7370286d397bf25f88f1bec18ee59f56d0f805920a1fe9a4f90aa159fe830ab55f50719926b72d286ccfd97086655218ba472719d97e950eff5dbc0408d186b854bd71006a58d179da5508d9ad9a83d1ab6ed6f407e65d09"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0x82, 0x1, "c28bf6ff2587b5731f7e24da466895e7248d8c242ddeb673126f5a3f74323449124bd52f9dfd57c63cafd06afc9065a593279bcc40b6afac2336338b85f279be4a3e2734d011db1d2335051515308d26242a3406bb8c591cc6c492ead54e5714f1f88ab0841eba0c6369a61d17fb4eb37d801ac53774d39fef9b703d9326"}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x8000000000000007}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_RANGE_SREG={0x8}, @NFTA_RANGE_TO_DATA={0x130, 0x4, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x55}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x79, 0x1, "c83d8315b2a273aa8867f1b4620415bb7c4a12cee2189d3e138b2e65f6f422a06c849c810c480ebadba7c488745fbb40258ec968630df5cfa5e0fb0d76eaf9866b003b9fbc17958a2c9f090d945b582bb18e63627d89ceb3ff4c692e17a0b6d1ecfba96c27561a7407a4d02d70384f3be08254faf4"}, @NFTA_DATA_VALUE={0x44, 0x1, "fd53904f7cb31ed743f9561375316799f5962355a7ec5635e073e5690cff104dce673f95e932c1fc5606f85f675e80977a344db60de3971752ffdf5ec22e7870"}]}, @NFTA_RANGE_OP={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}]}], {0x14}}, 0xf38}}, 0x200000d4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$KVM_GET_MSRS_cpu(r6, 0xc008ae88, &(0x7f0000000100)={0x2, 0x0, [{0xfe, 0x0, 0x6}, {0x4b564d03, 0x0, 0x7}]}) openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) r7 = syz_usb_connect(0x0, 0x5f, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r8, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000001f0000540000000e0001006e657464657673696d0000000f0002"], 0x34}}, 0x0) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r8, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000d51d0864ae320f083da64ac7827688e948152e3a094c3413593c45f10675ceb3f7e9d49c1483d8558880734605169aa897ccfba77145fcf053c8d55ad818c3c6c8fe4d1bd6f7cf9f307259d8dcb3383d92ccfca738bd4755f617d0a5cfc758e3d641dc4c2d44c7e7de1d2a4caea0a4bd9ec4da6a8c641db6ccce975b5dd50061c197f20222248a379745f27ea0b5c3cb9ca466f9ae667802d255c4131c4be9040789910661e9ce436d96fc51c5dd7c68df71997421860aa5701b4dde9534b51e0000000000000056b4918733cfe09b22e2edc6b86be0c7b12f99f8d049570ba9b1c3200789dbb240624de12200"/254, @ANYRES16=r10, @ANYBLOB="0100000000000000000054000000"], 0x14}}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x4, 0x0, 0x800, 0x0, 0x10, 0x0, 0x1}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902", @ANYRESOCT=r7, @ANYRESHEX], 0x0) bpf$MAP_CREATE(0x0, 0x0, 0xffffff35) r11 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPOEIOCSFWD(r11, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x4, @remote, 'caif0\x00'}}) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x3d, 0x0, &(0x7f00000000c0)) 8.543445974s ago: executing program 9 (id=6493): r0 = socket$nl_generic(0x10, 0x3, 0x10) fsopen(0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x0, 0x1, 0x401, 0x0, 0x92, 0x55, 0x8, 0x1000006, 0x4}, 0x0) fanotify_init(0xa00, 0x0) io_uring_enter(0xffffffffffffffff, 0x47f9, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000, 0x2, &(0x7f0000ffc000/0x3000)=nil) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r3, 0x6, 0x22, 0xffffffffffffffff, &(0x7f00000002c0)=0x49) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=@newqdisc={0x2c, 0x24, 0x3fe3aa0262d8c583, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x0, 0xffe0}, {0xffff, 0x5}, {0x10}}, [@TCA_RATE={0x6, 0x5, {0x8, 0x81}}]}, 0x2c}}, 0x4048000) ioctl$IOMMU_TEST_OP_ADD_RESERVED(0xffffffffffffffff, 0x3ba0, &(0x7f0000000280)={0x48, 0x1, 0x0, 0x0, 0xffffffffffffffff, 0xa3}) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x42241, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r6, 0x800c5012, &(0x7f0000000040)) write$sysctl(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000100)) r7 = openat$random(0xffffffffffffff9c, &(0x7f00000003c0), 0x40202, 0x0) sendfile(r7, r7, 0x0, 0x4800000009) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000900)=ANY=[@ANYBLOB="180000002e00010026bdf000fcdbdf250400"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x4000010) socket$l2tp6(0xa, 0x2, 0x73) 8.236795807s ago: executing program 6 (id=6495): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000100)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010800040000030000000b14000008000300", @ANYRES32=r2, @ANYBLOB="200050800500020002000000090001007ee5d52ffd0000000800030001ac0f00"], 0x3c}}, 0x40000) 8.030159679s ago: executing program 8 (id=6496): openat$ppp(0xffffffffffffff9c, 0x0, 0x20000, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f00000000c0)={0x41, 0x12}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801}, 0x200088c2) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) unshare(0x22020400) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r4 = openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x32c180) fsopen(&(0x7f00000000c0)='ocfs2\x00', 0x1) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', 0x0}) r6 = socket$kcm(0x10, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x19}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast1, 0xa, 0x0, 0x6, 0x480, 0x4000000000000009, 0x10200}) sendmsg$kcm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a001000000002", 0x29}, {&(0x7f0000000400)='j', 0x1}], 0x2}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xf96fad60bebedca5, 0x25, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000d50a000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000493c010000000000950000000000000018120000aec72eed", @ANYRESHEX=r4], &(0x7f0000000140)='syzkaller\x00', 0x6, 0x15, &(0x7f00000001c0)=""/21, 0x41100, 0x46, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000003c0)={0x0, 0x4, 0x8, 0x5}, 0x10, 0x0, 0xffffffffffffffff, 0x4, &(0x7f0000000880)=[0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000008c0)=[{0x2, 0x2, 0x4, 0x2}, {0x6, 0x4, 0x1000b, 0xa}, {0x3, 0x2, 0x6, 0xa}, {0x1, 0x4, 0x20c, 0xa}], 0x10, 0x2}, 0x94) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602240000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) dup(r6) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 7.939202502s ago: executing program 6 (id=6498): r0 = socket$nl_generic(0x10, 0x3, 0x10) fsopen(0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x0, 0x1, 0x401, 0x0, 0x92, 0x55, 0x8, 0x1000006, 0x4}, 0x0) fanotify_init(0xa00, 0x0) io_uring_enter(0xffffffffffffffff, 0x47f9, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000, 0x2, &(0x7f0000ffc000/0x3000)=nil) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r3, 0x6, 0x22, 0xffffffffffffffff, &(0x7f00000002c0)=0x49) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=@newqdisc={0x2c, 0x24, 0x3fe3aa0262d8c583, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x0, 0xffe0}, {0xffff, 0x5}, {0x10}}, [@TCA_RATE={0x6, 0x5, {0x8, 0x81}}]}, 0x2c}}, 0x4048000) ioctl$IOMMU_TEST_OP_ADD_RESERVED(0xffffffffffffffff, 0x3ba0, &(0x7f0000000280)={0x48, 0x1, 0x0, 0x0, 0xffffffffffffffff, 0xa3}) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x42241, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r6, 0x800c5012, &(0x7f0000000040)) write$sysctl(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000100)) r7 = openat$random(0xffffffffffffff9c, &(0x7f00000003c0), 0x40202, 0x0) sendfile(r7, r7, 0x0, 0x4800000009) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000900)=ANY=[@ANYBLOB], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x4000010) socket$l2tp6(0xa, 0x2, 0x73) 7.847495089s ago: executing program 0 (id=6499): r0 = socket$nl_generic(0x10, 0x3, 0x10) fsopen(0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x0, 0x1, 0x401, 0x0, 0x92, 0x55, 0x8, 0x1000006, 0x4}, 0x0) fanotify_init(0xa00, 0x0) io_uring_enter(0xffffffffffffffff, 0x47f9, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000, 0x2, &(0x7f0000ffc000/0x3000)=nil) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r3, 0x6, 0x22, 0xffffffffffffffff, &(0x7f00000002c0)=0x49) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=@newqdisc={0x2c, 0x24, 0x3fe3aa0262d8c583, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x0, 0xffe0}, {0xffff, 0x5}, {0x10}}, [@TCA_RATE={0x6, 0x5, {0x8, 0x81}}]}, 0x2c}}, 0x4048000) ioctl$IOMMU_TEST_OP_ADD_RESERVED(0xffffffffffffffff, 0x3ba0, 0x0) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x42241, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r6, 0x800c5012, &(0x7f0000000040)) write$sysctl(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000100)) openat$random(0xffffffffffffff9c, &(0x7f00000003c0), 0x40202, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000900)=ANY=[@ANYBLOB="180000002e00010026bdf000fcdbdf250400000004001d"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x4000010) socket$l2tp6(0xa, 0x2, 0x73) 6.384436487s ago: executing program 9 (id=6500): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x1ff}}, './file0\x00'}) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x804000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x28, 0x2, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x40010}, 0x20004001) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) r3 = epoll_create1(0x0) ppoll(&(0x7f0000000080)=[{r3, 0x39f0}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r6 = syz_io_uring_setup(0x10f, &(0x7f00000000c0)={0x0, 0x211a, 0x80, 0x4, 0x306, 0x0, r1}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000040)=0xffefffdc, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @xdp}, 0x94) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='>'], 0x38}}, 0x80) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r9, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r9, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x8, 0x1, 0xffffffffffffffff, 0x0}) io_uring_register$IORING_REGISTER_FILES(r6, 0x2, &(0x7f00000002c0)=[0xffffffffffffffff], 0x57) io_uring_enter(r6, 0x3516, 0xc2de, 0x8, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000000c0)) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) 5.756694008s ago: executing program 0 (id=6501): socket$nl_route(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0xfffffffffffffcb5, 0x0, 0x5, 0x4ae, 0x0, 0xb49, 0x9, 0x8, 0x7, 0x2}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x58, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x7b4d, 0x116245af0baa48c7}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'wg1\x00'}, @IFLA_MASTER={0x8}, @IFLA_VFINFO_LIST={0x1c, 0x16, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0xff8, 0x3}}]}]}]}, 0x58}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) write$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000040)={'some', 0x20, 0x17e, 0x20, 0x100002}, 0x2f) r4 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001a80)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe50a10a000600014002020c600e41b0000900ac000a0501000000160012000a00ff120048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92", 0xbd}], 0x1}, 0x894) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000001040)={'sit0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0xa000, 0x8, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0x0, 0x29, 0x0, @loopback, @rand_addr=0x3}}}}) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/fscaps', 0x0, 0x0) write$cgroup_int(r5, &(0x7f0000000040)=0x900, 0x12) sendmmsg$inet6(r0, &(0x7f0000000580)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000340)="f2", 0x1}], 0x1}}, {{&(0x7f0000000180)={0xa, 0x4e24, 0xff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}, 0x1c, &(0x7f0000000400)=[{&(0x7f00000001c0)='f', 0x1}], 0x1}}], 0x2, 0x0) r6 = dup(0xffffffffffffffff) write$UHID_INPUT(r6, &(0x7f0000001c00)={0x8, {"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", 0x1000}}, 0xfffffe38) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x18, &(0x7f0000000040)=ANY=[@ANYBLOB="201107000000070729bb19"], 0x0, 0x0, 0x0, 0x0}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0) 5.722146214s ago: executing program 6 (id=6502): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x17) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r5, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r6) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r6, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r7, 0x0) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r10, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r12, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}}, 0x800) r13 = syz_open_procfs(0x0, &(0x7f0000000400)='net/softnet_stat\x00') r14 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r14, 0x1, r13, &(0x7f0000000240)={0x80000011}) epoll_ctl$EPOLL_CTL_MOD(r14, 0x3, r13, &(0x7f0000000c40)) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0803000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="b04c82389bf4b97e0d0a1cdd8168ab989061201e918ccbf9f30531b6c0d43a3dd4b76807c99e0afc367e77aebe1cae0583ebeac35638b587440b094e246f175c72cf15b7ebff4d5852871696f05b7ed3477e361a0b35027999b7e03f520bdef1936df2d83d62903e3edfe8bda1e468616e601e2ed18bbf3aca6972fc35b0e78f6f6c98e9061cf8b17127a5956b90ac1cc3456fa353821ce1706c0f51aa99f3ff8f94fd62e794d8b574ba08f37c025279e6a8aedcd2"], 0x44}}, 0x0) 5.00758188s ago: executing program 8 (id=6503): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000540), 0x181440, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xe) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x200, 0x0) ioctl$PPPIOCATTCHAN(r3, 0x40047438, &(0x7f0000000040)=0x1) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r3, 0x40047211, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0), 0x80, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x183240, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r7, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x6a2, 0x0, 0x6}]}) ioctl$FBIOPAN_DISPLAY(r4, 0x4606, &(0x7f0000000200)={0x190, 0x640, 0x500, 0x280, 0x0, 0xc0e4, 0x18, 0x1, {0x5, 0x8001}, {0x0, 0x7}, {0x9}, {0x29}, 0x1, 0x192, 0x7e, 0x4, 0x0, 0xffffffff, 0x0, 0x0, 0x6, 0x8, 0xd, 0x7fff, 0x0, 0x0, 0x3, 0x5}) r8 = inotify_init1(0x800) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r9, 0x0, 0x17, 0x0, 0x0) inotify_rm_watch(r8, 0x0) r10 = open$dir(&(0x7f0000000100)='./mnt\x00', 0x40500, 0x48) r11 = openat(r10, &(0x7f0000000140)='./mnt\x00', 0x20a02, 0x140) syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r11, 0x89f0, &(0x7f0000000000)={'gre0\x00', &(0x7f0000000400)={'ip_vti0\x00', 0x0, 0x20, 0xf000, 0xc, 0x6, {{0x38, 0x4, 0x0, 0x7, 0xe0, 0x68, 0x0, 0x8, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x22}, @remote, {[@generic={0x44, 0x7, "4197b08e53"}, @timestamp={0x44, 0x28, 0x4f, 0x0, 0x4, [0x8000, 0xff, 0x0, 0x4, 0x4, 0x4dcf, 0x1, 0xfc9, 0x4]}, @timestamp={0x44, 0x10, 0xe, 0x0, 0x0, [0xfffffff8, 0x9, 0x1ff]}, @rr={0x7, 0x17, 0x46, [@empty, @local, @multicast2, @remote, @rand_addr=0x64010100]}, @timestamp={0x44, 0x14, 0xbc, 0x0, 0x9, [0x1, 0x9, 0x2, 0xe]}, @timestamp_prespec={0x44, 0xc, 0xf6, 0x3, 0x4, [{@rand_addr=0x64010102}]}, @cipso={0x86, 0x2a, 0x3, [{0xf5154c012cf1349f, 0xa, "d4a7b117b5a06258"}, {0x6, 0xb, "52f05e87d77cc83b71"}, {0x0, 0xf, "723ef91751b6ded6385025243a"}]}, @timestamp={0x44, 0x14, 0x11, 0x0, 0x6, [0x196, 0x9, 0x5, 0x1]}, @cipso={0x86, 0x18, 0x3, [{0x5, 0x12, "e4cc598bd65863f0c12277e782649969"}]}]}}}}}) truncate(&(0x7f0000000200)='./mnt\x00', 0x4) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x640c7400, 0x0, 0x0, 0x0, 0x0, 0x0) 4.858749963s ago: executing program 6 (id=6504): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="b70000000000000007000000000000009500000000000000a9171809f8dcf159569d5475991f7de1a0d0c119cfcf6b98741c23fb7f8d3002ec85db75af955427e91496087a51a0a78f269a9e216a0d0177c4fe3552396a180330807a5b6e8c79aa92038c78d1f16c1323f0e0c8d45c641a21757847cb22230e4321cc3581e40c62c4defee8cffe359cfeef7f58fffdb48647d28ae810f6d22d20271e9e88e94aa6982bf48356652b08e2fbd404e41e0058aae0478fbe542b648421d1b4486a542a7d478fbe6b5e000000293853f9c68e235184b7ad5b6c4fe70ec8320500db0db7fda3da6171a05509ffecef2cb9802d4f36c9a1ce46d3b355fec188ccfc2f0fc89e164561fb06ee9a0153981a47b5de9edd3536d5534f9a699f73b2c9341d2d05043748ce1f4577ed76cdf5b3c697089daa4abda69a8c0c992404610a6be9e103c972459065dec0488e85a6a0418fc87dd8019ef7bb4ef4fa6ee08d81797570578f2e8198e687012f25a69a90e7515e35f8abbddfa96c3f0485f01f0e9e144a2bd31c1b594c50de7c9efd826f1e19b7bd89ca4052b1985287bd13957a48467e0eeddf564d175bf4340885b63976df609806c3b2a3667539dfd66a7400000000003be6026e60205f761ce85cdf75cdb95ca5d32b5bf87eed4184d49f8f48181ef2419efe82ebb18ee55772d562b3b49551714e805a5211a3f4e8e703c03e23b2074bc573dbb66d59e269b722637c4a2efb5241cae2f14774609ad91d66724c438455dc4fcf0b4c8fc235f6c190b4c82bb2556d1fbcd4468369e98e900c743162ce2c7e60610acf0c8e4ba94a7e7127c7de0e6c35acecee1b8434fdca4579f9ebc6a515f7d910b466eb583fb0a7e65fbecb2b8ee0e9da33afb88aa5da8da3a5e0e58fcb48de6f165826b046a8951a47e040bd419d0efa0f54e8e3694085a7bde6f6494968d8200000000000"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff37}, 0x48) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x1000000000000f, &(0x7f0000000080)=0x7fffffff, 0x4) setsockopt$sock_attach_bpf(r1, 0x1, 0x34, &(0x7f0000000040)=r0, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="b7000000ecffffff0c0000000000000095000000000000005e0c83dfb64a3eb1cdfa541cd3957aa8a96b9fa4591c1eb556e38defc504b011face5a06294c2115a9ad943bac350e8d7961537181f79ead9176dc7c3ed2d45004deb987fa0d"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff37}, 0x48) r3 = dup2(r2, r0) setsockopt$sock_attach_bpf(r1, 0x1, 0x34, &(0x7f00000000c0)=r3, 0x4) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) write$evdev(r3, &(0x7f0000000080)=[{{0x0, 0xea60}, 0x14, 0x5, 0xfff}, {{0x0, 0x2710}, 0x16, 0x9, 0x6}, {{r4, r5/1000+60000}, 0x1, 0x3, 0x7}, {{0x77359400}, 0x12, 0x3, 0x10001}], 0x40) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@ipv6_delroute={0x1c, 0x19, 0x1, 0x70bd25, 0x25dfdbfc, {0xa, 0x0, 0x14, 0x0, 0x0, 0x4, 0xfe, 0x4}}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x804) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001900)=@newlink={0x60, 0x10, 0x403, 0x300, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1e, 0x1d}}, @IFLA_VLAN_ID={0x6, 0x1, 0xffe}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x60}}, 0x8000) 4.150446682s ago: executing program 6 (id=6505): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000540), 0x181440, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xe) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x200, 0x0) ioctl$PPPIOCATTCHAN(r3, 0x40047438, &(0x7f0000000040)=0x1) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r3, 0x40047211, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0), 0x80, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x183240, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r7, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x6a2, 0x0, 0x6}]}) ioctl$FBIOPAN_DISPLAY(r4, 0x4606, &(0x7f0000000200)={0x190, 0x640, 0x500, 0x280, 0x0, 0xc0e4, 0x18, 0x1, {0x5, 0x8001}, {0x0, 0x7}, {0x9}, {0x29}, 0x1, 0x192, 0x7e, 0x4, 0x0, 0xffffffff, 0x0, 0x0, 0x6, 0x8, 0xd, 0x7fff, 0x0, 0x0, 0x3, 0x5}) r8 = inotify_init1(0x800) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r9, 0x0, 0x17, 0x0, 0x0) inotify_rm_watch(r8, 0x0) r10 = open$dir(&(0x7f0000000100)='./mnt\x00', 0x40500, 0x48) r11 = openat(r10, &(0x7f0000000140)='./mnt\x00', 0x20a02, 0x140) syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r11, 0x89f0, &(0x7f0000000000)={'gre0\x00', &(0x7f0000000400)={'ip_vti0\x00', 0x0, 0x20, 0xf000, 0xc, 0x6, {{0x38, 0x4, 0x0, 0x7, 0xe0, 0x68, 0x0, 0x8, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x22}, @remote, {[@generic={0x44, 0x7, "4197b08e53"}, @timestamp={0x44, 0x28, 0x4f, 0x0, 0x4, [0x8000, 0xff, 0x0, 0x4, 0x4, 0x4dcf, 0x1, 0xfc9, 0x4]}, @timestamp={0x44, 0x10, 0xe, 0x0, 0x0, [0xfffffff8, 0x9, 0x1ff]}, @rr={0x7, 0x17, 0x46, [@empty, @local, @multicast2, @remote, @rand_addr=0x64010100]}, @timestamp={0x44, 0x14, 0xbc, 0x0, 0x9, [0x1, 0x9, 0x2, 0xe]}, @timestamp_prespec={0x44, 0xc, 0xf6, 0x3, 0x4, [{@rand_addr=0x64010102}]}, @cipso={0x86, 0x2a, 0x3, [{0xf5154c012cf1349f, 0xa, "d4a7b117b5a06258"}, {0x6, 0xb, "52f05e87d77cc83b71"}, {0x0, 0xf, "723ef91751b6ded6385025243a"}]}, @timestamp={0x44, 0x14, 0x11, 0x0, 0x6, [0x196, 0x9, 0x5, 0x1]}, @cipso={0x86, 0x18, 0x3, [{0x5, 0x12, "e4cc598bd65863f0c12277e782649969"}]}]}}}}}) truncate(&(0x7f0000000200)='./mnt\x00', 0x4) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x640c7400, 0x0, 0x0, 0x0, 0x0, 0x0) 4.101599916s ago: executing program 5 (id=6506): r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) sendmmsg$sock(r0, 0x0, 0x0, 0x20000000) 3.689616215s ago: executing program 9 (id=6507): cachestat(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x7fff}, 0x0, 0x0) socket$igmp6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1", 0x12) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) sendmmsg$inet6(r2, &(0x7f0000002940), 0x40000000000017d, 0x811) r3 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) 3.46476154s ago: executing program 0 (id=6508): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000003c0), 0x8002, 0x0) read$FUSE(r1, 0x0, 0x0) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) sendmmsg$unix(r2, &(0x7f0000004400), 0x400000000000203, 0x0) getsockopt$TIPC_IMPORTANCE(r2, 0x10f, 0x89, &(0x7f0000000680), &(0x7f00000006c0)=0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0xfffffff7, 0x3, 0x4, 0x3ff}, 0x14) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="020100030c0100000000000000000000030006000000000002000000000000000000000049a6260005000500000000000a004e20000000f7fe80000000040000000000000002001000000004d4000004d300000000"], 0x60}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x2, @mcast1, 0x9}, 0x1c) cachestat(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x7fff}, 0x0, 0x0) socket$igmp6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r7, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r7, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) 3.464450156s ago: executing program 5 (id=6509): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000001c0)=0xa3, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) r1 = timerfd_create(0x5198301910cbfe43, 0x0) r2 = syz_io_uring_setup(0x58f7, &(0x7f0000000880)={0x0, 0x0, 0x10100, 0x0, 0x104a}, &(0x7f00000001c0)=0x0, &(0x7f0000000240)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0, 0x0, 0x1a}) timerfd_settime(r1, 0x3, &(0x7f0000000840)={{0x77359400}}, 0x0) io_uring_enter(r2, 0x1f82, 0x0, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x23, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000100)) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r7 = dup3(r6, r5, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) setsockopt$MRT_DONE(r7, 0x0, 0xc9, 0x0, 0x0) 3.031565813s ago: executing program 8 (id=6510): r0 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) syz_io_uring_setup(0x42e6, &(0x7f0000000340)={0x0, 0x2b13, 0x10100, 0x0, 0x25c, 0x0, r1}, &(0x7f0000000180), &(0x7f0000000300)) ioctl$VIDIOC_G_TUNER(r1, 0xc054561d, &(0x7f0000000ac0)={0x3, "12f7f538cc9ad9f769d66e3d248161f81dd9cd911e9a080ba3b3d4d3ae2ae3ea", 0x3, 0x0, 0x8001}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r5 = dup3(r2, r0, 0x80000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) shmat(0x0, &(0x7f0000000000/0x3000)=nil, 0x4000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x564}}, 0x4000000) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@RTM_NEWMDB={0x38, 0x54, 0x1e5, 0x0, 0xfffffffd, {0x7, r4}, [@MDBA_SET_ENTRY={0x20, 0x1, {r7, 0x1, 0x1, 0x1, {@ip4=@loopback, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) write$P9_RXATTRCREATE(r5, &(0x7f0000000240)={0x7, 0x21, 0x1}, 0x7) 2.562988939s ago: executing program 5 (id=6511): socket(0x10, 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x6a800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountstats\x00') r4 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x4000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newlink={0x5c, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x37c13, 0x71a2b}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @loopback}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x56}, @IFLA_TXQLEN={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r6, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x36, r6}, './file0\x00'}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x3, 0x3, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x14, 0x5, &(0x7f0000000e00)=ANY=[@ANYBLOB="bf16000000000000b7070000010000004070000000000000500000000000e1ff95000000000000002ba76bb33123751c4e345c652fbc1626cca2a2ad75806150ae0209e62751ee04000000670d25010000020000040000009fc404000000c788b277beee11bf9b0a4def23d410f6accd3641110bec4e90a6341965dac03d04683712a0b09edc9e9ef8f6e396ad200e011ea665c45a3449abe802f5ab3e89cf40b8580218ce740068720000074e3e8eea3fd8cf49827ca311f5b87e1ca8433a8acd715f5888b2007f0000000000000000010000000000fb00010000000000414027efc84293af6a22000000005335001db43a5c000000000000000024000000000000000000e75a89faff01210cce39bf405f1e846c1242000000000000cad326ad7add65873d9f87463ad6f7c2e8ee1a39244960b318778f2a047f6d5bc24fef5d7d617da7fb5e2a431ab9142f3a06d55740a43088696daaed74b9c5c29647d2f950a959cf9938d6df8600a62e96b7cb8e52cbdc2ba9d580609e31c30891f7e5ff7fd6fce424c2200af6c3784a1975fa657de38a3a32a4fd67ce446ac5431d07db79240acaf091231b986e77d05d988d6edc71df48dca02113a38300c2bf2b5543ffc1669557b3819d8c396d2c2361629d1022f722ec23812770d72cd0010000007889b8c7044f563a1f68d4eff895fdbc463f747c08f40105869035000000000000000000000000000000000000000000000000080000003ddf4aa4b1c8baa0ae6feb6737c275dc2740f742b5425f1d581961471cdb0500000000000000d4123f955267fe4a75c114f874e086287547d4099aeec9f1538ee25a365ccf4a9b604e88e12ff25184d4e3c6f7f623559435b26b50fb7113000000f0bc440550ee91302f5a000000000000000000000000006d0000e67ccc00148ac4c43021cce9f24f4b2f9492c32e7af05c648978d9980ba49789906d923e4916f390ab7edcd3f5b9fe14446dd446a52131c464f2c08efb46d934615c8631b7c42efd0294bea179b0433f5c899119ec2c3f4523110c0acef5383b5a2720caeb68f1e9c05b05d89467ded84da093dea262e51811e2d7fa515722516bd5ef6c8c4966e5937562a5648a696ad3a042a7097ddefe0671f977fb145890f5bf41ba92b8c4c8b14f0d4a880ef4518bb32881dfd15dc84e79d326337e21e041654f06bd7f000000000000000000000000000000282ffe0000000009350cfa3ab109ab4a7d95938c5334a0dd177f1a7389ee570d95e543a27546d3770740f354df6dd6b1bfe4104d2262f33f596d606ccce75a3c3d5f9ad94a7316b0c6ad14f1398a6b39b07121f636da418b34d48677cf8d2d99ee8ac50142bcdcc73dd73cc6ec46896ffb35ac82ac7a9309ea07396d2814dc630ad1a9913934849be25f7b81b59aaa9fa2e9d6ecafcfa1de81b2d3581ab1138537f98d2240b6c2bf40569da4e2bb77532ab9220347d78319617d17e14f7331486e86b2145980b95c88ae11b1c6b6ea6c2b2311d6ce6315cc451dd50ac746acd59d075b41f9a747894956b10453ccf6527d8f579256e9849bbaf6c7c84362209d3d2320101d57"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2}, 0x94) setsockopt$sock_attach_bpf(r9, 0x1, 0x32, &(0x7f00000002c0)=r10, 0x4) sendmsg$kcm(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000003c0)="d800000018007b18e00212ba0d8105040a0a1100fe0f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b01602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5", 0xd2}, {&(0x7f00000004c0)="f80ec2e2badd", 0x6}], 0x2, 0x0, 0x0, 0x2663}, 0x0) ioctl$BLKTRACESETUP(r4, 0xc0401273, &(0x7f00000000c0)={'\x00', 0x2, 0x8, 0xada2, 0x8a, 0x7fff}) read$FUSE(r3, &(0x7f0000001240)={0x2020}, 0x2020) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0x1, 0xdddd1000, 0x0, 0x2, 0x4, 0x0, 0xf, 0x4, 0x0, 0x8, 0x9, 0x10}, {0xffff1000, 0x4056000, 0xc, 0x8, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7, 0x0, 0xfa}, {0x3000, 0x5000, 0xc, 0xfe, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfc}, {0x3000, 0x3000, 0x3, 0x0, 0x0, 0x0, 0xff, 0x0, 0x8, 0x0, 0x4}, {0xdddd0000, 0x3000, 0x9, 0x0, 0xff, 0x4, 0x6, 0xe, 0x0, 0x3c}, {0x0, 0xdddd1000, 0x0, 0x0, 0x2, 0x0, 0x2, 0x1, 0x0, 0xfe, 0x80}, {0xdddd1000, 0x0, 0xb, 0x71, 0xfe, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x10}, {0x0, 0x3000, 0x0, 0x0, 0x1, 0x1, 0x83, 0xa, 0x26, 0x5, 0x0, 0x3}, {0x80a0000, 0xfffc}, {0x8000000, 0xff}, 0xddf8ffdb, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0xd801, 0x0, [0x6, 0x0, 0x1, 0xfffffffffffffffe]}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{0x1, 0x8080000, 0x8, 0x9, 0xf9, 0x3, 0xdc, 0x0, 0x0, 0x8, 0x1, 0x10}, {0x5000, 0xeeee6000, 0x8, 0x3, 0x3, 0x94, 0x9, 0x3, 0x0, 0xfb, 0x2, 0x4}, {0xd000, 0x0, 0x3, 0xc, 0xb, 0xb0, 0xf, 0xfb, 0x9, 0x8, 0x3, 0x8}, {0x2000, 0x10000, 0xd, 0x9, 0xc, 0xde, 0x2, 0x9, 0x9, 0x0, 0x5, 0x8}, {0xdddd0000, 0x80a0000, 0x10, 0x3, 0xc, 0x2, 0x5, 0x7f, 0x2, 0x3e, 0x72, 0x4}, {0x0, 0x0, 0x8, 0x40, 0x5, 0x6, 0x9, 0x7, 0xec, 0x9, 0x2, 0x4}, {0xeeef0000, 0x8080000, 0xa, 0x40, 0xfb, 0xc, 0xa, 0x6b, 0x0, 0x4, 0x1, 0x5}, {0x2000, 0xdddd1000, 0x3, 0x0, 0xf8, 0xf6, 0x3, 0x5, 0x0, 0x86, 0x4, 0x36}, {0xeeef0000}, {0x8080000, 0x8005}, 0x10000, 0x0, 0x3000, 0x30, 0xf, 0x2900, 0xf000, [0x49, 0xe, 0x1, 0xbd]}) 1.404924888s ago: executing program 8 (id=6512): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000100)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010800040000030000000b14000008000300", @ANYRES32, @ANYBLOB="200050800500020002000000090001007ee5d52ffd0000000800030001ac0f00"], 0x3c}}, 0x40000) 1.171201887s ago: executing program 8 (id=6513): openat$ppp(0xffffffffffffff9c, 0x0, 0x20000, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f00000000c0)={0x41, 0x12}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801}, 0x200088c2) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) unshare(0x22020400) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r4 = openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x32c180) fsopen(&(0x7f00000000c0)='ocfs2\x00', 0x1) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', 0x0}) r6 = socket$kcm(0x10, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x19}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast1, 0xa, 0x0, 0x6, 0x480, 0x4000000000000009, 0x10200}) sendmsg$kcm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a001000000002", 0x29}, {&(0x7f0000000400)='j', 0x1}], 0x2}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xf96fad60bebedca5, 0x25, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000d50a000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000493c010000000000950000000000000018120000aec72eed", @ANYRESHEX=r4], &(0x7f0000000140)='syzkaller\x00', 0x6, 0x15, &(0x7f00000001c0)=""/21, 0x41100, 0x46, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000003c0)={0x0, 0x4, 0x8, 0x5}, 0x10, 0x0, 0xffffffffffffffff, 0x4, &(0x7f0000000880)=[0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000008c0)=[{0x2, 0x2, 0x4, 0x2}, {0x6, 0x4, 0x1000b, 0xa}, {0x3, 0x2, 0x6, 0xa}, {0x1, 0x4, 0x20c, 0xa}], 0x10, 0x2}, 0x94) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602240000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) dup(r6) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 618.948545ms ago: executing program 9 (id=6514): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) socket$inet_tcp(0x2, 0x1, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_tos={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4000}}, 0x20) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x35, 0x0, 0x0) unshare(0x13060100) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) removexattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000280)=@known='system.posix_acl_default\x00') add_key(0x0, &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x10002) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b0000"], 0x50) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) r3 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @loopback, 0x4e25, 0x3, 'lblc\x00', 0x2a, 0x2, 0x6e}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000200)={{0x84, @multicast1, 0x4e21, 0x3, 'lc\x00', 0xc, 0x9, 0x64}, {@remote, 0x4e21, 0x4, 0x100000cd, 0x12d5f, 0x3}}, 0x44) sendmmsg$sock(r2, &(0x7f00000005c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)=[@mark={{0x10, 0x1, 0x24, 0x3}}], 0x10}}], 0x1, 0x20000000) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_tables_names\x00') read$eventfd(r4, &(0x7f0000000000), 0x8) fsetxattr$trusted_overlay_redirect(r4, &(0x7f0000000000), &(0x7f0000000080)='./file0/file0\x00', 0xe, 0x3) 413.645057ms ago: executing program 0 (id=6515): r0 = socket$nl_generic(0x10, 0x3, 0x10) fsopen(0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x0, 0x1, 0x401, 0x0, 0x92, 0x55, 0x8, 0x1000006, 0x4}, 0x0) fanotify_init(0xa00, 0x0) io_uring_enter(0xffffffffffffffff, 0x47f9, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000, 0x2, &(0x7f0000ffc000/0x3000)=nil) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r3, 0x6, 0x22, 0xffffffffffffffff, &(0x7f00000002c0)=0x49) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=@newqdisc={0x2c, 0x24, 0x3fe3aa0262d8c583, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x0, 0xffe0}, {0xffff, 0x5}, {0x10}}, [@TCA_RATE={0x6, 0x5, {0x8, 0x81}}]}, 0x2c}}, 0x4048000) ioctl$IOMMU_TEST_OP_ADD_RESERVED(0xffffffffffffffff, 0x3ba0, &(0x7f0000000280)={0x48, 0x1, 0x0, 0x0, 0xffffffffffffffff, 0xa3}) r6 = openat$audio(0xffffffffffffff9c, 0x0, 0x42241, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r6, 0x800c5012, &(0x7f0000000040)) write$sysctl(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000100)) openat$random(0xffffffffffffff9c, &(0x7f00000003c0), 0x40202, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000900)=ANY=[@ANYBLOB="180000002e00010026bdf000fcdbdf250400000004001d"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x4000010) socket$l2tp6(0xa, 0x2, 0x73) 283.317393ms ago: executing program 6 (id=6516): r0 = socket$nl_generic(0x10, 0x3, 0x10) fsopen(0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x0, 0x1, 0x401, 0x0, 0x92, 0x55, 0x8, 0x1000006, 0x4}, 0x0) fanotify_init(0xa00, 0x0) io_uring_enter(0xffffffffffffffff, 0x47f9, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000, 0x2, &(0x7f0000ffc000/0x3000)=nil) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r3, 0x6, 0x22, 0xffffffffffffffff, &(0x7f00000002c0)=0x49) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=@newqdisc={0x2c, 0x24, 0x3fe3aa0262d8c583, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x0, 0xffe0}, {0xffff, 0x5}, {0x10}}, [@TCA_RATE={0x6, 0x5, {0x8, 0x81}}]}, 0x2c}}, 0x4048000) ioctl$IOMMU_TEST_OP_ADD_RESERVED(0xffffffffffffffff, 0x3ba0, &(0x7f0000000280)={0x48, 0x1, 0x0, 0x0, 0xffffffffffffffff, 0xa3}) r6 = openat$audio(0xffffffffffffff9c, 0x0, 0x42241, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r6, 0x800c5012, &(0x7f0000000040)) write$sysctl(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000100)) openat$random(0xffffffffffffff9c, &(0x7f00000003c0), 0x40202, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000900)=ANY=[@ANYBLOB="180000002e00010026bdf000fcdbdf250400000004001d"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x4000010) socket$l2tp6(0xa, 0x2, 0x73) 0s ago: executing program 9 (id=6517): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0xfffe}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc0}}, 0x0) kernel console output (not intermixed with test programs): o altsetting 0 [ 2105.364668][T30889] netlink: 72 bytes leftover after parsing attributes in process `syz.7.5943'. [ 2105.386045][T26662] usb 6-1: New USB device found, idVendor=07c0, idProduct=1125, bcdDevice= 0.00 [ 2105.411555][T26662] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2105.462605][T26662] usb 6-1: config 0 descriptor?? [ 2105.512596][T26662] usbhid 6-1:0.0: can't add hid device: -22 [ 2105.524958][T26662] usbhid 6-1:0.0: probe with driver usbhid failed with error -22 [ 2105.534058][T30891] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5944'. [ 2105.673270][T30891] 8021q: adding VLAN 0 to HW filter on device bond6 [ 2105.848438][T30891] macvlan2: entered promiscuous mode [ 2105.856948][T30891] macvlan2: entered allmulticast mode [ 2105.863929][T30891] bond6: (slave macvlan2): Opening slave failed [ 2105.987354][ T979] tipc: Node number set to 2886997039 [ 2106.252428][T26662] usb 6-1: USB disconnect, device number 15 [ 2107.213896][T30940] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2107.265957][T30940] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2107.484591][T26662] usb 7-1: new high-speed USB device number 99 using dummy_hcd [ 2107.551332][T30950] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5960'. [ 2107.618719][T30951] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5960'. [ 2107.802829][T30956] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5962'. [ 2107.954205][T30956] 8021q: adding VLAN 0 to HW filter on device bond6 [ 2107.983048][T30961] netlink: 'syz.6.5961': attribute type 10 has an invalid length. [ 2108.154455][T30956] macvlan2: entered promiscuous mode [ 2108.180567][T30956] macvlan2: entered allmulticast mode [ 2108.211737][T30956] bond6: (slave macvlan2): Opening slave failed [ 2108.223027][ T979] IPVS: starting estimator thread 0... [ 2108.347213][T30970] IPVS: using max 28 ests per chain, 67200 per kthread [ 2108.422403][T30973] delete_channel: no stack [ 2109.622983][T28592] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 2109.636195][T28592] hid-generic 0000:0000:0000.0021: hidraw0: HID v0.00 Device [syz1] on syz0 [ 2109.816966][T26662] usb 7-1: new high-speed USB device number 100 using dummy_hcd [ 2109.868346][T21922] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 2109.969898][T26662] usb 7-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 2109.979986][T26662] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2109.990631][T26662] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 2110.000355][T26662] usb 7-1: config 1 has no interface number 0 [ 2110.006665][T26662] usb 7-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30 [ 2110.025981][T26662] usb 7-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 2110.060593][T26662] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2110.061860][T21922] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2110.077294][T26662] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2110.096577][T21922] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2110.108314][T21922] usb 1-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 2110.118594][T21922] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2110.136013][T26662] usb 7-1: Product: syz [ 2110.146148][T26662] usb 7-1: Manufacturer: syz [ 2110.152754][T26662] usb 7-1: SerialNumber: syz [ 2110.160718][T21922] usb 1-1: config 0 descriptor?? [ 2110.601521][T20614] usb 7-1: USB disconnect, device number 100 [ 2110.610926][T31015] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 2110.644902][T31015] netlink: 'syz.5.5981': attribute type 6 has an invalid length. [ 2110.781927][T21922] hid-led 0003:27B8:01ED.0022: probe with driver hid-led failed with error -71 [ 2110.808408][T21922] usb 1-1: USB disconnect, device number 57 [ 2111.229488][T31017] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5982'. [ 2111.416028][T31017] 8021q: adding VLAN 0 to HW filter on device bond5 [ 2111.468374][T31021] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5983'. [ 2111.473190][T31017] macvlan2: entered promiscuous mode [ 2111.486266][T31017] macvlan2: entered allmulticast mode [ 2111.493494][T31017] bond5: (slave macvlan2): Opening slave failed [ 2111.629605][T31025] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5984'. [ 2111.644562][T31026] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5984'. [ 2111.667235][T31024] syzkaller0: entered promiscuous mode [ 2111.672798][T31024] syzkaller0: entered allmulticast mode [ 2112.096083][T31031] netlink: 'syz.0.5986': attribute type 10 has an invalid length. [ 2113.309242][T31062] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5996'. [ 2113.399439][T31062] 8021q: adding VLAN 0 to HW filter on device bond6 [ 2113.460012][T31072] macvlan0: entered promiscuous mode [ 2113.465513][T31072] macvlan0: entered allmulticast mode [ 2113.473057][T31072] bond6: (slave macvlan0): Opening slave failed [ 2113.543438][T31076] netlink: 'syz.0.6000': attribute type 11 has an invalid length. [ 2113.708841][T31083] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 2113.728889][T31083] netlink: 'syz.7.5999': attribute type 6 has an invalid length. [ 2113.838666][T10433] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 2114.164759][T20614] usb 7-1: new high-speed USB device number 101 using dummy_hcd [ 2114.237039][T10433] usb 1-1: Using ep0 maxpacket: 8 [ 2114.243948][T10433] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 2114.252330][T10433] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2114.266618][T10433] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2114.276545][T10433] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2114.286756][T10433] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2114.300028][T10433] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2114.309302][T10433] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2114.331391][T20614] usb 7-1: Using ep0 maxpacket: 16 [ 2114.341612][T20614] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2114.448928][T20614] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 2114.489701][T20614] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2114.506357][T20614] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2114.585962][T20614] usb 7-1: Manufacturer: syz [ 2114.606655][T20614] usb 7-1: config 0 descriptor?? [ 2114.641979][T10433] usb 1-1: GET_CAPABILITIES returned 0 [ 2114.671946][T10433] usbtmc 1-1:16.0: can't read capabilities [ 2114.950970][T10433] usb 1-1: USB disconnect, device number 58 [ 2114.956961][T31076] usbtmc 1-1:16.0: usb_control_msg returned -71 [ 2114.957119][T31087] usbtmc 1-1:16.0: send_request_dev_dep_msg_in returned -19 [ 2115.024919][T31090] netlink: 'syz.5.6003': attribute type 29 has an invalid length. [ 2115.044901][T31090] netlink: 'syz.5.6003': attribute type 29 has an invalid length. [ 2115.568386][T31108] loop6: detected capacity change from 0 to 524287999 [ 2115.576642][T31108] buffer_io_error: 11 callbacks suppressed [ 2115.576654][T31108] Buffer I/O error on dev loop6, logical block 0, async page read [ 2115.591695][T31108] Buffer I/O error on dev loop6, logical block 0, async page read [ 2115.679522][T31108] Buffer I/O error on dev loop6, logical block 0, async page read [ 2115.689271][T31108] Buffer I/O error on dev loop6, logical block 0, async page read [ 2115.698090][T31108] Buffer I/O error on dev loop6, logical block 0, async page read [ 2115.706416][T31108] Buffer I/O error on dev loop6, logical block 0, async page read [ 2115.765739][T31114] netlink: 'syz.5.6008': attribute type 10 has an invalid length. [ 2115.780911][T31108] Buffer I/O error on dev loop6, logical block 0, async page read [ 2115.825157][T31108] Buffer I/O error on dev loop6, logical block 0, async page read [ 2115.846168][T31108] ldm_validate_partition_table(): Disk read failed. [ 2115.857959][T31108] Buffer I/O error on dev loop6, logical block 0, async page read [ 2115.871089][T31108] Buffer I/O error on dev loop6, logical block 0, async page read [ 2115.881329][T31108] Dev loop6: unable to read RDB block 0 [ 2115.970800][T31108] loop6: unable to read partition table [ 2115.987133][T31108] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 2116.022905][T31116] syzkaller0: entered promiscuous mode [ 2116.030720][T31116] syzkaller0: entered allmulticast mode [ 2116.039992][T31116] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6011'. [ 2116.114662][T31116] netem: invalid attributes len -18 [ 2116.125140][T31118] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6012'. [ 2116.159298][T31116] netem: change failed [ 2116.377224][T31118] 8021q: adding VLAN 0 to HW filter on device bond7 [ 2116.403201][T31121] macvlan2: entered promiscuous mode [ 2116.416962][T31121] macvlan2: entered allmulticast mode [ 2116.485213][T31121] bond7: (slave macvlan2): Opening slave failed [ 2116.909481][T28592] usb 7-1: USB disconnect, device number 101 [ 2117.263844][T31149] netlink: 16 bytes leftover after parsing attributes in process `syz.7.6024'. [ 2117.307019][T26662] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 2117.417209][T28592] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 2117.467073][T26662] usb 1-1: Using ep0 maxpacket: 32 [ 2117.478837][T26662] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2117.491614][T26662] usb 1-1: config 0 has no interfaces? [ 2117.498774][T26662] usb 1-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 2117.513515][T26662] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2117.596570][T26662] usb 1-1: config 0 descriptor?? [ 2117.628524][T28592] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2117.648220][T31157] netlink: 'syz.6.6026': attribute type 10 has an invalid length. [ 2117.656314][T28592] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 2117.668035][T28592] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2117.693743][T28592] usb 6-1: config 0 descriptor?? [ 2117.724248][T28592] pwc: Askey VC010 type 2 USB webcam detected. [ 2118.119649][T28592] pwc: recv_control_msg error -32 req 02 val 2b00 [ 2118.132564][T28592] pwc: recv_control_msg error -32 req 02 val 2700 [ 2118.147010][T28592] pwc: recv_control_msg error -32 req 02 val 2c00 [ 2118.162046][T28592] pwc: recv_control_msg error -32 req 04 val 1000 [ 2118.183789][T28592] pwc: recv_control_msg error -32 req 04 val 1300 [ 2118.211652][T28592] pwc: recv_control_msg error -32 req 04 val 1400 [ 2118.641787][T31142] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6020'. [ 2118.663702][T28592] pwc: recv_control_msg error -71 req 04 val 1500 [ 2118.674623][T28592] pwc: recv_control_msg error -71 req 02 val 2500 [ 2118.689563][T28592] pwc: recv_control_msg error -71 req 02 val 2400 [ 2118.698312][T28592] pwc: recv_control_msg error -71 req 02 val 2600 [ 2118.705602][T28592] pwc: recv_control_msg error -71 req 02 val 2900 [ 2118.713718][T28592] pwc: recv_control_msg error -71 req 02 val 2800 [ 2118.726043][T28592] pwc: recv_control_msg error -71 req 04 val 1100 [ 2118.749854][T28592] pwc: recv_control_msg error -71 req 04 val 1200 [ 2118.777350][T28592] pwc: Registered as video103. [ 2118.796231][T28592] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input70 [ 2118.861023][T28592] usb 6-1: USB disconnect, device number 16 [ 2118.992397][T31173] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6032'. [ 2119.072509][T31173] 8021q: adding VLAN 0 to HW filter on device bond8 [ 2119.102497][T31173] macvlan2: entered promiscuous mode [ 2119.108457][T31173] macvlan2: entered allmulticast mode [ 2119.114953][T31173] bond8: (slave macvlan2): Opening slave failed [ 2119.269839][T31181] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6019'. [ 2119.705856][T31194] loop7: detected capacity change from 0 to 16384 [ 2120.797494][T21922] usb 1-1: USB disconnect, device number 59 [ 2121.078992][T31207] netlink: 'syz.0.6040': attribute type 10 has an invalid length. [ 2121.983302][T31217] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6044'. [ 2122.077031][T26662] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 2122.104924][T31217] 8021q: adding VLAN 0 to HW filter on device bond9 [ 2122.125977][T31219] macvlan2: entered promiscuous mode [ 2122.131704][T31219] macvlan2: entered allmulticast mode [ 2122.140599][T31219] bond9: (slave macvlan2): Opening slave failed [ 2122.241766][T26662] usb 6-1: New USB device found, idVendor=0458, idProduct=0153, bcdDevice= 0.00 [ 2122.255191][T26662] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2122.279635][T26662] usb 6-1: config 0 descriptor?? [ 2122.523877][T31235] FAULT_INJECTION: forcing a failure. [ 2122.523877][T31235] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2122.557140][T31235] CPU: 0 UID: 0 PID: 31235 Comm: syz.0.6050 Not tainted syzkaller #0 PREEMPT(full) [ 2122.557177][T31235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2122.557191][T31235] Call Trace: [ 2122.557200][T31235] [ 2122.557211][T31235] dump_stack_lvl+0x189/0x250 [ 2122.557247][T31235] ? __pfx____ratelimit+0x10/0x10 [ 2122.557284][T31235] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2122.557316][T31235] ? __pfx__printk+0x10/0x10 [ 2122.557354][T31235] should_fail_ex+0x414/0x560 [ 2122.557396][T31235] _copy_to_user+0x31/0xb0 [ 2122.557428][T31235] simple_read_from_buffer+0xe1/0x170 [ 2122.557468][T31235] proc_fail_nth_read+0x1b3/0x220 [ 2122.557503][T31235] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2122.557535][T31235] ? rw_verify_area+0x2a6/0x4d0 [ 2122.557565][T31235] ? __lock_acquire+0xab9/0xd20 [ 2122.557586][T31235] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2122.557617][T31235] vfs_read+0x200/0xa30 [ 2122.557662][T31235] ? fdget_pos+0x247/0x320 [ 2122.557697][T31235] ? __pfx___mutex_lock+0x10/0x10 [ 2122.557731][T31235] ? __pfx_vfs_read+0x10/0x10 [ 2122.557763][T31235] ? __fget_files+0x2a/0x420 [ 2122.557790][T31235] ? __fget_files+0x3a0/0x420 [ 2122.557809][T31235] ? __fget_files+0x2a/0x420 [ 2122.557839][T31235] ksys_read+0x145/0x250 [ 2122.557873][T31235] ? __pfx_ksys_read+0x10/0x10 [ 2122.557905][T31235] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 2122.557941][T31235] ? lockdep_hardirqs_on+0x9c/0x150 [ 2122.557974][T31235] __do_fast_syscall_32+0xb6/0x2b0 [ 2122.557994][T31235] ? lockdep_hardirqs_on+0x9c/0x150 [ 2122.558028][T31235] do_fast_syscall_32+0x34/0x80 [ 2122.558048][T31235] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2122.558076][T31235] RIP: 0023:0xf7f52539 [ 2122.558096][T31235] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2122.558112][T31235] RSP: 002b:00000000f5446590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 2122.558131][T31235] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f5446620 [ 2122.558146][T31235] RDX: 000000000000000f RSI: 00000000f73e6ff4 RDI: 0000000000000000 [ 2122.558158][T31235] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 2122.558171][T31235] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2122.558184][T31235] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2122.558218][T31235] [ 2122.886683][T26662] kye 0003:0458:0153.0023: unknown main item tag 0x0 [ 2122.950358][T26662] kye 0003:0458:0153.0023: unknown main item tag 0x4 [ 2122.959531][T26662] kye 0003:0458:0153.0023: item fetching failed at offset 4/7 [ 2122.968080][T26662] kye 0003:0458:0153.0023: parse failed [ 2122.974151][T26662] kye 0003:0458:0153.0023: probe with driver kye failed with error -22 [ 2123.278032][T31254] netlink: 'syz.7.6053': attribute type 6 has an invalid length. [ 2124.001778][T31248] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 2124.023595][T26431] usb 6-1: USB disconnect, device number 17 [ 2124.077166][T31251] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 2124.496991][T26662] usb 7-1: new high-speed USB device number 102 using dummy_hcd [ 2124.626445][T31275] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6057'. [ 2124.678639][T31275] 8021q: adding VLAN 0 to HW filter on device bond7 [ 2124.734804][T31275] macvlan0: entered promiscuous mode [ 2124.755069][T31275] macvlan0: entered allmulticast mode [ 2124.786345][T31275] bond7: (slave macvlan0): Opening slave failed [ 2124.798668][T26662] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2124.811380][T26662] usb 7-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 2125.038122][T26662] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2125.047252][T26662] usb 7-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2125.217003][T26662] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 2125.257779][T26662] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2125.614018][T26662] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2125.662007][T26662] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2125.740692][T26662] usb 7-1: Product: syz [ 2125.762981][T26662] usb 7-1: Manufacturer: syz [ 2125.818204][T31269] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 2125.836469][T26662] cdc_wdm 7-1:1.0: skipping garbage [ 2125.847309][T26662] cdc_wdm 7-1:1.0: skipping garbage [ 2125.880158][T26662] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 2125.904413][T26662] cdc_wdm 7-1:1.0: Unknown control protocol [ 2125.920570][T31293] netlink: 156 bytes leftover after parsing attributes in process `syz.0.6063'. [ 2126.062296][ C1] wdm_int_callback: 4141 callbacks suppressed [ 2126.062322][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 2126.075035][ C1] wdm_int_callback: 4141 callbacks suppressed [ 2126.075057][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 2126.090090][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 2126.096760][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 2126.103546][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 2126.110190][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 2126.116964][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 2126.123571][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 2126.129851][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 2126.136474][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 2126.142830][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 2126.149457][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 2126.155789][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 2126.162408][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 2126.168894][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 2126.175504][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 2126.181776][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 2126.188375][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 2126.197578][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 2126.204183][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 2127.023950][T26431] usb 7-1: USB disconnect, device number 102 [ 2128.259637][T31327] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 2128.840111][T31333] FAULT_INJECTION: forcing a failure. [ 2128.840111][T31333] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2128.854860][T31333] CPU: 0 UID: 0 PID: 31333 Comm: syz.6.6072 Not tainted syzkaller #0 PREEMPT(full) [ 2128.854881][T31333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2128.854892][T31333] Call Trace: [ 2128.854898][T31333] [ 2128.854905][T31333] dump_stack_lvl+0x189/0x250 [ 2128.854933][T31333] ? __pfx____ratelimit+0x10/0x10 [ 2128.854956][T31333] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2128.854979][T31333] ? __pfx__printk+0x10/0x10 [ 2128.854996][T31333] ? __might_fault+0xb0/0x130 [ 2128.855027][T31333] should_fail_ex+0x414/0x560 [ 2128.855056][T31333] _copy_from_user+0x2d/0xb0 [ 2128.855078][T31333] get_compat_msghdr+0xad/0x4a0 [ 2128.855101][T31333] ? __pfx_get_compat_msghdr+0x10/0x10 [ 2128.855128][T31333] ___sys_sendmsg+0x193/0x2a0 [ 2128.855148][T31333] ? __pfx____sys_sendmsg+0x10/0x10 [ 2128.855167][T31333] ? __lock_acquire+0xab9/0xd20 [ 2128.855207][T31333] ? __fget_files+0x2a/0x420 [ 2128.855222][T31333] ? __fget_files+0x3a0/0x420 [ 2128.855245][T31333] __sys_sendmmsg+0x28e/0x430 [ 2128.855267][T31333] ? __pfx___sys_sendmmsg+0x10/0x10 [ 2128.855283][T31333] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 2128.855339][T31333] ? ksys_write+0x22a/0x250 [ 2128.855360][T31333] ? exc_page_fault+0x82/0x100 [ 2128.855383][T31333] ? __pfx_ksys_write+0x10/0x10 [ 2128.855410][T31333] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 2128.855436][T31333] __do_fast_syscall_32+0xb6/0x2b0 [ 2128.855450][T31333] ? lockdep_hardirqs_on+0x9c/0x150 [ 2128.855476][T31333] do_fast_syscall_32+0x34/0x80 [ 2128.855490][T31333] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2128.855509][T31333] RIP: 0023:0xf70ad539 [ 2128.855522][T31333] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2128.855536][T31333] RSP: 002b:00000000f549d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000159 [ 2128.855553][T31333] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080008040 [ 2128.855564][T31333] RDX: 0000000000000001 RSI: 0000000000000801 RDI: 0000000000000000 [ 2128.855574][T31333] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2128.855582][T31333] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2128.855592][T31333] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2128.855614][T31333] [ 2129.081449][ C0] vkms_vblank_simulate: vblank timer overrun [ 2129.919097][T31343] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6076'. [ 2130.032411][T31347] FAULT_INJECTION: forcing a failure. [ 2130.032411][T31347] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2130.056359][T31343] 8021q: adding VLAN 0 to HW filter on device bond6 [ 2130.103347][T31347] CPU: 1 UID: 0 PID: 31347 Comm: syz.0.6077 Not tainted syzkaller #0 PREEMPT(full) [ 2130.103366][T31347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2130.103376][T31347] Call Trace: [ 2130.103382][T31347] [ 2130.103389][T31347] dump_stack_lvl+0x189/0x250 [ 2130.103414][T31347] ? __pfx____ratelimit+0x10/0x10 [ 2130.103435][T31347] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2130.103455][T31347] ? __pfx__printk+0x10/0x10 [ 2130.103470][T31347] ? __might_fault+0xb0/0x130 [ 2130.103499][T31347] should_fail_ex+0x414/0x560 [ 2130.103525][T31347] _copy_from_user+0x2d/0xb0 [ 2130.103546][T31347] get_compat_msghdr+0xad/0x4a0 [ 2130.103566][T31347] ? __pfx_get_compat_msghdr+0x10/0x10 [ 2130.103591][T31347] ___sys_sendmsg+0x193/0x2a0 [ 2130.103609][T31347] ? __pfx____sys_sendmsg+0x10/0x10 [ 2130.103657][T31347] ? __fget_files+0x2a/0x420 [ 2130.103690][T31347] ? __fget_files+0x3a0/0x420 [ 2130.103712][T31347] __sys_sendmsg+0x164/0x220 [ 2130.103731][T31347] ? __pfx___sys_sendmsg+0x10/0x10 [ 2130.103754][T31347] ? __pfx_ksys_write+0x10/0x10 [ 2130.103779][T31347] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 2130.103805][T31347] ? lockdep_hardirqs_on+0x9c/0x150 [ 2130.103830][T31347] __do_fast_syscall_32+0xb6/0x2b0 [ 2130.103845][T31347] ? lockdep_hardirqs_on+0x9c/0x150 [ 2130.103877][T31347] do_fast_syscall_32+0x34/0x80 [ 2130.103898][T31347] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2130.103923][T31347] RIP: 0023:0xf7f52539 [ 2130.103937][T31347] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2130.103950][T31347] RSP: 002b:00000000f544655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 2130.103972][T31347] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000280 [ 2130.103983][T31347] RDX: 0000000024008000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2130.103993][T31347] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2130.104002][T31347] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2130.104011][T31347] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2130.104038][T31347] [ 2130.381870][T31345] macvlan2: entered promiscuous mode [ 2130.390399][T31345] macvlan2: entered allmulticast mode [ 2130.397363][T31345] bond6: (slave macvlan2): Opening slave failed [ 2130.774920][T31353] netlink: 40 bytes leftover after parsing attributes in process `syz.7.6080'. [ 2130.796828][T31353] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2130.805126][T31353] IPv6: NLM_F_CREATE should be set when creating new route [ 2130.812499][T31353] IPv6: NLM_F_CREATE should be set when creating new route [ 2130.919542][ T30] audit: type=1326 audit(1763702937.506:1105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31357 comm="syz.0.6082" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f52539 code=0x7ffc0000 [ 2130.947359][ T30] audit: type=1326 audit(1763702937.506:1106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31357 comm="syz.0.6082" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f52539 code=0x7ffc0000 [ 2131.019879][T31368] ip6tnl1: entered allmulticast mode [ 2131.112507][T31372] tipc: Enabling of bearer rejected, failed to enable media [ 2131.147073][T26662] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 2131.302516][T26662] usb 6-1: New USB device found, idVendor=2c42, idProduct=1602, bcdDevice=da.64 [ 2131.333386][T26662] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2131.347159][T26662] usb 6-1: Product: syz [ 2131.355246][T26662] usb 6-1: Manufacturer: syz [ 2131.364548][T26662] usb 6-1: SerialNumber: syz [ 2131.468741][T26662] usb 6-1: config 0 descriptor?? [ 2131.475828][T26662] hub 6-1:0.0: bad descriptor, ignoring hub [ 2131.482297][T26662] hub 6-1:0.0: probe with driver hub failed with error -5 [ 2131.490557][T26662] f81232 6-1:0.0: f81534a converter detected [ 2132.078390][T26662] f81534a ttyUSB0: f81232_set_register failed status: -71 [ 2132.102963][T26662] f81534a ttyUSB0: probe with driver f81534a failed with error -5 [ 2132.157743][T26662] usb 6-1: USB disconnect, device number 18 [ 2132.194629][T26662] f81232 6-1:0.0: device disconnected [ 2132.299830][T31396] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6094'. [ 2132.353291][T31396] 8021q: adding VLAN 0 to HW filter on device bond10 [ 2132.391690][T31396] macvlan2: entered promiscuous mode [ 2132.397730][T31396] macvlan2: entered allmulticast mode [ 2132.408737][T31396] bond10: (slave macvlan2): Opening slave failed [ 2132.677564][T28592] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 2132.910344][T28592] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2132.931295][T28592] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2132.949724][T28592] usb 1-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 2132.960496][T28592] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2132.975680][T28592] usb 1-1: config 0 descriptor?? [ 2133.250301][T28592] hid-led 0003:27B8:01ED.0024: probe with driver hid-led failed with error -71 [ 2133.274819][T28592] usb 1-1: USB disconnect, device number 60 [ 2133.966949][ T979] usb 7-1: new high-speed USB device number 103 using dummy_hcd [ 2134.167023][ T979] usb 7-1: device descriptor read/64, error -71 [ 2134.408133][ T979] usb 7-1: new high-speed USB device number 104 using dummy_hcd [ 2134.559612][ T979] usb 7-1: device descriptor read/64, error -71 [ 2134.670835][ T979] usb usb7-port1: attempt power cycle [ 2134.677038][T28592] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 2134.837074][T28592] usb 6-1: Using ep0 maxpacket: 16 [ 2134.852480][T28592] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 2134.864398][T28592] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 48, changing to 7 [ 2134.875827][T28592] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 8240, setting to 1024 [ 2134.897255][T28592] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 2134.906384][T28592] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2134.916211][T28592] usb 6-1: Product: syz [ 2134.920588][T28592] usb 6-1: Manufacturer: syz [ 2134.925323][T28592] usb 6-1: SerialNumber: syz [ 2134.934770][T28592] usb 6-1: config 0 descriptor?? [ 2135.017769][T28592] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 2135.028779][T28592] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 2135.066980][ T979] usb 7-1: new high-speed USB device number 105 using dummy_hcd [ 2135.087721][ T979] usb 7-1: device descriptor read/8, error -71 [ 2135.326952][ T979] usb 7-1: new high-speed USB device number 106 using dummy_hcd [ 2135.357692][ T979] usb 7-1: device descriptor read/8, error -71 [ 2135.469492][ T979] usb usb7-port1: unable to enumerate USB device [ 2135.621688][T28592] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 2135.628682][T28592] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 2136.241399][T28592] em28xx 6-1:0.0: Unknown AC97 audio processor detected! [ 2136.662173][T28592] em28xx 6-1:0.0: couldn't setup AC97 register 2 [ 2136.672391][T28592] em28xx 6-1:0.0: couldn't setup AC97 register 4 [ 2136.679909][T28592] em28xx 6-1:0.0: couldn't setup AC97 register 6 [ 2136.687594][T28592] em28xx 6-1:0.0: couldn't setup AC97 register 54 [ 2136.709074][T28592] em28xx 6-1:0.0: couldn't setup AC97 register 56 [ 2136.744585][T28592] usb 6-1: USB disconnect, device number 19 [ 2137.116231][T31460] fuse: Unknown parameter 'fD' [ 2137.131375][T31460] netlink: 52 bytes leftover after parsing attributes in process `syz.8.6112'. [ 2139.237178][T26662] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 2139.416949][T26662] usb 6-1: Using ep0 maxpacket: 8 [ 2139.455213][T26662] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 2139.466760][T26662] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2139.865121][T26662] usb 6-1: Product: syz [ 2139.869751][T26662] usb 6-1: Manufacturer: syz [ 2139.874381][T26662] usb 6-1: SerialNumber: syz [ 2139.882397][T26662] usb 6-1: config 0 descriptor?? [ 2140.029092][T31487] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 2140.185544][T26662] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 2140.575777][T31496] netlink: 'syz.6.6121': attribute type 10 has an invalid length. [ 2141.290947][T31506] FAULT_INJECTION: forcing a failure. [ 2141.290947][T31506] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2141.311447][T31506] CPU: 0 UID: 0 PID: 31506 Comm: syz.8.6126 Not tainted syzkaller #0 PREEMPT(full) [ 2141.311475][T31506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2141.311489][T31506] Call Trace: [ 2141.311497][T31506] [ 2141.311507][T31506] dump_stack_lvl+0x189/0x250 [ 2141.311541][T31506] ? __pfx____ratelimit+0x10/0x10 [ 2141.311570][T31506] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2141.311599][T31506] ? __pfx__printk+0x10/0x10 [ 2141.311620][T31506] ? __might_fault+0xb0/0x130 [ 2141.311661][T31506] should_fail_ex+0x414/0x560 [ 2141.311698][T31506] _copy_from_user+0x2d/0xb0 [ 2141.311725][T31506] get_compat_msghdr+0xad/0x4a0 [ 2141.311755][T31506] ? __pfx_get_compat_msghdr+0x10/0x10 [ 2141.311791][T31506] ___sys_sendmsg+0x193/0x2a0 [ 2141.311817][T31506] ? __pfx____sys_sendmsg+0x10/0x10 [ 2141.311841][T31506] ? __lock_acquire+0xab9/0xd20 [ 2141.311897][T31506] ? __fget_files+0x2a/0x420 [ 2141.311917][T31506] ? __fget_files+0x3a0/0x420 [ 2141.311940][T31506] __sys_sendmmsg+0x28e/0x430 [ 2141.311962][T31506] ? __pfx___sys_sendmmsg+0x10/0x10 [ 2141.311978][T31506] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 2141.312037][T31506] ? ksys_write+0x22a/0x250 [ 2141.312062][T31506] ? __pfx_ksys_write+0x10/0x10 [ 2141.312090][T31506] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 2141.312109][T31506] __do_fast_syscall_32+0xb6/0x2b0 [ 2141.312128][T31506] do_fast_syscall_32+0x34/0x80 [ 2141.312142][T31506] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2141.312161][T31506] RIP: 0023:0xf7f55539 [ 2141.312177][T31506] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2141.312193][T31506] RSP: 002b:00000000f540455c EFLAGS: 00000206 ORIG_RAX: 0000000000000159 [ 2141.312210][T31506] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 0000000080003cc0 [ 2141.312238][T31506] RDX: 0000000000000172 RSI: 0000000000000000 RDI: 0000000000000000 [ 2141.312248][T31506] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2141.312258][T31506] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2141.312268][T31506] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2141.312291][T31506] [ 2142.000505][T26662] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 2142.026199][T26662] usb 6-1: USB disconnect, device number 20 [ 2142.965712][T31524] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6132'. [ 2143.085225][T31524] 8021q: adding VLAN 0 to HW filter on device bond11 [ 2143.219975][T31524] macvlan2: entered promiscuous mode [ 2143.235661][T31524] macvlan2: entered allmulticast mode [ 2143.250098][T31524] bond11: (slave macvlan2): Opening slave failed [ 2143.426941][T10433] usb 7-1: new full-speed USB device number 107 using dummy_hcd [ 2143.655443][T10433] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 2143.692014][T10433] usb 7-1: config 0 has no interface number 0 [ 2143.710755][T10433] usb 7-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 2143.737113][T10433] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2143.752902][T31535] netlink: 'syz.5.6135': attribute type 1 has an invalid length. [ 2143.789393][T31535] netlink: 'syz.5.6135': attribute type 1 has an invalid length. [ 2143.823767][T10433] usb 7-1: config 0 descriptor?? [ 2143.870755][T10433] usb 7-1: selecting invalid altsetting 1 [ 2143.910525][T10433] dvb_ttusb_budget: ttusb_init_controller: error [ 2143.942503][T10433] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 2144.267044][T10433] DVB: Unable to find symbol cx22700_attach() [ 2144.458271][T10433] DVB: Unable to find symbol tda10046_attach() [ 2144.464560][T10433] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 2144.537252][T10433] usb 7-1: USB disconnect, device number 107 [ 2144.740022][T31551] netlink: 'syz.5.6138': attribute type 10 has an invalid length. [ 2145.649905][T31567] input: syz0 as /devices/virtual/input/input71 [ 2145.670524][T31567] netdevsim netdevsim8 netdevsim0: entered promiscuous mode [ 2145.726287][T31567] bond0: (slave netdevsim0): Releasing backup interface [ 2145.752001][T31567] netdevsim netdevsim8 netdevsim0: left allmulticast mode [ 2145.772969][T31567] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 2146.319139][T31580] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6150'. [ 2146.496010][T31587] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6153'. [ 2146.515738][T31588] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 2146.593812][T31589] input: syz0 as /devices/virtual/input/input72 [ 2147.193125][T31592] FAULT_INJECTION: forcing a failure. [ 2147.193125][T31592] name failslab, interval 1, probability 0, space 0, times 0 [ 2147.277380][T31592] CPU: 1 UID: 0 PID: 31592 Comm: syz.5.6155 Not tainted syzkaller #0 PREEMPT(full) [ 2147.277406][T31592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2147.277418][T31592] Call Trace: [ 2147.277426][T31592] [ 2147.277435][T31592] dump_stack_lvl+0x189/0x250 [ 2147.277467][T31592] ? __pfx____ratelimit+0x10/0x10 [ 2147.277497][T31592] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2147.277526][T31592] ? __pfx__printk+0x10/0x10 [ 2147.277553][T31592] ? __pfx___might_resched+0x10/0x10 [ 2147.277575][T31592] ? fs_reclaim_acquire+0x7d/0x100 [ 2147.277605][T31592] should_fail_ex+0x414/0x560 [ 2147.277635][T31592] should_failslab+0xa8/0x100 [ 2147.277653][T31592] __kmalloc_noprof+0xcb/0x7f0 [ 2147.277676][T31592] ? ima_alloc_init_template+0x172/0x6f0 [ 2147.277700][T31592] ima_alloc_init_template+0x172/0x6f0 [ 2147.277727][T31592] ima_store_measurement+0x1b7/0x640 [ 2147.277753][T31592] ? __pfx_ima_store_measurement+0x10/0x10 [ 2147.277772][T31592] ? ima_d_path+0x1f1/0x250 [ 2147.277814][T31592] process_measurement+0x11eb/0x1a40 [ 2147.277846][T31592] ? __pfx_process_measurement+0x10/0x10 [ 2147.277912][T31592] ima_file_mmap+0x1a2/0x1f0 [ 2147.277930][T31592] ? __pfx_ima_file_mmap+0x10/0x10 [ 2147.277945][T31592] ? __up_read+0x280/0x680 [ 2147.277969][T31592] ? common_file_perm+0x1b5/0x230 [ 2147.277997][T31592] security_mmap_file+0x7a4/0xa60 [ 2147.278019][T31592] __se_sys_remap_file_pages+0x2b2/0x820 [ 2147.278046][T31592] ? __fget_files+0x3a0/0x420 [ 2147.278067][T31592] ? __pfx___se_sys_remap_file_pages+0x10/0x10 [ 2147.278092][T31592] ? ksys_write+0x22a/0x250 [ 2147.278117][T31592] ? __pfx_ksys_write+0x10/0x10 [ 2147.278142][T31592] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 2147.278169][T31592] ? lockdep_hardirqs_on+0x9c/0x150 [ 2147.278190][T31592] ? __ia32_sys_remap_file_pages+0x20/0xc0 [ 2147.278215][T31592] __do_fast_syscall_32+0xb6/0x2b0 [ 2147.278231][T31592] ? lockdep_hardirqs_on+0x9c/0x150 [ 2147.278267][T31592] do_fast_syscall_32+0x34/0x80 [ 2147.278282][T31592] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2147.278301][T31592] RIP: 0023:0xf7fa3539 [ 2147.278315][T31592] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2147.278330][T31592] RSP: 002b:00000000f549655c EFLAGS: 00000206 ORIG_RAX: 0000000000000101 [ 2147.278347][T31592] RAX: ffffffffffffffda RBX: 0000000080ba1000 RCX: 0000000000001000 [ 2147.278358][T31592] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 00000000001c0000 [ 2147.278368][T31592] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2147.278378][T31592] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2147.278387][T31592] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2147.278412][T31592] [ 2147.278740][ T30] audit: type=1804 audit(1763702953.866:1107): pid=31592 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=add_template_measure cause=ENOMEM comm="syz.5.6155" name="dev/zero" dev="tmpfs" ino=380 res=0 errno=0 [ 2148.135719][T31608] netlink: 'syz.5.6156': attribute type 10 has an invalid length. [ 2148.528568][T31611] FAULT_INJECTION: forcing a failure. [ 2148.528568][T31611] name failslab, interval 1, probability 0, space 0, times 0 [ 2148.541531][T31611] CPU: 0 UID: 0 PID: 31611 Comm: syz.0.6158 Not tainted syzkaller #0 PREEMPT(full) [ 2148.541557][T31611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2148.541571][T31611] Call Trace: [ 2148.541580][T31611] [ 2148.541590][T31611] dump_stack_lvl+0x189/0x250 [ 2148.541623][T31611] ? __pfx____ratelimit+0x10/0x10 [ 2148.541651][T31611] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2148.541679][T31611] ? __pfx__printk+0x10/0x10 [ 2148.541705][T31611] ? __pfx___might_resched+0x10/0x10 [ 2148.541727][T31611] ? fs_reclaim_acquire+0x7d/0x100 [ 2148.541765][T31611] should_fail_ex+0x414/0x560 [ 2148.541802][T31611] should_failslab+0xa8/0x100 [ 2148.541825][T31611] __kmalloc_cache_noprof+0x6f/0x6f0 [ 2148.541860][T31611] ? snd_timer_instance_new+0x51/0x220 [ 2148.541894][T31611] snd_timer_instance_new+0x51/0x220 [ 2148.541923][T31611] snd_seq_timer_open+0x233/0x640 [ 2148.541956][T31611] ? __pfx_snd_seq_timer_open+0x10/0x10 [ 2148.541983][T31611] ? lockdep_hardirqs_on+0x9c/0x150 [ 2148.542015][T31611] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 2148.542043][T31611] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 2148.542073][T31611] ? snd_seq_timer_defaults+0x336/0x5b0 [ 2148.542099][T31611] snd_seq_queue_alloc+0x3dd/0x790 [ 2148.542140][T31611] snd_seq_ioctl_create_queue+0x7f/0x3d0 [ 2148.542171][T31611] snd_seq_oss_open+0x5e0/0xea0 [ 2148.542208][T31611] ? __pfx_snd_seq_oss_open+0x10/0x10 [ 2148.542244][T31611] ? __lock_acquire+0xab9/0xd20 [ 2148.542290][T31611] ? trace_contention_end+0x39/0x120 [ 2148.542317][T31611] ? __mutex_lock+0x335/0x1350 [ 2148.542368][T31611] ? __pfx___mutex_lock+0x10/0x10 [ 2148.542404][T31611] ? __pfx_snd_seq_oss_event_input+0x10/0x10 [ 2148.542440][T31611] ? __pfx_free_devinfo+0x10/0x10 [ 2148.542465][T31611] ? do_raw_spin_unlock+0x122/0x240 [ 2148.542498][T31611] ? soundcore_open+0x2da/0x490 [ 2148.542530][T31611] odev_open+0x67/0xd0 [ 2148.542555][T31611] chrdev_open+0x4cc/0x5e0 [ 2148.542579][T31611] ? __pfx_chrdev_open+0x10/0x10 [ 2148.542602][T31611] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 2148.542630][T31611] ? __pfx_chrdev_open+0x10/0x10 [ 2148.542649][T31611] do_dentry_open+0x953/0x13f0 [ 2148.542687][T31611] vfs_open+0x3b/0x340 [ 2148.542707][T31611] ? path_openat+0x2ecd/0x3830 [ 2148.542736][T31611] path_openat+0x2ee5/0x3830 [ 2148.542797][T31611] ? __pfx_path_openat+0x10/0x10 [ 2148.542844][T31611] do_filp_open+0x1fa/0x410 [ 2148.542869][T31611] ? __lock_acquire+0xab9/0xd20 [ 2148.542892][T31611] ? __pfx_do_filp_open+0x10/0x10 [ 2148.542942][T31611] ? _raw_spin_unlock+0x28/0x50 [ 2148.542967][T31611] ? alloc_fd+0x64c/0x6c0 [ 2148.543011][T31611] do_sys_openat2+0x121/0x1c0 [ 2148.543038][T31611] ? __pfx_do_sys_openat2+0x10/0x10 [ 2148.543063][T31611] ? ksys_write+0x22a/0x250 [ 2148.543090][T31611] ? exc_page_fault+0x82/0x100 [ 2148.543120][T31611] ? __pfx_ksys_write+0x10/0x10 [ 2148.543153][T31611] __ia32_compat_sys_openat+0x131/0x160 [ 2148.543185][T31611] __do_fast_syscall_32+0xb6/0x2b0 [ 2148.543205][T31611] ? lockdep_hardirqs_on+0x9c/0x150 [ 2148.543240][T31611] do_fast_syscall_32+0x34/0x80 [ 2148.543259][T31611] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2148.543284][T31611] RIP: 0023:0xf7f52539 [ 2148.543302][T31611] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2148.543320][T31611] RSP: 002b:00000000f542555c EFLAGS: 00000206 ORIG_RAX: 0000000000000127 [ 2148.543342][T31611] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000040 [ 2148.543356][T31611] RDX: 000000000000e042 RSI: 0000000000000000 RDI: 0000000000000000 [ 2148.543369][T31611] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2148.543380][T31611] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2148.543393][T31611] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2148.543444][T31611] [ 2149.378858][T21952] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 2149.402575][T31625] tipc: Started in network mode [ 2149.414641][T31625] tipc: Node identity dacffac5e466, cluster identity 4711 [ 2149.452769][T31625] tipc: Enabled bearer , priority 0 [ 2149.502514][T31627] syzkaller0: entered promiscuous mode [ 2149.511307][T31629] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6162'. [ 2149.545629][T31627] syzkaller0: entered allmulticast mode [ 2149.619896][T31625] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 2149.706922][T21952] usb 6-1: Using ep0 maxpacket: 32 [ 2149.716529][T21952] usb 6-1: config 0 has an invalid interface number: 188 but max is 0 [ 2149.725868][T21952] usb 6-1: config 0 has no interface number 0 [ 2149.733899][T21952] usb 6-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 2149.787391][T21952] usb 6-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 2149.812346][T21952] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2149.846207][T21952] usb 6-1: Product: syz [ 2149.868869][T21952] usb 6-1: Manufacturer: syz [ 2149.888616][T21952] usb 6-1: SerialNumber: syz [ 2149.944253][T31631] sch_tbf: burst 6 is lower than device syzkaller0 mtu (1514) ! [ 2149.959490][T31633] tipc: Resetting bearer [ 2150.684632][T31620] tipc: Resetting bearer [ 2150.745989][T21952] usb 6-1: config 0 descriptor?? [ 2150.752147][T31615] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 2150.898219][T31620] tipc: Disabling bearer [ 2150.964942][T31615] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 2150.974017][T26662] tipc: Node number set to 1051327173 [ 2151.126547][T31642] netdevsim netdevsim6 : renamed from netdevsim0 (while UP) [ 2151.158787][T31641] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6168'. [ 2151.295718][T31642] kvm: kvm [31634]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0xfff0000000000023 [ 2151.420357][T31641] 8021q: adding VLAN 0 to HW filter on device bond12 [ 2151.517143][T31646] macvlan2: entered promiscuous mode [ 2151.523032][T31646] macvlan2: entered allmulticast mode [ 2151.534217][T31646] bond12: (slave macvlan2): Opening slave failed [ 2154.104451][T21952] asix 6-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 2154.116610][T21952] asix 6-1:0.188 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 2154.195656][T21952] asix 6-1:0.188: probe with driver asix failed with error -71 [ 2154.328020][T21952] usb 6-1: USB disconnect, device number 21 [ 2155.626271][T31683] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6180'. [ 2155.907612][T21952] usb 7-1: new high-speed USB device number 108 using dummy_hcd [ 2156.067392][T21952] usb 7-1: Using ep0 maxpacket: 8 [ 2156.078542][T21952] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 2156.113037][T21952] usb 7-1: config 179 has no interface number 0 [ 2156.124545][T21952] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 2156.136209][T21952] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 2156.148008][T21952] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2156.159856][T21952] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 2156.186790][T21952] usb 7-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 2156.220166][T21952] usb 7-1: config 179 interface 65 has no altsetting 0 [ 2156.234626][T21952] usb 7-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 2156.244221][T21952] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2156.309018][T21952] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:179.65/input/input73 [ 2156.502680][T31682] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2156.543038][T31682] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2156.566345][T21952] usb 7-1: USB disconnect, device number 108 [ 2157.038346][T31712] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6188'. [ 2157.276263][T31722] FAULT_INJECTION: forcing a failure. [ 2157.276263][T31722] name failslab, interval 1, probability 0, space 0, times 0 [ 2157.318116][T31722] CPU: 0 UID: 0 PID: 31722 Comm: syz.5.6192 Not tainted syzkaller #0 PREEMPT(full) [ 2157.318146][T31722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2157.318160][T31722] Call Trace: [ 2157.318169][T31722] [ 2157.318178][T31722] dump_stack_lvl+0x189/0x250 [ 2157.318214][T31722] ? __pfx____ratelimit+0x10/0x10 [ 2157.318244][T31722] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2157.318273][T31722] ? __pfx__printk+0x10/0x10 [ 2157.318296][T31722] ? __pfx___might_resched+0x10/0x10 [ 2157.318320][T31722] ? fs_reclaim_acquire+0x7d/0x100 [ 2157.318359][T31722] should_fail_ex+0x414/0x560 [ 2157.318398][T31722] should_failslab+0xa8/0x100 [ 2157.318422][T31722] __kmalloc_cache_noprof+0x6f/0x6f0 [ 2157.318454][T31722] ? rtnl_newlink+0xfb/0x1c80 [ 2157.318487][T31722] ? kasan_save_track+0x4f/0x80 [ 2157.318523][T31722] rtnl_newlink+0xfb/0x1c80 [ 2157.318554][T31722] ? netlink_deliver_tap+0x19c/0x1b0 [ 2157.318575][T31722] ? netlink_unicast+0x7fa/0x9e0 [ 2157.318604][T31722] ? netlink_sendmsg+0x805/0xb30 [ 2157.318624][T31722] ? __sock_sendmsg+0x21c/0x270 [ 2157.318652][T31722] ? ____sys_sendmsg+0x505/0x830 [ 2157.318707][T31722] ? ___sys_sendmsg+0x21f/0x2a0 [ 2157.318749][T31722] ? __sys_sendmsg+0x164/0x220 [ 2157.318773][T31722] ? __do_fast_syscall_32+0xb6/0x2b0 [ 2157.318792][T31722] ? do_fast_syscall_32+0x34/0x80 [ 2157.318809][T31722] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2157.318842][T31722] ? __pfx_rtnl_newlink+0x10/0x10 [ 2157.318901][T31722] ? kasan_quarantine_put+0xdd/0x220 [ 2157.318936][T31722] ? lockdep_hardirqs_on+0x9c/0x150 [ 2157.318973][T31722] ? nlmon_xmit+0xb0/0x100 [ 2157.318999][T31722] ? kmem_cache_free+0x19b/0x690 [ 2157.319058][T31722] ? __local_bh_enable_ip+0x12d/0x1c0 [ 2157.319083][T31722] ? lockdep_hardirqs_on+0x9c/0x150 [ 2157.319118][T31722] ? __local_bh_enable_ip+0x12d/0x1c0 [ 2157.319142][T31722] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 2157.319171][T31722] ? __dev_queue_xmit+0x27b/0x3b50 [ 2157.319199][T31722] ? __dev_queue_xmit+0x27b/0x3b50 [ 2157.319224][T31722] ? __dev_queue_xmit+0x27b/0x3b50 [ 2157.319251][T31722] ? __dev_queue_xmit+0x1d79/0x3b50 [ 2157.319276][T31722] ? kasan_save_track+0x3e/0x80 [ 2157.319303][T31722] ? __kasan_slab_alloc+0x6c/0x80 [ 2157.319339][T31722] ? __lock_acquire+0xab9/0xd20 [ 2157.319386][T31722] ? __pfx_rtnl_newlink+0x10/0x10 [ 2157.319420][T31722] rtnetlink_rcv_msg+0x7cf/0xb70 [ 2157.319458][T31722] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 2157.319492][T31722] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 2157.319522][T31722] ? ref_tracker_free+0x63a/0x7d0 [ 2157.319546][T31722] ? __asan_memcpy+0x40/0x70 [ 2157.319574][T31722] ? __pfx_ref_tracker_free+0x10/0x10 [ 2157.319594][T31722] ? __skb_clone+0x63/0x7a0 [ 2157.319629][T31722] netlink_rcv_skb+0x208/0x470 [ 2157.319665][T31722] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 2157.319699][T31722] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2157.319732][T31722] ? netlink_deliver_tap+0x2e/0x1b0 [ 2157.319763][T31722] netlink_unicast+0x82f/0x9e0 [ 2157.319805][T31722] ? __pfx_netlink_unicast+0x10/0x10 [ 2157.319838][T31722] ? netlink_sendmsg+0x642/0xb30 [ 2157.319859][T31722] ? skb_put+0x11b/0x210 [ 2157.319883][T31722] netlink_sendmsg+0x805/0xb30 [ 2157.319920][T31722] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2157.319946][T31722] ? __import_iovec+0x5d4/0x7f0 [ 2157.319971][T31722] ? aa_sock_msg_perm+0xf1/0x1d0 [ 2157.320004][T31722] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2157.320024][T31722] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2157.320065][T31722] __sock_sendmsg+0x21c/0x270 [ 2157.320098][T31722] ____sys_sendmsg+0x505/0x830 [ 2157.320127][T31722] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2157.320168][T31722] ___sys_sendmsg+0x21f/0x2a0 [ 2157.320197][T31722] ? __pfx____sys_sendmsg+0x10/0x10 [ 2157.320261][T31722] ? __fget_files+0x2a/0x420 [ 2157.320283][T31722] ? __fget_files+0x3a0/0x420 [ 2157.320316][T31722] __sys_sendmsg+0x164/0x220 [ 2157.320344][T31722] ? __pfx___sys_sendmsg+0x10/0x10 [ 2157.320379][T31722] ? __pfx_ksys_write+0x10/0x10 [ 2157.320414][T31722] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 2157.320451][T31722] ? lockdep_hardirqs_on+0x9c/0x150 [ 2157.320486][T31722] __do_fast_syscall_32+0xb6/0x2b0 [ 2157.320509][T31722] ? lockdep_hardirqs_on+0x9c/0x150 [ 2157.320546][T31722] do_fast_syscall_32+0x34/0x80 [ 2157.320566][T31722] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2157.320593][T31722] RIP: 0023:0xf7fa3539 [ 2157.320613][T31722] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2157.320633][T31722] RSP: 002b:00000000f549655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 2157.320655][T31722] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0 [ 2157.320671][T31722] RDX: 0000000024008008 RSI: 0000000000000000 RDI: 0000000000000000 [ 2157.320685][T31722] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2157.320698][T31722] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2157.320711][T31722] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2157.320744][T31722] [ 2159.567323][T31744] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 2159.793062][ T30] audit: type=1326 audit(1763702966.376:1108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31753 comm="syz.5.6203" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa3539 code=0x7ffc0000 [ 2159.933863][ T30] audit: type=1326 audit(1763702966.376:1109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31753 comm="syz.5.6203" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa3539 code=0x7ffc0000 [ 2160.029597][ T30] audit: type=1326 audit(1763702966.416:1110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31753 comm="syz.5.6203" exe="/root/syz-executor" sig=0 arch=40000003 syscall=224 compat=1 ip=0xf7fa3539 code=0x7ffc0000 [ 2160.061501][ T30] audit: type=1326 audit(1763702966.416:1111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31753 comm="syz.5.6203" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa3539 code=0x7ffc0000 [ 2160.092327][ T30] audit: type=1326 audit(1763702966.426:1112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31753 comm="syz.5.6203" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa3539 code=0x7ffc0000 [ 2160.257033][ T30] audit: type=1326 audit(1763702966.426:1113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31753 comm="syz.5.6203" exe="/root/syz-executor" sig=0 arch=40000003 syscall=14 compat=1 ip=0xf7fa3539 code=0x7ffc0000 [ 2160.326902][T31759] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6204'. [ 2160.335943][T31759] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6204'. [ 2160.495479][ T30] audit: type=1326 audit(1763702966.426:1114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31753 comm="syz.5.6203" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa3539 code=0x7ffc0000 [ 2160.633746][T31764] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 2160.727003][ T30] audit: type=1326 audit(1763702966.426:1115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31753 comm="syz.5.6203" exe="/root/syz-executor" sig=0 arch=40000003 syscall=5 compat=1 ip=0xf7fa3539 code=0x7ffc0000 [ 2160.792498][T31776] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 2160.837115][ T30] audit: type=1326 audit(1763702966.426:1116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31753 comm="syz.5.6203" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa3539 code=0x7ffc0000 [ 2160.932465][ T30] audit: type=1326 audit(1763702966.426:1117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31753 comm="syz.5.6203" exe="/root/syz-executor" sig=0 arch=40000003 syscall=425 compat=1 ip=0xf7fa3539 code=0x7ffc0000 [ 2161.732213][T31782] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 2163.447434][ T979] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 2163.516991][T31730] usb 7-1: new high-speed USB device number 109 using dummy_hcd [ 2163.642091][ T979] usb 6-1: New USB device found, idVendor=093a, idProduct=2476, bcdDevice= d.5b [ 2163.656407][ T979] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2163.664666][T31730] usb 7-1: device descriptor read/64, error -71 [ 2163.705645][T31818] netlink: 'syz.0.6218': attribute type 10 has an invalid length. [ 2163.726638][T31819] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6219'. [ 2163.739427][ T979] usb 6-1: Product: syz [ 2163.744912][ T979] usb 6-1: Manufacturer: syz [ 2163.750271][ T979] usb 6-1: SerialNumber: syz [ 2163.947002][T31730] usb 7-1: new high-speed USB device number 110 using dummy_hcd [ 2164.104078][T31730] usb 7-1: device descriptor read/64, error -71 [ 2164.231962][T31730] usb usb7-port1: attempt power cycle [ 2164.589026][T31730] usb 7-1: new high-speed USB device number 111 using dummy_hcd [ 2164.645634][T31730] usb 7-1: device descriptor read/8, error -71 [ 2164.917007][T31730] usb 7-1: new high-speed USB device number 112 using dummy_hcd [ 2164.995826][T31730] usb 7-1: device descriptor read/8, error -71 [ 2165.123251][T31730] usb usb7-port1: unable to enumerate USB device [ 2165.617478][T31835] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 2165.785249][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 2165.795497][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 2166.455171][T31847] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 2167.454402][ T979] gspca_main: pac207-2.14.0 probing 093a:2476 [ 2167.528914][ T979] gspca_pac207: Failed to read a register (index 0x0000, error -71) [ 2167.550302][T31868] netlink: 'syz.0.6231': attribute type 2 has an invalid length. [ 2167.638624][ T979] uvcvideo 6-1:13.0: probe with driver uvcvideo failed with error -22 [ 2167.650553][T31869] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6230'. [ 2167.705592][ T979] usb 6-1: USB disconnect, device number 22 [ 2168.106914][ T979] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 2168.427042][ T979] usb 6-1: Using ep0 maxpacket: 32 [ 2168.437723][ T979] usb 6-1: unable to get BOS descriptor or descriptor too short [ 2168.451303][ T979] usb 6-1: config 128 has an invalid interface number: 127 but max is 3 [ 2168.470836][T31879] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6233'. [ 2168.487147][ T979] usb 6-1: config 128 contains an unexpected descriptor of type 0x2, skipping [ 2168.891875][ T979] usb 6-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 2168.917913][ T979] usb 6-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 2168.930702][ T979] usb 6-1: config 128 has no interface number 0 [ 2168.937597][ T979] usb 6-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 55, changing to 9 [ 2168.950715][ T979] usb 6-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid maxpacket 8496, setting to 1024 [ 2168.970670][ T979] usb 6-1: config 128 interface 127 has no altsetting 0 [ 2169.038878][ T979] usb 6-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 2169.059257][ T979] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2169.091232][ T979] usb 6-1: Product: syz [ 2169.117228][ T979] usb 6-1: Manufacturer: syz [ 2169.136912][ T979] usb 6-1: SerialNumber: syz [ 2169.327239][T31887] FAULT_INJECTION: forcing a failure. [ 2169.327239][T31887] name failslab, interval 1, probability 0, space 0, times 0 [ 2169.343882][T31887] CPU: 0 UID: 0 PID: 31887 Comm: syz.7.6235 Not tainted syzkaller #0 PREEMPT(full) [ 2169.343906][T31887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2169.343917][T31887] Call Trace: [ 2169.343923][T31887] [ 2169.343930][T31887] dump_stack_lvl+0x189/0x250 [ 2169.343955][T31887] ? __pfx____ratelimit+0x10/0x10 [ 2169.343985][T31887] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2169.344013][T31887] ? __pfx__printk+0x10/0x10 [ 2169.344037][T31887] ? __lock_acquire+0xab9/0xd20 [ 2169.344060][T31887] should_fail_ex+0x414/0x560 [ 2169.344085][T31887] should_failslab+0xa8/0x100 [ 2169.344102][T31887] kmem_cache_alloc_noprof+0x74/0x6e0 [ 2169.344130][T31887] ? skb_clone+0x212/0x3a0 [ 2169.344160][T31887] skb_clone+0x212/0x3a0 [ 2169.344185][T31887] __netlink_deliver_tap+0x404/0x850 [ 2169.344212][T31887] ? netlink_deliver_tap+0x2e/0x1b0 [ 2169.344228][T31887] netlink_deliver_tap+0x19c/0x1b0 [ 2169.344243][T31887] netlink_unicast+0x7fa/0x9e0 [ 2169.344278][T31887] ? __pfx_netlink_unicast+0x10/0x10 [ 2169.344310][T31887] ? netlink_sendmsg+0x642/0xb30 [ 2169.344328][T31887] ? skb_put+0x11b/0x210 [ 2169.344349][T31887] netlink_sendmsg+0x805/0xb30 [ 2169.344390][T31887] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2169.344409][T31887] ? __import_iovec+0x5d4/0x7f0 [ 2169.344436][T31887] ? aa_sock_msg_perm+0xf1/0x1d0 [ 2169.344469][T31887] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2169.344490][T31887] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2169.344509][T31887] __sock_sendmsg+0x21c/0x270 [ 2169.344533][T31887] ____sys_sendmsg+0x505/0x830 [ 2169.344554][T31887] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2169.344596][T31887] ___sys_sendmsg+0x21f/0x2a0 [ 2169.344622][T31887] ? __pfx____sys_sendmsg+0x10/0x10 [ 2169.344677][T31887] ? __fget_files+0x2a/0x420 [ 2169.344692][T31887] ? __fget_files+0x3a0/0x420 [ 2169.344719][T31887] __sys_sendmsg+0x164/0x220 [ 2169.344748][T31887] ? __pfx___sys_sendmsg+0x10/0x10 [ 2169.344781][T31887] ? __pfx_ksys_write+0x10/0x10 [ 2169.344814][T31887] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 2169.344840][T31887] ? lockdep_hardirqs_on+0x9c/0x150 [ 2169.344868][T31887] __do_fast_syscall_32+0xb6/0x2b0 [ 2169.344890][T31887] ? lockdep_hardirqs_on+0x9c/0x150 [ 2169.344926][T31887] do_fast_syscall_32+0x34/0x80 [ 2169.344945][T31887] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2169.344965][T31887] RIP: 0023:0xf7f34539 [ 2169.344979][T31887] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2169.344992][T31887] RSP: 002b:00000000f542655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 2169.345008][T31887] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000240 [ 2169.345023][T31887] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2169.345036][T31887] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2169.345049][T31887] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2169.345061][T31887] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2169.345092][T31887] [ 2169.695484][T31887] netdevsim netdevsim7 netdevsim0: entered promiscuous mode [ 2169.703825][T31887] macsec1: entered promiscuous mode [ 2169.709349][T31887] macsec1: entered allmulticast mode [ 2169.716071][T31887] netdevsim netdevsim7 netdevsim0: entered allmulticast mode [ 2169.732047][T31887] netdevsim netdevsim7 netdevsim0: left allmulticast mode [ 2169.739989][T31887] netdevsim netdevsim7 netdevsim0: left promiscuous mode [ 2169.813976][ T979] usb 6-1: USB disconnect, device number 23 [ 2169.875682][ T6132] udevd[6132]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2169.943446][T31892] fuse: Unknown parameter 'fŽ' [ 2171.034503][T31913] FAULT_INJECTION: forcing a failure. [ 2171.034503][T31913] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2171.070533][T31913] CPU: 0 UID: 0 PID: 31913 Comm: syz.8.6247 Not tainted syzkaller #0 PREEMPT(full) [ 2171.070564][T31913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2171.070579][T31913] Call Trace: [ 2171.070589][T31913] [ 2171.070599][T31913] dump_stack_lvl+0x189/0x250 [ 2171.070636][T31913] ? __pfx____ratelimit+0x10/0x10 [ 2171.070668][T31913] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2171.070700][T31913] ? __pfx__printk+0x10/0x10 [ 2171.070744][T31913] should_fail_ex+0x414/0x560 [ 2171.070785][T31913] _copy_to_user+0x31/0xb0 [ 2171.070817][T31913] simple_read_from_buffer+0xe1/0x170 [ 2171.070861][T31913] proc_fail_nth_read+0x1b3/0x220 [ 2171.070894][T31913] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2171.070927][T31913] ? rw_verify_area+0x2a6/0x4d0 [ 2171.070957][T31913] ? __lock_acquire+0xab9/0xd20 [ 2171.070978][T31913] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2171.071009][T31913] vfs_read+0x200/0xa30 [ 2171.071040][T31913] ? fdget_pos+0x247/0x320 [ 2171.071067][T31913] ? __pfx___mutex_lock+0x10/0x10 [ 2171.071102][T31913] ? __pfx_vfs_read+0x10/0x10 [ 2171.071136][T31913] ? __fget_files+0x2a/0x420 [ 2171.071162][T31913] ? __fget_files+0x3a0/0x420 [ 2171.071183][T31913] ? __fget_files+0x2a/0x420 [ 2171.071215][T31913] ksys_read+0x145/0x250 [ 2171.071245][T31913] ? exc_page_fault+0x82/0x100 [ 2171.071278][T31913] ? __pfx_ksys_read+0x10/0x10 [ 2171.071313][T31913] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 2171.071350][T31913] ? lockdep_hardirqs_on+0x9c/0x150 [ 2171.071398][T31913] __do_fast_syscall_32+0xb6/0x2b0 [ 2171.071419][T31913] ? lockdep_hardirqs_on+0x9c/0x150 [ 2171.071455][T31913] do_fast_syscall_32+0x34/0x80 [ 2171.071476][T31913] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2171.071502][T31913] RIP: 0023:0xf7f55539 [ 2171.071520][T31913] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2171.071540][T31913] RSP: 002b:00000000f5446590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 2171.071563][T31913] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000f5446620 [ 2171.071579][T31913] RDX: 000000000000000f RSI: 00000000f73e6ff4 RDI: 0000000000000000 [ 2171.071593][T31913] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 2171.071606][T31913] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2171.071619][T31913] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2171.071653][T31913] [ 2171.319522][ C0] hrtimer: interrupt took 242688637 ns [ 2171.388261][T15041] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2171.433886][T15041] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2171.447393][T15041] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2171.459278][T15041] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2171.473469][T31917] FAULT_INJECTION: forcing a failure. [ 2171.473469][T31917] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2171.491319][T21922] usb 7-1: new high-speed USB device number 113 using dummy_hcd [ 2171.497168][T31917] CPU: 1 UID: 0 PID: 31917 Comm: syz.5.6249 Not tainted syzkaller #0 PREEMPT(full) [ 2171.497201][T31917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2171.497217][T31917] Call Trace: [ 2171.497227][T31917] [ 2171.497238][T31917] dump_stack_lvl+0x189/0x250 [ 2171.497278][T31917] ? __pfx____ratelimit+0x10/0x10 [ 2171.497313][T31917] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2171.497345][T31917] ? __pfx__printk+0x10/0x10 [ 2171.497386][T31917] should_fail_ex+0x414/0x560 [ 2171.497438][T31917] _copy_to_user+0x31/0xb0 [ 2171.497473][T31917] simple_read_from_buffer+0xe1/0x170 [ 2171.497517][T31917] proc_fail_nth_read+0x1b3/0x220 [ 2171.497552][T31917] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2171.497588][T31917] ? rw_verify_area+0x2a6/0x4d0 [ 2171.497620][T31917] ? __lock_acquire+0xab9/0xd20 [ 2171.497642][T31917] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2171.497673][T31917] vfs_read+0x200/0xa30 [ 2171.497723][T31917] ? fdget_pos+0x247/0x320 [ 2171.497751][T31917] ? __pfx___mutex_lock+0x10/0x10 [ 2171.497790][T31917] ? __pfx_vfs_read+0x10/0x10 [ 2171.497826][T31917] ? __fget_files+0x2a/0x420 [ 2171.497854][T31917] ? __fget_files+0x3a0/0x420 [ 2171.497877][T31917] ? __fget_files+0x2a/0x420 [ 2171.497909][T31917] ksys_read+0x145/0x250 [ 2171.497945][T31917] ? __pfx_ksys_read+0x10/0x10 [ 2171.497984][T31917] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 2171.498023][T31917] ? lockdep_hardirqs_on+0x9c/0x150 [ 2171.498062][T31917] __do_fast_syscall_32+0xb6/0x2b0 [ 2171.498087][T31917] ? lockdep_hardirqs_on+0x9c/0x150 [ 2171.498127][T31917] do_fast_syscall_32+0x34/0x80 [ 2171.498150][T31917] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2171.498179][T31917] RIP: 0023:0xf7fa3539 [ 2171.498205][T31917] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2171.498228][T31917] RSP: 002b:00000000f5496590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 2171.498252][T31917] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f5496620 [ 2171.498269][T31917] RDX: 000000000000000f RSI: 00000000f7436ff4 RDI: 0000000000000000 [ 2171.498285][T31917] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 2171.498300][T31917] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2171.498314][T31917] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2171.498352][T31917] [ 2171.678393][T15041] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2171.887268][T21922] usb 7-1: Using ep0 maxpacket: 16 [ 2171.899115][T21922] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 2171.941235][T21922] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 2171.958745][T21922] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2171.989740][T21922] usb 7-1: Product: syz [ 2171.996958][T21922] usb 7-1: Manufacturer: syz [ 2172.001666][T21922] usb 7-1: SerialNumber: syz [ 2172.014111][T21922] usb 7-1: config 0 descriptor?? [ 2172.035692][T21922] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 2172.058630][T21922] em28xx 7-1:0.0: DVB interface 0 found: bulk [ 2172.184239][T31922] chnl_net:caif_netlink_parms(): no params data found [ 2172.300354][T31922] bridge0: port 1(bridge_slave_0) entered blocking state [ 2172.307851][T31922] bridge0: port 1(bridge_slave_0) entered disabled state [ 2172.315089][T31922] bridge_slave_0: entered allmulticast mode [ 2172.323560][T31922] bridge_slave_0: entered promiscuous mode [ 2172.333680][T31922] bridge0: port 2(bridge_slave_1) entered blocking state [ 2172.341084][T31922] bridge0: port 2(bridge_slave_1) entered disabled state [ 2172.348447][T31922] bridge_slave_1: entered allmulticast mode [ 2172.356129][T31922] bridge_slave_1: entered promiscuous mode [ 2172.409674][T31922] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2172.422882][T31922] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2172.489246][T31922] team0: Port device team_slave_0 added [ 2172.500728][T31922] team0: Port device team_slave_1 added [ 2172.547148][T31922] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2172.554169][T31922] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2172.582055][T31922] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2172.598800][T31922] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2172.605781][T31922] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2172.631852][T31922] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2172.636744][T21922] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 2172.701008][T31922] hsr_slave_0: entered promiscuous mode [ 2172.707979][T31922] hsr_slave_1: entered promiscuous mode [ 2172.714484][T31922] debugfs: 'hsr0' already exists in 'hsr' [ 2172.720788][T31922] Cannot create hsr debugfs directory [ 2172.787072][T28592] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 2172.919761][T31922] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 2172.931392][T31922] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 2172.941786][T31922] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 2172.953119][T31922] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 2172.967270][T28592] usb 6-1: Using ep0 maxpacket: 8 [ 2172.984860][T28592] usb 6-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 2173.008205][T28592] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2173.011861][T31922] bridge0: port 2(bridge_slave_1) entered blocking state [ 2173.016591][T28592] usb 6-1: Product: syz [ 2173.023432][T31922] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2173.023718][T31922] bridge0: port 1(bridge_slave_0) entered blocking state [ 2173.023838][T31922] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2173.052899][T28592] usb 6-1: Manufacturer: syz [ 2173.070280][T28592] usb 6-1: SerialNumber: syz [ 2173.082500][T28592] usb 6-1: config 0 descriptor?? [ 2173.106423][T28592] gspca_main: se401-2.14.0 probing 047d:5003 [ 2173.128204][T31922] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2173.139598][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 2173.150067][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 2173.182223][T31922] 8021q: adding VLAN 0 to HW filter on device team0 [ 2173.199958][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 2173.207179][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2173.229407][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 2173.236575][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2173.332663][T31922] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2173.385272][T31922] veth0_vlan: entered promiscuous mode [ 2173.400188][T31922] veth1_vlan: entered promiscuous mode [ 2173.440799][T31922] veth0_macvtap: entered promiscuous mode [ 2173.455480][T31922] veth1_macvtap: entered promiscuous mode [ 2173.472335][T31907] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2173.480785][T31922] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2173.492378][T31922] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2173.495411][T31907] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2173.513021][T28592] gspca_se401: Frame size: 0x2 1/4th janggu [ 2173.516738][ T60] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2173.533253][T28592] gspca_se401: Frame size: 0x127 bayer [ 2173.540537][T28592] gspca_se401: Frame size: 256x0 bayer [ 2173.546226][T28592] gspca_se401: Frame size: 0x0 1/16th janggu [ 2173.549951][ T60] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2173.552953][T28592] gspca_se401: Frame size: 0x4 bayer [ 2173.568386][ T60] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2173.588819][ T60] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2173.716997][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2173.743099][T28592] input: se401 as /devices/platform/dummy_hcd.5/usb6/6-1/input/input74 [ 2173.754654][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2173.782073][T28592] usb 6-1: USB disconnect, device number 24 [ 2173.847439][T22204] Bluetooth: hci3: command tx timeout [ 2173.863958][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2173.874884][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2174.076630][T31949] vlan2: entered allmulticast mode [ 2174.083265][T31949] batadv0: entered allmulticast mode [ 2174.337527][T21922] em28xx 7-1:0.0: writing to i2c device at 0xa0 failed (error=-5) [ 2174.349782][T21922] em28xx 7-1:0.0: failed to read eeprom (err=-5) [ 2174.356272][T21922] em28xx 7-1:0.0: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-5] [ 2174.437193][T21922] em28xx 7-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 2174.445960][T21922] em28xx 7-1:0.0: dvb set to bulk mode. [ 2174.452733][T10433] em28xx 7-1:0.0: Binding DVB extension [ 2174.476969][T28592] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 2174.557154][T26431] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 2174.581449][T10433] em28xx 7-1:0.0: Registering input extension [ 2174.621372][T31956] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2174.641269][T28592] usb 10-1: Using ep0 maxpacket: 16 [ 2174.671745][T28592] usb 10-1: config 0 interface 0 has no altsetting 0 [ 2174.688622][T28592] usb 10-1: New USB device found, idVendor=1345, idProduct=3008, bcdDevice= 0.00 [ 2174.699497][T28592] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2174.716459][T26662] usb 7-1: USB disconnect, device number 113 [ 2174.737124][T28592] usb 10-1: config 0 descriptor?? [ 2174.749325][T26431] usb 6-1: Using ep0 maxpacket: 8 [ 2174.762726][T26662] em28xx 7-1:0.0: Disconnecting em28xx [ 2174.764825][T26431] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 2174.785813][T26662] em28xx 7-1:0.0: Closing input extension [ 2174.813134][T26431] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2174.844751][T26431] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2174.862161][T26431] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2174.912358][T26431] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2174.963032][T26431] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2174.979585][T26662] em28xx 7-1:0.0: Freeing device [ 2175.005478][T26431] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2175.152105][T31960] macsec1: entered promiscuous mode [ 2175.158824][T31960] macsec1: entered allmulticast mode [ 2175.164266][T31960] netdevsim netdevsim8 netdevsim0: entered allmulticast mode [ 2175.177957][T31960] netdevsim netdevsim8 netdevsim0: left allmulticast mode [ 2175.218070][T28592] sony 0003:1345:3008.0025: item fetching failed at offset 3/5 [ 2175.226777][T28592] sony 0003:1345:3008.0025: parse failed [ 2175.267720][T31953] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2175.287897][T28592] sony 0003:1345:3008.0025: probe with driver sony failed with error -22 [ 2175.312968][T31953] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2175.380926][T26431] usb 6-1: usb_control_msg returned -32 [ 2175.383714][T31953] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2175.403059][T26431] usbtmc 6-1:16.0: can't read capabilities [ 2175.411800][T31953] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2175.428308][T31951] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6254'. [ 2175.455861][T31951] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6254'. [ 2175.512947][T31963] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6257'. [ 2175.551131][T26662] usb 10-1: USB disconnect, device number 2 [ 2175.865932][T31971] usbtmc 6-1:16.0: usb_control_msg returned -32 [ 2175.874551][T26662] usb 6-1: USB disconnect, device number 25 [ 2175.976146][T22204] Bluetooth: hci3: command tx timeout [ 2176.401680][T31978] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6262'. [ 2176.578475][T31978] macvlan2: entered promiscuous mode [ 2176.591902][T31978] macvlan2: entered allmulticast mode [ 2176.827036][T26431] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 2176.979653][T26431] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2177.012274][T26431] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 2177.088184][T26431] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2177.174314][T26431] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2177.206590][T26431] usb 6-1: Product: syz [ 2177.225519][T26431] usb 6-1: Manufacturer: syz [ 2177.241655][T26431] usb 6-1: SerialNumber: syz [ 2177.505697][T31981] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2177.527698][T31981] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2177.567990][T26431] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22 [ 2177.638543][T32002] FAULT_INJECTION: forcing a failure. [ 2177.638543][T32002] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2177.656086][T26431] usb 6-1: USB disconnect, device number 26 [ 2177.688728][T32002] CPU: 1 UID: 0 PID: 32002 Comm: syz.8.6268 Not tainted syzkaller #0 PREEMPT(full) [ 2177.688765][T32002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2177.688780][T32002] Call Trace: [ 2177.688790][T32002] [ 2177.688801][T32002] dump_stack_lvl+0x189/0x250 [ 2177.688838][T32002] ? __pfx____ratelimit+0x10/0x10 [ 2177.688877][T32002] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2177.688909][T32002] ? __pfx__printk+0x10/0x10 [ 2177.688946][T32002] should_fail_ex+0x414/0x560 [ 2177.688992][T32002] _copy_to_user+0x31/0xb0 [ 2177.689037][T32002] simple_read_from_buffer+0xe1/0x170 [ 2177.689078][T32002] proc_fail_nth_read+0x1b3/0x220 [ 2177.689117][T32002] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2177.689150][T32002] ? rw_verify_area+0x2a6/0x4d0 [ 2177.689179][T32002] ? __lock_acquire+0xab9/0xd20 [ 2177.689200][T32002] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2177.689238][T32002] vfs_read+0x200/0xa30 [ 2177.689271][T32002] ? fdget_pos+0x247/0x320 [ 2177.689291][T32002] ? __pfx___mutex_lock+0x10/0x10 [ 2177.689317][T32002] ? __pfx_vfs_read+0x10/0x10 [ 2177.689341][T32002] ? __fget_files+0x2a/0x420 [ 2177.689359][T32002] ? __fget_files+0x3a0/0x420 [ 2177.689373][T32002] ? __fget_files+0x2a/0x420 [ 2177.689395][T32002] ksys_read+0x145/0x250 [ 2177.689420][T32002] ? __pfx_ksys_read+0x10/0x10 [ 2177.689444][T32002] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 2177.689471][T32002] ? lockdep_hardirqs_on+0x9c/0x150 [ 2177.689497][T32002] __do_fast_syscall_32+0xb6/0x2b0 [ 2177.689512][T32002] ? asm_int80_emulation+0x1a/0x20 [ 2177.689527][T32002] ? do_int80_emulation+0x1f3/0x390 [ 2177.689555][T32002] do_fast_syscall_32+0x34/0x80 [ 2177.689570][T32002] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2177.689589][T32002] RIP: 0023:0xf7f55539 [ 2177.689604][T32002] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2177.689619][T32002] RSP: 002b:00000000f5446590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 2177.689636][T32002] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f5446620 [ 2177.689648][T32002] RDX: 000000000000000f RSI: 00000000f73e6ff4 RDI: 0000000000000000 [ 2177.689658][T32002] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 2177.689668][T32002] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2177.689678][T32002] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2177.689706][T32002] [ 2177.967435][T32004] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 2177.974812][T32004] macsec1: entered promiscuous mode [ 2177.980244][T32004] macsec1: entered allmulticast mode [ 2177.985542][T32004] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 2178.007006][T22204] Bluetooth: hci3: command tx timeout [ 2178.152354][T32004] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 2178.162691][T32004] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 2178.437975][T26431] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 2178.617231][T26431] usb 6-1: Using ep0 maxpacket: 8 [ 2178.632690][T26431] usb 6-1: config index 0 descriptor too short (expected 301, got 72) [ 2178.658514][T26431] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 2178.682903][T26431] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2178.705157][T26431] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2178.777009][T26431] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 2178.898940][T26431] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 117, changing to 10 [ 2178.923884][T26431] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 33552, setting to 1024 [ 2178.961037][T26431] usb 6-1: config 16 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 2179.001960][T26431] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2179.042116][T26431] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2179.361929][T26431] usb 6-1: usb_control_msg returned -32 [ 2179.369865][T26431] usbtmc 6-1:16.0: can't read capabilities [ 2179.379955][ C0] usbtmc 6-1:16.0: overflow with length 1024, actual length is 1024 [ 2179.698335][T26431] usb 6-1: USB disconnect, device number 27 [ 2180.087899][T32024] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6275'. [ 2180.089974][T22204] Bluetooth: hci3: command tx timeout [ 2180.250765][T32024] 8021q: adding VLAN 0 to HW filter on device bond13 [ 2180.332254][T32032] macvlan2: entered promiscuous mode [ 2180.373280][T32032] macvlan2: entered allmulticast mode [ 2180.392701][T32032] bond13: (slave macvlan2): Opening slave failed [ 2180.555772][T32035] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 2181.331282][T32062] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6284'. [ 2181.352899][T32062] openvswitch: netlink: Flow actions attr not present in new flow. [ 2181.431614][T32066] netlink: 'syz.8.6284': attribute type 10 has an invalid length. [ 2181.601774][T32071] netlink: 'syz.9.6285': attribute type 10 has an invalid length. [ 2182.431418][T32081] binder: 32078:32081 ioctl c0306201 80000640 returned -22 [ 2183.335241][T32062] pim6reg: entered allmulticast mode [ 2183.371874][T32066] netdevsim netdevsim8 netdevsim0: left promiscuous mode [ 2183.381463][T32066] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 2183.390927][T32066] team0: Failed to send options change via netlink (err -105) [ 2183.405201][T32066] team0: Port device netdevsim0 added [ 2185.134130][T32104] input: syz1 as /devices/virtual/input/input77 [ 2185.329723][T32112] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6295'. [ 2185.619466][T32112] 8021q: adding VLAN 0 to HW filter on device bond8 [ 2185.816367][T32112] macvlan0: entered promiscuous mode [ 2185.822112][T32112] macvlan0: entered allmulticast mode [ 2185.831240][T32112] bond8: (slave macvlan0): Opening slave failed [ 2186.312280][T32139] netlink: 'syz.0.6301': attribute type 10 has an invalid length. [ 2186.704409][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 2186.704429][ T30] audit: type=1800 audit(1763702993.276:1133): pid=32144 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.6304" name="bus" dev="tmpfs" ino=1633 res=0 errno=0 [ 2186.939727][T32150] fuse: Unknown parameter '0x000000000000000a0x000000000000000a' [ 2188.033804][T32161] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 2188.040352][T32161] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 2188.066964][T31730] usb 7-1: new high-speed USB device number 114 using dummy_hcd [ 2188.183385][ T30] audit: type=1800 audit(1763702994.766:1134): pid=32163 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.6308" name="bus" dev="tmpfs" ino=2770 res=0 errno=0 [ 2188.204014][ C1] vkms_vblank_simulate: vblank timer overrun [ 2188.227780][T31730] usb 7-1: Using ep0 maxpacket: 16 [ 2188.271209][T31730] usb 7-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 2188.271234][T31730] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2188.271249][T31730] usb 7-1: Product: syz [ 2188.271261][T31730] usb 7-1: Manufacturer: syz [ 2188.271275][T31730] usb 7-1: SerialNumber: syz [ 2188.273271][T31730] usb 7-1: config 0 descriptor?? [ 2188.889398][T32171] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.6311'. [ 2188.903083][T32171] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6311'. [ 2188.917245][ T30] audit: type=1800 audit(1763702995.506:1135): pid=32173 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.6312" name="bus" dev="tmpfs" ino=103 res=0 errno=0 [ 2188.937809][ C1] vkms_vblank_simulate: vblank timer overrun [ 2189.062973][T31730] speedtch 7-1:0.0: speedtch_bind: wrong device class 68 [ 2189.112611][T31730] speedtch 7-1:0.0: usbatm_usb_probe: bind failed: -19! [ 2189.124362][T31730] usb 7-1: USB disconnect, device number 114 [ 2189.267676][T32178] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6314'. [ 2189.443362][T32178] 8021q: adding VLAN 0 to HW filter on device bond7 [ 2189.583051][T32178] macvlan2: entered promiscuous mode [ 2189.593015][T32178] macvlan2: entered allmulticast mode [ 2189.611989][T32178] bond7: (slave macvlan2): Opening slave failed [ 2189.640723][T24421] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2191.195098][T32220] fuse: Bad value for 'user_id' [ 2191.216150][T32220] fuse: Bad value for 'user_id' [ 2191.513293][T32228] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6330'. [ 2191.556518][T32232] netlink: 'syz.9.6329': attribute type 10 has an invalid length. [ 2191.567014][T32232] netlink: 40 bytes leftover after parsing attributes in process `syz.9.6329'. [ 2191.586512][T32228] 8021q: adding VLAN 0 to HW filter on device bond7 [ 2191.651821][T32232] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 2191.662901][T32232] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 2191.673331][T32232] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 2191.731996][T32228] macvlan0: entered promiscuous mode [ 2191.776992][T32228] macvlan0: entered allmulticast mode [ 2191.788804][T32228] bond7: (slave macvlan0): Opening slave failed [ 2191.819986][T32235] netlink: 'syz.8.6333': attribute type 10 has an invalid length. [ 2191.835645][T32235] netlink: 40 bytes leftover after parsing attributes in process `syz.8.6333'. [ 2191.849508][T32235] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 2191.860009][T32235] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 2191.869496][T32235] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 2192.097114][ T979] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 2192.277060][ T979] usb 6-1: Using ep0 maxpacket: 16 [ 2192.285785][T32250] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(5) [ 2192.292336][T32250] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2192.302049][ T979] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 2192.310268][ T979] usb 6-1: config 0 has no interface number 0 [ 2192.317786][T32250] vhci_hcd vhci_hcd.0: Device attached [ 2192.326207][ T979] usb 6-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 2192.348605][ T979] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2192.356729][ T979] usb 6-1: Product: syz [ 2192.407651][ T979] usb 6-1: Manufacturer: syz [ 2192.415749][T32257] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 2192.534219][ T979] usb 6-1: SerialNumber: syz [ 2192.579548][T32261] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 2192.716931][T26662] usb 52-1: SetAddress Request (2) to port 0 [ 2192.862358][ T979] usb 6-1: config 0 descriptor?? [ 2192.880407][T26662] usb 52-1: new SuperSpeed USB device number 2 using vhci_hcd [ 2193.012269][ T979] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 2193.180138][T32252] vhci_hcd: connection closed [ 2193.180465][ T6289] vhci_hcd: stop threads [ 2193.193225][ T6289] vhci_hcd: release socket [ 2193.198485][ T6289] vhci_hcd: disconnect device [ 2193.204073][T26662] usb 52-1: enqueue for inactive port 0 [ 2193.738170][T26662] usb usb52-port1: attempt power cycle [ 2194.067205][ T979] gspca_spca1528: reg_w err -110 [ 2194.087270][T31944] usb 7-1: new high-speed USB device number 115 using dummy_hcd [ 2194.087391][ T979] spca1528 6-1:0.1: probe with driver spca1528 failed with error -110 [ 2194.249654][T31944] usb 7-1: config 0 has an invalid interface number: 64 but max is 0 [ 2194.278650][T31944] usb 7-1: config 0 has no interface number 0 [ 2194.286599][T10433] usb 6-1: USB disconnect, device number 28 [ 2194.311460][T31944] usb 7-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 2194.364597][T31944] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2194.394979][T31944] usb 7-1: Product: syz [ 2194.409189][T26662] usb usb52-port1: unable to enumerate USB device [ 2194.415257][T31944] usb 7-1: Manufacturer: syz [ 2194.430581][T31944] usb 7-1: SerialNumber: syz [ 2194.457417][T31944] usb 7-1: config 0 descriptor?? [ 2194.595585][T10433] IPVS: starting estimator thread 0... [ 2194.696937][T32278] IPVS: using max 29 ests per chain, 69600 per kthread [ 2194.751296][T31944] uvcvideo 7-1:0.64: Found Unit with invalid ID 0 [ 2194.758039][T31944] uvcvideo 7-1:0.64: Found UVC 0.08 device syz (046d:0823) [ 2194.776563][T31944] uvcvideo 7-1:0.64: Entity type for entity Output 65535 was not initialized! [ 2194.787764][T31944] uvcvideo 7-1:0.64: Failed to create links for entity 65535 [ 2194.795319][T31944] uvcvideo 7-1:0.64: Failed to register entities (-22). [ 2194.815322][T31944] usb 7-1: USB disconnect, device number 115 [ 2195.367879][T32296] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6351'. [ 2195.947973][T32310] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6356'. [ 2195.982301][T32310] netlink: 'syz.5.6356': attribute type 2 has an invalid length. [ 2196.016397][T32310] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6356'. [ 2196.041578][T32310] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6356'. [ 2196.082989][T32310] netlink: 'syz.5.6356': attribute type 2 has an invalid length. [ 2196.107199][T32310] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6356'. [ 2196.221107][T32322] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 2197.218466][T32343] netlink: 132 bytes leftover after parsing attributes in process `syz.9.6363'. [ 2198.170182][T32348] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6365'. [ 2198.203970][T32348] netlink: 'syz.0.6365': attribute type 12 has an invalid length. [ 2198.260541][T32348] bond8: option primary_reselect: invalid value (255) [ 2198.316441][T32348] bond8 (unregistering): Released all slaves [ 2198.641624][T32354] FAULT_INJECTION: forcing a failure. [ 2198.641624][T32354] name failslab, interval 1, probability 0, space 0, times 0 [ 2198.655041][T32354] CPU: 0 UID: 0 PID: 32354 Comm: syz.5.6367 Not tainted syzkaller #0 PREEMPT(full) [ 2198.655062][T32354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2198.655072][T32354] Call Trace: [ 2198.655078][T32354] [ 2198.655085][T32354] dump_stack_lvl+0x189/0x250 [ 2198.655112][T32354] ? __pfx____ratelimit+0x10/0x10 [ 2198.655135][T32354] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2198.655156][T32354] ? __pfx__printk+0x10/0x10 [ 2198.655177][T32354] ? __pfx___might_resched+0x10/0x10 [ 2198.655194][T32354] ? fs_reclaim_acquire+0x7d/0x100 [ 2198.655222][T32354] should_fail_ex+0x414/0x560 [ 2198.655250][T32354] should_failslab+0xa8/0x100 [ 2198.655267][T32354] __kmalloc_noprof+0xcb/0x7f0 [ 2198.655289][T32354] ? sock_kmalloc+0xd6/0x160 [ 2198.655312][T32354] sock_kmalloc+0xd6/0x160 [ 2198.655331][T32354] hash_sendmsg+0x666/0x11d0 [ 2198.655379][T32354] ? __pfx_hash_sendmsg+0x10/0x10 [ 2198.655400][T32354] __sock_sendmsg+0x21c/0x270 [ 2198.655425][T32354] ____sys_sendmsg+0x505/0x830 [ 2198.655446][T32354] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2198.655476][T32354] ___sys_sendmsg+0x21f/0x2a0 [ 2198.655495][T32354] ? __pfx____sys_sendmsg+0x10/0x10 [ 2198.655538][T32354] ? __fget_files+0x2a/0x420 [ 2198.655553][T32354] ? __fget_files+0x3a0/0x420 [ 2198.655575][T32354] __sys_sendmsg+0x164/0x220 [ 2198.655605][T32354] ? __pfx___sys_sendmsg+0x10/0x10 [ 2198.655627][T32354] ? __pfx_ksys_write+0x10/0x10 [ 2198.655650][T32354] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 2198.655675][T32354] ? lockdep_hardirqs_on+0x9c/0x150 [ 2198.655698][T32354] __do_fast_syscall_32+0xb6/0x2b0 [ 2198.655712][T32354] ? lockdep_hardirqs_on+0x9c/0x150 [ 2198.655735][T32354] do_fast_syscall_32+0x34/0x80 [ 2198.655748][T32354] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2198.655766][T32354] RIP: 0023:0xf7fa3539 [ 2198.655779][T32354] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2198.655791][T32354] RSP: 002b:00000000f549655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 2198.655806][T32354] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080013a40 [ 2198.655817][T32354] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2198.655825][T32354] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2198.655834][T32354] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2198.655845][T32354] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2198.655867][T32354] [ 2199.054499][T32362] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6370'. [ 2199.083451][T32362] 8021q: adding VLAN 0 to HW filter on device bond8 [ 2199.162884][T32362] macvlan2: entered promiscuous mode [ 2199.168671][T32362] macvlan2: entered allmulticast mode [ 2199.175700][T32362] bond8: (slave macvlan2): Opening slave failed [ 2199.581189][T32375] netlink: 'syz.0.6371': attribute type 10 has an invalid length. [ 2199.896364][T32381] netlink: 'syz.9.6375': attribute type 10 has an invalid length. [ 2200.564731][T32381] syz_tun: entered promiscuous mode [ 2200.625861][T32381] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 2200.677007][T26662] usb 6-1: new full-speed USB device number 29 using dummy_hcd [ 2200.816955][T26662] usb 6-1: device descriptor read/64, error -71 [ 2201.108018][T26662] usb 6-1: new full-speed USB device number 30 using dummy_hcd [ 2201.186211][T32395] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 2201.319619][T26662] usb 6-1: device descriptor read/64, error -71 [ 2201.674061][T26662] usb usb6-port1: attempt power cycle [ 2202.041214][T26662] usb 6-1: new full-speed USB device number 31 using dummy_hcd [ 2202.258693][T32415] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6383'. [ 2202.316953][T26662] usb 6-1: device descriptor read/8, error -71 [ 2202.319452][T32415] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2202.415586][T32415] macvlan2: entered promiscuous mode [ 2202.421087][T32415] macvlan2: entered allmulticast mode [ 2202.448571][T32415] bond1: (slave macvlan2): Opening slave failed [ 2202.561638][T26662] usb 6-1: new full-speed USB device number 32 using dummy_hcd [ 2202.613292][T26662] usb 6-1: device descriptor read/8, error -71 [ 2202.907732][T26662] usb usb6-port1: unable to enumerate USB device [ 2203.113541][T32430] dummy0: entered allmulticast mode [ 2203.200755][T32432] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 2203.237018][T26431] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 2203.436198][T26431] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2203.516749][T26431] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2203.585931][T26431] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2203.702597][T26431] usb 1-1: New USB device found, idVendor=0853, idProduct=0148, bcdDevice= 0.00 [ 2203.828312][T26431] usb 1-1: New USB device strings: Mfr=8, Product=0, SerialNumber=0 [ 2203.857615][T26431] usb 1-1: Manufacturer: syz [ 2203.907107][T26431] usb 1-1: config 0 descriptor?? [ 2204.367601][T26431] usbhid 1-1:0.0: can't add hid device: -71 [ 2204.374041][T26431] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 2204.395044][T26431] usb 1-1: USB disconnect, device number 61 [ 2204.982211][T32456] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6395'. [ 2205.133513][T32456] 8021q: adding VLAN 0 to HW filter on device bond14 [ 2205.181953][T32465] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2205.258568][T32456] macvlan2: entered promiscuous mode [ 2205.432868][T32456] macvlan2: entered allmulticast mode [ 2205.445037][T32456] bond14: (slave macvlan2): Opening slave failed [ 2205.593572][T32470] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 2206.040071][T32476] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6399'. [ 2206.098546][T32476] 8021q: adding VLAN 0 to HW filter on device bond8 [ 2206.122978][T32476] bond8: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 2206.887043][T31945] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 2206.962628][T32491] FAULT_INJECTION: forcing a failure. [ 2206.962628][T32491] name failslab, interval 1, probability 0, space 0, times 0 [ 2207.036893][T32491] CPU: 1 UID: 0 PID: 32491 Comm: syz.6.6404 Not tainted syzkaller #0 PREEMPT(full) [ 2207.036923][T32491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2207.036954][T32491] Call Trace: [ 2207.036963][T32491] [ 2207.036972][T32491] dump_stack_lvl+0x189/0x250 [ 2207.037007][T32491] ? __pfx____ratelimit+0x10/0x10 [ 2207.037038][T32491] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2207.037068][T32491] ? __pfx__printk+0x10/0x10 [ 2207.037095][T32491] ? __lock_acquire+0xab9/0xd20 [ 2207.037124][T32491] should_fail_ex+0x414/0x560 [ 2207.037163][T32491] should_failslab+0xa8/0x100 [ 2207.037188][T32491] kmem_cache_alloc_noprof+0x74/0x6e0 [ 2207.037220][T32491] ? skb_clone+0x212/0x3a0 [ 2207.037252][T32491] skb_clone+0x212/0x3a0 [ 2207.037281][T32491] __netlink_deliver_tap+0x404/0x850 [ 2207.037318][T32491] ? netlink_deliver_tap+0x2e/0x1b0 [ 2207.037342][T32491] netlink_deliver_tap+0x19c/0x1b0 [ 2207.037366][T32491] netlink_unicast+0x7fa/0x9e0 [ 2207.037406][T32491] ? __pfx_netlink_unicast+0x10/0x10 [ 2207.037441][T32491] ? netlink_sendmsg+0x642/0xb30 [ 2207.037462][T32491] ? skb_put+0x11b/0x210 [ 2207.037488][T32491] netlink_sendmsg+0x805/0xb30 [ 2207.037521][T32491] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2207.037548][T32491] ? __import_iovec+0x5d4/0x7f0 [ 2207.037573][T32491] ? aa_sock_msg_perm+0xf1/0x1d0 [ 2207.037608][T32491] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2207.037629][T32491] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2207.037667][T32491] __sock_sendmsg+0x21c/0x270 [ 2207.037701][T32491] ____sys_sendmsg+0x505/0x830 [ 2207.037732][T32491] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2207.037775][T32491] ___sys_sendmsg+0x21f/0x2a0 [ 2207.037827][T32491] ? __pfx____sys_sendmsg+0x10/0x10 [ 2207.037897][T32491] ? __fget_files+0x2a/0x420 [ 2207.037920][T32491] ? __fget_files+0x3a0/0x420 [ 2207.037954][T32491] __sys_sendmsg+0x164/0x220 [ 2207.037983][T32491] ? __pfx___sys_sendmsg+0x10/0x10 [ 2207.038019][T32491] ? __pfx_ksys_write+0x10/0x10 [ 2207.038055][T32491] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 2207.038091][T32491] ? lockdep_hardirqs_on+0x9c/0x150 [ 2207.038127][T32491] __do_fast_syscall_32+0xb6/0x2b0 [ 2207.038150][T32491] ? lockdep_hardirqs_on+0x9c/0x150 [ 2207.038188][T32491] do_fast_syscall_32+0x34/0x80 [ 2207.038209][T32491] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2207.038238][T32491] RIP: 0023:0xf70ad539 [ 2207.038257][T32491] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2207.038278][T32491] RSP: 002b:00000000f549d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 2207.038302][T32491] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 2207.038319][T32491] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2207.038333][T32491] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2207.038363][T32491] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2207.038377][T32491] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2207.038412][T32491] [ 2207.341665][ C1] vkms_vblank_simulate: vblank timer overrun [ 2207.415752][T31945] usb 1-1: Using ep0 maxpacket: 32 [ 2207.482218][T31945] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 2207.490318][T31945] usb 1-1: config 0 has no interface number 0 [ 2207.543956][T31945] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 2207.553564][T31945] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2207.561608][T31945] usb 1-1: Product: syz [ 2207.565760][T31945] usb 1-1: Manufacturer: syz [ 2207.570682][T31945] usb 1-1: SerialNumber: syz [ 2207.578105][T31945] usb 1-1: config 0 descriptor?? [ 2207.585774][T31945] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 2207.594668][T31945] usb 1-1: selecting invalid altsetting 1 [ 2207.602443][T31945] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 2207.614685][T31945] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 2207.625178][T31945] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 2207.633483][T31945] usb 1-1: media controller created [ 2207.652198][T31945] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2208.794627][T31945] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 2208.926083][T31945] zl10353_read_register: readreg error (reg=127, ret==-110) [ 2208.939850][T32485] usb 1-1: dvb_usb_ce6230: I2C read not implemented [ 2209.426239][T32511] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6410'. [ 2209.570567][T32511] 8021q: adding VLAN 0 to HW filter on device bond9 [ 2209.599272][T32513] macvlan2: entered promiscuous mode [ 2209.604704][T32513] macvlan2: entered allmulticast mode [ 2209.614071][T32513] bond9: (slave macvlan2): Opening slave failed [ 2209.835018][T32521] netlink: 'syz.9.6411': attribute type 10 has an invalid length. [ 2210.035844][T32525] dummy0: entered allmulticast mode [ 2210.760176][T31945] usb 1-1: USB disconnect, device number 62 [ 2212.096997][T10433] usb 6-1: new full-speed USB device number 33 using dummy_hcd [ 2212.258980][T10433] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 2212.304684][T32546] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 2212.323645][T10433] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 2212.344194][T10433] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2212.356917][T10433] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2212.387761][T32540] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 2212.395039][T32540] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 2212.460648][T10433] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 2212.498699][T32550] ipip0: entered promiscuous mode [ 2212.523846][T32550] ipip0: entered allmulticast mode [ 2212.561528][T32550] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6419'. [ 2212.579958][T32550] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6419'. [ 2212.592654][T32550] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6419'. [ 2212.813663][T10433] usb 6-1: USB disconnect, device number 33 [ 2214.858274][T32576] netlink: 'syz.9.6426': attribute type 6 has an invalid length. [ 2215.119612][T32580] dummy0: entered allmulticast mode [ 2217.073112][T32602] sctp: [Deprecated]: syz.5.6435 (pid 32602) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2217.073112][T32602] Use struct sctp_sack_info instead [ 2217.111634][T32603] sctp: [Deprecated]: syz.5.6435 (pid 32603) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2217.111634][T32603] Use struct sctp_sack_info instead [ 2217.552185][T10433] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 2217.552420][T32615] batman_adv: batadv0: Adding interface: dummy0 [ 2217.576597][T32615] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2217.673001][T32615] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 2217.836614][T10433] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 127, changing to 10 [ 2217.856098][T10433] usb 6-1: New USB device found, idVendor=0c70, idProduct=f0bd, bcdDevice= 0.00 [ 2217.868863][T10433] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2217.916638][T10433] usb 6-1: config 0 descriptor?? [ 2218.317113][T31944] usb 7-1: new high-speed USB device number 116 using dummy_hcd [ 2218.402527][T10433] usbhid 6-1:0.0: can't add hid device: -71 [ 2218.408747][T10433] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 2218.434779][T10433] usb 6-1: USB disconnect, device number 34 [ 2218.666950][T31944] usb 7-1: Using ep0 maxpacket: 16 [ 2218.730773][T31944] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 2218.754549][T31944] usb 7-1: config 0 has no interface number 0 [ 2218.887958][T31944] usb 7-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 2218.906922][T31944] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2218.925274][T31944] usb 7-1: Product: syz [ 2218.950007][T31944] usb 7-1: Manufacturer: syz [ 2218.954676][T31944] usb 7-1: SerialNumber: syz [ 2219.018707][T31944] usb 7-1: config 0 descriptor?? [ 2219.165739][T31944] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 2219.381615][T32641] netlink: 'syz.5.6443': attribute type 6 has an invalid length. [ 2220.239950][T31944] gspca_spca1528: reg_w err -110 [ 2220.264650][T31944] spca1528 7-1:0.1: probe with driver spca1528 failed with error -110 [ 2221.034763][T32652] netlink: 'syz.8.6444': attribute type 10 has an invalid length. [ 2221.244465][T31945] usb 7-1: USB disconnect, device number 116 [ 2221.364271][T32652] team0: Port device netdevsim0 removed [ 2221.583455][T32659] netlink: 'syz.5.6447': attribute type 1 has an invalid length. [ 2221.597702][T32652] netdevsim netdevsim8 netdevsim0: entered allmulticast mode [ 2221.605866][T32652] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 2222.732852][T32680] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 2222.767202][T32680] netlink: 'syz.5.6451': attribute type 6 has an invalid length. [ 2224.036992][T31945] usb 7-1: new high-speed USB device number 117 using dummy_hcd [ 2224.137683][T32695] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6456'. [ 2224.235626][T31945] usb 7-1: device descriptor read/64, error -71 [ 2224.261361][T32697] netlink: 'syz.9.6454': attribute type 10 has an invalid length. [ 2224.546010][ T6289] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2224.659239][T31945] usb 7-1: new high-speed USB device number 118 using dummy_hcd [ 2224.762030][ T6289] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2224.878726][ T6289] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2225.008502][T31945] usb 7-1: device descriptor read/64, error -71 [ 2225.117161][T31945] usb usb7-port1: attempt power cycle [ 2225.483459][T31945] usb 7-1: new high-speed USB device number 119 using dummy_hcd [ 2225.520845][T31945] usb 7-1: Using ep0 maxpacket: 8 [ 2225.521194][ T6289] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2225.529874][T31945] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2225.561196][T31945] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2225.580673][T31945] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2225.709855][T31945] usb 7-1: config 0 descriptor?? [ 2226.502029][ T6289] bridge_slave_1: left allmulticast mode [ 2226.526342][ T6289] bridge_slave_1: left promiscuous mode [ 2226.538916][ T6289] bridge0: port 2(bridge_slave_1) entered disabled state [ 2226.556116][ T6289] bridge_slave_0: left allmulticast mode [ 2226.562514][ T6289] bridge_slave_0: left promiscuous mode [ 2226.575716][ T6289] bridge0: port 1(bridge_slave_0) entered disabled state [ 2226.757636][T32724] netlink: 'syz.0.6472': attribute type 10 has an invalid length. [ 2227.277123][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 2227.283510][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 2228.137252][T31945] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 2228.239671][T31945] usb 7-1: USB disconnect, device number 119 [ 2228.657307][T32756] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6465'. [ 2228.731005][ T6289] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2228.742339][ T6289] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2228.755143][ T6289] bond0 (unregistering): Released all slaves [ 2228.787319][T32744] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 2228.859216][ T6289] tipc: Disabling bearer [ 2228.872811][ T6289] tipc: Left network mode [ 2229.647436][T28592] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 2229.732081][T32767] FAULT_INJECTION: forcing a failure. [ 2229.732081][T32767] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2229.756624][T32767] CPU: 0 UID: 0 PID: 32767 Comm: syz.5.6468 Not tainted syzkaller #0 PREEMPT(full) [ 2229.756650][T32767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2229.756659][T32767] Call Trace: [ 2229.756665][T32767] [ 2229.756672][T32767] dump_stack_lvl+0x189/0x250 [ 2229.756696][T32767] ? __pfx____ratelimit+0x10/0x10 [ 2229.756716][T32767] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2229.756736][T32767] ? __pfx__printk+0x10/0x10 [ 2229.756759][T32767] should_fail_ex+0x414/0x560 [ 2229.756785][T32767] _copy_to_user+0x31/0xb0 [ 2229.756816][T32767] simple_read_from_buffer+0xe1/0x170 [ 2229.756852][T32767] proc_fail_nth_read+0x1b3/0x220 [ 2229.756878][T32767] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2229.756898][T32767] ? rw_verify_area+0x2a6/0x4d0 [ 2229.756917][T32767] ? __lock_acquire+0xab9/0xd20 [ 2229.756930][T32767] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2229.756950][T32767] vfs_read+0x200/0xa30 [ 2229.756969][T32767] ? fdget_pos+0x247/0x320 [ 2229.756986][T32767] ? __pfx___mutex_lock+0x10/0x10 [ 2229.757009][T32767] ? __pfx_vfs_read+0x10/0x10 [ 2229.757030][T32767] ? __fget_files+0x2a/0x420 [ 2229.757047][T32767] ? __fget_files+0x3a0/0x420 [ 2229.757060][T32767] ? __fget_files+0x2a/0x420 [ 2229.757079][T32767] ksys_read+0x145/0x250 [ 2229.757101][T32767] ? __pfx_ksys_read+0x10/0x10 [ 2229.757124][T32767] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 2229.757147][T32767] ? lockdep_hardirqs_on+0x9c/0x150 [ 2229.757170][T32767] __do_fast_syscall_32+0xb6/0x2b0 [ 2229.757183][T32767] ? lockdep_hardirqs_on+0x9c/0x150 [ 2229.757207][T32767] do_fast_syscall_32+0x34/0x80 [ 2229.757220][T32767] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2229.757239][T32767] RIP: 0023:0xf7fa3539 [ 2229.757251][T32767] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2229.757263][T32767] RSP: 002b:00000000f5496590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 2229.757278][T32767] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f5496620 [ 2229.757288][T32767] RDX: 000000000000000f RSI: 00000000f7436ff4 RDI: 0000000000000000 [ 2229.757297][T32767] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 2229.757305][T32767] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2229.757313][T32767] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2229.757334][T32767] [ 2230.547365][T28592] usb 1-1: Using ep0 maxpacket: 16 [ 2230.567548][T28592] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 2230.586855][T28592] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2230.616945][T28592] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 2230.626462][T28592] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2230.656782][T28592] usb 1-1: Product: syz [ 2230.668687][T28592] usb 1-1: Manufacturer: syz [ 2230.685586][T28592] usb 1-1: SerialNumber: syz [ 2230.732956][T28592] usb 1-1: config 0 descriptor?? [ 2230.752478][T28592] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 2230.856914][T28592] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 2231.050482][T28592] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 2231.093277][T28592] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 2231.156045][ T312] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6470'. [ 2231.168925][T28592] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 2231.192297][T28592] em28xx 1-1:0.0: No AC97 audio processor [ 2231.271455][T28592] usb 1-1: USB disconnect, device number 63 [ 2231.299170][T28592] em28xx 1-1:0.0: Disconnecting em28xx [ 2231.346717][T28592] em28xx 1-1:0.0: Freeing device [ 2231.649364][ T326] netlink: 'syz.0.6474': attribute type 10 has an invalid length. [ 2231.824336][ T6289] hsr_slave_0: left promiscuous mode [ 2231.839494][ T6289] hsr_slave_1: left promiscuous mode [ 2231.862567][ T6289] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2231.974019][ T6289] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2231.996194][ T6289] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2232.279007][ T6289] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2232.633416][ T6289] veth1_macvtap: left promiscuous mode [ 2232.651713][ T6289] veth0_macvtap: left promiscuous mode [ 2232.682491][ T6289] veth1_vlan: left promiscuous mode [ 2232.731351][ T6289] veth0_vlan: left promiscuous mode [ 2233.355275][ T344] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6477'. [ 2233.837830][ T6289] team0 (unregistering): Port device team_slave_1 removed [ 2233.941007][ T6289] team0 (unregistering): Port device team_slave_0 removed [ 2234.623451][ T352] netlink: 'syz.6.6478': attribute type 10 has an invalid length. [ 2234.806685][ T344] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 2235.561741][ T6289] IPVS: stop unused estimator thread 0... [ 2235.577351][ T363] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 2235.907599][T26431] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 2236.041281][ T376] netdevsim netdevsim8 : renamed from netdevsim0 (while UP) [ 2236.116951][T26431] usb 10-1: Using ep0 maxpacket: 32 [ 2236.133140][T26431] usb 10-1: unable to get BOS descriptor or descriptor too short [ 2236.154311][T26431] usb 10-1: config 128 has an invalid interface number: 127 but max is 3 [ 2236.205280][T26431] usb 10-1: config 128 contains an unexpected descriptor of type 0x2, skipping [ 2236.258983][T26431] usb 10-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 2236.285196][ T375] kvm: kvm [369]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0x80004 [ 2236.376177][T26431] usb 10-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 2236.539834][T26431] usb 10-1: config 128 has no interface number 0 [ 2236.629496][T26431] usb 10-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 55, changing to 9 [ 2236.714029][T26431] usb 10-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid maxpacket 8496, setting to 1024 [ 2236.734988][ T391] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6485'. [ 2236.797525][T26431] usb 10-1: config 128 interface 127 has no altsetting 0 [ 2236.810445][T26431] usb 10-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 2236.832642][T26431] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2236.873622][T26431] usb 10-1: Product: syz [ 2237.001800][T26431] usb 10-1: Manufacturer: syz [ 2237.034752][T26431] usb 10-1: SerialNumber: syz [ 2237.616550][T26431] usb 10-1: USB disconnect, device number 3 [ 2237.781197][ T6132] udevd[6132]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2238.637744][ T414] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 2240.979083][ T439] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6490'. [ 2241.190070][ T439] 8021q: adding VLAN 0 to HW filter on device bond9 [ 2242.192501][ T463] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6493'. [ 2242.419388][T21922] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 2242.743102][ T478] netlink: 'syz.8.6496': attribute type 10 has an invalid length. [ 2243.138784][T21922] usb 6-1: config index 0 descriptor too short (expected 12592, got 77) [ 2243.221160][T21922] usb 6-1: config 55 has too many interfaces: 55, using maximum allowed: 32 [ 2243.266913][T21922] usb 6-1: config 55 has an invalid descriptor of length 0, skipping remainder of the config [ 2243.316871][T21922] usb 6-1: config 55 has 0 interfaces, different from the descriptor's value: 55 [ 2243.697345][T21922] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2243.721097][T21922] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2243.745762][T21922] usb 6-1: Product: syz [ 2243.777035][T21922] usb 6-1: Manufacturer: syz [ 2243.978560][T21922] usb 6-1: SerialNumber: syz [ 2244.675691][ T490] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6502'. [ 2245.087431][ T490] 8021q: adding VLAN 0 to HW filter on device bond10 [ 2245.128749][ T496] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 2245.807207][T21922] usb 6-1: USB disconnect, device number 35 [ 2248.279774][ T533] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 2249.388884][ T541] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2249.396204][ T541] IPv6: NLM_F_CREATE should be set when creating new route [ 2249.403528][ T541] IPv6: NLM_F_CREATE should be set when creating new route [ 2249.410794][ T541] IPv6: NLM_F_CREATE should be set when creating new route [ 2249.585886][ T545] netlink: 'syz.8.6513': attribute type 10 has an invalid length. [ 2251.727281][ T580] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6520'. [ 2288.651314][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 2288.658041][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 2295.846974][T15041] Bluetooth: hci3: command 0x0406 tx timeout [ 2350.091598][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 2350.098095][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 2402.577224][ T31] INFO: task kworker/1:13:21954 blocked for more than 143 seconds. [ 2402.585191][ T31] Not tainted syzkaller #0 [ 2402.590288][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2402.599171][ T31] task:kworker/1:13 state:D stack:22472 pid:21954 tgid:21954 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 2402.611360][ T31] Workqueue: usb_hub_wq hub_event [ 2402.616435][ T31] Call Trace: [ 2402.619800][ T31] [ 2402.622759][ T31] __schedule+0x1798/0x4cc0 [ 2402.627496][ T31] ? __pfx___schedule+0x10/0x10 [ 2402.632402][ T31] ? schedule+0x91/0x360 [ 2402.636689][ T31] schedule+0x165/0x360 [ 2402.641086][ T31] usb_kill_urb+0x1be/0x2d0 [ 2402.645648][ T31] ? __pfx_usb_kill_urb+0x10/0x10 [ 2402.651099][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 2402.657279][ T31] usb_start_wait_urb+0x18c/0x4c0 [ 2402.662355][ T31] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 2402.668105][ T31] ? usb_alloc_urb+0x46/0x150 [ 2402.674332][ T31] usb_control_msg+0x232/0x3e0 [ 2402.679273][ T31] hub_port_init+0xbf9/0x2800 [ 2402.684003][ T31] hub_event+0x2532/0x4a20 [ 2402.688514][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 2402.693795][ T31] ? __pfx_hub_event+0x10/0x10 [ 2402.698655][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 2402.704420][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2402.709780][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 2402.715524][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 2402.721442][ T31] process_scheduled_works+0xae1/0x17b0 [ 2402.727184][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 2402.733303][ T31] worker_thread+0x8a0/0xda0 [ 2402.738011][ T31] kthread+0x711/0x8a0 [ 2402.742118][ T31] ? __pfx_worker_thread+0x10/0x10 [ 2402.747364][ T31] ? __pfx_kthread+0x10/0x10 [ 2402.751994][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2402.757377][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 2402.762617][ T31] ? __pfx_kthread+0x10/0x10 [ 2402.767713][ T31] ret_from_fork+0x4bc/0x870 [ 2402.773796][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 2402.779026][ T31] ? __switch_to_asm+0x39/0x70 [ 2402.783812][ T31] ? __switch_to_asm+0x33/0x70 [ 2402.788720][ T31] ? __pfx_kthread+0x10/0x10 [ 2402.793341][ T31] ret_from_fork_asm+0x1a/0x30 [ 2402.799149][ T31] [ 2402.802270][ T31] [ 2402.802270][ T31] Showing all locks held in the system: [ 2402.811565][ T31] 1 lock held by khungtaskd/31: [ 2402.816446][ T31] #0: ffffffff8df3d6e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 2402.826440][ T31] 2 locks held by getty/5583: [ 2402.831228][ T31] #0: ffff88814e3b10a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 2402.841165][ T31] #1: ffffc9000362b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 2402.851399][ T31] 5 locks held by kworker/1:13/21954: [ 2402.856843][ T31] #0: ffff8880206a7148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 2402.868398][ T31] #1: ffffc9001036fba0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 2402.881633][ T31] #2: ffff8881467aa198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a20 [ 2402.891004][ T31] #3: ffff8881467ad518 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x21b8/0x4a20 [ 2402.901050][ T31] #4: ffff888145befe68 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x21e5/0x4a20 [ 2402.910966][ T31] [ 2402.913313][ T31] ============================================= [ 2402.913313][ T31] [ 2402.921832][ T31] NMI backtrace for cpu 1 [ 2402.921849][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 2402.921872][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2402.921885][ T31] Call Trace: [ 2402.921894][ T31] [ 2402.921903][ T31] dump_stack_lvl+0x189/0x250 [ 2402.921940][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2402.921970][ T31] ? __pfx__printk+0x10/0x10 [ 2402.922006][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 2402.922036][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 2402.922064][ T31] ? __pfx__printk+0x10/0x10 [ 2402.922092][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 2402.922129][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 2402.922158][ T31] watchdog+0xf60/0xfa0 [ 2402.922185][ T31] ? watchdog+0x1e2/0xfa0 [ 2402.922213][ T31] kthread+0x711/0x8a0 [ 2402.922247][ T31] ? __pfx_watchdog+0x10/0x10 [ 2402.922268][ T31] ? __pfx_kthread+0x10/0x10 [ 2402.922317][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2402.922347][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 2402.922377][ T31] ? __pfx_kthread+0x10/0x10 [ 2402.922408][ T31] ret_from_fork+0x4bc/0x870 [ 2402.922435][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 2402.922466][ T31] ? __switch_to_asm+0x39/0x70 [ 2402.922484][ T31] ? __switch_to_asm+0x33/0x70 [ 2402.922502][ T31] ? __pfx_kthread+0x10/0x10 [ 2402.922534][ T31] ret_from_fork_asm+0x1a/0x30 [ 2402.922572][ T31] [ 2402.922581][ T31] Sending NMI from CPU 1 to CPUs 0: [ 2403.070347][ C0] NMI backtrace for cpu 0 [ 2403.070377][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 2403.070399][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2403.070412][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 2403.070446][ C0] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 93 b1 21 00 f3 0f 1e fa fb f4 c8 e6 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 2403.070464][ C0] RSP: 0018:ffffffff8dc07d80 EFLAGS: 000002c6 [ 2403.070481][ C0] RAX: 29a29065d6918800 RBX: ffffffff81967b47 RCX: 29a29065d6918800 [ 2403.070497][ C0] RDX: 0000000000000001 RSI: ffffffff8d70e436 RDI: ffffffff8bbf08e0 [ 2403.070510][ C0] RBP: ffffffff8dc07ea8 R08: ffff8880b8832fdb R09: 1ffff110171065fb [ 2403.070525][ C0] R10: dffffc0000000000 R11: ffffed10171065fc R12: ffffffff8f7cee70 [ 2403.070540][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1b92a40 [ 2403.070553][ C0] FS: 0000000000000000(0000) GS:ffff88812613b000(0000) knlGS:0000000000000000 [ 2403.070569][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2403.070582][ C0] CR2: 0000563a32016168 CR3: 000000000dd38000 CR4: 00000000003526f0 [ 2403.070599][ C0] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 2403.070612][ C0] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 2403.070631][ C0] Call Trace: [ 2403.070638][ C0] [ 2403.070646][ C0] default_idle+0x13/0x20 [ 2403.070664][ C0] default_idle_call+0x73/0xb0 [ 2403.070684][ C0] do_idle+0x1e7/0x510 [ 2403.070709][ C0] ? __pfx_do_idle+0x10/0x10 [ 2403.070741][ C0] cpu_startup_entry+0x44/0x60 [ 2403.070762][ C0] rest_init+0x2de/0x300 [ 2403.070783][ C0] start_kernel+0x3ae/0x410 [ 2403.070806][ C0] x86_64_start_reservations+0x24/0x30 [ 2403.070834][ C0] x86_64_start_kernel+0x143/0x1c0 [ 2403.070862][ C0] common_startup_64+0x13e/0x147 [ 2403.070896][ C0] [ 2411.529896][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 2411.536290][ T1300] ieee802154 phy1 wpan1: encryption failed: -22