last executing test programs: 25m41.222861823s ago: executing program 32 (id=5690): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) memfd_create(&(0x7f0000000000)=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2) socket(0x400000000010, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x7ffe, 0x0, 0x9, 0x736, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0xffffffffffffffb9) unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) semctl$SETALL(0x0, 0x0, 0x14, &(0x7f0000000040)) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f00000001c0)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x40000000, 0x0, 0x0, 0x0, 0x0, 0x80000100], 0x0, 0x0, &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}]}, 0xe0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x7, 0x4, 0x100, 0x4, 0x8, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x9, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000010000085000000500000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, 0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2c0000) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) unshare(0x2c020600) r7 = msgget$private(0x0, 0xef) msgctl$IPC_RMID(r7, 0x0) write$binfmt_misc(r6, 0x0, 0x0) write$binfmt_misc(r6, &(0x7f0000000040), 0xe09) 25m38.780353555s ago: executing program 33 (id=5702): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) bind$xdp(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x64, 0xfffffe0000000001, 0x3, 0xffffffff}, 0x0) io_setup(0x8, &(0x7f0000004200)) syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_tables_matches\x00') r2 = syz_mount_image$fuse(0x0, 0x0, 0x4028, 0x0, 0x0, 0x0, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r4, 0x40046104, &(0x7f0000002740)) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,use', @ANYRES16=r0, @ANYBLOB=',grou', @ANYRESDEC=0x0, @ANYRES32=r1, @ANYBLOB="b4b743eb58df7349c2f8c2cf51ea7c12e5e27cb65806ab38e37d453433f64991efc223f8d7f6022729dea8bddecb4c972b38f3e5805804a2ac5e9dd8297386aeeb15ffc68745e696ba85c6f2d85a4451b457cd2c24933eb4766cf213a9edb87605e73cbc543faefd5cc0e464fea21ab47a30b1b0194bfdd639e29edc95741cd74985f56cbd7f9544b53cb59abb58df8de4713e10207f215816bd191017b925215584d985d71716f1560c7f2b807f570a31dcdcf832161ac4e6cc28e9bc990293f017f7f492f18f39d5327b20bec76183f0bc3a73aa", @ANYRESDEC, @ANYRES16=r2]) sendmsg$key(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020800000100000000000001000000"], 0x18}}, 0x0) io_setup(0x30, &(0x7f00000001c0)=0x0) pipe2$9p(&(0x7f00000000c0), 0x4000) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_submit(r5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'macvlan1\x00'}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x3, 0x0, 0xe}, &(0x7f00000000c0)={0x1c, 0x2, 0x3837, 0x7, 0xfffffffffffffffc, 0x0, 0x8}, 0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000500)={'ip6erspan0\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x0, 0x93, 0x8000, 0x4, 0x8a, 0xa4, 0xffb, 0x7, 0x8, 0xc3, 0x0, 0xd4200003, 0x3, 0x6, 0x6, 0x1000, 0x9, 0x3, 0x3, 0x1, 0xfffffffc, 0x8, 0x6, 0x6, 0x0, 0x7, 0x5, 0x100000, 0x767, 0xc, 0xd, 0xe, 0x2b12, 0xe, 0x6, 0x80001c00, 0xb, 0x5, 0xa, 0x2, 0x8000100, 0x1fc00000, 0x0, 0x11000, 0x8, 0x5, 0x79b, 0x2, 0x2, 0x7e, 0x6, 0x800a, 0xcd22, 0xf, 0xff, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x8, 0x17ffff, 0x4003, 0x2fd, 0x9, 0x0, 0xf7, 0x5, 0x3, 0x6, 0x9, 0x10, 0x9, 0x6, 0xe, 0x4, 0x100002, 0x8, 0x80000752, 0xa, 0x3, 0x24, 0x10001, 0x313, 0x1, 0x6, 0x6, 0x9, 0x8, 0xfdffffef, 0xffffffff, 0x41, 0x1084, 0x100, 0x5, 0x252, 0x81, 0x1, 0xaa0c, 0x80, 0x5, 0x0, 0xb, 0x2, 0xd9a, 0xd, 0x2e2, 0xffffdffc, 0x43, 0x5, 0x9, 0x8, 0x3, 0x4, 0x2, 0x41b, 0xa, 0x9, 0x6, 0x401, 0x66d1, 0x9, 0x4, 0x8, 0x7, 0xc5c, 0xffffffff]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 20m28.070140991s ago: executing program 34 (id=6903): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000406d04070a00000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000000100)={0xffffffffffffffa2, &(0x7f0000000280)={0x0, 0x30, 0x10, {0x10, 0xe, "fa809ead3e29c2a226e6579e85c6"}}, 0x0}, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) modify_ldt$write2(0x11, &(0x7f0000000200)={0x0, 0x20000800, 0x2000, 0x0, 0x3, 0x1, 0x1, 0x1}, 0x10) bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@abs={0x1}, 0x4f) r3 = socket$netlink(0x10, 0x3, 0x4) write(r3, &(0x7f0000000100)="29000000140005b7ff000000040860eb0101b6ff021596db2d6d6974b5d728aa4b5d02c26ed638eeb7", 0x29) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0xffffffff) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = memfd_create(&(0x7f0000000440)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+ \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9f \xe0\x9cgq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz\x03\x00\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92 \x00*wLO\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5y`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\f\xc9\xc5H\x0f;\xd3\xe2\at\x9bJ\xe6\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xee\xdc\xef\xbap@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)\xdeA\x1ed\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\r\xe9\xe5\x8b&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xeaNg\x02\xcd\xfd\x1a}.\xd3\"x\x89/8H\xc2\x93B\na)\x86\xa9U\xa0\xb7\x18\xfb\xe9\xd1\x97\xf6\xb8\xebN\xe2\x18\x04[\xabW}\xb1\xffo\xae~=\x9dd\x9f\x92\xd2[\xb8\xb6\x1a\x02c\xa1\xd1H\xb7@\x06\x96s\xef\xee\x92\xfaC\x15+\x84%h1O\xe2\xb8\xd3\x19R\x00\f\n\x1cpEn\xad\xa7IRf\xc65\x15<}\xb8\x05\xe4\xb7\x9e\xf3\xda\xdavzB\xf8qj\x9e\xe4\xbd\x05\xcfx\xb5\x12\t\xe0\xf2\'f\xf4+\xb3\xdeA6\x10O\xdd\x9c\xf7B', 0x7) fcntl$addseals(r7, 0x409, 0x8) ioctl$FS_IOC_RESVSP(r7, 0x40305829, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4000}) ioctl$SG_GET_REQUEST_TABLE(0xffffffffffffffff, 0x2286, &(0x7f00000000c0)) madvise(&(0x7f0000e56000/0x4000)=nil, 0x4000, 0x11) r8 = syz_open_dev$usbfs(&(0x7f0000000040), 0x800, 0x400) ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) ioctl$USBDEVFS_DROP_PRIVILEGES(r8, 0x4004551e, &(0x7f0000000080)=0x7) r9 = syz_open_dev$video4linux(&(0x7f0000000000), 0x7, 0x21882) ioctl$VIDIOC_G_EXT_CTRLS(r9, 0xc040564a, &(0x7f00000000c0)={0x0, 0x80080003, 0x100f, 0xffffffffffffffff, 0x0, 0x0}) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x503, 0x2000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20a42}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bond={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x5}, @IFLA_BOND_PRIMARY_RESELECT={0x5, 0xc, 0x2}, @IFLA_BOND_PRIMARY={0x8}]}}}]}, 0x4c}}, 0x0) 19m34.760441615s ago: executing program 35 (id=7097): syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r0 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)="39135be5", 0x4}], 0x1, 0x4, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x2000) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) munlock(&(0x7f00007fe000/0x800000)=nil, 0x800000) connect$inet6(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) cachestat(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x3) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000000000)={0x1a, {"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", 0x1000}}, 0x1006) 15m24.081060452s ago: executing program 36 (id=8027): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.swap.current\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000080)=0x9, 0x12) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4000003, 0x13, r1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000540)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f00000060c0)=[{{0x0, 0x0, 0x0, 0x4102}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000fc0)="25a522c82b4a05f8bf97101a71dc2ce0978d0ab2c95a66bac25ed2f2351c7ff41ddeb903bc3913b15df63090a75d8b8979d341d982648c47ecdaa3dc547a166c56", 0x41}], 0x1}}], 0x2, 0x4000000) 9m13.677182264s ago: executing program 37 (id=9520): r0 = socket(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a3100000000080005"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800"], 0x48}}, 0x4084) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 7m16.571063148s ago: executing program 4 (id=9957): syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0x102) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x0, 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)=@generic={&(0x7f0000000580)='./bus\x00', 0x0, 0x8}, 0x18) openat$vsock(0xffffffffffffff9c, 0x0, 0x2c0c2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x5}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000f40)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) socketpair$unix(0x1, 0x1, 0x0, 0x0) poll(0x0, 0x0, 0x9) setitimer(0x2, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x88}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000002000000000f40600000a14000000020a01"], 0x3c}, 0x1, 0x0, 0x0, 0x4011}, 0x4000094) prlimit64(0x0, 0x0, 0x0, &(0x7f0000000180)) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002640)=@ipv4_newrule={0x24, 0x20, 0x301, 0x70bd2c, 0x25dfdbff, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10}, [@FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x2c}]}, 0x24}}, 0x8800) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c0000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="01980000031300001c0012800900010069706970000083000c00028008000300e00000015c413394c2cd647ccea14a0fa72abaaded37e53e987e722424214f79ed64"], 0x3c}}, 0x0) pwrite64(0xffffffffffffffff, &(0x7f00000008c0)='/', 0x1, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x7, 0x11, r3, 0x6695000) lseek(0xffffffffffffffff, 0x0, 0x4) 7m14.441048229s ago: executing program 4 (id=9964): syz_usb_connect(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) r2 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r3 = syz_io_uring_setup(0x264d, 0x0, &(0x7f0000000080), &(0x7f0000000340), 0x0) io_uring_enter(r3, 0x0, 0x3, 0xb, 0x0, 0x0) write$binfmt_script(r2, &(0x7f00000002c0)={'#! ', './file0', [], 0xa, "1f410e2852ad52cb07410969e814977e4f2c4a80522094786c8673fb61cf8b86bd030000005a3c7c04055f1f70e4064d46b2bb9e5100d446bb6afb2c0fc07b58f4a9c1006a0b6c05639e23ec12979ff9b48ca61e6dec58682449c75d86eb4337b8d343ed9c18927289d3d788fa281a5742690ff5a505cfff34fc1503afbfd2d44b50e4ca119f67b2890064"}, 0x96) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b700000012edfffebfa30000000000000703000028feffff7a0af0fff8ffffff61a4f0ff000000003e040000000000005d000000000000000704000012da0aff2500000017ffffffae040000000000007b0a00fe000000006e04000000000000c6000000000000009500000000000000023bc065b7a379d17cf9333379fc9e84af69912435f1b6a693002e7f3be3619184a0b139d8d4209c8ef1e50b91f32050e436fe275daf51efd601b6482a0800000098efd2a102ee010400006e7a1de4a21f379dbf01de00b1b564fef3bef70548aed0d600c095199fe3ff3128e599b0eaebbdbd7359a48f5b0afc532ef58de3c1b7646cb7798b3e6440c2fbdb00a3e35208b0bbf12cd8dff095edc710e4000000000000009fbe4b61a615c6c57a2b649dc74a1a610643b08d9ec21ead2ed51b104d4d91af25b8123deda8a3658d42ecbf28bf6d8e8afcb913466aaa7f6df70252e79166d8582755a314d31a76e42f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0800000000000000d5f728d236619074d6ebdf098bc908f50ae728a40f9411fe7226a4040b96e37c4f46010400000000c3da29faf75ddd1aa96960bca97af133824b881cc1f62c0f8f8f0e8d76b86f9c45636614786f5a2cb77230a874640dcbe0b20bb77c022d4cab080078fce8c5c81b7037181fc2f18f781aaa6e2957d7e39cc1baddcb7ec6667e699f24e41697ee7ea23e4b29a8b6cc9a1f5a7b3caae05f13792292cb949b3aab06b1e042ff2164d80c605532b18ab1c156b97e5889685a96949e4cb40df77b8bb84b0e733a63784ccc214d930cbb7e090df9a2867b3acec439c163fc8706869ada11390d4dbcf840fa68e7d7071b53ac29df826f8ae6d6e18c1eacf5bf870768d5217e9bb5a05d9e224e67f1231bd236ed200073824d93c4e1a0f50a74bb4850486727d970acc546087acbf30f2f8165b47ba56dfadd14b306e98931485747292c6fe6e188750cf4f87cce2aa7d67c7133a9f05954cde298a35ea6d715ba80aee63300000000000000000000000000000000000040000000000000000386000000b854adb4f8080064e8407c6bdb37114c80fbaa4a0ec5aaf4b0ac6f2128668279eb6fc144344e2d461c9a1be8fa0061ea9d55ee4716bea8e1cebf9ed39325ab4c5530dd6ee9fffc00000000000000d7c5af73c683625aaad5eda5004a76c9f8975ed4c5e4eb3e77e9885f69754932609f19e2f615a01cb6d17fbf5cb539403cb0572534f054d5514ad8264f7b029b2bdf2ca4958a62a6e744f9a4c1e646e1dd2ca19583f0f8b0dc53debd7d44f334e6ed7445a9580f970e483b307c4b3c018bc194b23d37e6a2e52d8288e5aab6fec586d52386e8c07a88c88e8faec5f1b16b2014f6952ce7d6be12c6bdb9651ca6fc907061be311d1354e6295698594a73136237bee068d3819400e43544830a3f74b7942f22336953978a5b2032da4238cc61162c04c1297395b73e18c9387615a2bc87d9e2445f3d323d3fac347926a4bac694c55fe9d145906d410f58f1951405d10504efe402cae085afef5dbd617e87ddbd239e4a50d7eb8e327fb5db12cbd6a9efe8e671c4f251cafffe3400a670d14b9b3cd8d86e492997a0168c022ef3536bd1dc731f4f9f8cb6c3857fb8aaaa95024f8da775f72950212b84fc6133ae14d1429cd4905dabb52e43af7e65acf97b4951fa1e967d16a5ed642efc855a4a46b85cd079934ad3188276efae9387eaa232697526e24b5d4fded86c3811ccd00520150b16000080122965558074956da5e4c3bbefcb64aa8be4456ed2caf0f467b6bbf3aa4371f5e76ab3f60afea80bb066aafb7517f787b090f419a20278a3c779e03afd9a6af6fd518e5dce030f88ec5a5cb7601a161da0f80893220800c523040d13e1f1300c2c6555bce60d95dd3288e53435713f03add23f14c8db5555c62de4f626483632a2ab547f88dd6efec73a0271a19ca3aa860aa4dcaeeb9bd91a0cb429efae2a5fcc08b3a572969bbe917d1767e38ba49e3e57fafea83e495a6a1d1a4ebf83434986091dd66ffe3ffed0c39552a312e2db596d9c827e02f6fc13c8ddbb50bfd7dd8aa2f35f259fc83e007fe79d2d25e30830b92fca00a292dd3b856faa4b7e66e1b64505f65900839df71a97d4d07d37f7ecf8ed9a22da26ae674bba16c204f6b2f8f74fc56b7126d7c11ece6e88ec41192aaee75415c58d264a2b6adae02c821b62428902aad499825ab85a348638384cd12e61dbde5c47056f0a20b4e2a2328d5db5cfe56557a129e6be231acf5f57995c60d9fca5f63a0dfd18054717120bda466d04774b53208ad8b022719ca77a4e0a66b4708f791d849a5e2aaa0074a9560ede2600df5a5c41392fe9460080fcb1e65233fb8dbeec4c86dbcf6a0673e38d2d3615e5bfbde44afe0fa7564231fff7e7f1f3ad68492dd2ccb1decb15b5d7d3e37e8b7d28921c4b9280979521173f322df408d9818b6cc400098abb869921911480a876fbba698801937e8b4264eb6f5137bdaa075f1488d22230592a79000000000000000000000000000000000000000000110000000000000000000000000000000000000000000000000000000000000000002f316aa0886c174b73decb46c1c85edf50d8fcbac5ff76b365611666da86a8e65b308706bd7c000000000000003f7cd4d5cb9076b81b7741ec03877afb5237ea1694addebc14c3ae49f88c462ea2050acf2d9a97d3be29a5614d1eba2c98cf0236401e02d7c445e50f76419ab4f78f67a09e63dd4faa2e7b59399f055f2fa278783f26d0a52aefb0a5ef0b41e14a6fe6b8306206670b84894e901a523fcbadfeff535f2514bc834e876810d9a6a78e70a9e22860c36a724770b4185de44db6bf21fef32a8d5b36d9014f38fee012365f963b2a85e7d8075c333475b9f0284405e3127dde7e41285fbe0bdd370c06c6a41744c3d24eab511317f97b7b4a1c2ec33fedc46e9bf0fa640eebd3d58f0ebdb7cb8ccffd6d6ab7e0e843591d2618e2d2cdc7081c8fafffe9c3500800000087de4ee7aac6478d99de7dd82bef044a6d33c789d566c90c46ad581aa22f910547a77d55e26bf19f1d4661550b177ef53933a305e69b8a95119dcf5bda599d625054776151b2cd1fcde238bdc527594a6c17aa9728af24e2bb7a3830e7092b01b119ea4e7e7f0e21527d622cc29c9f0c8720195368f8374337ab4d130619d93c5ef37e7ddd0b2da147e6e513455b88753452de959a6cbfa1ffbc7ad5d8c3b48017fd31dcf72f337b639253f44cb27a12174bc4c191e21015d0c431a71906eb9c6a14c8a060459ef26787ce3d1cbfd5cc459f0048b5d06f6cbd3e9b34c89f3fb2f951ae81d7fcc8bc0000000000000000000000000000000000000000009231feef3117197c796369f776c8b2ea3970f358107945d9e74e9bdfa58e68b65a9201bc4b73b431df5aa29f363917f90e3fa1eaf553db1c761dd9b634a9c4d7c21d24fe6d953ed9438cad0f8dfe03e5e2f73019352f1fb682a5a6ebbf24ebc49e3d7058e696eb3f4b642f36c9006c0067e24a64aa8c53dd824a4ee271e35ed90000800847683c08bfda74a143c855030ae004ac797c575c202d8091eb77565212548ead770d680000000000"], &(0x7f00000001c0)='GPL\x00'}, 0x48) close(r2) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9fd, 0x84, 0x105}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x0, 0x800, r4}, 0x38) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x20004804, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3e}}, 0x10) syz_emit_ethernet(0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa0800450000280000000000069078ac1414bbac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="ffffff7f00000800"], 0x0) 7m12.9200182s ago: executing program 1 (id=9972): socketpair$unix(0x1, 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x2}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) r3 = syz_open_procfs(0x0, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="ac1e01011f0000000100000005000000e001010064010100ffffffff"], 0x24) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r4, &(0x7f0000000580)="17", 0xfdef, 0x10008095, 0x0, 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x254, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x40, 0x9, "", [{{0x9, 0x4, 0x0, 0x7, 0x2, 0x3, 0x1, 0x2, 0x4, {0x9, 0x21, 0x7bd, 0x0, 0x1, {0x22, 0xdae}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x0, 0xc, 0xe7}}}}}]}}]}}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0}) bind$alg(r3, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'fpu(pcbc(aes-aesni))\x00'}, 0x58) syz_usb_connect$cdc_ncm(0x6, 0x76, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r6, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x0, 0x800, 0xbbba, 0x0, 0x18, 0x0, {}, {0x0, 0xfffffffd, 0xfffffffe}, {0x0, 0xffff0000}, {0x1000000}, 0x0, 0x3f0, 0x0, 0xd613, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x100}) 7m12.210762387s ago: executing program 7 (id=9974): r0 = socket(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a3100000000080005"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}}, 0x4084) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) 7m11.814745589s ago: executing program 7 (id=9975): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 7m11.431554385s ago: executing program 7 (id=9976): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0x3, &(0x7f0000000180)=0x8, 0x4) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) syz_emit_ethernet(0xbe, &(0x7f0000000440)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @empty, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xac, 0x0, 0x0, 0xfb, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x24, 0x0, {0x24, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @loopback, @rand_addr=0x640100fe, {[@cipso={0x86, 0x75, 0xffffffffffffffff, [{0x0, 0xe, "08c82ce8da6ee06cb8dd9452"}, {0x5, 0x9, "02270e000042eb"}, {0x0, 0xe, "7434954373561de584b703c8"}, {0x0, 0x9, '\x00\x00\x00\x00\x00\x00\x00'}, {0x2, 0x5, "cfa11c"}, {0x0, 0x10, "8475be675de6a70a8525dc91e5c6"}, {0x6, 0xa, "0000000000800000"}, {0x7, 0x11, "73bc23f9ffffffa30900a301c84600"}, {0x0, 0x11, "c8f46976e79ea788f03d9d3205927e"}]}, @cipso={0x86, 0x6, 0x20}]}}}}}}}, 0x0) 7m11.260271618s ago: executing program 7 (id=9977): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, 0x0, 0x0) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) syz_emit_ethernet(0x8a, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb81"], 0x0) 7m11.176210709s ago: executing program 9 (id=9978): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2e) ioctl$KVM_CAP_X86_BUS_LOCK_EXIT(r2, 0x4068aea3, &(0x7f0000000400)={0xc1, 0x0, 0x3}) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000280)={0x1, 0x0, [{0xc0011029}]}) name_to_handle_at(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1100) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c00000010008506000000000000000000000000027e964216475d37857ab5289f259d1b2d904b3bc13bf60da5099841cb97d4a94ba75a4bc93cbe7410b0a20d77213aea09b85c9d51b5f256fa665e", @ANYRES32=r6, @ANYRES8=r1], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @broadcast}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) io_uring_register$IORING_REGISTER_ENABLE_RINGS(0xffffffffffffffff, 0xc, 0x0, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c01010000000000000000", @ANYRES32=0x0, @ANYBLOB="0005000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r9, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000) 7m10.948118261s ago: executing program 7 (id=9979): socketpair$unix(0x1, 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x2}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) r3 = syz_open_procfs(0x0, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="ac1e01011f0000000100000005000000e001010064010100ffffffff"], 0x24) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r4, &(0x7f0000000580)="17", 0xfdef, 0x10008095, 0x0, 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x254, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x40, 0x9, "", [{{0x9, 0x4, 0x0, 0x7, 0x2, 0x3, 0x1, 0x2, 0x4, {0x9, 0x21, 0x7bd, 0x0, 0x1, {0x22, 0xdae}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x0, 0xc, 0xe7}}}}}]}}]}}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0}) bind$alg(r3, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'fpu(pcbc(aes-aesni))\x00'}, 0x58) syz_usb_connect$cdc_ncm(0x6, 0x76, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r5 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000300)={0x1, 0x0, 0x0, 'queue1\x00'}) socket$nl_route(0x10, 0x3, 0x0) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r6, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x0, 0x800, 0xbbba, 0x0, 0x18, 0x0, {}, {0x0, 0xfffffffd, 0xfffffffe}, {0x0, 0xffff0000}, {0x1000000}, 0x0, 0x3f0, 0x0, 0xd613, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x100}) 7m10.946142549s ago: executing program 2 (id=9989): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x33fe0}, 0x33fe0}}, 0x0) sendmsg$AUDIT_TTY_GET(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x3f8, 0x20, 0x70bd27}, 0x10}, 0x1, 0x0, 0x0, 0x8040}, 0x20000000) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYRES64=r1, @ANYRES8=r0, @ANYRESOCT=r0, @ANYRES16=r1, @ANYRES64=r0, @ANYRES32=r1, @ANYRESOCT], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000600)=ANY=[@ANYRESOCT], 0xb0}, 0x1, 0x0, 0x0, 0x4000854}, 0x20040040) r2 = openat$random(0xffffff9c, &(0x7f0000000000), 0x1c9402, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = eventfd2(0x3, 0x1) ioctl$KVM_IRQFD(r4, 0x4020ae76, &(0x7f0000000240)={r5, 0x7fc, 0x2, r5}) ioctl$KVM_SET_IRQCHIP(r4, 0xae64, 0x0) ioctl$KVM_SET_PIT2(r4, 0xae71, &(0x7f00000002c0)={[{0x10000, 0x6, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff, 0x80, 0x1, 0x0, 0x0, 0x100000000000000}, {0xffffffff, 0x0, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x10, 0xc}, {0x10000, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x21, 0x3, 0xfd, 0x0, 0xfe, 0x0, 0x800}]}) ioctl$KVM_IRQFD(r4, 0x4020ae76, &(0x7f0000000340)={r5, 0x4, 0x2, r5}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x3, 0x6, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x10, 0x2, 0x9, 0x0, 0xffffffffffffffff, 0x10000}, 0x48) r8 = socket$netlink(0x10, 0x3, 0x5) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000ac0)=@ipv6_newroute={0x44, 0x18, 0xa01, 0x70bd2c, 0x25dfdbfb, {0xa, 0x20, 0x10, 0x0, 0xfd, 0x0, 0xc8, 0x0, 0x2000}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x8, 0x8}}, @RTA_GATEWAY={0x14, 0x5, @empty}, @RTA_PRIORITY={0x8, 0x6, 0x100}]}, 0x44}, 0x1, 0x2}, 0x10) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000180)={0x0, 0x2, 0x1, r5, 0x1}) close(r6) ioctl$EXT4_IOC_MOVE_EXT(r7, 0xc028660f, &(0x7f00000001c0)={0x0, r2, 0x8, 0x40, 0x2, 0xb038}) ioctl$BTRFS_IOC_SNAP_DESTROY(r2, 0x5000940f, 0x0) 7m10.64605508s ago: executing program 2 (id=9980): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) epoll_create1(0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r3, 0xf507, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000280)={'ip6gre0\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x2f, 0x40, 0x6, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x40, 0x700, 0x3ff, 0x9}}) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000480)={{{@in6, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@local}}, &(0x7f00000002c0)=0xe4) sendmsg$nl_xfrm(r2, &(0x7f00000006c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2100}, 0xc, &(0x7f0000000340)={&(0x7f0000000600)=@newpolicy={0xbc, 0x13, 0x300, 0x70bd2c, 0x25dfdbfe, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@empty, 0x4e24, 0x0, 0x4e21, 0x1, 0xa, 0x80, 0xe0, 0x2f, r4, r5}, {0x8, 0x8, 0xd5, 0x0, 0x7fffffffffffffff, 0x8, 0x4, 0x100000000}, {0x0, 0x1, 0x9, 0x10}, 0x1, 0x6e6bb4, 0x2, 0x1, 0x0, 0x1}, [@XFRMA_SET_MARK_MASK={0x8, 0x1e, 0xe2e}]}, 0xbc}, 0x1, 0x0, 0x0, 0x880}, 0x20008084) syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) r6 = socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) write$apparmor_exec(r2, &(0x7f0000000100)={'exec ', '\x00'}, 0x6) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r9 = timerfd_create(0x1, 0x0) readv(r9, &(0x7f00000005c0)=[{&(0x7f0000000000)=""/8, 0x8}], 0x10000000000000dc) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000080)={'ipvlan1\x00', &(0x7f0000000380)=@ethtool_drvinfo={0x3, "44bf2157ba0837cc6c450e0d9bb9a3f15f70e0baaee0f487300c69e5e3675304", "97cd6c6f76ddb68cf4e6d76528c61b0d2e3ecae0f71630a9ae7ee2dc78cde6e3", "b71ea046e49b75c5ea795f148c3985720347f16bc8ade5d521838859cddfb02c", "3ab9acfeb47ffca5fe6a903e40df13d0236e2c6128907dff7ba4c0a417bb81f3", "72ed4ffc51fbdd2b5d38677348ddb6f4d2cc684e224de57d731b2680a5ca7ca6", "be5fadf50f056e5d64664672", 0x1, 0x5, 0x5, 0x9, 0xea}}) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000200)=ANY=[], 0x6c}}, 0x20040080) r10 = syz_open_dev$vbi(&(0x7f00000000c0), 0x3, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r10, 0xc0285628, &(0x7f0000000040)={0x3, 0xff00, 0x0, 0x200, 0x6, 0x5, 0xc}) syz_open_dev$sndmidi(&(0x7f0000000040), 0x8000, 0x20040) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r2, &(0x7f0000000080)={0xf0002003}) 7m10.536210604s ago: executing program 4 (id=9981): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x3, 0x0, 0x0, 0x1, 0x5}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) (fail_nth: 1) 7m10.398361597s ago: executing program 9 (id=9982): socketpair$unix(0x1, 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_procfs(0x0, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="ac1e01011f0000000100000005000000e001010064"], 0x24) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r3, &(0x7f0000000580)="17", 0xfdef, 0x10008095, 0x0, 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x254, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x40, 0x9, "", [{{0x9, 0x4, 0x0, 0x7, 0x2, 0x3, 0x1, 0x2, 0x4, {0x9, 0x21, 0x7bd, 0x0, 0x1, {0x22, 0xdae}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x0, 0xc, 0xe7}}}}}]}}]}}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0}) bind$alg(r2, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'fpu(pcbc(aes-aesni))\x00'}, 0x58) syz_usb_connect$cdc_ncm(0x6, 0x76, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000300)={0x1, 0x0, 0x0, 'queue1\x00'}) socket$nl_route(0x10, 0x3, 0x0) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r5, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x0, 0x800, 0xbbba, 0x0, 0x18, 0x0, {}, {0x0, 0xfffffffd, 0xfffffffe}, {0x0, 0xffff0000}, {0x1000000}, 0x0, 0x3f0, 0x0, 0xd613, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x100}) 7m9.501726458s ago: executing program 4 (id=9983): syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0x102) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x0, 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)=@generic={&(0x7f0000000580)='./bus\x00', 0x0, 0x8}, 0x18) openat$vsock(0xffffffffffffff9c, 0x0, 0x2c0c2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x5}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000f40)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) socketpair$unix(0x1, 0x1, 0x0, 0x0) poll(0x0, 0x0, 0x9) setitimer(0x2, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x88}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000002000000000f40600000a14000000020a01"], 0x3c}, 0x1, 0x0, 0x0, 0x4011}, 0x4000094) prlimit64(0x0, 0x0, 0x0, &(0x7f0000000180)) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002640)=@ipv4_newrule={0x24, 0x20, 0x301, 0x70bd2c, 0x25dfdbff, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10}, [@FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x2c}]}, 0x24}}, 0x8800) r5 = memfd_create(&(0x7f0000000180)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x7f\x00~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x1) pwrite64(r5, &(0x7f00000008c0)='/', 0x1, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x7, 0x11, r3, 0x6695000) lseek(r5, 0x0, 0x4) 7m9.416009023s ago: executing program 1 (id=9984): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x54, &(0x7f0000000280)=[@in6={0xa, 0x4e21, 0x7ff, @private2, 0xeb2}, @in6={0xa, 0x4e21, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9}, @in6={0xa, 0x4e21, 0x9, @loopback, 0x7ab}]}, &(0x7f0000000180)=0x10) r1 = socket$netlink(0x10, 0x3, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000280)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_SREG={0x8}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x57}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_CSUM_TYPE={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0x8}, @NFTA_PAYLOAD_CSUM_FLAGS={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa4}}, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r1) sendmsg$IPVS_CMD_DEL_DAEMON(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f00000004c0)={0x8c, r4, 0x20, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xa4c1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}]}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xbb55}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40}, 0x804) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000340)="480000001400190d09034beafd0d36020a841a000000230f00000000a2bc5603ca00000f7f89004e00200000000101ff00c00e03000200000000000000000300005839c900910000", 0x48}], 0x1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000000)={0x40, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x40}}, 0x80) 7m8.468236426s ago: executing program 2 (id=9985): r0 = eventfd2(0x4, 0x800) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x13, r1, 0x0) syz_io_uring_setup(0x370a, 0x0, 0x0, 0x0, &(0x7f0000000000)) mremap(&(0x7f0000000000/0x9000)=nil, 0x600000, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) pselect6(0x40, &(0x7f0000000240)={0x1, 0x5, 0x8, 0x3, 0x3, 0xa, 0x3ff, 0x1}, 0x0, &(0x7f0000000300)={0x9, 0x2, 0x2, 0xffff, 0x0, 0xe, 0x7, 0x9}, 0x0, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000100)=""/147, 0x93}], 0x1) 7m8.35430141s ago: executing program 1 (id=9986): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 7m8.190013315s ago: executing program 2 (id=9987): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0x3, &(0x7f0000000180)=0x8, 0x4) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) syz_emit_ethernet(0xbe, &(0x7f0000000440)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @empty, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xac, 0x0, 0x0, 0xfb, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x24, 0x0, {0x24, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @loopback, @rand_addr=0x640100fe, {[@cipso={0x86, 0x75, 0xffffffffffffffff, [{0x0, 0xe, "08c82ce8da6ee06cb8dd9452"}, {0x5, 0x9, "02270e000042eb"}, {0x0, 0xe, "7434954373561de584b703c8"}, {0x0, 0x9, '\x00\x00\x00\x00\x00\x00\x00'}, {0x2, 0x5, "cfa11c"}, {0x0, 0x10, "8475be675de6a70a8525dc91e5c6"}, {0x6, 0xa, "0000000000800000"}, {0x7, 0x11, "73bc23f9ffffffa30900a301c84600"}, {0x0, 0x11, "c8f46976e79ea788f03d9d3205927e"}]}, @cipso={0x86, 0x6, 0x20}]}}}}}}}, 0x0) 7m8.007752446s ago: executing program 2 (id=9988): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000006c0)={0x84, &(0x7f0000000140)=ANY=[@ANYBLOB="200601000000360aef537f51d4bcae9d416826318be9f4ad486591454eedc0b868252d7cb2dc7f3ee8a4b636cedee004b4f890d4786d04b86770b9bea4acc7e2f6c0a27ffcdbafc9324ca74b025f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'team0\x00', {0x2, 0x4e21, @broadcast}}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f0000000480)={{0x80a0000, 0xf000, 0xc, 0x80, 0x4, 0x0, 0xa, 0x6, 0x0, 0xb, 0x6, 0xa4}, {0x0, 0x6000, 0xe, 0x8, 0x5f, 0x0, 0x0, 0x9, 0xf, 0x5, 0xee, 0xf}, {0x8000000, 0x0, 0x4, 0x8, 0xf0, 0x1, 0x8c, 0x6, 0x7, 0x99, 0xfd, 0x1}, {0x100000, 0x5000, 0x8, 0xe, 0x7, 0x5, 0x1, 0x87, 0x5, 0x2}, {0x10000, 0x8000000, 0xa, 0x0, 0x5, 0x4, 0xf9, 0x6b, 0x5, 0x0, 0xfd, 0x80}, {0xeeee8000, 0xeeef0000, 0x9, 0xf, 0x30, 0x3, 0x9, 0x8, 0x8, 0x7, 0xe, 0x8}, {0xe6ef8000, 0x0, 0x0, 0x3, 0x53, 0x4, 0x0, 0xb9, 0x7, 0x5, 0x6, 0x7}, {0xeeee0000, 0x1332b2000, 0x9, 0x7, 0xfe, 0x0, 0xc, 0x3, 0x0, 0x6, 0xf9, 0x6}, {0x3000, 0x6}, {0x1, 0x3}, 0x2, 0x0, 0x2000, 0x2, 0xd, 0x2000, 0x10000, [0xfffffffffffffffc, 0x4, 0x0, 0xa]}) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f00000005c0)={0x0, 0x0, @pic={0x9, 0x5, 0xf0, 0xd4, 0x40, 0x5, 0xfc, 0x1, 0xb0, 0x6f, 0x4, 0xf0, 0x7f, 0xff, 0x0, 0x7}}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000000)={[0x33, 0x790, 0x80000001, 0x17d, 0x400000004, 0xffffffffffffffff, 0xf1, 0x8, 0x0, 0x42, 0x0, 0x3b9, 0xffff, 0x0, 0x0, 0x8], 0x8000000, 0x3c4210}) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r6 = syz_open_dev$I2C(&(0x7f0000000100), 0xffff, 0x40840) ioctl$I2C_RDWR(r6, 0x707, &(0x7f0000000080)={&(0x7f00000000c0)=[{0x2416, 0x9a41, 0x0, 0x0}], 0x1}) 7m7.477860921s ago: executing program 4 (id=9990): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, 0x0, 0x0) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) syz_emit_ethernet(0x8a, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb81"], 0x0) 7m7.301059131s ago: executing program 4 (id=9991): socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket(0x1, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f0000000400003366"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r4, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r3}, 0x20) sendmmsg$unix(r3, &(0x7f0000001680), 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r5 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r6 = openat$binfmt(0xffffffffffffff9c, r5, 0x42, 0x1ff) close(r6) execveat$binfmt(0xffffffffffffff9c, r5, 0x0, 0x0, 0x0) close(0xffffffffffffffff) execveat$binfmt(0xffffffffffffff9c, r5, 0x0, 0x0, 0x0) execveat$binfmt(0xffffffffffffff9c, r5, &(0x7f00000004c0), 0x0, 0x1000) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r7, 0x11b, 0x5, &(0x7f0000000300)=0x3, 0x4) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x8, 0x0, 0xfffffe0000000002, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r10 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0xffa1, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r9, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x2c00, &(0x7f0000000180)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {}, 0x2c, {}, 0x2c, {[], [{@dont_hash}]}}) 7m7.224798795s ago: executing program 1 (id=9992): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x33fe0}, 0x33fe0}}, 0x0) sendmsg$AUDIT_TTY_GET(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x3f8, 0x20, 0x70bd27}, 0x10}, 0x1, 0x0, 0x0, 0x8040}, 0x20000000) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYRES64=r1, @ANYRES8=r0, @ANYRESOCT=r0, @ANYRES16=r1, @ANYRES64=r0, @ANYRES32=r1, @ANYRESOCT], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000600)=ANY=[@ANYRESOCT], 0xb0}, 0x1, 0x0, 0x0, 0x4000854}, 0x20040040) r2 = openat$random(0xffffff9c, &(0x7f0000000000), 0x1c9402, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = eventfd2(0x3, 0x1) ioctl$KVM_IRQFD(r4, 0x4020ae76, &(0x7f0000000240)={r5, 0x7fc, 0x2, r5}) ioctl$KVM_SET_IRQCHIP(r4, 0xae64, 0x0) ioctl$KVM_SET_PIT2(r4, 0xae71, &(0x7f00000002c0)={[{0x10000, 0x6, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff, 0x80, 0x1, 0x0, 0x0, 0x100000000000000}, {0xffffffff, 0x0, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x10, 0xc}, {0x10000, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x21, 0x3, 0xfd, 0x0, 0xfe, 0x0, 0x800}]}) ioctl$KVM_IRQFD(r4, 0x4020ae76, &(0x7f0000000340)={r5, 0x4, 0x2, r5}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x3, 0x6, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x10, 0x2, 0x9, 0x0, 0xffffffffffffffff, 0x10000}, 0x48) r8 = socket$netlink(0x10, 0x3, 0x5) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000ac0)=@ipv6_newroute={0x44, 0x18, 0xa01, 0x70bd2c, 0x25dfdbfb, {0xa, 0x20, 0x10, 0x0, 0xfd, 0x0, 0xc8, 0x0, 0x2000}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x8, 0x8}}, @RTA_GATEWAY={0x14, 0x5, @empty}, @RTA_PRIORITY={0x8, 0x6, 0x100}]}, 0x44}, 0x1, 0x2}, 0x10) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000180)={0x0, 0x2, 0x1, r5, 0x1}) close(r6) ioctl$EXT4_IOC_MOVE_EXT(r7, 0xc028660f, &(0x7f00000001c0)={0x0, r2, 0x8, 0x40, 0x2, 0xb038}) ioctl$BTRFS_IOC_SNAP_DESTROY(r2, 0x5000940f, 0x0) 7m6.732614257s ago: executing program 7 (id=9993): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x8, 0x3, 0x1f8, 0xb0, 0x11, 0x148, 0x0, 0x0, 0x164, 0x2a8, 0x2a8, 0x164, 0x2a8, 0x3, 0x0, {[{{@ip={@broadcast, @multicast2, 0x0, 0xff000000, 'wg1\x00', 'dvmrp0\x00', {}, {}, 0x67, 0x3, 0x2}, 0x0, 0x70, 0xb0}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x4d, 0xb, "127c993234450542d32a0830ed52cff70a28b296054a178f22e3100756bc"}}}, {{@ip={@loopback, @empty, 0x0, 0x0, 'veth0\x00', 'netdevsim0\x00', {}, {0xff}}, 0x0, 0x94, 0xb4, 0x0, {}, [@inet=@rpfilter={{0x24}, {0x9}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x254) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket$can_bcm(0x1d, 0x2, 0x2) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x3, 0x8}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@gettclass={0x24, 0x2a, 0x400, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x4, 0x3}, {0xfff1, 0x2}, {0xffff}}, ["", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x4000800) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x100}}, 0x40) r5 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_GET_ENDIAN(0x13, 0x0) r6 = openat$dlm_plock(0xffffff9c, &(0x7f0000000340), 0x20100, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r4, 0x84, 0x6d, &(0x7f0000000380)={0x0, 0xbc, "7c86bd455a207e7d2dbe711895bea4cdf216f46138dfff5ec3232b7680855074dd8f0689d824f65467b8b60d4bbd69190a6c6d2d694d422ee66fa8943ab63ae4cae963b72b1369b002ed65bae819429416200c8884b2b906baa12754831fb0a74d7f2291e612795f624e83e8dd7cf35b03ad79974222927a4456b32bca8190577b774e33bc9996a779c3276098dbef2bade4a8722f50b141f4076b4916eb94308b944fd0360d77591b4b92fe9ffd7be6bbb90a22bdc8e25bf2ec6d7c"}, &(0x7f0000000480)=0xc4) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r6, 0x84, 0x1a, &(0x7f00000004c0)={r7, 0xf2, "9c9ef749ae8cacb0ca15ec5b8d0f1e8649b1142565a864f2f815142668b1b91d20de515d1053dd8ddae2ace5fbaef4106e8bc0f2336da9da36586fd632e4579141d6e1933a557b492f50487ad9c51d125cea52b51c9ea6cdb1697ea7ccb57ac94970e08eb0f934ebfe2141f0ec41f09d485a3a610a644bfaeca9306a0c6c1e92126455d5f92d158059bbb1c68581e7ad93abafd0e01bd0e8e42e61066da10b18d0acaf1e19c60d9f5aed2f481ff4524076df454144f1e645d65c846a2b325aab2cd65a3a1d4eee858e8f7d032ac88671bb3dd6289d89aa858ffdf381d2aa7fb72932dbec822874a39210a70983de0002eaff"}, &(0x7f0000000600)=0xfa) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001880)={0x10001b, 0xfa}, 0x2c) syz_io_uring_setup(0x320, &(0x7f0000001280)={0x0, 0xb70f, 0x0, 0x0, 0x1, 0x0, r5}, &(0x7f0000000000), &(0x7f0000001180), &(0x7f0000000000)) r8 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) r9 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x1ff, 0x80) ioctl$SNDRV_PCM_IOCTL_RESUME(r9, 0x4147, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={@ifindex, 0xa, 0x1, 0x80000000, &(0x7f0000000040), 0x0, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0], &(0x7f0000000240), 0x0}, 0x40) getpeername(r5, &(0x7f0000000640)=@nl=@unspec, &(0x7f00000006c0)=0x80) ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, &(0x7f00000001c0)={0xffffffffffffffff}) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r5, r8, 0x32, 0x0, @val=@netkit={@void, @value=r11, @void, @void, r10}}, 0x1c) 7m6.725426555s ago: executing program 1 (id=9994): r0 = socket$kcm(0x1e, 0x2, 0x0) sendmsg$kcm(r0, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000040)={&(0x7f0000000800)=[{0x7f, 0x4001, 0x0, 0x0}, {0x1, 0x4210, 0x0, 0x0}], 0x2}) 7m6.654998611s ago: executing program 9 (id=9995): syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100008e88052086800095d89301020301090212000100000000090401"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000400)={&(0x7f0000000000)=[{0x6be3, 0x0, 0x2000, 0x0}], 0x1}) 7m5.026096886s ago: executing program 1 (id=9996): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) epoll_create1(0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r3, 0xf507, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000280)={'ip6gre0\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x2f, 0x40, 0x6, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x40, 0x700, 0x3ff, 0x9}}) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000480)={{{@in6, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@local}}, &(0x7f00000002c0)=0xe4) sendmsg$nl_xfrm(r2, &(0x7f00000006c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2100}, 0xc, &(0x7f0000000340)={&(0x7f0000000600)=@newpolicy={0xbc, 0x13, 0x300, 0x70bd2c, 0x25dfdbfe, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@empty, 0x4e24, 0x0, 0x4e21, 0x1, 0xa, 0x80, 0xe0, 0x2f, r4, r5}, {0x8, 0x8, 0xd5, 0x0, 0x7fffffffffffffff, 0x8, 0x4, 0x100000000}, {0x0, 0x1, 0x9, 0x10}, 0x1, 0x6e6bb4, 0x2, 0x1, 0x0, 0x1}, [@XFRMA_SET_MARK_MASK={0x8, 0x1e, 0xe2e}]}, 0xbc}, 0x1, 0x0, 0x0, 0x880}, 0x20008084) syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) r6 = socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) write$apparmor_exec(r2, &(0x7f0000000100)={'exec ', '\x00'}, 0x6) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r9 = timerfd_create(0x1, 0x0) readv(r9, &(0x7f00000005c0)=[{&(0x7f0000000000)=""/8, 0x8}], 0x10000000000000dc) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000080)={'ipvlan1\x00', &(0x7f0000000380)=@ethtool_drvinfo={0x3, "44bf2157ba0837cc6c450e0d9bb9a3f15f70e0baaee0f487300c69e5e3675304", "97cd6c6f76ddb68cf4e6d76528c61b0d2e3ecae0f71630a9ae7ee2dc78cde6e3", "b71ea046e49b75c5ea795f148c3985720347f16bc8ade5d521838859cddfb02c", "3ab9acfeb47ffca5fe6a903e40df13d0236e2c6128907dff7ba4c0a417bb81f3", "72ed4ffc51fbdd2b5d38677348ddb6f4d2cc684e224de57d731b2680a5ca7ca6", "be5fadf50f056e5d64664672", 0x1, 0x5, 0x5, 0x9, 0xea}}) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000200)=ANY=[], 0x6c}}, 0x20040080) r10 = syz_open_dev$vbi(&(0x7f00000000c0), 0x3, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r10, 0xc0285628, &(0x7f0000000040)={0x3, 0xff00, 0x0, 0x200, 0x6, 0x5, 0xc}) syz_open_dev$sndmidi(&(0x7f0000000040), 0x8000, 0x20040) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r2, &(0x7f0000000080)={0xf0002003}) 7m4.908471011s ago: executing program 9 (id=9997): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0xce97d8546979d458, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) r2 = socket$inet(0x2, 0x3, 0x9) shutdown(r2, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r3, 0x6, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000440)={0x80000000, 0xc011, 0x462}) r4 = fsmount(r3, 0x0, 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000040)={[{0x2b, 'cpuset'}]}, 0x8) syz_clone(0x8a140600, &(0x7f00000001c0)="07b5e42d30226aba87697ce3ff665d7cb4bdf0381b74230609ad5a0c5b8a9d5c2f3277994317083b76b0aedef0afef4267cf265f61c257cdf6b2b4f80e41dc603103f166", 0x44, &(0x7f0000000240), &(0x7f0000000340), &(0x7f0000000380)="646a21c1314836dab1375dc5370b85967842427f74c7fdda0fb7ef9233f6099289037fa8ede14a0147999b5b523275ef4abe7ff27941f54759b8ecf4d9f02b8e7d4d9dfadc80893ce8f09ba0bcc31b1ba7191c0c1c71e4bb4b162e670308b4d33e0f02aa5e24636f9c2d0db8a006018c1225f05d35d6e969f5fabf0a8c6ba2ea8675fa596d5d008285bc2bc52fea5fdafb52bfa310ecb3056c7f32881c0305e3ea74da8d09229309241efeed6eb72cf77247") r6 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r6, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000240)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r6, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000500)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) 7m4.232003284s ago: executing program 2 (id=9998): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010bd28710000000000000109022400010000000009040100010300000009210200000122050009058103"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETPERSIST(r2, 0x400454cb, 0x1) fremovexattr(r0, &(0x7f0000000100)=@random={'osx.', '+\x00'}) close(r2) r3 = socket(0x10, 0x3, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40046602, &(0x7f00000000c0)) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000022c0)={0x18, 0x16, 0xa01, 0x0, 0x0, {0x1e, 0x0, 0xc00e}, [@nested={0x4, 0x9}]}, 0x67}}, 0x0) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r3) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000280)={'ip6_vti0\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x4, 0x7, 0x81, 0x3ff, 0x48, @remote, @private1, 0x8000, 0x1, 0xe88f, 0x5}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f0000000300)={'ip_vti0\x00', &(0x7f00000003c0)={'ip_vti0\x00', 0x0, 0x700, 0x8, 0x10001, 0x24, {{0x4f, 0x4, 0x2, 0x3, 0x13c, 0x65, 0x0, 0x81, 0x29, 0x0, @loopback, @remote, {[@cipso={0x86, 0x71, 0x1, [{0x7, 0x11, "faecd78e46909cbdeefd099c29a455"}, {0x2, 0x12, "1c2833ac318aeec80573ec217eff15a9"}, {0x7, 0x12, "2cb32acb0af3efc4b9908b448cbe034e"}, {0x0, 0xd, "4e607d1894a4548bd27192"}, {0x1, 0x6, "6959ad53"}, {0x6, 0xd, "abb6f6fa62f1cba346a390"}, {0x5, 0x7, "1620d67e03"}, {0x2, 0xf, "bf1a71ccbba8da9869e89dbaa2"}]}, @generic={0x44, 0xd, "6686184b4b1be6d3e70c74"}, @end, @ssrr={0x89, 0x1b, 0xc5, [@multicast1, @loopback, @local, @multicast1, @private=0xa010100, @rand_addr=0x64010102]}, @generic={0x44, 0xf, "939e62429ec210c862ea1211d1"}, @generic={0x7, 0xd, "08d154f624c0a25b36dd17"}, @timestamp_addr={0x44, 0x1c, 0x5a, 0x1, 0x4, [{@local, 0xf3}, {@remote, 0x7}, {@local, 0x1}]}, @rr={0x7, 0x27, 0x4b, [@empty, @private=0xa010101, @empty, @multicast1, @multicast1, @loopback, @multicast2, @empty, @local]}, @cipso={0x86, 0x2c, 0x1, [{0x0, 0xb, "27410e8fd968577c7d"}, {0x2, 0xa, "8b966ad4a354b8d6"}, {0x7, 0x11, "f43da3396594b81dc8cba5ba3a5b92"}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_GET(r3, &(0x7f0000000640)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0x9c, r5, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4014}, 0x24008080) syz_usb_control_io(r1, &(0x7f00000002c0)={0x2c, &(0x7f0000000080)={0x0, 0xd, 0x5, {0x5, 0x22, "4a20ee"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000700)={0x24, 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="00030d"], 0x0, 0x0}, 0x0) 6m58.703811901s ago: executing program 9 (id=9999): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0x3, &(0x7f0000000180)=0x8, 0x4) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) syz_emit_ethernet(0xbe, &(0x7f0000000440)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @empty, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xac, 0x0, 0x0, 0xfb, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x24, 0x0, {0x24, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @loopback, @rand_addr=0x640100fe, {[@cipso={0x86, 0x76, 0xffffffffffffffff, [{0x0, 0xe, "08c82ce8da6ee06cb8dd9452"}, {0x5, 0x9, "02270e000042eb"}, {0x0, 0xe, "7434954373561de584b703c8"}, {0x0, 0x9, '\x00\x00\x00\x00\x00\x00\x00'}, {0x2, 0x6, "cfa11cab"}, {0x0, 0x10, "8475be675de6a70a8525dc91e5c6"}, {0x6, 0xa, "0000000000800000"}, {0x7, 0x11, "73bc23f9ffffffa30900a301c84600"}, {0x0, 0x11, "c8f46976e79ea788f03d9d3205927e"}]}, @cipso={0x86, 0x6, 0x20}]}}}}}}}, 0x0) 6m57.898421464s ago: executing program 9 (id=10000): syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0x102) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x0, 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)=@generic={&(0x7f0000000580)='./bus\x00', 0x0, 0x8}, 0x18) openat$vsock(0xffffffffffffff9c, 0x0, 0x2c0c2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x5}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000f40)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) socketpair$unix(0x1, 0x1, 0x0, 0x0) poll(0x0, 0x0, 0x9) setitimer(0x2, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x88}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000002000000000f40600000a14000000020a01"], 0x3c}, 0x1, 0x0, 0x0, 0x4011}, 0x4000094) prlimit64(0x0, 0x0, 0x0, &(0x7f0000000180)) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002640)=@ipv4_newrule={0x24, 0x20, 0x301, 0x70bd2c, 0x25dfdbff, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10}, [@FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x2c}]}, 0x24}}, 0x8800) r5 = memfd_create(&(0x7f0000000180)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x7f\x00~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x1) pwrite64(r5, &(0x7f00000008c0)='/', 0x1, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x7, 0x11, r3, 0x6695000) lseek(r5, 0x0, 0x4) 6m52.108143442s ago: executing program 38 (id=9991): socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket(0x1, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f0000000400003366"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r4, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r3}, 0x20) sendmmsg$unix(r3, &(0x7f0000001680), 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r5 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r6 = openat$binfmt(0xffffffffffffff9c, r5, 0x42, 0x1ff) close(r6) execveat$binfmt(0xffffffffffffff9c, r5, 0x0, 0x0, 0x0) close(0xffffffffffffffff) execveat$binfmt(0xffffffffffffff9c, r5, 0x0, 0x0, 0x0) execveat$binfmt(0xffffffffffffff9c, r5, &(0x7f00000004c0), 0x0, 0x1000) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r7, 0x11b, 0x5, &(0x7f0000000300)=0x3, 0x4) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x8, 0x0, 0xfffffe0000000002, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r10 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0xffa1, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r9, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x2c00, &(0x7f0000000180)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {}, 0x2c, {}, 0x2c, {[], [{@dont_hash}]}}) 6m51.60190914s ago: executing program 39 (id=9993): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x8, 0x3, 0x1f8, 0xb0, 0x11, 0x148, 0x0, 0x0, 0x164, 0x2a8, 0x2a8, 0x164, 0x2a8, 0x3, 0x0, {[{{@ip={@broadcast, @multicast2, 0x0, 0xff000000, 'wg1\x00', 'dvmrp0\x00', {}, {}, 0x67, 0x3, 0x2}, 0x0, 0x70, 0xb0}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x4d, 0xb, "127c993234450542d32a0830ed52cff70a28b296054a178f22e3100756bc"}}}, {{@ip={@loopback, @empty, 0x0, 0x0, 'veth0\x00', 'netdevsim0\x00', {}, {0xff}}, 0x0, 0x94, 0xb4, 0x0, {}, [@inet=@rpfilter={{0x24}, {0x9}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x254) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket$can_bcm(0x1d, 0x2, 0x2) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x3, 0x8}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@gettclass={0x24, 0x2a, 0x400, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x4, 0x3}, {0xfff1, 0x2}, {0xffff}}, ["", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x4000800) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x100}}, 0x40) r5 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_GET_ENDIAN(0x13, 0x0) r6 = openat$dlm_plock(0xffffff9c, &(0x7f0000000340), 0x20100, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r4, 0x84, 0x6d, &(0x7f0000000380)={0x0, 0xbc, "7c86bd455a207e7d2dbe711895bea4cdf216f46138dfff5ec3232b7680855074dd8f0689d824f65467b8b60d4bbd69190a6c6d2d694d422ee66fa8943ab63ae4cae963b72b1369b002ed65bae819429416200c8884b2b906baa12754831fb0a74d7f2291e612795f624e83e8dd7cf35b03ad79974222927a4456b32bca8190577b774e33bc9996a779c3276098dbef2bade4a8722f50b141f4076b4916eb94308b944fd0360d77591b4b92fe9ffd7be6bbb90a22bdc8e25bf2ec6d7c"}, &(0x7f0000000480)=0xc4) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r6, 0x84, 0x1a, &(0x7f00000004c0)={r7, 0xf2, "9c9ef749ae8cacb0ca15ec5b8d0f1e8649b1142565a864f2f815142668b1b91d20de515d1053dd8ddae2ace5fbaef4106e8bc0f2336da9da36586fd632e4579141d6e1933a557b492f50487ad9c51d125cea52b51c9ea6cdb1697ea7ccb57ac94970e08eb0f934ebfe2141f0ec41f09d485a3a610a644bfaeca9306a0c6c1e92126455d5f92d158059bbb1c68581e7ad93abafd0e01bd0e8e42e61066da10b18d0acaf1e19c60d9f5aed2f481ff4524076df454144f1e645d65c846a2b325aab2cd65a3a1d4eee858e8f7d032ac88671bb3dd6289d89aa858ffdf381d2aa7fb72932dbec822874a39210a70983de0002eaff"}, &(0x7f0000000600)=0xfa) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001880)={0x10001b, 0xfa}, 0x2c) syz_io_uring_setup(0x320, &(0x7f0000001280)={0x0, 0xb70f, 0x0, 0x0, 0x1, 0x0, r5}, &(0x7f0000000000), &(0x7f0000001180), &(0x7f0000000000)) r8 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) r9 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x1ff, 0x80) ioctl$SNDRV_PCM_IOCTL_RESUME(r9, 0x4147, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={@ifindex, 0xa, 0x1, 0x80000000, &(0x7f0000000040), 0x0, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0], &(0x7f0000000240), 0x0}, 0x40) getpeername(r5, &(0x7f0000000640)=@nl=@unspec, &(0x7f00000006c0)=0x80) ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, &(0x7f00000001c0)={0xffffffffffffffff}) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r5, r8, 0x32, 0x0, @val=@netkit={@void, @value=r11, @void, @void, r10}}, 0x1c) 6m49.109702126s ago: executing program 40 (id=9998): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010bd28710000000000000109022400010000000009040100010300000009210200000122050009058103"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETPERSIST(r2, 0x400454cb, 0x1) fremovexattr(r0, &(0x7f0000000100)=@random={'osx.', '+\x00'}) close(r2) r3 = socket(0x10, 0x3, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40046602, &(0x7f00000000c0)) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000022c0)={0x18, 0x16, 0xa01, 0x0, 0x0, {0x1e, 0x0, 0xc00e}, [@nested={0x4, 0x9}]}, 0x67}}, 0x0) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r3) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000280)={'ip6_vti0\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x4, 0x7, 0x81, 0x3ff, 0x48, @remote, @private1, 0x8000, 0x1, 0xe88f, 0x5}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f0000000300)={'ip_vti0\x00', &(0x7f00000003c0)={'ip_vti0\x00', 0x0, 0x700, 0x8, 0x10001, 0x24, {{0x4f, 0x4, 0x2, 0x3, 0x13c, 0x65, 0x0, 0x81, 0x29, 0x0, @loopback, @remote, {[@cipso={0x86, 0x71, 0x1, [{0x7, 0x11, "faecd78e46909cbdeefd099c29a455"}, {0x2, 0x12, "1c2833ac318aeec80573ec217eff15a9"}, {0x7, 0x12, "2cb32acb0af3efc4b9908b448cbe034e"}, {0x0, 0xd, "4e607d1894a4548bd27192"}, {0x1, 0x6, "6959ad53"}, {0x6, 0xd, "abb6f6fa62f1cba346a390"}, {0x5, 0x7, "1620d67e03"}, {0x2, 0xf, "bf1a71ccbba8da9869e89dbaa2"}]}, @generic={0x44, 0xd, "6686184b4b1be6d3e70c74"}, @end, @ssrr={0x89, 0x1b, 0xc5, [@multicast1, @loopback, @local, @multicast1, @private=0xa010100, @rand_addr=0x64010102]}, @generic={0x44, 0xf, "939e62429ec210c862ea1211d1"}, @generic={0x7, 0xd, "08d154f624c0a25b36dd17"}, @timestamp_addr={0x44, 0x1c, 0x5a, 0x1, 0x4, [{@local, 0xf3}, {@remote, 0x7}, {@local, 0x1}]}, @rr={0x7, 0x27, 0x4b, [@empty, @private=0xa010101, @empty, @multicast1, @multicast1, @loopback, @multicast2, @empty, @local]}, @cipso={0x86, 0x2c, 0x1, [{0x0, 0xb, "27410e8fd968577c7d"}, {0x2, 0xa, "8b966ad4a354b8d6"}, {0x7, 0x11, "f43da3396594b81dc8cba5ba3a5b92"}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_GET(r3, &(0x7f0000000640)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0x9c, r5, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4014}, 0x24008080) syz_usb_control_io(r1, &(0x7f00000002c0)={0x2c, &(0x7f0000000080)={0x0, 0xd, 0x5, {0x5, 0x22, "4a20ee"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000700)={0x24, 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="00030d"], 0x0, 0x0}, 0x0) 6m49.068193751s ago: executing program 41 (id=9996): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) epoll_create1(0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r3, 0xf507, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000280)={'ip6gre0\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x2f, 0x40, 0x6, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x40, 0x700, 0x3ff, 0x9}}) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000480)={{{@in6, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@local}}, &(0x7f00000002c0)=0xe4) sendmsg$nl_xfrm(r2, &(0x7f00000006c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2100}, 0xc, &(0x7f0000000340)={&(0x7f0000000600)=@newpolicy={0xbc, 0x13, 0x300, 0x70bd2c, 0x25dfdbfe, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@empty, 0x4e24, 0x0, 0x4e21, 0x1, 0xa, 0x80, 0xe0, 0x2f, r4, r5}, {0x8, 0x8, 0xd5, 0x0, 0x7fffffffffffffff, 0x8, 0x4, 0x100000000}, {0x0, 0x1, 0x9, 0x10}, 0x1, 0x6e6bb4, 0x2, 0x1, 0x0, 0x1}, [@XFRMA_SET_MARK_MASK={0x8, 0x1e, 0xe2e}]}, 0xbc}, 0x1, 0x0, 0x0, 0x880}, 0x20008084) syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) r6 = socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) write$apparmor_exec(r2, &(0x7f0000000100)={'exec ', '\x00'}, 0x6) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r9 = timerfd_create(0x1, 0x0) readv(r9, &(0x7f00000005c0)=[{&(0x7f0000000000)=""/8, 0x8}], 0x10000000000000dc) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000080)={'ipvlan1\x00', &(0x7f0000000380)=@ethtool_drvinfo={0x3, "44bf2157ba0837cc6c450e0d9bb9a3f15f70e0baaee0f487300c69e5e3675304", "97cd6c6f76ddb68cf4e6d76528c61b0d2e3ecae0f71630a9ae7ee2dc78cde6e3", "b71ea046e49b75c5ea795f148c3985720347f16bc8ade5d521838859cddfb02c", "3ab9acfeb47ffca5fe6a903e40df13d0236e2c6128907dff7ba4c0a417bb81f3", "72ed4ffc51fbdd2b5d38677348ddb6f4d2cc684e224de57d731b2680a5ca7ca6", "be5fadf50f056e5d64664672", 0x1, 0x5, 0x5, 0x9, 0xea}}) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000200)=ANY=[], 0x6c}}, 0x20040080) r10 = syz_open_dev$vbi(&(0x7f00000000c0), 0x3, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r10, 0xc0285628, &(0x7f0000000040)={0x3, 0xff00, 0x0, 0x200, 0x6, 0x5, 0xc}) syz_open_dev$sndmidi(&(0x7f0000000040), 0x8000, 0x20040) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r2, &(0x7f0000000080)={0xf0002003}) 6m42.583930486s ago: executing program 42 (id=10000): syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0x102) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x0, 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)=@generic={&(0x7f0000000580)='./bus\x00', 0x0, 0x8}, 0x18) openat$vsock(0xffffffffffffff9c, 0x0, 0x2c0c2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x5}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000f40)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) socketpair$unix(0x1, 0x1, 0x0, 0x0) poll(0x0, 0x0, 0x9) setitimer(0x2, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x88}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000002000000000f40600000a14000000020a01"], 0x3c}, 0x1, 0x0, 0x0, 0x4011}, 0x4000094) prlimit64(0x0, 0x0, 0x0, &(0x7f0000000180)) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002640)=@ipv4_newrule={0x24, 0x20, 0x301, 0x70bd2c, 0x25dfdbff, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10}, [@FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x2c}]}, 0x24}}, 0x8800) r5 = memfd_create(&(0x7f0000000180)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x7f\x00~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x1) pwrite64(r5, &(0x7f00000008c0)='/', 0x1, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x7, 0x11, r3, 0x6695000) lseek(r5, 0x0, 0x4) 23.542944008s ago: executing program 3 (id=11455): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) fsetxattr$security_capability(r0, &(0x7f0000000140), &(0x7f0000000180)=@v2={0x2000000, [{0x0, 0x4}, {0x8, 0x1}]}, 0x14, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x74bc2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x0, 0x1, 0x401, 0x0, 0x92, 0x55, 0x8, 0x1000006, 0x4}, 0x0) fanotify_init(0xa00, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x4048000) ioctl$IOMMU_TEST_OP_ADD_RESERVED(0xffffffffffffffff, 0x3ba0, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x42241, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r3, 0x800c5012, &(0x7f0000000040)) write$sysctl(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) r4 = openat$random(0xffffffffffffff9c, &(0x7f00000003c0), 0x40a06, 0x0) sendfile(r4, r4, 0x0, 0x4800000009) close(r1) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5) sendmmsg(r2, &(0x7f0000000ac0)=[{{&(0x7f0000000200)=@ax25={{0x3, @bcast, 0x2}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000280)="04457935f43bc36664030e1270c5858ba9f1993871ea146825191bc507b1ddb3f587e177e881a96ff96a7d24f074cf2135b50aeb25171c2e8a8b2bf2fceb2212a9eb8997e937b45dbb387786ff6d49e07416929463c35827483e62f1ff0ec8c48e30b8c434ee10f599022d73401e46cabdd57bf34d3880a814ad2f99937ee8ac5cb3ac44faf0a4887f4098c52b0d50abc852021f528b2be9d972397a22af39f6a1bd62e429312d2aab245bc5c4fff1564b67686915548a9418a9b4931b07e4b16244f8fa0dd481329bd354aed17e9345a15295460e3c52b75c79e4ab9d755e4e7c9fa51e651058abb45d28c25efaf86fd195d42263", 0xf5}, {&(0x7f0000000400)="3da8c92e2ecad9e864ea8bdcb45b03704628581852aba1cad30efdd7fb0efc15b6030ae36a45ba5047491696b9948d5646a2699cf87ae73049b21ca1f5c8828a62d8f38d5a075351b196cfa7a48d503ce9a8b0d0e0bdce87e70f24d0f7abddb49ac11616f1e817b3d9791b90255d6c82ffe3c5806de4e6d563d150b8f4ab09b66513868a583ba3422e", 0x89}, {&(0x7f00000004c0)="c46a44ed689fbcb5e1f020c6a8bc1d341adf4710aa310b28f969280031475b2597af7c8d963fcf337508f65b3c0083957929ed7a4f1502c06ec40fcfac826b9d5a7b07cf70bc5017b0eee0", 0x4b}, {&(0x7f0000000540)="a584ffa21604fdbc03a30e1d169186389e722d871586dcd3bf338a00911e438c549083cc537c0475111bb40ff0df11a720fb84c52cb220b74a850a6c47fcc5b74053ecfd936c2bf5f9723535fd07a23ac8eaabf37fb913ddd998ba5cda3fca25dfa3fd531a0b9b2c9681e0c47a4d3462dadeac81c3fdd5c93412bb4232e28e4510e7f1b2d3cd6144190bba1142b8a8d387dc7773c0a572b28c", 0x99}, {&(0x7f0000000600)="1ba8cd324b98db5d4548383a9e1b0220e33776ff275dd8f738c3d78a56157c9b3fc633b36dd61330760089f3693eab593d2ebb8b7dfb545ea33e94ce8021b2666322476aed5b3eac455b73bd446ba1f889af40a2dc44e7c2f642633b4017d9bdfe4516e98606d7ba7cb4b740bb386e20f848c6b3d4ab6a68071d0e8fcff7f788ca005b4dab2329d3e9c0fdf061b4acb57909505381da18bbe46d8b65", 0x9c}, {&(0x7f0000000380)="9a94a5c228e0352771ab1bc41f073c071a507489bee6319ee502720336c5ec9177eb4dd73d49f9", 0x27}], 0x6, &(0x7f0000000700)=[{0x90, 0x119, 0x6, "da9b6c24b0e0bd8f18e9720222166390a4b895e5ad89b27e90152b895a3aa797bb89bb85e2ca38402808cfc746c28b3ecc96c7bb0abb096b2008900c3305b7a047197ce18e79e63e00bc297eda1471927e52780f6ec6e06864da93fe254c10a6f082f5be235446f734d11ed96c6f5420a4a231d4ce793363f23a0320962ce3902c50c3bf"}, {0xc, 0x102, 0x101}, {0x3c, 0x112, 0x6, "502badf4c791db53caf3405938699830dcff16dd157de1921cbc149a124608f9f7f828cf2626f2fd27b1c012b8"}], 0xd8}}, {{&(0x7f0000000800)=@l2tp={0x2, 0x0, @local, 0x1}, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000880)="e72df92ab519d41dff421ca3e705972efb32750de89d8ab5f5f88860fd369ca206151253db7e18af8abf05c55f804bf21e65ccea828354c4bc1d07a6efe92825f1d84427da5213c9375f156ae4470664d43788fc5c284e127afb84b91c27b0d7c4ab755d05d76a808a76e9bf1581cee794a2257de3d0d658e55b9e9a34877cba10681ec43676b33dee4f3e001576e438fbf223a70c758d6a5cf898a256c220686e52b14613d68140f630971763d6478006ae9db8cb9f3c3ef916dbc42c2004583538ee3bc91bb3edf5122fda1d15ab83", 0xd0}, {&(0x7f0000000980)="5faaec6b73287affb167fb6a40e22cd3d7dc353c4499a1fadce77a5f522ee1c729ab5e5b4b1690144e3bd4f61b867639de9a509a98f69f7b0e63324caa34226e100373181934e9c8227ba2814ce53ceeae7b0995d27ca8cc34cb663ebab195e50a4a6448180bd76b29ee326a0cef0fc7819638fd5d14109fe2beaacd95b1577e8e4f74e7b88c603f4a9256f32129f33ec5047778c29b39e1b657022922dbfa7062ef7cc2b758c7bfe32f35e0002a7d948a8e1b3964dcbff60bbfe4673a4a295191c6598d16ce9207d3e6c30097b68c074f3167", 0xd3}], 0x2}}], 0x2, 0x4091) 23.470469346s ago: executing program 8 (id=11456): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000001c0), 0x22441, 0x0) ppoll(&(0x7f0000000000)=[{r0, 0x5004}], 0x1, 0x0, 0x0, 0x3) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000140)=0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_gettime(0x3, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x891b, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x200000000000000) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="00000000001200"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000aa0000/0x1000)=nil, 0x1000, 0x2000005, 0x40010, 0xffffffffffffffff, 0xf3e7a000) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, 0x0) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_GETIPTR(r1, 0x800c5011, &(0x7f0000000280)) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x1}, 0x10) write(r6, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000000000000000800040001000000", 0x24) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000280)={'lo\x00', &(0x7f00000000c0)=@ethtool_rxfh={0x46, 0x1fffffff, 0x0, 0xfff, 0x4, '\x00', 0x200}}) 22.431207781s ago: executing program 5 (id=11458): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000040)={0xb}, 0x1) sendto$inet6(r0, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x12c, @loopback, 0xffffffff}, 0x1c) 22.041683618s ago: executing program 5 (id=11459): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_dev$dmmidi(&(0x7f0000019300), 0x7, 0x920) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r3, 0x40045731, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xa, 0x8001, 0x0, 0x8, 0x0, 0xfffffe0000000001, 0x0, 0xffffffff}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000019200)) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r4, 0x0, 0x21, 0x0, 0x0) connect$inet(r4, &(0x7f0000000300)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000040)={0x5, 0x5, {0xffffffffffffffff}, {}, 0x183639ee, 0x10001}) r5 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_S_OUTPUT(r5, 0xc004562f, &(0x7f0000000000)=0x1) ioctl$VIDIOC_S_DV_TIMINGS(r5, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x2d0, 0x191, 0x1, 0x0, 0xdd9f83, 0x1, 0x2f, 0xf3, 0x2, 0x1008, 0x722, 0x6, 0x7, 0x7f, 0x27, 0x20, {0x0, 0x1ff}, 0x3, 0xed}}) read$FUSE(0xffffffffffffffff, 0x0, 0x0) memfd_create(&(0x7f0000000580)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\xff\x01=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3}\x85\xcf\x06\f\xad\xe9Eib>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) r6 = syz_usb_connect(0x1, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000009b768405e0483020b990102030109021b0001000000000904000001012900000905"], 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) r7 = syz_open_dev$sndctrl(&(0x7f0000000200), 0x50, 0x800) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r7, 0xc1205531, &(0x7f0000001a40)={0x1, 0x6, 0x0, 0x8004, '\x00', '\x00', '\x00', 0x0, 0x5d05, 0x10000004, 0x1, "38d49788ead5f71fd65acf7132de72ec"}) syz_open_procfs(0xffffffffffffffff, 0x0) syz_open_dev$audion(&(0x7f00000011c0), 0x3, 0x8c4201) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="7400ddb029b9fa32eebbffff8300000000000000", @ANYRES32=0x0, @ANYBLOB="01100000000000004c0012800b0001006d616373656300003c0002800c000100010000000000000005000d00020000000c000400fbffffffffffffff08000500feffffff060002404e240000080005000800000008000500", @ANYRES32=r8, @ANYBLOB], 0x74}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 21.978691992s ago: executing program 8 (id=11460): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000001280)=ANY=[@ANYBLOB="12010003001f66088f0510660548020003010902120001049570810904008100ffffff02"], &(0x7f0000001700)={0xffffffa0, 0x0, 0x0, 0x0, 0x23}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r2, &(0x7f0000002240)=ANY=[], 0xff70) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r3, 0x89f2, &(0x7f0000000040)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) ioctl$TCXONC(r2, 0x540a, 0x0) ioctl$TCXONC(r2, 0x540a, 0x2) ioctl$TCXONC(r2, 0x540a, 0x1) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)) pselect6(0x40, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x300}, 0x0, &(0x7f0000000100)={0x8, 0x0, 0x0, 0x10000000000000}, 0x0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x3) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000040)="e2", 0x1}], 0x1) fstat(r1, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000b40)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000300)=[{r2, 0x6480}], 0x1, 0x9) 21.875973957s ago: executing program 3 (id=11461): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'wg2\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000006c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0x5}, {0xfff2, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x4c840) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xb, 0xfff3}, {0x0, 0xfff3}, {0xe, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) sendmsg$sock(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000340)="675f0661f645a77edc0e985d7b61703553833929e3cee744da7ce5d6b8d7256eb9593562520e17a443fbef9aef9912c553d2266fb9608b9301a6ff371f2f20cf0d132f97704d9c", 0x47}, {&(0x7f00000003c0)="93514ca5e5a7ade41ca1bf6a5b0ffcd01442342ea28a108f297a78058e956c47753e577c817ee88f61982e4c423b4923eaf73bfad25c83924b2bf91bc317af54e5ceefe5e08fd8dcd2fb729da64bb28fc240320dae6e92c799a6e432ff92b457d8", 0x61}, {&(0x7f0000000440)="26f2a0fbb4595b8b21d4c5f85fb588093ebc3bf9c3fdbdc3698fbe2be2a77d83f75eed224423296342bfe26d6cfe0cbaee883454e728c326952ce5bd3e9bce3e37074fb6dd7dbcad7c95ff1ff93523e4a2c1e3f0d145053a08126de0e145c381c59c8211ad8c2f5831fdb8505675e159b123cb1e", 0x74}, {&(0x7f00000004c0)="f9092469fdab6c322954eb5d5568603d007beac40c9e09b9a7206570977657b451f9a8497fe5e02ace75a9bf54eeead4a6fd0e70ea6d9805151ccc6d9d220e7579801ffd735bebc7354715f168b93d6f14de72580091c1e7059065a37cb4c7453a35a08535996487213db7c54b5e2482063477a55444ec6d0b69f0a77f4e4de58d06d19e1dad267c74c09c16070a7cbd3784429ed5ade541878e0c0c23f1", 0x9e}, {&(0x7f0000000580)="00feae69853acded05010702b3f0c852e0c9aa2ff56c5487cb0ca130370e52b9caea4103a9edc26f1e2f837eed35041225720707eecbd304ee680a3d236c3067a5543e6ca5f38eaeca00fc06af3917e8fe3c58feafa8a82ae92a9aee9c37d37f44570d1cf9b4786815bdc59a5cbd81af8efda10ae582341863143495eada87c4796f080b536e1a34cd4b0a370e33e80f", 0x90}], 0x5, &(0x7f0000000040)=[@timestamping={{0x10, 0x1, 0x25, 0x1}}, @mark={{0x10, 0x1, 0x24, 0x1ff}}, @mark={{0x10, 0x1, 0x24, 0x180}}], 0x30}, 0x4080) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e24}, 0xf) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) quotactl$Q_SETINFO(0xffffffff80000600, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8923, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, 0x0) splice(0xffffffffffffffff, 0x0, r6, 0x0, 0x1, 0x7) sendmsg$unix(r5, 0x0, 0x840) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/syz1\x00', 0x200002, 0x0) rmdir(&(0x7f0000000080)='./cgroup/../file0\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x5c0c000) r8 = syz_open_dev$dvb_demux(&(0x7f0000000140), 0x0, 0x62400) ioctl$DVB_DEMUX_DMX_SET_FILTER(r8, 0x403c6f2b, 0x0) syz_clone3(&(0x7f0000000240)={0x200a00000, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, 0x0, 0x0, {r7}}, 0x58) bind$alg(r3, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) 21.108189132s ago: executing program 6 (id=11466): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000040)=@generic={0x0}, 0x14) r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3b4, 0x164, 0x164, 0x94, 0x28c, 0x94, 0x320, 0x320, 0x320, 0x320, 0x320, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x94, 0x0, {0x0, 0x8800}}, @TTL={0x24, 'TTL\x00', 0x0, {0x1, 0x9}}}, {{@ip={@private=0xa010100, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}, 0x6}, 0x0, 0x70, 0xd0, 0x0, {0x1000000000000}}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x11, 0x6, 0x0, 0x1100, 0x88]}, {0x0, [0x5, 0x11, 0x700, 0x2, 0x4], 0x3, 0x6}}}}, {{@ip={@remote, @remote, 0xff, 0x0, 'wlan1\x00', 'veth1_macvtap\x00', {}, {}, 0x11, 0x0, 0x54}, 0x0, 0x70, 0x94}, @unspec=@CHECKSUM={0x24}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffffff, 'syzkaller0\x00', 'bond0\x00', {}, {0xff}}, 0x0, 0x70, 0x94}, @unspec=@CHECKSUM={0x24}}, {{@uncond, 0x0, 0x70, 0x94}, @ECN={0x24, 'ECN\x00', 0x0, {0x0, 0xfc}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x410) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f00000002c0)=0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000440)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x4, 0x3ed4, 0xd, r2}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x14d802, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x402c5839, &(0x7f0000000080)={0x0, 0x1, 0x4e2c, 0x8000000009a87}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) close(r4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000280)={0xa, 0x4e22, 0xd, @loopback, 0x6}, 0x1c) connect$inet6(r5, &(0x7f0000000140)={0xa, 0x4e22, 0x20, @loopback, 0x23}, 0x1c) setsockopt$inet6_int(r5, 0x29, 0xb, &(0x7f0000000100)=0x80000002, 0x4) sendto$inet(r4, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) socket$unix(0x1, 0x1, 0x0) 20.498080819s ago: executing program 3 (id=11467): sched_setattr(0x0, 0x0, 0x0) socket(0x2, 0x2, 0x1) set_mempolicy(0x4000, &(0x7f0000000000)=0xb, 0x8) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = syz_open_dev$usbfs(0x0, 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r2, 0xc0105500, &(0x7f0000000280)={0xa1, 0x5, 0x802, 0xfffe, 0x0, 0x4, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$unix(r0, &(0x7f0000000140)=@abs={0x1, 0x0, 0x4e23}, 0x6e) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r4, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r4, &(0x7f0000000400)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000280)="5338a3848b25e258a25f9dae13ed", 0xe}, {&(0x7f0000000200)="18aca52a7fc7482b170977fd86389f5a59cda1da10826cd956a129a49a08cd", 0x1f}, {&(0x7f00000002c0)="a054774ff7b535448b6e61f9acc7b60e4b54f90ee96ab88689f062c517c0e9f72791e307105fa506737c5afe10453261ae03b8246525630df55062839a800e6a0e7416ceb8ad6d920dff1543df75bd7d0522c9511371120ca79040a1b02a05aa0445c435fe5e57f68c3b0df51fe75d7b505eaf54193c3035ba95a18706f2ea757f0d375739f1ceed80b7ff2832ad9286419ecee76d8fd6b8cc0e73c3530177776ea55a279637", 0xa6}, {&(0x7f0000000380)="529b26e66466eafe532f80ce40ed22e6c7341a1976e9d52b52aae8b71892bf683723c7513e34653f4d1d858cc5ad1fe4a1fb82cfa982f8577bfe7638378ca62cc1754cf71dc0d434c3ec2cf76547b33611ba57f830d2bb68df97225ec64c0ab016b50b74abe718be4211989be6c0d7cdc99fc9b93c95d01142ecd8", 0x7b}, {&(0x7f0000000500)="9a7c908ac51c2a5a016d63ee055d6d5129b6b242f7b7a69489b06fe2f146247e0b7c2889c6dafa95bb3f13c972aabcee505ed26cbd56a0a685969aaf104557fc71b7138988335d142983ec5b7abbb1eab2c1916d135961ae857056677bf5ec86445104e5b9bdc5b789138580bcbb4ee3b95f3052bbcb9975177cd7763dc9010aff97aa13bb300c0ddb0bc6cd28bcdc83cbc66fe24425d035c9a14171b72832fc711ae5d7a8d4e992114ec57c314c24c79b5b8d79794ef345b538200bc5c42d2aad2fb7f990f0249cd5d82a735388875c2d4054a923bb17fe5a529fbb", 0xdc}], 0x5}}], 0x1, 0x20008000) shutdown(r4, 0x1) getpgid(0x0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[], 0x13c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000804) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x3}) 20.154187091s ago: executing program 6 (id=11470): r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='cgroup.max.descendants\x00', 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendfile(r3, r2, 0x0, 0x4) (fail_nth: 2) 19.558701585s ago: executing program 6 (id=11472): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x1d, 0x2, 0x6) r2 = epoll_create(0x2) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000001840)={0x90000001}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000380)={0x1d, r3, 0x2, {0x2, 0x0, 0x2}}, 0x18) r4 = shmget$private(0x0, 0x3000, 0xa0, &(0x7f0000323000/0x3000)=nil) shmctl$IPC_SET(r4, 0x1, &(0x7f0000000100)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x46}, 0x7, 0xb859, 0x0, 0x0, 0xc, 0x80000001, 0xfffffffffffffff9}) setuid(0xffffffffffffffff) shmctl$IPC_STAT(r4, 0x2, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x2d41, 0xd5) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r6, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r9, 0x6, 0x24, &(0x7f0000000280)=0x1, 0x4) shutdown(r9, 0x0) recvmmsg(r9, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) write$FUSE_INIT(r6, &(0x7f0000000240)={0x50, 0x0, r7, {0x7, 0x1f, 0x0, 0x202, 0x0, 0x0, 0x2}}, 0x50) syz_fuse_handle_req(r6, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r10 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x109081, 0x34) r11 = accept4$alg(r5, 0x0, 0x0, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r11, 0xc0046686, &(0x7f0000000000)) syz_fuse_handle_req(r6, &(0x7f0000006380)="7f5912d07634539c3b2e15a57b311187a3eb119eb4b279cacf0b94d44882da90bb8c7bf605806fd007bddf798e1fed05db9ef39d3dff16e6eb4e5e642774588b2020a414a4574d1e0aa3474184583a655385fb5e7e632304e818af022a134095ea51f1f77a9472dabe407b36f0c47e318bfdd7c6ecb5a5bc07f28701201245abe626ab4592fac5b1544570a665a5e559eecf9505a828f5b0199a5dc33934b75bebb03744f92918f93553eb072cd2a940a5931a5907f82fc99d519f02287cac4341c4637dd8110214e9634088fc6b5a77a5065c4798538f41b263c6329df4d668d018f7ac9634910969342c836d78c7baa9893cef90deb8cbaa8cac81c262016a8dac72fa5c3d5094a8b64abbf82594b8cb1dc876e01a39fc9a26874052c47ec3ed015bc85933a98a61bbc108292a6c7932421162c82ec64518ce13f0fda30adf97b5c0d70fb0c69398e78d9dabe99d3d408bfef6e2518c820217b4a1cee43704fa5b5c4d4013bb61f631b813b8272188d403821fafe0ee4b5e09671c177e34a2566939920fcda640007845e4d19e2ce3693cea27e7ec2482ee603589260503c567e3dd320923e651d2530afe927013724b1ccc22c390c9e53a47331789172fb44c442cf558f9990badcbf377b731aa83d7b73a6675c687f16c9b96b59e0a6e262da754b1bba316a31fc262561d4628e33de9969794b879eb7ceee36abb30f5f977198bed19fbc4c4f13f32a3909fa76a3beef541a5dfff9ff8609fbfaba986e3a02b23dc0938e7e5b476f5b256a3e3333caea34de6410f75d1daedf4176f6e5a9fb915647bb65302b49895cfb699131513e1d7d937f8e452fe350a78783de31c96535c742b35edc7b117bc2fd2df6cdbef0cfa1000bade8a6c8a06019592b7dc144ffa88a01fb1f6093e82f63b05830f414a07779226b4928f5edc6d592a294c030d518f7e350b2e2536a2bae2616a574b63415c952c28cf6a82553411d305fdc33d1447b7356b8726b67d23dc0749bbb1230b18abfdb6a0fd35cc1489fcdd90aa83edcc613a77db36dd42fc5b83635df5c2acfddab054303e7c859c8bd5a21493742d8fc1adb1ae3f68f6103d65709a8d917292e648c5621691425a203de2e82e9e6bcd53a7f3e90238e89b2b05202ceafc72bb2f997a99487aa993a72d0cb44b345b3982784a78aafe5e5b6ddf2a17e4dca9a5433481fd8e60195832b704a1c186dc3317888c8c0849f1029d0df6af3a5fc93c8e643287ee38580ff450a259dc4bd45343aa453f462e92302c020ce91f26b1c2b66764cac41d2e809a46e51ac50121172759ba4c791cfc8856f7676ad8020433e00bb80e46d9d7709e196565b3a7b18270508d1e0023960e5b335bd901465dc328a581ca918dd295a110aa9f25ebb51ae5523eb619431a9db2b6e046cd94aae4b985bd663c6c6769015f49cb40d3f4b520c1022683487b170c9e47ed306097f1208a92ecf6727f7f276d19bcdfb987ca8b7f54732d0908f98ccac0ba9f6905e194da99608598ee87a6992c4dd33fad2e5e463c995babd0c7dad010499ee2cbf0f2fb63c7678d681a8b63d8a1316fcac3a107f8723dc004aaf7d9224090b6c78212172884eda7089cac24f196db5d3bd2747649e6fee4ebafb3d883df077f99bb945220161a3323aaa09a5caba3348a2d78096a18625aece41aad5cf9fc9cdb590f0cabb882839474c53a14fdbd34772f69cdd369260309a9500af55572adb7b23d4fdbfaa807242ba1130f7029fbcffde2da9b8a0814840e9b241febe92d6247419ae4cd15f5b073c7dc03e4541e24291ac5b4e29cde2649ca6cb7952e81308ae249906ca9d97d8ceb129b0b2b44a84e268b12b8a373965b877028cae0ead133c8422052a8f91d92f6695b6a3e9c36661c0cb6d03dc795490b09f62210803d88dfb3777b16e1485c9c7ce4a4becc718c9da4aaa32f5d9da57ffbfe6633a302b10c676a0e047f1b24e8dac251dffc841a2906002abdd64334a2cc50db924e196b6cee0f9261a87793dcbf8dcf1363b91b33dfcbca15798e9089cab24ed74ddacd61fa07f8797cb21f9c1f4f1d7fd8d0f2e19b99b40173853282bbe94e5c867006949b55c1a27e12fef9f264d2a14700fb5c828e21293b38502dadfd2e96dbbe866547a460a737951e55803fe5ed0b448aa1fbe65de9117d066b2f46dbe658510434d2d3fabc734fc5632fd16a3ddf04a0da7067908f3fe7d9c046ec9d528808d0f4a755a4467609386b31104db69605b78507f83995c297d049d6b028ffe981f0ecd972f23ca43096a955d437f604355e49e1d9fac491f955fae46a150555bd91173091a016aeddc51399b8dd20bb6e8e3060da97180d79a8eea89562bbe4dd19f5c36686c3ab5de9cdce1a241b407c78b2a8886b3e316f5163ec082bb1de53ac1797a633587d9319f3626ce3b052107cd55a6c44b97e27aaf9bf5fe0d4475ae2090920865b0a0f32567351c4ac9859e57cdd8254a58d2dc5d67dd16b513a02954d7c99a9544ce5d8ea8a59a06321083690cf6007bb941cafccb17a3b81c96453964cb469e07e8543407f2c03105d88bbd2073cf9fdc51c9fcf58854417f49141efb66b0f98b36b89eccfb616992286ebaa8f325eb9ca85a45d8b1dfa7a18dd46516ad40d2f46365fac4cbb044624139bb5a0bb0ed062edfa0260ea03b9268f18a7d94d83d4411ee46896ef955aada3e31d29e83414ac0a64353b6498c8f1ef37d051b38291369f6f124913d3fef14af925ab93a34d58f569f3c4f12aa458c85b2b29249e4c868e0bce4791c7f7226bf050c23ad590f6231315f1c9a087b3041ce33f6971c4d5a20f85bb103edd586184e90a34dd5c9e3eb1fea74fe413c503c5d48c70e3fc1d210985644ce5ce0b5636751947ae22e3dd6fa39dcbe1ee3def6a3097c8d9836db3b9ce1bcff91451bc46ef3000b5dc66b007ff2ace898a81631c5728c9de7710c41691332a268b18f0eec37ed7944ad0049936e9fe4df157a8eb324ef0d9954ee8da259c700b05bea37e4238c7be1ead4ca18ef228a15d9828476e899b77821f27512ad3ca27e2bdc769890e6addc2bc1ade2a5434421d627d978b72ce2fab1ee5769646881a2ecea9743ec88b48442806e946c27213bd7fe137d3979dcf477eee9ebec8fbe72fd9b6123c0523e83045dc88ef385d961cb4b48320e16350846ebb36accdcfe95cf541347dbdd7817e3e7d91b71a1dcb23ba7156484f90f789ba880b8019cb6a248f3db56e5cf7af156c6e84f58e8ffdc322b76dcd1b4ca02cb6fdd1d210807c34febac4c49ddb8257aa18ad782efca3406f34c6500fb65cbfec98077b50ef7a21e366e0fad97c6f6ca5d69b93639f7c608dae3e6b5c282ce130a8ef23908a626ef98e38bb9255ab6db1fdb48ca0d8f2d469123acbf6a1a83ca4f08d21bbf638ffe553fb4faa83993d9fbff7a9af18e21c74ffb720f41e02912d4507aee16acd64a34d2727bed087fa30c34202b34003330c15fbde12d5ba8e7a88b23501c6b837d01b97d78ea66e323579f0ffa9cbb40ebef25deb8a88f82a4e29441fdfcdb743bf98d1ac091677fd8fd3f172116697db4b2d1586303f68b71eae90dbcbee1cbd6eb49702dbf2de4f7f247bd071446fc2edeb68df92fb4436a3773ccc865587202f13083008f1dd964fc912c29bb0072f381b9d042d0fa058faba9d68886cd9fba2f41dd084ed13fbfe9e97afca35024025a83a6c6bbd798c8dae5bffdf486e88b6c32357b20b4b0fbea04c8cef7178a05d64bfcf836cd919216accd05b99ed4390b0016accac7e0fedacefb7ef4580ba6202aa241989fba902b5502bd4d6a3fb0c62c236f78969d395c67cf1ad2f5c250d8f8076189766d6e20ae9de72be45c2d68b5733a6d1f467db1b16a55da3245160188a217306298e5a86a4c4cad1ae72d6287c6b56684ab4452d54995322eb19c15724447b39c196e2056937fb2b956684c06bda117908000000f4524ddfab9c9fa5872f9fab3a5c3e1de343cb59744978ff286e037b2b8a122c6774291d713cd5b233ea9359764c528676e092840cfd716d995bdbae8dded68c71b8865490946df93c6c617b77ce830a1fb17b3459917ddb1797641ad2e5fa12a4ea8fdd0c914024913ea45237010d8f725c0d6ca6775a22285dab06c48432cee3faccfeda5c7756001121286c6ba8f52740a76a66632142fd84a088f5a0809d49b4cb513630a94acd1f5f246a997c85e90c7b0f9e55b3454a13cbc30518d3979789b76492afd411574ed54f0e9858693dd29b96a20aa55c6835a40c44c84d523054dcaded22718e48708958f977f94cdb360421878f67e97fe2140233f15924071c78fe5ea27b7f9e7eb0cc08fe19703df61906177cb8377c16d50ede70d62f1d8c0f8068323cd5eab2f6fba57ab3574c4742e06031d5a75f3d000b56051f43f987472a5f582a83f4c99a4366ac8c66673da6a312fe4804fb185f3fcbf6f3ffda91f5ebf6467ce6baa992a850765d37de2b3f16fd3ca44854993082e987ca1f520e0c149cdf92f727566c4c5ebe3ecf376c67a5fa7d51942784ff35236a0940a5f275a9ab8c0c5caf68421a14834edc9c29fd3adaedf4cca2802aaa33283ac811d97ef4affbba7315ce7fa5dd2783a067f223a4a8235fd67c23fa535efb4547202d171b51050d508081be9fb6467e9e7d052a7fa8fa8534c440f9f22c8f3d763d89666046951fe85f977a7ad816fc42037adbbec0352ed2b3454fa433e31a30159b9a3d5777944258f01dfe9d38f67af3e85dbdf23e5bb841401b40afeaa708f0a06a2efa2289f9ebda77c2a1390b887bf4b3dd90e418955d05431fd524b481b8b51c523fb1a3d0339bc3999c0a14d643a6ea69346f46a554bd25be3263a3c5ac0848b152d3eed833e7f2a6ce3b0d4100e49319120d4c2b520205fa2a344ab087bec0f73968768d0188007603a77428f12026cf3b296823f3138315ff0f95f3c62c060acb1a11850b46d361ab41b7ad241e45246b091ee2d0c1d444290ff6669a34f1fd0020795fe89d4b67bf07f16c88c8987e7f72480ad42109b43f37e4c753495661b0514553532364638ca8152782b99804b6f9da69fb2b5b7f93acad94ccbadf6e6d9547852088945d3d8c4c5702b1323c47fdd4fc77fcfd61c7ea8b26cfd0954be063cca429cb9915b8a937833ff4c1f2bd620b08dc00ddaab4fa5e13a5f4f2127f0b63b7140dd14b1dee95f178d2bc33cef7e820e609aaa20a733931625227529c714530574bb8cb38e6baef0cefe9a9e3277a4e1534f249abed7f06c8470ff3723c9140f5ed466ba7b79ab2ed2e61d2f5826d72a560c8cc6cf6a64fb9e70b1d15b80f22cd86bbd38b5c46741e054204476f63651f3cc9bce975600abb3133e104fe0145383d0d320367df2dd202daeb7b51b4a1e4e7d36fd1c847965efd71430b8bcef773163b1e378e1381f05083304ea41ee8d37ecd988cc671270101ad4800706cf0387bd038a7164d1586ef5e8791cd6bc3a91bdcf35982d46d841acc8342544d557d369cb4a84589082bf9503d45659791e522bec6a5f61f740ca5540787dc4a6a9f567bb6c0b13d618e80b2b348adde16fc63b2052f381eab8c120f14ab623a4110030847db00ed2d19c0101991f82a8671738b68b6e0efaa8f771de3cb6c2165298df69383b775fafb7c249fd78ad2ee46390c1b905b3853680a80a1849952a10e69fa64d680cdeaf5a451408c5b5d64e0f244ee362f21f37c66b795d73647964d12e297f7f6b760ee4e4b46ef502a54483d3838674e1767eb93f91454f1dfb629e45ed71646f139b685cdac6c73afc20bf62b3b2dcd81d9adf65b4f4a5f2a2a2fa7e079d944739546462519521e523db10cbff9489d7ce84a78ed5fa80b2d5361f4829bfa4bef5c351c984cf58a5f227687eadceb8c0cdc51825a008f8bb8ebb549864b6fba1da22da5aa0a0161464695fad60e636e45091b6dee20498f33ff9f91c1ef927c90215cbf4f5711805eb13e0e65cf326627bcfdaf0bf07d5e9c53520b884411ed632f9f5169db46d674fd660637ab8ee1ca1aefee8ea4ab3b41e6fc18842a0a254db125243e4e996db939aab80b04d70fb22f3c1cf7edb1d18cb5af99be7dd4f01e2ee265109abc51845dcb3f5c8e8477fd7fa8fe41bd83809120428ea9dfef010005964d66ef96c1648516f1b0cacebd95ab20c2a2e2647c967c48c6c9b7977441a0dfeffba2beaec54a66f863c9ef3a4e2fc77928291753648b7abf3fc26128cb4eea246468b05cac113b3464546442e14d5aa760a3d7c481d238b2a5226bfe0dfd2dd5b2a9a5ad738c6a83e21312e0e11ea3daedaa7a6e527ec166337d24b083ccf97af580edb453dc1a7b841b7266ea143b294291ac5ed5dce7dac20d14bb6e53b64eec515515ef817611d22d3a306170d4f358f0b890411454e1bdf85ccc42589ba1a1d75289523e4aae1eb46328d0dac43539eab1d3aeca3db300e605c53cccf04d3688e5db58fe283b01745dc39baea5ff49db07deb7adeac2d3df45fa72f9fccc9d1947556fd8594faa393a2854691016eeea88e96272ee1156874b9ba78a4f71022e3ec2e0776f8db400e6b967be079684d3d80645125c488f5bc0a69a3d7e12bf187a41a8acc9b2f7a610798fb6e2e438b85a9012d6f6990c7b9a557b98d32753cc1786868dc864edd3f0edd8bbf48924fd09d0d7a2334bfcbb5786752765c8f33fc8cdab048b81607b1ba098ce44e6d99d8b1b08b5d19d177f6661c32031d475381c0c804c63d2b7ae9a2198c0d6114e7bdd0e01a4cbfc5c41e858d28f157efe5a52ffd6d70f2bef2066a2d65ec68ac1ea678588f1cf0c9eb030f34a2d99138c4a6a0f85edd8a382324c2c823a7bfc3db3e6822faa0ab1801361c1f23aff0fdb8fb27cdc1db4226d62c0101561e78b704854893c6bf0de79b45f87da7a8e4f65875842230d2bfa152e96fecbe4a7465fb400cb7790102d0a89f105e84a23173141245d641051b8d614d3be26423bc0d042990c62ea3b7392e7a8117e250348d3cf79be1529c8a764da382f019b5a750ab848ad03cf53921c8548318db7aaef2be3acce1a3d9a9715ebf6a5b53da18ef20b932d5926c3cb44c1a4e6ef83f2a84f8afa382d44ea35f17bc147ae1dc792784cfd9edeb9fe09f422aca81ec59688baf429509a6b27ad0f6e21c977756a022979c8a47d983d42a913d0ea6ecfd8bc0aaf9fba62a36d542710161a088656dca539a940ec6dc79ab197eebb803988674d93c8d604a5bcdcdeba44c331c72e58ff9320f39031fe711bca2e0269b1028862c2d2a6c8871a0f92dddd30629eafc739165a070c61c12be11bf3d3cabb31decf449059c99fcc12a1684d8cb48e496df33920dc0a4fd225981c0f45b7220fd9d9189808e4bb39e5accc10fd7a8f3cf1335cb9dc31043a1e2eaf75e0ba500d5ca4497b2924725c0892033eb0ef944e2fc204e9f1e177862af3d59190e2335061a76d4d3bd922d9bb72553a339dd1672b61a91a0d0e23ddf6b08bd13cdf82451b5e8fd3842ba71eebdde40f8563124fba86c3c500f2ceb7246967f497f1dd3e5e42f14774a909199dbec4b469b8b3b6b25a95caa86f334084d38d71d93a395acb14c145298c503f7f494bb9867c564ad7e32aa1ca7bcfa2181dc712165247462db25192f7cba05cee92826c0561303bc473c9485a989793b8bfc2d0285dfbb13c11a426dff4e404435e2e47760d45b76f91b6c7bf04d4504c2502293fc7b49d24fda5b5fcfabf714087582d25a69ead80222da1d574d599b39a0c54ea7709dea1798b9eddea5cff504cc5ae40c561976c11a514f2ba359f6791830926fa13ac7f71e7614d0233305d3ec694b7d31ef320a44079af2614956ba31a66b959a11a3bfbdb683037d6ca42d0e9bbd2d83af74fd4a73dd6537e393b7026169d3c0e017a9e3392e03e8d76cc0f5f0caad4926b3169d61ea0010000805f62aba4ecab5b053d54cdf8ec5a69320094d520f702cbd218125f24e38a5934a2f5f4d74c12df05cc0c7b3c36a37db2863e918a8cbc496fa77bf6109008e20602636ddbd53aec45741384aafd05ebbac9d6ddd8aeb3d75775bae5124cbc7fb5db4ce9c8af96ad05035a8dcb64c0b02f0669c65b07f60c9cb81e99462ef8318d0ab65b97d6a9271042f4d46a5d8ee42b90783db78827d018b8d392ab3eab88e06b409878fcf74067b1a1fede92874741cfde10bdb444819fb991c36c9dd458c8794e0b4bd9e3f7cd383c485e6a60fa4238b318e14896934d97b4b7993472f4f9f246ca7523e5979c984fd16248b087cc3eafd706328a3ec47f88247357c4b759a2a1f0efde24f4129fb612f8c3742847b39996487653d6bcaf5862dc1bca501abed2d0b5a23c1d2a62eb968acb01763718b27a57e99bcd66c9910d6d0bedc7e6197bd58267cb1a8c61eeef9f19aaa6a0cab7cc268e8bec46db3fbcf4de3e8abe483bb01811087fec18bbe471628c3bc80194d3661efa6d9130a524089b07d8cdf6198018a24d23bfee4a1664e68ae7c30f77bbbcc7116d9bda8a4e6c01f047a4ee60a09ab23a63e1bcdeb3869043efe60eb3b7a6beb366d11e786002b2e3d36d44f91ed87152697e456f8ebd2b0e15df21a773b1ea876319fada12bd340314944f8d9d90ea26380cd83692a2f634c241bfa0868fd7ba52a841ad418c97e818195047d6d11ade0aafabe0d627a68721f61f3758c40dd14498521966380d59e0cb621953f0ea908fd297178899b2e60c210479a4a9ef9a8cf1d2a0c2e909043ce75d2f4fb766eb166b995b714cfb71bad7462525aa15d3fc8462808f8a0cee080502765bb9d1e9912a9ba937a94e48708b531d5ba71bdddb97fe77dfc7fcbcc0ddbef56c1f78feff399eabe15aac18b95f0c88a40dd5ebbdcb3ae45ba66dc990e9267c5290f7b357e1ae5e354c72edab117bcc394e4e8a91d99ca2f000420ff9cb32f87c663c6bb9692cab44c5c26212dad70a5426ce7eee219cdeb6bcb65d9b1f957c3e495a1105a60dcf446f4b192fa50d8c4426b8ba3ef0e06be2d04d7e142e825718828617220349408bd313df2ae8f860058b169b7ec3416f4c73fbfe509b442b8332a7049e7dd59b77d199079c187f7afb9b869ddd27864fb1bd0ba7e0ff67ceefc88f86362540a3020b9a90d07b9634358142a4b095f3becfc810b2ca5d78361403cf09e59c3b747953ff3535bb9f99bfd20da8a64082fd8552739f622e5d24d2fee438083d839402aac872f3d98f394d56bb4564c8caac19ec4873ffd2dae20a0bd8f0781fb92984755014695ba1f3a2e01ce4fa33206b53138afdacf34c2be54b56cd76a9948013538c7ed8fa60055e9b60aafde90f50b4e0cc9b3009f45823f674f23ddd6cb2439c479e20ab975139055bc8ad72315c3c466093be1e06ad27f7601b9cfbce93f172143c6523e239fed636ece9407caa423db7e64d6ee1163976dd7f19c333d02d788111de7243b7dd6dba0a1d9957e758acd4ad9ceba61d0be6c2be89b65d18f1a7f1cee89f9fee5dc682e12e78d2822f99f4b2a920c36d0650604c545b76c9e5755032a8ea94d0fb21d513a138b5a1ad86acdf0097d5f289a9629c7a3e570a96383980c067a702cdc198712adade467e0baf05595108dff0b342d1b1fe243cf8145d024b46f8008c20ded574da9f49b49163591a6cd2fcad74caad0e95dc5714a15cfa88ff11a7d30028326575217447100f4c5c97f0cc25d79960e39b94f0ab60f986fa3c919865f8e231bd77c2c759b166d8874728e9e131b9b3aa5cd166a9ae330ca439ea3ffb7581f1f4389ebf9334810d07981c5ea03b42ef5615ebc17005a0c9c02478353c08f4cca0b6a2e98de3d51d3174ee8101387f52b12b699b57a4c50452a978eb43c3a101ae69213fe93f2606fc6bf7b771e3dea5e578b85e5642791e9aa281c8f91cebde1095cbc23ce174a1ceec151703a226749176d42d72468d48f88012d18e0f2640c3018e08c8a2df197f273596ca5d48cf976b7ee051189b8081f0863e613258f267a5bcf30509c6285fc37c0d045c29c471b04f189cb3c69914ba0591cfba1c71ed909362aa8840be28e624e3a6b8393170e809231e10820326ecd03e23e11dfe29ae47adddf3d4f858d51f9ca33ee85a5077a1463caac5d034293bcacafe15b3e6cac7247a33ace000f164cf8a5243f89b89b8b11220b35a07679e7af900e540d965669fa23ca0d0d3b47d9b2cb0fa31a90c69e686d582f6c9c8c628875c002cc5e288a5e1b738842258569fe2a4de3dfd7dfd13b1fd7c8c29dfa4f58ea8d0c7e56222fb9b0d29c68c7cb8ba3fd79b04a14366f83bbef2531311a3f385bdad440ee85e2dd947f32a349f9d1eb750ceb0f7211980b0b970c7b81f16935d4d3e764869edae7a45cb45a0445e8c8ec27fac4edd6ea269563b6f12f394782fd970cbfc2752fc9f4892c731eaac8e3a315797b0449b2a9ae3d4bd25d0e8f1a43e29630b4e2e882ece16dc542fcbc1f165b2cefc4deb40c23bf61f3e51d5acbc81135d35f0c055d8a003e03c0625e83f95ab2349c222dbc6d62d34e0119938d0b384a86dbdfd00c1226d0ff1f834c3529361c9db6d5612009bc39a0d654de2940ee2b8a96bd3c297ecad0a3df1b2a85a400fab889648315415c4ddbd0c9752146496d3769b3c9148330a8324453d4431d19727ddd12493003bd7eaeb05b2f5c333a33cba442df3dc11dc23c80292a52b040f5e707784b5d29f4c46d3ac8ae0e159517c1a196103bfd6bf6d32afd687773bf224ef00c844f1f36365e7220c57a97aa0904219a0ab84def7095b280b971b554e0142d154c5422c918b4744bb3b9e61721a983f4d63cc79fd88295b67b24fec0ec1ce8a2e80a1ca4e97cdda6d2df44a571a74b941f049886355e2bb5ed908e646850d85095d099e3a189a4298f4a25c0798b4dc25cd630695561a04f43ff009e4f49177e01c11442593fbc23657a46f918a77231b3405d4931b6f2c01f0207d6933304bb2106c5dbce23378bc7ca66ff4f57550bbc36500f6c4ce21dc22a4575c315d2f4c4fb1fb8e12ebc2c037451611718d4371c6d0a00bab9f68a1dea6bd654d49232ab3c85e07a6ec8e2b19012c31d540f81d666d0a236e9e2a4b6d85c0974efa172d13003b63e94cd7a5652f4703d88712fb63521abaf0e2a0dd4b2e457e42d4a811db6a77310b1aff1b9055c9995ce9a0fe2e0c3657c52ae562738b6c12693cb2bffd1d3c41b6a73feec4008e63562bbc38a8c56c10efdb2b67fcef74f6a6f7e35baa4685f7764977348db378b242ac5f81a8a69c666c0247d1d326faf3b7dd4f07bfb16c08bb2703f6997e1a6cf042c0ff0fea27217ac2c78328bd573e8dd86263de6ffcf3d26d45d8be7234da9f24f1a08ab16f3df9e85861fb1251933eb8982b81999234d6d56759acd528ffcaee5a300e711e0b7f0b208612caa6dfeddfe4557161933a1910ec4b35ed89760fb91de6c19f766845979e36855a11d7ba6b892a717b32e8e17b367c5fd11b940de937a975470bbf872f8a1cd637c76fe0a9aba5fb9e", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x28, 0xfffffffffffffffe, 0x6, {{0x40000, 0xffffffffffffffff, 0x0, r8}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$lock(r10, 0x5, 0x0) r12 = dup(r1) write$6lowpan_enable(r12, 0x0, 0x26) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x28}, 0x1, 0x0, 0x0, 0x8d0}, 0x4008800) 19.410530159s ago: executing program 3 (id=11473): r0 = userfaultfd(0x80001) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x9, 0x30, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000200)={0x44, 0x1, 0x2, 0x201, 0x0, 0x0, {0x2}, [@CTA_EXPECT_MASTER={0x30, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x200488a0}, 0x40c4) r1 = creat(0x0, 0xd931d3864d39ddd8) openat$ppp(0xffffffffffffff9c, 0x0, 0xc8902, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket(0xa, 0x5, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x620, 0x2c8, 0x1d0, 0x468, 0x468, 0x1d0, 0x550, 0x550, 0x550, 0x550, 0x550, 0x6, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private0, [], [0xffffff00, 0x0, 0x0, 0x1f9814788dbf7ab2], 'veth1\x00', 'syz_tun\x00'}, 0x11e, 0xa8, 0x1d0, 0x1f000000, {0x0, 0x7}}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'unconfined\x00'}}}, {{@ipv6={@loopback, @dev, [], [], 'batadv_slave_0\x00', 'macvlan1\x00', {}, {}, 0x2b}, 0x0, 0xd0, 0xf8, 0x7400, {}, [@inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00', 0x0, {0x68}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x1, @ipv6=@mcast2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x680) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x1, 0x401, 0x0, 0xa9, 0x8000000000000000, 0x0, 0x7, 0x8000003}, 0x0) syz_open_procfs(0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x0, 0x0}) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0186405, &(0x7f0000000680)={0x3, 0x4, {0xffffffffffffffff}, {0xffffffffffffffff}, 0xc0000, 0x5}) r6 = syz_open_procfs(r5, &(0x7f0000000200)='projid_map\x00') r7 = fsopen(&(0x7f0000000240)='hugetlbfs\x00', 0x1) r8 = socket$rds(0x15, 0x5, 0x0) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000006c0)='net/ip_tables_targets\x00') read$FUSE(r9, &(0x7f0000002140)={0x2020}, 0x2020) bind$rds(r8, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r8, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000c40)=[@cswp={0x58, 0x114, 0x7, {{0x6, 0xfffffff7}, 0x0, 0x0, 0x8, 0x1, 0x72b, 0x4, 0x9, 0x803}}], 0x58}, 0x24040004) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x69) pread64(r6, &(0x7f0000000100)=""/253, 0xfd, 0xadc) 19.358802351s ago: executing program 0 (id=11474): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x0, 0x0, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r2, 0x0) (async) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2) (async) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x3) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f00001b6000/0x3000)=nil) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 19.177899208s ago: executing program 0 (id=11475): socketpair$unix(0x1, 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_procfs(0x0, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="ac1e01011f0000000100000005000000e001010064010100ffffffff"], 0x24) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r3, &(0x7f0000000580)="17", 0xfdef, 0x10008095, 0x0, 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x254, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x40, 0x9, "", [{{0x9, 0x4, 0x0, 0x7, 0x2, 0x3, 0x1, 0x2, 0x4, {0x9, 0x21, 0x7bd, 0x0, 0x1, {0x22, 0xdae}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x0, 0xc, 0xe7}}}}}]}}]}}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0}) bind$alg(r2, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'fpu(pcbc(aes-aesni))\x00'}, 0x58) syz_usb_connect$cdc_ncm(0x6, 0x76, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r5, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x0, 0x800, 0xbbba, 0x0, 0x18, 0x0, {}, {0x0, 0xfffffffd, 0xfffffffe}, {0x0, 0xffff0000}, {0x1000000}, 0x0, 0x3f0, 0x0, 0xd613, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x100}) 18.961264222s ago: executing program 5 (id=11476): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x80042, 0x0) open(&(0x7f0000000140)='./file1\x00', 0x60142, 0x2) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[]) read$FUSE(r1, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) write$FUSE_INIT(r1, &(0x7f0000002300)={0x50, 0x0, r2, {0x7, 0x9, 0x0, 0x1030002}}, 0x50) read$FUSE(r1, &(0x7f00000065c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r1, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r3}, 0x10) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x20080, 0x0) dup3(r4, r1, 0x0) close(0x3) r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0) io_setup(0x10, &(0x7f0000003580)=0x0) io_submit(r6, 0x1, &(0x7f0000002380)=[&(0x7f0000002280)={0x0, 0x0, 0x0, 0x1, 0x9, r0, &(0x7f0000002480)="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", 0x1000, 0x9, 0x0, 0x0, r5}]) 18.909565081s ago: executing program 8 (id=11477): r0 = socket$inet(0x2, 0x3, 0x8d) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000340)=ANY=[@ANYRES32], 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) fremovexattr(r1, &(0x7f0000000040)=@known='system.posix_acl_default\x00') getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000080)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x78, r2}) r4 = socket(0xa, 0x5, 0x0) setsockopt$inet6_int(r4, 0x29, 0x4c, &(0x7f0000000000)=0xfffffffe, 0x4) ioctl(r4, 0x8916, &(0x7f0000000000)) ioctl(r4, 0x8936, &(0x7f0000000000)) 18.821573608s ago: executing program 5 (id=11478): syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) socket$kcm(0x10, 0x2, 0x0) syz_usb_control_io$uac2(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000002e40)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff, 0xee01}}, './file0\x00'}) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x74) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x18, r3, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}}, 0x0) 18.708213264s ago: executing program 8 (id=11479): ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(0xffffffffffffffff, 0xc1004110, &(0x7f0000000000)={0x0, [0x2, 0xffff133a, 0x2], [{0x0, 0xffffffff}, {0x2, 0xffffffff}, {0x0, 0x400ffff}, {}, {0x1}, {}, {}, {0x2, 0xfffffffc}, {0x0, 0x4}, {0x0, 0x1}, {0x0, 0xffffffff}], 0x12, 0x0, 0x0, 0x8000000}) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0xe654, 0x1, 0x1, 0x80000}, 0x0, 0x0, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @hyper}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1f, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) (fail_nth: 1) 18.49563787s ago: executing program 3 (id=11480): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0x1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x4, 0x4, 0x4, 0x10005, 0x804, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x200}, 0x50) 18.470285326s ago: executing program 6 (id=11481): ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(0xffffffffffffffff, 0xc1004110, &(0x7f0000000000)={0x0, [0x2, 0xffff133a, 0x2], [{0x0, 0xffffffff}, {0x2, 0xffffffff}, {0x0, 0x400ffff}, {}, {0x1}, {}, {}, {0x2, 0xfffffffc}, {0x0, 0x4}, {0x0, 0x1}, {0x0, 0xffffffff}], 0x12, 0x0, 0x0, 0x8000000}) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0xe654, 0x1, 0x1, 0x80000}, 0x0, 0x0, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @hyper}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1f, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) 18.469898423s ago: executing program 8 (id=11482): ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(0xffffffffffffffff, 0xc1004110, &(0x7f0000000000)={0x0, [0x2, 0xffff133a, 0x2], [{0x0, 0xffffffff}, {0x2, 0xffffffff}, {0x0, 0x400ffff}, {}, {0x1}, {}, {}, {0x2, 0xfffffffc}, {0x0, 0x4}, {0x0, 0x1}, {0x0, 0xffffffff}], 0x12, 0x0, 0x0, 0x8000000}) r0 = socket$pptp(0x18, 0x1, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x439, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0x9801}, [@IFLA_LINK_NETNSID={0x8, 0x25, 0xffffffff}]}, 0x28}, 0x1, 0x0, 0x0, 0xc811}, 0x8000) connect$pptp(r0, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) r3 = syz_open_dev$radio(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_DQEVENT(r3, 0x80785659, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r3, 0x4020565a, &(0x7f0000000140)={0x4, 0x98fb0f, 0x1}) close_range(r2, 0xffffffffffffffff, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r5, 0x4068aea3, &(0x7f0000000200)={0x79, 0x0, 0xde1}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC(r6, 0x4068aea3, &(0x7f00000000c0)) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x400000b5, 0x0, 0x1ff}]}) syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0xe654, 0x1, 0x1, 0x80000}, 0x0, 0x0, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @hyper}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$KVM_CAP_PMU_CAPABILITY(r0, 0x4068aea3, &(0x7f0000000280)={0xd4, 0x0, 0x1dc4}) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1f, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) 18.304909246s ago: executing program 3 (id=11483): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x1) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000008b40)=ANY=[@ANYBLOB="3800000040000100fcff0700040000000100000004004880140001801000108004000f8005000400000000000c0002"], 0x38}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket$kcm(0x11, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) r6 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r6, 0x0, 0x0) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) readv(r5, &(0x7f0000000040)=[{&(0x7f0000000440)=""/162, 0xa2}, {&(0x7f0000000200)=""/108, 0x6c}, {&(0x7f0000000500)=""/156, 0x9c}], 0x3) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000022c0)=@newtfilter={0x3160, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0x4}, {0x0, 0xfff2}, {0x1, 0xe}}, [@filter_kind_options=@f_bpf={{0x8}, {0x3134, 0x2, [@TCA_BPF_ACT={0x3130, 0x1, [@m_pedit={0x2d70, 0x1e, 0x0, 0x0, {{0xa}, {0x2cf4, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe80, 0x2, {{{0x1, 0x8, 0x8, 0x2, 0x6}, 0x6, 0x9, [{0x80, 0x24, 0x66, 0x6b9576cd, 0x1, 0xff}, {0x80000000, 0x3ff, 0xc44c, 0xb, 0x4, 0x3ff}, {0x9, 0x7, 0x4, 0x0, 0x101, 0x7}, {0x7, 0xbc, 0x5e9d, 0x5, 0xfffffffb, 0x40}]}, [{0xfffffff8, 0x7, 0x4, 0xfffffffc, 0xa, 0x7ff}, {0x11e, 0xb85, 0x80, 0x5, 0x63fe, 0x6}, {0x120000, 0x1, 0x5, 0x3, 0xffffffff, 0x2}, {0x1, 0x0, 0x6, 0x4, 0xd22e, 0x8}, {0x7f, 0x72, 0x5, 0x2, 0xe, 0xfff}, {0x8324, 0x8, 0x1, 0xa6ef, 0x9, 0x2}, {0x9, 0x8001, 0x9, 0xe44c, 0xfffffffd, 0x8}, {0x0, 0xe3, 0x200, 0xe804, 0x5}, {0x7, 0x4b, 0x9, 0x3ff, 0x7fffffff, 0x7}, {0x7af, 0xa01, 0x7, 0x7, 0x5, 0x6}, {0xc, 0x1, 0x7ff, 0x1, 0x1, 0x1ff}, {0x2, 0x3568c0c9, 0x8, 0x4, 0x0, 0x228f01ae}, {0x6, 0x8, 0x7, 0x4, 0x2, 0x9}, {0xfffffffe, 0xfc7, 0x4, 0xde0000, 0x2, 0xcc}, {0x7, 0x0, 0xb5, 0x0, 0xa, 0x802}, {0xe2, 0x3b3, 0xfffffffd, 0x4, 0x4, 0x1}, {0x400, 0x8, 0x3, 0x9, 0xd48, 0x7}, {0x2, 0x8, 0x3, 0x3, 0x7fff, 0x1ff}, {0xffff, 0x9, 0x6, 0x80000000, 0x8000, 0x3}, {0x6, 0x5, 0x6, 0x40, 0x14000}, {0x3, 0x5, 0xfffffffb, 0x8, 0x8c93, 0x7}, {0x1000, 0xbceb, 0x8, 0xe, 0x1, 0xd5ff}, {0x8, 0x3c, 0x3, 0x3, 0x9, 0x1}, {0x6, 0x5, 0xff, 0xfffffffe, 0xc2}, {0x7, 0x7d, 0x8, 0x1, 0x400, 0x3}, {0x1, 0x7f, 0x7fffffff, 0x6, 0x0, 0xd9c}, {0x1549, 0x10001, 0x4, 0x4, 0x7f, 0x7ff}, {0x0, 0x4, 0x2, 0xfffffffd, 0x6, 0xfffffd50}, {0x5, 0x1, 0x20080000, 0x2, 0x3}, {0x2, 0x2, 0x0, 0xfe, 0x80000000, 0x1}, {0x6, 0xf, 0x7, 0xc63, 0x0, 0xe}, {0xa42d, 0x3, 0x5, 0x2f1b, 0x6, 0xfffffff8}, {0xffff, 0x9a, 0xa5ea, 0x1, 0x8, 0xa83}, {0x3, 0x0, 0x9, 0x7f, 0x7fff, 0x2}, {0x6, 0x6, 0xc9, 0x278, 0x9, 0x3}, {0x5, 0x101, 0x2, 0x8, 0x5, 0x3}, {0x9, 0xb4fe, 0x10001, 0x8, 0x7, 0x4}, {0x5, 0x8b7f, 0x6, 0x2, 0xe, 0x200}, {0x2, 0x9, 0x4, 0x705, 0x0, 0x3}, {0x26fe, 0x9, 0x80, 0x2, 0x8, 0x5}, {0x1000, 0x4, 0x2b6, 0x9, 0xfffffffe, 0x1ff}, {0x8c, 0x8, 0x8000, 0xd, 0x6, 0x80000001}, {0x100000, 0x8d, 0x91, 0x2, 0xb0000000, 0x4411}, {0x1e4d, 0x3ff, 0xfffffbff, 0x80000001, 0x4, 0x5f}, {0x3, 0x1, 0x1, 0x8001, 0x6, 0x4}, {0x4, 0x200, 0x918d, 0x8000, 0x4, 0x8}, {0x10001, 0xc, 0x6, 0x0, 0x100, 0x4}, {0x3d, 0xf6eb, 0xffffffff, 0xc3b, 0x7, 0x1ff}, {0x7, 0xf, 0x6, 0x7fffffff, 0x4, 0x7}, {0x7, 0xfffff5b0, 0x5871, 0x4, 0x3ff, 0x5}, {0x9, 0x3, 0x7, 0x4, 0x0, 0x80000001}, {0xc48, 0x3ff, 0x81, 0x401, 0x2, 0xe}, {0x4, 0x6, 0x6, 0x5e0, 0x3ff, 0xb97}, {0x1000, 0x0, 0x1000, 0x2, 0xffffffff}, {0x81, 0x0, 0x10, 0x489c8a93, 0xff, 0x87f2}, {0x8, 0x8000, 0x6, 0xb, 0x1, 0x7}, {0x100, 0x9, 0x1, 0xe, 0x9, 0x4}, {0x3, 0x1, 0x8001, 0x4, 0x3022e6d, 0x9}, {0x7, 0x5, 0x5, 0x6, 0x636, 0x7}, {0x0, 0x4, 0x9, 0x10000, 0x7, 0x80}, {0x5, 0x7f, 0x2, 0x3, 0xbf800000, 0x3}, {0x1, 0x1, 0x5, 0x8, 0x0, 0x8}, {0x5, 0x4, 0x6, 0x7, 0x8001, 0x8}, {0x4, 0x2, 0xa, 0x7, 0x7e2b, 0x7}, {0x3, 0xa7f2, 0x295c9425, 0x7ff, 0x3ff, 0x15}, {0xfffffffa, 0x1, 0x3, 0x8a0, 0x2, 0xffff8000}, {0x1, 0x8, 0x6, 0x8, 0x5, 0xdf5}, {0x9, 0xfffffffa, 0x6, 0x10001, 0x7, 0x7}, {0x7, 0x80, 0x7, 0x6, 0xf, 0xed2}, {0x3, 0x367a2a7a, 0x6, 0xe, 0x5, 0x4c9}, {0x9a, 0x6aa55c4e, 0x5, 0x800, 0x3, 0x7}, {0x2, 0x8, 0x1, 0x2, 0x4, 0x5}, {0xd96, 0x7, 0x8, 0x8, 0x1, 0x1}, {0xa9, 0x800, 0x7, 0x5, 0x6, 0x826e}, {0xfd, 0x13, 0x3, 0x7f, 0x80, 0x51f}, {0x3, 0xc74e, 0x9, 0xfffffffd, 0x9, 0xfffffff2}, {0x4, 0x200, 0x2a4, 0xffffffe0, 0x7, 0xfff}, {0x2, 0x5, 0x1c18, 0x40e, 0x6, 0x5}, {0x65d3ea41, 0x40, 0x0, 0x5, 0x401, 0x1ff}, {0x7fffffff, 0x4, 0x4, 0x401, 0xd6f, 0x8}, {0x7f, 0x8, 0x7, 0x4, 0x4a0, 0x9}, {0x0, 0x5, 0x1, 0x0, 0x10}, {0xfffffffc, 0x8616, 0x2, 0x4, 0xf, 0x8cfc}, {0x3, 0x2, 0x86, 0x59c61a80, 0x3, 0x5}, {0x5, 0x0, 0x6, 0x5, 0xb, 0x8000}, {0xffffe207, 0x6dd4, 0x8001, 0xbc42, 0x3, 0x10}, {0x8, 0x10, 0x5, 0x2, 0x847, 0x3}, {0xcaf, 0x0, 0x7, 0x3, 0x4, 0x8000}, {0x94a0, 0x3, 0x0, 0xffff, 0x10, 0x1}, {0x2b, 0x1, 0x7fff, 0xce8f, 0x8, 0x9}, {0x1, 0x0, 0xdb, 0x6, 0x2000, 0x5}, {0xf5a, 0x4, 0x7, 0x80, 0x8, 0x8}, {0x6, 0x2, 0xa, 0x6fa6, 0x1, 0x2}, {0x101, 0x847, 0x6, 0x5, 0x2}, {0x1, 0xd0, 0xffff7fff, 0x2, 0x6, 0x100}, {0x65, 0x6, 0x0, 0x4, 0x9, 0x7}, {0x7d, 0x0, 0xb3, 0xffffffff, 0x6, 0x7}, {0x8, 0x8, 0x100, 0x1, 0x10000, 0xb1d}, {0x5, 0x9, 0x9, 0x14d8, 0x1394, 0x1}, {0x10001, 0x43, 0x101, 0x0, 0x5}, {0x80000001, 0xffffffff, 0xf, 0x74, 0x2, 0x7}, {0x8f, 0x5, 0x9, 0x5000000, 0xcd8, 0x10001}, {0xc7, 0x4, 0xf97, 0x0, 0x8001, 0xd7}, {0x9, 0x1, 0x800, 0x100, 0x9, 0xffffffff}, {0x400, 0x200, 0x8, 0xff, 0x2, 0xe}, {0xb, 0x3b9b, 0x7, 0x5, 0x5, 0x1}, {0x1, 0xb09c, 0x8, 0x6, 0x0, 0x7fffffff}, {0x7, 0x2, 0xf2, 0x8000, 0x2, 0x3}, {0x1000, 0x2, 0x8000, 0x2, 0x5, 0x2}, {0xfffffe01, 0x5, 0x1, 0x7, 0x4, 0x3}, {0x1ff, 0xffffffe7, 0x2, 0x5, 0x400, 0x80}, {0x1, 0x7, 0x1, 0x1, 0x61}, {0x6, 0x7, 0xb6, 0x4b, 0x5, 0x9}, {0xffff, 0x91, 0x6, 0x315, 0xffff, 0x1}, {0x5, 0x5, 0x6, 0x9, 0x60f9, 0x9}, {0x3, 0x5, 0xffffffff, 0xfffffffd, 0x5}, {0x5, 0x8, 0xbbe, 0x5, 0x4000400, 0x3}, {0xf3f8, 0x0, 0x9, 0x8, 0xc, 0x1}, {0x1ff, 0x10001, 0x4, 0x4, 0xff, 0x2}, {0x4, 0x3ff, 0xfffffffe, 0x1, 0x400, 0x4}, {0x6, 0xff, 0x7, 0xa, 0x41, 0x7}, {0x8001, 0x5, 0x7, 0x5, 0x0, 0x40220812}, {0x905, 0xff, 0x6, 0x3, 0x80000001, 0x8}, {0x12, 0xb, 0x0, 0x24d3, 0x5, 0x7}, {0x8, 0x9, 0xfffffff1, 0x10, 0x10e3, 0x6}, {0x7fffffff, 0x9, 0x6, 0x0, 0x633, 0x4}, {0x1, 0xd, 0x3, 0x6, 0x42000, 0xd}, {0x70, 0x40, 0x5, 0x7, 0x61, 0x2}], [{}, {0x4}, {}, {0x2, 0x1}, {0x0, 0x1}, {0x1}, {0x0, 0x1}, {0x4}, {}, {0x2, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x2}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {0x2}, {0x2}, {0x4}, {0x1, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3}, {0x4}, {0x2, 0x1}, {0x2}, {0x4}, {0xb74c73679a65c5af, 0x1}, {0x2, 0x1}, {0x5}, {0x12248ff574f9aad4, 0x1}, {0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {}, {0x5}, {0x0, 0x1}, {0x6}, {0x5, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x1}, {0x5}, {0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x2}, {0x0, 0x1}, {0x2}, {0x1}, {0x2}, {0x4, 0x1}, {0x1, 0x1}, {0x4}, {0x4, 0x1}, {0x2, 0x1}, {0x9, 0x1}, {0x1, 0x1}, {0x3}, {0x0, 0x1}, {0x6, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {}, {0x3}, {0x0, 0x1}, {}, {0x1}, {0x0, 0x1}, {0x5}, {0x5}, {0x3}, {0x2, 0x1}, {0x4, 0x1}, {0x4}, {0x4, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x1}, {0x5}, {0x0, 0x1}, {}, {0x1}, {0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x1}, {0x1, 0x1}, {0x2}, {0x5, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x5}, {0x2}, {0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {}, {0x3}, {0x3}, {0x5, 0x1}, {0x3}, {0x5}, {}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x5, 0x1}]}}, @TCA_PEDIT_PARMS_EX={0xe50, 0x4, {{{0x80000, 0x7, 0x0, 0xba, 0x8}, 0x3, 0x7, [{0x7, 0x8, 0x2, 0x1ff, 0x7, 0x4}, {0x1000, 0x2, 0x6, 0x3, 0x4, 0x3}]}, [{0xa66, 0x81, 0xffff, 0x5, 0x1, 0x5}, {0xffff, 0x8, 0x3, 0x3, 0x0, 0x6a64}, {0x2, 0x3ff, 0x2, 0x5, 0x8, 0x6}, {0x80, 0x101, 0x7, 0xe4, 0x7, 0xfffffffe}, {0x2, 0x7, 0x0, 0x68a, 0x10001, 0x90de}, {0x5, 0xfffffff7, 0x9, 0x8001, 0x5, 0x3}, {0x7, 0xa, 0x7, 0x2, 0x9, 0x59}, {0x280, 0xfffffff3, 0x3ff, 0x7fffffff, 0xb, 0xfffffffb}, {0x1, 0x1, 0xccb, 0x80000001, 0x4, 0x4}, {0x4, 0x4, 0x7, 0x8, 0x3, 0x1000}, {0x0, 0x1, 0xf, 0xea1, 0xe, 0x5}, {0xffffffff, 0xd99, 0x6, 0x0, 0x81, 0x8}, {0x4, 0x9, 0x7, 0x0, 0x80, 0x3}, {0xc081, 0x9, 0x1, 0x100, 0x8001, 0x29b6}, {0xffffffff, 0x3, 0x3, 0x8000, 0x2, 0x8}, {0xe, 0xcb0, 0x5abb, 0x7, 0x5, 0x3}, {0x5, 0x80000001, 0x2, 0x9, 0x5, 0xa}, {0x7, 0x8, 0x4, 0x7, 0x200, 0x80}, {0x5f, 0x3e, 0x0, 0x6, 0xffffffff, 0xef45}, {0x8, 0x5, 0x100, 0x2, 0x81, 0x80}, {0x9c, 0x1ff, 0x80, 0x0, 0x9, 0x9}, {0x4, 0x6, 0x80000000, 0x8, 0x6, 0xf3}, {0x7fffffff, 0x5, 0xff, 0x1, 0x401, 0x401}, {0x4, 0x5, 0x8, 0x4, 0x1, 0x100}, {0x2e, 0x9, 0x10000, 0x1c1, 0xffffff76, 0x6}, {0xfffffff0, 0x4, 0x1, 0x5, 0x2}, {0x7, 0x400, 0xa2, 0x671, 0xffffffff}, {0x2a1, 0x8, 0x5, 0x6, 0xfffffbff, 0x100}, {0x2800, 0x4, 0x2, 0x7, 0xd868}, {0x2, 0x2, 0x80000001, 0x6, 0x5, 0x5}, {0x3, 0x3, 0x5, 0x3ff, 0x401}, {0x5, 0x9, 0x7, 0x7, 0x7}, {0x7fff, 0x5, 0x6, 0x5, 0x525, 0x6}, {0x6, 0x4, 0x0, 0x4, 0xee8f, 0x1}, {0x2, 0x1, 0x6, 0x4, 0x5, 0x459}, {0x5, 0xfffffffc, 0x9, 0x2, 0x9, 0xb4}, {0xa, 0x6, 0x7, 0x8, 0x8, 0x2800}, {0x80000001, 0x3, 0x95b43b53, 0x4, 0x0, 0x3}, {0x7, 0x3ff, 0x9, 0x4, 0xb386, 0x2}, {0x3, 0xffff, 0x2, 0x4, 0x46, 0x5}, {0x10, 0x2, 0xfffffffa, 0x6, 0x3d, 0x8001}, {0xc1, 0x3ff, 0xbd9e, 0x80, 0x6, 0xda71}, {0x400, 0x7ec, 0x26cb, 0x9, 0xe0bf, 0xfff}, {0x5e5, 0xfb1d50b, 0x8, 0x3, 0x8, 0x77}, {0x100, 0x10, 0x2, 0x80000000, 0x4, 0xa7}, {0x1f, 0x7, 0x0, 0x5, 0x10, 0x4}, {0x10000, 0x3, 0x10001, 0x8, 0x10000000, 0x80}, {0x0, 0x6, 0xe76, 0x10, 0x1, 0x9}, {0x80000001, 0xc2c, 0xdf, 0x80, 0x9, 0x8001}, {0x1, 0x4, 0x3, 0x3, 0x8}, {0x80000000, 0x9, 0x3, 0x8, 0xf37b, 0xff}, {0x3, 0x8, 0x3fe0, 0x6, 0xe, 0x9}, {0x5, 0x1, 0xc789, 0xfff, 0xfffffff7, 0xec}, {0x2, 0x1, 0x3, 0x10001, 0x6, 0x7ff}, {0x399, 0x7, 0x2, 0x2cc, 0xb4}, {0xffff0001, 0x8, 0x3, 0xb5, 0x80000000, 0x1}, {0xb79, 0x6, 0x100, 0x7, 0x3, 0xffffff45}, {0x80000000, 0x3, 0x5, 0x4, 0x1a8, 0x80}, {0xd, 0x3, 0x0, 0x9, 0x0, 0x625}, {0x200, 0x10, 0x9, 0x8001, 0x6, 0xf}, {0x0, 0x387, 0x9, 0x1000, 0xd, 0x8000}, {0x1, 0x0, 0xd, 0x5, 0x3, 0xffff8000}, {0x4, 0x7, 0xbb5, 0x7, 0x100, 0x411c}, {0x0, 0x0, 0x2e3, 0xfffff000, 0xb47, 0x7ff}, {0x6, 0x5, 0x5, 0x7fffffff, 0x5, 0x5}, {0x5, 0x8, 0x7, 0x7, 0x5, 0x5}, {0x7, 0x5, 0x7fff, 0xf, 0x40, 0x1}, {0x10001, 0x20, 0xe44, 0xfffffe01, 0x7, 0x7}, {0x9, 0x2, 0x9, 0x6, 0x8, 0x3}, {0x1, 0x1, 0x8, 0x24c4, 0x8, 0x8}, {0x879, 0x400, 0x7, 0x4, 0x3, 0x10000}, {0x3, 0x5, 0x0, 0x10001, 0x0, 0xc495b0a7}, {0xfffffffa, 0x1, 0x80000001, 0x0, 0x9, 0x80000001}, {0x1ff, 0x4, 0xfffffffe, 0x8, 0x6, 0x2}, {0x0, 0x7, 0x9, 0x1b, 0x0, 0x974}, {0x5, 0x9, 0x9, 0x7, 0x0, 0x2}, {0x3ff, 0x3350, 0x6, 0x6, 0xfffffff8, 0xf4}, {0x4, 0x7f, 0x9, 0x3f9, 0x10, 0x9}, {0x1, 0x7, 0x3b, 0xffffffff, 0xfffffffa, 0xc4}, {0x8, 0x80000000, 0x8, 0x8, 0x2bbb800, 0xfffffffb}, {0x6, 0x7ff, 0x400, 0x1ff, 0x8, 0x4}, {0x9, 0x3dad, 0x5, 0x81, 0xb, 0x5}, {0x7, 0x38980000, 0x1ff, 0xffff1499, 0x0, 0x1}, {0x1, 0x10, 0x5e, 0x0, 0xffff4211, 0x100}, {0x101, 0x20bec2d6, 0xb, 0x8, 0x4, 0x40000}, {0x6, 0x6, 0x8, 0x62e6, 0x8, 0xed}, {0x4, 0x4, 0x5, 0x26e, 0x379, 0x3}, {0x7, 0xfffffff9, 0x200, 0x6, 0xa, 0x2}, {0x6, 0xc65, 0x4c8a, 0x7, 0x6, 0x57}, {0x1, 0xdf, 0x4, 0x0, 0x8, 0x8}, {0x200, 0x3, 0xd569, 0x7, 0x3ff, 0xc}, {0x4, 0x8, 0x4, 0x1000, 0x8, 0x7f}, {0x1, 0x6, 0x0, 0xffffffff, 0x1ff, 0x200}, {0x27, 0x7fffffff, 0x2c, 0xb, 0x0, 0x1}, {0x9, 0x0, 0x151, 0x5, 0x951, 0xc4}, {0x6, 0x9, 0x24, 0x5, 0xffff5ad9, 0x9}, {0x5, 0x1, 0xfffff000, 0x9}, {0x7fff, 0x0, 0x4, 0x0, 0x8, 0x401}, {0x27, 0x4, 0x2, 0x5, 0x3, 0x8}, {0x3, 0x6b, 0x81, 0x400, 0x5, 0xd}, {0x7, 0x4, 0x0, 0x6, 0x635, 0x7}, {0x5, 0x4, 0x2, 0x7fffffff, 0x200, 0x7}, {0x3, 0x10001, 0x800, 0x200, 0x0, 0x81}, {0x7, 0x8, 0x5, 0x200, 0x9, 0x7}, {0xfffffffc, 0x800, 0x200, 0x400, 0x6, 0x7}, {0x2, 0x2000000, 0x5, 0x0, 0x6, 0x81}, {0xfa, 0xfffffffd, 0x2, 0x4, 0x4, 0x80000000}, {0x7, 0x7, 0x2, 0x100, 0x10001, 0x9}, {0x2, 0x4d5c, 0xda6a, 0x80, 0x80000000, 0x2}, {0x59, 0x8, 0x8, 0x9, 0x8}, {0x6, 0x7, 0xd, 0x8c3, 0xff, 0x9}, {0x8, 0x8, 0xb, 0x0, 0x3, 0xe}, {0x5, 0x1, 0x6, 0x6, 0x3, 0x3}, {0x64808a3b, 0x94, 0x1, 0x8, 0x5b, 0xaae}, {0x0, 0x4, 0x80000001, 0x1, 0x100, 0x10}, {0x7880000, 0x200, 0x80000000, 0x5, 0x7fff, 0x6}, {0xa742, 0x0, 0xe9, 0xfffffffd, 0x40000000, 0x7f}, {0x76c, 0xfff, 0x1, 0x5}, {0x5, 0x0, 0x7, 0x26, 0x6, 0x6}, {0x40000000, 0x0, 0x7fffffff, 0x8, 0x5, 0x6}, {0xffff00b3, 0x2800, 0x9, 0x6, 0x6}, {0x8, 0x3, 0x100, 0x7d, 0xfffffffa, 0xffffffff}, {0x2, 0x7fffffff, 0xf8, 0x8c, 0x4, 0x8}, {0x5, 0x2, 0xffffffff, 0x4, 0x0, 0x1}, {0x9, 0x0, 0x5, 0xfffffeff, 0xc5c000, 0x4}, {0x8ed, 0x8466, 0x401, 0xfffffeff, 0x2, 0x6}, {0x0, 0x7, 0x0, 0x81, 0x20000, 0x1e}, {0x37, 0x2, 0xb, 0x60, 0xfffff001, 0x8001}], [{0x3}, {0x3}, {0x2, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x2}, {0x2}, {0x2}, {0x1, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x5}, {}, {0x3}, {0x4, 0x1}, {0x5}, {0x0, 0x1}, {0x5}, {0x0, 0x1}, {0x4, 0x1}, {0x1}, {0x3, 0x1}, {0x1}, {0x5}, {0x1, 0x1}, {0x2}, {}, {0x3}, {0x1}, {0x3, 0x1}, {0x3}, {0x2}, {0x5, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x3}, {0x4}, {0x1, 0x1}, {0x4, 0x1}, {0x4}, {0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x2}, {0x1, 0x1}, {0x5, 0x1}, {0x5}, {0x4, 0x1}, {}, {0x1}, {0x2}, {0x3}, {0x5, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {0x4}, {}, {}, {0x4, 0x1}, {0x2}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x5}, {0x2}, {0x4}, {0x4, 0x1}, {}, {}, {0x1, 0x1}, {0x2, 0x1}, {0x4}, {0x1, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x1}, {0x5, 0x1}, {}, {0x1}, {0x5, 0x1}, {}, {0x4}, {0x5, 0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x1, 0x8d9559cc712fdb7a}, {0x3, 0x1}, {0x2, 0x1}, {}, {0x4e98c1a2c4daa402, 0x1}, {0x4, 0x1}, {}, {0x4, 0x1}, {0x2, 0x2}, {}, {0x3, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x1}, {0x4}, {0x3}, {0x5, 0x99cc7d49d4919b7e}, {0x2, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x5}, {0x1}, {0x1, 0x1}, {0x4}, {0x1, 0x1}, {}, {0x3}]}}, @TCA_PEDIT_KEYS_EX={0x18, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}]}, @TCA_PEDIT_KEYS_EX={0x78, 0x5, 0x0, 0x1, [{0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}]}]}, @TCA_PEDIT_PARMS={0xef8, 0x2, {{{0x36, 0x6, 0x7, 0xfffffffc, 0x7b}, 0x7, 0x5, [{0x54, 0x401, 0x0, 0x5, 0x2, 0x2}, {0x86, 0x81, 0x2, 0x9, 0x0, 0x5744}, {0x101, 0xe, 0x2, 0x8, 0x7, 0xb398}, {0x7, 0x9, 0xd10, 0x5, 0x1, 0xcb60}, {0x1, 0x3, 0x490, 0x0, 0x2, 0x7fffffff}, {0x20000, 0x10, 0x8, 0x33, 0x2, 0xc}, {0x1ff, 0x6, 0x9, 0x8001, 0x6, 0x1c27}, {0x10, 0x8, 0x5, 0x3ff, 0x6, 0xf322}, {0x2c, 0x8, 0x6f6f, 0xea, 0x5e, 0x81}]}, [{0x6, 0x8001, 0x8001, 0x3, 0x0, 0x78}, {0xfffffffe, 0x8001, 0x9, 0x7, 0x7905, 0xc}, {0x401, 0x9, 0x6, 0xb, 0x7, 0xc}, {0x2, 0x8, 0x9, 0x7, 0x4b, 0x4}, {0x7, 0x6, 0x7f, 0x0, 0x2, 0x2}, {0x2ed, 0x6, 0x3ff, 0x6, 0xd, 0x9}, {0x7d, 0x7fff, 0x1, 0x9, 0x101, 0xfffff369}, {0x9e, 0x8000, 0x6, 0x7, 0x0, 0x6}, {0x427, 0xc, 0x18, 0x9, 0xf5e, 0x2}, {0x4, 0x8001, 0x0, 0x6, 0x100, 0x9}, {0x77a7, 0xffffffff, 0x4, 0x1, 0x6, 0x10001}, {0x8, 0xa82, 0x7, 0x5, 0x3, 0x10000}, {0x5f, 0xe9, 0x8, 0x1e0601db, 0x3, 0x9}, {0x1, 0x2523, 0x5, 0x2, 0x5, 0x4f1}, {0xfffffbff, 0x3, 0x3, 0x5, 0x9, 0x5}, {0x8, 0x200, 0x5, 0x278, 0x800, 0x3}, {0xb, 0x21, 0x6, 0xe, 0x8, 0x1}, {0xb, 0x5, 0x6, 0x10, 0xe5, 0x8}, {0x10, 0x7f, 0x7fff, 0x1, 0x0, 0x1}, {0x2, 0x1, 0x1, 0x80000000, 0x0, 0x9}, {0xc7b5, 0xb, 0xfffffffb, 0x0, 0x100, 0x7ff}, {0x5, 0x2, 0x2, 0x8, 0x5, 0x3}, {0x0, 0x4, 0x1, 0x4, 0x6, 0x9}, {0x5c0f, 0x5, 0x0, 0x10000, 0x8, 0x7}, {0x80, 0x6, 0x3ff, 0x7d, 0x4, 0x40}, {0x0, 0x242b, 0x4, 0xffffffff, 0x7, 0x7}, {0x4, 0x5, 0x5, 0x2, 0x10001, 0x4}, {0xb150, 0x2, 0x2, 0x9, 0x4, 0x8}, {0xd, 0x80000001, 0x3, 0x6, 0x8, 0xfff}, {0x6, 0x7ea261c5, 0x10, 0x68c, 0x998, 0x9}, {0x2, 0xff800000, 0x7f, 0x9e, 0xfe64, 0x200}, {0x40, 0x7, 0x4, 0x32, 0xffffffff, 0x2}, {0x5, 0x9, 0x7, 0x4, 0x4, 0x7}, {0x200, 0x4, 0x5, 0x2, 0x10, 0x7fffffff}, {0x7, 0xf, 0xa, 0x8, 0x9, 0x80000000}, {0x4, 0xb6, 0x9, 0xc, 0x10b76742, 0x2}, {0x790a, 0x6, 0x8, 0x4, 0x801, 0x9}, {0xffffffff, 0x9, 0x101, 0x3, 0x1, 0x80000000}, {0x6, 0x1cdf6be9, 0xffffffff, 0x7, 0x1d5, 0x5}, {0x0, 0x2, 0x1, 0x8, 0x6, 0xe}, {0xfffffffc, 0x7, 0x800, 0x9, 0x2, 0x4}, {0x1ff, 0x0, 0x4, 0x9, 0xb, 0x6}, {0x401, 0x61dd, 0x9, 0xffffffff, 0x3}, {0x400, 0x7fff, 0xfffffff9, 0x0, 0x5, 0x3}, {0xffffffff, 0x8, 0x0, 0x54519098, 0x80000000, 0x8}, {0x1, 0xdd, 0x8, 0x10, 0x1, 0x6}, {0x7, 0x0, 0x8001, 0xff, 0x3, 0xb8}, {0xffffffff, 0x6, 0x1fffc0, 0x1, 0x7, 0xfffffffb}, {0x81, 0x9, 0x7f2b, 0x10, 0x4, 0xa4de}, {0xed8c, 0xfffffffc, 0x2, 0x8, 0x0, 0x5}, {0x80000000, 0xfff, 0x3, 0x880, 0xf2, 0x3}, {0x48ade642, 0x9, 0x5, 0x2, 0xffff, 0xffffffff}, {0xc2a, 0x0, 0x8, 0x2, 0xffffffff, 0x2}, {0xffffffff, 0x400, 0x1, 0x7, 0x7, 0x2}, {0x7fff, 0x1, 0x2, 0x7, 0x4, 0x401}, {0x40, 0x80000001, 0x9, 0x9, 0xf3, 0x37}, {0x7ff, 0x0, 0x2, 0x8001, 0x0, 0xc}, {0xffffffff, 0x8, 0x7, 0xfffffffc, 0x3}, {0x5, 0x9, 0x1, 0x6, 0x200, 0x9}, {0x8000, 0x1, 0xe5, 0x9e14, 0x800, 0x6}, {0xc5, 0x0, 0x5, 0x9, 0x7ff}, {0xfffffff8, 0x40, 0x1ff, 0x10001, 0x579, 0x8}, {0x1, 0x1, 0x4, 0x9, 0x82, 0x8001}, {0xfffffff8, 0x0, 0x5, 0xc, 0x5, 0x7fffffff}, {0x2, 0x9, 0xfff, 0xffffffbc, 0x6, 0x2}, {0x1000, 0x1, 0x5, 0x2, 0x4, 0x7ff}, {0x4, 0x8, 0xfffffff8, 0x3, 0xef42, 0x5}, {0xff, 0x4, 0xd3, 0x60, 0x1ff, 0x3}, {0xfffffff7, 0x2, 0xc0d6, 0x3cd46824, 0x5}, {0x0, 0x4, 0xfffffffa, 0x1, 0x6, 0x6}, {0x280b, 0x1, 0x400, 0x8001, 0x5, 0x3}, {0x0, 0x80000001, 0xd, 0x1, 0x1, 0x9}, {0xc55, 0x0, 0xfffffff7, 0x8, 0xe}, {0xfff, 0x2934, 0x46c, 0x6, 0xfffffffa, 0x2}, {0xbfa, 0x0, 0xfffffff8, 0x3663, 0x8, 0xffffff87}, {0x9, 0x0, 0x1000000, 0x9, 0xc1a, 0x4}, {0x6, 0x7, 0x5, 0xfffffffc, 0x1, 0x414e}, {0x6, 0x5, 0x3, 0x3f1db217, 0x2, 0x8000}, {0x2, 0xc0000000, 0x4, 0xb4, 0x6}, {0xa66, 0xf560, 0x9, 0x81, 0x80000000, 0x1}, {0x80000001, 0x6, 0x7, 0x8, 0x9c, 0x401}, {0x9, 0x5, 0x7, 0x80000000, 0x4, 0x458}, {0x2, 0x80000000, 0x81, 0x1, 0x34, 0x7}, {0xfffffff4, 0x1000, 0x7, 0x7ff, 0x0, 0x6}, {0x4, 0x7, 0xa5, 0x2, 0x8, 0x8}, {0x800, 0x2, 0x49, 0x0, 0x5, 0x5}, {0x3, 0x697f, 0x6, 0x9, 0x1, 0x1000}, {0x7, 0x2, 0x7, 0x2, 0xffffffff, 0x3ff}, {0x2, 0xffff0000, 0x1, 0x7fffffff, 0xc0000, 0x7}, {0x6, 0x5, 0x1, 0x80000000, 0x0, 0x2}, {0x2, 0x9, 0xfb, 0x7fff, 0xb, 0x8}, {0x2, 0x7, 0x1, 0xcc0, 0xff, 0x3}, {0xffff, 0xffffff00, 0xa, 0x9, 0x4a4a, 0x9}, {0x3, 0xe, 0x8001, 0x3, 0x1, 0x9142}, {0xe, 0x58d, 0x2, 0x0, 0x1, 0x1ff}, {0x27f2a0b5, 0x6, 0xd, 0x2, 0xb, 0x6f}, {0x5, 0x5, 0x818b, 0xfffffff8, 0x0, 0x40}, {0x9, 0xe, 0xa, 0x2, 0x7b1b, 0x7}, {0x0, 0x7, 0x101, 0x2, 0x7000, 0x101}, {0xfff, 0x7fff, 0x2, 0xe, 0x84c, 0x7fffffff}, {0x9, 0x1, 0xfe8, 0x7, 0x6, 0x1}, {0x9, 0x2, 0x4, 0x40, 0x4, 0x81}, {0x5, 0x8, 0xe67, 0x9, 0x7a, 0x5}, {0x1000, 0x2, 0x2d0, 0x6, 0x5, 0x5}, {0x7, 0x4, 0xfffffc01, 0x9, 0x7, 0x3}, {0x8, 0x519, 0x2, 0x8a, 0x2, 0x4}, {0x6, 0x71, 0x2, 0x80000000, 0x2, 0x80000001}, {0x0, 0x40, 0x4, 0x0, 0xfffffff7}, {0x2, 0x3, 0x5, 0x1, 0x6, 0x8}, {0xfffffffa, 0x9, 0x4, 0x7, 0x7, 0x81}, {0x2, 0x1d, 0x6, 0xfffffffa, 0x6, 0x95}, {0xa, 0x81e, 0x2, 0x8, 0x9, 0x2}, {0x5, 0x7f, 0xfa, 0x9, 0x1, 0x3}, {0xaa, 0xa4, 0x1, 0x6, 0x8, 0x1ff}, {0x6, 0x80000000, 0x1, 0xfff, 0xe, 0x7}, {0x2, 0x1, 0x9, 0x4, 0xff}, {0x8, 0x2, 0x40b3, 0x8, 0x3, 0x4}, {0x0, 0x8, 0xff, 0xf, 0x7, 0x8}, {0x0, 0x2, 0x4, 0xd5, 0x3, 0x7ff}, {0x1, 0xa6f9, 0x5, 0x2, 0x9, 0x9}, {0x17, 0xfc, 0x81, 0x3, 0x0, 0x9e}, {0x1, 0xb, 0x2da, 0x200, 0x7ff, 0x4}, {0x8, 0xd, 0x3, 0x4, 0xfffff626}, {0x2, 0x1, 0x8, 0xffff629b, 0x7, 0x2}, {0x8, 0x8000, 0x800, 0x0, 0x80000001, 0x5}, {0x3, 0x9, 0x200, 0xb13, 0x1, 0x9}, {0x7fff, 0x972, 0x8f3a, 0x42a3, 0x1, 0x3}, {0xffff7fff, 0x9, 0x1, 0xfff, 0x100, 0x5}], [{0x3}, {0x5}, {0x4, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {}, {0x2}, {0x1, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x2}, {0x7, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x2}, {}, {0x2, 0x1}, {0x2, 0x1}, {0x2}, {0x2, 0x1}, {0x5, 0x1}, {0x2}, {0x0, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x2}, {0x2, 0x1}, {0x5}, {0x2, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x5}, {0x4, 0x1}, {0x0, 0x1}, {0x4}, {0x5, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x6}, {0x3, 0x1}, {}, {0x4, 0x1}, {0x5}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x2}, {0x3}, {0x4, 0x1}, {}, {0x5, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x2}, {0x5, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {}, {0x3}, {0x1}, {0x5, 0x1}, {}, {0x2}, {0x0, 0x1}, {}, {0x2, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x3}, {0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x3}, {0x5}, {0x4, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x3}, {0x4, 0x810befceb0cf6af0}, {0x4, 0x1}, {0x3, 0x1}, {0x5}, {}, {0x2, 0x1}, {0x0, 0x1}, {0x1}, {0x5, 0x1}, {0x1}, {0x5}, {0x3, 0x1}, {0x2}, {}, {0x5, 0x1}, {}, {0x2, 0x1}, {0x28bc59a12725f5b9, 0x1}, {0x4}, {0x5, 0x1}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {}, {0x1}, {0x5, 0x1}, {0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x3}, {0x2, 0x1}, {0x4, 0x1}, {0x4}, {0x2, 0x1}, {0x2}, {0x3, 0x1}], 0x1}}, @TCA_PEDIT_KEYS_EX={0x98, 0x5, 0x0, 0x1, [{0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}]}]}, {0x51, 0x6, "d96dc6eec5c6581673eedfae04fe34bc227c48dd4350e5db34b9bd8505da32750d16f1b86bd5d9337c3a10c7a844fe401ee70e12c4abbd332fa5aa2d47fa93aa9a2feb7f00def3f7f2122dec08"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_skbedit={0xd0, 0x1b, 0x0, 0x0, {{0xc}, {0xc, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x1}]}, {0x99, 0x6, "8d8c3bddd126e81cc400b2d548d8822d3a619309a2e068b45b5c3e14d107312688cd582b509961c4ecee19b5d8a833dea3aa2d3f476bf9baaa04c0f4f107e538e1a4d3a5b3d3aa486cfb8006972f061223983458730b733f2b0415c1e2eaa318ec21c3701a40e1fd4d26ff56343904544bb449dfff08cbcde28a6fcd8ee250ffeb7f4bacd496147de6b5c05f2ad4a3cba73a338df5"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x124, 0x4, 0x0, 0x0, {{0x8}, {0x10, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0xa, 0x3, @multicast}]}, {0xee, 0x6, "0b8e483e20fb6f2c032595f6b4522a523cec97e3bf9cdcf856fcf4d606ca34022e8049fd0e6a6258302e1bc2a63a6c36342f0247ab58687cb97200b364d2ad0ab7d159d87e4c419fb81d2190859fcefe551ef5f5d26b20e7ef85a04a5a5ebef85cdd5a5689be1d43108c73c10b5dab4baf979d07dceea0bfe60c1012e1d43ac0630b275d56ad5f538e23b282926412d8ff1998f2b6cfa813dcf62833540f51f1d9d871f1e8f68d75aa890025e5394a4c0fb64227133ee408d4498c2a6465c73bfb09a9aa13abb77546233bf3a7fbe53ea1d6ad77d5a7acbc11cc458f1ffce1f91286ce5bee56f305f900"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ct={0x94, 0x15, 0x0, 0x0, {{0x7}, {0x20, 0x2, 0x0, 0x1, [@TCA_CT_LABELS_MASK={0x14, 0x8, "025a5118319b07958dd17318785962fd"}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @rand_addr=0x64010100}]}, {0x4d, 0x6, "7ffbdfec3577510296c3b305ab4e94bd2c0a95c550cb90792ea82b8edd11dc6a45b3b4382243ba615482c0031d07abc75575b28086e38c89e6d7bb41d088e3f3aca358cf648af8ac9d"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}, @m_simple={0x134, 0x10, 0x0, 0x0, {{0xb}, {0x80, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_DATA={0x8, 0x3, '!}{\x00'}, @TCA_DEF_DATA={0xa, 0x3, '!^\xa0#-\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x7fffffff, 0x7, 0x4, 0x4, 0x7}}, @TCA_DEF_DATA={0x11, 0x3, '/dev/net/tun\x00'}, @TCA_DEF_DATA={0x11, 0x3, '/dev/net/tun\x00'}, @TCA_DEF_DATA={0xb, 0x3, 'multiq\x00'}, @TCA_DEF_DATA={0x11, 0x3, '/dev/net/tun\x00'}]}, {0x8a, 0x6, "eee60ce62f9be21939a7545bdcd6012c1342767ab4964f4fe9ba0f3ba92effe5aa385ba4bcd9cad239514bd2c07ec8bb52d4e54c3abc7d543d21422f3b2ea6314b98f8be20b2b75177970ae73cadf6d5bfaf8ef045e5ba15f37ee80bf51a27dba5a07bbcf274660f059037686a9884a1a7c8c551701c4f98391f5b2799683c5d07567f0db57d"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}]}}]}, 0x3160}, 0x1, 0x0, 0x0, 0x20000010}, 0x80) socket(0x10, 0x803, 0x0) 18.302395037s ago: executing program 6 (id=11484): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) fsetxattr$security_capability(r0, &(0x7f0000000140), &(0x7f0000000180)=@v2={0x2000000, [{0x0, 0x4}, {0x8, 0x1}]}, 0x14, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x74bc2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x0, 0x1, 0x401, 0x0, 0x92, 0x55, 0x8, 0x1000006, 0x4}, 0x0) fanotify_init(0xa00, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x4048000) ioctl$IOMMU_TEST_OP_ADD_RESERVED(0xffffffffffffffff, 0x3ba0, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x42241, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r3, 0x800c5012, &(0x7f0000000040)) write$sysctl(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) r4 = openat$random(0xffffffffffffff9c, &(0x7f00000003c0), 0x40a06, 0x0) sendfile(r4, r4, 0x0, 0x4800000009) close(r1) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5) sendmmsg(r2, &(0x7f0000000ac0)=[{{&(0x7f0000000200)=@ax25={{0x3, @bcast, 0x2}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000280)="04457935f43bc36664030e1270c5858ba9f1993871ea146825191bc507b1ddb3f587e177e881a96ff96a7d24f074cf2135b50aeb25171c2e8a8b2bf2fceb2212a9eb8997e937b45dbb387786ff6d49e07416929463c35827483e62f1ff0ec8c48e30b8c434ee10f599022d73401e46cabdd57bf34d3880a814ad2f99937ee8ac5cb3ac44faf0a4887f4098c52b0d50abc852021f528b2be9d972397a22af39f6a1bd62e429312d2aab245bc5c4fff1564b67686915548a9418a9b4931b07e4b16244f8fa0dd481329bd354aed17e9345a15295460e3c52b75c79e4ab9d755e4e7c9fa51e651058abb45d28c25efaf86fd195d42263", 0xf5}, {&(0x7f0000000400)="3da8c92e2ecad9e864ea8bdcb45b03704628581852aba1cad30efdd7fb0efc15b6030ae36a45ba5047491696b9948d5646a2699cf87ae73049b21ca1f5c8828a62d8f38d5a075351b196cfa7a48d503ce9a8b0d0e0bdce87e70f24d0f7abddb49ac11616f1e817b3d9791b90255d6c82ffe3c5806de4e6d563d150b8f4ab09b66513868a583ba3422ed8b1723ae6", 0x8e}, {&(0x7f00000004c0)="c46a44ed689fbcb5e1f020c6a8bc1d341adf4710aa310b28f969280031475b2597af7c8d963fcf337508f65b3c0083957929ed7a4f1502c06ec40fcfac826b9d5a7b07cf70bc5017b0eee0", 0x4b}, {&(0x7f0000000540)="a584ffa21604fdbc03a30e1d169186389e722d871586dcd3bf338a00911e438c549083cc537c0475111bb40ff0df11a720fb84c52cb220b74a850a6c47fcc5b74053ecfd936c2bf5f9723535fd07a23ac8eaabf37fb913ddd998ba5cda3fca25dfa3fd531a0b9b2c9681e0c47a4d3462dadeac81c3fdd5c93412bb4232e28e4510e7f1b2d3cd6144190bba1142b8a8d387dc7773c0a572b28c", 0x99}, {&(0x7f0000000600)="1ba8cd324b98db5d4548383a9e1b0220e33776ff275dd8f738c3d78a56157c9b3fc633b36dd61330760089f3693eab593d2ebb8b7dfb545ea33e94ce8021b2666322476aed5b3eac455b73bd446ba1f889af40a2dc44e7c2f642633b4017d9bdfe4516e98606d7ba7cb4b740bb386e20f848c6b3d4ab6a68071d0e8fcff7f788ca005b4dab2329d3e9c0fdf061b4acb57909505381da18bbe46d8b65", 0x9c}, {&(0x7f0000000380)="9a94a5c228e0352771ab1bc41f073c071a507489bee6319ee502720336c5ec9177eb4dd73d49f9", 0x27}], 0x6, &(0x7f0000000700)=[{0x90, 0x119, 0x6, "da9b6c24b0e0bd8f18e9720222166390a4b895e5ad89b27e90152b895a3aa797bb89bb85e2ca38402808cfc746c28b3ecc96c7bb0abb096b2008900c3305b7a047197ce18e79e63e00bc297eda1471927e52780f6ec6e06864da93fe254c10a6f082f5be235446f734d11ed96c6f5420a4a231d4ce793363f23a0320962ce3902c50c3bf"}, {0xc, 0x102, 0x101}, {0x3c, 0x112, 0x6, "502badf4c791db53caf3405938699830dcff16dd157de1921cbc149a124608f9f7f828cf2626f2fd27b1c012b8"}], 0xd8}}, {{&(0x7f0000000800)=@l2tp={0x2, 0x0, @local, 0x1}, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000880)="e72df92ab519d41dff421ca3e705972efb32750de89d8ab5f5f88860fd369ca206151253db7e18af8abf05c55f804bf21e65ccea828354c4bc1d07a6efe92825f1d84427da5213c9375f156ae4470664d43788fc5c284e127afb84b91c27b0d7c4ab755d05d76a808a76e9bf1581cee794a2257de3d0d658e55b9e9a34877cba10681ec43676b33dee4f3e001576e438fbf223a70c758d6a5cf898a256c220686e52b14613d68140f630971763d6478006ae9db8cb9f3c3ef916dbc42c2004583538ee3bc91bb3edf5122fda1d15ab83", 0xd0}, {&(0x7f0000000980)="5faaec6b73287affb167fb6a40e22cd3d7dc353c4499a1fadce77a5f522ee1c729ab5e5b4b1690144e3bd4f61b867639de9a509a98f69f7b0e63324caa34226e100373181934e9c8227ba2814ce53ceeae7b0995d27ca8cc34cb663ebab195e50a4a6448180bd76b29ee326a0cef0fc7819638fd5d14109fe2beaacd95b1577e8e4f74e7b88c603f4a9256f32129f33ec5047778c29b39e1b657022922dbfa7062ef7cc2b758c7bfe32f35e0002a7d948a8e1b3964dcbff60bbfe4673a4a295191c6598d16ce9207d3e6c30097b68c074f3167", 0xd3}], 0x2}}], 0x2, 0x4091) 18.08988559s ago: executing program 5 (id=11485): sched_setattr(0x0, 0x0, 0x0) socket(0x2, 0x2, 0x1) set_mempolicy(0x4000, &(0x7f0000000000)=0xb, 0x8) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = syz_open_dev$usbfs(0x0, 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r2, 0xc0105500, &(0x7f0000000280)={0xa1, 0x5, 0x802, 0xfffe, 0x0, 0x4, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$unix(r0, &(0x7f0000000140)=@abs={0x1, 0x0, 0x4e23}, 0x6e) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r4, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r4, &(0x7f0000000400)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000280)="5338a3848b25e258a25f9dae13ed", 0xe}, {&(0x7f0000000200)="18aca52a7fc7482b170977fd86389f5a59cda1da10826cd956a129a49a08cd", 0x1f}, {&(0x7f00000002c0)="a054774ff7b535448b6e61f9acc7b60e4b54f90ee96ab88689f062c517c0e9f72791e307105fa506737c5afe10453261ae03b8246525630df55062839a800e6a0e7416ceb8ad6d920dff1543df75bd7d0522c9511371120ca79040a1b02a05aa0445c435fe5e57f68c3b0df51fe75d7b505eaf54193c3035ba95a18706f2ea757f0d375739f1ceed80b7ff2832ad9286419ecee76d8fd6b8cc0e73c3530177776ea55a279637", 0xa6}, {&(0x7f0000000380)="529b26e66466eafe532f80ce40ed22e6c7341a1976e9d52b52aae8b71892bf683723c7513e34653f4d1d858cc5ad1fe4a1fb82cfa982f8577bfe7638378ca62cc1754cf71dc0d434c3ec2cf76547b33611ba57f830d2bb68df97225ec64c0ab016b50b74abe718be4211989be6c0d7cdc99fc9b93c95d01142ecd8", 0x7b}, {&(0x7f0000000500)="9a7c908ac51c2a5a016d63ee055d6d5129b6b242f7b7a69489b06fe2f146247e0b7c2889c6dafa95bb3f13c972aabcee505ed26cbd56a0a685969aaf104557fc71b7138988335d142983ec5b7abbb1eab2c1916d135961ae857056677bf5ec86445104e5b9bdc5b789138580bcbb4ee3b95f3052bbcb9975177cd7763dc9010aff97aa13bb300c0ddb0bc6cd28bcdc83cbc66fe24425d035c9a14171b72832fc711ae5d7a8d4e992114ec57c314c24c79b5b8d79794ef345b538200bc5c42d2aad2fb7f990f0249cd5d82a735388875c2d4054a923bb17fe5a529fbb", 0xdc}], 0x5}}], 0x1, 0x20008000) shutdown(r4, 0x1) getpgid(0x0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[], 0x13c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000804) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x3}) 17.494696524s ago: executing program 6 (id=11486): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="5c0000000206050800000000000000000000000005000400000000000900020073797a30000000001400078008001340000000000800064000000000050005000000000005000100060000000d000300686173683a6d6163"], 0x5c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r5, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x44, 0x9, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}, @IPSET_ATTR_ADT={0x14, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @local}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) dup2(r1, r2) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="10797fcd6cd957d2b903c6bf46b4", 0xe) r7 = accept4(r0, 0x0, 0x0, 0x80000) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000400)="8f47e644a9959e93d6bda9c37baac41b633b4716c507e5ec3beecd14d68d306192", 0x21}], 0x1, 0x0, 0x0, 0x4000814}], 0x1, 0x40800) r8 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r8, &(0x7f00000005c0)={&(0x7f00000003c0)={0x2, 0x0, @empty=0xe0000000}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000080)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb35", 0x6}], 0x2, &(0x7f0000000240)=[@ip_pktinfo={{0x20, 0x0, 0x8, {0x0, @local, @broadcast}}}], 0x20}, 0x20048894) r9 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) pwritev(r9, &(0x7f0000000600)=[{&(0x7f0000000240)='@', 0x1}, {0x0, 0x41}], 0x2, 0x1ae, 0x101) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r10, 0x0) r11 = dup3(r10, r10, 0x80000) ioctl$VHOST_SET_MEM_TABLE(r11, 0x4008af03, &(0x7f0000000240)={0x1, 0x0, [{0xc000, 0x0, &(0x7f0000000200)}]}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x3c, &(0x7f0000000080)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0x36}, 0xc}, @in={0x2, 0x4e23, @broadcast}]}, &(0x7f0000000180)=0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, 0x4, 0x8, 0x200, 0x0, 0x0, {0x1, 0x0, 0x9}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8914}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x1c}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040000}, 0x40800) 17.374219213s ago: executing program 8 (id=11487): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x2000, &(0x7f0000000240)={&(0x7f0000000180)=@setlink={0x28, 0x13, 0x1, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, 0x1020, 0x409}, [@IFLA_MASTER={0x8, 0xa, r2}]}, 0x28}, 0x1, 0x0, 0x0, 0x24004000}, 0x8804) 17.137578251s ago: executing program 5 (id=11488): syz_usb_connect(0x5, 0x24, &(0x7f0000001280)=ANY=[@ANYBLOB="12010003001f66088f0510660548020003010902120001049570810904008100ffffff02"], &(0x7f0000001700)={0xffffffa0, 0x0, 0x0, 0x0, 0x23}) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r1, &(0x7f0000002240)=ANY=[], 0xff70) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r2, 0x89f2, &(0x7f0000000040)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) ioctl$TCXONC(r1, 0x540a, 0x0) ioctl$TCXONC(r1, 0x540a, 0x2) ioctl$TCXONC(r1, 0x540a, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)) pselect6(0x40, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x300}, 0x0, &(0x7f0000000100)={0x8, 0x0, 0x0, 0x10000000000000}, 0x0, 0x0) ioctl$TCXONC(r1, 0x540a, 0x3) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000040)="e2", 0x1}], 0x1) fstat(r0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000300)=[{r1, 0x6480}], 0x1, 0x9) 16.018231528s ago: executing program 0 (id=11489): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x80042, 0x0) open(&(0x7f0000000140)='./file1\x00', 0x60142, 0x2) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[]) read$FUSE(r1, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) write$FUSE_INIT(r1, &(0x7f0000002300)={0x50, 0x0, r2, {0x7, 0x9, 0x0, 0x1030002}}, 0x50) read$FUSE(r1, &(0x7f00000065c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r1, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r3}, 0x10) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x20080, 0x0) dup3(r4, r1, 0x0) close(0x3) r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0) io_setup(0x10, &(0x7f0000003580)=0x0) io_submit(r6, 0x1, &(0x7f0000002380)=[&(0x7f0000002280)={0x0, 0x0, 0x0, 0x1, 0x9, r0, &(0x7f0000002480)="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", 0x1000, 0x9, 0x0, 0x0, r5}]) 15.886750261s ago: executing program 0 (id=11490): clock_nanosleep(0xfffffff2, 0x225c17d03, &(0x7f0000000180)={0x0, 0x989680}, 0x0) r0 = socket$kcm(0x2b, 0x1, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x34, &(0x7f00000000c0), 0x4) setsockopt$sock_attach_bpf(r0, 0x6, 0x8, &(0x7f0000000000), 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x100001, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r5, 0x4008ae90, &(0x7f0000000080)={0x1, 0x0, [{0x1, 0x0, 0x7, 0x1d0, 0x0, 0x7b2, 0x1}]}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) ioctl$KVM_GET_NESTED_STATE(r5, 0xc080aebe, &(0x7f0000000a40)) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r7, 0x1, 0x21, &(0x7f0000f59ffc)=0x4, 0x4) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000e00f0001002dbdc7beec5fdf2500000000", @ANYRES32=0x0, @ANYBLOB="0021040000000000140003006261746164763000000000000000000008000400d7000000180016801400018010000a00ff0f00000700000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x24040094}, 0x4044000) 15.766010647s ago: executing program 0 (id=11491): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x1d, 0x2, 0x6) r2 = epoll_create(0x2) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000001840)={0x90000001}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000380)={0x1d, r3, 0x2, {0x2, 0x0, 0x2}}, 0x18) r4 = shmget$private(0x0, 0x3000, 0xa0, &(0x7f0000323000/0x3000)=nil) shmctl$IPC_SET(r4, 0x1, &(0x7f0000000100)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x46}, 0x7, 0xb859, 0x0, 0x0, 0xc, 0x80000001, 0xfffffffffffffff9}) setuid(0xffffffffffffffff) shmctl$IPC_STAT(r4, 0x2, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x2d41, 0xd5) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r6, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r9, 0x6, 0x24, &(0x7f0000000280)=0x1, 0x4) shutdown(r9, 0x0) recvmmsg(r9, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) write$FUSE_INIT(r6, &(0x7f0000000240)={0x50, 0x0, r7, {0x7, 0x1f, 0x0, 0x202, 0x0, 0x0, 0x2}}, 0x50) syz_fuse_handle_req(r6, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r10 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x109081, 0x34) r11 = accept4$alg(r5, 0x0, 0x0, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r11, 0xc0046686, &(0x7f0000000000)) syz_fuse_handle_req(r6, &(0x7f0000006380)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x28, 0xfffffffffffffffe, 0x6, {{0x40000, 0xffffffffffffffff, 0x0, r8}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$lock(r10, 0x5, 0x0) r12 = dup(r1) write$6lowpan_enable(r12, 0x0, 0x26) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x28}, 0x1, 0x0, 0x0, 0x8d0}, 0x4008800) 15.152284481s ago: executing program 0 (id=11492): r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000080)={@remote, @private=0xa010102, 0x1, 0x3, [@loopback, @broadcast, @remote]}, 0x1c) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r0, 0x0, 0x0) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000080)=@base={0x6, 0x4, 0x8000, 0x58, 0x0, 0xffffffffffffffff, 0xfffffffa}, 0x50) ioctl$SOUND_MIXER_WRITE_VOLUME(r2, 0xc0044d18, &(0x7f0000000000)=0x27) r3 = openat$cgroup_int(r2, &(0x7f0000000040)='cgroup.max.descendants\x00', 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) sendfile(r4, r3, 0x0, 0x4) 3.12545885s ago: executing program 43 (id=11483): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x1) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000008b40)=ANY=[@ANYBLOB="3800000040000100fcff0700040000000100000004004880140001801000108004000f8005000400000000000c0002"], 0x38}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket$kcm(0x11, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) r6 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r6, 0x0, 0x0) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) readv(r5, &(0x7f0000000040)=[{&(0x7f0000000440)=""/162, 0xa2}, {&(0x7f0000000200)=""/108, 0x6c}, {&(0x7f0000000500)=""/156, 0x9c}], 0x3) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000022c0)=@newtfilter={0x3160, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0x4}, {0x0, 0xfff2}, {0x1, 0xe}}, [@filter_kind_options=@f_bpf={{0x8}, {0x3134, 0x2, [@TCA_BPF_ACT={0x3130, 0x1, [@m_pedit={0x2d70, 0x1e, 0x0, 0x0, {{0xa}, {0x2cf4, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe80, 0x2, {{{0x1, 0x8, 0x8, 0x2, 0x6}, 0x6, 0x9, [{0x80, 0x24, 0x66, 0x6b9576cd, 0x1, 0xff}, {0x80000000, 0x3ff, 0xc44c, 0xb, 0x4, 0x3ff}, {0x9, 0x7, 0x4, 0x0, 0x101, 0x7}, {0x7, 0xbc, 0x5e9d, 0x5, 0xfffffffb, 0x40}]}, [{0xfffffff8, 0x7, 0x4, 0xfffffffc, 0xa, 0x7ff}, {0x11e, 0xb85, 0x80, 0x5, 0x63fe, 0x6}, {0x120000, 0x1, 0x5, 0x3, 0xffffffff, 0x2}, {0x1, 0x0, 0x6, 0x4, 0xd22e, 0x8}, {0x7f, 0x72, 0x5, 0x2, 0xe, 0xfff}, {0x8324, 0x8, 0x1, 0xa6ef, 0x9, 0x2}, {0x9, 0x8001, 0x9, 0xe44c, 0xfffffffd, 0x8}, {0x0, 0xe3, 0x200, 0xe804, 0x5}, {0x7, 0x4b, 0x9, 0x3ff, 0x7fffffff, 0x7}, {0x7af, 0xa01, 0x7, 0x7, 0x5, 0x6}, {0xc, 0x1, 0x7ff, 0x1, 0x1, 0x1ff}, {0x2, 0x3568c0c9, 0x8, 0x4, 0x0, 0x228f01ae}, {0x6, 0x8, 0x7, 0x4, 0x2, 0x9}, {0xfffffffe, 0xfc7, 0x4, 0xde0000, 0x2, 0xcc}, {0x7, 0x0, 0xb5, 0x0, 0xa, 0x802}, {0xe2, 0x3b3, 0xfffffffd, 0x4, 0x4, 0x1}, {0x400, 0x8, 0x3, 0x9, 0xd48, 0x7}, {0x2, 0x8, 0x3, 0x3, 0x7fff, 0x1ff}, {0xffff, 0x9, 0x6, 0x80000000, 0x8000, 0x3}, {0x6, 0x5, 0x6, 0x40, 0x14000}, {0x3, 0x5, 0xfffffffb, 0x8, 0x8c93, 0x7}, {0x1000, 0xbceb, 0x8, 0xe, 0x1, 0xd5ff}, {0x8, 0x3c, 0x3, 0x3, 0x9, 0x1}, {0x6, 0x5, 0xff, 0xfffffffe, 0xc2}, {0x7, 0x7d, 0x8, 0x1, 0x400, 0x3}, {0x1, 0x7f, 0x7fffffff, 0x6, 0x0, 0xd9c}, {0x1549, 0x10001, 0x4, 0x4, 0x7f, 0x7ff}, {0x0, 0x4, 0x2, 0xfffffffd, 0x6, 0xfffffd50}, {0x5, 0x1, 0x20080000, 0x2, 0x3}, {0x2, 0x2, 0x0, 0xfe, 0x80000000, 0x1}, {0x6, 0xf, 0x7, 0xc63, 0x0, 0xe}, {0xa42d, 0x3, 0x5, 0x2f1b, 0x6, 0xfffffff8}, {0xffff, 0x9a, 0xa5ea, 0x1, 0x8, 0xa83}, {0x3, 0x0, 0x9, 0x7f, 0x7fff, 0x2}, {0x6, 0x6, 0xc9, 0x278, 0x9, 0x3}, {0x5, 0x101, 0x2, 0x8, 0x5, 0x3}, {0x9, 0xb4fe, 0x10001, 0x8, 0x7, 0x4}, {0x5, 0x8b7f, 0x6, 0x2, 0xe, 0x200}, {0x2, 0x9, 0x4, 0x705, 0x0, 0x3}, {0x26fe, 0x9, 0x80, 0x2, 0x8, 0x5}, {0x1000, 0x4, 0x2b6, 0x9, 0xfffffffe, 0x1ff}, {0x8c, 0x8, 0x8000, 0xd, 0x6, 0x80000001}, {0x100000, 0x8d, 0x91, 0x2, 0xb0000000, 0x4411}, {0x1e4d, 0x3ff, 0xfffffbff, 0x80000001, 0x4, 0x5f}, {0x3, 0x1, 0x1, 0x8001, 0x6, 0x4}, {0x4, 0x200, 0x918d, 0x8000, 0x4, 0x8}, {0x10001, 0xc, 0x6, 0x0, 0x100, 0x4}, {0x3d, 0xf6eb, 0xffffffff, 0xc3b, 0x7, 0x1ff}, {0x7, 0xf, 0x6, 0x7fffffff, 0x4, 0x7}, {0x7, 0xfffff5b0, 0x5871, 0x4, 0x3ff, 0x5}, {0x9, 0x3, 0x7, 0x4, 0x0, 0x80000001}, {0xc48, 0x3ff, 0x81, 0x401, 0x2, 0xe}, {0x4, 0x6, 0x6, 0x5e0, 0x3ff, 0xb97}, {0x1000, 0x0, 0x1000, 0x2, 0xffffffff}, {0x81, 0x0, 0x10, 0x489c8a93, 0xff, 0x87f2}, {0x8, 0x8000, 0x6, 0xb, 0x1, 0x7}, {0x100, 0x9, 0x1, 0xe, 0x9, 0x4}, {0x3, 0x1, 0x8001, 0x4, 0x3022e6d, 0x9}, {0x7, 0x5, 0x5, 0x6, 0x636, 0x7}, {0x0, 0x4, 0x9, 0x10000, 0x7, 0x80}, {0x5, 0x7f, 0x2, 0x3, 0xbf800000, 0x3}, {0x1, 0x1, 0x5, 0x8, 0x0, 0x8}, {0x5, 0x4, 0x6, 0x7, 0x8001, 0x8}, {0x4, 0x2, 0xa, 0x7, 0x7e2b, 0x7}, {0x3, 0xa7f2, 0x295c9425, 0x7ff, 0x3ff, 0x15}, {0xfffffffa, 0x1, 0x3, 0x8a0, 0x2, 0xffff8000}, {0x1, 0x8, 0x6, 0x8, 0x5, 0xdf5}, {0x9, 0xfffffffa, 0x6, 0x10001, 0x7, 0x7}, {0x7, 0x80, 0x7, 0x6, 0xf, 0xed2}, {0x3, 0x367a2a7a, 0x6, 0xe, 0x5, 0x4c9}, {0x9a, 0x6aa55c4e, 0x5, 0x800, 0x3, 0x7}, {0x2, 0x8, 0x1, 0x2, 0x4, 0x5}, {0xd96, 0x7, 0x8, 0x8, 0x1, 0x1}, {0xa9, 0x800, 0x7, 0x5, 0x6, 0x826e}, {0xfd, 0x13, 0x3, 0x7f, 0x80, 0x51f}, {0x3, 0xc74e, 0x9, 0xfffffffd, 0x9, 0xfffffff2}, {0x4, 0x200, 0x2a4, 0xffffffe0, 0x7, 0xfff}, {0x2, 0x5, 0x1c18, 0x40e, 0x6, 0x5}, {0x65d3ea41, 0x40, 0x0, 0x5, 0x401, 0x1ff}, {0x7fffffff, 0x4, 0x4, 0x401, 0xd6f, 0x8}, {0x7f, 0x8, 0x7, 0x4, 0x4a0, 0x9}, {0x0, 0x5, 0x1, 0x0, 0x10}, {0xfffffffc, 0x8616, 0x2, 0x4, 0xf, 0x8cfc}, {0x3, 0x2, 0x86, 0x59c61a80, 0x3, 0x5}, {0x5, 0x0, 0x6, 0x5, 0xb, 0x8000}, {0xffffe207, 0x6dd4, 0x8001, 0xbc42, 0x3, 0x10}, {0x8, 0x10, 0x5, 0x2, 0x847, 0x3}, {0xcaf, 0x0, 0x7, 0x3, 0x4, 0x8000}, {0x94a0, 0x3, 0x0, 0xffff, 0x10, 0x1}, {0x2b, 0x1, 0x7fff, 0xce8f, 0x8, 0x9}, {0x1, 0x0, 0xdb, 0x6, 0x2000, 0x5}, {0xf5a, 0x4, 0x7, 0x80, 0x8, 0x8}, {0x6, 0x2, 0xa, 0x6fa6, 0x1, 0x2}, {0x101, 0x847, 0x6, 0x5, 0x2}, {0x1, 0xd0, 0xffff7fff, 0x2, 0x6, 0x100}, {0x65, 0x6, 0x0, 0x4, 0x9, 0x7}, {0x7d, 0x0, 0xb3, 0xffffffff, 0x6, 0x7}, {0x8, 0x8, 0x100, 0x1, 0x10000, 0xb1d}, {0x5, 0x9, 0x9, 0x14d8, 0x1394, 0x1}, {0x10001, 0x43, 0x101, 0x0, 0x5}, {0x80000001, 0xffffffff, 0xf, 0x74, 0x2, 0x7}, {0x8f, 0x5, 0x9, 0x5000000, 0xcd8, 0x10001}, {0xc7, 0x4, 0xf97, 0x0, 0x8001, 0xd7}, {0x9, 0x1, 0x800, 0x100, 0x9, 0xffffffff}, {0x400, 0x200, 0x8, 0xff, 0x2, 0xe}, {0xb, 0x3b9b, 0x7, 0x5, 0x5, 0x1}, {0x1, 0xb09c, 0x8, 0x6, 0x0, 0x7fffffff}, {0x7, 0x2, 0xf2, 0x8000, 0x2, 0x3}, {0x1000, 0x2, 0x8000, 0x2, 0x5, 0x2}, {0xfffffe01, 0x5, 0x1, 0x7, 0x4, 0x3}, {0x1ff, 0xffffffe7, 0x2, 0x5, 0x400, 0x80}, {0x1, 0x7, 0x1, 0x1, 0x61}, {0x6, 0x7, 0xb6, 0x4b, 0x5, 0x9}, {0xffff, 0x91, 0x6, 0x315, 0xffff, 0x1}, {0x5, 0x5, 0x6, 0x9, 0x60f9, 0x9}, {0x3, 0x5, 0xffffffff, 0xfffffffd, 0x5}, {0x5, 0x8, 0xbbe, 0x5, 0x4000400, 0x3}, {0xf3f8, 0x0, 0x9, 0x8, 0xc, 0x1}, {0x1ff, 0x10001, 0x4, 0x4, 0xff, 0x2}, {0x4, 0x3ff, 0xfffffffe, 0x1, 0x400, 0x4}, {0x6, 0xff, 0x7, 0xa, 0x41, 0x7}, {0x8001, 0x5, 0x7, 0x5, 0x0, 0x40220812}, {0x905, 0xff, 0x6, 0x3, 0x80000001, 0x8}, {0x12, 0xb, 0x0, 0x24d3, 0x5, 0x7}, {0x8, 0x9, 0xfffffff1, 0x10, 0x10e3, 0x6}, {0x7fffffff, 0x9, 0x6, 0x0, 0x633, 0x4}, {0x1, 0xd, 0x3, 0x6, 0x42000, 0xd}, {0x70, 0x40, 0x5, 0x7, 0x61, 0x2}], [{}, {0x4}, {}, {0x2, 0x1}, {0x0, 0x1}, {0x1}, {0x0, 0x1}, {0x4}, {}, {0x2, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x2}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {0x2}, {0x2}, {0x4}, {0x1, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3}, {0x4}, {0x2, 0x1}, {0x2}, {0x4}, {0xb74c73679a65c5af, 0x1}, {0x2, 0x1}, {0x5}, {0x12248ff574f9aad4, 0x1}, {0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {}, {0x5}, {0x0, 0x1}, {0x6}, {0x5, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x1}, {0x5}, {0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x2}, {0x0, 0x1}, {0x2}, {0x1}, {0x2}, {0x4, 0x1}, {0x1, 0x1}, {0x4}, {0x4, 0x1}, {0x2, 0x1}, {0x9, 0x1}, {0x1, 0x1}, {0x3}, {0x0, 0x1}, {0x6, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {}, {0x3}, {0x0, 0x1}, {}, {0x1}, {0x0, 0x1}, {0x5}, {0x5}, {0x3}, {0x2, 0x1}, {0x4, 0x1}, {0x4}, {0x4, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x1}, {0x5}, {0x0, 0x1}, {}, {0x1}, {0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x1}, {0x1, 0x1}, {0x2}, {0x5, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x5}, {0x2}, {0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {}, {0x3}, {0x3}, {0x5, 0x1}, {0x3}, {0x5}, {}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x5, 0x1}]}}, @TCA_PEDIT_PARMS_EX={0xe50, 0x4, {{{0x80000, 0x7, 0x0, 0xba, 0x8}, 0x3, 0x7, [{0x7, 0x8, 0x2, 0x1ff, 0x7, 0x4}, {0x1000, 0x2, 0x6, 0x3, 0x4, 0x3}]}, [{0xa66, 0x81, 0xffff, 0x5, 0x1, 0x5}, {0xffff, 0x8, 0x3, 0x3, 0x0, 0x6a64}, {0x2, 0x3ff, 0x2, 0x5, 0x8, 0x6}, {0x80, 0x101, 0x7, 0xe4, 0x7, 0xfffffffe}, {0x2, 0x7, 0x0, 0x68a, 0x10001, 0x90de}, {0x5, 0xfffffff7, 0x9, 0x8001, 0x5, 0x3}, {0x7, 0xa, 0x7, 0x2, 0x9, 0x59}, {0x280, 0xfffffff3, 0x3ff, 0x7fffffff, 0xb, 0xfffffffb}, {0x1, 0x1, 0xccb, 0x80000001, 0x4, 0x4}, {0x4, 0x4, 0x7, 0x8, 0x3, 0x1000}, {0x0, 0x1, 0xf, 0xea1, 0xe, 0x5}, {0xffffffff, 0xd99, 0x6, 0x0, 0x81, 0x8}, {0x4, 0x9, 0x7, 0x0, 0x80, 0x3}, {0xc081, 0x9, 0x1, 0x100, 0x8001, 0x29b6}, {0xffffffff, 0x3, 0x3, 0x8000, 0x2, 0x8}, {0xe, 0xcb0, 0x5abb, 0x7, 0x5, 0x3}, {0x5, 0x80000001, 0x2, 0x9, 0x5, 0xa}, {0x7, 0x8, 0x4, 0x7, 0x200, 0x80}, {0x5f, 0x3e, 0x0, 0x6, 0xffffffff, 0xef45}, {0x8, 0x5, 0x100, 0x2, 0x81, 0x80}, {0x9c, 0x1ff, 0x80, 0x0, 0x9, 0x9}, {0x4, 0x6, 0x80000000, 0x8, 0x6, 0xf3}, {0x7fffffff, 0x5, 0xff, 0x1, 0x401, 0x401}, {0x4, 0x5, 0x8, 0x4, 0x1, 0x100}, {0x2e, 0x9, 0x10000, 0x1c1, 0xffffff76, 0x6}, {0xfffffff0, 0x4, 0x1, 0x5, 0x2}, {0x7, 0x400, 0xa2, 0x671, 0xffffffff}, {0x2a1, 0x8, 0x5, 0x6, 0xfffffbff, 0x100}, {0x2800, 0x4, 0x2, 0x7, 0xd868}, {0x2, 0x2, 0x80000001, 0x6, 0x5, 0x5}, {0x3, 0x3, 0x5, 0x3ff, 0x401}, {0x5, 0x9, 0x7, 0x7, 0x7}, {0x7fff, 0x5, 0x6, 0x5, 0x525, 0x6}, {0x6, 0x4, 0x0, 0x4, 0xee8f, 0x1}, {0x2, 0x1, 0x6, 0x4, 0x5, 0x459}, {0x5, 0xfffffffc, 0x9, 0x2, 0x9, 0xb4}, {0xa, 0x6, 0x7, 0x8, 0x8, 0x2800}, {0x80000001, 0x3, 0x95b43b53, 0x4, 0x0, 0x3}, {0x7, 0x3ff, 0x9, 0x4, 0xb386, 0x2}, {0x3, 0xffff, 0x2, 0x4, 0x46, 0x5}, {0x10, 0x2, 0xfffffffa, 0x6, 0x3d, 0x8001}, {0xc1, 0x3ff, 0xbd9e, 0x80, 0x6, 0xda71}, {0x400, 0x7ec, 0x26cb, 0x9, 0xe0bf, 0xfff}, {0x5e5, 0xfb1d50b, 0x8, 0x3, 0x8, 0x77}, {0x100, 0x10, 0x2, 0x80000000, 0x4, 0xa7}, {0x1f, 0x7, 0x0, 0x5, 0x10, 0x4}, {0x10000, 0x3, 0x10001, 0x8, 0x10000000, 0x80}, {0x0, 0x6, 0xe76, 0x10, 0x1, 0x9}, {0x80000001, 0xc2c, 0xdf, 0x80, 0x9, 0x8001}, {0x1, 0x4, 0x3, 0x3, 0x8}, {0x80000000, 0x9, 0x3, 0x8, 0xf37b, 0xff}, {0x3, 0x8, 0x3fe0, 0x6, 0xe, 0x9}, {0x5, 0x1, 0xc789, 0xfff, 0xfffffff7, 0xec}, {0x2, 0x1, 0x3, 0x10001, 0x6, 0x7ff}, {0x399, 0x7, 0x2, 0x2cc, 0xb4}, {0xffff0001, 0x8, 0x3, 0xb5, 0x80000000, 0x1}, {0xb79, 0x6, 0x100, 0x7, 0x3, 0xffffff45}, {0x80000000, 0x3, 0x5, 0x4, 0x1a8, 0x80}, {0xd, 0x3, 0x0, 0x9, 0x0, 0x625}, {0x200, 0x10, 0x9, 0x8001, 0x6, 0xf}, {0x0, 0x387, 0x9, 0x1000, 0xd, 0x8000}, {0x1, 0x0, 0xd, 0x5, 0x3, 0xffff8000}, {0x4, 0x7, 0xbb5, 0x7, 0x100, 0x411c}, {0x0, 0x0, 0x2e3, 0xfffff000, 0xb47, 0x7ff}, {0x6, 0x5, 0x5, 0x7fffffff, 0x5, 0x5}, {0x5, 0x8, 0x7, 0x7, 0x5, 0x5}, {0x7, 0x5, 0x7fff, 0xf, 0x40, 0x1}, {0x10001, 0x20, 0xe44, 0xfffffe01, 0x7, 0x7}, {0x9, 0x2, 0x9, 0x6, 0x8, 0x3}, {0x1, 0x1, 0x8, 0x24c4, 0x8, 0x8}, {0x879, 0x400, 0x7, 0x4, 0x3, 0x10000}, {0x3, 0x5, 0x0, 0x10001, 0x0, 0xc495b0a7}, {0xfffffffa, 0x1, 0x80000001, 0x0, 0x9, 0x80000001}, {0x1ff, 0x4, 0xfffffffe, 0x8, 0x6, 0x2}, {0x0, 0x7, 0x9, 0x1b, 0x0, 0x974}, {0x5, 0x9, 0x9, 0x7, 0x0, 0x2}, {0x3ff, 0x3350, 0x6, 0x6, 0xfffffff8, 0xf4}, {0x4, 0x7f, 0x9, 0x3f9, 0x10, 0x9}, {0x1, 0x7, 0x3b, 0xffffffff, 0xfffffffa, 0xc4}, {0x8, 0x80000000, 0x8, 0x8, 0x2bbb800, 0xfffffffb}, {0x6, 0x7ff, 0x400, 0x1ff, 0x8, 0x4}, {0x9, 0x3dad, 0x5, 0x81, 0xb, 0x5}, {0x7, 0x38980000, 0x1ff, 0xffff1499, 0x0, 0x1}, {0x1, 0x10, 0x5e, 0x0, 0xffff4211, 0x100}, {0x101, 0x20bec2d6, 0xb, 0x8, 0x4, 0x40000}, {0x6, 0x6, 0x8, 0x62e6, 0x8, 0xed}, {0x4, 0x4, 0x5, 0x26e, 0x379, 0x3}, {0x7, 0xfffffff9, 0x200, 0x6, 0xa, 0x2}, {0x6, 0xc65, 0x4c8a, 0x7, 0x6, 0x57}, {0x1, 0xdf, 0x4, 0x0, 0x8, 0x8}, {0x200, 0x3, 0xd569, 0x7, 0x3ff, 0xc}, {0x4, 0x8, 0x4, 0x1000, 0x8, 0x7f}, {0x1, 0x6, 0x0, 0xffffffff, 0x1ff, 0x200}, {0x27, 0x7fffffff, 0x2c, 0xb, 0x0, 0x1}, {0x9, 0x0, 0x151, 0x5, 0x951, 0xc4}, {0x6, 0x9, 0x24, 0x5, 0xffff5ad9, 0x9}, {0x5, 0x1, 0xfffff000, 0x9}, {0x7fff, 0x0, 0x4, 0x0, 0x8, 0x401}, {0x27, 0x4, 0x2, 0x5, 0x3, 0x8}, {0x3, 0x6b, 0x81, 0x400, 0x5, 0xd}, {0x7, 0x4, 0x0, 0x6, 0x635, 0x7}, {0x5, 0x4, 0x2, 0x7fffffff, 0x200, 0x7}, {0x3, 0x10001, 0x800, 0x200, 0x0, 0x81}, {0x7, 0x8, 0x5, 0x200, 0x9, 0x7}, {0xfffffffc, 0x800, 0x200, 0x400, 0x6, 0x7}, {0x2, 0x2000000, 0x5, 0x0, 0x6, 0x81}, {0xfa, 0xfffffffd, 0x2, 0x4, 0x4, 0x80000000}, {0x7, 0x7, 0x2, 0x100, 0x10001, 0x9}, {0x2, 0x4d5c, 0xda6a, 0x80, 0x80000000, 0x2}, {0x59, 0x8, 0x8, 0x9, 0x8}, {0x6, 0x7, 0xd, 0x8c3, 0xff, 0x9}, {0x8, 0x8, 0xb, 0x0, 0x3, 0xe}, {0x5, 0x1, 0x6, 0x6, 0x3, 0x3}, {0x64808a3b, 0x94, 0x1, 0x8, 0x5b, 0xaae}, {0x0, 0x4, 0x80000001, 0x1, 0x100, 0x10}, {0x7880000, 0x200, 0x80000000, 0x5, 0x7fff, 0x6}, {0xa742, 0x0, 0xe9, 0xfffffffd, 0x40000000, 0x7f}, {0x76c, 0xfff, 0x1, 0x5}, {0x5, 0x0, 0x7, 0x26, 0x6, 0x6}, {0x40000000, 0x0, 0x7fffffff, 0x8, 0x5, 0x6}, {0xffff00b3, 0x2800, 0x9, 0x6, 0x6}, {0x8, 0x3, 0x100, 0x7d, 0xfffffffa, 0xffffffff}, {0x2, 0x7fffffff, 0xf8, 0x8c, 0x4, 0x8}, {0x5, 0x2, 0xffffffff, 0x4, 0x0, 0x1}, {0x9, 0x0, 0x5, 0xfffffeff, 0xc5c000, 0x4}, {0x8ed, 0x8466, 0x401, 0xfffffeff, 0x2, 0x6}, {0x0, 0x7, 0x0, 0x81, 0x20000, 0x1e}, {0x37, 0x2, 0xb, 0x60, 0xfffff001, 0x8001}], [{0x3}, {0x3}, {0x2, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x2}, {0x2}, {0x2}, {0x1, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x5}, {}, {0x3}, {0x4, 0x1}, {0x5}, {0x0, 0x1}, {0x5}, {0x0, 0x1}, {0x4, 0x1}, {0x1}, {0x3, 0x1}, {0x1}, {0x5}, {0x1, 0x1}, {0x2}, {}, {0x3}, {0x1}, {0x3, 0x1}, {0x3}, {0x2}, {0x5, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x3}, {0x4}, {0x1, 0x1}, {0x4, 0x1}, {0x4}, {0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x2}, {0x1, 0x1}, {0x5, 0x1}, {0x5}, {0x4, 0x1}, {}, {0x1}, {0x2}, {0x3}, {0x5, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {0x4}, {}, {}, {0x4, 0x1}, {0x2}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x5}, {0x2}, {0x4}, {0x4, 0x1}, {}, {}, {0x1, 0x1}, {0x2, 0x1}, {0x4}, {0x1, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x1}, {0x5, 0x1}, {}, {0x1}, {0x5, 0x1}, {}, {0x4}, {0x5, 0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x1, 0x8d9559cc712fdb7a}, {0x3, 0x1}, {0x2, 0x1}, {}, {0x4e98c1a2c4daa402, 0x1}, {0x4, 0x1}, {}, {0x4, 0x1}, {0x2, 0x2}, {}, {0x3, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x1}, {0x4}, {0x3}, {0x5, 0x99cc7d49d4919b7e}, {0x2, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x5}, {0x1}, {0x1, 0x1}, {0x4}, {0x1, 0x1}, {}, {0x3}]}}, @TCA_PEDIT_KEYS_EX={0x18, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}]}, @TCA_PEDIT_KEYS_EX={0x78, 0x5, 0x0, 0x1, [{0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}]}]}, @TCA_PEDIT_PARMS={0xef8, 0x2, {{{0x36, 0x6, 0x7, 0xfffffffc, 0x7b}, 0x7, 0x5, [{0x54, 0x401, 0x0, 0x5, 0x2, 0x2}, {0x86, 0x81, 0x2, 0x9, 0x0, 0x5744}, {0x101, 0xe, 0x2, 0x8, 0x7, 0xb398}, {0x7, 0x9, 0xd10, 0x5, 0x1, 0xcb60}, {0x1, 0x3, 0x490, 0x0, 0x2, 0x7fffffff}, {0x20000, 0x10, 0x8, 0x33, 0x2, 0xc}, {0x1ff, 0x6, 0x9, 0x8001, 0x6, 0x1c27}, {0x10, 0x8, 0x5, 0x3ff, 0x6, 0xf322}, {0x2c, 0x8, 0x6f6f, 0xea, 0x5e, 0x81}]}, [{0x6, 0x8001, 0x8001, 0x3, 0x0, 0x78}, {0xfffffffe, 0x8001, 0x9, 0x7, 0x7905, 0xc}, {0x401, 0x9, 0x6, 0xb, 0x7, 0xc}, {0x2, 0x8, 0x9, 0x7, 0x4b, 0x4}, {0x7, 0x6, 0x7f, 0x0, 0x2, 0x2}, {0x2ed, 0x6, 0x3ff, 0x6, 0xd, 0x9}, {0x7d, 0x7fff, 0x1, 0x9, 0x101, 0xfffff369}, {0x9e, 0x8000, 0x6, 0x7, 0x0, 0x6}, {0x427, 0xc, 0x18, 0x9, 0xf5e, 0x2}, {0x4, 0x8001, 0x0, 0x6, 0x100, 0x9}, {0x77a7, 0xffffffff, 0x4, 0x1, 0x6, 0x10001}, {0x8, 0xa82, 0x7, 0x5, 0x3, 0x10000}, {0x5f, 0xe9, 0x8, 0x1e0601db, 0x3, 0x9}, {0x1, 0x2523, 0x5, 0x2, 0x5, 0x4f1}, {0xfffffbff, 0x3, 0x3, 0x5, 0x9, 0x5}, {0x8, 0x200, 0x5, 0x278, 0x800, 0x3}, {0xb, 0x21, 0x6, 0xe, 0x8, 0x1}, {0xb, 0x5, 0x6, 0x10, 0xe5, 0x8}, {0x10, 0x7f, 0x7fff, 0x1, 0x0, 0x1}, {0x2, 0x1, 0x1, 0x80000000, 0x0, 0x9}, {0xc7b5, 0xb, 0xfffffffb, 0x0, 0x100, 0x7ff}, {0x5, 0x2, 0x2, 0x8, 0x5, 0x3}, {0x0, 0x4, 0x1, 0x4, 0x6, 0x9}, {0x5c0f, 0x5, 0x0, 0x10000, 0x8, 0x7}, {0x80, 0x6, 0x3ff, 0x7d, 0x4, 0x40}, {0x0, 0x242b, 0x4, 0xffffffff, 0x7, 0x7}, {0x4, 0x5, 0x5, 0x2, 0x10001, 0x4}, {0xb150, 0x2, 0x2, 0x9, 0x4, 0x8}, {0xd, 0x80000001, 0x3, 0x6, 0x8, 0xfff}, {0x6, 0x7ea261c5, 0x10, 0x68c, 0x998, 0x9}, {0x2, 0xff800000, 0x7f, 0x9e, 0xfe64, 0x200}, {0x40, 0x7, 0x4, 0x32, 0xffffffff, 0x2}, {0x5, 0x9, 0x7, 0x4, 0x4, 0x7}, {0x200, 0x4, 0x5, 0x2, 0x10, 0x7fffffff}, {0x7, 0xf, 0xa, 0x8, 0x9, 0x80000000}, {0x4, 0xb6, 0x9, 0xc, 0x10b76742, 0x2}, {0x790a, 0x6, 0x8, 0x4, 0x801, 0x9}, {0xffffffff, 0x9, 0x101, 0x3, 0x1, 0x80000000}, {0x6, 0x1cdf6be9, 0xffffffff, 0x7, 0x1d5, 0x5}, {0x0, 0x2, 0x1, 0x8, 0x6, 0xe}, {0xfffffffc, 0x7, 0x800, 0x9, 0x2, 0x4}, {0x1ff, 0x0, 0x4, 0x9, 0xb, 0x6}, {0x401, 0x61dd, 0x9, 0xffffffff, 0x3}, {0x400, 0x7fff, 0xfffffff9, 0x0, 0x5, 0x3}, {0xffffffff, 0x8, 0x0, 0x54519098, 0x80000000, 0x8}, {0x1, 0xdd, 0x8, 0x10, 0x1, 0x6}, {0x7, 0x0, 0x8001, 0xff, 0x3, 0xb8}, {0xffffffff, 0x6, 0x1fffc0, 0x1, 0x7, 0xfffffffb}, {0x81, 0x9, 0x7f2b, 0x10, 0x4, 0xa4de}, {0xed8c, 0xfffffffc, 0x2, 0x8, 0x0, 0x5}, {0x80000000, 0xfff, 0x3, 0x880, 0xf2, 0x3}, {0x48ade642, 0x9, 0x5, 0x2, 0xffff, 0xffffffff}, {0xc2a, 0x0, 0x8, 0x2, 0xffffffff, 0x2}, {0xffffffff, 0x400, 0x1, 0x7, 0x7, 0x2}, {0x7fff, 0x1, 0x2, 0x7, 0x4, 0x401}, {0x40, 0x80000001, 0x9, 0x9, 0xf3, 0x37}, {0x7ff, 0x0, 0x2, 0x8001, 0x0, 0xc}, {0xffffffff, 0x8, 0x7, 0xfffffffc, 0x3}, {0x5, 0x9, 0x1, 0x6, 0x200, 0x9}, {0x8000, 0x1, 0xe5, 0x9e14, 0x800, 0x6}, {0xc5, 0x0, 0x5, 0x9, 0x7ff}, {0xfffffff8, 0x40, 0x1ff, 0x10001, 0x579, 0x8}, {0x1, 0x1, 0x4, 0x9, 0x82, 0x8001}, {0xfffffff8, 0x0, 0x5, 0xc, 0x5, 0x7fffffff}, {0x2, 0x9, 0xfff, 0xffffffbc, 0x6, 0x2}, {0x1000, 0x1, 0x5, 0x2, 0x4, 0x7ff}, {0x4, 0x8, 0xfffffff8, 0x3, 0xef42, 0x5}, {0xff, 0x4, 0xd3, 0x60, 0x1ff, 0x3}, {0xfffffff7, 0x2, 0xc0d6, 0x3cd46824, 0x5}, {0x0, 0x4, 0xfffffffa, 0x1, 0x6, 0x6}, {0x280b, 0x1, 0x400, 0x8001, 0x5, 0x3}, {0x0, 0x80000001, 0xd, 0x1, 0x1, 0x9}, {0xc55, 0x0, 0xfffffff7, 0x8, 0xe}, {0xfff, 0x2934, 0x46c, 0x6, 0xfffffffa, 0x2}, {0xbfa, 0x0, 0xfffffff8, 0x3663, 0x8, 0xffffff87}, {0x9, 0x0, 0x1000000, 0x9, 0xc1a, 0x4}, {0x6, 0x7, 0x5, 0xfffffffc, 0x1, 0x414e}, {0x6, 0x5, 0x3, 0x3f1db217, 0x2, 0x8000}, {0x2, 0xc0000000, 0x4, 0xb4, 0x6}, {0xa66, 0xf560, 0x9, 0x81, 0x80000000, 0x1}, {0x80000001, 0x6, 0x7, 0x8, 0x9c, 0x401}, {0x9, 0x5, 0x7, 0x80000000, 0x4, 0x458}, {0x2, 0x80000000, 0x81, 0x1, 0x34, 0x7}, {0xfffffff4, 0x1000, 0x7, 0x7ff, 0x0, 0x6}, {0x4, 0x7, 0xa5, 0x2, 0x8, 0x8}, {0x800, 0x2, 0x49, 0x0, 0x5, 0x5}, {0x3, 0x697f, 0x6, 0x9, 0x1, 0x1000}, {0x7, 0x2, 0x7, 0x2, 0xffffffff, 0x3ff}, {0x2, 0xffff0000, 0x1, 0x7fffffff, 0xc0000, 0x7}, {0x6, 0x5, 0x1, 0x80000000, 0x0, 0x2}, {0x2, 0x9, 0xfb, 0x7fff, 0xb, 0x8}, {0x2, 0x7, 0x1, 0xcc0, 0xff, 0x3}, {0xffff, 0xffffff00, 0xa, 0x9, 0x4a4a, 0x9}, {0x3, 0xe, 0x8001, 0x3, 0x1, 0x9142}, {0xe, 0x58d, 0x2, 0x0, 0x1, 0x1ff}, {0x27f2a0b5, 0x6, 0xd, 0x2, 0xb, 0x6f}, {0x5, 0x5, 0x818b, 0xfffffff8, 0x0, 0x40}, {0x9, 0xe, 0xa, 0x2, 0x7b1b, 0x7}, {0x0, 0x7, 0x101, 0x2, 0x7000, 0x101}, {0xfff, 0x7fff, 0x2, 0xe, 0x84c, 0x7fffffff}, {0x9, 0x1, 0xfe8, 0x7, 0x6, 0x1}, {0x9, 0x2, 0x4, 0x40, 0x4, 0x81}, {0x5, 0x8, 0xe67, 0x9, 0x7a, 0x5}, {0x1000, 0x2, 0x2d0, 0x6, 0x5, 0x5}, {0x7, 0x4, 0xfffffc01, 0x9, 0x7, 0x3}, {0x8, 0x519, 0x2, 0x8a, 0x2, 0x4}, {0x6, 0x71, 0x2, 0x80000000, 0x2, 0x80000001}, {0x0, 0x40, 0x4, 0x0, 0xfffffff7}, {0x2, 0x3, 0x5, 0x1, 0x6, 0x8}, {0xfffffffa, 0x9, 0x4, 0x7, 0x7, 0x81}, {0x2, 0x1d, 0x6, 0xfffffffa, 0x6, 0x95}, {0xa, 0x81e, 0x2, 0x8, 0x9, 0x2}, {0x5, 0x7f, 0xfa, 0x9, 0x1, 0x3}, {0xaa, 0xa4, 0x1, 0x6, 0x8, 0x1ff}, {0x6, 0x80000000, 0x1, 0xfff, 0xe, 0x7}, {0x2, 0x1, 0x9, 0x4, 0xff}, {0x8, 0x2, 0x40b3, 0x8, 0x3, 0x4}, {0x0, 0x8, 0xff, 0xf, 0x7, 0x8}, {0x0, 0x2, 0x4, 0xd5, 0x3, 0x7ff}, {0x1, 0xa6f9, 0x5, 0x2, 0x9, 0x9}, {0x17, 0xfc, 0x81, 0x3, 0x0, 0x9e}, {0x1, 0xb, 0x2da, 0x200, 0x7ff, 0x4}, {0x8, 0xd, 0x3, 0x4, 0xfffff626}, {0x2, 0x1, 0x8, 0xffff629b, 0x7, 0x2}, {0x8, 0x8000, 0x800, 0x0, 0x80000001, 0x5}, {0x3, 0x9, 0x200, 0xb13, 0x1, 0x9}, {0x7fff, 0x972, 0x8f3a, 0x42a3, 0x1, 0x3}, {0xffff7fff, 0x9, 0x1, 0xfff, 0x100, 0x5}], [{0x3}, {0x5}, {0x4, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {}, {0x2}, {0x1, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x2}, {0x7, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x2}, {}, {0x2, 0x1}, {0x2, 0x1}, {0x2}, {0x2, 0x1}, {0x5, 0x1}, {0x2}, {0x0, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x2}, {0x2, 0x1}, {0x5}, {0x2, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x5}, {0x4, 0x1}, {0x0, 0x1}, {0x4}, {0x5, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x6}, {0x3, 0x1}, {}, {0x4, 0x1}, {0x5}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x2}, {0x3}, {0x4, 0x1}, {}, {0x5, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x2}, {0x5, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {}, {0x3}, {0x1}, {0x5, 0x1}, {}, {0x2}, {0x0, 0x1}, {}, {0x2, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x3}, {0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x3}, {0x5}, {0x4, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x3}, {0x4, 0x810befceb0cf6af0}, {0x4, 0x1}, {0x3, 0x1}, {0x5}, {}, {0x2, 0x1}, {0x0, 0x1}, {0x1}, {0x5, 0x1}, {0x1}, {0x5}, {0x3, 0x1}, {0x2}, {}, {0x5, 0x1}, {}, {0x2, 0x1}, {0x28bc59a12725f5b9, 0x1}, {0x4}, {0x5, 0x1}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {}, {0x1}, {0x5, 0x1}, {0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x3}, {0x2, 0x1}, {0x4, 0x1}, {0x4}, {0x2, 0x1}, {0x2}, {0x3, 0x1}], 0x1}}, @TCA_PEDIT_KEYS_EX={0x98, 0x5, 0x0, 0x1, [{0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}]}]}, {0x51, 0x6, "d96dc6eec5c6581673eedfae04fe34bc227c48dd4350e5db34b9bd8505da32750d16f1b86bd5d9337c3a10c7a844fe401ee70e12c4abbd332fa5aa2d47fa93aa9a2feb7f00def3f7f2122dec08"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_skbedit={0xd0, 0x1b, 0x0, 0x0, {{0xc}, {0xc, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x1}]}, {0x99, 0x6, "8d8c3bddd126e81cc400b2d548d8822d3a619309a2e068b45b5c3e14d107312688cd582b509961c4ecee19b5d8a833dea3aa2d3f476bf9baaa04c0f4f107e538e1a4d3a5b3d3aa486cfb8006972f061223983458730b733f2b0415c1e2eaa318ec21c3701a40e1fd4d26ff56343904544bb449dfff08cbcde28a6fcd8ee250ffeb7f4bacd496147de6b5c05f2ad4a3cba73a338df5"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x124, 0x4, 0x0, 0x0, {{0x8}, {0x10, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0xa, 0x3, @multicast}]}, {0xee, 0x6, "0b8e483e20fb6f2c032595f6b4522a523cec97e3bf9cdcf856fcf4d606ca34022e8049fd0e6a6258302e1bc2a63a6c36342f0247ab58687cb97200b364d2ad0ab7d159d87e4c419fb81d2190859fcefe551ef5f5d26b20e7ef85a04a5a5ebef85cdd5a5689be1d43108c73c10b5dab4baf979d07dceea0bfe60c1012e1d43ac0630b275d56ad5f538e23b282926412d8ff1998f2b6cfa813dcf62833540f51f1d9d871f1e8f68d75aa890025e5394a4c0fb64227133ee408d4498c2a6465c73bfb09a9aa13abb77546233bf3a7fbe53ea1d6ad77d5a7acbc11cc458f1ffce1f91286ce5bee56f305f900"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ct={0x94, 0x15, 0x0, 0x0, {{0x7}, {0x20, 0x2, 0x0, 0x1, [@TCA_CT_LABELS_MASK={0x14, 0x8, "025a5118319b07958dd17318785962fd"}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @rand_addr=0x64010100}]}, {0x4d, 0x6, "7ffbdfec3577510296c3b305ab4e94bd2c0a95c550cb90792ea82b8edd11dc6a45b3b4382243ba615482c0031d07abc75575b28086e38c89e6d7bb41d088e3f3aca358cf648af8ac9d"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}, @m_simple={0x134, 0x10, 0x0, 0x0, {{0xb}, {0x80, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_DATA={0x8, 0x3, '!}{\x00'}, @TCA_DEF_DATA={0xa, 0x3, '!^\xa0#-\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x7fffffff, 0x7, 0x4, 0x4, 0x7}}, @TCA_DEF_DATA={0x11, 0x3, '/dev/net/tun\x00'}, @TCA_DEF_DATA={0x11, 0x3, '/dev/net/tun\x00'}, @TCA_DEF_DATA={0xb, 0x3, 'multiq\x00'}, @TCA_DEF_DATA={0x11, 0x3, '/dev/net/tun\x00'}]}, {0x8a, 0x6, "eee60ce62f9be21939a7545bdcd6012c1342767ab4964f4fe9ba0f3ba92effe5aa385ba4bcd9cad239514bd2c07ec8bb52d4e54c3abc7d543d21422f3b2ea6314b98f8be20b2b75177970ae73cadf6d5bfaf8ef045e5ba15f37ee80bf51a27dba5a07bbcf274660f059037686a9884a1a7c8c551701c4f98391f5b2799683c5d07567f0db57d"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}]}}]}, 0x3160}, 0x1, 0x0, 0x0, 0x20000010}, 0x80) socket(0x10, 0x803, 0x0) 2.101992864s ago: executing program 44 (id=11486): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="5c0000000206050800000000000000000000000005000400000000000900020073797a30000000001400078008001340000000000800064000000000050005000000000005000100060000000d000300686173683a6d6163"], 0x5c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r5, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x44, 0x9, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}, @IPSET_ATTR_ADT={0x14, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @local}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) dup2(r1, r2) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="10797fcd6cd957d2b903c6bf46b4", 0xe) r7 = accept4(r0, 0x0, 0x0, 0x80000) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000400)="8f47e644a9959e93d6bda9c37baac41b633b4716c507e5ec3beecd14d68d306192", 0x21}], 0x1, 0x0, 0x0, 0x4000814}], 0x1, 0x40800) r8 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r8, &(0x7f00000005c0)={&(0x7f00000003c0)={0x2, 0x0, @empty=0xe0000000}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000080)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb35", 0x6}], 0x2, &(0x7f0000000240)=[@ip_pktinfo={{0x20, 0x0, 0x8, {0x0, @local, @broadcast}}}], 0x20}, 0x20048894) r9 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) pwritev(r9, &(0x7f0000000600)=[{&(0x7f0000000240)='@', 0x1}, {0x0, 0x41}], 0x2, 0x1ae, 0x101) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r10, 0x0) r11 = dup3(r10, r10, 0x80000) ioctl$VHOST_SET_MEM_TABLE(r11, 0x4008af03, &(0x7f0000000240)={0x1, 0x0, [{0xc000, 0x0, &(0x7f0000000200)}]}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x3c, &(0x7f0000000080)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0x36}, 0xc}, @in={0x2, 0x4e23, @broadcast}]}, &(0x7f0000000180)=0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, 0x4, 0x8, 0x200, 0x0, 0x0, {0x1, 0x0, 0x9}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8914}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x1c}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040000}, 0x40800) 2.065717531s ago: executing program 45 (id=11488): syz_usb_connect(0x5, 0x24, &(0x7f0000001280)=ANY=[@ANYBLOB="12010003001f66088f0510660548020003010902120001049570810904008100ffffff02"], &(0x7f0000001700)={0xffffffa0, 0x0, 0x0, 0x0, 0x23}) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r1, &(0x7f0000002240)=ANY=[], 0xff70) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r2, 0x89f2, &(0x7f0000000040)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) ioctl$TCXONC(r1, 0x540a, 0x0) ioctl$TCXONC(r1, 0x540a, 0x2) ioctl$TCXONC(r1, 0x540a, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)) pselect6(0x40, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x300}, 0x0, &(0x7f0000000100)={0x8, 0x0, 0x0, 0x10000000000000}, 0x0, 0x0) ioctl$TCXONC(r1, 0x540a, 0x3) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000040)="e2", 0x1}], 0x1) fstat(r0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000300)=[{r1, 0x6480}], 0x1, 0x9) 2.016315129s ago: executing program 46 (id=11487): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x2000, &(0x7f0000000240)={&(0x7f0000000180)=@setlink={0x28, 0x13, 0x1, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, 0x1020, 0x409}, [@IFLA_MASTER={0x8, 0xa, r2}]}, 0x28}, 0x1, 0x0, 0x0, 0x24004000}, 0x8804) 0s ago: executing program 47 (id=11492): r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000080)={@remote, @private=0xa010102, 0x1, 0x3, [@loopback, @broadcast, @remote]}, 0x1c) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r0, 0x0, 0x0) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000080)=@base={0x6, 0x4, 0x8000, 0x58, 0x0, 0xffffffffffffffff, 0xfffffffa}, 0x50) ioctl$SOUND_MIXER_WRITE_VOLUME(r2, 0xc0044d18, &(0x7f0000000000)=0x27) r3 = openat$cgroup_int(r2, &(0x7f0000000040)='cgroup.max.descendants\x00', 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) sendfile(r4, r3, 0x0, 0x4) kernel console output (not intermixed with test programs): 0000 [ 2846.079000][T13041] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2846.079011][T13041] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2846.079022][T13041] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2846.079049][T13041] [ 2846.735212][ T5954] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 2846.772754][ T5954] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 2846.824065][ T5954] usb 6-1: Manufacturer: syz [ 2846.863228][ T5954] usb 6-1: config 0 descriptor?? [ 2846.899573][ T908] usb 4-1: new low-speed USB device number 59 using dummy_hcd [ 2847.094199][ T908] usb 4-1: config index 0 descriptor too short (expected 24189, got 45) [ 2847.160987][ T908] usb 4-1: config 132 has too many interfaces: 189, using maximum allowed: 32 [ 2847.178746][T13052] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10820'. [ 2847.211668][ T908] usb 4-1: config 132 has an invalid descriptor of length 248, skipping remainder of the config [ 2847.223964][T13052] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2847.277452][ T908] usb 4-1: config 132 has 0 interfaces, different from the descriptor's value: 189 [ 2847.299700][ T5954] appleir 0003:05AC:8243.0093: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.5-1/input0 [ 2847.340100][ T908] usb 4-1: New USB device found, idVendor=056e, idProduct=00fd, bcdDevice= 0.00 [ 2847.388258][ T908] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2847.556692][T13033] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10818'. [ 2847.585355][T13033] netlink: 'syz.5.10818': attribute type 30 has an invalid length. [ 2847.621176][ T3218] usb 6-1: USB disconnect, device number 102 [ 2847.658341][T20897] input: bcm5974 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/input/input396 [ 2847.689791][ T5182] bcm5974 9-1:1.0: could not read from device [ 2847.744050][ T5182] bcm5974 9-1:1.0: could not read from device [ 2847.771170][T20897] usb 9-1: USB disconnect, device number 115 [ 2847.843856][ T908] usb 4-1: string descriptor 0 read error: -71 [ 2847.865076][ T908] usb 4-1: USB disconnect, device number 59 [ 2847.894724][T13103] syzkaller0: entered promiscuous mode [ 2847.900329][T13103] syzkaller0: entered allmulticast mode [ 2850.596198][T13169] netlink: 'syz.0.10834': attribute type 1 has an invalid length. [ 2850.698897][T13171] bond1: Unable to set up delay as MII monitoring is disabled [ 2850.754146][T13171] bond1 (unregistering): Released all slaves [ 2851.071178][T13169] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2851.156134][T13205] bond1: (slave ip6gretap1): making interface the new active one [ 2851.216108][T13205] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 2851.228333][T13163] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 2851.243520][ T30] audit: type=1326 audit(1775034087.134:3224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13269 comm="syz.8.10836" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f08f6c code=0x0 [ 2851.287430][T13163] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10833'. [ 2851.306843][T13163] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2851.381540][T13163] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2851.561580][T13294] QAT: failed to copy from user cfg_data. [ 2852.772965][T20897] usb 9-1: new high-speed USB device number 116 using dummy_hcd [ 2852.942320][T20897] usb 9-1: Using ep0 maxpacket: 16 [ 2852.955245][T20897] usb 9-1: config 0 has an invalid interface number: 126 but max is 0 [ 2852.972849][T20897] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2852.999813][T20897] usb 9-1: config 0 has no interface number 0 [ 2853.025862][T20897] usb 9-1: config 0 interface 126 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 2853.112971][T20897] usb 9-1: config 0 interface 126 altsetting 0 endpoint 0x87 has invalid maxpacket 34328, setting to 1024 [ 2853.145039][T20897] usb 9-1: config 0 interface 126 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 2853.209648][T20897] usb 9-1: config 0 interface 126 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 147 [ 2853.240167][T20897] usb 9-1: config 0 interface 126 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 2853.322704][T20897] usb 9-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88 [ 2853.387323][T20897] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2853.429606][T20897] usb 9-1: config 0 descriptor?? [ 2853.477891][T13328] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 2853.546441][T13328] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 2853.606390][T20897] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 2853.852751][T20897] usb 9-1: USB disconnect, device number 116 [ 2854.042311][ T798] usb 6-1: new high-speed USB device number 103 using dummy_hcd [ 2854.202264][ T798] usb 6-1: Using ep0 maxpacket: 8 [ 2854.223179][ T798] usb 6-1: unable to get BOS descriptor or descriptor too short [ 2854.247605][ T798] usb 6-1: config 0 has no interfaces? [ 2854.264281][ T798] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2854.282273][ T798] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2854.302473][ T798] usb 6-1: Product: syz [ 2854.308004][ T798] usb 6-1: Manufacturer: syz [ 2854.318247][ T798] usb 6-1: SerialNumber: syz [ 2854.339823][ T798] usb 6-1: config 0 descriptor?? [ 2854.766897][T13410] netlink: 64 bytes leftover after parsing attributes in process `syz.8.10857'. [ 2855.068145][ T798] usb 6-1: USB disconnect, device number 103 [ 2855.146190][ T30] audit: type=1326 audit(1775034091.034:3225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13420 comm="syz.8.10859" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f08f6c code=0x0 [ 2857.921606][T13480] FAULT_INJECTION: forcing a failure. [ 2857.921606][T13480] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2857.980788][T13480] CPU: 0 UID: 0 PID: 13480 Comm: syz.6.10868 Tainted: G L syzkaller #0 PREEMPT(full) [ 2857.980817][T13480] Tainted: [L]=SOFTLOCKUP [ 2857.980824][T13480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2857.980834][T13480] Call Trace: [ 2857.980842][T13480] [ 2857.980851][T13480] dump_stack_lvl+0xe8/0x150 [ 2857.980880][T13480] should_fail_ex+0x412/0x560 [ 2857.980909][T13480] _copy_to_user+0x31/0xb0 [ 2857.980933][T13480] simple_read_from_buffer+0xe1/0x170 [ 2857.980963][T13480] proc_fail_nth_read+0x1bb/0x230 [ 2857.980992][T13480] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2857.981020][T13480] ? rw_verify_area+0x2a6/0x4d0 [ 2857.981037][T13480] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2857.981063][T13480] vfs_read+0x20c/0xa70 [ 2857.981082][T13480] ? fdget_pos+0x246/0x320 [ 2857.981101][T13480] ? __pfx___mutex_lock+0x10/0x10 [ 2857.981130][T13480] ? __pfx_vfs_read+0x10/0x10 [ 2857.981151][T13480] ? __fget_files+0x2a/0x420 [ 2857.981171][T13480] ? __fget_files+0x3a0/0x420 [ 2857.981186][T13480] ? __fget_files+0x2a/0x420 [ 2857.981210][T13480] ksys_read+0x150/0x270 [ 2857.981231][T13480] ? __pfx_ksys_read+0x10/0x10 [ 2857.981258][T13480] ? asm_int80_emulation+0x1a/0x20 [ 2857.981280][T13480] do_int80_emulation+0x173/0x4d0 [ 2857.981304][T13480] ? trace_irq_disable+0x3b/0x150 [ 2857.981320][T13480] ? asm_int80_emulation+0x1a/0x20 [ 2857.981336][T13480] ? clear_bhb_loop+0x40/0x90 [ 2857.981353][T13480] ? clear_bhb_loop+0x40/0x90 [ 2857.981373][T13480] asm_int80_emulation+0x1a/0x20 [ 2857.981391][T13480] RIP: 0023:0xf7155cab [ 2857.981407][T13480] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 2857.981423][T13480] RSP: 002b:00000000f540d4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 2857.981443][T13480] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f540d5d0 [ 2857.981456][T13480] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 2857.981466][T13480] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2857.981477][T13480] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2857.981488][T13480] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2857.981515][T13480] [ 2858.631438][ T30] audit: type=1804 audit(1775034094.514:3226): pid=13486 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.10870" name="file1" dev="ramfs" ino=237571 res=1 errno=0 [ 2859.101616][ T30] audit: type=1326 audit(1775034094.984:3227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13498 comm="syz.6.10873" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf701ef6c code=0x0 [ 2859.802633][T13514] FAULT_INJECTION: forcing a failure. [ 2859.802633][T13514] name failslab, interval 1, probability 0, space 0, times 0 [ 2859.832367][T13514] CPU: 1 UID: 0 PID: 13514 Comm: syz.3.10876 Tainted: G L syzkaller #0 PREEMPT(full) [ 2859.832396][T13514] Tainted: [L]=SOFTLOCKUP [ 2859.832402][T13514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2859.832413][T13514] Call Trace: [ 2859.832421][T13514] [ 2859.832430][T13514] dump_stack_lvl+0xe8/0x150 [ 2859.832461][T13514] should_fail_ex+0x412/0x560 [ 2859.832494][T13514] should_failslab+0xa8/0x100 [ 2859.832520][T13514] __kmalloc_noprof+0xe8/0x760 [ 2859.832541][T13514] ? sock_kmalloc+0xd6/0x160 [ 2859.832570][T13514] sock_kmalloc+0xd6/0x160 [ 2859.832596][T13514] skcipher_recvmsg+0x54f/0x1140 [ 2859.832636][T13514] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 2859.832656][T13514] ? aa_sock_msg_perm+0xf1/0x1b0 [ 2859.832685][T13514] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 2859.832706][T13514] ? security_socket_recvmsg+0x7e/0x2c0 [ 2859.832726][T13514] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 2859.832747][T13514] sock_recvmsg+0x172/0x1b0 [ 2859.832777][T13514] ____sys_recvmsg+0x1e6/0x4a0 [ 2859.832813][T13514] ? __pfx_____sys_recvmsg+0x10/0x10 [ 2859.832834][T13514] ? get_compat_msghdr+0x34b/0x4c0 [ 2859.832875][T13514] ___sys_recvmsg+0x215/0x590 [ 2859.832898][T13514] ? get_pid_task+0x20/0x1f0 [ 2859.832919][T13514] ? __pfx____sys_recvmsg+0x10/0x10 [ 2859.832966][T13514] ? __fget_files+0x3a0/0x420 [ 2859.832993][T13514] __sys_recvmsg+0x180/0x250 [ 2859.833019][T13514] ? __pfx___sys_recvmsg+0x10/0x10 [ 2859.833062][T13514] __do_fast_syscall_32+0x20d/0x640 [ 2859.833089][T13514] ? do_fast_syscall_32+0x33/0x70 [ 2859.833111][T13514] ? asm_int80_emulation+0x1a/0x20 [ 2859.833129][T13514] ? do_int80_emulation+0x274/0x4d0 [ 2859.833159][T13514] ? trace_irq_disable+0x3b/0x150 [ 2859.833180][T13514] do_fast_syscall_32+0x33/0x70 [ 2859.833204][T13514] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2859.833226][T13514] RIP: 0023:0xf709ef6c [ 2859.833243][T13514] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 2859.833259][T13514] RSP: 002b:00000000f548d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000174 [ 2859.833279][T13514] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000100 [ 2859.833292][T13514] RDX: 0000000020000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2859.833303][T13514] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2859.833314][T13514] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2859.833326][T13514] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2859.833358][T13514] [ 2860.203444][T13517] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10877'. [ 2860.566748][T13529] netlink: 8 bytes leftover after parsing attributes in process `syz.8.10879'. [ 2861.048903][T13581] FAULT_INJECTION: forcing a failure. [ 2861.048903][T13581] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2861.085713][T20881] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 2861.109640][T13581] CPU: 0 UID: 0 PID: 13581 Comm: syz.6.10889 Tainted: G L syzkaller #0 PREEMPT(full) [ 2861.109667][T13581] Tainted: [L]=SOFTLOCKUP [ 2861.109674][T13581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2861.109685][T13581] Call Trace: [ 2861.109693][T13581] [ 2861.109701][T13581] dump_stack_lvl+0xe8/0x150 [ 2861.109731][T13581] should_fail_ex+0x412/0x560 [ 2861.109763][T13581] _copy_to_user+0x31/0xb0 [ 2861.109787][T13581] simple_read_from_buffer+0xe1/0x170 [ 2861.109819][T13581] proc_fail_nth_read+0x1bb/0x230 [ 2861.109848][T13581] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2861.109876][T13581] ? rw_verify_area+0x2a6/0x4d0 [ 2861.109895][T13581] ? tun_chr_write_iter+0x18a/0x200 [ 2861.109914][T13581] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2861.109942][T13581] vfs_read+0x20c/0xa70 [ 2861.109960][T13581] ? fdget_pos+0x246/0x320 [ 2861.109982][T13581] ? __pfx___mutex_lock+0x10/0x10 [ 2861.110006][T13581] ? __pfx_vfs_read+0x10/0x10 [ 2861.110028][T13581] ? __fget_files+0x2a/0x420 [ 2861.110048][T13581] ? __fget_files+0x3a0/0x420 [ 2861.110063][T13581] ? __fget_files+0x2a/0x420 [ 2861.110087][T13581] ksys_read+0x150/0x270 [ 2861.110109][T13581] ? __pfx_ksys_read+0x10/0x10 [ 2861.110133][T13581] ? asm_int80_emulation+0x1a/0x20 [ 2861.110156][T13581] do_int80_emulation+0x173/0x4d0 [ 2861.110178][T13581] ? trace_irq_disable+0x3b/0x150 [ 2861.110195][T13581] ? asm_int80_emulation+0x1a/0x20 [ 2861.110212][T13581] ? clear_bhb_loop+0x40/0x90 [ 2861.110232][T13581] ? clear_bhb_loop+0x40/0x90 [ 2861.110255][T13581] asm_int80_emulation+0x1a/0x20 [ 2861.110272][T13581] RIP: 0023:0xf7155cab [ 2861.110289][T13581] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 2861.110311][T13581] RSP: 002b:00000000f540d4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 2861.110330][T13581] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f540d5d0 [ 2861.110343][T13581] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 2861.110354][T13581] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2861.110365][T13581] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2861.110375][T13581] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2861.110402][T13581] [ 2861.422328][T20881] usb 4-1: device descriptor read/64, error -71 [ 2861.702313][T20881] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 2861.832675][T20881] usb 4-1: device descriptor read/64, error -71 [ 2861.942838][T20881] usb usb4-port1: attempt power cycle [ 2862.292632][T20881] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 2862.324563][T20881] usb 4-1: device descriptor read/8, error -71 [ 2862.436967][T13616] netlink: 48 bytes leftover after parsing attributes in process `syz.5.10897'. [ 2862.563796][T20881] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 2862.605193][T20881] usb 4-1: device descriptor read/8, error -71 [ 2862.724073][T20881] usb usb4-port1: unable to enumerate USB device [ 2862.765736][ T30] audit: type=1326 audit(1775034098.654:3228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13621 comm="syz.6.10899" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf701ef6c code=0x0 [ 2862.943905][T13629] QAT: failed to copy from user cfg_data. [ 2863.741815][ T30] audit: type=1400 audit(1775034099.624:3229): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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netlink: 20 bytes leftover after parsing attributes in process `syz.5.10903'. [ 2864.083960][T13664] fuse: Unknown parameter 'subj_user' [ 2864.289472][T13677] FAULT_INJECTION: forcing a failure. [ 2864.289472][T13677] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2864.303612][T13677] CPU: 1 UID: 0 PID: 13677 Comm: syz.6.10908 Tainted: G L syzkaller #0 PREEMPT(full) [ 2864.303641][T13677] Tainted: [L]=SOFTLOCKUP [ 2864.303648][T13677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2864.303659][T13677] Call Trace: [ 2864.303667][T13677] [ 2864.303675][T13677] dump_stack_lvl+0xe8/0x150 [ 2864.303706][T13677] should_fail_ex+0x412/0x560 [ 2864.303738][T13677] _copy_to_user+0x31/0xb0 [ 2864.303761][T13677] simple_read_from_buffer+0xe1/0x170 [ 2864.303792][T13677] proc_fail_nth_read+0x1bb/0x230 [ 2864.303822][T13677] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2864.303851][T13677] ? rw_verify_area+0x2a6/0x4d0 [ 2864.303871][T13677] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2864.303899][T13677] vfs_read+0x20c/0xa70 [ 2864.303917][T13677] ? fdget_pos+0x246/0x320 [ 2864.303940][T13677] ? __pfx___mutex_lock+0x10/0x10 [ 2864.303964][T13677] ? __pfx_vfs_read+0x10/0x10 [ 2864.303986][T13677] ? __fget_files+0x2a/0x420 [ 2864.304015][T13677] ? __fget_files+0x3a0/0x420 [ 2864.304030][T13677] ? __fget_files+0x2a/0x420 [ 2864.304055][T13677] ksys_read+0x150/0x270 [ 2864.304078][T13677] ? __pfx_ksys_read+0x10/0x10 [ 2864.304102][T13677] ? asm_int80_emulation+0x1a/0x20 [ 2864.304127][T13677] do_int80_emulation+0x173/0x4d0 [ 2864.304150][T13677] ? trace_irq_disable+0x3b/0x150 [ 2864.304166][T13677] ? asm_int80_emulation+0x1a/0x20 [ 2864.304184][T13677] ? clear_bhb_loop+0x40/0x90 [ 2864.304202][T13677] ? clear_bhb_loop+0x40/0x90 [ 2864.304225][T13677] asm_int80_emulation+0x1a/0x20 [ 2864.304242][T13677] RIP: 0023:0xf7155cab [ 2864.304259][T13677] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 2864.304275][T13677] RSP: 002b:00000000f540d4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 2864.304294][T13677] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f540d5d0 [ 2864.304307][T13677] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 2864.304317][T13677] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2864.304328][T13677] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2864.304339][T13677] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2864.304364][T13677] [ 2864.667260][ T30] audit: type=1326 audit(1775034100.554:3230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13673 comm="syz.8.10907" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f08f6c code=0x0 [ 2864.885505][T13675] batadv_slave_1: entered promiscuous mode [ 2865.011958][T13678] batadv_slave_1: left promiscuous mode [ 2865.122262][ T30] audit: type=1326 audit(1775034101.004:3231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13695 comm="syz.3.10911" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf709ef6c code=0x0 [ 2866.025338][T20881] usb 9-1: new high-speed USB device number 117 using dummy_hcd [ 2866.045240][T13731] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10918'. [ 2866.057270][T13731] FAULT_INJECTION: forcing a failure. [ 2866.057270][T13731] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2866.072416][T13731] CPU: 1 UID: 0 PID: 13731 Comm: syz.3.10918 Tainted: G L syzkaller #0 PREEMPT(full) [ 2866.072443][T13731] Tainted: [L]=SOFTLOCKUP [ 2866.072450][T13731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2866.072460][T13731] Call Trace: [ 2866.072467][T13731] [ 2866.072475][T13731] dump_stack_lvl+0xe8/0x150 [ 2866.072505][T13731] should_fail_ex+0x412/0x560 [ 2866.072538][T13731] prepare_alloc_pages+0x22a/0x650 [ 2866.072568][T13731] __alloc_frozen_pages_noprof+0x12f/0x380 [ 2866.072594][T13731] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 2866.072621][T13731] ? __pfx_policy_nodemask+0x10/0x10 [ 2866.072653][T13731] alloc_pages_mpol+0x232/0x4a0 [ 2866.072681][T13731] ___kmalloc_large_node+0x4e/0x150 [ 2866.072705][T13731] __kmalloc_large_node_noprof+0x18/0x90 [ 2866.072728][T13731] ? __pfx_ieee80211_emulate_remove_chanctx+0x10/0x10 [ 2866.072753][T13731] __kmalloc_noprof+0x3e8/0x760 [ 2866.072774][T13731] ? wiphy_new_nm+0x625/0x19e0 [ 2866.072795][T13731] ? __pfx_ieee80211_emulate_remove_chanctx+0x10/0x10 [ 2866.072825][T13731] wiphy_new_nm+0x625/0x19e0 [ 2866.072842][T13731] ? ieee80211_alloc_hw_nm+0x912/0x1f60 [ 2866.072868][T13731] ? __pfx_ieee80211_emulate_remove_chanctx+0x10/0x10 [ 2866.072891][T13731] ieee80211_alloc_hw_nm+0x3f3/0x1f60 [ 2866.072916][T13731] ? __pfx_ieee80211_emulate_add_chanctx+0x10/0x10 [ 2866.072947][T13731] mac80211_hwsim_new_radio+0x1dc/0x5330 [ 2866.072974][T13731] ? __pfx_vprintk_emit+0x10/0x10 [ 2866.073011][T13731] ? _printk+0xdd/0x130 [ 2866.073034][T13731] ? __pfx__printk+0x10/0x10 [ 2866.073055][T13731] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 2866.073080][T13731] ? rcu_is_watching+0x15/0xb0 [ 2866.073112][T13731] hwsim_new_radio_nl+0xf35/0x1bd0 [ 2866.073156][T13731] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 2866.073189][T13731] ? rcu_is_watching+0x15/0xb0 [ 2866.073213][T13731] ? trace_kmalloc+0x2a/0x110 [ 2866.073238][T13731] ? __nla_parse+0x40/0x60 [ 2866.073261][T13731] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 2866.073292][T13731] genl_family_rcv_msg_doit+0x22a/0x330 [ 2866.073321][T13731] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 2866.073356][T13731] ? bpf_lsm_capable+0x9/0x20 [ 2866.073380][T13731] ? security_capable+0x7e/0x2c0 [ 2866.073412][T13731] genl_rcv_msg+0x61c/0x7a0 [ 2866.073441][T13731] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2866.073464][T13731] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 2866.073488][T13731] ? __lock_acquire+0x6b5/0x2cf0 [ 2866.073522][T13731] netlink_rcv_skb+0x232/0x4b0 [ 2866.073541][T13731] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2866.073565][T13731] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2866.073601][T13731] ? down_read+0x272/0x2e0 [ 2866.073623][T13731] ? genl_rcv+0xd/0x40 [ 2866.073647][T13731] genl_rcv+0x28/0x40 [ 2866.073667][T13731] netlink_unicast+0x80f/0x9b0 [ 2866.073701][T13731] ? __pfx_netlink_unicast+0x10/0x10 [ 2866.073729][T13731] ? netlink_sendmsg+0x650/0xb40 [ 2866.073746][T13731] ? skb_put+0x11b/0x210 [ 2866.073771][T13731] netlink_sendmsg+0x813/0xb40 [ 2866.073798][T13731] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2866.073825][T13731] ? aa_sock_msg_perm+0xf1/0x1b0 [ 2866.073854][T13731] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2866.073878][T13731] ____sys_sendmsg+0x972/0x9f0 [ 2866.073910][T13731] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2866.073937][T13731] ? kstrtoull+0x12f/0x1d0 [ 2866.073971][T13731] ___sys_sendmsg+0x2a5/0x360 [ 2866.073999][T13731] ? __pfx____sys_sendmsg+0x10/0x10 [ 2866.074023][T13731] ? get_pid_task+0x20/0x1f0 [ 2866.074041][T13731] ? get_pid_task+0x20/0x1f0 [ 2866.074056][T13731] ? get_pid_task+0x20/0x1f0 [ 2866.074096][T13731] ? __fget_files+0x2a/0x420 [ 2866.074113][T13731] ? __fget_files+0x3a0/0x420 [ 2866.074138][T13731] __sys_sendmsg+0x183/0x260 [ 2866.074163][T13731] ? __pfx___sys_sendmsg+0x10/0x10 [ 2866.074204][T13731] __do_fast_syscall_32+0x20d/0x640 [ 2866.074231][T13731] ? do_fast_syscall_32+0x33/0x70 [ 2866.074254][T13731] ? asm_int80_emulation+0x1a/0x20 [ 2866.074272][T13731] ? do_int80_emulation+0x274/0x4d0 [ 2866.074296][T13731] ? trace_irq_disable+0x3b/0x150 [ 2866.074317][T13731] do_fast_syscall_32+0x33/0x70 [ 2866.074341][T13731] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2866.074364][T13731] RIP: 0023:0xf709ef6c [ 2866.074381][T13731] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 2866.074397][T13731] RSP: 002b:00000000f548d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 2866.074417][T13731] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000100 [ 2866.074431][T13731] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2866.074442][T13731] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2866.074453][T13731] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2866.074465][T13731] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2866.074493][T13731] [ 2866.632376][T20881] usb 9-1: Using ep0 maxpacket: 32 [ 2866.639032][T20881] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2866.649957][T20881] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2866.669863][T20881] usb 9-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 2866.679269][T20881] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2866.689217][T20881] usb 9-1: config 0 descriptor?? [ 2866.696428][T20881] hub 9-1:0.0: bad descriptor, ignoring hub [ 2866.702938][T20881] hub 9-1:0.0: probe with driver hub failed with error -5 [ 2866.711867][T20881] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 2869.913426][ T5954] usb 9-1: USB disconnect, device number 117 [ 2870.009144][T13829] netlink: 8 bytes leftover after parsing attributes in process `syz.8.10930'. [ 2870.108693][T13829] vxlan0: entered promiscuous mode [ 2870.145238][T13829] vxlan0: entered allmulticast mode [ 2870.171439][T10742] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 2870.222503][T10742] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 2870.231235][T10742] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 2870.250953][T13834] fuse: Unknown parameter '0xffffffffffffffff0x0000000000000004' [ 2870.406499][T10742] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 2870.575849][T13845] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10933'. [ 2870.633129][T13845] netlink: 20 bytes leftover after parsing attributes in process `syz.6.10933'. [ 2870.691495][ T5192] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 2870.725442][ T5192] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 2870.746235][T13798] syz.0.10929 (13798): drop_caches: 1 [ 2870.804544][ T5192] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 2870.843052][T13858] netlink: 36 bytes leftover after parsing attributes in process `syz.5.10936'. [ 2870.843743][ T5192] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 2871.578750][T13889] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10943'. [ 2872.495585][ T5954] usb 9-1: new high-speed USB device number 118 using dummy_hcd [ 2872.679008][ T5954] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2872.725687][ T5954] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2872.807564][ T5954] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2872.850601][ T5954] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2872.900386][T13903] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 2872.942868][ T5954] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 2873.113544][T13930] FAULT_INJECTION: forcing a failure. [ 2873.113544][T13930] name failslab, interval 1, probability 0, space 0, times 0 [ 2873.169578][T13930] CPU: 0 UID: 0 PID: 13930 Comm: syz.3.10950 Tainted: G L syzkaller #0 PREEMPT(full) [ 2873.169607][T13930] Tainted: [L]=SOFTLOCKUP [ 2873.169614][T13930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2873.169625][T13930] Call Trace: [ 2873.169632][T13930] [ 2873.169640][T13930] dump_stack_lvl+0xe8/0x150 [ 2873.169669][T13930] should_fail_ex+0x412/0x560 [ 2873.169705][T13930] should_failslab+0xa8/0x100 [ 2873.169731][T13930] __kmalloc_cache_noprof+0x88/0x660 [ 2873.169753][T13930] ? tcp_sendmsg_fastopen+0x1de/0x5e0 [ 2873.169783][T13930] tcp_sendmsg_fastopen+0x1de/0x5e0 [ 2873.169814][T13930] mptcp_sendmsg_fastopen+0x17d/0x580 [ 2873.169845][T13930] mptcp_sendmsg+0x17af/0x19d0 [ 2873.169895][T13930] ? aa_sk_perm+0x6d5/0x900 [ 2873.169930][T13930] ? __pfx_aa_sk_perm+0x10/0x10 [ 2873.169955][T13930] ? __pfx_mptcp_sendmsg+0x10/0x10 [ 2873.169980][T13930] ? __pfx_inet6_sendmsg+0x10/0x10 [ 2873.170006][T13930] ? inet6_sendmsg+0x101/0x120 [ 2873.170030][T13930] ? __pfx_inet6_sendmsg+0x10/0x10 [ 2873.170056][T13930] __sys_sendto+0x4a3/0x710 [ 2873.170080][T13930] ? __pfx___sys_sendto+0x10/0x10 [ 2873.170124][T13930] ? fput+0xa0/0xd0 [ 2873.170150][T13930] ? ksys_write+0x242/0x270 [ 2873.170176][T13930] __ia32_sys_sendto+0xdd/0x100 [ 2873.170201][T13930] __do_fast_syscall_32+0x20d/0x640 [ 2873.170228][T13930] ? do_fast_syscall_32+0x33/0x70 [ 2873.170250][T13930] ? asm_int80_emulation+0x1a/0x20 [ 2873.170268][T13930] ? do_int80_emulation+0x274/0x4d0 [ 2873.170290][T13930] ? trace_irq_disable+0x3b/0x150 [ 2873.170311][T13930] do_fast_syscall_32+0x33/0x70 [ 2873.170336][T13930] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2873.170358][T13930] RIP: 0023:0xf709ef6c [ 2873.170374][T13930] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 2873.170390][T13930] RSP: 002b:00000000f548d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000171 [ 2873.170409][T13930] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000040 [ 2873.170422][T13930] RDX: 0000000000001001 RSI: 0000000000004040 RDI: 0000000000000000 [ 2873.170433][T13930] RBP: 0000000000004100 R08: 0000000000000000 R09: 0000000000000000 [ 2873.170444][T13930] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2873.170455][T13930] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2873.170483][T13930] [ 2874.081138][ T5954] usb 9-1: USB disconnect, device number 118 [ 2874.921336][T13994] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10959'. [ 2875.102892][ T798] usb 9-1: new high-speed USB device number 119 using dummy_hcd [ 2875.227550][T14013] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10963'. [ 2875.273060][ T798] usb 9-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 2875.292770][ T798] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2875.329687][ T798] usb 9-1: config 0 descriptor?? [ 2875.397638][T14017] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10964'. [ 2875.417155][T14017] vxlan0: entered promiscuous mode [ 2875.422480][T14017] vxlan0: entered allmulticast mode [ 2875.429838][T10742] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 2875.439716][T10742] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 2875.452678][T10742] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 2875.471141][T10742] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 2875.511028][T13977] fuse: Bad value for 'fd' [ 2875.560021][ T798] udl 9-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 2875.767487][T14023] wg1: entered promiscuous mode [ 2875.772559][T14023] wg1: entered allmulticast mode [ 2876.266570][ T798] [drm:udl_init] *ERROR* Selecting channel failed [ 2876.311789][ T798] [drm] Initialized udl 0.0.1 for 9-1:0.0 on minor 2 [ 2876.318889][ T798] [drm] Initialized udl on minor 2 [ 2876.328406][ T798] udl 9-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 2876.359459][ T798] udl 9-1:0.0: [drm] Cannot find any crtc or sizes [ 2876.375100][ T3218] udl 9-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 2876.387423][ T798] usb 9-1: USB disconnect, device number 119 [ 2876.394586][ T3218] udl 9-1:0.0: [drm] Cannot find any crtc or sizes [ 2876.456166][T20897] usb 6-1: new high-speed USB device number 104 using dummy_hcd [ 2876.587799][T14067] xt_hashlimit: overflow, try lower: 60585/0 [ 2876.606897][T14067] wg1: entered promiscuous mode [ 2876.611876][T14067] wg1: entered allmulticast mode [ 2876.619659][T20897] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2876.644058][T20897] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2876.665587][T20897] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2876.679636][T20897] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2876.691694][T14034] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 2876.725596][T20897] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 2876.872792][T14088] batadv_slave_1: entered promiscuous mode [ 2876.880277][ T30] audit: type=1326 audit(1775034112.764:3232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14087 comm="syz.8.10975" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f08f6c code=0x0 [ 2876.954272][T14089] batadv_slave_1: left promiscuous mode [ 2877.196748][T20897] usb 6-1: USB disconnect, device number 104 [ 2877.712381][ T5954] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 2877.836934][T14126] FAULT_INJECTION: forcing a failure. [ 2877.836934][T14126] name failslab, interval 1, probability 0, space 0, times 0 [ 2877.850532][T14126] CPU: 1 UID: 0 PID: 14126 Comm: syz.5.10979 Tainted: G L syzkaller #0 PREEMPT(full) [ 2877.850558][T14126] Tainted: [L]=SOFTLOCKUP [ 2877.850565][T14126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2877.850576][T14126] Call Trace: [ 2877.850585][T14126] [ 2877.850592][T14126] dump_stack_lvl+0xe8/0x150 [ 2877.850623][T14126] should_fail_ex+0x412/0x560 [ 2877.850655][T14126] should_failslab+0xa8/0x100 [ 2877.850679][T14126] ? skb_clone+0x212/0x3a0 [ 2877.850709][T14126] kmem_cache_alloc_noprof+0x87/0x650 [ 2877.850738][T14126] skb_clone+0x212/0x3a0 [ 2877.850765][T14126] __netlink_deliver_tap+0x404/0x850 [ 2877.850797][T14126] ? netlink_deliver_tap+0x2e/0x1b0 [ 2877.850818][T14126] netlink_deliver_tap+0x19c/0x1b0 [ 2877.850838][T14126] __netlink_sendskb+0x47/0x90 [ 2877.850866][T14126] netlink_dump+0xa6f/0xe80 [ 2877.850897][T14126] ? __pfx_netlink_dump+0x10/0x10 [ 2877.850931][T14126] ? genl_start+0x499/0x6c0 [ 2877.850961][T14126] __netlink_dump_start+0x5cb/0x7e0 [ 2877.850988][T14126] genl_family_rcv_msg_dumpit+0x213/0x310 [ 2877.851016][T14126] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 2877.851047][T14126] ? __pfx_genl_start+0x10/0x10 [ 2877.851067][T14126] ? __pfx_genl_dumpit+0x10/0x10 [ 2877.851088][T14126] ? __pfx_genl_done+0x10/0x10 [ 2877.851115][T14126] ? bpf_lsm_capable+0x9/0x20 [ 2877.851139][T14126] ? security_capable+0x7e/0x2c0 [ 2877.851172][T14126] genl_rcv_msg+0x5e8/0x7a0 [ 2877.851201][T14126] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2877.851224][T14126] ? __pfx_batadv_tt_local_dump+0x10/0x10 [ 2877.851252][T14126] ? __lock_acquire+0x6b5/0x2cf0 [ 2877.851286][T14126] netlink_rcv_skb+0x232/0x4b0 [ 2877.851306][T14126] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2877.851331][T14126] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2877.851367][T14126] ? down_read+0x272/0x2e0 [ 2877.851390][T14126] ? genl_rcv+0xd/0x40 [ 2877.851414][T14126] genl_rcv+0x28/0x40 [ 2877.851435][T14126] netlink_unicast+0x80f/0x9b0 [ 2877.851469][T14126] ? __pfx_netlink_unicast+0x10/0x10 [ 2877.851497][T14126] ? netlink_sendmsg+0x650/0xb40 [ 2877.851514][T14126] ? skb_put+0x11b/0x210 [ 2877.851538][T14126] netlink_sendmsg+0x813/0xb40 [ 2877.851566][T14126] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2877.851590][T14126] ? aa_sock_msg_perm+0xf1/0x1b0 [ 2877.851618][T14126] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2877.851643][T14126] ____sys_sendmsg+0x972/0x9f0 [ 2877.851675][T14126] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2877.851708][T14126] ? kstrtoull+0x12f/0x1d0 [ 2877.851742][T14126] ___sys_sendmsg+0x2a5/0x360 [ 2877.851771][T14126] ? __pfx____sys_sendmsg+0x10/0x10 [ 2877.851795][T14126] ? get_pid_task+0x20/0x1f0 [ 2877.851813][T14126] ? get_pid_task+0x20/0x1f0 [ 2877.851828][T14126] ? get_pid_task+0x20/0x1f0 [ 2877.851872][T14126] ? __fget_files+0x2a/0x420 [ 2877.851888][T14126] ? __fget_files+0x3a0/0x420 [ 2877.851914][T14126] __sys_sendmsg+0x183/0x260 [ 2877.851939][T14126] ? __pfx___sys_sendmsg+0x10/0x10 [ 2877.851984][T14126] __do_fast_syscall_32+0x20d/0x640 [ 2877.852010][T14126] ? do_fast_syscall_32+0x33/0x70 [ 2877.852033][T14126] ? asm_int80_emulation+0x1a/0x20 [ 2877.852050][T14126] ? do_int80_emulation+0x274/0x4d0 [ 2877.852071][T14126] ? trace_irq_disable+0x3b/0x150 [ 2877.852093][T14126] do_fast_syscall_32+0x33/0x70 [ 2877.852117][T14126] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2877.852139][T14126] RIP: 0023:0xf6fdef6c [ 2877.852156][T14126] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 2877.852173][T14126] RSP: 002b:00000000f53cd50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 2877.852196][T14126] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000200 [ 2877.852208][T14126] RDX: 0000000000008000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2877.852218][T14126] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2877.852228][T14126] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2877.852239][T14126] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2877.852265][T14126] [ 2878.293657][ T5954] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 2878.306278][ T5954] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2878.314315][ T5954] usb 4-1: Product: syz [ 2878.318475][ T5954] usb 4-1: Manufacturer: syz [ 2878.323115][ T5954] usb 4-1: SerialNumber: syz [ 2878.807745][T14155] netlink: 92 bytes leftover after parsing attributes in process `syz.6.10983'. [ 2878.837608][ T5954] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 2878.849890][T20897] usb 9-1: new high-speed USB device number 120 using dummy_hcd [ 2878.877724][ T5954] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 2879.072271][T20897] usb 9-1: Using ep0 maxpacket: 16 [ 2879.120246][T20897] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2879.192044][T20897] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2879.267948][T20897] usb 9-1: New USB device found, idVendor=03d3, idProduct=05f4, bcdDevice= 0.5b [ 2879.307790][T20897] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2879.356051][T20897] usb 9-1: config 0 descriptor?? [ 2879.403822][T14168] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2879.440342][T14168] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2879.452124][T14113] syzkaller0: entered promiscuous mode [ 2879.511841][T14113] syzkaller0: entered allmulticast mode [ 2879.610575][T20897] usb 9-1: USB disconnect, device number 120 [ 2879.685620][ T30] audit: type=1804 audit(1775034115.574:3233): pid=14185 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.10987" name="/newroot/175/file1" dev="fuse" ino=1 res=1 errno=0 [ 2880.081865][ T30] audit: type=1326 audit(1775034115.964:3234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14199 comm="syz.0.10988" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70cef6c code=0x0 [ 2880.658046][T20881] usb 9-1: new high-speed USB device number 121 using dummy_hcd [ 2880.658126][T10753] failed to send hello msg [ 2880.709551][T10753] failed while handling packet from 1:60042 [ 2880.839215][T20881] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2880.880133][T20881] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2880.916589][T20881] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2880.929480][T14221] trusted_key: encrypted_key: keylen parameter is missing [ 2880.948100][T20881] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2880.974607][T14206] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 2880.996662][T20881] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 2881.402553][ T798] usb 9-1: USB disconnect, device number 121 [ 2883.666104][T14200] batadv_slave_1: entered promiscuous mode [ 2883.672608][T14201] batadv_slave_1: left promiscuous mode [ 2883.727312][ T5954] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000010. ret = -EPROTO [ 2883.800018][ T5954] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 2883.840986][ T5954] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 2883.874512][ T5954] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 2883.899880][ T5954] usb 4-1: USB disconnect, device number 64 [ 2884.160715][ T30] audit: type=1804 audit(1775034120.024:3235): pid=14294 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.8.10998" name="/newroot/210/file1" dev="fuse" ino=1 res=1 errno=0 [ 2884.479129][T14308] syzkaller0: entered promiscuous mode [ 2884.506880][T14308] syzkaller0: entered allmulticast mode [ 2890.334411][T14372] netlink: 48 bytes leftover after parsing attributes in process `syz.5.11008'. [ 2890.762343][T11117] usb 6-1: new full-speed USB device number 105 using dummy_hcd [ 2890.938952][T11117] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2890.964539][T11117] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2890.997362][T11117] usb 6-1: New USB device found, idVendor=0404, idProduct=0755, bcdDevice= 0.00 [ 2891.022275][T11117] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2891.051336][T11117] usb 6-1: config 0 descriptor?? [ 2891.341692][ T30] audit: type=1804 audit(1775034127.224:3236): pid=14382 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.11010" name="/newroot/181/file1" dev="fuse" ino=1 res=1 errno=0 [ 2894.077837][T14409] netlink: 'syz.8.11015': attribute type 1 has an invalid length. [ 2895.497070][ T5954] usb 9-1: new high-speed USB device number 122 using dummy_hcd [ 2895.533257][T11117] usbhid 6-1:0.0: can't add hid device: -71 [ 2895.539265][T11117] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 2895.599464][T11117] usb 6-1: USB disconnect, device number 105 [ 2895.695999][ T5954] usb 9-1: config 0 has no interfaces? [ 2895.752361][ T5954] usb 9-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 2895.761391][ T5954] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2895.794034][ T5954] usb 9-1: Product: syz [ 2895.798219][ T5954] usb 9-1: Manufacturer: syz [ 2895.843321][ T5954] usb 9-1: SerialNumber: syz [ 2895.874245][ T5954] usb 9-1: config 0 descriptor?? [ 2896.128339][ T798] usb 9-1: USB disconnect, device number 122 [ 2896.425333][ T5954] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 2896.645211][ T5954] usb 4-1: Using ep0 maxpacket: 8 [ 2896.771905][ T5954] usb 4-1: unable to get BOS descriptor or descriptor too short [ 2896.788262][T14516] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11028'. [ 2896.883977][ T5954] usb 4-1: config 1 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2896.964242][ T5954] usb 4-1: config 1 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2897.070370][ T5954] usb 4-1: config 1 interface 0 has no altsetting 0 [ 2897.166382][ T5954] usb 4-1: New USB device found, idVendor=05ac, idProduct=0254, bcdDevice= 0.40 [ 2897.253562][ T5954] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2897.318326][ T5954] usb 4-1: Product: syz [ 2897.350895][ T5954] usb 4-1: Manufacturer: syz [ 2897.372294][ T5954] usb 4-1: SerialNumber: syz [ 2897.391063][T14530] program syz.5.11030 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2897.501485][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 2897.507859][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 2899.323840][ T5954] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input402 [ 2899.354168][ T5182] bcm5974 4-1:1.0: could not read from device [ 2899.410351][ T5954] usb 4-1: USB disconnect, device number 65 [ 2899.417129][ T5182] bcm5974 4-1:1.0: could not read from device [ 2899.696640][T14650] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11050'. [ 2899.789101][T14654] syzkaller0: entered promiscuous mode [ 2899.801139][T14654] syzkaller0: entered allmulticast mode [ 2899.985008][T14664] netlink: 68 bytes leftover after parsing attributes in process `syz.8.11056'. [ 2900.077990][T14671] netlink: 68 bytes leftover after parsing attributes in process `syz.8.11056'. [ 2900.457112][T14738] netlink: 64 bytes leftover after parsing attributes in process `syz.3.11057'. [ 2900.676154][T10742] netdevsim netdevsim8 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 2900.704572][T10742] netdevsim netdevsim8 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 2900.739899][T10742] netdevsim netdevsim8 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 2900.779223][T10742] netdevsim netdevsim8 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 2902.095021][ T30] audit: type=1326 audit(1775034137.984:3237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14829 comm="syz.8.11082" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f08f6c code=0x7ffc0000 [ 2902.117671][T14832] tc_dump_action: action bad kind [ 2902.152277][ T30] audit: type=1326 audit(1775034137.984:3238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14829 comm="syz.8.11082" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f08f6c code=0x7ffc0000 [ 2902.195821][ T30] audit: type=1326 audit(1775034137.984:3239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14829 comm="syz.8.11082" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f08f6c code=0x7ffc0000 [ 2902.295711][ T30] audit: type=1326 audit(1775034137.984:3240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14829 comm="syz.8.11082" exe="/root/syz-executor" sig=0 arch=40000003 syscall=426 compat=1 ip=0xf7f08f6c code=0x7ffc0000 [ 2902.372746][ T30] audit: type=1326 audit(1775034137.984:3241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14829 comm="syz.8.11082" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f08f6c code=0x7ffc0000 [ 2902.412363][ T30] audit: type=1326 audit(1775034137.984:3242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14829 comm="syz.8.11082" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f08f6c code=0x7ffc0000 [ 2902.504573][ T30] audit: type=1326 audit(1775034137.984:3243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14829 comm="syz.8.11082" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f08f6c code=0x7ffc0000 [ 2902.583592][ T30] audit: type=1326 audit(1775034137.984:3244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14829 comm="syz.8.11082" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f08f6c code=0x7ffc0000 [ 2902.693673][ T30] audit: type=1326 audit(1775034137.984:3245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14829 comm="syz.8.11082" exe="/root/syz-executor" sig=0 arch=40000003 syscall=425 compat=1 ip=0xf7f08f6c code=0x7ffc0000 [ 2902.762288][ T30] audit: type=1326 audit(1775034137.984:3246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14829 comm="syz.8.11082" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f08f6c code=0x7ffc0000 [ 2902.875338][T14860] netlink: 4 bytes leftover after parsing attributes in process `syz.6.11090'. [ 2902.892324][T14860] bridge_slave_1: left allmulticast mode [ 2902.908177][T14860] bridge_slave_1: left promiscuous mode [ 2902.935233][T14860] bridge0: port 2(bridge_slave_1) entered disabled state [ 2903.015194][T14860] bridge_slave_0: left allmulticast mode [ 2903.020862][T14860] bridge_slave_0: left promiscuous mode [ 2903.049772][T14860] bridge0: port 1(bridge_slave_0) entered disabled state [ 2904.469614][T14892] bridge_slave_1: default FDB implementation only supports local addresses [ 2908.088425][T14964] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11120'. [ 2909.702552][T15021] program syz.6.11136 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2911.058116][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 2911.058134][ T30] audit: type=1804 audit(1775034146.944:3261): pid=15064 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.11148" name="/newroot/227/file1" dev="fuse" ino=1 res=1 errno=0 [ 2912.542264][T20897] usb 9-1: new high-speed USB device number 123 using dummy_hcd [ 2912.674881][T15087] netlink: 92 bytes leftover after parsing attributes in process `syz.0.11154'. [ 2912.822261][T20897] usb 9-1: Using ep0 maxpacket: 8 [ 2912.970984][T20897] usb 9-1: unable to get BOS descriptor or descriptor too short [ 2913.051446][T20897] usb 9-1: config 4 interface 0 has no altsetting 0 [ 2913.115801][T20897] usb 9-1: string descriptor 0 read error: -22 [ 2913.150009][T20897] usb 9-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 2913.226470][T20897] usb 9-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 2913.335181][T20897] usb 9-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 2913.413715][T20897] usb 9-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 2913.488907][T20897] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 2913.536800][T20897] usb 9-1: media controller created [ 2913.643362][T20897] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2914.212767][T15113] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2914.244284][T20897] usb 6-1: new high-speed USB device number 106 using dummy_hcd [ 2914.253676][T15113] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2914.435104][T20897] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2914.488580][T20897] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2914.543132][T20897] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2914.580016][T20897] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2914.625618][T15123] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 2914.660882][T20897] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 2915.036950][T20897] usb 6-1: USB disconnect, device number 106 [ 2915.406169][T11117] usb 9-1: USB disconnect, device number 123 [ 2916.188510][T15197] vcan0: tx drop: invalid da for name 0x0000000000000003 [ 2917.994301][ T30] audit: type=1804 audit(1775034153.884:3262): pid=15231 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.11166" name="/newroot/239/file1" dev="fuse" ino=1 res=1 errno=0 [ 2918.234193][T15248] 8021q: adding VLAN 0 to HW filter on device bond5 [ 2918.241502][T15250] batadv_slave_1: entered promiscuous mode [ 2918.281578][T15284] bond5: (slave veth3): Enslaving as an active interface with an up link [ 2918.295456][ T30] audit: type=1326 audit(1775034154.184:3263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15247 comm="syz.5.11170" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf6fdef6c code=0x0 [ 2918.395559][T15285] batadv_slave_1: left promiscuous mode [ 2921.902034][T15370] FAULT_INJECTION: forcing a failure. [ 2921.902034][T15370] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2921.902073][T15370] CPU: 0 UID: 0 PID: 15370 Comm: syz.3.11183 Tainted: G L syzkaller #0 PREEMPT(full) [ 2921.902087][T15370] Tainted: [L]=SOFTLOCKUP [ 2921.902091][T15370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2921.902098][T15370] Call Trace: [ 2921.902103][T15370] [ 2921.902108][T15370] dump_stack_lvl+0xe8/0x150 [ 2921.902126][T15370] should_fail_ex+0x412/0x560 [ 2921.902143][T15370] _copy_to_user+0x31/0xb0 [ 2921.902157][T15370] simple_read_from_buffer+0xe1/0x170 [ 2921.902181][T15370] proc_fail_nth_read+0x1bb/0x230 [ 2921.902208][T15370] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2921.902233][T15370] ? rw_verify_area+0x2a6/0x4d0 [ 2921.902244][T15370] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2921.902259][T15370] vfs_read+0x20c/0xa70 [ 2921.902269][T15370] ? fdget_pos+0x246/0x320 [ 2921.902278][T15370] ? __pfx___sys_sendmmsg+0x10/0x10 [ 2921.902300][T15370] ? __pfx___mutex_lock+0x10/0x10 [ 2921.902314][T15370] ? __pfx_vfs_read+0x10/0x10 [ 2921.902326][T15370] ? __fget_files+0x2a/0x420 [ 2921.902337][T15370] ? __fget_files+0x3a0/0x420 [ 2921.902345][T15370] ? __fget_files+0x2a/0x420 [ 2921.902358][T15370] ksys_read+0x150/0x270 [ 2921.902370][T15370] ? __pfx_ksys_read+0x10/0x10 [ 2921.902383][T15370] ? asm_int80_emulation+0x1a/0x20 [ 2921.902395][T15370] do_int80_emulation+0x173/0x4d0 [ 2921.902408][T15370] ? trace_irq_disable+0x3b/0x150 [ 2921.902418][T15370] ? asm_int80_emulation+0x1a/0x20 [ 2921.902427][T15370] ? clear_bhb_loop+0x40/0x90 [ 2921.902436][T15370] ? clear_bhb_loop+0x40/0x90 [ 2921.902448][T15370] asm_int80_emulation+0x1a/0x20 [ 2921.902458][T15370] RIP: 0023:0xf71d5cab [ 2921.902468][T15370] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 2921.902478][T15370] RSP: 002b:00000000f548d4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 2921.902489][T15370] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f548d5d0 [ 2921.902497][T15370] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 2921.902502][T15370] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2921.902508][T15370] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2921.902514][T15370] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2921.902529][T15370] [ 2924.069755][T15411] FAULT_INJECTION: forcing a failure. [ 2924.069755][T15411] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2924.083844][T15411] CPU: 0 UID: 0 PID: 15411 Comm: syz.3.11192 Tainted: G L syzkaller #0 PREEMPT(full) [ 2924.083872][T15411] Tainted: [L]=SOFTLOCKUP [ 2924.083879][T15411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2924.083891][T15411] Call Trace: [ 2924.083898][T15411] [ 2924.083906][T15411] dump_stack_lvl+0xe8/0x150 [ 2924.083934][T15411] should_fail_ex+0x412/0x560 [ 2924.083966][T15411] _copy_from_user+0x2d/0xb0 [ 2924.083988][T15411] move_addr_to_kernel+0x7e/0x160 [ 2924.084016][T15411] get_compat_msghdr+0x3d8/0x4c0 [ 2924.084037][T15411] ? __lock_acquire+0x6b5/0x2cf0 [ 2924.084072][T15411] ? __pfx_get_compat_msghdr+0x10/0x10 [ 2924.084094][T15411] ? kstrtoull+0x12f/0x1d0 [ 2924.084126][T15411] ___sys_sendmsg+0x201/0x360 [ 2924.084154][T15411] ? __pfx____sys_sendmsg+0x10/0x10 [ 2924.084179][T15411] ? get_pid_task+0x20/0x1f0 [ 2924.084196][T15411] ? get_pid_task+0x20/0x1f0 [ 2924.084211][T15411] ? get_pid_task+0x20/0x1f0 [ 2924.084248][T15411] ? __fget_files+0x2a/0x420 [ 2924.084264][T15411] ? __fget_files+0x3a0/0x420 [ 2924.084288][T15411] __sys_sendmsg+0x183/0x260 [ 2924.084312][T15411] ? __pfx___sys_sendmsg+0x10/0x10 [ 2924.084355][T15411] __do_fast_syscall_32+0x20d/0x640 [ 2924.084382][T15411] ? do_fast_syscall_32+0x33/0x70 [ 2924.084404][T15411] ? asm_int80_emulation+0x1a/0x20 [ 2924.084423][T15411] ? do_int80_emulation+0x274/0x4d0 [ 2924.084445][T15411] ? trace_irq_disable+0x3b/0x150 [ 2924.084465][T15411] do_fast_syscall_32+0x33/0x70 [ 2924.084490][T15411] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2924.084510][T15411] RIP: 0023:0xf709ef6c [ 2924.084526][T15411] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 2924.084542][T15411] RSP: 002b:00000000f548d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 2924.084560][T15411] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000180 [ 2924.084572][T15411] RDX: 0000000000000851 RSI: 0000000000000000 RDI: 0000000000000000 [ 2924.084584][T15411] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2924.084596][T15411] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2924.084607][T15411] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2924.084634][T15411] [ 2924.875653][ T30] audit: type=1804 audit(1775034160.764:3264): pid=15420 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.11195" name="/newroot/245/file1" dev="fuse" ino=1 res=1 errno=0 [ 2927.965837][T15482] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11203'. [ 2928.035796][T15487] netlink: 24 bytes leftover after parsing attributes in process `syz.5.11203'. [ 2928.552848][T15505] openvswitch: netlink: IP tunnel TTL not specified. [ 2928.588935][T15508] netdevsim netdevsim0: Direct firmware load for þ failed with error -2 [ 2928.632288][T15508] netdevsim netdevsim0: Falling back to sysfs fallback for: þ [ 2929.103789][ T3218] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 2929.282260][ T3218] usb 4-1: Using ep0 maxpacket: 8 [ 2929.300079][ T3218] usb 4-1: unable to get BOS descriptor or descriptor too short [ 2929.387651][ T3218] usb 4-1: config 4 interface 0 has no altsetting 0 [ 2929.463053][ T3218] usb 4-1: string descriptor 0 read error: -22 [ 2929.469322][ T3218] usb 4-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 2929.512291][ T3218] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 2929.555609][ T3218] usb 4-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 2929.607442][ T3218] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 2929.642968][ T3218] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 2929.663833][ T3218] usb 4-1: media controller created [ 2929.693549][ T3218] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2930.903152][ T30] audit: type=1804 audit(1775034166.784:3265): pid=15581 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.11221" name="/newroot/222/file1" dev="fuse" ino=1 res=1 errno=0 [ 2931.362285][ T3218] usb 9-1: new high-speed USB device number 124 using dummy_hcd [ 2931.542864][ T3218] usb 9-1: Using ep0 maxpacket: 16 [ 2931.569785][ T3218] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2931.608996][ T3218] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2931.640402][ T3218] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2931.689230][ T3218] usb 9-1: New USB device found, idVendor=17ef, idProduct=6067, bcdDevice= 0.00 [ 2931.719607][ T3218] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2931.757692][ T3218] usb 9-1: config 0 descriptor?? [ 2931.891016][T20897] usb 4-1: USB disconnect, device number 66 [ 2932.215634][ T3218] hid_parser_main: 29 callbacks suppressed [ 2932.215649][ T3218] lenovo 0003:17EF:6067.0094: unknown main item tag 0x0 [ 2932.260880][ T3218] lenovo 0003:17EF:6067.0094: unknown main item tag 0x0 [ 2932.295709][ T3218] lenovo 0003:17EF:6067.0094: unknown main item tag 0x0 [ 2932.332461][ T3218] lenovo 0003:17EF:6067.0094: unknown main item tag 0x0 [ 2932.362238][ T3218] lenovo 0003:17EF:6067.0094: unknown main item tag 0x0 [ 2932.384239][T15594] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2932.393073][ T3218] lenovo 0003:17EF:6067.0094: unknown main item tag 0x0 [ 2932.400491][ T3218] lenovo 0003:17EF:6067.0094: unknown main item tag 0x0 [ 2932.429073][T15594] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2932.437186][ T3218] lenovo 0003:17EF:6067.0094: unknown main item tag 0x0 [ 2932.444590][T20897] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 2932.490660][ T3218] lenovo 0003:17EF:6067.0094: unknown main item tag 0x0 [ 2932.518128][ T3218] lenovo 0003:17EF:6067.0094: unknown main item tag 0x0 [ 2932.575644][ T3218] lenovo 0003:17EF:6067.0094: hidraw0: USB HID v0.00 Device [HID 17ef:6067] on usb-dummy_hcd.8-1/input0 [ 2932.644976][T20897] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2932.670275][ T3218] usb 9-1: USB disconnect, device number 124 [ 2932.703467][T20897] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2932.764873][T20897] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2932.817848][T20897] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2932.878543][T15620] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 2932.916029][T20897] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 2933.423022][T20897] usb 4-1: USB disconnect, device number 67 [ 2933.556452][ T30] audit: type=1804 audit(1775034169.444:3266): pid=15708 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.11234" name="/newroot/241/file1" dev="fuse" ino=1 res=1 errno=0 [ 2933.935319][T15726] netlink: 24 bytes leftover after parsing attributes in process `syz.8.11237'. [ 2935.305278][ T30] audit: type=1804 audit(1775034171.194:3267): pid=15756 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.11246" name="/newroot/253/file1" dev="fuse" ino=1 res=1 errno=0 [ 2937.642517][T11117] usb 6-1: new high-speed USB device number 107 using dummy_hcd [ 2937.834158][T11117] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2937.872286][T11117] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2937.922426][T11117] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2937.952276][T11117] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2937.993110][T15791] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 2938.033659][T15811] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11254'. [ 2938.057773][T15811] netlink: 'syz.0.11254': attribute type 7 has an invalid length. [ 2938.090240][T15811] netlink: 'syz.0.11254': attribute type 8 has an invalid length. [ 2938.095054][T11117] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 2938.115408][T15811] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11254'. [ 2938.436773][T11117] usb 6-1: USB disconnect, device number 107 [ 2939.209661][ T30] audit: type=1804 audit(1775034175.094:3268): pid=15865 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.11258" name="/newroot/253/file1" dev="fuse" ino=1 res=1 errno=0 [ 2939.542363][T20897] usb 6-1: new high-speed USB device number 108 using dummy_hcd [ 2939.723649][T20897] usb 6-1: Using ep0 maxpacket: 8 [ 2939.762068][T20897] usb 6-1: unable to get BOS descriptor or descriptor too short [ 2939.801896][T20897] usb 6-1: config 4 interface 0 has no altsetting 0 [ 2939.848458][T20897] usb 6-1: string descriptor 0 read error: -22 [ 2939.884755][T20897] usb 6-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 2939.926176][T20897] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 2939.978069][T20897] usb 6-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 2940.005770][T20897] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 2940.030411][T20897] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 2940.054964][T20897] usb 6-1: media controller created [ 2940.102053][T20897] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2940.398941][T15897] netlink: 68 bytes leftover after parsing attributes in process `syz.6.11263'. [ 2941.111626][T15930] FAULT_INJECTION: forcing a failure. [ 2941.111626][T15930] name failslab, interval 1, probability 0, space 0, times 0 [ 2941.140728][T15930] CPU: 1 UID: 0 PID: 15930 Comm: syz.0.11269 Tainted: G L syzkaller #0 PREEMPT(full) [ 2941.140752][T15930] Tainted: [L]=SOFTLOCKUP [ 2941.140756][T15930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2941.140763][T15930] Call Trace: [ 2941.140767][T15930] [ 2941.140772][T15930] dump_stack_lvl+0xe8/0x150 [ 2941.140791][T15930] should_fail_ex+0x412/0x560 [ 2941.140810][T15930] should_failslab+0xa8/0x100 [ 2941.140825][T15930] __kmalloc_cache_noprof+0x88/0x660 [ 2941.140837][T15930] ? __sctp_v6_cmp_addr+0x1e6/0x510 [ 2941.140848][T15930] ? sctp_add_bind_addr+0x8c/0x370 [ 2941.140861][T15930] sctp_add_bind_addr+0x8c/0x370 [ 2941.140876][T15930] sctp_copy_local_addr_list+0x314/0x4f0 [ 2941.140894][T15930] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 2941.140909][T15930] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 2941.140923][T15930] ? sctp_association_new+0x1894/0x25e0 [ 2941.140936][T15930] ? sctp_v6_is_any+0x64/0x80 [ 2941.140947][T15930] ? sctp_copy_one_addr+0x93/0x360 [ 2941.140959][T15930] sctp_bind_addr_copy+0xb3/0x3c0 [ 2941.140969][T15930] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 2941.140985][T15930] sctp_connect_new_asoc+0x2ff/0x6b0 [ 2941.141000][T15930] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 2941.141015][T15930] ? __local_bh_enable_ip+0xd0/0x130 [ 2941.141027][T15930] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 2941.141040][T15930] ? security_sctp_bind_connect+0x7e/0x2c0 [ 2941.141055][T15930] sctp_sendmsg+0x1528/0x2c10 [ 2941.141074][T15930] ? __pfx_sctp_sendmsg+0x10/0x10 [ 2941.141087][T15930] ? aa_sk_perm+0x6d5/0x900 [ 2941.141106][T15930] ? __pfx_aa_sk_perm+0x10/0x10 [ 2941.141121][T15930] ? sock_rps_record_flow+0x19/0x400 [ 2941.141134][T15930] ? __pfx_inet_sendmsg+0x10/0x10 [ 2941.141147][T15930] ? inet_sendmsg+0x2f4/0x370 [ 2941.141159][T15930] ? __pfx_inet_sendmsg+0x10/0x10 [ 2941.141171][T15930] __sys_sendto+0x5de/0x710 [ 2941.141185][T15930] ? __pfx___sys_sendto+0x10/0x10 [ 2941.141208][T15930] ? fput+0xa0/0xd0 [ 2941.141222][T15930] ? ksys_write+0x242/0x270 [ 2941.141236][T15930] __ia32_sys_sendto+0xdd/0x100 [ 2941.141249][T15930] __do_fast_syscall_32+0x20d/0x640 [ 2941.141264][T15930] ? do_fast_syscall_32+0x33/0x70 [ 2941.141276][T15930] ? asm_int80_emulation+0x1a/0x20 [ 2941.141286][T15930] ? do_int80_emulation+0x274/0x4d0 [ 2941.141298][T15930] ? trace_irq_disable+0x3b/0x150 [ 2941.141309][T15930] do_fast_syscall_32+0x33/0x70 [ 2941.141322][T15930] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2941.141334][T15930] RIP: 0023:0xf70cef6c [ 2941.141345][T15930] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 2941.141354][T15930] RSP: 002b:00000000f54bd50c EFLAGS: 00000206 ORIG_RAX: 0000000000000171 [ 2941.141366][T15930] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000100 [ 2941.141373][T15930] RDX: 0000000000000001 RSI: 000000002000c851 RDI: 0000000080000140 [ 2941.141379][T15930] RBP: 000000000000001c R08: 0000000000000000 R09: 0000000000000000 [ 2941.141385][T15930] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2941.141391][T15930] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2941.141406][T15930] [ 2941.652397][ T30] audit: type=1804 audit(1775034177.474:3269): pid=15936 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.11270" name="/newroot/249/file1" dev="fuse" ino=1 res=1 errno=0 [ 2942.331761][T11117] usb 6-1: USB disconnect, device number 108 [ 2943.498633][T15998] batadv_slave_1: entered promiscuous mode [ 2943.506367][ T30] audit: type=1326 audit(1775034179.394:3270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15997 comm="syz.8.11284" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f08f6c code=0x0 [ 2943.558099][T15999] batadv_slave_1: left promiscuous mode [ 2947.845641][T16085] batadv_slave_1: entered promiscuous mode [ 2947.871818][ T30] audit: type=1326 audit(1775034183.744:3271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16084 comm="syz.5.11299" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf6fdef6c code=0x0 [ 2947.962446][T16088] batadv_slave_1: left promiscuous mode [ 2948.612349][T11117] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 2948.782619][T11117] usb 4-1: Using ep0 maxpacket: 8 [ 2948.803850][T11117] usb 4-1: unable to get BOS descriptor or descriptor too short [ 2948.830893][T11117] usb 4-1: config 1 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2948.860371][T11117] usb 4-1: config 1 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2948.913441][T11117] usb 4-1: config 1 interface 0 has no altsetting 0 [ 2948.963719][T11117] usb 4-1: New USB device found, idVendor=05ac, idProduct=0254, bcdDevice= 0.40 [ 2948.996944][T11117] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2949.012334][T20897] usb 9-1: new high-speed USB device number 125 using dummy_hcd [ 2949.015215][T11117] usb 4-1: Product: syz [ 2949.035281][T11117] usb 4-1: Manufacturer: syz [ 2949.039993][T11117] usb 4-1: SerialNumber: syz [ 2949.052373][ T3218] usb 6-1: new high-speed USB device number 109 using dummy_hcd [ 2949.207808][T20897] usb 9-1: Using ep0 maxpacket: 8 [ 2949.229372][T20897] usb 9-1: unable to get BOS descriptor or descriptor too short [ 2949.262404][ T3218] usb 6-1: Using ep0 maxpacket: 8 [ 2949.277851][T20897] usb 9-1: config 1 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2949.301959][ T3218] usb 6-1: unable to get BOS descriptor or descriptor too short [ 2949.335916][T20897] usb 9-1: config 1 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2949.366179][ T3218] usb 6-1: config 4 interface 0 has no altsetting 0 [ 2949.398034][T20897] usb 9-1: config 1 interface 0 has no altsetting 0 [ 2949.409912][ T3218] usb 6-1: string descriptor 0 read error: -22 [ 2949.437766][ T3218] usb 6-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 2949.461176][T20897] usb 9-1: New USB device found, idVendor=05ac, idProduct=0254, bcdDevice= 0.40 [ 2949.486173][ T3218] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 2949.505242][T20897] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2949.540303][T20897] usb 9-1: Product: syz [ 2949.563650][ T3218] usb 6-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 2949.573543][T20897] usb 9-1: Manufacturer: syz [ 2949.591457][T20897] usb 9-1: SerialNumber: syz [ 2949.621774][ T3218] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 2949.675735][ T3218] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 2949.710867][ T3218] usb 6-1: media controller created [ 2949.873003][ T3218] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2951.306745][T11117] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input405 [ 2951.350051][ T5182] bcm5974 4-1:1.0: could not read from device [ 2951.359264][ T5182] bcm5974 4-1:1.0: could not read from device [ 2951.382640][T11117] usb 4-1: USB disconnect, device number 68 [ 2951.382865][ T5182] bcm5974 4-1:1.0: could not read from device [ 2951.699818][T20897] input: bcm5974 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/input/input406 [ 2951.743019][ T5182] bcm5974 9-1:1.0: could not read from device [ 2951.779316][T20897] usb 9-1: USB disconnect, device number 125 [ 2951.830161][T11117] usb 6-1: USB disconnect, device number 109 [ 2952.088344][T16229] binder: 16228:16229 ioctl 806c5864 80000240 returned -22 [ 2952.235900][T16237] batadv_slave_1: entered promiscuous mode [ 2952.258594][ T30] audit: type=1326 audit(1775034188.144:3272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16236 comm="syz.5.11316" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf6fdef6c code=0x0 [ 2952.332321][T11117] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 2952.371450][T16240] batadv_slave_1: left promiscuous mode [ 2952.492418][T11117] usb 4-1: Using ep0 maxpacket: 16 [ 2952.510145][T11117] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2952.530536][T11117] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2952.556140][T11117] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2952.582264][T11117] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 2952.607503][T11117] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2952.634359][T11117] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2952.653134][T11117] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2952.671413][T11117] usb 4-1: Manufacturer: syz [ 2952.684375][T11117] usb 4-1: config 0 descriptor?? [ 2953.022252][T11117] rc_core: IR keymap rc-hauppauge not found [ 2953.086433][T11117] Registered IR keymap rc-empty [ 2953.091439][T11117] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2953.167500][T11117] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2953.215484][T11117] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 2953.276858][T11117] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input407 [ 2953.330565][T11117] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2953.372391][T11117] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2953.392382][T11117] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2953.422627][T11117] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2953.444827][T11117] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2953.472318][T11117] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2953.492732][T11117] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2953.522320][T11117] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2953.546086][T11117] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2953.575073][T11117] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2953.610424][T11117] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 2953.620519][T11117] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 2953.638072][T11117] usb 4-1: USB disconnect, device number 69 [ 2953.754263][T16287] FAULT_INJECTION: forcing a failure. [ 2953.754263][T16287] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2953.794099][T16287] CPU: 1 UID: 0 PID: 16287 Comm: syz.8.11321 Tainted: G L syzkaller #0 PREEMPT(full) [ 2953.794128][T16287] Tainted: [L]=SOFTLOCKUP [ 2953.794134][T16287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2953.794141][T16287] Call Trace: [ 2953.794146][T16287] [ 2953.794151][T16287] dump_stack_lvl+0xe8/0x150 [ 2953.794169][T16287] should_fail_ex+0x412/0x560 [ 2953.794187][T16287] _copy_from_iter+0x1d3/0x1670 [ 2953.794200][T16287] ? rcu_is_watching+0x15/0xb0 [ 2953.794218][T16287] ? __pfx__copy_from_iter+0x10/0x10 [ 2953.794232][T16287] ? netlink_sendmsg+0x650/0xb40 [ 2953.794244][T16287] ? skb_put+0x11b/0x210 [ 2953.794262][T16287] netlink_sendmsg+0x6c0/0xb40 [ 2953.794276][T16287] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2953.794288][T16287] ? aa_sock_msg_perm+0xf1/0x1b0 [ 2953.794304][T16287] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2953.794318][T16287] ____sys_sendmsg+0x972/0x9f0 [ 2953.794334][T16287] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2953.794348][T16287] ? kstrtoull+0x12f/0x1d0 [ 2953.794366][T16287] ___sys_sendmsg+0x2a5/0x360 [ 2953.794381][T16287] ? __pfx____sys_sendmsg+0x10/0x10 [ 2953.794394][T16287] ? get_pid_task+0x20/0x1f0 [ 2953.794403][T16287] ? get_pid_task+0x20/0x1f0 [ 2953.794411][T16287] ? get_pid_task+0x20/0x1f0 [ 2953.794432][T16287] ? __fget_files+0x2a/0x420 [ 2953.794441][T16287] ? __fget_files+0x3a0/0x420 [ 2953.794454][T16287] __sys_sendmsg+0x183/0x260 [ 2953.794468][T16287] ? __pfx___sys_sendmsg+0x10/0x10 [ 2953.794489][T16287] __do_fast_syscall_32+0x20d/0x640 [ 2953.794509][T16287] ? do_fast_syscall_32+0x33/0x70 [ 2953.794521][T16287] ? asm_int80_emulation+0x1a/0x20 [ 2953.794531][T16287] ? do_int80_emulation+0x274/0x4d0 [ 2953.794543][T16287] ? trace_irq_disable+0x3b/0x150 [ 2953.794554][T16287] do_fast_syscall_32+0x33/0x70 [ 2953.794567][T16287] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2953.794579][T16287] RIP: 0023:0xf7f08f6c [ 2953.794589][T16287] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 2953.794597][T16287] RSP: 002b:00000000f53c650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 2953.794609][T16287] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000080000040 [ 2953.794616][T16287] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2953.794622][T16287] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2953.794628][T16287] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2953.794634][T16287] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2953.794647][T16287] [ 2954.329923][T16293] fuse: Bad value for 'fd' [ 2954.492438][ T3218] usb 9-1: new high-speed USB device number 126 using dummy_hcd [ 2954.686505][ T3218] usb 9-1: Using ep0 maxpacket: 8 [ 2954.703500][ T3218] usb 9-1: unable to get BOS descriptor or descriptor too short [ 2954.712716][ T3218] usb 9-1: config 4 interface 0 has no altsetting 0 [ 2954.734312][ T3218] usb 9-1: string descriptor 0 read error: -22 [ 2954.740544][ T3218] usb 9-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 2954.772213][ T3218] usb 9-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 2954.782500][T11117] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 2954.798337][ T3218] usb 9-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 2954.824169][ T3218] usb 9-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 2954.845961][ T3218] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 2954.862242][ T3218] usb 9-1: media controller created [ 2954.884171][ T3218] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2954.942398][T11117] usb 4-1: Using ep0 maxpacket: 8 [ 2954.949532][T11117] usb 4-1: config 1 interface 0 altsetting 128 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 2954.963142][T11117] usb 4-1: config 1 interface 0 has no altsetting 0 [ 2954.971032][T11117] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2954.980621][T11117] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 2954.988914][T11117] usb 4-1: SerialNumber: syz [ 2955.004436][T11117] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 2955.213252][T11117] usb 4-1: USB disconnect, device number 70 [ 2956.151518][T16359] batadv_slave_1: entered promiscuous mode [ 2956.174620][ T30] audit: type=1326 audit(1775034192.064:3273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16358 comm="syz.0.11330" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70cef6c code=0x0 [ 2956.276093][T16360] batadv_slave_1: left promiscuous mode [ 2957.092850][T16382] fuse: Bad value for 'fd' [ 2957.184222][ T3218] usb 9-1: USB disconnect, device number 126 [ 2958.372296][T11117] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 2958.514464][T16428] netlink: 'syz.0.11338': attribute type 5 has an invalid length. [ 2958.525700][T16428] dlm: non-version read from control device 0 [ 2958.542341][T11117] usb 4-1: Using ep0 maxpacket: 8 [ 2958.556199][T11117] usb 4-1: unable to get BOS descriptor or descriptor too short [ 2958.580094][T11117] usb 4-1: config 1 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2958.611467][T11117] usb 4-1: config 1 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2958.647864][T11117] usb 4-1: config 1 interface 0 has no altsetting 0 [ 2958.676691][T11117] usb 4-1: New USB device found, idVendor=05ac, idProduct=0254, bcdDevice= 0.40 [ 2958.702244][T11117] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2958.728230][T11117] usb 4-1: Product: syz [ 2958.747074][T11117] usb 4-1: Manufacturer: syz [ 2958.758080][T11117] usb 4-1: SerialNumber: syz [ 2958.938892][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 2958.945341][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 2959.349972][T16435] FAULT_INJECTION: forcing a failure. [ 2959.349972][T16435] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2959.406081][T16435] CPU: 1 UID: 0 PID: 16435 Comm: syz.5.11339 Tainted: G L syzkaller #0 PREEMPT(full) [ 2959.406111][T16435] Tainted: [L]=SOFTLOCKUP [ 2959.406118][T16435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2959.406132][T16435] Call Trace: [ 2959.406140][T16435] [ 2959.406148][T16435] dump_stack_lvl+0xe8/0x150 [ 2959.406179][T16435] should_fail_ex+0x412/0x560 [ 2959.406211][T16435] _copy_from_iter+0x1d3/0x1670 [ 2959.406234][T16435] ? rcu_is_watching+0x15/0xb0 [ 2959.406265][T16435] ? __pfx__copy_from_iter+0x10/0x10 [ 2959.406291][T16435] ? netlink_sendmsg+0x650/0xb40 [ 2959.406309][T16435] ? skb_put+0x11b/0x210 [ 2959.406333][T16435] netlink_sendmsg+0x6c0/0xb40 [ 2959.406360][T16435] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2959.406383][T16435] ? aa_sock_msg_perm+0xf1/0x1b0 [ 2959.406411][T16435] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2959.406435][T16435] ____sys_sendmsg+0x972/0x9f0 [ 2959.406465][T16435] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2959.406492][T16435] ? kstrtoull+0x12f/0x1d0 [ 2959.406524][T16435] ___sys_sendmsg+0x2a5/0x360 [ 2959.406552][T16435] ? __pfx____sys_sendmsg+0x10/0x10 [ 2959.406577][T16435] ? get_pid_task+0x20/0x1f0 [ 2959.406594][T16435] ? get_pid_task+0x20/0x1f0 [ 2959.406609][T16435] ? get_pid_task+0x20/0x1f0 [ 2959.406649][T16435] ? __fget_files+0x2a/0x420 [ 2959.406665][T16435] ? __fget_files+0x3a0/0x420 [ 2959.406690][T16435] __sys_sendmsg+0x183/0x260 [ 2959.406715][T16435] ? __pfx___sys_sendmsg+0x10/0x10 [ 2959.406756][T16435] __do_fast_syscall_32+0x20d/0x640 [ 2959.406783][T16435] ? do_fast_syscall_32+0x33/0x70 [ 2959.406804][T16435] ? asm_int80_emulation+0x1a/0x20 [ 2959.406821][T16435] ? do_int80_emulation+0x274/0x4d0 [ 2959.406847][T16435] do_fast_syscall_32+0x33/0x70 [ 2959.406871][T16435] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2959.406892][T16435] RIP: 0023:0xf6fdef6c [ 2959.406908][T16435] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 2959.406924][T16435] RSP: 002b:00000000f53cd50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 2959.406943][T16435] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0 [ 2959.406956][T16435] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000000 [ 2959.406967][T16435] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2959.406978][T16435] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2959.406988][T16435] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2959.407013][T16435] [ 2960.300592][T16442] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11340'. [ 2960.374531][T16445] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11340'. [ 2961.122544][T20881] IPVS: starting estimator thread 0... [ 2961.213050][T16455] IPVS: using max 55 ests per chain, 132000 per kthread [ 2961.763723][T11117] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input408 [ 2961.801106][ T5182] bcm5974 4-1:1.0: could not read from device [ 2961.832016][T16476] batadv_slave_1: entered promiscuous mode [ 2961.848446][ T5182] bcm5974 4-1:1.0: could not read from device [ 2961.854944][T16471] batadv_slave_1: left promiscuous mode [ 2961.876091][T11117] usb 4-1: USB disconnect, device number 71 [ 2962.112820][T16501] fuse: Bad value for 'fd' [ 2962.292260][T11117] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 2962.448328][T16521] netlink: 28 bytes leftover after parsing attributes in process `syz.6.11351'. [ 2962.462407][T11117] usb 4-1: Using ep0 maxpacket: 8 [ 2962.473885][T11117] usb 4-1: unable to get BOS descriptor or descriptor too short [ 2962.486372][T11117] usb 4-1: config 4 interface 0 has no altsetting 0 [ 2962.496780][T11117] usb 4-1: string descriptor 0 read error: -22 [ 2962.508866][T11117] usb 4-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 2962.522235][T11117] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 2962.539461][T11117] usb 4-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 2962.551439][T11117] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 2962.562996][T11117] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 2962.570228][T11117] usb 4-1: media controller created [ 2962.599692][T11117] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2963.762272][T11117] usb 9-1: new high-speed USB device number 127 using dummy_hcd [ 2963.932287][T11117] usb 9-1: Using ep0 maxpacket: 8 [ 2963.968496][T11117] usb 9-1: unable to get BOS descriptor or descriptor too short [ 2964.013842][T11117] usb 9-1: config 1 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2964.068800][T11117] usb 9-1: config 1 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2964.149263][T11117] usb 9-1: config 1 interface 0 has no altsetting 0 [ 2964.209391][T11117] usb 9-1: New USB device found, idVendor=05ac, idProduct=0254, bcdDevice= 0.40 [ 2964.268857][T11117] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2964.328511][T11117] usb 9-1: Product: syz [ 2964.382252][T11117] usb 9-1: Manufacturer: syz [ 2964.418530][T11117] usb 9-1: SerialNumber: syz [ 2964.867735][T20897] usb 4-1: USB disconnect, device number 72 [ 2965.452646][T20897] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 2965.573873][T16601] batadv_slave_1: entered promiscuous mode [ 2965.581499][T16600] batadv_slave_1: left promiscuous mode [ 2965.615876][T20897] usb 4-1: Using ep0 maxpacket: 32 [ 2965.625767][T20897] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2965.638854][T20897] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2965.648973][T20897] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 2965.664013][T20897] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2965.706189][T20897] usb 4-1: config 0 descriptor?? [ 2966.167752][T20897] savu 0003:1E7D:2D5A.0095: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0 [ 2966.304586][T16622] netlink: 64691 bytes leftover after parsing attributes in process `syz.0.11362'. [ 2966.370189][T16622] syzkaller1: entered promiscuous mode [ 2966.390557][T16622] syzkaller1: entered allmulticast mode [ 2966.413732][T16595] FAULT_INJECTION: forcing a failure. [ 2966.413732][T16595] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2966.455135][T16595] CPU: 0 UID: 0 PID: 16595 Comm: syz.3.11358 Tainted: G L syzkaller #0 PREEMPT(full) [ 2966.455162][T16595] Tainted: [L]=SOFTLOCKUP [ 2966.455169][T16595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2966.455179][T16595] Call Trace: [ 2966.455186][T16595] [ 2966.455194][T16595] dump_stack_lvl+0xe8/0x150 [ 2966.455223][T16595] should_fail_ex+0x412/0x560 [ 2966.455255][T16595] strncpy_from_user+0x36/0x2b0 [ 2966.455285][T16595] do_getname+0x77/0x250 [ 2966.455312][T16595] path_listxattrat+0xd9/0x3f0 [ 2966.455343][T16595] ? ksys_write+0x242/0x270 [ 2966.455364][T16595] ? __pfx_path_listxattrat+0x10/0x10 [ 2966.455394][T16595] __do_fast_syscall_32+0x20d/0x640 [ 2966.455420][T16595] ? do_fast_syscall_32+0x33/0x70 [ 2966.455443][T16595] ? asm_int80_emulation+0x1a/0x20 [ 2966.455459][T16595] ? do_int80_emulation+0x274/0x4d0 [ 2966.455481][T16595] ? trace_irq_disable+0x3b/0x150 [ 2966.455502][T16595] do_fast_syscall_32+0x33/0x70 [ 2966.455526][T16595] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2966.455547][T16595] RIP: 0023:0xf709ef6c [ 2966.455563][T16595] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 2966.455578][T16595] RSP: 002b:00000000f548d50c EFLAGS: 00000206 ORIG_RAX: 00000000000000e9 [ 2966.455597][T16595] RAX: ffffffffffffffda RBX: 0000000080000100 RCX: 0000000000000000 [ 2966.455609][T16595] RDX: 000000000000008c RSI: 0000000000000000 RDI: 0000000000000000 [ 2966.455620][T16595] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2966.455630][T16595] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2966.455642][T16595] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2966.455668][T16595] [ 2966.925830][T11117] input: bcm5974 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/input/input409 [ 2966.941344][T11117] usb 9-1: USB disconnect, device number 127 [ 2966.943020][ T5182] bcm5974 9-1:1.0: could not read from device [ 2967.061509][T20881] usb 4-1: USB disconnect, device number 73 [ 2967.567389][T16697] batadv_slave_1: entered promiscuous mode [ 2967.596940][T16696] batadv_slave_1: left promiscuous mode [ 2967.742257][T20881] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 2967.902577][T20881] usb 9-1: device descriptor read/64, error -71 [ 2968.152396][T20881] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 2968.316498][T20881] usb 9-1: device descriptor read/64, error -71 [ 2968.443332][T20881] usb usb9-port1: attempt power cycle [ 2968.792318][T20881] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 2968.832670][T20881] usb 9-1: device descriptor read/8, error -71 [ 2968.954494][T20897] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 2969.072257][T20881] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 2969.096224][T20881] usb 9-1: device descriptor read/8, error -71 [ 2969.142230][T20897] usb 4-1: Using ep0 maxpacket: 8 [ 2969.166334][T20897] usb 4-1: unable to get BOS descriptor or descriptor too short [ 2969.196043][T20897] usb 4-1: config 1 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2969.214876][T20881] usb usb9-port1: unable to enumerate USB device [ 2969.241847][T20897] usb 4-1: config 1 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2969.284256][T20897] usb 4-1: config 1 interface 0 has no altsetting 0 [ 2969.329044][T20897] usb 4-1: New USB device found, idVendor=05ac, idProduct=0254, bcdDevice= 0.40 [ 2969.364351][T20897] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2969.392387][T20897] usb 4-1: Product: syz [ 2969.399569][T20897] usb 4-1: Manufacturer: syz [ 2969.422957][T20897] usb 4-1: SerialNumber: syz [ 2970.991287][T16765] batadv_slave_1: entered promiscuous mode [ 2970.999094][T16764] batadv_slave_1: left promiscuous mode [ 2971.042457][T20881] usb 6-1: new high-speed USB device number 110 using dummy_hcd [ 2971.222902][T20881] usb 6-1: Using ep0 maxpacket: 32 [ 2971.231241][T20881] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2971.243823][T20881] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2971.255620][T20881] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 2971.266349][T20881] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2971.280243][T20881] usb 6-1: config 0 descriptor?? [ 2971.721778][T20881] savu 0003:1E7D:2D5A.0096: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.5-1/input0 [ 2971.756979][T16775] delete_channel: no stack [ 2971.987762][T16794] binder: 16789:16794 ioctl 4018620d 0 returned -22 [ 2972.455942][T20897] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input410 [ 2972.482407][ T5182] bcm5974 4-1:1.0: could not read from device [ 2972.553091][ T5182] bcm5974 4-1:1.0: could not read from device [ 2972.567105][T20897] usb 4-1: USB disconnect, device number 74 [ 2972.795819][ T5182] bcm5974 4-1:1.0: could not read from device [ 2973.332871][T20897] usb 6-1: reset high-speed USB device number 110 using dummy_hcd [ 2974.106580][T16889] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11395'. [ 2974.613100][T20897] usb 6-1: device descriptor read/64, error -71 [ 2974.865292][T20897] usb 6-1: reset high-speed USB device number 110 using dummy_hcd [ 2974.901813][T20897] usb 6-1: device reset changed ep0 maxpacket size! [ 2974.930686][ T3218] usb 6-1: USB disconnect, device number 110 [ 2975.112256][ T3218] usb 6-1: new high-speed USB device number 111 using dummy_hcd [ 2975.285546][ T3218] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2975.307603][ T3218] usb 6-1: New USB device found, idVendor=0cf3, idProduct=1002, bcdDevice=4f.2c [ 2975.340915][ T3218] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2975.367573][ T3218] usb 6-1: config 0 descriptor?? [ 2975.506051][T16931] netlink: 68 bytes leftover after parsing attributes in process `syz.8.11401'. [ 2975.584046][ T3218] usb 6-1: string descriptor 0 read error: -71 [ 2976.222265][ T3218] usb 6-1: reset high-speed USB device number 111 using dummy_hcd [ 2976.649303][ T3218] usb 6-1: USB disconnect, device number 111 [ 2976.695227][T16965] batadv_slave_1: entered promiscuous mode [ 2976.712859][T16964] batadv_slave_1: left promiscuous mode [ 2977.242935][T16987] FAULT_INJECTION: forcing a failure. [ 2977.242935][T16987] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2977.264737][T16987] CPU: 1 UID: 0 PID: 16987 Comm: syz.5.11410 Tainted: G L syzkaller #0 PREEMPT(full) [ 2977.264765][T16987] Tainted: [L]=SOFTLOCKUP [ 2977.264772][T16987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2977.264783][T16987] Call Trace: [ 2977.264791][T16987] [ 2977.264799][T16987] dump_stack_lvl+0xe8/0x150 [ 2977.264829][T16987] should_fail_ex+0x412/0x560 [ 2977.264862][T16987] _copy_from_iter+0x1d3/0x1670 [ 2977.264894][T16987] ? __pfx__copy_from_iter+0x10/0x10 [ 2977.264914][T16987] ? alloc_pages_noprof+0xbd/0x1a0 [ 2977.264940][T16987] ? skb_page_frag_refill+0x199/0x310 [ 2977.264973][T16987] kcm_sendmsg+0xe0c/0x2b60 [ 2977.265034][T16987] ? __pfx_kcm_sendmsg+0x10/0x10 [ 2977.265059][T16987] ? __import_iovec+0x5d4/0x7e0 [ 2977.265081][T16987] ? aa_sock_msg_perm+0xf1/0x1b0 [ 2977.265110][T16987] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2977.265135][T16987] ____sys_sendmsg+0x972/0x9f0 [ 2977.265167][T16987] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2977.265194][T16987] ? kstrtoull+0x12f/0x1d0 [ 2977.265228][T16987] ___sys_sendmsg+0x2a5/0x360 [ 2977.265262][T16987] ? __pfx____sys_sendmsg+0x10/0x10 [ 2977.265288][T16987] ? get_pid_task+0x20/0x1f0 [ 2977.265305][T16987] ? get_pid_task+0x20/0x1f0 [ 2977.265320][T16987] ? get_pid_task+0x20/0x1f0 [ 2977.265363][T16987] ? __fget_files+0x2a/0x420 [ 2977.265379][T16987] ? __fget_files+0x3a0/0x420 [ 2977.265406][T16987] __sys_sendmsg+0x183/0x260 [ 2977.265431][T16987] ? __pfx___sys_sendmsg+0x10/0x10 [ 2977.265475][T16987] __do_fast_syscall_32+0x20d/0x640 [ 2977.265502][T16987] ? do_fast_syscall_32+0x33/0x70 [ 2977.265524][T16987] ? asm_int80_emulation+0x1a/0x20 [ 2977.265541][T16987] ? do_int80_emulation+0x274/0x4d0 [ 2977.265564][T16987] ? trace_irq_disable+0x3b/0x150 [ 2977.265584][T16987] do_fast_syscall_32+0x33/0x70 [ 2977.265609][T16987] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2977.265630][T16987] RIP: 0023:0xf6fdef6c [ 2977.265647][T16987] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 2977.265662][T16987] RSP: 002b:00000000f53cd50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 2977.265681][T16987] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080002080 [ 2977.265697][T16987] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2977.265708][T16987] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2977.265718][T16987] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2977.265730][T16987] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2977.265757][T16987] [ 2978.422493][T11117] usb 6-1: new high-speed USB device number 112 using dummy_hcd [ 2978.598642][T11117] usb 6-1: Using ep0 maxpacket: 8 [ 2978.615371][T11117] usb 6-1: unable to get BOS descriptor or descriptor too short [ 2978.634526][T11117] usb 6-1: config 4 interface 0 has no altsetting 0 [ 2978.648608][T11117] usb 6-1: string descriptor 0 read error: -22 [ 2978.662105][T11117] usb 6-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 2978.682624][T11117] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 2978.714813][T11117] usb 6-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 2978.753777][T11117] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 2978.765088][T11117] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 2978.780945][T11117] usb 6-1: media controller created [ 2978.799276][T11117] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2978.831707][T17035] batadv_slave_1: entered promiscuous mode [ 2978.839467][T17034] batadv_slave_1: left promiscuous mode [ 2979.182274][T17057] netlink: 'syz.3.11420': attribute type 2 has an invalid length. [ 2979.732300][T11117] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 2979.909196][T11117] usb 9-1: Using ep0 maxpacket: 8 [ 2979.937725][T11117] usb 9-1: unable to get BOS descriptor or descriptor too short [ 2979.957836][T11117] usb 9-1: config 1 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2979.996523][T11117] usb 9-1: config 1 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2980.043974][T11117] usb 9-1: config 1 interface 0 has no altsetting 0 [ 2980.067331][T11117] usb 9-1: New USB device found, idVendor=05ac, idProduct=0254, bcdDevice= 0.40 [ 2980.102297][T11117] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2980.111303][T11117] usb 9-1: Product: syz [ 2980.127387][T11117] usb 9-1: Manufacturer: syz [ 2980.142276][ T3218] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 2980.158044][T11117] usb 9-1: SerialNumber: syz [ 2980.312695][ T3218] usb 4-1: Using ep0 maxpacket: 32 [ 2980.330020][ T3218] usb 4-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 2980.349583][ T3218] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2980.365379][ T3218] usb 4-1: Product: syz [ 2980.375119][ T3218] usb 4-1: Manufacturer: syz [ 2980.395740][ T3218] usb 4-1: SerialNumber: syz [ 2980.403302][ T3218] usb 4-1: config 0 descriptor?? [ 2980.406140][ T3218] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 2981.221500][T20881] usb 6-1: USB disconnect, device number 112 [ 2981.672366][T20881] usb 6-1: new high-speed USB device number 113 using dummy_hcd [ 2981.834341][T20881] usb 6-1: Using ep0 maxpacket: 32 [ 2981.868156][T20881] usb 6-1: config 0 has an invalid interface number: 89 but max is 0 [ 2981.906885][T20881] usb 6-1: config 0 has no interface number 0 [ 2981.924280][T20881] usb 6-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2981.947522][T20881] usb 6-1: config 0 interface 89 has no altsetting 0 [ 2981.967968][T20881] usb 6-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 2981.990476][T20881] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2982.011183][T20881] usb 6-1: Product: syz [ 2982.027221][T20881] usb 6-1: Manufacturer: syz [ 2982.049413][T20881] usb 6-1: SerialNumber: syz [ 2982.060465][T20881] usb 6-1: config 0 descriptor?? [ 2982.087589][T20881] em28xx 6-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 2982.108302][T20881] em28xx 6-1:0.89: Video interface 89 found: [ 2982.223737][T17119] batadv_slave_1: entered promiscuous mode [ 2982.234338][T17118] batadv_slave_1: left promiscuous mode [ 2982.472587][T17126] FAULT_INJECTION: forcing a failure. [ 2982.472587][T17126] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2982.508766][T17126] CPU: 0 UID: 0 PID: 17126 Comm: syz.6.11432 Tainted: G L syzkaller #0 PREEMPT(full) [ 2982.508794][T17126] Tainted: [L]=SOFTLOCKUP [ 2982.508801][T17126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2982.508812][T17126] Call Trace: [ 2982.508820][T17126] [ 2982.508827][T17126] dump_stack_lvl+0xe8/0x150 [ 2982.508860][T17126] should_fail_ex+0x412/0x560 [ 2982.508891][T17126] _copy_from_iter+0x1d3/0x1670 [ 2982.508915][T17126] ? rcu_is_watching+0x15/0xb0 [ 2982.508945][T17126] ? __pfx__copy_from_iter+0x10/0x10 [ 2982.508971][T17126] ? netlink_sendmsg+0x650/0xb40 [ 2982.508990][T17126] ? skb_put+0x11b/0x210 [ 2982.509015][T17126] netlink_sendmsg+0x6c0/0xb40 [ 2982.509042][T17126] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2982.509065][T17126] ? aa_sock_msg_perm+0xf1/0x1b0 [ 2982.509093][T17126] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2982.509117][T17126] ____sys_sendmsg+0x972/0x9f0 [ 2982.509148][T17126] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2982.509175][T17126] ? kstrtoull+0x12f/0x1d0 [ 2982.509207][T17126] ___sys_sendmsg+0x2a5/0x360 [ 2982.509234][T17126] ? __pfx____sys_sendmsg+0x10/0x10 [ 2982.509259][T17126] ? get_pid_task+0x20/0x1f0 [ 2982.509276][T17126] ? get_pid_task+0x20/0x1f0 [ 2982.509291][T17126] ? get_pid_task+0x20/0x1f0 [ 2982.509332][T17126] ? __fget_files+0x2a/0x420 [ 2982.509348][T17126] ? __fget_files+0x3a0/0x420 [ 2982.509373][T17126] __sys_sendmsg+0x183/0x260 [ 2982.509399][T17126] ? __pfx___sys_sendmsg+0x10/0x10 [ 2982.509441][T17126] __do_fast_syscall_32+0x20d/0x640 [ 2982.509468][T17126] ? do_fast_syscall_32+0x33/0x70 [ 2982.509490][T17126] ? asm_int80_emulation+0x1a/0x20 [ 2982.509508][T17126] ? do_int80_emulation+0x274/0x4d0 [ 2982.509530][T17126] ? trace_irq_disable+0x3b/0x150 [ 2982.509551][T17126] do_fast_syscall_32+0x33/0x70 [ 2982.509575][T17126] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2982.509595][T17126] RIP: 0023:0xf701ef6c [ 2982.509611][T17126] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 2982.509625][T17126] RSP: 002b:00000000f540d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 2982.509644][T17126] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000280 [ 2982.509657][T17126] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2982.509668][T17126] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2982.509678][T17126] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2982.509689][T17126] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2982.509715][T17126] [ 2983.042288][ T3218] gspca_ov534_9: sccb_write failed [ 2983.082958][ T3218] gspca_ov534_9: reg_w failed -71 [ 2983.090111][T20881] em28xx 6-1:0.89: unknown em28xx chip ID (0) [ 2983.274978][T11117] input: bcm5974 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/input/input411 [ 2983.310702][ T5182] bcm5974 9-1:1.0: could not read from device [ 2983.321625][ T5182] bcm5974 9-1:1.0: could not read from device [ 2983.332648][ T3218] gspca_ov534_9: Unknown sensor 0000 [ 2983.332730][ T3218] ov534_9 4-1:0.0: probe with driver ov534_9 failed with error -22 [ 2983.358769][T11117] usb 9-1: USB disconnect, device number 6 [ 2983.373055][ T5182] bcm5974 9-1:1.0: could not read from device [ 2983.384851][ T3218] usb 4-1: USB disconnect, device number 75 [ 2983.406452][ T5182] bcm5974 9-1:1.0: could not read from device [ 2983.707190][T20881] em28xx 6-1:0.89: read from i2c device at 0xa0 failed with unknown error (status=64) [ 2983.730869][T20881] em28xx 6-1:0.89: board has no eeprom [ 2983.736853][T11117] usb 9-1: new low-speed USB device number 7 using dummy_hcd [ 2983.903386][T11117] usb 9-1: Invalid ep0 maxpacket: 64 [ 2983.952442][ T5954] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 2983.992279][T20881] em28xx 6-1:0.89: Identified as Terratec Grabby (card=67) [ 2983.999675][T20881] em28xx 6-1:0.89: analog set to bulk mode. [ 2984.006249][ T908] em28xx 6-1:0.89: Registering V4L2 extension [ 2984.017830][T20881] usb 6-1: USB disconnect, device number 113 [ 2984.026063][T20881] em28xx 6-1:0.89: Disconnecting em28xx [ 2984.042285][T11117] usb 9-1: new low-speed USB device number 8 using dummy_hcd [ 2984.081226][ T908] em28xx 6-1:0.89: Config register raw data: 0xffffffed [ 2984.088421][ T908] em28xx 6-1:0.89: AC97 chip type couldn't be determined [ 2984.096204][ T908] em28xx 6-1:0.89: No AC97 audio processor [ 2984.107209][ T908] usb 6-1: Decoder not found [ 2984.111914][ T908] em28xx 6-1:0.89: failed to create media graph [ 2984.118415][ T5954] usb 4-1: Using ep0 maxpacket: 8 [ 2984.124581][ T908] em28xx 6-1:0.89: V4L2 device video103 deregistered [ 2984.133990][ T5954] usb 4-1: unable to get BOS descriptor or descriptor too short [ 2984.144996][ T908] em28xx 6-1:0.89: Registering snapshot button... [ 2984.151580][ T5954] usb 4-1: config 4 interface 0 has no altsetting 0 [ 2984.164756][ T908] input: em28xx snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.89/input/input412 [ 2984.177818][ T5954] usb 4-1: string descriptor 0 read error: -22 [ 2984.185655][ T5954] usb 4-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 2984.200372][ T908] em28xx 6-1:0.89: Remote control support is not available for this card. [ 2984.209257][T11117] usb 9-1: Invalid ep0 maxpacket: 64 [ 2984.215119][T11117] usb usb9-port1: attempt power cycle [ 2984.220697][ T5954] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 2984.229879][T20881] em28xx 6-1:0.89: Closing input extension [ 2984.238773][T20881] em28xx 6-1:0.89: Deregistering snapshot button [ 2984.251671][ T5954] usb 4-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 2984.275215][ T5954] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 2984.293990][T20881] em28xx 6-1:0.89: Freeing device [ 2984.301918][ T5954] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 2984.311841][ T5954] usb 4-1: media controller created [ 2984.330110][ T5954] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2984.562301][T11117] usb 9-1: new low-speed USB device number 9 using dummy_hcd [ 2984.603156][T11117] usb 9-1: Invalid ep0 maxpacket: 64 [ 2984.742287][T11117] usb 9-1: new low-speed USB device number 10 using dummy_hcd [ 2984.774451][T11117] usb 9-1: Invalid ep0 maxpacket: 64 [ 2984.786858][T11117] usb usb9-port1: unable to enumerate USB device [ 2985.364100][T17222] batadv_slave_1: entered promiscuous mode [ 2985.370898][T17221] batadv_slave_1: left promiscuous mode [ 2985.808342][T17235] veth1_to_hsr: entered promiscuous mode [ 2985.820602][T17235] macvtap2: entered promiscuous mode [ 2985.835495][T17235] macvtap2: entered allmulticast mode [ 2985.840866][T17235] veth1_to_hsr: entered allmulticast mode [ 2986.761855][ T798] usb 4-1: USB disconnect, device number 76 [ 2989.342368][T11117] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 2989.537300][ T798] usb 6-1: new low-speed USB device number 114 using dummy_hcd [ 2989.542308][T11117] usb 9-1: Using ep0 maxpacket: 8 [ 2989.594797][T11117] usb 9-1: unable to get BOS descriptor or descriptor too short [ 2989.742967][ T798] usb 6-1: Invalid ep0 maxpacket: 64 [ 2989.816880][T11117] usb 9-1: config 4 interface 0 has no altsetting 0 [ 2989.902524][ T798] usb 6-1: new low-speed USB device number 115 using dummy_hcd [ 2989.935159][T11117] usb 9-1: string descriptor 0 read error: -22 [ 2989.941435][T11117] usb 9-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 2990.014157][T17367] Cannot find add_set index 0 as target [ 2990.081209][T11117] usb 9-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 2990.101448][ T798] usb 6-1: Invalid ep0 maxpacket: 64 [ 2990.118425][ T798] usb usb6-port1: attempt power cycle [ 2990.192779][T11117] usb 9-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 2990.249060][T11117] usb 9-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 2990.279974][T11117] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 2990.287666][T11117] usb 9-1: media controller created [ 2990.310973][T11117] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2990.472227][ T798] usb 6-1: new low-speed USB device number 116 using dummy_hcd [ 2990.532546][ T798] usb 6-1: Invalid ep0 maxpacket: 64 [ 2990.694286][ T798] usb 6-1: new low-speed USB device number 117 using dummy_hcd [ 2990.746367][ T798] usb 6-1: Invalid ep0 maxpacket: 64 [ 2990.775292][ T798] usb usb6-port1: unable to enumerate USB device [ 2990.930481][T17399] FAULT_INJECTION: forcing a failure. [ 2990.930481][T17399] name failslab, interval 1, probability 0, space 0, times 0 [ 2990.943814][T17399] CPU: 1 UID: 0 PID: 17399 Comm: syz.6.11470 Tainted: G L syzkaller #0 PREEMPT(full) [ 2990.943843][T17399] Tainted: [L]=SOFTLOCKUP [ 2990.943850][T17399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2990.943862][T17399] Call Trace: [ 2990.943870][T17399] [ 2990.943878][T17399] dump_stack_lvl+0xe8/0x150 [ 2990.943909][T17399] should_fail_ex+0x412/0x560 [ 2990.943940][T17399] should_failslab+0xa8/0x100 [ 2990.943972][T17399] __kmalloc_noprof+0xe8/0x760 [ 2990.943993][T17399] ? alloc_pipe_info+0x1fc/0x4d0 [ 2990.944014][T17399] ? __kmalloc_cache_noprof+0x15b/0x660 [ 2990.944038][T17399] alloc_pipe_info+0x1fc/0x4d0 [ 2990.944062][T17399] splice_direct_to_actor+0xa08/0xc70 [ 2990.944099][T17399] ? __pfx_direct_splice_actor+0x10/0x10 [ 2990.944124][T17399] ? get_pid_task+0x20/0x1f0 [ 2990.944144][T17399] ? __pfx_aa_file_perm+0x10/0x10 [ 2990.944165][T17399] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 2990.944201][T17399] do_splice_direct+0x195/0x290 [ 2990.944230][T17399] ? __pfx_do_splice_direct+0x10/0x10 [ 2990.944257][T17399] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 2990.944277][T17399] ? bpf_lsm_file_permission+0x9/0x20 [ 2990.944298][T17399] ? security_file_permission+0x75/0x260 [ 2990.944321][T17399] ? rw_verify_area+0x255/0x4d0 [ 2990.944343][T17399] do_sendfile+0x535/0x7d0 [ 2990.944375][T17399] ? __pfx_do_sendfile+0x10/0x10 [ 2990.944404][T17399] ? __ia32_compat_sys_sendfile+0x180/0x1d0 [ 2990.944432][T17399] __do_fast_syscall_32+0x20d/0x640 [ 2990.944459][T17399] ? do_fast_syscall_32+0x33/0x70 [ 2990.944481][T17399] ? asm_int80_emulation+0x1a/0x20 [ 2990.944498][T17399] ? do_int80_emulation+0x274/0x4d0 [ 2990.944521][T17399] ? trace_irq_disable+0x3b/0x150 [ 2990.944540][T17399] do_fast_syscall_32+0x33/0x70 [ 2990.944565][T17399] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2990.944586][T17399] RIP: 0023:0xf701ef6c [ 2990.944603][T17399] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 2990.944618][T17399] RSP: 002b:00000000f540d50c EFLAGS: 00000206 ORIG_RAX: 00000000000000bb [ 2990.944638][T17399] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000000005 [ 2990.944651][T17399] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000000 [ 2990.944662][T17399] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2990.944672][T17399] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2990.944683][T17399] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2990.944708][T17399] [ 2992.137667][T11117] usb 9-1: USB disconnect, device number 11 [ 2992.338666][T17448] FAULT_INJECTION: forcing a failure. [ 2992.338666][T17448] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2992.353505][T17448] CPU: 1 UID: 0 PID: 17448 Comm: syz.8.11479 Tainted: G L syzkaller #0 PREEMPT(full) [ 2992.353523][T17448] Tainted: [L]=SOFTLOCKUP [ 2992.353527][T17448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2992.353533][T17448] Call Trace: [ 2992.353538][T17448] [ 2992.353543][T17448] dump_stack_lvl+0xe8/0x150 [ 2992.353562][T17448] should_fail_ex+0x412/0x560 [ 2992.353584][T17448] _copy_from_user+0x2d/0xb0 [ 2992.353600][T17448] __se_sys_io_uring_register+0x1a6/0x19a0 [ 2992.353616][T17448] ? __fget_files+0x3a0/0x420 [ 2992.353627][T17448] ? __pfx___se_sys_io_uring_register+0x10/0x10 [ 2992.353648][T17448] ? __secure_computing+0xe1/0x2a0 [ 2992.353661][T17448] __do_fast_syscall_32+0x20d/0x640 [ 2992.353676][T17448] ? do_fast_syscall_32+0x33/0x70 [ 2992.353688][T17448] ? asm_int80_emulation+0x1a/0x20 [ 2992.353697][T17448] ? do_int80_emulation+0x274/0x4d0 [ 2992.353712][T17448] do_fast_syscall_32+0x33/0x70 [ 2992.353725][T17448] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2992.353736][T17448] RIP: 0023:0xf7f08f6c [ 2992.353746][T17448] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 2992.353755][T17448] RSP: 002b:00000000f53c650c EFLAGS: 00000206 ORIG_RAX: 00000000000001ab [ 2992.353767][T17448] RAX: ffffffffffffffda RBX: 00000000ffffffff RCX: 000000000000001f [ 2992.353774][T17448] RDX: 0000000080000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 2992.353780][T17448] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2992.353786][T17448] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2992.353792][T17448] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2992.353806][T17448] [ 2992.811963][T17463] openvswitch: netlink: IP tunnel dst address not specified [ 2992.905820][T17463] syzkaller0: entered promiscuous mode [ 2992.926325][T17463] syzkaller0: entered allmulticast mode [ 2993.751715][T17491] Set syz0 is full, maxelem 0 reached [ 2994.222511][ T798] usb 6-1: new high-speed USB device number 118 using dummy_hcd [ 2994.392268][ T798] usb 6-1: Using ep0 maxpacket: 8 [ 2994.410547][ T798] usb 6-1: unable to get BOS descriptor or descriptor too short [ 2994.427811][ T798] usb 6-1: config 4 interface 0 has no altsetting 0 [ 2994.449613][ T798] usb 6-1: string descriptor 0 read error: -22 [ 2994.483951][ T798] usb 6-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 2994.513791][ T798] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 2994.560743][ T798] usb 6-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 2994.640208][ T798] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 2994.691518][ T798] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 2994.750721][ T798] usb 6-1: media controller created [ 2994.900992][ T798] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2996.053723][ T798] zl10353_read_register: readreg error (reg=127, ret==0) [ 3008.234092][ T4653] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 3008.246049][ T4653] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 3008.254952][ T4653] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 3008.267756][ T4653] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 3008.277330][ T4653] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 3009.249803][ T4653] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 3009.261134][ T4653] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 3009.270344][ T4653] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 3009.279431][ T4653] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 3009.287088][ T4653] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 3009.322882][ T5833] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 3009.328639][ T6811] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 3009.340255][ T5833] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 3009.350028][ T6811] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 3009.352298][ T5833] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 3009.364585][ T5833] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 3009.365153][ T6811] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 3009.380791][ T6811] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 3009.388216][ T6811] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 3009.396297][ T4653] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 3010.292706][ T6811] Bluetooth: hci0: command tx timeout [ 3011.193599][ T593] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 3011.204192][ T593] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 3011.212100][ T593] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 3011.220673][ T593] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 3011.229313][ T593] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 3011.333695][ T6811] Bluetooth: hci1: command tx timeout [ 3011.493203][ T593] Bluetooth: hci2: command tx timeout [ 3011.499631][ T6811] Bluetooth: hci4: command tx timeout [ 3012.372393][ T6811] Bluetooth: hci0: command tx timeout [ 3013.252351][ T6811] Bluetooth: hci5: command tx timeout [ 3013.412358][ T6811] Bluetooth: hci1: command tx timeout [ 3013.577505][ T6811] Bluetooth: hci4: command tx timeout [ 3013.584357][ T593] Bluetooth: hci2: command tx timeout [ 3014.453377][ T6811] Bluetooth: hci0: command tx timeout [ 3015.333062][ T6811] Bluetooth: hci5: command tx timeout [ 3015.492361][ T6811] Bluetooth: hci1: command tx timeout [ 3015.653376][ T6811] Bluetooth: hci4: command tx timeout [ 3015.658806][ T6811] Bluetooth: hci2: command tx timeout [ 3016.532744][ T6811] Bluetooth: hci0: command tx timeout [ 3017.413256][ T593] Bluetooth: hci5: command tx timeout [ 3017.572926][ T593] Bluetooth: hci1: command tx timeout [ 3017.733022][ T593] Bluetooth: hci2: command tx timeout [ 3017.738460][ T593] Bluetooth: hci4: command tx timeout [ 3019.492260][ T593] Bluetooth: hci5: command tx timeout [ 3020.381239][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 3020.388145][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 3068.528560][ T6811] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 3068.601454][ T6811] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 3068.611363][ T6811] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 3068.619573][ T6811] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 3068.627330][ T6811] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 3069.432877][ T593] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 3069.444435][ T593] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 3069.453379][ T593] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 3069.461309][ T593] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 3069.469245][ T593] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 3069.540304][ T4653] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 3069.556764][ T4653] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 3069.567241][ T4653] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 3069.576003][ T4653] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 3069.583864][ T4653] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 3069.591459][ T4653] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 3069.604286][ T4653] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 3069.611663][ T4653] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 3069.620740][T17597] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 3069.628706][T17597] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 3070.692222][ T6811] Bluetooth: hci10: command tx timeout [ 3071.449189][ T593] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 3071.459850][ T593] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 3071.468700][ T593] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 3071.478657][ T593] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 3071.486469][ T593] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 3071.573001][ T6811] Bluetooth: hci11: command tx timeout [ 3071.732601][ T6811] Bluetooth: hci12: command tx timeout [ 3071.732613][ T593] Bluetooth: hci13: command tx timeout [ 3072.772279][ T6811] Bluetooth: hci10: command tx timeout [ 3073.572291][ T6811] Bluetooth: hci14: command tx timeout [ 3073.657349][ T6811] Bluetooth: hci11: command tx timeout [ 3073.813073][ T6811] Bluetooth: hci12: command tx timeout [ 3073.813083][ T593] Bluetooth: hci13: command tx timeout [ 3074.852229][ T593] Bluetooth: hci10: command tx timeout [ 3075.652550][ T593] Bluetooth: hci14: command tx timeout [ 3075.732617][ T593] Bluetooth: hci11: command tx timeout [ 3075.892326][ T593] Bluetooth: hci13: command tx timeout [ 3075.892333][ T6811] Bluetooth: hci12: command tx timeout [ 3076.935229][ T593] Bluetooth: hci10: command tx timeout [ 3077.732243][ T593] Bluetooth: hci14: command tx timeout [ 3077.812193][ T593] Bluetooth: hci11: command tx timeout [ 3077.972291][ T593] Bluetooth: hci13: command tx timeout [ 3077.972384][ T6811] Bluetooth: hci12: command tx timeout [ 3079.812305][ T6811] Bluetooth: hci14: command tx timeout [ 3081.821160][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 3081.830500][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 3128.525544][ T593] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 3128.538126][ T593] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 3128.546583][ T593] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 3128.556034][ T593] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 3128.563821][ T593] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 3129.690160][ T593] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 3129.703034][ T593] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 3129.711796][ T4653] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 3129.724018][ T4653] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 3129.735699][ T4653] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 3129.743509][ T4653] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 3129.768113][ T6811] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 3129.780119][ T6811] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 3129.788241][ T6811] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 3129.796330][ T6811] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 3129.803013][ T5833] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 3129.804102][ T6811] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 3129.819405][ T593] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 3129.847468][ T6811] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 3129.863189][ T6811] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 3130.622504][T17597] Bluetooth: hci15: command tx timeout [ 3131.688973][ T6811] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 3131.701154][ T6811] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 3131.714948][ T6811] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 3131.723205][ T6811] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 3131.735988][ T6811] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 3131.819274][ T6811] Bluetooth: hci16: command tx timeout [ 3131.892288][ T6811] Bluetooth: hci17: command tx timeout [ 3131.899275][T17597] Bluetooth: hci18: command tx timeout [ 3132.692321][T17597] Bluetooth: hci15: command tx timeout [ 3133.812253][T17653] Bluetooth: hci19: command tx timeout [ 3133.892184][T17653] Bluetooth: hci16: command tx timeout [ 3133.972353][T17653] Bluetooth: hci17: command tx timeout [ 3133.972371][T17652] Bluetooth: hci18: command tx timeout [ 3134.782238][T17652] Bluetooth: hci15: command tx timeout [ 3135.094443][T17652] Bluetooth: hci2: command 0x0406 tx timeout [ 3135.094467][T17653] Bluetooth: hci4: command 0x0406 tx timeout [ 3135.101807][T17652] Bluetooth: hci5: command 0x0406 tx timeout [ 3135.114382][T17653] Bluetooth: hci0: command 0x0406 tx timeout [ 3135.116284][T17650] Bluetooth: hci1: command 0x0406 tx timeout [ 3135.902183][T17652] Bluetooth: hci19: command tx timeout [ 3135.982299][T17652] Bluetooth: hci16: command tx timeout [ 3136.052284][T17652] Bluetooth: hci18: command tx timeout [ 3136.062200][T17652] Bluetooth: hci17: command tx timeout [ 3136.852388][T17652] Bluetooth: hci15: command tx timeout [ 3137.972219][T17652] Bluetooth: hci19: command tx timeout [ 3138.052234][T17652] Bluetooth: hci16: command tx timeout [ 3138.133099][T17652] Bluetooth: hci17: command tx timeout [ 3138.138605][T17652] Bluetooth: hci18: command tx timeout [ 3138.142913][ T31] INFO: task syz.3.11483:17462 blocked for more than 143 seconds. [ 3138.151849][ T31] Tainted: G L syzkaller #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 3138.182764][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 3138.191615][ T31] task:syz.3.11483 state:D stack:24544 pid:17462 tgid:17462 ppid:6806 task_flags:0x400040 flags:0x08080002 [ 3138.232126][ T31] Call Trace: [ 3138.235427][ T31] [ 3138.238347][ T31] __schedule+0x15dd/0x52d0 [ 3138.292380][ T31] ? __pfx___schedule+0x10/0x10 [ 3138.297278][ T31] ? schedule+0x90/0x360 [ 3138.301542][ T31] schedule+0x164/0x360 [ 3138.322141][ T31] schedule_preempt_disabled+0x13/0x30 [ 3138.336496][ T31] __mutex_lock+0x7fe/0x1300 [ 3138.341115][ T31] ? __mutex_lock+0x5ac/0x1300 [ 3138.362276][ T31] ? tun_chr_close+0x3e/0x1c0 [ 3138.366984][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 3138.372031][ T31] ? __pfx_tun_chr_close+0x10/0x10 [ 3138.392573][ T31] tun_chr_close+0x3e/0x1c0 [ 3138.397102][ T31] __fput+0x44f/0xa70 [ 3138.401087][ T31] task_work_run+0x1d9/0x270 [ 3138.412424][ T31] ? __pfx_task_work_run+0x10/0x10 [ 3138.417542][ T31] exit_to_user_mode_loop+0xed/0x480 [ 3138.432333][ T31] ? rcu_is_watching+0x15/0xb0 [ 3138.437099][ T31] __do_fast_syscall_32+0x415/0x640 [ 3138.452352][ T31] ? do_fast_syscall_32+0x33/0x70 [ 3138.472122][ T31] ? asm_int80_emulation+0x1a/0x20 [ 3138.477264][ T31] ? do_int80_emulation+0x274/0x4d0 [ 3138.492125][ T31] ? trace_irq_disable+0x3b/0x150 [ 3138.497163][ T31] do_fast_syscall_32+0x33/0x70 [ 3138.501998][ T31] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 3138.509109][ T31] RIP: 0023:0xf709ef6c [ 3138.513488][ T31] RSP: 002b:00000000f75bfb1c EFLAGS: 00000206 ORIG_RAX: 00000000000001b4 [ 3138.521922][ T31] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 000000000000001e [ 3138.530213][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 3138.538445][ T31] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 3138.546654][ T31] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 3138.554832][ T31] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 3138.563813][ T31] [ 3138.567016][ T31] INFO: task syz.6.11486:17487 blocked for more than 143 seconds. [ 3138.577657][ T31] Tainted: G L syzkaller #0 [ 3138.584403][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 3138.602559][ T31] task:syz.6.11486 state:D stack:24448 pid:17487 tgid:17486 ppid:6813 task_flags:0x400140 flags:0x08080002 [ 3138.632511][ T31] Call Trace: [ 3138.635818][ T31] [ 3138.638756][ T31] __schedule+0x15dd/0x52d0 [ 3138.662133][ T31] ? kasan_save_track+0x4f/0x80 [ 3138.667021][ T31] ? security_file_ioctl_compat+0xc3/0x2a0 [ 3138.673125][ T31] ? __ia32_compat_sys_ioctl+0x139/0x950 [ 3138.678785][ T31] ? __do_fast_syscall_32+0x20d/0x640 [ 3138.684373][ T31] ? do_fast_syscall_32+0x33/0x70 [ 3138.689415][ T31] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 3138.696796][ T31] ? __pfx___schedule+0x10/0x10 [ 3138.701690][ T31] ? schedule+0x90/0x360 [ 3138.706167][ T31] schedule+0x164/0x360 [ 3138.710339][ T31] schedule_preempt_disabled+0x13/0x30 [ 3138.716148][ T31] __mutex_lock+0x7fe/0x1300 [ 3138.720768][ T31] ? __mutex_lock+0x5ac/0x1300 [ 3138.725959][ T31] ? dev_ioctl+0x7a4/0x1150 [ 3138.730486][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 3138.735813][ T31] ? dev_load+0x21/0x1f0 [ 3138.740073][ T31] ? dev_load+0x21/0x1f0 [ 3138.744595][ T31] dev_ioctl+0x7a4/0x1150 [ 3138.748939][ T31] sock_do_ioctl+0x23e/0x320 [ 3138.753764][ T31] ? __pfx_sock_do_ioctl+0x10/0x10 [ 3138.758892][ T31] ? pppox_ioctl+0x247/0x300 [ 3138.763698][ T31] ? __local_bh_enable_ip+0xd0/0x130 [ 3138.768997][ T31] ? lockdep_hardirqs_on+0x7a/0x110 [ 3138.774962][ T31] ? pppox_ioctl+0x247/0x300 [ 3138.779575][ T31] ? pppox_ioctl+0x247/0x300 [ 3138.784548][ T31] compat_sock_ioctl+0xba6/0xcb0 [ 3138.789510][ T31] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 3138.795213][ T31] ? __fget_files+0x3a0/0x420 [ 3138.799899][ T31] ? __fget_files+0x2a/0x420 [ 3138.804693][ T31] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 3138.810256][ T31] __ia32_compat_sys_ioctl+0x5ea/0x950 [ 3138.815960][ T31] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 3138.822048][ T31] ? __se_sys_futex_time32+0x3ab/0x440 [ 3138.827762][ T31] ? fd_install+0x94/0x3d0 [ 3138.833570][ T31] ? __pfx___se_sys_futex_time32+0x10/0x10 [ 3138.839410][ T31] __do_fast_syscall_32+0x20d/0x640 [ 3138.845013][ T31] ? lockdep_hardirqs_on+0x7a/0x110 [ 3138.850228][ T31] ? do_fast_syscall_32+0x33/0x70 [ 3138.855649][ T31] ? irqentry_exit+0x10e/0x620 [ 3138.860432][ T31] ? trace_irq_disable+0x3b/0x150 [ 3138.865784][ T31] do_fast_syscall_32+0x33/0x70 [ 3138.870651][ T31] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 3138.877307][ T31] RIP: 0023:0xf701ef6c [ 3138.881384][ T31] RSP: 002b:00000000f540d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 3138.890178][ T31] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 0000000000008922 [ 3138.898387][ T31] RDX: 0000000080000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 3138.906566][ T31] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 3138.914750][ T31] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 3138.922937][ T31] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 3138.930929][ T31] [ 3138.934339][ T31] INFO: task syz.8.11487:17490 blocked for more than 144 seconds. [ 3138.944641][ T31] Tainted: G L syzkaller #0 [ 3138.952332][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 3138.961989][ T31] task:syz.8.11487 state:D stack:26968 pid:17490 tgid:17489 ppid:6819 task_flags:0x400140 flags:0x08080002 [ 3138.976889][ T31] Call Trace: [ 3138.980179][ T31] [ 3138.983430][ T31] __schedule+0x15dd/0x52d0 [ 3138.987977][ T31] ? __pfx___schedule+0x10/0x10 [ 3138.993168][ T31] ? schedule+0x90/0x360 [ 3138.997426][ T31] schedule+0x164/0x360 [ 3139.001590][ T31] schedule_preempt_disabled+0x13/0x30 [ 3139.007478][ T31] __mutex_lock+0x7fe/0x1300 [ 3139.012360][ T31] ? __mutex_lock+0x5ac/0x1300 [ 3139.017146][ T31] ? rtnl_setlink+0x55e/0x940 [ 3139.021831][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 3139.027296][ T31] ? get_net+0x13d/0x1f0 [ 3139.031561][ T31] rtnl_setlink+0x55e/0x940 [ 3139.036388][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 3139.041342][ T31] ? __pfx_rtnl_setlink+0x10/0x10 [ 3139.046739][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 3139.051726][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 3139.057398][ T31] ? __pfx_rtnl_setlink+0x10/0x10 [ 3139.062819][ T31] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 3139.067776][ T31] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 3139.073338][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 3139.078813][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 3139.084241][ T31] netlink_rcv_skb+0x232/0x4b0 [ 3139.089025][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 3139.094811][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 3139.100118][ T31] ? netlink_deliver_tap+0x2e/0x1b0 [ 3139.105663][ T31] netlink_unicast+0x80f/0x9b0 [ 3139.110451][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 3139.116055][ T31] ? netlink_sendmsg+0x650/0xb40 [ 3139.121007][ T31] ? skb_put+0x11b/0x210 [ 3139.125565][ T31] netlink_sendmsg+0x813/0xb40 [ 3139.130350][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 3139.135962][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 3139.140932][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 3139.146533][ T31] ____sys_sendmsg+0x972/0x9f0 [ 3139.151323][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 3139.156955][ T31] ___sys_sendmsg+0x2a5/0x360 [ 3139.161658][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 3139.167471][ T31] ? futex_wait+0x29a/0x380 [ 3139.172026][ T31] ? __fget_files+0x2a/0x420 [ 3139.181912][ T31] ? __fget_files+0x3a0/0x420 [ 3139.186829][ T31] __sys_sendmsg+0x183/0x260 [ 3139.191440][ T31] ? __pfx___sys_sendmsg+0x10/0x10 [ 3139.197057][ T31] __do_fast_syscall_32+0x20d/0x640 [ 3139.202484][ T31] ? lockdep_hardirqs_on+0x7a/0x110 [ 3139.207695][ T31] ? do_fast_syscall_32+0x33/0x70 [ 3139.213063][ T31] ? irqentry_exit+0x10e/0x620 [ 3139.217839][ T31] ? trace_irq_disable+0x3b/0x150 [ 3139.223195][ T31] do_fast_syscall_32+0x33/0x70 [ 3139.228065][ T31] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 3139.234709][ T31] RIP: 0023:0xf7f08f6c [ 3139.238784][ T31] RSP: 002b:00000000f53c650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 3139.247510][ T31] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 3139.256140][ T31] RDX: 0000000000008804 RSI: 0000000000000000 RDI: 0000000000000000 [ 3139.264336][ T31] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 3139.276700][ T31] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 3139.284994][ T31] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 3139.293194][ T31] [ 3139.318411][ T31] [ 3139.318411][ T31] Showing all locks held in the system: [ 3139.326556][ T31] 1 lock held by khungtaskd/31: [ 3139.331407][ T31] #0: ffffffff8e75e5e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 3139.341999][ T31] 3 locks held by udevd/5197: [ 3139.346718][ T31] 2 locks held by getty/5585: [ 3139.351392][ T31] #0: ffff8880327b80a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 3139.361505][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 3139.376862][ T31] 5 locks held by kworker/u9:4/5833: [ 3139.393186][ T31] #0: ffff888028c56948 ((wq_completion)hci2){+.+.}-{0:0}, at: process_scheduled_works+0xa52/0x18c0 [ 3139.404058][ T31] #1: ffffc90003f37c40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa8d/0x18c0 [ 3139.419654][ T31] #2: ffff8880387d4ec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d3/0x400 [ 3139.436910][ T31] #3: ffff8880387d40c0 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0xa6f/0x1190 [ 3139.455679][ T31] #4: ffffffff8fd5d268 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x340 [ 3139.465955][ T31] 5 locks held by kworker/u9:1/593: [ 3139.471153][ T31] #0: ffff888028c55948 ((wq_completion)hci1){+.+.}-{0:0}, at: process_scheduled_works+0xa52/0x18c0 [ 3139.482368][ T31] #1: ffffc9000da27c40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa8d/0x18c0 [ 3139.495352][ T31] #2: ffff88807bb6cec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d3/0x400 [ 3139.505784][ T31] #3: ffff88807bb6c0c0 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0xa6f/0x1190 [ 3139.515828][ T31] #4: ffffffff8e7648f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 3139.527984][ T31] 3 locks held by kworker/u8:6/5192: [ 3139.534447][ T31] #0: ffff888031b96148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0xa52/0x18c0 [ 3139.546259][ T31] #1: ffffc9000f857c40 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa8d/0x18c0 [ 3139.560561][ T31] #2: ffffffff8fbd0048 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 3139.570365][ T31] 1 lock held by syz.3.11483/17462: [ 3139.578818][ T31] #0: ffffffff8fbd0048 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 3139.588037][ T31] 1 lock held by syz.3.11483/17463: [ 3139.601246][ T31] 1 lock held by syz.6.11486/17487: [ 3139.606738][ T31] #0: ffffffff8fbd0048 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x7a4/0x1150 [ 3139.616968][ T31] 1 lock held by syz.8.11487/17490: [ 3139.622380][ T31] #0: ffffffff8fbd0048 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_setlink+0x55e/0x940 [ 3139.631375][ T31] 1 lock held by syz.5.11488/17510: [ 3139.638824][ T31] #0: ffffffff8fbd0048 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x83c/0x1150 [ 3139.648806][ T31] 1 lock held by syz.0.11492/17528: [ 3139.656132][ T31] #0: ffffffff8fbd0048 (rtnl_mutex){+.+.}-{4:4}, at: do_ip_setsockopt+0xefa/0x2ea0 [ 3139.666156][ T31] 2 locks held by syz-executor/17542: [ 3139.671532][ T31] #0: ffffffff8fbc18d0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4f7/0x730 [ 3139.681339][ T31] #1: ffffffff8fbd0048 (rtnl_mutex){+.+.}-{4:4}, at: register_netdevice_notifier_net+0x1a/0xa0 [ 3139.692182][ T31] 2 locks held by syz-executor/17557: [ 3139.697563][ T31] #0: ffffffff8fbc18d0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4f7/0x730 [ 3139.707296][ T31] #1: ffffffff8fbd0048 (rtnl_mutex){+.+.}-{4:4}, at: register_netdevice_notifier_net+0x1a/0xa0 [ 3139.718143][ T31] 2 locks held by syz-executor/17560: [ 3139.724913][ T31] #0: ffffffff8fbc18d0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4f7/0x730 [ 3139.734674][ T31] #1: ffffffff8fbd0048 (rtnl_mutex){+.+.}-{4:4}, at: register_netdevice_notifier_net+0x1a/0xa0 [ 3139.747167][ T31] 2 locks held by syz-executor/17562: [ 3139.753814][ T31] #0: ffffffff8fbc18d0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4f7/0x730 [ 3139.763476][ T31] #1: ffffffff8fbd0048 (rtnl_mutex){+.+.}-{4:4}, at: register_netdevice_notifier_net+0x1a/0xa0 [ 3139.774589][ T31] 2 locks held by syz-executor/17570: [ 3139.779971][ T31] #0: ffffffff8fbc18d0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4f7/0x730 [ 3139.789710][ T31] #1: ffffffff8fbd0048 (rtnl_mutex){+.+.}-{4:4}, at: register_netdevice_notifier_net+0x1a/0xa0 [ 3139.800490][ T31] 2 locks held by syz-executor/17581: [ 3139.806113][ T31] #0: ffffffff8fbc18d0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4f7/0x730 [ 3139.816256][ T31] #1: ffffffff8fbd0048 (rtnl_mutex){+.+.}-{4:4}, at: register_netdevice_notifier_net+0x1a/0xa0 [ 3139.827263][ T31] 2 locks held by syz-executor/17596: [ 3139.834043][ T31] #0: ffffffff8fbc18d0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4f7/0x730 [ 3139.843698][ T31] #1: ffffffff8fbd0048 (rtnl_mutex){+.+.}-{4:4}, at: register_netdevice_notifier_net+0x1a/0xa0 [ 3139.856402][ T31] 2 locks held by syz-executor/17600: [ 3139.861781][ T31] #0: ffffffff8fbc18d0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4f7/0x730 [ 3139.872625][ T31] #1: ffffffff8fbd0048 (rtnl_mutex){+.+.}-{4:4}, at: register_netdevice_notifier_net+0x1a/0xa0 [ 3139.883755][ T31] 2 locks held by syz-executor/17603: [ 3139.889134][ T31] #0: ffffffff8fbc18d0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4f7/0x730 [ 3139.899230][ T31] #1: ffffffff8fbd0048 (rtnl_mutex){+.+.}-{4:4}, at: register_netdevice_notifier_net+0x1a/0xa0 [ 3139.909961][ T31] 2 locks held by syz-executor/17610: [ 3139.915575][ T31] #0: ffffffff8fbc18d0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4f7/0x730 [ 3139.925313][ T31] #1: ffffffff8fbd0048 (rtnl_mutex){+.+.}-{4:4}, at: register_netdevice_notifier_net+0x1a/0xa0 [ 3139.936152][ T31] 2 locks held by syz-executor/17620: [ 3139.941534][ T31] #0: ffffffff8fbc18d0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4f7/0x730 [ 3139.952664][ T31] #1: ffffffff8fbd0048 (rtnl_mutex){+.+.}-{4:4}, at: register_netdevice_notifier_net+0x1a/0xa0 [ 3139.965448][ T31] 2 locks held by syz-executor/17638: [ 3139.970830][ T31] #0: ffffffff8fbc18d0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4f7/0x730 [ 3139.980767][ T31] #1: ffffffff8fbd0048 (rtnl_mutex){+.+.}-{4:4}, at: register_netdevice_notifier_net+0x1a/0xa0 [ 3139.992455][ T31] 2 locks held by syz-executor/17639: [ 3139.997833][ T31] #0: ffffffff8fbc18d0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4f7/0x730 [ 3140.008077][ T31] #1: ffffffff8fbd0048 (rtnl_mutex){+.+.}-{4:4}, at: register_netdevice_notifier_net+0x1a/0xa0 [ 3140.018814][ T31] 2 locks held by syz-executor/17641: [ 3140.024428][ T31] #0: ffffffff8fbc18d0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4f7/0x730 [ 3140.034092][ T31] #1: ffffffff8fbd0048 (rtnl_mutex){+.+.}-{4:4}, at: register_netdevice_notifier_net+0x1a/0xa0 [ 3140.044933][ T31] 2 locks held by syz-executor/17649: [ 3140.050306][ T31] #0: ffffffff8fbc18d0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4f7/0x730 [ 3140.061081][ T4653] Bluetooth: hci19: command tx timeout [ 3140.069370][ T31] #1: ffffffff8fbd0048 (rtnl_mutex){+.+.}-{4:4}, at: register_netdevice_notifier_net+0x1a/0xa0 [ 3140.095520][ T31] [ 3140.097915][ T31] ============================================= [ 3140.097915][ T31] [ 3140.107866][ T31] NMI backtrace for cpu 0 [ 3140.107891][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 3140.107925][ T31] Tainted: [L]=SOFTLOCKUP [ 3140.107938][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 3140.107948][ T31] Call Trace: [ 3140.107962][ T31] [ 3140.107977][ T31] dump_stack_lvl+0xe8/0x150 [ 3140.108019][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 3140.108050][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 3140.108092][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 3140.108126][ T31] sys_info+0x135/0x170 [ 3140.108164][ T31] watchdog+0xfd9/0x1030 [ 3140.108198][ T31] ? watchdog+0x21a/0x1030 [ 3140.108233][ T31] kthread+0x388/0x470 [ 3140.108261][ T31] ? __pfx_watchdog+0x10/0x10 [ 3140.108286][ T31] ? __pfx_kthread+0x10/0x10 [ 3140.108312][ T31] ret_from_fork+0x51e/0xb90 [ 3140.108354][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 3140.108385][ T31] ? __switch_to+0xc7d/0x1450 [ 3140.108420][ T31] ? __pfx_kthread+0x10/0x10 [ 3140.108448][ T31] ret_from_fork_asm+0x1a/0x30 [ 3140.108509][ T31] [ 3140.108520][ T31] Sending NMI from CPU 0 to CPUs 1: [ 3140.225227][ C1] NMI backtrace for cpu 1 [ 3140.225244][ C1] CPU: 1 UID: 0 PID: 23756 Comm: kworker/u8:4 Tainted: G L syzkaller #0 PREEMPT(full) [ 3140.225265][ C1] Tainted: [L]=SOFTLOCKUP [ 3140.225272][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 3140.225282][ C1] Workqueue: events_unbound nsim_dev_trap_report_work [ 3140.225310][ C1] RIP: 0010:__lock_acquire+0x360/0x2cf0 [ 3140.225332][ C1] Code: 41 09 cc 41 09 dc 45 89 64 c7 20 41 89 7c c7 24 4c 89 7c 24 20 4d 8d 2c c7 41 81 e4 ff 1f 00 00 4c 0f a3 25 72 d2 82 12 73 15 <49> 69 c4 c8 00 00 00 48 8d 80 10 64 c5 93 4c 8b 74 24 08 eb 37 83 [ 3140.225345][ C1] RSP: 0018:ffffc90000a08738 EFLAGS: 00000003 [ 3140.225357][ C1] RAX: 0000000000000019 RBX: 0000000000022000 RCX: 0000000000000007 [ 3140.225367][ C1] RDX: 0000000000000000 RSI: 0000000000002000 RDI: 0000000000000000 [ 3140.225377][ C1] RBP: 0000000000000005 R08: ffffffff81767e95 R09: ffffffff8e75e5e0 [ 3140.225388][ C1] R10: ffffc90000a08a18 R11: ffffffff81b0d030 R12: 0000000000000007 [ 3140.225398][ C1] R13: ffff888028688c20 R14: ffff888028688000 R15: ffff888028688b58 [ 3140.225409][ C1] FS: 0000000000000000(0000) GS:ffff888125557000(0000) knlGS:0000000000000000 [ 3140.225422][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 3140.225432][ C1] CR2: 0000558a2b016ee8 CR3: 000000000e54c000 CR4: 00000000003526f0 [ 3140.225446][ C1] Call Trace: [ 3140.225452][ C1] [ 3140.225462][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 3140.225483][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 3140.225506][ C1] lock_acquire+0xf0/0x2e0 [ 3140.225523][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 3140.225545][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 3140.225565][ C1] ? kasan_save_track+0x3e/0x80 [ 3140.225581][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 3140.225601][ C1] unwind_next_frame+0xc2/0x23c0 [ 3140.225621][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 3140.225643][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 3140.225664][ C1] ? stack_trace_save+0xa9/0x100 [ 3140.225678][ C1] ? kasan_save_track+0x3e/0x80 [ 3140.225694][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 3140.225710][ C1] arch_stack_walk+0x11b/0x150 [ 3140.225733][ C1] ? kasan_save_track+0x3e/0x80 [ 3140.225750][ C1] stack_trace_save+0xa9/0x100 [ 3140.225765][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 3140.225779][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 3140.225801][ C1] ? stack_depot_save_flags+0x33/0x810 [ 3140.225823][ C1] ? __lock_acquire+0x630/0x2cf0 [ 3140.225842][ C1] kasan_save_track+0x3e/0x80 [ 3140.225857][ C1] ? kasan_save_track+0x3e/0x80 [ 3140.225889][ C1] kasan_save_free_info+0x46/0x50 [ 3140.225910][ C1] __kasan_slab_free+0x5c/0x80 [ 3140.225927][ C1] kmem_cache_free+0x187/0x630 [ 3140.225944][ C1] ? rcu_core+0x7cd/0x1070 [ 3140.225962][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 3140.225979][ C1] ? rcu_core+0x751/0x1070 [ 3140.225997][ C1] ? __pfx___d_free+0x10/0x10 [ 3140.226015][ C1] rcu_core+0x7cd/0x1070 [ 3140.226038][ C1] ? __pfx_rcu_core+0x10/0x10 [ 3140.226056][ C1] ? try_to_wake_up+0x7fc/0x1390 [ 3140.226075][ C1] handle_softirqs+0x22a/0x870 [ 3140.226095][ C1] ? do_softirq+0x76/0xd0 [ 3140.226115][ C1] ? __alloc_skb+0x186/0x7d0 [ 3140.226130][ C1] ? __alloc_skb+0x186/0x7d0 [ 3140.226145][ C1] do_softirq+0x76/0xd0 [ 3140.226163][ C1] [ 3140.226168][ C1] [ 3140.226174][ C1] __local_bh_enable_ip+0xf8/0x130 [ 3140.226193][ C1] __alloc_skb+0x1aa/0x7d0 [ 3140.226209][ C1] nsim_dev_trap_report_work+0x29a/0xb80 [ 3140.226237][ C1] ? process_scheduled_works+0xa8d/0x18c0 [ 3140.226257][ C1] process_scheduled_works+0xb6e/0x18c0 [ 3140.226285][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 3140.226306][ C1] ? assign_work+0x3d5/0x5e0 [ 3140.226325][ C1] worker_thread+0xa53/0xfc0 [ 3140.226353][ C1] kthread+0x388/0x470 [ 3140.226366][ C1] ? __pfx_worker_thread+0x10/0x10 [ 3140.226384][ C1] ? __pfx_kthread+0x10/0x10 [ 3140.226398][ C1] ret_from_fork+0x51e/0xb90 [ 3140.226417][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 3140.226435][ C1] ? __switch_to+0xc7d/0x1450 [ 3140.226452][ C1] ? __pfx_kthread+0x10/0x10 [ 3140.226466][ C1] ret_from_fork_asm+0x1a/0x30 [ 3140.226492][ C1] [ 3140.644965][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 3140.651841][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 3140.662524][ T31] Tainted: [L]=SOFTLOCKUP [ 3140.666852][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 3140.676909][ T31] Call Trace: [ 3140.680193][ T31] [ 3140.683122][ T31] vpanic+0x56c/0xa60 [ 3140.687120][ T31] ? __pfx_vpanic+0x10/0x10 [ 3140.691635][ T31] ? irqentry_exit+0x59e/0x620 [ 3140.696411][ T31] panic+0xc5/0xd0 [ 3140.700144][ T31] ? __pfx_panic+0x10/0x10 [ 3140.704582][ T31] watchdog+0x1023/0x1030 [ 3140.708921][ T31] ? watchdog+0x21a/0x1030 [ 3140.713346][ T31] kthread+0x388/0x470 [ 3140.717418][ T31] ? __pfx_watchdog+0x10/0x10 [ 3140.722093][ T31] ? __pfx_kthread+0x10/0x10 [ 3140.726684][ T31] ret_from_fork+0x51e/0xb90 [ 3140.731268][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 3140.736367][ T31] ? __switch_to+0xc7d/0x1450 [ 3140.741032][ T31] ? __pfx_kthread+0x10/0x10 [ 3140.745616][ T31] ret_from_fork_asm+0x1a/0x30 [ 3140.750382][ T31] [ 3140.753715][ T31] Kernel Offset: disabled [ 3140.758024][ T31] Rebooting in 86400 seconds..