last executing test programs: 3m26.31409701s ago: executing program 4 (id=60): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000074c0)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r2, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0x9b4, 0x2, {{{0x2, 0x9, 0x10000000, 0x6}, 0x1, 0xfb}, [{0x2, 0x9c, 0x81, 0x6, 0x2, 0x7}, {0x1, 0x6, 0x4, 0x3, 0xfffffffd, 0x81}, {0x1, 0x80000001, 0x8, 0x101, 0x3}, {0x3, 0x9, 0x0, 0x7, 0x5, 0x4}, {0xf, 0x4, 0x9, 0x51, 0x8}, {0x3, 0x4, 0xc, 0x101, 0x3, 0x84b5}, {0x9c, 0x4, 0x9, 0x2, 0x487, 0x8}, {0x1, 0x10000, 0x5, 0x4, 0x3, 0x8000}, {0x7, 0x9, 0x1ff, 0x8, 0x2, 0x7fff}, {0x439356e7, 0x609, 0x16, 0x0, 0x10000, 0x6}, {0x5, 0x3, 0x8, 0x3, 0x0, 0xffffffff}, {0x5, 0x0, 0x7, 0x7, 0x8, 0x5}, {0x5, 0x8, 0x9, 0x5, 0xfffff000, 0x7}, {0x768d, 0xcd, 0x8, 0x7, 0x5, 0x9}, {0x1, 0xfffffffb, 0x6, 0x5, 0x7ff, 0x6}, {0xfffffffb, 0x3, 0xfffffffe, 0x6, 0x2}, {0xfffff9fd, 0x9, 0xa5f, 0xa, 0x5, 0x2}, {0xffff997c, 0x9, 0x167, 0x2, 0x71, 0xa2}, {0x140, 0x2, 0xc, 0x8, 0x87, 0x60}, {0x5, 0xa, 0x2, 0x4, 0x3, 0x2000}, {0x32d, 0x8, 0x7fff, 0x4, 0x8, 0x9}, {0x8, 0x200, 0x58fe, 0x7ff, 0x4, 0x3}, {0x101, 0xd, 0x101, 0x1, 0x3, 0x8}, {0x0, 0xe520, 0x1ff, 0x7437ec78, 0x2, 0x9}, {0xffffffff, 0x1, 0x9, 0x0, 0x1, 0x4}, {0xc, 0xe, 0x0, 0x3, 0x8, 0x81}, {0x3, 0x3, 0x6, 0xe, 0x0, 0x80}, {0xd, 0x0, 0x7ff, 0x0, 0x80000000, 0x2}, {0x4, 0xb, 0x6c5f1878, 0x57c4, 0x8, 0x25ff}, {0x4, 0xd, 0x1fadd976, 0x3071, 0x0, 0x1}, {0x5, 0x800, 0x3, 0x3, 0x3, 0x9}, {0x9, 0x1ff, 0x81, 0x9c, 0x1, 0x5}, {0x9, 0xd76, 0x6, 0xdc2, 0xa16a, 0x2}, {0x1ff, 0x5, 0x7, 0x2, 0x2, 0x1}, {0x1, 0x32158140, 0x0, 0x8, 0x6, 0x7}, {0xe, 0x4, 0x0, 0x5, 0x2, 0x7f}, {0x3, 0x2ec74d53, 0x0, 0x0, 0x8, 0x2}, {0x5, 0xfff, 0xffffff13, 0x6, 0x2, 0x6}, {0x1, 0x6, 0x3, 0x4, 0xffb, 0xc}, {0xa, 0x6, 0x1ff, 0x8, 0x7ff, 0x8001}, {0x4, 0xffffffff, 0x0, 0xfffff740, 0x4, 0x4}, {0xffff, 0x5, 0x7, 0xac, 0xf}, {0x5, 0x3, 0x6, 0x1000, 0xd8fe, 0x8001}, {0xd, 0x3, 0x80000000, 0x0, 0xffffff81, 0x7ff}, {0xfffffffb, 0x2, 0x1ff, 0xf9, 0xffff8001}, {0x0, 0x6, 0x7ffc, 0x9, 0x500, 0x7}, {0x1, 0xffffffff, 0x834, 0x7, 0x0, 0x3}, {0x7fff, 0x6, 0x0, 0x2002, 0x2, 0x8}, {0xf61, 0x101, 0x9, 0x2, 0x80000000, 0x7fff}, {0xc7, 0x1, 0x8, 0x2, 0xffff, 0x20000000}, {0x0, 0x5, 0x1, 0xffff, 0x3, 0x3}, {0x8, 0x10001, 0x9f98, 0x1, 0x8, 0x66a}, {0xfff, 0x6, 0x8, 0x80000001, 0x0, 0x7f}, {0x8, 0x6, 0x7f, 0x5, 0x3, 0xb}, {0x4, 0x4b, 0x0, 0x1, 0x7f, 0x7fffffff}, {0xfff, 0x47e4, 0x1, 0x0, 0x80000001, 0x9}, {0x3, 0x9, 0x7, 0x6, 0x3e6b7592, 0xe5}, {0x9, 0x9, 0x1, 0x9, 0x0, 0x2}, {0x8, 0x80000001, 0x7fff, 0xb2d9, 0xfffffffe, 0x8}, {0x80000001, 0x9, 0x5202, 0x2, 0x53ce, 0x3}, {0x6, 0x7, 0x8, 0x8, 0x7f, 0x80000000}, {0xfffffff9, 0x9, 0x6, 0x6, 0x9, 0x3}, {0xfffffffd, 0x8, 0x6, 0x5, 0x3, 0x8f}, {0x741, 0x0, 0x9, 0x7fffffff, 0x2, 0x200}, {0x401, 0x2, 0x8, 0x6, 0x4, 0xc6e9}, {0x1, 0x2d73, 0x3ff, 0x5, 0x9f17, 0xffffff7f}, {0x2, 0x401, 0x2b00, 0xfffff57b, 0xfffffc00, 0xd}, {0x3, 0x4, 0xc52b, 0x9, 0x5, 0xff}, {0x0, 0x4, 0x401, 0x0, 0x1, 0x9}, {0x8, 0x4, 0x1, 0x2, 0x10, 0x1}, {0xff, 0x8, 0x6, 0x5, 0xff, 0x5}, {0x2, 0xb15ce2d, 0x80000001, 0xbeab, 0x8, 0x5}, {0x3, 0x8, 0x3, 0x7, 0x8, 0x4}, {0xfff, 0x9, 0x6, 0x3, 0x100, 0x57}, {0x9, 0x5, 0x4, 0x3, 0xa, 0x2}, {0xb3, 0xe, 0x3, 0x8000, 0x7, 0x9}, {0xff, 0x7, 0x5, 0x10001, 0x6, 0x6}, {0x2, 0x8f, 0x9, 0xffffff46, 0x4, 0x80000000}, {0x9, 0x2, 0xfffffffc, 0x1, 0xd50, 0x3}, {0xd203, 0x7, 0x1, 0x10000, 0x43, 0x1ff}, {0x4, 0x3ff, 0xffffffff, 0x1, 0x5, 0x100}, {0x1ff, 0x3, 0x7ff, 0xfffffff8, 0x1ff, 0xfffffffc}, {0x7, 0x9, 0x3ff, 0x1, 0x7, 0x4}, {0x0, 0x6, 0x0, 0x9, 0xffff0001, 0xcca}, {0x7, 0x1, 0xfffffff1, 0x3ff, 0x100, 0x4}, {0x3, 0x9, 0x0, 0xed4, 0x4, 0x6}, {0x9, 0x7, 0x8001, 0x7, 0x7, 0x2}, {0x3, 0xfff, 0x9, 0x5, 0xb5, 0x3}, {0x0, 0x1, 0x1, 0x5, 0xffffff01, 0xfff}, {0x7, 0x5, 0x2, 0x2, 0x0, 0xfffff9de}, {0x5, 0xffffffff, 0xe6b, 0xb, 0xb, 0x4}, {0x1d, 0xffffff10, 0x1, 0x2, 0xff, 0x52e2}, {0x0, 0x9, 0x0, 0x7, 0xdb, 0x5}, {0x7, 0x2, 0x9, 0x8, 0xa, 0x100}, {0x81, 0x4, 0x988, 0x0, 0x0, 0x7}, {0xdc03, 0x7, 0x402c, 0xffff, 0xfffffff9, 0x4}, {0xa, 0xfffffffe, 0x1, 0x1ff, 0x1ff, 0xc1b7}, {0xa24b, 0x947d, 0x40, 0x4, 0x9, 0x2}, {0x9, 0x401, 0xa89, 0x5ef, 0x9, 0x8}, {0x4, 0x7fff, 0x0, 0x4, 0x7fffffff}, {0x3, 0xb8c, 0x6, 0x21761f6a, 0x1, 0x4}, {0xfff, 0xda, 0x1f, 0x4, 0x8, 0x2}, {0x8, 0x10, 0x100, 0x0, 0xfffffff7, 0x43}, {0xfffff000, 0x8, 0xe96, 0x9, 0x9, 0x34b0}, {0x4, 0x8, 0x8, 0x3, 0x6cf4, 0x1}, {0x3, 0x3, 0x7, 0x4, 0xbe, 0x81}, {0x4, 0x800, 0x0, 0x5, 0x8, 0xfa2f}, {0x3, 0x8d, 0x81, 0x2, 0x8, 0x6}, {0x9, 0x2, 0x6, 0x4, 0xf, 0x5}, {0x100, 0x1, 0x2, 0xffffffff, 0x9, 0x74}, {0x4, 0x4, 0x8, 0x1, 0x0, 0x3}, {0xfffffff8, 0xfffffffb, 0xffffffff, 0x62f, 0x401, 0x30564e0}, {0x9a2f, 0x800, 0x8, 0x7, 0x7}, {0x20000006, 0x2, 0x800, 0x200, 0x9, 0x3}, {0x7, 0x6, 0x8936, 0xdcb, 0x0, 0x2}, {0x6, 0x80000000, 0x8, 0xe, 0xfffffffa, 0x8de3}, {0x0, 0x9, 0x8, 0xfff, 0x6, 0x1ff}, {0x8195, 0x2, 0x1000}, {0x1, 0x5, 0xff, 0x9e0f, 0x5, 0x6}, {0x7fff, 0x6, 0x0, 0x5, 0x8000, 0x3}, {0x7ff, 0x9, 0xa, 0x6, 0x7, 0xe77}, {0x1, 0x5e12, 0x3, 0xfffffffa, 0x2, 0x80000001}, {0xffffff8c, 0x2, 0x1, 0x1, 0x10, 0x5}, {0x4, 0x7, 0x104, 0x78d, 0xffffcff9, 0x9}, {0x1, 0xe, 0x7, 0x2, 0x2, 0x207f}, {0x10, 0x5, 0xfffffffa, 0xff, 0x80000, 0xfff}, {0x1, 0x7ff, 0x696e, 0xa, 0x49d, 0xb}, {0x9bf4, 0x0, 0x5, 0x3, 0x3, 0x1000}], [{0x1, 0x1}, {0x2}, {0x5}, {0x2}, {0x2, 0x745e81639ff0f356}, {0x4}, {0x5}, {0x3, 0x1}, {0x3}, {0x2}, {0x3}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x2}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2}, {0x3, 0x1}, {0x2}, {0x5}, {0x2}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x4}, {0x5, 0x1}, {0x5, 0x1}, {}, {0x4, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5}, {0xa}, {0x3}, {0x3}, {0x2, 0x1}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x4}, {0x4}, {0x4, 0x1}, {0x4}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x5, 0x3}, {0x953408b204748fd6, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x3}, {0x6}, {0xa}, {0x3}, {}, {0x2, 0x1}, {0x1}, {0x4}, {0x5}, {0x3}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x6}, {0x2}, {0xb82e57098c7a44ef}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x5}, {0x1, 0x1}, {0x5}, {0x0, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x2}, {0x1}, {0x1, 0x1}, {}, {0x4}, {0x3}, {0x3}, {0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x1}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x4}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x400c}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xd, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r3], 0x4c}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3m26.147289095s ago: executing program 4 (id=62): syz_usb_connect$uac2(0x5, 0x7b, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) symlinkat(&(0x7f0000002080)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00') rmdir(&(0x7f0000004040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x7ff, @empty, 0x9}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) setsockopt$inet6_int(r1, 0x29, 0x3a, &(0x7f0000000040)=0x8, 0x4) recvmmsg(r1, &(0x7f0000004780)=[{{0x0, 0x0, 0x0}, 0x8000}], 0x1, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20004184, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e21, @remote}], 0x10) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000180)={0x0, 0x0}) ioctl$SG_BLKTRACESETUP(0xffffffffffffffff, 0xc0401273, &(0x7f0000000240)={'\x00', 0xff, 0x7, 0x40000000, 0x6, 0x9, r3}) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000200)={@private0, 0x800, 0x0, 0x1, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f00000000c0)={@mcast2, 0x800000, 0x0, 0x1, 0x1, 0x4, 0x6}, 0x20) syncfs(r0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r5 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) r6 = syz_open_dev$loop(&(0x7f0000002280), 0xffff, 0x121ac3) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_misc(r7, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f00000002c0)={r7, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x11, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00000000170000000400", "f4bd000000801900", [0x100000000, 0x8000000000000000]}}) ioctl$KVM_SET_USER_MEMORY_REGION2(r5, 0x40a0ae49, &(0x7f0000000280)={0x1, 0x1, 0x0, 0x1000, &(0x7f0000ffd000/0x1000)=nil, 0x18, r7}) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f0000000000), 0x4) 3m25.246230582s ago: executing program 4 (id=63): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x0, 0x408b0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) open(&(0x7f0000000180)='./cgroup\x00', 0x180ff, 0xa0) vmsplice(r0, 0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r3 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0}, 0x2020) syz_fuse_handle_req(r1, &(0x7f00000062c0)="23db5037805f177d136115e6a1a5903469af39c1fb9cb38215fe64cff9f2f0444a57e22b0cc5cb4f74c9792365400d9e1c68539ea5eff0a5ed0864814d39251bee8dfea69aa052d900bc0c792e1c9752b7d3a3222f6a1ad3e44c1f65617b128aea51911861ca36ba7c96b96b2fba0fdaa49ffb2612f3e81fe565327dd9965a60046442c9dcd0d552c6a00388be3b438a08883c7349761531880294ad9887db97d8c2f74921c57910cf1f5cc528e17bd5c3746b6202f26d621535aac5f7872c2cb3295e42524b5acb249b2d1ac1b53a4e31271decfca3fad2e2f740768adf00875c18cb7d115150f83ceb73f77a1f61f1666c2bb9f6bd9f0fb55b3a619446e32bae2a1d99aa49e5f3822e048f8be44b707f2db10d7916ec9a10a695d573d871cf24959c3d15e61344a68309d186956537c6ea8532fc2e1c7649f8409d8dcde4c8ee1530470ac9c870f9f1837574e444ba6addf5ddb2dec67c0e76df79f265b403818dddb4efc27c90985ed69a48b12056e548f9c99edf80d2b195d26acb1127661727a0600257f4b2546513d03930a0638a71bd3223e51fbb75c832ef737907f2f4d3f0505f431ea02783c798b5c4579c99961fb73dc623a0d99c1b306435464d413b537d42c6444851b36482597140b22fbc0ebc7e795b2f96739bf139f5823bc869ede547da4f394fa1b1787836095e1013264042e53d5006ea059d0488cb2f5ccd44b30d25ea53c2dda71d112d7d441dbfc9f8462c99c098b1958c80b237d83c32f2759c9a9c081d7d7666a477cfda59354309b09f2a8b9f6c3077b0df1e8d0c71ac07232de4f437107cb0eb9b47b2267efe31938a337cf11cadad72ced56895bb14763cca5bdadd245d801e829a1eb3bb4ed851a345918efd2dcf8d38f66badc773068e6a2ef59b2bb838abd8b043cf6ac54550f3fde1bbb9e761095e4b8ef1891757d376be1f778142610c0acbbfc697f51fbb7a1602ed46e82813c74f41ee2bae818174809f3692084bea7310ebec3d6166702ae62aad84313e19b4d145167185ea8d53cb21d099fb592d7d7f8bc305dd375b5c0cd73be44f49ff53cee220085d4706bbf50c6f63b02e7e805e8fa4c73046a57a8700886da29ea53e5a316e7b011c44a0f7be5cc5cb5641ba0069ff591eee18966c7f005ef40046a5fe2bf325b2545b009867761264aa9611d184fa372ba3c5c33d9a50717210f7cec7f6dc4418a87a797eb6aaf6ab3892bd3f559547c88d8c29646c8173fad1588f52beb34ff863be65e7ec1598cfb465f270bd5532fa7035aae077eedbc846058fa19f58ffb1cf0f1863f6d33f2e5c454d18b66be766ca369af2cc9656fa34c6c10e4d4da44ce5e2370aaf60c4e130da331d3489e8f44c600246323409fdd35d11da27128c9d64be65dd3a90c1546a6eb9185cb6d3a4a9cfad0e41ea03896fd2346f745eb3563d7a79fd345b037c040e56f0677840bf9b0d295bcfa98b931464c5ce9fcaf745720deac2d8b4edeffc0fe6f089ed7c3880959fcf8e31f7b7054bc4f5c9d3ed3f66c968d0bc20b2d66c374f030f3f1965f43a98519e527caf693362412d523eeb38c8b016ff77f78f833d7513e4b5a53d5ed5143916673f822ceac9967b8788bc6428283181eaf8d99e48286aacf4f658a903e9f08659450f7f9483807c2e013a1d9d199f18886a8cb4e14d41c71e5731455a4394551281eca12a1bb6ae717f5da2949175d0f1f3d718b761dfc1099c7d9d8928c899ac8e936e69d19fcbfcfdee83b68ef8e15eed41a8ac0d54aa92d7d2ee58bb4799f378225ec9ba4709e5ce2b77208ecc85c22c64967a9ef3360c54d311b8917ceb7b432c90cc5e98de9327c1400f8ec89261b1d77d8874b0bbdd2c5eb59df415705de52b08b0e12c07fb7367c6d461c19f282d51e482cb4fb9ceb0249ac2d6400ca170fbd6c0063224179c616bb030a5c10102aa2eea92f1e6f5828590b250b09e6d1a9535c298a68160b7c281fecdd295dc3396c4e6eb3395d5a677d5fa95a732dfdef81f4346545dd1a74bb3aa9b516699bdf0a59165077ab459a5ffe0dbb3ef8afa7a8382a8441e0c36ffabbed8f93f4bbeb97e5f6a704bf63a0de9ccf8fef643ebc530a80920931002003b027014de317c42f861d98ef4fef66d232d9706e6bd263347384dadadaa43a7e106bbb21bd822d468ace171b3f04b996112135b63dcbd612b5888ec40da583ab549c340ddaf5d7406c3e99322c68874214356c1fd9b5f84348e629cc3487a901d1b7a2fa531b1509ac1c93de3da9f1c3773e3a2aba2b29d2419f240ae6d24ed9f14bf0b9b0f1e740a2db06dab64d6386f950bff4e4c94160ef4b832bbde3af4937b7528658b5c16a51cb22193fe99385721ce5b048d9338e289dcb40683140c413eca52c8e4b64b306f47569477379c864cfb3aa3e349262407d3935ab9a0916eb0f6db2be71a7eb8f9968dfac44995d5bff8ef617fceeaa448f5e5f8d4b39e3512fe7ae9ee1d8a0d5912b6148969ab0325f3f76e2340fbd67ce156bdf638140b3ccdb08e5049db15957915cb05db8901249b10c59cc5c3ff836290e3334eee2df387e44c57b4d6198c3749f5dc57f6c3de115ced6b43cbddd762b58f1fb40b2baf3b381febdc073142e30d2e9a1a69e8d86314221e540f195509d223b206173dc5406865d8064817c30c284c034035a63190ab86df3bae4168c58e01d2251748fd5d9d610024129e83a5730fe83cf0918790e6854ab765c78649b91c06655f0cb9e26d8432df78bbadd99583b6a8afcf177ed6f339e08c0b36a16c6d31d8a24cb6f2bc3ba58d7711b6f8b988dc3e3144be619548457d4f40509f17eeb186cb93a2928ecb951593d1907c8bbb9f4c8999caba3059c8e73dce54ad6f87bcd51d559f7759902b14e68d3b845c0b179b38f4e6f0bd3a89cbcd5ebed9972102048647da1eda5c8456442369f4ae871d4037ba26f27d27371ce57e23adca5af8dc93f934f2ef8d69ad3b2db66657b3868dd839c2b522f5461f24407ef091b77242fc70a48b7eec45f3bcbcfbc6bdc36e4b67295020a345233a32a0a0af4d03a53ef67e69716d5ae35342722afbe7558946475a9ebf5b39c18558a0011f68bc8a78590b0cb63618379a512790c42d94bb239dd3ef5b8d1036cf0391aded8802a7a447c38f231ae611aeeab9bba44cd14369473758b64108d0bc9b6bc9e9b497c2d1d2acbae7c620a55c226cf371331688eaddec61fe961c5fcef71dad45820ed0ac8dc7641d82150f1318ac15aa41e7be585b6a50da1b3cd95239ee61cfde15aba80ae8ebc21ba4540883c6f44cd35b6b97da4640c97f5a2b6efa8d184fec823abc754ab8a0db6c45c2293e90d9c154c4a3e0b9ec2b6113ce6583b80f0d234dec9a9815067244733e2134b9ba93bb9692fb44200bb5501bb109f2401e8baaf0115d795bb0346dfafaf953bed8e9a52a5b9b02d490c55fd89daf311ad5e08b070a9571f696d6df4715c8b69b840e4e03d6f361326e20d9546c47b3a63163e7df9bd260621358c166177ee7c69ed63a8c43dd4a78543aa9f922c0ef527f4aa61ff65bb14595f518412ce25a1e103df89cd4b363593da16c11d80a23a9b5ad8e3a7be8f697cecf82c8fbd889a4f743c839b67f7ba5453b10bbf59b1e4f4e821872c061a4125c0c15c1ca5164efe61a58bb54dcedc849800a6021a448d4660c3b85e2362b7cd8ce95156fbf408a09a30a8ccfc3554004e9f9a35382907eec00617e2ae1f8803146bc8c28b4f3bf3c6b183ae9248e7f05c4adce3e0b7ff29252b5be9b19431e3fe612d471f52c5c34cc12c83049189f4d2e5ca516df78766ba3449d07ef9436c68052c986d9dde8802c931194e2ce34acb8cc26663a09348b15c6c145d26306bded0d1f482803ae6dee26562b03fcb183b69ee4a0491e8776ecdadfca395cb4eac2948d4d64321a4e669f2f663eb54f05f12ed9c685835c3e79f982152dbe701073b9a4ab2932b46ee2424a5e18bbe5f25ce0b898ff6937927f4670defe430ac86021226ae055daf39b535cdc0899fcc99d15e67d66bd2dd89bb21b8d2689a8af10a1b0bd44103c469922c36fc0228d7b6febf5e366dceecf8bb1db385c8ab95d86ff09b76c2fa6282de81fd6864c495a4c8295df61a2548e1b81c3e3f30d7a41216801d6c2d1743f66ae2055756083e8bf403d436b8244ac214f4d84a693d13f299ba267401d094f2df70840e8a980622794212f0992ecf5a47980ab2cf7d5a6f12b0a489af3c3c847ac59bc89f36fbb0e08bf283b68213a17de38b3a45eade6f0b198def408f7711c16367bcc0ded794a9a323c7e7f07fad96ea9c4d7344c26e43844a27c21076b8d7cd07677602d91eac825eb5fd0631755c2dd1dbf7bce3eb3c3f7377fc6080ecd0b894e29769845725943e25932d4249abb4ab78d4e2ff2e2df42c8d884cd6bd13886cef080c6491c217abae0eec6e9d4d49eab6657f15cfd38e6cd6d0bd33198c4685ab302d0f46e42f4a5d5bb7d2840a0a8817b98a856700d4de74351896fe7d7d5a0d1bc57fb4c828aa51f9637807aeb905780f239527ed4affd83f68be8b7ad1e10d9e797ba39cdee24f7be0a0ab0ac22ea3968dac61eb4bdd522c9ce570edf63a439abfd9954bf6a16c88d86157d05477200a83255cde279b454979cee4de00e81cb44acdc4295c877566a749ab5b91d250f03d46ecc14210c196700338eea028c930ce104f20a9e7fabb0ad1d314ec1a2d97d1d1b9e09114dee0e3e513eacede01971ff85dc98634156073df4e8acd6c3aadd615adaffa7a81573813bc4ca21886ddd532021bba5c84b34c34665534db48d61903a03c1cca4ed955ca92c1e33b7664b494e3db6d1e637a49e537808a2669ebeca301691acd4fab0af197b9c7db01b7862466b568ab3a4712a25210264fb297a6b679dfc3fceb65bddd1a23d5b507a0d6da83d73b716d971c5179a92e57b9b93451eb943845a549de737f2d082a83682c32649b4941e787758ead9d2c256b2b4ed1e0255952ce83cccecc39e5bbdd38490f1960b26e5379943be3d9a64b5149c84d577e5fd099560baa292befa06ce9065fb03ed432a9e055ca4ad0e952f8368b3d230fd5239726f79f4c98a0b4a9648382b245d324cb61049562f765f923fc657ef36747658494d78590a1e27a2d09856acf50c3b26271c6d5aa96e8ff9bdb9043859665e21ea53a050c335cac414bbf27b0328ac2c7450acb26b093bf232358afd1135ee50ac3fb26b5f0256ccdd37033c8a59740607cfd549d4c6540afe4a6b4425ae1f633872dcfb5da8d0547cf0c4888817b71fbc7c45b2a641e9c1a76b6a6be124402422ada35edc02ed997d6b87b361aee95a16d2c528d89a52fe40dfd83434969bd86f02e63fc1ae72941209af39a08cfbb4c320bc47d853f5dbaf0cd60ec54608aadbc382fa6b5cab3e9cac57bea26609f4c79f6a6b4eb4a9336fa95783b0c0c366f36d5d6b8310b3cfdb800207919a131bc7f984f7fa11fd0bf2c89e060e9d1286e453fe97363ef72bd6eba29a85ffeccdc3bee72e12284333a5a40622c01619558d2750fc45abfa22059ebdf743f8e50ad29770d19f84d8a34232d6918514769b3bb2a1ea5e59e9556332ba669675764458e9349a1835c501a93e91dd3b31018979880a9913f54ec1e8526b8cffcb776b97fbb9424faa5c5eb60d2ac74955bba4b5182571d0d9f84f0df1baa722b20a78c9c0011c667f688b58489c9e450d83e40ac5eb41c5564b6d76a226448abe4a3f499927074125aa9c0e7e704c36df5bb110a0f15f8433a470e81db414827d5ce21ca1da1c8d51d746d1e1ca110127c15e92afd75d3cd05ce0b632cfa03745de3cdd4b57373d46676583c89f045c26c6fc5793e5489555ced08f83ba351135834a2028113c319af30cc85bc01a7f8208822d7d607aed0d2e12c80aa009100441b75beaccfe0adbda7e8bb870edf4963158794c8c3a5baacf6eec7b5efaefb7602dab8409d161beeb281cba21f1da0ccdc092d0433fb940d79699ffeb87ea775829a6e7e3b308a2ee0b7aec8ac5f35eed61be374c7c77196f7119a8882deff68230f461cb917b0ccb2b8597efcbdd1003b7b77b2c601ebd4b45c35b8426f7b9138ab3df0ec00819604ab8e1e64cf2aa2282b1269585af127a268cd207f964edff172e555398a16df44bdc52889538c3a27f8fbfffb61f7aeb55b259952bbfea81d73058d8b0f78ece9dc08e660437d21d4e3ec38b19e5afda7a6e33023f9158db8a1c14dabd9b8b307ddc66927f7b19df5e0da2237d98ddd890b81f1963808977d02198e8ae2e97419dbb1f8e51cad36a3424b955500fbdaab6ff8dbf028708b1f951fe43864b59b6c2368b816c98023d4480a91b3f1059e9c214bf55a7f8c7da907f79ff5568fd787d3aa022ab9d03cde551f7e3295f02c4f3aa37e4cebdd968c0f82f09eb004fbdb1a4ef3a0d426691bde3964c29ea65622f5d3ffd854053545ba1ec164495e4bef4845439c058f9438d13be7922b656db499c246ee6176a15b97e6a68e42f0c703033b699504e1f92b43054c7237199bd013d96faab47433b6b3f91dc66368706439d4ef7da3942ce8b9c1c9a9d0643fc4540e7d3f1c3821267e866cacd3e904be9f9df80381eec09eb2b0d745ff03ffb199b917a14fdd8fbfbffe8bfb0cf7023aa7183301a8a41e7097ff9f5247f8b78f7d08bbfc596a81047807cf0929677222e7e9e921b294e04088c3746d8dc19294645f1c093a21b4c5e6d92e54dd90465b11dd5d9d42af849070edff4ec63970f4088daaa33afdebb28d01df5ee043a8150ab1b25d864ef31e20c84696596cfbea92d02ea29c4a3933c41ec68aee7d68d7eea7f30d8920e14e62be42bcf856d7a58f46fdb2438b023e974f77281c5a462553627e9614504cbd3f1cae6e0fd9f7e89d9bce48946d0508616fbe542303dc542982c61d7bb4afbf3e76bf1fb2381cdc99f2175ef944dcd826aabdca2b7678db5262733c69ce504c38e7deb7adfb9b6d8bb00d8e4251e0438417ea615cde58bd76c2427b3d7a0578bbbff9fde2abbc5d60307aff0050b18176158aaedb34e283886378ff798b4f74e0a0c95d64271f1916280dd247304d9201c67f5e2640d9706add8703cac81795a0190107e2bb2941ed13738595da1c86ba0f68e2283a435cb5f162c74071a13dfe2266d05abaef080dd6b1dade115e883e04f0bb4be4d91f535ae6f822b02e814e65d2b7807d199a23d3f26209f6c9f93602a3a93ccfdebb5f8161b7928059674e15820d1848a980c8d1af5a73aadc5c402fbb6e730ba51227913ca27f0d78d331d6325d0a7926c238296b2a22b10a69cdffeb087dfe175511ed8e2cde8d7dae140e4ce92f892b129d9940e4a30b19f822ef7611b8750eaea8e55502604b7d2358c09a217af8be6c86d67cf6ff6130c971c9765d56631fe6224fbe1e833d497b534fbf6b030af93691f59295279aa1bdfb5d5d9d4668d5aea70e2b8fc117df0042e91c7e6225f27329727ed6e14a87c7943c040dfee4e5c06a20251c39a45ab4865951b0daefb9c05571fdcc21d1761945bd2b8047ccedd6f1e708646fbe61e75bb2728e8cee893d7e6f642119e786155a6cbab057d6d83b77716145119e974ad7355179d2adc3d748fa249cb58e32e6791d646240c05da4427b2f359976c8fd1486c604cb7ee647e24633d8fca8314cf1f85110ca6351156a2b26e44b040f7d2810acd36f45a3969c1fafd1a7e0bc14fd9b26593375be8e750c3f6534ffb85904d15d75fba05dac4a673de97f7543ee931724cd35474cd7ff5cf3e8abaf206f3030e92895633fa9d8499ea763601560260109dad18bd64b990531fc5377e6eaa5da050b98e1c6515ea48c7de1a15b63283d4a694cbad379356bfdac50e6c343879e29f6b9ab425600d51f257ceb35d0ca00f83cf5bd734223de716747614666ba1f1a8fa756e5f3ff0fc94fa4bd4073bddb0098cf565ee40af5732ee9218d262e5b64ad6b8118c54eeaf7072f2e15514a401779b425fa89d8abb1750e56cc3108dffdcf2d3fd86b8af4560d56f7ff0702154211f9949e3992d93e66892b297fa2d4bfe18de3fd74e96c9d30eb14fd458fdbc9e9a34e00f3280dd732520147fa2a8fa83e91dd0687501466a300015bf888c03fc08190c2753d7719acf6f84885c4c5642f466c1984f15a7716a9b608ee5f1b395726bcc8519766667d24d11e396e62ea39640c9e73e4e9e9e5076d7019ca1bebbd7097807f46b3b6fcb96ed4b433b25ec551fb176a5fa252ed1d81b0350cfdfb8069c9916495bef3a262b6668910896c0b37eee40547c663a901e92f41b417ac50e88d058d021a8f9a5783bd936cca4962bec1c9886689cc547970f9215232596392515182e563f720bb79d29baaabf0e2697de6500bc677e346847011ee3450358c0b16ca528368b5cbb8df5ab974a3cef072d20c9906fa585e0f3083ec6d8507b8561f64e65aa1aecf825fc47ad1459c87771549fd5c9a9cc094e7b1179ee1e90eff7158f28f59f029d90e708f4ec50b4f67d8b4bb7140065528354a7e25d63e92977183a0284ec22aa923210f0bfea89cca53547137381e5de0f60bc484bc2daf129b0380244f1ed4bfb674eb2791e76dce33cae684ad36620d5d67cb587f840caed316b7439b0e8c3de0e065e62680f3997369be3466670278168c9a1a644d870e3a8d0a79b2b720e8c3c51bb9133532beee64319e98714bb2e6d5c0b723962d923b0ef454361d4b3cb470bf8c39031ed4a75267f499741be15aacac92d8e6afdcb01a2e7d2dbf549ceb2a2108c4079c620f05ca1bd31d631c2c8d35ca0d73155f56ed020c25e389db356edf510ae088d11b5e4fed51d0dce4d3aa04924b09c28200ede5bec1a8f38cc5f081055e0f28d75afc4d588ca0e828d00085d150beafdda17b8df9e7d9218ea7d81f2e076412901c5ae04d6929d717fea2fcc8e5a1e69dbd7b5258799a2fa5eb108b6cc35dfab599fb27e6d75f1030b83f452af8137830337141f031942eba83123d3f87b5f01623d4613e5a44b4952c300baf3d4d3dbbfb0ad024a19b3810a174ef8453d85a25822f66e45eba2490f29de1077683ccc32e3517f88b51e010672a982f7c8591450c9ab1573143aefb61c17ebb0c92dcb0494d116b970c2a827a6b3608ae10d583d1f7d092263fa873de9f31cd59bc9491ff012059b63a9120af89477f2ccc34eee7bd66de60af64730c879128b49d31da6400c2471e0d5abf707e560574b477b8e20ca45d92182d639eb434e14aea1a3f91ad8fb60e4859b77389753990513181ea3a82884235e8520294359435cfba220502b591fc28ac36ec697442657d290bd7aad7fce53a3f1766f2bf7d55c24d7c0e9c7a71d6f1282ea1478e0a36378b50e4fee281f686bc53f50138036e2a5d6199d40caff084fde7b63b3c0a47da0791107c3218330f7c2e2c7609aba202fae5290243b6033379eb15edc572eee452008e04c9b53efd5f3d88327317b38934745bc3de4c55bd818febc7a7953bf03c4029f77177c2a974310f0485aa46252f1000dc71934947287c38ea5854f29c7b82f630afb8caf1fd880670307b155a6e7feddc019cfbbbdc18f3bc03da3bd371d93ccbf56bcb39eea55c2d113efc148127c30089d21ce6a5088dbfbcf8f8d75c19456bc962c371548634a95382acb5a0886efc46a87bdc111dc0d1e54084cea0d58054f00762c91d7fe0f0fbcf4c280f29f9cd5999a5e8c6f507f8080d7c7ea9a8685be50722cf1a082f3728dec8d6152cdc72f8da6b1805643c042f4f6780ba79cc8a2165d9d7acec8ab2f421bc3e77b51c62c4bbb262b5674ea7d2dcf9acb894d050e91b052364322a5b08bd9667249571c004fb495da7e24fc5620adda3af6848ccf238911a52bdbff766e4e279ac274afa2c2302faba25b5fe98d972a04aa13f77c0c05d7dd82b0a19f1ded8cf5f99c80e392b0aab1264a29e9fbcf0b69f6b0a9f2332e09ab74dea7277106d0883bb264e279c67e5bc69009225bf4fd1a8532f9392a011b55a73a7cf8d16a59d695b2a65b57fad64a2041f8c28804ee1a48845c5dab757d04f1d95520aa9ddb69904d6529c0e14bd789dfe37067073b3e0e136ae2aebb1c34c55b94ce942f786be4b45f801f35f7c768d91a460b92ffa57ff675f0b4b00437a07f871a8650f21b2bf7c722c1d9e860e8955fef5699ee53a5f6fe46fb9e5e17a1c69fe2538af4718b7215ad2c00c3d420589a8653ee511b809945451fb8205b19ce377c8d0253b05493c557cf2bd8ef208e8fc01beceea1acca38d025f328f28d69bcfaa3adc6d9573a3832dc3f3c758fe08cf9cd0c32acfddae81b3682869e8aa9725b64336252aeb2ee8eb78f0721aa3158217a3009948adb297c5ea45ec26cb6d963c7be47ee1b93fa136ebe73a21936df0148fa311206f8bca2e80719aeca8745ff74ddaad5182644762c66333f942d9a93c467d5f9fd5d0dbbe57480362d4bb0f760294f4eba3e1b08047d256dbda157635d21a43aff3a71f6ad574b402bb36e5270d7ed082c6fbae07771721513ae9ddb22d23b00733046c898ee6ac05ef8a51ce41919e1f241cb98e0592ace68214620ba1a748ef81131661f58f1635713ca2873e150a3e848c8d2ebd039769fda112b73050efa4d1c35dbb46ca5a7b7ccbed1dcded36af272f6838b4c1e7e6778e7e9ca3d794f275d49c9e32e768097349118d2337e7c031ada38d0cc5c04c286ff93083f6d58d73a821118c93432fda9a8c76fa2cbcc093a7decac8e4f001ecc9f67faf1c2f102120f0618469cf653bbd5fcefd4ef2bae86dc4f5393b840f9f47140cf7f46a186c21878a43612a71d3b540b9994f010ab623f878264cf46c7366d0bec5d43d481b47846091fd3cda73a9a28ceb7f839eca695c9f084a16c812475f6575ef2368c88cc6655f47663ef69ce4779fe3ccc4dd85a07a9e4c6f39f42690d231f5727f45c247a53fd8df029fcefda4f328658435892519c17205a3c715ad6bb7387d09a5e387c83f008daf626f5977c66203af1143ef7b59ccd8e3c17bb156bca317861f0b9f222ea63c044075a3a74beaf05c23d0a75caa60397d831bbe507234fff154960faf0f02776d3f9038c955bf0c1ec9c92523cf0b855c18d6ac3b35d437796420ba3dfd581dc6adac64315c1cb1a2c3a45ec4655bb2bd6e0b4a3082281ed0697a213d1d93142e96b4fd57431d2f4547451d008ab58bcd9765ccf3ca3297becd5de9e2be0263cfca09935c9334b5e687bc7e7057dc2ed03873be22200c9fe32a9497dd00a336cf4c723ead302340b5cd1fef8cd88330a9089fc93af4ef739295b94407b291bf33f4f39c936736e1166106428f8796a4b92805f4dfcf46d8692b54e40a9e8584c0eaac4caada87bb33f553eafeef5051b889402176ab766936a38ddd7e5205d2c87e133a02e84ab24ba2d889a4c4db8cbe18b271455e84da716f4a32acdbc0a5aaba25a2ec757c73847dd1c4ccb2967c651e5257692a4553dde227846bfe2977021805f46a287c835ea8dc5", 0x2000, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x10, 0xffffffffffffffda, 0x3ff, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r1, &(0x7f0000000180)={0x50, 0x0, r2, {0x7, 0x2b, 0xfffffffe, 0x30004004, 0x0, 0xfffe, 0x6, 0xfffffffe, 0x0, 0x0, 0x1, 0x100}}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r1) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x24c01, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00') r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r3, &(0x7f0000000c40)={0x2000000b}) socket$netlink(0x10, 0x3, 0x0) shutdown(0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x0, 0x2172, 0xffffffffffffffff, 0x0) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$poke(0x2, r5, &(0x7f00000011c0), 0xfffffffffffffffd) syz_usb_connect(0x2, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="120100004106cd40cd060f011bd50000000109022400010000800009040bfd0233776100090507dfff"], 0x0) 3m23.464978424s ago: executing program 4 (id=70): r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x7, 0x1, 0x5, 0x0, 0x0, {0x3, 0x0, 0x1}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1a527b009c07e489}, 0x40) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x2) landlock_restrict_self(r1, 0x4) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0xa) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r2 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x200000, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r5 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r5, 0x1, &(0x7f0000000000)={0x210a, r4}, 0x0) landlock_restrict_self(r5, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x1, &(0x7f0000000140)={0x100, r3}, 0x0) landlock_restrict_self(r2, 0x4) mknodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0/file0/file0\x00', 0x8000, 0x2c807) 3m23.223151783s ago: executing program 4 (id=72): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\x00\x00', @ANYRES32=0x0, @ANYRESDEC], 0x48) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x103000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000040)={[0x4, 0x2, 0x80, 0x5, 0x4, 0x7f, 0x4232, 0x0, 0x81, 0x3a3, 0x8001, 0x6, 0x7, 0x8000000000000001, 0x0, 0xfffffdfffffffffd], 0xfec00000, 0x80300}) ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f0000000180)=0x3) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f00000001c0)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x1ff, 0xfffffff8, 0x0, 0xff, 0x1, 0x0, '\x00', 0x0, 0xfffffffffffffffd}) ioctl$KVM_RUN(r3, 0xae80, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x2a) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r4 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x5961, 0x10000, 0x0, 0x4e}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10}) io_uring_enter(r4, 0x82004, 0xfffffff9, 0x9, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000180)=@gcm_128={{0x304}, "0000650381c66e54", "27c8291a0f479e020000002cb3237cb1", '\x00', "38cb8a873cfcabba"}, 0x28) socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x3, 0x300) syz_open_dev$vbi(0x0, 0x3, 0x2) unlink(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r8 = socket(0x11, 0x2, 0x0) setsockopt(r8, 0x107, 0x1, &(0x7f0000000000)="110000000000060000071a80010061cc", 0x10) socket$kcm(0x10, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) 3m23.0233835s ago: executing program 32 (id=72): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\x00\x00', @ANYRES32=0x0, @ANYRESDEC], 0x48) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x103000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000040)={[0x4, 0x2, 0x80, 0x5, 0x4, 0x7f, 0x4232, 0x0, 0x81, 0x3a3, 0x8001, 0x6, 0x7, 0x8000000000000001, 0x0, 0xfffffdfffffffffd], 0xfec00000, 0x80300}) ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f0000000180)=0x3) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f00000001c0)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x1ff, 0xfffffff8, 0x0, 0xff, 0x1, 0x0, '\x00', 0x0, 0xfffffffffffffffd}) ioctl$KVM_RUN(r3, 0xae80, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x2a) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r4 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x5961, 0x10000, 0x0, 0x4e}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10}) io_uring_enter(r4, 0x82004, 0xfffffff9, 0x9, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000180)=@gcm_128={{0x304}, "0000650381c66e54", "27c8291a0f479e020000002cb3237cb1", '\x00', "38cb8a873cfcabba"}, 0x28) socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x3, 0x300) syz_open_dev$vbi(0x0, 0x3, 0x2) unlink(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r8 = socket(0x11, 0x2, 0x0) setsockopt(r8, 0x107, 0x1, &(0x7f0000000000)="110000000000060000071a80010061cc", 0x10) socket$kcm(0x10, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) 1m43.18748269s ago: executing program 3 (id=597): unshare(0x20000400) r0 = syz_open_dev$sndpcmc(&(0x7f0000000a00), 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000240)={'wg0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000880)={0x34, 0x19, 0x15, 0x0, 0x0, "", [@typed={0xa, 0x0, 0x0, 0x0, @str='\x02\x02\x00\x00\x00\x00'}, @nested={0x18, 0x9, 0x0, 0x1, [@typed={0x14, 0x0, 0x0, 0x0, @ipv6=@loopback={0x8000500}}]}]}, 0x34}], 0x1}, 0x0) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0xf, {[@global=@item_012={0x0, 0x1, 0x5}, @local=@item_4={0x3, 0x2, 0x0, "45501821"}, @global=@item_012={0x1, 0x1, 0x9, "f5"}, @global=@item_012={0x1, 0x1, 0x7, "84"}, @main=@item_4={0x3, 0x0, 0xb, "4070f43f"}]}}, 0x0}, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x2a, 0x9d, 0x7b, 0x8, 0x102c, 0x6151, 0x4a36, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1f, 0x1, 0x0, 0xd, "", [{{0x9, 0x4, 0xc5, 0x9, 0x0, 0xb4, 0x2, 0xad}}]}}]}}, 0x0) r5 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r5, 0xc018480b, 0x0) ioctl$HIDIOCGREPORT(r5, 0x400c4807, &(0x7f0000000040)={0x3, 0x100, 0x7}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_misc(r7, 0x0, 0x0) write$binfmt_misc(r7, &(0x7f0000000040), 0xe09) r8 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, r8) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ipv6_route\x00') preadv(r9, &(0x7f0000000080)=[{&(0x7f0000001780)=""/4106, 0x100a}], 0x1, 0x12c, 0x10000000) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x5a, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="2c0000001800835e00000000000000000200ee030200fe020007000800000400", @ANYRES32=r2, @ANYBLOB="08000700ffffffff"], 0x2c}, 0x1, 0xffffff7f, 0x0, 0x8000}, 0x4040000) ppoll(&(0x7f00000019c0)=[{r0, 0x1100}], 0x1, 0x0, 0x0, 0x0) 1m39.793024441s ago: executing program 3 (id=611): socketpair$unix(0x1, 0x3, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x16) r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x48) r1 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1800"/24], 0x18}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x3, 0x0, 0xe, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x7a) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r4, 0x0, 0x13, &(0x7f0000000040)=0x8001, 0x4) r5 = landlock_create_ruleset(&(0x7f0000000040)={0x3342, 0x3}, 0x18, 0x0) landlock_restrict_self(r5, 0x5) r6 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/power/pm_wakeup_irq', 0x40, 0x101) recvfrom$inet(r7, 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f00000001c0)='source', &(0x7f0000000100)='%\xff:2\x82|\x9a\xe0\xadA\xde\xd5\x03\x00\x00\x00\xb7\xe5\xee:\xb5\x0e\xec\xe5\xdc\xe5\x8d?\x16BE\x8b\xe8)\xa9H\x99\x10\x02q\xf7\xd3\xc5*\x15\xdf_\xb2_`\x92|\x7f\xff9\xf7o$e&1\xfd\xea\xb0\xb0', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='%(,c\xbe\r\xcc:', 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa05, &(0x7f00000000c0)={&(0x7f0000127000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x2}) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) r8 = syz_open_procfs(0x0, &(0x7f0000000240)='net/snmp6\x00') read$FUSE(r8, &(0x7f00000004c0)={0x2020}, 0x2020) 1m36.576551665s ago: executing program 3 (id=619): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000000200)={'filter\x00', 0xb6, "5bfcde323169f891d4efcb64edd3ccd1e41ed29644510822084dcc49d95614adf2282cc519e4787301a1b5a6bcd7bf6f553f95d64c38b5370cc849b316e975362b2ff9f9bd38e9a94dccefdce3e3bdd445dc36a604707019e63cdd9bc7473e021e0835edd72f177e03cef5b6e3d609bd148b1d04deef3e5e38f6df7d78c5c4e7ae38b3b1fd45fff00471c72199ced8de8d33410a0c2e4ceb6dfbcc58450deafd4cefeafe23411c6279ea0469b98a61663401b8d4cc02"}, &(0x7f0000000300)=0xda) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000140)=0x1, 0x4) syz_emit_ethernet(0x46, &(0x7f0000000080)={@local, @random="7f0a00034011", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @loopback, @remote}, '4\x00\x00\x00\x00\x00\x00\x00'}}}}}, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f00000000c0), 0x2, 0x101e00) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r1, 0xc0405519, &(0x7f0000000100)={0x3, 0x6, 0x7, 0x8000, 'syz1\x00', 0x5}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="6400000002060500000000000000000000006e0014000780080011400000000005001500050000000500010006000000050005000a00000005000400000000000900020073797a310000000015000300686173683a69702c706f72742c6e657400"], 0x64}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@remote, 0x0, 0x0, 0x0, 0xfffe, 0x2}, {0x0, 0x7, 0xf, 0x0, 0x7, 0x2, 0x0, 0x1}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@dev={0xac, 0x14, 0x14, 0x34}, 0x1, 0x2b}, 0xa, @in=@local, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1}]}]}, 0xfc}}, 0x4004050) r5 = socket(0x2, 0x3, 0x7f) bind$inet(r5, &(0x7f0000000080)={0x2, 0xfffa, @local}, 0x10) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f00000000c0)=0x6, 0x4) sendto$inet(r5, 0x0, 0x0, 0x48890, &(0x7f0000000100)={0x2, 0x4e24, @broadcast}, 0x10) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a3100000000090003007379"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004400000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={0x34, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x8, 0x3, 0x0, 0x1, [{0x4}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004001}, 0x8000) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) file_getattr(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', &(0x7f00000007c0), 0x18, 0x800) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000050000000000000000000000000a540000de090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000c08000340000000080c000000000000000800064000000000140000001000010000000000000000000284000a"], 0x7c}}, 0x20000000) sendmsg$IPCTNL_MSG_CT_GET(r7, &(0x7f00000004c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000480)={&(0x7f0000000900)={0xc8, 0x1, 0x1, 0x3, 0x0, 0x0, {0x3, 0x0, 0x3}, [@CTA_TUPLE_REPLY={0x7c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x29}}}}]}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xf, 0x1, 'netbios-ns\x00'}}, @CTA_LABELS_MASK={0x24, 0x17, [0x4, 0x1, 0x2, 0x6, 0x10001, 0x101, 0xf, 0x5]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4008004}, 0x24004080) socket$nl_route(0x10, 0x3, 0x0) r9 = syz_open_dev$vim2m(&(0x7f0000000340), 0x7ff, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r9, 0xc0405602, &(0x7f0000000000)={0x2d, 0x1, 0x100, "6742390000000000000000000000000000fcffff0300000000000200", 0xc00761a}) socket(0x200000000000011, 0x2, 0x0) 1m35.408110755s ago: executing program 3 (id=622): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x82) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2000, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r2 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed, 0x80000000000}]}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x10000000) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000001c0)={[0xe1, 0xffffffffffffff75, 0xb, 0xf, 0x10006, 0x40, 0x400200cc4, 0xfff, 0x3, 0x0, 0x8f, 0x0, 0x6, 0xfffffffffffffffe, 0x200001000001066, 0x9], 0x25000, 0x804}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[0x8000000000000000, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x2004c9, 0x7000, 0x8, 0x0, 0xfffffffffffffffb, 0x6, 0x0, 0x0, 0x0, 0x9], 0xffff1000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) socket(0x1e, 0x4, 0x0) r5 = socket(0x1e, 0x2, 0x0) syz_emit_ethernet(0x121, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000080)={0x5}, 0x8) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) lseek(0xffffffffffffffff, 0x3, 0x2) close(r6) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) 1m27.83690696s ago: executing program 3 (id=633): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) madvise(&(0x7f0000e65000/0x2000)=nil, 0x2000, 0x17) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) recvmmsg(r1, &(0x7f0000000e00)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x20010020, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0) setrlimit(0xf, &(0x7f0000000000)={0xa7, 0xe40}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000500)="e7216f983693aa736f71d4", 0xb) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}], 0x1}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000006c0)=ANY=[@ANYBLOB="88010000100013070000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa00"/64, @ANYRESDEC=r2, @ANYRES32=0x0, @ANYBLOB="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"], 0x188}}, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000003c0)={0x2, 0xe, 0x1, 0x2, 0x45, 0x0, 0x70bd2c, 0x25dfdbfe, [@sadb_x_nat_t_type={0x1, 0x14, 0x34}, @sadb_x_sec_ctx={0x20, 0x18, 0x8, 0x2, 0xf5, "904af6cb5593049c6bda737ef042d0000424131a5212d7202e822a5ddd6938527923db324eef62c8636211027bbb9cfc08abbf8a86e8e4738aa9912c57ed2787e9b2e2f8a8b764200ac15e8281e61f057e4e4a5fa88785889d159a8f28b5e333115b2d816e28cd623b0f89a0903fc3e9e87e77a0b54345f5b57732162a6539e64be86d98ce286aa54ec67f97cdaa1ff696ccb80052f5b139a3b762d324a61a3258ad386ba949f49ff46b0223b89c1db6bce77427f47e78a3b116410f9e2c1c0849f71bd345c4f8e27dfc488cd8417c038041bba2d7780f00df985a36eeabd213cf481e1f5a236e88b3e3345cafe76b506314129e2c"}, @sadb_lifetime={0x4, 0x4, 0x4, 0x7f, 0x2, 0xffffffff00000000}, @sadb_x_nat_t_type={0x1, 0x14, 0x9}, @sadb_ident={0x2, 0xb, 0x4, 0x0, 0x9}, @sadb_key={0x19, 0x8, 0x5c8, 0x0, "baf3a7b372ddbb337cc301c36fb667e3aaeba6b15b07862b0ac2c6f8f86b3a43689aa3f3eea576c5b35b0c5ac975242688d93b35b8e169ced14f5b17627baaa3e8dbfc89d20d77f7ed7d061de387f12977653745681e2f03fb24005747d528d9d281fc88b749fd5deef240e079d580d71f5b7604c22cd0d63b8b0ff6e3ebe009b16c40aa17bae45a1e76bbacee69ca46aa86b6a6dc99f191bd1c0e555e1d396930955d3ccd3c7d281b097e81c043937f270d69e0716f8412ff"}, @sadb_x_sa2={0x2, 0x13, 0xd2, 0x0, 0x0, 0x70bd29, 0x3504}]}, 0x228}}, 0x4040045) syz_clone3(&(0x7f0000000300)={0x22800000, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) 1m19.98465632s ago: executing program 3 (id=637): syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="0400000000ffffffff"], 0x9) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) lseek(0xffffffffffffffff, 0x6, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) unshare(0x2040400) r3 = fsopen(&(0x7f0000000440)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) unshare(0x2000400) fsmount(r3, 0x0, 0x0) r4 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r4, 0xc02c564a, 0x0) r5 = openat$vimc1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_FMT(r5, 0xc0cc5604, &(0x7f00000000c0)={0xa, @sliced={0x25e, [0x28e2, 0x4, 0x8, 0xcd, 0x1, 0xfffb, 0x7, 0x1, 0x8001, 0x6, 0x8, 0x6, 0xf, 0x9, 0x4, 0x5, 0x9, 0x2, 0x7, 0xb8e4, 0x6, 0xb, 0x3, 0xf, 0x4, 0x24, 0x6, 0x63d, 0xa, 0xe, 0x1, 0xa, 0x81be, 0x3, 0x9, 0x8, 0x8001, 0x3, 0x6, 0x0, 0xf9, 0xfff7, 0x4, 0xf, 0xfe00, 0xb, 0x3, 0x7fff], 0x37}}) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x3c1, 0x3, 0x48c, 0x0, 0x18c, 0x203, 0x0, 0x19030000, 0x3c4, 0x2e0, 0x2e0, 0x3c4, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d4, 0x2fc, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x1d}, {0x2}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {0xfffc, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {0xffff}, {0x0, 0x0, 0x0, 0x1}, {}, {0x0, 0x3}, {0x16}, {}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {}, {}, {0xfffe}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb84, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x0, 0x0, 0x4}, {0xfffe}, {0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2000000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4, 0x0, 0x10}]}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa4, 0xc8}, @common=@inet=@TCPMSS={0x24, 'TCPMSS\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4e8) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) fsopen(&(0x7f0000000040)='hpfs\x00', 0x1) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0xffff8000, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0cc5605, &(0x7f0000000740)={0x2, @pix={0x1, 0x8, 0x33424752, 0x7, 0xf3, 0x3, 0x5, 0x40, 0x1, 0x2, 0x2}}) socket$nl_xfrm(0x10, 0x3, 0x6) unshare(0x28000600) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) shutdown(r7, 0x1000000) syz_io_uring_setup(0x331c, &(0x7f0000001680)={0x0, 0xea1b, 0x1000, 0x1, 0x325}, &(0x7f0000001700), &(0x7f0000001740), &(0x7f0000001780)) 1m4.95762949s ago: executing program 1 (id=661): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) madvise(&(0x7f0000e65000/0x2000)=nil, 0x2000, 0x17) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) recvmmsg(r1, &(0x7f0000000e00)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x20010020, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0) setrlimit(0xf, &(0x7f0000000000)={0xa7, 0xe40}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000500)="e7216f983693aa736f71d4", 0xb) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}], 0x1}], 0x1, 0x40800) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000006c0)=ANY=[@ANYBLOB="88010000100013070000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa00"/64, @ANYRESDEC=r2, @ANYRES32=0x0, @ANYBLOB="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"], 0x188}}, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000003c0)={0x2, 0xe, 0x1, 0x2, 0x45, 0x0, 0x70bd2c, 0x25dfdbfe, [@sadb_x_nat_t_type={0x1, 0x14, 0x34}, @sadb_x_sec_ctx={0x20, 0x18, 0x8, 0x2, 0xf5, "904af6cb5593049c6bda737ef042d0000424131a5212d7202e822a5ddd6938527923db324eef62c8636211027bbb9cfc08abbf8a86e8e4738aa9912c57ed2787e9b2e2f8a8b764200ac15e8281e61f057e4e4a5fa88785889d159a8f28b5e333115b2d816e28cd623b0f89a0903fc3e9e87e77a0b54345f5b57732162a6539e64be86d98ce286aa54ec67f97cdaa1ff696ccb80052f5b139a3b762d324a61a3258ad386ba949f49ff46b0223b89c1db6bce77427f47e78a3b116410f9e2c1c0849f71bd345c4f8e27dfc488cd8417c038041bba2d7780f00df985a36eeabd213cf481e1f5a236e88b3e3345cafe76b506314129e2c"}, @sadb_lifetime={0x4, 0x4, 0x4, 0x7f, 0x2, 0xffffffff00000000}, @sadb_x_nat_t_type={0x1, 0x14, 0x9}, @sadb_ident={0x2, 0xb, 0x4, 0x0, 0x9}, @sadb_key={0x19, 0x8, 0x5c8, 0x0, "baf3a7b372ddbb337cc301c36fb667e3aaeba6b15b07862b0ac2c6f8f86b3a43689aa3f3eea576c5b35b0c5ac975242688d93b35b8e169ced14f5b17627baaa3e8dbfc89d20d77f7ed7d061de387f12977653745681e2f03fb24005747d528d9d281fc88b749fd5deef240e079d580d71f5b7604c22cd0d63b8b0ff6e3ebe009b16c40aa17bae45a1e76bbacee69ca46aa86b6a6dc99f191bd1c0e555e1d396930955d3ccd3c7d281b097e81c043937f270d69e0716f8412ff"}, @sadb_x_sa2={0x2, 0x13, 0xd2, 0x0, 0x0, 0x70bd29, 0x3504}]}, 0x228}}, 0x4040045) syz_clone3(&(0x7f0000000300)={0x22800000, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) 1m4.835768799s ago: executing program 33 (id=637): syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="0400000000ffffffff"], 0x9) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) lseek(0xffffffffffffffff, 0x6, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) unshare(0x2040400) r3 = fsopen(&(0x7f0000000440)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) unshare(0x2000400) fsmount(r3, 0x0, 0x0) r4 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r4, 0xc02c564a, 0x0) r5 = openat$vimc1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_FMT(r5, 0xc0cc5604, &(0x7f00000000c0)={0xa, @sliced={0x25e, [0x28e2, 0x4, 0x8, 0xcd, 0x1, 0xfffb, 0x7, 0x1, 0x8001, 0x6, 0x8, 0x6, 0xf, 0x9, 0x4, 0x5, 0x9, 0x2, 0x7, 0xb8e4, 0x6, 0xb, 0x3, 0xf, 0x4, 0x24, 0x6, 0x63d, 0xa, 0xe, 0x1, 0xa, 0x81be, 0x3, 0x9, 0x8, 0x8001, 0x3, 0x6, 0x0, 0xf9, 0xfff7, 0x4, 0xf, 0xfe00, 0xb, 0x3, 0x7fff], 0x37}}) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x3c1, 0x3, 0x48c, 0x0, 0x18c, 0x203, 0x0, 0x19030000, 0x3c4, 0x2e0, 0x2e0, 0x3c4, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d4, 0x2fc, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x1d}, {0x2}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {0xfffc, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {0xffff}, {0x0, 0x0, 0x0, 0x1}, {}, {0x0, 0x3}, {0x16}, {}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {}, {}, {0xfffe}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb84, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x0, 0x0, 0x4}, {0xfffe}, {0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2000000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4, 0x0, 0x10}]}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa4, 0xc8}, @common=@inet=@TCPMSS={0x24, 'TCPMSS\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4e8) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) fsopen(&(0x7f0000000040)='hpfs\x00', 0x1) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0xffff8000, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0cc5605, &(0x7f0000000740)={0x2, @pix={0x1, 0x8, 0x33424752, 0x7, 0xf3, 0x3, 0x5, 0x40, 0x1, 0x2, 0x2}}) socket$nl_xfrm(0x10, 0x3, 0x6) unshare(0x28000600) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) shutdown(r7, 0x1000000) syz_io_uring_setup(0x331c, &(0x7f0000001680)={0x0, 0xea1b, 0x1000, 0x1, 0x325}, &(0x7f0000001700), &(0x7f0000001740), &(0x7f0000001780)) 1m2.267415511s ago: executing program 1 (id=666): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fchdir(0xffffffffffffffff) getpid() add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff9) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = userfaultfd(0x80801) socket(0x840000000002, 0x3, 0xff) setsockopt$RXRPC_SECURITY_KEYRING(r3, 0x110, 0x2, 0x0, 0x0) r4 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup(r9) syz_ublk_setup_queues(r10, r8, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255, 0x0, r4}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000004, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed80, 0x1, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x1, 0x401f0, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00'], 0x48) sendmmsg$unix(r2, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000002c0)={0x38, 0x5, 0xa, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa14, 0xffffffff}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1m1.487177011s ago: executing program 0 (id=669): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1, 0x9}]}, &(0x7f00000002c0)=0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000300)={r2, @in={{0x2, 0x4e21, @private=0xa010101}}, [0x1b85, 0x8, 0x5, 0x4, 0x0, 0xfad3, 0xffffffffffffffff, 0x4, 0x8, 0x8000000000000000, 0x7f, 0x4, 0x1, 0x3, 0x46f]}, &(0x7f0000000440)=0xfc) 1m0.082396764s ago: executing program 5 (id=671): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fchdir(0xffffffffffffffff) getpid() add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff9) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = userfaultfd(0x80801) socket(0x840000000002, 0x3, 0xff) setsockopt$RXRPC_SECURITY_KEYRING(r3, 0x110, 0x2, 0x0, 0x0) r4 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup(r9) syz_ublk_setup_queues(r10, r8, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255, 0x0, r4}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000004, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed80, 0x1, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x1, 0x401f0, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYRES32=0x0, @ANYBLOB='\x00\x00\x00'], 0x48) sendmmsg$unix(r2, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000002c0)={0x38, 0x5, 0xa, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa14, 0xffffffff}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 59.71428387s ago: executing program 0 (id=672): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0xa02, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) read$FUSE(r1, &(0x7f0000000640)={0x2020}, 0x2020) ioctl$USBDEVFS_CONTROL(r1, 0xc0105500, &(0x7f0000000040)={0x80, 0xe, 0x1000, 0x8b26, 0x28, 0x1, &(0x7f0000000000)="f00eebbc55bd43981bb60f1ab8dbd7f6b7ce8052991af06032d179e70e49e00e5b8805d0ac427b29"}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000ffffffff0000000000009bc2d17c00001853000009000000000000000000000095000000"], &(0x7f0000000040)='GPL\x00', 0x8}, 0x94) openat$fuse(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0) read$FUSE(r1, &(0x7f0000002680)={0x2020}, 0x2020) 57.508697987s ago: executing program 1 (id=675): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) madvise(&(0x7f0000e65000/0x2000)=nil, 0x2000, 0x17) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) recvmmsg(r1, &(0x7f0000000e00)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x20010020, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0) setrlimit(0xf, &(0x7f0000000000)={0xa7, 0xe40}) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000500)="e7216f983693aa736f71d4", 0xb) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}], 0x1}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000003c0)={0x2, 0xe, 0x1, 0x2, 0x45, 0x0, 0x70bd2c, 0x25dfdbfe, [@sadb_x_nat_t_type={0x1, 0x14, 0x34}, @sadb_x_sec_ctx={0x20, 0x18, 0x8, 0x2, 0xf5, "904af6cb5593049c6bda737ef042d0000424131a5212d7202e822a5ddd6938527923db324eef62c8636211027bbb9cfc08abbf8a86e8e4738aa9912c57ed2787e9b2e2f8a8b764200ac15e8281e61f057e4e4a5fa88785889d159a8f28b5e333115b2d816e28cd623b0f89a0903fc3e9e87e77a0b54345f5b57732162a6539e64be86d98ce286aa54ec67f97cdaa1ff696ccb80052f5b139a3b762d324a61a3258ad386ba949f49ff46b0223b89c1db6bce77427f47e78a3b116410f9e2c1c0849f71bd345c4f8e27dfc488cd8417c038041bba2d7780f00df985a36eeabd213cf481e1f5a236e88b3e3345cafe76b506314129e2c"}, @sadb_lifetime={0x4, 0x4, 0x4, 0x7f, 0x2, 0xffffffff00000000}, @sadb_x_nat_t_type={0x1, 0x14, 0x9}, @sadb_ident={0x2, 0xb, 0x4, 0x0, 0x9}, @sadb_key={0x19, 0x8, 0x5c8, 0x0, "baf3a7b372ddbb337cc301c36fb667e3aaeba6b15b07862b0ac2c6f8f86b3a43689aa3f3eea576c5b35b0c5ac975242688d93b35b8e169ced14f5b17627baaa3e8dbfc89d20d77f7ed7d061de387f12977653745681e2f03fb24005747d528d9d281fc88b749fd5deef240e079d580d71f5b7604c22cd0d63b8b0ff6e3ebe009b16c40aa17bae45a1e76bbacee69ca46aa86b6a6dc99f191bd1c0e555e1d396930955d3ccd3c7d281b097e81c043937f270d69e0716f8412ff"}, @sadb_x_sa2={0x2, 0x13, 0xd2, 0x0, 0x0, 0x70bd29, 0x3504}]}, 0x228}}, 0x4040045) syz_clone3(&(0x7f0000000300)={0x22800000, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) 56.223981841s ago: executing program 2 (id=677): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) recvmmsg(0xffffffffffffffff, &(0x7f0000002580)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="050000007f000000f00e0000"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)="b9", &(0x7f0000000ec0)="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", 0x402, r0}, 0x38) bpf$MAP_DELETE_BATCH(0x18, &(0x7f0000000000)={0x0, &(0x7f00000004c0)=""/233, &(0x7f00000001c0), &(0x7f0000000240), 0x6, r0}, 0x38) 55.979256296s ago: executing program 5 (id=678): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x508, 0x8902}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ppp={{0x8}, {0xc, 0x2, 0x0, 0x1, {0x8}}}}]}, 0x38}, 0x1, 0xd, 0x0, 0x480c5}, 0x20000000) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000000)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x24, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x17\x00'}, @typed={0x8, 0xa, 0x0, 0x0, @fd}]}, 0x24}}, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) close(0x3) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000cbd70100400000005000000080009000200000008000c00a80a000008000b00000000000600010007"], 0x40}, 0x1, 0x0, 0x0, 0x40811}, 0x820) bind$inet6(r2, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x50, &(0x7f0000000040)={@link_local, @broadcast, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, "910100", 0x16, 0x11, 0xff, @private1, @local, {[], {0x0, 0x4e21, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, "60000001fc00"}}}}}}}, 0x0) 55.928541797s ago: executing program 2 (id=679): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xfffffffe, 0x8}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 55.847357199s ago: executing program 0 (id=680): socketpair$unix(0x1, 0x3, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x16) r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x48) r1 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1800"/24], 0x18}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x3, 0x0, 0xe, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x7a) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r4, 0x0, 0x13, &(0x7f0000000040)=0x8001, 0x4) r5 = landlock_create_ruleset(&(0x7f0000000040)={0x3342, 0x3}, 0x18, 0x0) landlock_restrict_self(r5, 0x5) r6 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/power/pm_wakeup_irq', 0x40, 0x101) recvfrom$inet(r7, 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='%(,c\xbe\r\xcc:', 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa05, &(0x7f00000000c0)={&(0x7f0000127000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x2}) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) r8 = syz_open_procfs(0x0, &(0x7f0000000240)='net/snmp6\x00') read$FUSE(r8, &(0x7f00000004c0)={0x2020}, 0x2020) 55.660885492s ago: executing program 5 (id=681): socketpair$unix(0x1, 0x3, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x16) r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x48) r1 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1800"/24], 0x18}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x3, 0x0, 0xe, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x7a) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r4, 0x0, 0x13, &(0x7f0000000040)=0x8001, 0x4) r5 = landlock_create_ruleset(&(0x7f0000000040)={0x3342, 0x3}, 0x18, 0x0) landlock_restrict_self(r5, 0x5) r6 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/power/pm_wakeup_irq', 0x40, 0x101) recvfrom$inet(r7, 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='%(,c\xbe\r\xcc:', 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa05, &(0x7f00000000c0)={&(0x7f0000127000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x2}) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) r8 = syz_open_procfs(0x0, &(0x7f0000000240)='net/snmp6\x00') read$FUSE(r8, &(0x7f00000004c0)={0x2020}, 0x2020) 53.586946624s ago: executing program 1 (id=682): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) r1 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00') r3 = openat$binfmt(0xffffffffffffff9c, r2, 0x41, 0x1ff) fcntl$setlease(r3, 0x400, 0x1) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) creat(&(0x7f0000000140)='./file0\x00', 0x160) open$dir(&(0x7f0000000100)='./file0\x00', 0x4000, 0xc) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) read$watch_queue(r5, &(0x7f00000001c0)=""/178, 0xb2) syz_emit_vhci(0x0, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a4, &(0x7f0000000000)={{@any, 0x200}, @my=0x1, 0x0, 0x0, 0x4000000f0, 0xfffffffffffffffc, 0x0, 0x4000000, 0x80000007}) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x200080c0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000040, 0x0, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000400)=@ethtool_drvinfo={0x3, "5c888596a7776a389ac2ea21d00764a17a73a27a4525d641a8f00302bede855f", "f4ed38bb9511e8c874b4607d81a785604182f7466d190929c3af91b0895c76ef", "b03008606461cc0d6e0bbd73506cdd5b87733deb86d4a6ad26ed7777789bb5c0", "6e17e0e332771caff828fb7bdc2a3f20ad0d986e623ec04440432a4f9f14b32c", "90f26a2be402aa371e6b6fb7ed5d133a1676f722dbb6eae047fd008a86abd598", "8611e083ed2bcfa5a00b8bee", 0x2, 0xa6e9, 0x6, 0x5, 0xfffffffa}}) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000240)='highspeed', 0x9) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 53.324388347s ago: executing program 2 (id=683): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'caif0\x00', 0x7101}) socket$inet6_tcp(0xa, 0x1, 0x0) socket$kcm(0x2, 0x5, 0x84) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000380)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x4, @private1, 0xffffffff}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}], 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) msgctl$MSG_STAT(0x0, 0xb, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000240), 0xd21, 0x4000) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x1d, 0x0, 0x0, 0x9, 0x0, 0x0, 0x40f00, 0x44, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, 0x0, 0x20004040) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x80800) sendmmsg$alg(r5, &(0x7f0000004140)=[{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000280)="3b942cdf3dbb4d708446209c8a7a9893", 0x10}], 0x1}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_INITMSG(r5, 0x84, 0x2, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xa5) write(0xffffffffffffffff, &(0x7f0000000000)="1c0000001a005f0214f9f4070009", 0xe) set_mempolicy(0x8006, &(0x7f0000000040)=0x1002, 0x5) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='task\x00') lseek(r6, 0x1, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, r3, 0x0) 52.230009056s ago: executing program 5 (id=684): syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="0400000000ffffffff"], 0x9) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) lseek(0xffffffffffffffff, 0x6, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) unshare(0x2040400) r3 = fsopen(&(0x7f0000000440)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) unshare(0x2000400) fsmount(r3, 0x0, 0x0) r4 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r4, 0xc02c564a, &(0x7f0000001b00)={0x0, 0x34325842, 0x1, @discrete={0x40001, 0x100}}) r5 = openat$vimc1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_FMT(r5, 0xc0cc5604, &(0x7f00000000c0)={0xa, @sliced={0x25e, [0x28e2, 0x4, 0x8, 0xcd, 0x1, 0xfffb, 0x7, 0x1, 0x8001, 0x6, 0x8, 0x6, 0xf, 0x9, 0x4, 0x5, 0x9, 0x2, 0x7, 0xb8e4, 0x6, 0xb, 0x3, 0xf, 0x4, 0x24, 0x6, 0x63d, 0xa, 0xe, 0x1, 0xa, 0x81be, 0x3, 0x9, 0x8, 0x8001, 0x3, 0x6, 0x0, 0xf9, 0xfff7, 0x4, 0xf, 0xfe00, 0xb, 0x3, 0x7fff], 0x37}}) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x3c1, 0x3, 0x48c, 0x0, 0x18c, 0x203, 0x0, 0x19030000, 0x3c4, 0x2e0, 0x2e0, 0x3c4, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d4, 0x2fc, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x1d}, {0x2}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {0xfffc, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {0xffff}, {0x0, 0x0, 0x0, 0x1}, {}, {0x0, 0x3}, {0x16}, {}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {}, {}, {0xfffe}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb84, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x0, 0x0, 0x4}, {0xfffe}, {0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2000000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4, 0x0, 0x10}]}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa4, 0xc8}, @common=@inet=@TCPMSS={0x24, 'TCPMSS\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4e8) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) fsopen(&(0x7f0000000040)='hpfs\x00', 0x1) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0xffff8000, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0cc5605, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) unshare(0x28000600) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) shutdown(r7, 0x1000000) syz_io_uring_setup(0x331c, &(0x7f0000001680)={0x0, 0xea1b, 0x1000, 0x1, 0x325}, &(0x7f0000001700), &(0x7f0000001740), &(0x7f0000001780)) 51.865342179s ago: executing program 0 (id=685): write$sndseq(0xffffffffffffffff, &(0x7f0000000000)=[{0x1e, 0x0, 0xfc, 0x0, @tick, {0x0, 0xfd}, {}, @raw32}], 0x1c) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x42000, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000001c40)=0x4) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000000)=0x3) close(0x3) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r3, 0x4068aea3, &(0x7f0000000500)={0x79, 0x0, 0x4bf}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r4, 0x4008ae9c, &(0x7f0000000140)={0x20, 0x1, 0x8}) ioctl$KVM_X86_SETUP_MCE(r4, 0x4008ae9c, &(0x7f00000001c0)={0x12, 0x1, 0xde}) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000340)={0xfff8, 0xfffd, 0x8, 0xffff}, 0x8) sendmmsg$inet(r1, &(0x7f0000002240), 0x0, 0x404c800) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x200448c4}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x40088c1}, 0x44840) r6 = socket(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x2a, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYRES8=r2, @ANYRES64=r5], 0x54}, 0x1, 0x0, 0x0, 0x40c00}, 0x2000080) sendmmsg(r6, &(0x7f0000000000), 0x4000000000001f2, 0x0) syz_clone(0x1000000, &(0x7f0000000080)="51415fb54f087d883ae7c22454bc56c80887456f7b87497d794ada1c53286490229688c210d8", 0x26, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000440)="30b3776f2e6a6880097af5d74b08b42dfe958b37d819672c7bb912711a6c84fbdaac2f71486edca3f51bd408922d8e677838608b3127af78626188f32fcfe79c7035f6724d12d8922324c0f6995b3d250c5e668f2182383e2835b8daa68bb7efeddca3c33f290a432abc7d5e0801309d5541ed3ea3c666cb16b58ce7296c69ed306dba2ad88331b42c4c8026e6013eca9292fda940344652a86bc6433d9459779f22aa92bd839ac233a50f14f0792b271ba573f4d5be8c39cb8d18c968a1") r9 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf32(r9, &(0x7f00000008c0)=ANY=[@ANYRESOCT=r8], 0xfffffffffffffeaa) inotify_init() r10 = inotify_init1(0x800) inotify_add_watch(r10, &(0x7f0000000300)='./file0\x00', 0x44000435) close(r9) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) 43.60348005s ago: executing program 0 (id=686): r0 = syz_open_procfs(0x0, 0x0) read$FUSE(r0, 0x0, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r3, &(0x7f00000004c0)="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", 0x1b0, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000031c0)=[{{0x0, 0x0, &(0x7f0000000a40)=[{0x0}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000980)=""/146, 0x92}, {&(0x7f0000000080)=""/43, 0x2b}, {&(0x7f0000000a80)=""/242, 0xf2}, {0x0, 0x12}], 0x4}, 0x2}], 0x2, 0x22, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), r2) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) syz_genetlink_get_family_id$SEG6(0x0, r0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = syz_open_dev$video4linux(&(0x7f0000000900), 0x1, 0x2200) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r5, 0xc0305602, &(0x7f0000000080)={0x0, 0x8, 0x2008, 0x1}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000140)={0x0, {}, 0x0, {}, 0x6, 0x6, 0x1e, 0xd, "31f55e6f5d88ca8cfd063a30448a74c0ac055160d9e1d29a6b3db0894335dd40387105759ee1e18be99ebbe757b60fc15bb5dcfc61ab49b20db8417e4ff68202", "9842ebd1bfc8fce0a65d3800f5b1cb5733133c6793b703e50394df8e1cbef6cb", [0xfffffff8, 0x1]}) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0x0, 0x3}, {}, {0xfff1, 0x4}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x8}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040011}, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r9, 0x6, 0x23, &(0x7f00000013c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000140)=0x40) dup3(r1, r9, 0x80000) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, 0x0, 0x20009844) close_range(r1, 0xffffffffffffffff, 0x0) 43.408430851s ago: executing program 1 (id=687): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008"], 0x3c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x25, 0x301, 0x70bd2a, 0x25dfdbfc, {0x15}, [@typed={0xe, 0x15e, 0x0, 0x0, @binary="56820a14a1aa6e156ddf"}]}, 0x24}, 0x1, 0x0, 0x0, 0x40008840}, 0x800) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r3 = openat$sndseq(0xffffff9c, &(0x7f0000001240), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r3, 0xc0a45320, &(0x7f00000000c0)={{0x80, 0xf7}, 'port0\x00', 0x3df, 0x4022f, 0x1000003, 0x7, 0x800, 0x1, 0xa, 0x0, 0x0, 0x2}) syz_emit_ethernet(0x46, &(0x7f00000000c0)={@multicast, @broadcast, @void, {@ipv4={0x800, @tipc={{0x8, 0x4, 0x3, 0x6, 0x38, 0x66, 0x0, 0x9, 0x6, 0x0, @local, @private=0xa010101, {[@generic={0x7, 0xc, "0909b5d165d71086caf3"}]}}, @payload_conn={{{0x18, 0x0, 0x1, 0x0, 0x1, 0x6, 0x3, 0x2, 0x8d2, 0x0, 0x3, 0x7, 0x1, 0x0, 0x2, 0x0, 0x4, 0x4e22, 0x4e22}}}}}}}, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$SO_RDS_TRANSPORT(r4, 0x114, 0x8, 0x0, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000004000)={0x38, r2, 0x5, 0x4, 0x25dfdbff, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x8080}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x6, 0xfe, 0x7fff0006}]}) r7 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa8203, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r7, 0xc0184800, &(0x7f0000000080)={0x20004, r6, 0x2}) ioctl$DMA_BUF_SET_NAME_A(r8, 0x40046201, &(0x7f0000000200)='/dev/dma_heap/system\x00') r9 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r9, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=[{0xc, 0x110, 0xe}, {0xc, 0x110, 0x1}], 0x18}, 0x0) r10 = openat$vcsa(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$I2C_SLAVE_FORCE(r10, 0x706, 0x2a8) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'ip6tnl0\x00'}) r11 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r11, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r11, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) sendto$inet(r11, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r11, &(0x7f0000000280), 0x0, 0x42, 0x0, 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x46d, 0xc081, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x20, "", [{{0x9, 0x4, 0x0, 0x0, 0xfd, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0xf, 0xfe}}}}}]}}]}}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) 43.325897589s ago: executing program 5 (id=688): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e00000010008188e6b62aa73f72dc9f0ba1f8483a0000005e1206021f1f00000e000a0010000000028000001294", 0x2e}], 0x1}, 0x4840) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x7, 0x4) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1b) writev(r2, &(0x7f00000024c0)=[{&(0x7f0000000000)="bd7d56", 0x3}, {&(0x7f0000000140)="7ce79739f5b8536407c30c9c3c0372031cf249fc095a697fa2016155378668ef6dbd31755c066792f12fbba5d6a571149b288a73d5208b9c3cea5cb62942e2c0df5c732e07fa8f411ba74e176564e610be4a3ad7a210ce58f85a3ccea567fd3844958a8ef39282ce25d7cddae6a39ce419e72d34b0d15caa124d566d1d151e282543eaeba903cac76b4054bc9097718d69f8ca84c578dd0387ca718d1f2acf5c950e2f9eb76f25e0b6b369dd9b40c52a66cc4e0addf5571fc0925cf4175e4f658e91d7ac655a6910692a8ed992ea0f4d8ef96c72d8d83344c6af6b1264f14f5c253f6f025a331082ba8e1759", 0xec}, {&(0x7f00000002c0)="c86aa38c1ffa95af5a05a08bc741aff3ec9f77cf0c148939d1d3d5875e715bc31bcc6495ce60ed67e8d05e3e1d8167c82d46624dd1f8b4deb7aea294dfe1d4f4fe279521d2c3d70c6073474739dab89d94b6170e3772ea55ff34ff21d19aa1b48d33f0e65d15761a9f6d820060765ae97e637f5550978ff7b202e79738756a1bf86d4a1e0f05de23827bdc090bb7e849519ef133bb4214229df374b338ec1da7569593977691a51c9c2117acc126b7edb88bfe1fcb2bd4fbd3a994f68df5706268675ccbfbcd11e6f7eb27db424bd9ef0cefe2d79cbc6b86000f691dd5ef4f5bdd11daa5243eafc0a49be30c86c9ed6c7f88606c0b2960b5eee756346e3514b46b24ac7a773ec403574c76984adc9e573de55cec892955ff2ffc0702e0ffc717e35a5da844681af0ccc202912c3517ccd8b7f5ef08a480790425babaf446c449880da3d67bd8f34320d356f0ab4546ba05bc72cff874d4a56459ce8316de41b6d5d94ca29d2a056c23250bcdfcb83d3d99a61a1d1b0de7d2c5b1bbd96e7e8c7811a3a76a41fa9b5abe1e423c54c90ddba9616514a2d47dbb2609454e962be1b7a6e7ad20d173b2390253a7de91d42ce3d2bd61e1a25386fc3b5cb373a0d8850653461cd6cb31863d0b3cd422d01fdf80aff660c93ed3a6452abd9b93eda73c294c322f51daf6ef7b08bb9e81769812bb27e2f70cac09e2dfc186ee39bf259fbba297cc6ebc6073adc3773b9b3dcbe2474551cc48208ca897ac2406dd8e54fa04e1973c99e176c78de9be83a5797a469ad3d33130066a554fea831dc43ff9bd203e3f7ecab48f4550f77ea05760e9c56c0f6b4bebe22ccb37f7ac81f68b907f0f25a84992ca8e242eab05e495c5c5d22e564ca858b62664d63ff9ac6a3f577c580afd3be87e0874d0a224f0d85bd546b9bf74f17962f5d9530861b2221e28bd0b033e8238d879e0de2f6e507f284fc9766ebef6e493bcc9b16d027579783288ba16c2a3bef7186e256abe5d13eafbc20369d39c6d6e5b283940f3d40d983a3bd8edfa156fcf1cf728c006c6a64ad5f18ec73d65eb93ee188c6f7d6ed66d93406950ba7a6d9e51267f00d832b06076135846a0b7989a915b4656586ec891ae2e4bafa11dc71631729f83d4ff4928684307f4c36fd8554dfcc79c52db5995c8d524abae78566fb52af9ebcd90a48d2d653ca99eab89f3144533384db30f8c749d3191bce6c329a73022836d45cbd22ae8bdf58195d2bb1f8d532bb208c5948cddb688b4f5edc1d1173099418bd99f56245410ffec448cfe8179f55ddee51f201fcfc6624a6c515538f9265e525e6765e3c3c8750e7bacac1f4537fdf2675e6a069e50bb61930f9828edd779cf7131b56f216130e0beccdfeb34d72597cc917773d3a7103ddd6709b5e758823028d6a515e439530eb7434cd81d3206545cd22c8d9776755d375f45281be0175cffab99771226b29c1cc1244e61dcb34cd389e57c679f627682ca20cf67832a7b3ee8712ede42106b5b9bbc769d5c1e67edf065918f39231549ce45c905823bd352f1a884fc06a3bb25605294eb7fda074fc92ce807d4750d67ea67c108ab73e9f1db6fbce2825d04064fd23edd478a4ad41fcd2eca54311b774982ad7612af58813fdb27b089bae4fb58162101b4b706cbd25c7662938fc9a1d4d24f79f796b43fcee58d2e3b124d2d991d8d2fa5a755ddefe674086c1208d809d1dbca4b1b93b72d30985cebf91317b9746f67e684e30ec8ad0e7a1f9d195ec741af8e58c7fef2a1d830324898899fd3405cbe480ba44f5094b11922bc8be731242a088c83857dac9ba3fc566c5af0f328f7951d5590d53233538dd4ca719435304ab81f39c737ce4be9e63a3bd0e5def25a0f5a5737137923491cd8577f3a7892e537a423c5b2c3e1f459cd9f0ea838e7d23883f11140e63111d5b78010597686d194c4b28a67c6dd852fa78b0da7f846ad1861193b7b9f09bb6c84a0251a38c272c2b147d3733c63d5228ec30970c4464a4ac8ed08ed4a1400d25e011153b082100ccf445b93f8379920013f19bdb51a0687c7aba541b46c171eea21d577d4c940109deb722807d8a36a8a01e5c4f89624077d53e128440ae62110e1e6d4e9d0a408a9725d8265ed011f790ce2a65c49baa4eb37ac1e13c1a7f7959205dbf50c3a821d9b690cb433577a8f30383894516a62057eeae3e7b23af3b7b8ff69891b15ce0eedc7c18ba255b5beb4", 0x632}], 0x3) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000"], 0x40}}, 0x0) sendmsg$key(r3, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x4, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000040), 0x0, 0x0, 0x1) r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0xb, 0x40) ioctl$FS_IOC_SETFLAGS(r4, 0x40046602, &(0x7f0000000040)=0x8000) add_key(&(0x7f0000000000)='cifs.idmap\x00', &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0xb, r5, &(0x7f0000000380)=""/244, 0xf4) add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) removexattr(&(0x7f0000000200)='./cgroup\x00', &(0x7f0000000240)=@known='user.incfs.metadata\x00') getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000480), &(0x7f0000000500)=0x60) sendmsg$netlink(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x74}], 0x1, 0x0, 0x0, 0x6}, 0x4000800) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000010000104000000000000080000000000", @ANYRES32=0x0, @ANYBLOB="8a4502f2ffffffff2300000001000600000008000200", @ANYRES32=r7, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x20000050}, 0x4000040) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) socket$nl_route(0x10, 0x3, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0180, 0x0) ioctl$TUNSETSTEERINGEBPF(r8, 0x400454da, &(0x7f0000000000)) syz_emit_ethernet(0x42, &(0x7f0000000ac0)=ANY=[@ANYBLOB="62aaaaaaaaaaaa0180c20000000064000002879078ac1414bbac14140c8907efe00000018618f5ff0000071209b98fe000800000799791b009eefe6300000000000000c903dc9bc0eb5fe4a400286c4bd172c4ab29ec361e47c6077fd7b09146821b16cf345438440e"], 0x0) 41.68886398s ago: executing program 2 (id=689): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) recvmmsg(0xffffffffffffffff, &(0x7f0000002580)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="050000007f000000f00e0000"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)="b9", &(0x7f0000000ec0)="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", 0x402, r0}, 0x38) bpf$MAP_DELETE_BATCH(0x18, &(0x7f0000000000)={0x0, &(0x7f00000004c0)=""/233, &(0x7f00000001c0), &(0x7f0000000240), 0x6, r0}, 0x38) 39.599384469s ago: executing program 2 (id=690): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x1}, 0x10) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000000000000000800040001000000", 0x24) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r0) (fail_nth: 5) 38.772340041s ago: executing program 1 (id=691): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r1, 0x10, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x48}, @void, @val={0xc, 0x99, {0x2984643c, 0x6e}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x404c000) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r2, &(0x7f00000011c0)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001180)={&(0x7f00000010c0)={0xb4, 0x1, 0x8, 0x401, 0x0, 0x0, {0x1, 0x0, 0xa}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x6d08}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x80000001}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x400}, @CTA_TIMEOUT_UDP_REPLIED={0x8}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x3c, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_RESPOND={0x8, 0x2, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_DCCP_REQUEST={0x8, 0x1, 0x1, 0x0, 0xb0e3}, @CTA_TIMEOUT_DCCP_OPEN={0x8}, @CTA_TIMEOUT_DCCP_OPEN={0x8, 0x4, 0x1, 0x0, 0x3f1}, @CTA_TIMEOUT_DCCP_TIMEWAIT={0x8, 0x7, 0x1, 0x0, 0x445d}, @CTA_TIMEOUT_DCCP_OPEN={0x8, 0x4, 0x1, 0x0, 0x10}, @CTA_TIMEOUT_DCCP_CLOSING={0x8, 0x6, 0x1, 0x0, 0x1}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x17}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8010}, 0x4000) connect$qrtr(r2, &(0x7f0000001200)={0x2a, 0x1, 0x1}, 0xc) r3 = syz_open_pts(r2, 0x80000) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000001240)={{0x1, 0x1, 0x18, r3}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000002280)={&(0x7f0000002180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000002240)={&(0x7f00000021c0)={0x5c, 0x0, 0x1, 0x80, 0x0, 0x0, {0xa, 0x0, 0x9}, [@CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x4}, @CTA_SYNPROXY={0xc, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x101}]}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x1ff}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x8}, @CTA_SYNPROXY={0x24, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x5}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0xe6}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x8000}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x2}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x890}, 0x4008000) recvmsg(r0, &(0x7f0000002440)={&(0x7f00000022c0)=@ax25={{0x3, @rose}, [@default, @netrom, @bcast, @rose, @bcast, @default, @rose, @rose]}, 0x80, &(0x7f0000002380)=[{&(0x7f0000002340)=""/26, 0x1a}], 0x1, &(0x7f00000023c0)=""/82, 0x52}, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000024c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r4, &(0x7f0000002d80)={&(0x7f0000002480)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000002d40)={&(0x7f0000002500)={0x81c, r1, 0x800, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x8001, 0x34}}}}, [@NL80211_ATTR_FRAME={0x5cb, 0x33, @data_frame={@a_msdu=@type11={{0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x7}, @device_a, @broadcast, @initial, {0xb, 0xa}, @device_b}, @random="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"}}, @NL80211_ATTR_FRAME={0x38, 0x33, @mgmt_frame=@deauth={{{0x0, 0x0, 0xc, 0x0, 0x0, 0x1, 0x1}, {0x6}, @device_b, @device_b, @random="dd55f77b2316", {0x3, 0x216}}, 0x26, @val={0x8c, 0x18, {0x7eb, "7fef77474483", @long="55ed665700ef8e755ac99a03e04ddd76"}}}}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0x1cb, 0x33, @mgmt_frame=@reassoc_req={{{}, {0x8}, @device_a, @broadcast, @initial, {0x8, 0x5a9}}, 0x40, 0x7, @device_b, {0x0, 0x6, @default_ibss_ssid}, @val={0x1, 0x8, [{0x60, 0x1}, {0x5, 0x1}, {0x60, 0x1}, {0x1b}, {0x1b}, {0xb, 0x1}, {0x5}, {0x2}]}, @void, [{0xdd, 0xda, "486bb16668a8b46d6f0586ba262e7334b8a443876cf7976eecd016108d08129d7d5dd785763f8a79646614f66a9288e430c692ff5a4d9e6cd14fe0c9f40913a152bbe5bc8143b6c4121022a82901711bb76c600e78e738b24b1026aeb6a66dc9af2d2e80d7e2cd2f9a613d2894ee7b3c4a21b374721f3e7e1def997a35cfe76361622bd5372a346326721289b91ab9ffc1f4e232e7bb83252503337ab8f0fe7f8083ede134af05648a32d7f69ac046550bfabe6d93cbe667df14f3f00faa8419b83ddefe267bd37898f20e77c26009f7e7db1cc343248e4f7166"}, {0xdd, 0xb5, "6c903dd15823518750591b861e9ba36c0ad1a8532b9db732f025bf4fb6917971ca73c53efac95e9482def1ecab25074cb91fb8ca4d74a28711d933fc8ccc1c0559bbdeea76bf936d50bce2ed266cfed120e5e6884eda15616de0952e377225cdc2bdbecd9a6a2f57d6c499c650df018b600703658206643d751c80ebc24d734325917e0adafb9fd0d24596a781c76d269b33d00e0afef299cce26ce54e093120562e81e05bd991c96a9b6294259cd1a8050110bf9a"}]}}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x8864}]}, 0x81c}}, 0x44040) socket$inet6(0xa, 0xa, 0x7) r6 = syz_clone(0x2000000, &(0x7f0000002dc0)="d3c7449ec6f83eaf", 0x8, &(0x7f0000002e00), &(0x7f0000002e40), &(0x7f0000002e80)="703e6f46a631e201f9176470b9b4c682470ff59e1ac0bc41b8dcf5f7a52039bc29636c8134c2ff17c1d3a281e8867536ab48f9c27af5aa368ac42a1fd0090d1705800bd230cb361fe6cf") ioctl$sock_SIOCSPGRP(r4, 0x8902, &(0x7f0000002f00)=r6) r7 = socket$can_raw(0x1d, 0x3, 0x1) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r7, 0x46c47000) getsockopt$CAN_RAW_JOIN_FILTERS(r7, 0x65, 0x6, &(0x7f0000002f40), &(0x7f0000002f80)=0x4) writev(r2, &(0x7f00000033c0)=[{&(0x7f0000002fc0)="68d66cb175ef90dabba753cba556ac91fd8dde8bef53090004727e232b5b1feea5c12ad5ccc331212c04c33b0ef6b0bd14bb4b553028218f0cdbebb5e6f53fad6075e83725a5291be10aff94f1044d8bec38f31ce00a02dab9e96fa5850974716c113a47492d7741d8336e8cc1a8784ecb5cc9e1a0410bfeb59cb12ba16f8ce34ad899c8b97256ba7ab7d3fd9a3fde57c96f3e134733ecc475791c9d1cdb05f730d15aec640357b58aff4b4ecd881115833a5627a9bb728bdd7a84f6d4d719bf98989ef63f08f0a8e4ef098253ddc519e2eedd1f579a0a107ed3799ce2b9", 0xde}, {&(0x7f00000030c0)="25df18518e82ce5c9644c0e2e1cfb9544a2e59d3bd63755c1fc1ff07fcf1e213b8757e45201336816609f9b1a2b20aa3019dbc90767bf0e1bf0cd6d1099322ae7d78a1d863972e91827d581fcb2bf2343c69ac9d3ae9cd54fd13cd3900907d9f81a1995e614878bd8ebb478e77bfa948c20a0ed3f64e2e1df1c999bf3f4b165867069dfcde9d5aa170b4bb4c8b76835131b74fc1c4ecb355e612e4659cf004febf50c96e41d2a9a048ce33f82f9183ae9165c4bc066dfd57ac7d0213fbf7b424723dbf5d0733d571251cf32ad2c4f20d74e70cabb5dd0ba293d312926c4f09533302a197e72ab9", 0xe7}, {&(0x7f00000031c0)="86efec3b8a784d5e213e4ffe8ec3a4ac4a3b2fd2bdbf03279a48bb068c4540d3915eb55cf2686d9a15c49a88454852407b4aa60cee895d57465f54c836a62755e0e5d770ca31546604fd23903d0109f0882a48a7aefb1734307be7d595", 0x5d}, {&(0x7f0000003240)="23bf401785053a02ea1d4d054e88dba5cbba8762923366a4273ef3b02206042afa5dae33b4c3e7539bdfd225f0", 0x2d}, {&(0x7f0000003280)="2ea2c356277fb4737ffd63d10ad570bc6ef06cd148a437f2f5f005dfa2cc2093e0166b791c447c078313f3e518b8182220db155904bf491480f18fd0de848bfdb52837dcf1f897c88b6ae5214e0757406e076087e4ec178f1ec960e2edbee0caa1fc9e44300348bb303923f7b53e111f95bb0aba1a661d15a3e3a3e5e055e33afef57ccf8562111517949509784696a1468a19879b2cfd176fcd35807c0661deef6c64ad8cc3c259ff181b4f124593a00d035cbb9028e0840002d1e0a6b02b1e2ab7fe960862d04ba50cedcb752d0b8c4465ef618a", 0xd5}, {&(0x7f0000003380)="8cca86f8536917cd10dd2fc0feabe4525478a01b62e5cc9c88ad8941b7dc62c077e5a1690c42c70332f64f90466c396599bbf208a657bc", 0x37}], 0x6) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r2, 0xc1105511, &(0x7f0000003440)={{0xa, 0x1, 0xfe83, 0x215, 'syz0\x00', 0x1}, 0x0, 0x10, 0x8000, r6, 0x1, 0xffff, 'syz1\x00', &(0x7f0000003400)=['\x00'], 0x1}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000003680)={@map, 0xd, 0x1, 0x10000, &(0x7f0000003580)=[0x0], 0x1, 0x0, &(0x7f00000035c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000003600)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000003640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) sendmsg$AUDIT_SIGNAL_INFO(r4, &(0x7f0000003780)={&(0x7f00000036c0)={0x10, 0x0, 0x0, 0x9802110}, 0xc, &(0x7f0000003740)={&(0x7f0000003700)={0x10, 0x3f2, 0x800, 0x70bd27, 0x25dfdbff, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x40040}, 0x4) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f00000037c0), 0x4) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = getpgrp(r6) getresuid(&(0x7f0000003840), &(0x7f0000003880)=0x0, &(0x7f00000038c0)) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0186405, &(0x7f0000003900)={0xc, 0x80000001, {r6}, {0x0}, 0x0, 0x81}) sendmsg$nl_netfilter(r8, &(0x7f0000005240)={&(0x7f0000003800)={0x10, 0x0, 0x0, 0xbc0a866c40bbcd2d}, 0xc, &(0x7f0000005200)={&(0x7f0000003940)={0x18b0, 0x10, 0x6, 0x5, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x8}, [@generic="4cecebca0ef3e3f70605ce900994b9c806f6185ed7bb4ccb16333a0ed49214fcd567976e1fc73e40c6440b541f57e0d9fbc246072abbaa426f7550830f60d92882a3ff53c3eaaffb40e16b7f9b1b173ee8a690dc0987a4f153b383a78e", @nested={0x1a0, 0x4, 0x0, 0x1, [@typed={0x8, 0xf4, 0x0, 0x0, @ipv4=@multicast1}, @generic="94d21226d93f6a0a78f816df5340b73f4f99b86532a115c966bac29d8887d459efc9d36cc351a706615a03bcdb0929acab6403c4ae613d346dcc2cd8ce64c0cd0de0f6ef0da78ae678eb206bd8861efe83c225bc1fe0e2fbd4da1ea53441b5c84d189f712b158f73c6e6ebc54513323d132bf754344b43e949a1aa9934aaf1ac54883b51c25fe8a06f7c93e6794a5087c25c153d8caa2f3103a0a248e91772e31e770bb007e4358e8fb5790c1c7f9634c0bc88e9", @typed={0x8, 0x165, 0x0, 0x0, @pid=r6}, @typed={0x44, 0x2f, 0x0, 0x0, @binary="c91d7d397d4b2c781c54068cccf58ab865fafe6137ef0a412ec44d2fd11da4fef4e154e7143b0dfca73114545b4b1b913c2d85352ee56219111b430012e5b307"}, @nested={0x4, 0x2e}, @generic="a9b2ad782885ef8fdd4c3d7083f0c3c89cc3159a39cf2f00f948b5f849e00c4ced4883125cb2190d5336040c213b2e8a648fb4f63df687b05ea885bf716162b0a7e344dc1aab42bfbbef3bf47aed46e62ec791bbcbfb095830b8459d87ae9ea9f80ccc2cb61bd77cbf0896ed5fd85271afc53d856f6e56cc16dc356c0501e3dc52916415c831e98521b1b4b4", @nested={0x4, 0x2a}]}, @nested={0x12a, 0x12b, 0x0, 0x1, [@nested={0x4, 0x54}, @generic="a92e03e4595ec9bdff99b9cce78f96ca3818432b47e984d3fb58496f8eb7293ee522a005809afae750df0dc97369e4eaa3a56ac7f95395228f26e55b84650f2aa8a9203cd6ed43815a038b37ac08557d5f7b28bbb52e8aab8ad05f90a7c0f1961eb961f816823e90230697522faf2c5445a9a96e905e0725c9e36cbc1af037baea6f67aedf655cde4c8c45a7827b6e0736f436d64a170eb861862bc96a6a80cd63ef0532898f5bfe4521f3a74031836cc4f5a7b5bd337df3ffc5e20b7624e59b9076e9e45cb5f7a495e9beca5dcf", @nested={0x4, 0x165}, @typed={0x3a, 0x138, 0x0, 0x0, @binary="9ec123dfc96c41e53da2c14187554893a88fc9161b136bc5d7f1741a46e4eebd694cffbb96151d9329f21cda19fab6c5416f9b56682e"}, @typed={0x8, 0x152, 0x0, 0x0, @pid=r9}, @typed={0x4, 0x40}, @typed={0x8, 0x132, 0x0, 0x0, @uid=r10}]}, @generic="4c7eaf28e89fe28f17e7ec3943eb3a51eddbbec3eca922b70510f1f249d69ad3fb8aaaaef24a10e573d874d47d37e9dd2fc0b565b5c072985513d57c18e2a952527ee37ec6ffdfef09ea8f6b55ccbd3cf4f5a1fd732bc6d40b11d054fa37414eaa843c1a61c219dfc374235912c66e0c933ecb8214fb0ab7af97a49bfa4d5244993db526d9b59ecd10526fadcf5e8d3c91ae784ced2d51c4b9bd63d2a41d2a351e60adc6003a5e94e887cc5967778b496fc7cca277dba1584b0a1e4ed19fa0b1cb311e1356077659d6889dd4207be6503ef9efd5a4d853", @generic="a2ad6004319a0e8db89323bfc28503d121b748e256b0e642512d870baca67bf1099806f58c9b38a71718cc561f6cad5f59141a1d951e7852ff4922d0f0c19ce15b561d2e", @generic="b5d411590e39499d60945601737e43f4376198f174a51470aa857c29fb966506eb76e3ef604a43f7e5ba966dae0063b44b9565bd5722e5875b193f98aa1266e66386ff0499f4aa40c82cc08bb421b1b65863a1773f0ea6246bf69ec719fc63436a89e290cd5c90e379020e1cc8b1414acbc74482d8fbbfc0b892a1313b2382e4476babcae12d17a7c53488b83faea11e02bd63bea4cf4853b3e49c8a7d8319b64956083acd28885503c18f866af61eab02cfdf3736d1e29bbcc64096", @nested={0xc, 0x16b, 0x0, 0x1, [@typed={0x8, 0xc3, 0x0, 0x0, @u32=0x4}]}, @generic, @nested={0x1318, 0x2a, 0x0, 0x1, [@generic="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", @typed={0x8, 0x76, 0x0, 0x0, @uid=r11}, @generic="2eff8327e5ca6b04c14a773f9711932ce048030b6bae69a23c79f9837c4f83919f79629ea2c655bd5927c98c4b53ffb5fe2a2bb241375dec717f7d12c1bc39d1871ef810b6712b607b882b7a5c8bcdfe6664d1238d6df03fd3c41f387822db3dd3dccfc1617b435155a4e9d8cb941449d10ba1807f215a819e12d6dd37083e04a3a2997acad62e166df897be30279cb5", @typed={0x8, 0xf2, 0x0, 0x0, @u32=0x3}, @generic="77cbd66cc83e43e9dd579dafec94ddde0654b291540674539b0d82a596f737a3007814d6d4025b095a284e63232a1a83bbbe1d478d8881ece89775196d7e87f35a6200326a4cc7ee88af44d117e03d899b3f3958a59aef809df34a70be13e30870b0ee2e7cbf0ee2f01682fa6b82abb0990828e33c9ed91e3bfbb881128dd362c3158a832348db6b8d89ed592a612602bd01b4e85f", @typed={0xa, 0x90, 0x0, 0x0, @str='\xff\xff\xff\xff\xff\xff'}, @generic="d9f779e11981f19c92ca6c2b1abf1cfd8f7ba96327fd3e802bfb58b461d2a9c57e457dfa87c093cce9fa145edbb76cfbfcc3a3b3a58075a39c53b75e6fd65d39c0792e53c01a45e75d1069cd98f86e81c22e7a96d81c80617f8c7a126f9e823a6a3c9735a0f13a969b38988fd6a6cdade99a581f305de3a1d4f737a052a10b3f0659ba09f77bd298e01b7d31ef3b28d101bb6d6256fe6bb87f218de4952b03ba0b909ec3d7dca969cc8d7614c01cd15a9dc40eb389f5c21a62607962f11a7ed70e5ac4c5042fb73665f90864985fdcc2d2fcde5d1f53d65e504521fba5a568aa5011fcbe90019b0075a2c0fffbcba604", @nested={0x4, 0xc1}, @nested={0x4, 0x119}, @generic="6271f1fdec73f7b13598e76946b112209b16f252f685c4dd4806ba4075bb2a1fc92f06c362cb75e63f77c8fa4a0a5233464c99b7253175c622c54fef06a53673cdc706f995cdc2ceb83d8bef0ff9ebcd065620203fc359e90aeea8d722a61ae7c650b008805fde55ff89740f577b2e0e736af9f90b19f72252d37224b345a7b4ad7677b7c2ad22a952dc37f1123680763b7a9647071e5196c9987a9d8af3b4d244c36157525a0bb90b657e93db431851ac620541eb2de40f9e87a2665038e256f74167ce14826f854c61f5d247aac6ae6d08f980796f34de1ddb57"]}, @generic="d401df18ed33f12c3dfa9334a96f1a8869fd22ff2d36f2cc16429f25907df0737d62df19aa7aee190a721d7b45ca78bf6be1a1eb1af0b6bf1889fdeb401d95cb4caffa7ad9c263b76641b5f8f6ceb7f22bf31c4ee6eebdc1aa0552e7a434b35948099a6b0e90cb6577549b7e207f68120d9e92819ebd9cc6"]}, 0x18b0}, 0x1, 0x0, 0x0, 0x20040045}, 0x4008001) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000005280)) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000005380)={&(0x7f00000052c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000005340)={&(0x7f0000005300)={0x38, 0x1, 0x4, 0x801, 0x0, 0x0, {0x7}, [@NFULA_CFG_MODE={0xa, 0x2, {0x200}}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x7ff}, @NFULA_CFG_FLAGS={0x6}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x404c080}, 0x20000040) 38.642457784s ago: executing program 2 (id=692): r0 = openat$rtc(0xffffff9c, &(0x7f00000000c0), 0x6c000, 0x0) ioctl$RTC_EPOCH_SET(r0, 0x4004700e, 0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e1d, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e21, @multicast2}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0xa, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r5 = socket$inet6(0xa, 0x3, 0x3c) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0xfffffffffffffe6c, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x404c000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x5000, 0x80000001, @remote, 0x7}, 0x1c) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000740)=ANY=[@ANYRES16=r4, @ANYBLOB="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"/335, @ANYRES32=r4], 0x34}, 0x1, 0x0, 0x0, 0x4000810}, 0x14004880) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_MAC_ACL(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x8045}, 0x24000000) sendmsg$NL80211_CMD_JOIN_IBSS(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)=ANY=[@ANYBLOB="b3a6a163cac25d5e24db021840ec2d", @ANYRES16, @ANYBLOB="010126bd7000000000002b00000008000300", @ANYRES64, @ANYBLOB="96db66fd9413c202787a060ea3b91b48f65fff730a01e18988eba816ee9fa59a0e258b23ad45657b2346cf96e80ba05ace502e8dfde7642d16b6dcdd25ba69cb02ef6ad76c236e32107cc491de56e97014b148d8698f2369f49acbe1da09fdb4c908a3788590c1b07b23f6dc6975ded7be8944"], 0x1c}, 0x1, 0x0, 0x0, 0x4890}, 0x4010) 38.613322716s ago: executing program 5 (id=693): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0xfff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r2 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000580)={0x1, @vbi={0x4, 0x80000000, 0x4, 0x34325258, [0x88000], [0xaf09, 0x7], 0x1}}) ioctl$DRM_IOCTL_MODE_RMFB(0xffffffffffffffff, 0xc00464af, &(0x7f0000000480)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) mknod(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) lsetxattr(&(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x3) listxattr(0x0, 0x0, 0x0) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="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", @ANYRES16=r5, @ANYBLOB="010028bd7000000000000100000014000200776730000000000000000000000000000800050001000000"], 0x30}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) ioctl$TCSETAW(r3, 0x5407, 0x0) ioctl$TIOCMSET(r3, 0x5418, &(0x7f0000000000)=0x8001) openat$ttyS3(0xffffff9c, &(0x7f0000000140), 0x20040, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0xdaf}}, './file0\x00'}) openat$sequencer2(0xffffff9c, &(0x7f00000001c0), 0x30b001, 0x0) socket$kcm(0xa, 0x3, 0x87) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x200, 0x0) close(r7) 37.618208189s ago: executing program 0 (id=694): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) socket$nl_route(0x10, 0x3, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000240)={0x2c, @remote, 0x4e20, 0x1, 'sh\x00', 0x8, 0xd8b, 0x4}, 0x2c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r3, 0x0, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[], 0x28}}, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000680)={0x0, 0x4, 0x28}, 0xc) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x4c}]}, &(0x7f00000000c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c00000004060101000000e62b000000000000000500010007000000"], 0x1c}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) r4 = openat$binderfs(0xffffff9c, &(0x7f0000000140)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r4, 0xc00c620f, &(0x7f0000000200)={0xffffffffffffffff}) r5 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x8}, &(0x7f0000010080), &(0x7f0000000000), &(0x7f0000000000)) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0xc040565e, 0x0) shmget(0x3, 0x3000, 0x2, &(0x7f0000ffa000/0x3000)=nil) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000000c0)=[{0x0}, {&(0x7f00000003c0)=""/202, 0xca}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r5, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000340)}], &(0x7f00000005c0), 0x1}, 0x20) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="4400000010000d042dbd7000fcffff1f00000000", @ANYRES32=r6, @ANYBLOB="46000600000000002400128009000100626f6e6400000000140002800500010002000005000e0005001873"], 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x0) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200e3}, [@IFLA_MASTER={0x8, 0xa, r6}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 4.612104829s ago: executing program 34 (id=694): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) socket$nl_route(0x10, 0x3, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000240)={0x2c, @remote, 0x4e20, 0x1, 'sh\x00', 0x8, 0xd8b, 0x4}, 0x2c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r3, 0x0, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[], 0x28}}, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000680)={0x0, 0x4, 0x28}, 0xc) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x4c}]}, &(0x7f00000000c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c00000004060101000000e62b000000000000000500010007000000"], 0x1c}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) r4 = openat$binderfs(0xffffff9c, &(0x7f0000000140)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r4, 0xc00c620f, &(0x7f0000000200)={0xffffffffffffffff}) r5 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x8}, &(0x7f0000010080), &(0x7f0000000000), &(0x7f0000000000)) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0xc040565e, 0x0) shmget(0x3, 0x3000, 0x2, &(0x7f0000ffa000/0x3000)=nil) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000000c0)=[{0x0}, {&(0x7f00000003c0)=""/202, 0xca}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r5, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000340)}], &(0x7f00000005c0), 0x1}, 0x20) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="4400000010000d042dbd7000fcffff1f00000000", @ANYRES32=r6, @ANYBLOB="46000600000000002400128009000100626f6e6400000000140002800500010002000005000e0005001873"], 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x0) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200e3}, [@IFLA_MASTER={0x8, 0xa, r6}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 985.655954ms ago: executing program 35 (id=691): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r1, 0x10, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x48}, @void, @val={0xc, 0x99, {0x2984643c, 0x6e}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x404c000) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r2, &(0x7f00000011c0)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001180)={&(0x7f00000010c0)={0xb4, 0x1, 0x8, 0x401, 0x0, 0x0, {0x1, 0x0, 0xa}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x6d08}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x80000001}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x400}, @CTA_TIMEOUT_UDP_REPLIED={0x8}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x3c, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_RESPOND={0x8, 0x2, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_DCCP_REQUEST={0x8, 0x1, 0x1, 0x0, 0xb0e3}, @CTA_TIMEOUT_DCCP_OPEN={0x8}, @CTA_TIMEOUT_DCCP_OPEN={0x8, 0x4, 0x1, 0x0, 0x3f1}, @CTA_TIMEOUT_DCCP_TIMEWAIT={0x8, 0x7, 0x1, 0x0, 0x445d}, @CTA_TIMEOUT_DCCP_OPEN={0x8, 0x4, 0x1, 0x0, 0x10}, @CTA_TIMEOUT_DCCP_CLOSING={0x8, 0x6, 0x1, 0x0, 0x1}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x17}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8010}, 0x4000) connect$qrtr(r2, &(0x7f0000001200)={0x2a, 0x1, 0x1}, 0xc) r3 = syz_open_pts(r2, 0x80000) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000001240)={{0x1, 0x1, 0x18, r3}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000002280)={&(0x7f0000002180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000002240)={&(0x7f00000021c0)={0x5c, 0x0, 0x1, 0x80, 0x0, 0x0, {0xa, 0x0, 0x9}, [@CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x4}, @CTA_SYNPROXY={0xc, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x101}]}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x1ff}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x8}, @CTA_SYNPROXY={0x24, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x5}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0xe6}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x8000}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x2}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x890}, 0x4008000) recvmsg(r0, &(0x7f0000002440)={&(0x7f00000022c0)=@ax25={{0x3, @rose}, [@default, @netrom, @bcast, @rose, @bcast, @default, @rose, @rose]}, 0x80, &(0x7f0000002380)=[{&(0x7f0000002340)=""/26, 0x1a}], 0x1, &(0x7f00000023c0)=""/82, 0x52}, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000024c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r4, &(0x7f0000002d80)={&(0x7f0000002480)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000002d40)={&(0x7f0000002500)={0x81c, r1, 0x800, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x8001, 0x34}}}}, [@NL80211_ATTR_FRAME={0x5cb, 0x33, @data_frame={@a_msdu=@type11={{0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x7}, @device_a, @broadcast, @initial, {0xb, 0xa}, @device_b}, @random="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"}}, @NL80211_ATTR_FRAME={0x38, 0x33, @mgmt_frame=@deauth={{{0x0, 0x0, 0xc, 0x0, 0x0, 0x1, 0x1}, {0x6}, @device_b, @device_b, @random="dd55f77b2316", {0x3, 0x216}}, 0x26, @val={0x8c, 0x18, {0x7eb, "7fef77474483", @long="55ed665700ef8e755ac99a03e04ddd76"}}}}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0x1cb, 0x33, @mgmt_frame=@reassoc_req={{{}, {0x8}, @device_a, @broadcast, @initial, {0x8, 0x5a9}}, 0x40, 0x7, @device_b, {0x0, 0x6, @default_ibss_ssid}, @val={0x1, 0x8, [{0x60, 0x1}, {0x5, 0x1}, {0x60, 0x1}, {0x1b}, {0x1b}, {0xb, 0x1}, {0x5}, {0x2}]}, @void, [{0xdd, 0xda, "486bb16668a8b46d6f0586ba262e7334b8a443876cf7976eecd016108d08129d7d5dd785763f8a79646614f66a9288e430c692ff5a4d9e6cd14fe0c9f40913a152bbe5bc8143b6c4121022a82901711bb76c600e78e738b24b1026aeb6a66dc9af2d2e80d7e2cd2f9a613d2894ee7b3c4a21b374721f3e7e1def997a35cfe76361622bd5372a346326721289b91ab9ffc1f4e232e7bb83252503337ab8f0fe7f8083ede134af05648a32d7f69ac046550bfabe6d93cbe667df14f3f00faa8419b83ddefe267bd37898f20e77c26009f7e7db1cc343248e4f7166"}, {0xdd, 0xb5, "6c903dd15823518750591b861e9ba36c0ad1a8532b9db732f025bf4fb6917971ca73c53efac95e9482def1ecab25074cb91fb8ca4d74a28711d933fc8ccc1c0559bbdeea76bf936d50bce2ed266cfed120e5e6884eda15616de0952e377225cdc2bdbecd9a6a2f57d6c499c650df018b600703658206643d751c80ebc24d734325917e0adafb9fd0d24596a781c76d269b33d00e0afef299cce26ce54e093120562e81e05bd991c96a9b6294259cd1a8050110bf9a"}]}}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x8864}]}, 0x81c}}, 0x44040) socket$inet6(0xa, 0xa, 0x7) r6 = syz_clone(0x2000000, &(0x7f0000002dc0)="d3c7449ec6f83eaf", 0x8, &(0x7f0000002e00), &(0x7f0000002e40), &(0x7f0000002e80)="703e6f46a631e201f9176470b9b4c682470ff59e1ac0bc41b8dcf5f7a52039bc29636c8134c2ff17c1d3a281e8867536ab48f9c27af5aa368ac42a1fd0090d1705800bd230cb361fe6cf") ioctl$sock_SIOCSPGRP(r4, 0x8902, &(0x7f0000002f00)=r6) r7 = socket$can_raw(0x1d, 0x3, 0x1) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r7, 0x46c47000) getsockopt$CAN_RAW_JOIN_FILTERS(r7, 0x65, 0x6, &(0x7f0000002f40), &(0x7f0000002f80)=0x4) writev(r2, &(0x7f00000033c0)=[{&(0x7f0000002fc0)="68d66cb175ef90dabba753cba556ac91fd8dde8bef53090004727e232b5b1feea5c12ad5ccc331212c04c33b0ef6b0bd14bb4b553028218f0cdbebb5e6f53fad6075e83725a5291be10aff94f1044d8bec38f31ce00a02dab9e96fa5850974716c113a47492d7741d8336e8cc1a8784ecb5cc9e1a0410bfeb59cb12ba16f8ce34ad899c8b97256ba7ab7d3fd9a3fde57c96f3e134733ecc475791c9d1cdb05f730d15aec640357b58aff4b4ecd881115833a5627a9bb728bdd7a84f6d4d719bf98989ef63f08f0a8e4ef098253ddc519e2eedd1f579a0a107ed3799ce2b9", 0xde}, {&(0x7f00000030c0)="25df18518e82ce5c9644c0e2e1cfb9544a2e59d3bd63755c1fc1ff07fcf1e213b8757e45201336816609f9b1a2b20aa3019dbc90767bf0e1bf0cd6d1099322ae7d78a1d863972e91827d581fcb2bf2343c69ac9d3ae9cd54fd13cd3900907d9f81a1995e614878bd8ebb478e77bfa948c20a0ed3f64e2e1df1c999bf3f4b165867069dfcde9d5aa170b4bb4c8b76835131b74fc1c4ecb355e612e4659cf004febf50c96e41d2a9a048ce33f82f9183ae9165c4bc066dfd57ac7d0213fbf7b424723dbf5d0733d571251cf32ad2c4f20d74e70cabb5dd0ba293d312926c4f09533302a197e72ab9", 0xe7}, {&(0x7f00000031c0)="86efec3b8a784d5e213e4ffe8ec3a4ac4a3b2fd2bdbf03279a48bb068c4540d3915eb55cf2686d9a15c49a88454852407b4aa60cee895d57465f54c836a62755e0e5d770ca31546604fd23903d0109f0882a48a7aefb1734307be7d595", 0x5d}, {&(0x7f0000003240)="23bf401785053a02ea1d4d054e88dba5cbba8762923366a4273ef3b02206042afa5dae33b4c3e7539bdfd225f0", 0x2d}, {&(0x7f0000003280)="2ea2c356277fb4737ffd63d10ad570bc6ef06cd148a437f2f5f005dfa2cc2093e0166b791c447c078313f3e518b8182220db155904bf491480f18fd0de848bfdb52837dcf1f897c88b6ae5214e0757406e076087e4ec178f1ec960e2edbee0caa1fc9e44300348bb303923f7b53e111f95bb0aba1a661d15a3e3a3e5e055e33afef57ccf8562111517949509784696a1468a19879b2cfd176fcd35807c0661deef6c64ad8cc3c259ff181b4f124593a00d035cbb9028e0840002d1e0a6b02b1e2ab7fe960862d04ba50cedcb752d0b8c4465ef618a", 0xd5}, {&(0x7f0000003380)="8cca86f8536917cd10dd2fc0feabe4525478a01b62e5cc9c88ad8941b7dc62c077e5a1690c42c70332f64f90466c396599bbf208a657bc", 0x37}], 0x6) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r2, 0xc1105511, &(0x7f0000003440)={{0xa, 0x1, 0xfe83, 0x215, 'syz0\x00', 0x1}, 0x0, 0x10, 0x8000, r6, 0x1, 0xffff, 'syz1\x00', &(0x7f0000003400)=['\x00'], 0x1}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000003680)={@map, 0xd, 0x1, 0x10000, &(0x7f0000003580)=[0x0], 0x1, 0x0, &(0x7f00000035c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000003600)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000003640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) sendmsg$AUDIT_SIGNAL_INFO(r4, &(0x7f0000003780)={&(0x7f00000036c0)={0x10, 0x0, 0x0, 0x9802110}, 0xc, &(0x7f0000003740)={&(0x7f0000003700)={0x10, 0x3f2, 0x800, 0x70bd27, 0x25dfdbff, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x40040}, 0x4) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f00000037c0), 0x4) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = getpgrp(r6) getresuid(&(0x7f0000003840), &(0x7f0000003880)=0x0, &(0x7f00000038c0)) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0186405, &(0x7f0000003900)={0xc, 0x80000001, {r6}, {0x0}, 0x0, 0x81}) sendmsg$nl_netfilter(r8, &(0x7f0000005240)={&(0x7f0000003800)={0x10, 0x0, 0x0, 0xbc0a866c40bbcd2d}, 0xc, &(0x7f0000005200)={&(0x7f0000003940)={0x18b0, 0x10, 0x6, 0x5, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x8}, [@generic="4cecebca0ef3e3f70605ce900994b9c806f6185ed7bb4ccb16333a0ed49214fcd567976e1fc73e40c6440b541f57e0d9fbc246072abbaa426f7550830f60d92882a3ff53c3eaaffb40e16b7f9b1b173ee8a690dc0987a4f153b383a78e", @nested={0x1a0, 0x4, 0x0, 0x1, [@typed={0x8, 0xf4, 0x0, 0x0, @ipv4=@multicast1}, @generic="94d21226d93f6a0a78f816df5340b73f4f99b86532a115c966bac29d8887d459efc9d36cc351a706615a03bcdb0929acab6403c4ae613d346dcc2cd8ce64c0cd0de0f6ef0da78ae678eb206bd8861efe83c225bc1fe0e2fbd4da1ea53441b5c84d189f712b158f73c6e6ebc54513323d132bf754344b43e949a1aa9934aaf1ac54883b51c25fe8a06f7c93e6794a5087c25c153d8caa2f3103a0a248e91772e31e770bb007e4358e8fb5790c1c7f9634c0bc88e9", @typed={0x8, 0x165, 0x0, 0x0, @pid=r6}, @typed={0x44, 0x2f, 0x0, 0x0, @binary="c91d7d397d4b2c781c54068cccf58ab865fafe6137ef0a412ec44d2fd11da4fef4e154e7143b0dfca73114545b4b1b913c2d85352ee56219111b430012e5b307"}, @nested={0x4, 0x2e}, @generic="a9b2ad782885ef8fdd4c3d7083f0c3c89cc3159a39cf2f00f948b5f849e00c4ced4883125cb2190d5336040c213b2e8a648fb4f63df687b05ea885bf716162b0a7e344dc1aab42bfbbef3bf47aed46e62ec791bbcbfb095830b8459d87ae9ea9f80ccc2cb61bd77cbf0896ed5fd85271afc53d856f6e56cc16dc356c0501e3dc52916415c831e98521b1b4b4", @nested={0x4, 0x2a}]}, @nested={0x12a, 0x12b, 0x0, 0x1, [@nested={0x4, 0x54}, @generic="a92e03e4595ec9bdff99b9cce78f96ca3818432b47e984d3fb58496f8eb7293ee522a005809afae750df0dc97369e4eaa3a56ac7f95395228f26e55b84650f2aa8a9203cd6ed43815a038b37ac08557d5f7b28bbb52e8aab8ad05f90a7c0f1961eb961f816823e90230697522faf2c5445a9a96e905e0725c9e36cbc1af037baea6f67aedf655cde4c8c45a7827b6e0736f436d64a170eb861862bc96a6a80cd63ef0532898f5bfe4521f3a74031836cc4f5a7b5bd337df3ffc5e20b7624e59b9076e9e45cb5f7a495e9beca5dcf", @nested={0x4, 0x165}, @typed={0x3a, 0x138, 0x0, 0x0, @binary="9ec123dfc96c41e53da2c14187554893a88fc9161b136bc5d7f1741a46e4eebd694cffbb96151d9329f21cda19fab6c5416f9b56682e"}, @typed={0x8, 0x152, 0x0, 0x0, @pid=r9}, @typed={0x4, 0x40}, @typed={0x8, 0x132, 0x0, 0x0, @uid=r10}]}, @generic="4c7eaf28e89fe28f17e7ec3943eb3a51eddbbec3eca922b70510f1f249d69ad3fb8aaaaef24a10e573d874d47d37e9dd2fc0b565b5c072985513d57c18e2a952527ee37ec6ffdfef09ea8f6b55ccbd3cf4f5a1fd732bc6d40b11d054fa37414eaa843c1a61c219dfc374235912c66e0c933ecb8214fb0ab7af97a49bfa4d5244993db526d9b59ecd10526fadcf5e8d3c91ae784ced2d51c4b9bd63d2a41d2a351e60adc6003a5e94e887cc5967778b496fc7cca277dba1584b0a1e4ed19fa0b1cb311e1356077659d6889dd4207be6503ef9efd5a4d853", @generic="a2ad6004319a0e8db89323bfc28503d121b748e256b0e642512d870baca67bf1099806f58c9b38a71718cc561f6cad5f59141a1d951e7852ff4922d0f0c19ce15b561d2e", @generic="b5d411590e39499d60945601737e43f4376198f174a51470aa857c29fb966506eb76e3ef604a43f7e5ba966dae0063b44b9565bd5722e5875b193f98aa1266e66386ff0499f4aa40c82cc08bb421b1b65863a1773f0ea6246bf69ec719fc63436a89e290cd5c90e379020e1cc8b1414acbc74482d8fbbfc0b892a1313b2382e4476babcae12d17a7c53488b83faea11e02bd63bea4cf4853b3e49c8a7d8319b64956083acd28885503c18f866af61eab02cfdf3736d1e29bbcc64096", @nested={0xc, 0x16b, 0x0, 0x1, [@typed={0x8, 0xc3, 0x0, 0x0, @u32=0x4}]}, @generic, @nested={0x1318, 0x2a, 0x0, 0x1, [@generic="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", @typed={0x8, 0x76, 0x0, 0x0, @uid=r11}, @generic="2eff8327e5ca6b04c14a773f9711932ce048030b6bae69a23c79f9837c4f83919f79629ea2c655bd5927c98c4b53ffb5fe2a2bb241375dec717f7d12c1bc39d1871ef810b6712b607b882b7a5c8bcdfe6664d1238d6df03fd3c41f387822db3dd3dccfc1617b435155a4e9d8cb941449d10ba1807f215a819e12d6dd37083e04a3a2997acad62e166df897be30279cb5", @typed={0x8, 0xf2, 0x0, 0x0, @u32=0x3}, @generic="77cbd66cc83e43e9dd579dafec94ddde0654b291540674539b0d82a596f737a3007814d6d4025b095a284e63232a1a83bbbe1d478d8881ece89775196d7e87f35a6200326a4cc7ee88af44d117e03d899b3f3958a59aef809df34a70be13e30870b0ee2e7cbf0ee2f01682fa6b82abb0990828e33c9ed91e3bfbb881128dd362c3158a832348db6b8d89ed592a612602bd01b4e85f", @typed={0xa, 0x90, 0x0, 0x0, @str='\xff\xff\xff\xff\xff\xff'}, @generic="d9f779e11981f19c92ca6c2b1abf1cfd8f7ba96327fd3e802bfb58b461d2a9c57e457dfa87c093cce9fa145edbb76cfbfcc3a3b3a58075a39c53b75e6fd65d39c0792e53c01a45e75d1069cd98f86e81c22e7a96d81c80617f8c7a126f9e823a6a3c9735a0f13a969b38988fd6a6cdade99a581f305de3a1d4f737a052a10b3f0659ba09f77bd298e01b7d31ef3b28d101bb6d6256fe6bb87f218de4952b03ba0b909ec3d7dca969cc8d7614c01cd15a9dc40eb389f5c21a62607962f11a7ed70e5ac4c5042fb73665f90864985fdcc2d2fcde5d1f53d65e504521fba5a568aa5011fcbe90019b0075a2c0fffbcba604", @nested={0x4, 0xc1}, @nested={0x4, 0x119}, @generic="6271f1fdec73f7b13598e76946b112209b16f252f685c4dd4806ba4075bb2a1fc92f06c362cb75e63f77c8fa4a0a5233464c99b7253175c622c54fef06a53673cdc706f995cdc2ceb83d8bef0ff9ebcd065620203fc359e90aeea8d722a61ae7c650b008805fde55ff89740f577b2e0e736af9f90b19f72252d37224b345a7b4ad7677b7c2ad22a952dc37f1123680763b7a9647071e5196c9987a9d8af3b4d244c36157525a0bb90b657e93db431851ac620541eb2de40f9e87a2665038e256f74167ce14826f854c61f5d247aac6ae6d08f980796f34de1ddb57"]}, @generic="d401df18ed33f12c3dfa9334a96f1a8869fd22ff2d36f2cc16429f25907df0737d62df19aa7aee190a721d7b45ca78bf6be1a1eb1af0b6bf1889fdeb401d95cb4caffa7ad9c263b76641b5f8f6ceb7f22bf31c4ee6eebdc1aa0552e7a434b35948099a6b0e90cb6577549b7e207f68120d9e92819ebd9cc6"]}, 0x18b0}, 0x1, 0x0, 0x0, 0x20040045}, 0x4008001) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000005280)) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000005380)={&(0x7f00000052c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000005340)={&(0x7f0000005300)={0x38, 0x1, 0x4, 0x801, 0x0, 0x0, {0x7}, [@NFULA_CFG_MODE={0xa, 0x2, {0x200}}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x7ff}, @NFULA_CFG_FLAGS={0x6}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x404c080}, 0x20000040) 80.109051ms ago: executing program 36 (id=692): r0 = openat$rtc(0xffffff9c, &(0x7f00000000c0), 0x6c000, 0x0) ioctl$RTC_EPOCH_SET(r0, 0x4004700e, 0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e1d, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e21, @multicast2}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0xa, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r5 = socket$inet6(0xa, 0x3, 0x3c) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0xfffffffffffffe6c, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x404c000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x5000, 0x80000001, @remote, 0x7}, 0x1c) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000740)=ANY=[@ANYRES16=r4, @ANYBLOB="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"/335, @ANYRES32=r4], 0x34}, 0x1, 0x0, 0x0, 0x4000810}, 0x14004880) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_MAC_ACL(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x8045}, 0x24000000) sendmsg$NL80211_CMD_JOIN_IBSS(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)=ANY=[@ANYBLOB="b3a6a163cac25d5e24db021840ec2d", @ANYRES16, @ANYBLOB="010126bd7000000000002b00000008000300", @ANYRES64, @ANYBLOB="96db66fd9413c202787a060ea3b91b48f65fff730a01e18988eba816ee9fa59a0e258b23ad45657b2346cf96e80ba05ace502e8dfde7642d16b6dcdd25ba69cb02ef6ad76c236e32107cc491de56e97014b148d8698f2369f49acbe1da09fdb4c908a3788590c1b07b23f6dc6975ded7be8944"], 0x1c}, 0x1, 0x0, 0x0, 0x4890}, 0x4010) 0s ago: executing program 37 (id=693): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0xfff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r2 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000580)={0x1, @vbi={0x4, 0x80000000, 0x4, 0x34325258, [0x88000], [0xaf09, 0x7], 0x1}}) ioctl$DRM_IOCTL_MODE_RMFB(0xffffffffffffffff, 0xc00464af, &(0x7f0000000480)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) mknod(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) lsetxattr(&(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x3) listxattr(0x0, 0x0, 0x0) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="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", @ANYRES16=r5, @ANYBLOB="010028bd7000000000000100000014000200776730000000000000000000000000000800050001000000"], 0x30}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) ioctl$TCSETAW(r3, 0x5407, 0x0) ioctl$TIOCMSET(r3, 0x5418, &(0x7f0000000000)=0x8001) openat$ttyS3(0xffffff9c, &(0x7f0000000140), 0x20040, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0xdaf}}, './file0\x00'}) openat$sequencer2(0xffffff9c, &(0x7f00000001c0), 0x30b001, 0x0) socket$kcm(0xa, 0x3, 0x87) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x200, 0x0) close(r7) kernel console output (not intermixed with test programs): parsing attributes in process `syz.0.235'. [ 116.531016][ T6727] netlink: 4 bytes leftover after parsing attributes in process `syz.2.234'. [ 116.553529][ T5680] usb 2-1: device descriptor read/8, error -71 [ 116.673072][ T6735] netlink: 4 bytes leftover after parsing attributes in process `syz.5.237'. [ 116.803127][ T5680] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 116.834197][ T5680] usb 2-1: device descriptor read/8, error -71 [ 116.949183][ T6744] xt_hashlimit: max too large, truncated to 1048576 [ 116.959992][ T5680] usb usb2-port1: unable to enumerate USB device [ 117.097940][ T6746] kAFS: unable to lookup cell 'ÿ' [ 117.137021][ T6746] kAFS: unable to lookup cell '(,c¾Ì' [ 117.443536][ T5680] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 117.594040][ T6757] tipc: Started in network mode [ 117.599671][ T6757] tipc: Node identity 369025cde974, cluster identity 4711 [ 117.607468][ T5680] usb 1-1: too many configurations: 65, using maximum allowed: 8 [ 117.608001][ T6757] tipc: Enabled bearer , priority 0 [ 117.638510][ T5680] usb 1-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 117.648152][ T5680] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.662447][ T5680] uvcvideo 1-1:250.0: Found UVC 0.00 device (046d:08c1) [ 117.671004][ T5680] uvcvideo 1-1:250.0: No valid video chain found. [ 117.682647][ T6757] syzkaller0: entered promiscuous mode [ 117.696218][ T6757] syzkaller0: entered allmulticast mode [ 117.850234][ T5633] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 117.865894][ T5707] usb 1-1: USB disconnect, device number 13 [ 117.967647][ T6763] xt_bpf: check failed: parse error [ 118.418032][ T6756] tipc: Resetting bearer [ 118.445352][ T6756] tipc: Disabling bearer [ 118.487375][ T6769] FAULT_INJECTION: forcing a failure. [ 118.487375][ T6769] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 118.503978][ T6769] CPU: 1 UID: 0 PID: 6769 Comm: syz.0.249 Not tainted syzkaller #0 PREEMPT(full) [ 118.504008][ T6769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 118.504019][ T6769] Call Trace: [ 118.504026][ T6769] [ 118.504034][ T6769] dump_stack_lvl+0xe8/0x150 [ 118.504059][ T6769] should_fail_ex+0x40c/0x560 [ 118.504082][ T6769] _copy_from_user+0x2d/0xb0 [ 118.504109][ T6769] vmemdup_user+0x5e/0xd0 [ 118.504127][ T6769] map_lookup_and_delete_elem+0x33e/0xa90 [ 118.504156][ T6769] ? bpf_lsm_bpf+0x9/0x20 [ 118.504184][ T6769] __sys_bpf+0x77c/0x950 [ 118.504209][ T6769] ? __pfx___sys_bpf+0x10/0x10 [ 118.504239][ T6769] ? fput+0xa0/0xd0 [ 118.504259][ T6769] ? ksys_write+0x242/0x270 [ 118.504286][ T6769] __ia32_sys_bpf+0x7c/0x90 [ 118.504309][ T6769] __do_fast_syscall_32+0x23e/0x6f0 [ 118.504334][ T6769] ? do_fast_syscall_32+0x33/0x70 [ 118.504358][ T6769] ? asm_int80_emulation+0x1a/0x20 [ 118.504376][ T6769] ? do_int80_emulation+0x29f/0x550 [ 118.504400][ T6769] ? trace_irq_disable+0x3b/0x140 [ 118.504425][ T6769] do_fast_syscall_32+0x33/0x70 [ 118.504449][ T6769] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 118.504469][ T6769] RIP: 0023:0xf70cf0ec [ 118.504485][ T6769] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 118.504500][ T6769] RSP: 002b:00000000f54bd50c EFLAGS: 00000206 ORIG_RAX: 0000000000000165 [ 118.504521][ T6769] RAX: ffffffffffffffda RBX: 0000000000000015 RCX: 0000000080000740 [ 118.504535][ T6769] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000000 [ 118.504546][ T6769] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 118.504556][ T6769] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 118.504567][ T6769] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 118.504585][ T6769] [ 118.863180][ T5680] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 118.882009][ T6778] netlink: 4 bytes leftover after parsing attributes in process `syz.5.253'. [ 118.894982][ T6778] netlink: 84 bytes leftover after parsing attributes in process `syz.5.253'. [ 119.003028][ T5680] usb 2-1: device descriptor read/64, error -71 [ 119.243209][ T5680] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 119.383096][ T5680] usb 2-1: device descriptor read/64, error -71 [ 119.505652][ T5680] usb usb2-port1: attempt power cycle [ 119.845133][ T5680] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 119.887222][ T5680] usb 2-1: device descriptor read/8, error -71 [ 120.133088][ T5680] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 120.153676][ T5680] usb 2-1: device descriptor read/8, error -71 [ 120.183107][ T995] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 120.263558][ T5680] usb usb2-port1: unable to enumerate USB device [ 120.313096][ T995] usb 6-1: device descriptor read/64, error -71 [ 120.333082][ T24] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 120.494139][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 120.505264][ T24] usb 4-1: config 8 has an invalid interface number: 234 but max is 0 [ 120.514196][ T24] usb 4-1: config 8 has no interface number 0 [ 120.523006][ T24] usb 4-1: config 8 interface 234 altsetting 1 bulk endpoint 0xD has invalid maxpacket 16 [ 120.533687][ T24] usb 4-1: config 8 interface 234 has no altsetting 0 [ 120.544692][ T24] usb 4-1: New USB device found, idVendor=1608, idProduct=021c, bcdDevice= 6.42 [ 120.554732][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.556069][ T995] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 120.572306][ T24] usb 4-1: Product: syz [ 120.577363][ T24] usb 4-1: Manufacturer: syz [ 120.582125][ T24] usb 4-1: SerialNumber: syz [ 120.594634][ T6801] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 120.607998][ T6803] netlink: 'syz.2.261': attribute type 1 has an invalid length. [ 120.618495][ T6804] erspan1: entered allmulticast mode [ 120.708460][ T5633] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 120.714596][ T995] usb 6-1: device descriptor read/64, error -71 [ 120.821720][ T24] io_ti 4-1:8.234: required endpoints missing [ 120.831549][ T24] usb 4-1: USB disconnect, device number 19 [ 120.837883][ T995] usb usb6-port1: attempt power cycle [ 120.877106][ T6813] xt_bpf: check failed: parse error [ 121.183027][ T995] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 121.213406][ T995] usb 6-1: device descriptor read/8, error -71 [ 121.473267][ T995] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 121.566549][ T995] usb 6-1: device descriptor read/8, error -71 [ 121.693670][ T995] usb usb6-port1: unable to enumerate USB device [ 121.803006][ T24] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 121.913065][ T808] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 121.913071][ T5680] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 121.963446][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 121.973580][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 122.006757][ T24] usb 4-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 122.016835][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 122.030886][ T24] usb 4-1: SerialNumber: syz [ 122.043969][ T24] usb 4-1: config 0 descriptor?? [ 122.055034][ T24] uvcvideo 4-1:0.0: Found UVC 0.00 device (05ac:8501) [ 122.063029][ T808] usb 2-1: Using ep0 maxpacket: 16 [ 122.068250][ T24] uvcvideo 4-1:0.0: No valid video chain found. [ 122.079573][ T808] usb 2-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 122.095217][ T5680] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 122.106880][ T808] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.106886][ T5680] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.106910][ T808] usb 2-1: Product: syz [ 122.118099][ T5680] usb 3-1: config 0 descriptor?? [ 122.140015][ T808] usb 2-1: Manufacturer: syz [ 122.146267][ T808] usb 2-1: SerialNumber: syz [ 122.152441][ T808] usb 2-1: config 0 descriptor?? [ 122.160238][ T808] ums-onetouch 2-1:0.0: USB Mass Storage device detected [ 122.356467][ T6827] batman_adv: batadv0: Adding interface: macvtap1 [ 122.364055][ T6827] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 122.400608][ T5624] usb 2-1: USB disconnect, device number 17 [ 122.412248][ T6827] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 122.494359][ T6827] batman_adv: batadv0: Removing interface: macvtap1 [ 123.029135][ T6837] kvm: kvm [6836]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010004) = 0x10000000001780 [ 124.083364][ T5624] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 124.107296][ T995] hid_parser_main: 4001 callbacks suppressed [ 124.107346][ T995] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 124.153369][ T995] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 124.252991][ T5624] usb 6-1: Using ep0 maxpacket: 8 [ 124.295673][ T5624] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 124.371337][ T5715] usb 4-1: USB disconnect, device number 20 [ 124.395190][ T5624] usb 6-1: New USB device found, idVendor=0471, idProduct=0313, bcdDevice=81.d5 [ 124.438931][ T5624] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.466821][ T5624] usb 6-1: Product: syz [ 124.481651][ T5624] usb 6-1: Manufacturer: syz [ 124.504902][ T5624] usb 6-1: SerialNumber: syz [ 124.531945][ T5624] usb 6-1: config 0 descriptor?? [ 124.561601][ T5633] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 124.591921][ T6863] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.277'. [ 124.737168][ T5680] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 124.814280][ T5680] [drm:udl_init] *ERROR* Selecting channel failed [ 124.875493][ T5680] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 124.902970][ T5680] [drm] Initialized udl on minor 2 [ 124.927065][ T5680] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 124.943938][ T6872] xt_bpf: check failed: parse error [ 124.969323][ T5680] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 124.976805][ T995] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 125.015529][ T995] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 125.024291][ T5680] usb 3-1: USB disconnect, device number 14 [ 125.059133][ T995] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 125.207902][ T6881] tipc: Enabled bearer , priority 0 [ 125.220783][ T6881] syzkaller0: entered promiscuous mode [ 125.228949][ T6881] syzkaller0: entered allmulticast mode [ 125.276135][ T6879] tipc: Resetting bearer [ 125.312519][ T6879] tipc: Disabling bearer [ 126.503011][ T5624] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 126.604019][ T6905] kAFS: unable to lookup cell 'ÿ' [ 126.673062][ T5624] usb 3-1: Using ep0 maxpacket: 32 [ 126.694187][ T5624] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 126.717360][ T5624] usb 3-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 126.756600][ T5624] usb 3-1: config 0 interface 0 has no altsetting 0 [ 126.780046][ T5624] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 126.806001][ T5624] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.816954][ T808] usb 6-1: USB disconnect, device number 14 [ 126.841902][ T5624] usb 3-1: Product: syz [ 126.852842][ T5624] usb 3-1: Manufacturer: syz [ 126.873608][ T5624] usb 3-1: SerialNumber: syz [ 126.901812][ T5624] usb 3-1: config 0 descriptor?? [ 127.235309][ T6922] tipc: Started in network mode [ 127.247012][ T6922] tipc: Node identity c666c8e517f1, cluster identity 4711 [ 127.255837][ T6922] tipc: Enabled bearer , priority 0 [ 127.256439][ T6900] netlink: 4 bytes leftover after parsing attributes in process `syz.2.288'. [ 127.275717][ T6922] syzkaller0: entered promiscuous mode [ 127.283786][ T6922] syzkaller0: entered allmulticast mode [ 127.314572][ T6920] tipc: Resetting bearer [ 127.342177][ T6920] tipc: Disabling bearer [ 127.343342][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807bc7f800: rx timeout, send abort [ 127.365078][ T5624] gs_usb 3-1:0.0: Couldn't send data format (err=-71) [ 127.396938][ T5624] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -71 [ 127.448811][ T5624] usb 3-1: USB disconnect, device number 15 [ 127.763102][ T995] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 127.843441][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880587ca400: rx timeout, send abort [ 127.856392][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807bc7f800: abort rx timeout. Force session deactivation [ 127.923558][ T995] usb 4-1: Using ep0 maxpacket: 8 [ 127.933792][ T995] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 127.945324][ T995] usb 4-1: config 0 has no interface number 0 [ 127.951655][ T995] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 127.964958][ T995] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 127.979107][ T995] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 127.991742][ T995] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 128.007993][ T995] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 128.026863][ T995] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.036808][ T995] usb 4-1: config 0 descriptor?? [ 128.061128][ T995] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 128.223056][ T9] usb 6-1: new full-speed USB device number 15 using dummy_hcd [ 128.341865][ T29] audit: type=1326 audit(1781668570.605:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6923 comm="syz.3.296" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708f0ec code=0x7ffc0000 [ 128.351822][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880587ca400: abort rx timeout. Force session deactivation [ 128.367391][ T29] audit: type=1326 audit(1781668570.645:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6923 comm="syz.3.296" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708f0ec code=0x7ffc0000 [ 128.406808][ T29] audit: type=1326 audit(1781668570.675:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6923 comm="syz.3.296" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf708f0ec code=0x7ffc0000 [ 128.439403][ T9] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 128.450620][ T9] usb 6-1: config 0 has no interface number 0 [ 128.467070][ T9] usb 6-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 128.482253][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.506171][ T29] audit: type=1326 audit(1781668570.675:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6923 comm="syz.3.296" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708f0ec code=0x7ffc0000 [ 128.542311][ T29] audit: type=1326 audit(1781668570.675:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6923 comm="syz.3.296" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708f0ec code=0x7ffc0000 [ 128.562956][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 128.586006][ T9] usb 6-1: Product: syz [ 128.606650][ T29] audit: type=1326 audit(1781668570.705:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6923 comm="syz.3.296" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=358 compat=1 ip=0xf708f0ec code=0x7ffc0000 [ 128.633169][ T9] usb 6-1: Manufacturer: syz [ 128.638308][ T9] usb 6-1: SerialNumber: syz [ 128.638381][ T29] audit: type=1326 audit(1781668570.705:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6923 comm="syz.3.296" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708f0ec code=0x7ffc0000 [ 128.669968][ T29] audit: type=1326 audit(1781668570.705:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6923 comm="syz.3.296" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708f0ec code=0x7ffc0000 [ 128.695043][ T29] audit: type=1326 audit(1781668570.705:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6923 comm="syz.3.296" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=425 compat=1 ip=0xf708f0ec code=0x7ffc0000 [ 128.695934][ T9] usb 6-1: config 0 descriptor?? [ 128.728365][ T29] audit: type=1326 audit(1781668570.705:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6923 comm="syz.3.296" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf708f0ec code=0x7ffc0000 [ 128.871892][ T9] usb 6-1: selecting invalid altsetting 1 [ 128.879211][ T9] dvb_ttusb_budget: ttusb_init_controller: error [ 128.888315][ T9] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 128.904205][ T6947] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 128.910551][ T6947] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 128.918462][ T6950] netlink: 'syz.1.305': attribute type 10 has an invalid length. [ 128.945130][ T6947] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 128.960215][ T6950] team0: Device ipvlan0 failed to register rx_handler [ 128.970538][ T6947] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 128.991596][ T6947] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 129.031950][ T9] DVB: Unable to find symbol stv0299_attach() [ 129.042252][ T6947] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 129.068499][ T6947] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 129.100203][ T6947] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 129.128617][ T6947] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 129.141308][ T9] DVB: Unable to find symbol tda8083_attach() [ 129.147622][ T9] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 129.148403][ T6947] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 129.166554][ T6947] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 129.205518][ T6947] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 129.245079][ T6947] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 129.258663][ T6947] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 129.274245][ T6947] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 129.295685][ T6932] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.315422][ T6932] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.788793][ T6964] netlink: 'syz.1.308': attribute type 21 has an invalid length. [ 129.797341][ T6964] netlink: 128 bytes leftover after parsing attributes in process `syz.1.308'. [ 129.809112][ T6964] netlink: 'syz.1.308': attribute type 5 has an invalid length. [ 129.817915][ T6964] netlink: 'syz.1.308': attribute type 6 has an invalid length. [ 129.826192][ T6964] netlink: 3 bytes leftover after parsing attributes in process `syz.1.308'. [ 129.871566][ T5624] usb 6-1: USB disconnect, device number 15 [ 129.943475][ T5707] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 130.040680][ T6971] netlink: 844 bytes leftover after parsing attributes in process `syz.2.310'. [ 130.060444][ T6969] IPVS: set_ctl: invalid protocol: 59 172.30.0.2:20000 [ 130.103071][ T5707] usb 1-1: Using ep0 maxpacket: 8 [ 130.114594][ T5707] usb 1-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 130.128588][ T5707] usb 1-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 130.159328][ T5707] usb 1-1: Product: syz [ 130.171957][ T5707] usb 1-1: Manufacturer: syz [ 130.183298][ T5707] usb 1-1: SerialNumber: syz [ 130.198057][ T5707] usb 1-1: config 0 descriptor?? [ 130.210849][ T5707] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 130.225643][ T6974] netlink: 4 bytes leftover after parsing attributes in process `syz.2.311'. [ 130.363596][ T5633] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 130.506747][ T5624] usb 4-1: USB disconnect, device number 21 [ 130.537585][ T5624] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 130.600565][ T6983] xt_bpf: check failed: parse error [ 130.648730][ T5707] gspca_zc3xx: reg_r err -32 [ 130.654712][ T5707] gspca_zc3xx 1-1:0.0: probe with driver gspca_zc3xx failed with error -32 [ 130.665247][ T6962] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.676119][ T6990] vivid-002: disconnect [ 130.729071][ T6962] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.849106][ T6986] vivid-002: reconnect [ 130.962990][ T5633] Bluetooth: hci1: command 0x0c1a tx timeout [ 130.970683][ T5624] usb 1-1: USB disconnect, device number 14 [ 131.043048][ T5633] Bluetooth: hci3: command 0x0c1a tx timeout [ 131.123369][ T5633] Bluetooth: hci2: command 0x0c1a tx timeout [ 131.203146][ T5633] Bluetooth: hci4: command 0x0c1a tx timeout [ 131.283203][ T5633] Bluetooth: hci0: command 0x0c1a tx timeout [ 131.466392][ T7009] netlink: 8 bytes leftover after parsing attributes in process `syz.1.322'. [ 132.051140][ T7032] vivid-000: disconnect [ 132.416045][ T7035] netlink: 8 bytes leftover after parsing attributes in process `syz.2.330'. [ 132.651135][ T7011] vivid-000: reconnect [ 132.812308][ T7046] fuse: Bad value for 'fd' [ 133.043071][ T5633] Bluetooth: hci1: command 0x0c1a tx timeout [ 133.123552][ T5633] Bluetooth: hci3: command 0x0c1a tx timeout [ 133.152994][ T5633] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 133.203086][ T5633] Bluetooth: hci2: command 0x0c1a tx timeout [ 133.286248][ T1328] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.292822][ T5633] Bluetooth: hci4: command 0x0c1a tx timeout [ 133.299130][ T1328] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.363108][ T5633] Bluetooth: hci0: command 0x0c1a tx timeout [ 133.381180][ T7059] xt_bpf: check failed: parse error [ 133.624671][ T7068] vivid-002: disconnect [ 133.690973][ T7065] vivid-002: reconnect [ 133.853487][ T7071] vivid-001: disconnect [ 133.939610][ T7069] vivid-001: reconnect [ 134.076619][ T7077] netlink: 'syz.5.344': attribute type 10 has an invalid length. [ 134.087553][ T5707] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 134.149378][ T7077] ipvlan0: entered allmulticast mode [ 134.173028][ T7077] veth0_vlan: entered allmulticast mode [ 134.182690][ T7077] team0: Device ipvlan0 failed to register rx_handler [ 134.305653][ T5707] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 134.331945][ T5707] usb 1-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 134.371924][ T5707] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.390796][ T5707] usb 1-1: Product: syz [ 134.438845][ T5707] usb 1-1: Manufacturer: syz [ 134.457577][ T5707] usb 1-1: SerialNumber: syz [ 134.700477][ T7073] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.724657][ T7073] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 134.766131][ T7073] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.810586][ T7073] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 134.847418][ T5707] usb 1-1: incorrect wMaxPacketSize 0x0 for BADD profile [ 134.955310][ T5707] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 135.087570][ T5707] usb 1-1: USB disconnect, device number 15 [ 135.133762][ T5633] Bluetooth: hci1: command 0x0c1a tx timeout [ 135.154116][ T7097] netlink: 4 bytes leftover after parsing attributes in process `syz.1.350'. [ 135.196448][ T5808] udevd[5808]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 135.215162][ T5633] Bluetooth: hci3: command 0x0c1a tx timeout [ 135.284753][ T5633] Bluetooth: hci2: command 0x0c1a tx timeout [ 135.365361][ T5633] Bluetooth: hci4: command 0x0c1a tx timeout [ 135.377417][ T7100] netlink: 7064 bytes leftover after parsing attributes in process `syz.2.351'. [ 135.439377][ T7100] openvswitch: netlink: Missing key (keys=40, expected=80) [ 135.453561][ T5633] Bluetooth: hci0: command 0x0c1a tx timeout [ 135.796793][ T7102] Cannot find del_set index 3 as target [ 135.817512][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 135.817530][ T29] audit: type=1804 audit(1781668578.085:27): pid=7102 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.353" name="bus" dev="ramfs" ino=14888 res=1 errno=0 [ 135.912752][ T29] audit: type=1804 audit(1781668578.155:28): pid=7102 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.353" name="bus" dev="ramfs" ino=14888 res=1 errno=0 [ 135.961682][ T7113] netlink: 'syz.2.357': attribute type 10 has an invalid length. [ 135.996741][ T7113] ipvlan0: entered allmulticast mode [ 136.017429][ T7113] veth0_vlan: entered allmulticast mode [ 136.046216][ T7113] team0: Device ipvlan0 failed to register rx_handler [ 136.211957][ T7129] FAULT_INJECTION: forcing a failure. [ 136.211957][ T7129] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 136.240840][ T7129] CPU: 1 UID: 0 PID: 7129 Comm: syz.5.360 Not tainted syzkaller #0 PREEMPT(full) [ 136.240870][ T7129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 136.240880][ T7129] Call Trace: [ 136.240887][ T7129] [ 136.240894][ T7129] dump_stack_lvl+0xe8/0x150 [ 136.240919][ T7129] should_fail_ex+0x40c/0x560 [ 136.240941][ T7129] _copy_to_user+0x31/0xb0 [ 136.240965][ T7129] video_usercopy+0xdf4/0x1430 [ 136.240988][ T7129] ? __pfx___video_do_ioctl+0x10/0x10 [ 136.241019][ T7129] ? __pfx_video_usercopy+0x10/0x10 [ 136.241044][ T7129] ? lock_release+0x4b/0x3c0 [ 136.241070][ T7129] v4l2_ioctl+0x18d/0x1e0 [ 136.241091][ T7129] v4l2_compat_ioctl32+0x1c4/0x270 [ 136.241116][ T7129] __ia32_compat_sys_ioctl+0x5ea/0x950 [ 136.241142][ T7129] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 136.241163][ T7129] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 136.241183][ T7129] ? __fget_files+0x3a2/0x420 [ 136.241204][ T7129] ? fput+0xa0/0xd0 [ 136.241219][ T7129] ? ksys_write+0x242/0x270 [ 136.241244][ T7129] ? rcu_is_watching+0x15/0xb0 [ 136.241263][ T7129] __do_fast_syscall_32+0x23e/0x6f0 [ 136.241285][ T7129] ? do_fast_syscall_32+0x33/0x70 [ 136.241308][ T7129] ? asm_int80_emulation+0x1a/0x20 [ 136.241324][ T7129] ? do_int80_emulation+0x29f/0x550 [ 136.241345][ T7129] ? trace_irq_disable+0x3b/0x140 [ 136.241367][ T7129] do_fast_syscall_32+0x33/0x70 [ 136.241389][ T7129] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 136.241407][ T7129] RIP: 0023:0xf7fc30ec [ 136.241423][ T7129] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 136.241436][ T7129] RSP: 002b:00000000f548650c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 136.241455][ T7129] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0405602 [ 136.241467][ T7129] RDX: 00000000800000c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 136.241478][ T7129] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 136.241488][ T7129] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 136.241497][ T7129] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 136.241514][ T7129] [ 136.461052][ T9] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 136.511689][ T7128] netlink: 4 bytes leftover after parsing attributes in process `syz.2.361'. [ 136.531925][ T7129] netlink: 20 bytes leftover after parsing attributes in process `syz.5.360'. [ 136.793100][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 136.812016][ T9] usb 4-1: config 8 has an invalid interface number: 220 but max is 1 [ 136.820922][ T9] usb 4-1: config 8 has no interface number 0 [ 136.833294][ T9] usb 4-1: config 8 interface 220 has no altsetting 0 [ 136.852344][ T9] usb 4-1: config 8 interface 1 has no altsetting 0 [ 136.880573][ T9] usb 4-1: New USB device found, idVendor=04e2, idProduct=1401, bcdDevice=34.ae [ 136.891039][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.902970][ T9] usb 4-1: Product: syz [ 136.910950][ T9] usb 4-1: Manufacturer: syz [ 136.931024][ T9] usb 4-1: SerialNumber: syz [ 137.348770][ T7152] netlink: 24 bytes leftover after parsing attributes in process `syz.2.366'. [ 137.603001][ T808] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 137.766139][ T808] usb 2-1: Using ep0 maxpacket: 8 [ 137.777602][ T808] usb 2-1: config 0 has no interfaces? [ 137.783331][ T808] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 137.811973][ T808] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.860236][ T808] usb 2-1: config 0 descriptor?? [ 138.089483][ T7151] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.119239][ T7151] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.137031][ T7168] netlink: 4 bytes leftover after parsing attributes in process `syz.0.370'. [ 138.190353][ T995] usb 2-1: USB disconnect, device number 18 [ 138.337096][ T5633] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 138.412615][ C1] vcan0: j1939_tp_rxtimer: 0xffff888034d72c00: rx timeout, send abort [ 138.421172][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888034d72c00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 138.466475][ T9] xr_serial 4-1:8.220: xr_serial converter detected [ 138.483911][ T9] xr_serial ttyUSB0: Failed to set reg 0x81: -71 [ 138.497598][ T9] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 138.521582][ T9] usb 4-1: USB disconnect, device number 22 [ 138.554333][ T7179] xt_bpf: check failed: parse error [ 138.560781][ T9] xr_serial 4-1:8.220: device disconnected [ 138.893008][ T808] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 139.047125][ T808] usb 1-1: too many configurations: 217, using maximum allowed: 8 [ 139.077587][ T808] usb 1-1: config index 0 descriptor too short (expected 52555, got 72) [ 139.114816][ T995] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 139.156640][ T808] usb 1-1: config index 1 descriptor too short (expected 52555, got 72) [ 139.210963][ T808] usb 1-1: config index 2 descriptor too short (expected 52555, got 72) [ 139.236886][ T808] usb 1-1: config index 3 descriptor too short (expected 52555, got 72) [ 139.247867][ T808] usb 1-1: config index 4 descriptor too short (expected 52555, got 72) [ 139.258907][ T808] usb 1-1: config index 5 descriptor too short (expected 52555, got 72) [ 139.293673][ T808] usb 1-1: config index 6 descriptor too short (expected 52555, got 72) [ 139.310702][ T995] usb 2-1: Using ep0 maxpacket: 16 [ 139.323504][ T995] usb 2-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 139.342073][ T808] usb 1-1: config index 7 descriptor too short (expected 52555, got 72) [ 139.359507][ T995] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.395780][ T995] usb 2-1: config 0 descriptor?? [ 139.416360][ T995] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 139.438556][ T808] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 139.455859][ T808] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.474938][ T808] usb 1-1: Product: syz [ 139.487607][ T808] usb 1-1: Manufacturer: syz [ 139.515647][ T808] usb 1-1: SerialNumber: syz [ 139.544017][ T808] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 139.632019][ T5624] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 140.123290][ T995] gspca_sonixj: reg_r err -110 [ 140.133467][ T995] sonixj 2-1:0.0: probe with driver sonixj failed with error -110 [ 140.243116][ T808] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 140.375549][ T7199] netlink: 4 bytes leftover after parsing attributes in process `syz.2.382'. [ 140.398040][ T808] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 140.411653][ T808] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.434399][ T808] usb 4-1: config 0 descriptor?? [ 140.513242][ T995] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 140.653386][ T995] usb 6-1: device descriptor read/64, error -71 [ 140.659547][ T7194] batman_adv: batadv0: Adding interface: macvtap1 [ 140.668341][ T7194] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 140.695530][ T7194] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 140.724879][ T5624] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 140.732534][ T5624] ath9k_htc: Failed to initialize the device [ 140.745505][ T7194] batman_adv: batadv0: Removing interface: macvtap1 [ 140.775504][ T5624] usb 1-1: ath9k_htc: USB layer deinitialized [ 140.811863][ T808] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 140.827695][ T808] [drm:udl_init] *ERROR* Selecting channel failed [ 140.856106][ T808] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2 [ 140.873135][ T808] [drm] Initialized udl on minor 2 [ 140.887394][ T808] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 140.903023][ T995] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 140.903669][ T808] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 140.920540][ T5707] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 140.933923][ T808] usb 4-1: USB disconnect, device number 23 [ 140.941686][ T5707] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 141.065788][ T995] usb 6-1: device descriptor read/64, error -71 [ 141.186811][ T995] usb usb6-port1: attempt power cycle [ 141.533431][ T995] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 141.554147][ T995] usb 6-1: device descriptor read/8, error -71 [ 141.608921][ T5624] usb 1-1: USB disconnect, device number 16 [ 141.753095][ T9] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 141.793000][ T995] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 141.813991][ T995] usb 6-1: device descriptor read/8, error -71 [ 141.888348][ T5624] usb 2-1: USB disconnect, device number 19 [ 141.918171][ T9] usb 4-1: config 0 has no interfaces? [ 141.928074][ T995] usb usb6-port1: unable to enumerate USB device [ 141.946095][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 141.958067][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 141.970092][ T9] usb 4-1: Product: syz [ 141.975583][ T9] usb 4-1: Manufacturer: syz [ 141.982099][ T9] usb 4-1: SerialNumber: syz [ 141.991607][ T9] usb 4-1: config 0 descriptor?? [ 142.064354][ T7220] netlink: 12 bytes leftover after parsing attributes in process `syz.0.389'. [ 142.117114][ T7222] ptrace attach of "ci-upstream-kasan-gce-386/syz-executor exec"[5641] was attempted by "ci-upstream-kasan-gce-386/syz-executor exec"[7222] [ 142.372981][ T9] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 142.526298][ T9] usb 1-1: config 0 has an invalid interface number: 117 but max is 0 [ 142.535094][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 142.545763][ T9] usb 1-1: config 0 has no interface number 0 [ 142.552091][ T9] usb 1-1: config 0 interface 117 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 142.566088][ T9] usb 1-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 142.576568][ T9] usb 1-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 142.592681][ T9] usb 1-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 142.602583][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.611029][ T9] usb 1-1: Product: syz [ 142.615661][ T9] usb 1-1: Manufacturer: syz [ 142.620408][ T9] usb 1-1: SerialNumber: syz [ 142.627510][ T9] usb 1-1: config 0 descriptor?? [ 142.814328][ T5624] usb 4-1: USB disconnect, device number 24 [ 142.921506][ T9] usbtouchscreen 1-1:0.117: probe with driver usbtouchscreen failed with error -71 [ 142.936824][ T9] usb 1-1: USB disconnect, device number 17 [ 143.321192][ T7232] vivid-001: disconnect [ 143.428509][ T7234] netlink: 4 bytes leftover after parsing attributes in process `syz.3.393'. [ 143.508442][ T7230] vivid-001: reconnect [ 143.746811][ T7239] netlink: 4 bytes leftover after parsing attributes in process `syz.5.396'. [ 143.757200][ T7240] vivid-001: disconnect [ 143.997582][ T7235] vivid-001: reconnect [ 144.002302][ T7246] netlink: 'syz.3.400': attribute type 10 has an invalid length. [ 144.021463][ T7246] team0: Device ipvlan0 failed to register rx_handler [ 144.040968][ T7249] netlink: 'syz.1.397': attribute type 10 has an invalid length. [ 144.061995][ T7249] team0: Device ipvlan0 failed to register rx_handler [ 144.292373][ T7264] netlink: 4 bytes leftover after parsing attributes in process `syz.5.406'. [ 144.374496][ T5707] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 144.534961][ T5707] usb 3-1: unable to get BOS descriptor or descriptor too short [ 144.544879][ T5707] usb 3-1: config 1 has an invalid descriptor of length 115, skipping remainder of the config [ 144.553041][ T5680] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 144.557432][ T5707] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 144.577713][ T5707] usb 3-1: New USB device found, idVendor=2a39, idProduct=3fb0, bcdDevice= 0.40 [ 144.587749][ T5707] usb 3-1: New USB device strings: Mfr=1, Product=66, SerialNumber=3 [ 144.596601][ T5707] usb 3-1: Product: syz [ 144.601561][ T5707] usb 3-1: Manufacturer: syz [ 144.607962][ T5707] usb 3-1: SerialNumber: syz [ 144.633402][ T808] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 144.713192][ T5680] usb 1-1: device descriptor read/64, error -71 [ 144.783103][ T808] usb 2-1: device descriptor read/64, error -71 [ 144.953693][ T5680] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 145.046525][ T808] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 145.093063][ T5680] usb 1-1: device descriptor read/64, error -71 [ 145.184737][ T808] usb 2-1: device descriptor read/64, error -71 [ 145.203474][ T5680] usb usb1-port1: attempt power cycle [ 145.293948][ T808] usb usb2-port1: attempt power cycle [ 145.553015][ T5680] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 145.574608][ T5680] usb 1-1: device descriptor read/8, error -71 [ 145.644216][ T808] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 145.675781][ T808] usb 2-1: device descriptor read/8, error -71 [ 145.753477][ T24] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 145.813280][ T5680] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 145.833804][ T5680] usb 1-1: device descriptor read/8, error -71 [ 145.917938][ T24] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 145.927754][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.935909][ T808] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 145.943372][ T5680] usb usb1-port1: unable to enumerate USB device [ 145.943662][ T24] usb 4-1: Product: syz [ 145.954360][ T24] usb 4-1: Manufacturer: syz [ 145.959639][ T24] usb 4-1: SerialNumber: syz [ 145.966053][ T24] usb 4-1: config 0 descriptor?? [ 145.983764][ T808] usb 2-1: device descriptor read/8, error -71 [ 146.093460][ T808] usb usb2-port1: unable to enumerate USB device [ 146.389025][ T24] usb 4-1: Firmware version (0.0) predates our first public release. [ 146.397348][ T24] usb 4-1: Please update to version 0.2 or newer [ 146.626620][ T24] usb 4-1: USB disconnect, device number 25 [ 147.220961][ T5707] usb 3-1: USB disconnect, device number 16 [ 147.396800][ T7306] netlink: 8 bytes leftover after parsing attributes in process `syz.0.417'. [ 147.424412][ T7306] netlink: 12 bytes leftover after parsing attributes in process `syz.0.417'. [ 147.511981][ T5808] udevd[5808]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 147.715090][ T7326] netlink: 4 bytes leftover after parsing attributes in process `syz.5.425'. [ 147.724859][ T5633] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 147.926291][ T7338] xt_bpf: check failed: parse error [ 148.026749][ T7332] blkio.reset_stats is deprecated [ 148.103576][ T5680] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 148.265399][ T5680] usb 1-1: unable to get BOS descriptor or descriptor too short [ 148.279521][ T5680] usb 1-1: config 1 has an invalid descriptor of length 115, skipping remainder of the config [ 148.296517][ T5680] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 148.320361][ T5680] usb 1-1: New USB device found, idVendor=2a39, idProduct=3fb0, bcdDevice= 0.40 [ 148.334428][ T5680] usb 1-1: New USB device strings: Mfr=1, Product=66, SerialNumber=3 [ 148.360049][ T5680] usb 1-1: Product: syz [ 148.382508][ T5680] usb 1-1: Manufacturer: syz [ 148.401392][ T5680] usb 1-1: SerialNumber: syz [ 148.706453][ T5707] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 148.907387][ T5707] usb 2-1: config 0 has an invalid interface number: 34 but max is 0 [ 148.939123][ T5707] usb 2-1: config 0 has no interface number 0 [ 148.955592][ T5707] usb 2-1: too many endpoints for config 0 interface 34 altsetting 127: 33, using maximum allowed: 30 [ 148.991934][ T5707] usb 2-1: config 0 interface 34 altsetting 127 has 0 endpoint descriptors, different from the interface descriptor's value: 33 [ 149.043138][ T5707] usb 2-1: config 0 interface 34 has no altsetting 0 [ 149.056316][ T5707] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 149.071786][ T5707] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.099798][ T5707] usb 2-1: config 0 descriptor?? [ 149.336225][ T5707] usb 2-1: string descriptor 0 read error: -71 [ 149.369404][ T5707] cp210x 2-1:0.34: cp210x converter detected [ 149.400932][ T5707] cp210x 2-1:0.34: failed to get vendor val 0x370b size 1: -71 [ 149.466437][ T5707] cp210x 2-1:0.34: querying part number failed [ 149.500348][ T5707] usb 2-1: cp210x converter now attached to ttyUSB0 [ 149.530089][ T5707] usb 2-1: USB disconnect, device number 24 [ 149.573690][ T5707] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 149.604259][ T5707] cp210x 2-1:0.34: device disconnected [ 149.983272][ T7365] netlink: 12 bytes leftover after parsing attributes in process `syz.5.433'. [ 150.044846][ T7368] FAULT_INJECTION: forcing a failure. [ 150.044846][ T7368] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 150.115245][ T7368] CPU: 1 UID: 0 PID: 7368 Comm: syz.3.434 Not tainted syzkaller #0 PREEMPT(full) [ 150.115278][ T7368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 150.115290][ T7368] Call Trace: [ 150.115300][ T7368] [ 150.115308][ T7368] dump_stack_lvl+0xe8/0x150 [ 150.115333][ T7368] should_fail_ex+0x40c/0x560 [ 150.115354][ T7368] _copy_from_user+0x2d/0xb0 [ 150.115377][ T7368] __sys_bind+0x1c6/0x410 [ 150.115389][ T7368] ? __pfx___sys_bind+0x10/0x10 [ 150.115404][ T7368] __ia32_sys_bind+0x7a/0x90 [ 150.115415][ T7368] __do_fast_syscall_32+0x23e/0x6f0 [ 150.115440][ T7368] ? do_fast_syscall_32+0x33/0x70 [ 150.115462][ T7368] ? asm_int80_emulation+0x1a/0x20 [ 150.115478][ T7368] ? do_int80_emulation+0x29f/0x550 [ 150.115502][ T7368] do_fast_syscall_32+0x33/0x70 [ 150.115524][ T7368] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 150.115538][ T7368] RIP: 0023:0xf708f0ec [ 150.115549][ T7368] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 150.115559][ T7368] RSP: 002b:00000000f547d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000169 [ 150.115573][ T7368] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000080000380 [ 150.115582][ T7368] RDX: 0000000000000018 RSI: 0000000000000000 RDI: 0000000000000000 [ 150.115597][ T7368] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 150.115608][ T7368] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 150.115618][ T7368] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 150.115635][ T7368] [ 150.398104][ T7373] netlink: 8 bytes leftover after parsing attributes in process `syz.1.436'. [ 150.419841][ T7373] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 150.437220][ T7375] netlink: 4 bytes leftover after parsing attributes in process `syz.3.438'. [ 150.708331][ T7383] netlink: 'syz.1.441': attribute type 10 has an invalid length. [ 150.719242][ T7383] team0: Device ipvlan0 failed to register rx_handler [ 150.818563][ T7385] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 150.823043][ T995] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 151.003320][ T995] usb 4-1: Using ep0 maxpacket: 16 [ 151.026504][ T995] usb 4-1: config 252 has an invalid interface number: 15 but max is 0 [ 151.043349][ T995] usb 4-1: config 252 has no interface number 0 [ 151.070012][ T995] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=2b.29 [ 151.104251][ T995] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.118859][ T5680] usb 1-1: USB disconnect, device number 22 [ 151.139878][ T995] usb 4-1: Product: syz [ 151.155130][ T995] usb 4-1: Manufacturer: syz [ 151.164269][ T995] usb 4-1: SerialNumber: syz [ 151.199320][ T995] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 151.436959][ T133] usb 4-1: Failed to submit usb control message: -71 [ 151.462066][ T5680] usb 4-1: USB disconnect, device number 26 [ 151.508474][ T133] usb 4-1: unable to send the bmi data to the device: -71 [ 151.516104][ T133] usb 4-1: unable to get target info from device [ 151.522531][ T133] usb 4-1: could not get target info (-71) [ 151.527319][ T7410] vivid-001: disconnect [ 151.528873][ T133] usb 4-1: could not probe fw (-71) [ 151.698665][ T7406] vivid-001: reconnect [ 151.800967][ T7413] netlink: 40 bytes leftover after parsing attributes in process `syz.1.450'. [ 151.867704][ T7418] netlink: 'syz.1.450': attribute type 21 has an invalid length. [ 151.886118][ T7418] netlink: 4 bytes leftover after parsing attributes in process `syz.1.450'. [ 152.224020][ T7435] netlink: 44 bytes leftover after parsing attributes in process `syz.3.457'. [ 152.233079][ T995] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 152.353049][ T5707] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 152.393666][ T995] usb 1-1: Using ep0 maxpacket: 16 [ 152.400201][ T995] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 152.409934][ T995] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 152.420146][ T995] usb 1-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 152.430060][ T995] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 152.440049][ T995] usb 1-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 152.449997][ T995] usb 1-1: config 1 interface 0 has no altsetting 0 [ 152.456816][ T5680] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 152.464786][ T995] usb 1-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 152.473969][ T995] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.489742][ T995] ums-sddr09 1-1:1.0: USB Mass Storage device detected [ 152.524794][ T5707] usb 6-1: unable to get BOS descriptor or descriptor too short [ 152.534269][ T5707] usb 6-1: config 1 has an invalid descriptor of length 115, skipping remainder of the config [ 152.545276][ T5707] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 152.556076][ T5707] usb 6-1: New USB device found, idVendor=2a39, idProduct=3fb0, bcdDevice= 0.40 [ 152.565515][ T5707] usb 6-1: New USB device strings: Mfr=1, Product=66, SerialNumber=3 [ 152.574134][ T5707] usb 6-1: Product: syz [ 152.578524][ T5707] usb 6-1: Manufacturer: syz [ 152.583197][ T5707] usb 6-1: SerialNumber: syz [ 152.623036][ T5680] usb 3-1: Using ep0 maxpacket: 16 [ 152.629993][ T5680] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 152.645735][ T5680] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 152.657945][ T5680] usb 3-1: config 0 has no interface number 0 [ 152.668078][ T5680] usb 3-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 152.682857][ T5680] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.697259][ T5680] usb 3-1: Product: syz [ 152.701560][ T995] scsi host1: usb-storage 1-1:1.0 [ 152.715693][ T5680] usb 3-1: Manufacturer: syz [ 152.724819][ T5680] usb 3-1: SerialNumber: syz [ 152.740181][ T5680] usb 3-1: config 0 descriptor?? [ 152.749233][ T7441] binder: BINDER_SET_CONTEXT_MGR already set [ 152.749670][ T5680] uvcvideo 3-1:0.105: probe with driver uvcvideo failed with error -22 [ 152.764735][ T7441] binder: 7440:7441 ioctl 4018620d 80004a80 returned -16 [ 153.024365][ T7443] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.054623][ T7443] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.125675][ T7443] usb usb8: usbfs: process 7443 (syz.2.458) did not claim interface 0 before use [ 153.765155][ T12] scsi 1:0:0:0: Direct-Access Sandisk ImageMate SDDR09 0177 PQ: 0 ANSI: 0 [ 153.782421][ T12] sd 1:0:0:0: Attached scsi generic sg1 type 0 [ 153.860979][ T5633] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 153.982885][ T7439] sddr09: could not read card info [ 153.988185][ T808] usb 1-1: USB disconnect, device number 23 [ 154.016853][ T7457] xt_bpf: check failed: parse error [ 154.044159][ T35] sd 1:0:0:0: [sdb] 0 512-byte logical blocks: (0 B/0 B) [ 154.064500][ T35] sd 1:0:0:0: [sdb] 0-byte physical blocks [ 154.078385][ T35] sd 1:0:0:0: [sdb] Write Protect is off [ 154.084707][ T35] sd 1:0:0:0: [sdb] Asking for cache data failed [ 154.092593][ T35] sd 1:0:0:0: [sdb] Assuming drive cache: write through [ 154.122881][ T35] sd 1:0:0:0: [sdb] Attached SCSI removable disk [ 154.276369][ T6994] udevd[6994]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory [ 154.350612][ T7461] netlink: 4 bytes leftover after parsing attributes in process `syz.3.463'. [ 154.406219][ T6994] udevd[6994]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory [ 154.466861][ T7463] netlink: 4 bytes leftover after parsing attributes in process `syz.3.464'. [ 154.792982][ T5680] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 154.853036][ T24] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 154.959283][ T5680] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 154.974606][ T5680] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 154.993931][ T5680] usb 4-1: config 220 has no interface number 2 [ 155.000323][ T5680] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 155.014333][ T5680] usb 4-1: config 220 interface 0 has no altsetting 0 [ 155.021159][ T5680] usb 4-1: config 220 interface 76 has no altsetting 0 [ 155.028183][ T5680] usb 4-1: config 220 interface 1 has no altsetting 0 [ 155.038761][ T5680] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 155.048905][ T5680] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.054644][ T24] usb 1-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 155.058862][ T5680] usb 4-1: Product: syz [ 155.067135][ T24] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 155.071973][ T5680] usb 4-1: Manufacturer: syz [ 155.083434][ T24] usb 1-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 155.085020][ T5680] usb 4-1: SerialNumber: syz [ 155.103088][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.111505][ T24] usb 1-1: Product: syz [ 155.127895][ T24] usb 1-1: Manufacturer: syz [ 155.137520][ T24] usb 1-1: SerialNumber: syz [ 155.155376][ T7471] kAFS: unable to lookup cell 'ÿ' [ 155.169157][ T24] usb 1-1: config 0 descriptor?? [ 155.189913][ T24] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 155.224262][ T7471] kAFS: unable to lookup cell '(,c¾Ì' [ 155.247789][ T10] usb 3-1: USB disconnect, device number 17 [ 155.308556][ T7473] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 155.340021][ T5680] usb 4-1: selecting invalid altsetting 0 [ 155.358089][ T5680] uvcvideo 4-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 155.368920][ T5680] uvcvideo 4-1:220.0: No valid video chain found. [ 155.379659][ T7473] netlink: 16 bytes leftover after parsing attributes in process `syz.5.468'. [ 155.394333][ T5680] usb 4-1: selecting invalid altsetting 0 [ 155.424764][ T5680] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 155.466979][ T5680] usb 4-1: USB disconnect, device number 27 [ 155.532180][ T5707] usb 6-1: USB disconnect, device number 20 [ 155.585480][ T5808] udevd[5808]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 156.310358][ T7492] FAULT_INJECTION: forcing a failure. [ 156.310358][ T7492] name failslab, interval 1, probability 0, space 0, times 0 [ 156.358563][ T7492] CPU: 1 UID: 0 PID: 7492 Comm: syz.1.472 Not tainted syzkaller #0 PREEMPT(full) [ 156.358591][ T7492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 156.358602][ T7492] Call Trace: [ 156.358609][ T7492] [ 156.358616][ T7492] dump_stack_lvl+0xe8/0x150 [ 156.358641][ T7492] should_fail_ex+0x40c/0x560 [ 156.358661][ T7492] should_failslab+0xa8/0x100 [ 156.358677][ T7492] __kmalloc_cache_noprof+0x88/0x660 [ 156.358691][ T7492] ? do_raw_spin_lock+0x12b/0x2f0 [ 156.358704][ T7492] ? __io_queue_proc+0x23a/0x4c0 [ 156.358722][ T7492] ? rcu_is_watching+0x15/0xb0 [ 156.358733][ T7492] __io_queue_proc+0x23a/0x4c0 [ 156.358749][ T7492] ? __pfx_io_async_queue_proc+0x10/0x10 [ 156.358763][ T7492] snd_seq_pool_poll_wait+0x64/0x150 [ 156.358777][ T7492] snd_seq_poll+0x14c/0x1d0 [ 156.358787][ T7492] ? __pfx_snd_seq_poll+0x10/0x10 [ 156.358797][ T7492] __io_arm_poll_handler+0x350/0xc00 [ 156.358814][ T7492] io_arm_apoll+0x571/0x910 [ 156.358829][ T7492] ? __pfx_io_arm_apoll+0x10/0x10 [ 156.358843][ T7492] ? __pfx_io_async_queue_proc+0x10/0x10 [ 156.358858][ T7492] ? io_issue_sqe+0x3f5/0x1000 [ 156.358870][ T7492] ? io_arm_poll_handler+0x1d4/0x2a0 [ 156.358883][ T7492] ? rcu_is_watching+0x15/0xb0 [ 156.358894][ T7492] io_queue_async+0x18b/0x2e0 [ 156.358909][ T7492] ? __pfx_io_req_task_submit+0x10/0x10 [ 156.358922][ T7492] tctx_task_work_run+0x71b/0xa60 [ 156.358939][ T7492] ? __pfx_tctx_task_work_run+0x10/0x10 [ 156.358955][ T7492] ? rcu_is_watching+0x15/0xb0 [ 156.358966][ T7492] tctx_task_work+0x54/0x80 [ 156.358981][ T7492] task_work_run+0x1d9/0x270 [ 156.358993][ T7492] ? __pfx_task_work_run+0x10/0x10 [ 156.359003][ T7492] ? do_raw_spin_lock+0x12b/0x2f0 [ 156.359015][ T7492] ? rcu_is_watching+0x15/0xb0 [ 156.359030][ T7492] ? io_run_task_work+0x397/0x560 [ 156.359039][ T7492] io_run_task_work+0x3e4/0x560 [ 156.359049][ T7492] ? trace_irq_enable+0x3b/0x140 [ 156.359063][ T7492] ? __pfx_io_run_task_work+0x10/0x10 [ 156.359072][ T7492] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 156.359085][ T7492] ? try_to_wake_up+0x8c5/0x14d0 [ 156.359099][ T7492] io_cqring_wait+0x1eb/0x2050 [ 156.359116][ T7492] ? __pfx_task_work_add+0x10/0x10 [ 156.359133][ T7492] ? __io_issue_sqe+0x207/0x4d0 [ 156.359153][ T7492] ? io_arm_poll_handler+0x1d4/0x2a0 [ 156.359178][ T7492] ? rcu_is_watching+0x15/0xb0 [ 156.359195][ T7492] ? __pfx_io_cqring_wait+0x10/0x10 [ 156.359222][ T7492] ? io_submit_sqes+0x1d56/0x2310 [ 156.359243][ T7492] ? __mutex_unlock_slowpath+0x724/0x8e0 [ 156.359258][ T7492] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 156.359274][ T7492] __se_sys_io_uring_enter+0x176c/0x1bb0 [ 156.359289][ T7492] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 156.359303][ T7492] ? __fget_files+0x3a2/0x420 [ 156.359332][ T7492] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 156.359346][ T7492] ? fput+0xa0/0xd0 [ 156.359358][ T7492] ? rcu_is_watching+0x15/0xb0 [ 156.359368][ T7492] ? __ia32_sys_io_uring_enter+0x21/0xf0 [ 156.359382][ T7492] __do_fast_syscall_32+0x23e/0x6f0 [ 156.359396][ T7492] ? do_fast_syscall_32+0x33/0x70 [ 156.359410][ T7492] ? asm_int80_emulation+0x1a/0x20 [ 156.359420][ T7492] ? do_int80_emulation+0x29f/0x550 [ 156.359434][ T7492] ? trace_irq_disable+0x3b/0x140 [ 156.359448][ T7492] do_fast_syscall_32+0x33/0x70 [ 156.359461][ T7492] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 156.359474][ T7492] RIP: 0023:0xf705f0ec [ 156.359486][ T7492] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 156.359496][ T7492] RSP: 002b:00000000f544d50c EFLAGS: 00000206 ORIG_RAX: 00000000000001aa [ 156.359510][ T7492] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000000001 [ 156.359518][ T7492] RDX: 0000000000000001 RSI: 0000000000000001 RDI: 0000000000000000 [ 156.359525][ T7492] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 156.359531][ T7492] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 156.359538][ T7492] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 156.359548][ T7492] [ 156.816138][ T5633] Bluetooth: hci3: unexpected event for opcode 0x2088 [ 156.989975][ T7501] netlink: 4 bytes leftover after parsing attributes in process `syz.1.474'. [ 157.224969][ T5633] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 157.392671][ T7507] xt_bpf: check failed: parse error [ 157.503373][ T5680] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 157.620270][ T5707] usb 1-1: USB disconnect, device number 24 [ 157.653020][ T5680] usb 3-1: Using ep0 maxpacket: 16 [ 157.678829][ T5680] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 157.705349][ T5680] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 157.723083][ T5624] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 157.735845][ T5680] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 157.785668][ T5680] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 157.810399][ T5680] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.829918][ T5680] usb 3-1: config 0 descriptor?? [ 157.935015][ T5624] usb 6-1: unable to get BOS descriptor or descriptor too short [ 157.956422][ T5624] usb 6-1: config 1 has an invalid descriptor of length 115, skipping remainder of the config [ 157.973259][ T5624] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 157.988553][ T5624] usb 6-1: New USB device found, idVendor=2a39, idProduct=3fb0, bcdDevice= 0.40 [ 158.000831][ T5624] usb 6-1: New USB device strings: Mfr=1, Product=66, SerialNumber=3 [ 158.009709][ T5624] usb 6-1: Product: syz [ 158.019853][ T5624] usb 6-1: Manufacturer: syz [ 158.034936][ T5624] usb 6-1: SerialNumber: syz [ 158.042976][ T24] usb 4-1: new low-speed USB device number 28 using dummy_hcd [ 158.122991][ T5707] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 158.215633][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 158.231241][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 64, setting to 8 [ 158.249325][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 158.270945][ T5680] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 158.282974][ T24] usb 4-1: New USB device found, idVendor=5543, idProduct=0004, bcdDevice= 0.00 [ 158.283015][ T5680] microsoft 0003:045E:07DA.0005: ignoring exceeding usage max [ 158.292202][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.309391][ T5707] usb 1-1: Using ep0 maxpacket: 16 [ 158.322225][ T5707] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 158.338221][ T5707] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 158.350832][ T24] usb 4-1: config 0 descriptor?? [ 158.356565][ T7518] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 158.367943][ T5680] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0005/input/input11 [ 158.376254][ T5707] usb 1-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 158.399529][ T5707] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 158.409975][ T5707] usb 1-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 158.420483][ T5707] usb 1-1: config 1 interface 0 has no altsetting 0 [ 158.428433][ T5707] usb 1-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 158.439023][ T5707] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.454371][ T5707] ums-sddr09 1-1:1.0: USB Mass Storage device detected [ 158.506555][ T5680] microsoft 0003:045E:07DA.0005: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 158.657097][ T5707] scsi host1: usb-storage 1-1:1.0 [ 158.783421][ T7518] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.792218][ T7518] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.803050][ T5687] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 158.811646][ T24] usbhid 4-1:0.0: can't add hid device: -71 [ 158.818508][ T24] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 158.828612][ T24] usb 4-1: USB disconnect, device number 28 [ 158.973136][ T5687] usb 2-1: Using ep0 maxpacket: 8 [ 158.981622][ T5687] usb 2-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 158.990880][ T5687] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.998956][ T5687] usb 2-1: Product: syz [ 159.004898][ T5687] usb 2-1: Manufacturer: syz [ 159.005818][ T5680] usb 3-1: USB disconnect, device number 18 [ 159.015954][ T5687] usb 2-1: SerialNumber: syz [ 159.076462][ T7527] netlink: 'syz.2.482': attribute type 10 has an invalid length. [ 159.086384][ T7527] team0: Device ipvlan0 failed to register rx_handler [ 159.382650][ T7534] IPVS: Error connecting to the multicast addr [ 159.507787][ T29] audit: type=1326 audit(1781668601.775:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7522 comm="syz.1.481" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705f0ec code=0x7ffc0000 [ 159.534887][ T29] audit: type=1326 audit(1781668601.805:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7522 comm="syz.1.481" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf705f0ec code=0x7ffc0000 [ 159.566666][ T29] audit: type=1326 audit(1781668601.805:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7522 comm="syz.1.481" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705f0ec code=0x7ffc0000 [ 159.594331][ T29] audit: type=1326 audit(1781668601.805:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7522 comm="syz.1.481" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705f0ec code=0x7ffc0000 [ 159.622342][ T29] audit: type=1326 audit(1781668601.835:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7522 comm="syz.1.481" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf705f0ec code=0x7ffc0000 [ 159.648132][ T5680] usb 4-1: new full-speed USB device number 29 using dummy_hcd [ 159.660804][ T29] audit: type=1326 audit(1781668601.835:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7522 comm="syz.1.481" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705f0ec code=0x7ffc0000 [ 159.687803][ T29] audit: type=1326 audit(1781668601.865:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7522 comm="syz.1.481" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705f0ec code=0x7ffc0000 [ 159.714997][ T29] audit: type=1326 audit(1781668601.865:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7522 comm="syz.1.481" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=358 compat=1 ip=0xf705f0ec code=0x7ffc0000 [ 159.740885][ T133] scsi 1:0:0:0: Direct-Access Sandisk ImageMate SDDR09 0177 PQ: 0 ANSI: 0 [ 159.751782][ T29] audit: type=1326 audit(1781668601.865:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7522 comm="syz.1.481" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705f0ec code=0x7ffc0000 [ 159.756546][ T133] scsi 1:0:0:0: Attached scsi generic sg1 type 0 [ 159.807038][ T29] audit: type=1326 audit(1781668601.895:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7522 comm="syz.1.481" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705f0ec code=0x7ffc0000 [ 159.837398][ T5680] usb 4-1: config 1 has too many interfaces: 235, using maximum allowed: 32 [ 159.847521][ T5680] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 159.859460][ T5680] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 235 [ 159.871257][ T5680] usb 4-1: config 1 has no interface number 1 [ 159.877982][ T5680] usb 4-1: config 1 interface 105 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 159.893806][ T5680] usb 4-1: config 1 interface 105 has no altsetting 0 [ 159.905655][ T5680] usb 4-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 159.915427][ T5680] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.924531][ T5680] usb 4-1: Product: syz [ 159.928883][ T5680] usb 4-1: Manufacturer: syz [ 159.933746][ T5680] usb 4-1: SerialNumber: syz [ 159.982675][ T7525] sddr09: could not read card info [ 159.982791][ T24] usb 1-1: USB disconnect, device number 25 [ 160.023159][ T35] sd 1:0:0:0: [sdb] 0 512-byte logical blocks: (0 B/0 B) [ 160.030365][ T35] sd 1:0:0:0: [sdb] 0-byte physical blocks [ 160.037152][ T35] sd 1:0:0:0: [sdb] Write Protect is off [ 160.043443][ T35] sd 1:0:0:0: [sdb] Asking for cache data failed [ 160.057998][ T35] sd 1:0:0:0: [sdb] Assuming drive cache: write through [ 160.079778][ T35] sd 1:0:0:0: [sdb] Attached SCSI removable disk [ 160.155335][ T5680] aqc111 4-1:1.105: probe with driver aqc111 failed with error -22 [ 160.188761][ T5630] udevd[5630]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory [ 160.299049][ T6994] udevd[6994]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory [ 160.364650][ T5680] usb 4-1: USB disconnect, device number 29 [ 160.581593][ T7547] syzkaller0: entered promiscuous mode [ 160.587809][ T7547] syzkaller0: entered allmulticast mode [ 160.683051][ T24] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 160.834801][ T24] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 160.854041][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.875025][ T24] usb 3-1: config 0 descriptor?? [ 161.669309][ T5687] usb 2-1: unit 0 not found! [ 161.747740][ T5687] usb 2-1: USB disconnect, device number 25 [ 161.851408][ T5624] usb 6-1: USB disconnect, device number 21 [ 161.909755][ T5630] udevd[5630]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 162.051439][ T7568] fuse: Bad value for 'fd' [ 162.163074][ T5687] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 162.304561][ T5624] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 162.316310][ T5687] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 162.328839][ T5687] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.346499][ T5687] usb 2-1: config 0 descriptor?? [ 162.474872][ T5624] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 162.484780][ T5624] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.496612][ T5624] usb 6-1: config 0 descriptor?? [ 162.570392][ T7565] batman_adv: batadv0: Adding interface: macvtap1 [ 162.577742][ T7565] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 162.603928][ T7565] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 162.646419][ T7565] batman_adv: batadv0: Removing interface: macvtap1 [ 163.313118][ T10] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 163.456942][ T24] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 163.469014][ T24] [drm:udl_init] *ERROR* Selecting channel failed [ 163.485608][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 163.489896][ T24] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 163.500654][ T24] [drm] Initialized udl on minor 2 [ 163.509834][ T10] usb 1-1: config 1 has an invalid descriptor of length 115, skipping remainder of the config [ 163.510006][ T24] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 163.531464][ T24] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 163.539428][ T5694] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 163.541849][ T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 163.547748][ T5694] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 163.566832][ T24] usb 3-1: USB disconnect, device number 19 [ 163.581819][ T10] usb 1-1: New USB device found, idVendor=2a39, idProduct=3fb0, bcdDevice= 0.40 [ 163.598321][ T10] usb 1-1: New USB device strings: Mfr=1, Product=66, SerialNumber=3 [ 163.608782][ T10] usb 1-1: Product: syz [ 163.613511][ T10] usb 1-1: Manufacturer: syz [ 163.618319][ T10] usb 1-1: SerialNumber: syz [ 163.806980][ T5633] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 163.860404][ T5624] udl 6-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 163.870787][ T5624] [drm:udl_init] *ERROR* Selecting channel failed [ 163.890865][ T5624] [drm] Initialized udl 0.0.1 for 6-1:0.0 on minor 4 [ 163.897986][ T5624] [drm] Initialized udl on minor 4 [ 163.905011][ T5624] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 163.927135][ T5624] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 163.950063][ T5694] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 163.962463][ T5624] usb 6-1: USB disconnect, device number 22 [ 163.973861][ T5694] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 164.017044][ T7596] xt_bpf: check failed: parse error [ 164.373676][ T5680] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 164.533032][ T5680] usb 4-1: Using ep0 maxpacket: 32 [ 164.560031][ T5680] usb 4-1: unable to get BOS descriptor or descriptor too short [ 164.613056][ T5680] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 164.625148][ T5680] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.634095][ T5680] usb 4-1: Product: syz [ 164.638710][ T5680] usb 4-1: Manufacturer: syz [ 164.653031][ T5680] usb 4-1: SerialNumber: syz [ 164.820485][ T5687] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 164.853898][ T5687] [drm:udl_init] *ERROR* Selecting channel failed [ 164.906340][ T5687] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 3 [ 164.929800][ T5687] [drm] Initialized udl on minor 3 [ 164.952364][ T5687] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 164.986254][ T5687] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 164.994848][ T5624] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 165.029995][ T5687] usb 2-1: USB disconnect, device number 26 [ 165.036230][ T5624] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 165.058937][ T5624] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 167.192084][ T10] usb 1-1: USB disconnect, device number 26 [ 167.386692][ T7647] netlink: 24 bytes leftover after parsing attributes in process `syz.5.514'. [ 167.612727][ T7644] netlink: 12 bytes leftover after parsing attributes in process `syz.0.511'. [ 167.637746][ T7652] netlink: 'syz.1.516': attribute type 10 has an invalid length. [ 167.658463][ T7644] netlink: 12 bytes leftover after parsing attributes in process `syz.0.511'. [ 167.706379][ T7652] team0: Device ipvlan0 failed to register rx_handler [ 167.761288][ T5680] usb 4-1: selecting invalid altsetting 1 [ 167.813068][ T5687] usb 6-1: new full-speed USB device number 23 using dummy_hcd [ 167.841700][ T5680] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 167.854354][ T5680] usb 4-1: USB disconnect, device number 30 [ 167.936243][ T5808] udevd[5808]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 168.006869][ T7669] vivid-002: disconnect [ 168.012172][ T5687] usb 6-1: device descriptor read/64, error -71 [ 168.094988][ T7662] vivid-002: reconnect [ 168.125836][ T7676] netlink: 'syz.1.522': attribute type 10 has an invalid length. [ 168.148819][ T7676] team0: Device ipvlan0 failed to register rx_handler [ 168.272984][ T5687] usb 6-1: new full-speed USB device number 24 using dummy_hcd [ 168.356582][ T7681] vivid-002: disconnect [ 168.420241][ T5633] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 168.427531][ T5687] usb 6-1: device descriptor read/64, error -71 [ 168.470947][ T7677] vivid-002: reconnect [ 168.543183][ T5687] usb usb6-port1: attempt power cycle [ 168.606529][ T7687] xt_bpf: check failed: parse error [ 168.903029][ T5687] usb 6-1: new full-speed USB device number 25 using dummy_hcd [ 168.923743][ T5687] usb 6-1: device descriptor read/8, error -71 [ 168.963214][ T10] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 169.123021][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 169.134608][ T10] usb 3-1: config 1 has an invalid descriptor of length 238, skipping remainder of the config [ 169.151932][ T10] usb 3-1: config 1 interface 0 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 169.174093][ T10] usb 3-1: config 1 interface 0 has no altsetting 0 [ 169.184254][ T5687] usb 6-1: new full-speed USB device number 26 using dummy_hcd [ 169.196560][ T10] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 169.213966][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.214276][ T5687] usb 6-1: device descriptor read/8, error -71 [ 169.232464][ T10] usb 3-1: Product: syz [ 169.237213][ T10] usb 3-1: Manufacturer: syz [ 169.241856][ T10] usb 3-1: SerialNumber: syz [ 169.335483][ T5687] usb usb6-port1: unable to enumerate USB device [ 169.450890][ T7693] sctp: [Deprecated]: syz.2.528 (pid 7693) Use of int in maxseg socket option. [ 169.450890][ T7693] Use struct sctp_assoc_value instead [ 169.470111][ T10] cdc_ether 3-1:1.0: skipping garbage [ 169.476007][ T10] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 169.487733][ T10] usb 3-1: USB disconnect, device number 20 [ 169.603557][ T5687] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 169.704920][ T7702] kAFS: unable to lookup cell 'ÿ' [ 169.711734][ T7702] kAFS: unable to lookup cell '(,c¾Ì' [ 169.764650][ T5687] usb 2-1: Using ep0 maxpacket: 8 [ 169.776335][ T5687] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 169.795964][ T5687] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 169.812178][ T5687] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 169.827505][ T5687] usb 2-1: New USB device found, idVendor=056e, idProduct=00fe, bcdDevice= 0.00 [ 169.842200][ T5687] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.860687][ T5687] usb 2-1: config 0 descriptor?? [ 170.083361][ T7696] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.097159][ T7696] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.360915][ T7712] loop8: detected capacity change from 0 to 4096 [ 170.443800][ T5680] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 170.532623][ T5687] usbhid 2-1:0.0: can't add hid device: -71 [ 170.551073][ T5687] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 170.571087][ T5687] usb 2-1: USB disconnect, device number 27 [ 170.624511][ T5680] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 170.642664][ T5680] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.670827][ T5680] usb 1-1: config 0 descriptor?? [ 170.914940][ T7708] batman_adv: batadv0: Adding interface: macvtap1 [ 170.923120][ T7708] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 170.980707][ T7708] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 171.122479][ T7715] batman_adv: batadv0: Removing interface: macvtap1 [ 171.527382][ T7732] netlink: 12 bytes leftover after parsing attributes in process `syz.1.541'. [ 171.538770][ T7735] netlink: 'syz.3.543': attribute type 10 has an invalid length. [ 171.547127][ T7735] netlink: 40 bytes leftover after parsing attributes in process `syz.3.543'. [ 171.562170][ T7735] team0: Port device geneve1 added [ 171.712991][ T995] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 171.872953][ T995] usb 6-1: Using ep0 maxpacket: 8 [ 171.890472][ T995] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 171.921263][ T995] usb 6-1: New USB device found, idVendor=054c, idProduct=06c3, bcdDevice=9b.1d [ 171.943993][ T995] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.961388][ T995] usb 6-1: Product: syz [ 171.969698][ T995] usb 6-1: Manufacturer: syz [ 171.979762][ T995] usb 6-1: SerialNumber: syz [ 171.995527][ T995] usb 6-1: config 0 descriptor?? [ 172.012593][ T995] port100 6-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 172.782514][ T7753] vivid-003: disconnect [ 172.796389][ T7751] vivid-003: reconnect [ 172.857393][ T7755] kAFS: unable to lookup cell 'ÿ' [ 172.871381][ T7755] kAFS: unable to lookup cell '(,c¾Ì' [ 173.196771][ T5680] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 173.210370][ T5680] [drm:udl_init] *ERROR* Selecting channel failed [ 173.255654][ T5680] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 2 [ 173.270705][ T5680] [drm] Initialized udl on minor 2 [ 173.280619][ T5680] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 173.302030][ T5680] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 173.322600][ T995] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 173.336477][ T5680] usb 1-1: USB disconnect, device number 27 [ 173.347619][ T995] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 173.405823][ T995] usb 6-1: USB disconnect, device number 27 [ 173.498345][ T7764] netlink: 12 bytes leftover after parsing attributes in process `syz.2.552'. [ 173.660634][ T7767] netlink: 8 bytes leftover after parsing attributes in process `syz.3.553'. [ 173.703516][ T5680] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 173.846857][ T7770] netlink: 'syz.3.553': attribute type 5 has an invalid length. [ 173.883010][ T5680] usb 1-1: Using ep0 maxpacket: 32 [ 173.889636][ T5680] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 173.901484][ T5680] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 173.910726][ T5680] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 173.918971][ T5680] usb 1-1: Product: syz [ 173.923597][ T5680] usb 1-1: Manufacturer: syz [ 173.928594][ T5680] usb 1-1: SerialNumber: syz [ 173.934649][ T5680] usb 1-1: config 0 descriptor?? [ 173.940785][ T7762] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 173.949909][ T5680] hub 1-1:0.0: bad descriptor, ignoring hub [ 173.955987][ T5680] hub 1-1:0.0: probe with driver hub failed with error -5 [ 174.621527][ T7782] netlink: 'syz.5.557': attribute type 10 has an invalid length. [ 174.652053][ T7782] team0: Device ipvlan0 failed to register rx_handler [ 174.851544][ T7786] vivid-003: disconnect [ 174.863272][ T7762] usb 1-1: reset high-speed USB device number 28 using dummy_hcd [ 174.883990][ T7785] vivid-003: reconnect [ 175.050358][ T7762] usb 1-1: device firmware changed [ 175.066532][ T5680] usb 1-1: USB disconnect, device number 28 [ 175.123532][ T7798] openvswitch: netlink: Flow key attribute not present in set flow. [ 175.243066][ T5680] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 175.374699][ T7807] xt_TCPMSS: Only works on TCP SYN packets [ 175.467024][ T5680] usb 1-1: Using ep0 maxpacket: 32 [ 175.494613][ T5680] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 175.519140][ T7810] netlink: 4 bytes leftover after parsing attributes in process `syz.1.567'. [ 175.596376][ T5680] usb 1-1: string descriptor 0 read error: -22 [ 175.647067][ T5680] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 175.689147][ T5680] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 175.732944][ T5680] usb 1-1: config 0 descriptor?? [ 175.740255][ T7773] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 175.762688][ T5680] hub 1-1:0.0: bad descriptor, ignoring hub [ 175.768898][ T5680] hub 1-1:0.0: probe with driver hub failed with error -5 [ 176.093156][ T5694] usb 1-1: USB disconnect, device number 29 [ 176.480487][ T7823] vivid-000: disconnect [ 176.555353][ T7824] netlink: 12 bytes leftover after parsing attributes in process `syz.5.570'. [ 177.010050][ T7834] FAULT_INJECTION: forcing a failure. [ 177.010050][ T7834] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 177.054197][ T7834] CPU: 0 UID: 0 PID: 7834 Comm: syz.0.574 Not tainted syzkaller #0 PREEMPT(full) [ 177.054228][ T7834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 177.054240][ T7834] Call Trace: [ 177.054247][ T7834] [ 177.054260][ T7834] dump_stack_lvl+0xe8/0x150 [ 177.054287][ T7834] should_fail_ex+0x40c/0x560 [ 177.054310][ T7834] _copy_from_user+0x2d/0xb0 [ 177.054336][ T7834] get_compat_msghdr+0xb3/0x4c0 [ 177.054362][ T7834] ? __pfx_get_compat_msghdr+0x10/0x10 [ 177.054389][ T7834] ___sys_sendmsg+0x201/0x360 [ 177.054412][ T7834] ? get_pid_task+0x20/0x1f0 [ 177.054431][ T7834] ? __pfx____sys_sendmsg+0x10/0x10 [ 177.054453][ T7834] ? __mutex_trylock_common+0x15f/0x270 [ 177.054474][ T7834] ? get_pid_task+0x20/0x1f0 [ 177.054498][ T7834] ? get_pid_task+0x20/0x1f0 [ 177.054525][ T7834] ? __fget_files+0x2a/0x420 [ 177.054546][ T7834] ? __fget_files+0x3a2/0x420 [ 177.054569][ T7834] __sys_sendmsg+0x177/0x240 [ 177.054594][ T7834] ? __pfx___sys_sendmsg+0x10/0x10 [ 177.054621][ T7834] ? rcu_is_watching+0x15/0xb0 [ 177.054643][ T7834] __do_fast_syscall_32+0x23e/0x6f0 [ 177.054669][ T7834] ? do_fast_syscall_32+0x33/0x70 [ 177.054693][ T7834] ? asm_int80_emulation+0x1a/0x20 [ 177.054711][ T7834] ? do_int80_emulation+0x29f/0x550 [ 177.054735][ T7834] ? trace_irq_disable+0x3b/0x140 [ 177.054761][ T7834] do_fast_syscall_32+0x33/0x70 [ 177.054794][ T7834] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 177.054818][ T7834] RIP: 0023:0xf70cf0ec [ 177.054835][ T7834] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 177.054851][ T7834] RSP: 002b:00000000f54bd50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 177.054874][ T7834] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000640 [ 177.054887][ T7834] RDX: 0000000020008000 RSI: 0000000000000000 RDI: 0000000000000000 [ 177.054899][ T7834] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 177.054910][ T7834] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 177.054921][ T7834] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 177.054939][ T7834] [ 177.086514][ T0] NOHZ tick-stop error: local softirq work is pending, handler #108!!! [ 177.648108][ T7822] vivid-000: reconnect [ 178.013690][ T7846] netlink: 4 bytes leftover after parsing attributes in process `syz.0.579'. [ 178.089948][ T7849] program syz.2.580 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 178.230683][ T7852] netlink: 28 bytes leftover after parsing attributes in process `syz.2.582'. [ 178.486316][ T0] NOHZ tick-stop error: local softirq work is pending, handler #20a!!! [ 178.506702][ T0] NOHZ tick-stop error: local softirq work is pending, handler #20a!!! [ 178.523087][ T9] usb 3-1: new full-speed USB device number 21 using dummy_hcd [ 178.663056][ T9] usb 3-1: device descriptor read/64, error -71 [ 178.974029][ T9] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 179.112966][ T9] usb 3-1: device descriptor read/64, error -71 [ 179.231372][ T9] usb usb3-port1: attempt power cycle [ 179.582968][ T9] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 179.626210][ T9] usb 3-1: device descriptor read/8, error -71 [ 179.903381][ T9] usb 3-1: new full-speed USB device number 24 using dummy_hcd [ 179.957780][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 179.975408][ T9] usb 3-1: device descriptor read/8, error -71 [ 180.094515][ T9] usb usb3-port1: unable to enumerate USB device [ 180.473012][ T9] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 180.553681][ T5680] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 180.645673][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 180.656273][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 180.668646][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 180.680491][ T9] usb 4-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00 [ 180.692347][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.700518][ T5680] usb 1-1: device descriptor read/64, error -71 [ 180.715024][ T9] usb 4-1: config 0 descriptor?? [ 180.966145][ T5680] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 181.103765][ T5680] usb 1-1: device descriptor read/64, error -71 [ 181.140302][ T9] hid-rmi 0003:0461:4E72.0006: hidraw0: USB HID vff.fc Device [HID 0461:4e72] on usb-dummy_hcd.3-1/input0 [ 181.213932][ T5680] usb usb1-port1: attempt power cycle [ 181.367929][ T9] usb 4-1: USB disconnect, device number 31 [ 181.553018][ T5680] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 181.573437][ T5680] usb 1-1: device descriptor read/8, error -71 [ 181.823270][ T5680] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 181.849091][ T5680] usb 1-1: device descriptor read/8, error -71 [ 181.980802][ T5680] usb usb1-port1: unable to enumerate USB device [ 182.835029][ T9] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 182.994743][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 183.008407][ T9] usb 3-1: config 1 has an invalid descriptor of length 115, skipping remainder of the config [ 183.044186][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 183.076974][ T9] usb 3-1: New USB device found, idVendor=2a39, idProduct=3fb0, bcdDevice= 0.40 [ 183.097306][ T9] usb 3-1: New USB device strings: Mfr=1, Product=66, SerialNumber=3 [ 183.121718][ T9] usb 3-1: Product: syz [ 183.129946][ T9] usb 3-1: Manufacturer: syz [ 183.142973][ T9] usb 3-1: SerialNumber: syz [ 183.499667][ T7895] netlink: 4 bytes leftover after parsing attributes in process `syz.5.593'. [ 184.014114][ T5680] IPVS: starting estimator thread 0... [ 184.133046][ T7902] IPVS: using max 54 ests per chain, 129600 per kthread [ 184.293056][ T5680] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 184.313034][ T995] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 184.445867][ T5680] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 184.457925][ T5680] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 184.469482][ T5680] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 184.484051][ T995] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 184.500711][ T5680] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 184.510773][ T995] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 184.522448][ T5680] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.536092][ T995] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 184.555856][ T5680] usb 6-1: config 0 descriptor?? [ 184.574623][ T995] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 184.589771][ T995] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.740953][ T995] usb 4-1: config 0 descriptor?? [ 185.165019][ T995] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 185.388867][ T5680] plantronics 0003:047F:FFFF.0008: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 185.651607][ T5680] usb 6-1: USB disconnect, device number 28 [ 185.761189][ T7906] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 185.810922][ T7906] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 185.994263][ T7915] fido_id[7915]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 186.326832][ T7917] netlink: 16 bytes leftover after parsing attributes in process `syz.3.597'. [ 186.667958][ T9] usb 3-1: USB disconnect, device number 25 [ 186.817788][ T7932] netlink: 4 bytes leftover after parsing attributes in process `syz.2.605'. [ 186.826749][ T995] usb 4-1: reset high-speed USB device number 32 using dummy_hcd [ 186.834609][ T10] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 186.978729][ T5808] udevd[5808]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 186.994729][ T995] usb 4-1: device descriptor read/64, error -32 [ 187.002605][ T10] usb 2-1: device descriptor read/64, error -71 [ 187.210053][ T7941] bond0: Device is already in use. [ 187.263119][ T10] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 187.270866][ T995] usb 4-1: reset high-speed USB device number 32 using dummy_hcd [ 187.446772][ T10] usb 2-1: device descriptor read/64, error -71 [ 187.608199][ T10] usb usb2-port1: attempt power cycle [ 188.052989][ T10] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 188.084979][ T5680] usb 4-1: USB disconnect, device number 32 [ 188.147921][ T10] usb 2-1: device descriptor read/8, error -71 [ 188.399485][ T7955] kAFS: unable to lookup cell 'ÿ' [ 188.412985][ T10] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 188.453592][ T10] usb 2-1: device descriptor read/8, error -71 [ 188.504876][ T7954] kAFS: unable to lookup cell '(,c¾Ì' [ 188.563326][ T10] usb usb2-port1: unable to enumerate USB device [ 188.980059][ T7957] netlink: 4 bytes leftover after parsing attributes in process `syz.0.612'. [ 189.116515][ T0] NOHZ tick-stop error: local softirq work is pending, handler #20a!!! [ 189.164482][ T0] NOHZ tick-stop error: local softirq work is pending, handler #20a!!! [ 189.804962][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 189.866079][ T0] NOHZ tick-stop error: local softirq work is pending, handler #20a!!! [ 189.968204][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 191.339101][ T7982] netlink: 4 bytes leftover after parsing attributes in process `syz.3.619'. [ 191.713484][ T995] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 194.151165][ T995] usb 1-1: unable to get BOS descriptor or descriptor too short [ 194.258093][ T995] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 194.341820][ T995] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 194.585622][ T7996] netlink: 'syz.5.624': attribute type 10 has an invalid length. [ 194.729133][ T1328] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.735780][ T1328] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.810029][ T995] usb 1-1: string descriptor 0 read error: -71 [ 194.822393][ T7996] team0: Device ipvlan0 failed to register rx_handler [ 194.881567][ T995] usb 1-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 194.953476][ T10] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 194.968674][ T995] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.268015][ T995] usb 1-1: can't set config #1, error -71 [ 195.324840][ T995] usb 1-1: USB disconnect, device number 34 [ 195.384755][ T10] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 195.483422][ T10] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 195.548163][ T10] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 195.625699][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.707777][ T7997] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 195.823033][ T995] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 196.829104][ T10] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 197.984569][ T995] usb 6-1: Using ep0 maxpacket: 16 [ 198.006987][ T995] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 198.040654][ T995] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 198.101997][ T995] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 198.162455][ T8018] netlink: 212344 bytes leftover after parsing attributes in process `syz.2.629'. [ 198.191006][ T995] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 198.228616][ T995] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 198.277800][ T995] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 198.287660][ T5714] usb 4-1: USB disconnect, device number 33 [ 198.294955][ T995] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 198.320776][ T995] usb 6-1: Manufacturer: syz [ 198.387629][ T995] usb 6-1: config 0 descriptor?? [ 198.645780][ T8028] kAFS: unable to lookup cell 'ÿ' [ 198.657640][ T8028] kAFS: unable to lookup cell '(,c¾Ì' [ 198.898521][ T995] rc_core: IR keymap rc-hauppauge not found [ 198.944991][ T995] Registered IR keymap rc-empty [ 198.951512][ T8031] netlink: 4 bytes leftover after parsing attributes in process `syz.5.632'. [ 199.038546][ T995] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 199.252052][ T995] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 199.404669][ T995] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 199.485725][ T995] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input12 [ 199.602569][ T995] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 199.646591][ T995] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 199.693461][ T995] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 199.753092][ T995] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 199.807819][ T995] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 199.865160][ T995] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 199.923678][ T995] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 205.757471][ T995] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 206.732860][ T995] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 206.843103][ T995] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 206.976584][ T995] mceusb 6-1:0.0: Registered with mce emulator interface version 1 [ 207.018207][ T5633] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 207.061683][ T995] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 207.122035][ T995] usb 6-1: USB disconnect, device number 29 [ 207.390129][ T8048] netlink: 12 bytes leftover after parsing attributes in process `syz.0.635'. [ 207.604822][ T5633] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 208.134379][ T8056] xt_bpf: check failed: parse error [ 208.605731][ T8062] xt_bpf: check failed: parse error [ 208.821245][ T8068] kAFS: unable to lookup cell 'ÿ' [ 208.900853][ T8068] kAFS: unable to lookup cell '(,c¾Ì' [ 210.159070][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 210.159093][ T29] audit: type=1326 audit(1781668652.415:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8071 comm="syz.2.641" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fff0ec code=0x7ffc0000 [ 210.224490][ T29] audit: type=1326 audit(1781668652.415:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8071 comm="syz.2.641" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=132 compat=1 ip=0xf6fff0ec code=0x7ffc0000 [ 210.253731][ T29] audit: type=1326 audit(1781668652.415:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8071 comm="syz.2.641" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fff0ec code=0x7ffc0000 [ 210.378062][ T29] audit: type=1326 audit(1781668652.415:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8071 comm="syz.2.641" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf6fff0ec code=0x7ffc0000 [ 210.406399][ T29] audit: type=1326 audit(1781668652.415:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8071 comm="syz.2.641" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fff0ec code=0x7ffc0000 [ 210.457613][ T29] audit: type=1326 audit(1781668652.415:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8071 comm="syz.2.641" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf6fff0ec code=0x7ffc0000 [ 210.531099][ T29] audit: type=1326 audit(1781668652.415:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8071 comm="syz.2.641" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fff0ec code=0x7ffc0000 [ 210.561859][ T29] audit: type=1326 audit(1781668652.415:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8071 comm="syz.2.641" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf6fff0ec code=0x7ffc0000 [ 210.586786][ T5714] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 210.600197][ T29] audit: type=1326 audit(1781668652.415:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8071 comm="syz.2.641" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fff0ec code=0x7ffc0000 [ 210.648097][ T29] audit: type=1326 audit(1781668652.415:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8071 comm="syz.2.641" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf6fff0ec code=0x7ffc0000 [ 210.763180][ T5714] usb 1-1: Using ep0 maxpacket: 8 [ 210.772306][ T5714] usb 1-1: config 3 has an invalid interface number: 45 but max is 0 [ 210.866486][ T5714] usb 1-1: config 3 contains an unexpected descriptor of type 0x1, skipping [ 210.875740][ T5714] usb 1-1: config 3 has no interface number 0 [ 210.883548][ T5714] usb 1-1: config 3 interface 45 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 210.904052][ T5714] usb 1-1: config 3 interface 45 has no altsetting 0 [ 210.931425][ T5714] usb 1-1: New USB device found, idVendor=0582, idProduct=e6ca, bcdDevice=d3.0b [ 210.940730][ T5714] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.956696][ T5714] usb 1-1: Product: syz [ 210.976996][ T5714] usb 1-1: Manufacturer: syz [ 210.982133][ T5714] usb 1-1: SerialNumber: syz [ 210.982218][ T8081] kAFS: unable to lookup cell 'ÿ' [ 211.126020][ T8081] kAFS: unable to lookup cell '(,c¾Ì' [ 212.811298][ T8087] kAFS: unable to lookup cell 'ÿ' [ 213.017012][ T8090] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 213.031846][ T8090] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 213.416825][ T8094] syz.2.646 (8094): /proc/8089/oom_adj is deprecated, please use /proc/8089/oom_score_adj instead. [ 213.911042][ T5714] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 214.199277][ T5714] usb 1-1: USB disconnect, device number 35 [ 214.320449][ T5635] udevd[5635]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:3.45/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 215.393512][ T8099] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.401222][ T8099] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.003225][ T8099] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 216.082652][ T8099] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 216.461673][ T5633] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 217.050561][ T8114] xt_bpf: check failed: parse error [ 217.579810][ T8116] netlink: 264 bytes leftover after parsing attributes in process `syz.0.653'. [ 217.608134][ T8116] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 219.039038][ T1166] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.139396][ T1166] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.203838][ T1166] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.243809][ T1166] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.343153][ T8122] vivid-001: disconnect [ 219.388602][ T8120] vivid-001: reconnect [ 219.908047][ T8135] kAFS: unable to lookup cell 'ÿ' [ 220.222960][ T995] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 220.385056][ T995] usb 6-1: unable to get BOS descriptor or descriptor too short [ 220.399743][ T995] usb 6-1: config 1 has an invalid descriptor of length 115, skipping remainder of the config [ 220.438940][ T995] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 220.509488][ T995] usb 6-1: New USB device found, idVendor=2a39, idProduct=3fb0, bcdDevice= 0.40 [ 220.532010][ T995] usb 6-1: New USB device strings: Mfr=1, Product=66, SerialNumber=3 [ 220.583379][ T995] usb 6-1: Product: syz [ 220.617999][ T995] usb 6-1: Manufacturer: syz [ 220.639758][ T995] usb 6-1: SerialNumber: syz [ 223.134296][ T5623] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 223.143808][ T5623] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 223.151249][ T5623] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 223.168468][ T5623] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 223.307804][ T5623] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 224.509979][ T995] usb 6-1: USB disconnect, device number 30 [ 224.554721][ T5808] udevd[5808]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 224.825153][ T8163] tipc: Enabled bearer , priority 0 [ 224.844479][ T8164] syzkaller0: entered promiscuous mode [ 224.877464][ T8164] syzkaller0: entered allmulticast mode [ 225.276896][ T8164] tipc: Resetting bearer [ 225.295428][ T8160] tipc: Resetting bearer [ 225.308891][ T8160] tipc: Disabling bearer [ 225.363764][ T5623] Bluetooth: hci5: command tx timeout [ 225.558805][ T8173] netlink: 24 bytes leftover after parsing attributes in process `syz.5.667'. [ 225.619373][ T8174] netlink: 24 bytes leftover after parsing attributes in process `syz.5.667'. [ 226.349390][ T8182] FAULT_INJECTION: forcing a failure. [ 226.349390][ T8182] name failslab, interval 1, probability 0, space 0, times 0 [ 226.383335][ T8182] CPU: 1 UID: 0 PID: 8182 Comm: syz.5.670 Not tainted syzkaller #0 PREEMPT(full) [ 226.383355][ T8182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 226.383363][ T8182] Call Trace: [ 226.383367][ T8182] [ 226.383373][ T8182] dump_stack_lvl+0xe8/0x150 [ 226.383391][ T8182] should_fail_ex+0x40c/0x560 [ 226.383406][ T8182] should_failslab+0xa8/0x100 [ 226.383421][ T8182] __kmalloc_cache_noprof+0x88/0x660 [ 226.383435][ T8182] ? __raw_spin_lock_init+0x45/0x100 [ 226.383465][ T8182] ? register_netdevice+0x57e/0x1eb0 [ 226.383488][ T8182] register_netdevice+0x57e/0x1eb0 [ 226.383505][ T8182] ? net_generic+0x1e/0x240 [ 226.383521][ T8182] ? rcu_is_watching+0x15/0xb0 [ 226.383540][ T8182] ? __pfx_register_netdevice+0x10/0x10 [ 226.383562][ T8182] ? rcu_is_watching+0x15/0xb0 [ 226.383578][ T8182] ? net_generic+0x1e/0x240 [ 226.383597][ T8182] ? lock_release+0x4b/0x3c0 [ 226.383621][ T8182] ? __kvmalloc_node_noprof+0x53d/0x890 [ 226.383644][ T8182] ? net_generic+0x1e/0x240 [ 226.383667][ T8182] xfrmi_newlink+0x49d/0x7c0 [ 226.383687][ T8182] ? validate_linkmsg+0x765/0x950 [ 226.383704][ T8182] ? __pfx_xfrmi_newlink+0x10/0x10 [ 226.383724][ T8182] ? rtnl_create_link+0xa04/0xd70 [ 226.383743][ T8182] ? __pfx_xfrmi_newlink+0x10/0x10 [ 226.383763][ T8182] rtnl_newlink_create+0x310/0xb00 [ 226.383789][ T8182] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 226.383814][ T8182] ? __pfx___mutex_lock+0x10/0x10 [ 226.383842][ T8182] ? ns_capable+0x89/0xe0 [ 226.383865][ T8182] rtnl_newlink+0x167f/0x1bd0 [ 226.383893][ T8182] ? __pfx_rtnl_newlink+0x10/0x10 [ 226.383913][ T8182] ? unwind_next_frame+0x8f/0x2550 [ 226.383932][ T8182] ? rcu_is_watching+0x15/0xb0 [ 226.383953][ T8182] ? is_bpf_text_address+0x26/0x2b0 [ 226.383977][ T8182] ? rcu_is_watching+0x15/0xb0 [ 226.383996][ T8182] ? rcu_is_watching+0x15/0xb0 [ 226.384014][ T8182] ? lock_release+0x4b/0x3c0 [ 226.384038][ T8182] ? lock_release+0x4b/0x3c0 [ 226.384065][ T8182] ? unwind_next_frame+0x8f/0x2550 [ 226.384084][ T8182] ? rcu_is_watching+0x15/0xb0 [ 226.384104][ T8182] ? is_bpf_text_address+0x26/0x2b0 [ 226.384129][ T8182] ? rcu_is_watching+0x15/0xb0 [ 226.384148][ T8182] ? rcu_is_watching+0x15/0xb0 [ 226.384165][ T8182] ? lock_release+0x4b/0x3c0 [ 226.384189][ T8182] ? lock_release+0x4b/0x3c0 [ 226.384216][ T8182] ? is_bpf_text_address+0x292/0x2b0 [ 226.384241][ T8182] ? is_bpf_text_address+0x26/0x2b0 [ 226.384267][ T8182] ? kernel_text_address+0xa5/0xe0 [ 226.384286][ T8182] ? __kernel_text_address+0xd/0x30 [ 226.384304][ T8182] ? unwind_get_return_address+0x4d/0x90 [ 226.384324][ T8182] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 226.384348][ T8182] ? arch_stack_walk+0xfb/0x150 [ 226.384373][ T8182] ? __pfx_rtnl_newlink+0x10/0x10 [ 226.384393][ T8182] ? lock_release+0x4b/0x3c0 [ 226.384414][ T8182] ? bpf_lsm_capable+0x9/0x20 [ 226.384445][ T8182] ? security_capable+0x7e/0x2c0 [ 226.384487][ T8182] ? __pfx_rtnl_newlink+0x10/0x10 [ 226.384507][ T8182] rtnetlink_rcv_msg+0x802/0xc00 [ 226.384527][ T8182] ? kasan_save_track+0x3e/0x80 [ 226.384551][ T8182] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 226.384570][ T8182] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 226.384590][ T8182] ? __netlink_lookup+0xc6/0x8b0 [ 226.384611][ T8182] ? rcu_is_watching+0x15/0xb0 [ 226.384631][ T8182] netlink_rcv_skb+0x226/0x4a0 [ 226.384651][ T8182] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 226.384696][ T8182] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 226.384719][ T8182] ? net_generic+0x1e/0x240 [ 226.384732][ T8182] ? net_generic+0x1e/0x240 [ 226.384747][ T8182] ? netlink_deliver_tap+0x2e/0x1b0 [ 226.384767][ T8182] netlink_unicast+0x7bb/0x940 [ 226.384789][ T8182] netlink_sendmsg+0x813/0xb40 [ 226.384812][ T8182] ? __pfx_netlink_sendmsg+0x10/0x10 [ 226.384835][ T8182] ? __import_iovec+0x5d7/0x7e0 [ 226.384858][ T8182] ? aa_sock_msg_perm+0xf1/0x1b0 [ 226.384876][ T8182] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 226.384897][ T8182] ? __pfx_netlink_sendmsg+0x10/0x10 [ 226.384920][ T8182] ____sys_sendmsg+0x9b9/0xa20 [ 226.384941][ T8182] ? import_iovec+0x73/0xa0 [ 226.384965][ T8182] ? __pfx_____sys_sendmsg+0x10/0x10 [ 226.384992][ T8182] ___sys_sendmsg+0x2a5/0x360 [ 226.385014][ T8182] ? get_pid_task+0x20/0x1f0 [ 226.385032][ T8182] ? __pfx____sys_sendmsg+0x10/0x10 [ 226.385053][ T8182] ? __mutex_trylock_common+0x15f/0x270 [ 226.385074][ T8182] ? get_pid_task+0x20/0x1f0 [ 226.385088][ T8182] ? get_pid_task+0x20/0x1f0 [ 226.385114][ T8182] ? __fget_files+0x2a/0x420 [ 226.385133][ T8182] ? __fget_files+0x3a2/0x420 [ 226.385155][ T8182] __sys_sendmsg+0x177/0x240 [ 226.385177][ T8182] ? __pfx___sys_sendmsg+0x10/0x10 [ 226.385204][ T8182] ? rcu_is_watching+0x15/0xb0 [ 226.385224][ T8182] __do_fast_syscall_32+0x23e/0x6f0 [ 226.385247][ T8182] ? do_fast_syscall_32+0x33/0x70 [ 226.385271][ T8182] ? asm_int80_emulation+0x1a/0x20 [ 226.385287][ T8182] ? do_int80_emulation+0x29f/0x550 [ 226.385311][ T8182] ? trace_irq_disable+0x3b/0x140 [ 226.385335][ T8182] do_fast_syscall_32+0x33/0x70 [ 226.385359][ T8182] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 226.385380][ T8182] RIP: 0023:0xf7fc30ec [ 226.385397][ T8182] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 226.385413][ T8182] RSP: 002b:00000000f548650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 226.385434][ T8182] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000280 [ 226.385448][ T8182] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 226.385458][ T8182] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 226.385469][ T8182] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 226.385490][ T8182] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 226.385507][ T8182] [ 227.442942][ T5623] Bluetooth: hci5: command tx timeout [ 227.990588][ T8155] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.486464][ T8155] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.605849][ T8155] bridge_slave_0: entered allmulticast mode [ 228.907068][ T8155] bridge_slave_0: entered promiscuous mode [ 228.966947][ T8155] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.014544][ T8155] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.086960][ T8155] bridge_slave_1: entered allmulticast mode [ 229.128313][ T8155] bridge_slave_1: entered promiscuous mode [ 229.516009][ T8155] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 229.525255][ T5623] Bluetooth: hci5: command tx timeout [ 229.588133][ T8155] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 229.756801][ T8155] team0: Port device team_slave_0 added [ 229.781484][ T8155] team0: Port device team_slave_1 added [ 229.901124][ T8205] netlink: 9 bytes leftover after parsing attributes in process `syz.2.676'. [ 229.915745][ T8155] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 229.915765][ T8155] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 229.915794][ T8155] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 229.925190][ T8155] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 229.925203][ T8155] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 229.925219][ T8155] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 231.360806][ T8220] netlink: 12 bytes leftover after parsing attributes in process `syz.5.678'. [ 231.603132][ T5623] Bluetooth: hci5: command tx timeout [ 231.908315][ T8223] kAFS: unable to lookup cell '(,c¾Ì' [ 232.032073][ T8230] kAFS: unable to lookup cell '(,c¾Ì' [ 233.478742][ T8155] hsr_slave_0: entered promiscuous mode [ 233.525500][ T8155] hsr_slave_1: entered promiscuous mode [ 233.615656][ T8155] debugfs: 'hsr0' already exists in 'hsr' [ 233.636248][ T8155] Cannot create hsr debugfs directory [ 235.258562][ T5623] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 244.180664][ T8155] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 244.327658][ T8255] netlink: 'syz.5.688': attribute type 10 has an invalid length. [ 245.152999][ T5714] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 247.554926][ T5714] usb 2-1: Using ep0 maxpacket: 8 [ 247.566024][ T8155] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 247.591814][ T8155] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 247.637101][ T8155] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 247.666500][ T8273] FAULT_INJECTION: forcing a failure. [ 247.666500][ T8273] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 247.680079][ T8273] CPU: 1 UID: 0 PID: 8273 Comm: syz.2.690 Not tainted syzkaller #0 PREEMPT(full) [ 247.680105][ T8273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 247.680117][ T8273] Call Trace: [ 247.680124][ T8273] [ 247.680131][ T8273] dump_stack_lvl+0xe8/0x150 [ 247.680157][ T8273] should_fail_ex+0x40c/0x560 [ 247.680179][ T8273] _copy_from_iter+0x1d3/0x1660 [ 247.680203][ T8273] ? rcu_is_watching+0x15/0xb0 [ 247.680225][ T8273] ? __pfx__copy_from_iter+0x10/0x10 [ 247.680246][ T8273] ? kmem_cache_alloc_node_noprof+0x3ca/0x680 [ 247.680273][ T8273] ? netlink_sendmsg+0x650/0xb40 [ 247.680296][ T8273] ? skb_put+0x112/0x210 [ 247.680319][ T8273] netlink_sendmsg+0x6c0/0xb40 [ 247.680354][ T8273] ? __pfx_netlink_sendmsg+0x10/0x10 [ 247.680378][ T8273] ? __might_fault+0xaf/0x130 [ 247.680399][ T8273] ? aa_sock_msg_perm+0xf1/0x1b0 [ 247.680418][ T8273] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 247.680442][ T8273] ? __pfx_netlink_sendmsg+0x10/0x10 [ 247.680466][ T8273] __sys_sendto+0x626/0x6c0 [ 247.680485][ T8273] ? get_pid_task+0x20/0x1f0 [ 247.680503][ T8273] ? __pfx___sys_sendto+0x10/0x10 [ 247.680528][ T8273] ? lock_acquire+0x5f/0x350 [ 247.680557][ T8273] ? __might_fault+0xaf/0x130 [ 247.680578][ T8273] ? __might_fault+0xcb/0x130 [ 247.680601][ T8273] __ia32_compat_sys_socketcall+0x44f/0xa50 [ 247.680628][ T8273] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 247.680653][ T8273] ? __fget_files+0x3a2/0x420 [ 247.680675][ T8273] ? __pfx___ia32_compat_sys_socketcall+0x10/0x10 [ 247.680703][ T8273] ? ksys_write+0x242/0x270 [ 247.680727][ T8273] ? __pfx_ksys_write+0x10/0x10 [ 247.680752][ T8273] ? rcu_is_watching+0x15/0xb0 [ 247.680770][ T8273] ? asm_int80_emulation+0x1a/0x20 [ 247.680790][ T8273] do_int80_emulation+0x19a/0x550 [ 247.680814][ T8273] ? trace_irq_disable+0x3b/0x140 [ 247.680837][ T8273] ? asm_int80_emulation+0x1a/0x20 [ 247.680854][ T8273] ? clear_bhb_loop+0x40/0x90 [ 247.680871][ T8273] ? clear_bhb_loop+0x40/0x90 [ 247.680891][ T8273] asm_int80_emulation+0x1a/0x20 [ 247.680908][ T8273] RIP: 0023:0xf71361ab [ 247.680924][ T8273] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 247.680940][ T8273] RSP: 002b:00000000f53cb34c EFLAGS: 00000246 ORIG_RAX: 0000000000000066 [ 247.680961][ T8273] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00000000f53cb3f4 [ 247.680975][ T8273] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 247.680986][ T8273] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 247.680997][ T8273] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 247.681008][ T8273] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 247.681027][ T8273] [ 248.297539][ T5714] usb 2-1: device descriptor read/all, error -71 [ 248.319057][ T8255] team0: Device ipvlan0 failed to register rx_handler [ 248.443043][ T8155] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 248.488811][ T8155] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 248.515884][ T8155] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 248.595418][ T8155] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 256.273378][ T1328] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.541135][ T1328] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.531643][ C1] sched: DL replenish lagged too much [ 287.308528][ T5633] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 287.315905][ T5633] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 287.323257][ T5633] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 287.331032][ T5633] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 287.339740][ T5633] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 287.436192][ T5623] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 287.445545][ T5623] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 287.453607][ T5623] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 287.463142][ T5623] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 287.471474][ T5623] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 287.596696][ T5623] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 287.604105][ T5623] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 287.611386][ T5623] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 287.619798][ T5623] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 287.627353][ T5623] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 287.698592][ T5633] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 287.706758][ T5633] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 287.714392][ T5633] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 287.722171][ T5633] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 287.730068][ T5633] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 287.785041][ T5623] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 287.792370][ T5623] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 287.800068][ T5623] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 287.816234][ T5623] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 287.823774][ T5623] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 289.444020][ T5623] Bluetooth: hci1: command tx timeout [ 289.522971][ T5623] Bluetooth: hci2: command tx timeout [ 289.686284][ T5623] Bluetooth: hci6: command tx timeout [ 289.762961][ T5623] Bluetooth: hci7: command tx timeout [ 289.843289][ T5623] Bluetooth: hci8: command tx timeout [ 291.523238][ T5623] Bluetooth: hci1: command tx timeout [ 291.602941][ T5623] Bluetooth: hci2: command tx timeout [ 291.763032][ T5623] Bluetooth: hci6: command tx timeout [ 291.847236][ T5623] Bluetooth: hci7: command tx timeout [ 291.923018][ T5623] Bluetooth: hci8: command tx timeout [ 293.603183][ T5623] Bluetooth: hci1: command tx timeout [ 293.682974][ T5623] Bluetooth: hci2: command tx timeout [ 293.843017][ T5623] Bluetooth: hci6: command tx timeout [ 293.923042][ T5633] Bluetooth: hci7: command tx timeout [ 294.005190][ T5633] Bluetooth: hci8: command tx timeout [ 295.683204][ T5633] Bluetooth: hci1: command tx timeout [ 295.763646][ T5633] Bluetooth: hci2: command tx timeout [ 295.922989][ T5633] Bluetooth: hci6: command tx timeout [ 296.003575][ T5633] Bluetooth: hci7: command tx timeout [ 296.082910][ T5633] Bluetooth: hci8: command tx timeout [ 317.605439][ T1328] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.612071][ T1328] ieee802154 phy1 wpan1: encryption failed: -22 [ 348.185079][ T5623] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 348.194290][ T5623] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 348.201800][ T5623] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 348.210083][ T5623] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 348.218049][ T5623] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 348.520967][ T5633] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 348.528346][ T5633] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 348.538149][ T5633] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 348.551842][ T5633] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 348.559427][ T5633] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 348.624768][ T5623] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 348.632212][ T5623] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 348.641843][ T5623] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 348.650101][ T5623] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 348.659424][ T5623] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 348.734046][ T5633] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 348.742053][ T5633] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 348.750017][ T5633] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 348.759501][ T5633] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 348.767150][ T5633] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 348.828433][ T5623] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 348.836056][ T5623] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 348.843432][ T5623] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 348.851540][ T5623] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 348.859709][ T5623] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 350.242949][ T5623] Bluetooth: hci3: command tx timeout [ 350.643119][ T5623] Bluetooth: hci5: command tx timeout [ 350.722998][ T5623] Bluetooth: hci9: command tx timeout [ 350.802932][ T5623] Bluetooth: hci10: command tx timeout [ 350.883138][ T5623] Bluetooth: hci11: command tx timeout [ 352.323004][ T5623] Bluetooth: hci3: command tx timeout [ 352.723328][ T5633] Bluetooth: hci5: command tx timeout [ 352.803025][ T50] Bluetooth: hci9: command tx timeout [ 352.882977][ T50] Bluetooth: hci10: command tx timeout [ 352.963297][ T5633] Bluetooth: hci11: command tx timeout [ 354.882916][ T5633] Bluetooth: hci9: command tx timeout [ 369.518113][ T5633] Bluetooth: hci5: command tx timeout [ 369.528208][ T5633] Bluetooth: hci3: command tx timeout [ 369.533769][ T5633] Bluetooth: hci10: command tx timeout [ 369.540732][ T5633] Bluetooth: hci11: command tx timeout [ 369.546309][ T50] Bluetooth: hci9: command tx timeout [ 371.602976][ T5633] Bluetooth: hci11: command tx timeout [ 371.608753][ T50] Bluetooth: hci3: command tx timeout [ 371.614350][ T5633] Bluetooth: hci5: command tx timeout [ 371.619844][ T5623] Bluetooth: hci10: command tx timeout [ 379.047649][ T1328] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.055775][ T1328] ieee802154 phy1 wpan1: encryption failed: -22 [ 409.763014][ T30] INFO: task kworker/u8:0:12 blocked for more than 143 seconds. [ 409.794269][ T30] Not tainted syzkaller #0 [ 409.814680][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 409.848119][ T30] task:kworker/u8:0 state:D stack:23240 pid:12 tgid:12 ppid:2 task_flags:0x4208060 flags:0x00080000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 409.892948][ T30] Workqueue: events_unbound linkwatch_event [ 409.921667][ T30] Call Trace: [ 409.936352][ T30] [ 409.958939][ T30] __schedule+0x17d9/0x56c0 [ 409.985188][ T30] ? __pfx___schedule+0x10/0x10 [ 409.993357][ T8363] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 410.013401][ T30] ? rcu_is_watching+0x15/0xb0 [ 410.035847][ T30] ? rcu_is_watching+0x15/0xb0 [ 410.064132][ T30] ? lock_release+0x4b/0x3c0 [ 410.080041][ T30] ? wq_worker_sleeping+0x66/0x250 [ 410.101598][ T30] schedule+0x164/0x360 [ 410.115091][ T30] schedule_preempt_disabled+0x13/0x30 [ 410.132617][ T30] __mutex_lock+0x7bf/0x1550 [ 410.156402][ T30] ? __mutex_lock+0x5d4/0x1550 [ 410.174870][ T30] ? linkwatch_event+0xe/0x60 [ 410.193860][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 410.262886][ T30] ? process_scheduled_works+0xa20/0x14e0 [ 410.270370][ T30] ? rcu_is_watching+0x15/0xb0 [ 410.292958][ T30] ? rcu_is_watching+0x15/0xb0 [ 410.297871][ T30] ? process_scheduled_works+0xa20/0x14e0 [ 410.312272][ T30] linkwatch_event+0xe/0x60 [ 410.318009][ T30] process_scheduled_works+0xa8e/0x14e0 [ 410.326858][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 410.333312][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 410.338412][ T30] ? assign_work+0x3cf/0x5d0 [ 410.343456][ T30] worker_thread+0xa47/0xfb0 [ 410.348120][ T30] kthread+0x388/0x470 [ 410.354563][ T30] ? __pfx_worker_thread+0x10/0x10 [ 410.361630][ T30] ? __pfx_kthread+0x10/0x10 [ 410.370232][ T30] ret_from_fork+0x514/0xb70 [ 410.375251][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 410.380435][ T30] ? __switch_to+0xc89/0x1420 [ 410.387873][ T30] ? __pfx_kthread+0x10/0x10 [ 410.392568][ T30] ret_from_fork_asm+0x1a/0x30 [ 410.397857][ T30] [ 410.401239][ T30] INFO: task syz.1.691:8274 blocked for more than 143 seconds. [ 410.409756][ T30] Not tainted syzkaller #0 [ 410.415121][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 410.424232][ T30] task:syz.1.691 state:D stack:24936 pid:8274 tgid:8274 ppid:5645 task_flags:0x400040 flags:0x08080002 [ 410.506708][ T30] Call Trace: [ 410.514425][ T30] [ 410.519682][ T30] __schedule+0x17d9/0x56c0 [ 410.528904][ T30] ? __pfx___schedule+0x10/0x10 [ 410.541523][ T30] ? rcu_is_watching+0x15/0xb0 [ 410.574912][ T30] ? rcu_is_watching+0x15/0xb0 [ 410.579761][ T30] ? lock_release+0x4b/0x3c0 [ 410.587854][ T30] ? rcu_is_watching+0x15/0xb0 [ 410.615188][ T30] schedule+0x164/0x360 [ 410.624691][ T30] schedule_preempt_disabled+0x13/0x30 [ 410.723593][ T30] __mutex_lock+0x7bf/0x1550 [ 410.734471][ T30] ? __mutex_lock+0x5d4/0x1550 [ 410.825101][ T30] ? raw_release+0x1bb/0x9f0 [ 410.830621][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 410.837997][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 410.848304][ T30] ? rcu_is_watching+0x15/0xb0 [ 410.853498][ T30] ? do_raw_spin_unlock+0xf5/0x210 [ 410.858701][ T30] raw_release+0x1bb/0x9f0 [ 410.863682][ T30] sock_close+0xad/0x220 [ 410.869327][ T30] ? __pfx_sock_close+0x10/0x10 [ 410.874359][ T30] __fput+0x418/0xa50 [ 410.882233][ T30] task_work_run+0x1d9/0x270 [ 410.945438][ T30] ? __pfx_task_work_run+0x10/0x10 [ 410.950805][ T30] ? rcu_is_watching+0x15/0xb0 [ 410.955953][ T30] exit_to_user_mode_loop+0x1fa/0x730 [ 410.961811][ T30] ? rcu_is_watching+0x15/0xb0 [ 410.976762][ T30] ? do_fast_syscall_32+0x33/0x70 [ 410.981988][ T30] __do_fast_syscall_32+0x45b/0x6f0 [ 410.987786][ T30] ? do_fast_syscall_32+0x33/0x70 [ 410.993152][ T30] ? asm_int80_emulation+0x1a/0x20 [ 410.998520][ T30] ? do_int80_emulation+0x29f/0x550 [ 411.004370][ T30] do_fast_syscall_32+0x33/0x70 [ 411.009286][ T30] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 411.018693][ T30] RIP: 0023:0xf705f0ec [ 411.023355][ T30] RSP: 002b:00000000f757fb1c EFLAGS: 00000206 ORIG_RAX: 00000000000001b4 [ 411.034769][ T30] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 000000000000001e [ 411.046943][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 411.057642][ T30] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 411.066179][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 411.074867][ T30] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 411.083316][ T30] [ 411.086445][ T30] INFO: task syz.5.693:8280 blocked for more than 144 seconds. [ 411.094558][ T30] Not tainted syzkaller #0 [ 411.099886][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 411.112064][ T30] task:syz.5.693 state:D stack:24760 pid:8280 tgid:8280 ppid:6008 task_flags:0x400040 flags:0x08080002 [ 411.124655][ T30] Call Trace: [ 411.198111][ T30] [ 411.201160][ T30] __schedule+0x17d9/0x56c0 [ 411.212866][ T30] ? __pfx___schedule+0x10/0x10 [ 411.218576][ T30] ? rcu_is_watching+0x15/0xb0 [ 411.223816][ T30] ? rcu_is_watching+0x15/0xb0 [ 411.228633][ T30] ? lock_release+0x4b/0x3c0 [ 411.233769][ T30] ? rcu_is_watching+0x15/0xb0 [ 411.238598][ T30] schedule+0x164/0x360 [ 411.243410][ T30] schedule_preempt_disabled+0x13/0x30 [ 411.249035][ T30] __mutex_lock+0x7bf/0x1550 [ 411.254662][ T30] ? __mutex_lock+0x5d4/0x1550 [ 411.259991][ T30] ? tun_chr_close+0x3e/0x1c0 [ 411.267584][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 411.273754][ T30] ? __pfx_tun_chr_close+0x10/0x10 [ 411.279153][ T30] tun_chr_close+0x3e/0x1c0 [ 411.294252][ T30] ? __pfx_tun_chr_close+0x10/0x10 [ 411.299548][ T30] __fput+0x418/0xa50 [ 411.304160][ T30] task_work_run+0x1d9/0x270 [ 411.308834][ T30] ? __pfx_task_work_run+0x10/0x10 [ 411.314512][ T30] ? rcu_is_watching+0x15/0xb0 [ 411.319333][ T30] exit_to_user_mode_loop+0x1fa/0x730 [ 411.328723][ T30] ? rcu_is_watching+0x15/0xb0 [ 411.334337][ T30] ? do_fast_syscall_32+0x33/0x70 [ 411.339429][ T30] __do_fast_syscall_32+0x45b/0x6f0 [ 411.345208][ T30] ? do_fast_syscall_32+0x33/0x70 [ 411.350467][ T30] ? irqentry_exit+0x10f/0x8f0 [ 411.355821][ T30] do_fast_syscall_32+0x33/0x70 [ 411.361070][ T30] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 411.371400][ T30] RIP: 0023:0xf7fc30ec [ 411.383781][ T30] RSP: 002b:00000000f75afb1c EFLAGS: 00000206 ORIG_RAX: 00000000000001b4 [ 411.392455][ T30] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 000000000000001e [ 411.401059][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 411.412566][ T30] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 411.421003][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 411.429468][ T30] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 411.437936][ T30] [ 411.444522][ T30] INFO: lockdep is turned off. [ 411.452064][ T30] NMI backtrace for cpu 1 [ 411.452084][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 411.452106][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 411.452118][ T30] Call Trace: [ 411.452126][ T30] [ 411.452133][ T30] dump_stack_lvl+0xe8/0x150 [ 411.452159][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 411.452254][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 411.452314][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 411.452337][ T30] sys_info+0x135/0x170 [ 411.452355][ T30] watchdog+0xfd7/0x1030 [ 411.452403][ T30] ? watchdog+0x1c7/0x1030 [ 411.452431][ T30] kthread+0x388/0x470 [ 411.452449][ T30] ? __pfx_watchdog+0x10/0x10 [ 411.452472][ T30] ? __pfx_kthread+0x10/0x10 [ 411.452490][ T30] ret_from_fork+0x514/0xb70 [ 411.452511][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 411.452527][ T30] ? __switch_to+0xc89/0x1420 [ 411.452554][ T30] ? __pfx_kthread+0x10/0x10 [ 411.452573][ T30] ret_from_fork_asm+0x1a/0x30 [ 411.452600][ T30] [ 411.452608][ T30] Sending NMI from CPU 1 to CPUs 0: [ 411.563692][ C0] NMI backtrace for cpu 0 [ 411.563712][ C0] CPU: 0 UID: 0 PID: 4981 Comm: klogd Not tainted syzkaller #0 PREEMPT(full) [ 411.563732][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 411.563740][ C0] RIP: 0010:nf_hook_slow+0x125/0x220 [ 411.563860][ C0] Code: 8b 74 24 10 44 89 e2 89 e9 e8 f7 67 00 00 89 c3 bf 01 00 00 00 89 c6 e8 69 9b 00 f8 83 fb 01 0f 85 c1 00 00 00 e8 1b 97 00 f8 <48> bd 00 00 00 00 00 fc ff df 41 0f b6 04 2e 84 c0 75 21 49 ff c4 [ 411.563881][ C0] RSP: 0018:ffffc90000007130 EFLAGS: 00000246 [ 411.563897][ C0] RAX: ffffffff89c55eca RBX: 0000000000000001 RCX: ffff88807c58be00 [ 411.563908][ C0] RDX: 0000000000000100 RSI: ffffffff8fe4e0e0 RDI: 0000000000000001 [ 411.563919][ C0] RBP: 0000000000000001 R08: ffff88807c58be00 R09: 0000000000000004 [ 411.563928][ C0] R10: 0000000000000003 R11: 0000000000000100 R12: 0000000000000002 [ 411.563938][ C0] R13: ffff888059a69328 R14: 1ffff1100b34d260 R15: ffff888059a69330 [ 411.563949][ C0] FS: 00007fad3f729c80(0000) GS:ffff88812528f000(0000) knlGS:0000000000000000 [ 411.563963][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 411.563974][ C0] CR2: 000055d40cb98850 CR3: 000000007ca10000 CR4: 00000000003526f0 [ 411.563990][ C0] Call Trace: [ 411.563996][ C0] [ 411.564003][ C0] ? __pfx_ip_finish_output+0x10/0x10 [ 411.564089][ C0] nf_hook+0x22a/0x3a0 [ 411.564109][ C0] ? nf_hook+0xa1/0x3a0 [ 411.564127][ C0] ? __pfx_nf_hook+0x10/0x10 [ 411.564146][ C0] ? __pfx_ip_finish_output+0x10/0x10 [ 411.564165][ C0] ? lock_acquire+0x5f/0x350 [ 411.564187][ C0] ? __cookie_v4_init_sequence+0x273/0x510 [ 411.564235][ C0] ip_output+0x269/0x450 [ 411.564254][ C0] ? __pfx_ip_finish_output+0x10/0x10 [ 411.564273][ C0] ? ip_output+0x5a/0x450 [ 411.564293][ C0] synproxy_send_client_synack+0x89b/0xde0 [ 411.564360][ C0] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 411.564381][ C0] ? synproxy_pernet+0x45/0x270 [ 411.564429][ C0] nft_synproxy_eval_v4+0x37b/0x530 [ 411.564452][ C0] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 411.564473][ C0] ? nf_ip_checksum+0x13c/0x510 [ 411.564509][ C0] nft_synproxy_do_eval+0x335/0x550 [ 411.564530][ C0] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 411.564551][ C0] ? perf_event_task_tick+0x12a/0x390 [ 411.564589][ C0] ? rcu_is_watching+0x15/0xb0 [ 411.564607][ C0] nft_do_chain+0x48d/0x1ad0 [ 411.564627][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 411.564643][ C0] ? ipt_do_table+0x2b9/0x15d0 [ 411.564685][ C0] nft_do_chain_inet+0x360/0x4b0 [ 411.564748][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 411.564768][ C0] ? ipt_do_table+0x2b9/0x15d0 [ 411.564791][ C0] ? nf_nat_ipv4_local_in+0x21f/0x720 [ 411.564810][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 411.564832][ C0] nf_hook_slow+0xc5/0x220 [ 411.564852][ C0] NF_HOOK+0x21f/0x3c0 [ 411.564868][ C0] ? __pfx_ipt_do_table+0x10/0x10 [ 411.564882][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 411.564899][ C0] ? NF_HOOK+0x9e/0x3c0 [ 411.564914][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 411.564932][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 411.564950][ C0] ? ip_local_deliver+0x113/0x190 [ 411.564968][ C0] NF_HOOK+0x336/0x3c0 [ 411.564983][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 411.565023][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 411.565039][ C0] ? NF_HOOK+0x9e/0x3c0 [ 411.565054][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 411.565071][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 411.565087][ C0] ? ip_rcv_core+0x88d/0xd50 [ 411.565105][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 411.565121][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 411.565137][ C0] process_backlog+0xa34/0x1860 [ 411.565178][ C0] ? process_backlog+0x3c3/0x1860 [ 411.565198][ C0] __napi_poll+0xaa/0x330 [ 411.565214][ C0] net_rx_action+0x61d/0xf50 [ 411.565233][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 411.565258][ C0] handle_softirqs+0x225/0x840 [ 411.565284][ C0] ? do_softirq+0x76/0xd0 [ 411.565303][ C0] ? __alloc_skb+0x189/0x7a0 [ 411.565339][ C0] ? __alloc_skb+0x189/0x7a0 [ 411.565359][ C0] do_softirq+0x76/0xd0 [ 411.565376][ C0] [ 411.565382][ C0] [ 411.565388][ C0] __local_bh_enable_ip+0xf8/0x130 [ 411.565406][ C0] __alloc_skb+0x1ad/0x7a0 [ 411.565424][ C0] alloc_skb_with_frags+0xc6/0x760 [ 411.565464][ C0] sock_alloc_send_pskb+0x878/0x990 [ 411.565491][ C0] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 411.565511][ C0] ? lock_release+0x4b/0x3c0 [ 411.565530][ C0] ? rcu_is_watching+0x15/0xb0 [ 411.565548][ C0] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 411.565568][ C0] unix_dgram_sendmsg+0x4da/0x17b0 [ 411.565623][ C0] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 411.565641][ C0] ? aa_sock_msg_perm+0xda/0x1b0 [ 411.565722][ C0] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 411.565739][ C0] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 411.565756][ C0] __sys_sendto+0x626/0x6c0 [ 411.565781][ C0] ? __pfx___sys_sendto+0x10/0x10 [ 411.565807][ C0] ? rcu_is_watching+0x15/0xb0 [ 411.565824][ C0] __x64_sys_sendto+0xde/0x100 [ 411.565841][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.565857][ C0] do_syscall_64+0x174/0x580 [ 411.565876][ C0] ? clear_bhb_loop+0x40/0x90 [ 411.565892][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.565906][ C0] RIP: 0033:0x7fad3f879407 [ 411.565921][ C0] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 411.565934][ C0] RSP: 002b:00007ffe6ec49960 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 411.565950][ C0] RAX: ffffffffffffffda RBX: 00007fad3f729c80 RCX: 00007fad3f879407 [ 411.565961][ C0] RDX: 0000000000000050 RSI: 00007ffe6ec49aa0 RDI: 0000000000000003 [ 411.565972][ C0] RBP: 00007ffe6ec49ed0 R08: 0000000000000000 R09: 0000000000000000 [ 411.565981][ C0] R10: 0000000000004000 R11: 0000000000000202 R12: 00007ffe6ec49ee8 [ 411.565992][ C0] R13: 00007ffe6ec49aa0 R14: 0000000000000035 R15: 00007ffe6ec49aa0 [ 411.566008][ C0] [ 412.371968][ T8363] Bluetooth: hci13: Opcode 0x0c03 failed: -110 [ 412.378270][ T8366] Bluetooth: hci2: command 0x0406 tx timeout [ 412.384402][ T8363] Bluetooth: hci6: command 0x0406 tx timeout [ 412.390460][ T8366] Bluetooth: hci7: command 0x0406 tx timeout [ 412.396519][ T8363] Bluetooth: hci8: command 0x0406 tx timeout [ 412.402734][ T8366] Bluetooth: hci12: command 0x1003 tx timeout [ 412.411148][ T8363] Bluetooth: hci1: command 0x0406 tx timeout [ 412.417387][ T8347] Bluetooth: hci12: Opcode 0x1003 failed: -110 [ 412.426575][ T8355] Bluetooth: hci12: Opcode 0x0c03 failed: -4 [ 412.449561][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 412.456644][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 412.466481][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 412.476652][ T30] Call Trace: [ 412.479958][ T30] [ 412.482932][ T30] vpanic+0x56c/0xa60 [ 412.486987][ T30] ? __pfx___schedule+0x10/0x10 [ 412.491868][ T30] ? __pfx_vpanic+0x10/0x10 [ 412.496393][ T30] ? nmi_trigger_cpumask_backtrace+0x1f4/0x300 [ 412.502579][ T30] panic+0xc5/0xd0 [ 412.506327][ T30] ? __pfx_panic+0x10/0x10 [ 412.510783][ T30] ? preempt_schedule_common+0x82/0xd0 [ 412.516361][ T30] ? preempt_schedule_thunk+0x16/0x40 [ 412.521779][ T30] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 412.527961][ T30] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 412.534146][ T30] watchdog+0x1030/0x1030 [ 412.538514][ T30] ? watchdog+0x1c7/0x1030 [ 412.542962][ T30] kthread+0x388/0x470 [ 412.547057][ T30] ? __pfx_watchdog+0x10/0x10 [ 412.551758][ T30] ? __pfx_kthread+0x10/0x10 [ 412.556376][ T30] ret_from_fork+0x514/0xb70 [ 412.560980][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 412.566117][ T30] ? __switch_to+0xc89/0x1420 [ 412.570829][ T30] ? __pfx_kthread+0x10/0x10 [ 412.575439][ T30] ret_from_fork_asm+0x1a/0x30 [ 412.580234][ T30] [ 412.583429][ T30] Kernel Offset: disabled [ 412.587750][ T30] Rebooting in 86400 seconds..