last executing test programs: 17m4.552814508s ago: executing program 32 (id=180): r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x101042) r1 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) writev(r3, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000180)="200000001300034700bb65e1c3e4ffff01000000010000005600000025000000", 0x20}], 0x1) setsockopt$inet_mreqsrc(r2, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88c19edace00000000000000002100000002ff02000000000000000000000000000104004e20004d13"], 0x0) recvmmsg(r1, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000000100)=""/157, 0x9d}, {0x0}], 0x2}, 0xb}], 0x1, 0x0, 0x0) writev(r0, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000340)="01", 0x1}], 0x2) 12m5.771749661s ago: executing program 33 (id=1360): socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) syz_open_dev$vim2m(&(0x7f0000000e40), 0x8, 0x2) r0 = semget$private(0x0, 0x2, 0x0) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000100)=[0x4]) semop(r0, &(0x7f00000003c0)=[{}], 0x1) semctl$IPC_RMID(r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_G_SELECTION(r3, 0xc040565e, &(0x7f00000000c0)={0x5, 0x0, 0x0, {0xffff, 0x3, 0xb0c, 0x8}}) socket$rds(0x15, 0x5, 0x0) sendmsg$inet(r1, 0x0, 0x20000810) r4 = socket$inet_smc(0x2b, 0x1, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="640000000206050010000000000000deff00000014000780080011400000000005001500000000000500010006000000050005000a00000005000400000000000900020073797a350000000016000300686173683a6e65742c706f72742c6e657400000076cbf0e55d198f6e19969ef5cc052ee9a32c69e457ca66614a9b2be881f77976d8b4ff9e44892d611d43351349411fed4566a48e1a766f1ae4"], 0x64}}, 0x0) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) setsockopt$SO_BINDTODEVICE_wg(r4, 0x1, 0x19, &(0x7f0000000140)='wg0\x00', 0x4) sendto$inet(r4, &(0x7f0000000040)="e5", 0xffffffe4, 0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000080)={0x0, 0x215, 0x5}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={r7, 0x0, &(0x7f00000000c0)}, &(0x7f0000000180)=0x10) r8 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0xd, &(0x7f00000002c0)=@assoc_value, &(0x7f0000000040)=0x8) 12m2.291612937s ago: executing program 34 (id=1373): socket$nl_sock_diag(0x10, 0x3, 0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x1, 0x0, &(0x7f0000000440)='\\', 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7737, 0x80, 0x2, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0x0, 0x168, 0x9, 0x0, 0xb, 0x238, 0x250, 0x250, 0x238, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [], 'veth0_to_bridge\x00', 'nicvf0\x00'}, 0x6000000, 0xa8, 0xf0, 0x0, {0x0, 0x28e}}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@loopback, 'team0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001180)=@newtaction={0xd8c, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0xd78, 0x1, [@m_police={0xd74, 0x14, 0x0, 0x0, {{0xb}, {0xc70, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x56d6, 0x4a, 0x1, 0x8, 0xb, 0x100, 0x0, 0x2, 0x26a, 0xfffeffff, 0x8, 0x9, 0x200, 0x1, 0x2, 0x1ff, 0x4, 0x2cf, 0x1, 0x89b4, 0xfbcc, 0x1ff, 0x3, 0x10, 0x10001, 0x99, 0x2be, 0x0, 0x56ac, 0xfffffbff, 0x2, 0x1ff, 0x8, 0x5, 0x7fffffff, 0xd, 0x3, 0x0, 0x5, 0xffff3b0c, 0xfffffffc, 0xfffffff8, 0x0, 0x0, 0x3bd, 0x40, 0x7, 0x10, 0x2, 0xe9, 0x100, 0x8, 0x7, 0x0, 0x9, 0x5, 0x2, 0x0, 0x6, 0x5, 0x800, 0x7fffffff, 0x5, 0x3ff, 0x1aff, 0xcf6e, 0x2, 0x1, 0x7fffffff, 0xcc, 0x41a2, 0x3ff, 0x2f, 0x1c0000, 0x7f, 0x6, 0x4, 0x9, 0x7, 0x9, 0x80000001, 0x7, 0x3, 0x9, 0x5, 0x7, 0x4, 0x979, 0x2cc915be, 0x8001, 0xb07f0, 0x8c, 0x100, 0x5, 0x0, 0x800, 0x2, 0x4, 0x100, 0xffffffff, 0x1, 0x4, 0x0, 0xac, 0x1, 0x6, 0x8, 0x3, 0x9, 0x4, 0x8, 0x3, 0x9, 0x0, 0x552, 0x6, 0x1000, 0xe4, 0x9, 0x3, 0x2, 0x1, 0x3, 0x0, 0xb, 0x9, 0x8, 0x1c, 0xb600, 0x800, 0xfffffffd, 0x8001, 0x7, 0x8, 0xd9dc, 0x7, 0xd, 0x5, 0xe72, 0x4b6c, 0x3ff, 0x5, 0x101, 0x0, 0x7, 0x5, 0x6, 0x4, 0x8a6, 0xb7, 0x5, 0x6891, 0x3, 0xffff0000, 0x8, 0x80000001, 0xa, 0x8, 0x1ff, 0xe, 0x40, 0x2, 0x9, 0x7, 0x1, 0x10, 0x7, 0xffffb823, 0x3, 0x1, 0xffffffff, 0x9, 0x80, 0x9, 0x0, 0x4, 0xb, 0xc, 0x3, 0x8, 0x3, 0x2, 0x8, 0x59, 0x3, 0x7, 0x1, 0xc4fe, 0xa248, 0x8, 0xd8e, 0x6, 0xe, 0xffffffff, 0x7fffffff, 0x10000000, 0xe, 0x40, 0x8, 0x7f, 0x8, 0x7ff, 0x4, 0x4, 0x7, 0x9, 0x100, 0x5, 0x6, 0x62d1, 0x6, 0x8256, 0x61, 0x7, 0x9, 0x8, 0x7, 0x8001, 0x1, 0x4, 0x7, 0x8, 0xffff, 0x40, 0x100, 0x90e, 0x2, 0x8, 0x3, 0xc1, 0x3, 0x7, 0x5, 0x6f9b, 0x3, 0x200, 0x8, 0x4d33, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3997, 0x1, 0xb0, 0x4, 0x400, 0x800, 0x9, 0x2, 0xc, 0x1, 0x0, 0x8, 0x9]}, @TCA_POLICE_RESULT={0x8, 0x5, 0xeb0a}, @TCA_POLICE_TBF={0x3c, 0x1, {0xa, 0x2, 0x7, 0x8, 0x6, {0x7e, 0x2, 0x9, 0x8, 0x9}, {0x3, 0x1, 0x2681, 0x9248, 0x9, 0x1}, 0x7fffffff, 0x6, 0x9}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0xc24, 0x8, 0xfffffff9, 0x9, 0x81, 0x3, 0xffffffff, 0x6, 0xff, 0xc, 0x3, 0x80, 0xf, 0x0, 0x6, 0x6, 0x90, 0xc7, 0x5, 0x800, 0x2, 0x9, 0xe, 0xd9ed, 0x9, 0x9, 0x10001, 0x7c, 0x3, 0x2, 0x8, 0x101, 0xbf9, 0x0, 0x8, 0x2, 0xffffffff, 0x8, 0x8, 0x3ff, 0xf0, 0x0, 0x10, 0x22, 0x26, 0x3b, 0x1ff, 0x9, 0x9, 0x70e55f48, 0xffffff16, 0x0, 0x6, 0x4, 0x3, 0x8000, 0x7, 0x6, 0x10001, 0xd064, 0xfffffffc, 0x3, 0x5, 0x7, 0xe6, 0x0, 0x59c, 0x98, 0x5, 0x72, 0x1, 0xce8c, 0x8, 0x7, 0x0, 0x15d, 0x4df2, 0x835c, 0x57, 0x0, 0x9, 0x9, 0x2, 0x2, 0x24a7, 0x401, 0x80000000, 0x2, 0x80000000, 0x2, 0x5, 0x7, 0x4, 0xe0, 0xffff7fff, 0xffffffa5, 0xb, 0x8, 0xd5b, 0x8f1, 0x3bb, 0x7, 0x2, 0x6, 0x8, 0x2, 0x2, 0x5ac, 0xd, 0xd, 0x91, 0x9, 0x8, 0xffff, 0x41, 0x87, 0x800, 0x20000, 0x8, 0xffffffff, 0x401, 0xb, 0x7, 0x7, 0xfffffffd, 0x8, 0x9, 0x2, 0x2, 0x200, 0x1f7, 0xe, 0x9d, 0x4, 0xe305, 0xc3e, 0xd96, 0xd0, 0x756, 0xfffffff9, 0x0, 0x6, 0x4, 0x6, 0xaa, 0x5, 0x22, 0x7, 0x7, 0xffffffff, 0x1, 0x7, 0x3, 0xd6b, 0x40, 0xb17f, 0x7, 0x2, 0xffffffff, 0x6, 0x7, 0x4, 0x5, 0x5, 0x414c, 0x48a11081, 0x3, 0x1, 0x10001, 0x6, 0xff, 0x80000000, 0x8000, 0xa543, 0x7, 0x0, 0x7, 0x4, 0xa, 0x8, 0x100, 0x1ff, 0xdb5, 0x100, 0x4, 0xaa, 0x9, 0x5201f68d, 0x7, 0xd, 0xffffb3f4, 0xfff, 0x0, 0x6a060901, 0x0, 0x13, 0x1, 0x9, 0xc000, 0x2, 0x4, 0x430, 0x400, 0x4, 0x6, 0x80000001, 0x81, 0x5, 0x3d7a, 0xe2, 0xc, 0x0, 0xfffffffc, 0x2, 0x2, 0x6, 0x9, 0x8, 0x10, 0x1ff, 0x8, 0xe, 0x1f63, 0x9, 0x717, 0x8, 0xfffffff6, 0x9, 0x0, 0x8, 0x9, 0x6, 0x7fffffff, 0x6, 0x8, 0x1, 0x5, 0x7fff, 0xfffe000, 0x0, 0x4, 0x6, 0x5, 0x4, 0x2, 0x6, 0x80000000, 0x0, 0x4, 0x4, 0x8, 0x0, 0x200, 0x0, 0x101]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x5}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x3}, @TCA_POLICE_RATE64={0xc, 0x8, 0xb2}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0x2, 0xe, 0x9, 0x9, 0x7, 0x6, 0x1, 0x7fff, 0xf245, 0x7f, 0x3, 0x8, 0x0, 0x6, 0xff, 0x8, 0x50, 0x8, 0xad, 0x3, 0x8, 0x5, 0x7, 0x1, 0x200, 0x1, 0x6, 0x0, 0x1000, 0x1ff, 0x4, 0x3, 0xfffffffa, 0x7ff, 0x1, 0x8, 0x3, 0x10, 0x1, 0x0, 0x0, 0x1ff, 0x73, 0xfffffff8, 0x1ff, 0xffff, 0x40, 0x3, 0x6, 0x5, 0x7, 0x10, 0xa4bc, 0x8000, 0x74, 0x5, 0x7f, 0x9, 0x3, 0x2, 0x81, 0x5, 0x8001, 0x490, 0xb, 0xc2, 0x8, 0x0, 0xffff, 0x1ff, 0x6, 0x5, 0x3, 0x7, 0x200, 0x4, 0x8, 0x1, 0x9389, 0x8, 0x99, 0x6, 0x3, 0xb, 0x7ff, 0xc54, 0x8001, 0xd6, 0xfc17, 0x0, 0x7, 0x0, 0x480, 0x401, 0x6, 0x2, 0x3, 0x8, 0x58000000, 0x800, 0x0, 0xff, 0x4, 0xfffffe00, 0xab0, 0x8, 0xfffff00b, 0x0, 0x9, 0x8001, 0x0, 0x4, 0x4, 0x80, 0x7, 0x3, 0x3ff, 0xf4c6, 0x401, 0x8, 0x3, 0x9, 0x7, 0x9, 0x5, 0x5, 0x3, 0x3, 0x200, 0x80000001, 0x5, 0x96, 0x0, 0x4, 0x0, 0x10000, 0xbb, 0x9, 0x0, 0xf2, 0x8, 0x0, 0x100, 0x9, 0x101, 0x2, 0x6, 0x0, 0x7f, 0xfff, 0x1, 0x100, 0xfff, 0x9, 0x4, 0x6, 0x8, 0x3, 0x9, 0x0, 0xffffffff, 0x33, 0x1000, 0x121d, 0x2, 0x0, 0xa, 0xa92, 0xbc, 0x6, 0x3, 0x3, 0x2, 0x2, 0x4, 0x9e7a, 0x3172, 0x9, 0x50be, 0x7, 0x2, 0x8, 0x2400, 0xc52, 0x5, 0x400, 0x0, 0x0, 0xfffffffa, 0x7, 0x6, 0x7, 0x8, 0x78, 0x2481, 0x9, 0x5, 0xfde, 0x4, 0xf534, 0x3b66, 0x8, 0x6, 0xfffffff9, 0x8, 0x6, 0xcac, 0x0, 0x5, 0x26, 0x4, 0x5, 0x8, 0x7, 0x5, 0x200000, 0x9, 0xfffffff9, 0x6, 0x7, 0xa83, 0x7040, 0x699, 0x6, 0xfffffff7, 0x120000, 0x101, 0xf, 0xeed6858, 0x0, 0x400, 0x200, 0x545fc2d3, 0x80000000, 0x2, 0x0, 0x10001, 0x3, 0x2, 0xba0, 0x8, 0x942, 0x5, 0xb, 0x4, 0x6, 0x7f, 0x8, 0x81, 0xb, 0x3, 0x2, 0x85, 0x5, 0x4]}]]}, {0xd9, 0x6, "df78895d6dffb67160824c084624ac056081d7de4cf73dcb2df498da0114256b2b1f5d3b401d4c0efc64839689cec1b997d3e2c8c269a0071d649900840c9a5764524956a35e5736d96ac7c33db2c5627539cf1a6e868d2b6773a8aef5e5a1d3973bd62cbced096b956c33d4509fc8678db01b657904f004894087291330cc078fc1fb7301a852b3721f7eb11544eba9c87f8db8b1d8e5a9683c8c148aceca90326abd687ddcbe4dca1d49c6b5d33fa827260be8431a1c3365ec0e31f6f3293f3e5cecb62ba6da86eb89f9a313e76886047331010b"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}]}]}, 0xd8c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e0030000280080006"], 0x68}}, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000000440)={r4, 0x0, {0x0, 0x0, 0x0, 0x9, 0x800000000000, 0x0, 0x0, 0x10, 0x1d, "2401010000000000000d0ec0c1b4e9b1c4369d03740250ceaac500b1b3d741dd17c1c50d38ef2a565ef1e85c58d36500", "a1163939c787a16c1ca43f8539f3d3289737f0374c72a964a0193b3e8772fd29f35239d20000000100", "24431a1e58a68e174f0000000000ef8a07580000000000002000", [0x5]}}) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x20000000000003, 0x8000000000000002, 0x0, 0x0, 0x10, 0xa, "c25f7e0d775e40aee623452107249fe0bdbfce2fe240da8dce81a69b0edc7a60ad337212006a3e508b8040c7bc6e583cc41170a13349e2cfcc4b64bd4fbf41ee", "a5526c3b6a46c15c42022ee6cc29fd6294ee5056c4e8602a8a28609c370633cd58cda9ddec304859946ea27fb0b97bb826884c3d749834ad1e6c00", "412d226bd7dc8ce5783126ae76e309616391f73ea9c19b4a27828e2d00195a1f", [0x2, 0x1ff]}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 11m14.386278997s ago: executing program 6 (id=1530): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r2, &(0x7f00000001c0)={0x1d, r3}, 0x10) recvmmsg(r2, &(0x7f0000001d00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)=""/5, 0x5}, {0x0}], 0x2}, 0x3}], 0x2, 0x40000002, 0x0) (async) setsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, &(0x7f00000003c0)=0x1, 0x4) (async) sendmsg$can_raw(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@can={{}, 0x0, 0x1, 0x0, 0x0, "0000000000000003"}, 0x10}}, 0x20000000) write$UHID_INPUT(r1, &(0x7f0000002080)={0xf, {"a2e3ad21e08eeb661b5e060987f70e06d038e7ff7fc6e5539b0d650e8b089b3f363b68090890e0878f0e1ac6e7049b3b44959b649a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d07420936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c554336909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f6777478bc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15ffffffffffffffff1243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5dc29a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f6435f7590000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9a53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f423500c7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02da93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d0300000000000000b378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d678746383074c6bc1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b3c7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0da42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9cc8036cbd65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f90000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000400", 0x104d}}, 0x1006) (async) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$kcm(r5, &(0x7f0000001900)={0x0, 0xffffffea, 0x0}, 0x20040005) (async) sendmsg$inet(r5, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) (async) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000002c0)={0xc}) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x1a8}}, 0x800) (async) futex(&(0x7f000000cffc)=0xfffffffe, 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0x10b, 0x4, 0x0, &(0x7f0000048000), 0x0) (async) clock_gettime(0x0, &(0x7f00000000c0)) (async) futex(&(0x7f000000cffc), 0x8, 0x1, &(0x7f0000000040)={0x77359400}, &(0x7f0000048000), 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) (async) exit(0x100004) (async) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000600)=ANY=[@ANYBLOB="09000000000000003f030000000000000200000000000000fc020000000000000300000000000000b3080000000000000100000000000000f103000000000000321affffffffffffa5080000000000000a00c0000000000004000000000000a80b0000000000009c8e0000000000001004000000000000810000000000000021090042a66082e0093af4a08300b0693e2c104fa5b0d8eec41e0f7c0bc31e00000000000800"]) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 11m13.990148707s ago: executing program 6 (id=1534): r0 = socket$kcm(0xa, 0x3, 0x87) sendmsg$kcm(r0, &(0x7f0000000180)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x18000, @dev={0xfe, 0x80, '\x00', 0x2a}, 0x2, 0x1001}, 0x80, &(0x7f0000000080)=[{&(0x7f00000001c0)="1f", 0x1}], 0x1, 0x0, 0x1200}, 0x4) 11m13.677720395s ago: executing program 6 (id=1536): r0 = socket(0x1e, 0x1, 0x0) syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x1, 0xbfdffffc}, &(0x7f00000000c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x85c3}}) shutdown(r0, 0x2) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000004c0)=@mangle={'mangle\x00', 0x10, 0x6, 0xcc0, 0xb20, 0xd0, 0x980, 0x0, 0xd0, 0xbf0, 0xbf0, 0xbf0, 0xbf0, 0xbf0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @HL={0x28}}, {{@ipv6={@dev, @loopback, [], [0x0, 0x0, 0xffffffff], 'pim6reg\x00', 'sit0\x00', {}, {0xff}, 0x29}, 0x0, 0x888, 0x8b0, 0x0, {}, [@common=@unspec=@u32={{0x7e0}, {[{[{0x0, 0x1}, {}, {0xfffffffc, 0x1}, {0x0, 0x1}, {0x7, 0x2}, {0xfffffffb, 0x3}, {0x3}, {0x2, 0x3}, {0x9, 0x1}, {0xfffffffa, 0x1}, {0x0, 0x3}], [{0x2, 0xb54a}, {0x4, 0x7a2}, {0xffffff2c, 0x2}, {0x81, 0x80000001}, {0x0, 0x4}, {0x400, 0x8}, {0x73, 0x7ff}, {0x10000}, {0x0, 0x10000}, {0x401, 0x1000}, {0x1, 0x4}], 0x5, 0xa}, {[{0x3, 0x1}, {0x8, 0x3}, {0x1d51, 0x3}, {0x8}, {0x9}, {0x6, 0x1}, {0x0, 0x3}, {0x3, 0x2}, {0x3, 0x2}, {0x1}, {0x4, 0x1}], [{0x2, 0x3}, {}, {0x6, 0x9}, {0x1, 0x3ff}, {0xe02f, 0xd8063f6}, {0x1, 0xdf0}, {0x6}, {0x8, 0xffffffc0}, {0x400, 0x4}, {0x8000}, {0x8001, 0xfffffffd}], 0x6, 0x4}, {[{0x36, 0x3}, {0x26, 0x1}, {0x4, 0x1}, {0x400, 0x1}, {0x9}, {0x7, 0x3}, {0xd, 0x3}, {0xed72, 0x3}, {0x8001}, {0x8, 0x1}, {0x1, 0x1}], [{0x8001, 0x5}, {0xb, 0x81}, {0x40, 0x473a}, {0x80000000, 0x10}, {0xf2e, 0x1}, {0x7ac4, 0x7}, {0xfff, 0x8}, {0x81, 0x5}, {0x7, 0x9}, {0x2, 0x1}, {0x3, 0x5}], 0xb, 0xb}, {[{0x6}, {0x2, 0x2}, {0x1}, {0x9, 0x2}, {0x7fff, 0x2}, {0x2, 0x1}, {0x9, 0x3}, {0xc}, {0xb3, 0x1}, {0x7}, {0x2, 0x1}], [{0x81, 0x8}, {0xd, 0x7}, {0x8, 0xffff0000}, {0x4}, {0xa, 0xfffffffd}, {0xfff, 0xfffff001}, {0x8, 0x7}, {0x20, 0x4}, {0x8, 0xc}, {0x7, 0xfffffff8}, {0x3, 0xfd0d}], 0xb, 0x25}, {[{0x0, 0x3}, {0xb6}, {0x7}, {0x200, 0x2}, {0xff, 0x2}, {0x5, 0x1}, {0x7f, 0x2}, {0x9, 0x3}, {0xf}, {0xb95}, {0x8}], [{0x6, 0xff}, {0x6, 0x5f}, {0x80000000, 0x2311}, {0xfffffffb, 0xffffffff}, {0x6, 0xb221}, {0x400, 0x6}, {0x4, 0x7}, {0x200, 0xfffffffd}, {0x6, 0xb}, {0x200, 0x1a}, {0x6, 0x75}], 0x0, 0xa}, {[{0x9}, {0x9, 0x2}, {0xffff0001, 0x1}, {0xb}, {0x2, 0x1}, {0x10000, 0x3}, {0x3, 0x3}, {0x5, 0x3}, {0x6, 0x1}, {0x44, 0x2}, {0x9}], [{0x14000000, 0x218d50ea}, {0x1ff, 0x100}, {0x1000, 0x1}, {0xac, 0x3}, {0x5, 0x1d0}, {0x51, 0x1}, {0xfffffff7, 0x6}, {0x0, 0x4}, {0xfffff001, 0xfff}, {0x1, 0x4}, {0x2, 0xb}], 0x4, 0x2}, {[{0x4}, {0x2, 0x2}, {0x3da6, 0x3}, {0x8f1, 0x3}, {0x133e, 0x2}, {0x4, 0x1}, {}, {0x101, 0x1}, {}, {0x101}, {0x7ff, 0x1}], [{0x5, 0x92}, {0x3, 0x4}, {0x0, 0x7}, {0x10000, 0x1}, {0x7f, 0x3ff}, {0x5, 0x7}, {0x7, 0x7f}, {0x2, 0x9}, {0x80000000, 0xb0a}, {0x5f9, 0xfffffff7}, {0xa6, 0x5}], 0x0, 0x4}, {[{0x5, 0x2}, {0x6, 0x3}, {0x5}, {0x9}, {0x1, 0x2}, {0x3, 0x3}, {0x6}, {0x9}, {0x1}, {0x8, 0x3}, {0x0, 0x3}], [{0x3, 0x8}, {0x5, 0xef}, {0xfffffff9, 0xcf9}, {0x8, 0x4}, {0xfffffffe, 0x2}, {0x4, 0x3}, {0x0, 0x5}, {0x1, 0xef}, {0x7, 0xc7}, {0x8, 0x7}, {0xc2, 0x2}], 0x1, 0x4}, {[{0x4, 0x1}, {0x5, 0x2}, {0x5, 0x3}, {0x8, 0x1}, {0x5, 0x2}, {0x2, 0x1}, {0x40, 0x2}, {0xffffffff, 0x1}, {0x1, 0x1}, {0x6, 0x2}, {0x80000000}], [{0x8, 0x5}, {0x5}, {0x10001, 0x8}, {0x5, 0x10}, {0x5, 0x80}, {0x12}, {0x7, 0x9}, {0x1, 0x3}, {0x3}, {0x7, 0x80000001}, {0x10, 0x6}], 0x7, 0x3}, {[{0xb, 0x3}, {0x8, 0x2}, {0x401, 0x1}, {0x8, 0x3}, {0xc40, 0x3}, {0xfffffffa, 0x3}, {0x2}, {0x7, 0x2}, {0x9, 0x3}, {0xa, 0x1}, {0x3, 0x1}], [{0x7, 0x1}, {0x2}, {0x7, 0x3}, {0x7ff, 0x4}, {0x0, 0x72}, {0x9, 0xe3}, {0x0, 0x6}, {0xabc, 0x80000000}, {0x8, 0x2}, {0x6, 0xfffffff7}, {0xcbb, 0x6}], 0x2, 0x4}, {[{0x0, 0x2}, {0x4}, {0x3, 0x2}, {0x9, 0x2}, {0x9, 0x2}, {0xf2, 0x3}, {0xb583, 0x1}, {0x1, 0x2}, {0x4}, {0x9ab5, 0x2}, {0x2ad}], [{0xe1b0, 0x35e}, {0x7, 0x9}, {0xfffffff3, 0xdce0}, {0x2, 0x8}, {0x5, 0x46a}, {0x8, 0x8}, {0x608, 0x2}, {0x8, 0x3}, {0x73e0, 0x7}, {0x7, 0x3dda}, {0xa93b, 0xca1}], 0x7, 0x3}], 0xb, 0x1}}]}, @HL={0x28}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x33}, @private2={0xfc, 0x2, '\x00', 0x1}, [0x7f8000ff, 0xffffff00, 0xffffff00], [0xffffff00, 0xffffff00, 0xff000000, 0xffff00], 'wlan1\x00', 'macvtap0\x00', {}, {0xff}, 0x88, 0xb, 0x1, 0x4}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @local}, @private2={0xfc, 0x2, '\x00', 0x1}, [0xffffff00, 0xffffff00, 0xffffff00, 0xff], [0xff, 0xff000000, 0xffffff00], 'veth1_to_batadv\x00', 'geneve0\x00', {}, {}, 0x21, 0xe, 0x6, 0x58}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x3, 0x9}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0xd20) unshare(0x22020400) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, &(0x7f0000000040)={0x4, 0x38414761, 0x0, @discrete={0x9, 0xe}}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r5) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x2d, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r7, @ANYBLOB="000024000000000024001200140001006272696467655f736c617665800000000c000500080005"], 0x3}}, 0x0) splice(r4, 0x0, r6, 0x0, 0x10d00, 0x0) 11m13.267461262s ago: executing program 6 (id=1538): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) syz_open_dev$dri(&(0x7f0000000000), 0x80000000, 0x14200) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e21, 0x9, @private0, 0x8}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, &(0x7f0000000340)={r1, @in6={{0xa, 0x3, 0xfffffffd, @dev={0xfe, 0x80, '\x00', 0x38}}}}, &(0x7f0000000040)=0x84) mlock2(&(0x7f0000549000/0x1000)=nil, 0x1000, 0x0) munlockall() 11m13.015333267s ago: executing program 6 (id=1541): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000002500)=ANY=[@ANYBLOB="12010000ec31f8104c1302007eec0102030109021b0001000000000904000001098b7500090583"], 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80082) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0]) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, 0x0, 0x0}, 0x94) read$FUSE(0xffffffffffffffff, &(0x7f0000002140)={0x2020}, 0x2020) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) chdir(&(0x7f0000000080)='./file0/file0\x00') read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000004200)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0x880, 0x1ff, 0x0, 0x0, 0x5}}, 0x50) syz_fuse_handle_req(r4, &(0x7f0000004280)="cab1f92d585917232bcfa47f91900c936355a83b5a41f6f43bd8b0d1a1e13674b6a8596a8376e6851e0b96decd071d92ce4887ddad2b82183858d82c7d11948024607d92ec0f1c23a4e755f29fa557d1353a3ced680f530e822eed64b4d1aaf20d1320f3583cadb9dfde95993487f96bc290dc10cfccc5ec8ea864590fc1678b79b0a36c9668b27ae142d22c305496881af0d0546076ec21e31bdab2465010e779e7140036d2b12f59b971792cfed8d07f0b8ae13ee944268f573ec11c1b14d53880a64fd2fdbe981f4d9af8863191efc03a39d5a3f19badf65dd49443297b38bf0c009eafad5879cb78e63b00e961de7d7180941f0d1e87a2635294bcb4619e9d84be1816784325d23fcb9c66388b586c8e719f3edfa2aa37cc3f6511add854c10fe546d1c11f11eeaff24cecc0d47ec8fd336ec08470f06227e4a9410074a3d715eb6a697b04bdfeda0b6753d880d012ef8fada7f4ed649ca214609e31cace9a33937813012e4c1b787d8f71ce9b495a69e5c8810ff9954b7b96743dcdd7e52ebbf526f339d3c8ad2550326d3a396de5ac90787b352feabe013c4044ca813344c97f836851d6daf2de3a8b07a61d1052bd302a641706af7629a042dc2f0374671b287f1325763e1818beba9f7cab9e25d6f8749f7dea4c5ef684723d33938aca32e19b1c6a6237d899fb397e9023764b3f4d6399885533a802e4d3ca76f2e0234ed6d7257f8cebddc900af88cc21ee2816513045e92f71fc8523894d684678f17b5fdb4adeda98fc019c0ba05efeffeff3bbda1d6d84a98002a74237cb8d13cb30d8a9a7e47e4da8273a47df4e6ea53036b5b154b9597e6eb00fcad29ed04a820b1ce807bf1818344122a6f0aac52d24426feeba0af56925cb4a1e70a84251f2b4d4693e689518a0e159647b5b60a62db699a25275520c208652ce4401bb5dcd633e7c889758d3d213f4dbe69c9bb76e80b6e892bb5f5809e042ee5cb1982a2373b1886711d1e68d0bc3d4c9d69ac605432bf84cd81104e77c71cd7c0708244fc9428edd52f8cc8f3023b4c6d3bbad7a9b874111098c4652b34c428a8f789c5e5f3f84354ab7afec1a7b11d2a34771ebad2f15c169a61b431c8a1cca9ca1596fce65242d03814ebf977da9bbde5707b22b5002cce68bd0f6d196df341c96bd0cf0916b8775e75021663ea82c99a90b844cc5f8b6c56b21b1fbbbf6fb40ed0c29ee4ecc2998df2cbe3a4d75025ef73dd9f3aa5bc7aa694fe573a73453c9ff873d0a8840afd91be319181836de45260b4e252394edae58f840858a9b64f0ff37bb1820031e563250e62ceea5a7c4d2cd4d5d10e57176fcf576e774920db06b36ea02f9cae9c1087bd1866fb4bcf7fbf393093b339860a61c61248000a2a1bbc982fa691e311fa1bf2a38afdf08b574eed0df42bdc30c3db7cdcb71687f48070077f91fef93e8e47e248d3e53e8a79fcb5a8f8aa39b3bfa2dd88d5c5840d517ae8c132d423a37a8be3301d62a99753bc72f674205a11850e045430abbdc4e68223a93c76d6d2f1d646af10a15705793e2fc5a532af3dda88f52063a091f1f79cd5a5b23ea7742b149eab1aa43c21c2f15227a1f94b5580adbb1e1c49ade49d6e8b838cff43aa2426651817f479252c8ef7af9e4a5ad33839be6c15b50016c59f13c26cfca796cfc01207acc69e9d3952f6e71c975bc77d5a001f6f6c044770f54d86a4518a4898e3136988d643dd2de907859f0b4d4de2a2d461ba5e05cff49eda86772799b2e7947fdbb89fc5b0347e87f1b9dbb94842cc1457d07f3e0c41342510f5ccb551cdf0fcac1a758041bff75812de1b2abf341ed5f667c9b0581d2c33e0b17f1b46c2287399c62252edb9c1cf2b80b7a1b4c3c903aa4cf5332a2998b9072f61f589ae5df1168f8d18e98fce2bec1d5d876f9757017b73495a4e8f4f2423cde8875aa8c95a9ce180cac6690657b8a70e5541d5ef46575cd74e063759fe4889f4d9737a6c9732f8b7f7836508814093b9bdac5733938e761b3642910d4df0b646c1b9583a502246988e9ab78de3d011e8590e48eadfcdb70c8aad6dfbe1dbd3ef20d9ba393db4e6cf91e3bb4e84883c60dc20ed974a5decde12d3c5a1c9a00999f8eefc244465f518425820b9713cbfc6027f427b9cd8756edec5b3a0301a01ebb12c6d412ee3422aeb8b291619f62f4ce41511156f73e54b5097051ea777af7cb73b36e1274ce1a3892007466cc793eb0515b8984acb99c04c7eaa51e175bd73d99bc0c67c8ea84d808a7906a6ad330ba2c9651b2ab82d0781a969873dcddb068c15b7899fd560a1c3d44b34e81cce079c46fd86522052659e2c3151c79a8ccab1dfcdb91f53ca067ea1b2aa507278e4166e817eb0d7dea67cde1598a1bdb76a8caf82add2b43fdd10bf80b0d2f32365849c425d6ac3d2d88a76378d23961eb96c8422e785ea61f33e4daec02393d51f44b177755749fe84b43f5246d20177800af05752af524265f34f62bd5167fa647d2118aa905a1af53f07e7447bee29675cc23f547339af140c0818aa974ca16da33e767d508e4f56726c7076acce57a9957d08348ef84a39188e800ca44682fccaa9ee1b42e1aaf7738dced1dce3ef2dadfcba2863f36b5f8080ed22539b5176bc2c57e52e4cfde659c1ce9e179c79f85d60ca51c7453dad593190b19a1be8f5c5b0249d70079f10f9d0f07f25a98bd95e6e6f71101842b55347ee008d58522e8f7598c1636c58fd20984a6bb17fd47e7db4bc72854054e7900cac4174cf0b4eda2406842955fd8a2ba00ea4d490dbbab02d659cea4c449d9ee37c8f35daa4740b3273693ee2c1b00965a79d18ad98ae92bf2e1ea84ff1e6181937d38765cb353c6223ead1257d88a8844cb0be17aecc2dd56b78dcd6e2999fe695db248dd68275a5ad0f223a4629b17a040a766b2bd2376d77a422375de14a3daaf4fee92f23ca831452826bc66d0cee2049acbde07bdbb6ce228147f9ed4f9437301e8ca9e1ace0684700e9623a1534212d4c557712a3196d86c86077e97172d7e89436e95e1d7e7629d5bc908e346e504839498890210ca15bea51bb2840f1275d36b99490ff0706aa3ca9e89f33fd99df863acc3bca504c15501ba9d987999ee118f47b7737d2dfe73ab257d680f983da1f5fd5975491ad966989f7b15e76e4e6b1a2987801adb3b7cd4cb1d2c9d0454429c2955643c8fb82ccf8e93051cc10081f8181af0d143deee686f67ec42db1e9914ed047e4bf0006af01028e3839451fa3e17d33586022c63cafaf6d0fc773c96143473316988d32f9943d7477604a27ae4b8a7093bee2cefe10cc02109c748d0676692a2411e5c3b4c4c1b9ac7f9b71a1a7126dacf4615e8c9c3d38f536e8b32e37f406b3dc44db80a00d6e423deec869edb32a411986be1517b6ea45e1f984a6fbd08edb25a305122fe5a90cc46af48ebc36433a1f27f43d85492ea60fd2f43125e7328da93f7aad97f97910112fed7ae7b1785822356a525df1f3ab4637b68d92ecd8d7f234973c686fb11821bb1de5f8459b57892f1dae08aae1924ee60a904d7be6e6611ec3d00002152ab7e0c29c7bf124dbec9a6eff25e619d89c27d187e3ffff63c996c33f4b7e967b607f36a8ac8dba6beb43395c9c9b2e3e36de29b07f9c2d60cdfd1d02813d4e508c56b99405b752758a01cc25bb5436ea1efd52c536fa1d2fb1cd9b1ee006d42b58600be2c1aba59c480cb6e9224d7a4df920598950634033087d3e356f35cd2f8b021d30f4ba79bc60eb6715c6c9bed84648552395cffa97c8cdb8f562f8f127f0e6f86dc61fab11ff782560d88cf2872d0e07a27f38120a0831a93c377298c2ed4fe180eb078422e5f030540fd21ebd414e6c42f1fa5491b5b8fdcada476376732edbfd66e10a475e2c0a43ccf6a41f7879f4577e987695d8d5097f6920fbe2b9ac2cb424de7afded1b5b7db89f3612c487770d58a7bb7517f1fa7a98ff6db3778d40c5f36b27d233a0c18587220f900f4a8e867e33e24c1981acb3445de995132d8fcc58f79ddb1475ba69c464071e95c0707c396c0b1b710cceb51efba5f30a271cd456d5f7216d90b412156ecb01dd41f15ac31980649c5eabc7fbb085a38318d43b0683cba055deb9dde4dc4584935473508837c1023993d50b434b311f126df6a0be0653b97a97bbc9b165098dac8dfd6ed6f033ccf7b32cfa3292296222aebfaec4dcd5066b66be45696067dfab907e2984f1bb6067c170e0617e245c9c09a85a061c4b7e2873ce0571b48d557007d5c7ddf5cc2ffa533e2a3975f3687a6d08a09dc1d285cfed129ec887d70bb5aded429b676c242d57c8f36721bf5732b1f25eced0ffedba7254486c9caab3fb3e0ad3b2dc332a06dadd39e5483a314b1d3086cc198b6b6b272fb56e35e0388b1dcddd484fde0ef9d855ca7bd98ebf0f686cec7d5e37f7b5dffbe4ab28c4422adbaef0c45649b0b830dfff90bbea3b7103ea9dd87d856ba7c5bb485319eecc71acc943c733f489ad72e13b1b232cd1eb4ce87917daad4b0405c9905f7a35501c75332d9acb36057715a6abd0958061fda860c00000000bc9aeac4f47acd022927c381012150fed83a99c2d7b268ff2e1c8d162d3feae2c5bdee747aa10566a94f13d4e1a00a4043bd179310e72ec8e4c68659be77907bba82fc416a72c0d2076821f77e8afdbeac769195a01515ab45ba73ec85a2f8a52146dbbc8d585def095aef4e4491362b596a84d2e9fd0131de2c72b71c4bd239146011eaa209957b2bb3f74bf2f42a17440749688d66a18a9d4a7d1e2bbb34dbb2a45460e69a1ec43467665c59438d35fe9b04a94e408ec4bcf7ba1a25bfc287d6189b65711904be9860f8a68d1bab99eed54890f963caef1fa0179224b650f090f67dca59f1241c2a25bc921d522f61e57d2bad88c057d3f7729499a0391fca3a62b27cc0a9b976da3eef333d88ad128ea757697ffdd50633b66b73ea3ddb565bc3d8780f9c0bb2347551969aaa500e7c030da2a92eb3f78d88b91eb547dba2e9be7ab2aa617f0890c39c73c8c2b35ff7ec529f6b8d08e3fcf2630e454bdb6474185ae72ba69310654c9c0b3ba158fe223954e1d46f9d27b0a4e090b0084918b2964bdcee31d258325b89ef96790ed1df4842b482023f1d22fb3e01280f1c8616153035f10bd65de57c1fa7d5a17e77b12e348bd3019092ef548c5249694168dd24df8a7318eccd779da4f547e9f162f484eb3ab9f5bd196f6b68656725d2624b61d09f73586753a1fb7eeb1721973f8e15522487f1dd1412b0f4846801d1abbfe53b755f15047981b162a1de04d52b4d4762ac877e4d718619e8cdba16df688fe95bdc9a1ee99c21004ba7e72985752d89d6892a4169296703fde314457f014ed89c129a4c83b5bee0bb93cb69a83313442837bc03679ee317cf8d1b908b70fae1b1461a398f310ac073642f954ab39e0eda329a94a5c12cf262ca4a25831dbc10aecf83d9d54776c379c230bb488cd6c9295bc31cfab61eb9b5486726f5c854db8aad2642d4468643f3bc8b25cdc9fda7aad04b06b61b185868a44acd46a0bd8debc1e431f19aeddfa3d0e480949bd361f6c988744acafae954c140192306c3066e8e434f70e8cd67b65a59923d166a95ca5e0515e2059e1f1aa9a74bfd49e4e37638bfa6b6117b790c4ec7f536d046c38f8ab6eedac1713bcb8860a18cac43e9add3c68c3ce5d17fbf76e966afcd3ed7795540650e093d39926f5e3719156baa54307b4f5e934f24951b3644a7657e798525d3f1207b28527a5bcdeb33e296c6c0e9e1757941ddd24a0d15c9a21918514a3143ef3fc2e775345ea10aeba6767686e9cfa646da377e88fd759a33ff20c9b258fd37d063d02fe22f090c5e324b507cd3bc42248a7abb2c7d0b1b85ecb5a67bf53a2f25d139ea523808678942e1588fd677df161b67b563a446a2cc69d9126fbf308258a13fcd6f53d92d9947311e3de4fa5acd7c2684d9eb3b4feb024e05bbf090836d92e30b68df6a7619542c9acbbb69dc73c781bdc7ef4b25c2af77186f493a5038a56508cc56b7085e13f4264e02a2a3bb515e15301371520481302f2367c883a5ac503ae4269cbbc8fb2f0f77ecaea7b8af04bc24aa90f677a72bbecfdb225864714344a8fd1c07ef664abaefe53bd76ba12c8bf45860a316812af87348682ee7005ac6a00523f4313102742ee5502d8c61c3321d1b872780192f4d00b12b38d0aedd34619c42f49b81d7bddc4ca481ed8f448bc3ad98b13f7176748838d623e007a24948480e978b80ce67ec952eca613091ad4f81cd521b2851bb8b2a6b1da0420eca80aecac9c0887988e1f29906c9ce65b990a00f22ba6f115a7a0001f511ec35dbcd401130173fded8b2e23365caf3d6d7c8f404383f16fcd76b17c220f88c1fe96211bd92c5803c63d9537a2ceb258508d9b1d74ca43174eaefd677ed6db63bb3d7712c9558c7879fbe67b7396c721407953db9dad13291f96d7d0290ad56cf1f65ccf58d3f5b8ba1f78f81d86ae0ea50926ff352d73629da44a6d31598dcdcf81355faed4f5a6ad8cc39d4a414b97f193c896bd3c270097cc96e4a5e36ca9a56a27c52a03decc4837d7b008acc1fd2724f97e0e9591afb5de3af3ec5fc16e1bee79098cc94d638375d69ae5065bedaed575e11b1b0a4d1189830856e8d48a6c50bf18cb9f8919fd8a55ad0b2f7d8c096c7f549fec8e1522be0de2a69699afe47e899ac6d5405c08e2e374326808ba76259d85b971dcce55aceed11583603dd280fd15c8e7b206e8bade3f6d83c6041838ea8b489fb9f92ab220ad5d3cd2af3f45cb2df7094d550b2cfea314469943a159e12c01897a7cc42904eeb24cc507e7ce7ffb4d22efdcd5cb5d75975582e14960fb0f2b83cb774faea32dfba7ed0e8b6a749785166cb5c77dde7498f67f7f20d0b85a7fe6e7f8a8e3f95bd795165f36440d84434cef17f81697816030e3a86bf003272ca4868ab935fa0d465fb10637a706c9fd04fa4d4eb421e87aa6628a1d6174833af4dbfceab7fc5989550c0847bf27a5243e3b318fffde95d11cf507bc4e092180dd228df9f89d193a160d50c223309eae580a09f2e78855f17f8ad25c1f5814becdfca7948c7045b242e22d5efab676fe717eb34d2f0fcb77289c8b12caadd2377b7ccdcfab61900971b4a2ac132587174117428739ebb109fa133e483956bd499dfa530cbb3d1df42309f6f0755b043d85776807f25c3b4b518a2274671eb38f3e82ad4397377f85201771877a7cc43b838791a4d4d655ecadf03d8c1687e961c83dbb64c4d54d4b745a3abca7e381a00c6f51f48f6f7ce29ec656d89a1fab216675febedfe6b08c35add5aeb8cf6c0b226d309a222e1783e45e560f6ea64bf7706787f199116341f874321b52b1135830ab8979ae5546aad4ecfdac0045d4d15b4ed2fe26e484793db6aa61d40333355fa96ac5d1b8a5b5fc033475cba14f344007bfd82deb64b5c2eda6c0d528e4de0c21802d6b27554c0e2090f2c4ebd19208ce904cc02756b44bb2f8ebc1d37961c0957a4815487cbf76fdbe1f2b77b563a5663a00952c92579399f7acc1d41d9289ea0345f02f6f760ced802c8e0b14760a43dd04e6c371ceab9f5cb3617cd7ab31457b6821c6a4f34b243fba61f5c553e58ca253d5723382cf5d3f8357347ee2af2d48d86367f993e4b80b849dd3f50b2a89338af97e11b9a796ae2548856cce01334bca0c558e160f16e74699c7eaefd699acdf4d5019bf70f2d9c083f62b5254262f05c01dba59b1779502d3ad310a3039447d730a2cebb1242331a9849921c07336e985a844c55ce6129a650b3fd7cbda52a0cfdf0ef566f24adb8c959e442e9d5663fa16561b185cfb18355863d9b9f91c3829c4b0ba580668402a7a100fcd4a4e901b660863a9537f46e4f36446945e8f62e53e8282ccd7cfe14fca161d7daf592188eb2e11e275f616f4e692db8f318e8fb635d1a2582a3c8ad3050995f4cd810c04b23aaa6b26a2276133b443280f0526c9b1c016a7fdc052eff91d167b2813ec4f868c2da5fd9568da148e0ced0229f415716c1caddba880efa2017a82829125e734b96333da0b15340c149b50be86e3017bdaae3d80ae51c35df37e67684e81b5933cc7bfbe7ef0486d57e3901f9ae3eb1d592eb3fc244ce6555d3d69922dd3dcefecbba207fcbd5144a5ff97bf2216c046348a633284db59c10662350c7484ced762f353cd01a971c88d0eabb68eef856d585e8f5a684dc948b094754362ba8d606f85a755a27895ff5b6b4ea0387574afdf362a43b5535a2838b3f00f24612b9ae47e95f15d8b828efe56152d77871cfda0e0ff9936db3fe9c49f0d0f5ef9b71b81efd2e92d0166a4970254950a51235b66866d5402740adaa584e892572a6f46714704660cfbcaa56cc27cb538a908d1ee2fc7adaa674ce7a717f6e0481a2374f768fa3df8368bf4281bce6f9777f958f36502908d7c921ba745d0cc16b8a9a67f15c26d4b005788b1e90b19cc13f3e925fc14ef31d624c7500710d8f80e5bd4b14dd6bf70c210db6077c69d2d1751fe999442502d3542be12b732e3793e6c5e5c33a15a792ea344b0ed0be1ebb1d4e896e3e62d8d85afad2ae134dabc4f0d3fc719c6245d3bfafa42f0cdc9c0d5c4ba5c20b9da975bfd2f211bee8589ce1dc9652c2c3cee2a5e8a00049e42afe4403a905b60e0dcda1120d32ce36b91719d6308c93dfaa16c23a3b37e88194778be77d5e9e64b39477b76b4644ca32525b73bcf1fd9dc9af7776f2149e368053c58e1c93e1ec4575cb5e0b2da61d5e6b19436f3c095cdb4af4ddfc3364975700e5ff5275f9336b8cb3b959a1cd94f6b9c3a33f35e9ba4b7fea0466edf54e5e2e06a79bd170392c02b09749f3d111ef60baa8016dbf9ba581beab2c43d094add0d7fb7e16f198f3050641255f30a57c3045c1b51dd6e5d65613167596365b9c67aaa36fc89c44fbc4c8c96c328554a63a15511b04692651dd5e30780caf0dfce976c665e7b05fa6143914837bc82fb9d9dc5a1660e28a697e8a0a32eb8db109c5a045243d86ea11847fb64ec450112d77ecba32de418629a4ea2ae3f7ed3625b26def5c19813a6386ab4e43838c1fad3d4e92dfd7d3f98b3cf46d6e20304851899c59661e9639f3ff52fa023114907d930d74d605f3f7c5fd9ebb446d807e96cf3bf3517e369dc98f489026ec035a86f3719e1e50a48c0381f7fd2a7eea1d3a09ef7a0ba50b2ae28c2c955db4761ac005226ebc0c18d108e8ac066371be249b80eed88afee799411a50381cacb2d5164f0827720eb9d11b5cc548c2e145291dfbc5d4f70646dfbca077ce8ad3a3f8c627021295cbef70f5013c53e8fce32116e678a7b1dc535d43b429d330e9193f8de1a6c1da4353a86bc722ef1cffe59a012ff9c5f45b85e55ebdaa6b36a519c544ef8a86095e522d7dfbb9cac41e826fcc4bc676297141195f839ebcd8f64599fb15856960f97bc70d2336507d5060282d0988f354eb757c6f4b0ee77e2c0889e5336633ac28e2651c98e7f2fa4c163f8fc196b6798c1400c46710abed12a33a95afa56c7fe55de0b48cc984c80f6d98d212daeefdbcb457217b3962436e481d70967cab6b0943d5da59021ea9fbebf66e86943e029ef95d46d347b834098e1c8fb4c35d15945bc2e336f74c6c80430ad5fc4f5b9c6b41245ecf151eea90763ce3e09e050ae1c0925fa7a5ddbb7f210226cdcf9ee406041b73a5988646b90ed382d08e7a147078f9de025f5617017ec70f65dd25d7ccdb47ad7209474f4ca461ca46f0afe3cb405c3b72d320016d01b62def93fa4fa5a34df145c526fc497329a9e29ce17a929893f7beb417c88804418271dbeb51115821db4737b9cc467f190209649f543675defbf95640d20cdd124e85788b703213f4e99b4f36b74b5d44b67b7bc995ba133da4ae92f3a3db49c9ec039e0285001fc16760da0d07552e1ad621a4bac6d0b6409316e8a78273b79aa70df0e3ca024336d42c530550be8c68897bfa6a44f595bf5be48f8b25b48825ebcba815db4b3124522bc71e3970dbcafd479a6dab40f745a655cc3f9dd5aeb046d25baaaa160ba21f8b3c0292329ae107483c8caafcd70d041facfbf705dda95370a91879fc0ab9132e3b7b02cad69417178c4f34909df7a373bacb289476c25c901be7b52aabfdfcb3415ef3a565c7de2f0128c63e16984e2e98ad23e06b890f22894ebeceefdb472192e501e2c791232933b52ea4b9c4e9fe3654b8b1e08048fbcf58fada1cd49ca6658ce6ecd12102d90c81eac26090efa36514553abb298f7cf1a43bd6d473c1436b6be9e87445de726cfffb00c72de49db0585d677d5b245e15f9a53b4c258ba2fd67d38afd9ccd0d409c0bad675fcfbc1f4e5166fd1b29203274f758f55a266b8f7c9ec8ef1dd4913727fa392ce6b11baf902ea708adddd836982a609718c1dfb810aee6f21e47c27dc6b4eeebe5fc21aae6fe7d2908679c873e2aa45a1ee14cd7e10586216d5e17cdbfacd4bfedf00b7ba7fc46d4ac90667329ba76b4fcc6b991a55c9ed159a2fb9525c975bc0aa4a291fdde14a78b95adcde52fcb5a893ee7b4df6631b3ed5a9d9d9ebe36c7cedea777a9e67faad7f7004f0a820aeb6636f24685a15d12abc639aab2233b36584670c667f9e7a3fe1195d35b268d1052d5b4c9625dc963640c2c5e6c37d36acc31755b34f3ee2af7b7ba5dbe105322a3741c567c9edd817f6488fe69301b19481fe2e2cf74b19d4b224598b0ce1fa151fa1ef3d69aaeaab397a5eac72e0b969a09b85e3258e891db207393bc281afa93468b29b7e55cc2decf8292fc68e1a02b2faa873a846680992b37a548c8f724c0125027faa58be5b2836206cc34c063b50270d7fc968dab0d38072ca90bdef91119b72ab417d811d2f32bd41e6ab2bc5b5293f92f7a0a4f172bfea5403cd418db95e1a4232f78f6afd3d13978e206d85fa9ebe2abe444db065d03b6169bc9f0dbfc19237a74bd13c1ef844f839b20018fdaf1be6f1a171f6f3ce2205fdcce38330b88ceba0c5eae812e12be99993d265f806e61ec42c9527287967a1c3b27afb1edc35a5d17bb7f4d20ea708c62c9170ba2ab710f2d7f5dca7b33e0f9434cf0b6ee846fc8bc45d39f252ec682732fb090f46032491155d83a30894a259e037e57de7523481bcc2d704d8d728fbdf048df30f7e4861f62b8e63de47b3838b5062ccd2c125bc581024ea76bd4b1f53057f37d329f7861a2a70fd3b6d6fe252a1b892192ed75c585ab809f702e27e237c4aa2dc947585c2086eeaa29c3ff7e02cb7d3a0aa3a8156d2897daa9c45a2e28ba14fd40c8a3a058805e4b5b10641c3c25b9ab80cce83206b13a1e2bc362eb5ab7e0e677c01fc0486aa32862ad0afa4f1cc8496b961a0eec71c26ad107ead599d8ddd59d85adceb3ea442efcf8ed64f4c66547344dc81ef5b6ac102434395203f58d59656d41dcc192774d70f4f2964e304efde831126d402a240325e603347aa43626b5eb69b0", 0x2000, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x1, 0x1, 0x41a, 0x0, 0x0, 0x1, {0x0, 0x0, 0xfffffffffffffffe, 0x40a004fc, 0x0, 0x3, 0xfffffffc, 0x0, 0x0, 0x8000, 0x6, 0x0, 0xee01}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), 0x100}, 0x0) pselect6(0x87, &(0x7f0000000000)={0x2, 0x9000000000000000, 0x7f, 0x3, 0x0, 0x0, 0x0, 0x10000001}, 0x0, &(0x7f00000000c0)={0x3ff, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2, 0x7}, 0x0, 0x0) r8 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_ro(r8, 0x0, 0x275a, 0x0) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0}, 0x90) 11m9.821395757s ago: executing program 6 (id=1556): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) socket$nl_audit(0x10, 0x3, 0x9) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x75, 0x40082) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="5c0000000206050800000000000000000000000005000400000000000900020073797a30000000001400078008001340000000000800064000000000050005000000000005000100060000000d000300686173683a6d6163"], 0x5c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=ANY=[@ANYBLOB="44000003090605000000000000000000010000050900020073797a30000000000500010007000000080009400000000114000880100007800a001100aaaaaaaaaaaa00"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) 10m56.221093515s ago: executing program 5 (id=1600): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="b00000000002010400000000000000000700000608000940ffffffff08000440000000810800084000000003200001"], 0xb0}, 0x1, 0x0, 0x0, 0x8004}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006000600800a0000200002801c00068018"], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r2 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x235, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x1, 0x0, 0x0, r4}, 0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(0x0, r6, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f00000007c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x740, 0x120, 0x2f8, 0x440, 0x510, 0x2f8, 0x670, 0x670, 0x670, 0x670, 0x670, 0x6, 0x0, {[{{@ipv6={@private2, @loopback, [0xff000000, 0xffffffff, 0xffffff00, 0xff000000], [0xff000000, 0xffffff00, 0x0, 0xffffff00], 'vlan1\x00', 'veth1_virt_wifi\x00', {0xff}, {0xff}, 0x0, 0x3, 0x3, 0x14}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @inet=@rpfilter={{0x28}, {0x1}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x6, 0x7}}}, {{@ipv6={@remote, @local, [0x0, 0xffffffff], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11, 0x0, 0x0, 0x4}, 0x0, 0x198, 0x1d8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}, @common=@unspec=@conntrack3={{0xc8}, {{@ipv6=@remote, [], @ipv6=@private1, [0xffffffff, 0xff000000, 0xffffffff], @ipv4=@multicast2, [0x0, 0xffffffff, 0xffffffff, 0xffffffff], @ipv4=@empty, [0x0, 0x0, 0xff000000, 0xff], 0x0, 0x0, 0x42, 0x4e22, 0x4e24, 0x4e20, 0x4e24, 0x0, 0x23ccf3e9fd2b5143}, 0x0, 0x80, 0x0, 0x4e20, 0x4e24, 0x4e23}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0x100, 0x148, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@inet=@socket1={{0x28}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@empty, @ipv6=@private2, 0x0, 0xfe}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0xc}}}, {{@uncond, 0x0, 0x118, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@dst={{0x48}, {0x0, 0x0, 0x0, [0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x2]}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x7a0) prctl$PR_SET_NAME(0xf, &(0x7f0000000240)='\xf4\xaa\\k[sC\xae\xd6\x98\x9bY\nI}\xd8\xcc9K\xd7Z+\\\xf8\xdb\x84\xee\xa9\f>\xe4\x81\x88\x90_\xd4\r\xb83\x9e\x13B3\xfe\xcf\xccm\xfdO2\xd7\xa0DD4\x1b*\xdd\xb6\xcf\xacr\xabF\f\xb5\x11Vkp\"\xb1\xa8\xf0\x8d\x00\x18}3utO\x1bQ0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0x2, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x0, 0x0, &(0x7f0000000180)='GPL\x00', 0x8}, 0x94) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004c000078ac1414000a0101004414050300000000000000000a010101000000008903ce070200"/62, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='\\'], 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d77f1068", 0x9, 0xfffffffffffffffe) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="480000001000050400"/18, @ANYBLOB="ebffffffffffffff280012800b00010065"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r4, r3}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = dup(r6) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r6, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f00000010c0)="36260f01c5660f388148a22e0fc79f66150f01cabaf80c66b8a60a3b8366efbafc0ced0f79bf090064670f01ca0f01ca0f013e0200360f1811", 0x39}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0xffffffff, @loopback, 0xfffffffd}, {0xa, 0x0, 0x0, @remote}}}, 0x48) 10m55.176299106s ago: executing program 5 (id=1605): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000006c0)="0d18687da3e7f33aed145cf8ff2d1e5a18c0d5f9856f4824f41040f6987d0b531da10713ed151bc4867681f28e033aef683334d03864ed30590dd4ea64a20ecbbc1346c9f42510d91eec0632885b7da95ca85f4b1435c5c1e993a85257df5f19bdfc5e038a16e6a8aef907e347081fdb93cee93217e11f19cde423e6138bd1b79ee615527ccaf8049959ac6e32af46d777ccb8c26ca925f69590df13a81aee3213e80ba5cacf1f930b3cc49093d11594ef13325790b55efbdc2dd99ed1c3c609a49cc151870a", 0xc6}, {&(0x7f00000002c0)="9c811ff500139d7d28a5f0de630ec6041ed353d314e58721edf306c382ac611fe34479cb9e2585745ff3c61da74b06eb64f69a4e90d706178176dc53", 0x3c}, {&(0x7f0000000380)="3f82090ccda4f8ce1b08afd200c6075794cdd2e0021e32a0f6267447162a2085457cf687e74d142e85e9c4ac6eefcdaa493bcb54152b1339a38d3898707b77a9333cfb7bdc7c523ab4aa869c6db252e8e93bc14cfccfdedf9bbaed10dbc3c315aa", 0x61}], 0x3}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000c40)="5c5eafd3ae55a73702d6befaee97f47f4be65587e1fca708cee084691e4587d887a5eaab43ac5edc4886496910cd7a153cd84b93208c7b1a625b3ea990092389b19dab4f61e30ee60a4d7e51ffc9a5accbe20844356dd0ce192542d5e58d80657b3b5fb7a3d39337df9305959f29dc43fa3b00049e57dc568ac4b08be5ccd5fd9dade4f03370a8864cd94f1330572de34181127d2377", 0x96}], 0x1}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000001800)="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", 0x3aa}], 0x1}}], 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x2000) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0x2}, 0x1c) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 10m54.90202997s ago: executing program 5 (id=1606): r0 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000001d00)=@nl=@kern={0x10, 0x0, 0x0, 0x4000000}, 0xfffffffffffffdd9, 0x0}, 0x0) socket$kcm(0x29, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) socket(0x10, 0x3, 0x6) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/bus/input/devices\x00', 0x0, 0x0) r4 = epoll_create(0xc) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000080)) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000840)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x10, 0x6, 0x0, 0xffff8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x1, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xe, 0x80, 0xabf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x7, 0x0, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8000, 0x0, 0x10, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b], [0xffffffff, 0x1, 0x2000, 0x0, 0x4, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6be6, 0x0, 0x0, 0x80000004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x3, 0x0, 0x4, 0x0, 0xffeffffe, 0x0, 0x800005], [0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x9, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xdb2bb47c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x20], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcc5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x9, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x200000, 0x0, 0x320146f1, 0x4]}, 0x45c) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r5, 0xffffffffffffffff, 0x200000000000000) rt_sigpending(&(0x7f00000000c0), 0x8) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/cgroup', 0x70000, 0x0) r6 = socket$rxrpc(0x21, 0x2, 0xa) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newqdisc={0x2c, 0x24, 0xf0b, 0x20, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x0, 0xf}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x9}]}, 0x2c}}, 0x20000000) ftruncate(0xffffffffffffffff, 0x200004) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c) sendto$inet6(r8, &(0x7f0000000000)='\x00', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) 10m54.385634244s ago: executing program 35 (id=1556): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) socket$nl_audit(0x10, 0x3, 0x9) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x75, 0x40082) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="5c0000000206050800000000000000000000000005000400000000000900020073797a30000000001400078008001340000000000800064000000000050005000000000005000100060000000d000300686173683a6d6163"], 0x5c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=ANY=[@ANYBLOB="44000003090605000000000000000000010000050900020073797a30000000000500010007000000080009400000000114000880100007800a001100aaaaaaaaaaaa00"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) 10m53.095847662s ago: executing program 5 (id=1612): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) (fail_nth: 3) 10m46.848366876s ago: executing program 8 (id=1607): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) mprotect(&(0x7f00000c0000/0x2000)=nil, 0x2000, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f0000000140)={0x0, 0x202, &(0x7f0000000080)={&(0x7f0000000000)={0x20, 0x1411, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth1_to_team\x00'}) r2 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000400)={0x24, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0003020000000203"], 0x0, 0x0}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000080000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) r4 = eventfd(0x2) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000240)=r4) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000040)={0x1, r4}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x1) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0xc38, &(0x7f0000000080)=ANY=[]) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80045510, 0x0) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000000040)=0x7) 10m43.757271542s ago: executing program 8 (id=1628): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@newtaction={0x2a4, 0x30, 0x300, 0x71bd22, 0x25dfdbff, {}, [{0x4}, {0x28c, 0x1, [@m_bpf={0x2c, 0x6, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_csum={0x4c, 0x10, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x6, 0x4, 0x6}, 0x32}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}, @m_csum={0x1d4, 0x19, 0x0, 0x0, {{0x9}, {0x4}, {0x1a5, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ct={0x3c, 0x1b, 0x0, 0x0, {{0x7}, {0x14, 0x2, 0x0, 0x1, [@TCA_CT_MARK={0x8, 0x5, 0x7}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x2b}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}]}]}, 0x2a4}, 0x1, 0x0, 0x0, 0x4000810}, 0x20040850) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0xffa6, &(0x7f0000003700)={0x77359400}) 10m43.397218233s ago: executing program 8 (id=1629): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000006c0)="0d18687da3e7f33aed145cf8ff2d1e5a18c0d5f9856f4824f41040f6987d0b531da10713ed151bc4867681f28e033aef683334d03864ed30590dd4ea64a20ecbbc1346c9f42510d91eec0632885b7da95ca85f4b1435c5c1e993a85257df5f19bdfc5e038a16e6a8aef907e347081fdb93cee93217e11f19cde423e6138bd1b79ee615527ccaf8049959ac6e32af46d777ccb8c26ca925f69590df13a81aee3213e80ba5cacf1f930b3cc49093d11594ef13325790b55efbdc2dd99ed1c3c609a49cc151870a", 0xc6}, {&(0x7f00000002c0)="9c811ff500139d7d28a5f0de630ec6041ed353d314e58721edf306c382ac611fe34479cb9e2585745ff3c61da74b06eb64f69a4e90d706178176dc53", 0x3c}, {&(0x7f0000000380)="3f82090ccda4f8ce1b08afd200c6075794cdd2e0021e32a0f6267447162a2085457cf687e74d142e85e9c4ac6eefcdaa493bcb54152b1339a38d3898707b77a9333cfb7bdc7c523ab4aa869c6db252e8e93bc14cfccfdedf9bbaed10dbc3c315aa", 0x61}], 0x3}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000c40)="5c5eafd3ae55a73702d6befaee97f47f4be65587e1fca708cee084691e4587d887a5eaab43ac5edc4886496910cd7a153cd84b93208c7b1a625b3ea990092389b19dab4f61e30ee60a4d7e51ffc9a5accbe20844356dd0ce192542d5e58d80657b3b5fb7a3d39337df9305959f29dc43fa3b00049e57dc568ac4b08be5ccd5fd9dade4f03370a8864cd94f1330572de34181127d2377", 0x96}], 0x1}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000001800)="353a35d6094e4ee7d764b6993f65136c5d6b84d9b1324a0b25e094700c9a66f9181738098f32e3e48859c3878d53a9752474da0d6af299d849d48f2fa2c8c807d7a1521da940585790ff1e6f9da83e32b751d1af9cfac640c1361f5ae8b99c187dafe9ea854120f6eaab11e7fdeb3f2152ebdbc21520ca01f64bb821576deef4ed6696cdddc1768b5b4fbd68a687cb6ba52ecf5cc6f8f05062f26de19d6aaaeb6cbca00e46685f77d2b3e8dd9d0d099e799cd5a76c67ab283f790366f7f744508edc9e48fa101b89215bd330c4e706c1f09d781a5a50aef5e424a7a88b3241a338ca7411cda28aa167b5628b79e8a7d588efb69636181b9c54f6d296386c95f8a08e27d5792dcb20fa3b5b4f60c71f310b31bb1ab4a825c2dc10fac150a17d92bb51849d9eea53c78d427d8d1036dc906084046fcae09499c220ef50c2c7c475f392bc288eb5efb8032d1ade92e88e50a05a95dd5c6cbbdfb086fa53bca14d40c8c3f7149b39b16b7c7370978389366174db5fbc99dbe958f8c1690cd695dfbe6c384162a412c8d3cfd7cf223f9df4c67b92514111891f53d4e19826797302e1a87e7a627c52740bb3bd311771a68d349c0a68ef6f2a765f8220323add67b2b6695ca41adcda387a4264bcd94c8578a9ccca3b55ebcda45369b56068cfeec34abc2cbd94b9b12d057fa9d4328d57073f40e5ae64443e4a10ed400575bbd1168a170a0134b9ad28735dbd9603a9e417cce864f2141a92f57e1fdfcff4776f94a794d6db8d3e9e0ecc783956c7ab15a8d5639d3df1ac9da6057af913a563bd55b657f37cbf4cae2919aea6ff8a748eb4c036361b8866cc062bbad019f43d02b0c38bd6309f2baa53924466203ab8d00daaac4c9da846e645d64c10e47c32e9824e79ade4eeee7cbf71b1bb48f760800b04334745ab553dea12a85f0671eb07a4cc67ceaffa8269e0b052f25136cfb8a6b9327a2d165c42933642d3171ad00ebf0be485f5ed319021600a94072f251c8905a2451eba3ba7db2ec5fb8613463a796610629719166259ffa3261e06f09b5a69798b88848da9028ff7ed8a729c384374fce0f4f5cda3b61cc4d61da382c5708f26edb16e9b65d667ed61248dfbed35a6a886adec25361c17d9f30f94db7e3085440df135ddec94f3f01fe2e2f9edb9e19fd8ae0b93363f0dbadc858d8e0a93dea50e89b2d7674b7e0f813c38f70a87554f5d0b95b531ec006716207abc5c34bcf447f0e547516d2fa23e2871db3662c8fb30e93b939aaed219ca9ef4b30f79e3d27e1caece83168292a10c0abf24f5fe97ef6fd46045f6ee3fc3", 0x3aa}], 0x1}}], 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x2000) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 10m42.661295166s ago: executing program 8 (id=1631): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='\"\x00\x00\x00\x00\t'], 0x20) r2 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000380)=@urb_type_control={0x2, {0x1, 0x1}, 0x0, 0xe0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@deltclass={0x24, 0x29, 0x209, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xa, 0x9}, {0x1, 0x3}, {0xe, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000041}, 0x800) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000fddbdf250f000000080034000600000008000300", @ANYRES32=r1], 0x2c}}, 0x80) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x19) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000340)=ANY=[@ANYBLOB="b7000000df000000bfa300000000000007030000f4ffffff720af0fff8ffffff71a4f0ff000000005d040200000000001d400500000000004704000001ed000062030000000000f53e440000000000007a0a00fe00ffffffc3030000e1000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710e4d58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c500000057bd81cb2af0b176275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e5b5b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00c37dfca3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebba2c598b4fc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9a958f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f94fefe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a1074649c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c0dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6acdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c3bfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fed000000007baa5b6a686b50f0937f778af083e055f6138a757ebd0ed93517a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e70300000000000000fee18a22da19fcdb4c2890cda1f96b952511e34cb14ea4a10a6f1dbaa69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c25000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca485683252b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a0032f37ff559be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee07751532d5e7d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e2fa3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde20300accc5bd40a2968b59c93d35f8e42366fdef907000000f01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e015cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130b51d6c9b94c5513df2d85e8c01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933f638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb581012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef670000000000000000ba470bfe62fe2933082149d42e8a00000000000000003542591d17b5e8d9be772914cf4e3129e7929aa238bd99c3ddd895e33d8cf6c3d6cc883f0319aec94fb4cffde7a6d1fa1bcc03ead3912c2a68ca172adf3f9417207ea83d03a108d2ae15ee38c06dc98a0d1696b7c7fe142440776889154a93888972462439ae33b24c90e13c8f80d4e32716e9985e640bb88c6250d99c3443432d9760a57a9976e3b6286b4f7a4d2ea7c00d6b052726074b1becbd3529719523b6d74efc636c3f"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r4 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) mprotect(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x10) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x123a02, 0x0) syz_usb_ep_write$ath9k_ep2(r4, 0x83, 0x49, &(0x7f0000000100)=ANY=[]) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) 10m37.417137508s ago: executing program 36 (id=1612): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) (fail_nth: 3) 10m27.417680142s ago: executing program 37 (id=1631): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='\"\x00\x00\x00\x00\t'], 0x20) r2 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000380)=@urb_type_control={0x2, {0x1, 0x1}, 0x0, 0xe0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@deltclass={0x24, 0x29, 0x209, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xa, 0x9}, {0x1, 0x3}, {0xe, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000041}, 0x800) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000fddbdf250f000000080034000600000008000300", @ANYRES32=r1], 0x2c}}, 0x80) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x19) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r4 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) mprotect(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x10) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x123a02, 0x0) syz_usb_ep_write$ath9k_ep2(r4, 0x83, 0x49, &(0x7f0000000100)=ANY=[]) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) 9m47.929407455s ago: executing program 2 (id=1782): munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xffefefff}, {0x6, 0x2}]}, 0x10) sendmmsg(r0, &(0x7f0000000700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x44040050) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$DRM_IOCTL_VERSION(r2, 0xc0406400, &(0x7f0000000480)={0x8, 0x4, 0x4, 0x1000, &(0x7f0000001280)=""/4096, 0x0, 0x0, 0x0, 0x0}) 9m47.505177292s ago: executing program 2 (id=1785): r0 = io_uring_setup(0x1bbc, &(0x7f0000000c80)={0x0, 0x7675, 0x100, 0x3, 0xc8}) r1 = syz_io_uring_setup(0x5917, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0x0, 0x0, r0}, &(0x7f0000000100), &(0x7f0000000200)=0x0) syz_usb_connect(0x5, 0x7c5, &(0x7f0000000380)={{0x12, 0x1, 0x110, 0x8b, 0x1d, 0x4, 0x40, 0xdf6, 0x5c, 0x3f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7b3, 0x4, 0x2, 0x1, 0x40, 0xe, [{{0x9, 0x4, 0xe4, 0x5, 0x10, 0xff, 0xff, 0xff, 0x7, [@cdc_ecm={{0x7, 0x24, 0x6, 0x0, 0x0, 'Al'}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x7, 0x882c, 0x5}, [@ncm={0x6, 0x24, 0x1a, 0xda0}, @ncm={0x6, 0x24, 0x1a, 0x969f, 0x21}, @obex={0x5, 0x24, 0x15, 0x3}]}, @hid_hid={0x9, 0x21, 0x2, 0x3, 0x1, {0x22, 0xe51}}], [{{0x9, 0x5, 0x8, 0xc, 0x40, 0xa, 0x1, 0xa, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7f, 0x1}]}}, {{0x9, 0x5, 0xb, 0x8, 0x200, 0x9, 0x3, 0x8, [@generic={0x7e, 0xa, "374ed83941f05bfc20f938b7e58a6a4cd363a732907615f57e3f6f7f8f589d68a16d8c302d66fb09865ee1e3658441ee80149672bc8e09e6dbe1edbad11f05fc5aa67c7621108aed2eb63ccc0fdb205b7fb4a948f8585600dd831951be5aa9bd378e3b68f3dddafe0a22cbe2a3248aee0bb590b2e84ffa9ee486f72d"}]}}, {{0x9, 0x5, 0x9, 0x1, 0x40, 0x9, 0x4, 0xff, [@generic={0x9e, 0xe, "6d146a2116229b502cedf59e5279ff7e9feadde7bc0ca109829841d601b71da62190ab9984a1cc966779db4fe492d204ccf8a26c7849ed126b8aefb49883f47f0791be064095f6f77e99b29a08793381424bf50e76003a64117b027adecaf01e94ed0b58d1f1998cf67730b716c78c7b6353281df222feb7226ffe05cb160198e74d6d8382699e7456eada17088ba7d6c25474f1086f75de788eba6a"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x3ff, 0x5, 0x9, 0xd, [@generic={0x6b, 0x23, "24ff9288dc2be4e44f939f2a2fcdff87a3c9e2ff0a8003ac44d66020d315e444470b1c257f637858eeb77277a7fbf1d3e00b2f91cb550316676eb9c7a4dcd0c9cfed12b54a471a34ee8f712616ee6d7753f7f4f8f71de260bc2f61afb0d7a85df697e98c329d461bb1"}, @generic={0xc0, 0x31, "6cb23ffcb1adb7e7ed21662abb812a9707df05e8c56c6a8048fa3efc91e400d4e589bcc9e970c1bb542a839c92e91f2c002373f4ecf77e7fa8a9561420b39e78e078b38cdf750c14bbbd4a9418422744f01c40e5f3ead7e5aab11a0acc2e2af110c2f56766856860da6a6408334eb7a09474343488710b168736bc8c6d4acb7b1a0f1d98eca51d72b46e9ca8a1e2043906008d9ffefca4ec9145f1d68c80c988cb3223fff2206324bf122e82cd35a0f430fa1065058a8a0b26b9c6a51404"}]}}, {{0x9, 0x5, 0xa, 0x4, 0x8, 0x7, 0x1, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x9, 0x3}]}}, {{0x9, 0x5, 0x6, 0x0, 0x400, 0x9, 0x8, 0x36}}, {{0x9, 0x5, 0x7, 0x0, 0x200, 0x4, 0x6, 0x1}}, {{0x9, 0x5, 0xb, 0x0, 0x79f, 0x5, 0x5, 0x71, [@generic={0x87, 0xc, "99e43ac9b069662df85e75c79942340e8ad3bfe8f85158eb5fe41e1afbe3e4978a7699acaf0a756f999aec0e916600acab0238d6d3ec01b725e31d4d29cb36292304362c56f9228b57216ba2f15d5bf26e73ce360b4e9cc273490b3d3cc89ed6598f8a14e6386a86437d18447617f53b7ca081812e9e7036d29b0c855963a76363972412c5"}, @generic={0xfa, 0x9, "ef5dfd98e95c5011011336f285978b57330ffc80474f6fe98d6968da7e5fc4e3a8e41ab87f0dbf2facc93554852be314208db7f8fe067aa76d86f98fda390b80c139ab2cf0b89fea47df0f9ebe2a371e52a855605252f05eeef2c93b7ad28d1809567b2b78296be7a0efcd5b19204962ac4fe13d48fdb1fc5161cc2dda2edc08caca0b9ec37b41a9b5522c9962dfbdc1d83ec5f38ba8a572b51a425c209f72457f807780aaa29ad023ff6266181995b7e77b2160497b194f8778e12c31f7d80a735f4e6b4a48274996de15762e0615540b6828209865def900b60247dcaae6a8a0d1d22511301e891a6df2f74f94a07b32a46386471c9b91"}]}}, {{0x9, 0x5, 0x0, 0x2, 0x0, 0x5, 0x8, 0x7, [@generic={0xd4, 0x1, "823400055756aa569e86b6dd32213c7f69faf26ef26489857ea94ef91f1cd9eb3d0960537fa9c0065558b73aaf437863fdf90edb3bc2a7dd464a64fde37d6f31d5f5558157967632174dd468010659e04f46c4c4e429fd5a9f1ddd9141df8bb0b5b97b1c0a87bac92f1fb37a06acc0d96ba0dd259dcaa22871d726f1f4509c0dd67138db68420f0a4f28ca18c4ecf59ea01e0d3458bad7f919e8029ba955a7b7570038fdd1f7d96f3f175b3563a5938c7e69079b271b195b775a90f832a514f890afc4d773ebf6a057881af2fce0815d2f51"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x400, 0x4, 0x5, 0xf8}}, {{0x9, 0x5, 0x5, 0x10, 0x400, 0x30, 0x5, 0xc}}, {{0x9, 0x5, 0xa, 0x8, 0x400, 0x81, 0x5, 0x6, [@generic={0xf6, 0x9, "8b2f196afdbb1ad1d3553e6f224a3423d78180cda348fde740cd8032e82c4807ee21cd66274a55b05075426db8ae9e4343ede103833895114e9fbb5d7eeed0a2356acfeabdd7ab780c276846f2996c00d6d522eaaa8252e2adef8754b681d69a92792d5df87e2a6b16dc548c92e748ae2a47ef026f642e14d3c18f5746ce9416f1403c1b8ef9997e60568fdee035347656f7222541652fbcade7beaee2db5d3953a9b778964e0d7ea485f4134a93483686d93b244a03b805eb598e032861f01fa679150c819d4099e0d76d760074308d39d048aaeb788a7a96a3ddbd024955314ccec031f288dccdc32b927d2e213e50f9493d86"}, @generic={0x6d, 0x24, "26c6788680ab243241d76b11b53c2f54c00c1b22fb4c230f76460182a1fe67911a4697fe58048649928cc65f596850b433ee839fb145c0531c047c76edd0df3c6027a003cdc96c8b517d57b2ea39ddc4bdd16e7a623cc027a2f786eff170246155cdd52ea7b41c6c4fa865"}]}}, {{0x9, 0x5, 0x6, 0x10, 0x8, 0x1, 0x3, 0x4}}, {{0x9, 0x5, 0xb, 0x0, 0x40, 0x1, 0x2, 0x68}}, {{0x9, 0x5, 0x7, 0x13, 0x200, 0xf, 0xbc, 0x1}}, {{0x9, 0x5, 0xa, 0x0, 0x40, 0x5, 0xfa, 0x0, [@generic={0x41, 0x8, "4307a4479e13c9be4c5840de7d03bdc82d525be4a5b2a111913d2a2fa5c3c2581b4e145f32d84d2ea5947e16c8239c701d8c506a7e8ee705c7ea13f8d6e06f"}]}}]}}, {{0x9, 0x4, 0xfa, 0x6, 0x3, 0xff, 0xff, 0xff, 0x6, [], [{{0x9, 0x5, 0xb, 0x8, 0x400, 0x91, 0x2, 0xf8, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x0, 0x5}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x1f, 0x1ff}]}}, {{0x9, 0x5, 0x1, 0x0, 0x200, 0xff, 0xa, 0x40}}, {{0x9, 0x5, 0x8, 0x0, 0x10, 0x4, 0xa, 0x8}}]}}, {{0x9, 0x4, 0x13, 0x6, 0x0, 0xb1, 0x37, 0x71, 0x40}}, {{0x9, 0x4, 0x45, 0x8, 0x0, 0xe, 0xed, 0x86, 0x7, [@cdc_ncm={{0x8, 0x24, 0x6, 0x0, 0x1, "67de13"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x2, 0x40, 0x40}, {0x6, 0x24, 0x1a, 0x4, 0x14}, [@obex={0x5, 0x24, 0x15, 0x98}]}, @cdc_ecm={{0x9, 0x24, 0x6, 0x0, 0x0, "a7dcc3c5"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x7, 0x6}, [@mbim={0xc, 0x24, 0x1b, 0xe01, 0x7c22, 0xa, 0xe, 0x3, 0x3}]}]}}]}}]}}, &(0x7f0000000240)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x200, 0x81, 0xfc, 0x8, 0xff, 0x7}, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="052c050000"], 0x2, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x43e}}, {0xcd, &(0x7f0000000b80)=@string={0xcd, 0x3, "09d5829f57ae5ef1a8b8bce06e67e6345cb8ac8b29699baaf1ec52df9fde210263210fc6dad99b320b61632e639b044585cc5a35ea0ddf9891ff502646759affed073ee0b22b71acc106be62e9fa12d47d23d6ab7e5b6ee3c0a96aab53d76b6957542563b6880c6fa7eb437b84ffe74afbbc5151a1460e8d261aec4037588c59749a61d2d34f1b2d4a17a86fe8afb9568007ffa30676c54475fc65f49fe5ce9a6dbd51978e3fd6423adda166722b8c182815dccc91023a0a721238f5065e71f7419e9ee73472ed1e19bac3"}}]}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x8800, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = eventfd2(0x3, 0x801) ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f0000001340)={0x0, 0x0, 0x2, r5, 0x2}) ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f0000000080)={0x203, 0x0, 0x2, r5, 0x6}) r6 = syz_io_uring_setup(0x28c, &(0x7f0000000300)={0x0, 0xf2f6, 0x1, 0x0, 0x100026}, &(0x7f0000000140)=0x0, &(0x7f00000002c0)) syz_io_uring_submit(r7, r2, &(0x7f00000001c0)=@IORING_OP_MSG_RING={0x28, 0x0, 0x0, r6, 0x0, 0x0, 0xfffffffffffffd9b, 0x2}) io_uring_enter(r1, 0x2003, 0x0, 0x0, 0x0, 0x0) 9m44.249100028s ago: executing program 2 (id=1794): pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000080)={0x52d0, r0, 0x2}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = epoll_create1(0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000040)={0xa0000004}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r3, &(0x7f0000000140)={0xa0000001}) epoll_wait(r5, &(0x7f0000004140)=[{}, {}], 0x2, 0x4000005) r6 = syz_io_uring_setup(0x239, &(0x7f00000002c0)={0x0, 0x4533, 0x10100, 0x0, 0x0, 0x0, r2}, &(0x7f0000000080)=0x0, &(0x7f0000000340)=0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r6, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r9 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x21000, 0x0) ioctl$TIOCMIWAIT(r9, 0x545c, 0x300fff2) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x44b, 0x70bd2c, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x1840, 0x2619b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x3}]}}}]}, 0x3c}}, 0x0) 9m43.028915345s ago: executing program 2 (id=1800): syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) openat2(0xffffffffffffff9c, 0x0, &(0x7f00000002c0)={0x600101, 0x361eec5d78782aad, 0x1}, 0x18) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/softlockup_count', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x81) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x42, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@ipv4={""/10, ""/2, @private}, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@remote}}, &(0x7f0000000340)=0xe8) r3 = getgid() r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a78000000060a010400000000000000000200000038000480340001800a0001006d617463680000002400028008000100756470000e0003007acc6338a90000b03bd9000008000240000000000900010073797a30000000000900050073797a320000000014000580080001400000884c0800024000000003140000001100010000000000000000000200000a"], 0xa0}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) chown(&(0x7f0000000440)='./file0\x00', r2, r3) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x226) move_mount(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', r5, &(0x7f0000000100)='./file0\x00', 0x245) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) preadv(r0, &(0x7f0000001840)=[{&(0x7f0000001640)=""/16, 0x10}], 0x1, 0x2, 0x5) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r0, 0xc0884123, &(0x7f0000000080)={0x3, "d5deb277ac1b46c39e53e59bd32e65d02512216bd26bdc7f904e8709d84d1cd4dad96901ebb9eab9e11cce3a4919bfd1d64d46ce68e18e6ebc30fe12bd8b63e7", {0x70b, 0x200000006}}) r6 = syz_open_dev$media(&(0x7f0000000000), 0x1, 0x400) r7 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r7, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0x4}}, 0x10) listen(r7, 0x0) r8 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r8, &(0x7f0000002300)={&(0x7f0000000040)=@id={0x1e, 0x3, 0x0, {0x4e22, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x44}, 0x4) sendmsg$tipc(r8, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x3, {0x41}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x480c0}, 0x0) accept4(r7, 0x0, 0x0, 0x400000000000000) close(r6) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) syz_io_uring_setup(0x11ab, &(0x7f00000005c0)={0x0, 0xf0b9, 0x400, 0x3, 0x167}, &(0x7f0000000280), &(0x7f0000000380)) 9m41.842810325s ago: executing program 2 (id=1802): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) write$binfmt_script(r0, &(0x7f0000002040)={'#! ', './file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0'}, 0x1002) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 9m41.193989237s ago: executing program 2 (id=1805): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r0, 0x0, 0x0, 0x20004041, 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = socket(0x10, 0x3, 0x0) r3 = dup(r1) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) shmctl$SHM_STAT(0x0, 0xd, 0x0) r4 = memfd_create(&(0x7f00000008c0)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x208000, &(0x7f0000000140)=ANY=[@ANYRESHEX=r3, @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRES32, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c00f8e760cad78153216e4b618e6cca27ff2a911cac0dd10ba176ea3f7b1795630c3bd3763ce3b2ba6476b045fa50b9af731531a6229691148f18dcdd03a0ba029edc0000000900000000000000"], 0x3c, 0x0, 0x0) write$FUSE_NOTIFY_STORE(r5, &(0x7f0000000540)=ANY=[@ANYBLOB="2a0000000400000000000000000000000100000000000000ffffeffffffffbff02000000000000000000"], 0x2a) ftruncate(r4, 0x80079a0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20802, 0x0) ioctl$TIOCOUTQ(r6, 0x5411, &(0x7f0000000040)) sendfile(r4, r4, 0x0, 0x200001) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="29000000040000000000ff895400000b0400000100000000bb17130fafc385660890b3000000000000"], 0x29) ioctl$KVM_GET_MSR_INDEX_LIST(r3, 0xc004ae02, &(0x7f0000000200)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}) r7 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x23041, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000000)=0xe) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0xfffffff7, @mcast1, 0x7}, 0x1c) pselect6(0xfffffffffffffdc5, &(0x7f0000000040)={0xc, 0x0, 0xfffffffffffffff3, 0x0, 0x0, 0x3, 0x400000000000, 0x3fd}, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f00000004c0)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r9 = accept4(r2, 0x0, 0x0, 0x400) sendmsg$NFT_MSG_GETSETELEM(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) recvmsg$can_raw(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)=""/71, 0x47}], 0x1}, 0x10060) 9m40.444326446s ago: executing program 38 (id=1805): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r0, 0x0, 0x0, 0x20004041, 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = socket(0x10, 0x3, 0x0) r3 = dup(r1) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) shmctl$SHM_STAT(0x0, 0xd, 0x0) r4 = memfd_create(&(0x7f00000008c0)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x208000, &(0x7f0000000140)=ANY=[@ANYRESHEX=r3, @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRES32, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c00f8e760cad78153216e4b618e6cca27ff2a911cac0dd10ba176ea3f7b1795630c3bd3763ce3b2ba6476b045fa50b9af731531a6229691148f18dcdd03a0ba029edc0000000900000000000000"], 0x3c, 0x0, 0x0) write$FUSE_NOTIFY_STORE(r5, &(0x7f0000000540)=ANY=[@ANYBLOB="2a0000000400000000000000000000000100000000000000ffffeffffffffbff02000000000000000000"], 0x2a) ftruncate(r4, 0x80079a0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20802, 0x0) ioctl$TIOCOUTQ(r6, 0x5411, &(0x7f0000000040)) sendfile(r4, r4, 0x0, 0x200001) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="29000000040000000000ff895400000b0400000100000000bb17130fafc385660890b3000000000000"], 0x29) ioctl$KVM_GET_MSR_INDEX_LIST(r3, 0xc004ae02, &(0x7f0000000200)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}) r7 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x23041, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000000)=0xe) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0xfffffff7, @mcast1, 0x7}, 0x1c) pselect6(0xfffffffffffffdc5, &(0x7f0000000040)={0xc, 0x0, 0xfffffffffffffff3, 0x0, 0x0, 0x3, 0x400000000000, 0x3fd}, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f00000004c0)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r9 = accept4(r2, 0x0, 0x0, 0x400) sendmsg$NFT_MSG_GETSETELEM(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) recvmsg$can_raw(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)=""/71, 0x47}], 0x1}, 0x10060) 4m6.484942216s ago: executing program 9 (id=2969): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="f7", 0x1}], 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000000000000170100000300000001"], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000280)=""/57, 0x39}], 0x1}, 0x0) r2 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x6, 0x4040) getsockopt$IP_VS_SO_GET_DESTS(r2, 0x0, 0x484, &(0x7f0000000180)=""/92, &(0x7f0000000100)=0x5c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r3, 0x25, &(0x7f00000003c0)={0x2, 0x1, 0x0, 0xdf}) syz_usb_connect(0x2, 0x2d, &(0x7f0000000200)=ANY=[], 0x0) ioctl$SG_GET_PACK_ID(r3, 0x227c, &(0x7f0000000200)) 4m3.433772383s ago: executing program 9 (id=2986): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet(r0, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000006c0)="0d18687da3e7f33aed145cf8ff2d1e5a18c0d5f9856f4824f41040f6987d0b531da10713ed151bc4867681f28e033aef683334d03864ed30590dd4ea64a20ecbbc1346c9f42510d91eec0632885b7da95ca85f4b1435c5c1e993a85257df5f19bdfc5e038a16e6a8aef907e347081fdb93cee93217e11f19cde423e6138bd1b79ee615527ccaf8049959ac6e32af46d777ccb8c26ca925f69590df13a81aee3213e80ba5cacf1f930b3cc49093d11594ef13325790b55efbdc2dd99ed1c3c609a49cc151870a", 0xc6}, {&(0x7f00000002c0)="9c811ff500139d7d28a5f0de630ec6041ed353d314e58721edf306c382ac611fe34479cb9e2585745ff3c61da74b06eb64f69a4e90d706178176dc53", 0x3c}, {&(0x7f0000000380)="3f82090ccda4f8ce1b08afd200c6075794cdd2e0021e32a0f6267447162a2085457cf687e74d142e85e9c4ac6eefcdaa493bcb54152b1339a38d3898707b77a9333cfb7bdc7c523ab4aa869c6db252e8e93bc14cfccfdedf9bbaed10dbc3c315aa", 0x61}], 0x3}}, {{0x0, 0x0, &(0x7f0000000d40)=[{0x0}], 0x1}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000001800)="353a35d6094e4ee7d764b6993f65136c5d6b84d9b1324a0b25e094700c9a66f9181738098f32e3e48859c3878d53a9752474da0d6af299d849d48f2fa2c8c807d7a1521da940585790ff1e6f9da83e32b751d1af9cfac640c1361f5ae8b99c187dafe9ea854120f6eaab11e7fdeb3f", 0x6f}], 0x1}}], 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x2000) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0x2}, 0x1c) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 4m3.117195144s ago: executing program 9 (id=2987): r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000700)={0x2, @pix_mp={0x8, 0x96, 0x31384142, 0x1, 0x7, [{0xc00000, 0x7fff}, {0x5, 0x7}, {0x6, 0xd4}, {0x7, 0x3}, {0x8001}, {0x2, 0x3}, {0x736}, {0xfbb9, 0x6}], 0xbe, 0xf, 0x4, 0x0, 0x4}}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f00000001c0)={0x60, 0x3, &(0x7f0000001000/0x2000)=nil, &(0x7f000061d000/0x2000)=nil, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x25}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f00000001c0)={0x48, 0x4}) socket$kcm(0x29, 0x7, 0x0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r2, 0x0, &(0x7f00000010c0)={0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="00000100000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r2, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_usb_control_io(r2, &(0x7f0000000580)={0x2c, &(0x7f0000000400)={0x20, 0xe, 0x8e, {0x8e, 0xa, "02d9628dbd2ab57d5eee0c9f37195c6e3df95eb05a1fbc4b70668540a25d66bed73be8794d51e6bfde8df5a0bee72db5eeb166b8777c47eb1e2c7b015d4467739ed9fad0f6ba491dd1a469bdda95b986ce67d0d57b68a8ca703a2057fabf4288aebf70e546e7edccc2430a195c8ec13d7d20f39202de0b78b17a28222ff9643ff203c12b31ef80b78db5f22e"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x812}}, &(0x7f00000004c0)={0x0, 0xf, 0x40, {0x5, 0xf, 0x40, 0x5, [@wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x6c, 0x2, 0x3, 0x6}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x87, 0x6, 0x4}, @wireless={0xb, 0x10, 0x1, 0x2, 0x4e, 0x5, 0x95, 0xff81, 0x2}, @ext_cap={0x7, 0x10, 0x2, 0x1e, 0x1, 0x2, 0x5}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "9709a86e7f566b1691204d4992ce90e0"}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xe, 0x0, 0x5, 0x8, "7bfef21b", "ac4bf8a4"}}, &(0x7f0000000540)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7, 0x1, 0x6, 0x12, 0x93, 0x200, 0x5}}}, &(0x7f0000000b80)={0x84, &(0x7f0000000640)={0x20, 0x15, 0x9c, "fc7e9997198a305b807edd43d63f1afe95d0e34d7819026517ba12c227aa844fc33f0bc10163a40969317dbcae42df4d83595e83106fd3f9d8ee5643c2178d74faff182d2356c6b2707883dcbed42c61ac907700352cbce040833643a5829e929669a6ddefd7211cb8cf5808a814a449cf43f8350717bb64f68a2726b1574ef2dd92e9044401e97f793ee484af6a6eb3a11391a3035db40c1eaf82aa"}, &(0x7f00000005c0)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000800)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000840)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f0000000880)={0x20, 0x0, 0x8, {0x80, 0x80, [0xf000]}}, &(0x7f00000008c0)={0x40, 0x7, 0x2, 0x7}, &(0x7f0000000900)={0x40, 0x9, 0x1, 0x9}, &(0x7f0000000940)={0x40, 0xb, 0x2, "f8d9"}, &(0x7f0000000980)={0x40, 0xf, 0x2, 0x80}, &(0x7f00000009c0)={0x40, 0x13, 0x6}, &(0x7f0000000a00)={0x40, 0x17, 0x6, @local}, &(0x7f0000000a40)={0x40, 0x19, 0x2, '2\r'}, &(0x7f0000000a80)={0x40, 0x1a, 0x2, 0x7}, &(0x7f0000000ac0)={0x40, 0x1c, 0x1, 0x2}, &(0x7f0000000b00)={0x40, 0x1e, 0x1, 0xd3}, &(0x7f0000000b40)={0x40, 0x21, 0x1, 0xf6}}) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f0000000600)={0x1c, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x0, 0x0}) 3m59.97534582s ago: executing program 9 (id=3004): r0 = socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x108) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000006340)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x1, 0xc18da8, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x78, 0x0, 0x0, {0x0, 0x2, 0x0, {0x0, 0x4000000, 0x0, 0x100, 0x0, 0x0, 0x8000000, 0x8000, 0x200, 0x8000, 0x0, r3}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0xa4901, 0x0) write$tcp_congestion(r4, &(0x7f00000000c0)='lp\x00', 0xfffffdef) dup2(r4, r1) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000100)=0x5) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_clone(0x4190e491, 0x0, 0xffffffffffffff6d, 0x0, 0x0, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000040)={'ipvlan0\x00', &(0x7f0000000140)=@ethtool_pauseparam={0x8}}) 3m58.569365984s ago: executing program 9 (id=3007): sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x60, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x40000}]}, 0x60}, 0x1, 0x0, 0x0, 0x8c5}, 0x400c8c0) r0 = syz_open_dev$video4linux(&(0x7f0000000400), 0x108000001003ff, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x3008, 0xffffffffffffffff, 0x0, 0x0}) 3m57.257477556s ago: executing program 9 (id=3016): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000100)=0x4, 0x4) r1 = socket(0x10, 0x3, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) write$cgroup_pid(r0, &(0x7f0000000040), 0x12) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000640)=ANY=[@ANYRES32=0x0, @ANYRES32], 0x138}, 0x1, 0x0, 0x0, 0x4004050}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x137b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e20}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x40800) 3m55.908499659s ago: executing program 39 (id=3016): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000100)=0x4, 0x4) r1 = socket(0x10, 0x3, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) write$cgroup_pid(r0, &(0x7f0000000040), 0x12) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000640)=ANY=[@ANYRES32=0x0, @ANYRES32], 0x138}, 0x1, 0x0, 0x0, 0x4004050}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x137b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e20}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x40800) 6.214429973s ago: executing program 4 (id=3924): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r1, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a80)=@newtfilter={0x70, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xc, 0x4}, {}, {0xb, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0x44, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0x3, 0xa, 0x1, 0xed8, 0x7, 0x8c, 0x40, 0x925e, [{0x101, 0x6, 0x200, 0x3}]}}, @TCA_U32_INDEV={0x14, 0x8, 'veth0_to_hsr\x00'}, @TCA_U32_CLASSID={0x8, 0x1, {0xfff1, 0xb}}]}}]}, 0x70}}, 0x20040054) 5.832883047s ago: executing program 4 (id=3927): r0 = openat$sequencer2(0xffffff9c, &(0x7f0000000000), 0x22180, 0x0) ioctl$SNDCTL_SEQ_CTRLRATE(r0, 0xc0045103, &(0x7f0000000040)) 5.746865538s ago: executing program 4 (id=3929): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f00000000c0)="240000005a001f001007f4f9002304000a04f51108000400020100020800038005000000", 0x24) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmmsg(r5, &(0x7f0000000180), 0x400008a, 0x0) r6 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r6, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30000091) setsockopt$sock_attach_bpf(r6, 0x6, 0xd, &(0x7f0000000000), 0x4) setsockopt$sock_attach_bpf(r6, 0x1, 0x24, &(0x7f0000000000), 0x4) r7 = userfaultfd(0x509df34b049dab42) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000004c0)={0xaa, 0x30}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x3b, 0x2, [{0xfe}, {0xfbfffffa}]}}) 5.269448291s ago: executing program 0 (id=3935): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, &(0x7f0000000040)={0x100003ca, 0x1, 0xffffffffffffffec}, 0x0) 5.106340353s ago: executing program 0 (id=3937): unshare(0x22020600) r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x8a701, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000040)=0x32) 4.801358356s ago: executing program 0 (id=3941): write$dsp(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffff"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x10, 0x2, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) write$P9_RSTATu(r0, &(0x7f00000004c0)={0x232, 0x7d, 0x1, {{0x500, 0xf1, 0x0, 0x400, {0x0, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x04nodev{cvfox%\xff\xff\xff\x81\x02\x00\x00\x00\x00\x001\xff\xce\xbc\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00;Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x05\xb4\x94\xe1', 0x12, '\xcf\xc2\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3\x13\xf6\x00', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xd4\x89\xdad\x9a7\x00'}, 0x12c, 'odev-n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x232) 4.349464879s ago: executing program 1 (id=3947): openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x701240) unshare(0x22020400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f000000b5c0)={0x8, 0x3, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='syzkaller\x00'}, 0x90) 4.241536725s ago: executing program 7 (id=3948): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000e00)={@in6={{0xa, 0x40, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}}, 0x0, 0x0, 0x44, 0x0, "e541bd3d3aa6a2bf75e9671e8abcb31c134f3a9db8f52e7300fe6e079f35ac63186c7244fc3b3801e79f15ced9fd7e55d0345bce05c13ed90158fbdeb70322ea3188f81890e3db00"}, 0xd8) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x1f, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 4.173012229s ago: executing program 1 (id=3949): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@RTM_NEWMDB={0x38, 0x55, 0x2e5, 0x0, 0x2000000, {0x7, r2}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x0, 0x0, {@ip4=@empty}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040815}, 0x0) 3.997405483s ago: executing program 7 (id=3950): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'vlan0\x00', 0x0}) io_uring_register$IORING_REGISTER_PROBE(0xffffffffffffffff, 0x8, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x40, 0x24, 0xf0b, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x10, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x3b9aca00f}]}}]}, 0x40}}, 0x844) 3.467783938s ago: executing program 4 (id=3951): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=@newlink={0x34, 0x10, 0x1, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21a8}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}]}, 0x34}}, 0x0) 2.972103776s ago: executing program 1 (id=3952): openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000021c0)='/proc/asound/timers\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000000180)={0x2020}, 0x2024) 2.911682524s ago: executing program 3 (id=3953): r0 = openat$sequencer2(0xffffff9c, &(0x7f0000000000), 0x22180, 0x0) ioctl$SNDCTL_SEQ_CTRLRATE(r0, 0xc0045103, &(0x7f0000000040)) 2.911531382s ago: executing program 7 (id=3954): sched_setscheduler(0x0, 0x2, 0x0) unshare(0x8000400) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000016c0), 0x121040, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r0, 0x80044d00, 0x0) 2.882261703s ago: executing program 4 (id=3955): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000a80)={0x0, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd1l,'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r3) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x8000, 0x0) getdents64(r4, &(0x7f0000000f80)=""/4096, 0x1000) 2.774790749s ago: executing program 7 (id=3956): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) bind$can_j1939(r1, &(0x7f0000000000)={0x1d, r2, 0x0, {0x1, 0x1}, 0x2}, 0x18) connect$can_j1939(r1, &(0x7f00000010c0)={0x1d, r2, 0x1, {0x0, 0x0, 0x4}, 0xfe}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r2, {0xfffd, 0xffeb}, {0xa, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) 2.771025218s ago: executing program 3 (id=3957): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4e1}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}]}}}]}, 0x5c}}, 0x0) 2.717445381s ago: executing program 0 (id=3958): socket(0x10, 0x803, 0x0) socket$tipc(0x1e, 0x2, 0x0) r0 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0xa3d9, 0x400, 0x3, 0x288}, &(0x7f0000000780)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x800}}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) 2.533435426s ago: executing program 3 (id=3959): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000003b0007010000000000000000037c00000400fc800c00018006"], 0x34}}, 0xc000) 2.44245528s ago: executing program 0 (id=3960): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) ptrace$setregset(0x4205, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2663}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x2f, &(0x7f0000000240)=""/202, &(0x7f0000000340)=0xca) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, 0x0, 0x4080) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r3, &(0x7f0000002280)={&(0x7f0000001e40)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="b005000000000000290000003600000000b2"], 0x5b0}, 0x20008001) sendmsg$inet6(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000022c0)="f14889c2ad234ad6f0a71da72859c7c1e176134eff431253493482c723f8633d838bf127adff9f48a8854702b889321dfefd5644a03e0e41fb1cd1e442ac39d59aa0370071b34de016c447989af4c7d374e269dcbc1ce5f7083363d5bb2641018094b1721358f7a6c82f35dd9ed03c7be3fc46e5ef7b1fde49376ecde0494076cbe41c8292de99cc323303fda797e0704d3143999a0f53c8c056f2d7c2614c1bd977cc3e42e07548870d6bf096bf0369ee6a3f85cb27ec069f135e88005eb6147c3c08e1c787c9b5f9579653b876d44f3eb55573068fd1355b6fb755d1a72cb8eddfb7928f40f81e88e41bd2b3477299f540275d5107cd0dcb493a6f84ddbb9b43a60169c9ce7abb46e2d65a662a4e48cfafe180fbad39ee09548985149d100a6df90948f173ee8d7884fe5a916395d9631d7c55a09db75724229f3f492aca7c60e7c0984e5e05d555248874628cf294c6e1ad720e6f60662754e716d8e7f27b1321776768a8e4fd3abbeb3a23252a5e08b1f6b6e407cc69b8ed030f713f698db531f40f6082fce8f82eb6b90d7dcb33bd3cbcbc797d5597c444173c4455da38ffd93a45d756d158003c61c9d6e7e45a127a457172ccbbe9f2eadd4beb591f59ee37e3f23e858241463bb1d55b7ca1e19b84d1b077c7d6c3f942899a63dca8d63034da7314", 0x1e5}], 0x1}, 0x20000044) 2.261438875s ago: executing program 3 (id=3961): r0 = fsopen(&(0x7f0000000100)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r2, 0x0, 0x0) 1.684968839s ago: executing program 7 (id=3962): syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r0 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5886, 0x0, 0x0, 0x1}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) 1.67151134s ago: executing program 3 (id=3963): bpf$ENABLE_STATS(0x20, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000440)=ANY=[@ANYBLOB='d'], 0x64}, 0x1, 0x0, 0x0, 0x4000401}, 0x10044084) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10) sendmmsg$inet(r0, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) 1.375578242s ago: executing program 4 (id=3964): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'vxcan1\x00'}) socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x2000000000000001, 0x0, 0x2, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x57, 0xc2}}}}}}, 0x0) unshare(0x2c020400) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(0xffffffffffffffff, 0xc0984124, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000003400)=@base={0x1c, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x48) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) 1.185373827s ago: executing program 3 (id=3965): prlimit64(0x0, 0xe, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_io_uring_setup(0x10d, &(0x7f0000000980)={0x0, 0x5885, 0x80, 0x10000080, 0x4}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) 925.377121ms ago: executing program 7 (id=3966): r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) prlimit64(r0, 0xe, &(0x7f0000000140)={0x800, 0x20000008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000180)={0x0, 0xb9b, 0x10, 0x3, 0x3}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000040)={r4, r4, r4}, 0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={'sha224\x00'}}) 697.595203ms ago: executing program 1 (id=3967): r0 = openat$sequencer2(0xffffff9c, &(0x7f0000000000), 0x22180, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f00000002c0), 0xed) ioctl$SNDCTL_SEQ_CTRLRATE(r0, 0xc0045103, &(0x7f0000000040)) 469.658503ms ago: executing program 1 (id=3968): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, r0, 0x0, 0x4, 0xfffffffffffffffe) 101.47017ms ago: executing program 0 (id=3969): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0xd0f, 0x70bd25, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8004004}, 0x44080) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffe0, 0xa}, {0x2, 0x10}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0xc051}, 0x4800) 0s ago: executing program 1 (id=3970): r0 = socket(0x2b, 0x80801, 0x1) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x4, 0x9, @local, 0x2}, 0x1c) kernel console output (not intermixed with test programs): 1319][ T5938] usb 4-1: Manufacturer: syz [ 979.823621][ T5938] usb 4-1: SerialNumber: syz [ 979.852094][ T5938] usb 4-1: config 0 descriptor?? [ 979.885285][T19438] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 979.915077][ T5938] kvaser_usb 4-1:0.89: error -ENODEV: Cannot get usb endpoint(s) [ 980.998443][T19469] FAULT_INJECTION: forcing a failure. [ 980.998443][T19469] name failslab, interval 1, probability 0, space 0, times 0 [ 981.197953][T19469] CPU: 1 UID: 0 PID: 19469 Comm: syz.4.3216 Not tainted 6.16.0-rc4-syzkaller-00324-g1f988d0788f5 #0 PREEMPT(full) [ 981.197975][T19469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 981.197984][T19469] Call Trace: [ 981.197991][T19469] [ 981.197998][T19469] dump_stack_lvl+0x189/0x250 [ 981.198019][T19469] ? __pfx____ratelimit+0x10/0x10 [ 981.198043][T19469] ? __pfx_dump_stack_lvl+0x10/0x10 [ 981.198060][T19469] ? __pfx__printk+0x10/0x10 [ 981.198089][T19469] should_fail_ex+0x414/0x560 [ 981.198114][T19469] should_failslab+0xa8/0x100 [ 981.198135][T19469] kmem_cache_alloc_noprof+0x73/0x3c0 [ 981.198151][T19469] ? skb_clone+0x212/0x3a0 [ 981.198174][T19469] skb_clone+0x212/0x3a0 [ 981.198195][T19469] __netlink_deliver_tap+0x404/0x850 [ 981.198221][T19469] ? netlink_deliver_tap+0x2e/0x1b0 [ 981.198239][T19469] netlink_deliver_tap+0x19c/0x1b0 [ 981.198257][T19469] netlink_sendskb+0x68/0x140 [ 981.198273][T19469] netlink_rcv_skb+0x28c/0x470 [ 981.198291][T19469] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 981.198308][T19469] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 981.198333][T19469] ? netlink_deliver_tap+0x2e/0x1b0 [ 981.198349][T19469] ? netlink_deliver_tap+0x2e/0x1b0 [ 981.198370][T19469] netlink_unicast+0x75b/0x8d0 [ 981.198391][T19469] netlink_sendmsg+0x805/0xb30 [ 981.198415][T19469] ? __pfx_netlink_sendmsg+0x10/0x10 [ 981.198434][T19469] ? aa_sock_msg_perm+0x94/0x160 [ 981.198456][T19469] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 981.198469][T19469] ? __pfx_netlink_sendmsg+0x10/0x10 [ 981.198487][T19469] __sock_sendmsg+0x21c/0x270 [ 981.198502][T19469] ____sys_sendmsg+0x505/0x830 [ 981.198525][T19469] ? __pfx_____sys_sendmsg+0x10/0x10 [ 981.198549][T19469] ? import_iovec+0x74/0xa0 [ 981.198568][T19469] ___sys_sendmsg+0x21f/0x2a0 [ 981.198588][T19469] ? __pfx____sys_sendmsg+0x10/0x10 [ 981.198630][T19469] ? __fget_files+0x2a/0x420 [ 981.198648][T19469] ? __fget_files+0x3a0/0x420 [ 981.198673][T19469] __x64_sys_sendmsg+0x19b/0x260 [ 981.198693][T19469] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 981.198718][T19469] ? __pfx_ksys_write+0x10/0x10 [ 981.198732][T19469] ? rcu_is_watching+0x15/0xb0 [ 981.198752][T19469] ? do_syscall_64+0xbe/0x3b0 [ 981.198768][T19469] do_syscall_64+0xfa/0x3b0 [ 981.198781][T19469] ? lockdep_hardirqs_on+0x9c/0x150 [ 981.198814][T19469] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 981.198827][T19469] ? clear_bhb_loop+0x60/0xb0 [ 981.198862][T19469] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 981.198876][T19469] RIP: 0033:0x7fb6cf58e929 [ 981.198891][T19469] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 981.198905][T19469] RSP: 002b:00007fb6d0388038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 981.198928][T19469] RAX: ffffffffffffffda RBX: 00007fb6cf7b5fa0 RCX: 00007fb6cf58e929 [ 981.198944][T19469] RDX: 0000000000000090 RSI: 0000200000000100 RDI: 0000000000000003 [ 981.198958][T19469] RBP: 00007fb6d0388090 R08: 0000000000000000 R09: 0000000000000000 [ 981.198974][T19469] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 981.198986][T19469] R13: 0000000000000000 R14: 00007fb6cf7b5fa0 R15: 00007fb6cf8dfa28 [ 981.199022][T19469] [ 981.835366][ T10] usb 4-1: USB disconnect, device number 57 [ 983.633520][T19504] batadv1: entered promiscuous mode [ 984.246223][T19516] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 984.271833][T19516] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 984.337525][T19516] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 984.351992][T19516] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 985.434353][T19533] netlink: 372 bytes leftover after parsing attributes in process `syz.3.3231'. [ 986.148978][T19544] program syz.1.3238 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 986.263610][T19546] syz.4.3239 (19546): drop_caches: 2 [ 986.614267][T19555] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 986.656497][T19555] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 987.098929][T19570] openvswitch: netlink: Flow key attr not present in new flow. [ 987.145032][T19570] netlink: 'syz.4.3243': attribute type 10 has an invalid length. [ 987.257165][T19576] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3247'. [ 987.284141][T19576] sch_tbf: burst 88 is lower than device veth11 mtu (1514) ! [ 987.303070][T19576] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3247'. [ 988.057071][T19590] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 988.196329][T19596] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3251'. [ 988.300068][T19594] vivid-001: ================= START STATUS ================= [ 988.344764][T19594] vivid-001: Radio HW Seek Mode: Bounded [ 988.360919][T19600] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3253'. [ 988.387873][T19594] vivid-001: Radio Programmable HW Seek: false [ 988.409552][T19594] vivid-001: RDS Rx I/O Mode: Block I/O [ 988.546873][T19594] vivid-001: Generate RBDS Instead of RDS: false [ 988.551061][T19602] RDS: rds_bind could not find a transport for fe80::a, load rds_tcp or rds_rdma? [ 988.611526][T19594] vivid-001: RDS Reception: true [ 988.616549][T19594] vivid-001: RDS Program Type: 0 inactive [ 988.644314][T19594] vivid-001: RDS PS Name: inactive [ 988.729358][T19594] vivid-001: RDS Radio Text: inactive [ 988.770101][T19594] vivid-001: RDS Traffic Announcement: false inactive [ 988.785069][T19594] vivid-001: RDS Traffic Program: false inactive [ 988.814510][T19594] vivid-001: RDS Music: false inactive [ 988.823286][T19594] vivid-001: ================== END STATUS ================== [ 989.414710][T19616] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3258'. [ 989.485369][T19622] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 989.494014][T19623] sch_tbf: burst 88 is lower than device veth19 mtu (1514) ! [ 989.499267][T19616] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3258'. [ 989.566756][T19622] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 989.620465][T19625] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3260'. [ 989.658636][T19625] netlink: 48 bytes leftover after parsing attributes in process `syz.7.3260'. [ 989.885311][T19630] binder: BINDER_SET_CONTEXT_MGR already set [ 989.932567][T19630] binder: 19629:19630 ioctl 4018620d 200000000040 returned -16 [ 990.004386][T19630] syz.7.3262 (19630): drop_caches: 2 [ 990.992773][T19649] openvswitch: netlink: Flow key attr not present in new flow. [ 991.069018][T19649] netlink: 'syz.7.3269': attribute type 10 has an invalid length. [ 991.551594][T19656] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3271'. [ 991.616379][T19656] sch_tbf: burst 88 is lower than device veth21 mtu (1514) ! [ 991.643690][T19656] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3271'. [ 992.744085][T19666] binder: 19665:19666 ioctl c00c620f 200000000500 returned -22 [ 992.832437][T19671] binder: BINDER_SET_CONTEXT_MGR already set [ 992.839163][T19671] binder: 19670:19671 ioctl 4018620d 200000000040 returned -16 [ 992.884598][T19671] syz.4.3275 (19671): drop_caches: 2 [ 993.015005][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.025884][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.072210][T19676] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3276'. [ 994.320167][ T5938] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 994.485627][ T5938] usb 2-1: Using ep0 maxpacket: 16 [ 994.521735][ T5938] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 994.560054][ T5938] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 994.602174][ T5938] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 994.627155][T19704] FAULT_INJECTION: forcing a failure. [ 994.627155][T19704] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 994.663447][ T5938] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 994.691216][ T5938] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 994.722025][ T5938] usb 2-1: Product: syz [ 994.727503][T19704] CPU: 1 UID: 0 PID: 19704 Comm: syz.3.3287 Not tainted 6.16.0-rc4-syzkaller-00324-g1f988d0788f5 #0 PREEMPT(full) [ 994.727537][T19704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 994.727549][T19704] Call Trace: [ 994.727558][T19704] [ 994.727567][T19704] dump_stack_lvl+0x189/0x250 [ 994.727596][T19704] ? __pfx____ratelimit+0x10/0x10 [ 994.727627][T19704] ? __pfx_dump_stack_lvl+0x10/0x10 [ 994.727650][T19704] ? __pfx__printk+0x10/0x10 [ 994.727676][T19704] ? __might_fault+0xb0/0x130 [ 994.727711][T19704] should_fail_ex+0x414/0x560 [ 994.727744][T19704] _copy_from_user+0x2d/0xb0 [ 994.727769][T19704] ___sys_sendmsg+0x158/0x2a0 [ 994.727797][T19704] ? __pfx____sys_sendmsg+0x10/0x10 [ 994.727866][T19704] ? __might_fault+0xb0/0x130 [ 994.727892][T19704] __sys_sendmmsg+0x227/0x430 [ 994.727924][T19704] ? __pfx___sys_sendmmsg+0x10/0x10 [ 994.727947][T19704] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 994.727993][T19704] ? ksys_write+0x22a/0x250 [ 994.728018][T19704] ? __pfx_ksys_write+0x10/0x10 [ 994.728038][T19704] ? rcu_is_watching+0x15/0xb0 [ 994.728067][T19704] __x64_sys_sendmmsg+0xa0/0xc0 [ 994.728095][T19704] do_syscall_64+0xfa/0x3b0 [ 994.728114][T19704] ? lockdep_hardirqs_on+0x9c/0x150 [ 994.728132][T19704] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 994.728151][T19704] ? clear_bhb_loop+0x60/0xb0 [ 994.728174][T19704] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 994.728194][T19704] RIP: 0033:0x7f9d6b78e929 [ 994.728211][T19704] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 994.728228][T19704] RSP: 002b:00007f9d6c5d9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 994.728248][T19704] RAX: ffffffffffffffda RBX: 00007f9d6b9b5fa0 RCX: 00007f9d6b78e929 [ 994.728262][T19704] RDX: 00000000000003ef RSI: 0000200000000180 RDI: 0000000000000003 [ 994.728275][T19704] RBP: 00007f9d6c5d9090 R08: 0000000000000000 R09: 0000000000000000 [ 994.728287][T19704] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 994.728298][T19704] R13: 0000000000000000 R14: 00007f9d6b9b5fa0 R15: 00007f9d6badfa28 [ 994.728326][T19704] [ 994.747859][ T5938] usb 2-1: Manufacturer: syz [ 995.315347][ T5938] usb 2-1: SerialNumber: syz [ 995.800343][T19711] netlink: 'syz.3.3289': attribute type 10 has an invalid length. [ 995.834476][ T5938] usb 2-1: 2:1 : format type 0 is detected, processed as PCM [ 996.638043][T19701] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 996.646996][T19701] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 996.655981][ T5938] usb 2-1: 2:1: cannot get freq at ep 0x82 [ 996.788454][ T5938] usb 2-1: USB disconnect, device number 4 [ 996.907794][ T6140] udevd[6140]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 997.198051][T19739] ptrace attach of "./syz-executor exec"[13135] was attempted by " /dev/nullb0 ifi 3 @   dctcp-reno [ 997.872144][T19752] batadv1: entered promiscuous mode [ 998.195547][T19756] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3301'. [ 999.849768][T19775] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3307'. [ 1000.288590][T19777] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3309'. [ 1000.490076][T19788] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 1000.550425][T19788] netlink: 'syz.1.3308': attribute type 10 has an invalid length. [ 1000.622734][T19787] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3311'. [ 1000.786325][ T30] audit: type=1326 audit(1751816505.810:1423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19792 comm="syz.0.3314" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f267278e929 code=0x0 [ 1000.960750][ T24] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 1001.101504][T19799] netlink: 'syz.0.3314': attribute type 7 has an invalid length. [ 1001.245142][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 1001.259399][ T24] usb 4-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1001.285132][ T24] usb 4-1: config 0 interface 0 altsetting 64 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1001.304562][ T24] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1001.316374][ T24] usb 4-1: New USB device found, idVendor=5543, idProduct=0045, bcdDevice= 0.00 [ 1001.329128][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1001.401157][ T24] usb 4-1: config 0 descriptor?? [ 1002.055021][T19791] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1002.084489][T19791] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1002.585841][T19808] bridge7: entered promiscuous mode [ 1002.660477][ T24] usb 4-1: string descriptor 0 read error: -71 [ 1002.677053][ T24] uclogic 0003:5543:0045.0033: failed retrieving string descriptor #200: -71 [ 1002.690840][ T24] uclogic 0003:5543:0045.0033: failed retrieving pen parameters: -71 [ 1002.725676][ T24] uclogic 0003:5543:0045.0033: failed probing pen v2 parameters: -71 [ 1002.746004][ T24] uclogic 0003:5543:0045.0033: failed probing parameters: -71 [ 1002.807337][ T24] uclogic 0003:5543:0045.0033: probe with driver uclogic failed with error -71 [ 1002.947167][ T24] usb 4-1: USB disconnect, device number 59 [ 1003.737414][ T24] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 1003.902581][ T24] usb 4-1: config 0 has no interfaces? [ 1003.910934][ T24] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1003.943684][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1004.011809][ T24] usb 4-1: Product: syz [ 1004.020468][ T24] usb 4-1: Manufacturer: syz [ 1004.028887][ T24] usb 4-1: SerialNumber: syz [ 1004.044374][ T24] usb 4-1: config 0 descriptor?? [ 1004.120232][T19835] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3325'. [ 1004.624752][ T24] usb 4-1: USB disconnect, device number 60 [ 1004.691257][T19835] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3325'. [ 1005.689887][ T5848] usb 4-1: new full-speed USB device number 61 using dummy_hcd [ 1005.852868][ T5848] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1005.897100][ T5848] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFC, changing to 0x8C [ 1005.921421][T19854] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 1005.981025][T19854] netlink: 'syz.1.3329': attribute type 10 has an invalid length. [ 1006.018553][ T5848] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 1006.037621][ T5848] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1006.059054][ T5848] usb 4-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 1006.069114][ T5848] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1006.087370][ T5848] usb 4-1: Product: syz [ 1006.116278][ T5848] usb 4-1: Manufacturer: syz [ 1006.129382][ T5848] usb 4-1: SerialNumber: syz [ 1006.175329][ T5848] usb 4-1: config 0 descriptor?? [ 1006.202185][ T5848] xbox_remote_probe: Unexpected endpoint_in [ 1006.942373][T19876] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3336'. [ 1006.986967][T19876] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3336'. [ 1007.054918][ T5922] usb 4-1: USB disconnect, device number 61 [ 1007.283136][ T164] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1007.297799][ T164] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1008.033859][T19906] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3348'. [ 1008.092267][T19906] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3348'. [ 1008.365327][T19911] batadv1: entered promiscuous mode [ 1008.849828][T19920] vivid-007: ================= START STATUS ================= [ 1008.887704][T19920] vivid-007: Enable Output Cropping: true [ 1008.928548][T19920] vivid-007: Enable Output Composing: true [ 1008.958506][T19920] vivid-007: Enable Output Scaler: true [ 1009.029083][T19920] vivid-007: Tx RGB Quantization Range: Automatic [ 1009.103575][T19920] vivid-007: Transmit Mode: HDMI [ 1009.210263][T19920] vivid-007: Hotplug Present: 0x00000000 [ 1009.215999][T19920] vivid-007: RxSense Present: 0x00000000 [ 1009.336356][T19920] vivid-007: EDID Present: 0x00000000 [ 1009.403220][T19920] vivid-007: ================== END STATUS ================== [ 1009.765244][T19936] syz.1.3359 (19936): drop_caches: 2 [ 1010.059070][T19946] netlink: 'syz.1.3362': attribute type 29 has an invalid length. [ 1010.320389][T19954] netlink: 'syz.1.3362': attribute type 29 has an invalid length. [ 1011.306948][T19975] syz.3.3372 (19975): drop_caches: 2 [ 1011.416049][T19979] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3374'. [ 1011.660308][ T24] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 1011.810266][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 1011.819988][ T5958] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 1011.833076][ T24] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1011.868677][ T24] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1011.897702][ T24] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1011.915659][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1011.940603][ T24] usb 2-1: Product: syz [ 1011.955468][ T24] usb 2-1: Manufacturer: syz [ 1011.965888][ T24] usb 2-1: SerialNumber: syz [ 1011.985371][ T5958] usb 4-1: Using ep0 maxpacket: 32 [ 1012.007107][ T5958] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 1012.030019][ T5958] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1012.070259][ T5958] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1012.079363][ T5958] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1012.109936][ T5958] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1012.130278][ T5958] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1012.159979][ T5958] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1012.179488][ T5958] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1012.231312][ T5958] usb 4-1: config 0 descriptor?? [ 1012.307733][ T24] usb 2-1: 0:2 : does not exist [ 1012.368078][ T24] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 1012.485991][ T5958] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 62 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1012.540205][ T24] usb 2-1: USB disconnect, device number 5 [ 1012.779602][ T5958] usb 4-1: USB disconnect, device number 62 [ 1012.928725][ T5958] usblp0: removed [ 1012.944675][T19992] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3375'. [ 1012.956026][ T8407] udevd[8407]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1012.980940][T19992] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3375'. [ 1013.279916][ T5958] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 1013.462330][ T5958] usb 4-1: Using ep0 maxpacket: 32 [ 1013.491503][ T5958] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 1013.526867][ T5958] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1013.555743][ T5958] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1013.595287][ T5958] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1013.645264][ T5958] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1013.668565][ T5958] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1013.686828][ T5958] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1013.696864][ T5958] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1013.715929][ T5958] usb 4-1: config 0 descriptor?? [ 1014.001897][ T5958] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 63 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1014.200990][ T5848] usb 4-1: USB disconnect, device number 63 [ 1014.227423][ T5848] usblp0: removed [ 1014.658978][T20028] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3388'. [ 1014.857436][T20028] loop8: detected capacity change from 0 to 7 [ 1014.868963][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1014.878402][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 1014.890061][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1014.899362][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 1014.907496][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1014.916788][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 1014.930142][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1014.939359][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 1014.950970][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1014.960247][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 1014.968506][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1014.977719][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 1014.988114][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1014.997350][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 1015.005530][ T8407] ldm_validate_partition_table(): Disk read failed. [ 1015.025627][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1015.035011][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 1015.043787][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1015.052958][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 1015.063246][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1015.072529][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 1015.084723][ T8407] Dev loop8: unable to read RDB block 0 [ 1015.119055][ T8407] loop8: unable to read partition table [ 1015.127519][ T8407] loop8: partition table beyond EOD, truncated [ 1015.155133][T20028] ldm_validate_partition_table(): Disk read failed. [ 1015.168151][ T5938] usb 4-1: new full-speed USB device number 64 using dummy_hcd [ 1015.195051][T20028] Dev loop8: unable to read RDB block 0 [ 1015.202679][T20028] loop8: unable to read partition table [ 1015.208543][T20028] loop8: partition table beyond EOD, truncated [ 1015.216848][T20028] loop_reread_partitions: partition scan of loop8 (被x ) failed (rc=-5) [ 1015.382906][T20041] batadv1: entered promiscuous mode [ 1015.430391][ T5938] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1015.462341][ T5938] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1015.504668][ T5938] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1015.526021][ T5938] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1015.568255][T20043] netlink: 44 bytes leftover after parsing attributes in process `syz.7.3391'. [ 1015.792147][ T5938] usb 4-1: GET_CAPABILITIES returned 0 [ 1015.811667][ T5938] usbtmc 4-1:16.0: can't read capabilities [ 1015.994392][ T30] audit: type=1326 audit(1751816521.020:1424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20030 comm="syz.3.3389" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9d6b78e929 code=0xffff0000 [ 1016.757736][T20047] netlink: 'syz.1.3393': attribute type 10 has an invalid length. [ 1016.769353][T20047] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1017.060693][T20063] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3395'. [ 1017.999342][ T24] usb 4-1: USB disconnect, device number 64 [ 1018.001807][ T30] audit: type=1326 audit(1751816522.980:1425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20070 comm="syz.4.3397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6cf58e929 code=0x7ffc0000 [ 1018.137542][ T30] audit: type=1326 audit(1751816522.980:1426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20070 comm="syz.4.3397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb6cf52ab19 code=0x7ffc0000 [ 1018.209941][ T30] audit: type=1326 audit(1751816522.980:1427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20070 comm="syz.4.3397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb6cf52ab19 code=0x7ffc0000 [ 1018.281961][ T30] audit: type=1326 audit(1751816522.980:1428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20070 comm="syz.4.3397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6cf58e929 code=0x7ffc0000 [ 1018.358787][ T30] audit: type=1326 audit(1751816522.990:1429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20070 comm="syz.4.3397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6cf58e929 code=0x7ffc0000 [ 1018.724990][ T30] audit: type=1326 audit(1751816522.990:1430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20070 comm="syz.4.3397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6cf58e929 code=0x7ffc0000 [ 1018.980508][ T30] audit: type=1326 audit(1751816522.990:1431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20070 comm="syz.4.3397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb6cf52ab19 code=0x7ffc0000 [ 1019.088463][ T30] audit: type=1326 audit(1751816522.990:1432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20070 comm="syz.4.3397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb6cf52ab19 code=0x7ffc0000 [ 1019.179868][ T30] audit: type=1326 audit(1751816522.990:1433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20070 comm="syz.4.3397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb6cf58e929 code=0x7ffc0000 [ 1019.583364][T20087] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3402'. [ 1020.084913][T20094] kernel read not supported for file / 7âW)s!Qfsl{Tr)rO2:"T+͟v|ղDvc֠6xc: (pid: 20094 comm: syz.3.3404) [ 1020.240901][T20097] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3405'. [ 1021.754356][T20118] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1021.767793][T20118] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1021.807666][T20118] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3412'. [ 1021.816885][ T5958] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 1022.002647][ T5958] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1022.022206][ T5958] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1022.132585][ T5958] usb 4-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 1022.269332][ T30] kauditd_printk_skb: 66 callbacks suppressed [ 1022.269354][ T30] audit: type=1326 audit(1751816527.290:1500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20120 comm="syz.7.3413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2525d8e929 code=0x7ffc0000 [ 1022.313186][ T5958] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1022.376505][ T5958] usb 4-1: config 0 descriptor?? [ 1022.416334][ T30] audit: type=1326 audit(1751816527.330:1501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20120 comm="syz.7.3413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2525d2ab19 code=0x7ffc0000 [ 1022.473297][ T30] audit: type=1326 audit(1751816527.330:1502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20120 comm="syz.7.3413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2525d8e929 code=0x7ffc0000 [ 1022.749339][ T30] audit: type=1326 audit(1751816527.330:1503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20120 comm="syz.7.3413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2525d2ab19 code=0x7ffc0000 [ 1022.892450][ T30] audit: type=1326 audit(1751816527.330:1504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20120 comm="syz.7.3413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2525d8e929 code=0x7ffc0000 [ 1022.961919][ T5958] usbhid 4-1:0.0: can't add hid device: -71 [ 1022.968141][ T5958] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1023.032624][ T5958] usb 4-1: USB disconnect, device number 65 [ 1023.084090][T20129] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3415'. [ 1023.107233][T20129] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3415'. [ 1023.110621][ T30] audit: type=1326 audit(1751816527.330:1505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20120 comm="syz.7.3413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2525d8e929 code=0x7ffc0000 [ 1023.184385][ T30] audit: type=1326 audit(1751816527.330:1506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20120 comm="syz.7.3413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2525d2ab19 code=0x7ffc0000 [ 1023.259001][ T30] audit: type=1326 audit(1751816527.330:1507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20120 comm="syz.7.3413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2525d8e929 code=0x7ffc0000 [ 1023.320195][ T30] audit: type=1326 audit(1751816527.330:1508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20120 comm="syz.7.3413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2525d8e929 code=0x7ffc0000 [ 1023.343452][ T30] audit: type=1326 audit(1751816527.330:1509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20120 comm="syz.7.3413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2525d2ab19 code=0x7ffc0000 [ 1023.437376][T20132] ipvlan2: entered promiscuous mode [ 1023.444015][T20132] ipvlan2: entered allmulticast mode [ 1023.449522][T20132] netdevsim netdevsim7 netdevsim0: entered allmulticast mode [ 1023.470035][ T5958] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 1023.643183][ T5958] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1023.669931][ T5958] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1023.700770][ T5958] usb 4-1: New USB device found, idVendor=0c70, idProduct=f00d, bcdDevice= 0.00 [ 1023.712699][ T5958] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1023.738614][ T5958] usb 4-1: config 0 descriptor?? [ 1024.179131][ T5958] aquacomputer_d5next 0003:0C70:F00D.0034: unknown main item tag 0x0 [ 1024.200126][ T5958] aquacomputer_d5next 0003:0C70:F00D.0034: unknown main item tag 0x0 [ 1024.213285][ T5958] aquacomputer_d5next 0003:0C70:F00D.0034: unknown main item tag 0x0 [ 1024.250390][ T5958] aquacomputer_d5next 0003:0C70:F00D.0034: unknown main item tag 0x0 [ 1024.322599][ T5958] aquacomputer_d5next 0003:0C70:F00D.0034: unknown main item tag 0x0 [ 1024.392793][ T5958] aquacomputer_d5next 0003:0C70:F00D.0034: hidraw0: USB HID v0.00 Device [HID 0c70:f00d] on usb-dummy_hcd.3-1/input0 [ 1024.647209][ T5848] usb 4-1: USB disconnect, device number 66 [ 1025.504243][T20155] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1025.608900][T20160] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3425'. [ 1025.664544][T20160] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3425'. [ 1026.047239][T20169] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3428'. [ 1026.310188][ T5938] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 1026.579546][T20177] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 1026.679888][T20177] netlink: 'syz.4.3429': attribute type 10 has an invalid length. [ 1026.697044][ T5938] usb 4-1: Using ep0 maxpacket: 16 [ 1027.895084][T20189] bridge8: entered promiscuous mode [ 1027.902238][T20189] bridge8: entered allmulticast mode [ 1027.949171][T20189] team0: Port device bridge8 added [ 1029.661615][ T5938] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1029.705555][ T5938] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 1029.730170][ T5938] usb 4-1: can't read configurations, error -71 [ 1030.331535][T20201] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3436'. [ 1031.519902][ T5938] usb 4-1: new full-speed USB device number 69 using dummy_hcd [ 1031.677196][ T5938] usb 4-1: config 0 has no interfaces? [ 1031.698113][ T5938] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1031.719256][ T5938] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1031.728795][ T5938] usb 4-1: Product: syz [ 1031.739320][ T5938] usb 4-1: Manufacturer: syz [ 1031.747596][ T5938] usb 4-1: SerialNumber: syz [ 1031.757566][ T5938] usb 4-1: config 0 descriptor?? [ 1032.051655][T20215] program syz.3.3440 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1032.529916][ T24] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 1032.694507][ T24] usb 2-1: config 0 has no interfaces? [ 1032.712613][ T24] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1032.727412][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1032.735844][ T24] usb 2-1: Product: syz [ 1032.745342][ T24] usb 2-1: Manufacturer: syz [ 1032.750502][ T24] usb 2-1: SerialNumber: syz [ 1032.759201][ T24] usb 2-1: config 0 descriptor?? [ 1032.997921][ T24] usb 2-1: USB disconnect, device number 6 [ 1033.811237][T20240] syz.1.3448 (20240): drop_caches: 2 [ 1034.142374][T20248] bridge1: entered promiscuous mode [ 1034.168069][T20248] bridge1: entered allmulticast mode [ 1034.186266][T20248] team0: Port device bridge1 added [ 1034.210805][T20247] syz.1.3450 (20247): drop_caches: 2 [ 1034.453456][ T5958] usb 4-1: USB disconnect, device number 69 [ 1036.284073][T20277] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1036.464398][T20277] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1036.916972][T20287] batadv1: entered promiscuous mode [ 1037.043452][T20291] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1037.133906][T20291] netlink: 'syz.1.3461': attribute type 10 has an invalid length. [ 1038.089475][T20298] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3465'. [ 1038.130057][ T5922] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 1038.173936][T20298] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3465'. [ 1038.292196][ T5922] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1038.343838][ T5922] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1038.412678][ T5922] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1038.427268][ T5922] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1038.455984][ T5922] usb 4-1: Product: syz [ 1038.488518][ T5922] usb 4-1: Manufacturer: syz [ 1038.539205][ T5922] usb 4-1: SerialNumber: syz [ 1038.617544][ T5922] usb 4-1: config 0 descriptor?? [ 1038.632033][ T5922] usb 4-1: selecting invalid altsetting 0 [ 1038.731625][T20302] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1038.762868][T20302] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1038.834123][ T5922] usb 4-1: USB disconnect, device number 70 [ 1038.895952][ T5984] udevd[5984]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1039.192756][T20309] bridge2: entered promiscuous mode [ 1039.198140][T20309] bridge2: entered allmulticast mode [ 1039.210273][T20309] team0: Port device bridge2 added [ 1039.530867][ T30] kauditd_printk_skb: 57 callbacks suppressed [ 1039.530888][ T30] audit: type=1326 audit(1751816544.480:1567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20313 comm="syz.3.3470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d6b78e929 code=0x7ffc0000 [ 1039.596657][ T30] audit: type=1326 audit(1751816544.480:1568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20313 comm="syz.3.3470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d6b78e929 code=0x7ffc0000 [ 1039.763241][ T30] audit: type=1326 audit(1751816544.480:1569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20313 comm="syz.3.3470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=217 compat=0 ip=0x7f9d6b78e929 code=0x7ffc0000 [ 1039.836218][ T30] audit: type=1326 audit(1751816544.480:1570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20313 comm="syz.3.3470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d6b78e929 code=0x7ffc0000 [ 1039.861416][ T30] audit: type=1326 audit(1751816544.480:1571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20313 comm="syz.3.3470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9d6b78e929 code=0x7ffc0000 [ 1039.983029][ T30] audit: type=1326 audit(1751816544.480:1572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20313 comm="syz.3.3470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d6b78e929 code=0x7ffc0000 [ 1040.052262][ T30] audit: type=1326 audit(1751816544.480:1573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20313 comm="syz.3.3470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9d6b790847 code=0x7ffc0000 [ 1040.113131][ T30] audit: type=1326 audit(1751816544.490:1574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20313 comm="syz.3.3470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f9d6b7907bc code=0x7ffc0000 [ 1040.188490][ T30] audit: type=1326 audit(1751816544.490:1575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20313 comm="syz.3.3470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f9d6b7906f4 code=0x7ffc0000 [ 1040.240725][ T30] audit: type=1326 audit(1751816544.490:1576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20313 comm="syz.3.3470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f9d6b7906f4 code=0x7ffc0000 [ 1040.259688][T20322] tipc: Started in network mode [ 1040.301639][T20322] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 1040.334948][T20322] tipc: Enabled bearer , priority 10 [ 1040.888852][T20326] program syz.4.3474 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1041.469916][ T24] tipc: Node number set to 4269801488 [ 1041.575171][T20333] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3476'. [ 1041.721882][T20333] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3476'. [ 1042.540160][T20345] fuse: Unknown parameter '000000000000000000000130x000000000000000b' [ 1042.984807][ T5958] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 1043.081065][T20356] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3485'. [ 1043.249547][ T5958] usb 2-1: Using ep0 maxpacket: 8 [ 1043.275032][ T5958] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1043.287559][ T5958] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1043.317895][ T5958] usb 2-1: Product: syz [ 1043.324575][ T5958] usb 2-1: Manufacturer: syz [ 1043.329302][ T5958] usb 2-1: SerialNumber: syz [ 1043.375371][ T5958] usb 2-1: config 0 descriptor?? [ 1043.429309][T20359] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3486'. [ 1043.597676][ T5958] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1043.601146][T20361] syz.3.3487 (20361): drop_caches: 2 [ 1043.764315][T20363] program syz.3.3488 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1044.743273][T20375] fuse: Unknown parameter 'rootmQde' [ 1044.797686][T20376] bridge2: entered promiscuous mode [ 1044.803219][T20376] bridge2: entered allmulticast mode [ 1044.816994][T20376] team0: Port device bridge2 added [ 1045.429947][ T5922] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 1045.603994][ T5922] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1045.613455][ T5922] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1045.637603][ T5922] usb 4-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1045.671113][ T5922] usb 4-1: config 1 interface 0 has no altsetting 1 [ 1045.693332][ T5922] usb 4-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 1045.706176][ T5922] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1045.727548][ T5922] usb 4-1: Product: syz [ 1045.738993][ T5922] usb 4-1: Manufacturer: syz [ 1045.754253][ T5922] usb 4-1: SerialNumber: syz [ 1045.792153][ T5922] smsusb:smsusb_probe: board id=8, interface number 0 [ 1045.983588][ T5922] smsusb:smsusb_probe: usb_set_interface failed, rc -71 [ 1045.996460][ T5958] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1046.078787][ T5922] smsusb 4-1:1.0: probe with driver smsusb failed with error -71 [ 1046.151641][ T5922] usb 4-1: USB disconnect, device number 71 [ 1046.202399][T20393] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3495'. [ 1046.294426][ T5958] usb 2-1: USB disconnect, device number 7 [ 1046.317075][T20393] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3495'. [ 1047.001522][ T5958] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 1047.210093][ T5958] usb 4-1: Using ep0 maxpacket: 16 [ 1047.234722][ T5958] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 1047.246962][ T5958] usb 4-1: config 0 has no interface number 0 [ 1047.264898][ T5958] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1047.293062][ T5958] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 49152, setting to 1024 [ 1047.326795][ T5958] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1047.353680][ T5958] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1047.374790][ T5958] usb 4-1: Product: syz [ 1047.383639][ T5958] usb 4-1: SerialNumber: syz [ 1047.398344][ T5958] usb 4-1: config 0 descriptor?? [ 1047.423179][ T5958] cm109 4-1:0.8: invalid payload size 1024, expected 4 [ 1047.444244][ T5958] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input65 [ 1047.600514][T20417] program syz.0.3503 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1047.619805][ C1] cm109 4-1:0.8: cm109_urb_irq_callback: urb status -71 [ 1048.313360][T20425] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1048.338949][T20425] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3504'. [ 1048.764179][T20439] bridge3: entered promiscuous mode [ 1048.769458][T20439] bridge3: entered allmulticast mode [ 1048.788087][T20439] team0: Port device bridge3 added [ 1049.398826][ T10] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 1049.560109][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 1049.577560][ T10] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1049.636133][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1049.688931][ T10] usb 2-1: Product: syz [ 1049.697145][ T10] usb 2-1: Manufacturer: syz [ 1049.704309][ T10] usb 2-1: SerialNumber: syz [ 1049.739939][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1049.740583][ T5938] usb 4-1: USB disconnect, device number 72 [ 1049.746937][ C1] cm109 4-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 1049.763023][ T10] usb 2-1: config 0 descriptor?? [ 1049.826672][ T5938] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1049.993127][ T10] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1050.614616][T20448] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3508'. [ 1050.623691][T20448] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3508'. [ 1052.155576][T20466] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3515'. [ 1052.162197][T20468] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3511'. [ 1052.173645][T20468] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3511'. [ 1052.254592][T20467] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1052.272230][T20467] netlink: 'syz.0.3514': attribute type 10 has an invalid length. [ 1052.414597][T20475] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3515'. [ 1052.468356][T20471] sch_tbf: burst 88 is lower than device veth23 mtu (1514) ! [ 1052.615990][ T10] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1052.629245][T20477] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3516'. [ 1052.726953][T20477] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3516'. [ 1052.825285][T20477] bridge_slave_1: left allmulticast mode [ 1052.843344][T20477] bridge_slave_1: left promiscuous mode [ 1052.857945][T20477] bridge0: port 2(bridge_slave_1) entered disabled state [ 1052.903358][T20477] bridge_slave_0: left allmulticast mode [ 1052.910405][T20477] bridge_slave_0: left promiscuous mode [ 1052.941587][T20477] bridge0: port 1(bridge_slave_0) entered disabled state [ 1052.973606][ T10] usb 2-1: USB disconnect, device number 8 [ 1053.162033][T20482] batadv1: entered promiscuous mode [ 1054.474295][T20500] bridge3: entered promiscuous mode [ 1054.479590][T20500] bridge3: entered allmulticast mode [ 1054.532475][T20500] team0: Port device bridge3 added [ 1054.541530][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.547919][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.888554][T20517] FAULT_INJECTION: forcing a failure. [ 1055.888554][T20517] name failslab, interval 1, probability 0, space 0, times 0 [ 1055.981613][T20517] CPU: 0 UID: 0 PID: 20517 Comm: syz.7.3526 Not tainted 6.16.0-rc4-syzkaller-00324-g1f988d0788f5 #0 PREEMPT(full) [ 1055.981643][T20517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1055.981657][T20517] Call Trace: [ 1055.981666][T20517] [ 1055.981676][T20517] dump_stack_lvl+0x189/0x250 [ 1055.981708][T20517] ? __pfx____ratelimit+0x10/0x10 [ 1055.981742][T20517] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1055.981779][T20517] ? __pfx__printk+0x10/0x10 [ 1055.981833][T20517] should_fail_ex+0x414/0x560 [ 1055.981876][T20517] should_failslab+0xa8/0x100 [ 1055.981903][T20517] kmem_cache_alloc_noprof+0x73/0x3c0 [ 1055.981925][T20517] ? skb_clone+0x212/0x3a0 [ 1055.981954][T20517] skb_clone+0x212/0x3a0 [ 1055.981983][T20517] __netlink_deliver_tap+0x404/0x850 [ 1055.982016][T20517] ? netlink_deliver_tap+0x2e/0x1b0 [ 1055.982040][T20517] netlink_deliver_tap+0x19c/0x1b0 [ 1055.982063][T20517] netlink_sendskb+0x68/0x140 [ 1055.982085][T20517] rtnl_unicast+0x4e/0x60 [ 1055.982111][T20517] ip6addrlbl_get+0x7e7/0x9b0 [ 1055.982132][T20517] ? ip6addrlbl_get+0x505/0x9b0 [ 1055.982149][T20517] ? __pfx_ip6addrlbl_get+0x10/0x10 [ 1055.982177][T20517] ? __pfx_ip6addrlbl_get+0x10/0x10 [ 1055.982193][T20517] rtnetlink_rcv_msg+0x7cf/0xb70 [ 1055.982217][T20517] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 1055.982236][T20517] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1055.982254][T20517] ? ref_tracker_free+0x63a/0x7d0 [ 1055.982269][T20517] ? __copy_skb_header+0xa7/0x550 [ 1055.982294][T20517] ? __pfx_ref_tracker_free+0x10/0x10 [ 1055.982311][T20517] ? __skb_clone+0x63/0x7a0 [ 1055.982342][T20517] netlink_rcv_skb+0x208/0x470 [ 1055.982365][T20517] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1055.982386][T20517] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1055.982426][T20517] ? netlink_deliver_tap+0x2e/0x1b0 [ 1055.982447][T20517] ? netlink_deliver_tap+0x2e/0x1b0 [ 1055.982474][T20517] netlink_unicast+0x75b/0x8d0 [ 1055.982504][T20517] netlink_sendmsg+0x805/0xb30 [ 1055.982535][T20517] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1055.982561][T20517] ? aa_sock_msg_perm+0x94/0x160 [ 1055.982608][T20517] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1055.982625][T20517] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1055.982652][T20517] __sock_sendmsg+0x21c/0x270 [ 1055.982675][T20517] ____sys_sendmsg+0x505/0x830 [ 1055.982718][T20517] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1055.982749][T20517] ? import_iovec+0x74/0xa0 [ 1055.982775][T20517] ___sys_sendmsg+0x21f/0x2a0 [ 1055.982801][T20517] ? __pfx____sys_sendmsg+0x10/0x10 [ 1055.982858][T20517] ? __fget_files+0x2a/0x420 [ 1055.982881][T20517] ? __fget_files+0x3a0/0x420 [ 1055.982915][T20517] __x64_sys_sendmsg+0x19b/0x260 [ 1055.982941][T20517] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1055.982974][T20517] ? __pfx_ksys_write+0x10/0x10 [ 1055.982992][T20517] ? rcu_is_watching+0x15/0xb0 [ 1055.983036][T20517] ? do_syscall_64+0xbe/0x3b0 [ 1055.983060][T20517] do_syscall_64+0xfa/0x3b0 [ 1055.983077][T20517] ? lockdep_hardirqs_on+0x9c/0x150 [ 1055.983095][T20517] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1055.983114][T20517] ? clear_bhb_loop+0x60/0xb0 [ 1055.983137][T20517] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1055.983155][T20517] RIP: 0033:0x7f2525d8e929 [ 1055.983172][T20517] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1055.983188][T20517] RSP: 002b:00007f2526c75038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1055.983208][T20517] RAX: ffffffffffffffda RBX: 00007f2525fb5fa0 RCX: 00007f2525d8e929 [ 1055.983221][T20517] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 1055.983233][T20517] RBP: 00007f2526c75090 R08: 0000000000000000 R09: 0000000000000000 [ 1055.983245][T20517] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1055.983256][T20517] R13: 0000000000000000 R14: 00007f2525fb5fa0 R15: 00007f25260dfa28 [ 1055.983285][T20517] [ 1056.935393][T20535] batadv1: entered promiscuous mode [ 1056.970443][ T5938] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 1057.141700][ T5938] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1057.141725][ T5938] usb 2-1: config 1 has no interface number 0 [ 1057.141755][ T5938] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1057.141775][ T5938] usb 2-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 1057.141815][ T5938] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 12544, setting to 64 [ 1057.146565][ T5938] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1057.146598][ T5938] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1057.146646][ T5938] usb 2-1: Product: syz [ 1057.146657][ T5938] usb 2-1: Manufacturer: syz [ 1057.146668][ T5938] usb 2-1: SerialNumber: syz [ 1058.114945][ T5938] cdc_ncm 2-1:1.1: bind() failure [ 1058.313376][ T5938] usb 2-1: USB disconnect, device number 9 [ 1058.521610][T20544] input: syz0 as /devices/virtual/input/input67 [ 1058.528184][T20544] input: failed to attach handler leds to device input67, error: -6 [ 1058.751162][T20545] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3533'. [ 1058.760287][T20545] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3533'. [ 1059.440054][ T5958] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 1059.601790][ T5958] usb 2-1: config 0 has no interfaces? [ 1059.612994][ T5958] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1059.640467][ T5958] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1059.648566][ T5958] usb 2-1: Product: syz [ 1059.671373][ T5958] usb 2-1: Manufacturer: syz [ 1059.676040][ T5958] usb 2-1: SerialNumber: syz [ 1059.717781][ T5958] usb 2-1: config 0 descriptor?? [ 1059.963606][ T5958] usb 2-1: USB disconnect, device number 10 [ 1060.651274][T20577] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3541'. [ 1060.870534][T20582] sch_tbf: burst 88 is lower than device veth21 mtu (1514) ! [ 1060.975609][T20577] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3541'. [ 1061.151287][T20590] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1061.272487][T20593] netlink: 'syz.3.3542': attribute type 10 has an invalid length. [ 1061.330746][ T5922] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 1061.638162][ T5922] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 1061.726322][ T5922] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1061.743662][ T5922] usb 2-1: config 0 descriptor?? [ 1062.625913][ T5922] ath6kl: Failed to read usb control message: -71 [ 1062.662390][ T5922] ath6kl: Unable to read the bmi data from the device: -71 [ 1062.693632][ T5922] ath6kl: Unable to recv target info: -71 [ 1062.722229][ T5922] ath6kl: Failed to init ath6kl core: -71 [ 1062.776639][ T5922] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1062.846306][ T5922] usb 2-1: USB disconnect, device number 11 [ 1063.099368][ T5922] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 1063.140629][ T5922] hid-generic 0000:0000:0000.0035: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1063.184337][T20607] input: syz0 as /devices/virtual/input/input69 [ 1064.529044][T20620] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3549'. [ 1064.553507][T20620] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3549'. [ 1065.851054][ T9] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 1066.010062][ T9] usb 2-1: device descriptor read/64, error -71 [ 1066.250085][ T9] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 1066.562100][ T9] usb 2-1: device descriptor read/64, error -71 [ 1066.693316][ T9] usb usb2-port1: attempt power cycle [ 1067.135563][T20658] bridge0: entered promiscuous mode [ 1067.140970][ T9] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 1067.148938][T20658] bridge0: entered allmulticast mode [ 1067.170409][T20658] team0: Port device bridge0 added [ 1067.216817][ T9] usb 2-1: device descriptor read/8, error -71 [ 1067.459905][ T9] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 1067.480509][ T9] usb 2-1: device descriptor read/8, error -71 [ 1067.660709][ T9] usb usb2-port1: unable to enumerate USB device [ 1067.838873][T20661] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3561'. [ 1068.015936][T20663] binder: 20662:20663 ioctl c0306201 200000000240 returned -11 [ 1068.058664][T20665] netlink: 11 bytes leftover after parsing attributes in process `syz.0.3563'. [ 1068.104517][T20665] netlink: 'syz.0.3563': attribute type 5 has an invalid length. [ 1068.117645][T20665] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3563'. [ 1068.536607][T20682] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1068.555367][T20682] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1069.360794][T20694] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3574'. [ 1070.790395][ T9] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 1070.939962][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 1071.003695][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1071.014309][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1071.049468][ T9] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1071.060122][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1071.068241][ T9] usb 4-1: Product: syz [ 1071.094257][ T9] usb 4-1: Manufacturer: syz [ 1071.103447][ T9] usb 4-1: SerialNumber: syz [ 1071.391565][T20717] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3580'. [ 1071.593243][ T9] usb 4-1: 0:2 : does not exist [ 1071.614669][ T9] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 1071.662026][ T9] usb 4-1: USB disconnect, device number 73 [ 1071.727964][ T8407] udevd[8407]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1071.823121][ T5922] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 1071.999873][ T5922] usb 2-1: Using ep0 maxpacket: 16 [ 1072.141750][T20729] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3586'. [ 1072.337139][T20734] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1072.528688][T20738] sock: sock_timestamping_bind_phc: sock not bind to device [ 1072.932793][T20748] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3591'. [ 1073.553427][T20752] pimreg3: entered allmulticast mode [ 1074.015661][ T30] kauditd_printk_skb: 43 callbacks suppressed [ 1074.015680][ T30] audit: type=1400 audit(1751816579.040:1620): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=20761 comm="syz.7.3597" [ 1074.431489][ T5922] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1074.446843][ T5922] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 1074.471849][T20772] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1074.512725][T20772] netlink: 'syz.3.3600': attribute type 10 has an invalid length. [ 1074.556017][ T5922] usb 2-1: can't read configurations, error -71 [ 1074.931639][ T5922] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 1075.101517][ T5922] usb 2-1: Using ep0 maxpacket: 32 [ 1075.183621][ T5922] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1075.194060][ T5922] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1075.215389][ T5922] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1075.246038][ T5922] usb 2-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1075.279253][ T5922] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1075.297412][ T5922] usb 2-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 1075.316840][ T5922] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1075.340144][ T5922] usb 2-1: config 0 descriptor?? [ 1075.489504][T20781] FAULT_INJECTION: forcing a failure. [ 1075.489504][T20781] name failslab, interval 1, probability 0, space 0, times 0 [ 1075.504244][T20781] CPU: 0 UID: 0 PID: 20781 Comm: syz.3.3603 Not tainted 6.16.0-rc4-syzkaller-00324-g1f988d0788f5 #0 PREEMPT(full) [ 1075.504272][T20781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1075.504285][T20781] Call Trace: [ 1075.504293][T20781] [ 1075.504301][T20781] dump_stack_lvl+0x189/0x250 [ 1075.504328][T20781] ? __pfx____ratelimit+0x10/0x10 [ 1075.504357][T20781] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1075.504374][T20781] ? __pfx__printk+0x10/0x10 [ 1075.504396][T20781] ? __pfx___might_resched+0x10/0x10 [ 1075.504418][T20781] ? fs_reclaim_acquire+0x7d/0x100 [ 1075.504457][T20781] should_fail_ex+0x414/0x560 [ 1075.504489][T20781] should_failslab+0xa8/0x100 [ 1075.504513][T20781] __kmalloc_cache_noprof+0x70/0x3d0 [ 1075.504529][T20781] ? __request_module+0x2b5/0x5e0 [ 1075.504546][T20781] __request_module+0x2b5/0x5e0 [ 1075.504570][T20781] ? __pfx___request_module+0x10/0x10 [ 1075.504588][T20781] ? __might_fault+0xb0/0x130 [ 1075.504631][T20781] fbcon_set_con2fb_map_ioctl+0x129/0x1f0 [ 1075.504653][T20781] ? __pfx_fbcon_set_con2fb_map_ioctl+0x10/0x10 [ 1075.504670][T20781] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1075.504695][T20781] do_fb_ioctl+0x3df/0x750 [ 1075.504724][T20781] ? __pfx_do_fb_ioctl+0x10/0x10 [ 1075.504785][T20781] ? __fget_files+0x2a/0x420 [ 1075.504811][T20781] ? __fget_files+0x3a0/0x420 [ 1075.504829][T20781] ? __fget_files+0x2a/0x420 [ 1075.504849][T20781] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1075.504871][T20781] ? __pfx_fb_ioctl+0x10/0x10 [ 1075.504898][T20781] __se_sys_ioctl+0xfc/0x170 [ 1075.504921][T20781] do_syscall_64+0xfa/0x3b0 [ 1075.504938][T20781] ? lockdep_hardirqs_on+0x9c/0x150 [ 1075.504956][T20781] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1075.504970][T20781] ? clear_bhb_loop+0x60/0xb0 [ 1075.504986][T20781] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1075.505000][T20781] RIP: 0033:0x7f9d6b78e929 [ 1075.505016][T20781] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1075.505034][T20781] RSP: 002b:00007f9d6c5d9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1075.505054][T20781] RAX: ffffffffffffffda RBX: 00007f9d6b9b5fa0 RCX: 00007f9d6b78e929 [ 1075.505068][T20781] RDX: 0000200000000640 RSI: 0000000000004610 RDI: 0000000000000003 [ 1075.505080][T20781] RBP: 00007f9d6c5d9090 R08: 0000000000000000 R09: 0000000000000000 [ 1075.505091][T20781] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1075.505103][T20781] R13: 0000000000000000 R14: 00007f9d6b9b5fa0 R15: 00007f9d6badfa28 [ 1075.505123][T20781] [ 1075.771470][T20775] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1075.794117][T20775] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1075.823067][T20775] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1075.855213][T20775] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1075.881091][T20775] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1075.899223][T20775] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1075.955783][T20775] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1075.979601][T20775] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1076.016421][T20775] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1076.025532][T20775] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1076.058949][ T5922] hid-thrustmaster 0003:044F:B65D.0036: unknown main item tag 0x0 [ 1076.108017][ T5922] hid-thrustmaster 0003:044F:B65D.0036: unknown main item tag 0x0 [ 1076.141513][ T5922] hid-thrustmaster 0003:044F:B65D.0036: item fetching failed at offset 2/5 [ 1076.174844][ T5922] hid-thrustmaster 0003:044F:B65D.0036: parse failed with error -22 [ 1076.196265][ T5922] hid-thrustmaster 0003:044F:B65D.0036: probe with driver hid-thrustmaster failed with error -22 [ 1076.373355][ T5922] usb 2-1: USB disconnect, device number 17 [ 1077.621387][T20806] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3611'. [ 1077.656756][T20808] FAULT_INJECTION: forcing a failure. [ 1077.656756][T20808] name failslab, interval 1, probability 0, space 0, times 0 [ 1077.686253][T20806] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1077.702855][T20806] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1077.721025][T20808] CPU: 1 UID: 0 PID: 20808 Comm: syz.7.3612 Not tainted 6.16.0-rc4-syzkaller-00324-g1f988d0788f5 #0 PREEMPT(full) [ 1077.721053][T20808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1077.721066][T20808] Call Trace: [ 1077.721075][T20808] [ 1077.721084][T20808] dump_stack_lvl+0x189/0x250 [ 1077.721115][T20808] ? __pfx____ratelimit+0x10/0x10 [ 1077.721148][T20808] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1077.721179][T20808] ? __pfx__printk+0x10/0x10 [ 1077.721211][T20808] ? __pfx___might_resched+0x10/0x10 [ 1077.721236][T20808] ? fs_reclaim_acquire+0x7d/0x100 [ 1077.721271][T20808] should_fail_ex+0x414/0x560 [ 1077.721308][T20808] should_failslab+0xa8/0x100 [ 1077.721338][T20808] __kmalloc_cache_noprof+0x70/0x3d0 [ 1077.721364][T20808] ? __nft_trans_set_add+0x5e/0x710 [ 1077.721383][T20808] ? __pfx_nft_rhash_cmp+0x10/0x10 [ 1077.721413][T20808] __nft_trans_set_add+0x5e/0x710 [ 1077.721432][T20808] ? kfree+0x18e/0x440 [ 1077.721460][T20808] nf_tables_newset+0x1d6f/0x2530 [ 1077.721502][T20808] ? __pfx_nf_tables_newset+0x10/0x10 [ 1077.721553][T20808] ? __nla_parse+0x40/0x60 [ 1077.721578][T20808] nfnetlink_rcv+0x1132/0x2520 [ 1077.721625][T20808] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1077.721660][T20808] ? ref_tracker_free+0x63a/0x7d0 [ 1077.721712][T20808] ? __netlink_deliver_tap+0x807/0x850 [ 1077.721748][T20808] ? netlink_deliver_tap+0x2e/0x1b0 [ 1077.721773][T20808] ? netlink_deliver_tap+0x2e/0x1b0 [ 1077.721804][T20808] netlink_unicast+0x75b/0x8d0 [ 1077.721850][T20808] netlink_sendmsg+0x805/0xb30 [ 1077.721884][T20808] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1077.721911][T20808] ? aa_sock_msg_perm+0x94/0x160 [ 1077.721942][T20808] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1077.721959][T20808] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1077.721983][T20808] __sock_sendmsg+0x21c/0x270 [ 1077.722006][T20808] ____sys_sendmsg+0x505/0x830 [ 1077.722035][T20808] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1077.722067][T20808] ? import_iovec+0x74/0xa0 [ 1077.722093][T20808] ___sys_sendmsg+0x21f/0x2a0 [ 1077.722120][T20808] ? __pfx____sys_sendmsg+0x10/0x10 [ 1077.722184][T20808] ? __fget_files+0x2a/0x420 [ 1077.722205][T20808] ? __fget_files+0x3a0/0x420 [ 1077.722236][T20808] __x64_sys_sendmsg+0x19b/0x260 [ 1077.722261][T20808] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1077.722291][T20808] ? __pfx_ksys_write+0x10/0x10 [ 1077.722309][T20808] ? rcu_is_watching+0x15/0xb0 [ 1077.722332][T20808] ? do_syscall_64+0xbe/0x3b0 [ 1077.722355][T20808] do_syscall_64+0xfa/0x3b0 [ 1077.722373][T20808] ? lockdep_hardirqs_on+0x9c/0x150 [ 1077.722391][T20808] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1077.722409][T20808] ? clear_bhb_loop+0x60/0xb0 [ 1077.722432][T20808] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1077.722450][T20808] RIP: 0033:0x7f2525d8e929 [ 1077.722467][T20808] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1077.722484][T20808] RSP: 002b:00007f2526c75038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1077.722500][T20808] RAX: ffffffffffffffda RBX: 00007f2525fb5fa0 RCX: 00007f2525d8e929 [ 1077.722510][T20808] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1077.722518][T20808] RBP: 00007f2526c75090 R08: 0000000000000000 R09: 0000000000000000 [ 1077.722527][T20808] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1077.722535][T20808] R13: 0000000000000000 R14: 00007f2525fb5fa0 R15: 00007f25260dfa28 [ 1077.722555][T20808] [ 1078.632107][T20777] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1078.660535][T20777] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1078.711270][T20777] misc userio: No port type given on /dev/userio [ 1078.717838][T20777] misc userio: The device must be registered before sending interrupts [ 1078.742731][T20777] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1078.761386][T20777] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1079.685481][T20829] vlan0: entered promiscuous mode [ 1080.350124][ T5938] usb 4-1: new full-speed USB device number 74 using dummy_hcd [ 1080.520601][ T5938] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 1080.569221][ T5938] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1080.593264][ T5938] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 1080.621113][ T5938] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 255, setting to 64 [ 1080.633733][ T5938] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1080.647328][ T5938] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1080.713172][ T5938] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1080.770360][ T5938] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1080.828118][ T5938] usb 4-1: Product: syz [ 1080.851574][ T5938] usb 4-1: Manufacturer: syz [ 1080.856324][ T5938] usb 4-1: SerialNumber: syz [ 1080.897712][ T5938] usb 4-1: config 0 descriptor?? [ 1080.958877][T20842] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1080.995124][ T5938] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1081.051662][ T5938] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1081.113807][T20857] fuse: Bad value for 'rootmode' [ 1081.219282][T20864] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3621'. [ 1081.228437][T20864] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3621'. [ 1082.147550][T20871] netlink: 209588 bytes leftover after parsing attributes in process `syz.0.3626'. [ 1082.934635][T20878] netlink: 'syz.1.3628': attribute type 1 has an invalid length. [ 1083.046514][ T9] usb 4-1: USB disconnect, device number 74 [ 1083.136830][ T9] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 1083.554774][T20878] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1083.640389][ T9] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 1083.832633][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1083.863168][T20889] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1083.871946][ T9] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1083.882447][ T9] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1083.898800][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1083.909817][T20889] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1083.917613][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1083.935605][ T9] usb 4-1: Product: syz [ 1083.942780][ T9] usb 4-1: Manufacturer: syz [ 1083.947745][ T9] usb 4-1: SerialNumber: syz [ 1083.967890][ T9] hub 4-1:1.0: bad descriptor, ignoring hub [ 1083.986071][ T9] hub 4-1:1.0: probe with driver hub failed with error -5 [ 1084.188502][ T9] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 75 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1084.321426][T20895] FAULT_INJECTION: forcing a failure. [ 1084.321426][T20895] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1084.334674][T20895] CPU: 1 UID: 0 PID: 20895 Comm: syz.0.3635 Not tainted 6.16.0-rc4-syzkaller-00324-g1f988d0788f5 #0 PREEMPT(full) [ 1084.334698][T20895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1084.334710][T20895] Call Trace: [ 1084.334717][T20895] [ 1084.334723][T20895] dump_stack_lvl+0x189/0x250 [ 1084.334743][T20895] ? __pfx____ratelimit+0x10/0x10 [ 1084.334764][T20895] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1084.334779][T20895] ? __pfx__printk+0x10/0x10 [ 1084.334805][T20895] should_fail_ex+0x414/0x560 [ 1084.334827][T20895] _copy_from_user+0x2d/0xb0 [ 1084.334844][T20895] uhid_char_write+0x120/0xd10 [ 1084.334858][T20895] ? rw_verify_area+0x258/0x650 [ 1084.334872][T20895] ? __pfx_uhid_char_write+0x10/0x10 [ 1084.334886][T20895] vfs_write+0x27e/0xa90 [ 1084.334907][T20895] ? __pfx_vfs_write+0x10/0x10 [ 1084.334922][T20895] ? __fget_files+0x2a/0x420 [ 1084.334942][T20895] ? __fget_files+0x2a/0x420 [ 1084.334958][T20895] ? __fget_files+0x3a0/0x420 [ 1084.334974][T20895] ? __fget_files+0x2a/0x420 [ 1084.334997][T20895] ksys_write+0x145/0x250 [ 1084.335013][T20895] ? __pfx_ksys_write+0x10/0x10 [ 1084.335027][T20895] ? rcu_is_watching+0x15/0xb0 [ 1084.335045][T20895] ? do_syscall_64+0xbe/0x3b0 [ 1084.335061][T20895] do_syscall_64+0xfa/0x3b0 [ 1084.335073][T20895] ? lockdep_hardirqs_on+0x9c/0x150 [ 1084.335085][T20895] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1084.335097][T20895] ? clear_bhb_loop+0x60/0xb0 [ 1084.335112][T20895] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1084.335125][T20895] RIP: 0033:0x7f267278e929 [ 1084.335136][T20895] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1084.335147][T20895] RSP: 002b:00007f2673539038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1084.335161][T20895] RAX: ffffffffffffffda RBX: 00007f26729b5fa0 RCX: 00007f267278e929 [ 1084.335176][T20895] RDX: 0000000000000120 RSI: 0000200000000280 RDI: 0000000000000003 [ 1084.335185][T20895] RBP: 00007f2673539090 R08: 0000000000000000 R09: 0000000000000000 [ 1084.335193][T20895] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1084.335200][T20895] R13: 0000000000000000 R14: 00007f26729b5fa0 R15: 00007f2672adfa28 [ 1084.335220][T20895] [ 1084.648237][T20899] xt_connbytes: Forcing CT accounting to be enabled [ 1084.656840][T20899] xt_bpf: check failed: parse error [ 1084.725902][T20903] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3633'. [ 1084.791623][T20902] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3636'. [ 1084.801381][T20902] netem: invalid attributes len -7 [ 1084.821901][T20902] netem: change failed [ 1084.990013][ T5848] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 1085.150299][ T5848] usb 2-1: Using ep0 maxpacket: 16 [ 1085.328250][ T9] usb 4-1: USB disconnect, device number 75 [ 1085.372933][ T9] usblp0: removed [ 1086.949968][ T847] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 1087.119960][ T847] usb 4-1: Using ep0 maxpacket: 16 [ 1087.129429][ T847] usb 4-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 1087.146329][ T847] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1087.228197][ T847] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1087.350694][ T5848] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1087.360024][ T5848] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 1087.367613][ T5848] usb 2-1: can't read configurations, error -71 [ 1087.488207][ T847] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1087.517827][ T847] usb 4-1: Product: syz [ 1087.534743][ T847] usb 4-1: Manufacturer: syz [ 1087.551550][ T847] usb 4-1: SerialNumber: syz [ 1087.839504][ T847] usb 4-1: 0:2 : does not exist [ 1087.861209][ T847] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 1088.106060][T20944] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3650'. [ 1088.187513][ T847] usb 4-1: USB disconnect, device number 76 [ 1088.240627][ T5848] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 1088.266365][ T8407] udevd[8407]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1088.430335][ T5848] usb 2-1: Using ep0 maxpacket: 16 [ 1088.451095][ T5848] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 1088.473948][ T5848] usb 2-1: config 0 has no interface number 0 [ 1088.488190][ T5848] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1088.510238][ T5848] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1088.524970][ T5848] usb 2-1: config 0 interface 41 has no altsetting 0 [ 1088.536623][ T5848] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 1088.589624][ T5848] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1088.652882][ T5848] usb 2-1: Product: syz [ 1088.661575][ T5848] usb 2-1: Manufacturer: syz [ 1088.671629][ T5848] usb 2-1: SerialNumber: syz [ 1088.735805][ T5848] usb 2-1: config 0 descriptor?? [ 1088.752225][T20941] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1088.759739][T20941] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1088.796558][T20959] vti0: entered promiscuous mode [ 1088.802903][T20959] vti0: entered allmulticast mode [ 1088.992299][T20941] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1089.026159][T20963] ip6t_srh: unknown srh match flags 5040 [ 1089.028051][T20941] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1089.601966][ T5848] Error reading MAC address [ 1089.618734][T20941] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1089.632893][T20941] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1089.868598][T20941] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1089.912807][T20973] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3657'. [ 1089.935439][T20941] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1090.022498][ T5848] sr9700 2-1:0.41 (unnamed net_device) (uninitialized): Error reading MAC address [ 1090.055338][ T5848] usb 2-1: USB disconnect, device number 19 [ 1090.220565][ T10] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 1090.370269][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 1090.412531][T20977] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.3658'. [ 1091.320530][ T9] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 1091.435168][T20988] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3662'. [ 1092.444095][T21003] netlink: 'syz.7.3665': attribute type 10 has an invalid length. [ 1092.501259][T21003] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 1092.855624][T21009] bridge4: entered promiscuous mode [ 1092.862934][T21009] bridge4: entered allmulticast mode [ 1092.875860][T21009] team0: Port device bridge4 added [ 1093.009019][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1093.020624][ T10] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 1093.028512][ T10] usb 4-1: can't read configurations, error -71 [ 1093.447327][T21016] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3668'. [ 1094.225983][T21027] loop2: detected capacity change from 0 to 7 [ 1094.245535][ T8407] Dev loop2: unable to read RDB block 7 [ 1094.252373][ T10] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 1094.294940][ T8407] loop2: AHDI p1 p2 p3 p4 [ 1094.305081][ T8407] loop2: partition table partially beyond EOD, truncated [ 1094.339477][T21029] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3673'. [ 1094.357304][ T8407] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1094.382137][ T8407] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1094.396877][ T8407] loop2: p3 size 4244635647 extends beyond EOD, truncated [ 1094.436895][T21027] Dev loop2: unable to read RDB block 7 [ 1094.446246][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1094.465990][T21027] loop2: AHDI p1 p2 p3 p4 [ 1094.471856][T21027] loop2: partition table partially beyond EOD, truncated [ 1094.479118][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1094.489393][T21027] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1094.506988][T21027] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1094.520209][ T10] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1094.529457][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 1094.538168][T21027] loop2: p3 size 4244635647 extends beyond EOD, truncated [ 1094.546064][ T10] usb 4-1: SerialNumber: syz [ 1094.644459][ T8407] udevd[8407]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 1094.692046][T21033] input: syz1 as /devices/virtual/input/input70 [ 1094.798572][T21023] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3670'. [ 1094.809958][ T8407] udevd[8407]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 1094.827953][T21035] binder: BINDER_SET_CONTEXT_MGR already set [ 1094.834855][T21035] binder: 21034:21035 ioctl 4018620d 200000000040 returned -16 [ 1095.008566][T21042] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3676'. [ 1095.097421][T21023] bond0 (unregistering): Released all slaves [ 1095.278179][T21046] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3674'. [ 1095.667288][T21054] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3678'. [ 1095.696636][T21055] netlink: 'syz.4.3680': attribute type 1 has an invalid length. [ 1096.036628][T21058] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1096.049684][T21058] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1096.084815][T21058] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1096.121071][T21058] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1096.442047][T21063] bridge3: entered promiscuous mode [ 1096.447631][T21063] bridge3: entered allmulticast mode [ 1096.462173][T21063] team0: Port device bridge3 added [ 1096.886508][ T10] usb 4-1: 0:2 : does not exist [ 1097.064300][ T8407] udevd[8407]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1097.090715][ T10] usb 4-1: USB disconnect, device number 79 [ 1097.200990][T21073] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1097.233458][T21073] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1097.714404][T21086] nvme_fabrics: unknown parameter or missing value '-nrio ' in ctrl creation request [ 1099.196611][T21118] bridge5: entered promiscuous mode [ 1099.202270][T21118] bridge5: entered allmulticast mode [ 1099.237391][T21118] team0: Port device bridge5 added [ 1099.381259][T21120] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3700'. [ 1099.496826][T21120] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3700'. [ 1100.140206][T21133] sctp: [Deprecated]: syz.0.3705 (pid 21133) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1100.140206][T21133] Use struct sctp_sack_info instead [ 1100.186722][T21132] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3704'. [ 1100.220436][T21132] openvswitch: netlink: Flow key attr not present in new flow. [ 1100.354543][T21132] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1100.427337][T21144] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1100.451901][T21132] kvm: requested 117333 ns i8254 timer period limited to 200000 ns [ 1100.603465][T21144] netlink: 'syz.3.3707': attribute type 10 has an invalid length. [ 1100.956359][T21155] netlink: 'syz.1.3710': attribute type 11 has an invalid length. [ 1101.608235][T21169] netlink: 220 bytes leftover after parsing attributes in process `syz.1.3718'. [ 1102.242002][T21189] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3724'. [ 1102.374892][T21190] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1102.724184][T21202] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1102.733849][T21202] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1102.744619][T21202] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1102.753925][T21202] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1103.520306][T21226] kAFS: unable to lookup cell '.,' [ 1104.067000][T21233] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1104.077319][T21233] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1104.685221][T21244] FAULT_INJECTION: forcing a failure. [ 1104.685221][T21244] name failslab, interval 1, probability 0, space 0, times 0 [ 1104.718370][T21244] CPU: 0 UID: 0 PID: 21244 Comm: syz.3.3737 Not tainted 6.16.0-rc4-syzkaller-00324-g1f988d0788f5 #0 PREEMPT(full) [ 1104.718397][T21244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1104.718409][T21244] Call Trace: [ 1104.718420][T21244] [ 1104.718429][T21244] dump_stack_lvl+0x189/0x250 [ 1104.718458][T21244] ? __pfx____ratelimit+0x10/0x10 [ 1104.718488][T21244] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1104.718508][T21244] ? __pfx__printk+0x10/0x10 [ 1104.718533][T21244] ? __pfx___might_resched+0x10/0x10 [ 1104.718555][T21244] ? fs_reclaim_acquire+0x7d/0x100 [ 1104.718585][T21244] should_fail_ex+0x414/0x560 [ 1104.718616][T21244] should_failslab+0xa8/0x100 [ 1104.718641][T21244] __kmalloc_noprof+0xcb/0x4f0 [ 1104.718662][T21244] ? tomoyo_encode+0x28b/0x550 [ 1104.718684][T21244] tomoyo_encode+0x28b/0x550 [ 1104.718707][T21244] tomoyo_realpath_from_path+0x58d/0x5d0 [ 1104.718735][T21244] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1104.718759][T21244] tomoyo_path_number_perm+0x1e8/0x5a0 [ 1104.718786][T21244] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1104.718813][T21244] ? sb_end_write+0xe9/0x1c0 [ 1104.718839][T21244] ? vfs_write+0x8d8/0xa90 [ 1104.718901][T21244] ? ksys_write+0x1e1/0x250 [ 1104.718928][T21244] security_file_ioctl+0xcb/0x2d0 [ 1104.718955][T21244] __se_sys_ioctl+0x47/0x170 [ 1104.718977][T21244] do_syscall_64+0xfa/0x3b0 [ 1104.718994][T21244] ? lockdep_hardirqs_on+0x9c/0x150 [ 1104.719011][T21244] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1104.719028][T21244] ? clear_bhb_loop+0x60/0xb0 [ 1104.719050][T21244] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1104.719067][T21244] RIP: 0033:0x7f9d6b78e929 [ 1104.719084][T21244] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1104.719099][T21244] RSP: 002b:00007f9d6c5d9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1104.719119][T21244] RAX: ffffffffffffffda RBX: 00007f9d6b9b5fa0 RCX: 00007f9d6b78e929 [ 1104.719133][T21244] RDX: 0000000000000000 RSI: 0000000040047440 RDI: 0000000000000003 [ 1104.719144][T21244] RBP: 00007f9d6c5d9090 R08: 0000000000000000 R09: 0000000000000000 [ 1104.719154][T21244] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1104.719164][T21244] R13: 0000000000000000 R14: 00007f9d6b9b5fa0 R15: 00007f9d6badfa28 [ 1104.719192][T21244] [ 1104.719301][T21244] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1105.218487][T21251] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3740'. [ 1105.227701][T21251] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3740'. [ 1105.430278][ T10] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 1105.620124][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 1105.637846][ T10] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 1105.704283][ T10] usb 4-1: config 0 has no interface number 0 [ 1105.920696][ T10] usb 4-1: config 0 interface 12 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1105.985404][T21269] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1105.999804][ T10] usb 4-1: config 0 interface 12 has no altsetting 0 [ 1106.040207][ T10] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1106.094820][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1106.250086][ T10] usb 4-1: Product: syz [ 1106.254448][ T10] usb 4-1: Manufacturer: syz [ 1106.267206][ T10] usb 4-1: SerialNumber: syz [ 1106.303061][ T10] usb 4-1: config 0 descriptor?? [ 1106.372078][ T10] f81534 4-1:0.12: required endpoints missing [ 1106.905287][T21282] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3748'. [ 1107.233705][ T5848] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 1107.413062][ T5848] usb 2-1: Using ep0 maxpacket: 16 [ 1107.428523][ T5848] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1107.436836][ T5848] usb 2-1: config 0 has no interface number 0 [ 1107.456418][ T5848] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1107.500472][ T5848] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1107.527314][ T5848] usb 2-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 1107.582266][ T5848] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1107.646893][ T5848] usb 2-1: config 0 descriptor?? [ 1107.681516][T21282] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1107.693857][T21282] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1107.741118][T21282] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 1107.802185][T21282] bond0 (unregistering): Released all slaves [ 1107.856494][T21265] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3746'. [ 1108.123717][ T847] usb 4-1: USB disconnect, device number 80 [ 1108.307545][ T5848] usbhid 2-1:0.1: can't add hid device: -71 [ 1108.322138][ T5848] usbhid 2-1:0.1: probe with driver usbhid failed with error -71 [ 1108.384891][ T5848] usb 2-1: USB disconnect, device number 21 [ 1108.839860][ T5848] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 1109.120218][ T5848] usb 4-1: Using ep0 maxpacket: 16 [ 1109.604672][T21327] fuse: Unknown parameter 'q0i'tU%R˩oSD5z [j\BevcfjbU}!k`+Ob3J1@i(mEUcY'j]OM)U I9PZ[c'f@tlJV1@s0' [ 1109.678264][T21330] dlm: non-version read from control device 8192 [ 1109.842520][T21332] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3762'. [ 1109.871941][T21328] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 1109.966369][T21328] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1109.993462][T21328] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1110.937950][T21340] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3765'. [ 1110.967169][T21340] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3765'. [ 1111.562575][T21347] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3763'. [ 1112.139377][ T5848] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1112.206216][ T5848] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 1112.245018][ T5848] usb 4-1: can't read configurations, error -71 [ 1112.398776][T21359] IPVS: Error joining to the multicast group [ 1112.914226][T21364] kvm: Disabled LAPIC found during irq injection [ 1112.938948][T21364] program syz.4.3770 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1113.124341][T21364] program syz.4.3770 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1113.514621][T21374] trusted_key: encrypted_key: insufficient parameters specified [ 1113.582929][T21373] trusted_key: encrypted_key: insufficient parameters specified [ 1114.119631][T21390] FAULT_INJECTION: forcing a failure. [ 1114.119631][T21390] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1114.119669][T21390] CPU: 0 UID: 0 PID: 21390 Comm: syz.0.3778 Not tainted 6.16.0-rc4-syzkaller-00324-g1f988d0788f5 #0 PREEMPT(full) [ 1114.119694][T21390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1114.119707][T21390] Call Trace: [ 1114.119715][T21390] [ 1114.119725][T21390] dump_stack_lvl+0x189/0x250 [ 1114.119759][T21390] ? __pfx____ratelimit+0x10/0x10 [ 1114.119792][T21390] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1114.119816][T21390] ? __pfx__printk+0x10/0x10 [ 1114.119846][T21390] ? __might_fault+0xb0/0x130 [ 1114.119885][T21390] should_fail_ex+0x414/0x560 [ 1114.119922][T21390] _copy_from_user+0x2d/0xb0 [ 1114.119950][T21390] proc_control+0x9a/0x110 [ 1114.119980][T21390] ? __pfx_proc_control+0x10/0x10 [ 1114.120025][T21390] usbdev_ioctl+0xc5b/0x20c0 [ 1114.120064][T21390] ? __pfx_usbdev_ioctl+0x10/0x10 [ 1114.120090][T21390] ? __fget_files+0x2a/0x420 [ 1114.120124][T21390] ? __fget_files+0x3a0/0x420 [ 1114.120152][T21390] ? __fget_files+0x2a/0x420 [ 1114.120185][T21390] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1114.120219][T21390] ? __pfx_usbdev_ioctl+0x10/0x10 [ 1114.120246][T21390] __se_sys_ioctl+0xfc/0x170 [ 1114.120272][T21390] do_syscall_64+0xfa/0x3b0 [ 1114.120292][T21390] ? lockdep_hardirqs_on+0x9c/0x150 [ 1114.120311][T21390] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1114.120331][T21390] ? clear_bhb_loop+0x60/0xb0 [ 1114.120356][T21390] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1114.120376][T21390] RIP: 0033:0x7f267278e929 [ 1114.120395][T21390] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1114.120410][T21390] RSP: 002b:00007f2673539038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1114.120431][T21390] RAX: ffffffffffffffda RBX: 00007f26729b5fa0 RCX: 00007f267278e929 [ 1114.120445][T21390] RDX: 0000200000000000 RSI: 00000000c0185500 RDI: 0000000000000004 [ 1114.120458][T21390] RBP: 00007f2673539090 R08: 0000000000000000 R09: 0000000000000000 [ 1114.120471][T21390] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1114.120483][T21390] R13: 0000000000000000 R14: 00007f26729b5fa0 R15: 00007f2672adfa28 [ 1114.120515][T21390] [ 1114.243350][T21394] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3775'. [ 1114.532285][T21400] netlink: 'syz.3.3781': attribute type 1 has an invalid length. [ 1114.679223][T21400] bond0: entered promiscuous mode [ 1114.679247][T21400] bond0: entered allmulticast mode [ 1114.682702][T21400] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1114.694206][T21400] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3781'. [ 1114.694937][T21400] veth1_vlan: left promiscuous mode [ 1114.708761][T21400] netlink: 'syz.3.3781': attribute type 2 has an invalid length. [ 1114.722563][T21400] ip6gretap1: entered promiscuous mode [ 1114.722661][T21400] ip6gretap1: entered allmulticast mode [ 1114.723151][T21400] bond0: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 1114.790401][T15216] bond0: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1114.906393][ C0] vkms_vblank_simulate: vblank timer overrun [ 1114.930290][T15216] bond0: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1115.026491][T21405] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3780'. [ 1115.026529][T21405] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3780'. [ 1115.897506][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.904151][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.227472][T21439] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1116.275927][T21439] netlink: 'syz.3.3788': attribute type 10 has an invalid length. [ 1116.498701][T21447] FAULT_INJECTION: forcing a failure. [ 1116.498701][T21447] name failslab, interval 1, probability 0, space 0, times 0 [ 1116.527645][T21447] CPU: 0 UID: 0 PID: 21447 Comm: syz.4.3791 Not tainted 6.16.0-rc4-syzkaller-00324-g1f988d0788f5 #0 PREEMPT(full) [ 1116.527677][T21447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1116.527691][T21447] Call Trace: [ 1116.527700][T21447] [ 1116.527710][T21447] dump_stack_lvl+0x189/0x250 [ 1116.527742][T21447] ? __pfx____ratelimit+0x10/0x10 [ 1116.527786][T21447] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1116.527809][T21447] ? __pfx__printk+0x10/0x10 [ 1116.527839][T21447] ? __pfx___might_resched+0x10/0x10 [ 1116.527866][T21447] should_fail_ex+0x414/0x560 [ 1116.527898][T21447] should_failslab+0xa8/0x100 [ 1116.527926][T21447] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 1116.527952][T21447] ? __alloc_skb+0x112/0x2d0 [ 1116.527979][T21447] __alloc_skb+0x112/0x2d0 [ 1116.528006][T21447] netlink_sendmsg+0x5c6/0xb30 [ 1116.528041][T21447] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1116.528069][T21447] ? aa_sock_msg_perm+0x94/0x160 [ 1116.528099][T21447] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1116.528122][T21447] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1116.528148][T21447] __sock_sendmsg+0x21c/0x270 [ 1116.528170][T21447] ____sys_sendmsg+0x505/0x830 [ 1116.528201][T21447] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1116.528235][T21447] ? import_iovec+0x74/0xa0 [ 1116.528263][T21447] ___sys_sendmsg+0x21f/0x2a0 [ 1116.528291][T21447] ? __pfx____sys_sendmsg+0x10/0x10 [ 1116.528351][T21447] ? __fget_files+0x2a/0x420 [ 1116.528377][T21447] ? __fget_files+0x3a0/0x420 [ 1116.528414][T21447] __x64_sys_sendmsg+0x19b/0x260 [ 1116.528442][T21447] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1116.528478][T21447] ? __pfx_ksys_write+0x10/0x10 [ 1116.528519][T21447] ? rcu_is_watching+0x15/0xb0 [ 1116.528549][T21447] ? do_syscall_64+0xbe/0x3b0 [ 1116.528573][T21447] do_syscall_64+0xfa/0x3b0 [ 1116.528599][T21447] ? lockdep_hardirqs_on+0x9c/0x150 [ 1116.528619][T21447] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1116.528639][T21447] ? clear_bhb_loop+0x60/0xb0 [ 1116.528664][T21447] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1116.528697][T21447] RIP: 0033:0x7fb6cf58e929 [ 1116.528715][T21447] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1116.528732][T21447] RSP: 002b:00007fb6d0388038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1116.528753][T21447] RAX: ffffffffffffffda RBX: 00007fb6cf7b5fa0 RCX: 00007fb6cf58e929 [ 1116.528768][T21447] RDX: 0000000000040800 RSI: 00002000000002c0 RDI: 0000000000000003 [ 1116.528780][T21447] RBP: 00007fb6d0388090 R08: 0000000000000000 R09: 0000000000000000 [ 1116.528792][T21447] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1116.528804][T21447] R13: 0000000000000000 R14: 00007fb6cf7b5fa0 R15: 00007fb6cf8dfa28 [ 1116.528832][T21447] [ 1116.796984][ C0] vkms_vblank_simulate: vblank timer overrun [ 1117.692274][T21457] FAULT_INJECTION: forcing a failure. [ 1117.692274][T21457] name failslab, interval 1, probability 0, space 0, times 0 [ 1117.740129][T21457] CPU: 0 UID: 0 PID: 21457 Comm: syz.0.3796 Not tainted 6.16.0-rc4-syzkaller-00324-g1f988d0788f5 #0 PREEMPT(full) [ 1117.740160][T21457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1117.740174][T21457] Call Trace: [ 1117.740182][T21457] [ 1117.740191][T21457] dump_stack_lvl+0x189/0x250 [ 1117.740222][T21457] ? __pfx____ratelimit+0x10/0x10 [ 1117.740256][T21457] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1117.740281][T21457] ? __pfx__printk+0x10/0x10 [ 1117.740311][T21457] ? __pfx___might_resched+0x10/0x10 [ 1117.740336][T21457] ? fs_reclaim_acquire+0x7d/0x100 [ 1117.740371][T21457] should_fail_ex+0x414/0x560 [ 1117.740408][T21457] should_failslab+0xa8/0x100 [ 1117.740437][T21457] __kmalloc_noprof+0xcb/0x4f0 [ 1117.740462][T21457] ? tomoyo_encode+0x28b/0x550 [ 1117.740487][T21457] tomoyo_encode+0x28b/0x550 [ 1117.740514][T21457] tomoyo_realpath_from_path+0x58d/0x5d0 [ 1117.740550][T21457] tomoyo_path_perm+0x213/0x4b0 [ 1117.740576][T21457] ? arch_stack_walk+0xfc/0x150 [ 1117.740600][T21457] ? tomoyo_path_perm+0x1e3/0x4b0 [ 1117.740633][T21457] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 1117.740714][T21457] ? user_path_at+0x44/0x60 [ 1117.740738][T21457] ? aa_get_newest_label+0xf7/0x5d0 [ 1117.740770][T21457] ? hook_sb_umount+0x1da/0x370 [ 1117.740796][T21457] ? __pfx_aa_get_newest_label+0x10/0x10 [ 1117.740827][T21457] ? __pfx_hook_sb_umount+0x10/0x10 [ 1117.740858][T21457] tomoyo_sb_umount+0x9c/0xe0 [ 1117.740883][T21457] ? __pfx_tomoyo_sb_umount+0x10/0x10 [ 1117.740905][T21457] ? apparmor_capable+0x137/0x1b0 [ 1117.740932][T21457] ? security_capable+0x7e/0x2e0 [ 1117.740966][T21457] security_sb_umount+0xbb/0x290 [ 1117.740988][T21457] path_umount+0x3e6/0xf70 [ 1117.741025][T21457] ? __pfx_path_umount+0x10/0x10 [ 1117.741047][T21457] ? user_path_at+0x44/0x60 [ 1117.741064][T21457] ? kmem_cache_free+0x18f/0x400 [ 1117.741100][T21457] __x64_sys_umount+0x122/0x160 [ 1117.741125][T21457] ? __pfx___x64_sys_umount+0x10/0x10 [ 1117.741148][T21457] ? rcu_is_watching+0x15/0xb0 [ 1117.741179][T21457] ? do_syscall_64+0xbe/0x3b0 [ 1117.741205][T21457] do_syscall_64+0xfa/0x3b0 [ 1117.741225][T21457] ? lockdep_hardirqs_on+0x9c/0x150 [ 1117.741245][T21457] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1117.741265][T21457] ? clear_bhb_loop+0x60/0xb0 [ 1117.741291][T21457] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1117.741311][T21457] RIP: 0033:0x7f267278e929 [ 1117.741329][T21457] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1117.741348][T21457] RSP: 002b:00007f2673539038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1117.741370][T21457] RAX: ffffffffffffffda RBX: 00007f26729b5fa0 RCX: 00007f267278e929 [ 1117.741385][T21457] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 00002000000001c0 [ 1117.741397][T21457] RBP: 00007f2673539090 R08: 0000000000000000 R09: 0000000000000000 [ 1117.741410][T21457] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1117.741422][T21457] R13: 0000000000000000 R14: 00007f26729b5fa0 R15: 00007f2672adfa28 [ 1117.741455][T21457] [ 1117.741479][T21457] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1118.137623][T21459] program syz.7.3797 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1119.241450][ T3488] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1119.320431][ T3488] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1119.463077][T21465] ip6t_srh: unknown srh match flags 5040 [ 1119.575728][ T3488] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1119.608621][ T3488] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1120.043240][T21473] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3803'. [ 1120.075093][T21473] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3803'. [ 1120.094919][ T3488] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1120.277184][ T3488] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1120.892173][T12058] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1120.904469][T12058] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1120.922163][T12058] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1120.939036][T12058] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1120.950512][T12058] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1120.967063][ T5854] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1121.026754][ T5854] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1121.043654][ T5854] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1121.056219][ T5854] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1121.065918][ T5854] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1121.121402][ T3488] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1121.131962][ T3488] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1121.904325][ T3488] bridge_slave_1: left allmulticast mode [ 1121.927330][ T3488] bridge_slave_1: left promiscuous mode [ 1121.956611][ T3488] bridge0: port 2(bridge_slave_1) entered disabled state [ 1121.993073][ T3488] bridge_slave_0: left allmulticast mode [ 1122.017920][ T3488] bridge_slave_0: left promiscuous mode [ 1122.036183][ T3488] bridge0: port 1(bridge_slave_0) entered disabled state [ 1122.517180][T21507] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1122.530858][T21507] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1123.110394][T12058] Bluetooth: hci2: command tx timeout [ 1124.179530][T21510] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3810'. [ 1124.561503][ T3488] team0: Port device bridge1 removed [ 1124.653050][ T3488] team0: Port device bridge2 removed [ 1124.707562][ T3488] team0: Port device bridge3 removed [ 1124.907660][ T3488] bond1 (unregistering): Released all slaves [ 1124.925309][T21501] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3807'. [ 1125.192548][T12058] Bluetooth: hci2: command tx timeout [ 1125.337688][ T3488] tipc: Disabling bearer [ 1125.355762][ T3488] tipc: Left network mode [ 1125.418976][ T3488] IPVS: stopping backup sync thread 16187 ... [ 1125.472529][T21515] program syz.0.3811 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1126.160888][T21527] ip6t_srh: unknown srh match flags 5040 [ 1126.359637][T21529] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3814'. [ 1126.529657][T21489] chnl_net:caif_netlink_parms(): no params data found [ 1126.830552][ T3488] hsr_slave_0: left promiscuous mode [ 1126.849475][ T3488] hsr_slave_1: left promiscuous mode [ 1126.855966][ T3488] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1126.865346][ T3488] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1126.896130][T21538] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1126.911320][ T3488] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1126.928254][ T3488] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1127.016120][ T3488] veth1_vlan: left promiscuous mode [ 1127.104207][T21551] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1127.228091][T21556] netlink: 161716 bytes leftover after parsing attributes in process `syz.7.3818'. [ 1127.269574][T12058] Bluetooth: hci2: command tx timeout [ 1127.282861][T21556] netlink: zone id is out of range [ 1127.300691][T21556] netlink: zone id is out of range [ 1127.329359][T21556] netlink: zone id is out of range [ 1127.347688][T21556] netlink: zone id is out of range [ 1127.355086][T21556] netlink: zone id is out of range [ 1127.399392][T21556] netlink: zone id is out of range [ 1127.409416][T21556] netlink: zone id is out of range [ 1127.441367][T21556] netlink: zone id is out of range [ 1127.447807][T21556] netlink: zone id is out of range [ 1128.550826][ T847] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 1128.737832][ T847] usb 4-1: Using ep0 maxpacket: 32 [ 1128.803058][ T847] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1128.862798][ T847] usb 4-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 1128.874415][ T847] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1128.885531][ T847] usb 4-1: Product: syz [ 1128.889718][ T847] usb 4-1: Manufacturer: syz [ 1128.894976][ T847] usb 4-1: SerialNumber: syz [ 1128.911070][ T847] usb 4-1: config 0 descriptor?? [ 1128.921685][ T847] cdc_ether 4-1:0.0: skipping garbage [ 1128.937387][ T847] usb 4-1: bad CDC descriptors [ 1128.944378][T21579] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3824'. [ 1128.947213][ T847] usb 4-1: unsupported MDLM descriptors [ 1129.139298][ T9] usb 4-1: USB disconnect, device number 83 [ 1129.329999][T12058] Bluetooth: hci2: command tx timeout [ 1129.504656][ T3488] team0 (unregistering): Port device team_slave_1 removed [ 1129.562707][ T3488] team0 (unregistering): Port device team_slave_0 removed [ 1131.216964][T21591] ip6t_srh: unknown srh match flags 5040 [ 1131.224368][T21489] bridge0: port 1(bridge_slave_0) entered blocking state [ 1131.245635][T21489] bridge0: port 1(bridge_slave_0) entered disabled state [ 1131.263038][T21489] bridge_slave_0: entered allmulticast mode [ 1131.305735][T21489] bridge_slave_0: entered promiscuous mode [ 1131.313065][T21599] program syz.7.3829 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1131.361120][T21489] bridge0: port 2(bridge_slave_1) entered blocking state [ 1131.386144][T21489] bridge0: port 2(bridge_slave_1) entered disabled state [ 1131.467647][T21489] bridge_slave_1: entered allmulticast mode [ 1131.592261][T21489] bridge_slave_1: entered promiscuous mode [ 1132.619533][T21489] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1132.815097][T21489] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1133.078771][T21489] team0: Port device team_slave_0 added [ 1133.106113][T21489] team0: Port device team_slave_1 added [ 1133.155471][ T3488] IPVS: stop unused estimator thread 0... [ 1133.384270][T21489] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1133.398110][T21489] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1133.568691][T21489] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1133.860452][T21489] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1133.867472][T21489] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1134.137132][T21489] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1134.392501][T21640] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3836'. [ 1134.438368][T21489] hsr_slave_0: entered promiscuous mode [ 1134.485911][T21489] hsr_slave_1: entered promiscuous mode [ 1134.532074][T21489] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1134.564102][T21489] Cannot create hsr debugfs directory [ 1135.092775][T21646] net_ratelimit: 675 callbacks suppressed [ 1135.093844][T21646] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1135.192760][T21646] netlink: 'syz.4.3837': attribute type 10 has an invalid length. [ 1136.772928][T21658] ip6t_srh: unknown srh match flags 5040 [ 1137.274838][T21667] bridge9: entered promiscuous mode [ 1137.281813][T21667] bridge9: entered allmulticast mode [ 1137.366838][T21667] team0: Port device bridge9 added [ 1137.888507][T21489] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1137.917195][T21489] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1137.953570][T21489] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1137.996933][T21489] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1138.153073][T21700] kvm: vcpu 1: requested lapic timer restore with starting count register 0x390=778909908 (6231279264 ns) > initial count (2900669840 ns). Using initial count to start timer. [ 1138.376172][ T30] audit: type=1326 audit(1751816643.400:1621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21705 comm="syz.0.3848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f267278e929 code=0x7ffc0000 [ 1138.425953][T21489] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1138.479741][ T30] audit: type=1326 audit(1751816643.400:1622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21705 comm="syz.0.3848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f267278e929 code=0x7ffc0000 [ 1138.522784][ T30] audit: type=1326 audit(1751816643.400:1623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21705 comm="syz.0.3848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=288 compat=0 ip=0x7f267278e929 code=0x7ffc0000 [ 1138.550940][T21489] 8021q: adding VLAN 0 to HW filter on device team0 [ 1138.566020][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 1138.571506][ T30] audit: type=1326 audit(1751816643.400:1624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21705 comm="syz.0.3848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f267278e929 code=0x7ffc0000 [ 1138.573249][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1138.647836][T21711] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1138.670248][ T10] usb 4-1: new low-speed USB device number 84 using dummy_hcd [ 1138.677851][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 1138.685129][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1138.768481][T21489] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1138.820058][ T10] usb 4-1: device descriptor read/64, error -71 [ 1138.840527][T21489] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1138.940264][T21719] ip6t_srh: unknown srh match flags 5040 [ 1139.002892][T21489] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1139.078294][ T10] usb 4-1: new low-speed USB device number 85 using dummy_hcd [ 1139.204437][T21489] veth0_vlan: entered promiscuous mode [ 1139.211667][T21725] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1139.241800][T21725] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1139.250500][ T10] usb 4-1: device descriptor read/64, error -71 [ 1139.263502][T21489] veth1_vlan: entered promiscuous mode [ 1139.329100][T21729] [U] Kaw+ [ 1139.333075][T21729] [U] ->@*|]RauQehPVaN!F4?|F)>Ig0&mfݕ0Tu$3ꑊPN!1k*Wq)dyY$XE߂!7E.;Stq099)3'PQZh@Ł۰J0,blL~͗s"lvqe.&2ВvS*`cY7x-sn9'f*הMh6>>0ޘUM^g/>}˜T 8^8@J`XO熢:9T>;M|D ':|Q>PaJS(ܪ7yuE. HT . 0]*`LFӅ2WjWos [ 1139.378271][T21729] [U] Fb30pWΛ [ 1139.382306][T21729] [U] qBWzi0+ڐ=DsA{O~+1_Pwl/ ptjT=Azfmz+/_ e@ ݓ߀̿]P̲dkbppyƴ u^É `׶'rrDc]~l]bXr [ 1139.398230][T21729] [U] Ejb-鸴nfۢ@+@uVcY|zp!;vnJdW$w5Rg hlʵ`Q]GTd%]٥!~ W XVZV+xjHgDŽeJ*# [ 1139.414239][T21729] [U] --nH4#}81@;U_!\6M8lKsDT4FLS2`hO[{*-VoZ)԰On)~ukyWI}X&f&U5OԠ]=?j;k@WZS [ 1139.430947][T21729] [U] tiP`!5\, [ 1139.436193][T21729] [U] s/:5wҺ8 [ 1139.441245][T21729] [U] LI;?ɳ'|l>ޟ [ 1139.446236][T21729] [U] XDZ7`]F4]Z5RI"%Qn:j(p!gƩ3'Q+4'_ޡÝ:&J('=<]}b+{: [ 1139.460941][T21729] [U] @8}z!AweR!e_%ծY{HVR5PP!qn8iX [ 1139.468736][T21729] [U] ȻݩZCRxdgfCis~HM\+B60 [ 1139.476488][T21729] [U] F` [ 1139.585825][T21729] [U] R *>yPG灈2H?g+7]Qq*"ǀ4K'"P&)qͭ9h|DPj^fxvD9H@J4"9[h2;$=Qxa9%K! [ 1139.587900][T21489] veth1_macvtap: entered promiscuous mode [ 1139.602068][T21729] [U] $x 7I&F~ S0~q | [ 1139.602092][T21729] [U] LCAGv[r]!c3]?_}``ȝ"qÅ9 м~J^8:APLM@(Q 8[&@=%cd/sx񵗲y#)-J'og5;Ú*b"SnX4L LE [ 1139.602132][T21729] [U] .LCu] Qb~MDT? هGڱKt'4i$ZW]vpN#6Cm>mnXr?oT%><7yzOCuȤߜVbC2؜2_-q\ُǷ1ԑ_'t1(f^H+voN6a~ [ 1139.640715][ T10] usb usb4-port1: attempt power cycle [ 1139.696191][T21732] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1139.705971][T21732] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1139.786465][T21725] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3854'. [ 1139.798807][T21729] [U] Q @C{pgwyݷXM :ynVUwA+'U{v?NId0T7D|*y,QA [ 1139.945245][T21489] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1140.117849][T21489] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1140.129907][ T10] usb 4-1: new low-speed USB device number 86 using dummy_hcd [ 1140.171363][ T10] usb 4-1: device descriptor read/8, error -71 [ 1140.190036][T21489] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1140.245165][T21489] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1140.268317][T21489] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1140.289564][T21489] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1140.450313][ T10] usb 4-1: new low-speed USB device number 87 using dummy_hcd [ 1140.491602][ T10] usb 4-1: device descriptor read/8, error -71 [ 1140.664258][ T10] usb usb4-port1: unable to enumerate USB device [ 1140.894286][ T3488] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1140.924439][ T3488] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1141.016904][ T3488] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1141.037427][ T3488] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1141.662193][T21757] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 1141.864797][T21772] sctp: [Deprecated]: syz.7.3861 (pid 21772) Use of int in maxseg socket option. [ 1141.864797][T21772] Use struct sctp_assoc_value instead [ 1141.880291][ T24] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 1142.050963][T21772] netlink: 'syz.7.3861': attribute type 10 has an invalid length. [ 1142.117052][T21772] team0: Device veth0_vlan failed to register rx_handler [ 1142.378394][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1142.394714][ T24] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1142.424703][T21775] program syz.1.3863 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1142.577435][ T24] usb 4-1: New USB device found, idVendor=04e2, idProduct=1420, bcdDevice=9e.b9 [ 1142.677612][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1142.909490][ T24] usb 4-1: Product: syz [ 1142.910489][T21780] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1142.941823][T21780] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1142.959674][ T24] usb 4-1: Manufacturer: syz [ 1142.997518][ T24] usb 4-1: SerialNumber: syz [ 1143.092445][ T24] usb 4-1: config 0 descriptor?? [ 1143.115874][T21780] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1143.235710][T21780] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1143.392194][ T24] usb 4-1: USB disconnect, device number 88 [ 1144.878777][T21818] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1144.887804][T21818] batadv_slave_0: entered promiscuous mode [ 1145.455269][T21825] netlink: 276 bytes leftover after parsing attributes in process `syz.0.3872'. [ 1145.710593][T21834] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3867'. [ 1145.719564][T21834] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3867'. [ 1146.706871][T21867] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3884'. [ 1147.004641][T21875] netlink: 'syz.1.3888': attribute type 8 has an invalid length. [ 1147.906299][ T5854] Bluetooth: hci2: command 0x0405 tx timeout [ 1149.206017][ T37] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1150.995191][T21964] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3912'. [ 1151.019280][T21986] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1151.071516][T21986] bridge0: port 2(bridge_slave_1) entered disabled state [ 1151.080858][T21986] bridge0: port 1(bridge_slave_0) entered disabled state [ 1151.177517][T21979] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1151.185013][T21979] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1151.233005][T21979] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1151.292706][T21990] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3920'. [ 1152.475508][T22028] netlink: 'syz.3.3936': attribute type 8 has an invalid length. [ 1152.541915][T22028] bridge4: entered allmulticast mode [ 1152.900387][T22044] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1152.964293][T22046] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3942'. [ 1153.010670][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1153.094524][ T5854] Bluetooth: hci2: command 0x0405 tx timeout [ 1153.977171][T22053] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1154.011498][T22053] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1154.038734][T22053] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1154.076633][T22053] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1154.275026][T22053] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1154.300613][T22053] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1154.320467][T22053] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1154.329480][T22053] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1154.373635][T22053] team0: Port device bridge3 removed [ 1154.388192][T22053] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1154.398398][T22053] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1154.407998][T22053] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1154.417819][T22053] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1154.515128][T22053] bond0: (slave ip6gretap1): Removing an active aggregator [ 1154.549181][T22053] bond0: (slave ip6gretap1): Releasing backup interface [ 1154.563183][T22053] ip6gretap1: left promiscuous mode [ 1154.568800][T22053] ip6gretap1: left allmulticast mode [ 1154.629216][T22085] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 1154.978754][T22099] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3956'. [ 1155.125893][T12690] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1155.170414][ T5854] Bluetooth: hci2: command 0x0405 tx timeout [ 1156.678075][T22121] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1156.720315][T22121] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1157.250632][ T5854] Bluetooth: hci2: command 0x0405 tx timeout [ 1157.669808][T22138] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] SMP KASAN PTI [ 1157.681888][T22138] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f] [ 1157.690487][T22138] CPU: 0 UID: 0 PID: 22138 Comm: syz.0.3969 Not tainted 6.16.0-rc4-syzkaller-00324-g1f988d0788f5 #0 PREEMPT(full) [ 1157.702588][T22138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1157.712660][T22138] RIP: 0010:__list_del_entry_valid_or_report+0x25/0x190 [ 1157.719624][T22138] Code: 90 90 90 90 90 f3 0f 1e fa 41 57 41 56 41 55 41 54 53 48 89 fb 49 bd 00 00 00 00 00 fc ff df 48 83 c7 08 48 89 f8 48 c1 e8 03 <42> 80 3c 28 00 74 05 e8 2f d3 5b fd 4c 8b 7b 08 48 89 d8 48 c1 e8 [ 1157.739253][T22138] RSP: 0018:ffffc9000e24f0c0 EFLAGS: 00010202 [ 1157.745340][T22138] RAX: 000000000000000b RBX: 0000000000000050 RCX: 0000000000080000 [ 1157.753330][T22138] RDX: ffffc90004881000 RSI: 0000000000000348 RDI: 0000000000000058 [ 1157.761311][T22138] RBP: dffffc0000000000 R08: ffff888027d01e00 R09: 0000000000000002 [ 1157.769291][T22138] R10: 00000000ffffffff R11: ffffffff89873780 R12: 0000000000000000 [ 1157.777267][T22138] R13: dffffc0000000000 R14: 0000000000000050 R15: ffff888030b9a000 [ 1157.785253][T22138] FS: 00007f26735396c0(0000) GS:ffff888125c1c000(0000) knlGS:0000000000000000 [ 1157.794192][T22138] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1157.800786][T22138] CR2: 000000110c24fccc CR3: 00000000388de000 CR4: 00000000003526f0 [ 1157.808769][T22138] DR0: 000000000000000e DR1: 000000000000000c DR2: 000000000000000e [ 1157.816743][T22138] DR3: 00000000000000b4 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1157.824717][T22138] Call Trace: [ 1157.827999][T22138] [ 1157.830946][T22138] drr_qlen_notify+0x2c/0xf0 [ 1157.835562][T22138] qdisc_tree_reduce_backlog+0x29c/0x480 [ 1157.841207][T22138] ? qdisc_tree_reduce_backlog+0x3c/0x480 [ 1157.846940][T22138] hhf_change+0x764/0xad0 [ 1157.851285][T22138] ? __pfx_hhf_change+0x10/0x10 [ 1157.856148][T22138] ? __pfx_hhf_init+0x10/0x10 [ 1157.860842][T22138] hhf_init+0x213/0x950 [ 1157.865003][T22138] ? __pfx_hhf_init+0x10/0x10 [ 1157.869679][T22138] qdisc_create+0x7ac/0xea0 [ 1157.874192][T22138] tc_modify_qdisc+0x1426/0x2010 [ 1157.879191][T22138] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 1157.884495][T22138] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 1157.889790][T22138] rtnetlink_rcv_msg+0x779/0xb70 [ 1157.894748][T22138] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 1157.899873][T22138] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1157.905351][T22138] ? ref_tracker_free+0x63a/0x7d0 [ 1157.910377][T22138] ? __copy_skb_header+0xa7/0x550 [ 1157.915411][T22138] ? __pfx_ref_tracker_free+0x10/0x10 [ 1157.920792][T22138] ? __skb_clone+0x63/0x7a0 [ 1157.925312][T22138] netlink_rcv_skb+0x208/0x470 [ 1157.930085][T22138] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1157.935561][T22138] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1157.940860][T22138] ? netlink_deliver_tap+0x2e/0x1b0 [ 1157.946076][T22138] ? netlink_deliver_tap+0x2e/0x1b0 [ 1157.951285][T22138] netlink_unicast+0x75b/0x8d0 [ 1157.956064][T22138] netlink_sendmsg+0x805/0xb30 [ 1157.960842][T22138] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1157.966157][T22138] ? aa_sock_msg_perm+0x94/0x160 [ 1157.971117][T22138] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1157.976415][T22138] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1157.981714][T22138] __sock_sendmsg+0x21c/0x270 [ 1157.986407][T22138] ____sys_sendmsg+0x505/0x830 [ 1157.991185][T22138] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1157.996487][T22138] ? import_iovec+0x74/0xa0 [ 1158.001008][T22138] ___sys_sendmsg+0x21f/0x2a0 [ 1158.005710][T22138] ? __pfx____sys_sendmsg+0x10/0x10 [ 1158.010938][T22138] ? __fget_files+0x2a/0x420 [ 1158.015544][T22138] ? __fget_files+0x3a0/0x420 [ 1158.020239][T22138] __x64_sys_sendmsg+0x19b/0x260 [ 1158.025198][T22138] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1158.030688][T22138] ? rcu_is_watching+0x15/0xb0 [ 1158.035463][T22138] ? do_syscall_64+0xbe/0x3b0 [ 1158.040154][T22138] do_syscall_64+0xfa/0x3b0 [ 1158.044667][T22138] ? lockdep_hardirqs_on+0x9c/0x150 [ 1158.049879][T22138] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1158.055963][T22138] ? clear_bhb_loop+0x60/0xb0 [ 1158.060647][T22138] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1158.066578][T22138] RIP: 0033:0x7f267278e929 [ 1158.070996][T22138] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1158.090706][T22138] RSP: 002b:00007f2673539038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1158.099145][T22138] RAX: ffffffffffffffda RBX: 00007f26729b5fa0 RCX: 00007f267278e929 [ 1158.107137][T22138] RDX: 0000000000004800 RSI: 0000200000000280 RDI: 0000000000000003 [ 1158.115210][T22138] RBP: 00007f2672810b39 R08: 0000000000000000 R09: 0000000000000000 [ 1158.123196][T22138] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1158.131199][T22138] R13: 0000000000000000 R14: 00007f26729b5fa0 R15: 00007f2672adfa28 [ 1158.139194][T22138] [ 1158.142264][T22138] Modules linked in: [ 1158.146325][T22138] ---[ end trace 0000000000000000 ]--- [ 1158.151845][T22138] RIP: 0010:__list_del_entry_valid_or_report+0x25/0x190 [ 1158.158873][T22138] Code: 90 90 90 90 90 f3 0f 1e fa 41 57 41 56 41 55 41 54 53 48 89 fb 49 bd 00 00 00 00 00 fc ff df 48 83 c7 08 48 89 f8 48 c1 e8 03 <42> 80 3c 28 00 74 05 e8 2f d3 5b fd 4c 8b 7b 08 48 89 d8 48 c1 e8 [ 1158.178589][T22138] RSP: 0018:ffffc9000e24f0c0 EFLAGS: 00010202 [ 1158.184722][T22138] RAX: 000000000000000b RBX: 0000000000000050 RCX: 0000000000080000 [ 1158.192759][T22138] RDX: ffffc90004881000 RSI: 0000000000000348 RDI: 0000000000000058 [ 1158.200788][T22138] RBP: dffffc0000000000 R08: ffff888027d01e00 R09: 0000000000000002 [ 1158.208818][T22138] R10: 00000000ffffffff R11: ffffffff89873780 R12: 0000000000000000 [ 1158.216855][T22138] R13: dffffc0000000000 R14: 0000000000000050 R15: ffff888030b9a000 [ 1158.224918][T22138] FS: 00007f26735396c0(0000) GS:ffff888125c1c000(0000) knlGS:0000000000000000 [ 1158.233931][T22138] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1158.240571][T22138] CR2: 000000110c24fccc CR3: 00000000388de000 CR4: 00000000003526f0 [ 1158.248598][T22138] DR0: 000000000000000e DR1: 000000000000000c DR2: 000000000000000e [ 1158.256643][T22138] DR3: 00000000000000b4 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1158.264711][T22138] Kernel panic - not syncing: Fatal exception in interrupt [ 1158.272305][T22138] Kernel Offset: disabled [ 1158.276640][T22138] Rebooting in 86400 seconds..